@archal/cli 0.9.7 → 1.0.0

package/dist/index.cjs

@@ -1202,7 +1202,7 @@ var require_command = __commonJS({
     "use strict";
     var EventEmitter = require("events").EventEmitter;
     var childProcess = require("child_process");
-    var path = require("path");
+    var path2 = require("path");
     var fs = require("fs");
     var process3 = require("process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
@@ -2215,9 +2215,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path.resolve(baseDir, baseName);
+          const localBin = path2.resolve(baseDir, baseName);
           if (fs.existsSync(localBin)) return localBin;
-          if (sourceExt.includes(path.extname(baseName))) return void 0;
+          if (sourceExt.includes(path2.extname(baseName))) return void 0;
           const foundExt = sourceExt.find(
             (ext) => fs.existsSync(`${localBin}${ext}`)
           );
@@ -2235,17 +2235,17 @@ Expecting one of '${allowedValues.join("', '")}'`);
           } catch {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path.resolve(
-            path.dirname(resolvedScriptPath),
+          executableDir = path2.resolve(
+            path2.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path.basename(
+            const legacyName = path2.basename(
               this._scriptPath,
-              path.extname(this._scriptPath)
+              path2.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -2256,7 +2256,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path.extname(executableFile));
+        launchWithNode = sourceExt.includes(path2.extname(executableFile));
         let proc;
         if (process3.platform !== "win32") {
           if (launchWithNode) {
@@ -3171,7 +3171,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path.basename(filename, path.extname(filename));
+        this._name = path2.basename(filename, path2.extname(filename));
         return this;
       }
       /**
@@ -3185,9 +3185,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path2) {
-        if (path2 === void 0) return this._executableDir;
-        this._executableDir = path2;
+      executableDir(path3) {
+        if (path3 === void 0) return this._executableDir;
+        this._executableDir = path3;
         return this;
       }
       /**
@@ -4079,8 +4079,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path, errorMaps, issueData } = params;
-      const fullPath = [...path, ...issueData.path || []];
+      const { data, path: path2, errorMaps, issueData } = params;
+      const fullPath = [...path2, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -4363,11 +4363,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path, key) {
+      constructor(parent, value, path2, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path;
+        this._path = path2;
         this._key = key;
       }
       get path() {
@@ -7875,10 +7875,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path) {
-  if (!path)
+function getElementAtPath(obj, path2) {
+  if (!path2)
     return obj;
-  return path.reduce((acc, key) => acc?.[key], obj);
+  return path2.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -8190,11 +8190,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path, issues) {
+function prefixIssues(path2, issues) {
   return issues.map((iss) => {
     var _a2;
     (_a2 = iss).path ?? (_a2.path = []);
-    iss.path.unshift(path);
+    iss.path.unshift(path2);
     return iss;
   });
 }
@@ -8437,7 +8437,7 @@ function formatError(error49, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error49, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error50, path = []) => {
+  const processError = (error50, path2 = []) => {
     var _a2, _b;
     for (const issue2 of error50.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
@@ -8447,7 +8447,7 @@ function treeifyError(error49, mapper = (issue2) => issue2.message) {
       } else if (issue2.code === "invalid_element") {
         processError({ issues: issue2.issues }, issue2.path);
       } else {
-        const fullpath = [...path, ...issue2.path];
+        const fullpath = [...path2, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -8479,8 +8479,8 @@ function treeifyError(error49, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path) {
+  const path2 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path2) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -21323,13 +21323,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path = ref.slice(1).split("/").filter(Boolean);
-  if (path.length === 0) {
+  const path2 = ref.slice(1).split("/").filter(Boolean);
+  if (path2.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path[0] === defsKey) {
-    const key = path[1];
+  if (path2[0] === defsKey) {
+    const key = path2[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -27200,8 +27200,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path) {
-      let input = path;
+    function removeDotSegments(path2) {
+      let input = path2;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -27400,8 +27400,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path && path !== "/" ? path : void 0;
+        const [path2, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path2 && path2 !== "/" ? path2 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -31594,19 +31594,19 @@ function resolveStoredRefreshToken(parsed) {
   }
   return { refreshToken: "", source: "none" };
 }
-function buildStoredCredentials(parsed, path, warn3) {
+function buildStoredCredentials(parsed, path2, warn3) {
   const { token, source: tokenSource } = resolveStoredToken(parsed);
   const { refreshToken, source: refreshTokenSource } = resolveStoredRefreshToken(parsed);
   if (token === null || refreshToken === null || parsed.refreshToken !== void 0 && typeof parsed.refreshToken !== "string" || parsed.refreshTokenEncrypted !== void 0 && typeof parsed.refreshTokenEncrypted !== "string" || !hasValidSelectedTwins(parsed.selectedTwins)) {
     warn3(
-      `Credentials file at ${path} has missing or invalid fields. Run \`archal login\` to re-authenticate.`
+      `Credentials file at ${path2} has missing or invalid fields. Run \`archal login\` to re-authenticate.`
     );
     return null;
   }
   const { email: email3, plan, expiresAt } = parsed;
   if (typeof email3 !== "string" || !isPlan(plan) || typeof expiresAt !== "number") {
     warn3(
-      `Credentials file at ${path} has missing or invalid fields. Run \`archal login\` to re-authenticate.`
+      `Credentials file at ${path2} has missing or invalid fields. Run \`archal login\` to re-authenticate.`
     );
     return null;
   }
@@ -31628,18 +31628,18 @@ function buildStoredCredentials(parsed, path, warn3) {
   return creds;
 }
 function readCredentialsFile(options) {
-  const path = getCredentialsPath();
-  if (!(0, import_fs.existsSync)(path)) {
+  const path2 = getCredentialsPath();
+  if (!(0, import_fs.existsSync)(path2)) {
     return null;
   }
   try {
     const warn3 = getWarn(options);
-    const parsed = JSON.parse((0, import_fs.readFileSync)(path, "utf-8"));
-    return buildStoredCredentials(parsed, path, warn3);
+    const parsed = JSON.parse((0, import_fs.readFileSync)(path2, "utf-8"));
+    return buildStoredCredentials(parsed, path2, warn3);
   } catch {
     const warn3 = getWarn(options);
     warn3(
-      `Credentials file at ${path} exists but could not be parsed. Delete it and run \`archal login\` to re-authenticate.`
+      `Credentials file at ${path2} exists but could not be parsed. Delete it and run \`archal login\` to re-authenticate.`
     );
     return null;
   }
@@ -31716,11 +31716,11 @@ function saveCredentials(creds) {
   (0, import_fs.renameSync)(tmpPath, credPath);
 }
 function deleteCredentials() {
-  const path = getCredentialsPath();
-  if (!(0, import_fs.existsSync)(path)) {
+  const path2 = getCredentialsPath();
+  if (!(0, import_fs.existsSync)(path2)) {
     return false;
   }
-  (0, import_fs.unlinkSync)(path);
+  (0, import_fs.unlinkSync)(path2);
   return true;
 }
 function getWarn2(options) {
@@ -31807,6 +31807,13 @@ function getConfiguredApiBaseUrl(options) {
   }
   return isStrictEndpointModeEnabled() ? null : HOSTED_DEFAULT_API_BASE_URL;
 }
+function getConfiguredRuntimeBaseUrl(options) {
+  const explicit = readConfiguredUrl(options, "ARCHAL_RUNTIME_URL");
+  if (explicit) {
+    return explicit;
+  }
+  return isStrictEndpointModeEnabled() ? null : HOSTED_DEFAULT_RUNTIME_BASE_URL;
+}
 function buildAuthRequestHeaders(metadata, includeContentType = false) {
   const headers = {};
   if (includeContentType) {
@@ -32150,7 +32157,7 @@ async function revokeCliSession(refreshToken, metadata) {
     debug2(`Session revoke failed (best-effort): ${errorMessage2(error49)}`);
   }
 }
-var import_child_process, import_crypto2, import_fs, import_os, import_path, CREDENTIALS_FILE, CREDENTIALS_KEY_FILE, AUTH_TOKEN_ENV_VAR, TOKEN_ENCRYPTION_PREFIX, CREDENTIALS_MASTER_KEY_ENV_VAR, KEYCHAIN_SERVICE, KEYCHAIN_ACCOUNT, HOSTED_DEFAULT_AUTH_BASE_URL, HOSTED_DEFAULT_API_BASE_URL, STRICT_ENDPOINTS_ENV_VAR, REQUEST_TIMEOUT_MS, ENV_TOKEN_FALLBACK_TTL_SECONDS, AUTH_RETRY_OPTIONS, ExpiredEnvTokenError, KEYCHAIN_COMMAND_TIMEOUT_MS, ARCHAL_DIR_NAME, seededSandboxes;
+var import_child_process, import_crypto2, import_fs, import_os, import_path, CREDENTIALS_FILE, CREDENTIALS_KEY_FILE, AUTH_TOKEN_ENV_VAR, TOKEN_ENCRYPTION_PREFIX, CREDENTIALS_MASTER_KEY_ENV_VAR, KEYCHAIN_SERVICE, KEYCHAIN_ACCOUNT, HOSTED_DEFAULT_AUTH_BASE_URL, HOSTED_DEFAULT_API_BASE_URL, HOSTED_DEFAULT_RUNTIME_BASE_URL, STRICT_ENDPOINTS_ENV_VAR, REQUEST_TIMEOUT_MS, ENV_TOKEN_FALLBACK_TTL_SECONDS, AUTH_RETRY_OPTIONS, ExpiredEnvTokenError, KEYCHAIN_COMMAND_TIMEOUT_MS, ARCHAL_DIR_NAME, seededSandboxes;
 var init_dist3 = __esm({
   "../packages/node-auth/dist/index.js"() {
     "use strict";
@@ -32167,7 +32174,8 @@ var init_dist3 = __esm({
     KEYCHAIN_SERVICE = "archal-cli";
     KEYCHAIN_ACCOUNT = "credentials-master-key";
     HOSTED_DEFAULT_AUTH_BASE_URL = "https://www.archal.ai";
-    HOSTED_DEFAULT_API_BASE_URL = "https://www.archal.ai";
+    HOSTED_DEFAULT_API_BASE_URL = "https://api.archal.ai";
+    HOSTED_DEFAULT_RUNTIME_BASE_URL = "https://api.archal.ai";
     STRICT_ENDPOINTS_ENV_VAR = "ARCHAL_STRICT_ENDPOINTS";
     REQUEST_TIMEOUT_MS = 8e3;
     ENV_TOKEN_FALLBACK_TTL_SECONDS = 24 * 60 * 60;
@@ -32377,6 +32385,9 @@ function getConfiguredAuthBaseUrl2() {
 function getConfiguredApiBaseUrl2() {
   return getConfiguredApiBaseUrl(READ_OPTIONS);
 }
+function getConfiguredRuntimeBaseUrl2() {
+  return getConfiguredRuntimeBaseUrl(READ_OPTIONS);
+}
 var READ_OPTIONS;
 var init_url_resolver = __esm({
   "src/auth/url-resolver.ts"() {
@@ -32598,6 +32609,7 @@ __export(auth_exports, {
   getArchalDir: () => getArchalDir,
   getConfiguredApiBaseUrl: () => getConfiguredApiBaseUrl2,
   getConfiguredAuthBaseUrl: () => getConfiguredAuthBaseUrl2,
+  getConfiguredRuntimeBaseUrl: () => getConfiguredRuntimeBaseUrl2,
   getCredentials: () => getCredentials2,
   getJwtExpiry: () => getJwtExpiry,
   getStoredCredentials: () => getStoredCredentials2,
@@ -32933,13 +32945,13 @@ function resolveBaseUrl(_path) {
     error: "ARCHAL_API_URL is required for API requests when ARCHAL_STRICT_ENDPOINTS=1. Set ARCHAL_API_URL to your API endpoint, or unset ARCHAL_STRICT_ENDPOINTS."
