@bman654/clodex 2.17.0 → 2.18.1

package/dist/cli.js

@@ -74,7 +74,7 @@ import {
   withRegistryWriteLockSync,
   writeParentNoticeLines,
   writeParentNoticeLinesSync
-} from "./chunk-5TG736TX.js";
+} from "./chunk-YGEPQOPA.js";
 
 // src/cli.ts
 import pc13 from "picocolors";
@@ -249,7 +249,7 @@ function printFavoritesOnlyPanel() {
 
 // src/cli.ts
 import * as p13 from "@clack/prompts";
-import { realpathSync as realpathSync3 } from "fs";
+import { realpathSync as realpathSync4 } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/launch.ts
@@ -346,7 +346,7 @@ import { join } from "path";
 // package.json
 var package_default = {
   name: "@bman654/clodex",
-  version: "2.17.0",
+  version: "2.18.1",
   publishConfig: {
     access: "public"
   },
@@ -401,10 +401,9 @@ var package_default = {
     "https-proxy-agent": "9.1.0",
     "ipaddr.js": "2.4.0",
     "node-forge": "1.4.0",
-    "node-gyp-build": "4.8.4",
     open: "11.0.0",
     picocolors: "1.1.1",
-    tweakcc: "4.3.0",
+    tweakcc: "4.3.3",
     undici: "7.29.0",
     ws: "8.21.0"
   },
@@ -3186,7 +3185,7 @@ function pricingBoundaryWarning(modelLabel, limits, resolved) {
   const boundary = positiveInteger(limits.pricingBoundary);
   if (boundary === void 0 || !resolved.crossesPricingBoundary) return null;
   const note = limits.pricingBoundaryNote?.trim();
-  return `${modelLabel}: a ${withThousands(resolved.effective)}-token window can grow past the ${withThousands(boundary)}-token pricing boundary.` + (note ? ` ${note}` : "") + " Use the standard stop to stay under it.";
+  return `${modelLabel}: a ${withThousands(resolved.effective)}-token window can grow past the ${withThousands(boundary)}-token pricing boundary.` + (note ? ` ${note}` : "") + " Choose a smaller context stop to reduce the chance of higher-rate requests.";
 }
 function contextClampNotice(modelLabel, resolved) {
   if (resolved.clampedFrom === void 0) return null;
@@ -3867,18 +3866,18 @@ import {
   existsSync as existsSync4,
   mkdtempSync,
   mkdirSync as mkdirSync5,
-  readFileSync as readFileSync9,
+  readFileSync as readFileSync10,
   renameSync as renameSync2,
   rmSync,
   statSync as statSync7,
   unlinkSync as unlinkSync3,
   writeFileSync as writeFileSync5,
-  openSync as openSync8,
-  closeSync as closeSync8,
-  realpathSync as realpathSync2
+  openSync as openSync9,
+  closeSync as closeSync9,
+  realpathSync as realpathSync3
 } from "fs";
-import { homedir as homedir2 } from "os";
-import { basename, dirname as dirname5, join as join7 } from "path";
+import { homedir as homedir3 } from "os";
+import { basename, dirname as dirname5, join as join8 } from "path";
 import pc3 from "picocolors";
 import * as p2 from "@clack/prompts";
 
@@ -5979,6 +5978,69 @@ function deriveBrand(family) {
   return "Other";
 }
 
+// src/registry/server-text.ts
+function isControlCode(code) {
+  return code <= 31 || code >= 127 && code <= 159;
+}
+function hasControlChars(value) {
+  for (let i = 0; i < value.length; i++) {
+    if (isControlCode(value.charCodeAt(i))) return true;
+  }
+  return false;
+}
+function printableServerText(value) {
+  let out = "";
+  for (const ch of value) out += isControlCode(ch.charCodeAt(0)) ? " " : ch;
+  return out.trim();
+}
+
+// src/codex-client-version.ts
+var VERSION2 = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$(?![\s\S])/;
+function readCodexClientVersion(value) {
+  return typeof value === "string" && VERSION2.test(value) ? value : void 0;
+}
+function compareCodexClientVersions(a, b) {
+  const left = VERSION2.exec(a);
+  const right = VERSION2.exec(b);
+  if (!left || !right) return void 0;
+  for (let i = 1; i <= 3; i++) {
+    const x = BigInt(left[i]);
+    const y = BigInt(right[i]);
+    if (x !== y) return x < y ? -1 : 1;
+  }
+  const preA = left[4];
+  const preB = right[4];
+  if (preA === preB) return 0;
+  if (preA === void 0) return 1;
+  if (preB === void 0) return -1;
+  const partsA = preA.split(".");
+  const partsB = preB.split(".");
+  for (let i = 0; i < Math.max(partsA.length, partsB.length); i++) {
+    const x = partsA[i];
+    const y = partsB[i];
+    if (x === void 0) return -1;
+    if (y === void 0) return 1;
+    if (x === y) continue;
+    const numericX = /^\d+$/.test(x);
+    const numericY = /^\d+$/.test(y);
+    if (numericX && numericY) return BigInt(x) < BigInt(y) ? -1 : 1;
+    if (numericX !== numericY) return numericX ? -1 : 1;
+    return x < y ? -1 : 1;
+  }
+  return 0;
+}
+function requiresNewerCodexClient(model) {
+  if (!model.useResponsesLite) return false;
+  const minimum = readCodexClientVersion(model.minimalClientVersion);
+  return minimum !== void 0 && compareCodexClientVersions(minimum, CODEX_RESPONSES_LITE_VERSION) === 1;
+}
+function codexClientVersionWarning(models) {
+  const unavailable = models.filter(requiresNewerCodexClient);
+  if (unavailable.length === 0) return void 0;
+  const details = unavailable.map((model) => `${printableServerText(model.id)} (requires ${model.minimalClientVersion})`).join(", ");
+  return `Hidden ChatGPT-plan models: ${details}. clodex sends Codex client version ${CODEX_RESPONSES_LITE_VERSION} for Responses-Lite; their catalog minimum exceeds this version. Update clodex to a release supporting their required version to use them.`;
+}
+
 // src/data/openai-oauth-models.ts
 var GPT_HIGH_CONTEXT_PRICING_BOUNDARY = 272e3;
 var GPT_HIGH_CONTEXT_PRICING_NOTE = "Above it, OpenAI prices the full request at 2x input and 1.5x output.";
@@ -5993,19 +6055,19 @@ var OPENAI_OAUTH_MODEL_SEEDS = [
   // context window, but the Codex client is served a smaller one, and this path is
   // Codex-only. All three cards publish a 128,000 output limit and the same 272K
   // pricing boundary as the GPT-5.6 family.
-  { id: "gpt-6-astra", name: "GPT-6 Astra", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true },
-  { id: "gpt-6-sol", name: "GPT-6 Sol", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true },
-  { id: "gpt-6-luna", name: "GPT-6 Luna", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true },
+  { id: "gpt-6-astra", name: "GPT-6 Astra", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true, minimalClientVersion: "0.153.0" },
+  { id: "gpt-6-sol", name: "GPT-6 Sol", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true, minimalClientVersion: "0.155.0" },
+  { id: "gpt-6-luna", name: "GPT-6 Luna", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true, minimalClientVersion: "0.155.0" },
   // "An alias for our flagship general-purpose models, with safeguards calibrated
   // for defensive cybersecurity work" — access is gated on a separate opt-in
   // program, so most installs will never see this id in their catalog.
-  { id: "gpt-daybreak-blue-latest", name: "GPT Daybreak Blue", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true },
+  { id: "gpt-daybreak-blue-latest", name: "GPT Daybreak Blue", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true, minimalClientVersion: "0.144.0" },
   // GPT-5.6 family (Sol / Terra / Luna)
-  { id: "gpt-5.6-sol", name: "GPT-5.6 Sol", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true },
-  { id: "gpt-5.6-terra", name: "GPT-5.6 Terra", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true },
-  { id: "gpt-5.6-luna", name: "GPT-5.6 Luna", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true },
+  { id: "gpt-5.6-sol", name: "GPT-5.6 Sol", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true, minimalClientVersion: "0.144.0" },
+  { id: "gpt-5.6-terra", name: "GPT-5.6 Terra", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true, minimalClientVersion: "0.144.0" },
+  { id: "gpt-5.6-luna", name: "GPT-5.6 Luna", contextWindow: 272e3, maxContextWindow: 872e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: true, preferWebSockets: true, minimalClientVersion: "0.144.0" },
   // GPT-5.5 family (Pro)
-  { id: "gpt-5.5", name: "GPT-5.5", contextWindow: 272e3, maxOutputTokens: 128e3, reasoning: true },
+  { id: "gpt-5.5", name: "GPT-5.5", contextWindow: 272e3, maxContextWindow: 272e3, maxOutputTokens: 128e3, reasoning: true, useResponsesLite: false, preferWebSockets: true, minimalClientVersion: "0.124.0" },
   // GPT-5.4 family
   { id: "gpt-5.4", name: "GPT-5.4", contextWindow: 272e3, maxContextWindow: 1e6 },
   { id: "gpt-5.4-mini", name: "GPT-5.4 Mini", contextWindow: 272e3 },
@@ -6045,12 +6107,16 @@ function applyOAuthSeedContextMetadata(models) {
     const pricing = openAiPricingMetadata(model.id);
     return {
       ...model,
+      contextWindow: model.contextWindow ?? seed?.contextWindow,
       maxContextWindow: model.maxContextWindow ?? seed?.maxContextWindow,
       effectiveContextPercent: migratedEffectiveContextPercent(model.effectiveContextPercent),
       pricingBoundary: model.pricingBoundary ?? seed?.pricingBoundary ?? pricing.pricingBoundary,
       pricingBoundaryNote: model.pricingBoundaryNote ?? seed?.pricingBoundaryNote ?? pricing.pricingBoundaryNote,
       maxOutputTokens: model.maxOutputTokens ?? seed?.maxOutputTokens,
-      reasoning: seed?.reasoning ?? model.reasoning
+      reasoning: seed?.reasoning ?? model.reasoning,
+      useResponsesLite: model.useResponsesLite ?? seed?.useResponsesLite,
+      preferWebSockets: model.preferWebSockets ?? seed?.preferWebSockets,
+      minimalClientVersion: model.minimalClientVersion ?? seed?.minimalClientVersion
     };
   });
 }
@@ -6074,7 +6140,8 @@ function buildOpenAiOAuthModels() {
       npm: "@ai-sdk/openai",
       reasoning: seed.reasoning,
       useResponsesLite: seed.useResponsesLite,
-      preferWebSockets: seed.preferWebSockets
+      preferWebSockets: seed.preferWebSockets,
+      minimalClientVersion: seed.minimalClientVersion
     };
   });
 }
@@ -6104,22 +6171,6 @@ function normalizeGoogleDisplayName(rawName, bareId) {
   return stripGoogleModelPrefix(trimmed);
 }
 
-// src/registry/server-text.ts
-function isControlCode(code) {
-  return code <= 31 || code >= 127 && code <= 159;
-}
-function hasControlChars(value) {
-  for (let i = 0; i < value.length; i++) {
-    if (isControlCode(value.charCodeAt(i))) return true;
-  }
-  return false;
-}
-function printableServerText(value) {
-  let out = "";
-  for (const ch of value) out += isControlCode(ch.charCodeAt(0)) ? " " : ch;
-  return out.trim();
-}
-
 // src/trace-log.ts
 import {
   chmodSync as chmodSync3,
@@ -6590,6 +6641,7 @@ function parseModelList(body, npm, allowBareArray) {
       family,
       brand: deriveBrand(family),
       contextWindow,
+      ...npm === "@ai-sdk/openai" ? openAiPricingMetadata(id) : {},
       cost,
       isFree: isFreeStatus(freeStatus),
       freeStatus,
@@ -6607,6 +6659,7 @@ function materializeTemplateModel(template, model, baseUrl) {
   const { id, upstreamModelId: normalizedUpstream } = normalizeGoogleModelId(model.id, npm);
   const family = model.family ?? (id.split(/[-/:]/)[0] ?? id);
   const freeStatus = model.freeStatus ?? classifyFreeStatus({ model });
+  const pricing = npm === "@ai-sdk/openai" ? openAiPricingMetadata(model.upstreamModelId ?? id) : {};
   return {
     ...model,
     id,
@@ -6615,6 +6668,8 @@ function materializeTemplateModel(template, model, baseUrl) {
     family,
     brand: model.brand ?? deriveBrand(family),
     contextWindow: model.contextWindow ?? lookupKnownContextWindow(id),
+    pricingBoundary: model.pricingBoundary ?? pricing.pricingBoundary,
+    pricingBoundaryNote: model.pricingBoundaryNote ?? pricing.pricingBoundaryNote,
     isFree: model.isFree ?? isFreeStatus(freeStatus),
     freeStatus,
     modelFormat: model.modelFormat ?? modelFormatForNpm(npm),
@@ -6807,8 +6862,21 @@ function resolveEndpoint(npm, apiUrl) {
 }
 function projectProviderCachedModels(provider) {
   const cached = provider.modelsCache?.models ?? [];
-  if (isChatGptOAuthProvider(provider)) return applyOAuthSeedContextMetadata(cached);
-  if (!isRetainedOpenCodeGoProvider(provider)) return cached;
+  if (isChatGptOAuthProvider(provider)) {
+    return applyOAuthSeedContextMetadata(cached).filter((model) => !requiresNewerCodexClient(model));
+  }
+  if (!isRetainedOpenCodeGoProvider(provider)) {
+    if (!cached.some((model) => (model.npm ?? provider.api.npm) === "@ai-sdk/openai")) return cached;
+    return cached.map((model) => {
+      if ((model.npm ?? provider.api.npm) !== "@ai-sdk/openai") return model;
+      const pricing = openAiPricingMetadata(model.upstreamModelId ?? model.id);
+      return {
+        ...model,
+        pricingBoundary: model.pricingBoundary ?? pricing.pricingBoundary,
+        pricingBoundaryNote: model.pricingBoundaryNote ?? pricing.pricingBoundaryNote
+      };
+    });
+  }
   const template = retainedOpenCodeGoTemplate();
   return template ? applyTemplateModelMetadata(template, cached) : [];
 }
@@ -6962,8 +7030,162 @@ function materializeRegistry(registry, resolveCredential, opts) {
   return result;
 }
 
