@agentconnect.md/daemon 1.0.0-rc.309 → 1.0.0-rc.310

package/dist/{chat-BUFOmSMl.js → chat-CfRG8UQR.js}

@@ -1,6 +1,6 @@
 import { a as agentChildEnv, i as selectAgent, o as loadConfig } from "./load-agents-CROyMyq9.js";
 import { l as resolveRoot } from "./paths-DEcUO8lC.js";
-import { C as resolveRuntimes, a as prepareWorkspace, f as memoryProviderFor, t as AcpHost } from "./acp-host-BDcV2bZY.js";
+import { C as resolveRuntimes, a as prepareWorkspace, f as memoryProviderFor, t as AcpHost } from "./acp-host-DEjB1yFS.js";
 import { createInterface } from "node:readline";
 //#region src/cli/chat.ts
 function renderUpdate(out) {
@@ -84,4 +84,4 @@ async function runChat(opts) {
 //#endregion
 export { renderUpdate, runChat };
 
-//# sourceMappingURL=chat-BUFOmSMl.js.map
+//# sourceMappingURL=chat-CfRG8UQR.js.map

package/dist/{chat-BUFOmSMl.js.map → chat-CfRG8UQR.js.map}

@@ -1 +1 @@
-{"version":3,"file":"chat-BUFOmSMl.js","names":[],"sources":["../src/cli/chat.ts"],"sourcesContent":["import { createInterface } from 'node:readline'\nimport type { ContentBlock, SessionUpdate } from '@agentclientprotocol/sdk'\nimport { loadConfig } from '../config/load-config.js'\nimport { resolveRuntimes } from '../runtimes/registry.js'\nimport { selectAgent } from '../agents/load-agents.js'\nimport { agentChildEnv } from '../agents/agent-env.js'\nimport { memoryProviderFor } from '../agents/memory-provider.js'\nimport { prepareWorkspace } from '../workspace/workspace-manager.js'\nimport { AcpHost } from '../acp/acp-host.js'\nimport { resolveRoot } from '../paths.js'\n\nexport function renderUpdate(out: NodeJS.WritableStream) {\n  return (_sessionId: string, update: SessionUpdate): void => {\n    if (update.sessionUpdate === 'agent_message_chunk' && update.content.type === 'text') {\n      out.write(update.content.text)\n    } else if (update.sessionUpdate === 'tool_call') {\n      const title = ('title' in update && update.title) || update.toolCallId || 'tool'\n      out.write(`\\n[tool] ${title}\\n`)\n    }\n  }\n}\n\nexport interface RunChatOpts {\n  agentsDir?: string\n  agentName?: string\n  message?: string\n  configPath?: string\n  root?: string\n  out?: NodeJS.WritableStream\n  input?: NodeJS.ReadableStream\n}\n\nexport async function runChat(opts: RunChatOpts): Promise<void> {\n  const out = opts.out ?? process.stdout\n  const root = resolveRoot(opts.root)\n  const cfg = loadConfig({\n    root: opts.root,\n    configPath: opts.configPath,\n    optional: true,\n    overrides: { agentsDir: opts.agentsDir }\n  })\n  const agent = selectAgent(cfg.agentsDir!, opts.agentName)\n\n  const runtimes = await resolveRuntimes(cfg, root, { neededRuntimes: [agent.runtime], mode: 'cache-first' })\n  const runtime = runtimes[agent.runtime]\n  if (!runtime) {\n    const available = Object.keys(runtimes).sort().join(', ') || '(none)'\n    throw new Error(`runtime \"${agent.runtime}\" not found. Available: ${available}`)\n  }\n\n  const host = new AcpHost(runtime, {\n    onUpdate: renderUpdate(out),\n    // Memory-backend env for parity with the daemon (managed disables the runtime's\n    // own memory; native redirects it under the agent root).\n    env: { ...agentChildEnv(agent), ...memoryProviderFor(agent, runtime).runtimeEnv() },\n    configPrefs: {\n      model: agent.runtimeOverrides?.model,\n      permissionMode: agent.permissionMode,\n      reasoningEffort: agent.reasoningEffort,\n      fastMode: agent.fastMode\n    }\n  })\n  // The adapter child runs in its own process group (see AcpHost.start), so a\n  // terminal Ctrl-C no longer kills it as a side effect — Node's default SIGINT\n  // exit would skip the finally below and leak it. Stop the host, then re-exit.\n  // Registered BEFORE start(): a first-run `npx -y` runtime download takes long\n  // enough that Ctrl-C mid-start is common, and the spawn happens early in start().\n  const onSigint = () => {\n    void host.stop().finally(() => process.exit(130))\n  }\n  process.once('SIGINT', onSigint)\n  try {\n    await host.start()\n    const cwd = await prepareWorkspace(agent)\n    const sessionId = await host.newSession(cwd)\n\n    const send = async (text: string) => {\n      const blocks: ContentBlock[] = [{ type: 'text', text }]\n      await host.prompt(sessionId, blocks)\n      out.write('\\n')\n    }\n\n    if (typeof opts.message === 'string' && opts.message.length > 0) {\n      await send(opts.message)\n      return\n    }\n\n    const rl = createInterface({ input: opts.input ?? process.stdin })\n    out.write(`Chatting with ${agent.name} (${agent.id}). Type .exit to quit.\\n> `)\n    try {\n      for await (const line of rl) {\n        const text = line.trim()\n        if (text === '.exit' || text === '.quit') break\n        if (text.length > 0) await send(text)\n        out.write('> ')\n      }\n    } finally {\n      rl.close()\n    }\n  } finally {\n    process.removeListener('SIGINT', onSigint)\n    await host.stop()\n  }\n}\n"],"mappings":";;;;;AAWA,SAAgB,aAAa,KAA4B;CACvD,QAAQ,YAAoB,WAAgC;EAC1D,IAAI,OAAO,kBAAkB,yBAAyB,OAAO,QAAQ,SAAS,QAC5E,IAAI,MAAM,OAAO,QAAQ,IAAI;OACxB,IAAI,OAAO,kBAAkB,aAAa;GAC/C,MAAM,QAAS,WAAW,UAAU,OAAO,SAAU,OAAO,cAAc;GAC1E,IAAI,MAAM,YAAY,MAAM,GAAG;EACjC;CACF;AACF;AAYA,eAAsB,QAAQ,MAAkC;CAC9D,MAAM,MAAM,KAAK,OAAO,QAAQ;CAChC,MAAM,OAAO,YAAY,KAAK,IAAI;CAClC,MAAM,MAAM,WAAW;EACrB,MAAM,KAAK;EACX,YAAY,KAAK;EACjB,UAAU;EACV,WAAW,EAAE,WAAW,KAAK,UAAU;CACzC,CAAC;CACD,MAAM,QAAQ,YAAY,IAAI,WAAY,KAAK,SAAS;CAExD,MAAM,WAAW,MAAM,gBAAgB,KAAK,MAAM;EAAE,gBAAgB,CAAC,MAAM,OAAO;EAAG,MAAM;CAAc,CAAC;CAC1G,MAAM,UAAU,SAAS,MAAM;CAC/B,IAAI,CAAC,SAAS;EACZ,MAAM,YAAY,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,KAAK;EAC7D,MAAM,IAAI,MAAM,YAAY,MAAM,QAAQ,0BAA0B,WAAW;CACjF;CAEA,MAAM,OAAO,IAAI,QAAQ,SAAS;EAChC,UAAU,aAAa,GAAG;EAG1B,KAAK;GAAE,GAAG,cAAc,KAAK;GAAG,GAAG,kBAAkB,OAAO,OAAO,CAAC,CAAC,WAAW;EAAE;EAClF,aAAa;GACX,OAAO,MAAM,kBAAkB;GAC/B,gBAAgB,MAAM;GACtB,iBAAiB,MAAM;GACvB,UAAU,MAAM;EAClB;CACF,CAAC;CAMD,MAAM,iBAAiB;EACrB,KAAU,KAAK,CAAC,CAAC,cAAc,QAAQ,KAAK,GAAG,CAAC;CAClD;CACA,QAAQ,KAAK,UAAU,QAAQ;CAC/B,IAAI;EACF,MAAM,KAAK,MAAM;EACjB,MAAM,MAAM,MAAM,iBAAiB,KAAK;EACxC,MAAM,YAAY,MAAM,KAAK,WAAW,GAAG;EAE3C,MAAM,OAAO,OAAO,SAAiB;GACnC,MAAM,SAAyB,CAAC;IAAE,MAAM;IAAQ;GAAK,CAAC;GACtD,MAAM,KAAK,OAAO,WAAW,MAAM;GACnC,IAAI,MAAM,IAAI;EAChB;EAEA,IAAI,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,SAAS,GAAG;GAC/D,MAAM,KAAK,KAAK,OAAO;GACvB;EACF;EAEA,MAAM,KAAK,gBAAgB,EAAE,OAAO,KAAK,SAAS,QAAQ,MAAM,CAAC;EACjE,IAAI,MAAM,iBAAiB,MAAM,KAAK,IAAI,MAAM,GAAG,2BAA2B;EAC9E,IAAI;GACF,WAAW,MAAM,QAAQ,IAAI;IAC3B,MAAM,OAAO,KAAK,KAAK;IACvB,IAAI,SAAS,WAAW,SAAS,SAAS;IAC1C,IAAI,KAAK,SAAS,GAAG,MAAM,KAAK,IAAI;IACpC,IAAI,MAAM,IAAI;GAChB;EACF,UAAU;GACR,GAAG,MAAM;EACX;CACF,UAAU;EACR,QAAQ,eAAe,UAAU,QAAQ;EACzC,MAAM,KAAK,KAAK;CAClB;AACF"}
