zam-core 0.10.8 → 0.10.10

package/dist/cli/app.js

@@ -892,9 +892,26 @@ function loadLibsql() {
     );
   }
 }
+function isTransientRemoteDatabaseError(err) {
+  const message = err instanceof Error ? err.message : "";
+  return TRANSIENT_REMOTE_ERROR_PATTERNS.some(
+    (pattern) => pattern.test(message)
+  );
+}
 async function openDatabase(options = {}) {
   const { dbPath, provider, isRemote, isEmbeddedReplica, configuredCloud } = resolveDatabaseTarget(options);
   const shouldInitialize = options.initialize === true || !isRemote && !isEmbeddedReplica && !existsSync2(dbPath);
+  const openViaHttpProvider = async (url) => {
+    const db = openRemoteDatabase({
+      url,
+      authToken: configuredCloud?.token ?? options.authToken
+    });
+    if (options.initialize) {
+      await db.exec(SCHEMA);
+    }
+    await runMigrations(db);
+    return db;
+  };
   if (provider === "remote") {
     const url = isRemote ? dbPath : options.syncUrl;
     if (!url) {
@@ -902,15 +919,7 @@ async function openDatabase(options = {}) {
         "The remote database provider is selected but no Turso URL is configured. Run: zam connector setup turso"
       );
     }
-    const db2 = openRemoteDatabase({
-      url,
-      authToken: configuredCloud?.token ?? options.authToken
-    });
-    if (options.initialize) {
-      await db2.exec(SCHEMA);
-    }
-    await runMigrations(db2);
-    return db2;
+    return openViaHttpProvider(url);
   }
   if (shouldInitialize && !isRemote) {
     const dir = dirname2(dbPath);
@@ -956,39 +965,43 @@ async function openDatabase(options = {}) {
         }
       }
     } catch (nativeErr) {
-      const fallbackUrl = isRemote ? dbPath : options.syncUrl;
-      if (isRemote && !isEmbeddedReplica && fallbackUrl) {
-        const db2 = openRemoteDatabase({
-          url: fallbackUrl,
-          authToken: configuredCloud?.token ?? options.authToken
-        });
-        if (options.initialize) {
-          await db2.exec(SCHEMA);
-        }
-        await runMigrations(db2);
-        return db2;
+      if (isRemote && !isEmbeddedReplica) {
+        return openViaHttpProvider(dbPath);
       }
       throw nativeErr;
     }
   } else {
     driver = openLocalSqlite(dbPath);
   }
-  if (!isRemote && !isEmbeddedReplica) {
-    driver.pragma("journal_mode = WAL");
-  }
-  driver.pragma("foreign_keys = ON");
-  if (!isRemote) {
-    driver.pragma("busy_timeout = 5000");
-  }
-  const db = wrapSyncDatabase(driver);
-  if (isEmbeddedReplica) {
-    await db.sync?.();
-  }
-  if (shouldInitialize) {
-    await db.exec(SCHEMA);
+  const finishOpen = async () => {
+    if (!isRemote && !isEmbeddedReplica) {
+      driver.pragma("journal_mode = WAL");
+    }
+    driver.pragma("foreign_keys = ON");
+    if (!isRemote) {
+      driver.pragma("busy_timeout = 5000");
+    }
+    const db = wrapSyncDatabase(driver);
+    if (isEmbeddedReplica) {
+      await db.sync?.();
+    }
+    if (shouldInitialize) {
+      await db.exec(SCHEMA);
+    }
+    await runMigrations(db);
+    return db;
+  };
+  if (isRemote && !isEmbeddedReplica) {
+    try {
+      return await finishOpen();
+    } catch (err) {
+      if (isTransientRemoteDatabaseError(err)) {
+        return openViaHttpProvider(dbPath);
+      }
+      throw err;
+    }
   }
-  await runMigrations(db);
-  return db;
+  return finishOpen();
 }
 function resolveProvider(options, credentialsMode, isRemote) {
   if (options.provider) return options.provider;
@@ -1120,7 +1133,7 @@ async function runMigrations(db) {
     );
   }
 }
-var DEFAULT_DB_DIR, DEFAULT_DB_PATH, require2;
+var DEFAULT_DB_DIR, DEFAULT_DB_PATH, require2, TRANSIENT_REMOTE_ERROR_PATTERNS;
 var init_connection = __esm({
   "src/kernel/db/connection.ts"() {
     "use strict";
@@ -1131,6 +1144,14 @@ var init_connection = __esm({
     DEFAULT_DB_DIR = join2(homedir2(), ".zam");
     DEFAULT_DB_PATH = join2(DEFAULT_DB_DIR, "zam.db");
     require2 = createRequire(import.meta.url);
+    TRANSIENT_REMOTE_ERROR_PATTERNS = [
+      /status=5\d\d/i,
+      /websocket/i,
+      /stream closed/i,
+      /connection (?:closed|reset|refused)/i,
+      /fetch failed/i,
+      /\b(?:ETIMEDOUT|ENOTFOUND|ECONNREFUSED|ECONNRESET|EAI_AGAIN|EPIPE)\b/
+    ];
   }
 });
 
@@ -6122,6 +6143,14 @@ function setAgentConnectAutoDone(done, path = defaultConfigPath()) {
   }
   saveInstallConfig(config, path);
 }
+function getLastRepairedVersion(path = defaultConfigPath()) {
+  return loadInstallConfig(path).lastRepairedVersion;
+}
+function setLastRepairedVersion(version, path = defaultConfigPath()) {
+  const config = loadInstallConfig(path);
+  config.lastRepairedVersion = version;
+  saveInstallConfig(config, path);
+}
 function getConfiguredWorkspaces(path = defaultConfigPath()) {
   return loadInstallConfig(path).workspaces ?? [];
 }
@@ -6844,6 +6873,7 @@ __export(kernel_exports, {
   getInstallMode: () => getInstallMode,
   getKnowledgeContextById: () => getKnowledgeContextById,
   getKnowledgeContextByName: () => getKnowledgeContextByName,
+  getLastRepairedVersion: () => getLastRepairedVersion,
   getMachineAiConfig: () => getMachineAiConfig,
   getMachineAiModels: () => getMachineAiModels,
   getMonitorDir: () => getMonitorDir,
@@ -6939,6 +6969,7 @@ __export(kernel_exports, {
   setAgentConnectAutoDone: () => setAgentConnectAutoDone,
   setInstallChannel: () => setInstallChannel,
   setInstallMode: () => setInstallMode,
+  setLastRepairedVersion: () => setLastRepairedVersion,
   setProviderApiKey: () => setProviderApiKey,
   setSetting: () => setSetting,
   setTursoCredentials: () => setTursoCredentials,
@@ -7015,8 +7046,8 @@ var init_kernel = __esm({
 });
 
 // src/cli/app.ts
-import { readFileSync as readFileSync20 } from "fs";
-import { dirname as dirname14, join as join29 } from "path";
+import { readFileSync as readFileSync21 } from "fs";
+import { dirname as dirname14, join as join30 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
 import { Command as Command27 } from "commander";
 
@@ -7435,6 +7466,7 @@ function detectInstalledConnectHarnesses(options = {}) {
   return detected;
 }
 function parseMcpJsonConfig(path, content) {
+  if (content.trim() === "") return {};
   let parsed;
   try {
     parsed = JSON.parse(content);
@@ -7844,6 +7876,12 @@ function resolveVscodeExecutable(options = {}) {
   ] : ["/usr/bin/code", "/usr/local/bin/code", "/snap/bin/code"];
   return candidates.find((candidate) => exists(candidate)) ?? null;
 }
+function buildVscodeCliInvocation(command, args, platform = process.platform) {
+  const needsShell = platform === "win32" && /\.(cmd|bat)$/i.test(command);
+  if (!needsShell) return { command, args, shell: false };
+  const quote = (value) => `"${value}"`;
+  return { command: quote(command), args: args.map(quote), shell: true };
+}
 function packageVersion() {
   const parsed = JSON.parse(
     readFileSync11(join14(packageRoot2, "package.json"), "utf8")
@@ -7899,7 +7937,11 @@ function installVscodeExtension(options) {
   const existed = existsSync14(plan.launchConfigPath);
   const changed = !existed || readFileSync11(plan.launchConfigPath, "utf8") !== launchContent;
   const run = options.run ?? ((command, args) => {
-    execFileSync3(command, args, { stdio: "pipe" });
+    const invocation = buildVscodeCliInvocation(command, args);
+    execFileSync3(invocation.command, invocation.args, {
+      stdio: "pipe",
+      shell: invocation.shell
+    });
   });
   run(plan.codePath, ["--install-extension", plan.vsixPath, "--force"]);
   if (changed) {
@@ -8308,11 +8350,11 @@ var agentCommand = new Command("agent").description("Provision and inspect the a
 
 // src/cli/commands/bridge.ts
 init_kernel();
-import { execFileSync as execFileSync4 } from "child_process";
+import { execFileSync as execFileSync5 } from "child_process";
 import { randomBytes as randomBytes2 } from "crypto";
-import { existsSync as existsSync19, readdirSync as readdirSync2, readFileSync as readFileSync16, rmSync as rmSync3 } from "fs";
-import { homedir as homedir13, tmpdir as tmpdir3 } from "os";
-import { join as join22, resolve as resolve5 } from "path";
+import { existsSync as existsSync21, readdirSync as readdirSync2, readFileSync as readFileSync17, rmSync as rmSync3 } from "fs";
+import { homedir as homedir14, tmpdir as tmpdir3 } from "os";
+import { join as join23, resolve as resolve6 } from "path";
 import { Command as Command2 } from "commander";
 import { ulid as ulid10 } from "ulid";
 
@@ -9399,7 +9441,7 @@ async function prepareRecallChain(db, opts) {
       } else {
         spawnLocalRunner(endpoint.url, endpoint.model, endpoint.runner);
         while (Date.now() < deadline) {
-          await new Promise((resolve11) => setTimeout(resolve11, 1e3));
+          await new Promise((resolve12) => setTimeout(resolve12, 1e3));
           if (await isLlmOnline(endpoint.url)) {
             online = true;
             break;
@@ -9692,7 +9734,7 @@ async function startLocalRunner(url, model, locale, hint) {
   let attempts = 0;
   const dotsPerLine = 30;
   while (true) {
-    await new Promise((resolve11) => setTimeout(resolve11, 500));
+    await new Promise((resolve12) => setTimeout(resolve12, 500));
     if (await isLlmOnline(url)) {
       if (attempts > 0) process.stdout.write("\n");
       return true;
@@ -9781,8 +9823,8 @@ async function fetchWithInteractiveTimeout(url, options = {}) {
   const dotsPerLine = 30;
   while (true) {
     let timeoutId;
-    const timeoutPromise = new Promise((resolve11) => {
-      timeoutId = setTimeout(() => resolve11("timeout"), timeoutMs);
+    const timeoutPromise = new Promise((resolve12) => {
+      timeoutId = setTimeout(() => resolve12("timeout"), timeoutMs);
     });
     const dotsInterval = setInterval(() => {
       process.stdout.write(".");
@@ -10049,7 +10091,7 @@ async function readWebLink(url) {
         redirect: "manual",
         signal: controller.signal,
         headers: {
-          "User-Agent": "ZAM-Content-Studio/0.10.8"
+          "User-Agent": "ZAM-Content-Studio/0.10.10"
         }
       });
       if (res.status >= 300 && res.status < 400) {
@@ -10434,9 +10476,11 @@ function findWorkspaceByPath(dir) {
   );
 }
 async function clearLegacyWorkspaceDir(db) {
+  if (!db) return;
   await deleteSetting(db, LEGACY_WORKSPACE_DIR_KEY);
 }
 async function migrateLegacyWorkspaceDir(db) {
+  if (!db) return void 0;
   const legacyDir = await getSetting(db, LEGACY_WORKSPACE_DIR_KEY);
   if (!legacyDir) return void 0;
   const path = resolve4(legacyDir);
@@ -11312,6 +11356,127 @@ async function updateCheck(params) {
   });
 }
 