+// src/editor-extension-version.ts
+import { execFileSync, execSync } from "child_process";
+import { readdirSync, readFileSync as readFileSync7, realpathSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join6 } from "path";
+var CLAUDE_EXTENSION_ID = "anthropic.claude-code";
+var EDITOR_EXTENSION_ROOTS = [
+  { editor: "VS Code", dir: ".vscode" },
+  { editor: "VS Code Insiders", dir: ".vscode-insiders" },
+  { editor: "VS Code (remote server)", dir: ".vscode-server" },
+  { editor: "VSCodium", dir: ".vscode-oss" },
+  { editor: "Cursor", dir: ".cursor" },
+  { editor: "Windsurf", dir: ".windsurf" }
+];
+var CHECKED_EDITORS_DESCRIPTION = EDITOR_EXTENSION_ROOTS.map((root) => root.editor).join(", ");
+function releaseKey(version) {
+  const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(version.trim());
+  return match ? match.slice(1).map(Number) : null;
+}
+function compareVersionKeys(a, b) {
+  for (let i = 0; i < Math.max(a.length, b.length); i += 1) {
+    const diff = (a[i] ?? 0) - (b[i] ?? 0);
+    if (diff !== 0) return diff;
+  }
+  return 0;
+}
+function newestVersion(versions) {
+  let best = null;
+  for (const version of versions) {
+    const key = releaseKey(version);
+    if (key && (!best || compareVersionKeys(key, best.key) > 0)) best = { version, key };
+  }
+  return best?.version ?? null;
+}
+var EXTENSION_DIR_PATTERN = /^anthropic\.claude-code-(\d+\.\d+\.\d+)(?:-[a-z0-9]+)*$/i;
+function readJson(path) {
+  try {
+    return JSON.parse(readFileSync7(path, "utf8"));
+  } catch {
+    return void 0;
+  }
+}
+function entryDirectoryName(entry) {
+  if (typeof entry.relativeLocation === "string") return entry.relativeLocation;
+  const location = entry.location;
+  const raw = typeof location === "string" ? location : location && typeof location === "object" ? location.fsPath ?? location.path : void 0;
+  if (typeof raw !== "string") return null;
+  const parts = raw.split(/[\\/]/).filter(Boolean);
+  return parts.at(-1) ?? null;
+}
+function readClaudeExtensionVersion(extensionsDir) {
+  let names;
+  try {
+    names = readdirSync(extensionsDir);
+  } catch {
+    return null;
+  }
+  const present = new Set(names);
+  const listed = readJson(join6(extensionsDir, "extensions.json"));
+  if (Array.isArray(listed)) {
+    const versions2 = [];
+    for (const item of listed) {
+      if (!item || typeof item !== "object") continue;
+      const entry = item;
+      const identifier = entry.identifier;
+      if (typeof identifier?.id !== "string" || identifier.id.toLowerCase() !== CLAUDE_EXTENSION_ID) continue;
+      if (typeof entry.version !== "string") continue;
+      const dirName = entryDirectoryName(entry);
+      if (dirName !== null && !present.has(dirName)) continue;
+      versions2.push(entry.version);
+    }
+    return newestVersion(versions2);
+  }
+  const obsoleteRaw = readJson(join6(extensionsDir, ".obsolete"));
+  const obsolete = obsoleteRaw && typeof obsoleteRaw === "object" && !Array.isArray(obsoleteRaw) ? new Set(Object.entries(obsoleteRaw).filter(([, flagged]) => flagged).map(([name]) => name)) : /* @__PURE__ */ new Set();
+  const versions = [];
+  for (const name of names) {
+    if (obsolete.has(name)) continue;
+    const match = EXTENSION_DIR_PATTERN.exec(name);
+    if (match) versions.push(match[1]);
+  }
+  return newestVersion(versions);
+}
+function findInstalledClaudeExtensions(home = homedir2()) {
+  const found = [];
+  for (const root of EDITOR_EXTENSION_ROOTS) {
+    const extensionsDir = join6(home, root.dir, "extensions");
+    const version = readClaudeExtensionVersion(extensionsDir);
+    if (version) found.push({ editor: root.editor, extensionsDir, version });
+  }
+  return found;
+}
+var NPM_ROOT_TIMEOUT_MS = 1e4;
+function readNpmGlobalRoot(env = process.env) {
+  try {
+    const options = {
+      env,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: NPM_ROOT_TIMEOUT_MS
+    };
+    const output = process.platform === "win32" ? execSync("npm root -g", options) : execFileSync("npm", ["root", "-g"], options);
+    const root = output.trim().split(/\r?\n/).at(-1)?.trim();
+    return root || null;
+  } catch {
+    return null;
+  }
+}
+function comparablePath(path) {
+  let real = path;
+  try {
+    real = realpathSync(path);
+  } catch {
+  }
+  const normalized = real.replace(/\\/g, "/").replace(/\/+$/, "");
+  return /^[a-z]:\//i.test(normalized) ? normalized.toLowerCase() : normalized;
+}
+function claudeInstallCommand(binaryPath, version, npmGlobalRoot) {
+  const path = comparablePath(binaryPath);
+  if (/\/\.local\/share\/claude\/versions\/[^/]+$/.test(path)) return `claude install ${version}`;
+  if (/\/node_modules\/@anthropic-ai\/claude-code/.test(path)) {
+    const root = npmGlobalRoot();
+    const packagePrefix = root === null ? null : `${comparablePath(root)}/@anthropic-ai/claude-code`;
+    const underGlobalPackage = packagePrefix !== null && path.startsWith(packagePrefix) && ["/", "-"].includes(path.charAt(packagePrefix.length));
+    if (underGlobalPackage) return `npm install -g @anthropic-ai/claude-code@${version}`;
+  }
+  return null;
+}
+function describeExtensionDrift(extension, patched, npmGlobalRoot) {
+  const extensionKey = releaseKey(extension.version);
+  const patchedKey = releaseKey(patched.version);
+  if (!extensionKey || !patchedKey) return null;
+  const order = compareVersionKeys(extensionKey, patchedKey);
+  if (order === 0) return null;
+  const { editor, version } = extension;
+  const install = claudeInstallCommand(patched.binaryPath, version, npmGlobalRoot);
+  const lines = [
+    `${editor}'s Claude Code extension is ${version}, but the Claude Code clodex patched is ${patched.version} (${patched.binaryPath}).`,
+    `When ${editor} launches Claude Code through clodex-claude (claudeCode.claudeProcessWrapper), its chats run the extension's own bundled ${version} binary and clodex models will not appear in its model picker.`,
+    ...install ? ["To fix it, run:", `  ${install}`, "  clodex patch"] : [`To fix it, update the Claude Code at ${patched.binaryPath} to ${version} with the tool that installed it, then run:`, "  clodex patch"]
+  ];
+  if (order < 0) lines.push(`Or update the extension in ${editor} to ${patched.version}.`);
+  return lines.join("\n");
+}
+function claudeExtensionDriftWarnings(patched, home = homedir2(), npmGlobalRoot = () => readNpmGlobalRoot()) {
+  let root = null;
+  const cachedRoot = () => (root ??= { value: npmGlobalRoot() }).value;
+  try {
+    return findInstalledClaudeExtensions(home).map((extension) => describeExtensionDrift(extension, patched, cachedRoot)).filter((warning) => warning !== null);
+  } catch {
+    return [];
+  }
+}
+
 // src/npm-shim.ts
-import { readFileSync as readFileSync7, realpathSync, statSync as statSync4 } from "fs";
+import { readFileSync as readFileSync8, realpathSync as realpathSync2, statSync as statSync4 } from "fs";
 import { dirname as dirname3, resolve as resolve2 } from "path";
 var MAX_LAUNCHER_BYTES = 64 * 1024;
 var MAX_LAUNCHER_HOPS = 4;
@@ -6986,7 +7208,7 @@ function launcherKind(shimPath) {
 function readLauncherText(path) {
   try {
     if (statSync4(path).size > MAX_LAUNCHER_BYTES) return null;
-    return readFileSync7(path, "utf8");
+    return readFileSync8(path, "utf8");
   } catch {
     return null;
   }
@@ -7043,7 +7265,7 @@ function resolveThroughNpmShims(startPath) {
     }
     let hopped;
     try {
-      hopped = realpathSync(reading.target);
+      hopped = realpathSync2(reading.target);
     } catch {
       return {
         ok: false,
@@ -7068,13 +7290,13 @@ import {
   closeSync as closeSync2,
   fstatSync,
   openSync as openSync2,
-  readFileSync as readFileSync8,
+  readFileSync as readFileSync9,
   readSync,
   statSync as statSync5
 } from "fs";
 import { createRequire } from "module";
 import { arch } from "os";
-import { dirname as dirname4, join as join6 } from "path";
+import { dirname as dirname4, join as join7 } from "path";
 var MAX_PLACEHOLDER_BYTES = 64 * 1024;
 var CLAUDE_PACKAGE = "@anthropic-ai/claude-code";
 var MISSING_BINARY_MARKER = "claude native binary not installed";
@@ -7101,11 +7323,11 @@ function getPlatformKey() {
 }
 function inspectNativePackage(binaryPath) {
   const packageRoot2 = dirname4(dirname4(binaryPath));
-  const packageJsonPath = join6(packageRoot2, "package.json");
-  const installScriptPath = join6(packageRoot2, "install.cjs");
+  const packageJsonPath = join7(packageRoot2, "package.json");
+  const installScriptPath = join7(packageRoot2, "install.cjs");
   let manifest;
   try {
-    manifest = JSON.parse(readFileSync8(packageJsonPath, "utf8"));
+    manifest = JSON.parse(readFileSync9(packageJsonPath, "utf8"));
     if (manifest.name !== CLAUDE_PACKAGE || !statSync5(installScriptPath).isFile()) {
       return { nativePackageState: "unknown", installScriptPath: null };
     }
@@ -7157,270 +7379,44 @@ function inspectClaudeNativeBinaryPlaceholder(path) {
   }
 }
 