   };
 }
-function isFinalizeEvidencePath(path) {
-  const [pathname] = path.split("?", 1);
+function isFinalizeEvidencePath(path2) {
+  const [pathname] = path2.split("?", 1);
   if (!pathname) return false;
   return /^\/api\/sessions\/[^/]+\/evidence\/finalize$/.test(pathname);
 }
-function isCreateSessionPath(path) {
-  const [pathname] = path.split("?", 1);
+function isCreateSessionPath(path2) {
+  const [pathname] = path2.split("?", 1);
   if (!pathname) return false;
   return pathname === "/api/sessions";
 }
@@ -32988,9 +33000,9 @@ async function tryRefreshToken() {
     return null;
   }
 }
-async function request(method, path, token, body, timeoutOrOptions) {
+async function request(method, path2, token, body, timeoutOrOptions) {
   const options = typeof timeoutOrOptions === "number" ? { timeoutMs: timeoutOrOptions } : timeoutOrOptions ?? {};
-  const baseUrl = resolveBaseUrl(path);
+  const baseUrl = resolveBaseUrl(path2);
   if (!baseUrl.ok) {
     return {
       ok: false,
@@ -32999,7 +33011,7 @@ async function request(method, path, token, body, timeoutOrOptions) {
       code: baseUrl.code
     };
   }
-  const url2 = `${baseUrl.baseUrl}${path}`;
+  const url2 = `${baseUrl.baseUrl}${path2}`;
   const headers = {
     "content-type": "application/json",
     "user-agent": CLI_USER_AGENT,
@@ -33016,8 +33028,8 @@ async function request(method, path, token, body, timeoutOrOptions) {
   if (options.idempotencyKey) {
     headers["x-archal-idempotency-key"] = options.idempotencyKey;
   }
-  const isIdempotentFinalize = method === "POST" && isFinalizeEvidencePath(path);
-  const isIdempotentCreateSession = method === "POST" && isCreateSessionPath(path) && Boolean(options.idempotentPost && options.idempotencyKey);
+  const isIdempotentFinalize = method === "POST" && isFinalizeEvidencePath(path2);
+  const isIdempotentCreateSession = method === "POST" && isCreateSessionPath(path2) && Boolean(options.idempotentPost && options.idempotencyKey);
   const retriesAllowed = method !== "POST" || isIdempotentFinalize || isIdempotentCreateSession;
   const attempts = retriesAllowed ? getMaxRetries() + 1 : 1;
   let lastError = "request failed";
@@ -33044,7 +33056,7 @@ async function request(method, path, token, body, timeoutOrOptions) {
           }
           if (retriesAllowed && !softAuthRetryAttempted && getMaxRetries() > 0 && token) {
             softAuthRetryAttempted = true;
-            debug3(`401 on ${method} ${path}: soft-retrying once after backoff`);
+            debug3(`401 on ${method} ${path2}: soft-retrying once after backoff`);
             await sleep(retryDelayMs(1, response.headers.get("retry-after")));
             attempt -= 1;
             continue;
@@ -34210,7 +34222,7 @@ var init_dist4 = __esm({
   }
 });
 
-// ../packages/seed-codegen-runtime/dist/index.js
+// ../packages/seed-codegen-runtime/dist/chunk-LOUVSGFM.js
 function getMaxId(entities) {
   let max = 0;
   for (const entity of entities) {
@@ -35137,13 +35149,13 @@ function buildGitHubSandbox(context, collector) {
     const repoId = repoRef?._id ?? findFirstRepoId(collector.seed) ?? 1;
     const nextId = getMaxId(collector.seed["workflows"]) + 1;
     const now = /* @__PURE__ */ new Date();
-    const path = opts?.["path"] ?? `.github/workflows/${name.toLowerCase().replace(/\s+/g, "-")}.yml`;
+    const path2 = opts?.["path"] ?? `.github/workflows/${name.toLowerCase().replace(/\s+/g, "-")}.yml`;
     collector.seed["workflows"].push({
       id: nextId,
       repoId,
       nodeId: generateNodeId("W", nextId),
       name,
-      path,
+      path: path2,
       state: opts?.["state"] ?? "active",
       htmlUrl: "",
       badgeUrl: "",
@@ -36120,7 +36132,7 @@ function buildGitHubSandbox(context, collector) {
     });
     return makeRef("environments", nextId, name);
   };
-  context["createFileEntry"] = (repoRef, path, content, opts) => {
+  context["createFileEntry"] = (repoRef, path2, content, opts) => {
     if (!collector.seed["files"]) collector.seed["files"] = [];
     const repoId = repoRef?._id ?? findFirstRepoId(collector.seed) ?? 1;
     const nextId = getMaxId(collector.seed["files"]) + 1;
@@ -36129,7 +36141,7 @@ function buildGitHubSandbox(context, collector) {
       id: nextId,
       repoId,
       branchName: opts?.["branchName"] ?? "main",
-      path,
+      path: path2,
       content,
       encoding: opts?.["encoding"] ?? "utf-8",
       sha: generateSha(),
@@ -36138,7 +36150,7 @@ function buildGitHubSandbox(context, collector) {
       createdAt: now.toISOString(),
       updatedAt: now.toISOString()
     });
-    return makeRef("files", nextId, path);
+    return makeRef("files", nextId, path2);
   };
   context["createFollower"] = (userLogin, followerLogin) => {
     if (!collector.seed["followers"]) collector.seed["followers"] = [];
@@ -36726,7 +36738,7 @@ function buildGitHubSandbox(context, collector) {
     });
     return makeRef("projectCards", nextId);
   };
-  context["createPullRequestReviewThread"] = (repoRef, pullRequestNumber, path, opts) => {
+  context["createPullRequestReviewThread"] = (repoRef, pullRequestNumber, path2, opts) => {
     if (!collector.seed["pullRequestReviewThreads"]) collector.seed["pullRequestReviewThreads"] = [];
     const repoId = repoRef?._id ?? findFirstRepoId(collector.seed) ?? 1;
     const nextId = getMaxId(collector.seed["pullRequestReviewThreads"]) + 1;
@@ -36745,7 +36757,7 @@ function buildGitHubSandbox(context, collector) {
       startSide: opts?.["startSide"] ?? "RIGHT",
       side: opts?.["side"] ?? "RIGHT",
       diffSide: opts?.["diffSide"] ?? "RIGHT",
-      path,
+      path: path2,
       createdAt: now.toISOString(),
       updatedAt: now.toISOString()
     });
@@ -43637,6 +43649,204 @@ function buildSandboxContext(collector, twinName) {
   }
   return context;
 }
+var MS_PER_DAY, ISSUE_TITLES, ISSUE_BODIES, PR_TITLES, CHANNEL_PURPOSES, MESSAGE_TEXTS, DEFAULT_REACTIONS, MAX_BULK_COUNT, SeedCollector, TWIN_CONTEXT_BUILDERS;
+var init_chunk_LOUVSGFM = __esm({
+  "../packages/seed-codegen-runtime/dist/chunk-LOUVSGFM.js"() {
+    "use strict";
+    MS_PER_DAY = 864e5;
+    ISSUE_TITLES = [
+      "Fix login redirect loop on Safari",
+      "Add dark mode support to settings page",
+      "Rate limiter returns 500 instead of 429",
+      "Memory leak in WebSocket connection manager",
+      "Dropdown menus do not close on mobile",
+      "Search results do not highlight matching terms",
+      "File upload fails silently for large files",
+      "Add CSV export to analytics dashboard",
+      "Implement bulk actions for notifications",
+      "GraphQL query returns stale cached data",
+      "Table component lacks keyboard navigation",
+      "Create onboarding tutorial for new members",
+      "API response times degrade for large date ranges",
+      "Add two-factor authentication for admin accounts",
+      "Deprecated crypto API warnings in test suite",
+      "Evaluate replacing Moment.js with date-fns",
+      "Broken tooltip positioning on Safari 17",
+      "Login page shows blank screen on slow 3G",
+      "Intermittent 502 errors on reports endpoint",
+      "Tracking: migrate auth from cookies to JWT",
+      "Roadmap: accessibility audit and WCAG compliance",
+      "Upgrade Node.js runtime from 18 to 20 LTS",
+      "Refactor database connection pool configuration",
+      "Add retry logic for third-party API calls",
+      "Improve error messages for form validation",
+      "Pagination breaks when filtering by status",
+      "Email notification templates are not responsive",
+      "CI pipeline takes 45 minutes on large PRs",
+      "Localization support for date and number formats",
+      "Dashboard widgets do not resize on mobile"
+    ];
+    ISSUE_BODIES = [
+      "This has been reported multiple times by users. Needs investigation and a fix.",
+      "No one has started working on this yet. Low priority but would improve UX.",
+      "This is affecting production traffic. We need to address this soon.",
+      "Users have requested this feature multiple times. Would be a nice enhancement.",
+      "This is a long-running tracking issue. Should remain open for visibility.",
+      "Repro steps: 1) Open the app 2) Navigate to settings 3) Observe the issue.",
+      "This blocks other work. Please prioritize.",
+      "Nice to have. Not urgent but would reduce tech debt."
+    ];
+    PR_TITLES = [
+      "Fix null check in JWT validation",
+      "Add pagination to search results",
+      "Refactor database connection pooling",
+      "Update dependencies to latest versions",
+      "Improve error handling in API middleware",
+      "Add unit tests for auth module",
+      "Fix race condition in WebSocket handler",
+      "Migrate CSS to custom properties for theming"
+    ];
+    CHANNEL_PURPOSES = [
+      "General discussion",
+      "Engineering team updates",
+      "Product announcements",
+      "Customer support escalations",
+      "Random fun stuff",
+      "Incident response",
+      "Design feedback",
+      "Deploy notifications"
+    ];
+    MESSAGE_TEXTS = [
+      "Hey team, just a heads up about the deploy today.",
+      "Can someone review my PR? It's been open for a while.",
+      "The CI pipeline is green again after the fix.",
+      "Meeting notes from today's standup are in the doc.",
+      "Has anyone seen this error before? Getting a 502 intermittently.",
+      "Thanks for the quick turnaround on that bug fix!",
+      "Reminder: retro is at 3pm today.",
+      "I pushed a hotfix for the login issue. Please verify."
+    ];
+    DEFAULT_REACTIONS = {
+      totalCount: 0,
+      plusOne: 0,
+      minusOne: 0,
+      laugh: 0,
+      hooray: 0,
+      confused: 0,
+      heart: 0,
+      rocket: 0,
+      eyes: 0
+    };
+    MAX_BULK_COUNT = 1e3;
+    SeedCollector = class {
+      seed;
+      warnings = [];
+      twinName;
+      now;
+      constructor(twinName, baseSeed) {
+        this.seed = structuredClone(baseSeed);
+        this.twinName = twinName;
+        this.now = /* @__PURE__ */ new Date();
+      }
+      /** Create a single identity entity (user, repo, workspace, etc.). */
+      createIdentity(collection, fields) {
+        if (!this.seed[collection]) this.seed[collection] = [];
+        const existing = this.seed[collection].find((entity2) => {
+          for (const [key, value] of Object.entries(fields)) {
+            if (entity2[key] !== value) return false;
+          }
+          return true;
+        });
+        if (existing) {
+          return makeRef(
+            collection,
+            existing["id"],
+            fields["name"] ?? fields["login"]
+          );
+        }
+        const nextId = getMaxId(this.seed[collection]) + 1;
+        const nowStr = this.now.toISOString();
+        const entity = {
+          id: nextId,
+          ...fields,
+          createdAt: nowStr,
+          updatedAt: nowStr
+        };
+        fillDefaults(entity, collection);
+        this.seed[collection].push(entity);
+        return makeRef(collection, nextId, fields["name"] ?? fields["login"]);
+      }
+      /** Create N entities in a collection with shared properties. */
+      createBulk(collection, count, properties) {
+        if (!this.seed[collection]) this.seed[collection] = [];
+        const safeCount = Math.min(count, MAX_BULK_COUNT);
+        if (safeCount < count) {
+          this.warnings.push(
+            `createBulk: count ${count} capped at ${MAX_BULK_COUNT} for "${collection}"`
+          );
+        }
+        for (let i = 0; i < safeCount; i++) {
+          const nextId = getMaxId(this.seed[collection]) + 1;
+          const temporal = resolveTemporalProperties(properties, this.now);
+          const entity = this.buildEntity(collection, nextId, properties, i, temporal);
+          this.seed[collection].push(entity);
+        }
+      }
+      /** Push a single pre-built entity directly into a collection. */
+      pushEntity(collection, entity) {
+        if (!this.seed[collection]) this.seed[collection] = [];
+        const stored = entity["id"] === void 0 ? { id: getMaxId(this.seed[collection]) + 1, ...entity } : entity;
+        this.seed[collection].push(stored);
+      }
+      /** Clear a collection (blueprint-style replacement). */
+      clearCollection(collection) {
+        if (this.seed[collection]) {
+          this.seed[collection] = [];
+        }
+      }
+      buildEntity(collection, id, props, index, temporal) {
+        if (this.twinName === "github")
+          return buildGitHubEntity(collection, id, props, this.seed, index, temporal);
+        if (this.twinName === "slack")
+          return buildSlackEntity(collection, id, props, this.seed, index, temporal);
+        if (this.twinName === "linear")
+          return buildLinearEntity(collection, id, props, this.seed, index, temporal);
+        if (this.twinName === "stripe")
+          return buildStripeEntity(collection, id, props, this.seed, index, temporal);
+        if (this.twinName === "jira")
+          return buildJiraEntity(collection, id, props, this.seed, index, temporal);
+        return { id, ...props, createdAt: temporal.createdAt, updatedAt: temporal.updatedAt };
+      }
+      /** Compute a synthetic patch (add-only) from base → built seed. */
+      computePatch(baseSeed) {
+        const add = {};
+        for (const [collection, entities] of Object.entries(this.seed)) {
+          const baseEntities = baseSeed[collection] ?? [];
+          const baseIds = new Set(baseEntities.map((e) => e["id"]));
+          const newEntities = entities.filter(
+            (e) => !baseIds.has(e["id"])
+          );
+          if (newEntities.length > 0) {
+            add[collection] = newEntities;
+          }
+        }
+        return { add };
+      }
+    };
+    TWIN_CONTEXT_BUILDERS = {
+      github: buildGitHubSandbox,
+      slack: buildSlackSandbox,
+      linear: buildLinearSandbox,
+      stripe: buildStripeSandbox,
+      jira: buildJiraSandbox,
+      supabase: buildSupabaseSandbox,
+      "google-workspace": buildGoogleWorkspaceSandbox,
+      ramp: buildRampSandbox
+    };
+  }
+});
+
+// ../packages/seed-codegen-runtime/dist/index.js
 function checkStaticSafety(code) {
   const match = FORBIDDEN_PATTERN.exec(code);
   if (match) {
@@ -44471,204 +44681,18 @@ function augmentPlanFromDescription(plan, description, twinName) {
     planTypes.add(rule.type);
   }
 }
-var import_vm, MS_PER_DAY, ISSUE_TITLES, ISSUE_BODIES, PR_TITLES, CHANNEL_PURPOSES, MESSAGE_TEXTS, DEFAULT_REACTIONS, MAX_BULK_COUNT, SeedCollector, TWIN_CONTEXT_BUILDERS, FORBIDDEN_PATTERN, OBFUSCATION_PATTERNS, DEFAULT_TIMEOUT_MS2, SDK_DECLARATIONS, SDK_EXAMPLES, CODEGEN_SYSTEM_PROMPT, GEMINI_API_BASE_URL2, ANTHROPIC_API_URL2, OPENAI_API_URL2, ANTHROPIC_API_VERSION2, MANAGED_SEED_TIMEOUT_MS, DIRECT_SEED_TIMEOUT_MS, ERROR_BODY_PREVIEW_LENGTH3, RETRYABLE_STATUS_CODES3, MAX_RETRIES2, INITIAL_BACKOFF_MS2, MAX_JITTER_MS2, SeedLlmApiError, PLAN_SYSTEM_PROMPT, ENTITY_TYPE_TO_COLLECTION;
+var import_url, import_path2, import_vm, import_meta2, FORBIDDEN_PATTERN, OBFUSCATION_PATTERNS, DEFAULT_TIMEOUT_MS2, workerScriptPath, SDK_DECLARATIONS, SDK_EXAMPLES, CODEGEN_SYSTEM_PROMPT, GEMINI_API_BASE_URL2, ANTHROPIC_API_URL2, OPENAI_API_URL2, ANTHROPIC_API_VERSION2, MANAGED_SEED_TIMEOUT_MS, DIRECT_SEED_TIMEOUT_MS, ERROR_BODY_PREVIEW_LENGTH3, RETRYABLE_STATUS_CODES3, MAX_RETRIES2, INITIAL_BACKOFF_MS2, MAX_JITTER_MS2, SeedLlmApiError, PLAN_SYSTEM_PROMPT, ENTITY_TYPE_TO_COLLECTION;
 var init_dist5 = __esm({
   "../packages/seed-codegen-runtime/dist/index.js"() {
     "use strict";
+    init_chunk_LOUVSGFM();
+    import_url = require("url");
+    import_path2 = __toESM(require("path"), 1);
     import_vm = __toESM(require("vm"), 1);
     init_dist2();
     init_dist2();
     init_dist3();
-    MS_PER_DAY = 864e5;
-    ISSUE_TITLES = [
-      "Fix login redirect loop on Safari",
-      "Add dark mode support to settings page",
-      "Rate limiter returns 500 instead of 429",
-      "Memory leak in WebSocket connection manager",
-      "Dropdown menus do not close on mobile",
-      "Search results do not highlight matching terms",
-      "File upload fails silently for large files",
-      "Add CSV export to analytics dashboard",
-      "Implement bulk actions for notifications",
-      "GraphQL query returns stale cached data",
-      "Table component lacks keyboard navigation",
-      "Create onboarding tutorial for new members",
-      "API response times degrade for large date ranges",
-      "Add two-factor authentication for admin accounts",
-      "Deprecated crypto API warnings in test suite",
-      "Evaluate replacing Moment.js with date-fns",
-      "Broken tooltip positioning on Safari 17",
-      "Login page shows blank screen on slow 3G",
-      "Intermittent 502 errors on reports endpoint",
-      "Tracking: migrate auth from cookies to JWT",
-      "Roadmap: accessibility audit and WCAG compliance",
-      "Upgrade Node.js runtime from 18 to 20 LTS",
-      "Refactor database connection pool configuration",
-      "Add retry logic for third-party API calls",
-      "Improve error messages for form validation",
-      "Pagination breaks when filtering by status",
-      "Email notification templates are not responsive",
-      "CI pipeline takes 45 minutes on large PRs",
-      "Localization support for date and number formats",
-      "Dashboard widgets do not resize on mobile"
-    ];
-    ISSUE_BODIES = [
-      "This has been reported multiple times by users. Needs investigation and a fix.",
-      "No one has started working on this yet. Low priority but would improve UX.",
-      "This is affecting production traffic. We need to address this soon.",
-      "Users have requested this feature multiple times. Would be a nice enhancement.",
-      "This is a long-running tracking issue. Should remain open for visibility.",
-      "Repro steps: 1) Open the app 2) Navigate to settings 3) Observe the issue.",
-      "This blocks other work. Please prioritize.",
-      "Nice to have. Not urgent but would reduce tech debt."