+// src/cli/cli-install.ts
+import { execFileSync as execFileSync4 } from "child_process";
+import {
+  chmodSync as chmodSync2,
+  existsSync as existsSync18,
+  mkdirSync as mkdirSync13,
+  readFileSync as readFileSync14,
+  writeFileSync as writeFileSync11
+} from "fs";
+import { homedir as homedir13 } from "os";
+import { delimiter as delimiter2, join as join19, resolve as resolve5 } from "path";
+var BUILT_CLI_PATTERN = /[\\/]dist[\\/]cli[\\/]index\.js$/;
+function normalizeForCompare(path, platform) {
+  const resolved = resolve5(path);
+  return platform === "win32" ? resolved.toLowerCase() : resolved;
+}
+function windowsShimContent(nodePath, cliPath) {
+  return `@echo off\r
+"${nodePath}" "${cliPath}" %*\r
+`;
+}
+function unixShimContent(nodePath, cliPath) {
+  return `#!/bin/sh
+exec "${nodePath}" "${cliPath}" "$@"
+`;
+}
+function psQuote(value) {
+  return `'${value.replace(/'/g, "''")}'`;
+}
+function ensureWindowsUserPath(binDir) {
+  const script = [
+    "$ErrorActionPreference = 'Stop'",
+    "$key = [Microsoft.Win32.Registry]::CurrentUser.CreateSubKey('Environment', $true)",
+    "$old = [string]$key.GetValue('Path', '', [Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames)",
+    `$target = ${psQuote(binDir)}`,
+    "$expanded = ($old -split ';') | Where-Object { $_ -ne '' } | ForEach-Object { [Environment]::ExpandEnvironmentVariables($_).TrimEnd('\\') }",
+    "if ($expanded -contains $target.TrimEnd('\\')) { 'present'; exit 0 }",
+    "$new = if ($old -and -not $old.EndsWith(';')) { $old + ';' + $target } else { $old + $target }",
+    "$key.SetValue('Path', $new, [Microsoft.Win32.RegistryValueKind]::ExpandString)",
+    `$sig = '[DllImport("user32.dll", SetLastError = true, CharSet = CharSet.Auto)] public static extern IntPtr SendMessageTimeout(IntPtr hWnd, uint Msg, UIntPtr wParam, string lParam, uint fuFlags, uint uTimeout, out UIntPtr lpdwResult);'`,
+    "$type = Add-Type -MemberDefinition $sig -Name 'ZamEnvBroadcast' -Namespace 'ZamInstall' -PassThru",
+    "[UIntPtr]$result = [UIntPtr]::Zero",
+    "$null = $type::SendMessageTimeout([IntPtr]0xffff, 0x001A, [UIntPtr]::Zero, 'Environment', 2, 5000, [ref]$result)",
+    "'updated'"
+  ].join("; ");
+  const output = execFileSync4(
+    "powershell.exe",
+    ["-NoProfile", "-NonInteractive", "-Command", script],
+    { stdio: ["ignore", "pipe", "pipe"], windowsHide: true }
+  ).toString().trim();
+  return output.endsWith("updated");
+}
+function ensureUnixUserPath(home, platform) {
+  const profile = join19(home, platform === "darwin" ? ".zprofile" : ".profile");
+  const existing = existsSync18(profile) ? readFileSync14(profile, "utf8") : "";
+  if (existing.includes(".zam/bin")) return false;
+  const block = `
+# Added by ZAM: keep the zam CLI on PATH
+export PATH="$HOME/.zam/bin:$PATH"
+`;
+  writeFileSync11(profile, existing + block, "utf8");
+  return true;
+}
+function installCliShim(options = {}) {
+  const home = options.home ?? homedir13();
+  const platform = options.platform ?? process.platform;
+  const env = options.env ?? process.env;
+  const find = options.find ?? findExecutable;
+  const nodePath = resolve5(options.nodePath ?? process.execPath);
+  const cliPath = resolve5(options.cliPath ?? process.argv[1] ?? "");
+  const binDir = join19(home, ".zam", "bin");
+  const shimPath = join19(binDir, platform === "win32" ? "zam.cmd" : "zam");
+  const report = {
+    status: "ok",
+    binDir,
+    shimPath,
+    nodePath,
+    cliPath,
+    onPath: false,
+    pathUpdated: false,
+    needsNewTerminal: false
+  };
+  if (!BUILT_CLI_PATTERN.test(cliPath) || !existsSync18(cliPath)) {
+    report.status = "skipped";
+    report.detail = `Not running from a built CLI entry (${cliPath}); nothing to link.`;
+    return report;
+  }
+  try {
+    const existing = find("zam");
+    if (existing && normalizeForCompare(existing, platform) !== normalizeForCompare(shimPath, platform)) {
+      report.status = "external";
+      report.onPath = true;
+      report.detail = existing;
+      return report;
+    }
+    const content = platform === "win32" ? windowsShimContent(nodePath, cliPath) : unixShimContent(nodePath, cliPath);
+    const existed = existsSync18(shimPath);
+    const changed = !existed || readFileSync14(shimPath, "utf8") !== content;
+    if (changed) {
+      mkdirSync13(binDir, { recursive: true });
+      writeFileSync11(shimPath, content, "utf8");
+      if (platform !== "win32") chmodSync2(shimPath, 493);
+    }
+    report.status = !existed ? "installed" : changed ? "refreshed" : "ok";
+    const processPathHasBin = (env.PATH ?? "").split(delimiter2).map((entry) => normalizeForCompare(entry.trim() || ".", platform)).includes(normalizeForCompare(binDir, platform));
+    if (processPathHasBin) {
+      report.onPath = true;
+      return report;
+    }
+    const ensureUserPath = options.ensureUserPath ?? (platform === "win32" ? ensureWindowsUserPath : () => ensureUnixUserPath(home, platform));
+    report.pathUpdated = ensureUserPath(binDir);
+    report.onPath = true;
+    report.needsNewTerminal = true;
+    return report;
+  } catch (error) {
+    report.status = "error";
+    report.detail = error instanceof Error ? error.message : String(error);
+    return report;
+  }
+}
+
 // src/cli/curriculum/breadcrumb.ts
 init_kernel();
 var LAST_SELECTION_KEY = "curriculum.lastSelection";
@@ -27998,6 +28163,454 @@ function getCurriculumProvider(id) {
   return CURRICULUM_PROVIDERS.find((provider) => provider.id === id);
 }
 