+{"version":3,"file":"chat-CfRG8UQR.js","names":[],"sources":["../src/cli/chat.ts"],"sourcesContent":["import { createInterface } from 'node:readline'\nimport type { ContentBlock, SessionUpdate } from '@agentclientprotocol/sdk'\nimport { loadConfig } from '../config/load-config.js'\nimport { resolveRuntimes } from '../runtimes/registry.js'\nimport { selectAgent } from '../agents/load-agents.js'\nimport { agentChildEnv } from '../agents/agent-env.js'\nimport { memoryProviderFor } from '../agents/memory-provider.js'\nimport { prepareWorkspace } from '../workspace/workspace-manager.js'\nimport { AcpHost } from '../acp/acp-host.js'\nimport { resolveRoot } from '../paths.js'\n\nexport function renderUpdate(out: NodeJS.WritableStream) {\n  return (_sessionId: string, update: SessionUpdate): void => {\n    if (update.sessionUpdate === 'agent_message_chunk' && update.content.type === 'text') {\n      out.write(update.content.text)\n    } else if (update.sessionUpdate === 'tool_call') {\n      const title = ('title' in update && update.title) || update.toolCallId || 'tool'\n      out.write(`\\n[tool] ${title}\\n`)\n    }\n  }\n}\n\nexport interface RunChatOpts {\n  agentsDir?: string\n  agentName?: string\n  message?: string\n  configPath?: string\n  root?: string\n  out?: NodeJS.WritableStream\n  input?: NodeJS.ReadableStream\n}\n\nexport async function runChat(opts: RunChatOpts): Promise<void> {\n  const out = opts.out ?? process.stdout\n  const root = resolveRoot(opts.root)\n  const cfg = loadConfig({\n    root: opts.root,\n    configPath: opts.configPath,\n    optional: true,\n    overrides: { agentsDir: opts.agentsDir }\n  })\n  const agent = selectAgent(cfg.agentsDir!, opts.agentName)\n\n  const runtimes = await resolveRuntimes(cfg, root, { neededRuntimes: [agent.runtime], mode: 'cache-first' })\n  const runtime = runtimes[agent.runtime]\n  if (!runtime) {\n    const available = Object.keys(runtimes).sort().join(', ') || '(none)'\n    throw new Error(`runtime \"${agent.runtime}\" not found. Available: ${available}`)\n  }\n\n  const host = new AcpHost(runtime, {\n    onUpdate: renderUpdate(out),\n    // Memory-backend env for parity with the daemon (managed disables the runtime's\n    // own memory; native redirects it under the agent root).\n    env: { ...agentChildEnv(agent), ...memoryProviderFor(agent, runtime).runtimeEnv() },\n    configPrefs: {\n      model: agent.runtimeOverrides?.model,\n      permissionMode: agent.permissionMode,\n      reasoningEffort: agent.reasoningEffort,\n      fastMode: agent.fastMode\n    }\n  })\n  // The adapter child runs in its own process group (see AcpHost.start), so a\n  // terminal Ctrl-C no longer kills it as a side effect — Node's default SIGINT\n  // exit would skip the finally below and leak it. Stop the host, then re-exit.\n  // Registered BEFORE start(): a first-run `npx -y` runtime download takes long\n  // enough that Ctrl-C mid-start is common, and the spawn happens early in start().\n  const onSigint = () => {\n    void host.stop().finally(() => process.exit(130))\n  }\n  process.once('SIGINT', onSigint)\n  try {\n    await host.start()\n    const cwd = await prepareWorkspace(agent)\n    const sessionId = await host.newSession(cwd)\n\n    const send = async (text: string) => {\n      const blocks: ContentBlock[] = [{ type: 'text', text }]\n      await host.prompt(sessionId, blocks)\n      out.write('\\n')\n    }\n\n    if (typeof opts.message === 'string' && opts.message.length > 0) {\n      await send(opts.message)\n      return\n    }\n\n    const rl = createInterface({ input: opts.input ?? process.stdin })\n    out.write(`Chatting with ${agent.name} (${agent.id}). Type .exit to quit.\\n> `)\n    try {\n      for await (const line of rl) {\n        const text = line.trim()\n        if (text === '.exit' || text === '.quit') break\n        if (text.length > 0) await send(text)\n        out.write('> ')\n      }\n    } finally {\n      rl.close()\n    }\n  } finally {\n    process.removeListener('SIGINT', onSigint)\n    await host.stop()\n  }\n}\n"],"mappings":";;;;;AAWA,SAAgB,aAAa,KAA4B;CACvD,QAAQ,YAAoB,WAAgC;EAC1D,IAAI,OAAO,kBAAkB,yBAAyB,OAAO,QAAQ,SAAS,QAC5E,IAAI,MAAM,OAAO,QAAQ,IAAI;OACxB,IAAI,OAAO,kBAAkB,aAAa;GAC/C,MAAM,QAAS,WAAW,UAAU,OAAO,SAAU,OAAO,cAAc;GAC1E,IAAI,MAAM,YAAY,MAAM,GAAG;EACjC;CACF;AACF;AAYA,eAAsB,QAAQ,MAAkC;CAC9D,MAAM,MAAM,KAAK,OAAO,QAAQ;CAChC,MAAM,OAAO,YAAY,KAAK,IAAI;CAClC,MAAM,MAAM,WAAW;EACrB,MAAM,KAAK;EACX,YAAY,KAAK;EACjB,UAAU;EACV,WAAW,EAAE,WAAW,KAAK,UAAU;CACzC,CAAC;CACD,MAAM,QAAQ,YAAY,IAAI,WAAY,KAAK,SAAS;CAExD,MAAM,WAAW,MAAM,gBAAgB,KAAK,MAAM;EAAE,gBAAgB,CAAC,MAAM,OAAO;EAAG,MAAM;CAAc,CAAC;CAC1G,MAAM,UAAU,SAAS,MAAM;CAC/B,IAAI,CAAC,SAAS;EACZ,MAAM,YAAY,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,KAAK;EAC7D,MAAM,IAAI,MAAM,YAAY,MAAM,QAAQ,0BAA0B,WAAW;CACjF;CAEA,MAAM,OAAO,IAAI,QAAQ,SAAS;EAChC,UAAU,aAAa,GAAG;EAG1B,KAAK;GAAE,GAAG,cAAc,KAAK;GAAG,GAAG,kBAAkB,OAAO,OAAO,CAAC,CAAC,WAAW;EAAE;EAClF,aAAa;GACX,OAAO,MAAM,kBAAkB;GAC/B,gBAAgB,MAAM;GACtB,iBAAiB,MAAM;GACvB,UAAU,MAAM;EAClB;CACF,CAAC;CAMD,MAAM,iBAAiB;EACrB,KAAU,KAAK,CAAC,CAAC,cAAc,QAAQ,KAAK,GAAG,CAAC;CAClD;CACA,QAAQ,KAAK,UAAU,QAAQ;CAC/B,IAAI;EACF,MAAM,KAAK,MAAM;EACjB,MAAM,MAAM,MAAM,iBAAiB,KAAK;EACxC,MAAM,YAAY,MAAM,KAAK,WAAW,GAAG;EAE3C,MAAM,OAAO,OAAO,SAAiB;GACnC,MAAM,SAAyB,CAAC;IAAE,MAAM;IAAQ;GAAK,CAAC;GACtD,MAAM,KAAK,OAAO,WAAW,MAAM;GACnC,IAAI,MAAM,IAAI;EAChB;EAEA,IAAI,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,SAAS,GAAG;GAC/D,MAAM,KAAK,KAAK,OAAO;GACvB;EACF;EAEA,MAAM,KAAK,gBAAgB,EAAE,OAAO,KAAK,SAAS,QAAQ,MAAM,CAAC;EACjE,IAAI,MAAM,iBAAiB,MAAM,KAAK,IAAI,MAAM,GAAG,2BAA2B;EAC9E,IAAI;GACF,WAAW,MAAM,QAAQ,IAAI;IAC3B,MAAM,OAAO,KAAK,KAAK;IACvB,IAAI,SAAS,WAAW,SAAS,SAAS;IAC1C,IAAI,KAAK,SAAS,GAAG,MAAM,KAAK,IAAI;IACpC,IAAI,MAAM,IAAI;GAChB;EACF,UAAU;GACR,GAAG,MAAM;EACX;CACF,UAAU;EACR,QAAQ,eAAe,UAAU,QAAQ;EACzC,MAAM,KAAK,KAAK;CAClB;AACF"}

