zam-core 0.10.7 → 0.10.9

package/dist/cli/app.js

@@ -6122,6 +6122,14 @@ function setAgentConnectAutoDone(done, path = defaultConfigPath()) {
   }
   saveInstallConfig(config, path);
 }
+function getLastRepairedVersion(path = defaultConfigPath()) {
+  return loadInstallConfig(path).lastRepairedVersion;
+}
+function setLastRepairedVersion(version, path = defaultConfigPath()) {
+  const config = loadInstallConfig(path);
+  config.lastRepairedVersion = version;
+  saveInstallConfig(config, path);
+}
 function getConfiguredWorkspaces(path = defaultConfigPath()) {
   return loadInstallConfig(path).workspaces ?? [];
 }
@@ -6844,6 +6852,7 @@ __export(kernel_exports, {
   getInstallMode: () => getInstallMode,
   getKnowledgeContextById: () => getKnowledgeContextById,
   getKnowledgeContextByName: () => getKnowledgeContextByName,
+  getLastRepairedVersion: () => getLastRepairedVersion,
   getMachineAiConfig: () => getMachineAiConfig,
   getMachineAiModels: () => getMachineAiModels,
   getMonitorDir: () => getMonitorDir,
@@ -6939,6 +6948,7 @@ __export(kernel_exports, {
   setAgentConnectAutoDone: () => setAgentConnectAutoDone,
   setInstallChannel: () => setInstallChannel,
   setInstallMode: () => setInstallMode,
+  setLastRepairedVersion: () => setLastRepairedVersion,
   setProviderApiKey: () => setProviderApiKey,
   setSetting: () => setSetting,
   setTursoCredentials: () => setTursoCredentials,
@@ -7015,8 +7025,8 @@ var init_kernel = __esm({
 });
 
 // src/cli/app.ts
-import { readFileSync as readFileSync20 } from "fs";
-import { dirname as dirname14, join as join29 } from "path";
+import { readFileSync as readFileSync21 } from "fs";
+import { dirname as dirname14, join as join30 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
 import { Command as Command27 } from "commander";
 
@@ -7435,6 +7445,7 @@ function detectInstalledConnectHarnesses(options = {}) {
   return detected;
 }
 function parseMcpJsonConfig(path, content) {
+  if (content.trim() === "") return {};
   let parsed;
   try {
     parsed = JSON.parse(content);
@@ -7480,17 +7491,21 @@ function connectHarnessMcp(harnessId, opts) {
     if (!existing.mcpServers) {
       existing.mcpServers = {};
     }
-    if (opts.zamPath.endsWith(".js")) {
-      existing.mcpServers.zam = {
-        command: process.execPath,
-        args: [opts.zamPath, "mcp"]
-      };
-    } else {
-      existing.mcpServers.zam = {
-        command: opts.zamPath,
-        args: ["mcp"]
-      };
+    const expected = opts.zamPath.endsWith(".js") ? {
+      command: process.execPath,
+      args: [opts.zamPath, "mcp"]
+    } : {
+      command: opts.zamPath,
+      args: ["mcp"]
+    };
+    const current = existing.mcpServers.zam;
+    if (typeof current === "object" && current !== null && !Array.isArray(current)) {
+      const c = current;
+      if (c.command === expected.command && JSON.stringify(c.args) === JSON.stringify(expected.args)) {
+        alreadyConfigured = true;
+      }
     }
+    existing.mcpServers.zam = expected;
     return JSON.stringify(existing, null, 2);
   };
   if (harnessId === "claude-code") {
@@ -7517,25 +7532,7 @@ function connectHarnessMcp(harnessId, opts) {
   } else if (harnessId === "antigravity") {
     targetPath = join12(opts.home, ".gemini", "config", "mcp_config.json");
     hint = "Shared config read by Antigravity CLI and IDE (2.0+); older IDE builds read ~/.gemini/antigravity/mcp_config.json instead. Refresh Installed MCP Servers; the first tool call may still require approval.";
-    let existing = {};
-    if (exists(targetPath)) {
-      existing = parseMcpJsonConfig(targetPath, read(targetPath));
-    }
-    if (!existing.mcpServers) {
-      existing.mcpServers = {};
-    }
-    if (opts.zamPath.endsWith(".js")) {
-      existing.mcpServers.zam = {
-        command: process.execPath,
-        args: [opts.zamPath, "mcp"]
-      };
-    } else {
-      existing.mcpServers.zam = {
-        command: opts.zamPath,
-        args: ["mcp"]
-      };
-    }
-    content = JSON.stringify(existing, null, 2);
+    content = mergeMcpServersJson(targetPath);
   } else if (harnessId === "opencode") {
     targetPath = join12(opts.home, ".config", "opencode", "opencode.json");
     hint = "OpenCode will load the enabled 'zam' MCP server on next launch.";
@@ -7549,11 +7546,19 @@ function connectHarnessMcp(harnessId, opts) {
     }
     const servers = mcp ?? {};
     const cmd = opts.zamPath.endsWith(".js") ? [process.execPath, opts.zamPath, "mcp"] : [opts.zamPath, "mcp"];
-    servers.zam = {
+    const expected = {
       type: "local",
       command: cmd,
       enabled: true
     };
+    const current = servers.zam;
+    if (typeof current === "object" && current !== null && !Array.isArray(current)) {
+      const c = current;
+      if (c.type === expected.type && c.enabled === expected.enabled && JSON.stringify(c.command) === JSON.stringify(expected.command)) {
+        alreadyConfigured = true;
+      }
+    }
+    servers.zam = expected;
     existing.mcp = servers;
     content = JSON.stringify(existing, null, 2);
   } else if (harnessId === "codex") {
@@ -7664,21 +7669,25 @@ ${zamExtension}
     if (!existing.mcpServers) {
       existing.mcpServers = {};
     }
-    if (opts.zamPath.endsWith(".js")) {
-      existing.mcpServers.zam = {
-        type: "local",
-        command: process.execPath,
-        args: [opts.zamPath, "mcp"],
-        tools: ["*"]
-      };
-    } else {
-      existing.mcpServers.zam = {
-        type: "local",
-        command: opts.zamPath,
-        args: ["mcp"],
-        tools: ["*"]
-      };
+    const expected = opts.zamPath.endsWith(".js") ? {
+      type: "local",
+      command: process.execPath,
+      args: [opts.zamPath, "mcp"],
+      tools: ["*"]
+    } : {
+      type: "local",
+      command: opts.zamPath,
+      args: ["mcp"],
+      tools: ["*"]
+    };
+    const current = existing.mcpServers.zam;
+    if (typeof current === "object" && current !== null && !Array.isArray(current)) {
+      const c = current;
+      if (c.type === expected.type && c.command === expected.command && JSON.stringify(c.args) === JSON.stringify(expected.args) && JSON.stringify(c.tools) === JSON.stringify(expected.tools)) {
+        alreadyConfigured = true;
+      }
     }
+    existing.mcpServers.zam = expected;
     content = JSON.stringify(existing, null, 2);
   }
   return {
@@ -8310,11 +8319,11 @@ var agentCommand = new Command("agent").description("Provision and inspect the a
 
 // src/cli/commands/bridge.ts
 init_kernel();
-import { execFileSync as execFileSync4 } from "child_process";
+import { execFileSync as execFileSync5 } from "child_process";
 import { randomBytes as randomBytes2 } from "crypto";
-import { existsSync as existsSync19, readdirSync as readdirSync2, readFileSync as readFileSync16, rmSync as rmSync3 } from "fs";
-import { homedir as homedir13, tmpdir as tmpdir3 } from "os";
-import { join as join22, resolve as resolve5 } from "path";
+import { existsSync as existsSync21, readdirSync as readdirSync2, readFileSync as readFileSync17, rmSync as rmSync3 } from "fs";
+import { homedir as homedir14, tmpdir as tmpdir3 } from "os";
+import { join as join23, resolve as resolve6 } from "path";
 import { Command as Command2 } from "commander";
 import { ulid as ulid10 } from "ulid";
 
@@ -9401,7 +9410,7 @@ async function prepareRecallChain(db, opts) {
       } else {
         spawnLocalRunner(endpoint.url, endpoint.model, endpoint.runner);
         while (Date.now() < deadline) {
-          await new Promise((resolve11) => setTimeout(resolve11, 1e3));
+          await new Promise((resolve12) => setTimeout(resolve12, 1e3));
           if (await isLlmOnline(endpoint.url)) {
             online = true;
             break;
@@ -9694,7 +9703,7 @@ async function startLocalRunner(url, model, locale, hint) {
   let attempts = 0;
   const dotsPerLine = 30;
   while (true) {
-    await new Promise((resolve11) => setTimeout(resolve11, 500));
+    await new Promise((resolve12) => setTimeout(resolve12, 500));
     if (await isLlmOnline(url)) {
       if (attempts > 0) process.stdout.write("\n");
       return true;
@@ -9783,8 +9792,8 @@ async function fetchWithInteractiveTimeout(url, options = {}) {
   const dotsPerLine = 30;
   while (true) {
     let timeoutId;
-    const timeoutPromise = new Promise((resolve11) => {
-      timeoutId = setTimeout(() => resolve11("timeout"), timeoutMs);
+    const timeoutPromise = new Promise((resolve12) => {
+      timeoutId = setTimeout(() => resolve12("timeout"), timeoutMs);
     });
     const dotsInterval = setInterval(() => {
       process.stdout.write(".");
@@ -10051,7 +10060,7 @@ async function readWebLink(url) {
         redirect: "manual",
         signal: controller.signal,
         headers: {
-          "User-Agent": "ZAM-Content-Studio/0.10.7"
+          "User-Agent": "ZAM-Content-Studio/0.10.9"
         }
       });
       if (res.status >= 300 && res.status < 400) {
@@ -11314,6 +11323,127 @@ async function updateCheck(params) {
   });
 }
 
+// src/cli/cli-install.ts
+import { execFileSync as execFileSync4 } from "child_process";
+import {
+  chmodSync as chmodSync2,
+  existsSync as existsSync18,
+  mkdirSync as mkdirSync13,
+  readFileSync as readFileSync14,
+  writeFileSync as writeFileSync11
+} from "fs";
+import { homedir as homedir13 } from "os";
+import { delimiter as delimiter2, join as join19, resolve as resolve5 } from "path";
+var BUILT_CLI_PATTERN = /[\\/]dist[\\/]cli[\\/]index\.js$/;
+function normalizeForCompare(path, platform) {
+  const resolved = resolve5(path);
+  return platform === "win32" ? resolved.toLowerCase() : resolved;
+}
+function windowsShimContent(nodePath, cliPath) {
+  return `@echo off\r
+"${nodePath}" "${cliPath}" %*\r
+`;
+}
+function unixShimContent(nodePath, cliPath) {
+  return `#!/bin/sh
+exec "${nodePath}" "${cliPath}" "$@"
+`;
+}
+function psQuote(value) {
+  return `'${value.replace(/'/g, "''")}'`;
+}
+function ensureWindowsUserPath(binDir) {
+  const script = [
+    "$ErrorActionPreference = 'Stop'",
+    "$key = [Microsoft.Win32.Registry]::CurrentUser.CreateSubKey('Environment', $true)",
+    "$old = [string]$key.GetValue('Path', '', [Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames)",
+    `$target = ${psQuote(binDir)}`,
+    "$expanded = ($old -split ';') | Where-Object { $_ -ne '' } | ForEach-Object { [Environment]::ExpandEnvironmentVariables($_).TrimEnd('\\') }",
+    "if ($expanded -contains $target.TrimEnd('\\')) { 'present'; exit 0 }",
+    "$new = if ($old -and -not $old.EndsWith(';')) { $old + ';' + $target } else { $old + $target }",
+    "$key.SetValue('Path', $new, [Microsoft.Win32.RegistryValueKind]::ExpandString)",
+    `$sig = '[DllImport("user32.dll", SetLastError = true, CharSet = CharSet.Auto)] public static extern IntPtr SendMessageTimeout(IntPtr hWnd, uint Msg, UIntPtr wParam, string lParam, uint fuFlags, uint uTimeout, out UIntPtr lpdwResult);'`,
+    "$type = Add-Type -MemberDefinition $sig -Name 'ZamEnvBroadcast' -Namespace 'ZamInstall' -PassThru",
+    "[UIntPtr]$result = [UIntPtr]::Zero",
+    "$null = $type::SendMessageTimeout([IntPtr]0xffff, 0x001A, [UIntPtr]::Zero, 'Environment', 2, 5000, [ref]$result)",
+    "'updated'"
+  ].join("; ");
+  const output = execFileSync4(
+    "powershell.exe",
+    ["-NoProfile", "-NonInteractive", "-Command", script],
+    { stdio: ["ignore", "pipe", "pipe"], windowsHide: true }
+  ).toString().trim();
+  return output.endsWith("updated");
+}
+function ensureUnixUserPath(home, platform) {
+  const profile = join19(home, platform === "darwin" ? ".zprofile" : ".profile");
+  const existing = existsSync18(profile) ? readFileSync14(profile, "utf8") : "";
+  if (existing.includes(".zam/bin")) return false;
+  const block = `
+# Added by ZAM: keep the zam CLI on PATH
+export PATH="$HOME/.zam/bin:$PATH"
+`;
+  writeFileSync11(profile, existing + block, "utf8");
+  return true;
+}
+function installCliShim(options = {}) {
+  const home = options.home ?? homedir13();
+  const platform = options.platform ?? process.platform;
+  const env = options.env ?? process.env;
+  const find = options.find ?? findExecutable;
+  const nodePath = resolve5(options.nodePath ?? process.execPath);
+  const cliPath = resolve5(options.cliPath ?? process.argv[1] ?? "");
+  const binDir = join19(home, ".zam", "bin");
+  const shimPath = join19(binDir, platform === "win32" ? "zam.cmd" : "zam");
+  const report = {
+    status: "ok",
+    binDir,
+    shimPath,
+    nodePath,
+    cliPath,
+    onPath: false,
+    pathUpdated: false,
+    needsNewTerminal: false
+  };
+  if (!BUILT_CLI_PATTERN.test(cliPath) || !existsSync18(cliPath)) {
+    report.status = "skipped";
+    report.detail = `Not running from a built CLI entry (${cliPath}); nothing to link.`;
+    return report;
+  }
+  try {
+    const existing = find("zam");
+    if (existing && normalizeForCompare(existing, platform) !== normalizeForCompare(shimPath, platform)) {
+      report.status = "external";
+      report.onPath = true;
+      report.detail = existing;
+      return report;
+    }
+    const content = platform === "win32" ? windowsShimContent(nodePath, cliPath) : unixShimContent(nodePath, cliPath);
+    const existed = existsSync18(shimPath);
+    const changed = !existed || readFileSync14(shimPath, "utf8") !== content;
+    if (changed) {
+      mkdirSync13(binDir, { recursive: true });
+      writeFileSync11(shimPath, content, "utf8");
+      if (platform !== "win32") chmodSync2(shimPath, 493);
+    }
+    report.status = !existed ? "installed" : changed ? "refreshed" : "ok";
+    const processPathHasBin = (env.PATH ?? "").split(delimiter2).map((entry) => normalizeForCompare(entry.trim() || ".", platform)).includes(normalizeForCompare(binDir, platform));
+    if (processPathHasBin) {
+      report.onPath = true;
+      return report;
+    }
+    const ensureUserPath = options.ensureUserPath ?? (platform === "win32" ? ensureWindowsUserPath : () => ensureUnixUserPath(home, platform));
+    report.pathUpdated = ensureUserPath(binDir);
+    report.onPath = true;
+    report.needsNewTerminal = true;
+    return report;
+  } catch (error) {
+    report.status = "error";
+    report.detail = error instanceof Error ? error.message : String(error);
+    return report;
+  }
+}
+
 // src/cli/curriculum/breadcrumb.ts
 init_kernel();
 var LAST_SELECTION_KEY = "curriculum.lastSelection";
@@ -28000,1054 +28130,1132 @@ function getCurriculumProvider(id) {
   return CURRICULUM_PROVIDERS.find((provider) => provider.id === id);
 }
 
