usebeeline 0.1.14 → 0.1.17

package/dist/usebeeline.mjs

@@ -212,8 +212,8 @@ async function runSquireBrokerLink(options) {
   const pending = /* @__PURE__ */ new Map();
   const queued = [];
   let resolveDone;
-  const done = new Promise((resolve44) => {
-    resolveDone = resolve44;
+  const done = new Promise((resolve45) => {
+    resolveDone = resolve45;
   });
   const failResponse = (id) => `${JSON.stringify({
     jsonrpc: "2.0",
@@ -13472,91 +13472,6 @@ import { fileURLToPath } from "node:url";
 import { spawn } from "node:child_process";
 import { readFile } from "node:fs/promises";
 import { createInterface } from "node:readline";
-
-// packages/api-contract/dist/app-connections.js
-var APP_KEY_MAX_LENGTH = 63;
-var APP_INPUT_MAX_LENGTH = 200;
-var SECOND_LEVEL_SUFFIXES = /* @__PURE__ */ new Set(["co", "com", "net", "org", "gov", "edu", "ac"]);
-function alnum(value) {
-  return value.normalize("NFKD").toLowerCase().replace(/[^a-z0-9]/g, "").slice(0, APP_KEY_MAX_LENGTH);
-}
-function hostOf(value) {
-  const trimmed = value.trim().toLowerCase();
-  if (!trimmed)
-    return void 0;
-  if (trimmed.includes("://")) {
-    try {
-      return new URL(trimmed).hostname || void 0;
-    } catch {
-      return void 0;
-    }
-  }
-  const host = trimmed.split(/[/?#]/)[0].replace(/:\d+$/, "").replace(/\.$/, "");
-  return /^[a-z0-9-]+(\.[a-z0-9-]+)+$/.test(host) ? host : void 0;
-}
-function registrableDomain(host) {
-  const labels = host.toLowerCase().split(".").filter(Boolean);
-  if (labels.length < 2)
-    return void 0;
-  if (labels.every((label) => /^\d+$/.test(label)))
-    return void 0;
-  const penultimate = labels[labels.length - 2];
-  const keep = labels.length >= 3 && SECOND_LEVEL_SUFFIXES.has(penultimate) ? 3 : 2;
-  return labels.slice(-keep).join(".");
-}
-function brandOfDomain(domain) {
-  const key = alnum(domain.split(".")[0] ?? "");
-  return key || void 0;
-}
-function appIdentity(input) {
-  const text2 = input.trim();
-  if (!text2 || text2.length > APP_INPUT_MAX_LENGTH)
-    return void 0;
-  const host = hostOf(text2);
-  if (host) {
-    const domain = registrableDomain(host);
-    const key2 = domain ? brandOfDomain(domain) : void 0;
-    return key2 && domain ? { key: key2, domain } : void 0;
-  }
-  const key = alnum(text2);
-  return key ? { key } : void 0;
-}
-function appKeyForHost(value) {
-  const host = hostOf(value);
-  const domain = host ? registrableDomain(host) : void 0;
-  return domain ? brandOfDomain(domain) : void 0;
-}
-function squireCallAppKeys(args) {
-  if (!args)
-    return [];
-  const keys = /* @__PURE__ */ new Set();
-  const service = args.service;
-  if (typeof service === "string") {
-    const identity = appIdentity(service);
-    if (identity)
-      keys.add(identity.key);
-  }
-  const urls = [args.url, args.signin_url];
-  const http = args.http;
-  if (http && typeof http === "object" && !Array.isArray(http))
-    urls.push(http.url);
-  for (const url of urls) {
-    if (typeof url !== "string" || url.length > 2048)
-      continue;
-    const key = appKeyForHost(url);
-    if (key)
-      keys.add(key);
-  }
-  return [...keys].sort();
-}
-
-// packages/api-contract/dist/workbench.js
-var CONNECTABLE_CONNECTOR_KINDS = [
-  "trusty-squire",
-  "tailscale"
-];
-
-// apps/body/dist/resource-mcp-facade.js
 var RESOURCE_FACADE_FLAG = "--resource-mcp-facade";
 function resourceFacadeArgs() {
   const meta = "usebeeline:npm";
@@ -13891,16 +13806,11 @@ async function postSquireLoginWall(wall, authFile, fetchImpl = fetch) {
     signal: AbortSignal.timeout(2e4)
   });
 }
-function resourceCallFacts(message, target) {
+function resourceCallFacts(message) {
   if (message.method !== "tools/call")
     return {};
-  const params = record(message.params);
-  const tool = shortString(params?.name);
-  const appKeys = target === "squire" ? squireCallAppKeys(record(params?.arguments)) : [];
-  return {
-    ...tool ? { operation: tool } : {},
-    ...appKeys.length ? { appKeys } : {}
-  };
+  const tool = shortString(record(message.params)?.name);
+  return tool ? { operation: tool } : {};
 }
 async function authorizeResourceMessage(message, target, authFile, spendsGrant = true, fetchImpl = fetch) {
   if (!message || Array.isArray(message) || typeof message !== "object")
@@ -13922,7 +13832,7 @@ async function authorizeResourceMessage(message, target, authFile, spendsGrant =
       ...context,
       target,
       ...spendsGrant && !NON_CONSUMING.has(message.method) ? {} : { consume: false },
-      ...resourceCallFacts(message, target)
+      ...resourceCallFacts(message)
     }),
     signal: AbortSignal.timeout(2e4)
   });
@@ -14126,7 +14036,7 @@ function configureNetworkFamilyDefaults(network = net) {
 configureNetworkFamilyDefaults();
 
 // apps/body/dist/cli.js
-import { dirname as dirname31, resolve as resolve43 } from "node:path";
+import { dirname as dirname31, resolve as resolve44 } from "node:path";
 import { stdin as stdin4, stdout as stdout5 } from "node:process";
 
 // node_modules/@clack/core/dist/index.mjs
@@ -15566,7 +15476,7 @@ function parseCursorModelsOutput(output) {
   };
 }
 async function enumerateCursorModels(env = process.env) {
-  return new Promise((resolve44) => {
+  return new Promise((resolve45) => {
     const child = spawn2("cursor-agent", ["models"], {
       env,
       stdio: ["ignore", "pipe", "ignore"]
@@ -15580,11 +15490,11 @@ async function enumerateCursorModels(env = process.env) {
     });
     child.on("error", () => {
       clearTimeout(timer);
-      resolve44(void 0);
+      resolve45(void 0);
     });
     child.on("close", (code) => {
       clearTimeout(timer);
-      resolve44(code === 0 ? parseCursorModelsOutput(output) : void 0);
+      resolve45(code === 0 ? parseCursorModelsOutput(output) : void 0);
     });
   });
 }
@@ -16011,13 +15921,13 @@ var CursorAcpServer = class {
         consumeLine(line);
     });
     try {
-      const { code, signal } = await new Promise((resolve44) => {
+      const { code, signal } = await new Promise((resolve45) => {
         let settled = false;
         const finish = (exitCode, exitSignal) => {
           if (settled)
             return;
           settled = true;
-          resolve44({ code: exitCode, signal: exitSignal });
+          resolve45({ code: exitCode, signal: exitSignal });
         };
         child.once("error", (error) => {
           spawnError = error instanceof Error ? error.message : String(error);
@@ -16162,10 +16072,10 @@ function releaseSquireConnectSession(log2, owner = "") {
 function squireChromeProfileDir() {
   return process.env.TRUSTY_SQUIRE_PROFILE_DIR ?? squireHostPaths(homedir2()).profileDir;
 }
-var defaultShellRunner = (command, args) => new Promise((resolve44) => {
+var defaultShellRunner = (command, args) => new Promise((resolve45) => {
   execFile(command, [...args], { timeout: 12e4, maxBuffer: 4 * 1024 * 1024, encoding: "utf8" }, (error, stdout6, stderr) => {
     const code = error?.code;
-    resolve44({
+    resolve45({
       code: typeof code === "number" ? code : error ? 1 : 0,
       stdout: String(stdout6 ?? ""),
       stderr: String(stderr ?? "")
@@ -16190,7 +16100,7 @@ function killConnectTree(child) {
   }
   child.kill();
 }
-var defaultStreamedRunner = (command, args, env, owner = "") => new Promise((resolve44) => {
+var defaultStreamedRunner = (command, args, env, owner = "") => new Promise((resolve45) => {
   const child = spawn5(command, args, {
     stdio: ["ignore", "pipe", "pipe"],
     env: env ?? squireConnectProcessEnv(),
@@ -16204,7 +16114,7 @@ var defaultStreamedRunner = (command, args, env, owner = "") => new Promise((res
   const safetyTimer = setTimeout(() => {
     if (!resolved) {
       resolved = true;
-      resolve44({ stdout: stdout6, stderr, pid: child.pid ?? void 0, report, abort: () => {
+      resolve45({ stdout: stdout6, stderr, pid: child.pid ?? void 0, report, abort: () => {
       } });
     }
     killConnectTree(child);
@@ -16239,7 +16149,7 @@ var defaultStreamedRunner = (command, args, env, owner = "") => new Promise((res
   const finish = (result) => {
     if (!resolved) {
       resolved = true;
-      resolve44(result);
+      resolve45(result);
     }
   };
   const settle = (result) => {
@@ -16729,12 +16639,12 @@ var StdioSquireMcpClient = class {
     const child = this.child;
     if (!child)
       return Promise.reject(new Error("Squire MCP session is not running"));
-    return new Promise((resolve44, reject) => {
+    return new Promise((resolve45, reject) => {
       const timer = setTimeout(() => {
         this.pending.delete(id);
         reject(new Error(`${method} timed out`));
       }, method === "initialize" ? INITIALIZE_TIMEOUT_MS : CALL_TIMEOUT_MS);
-      this.pending.set(id, { resolve: resolve44, reject, timer });
+      this.pending.set(id, { resolve: resolve45, reject, timer });
       child.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", id, method, params })}
 `);
     });
@@ -16896,9 +16806,9 @@ var SquireTaskRelay = class {
           response.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: error instanceof Error ? error.message : "Squire relay failed" }));
         }
       });
-      await new Promise((resolve44, reject) => {
+      await new Promise((resolve45, reject) => {
         server.once("error", reject);
-        server.listen(0, "127.0.0.1", resolve44);
+        server.listen(0, "127.0.0.1", resolve45);
       });
       this.server = server;
       const address = server.address();
@@ -17905,11 +17815,11 @@ var RegistryMcpHostBroker = class {
         })();
       });
     });
-    await new Promise((resolve44, reject) => {
+    await new Promise((resolve45, reject) => {
       this.server.once("error", reject);
       this.server.listen(this.socketPath, () => {
         this.server.off("error", reject);
-        resolve44();
+        resolve45();
       });
     });
     chmodSync(this.socketPath, 384);
@@ -17918,12 +17828,12 @@ var RegistryMcpHostBroker = class {
     const server = this.server;
     this.server = void 0;
     if (server)
-      await new Promise((resolve44) => server.close(() => resolve44()));
+      await new Promise((resolve45) => server.close(() => resolve45()));
     rmSync(this.socketPath, { force: true });
   }
 };
 async function brokerRequest(socketPath, request) {
-  return new Promise((resolve44, reject) => {
+  return new Promise((resolve45, reject) => {
     const socket = createConnection3(socketPath);
     let output = "";
     socket.setEncoding("utf8");
@@ -17940,7 +17850,7 @@ async function brokerRequest(socketPath, request) {
           throw new Error(parsed.error);
         if (!Array.isArray(parsed.messages) || !parsed.messages.every((entry) => typeof entry === "string"))
           throw new Error("Registry MCP broker returned an invalid response");
-        resolve44(parsed.messages);
+        resolve45(parsed.messages);
       } catch (error) {
         reject(error);
       }
@@ -18429,17 +18339,7 @@ var import_websocket = __toESM(require_websocket(), 1);
 var import_websocket_server = __toESM(require_websocket_server(), 1);
 var wrapper_default = import_websocket.default;
 
