@chibitek/chibi 0.1.162 → 0.1.169

package/dist-server/pair-cli.js

@@ -18471,9 +18471,9 @@ var init_image_generation = __esm({
 });
 
 // shared/removed-integration.ts
-function withoutRemovedKey(record5) {
-  if (!isRecord(record5) || !Object.hasOwn(record5, REMOVED_INTEGRATION_KEY)) return record5;
-  const { [REMOVED_INTEGRATION_KEY]: _removed, ...rest } = record5;
+function withoutRemovedKey(record6) {
+  if (!isRecord(record6) || !Object.hasOwn(record6, REMOVED_INTEGRATION_KEY)) return record6;
+  const { [REMOVED_INTEGRATION_KEY]: _removed, ...rest } = record6;
   return rest;
 }
 function configWithoutRemovedIntegration(document) {
@@ -20072,6 +20072,37 @@ var init_schema = __esm({
   }
 });
 
+// shared/engine-platforms.ts
+function engineOnPlatform(driverKind, platform) {
+  return !(ENGINES_OFF_BY_PLATFORM[platform] ?? []).includes(driverKind);
+}
+var ENGINES_OFF_BY_PLATFORM;
+var init_engine_platforms = __esm({
+  "shared/engine-platforms.ts"() {
+    "use strict";
+    ENGINES_OFF_BY_PLATFORM = Object.freeze({
+      win32: Object.freeze(["qwenAgent"])
+    });
+  }
+});
+
+// server/engine-platform-fleet.ts
+function onDeviceFleet(platform = process.platform, arch = process.arch) {
+  return platform === "darwin" && arch === "arm64" ? { appleIntelligence: { driver: "appleIntelligence", displayName: "Apple Intelligence (on this Mac)" } } : {};
+}
+function dropEnginesOffPlatform(map3, platform) {
+  for (const [id, entry] of Object.entries(map3)) {
+    if (!engineOnPlatform(entry.driver, platform)) delete map3[id];
+  }
+  return map3;
+}
+var init_engine_platform_fleet = __esm({
+  "server/engine-platform-fleet.ts"() {
+    "use strict";
+    init_engine_platforms();
+  }
+});
+
 // server/config.ts
 import { readFileSync as readFileSync4, mkdirSync as mkdirSync6, existsSync as existsSync8, renameSync as renameSync3 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
@@ -20217,7 +20248,9 @@ function loadConfig() {
   let cfg = {};
   try {
     cfg = parseStoredConfig(parseJson(readFileSync4(join12(DATA_DIR, "config.json"), "utf8")));
-  } catch {
+  } catch (error51) {
+    if (error51.code !== "ENOENT")
+      throw new Error("Saved Atomic settings could not be read; config.json has been left untouched.", { cause: error51 });
   }
   if (cfg.mcpServers) cfg.mcpServers = hydrateMcpServers(cfg.mcpServers);
   cfg.mistral = { ...cfg.mistral };
@@ -20268,9 +20301,10 @@ function saveConfig(patch, options = {}) {
   const p3 = join12(DATA_DIR, "config.json");
   let disk = {};
   try {
-    const parsed = jsonObjectSchema.safeParse(parseJson(readFileSync4(p3, "utf8")));
-    if (parsed.success) disk = configWithoutRemovedIntegration(parsed.data).document;
-  } catch {
+    disk = configWithoutRemovedIntegration(jsonObjectSchema.parse(parseJson(readFileSync4(p3, "utf8")))).document;
+  } catch (error51) {
+    if (error51.code !== "ENOENT")
+      throw new Error("Cannot save over unreadable Atomic settings; config.json has been left untouched.", { cause: error51 });
   }
   const checkedPatch = appConfigSchema.partial().extend({ threads: threadsPatchSchema.optional(), newBots: newBotsPatchSchema.optional() }).parse(patch);
   const before = configSaveListeners.size ? structuredClone(disk) : disk;
@@ -20399,9 +20433,6 @@ function injectedEnvironment(cfg, driver) {
   if (driver === "opencodeGo" && cfg.opencodeGo?.apiKey) environment.set("OPENCODE_API_KEY", cfg.opencodeGo.apiKey);
   return environment;
 }
-function onDeviceFleet(platform = process.platform, arch = process.arch) {
-  return platform === "darwin" && arch === "arm64" ? { appleIntelligence: { driver: "appleIntelligence", displayName: "Apple Intelligence (on this Mac)" } } : {};
-}
 function plainObject2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
@@ -20422,7 +20453,7 @@ function separateClaudeLogin(instanceId, entry) {
   const configDir2 = plainObject2(entry.config)?.configDir;
   return typeof configDir2 === "string" && configDir2.trim() !== "";
 }
-function instanceConfigs(cfg, onDevice = onDeviceFleet(), accountKeys = instanceKeys()) {
+function instanceConfigs(cfg, onDevice = onDeviceFleet(), accountKeys = instanceKeys(), platform = process.platform) {
   const DEFAULT_FLEET = {
     grok: { driver: "grokAgent" },
     kimi: { driver: "kimiAgent" },
@@ -20468,6 +20499,7 @@ function instanceConfigs(cfg, onDevice = onDeviceFleet(), accountKeys = instance
   for (const [id, fallback] of Object.entries(ATOMIC_FLEET)) {
     if (Object.hasOwn(map3, id)) map3[id] = withFleetDefaults(map3[id], fallback);
   }
+  dropEnginesOffPlatform(map3, platform);
   for (const [id, sourceEntry] of Object.entries(map3)) {
     const entry = { ...sourceEntry };
     map3[id] = entry;
@@ -20517,6 +20549,7 @@ var init_config = __esm({
     init_mcp_secrets2();
     init_mcp_secrets();
     init_schema();
+    init_engine_platform_fleet();
     optionalText = external_exports.string().optional();
     SSH_ALIAS = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/;
     LEGACY_BROWSER_PROFILE_ID = /^[A-Za-z0-9_-]{1,40}$/;
@@ -21018,14 +21051,14 @@ function parseRecord(path4, invalidMessage, validate) {
     if (error51?.code === "ENOENT") return null;
     throw leaseError("Atomic cannot read the data-directory lease; refusing to start to protect its state.", error51);
   }
-  let record5;
+  let record6;
   try {
-    record5 = JSON.parse(raw);
+    record6 = JSON.parse(raw);
   } catch (error51) {
     throw leaseError(invalidMessage, error51);
   }
-  if (!validate(record5)) throw leaseError(invalidMessage);
-  return record5;
+  if (!validate(record6)) throw leaseError(invalidMessage);
+  return record6;
 }
 function readOwner(path4) {
   return parseRecord(
@@ -21105,10 +21138,10 @@ function unlinkExact(path4, message2) {
     if (error51?.code !== "ENOENT") throw leaseError(message2, error51);
   }
 }
-function publishRecord(path4, record5, prepareMessage, acquireMessage) {
-  const candidatePath = `${path4}.candidate-${record5.pid}-${record5.token}`;
+function publishRecord(path4, record6, prepareMessage, acquireMessage) {