-    ];
-    PR_TITLES = [
-      "Fix null check in JWT validation",
-      "Add pagination to search results",
-      "Refactor database connection pooling",
-      "Update dependencies to latest versions",
-      "Improve error handling in API middleware",
-      "Add unit tests for auth module",
-      "Fix race condition in WebSocket handler",
-      "Migrate CSS to custom properties for theming"
-    ];
-    CHANNEL_PURPOSES = [
-      "General discussion",
-      "Engineering team updates",
-      "Product announcements",
-      "Customer support escalations",
-      "Random fun stuff",
-      "Incident response",
-      "Design feedback",
-      "Deploy notifications"
-    ];
-    MESSAGE_TEXTS = [
-      "Hey team, just a heads up about the deploy today.",
-      "Can someone review my PR? It's been open for a while.",
-      "The CI pipeline is green again after the fix.",
-      "Meeting notes from today's standup are in the doc.",
-      "Has anyone seen this error before? Getting a 502 intermittently.",
-      "Thanks for the quick turnaround on that bug fix!",
-      "Reminder: retro is at 3pm today.",
-      "I pushed a hotfix for the login issue. Please verify."
-    ];
-    DEFAULT_REACTIONS = {
-      totalCount: 0,
-      plusOne: 0,
-      minusOne: 0,
-      laugh: 0,
-      hooray: 0,
-      confused: 0,
-      heart: 0,
-      rocket: 0,
-      eyes: 0
-    };
-    MAX_BULK_COUNT = 1e3;
-    SeedCollector = class {
-      seed;
-      warnings = [];
-      twinName;
-      now;
-      constructor(twinName, baseSeed) {
-        this.seed = structuredClone(baseSeed);
-        this.twinName = twinName;
-        this.now = /* @__PURE__ */ new Date();
-      }
-      /** Create a single identity entity (user, repo, workspace, etc.). */
-      createIdentity(collection, fields) {
-        if (!this.seed[collection]) this.seed[collection] = [];
-        const existing = this.seed[collection].find((entity2) => {
-          for (const [key, value] of Object.entries(fields)) {
-            if (entity2[key] !== value) return false;
-          }
-          return true;
-        });
-        if (existing) {
-          return makeRef(
-            collection,
-            existing["id"],
-            fields["name"] ?? fields["login"]
-          );
-        }
-        const nextId = getMaxId(this.seed[collection]) + 1;
-        const nowStr = this.now.toISOString();
-        const entity = {
-          id: nextId,
-          ...fields,
-          createdAt: nowStr,
-          updatedAt: nowStr
-        };
-        fillDefaults(entity, collection);
-        this.seed[collection].push(entity);
-        return makeRef(collection, nextId, fields["name"] ?? fields["login"]);
-      }
-      /** Create N entities in a collection with shared properties. */
-      createBulk(collection, count, properties) {
-        if (!this.seed[collection]) this.seed[collection] = [];
-        const safeCount = Math.min(count, MAX_BULK_COUNT);
-        if (safeCount < count) {
-          this.warnings.push(
-            `createBulk: count ${count} capped at ${MAX_BULK_COUNT} for "${collection}"`
-          );
-        }
-        for (let i = 0; i < safeCount; i++) {
-          const nextId = getMaxId(this.seed[collection]) + 1;
-          const temporal = resolveTemporalProperties(properties, this.now);
-          const entity = this.buildEntity(collection, nextId, properties, i, temporal);
-          this.seed[collection].push(entity);
-        }
-      }
-      /** Push a single pre-built entity directly into a collection. */
-      pushEntity(collection, entity) {
-        if (!this.seed[collection]) this.seed[collection] = [];
-        const stored = entity["id"] === void 0 ? { id: getMaxId(this.seed[collection]) + 1, ...entity } : entity;
-        this.seed[collection].push(stored);
-      }
-      /** Clear a collection (blueprint-style replacement). */
-      clearCollection(collection) {
-        if (this.seed[collection]) {
-          this.seed[collection] = [];
-        }
-      }
-      buildEntity(collection, id, props, index, temporal) {
-        if (this.twinName === "github")
-          return buildGitHubEntity(collection, id, props, this.seed, index, temporal);
-        if (this.twinName === "slack")
-          return buildSlackEntity(collection, id, props, this.seed, index, temporal);
-        if (this.twinName === "linear")
-          return buildLinearEntity(collection, id, props, this.seed, index, temporal);
-        if (this.twinName === "stripe")
-          return buildStripeEntity(collection, id, props, this.seed, index, temporal);
-        if (this.twinName === "jira")
-          return buildJiraEntity(collection, id, props, this.seed, index, temporal);
-        return { id, ...props, createdAt: temporal.createdAt, updatedAt: temporal.updatedAt };
-      }
-      /** Compute a synthetic patch (add-only) from base → built seed. */
-      computePatch(baseSeed) {
-        const add = {};
-        for (const [collection, entities] of Object.entries(this.seed)) {
-          const baseEntities = baseSeed[collection] ?? [];
-          const baseIds = new Set(baseEntities.map((e) => e["id"]));
-          const newEntities = entities.filter(
-            (e) => !baseIds.has(e["id"])
-          );
-          if (newEntities.length > 0) {
-            add[collection] = newEntities;
-          }
-        }
-        return { add };
-      }
-    };
-    TWIN_CONTEXT_BUILDERS = {
-      github: buildGitHubSandbox,
-      slack: buildSlackSandbox,
-      linear: buildLinearSandbox,
-      stripe: buildStripeSandbox,
-      jira: buildJiraSandbox,
-      supabase: buildSupabaseSandbox,
-      "google-workspace": buildGoogleWorkspaceSandbox,
-      ramp: buildRampSandbox
-    };
+    import_meta2 = {};
     FORBIDDEN_PATTERN = /\b(require|process|globalThis|eval|Function|constructor|__proto__|Reflect|Proxy|import)\s*[([.`]/;
     OBFUSCATION_PATTERNS = [
       /\[\s*['"`](?:constructor|__proto__|prototype)['"` ]/,
@@ -44685,6 +44709,12 @@ var init_dist5 = __esm({
       // Symbol-based property access
     ];
     DEFAULT_TIMEOUT_MS2 = 5e3;
+    try {
+      const thisDir = import_path2.default.dirname((0, import_url.fileURLToPath)(import_meta2.url));
+      workerScriptPath = import_path2.default.join(thisDir, "subprocess-worker.js");
+    } catch {
+      workerScriptPath = void 0;
+    }
     SDK_DECLARATIONS = {
       github: `// GitHub Seed Builder SDK
 // All functions return opaque Ref handles. Use them to link entities.
@@ -52416,13 +52446,13 @@ function applyEnrichments(seed, response) {
 function buildFewShotExample(twinName) {
   try {
     const fs = require("fs");
-    const path = require("path");
-    const seedsDir = path.resolve("twins", twinName, "seeds");
+    const path2 = require("path");
+    const seedsDir = path2.resolve("twins", twinName, "seeds");
     if (!fs.existsSync(seedsDir)) return "";
     const files = fs.readdirSync(seedsDir).filter((f) => f.endsWith(".json") && f !== "empty.json");
     if (files.length === 0) return "";
     const firstFile = files[0] ?? "";
-    const seedData = JSON.parse(fs.readFileSync(path.join(seedsDir, firstFile), "utf-8"));
+    const seedData = JSON.parse(fs.readFileSync(path2.join(seedsDir, firstFile), "utf-8"));
     for (const [col, entities] of Object.entries(seedData)) {
       if (Array.isArray(entities) && entities.length > 0 && typeof entities[0] === "object") {
         const example = JSON.stringify(entities[0]).slice(0, 500);
@@ -54395,23 +54425,23 @@ __export(dist_exports, {
 function isStringRecord(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
-function readPackageJson(path) {
-  if (!(0, import_fs2.existsSync)(path)) return void 0;
-  const content = (0, import_fs2.readFileSync)(path, "utf-8");
+function readPackageJson(path2) {
+  if (!(0, import_fs2.existsSync)(path2)) return void 0;
+  const content = (0, import_fs2.readFileSync)(path2, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(content);
   } catch {
     throw new DockerfileError(
       "invalid_path",
-      `Failed to parse ${path.split("/").pop()}: invalid JSON`,
+      `Failed to parse ${path2.split("/").pop()}: invalid JSON`,
       "Fix the JSON syntax error in the file and try again."
     );
   }
   if (typeof parsed !== "object" || parsed === null) {
     throw new DockerfileError(
       "invalid_path",
-      `${path.split("/").pop()} is not a JSON object`,
+      `${path2.split("/").pop()} is not a JSON object`,
       "Fix the JSON syntax error in the file and try again."
     );
   }
@@ -54422,7 +54452,7 @@ function readPackageJson(path) {
   };
 }
 function hasFile(repoPath, relativePath) {
-  return (0, import_fs2.existsSync)((0, import_path2.join)(repoPath, relativePath));
+  return (0, import_fs2.existsSync)((0, import_path3.join)(repoPath, relativePath));
 }
 function quoteJsonCommand(parts) {
   return `[${parts.map((part) => JSON.stringify(part)).join(", ")}]`;
@@ -54478,7 +54508,7 @@ function resolveNodeLaunchCommand(repoPath, pkg, packageManager) {
   return void 0;
 }
 function maybeGenerateNodeDockerfile(repoPath) {
-  const packageJsonPath = (0, import_path2.join)(repoPath, "package.json");
+  const packageJsonPath = (0, import_path3.join)(repoPath, "package.json");
   const pkg = readPackageJson(packageJsonPath);
   if (!pkg) return void 0;
   const packageManager = detectPackageManager(pkg, repoPath);
@@ -54506,12 +54536,12 @@ function maybeGenerateNodeDockerfile(repoPath) {
   };
 }
 function maybeGenerateSharedLibNodeDockerfile(repoPath) {
-  const packageJsonPath = (0, import_path2.join)(repoPath, "package.json");
+  const packageJsonPath = (0, import_path3.join)(repoPath, "package.json");
   const pkg = readPackageJson(packageJsonPath);
   if (!pkg) return void 0;
-  const harnessDirName = (0, import_path2.basename)(repoPath);
-  const parentDir = (0, import_path2.dirname)(repoPath);
-  const sharedLibDir = (0, import_path2.join)(parentDir, "_lib");
+  const harnessDirName = (0, import_path3.basename)(repoPath);
+  const parentDir = (0, import_path3.dirname)(repoPath);
+  const sharedLibDir = (0, import_path3.join)(parentDir, "_lib");
   if (!(0, import_fs2.existsSync)(sharedLibDir)) return void 0;
   let hasSharedLibFiles;
   try {
@@ -54626,7 +54656,7 @@ function generateDockerfile(repoPath) {
 }
 function resolveExplicitDockerfile(repoPath, rawPath) {
   const trimmed = rawPath.trim();
-  const dockerfilePath = (0, import_path2.resolve)(repoPath, trimmed);
+  const dockerfilePath = (0, import_path3.resolve)(repoPath, trimmed);
   if (!(0, import_fs2.existsSync)(dockerfilePath) || !(0, import_fs2.statSync)(dockerfilePath).isFile()) {
     throw new DockerfileError(
       "invalid_path",
@@ -54637,7 +54667,7 @@ function resolveExplicitDockerfile(repoPath, rawPath) {
   return dockerfilePath;
 }
 function resolveDockerfile(repoPathInput, options) {
-  const repoPath = (0, import_path2.resolve)(repoPathInput);
+  const repoPath = (0, import_path3.resolve)(repoPathInput);
   if (options?.explicitDockerfile?.trim()) {
     const dockerfilePath = resolveExplicitDockerfile(repoPath, options.explicitDockerfile);
     return {
@@ -54647,7 +54677,7 @@ function resolveDockerfile(repoPathInput, options) {
       summary: `using explicit Dockerfile ${dockerfilePath}`
     };
   }
-  const rootDockerfile = (0, import_path2.join)(repoPath, "Dockerfile");
+  const rootDockerfile = (0, import_path3.join)(repoPath, "Dockerfile");
   if ((0, import_fs2.existsSync)(rootDockerfile) && (0, import_fs2.statSync)(rootDockerfile).isFile()) {
     return {
       source: "existing",
@@ -54671,7 +54701,7 @@ function resolveDockerfile(repoPathInput, options) {
       "Pass a generatedDockerfilePath to resolveDockerfile."