-// apps/body/dist/live-link.js
-var LIVE_LINK_TIMING = Object.freeze({
-  handshakeTimeoutMs: 3e4,
-  pongTimeoutMs: 15e3,
-  backoffBaseMs: 1e3,
-  backoffMaxMs: 3e4,
-  stableSocketMs: 3e4,
-  stableCloseJitterMs: 1e4,
-  keepAliveDelayMs: 5 * 6e4,
-  heartbeatTimeoutMs: 75e3
-});
+// apps/body/dist/network-failure.js
 var NETWORK_ERROR_CODES = /* @__PURE__ */ new Set([
   "ECONNRESET",
   "ECONNREFUSED",
@@ -18466,6 +18366,18 @@ function isNetworkFailure(error) {
   };
   return visit(error);
 }
+
+// apps/body/dist/live-link.js
+var LIVE_LINK_TIMING = Object.freeze({
+  handshakeTimeoutMs: 3e4,
+  pongTimeoutMs: 15e3,
+  backoffBaseMs: 1e3,
+  backoffMaxMs: 3e4,
+  stableSocketMs: 3e4,
+  stableCloseJitterMs: 1e4,
+  keepAliveDelayMs: 5 * 6e4,
+  heartbeatTimeoutMs: 75e3
+});
 function retryAfterMs(value) {
   if (!value)
     return void 0;
@@ -19407,7 +19319,7 @@ var AgentSignIn = class {
     };
     for (const name of ISOLATION_VARIABLES)
       delete env[name];
-    return new Promise((resolve44, reject) => {
+    return new Promise((resolve45, reject) => {
       let output = "";
       let answered = false;
       let child;
@@ -19448,7 +19360,7 @@ var AgentSignIn = class {
           return;
         answered = true;
         clearTimeout(linkTimer);
-        resolve44(link2);
+        resolve45(link2);
       };
       child.stdout?.on("data", read2);
       child.stderr?.on("data", read2);
@@ -29290,13 +29202,13 @@ var RoomSupervisor = class {
    */
   retryDelay(failures, signal, since = this.#wakes) {
     const delay = this.delaysMs[failures - 1];
-    return new Promise((resolve44) => {
+    return new Promise((resolve45) => {
       let timer;
       const done = () => {
         clearTimeout(timer);
         this.#parked.delete(done);
         signal?.removeEventListener("abort", done);
-        resolve44();
+        resolve45();
       };
       this.#parked.add(done);
       signal?.addEventListener("abort", done, { once: true });
@@ -29488,12 +29400,12 @@ async function retryBeforeReady(work, options) {
           if (wait2 <= 0)
             break;
           await options.extendStartTimeout(wait2 + 15e3);
-          await new Promise((resolve44) => {
+          await new Promise((resolve45) => {
             const timer = setTimeout(done, wait2);
             function done() {
               clearTimeout(timer);
               options.signal?.removeEventListener("abort", done);
-              resolve44();
+              resolve45();
             }
             wake = done;
             options.signal?.addEventListener("abort", done, { once: true });
@@ -30357,8 +30269,8 @@ var AcpClient = class extends EventEmitter {
       try {
         oomKilled = await Promise.race([
           this.oomKills.consume().catch(() => false),
-          new Promise((resolve44) => {
-            diagnosticTimer = setTimeout(() => resolve44(false), 100);
+          new Promise((resolve45) => {
+            diagnosticTimer = setTimeout(() => resolve45(false), 100);
           })
         ]);
       } finally {
@@ -30782,7 +30694,7 @@ var AcpClient = class extends EventEmitter {
     const current = this.activeRunIds.get(sessionId);
     if (current)
       return Promise.resolve(current);
-    return new Promise((resolve44, reject) => {
+    return new Promise((resolve45, reject) => {
       const onUpdate = (update) => {
         if (update.sessionId !== sessionId)
           return;
@@ -30790,7 +30702,7 @@ var AcpClient = class extends EventEmitter {
         if (!runId)
           return;
         cleanup();
-        resolve44(runId);
+        resolve45(runId);
       };
       const timer = setTimeout(() => {
         cleanup();
@@ -30869,14 +30781,14 @@ var AcpClient = class extends EventEmitter {
     }
     const id = this.nextId++;
     const payload = { jsonrpc: "2.0", id, method, params };
-    return new Promise((resolve44, reject) => {
+    return new Promise((resolve45, reject) => {
       const timer = backstop ? void 0 : setTimeout(() => {
         this.pending.delete(id);
         reject(new AcpRequestTimeoutError(method, timeoutMs, this.stderrTail, false, detail));
       }, timeoutMs);
       const sessionId = params?.sessionId;
       this.pending.set(id, {
-        resolve: resolve44,
+        resolve: resolve45,
         reject,
         timer,
         method,
@@ -30907,7 +30819,7 @@ var AcpClient = class extends EventEmitter {
 
 // apps/body/dist/agent-home.js
 var import_yaml2 = __toESM(require_dist(), 1);
-import { existsSync as existsSync7, readFileSync as readFileSync5 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync5, watch } from "node:fs";
 
 // node_modules/smol-toml/dist/date.js
 var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
@@ -32052,6 +31964,12 @@ function interpreterScriptArgument(argv) {
   return void 0;
 }
 