-// src/cli/llm/capability-probe.ts
+// src/cli/install-repair.ts
 init_kernel();
-var EMBEDDING_MODEL_HINTS = [
-  "embed",
-  "text-embedding",
-  "bge-",
-  "gte-",
-  "nomic",
-  "mxbai"
-];
-var VISION_MODEL_HINTS = [
-  "vision",
-  "-vl",
-  "vl-",
-  "vlm",
-  "llava",
-  "gpt-4o",
-  "gpt-4.1",
-  "gpt-5",
-  "gemini",
-  "pixtral",
-  "minicpm-v",
-  "internvl",
-  "moondream",
-  "llama-3.2",
-  "llama3.2",
-  // Xiaomi MiMo(-VL) is multimodal; the plain "mimo-v*" tag carries no "-vl".
-  "mimo"
+import { existsSync as existsSync20 } from "fs";
+
+// src/cli/provisioning/index.ts
+import {
+  existsSync as existsSync19,
+  lstatSync as lstatSync2,
+  mkdirSync as mkdirSync14,
+  readFileSync as readFileSync15,
+  realpathSync,
+  rmSync as rmSync2,
+  symlinkSync,
+  writeFileSync as writeFileSync12
+} from "fs";
+import { basename as basename4, dirname as dirname9, join as join20 } from "path";
+import { fileURLToPath as fileURLToPath5 } from "url";
+var packageRoot3 = [
+  fileURLToPath5(new URL("../..", import.meta.url)),
+  fileURLToPath5(new URL("../../..", import.meta.url))
+].find((candidate) => existsSync19(join20(candidate, "package.json"))) ?? fileURLToPath5(new URL("../..", import.meta.url));
+var ALL_SETUP_AGENTS = ["claude", "copilot", "codex", "agent"];
+var SKILL_PAIRS = [
+  {
+    from: join20(packageRoot3, ".claude", "skills", "zam", "SKILL.md"),
+    to: join20(".claude", "skills", "zam", "SKILL.md"),
+    agents: ["claude", "copilot"]
+  },
+  {
+    from: join20(packageRoot3, ".agent", "skills", "zam", "SKILL.md"),
+    to: join20(".agent", "skills", "zam", "SKILL.md"),
+    agents: ["agent"]
+  },
+  {
+    from: join20(packageRoot3, ".agents", "skills", "zam", "SKILL.md"),
+    to: join20(".agents", "skills", "zam", "SKILL.md"),
+    agents: ["codex"]
+  }
 ];
-function matchesAny(id, hints) {
-  const lower = id.toLowerCase();
-  return hints.some((hint) => lower.includes(hint));
+function parseSetupAgents(value) {
+  if (!value || value.trim().toLowerCase() === "all") {
+    return new Set(ALL_SETUP_AGENTS);
+  }
+  const aliases = {
+    claude: ["claude"],
+    copilot: ["copilot"],
+    codex: ["codex"],
+    agent: ["agent"],
+    opencode: ["agent"]
+  };
+  const selected = /* @__PURE__ */ new Set();
+  for (const raw of value.split(",")) {
+    const key = raw.trim().toLowerCase();
+    const mapped = aliases[key];
+    if (!mapped) {
+      throw new Error(
+        `Unknown agent "${raw}". Use: all, claude, copilot, codex, agent.`
+      );
+    }
+    for (const item of mapped) selected.add(item);
+  }
+  return selected;
 }
-function catalogHasModel(catalog, model) {
-  const lower = model.toLowerCase();
-  return catalog.some((id) => id.toLowerCase() === lower);
+function pathExists(path) {
+  try {
+    lstatSync2(path);
+    return true;
+  } catch {
+    return false;
+  }
 }
-function classifyCapabilities(entry, catalog, catalogKnown, dimProbeEmbedding = false) {
-  const detected = emptyCapabilityFlags();
-  if (entry.apiFlavor === "anthropic-messages") {
-    detected.text = true;
-    detected.image = true;
-    return detected;
+function isSymbolicLink(path) {
+  try {
+    return lstatSync2(path).isSymbolicLink();
+  } catch {
+    return false;
   }
-  const looksEmbedding = matchesAny(entry.model, EMBEDDING_MODEL_HINTS);
-  const looksVision = matchesAny(entry.model, VISION_MODEL_HINTS);
-  const inCatalog = catalogHasModel(catalog, entry.model);
-  detected.embedding = looksEmbedding || dimProbeEmbedding;
-  detected.image = looksVision;
-  detected.text = !detected.embedding && (inCatalog || !catalogKnown);
-  return detected;
 }
-function resolveApiKey(apiKeyRef) {
-  if (!apiKeyRef) return DEFAULT_LLM_API_KEY;
-  return getProviderApiKey(apiKeyRef) ?? DEFAULT_LLM_API_KEY;
+function comparableRealPath(path) {
+  const real = realpathSync(path);
+  return process.platform === "win32" ? real.toLowerCase() : real;
 }
-async function probeModelCapabilities(entry, opts = {}) {
-  const apiKey = resolveApiKey(entry.apiKeyRef);
-  if (entry.apiFlavor === "anthropic-messages") {
-    const online2 = await isLlmOnline(entry.url);
-    return {
-      reachable: online2,
-      catalog: [],
-      detected: classifyCapabilities(entry, [], false)
-    };
-  }
-  const online = await isLlmOnline(entry.url);
-  if (!online) {
-    return { reachable: false, catalog: [], detected: emptyCapabilityFlags() };
-  }
-  const catalog = await getAvailableModels(entry.url, apiKey);
-  const catalogKnown = catalog.length > 0;
-  let dimProbeEmbedding = false;
-  const looksEmbedding = matchesAny(entry.model, EMBEDDING_MODEL_HINTS);
-  if (opts.embeddingDimProbe && !catalogKnown && !looksEmbedding) {
-    try {
-      const [vector] = await embedTexts(
-        { url: entry.url, model: entry.model, apiKey },
-        ["capability probe"]
-      );
-      dimProbeEmbedding = Array.isArray(vector) && vector.length > 0;
-    } catch {
-      dimProbeEmbedding = false;
-    }
+function pathsResolveToSameDirectory(sourceDir, destinationDir) {
+  try {
+    return comparableRealPath(destinationDir) === comparableRealPath(sourceDir);
+  } catch {
+    return false;
   }
-  return {
-    reachable: true,
-    catalog,
-    detected: classifyCapabilities(
-      entry,
-      catalog,
-      catalogKnown,
-      dimProbeEmbedding
-    )
-  };
 }
-function reconcileCapabilities(userSelected, detected) {
-  const result = emptyCapabilityFlags();
-  for (const key of Object.keys(result)) {
-    result[key] = userSelected[key] && detected[key];
-  }
-  return result;
+function linkPointsTo(sourceDir, destinationDir) {
+  return isSymbolicLink(destinationDir) && pathsResolveToSameDirectory(sourceDir, destinationDir);
 }
-function validateModelSave(entry, probe, now = () => (/* @__PURE__ */ new Date()).toISOString()) {
-  if (!probe.reachable) {
-    return {
-      ok: false,
-      error: "Endpoint is unreachable \u2014 cannot verify capabilities. Bring it online and retry."
-    };
+function isZamSkillCopy(destinationDir) {
+  try {
+    if (!lstatSync2(destinationDir).isDirectory()) return false;
+    const skillFile = join20(destinationDir, "SKILL.md");
+    if (!existsSync19(skillFile)) return false;
+    return /^name:\s*zam\s*$/m.test(readFileSync15(skillFile, "utf8"));
+  } catch {
+    return false;
   }
-  return {
-    ok: true,
-    entry: {
-      ...entry,
-      capabilities: reconcileCapabilities(entry.capabilities, probe.detected),
-      detectedCapabilities: probe.detected,
-      probedAt: now()
-    }
-  };
 }
-
-// src/cli/llm/vision.ts
-init_kernel();
-import { randomBytes } from "crypto";
-import { readFileSync as readFileSync14 } from "fs";
-import { tmpdir as tmpdir2 } from "os";
-import { basename as basename4, join as join19 } from "path";
-var LANGUAGE_NAMES2 = {
-  en: "English",
-  de: "German",
-  es: "Spanish",
-  fr: "French",
-  pt: "Portuguese",
-  zh: "Chinese",
-  ja: "Japanese"
-};
-var OBSERVATION_KINDS2 = /* @__PURE__ */ new Set([
-  "progress",
-  "step-completed",
-  "error",
-  "help-seeking",
-  "uncertain",
-  "privacy-pause",
-  "heartbeat"
-]);
-var ACTION_TYPES2 = /* @__PURE__ */ new Set([
-  "click",
-  "shortcut",
-  "typing",
-  "scroll",
-  "window-change"
-]);
-async function observeUiSnapshotViaLLM(db, input8) {
-  const cfg = await getProviderForRole(db, "vision");
-  if (!cfg.enabled) {
-    throw new Error(
-      "Vision observation is disabled in settings (llm.vision.enabled)"
-    );
+function classifySkillDestination(sourceDir, destinationDir) {
+  if (!existsSync19(sourceDir)) return "source-missing";
+  if (!isSymbolicLink(destinationDir) && pathsResolveToSameDirectory(sourceDir, destinationDir)) {
+    return "source-directory";
   }
-  const imageUrls = [];
-  const isVideo = /\.(mp4|mov|m4v|avi|mkv|webm)$/i.test(input8.imagePath);
-  if (isVideo) {
-    const { mkdirSync: mkdirSync18, readdirSync: readdirSync3, rmSync: rmSync4 } = await import("fs");
-    const { execSync: execSync6 } = await import("child_process");
-    const tempDir = join19(
-      tmpdir2(),
-      `zam-frames-${randomBytes(4).toString("hex")}`
-    );
-    mkdirSync18(tempDir, { recursive: true });
-    try {
-      execSync6(
-        `ffmpeg -i "${input8.imagePath}" -vf "fps=1/3,scale=1280:-1" -vsync vfr "${tempDir}/frame_%03d.png"`,
-        { stdio: "ignore" }
-      );
-      let files = readdirSync3(tempDir).filter((f) => f.endsWith(".png")).sort();
-      if (files.length === 0) {
-        execSync6(
-          `ffmpeg -i "${input8.imagePath}" -vframes 1 "${tempDir}/frame_001.png"`,
-          { stdio: "ignore" }
-        );
-        files = readdirSync3(tempDir).filter((f) => f.endsWith(".png")).sort();
-      }
-      const maxFrames = cfg.maxFrames ?? 100;
-      let sampledFiles = files;
-      if (files.length > maxFrames) {
-        if (maxFrames <= 1) {
-          sampledFiles = [files[0]];
-        } else {
-          const step = (files.length - 1) / (maxFrames - 1);
-          sampledFiles = [];
-          for (let i = 0; i < maxFrames; i++) {
-            const index = Math.round(i * step);
-            sampledFiles.push(files[index]);
-          }
-        }
-      }
-      for (const file of sampledFiles) {
-        const bytes = readFileSync14(join19(tempDir, file));
-        imageUrls.push(`data:image/png;base64,${bytes.toString("base64")}`);
-      }
-    } finally {
-      try {
-        rmSync4(tempDir, { recursive: true, force: true });
-      } catch {
+  if (linkPointsTo(sourceDir, destinationDir)) return "linked";
+  if (!pathExists(destinationDir)) return "missing";
+  if (isSymbolicLink(destinationDir)) return "broken";
+  if (isZamSkillCopy(destinationDir)) return "stale-copy";
+  return "unmanaged";
+}
+function wireSkills(cwd = process.cwd(), agents = parseSetupAgents(), opts = {}) {
+  const results = [];
+  const log = (message) => {
+    if (!opts.quiet) console.log(message);
+  };
+  for (const { from, to, agents: pairAgents } of SKILL_PAIRS) {
+    if (!pairAgents.some((agent) => agents.has(agent))) continue;
+    const sourceDir = dirname9(from);
+    const destinationDir = dirname9(join20(cwd, to));
+    const label = dirname9(to);
+    const state = classifySkillDestination(sourceDir, destinationDir);
+    if (state === "source-missing") {
+      if (!opts.quiet) {
+        console.warn(`  warn  source not found, skipping: ${sourceDir}`);
       }
+      results.push({
+        source: sourceDir,
+        destination: destinationDir,
+        action: "skipped",
+        reason: "source-not-found"
+      });
+      continue;
     }
-  } else {
-    const imageBytes = readFileSync14(input8.imagePath);
-    const ext = input8.imagePath.split(".").pop()?.toLowerCase();
-    const mime = ext === "jpg" || ext === "jpeg" ? "image/jpeg" : "image/png";
-    imageUrls.push(`data:${mime};base64,${imageBytes.toString("base64")}`);
-  }
-  if (imageUrls.length === 0) {
-    throw new Error("No image data available for vision analysis");
-  }
-  const endpoints = [
-    {
-      url: cfg.url,
-      apiKey: cfg.apiKey || DEFAULT_LLM_API_KEY,
-      model: input8.model ?? cfg.model,
-      apiFlavor: cfg.apiFlavor
+    if (state === "source-directory") {
+      log(`  skip  ${label} (package source)`);
+      results.push({
+        source: sourceDir,
+        destination: destinationDir,
+        action: "skipped",
+        reason: "source-directory"
+      });
+      continue;
     }
-  ];
-  if (cfg.fallback) {
-    endpoints.push({
-      url: cfg.fallback.url,
-      apiKey: cfg.fallback.apiKey || DEFAULT_LLM_API_KEY,
-      model: cfg.fallback.model,
-      apiFlavor: cfg.fallback.apiFlavor
-    });
-  }
-  let lastRequestError;
-  let sawUnparseableDraft = false;
-  let sawInvalidDraft = false;
-  for (const endpoint of endpoints) {
-    let content;
-    try {
-      content = await requestVisionDraft({
-        ...endpoint,
-        locale: cfg.locale,
-        imageUrls,
-        input: input8
+    if (state === "linked") {
+      log(`  skip  ${label} (already linked)`);
+      results.push({
+        source: sourceDir,
+        destination: destinationDir,
+        action: "skipped",
+        reason: "already-linked"
       });
-    } catch (err) {
-      lastRequestError = err;
       continue;
     }
-    let draft;
-    try {
-      draft = extractDraft(content);
-    } catch {
-      sawUnparseableDraft = true;
+    const destinationExists = state !== "missing";
+    const replaceExisting = destinationExists && (Boolean(opts.force) || state === "broken" || state === "stale-copy");
+    if (destinationExists && !replaceExisting) {
+      if (!opts.quiet) {
+        console.warn(
+          `  warn  ${label} already exists and is not managed by ZAM; use --force to replace it`
+        );
+      }
+      results.push({
+        source: sourceDir,
+        destination: destinationDir,
+        action: "skipped",
+        reason: "unmanaged-destination"
+      });
       continue;
     }
-    const report = buildReport(input8, draft);
-    if (isUiObservationReport(report)) {
-      return report;
+    const action = destinationExists ? "relinked" : "linked";
+    if (opts.dryRun) {
+      log(`  would ${action === "linked" ? "link" : "relink"}  ${label}`);
+    } else {
+      if (destinationExists) {
+        rmSync2(destinationDir, { recursive: true, force: true });
+      }
+      mkdirSync14(dirname9(destinationDir), { recursive: true });
+      symlinkSync(
+        sourceDir,
+        destinationDir,
+        process.platform === "win32" ? "junction" : "dir"
+      );
+      log(`  ${action === "linked" ? "link" : "relink"}  ${label}`);
     }
-    sawInvalidDraft = true;
-  }
-  if (lastRequestError && !sawUnparseableDraft && !sawInvalidDraft) {
-    throw lastRequestError;
-  }
-  if (sawInvalidDraft) {
-    return uncertainReport(
-      input8,
-      "Vision model returned an invalid UI report draft."
-    );
+    results.push({ source: sourceDir, destination: destinationDir, action });
   }
-  return uncertainReport(
-    input8,
-    "Vision model returned output that could not be parsed as JSON."
-  );
-}
-var VISION_SYSTEM_PROMPT = "You are ZAM's UI observer. Return only strict JSON. Do not include markdown, prose, or fields outside the requested schema.";
-function visionSchema(language) {
-  return `{
-  "kind": "progress | step-completed | error | help-seeking | uncertain",
-  "summary": "short factual UI summary in ${language}",
-  "actions": [{"type": "click | shortcut | typing | scroll | window-change", "target": "optional UI target", "result": "optional visible result"}],
-  "candidateTokens": [{"slug": "optional-kebab-case-skill-token", "confidence": 0.0, "rationale": "why this token may matter"}],
-  "confidence": 0.0
-}`;
+  return results;
 }
-function visionUserText(args, language) {
-  const intro = args.imageUrls.length > 1 ? "Observe this sequence of Windows/macOS application snapshots showing a task performed over time." : "Observe this Windows/macOS application snapshot for a learning session.";
-  return `${intro}
-Application process: ${args.input.application.processName}
-Window title: ${args.input.application.windowTitle ?? "(unknown)"}
-
-Return this JSON draft only:
-${visionSchema(language)}`;
+function inspectSkillLinks(cwd = process.cwd(), agents = parseSetupAgents()) {
+  const results = [];
+  for (const { from, to, agents: pairAgents } of SKILL_PAIRS) {
+    if (!pairAgents.some((agent) => agents.has(agent))) continue;
+    const sourceDir = dirname9(from);
+    const destinationDir = dirname9(join20(cwd, to));
+    results.push({
+      agents: pairAgents,
+      source: sourceDir,
+      destination: destinationDir,
+      state: classifySkillDestination(sourceDir, destinationDir)
+    });
+  }
+  return results;
 }
-async function requestVisionDraft(args) {
-  if (args.apiFlavor === "anthropic-messages") {
-    return requestAnthropicVisionDraft(args);
+function summarizeSkillLinkHealth(inspections) {
+  if (inspections.some((item) => item.state === "unmanaged")) {
+    return "unmanaged";
   }
-  return requestChatCompletionsVisionDraft(args);
+  const repairable = ["missing", "broken", "stale-copy"];
+  if (inspections.some((item) => repairable.includes(item.state))) {
+    return "needs-repair";
+  }
+  return "healthy";
 }
-async function requestChatCompletionsVisionDraft(args) {
-  const language = LANGUAGE_NAMES2[args.locale] ?? "English";
-  const res = await fetchWithInteractiveTimeout(
-    `${args.url}/chat/completions`,
-    {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: `Bearer ${args.apiKey}`
-      },
-      body: JSON.stringify({
-        model: args.model,
-        messages: [
-          { role: "system", content: VISION_SYSTEM_PROMPT },
-          {
-            role: "user",
-            content: [
-              { type: "text", text: visionUserText(args, language) },
-              ...args.imageUrls.map((url) => ({
-                type: "image_url",
-                image_url: { url }
-              }))
-            ]
-          }
-        ],
-        temperature: 0,
-        max_tokens: args.input.maxTokens ?? DEFAULT_LLM_MAX_TOKENS,
-        ...args.url.includes("11434") || args.url.includes("localhost") || args.url.includes("127.0.0.1") ? { options: { num_ctx: 32768 } } : {}
-      }),
-      locale: args.locale,
-      hardTimeoutMs: args.input.hardTimeoutMs ?? 18e4
+var ZAM_BLOCK_START = "<!-- ZAM:START -->";
+var ZAM_BLOCK_END = "<!-- ZAM:END -->";
+function upsertMarkedBlock(dest, blockBody, dryRun) {
+  const block = `${ZAM_BLOCK_START}
+${blockBody.trim()}
+${ZAM_BLOCK_END}`;
+  if (!existsSync19(dest)) {
+    if (!dryRun) {
+      mkdirSync14(dirname9(dest), { recursive: true });
+      writeFileSync12(dest, `${block}
+`, "utf8");
     }
-  );
-  if (!res.ok) {
-    const errorText = await res.text().catch(() => "");