     );
   }
-  const generatedPath = (0, import_path2.resolve)(options.generatedDockerfilePath);
+  const generatedPath = (0, import_path3.resolve)(options.generatedDockerfilePath);
   (0, import_fs2.writeFileSync)(generatedPath, generated.contents, "utf-8");
   return {
     source: "generated",
@@ -54687,9 +54717,9 @@ function generateCertAuthority() {
   });
   const certPem = generateSelfSignedCert(publicKey, privateKey, CA_COMMON_NAME, true);
   const keyPem = privateKey.export({ type: "pkcs8", format: "pem" });
-  const dir = (0, import_fs4.mkdtempSync)((0, import_path4.join)((0, import_os3.tmpdir)(), "archal-sandbox-ca-"));
-  const certPath = (0, import_path4.join)(dir, "ca.crt");
-  const keyPath = (0, import_path4.join)(dir, "ca.key");
+  const dir = (0, import_fs4.mkdtempSync)((0, import_path5.join)((0, import_os3.tmpdir)(), "archal-sandbox-ca-"));
+  const certPath = (0, import_path5.join)(dir, "ca.crt");
+  const keyPath = (0, import_path5.join)(dir, "ca.key");
   (0, import_fs4.writeFileSync)(certPath, certPem);
   (0, import_fs4.writeFileSync)(keyPath, keyPem);
   return { certPem, keyPem, certPath, keyPath, dir };
@@ -55402,8 +55432,8 @@ function extractInlineArg(query, name) {
   const match = query.match(regex);
   return match?.[1];
 }
-function forwardToCloudTwin(clientReq, clientRes, targetBaseUrl, path, authHeaders, injectResponseHeaders) {
-  const target = resolveForwardTarget(targetBaseUrl, path);
+function forwardToCloudTwin(clientReq, clientRes, targetBaseUrl, path2, authHeaders, injectResponseHeaders) {
+  const target = resolveForwardTarget(targetBaseUrl, path2);
   const isHttps = target.protocol === "https:";
   const requestFn = isHttps ? import_https.request : import_http.request;
   const headers = {
@@ -55633,27 +55663,27 @@ function formatExecError(err) {
   return String(err);
 }
 function resolveLocalSandboxBuildTarget() {
-  const moduleDir = typeof import_meta3?.url === "string" ? (0, import_path5.dirname)((0, import_url.fileURLToPath)(import_meta3.url)) : typeof __dirname === "string" ? __dirname : process.cwd();
+  const moduleDir = typeof import_meta4?.url === "string" ? (0, import_path6.dirname)((0, import_url2.fileURLToPath)(import_meta4.url)) : typeof __dirname === "string" ? __dirname : process.cwd();
   const candidates = [
     {
-      dockerfile: (0, import_path5.resolve)(process.cwd(), "packages/sandbox-runtime/docker/sandbox/Dockerfile"),
-      contextDir: (0, import_path5.resolve)(process.cwd(), "packages/sandbox-runtime")
+      dockerfile: (0, import_path6.resolve)(process.cwd(), "packages/sandbox-runtime/docker/sandbox/Dockerfile"),
+      contextDir: (0, import_path6.resolve)(process.cwd(), "packages/sandbox-runtime")
     },
     {
-      dockerfile: (0, import_path5.resolve)(process.cwd(), "cli/docker/sandbox/Dockerfile"),
-      contextDir: (0, import_path5.resolve)(process.cwd(), "cli")
+      dockerfile: (0, import_path6.resolve)(process.cwd(), "cli/docker/sandbox/Dockerfile"),
+      contextDir: (0, import_path6.resolve)(process.cwd(), "cli")
     },
     {
-      dockerfile: (0, import_path5.resolve)(process.cwd(), "docker/sandbox/Dockerfile"),
+      dockerfile: (0, import_path6.resolve)(process.cwd(), "docker/sandbox/Dockerfile"),
       contextDir: process.cwd()
     },
     {
-      dockerfile: (0, import_path5.resolve)(moduleDir, "../docker/sandbox/Dockerfile"),
-      contextDir: (0, import_path5.resolve)(moduleDir, "..")
+      dockerfile: (0, import_path6.resolve)(moduleDir, "../docker/sandbox/Dockerfile"),
+      contextDir: (0, import_path6.resolve)(moduleDir, "..")
     },
     {
-      dockerfile: (0, import_path5.resolve)(moduleDir, "../../docker/sandbox/Dockerfile"),
-      contextDir: (0, import_path5.resolve)(moduleDir, "../..")
+      dockerfile: (0, import_path6.resolve)(moduleDir, "../../docker/sandbox/Dockerfile"),
+      contextDir: (0, import_path6.resolve)(moduleDir, "../..")
     }
   ];
   return candidates.find((candidate) => (0, import_fs5.existsSync)(candidate.dockerfile));
@@ -55661,15 +55691,15 @@ function resolveLocalSandboxBuildTarget() {
 function getSandboxRuntimeDependencyPaths(target) {
   return [
     target.dockerfile,
-    (0, import_path5.resolve)(target.contextDir, "docker/sandbox/entrypoint.sh"),
-    (0, import_path5.resolve)(target.contextDir, "src/sandbox/proxy-entry.ts"),
-    (0, import_path5.resolve)(target.contextDir, "src/sandbox/proxy.ts"),
-    (0, import_path5.resolve)(target.contextDir, "src/sandbox/twins.ts"),
-    (0, import_path5.resolve)(target.contextDir, "src/sandbox/certs.ts")
-  ].filter((path) => (0, import_fs5.existsSync)(path));
+    (0, import_path6.resolve)(target.contextDir, "docker/sandbox/entrypoint.sh"),
+    (0, import_path6.resolve)(target.contextDir, "src/sandbox/proxy-entry.ts"),
+    (0, import_path6.resolve)(target.contextDir, "src/sandbox/proxy.ts"),
+    (0, import_path6.resolve)(target.contextDir, "src/sandbox/twins.ts"),
+    (0, import_path6.resolve)(target.contextDir, "src/sandbox/certs.ts")
+  ].filter((path2) => (0, import_fs5.existsSync)(path2));
 }
 function getNewestSandboxRuntimeMtimeMs(target) {
-  return getSandboxRuntimeDependencyPaths(target).map((path) => (0, import_fs5.statSync)(path).mtimeMs).reduce((max, mtimeMs) => Math.max(max, mtimeMs), 0);
+  return getSandboxRuntimeDependencyPaths(target).map((path2) => (0, import_fs5.statSync)(path2).mtimeMs).reduce((max, mtimeMs) => Math.max(max, mtimeMs), 0);
 }
 function getLocalImageCreatedAtMs(image) {
   try {
@@ -55766,8 +55796,8 @@ async function ensureSandboxImage(image, openclawVersion) {
 }
 function launchSandbox(config2) {
   const image = config2.image ?? DEFAULT_SANDBOX_IMAGE;
-  const artifactsDir = (0, import_fs5.mkdtempSync)((0, import_path5.join)((0, import_os4.tmpdir)(), "archal-sandbox-"));
-  const proxyEventsHostPath = (0, import_path5.join)(artifactsDir, "proxy-events.ndjson");
+  const artifactsDir = (0, import_fs5.mkdtempSync)((0, import_path6.join)((0, import_os4.tmpdir)(), "archal-sandbox-"));
+  const proxyEventsHostPath = (0, import_path6.join)(artifactsDir, "proxy-events.ndjson");
   const proxyEventsContainerPath = "/archal-artifacts/proxy-events.ndjson";
   const mounts = [];
   mounts.push("-v", `${artifactsDir}:/archal-artifacts`);
@@ -55868,9 +55898,9 @@ function spawnWithTimeout2(command, args, timeoutMs, artifacts) {
     });
   });
 }
-function readProxyEvents(path) {
+function readProxyEvents(path2) {
   try {
-    const raw = (0, import_fs5.readFileSync)(path, "utf8").trim();
+    const raw = (0, import_fs5.readFileSync)(path2, "utf8").trim();
     if (!raw) return [];
     return raw.split("\n").map((line) => {
       try {
@@ -56072,7 +56102,7 @@ function writeMountedConfigFiles(dir, cloudTwinUrls, authToken, caPath) {
       example: 'mcp__github__list_issues -> POST github-url/tools/call with { "name": "list_issues", "arguments": {} }'
     }
   };
-  (0, import_fs3.writeFileSync)((0, import_path3.join)(dir, "rest-config.json"), JSON.stringify(restConfig, null, 2) + "\n", "utf-8");
+  (0, import_fs3.writeFileSync)((0, import_path4.join)(dir, "rest-config.json"), JSON.stringify(restConfig, null, 2) + "\n", "utf-8");
   const mcpServers = {};
   for (const [twinName, baseUrl] of Object.entries(cloudTwinUrls)) {
     const trimmed = baseUrl.trim().replace(/\/+$/, "");
@@ -56082,9 +56112,9 @@ function writeMountedConfigFiles(dir, cloudTwinUrls, authToken, caPath) {
       headers: { Authorization: `Bearer ${authToken}` }
     };
   }
-  (0, import_fs3.writeFileSync)((0, import_path3.join)(dir, "mcp-config.json"), JSON.stringify({ mcpServers }, null, 2) + "\n", "utf-8");
-  (0, import_fs3.writeFileSync)((0, import_path3.join)(dir, "mcp-servers.json"), JSON.stringify(mcpServers), "utf-8");
-  (0, import_fs3.writeFileSync)((0, import_path3.join)(dir, "ca.crt"), (0, import_fs3.readFileSync)(caPath, "utf-8"), "utf-8");
+  (0, import_fs3.writeFileSync)((0, import_path4.join)(dir, "mcp-config.json"), JSON.stringify({ mcpServers }, null, 2) + "\n", "utf-8");
+  (0, import_fs3.writeFileSync)((0, import_path4.join)(dir, "mcp-servers.json"), JSON.stringify(mcpServers), "utf-8");
+  (0, import_fs3.writeFileSync)((0, import_path4.join)(dir, "ca.crt"), (0, import_fs3.readFileSync)(caPath, "utf-8"), "utf-8");
 }
 async function ensurePreparedImage(repoPath, dockerfilePath, image, timeoutMs) {
   const buildArgs = ["build", "-f", dockerfilePath, "-t", image, repoPath];
@@ -56107,12 +56137,12 @@ async function cleanupDockerImage(imageName) {
   await runDockerCommand(["image", "rm", "-f", imageName], 1e4);
 }
 async function buildDockerHarnessImage(repoPath, dockerfilePath, timeoutMs) {
-  const resolvedRepoPath = (0, import_path3.resolve)(repoPath);
+  const resolvedRepoPath = (0, import_path4.resolve)(repoPath);
   const dockerIdSuffix = `${Date.now().toString(36)}-${process.pid}`;
   const imageName = `archal/harness-${dockerIdSuffix}`;
-  const buildDir = (0, import_fs3.mkdtempSync)((0, import_path3.join)((0, import_os2.tmpdir)(), "archal-harness-build-"));
+  const buildDir = (0, import_fs3.mkdtempSync)((0, import_path4.join)((0, import_os2.tmpdir)(), "archal-harness-build-"));
   try {
-    const generatedDockerfilePath = (0, import_path3.join)(buildDir, "Dockerfile.generated");
+    const generatedDockerfilePath = (0, import_path4.join)(buildDir, "Dockerfile.generated");
     let dockerfile;
     try {
       dockerfile = resolveDockerfile(resolvedRepoPath, {
@@ -56157,9 +56187,9 @@ async function runDockerHarness(config2) {
       "Install Docker Desktop or Docker Engine before using the Docker harness."