+// packages/api-contract/dist/workbench.js
+var CONNECTABLE_CONNECTOR_KINDS = [
+  "trusty-squire",
+  "tailscale"
+];
+
 // packages/api-contract/dist/connector-offers.js
 var CONNECTOR_OFFER_WINDOW_MS = 2 * 6e4;
 var OFFERABLE_CONNECTOR_KINDS = [
@@ -32394,17 +32312,21 @@ function cornerHasRepositoryWork(brief) {
     return true;
   if (brief.repositoryWork !== void 0)
     return brief.repositoryWork;
-  const nonGoals = brief.spec.match(/^## Non-goals\s*\n([\s\S]*?)(?=^## |$(?![\s\S]))/mi)?.[1] ?? "";
-  const prohibition = /^(?:repository edits?|pull requests?|(?:edit|modify|change) (?:the )?repository)[.!;]*$/i;
-  for (const line of nonGoals.split("\n")) {
-    const bullet = /^\s*[-*]\s+/.test(line);
-    const clause = line.trim().replace(/^[-*]\s+/, "");
-    const negative = /^(?:no|never|do not|forbid(?:s|den)?)\s+/i;
-    if (!bullet && !negative.test(clause))
-      continue;
-    const items = clause.replace(negative, "").split(/,\s*|\s+(?:and|or)\s+/i);
-    if (items.some((item) => prohibition.test(item.trim())))
-      return false;
+  const nonGoalsSections = [
+    ...brief.spec.matchAll(/^## (?:Non-goals|Not doing)\s*\n([\s\S]*?)(?=^## |$(?![\s\S]))/gim)
+  ].map((match) => match[1] ?? "");
+  const prohibition = /^(?:repository edits?|repository changes?|pull requests?|(?:edit|modify|change) (?:the )?(?:repository|repo|code)|push(?:es)?|commit(?:s)?)[.!;]*$/i;
+  for (const nonGoals of nonGoalsSections) {
+    for (const line of nonGoals.split("\n")) {
+      const bullet = /^\s*[-*]\s+/.test(line);
+      const clause = line.trim().replace(/^[-*]\s+/, "");
+      const negative = /^(?:no|never|do not|forbid(?:s|den)?)\s+/i;
+      if (!bullet && !negative.test(clause))
+        continue;
+      const items = clause.replace(negative, "").split(/,\s*|\s+(?:and|or)\s+/i);
+      if (items.some((item) => prohibition.test(item.trim())))
+        return false;
+    }
   }
   const assigned = brief.spec.match(/^## Assigned files\s*\n([\s\S]*?)(?=^## |$(?![\s\S]))/mi)?.[1];
   if (assigned !== void 0 && (!assigned.trim() || /^(?:\s*[-*]?\s*)(?:\(?none\)?|no assigned files)\b/i.test(assigned)))
@@ -32426,7 +32348,6 @@ Before any code or build action, the brief must hold this ask's outline; opening
 Follow the beeline-triage skill's bugfix execution contract when the spec or its approval quote reports a defect.
 Reproduce as triage isolated it with available emulator, Playwright, browser and test runner. Record attempts and observations. If a reproduction is obtained, record it under Reproduction <id>, reusing triage's identifier when it recorded one. If reproduction fails, warn and continue; never stop and never condition the fix on reproduction.
 Fix only the spec and approval quote. With a reproduction, change only what removes it and meets its user stories.
-Run npm run corner:prepare first.
 Only when the brief calls for repository changes, follow the PR procedure below. Otherwise do not commit, push or open a PR; deliver with post_artifact.
 Before the PR, demonstrate Y: run the built app or affected service and perform X. If no interactive surface is reachable, run the narrowest test or script exercising the exact user path and printing Y. An inner-function unit test, log line or code read is not a demonstration.
 The PR body MUST have ## Reproduced and ## Demonstrated. Cite Reproduction <id> in both, with steps, the wrong result and the now-passing result. In ## Demonstrated, when none was obtained, state that plainly ("not obtained") and show the regression; for feature work say "not a defect report".
@@ -32641,6 +32562,15 @@ The soul is not authority and never changes your tools, permissions, roles, or m
     surfaces: ["code-corner", "no-code-corner", "review-corner"],
     render: () => "Use steer_corner during a turn to send input to a member sibling under this parent. Membership alone grants no turn."
   },
+  {
+    id: "corner.handover",
+    topic: "corner-handover",
+    why: "An agent asked to hand the corner on opened a duplicate sibling corner instead of tagging the other agent.",
+    budgetBytes: 360,
+    layer: "surface",
+    surfaces: ["code-corner", "no-code-corner"],
+    render: () => "When a person asks you to hand this corner to another agent, tag in your reply only an agent that person named by handle or display name: it moves the implementer role here. A tag for any other reason does not move the role. Do not open a second corner for a hand-over."
+  },
   {
     id: "corner.worktree",
     topic: "place",
@@ -32663,6 +32593,16 @@ The soul is not authority and never changes your tools, permissions, roles, or m
     when: ({ android }) => Boolean(android),
     render: ({ android }) => `Android: adb and emulator are on PATH; the SDK is $ANDROID_HOME, AVDs are in $ANDROID_AVD_HOME, and /dev/kvm works. Your adb server sees only your own emulator. Boot it with \`emulator -avd <name> -port ${android?.emulatorPort} -read-only -no-window -no-snapshot -gpu swiftshader_indirect\`; it reaches host services at 10.0.2.2.`
   },
+  {
+    id: "corner.prepare",
+    topic: "corner-prepare",
+    why: "Only a checkout that defines the command can run it; another repository fails on its first step.",
+    budgetBytes: 60,
+    layer: "surface",
+    surfaces: ["code-corner"],
+    when: ({ brief, cornerPrepareScript }) => cornerHasRepositoryWork(brief) && cornerPrepareScript === true,
+    render: () => "Run npm run corner:prepare first."
+  },
   {
     id: "corner.contract",
     topic: "author-contract",
@@ -34309,6 +34249,32 @@ async function writeBackRoomClaudeLogin(input) {
     return;
   await writeBackDetachedClaudeLogin(target, source);
 }
+function watchRoomClaudeLogin(input) {
+  const claude = SHARED_CREDENTIALS.find((credential) => credential.dir === "claude");
+  if (!existsSync7(resolve16(input.operatorHome ?? homedir11(), claude.source)))
+    return void 0;
+  const dir = resolve16(input.root, claude.dir);
+  let pass = Promise.resolve();
+  let watcher;
+  try {
+    watcher = watch(dir, (_event, filename) => {
+      if (filename !== claude.target)
+        return;
+      pass = pass.then(() => writeBackRoomClaudeLogin(input)).catch((error) => {
+        console.error(`[body] could not write back a refreshed Claude login under ${dir}:`, error);
+      });
+    });
+  } catch (error) {
+    console.error(`[body] could not watch the Claude login under ${dir}:`, error);
+    return void 0;
+  }
+  watcher.on("error", (error) => {
+    console.error(`[body] stopped watching the Claude login under ${dir}:`, error);
+    watcher.close();
+  });
+  watcher.unref();
+  return watcher;
+}
 async function prepareRoomAgentHome(input) {
   const root = resolve16(input.root);
   const operatorHome = input.operatorHome ?? homedir11();
@@ -35450,7 +35416,7 @@ function clearInstallFailure(stateDir) {
   } catch {
   }
 }
-var runSandboxInstallCommand = (command, args) => new Promise((resolve44) => {
+var runSandboxInstallCommand = (command, args) => new Promise((resolve45) => {
   execFile6(command, [...args], {
     timeout: INSTALL_TIMEOUT_MS,
     maxBuffer: INSTALL_OUTPUT_LIMIT * 2,
@@ -35460,7 +35426,7 @@ var runSandboxInstallCommand = (command, args) => new Promise((resolve44) => {
   }, (error, stdout6, stderr) => {
     const code = error && "code" in error && typeof error.code === "number" ? error.code : error ? null : 0;
     const output = [stdout6, stderr].join("").trim();
-    resolve44({ code, output: output || (error ? error.message : "") });
+    resolve45({ code, output: output || (error ? error.message : "") });
   });
 });
 function lastLine2(output, fallback) {
@@ -36204,7 +36170,7 @@ function describeCurrentReleaseOutcome(outcome) {
 async function retryWhileAdapterReinstalls(run2, options = {}) {
   const attempts = options.attempts ?? 12;
   const delayMs = options.delayMs ?? 5e3;
-  const sleep4 = options.sleep ?? ((ms) => new Promise((resolve44) => setTimeout(resolve44, ms)));
+  const sleep4 = options.sleep ?? ((ms) => new Promise((resolve45) => setTimeout(resolve45, ms)));
   for (let attempt = 1; ; attempt += 1) {
     try {
       return await run2();
@@ -38826,7 +38792,7 @@ async function probeReleaseInSubprocess(input) {
     return { kind: "unavailable", reason: `release ${input.releaseId} has no runnable CLI entrypoint` };
   }
   const timeoutMs = input.timeoutMs ?? CURRENT_RELEASE_PROBE_TIMEOUT_MS;
-  return new Promise((resolve44) => {
+  return new Promise((resolve45) => {
     const child = spawn14(input.execPath ?? process.execPath, [entrypoint, UPDATE_PROBE_COMMAND, "--config", input.runtimeConfigPath], { env: input.env ?? process.env, stdio: ["ignore", "pipe", "pipe"] });
     let stdout6 = "";
     let stderr = "";
@@ -38836,7 +38802,7 @@ async function probeReleaseInSubprocess(input) {
         return;
       settled = true;
       clearTimeout(timer);
-      resolve44(outcome);
+      resolve45(outcome);
     };
     const timer = setTimeout(() => {
       child.kill("SIGKILL");
@@ -38921,7 +38887,7 @@ import { dirname as dirname30 } from "node:path";
 
 // apps/body/dist/agent-runtime.js
 import { homedir as homedir19 } from "node:os";
-import { dirname as dirname29, join as join21, resolve as resolve42 } from "node:path";
+import { dirname as dirname29, join as join21, resolve as resolve43 } from "node:path";
 
 // apps/body/dist/model-availability.js
 var SECRET_VALUE = /(?:token|key|secret|password)=?[^\s,;]*/gi;
@@ -39055,10 +39021,10 @@ var LOGIN_URL = /https:\/\/login\.tailscale\.com\/[A-Za-z0-9_/-]+/u;
 function clipped(value) {
   return value.length <= OUTPUT_LIMIT ? value : value.slice(value.length - OUTPUT_LIMIT);
 }
-var runTailscaleCommand = (command, args) => new Promise((resolve44) => {
+var runTailscaleCommand = (command, args) => new Promise((resolve45) => {
   execFile7(command, [...args], { timeout: COMMAND_TIMEOUT_MS, maxBuffer: OUTPUT_LIMIT * 2 }, (error, stdout6, stderr) => {
     const code = error && "code" in error && typeof error.code === "number" ? error.code : error ? null : 0;
-    resolve44({ code, stdout: clipped(stdout6), stderr: clipped(stderr) });
+    resolve45({ code, stdout: clipped(stdout6), stderr: clipped(stderr) });
   });
 });
 function loginUrlFrom(status, output) {
@@ -39622,7 +39588,7 @@ import { execFile as execFile13 } from "node:child_process";
 import { createHash as createHash15 } from "node:crypto";
 import { existsSync as existsSync10, mkdirSync as mkdirSync3 } from "node:fs";
 import { mkdir as mkdir27, readdir as readdir9, realpath as realpath2, rm as rm15 } from "node:fs/promises";
-import { dirname as dirname27, relative as relative3, resolve as resolve37, sep as sep2 } from "node:path";
+import { dirname as dirname27, relative as relative3, resolve as resolve38, sep as sep2 } from "node:path";
 import { promisify as promisify8 } from "node:util";
 
 // apps/body/dist/grant-runner.js
@@ -40342,11 +40308,11 @@ async function runServerCommandIntake(options) {
               if (attempt === 3)
                 throw error;
               const waitMs = Math.max(250 * 2 ** attempt, error instanceof DaemonApiError ? error.retryAfterMs ?? 0 : 0);
-              await new Promise((resolve44) => {
+              await new Promise((resolve45) => {
                 const done = () => {
                   clearTimeout(timer);
                   signal?.removeEventListener("abort", done);
-                  resolve44();
+                  resolve45();
                 };
                 const timer = setTimeout(done, waitMs);
                 signal?.addEventListener("abort", done, { once: true });
@@ -40437,11 +40403,11 @@ async function runServerCommandIntake(options) {
         }
       }
       options.onPoll?.();
-      const reconcile = await new Promise((resolve44) => {
+      const reconcile = await new Promise((resolve45) => {
         const done = (needed) => {
           signal?.removeEventListener("abort", aborted);
           wake = void 0;
-          resolve44(needed);
+          resolve45(needed);
         };
         const aborted = () => done(false);
         wake = done;
@@ -40484,9 +40450,9 @@ async function runServerCommandIntake(options) {
 import { execFile as execFile12 } from "node:child_process";
 import { createHash as createHash14 } from "node:crypto";
 import { existsSync as existsSync9 } from "node:fs";
-import { mkdir as mkdir26, readFile as readFile29, writeFile as writeFile20 } from "node:fs/promises";
+import { mkdir as mkdir26, readFile as readFile30, writeFile as writeFile20 } from "node:fs/promises";
 import { homedir as homedir18, hostname as hostname3 } from "node:os";
-import { dirname as dirname26, join as join20, resolve as resolve36 } from "node:path";
+import { dirname as dirname26, join as join20, resolve as resolve37 } from "node:path";
 import { promisify as promisify7 } from "node:util";
 
 // apps/body/dist/agent-command-catalog.js
@@ -41111,6 +41077,8 @@ function sessionConfigFingerprint(input) {
   ];
   if (input.repositoryWork !== void 0)
     fingerprint.push({ repositoryWork: input.repositoryWork });
+  if (input.cornerPrepareScript !== void 0)
+    fingerprint.push({ cornerPrepareScript: input.cornerPrepareScript });
   if (input.reviewerHandle !== void 0)
     fingerprint.push(input.reviewerHandle);
   if (input.devices?.length)
@@ -41121,11 +41089,24 @@ function mountedMcpSet(servers) {
   return [...new Set(servers ?? [])].sort((left, right) => left.localeCompare(right));
 }
 