-    if (errorText.includes("image") && (errorText.includes("not support") || errorText.includes("unsupported"))) {
-      throw new Error(
-        `Vision model "${args.model}" does not support image input. Set a multimodal model: zam settings set llm.vision.model <model>`
-      );
+    return "write";
+  }
+  const existing = readFileSync15(dest, "utf8");
+  if (existing.includes(block)) return "skip";
+  const start = existing.indexOf(ZAM_BLOCK_START);
+  const end = existing.indexOf(ZAM_BLOCK_END);
+  const next = start >= 0 && end > start ? `${existing.slice(0, start)}${block}${existing.slice(end + ZAM_BLOCK_END.length)}` : `${existing.trimEnd()}
+
+${block}
+`;
+  if (!dryRun) writeFileSync12(dest, next, "utf8");
+  return start >= 0 && end > start ? "update" : "write";
+}
+function logInstructionAction(action, label, dryRun) {
+  if (action === "skip") {
+    console.log(`  skip  ${label} (ZAM block already present)`);
+  } else {
+    console.log(`  ${dryRun ? "would " : ""}${action} ${label}`);
+  }
+}
+function writeClaudeMd(skipClaudeMd, cwd = process.cwd(), opts = {}) {
+  if (skipClaudeMd) return;
+  const dest = join20(cwd, "CLAUDE.md");
+  if (existsSync19(dest)) {
+    if (!opts.updateExisting) {
+      console.log(`  skip  CLAUDE.md (already present)`);
+      return;
     }
-    throw new Error(
-      `Vision LLM request failed: ${res.statusText} (${res.status}) - ${errorText}`
+    const action = upsertMarkedBlock(
+      dest,
+      `## ZAM learning sessions
+
+ZAM is available in this repository. Use the \`zam\` skill in Claude Code to turn real work into an observed learning session with active recall and FSRS scheduling.
+
+- Skill files live under \`.claude/skills/zam/\`.
+- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
+- The skill directory is linked to this ZAM installation and updates with it.`,
+      Boolean(opts.dryRun)
     );
+    logInstructionAction(action, "CLAUDE.md", Boolean(opts.dryRun));
+    return;
   }
-  const data = await res.json();
-  if (data.error !== void 0) {
-    const errorMsg = formatModelError(data.error);
-    if (errorMsg.includes("image") && (errorMsg.includes("not support") || errorMsg.includes("unsupported"))) {
-      throw new Error(
-        `Vision model "${args.model}" does not support image input. Set a multimodal model: zam settings set llm.vision.model <model>`
-      );
+  const name = basename4(cwd);
+  const content = `# ZAM Personal Kernel \u2014 ${name}
+
+This is a ZAM personal instance. ZAM builds lasting skills through spaced
+repetition during real work \u2014 not separate study sessions.
+
+## First time here?
+Run \`/setup\` in Claude Code or Gemini CLI to complete first-time setup.
+
+## Regular use
+Run \`/zam\` to start a learning session on whatever you are working on.
+
+## What lives here
+- \`beliefs/\` \u2014 your worldview, approved by git commit
+- \`goals/\` \u2014 your objectives, decomposed into tasks and learning tokens
+
+## Fast-changing data
+Learning tokens, cards, and review history live in local SQLite by default.
+Use \`zam connector setup turso\` to store cloud credentials in
+\`~/.zam/credentials.json\` and use a Turso database across machines.
+`;
+  if (opts.dryRun) {
+    console.log(`  would write CLAUDE.md`);
+  } else {
+    writeFileSync12(dest, content, "utf8");
+    console.log(`  write CLAUDE.md`);
+  }
+}
+function writeAgentsMd(skipAgentsMd, cwd = process.cwd(), opts = {}) {
+  if (skipAgentsMd) return;
+  const dest = join20(cwd, "AGENTS.md");
+  if (existsSync19(dest)) {
+    if (!opts.updateExisting) {
+      console.log(`  skip  AGENTS.md (already present)`);
+      return;
     }
-    throw new Error(`Vision model failed: ${errorMsg}`);
+    const action = upsertMarkedBlock(
+      dest,
+      `## ZAM learning sessions
+
+ZAM is available in this repository. Select the \`zam\` skill through \`/skills\` or invoke \`$zam\` where supported to turn real work into an observed learning session with active recall and FSRS scheduling.
+
+- Skill files live under \`.agents/skills/zam/\`.
+- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
+- The skill directory is linked to this ZAM installation and updates with it.`,
+      Boolean(opts.dryRun)
+    );
+    logInstructionAction(action, "AGENTS.md", Boolean(opts.dryRun));
+    return;
   }
-  const content = data.choices?.[0]?.message?.content;
-  if (!content || typeof content !== "string") {
-    throw new Error("Empty response from vision model");
+  const name = basename4(cwd);
+  const content = `# ZAM Personal Kernel - ${name}
+
+This is a ZAM personal instance. ZAM builds lasting skills through spaced
+repetition during real work, not separate study sessions.
+
+## First time here?
+Run \`zam setup\` from the shell. When this repository includes
+\`.agents/skills/setup/\`, you can instead select \`setup\` through \`/skills\`
+or invoke \`$setup\`.
+
+## Regular use
+Select the \`zam\` skill through \`/skills\` or invoke \`$zam\` to start a
+learning session on whatever you are working on.
+
+## What lives here
+- \`beliefs/\` - your worldview, approved by git commit
+- \`goals/\` - your objectives, decomposed into tasks and learning tokens
+
+## Fast-changing data
+Learning tokens, cards, and review history live in local SQLite by default.
+Use \`zam connector setup turso\` to store cloud credentials in
+\`~/.zam/credentials.json\` and use a Turso database across machines.
+
+## Codex skills
+Codex discovers repository skills under \`.agents/skills/\`. Run
+\`zam setup --force\` after upgrading \`zam-core\` to refresh them.
+`;
+  if (opts.dryRun) {
+    console.log(`  would write AGENTS.md`);
+  } else {
+    writeFileSync12(dest, content, "utf8");
+    console.log(`  write AGENTS.md`);
   }
-  return content.trim();
 }
-function dataUrlToAnthropicImage(dataUrl) {
-  const match = dataUrl.match(/^data:(image\/[a-zA-Z]+);base64,(.+)$/);
-  if (!match) {
-    throw new Error("Unsupported image data for Anthropic vision request");
+function writeCopilotInstructions(cwd = process.cwd(), opts = {}) {
+  const dest = join20(cwd, ".github", "copilot-instructions.md");
+  const action = upsertMarkedBlock(
+    dest,
+    `## ZAM learning sessions
+
+ZAM is available in this repository through \`.claude/skills/zam/\`. Use the \`zam\` project skill from Copilot-compatible skill selection surfaces to turn real work into an observed learning session with active recall and FSRS scheduling.
+
+- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
+- The skill directory is linked to this ZAM installation and updates with it.`,
+    Boolean(opts.dryRun)
+  );
+  logInstructionAction(
+    action,
+    ".github/copilot-instructions.md",
+    Boolean(opts.dryRun)
+  );
+}
+
+// src/cli/install-repair.ts
+function defaultRepairWorkspaces() {
+  const summary = {
+    provisioned: 0,
+    missing: 0,
+    relinked: 0
+  };
+  try {
+    const agents = parseSetupAgents();
+    for (const workspace of getConfiguredWorkspaces()) {
+      if (!existsSync20(workspace.path)) {
+        summary.missing += 1;
+        continue;
+      }
+      const results = wireSkills(workspace.path, agents, { quiet: true });
+      summary.provisioned += 1;
+      summary.relinked += results.filter(
+        (result) => result.action === "linked" || result.action === "relinked"
+      ).length;
+    }
+  } catch (error) {
+    summary.error = error instanceof Error ? error.message : String(error);
   }
+  return summary;
+}
+function defaultConnectAgents(deps) {
+  const report = performAgentConnect({}, deps);
+  const companion = report.results.find((result) => result.extension?.kind === "vscode")?.extension?.action ?? null;
   return {
-    type: "image",
-    source: { type: "base64", media_type: match[1], data: match[2] }
+    success: report.success,
+    detected: report.detected,
+    connected: report.results.filter(
+      (result) => !result.error && (result.alreadyConfigured || result.wrote)
+    ).length,
+    companion,
+    errors: report.results.flatMap(
+      (result) => result.error ? [`${result.label}: ${result.error}`] : []
+    )
   };
 }
-async function requestAnthropicVisionDraft(args) {
-  const language = LANGUAGE_NAMES2[args.locale] ?? "English";
-  const base = args.url.replace(/\/+$/, "").replace(/\/v1$/, "");
-  const res = await fetchWithInteractiveTimeout(`${base}/v1/messages`, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      "x-api-key": args.apiKey,
-      "anthropic-version": "2023-06-01"
-    },
-    body: JSON.stringify({
-      model: args.model,
-      max_tokens: args.input.maxTokens ?? DEFAULT_LLM_MAX_TOKENS,
-      system: VISION_SYSTEM_PROMPT,
-      messages: [
-        {
-          role: "user",
-          content: [
-            { type: "text", text: visionUserText(args, language) },
-            ...args.imageUrls.map(dataUrlToAnthropicImage)
-          ]
-        }
-      ]
-    }),
-    locale: args.locale,
-    hardTimeoutMs: args.input.hardTimeoutMs ?? 18e4
-  });
-  if (!res.ok) {
-    const errorText = await res.text().catch(() => "");
-    throw new Error(
-      `Vision LLM request failed: ${res.statusText} (${res.status}) - ${errorText}`
-    );
-  }
-  const data = await res.json();
-  if (data.error !== void 0) {
-    throw new Error(`Vision model failed: ${formatModelError(data.error)}`);
+function performInstallRepair(opts = {}, deps = {}) {
+  const version = (deps.version ?? currentVersion)();
+  const getLastRepaired = deps.getLastRepaired ?? getLastRepairedVersion;
+  if (opts.ifVersionChanged && getLastRepaired() === version) {
+    return {
+      version,
+      skipped: true,
+      cli: null,
+      workspaces: null,
+      agents: null
+    };
   }
-  if (data.stop_reason === "refusal") {
-    throw new Error("Vision model refused the request (safety classifier).");
+  const cli = (deps.installCli ?? installCliShim)();
+  const workspaces = (deps.repairWorkspaces ?? defaultRepairWorkspaces)();
+  const agentDeps = {};
+  if (cli.status === "installed" || cli.status === "refreshed" || cli.status === "ok") {
+    agentDeps.findZam = () => cli.shimPath;
   }
-  const text = data.content?.find(
-    (b) => b.type === "text" && typeof b.text === "string"
-  )?.text;
-  if (!text) {
-    throw new Error("Empty response from vision model");
+  let agents;
+  try {
+    agents = (deps.connectAgents ?? defaultConnectAgents)(agentDeps);
+  } catch (error) {
+    agents = {
+      success: false,
+      detected: [],
+      connected: 0,
+      companion: null,
+      errors: [error instanceof Error ? error.message : String(error)]
+    };
   }
-  return text.trim();
+  (deps.setLastRepaired ?? setLastRepairedVersion)(version);
+  return { version, skipped: false, cli, workspaces, agents };
 }
-function extractDraft(content) {
-  const fenced = content.match(/```(?:json)?\s*([\s\S]*?)```/i);
-  const candidate = (fenced?.[1] ?? content).trim();
-  try {
-    return JSON.parse(candidate);
-  } catch {
-    const start = candidate.indexOf("{");
-    const end = candidate.lastIndexOf("}");
-    if (start === -1 || end <= start) throw new Error("no JSON object found");
-    return JSON.parse(
-      candidate.slice(start, end + 1)
-    );
+
+// src/cli/llm/capability-probe.ts
+init_kernel();
+var EMBEDDING_MODEL_HINTS = [
+  "embed",
+  "text-embedding",
+  "bge-",
+  "gte-",
+  "nomic",
+  "mxbai"
+];
+var VISION_MODEL_HINTS = [
+  "vision",
+  "-vl",
+  "vl-",
+  "vlm",
+  "llava",
+  "gpt-4o",
+  "gpt-4.1",
+  "gpt-5",
+  "gemini",
+  "pixtral",
+  "minicpm-v",
+  "internvl",
+  "moondream",
+  "llama-3.2",
+  "llama3.2",
+  // Xiaomi MiMo(-VL) is multimodal; the plain "mimo-v*" tag carries no "-vl".
+  "mimo"
+];
+function matchesAny(id, hints) {
+  const lower = id.toLowerCase();
+  return hints.some((hint) => lower.includes(hint));
+}
+function catalogHasModel(catalog, model) {
+  const lower = model.toLowerCase();
+  return catalog.some((id) => id.toLowerCase() === lower);
+}
+function classifyCapabilities(entry, catalog, catalogKnown, dimProbeEmbedding = false) {
+  const detected = emptyCapabilityFlags();
+  if (entry.apiFlavor === "anthropic-messages") {
+    detected.text = true;
+    detected.image = true;
+    return detected;
   }
+  const looksEmbedding = matchesAny(entry.model, EMBEDDING_MODEL_HINTS);
+  const looksVision = matchesAny(entry.model, VISION_MODEL_HINTS);
+  const inCatalog = catalogHasModel(catalog, entry.model);
+  detected.embedding = looksEmbedding || dimProbeEmbedding;
+  detected.image = looksVision;
+  detected.text = !detected.embedding && (inCatalog || !catalogKnown);
+  return detected;
 }
-function buildReport(input8, draft) {
-  return {
-    version: UI_OBSERVATION_PROTOCOL_VERSION,
-    sessionId: input8.sessionId,
-    sequence: input8.sequence,
-    observedFrom: input8.observedFrom,
-    observedTo: input8.observedTo,
-    kind: parseKind(draft.kind),
-    application: input8.application,
-    summary: parseSummary(draft.summary),
-    actions: parseActions(draft.actions),
-    evidence: [
-      {
-        type: "keyframe",
-        ref: input8.evidenceRef ?? basename4(input8.imagePath),
-        redacted: input8.redacted ?? false
-      }
-    ],
-    candidateTokens: parseCandidateTokens(draft.candidateTokens),
-    confidence: parseConfidence(draft.confidence, 0.35)
-  };
+function resolveApiKey(apiKeyRef) {
+  if (!apiKeyRef) return DEFAULT_LLM_API_KEY;
+  return getProviderApiKey(apiKeyRef) ?? DEFAULT_LLM_API_KEY;
 }
-function uncertainReport(input8, summary) {
+async function probeModelCapabilities(entry, opts = {}) {
+  const apiKey = resolveApiKey(entry.apiKeyRef);
+  if (entry.apiFlavor === "anthropic-messages") {
+    const online2 = await isLlmOnline(entry.url);
+    return {
+      reachable: online2,
+      catalog: [],
+      detected: classifyCapabilities(entry, [], false)
+    };
+  }
+  const online = await isLlmOnline(entry.url);
+  if (!online) {
+    return { reachable: false, catalog: [], detected: emptyCapabilityFlags() };
+  }
+  const catalog = await getAvailableModels(entry.url, apiKey);
+  const catalogKnown = catalog.length > 0;
+  let dimProbeEmbedding = false;
+  const looksEmbedding = matchesAny(entry.model, EMBEDDING_MODEL_HINTS);
+  if (opts.embeddingDimProbe && !catalogKnown && !looksEmbedding) {
+    try {
+      const [vector] = await embedTexts(
+        { url: entry.url, model: entry.model, apiKey },
+        ["capability probe"]
+      );
+      dimProbeEmbedding = Array.isArray(vector) && vector.length > 0;
+    } catch {
+      dimProbeEmbedding = false;
+    }
+  }
   return {
-    version: UI_OBSERVATION_PROTOCOL_VERSION,
-    sessionId: input8.sessionId,
-    sequence: input8.sequence,
-    observedFrom: input8.observedFrom,
-    observedTo: input8.observedTo,
-    kind: "uncertain",
-    application: input8.application,
-    summary,
-    actions: [],
-    evidence: [
-      {
-        type: "keyframe",
-        ref: input8.evidenceRef ?? basename4(input8.imagePath),
-        redacted: input8.redacted ?? false
-      }
-    ],
-    candidateTokens: [],
-    confidence: 0.1
+    reachable: true,
+    catalog,
+    detected: classifyCapabilities(
+      entry,
+      catalog,
+      catalogKnown,
+      dimProbeEmbedding
+    )
   };
 }
-function parseKind(value) {
-  if (typeof value === "string" && OBSERVATION_KINDS2.has(value)) {
-    return value;
+function reconcileCapabilities(userSelected, detected) {
+  const result = emptyCapabilityFlags();
+  for (const key of Object.keys(result)) {
+    result[key] = userSelected[key] && detected[key];
   }
-  return "uncertain";
+  return result;
 }
-function parseSummary(value) {
-  if (typeof value === "string" && value.trim().length > 0) {
-    return value.trim();
+function validateModelSave(entry, probe, now = () => (/* @__PURE__ */ new Date()).toISOString()) {
+  if (!probe.reachable) {
+    return {
+      ok: false,
+      error: "Endpoint is unreachable \u2014 cannot verify capabilities. Bring it online and retry."
+    };
   }
-  return "Vision model did not provide a factual UI summary.";
-}
-function parseActions(value) {
-  if (!Array.isArray(value)) return [];
-  return value.flatMap((item) => {
-    if (!isRecord2(item) || typeof item.type !== "string") return [];
-    if (!ACTION_TYPES2.has(item.type)) return [];
-    const action = { type: item.type };
-    if (typeof item.target === "string" && item.target.trim()) {
-      action.target = item.target.trim();
-    }
-    if (typeof item.result === "string" && item.result.trim()) {
-      action.result = item.result.trim();
-    }
-    return [action];
-  });
-}
-function parseCandidateTokens(value) {
-  if (!Array.isArray(value)) return [];
-  return value.flatMap((item) => {
-    if (!isRecord2(item)) return [];
-    if (typeof item.slug !== "string" || !/^[A-Za-z0-9._-]+$/.test(item.slug)) {
-      return [];
-    }
-    if (typeof item.rationale !== "string" || !item.rationale.trim()) {
-      return [];
+  return {
+    ok: true,
+    entry: {
+      ...entry,
+      capabilities: reconcileCapabilities(entry.capabilities, probe.detected),
+      detectedCapabilities: probe.detected,
+      probedAt: now()
     }
-    return [
-      {
-        slug: item.slug,
-        confidence: parseConfidence(item.confidence, 0.2),
-        rationale: item.rationale.trim()
-      }
-    ];
-  });
-}
-function parseConfidence(value, fallback) {
-  if (typeof value !== "number" || !Number.isFinite(value)) return fallback;
-  return Math.max(0, Math.min(1, value));
-}
-function formatModelError(error) {
-  if (typeof error === "string") return error;
-  if (isRecord2(error) && typeof error.message === "string") {
-    return error.message;
-  }
-  return JSON.stringify(error);
-}
-function isRecord2(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+  };
 }
 