+// src/cli/install-repair.ts
+init_kernel();
+import { existsSync as existsSync20 } from "fs";
+
+// src/cli/provisioning/index.ts
+import {
+  existsSync as existsSync19,
+  lstatSync as lstatSync2,
+  mkdirSync as mkdirSync14,
+  readFileSync as readFileSync15,
+  realpathSync,
+  rmSync as rmSync2,
+  symlinkSync,
+  writeFileSync as writeFileSync12
+} from "fs";
+import { basename as basename4, dirname as dirname9, join as join20 } from "path";
+import { fileURLToPath as fileURLToPath5 } from "url";
+var packageRoot3 = [
+  fileURLToPath5(new URL("../..", import.meta.url)),
+  fileURLToPath5(new URL("../../..", import.meta.url))
+].find((candidate) => existsSync19(join20(candidate, "package.json"))) ?? fileURLToPath5(new URL("../..", import.meta.url));
+var ALL_SETUP_AGENTS = ["claude", "copilot", "codex", "agent"];
+var SKILL_PAIRS = [
+  {
+    from: join20(packageRoot3, ".claude", "skills", "zam", "SKILL.md"),
+    to: join20(".claude", "skills", "zam", "SKILL.md"),
+    agents: ["claude", "copilot"]
+  },
+  {
+    from: join20(packageRoot3, ".agent", "skills", "zam", "SKILL.md"),
+    to: join20(".agent", "skills", "zam", "SKILL.md"),
+    agents: ["agent"]
+  },
+  {
+    from: join20(packageRoot3, ".agents", "skills", "zam", "SKILL.md"),
+    to: join20(".agents", "skills", "zam", "SKILL.md"),
+    agents: ["codex"]
+  }
+];
+function parseSetupAgents(value) {
+  if (!value || value.trim().toLowerCase() === "all") {
+    return new Set(ALL_SETUP_AGENTS);
+  }
+  const aliases = {
+    claude: ["claude"],
+    copilot: ["copilot"],
+    codex: ["codex"],
+    agent: ["agent"],
+    opencode: ["agent"]
+  };
+  const selected = /* @__PURE__ */ new Set();
+  for (const raw of value.split(",")) {
+    const key = raw.trim().toLowerCase();
+    const mapped = aliases[key];
+    if (!mapped) {
+      throw new Error(
+        `Unknown agent "${raw}". Use: all, claude, copilot, codex, agent.`
+      );
+    }
+    for (const item of mapped) selected.add(item);
+  }
+  return selected;
+}
+function pathExists(path) {
+  try {
+    lstatSync2(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function isSymbolicLink(path) {
+  try {
+    return lstatSync2(path).isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+function comparableRealPath(path) {
+  const real = realpathSync(path);
+  return process.platform === "win32" ? real.toLowerCase() : real;
+}
+function pathsResolveToSameDirectory(sourceDir, destinationDir) {
+  try {
+    return comparableRealPath(destinationDir) === comparableRealPath(sourceDir);
+  } catch {
+    return false;
+  }
+}
+function linkPointsTo(sourceDir, destinationDir) {
+  return isSymbolicLink(destinationDir) && pathsResolveToSameDirectory(sourceDir, destinationDir);
+}
+function isZamSkillCopy(destinationDir) {
+  try {
+    if (!lstatSync2(destinationDir).isDirectory()) return false;
+    const skillFile = join20(destinationDir, "SKILL.md");
+    if (!existsSync19(skillFile)) return false;
+    return /^name:\s*zam\s*$/m.test(readFileSync15(skillFile, "utf8"));
+  } catch {
+    return false;
+  }
+}
+function classifySkillDestination(sourceDir, destinationDir) {
+  if (!existsSync19(sourceDir)) return "source-missing";
+  if (!isSymbolicLink(destinationDir) && pathsResolveToSameDirectory(sourceDir, destinationDir)) {
+    return "source-directory";
+  }
+  if (linkPointsTo(sourceDir, destinationDir)) return "linked";
+  if (!pathExists(destinationDir)) return "missing";
+  if (isSymbolicLink(destinationDir)) return "broken";
+  if (isZamSkillCopy(destinationDir)) return "stale-copy";
+  return "unmanaged";
+}
+function wireSkills(cwd = process.cwd(), agents = parseSetupAgents(), opts = {}) {
+  const results = [];
+  const log = (message) => {
+    if (!opts.quiet) console.log(message);
+  };
+  for (const { from, to, agents: pairAgents } of SKILL_PAIRS) {
+    if (!pairAgents.some((agent) => agents.has(agent))) continue;
+    const sourceDir = dirname9(from);
+    const destinationDir = dirname9(join20(cwd, to));
+    const label = dirname9(to);
+    const state = classifySkillDestination(sourceDir, destinationDir);
+    if (state === "source-missing") {
+      if (!opts.quiet) {
+        console.warn(`  warn  source not found, skipping: ${sourceDir}`);
+      }
+      results.push({
+        source: sourceDir,
+        destination: destinationDir,
+        action: "skipped",
+        reason: "source-not-found"
+      });
+      continue;
+    }
+    if (state === "source-directory") {
+      log(`  skip  ${label} (package source)`);
+      results.push({
+        source: sourceDir,
+        destination: destinationDir,
+        action: "skipped",
+        reason: "source-directory"
+      });
+      continue;
+    }
+    if (state === "linked") {
+      log(`  skip  ${label} (already linked)`);
+      results.push({
+        source: sourceDir,
+        destination: destinationDir,
+        action: "skipped",
+        reason: "already-linked"
+      });
+      continue;
+    }
+    const destinationExists = state !== "missing";
+    const replaceExisting = destinationExists && (Boolean(opts.force) || state === "broken" || state === "stale-copy");
+    if (destinationExists && !replaceExisting) {
+      if (!opts.quiet) {
+        console.warn(
+          `  warn  ${label} already exists and is not managed by ZAM; use --force to replace it`
+        );
+      }
+      results.push({
+        source: sourceDir,
+        destination: destinationDir,
+        action: "skipped",
+        reason: "unmanaged-destination"
+      });
+      continue;
+    }
+    const action = destinationExists ? "relinked" : "linked";
+    if (opts.dryRun) {
+      log(`  would ${action === "linked" ? "link" : "relink"}  ${label}`);
+    } else {
+      if (destinationExists) {
+        rmSync2(destinationDir, { recursive: true, force: true });
+      }
+      mkdirSync14(dirname9(destinationDir), { recursive: true });
+      symlinkSync(
+        sourceDir,
+        destinationDir,
+        process.platform === "win32" ? "junction" : "dir"
+      );
+      log(`  ${action === "linked" ? "link" : "relink"}  ${label}`);
+    }
+    results.push({ source: sourceDir, destination: destinationDir, action });
+  }
+  return results;
+}
+function inspectSkillLinks(cwd = process.cwd(), agents = parseSetupAgents()) {
+  const results = [];
+  for (const { from, to, agents: pairAgents } of SKILL_PAIRS) {
+    if (!pairAgents.some((agent) => agents.has(agent))) continue;
+    const sourceDir = dirname9(from);
+    const destinationDir = dirname9(join20(cwd, to));
+    results.push({
+      agents: pairAgents,
+      source: sourceDir,
+      destination: destinationDir,
+      state: classifySkillDestination(sourceDir, destinationDir)
+    });
+  }
+  return results;
+}
+function summarizeSkillLinkHealth(inspections) {
+  if (inspections.some((item) => item.state === "unmanaged")) {
+    return "unmanaged";
+  }
+  const repairable = ["missing", "broken", "stale-copy"];
+  if (inspections.some((item) => repairable.includes(item.state))) {
+    return "needs-repair";
+  }
+  return "healthy";
+}
+var ZAM_BLOCK_START = "<!-- ZAM:START -->";
+var ZAM_BLOCK_END = "<!-- ZAM:END -->";
+function upsertMarkedBlock(dest, blockBody, dryRun) {
+  const block = `${ZAM_BLOCK_START}
+${blockBody.trim()}
+${ZAM_BLOCK_END}`;
+  if (!existsSync19(dest)) {
+    if (!dryRun) {
+      mkdirSync14(dirname9(dest), { recursive: true });
+      writeFileSync12(dest, `${block}
+`, "utf8");
+    }
+    return "write";
+  }
+  const existing = readFileSync15(dest, "utf8");
+  if (existing.includes(block)) return "skip";
+  const start = existing.indexOf(ZAM_BLOCK_START);
+  const end = existing.indexOf(ZAM_BLOCK_END);
+  const next = start >= 0 && end > start ? `${existing.slice(0, start)}${block}${existing.slice(end + ZAM_BLOCK_END.length)}` : `${existing.trimEnd()}
+
+${block}
+`;
+  if (!dryRun) writeFileSync12(dest, next, "utf8");
+  return start >= 0 && end > start ? "update" : "write";
+}
+function logInstructionAction(action, label, dryRun) {
+  if (action === "skip") {
+    console.log(`  skip  ${label} (ZAM block already present)`);
+  } else {
+    console.log(`  ${dryRun ? "would " : ""}${action} ${label}`);
+  }
+}
+function writeClaudeMd(skipClaudeMd, cwd = process.cwd(), opts = {}) {
+  if (skipClaudeMd) return;
+  const dest = join20(cwd, "CLAUDE.md");
+  if (existsSync19(dest)) {
+    if (!opts.updateExisting) {
+      console.log(`  skip  CLAUDE.md (already present)`);
+      return;
+    }
+    const action = upsertMarkedBlock(
+      dest,
+      `## ZAM learning sessions
+
+ZAM is available in this repository. Use the \`zam\` skill in Claude Code to turn real work into an observed learning session with active recall and FSRS scheduling.
+
+- Skill files live under \`.claude/skills/zam/\`.
+- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
+- The skill directory is linked to this ZAM installation and updates with it.`,
+      Boolean(opts.dryRun)
+    );
+    logInstructionAction(action, "CLAUDE.md", Boolean(opts.dryRun));
+    return;
+  }
+  const name = basename4(cwd);
+  const content = `# ZAM Personal Kernel \u2014 ${name}
+
+This is a ZAM personal instance. ZAM builds lasting skills through spaced
+repetition during real work \u2014 not separate study sessions.
+
+## First time here?
+Run \`/setup\` in Claude Code or Gemini CLI to complete first-time setup.
+
+## Regular use
+Run \`/zam\` to start a learning session on whatever you are working on.
+
+## What lives here
+- \`beliefs/\` \u2014 your worldview, approved by git commit
+- \`goals/\` \u2014 your objectives, decomposed into tasks and learning tokens
+
+## Fast-changing data
+Learning tokens, cards, and review history live in local SQLite by default.
+Use \`zam connector setup turso\` to store cloud credentials in
+\`~/.zam/credentials.json\` and use a Turso database across machines.
+`;
+  if (opts.dryRun) {
+    console.log(`  would write CLAUDE.md`);
+  } else {
+    writeFileSync12(dest, content, "utf8");
+    console.log(`  write CLAUDE.md`);
+  }
+}
+function writeAgentsMd(skipAgentsMd, cwd = process.cwd(), opts = {}) {
+  if (skipAgentsMd) return;
+  const dest = join20(cwd, "AGENTS.md");
+  if (existsSync19(dest)) {
+    if (!opts.updateExisting) {
+      console.log(`  skip  AGENTS.md (already present)`);
+      return;
+    }
+    const action = upsertMarkedBlock(
+      dest,
+      `## ZAM learning sessions
+
+ZAM is available in this repository. Select the \`zam\` skill through \`/skills\` or invoke \`$zam\` where supported to turn real work into an observed learning session with active recall and FSRS scheduling.
+
+- Skill files live under \`.agents/skills/zam/\`.
+- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
+- The skill directory is linked to this ZAM installation and updates with it.`,
+      Boolean(opts.dryRun)
+    );
+    logInstructionAction(action, "AGENTS.md", Boolean(opts.dryRun));
+    return;
+  }
+  const name = basename4(cwd);
+  const content = `# ZAM Personal Kernel - ${name}
+
+This is a ZAM personal instance. ZAM builds lasting skills through spaced
+repetition during real work, not separate study sessions.
+
+## First time here?
+Run \`zam setup\` from the shell. When this repository includes
+\`.agents/skills/setup/\`, you can instead select \`setup\` through \`/skills\`
+or invoke \`$setup\`.
+
+## Regular use
+Select the \`zam\` skill through \`/skills\` or invoke \`$zam\` to start a
+learning session on whatever you are working on.
+
+## What lives here
+- \`beliefs/\` - your worldview, approved by git commit
+- \`goals/\` - your objectives, decomposed into tasks and learning tokens
+
+## Fast-changing data
+Learning tokens, cards, and review history live in local SQLite by default.
+Use \`zam connector setup turso\` to store cloud credentials in
+\`~/.zam/credentials.json\` and use a Turso database across machines.
+
+## Codex skills
+Codex discovers repository skills under \`.agents/skills/\`. Run
+\`zam setup --force\` after upgrading \`zam-core\` to refresh them.
+`;
+  if (opts.dryRun) {
+    console.log(`  would write AGENTS.md`);
+  } else {
+    writeFileSync12(dest, content, "utf8");
+    console.log(`  write AGENTS.md`);
+  }
+}
+function writeCopilotInstructions(cwd = process.cwd(), opts = {}) {
+  const dest = join20(cwd, ".github", "copilot-instructions.md");
+  const action = upsertMarkedBlock(
+    dest,
+    `## ZAM learning sessions
+
+ZAM is available in this repository through \`.claude/skills/zam/\`. Use the \`zam\` project skill from Copilot-compatible skill selection surfaces to turn real work into an observed learning session with active recall and FSRS scheduling.
+
+- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
+- The skill directory is linked to this ZAM installation and updates with it.`,
+    Boolean(opts.dryRun)
+  );
+  logInstructionAction(
+    action,
+    ".github/copilot-instructions.md",
+    Boolean(opts.dryRun)
+  );
+}
+
+// src/cli/install-repair.ts
+function defaultRepairWorkspaces() {
+  const summary = {
+    provisioned: 0,
+    missing: 0,
+    relinked: 0
+  };
+  try {
+    const agents = parseSetupAgents();
+    for (const workspace of getConfiguredWorkspaces()) {
+      if (!existsSync20(workspace.path)) {
+        summary.missing += 1;
+        continue;
+      }
+      const results = wireSkills(workspace.path, agents, { quiet: true });
+      summary.provisioned += 1;
+      summary.relinked += results.filter(
+        (result) => result.action === "linked" || result.action === "relinked"
+      ).length;
+    }
+  } catch (error) {
+    summary.error = error instanceof Error ? error.message : String(error);
+  }
+  return summary;
+}
+function defaultConnectAgents(deps) {
+  const report = performAgentConnect({}, deps);
+  const companion = report.results.find((result) => result.extension?.kind === "vscode")?.extension?.action ?? null;
+  return {
+    success: report.success,
+    detected: report.detected,
+    connected: report.results.filter(
+      (result) => !result.error && (result.alreadyConfigured || result.wrote)
+    ).length,
+    companion,
+    errors: report.results.flatMap(
+      (result) => result.error ? [`${result.label}: ${result.error}`] : []
+    )
+  };
+}
+function performInstallRepair(opts = {}, deps = {}) {
+  const version = (deps.version ?? currentVersion)();
+  const getLastRepaired = deps.getLastRepaired ?? getLastRepairedVersion;
+  if (opts.ifVersionChanged && getLastRepaired() === version) {
+    return {
+      version,
+      skipped: true,
+      cli: null,
+      workspaces: null,
+      agents: null
+    };
+  }
+  const cli = (deps.installCli ?? installCliShim)();
+  const workspaces = (deps.repairWorkspaces ?? defaultRepairWorkspaces)();
+  const agentDeps = {};
+  if (cli.status === "installed" || cli.status === "refreshed" || cli.status === "ok") {
+    agentDeps.findZam = () => cli.shimPath;
+  }
+  let agents;
+  try {
+    agents = (deps.connectAgents ?? defaultConnectAgents)(agentDeps);
+  } catch (error) {
+    agents = {
+      success: false,
+      detected: [],
+      connected: 0,
+      companion: null,
+      errors: [error instanceof Error ? error.message : String(error)]
+    };
+  }
+  (deps.setLastRepaired ?? setLastRepairedVersion)(version);
+  return { version, skipped: false, cli, workspaces, agents };
+}
+
 // src/cli/llm/capability-probe.ts
 init_kernel();
 var EMBEDDING_MODEL_HINTS = [
@@ -28122,9 +28735,9 @@ function validateModelSave(entry, probe, now = () => (/* @__PURE__ */ new Date()
 // src/cli/llm/vision.ts
 init_kernel();
 import { randomBytes } from "crypto";
-import { readFileSync as readFileSync14 } from "fs";
+import { readFileSync as readFileSync16 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { basename as basename4, join as join19 } from "path";
+import { basename as basename5, join as join21 } from "path";
 var LANGUAGE_NAMES2 = {
   en: "English",
   de: "German",
@@ -28160,13 +28773,13 @@ async function observeUiSnapshotViaLLM(db, input8) {
   const imageUrls = [];
   const isVideo = /\.(mp4|mov|m4v|avi|mkv|webm)$/i.test(input8.imagePath);
   if (isVideo) {
-    const { mkdirSync: mkdirSync18, readdirSync: readdirSync3, rmSync: rmSync4 } = await import("fs");
+    const { mkdirSync: mkdirSync19, readdirSync: readdirSync3, rmSync: rmSync4 } = await import("fs");
     const { execSync: execSync6 } = await import("child_process");
-    const tempDir = join19(
+    const tempDir = join21(
       tmpdir2(),
       `zam-frames-${randomBytes(4).toString("hex")}`
     );
-    mkdirSync18(tempDir, { recursive: true });
+    mkdirSync19(tempDir, { recursive: true });
     try {
       execSync6(
         `ffmpeg -i "${input8.imagePath}" -vf "fps=1/3,scale=1280:-1" -vsync vfr "${tempDir}/frame_%03d.png"`,
@@ -28195,7 +28808,7 @@ async function observeUiSnapshotViaLLM(db, input8) {
         }
       }
       for (const file of sampledFiles) {
-        const bytes = readFileSync14(join19(tempDir, file));
+        const bytes = readFileSync16(join21(tempDir, file));
         imageUrls.push(`data:image/png;base64,${bytes.toString("base64")}`);
       }
     } finally {
@@ -28205,7 +28818,7 @@ async function observeUiSnapshotViaLLM(db, input8) {
       }
     }
   } else {
-    const imageBytes = readFileSync14(input8.imagePath);
+    const imageBytes = readFileSync16(input8.imagePath);
     const ext = input8.imagePath.split(".").pop()?.toLowerCase();
     const mime = ext === "jpg" || ext === "jpeg" ? "image/jpeg" : "image/png";
     imageUrls.push(`data:${mime};base64,${imageBytes.toString("base64")}`);
@@ -28443,7 +29056,7 @@ function buildReport(input8, draft) {
     evidence: [
       {
         type: "keyframe",
-        ref: input8.evidenceRef ?? basename4(input8.imagePath),
+        ref: input8.evidenceRef ?? basename5(input8.imagePath),
         redacted: input8.redacted ?? false
       }
     ],
@@ -28465,7 +29078,7 @@ function uncertainReport(input8, summary) {
     evidence: [
       {
         type: "keyframe",
-        ref: input8.evidenceRef ?? basename4(input8.imagePath),
+        ref: input8.evidenceRef ?? basename5(input8.imagePath),
         redacted: input8.redacted ?? false
       }
     ],
@@ -28554,6 +29167,21 @@ async function withDb(fn, onError = defaultErrorHandler) {
     await db?.close();
   }
 }
+async function withOptionalDb(fn, onError = defaultErrorHandler) {
+  let db = null;
+  try {
+    db = await openDatabase();
+  } catch {
+    db = null;
+  }
+  try {
+    await fn(db);
+  } catch (err) {
+    onError(err.message);
+  } finally {
+    await db?.close();
+  }
+}
 function jsonOut(data) {
   console.log(JSON.stringify(data, null, 2));
 }
@@ -28678,376 +29306,6 @@ async function withProviderScope(machine, action) {
   await withDb(action);
 }
 