-// src/bun-entry-module.ts
-import { closeSync as closeSync3, openSync as openSync3, readSync as readSync2, statSync as statSync6, writeSync } from "fs";
-import { execFileSync } from "child_process";
-var BUN_TRAILER = Buffer.from("\n---- Bun! ----\n");
-var BUN_OFFSETS_BYTES = 32;
-var TAIL_SCAN_BYTES = 16 * 1024 * 1024;
-var MODULE_STRUCT_BYTES_CURRENT = 52;
-var MODULE_STRUCT_BYTES_LEGACY = 36;
-var CONTENTS_FIELD_AT = 8;
-var SOURCEMAP_FIELD_AT = 16;
-var BYTECODE_FIELD_AT = 24;
-var MODULE_INFO_FIELD_AT = 32;
-var BYTECODE_ORIGIN_PATH_FIELD_AT = 40;
-var BUN_BLOB_FLAGS = {
-  /** Every module's source text lies in one run no other region falls inside. */
-  SOURCE_TEXT_CONTIGUOUS: 1 << 4,
-  /** A `[u32; modules]` of each module's source hash follows the module table. */
-  HAS_SOURCE_HASHES: 1 << 5,
-  /** After the source hashes: `u32 count`, then `count` x `{ u32 id, offset, length }`. */
-  HAS_BUILTIN_BYTECODE: 1 << 6,
-  /** After the builtin-bytecode table: one `{ offset, length }` for the shared string table. */
-  HAS_BYTECODE_STRING_TABLE: 1 << 7
-};
-var LOADER_FROM_END = 3;
-var BUN_JAVASCRIPT_LOADER = 1;
-var MAX_MODULE_NAME_BYTES = 4096;
-var MIN_SHIMMABLE_NAME_BYTES = 7;
-function tweakccRecognizesModuleName(name) {
-  return name.endsWith("/claude") || name === "claude" || name.endsWith("/claude.exe") || name === "claude.exe" || name.endsWith("/src/entrypoints/cli.js") || name === "src/entrypoints/cli.js";
-}
-function entryModuleShimName(byteLength) {
-  if (byteLength < MIN_SHIMMABLE_NAME_BYTES) return null;
-  const padding = byteLength - MIN_SHIMMABLE_NAME_BYTES;
-  return "/clodex".padEnd(padding, "-").slice(0, padding) + "/claude";
-}
-function readAt(fd, length, position) {
-  if (length <= 0 || position < 0) return null;
-  const buffer = Buffer.alloc(length);
-  const read = readSync2(fd, buffer, 0, length, position);
-  return read === length ? buffer : null;
-}
-function readBunModuleNames(fd, fileSize) {
-  const tailLength = Math.min(fileSize, TAIL_SCAN_BYTES);
-  const tail = readAt(fd, tailLength, fileSize - tailLength);
-  if (!tail) return null;
-  const tailAt = fileSize - tailLength;
-  for (let searchFrom = tail.length - 1; searchFrom >= 0; ) {
-    const trailerInTail = tail.lastIndexOf(BUN_TRAILER, searchFrom);
-    if (trailerInTail < 0) return null;
-    const parsed = parseBunModuleNamesAt(fd, tailAt + trailerInTail - BUN_OFFSETS_BYTES);
-    if (parsed) return parsed;
-    searchFrom = trailerInTail - 1;
-  }
-  return null;
-}
-function parseBunModuleNamesAt(fd, offsetsAt) {
-  try {
-    return parseBunModuleNamesAtUnchecked(fd, offsetsAt);
-  } catch {
-    return null;
-  }
-}
-function parseBunModuleNamesAtUnchecked(fd, offsetsAt) {
-  const offsets = readAt(fd, BUN_OFFSETS_BYTES, offsetsAt);
-  if (!offsets) return null;
-  const byteCount = offsets.readBigUInt64LE(0);
-  const modulesOffset = offsets.readUInt32LE(8);
-  const modulesLength = offsets.readUInt32LE(12);
-  const entryPointId = offsets.readUInt32LE(16);
-  const compileExecArgvOffset = offsets.readUInt32LE(20);
-  const compileExecArgvLength = offsets.readUInt32LE(24);
-  const flags = offsets.readUInt32LE(28);
-  if (byteCount <= 0n || byteCount > BigInt(offsetsAt)) return null;
-  const blobAt = offsetsAt - Number(byteCount);
-  if (modulesLength <= 0 || BigInt(modulesOffset) + BigInt(modulesLength) > byteCount) return null;
-  const structBytes = modulesLength % MODULE_STRUCT_BYTES_LEGACY === 0 && modulesLength % MODULE_STRUCT_BYTES_CURRENT !== 0 ? MODULE_STRUCT_BYTES_LEGACY : MODULE_STRUCT_BYTES_CURRENT;
-  const moduleCount = Math.floor(modulesLength / structBytes);
-  if (moduleCount <= 0 || entryPointId >= moduleCount) return null;
-  const modules = readAt(fd, moduleCount * structBytes, blobAt + modulesOffset);
-  if (!modules) return null;
-  const names = [];
-  const nameOffsets = [];
-  const contents = [];
-  const sourcemap = [];
-  const bytecode = [];
-  const moduleInfo = [];
-  const bytecodeOriginPath = [];
-  const loaders = [];
-  for (let index = 0; index < moduleCount; index++) {
-    const nameOffset = modules.readUInt32LE(index * structBytes);
-    const nameLength = modules.readUInt32LE(index * structBytes + 4);
-    if (nameLength <= 0 || nameLength > MAX_MODULE_NAME_BYTES) return null;
-    if (BigInt(nameOffset) + BigInt(nameLength) > byteCount) return null;
-    const bytes = readAt(fd, nameLength + 1, blobAt + nameOffset);
-    if (!bytes || bytes[nameLength] !== 0) return null;
-    const name = bytes.subarray(0, nameLength).toString("utf8");
-    if (!/^[\x20-\x7e]+$/.test(name)) return null;
-    names.push(name);
-    nameOffsets.push(blobAt + nameOffset);
-    const pairAt = (field) => ({
-      offset: modules.readUInt32LE(index * structBytes + field),
-      length: modules.readUInt32LE(index * structBytes + field + 4)
-    });
-    contents.push(pairAt(CONTENTS_FIELD_AT));
-    sourcemap.push(pairAt(SOURCEMAP_FIELD_AT));
-    bytecode.push(pairAt(BYTECODE_FIELD_AT));
-    const current = structBytes === MODULE_STRUCT_BYTES_CURRENT;
-    moduleInfo.push(current ? pairAt(MODULE_INFO_FIELD_AT) : { offset: 0, length: 0 });
-    bytecodeOriginPath.push(
-      current ? pairAt(BYTECODE_ORIGIN_PATH_FIELD_AT) : { offset: 0, length: 0 }
-    );
-    loaders.push(modules.readUInt8(index * structBytes + structBytes - LOADER_FROM_END));
-  }
-  return {
-    names,
-    entryPointId,
-    offsets: nameOffsets,
-    contents,
-    sourcemap,
-    bytecode,
-    moduleInfo,
-    bytecodeOriginPath,
-    loaders,
-    blobAt,
-    modulesAt: blobAt + modulesOffset,
-    modulesOffset,
-    modulesLength,
-    structBytes,
-    byteCount: Number(byteCount),
-    compileExecArgv: { offset: compileExecArgvOffset, length: compileExecArgvLength },
-    flags
-  };
-}
-function findStandIn(fd, fileSize, marker) {
-  const needle = Buffer.from(marker);
-  const chunkBytes = 8 * 1024 * 1024;
-  const offsets = [];
-  let carry = Buffer.alloc(0);
-  for (let position = 0; position < fileSize; ) {
-    const length = Math.min(chunkBytes, fileSize - position);
-    const chunk = readAt(fd, length, position);
-    if (!chunk) throw new Error("could not re-read the candidate to verify the entry-module name");
-    const window = carry.length > 0 ? Buffer.concat([carry, chunk]) : chunk;
-    const windowAt = position - carry.length;
-    for (let at = window.indexOf(needle); at >= 0; at = window.indexOf(needle, at + 1)) {
-      offsets.push(windowAt + at);
-    }
-    carry = Buffer.from(window.subarray(Math.max(0, window.length - (needle.length - 1))));
-    position += length;
-  }
-  return offsets;
-}
-function restoreEveryStandIn(fd, fileSize, shim) {
-  const moduleNameCopies = () => findStandIn(fd, fileSize, shim.marker).filter((offset) => isModuleNameAt(fd, offset, shim.marker));
-  const found = moduleNameCopies();
-  for (const offset of found) writeNameBytes(fd, shim.original, offset);
-  if (found.length > 0 && moduleNameCopies().length > 0) {
-    throw new Error(`the entry-module stand-in ${shim.marker} survived restoration`);
-  }
-}
-function isModuleNameAt(fd, offset, marker) {
-  const after = readAt(fd, 1, offset + Buffer.byteLength(marker));
-  return after !== null && after[0] === 0;
-}
-function writeNameBytes(fd, name, offset) {
-  const bytes = Buffer.from(name);
-  const written = writeSync(fd, bytes, 0, bytes.length, offset);
-  if (written !== bytes.length) {
-    throw new Error(`wrote ${written} of ${bytes.length} entry-module name bytes at ${offset}`);
-  }
-}
-function isMachO(fd) {
-  const magic = readAt(fd, 4, 0);
-  if (!magic) return false;
-  const value = magic.readUInt32BE(0);
-  return value === 4277009102 || value === 4277009103 || value === 3472551422 || value === 3489328638 || value === 3405691582 || value === 3405691583;
-}
-function readBunModuleTable(path) {
-  const fd = openSync3(path, "r");
-  try {
-    return readBunModuleNames(fd, statSync6(path).size);
-  } finally {
-    closeSync3(fd);
-  }
-}
-function readBunJavaScriptModules(path) {
+// src/patch-signature.ts
+import { execFileSync as execFileSync2 } from "child_process";
+import { closeSync as closeSync3, openSync as openSync3, readSync as readSync2 } from "fs";
+function signAndVerifyMachOCandidate(path, installPath = path) {
+  if (process.platform !== "darwin") return;
   const fd = openSync3(path, "r");
+  let machO = false;
   try {
-    const parsed = readBunModuleNames(fd, statSync6(path).size);
-    if (!parsed) return null;
-    const modules = [];
-    for (let index = 0; index < parsed.names.length; index++) {
-      if (parsed.loaders[index] !== BUN_JAVASCRIPT_LOADER) continue;
-      const range = parsed.contents[index];
-      if (range.offset < 0 || range.length < 0 || range.offset + range.length > parsed.byteCount) {
-        return null;
-      }
-      const bytes = range.length === 0 ? Buffer.alloc(0) : readAt(fd, range.length, parsed.blobAt + range.offset);
-      if (!bytes) return null;
-      modules.push({
-        index,
-        name: parsed.names[index],
-        source: bytes.toString("utf8"),
-        byteLength: bytes.length
-      });
-    }
-    return modules;
-  } finally {
-    closeSync3(fd);
-  }
-}
-function shimEntryModuleName(path) {
-  const fd = openSync3(path, "r+");
-  try {
-    const parsed = readBunModuleNames(fd, statSync6(path).size);
-    if (!parsed) return null;
-    if (parsed.names.some(tweakccRecognizesModuleName)) return null;
-    const original = parsed.names[parsed.entryPointId];
-    const offset = parsed.offsets[parsed.entryPointId];
-    const marker = entryModuleShimName(Buffer.byteLength(original));
-    if (marker === null) return null;
-    if (findStandIn(fd, statSync6(path).size, marker).some((offset2) => isModuleNameAt(fd, offset2, marker))) {
-      return null;
-    }
-    writeNameBytes(fd, marker, offset);
-    return { offset, original, marker };
-  } finally {
-    closeSync3(fd);
-  }
-}
-function restoreEntryModuleName(path, shim, { resign }) {
-  const fd = openSync3(path, "r+");
-  let machO;
-  try {
-    const parsed = readBunModuleNames(fd, statSync6(path).size);
-    const offset = parsed?.offsets[parsed.entryPointId];
-    if (!parsed || offset === void 0 || parsed.names[parsed.entryPointId] !== shim.marker) {
-      throw new Error(
-        `expected the entry module of ${path} to be named ${shim.marker}, found ${parsed ? JSON.stringify(parsed.names[parsed.entryPointId]) : "no readable Bun module list"}`
-      );
+    const magic = Buffer.alloc(4);
+    if (readSync2(fd, magic, 0, 4, 0) === 4) {
+      machO = [
+        4277009102,
+        4277009103,
+        3472551422,
+        3489328638,
+        3405691582,
+        3405691583,
+        3199925962
+      ].includes(magic.readUInt32BE(0));
     }
-    writeNameBytes(fd, shim.original, offset);
-    restoreEveryStandIn(fd, statSync6(path).size, shim);
-    machO = resign;
   } finally {
     closeSync3(fd);
   }
-  if (machO) resignMachOBinary(path);
-}
-function resignMachOBinary(path) {
-  const fd = openSync3(path, "r");
-  let machO;
+  if (!machO) return;
   try {
-    machO = isMachO(fd);
-  } finally {
-    closeSync3(fd);
-  }
-  if (machO && process.platform === "darwin") {
-    execFileSync("codesign", ["-s", "-", "-f", path], { stdio: "ignore" });
+    execFileSync2("codesign", ["-s", "-", "-f", path], { stdio: "pipe" });
+    execFileSync2("codesign", ["--verify", "--strict", path], { stdio: "pipe" });
+  } catch (error) {
+    const stderr = error?.stderr;
+    const detail = String(stderr ?? "").trim().split(`${path}: `).join("").split(/\r?\n/).filter((line) => line !== "replacing existing signature").join("\n").trim() || (error instanceof Error ? error.message.trimEnd() : String(error).trimEnd());
+    throw new Error(
+      `Mach-O signing or verification failed for ${installPath}: ${detail}. Claude Code was left unchanged.`
+    );
   }
 }
 