+  const candidatePath = `${path4}.candidate-${record6.pid}-${record6.token}`;
   try {
-    writeFileSync4(candidatePath, `${JSON.stringify(record5)}
+    writeFileSync4(candidatePath, `${JSON.stringify(record6)}
 `, { flag: "wx", mode: 384, flush: true });
   } catch (error51) {
     throw leaseError(prepareMessage, error51);
@@ -24986,10 +25019,10 @@ function readUnslothKey(env) {
 }
 function idsFromModelsPayload(payload) {
   const records = Array.isArray(payload) ? payload : payload && typeof payload === "object" && Array.isArray(payload.data) ? payload.data : payload && typeof payload === "object" && Array.isArray(payload.models) ? payload.models : [];
-  return records.flatMap((record5) => {
-    if (typeof record5 === "string") return MODEL_ID.test(record5) ? [record5] : [];
-    if (!record5 || typeof record5 !== "object") return [];
-    const id = record5.id ?? record5.name;
+  return records.flatMap((record6) => {
+    if (typeof record6 === "string") return MODEL_ID.test(record6) ? [record6] : [];
+    if (!record6 || typeof record6 !== "object") return [];
+    const id = record6.id ?? record6.name;
     if (typeof id !== "string" || !MODEL_ID.test(id)) return [];
     const low = id.toLowerCase();
     if (low.includes("embed") || low.includes("bge-") || low.includes("nomic")) return [];
@@ -26258,9 +26291,9 @@ ${value.slice(-limit)}`;
     });
   }
   if (!value || typeof value !== "object") return value;
-  const record5 = value;
-  return Object.fromEntries(Object.entries(record5).flatMap(([key, entry]) => {
-    if (record5.type === "image" && (key === "data" || key === "blob") || key === "blob" && typeof record5.mimeType === "string" && record5.mimeType.startsWith("image/")) return [];
+  const record6 = value;
+  return Object.fromEntries(Object.entries(record6).flatMap(([key, entry]) => {
+    if (record6.type === "image" && (key === "data" || key === "blob") || key === "blob" && typeof record6.mimeType === "string" && record6.mimeType.startsWith("image/")) return [];
     const sanitized = sanitizeToolLogValue(entry, budget, depth + 1);
     return sanitized === void 0 ? [] : [[key, sanitized]];
   }));
@@ -28062,8 +28095,8 @@ async function executableFile(path4, bytes) {
 }
 async function completedRelease(directory, asset) {
   try {
-    const record5 = JSON.parse(await readFile3(join21(directory, INSTALL_RECORD), "utf8"));
-    if (record5.sha256 !== asset.sha256 || record5.version !== asset.version || record5.executable.name !== asset.executable.name || record5.executable.bytes !== asset.executable.bytes || record5.harness.name !== asset.harness.name || record5.harness.bytes !== asset.harness.bytes) return null;
+    const record6 = JSON.parse(await readFile3(join21(directory, INSTALL_RECORD), "utf8"));
+    if (record6.sha256 !== asset.sha256 || record6.version !== asset.version || record6.executable.name !== asset.executable.name || record6.executable.bytes !== asset.executable.bytes || record6.harness.name !== asset.harness.name || record6.harness.bytes !== asset.harness.bytes) return null;
     const executablePath = join21(directory, asset.executable.name);
     const harnessPath = join21(directory, asset.harness.name);
     if (!await executableFile(executablePath, asset.executable.bytes)) return null;
@@ -28333,13 +28366,13 @@ async function installOnce2(options) {
       await removeQuietly(destination);
       throw error51;
     }
-    const record5 = {
+    const record6 = {
       sha256: asset.sha256,
       version: asset.version,
       executable: asset.executable,
       harness: asset.harness
     };
-    await writeFile2(join21(destination, INSTALL_RECORD), `${JSON.stringify(record5)}
+    await writeFile2(join21(destination, INSTALL_RECORD), `${JSON.stringify(record6)}
 `, { flag: "wx", mode: 384 });
     const installed = await completedRelease(destination, asset);
     if (!installed) throw new Error("The installed Antigravity runtime is incomplete.");
@@ -29296,6 +29329,177 @@ var init_rtk_rewrite = __esm({
   }
 });
 
+// server/drivers/claude-stdin.ts
+import { readFileSync as readFileSync9 } from "node:fs";
+function claudeUserMessage(text4, images) {
+  if (!images?.length) return { type: "user", message: { role: "user", content: text4 } };
+  const content = images.map((image) => ({
+    type: "image",
+    source: {
+      type: "base64",
+      media_type: image.mime,
+      data: readFileSync9(image.path).toString("base64")
+    }
+  }));
+  if (text4) content.push({ type: "text", text: text4 });
+  return { type: "user", message: { role: "user", content } };
+}
+function diagnosticClaudeUserMessage(message2) {
+  if (!Array.isArray(message2.message.content)) return message2;
+  return {
+    ...message2,
+    message: {
+      ...message2.message,
+      content: message2.message.content.map(
+        (block2) => block2.type === "image" ? {
+          ...block2,
+          source: {
+            ...block2.source,
+            data: `[image data: ${block2.source.data.length} base64 chars]`
+          }
+        } : block2
+      )
+    }
+  };
+}
+function claudeControlResponse(requestId, response) {
+  return { type: "control_response", response: { subtype: "success", request_id: requestId, response } };
+}
+var init_claude_stdin = __esm({
+  "server/drivers/claude-stdin.ts"() {
+    "use strict";
+  }
+});
+
+// server/mcp-elicitation.ts
+function record2(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function isControl(char) {
+  const code = char.codePointAt(0) ?? 0;
+  return code < 32 || code === 127;
+}
+function oneLine(value) {
+  if (typeof value !== "string") return null;
+  const text4 = Array.from(value, (char) => isControl(char) ? " " : char).join("").replace(/\s+/g, " ").trim();
+  if (!text4) return null;
+  return text4.length > MAX_MESSAGE ? `${text4.slice(0, MAX_MESSAGE - 1)}\u2026` : text4;
+}
+function yesValue(field) {
+  if (field.type === "boolean") return true;
+  if (field.type !== "string") return void 0;
+  const options = Array.isArray(field.enum) ? field.enum : Array.isArray(field.oneOf) ? field.oneOf.map((option) => record2(option)?.const) : [];