-// src/cli/providers/config.ts
-init_kernel();
-
-// src/cli/commands/shared/db.ts
+// src/cli/llm/vision.ts
 init_kernel();
-function defaultErrorHandler(message) {
-  console.error("Error:", message);
-  process.exit(1);
-}
-async function withDb(fn, onError = defaultErrorHandler) {
-  let db;
-  try {
-    db = await openDatabase();
-    await fn(db);
-  } catch (err) {
-    onError(err.message);
-  } finally {
-    await db?.close();
+import { randomBytes } from "crypto";
+import { readFileSync as readFileSync16 } from "fs";
+import { tmpdir as tmpdir2 } from "os";
+import { basename as basename5, join as join21 } from "path";
+var LANGUAGE_NAMES2 = {
+  en: "English",
+  de: "German",
+  es: "Spanish",
+  fr: "French",
+  pt: "Portuguese",
+  zh: "Chinese",
+  ja: "Japanese"
+};
+var OBSERVATION_KINDS2 = /* @__PURE__ */ new Set([
+  "progress",
+  "step-completed",
+  "error",
+  "help-seeking",
+  "uncertain",
+  "privacy-pause",
+  "heartbeat"
+]);
+var ACTION_TYPES2 = /* @__PURE__ */ new Set([
+  "click",
+  "shortcut",
+  "typing",
+  "scroll",
+  "window-change"
+]);
+async function observeUiSnapshotViaLLM(db, input8) {
+  const cfg = await getProviderForRole(db, "vision");
+  if (!cfg.enabled) {
+    throw new Error(
+      "Vision observation is disabled in settings (llm.vision.enabled)"
+    );
   }
-}
-function jsonOut(data) {
-  console.log(JSON.stringify(data, null, 2));
-}
-
-// src/cli/providers/config.ts
-var VALID_API_FLAVORS = [
-  "chat-completions",
-  "anthropic-messages"
-];
-var VALID_ROLES = ["vision", "recall", "text", "embedding"];
-function upsertProviderRecord(providers, name, patch) {
-  const merged = { ...providers[name] ?? {} };
-  if (patch.url !== void 0) merged.url = patch.url;
-  if (patch.model !== void 0) merged.model = patch.model;
-  if (patch.apiFlavor !== void 0) merged.apiFlavor = patch.apiFlavor;
-  if (patch.apiKeyRef !== void 0) merged.apiKeyRef = patch.apiKeyRef;
-  if (patch.label !== void 0) merged.label = patch.label;
-  if (patch.local !== void 0) merged.local = patch.local;
-  if (patch.runner !== void 0) merged.runner = patch.runner;
-  return { ...providers, [name]: merged };
-}
-function removeProviderRecord(providers, name) {
-  if (!(name in providers)) return { providers, removed: false };
-  const next = { ...providers };
-  delete next[name];
-  return { providers: next, removed: true };
-}
-function rolesReferencing(roles, name) {
-  return VALID_ROLES.filter((role) => {
-    const binding = roles[role];
-    return binding?.primary === name || binding?.fallback === name;
-  });
-}
-function bindRoleProviders(roles, role, primary, fallback) {
-  const binding = { primary };
-  if (fallback) binding.fallback = fallback;
-  return { ...roles, [role]: binding };
-}
-function unbindRole(roles, role) {
-  if (!(role in roles)) return roles;
-  const next = { ...roles };
-  delete next[role];
-  return next;
-}
-function maskSecret(key) {
-  return key.length <= 4 ? "\u2022\u2022\u2022\u2022" : `\u2026${key.slice(-4)}`;
-}
-function buildProviderListing(providers, hasKey) {
-  return Object.entries(providers).map(([name, rec]) => {
-    const apiFlavor = rec.apiFlavor ?? (rec.url ? inferApiFlavor(rec.url) : "chat-completions");
-    let keyState;
-    if (!rec.apiKeyRef) keyState = "none";
-    else keyState = hasKey(rec.apiKeyRef) ? "set" : "missing";
-    const row = {
-      name,
-      url: rec.url,
-      model: rec.model,
-      apiFlavor,
-      apiKeyRef: rec.apiKeyRef,
-      keyState
-    };
-    if (rec.label !== void 0) row.label = rec.label;
-    if (rec.local !== void 0) row.local = rec.local;
-    if (rec.runner !== void 0) row.runner = rec.runner;
-    return row;
-  });
-}
-function findOrphanKeyRefs(storedRefs, providers) {
-  const used = new Set(
-    Object.values(providers).map((rec) => rec.apiKeyRef).filter((ref) => !!ref)
-  );
-  return storedRefs.filter((ref) => !used.has(ref));
-}
-async function readJson(db, key, fallback) {
-  const raw = await getSetting(db, key);
-  if (!raw) return fallback;
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return fallback;
+  const imageUrls = [];
+  const isVideo = /\.(mp4|mov|m4v|avi|mkv|webm)$/i.test(input8.imagePath);
+  if (isVideo) {
+    const { mkdirSync: mkdirSync19, readdirSync: readdirSync3, rmSync: rmSync4 } = await import("fs");
+    const { execSync: execSync6 } = await import("child_process");
+    const tempDir = join21(
+      tmpdir2(),
+      `zam-frames-${randomBytes(4).toString("hex")}`
+    );
+    mkdirSync19(tempDir, { recursive: true });
+    try {
+      execSync6(
+        `ffmpeg -i "${input8.imagePath}" -vf "fps=1/3,scale=1280:-1" -vsync vfr "${tempDir}/frame_%03d.png"`,
+        { stdio: "ignore" }
+      );
+      let files = readdirSync3(tempDir).filter((f) => f.endsWith(".png")).sort();
+      if (files.length === 0) {
+        execSync6(
+          `ffmpeg -i "${input8.imagePath}" -vframes 1 "${tempDir}/frame_001.png"`,
+          { stdio: "ignore" }
+        );
+        files = readdirSync3(tempDir).filter((f) => f.endsWith(".png")).sort();
+      }
+      const maxFrames = cfg.maxFrames ?? 100;
+      let sampledFiles = files;
+      if (files.length > maxFrames) {
+        if (maxFrames <= 1) {
+          sampledFiles = [files[0]];
+        } else {
+          const step = (files.length - 1) / (maxFrames - 1);
+          sampledFiles = [];
+          for (let i = 0; i < maxFrames; i++) {
+            const index = Math.round(i * step);
+            sampledFiles.push(files[index]);
+          }
+        }
+      }
+      for (const file of sampledFiles) {
+        const bytes = readFileSync16(join21(tempDir, file));
+        imageUrls.push(`data:image/png;base64,${bytes.toString("base64")}`);
+      }
+    } finally {
+      try {
+        rmSync4(tempDir, { recursive: true, force: true });
+      } catch {
+      }
+    }
+  } else {
+    const imageBytes = readFileSync16(input8.imagePath);
+    const ext = input8.imagePath.split(".").pop()?.toLowerCase();
+    const mime = ext === "jpg" || ext === "jpeg" ? "image/jpeg" : "image/png";
+    imageUrls.push(`data:${mime};base64,${imageBytes.toString("base64")}`);
+  }
+  if (imageUrls.length === 0) {
+    throw new Error("No image data available for vision analysis");
+  }
+  const endpoints = [
+    {
+      url: cfg.url,
+      apiKey: cfg.apiKey || DEFAULT_LLM_API_KEY,
+      model: input8.model ?? cfg.model,
+      apiFlavor: cfg.apiFlavor
+    }
+  ];
+  if (cfg.fallback) {
+    endpoints.push({
+      url: cfg.fallback.url,
+      apiKey: cfg.fallback.apiKey || DEFAULT_LLM_API_KEY,
+      model: cfg.fallback.model,
+      apiFlavor: cfg.fallback.apiFlavor
+    });
+  }
+  let lastRequestError;
+  let sawUnparseableDraft = false;
+  let sawInvalidDraft = false;
+  for (const endpoint of endpoints) {
+    let content;
+    try {
+      content = await requestVisionDraft({
+        ...endpoint,
+        locale: cfg.locale,
+        imageUrls,
+        input: input8
+      });
+    } catch (err) {
+      lastRequestError = err;
+      continue;
+    }
+    let draft;
+    try {
+      draft = extractDraft(content);
+    } catch {
+      sawUnparseableDraft = true;
+      continue;
+    }
+    const report = buildReport(input8, draft);
+    if (isUiObservationReport(report)) {
+      return report;
+    }
+    sawInvalidDraft = true;
   }
-}
-var readProviders = (db) => readJson(db, "llm.providers", {});
-var readRoles = (db) => readJson(db, "llm.roles", {});
-async function readScopedProviders(db, machine) {
-  if (machine) return getMachineAiConfig().providers ?? {};
-  if (!db)
-    throw new Error("Database is required for shared provider settings.");
-  return readProviders(db);
-}
-async function readScopedRoles(db, machine) {
-  if (machine) return getMachineAiConfig().roles ?? {};
-  if (!db)
-    throw new Error("Database is required for shared provider settings.");
-  return readRoles(db);
-}
-async function writeScopedProviders(db, machine, p) {
-  if (machine) {
-    const config = getMachineAiConfig();
-    saveMachineAiConfig({ ...config, providers: p });
-    return;
+  if (lastRequestError && !sawUnparseableDraft && !sawInvalidDraft) {
+    throw lastRequestError;
   }
-  if (!db)
-    throw new Error("Database is required for shared provider settings.");
-  await setSetting(db, "llm.providers", JSON.stringify(p));
-}
-async function writeScopedRoles(db, machine, r) {
-  if (machine) {
-    const config = getMachineAiConfig();
-    saveMachineAiConfig({ ...config, roles: r });
-    return;
+  if (sawInvalidDraft) {
+    return uncertainReport(
+      input8,
+      "Vision model returned an invalid UI report draft."
+    );
   }
-  if (!db)
-    throw new Error("Database is required for shared provider settings.");
-  await setSetting(db, "llm.roles", JSON.stringify(r));
+  return uncertainReport(
+    input8,
+    "Vision model returned output that could not be parsed as JSON."
+  );
 }
-async function withProviderScope(machine, action) {
-  if (machine) {
-    await action(void 0);
-    return;
-  }
-  await withDb(action);
+var VISION_SYSTEM_PROMPT = "You are ZAM's UI observer. Return only strict JSON. Do not include markdown, prose, or fields outside the requested schema.";
+function visionSchema(language) {
+  return `{
+  "kind": "progress | step-completed | error | help-seeking | uncertain",
+  "summary": "short factual UI summary in ${language}",
+  "actions": [{"type": "click | shortcut | typing | scroll | window-change", "target": "optional UI target", "result": "optional visible result"}],
+  "candidateTokens": [{"slug": "optional-kebab-case-skill-token", "confidence": 0.0, "rationale": "why this token may matter"}],
+  "confidence": 0.0
+}`;
 }
+function visionUserText(args, language) {
+  const intro = args.imageUrls.length > 1 ? "Observe this sequence of Windows/macOS application snapshots showing a task performed over time." : "Observe this Windows/macOS application snapshot for a learning session.";
+  return `${intro}
+Application process: ${args.input.application.processName}
+Window title: ${args.input.application.windowTitle ?? "(unknown)"}
 