package/dist/index.js

@@ -68492,9 +68492,9 @@ const telemetry = startDaemonOpenTelemetry({ serviceVersion: DAEMON_VERSION });
 const [{ Command }, { fileURLToPath }, { runChat }, { runLogin }, { runForeground }, { resolveController }, { acquireSingletonLock }, { resolveRoot }] = await Promise.all([
 	import("./commander-B5QVEFzH.js"),
 	import("node:url"),
-	import("./chat-BUFOmSMl.js"),
-	import("./login-CcV7neWZ.js"),
-	import("./run-foreground-B-FPE0tJ.js"),
+	import("./chat-CfRG8UQR.js"),
+	import("./login-H-H07Q2J.js"),
+	import("./run-foreground-BVC7qytz.js"),
 	import("./service-6w0WKhdx.js"),
 	import("./lock-CA9Bm8_s.js"),
 	import("./paths-CcRUjFjy.js")

package/dist/{login-CcV7neWZ.js → login-H-H07Q2J.js}

@@ -1,6 +1,6 @@
 import { t as DAEMON_VERSION } from "./version-DGaRXjBK.js";
 import { d as encode, l as buildEnvelope, t as isFrame, u as decodeEnvelope } from "./dist-BG425zHm.js";
-import { i as ClientTransport, t as runForeground } from "./run-foreground-DoM1PkHn.js";
+import { i as ClientTransport, t as runForeground } from "./run-foreground-BZ63Vsmq.js";
 import { l as ConfigSchema } from "./load-agents-CROyMyq9.js";
 import { l as resolveRoot, t as configPath } from "./paths-DEcUO8lC.js";
 import { n as resolveController } from "./service-BQVw7wbz.js";
@@ -229,4 +229,4 @@ async function runLogin(opts, partial = {}) {
 //#endregion
 export { buildInstallOpts, persistCredentials, runLogin };
 