+  const strings3 = options.filter((option) => typeof option === "string");
+  if (strings3.length < 1 || strings3.length > 4) return void 0;
+  const yes = strings3.filter((option) => YES.test(option.trim()));
+  return yes.length === 1 ? yes[0] : void 0;
+}
+function elicitationConfirm(params) {
+  const request = record2(params);
+  if (!request) return null;
+  if (request.mode !== void 0 && request.mode !== "form") return null;
+  const message2 = oneLine(request.message);
+  if (!message2) return null;
+  const rawSchema = request.requestedSchema ?? request.requested_schema;
+  if (rawSchema === void 0 || rawSchema === null) return { message: message2, content: {} };
+  const schema4 = record2(rawSchema);
+  if (!schema4 || schema4.type !== void 0 && schema4.type !== "object") return null;
+  const properties = schema4.properties === void 0 ? {} : record2(schema4.properties);
+  if (!properties) return null;
+  const names = Object.keys(properties);
+  if (names.length === 0) return { message: message2, content: {} };
+  if (names.length !== 1) return null;
+  const name = names[0];
+  const field = record2(properties[name]);
+  if (!field) return null;
+  const yes = yesValue(field);
+  return yes === void 0 ? null : { message: message2, content: { [name]: yes } };
+}
+function elicitationAnswer(confirm2, allowed) {
+  return allowed ? { action: "accept", content: confirm2.content } : { action: "decline" };
+}
+function elicitationSummary(server, confirm2) {
+  const name = oneLine(server);
+  return name ? `${name} asks: ${confirm2.message}` : confirm2.message;
+}
+function elicitationTool(server) {
+  return `${ELICITATION_TOOL_PREFIX}${oneLine(server)?.replace(/\s+/g, "_") ?? "mcp"}`;
+}
+var MAX_MESSAGE, YES, ELICITATION_TOOL_PREFIX;
+var init_mcp_elicitation = __esm({
+  "server/mcp-elicitation.ts"() {
+    "use strict";
+    MAX_MESSAGE = 600;
+    YES = /^(yes|y|true|confirm|confirmed|approve|approved|accept|accepted|allow|proceed|continue|ok)$/i;
+    ELICITATION_TOOL_PREFIX = "mcp_elicitation__";
+  }
+});
+
+// server/drivers/claude-elicitation.ts
+function createClaudeElicitations(deps) {
+  const open2 = /* @__PURE__ */ new Map();
+  return {
+    /** A control_request frame from the CLI's stdout. True when it was an
+     * elicitation (answered now or once the person decides). */
+    handle(frame, ctx) {
+      const o = frame;
+      if (!o || o.request?.subtype !== "elicitation") return false;
+      if (typeof o.request_id !== "string") return true;
+      const controlId = o.request_id;
+      const reply = (result) => ctx.write(claudeControlResponse(controlId, result));
+      const confirm2 = elicitationConfirm(o.request);
+      if (!confirm2 || ctx.closing) {
+        reply({ action: "cancel" });
+        return true;
+      }
+      const server = typeof o.request.mcp_server_name === "string" ? o.request.mcp_server_name : void 0;
+      const requestId = newId();
+      const finish = (allowed, source2) => {
+        if (!open2.delete(requestId)) return;
+        clearTimeout(timer);
+        reply(allowed === null ? { action: "cancel" } : elicitationAnswer(confirm2, allowed));
+        deps.emit({ ...deps.base(ctx.threadId, ctx.turnId), type: "request.resolved", requestId, behavior: allowed ? "allow" : "deny", source: source2 });
+      };
+      const timer = setTimeout(() => finish(null, "timeout"), deps.timeoutMs ?? ELICITATION_TIMEOUT_MS);
+      timer.unref?.();
+      open2.set(requestId, { threadId: ctx.threadId, finish });
+      deps.emit({
+        ...deps.base(ctx.threadId, ctx.turnId),
+        type: "request.opened",
+        requestId,
+        requestType: "permission",
+        tool: elicitationTool(server),
+        summary: elicitationSummary(server, confirm2),
+        requiresExplicitApproval: true
+      });
+      return true;
+    },
+    /** The person's answer to a card, or null when the card is not one of these. */
+    respond(threadId, requestId, decision) {
+      const entry = open2.get(requestId);
+      if (!entry) return null;
+      if (entry.threadId !== threadId) return "unavailable";
+      const allowed = decision.behavior === "allow";
+      entry.finish(allowed, "user");
+      return allowed ? "allowed-once" : "rejected";
+    },
+    /** The session ended: every open question goes back as "no answer". */
+    endThread(threadId) {
+      for (const entry of Array.from(open2.values())) if (entry.threadId === threadId) entry.finish(null, "system");
+    }
+  };
+}
+var ELICITATION_TIMEOUT_MS;
+var init_claude_elicitation = __esm({
+  "server/drivers/claude-elicitation.ts"() {
+    "use strict";
+    init_contracts();
+    init_mcp_elicitation();
+    init_claude_stdin();
+    ELICITATION_TIMEOUT_MS = 15 * 6e4;
+  }
+});
+
 // shared/ask-question.ts
 function text3(value, limit) {
   if (typeof value !== "string") return void 0;
@@ -29402,7 +29606,7 @@ var init_ask_question = __esm({
 
 // server/drivers/claude.ts
 import { createHash as createHash7, randomBytes as randomBytes2 } from "node:crypto";
-import { chmodSync as chmodSync4, existsSync as existsSync13, mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync3, readFileSync as readFileSync9, rmSync as rmSync6, unlinkSync as unlinkSync3, writeFileSync as writeFileSync7 } from "node:fs";
+import { chmodSync as chmodSync4, existsSync as existsSync13, mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync3, readFileSync as readFileSync10, rmSync as rmSync6, unlinkSync as unlinkSync3, writeFileSync as writeFileSync7 } from "node:fs";
 import { createServer as createNetServer } from "node:net";
 import { homedir as homedir9, tmpdir as tmpdir3 } from "node:os";
 import { join as join23, dirname as dirname9, isAbsolute as isAbsolute4, normalize } from "node:path";
@@ -29461,7 +29665,7 @@ function claudeInheritWarning(env) {
 function readClaudeAuthSettings(env, instanceEnvironment = {}) {
   if (CLAUDE_ACCOUNT_ENV_KEYS.some((key) => instanceEnvironment[key])) return {};
   try {
-    const settings2 = JSON.parse(readFileSync9(join23(resolveClaudeConfigDir(void 0, env), "settings.json"), "utf8"));