+// apps/body/dist/corner-prepare-script.js
+import { readFile as readFile25 } from "node:fs/promises";
+import { resolve as resolve29 } from "node:path";
+var CORNER_PREPARE_SCRIPT = "corner:prepare";
+async function hasCornerPrepareScript(worktreePath) {
+  try {
+    const parsed = JSON.parse(await readFile25(resolve29(worktreePath, "package.json"), "utf8"));
+    return typeof parsed.scripts?.[CORNER_PREPARE_SCRIPT] === "string";
+  } catch {
+    return false;
+  }
+}
+
 // apps/body/dist/pi-mcp-bridge.js
 import { execFile as execFile9 } from "node:child_process";
-import { mkdtemp as mkdtemp2, mkdir as mkdir20, readFile as readFile25, rm as rm12, unlink as unlink8 } from "node:fs/promises";
+import { mkdtemp as mkdtemp2, mkdir as mkdir20, readFile as readFile26, rm as rm12, unlink as unlink8 } from "node:fs/promises";
 import { tmpdir as tmpdir5 } from "node:os";
-import { resolve as resolve29 } from "node:path";
+import { resolve as resolve30 } from "node:path";
 import { promisify as promisify5 } from "node:util";
 var PI_MCP_BRIDGE_FILENAME = "beeline-mcp-bridge.js";
 var execFileAsync5 = promisify5(execFile9);
@@ -41136,7 +41117,7 @@ async function piHasNativeMcp(command, env) {
   let probe = nativeMcpProbes.get(cacheKey);
   if (!probe) {
     probe = (async () => {
-      const home = await mkdtemp2(resolve29(tmpdir5(), "beeline-pi-mcp-probe-"));
+      const home = await mkdtemp2(resolve30(tmpdir5(), "beeline-pi-mcp-probe-"));
       try {
         const { stdout: stdout6 } = await execFileAsync5(command, ["mcp", "list", "--json"], {
           cwd: home,
@@ -41157,7 +41138,7 @@ async function piHasNativeMcp(command, env) {
 }
 async function isolatedPiConfig(piHome) {
   try {
-    const parsed = JSON.parse(await readFile25(resolve29(piHome, "mcp.json"), "utf8"));
+    const parsed = JSON.parse(await readFile26(resolve30(piHome, "mcp.json"), "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
   } catch (error) {
     if (error.code !== "ENOENT")
@@ -41211,8 +41192,8 @@ async function installPiMcpBridge(input) {
     return void 0;
   if (!input.piHome)
     return void 0;
-  const directory = resolve29(input.piHome, "extensions");
-  const path = resolve29(directory, PI_MCP_BRIDGE_FILENAME);
+  const directory = resolve30(input.piHome, "extensions");
+  const path = resolve30(directory, PI_MCP_BRIDGE_FILENAME);
   try {
     const config = await isolatedPiConfig(input.piHome);
     const nativeMcp = input.nativeMcp ?? await piHasNativeMcp(input.piCommand ?? "pi", input.agentEnv);
@@ -41225,13 +41206,13 @@ async function installPiMcpBridge(input) {
           env: Object.fromEntries((server.env ?? []).map((entry) => [entry.name, entry.value])),
           exposure: "direct"
         };
-      await writeIsolatedHarnessFile(resolve29(input.piHome, "mcp.json"), `${JSON.stringify({ ...config, mcpServers: mcpServers2 }, null, 2)}
+      await writeIsolatedHarnessFile(resolve30(input.piHome, "mcp.json"), `${JSON.stringify({ ...config, mcpServers: mcpServers2 }, null, 2)}
 `);
       await unlink8(path).catch((error) => {
         if (error.code !== "ENOENT")
           throw error;
       });
-      return resolve29(input.piHome, "mcp.json");
+      return resolve30(input.piHome, "mcp.json");
     }
     const servers = [...input.servers, ...importedStdioServers(config, input.servers)];
     if (!servers.length)
@@ -41244,7 +41225,7 @@ async function installPiMcpBridge(input) {
         env: Object.fromEntries((server.env ?? []).map((entry) => [entry.name, entry.value])),
         enabled: false
       };
-    await writeIsolatedHarnessFile(resolve29(input.piHome, "mcp.json"), `${JSON.stringify({ ...config, mcpServers }, null, 2)}
+    await writeIsolatedHarnessFile(resolve30(input.piHome, "mcp.json"), `${JSON.stringify({ ...config, mcpServers }, null, 2)}
 `);
     await mkdir20(directory, { recursive: true, mode: 448 });
     await writeIsolatedHarnessFile(path, piMcpBridgeSource(servers));
@@ -41436,8 +41417,8 @@ export default async function (pi) {
 
 // apps/body/dist/corner-branch-sync.js
 import { execFile as execFile10 } from "node:child_process";
-import { access as access2, readFile as readFile26 } from "node:fs/promises";
-import { resolve as resolve30 } from "node:path";
+import { access as access2, readFile as readFile27 } from "node:fs/promises";
+import { resolve as resolve31 } from "node:path";
 var CORNER_GIT_SYNC_TIMEOUT_MS = 12e4;
 var CORNER_GIT_SYNC_KILL_GRACE_MS = 1e3;
 var CornerGitSyncInterruptedError = class extends Error {
@@ -41451,7 +41432,7 @@ async function syncCornerBranch(input) {
     try {
       if (signal.aborted)
         throw interrupted();
-      return await new Promise((resolve44, reject) => {
+      return await new Promise((resolve45, reject) => {
         let killTimer;
         let stdout6 = "";
         let failure = null;
@@ -41485,19 +41466,19 @@ async function syncCornerBranch(input) {
             else if (failure)
               reject(failure);
             else
-              resolve44(stdout6);
+              resolve45(stdout6);
           });
         else
-          input.git(args).then(resolve44, reject).finally(cleanup2);
+          input.git(args).then(resolve45, reject).finally(cleanup2);
       });
     } finally {
       clearTimeout(timer);
     }
   };
-  const marker = await readFile26(resolve30(input.worktreePath, ".git"), "utf8").catch(() => "");
-  const gitDir = resolve30(input.worktreePath, marker.startsWith("gitdir: ") ? marker.slice(8).trim() : ".git");
+  const marker = await readFile27(resolve31(input.worktreePath, ".git"), "utf8").catch(() => "");
+  const gitDir = resolve31(input.worktreePath, marker.startsWith("gitdir: ") ? marker.slice(8).trim() : ".git");
   for (const directory of ["rebase-merge", "rebase-apply"]) {
-    if (await access2(resolve30(gitDir, directory)).then(() => true, () => false))
+    if (await access2(resolve31(gitDir, directory)).then(() => true, () => false))
       await git(["rebase", "--abort"], true);
   }
   const remoteRef = `refs/remotes/origin/${input.featureBranch}`;
@@ -41545,7 +41526,7 @@ async function contains(git, head, ancestor) {
 }
 
 // apps/body/dist/room-session.js
-import { resolve as resolve31 } from "node:path";
+import { resolve as resolve32 } from "node:path";
 import { homedir as homedir16 } from "node:os";
 
 // apps/body/dist/read-only-policy.js
@@ -41786,14 +41767,14 @@ function readOnlyMcpServer(config, cwd, agentMemoryDir) {
     command: config.readonlyMcpCommand,
     args: [...config.readonlyMcpArgs ?? []],
     env: [
-      { name: "BEELINE_READONLY_ROOT", value: resolve31(cwd) },
+      { name: "BEELINE_READONLY_ROOT", value: resolve32(cwd) },
       ...config.agentHomeRoot ? [
         {
           name: "BEELINE_READONLY_AGENT_SKILLS_ROOT",
-          value: resolve31(config.agentHomeRoot, skillDir, "skills")
+          value: resolve32(config.agentHomeRoot, skillDir, "skills")
         }
       ] : [],
-      ...agentMemoryDir ? [{ name: "BEELINE_READONLY_AGENT_MEMORY_ROOT", value: resolve31(agentMemoryDir) }] : []
+      ...agentMemoryDir ? [{ name: "BEELINE_READONLY_AGENT_MEMORY_ROOT", value: resolve32(agentMemoryDir) }] : []
     ]
   };
 }
@@ -41847,15 +41828,15 @@ async function awaitInstitutionalContext(fetch2, log2 = console.warn, budgetMs =
 
 // apps/body/dist/codegraph.js
 import { execFile as execFile11 } from "node:child_process";
-import { access as access3, appendFile, mkdir as mkdir21, readFile as readFile27 } from "node:fs/promises";
-import { dirname as dirname23, isAbsolute as isAbsolute3, resolve as resolve32 } from "node:path";
+import { access as access3, appendFile, mkdir as mkdir21, readFile as readFile28 } from "node:fs/promises";
+import { dirname as dirname23, isAbsolute as isAbsolute3, resolve as resolve33 } from "node:path";
 import { promisify as promisify6 } from "node:util";
 var execFileAsync6 = promisify6(execFile11);
 var CODEGRAPH_MCP_SERVER_NAME = "codegraph";
 var CODEGRAPH_INDEX_PATH = ".codegraph/codegraph.db";
 var CODEGRAPH_PREPARE_TIMEOUT_MS = 12e4;
 function codegraphIndexDirectory(cwd) {
-  return resolve32(cwd, dirname23(CODEGRAPH_INDEX_PATH));
+  return resolve33(cwd, dirname23(CODEGRAPH_INDEX_PATH));
 }
 function codegraphMcpServer(config, cwd, options) {
   if (!config.codegraphCommand)
@@ -41863,7 +41844,7 @@ function codegraphMcpServer(config, cwd, options) {
   return {
     name: CODEGRAPH_MCP_SERVER_NAME,
     command: config.codegraphCommand,
-    args: ["serve", "--mcp", "--path", resolve32(cwd), ...options.readonly ? ["--no-watch"] : []],
+    args: ["serve", "--mcp", "--path", resolve33(cwd), ...options.readonly ? ["--no-watch"] : []],
     env: [
       { name: "CODEGRAPH_TELEMETRY", value: "0" },
       // One MCP child per harness session is easier to contain than a daemon
@@ -41881,7 +41862,7 @@ async function isGitWorktree(cwd) {
       cwd,
       timeout: 1e4
     });
-    return resolve32(stdout6.trim()) === resolve32(cwd);
+    return resolve33(stdout6.trim()) === resolve33(cwd);
   } catch {
     return false;
   }
@@ -41895,9 +41876,9 @@ async function excludeIndexFromGitStatus(cwd) {
     const gitPath = stdout6.trim();
     if (!gitPath)
       return;
-    const path = isAbsolute3(gitPath) ? gitPath : resolve32(cwd, gitPath);
+    const path = isAbsolute3(gitPath) ? gitPath : resolve33(cwd, gitPath);
     await mkdir21(dirname23(path), { recursive: true });
-    const existing = await readFile27(path, "utf8").catch(() => "");
+    const existing = await readFile28(path, "utf8").catch(() => "");
     if (existing.split("\n").includes(".codegraph/"))
       return;
     await appendFile(path, `${existing && !existing.endsWith("\n") ? "\n" : ""}.codegraph/
@@ -41910,7 +41891,7 @@ async function prepareCodegraphIndex(config, cwd) {
   if (!command || !await isGitWorktree(cwd))
     return false;
   await excludeIndexFromGitStatus(cwd);
-  const indexPath = resolve32(cwd, CODEGRAPH_INDEX_PATH);
+  const indexPath = resolve33(cwd, CODEGRAPH_INDEX_PATH);
   const indexed = await access3(indexPath).then(() => true, () => false);
   const args = indexed ? ["sync", "--quiet", cwd] : ["init", "--yes", cwd];
   try {
@@ -41938,7 +41919,7 @@ var SCHEDULE_RAN_VERB = "ran a schedule for";
 