-// src/cli/provisioning/index.ts
-import {
-  existsSync as existsSync18,
-  lstatSync as lstatSync2,
-  mkdirSync as mkdirSync13,
-  readFileSync as readFileSync15,
-  realpathSync,
-  rmSync as rmSync2,
-  symlinkSync,
-  writeFileSync as writeFileSync11
-} from "fs";
-import { basename as basename5, dirname as dirname9, join as join20 } from "path";
-import { fileURLToPath as fileURLToPath5 } from "url";
-var packageRoot3 = [
-  fileURLToPath5(new URL("../..", import.meta.url)),
-  fileURLToPath5(new URL("../../..", import.meta.url))
-].find((candidate) => existsSync18(join20(candidate, "package.json"))) ?? fileURLToPath5(new URL("../..", import.meta.url));
-var ALL_SETUP_AGENTS = ["claude", "copilot", "codex", "agent"];
-var SKILL_PAIRS = [
-  {
-    from: join20(packageRoot3, ".claude", "skills", "zam", "SKILL.md"),
-    to: join20(".claude", "skills", "zam", "SKILL.md"),
-    agents: ["claude", "copilot"]
-  },
-  {
-    from: join20(packageRoot3, ".agent", "skills", "zam", "SKILL.md"),
-    to: join20(".agent", "skills", "zam", "SKILL.md"),
-    agents: ["agent"]
-  },
-  {
-    from: join20(packageRoot3, ".agents", "skills", "zam", "SKILL.md"),
-    to: join20(".agents", "skills", "zam", "SKILL.md"),
-    agents: ["codex"]
-  }
-];
-function parseSetupAgents(value) {
-  if (!value || value.trim().toLowerCase() === "all") {
-    return new Set(ALL_SETUP_AGENTS);
-  }
-  const aliases = {
-    claude: ["claude"],
-    copilot: ["copilot"],
-    codex: ["codex"],
-    agent: ["agent"],
-    opencode: ["agent"]
-  };
-  const selected = /* @__PURE__ */ new Set();
-  for (const raw of value.split(",")) {
-    const key = raw.trim().toLowerCase();
-    const mapped = aliases[key];
-    if (!mapped) {
-      throw new Error(
-        `Unknown agent "${raw}". Use: all, claude, copilot, codex, agent.`
-      );
-    }
-    for (const item of mapped) selected.add(item);
-  }
-  return selected;
-}
-function pathExists(path) {
-  try {
-    lstatSync2(path);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function isSymbolicLink(path) {
-  try {
-    return lstatSync2(path).isSymbolicLink();
-  } catch {
-    return false;
-  }
-}
-function comparableRealPath(path) {
-  const real = realpathSync(path);
-  return process.platform === "win32" ? real.toLowerCase() : real;
-}
-function pathsResolveToSameDirectory(sourceDir, destinationDir) {
-  try {
-    return comparableRealPath(destinationDir) === comparableRealPath(sourceDir);
-  } catch {
-    return false;
-  }
-}
-function linkPointsTo(sourceDir, destinationDir) {
-  return isSymbolicLink(destinationDir) && pathsResolveToSameDirectory(sourceDir, destinationDir);
-}
-function isZamSkillCopy(destinationDir) {
-  try {
-    if (!lstatSync2(destinationDir).isDirectory()) return false;
-    const skillFile = join20(destinationDir, "SKILL.md");
-    if (!existsSync18(skillFile)) return false;
-    return /^name:\s*zam\s*$/m.test(readFileSync15(skillFile, "utf8"));
-  } catch {
-    return false;
-  }
-}
-function classifySkillDestination(sourceDir, destinationDir) {
-  if (!existsSync18(sourceDir)) return "source-missing";
-  if (!isSymbolicLink(destinationDir) && pathsResolveToSameDirectory(sourceDir, destinationDir)) {
-    return "source-directory";
-  }
-  if (linkPointsTo(sourceDir, destinationDir)) return "linked";
-  if (!pathExists(destinationDir)) return "missing";
-  if (isSymbolicLink(destinationDir)) return "broken";
-  if (isZamSkillCopy(destinationDir)) return "stale-copy";
-  return "unmanaged";
-}
-function wireSkills(cwd = process.cwd(), agents = parseSetupAgents(), opts = {}) {
-  const results = [];
-  const log = (message) => {
-    if (!opts.quiet) console.log(message);
-  };
-  for (const { from, to, agents: pairAgents } of SKILL_PAIRS) {
-    if (!pairAgents.some((agent) => agents.has(agent))) continue;
-    const sourceDir = dirname9(from);
-    const destinationDir = dirname9(join20(cwd, to));
-    const label = dirname9(to);
-    const state = classifySkillDestination(sourceDir, destinationDir);
-    if (state === "source-missing") {
-      if (!opts.quiet) {
-        console.warn(`  warn  source not found, skipping: ${sourceDir}`);
-      }
-      results.push({
-        source: sourceDir,
-        destination: destinationDir,
-        action: "skipped",
-        reason: "source-not-found"
-      });
-      continue;
-    }
-    if (state === "source-directory") {
-      log(`  skip  ${label} (package source)`);
-      results.push({
-        source: sourceDir,
-        destination: destinationDir,
-        action: "skipped",
-        reason: "source-directory"
-      });
-      continue;
-    }
-    if (state === "linked") {
-      log(`  skip  ${label} (already linked)`);
-      results.push({
-        source: sourceDir,
-        destination: destinationDir,
-        action: "skipped",
-        reason: "already-linked"
-      });
-      continue;
-    }
-    const destinationExists = state !== "missing";
-    const replaceExisting = destinationExists && (Boolean(opts.force) || state === "broken" || state === "stale-copy");
-    if (destinationExists && !replaceExisting) {
-      if (!opts.quiet) {
-        console.warn(
-          `  warn  ${label} already exists and is not managed by ZAM; use --force to replace it`
-        );
-      }
-      results.push({
-        source: sourceDir,
-        destination: destinationDir,
-        action: "skipped",
-        reason: "unmanaged-destination"
-      });
-      continue;
-    }
-    const action = destinationExists ? "relinked" : "linked";
-    if (opts.dryRun) {
-      log(`  would ${action === "linked" ? "link" : "relink"}  ${label}`);
-    } else {
-      if (destinationExists) {
-        rmSync2(destinationDir, { recursive: true, force: true });
-      }
-      mkdirSync13(dirname9(destinationDir), { recursive: true });
-      symlinkSync(
-        sourceDir,
-        destinationDir,
-        process.platform === "win32" ? "junction" : "dir"
-      );
-      log(`  ${action === "linked" ? "link" : "relink"}  ${label}`);
-    }
-    results.push({ source: sourceDir, destination: destinationDir, action });
-  }
-  return results;
-}
-function inspectSkillLinks(cwd = process.cwd(), agents = parseSetupAgents()) {
-  const results = [];
-  for (const { from, to, agents: pairAgents } of SKILL_PAIRS) {
-    if (!pairAgents.some((agent) => agents.has(agent))) continue;
-    const sourceDir = dirname9(from);
-    const destinationDir = dirname9(join20(cwd, to));
-    results.push({
-      agents: pairAgents,
-      source: sourceDir,
-      destination: destinationDir,
-      state: classifySkillDestination(sourceDir, destinationDir)
-    });
-  }
-  return results;
-}
-function summarizeSkillLinkHealth(inspections) {
-  if (inspections.some((item) => item.state === "unmanaged")) {
-    return "unmanaged";
-  }
-  const repairable = ["missing", "broken", "stale-copy"];
-  if (inspections.some((item) => repairable.includes(item.state))) {
-    return "needs-repair";
-  }
-  return "healthy";
-}
-var ZAM_BLOCK_START = "<!-- ZAM:START -->";
-var ZAM_BLOCK_END = "<!-- ZAM:END -->";
-function upsertMarkedBlock(dest, blockBody, dryRun) {
-  const block = `${ZAM_BLOCK_START}
-${blockBody.trim()}
-${ZAM_BLOCK_END}`;
-  if (!existsSync18(dest)) {
-    if (!dryRun) {
-      mkdirSync13(dirname9(dest), { recursive: true });
-      writeFileSync11(dest, `${block}
-`, "utf8");
-    }
-    return "write";
-  }
-  const existing = readFileSync15(dest, "utf8");
-  if (existing.includes(block)) return "skip";
-  const start = existing.indexOf(ZAM_BLOCK_START);
-  const end = existing.indexOf(ZAM_BLOCK_END);
-  const next = start >= 0 && end > start ? `${existing.slice(0, start)}${block}${existing.slice(end + ZAM_BLOCK_END.length)}` : `${existing.trimEnd()}
-
-${block}
-`;
-  if (!dryRun) writeFileSync11(dest, next, "utf8");
-  return start >= 0 && end > start ? "update" : "write";
-}
-function logInstructionAction(action, label, dryRun) {
-  if (action === "skip") {
-    console.log(`  skip  ${label} (ZAM block already present)`);
-  } else {
-    console.log(`  ${dryRun ? "would " : ""}${action} ${label}`);
-  }
-}
-function writeClaudeMd(skipClaudeMd, cwd = process.cwd(), opts = {}) {
-  if (skipClaudeMd) return;
-  const dest = join20(cwd, "CLAUDE.md");
-  if (existsSync18(dest)) {
-    if (!opts.updateExisting) {
-      console.log(`  skip  CLAUDE.md (already present)`);
-      return;
-    }
-    const action = upsertMarkedBlock(
-      dest,
-      `## ZAM learning sessions
-
-ZAM is available in this repository. Use the \`zam\` skill in Claude Code to turn real work into an observed learning session with active recall and FSRS scheduling.
-
-- Skill files live under \`.claude/skills/zam/\`.
-- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
-- The skill directory is linked to this ZAM installation and updates with it.`,
-      Boolean(opts.dryRun)
-    );
-    logInstructionAction(action, "CLAUDE.md", Boolean(opts.dryRun));
-    return;
-  }
-  const name = basename5(cwd);
-  const content = `# ZAM Personal Kernel \u2014 ${name}
-
-This is a ZAM personal instance. ZAM builds lasting skills through spaced
-repetition during real work \u2014 not separate study sessions.
-
-## First time here?
-Run \`/setup\` in Claude Code or Gemini CLI to complete first-time setup.
-
-## Regular use
-Run \`/zam\` to start a learning session on whatever you are working on.
-
-## What lives here
-- \`beliefs/\` \u2014 your worldview, approved by git commit
-- \`goals/\` \u2014 your objectives, decomposed into tasks and learning tokens
-
-## Fast-changing data
-Learning tokens, cards, and review history live in local SQLite by default.
-Use \`zam connector setup turso\` to store cloud credentials in
-\`~/.zam/credentials.json\` and use a Turso database across machines.
-`;
-  if (opts.dryRun) {
-    console.log(`  would write CLAUDE.md`);
-  } else {
-    writeFileSync11(dest, content, "utf8");
-    console.log(`  write CLAUDE.md`);
-  }
-}
-function writeAgentsMd(skipAgentsMd, cwd = process.cwd(), opts = {}) {
-  if (skipAgentsMd) return;
-  const dest = join20(cwd, "AGENTS.md");
-  if (existsSync18(dest)) {
-    if (!opts.updateExisting) {
-      console.log(`  skip  AGENTS.md (already present)`);
-      return;
-    }
-    const action = upsertMarkedBlock(
-      dest,
-      `## ZAM learning sessions
-
-ZAM is available in this repository. Select the \`zam\` skill through \`/skills\` or invoke \`$zam\` where supported to turn real work into an observed learning session with active recall and FSRS scheduling.
-
-- Skill files live under \`.agents/skills/zam/\`.
-- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
-- The skill directory is linked to this ZAM installation and updates with it.`,
-      Boolean(opts.dryRun)
-    );
-    logInstructionAction(action, "AGENTS.md", Boolean(opts.dryRun));
-    return;
-  }
-  const name = basename5(cwd);
-  const content = `# ZAM Personal Kernel - ${name}
-
-This is a ZAM personal instance. ZAM builds lasting skills through spaced
-repetition during real work, not separate study sessions.
-
-## First time here?
-Run \`zam setup\` from the shell. When this repository includes
-\`.agents/skills/setup/\`, you can instead select \`setup\` through \`/skills\`
-or invoke \`$setup\`.
-
-## Regular use
-Select the \`zam\` skill through \`/skills\` or invoke \`$zam\` to start a
-learning session on whatever you are working on.
-
-## What lives here
-- \`beliefs/\` - your worldview, approved by git commit
-- \`goals/\` - your objectives, decomposed into tasks and learning tokens
-
-## Fast-changing data
-Learning tokens, cards, and review history live in local SQLite by default.
-Use \`zam connector setup turso\` to store cloud credentials in
-\`~/.zam/credentials.json\` and use a Turso database across machines.
-
-## Codex skills
-Codex discovers repository skills under \`.agents/skills/\`. Run
-\`zam setup --force\` after upgrading \`zam-core\` to refresh them.
-`;
-  if (opts.dryRun) {
-    console.log(`  would write AGENTS.md`);
-  } else {
-    writeFileSync11(dest, content, "utf8");
-    console.log(`  write AGENTS.md`);
-  }
-}
-function writeCopilotInstructions(cwd = process.cwd(), opts = {}) {
-  const dest = join20(cwd, ".github", "copilot-instructions.md");
-  const action = upsertMarkedBlock(
-    dest,
-    `## ZAM learning sessions
-
-ZAM is available in this repository through \`.claude/skills/zam/\`. Use the \`zam\` project skill from Copilot-compatible skill selection surfaces to turn real work into an observed learning session with active recall and FSRS scheduling.
-
-- Fast-changing review data lives in \`~/.zam/\`, not in this repository.
-- The skill directory is linked to this ZAM installation and updates with it.`,
-    Boolean(opts.dryRun)
-  );
-  logInstructionAction(
-    action,
-    ".github/copilot-instructions.md",
-    Boolean(opts.dryRun)
-  );
-}
-
 // src/cli/users/identity.ts
 init_kernel();
 async function ensureDefaultUser(db, preferredUserId) {
@@ -29071,13 +29329,13 @@ async function resolveUser(opts, db, resolveOpts) {
 }
 