+    const settings2 = JSON.parse(readFileSync10(join23(resolveClaudeConfigDir(void 0, env), "settings.json"), "utf8"));
     const authEnv = {};
     for (const key of CLAUDE_ACCOUNT_ENV_KEYS) {
       if (!key.endsWith("_FILE_DESCRIPTOR") && typeof settings2?.env?.[key] === "string") {
@@ -29479,7 +29683,7 @@ function readClaudeAuthSettings(env, instanceEnvironment = {}) {
 function projectMcpServers(cwd) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync9(join23(cwd, ".mcp.json"), "utf8"));
+    parsed = JSON.parse(readFileSync10(join23(cwd, ".mcp.json"), "utf8"));
   } catch {
     return {};
   }
@@ -29552,7 +29756,7 @@ function extrasFromUnknown(value) {
 function readClaudeModelCatalog(env = process.env) {
   let settings2 = {};
   try {
-    settings2 = JSON.parse(readFileSync9(join23(resolveClaudeConfigDir(void 0, env), "settings.json"), "utf8"));
+    settings2 = JSON.parse(readFileSync10(join23(resolveClaudeConfigDir(void 0, env), "settings.json"), "utf8"));
   } catch {
     settings2 = {};
   }
@@ -29837,37 +30041,6 @@ function decodeConfig2(raw) {
     ...disallowedTools !== void 0 ? { disallowedTools } : {}
   };
 }
-function claudeUserMessage(text4, images) {
-  if (!images?.length) return { type: "user", message: { role: "user", content: text4 } };
-  const content = images.map((image) => ({
-    type: "image",
-    source: {
-      type: "base64",
-      media_type: image.mime,
-      data: readFileSync9(image.path).toString("base64")
-    }
-  }));
-  if (text4) content.push({ type: "text", text: text4 });
-  return { type: "user", message: { role: "user", content } };
-}
-function diagnosticClaudeUserMessage(message2) {
-  if (!Array.isArray(message2.message.content)) return message2;
-  return {
-    ...message2,
-    message: {
-      ...message2.message,
-      content: message2.message.content.map(
-        (block2) => block2.type === "image" ? {
-          ...block2,
-          source: {
-            ...block2.source,
-            data: `[image data: ${block2.source.data.length} base64 chars]`
-          }
-        } : block2
-      )
-    }
-  };
-}
 var CONNECTOR_CACHE_MS, CLAUDE_ACCOUNT_ENV_KEYS, DEFAULT_AUTOCOMPACT_TOKENS, CLAUDE_FLAG_FLOORS, CLAUDE_CONTEXT_CONTROL_MIN_VERSION, DRIVER_KIND2, HARNESS_REPLACED_BUILTINS, STATIC_CLAUDE_MODELS, CLAUDE_MODEL_ID, PERM_PROXY_PATH, DWEB_PROXY_PATH, HOOK_HELPER_PATH, RTK_HOOK_PATH, NODE_ENV_FLAG, DENY_TIMEOUT_NOTE, QUESTION_TIMEOUT_NOTE, DUPLICATE_ASK_ID_NOTE, NEXUS_PRIVATE_SCOPE_TOOLS, ClaudeDriver;
 var init_claude = __esm({
   "server/drivers/claude.ts"() {
@@ -29892,6 +30065,8 @@ var init_claude = __esm({
     init_rtk_rewrite();
     init_volatile_notes();
     init_mcp_tool_images();
+    init_claude_stdin();
+    init_claude_elicitation();
     init_ask_question();
     CONNECTOR_CACHE_MS = 5 * 60 * 1e3;
     CLAUDE_ACCOUNT_ENV_KEYS = [
@@ -30007,6 +30182,7 @@ var init_claude = __esm({
         const sumCost = (a2, b3) => a2 === null ? b3 : b3 === null ? a2 : a2 + b3;
         const STEER_FOLLOWUP_MS = 1500;
         const sessions = /* @__PURE__ */ new Map();
+        const elicitations = createClaudeElicitations({ emit: (event) => emit(event), base: (threadId, turnId) => base3(threadId, turnId) });
         const sessionAllows = /* @__PURE__ */ new Map();
         const deliveredVolatile = /* @__PURE__ */ new Map();
         const volatileNoteFor = (threadId, sessionId, turn) => {
@@ -30031,6 +30207,7 @@ var init_claude = __esm({
           const s4 = sessions.get(threadId);
           if (!s4 || s4.closing) return;
           s4.closing = true;
+          elicitations.endThread(threadId);
           if (s4.idleTimer) clearTimeout(s4.idleTimer);
           const broker = s4.broker;
           s4.broker = void 0;
@@ -30660,6 +30837,20 @@ var init_claude = __esm({
                 }
                 break;
               }
+              case "control_request":
+                elicitations.handle(o, {
+                  threadId,
+                  turnId: currentTurnId(),
+                  closing: session.closing,
+                  write: (frame) => {
+                    try {
+                      if (session.child.stdin.writable && !session.child.stdin.destroyed) session.child.stdin.write(JSON.stringify(frame) + "\n");
+                      appendNative(threadId, { dir: "out", source: "claude.sdk.message", msg: frame });
+                    } catch {
+                    }
+                  }
+                });
+                break;
               case "user":
                 for (const b3 of Array.isArray(o.message?.content) ? o.message.content : []) {
                   if (b3.type === "tool_result") {
@@ -31008,6 +31199,8 @@ var init_claude = __esm({
             steer,
             interruptTurn: async (threadId) => active.get(threadId)?.stop(),
             respondToRequest: async (threadId, requestId, decision) => {
+              const confirmation = elicitations.respond(threadId, requestId, decision);
+              if (confirmation) return confirmation;
               const broker = sessions.get(threadId)?.broker ?? active.get(threadId)?.broker;
               if (!broker) return "unavailable";
               const behavior = decision.behavior === "answer" ? "answer" : decision.behavior;
@@ -31264,7 +31457,7 @@ var init_toml_lite = __esm({
 });
 
 // server/mcp-auth-signal.ts
-import { mkdirSync as mkdirSync12, readFileSync as readFileSync10, readdirSync as readdirSync3, renameSync as renameSync7, rmSync as rmSync7, writeFileSync as writeFileSync8 } from "node:fs";
+import { mkdirSync as mkdirSync12, readFileSync as readFileSync11, readdirSync as readdirSync3, renameSync as renameSync7, rmSync as rmSync7, writeFileSync as writeFileSync8 } from "node:fs";
 import { join as join24 } from "node:path";
 function writeMcpAuthSignal(dir, signal) {
   if (!dir) return;
@@ -31287,7 +31480,7 @@ var init_mcp_auth_signal = __esm({
 });
 
 // server/drivers/codex-mcp-names.ts
-import { readFileSync as readFileSync11 } from "node:fs";
+import { readFileSync as readFileSync12 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