 // apps/body/dist/turn-trace.js
 import { appendFile as appendFile2, mkdir as mkdir22, readdir as readdir7, rm as rm13 } from "node:fs/promises";
-import { resolve as resolve33 } from "node:path";
+import { resolve as resolve34 } from "node:path";
 import { performance as performance3 } from "node:perf_hooks";
 var TURN_PHASES = [
   /** Enqueued on `SessionScheduler` until this turn holds a slot. A capacity wait lives here. */
@@ -42224,7 +42205,7 @@ function formatTurnTraceLine(record5) {
   return [head, ...record5.attempts.map((attempt) => formatTurnAttempt(attempt))].join("\n  ");
 }
 function turnTraceDirectory(runtimeDir) {
-  return resolve33(runtimeDir, "turn-traces");
+  return resolve34(runtimeDir, "turn-traces");
 }
 var TURN_TRACE_RETENTION_DAYS = 7;
 function traceFileName(date) {
@@ -42241,7 +42222,7 @@ var TurnTraceFile = class {
     this.options = options;
   }
   path(now2 = (this.options.clock ?? (() => /* @__PURE__ */ new Date()))()) {
-    return resolve33(this.directory, traceFileName(now2));
+    return resolve34(this.directory, traceFileName(now2));
   }
   write(record5) {
     this.tail = this.tail.catch(() => void 0).then(async () => {
@@ -42265,7 +42246,7 @@ var TurnTraceFile = class {
     this.prunedDay = day;
     const cutoff = traceFileName(new Date(now2.getTime() - TURN_TRACE_RETENTION_DAYS * 864e5));
     const names = await readdir7(this.directory).catch(() => []);
-    await Promise.all(names.filter((name) => /^turns-\d{4}-\d{2}-\d{2}\.jsonl$/.test(name) && name < cutoff).map((name) => rm13(resolve33(this.directory, name), { force: true })));
+    await Promise.all(names.filter((name) => /^turns-\d{4}-\d{2}-\d{2}\.jsonl$/.test(name) && name < cutoff).map((name) => rm13(resolve34(this.directory, name), { force: true })));
   }
 };
 
@@ -42437,6 +42418,7 @@ var MonolithRoomTurnLoop = class {
     this.wakeIntake = void 0;
   }
   client;
+  claudeLoginWatch;
   sessionId;
   sessionCwd;
   sessionCommit;
@@ -42494,7 +42476,7 @@ var MonolithRoomTurnLoop = class {
       requestId: call.requestId,
       generationId: call.generationId,
       target: "squire",
-      ...resourceCallFacts({ method: "tools/call", params: { name: call.tool, arguments: call.args } }, "squire")
+      ...resourceCallFacts({ method: "tools/call", params: { name: call.tool } })
     })).allowed, options.config.operatorHome ?? homedir17(), void 0, (decision2) => {
       options.api.execute("postSquireApprovalDecision", { roomId: options.roomId, ...decision2 }).catch(() => {
       });
@@ -42658,8 +42640,26 @@ var MonolithRoomTurnLoop = class {
       ...promptBytes ? { promptBytes } : {}
     };
   }
+  /**
+   * Watch this client's Claude login so a refresh made while the
+   * Room is idle reaches other Rooms at once (see `watchRoomClaudeLogin`).
+   */
+  watchClaudeLogin() {
+    this.stopClaudeLoginWatch();
+    if (this.options.config.agentKind !== "claude" || !this.options.config.agentHomeRoot)
+      return;
+    this.claudeLoginWatch = watchRoomClaudeLogin({
+      root: this.options.config.agentHomeRoot,
+      operatorHome: this.options.config.operatorHome
+    });
+  }
+  stopClaudeLoginWatch() {
+    this.claudeLoginWatch?.close();
+    this.claudeLoginWatch = void 0;
+  }
   async discardSession() {
     const client = this.client;
+    this.stopClaudeLoginWatch();
     this.client = void 0;
     this.sessionId = void 0;
     this.sessionCwd = void 0;
@@ -42967,6 +42967,7 @@ var MonolithRoomTurnLoop = class {
     };
     this.client = (this.options.createAcpClient ?? ((value) => new AcpClient(value)))(clientOptions);
     await this.client.start();
+    this.watchClaudeLogin();
     const persona = configuration.soul ?? self?.soul;
     const repositoryInfo = repositoryState.resolution === "repository" && repositoryState.key ? {
       name: repositoryState.key,
@@ -43082,6 +43083,7 @@ var MonolithRoomTurnLoop = class {
       return void 0;
     trace?.retry({ provider: next, ...reason ? { reason } : {} });
     const client = this.client;
+    this.stopClaudeLoginWatch();
     this.client = void 0;
     this.sessionId = void 0;
     this.sessionFingerprint = void 0;
@@ -43165,8 +43167,8 @@ var MonolithRoomTurnLoop = class {
         let timer;
         const stats = statsPromise && remaining > 0 ? await Promise.race([
           statsPromise,
-          new Promise((resolve44) => {
-            timer = setTimeout(() => resolve44(void 0), remaining);
+          new Promise((resolve45) => {
+            timer = setTimeout(() => resolve45(void 0), remaining);
           })
         ]).finally(() => {
           if (timer)
@@ -43580,9 +43582,9 @@ function roomMessagePrompt(author, body, attachments, delivered, harnessAcceptsI
 