 // src/bun-compiled-pointer.ts
-import { closeSync as closeSync4, fstatSync as fstatSync2, openSync as openSync4, readSync as readSync3, writeSync as writeSync2 } from "fs";
+import { closeSync as closeSync4, fstatSync as fstatSync2, openSync as openSync4, readSync as readSync3, writeSync } from "fs";
 var TWEAKCC_SCAN_STRIDE = 16384n;
 var SCAN_CHUNK = 1 << 20;
 var ELF_MAGIC = 1179403647;
@@ -7428,7 +7424,7 @@ var ELFCLASS64 = 2;
 var ELFDATA2LSB = 1;
 var PT_LOAD = 1;
 var PF_W = 2;
-function readAt2(fd, length, position) {
+function readAt(fd, length, position) {
   const buf = Buffer.alloc(length);
   let read = 0;
   while (read < length) {
@@ -7439,7 +7435,7 @@ function readAt2(fd, length, position) {
   return read === length ? buf : buf.subarray(0, read);
 }
 function readElfLayout(fd) {
-  const ident = readAt2(fd, 64, 0);
+  const ident = readAt(fd, 64, 0);
   if (ident.length < 64) return null;
   if (ident.readUInt32LE(0) !== ELF_MAGIC) return null;
   if (ident[4] !== ELFCLASS64 || ident[5] !== ELFDATA2LSB) return null;
@@ -7455,7 +7451,7 @@ function readElfLayout(fd) {
   const fileSize = fstatSync2(fd).size;
   const fits = (offset, length) => Number.isSafeInteger(offset) && offset >= 0 && length >= 0 && offset + length <= fileSize;
   if (!fits(Number(shoff), shnum * shentsize)) return null;
-  const shTable = readAt2(fd, shnum * shentsize, Number(shoff));
+  const shTable = readAt(fd, shnum * shentsize, Number(shoff));
   if (shTable.length !== shnum * shentsize) return null;
   const raw = [];
   for (let i = 0; i < shnum; i++) {
@@ -7469,7 +7465,7 @@ function readElfLayout(fd) {
   }
   const strtab = raw[shstrndx];
   if (!fits(Number(strtab.offset), Number(strtab.size))) return null;
-  const names = readAt2(fd, Number(strtab.size), Number(strtab.offset));
+  const names = readAt(fd, Number(strtab.size), Number(strtab.offset));
   const sections = raw.map((section) => {
     const start = section.nameOffset;
     let end = start;
@@ -7482,7 +7478,7 @@ function readElfLayout(fd) {
     };
   });
   if (!fits(Number(phoff), phnum * phentsize)) return null;
-  const phTable = readAt2(fd, phnum * phentsize, Number(phoff));
+  const phTable = readAt(fd, phnum * phentsize, Number(phoff));
   if (phTable.length !== phnum * phentsize) return null;
   const segments = [];
   for (let i = 0; i < phnum; i++) {
@@ -7519,7 +7515,7 @@ function tweakccWouldFind(fd, segment, needle) {
   const last = segment.vaddr + segment.filesz - 8n;
   for (let vaddr = first; vaddr <= last; vaddr += TWEAKCC_SCAN_STRIDE) {
     const at = Number(segment.offset + (vaddr - segment.vaddr));
-    if (readAt2(fd, 8, at).equals(needle)) return vaddr;
+    if (readAt(fd, 8, at).equals(needle)) return vaddr;
   }
   return null;
 }
@@ -7528,7 +7524,7 @@ function scanForNeedle(fd, from, to, needle, skipFrom, skipTo) {
   for (let start = from; start < to; start += SCAN_CHUNK - 7) {
     const length = Math.min(SCAN_CHUNK, to - start);
     if (length < 8) break;
-    const chunk = readAt2(fd, length, start);
+    const chunk = readAt(fd, length, start);
     let at = 0;
     for (; ; ) {
       const found = chunk.indexOf(needle, at);
@@ -7586,9 +7582,9 @@ function shimBunCompiledPointer(path) {
       throw new Error("no address tweakcc's ELF repack scans is usable for Bun's blob pointer");
     }
     const standInOffset = Number(segment.offset + (standInVaddr - segment.vaddr));
-    const displaced = readAt2(fd, 8, standInOffset);
+    const displaced = readAt(fd, 8, standInOffset);
     if (displaced.length !== 8) throw new Error("could not read the bytes Bun's blob pointer displaces");
-    writeSync2(fd, needle, 0, 8, standInOffset);
+    writeSync(fd, needle, 0, 8, standInOffset);
     return { pointerVaddr, standInVaddr, displaced, bunVaddr: bun.addr };
   } finally {
     closeSync4(fd);
@@ -7608,7 +7604,7 @@ function restoreBunCompiledPointer(path, shim) {
         "the repack left Bun's blob pointer outside the loaded image, or in more than one segment of it"
       );
     }
-    const standIn = readAt2(fd, 8, standInOffset);
+    const standIn = readAt(fd, 8, standInOffset);
     if (standIn.length !== 8) {
       throw new Error("the repacked binary ends before the stand-in for Bun's blob pointer");
     }
@@ -7623,12 +7619,12 @@ function restoreBunCompiledPointer(path, shim) {
     }
     const value = Buffer.alloc(8);
     value.writeBigUInt64LE(written);
-    writeSync2(fd, value, 0, 8, pointerOffset);
-    writeSync2(fd, shim.displaced, 0, 8, standInOffset);
-    if (!readAt2(fd, 8, pointerOffset).equals(value)) {
+    writeSync(fd, value, 0, 8, pointerOffset);
+    writeSync(fd, shim.displaced, 0, 8, standInOffset);
+    if (!readAt(fd, 8, pointerOffset).equals(value)) {
       throw new Error("Bun's blob pointer did not take the repacked address");
     }
-    if (!readAt2(fd, 8, standInOffset).equals(shim.displaced)) {
+    if (!readAt(fd, 8, standInOffset).equals(shim.displaced)) {
       throw new Error("the bytes the stand-in displaced were not restored");
     }
   } finally {
@@ -7637,13 +7633,185 @@ function restoreBunCompiledPointer(path, shim) {
 }
 
 // src/bun-bundle.ts
-import { closeSync as closeSync5, openSync as openSync5, readSync as readSync4, writeSync as writeSync3 } from "fs";
+import { closeSync as closeSync6, openSync as openSync6, readSync as readSync5, writeSync as writeSync2 } from "fs";
+
+// src/bun-module-table.ts
+import { closeSync as closeSync5, openSync as openSync5, readSync as readSync4, statSync as statSync6 } from "fs";
+var BUN_TRAILER = Buffer.from("\n---- Bun! ----\n");
+var BUN_OFFSETS_BYTES = 32;
+var TAIL_SCAN_BYTES = 16 * 1024 * 1024;
+var MODULE_STRUCT_BYTES_CURRENT = 52;
+var MODULE_STRUCT_BYTES_LEGACY = 36;
+var CONTENTS_FIELD_AT = 8;
+var SOURCEMAP_FIELD_AT = 16;
+var BYTECODE_FIELD_AT = 24;
+var MODULE_INFO_FIELD_AT = 32;
+var BYTECODE_ORIGIN_PATH_FIELD_AT = 40;
+var BUN_BLOB_FLAGS = {
+  /** Every module's source text lies in one run no other region falls inside. */
+  SOURCE_TEXT_CONTIGUOUS: 1 << 4,
+  /** A `[u32; modules]` of each module's source hash follows the module table. */
+  HAS_SOURCE_HASHES: 1 << 5,
+  /** After the source hashes: `u32 count`, then `count` x `{ u32 id, offset, length }`. */
+  HAS_BUILTIN_BYTECODE: 1 << 6,
+  /** After the builtin-bytecode table: one `{ offset, length }` for the shared string table. */
+  HAS_BYTECODE_STRING_TABLE: 1 << 7
+};
+var LOADER_FROM_END = 3;
+var BUN_JAVASCRIPT_LOADER = 1;
+var MAX_MODULE_NAME_BYTES = 4096;
+function tweakccRecognizesModuleName(name) {
+  return name.endsWith("/claude") || name === "claude" || name.endsWith("/claude.exe") || name === "claude.exe" || name.endsWith("/src/entrypoints/cli.js") || name === "src/entrypoints/cli.js" || name.endsWith("/cli") || name === "cli";
+}
+function readAt2(fd, length, position) {
+  if (length <= 0 || position < 0) return null;
+  const buffer = Buffer.alloc(length);
+  const read = readSync4(fd, buffer, 0, length, position);
+  return read === length ? buffer : null;
+}
+function readBunModuleNames(fd, fileSize) {
+  const tailLength = Math.min(fileSize, TAIL_SCAN_BYTES);
+  const tail = readAt2(fd, tailLength, fileSize - tailLength);
+  if (!tail) return null;
+  const tailAt = fileSize - tailLength;
+  for (let searchFrom = tail.length - 1; searchFrom >= 0; ) {
+    const trailerInTail = tail.lastIndexOf(BUN_TRAILER, searchFrom);
+    if (trailerInTail < 0) return null;
+    const parsed = parseBunModuleNamesAt(fd, tailAt + trailerInTail - BUN_OFFSETS_BYTES);
+    if (parsed) return parsed;
+    searchFrom = trailerInTail - 1;
+  }
+  return null;
+}
+function parseBunModuleNamesAt(fd, offsetsAt) {
+  try {
+    return parseBunModuleNamesAtUnchecked(fd, offsetsAt);
+  } catch {
+    return null;
+  }
+}
+function parseBunModuleNamesAtUnchecked(fd, offsetsAt) {
+  const offsets = readAt2(fd, BUN_OFFSETS_BYTES, offsetsAt);
+  if (!offsets) return null;
+  const byteCount = offsets.readBigUInt64LE(0);
+  const modulesOffset = offsets.readUInt32LE(8);
+  const modulesLength = offsets.readUInt32LE(12);
+  const entryPointId = offsets.readUInt32LE(16);
+  const compileExecArgvOffset = offsets.readUInt32LE(20);
+  const compileExecArgvLength = offsets.readUInt32LE(24);
+  const flags = offsets.readUInt32LE(28);
+  if (byteCount <= 0n || byteCount > BigInt(offsetsAt)) return null;
+  const blobAt = offsetsAt - Number(byteCount);
+  if (modulesLength <= 0 || BigInt(modulesOffset) + BigInt(modulesLength) > byteCount) return null;
+  const structBytes = modulesLength % MODULE_STRUCT_BYTES_LEGACY === 0 && modulesLength % MODULE_STRUCT_BYTES_CURRENT !== 0 ? MODULE_STRUCT_BYTES_LEGACY : MODULE_STRUCT_BYTES_CURRENT;
+  const moduleCount = Math.floor(modulesLength / structBytes);
+  if (moduleCount <= 0 || entryPointId >= moduleCount) return null;
+  const modules = readAt2(fd, moduleCount * structBytes, blobAt + modulesOffset);
+  if (!modules) return null;
+  const names = [];
+  const nameOffsets = [];
+  const contents = [];
+  const sourcemap = [];
+  const bytecode = [];
+  const moduleInfo = [];
+  const bytecodeOriginPath = [];
+  const loaders = [];
+  for (let index = 0; index < moduleCount; index++) {
+    const nameOffset = modules.readUInt32LE(index * structBytes);
+    const nameLength = modules.readUInt32LE(index * structBytes + 4);
+    if (nameLength <= 0 || nameLength > MAX_MODULE_NAME_BYTES) return null;
+    if (BigInt(nameOffset) + BigInt(nameLength) > byteCount) return null;
+    const bytes = readAt2(fd, nameLength + 1, blobAt + nameOffset);
+    if (!bytes || bytes[nameLength] !== 0) return null;
+    const name = bytes.subarray(0, nameLength).toString("utf8");
+    if (!/^[\x20-\x7e]+$/.test(name)) return null;
+    names.push(name);
+    nameOffsets.push(blobAt + nameOffset);
+    const pairAt = (field) => ({
+      offset: modules.readUInt32LE(index * structBytes + field),
+      length: modules.readUInt32LE(index * structBytes + field + 4)
+    });
+    contents.push(pairAt(CONTENTS_FIELD_AT));
+    sourcemap.push(pairAt(SOURCEMAP_FIELD_AT));
+    bytecode.push(pairAt(BYTECODE_FIELD_AT));
+    const current = structBytes === MODULE_STRUCT_BYTES_CURRENT;
+    moduleInfo.push(current ? pairAt(MODULE_INFO_FIELD_AT) : { offset: 0, length: 0 });
+    bytecodeOriginPath.push(
+      current ? pairAt(BYTECODE_ORIGIN_PATH_FIELD_AT) : { offset: 0, length: 0 }
+    );
+    loaders.push(modules.readUInt8(index * structBytes + structBytes - LOADER_FROM_END));
+  }
+  return {
+    names,
+    entryPointId,
+    offsets: nameOffsets,
+    contents,
+    sourcemap,
+    bytecode,
+    moduleInfo,
+    bytecodeOriginPath,
+    loaders,
+    blobAt,
+    modulesAt: blobAt + modulesOffset,
+    modulesOffset,
+    modulesLength,
+    structBytes,
+    byteCount: Number(byteCount),
+    compileExecArgv: { offset: compileExecArgvOffset, length: compileExecArgvLength },
+    flags
+  };
+}
+function readBunModuleTable(path) {
+  const fd = openSync5(path, "r");
+  try {
+    return readBunModuleNames(fd, statSync6(path).size);
+  } finally {
+    closeSync5(fd);
+  }
+}
+function readBunJavaScriptModules(path) {
+  const fd = openSync5(path, "r");
+  try {
+    const parsed = readBunModuleNames(fd, statSync6(path).size);
+    if (!parsed) return null;
+    const modules = [];
+    for (let index = 0; index < parsed.names.length; index++) {
+      if (parsed.loaders[index] !== BUN_JAVASCRIPT_LOADER) continue;
+      const range = parsed.contents[index];
+      if (range.offset < 0 || range.length < 0 || range.offset + range.length > parsed.byteCount) {
+        return null;
+      }
+      const bytes = range.length === 0 ? Buffer.alloc(0) : readAt2(fd, range.length, parsed.blobAt + range.offset);
+      if (!bytes) return null;
+      modules.push({
+        index,
+        name: parsed.names[index],
+        source: bytes.toString("utf8"),
+        byteLength: bytes.length
+      });
+    }
+    return modules;
+  } finally {
+    closeSync5(fd);
+  }
+}
+
+// src/bun-bundle.ts
 function writableModuleIndex(path) {
   const table = readBunModuleTable(path);
   if (!table) return null;
   const index = table.names.findIndex(tweakccRecognizesModuleName);
   return index < 0 ? null : index;
 }
+function assertRecognizedEntryModule(path) {
+  const table = readBunModuleTable(path);
+  if (table && !table.names.some(tweakccRecognizesModuleName)) {
+    const entry = table.names[table.entryPointId];
+    throw new Error(
+      `Claude Code entry module ${JSON.stringify(entry)} is not recognized by tweakcc. Update clodex and try again. Claude Code was left unchanged.`
+    );
+  }
+}
 var BUNDLE_MODULE_SEPARATOR = '\n/*clodex:module-boundary`;{}"]*/\n';
 function readClaudeBundle(path) {
   const modules = readBunJavaScriptModules(path);
@@ -7753,18 +7921,18 @@ function placeholderOf(byteLength) {
   return PLACEHOLDER_TEXT.repeat(Math.ceil(byteLength / PLACEHOLDER_TEXT.length)).slice(0, byteLength);
 }
 function readBlobData(path, table, into) {
-  const fd = openSync5(path, "r");
+  const fd = openSync6(path, "r");
   try {
     let read = 0;
     while (read < table.byteCount) {
-      const got = readSync4(fd, into, read, table.byteCount - read, table.blobAt + read);
+      const got = readSync5(fd, into, read, table.byteCount - read, table.blobAt + read);
       if (got <= 0) {
         throw new Error(`read ${read} of the ${table.byteCount} blob bytes of ${path}`);
       }
       read += got;
     }
   } finally {
-    closeSync5(fd);
+    closeSync6(fd);
   }
 }
 function repointModule(data, table, append) {
@@ -7816,7 +7984,7 @@ function applyBundleWritePlan(path, plan) {
   }
   const offsets = Buffer.from(plan.offsets);
   offsets.writeBigUInt64LE(BigInt(byteCount), 0);
-  const fd = openSync5(path, "r+");
+  const fd = openSync6(path, "r+");
   try {
     writeAll(fd, plan.data, repacked.blobAt, path);
     const padding = byteCount - plan.data.length;
@@ -7824,7 +7992,7 @@ function applyBundleWritePlan(path, plan) {
     writeAll(fd, offsets, repacked.blobAt + byteCount, path);
     writeAll(fd, BUN_TRAILER2, repacked.blobAt + byteCount + BUN_OFFSETS_BYTES2, path);
   } finally {
-    closeSync5(fd);
+    closeSync6(fd);
   }
   const published = readBunModuleTable(path);
   if (!published) throw new Error(`cannot re-read the Bun module table of ${path} after publishing its blob`);
@@ -7852,7 +8020,7 @@ function applyBundleWritePlan(path, plan) {
 function writeAll(fd, bytes, position, path) {
   let written = 0;
   while (written < bytes.length) {
-    const wrote = writeSync3(fd, bytes, written, bytes.length - written, position + written);
+    const wrote = writeSync2(fd, bytes, written, bytes.length - written, position + written);
     if (wrote <= 0) throw new Error(`wrote ${written} of ${bytes.length} blob bytes to ${path}`);
     written += wrote;
   }
@@ -7863,13 +8031,20 @@ import { wrapLanguageModel, extractReasoningMiddleware } from "ai";
 