 import { isAbsolute as isAbsolute5, join as join25, resolve as resolve7 } from "node:path";
 function mcpServerNamesInToml(toml) {
@@ -31321,7 +31514,7 @@ function codexHomeFor(env, cwd) {
 }
 function codexConfigMcpServers(env, cwd) {
   try {
-    return mcpServersInToml(readFileSync11(join25(codexHomeFor(env, cwd), "config.toml"), "utf8"));
+    return mcpServersInToml(readFileSync12(join25(codexHomeFor(env, cwd), "config.toml"), "utf8"));
   } catch {
     return /* @__PURE__ */ new Map();
   }
@@ -31567,10 +31760,10 @@ var init_mcp_remote_bridge = __esm({
 // server/mcp-tool-hints.ts
 function toolAnnotations(raw) {
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) return void 0;
-  const record5 = raw;
+  const record6 = raw;
   const out = {};
   for (const key of HINT_KEYS) {
-    const value = record5[key] ?? record5[SNAKE[key]];
+    const value = record6[key] ?? record6[SNAKE[key]];
     if (typeof value === "boolean") out[key] = value;
   }
   return Object.keys(out).length ? out : void 0;
@@ -31594,8 +31787,76 @@ var init_mcp_tool_hints = __esm({
   }
 });
 
+// server/drivers/codex-elicitation.ts
+function boundedLabel(value) {
+  if (typeof value !== "string") return null;
+  const label = value.trim();
+  return label && label.length <= 160 && !containsControlCharacter(label) ? label : null;
+}
+function ordinaryApprovalValue(value) {
+  const normalized = value.trim().toLowerCase();
+  if (/session|always|permanent|forever|persistent/.test(normalized)) return false;
+  return normalized === "once" || /^(?:accept|approve|allow)(?:ed|[-_]?once)?$/.test(normalized);
+}
+function mcpAppApprovalForm(params) {
+  const request = plainRecord(params);
+  if (!request || request.mode !== "form") return null;
+  const metadata = plainRecord(request._meta);
+  const target = plainRecord(metadata?.target);
+  const toolParams = plainRecord(metadata?.tool_params);
+  const message2 = boundedLabel(request.message) ?? "App access requested";
+  const appName = [
+    metadata?.app_name,
+    metadata?.appName,
+    metadata?.app,
+    target?.app,
+    target?.name,
+    toolParams?.app_name,
+    toolParams?.app,
+    metadata?.connector_name,
+    metadata?.connectorName
+  ].map(boundedLabel).find(Boolean) ?? message2.match(/^Allow ChatGPT to use (.+?)\?$/i)?.[1]?.trim();
+  if (!appName) return null;
+  const schema4 = plainRecord(request.requestedSchema);
+  const properties = plainRecord(schema4?.properties);
+  const required2 = schema4?.required;
+  if (!properties || !Array.isArray(required2) || required2.length === 0 || required2.length > 8 || !required2.every((key) => typeof key === "string" && key.length > 0 && key.length <= 100)) return null;
+  const content = {};
+  for (const key of required2) {
+    const field = plainRecord(properties[key]);
+    if (!field) return null;
+    const enumValues = Array.isArray(field.enum) ? field.enum.filter((value) => typeof value === "string") : [];
+    const oneOfValues = Array.isArray(field.oneOf) ? field.oneOf.map((option) => boundedLabel(plainRecord(option)?.const)).filter((value) => Boolean(value)) : [];
+    const chosen = [...oneOfValues, ...enumValues].find(ordinaryApprovalValue);
+    if (!chosen) return null;
+    content[key] = chosen;
+  }
+  const tool2 = boundedLabel(appName) ?? boundedLabel(request.serverName) ?? "app_access";
+  return { tool: tool2, summary: message2, allowResult: { action: "accept", content } };
+}
+function codexServerConfirm(params, customByMountName) {
+  const serverName = plainRecord(params)?.serverName;
+  if (typeof serverName !== "string" || !customByMountName.has(serverName)) return null;
+  return elicitationConfirm(params);
+}
+var plainRecord, containsControlCharacter;
+var init_codex_elicitation = __esm({
+  "server/drivers/codex-elicitation.ts"() {
+    "use strict";
+    init_mcp_elicitation();
+    plainRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+    containsControlCharacter = (value) => {
+      for (const character of value) {
+        const code = character.charCodeAt(0);
+        if (code <= 31 || code === 127) return true;
+      }
+      return false;
+    };
+  }
+});
+
 // server/drivers/codex-catalog.ts
-import { readdirSync as readdirSync5, readFileSync as readFileSync12 } from "node:fs";
+import { readdirSync as readdirSync5, readFileSync as readFileSync13 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { basename as basename7, join as join28 } from "node:path";
 function encodeCodexSelection(provider, model) {
@@ -31776,7 +32037,7 @@ function parseCodexToml(text4) {
 }
 function readText(path4) {
   try {
-    return readFileSync12(path4, "utf8");
+    return readFileSync13(path4, "utf8");
   } catch {
     return null;
   }
@@ -31812,9 +32073,9 @@ function collectCatalogNames(home) {
       continue;
     }
     const records = Array.isArray(parsed) ? parsed : parsed && typeof parsed === "object" && Array.isArray(parsed.models) ? parsed.models : parsed && typeof parsed === "object" && Array.isArray(parsed.data) ? parsed.data : [];
-    for (const record5 of records) {
-      if (!record5 || typeof record5 !== "object") continue;
-      const row = record5;
+    for (const record6 of records) {
+      if (!record6 || typeof record6 !== "object") continue;
+      const row = record6;
       const slug = typeof row.slug === "string" ? row.slug : typeof row.id === "string" ? row.id : "";
       if (!MODEL_ID2.test(slug)) continue;
       const label = typeof row.display_name === "string" ? row.display_name : typeof row.name === "string" ? row.name : "";
@@ -31825,10 +32086,10 @@ function collectCatalogNames(home) {
 }
 function idsFromModelsPayload2(payload) {
   const records = Array.isArray(payload) ? payload : payload && typeof payload === "object" && Array.isArray(payload.data) ? payload.data : payload && typeof payload === "object" && Array.isArray(payload.models) ? payload.models : [];
-  return records.flatMap((record5) => {
-    if (typeof record5 === "string") return MODEL_ID2.test(record5) ? [record5] : [];
-    if (!record5 || typeof record5 !== "object") return [];
-    const id = record5.id ?? record5.slug;