     ));
   }
-  const repoPath = (0, import_path3.resolve)(config2.repoPath);
-  const runDir = (0, import_fs3.mkdtempSync)((0, import_path3.join)((0, import_os2.tmpdir)(), "archal-harness-"));
-  const generatedDockerfilePath = (0, import_path3.join)(runDir, "Dockerfile.generated");
+  const repoPath = (0, import_path4.resolve)(config2.repoPath);
+  const runDir = (0, import_fs3.mkdtempSync)((0, import_path4.join)((0, import_os2.tmpdir)(), "archal-harness-"));
+  const generatedDockerfilePath = (0, import_path4.join)(runDir, "Dockerfile.generated");
   const dockerIdSuffix = `${Date.now().toString(36)}-${process.pid}`;
   const imageName = config2.prebuiltImage ?? `archal/harness-${dockerIdSuffix}`;
   const containerName = `archal-harness-${dockerIdSuffix}`;
@@ -56208,23 +56238,23 @@ async function runDockerHarness(config2) {
       return fail(stageError("Docker harness attach failed", reason));
     }
     try {
-      const mountedConfigDir = (0, import_path3.join)(runDir, "out");
+      const mountedConfigDir = (0, import_path4.join)(runDir, "out");
       writeMountedConfigFiles(mountedConfigDir, config2.cloudTwinUrls, config2.authToken, ca.certPath);
       const env = buildContainerEnv(config2, proxy.port);
-      env["ARCHAL_MCP_SERVERS"] = (0, import_fs3.readFileSync)((0, import_path3.join)(mountedConfigDir, "mcp-servers.json"), "utf-8");
+      env["ARCHAL_MCP_SERVERS"] = (0, import_fs3.readFileSync)((0, import_path4.join)(mountedConfigDir, "mcp-servers.json"), "utf-8");
       const envFileLines = [];
       let multiLineIdx = 0;
       for (const [key, value] of Object.entries(env)) {
         if (value.includes("\n")) {
           const filename = `_env_${multiLineIdx++}_${key.toLowerCase()}`;
-          (0, import_fs3.writeFileSync)((0, import_path3.join)(mountedConfigDir, filename), value, { encoding: "utf-8", mode: 384 });
+          (0, import_fs3.writeFileSync)((0, import_path4.join)(mountedConfigDir, filename), value, { encoding: "utf-8", mode: 384 });
           envFileLines.push(`${key}_FILE=${OUTPUT_DIR_IN_CONTAINER}/${filename}`);
           envFileLines.push(`${key}=${OUTPUT_DIR_IN_CONTAINER}/${filename}`);
         } else {
           envFileLines.push(`${key}=${value}`);
         }
       }
-      const envFilePath = (0, import_path3.join)(runDir, ".env");
+      const envFilePath = (0, import_path4.join)(runDir, ".env");
       (0, import_fs3.writeFileSync)(envFilePath, envFileLines.join("\n") + "\n", { encoding: "utf-8", mode: 384 });
       const args = [
         "run",
@@ -56300,7 +56330,7 @@ async function runDockerHarness(config2) {
       } catch {
       }
     }
-    const envPath = (0, import_path3.join)(runDir, ".env");
+    const envPath = (0, import_path4.join)(runDir, ".env");
     try {
       if ((0, import_fs3.existsSync)(envPath)) {
         const size = (0, import_fs3.statSync)(envPath).size;
@@ -56352,7 +56382,7 @@ async function runLocalProxy(config2, task, canaryFiles) {
     if (hostsEntries) {
       status("NOTE: For full interception in local mode, add these to /etc/hosts:\n" + hostsEntries);
     }
-    const workspace = config2.workspacePath ?? (0, import_path6.join)(process.env["HOME"] ?? "/root", ".openclaw");
+    const workspace = config2.workspacePath ?? (0, import_path7.join)(process.env["HOME"] ?? "/root", ".openclaw");
     const noProxyHosts = "127.0.0.1,localhost,.archal.ai";
     const env = {
       ...process.env,
@@ -56387,13 +56417,13 @@ async function runLocalProxy(config2, task, canaryFiles) {
   }
 }
 function writeCanaryFiles(workspace, canaryFiles) {
-  const resolvedWorkspace = (0, import_path6.resolve)(workspace);
+  const resolvedWorkspace = (0, import_path7.resolve)(workspace);
   for (const [relativePath, content] of Object.entries(canaryFiles)) {
-    const filePath = (0, import_path6.resolve)(workspace, relativePath);
-    if (filePath !== resolvedWorkspace && !filePath.startsWith(resolvedWorkspace + import_path6.sep)) {
+    const filePath = (0, import_path7.resolve)(workspace, relativePath);
+    if (filePath !== resolvedWorkspace && !filePath.startsWith(resolvedWorkspace + import_path7.sep)) {
       throw new Error(`Canary path escapes sandbox root: ${relativePath}`);
     }
-    (0, import_fs6.mkdirSync)((0, import_path6.dirname)(filePath), { recursive: true });
+    (0, import_fs6.mkdirSync)((0, import_path7.dirname)(filePath), { recursive: true });
     (0, import_fs6.writeFileSync)(filePath, content);
   }
 }
@@ -56462,9 +56492,9 @@ function spawnAgent(workspace, task, env, timeoutMs) {
   });
 }
 function confinePath(root, relativePath) {
-  const resolvedRoot = (0, import_path7.resolve)(root);
-  const resolved = (0, import_path7.resolve)(root, relativePath);
-  if (resolved !== resolvedRoot && !resolved.startsWith(resolvedRoot + import_path7.sep)) {
+  const resolvedRoot = (0, import_path8.resolve)(root);
+  const resolved = (0, import_path8.resolve)(root, relativePath);
+  if (resolved !== resolvedRoot && !resolved.startsWith(resolvedRoot + import_path8.sep)) {
     throw new Error(`Canary path escapes sandbox root: ${relativePath}`);
   }
   return resolved;
@@ -56727,19 +56757,19 @@ async function runDockerSandbox(config2) {
     error: result.timedOut ? `Sandbox timed out after ${Math.round(config2.timeoutMs / 1e3)}s` : result.exitCode !== 0 ? `Sandbox exited with code ${result.exitCode}` : void 0
   };
 }
-var import_fs2, import_path2, import_fs3, import_os2, import_path3, import_crypto3, import_fs4, import_path4, import_os3, import_http, import_https, import_tls, import_net, import_child_process2, import_fs5, import_os4, import_path5, import_url, import_child_process3, import_child_process4, import_fs6, import_path6, import_path7, import_meta3, DockerfileError, NODE_SCRIPT_PRIORITY, CA_COMMON_NAME, CERT_VALIDITY_DAYS, domainCertCache, REQUEST_BODY_PREVIEW_HEAD_LIMIT, REQUEST_BODY_PREVIEW_TAIL_LIMIT, GITHUB_RESPONSE_HEADERS, PASSTHROUGH_CONNECT_TIMEOUT_MS, TWIN_DOMAINS, DEFAULT_SANDBOX_IMAGE, VERSIONED_SANDBOX_TAG_PREFIX, MAX_OUTPUT_BYTES, KILL_GRACE_MS, MAX_OUTPUT_BYTES2, OUTPUT_DIR_IN_CONTAINER, HOST_GATEWAY_NAME, BUILD_TIMEOUT_CAP_MS, SANDBOX_CANARY_TAG, CANARY_LEAK_ERROR_CODE, CANARY_VALUE_PATTERN, SANDBOX_FILES_BLOCK_PATTERN, SNIPPET_RADIUS, DOCKER_IMAGE_NAME;
+var import_fs2, import_path3, import_fs3, import_os2, import_path4, import_crypto3, import_fs4, import_path5, import_os3, import_http, import_https, import_tls, import_net, import_child_process2, import_fs5, import_os4, import_path6, import_url2, import_child_process3, import_child_process4, import_fs6, import_path7, import_path8, import_meta4, DockerfileError, NODE_SCRIPT_PRIORITY, CA_COMMON_NAME, CERT_VALIDITY_DAYS, domainCertCache, REQUEST_BODY_PREVIEW_HEAD_LIMIT, REQUEST_BODY_PREVIEW_TAIL_LIMIT, GITHUB_RESPONSE_HEADERS, PASSTHROUGH_CONNECT_TIMEOUT_MS, TWIN_DOMAINS, DEFAULT_SANDBOX_IMAGE, VERSIONED_SANDBOX_TAG_PREFIX, MAX_OUTPUT_BYTES, KILL_GRACE_MS, MAX_OUTPUT_BYTES2, OUTPUT_DIR_IN_CONTAINER, HOST_GATEWAY_NAME, BUILD_TIMEOUT_CAP_MS, SANDBOX_CANARY_TAG, CANARY_LEAK_ERROR_CODE, CANARY_VALUE_PATTERN, SANDBOX_FILES_BLOCK_PATTERN, SNIPPET_RADIUS, DOCKER_IMAGE_NAME;
 var init_dist6 = __esm({
   "../packages/sandbox-runtime/dist/index.js"() {
     "use strict";
     import_fs2 = require("fs");
-    import_path2 = require("path");
+    import_path3 = require("path");
     import_fs3 = require("fs");
     import_os2 = require("os");
-    import_path3 = require("path");
+    import_path4 = require("path");
     init_dist2();
     import_crypto3 = require("crypto");
     import_fs4 = require("fs");
-    import_path4 = require("path");
+    import_path5 = require("path");
     import_os3 = require("os");
     import_http = require("http");
     import_https = require("https");
@@ -56748,15 +56778,15 @@ var init_dist6 = __esm({
     import_child_process2 = require("child_process");
     import_fs5 = require("fs");
     import_os4 = require("os");
-    import_path5 = require("path");
-    import_url = require("url");
+    import_path6 = require("path");
+    import_url2 = require("url");
     import_child_process3 = require("child_process");
     import_child_process4 = require("child_process");
     import_fs6 = require("fs");
-    import_path6 = require("path");
     import_path7 = require("path");
+    import_path8 = require("path");
     init_dist4();
-    import_meta3 = {};
+    import_meta4 = {};
     DockerfileError = class extends Error {
       kind;
       suggestion;
@@ -56822,13 +56852,13 @@ __export(archal_file_exports, {
 function loadArchalFile(explicitPath) {
   let filePath;
   if (explicitPath) {
-    filePath = (0, import_node_path21.resolve)(explicitPath);
-    if (!(0, import_node_fs25.existsSync)(filePath)) throw new Error(`Config file not found: ${filePath}`);
+    filePath = (0, import_node_path22.resolve)(explicitPath);
+    if (!(0, import_node_fs26.existsSync)(filePath)) throw new Error(`Config file not found: ${filePath}`);
   } else {
-    filePath = (0, import_node_path21.resolve)(ARCHAL_FILENAME);
-    if (!(0, import_node_fs25.existsSync)(filePath)) return null;
+    filePath = (0, import_node_path22.resolve)(ARCHAL_FILENAME);
+    if (!(0, import_node_fs26.existsSync)(filePath)) return null;
   }
-  const raw = (0, import_node_fs25.readFileSync)(filePath, "utf-8").trim();
+  const raw = (0, import_node_fs26.readFileSync)(filePath, "utf-8").trim();
   if (!raw) throw new Error(`Config file is empty: ${filePath}`);
   let parsed;
   try {
@@ -56860,14 +56890,14 @@ function loadArchalFile(explicitPath) {
   if (typeof c["model"] === "string") r.model = c["model"].trim() || void 0;
   if (typeof c["runs"] === "number" && Number.isInteger(c["runs"]) && c["runs"] > 0) r.runs = c["runs"];
   if (typeof c["timeout"] === "number" && c["timeout"] > 0) r.timeout = c["timeout"];
-  return { config: r, configDir: (0, import_node_path21.dirname)(filePath) };
+  return { config: r, configDir: (0, import_node_path22.dirname)(filePath) };
 }
-var import_node_fs25, import_node_path21, ARCHAL_FILENAME;
+var import_node_fs26, import_node_path22, ARCHAL_FILENAME;
 var init_archal_file = __esm({
   "src/config/archal-file.ts"() {
     "use strict";
-    import_node_fs25 = require("fs");
-    import_node_path21 = require("path");
+    import_node_fs26 = require("fs");
+    import_node_path22 = require("path");
     ARCHAL_FILENAME = ".archal.json";
   }
 });
@@ -56926,7 +56956,7 @@ function detectTwinsFromSource(source) {
 function detectTwinsFromPackageJson(packageJsonPath) {
   const twins = /* @__PURE__ */ new Set();
   try {
-    const pkg = JSON.parse((0, import_node_fs26.readFileSync)(packageJsonPath, "utf-8"));
+    const pkg = JSON.parse((0, import_node_fs27.readFileSync)(packageJsonPath, "utf-8"));
     for (const depName of Object.keys({ ...pkg.dependencies, ...pkg.devDependencies })) {
       const twinName = PACKAGE_TO_TWIN[depName];
       if (twinName) twins.add(twinName);
@@ -56938,26 +56968,26 @@ function detectTwinsFromPackageJson(packageJsonPath) {
 function detectTwinsFromHarnessDir(harnessDir) {
   const twins = /* @__PURE__ */ new Set();
   for (const candidate of ENTRY_CANDIDATES) {
-    const filePath = (0, import_node_path22.resolve)(harnessDir, candidate);
-    if (!(0, import_node_fs26.existsSync)(filePath)) continue;
+    const filePath = (0, import_node_path23.resolve)(harnessDir, candidate);
+    if (!(0, import_node_fs27.existsSync)(filePath)) continue;
     try {
-      for (const twin of detectTwinsFromSource((0, import_node_fs26.readFileSync)(filePath, "utf-8"))) {
+      for (const twin of detectTwinsFromSource((0, import_node_fs27.readFileSync)(filePath, "utf-8"))) {
         twins.add(twin);
       }
     } catch {
     }
   }
-  for (const twin of detectTwinsFromPackageJson((0, import_node_path22.resolve)(harnessDir, "package.json"))) {
+  for (const twin of detectTwinsFromPackageJson((0, import_node_path23.resolve)(harnessDir, "package.json"))) {
     twins.add(twin);
   }
   return [...twins].sort();
 }
-var import_node_fs26, import_node_path22, ENTRY_CANDIDATES, IMPORT_PATTERNS, ENV_VAR_PATTERN;
+var import_node_fs27, import_node_path23, ENTRY_CANDIDATES, IMPORT_PATTERNS, ENV_VAR_PATTERN;
 var init_harness_import_detector = __esm({
   "src/runner/harness-import-detector.ts"() {
     "use strict";
-    import_node_fs26 = require("fs");
-    import_node_path22 = require("path");
+    import_node_fs27 = require("fs");
+    import_node_path23 = require("path");
     init_package_twin_map();
     ENTRY_CANDIDATES = [
       "harness.ts",
@@ -56983,7 +57013,7 @@ __export(twins_exports, {
   listTwinCatalog: () => listTwinCatalog
 });
 function hasFidelityBaseline(twinName) {
-  return findFirstExistingLocalTwinAssetPath(import_meta4.url, twinName, "fidelity.json") !== null;
+  return findFirstExistingLocalTwinAssetPath(import_meta5.url, twinName, "fidelity.json") !== null;
 }
 function writeLocalTwinCatalogJson() {
   process.stdout.write(JSON.stringify(
@@ -57051,7 +57081,7 @@ async function listTwinCatalog(json2) {
   table(["Name", "Tools", "Description", "Status"], rows);
   success2(twinCatalogSummary(creds));
 }
-var import_meta4, KNOWN_TWINS;
+var import_meta5, KNOWN_TWINS;
 var init_twins = __esm({
   "src/commands/twins.ts"() {
     "use strict";
@@ -57059,7 +57089,7 @@ var init_twins = __esm({