 // src/oauth/responses-websocket.ts
 import { createHash as createHash5 } from "crypto";
-import { closeSync as closeSync6, openSync as openSync6 } from "fs";
+import { closeSync as closeSync7, openSync as openSync7 } from "fs";
 import { devNull } from "os";
 import { AsyncLocalStorage } from "async_hooks";
 
 // src/outbound-proxy.ts
+import { randomUUID as randomUUID3 } from "crypto";
 import { networkInterfaces } from "os";
 import { HttpsProxyAgent } from "https-proxy-agent";
+var OUTBOUND_PROXY_HOP_HEADER = "x-clodex-proxy-hop";
+var outboundProxyHopNonce = randomUUID3();
+function isOwnOutboundProxyHop(value) {
+  return (Array.isArray(value) ? value : [value]).some((entry) => entry?.split(",").some((part) => part.trim() === outboundProxyHopNonce));
+}
+var proxyHopHeaders = { [OUTBOUND_PROXY_HOP_HEADER]: outboundProxyHopNonce };
 function hasOutboundProxyEnv(env = process.env) {
   return Boolean(
     env["HTTPS_PROXY"]?.trim() || env["https_proxy"]?.trim() || env["HTTP_PROXY"]?.trim() || env["http_proxy"]?.trim()
@@ -7916,7 +8091,16 @@ function proxyUrlTargetsListener(proxyUrl, listenerHost, listenerPort, localAddr
   }
   const proxyPort = parsed.port ? Number(parsed.port) : parsed.protocol === "https:" ? 443 : parsed.protocol === "http:" ? 80 : void 0;
   if (proxyPort !== listenerPort) return false;
-  const normalizeHost = (host) => host.toLowerCase().replace(/^\[|\]$/g, "");
+  const normalizeHost = (host) => {
+    const plain = host.toLowerCase().replace(/^\[|\]$/g, "");
+    const mapped = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(plain);
+    if (mapped) {
+      const high = parseInt(mapped[1], 16);
+      const low = parseInt(mapped[2], 16);
+      return `${high >> 8}.${high & 255}.${low >> 8}.${low & 255}`;
+    }
+    return plain.replace(/^::ffff:(?=\d+\.)/, "").replace(/^localhost\.$/, "localhost");
+  };
   const proxyHost = normalizeHost(parsed.hostname);
   const boundHost = normalizeHost(listenerHost);
   if (proxyHost === boundHost) return true;
@@ -7949,7 +8133,7 @@ function outboundHttpProxyAgent(targetUrl, env = process.env) {
     if (!parsedProxy.hostname || !["http:", "https:"].includes(parsedProxy.protocol)) {
       throw new TypeError("Invalid proxy URL");
     }
-    return new HttpsProxyAgent(parsedProxy, { keepAlive: true });
+    return new HttpsProxyAgent(parsedProxy, { keepAlive: true, headers: { ...proxyHopHeaders } });
   } catch (err) {
     emitParentNotice(
       `clodex: HTTP(S)_PROXY cannot be used for a CONNECT tunnel; using a direct connection (${err instanceof Error ? err.message : String(err)})`
@@ -9665,7 +9849,7 @@ function descriptorExhaustionCode(error) {
   const code = error.code;
   if (isDescriptorExhaustion(code)) return code;
   try {
-    closeSync6(openSync6(devNull, "r"));
+    closeSync7(openSync7(devNull, "r"));
     return void 0;
   } catch (probe) {
     const probeCode = probe.code;
@@ -10561,7 +10745,7 @@ function createResponsesWebSocketFetch(wsUrl, log13, options = {}) {
 }
 
 // src/oauth/claude-identity.ts
-import { createHash as createHash6, randomUUID as randomUUID3 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID4 } from "crypto";
 var CLAUDE_CODE_CLI_VERSION = "2.1.195";
 var CLAUDE_CODE_USER_AGENT = `claude-cli/${CLAUDE_CODE_CLI_VERSION} (external, cli)`;
 var CLAUDE_CODE_ENTRYPOINT = process.env.CLAUDE_CODE_ENTRYPOINT ?? "cli";
@@ -10570,7 +10754,7 @@ var sessionCache = /* @__PURE__ */ new Map();
 function getOrCreateSessionId(seed) {
   let id = sessionCache.get(seed);
   if (!id) {
-    id = randomUUID3();
+    id = randomUUID4();
     sessionCache.set(seed, id);
   }
   return id;
@@ -11494,7 +11678,7 @@ function thinkingProviderOptions(npm) {
 
 // src/proxy.ts
 import { createServer } from "http";
-import { appendFileSync as appendFileSync2, openSync as openSync7, writeSync as writeSync4, closeSync as closeSync7 } from "fs";
+import { appendFileSync as appendFileSync2, openSync as openSync8, writeSync as writeSync3, closeSync as closeSync8 } from "fs";
 
 // src/http-utils.ts
 import * as zlib from "zlib";
@@ -11705,7 +11889,7 @@ function withThousands2(value) {
   return value.toLocaleString("en-US");
 }
 function formatPricingBoundaryWarning(modelLabel, boundary, inputTokens) {
-  return `clodex: ${modelLabel} request counted ${withThousands2(inputTokens)} input tokens, above the ${withThousands2(boundary)}-token pricing boundary. The provider prices the full request at a higher rate above this point. Set this model to the standard context stop to stay under it.`;
+  return `clodex: ${modelLabel} request counted ${withThousands2(inputTokens)} input tokens, above the ${withThousands2(boundary)}-token pricing boundary. The provider prices the full request at a higher rate above this point. Choose a smaller context stop to reduce the chance of higher-rate requests.`;
 }
 function reportPricingBoundaryCrossing(observation, emit = emitParentNotice) {
   const { modelKey, modelLabel, pricingBoundary, inputTokens } = observation;
@@ -11726,7 +11910,7 @@ function routeUnavailableMessage(modelId, reason) {
 }
 
 // src/upstream-forward.ts
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 import { Readable, Transform } from "stream";
 import { StringDecoder } from "string_decoder";
 
@@ -11823,7 +12007,7 @@ function upstreamHoldsThreads(url) {
   }
 }
 function anchorSafeMessageId(id) {
-  return typeof id === "string" && id.startsWith("msg_") ? "clodex_" + randomUUID4().replace(/-/g, "") : id;
+  return typeof id === "string" && id.startsWith("msg_") ? "clodex_" + randomUUID5().replace(/-/g, "") : id;
 }
 function isThreadContinuation(body) {
   const thread = body.thread;
@@ -11972,10 +12156,10 @@ async function relayAnthropicMessages(res, messagesUrl, body, apiKey, clientWant
 }
 
 // src/proxy.ts
-import { randomUUID as randomUUID6 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
 
 // src/sdk-adapter.ts
-import { createHash as createHash7, randomUUID as randomUUID5 } from "crypto";
+import { createHash as createHash7, randomUUID as randomUUID6 } from "crypto";
 import { streamText, generateText, tool, jsonSchema } from "ai";
 
 // src/proxy-shared.ts
@@ -12515,15 +12699,10 @@ function annotateToolNames(messages) {
   }
 }
 function thinkingToSdkPart(block, npm) {
-  const text6 = block.thinking ?? "";
-  if (npm === "@ai-sdk/openai" && !block.signature && !text6.trim()) return null;
-  const part = { type: "reasoning", text: text6 };
-  if (block.signature) {
-    if (npm === "@ai-sdk/google") {
-      part.providerOptions = { google: { thoughtSignature: block.signature } };
-    } else if (npm === "@ai-sdk/openai" || npm === "@ai-sdk/openai-compatible") {
-      part.providerOptions = { openai: { reasoningEncryptedContent: block.signature } };
-    }
+  if (npm === "@ai-sdk/openai") return null;
+  const part = { type: "reasoning", text: block.thinking ?? "" };
+  if (block.signature && npm === "@ai-sdk/google") {
+    part.providerOptions = { google: { thoughtSignature: block.signature } };
   }
   return part;
 }
@@ -12824,7 +13003,7 @@ function forwardAbortSignal(source, target) {
   return () => source.removeEventListener("abort", forward);
 }
 function translatedMessageId() {
-  return "clodex_" + randomUUID5().replace(/-/g, "");
+  return "clodex_" + randomUUID6().replace(/-/g, "");
 }
 async function writeAnthropicStream(stream, modelId, write, log13, observer, tools) {
   const messageId = translatedMessageId();
@@ -13349,12 +13528,12 @@ function createTranslationLifecycle(logPath, requestId, claudeSessionId, modelId
 function appendSecureLog(logPath, line) {
   const redacted = redactTraceLine(line);
   try {
-    const fd = openSync7(logPath, "a", 384);
+    const fd = openSync8(logPath, "a", 384);
     try {
-      writeSync4(fd, `${(/* @__PURE__ */ new Date()).toISOString()} ${redacted}
+      writeSync3(fd, `${(/* @__PURE__ */ new Date()).toISOString()} ${redacted}
 `);
     } finally {
-      closeSync7(fd);
+      closeSync8(fd);
     }
   } catch {
     try {
@@ -13401,7 +13580,7 @@ function configuredAliasLookupNames(alias) {
   }))].map(normalizeRouteLookupId);
 }
 async function startProxyCatalog(routes, defaultAliasId, debug = false, inferenceLogPath, debugLogPath, webSocketDiagnosticsLogPath, modelAliases) {
-  const proxyToken = randomUUID6();
+  const proxyToken = randomUUID7();
   silenceSdkWarnings();
   if (routes.length === 0) {
     throw new Error("Proxy catalog requires at least one route");
@@ -13824,7 +14003,7 @@ async function startProxyCatalog(routes, defaultAliasId, debug = false, inferenc
               res,
               upstreamStatus === 500 ? 502 : upstreamStatus,
               clientMessage,
-              contextLengthExceeded ? relayRequestId ?? randomUUID6() : void 0
+              contextLengthExceeded ? relayRequestId ?? randomUUID7() : void 0
             );
           } else {
             const errorType = anthropicErrorType(upstreamStatus, details?.transportCode);
@@ -13832,7 +14011,7 @@ async function startProxyCatalog(routes, defaultAliasId, debug = false, inferenc
 data: ${JSON.stringify({
               type: "error",
               error: { type: errorType, message: clientMessage },
-              ...contextLengthExceeded ? { request_id: relayRequestId ?? randomUUID6() } : {}
+              ...contextLengthExceeded ? { request_id: relayRequestId ?? randomUUID7() } : {}
             })}
 
 `);
@@ -14062,7 +14241,7 @@ function buildHttpProxyRoutes(providers, favorites, modelAliases = void 0, max =
 