-//# sourceMappingURL=login-CcV7neWZ.js.map
+//# sourceMappingURL=login-H-H07Q2J.js.map

package/dist/{login-CcV7neWZ.js.map → login-H-H07Q2J.js.map}

@@ -1 +1 @@
-{"version":3,"file":"login-CcV7neWZ.js","names":["realRunForeground"],"sources":["../src/cp/auth-probe.ts","../src/cli/login.ts"],"sourcesContent":["/**\n * `probeAuth` — a one-shot CP auth check used by `agentconnect login`. It dials\n * the CP, sends ONLY the `auth` frame (no `register`), and resolves with the\n * authoritative daemonId from `auth/ok`, or a human-readable failure reason on\n * a `4401` close, a correlated `error`, a dial failure, or a timeout. It always\n * closes the socket and never leaves a connection open.\n */\nimport { buildEnvelope, decodeEnvelope, encode, isFrame } from '@agentconnect.md/protocol'\nimport { ClientTransport, type Transport } from '@agentconnect.md/connection'\nimport { CP_SUBPROTOCOL, CP_WS_PATH } from './client.js'\n\nexport interface ProbeResult {\n  ok: boolean\n  daemonId?: string\n  reason?: string\n}\n\nexport interface ProbeOpts {\n  url: string\n  token: string\n  daemonId?: string\n  agentVersion?: string\n  timeoutMs?: number\n  /** Injectable for tests; defaults to dialing the real WebSocket. */\n  connect?: () => Promise<Transport>\n}\n\nexport async function probeAuth(opts: ProbeOpts): Promise<ProbeResult> {\n  const timeoutMs = opts.timeoutMs ?? 10_000\n  const dial = opts.connect ?? (() => ClientTransport.dial(opts.url, { subprotocol: CP_SUBPROTOCOL, path: CP_WS_PATH }))\n\n  let transport: Transport\n  try {\n    transport = await dial()\n  } catch (err) {\n    return { ok: false, reason: `cannot reach ${opts.url}: ${(err as Error).message}` }\n  }\n\n  const authPayload: Record<string, unknown> = {\n    apiKey: opts.token,\n    agentVersion: opts.agentVersion ?? 'probe'\n  }\n  if (opts.daemonId) authPayload.daemonId = opts.daemonId\n  const frame = buildEnvelope('auth', authPayload)\n\n  return await new Promise<ProbeResult>((resolve) => {\n    let settled = false\n    const done = (r: ProbeResult): void => {\n      if (settled) return\n      settled = true\n      clearTimeout(timer)\n      try {\n        transport.close(1000, 'probe done')\n      } catch {\n        // socket may already be closed\n      }\n      resolve(r)\n    }\n\n    const timer = setTimeout(\n      () => done({ ok: false, reason: `timed out after ${timeoutMs}ms waiting for auth/ok` }),\n      timeoutMs\n    )\n\n    transport.onMessage((text) => {\n      const decoded = decodeEnvelope(text)\n      if (!decoded.ok) return\n      const f = decoded.frame\n      if (f.corr !== frame.id) return\n      if (f.type === 'error') {\n        const e = f.payload as { code: string; message: string }\n        done({ ok: false, reason: `${e.code}: ${e.message}` })\n        return\n      }\n      if (isFrame('auth/ok')(f)) {\n        const ok = f.payload as { daemonId: string }\n        done({ ok: true, daemonId: ok.daemonId })\n      }\n    })\n\n    transport.onClose((code) => {\n      if (code === 4401) done({ ok: false, reason: 'authentication failed (4401) — check the daemon token' })\n      else done({ ok: false, reason: `connection closed (${code}) before auth/ok` })\n    })\n\n    transport.send(encode(frame))\n  })\n}\n","/**\n * `agentconnect login` — interactive onboarding. It tests the Control Plane auth\n * flow, persists credentials only on success, then offers to install the OS\n * service. If installed it starts the service (`up`) and returns; otherwise it\n * runs the daemon in the foreground (the same path as `agentconnect run`).\n *\n * `persistCredentials` is the pure config-merge half (token-only onboarding:\n * `daemonId` is omitted unless given — the first connect adopts it from the\n * token's `sub`). `runLogin` is the orchestrator, with injectable deps for tests.\n */\nimport { readFileSync, existsSync, writeFileSync, mkdirSync } from 'node:fs'\nimport { dirname } from 'node:path'\nimport { createInterface } from 'node:readline'\nimport { fileURLToPath } from 'node:url'\nimport { ConfigSchema } from '../config/config-schema.js'\nimport { resolveRoot, configPath } from '../paths.js'\nimport { DAEMON_VERSION } from '../version.js'\nimport { probeAuth, type ProbeResult } from '../cp/auth-probe.js'\nimport { resolveController, type InstallOpts } from '../service/index.js'\nimport { runForeground as realRunForeground } from './run-foreground.js'\n\nexport interface PersistCredsOpts {\n  cpUrl: string\n  cpKey: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n}\n\n/** Merge url/token into config.json (validated), returning the written path. */\nexport function persistCredentials(opts: PersistCredsOpts): string {\n  const root = resolveRoot(opts.root)\n  const file = opts.configPath ?? configPath(root)\n  const raw: Record<string, unknown> = existsSync(file) ? JSON.parse(readFileSync(file, 'utf8')) : { version: 1 }\n\n  const cp = (raw.controlPlane as Record<string, unknown> | undefined) ?? {}\n  raw.controlPlane = { ...cp, url: opts.cpUrl, key: opts.cpKey, enabled: true }\n  if (opts.daemonId) raw.daemonId = opts.daemonId\n\n  ConfigSchema.parse(raw) // fail before writing if the merge is invalid\n\n  mkdirSync(dirname(file), { recursive: true })\n  writeFileSync(file, JSON.stringify(raw, null, 2) + '\\n')\n  return file\n}\n\nexport interface RunLoginOpts {\n  cpUrl?: string\n  cpKey?: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n  /** The resolved CLI entry path. Must be supplied by the CLI entry point\n   *  (index.ts) so the correct bundle path is used rather than inferring it\n   *  from login.ts's own import.meta.url (which is the same bundle but the\n   *  `../` path calculation would be wrong). Falls back to import.meta.url\n   *  for the pure test path where login.ts is loaded standalone. */\n  cliEntry?: string\n}\n\n/**\n * Build the InstallOpts for the OS service installer.\n *\n * Exported as a pure helper so it can be unit-tested independently of the\n * full `runLogin` orchestration. The caller (index.ts) passes `cliEntry` so\n * the correct bundle path always flows through; if omitted we fall back to\n * `import.meta.url` (correct only when login.ts is the entry, e.g. in tests).\n */\nexport function buildInstallOpts(opts: { root?: string; cliEntry?: string }): InstallOpts {\n  return {\n    execPath: process.execPath,\n    cliEntry: opts.cliEntry ?? fileURLToPath(import.meta.url),\n    includeRootEnv: resolveRoot(opts.root) !== resolveRoot(undefined)\n  }\n}\n\nexport interface LoginDeps {\n  probe: (o: { url: string; token: string }) => Promise<ProbeResult>\n  installService: () => Promise<void>\n  runForeground: () => Promise<void>\n  out: NodeJS.WritableStream\n  input: NodeJS.ReadableStream\n  isTTY: boolean\n}\n\nfunction realDeps(opts: RunLoginOpts): LoginDeps {\n  return {\n    probe: (o) => probeAuth({ url: o.url, token: o.token, agentVersion: DAEMON_VERSION }),\n    installService: async () => {\n      const controller = resolveController({ root: opts.root })\n      await controller.install(buildInstallOpts(opts))\n      await controller.up()\n    },\n    runForeground: () =>\n      realRunForeground({\n        root: opts.root,\n        overrides: { cpUrl: opts.cpUrl, cpKey: opts.cpKey, daemonId: opts.daemonId }\n      }),\n    out: process.stdout,\n    input: process.stdin,\n    isTTY: Boolean(process.stdin.isTTY)\n  }\n}\n\n/** Read the next line from a readline interface via async iterator. */\nasync function nextLine(\n  iter: AsyncIterableIterator<string>,\n  prompt: string,\n  out: NodeJS.WritableStream\n): Promise<string> {\n  out.write(prompt)\n  const { value, done } = await iter.next()\n  if (done) throw new Error(`unexpected end of input waiting for: ${prompt}`)\n  return (value as string).trim()\n}\n\nexport async function runLogin(opts: RunLoginOpts, partial: Partial<LoginDeps> = {}): Promise<void> {\n  const deps: LoginDeps = { ...realDeps(opts), ...partial }\n  const { out } = deps\n\n  // ── Non-interactive: flags required; probe; persist. No prompts, no handoff. ──\n  if (!deps.isTTY) {\n    if (!opts.cpUrl) throw new Error('login requires --cp-url <url>')\n    if (!opts.cpKey) throw new Error('login requires --cp-key <key>')\n    const r = await deps.probe({ url: opts.cpUrl, token: opts.cpKey })\n    if (!r.ok) throw new Error(`authentication failed: ${r.reason}`)\n    persistCredentials({ ...opts, cpUrl: opts.cpUrl, cpKey: opts.cpKey })\n    out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''} — credentials saved\\n`)\n    return\n  }\n\n  // Both interactive handoffs read `<root>/config.json`: the installed service\n  // runs `… run` (no `--config`), and the foreground `Daemon` loads by root. A\n  // custom `--config` would persist credentials the daemon never reads, so the\n  // install/run branch would look successful but start without them. Reject it;\n  // `--root` is the knob that keeps persist + service + foreground in sync.