+  return records.flatMap((record6) => {
+    if (typeof record6 === "string") return MODEL_ID2.test(record6) ? [record6] : [];
+    if (!record6 || typeof record6 !== "object") return [];
+    const id = record6.id ?? record6.slug;
     return typeof id === "string" && MODEL_ID2.test(id) ? [id] : [];
   });
 }
@@ -31936,7 +32197,7 @@ var init_codex_catalog = __esm({
 
 // server/drivers/codex-instructions.ts
 import { createHash as createHash8 } from "node:crypto";
-import { mkdirSync as mkdirSync13, readFileSync as readFileSync13 } from "node:fs";
+import { mkdirSync as mkdirSync13, readFileSync as readFileSync14 } from "node:fs";
 import { join as join29 } from "node:path";
 function codexDeveloperInstructions(config2, botInstructions) {
   if (!config2 || typeof config2 !== "object" || Array.isArray(config2)) {
@@ -31956,7 +32217,7 @@ async function syncCodexInstructions(key, nativeThreadId, instructions, resumed,
   const fingerprint2 = digest(instructions);
   let previous;
   try {
-    previous = readFileSync13(path4, "utf8");
+    previous = readFileSync14(path4, "utf8");
   } catch (error51) {
     if (error51.code !== "ENOENT") throw error51;
   }
@@ -32514,52 +32775,6 @@ function additionalPermissionSummary(permissions, reason) {
   const prefix = typeof reason === "string" && reason.trim() ? `${reason.trim()} \u2014 ` : "";
   return `${prefix}Requested permissions: ${exact}`;
 }
-function boundedLabel(value) {
-  if (typeof value !== "string") return null;
-  const label = value.trim();
-  return label && label.length <= 160 && !containsControlCharacter(label) ? label : null;
-}
-function ordinaryApprovalValue(value) {
-  const normalized = value.trim().toLowerCase();
-  if (/session|always|permanent|forever|persistent/.test(normalized)) return false;
-  return normalized === "once" || /^(?:accept|approve|allow)(?:ed|[-_]?once)?$/.test(normalized);
-}
-function mcpAppApprovalForm(params) {
-  const request = plainRecord(params);
-  if (!request || request.mode !== "form") return null;
-  const metadata = plainRecord(request._meta);
-  const target = plainRecord(metadata?.target);
-  const toolParams = plainRecord(metadata?.tool_params);
-  const message2 = boundedLabel(request.message) ?? "App access requested";
-  const appName = [
-    metadata?.app_name,
-    metadata?.appName,
-    metadata?.app,
-    target?.app,
-    target?.name,
-    toolParams?.app_name,
-    toolParams?.app,
-    metadata?.connector_name,
-    metadata?.connectorName
-  ].map(boundedLabel).find(Boolean) ?? message2.match(/^Allow ChatGPT to use (.+?)\?$/i)?.[1]?.trim();
-  if (!appName) return null;
-  const schema4 = plainRecord(request.requestedSchema);
-  const properties = plainRecord(schema4?.properties);
-  const required2 = schema4?.required;
-  if (!properties || !Array.isArray(required2) || required2.length === 0 || required2.length > 8 || !required2.every((key) => typeof key === "string" && key.length > 0 && key.length <= 100)) return null;
-  const content = {};
-  for (const key of required2) {
-    const field = plainRecord(properties[key]);
-    if (!field) return null;
-    const enumValues = Array.isArray(field.enum) ? field.enum.filter((value) => typeof value === "string") : [];
-    const oneOfValues = Array.isArray(field.oneOf) ? field.oneOf.map((option) => boundedLabel(plainRecord(option)?.const)).filter((value) => Boolean(value)) : [];
-    const chosen = [...oneOfValues, ...enumValues].find(ordinaryApprovalValue);
-    if (!chosen) return null;
-    content[key] = chosen;
-  }
-  const tool2 = boundedLabel(appName) ?? boundedLabel(request.serverName) ?? "app_access";
-  return { tool: tool2, summary: message2, allowResult: { action: "accept", content } };
-}
 function namedApprovalParams(mode) {
   if (mode === "full") {
     return {
@@ -32590,15 +32805,15 @@ function namedApprovalParams(mode) {
 }
 function withWritableRoots(turnParams, dirs) {
   if (!dirs?.length) return turnParams;
-  const policy = plainRecord(turnParams.sandboxPolicy);
+  const policy = plainRecord2(turnParams.sandboxPolicy);
   if (!policy || policy.type !== "workspaceWrite") return turnParams;
   const existing = Array.isArray(policy.writableRoots) ? policy.writableRoots.filter((root) => typeof root === "string") : [];
   return { ...turnParams, sandboxPolicy: { ...policy, writableRoots: [.../* @__PURE__ */ new Set([...existing, ...dirs])] } };
 }
 function withResolvedSandbox(params, session) {
-  const requested = plainRecord(params.turn.sandboxPolicy);
+  const requested = plainRecord2(params.turn.sandboxPolicy);
   if (!requested) return params;
-  const sandbox = plainRecord(plainRecord(session)?.sandbox);
+  const sandbox = plainRecord2(plainRecord2(session)?.sandbox);
   if (!sandbox || typeof sandbox.type !== "string") {
     throw new Error("Codex did not return its resolved sandbox policy. Update Codex, then retry; the turn was not started because its permissions could not be verified.");
   }
@@ -32609,7 +32824,7 @@ function withResolvedSandbox(params, session) {
 }
 function effectiveApprovalPolicy(value) {
   if (value === "untrusted" || value === "on-request" || value === "never") return value;
-  const granular = plainRecord(plainRecord(value)?.granular);
+  const granular = plainRecord2(plainRecord2(value)?.granular);
   if (granular && typeof granular.mcp_elicitations === "boolean" && typeof granular.rules === "boolean" && typeof granular.sandbox_approval === "boolean" && (granular.request_permissions === void 0 || typeof granular.request_permissions === "boolean") && (granular.skill_approval === void 0 || typeof granular.skill_approval === "boolean")) {
     return {
       granular: {
@@ -32672,20 +32887,20 @@ function permissionProfileUnsupported(error51) {
 }
 function codexNativeLogMessage(message2) {
   if (!message2 || typeof message2 !== "object" || Array.isArray(message2)) return message2;
-  const record5 = message2;
-  const params = record5.params;
+  const record6 = message2;
+  const params = record6.params;
   if (!params || typeof params !== "object" || Array.isArray(params)) return message2;