-// src/cli/provisioning/index.ts
-import {
-  existsSync as existsSync18,
-  lstatSync as lstatSync2,
-  mkdirSync as mkdirSync13,
-  readFileSync as readFileSync15,
-  realpathSync,
-  rmSync as rmSync2,
-  symlinkSync,
-  writeFileSync as writeFileSync11
-} from "fs";
-import { basename as basename5, dirname as dirname9, join as join20 } from "path";
-import { fileURLToPath as fileURLToPath5 } from "url";
-var packageRoot3 = [
-  fileURLToPath5(new URL("../..", import.meta.url)),
-  fileURLToPath5(new URL("../../..", import.meta.url))
-].find((candidate) => existsSync18(join20(candidate, "package.json"))) ?? fileURLToPath5(new URL("../..", import.meta.url));
-var ALL_SETUP_AGENTS = ["claude", "copilot", "codex", "agent"];
-var SKILL_PAIRS = [
-  {
-    from: join20(packageRoot3, ".claude", "skills", "zam", "SKILL.md"),
-    to: join20(".claude", "skills", "zam", "SKILL.md"),
-    agents: ["claude", "copilot"]
-  },
-  {
-    from: join20(packageRoot3, ".agent", "skills", "zam", "SKILL.md"),
-    to: join20(".agent", "skills", "zam", "SKILL.md"),
-    agents: ["agent"]
-  },
-  {
-    from: join20(packageRoot3, ".agents", "skills", "zam", "SKILL.md"),
-    to: join20(".agents", "skills", "zam", "SKILL.md"),
-    agents: ["codex"]
+Return this JSON draft only:
+${visionSchema(language)}`;
+}
+async function requestVisionDraft(args) {
+  if (args.apiFlavor === "anthropic-messages") {
+    return requestAnthropicVisionDraft(args);
   }
-];
-function parseSetupAgents(value) {
-  if (!value || value.trim().toLowerCase() === "all") {
-    return new Set(ALL_SETUP_AGENTS);
+  return requestChatCompletionsVisionDraft(args);
+}
+async function requestChatCompletionsVisionDraft(args) {
+  const language = LANGUAGE_NAMES2[args.locale] ?? "English";
+  const res = await fetchWithInteractiveTimeout(
+    `${args.url}/chat/completions`,
+    {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${args.apiKey}`
+      },
+      body: JSON.stringify({
+        model: args.model,
+        messages: [
+          { role: "system", content: VISION_SYSTEM_PROMPT },
+          {
+            role: "user",
+            content: [
+              { type: "text", text: visionUserText(args, language) },
+              ...args.imageUrls.map((url) => ({
+                type: "image_url",
+                image_url: { url }
+              }))
+            ]
+          }
+        ],
+        temperature: 0,
+        max_tokens: args.input.maxTokens ?? DEFAULT_LLM_MAX_TOKENS,
+        ...args.url.includes("11434") || args.url.includes("localhost") || args.url.includes("127.0.0.1") ? { options: { num_ctx: 32768 } } : {}
+      }),
+      locale: args.locale,
+      hardTimeoutMs: args.input.hardTimeoutMs ?? 18e4
+    }
+  );
+  if (!res.ok) {
+    const errorText = await res.text().catch(() => "");
+    if (errorText.includes("image") && (errorText.includes("not support") || errorText.includes("unsupported"))) {
+      throw new Error(
+        `Vision model "${args.model}" does not support image input. Set a multimodal model: zam settings set llm.vision.model <model>`
+      );
+    }
+    throw new Error(
+      `Vision LLM request failed: ${res.statusText} (${res.status}) - ${errorText}`
+    );
   }
-  const aliases = {
-    claude: ["claude"],
-    copilot: ["copilot"],
-    codex: ["codex"],
-    agent: ["agent"],
-    opencode: ["agent"]
-  };
-  const selected = /* @__PURE__ */ new Set();
-  for (const raw of value.split(",")) {
-    const key = raw.trim().toLowerCase();
-    const mapped = aliases[key];
-    if (!mapped) {
+  const data = await res.json();
+  if (data.error !== void 0) {
+    const errorMsg = formatModelError(data.error);
+    if (errorMsg.includes("image") && (errorMsg.includes("not support") || errorMsg.includes("unsupported"))) {
       throw new Error(
-        `Unknown agent "${raw}". Use: all, claude, copilot, codex, agent.`
+        `Vision model "${args.model}" does not support image input. Set a multimodal model: zam settings set llm.vision.model <model>`
       );
     }
-    for (const item of mapped) selected.add(item);
+    throw new Error(`Vision model failed: ${errorMsg}`);
   }
-  return selected;
+  const content = data.choices?.[0]?.message?.content;
+  if (!content || typeof content !== "string") {
+    throw new Error("Empty response from vision model");
+  }
+  return content.trim();
 }
-function pathExists(path) {
-  try {
-    lstatSync2(path);
-    return true;
-  } catch {
-    return false;
+function dataUrlToAnthropicImage(dataUrl) {
+  const match = dataUrl.match(/^data:(image\/[a-zA-Z]+);base64,(.+)$/);
+  if (!match) {
+    throw new Error("Unsupported image data for Anthropic vision request");
+  }
+  return {
+    type: "image",
+    source: { type: "base64", media_type: match[1], data: match[2] }
+  };
+}
+async function requestAnthropicVisionDraft(args) {
+  const language = LANGUAGE_NAMES2[args.locale] ?? "English";
+  const base = args.url.replace(/\/+$/, "").replace(/\/v1$/, "");
+  const res = await fetchWithInteractiveTimeout(`${base}/v1/messages`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "x-api-key": args.apiKey,
+      "anthropic-version": "2023-06-01"
+    },
+    body: JSON.stringify({
+      model: args.model,
+      max_tokens: args.input.maxTokens ?? DEFAULT_LLM_MAX_TOKENS,
+      system: VISION_SYSTEM_PROMPT,
+      messages: [
+        {
+          role: "user",
+          content: [
+            { type: "text", text: visionUserText(args, language) },
+            ...args.imageUrls.map(dataUrlToAnthropicImage)
+          ]
+        }
+      ]
+    }),
+    locale: args.locale,
+    hardTimeoutMs: args.input.hardTimeoutMs ?? 18e4
+  });
+  if (!res.ok) {
+    const errorText = await res.text().catch(() => "");
+    throw new Error(
+      `Vision LLM request failed: ${res.statusText} (${res.status}) - ${errorText}`
+    );
+  }
+  const data = await res.json();
+  if (data.error !== void 0) {
+    throw new Error(`Vision model failed: ${formatModelError(data.error)}`);
+  }
+  if (data.stop_reason === "refusal") {
+    throw new Error("Vision model refused the request (safety classifier).");
+  }
+  const text = data.content?.find(
+    (b) => b.type === "text" && typeof b.text === "string"
+  )?.text;
+  if (!text) {
+    throw new Error("Empty response from vision model");
   }
+  return text.trim();
 }
-function isSymbolicLink(path) {
+function extractDraft(content) {
+  const fenced = content.match(/```(?:json)?\s*([\s\S]*?)```/i);
+  const candidate = (fenced?.[1] ?? content).trim();
   try {
-    return lstatSync2(path).isSymbolicLink();
+    return JSON.parse(candidate);
   } catch {
-    return false;
+    const start = candidate.indexOf("{");
+    const end = candidate.lastIndexOf("}");
+    if (start === -1 || end <= start) throw new Error("no JSON object found");
+    return JSON.parse(
+      candidate.slice(start, end + 1)
+    );
   }
 }
-function comparableRealPath(path) {
-  const real = realpathSync(path);
-  return process.platform === "win32" ? real.toLowerCase() : real;
-}
-function pathsResolveToSameDirectory(sourceDir, destinationDir) {
-  try {
-    return comparableRealPath(destinationDir) === comparableRealPath(sourceDir);
-  } catch {
-    return false;
-  }
+function buildReport(input8, draft) {
+  return {
+    version: UI_OBSERVATION_PROTOCOL_VERSION,
+    sessionId: input8.sessionId,
+    sequence: input8.sequence,
+    observedFrom: input8.observedFrom,
+    observedTo: input8.observedTo,
+    kind: parseKind(draft.kind),
+    application: input8.application,
+    summary: parseSummary(draft.summary),
+    actions: parseActions(draft.actions),
+    evidence: [
+      {
+        type: "keyframe",
+        ref: input8.evidenceRef ?? basename5(input8.imagePath),
+        redacted: input8.redacted ?? false
+      }
+    ],
+    candidateTokens: parseCandidateTokens(draft.candidateTokens),
+    confidence: parseConfidence(draft.confidence, 0.35)
+  };
 }
-function linkPointsTo(sourceDir, destinationDir) {
-  return isSymbolicLink(destinationDir) && pathsResolveToSameDirectory(sourceDir, destinationDir);
+function uncertainReport(input8, summary) {
+  return {
+    version: UI_OBSERVATION_PROTOCOL_VERSION,
+    sessionId: input8.sessionId,
+    sequence: input8.sequence,
+    observedFrom: input8.observedFrom,
+    observedTo: input8.observedTo,
+    kind: "uncertain",
+    application: input8.application,
+    summary,
+    actions: [],
+    evidence: [
+      {
+        type: "keyframe",
+        ref: input8.evidenceRef ?? basename5(input8.imagePath),
+        redacted: input8.redacted ?? false
+      }
+    ],
+    candidateTokens: [],
+    confidence: 0.1
+  };
 }
-function isZamSkillCopy(destinationDir) {
-  try {
-    if (!lstatSync2(destinationDir).isDirectory()) return false;
-    const skillFile = join20(destinationDir, "SKILL.md");
-    if (!existsSync18(skillFile)) return false;
-    return /^name:\s*zam\s*$/m.test(readFileSync15(skillFile, "utf8"));
-  } catch {
-    return false;
+function parseKind(value) {
+  if (typeof value === "string" && OBSERVATION_KINDS2.has(value)) {
+    return value;
   }
+  return "uncertain";
 }
-function classifySkillDestination(sourceDir, destinationDir) {
-  if (!existsSync18(sourceDir)) return "source-missing";
-  if (!isSymbolicLink(destinationDir) && pathsResolveToSameDirectory(sourceDir, destinationDir)) {
-    return "source-directory";
+function parseSummary(value) {
+  if (typeof value === "string" && value.trim().length > 0) {
+    return value.trim();
   }
-  if (linkPointsTo(sourceDir, destinationDir)) return "linked";
-  if (!pathExists(destinationDir)) return "missing";
-  if (isSymbolicLink(destinationDir)) return "broken";
-  if (isZamSkillCopy(destinationDir)) return "stale-copy";
-  return "unmanaged";
+  return "Vision model did not provide a factual UI summary.";
 }
-function wireSkills(cwd = process.cwd(), agents = parseSetupAgents(), opts = {}) {
-  const results = [];
-  const log = (message) => {
-    if (!opts.quiet) console.log(message);
-  };
-  for (const { from, to, agents: pairAgents } of SKILL_PAIRS) {
-    if (!pairAgents.some((agent) => agents.has(agent))) continue;
-    const sourceDir = dirname9(from);
-    const destinationDir = dirname9(join20(cwd, to));
-    const label = dirname9(to);
-    const state = classifySkillDestination(sourceDir, destinationDir);
-    if (state === "source-missing") {
-      if (!opts.quiet) {
-        console.warn(`  warn  source not found, skipping: ${sourceDir}`);
-      }
-      results.push({
-        source: sourceDir,
-        destination: destinationDir,
-        action: "skipped",
-        reason: "source-not-found"
-      });
-      continue;
+function parseActions(value) {
+  if (!Array.isArray(value)) return [];
+  return value.flatMap((item) => {
+    if (!isRecord2(item) || typeof item.type !== "string") return [];
+    if (!ACTION_TYPES2.has(item.type)) return [];
+    const action = { type: item.type };
+    if (typeof item.target === "string" && item.target.trim()) {
+      action.target = item.target.trim();
     }
-    if (state === "source-directory") {
-      log(`  skip  ${label} (package source)`);
-      results.push({
-        source: sourceDir,
-        destination: destinationDir,
-        action: "skipped",
-        reason: "source-directory"
-      });
-      continue;
+    if (typeof item.result === "string" && item.result.trim()) {
+      action.result = item.result.trim();
     }
-    if (state === "linked") {
-      log(`  skip  ${label} (already linked)`);
-      results.push({
-        source: sourceDir,
-        destination: destinationDir,
-        action: "skipped",
-        reason: "already-linked"
-      });
-      continue;
+    return [action];
+  });
+}
+function parseCandidateTokens(value) {
+  if (!Array.isArray(value)) return [];
+  return value.flatMap((item) => {
+    if (!isRecord2(item)) return [];
+    if (typeof item.slug !== "string" || !/^[A-Za-z0-9._-]+$/.test(item.slug)) {
+      return [];
     }
-    const destinationExists = state !== "missing";
-    const replaceExisting = destinationExists && (Boolean(opts.force) || state === "broken" || state === "stale-copy");
-    if (destinationExists && !replaceExisting) {
-      if (!opts.quiet) {
-        console.warn(
-          `  warn  ${label} already exists and is not managed by ZAM; use --force to replace it`
-        );
-      }
-      results.push({
-        source: sourceDir,
-        destination: destinationDir,
-        action: "skipped",
-        reason: "unmanaged-destination"
-      });
-      continue;
+    if (typeof item.rationale !== "string" || !item.rationale.trim()) {
+      return [];
     }
-    const action = destinationExists ? "relinked" : "linked";
-    if (opts.dryRun) {
-      log(`  would ${action === "linked" ? "link" : "relink"}  ${label}`);
-    } else {
-      if (destinationExists) {
-        rmSync2(destinationDir, { recursive: true, force: true });
+    return [
+      {
+        slug: item.slug,
+        confidence: parseConfidence(item.confidence, 0.2),
+        rationale: item.rationale.trim()
       }
-      mkdirSync13(dirname9(destinationDir), { recursive: true });
-      symlinkSync(
-        sourceDir,
-        destinationDir,
-        process.platform === "win32" ? "junction" : "dir"
-      );
-      log(`  ${action === "linked" ? "link" : "relink"}  ${label}`);
-    }
-    results.push({ source: sourceDir, destination: destinationDir, action });
+    ];
+  });
+}
+function parseConfidence(value, fallback) {
+  if (typeof value !== "number" || !Number.isFinite(value)) return fallback;
+  return Math.max(0, Math.min(1, value));
+}
+function formatModelError(error) {
+  if (typeof error === "string") return error;
+  if (isRecord2(error) && typeof error.message === "string") {
+    return error.message;
   }
-  return results;
+  return JSON.stringify(error);
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+// src/cli/providers/config.ts
+init_kernel();
+
+// src/cli/commands/shared/db.ts
+init_kernel();
+function defaultErrorHandler(message) {
+  console.error("Error:", message);
+  process.exit(1);
+}
+async function withDb(fn, onError = defaultErrorHandler) {
+  let db;
+  try {
+    db = await openDatabase();
+    await fn(db);
+  } catch (err) {
+    onError(err.message);
+  } finally {
+    await db?.close();
+  }
+}
+function jsonOut(data) {
+  console.log(JSON.stringify(data, null, 2));
+}
+
+// src/cli/providers/config.ts
+var VALID_API_FLAVORS = [
+  "chat-completions",
+  "anthropic-messages"
+];
+var VALID_ROLES = ["vision", "recall", "text", "embedding"];
+function upsertProviderRecord(providers, name, patch) {
+  const merged = { ...providers[name] ?? {} };
+  if (patch.url !== void 0) merged.url = patch.url;
+  if (patch.model !== void 0) merged.model = patch.model;
+  if (patch.apiFlavor !== void 0) merged.apiFlavor = patch.apiFlavor;
+  if (patch.apiKeyRef !== void 0) merged.apiKeyRef = patch.apiKeyRef;
+  if (patch.label !== void 0) merged.label = patch.label;
+  if (patch.local !== void 0) merged.local = patch.local;
+  if (patch.runner !== void 0) merged.runner = patch.runner;
+  return { ...providers, [name]: merged };
+}
+function removeProviderRecord(providers, name) {
+  if (!(name in providers)) return { providers, removed: false };
+  const next = { ...providers };
+  delete next[name];
+  return { providers: next, removed: true };
+}
+function rolesReferencing(roles, name) {
+  return VALID_ROLES.filter((role) => {
+    const binding = roles[role];
+    return binding?.primary === name || binding?.fallback === name;
+  });
+}
+function bindRoleProviders(roles, role, primary, fallback) {
+  const binding = { primary };
+  if (fallback) binding.fallback = fallback;
+  return { ...roles, [role]: binding };
 }
-function inspectSkillLinks(cwd = process.cwd(), agents = parseSetupAgents()) {
-  const results = [];
-  for (const { from, to, agents: pairAgents } of SKILL_PAIRS) {
-    if (!pairAgents.some((agent) => agents.has(agent))) continue;
-    const sourceDir = dirname9(from);
-    const destinationDir = dirname9(join20(cwd, to));
-    results.push({
-      agents: pairAgents,
-      source: sourceDir,
-      destination: destinationDir,
-      state: classifySkillDestination(sourceDir, destinationDir)
-    });
-  }
-  return results;
+function unbindRole(roles, role) {
+  if (!(role in roles)) return roles;
+  const next = { ...roles };
+  delete next[role];
+  return next;
 }
-function summarizeSkillLinkHealth(inspections) {
-  if (inspections.some((item) => item.state === "unmanaged")) {
-    return "unmanaged";
-  }
-  const repairable = ["missing", "broken", "stale-copy"];
-  if (inspections.some((item) => repairable.includes(item.state))) {
-    return "needs-repair";
-  }
-  return "healthy";
+function maskSecret(key) {
+  return key.length <= 4 ? "\u2022\u2022\u2022\u2022" : `\u2026${key.slice(-4)}`;
 }
-var ZAM_BLOCK_START = "<!-- ZAM:START -->";
-var ZAM_BLOCK_END = "<!-- ZAM:END -->";
-function upsertMarkedBlock(dest, blockBody, dryRun) {
-  const block = `${ZAM_BLOCK_START}
-${blockBody.trim()}
-${ZAM_BLOCK_END}`;
-  if (!existsSync18(dest)) {
-    if (!dryRun) {
-      mkdirSync13(dirname9(dest), { recursive: true });
-      writeFileSync11(dest, `${block}
-`, "utf8");
-    }
-    return "write";
-  }
-  const existing = readFileSync15(dest, "utf8");
-  if (existing.includes(block)) return "skip";
-  const start = existing.indexOf(ZAM_BLOCK_START);
-  const end = existing.indexOf(ZAM_BLOCK_END);
-  const next = start >= 0 && end > start ? `${existing.slice(0, start)}${block}${existing.slice(end + ZAM_BLOCK_END.length)}` : `${existing.trimEnd()}
-
-${block}
-`;
-  if (!dryRun) writeFileSync11(dest, next, "utf8");
-  return start >= 0 && end > start ? "update" : "write";
+function buildProviderListing(providers, hasKey) {
+  return Object.entries(providers).map(([name, rec]) => {
+    const apiFlavor = rec.apiFlavor ?? (rec.url ? inferApiFlavor(rec.url) : "chat-completions");
+    let keyState;
+    if (!rec.apiKeyRef) keyState = "none";
+    else keyState = hasKey(rec.apiKeyRef) ? "set" : "missing";
+    const row = {
+      name,
+      url: rec.url,
+      model: rec.model,
+      apiFlavor,
+      apiKeyRef: rec.apiKeyRef,
+      keyState
+    };
+    if (rec.label !== void 0) row.label = rec.label;
+    if (rec.local !== void 0) row.local = rec.local;
+    if (rec.runner !== void 0) row.runner = rec.runner;
+    return row;
+  });
 }
-function logInstructionAction(action, label, dryRun) {
-  if (action === "skip") {
-    console.log(`  skip  ${label} (ZAM block already present)`);
-  } else {
-    console.log(`  ${dryRun ? "would " : ""}${action} ${label}`);
+function findOrphanKeyRefs(storedRefs, providers) {
+  const used = new Set(
+    Object.values(providers).map((rec) => rec.apiKeyRef).filter((ref) => !!ref)
+  );
+  return storedRefs.filter((ref) => !used.has(ref));
+}
+async function readJson(db, key, fallback) {
+  const raw = await getSetting(db, key);
+  if (!raw) return fallback;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return fallback;
   }
 }
-function writeClaudeMd(skipClaudeMd, cwd = process.cwd(), opts = {}) {
-  if (skipClaudeMd) return;
-  const dest = join20(cwd, "CLAUDE.md");
-  if (existsSync18(dest)) {
-    if (!opts.updateExisting) {
-      console.log(`  skip  CLAUDE.md (already present)`);
-      return;
-    }
-    const action = upsertMarkedBlock(
-      dest,
-      `## ZAM learning sessions
-
-ZAM is available in this repository. Use the \`zam\` skill in Claude Code to turn real work into an observed learning session with active recall and FSRS scheduling.
-
-- Skill files live under \`.claude/skills/zam/\`.
-- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
-- The skill directory is linked to this ZAM installation and updates with it.`,
-      Boolean(opts.dryRun)
-    );
-    logInstructionAction(action, "CLAUDE.md", Boolean(opts.dryRun));
+var readProviders = (db) => readJson(db, "llm.providers", {});
+var readRoles = (db) => readJson(db, "llm.roles", {});
+async function readScopedProviders(db, machine) {
+  if (machine) return getMachineAiConfig().providers ?? {};
+  if (!db)
+    throw new Error("Database is required for shared provider settings.");
+  return readProviders(db);
+}
+async function readScopedRoles(db, machine) {
+  if (machine) return getMachineAiConfig().roles ?? {};
+  if (!db)
+    throw new Error("Database is required for shared provider settings.");
+  return readRoles(db);
+}
+async function writeScopedProviders(db, machine, p) {
+  if (machine) {
+    const config = getMachineAiConfig();
+    saveMachineAiConfig({ ...config, providers: p });
     return;
   }
-  const name = basename5(cwd);
-  const content = `# ZAM Personal Kernel \u2014 ${name}
-
-This is a ZAM personal instance. ZAM builds lasting skills through spaced
-repetition during real work \u2014 not separate study sessions.
-
-## First time here?
-Run \`/setup\` in Claude Code or Gemini CLI to complete first-time setup.
-
-## Regular use
-Run \`/zam\` to start a learning session on whatever you are working on.
-
-## What lives here
-- \`beliefs/\` \u2014 your worldview, approved by git commit
-- \`goals/\` \u2014 your objectives, decomposed into tasks and learning tokens
-
-## Fast-changing data
-Learning tokens, cards, and review history live in local SQLite by default.
-Use \`zam connector setup turso\` to store cloud credentials in
-\`~/.zam/credentials.json\` and use a Turso database across machines.
-`;
-  if (opts.dryRun) {
-    console.log(`  would write CLAUDE.md`);
-  } else {
-    writeFileSync11(dest, content, "utf8");
-    console.log(`  write CLAUDE.md`);
-  }
+  if (!db)
+    throw new Error("Database is required for shared provider settings.");
+  await setSetting(db, "llm.providers", JSON.stringify(p));
 }
-function writeAgentsMd(skipAgentsMd, cwd = process.cwd(), opts = {}) {
-  if (skipAgentsMd) return;
-  const dest = join20(cwd, "AGENTS.md");
-  if (existsSync18(dest)) {
-    if (!opts.updateExisting) {
-      console.log(`  skip  AGENTS.md (already present)`);
-      return;
-    }
-    const action = upsertMarkedBlock(
-      dest,
-      `## ZAM learning sessions
-
-ZAM is available in this repository. Select the \`zam\` skill through \`/skills\` or invoke \`$zam\` where supported to turn real work into an observed learning session with active recall and FSRS scheduling.
-
-- Skill files live under \`.agents/skills/zam/\`.
-- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
-- The skill directory is linked to this ZAM installation and updates with it.`,
-      Boolean(opts.dryRun)
-    );
-    logInstructionAction(action, "AGENTS.md", Boolean(opts.dryRun));
+async function writeScopedRoles(db, machine, r) {
+  if (machine) {
+    const config = getMachineAiConfig();
+    saveMachineAiConfig({ ...config, roles: r });
     return;
   }
-  const name = basename5(cwd);
-  const content = `# ZAM Personal Kernel - ${name}
-
-This is a ZAM personal instance. ZAM builds lasting skills through spaced
-repetition during real work, not separate study sessions.
-
-## First time here?
-Run \`zam setup\` from the shell. When this repository includes
-\`.agents/skills/setup/\`, you can instead select \`setup\` through \`/skills\`
-or invoke \`$setup\`.
-
-## Regular use
-Select the \`zam\` skill through \`/skills\` or invoke \`$zam\` to start a
-learning session on whatever you are working on.
-
-## What lives here
-- \`beliefs/\` - your worldview, approved by git commit
-- \`goals/\` - your objectives, decomposed into tasks and learning tokens
-
-## Fast-changing data
-Learning tokens, cards, and review history live in local SQLite by default.
-Use \`zam connector setup turso\` to store cloud credentials in
-\`~/.zam/credentials.json\` and use a Turso database across machines.
-
-## Codex skills
-Codex discovers repository skills under \`.agents/skills/\`. Run
-\`zam setup --force\` after upgrading \`zam-core\` to refresh them.
-`;
-  if (opts.dryRun) {
-    console.log(`  would write AGENTS.md`);
-  } else {
-    writeFileSync11(dest, content, "utf8");
-    console.log(`  write AGENTS.md`);
-  }
+  if (!db)
+    throw new Error("Database is required for shared provider settings.");
+  await setSetting(db, "llm.roles", JSON.stringify(r));
 }
-function writeCopilotInstructions(cwd = process.cwd(), opts = {}) {
-  const dest = join20(cwd, ".github", "copilot-instructions.md");
-  const action = upsertMarkedBlock(
-    dest,
-    `## ZAM learning sessions
-
-ZAM is available in this repository through \`.claude/skills/zam/\`. Use the \`zam\` project skill from Copilot-compatible skill selection surfaces to turn real work into an observed learning session with active recall and FSRS scheduling.
-
-- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
-- The skill directory is linked to this ZAM installation and updates with it.`,
-    Boolean(opts.dryRun)
-  );
-  logInstructionAction(
-    action,
-    ".github/copilot-instructions.md",
-    Boolean(opts.dryRun)
-  );
+async function withProviderScope(machine, action) {
+  if (machine) {
+    await action(void 0);
+    return;
+  }
+  await withDb(action);
 }
 