\n  if (opts.configPath) {\n    throw new Error(\n      'interactive login does not support --config — use --root <dir> so the daemon and the installed service read the same config'\n    )\n  }\n\n  // ── Interactive ──\n  const rl = createInterface({ input: deps.input, output: out })\n  const iter = rl[Symbol.asyncIterator]()\n  let url = opts.cpUrl\n  let token = opts.cpKey\n  try {\n    if (!url) url = await nextLine(iter, 'Control Plane URL: ', out)\n\n    for (let attempt = 0; ; attempt++) {\n      if (!token) token = await nextLine(iter, 'Daemon API key: ', out)\n      out.write(`Testing connection to ${url}…\\n`)\n      const r = await deps.probe({ url: url!, token: token! })\n      if (r.ok) {\n        out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''}\\n`)\n        break\n      }\n      out.write(`✗ ${r.reason}\\n`)\n      if (attempt >= 1) throw new Error('authentication failed')\n      token = undefined // re-prompt on retry\n    }\n\n    persistCredentials({ ...opts, cpUrl: url!, cpKey: token! })\n\n    const ans = (await nextLine(iter, 'Install AgentConnect as a background service? (y/N) ', out)).toLowerCase()\n    if (ans === 'y' || ans === 'yes') {\n      await deps.installService()\n      out.write('Service installed and started. Manage it with `agentconnect up` / `down` / `status`.\\n')\n      return\n    }\n    out.write('Starting in the foreground (Ctrl-C to stop)…\\n')\n  } finally {\n    rl.close()\n  }\n\n  await deps.runForeground()\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA2BA,eAAsB,UAAU,MAAuC;CACrE,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,OAAO,KAAK,kBAAkB,gBAAgB,KAAK,KAAK,KAAK;EAAE,aAAA;EAA6B,MAAA;CAAiB,CAAC;CAEpH,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,KAAK;CACzB,SAAS,KAAK;EACZ,OAAO;GAAE,IAAI;GAAO,QAAQ,gBAAgB,KAAK,IAAI,IAAK,IAAc;EAAU;CACpF;CAEA,MAAM,cAAuC;EAC3C,QAAQ,KAAK;EACb,cAAc,KAAK,gBAAgB;CACrC;CACA,IAAI,KAAK,UAAU,YAAY,WAAW,KAAK;CAC/C,MAAM,QAAQ,cAAc,QAAQ,WAAW;CAE/C,OAAO,MAAM,IAAI,SAAsB,YAAY;EACjD,IAAI,UAAU;EACd,MAAM,QAAQ,MAAyB;GACrC,IAAI,SAAS;GACb,UAAU;GACV,aAAa,KAAK;GAClB,IAAI;IACF,UAAU,MAAM,KAAM,YAAY;GACpC,QAAQ,CAER;GACA,QAAQ,CAAC;EACX;EAEA,MAAM,QAAQ,iBACN,KAAK;GAAE,IAAI;GAAO,QAAQ,mBAAmB,UAAU;EAAwB,CAAC,GACtF,SACF;EAEA,UAAU,WAAW,SAAS;GAC5B,MAAM,UAAU,eAAe,IAAI;GACnC,IAAI,CAAC,QAAQ,IAAI;GACjB,MAAM,IAAI,QAAQ;GAClB,IAAI,EAAE,SAAS,MAAM,IAAI;GACzB,IAAI,EAAE,SAAS,SAAS;IACtB,MAAM,IAAI,EAAE;IACZ,KAAK;KAAE,IAAI;KAAO,QAAQ,GAAG,EAAE,KAAK,IAAI,EAAE;IAAU,CAAC;IACrD;GACF;GACA,IAAI,QAAQ,SAAS,CAAC,CAAC,CAAC,GAAG;IACzB,MAAM,KAAK,EAAE;IACb,KAAK;KAAE,IAAI;KAAM,UAAU,GAAG;IAAS,CAAC;GAC1C;EACF,CAAC;EAED,UAAU,SAAS,SAAS;GAC1B,IAAI,SAAS,MAAM,KAAK;IAAE,IAAI;IAAO,QAAQ;GAAwD,CAAC;QACjG,KAAK;IAAE,IAAI;IAAO,QAAQ,sBAAsB,KAAK;GAAkB,CAAC;EAC/E,CAAC;EAED,UAAU,KAAK,OAAO,KAAK,CAAC;CAC9B,CAAC;AACH;;;;;;;;;;;;;;ACzDA,SAAgB,mBAAmB,MAAgC;CACjE,MAAM,OAAO,YAAY,KAAK,IAAI;CAClC,MAAM,OAAO,KAAK,cAAc,WAAW,IAAI;CAC/C,MAAM,MAA+B,WAAW,IAAI,IAAI,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE;CAG9G,IAAI,eAAe;EAAE,GADT,IAAI,gBAAwD,CAAC;EAC7C,KAAK,KAAK;EAAO,KAAK,KAAK;EAAO,SAAS;CAAK;CAC5E,IAAI,KAAK,UAAU,IAAI,WAAW,KAAK;CAEvC,aAAa,MAAM,GAAG;CAEtB,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC5C,cAAc,MAAM,KAAK,UAAU,KAAK,MAAM,CAAC,IAAI,IAAI;CACvD,OAAO;AACT;;;;;;;;;AAwBA,SAAgB,iBAAiB,MAAyD;CACxF,OAAO;EACL,UAAU,QAAQ;EAClB,UAAU,KAAK,YAAY,cAAc,OAAO,KAAK,GAAG;EACxD,gBAAgB,YAAY,KAAK,IAAI,MAAM,YAAY,KAAA,CAAS;CAClE;AACF;AAWA,SAAS,SAAS,MAA+B;CAC/C,OAAO;EACL,QAAQ,MAAM,UAAU;GAAE,KAAK,EAAE;GAAK,OAAO,EAAE;GAAO,cAAc;EAAe,CAAC;EACpF,gBAAgB,YAAY;GAC1B,MAAM,aAAa,kBAAkB,EAAE,MAAM,KAAK,KAAK,CAAC;GACxD,MAAM,WAAW,QAAQ,iBAAiB,IAAI,CAAC;GAC/C,MAAM,WAAW,GAAG;EACtB;EACA,qBACEA,cAAkB;GAChB,MAAM,KAAK;GACX,WAAW;IAAE,OAAO,KAAK;IAAO,OAAO,KAAK;IAAO,UAAU,KAAK;GAAS;EAC7E,CAAC;EACH,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,OAAO,QAAQ,QAAQ,MAAM,KAAK;CACpC;AACF;;AAGA,eAAe,SACb,MACA,QACA,KACiB;CACjB,IAAI,MAAM,MAAM;CAChB,MAAM,EAAE,OAAO,SAAS,MAAM,KAAK,KAAK;CACxC,IAAI,MAAM,MAAM,IAAI,MAAM,wCAAwC,QAAQ;CAC1E,OAAQ,MAAiB,KAAK;AAChC;AAEA,eAAsB,SAAS,MAAoB,UAA8B,CAAC,GAAkB;CAClG,MAAM,OAAkB;EAAE,GAAG,SAAS,IAAI;EAAG,GAAG;CAAQ;CACxD,MAAM,EAAE,QAAQ;CAGhB,IAAI,CAAC,KAAK,OAAO;EACf,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,MAAM,IAAI,MAAM,KAAK,MAAM;GAAE,KAAK,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACjE,IAAI,CAAC,EAAE,IAAI,MAAM,IAAI,MAAM,0BAA0B,EAAE,QAAQ;EAC/D,mBAAmB;GAAE,GAAG;GAAM,OAAO,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACpE,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,uBAAuB;EAC/F;CACF;CAOA,IAAI,KAAK,YACP,MAAM,IAAI,MACR,6HACF;CAIF,MAAM,KAAK,gBAAgB;EAAE,OAAO,KAAK;EAAO,QAAQ;CAAI,CAAC;CAC7D,MAAM,OAAO,GAAG,OAAO,cAAc,CAAC;CACtC,IAAI,MAAM,KAAK;CACf,IAAI,QAAQ,KAAK;CACjB,IAAI;EACF,IAAI,CAAC,KAAK,MAAM,MAAM,SAAS,MAAM,uBAAuB,GAAG;EAE/D,KAAK,IAAI,UAAU,IAAK,WAAW;GACjC,IAAI,CAAC,OAAO,QAAQ,MAAM,SAAS,MAAM,oBAAoB,GAAG;GAChE,IAAI,MAAM,yBAAyB,IAAI,IAAI;GAC3C,MAAM,IAAI,MAAM,KAAK,MAAM;IAAO;IAAa;GAAO,CAAC;GACvD,IAAI,EAAE,IAAI;IACR,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,GAAG;IAC3E;GACF;GACA,IAAI,MAAM,KAAK,EAAE,OAAO,GAAG;GAC3B,IAAI,WAAW,GAAG,MAAM,IAAI,MAAM,uBAAuB;GACzD,QAAQ,KAAA;EACV;EAEA,mBAAmB;GAAE,GAAG;GAAM,OAAO;GAAM,OAAO;EAAO,CAAC;EAE1D,MAAM,OAAO,MAAM,SAAS,MAAM,wDAAwD,GAAG,EAAA,CAAG,YAAY;EAC5G,IAAI,QAAQ,OAAO,QAAQ,OAAO;GAChC,MAAM,KAAK,eAAe;GAC1B,IAAI,MAAM,wFAAwF;GAClG;EACF;EACA,IAAI,MAAM,gDAAgD;CAC5D,UAAU;EACR,GAAG,MAAM;CACX;CAEA,MAAM,KAAK,cAAc;AAC3B"}
+{"version":3,"file":"login-H-H07Q2J.js","names":["realRunForeground"],"sources":["../src/cp/auth-probe.ts","../src/cli/login.ts"],"sourcesContent":["/**\n * `probeAuth` — a one-shot CP auth check used by `agentconnect login`. It dials\n * the CP, sends ONLY the `auth` frame (no `register`), and resolves with the\n * authoritative daemonId from `auth/ok`, or a human-readable failure reason on\n * a `4401` close, a correlated `error`, a dial failure, or a timeout. It always\n * closes the socket and never leaves a connection open.\n */\nimport { buildEnvelope, decodeEnvelope, encode, isFrame } from '@agentconnect.md/protocol'\nimport { ClientTransport, type Transport } from '@agentconnect.md/connection'\nimport { CP_SUBPROTOCOL, CP_WS_PATH } from './client.js'\n\nexport interface ProbeResult {\n  ok: boolean\n  daemonId?: string\n  reason?: string\n}\n\nexport interface ProbeOpts {\n  url: string\n  token: string\n  daemonId?: string\n  agentVersion?: string\n  timeoutMs?: number\n  /** Injectable for tests; defaults to dialing the real WebSocket. */\n  connect?: () => Promise<Transport>\n}\n\nexport async function probeAuth(opts: ProbeOpts): Promise<ProbeResult> {\n  const timeoutMs = opts.timeoutMs ?? 10_000\n  const dial = opts.connect ?? (() => ClientTransport.dial(opts.url, { subprotocol: CP_SUBPROTOCOL, path: CP_WS_PATH }))\n\n  let transport: Transport\n  try {\n    transport = await dial()\n  } catch (err) {\n    return { ok: false, reason: `cannot reach ${opts.url}: ${(err as Error).message}` }\n  }\n\n  const authPayload: Record<string, unknown> = {\n    apiKey: opts.token,\n    agentVersion: opts.agentVersion ?? 'probe'\n  }\n  if (opts.daemonId) authPayload.daemonId = opts.daemonId\n  const frame = buildEnvelope('auth', authPayload)\n\n  return await new Promise<ProbeResult>((resolve) => {\n    let settled = false\n    const done = (r: ProbeResult): void => {\n      if (settled) return\n      settled = true\n      clearTimeout(timer)\n      try {\n        transport.close(1000, 'probe done')\n      } catch {\n        // socket may already be closed\n      }\n      resolve(r)\n    }\n\n    const timer = setTimeout(\n      () => done({ ok: false, reason: `timed out after ${timeoutMs}ms waiting for auth/ok` }),\n      timeoutMs\n    )\n\n    transport.onMessage((text) => {\n      const decoded = decodeEnvelope(text)\n      if (!decoded.ok) return\n      const f = decoded.frame\n      if (f.corr !== frame.id) return\n      if (f.type === 'error') {\n        const e = f.payload as { code: string; message: string }\n        done({ ok: false, reason: `${e.code}: ${e.message}` })\n        return\n      }\n      if (isFrame('auth/ok')(f)) {\n        const ok = f.payload as { daemonId: string }\n        done({ ok: true, daemonId: ok.daemonId })\n      }\n    })\n\n    transport.onClose((code) => {\n      if (code === 4401) done({ ok: false, reason: 'authentication failed (4401) — check the daemon token' })\n      else done({ ok: false, reason: `connection closed (${code}) before auth/ok` })\n    })\n\n    transport.send(encode(frame))\n  })\n}\n","/**\n * `agentconnect login` — interactive onboarding. It tests the Control Plane auth\n * flow, persists credentials only on success, then offers to install the OS\n * service. If installed it starts the service (`up`) and returns; otherwise it\n * runs the daemon in the foreground (the same path as `agentconnect run`).\n *\n * `persistCredentials` is the pure config-merge half (token-only onboarding:\n * `daemonId` is omitted unless given — the first connect adopts it from the\n * token's `sub`). `runLogin` is the orchestrator, with injectable deps for tests.