-  if (record5.method === "thread/start" || record5.method === "thread/resume") {
-    return { ...record5, params: { ...params, developerInstructions: "[developer instructions omitted]" } };
+  if (record6.method === "thread/start" || record6.method === "thread/resume") {
+    return { ...record6, params: { ...params, developerInstructions: "[developer instructions omitted]" } };
   }
-  if (record5.method === "thread/inject_items") {
-    return { ...record5, params: { ...params, items: "[developer instruction update omitted]" } };
+  if (record6.method === "thread/inject_items") {
+    return { ...record6, params: { ...params, items: "[developer instruction update omitted]" } };
   }
-  if (record5.method !== "turn/start") return message2;
+  if (record6.method !== "turn/start") return message2;
   const input = params.input;
   if (!Array.isArray(input)) return message2;
   return {
-    ...record5,
+    ...record6,
     params: {
       ...params,
       input: input.map((item) => {
@@ -32756,7 +32971,7 @@ function mountMcpServer(appServerArgs, env, name, server, preApproved = true) {
     appServerArgs.push("-c", `${prefix}.default_tools_approval_mode="auto"`);
   }
 }
-var DRIVER_KIND3, ASTRA_MODEL_ID, ASTRA_MIN_CODEX_VERSION, CodexRpcError, QUESTION_TIMEOUT_NOTE2, DENY_TIMEOUT_NOTE2, notedMcpServers, plainRecord, containsControlCharacter, CodexDriver;
+var DRIVER_KIND3, ASTRA_MODEL_ID, ASTRA_MIN_CODEX_VERSION, CodexRpcError, QUESTION_TIMEOUT_NOTE2, DENY_TIMEOUT_NOTE2, notedMcpServers, plainRecord2, CodexDriver;
 var init_codex = __esm({
   "server/drivers/codex.ts"() {
     "use strict";
@@ -32769,6 +32984,8 @@ var init_codex = __esm({
     init_setup_log();
     init_mcp_registry();
     init_mcp_tool_hints();
+    init_mcp_elicitation();
+    init_codex_elicitation();
     init_contracts();
     init_codex_catalog();
     init_local_inject();
@@ -32797,14 +33014,7 @@ var init_codex = __esm({
     QUESTION_TIMEOUT_NOTE2 = "No answer was given \u2014 use your best judgment.";
     DENY_TIMEOUT_NOTE2 = "Atomic: nobody answered this permission request in time. Skip this action and finish what you can without it.";
     notedMcpServers = /* @__PURE__ */ new Set();
-    plainRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
-    containsControlCharacter = (value) => {
-      for (const character of value) {
-        const code = character.charCodeAt(0);
-        if (code <= 31 || code === 127) return true;
-      }
-      return false;
-    };
+    plainRecord2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
     CodexDriver = {
       driverKind: DRIVER_KIND3,
       metadata: { displayName: "Codex", supportsMultipleInstances: true },
@@ -33104,7 +33314,8 @@ var init_codex = __esm({
               const isMcpElicitation = method === "mcpServer/elicitation/request";
               const isLegacyMcpPermission = method === "mcpServer/elicitation/request" && params?._meta?.codex_approval_kind === "mcp_tool_call";
               const mcpAppApproval = isMcpElicitation ? mcpAppApprovalForm(params) : null;
-              const isMcpPermission = isLegacyMcpPermission || mcpAppApproval !== null;
+              const serverConfirm = isMcpElicitation && !isLegacyMcpPermission && !mcpAppApproval ? codexServerConfirm(params, customByMountName) : null;
+              const isMcpPermission = isLegacyMcpPermission || mcpAppApproval !== null || serverConfirm !== null;
               const isQuestion = method === "item/tool/requestUserInput";
               const isAdditionalPermission = method === "item/permissions/requestApproval";
               const isPermission = legacy || isMcpPermission || isAdditionalPermission || method === "item/commandExecution/requestApproval" || method === "item/fileChange/requestApproval";
@@ -33135,9 +33346,9 @@ var init_codex = __esm({
               const mcpTool = isLegacyMcpPermission ? (typeof params?._meta?.tool_name === "string" ? params._meta.tool_name : void 0) ?? String(params.message ?? "").match(/tool "([^"]+)"/)?.[1] : void 0;
               const customServer = isLegacyMcpPermission && typeof params.serverName === "string" ? customByMountName.get(params.serverName) : void 0;
               const mcpToolRef = customServer && mcpTool ? { server: customServer, tool: mcpTool, ...toolAnnotations(params?._meta?.annotations) ? { annotations: toolAnnotations(params._meta.annotations) } : {} } : void 0;
-              const tool2 = mcpAppApproval ? mcpAppApproval.tool : isLegacyMcpPermission ? mcpTool ?? "mcp" : isAdditionalPermission ? "permissions" : method === "item/fileChange/requestApproval" || method === "applyPatchApproval" ? "edit" : isQuestion ? "ask_user" : "shell";
-              const permissionResult = (allow) => isMcpPermission ? allow ? mcpAppApproval?.allowResult ?? { action: "accept", content: {} } : { action: "decline" } : isAdditionalPermission ? { permissions: allow ? grantedPermissions(params.permissions) : {}, scope: "turn" } : { decision: allow ? legacy ? "approved" : "accept" : legacy ? "denied" : "decline" };
-              if (autoAcceptPermissions && isPermission) {
+              const tool2 = serverConfirm ? elicitationTool(customByMountName.get(params.serverName)) : mcpAppApproval ? mcpAppApproval.tool : isLegacyMcpPermission ? mcpTool ?? "mcp" : isAdditionalPermission ? "permissions" : method === "item/fileChange/requestApproval" || method === "applyPatchApproval" ? "edit" : isQuestion ? "ask_user" : "shell";
+              const permissionResult = (allow) => serverConfirm ? elicitationAnswer(serverConfirm, allow) : isMcpPermission ? allow ? mcpAppApproval?.allowResult ?? { action: "accept", content: {} } : { action: "decline" } : isAdditionalPermission ? { permissions: allow ? grantedPermissions(params.permissions) : {}, scope: "turn" } : { decision: allow ? legacy ? "approved" : "accept" : legacy ? "denied" : "decline" };
+              if (autoAcceptPermissions && isPermission && !serverConfirm) {
                 return send({
                   jsonrpc: "2.0",
                   id: msg.id,
@@ -33145,7 +33356,7 @@ var init_codex = __esm({