     init_auth();
     init_api_client();
     init_bundled_assets();
-    import_meta4 = {};
+    import_meta5 = {};
     KNOWN_TWINS = [
       { name: "github", description: "GitHub digital twin" },
       { name: "slack", description: "Slack digital twin" },
@@ -57096,8 +57126,8 @@ init_dist2();
 // src/commands/run.ts
 init_dist2();
 var import_node_crypto7 = require("crypto");
-var import_node_fs27 = require("fs");
-var import_node_path23 = require("path");
+var import_node_fs28 = require("fs");
+var import_node_path24 = require("path");
 
 // src/commands/task-scenario.ts
 var import_node_fs = require("fs");
@@ -57456,17 +57486,17 @@ function isLoopbackUrl(rawUrl) {
 function isNonLocalEndpoint(rawUrl) {
   return !isLoopbackUrl(rawUrl);
 }
-function parseUrlOverridesFile(path, label) {
-  if (!path) return void 0;
-  if (!(0, import_node_fs4.existsSync)(path)) {
-    throw new Error(`${label.fileNotFound}: ${path}`);
+function parseUrlOverridesFile(path2, label) {
+  if (!path2) return void 0;
+  if (!(0, import_node_fs4.existsSync)(path2)) {
+    throw new Error(`${label.fileNotFound}: ${path2}`);
   }
-  const raw = (0, import_node_fs4.readFileSync)(path, "utf-8");
+  const raw = (0, import_node_fs4.readFileSync)(path2, "utf-8");
   const parsed = JSON.parse(raw);
   const overrides = {};
   for (const [key, value] of Object.entries(parsed)) {
     if (typeof value !== "string" || !value.trim()) {
-      throw new Error(`${label.invalidEntry} for "${key}" in ${path}`);
+      throw new Error(`${label.invalidEntry} for "${key}" in ${path2}`);
     }
     const trimmed = value.trim();
     try {
@@ -57475,21 +57505,21 @@ function parseUrlOverridesFile(path, label) {
         throw new Error("missing protocol");
       }
     } catch {
-      throw new Error(`${label.invalidUrl} "${key}" in ${path}: ${trimmed}`);
+      throw new Error(`${label.invalidUrl} "${key}" in ${path2}: ${trimmed}`);
     }
     overrides[key] = trimmed;
   }
   return overrides;
 }
-function parseRemoteTwinUrlOverrides(path) {
-  return parseUrlOverridesFile(path, {
+function parseRemoteTwinUrlOverrides(path2) {
+  return parseUrlOverridesFile(path2, {
     fileNotFound: "Twin URL overrides file not found",
     invalidEntry: "Invalid twin URL override",
     invalidUrl: "Invalid URL for twin"
   });
 }
-function parseApiBaseUrlOverrides(path) {
-  return parseUrlOverridesFile(path, {
+function parseApiBaseUrlOverrides(path2) {
+  return parseUrlOverridesFile(path2, {
     fileNotFound: "API base URL overrides file not found",
     invalidEntry: "Invalid API base URL override",
     invalidUrl: "Invalid API base URL for"
@@ -60201,7 +60231,7 @@ var import_node_fs9 = require("fs");
 var import_node_path7 = require("path");
 init_dist2();
 init_bundled_assets();
-var import_meta2 = {};
+var import_meta3 = {};
 function isIdKeyedCollection(value) {
   if (!Array.isArray(value)) return false;
   if (value.length === 0) return false;
@@ -60439,7 +60469,7 @@ function normalizeSeedState(raw) {
   return Object.keys(normalized).length > 0 ? normalized : null;
 }
 function loadBaseSeedFromDisk(twinName, seedName) {
-  for (const seedRoot of resolveLocalTwinAssetCandidates(import_meta2.url, twinName, "seeds")) {
+  for (const seedRoot of resolveLocalTwinAssetCandidates(import_meta3.url, twinName, "seeds")) {
     const seedState = loadSeedStateFromPath(seedRoot, seedName);
     if (seedState) {
       return seedState;
@@ -66385,12 +66415,12 @@ function listCommandCandidates(command) {
   }
   return [...variants];
 }
-function isExecutable(path) {
+function isExecutable(path2) {
   try {
-    (0, import_node_fs18.accessSync)(path, import_node_fs18.constants.X_OK);
+    (0, import_node_fs18.accessSync)(path2, import_node_fs18.constants.X_OK);
     return true;
   } catch {
-    return process.platform === "win32" && (0, import_node_fs18.existsSync)(path);
+    return process.platform === "win32" && (0, import_node_fs18.existsSync)(path2);
   }
 }
 function isCommandAvailable(command) {
@@ -66639,6 +66669,83 @@ ${lines.join("\n")}`
 init_cache();
 init_auth();
 init_api_client();
+
+// src/commands/env-session-reuse.ts
+var import_node_fs20 = require("fs");
+var import_node_os7 = require("os");
+var import_node_path16 = require("path");
+init_auth();
+var TWIN_SESSION_FILE = (0, import_node_path16.join)((0, import_node_os7.homedir)(), ".archal", "twin-session.json");
+var LEGACY_SESSION_FILE = (0, import_node_path16.join)((0, import_node_os7.homedir)(), ".archal", "env-session.json");
+function loadSession() {
+  let filePath = TWIN_SESSION_FILE;
+  if (!(0, import_node_fs20.existsSync)(filePath)) {
+    if ((0, import_node_fs20.existsSync)(LEGACY_SESSION_FILE)) {
+      filePath = LEGACY_SESSION_FILE;
+    } else {
+      return null;
+    }
+  }
+  try {
+    return JSON.parse((0, import_node_fs20.readFileSync)(filePath, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function resolveApiBaseUrl() {
+  return getConfiguredApiBaseUrl2() ?? "https://api.archal.ai";
+}
+async function tryReuseEnvSession(requiredTwins, credentials) {
+  try {
+    const session = loadSession();
+    if (!session) {
+      return null;
+    }
+    if (!requiredTwins.every((t) => session.twins.includes(t))) {
+      return null;
+    }
+    const missingEndpoints = requiredTwins.filter(
+      (t) => !session.endpoints[t] && !session.apiBaseUrls[t]
+    );
+    if (missingEndpoints.length > 0) {
+      return null;
+    }
+    let apiBase = resolveApiBaseUrl();
+    if (session.apiBaseUrl) {
+      try {
+        const parsed = new URL(session.apiBaseUrl);
+        const isLocalHttp = parsed.protocol === "http:" && (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1");
+        if (parsed.protocol === "https:" || isLocalHttp) {
+          apiBase = session.apiBaseUrl;
+        }
+      } catch {
+      }
+    }
+    const response = await fetch(`${apiBase}/api/sessions/${session.sessionId}`, {
+      method: "GET",
+      headers: {
+        "Authorization": `Bearer ${credentials.token}`,
+        "Content-Type": "application/json"
+      }
+    });
+    if (!response.ok) {
+      return null;
+    }
+    const data = await response.json();
+    if (data.status !== "ready") {
+      return null;
+    }
+    return {
+      sessionId: session.sessionId,
+      endpoints: session.endpoints,
+      apiBaseUrls: session.apiBaseUrls
+    };
+  } catch {
+    return null;
+  }
+}
+
+// src/commands/run.ts
 init_errors4();
 init_logger();
 
@@ -66675,24 +66782,24 @@ async function runShutdownHooks(signal) {
 init_config();
 
 // src/commands/run-config-resolver.ts
-var import_node_fs21 = require("fs");
-var import_node_path17 = require("path");
+var import_node_fs22 = require("fs");
+var import_node_path18 = require("path");
 init_config();
 
 // src/commands/openclaw-shared.ts
-var import_node_fs20 = require("fs");
-var import_node_os7 = require("os");
-var import_node_path16 = require("path");
+var import_node_fs21 = require("fs");
+var import_node_os8 = require("os");
+var import_node_path17 = require("path");
 var OPENCLAW_HARNESS_ALIASES = /* @__PURE__ */ new Set(["openclaw", "oc", "nemoclaw", "nemo"]);
 function isOpenClawHarnessName(name) {
   return OPENCLAW_HARNESS_ALIASES.has(name.trim().toLowerCase());
 }
-function resolveDefaultOpenClawHome(opts, homeDir = (0, import_node_os7.homedir)()) {
+function resolveDefaultOpenClawHome(opts, homeDir = (0, import_node_os8.homedir)()) {
   if (opts.openclawHome?.trim() || opts.workspace?.trim() || opts.openclawConfig?.trim()) {
     return void 0;
   }
-  const defaultHome = (0, import_node_path16.join)(homeDir, ".openclaw");
-  return (0, import_node_fs20.existsSync)(defaultHome) ? defaultHome : void 0;
+  const defaultHome = (0, import_node_path17.join)(homeDir, ".openclaw");
+  return (0, import_node_fs21.existsSync)(defaultHome) ? defaultHome : void 0;
 }
 function detectApiKeyProvider(key) {
   if (!key) return "unknown";
@@ -66772,7 +66879,7 @@ function resolveFromCandidates(candidates, fallback) {
   return fallback;
 }
 function loadProjectConfigForScenario(scenarioPath) {
-  const root = findNearestProjectRoot((0, import_node_path17.dirname)((0, import_node_path17.resolve)(scenarioPath)), process.cwd());
+  const root = findNearestProjectRoot((0, import_node_path18.dirname)((0, import_node_path18.resolve)(scenarioPath)), process.cwd());
   if (!root) {
     return {
       root: null,
@@ -66782,7 +66889,7 @@ function loadProjectConfigForScenario(scenarioPath) {
   }
   return {
     root,
-    configPath: (0, import_node_path17.join)(root, ".archal.json"),
+    configPath: (0, import_node_path18.join)(root, ".archal.json"),
     config: loadProjectConfig(root)
   };
 }
@@ -67203,7 +67310,7 @@ function resolveRunConfigWithSources(scenarioPath, opts, sources, preloaded) {
     { value: void 0, source: "unset", detail: "(not set)" }
   );
   return {
-    scenarioPath: (0, import_node_path17.resolve)(scenarioPath),
+    scenarioPath: (0, import_node_path18.resolve)(scenarioPath),
     projectRoot: project.root,
     projectConfigPath: project.configPath,
     invalidExplicitRuns,
@@ -67240,13 +67347,13 @@ function applyResolvedRunConfigToOptions(opts, resolved) {
 function findNearestProjectRoot(...startPaths) {
   for (const start of startPaths) {
     if (!start || !start.trim()) continue;
-    let current = (0, import_node_path17.resolve)(start);
+    let current = (0, import_node_path18.resolve)(start);
     while (true) {
-      const candidate = (0, import_node_path17.join)(current, ".archal.json");
-      if ((0, import_node_fs21.existsSync)(candidate)) {
+      const candidate = (0, import_node_path18.join)(current, ".archal.json");
+      if ((0, import_node_fs22.existsSync)(candidate)) {
         return current;
       }
-      const parent = (0, import_node_path17.dirname)(current);
+      const parent = (0, import_node_path18.dirname)(current);
       if (parent === current) break;
       current = parent;
     }
@@ -67255,8 +67362,8 @@ function findNearestProjectRoot(...startPaths) {
 }
 
 // src/commands/run-session.ts
-var import_node_fs22 = require("fs");
-var import_node_path18 = require("path");
+var import_node_fs23 = require("fs");
+var import_node_path19 = require("path");
 init_dist2();
 init_api_client();
 init_auth();
@@ -67548,9 +67655,9 @@ function writeManagedRunStatus(patch) {
   if (!statusPath) return;
   try {
     let existing = {};
-    if ((0, import_node_fs22.existsSync)(statusPath)) {
+    if ((0, import_node_fs23.existsSync)(statusPath)) {
       try {
-        const raw = (0, import_node_fs22.readFileSync)(statusPath, "utf-8");
+        const raw = (0, import_node_fs23.readFileSync)(statusPath, "utf-8");
         const parsed = JSON.parse(raw);
         if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
           existing = parsed;
@@ -67559,8 +67666,8 @@ function writeManagedRunStatus(patch) {
       }
     }
     const merged = { ...existing, ...patch, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
-    (0, import_node_fs22.mkdirSync)((0, import_node_path18.dirname)(statusPath), { recursive: true });
-    (0, import_node_fs22.writeFileSync)(statusPath, JSON.stringify(merged, null, 2) + "\n", "utf-8");
+    (0, import_node_fs23.mkdirSync)((0, import_node_path19.dirname)(statusPath), { recursive: true });
+    (0, import_node_fs23.writeFileSync)(statusPath, JSON.stringify(merged, null, 2) + "\n", "utf-8");
   } catch {
   }
 }
@@ -67578,9 +67685,21 @@ function resolveManagedRunProjectMetadata(opts) {
   const description = opts?.runProjectDescription?.trim() || process.env["ARCHAL_WEB_RUN_PROJECT_DESCRIPTION"]?.trim();
   return { id, name, description };
 }
+function buildRuntimeTwinUrls(sessionId, twins, runtimeBaseUrl) {
+  const base = runtimeBaseUrl.replace(/\/+$/, "");
+  const sessionPath = encodeURIComponent(sessionId);
+  const endpoints = {};
+  const apiBaseUrls = {};
+  for (const twin of twins) {
+    const root = `${base}/runtime/${sessionPath}/${encodeURIComponent(twin)}`;
+    endpoints[twin] = root;
+    apiBaseUrls[twin] = `${root}/api`;
+  }
+  return { endpoints, apiBaseUrls };
+}
 function writeTempJsonMap(filePath, data, context) {
   try {
-    (0, import_node_fs22.writeFileSync)(filePath, JSON.stringify(data, null, 2) + "\n", "utf-8");
+    (0, import_node_fs23.writeFileSync)(filePath, JSON.stringify(data, null, 2) + "\n", "utf-8");
     return { ok: true };
   } catch (err) {
     const reason = errorMessage(err);
@@ -67588,17 +67707,17 @@ function writeTempJsonMap(filePath, data, context) {
   }
 }
 function cleanupGeneratedSessionMaps(ctx) {
-  if (ctx.generatedTwinUrlMapPath && (0, import_node_fs22.existsSync)(ctx.generatedTwinUrlMapPath)) {
+  if (ctx.generatedTwinUrlMapPath && (0, import_node_fs23.existsSync)(ctx.generatedTwinUrlMapPath)) {
     try {
-      (0, import_node_fs22.unlinkSync)(ctx.generatedTwinUrlMapPath);
+      (0, import_node_fs23.unlinkSync)(ctx.generatedTwinUrlMapPath);
     } catch (error49) {
       process.stderr.write(`Warning: failed to remove temp twin URL map: ${errorMessage(error49)}
 `);
     }
   }
-  if (ctx.generatedApiBaseUrlMapPath && (0, import_node_fs22.existsSync)(ctx.generatedApiBaseUrlMapPath)) {