\n */\nimport { readFileSync, existsSync, writeFileSync, mkdirSync } from 'node:fs'\nimport { dirname } from 'node:path'\nimport { createInterface } from 'node:readline'\nimport { fileURLToPath } from 'node:url'\nimport { ConfigSchema } from '../config/config-schema.js'\nimport { resolveRoot, configPath } from '../paths.js'\nimport { DAEMON_VERSION } from '../version.js'\nimport { probeAuth, type ProbeResult } from '../cp/auth-probe.js'\nimport { resolveController, type InstallOpts } from '../service/index.js'\nimport { runForeground as realRunForeground } from './run-foreground.js'\n\nexport interface PersistCredsOpts {\n  cpUrl: string\n  cpKey: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n}\n\n/** Merge url/token into config.json (validated), returning the written path. */\nexport function persistCredentials(opts: PersistCredsOpts): string {\n  const root = resolveRoot(opts.root)\n  const file = opts.configPath ?? configPath(root)\n  const raw: Record<string, unknown> = existsSync(file) ? JSON.parse(readFileSync(file, 'utf8')) : { version: 1 }\n\n  const cp = (raw.controlPlane as Record<string, unknown> | undefined) ?? {}\n  raw.controlPlane = { ...cp, url: opts.cpUrl, key: opts.cpKey, enabled: true }\n  if (opts.daemonId) raw.daemonId = opts.daemonId\n\n  ConfigSchema.parse(raw) // fail before writing if the merge is invalid\n\n  mkdirSync(dirname(file), { recursive: true })\n  writeFileSync(file, JSON.stringify(raw, null, 2) + '\\n')\n  return file\n}\n\nexport interface RunLoginOpts {\n  cpUrl?: string\n  cpKey?: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n  /** The resolved CLI entry path. Must be supplied by the CLI entry point\n   *  (index.ts) so the correct bundle path is used rather than inferring it\n   *  from login.ts's own import.meta.url (which is the same bundle but the\n   *  `../` path calculation would be wrong). Falls back to import.meta.url\n   *  for the pure test path where login.ts is loaded standalone. */\n  cliEntry?: string\n}\n\n/**\n * Build the InstallOpts for the OS service installer.\n *\n * Exported as a pure helper so it can be unit-tested independently of the\n * full `runLogin` orchestration. The caller (index.ts) passes `cliEntry` so\n * the correct bundle path always flows through; if omitted we fall back to\n * `import.meta.url` (correct only when login.ts is the entry, e.g. in tests).\n */\nexport function buildInstallOpts(opts: { root?: string; cliEntry?: string }): InstallOpts {\n  return {\n    execPath: process.execPath,\n    cliEntry: opts.cliEntry ?? fileURLToPath(import.meta.url),\n    includeRootEnv: resolveRoot(opts.root) !== resolveRoot(undefined)\n  }\n}\n\nexport interface LoginDeps {\n  probe: (o: { url: string; token: string }) => Promise<ProbeResult>\n  installService: () => Promise<void>\n  runForeground: () => Promise<void>\n  out: NodeJS.WritableStream\n  input: NodeJS.ReadableStream\n  isTTY: boolean\n}\n\nfunction realDeps(opts: RunLoginOpts): LoginDeps {\n  return {\n    probe: (o) => probeAuth({ url: o.url, token: o.token, agentVersion: DAEMON_VERSION }),\n    installService: async () => {\n      const controller = resolveController({ root: opts.root })\n      await controller.install(buildInstallOpts(opts))\n      await controller.up()\n    },\n    runForeground: () =>\n      realRunForeground({\n        root: opts.root,\n        overrides: { cpUrl: opts.cpUrl, cpKey: opts.cpKey, daemonId: opts.daemonId }\n      }),\n    out: process.stdout,\n    input: process.stdin,\n    isTTY: Boolean(process.stdin.isTTY)\n  }\n}\n\n/** Read the next line from a readline interface via async iterator. */\nasync function nextLine(\n  iter: AsyncIterableIterator<string>,\n  prompt: string,\n  out: NodeJS.WritableStream\n): Promise<string> {\n  out.write(prompt)\n  const { value, done } = await iter.next()\n  if (done) throw new Error(`unexpected end of input waiting for: ${prompt}`)\n  return (value as string).trim()\n}\n\nexport async function runLogin(opts: RunLoginOpts, partial: Partial<LoginDeps> = {}): Promise<void> {\n  const deps: LoginDeps = { ...realDeps(opts), ...partial }\n  const { out } = deps\n\n  // ── Non-interactive: flags required; probe; persist. No prompts, no handoff. ──\n  if (!deps.isTTY) {\n    if (!opts.cpUrl) throw new Error('login requires --cp-url <url>')\n    if (!opts.cpKey) throw new Error('login requires --cp-key <key>')\n    const r = await deps.probe({ url: opts.cpUrl, token: opts.cpKey })\n    if (!r.ok) throw new Error(`authentication failed: ${r.reason}`)\n    persistCredentials({ ...opts, cpUrl: opts.cpUrl, cpKey: opts.cpKey })\n    out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''} — credentials saved\\n`)\n    return\n  }\n\n  // Both interactive handoffs read `<root>/config.json`: the installed service\n  // runs `… run` (no `--config`), and the foreground `Daemon` loads by root. A\n  // custom `--config` would persist credentials the daemon never reads, so the\n  // install/run branch would look successful but start without them. Reject it;\n  // `--root` is the knob that keeps persist + service + foreground in sync.\n  if (opts.configPath) {\n    throw new Error(\n      'interactive login does not support --config — use --root <dir> so the daemon and the installed service read the same config'\n    )\n  }\n\n  // ── Interactive ──\n  const rl = createInterface({ input: deps.input, output: out })\n  const iter = rl[Symbol.asyncIterator]()\n  let url = opts.cpUrl\n  let token = opts.cpKey\n  try {\n    if (!url) url = await nextLine(iter, 'Control Plane URL: ', out)\n\n    for (let attempt = 0; ; attempt++) {\n      if (!token) token = await nextLine(iter, 'Daemon API key: ', out)\n      out.write(`Testing connection to ${url}…\\n`)\n      const r = await deps.probe({ url: url!, token: token! })\n      if (r.ok) {\n        out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''}\\n`)\n        break\n      }\n      out.write(`✗ ${r.reason}\\n`)\n      if (attempt >= 1) throw new Error('authentication failed')\n      token = undefined // re-prompt on retry\n    }\n\n    persistCredentials({ ...opts, cpUrl: url!, cpKey: token! })\n\n    const ans = (await nextLine(iter, 'Install AgentConnect as a background service? (y/N) ', out)).toLowerCase()\n    if (ans === 'y' || ans === 'yes') {\n      await deps.installService()\n      out.write('Service installed and started. Manage it with `agentconnect up` / `down` / `status`.\\n')\n      return\n    }\n    out.write('Starting in the foreground (Ctrl-C to stop)…\\n')\n  } finally {\n    rl.close()\n  }\n\n  await deps.runForeground()\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA2BA,eAAsB,UAAU,MAAuC;CACrE,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,OAAO,KAAK,kBAAkB,gBAAgB,KAAK,KAAK,KAAK;EAAE,aAAA;EAA6B,MAAA;CAAiB,CAAC;CAEpH,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,KAAK;CACzB,SAAS,KAAK;EACZ,OAAO;GAAE,IAAI;GAAO,QAAQ,gBAAgB,KAAK,IAAI,IAAK,IAAc;EAAU;CACpF;CAEA,MAAM,cAAuC;EAC3C,QAAQ,KAAK;EACb,cAAc,KAAK,gBAAgB;CACrC;CACA,IAAI,KAAK,UAAU,YAAY,WAAW,KAAK;CAC/C,MAAM,QAAQ,cAAc,QAAQ,WAAW;CAE/C,OAAO,MAAM,IAAI,SAAsB,YAAY;EACjD,IAAI,UAAU;EACd,MAAM,QAAQ,MAAyB;GACrC,IAAI,SAAS;GACb,UAAU;GACV,aAAa,KAAK;GAClB,IAAI;IACF,UAAU,MAAM,KAAM,YAAY;GACpC,QAAQ,CAER;GACA,QAAQ,CAAC;EACX;EAEA,MAAM,QAAQ,iBACN,KAAK;GAAE,IAAI;GAAO,QAAQ,mBAAmB,UAAU;EAAwB,CAAC,GACtF,SACF;EAEA,UAAU,WAAW,SAAS;GAC5B,MAAM,UAAU,eAAe,IAAI;GACnC,IAAI,CAAC,QAAQ,IAAI;GACjB,MAAM,IAAI,QAAQ;GAClB,IAAI,EAAE,SAAS,MAAM,IAAI;GACzB,IAAI,EAAE,SAAS,SAAS;IACtB,MAAM,IAAI,EAAE;IACZ,KAAK;KAAE,IAAI;KAAO,QAAQ,GAAG,EAAE,KAAK,IAAI,EAAE;IAAU,CAAC;IACrD;GACF;GACA,IAAI,QAAQ,SAAS,CAAC,CAAC,CAAC,GAAG;IACzB,MAAM,KAAK,EAAE;IACb,KAAK;KAAE,IAAI;KAAM,UAAU,GAAG;IAAS,CAAC;GAC1C;EACF,CAAC;EAED,UAAU,SAAS,SAAS;GAC1B,IAAI,SAAS,MAAM,KAAK;IAAE,IAAI;IAAO,QAAQ;GAAwD,CAAC;QACjG,KAAK;IAAE,IAAI;IAAO,QAAQ,sBAAsB,KAAK;GAAkB,CAAC;EAC/E,CAAC;EAED,UAAU,KAAK,OAAO,KAAK,CAAC;CAC9B,CAAC;AACH;;;;;;;;;;;;;;ACzDA,SAAgB,mBAAmB,MAAgC;CACjE,MAAM,OAAO,YAAY,KAAK,IAAI;CAClC,MAAM,OAAO,KAAK,cAAc,WAAW,IAAI;CAC/C,MAAM,MAA+B,WAAW,IAAI,IAAI,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE;CAG9G,IAAI,eAAe;EAAE,GADT,IAAI,gBAAwD,CAAC;EAC7C,KAAK,KAAK;EAAO,KAAK,KAAK;EAAO,SAAS;CAAK;CAC5E,IAAI,KAAK,UAAU,IAAI,WAAW,KAAK;CAEvC,aAAa,MAAM,GAAG;CAEtB,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC5C,cAAc,MAAM,KAAK,UAAU,KAAK,MAAM,CAAC,IAAI,IAAI;CACvD,OAAO;AACT;;;;;;;;;AAwBA,SAAgB,iBAAiB,MAAyD;CACxF,OAAO;EACL,UAAU,QAAQ;EAClB,UAAU,KAAK,YAAY,cAAc,OAAO,KAAK,GAAG;EACxD,gBAAgB,YAAY,KAAK,IAAI,MAAM,YAAY,KAAA,CAAS;CAClE;AACF;AAWA,SAAS,SAAS,MAA+B;CAC/C,OAAO;EACL,QAAQ,MAAM,UAAU;GAAE,KAAK,EAAE;GAAK,OAAO,EAAE;GAAO,cAAc;EAAe,CAAC;EACpF,gBAAgB,YAAY;GAC1B,MAAM,aAAa,kBAAkB,EAAE,MAAM,KAAK,KAAK,CAAC;GACxD,MAAM,WAAW,QAAQ,iBAAiB,IAAI,CAAC;GAC/C,MAAM,WAAW,GAAG;EACtB;EACA,qBACEA,cAAkB;GAChB,MAAM,KAAK;GACX,WAAW;IAAE,OAAO,KAAK;IAAO,OAAO,KAAK;IAAO,UAAU,KAAK;GAAS;EAC7E,CAAC;EACH,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,OAAO,QAAQ,QAAQ,MAAM,KAAK;CACpC;AACF;;AAGA,eAAe,SACb,MACA,QACA,KACiB;CACjB,IAAI,MAAM,MAAM;CAChB,MAAM,EAAE,OAAO,SAAS,MAAM,KAAK,KAAK;CACxC,IAAI,MAAM,MAAM,IAAI,MAAM,wCAAwC,QAAQ;CAC1E,OAAQ,MAAiB,KAAK;AAChC;AAEA,eAAsB,SAAS,MAAoB,UAA8B,CAAC,GAAkB;CAClG,MAAM,OAAkB;EAAE,GAAG,SAAS,IAAI;EAAG,GAAG;CAAQ;CACxD,MAAM,EAAE,QAAQ;CAGhB,IAAI,CAAC,KAAK,OAAO;EACf,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,MAAM,IAAI,MAAM,KAAK,MAAM;GAAE,KAAK,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACjE,IAAI,CAAC,EAAE,IAAI,MAAM,IAAI,MAAM,0BAA0B,EAAE,QAAQ;EAC/D,mBAAmB;GAAE,GAAG;GAAM,OAAO,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACpE,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,uBAAuB;EAC/F;CACF;CAOA,IAAI,KAAK,YACP,MAAM,IAAI,MACR,6HACF;CAIF,MAAM,KAAK,gBAAgB;EAAE,OAAO,KAAK;EAAO,QAAQ;CAAI,CAAC;CAC7D,MAAM,OAAO,GAAG,OAAO,cAAc,CAAC;CACtC,IAAI,MAAM,KAAK;CACf,IAAI,QAAQ,KAAK;CACjB,IAAI;EACF,IAAI,CAAC,KAAK,MAAM,MAAM,SAAS,MAAM,uBAAuB,GAAG;EAE/D,KAAK,IAAI,UAAU,IAAK,WAAW;GACjC,IAAI,CAAC,OAAO,QAAQ,MAAM,SAAS,MAAM,oBAAoB,GAAG;GAChE,IAAI,MAAM,yBAAyB,IAAI,IAAI;GAC3C,MAAM,IAAI,MAAM,KAAK,MAAM;IAAO;IAAa;GAAO,CAAC;GACvD,IAAI,EAAE,IAAI;IACR,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,GAAG;IAC3E;GACF;GACA,IAAI,MAAM,KAAK,EAAE,OAAO,GAAG;GAC3B,IAAI,WAAW,GAAG,MAAM,IAAI,MAAM,uBAAuB;GACzD,QAAQ,KAAA;EACV;EAEA,mBAAmB;GAAE,GAAG;GAAM,OAAO;GAAM,OAAO;EAAO,CAAC;EAE1D,MAAM,OAAO,MAAM,SAAS,MAAM,wDAAwD,GAAG,EAAA,CAAG,YAAY;EAC5G,IAAI,QAAQ,OAAO,QAAQ,OAAO;GAChC,MAAM,KAAK,eAAe;GAC1B,IAAI,MAAM,wFAAwF;GAClG;EACF;EACA,IAAI,MAAM,gDAAgD;CAC5D,UAAU;EACR,GAAG,MAAM;CACX;CAEA,MAAM,KAAK,cAAc;AAC3B"}