 // src/cli/users/identity.ts
@@ -29073,13 +29281,13 @@ async function resolveUser(opts, db, resolveOpts) {
 }
 
 // src/cli/workspaces/backup.ts
-import { mkdirSync as mkdirSync14 } from "fs";
-import { join as join21 } from "path";
+import { mkdirSync as mkdirSync15 } from "fs";
+import { join as join22 } from "path";
 async function backupDatabaseTo(db, targetDir) {
-  const backupDir = join21(targetDir, "zam-backups");
-  mkdirSync14(backupDir, { recursive: true });
+  const backupDir = join22(targetDir, "zam-backups");
+  mkdirSync15(backupDir, { recursive: true });
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  const dest = join21(backupDir, `zam-${stamp}.db`);
+  const dest = join22(backupDir, `zam-${stamp}.db`);
   await db.exec(`VACUUM INTO '${dest.replace(/'/g, "''")}'`);
   return dest;
 }
@@ -29210,20 +29418,20 @@ bridgeCommand.command("workspace-info").description("Report the workspace dir, i
       activeWorkspace,
       workspaceDir: activeWorkspace.path,
       defaultWorkspaceDir: defaultWorkspaceDir(),
-      dataDir: join22(homedir13(), ".zam")
+      dataDir: join23(homedir14(), ".zam")
     });
   });
 });
 function provisionConfiguredWorkspaces() {
   return getConfiguredWorkspaces().flatMap(
-    (workspace) => existsSync19(workspace.path) ? wireSkills(workspace.path, parseSetupAgents(), { quiet: true }) : []
+    (workspace) => existsSync21(workspace.path) ? wireSkills(workspace.path, parseSetupAgents(), { quiet: true }) : []
   );
 }
 function buildWorkspaceLinkHealth(workspaces) {
   const agents = parseSetupAgents();
   const map = {};
   for (const workspace of workspaces) {
-    if (!existsSync19(workspace.path)) continue;
+    if (!existsSync21(workspace.path)) continue;
     const links = inspectSkillLinks(workspace.path, agents);
     map[workspace.id] = {
       health: summarizeSkillLinkHealth(links),
@@ -29253,7 +29461,7 @@ bridgeCommand.command("workspace-list").description("List configured ZAM workspa
       activeWorkspace,
       workspaceDir: activeWorkspace.path,
       defaultWorkspaceDir: defaultWorkspaceDir(),
-      dataDir: join22(homedir13(), ".zam"),
+      dataDir: join23(homedir14(), ".zam"),
       linkHealth: buildWorkspaceLinkHealth(workspaces)
     });
   });
@@ -29268,7 +29476,7 @@ bridgeCommand.command("workspace-repair-links").description(
   if (!id) jsonError("A non-empty --id is required");
   const workspace = getConfiguredWorkspaces().find((item) => item.id === id);
   if (!workspace) jsonError(`Workspace "${id}" is not configured`);
-  if (!existsSync19(workspace.path)) {
+  if (!existsSync21(workspace.path)) {
     jsonError(`Workspace path does not exist: ${workspace.path}`);
   }
   const agents = parseSetupAgents(opts.agents);
@@ -29299,8 +29507,8 @@ function parseBridgeWorkspaceKind(value) {
 bridgeCommand.command("workspace-add").description("Register an existing directory as a ZAM workspace (JSON)").requiredOption("--path <dir>", "Existing workspace/repository directory").option("--id <id>", "Workspace id").option("--label <label>", "Human-readable label").option("--kind <kind>", "Workspace kind", "custom").action(async (opts) => {
   const raw = String(opts.path ?? "").trim();
   if (!raw) jsonError("A non-empty --path is required");
-  const path = resolve5(raw);
-  if (!existsSync19(path)) jsonError(`Workspace path does not exist: ${path}`);
+  const path = resolve6(raw);
+  if (!existsSync21(path)) jsonError(`Workspace path does not exist: ${path}`);
   const id = opts.id ? String(opts.id).trim() : void 0;
   if (opts.id && !id) jsonError("A non-empty --id is required");
   const kind = parseBridgeWorkspaceKind(opts.kind);
@@ -29344,8 +29552,8 @@ bridgeCommand.command("workspace-remove").description("Unregister a ZAM workspac
 bridgeCommand.command("set-workspace-dir").description("Set the personal workspace directory (JSON)").requiredOption("--dir <path>", "Path to the workspace directory").action(async (opts) => {
   const raw = String(opts.dir ?? "").trim();
   if (!raw) jsonError("A non-empty --dir is required");
-  const dir = resolve5(raw);
-  if (!existsSync19(dir)) jsonError(`Workspace path does not exist: ${dir}`);
+  const dir = resolve6(raw);
+  if (!existsSync21(dir)) jsonError(`Workspace path does not exist: ${dir}`);
   const skillLinks = wireSkills(dir, parseSetupAgents(), { quiet: true });
   await withDb2(async (db) => {
     const workspace = await activateWorkspacePath(db, dir);
@@ -29408,7 +29616,7 @@ bridgeCommand.command("agent-open").description("Launch an agent harness in the
       jsonError(`Workspace is not configured: ${opts.workspace}`);
     }
     const activeWorkspace = await ensureActiveWorkspace(db);
-    const workspace = opts.dir ? existsSync19(opts.dir) ? opts.dir : homedir13() : existingWorkspaceDirOrHome(configuredWorkspace ?? activeWorkspace);
+    const workspace = opts.dir ? existsSync21(opts.dir) ? opts.dir : homedir14() : existingWorkspaceDirOrHome(configuredWorkspace ?? activeWorkspace);
     launchHarness(harness, {
       executable,
       workspace,
@@ -29780,7 +29988,7 @@ bridgeCommand.command("discover-skills").description(
   "20"
 ).action(async (opts) => {
   try {
-    const monitorDir = join22(homedir13(), ".zam", "monitor");
+    const monitorDir = join23(homedir14(), ".zam", "monitor");
     let files;
     try {
       files = readdirSync2(monitorDir).filter((f) => f.endsWith(".jsonl"));
@@ -29793,7 +30001,7 @@ bridgeCommand.command("discover-skills").description(
       return;
     }
     const limit = Number(opts.limit);
-    const sorted = files.map((f) => ({ name: f, path: join22(monitorDir, f) })).sort((a, b) => b.name.localeCompare(a.name)).slice(0, limit);
+    const sorted = files.map((f) => ({ name: f, path: join23(monitorDir, f) })).sort((a, b) => b.name.localeCompare(a.name)).slice(0, limit);
     const sessionCommands = /* @__PURE__ */ new Map();
     for (const file of sorted) {
       const sessionId = file.name.replace(".jsonl", "");
@@ -29905,7 +30113,7 @@ bridgeCommand.command("observe-ui-snapshot").description(
 });
 function resolveWindowsPowerShell() {
   try {
-    execFileSync4("where.exe", ["pwsh.exe"], { stdio: "ignore" });
+    execFileSync5("where.exe", ["pwsh.exe"], { stdio: "ignore" });
     return "pwsh";
   } catch {
     return "powershell";
@@ -29920,7 +30128,7 @@ function captureScreenshot(outputPath, hwnd, processName) {
     throw new Error(`Invalid process name format: ${processName}`);
   }
   if (platform === "win32") {
-    const stdout = execFileSync4(
+    const stdout = execFileSync5(
       resolveWindowsPowerShell(),
       [
         "-NoProfile",
@@ -30233,13 +30441,13 @@ Write-CaptureResult "fullscreen" $hwndVal $matchedBy
   } else if (platform === "darwin") {
     if (hwnd) {
       const parsedHwnd = hwnd.startsWith("0x") ? parseInt(hwnd, 16) : parseInt(hwnd, 10);
-      execFileSync4("screencapture", ["-l", String(parsedHwnd), outputPath], {
+      execFileSync5("screencapture", ["-l", String(parsedHwnd), outputPath], {
         stdio: "pipe"
       });
       return { method: "screencapture-window", target: null };
     } else if (processName) {
       try {
-        const windowId = execFileSync4(
+        const windowId = execFileSync5(
           "osascript",
           [
             "-e",
@@ -30248,17 +30456,17 @@ Write-CaptureResult "fullscreen" $hwndVal $matchedBy
           { encoding: "utf8", stdio: ["pipe", "pipe", "ignore"] }
         ).trim();
         if (windowId && /^\d+$/.test(windowId)) {
-          execFileSync4("screencapture", ["-l", windowId, outputPath], {
+          execFileSync5("screencapture", ["-l", windowId, outputPath], {
             stdio: "pipe"
           });
           return { method: "screencapture-window", target: null };
         }
       } catch {
       }
-      execFileSync4("screencapture", ["-x", outputPath], { stdio: "pipe" });
+      execFileSync5("screencapture", ["-x", outputPath], { stdio: "pipe" });
       return { method: "screencapture-full", target: null };
     } else {
-      execFileSync4("screencapture", ["-x", outputPath], { stdio: "pipe" });
+      execFileSync5("screencapture", ["-x", outputPath], { stdio: "pipe" });
       return { method: "screencapture-full", target: null };
     }
   } else {
@@ -30295,7 +30503,7 @@ bridgeCommand.command("capture-ui").description("Capture a screenshot for agent-
         return;
       }
     }
-    const outputPath = opts.image ?? opts.output ?? join22(tmpdir3(), `zam-capture-${randomBytes2(4).toString("hex")}.png`);
+    const outputPath = opts.image ?? opts.output ?? join23(tmpdir3(), `zam-capture-${randomBytes2(4).toString("hex")}.png`);
     const captureResult = isProvided ? { method: "provided", target: null } : captureScreenshot(outputPath, opts.hwnd, opts.processName);
     if (!isProvided) {
       const post = decidePostCapture(policy, {
@@ -30323,7 +30531,7 @@ bridgeCommand.command("capture-ui").description("Capture a screenshot for agent-
         return;
       }
     }
-    const imageBytes = readFileSync16(outputPath);
+    const imageBytes = readFileSync17(outputPath);
     const base64 = imageBytes.toString("base64");
     jsonOut2({
       sessionId: opts.session ?? null,
@@ -30350,11 +30558,11 @@ bridgeCommand.command("start-recording").description("Start screen recording in
     return;
   }
   const sessionId = opts.session;
-  const statePath = join22(tmpdir3(), `zam-recording-${sessionId}.json`);
+  const statePath = join23(tmpdir3(), `zam-recording-${sessionId}.json`);
   const defaultExt = platform === "win32" ? ".mkv" : ".mov";
-  const outputPath = opts.output ?? join22(tmpdir3(), `zam-recording-${sessionId}${defaultExt}`);
-  const { existsSync: existsSync28, writeFileSync: writeFileSync16, openSync, closeSync } = await import("fs");
-  if (existsSync28(statePath)) {
+  const outputPath = opts.output ?? join23(tmpdir3(), `zam-recording-${sessionId}${defaultExt}`);
+  const { existsSync: existsSync30, writeFileSync: writeFileSync17, openSync, closeSync } = await import("fs");
+  if (existsSync30(statePath)) {
     jsonOut2({
       sessionId,
       started: false,
@@ -30362,7 +30570,7 @@ bridgeCommand.command("start-recording").description("Start screen recording in
     });
     return;
   }
-  const logPath = join22(tmpdir3(), `zam-recording-${sessionId}.log`);
+  const logPath = join23(tmpdir3(), `zam-recording-${sessionId}.log`);
   let logFd;
   try {
     logFd = openSync(logPath, "w");
@@ -30408,7 +30616,7 @@ bridgeCommand.command("start-recording").description("Start screen recording in
   }
   child.unref();
   if (child.pid) {
-    writeFileSync16(
+    writeFileSync17(
       statePath,
       JSON.stringify({
         pid: child.pid,
@@ -30444,9 +30652,9 @@ bridgeCommand.command("stop-recording").description(
     return;
   }
   const sessionId = opts.session;
-  const statePath = join22(tmpdir3(), `zam-recording-${sessionId}.json`);
-  const { existsSync: existsSync28, readFileSync: readFileSync21, rmSync: rmSync4 } = await import("fs");
-  if (!existsSync28(statePath)) {
+  const statePath = join23(tmpdir3(), `zam-recording-${sessionId}.json`);
+  const { existsSync: existsSync30, readFileSync: readFileSync22, rmSync: rmSync4 } = await import("fs");
+  if (!existsSync30(statePath)) {
     jsonOut2({
       sessionId,
       stopped: false,
@@ -30454,7 +30662,7 @@ bridgeCommand.command("stop-recording").description(
     });
     return;
   }
-  const state = JSON.parse(readFileSync21(statePath, "utf8"));
+  const state = JSON.parse(readFileSync22(statePath, "utf8"));
   const { pid, outputPath } = state;
   try {
     process.kill(pid, "SIGINT");
@@ -30470,7 +30678,7 @@ bridgeCommand.command("stop-recording").description(
   };
   let attempts = 0;
   while (isProcessRunning(pid) && attempts < 20) {
-    await new Promise((resolve11) => setTimeout(resolve11, 250));
+    await new Promise((resolve12) => setTimeout(resolve12, 250));
     attempts++;
   }
   if (isProcessRunning(pid)) {
@@ -30483,7 +30691,7 @@ bridgeCommand.command("stop-recording").description(
     rmSync4(statePath, { force: true });
   } catch {
   }
-  if (!existsSync28(outputPath)) {
+  if (!existsSync30(outputPath)) {
     jsonOut2({
       sessionId,
       stopped: false,
@@ -30913,7 +31121,7 @@ bridgeCommand.command("cloud-model-hint").description("Suggest a cloud model for
 });
 bridgeCommand.command("local-llm-hints").description("Detect installed local LLM servers and suggest defaults (JSON)").action(() => {
   const profile = getSystemProfile();
-  const flmInstalled = hasCommand("flm") || existsSync19("C:\\Program Files\\flm\\flm.exe");
+  const flmInstalled = hasCommand("flm") || existsSync21("C:\\Program Files\\flm\\flm.exe");
   const ollamaInstalled = isOllamaInstalled();
   const runners = [
     { id: "flm", label: "FastFlowLM", installed: flmInstalled },
@@ -31145,13 +31353,15 @@ bridgeCommand.command("desktop-bootstrap").description("Initialize first-run des
     const userId = await ensureDefaultUser(db, opts.user);
     const { enabled, url, model, locale } = await getLlmConfig(db);
     const { workspaceDir, activeWorkspaceId, skillLinks } = await ensureDesktopWorkspace(db);
+    const cli = installCliShim();
     jsonOut2({
       userId,
       locale,
       llm: { enabled, url, model },
       activeWorkspaceId,
       workspaceDir,
-      skillLinks
+      skillLinks,
+      cli
     });
   });
 });
@@ -31168,6 +31378,22 @@ bridgeCommand.command("get-settings").description("Get active ZAM settings (JSON
     });
   });
 });
+bridgeCommand.command("install-repair").description(
+  "Verify and repair this machine's ZAM installation: CLI shim + PATH, workspace skill links, agent configs and companion extensions (JSON)"
+).option(
+  "--if-version-changed",
+  "Only run when the app version differs from the last repaired one; reports skipped:true otherwise"
+).action((opts) => {
+  try {
+    jsonOut2(
+      performInstallRepair({
+        ifVersionChanged: Boolean(opts.ifVersionChanged)
+      })
+    );
+  } catch (err) {
+    jsonError(err.message);
+  }
+});
 bridgeCommand.command("agent-harness-status").description(
   "Detect installed agent harnesses and their ZAM MCP configuration state (JSON)"
 ).action(() => {
@@ -34100,28 +34326,28 @@ var doctorCommand = new Command5("doctor").description(
 // src/cli/commands/git-sync.ts
 init_kernel();
 import { execSync as execSync5 } from "child_process";
-import { chmodSync as chmodSync2, existsSync as existsSync20, writeFileSync as writeFileSync12 } from "fs";
-import { join as join23 } from "path";
+import { chmodSync as chmodSync3, existsSync as existsSync22, writeFileSync as writeFileSync13 } from "fs";
+import { join as join24 } from "path";
 import { Command as Command6 } from "commander";
 function installHook2() {
-  const gitDir = join23(process.cwd(), ".git");
-  if (!existsSync20(gitDir)) {
+  const gitDir = join24(process.cwd(), ".git");
+  if (!existsSync22(gitDir)) {
     console.error(
       "Error: Current directory is not the root of a Git repository."
     );
     process.exit(1);
   }
-  const hooksDir = join23(gitDir, "hooks");
-  const hookPath = join23(hooksDir, "post-commit");
+  const hooksDir = join24(gitDir, "hooks");
+  const hookPath = join24(hooksDir, "post-commit");
   const hookContent = `#!/bin/sh
 # ZAM Spaced Repetition Auto-Stale Hook
 # Triggered automatically on git commits to decay modified concept cards.
 zam git-sync --commit HEAD --quiet
 `;
   try {
-    writeFileSync12(hookPath, hookContent, { encoding: "utf-8", flag: "w" });
+    writeFileSync13(hookPath, hookContent, { encoding: "utf-8", flag: "w" });
     try {
-      chmodSync2(hookPath, "755");
+      chmodSync3(hookPath, "755");
     } catch (_e) {
     }
     console.log(
@@ -34222,8 +34448,8 @@ ZAM Auto-Stale Complete: Scanned ${changedFiles.length} file(s).`
 