 // apps/body/dist/corner-github-auth.js
 import { chmod as chmod9, mkdir as mkdir24, writeFile as writeFile19 } from "node:fs/promises";
-import { delimiter as delimiter3, resolve as resolve34 } from "node:path";
+import { delimiter as delimiter3, resolve as resolve35 } from "node:path";
 async function installCornerGitHubWrappers(input) {
-  const bin = resolve34(input.root, "beeline-github-bin");
+  const bin = resolve35(input.root, "beeline-github-bin");
   await mkdir24(bin, { recursive: true, mode: 448 });
   const common = {
     node: process.execPath,
@@ -43594,13 +43596,13 @@ async function installCornerGitHubWrappers(input) {
     gitCommand: input.gitBinary,
     originUrl: input.originUrl ?? ""
   };
-  await writeLauncher(resolve34(bin, "git"), {
+  await writeLauncher(resolve35(bin, "git"), {
     ...common,
     command: input.gitBinary,
     launcher: "git",
     restFallback: false
   });
-  await writeLauncher(resolve34(bin, "gh"), {
+  await writeLauncher(resolve35(bin, "gh"), {
     ...common,
     command: input.ghBinary ?? "",
     launcher: "gh",
@@ -44028,35 +44030,35 @@ if (!refusal) {
 // apps/body/dist/warm-node-modules.js
 import { createHash as createHash13, randomUUID as randomUUID11 } from "node:crypto";
 import { constants as fsConstants3 } from "node:fs";
-import { chmod as chmod10, copyFile as copyFile2, link, lstat as lstat4, mkdir as mkdir25, readdir as readdir8, readFile as readFile28, readlink as readlink2, rename as rename10, rm as rm14, stat as stat8, symlink as symlink3, utimes } from "node:fs/promises";
-import { dirname as dirname25, join as join19, resolve as resolve35 } from "node:path";
+import { chmod as chmod10, copyFile as copyFile2, link, lstat as lstat4, mkdir as mkdir25, readdir as readdir8, readFile as readFile29, readlink as readlink2, rename as rename10, rm as rm14, stat as stat8, symlink as symlink3, utimes } from "node:fs/promises";
+import { dirname as dirname25, join as join19, resolve as resolve36 } from "node:path";
 var STORE_FORMAT = "v1";
 var STAGING_PREFIX = ".beeline-warm-";
 var STAGING_SWEEP_MS = 24 * 60 * 60 * 1e3;
 var WARM_STORE_MAX_ENTRIES = 3;
 function sharedNpmCacheDir(supervisorRoot) {
-  return resolve35(supervisorRoot, "beeline", "npm-cache");
+  return resolve36(supervisorRoot, "beeline", "npm-cache");
 }
 function sharedPnpmStoreDir(supervisorRoot) {
-  return resolve35(supervisorRoot, "beeline", "pnpm-store");
+  return resolve36(supervisorRoot, "beeline", "pnpm-store");
 }
 function sharedCargoTargetDir(supervisorRoot) {
-  return resolve35(supervisorRoot, "beeline", "cargo-target");
+  return resolve36(supervisorRoot, "beeline", "cargo-target");
 }
 function sharedTurboCacheDir(supervisorRoot) {
-  return resolve35(supervisorRoot, "beeline", "turbo-cache");
+  return resolve36(supervisorRoot, "beeline", "turbo-cache");
 }
 function warmNodeModulesStoreDir(supervisorRoot) {
-  return resolve35(supervisorRoot, "beeline", "node-modules");
+  return resolve36(supervisorRoot, "beeline", "node-modules");
 }
 function mobileNodeModulesStoreDir(supervisorRoot) {
-  return resolve35(supervisorRoot, "beeline", "node-modules-mobile");
+  return resolve36(supervisorRoot, "beeline", "node-modules-mobile");
 }
 function isPlanRefusal(value) {
   return "failure" in value;
 }
 async function readWarmPlan(worktreePath) {
-  const lockfile = await readFile28(resolve35(worktreePath, "package-lock.json")).catch(() => void 0);
+  const lockfile = await readFile29(resolve36(worktreePath, "package-lock.json")).catch(() => void 0);
   if (!lockfile)
     return { failure: "no-lockfile" };
   const packages = parseLockfilePackages(lockfile);
@@ -44095,11 +44097,11 @@ async function seedWarmNodeModules(input) {
     return { reason: plan.failure, ...plan.detail ? { detail: plan.detail } : {} };
   }
   for (const tree of plan.trees) {
-    if (await pathExists(resolve35(input.worktreePath, tree))) {
+    if (await pathExists(resolve36(input.worktreePath, tree))) {
       return { reason: "present", key: plan.key };
     }
   }
-  const entry = resolve35(input.storeRoot, plan.key);
+  const entry = resolve36(input.storeRoot, plan.key);
   if (!await isDirectory(entry))
     return { reason: "cold", key: plan.key };
   const [storeDevice, checkoutDevice] = await Promise.all([
@@ -44109,19 +44111,19 @@ async function seedWarmNodeModules(input) {
   if (storeDevice === void 0 || storeDevice !== checkoutDevice) {
     return { reason: "cross-device", key: plan.key };
   }
-  const staging = resolve35(input.storeRoot, `${STAGING_PREFIX}${process.pid}.${randomUUID11()}`);
+  const staging = resolve36(input.storeRoot, `${STAGING_PREFIX}${process.pid}.${randomUUID11()}`);
   const placed = [];
   const now2 = (input.now ?? Date.now)();
   try {
     await sweepStaleStaging(input.storeRoot, now2);
     await utimes(entry, now2 / 1e3, now2 / 1e3).catch(() => void 0);
     for (const tree of plan.trees) {
-      await cloneTree(resolve35(entry, tree), resolve35(staging, tree), seedFile);
+      await cloneTree(resolve36(entry, tree), resolve36(staging, tree), seedFile);
     }
     for (const tree of plan.trees) {
-      const target = resolve35(input.worktreePath, tree);
+      const target = resolve36(input.worktreePath, tree);
       await mkdir25(dirname25(target), { recursive: true });
-      await rename10(resolve35(staging, tree), target);
+      await rename10(resolve36(staging, tree), target);
       placed.push(target);
     }
     return { reason: "seeded", key: plan.key };
@@ -44139,11 +44141,11 @@ async function harvestWarmNodeModules(input) {
   if (isPlanRefusal(plan)) {
     return { reason: plan.failure, ...plan.detail ? { detail: plan.detail } : {} };
   }
-  const entry = resolve35(input.storeRoot, plan.key);
+  const entry = resolve36(input.storeRoot, plan.key);
   if (await pathExists(entry))
     return { reason: "already-warm", key: plan.key };
   for (const tree of plan.trees) {
-    if (!await isDirectory(resolve35(input.worktreePath, tree))) {
+    if (!await isDirectory(resolve36(input.worktreePath, tree))) {
       return { reason: "no-node-modules", key: plan.key, detail: tree };
     }
   }
@@ -44155,12 +44157,12 @@ async function harvestWarmNodeModules(input) {
       detail: `${missing.length} absent, e.g. ${missing.slice(0, 3).join(", ")}`
     };
   }
-  const staging = resolve35(input.storeRoot, `${STAGING_PREFIX}${process.pid}.${randomUUID11()}`);
+  const staging = resolve36(input.storeRoot, `${STAGING_PREFIX}${process.pid}.${randomUUID11()}`);
   try {
     await mkdir25(input.storeRoot, { recursive: true, mode: 493 });
     await sweepStaleStaging(input.storeRoot, (input.now ?? Date.now)());
     for (const tree of plan.trees) {
-      await cloneTree(resolve35(input.worktreePath, tree), resolve35(staging, tree), harvestFile);
+      await cloneTree(resolve36(input.worktreePath, tree), resolve36(staging, tree), harvestFile);
     }
     await input.onCopied?.();
     if (!await stagedTreeIsPublishable(input.worktreePath, staging, plan.key)) {
@@ -44183,16 +44185,16 @@ async function stagedTreeIsPublishable(worktreePath, staging, key) {
     return false;
   const hidden = join19("node_modules", ".package-lock.json");
   const [copied, current] = await Promise.all([
-    readFile28(resolve35(staging, hidden)).catch(() => void 0),
-    readFile28(resolve35(worktreePath, hidden)).catch(() => void 0)
+    readFile29(resolve36(staging, hidden)).catch(() => void 0),
+    readFile29(resolve36(worktreePath, hidden)).catch(() => void 0)
   ]);
   if (!copied || !current || !copied.equals(current))
     return false;
   return (await missingInstalledPackages(worktreePath, staging)).length === 0;
 }
 async function missingInstalledPackages(worktreePath, treeRoot = worktreePath) {
-  const wanted = parseLockfilePackages(await readFile28(resolve35(worktreePath, "package-lock.json")).catch(() => void 0));
-  const installed = parseLockfilePackages(await readFile28(resolve35(treeRoot, "node_modules", ".package-lock.json")).catch(() => void 0));
+  const wanted = parseLockfilePackages(await readFile29(resolve36(worktreePath, "package-lock.json")).catch(() => void 0));
+  const installed = parseLockfilePackages(await readFile29(resolve36(treeRoot, "node_modules", ".package-lock.json")).catch(() => void 0));
   if (!wanted)
     return ["package-lock.json is unreadable"];
   if (!installed)
@@ -44212,7 +44214,7 @@ async function missingInstalledPackages(worktreePath, treeRoot = worktreePath) {
       required.push(path);
   }
   await mapWithLimit(required, INTEGRITY_READ_CONCURRENCY, async (path) => {
-    if (!(path in installed) || !await isInstalledPackage(resolve35(treeRoot, path))) {
+    if (!(path in installed) || !await isInstalledPackage(resolve36(treeRoot, path))) {
       missing.push(path);
     }
   });
@@ -44547,6 +44549,7 @@ var MonolithCornerTurnLoop = class {
     this.wakeIntake?.();
   }
   client;
+  claudeLoginWatch;
   sessionId;
   /** The configuration the live session baked in; a change invalidates it. */
   sessionFingerprint;
@@ -44625,7 +44628,7 @@ var MonolithCornerTurnLoop = class {
       requestId: call.requestId,
       generationId: call.generationId,
       target: "squire",
-      ...resourceCallFacts({ method: "tools/call", params: { name: call.tool, arguments: call.args } }, "squire")
+      ...resourceCallFacts({ method: "tools/call", params: { name: call.tool } })
     })).allowed, options.config.operatorHome ?? homedir18(), void 0, (decision2) => {
       options.api.execute("postSquireApprovalDecision", { roomId: options.cornerId, ...decision2 }).catch(() => {
       });
@@ -44739,8 +44742,26 @@ var MonolithCornerTurnLoop = class {
       ...promptBytes ? { promptBytes } : {}
     };
   }
+  /**
+   * Watch this client's Claude login so a refresh made while the
+   * corner is idle reaches other Rooms at once (see `watchRoomClaudeLogin`).
+   */
+  watchClaudeLogin() {
+    this.stopClaudeLoginWatch();
+    if (this.options.config.agentKind !== "claude" || !this.options.config.agentHomeRoot)
+      return;
+    this.claudeLoginWatch = watchRoomClaudeLogin({
+      root: this.options.config.agentHomeRoot,
+      operatorHome: this.options.config.operatorHome
+    });
+  }
+  stopClaudeLoginWatch() {
+    this.claudeLoginWatch?.close();
+    this.claudeLoginWatch = void 0;
+  }
   async discardSession() {
     const client = this.client;
+    this.stopClaudeLoginWatch();
     this.client = void 0;
     this.sessionId = void 0;
     this.sessionFingerprint = void 0;
@@ -44757,14 +44778,15 @@ var MonolithCornerTurnLoop = class {
     return await this.currentSessionFingerprint() === this.sessionFingerprint;
   }
   async currentSessionFingerprint() {
-    const [configuration, roster, grants, restored] = await Promise.all([
+    const [configuration, roster, grants, restored, cornerPrepareScript] = await Promise.all([
       this.options.api.execute("getAgentConfiguration", {
         agentId: this.agent.publicKey,
         roomId: this.options.cornerId
       }),
       this.roster(),
       this.grantedResources(),
-      this.options.api.execute("getCornerRestoreState", { cornerId: this.options.cornerId })
+      this.options.api.execute("getCornerRestoreState", { cornerId: this.options.cornerId }),
+      hasCornerPrepareScript(this.options.worktreePath)
     ]);
     const { hostRoutes: grantedHostRoutes, devices: grantedDevices } = grants;
     const self = roster.members.find((member) => member.identityId === this.agent.publicKey);
@@ -44778,6 +44800,7 @@ var MonolithCornerTurnLoop = class {
       agentName: self?.name ?? this.agent.name,
       yoloMode: configuration.yoloMode,
       repositoryWork: cornerHasRepositoryWork(restored.brief),
+      cornerPrepareScript,
       mcpServers: codegraphFingerprintServers(this.options.config, [
         ...expectedMountedImportedMcpServerNames({
           operatorHome: this.options.config.operatorHome,
@@ -44850,13 +44873,15 @@ var MonolithCornerTurnLoop = class {
     const selfReviewerInstruction = cornerSelfReviewerInstruction(reviewerInput);
     this.sessionSurface = !this.options.repository ? "no-code-corner" : reviewerInstruction ? "review-corner" : "code-corner";
     this.repositoryWork = cornerHasRepositoryWork(restored.brief);
+    const cornerPrepareScript = await hasCornerPrepareScript(this.options.worktreePath);
     this.sessionPromptContext = {
       brief: restored.brief,
       surface: this.sessionSurface,
       agentName: self?.name ?? this.agent.name,
       ...configuration.reviewerHandle ? { reviewerHandle: configuration.reviewerHandle } : {},
       selfReviewer: Boolean(selfReviewerInstruction),
-      yoloMode: configuration.yoloMode
+      yoloMode: configuration.yoloMode,
+      cornerPrepareScript
     };
     await mkdir26(this.options.worktreePath, { recursive: true });
     const selection = {
@@ -45022,6 +45047,7 @@ var MonolithCornerTurnLoop = class {
     };
     this.client = (this.options.createAcpClient ?? ((value) => new AcpClient(value)))(clientOptions);
     await this.client.start();
+    this.watchClaudeLogin();
     const codegraphReady = await prepareCodegraphIndex(this.options.config, this.options.worktreePath);
     const fingerprint = sessionConfigFingerprint({
       devices: grantedDevices,
@@ -45032,6 +45058,7 @@ var MonolithCornerTurnLoop = class {
       agentName: self?.name ?? this.agent.name,
       yoloMode: configuration.yoloMode,
       repositoryWork: cornerHasRepositoryWork(restored.brief),
+      cornerPrepareScript,
       mcpServers: codegraphFingerprintServers(this.options.config, [
         ...expectedMountedImportedMcpServerNames({
           operatorHome: this.options.config.operatorHome,
@@ -45184,7 +45211,7 @@ var MonolithCornerTurnLoop = class {
           briefRevision: restore.brief?.revision
         }),
         ...this.options.config.agentHomeRoot && this.options.config.agentKind && !AGENT_SKILL_DIRS.includes(this.options.config.agentKind) ? [
-          `This harness has no verified native skill discovery. Read the release-managed review procedure at ${resolve36(this.options.config.agentHomeRoot, "codex", "skills", "beeline-review", "SKILL.md")} before the verdict.`
+          `This harness has no verified native skill discovery. Read the release-managed review procedure at ${resolve37(this.options.config.agentHomeRoot, "codex", "skills", "beeline-review", "SKILL.md")} before the verdict.`
         ] : []
       ].join("\n");
     } catch {
@@ -45263,6 +45290,7 @@ var MonolithCornerTurnLoop = class {
       return void 0;
     trace?.retry({ provider: next, ...reason ? { reason } : {} });
     const client = this.client;
+    this.stopClaudeLoginWatch();
     this.client = void 0;
     this.sessionId = void 0;
     this.sessionFingerprint = void 0;
@@ -45316,8 +45344,8 @@ var MonolithCornerTurnLoop = class {
         let timer;
         const stats = statsPromise && remaining > 0 ? await Promise.race([
           statsPromise,
-          new Promise((resolve44) => {
-            timer = setTimeout(() => resolve44(void 0), remaining);
+          new Promise((resolve45) => {
+            timer = setTimeout(() => resolve45(void 0), remaining);
           })
         ]).finally(() => {
           if (timer)
@@ -45366,6 +45394,7 @@ var MonolithCornerTurnLoop = class {
             trace.noteInstitutionalMemoryEmbedding(institutionalContext.embeddingOutcome, institutionalContext.embeddingMs ?? 0);
           }
           let repositoryWork = cornerHasRepositoryWork(restored.brief);
+          let repositoryHeld = restored.held === true;
           let assignedBrief = restored.brief;
           const taskDelivered = this.attachmentDir && attachments.length ? await deliverAttachments(attachments, join20(this.attachmentDir, requestId.replace(/[^\w-]/g, "_")), this.options.fetchImpl) : [];
           let delivered = taskDelivered;
@@ -45381,7 +45410,7 @@ var MonolithCornerTurnLoop = class {
             const briefDelivered = this.attachmentDir && briefAttachments.length ? await deliverAttachments(briefAttachments, join20(this.attachmentDir, requestId.replace(/[^\w-]/g, "_"), "brief", String(assignedBrief.revision)), this.options.fetchImpl) : [];
             briefFileLines = await Promise.all((assignedBrief?.attachments ?? []).map(async (file, index) => {
               const entry = briefDelivered.find((item) => item.attachment === briefAttachments[index]);
-              const verified = entry?.path && createHash14("sha256").update(await readFile29(entry.path)).digest("hex") === file.sha256;
+              const verified = entry?.path && createHash14("sha256").update(await readFile30(entry.path)).digest("hex") === file.sha256;
               return `- ${file.title} (${file.purpose}; ${file.required ? "required" : "optional"}; sha256 ${file.sha256}): ${verified ? entry.path : "UNAVAILABLE OR CONTENT MISMATCH"}`;
             }));
             missingRequiredBriefFile = (assignedBrief?.attachments ?? []).some((file, index) => file.required && briefFileLines[index]?.includes("UNAVAILABLE OR CONTENT MISMATCH"));
@@ -45420,7 +45449,7 @@ var MonolithCornerTurnLoop = class {
               await this.discardSession();
               await trace.measure("activation", () => this.activate(trace));
             }
-            if (followup === CORNER_DELIVERY_NUDGE && !repositoryWork)
+            if (followup === CORNER_DELIVERY_NUDGE && !(repositoryWork && !repositoryHeld))
               followup = "Deliver files with post_artifact; answer plain chat questions directly.";
             if (followup && !assignedBrief)
               return followup;
@@ -45689,7 +45718,8 @@ ${continuation}` : assembled;
             explained = await this.explainEmpty(result);
           }
           const checksTurn = isCornerChecksTurn(trigger, restates);
-          const deliveryState = !checksTurn && repositoryWork && this.options.repository ? await cornerUndeliveredRepositoryState(this.options.worktreePath, this.options.repository.featureBranch, this.options.repository.targetBranch) : void 0;
+          const mayPublish = repositoryWork && !repositoryHeld;
+          const deliveryState = !checksTurn && mayPublish && this.options.repository ? await cornerUndeliveredRepositoryState(this.options.worktreePath, this.options.repository.featureBranch, this.options.repository.targetBranch) : void 0;
           const needsDeliveryNudge = deliveryState !== void 0 && deliveryState !== this.lastDeliveryNudgeState;
           let refreshedReviewerInstruction;
           let reviewerSecondPass = false;
@@ -45701,7 +45731,7 @@ ${continuation}` : assembled;
             reviewerSecondPass = reviewerTargetChanged || !result.toolCalls.some((call) => /(?:^|[._:/-])(?:approve_merge|record_validation_stage)$/i.test(call.title ?? "") && isCompletedToolCall(call));
           }
           let replyBeforeNudge = "";
-          if (!explained && (needsDeliveryNudge || checksTurn && (this.reviewerInstructionInput ? reviewerSecondPass : repositoryWork && this.yoloMode && !result.toolCalls.some((call) => /(?:^|[._:/-])pr_checks_status$/i.test(call.title ?? "") && isCompletedToolCall(call))))) {
+          if (!explained && (needsDeliveryNudge || checksTurn && (this.reviewerInstructionInput ? reviewerSecondPass : repositoryWork && !repositoryHeld && this.yoloMode && !result.toolCalls.some((call) => /(?:^|[._:/-])pr_checks_status$/i.test(call.title ?? "") && isCompletedToolCall(call))))) {
             if (needsDeliveryNudge)
               this.lastDeliveryNudgeState = deliveryState;
             await flushToolCalls(result.toolCalls, "");
@@ -45816,13 +45846,13 @@ ${continuation}` : assembled;
     if (this.harvest || !this.options.repository)
       return;
     const { cornerId, worktreePath, runtime } = this.options;
-    const mobilePath = resolve36(worktreePath, "apps/mobile");
+    const mobilePath = resolve37(worktreePath, "apps/mobile");
     const jobs = [
       harvestWarmNodeModules({
         worktreePath,
         storeRoot: warmNodeModulesStoreDir(runtime.supervisorRoot)
       }),
-      ...existsSync9(resolve36(mobilePath, "package-lock.json")) ? [
+      ...existsSync9(resolve37(mobilePath, "package-lock.json")) ? [
         harvestWarmNodeModules({
           worktreePath: mobilePath,
           storeRoot: mobileNodeModulesStoreDir(runtime.supervisorRoot)
@@ -45867,7 +45897,7 @@ ${continuation}` : assembled;
       } catch (error) {
         if (attempt === 2)
           throw error;
-        await new Promise((resolve44) => setTimeout(resolve44, 250 * (attempt + 1)));
+        await new Promise((resolve45) => setTimeout(resolve45, 250 * (attempt + 1)));
       }
     }
     if (!token)
@@ -46479,7 +46509,7 @@ function cornerStartConfigKey(repository, objective) {
 function cornerRepositoryCacheDir(supervisorRoot, remote) {
   const normalizedRemote = roomCheckoutRemote(remote);
   const repositoryHash = createHash15("sha256").update(normalizedRemote).digest("hex").slice(0, 24);
-  return resolve37(supervisorRoot, "beeline", "repositories", `${repositoryHash}.git`);
+  return resolve38(supervisorRoot, "beeline", "repositories", `${repositoryHash}.git`);
 }
 function isStandingCornerStartFault(error) {
   const text2 = error instanceof Error ? error.message : String(error);
@@ -46488,11 +46518,11 @@ function isStandingCornerStartFault(error) {
 async function materializeCornerWorktree(input) {
   const remote = roomCheckoutRemote(input.remote);
   const gitCommonDir = cornerRepositoryCacheDir(input.supervisorRoot, remote);
-  const path = resolve37(input.supervisorRoot, "beeline", "corners", input.cornerId);
+  const path = resolve38(input.supervisorRoot, "beeline", "corners", input.cornerId);
   await mkdir27(dirname27(gitCommonDir), { recursive: true, mode: 448 });
   await mkdir27(dirname27(path), { recursive: true, mode: 448 });
   const authEnv = githubGitEnv(input.token);
-  if (!existsSync10(resolve37(gitCommonDir, "HEAD"))) {
+  if (!existsSync10(resolve38(gitCommonDir, "HEAD"))) {
     await execFileAsync8("git", ["clone", "--bare", remote, gitCommonDir], {
       env: authEnv,
       maxBuffer: 4 * 1024 * 1024
@@ -46515,7 +46545,7 @@ async function materializeCornerWorktree(input) {
       return false;
     throw error;
   });
-  if (!existsSync10(resolve37(path, ".git"))) {
+  if (!existsSync10(resolve38(path, ".git"))) {
     await rm15(path, { recursive: true, force: true });
     await execFileAsync8("git", [
       `--git-dir=${gitCommonDir}`,
@@ -46533,8 +46563,8 @@ async function materializeCornerWorktree(input) {
     if (seed.reason !== "no-lockfile") {
       console.log(`[thin-core] corner ${input.cornerId} warm node_modules: ${seed.reason}${seed.detail ? ` (${seed.detail})` : ""}`);
     }
-    const mobilePath = resolve37(path, "apps/mobile");
-    if (existsSync10(resolve37(mobilePath, "package-lock.json"))) {
+    const mobilePath = resolve38(path, "apps/mobile");
+    if (existsSync10(resolve38(mobilePath, "package-lock.json"))) {
       const mobileSeed = await seedWarmNodeModules({
         worktreePath: mobilePath,
         storeRoot: mobileNodeModulesStoreDir(input.supervisorRoot)
@@ -46591,9 +46621,9 @@ async function mapWithConcurrency(values, limit, visit) {
   }));
 }
 async function discoverCornerWorktree(supervisorRoot, cornerId) {
-  const cornersRoot = resolve37(supervisorRoot, "beeline", "corners");
-  const path = resolve37(cornersRoot, cornerId);
-  if (dirname27(path) !== cornersRoot || !existsSync10(resolve37(path, ".git")))
+  const cornersRoot = resolve38(supervisorRoot, "beeline", "corners");
+  const path = resolve38(cornersRoot, cornerId);
+  if (dirname27(path) !== cornersRoot || !existsSync10(resolve38(path, ".git")))
     return void 0;
   const [canonicalRoot, canonicalPath] = await Promise.all([
     realpath2(cornersRoot),
@@ -46605,8 +46635,8 @@ async function discoverCornerWorktree(supervisorRoot, cornerId) {
   const common = await execFileAsync8("git", ["-C", path, "rev-parse", "--git-common-dir"]).catch(() => void 0);
   if (!common)
     return void 0;
-  const gitCommonDir = resolve37(path, common.stdout.trim());
-  const repositoriesRoot = resolve37(supervisorRoot, "beeline", "repositories");
+  const gitCommonDir = resolve38(path, common.stdout.trim());
+  const repositoriesRoot = resolve38(supervisorRoot, "beeline", "repositories");
   const commonRelative = relative3(repositoriesRoot, gitCommonDir);
   if (!commonRelative || commonRelative === ".." || commonRelative.startsWith(`..${sep2}`) || commonRelative.startsWith(sep2)) {
     throw new Error(`refusing corner ${cornerId} with git directory outside repository cache`);
@@ -46614,7 +46644,7 @@ async function discoverCornerWorktree(supervisorRoot, cornerId) {
   return { path, gitCommonDir };
 }
 async function localCornerWorktreeIds(supervisorRoot) {
-  const root = resolve37(supervisorRoot, "beeline", "corners");
+  const root = resolve38(supervisorRoot, "beeline", "corners");
   const entries = await readdir9(root, { withFileTypes: true }).catch((error) => {
     if (error.code === "ENOENT")
       return [];
@@ -46707,8 +46737,8 @@ async function originContains(gitCommonDir, head) {
 }
 var execFileAsync8 = promisify8(execFile13);
 async function removeCornerScratchWorkspace(input) {
-  const expected = resolve37(input.roomRoot, "scratch");
-  if (resolve37(input.scratchPath) !== expected) {
+  const expected = resolve38(input.roomRoot, "scratch");
+  if (resolve38(input.scratchPath) !== expected) {
     throw new Error(`refusing to remove scratch outside corner ${input.cornerId}`);
   }
   await rm15(expected, { recursive: true, force: true });
@@ -47164,13 +47194,13 @@ var RoomRuntimeCoordinator = class {
     return this.runtime.rooms.find((room) => room.channelId === roomId);
   }
   roomRoot(roomId) {
-    return this.roomRecord(roomId)?.root ?? resolve37(dirname27(this.configPath), "rooms", roomId);
+    return this.roomRecord(roomId)?.root ?? resolve38(dirname27(this.configPath), "rooms", roomId);
   }
   roomAgentHomeRoot(workspaceRoot, required = false) {
     const flag = process.env.BUZZY_BODY_ROOM_HOME;
     if (!required && flag === "0")
       return void 0;
-    const home = resolve37(workspaceRoot, "agent-home");
+    const home = resolve38(workspaceRoot, "agent-home");
     if (!required && flag !== "1" && !existsSync10(home) && existsSync10(workspaceRoot))
       return void 0;
     try {
@@ -47186,8 +47216,8 @@ var RoomRuntimeCoordinator = class {
     return {
       ...this.baseConfig,
       workspaceRoot,
-      agentPrivateRoot: resolve37(workspaceRoot, "agent-private"),
-      agentMemoryRoot: resolve37(dirname27(this.configPath), "memory"),
+      agentPrivateRoot: resolve38(workspaceRoot, "agent-private"),
+      agentMemoryRoot: resolve38(dirname27(this.configPath), "memory"),
       openRouterRoutingCacheDir: openRouterRoutingCacheDir(dirname27(this.configPath)),
       turnTraceDir: turnTraceDirectory(dirname27(this.configPath)),
       ...agentHomeRoot ? { agentHomeRoot } : {}
@@ -47270,11 +47300,11 @@ var RoomRuntimeCoordinator = class {
     const remote = roomCheckoutRemote(repository.remote);
     const targetBranch = repository.targetBranch || "main";
     const checkoutId = createHash15("sha256").update(`${roomId}\0${remote}\0${targetBranch}`).digest("hex").slice(0, 24);
-    const path = resolve37(this.runtime.supervisorRoot, "beeline", "room-checkouts", checkoutId);
+    const path = resolve38(this.runtime.supervisorRoot, "beeline", "room-checkouts", checkoutId);
     await mkdir27(dirname27(path), { recursive: true, mode: 448 });
     const token = remote.startsWith("https://github.com/") ? await this.parentRepositoryToken(roomId) : void 0;
     const env = token ? githubGitEnv(token.token) : process.env;
-    if (!existsSync10(resolve37(path, ".git"))) {
+    if (!existsSync10(resolve38(path, ".git"))) {
       await execFileAsync8("git", ["clone", "--no-checkout", remote, path], {
         env,
         maxBuffer: 4 * 1024 * 1024
@@ -47351,7 +47381,7 @@ var RoomRuntimeCoordinator = class {
       if (!objective)
         throw new Error("corner has no authoritative objective fact");
       const repositoryBacked = repository.resolution === "repository" && restore.lane !== "no_code";
-      const scratchPath = resolve37(this.roomRoot(corner.cornerId), "scratch");
+      const scratchPath = resolve38(this.roomRoot(corner.cornerId), "scratch");
       if (repositoryBacked && existsSync10(scratchPath) && !restore.featureBranch)
         throw new Error("promoted corner has no server-assigned feature branch");
       const targetBranch = repositoryBacked ? repository.targetBranch || "main" : void 0;
@@ -47366,7 +47396,7 @@ var RoomRuntimeCoordinator = class {
       }) : void 0;
       if (worktree && existsSync10(scratchPath))
         await this.reapCornerScratch({ path: scratchPath, cornerId: corner.cornerId });
-      const workspacePath = worktree?.path ?? resolve37(this.roomRoot(corner.cornerId), "scratch");
+      const workspacePath = worktree?.path ?? resolve38(this.roomRoot(corner.cornerId), "scratch");
       if (!worktree)
         await mkdir27(workspacePath, { recursive: true, mode: 448 });
       if (worktree && shouldPostInitialCornerWorkingState(restore)) {
@@ -47697,7 +47727,7 @@ var RoomRuntimeCoordinator = class {
           throw new Error(`archived corner ${corner.cornerId} has no authoritative repository`);
         }
         const expectedCommonDir = cornerRepositoryCacheDir(this.runtime.supervisorRoot, repository.remote);
-        if (resolve37(discovered.gitCommonDir) !== expectedCommonDir) {
+        if (resolve38(discovered.gitCommonDir) !== expectedCommonDir) {
           throw new Error(`archived corner ${corner.cornerId} repository cache does not match`);
         }
         if (!restore.featureBranch) {
@@ -48048,10 +48078,10 @@ var ThinDaemonCore = class {
 