package/dist/run-foreground-BVC7qytz.js

@@ -0,0 +1,2 @@
+import { t as runForeground } from "./run-foreground-BZ63Vsmq.js";
+export { runForeground };

package/dist/{run-foreground-DoM1PkHn.js → run-foreground-BZ63Vsmq.js}

@@ -6,7 +6,7 @@ import { C as _coercedNumber, T as NEVER, a as array, d as literal, f as looseOb
 import { a as RELAY_DAEMON_WS_PATH, c as SHARED_CONFIG_ACTION_ID, d as encode, f as MAX_FRAME_BYTES, g as ZodIssueCode, h as RESERVED_MCP_SERVER_NAME, i as RELAY_DAEMON_SUBPROTOCOL, l as buildEnvelope, n as gitRepoLabel, o as buildRelayDaemonFrame, r as normalizeGitUrl, s as decodeRelayDaemonFrame, u as decodeEnvelope } from "./dist-BG425zHm.js";
 import { a as agentChildEnv, c as persistRelays, i as selectAgent, n as findAgentFiles, o as loadConfig, r as loadAgents, s as persistDaemonId } from "./load-agents-CROyMyq9.js";
 import { l as resolveRoot, o as mcpSocketPath, u as statePath } from "./paths-DEcUO8lC.js";
-import { C as resolveRuntimes, S as cachedRuntimeVersions, _ as resolveInMemoryDir, a as prepareWorkspace, b as toolsForIntegrations, c as sessionGitEnv, d as memoryKindOf, f as memoryProviderFor, g as listMemory, h as MemoryTooLargeError, i as prefetchWorkspace, l as simpleGit, m as MemoryPathError, n as turnFailureReason, o as initGitInjection, p as MemoryConflictError, r as installedRuntimes, s as probeGitVersion, t as AcpHost, u as createMemoryProvider, v as writeMemoryFile, x as cachedRuntimeNames, y as MEMORY_TOOL_NAMES } from "./acp-host-BDcV2bZY.js";
+import { C as resolveRuntimes, S as cachedRuntimeVersions, _ as resolveInMemoryDir, a as prepareWorkspace, b as toolsForIntegrations, c as sessionGitEnv, d as memoryKindOf, f as memoryProviderFor, g as listMemory, h as MemoryTooLargeError, i as prefetchWorkspace, l as simpleGit, m as MemoryPathError, n as turnFailureReason, o as initGitInjection, p as MemoryConflictError, r as installedRuntimes, s as probeGitVersion, t as AcpHost, u as createMemoryProvider, v as writeMemoryFile, x as cachedRuntimeNames, y as MEMORY_TOOL_NAMES } from "./acp-host-DEjB1yFS.js";
 import { i as GitCredentialCache, n as gitcredSocketPath, r as writeGitcredShim, t as GitCredServer } from "./gitcred-server-Bu-Svl7L.js";
 import { B as ToolListChangedNotificationSchema, D as ListPromptsResultSchema, E as ListChangedOptionsBaseSchema, F as PromptListChangedNotificationSchema, G as isZ4Schema, H as isJSONRPCRequest, I as ReadResourceResultSchema, J as encodeFrame, K as safeParse, L as ResourceListChangedNotificationSchema, M as ListToolsResultSchema, O as ListResourceTemplatesResultSchema, P as McpError, R as SUPPORTED_PROTOCOL_VERSIONS, S as InitializeResultSchema, T as LATEST_PROTOCOL_VERSION, U as isJSONRPCResultResponse, V as isInitializedNotification, W as getObjectShape, _ as ElicitResultSchema, a as AjvJsonSchemaValidator, b as GetPromptResultSchema, c as mergeCapabilities, d as CompleteResultSchema, f as CreateMessageRequestSchema, g as ElicitRequestSchema, h as CreateTaskResultSchema, i as assertToolsCallTaskCapability, k as ListResourcesResultSchema, m as CreateMessageResultWithToolsSchema, n as serializeMessage, o as require_fast_deep_equal, p as CreateMessageResultSchema, q as decodeFrames, r as assertClientRequestTaskCapability, s as Protocol, t as ReadBuffer, u as CallToolResultSchema, v as EmptyResultSchema, w as JSONRPCMessageSchema, y as ErrorCode } from "./stdio-DnS8WcXi.js";
 import { createRequire } from "node:module";
@@ -6712,11 +6712,10 @@ var LocalStore = class {
 	writeUsage(key, u) {
 		this.db.prepare("UPDATE sessions SET usage = ? WHERE key = ?").run(JSON.stringify(u), key);
 	}
-	/** Record the latest token counts for a session. ACP's `Usage` is already the
-	*  running session total (not a per-turn delta), so this is latest-wins over the
-	*  token fields — never additive. Only provided fields are updated; the
-	*  context/cost snapshot is left intact. No-op on an unknown key (the row is
-	*  created by the SessionManager first). */
+	/** Record the latest token counts for a session when an adapter reports a
+	*  running session total. This is latest-wins over the token fields — never
+	*  additive. Only provided fields are updated; the context/cost snapshot is
+	*  left intact. No-op on an unknown key (the row is created first). */
 	setTokenUsage(key, counts) {
 		const u = this.getUsage(key);
 		if (counts.totalTokens !== void 0) u.totalTokens = counts.totalTokens;
@@ -6727,6 +6726,22 @@ var LocalStore = class {
 		if (counts.cachedWriteTokens !== void 0) u.cachedWriteTokens = counts.cachedWriteTokens;
 		this.writeUsage(key, u);
 	}
+	/** Add one turn's token counts to the session total. codex-acp currently maps
+	*  Codex's `last_token_usage` into PromptResponse.usage, so its values are a
+	*  per-turn delta even though other ACP adapters return a session snapshot. */
+	addTokenUsage(key, counts) {
+		const u = this.getUsage(key);
+		const add = (field, value) => {
+			if (value !== void 0) u[field] = (u[field] ?? 0) + value;
+		};
+		add("totalTokens", counts.totalTokens);
+		add("inputTokens", counts.inputTokens);
+		add("outputTokens", counts.outputTokens);
+		add("thoughtTokens", counts.thoughtTokens);
+		add("cachedReadTokens", counts.cachedReadTokens);
+		add("cachedWriteTokens", counts.cachedWriteTokens);
+		this.writeUsage(key, u);
+	}
 	/** Overwrite the session's context-window + cost snapshot (latest `usage_update`
 	*  wins). Only provided fields are updated. No-op on an unknown key. */
 	setUsageSnapshot(key, snap) {
@@ -6737,6 +6752,17 @@ var LocalStore = class {
 		if (snap.costCurrency !== void 0) u.costCurrency = snap.costCurrency;
 		this.writeUsage(key, u);
 	}
+	/** Add one turn's fallback cost to the session running total. Refuse to mix
+	*  currencies; a later ACP usage_update can still replace the total snapshot. */
+	addCost(key, amount, currency) {
+		if (!Number.isFinite(amount) || amount <= 0 || !currency) return false;
+		const u = this.getUsage(key);
+		if (u.costCurrency !== void 0 && u.costCurrency !== currency) return false;
+		u.costAmount = (u.costAmount ?? 0) + amount;
+		u.costCurrency = currency;
+		this.writeUsage(key, u);
+		return true;
+	}
 	/** Most-recent activity across an agent's non-closed sessions (epoch ms), or null
 	*  if it has none. Drives idle-host reaping (#111): a host with no recent session
 	*  activity AND no in-flight turn is past its idle window. */
@@ -215101,6 +215127,239 @@ var SystemMetrics = class {
 	}
 };
 //#endregion
+//#region src/usage/openai-public-pricing.ts
+/**
+* Best-effort OpenAI Standard API list-price estimates for Codex turns.
+*
+* These values are deliberately static: the daemon must remain deterministic and
+* must not fetch pricing at runtime. Refresh the manifest with the repo-local
+* `$update-model-pricing` skill and keep the focused tests in sync.
+*
+* Source: https://developers.openai.com/api/docs/pricing
+* Verified: 2026-07-11
+*/
+const OPENAI_PUBLIC_PRICING_AS_OF = "2026-07-11";
+const TOKENS_PER_MILLION = 1e6;
+const LONG_CONTEXT_THRESHOLD = 272e3;
+/** Exact public model ids only. Never prefix-match an unknown future model. */
+const MODEL_PRICING = {
+	"gpt-5.6-sol": {
+		standard: {
+			input: 5,
+			cachedInput: .5,
+			cacheWrite: 6.25,
+			output: 30
+		},
+		longContext: {
+			input: 10,
+			cachedInput: 1,
+			cacheWrite: 12.5,
+			output: 45
+		}
+	},
+	"gpt-5.6-terra": {
+		standard: {
+			input: 2.5,
+			cachedInput: .25,
+			cacheWrite: 3.125,
+			output: 15
+		},
+		longContext: {
+			input: 5,
+			cachedInput: .5,
+			cacheWrite: 6.25,
+			output: 22.5
+		}
+	},
+	"gpt-5.6-luna": {
+		standard: {
+			input: 1,
+			cachedInput: .1,
+			cacheWrite: 1.25,
+			output: 6
+		},
+		longContext: {
+			input: 2,
+			cachedInput: .2,
+			cacheWrite: 2.5,
+			output: 9
+		}
+	},
+	"gpt-5.5": {
+		standard: {
+			input: 5,
+			cachedInput: .5,
+			output: 30
+		},
+		longContext: {
+			input: 10,
+			cachedInput: 1,
+			output: 45
+		}
+	},
+	"gpt-5.5-pro": {
+		standard: {
+			input: 30,
+			output: 180
+		},
+		longContext: {
+			input: 60,
+			output: 270
+		}
+	},
+	"gpt-5.4": {
+		standard: {
+			input: 2.5,
+			cachedInput: .25,
+			output: 15
+		},
+		longContext: {
+			input: 5,
+			cachedInput: .5,
+			output: 22.5
+		}
+	},
+	"gpt-5.4-pro": {
+		standard: {
+			input: 30,
+			output: 180
+		},
+		longContext: {
+			input: 60,
+			output: 270
+		}
+	},
+	"gpt-5.4-mini": { standard: {
+		input: .75,
+		cachedInput: .075,
+		output: 4.5
+	} },
+	"gpt-5.3-codex": { standard: {
+		input: 1.75,
+		cachedInput: .175,
+		output: 14
+	} },
+	"gpt-5.2-codex": { standard: {
+		input: 1.75,
+		cachedInput: .175,
+		output: 14
+	} },
+	"gpt-5.2": { standard: {
+		input: 1.75,
+		cachedInput: .175,
+		output: 14
+	} },
+	"gpt-5.2-pro": { standard: {
+		input: 21,
+		output: 168
+	} },
+	"gpt-5.1-codex-max": { standard: {
+		input: 1.25,
+		cachedInput: .125,
+		output: 10
+	} },
+	"gpt-5.1-codex": { standard: {
+		input: 1.25,
+		cachedInput: .125,
+		output: 10
+	} },
+	"gpt-5.1": { standard: {
+		input: 1.25,
+		cachedInput: .125,
+		output: 10
+	} },
+	"gpt-5-codex": { standard: {
+		input: 1.25,
+		cachedInput: .125,
+		output: 10
+	} },
+	"gpt-5": { standard: {
+		input: 1.25,
+		cachedInput: .125,
+		output: 10
+	} },
+	"gpt-5.1-codex-mini": { standard: {
+		input: .25,
+		cachedInput: .025,
+		output: 2
+	} },
+	"gpt-5-mini": { standard: {
+		input: .25,
+		cachedInput: .025,
+		output: 2
+	} },
+	"codex-mini-latest": { standard: {
+		input: 1.5,
+		cachedInput: .375,
+		output: 6