 // src/cli/commands/goal.ts
 init_kernel();
-import { existsSync as existsSync21, mkdirSync as mkdirSync15 } from "fs";
-import { resolve as resolve6 } from "path";
+import { existsSync as existsSync23, mkdirSync as mkdirSync16 } from "fs";
+import { resolve as resolve7 } from "path";
 import { input as input2 } from "@inquirer/prompts";
 import { Command as Command7 } from "commander";
 async function resolveGoalsDir() {
@@ -34236,7 +34462,7 @@ async function resolveGoalsDir() {
   } finally {
     await db?.close();
   }
-  return goalsDir ? resolve6(goalsDir) : resolve6("goals");
+  return goalsDir ? resolve7(goalsDir) : resolve7("goals");
 }
 var goalCommand = new Command7("goal").description(
   "Manage learning goals (markdown files)"
@@ -34246,7 +34472,7 @@ goalCommand.command("list").description("List all goals").option(
   "Filter by status (active, completed, paused, abandoned)"
 ).option("--tree", "Show goals as a tree with parent/child relationships").option("--json", "Output as JSON").action(async (opts) => {
   const goalsDir = await resolveGoalsDir();
-  if (!existsSync21(goalsDir)) {
+  if (!existsSync23(goalsDir)) {
     console.error(`Goals directory not found: ${goalsDir}`);
     console.error(
       "Set it with: zam settings set personal.goals_dir /path/to/goals"
@@ -34347,8 +34573,8 @@ ${"\u2500".repeat(50)}`);
 });
 goalCommand.command("create").description("Create a new goal").option("--slug <slug>", "Goal slug (used as filename)").option("--title <title>", "Goal title").option("--parent <slug>", "Parent goal slug").option("--description <text>", "Goal description").option("--json", "Output as JSON").action(async (opts) => {
   const goalsDir = await resolveGoalsDir();
-  if (!existsSync21(goalsDir)) {
-    mkdirSync15(goalsDir, { recursive: true });
+  if (!existsSync23(goalsDir)) {
+    mkdirSync16(goalsDir, { recursive: true });
   }
   let slug = opts.slug;
   let title = opts.title;
@@ -34408,22 +34634,22 @@ goalCommand.command("status <slug> <status>").description("Update a goal's statu
 
 // src/cli/commands/init.ts
 init_kernel();
-import { existsSync as existsSync22, mkdirSync as mkdirSync16, writeFileSync as writeFileSync13 } from "fs";
-import { homedir as homedir14 } from "os";
-import { join as join24, resolve as resolve7 } from "path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync17, writeFileSync as writeFileSync14 } from "fs";
+import { homedir as homedir15 } from "os";
+import { join as join25, resolve as resolve8 } from "path";
 import { confirm, input as input3 } from "@inquirer/prompts";
 import { Command as Command8 } from "commander";
-var HOME2 = homedir14();
+var HOME2 = homedir15();
 function printLine(char = "\u2550", len = 60, color = "\x1B[36m") {
   console.log(`${color}${char.repeat(len)}\x1B[0m`);
 }
 function bootstrapSandboxWorkspace(workspaceDir) {
-  mkdirSync16(join24(workspaceDir, "beliefs"), { recursive: true });
-  mkdirSync16(join24(workspaceDir, "goals"), { recursive: true });
-  mkdirSync16(join24(workspaceDir, "skills"), { recursive: true });
-  const worldviewFile = join24(workspaceDir, "beliefs", "worldview.md");
-  if (!existsSync22(worldviewFile)) {
-    writeFileSync13(
+  mkdirSync17(join25(workspaceDir, "beliefs"), { recursive: true });
+  mkdirSync17(join25(workspaceDir, "goals"), { recursive: true });
+  mkdirSync17(join25(workspaceDir, "skills"), { recursive: true });
+  const worldviewFile = join25(workspaceDir, "beliefs", "worldview.md");
+  if (!existsSync24(worldviewFile)) {
+    writeFileSync14(
       worldviewFile,
       `# Personal Worldview
 
@@ -34435,9 +34661,9 @@ Here, I declare the core concepts and principles I want to master.
       "utf8"
     );
   }
-  const goalsFile = join24(workspaceDir, "goals", "goals.md");
-  if (!existsSync22(goalsFile)) {
-    writeFileSync13(
+  const goalsFile = join25(workspaceDir, "goals", "goals.md");
+  if (!existsSync24(goalsFile)) {
+    writeFileSync14(
       goalsFile,
       `# Personal Goals
 
@@ -34459,8 +34685,8 @@ var initCommand = new Command8("init").description("Launch the guided interactiv
   );
   printLine();
   console.log("\n\x1B[1m[1/5] Setting up Local Workspace Sandbox\x1B[0m");
-  const defaultWorkspace = join24(HOME2, "Documents", "zam");
-  const workspacePath = resolve7(
+  const defaultWorkspace = join25(HOME2, "Documents", "zam");
+  const workspacePath = resolve8(
     await input3({
       message: "Choose your ZAM workspace directory:",
       default: defaultWorkspace
@@ -35661,7 +35887,7 @@ observerCommand.command("revoke <process>").description("Remove a process from o
 
 // src/cli/commands/profile.ts
 init_kernel();
-import { dirname as dirname10, resolve as resolve8 } from "path";
+import { dirname as dirname10, resolve as resolve9 } from "path";
 import { Command as Command13 } from "commander";
 var C2 = {
   reset: "\x1B[0m",
@@ -35689,7 +35915,7 @@ var profileCommand = new Command13("profile").description("Show or change this m
     if (opts.mode) setInstallMode(opts.mode);
     db = await openDatabaseWithSync({ initialize: true });
     if (opts.dir) {
-      await activateWorkspacePath(db, resolve8(opts.dir), {
+      await activateWorkspacePath(db, resolve9(opts.dir), {
         kind: "personal",
         label: "Personal"
       });
@@ -36091,7 +36317,7 @@ ${"\u2550".repeat(50)}`);
 
 // src/cli/commands/session.ts
 init_kernel();
-import { readFileSync as readFileSync17 } from "fs";
+import { readFileSync as readFileSync18 } from "fs";
 import { input as input6, select as select2 } from "@inquirer/prompts";
 import { Command as Command16 } from "commander";
 var sessionCommand = new Command16("session").description(
@@ -36282,7 +36508,7 @@ function loadPatternFile(path) {
   if (!path) return [];
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync17(path, "utf-8"));
+    parsed = JSON.parse(readFileSync18(path, "utf-8"));
   } catch (err) {
     throw new Error(
       `Cannot read synthesis patterns from ${path}: ${err.message}`
@@ -36473,7 +36699,7 @@ sessionCommand.command("end").description("End a session and show summary").requ
 
 // src/cli/commands/settings.ts
 init_kernel();
-import { existsSync as existsSync23 } from "fs";
+import { existsSync as existsSync25 } from "fs";
 import { Command as Command17 } from "commander";
 var settingsCommand = new Command17("settings").description(
   "Manage user settings"
@@ -36638,7 +36864,7 @@ settingsCommand.command("repos").description("Show or set Personal, Team, and Or
     console.log("\nValidation:");
     for (const [name, path] of Object.entries(paths)) {
       if (path) {
-        const exists = existsSync23(path);
+        const exists = existsSync25(path);
         console.log(
           `  ${name.padEnd(9)}: ${exists ? "\x1B[32m\u2713 Valid folder\x1B[0m" : "\x1B[31m\u2717 Directory does not exist\x1B[0m"}`
         );
@@ -36651,7 +36877,7 @@ settingsCommand.command("repos").description("Show or set Personal, Team, and Or
 
 // src/cli/commands/setup.ts
 init_kernel();
-import { resolve as resolve9 } from "path";
+import { resolve as resolve10 } from "path";
 import { Command as Command18 } from "commander";
 function formatDatabaseInitTarget(target) {
   switch (target.kind) {
@@ -36751,7 +36977,7 @@ var setupCommand = new Command18("setup").description(
       console.error(`Error: ${err.message}`);
       process.exit(1);
     }
-    const target = resolve9(opts.target ?? process.cwd());
+    const target = resolve10(opts.target ?? process.cwd());
     const updateExistingInstructions = Boolean(opts.target) || opts.force;
     console.log(
       `Setting up ZAM in ${target}${opts.dryRun ? " (dry run)" : ""}
@@ -36876,8 +37102,8 @@ skillCommand.command("add").description("Register a new agent skill").requiredOp
 