 // src/patcher.ts
 function getPatchLockPath() {
-  return join7(getAppHome(), "patch.lock");
+  return join8(getAppHome(), "patch.lock");
 }
 function writePatchManifest(manifest, path = getPatchManifestPath()) {
   mkdirSync5(getAppHome(), { recursive: true, mode: 448 });
@@ -14219,13 +14398,13 @@ function pidIsAlive(pid) {
 function tryAcquirePatchLock(lockPath = getPatchLockPath(), opts = {}) {
   const now = opts.now ?? Date.now();
   const isAlive = opts.isAlive ?? pidIsAlive;
-  mkdirSync5(join7(lockPath, ".."), { recursive: true, mode: 448 });
+  mkdirSync5(join8(lockPath, ".."), { recursive: true, mode: 448 });
   for (let attempt = 0; attempt < 2; attempt++) {
     try {
-      const fd = openSync8(lockPath, "wx");
+      const fd = openSync9(lockPath, "wx");
       const content = { pid: process.pid, startedAt: now };
       writeFileSync5(fd, JSON.stringify(content));
-      closeSync8(fd);
+      closeSync9(fd);
       return () => {
         try {
           unlinkSync3(lockPath);
@@ -14235,7 +14414,7 @@ function tryAcquirePatchLock(lockPath = getPatchLockPath(), opts = {}) {
     } catch {
       let stale = false;
       try {
-        const existing = JSON.parse(readFileSync9(lockPath, "utf8"));
+        const existing = JSON.parse(readFileSync10(lockPath, "utf8"));
         stale = !existing.pid || !isAlive(existing.pid) || typeof existing.startedAt === "number" && now - existing.startedAt > PATCH_LOCK_STALE_MS;
       } catch {
         stale = true;
@@ -14257,7 +14436,7 @@ function takeIgnoredLaunchOverride() {
 }
 function resolveClaudeBinaryForPatch() {
   const envOverride = process.env["TWEAKCC_CC_INSTALLATION_PATH"]?.trim() || null;
-  const nativeSymlink = join7(homedir2(), ".local", "bin", "claude");
+  const nativeSymlink = join8(homedir3(), ".local", "bin", "claude");
   if (envOverride && !existsSync4(envOverride)) {
     return { ok: false, reason: "patch-target-missing", declaredPath: envOverride };
   }
@@ -14265,7 +14444,7 @@ function resolveClaudeBinaryForPatch() {
   if (!source) return { ok: false, reason: "binary-not-found" };
   let resolved;
   try {
-    resolved = realpathSync2(source);
+    resolved = realpathSync3(source);
   } catch {
     return { ok: false, reason: "binary-not-found" };
   }
@@ -14285,8 +14464,8 @@ function resolveClaudeBinaryForPatch() {
   let launchOverrideResolved = null;
   if (launchOverride) {
     try {
-      const followedOverride = resolveThroughNpmShims(realpathSync2(launchOverride));
-      launchOverrideResolved = followedOverride.ok ? followedOverride.path : realpathSync2(launchOverride);
+      const followedOverride = resolveThroughNpmShims(realpathSync3(launchOverride));
+      launchOverrideResolved = followedOverride.ok ? followedOverride.path : realpathSync3(launchOverride);
     } catch {
       launchOverrideResolved = launchOverride;
     }
@@ -14425,11 +14604,11 @@ async function applyPatch(binaryPath, version, desired, configHash, opts) {
   try {
     mkdirSync5(backupDir(), { recursive: true });
     const { tryDetectInstallation, readContent, writeContent } = await import("tweakcc");
-    candidateDir = mkdtempSync(join7(dirname5(binaryPath), ".clodex-patch-"));
-    const candidatePath = join7(candidateDir, basename(binaryPath));
+    candidateDir = mkdtempSync(join8(dirname5(binaryPath), ".clodex-patch-"));
+    const candidatePath = join8(candidateDir, basename(binaryPath));
     const seedCandidate = async (from) => {
       copyFileSync(from, candidatePath);
-      const shim = shimEntryModuleName(candidatePath);
+      assertRecognizedEntryModule(candidatePath);
       const installation = await tryDetectInstallation({ path: candidatePath });
       const bundle = readClaudeBundle(candidatePath);
       if (!bundle && installation.kind === "native") {
@@ -14438,7 +14617,6 @@ async function applyPatch(binaryPath, version, desired, configHash, opts) {
         );
       }
       const source = bundle ? bundle.source : await readContent(installation);
-      if (shim) restoreEntryModuleName(candidatePath, shim, { resign: false });
       return { installation, source, bundle };
     };
     const facts = collectPristineFacts({
@@ -14548,8 +14726,6 @@ async function applyPatch(binaryPath, version, desired, configHash, opts) {
       local = discardLocalPatchOutcome(builtIn.content, local.results);
     }
     results = [...results, ...local.results];
-    const writeShim = shimEntryModuleName(candidatePath);
-    let publishedBlob = false;
     if (loaded.bundle) {
       const writable = writableModuleIndex(candidatePath);
       if (writable === null) {
@@ -14565,14 +14741,12 @@ async function applyPatch(binaryPath, version, desired, configHash, opts) {
       await writeContent(loaded.installation, plan2.content);
       if (bunPointerShim) restoreBunCompiledPointer(candidatePath, bunPointerShim);
       applyBundleWritePlan(candidatePath, plan2);
-      publishedBlob = true;
     } else {
       const bunPointerShim = shimBunCompiledPointer(candidatePath);
       await writeContent(loaded.installation, local.content);
       if (bunPointerShim) restoreBunCompiledPointer(candidatePath, bunPointerShim);
     }
-    if (writeShim) restoreEntryModuleName(candidatePath, writeShim, { resign: true });
-    else if (publishedBlob) resignMachOBinary(candidatePath);
+    signAndVerifyMachOCandidate(candidatePath, binaryPath);
     patchedSize = statSync7(candidatePath).size;
     patchedSha256 = sha256File(candidatePath);
     renameSync2(candidatePath, binaryPath);
@@ -14713,6 +14887,9 @@ function runRestoreCommand(target) {
   p2.log.success(`Restored pristine claude ${version} from ${plan.backupPath}.`);
   return 0;
 }
+function warnOnEditorExtensionDrift(binaryPath, version) {
+  for (const warning of claudeExtensionDriftWarnings({ binaryPath, version })) p2.log.warn(warning);
+}
 async function runPatchCommand(opts = {}) {
   const target = resolveClaudeBinaryForPatch();
   const ignoredOverride = takeIgnoredLaunchOverride();
@@ -14758,6 +14935,7 @@ async function runPatchCommand(opts = {}) {
   });
   if (state === "current") {
     p2.log.success(`claude ${version} is already patched with the current model config \u2014 nothing to do.`);
+    warnOnEditorExtensionDrift(binaryPath, version);
     return 0;
   }
   const release = tryAcquirePatchLock();
@@ -14793,6 +14971,7 @@ async function runPatchCommand(opts = {}) {
     if (!opts.trace) {
       for (const line of outcome.detailLines ?? []) p2.log.info(pc3.dim(line));
     }
+    warnOnEditorExtensionDrift(binaryPath, version);
     return 0;
   } finally {
     release();
@@ -15157,16 +15336,16 @@ function localProvidersToServerModels(localProviders) {
 }
 
 // src/registry/credential-cleanup-journal.ts
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
 import {
-  closeSync as closeSync9,
+  closeSync as closeSync10,
   existsSync as existsSync5,
   fstatSync as fstatSync3,
   fsyncSync as fsyncSync2,
   lstatSync,
   mkdirSync as mkdirSync6,
-  openSync as openSync9,
-  readFileSync as readFileSync10,
+  openSync as openSync10,
+  readFileSync as readFileSync11,
   renameSync as renameSync3,
   unlinkSync as unlinkSync4,
   writeFileSync as writeFileSync6
@@ -15257,7 +15436,7 @@ function readJournalUnlocked(path) {
     if (before.isSymbolicLink() || !before.isFile()) {
       throw new Error("Credential cleanup journal must be a regular file.");
     }
-    fd = openSync9(path, "r");
+    fd = openSync10(path, "r");
     const opened = fstatSync3(fd);
     if (before.dev !== opened.dev || before.ino !== opened.ino) {
       throw new Error("Credential cleanup journal changed while opening.");
@@ -15273,44 +15452,44 @@ function readJournalUnlocked(path) {
     if (opened.size > MAX_JOURNAL_BYTES) {
       throw new Error("Credential cleanup journal is too large.");
     }
-    return parseJournal(JSON.parse(readFileSync10(fd, "utf8")));
+    return parseJournal(JSON.parse(readFileSync11(fd, "utf8")));
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     throw new Error(`Could not read credential cleanup journal: ${message}`);
   } finally {
-    if (fd !== void 0) closeSync9(fd);
+    if (fd !== void 0) closeSync10(fd);
   }
 }
 function syncParentDirectory(path) {
   let fd;
   try {
-    fd = openSync9(dirname6(path), "r");
+    fd = openSync10(dirname6(path), "r");
     fsyncSync2(fd);
   } catch (error) {
     const code = error.code;
     if (code !== "EINVAL" && code !== "ENOTSUP" && code !== "EPERM") throw error;
   } finally {
-    if (fd !== void 0) closeSync9(fd);
+    if (fd !== void 0) closeSync10(fd);
   }
 }
 function writeJournalUnlocked(journal, path) {
   assertRegistryWriteOwnership(path);
   ensureSecureAppHome();
   mkdirSync6(dirname6(path), { recursive: true, mode: DIR_MODE2 });
-  const tmp = `${path}.${process.pid}.${randomUUID7()}.tmp`;
+  const tmp = `${path}.${process.pid}.${randomUUID8()}.tmp`;
   let fd;
   try {
-    fd = openSync9(tmp, "wx", FILE_MODE4);
+    fd = openSync10(tmp, "wx", FILE_MODE4);
     writeFileSync6(fd, `${JSON.stringify(journal, null, 2)}
 `);
     fsyncSync2(fd);
-    closeSync9(fd);
+    closeSync10(fd);
     fd = void 0;
     assertRegistryWriteOwnership(path);
     renameSync3(tmp, path);
     syncParentDirectory(path);
   } finally {
-    if (fd !== void 0) closeSync9(fd);
+    if (fd !== void 0) closeSync10(fd);
     try {
       unlinkSync4(tmp);
     } catch (error) {
@@ -16340,7 +16519,8 @@ function readCapabilityFlags(m) {
   const bool = (v) => typeof v === "boolean" ? v : void 0;
   return {
     useResponsesLite: bool(m["use_responses_lite"]),
-    preferWebSockets: bool(m["prefer_websockets"])
+    preferWebSockets: bool(m["prefer_websockets"]),
+    minimalClientVersion: readCodexClientVersion(m["minimal_client_version"])
   };
 }
 function parseOpenAiModelEntries(body) {
@@ -16377,7 +16557,8 @@ function buildDynamicOAuthModel(entry, seedById, codexCatalog) {
       effectiveContextPercent: entry.effective_context_window_percent ?? seed.effectiveContextPercent,
       maxOutputTokens: entry.max_output_tokens ?? seed.maxOutputTokens,
       useResponsesLite: entry.useResponsesLite ?? seed.useResponsesLite,
-      preferWebSockets: entry.preferWebSockets ?? seed.preferWebSockets
+      preferWebSockets: entry.preferWebSockets ?? seed.preferWebSockets,
+      minimalClientVersion: entry.minimalClientVersion ?? seed.minimalClientVersion
     };
   }
   const { id } = entry;
@@ -16412,7 +16593,8 @@ function buildDynamicOAuthModel(entry, seedById, codexCatalog) {
     // so a wrong `true` here costs an unusable menu entry, not a 400.
     reasoning: codexCatalog ? true : modelPrefersResponsesApi(id),
     useResponsesLite: entry.useResponsesLite,
-    preferWebSockets: entry.preferWebSockets
+    preferWebSockets: entry.preferWebSockets,
+    minimalClientVersion: entry.minimalClientVersion
   };
 }
 async function fetchJsonWithAuth(url, accessToken, timeoutMs) {
@@ -16473,6 +16655,10 @@ async function refreshOpenAiOAuthModels(accessToken) {
     credentialRejected: credentialFailure !== void 0
   };
 }
+function warningSuffix(models) {
+  const warning = codexClientVersionWarning(applyOAuthSeedContextMetadata(models));
+  return warning ? ` ${warning}` : "";
+}
 async function refreshApiListProvider(provider, apiKey) {
   const npm = provider.api.npm ?? "@ai-sdk/openai-compatible";
   const retained = isRetainedOpenCodeGoProvider(provider);
@@ -16682,7 +16868,7 @@ async function refreshProviderModels(providerId, apiKey, registry, credentialSna
       if (oauthResult.source === "seed" && cachedModelCount(cacheProvider) > 0) {
         return skipWithCachedModels(
           cacheProvider,
-          `Live model discovery failed${failureDetail} \u2014 kept your existing cached model list instead of overwriting it with clodex's built-in fallback list. Try refreshing again later.`
+          `Live model discovery failed${failureDetail} \u2014 kept your existing cached model list instead of overwriting it with clodex's built-in fallback list. Try refreshing again later.` + warningSuffix(cacheProvider.modelsCache.models)
         );
       }
       if (oauthResult.source === "seed") {
@@ -16776,7 +16962,7 @@ async function refreshProviderModels(providerId, apiKey, registry, credentialSna
       ok: true,
       modelCount: enriched.length,
       previousModelCount: hadPreviousRefresh ? previousModelCount : void 0,
-      reason: oauthFallbackReason
+      reason: isChatGptOAuthProvider(provider) ? [oauthFallbackReason, codexClientVersionWarning(models)].filter(Boolean).join(" ") || void 0 : void 0
     };
   } catch (err) {
     return {
@@ -17133,6 +17319,7 @@ async function authenticateProvider(providerId, options = {}) {
       refreshSpinner.stop(`Models not refreshed${refreshResult.reason ? ` \u2014 ${refreshResult.reason}` : ""}`);
     } else if (refreshResult.ok) {
       refreshSpinner.stop("Models refreshed");
+      if (refreshResult.reason) p4.log.warn(refreshResult.reason);
     } else {
       refreshSpinner.stop(`Could not refresh models${refreshResult.reason ? ` \u2014 ${refreshResult.reason}` : ""}`);
     }
@@ -18406,7 +18593,7 @@ async function askSaveServerPassword() {
 