+	} }
+};
+/** Aliases/snapshots that official model pages explicitly map to the rate above. */
+const MODEL_ALIASES = {
+	"gpt-5.6": "gpt-5.6-sol",
+	"gpt-5.5-2026-04-23": "gpt-5.5",
+	"gpt-5.5-pro-2026-04-23": "gpt-5.5-pro",
+	"gpt-5.4-2026-03-05": "gpt-5.4",
+	"gpt-5.4-mini-2026-03-17": "gpt-5.4-mini",
+	"gpt-5.4-pro-2026-03-05": "gpt-5.4-pro",
+	"gpt-5.2-2025-12-11": "gpt-5.2",
+	"gpt-5.2-pro-2025-12-11": "gpt-5.2-pro",
+	"gpt-5.1-2025-11-13": "gpt-5.1",
+	"gpt-5-2025-08-07": "gpt-5",
+	"gpt-5-mini-2025-08-07": "gpt-5-mini"
+};
+function validCount(value) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+}
+/**
+* Estimate one Codex turn at public OpenAI Standard API token rates.
+*
+* codex-acp maps provider usage into disjoint ACP buckets: `inputTokens` is
+* non-cached input and `cachedReadTokens` is the cached subset it removed.
+* `thoughtTokens` is intentionally absent: reasoning is already a subset of output
+* and charging it again would double-count. The current adapter does not expose
+* GPT-5.6 cache writes, so those tokens remain in input at the regular input rate;
+* that known approximation is preferable to inventing an unavailable split.
+*/
+function estimateOpenAiTurnCost(model, usage) {
+	const rawModel = model?.trim();
+	if (!rawModel) return {
+		ok: false,
+		reason: "model_missing"
+	};
+	const normalizedModel = MODEL_ALIASES[rawModel] ?? rawModel;
+	const pricing = MODEL_PRICING[normalizedModel];
+	if (!pricing) return {
+		ok: false,
+		reason: "model_unknown"
+	};
+	if (usage.inputTokens === void 0 || usage.outputTokens === void 0) return {
+		ok: false,
+		reason: "usage_incomplete"
+	};
+	if (!validCount(usage.inputTokens) || !validCount(usage.outputTokens)) return {
+		ok: false,
+		reason: "usage_invalid"
+	};
+	const cachedRead = usage.cachedReadTokens ?? 0;
+	const cachedWrite = usage.cachedWriteTokens ?? 0;
+	if (!validCount(cachedRead) || !validCount(cachedWrite)) return {
+		ok: false,
+		reason: "usage_invalid"
+	};
+	const isLongContext = usage.inputTokens + cachedRead + cachedWrite > LONG_CONTEXT_THRESHOLD && pricing.longContext !== void 0;
+	const rates = isLongContext ? pricing.longContext : pricing.standard;
+	return {
+		ok: true,
+		amount: (usage.inputTokens * rates.input + cachedRead * (rates.cachedInput ?? rates.input) + cachedWrite * (rates.cacheWrite ?? rates.input) + usage.outputTokens * rates.output) / TOKENS_PER_MILLION,
+		currency: "USD",
+		model: normalizedModel,
+		pricingAsOf: OPENAI_PUBLIC_PRICING_AS_OF,
+		basis: "public-api-standard",
+		longContext: isLongContext
+	};
+}
+//#endregion
 //#region src/daemon.ts
 /** Format an error for logs, surfacing a JSON-RPC/ACP RequestError's `code` and
 *  `data` — for an agent-side `Internal error` the actionable detail (the adapter's
@@ -216125,6 +216384,18 @@ var Daemon = class Daemon {
 		this.hostStartedAt.set(agentId, this.clock.now());
 		return host;
 	}
+	/** Whether this agent is backed by Codex ACP. Registry ids are canonical, while
+	*  command/args matching keeps user-defined runtime aliases working. */
+	isCodexRuntime(agentId) {
+		const agent = this.agents.get(agentId);
+		if (!agent) return false;
+		const runtime = this.runtimes[agent.runtime];
+		return [
+			agent.runtime,
+			runtime?.command,
+			...runtime?.args ?? []
+		].filter((part) => typeof part === "string").some((part) => /(?:^|[\\/])codex-acp(?:@[^\\/]*)?$/.test(part.toLowerCase()));
+	}
 	/** The bare Telegram message id from a normalized `telegram:<chatId>:<messageId>`
 	*  msgId (the last segment; chat ids may be negative, so split, don't parse). */
 	telegramMessageId(msg) {
@@ -218118,6 +218389,8 @@ var Daemon = class Daemon {
 			...this.telegramReplyTarget(msg) !== void 0 ? { tgReplyTo: this.telegramReplyTarget(msg) } : {},
 			statusThread,
 			conn: replyConn,
+			runtimeCostReported: false,
+			usageReportSent: false,
 			applyChain: Promise.resolve(),
 			done,
 			resolveDone,
@@ -218149,6 +218422,9 @@ var Daemon = class Daemon {
 				this.log.info(`dispatch: skipped ready turn ${msg.msgId} (${readyGate})`);
 				return null;
 			}
+			const modelOptions = host.modelOptions?.(sessionId) ?? null;
+			const advertisedModel = modelOptions?.current;
+			const turnModel = modelOptions === null ? override ?? agent.runtimeOverrides?.model : advertisedModel === "default" ? void 0 : advertisedModel;
 			if (!wasRunning) this.showActivity(replyConn, msg.channel, statusThread, "is thinking…");
 			this.emitStatusBar(p);
 			const { stopReason, usage } = await host.prompt(sessionId, blocks);
@@ -218156,28 +218432,28 @@ var Daemon = class Daemon {
 				if (p.outputSuppressed === "loop protection") finalPhase = "problem";
 				return null;
 			}
-			if (usage) this.store.setTokenUsage(key, {
-				totalTokens: usage.totalTokens,
-				inputTokens: usage.inputTokens,
-				outputTokens: usage.outputTokens,
-				thoughtTokens: usage.thoughtTokens ?? void 0,
-				cachedReadTokens: usage.cachedReadTokens ?? void 0,
-				cachedWriteTokens: usage.cachedWriteTokens ?? void 0
-			});
-			this.emitStatusBar(p);
-			const mergedUsage = this.store.getUsage(key);
-			if (Object.keys(mergedUsage).length > 0) try {
-				this.cpClient?.emitUsageReport({
-					sessionId,
-					agentId,
-					platform: msg.platform,
-					channel: msg.channel,
-					lastActivityAt: new Date(this.clock.now()).toISOString(),
-					usage: mergedUsage
-				});
-			} catch (err) {
-				this.log.debug(`usage report emit failed (session ${sessionId}): ${err.message}`);
+			if (usage) {
+				const counts = {
+					totalTokens: usage.totalTokens,
+					inputTokens: usage.inputTokens,
+					outputTokens: usage.outputTokens,
+					thoughtTokens: usage.thoughtTokens ?? void 0,
+					cachedReadTokens: usage.cachedReadTokens ?? void 0,
+					cachedWriteTokens: usage.cachedWriteTokens ?? void 0
+				};
+				if (this.isCodexRuntime(agentId)) {
+					this.store.addTokenUsage(key, counts);
+					if (!p.runtimeCostReported) {
+						const estimate = estimateOpenAiTurnCost(turnModel, counts);
+						if (estimate.ok) {
+							if (!this.store.addCost(key, estimate.amount, estimate.currency)) this.log.debug(`cost fallback skipped for session ${sessionId}: existing currency differs from USD`);
+						} else this.log.debug(`cost fallback unavailable for session ${sessionId} model=${turnModel ?? "(unknown)"}: ${estimate.reason}`);
+					}
+				} else this.store.setTokenUsage(key, counts);
 			}
+			this.emitStatusBar(p);
+			this.emitStoredUsageReport(sessionId, agentId, msg.platform, msg.channel, key);
+			p.usageReportSent = true;
 			this.clearIdle(p);
 			if (p.webchat) {
 				if (p.webchat.replyText.trim()) this.store.appendTranscript({
@@ -218735,7 +219011,7 @@ var Daemon = class Daemon {
 		const agent = this.agents.get(agentId);
 		const usage = this.store.getUsage(sessionKey);
 		const host = this.hosts.get(agentId);
-		const model = host?.modelOptions?.();
+		const model = host?.modelOptions?.(acpSessionId);
 		const effort = host?.effortOptions?.();
 		const permissionMode = host?.permissionModeOptions?.();
 		const fast = host?.fastModeOption?.();
@@ -219008,19 +219284,45 @@ var Daemon = class Daemon {
 			rec.resolve({ action: "cancel" });
 		}
 	}
+	/** Emit the daemon's latest merged usage snapshot. Used both at normal turn end
+	*  and when a late ACP usage_update corrects an already-reported fallback. */
+	emitStoredUsageReport(sessionId, agentId, platform, channel, key, late = false) {
+		const usage = this.store.getUsage(key);
+		if (Object.keys(usage).length === 0) return;
+		try {
+			this.cpClient?.emitUsageReport({
+				sessionId,
+				agentId,
+				platform,
+				channel,
+				lastActivityAt: new Date(this.clock.now()).toISOString(),
+				usage
+			});
+		} catch (err) {
+			this.log.debug(`${late ? "late " : ""}usage report emit failed (session ${sessionId}): ${err.message}`);
+		}
+	}
 	onAcpUpdate(_agentId, sessionId, update) {
 		const p = this.pending.get(sessionId);
-		if (!p) return;
-		if (p.outputSuppressed) return;
+		if (p?.outputSuppressed) return;
 		if (update?.sessionUpdate === "usage_update") {
-			this.store.setUsageSnapshot(p.sessionKey, {
-				contextUsed: update.used,
-				contextSize: update.size,
-				costAmount: update.cost?.amount ?? void 0,
-				costCurrency: update.cost?.currency ?? void 0
-			});
-			this.emitStatusBar(p);
+			const rec = p ? void 0 : this.store.getSessionByAcpId(sessionId);
+			const key = p?.sessionKey ?? rec?.key;
+			if (key) {
+				if (p && update.cost?.amount !== void 0) p.runtimeCostReported = true;
+				this.store.setUsageSnapshot(key, {
+					contextUsed: update.used,
+					contextSize: update.size,
+					costAmount: update.cost?.amount ?? void 0,
+					costCurrency: update.cost?.currency ?? void 0
+				});
+				if (p) {
+					this.emitStatusBar(p);
+					if (p.usageReportSent) this.emitStoredUsageReport(sessionId, p.agentId, p.platform, p.channel, key, true);
+				} else if (rec) this.emitStoredUsageReport(sessionId, rec.agentId, rec.platform, rec.channel, key, true);
+			}
 		}
+		if (!p) return;
 		if (update?.sessionUpdate === "session_info_update" && update.title !== void 0) {
 			this.store.setSessionTitle(p.sessionKey, update.title);
 			this.emitSessionMetadataSnapshot({
@@ -220150,4 +220452,4 @@ async function runForeground(opts, deps = {}) {
 //#endregion
 export { ClientTransport as i, CP_SUBPROTOCOL as n, CP_WS_PATH as r, runForeground as t };
 
-//# sourceMappingURL=run-foreground-DoM1PkHn.js.map
+//# sourceMappingURL=run-foreground-BZ63Vsmq.js.map