 // src/cli/workspaces/backup.ts
-import { mkdirSync as mkdirSync14 } from "fs";
-import { join as join21 } from "path";
+import { mkdirSync as mkdirSync15 } from "fs";
+import { join as join22 } from "path";
 async function backupDatabaseTo(db, targetDir) {
-  const backupDir = join21(targetDir, "zam-backups");
-  mkdirSync14(backupDir, { recursive: true });
+  const backupDir = join22(targetDir, "zam-backups");
+  mkdirSync15(backupDir, { recursive: true });
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  const dest = join21(backupDir, `zam-${stamp}.db`);
+  const dest = join22(backupDir, `zam-${stamp}.db`);
   await db.exec(`VACUUM INTO '${dest.replace(/'/g, "''")}'`);
   return dest;
 }
@@ -29133,6 +29391,9 @@ function parseProviderScope(scope) {
 async function withDb2(fn) {
   await withDb(fn, jsonError);
 }
+async function withOptionalDb2(fn) {
+  await withOptionalDb(fn, jsonError);
+}
 var bridgeCommand = new Command2("bridge").description(
   "Machine-readable JSON protocol for AI integration"
 );
@@ -29201,27 +29462,27 @@ bridgeCommand.command("update-check").description("Check whether a newer ZAM rel
   }
 });
 bridgeCommand.command("workspace-info").description("Report the workspace dir, its default, and the data dir (JSON)").action(async () => {
-  await withDb2(async (db) => {
+  await withOptionalDb2(async (db) => {
     const activeWorkspace = await ensureActiveWorkspace(db);
     jsonOut2({
       activeWorkspaceId: activeWorkspace.id,
       activeWorkspace,
       workspaceDir: activeWorkspace.path,
       defaultWorkspaceDir: defaultWorkspaceDir(),
-      dataDir: join22(homedir13(), ".zam")
+      dataDir: join23(homedir14(), ".zam")
     });
   });
 });
 function provisionConfiguredWorkspaces() {
   return getConfiguredWorkspaces().flatMap(
-    (workspace) => existsSync19(workspace.path) ? wireSkills(workspace.path, parseSetupAgents(), { quiet: true }) : []
+    (workspace) => existsSync21(workspace.path) ? wireSkills(workspace.path, parseSetupAgents(), { quiet: true }) : []
   );
 }
 function buildWorkspaceLinkHealth(workspaces) {
   const agents = parseSetupAgents();
   const map = {};
   for (const workspace of workspaces) {
-    if (!existsSync19(workspace.path)) continue;
+    if (!existsSync21(workspace.path)) continue;
     const links = inspectSkillLinks(workspace.path, agents);
     map[workspace.id] = {
       health: summarizeSkillLinkHealth(links),
@@ -29242,7 +29503,7 @@ async function ensureDesktopWorkspace(db) {
   };
 }
 bridgeCommand.command("workspace-list").description("List configured ZAM workspaces (JSON)").action(async () => {
-  await withDb2(async (db) => {
+  await withOptionalDb2(async (db) => {
     const activeWorkspace = await ensureActiveWorkspace(db);
     const workspaces = getConfiguredWorkspaces();
     jsonOut2({
@@ -29251,7 +29512,7 @@ bridgeCommand.command("workspace-list").description("List configured ZAM workspa
       activeWorkspace,
       workspaceDir: activeWorkspace.path,
       defaultWorkspaceDir: defaultWorkspaceDir(),
-      dataDir: join22(homedir13(), ".zam"),
+      dataDir: join23(homedir14(), ".zam"),
       linkHealth: buildWorkspaceLinkHealth(workspaces)
     });
   });
@@ -29266,7 +29527,7 @@ bridgeCommand.command("workspace-repair-links").description(
   if (!id) jsonError("A non-empty --id is required");
   const workspace = getConfiguredWorkspaces().find((item) => item.id === id);
   if (!workspace) jsonError(`Workspace "${id}" is not configured`);
-  if (!existsSync19(workspace.path)) {
+  if (!existsSync21(workspace.path)) {
     jsonError(`Workspace path does not exist: ${workspace.path}`);
   }
   const agents = parseSetupAgents(opts.agents);
@@ -29297,13 +29558,13 @@ function parseBridgeWorkspaceKind(value) {
 bridgeCommand.command("workspace-add").description("Register an existing directory as a ZAM workspace (JSON)").requiredOption("--path <dir>", "Existing workspace/repository directory").option("--id <id>", "Workspace id").option("--label <label>", "Human-readable label").option("--kind <kind>", "Workspace kind", "custom").action(async (opts) => {
   const raw = String(opts.path ?? "").trim();
   if (!raw) jsonError("A non-empty --path is required");
-  const path = resolve5(raw);
-  if (!existsSync19(path)) jsonError(`Workspace path does not exist: ${path}`);
+  const path = resolve6(raw);
+  if (!existsSync21(path)) jsonError(`Workspace path does not exist: ${path}`);
   const id = opts.id ? String(opts.id).trim() : void 0;
   if (opts.id && !id) jsonError("A non-empty --id is required");
   const kind = parseBridgeWorkspaceKind(opts.kind);
   const skillLinks = wireSkills(path, parseSetupAgents(), { quiet: true });
-  await withDb2(async (db) => {
+  await withOptionalDb2(async (db) => {
     const workspace = await activateWorkspacePath(db, path, {
       ...id ? { id } : {},
       ...opts.label ? { label: opts.label } : {},
@@ -29325,7 +29586,7 @@ bridgeCommand.command("workspace-remove").description("Unregister a ZAM workspac
   if (!id) jsonError("A non-empty --id is required");
   const workspace = getConfiguredWorkspaces().find((item) => item.id === id);
   if (!workspace) jsonError(`Workspace "${id}" is not configured`);
-  await withDb2(async (db) => {
+  await withOptionalDb2(async (db) => {
     const { activeWorkspace, workspaces } = await removeWorkspaceAndResolveActive(db, id);
     const skillLinks = provisionConfiguredWorkspaces();
     jsonOut2({
@@ -29342,10 +29603,10 @@ bridgeCommand.command("workspace-remove").description("Unregister a ZAM workspac
 bridgeCommand.command("set-workspace-dir").description("Set the personal workspace directory (JSON)").requiredOption("--dir <path>", "Path to the workspace directory").action(async (opts) => {
   const raw = String(opts.dir ?? "").trim();
   if (!raw) jsonError("A non-empty --dir is required");
-  const dir = resolve5(raw);
-  if (!existsSync19(dir)) jsonError(`Workspace path does not exist: ${dir}`);
+  const dir = resolve6(raw);
+  if (!existsSync21(dir)) jsonError(`Workspace path does not exist: ${dir}`);
   const skillLinks = wireSkills(dir, parseSetupAgents(), { quiet: true });
-  await withDb2(async (db) => {
+  await withOptionalDb2(async (db) => {
     const workspace = await activateWorkspacePath(db, dir);
     jsonOut2({
       ok: true,
@@ -29406,7 +29667,7 @@ bridgeCommand.command("agent-open").description("Launch an agent harness in the
       jsonError(`Workspace is not configured: ${opts.workspace}`);
     }
     const activeWorkspace = await ensureActiveWorkspace(db);
-    const workspace = opts.dir ? existsSync19(opts.dir) ? opts.dir : homedir13() : existingWorkspaceDirOrHome(configuredWorkspace ?? activeWorkspace);
+    const workspace = opts.dir ? existsSync21(opts.dir) ? opts.dir : homedir14() : existingWorkspaceDirOrHome(configuredWorkspace ?? activeWorkspace);
     launchHarness(harness, {
       executable,
       workspace,
@@ -29778,7 +30039,7 @@ bridgeCommand.command("discover-skills").description(
   "20"
 ).action(async (opts) => {
   try {
-    const monitorDir = join22(homedir13(), ".zam", "monitor");
+    const monitorDir = join23(homedir14(), ".zam", "monitor");
     let files;
     try {
       files = readdirSync2(monitorDir).filter((f) => f.endsWith(".jsonl"));
@@ -29791,7 +30052,7 @@ bridgeCommand.command("discover-skills").description(
       return;
     }
     const limit = Number(opts.limit);
-    const sorted = files.map((f) => ({ name: f, path: join22(monitorDir, f) })).sort((a, b) => b.name.localeCompare(a.name)).slice(0, limit);
+    const sorted = files.map((f) => ({ name: f, path: join23(monitorDir, f) })).sort((a, b) => b.name.localeCompare(a.name)).slice(0, limit);
     const sessionCommands = /* @__PURE__ */ new Map();
     for (const file of sorted) {
       const sessionId = file.name.replace(".jsonl", "");
@@ -29903,7 +30164,7 @@ bridgeCommand.command("observe-ui-snapshot").description(
 });
 function resolveWindowsPowerShell() {
   try {
-    execFileSync4("where.exe", ["pwsh.exe"], { stdio: "ignore" });
+    execFileSync5("where.exe", ["pwsh.exe"], { stdio: "ignore" });
     return "pwsh";
   } catch {
     return "powershell";
@@ -29918,7 +30179,7 @@ function captureScreenshot(outputPath, hwnd, processName) {
     throw new Error(`Invalid process name format: ${processName}`);
   }
   if (platform === "win32") {
-    const stdout = execFileSync4(
+    const stdout = execFileSync5(
       resolveWindowsPowerShell(),
       [
         "-NoProfile",
@@ -30231,13 +30492,13 @@ Write-CaptureResult "fullscreen" $hwndVal $matchedBy
   } else if (platform === "darwin") {
     if (hwnd) {
       const parsedHwnd = hwnd.startsWith("0x") ? parseInt(hwnd, 16) : parseInt(hwnd, 10);
-      execFileSync4("screencapture", ["-l", String(parsedHwnd), outputPath], {
+      execFileSync5("screencapture", ["-l", String(parsedHwnd), outputPath], {
         stdio: "pipe"
       });
       return { method: "screencapture-window", target: null };
     } else if (processName) {
       try {
-        const windowId = execFileSync4(
+        const windowId = execFileSync5(
           "osascript",
           [
             "-e",
@@ -30246,17 +30507,17 @@ Write-CaptureResult "fullscreen" $hwndVal $matchedBy
           { encoding: "utf8", stdio: ["pipe", "pipe", "ignore"] }
         ).trim();
         if (windowId && /^\d+$/.test(windowId)) {
-          execFileSync4("screencapture", ["-l", windowId, outputPath], {
+          execFileSync5("screencapture", ["-l", windowId, outputPath], {
             stdio: "pipe"
           });
           return { method: "screencapture-window", target: null };
         }
       } catch {
       }
-      execFileSync4("screencapture", ["-x", outputPath], { stdio: "pipe" });
+      execFileSync5("screencapture", ["-x", outputPath], { stdio: "pipe" });
       return { method: "screencapture-full", target: null };
     } else {
-      execFileSync4("screencapture", ["-x", outputPath], { stdio: "pipe" });
+      execFileSync5("screencapture", ["-x", outputPath], { stdio: "pipe" });
       return { method: "screencapture-full", target: null };
     }
   } else {
@@ -30293,7 +30554,7 @@ bridgeCommand.command("capture-ui").description("Capture a screenshot for agent-
         return;
       }
     }
-    const outputPath = opts.image ?? opts.output ?? join22(tmpdir3(), `zam-capture-${randomBytes2(4).toString("hex")}.png`);
+    const outputPath = opts.image ?? opts.output ?? join23(tmpdir3(), `zam-capture-${randomBytes2(4).toString("hex")}.png`);
     const captureResult = isProvided ? { method: "provided", target: null } : captureScreenshot(outputPath, opts.hwnd, opts.processName);
     if (!isProvided) {
       const post = decidePostCapture(policy, {
@@ -30321,7 +30582,7 @@ bridgeCommand.command("capture-ui").description("Capture a screenshot for agent-
         return;
       }
     }
-    const imageBytes = readFileSync16(outputPath);
+    const imageBytes = readFileSync17(outputPath);
     const base64 = imageBytes.toString("base64");
     jsonOut2({
       sessionId: opts.session ?? null,
@@ -30348,11 +30609,11 @@ bridgeCommand.command("start-recording").description("Start screen recording in
     return;
   }
   const sessionId = opts.session;
-  const statePath = join22(tmpdir3(), `zam-recording-${sessionId}.json`);
+  const statePath = join23(tmpdir3(), `zam-recording-${sessionId}.json`);
   const defaultExt = platform === "win32" ? ".mkv" : ".mov";
-  const outputPath = opts.output ?? join22(tmpdir3(), `zam-recording-${sessionId}${defaultExt}`);
-  const { existsSync: existsSync28, writeFileSync: writeFileSync16, openSync, closeSync } = await import("fs");
-  if (existsSync28(statePath)) {
+  const outputPath = opts.output ?? join23(tmpdir3(), `zam-recording-${sessionId}${defaultExt}`);
+  const { existsSync: existsSync30, writeFileSync: writeFileSync17, openSync, closeSync } = await import("fs");
+  if (existsSync30(statePath)) {
     jsonOut2({
       sessionId,
       started: false,
@@ -30360,7 +30621,7 @@ bridgeCommand.command("start-recording").description("Start screen recording in
     });
     return;
   }
-  const logPath = join22(tmpdir3(), `zam-recording-${sessionId}.log`);
+  const logPath = join23(tmpdir3(), `zam-recording-${sessionId}.log`);
   let logFd;
   try {
     logFd = openSync(logPath, "w");
@@ -30406,7 +30667,7 @@ bridgeCommand.command("start-recording").description("Start screen recording in
   }
   child.unref();
   if (child.pid) {
-    writeFileSync16(
+    writeFileSync17(
       statePath,
       JSON.stringify({
         pid: child.pid,
@@ -30442,9 +30703,9 @@ bridgeCommand.command("stop-recording").description(
     return;
   }
   const sessionId = opts.session;
-  const statePath = join22(tmpdir3(), `zam-recording-${sessionId}.json`);
-  const { existsSync: existsSync28, readFileSync: readFileSync21, rmSync: rmSync4 } = await import("fs");
-  if (!existsSync28(statePath)) {
+  const statePath = join23(tmpdir3(), `zam-recording-${sessionId}.json`);
+  const { existsSync: existsSync30, readFileSync: readFileSync22, rmSync: rmSync4 } = await import("fs");
+  if (!existsSync30(statePath)) {
     jsonOut2({
       sessionId,
       stopped: false,
@@ -30452,7 +30713,7 @@ bridgeCommand.command("stop-recording").description(
     });
     return;
   }
-  const state = JSON.parse(readFileSync21(statePath, "utf8"));
+  const state = JSON.parse(readFileSync22(statePath, "utf8"));
   const { pid, outputPath } = state;
   try {
     process.kill(pid, "SIGINT");
@@ -30468,7 +30729,7 @@ bridgeCommand.command("stop-recording").description(
   };
   let attempts = 0;
   while (isProcessRunning(pid) && attempts < 20) {
-    await new Promise((resolve11) => setTimeout(resolve11, 250));
+    await new Promise((resolve12) => setTimeout(resolve12, 250));
     attempts++;
   }
   if (isProcessRunning(pid)) {
@@ -30481,7 +30742,7 @@ bridgeCommand.command("stop-recording").description(
     rmSync4(statePath, { force: true });
   } catch {
   }
-  if (!existsSync28(outputPath)) {
+  if (!existsSync30(outputPath)) {
     jsonOut2({
       sessionId,
       stopped: false,
@@ -30911,7 +31172,7 @@ bridgeCommand.command("cloud-model-hint").description("Suggest a cloud model for
 });
 bridgeCommand.command("local-llm-hints").description("Detect installed local LLM servers and suggest defaults (JSON)").action(() => {
   const profile = getSystemProfile();
-  const flmInstalled = hasCommand("flm") || existsSync19("C:\\Program Files\\flm\\flm.exe");
+  const flmInstalled = hasCommand("flm") || existsSync21("C:\\Program Files\\flm\\flm.exe");
   const ollamaInstalled = isOllamaInstalled();
   const runners = [
     { id: "flm", label: "FastFlowLM", installed: flmInstalled },
@@ -31143,13 +31404,15 @@ bridgeCommand.command("desktop-bootstrap").description("Initialize first-run des
     const userId = await ensureDefaultUser(db, opts.user);
     const { enabled, url, model, locale } = await getLlmConfig(db);
     const { workspaceDir, activeWorkspaceId, skillLinks } = await ensureDesktopWorkspace(db);
+    const cli = installCliShim();
     jsonOut2({
       userId,
       locale,
       llm: { enabled, url, model },
       activeWorkspaceId,
       workspaceDir,
-      skillLinks
+      skillLinks,
+      cli
     });
   });
 });
@@ -31166,6 +31429,22 @@ bridgeCommand.command("get-settings").description("Get active ZAM settings (JSON
     });
   });
 });
+bridgeCommand.command("install-repair").description(
+  "Verify and repair this machine's ZAM installation: CLI shim + PATH, workspace skill links, agent configs and companion extensions (JSON)"
+).option(
+  "--if-version-changed",
+  "Only run when the app version differs from the last repaired one; reports skipped:true otherwise"
+).action((opts) => {
+  try {
+    jsonOut2(
+      performInstallRepair({
+        ifVersionChanged: Boolean(opts.ifVersionChanged)
+      })
+    );
+  } catch (err) {
+    jsonError(err.message);
+  }
+});
 bridgeCommand.command("agent-harness-status").description(
   "Detect installed agent harnesses and their ZAM MCP configuration state (JSON)"
 ).action(() => {
@@ -32628,8 +32907,17 @@ bridgeCommand.command("unassign-knowledge-context").description("Remove a token
   });
 });
 bridgeCommand.command("get-active-knowledge-context").description("Get the active knowledge context name (JSON)").action(async () => {
-  await withDb2(async (db) => {
+  await withOptionalDb2(async (db) => {
     const configured = getActiveWorkspaceContext();
+    if (!db) {
+      jsonOut2({
+        success: true,
+        activeContext: configured ?? null,
+        staleContext: null,
+        validated: false
+      });
+      return;
+    }
     const active = configured ? await getKnowledgeContextByName(db, configured) : void 0;
     jsonOut2({
       success: true,
@@ -32639,7 +32927,7 @@ bridgeCommand.command("get-active-knowledge-context").description("Get the activ
   });
 });
 bridgeCommand.command("set-active-knowledge-context").description("Set the active knowledge context name (JSON)").argument("[name]", "Context name to use (use empty/none to clear)").action(async (name) => {
-  await withDb2(async (db) => {
+  await withOptionalDb2(async (db) => {
     if (!name || name === "none" || name === "null" || name === "undefined") {
       if (!setActiveWorkspaceContext(void 0)) {
         jsonError("No active workspace configured");
@@ -32647,6 +32935,13 @@ bridgeCommand.command("set-active-knowledge-context").description("Set the activ
       jsonOut2({ success: true, activeContext: null });
       return;
     }
+    if (!db) {
+      if (!setActiveWorkspaceContext(name)) {
+        jsonError("No active workspace configured");
+      }
+      jsonOut2({ success: true, activeContext: name, validated: false });
+      return;
+    }
     const context = await getKnowledgeContextByName(db, name);
     if (!context) {
       jsonError(`Knowledge context not found: ${name}`);
@@ -34098,28 +34393,28 @@ var doctorCommand = new Command5("doctor").description(
 // src/cli/commands/git-sync.ts
 init_kernel();
 import { execSync as execSync5 } from "child_process";
-import { chmodSync as chmodSync2, existsSync as existsSync20, writeFileSync as writeFileSync12 } from "fs";
-import { join as join23 } from "path";
+import { chmodSync as chmodSync3, existsSync as existsSync22, writeFileSync as writeFileSync13 } from "fs";
+import { join as join24 } from "path";
 import { Command as Command6 } from "commander";
 function installHook2() {
-  const gitDir = join23(process.cwd(), ".git");
-  if (!existsSync20(gitDir)) {
+  const gitDir = join24(process.cwd(), ".git");
+  if (!existsSync22(gitDir)) {
     console.error(
       "Error: Current directory is not the root of a Git repository."
     );
     process.exit(1);
   }
-  const hooksDir = join23(gitDir, "hooks");
-  const hookPath = join23(hooksDir, "post-commit");
+  const hooksDir = join24(gitDir, "hooks");
+  const hookPath = join24(hooksDir, "post-commit");
   const hookContent = `#!/bin/sh
 # ZAM Spaced Repetition Auto-Stale Hook
 # Triggered automatically on git commits to decay modified concept cards.
 zam git-sync --commit HEAD --quiet
 `;
   try {
-    writeFileSync12(hookPath, hookContent, { encoding: "utf-8", flag: "w" });
+    writeFileSync13(hookPath, hookContent, { encoding: "utf-8", flag: "w" });
     try {
-      chmodSync2(hookPath, "755");
+      chmodSync3(hookPath, "755");
     } catch (_e) {
     }
     console.log(
@@ -34220,8 +34515,8 @@ ZAM Auto-Stale Complete: Scanned ${changedFiles.length} file(s).`
 