+  if (ctx.generatedApiBaseUrlMapPath && (0, import_node_fs23.existsSync)(ctx.generatedApiBaseUrlMapPath)) {
     try {
-      (0, import_node_fs22.unlinkSync)(ctx.generatedApiBaseUrlMapPath);
+      (0, import_node_fs23.unlinkSync)(ctx.generatedApiBaseUrlMapPath);
     } catch (error49) {
       process.stderr.write(`Warning: failed to remove temp API base URL map: ${errorMessage(error49)}
 `);
@@ -67607,6 +67726,9 @@ function cleanupGeneratedSessionMaps(ctx) {
 }
 async function cleanupHostedSession(ctx) {
   cleanupGeneratedSessionMaps(ctx);
+  if (ctx.isReusedEnvSession) {
+    return;
+  }
   if (!ctx.backendSessionId && ctx.inFlightSessionStart) {
     try {
       const startResult = await ctx.inFlightSessionStart;
@@ -67689,8 +67811,8 @@ async function cleanupHostedSession(ctx) {
           } catch {
           }
         }
-        (0, import_node_fs22.mkdirSync)((0, import_node_path18.dirname)(ctx.evidenceOutputPath), { recursive: true });
-        (0, import_node_fs22.writeFileSync)(
+        (0, import_node_fs23.mkdirSync)((0, import_node_path19.dirname)(ctx.evidenceOutputPath), { recursive: true });
+        (0, import_node_fs23.writeFileSync)(
           ctx.evidenceOutputPath,
           JSON.stringify(
             {
@@ -67869,35 +67991,35 @@ function mapSessionStartError(sessionResult) {
 }
 
 // src/commands/run-validation.ts
-var import_node_fs24 = require("fs");
-var import_node_path20 = require("path");
+var import_node_fs25 = require("fs");
+var import_node_path21 = require("path");
 init_dist2();
 init_errors4();
 init_auth();
 
 // src/scenarios/catalog.ts
-var import_node_fs23 = require("fs");
-var import_node_path19 = require("path");
+var import_node_fs24 = require("fs");
+var import_node_path20 = require("path");
 var SCENARIO_DIR_CANDIDATES = [
-  (0, import_node_path19.resolve)("scenarios"),
-  (0, import_node_path19.resolve)("scenario"),
-  (0, import_node_path19.resolve)("test", "scenarios"),
-  (0, import_node_path19.resolve)("tests", "scenarios"),
-  (0, import_node_path19.resolve)(".archal", "scenarios")
+  (0, import_node_path20.resolve)("scenarios"),
+  (0, import_node_path20.resolve)("scenario"),
+  (0, import_node_path20.resolve)("test", "scenarios"),
+  (0, import_node_path20.resolve)("tests", "scenarios"),
+  (0, import_node_path20.resolve)(".archal", "scenarios")
 ];
 function findScenarioFiles(dir) {
-  if (!(0, import_node_fs23.existsSync)(dir)) {
+  if (!(0, import_node_fs24.existsSync)(dir)) {
     return [];
   }
   const files = [];
-  const entries = (0, import_node_fs23.readdirSync)(dir, { withFileTypes: true });
+  const entries = (0, import_node_fs24.readdirSync)(dir, { withFileTypes: true });
   for (const entry of entries) {
-    const fullPath = (0, import_node_path19.join)(dir, entry.name);
+    const fullPath = (0, import_node_path20.join)(dir, entry.name);
     if (entry.isDirectory()) {
       files.push(...findScenarioFiles(fullPath));
       continue;
     }
-    if (entry.isFile() && (0, import_node_path19.extname)(entry.name) === ".md") {
+    if (entry.isFile() && (0, import_node_path20.extname)(entry.name) === ".md") {
       files.push(fullPath);
     }
   }
@@ -67905,27 +68027,27 @@ function findScenarioFiles(dir) {
 }
 function findLocalScenariosDir() {
   for (const candidate of SCENARIO_DIR_CANDIDATES) {
-    if ((0, import_node_fs23.existsSync)(candidate)) {
+    if ((0, import_node_fs24.existsSync)(candidate)) {
       return { dir: candidate, candidates: SCENARIO_DIR_CANDIDATES };
     }
   }
   return {
-    dir: (0, import_node_path19.resolve)("scenarios"),
+    dir: (0, import_node_path20.resolve)("scenarios"),
     candidates: SCENARIO_DIR_CANDIDATES
   };
 }
 function resolveLocalScenario(nameOrPath) {
-  const directPath = (0, import_node_path19.resolve)(nameOrPath);
-  if ((0, import_node_fs23.existsSync)(directPath)) {
+  const directPath = (0, import_node_path20.resolve)(nameOrPath);
+  if ((0, import_node_fs24.existsSync)(directPath)) {
     return directPath;
   }
   const needle = nameOrPath.endsWith(".md") ? nameOrPath : `${nameOrPath}.md`;
   for (const candidate of SCENARIO_DIR_CANDIDATES) {
-    if (!(0, import_node_fs23.existsSync)(candidate)) {
+    if (!(0, import_node_fs24.existsSync)(candidate)) {
       continue;
     }
-    const rootCandidate = (0, import_node_path19.join)(candidate, needle);
-    if ((0, import_node_fs23.existsSync)(rootCandidate)) {
+    const rootCandidate = (0, import_node_path20.join)(candidate, needle);
+    if ((0, import_node_fs24.existsSync)(rootCandidate)) {
       return rootCandidate;
     }
     const nestedMatch = findScenarioFiles(candidate).find(
@@ -68074,8 +68196,8 @@ function parseOpenClawEvalMode(raw, source) {
   );
 }
 function resolveScenarioPath(scenarioArg) {
-  let scenarioPath = (0, import_node_path20.resolve)(scenarioArg);
-  if (!(0, import_node_fs24.existsSync)(scenarioPath)) {
+  let scenarioPath = (0, import_node_path21.resolve)(scenarioArg);
+  if (!(0, import_node_fs25.existsSync)(scenarioPath)) {
     const localScenario = resolveLocalScenario(scenarioArg);
     if (localScenario) {
       scenarioPath = localScenario;
@@ -68092,7 +68214,7 @@ function resolveScenarioPath(scenarioArg) {
       "Rename the file to use the .md extension, then retry."
     );
   }
-  if (!(0, import_node_fs24.readFileSync)(scenarioPath, "utf-8").trim()) {
+  if (!(0, import_node_fs25.readFileSync)(scenarioPath, "utf-8").trim()) {
     validationError(
       `Scenario file is empty: ${scenarioPath}`,
       "Add scenario content (Setup, Prompt, Success Criteria sections), then retry."
@@ -68253,9 +68375,10 @@ function resolveHarnessAndEngine(opts, timeout, resolved) {
   opts.explicitHarnessKind = void 0;
   let inferredRepoHarness = false;
   const dockerExplicitlyRequested = isDockerExplicitlyRequested(opts);
+  const userConfig = loadConfig();
   if (!process.env["ANTHROPIC_API_KEY"] && !process.env["OPENAI_API_KEY"] && !process.env["GEMINI_API_KEY"]) {
     try {
-      const cfg = loadConfig();
+      const cfg = userConfig;
       if (cfg.apiKey) {
         if (cfg.apiKey.startsWith("sk-ant-")) {
           process.env["ANTHROPIC_API_KEY"] = cfg.apiKey;
@@ -68312,7 +68435,6 @@ function resolveHarnessAndEngine(opts, timeout, resolved) {
       }
     }
   }
-  const userConfig = loadConfig();
   const { resolvedHarness, resolvedAgentModel } = applyConfiguredRunDefaults(opts, resolved, userConfig);
   if (opts.apiKey?.trim()) {
     warnIfKeyLooksInvalid(opts.apiKey.trim(), "--api-key");
@@ -68350,7 +68472,7 @@ function resolveHarnessAndEngine(opts, timeout, resolved) {
       }
     } else {
       const inferredHarness = discoverRepoLocalHarness(
-        (0, import_node_path20.dirname)(resolved?.scenarioPath ?? process.cwd()),
+        (0, import_node_path21.dirname)(resolved?.scenarioPath ?? process.cwd()),
         resolved?.projectRoot ?? "",
         process.cwd()
       );
@@ -68740,9 +68862,29 @@ async function executeRunForScenario(scenarioArg, opts, command, configDefaults)
     );
   }
   writeManagedRunStatus({ stage: shouldProvisionHostedSession ? "provisioning" : "running" });
+  let reusedExistingSession = false;
+  if (shouldProvisionHostedSession && credentials) {
+    const reusedSession = await tryReuseEnvSession(scenario.config.twins, credentials);
+    if (reusedSession) {
+      reusedExistingSession = true;
+      ctx.backendSessionId = reusedSession.sessionId;
+      ctx.isReusedEnvSession = true;
+      cloudTwinUrls = reusedSession.endpoints;
+      if (!opts.apiBaseUrls) {
+        hostedApiBaseUrlOverrides = reusedSession.apiBaseUrls;
+      }
+      if (!opts.quiet) {
+        info(`Reusing active twin session ${reusedSession.sessionId}`);
+      }
+      writeManagedRunStatus({
+        stage: "session_ready",
+        sessionId: ctx.backendSessionId
+      });
+    }
+  }
   if (process.env["ARCHAL_LOCAL_TWINS"]) {
     ctx.runFailureMessage = "ARCHAL_LOCAL_TWINS has been removed. Twins are always provisioned in hosted cloud sessions.";
-  } else if (shouldProvisionHostedSession) {
+  } else if (!reusedExistingSession && shouldProvisionHostedSession) {
     ctx.inFlightSessionStart = startSession(credentials?.token ?? "", {
       twins: scenario.config.twins,
       scenarioId: scenario.title,
@@ -68772,12 +68914,27 @@ async function executeRunForScenario(scenarioArg, opts, command, configDefaults)
         stage: "provisioning",
         sessionId: ctx.backendSessionId
       });
-      const endpointRoots = sessionResult.data.endpoints;
-      const apiBaseUrls = sessionResult.data.apiBaseUrls;
+      const serverEndpoints = sessionResult.data.endpoints;
+      const serverApiBaseUrls = sessionResult.data.apiBaseUrls;
       const missingEndpoints = scenario.config.twins.filter((name) => {
-        const endpoint = endpointRoots[name];
+        const endpoint = serverEndpoints[name];
         return typeof endpoint !== "string" || endpoint.trim().length === 0;
       });
+      const runtimeBase = getConfiguredRuntimeBaseUrl2();
+      let endpointRoots;
+      let apiBaseUrls;
+      if (runtimeBase && missingEndpoints.length === 0) {
+        const runtimeUrls = buildRuntimeTwinUrls(
+          ctx.backendSessionId,
+          scenario.config.twins,
+          runtimeBase
+        );
+        endpointRoots = runtimeUrls.endpoints;
+        apiBaseUrls = runtimeUrls.apiBaseUrls;
+      } else {
+        endpointRoots = serverEndpoints;
+        apiBaseUrls = serverApiBaseUrls;
+      }
       if (missingEndpoints.length > 0) {
         ctx.runFailureMessage = `Twin provisioning failed for: ${missingEndpoints.join(", ")}. Try again or run: archal doctor`;
       }
@@ -68788,7 +68945,7 @@ async function executeRunForScenario(scenarioArg, opts, command, configDefaults)
         hostedApiBaseUrlOverrides = apiBaseUrls;
       }
       if (!ctx.runFailureMessage && engine.mode === "api" && !engine.twinUrlsPath) {
-        ctx.generatedTwinUrlMapPath = (0, import_node_path23.resolve)(
+        ctx.generatedTwinUrlMapPath = (0, import_node_path24.resolve)(
           `.archal-session-${ctx.backendSessionId}-engine-twin-urls.json`
         );
         const result = writeTempJsonMap(ctx.generatedTwinUrlMapPath, endpointRoots, "engine twin URL map");
@@ -68981,8 +69138,8 @@ async function executeRunForScenario(scenarioArg, opts, command, configDefaults)
         process.stderr.write(`Warning: failed to build trace payload: ${errorMessage(traceErr)}
 `);
       }
-      (0, import_node_fs27.mkdirSync)((0, import_node_path23.dirname)(ctx.evidenceOutputPath), { recursive: true });
-      (0, import_node_fs27.writeFileSync)(
+      (0, import_node_fs28.mkdirSync)((0, import_node_path24.dirname)(ctx.evidenceOutputPath), { recursive: true });
+      (0, import_node_fs28.writeFileSync)(
         ctx.evidenceOutputPath,
         JSON.stringify({
           sessionId: ctx.backendSessionId ?? null,
@@ -69036,7 +69193,23 @@ function createRunCommand() {
       throw new CliUsageError("--twin requires --task.");
     }
     const { loadArchalFile: loadArchalFile2 } = await Promise.resolve().then(() => (init_archal_file(), archal_file_exports));
-    const archalFile = loadArchalFile2(opts["config"]);
+    let archalFile = loadArchalFile2(opts["config"]);
+    if (!archalFile && opts.task) {
+      try {
+        const { detectTwinsFromHarnessDir: detectTwinsFromHarnessDir2 } = await Promise.resolve().then(() => (init_harness_import_detector(), harness_import_detector_exports));
+        const detected = detectTwinsFromHarnessDir2(process.cwd());
+        if (detected.length > 0) {
+          const { writeFileSync: writeFileSync_ } = await import("fs");
+          const { resolve: resolvePath } = await import("path");
+          const generatedConfig = { twins: detected };
+          const configPath = resolvePath(process.cwd(), ".archal.json");
+          writeFileSync_(configPath, JSON.stringify(generatedConfig, null, 2) + "\n", "utf-8");
+          info("Created .archal.json with detected twins: " + detected.join(", "));
+          archalFile = loadArchalFile2();
+        }
+      } catch {
+      }
+    }
     const scenariosToRun = scenarioArg?.trim() ? [scenarioArg] : [];
     if (archalFile) {
       const { config: af, configDir } = archalFile;
@@ -69071,7 +69244,7 @@ function createRunCommand() {
         const seedOverrides = {};
         for (const [twinName, seedPath] of Object.entries(af.seeds)) {
           const resolvedSeedPath = resolvePath(configDir, seedPath);
-          const seedExt = (0, import_node_path23.extname)(resolvedSeedPath).toLowerCase();
+          const seedExt = (0, import_node_path24.extname)(resolvedSeedPath).toLowerCase();
           if (seedExt === ".json" || seedExt === ".md") {
             fileSeedPaths[twinName] = resolvedSeedPath;
           } else {
@@ -69129,7 +69302,7 @@ function createRunCommand() {
     }
     if (scenariosToRun.length === 0) {
       throw new CliUsageError(
-        'No .archal.json config found and no scenario specified.\n  Create .archal.json with your twins:  { "twins": ["github"] }\n  Or pass a scenario directly:  archal run scenario.md'
+        'No .archal.json config found and no scenario specified.\n  Create .archal.json with your twins:    { "twins": ["github"] }\n  Or pass a scenario directly:            archal run scenario.md\n  Or run an inline task with a twin:      archal run --task "Create an issue" --twin github'