 // apps/body/dist/force-update-journal.js
 import { mkdirSync as mkdirSync4, readFileSync as readFileSync9, renameSync, writeFileSync as writeFileSync5 } from "node:fs";
-import { resolve as resolve38 } from "node:path";
+import { resolve as resolve39 } from "node:path";
 var NAME = "force-update-interruptions.json";
 function pathFor(runtimeDir) {
-  return resolve38(runtimeDir, NAME);
+  return resolve39(runtimeDir, NAME);
 }
 function read(runtimeDir) {
   try {
@@ -48129,17 +48159,17 @@ function staleGeneration(error) {
 init_launchd();
 init_systemd();
 import { mkdir as mkdir28, rename as rename11 } from "node:fs/promises";
-import { dirname as dirname28, resolve as resolve39 } from "node:path";
+import { dirname as dirname28, resolve as resolve40 } from "node:path";
 async function retireRemovedAgent(runtime, options = {}) {
-  const deletedRoot = resolve39(runtime.supervisorRoot, "beeline", "deleted-runtimes");
-  const target = resolve39(deletedRoot, `${runtime.agent.publicKey}-${Date.now()}`);
+  const deletedRoot = resolve40(runtime.supervisorRoot, "beeline", "deleted-runtimes");
+  const target = resolve40(deletedRoot, `${runtime.agent.publicKey}-${Date.now()}`);
   return relocateAgentRuntime(runtime, target, {
     ...options.run ? { run: options.run } : {}
   });
 }
 async function relocateAgentRuntime(runtime, target, options = {}) {
   const source = runtimeDirectory(runtime.supervisorRoot, runtime.agent.publicKey);
-  const destination = resolve39(target);
+  const destination = resolve40(target);
   if (destination === source || destination.startsWith(`${source}/`)) {
     throw new Error("agent runtime destination must be outside the live runtime");
   }
@@ -48162,8 +48192,8 @@ init_self_update();
 init_systemd();
 