 // src/cli/commands/goal.ts
 init_kernel();
-import { existsSync as existsSync21, mkdirSync as mkdirSync15 } from "fs";
-import { resolve as resolve6 } from "path";
+import { existsSync as existsSync23, mkdirSync as mkdirSync16 } from "fs";
+import { resolve as resolve7 } from "path";
 import { input as input2 } from "@inquirer/prompts";
 import { Command as Command7 } from "commander";
 async function resolveGoalsDir() {
@@ -34234,7 +34529,7 @@ async function resolveGoalsDir() {
   } finally {
     await db?.close();
   }
-  return goalsDir ? resolve6(goalsDir) : resolve6("goals");
+  return goalsDir ? resolve7(goalsDir) : resolve7("goals");
 }
 var goalCommand = new Command7("goal").description(
   "Manage learning goals (markdown files)"
@@ -34244,7 +34539,7 @@ goalCommand.command("list").description("List all goals").option(
   "Filter by status (active, completed, paused, abandoned)"
 ).option("--tree", "Show goals as a tree with parent/child relationships").option("--json", "Output as JSON").action(async (opts) => {
   const goalsDir = await resolveGoalsDir();
-  if (!existsSync21(goalsDir)) {
+  if (!existsSync23(goalsDir)) {
     console.error(`Goals directory not found: ${goalsDir}`);
     console.error(
       "Set it with: zam settings set personal.goals_dir /path/to/goals"
@@ -34345,8 +34640,8 @@ ${"\u2500".repeat(50)}`);
 });
 goalCommand.command("create").description("Create a new goal").option("--slug <slug>", "Goal slug (used as filename)").option("--title <title>", "Goal title").option("--parent <slug>", "Parent goal slug").option("--description <text>", "Goal description").option("--json", "Output as JSON").action(async (opts) => {
   const goalsDir = await resolveGoalsDir();
-  if (!existsSync21(goalsDir)) {
-    mkdirSync15(goalsDir, { recursive: true });
+  if (!existsSync23(goalsDir)) {
+    mkdirSync16(goalsDir, { recursive: true });
   }
   let slug = opts.slug;
   let title = opts.title;
@@ -34406,22 +34701,22 @@ goalCommand.command("status <slug> <status>").description("Update a goal's statu
 