       );
     }
     const tempManifestPath = opts["_tempManifestPath"];
@@ -69593,8 +69766,8 @@ ${CYAN2}${BOLD2}Archal CLI${RESET2}  ${DIM2}v${CLI_VERSION}${RESET2}
 }
 
 // src/commands/scenario.ts
-var import_node_fs28 = require("fs");
-var import_node_path24 = require("path");
+var import_node_fs29 = require("fs");
+var import_node_path25 = require("path");
 init_logger();
 function listScenarios(opts) {
   const tagFilter = opts.tag?.toLowerCase();
@@ -69603,7 +69776,7 @@ function listScenarios(opts) {
   const rows = [];
   const localResolution = findLocalScenariosDir();
   const localDir = localResolution.dir;
-  const localDirExists = (0, import_node_fs28.existsSync)(localDir);
+  const localDirExists = (0, import_node_fs29.existsSync)(localDir);
   if (localDirExists) {
     const localFiles = findScenarioFiles(localDir);
     for (const file2 of localFiles) {
@@ -69614,10 +69787,10 @@ function listScenarios(opts) {
           if (!scenarioTags.includes(tagFilter)) continue;
         }
         if (difficultyFilter && (scenario.config.difficulty ?? "") !== difficultyFilter) continue;
-        const slug = (0, import_node_path24.basename)(file2, ".md");
+        const slug = (0, import_node_path25.basename)(file2, ".md");
         rows.push([scenario.title, slug, scenario.config.twins.join(", ") || "(auto)"]);
       } catch {
-        const slug = (0, import_node_path24.basename)(file2, ".md");
+        const slug = (0, import_node_path25.basename)(file2, ".md");
         rows.push(["(parse error)", slug, "-"]);
       }
     }
@@ -69658,35 +69831,35 @@ function createScenarioCommand() {
 }
 
 // src/commands/twin.ts
-var import_node_fs30 = require("fs");
+var import_node_fs31 = require("fs");
 init_auth();
 init_api_client();
 init_errors4();
 
 // src/commands/twin-session-store.ts
-var import_node_fs29 = require("fs");
-var import_node_os8 = require("os");
-var import_node_path25 = require("path");
-var TWIN_SESSION_FILE = (0, import_node_path25.join)((0, import_node_os8.homedir)(), ".archal", "twin-session.json");
-var LEGACY_SESSION_FILE = (0, import_node_path25.join)((0, import_node_os8.homedir)(), ".archal", "env-session.json");
+var import_node_fs30 = require("fs");
+var import_node_os9 = require("os");
+var import_node_path26 = require("path");
+var TWIN_SESSION_FILE2 = (0, import_node_path26.join)((0, import_node_os9.homedir)(), ".archal", "twin-session.json");
+var LEGACY_SESSION_FILE2 = (0, import_node_path26.join)((0, import_node_os9.homedir)(), ".archal", "env-session.json");
 function saveSession(session) {
-  (0, import_node_fs29.mkdirSync)((0, import_node_path25.join)((0, import_node_os8.homedir)(), ".archal"), { recursive: true });
-  (0, import_node_fs29.writeFileSync)(TWIN_SESSION_FILE, JSON.stringify(session, null, 2));
+  (0, import_node_fs30.mkdirSync)((0, import_node_path26.join)((0, import_node_os9.homedir)(), ".archal"), { recursive: true });
+  (0, import_node_fs30.writeFileSync)(TWIN_SESSION_FILE2, JSON.stringify(session, null, 2));
 }
-function loadSession() {
-  let filePath = TWIN_SESSION_FILE;
-  if (!(0, import_node_fs29.existsSync)(filePath) && (0, import_node_fs29.existsSync)(LEGACY_SESSION_FILE)) {
-    filePath = LEGACY_SESSION_FILE;
+function loadSession2() {
+  let filePath = TWIN_SESSION_FILE2;
+  if (!(0, import_node_fs30.existsSync)(filePath) && (0, import_node_fs30.existsSync)(LEGACY_SESSION_FILE2)) {
+    filePath = LEGACY_SESSION_FILE2;
   }
-  if (!(0, import_node_fs29.existsSync)(filePath)) {
+  if (!(0, import_node_fs30.existsSync)(filePath)) {
     return null;
   }
   try {
-    const session = JSON.parse((0, import_node_fs29.readFileSync)(filePath, "utf8"));
-    if (filePath === LEGACY_SESSION_FILE) {
+    const session = JSON.parse((0, import_node_fs30.readFileSync)(filePath, "utf8"));
+    if (filePath === LEGACY_SESSION_FILE2) {
       saveSession(session);
       try {
-        (0, import_node_fs29.rmSync)(LEGACY_SESSION_FILE);
+        (0, import_node_fs30.rmSync)(LEGACY_SESSION_FILE2);
       } catch {
       }
     }
@@ -69697,11 +69870,11 @@ function loadSession() {
 }
 function clearSession() {
   try {
-    (0, import_node_fs29.rmSync)(TWIN_SESSION_FILE);
+    (0, import_node_fs30.rmSync)(TWIN_SESSION_FILE2);
   } catch {
   }
   try {
-    (0, import_node_fs29.rmSync)(LEGACY_SESSION_FILE);
+    (0, import_node_fs30.rmSync)(LEGACY_SESSION_FILE2);
   } catch {
   }
 }
@@ -69830,11 +70003,19 @@ async function pollUntilReady(sessionId, twins, token) {
     }
     const status = result.data;
     if (status.status === "ready") {
+      const runtimeBase = getConfiguredRuntimeBaseUrl2();
+      let endpoints = status.endpoints ?? {};
+      let apiBaseUrls = status.apiBaseUrls ?? {};
+      if (runtimeBase) {
+        const runtimeUrls = buildRuntimeTwinUrls(sessionId, twins, runtimeBase);
+        endpoints = runtimeUrls.endpoints;
+        apiBaseUrls = runtimeUrls.apiBaseUrls;
+      }
       const saved = {
         sessionId,
         twins,
-        endpoints: status.endpoints ?? {},
-        apiBaseUrls: status.apiBaseUrls ?? {},
+        endpoints,
+        apiBaseUrls,
         createdAt: status.createdAt ?? (/* @__PURE__ */ new Date()).toISOString()
       };
       saveSession(saved);
@@ -69850,7 +70031,7 @@ async function pollUntilReady(sessionId, twins, token) {
   throw new CliRuntimeError("Timed out waiting for twins to start.");
 }
 async function loadSeedFile(session, twin, seedFile, token) {
-  const content = (0, import_node_fs30.readFileSync)(seedFile, "utf8");
+  const content = (0, import_node_fs31.readFileSync)(seedFile, "utf8");
   if (content.length > MAX_SETUP_FILE_SIZE) {
     throw new CliUsageError(
       `Seed file too large (${content.length} bytes, max ${MAX_SETUP_FILE_SIZE}). Split the seed or reduce its size.`
@@ -69885,7 +70066,7 @@ async function loadSeedFile(session, twin, seedFile, token) {
 }
 function readSetupFile(filePath) {
   try {
-    const content = (0, import_node_fs30.readFileSync)(filePath, "utf-8").trim();
+    const content = (0, import_node_fs31.readFileSync)(filePath, "utf-8").trim();
     if (content.length > MAX_SETUP_FILE_SIZE) {
       throw new CliUsageError(
         `Setup file too large (${content.length} bytes, max ${MAX_SETUP_FILE_SIZE}). Use --seed-file for large seeds.`
@@ -69944,7 +70125,7 @@ function createTwinCommand() {
     await listTwinCatalog2();
   });
   command.command("start").argument("[twins...]", "Twins to start").option("--all", "Start all available twins").option("--seed <seeds...>", "Seeds per twin (for example: stripe:small-business github:rich-org)").option("--setup <description>", "Describe desired state in natural language and seed the first twin after startup").option("--setup-file <path>", "Read setup description from a file and seed the first twin after startup").option("--seed-file <path>", "Load a JSON seed file after the first twin is ready").option("--ttl-seconds <seconds>", "Requested twin lifetime in seconds (capped server-side)").description("Start a persistent hosted twin session with hosted twin APIs").action(async (twins, opts) => {
-    const existing = loadSession();
+    const existing = loadSession2();
     if (existing) {
       throw new CliRuntimeError(
         `Active session found: ${existing.sessionId}
@@ -69962,14 +70143,15 @@ Run 'archal twin stop' first, or 'archal twin status' to inspect it.`
     const createResult = await startSession(token, {
       twins: requestedTwins,
       seeds,
-      ttlSeconds: opts.ttlSeconds ? toPositiveInteger2(opts.ttlSeconds, "--ttl-seconds") : void 0
+      ttlSeconds: opts.ttlSeconds ? toPositiveInteger2(opts.ttlSeconds, "--ttl-seconds") : void 0,
+      source: "twin-start"
     });
     const response = unwrapApiResult(createResult, "Failed to create twin session");
     process.stderr.write(`${DIM3}Session ${response.sessionId} created. Waiting for twins to start...${RESET3}
 `);
     const ready = await pollUntilReady(response.sessionId, requestedTwins, token);
     if (ready.status === "ready") {
-      const saved = loadSession();
+      const saved = loadSession2();
       if (saved) {
         await loadCustomSeedIfRequested(saved, requestedTwins, opts, token);
       }
@@ -69977,7 +70159,7 @@ Run 'archal twin stop' first, or 'archal twin status' to inspect it.`
   });
   command.command("status").option("--json", "Print the raw status payload as JSON").description("Show the active twin session endpoints and status").action(async (opts) => {
     const token = requireToken();
-    const saved = loadSession();
+    const saved = loadSession2();
     if (!saved) {
       process.stderr.write(`${DIM3}No active twin session. Run 'archal twin start github' to start one.${RESET3}
 `);
@@ -70028,7 +70210,7 @@ ${BOLD3}Twin Session: ${saved.sessionId}${RESET3}
     process.stderr.write("\n");
   });
   command.command("list").option("--json", "Print twin sessions as JSON").description("List active twin sessions for the current user").action(async (opts) => {
-    const saved = loadSession();
+    const saved = loadSession2();
     if (!saved) {
       if (opts.json) {
         process.stdout.write(`${JSON.stringify({ sessions: [] }, null, 2)}
@@ -70072,11 +70254,20 @@ ${BOLD3}Active Twin Sessions${RESET3}
     const token = requireToken();
     const result = await getSessionStatus(token, sessionId);
     const response = unwrapApiResult(result, "Failed to attach twin session");
+    const attachedTwins = response.twinIds ?? [];
+    const runtimeBase = getConfiguredRuntimeBaseUrl2();
+    let attachEndpoints = response.endpoints ?? {};
+    let attachApiBaseUrls = response.apiBaseUrls ?? {};
+    if (runtimeBase && attachedTwins.length > 0) {
+      const runtimeUrls = buildRuntimeTwinUrls(sessionId, attachedTwins, runtimeBase);
+      attachEndpoints = runtimeUrls.endpoints;
+      attachApiBaseUrls = runtimeUrls.apiBaseUrls;
+    }
     saveSession({
       sessionId,
-      twins: response.twinIds ?? [],
-      endpoints: response.endpoints ?? {},
-      apiBaseUrls: response.apiBaseUrls ?? {},
+      twins: attachedTwins,
+      endpoints: attachEndpoints,
+      apiBaseUrls: attachApiBaseUrls,
       createdAt: response.createdAt ?? (/* @__PURE__ */ new Date()).toISOString()
     });
     process.stderr.write(`${GREEN2}Attached${RESET3} ${sessionId}
@@ -70084,7 +70275,7 @@ ${BOLD3}Active Twin Sessions${RESET3}
   });
   command.command("renew").argument("[ttl-seconds]", "Requested additional lifetime in seconds").description("Extend the active twin session lifetime").action(async (ttlSeconds) => {
     const token = requireToken();
-    const saved = loadSession();
+    const saved = loadSession2();
     if (!saved) {
       throw new CliRuntimeError("No active twin session.");
     }
@@ -70098,7 +70289,7 @@ ${BOLD3}Active Twin Sessions${RESET3}
   });
   command.command("stop").description("Tear down the active twin session").action(async () => {
     const token = requireToken();
-    const saved = loadSession();
+    const saved = loadSession2();
     if (!saved) {
       process.stderr.write(`${DIM3}No active twin session.${RESET3}
 `);
@@ -70130,7 +70321,7 @@ ${BOLD3}Active Twin Sessions${RESET3}
   });
   command.command("reset").argument("[twin]", "Twin to reset, or all session twins if omitted").description("Reset twin state to clean").action(async (twin) => {
     const token = requireToken();
-    const saved = loadSession();
+    const saved = loadSession2();
     if (!saved) {
       throw new CliRuntimeError("No active twin session.");
     }
@@ -70171,7 +70362,7 @@ ${BOLD3}Active Twin Sessions${RESET3}
   });
   command.command("seed").argument("<twin>", "Twin to seed").argument("[seed-name]", "Named seed to apply").option("--file <path>", "Load a JSON seed file").option("--setup <description>", "Describe desired state in natural language and seed the twin from it").description("Load a seed into a running twin").action(async (twin, seedName, opts) => {
     const token = requireToken();
-    const saved = loadSession();
+    const saved = loadSession2();
     if (!saved) {
       throw new CliRuntimeError("No active twin session.");
     }
@@ -70205,8 +70396,9 @@ ${BOLD3}Active Twin Sessions${RESET3}
 // src/commands/trace.ts
 init_dist2();
 init_require_auth();
+init_auth();
 async function fetchTraces(token, limit = 20) {
-  const baseUrl = process.env["ARCHAL_API_URL"] ?? process.env["ARCHAL_AUTH_URL"] ?? "https://www.archal.ai";
+  const baseUrl = getConfiguredApiBaseUrl2() ?? "https://www.archal.ai";
   const res = await fetch(`${baseUrl}/api/traces?limit=${limit}`, {
     headers: { authorization: `Bearer ${token}` }
   });
@@ -70217,7 +70409,7 @@ async function fetchTraces(token, limit = 20) {
   return body.traces ?? [];
 }
 async function fetchTraceDetail(token, rootTraceId) {
-  const baseUrl = process.env["ARCHAL_API_URL"] ?? process.env["ARCHAL_AUTH_URL"] ?? "https://www.archal.ai";
+  const baseUrl = getConfiguredApiBaseUrl2() ?? "https://www.archal.ai";
   const res = await fetch(`${baseUrl}/api/traces/${encodeURIComponent(rootTraceId)}`, {
     headers: { authorization: `Bearer ${token}` }
   });