 // src/server/router.ts
 import { createServer as createServer2 } from "http";
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 
 // src/openai-adapter.ts
 import { tool as tool2, jsonSchema as jsonSchema2, streamText as streamText2, generateText as generateText2 } from "ai";
@@ -18812,7 +18999,7 @@ async function routeRequest(req, res, options, modelCache, plog) {
 }
 async function handleAnthropicMessages(req, res, options, modelCache, plog) {
   const clientAbort = watchClientDisconnect(res);
-  const body = await readJson(req);
+  const body = await readJson2(req);
   if (!body) {
     sendJson(res, 400, { error: { message: "Invalid JSON body" } });
     return;
@@ -18822,7 +19009,7 @@ async function handleAnthropicMessages(req, res, options, modelCache, plog) {
     plog(`model not found: ${body.model}`);
     return;
   }
-  const requestId = randomUUID8();
+  const requestId = randomUUID9();
   const claudeSessionIdHeader = Array.isArray(req.headers["x-claude-code-session-id"]) ? req.headers["x-claude-code-session-id"][0] : req.headers["x-claude-code-session-id"];
   const claudeSessionId = extractClaudeSessionId(body, claudeSessionIdHeader);
   const claudeAgentIds = extractClaudeAgentIds(req.headers);
@@ -19082,7 +19269,7 @@ data: ${JSON.stringify({
 }
 async function handleAnthropicCountTokens(req, res, options, plog) {
   const clientAbort = watchClientDisconnect(res);
-  const body = await readJson(req);
+  const body = await readJson2(req);
   if (!body) {
     sendJson(res, 400, { error: { message: "Invalid JSON body" } });
     return;
@@ -19151,7 +19338,7 @@ async function handleAnthropicCountTokens(req, res, options, plog) {
 }
 async function handleOpenAIChatCompletions(req, res, options, modelCache, plog) {
   const clientAbort = watchClientDisconnect(res);
-  const body = await readJson(req);
+  const body = await readJson2(req);
   if (!body) {
     sendJson(res, 400, { error: { message: "Invalid JSON body" } });
     return;
@@ -19358,7 +19545,7 @@ function getResponseModelId(bodyModel, model, options) {
   if (typeof bodyModel === "string" && options.aliasNames?.has(bodyModel)) return bodyModel;
   return options.gateway?.maskGatewayIds ? gatewayDisplayName(model, options.gateway) : typeof bodyModel === "string" ? bodyModel : model.id;
 }
-async function readJson(req) {
+async function readJson2(req) {
   try {
     const raw = await readBody(req);
     return raw ? JSON.parse(raw) : {};
@@ -19496,14 +19683,14 @@ import * as http2 from "http";
 import * as https from "https";
 import * as net from "net";
 import { PassThrough } from "stream";
-import { randomUUID as randomUUID9 } from "crypto";
+import { randomUUID as randomUUID10 } from "crypto";
 import { URL as URL2 } from "url";
 import { createBrotliDecompress, createGunzip, createInflate } from "zlib";
 
 // src/http-proxy/ca.ts
 import { randomBytes as randomBytes2 } from "crypto";
-import { chmodSync as chmodSync5, existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync11, writeFileSync as writeFileSync7 } from "fs";
-import { dirname as dirname7, join as join8, resolve as resolve3 } from "path";
+import { chmodSync as chmodSync5, existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync12, writeFileSync as writeFileSync7 } from "fs";
+import { dirname as dirname7, join as join9, resolve as resolve3 } from "path";
 import forge from "node-forge";
 var CERT_DIR = "http-proxy";
 var CA_CERT_FILE = "clodex-ca.pem";
@@ -19518,14 +19705,14 @@ function serialNumber() {
   return bytes.toString("hex");
 }
 function certPaths() {
-  const dir = join8(getAppHome(), CERT_DIR);
+  const dir = join9(getAppHome(), CERT_DIR);
   return {
     dir,
-    caCert: join8(dir, CA_CERT_FILE),
-    caKey: join8(dir, CA_KEY_FILE),
-    serverCert: join8(dir, SERVER_CERT_FILE),
-    serverKey: join8(dir, SERVER_KEY_FILE),
-    version: join8(dir, CERT_VERSION_FILE)
+    caCert: join9(dir, CA_CERT_FILE),
+    caKey: join9(dir, CA_KEY_FILE),
+    serverCert: join9(dir, SERVER_CERT_FILE),
+    serverKey: join9(dir, SERVER_KEY_FILE),
+    version: join9(dir, CERT_VERSION_FILE)
   };
 }
 function writePrivate(path, value) {
@@ -19578,8 +19765,8 @@ function generateCertificates(paths) {
 }
 function storedCertificatesAreCurrent(paths) {
   try {
-    const ca = forge.pki.certificateFromPem(readFileSync11(paths.caCert, "utf8"));
-    const server = forge.pki.certificateFromPem(readFileSync11(paths.serverCert, "utf8"));
+    const ca = forge.pki.certificateFromPem(readFileSync12(paths.caCert, "utf8"));
+    const server = forge.pki.certificateFromPem(readFileSync12(paths.serverCert, "utf8"));
     const now = Date.now();
     const renewalBuffer = 7 * 24 * 60 * 60 * 1e3;
     return ca.validity.notBefore.getTime() <= now && ca.validity.notAfter.getTime() > now + renewalBuffer && server.validity.notBefore.getTime() <= now && server.validity.notAfter.getTime() > now + renewalBuffer && ca.verify(ca) && ca.verify(server);
@@ -19590,13 +19777,13 @@ function storedCertificatesAreCurrent(paths) {
 function ensureHttpProxyCertificates() {
   const paths = certPaths();
   const required = [paths.caCert, paths.caKey, paths.serverCert, paths.serverKey, paths.version];
-  const current = required.every(existsSync6) && readFileSync11(paths.version, "utf8") === CERT_VERSION && storedCertificatesAreCurrent(paths);
+  const current = required.every(existsSync6) && readFileSync12(paths.version, "utf8") === CERT_VERSION && storedCertificatesAreCurrent(paths);
   if (!current) generateCertificates(paths);
   return {
     caCertPath: paths.caCert,
-    caCert: readFileSync11(paths.caCert, "utf8"),
-    serverCert: readFileSync11(paths.serverCert, "utf8"),
-    serverKey: readFileSync11(paths.serverKey, "utf8")
+    caCert: readFileSync12(paths.caCert, "utf8"),
+    serverCert: readFileSync12(paths.serverCert, "utf8"),
+    serverKey: readFileSync12(paths.serverKey, "utf8")
   };
 }
 function ensureHttpProxyCaBundle(relayCaCertPath, additionalCaCertPath, onWarning) {
@@ -19610,7 +19797,7 @@ function ensureHttpProxyCaBundle(relayCaCertPath, additionalCaCertPath, onWarnin
   let additionalCa;
   try {
     if (resolve3(additionalCaCertPath) === resolve3(relayCaCertPath)) return relayCaCertPath;
-    additionalCa = readFileSync11(additionalCaCertPath, "utf8").trim();
+    additionalCa = readFileSync12(additionalCaCertPath, "utf8").trim();
   } catch (err) {
     return warn(
       `NODE_EXTRA_CA_CERTS=${additionalCaCertPath} cannot be read (${err instanceof Error ? err.message : String(err)}), so it is not part of the proxy CA bundle. Where node reports this itself it says only "Ignoring extra certs ... load failed", without naming the variable. Clear or correct it.`
@@ -19620,8 +19807,8 @@ function ensureHttpProxyCaBundle(relayCaCertPath, additionalCaCertPath, onWarnin
     return warn(`NODE_EXTRA_CA_CERTS=${additionalCaCertPath} is empty, so it adds nothing.`);
   }
   try {
-    const relayCa = readFileSync11(relayCaCertPath, "utf8").trimEnd();
-    const combinedPath = join8(dirname7(relayCaCertPath), "combined-ca.pem");
+    const relayCa = readFileSync12(relayCaCertPath, "utf8").trimEnd();
+    const combinedPath = join9(dirname7(relayCaCertPath), "combined-ca.pem");
     writePublic(combinedPath, `${relayCa}
 ${additionalCa}
 `);
@@ -19788,7 +19975,7 @@ function requestHeadersWithoutProxyHeaders(req) {
   const headers = [];
   for (let i = 0; i < req.rawHeaders.length; i += 2) {
     const name = req.rawHeaders[i];
-    if (/^proxy-(authorization|connection)$/i.test(name)) continue;
+    if (/^proxy-(authorization|connection)$/i.test(name) || name.toLowerCase() === OUTBOUND_PROXY_HOP_HEADER) continue;
     headers.push(name, req.rawHeaders[i + 1] ?? "");
   }
   return headers;
@@ -20325,6 +20512,7 @@ async function startHttpProxy(options) {
   const anthropicOrigin = new URL2(options.anthropicOrigin ?? "https://api.anthropic.com");
   const anthropicProxyUrl = outboundProxyUrlForTarget(anthropicOrigin.href);
   let anthropicAgent;
+  let anthropicViaProxy = false;
   let adapter = options.adapterHandle ?? null;
   if (options.routes.length > 0) {
     adapter ??= await startProxyCatalog(
@@ -20339,11 +20527,27 @@ async function startHttpProxy(options) {
   }
   const adapterAgent = adapter ? new http2.Agent({ keepAlive: true }) : void 0;
   let shuttingDown = false;
+  let warnedProxyLoop = false;
+  const rejectProxyLoop = (target) => {
+    if (warnedProxyLoop) return;
+    warnedProxyLoop = true;
+    const secure = target.startsWith("https:");
+    const candidates = secure ? ["HTTPS_PROXY", "https_proxy"] : ["HTTP_PROXY", "http_proxy"];
+    const name = candidates.find((key) => process.env[key]?.trim()) ?? candidates[0];
+    emitParentNotice(`clodex: outbound proxy loop detected; check ${name} (request returned to this proxy)`);
+  };
   const mitmServer = https.createServer({
     key: certificates.serverKey,
     cert: certificates.serverCert,
     minVersion: "TLSv1.2"
   }, async (req, res) => {
+    if (isOwnOutboundProxyHop(req.headers[OUTBOUND_PROXY_HOP_HEADER])) {
+      rejectProxyLoop("https://api.anthropic.com");
+      res.writeHead(508, { "Content-Type": "text/plain" });
+      res.end("Outbound proxy loop detected");
+      return;
+    }
+    delete req.headers[OUTBOUND_PROXY_HOP_HEADER];
     let rawBody;
     try {
       rawBody = await readRawBody(req);
@@ -20354,7 +20558,7 @@ async function startHttpProxy(options) {
     }
     const messagesEndpoint = anthropicMessagesEndpoint(req.url);
     if (req.method === "POST" && messagesEndpoint) {
-      const requestId = randomUUID9();
+      const requestId = randomUUID10();
       let parsed = null;
       let route;
       let adapterBody = rawBody;
@@ -20502,6 +20706,12 @@ async function startHttpProxy(options) {
     return connectTunnelAgents.get(proxyUrl);
   };
   mitmServer.on("upgrade", (req, socket, head) => {
+    if (isOwnOutboundProxyHop(req.headers[OUTBOUND_PROXY_HOP_HEADER])) {
+      rejectProxyLoop("https://api.anthropic.com");
+      socket.once("error", () => socket.destroy());
+      socket.end("HTTP/1.1 508 Loop Detected\r\nConnection: close\r\n\r\n", () => socket.destroy());
+      return;
+    }
     forwardAnthropicUpgrade(
       req,
       socket,
@@ -20512,13 +20722,40 @@ async function startHttpProxy(options) {
       sockets
     );
   });
-  const proxyServer = http2.createServer(forwardPlainHttp);
+  const proxyServer = http2.createServer((req, res) => {
+    if (isOwnOutboundProxyHop(req.headers[OUTBOUND_PROXY_HOP_HEADER])) {
+      rejectProxyLoop(req.url ?? "");
+      res.writeHead(508, { "Content-Type": "text/plain" });
+      res.end("Outbound proxy loop detected");
+      return;
+    }
+    forwardPlainHttp(req, res);
+  });
   proxyServer.on("connection", (socket) => {
     sockets.add(socket);
     socket.once("close", () => sockets.delete(socket));
   });
   proxyServer.on("connect", (req, clientSocket, head) => {
+    const ownHop = isOwnOutboundProxyHop(req.headers[OUTBOUND_PROXY_HOP_HEADER]);
+    const rejectOwnHop = () => {
+      rejectProxyLoop(`https://${req.url ?? ""}`);
+      clientSocket.once("error", () => clientSocket.destroy());
+      const body = "Outbound proxy loop detected";
+      clientSocket.end(
+        `HTTP/1.1 508 Loop Detected\r
+Content-Type: text/plain\r
+Content-Length: ${Buffer.byteLength(body)}\r
+Connection: close\r
+\r
+${body}`,
+        () => clientSocket.destroy()
+      );
+    };
     if (shouldInterceptConnect(req.url ?? "")) {
+      if (ownHop && anthropicViaProxy) {
+        rejectOwnHop();
+        return;
+      }
       clientSocket.write("HTTP/1.1 200 Connection Established\r\n\r\n");
       if (head.length > 0) clientSocket.unshift(head);
       mitmServer.emit("connection", clientSocket);
@@ -20541,6 +20778,10 @@ async function startHttpProxy(options) {
       );
     }
     const outboundAgent = outboundProxyUrl !== void 0 && !selfTargeting ? connectTunnelAgent(outboundProxyUrl, targetUrl) : void 0;
+    if (ownHop && outboundAgent) {
+      rejectOwnHop();
+      return;
+    }
     if (outboundAgent) {
       let upstream2;
       let proxyConnectStatus;
@@ -20559,7 +20800,7 @@ async function startHttpProxy(options) {
         if (proxyConnectStatus !== 200 || clientSocket.destroyed) {
           connected.destroy();
           if (!clientSocket.destroyed) {
-            clientSocket.end("HTTP/1.1 502 Bad Gateway\r\n\r\n", () => clientSocket.destroy());
+            clientSocket.end(proxyConnectStatus === 508 ? "HTTP/1.1 508 Loop Detected\r\n\r\n" : "HTTP/1.1 502 Bad Gateway\r\n\r\n", () => clientSocket.destroy());
           }
           return;
         }
@@ -20637,6 +20878,7 @@ async function startHttpProxy(options) {
     );
   } else {
     anthropicAgent = outboundHttpProxyAgent(anthropicOrigin.href);
+    anthropicViaProxy = anthropicAgent !== void 0;
   }
   anthropicAgent ??= createPassthroughAgent();
   return {
@@ -21502,9 +21744,9 @@ function planLaunchWizard(opts) {
 