 // src/cli/commands/init.ts
 init_kernel();
-import { existsSync as existsSync22, mkdirSync as mkdirSync16, writeFileSync as writeFileSync13 } from "fs";
-import { homedir as homedir14 } from "os";
-import { join as join24, resolve as resolve7 } from "path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync17, writeFileSync as writeFileSync14 } from "fs";
+import { homedir as homedir15 } from "os";
+import { join as join25, resolve as resolve8 } from "path";
 import { confirm, input as input3 } from "@inquirer/prompts";
 import { Command as Command8 } from "commander";
-var HOME2 = homedir14();
+var HOME2 = homedir15();
 function printLine(char = "\u2550", len = 60, color = "\x1B[36m") {
   console.log(`${color}${char.repeat(len)}\x1B[0m`);
 }
 function bootstrapSandboxWorkspace(workspaceDir) {
-  mkdirSync16(join24(workspaceDir, "beliefs"), { recursive: true });
-  mkdirSync16(join24(workspaceDir, "goals"), { recursive: true });
-  mkdirSync16(join24(workspaceDir, "skills"), { recursive: true });
-  const worldviewFile = join24(workspaceDir, "beliefs", "worldview.md");
-  if (!existsSync22(worldviewFile)) {
-    writeFileSync13(
+  mkdirSync17(join25(workspaceDir, "beliefs"), { recursive: true });
+  mkdirSync17(join25(workspaceDir, "goals"), { recursive: true });
+  mkdirSync17(join25(workspaceDir, "skills"), { recursive: true });
+  const worldviewFile = join25(workspaceDir, "beliefs", "worldview.md");
+  if (!existsSync24(worldviewFile)) {
+    writeFileSync14(
       worldviewFile,
       `# Personal Worldview
 
@@ -34433,9 +34728,9 @@ Here, I declare the core concepts and principles I want to master.
       "utf8"
     );
   }
-  const goalsFile = join24(workspaceDir, "goals", "goals.md");
-  if (!existsSync22(goalsFile)) {
-    writeFileSync13(
+  const goalsFile = join25(workspaceDir, "goals", "goals.md");
+  if (!existsSync24(goalsFile)) {
+    writeFileSync14(
       goalsFile,
       `# Personal Goals
 
@@ -34457,8 +34752,8 @@ var initCommand = new Command8("init").description("Launch the guided interactiv
   );
   printLine();
   console.log("\n\x1B[1m[1/5] Setting up Local Workspace Sandbox\x1B[0m");
-  const defaultWorkspace = join24(HOME2, "Documents", "zam");
-  const workspacePath = resolve7(
+  const defaultWorkspace = join25(HOME2, "Documents", "zam");
+  const workspacePath = resolve8(
     await input3({
       message: "Choose your ZAM workspace directory:",
       default: defaultWorkspace
@@ -35659,7 +35954,7 @@ observerCommand.command("revoke <process>").description("Remove a process from o
 
 // src/cli/commands/profile.ts
 init_kernel();
-import { dirname as dirname10, resolve as resolve8 } from "path";
+import { dirname as dirname10, resolve as resolve9 } from "path";
 import { Command as Command13 } from "commander";
 var C2 = {
   reset: "\x1B[0m",
@@ -35687,7 +35982,7 @@ var profileCommand = new Command13("profile").description("Show or change this m
     if (opts.mode) setInstallMode(opts.mode);
     db = await openDatabaseWithSync({ initialize: true });
     if (opts.dir) {
-      await activateWorkspacePath(db, resolve8(opts.dir), {
+      await activateWorkspacePath(db, resolve9(opts.dir), {
         kind: "personal",
         label: "Personal"
       });
@@ -36089,7 +36384,7 @@ ${"\u2550".repeat(50)}`);
 
 // src/cli/commands/session.ts
 init_kernel();
-import { readFileSync as readFileSync17 } from "fs";
+import { readFileSync as readFileSync18 } from "fs";
 import { input as input6, select as select2 } from "@inquirer/prompts";
 import { Command as Command16 } from "commander";
 var sessionCommand = new Command16("session").description(
@@ -36280,7 +36575,7 @@ function loadPatternFile(path) {
   if (!path) return [];
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync17(path, "utf-8"));
+    parsed = JSON.parse(readFileSync18(path, "utf-8"));
   } catch (err) {
     throw new Error(
       `Cannot read synthesis patterns from ${path}: ${err.message}`
@@ -36471,7 +36766,7 @@ sessionCommand.command("end").description("End a session and show summary").requ
 
 // src/cli/commands/settings.ts
 init_kernel();
-import { existsSync as existsSync23 } from "fs";
+import { existsSync as existsSync25 } from "fs";
 import { Command as Command17 } from "commander";
 var settingsCommand = new Command17("settings").description(
   "Manage user settings"
@@ -36636,7 +36931,7 @@ settingsCommand.command("repos").description("Show or set Personal, Team, and Or
     console.log("\nValidation:");
     for (const [name, path] of Object.entries(paths)) {
       if (path) {
-        const exists = existsSync23(path);
+        const exists = existsSync25(path);
         console.log(
           `  ${name.padEnd(9)}: ${exists ? "\x1B[32m\u2713 Valid folder\x1B[0m" : "\x1B[31m\u2717 Directory does not exist\x1B[0m"}`
         );
@@ -36649,7 +36944,7 @@ settingsCommand.command("repos").description("Show or set Personal, Team, and Or
 
 // src/cli/commands/setup.ts
 init_kernel();
-import { resolve as resolve9 } from "path";
+import { resolve as resolve10 } from "path";
 import { Command as Command18 } from "commander";
 function formatDatabaseInitTarget(target) {
   switch (target.kind) {
@@ -36749,7 +37044,7 @@ var setupCommand = new Command18("setup").description(
       console.error(`Error: ${err.message}`);
       process.exit(1);
     }
-    const target = resolve9(opts.target ?? process.cwd());
+    const target = resolve10(opts.target ?? process.cwd());
     const updateExistingInstructions = Boolean(opts.target) || opts.force;
     console.log(
       `Setting up ZAM in ${target}${opts.dryRun ? " (dry run)" : ""}
@@ -36874,8 +37169,8 @@ skillCommand.command("add").description("Register a new agent skill").requiredOp
 