 // src/cli/commands/snapshot.ts
 init_kernel();
-import { existsSync as existsSync24, mkdirSync as mkdirSync17, readFileSync as readFileSync18, writeFileSync as writeFileSync14 } from "fs";
-import { dirname as dirname11, join as join25 } from "path";
+import { existsSync as existsSync26, mkdirSync as mkdirSync18, readFileSync as readFileSync19, writeFileSync as writeFileSync15 } from "fs";
+import { dirname as dirname11, join as join26 } from "path";
 import { Command as Command20 } from "commander";
 function defaultOutName() {
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d+Z$/, "").replace(/:/g, "-");
@@ -36906,12 +37132,12 @@ var exportCmd = new Command20("export").description("Write a portable SQL-text s
       process.stdout.write(snapshot);
       return;
     }
-    const out = opts.out ?? join25(personalDir, "snapshots", defaultOutName());
+    const out = opts.out ?? join26(personalDir, "snapshots", defaultOutName());
     const dir = dirname11(out);
-    if (dir && dir !== "." && !existsSync24(dir)) {
-      mkdirSync17(dir, { recursive: true });
+    if (dir && dir !== "." && !existsSync26(dir)) {
+      mkdirSync18(dir, { recursive: true });
     }
-    writeFileSync14(out, snapshot, "utf-8");
+    writeFileSync15(out, snapshot, "utf-8");
     console.log(`Snapshot written: ${out}`);
     console.log(
       `  ${total} row(s)${nonEmpty.length ? ` \u2014 ${nonEmpty.join(", ")}` : ""}`
@@ -36925,11 +37151,11 @@ var exportCmd = new Command20("export").description("Write a portable SQL-text s
 var importCmd = new Command20("import").description("Restore a snapshot into the database").argument("<file>", "Snapshot file to restore").option("--force", "Overwrite a non-empty database", false).action(async (file, opts) => {
   let db;
   try {
-    if (!existsSync24(file)) {
+    if (!existsSync26(file)) {
       console.error(`Error: Snapshot file not found: ${file}`);
       process.exit(1);
     }
-    const snapshot = readFileSync18(file, "utf-8");
+    const snapshot = readFileSync19(file, "utf-8");
     db = await openDatabaseWithSync({ initialize: true });
     const result = await importSnapshot(db, snapshot, { force: opts.force });
     await db.close();
@@ -36947,11 +37173,11 @@ var importCmd = new Command20("import").description("Restore a snapshot into the
 });
 var verifyCmd = new Command20("verify").description("Check a snapshot's manifest and checksum without importing").argument("<file>", "Snapshot file to verify").action((file) => {
   try {
-    if (!existsSync24(file)) {
+    if (!existsSync26(file)) {
       console.error(`Error: Snapshot file not found: ${file}`);
       process.exit(1);
     }
-    const manifest = verifySnapshot(readFileSync18(file, "utf-8"));
+    const manifest = verifySnapshot(readFileSync19(file, "utf-8"));
     const { total, nonEmpty } = summarize(manifest.tables);
     console.log(`Valid snapshot (format v${manifest.version})`);
     console.log(`  created: ${manifest.createdAt}`);
@@ -37500,9 +37726,9 @@ tokenCommand.command("reembed").description("Backfill or refresh semantic-search
 // src/cli/commands/ui.ts
 init_kernel();
 import { spawn as spawn3, spawnSync } from "child_process";
-import { existsSync as existsSync25 } from "fs";
-import { homedir as homedir15 } from "os";
-import { dirname as dirname12, join as join26 } from "path";
+import { existsSync as existsSync27 } from "fs";
+import { homedir as homedir16 } from "os";
+import { dirname as dirname12, join as join27 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 import { Command as Command23 } from "commander";
 var C3 = {
@@ -37518,8 +37744,8 @@ function findDesktopDir() {
   for (const start of starts) {
     let dir = start;
     for (let i = 0; i < 10; i++) {
-      if (existsSync25(join26(dir, "desktop", "src-tauri", "tauri.conf.json"))) {
-        return join26(dir, "desktop");
+      if (existsSync27(join27(dir, "desktop", "src-tauri", "tauri.conf.json"))) {
+        return join27(dir, "desktop");
       }
       const parent = dirname12(dir);
       if (parent === dir) break;
@@ -37529,30 +37755,30 @@ function findDesktopDir() {
   return null;
 }
 function findBuiltApp(desktopDir) {
-  const releaseDir = join26(desktopDir, "src-tauri", "target", "release");
+  const releaseDir = join27(desktopDir, "src-tauri", "target", "release");
   if (process.platform === "win32") {
     for (const name of ["ZAM.exe", "zam.exe", "zam-desktop.exe"]) {
-      const p = join26(releaseDir, name);
-      if (existsSync25(p)) return p;
+      const p = join27(releaseDir, name);
+      if (existsSync27(p)) return p;
     }
   } else if (process.platform === "darwin") {
-    const app = join26(releaseDir, "bundle", "macos", "ZAM.app");
-    if (existsSync25(app)) return app;
+    const app = join27(releaseDir, "bundle", "macos", "ZAM.app");
+    if (existsSync27(app)) return app;
   } else {
     for (const name of ["zam", "ZAM", "zam-desktop"]) {
-      const p = join26(releaseDir, name);
-      if (existsSync25(p)) return p;
+      const p = join27(releaseDir, name);
+      if (existsSync27(p)) return p;
     }
   }
   return null;
 }
 function findInstalledApp() {
   const candidates = process.platform === "win32" ? [
-    process.env.LOCALAPPDATA && join26(process.env.LOCALAPPDATA, "Programs", "ZAM", "ZAM.exe"),
-    process.env.ProgramFiles && join26(process.env.ProgramFiles, "ZAM", "ZAM.exe"),
-    process.env["ProgramFiles(x86)"] && join26(process.env["ProgramFiles(x86)"], "ZAM", "ZAM.exe")
-  ] : process.platform === "darwin" ? ["/Applications/ZAM.app", join26(homedir15(), "Applications", "ZAM.app")] : ["/opt/ZAM/zam", "/usr/bin/zam-desktop"];
-  return candidates.find((candidate) => candidate && existsSync25(candidate)) || null;
+    process.env.LOCALAPPDATA && join27(process.env.LOCALAPPDATA, "Programs", "ZAM", "ZAM.exe"),
+    process.env.ProgramFiles && join27(process.env.ProgramFiles, "ZAM", "ZAM.exe"),
+    process.env["ProgramFiles(x86)"] && join27(process.env["ProgramFiles(x86)"], "ZAM", "ZAM.exe")
+  ] : process.platform === "darwin" ? ["/Applications/ZAM.app", join27(homedir16(), "Applications", "ZAM.app")] : ["/opt/ZAM/zam", "/usr/bin/zam-desktop"];
+  return candidates.find((candidate) => candidate && existsSync27(candidate)) || null;
 }
 function runNpm(args, opts) {
   const res = spawnSync("npm", args, {
@@ -37563,7 +37789,7 @@ function runNpm(args, opts) {
   return res.status ?? 1;
 }
 function ensureDesktopDeps(desktopDir) {
-  if (existsSync25(join26(desktopDir, "node_modules"))) return true;
+  if (existsSync27(join27(desktopDir, "node_modules"))) return true;
   console.log(
     `${C3.cyan}Installing desktop dependencies (one-time)...${C3.reset}`
   );
@@ -37589,13 +37815,13 @@ function requireRust() {
 function hasMsvcBuildTools() {
   if (process.platform !== "win32") return true;
   const pf86 = process.env["ProgramFiles(x86)"] || "C:\\Program Files (x86)";
-  const vswhere = join26(
+  const vswhere = join27(
     pf86,
     "Microsoft Visual Studio",
     "Installer",
     "vswhere.exe"
   );
-  if (!existsSync25(vswhere)) return false;
+  if (!existsSync27(vswhere)) return false;
   const res = spawnSync(
     vswhere,
     [
@@ -37627,7 +37853,7 @@ function requireMsvcOnWindows() {
   return false;
 }
 function warnIfCliMissing(repoRoot) {
-  if (!existsSync25(join26(repoRoot, "dist", "cli", "index.js"))) {
+  if (!existsSync27(join27(repoRoot, "dist", "cli", "index.js"))) {
     console.warn(
       `${C3.yellow}\u26A0 CLI build not found (dist/cli/index.js). The GUI bridge needs it \u2014 run 'npm run build' at the repo root.${C3.reset}`
     );
@@ -37690,7 +37916,7 @@ var uiCommand = new Command23("ui").description("Launch the ZAM Desktop GUI (Act
 ).option("--shortcut", "Create Desktop + Start-menu shortcuts to the GUI").action((opts) => {
   const installedApp = findInstalledApp();
   if (!opts.dev && !opts.build && !opts.shortcut && installedApp) {
-    launchApp(installedApp, homedir15());
+    launchApp(installedApp, homedir16());
     return;
   }
   const desktopDir = findDesktopDir();
@@ -37711,7 +37937,7 @@ var uiCommand = new Command23("ui").description("Launch the ZAM Desktop GUI (Act
     );
     const code = runNpm(["run", "tauri", "build"], { cwd: desktopDir });
     if (code === 0) {
-      const bundle = join26(
+      const bundle = join27(
         desktopDir,
         "src-tauri",
         "target",
@@ -37789,8 +38015,8 @@ ${C3.dim}After that, 'zam ui' launches it directly.${C3.reset}`
 // src/cli/commands/update.ts
 init_kernel();
 import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync26, readFileSync as readFileSync19, realpathSync as realpathSync2 } from "fs";
-import { dirname as dirname13, join as join27 } from "path";
+import { existsSync as existsSync28, readFileSync as readFileSync20, realpathSync as realpathSync2 } from "fs";
+import { dirname as dirname13, join as join28 } from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 import { confirm as confirm3 } from "@inquirer/prompts";
 import { Command as Command24 } from "commander";
@@ -37812,7 +38038,7 @@ var C4 = {
 function versionAt(dir) {
   try {
     const pkg2 = JSON.parse(
-      readFileSync19(join27(dir, "package.json"), "utf-8")
+      readFileSync20(join28(dir, "package.json"), "utf-8")
     );
     return pkg2.version ?? "unknown";
   } catch {
@@ -37873,11 +38099,11 @@ function findSourceRepo() {
   let dir = realpathSync2(dirname13(fileURLToPath7(import.meta.url)));
   let parent = dirname13(dir);
   while (parent !== dir) {
-    if (existsSync26(join27(dir, ".git"))) return dir;
+    if (existsSync28(join28(dir, ".git"))) return dir;
     dir = parent;
     parent = dirname13(dir);
   }
-  return existsSync26(join27(dir, ".git")) ? dir : null;
+  return existsSync28(join28(dir, ".git")) ? dir : null;
 }
 function runGit(cwd, args, capture) {
   const res = spawnSync2("git", args, {
@@ -37898,7 +38124,7 @@ function runNpm2(args, cwd) {
 function smokeTestBuild(src) {
   const res = spawnSync2(
     process.execPath,
-    [join27(src, "dist", "cli", "index.js"), "--version"],
+    [join28(src, "dist", "cli", "index.js"), "--version"],
     {
       cwd: src,
       encoding: "utf8",
@@ -37978,7 +38204,7 @@ Fix it manually in ${src} (try \`npm ci && npm run build\`, and check your Node
   console.log(`${C4.dim}\u2192 zam setup --force${C4.reset}`);
   const setup = spawnSync2(
     process.execPath,
-    [join27(src, "dist", "cli", "index.js"), "setup", "--force"],
+    [join28(src, "dist", "cli", "index.js"), "setup", "--force"],
     { cwd: process.cwd(), stdio: "inherit" }
   );
   if (setup.status !== 0) {
@@ -38090,15 +38316,15 @@ var whoamiCommand = new Command25("whoami").description("Show or set the default
 
 // src/cli/commands/workspace.ts
 init_kernel();
-import { execFileSync as execFileSync5 } from "child_process";
-import { existsSync as existsSync27, writeFileSync as writeFileSync15 } from "fs";
-import { homedir as homedir16 } from "os";
-import { join as join28, resolve as resolve10 } from "path";
+import { execFileSync as execFileSync6 } from "child_process";
+import { existsSync as existsSync29, writeFileSync as writeFileSync16 } from "fs";
+import { homedir as homedir17 } from "os";
+import { join as join29, resolve as resolve11 } from "path";
 import { confirm as confirm4, input as input7 } from "@inquirer/prompts";
 import { Command as Command26 } from "commander";
 function runGit2(cwd, args) {
   try {
-    return execFileSync5("git", args, {
+    return execFileSync6("git", args, {
       cwd,
       stdio: "pipe",
       encoding: "utf8"
@@ -38177,7 +38403,7 @@ workspaceCommand.command("list").description("List configured ZAM workspaces").o
   const workspaces = getConfiguredWorkspaces();
   const agents = parseSetupAgents();
   const linkHealth = Object.fromEntries(
-    workspaces.filter((workspace) => existsSync27(workspace.path)).map((workspace) => [
+    workspaces.filter((workspace) => existsSync29(workspace.path)).map((workspace) => [
       workspace.id,
       summarizeSkillLinkHealth(inspectSkillLinks(workspace.path, agents))
     ])
@@ -38219,8 +38445,8 @@ workspaceCommand.command("add <id>").description("Register an existing directory
   `Source-control provider (${WORKSPACE_SOURCE_CONTROLS.join(" | ")})`
 ).option("--scopes <list>", "Comma-separated knowledge scopes").option("--default-agent <id>", "Default agent harness for this workspace").action((id, opts) => {
   try {
-    const path = resolve10(String(opts.path));
-    if (!existsSync27(path)) {
+    const path = resolve11(String(opts.path));
+    if (!existsSync29(path)) {
       console.error(`Workspace path does not exist: ${path}`);
       process.exit(1);
     }
@@ -38314,7 +38540,7 @@ workspaceCommand.command("publish").description("Publish your local workspace sa
     );
     process.exit(1);
   }
-  if (!existsSync27(workspaceDir)) {
+  if (!existsSync29(workspaceDir)) {
     console.error(
       `\x1B[31m\u2717 Workspace directory does not exist: ${workspaceDir}\x1B[0m`
     );
@@ -38328,15 +38554,15 @@ Active workspace: \x1B[36m${workspaceDir}\x1B[0m`);
     );
     process.exit(1);
   }
-  const gitignorePath = join28(workspaceDir, ".gitignore");
-  if (!existsSync27(gitignorePath)) {
-    writeFileSync15(
+  const gitignorePath = join29(workspaceDir, ".gitignore");
+  if (!existsSync29(gitignorePath)) {
+    writeFileSync16(
       gitignorePath,
       "node_modules/\n.agent/\n.agents/\n.claude/\n.gemini/\n.goose/\n*.log\n",
       "utf8"
     );
   }
-  const hasGitRepo = existsSync27(join28(workspaceDir, ".git"));
+  const hasGitRepo = existsSync29(join29(workspaceDir, ".git"));
   if (!hasGitRepo) {
     console.log("Initializing local Git repository...");
     runGit2(workspaceDir, ["init", "-b", "main"]);
@@ -38368,7 +38594,7 @@ Active workspace: \x1B[36m${workspaceDir}\x1B[0m`);
     if (proceedGh) {
       try {
         console.log(`Creating GitHub repository ${repoName}...`);
-        execFileSync5("gh", ghRepoCreateArgs(repoName, repoVisibility), {
+        execFileSync6("gh", ghRepoCreateArgs(repoName, repoVisibility), {
           cwd: workspaceDir,
           stdio: "inherit"
         });
@@ -38423,7 +38649,7 @@ Active workspace: \x1B[36m${workspaceDir}\x1B[0m`);
   }
 });
 workspaceCommand.command("data-dir").description("Print the ZAM data directory (database, credentials, config)").option("--json", "Output as JSON").action((opts) => {
-  const dir = join28(homedir16(), ".zam");
+  const dir = join29(homedir17(), ".zam");
   console.log(opts.json ? JSON.stringify({ dataDir: dir }) : dir);
 });
 workspaceCommand.command("backup").description("Back up the local ZAM database into your workspace").option(
@@ -38466,7 +38692,7 @@ workspaceCommand.command("backup").description("Back up the local ZAM database i
 // src/cli/app.ts
 var __dirname = dirname14(fileURLToPath8(import.meta.url));
 var pkg = JSON.parse(
-  readFileSync20(join29(__dirname, "..", "..", "package.json"), "utf-8")
+  readFileSync21(join30(__dirname, "..", "..", "package.json"), "utf-8")
 );
 var program = new Command27();
 program.name("zam").description(