 // src/vscode-launcher.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync7, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync2, readdirSync, readFileSync as readFileSync12, rmSync as rmSync2, statSync as statSync8, writeFileSync as writeFileSync8 } from "fs";
-import { tmpdir } from "os";
-import { dirname as dirname8, join as join9 } from "path";
+import { existsSync as existsSync7, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync2, readdirSync as readdirSync2, readFileSync as readFileSync13, rmSync as rmSync2, statSync as statSync8, writeFileSync as writeFileSync8 } from "fs";
+import { homedir as homedir4, tmpdir } from "os";
+import { dirname as dirname8, join as join10 } from "path";
 import { fileURLToPath } from "url";
 var LAUNCHER_EXE_NAME = "clodex-claude.exe";
 var VSCODE_WRAPPER_SETTING = "claudeCode.claudeProcessWrapper";
@@ -21513,15 +21755,15 @@ var WRAPPER_PATH_PLACEHOLDER = '"__CLODEX_WRAPPER_SCRIPT_PATH__"';
 var LAUNCHER_SOURCE_FILE = "clodex-claude-launcher.cs";
 var UTF8_BOM = "\uFEFF";
 var CSC_ARGS = ["/nologo", "/target:exe", "/platform:anycpu", "/optimize+", `/out:${LAUNCHER_EXE_NAME}`, LAUNCHER_SOURCE_FILE];
-var packageRoot = join9(dirname8(fileURLToPath(import.meta.url)), "..");
+var packageRoot = join10(dirname8(fileURLToPath(import.meta.url)), "..");
 function defaultLauncherInputs() {
   return {
-    launcherSourcePath: join9(packageRoot, "launcher", LAUNCHER_SOURCE_FILE),
-    wrapperScriptPath: join9(packageRoot, "dist", "claude-wrapper.js")
+    launcherSourcePath: join10(packageRoot, "launcher", LAUNCHER_SOURCE_FILE),
+    wrapperScriptPath: join10(packageRoot, "dist", "claude-wrapper.js")
   };
 }
 function launcherInstallPath(env = process.env) {
-  return join9(getAppHome(env), "bin", LAUNCHER_EXE_NAME);
+  return join10(getAppHome(env), "bin", LAUNCHER_EXE_NAME);
 }
 function csharpStringLiteral(value) {
   let literal = '"';
@@ -21547,30 +21789,23 @@ function renderLauncherSource(template, paths) {
 }
 function cscSearchRoots(env = process.env) {
   const windir = env.WINDIR?.trim() || env.SystemRoot?.trim() || "C:\\Windows";
-  const dotnet = join9(windir, "Microsoft.NET");
-  return [join9(dotnet, "Framework64"), join9(dotnet, "Framework")];
+  const dotnet = join10(windir, "Microsoft.NET");
+  return [join10(dotnet, "Framework64"), join10(dotnet, "Framework")];
 }
 function frameworkVersionKey(name) {
   return name.slice(1).split(".").map((part) => Number.parseInt(part, 10) || 0);
 }
-function compareVersionKeys(a, b) {
-  for (let i = 0; i < Math.max(a.length, b.length); i += 1) {
-    const diff = (a[i] ?? 0) - (b[i] ?? 0);
-    if (diff !== 0) return diff;
-  }
-  return 0;
-}
 function findCsc(env = process.env) {
   for (const root of cscSearchRoots(env)) {
     let entries;
     try {
-      entries = readdirSync(root);
+      entries = readdirSync2(root);
     } catch {
       continue;
     }
     const candidates = entries.filter((name) => /^v4\.\d+(\.\d+)*$/i.test(name)).sort((a, b) => compareVersionKeys(frameworkVersionKey(b), frameworkVersionKey(a)));
     for (const version of candidates) {
-      const csc = join9(root, version, "csc.exe");
+      const csc = join10(root, version, "csc.exe");
       try {
         if (statSync8(csc).isFile()) return csc;
       } catch {
@@ -21629,7 +21864,7 @@ function installVscodeLauncher(opts = {}) {
   }
   let source;
   try {
-    source = renderLauncherSource(readFileSync12(launcherSourcePath, "utf8"), { nodePath, wrapperScriptPath });
+    source = renderLauncherSource(readFileSync13(launcherSourcePath, "utf8"), { nodePath, wrapperScriptPath });
   } catch (err) {
     return { ok: false, reason: "missing-input", message: `could not prepare the launcher source: ${describeError(err)}` };
   }
@@ -21637,7 +21872,7 @@ function installVscodeLauncher(opts = {}) {
   const tempRoot = opts.tempRoot ?? tmpdir();
   let scratch;
   try {
-    scratch = mkdtempSync2(join9(tempRoot, "clodex-vscode-launcher-"));
+    scratch = mkdtempSync2(join10(tempRoot, "clodex-vscode-launcher-"));
   } catch (err) {
     return { ok: false, reason: "install-failed", message: `could not create a scratch directory under ${tempRoot}: ${describeError(err)}` };
   }
@@ -21652,9 +21887,9 @@ function installVscodeLauncher(opts = {}) {
 }
 function buildAndPublish(step) {
   const { scratch, cscPath, exePath } = step;
-  writeFileSync8(join9(scratch, LAUNCHER_SOURCE_FILE), UTF8_BOM + step.source, "utf8");
+  writeFileSync8(join10(scratch, LAUNCHER_SOURCE_FILE), UTF8_BOM + step.source, "utf8");
   const compiled = step.compile(cscPath, CSC_ARGS, scratch);
-  const builtExe = join9(scratch, LAUNCHER_EXE_NAME);
+  const builtExe = join10(scratch, LAUNCHER_EXE_NAME);
   if (compiled.error || compiled.status !== 0 || !existsSync7(builtExe)) {
     const output = [compiled.stdout, compiled.stderr].map((text6) => text6.trim()).filter(Boolean).join("\n");
     return {
@@ -21709,16 +21944,27 @@ function successReport(result) {
     "install: the paths above are compiled into the executable."
   ];
 }
+function launcherExtensionDriftWarnings(opts = {}) {
+  const env = opts.env ?? process.env;
+  const manifest = readPatchManifest(getPatchManifestPath(env));
+  if (!manifest || typeof manifest.claudeVersion !== "string") return [];
+  return claudeExtensionDriftWarnings(
+    { binaryPath: manifest.binaryPath, version: manifest.claudeVersion },
+    opts.homeDir ?? homedir4(),
+    () => readNpmGlobalRoot(env)
+  );
+}
 function runInstallVscodeLauncherCommand(opts = {}) {
   const result = installVscodeLauncher(opts);
   if (result.warning) console.error(`clodex: warning: ${result.warning}`);
   if (!result.ok) {
     console.error(`clodex: ${result.message}`);
     if (result.detail) console.error(result.detail);
-    return 1;
+  } else {
+    console.log(successReport(result).join("\n"));
   }
-  console.log(successReport(result).join("\n"));
-  return 0;
+  for (const drift of launcherExtensionDriftWarnings(opts)) console.error(`clodex: warning: ${drift}`);
+  return result.ok ? 0 : 1;
 }
 
 // src/cli.ts
@@ -22052,8 +22298,10 @@ ${pc13.bold("Options:")}
   --trace      Write debug logs to ~/.clodex/logs/ and show errors on exit
   --fast       Request Codex fast mode (service_tier=priority) on ChatGPT-OAuth models
                (equivalent to CLODEX_SERVICE_TIER=fast; warns if the SDK omits it)
-  --provider   Boot provider id (skip wizard when paired with --model or in print mode)
-  --model      Boot model id (skip wizard when paired with --provider or in print mode)
+  --provider   Endpoint mode only: boot provider id (skip wizard when paired with
+               --model or in print mode)
+  --model      Endpoint mode only: boot model id (skip wizard when paired with
+               --provider or in print mode)
   --context    <model=stop> use a different share of a model's window for this
                launch only (standard, max, default, or a token count). Nothing is
                saved. It reaches Claude Code through the exported catalog, so a
@@ -22094,7 +22342,7 @@ ${pc13.bold("Examples:")}
   clodex claude --trace --resume abc-123
   clodex claude --endpoint
   clodex claude --endpoint --save-mode
-  clodex claude --provider openai-oauth --model gpt-6-sol
+  clodex claude --endpoint --provider openai-oauth --model gpt-6-sol
   clodex claude -- --print "hello"
   clodex claude -- --dangerously-skip-permissions`;
 }
@@ -22216,8 +22464,11 @@ ${pc13.bold("How it works:")}
 
 ${pc13.bold("Context stops and cost:")}
   Some providers price large prompts in bands: GPT-5.6 and GPT-6 bill the full request at
-  a higher rate above 272,000 input tokens. The standard stop stays under that
-  line, so max is opt-in and reports the boundary when you select it.
+  a higher rate above 272,000 input tokens. For ChatGPT/Codex-plan models whose
+  catalog reports a 272,000-token window, standard stays at that line and a
+  larger window is opt-in. OpenAI API-key models retain their full window, so
+  standard may already cross the boundary. Choose a smaller numeric stop such
+  as 250k to limit exposure to the higher rate.
 
 ${pc13.bold("Examples:")}
   clodex favorites
@@ -22254,7 +22505,13 @@ ${pc13.bold("Behavior:")}
   Local patches execute after the built-ins as an all-or-none set. Enabling
   them executes trusted JavaScript from local-patches.mjs with your full user
   permissions. Local failures are reported but never block the built-ins.
-  Run clodex patch again after every claude update.`;
+  Run clodex patch again after every claude update.
+
+  An editor launching Claude Code through clodex-claude runs this patched
+  install only when its Claude Code extension is the same build. When an
+  installed extension is a different version, clodex patch warns and prints the
+  commands that align them. Editors checked:
+    ${CHECKED_EDITORS_DESCRIPTION}`;
 }
 function installVscodeLauncherHelpText() {
   return `${pc13.bold("clodex install-vscode-launcher")} v${VERSION}
@@ -22284,6 +22541,8 @@ ${pc13.bold("Behavior:")}
   As on macOS and Linux, clodex-claude then runs your clodex-patched install in
   place of the bundled claude.exe when the two builds match, so clodex models
   appear in the extension's model picker; re-run clodex patch after updates.
+  Like clodex patch, it warns when an installed Claude Code extension is a
+  different version from the Claude Code clodex last patched.
 
   The paths to node.exe and to the clodex install are compiled in: re-run this
   command after switching Node versions or moving the clodex install.
@@ -23234,7 +23493,7 @@ Error: ${resolved.error}
 function isCliEntryPoint() {
   if (!process.argv[1]) return false;
   try {
-    return realpathSync3(fileURLToPath2(import.meta.url)) === realpathSync3(process.argv[1]);
+    return realpathSync4(fileURLToPath2(import.meta.url)) === realpathSync4(process.argv[1]);
   } catch {
     return false;
   }