 // src/cli/commands/snapshot.ts
 init_kernel();
-import { existsSync as existsSync24, mkdirSync as mkdirSync17, readFileSync as readFileSync18, writeFileSync as writeFileSync14 } from "fs";
-import { dirname as dirname11, join as join25 } from "path";
+import { existsSync as existsSync26, mkdirSync as mkdirSync18, readFileSync as readFileSync19, writeFileSync as writeFileSync15 } from "fs";
+import { dirname as dirname11, join as join26 } from "path";
 import { Command as Command20 } from "commander";
 function defaultOutName() {
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d+Z$/, "").replace(/:/g, "-");
@@ -36904,12 +37199,12 @@ var exportCmd = new Command20("export").description("Write a portable SQL-text s
       process.stdout.write(snapshot);
       return;
     }
-    const out = opts.out ?? join25(personalDir, "snapshots", defaultOutName());
+    const out = opts.out ?? join26(personalDir, "snapshots", defaultOutName());
     const dir = dirname11(out);
-    if (dir && dir !== "." && !existsSync24(dir)) {
-      mkdirSync17(dir, { recursive: true });
+    if (dir && dir !== "." && !existsSync26(dir)) {
+      mkdirSync18(dir, { recursive: true });
     }
-    writeFileSync14(out, snapshot, "utf-8");
+    writeFileSync15(out, snapshot, "utf-8");
     console.log(`Snapshot written: ${out}`);
     console.log(
       `  ${total} row(s)${nonEmpty.length ? ` \u2014 ${nonEmpty.join(", ")}` : ""}`
@@ -36923,11 +37218,11 @@ var exportCmd = new Command20("export").description("Write a portable SQL-text s
 var importCmd = new Command20("import").description("Restore a snapshot into the database").argument("<file>", "Snapshot file to restore").option("--force", "Overwrite a non-empty database", false).action(async (file, opts) => {
   let db;
   try {
-    if (!existsSync24(file)) {
+    if (!existsSync26(file)) {
       console.error(`Error: Snapshot file not found: ${file}`);
       process.exit(1);
     }
-    const snapshot = readFileSync18(file, "utf-8");
+    const snapshot = readFileSync19(file, "utf-8");
     db = await openDatabaseWithSync({ initialize: true });
     const result = await importSnapshot(db, snapshot, { force: opts.force });
     await db.close();
@@ -36945,11 +37240,11 @@ var importCmd = new Command20("import").description("Restore a snapshot into the
 });
 var verifyCmd = new Command20("verify").description("Check a snapshot's manifest and checksum without importing").argument("<file>", "Snapshot file to verify").action((file) => {
   try {
-    if (!existsSync24(file)) {
+    if (!existsSync26(file)) {
       console.error(`Error: Snapshot file not found: ${file}`);
       process.exit(1);
     }
-    const manifest = verifySnapshot(readFileSync18(file, "utf-8"));
+    const manifest = verifySnapshot(readFileSync19(file, "utf-8"));
     const { total, nonEmpty } = summarize(manifest.tables);
     console.log(`Valid snapshot (format v${manifest.version})`);
     console.log(`  created: ${manifest.createdAt}`);
@@ -37498,9 +37793,9 @@ tokenCommand.command("reembed").description("Backfill or refresh semantic-search
 // src/cli/commands/ui.ts
 init_kernel();
 import { spawn as spawn3, spawnSync } from "child_process";
-import { existsSync as existsSync25 } from "fs";
-import { homedir as homedir15 } from "os";
-import { dirname as dirname12, join as join26 } from "path";
+import { existsSync as existsSync27 } from "fs";
+import { homedir as homedir16 } from "os";
+import { dirname as dirname12, join as join27 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 import { Command as Command23 } from "commander";
 var C3 = {
@@ -37516,8 +37811,8 @@ function findDesktopDir() {
   for (const start of starts) {
     let dir = start;
     for (let i = 0; i < 10; i++) {
-      if (existsSync25(join26(dir, "desktop", "src-tauri", "tauri.conf.json"))) {
-        return join26(dir, "desktop");
+      if (existsSync27(join27(dir, "desktop", "src-tauri", "tauri.conf.json"))) {
+        return join27(dir, "desktop");
       }
       const parent = dirname12(dir);
       if (parent === dir) break;
@@ -37527,30 +37822,30 @@ function findDesktopDir() {
   return null;
 }
 function findBuiltApp(desktopDir) {
-  const releaseDir = join26(desktopDir, "src-tauri", "target", "release");
+  const releaseDir = join27(desktopDir, "src-tauri", "target", "release");
   if (process.platform === "win32") {
     for (const name of ["ZAM.exe", "zam.exe", "zam-desktop.exe"]) {
-      const p = join26(releaseDir, name);
-      if (existsSync25(p)) return p;
+      const p = join27(releaseDir, name);
+      if (existsSync27(p)) return p;
     }
   } else if (process.platform === "darwin") {
-    const app = join26(releaseDir, "bundle", "macos", "ZAM.app");
-    if (existsSync25(app)) return app;
+    const app = join27(releaseDir, "bundle", "macos", "ZAM.app");
+    if (existsSync27(app)) return app;
   } else {
     for (const name of ["zam", "ZAM", "zam-desktop"]) {
-      const p = join26(releaseDir, name);
-      if (existsSync25(p)) return p;
+      const p = join27(releaseDir, name);
+      if (existsSync27(p)) return p;
     }
   }
   return null;
 }
 function findInstalledApp() {
   const candidates = process.platform === "win32" ? [
-    process.env.LOCALAPPDATA && join26(process.env.LOCALAPPDATA, "Programs", "ZAM", "ZAM.exe"),
-    process.env.ProgramFiles && join26(process.env.ProgramFiles, "ZAM", "ZAM.exe"),
-    process.env["ProgramFiles(x86)"] && join26(process.env["ProgramFiles(x86)"], "ZAM", "ZAM.exe")
-  ] : process.platform === "darwin" ? ["/Applications/ZAM.app", join26(homedir15(), "Applications", "ZAM.app")] : ["/opt/ZAM/zam", "/usr/bin/zam-desktop"];
-  return candidates.find((candidate) => candidate && existsSync25(candidate)) || null;
+    process.env.LOCALAPPDATA && join27(process.env.LOCALAPPDATA, "Programs", "ZAM", "ZAM.exe"),
+    process.env.ProgramFiles && join27(process.env.ProgramFiles, "ZAM", "ZAM.exe"),
+    process.env["ProgramFiles(x86)"] && join27(process.env["ProgramFiles(x86)"], "ZAM", "ZAM.exe")
+  ] : process.platform === "darwin" ? ["/Applications/ZAM.app", join27(homedir16(), "Applications", "ZAM.app")] : ["/opt/ZAM/zam", "/usr/bin/zam-desktop"];
+  return candidates.find((candidate) => candidate && existsSync27(candidate)) || null;
 }
 function runNpm(args, opts) {
   const res = spawnSync("npm", args, {
@@ -37561,7 +37856,7 @@ function runNpm(args, opts) {
   return res.status ?? 1;
 }
 function ensureDesktopDeps(desktopDir) {
-  if (existsSync25(join26(desktopDir, "node_modules"))) return true;
+  if (existsSync27(join27(desktopDir, "node_modules"))) return true;
   console.log(
     `${C3.cyan}Installing desktop dependencies (one-time)...${C3.reset}`
   );
@@ -37587,13 +37882,13 @@ function requireRust() {
 function hasMsvcBuildTools() {
   if (process.platform !== "win32") return true;
   const pf86 = process.env["ProgramFiles(x86)"] || "C:\\Program Files (x86)";
-  const vswhere = join26(
+  const vswhere = join27(
     pf86,
     "Microsoft Visual Studio",
     "Installer",
     "vswhere.exe"
   );
-  if (!existsSync25(vswhere)) return false;
+  if (!existsSync27(vswhere)) return false;
   const res = spawnSync(
     vswhere,
     [
@@ -37625,7 +37920,7 @@ function requireMsvcOnWindows() {
   return false;
 }
 function warnIfCliMissing(repoRoot) {
-  if (!existsSync25(join26(repoRoot, "dist", "cli", "index.js"))) {
+  if (!existsSync27(join27(repoRoot, "dist", "cli", "index.js"))) {
     console.warn(
       `${C3.yellow}\u26A0 CLI build not found (dist/cli/index.js). The GUI bridge needs it \u2014 run 'npm run build' at the repo root.${C3.reset}`
     );
@@ -37688,7 +37983,7 @@ var uiCommand = new Command23("ui").description("Launch the ZAM Desktop GUI (Act
 ).option("--shortcut", "Create Desktop + Start-menu shortcuts to the GUI").action((opts) => {
   const installedApp = findInstalledApp();
   if (!opts.dev && !opts.build && !opts.shortcut && installedApp) {
-    launchApp(installedApp, homedir15());
+    launchApp(installedApp, homedir16());
     return;
   }
   const desktopDir = findDesktopDir();
@@ -37709,7 +38004,7 @@ var uiCommand = new Command23("ui").description("Launch the ZAM Desktop GUI (Act
     );
     const code = runNpm(["run", "tauri", "build"], { cwd: desktopDir });
     if (code === 0) {
-      const bundle = join26(
+      const bundle = join27(
         desktopDir,
         "src-tauri",
         "target",
@@ -37787,8 +38082,8 @@ ${C3.dim}After that, 'zam ui' launches it directly.${C3.reset}`
 // src/cli/commands/update.ts
 init_kernel();
 import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync26, readFileSync as readFileSync19, realpathSync as realpathSync2 } from "fs";
-import { dirname as dirname13, join as join27 } from "path";
+import { existsSync as existsSync28, readFileSync as readFileSync20, realpathSync as realpathSync2 } from "fs";
+import { dirname as dirname13, join as join28 } from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 import { confirm as confirm3 } from "@inquirer/prompts";
 import { Command as Command24 } from "commander";
@@ -37810,7 +38105,7 @@ var C4 = {
 function versionAt(dir) {
   try {
     const pkg2 = JSON.parse(
-      readFileSync19(join27(dir, "package.json"), "utf-8")
+      readFileSync20(join28(dir, "package.json"), "utf-8")
     );
     return pkg2.version ?? "unknown";
   } catch {
@@ -37871,11 +38166,11 @@ function findSourceRepo() {
   let dir = realpathSync2(dirname13(fileURLToPath7(import.meta.url)));
   let parent = dirname13(dir);
   while (parent !== dir) {
-    if (existsSync26(join27(dir, ".git"))) return dir;
+    if (existsSync28(join28(dir, ".git"))) return dir;
     dir = parent;
     parent = dirname13(dir);
   }
-  return existsSync26(join27(dir, ".git")) ? dir : null;
+  return existsSync28(join28(dir, ".git")) ? dir : null;
 }
 function runGit(cwd, args, capture) {
   const res = spawnSync2("git", args, {
@@ -37896,7 +38191,7 @@ function runNpm2(args, cwd) {
 function smokeTestBuild(src) {
   const res = spawnSync2(
     process.execPath,
-    [join27(src, "dist", "cli", "index.js"), "--version"],
+    [join28(src, "dist", "cli", "index.js"), "--version"],
     {
       cwd: src,
       encoding: "utf8",
@@ -37976,7 +38271,7 @@ Fix it manually in ${src} (try \`npm ci && npm run build\`, and check your Node
   console.log(`${C4.dim}\u2192 zam setup --force${C4.reset}`);
   const setup = spawnSync2(
     process.execPath,
-    [join27(src, "dist", "cli", "index.js"), "setup", "--force"],
+    [join28(src, "dist", "cli", "index.js"), "setup", "--force"],
     { cwd: process.cwd(), stdio: "inherit" }
   );
   if (setup.status !== 0) {
@@ -38088,15 +38383,15 @@ var whoamiCommand = new Command25("whoami").description("Show or set the default
 
 // src/cli/commands/workspace.ts
 init_kernel();
-import { execFileSync as execFileSync5 } from "child_process";
-import { existsSync as existsSync27, writeFileSync as writeFileSync15 } from "fs";
-import { homedir as homedir16 } from "os";
-import { join as join28, resolve as resolve10 } from "path";
+import { execFileSync as execFileSync6 } from "child_process";
+import { existsSync as existsSync29, writeFileSync as writeFileSync16 } from "fs";
+import { homedir as homedir17 } from "os";
+import { join as join29, resolve as resolve11 } from "path";
 import { confirm as confirm4, input as input7 } from "@inquirer/prompts";
 import { Command as Command26 } from "commander";
 function runGit2(cwd, args) {
   try {
-    return execFileSync5("git", args, {
+    return execFileSync6("git", args, {
       cwd,
       stdio: "pipe",
       encoding: "utf8"
@@ -38175,7 +38470,7 @@ workspaceCommand.command("list").description("List configured ZAM workspaces").o
   const workspaces = getConfiguredWorkspaces();
   const agents = parseSetupAgents();
   const linkHealth = Object.fromEntries(
-    workspaces.filter((workspace) => existsSync27(workspace.path)).map((workspace) => [
+    workspaces.filter((workspace) => existsSync29(workspace.path)).map((workspace) => [
       workspace.id,
       summarizeSkillLinkHealth(inspectSkillLinks(workspace.path, agents))
     ])
@@ -38217,8 +38512,8 @@ workspaceCommand.command("add <id>").description("Register an existing directory
   `Source-control provider (${WORKSPACE_SOURCE_CONTROLS.join(" | ")})`
 ).option("--scopes <list>", "Comma-separated knowledge scopes").option("--default-agent <id>", "Default agent harness for this workspace").action((id, opts) => {
   try {
-    const path = resolve10(String(opts.path));
-    if (!existsSync27(path)) {
+    const path = resolve11(String(opts.path));
+    if (!existsSync29(path)) {
       console.error(`Workspace path does not exist: ${path}`);
       process.exit(1);
     }
@@ -38312,7 +38607,7 @@ workspaceCommand.command("publish").description("Publish your local workspace sa
     );
     process.exit(1);
   }
-  if (!existsSync27(workspaceDir)) {
+  if (!existsSync29(workspaceDir)) {
     console.error(
       `\x1B[31m\u2717 Workspace directory does not exist: ${workspaceDir}\x1B[0m`
     );
@@ -38326,15 +38621,15 @@ Active workspace: \x1B[36m${workspaceDir}\x1B[0m`);
     );
     process.exit(1);
   }
-  const gitignorePath = join28(workspaceDir, ".gitignore");
-  if (!existsSync27(gitignorePath)) {
-    writeFileSync15(
+  const gitignorePath = join29(workspaceDir, ".gitignore");
+  if (!existsSync29(gitignorePath)) {
+    writeFileSync16(
       gitignorePath,
       "node_modules/\n.agent/\n.agents/\n.claude/\n.gemini/\n.goose/\n*.log\n",
       "utf8"
     );
   }
-  const hasGitRepo = existsSync27(join28(workspaceDir, ".git"));
+  const hasGitRepo = existsSync29(join29(workspaceDir, ".git"));
   if (!hasGitRepo) {
     console.log("Initializing local Git repository...");
     runGit2(workspaceDir, ["init", "-b", "main"]);
@@ -38366,7 +38661,7 @@ Active workspace: \x1B[36m${workspaceDir}\x1B[0m`);
     if (proceedGh) {
       try {
         console.log(`Creating GitHub repository ${repoName}...`);
-        execFileSync5("gh", ghRepoCreateArgs(repoName, repoVisibility), {
+        execFileSync6("gh", ghRepoCreateArgs(repoName, repoVisibility), {
           cwd: workspaceDir,
           stdio: "inherit"
         });
@@ -38421,7 +38716,7 @@ Active workspace: \x1B[36m${workspaceDir}\x1B[0m`);
   }
 });
 workspaceCommand.command("data-dir").description("Print the ZAM data directory (database, credentials, config)").option("--json", "Output as JSON").action((opts) => {
-  const dir = join28(homedir16(), ".zam");
+  const dir = join29(homedir17(), ".zam");
   console.log(opts.json ? JSON.stringify({ dataDir: dir }) : dir);
 });
 workspaceCommand.command("backup").description("Back up the local ZAM database into your workspace").option(
@@ -38464,7 +38759,7 @@ workspaceCommand.command("backup").description("Back up the local ZAM database i
 // src/cli/app.ts
 var __dirname = dirname14(fileURLToPath8(import.meta.url));
 var pkg = JSON.parse(
-  readFileSync20(join29(__dirname, "..", "..", "package.json"), "utf-8")
+  readFileSync21(join30(__dirname, "..", "..", "package.json"), "utf-8")
 );
 var program = new Command27();
 program.name("zam").description(