 // apps/body/dist/release-status.js
-import { readFile as readFile30, readdir as readdir10, rename as rename12, writeFile as writeFile21 } from "node:fs/promises";
-import { resolve as resolve40 } from "node:path";
+import { readFile as readFile31, readdir as readdir10, rename as rename12, writeFile as writeFile21 } from "node:fs/promises";
+import { resolve as resolve41 } from "node:path";
 var DAEMON_RELEASE_STATUS_FILE = "release-status.json";
 var RELEASE_VERSION = /^v\d+\.\d+\.\d+$/;
 var SOURCE_SHA = /^[0-9a-f]{7,64}$/;
@@ -48180,7 +48210,7 @@ async function writeDaemonReleaseStatus(runtimeDir, agentPubkey, identity, optio
     pid: options.pid ?? process.pid,
     readyAt: (options.now?.() ?? /* @__PURE__ */ new Date()).toISOString()
   };
-  const target = resolve40(runtimeDir, DAEMON_RELEASE_STATUS_FILE);
+  const target = resolve41(runtimeDir, DAEMON_RELEASE_STATUS_FILE);
   const temporary = `${target}.${status.pid}.tmp`;
   await writeFile21(temporary, `${JSON.stringify(status, null, 2)}
 `, { mode: 384 });
@@ -48190,7 +48220,7 @@ async function writeDaemonReleaseStatus(runtimeDir, agentPubkey, identity, optio
 
 // apps/body/dist/scratch-sweep.js
 import { lstat as lstat5, readdir as readdir11, rmdir as rmdir2, unlink as unlink9 } from "node:fs/promises";
-import { resolve as resolve41 } from "node:path";
+import { resolve as resolve42 } from "node:path";
 var DEFAULT_SCRATCH_TTL_HOURS = 72;
 var NEVER_SWEEP_SUBDIR_NAMES = new Set(HOME_SUBDIRS.filter((name) => name !== "tmp"));
 function scratchTtlMs(env = process.env) {
@@ -48199,7 +48229,7 @@ function scratchTtlMs(env = process.env) {
   return (Number.isFinite(hours) && hours > 0 ? hours : DEFAULT_SCRATCH_TTL_HOURS) * 60 * 60 * 1e3;
 }
 async function discoverAttachScratchRoots(runtimeDir) {
-  const roomsDir = resolve41(runtimeDir, "rooms");
+  const roomsDir = resolve42(runtimeDir, "rooms");
   let entries;
   try {
     entries = await readdir11(roomsDir, { withFileTypes: true });
@@ -48210,7 +48240,7 @@ async function discoverAttachScratchRoots(runtimeDir) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const home = resolve41(roomsDir, entry.name, "agent-home");
+    const home = resolve42(roomsDir, entry.name, "agent-home");
     const stats = await lstat5(home).catch(() => void 0);
     if (stats?.isDirectory())
       roots.push(home);
@@ -48229,7 +48259,7 @@ async function removeStaleFiles(dir, cutoffMs, protectNamesHere) {
   for (const entry of entries) {
     if (protectNamesHere && NEVER_SWEEP_SUBDIR_NAMES.has(entry.name))
       continue;
-    const path = resolve41(dir, entry.name);
+    const path = resolve42(dir, entry.name);
     const stats = await lstat5(path).catch(() => void 0);
     if (!stats || stats.isSymbolicLink())
       continue;
@@ -48314,7 +48344,7 @@ async function runAgentRuntime(configPath, host, signal) {
     BUZZ_DEV_MCP_BIN: runtime.mcpBinary
   };
   const config = loadBodyConfig({
-    workspaceRoot: resolve42(runtimeDir, "workspace"),
+    workspaceRoot: resolve43(runtimeDir, "workspace"),
     llmEnvFile: runtime.llmEnvFile,
     env,
     agent
@@ -49194,7 +49224,7 @@ async function main() {
     const roomId = roomFlag >= 0 ? args[roomFlag + 1] : void 0;
     if (!configPath || !roomId)
       throw new Error("corner-read-token requires --config and --room");
-    const activated = await activateDaemonTransport(resolve43(configPath));
+    const activated = await activateDaemonTransport(resolve44(configPath));
     if (!activated)
       throw new Error("corner-read-token requires monolith transport");
     const credential = await activated.client.execute("getRoomGitHubToken", { roomId });
@@ -49249,7 +49279,7 @@ async function main() {
     }
     if (!configPath && !args.includes("--machine"))
       throw new Error("daemon requires --machine, or --config <runtime.json> for one agent");
-    const { reason, lifecycle } = await runMachineHelper(configPath ? { configPaths: [resolve43(configPath)] } : {});
+    const { reason, lifecycle } = await runMachineHelper(configPath ? { configPaths: [resolve44(configPath)] } : {});
     daemonLifecycle = lifecycle;
     lifecycle.exit(reason);
     return;