                 });
               }
               const requestId = newId();
-              const summary = isAdditionalPermission ? additionalPermissionSummary(params.permissions, params.reason) : isMcpPermission ? mcpAppApproval?.summary ?? (typeof params.message === "string" ? params.message : "MCP access requested") : typeof params.command === "string" ? params.command : Array.isArray(params.questions) ? params.questions.map((q2) => q2.question ?? q2.header).filter(Boolean).join(" \xB7 ") : typeof params.reason === "string" ? params.reason : tool2;
+              const summary = isAdditionalPermission ? additionalPermissionSummary(params.permissions, params.reason) : serverConfirm ? elicitationSummary(customByMountName.get(params.serverName), serverConfirm) : isMcpPermission ? mcpAppApproval?.summary ?? (typeof params.message === "string" ? params.message : "MCP access requested") : typeof params.command === "string" ? params.command : Array.isArray(params.questions) ? params.questions.map((q2) => q2.question ?? q2.header).filter(Boolean).join(" \xB7 ") : typeof params.reason === "string" ? params.reason : tool2;
               const choices = isQuestion ? (params.questions?.[0]?.options ?? []).map((o) => o.label).slice(0, 5) : void 0;
               const finish = (behavior, message2, source2 = "user") => {
                 if (!asks.delete(requestId)) return;
@@ -33160,7 +33371,8 @@ var init_codex = __esm({
                   send({
                     jsonrpc: "2.0",
                     id: msg.id,
-                    result: permissionResult(behavior === "allow")
+                    // a server's question nobody answered is "no answer", not a no
+                    result: serverConfirm && source2 !== "user" ? { action: "cancel" } : permissionResult(behavior === "allow")
                   });
                 }
                 emit({ ...base3(threadId, turnId), type: "request.resolved", requestId, behavior, source: source2 });
@@ -33180,7 +33392,7 @@ var init_codex = __esm({
                 summary,
                 choices,
                 approvalScope: controlsHost ? "local-computer" : void 0,
-                requiresExplicitApproval: isAdditionalPermission || void 0,
+                requiresExplicitApproval: isAdditionalPermission || serverConfirm !== null || void 0,
                 ...mcpToolRef ? { mcpTool: mcpToolRef } : {}
               });
             };
@@ -41709,7 +41921,7 @@ var require_dist = __commonJS({
 });
 
 // server/drivers/chat-images.ts
-import { readFileSync as readFileSync14, statSync as statSync4 } from "node:fs";
+import { readFileSync as readFileSync15, statSync as statSync4 } from "node:fs";
 function chatImageBudget() {
   let used = 0;
   return (parts) => {
@@ -41741,7 +41953,7 @@ function chatUserContent(turn) {
   const budget = chatImageBudget();
   return [{ type: "text", text: turn.text }, ...turn.images.map((image) => {
     if (statSync4(image.path).size > IMAGE_BYTES) throw new Error("Image exceeds 20 MB");
-    const part = chatImage({ mimeType: image.mime, data: readFileSync14(image.path).toString("base64") });
+    const part = chatImage({ mimeType: image.mime, data: readFileSync15(image.path).toString("base64") });
     budget([part]);
     return part;
   })];
@@ -41767,7 +41979,7 @@ import {
   linkSync as linkSync2,
   mkdirSync as mkdirSync14,
   openSync as openSync5,
-  readFileSync as readFileSync15,
+  readFileSync as readFileSync16,
   unlinkSync as unlinkSync4,
   writeFileSync as writeFileSync9
 } from "node:fs";
@@ -41778,7 +41990,7 @@ function hasCode(error51, code) {
 function readEnvironmentId(file2) {
   let contents;
   try {
-    contents = readFileSync15(file2, "utf8");
+    contents = readFileSync16(file2, "utf8");
   } catch (error51) {
     if (hasCode(error51, "ENOENT")) return void 0;
     throw new Error(`Cannot read the existing environment identity at ${file2}; refusing to replace it.`, {
@@ -41834,7 +42046,7 @@ var init_environment = __esm({
 
 // server/box-create-idempotency.ts
 import { createHash as createHash9, randomUUID as randomUUID11 } from "node:crypto";
-import { linkSync as linkSync3, mkdirSync as mkdirSync15, readFileSync as readFileSync16, unlinkSync as unlinkSync5, writeFileSync as writeFileSync10 } from "node:fs";
+import { linkSync as linkSync3, mkdirSync as mkdirSync15, readFileSync as readFileSync17, unlinkSync as unlinkSync5, writeFileSync as writeFileSync10 } from "node:fs";
 import { join as join33 } from "node:path";
 function isRequest(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
@@ -41852,7 +42064,7 @@ function recoveryStateError(detail, cause) {
 function loadFresh() {
   let raw;
   try {
-    raw = JSON.parse(readFileSync16(FILE, "utf8"));
+    raw = JSON.parse(readFileSync17(FILE, "utf8"));
   } catch (error51) {
     if (error51?.code === "ENOENT") return [];
     throw recoveryStateError("unreadable", error51);
@@ -41891,7 +42103,7 @@ function isLockOwner(value) {
 function readLockOwner() {
   let raw;
   try {
-    raw = readFileSync16(LOCK_FILE, "utf8");
+    raw = readFileSync17(LOCK_FILE, "utf8");
   } catch (error51) {
     if (error51?.code === "ENOENT") return null;
     throw recoveryStateError("lock is unreadable", error51);
@@ -41908,7 +42120,7 @@ function readLockOwner() {
 function readReaperOwner(path4, targetToken) {
   let raw;
   try {
-    raw = readFileSync16(path4, "utf8");
+    raw = readFileSync17(path4, "utf8");
   } catch (error51) {
     if (error51?.code === "ENOENT") return null;
     throw recoveryStateError("stale-lock recovery record is unreadable", error51);
@@ -42110,7 +42322,7 @@ var init_box_create_idempotency = __esm({
 
 // server/box-delete-journal.ts
 import { createHash as createHash10, randomUUID as randomUUID12 } from "node:crypto";
-import { linkSync as linkSync4, mkdirSync as mkdirSync16, readFileSync as readFileSync17, unlinkSync as unlinkSync6, writeFileSync as writeFileSync11 } from "node:fs";
+import { linkSync as linkSync4, mkdirSync as mkdirSync16, readFileSync as readFileSync18, unlinkSync as unlinkSync6, writeFileSync as writeFileSync11 } from "node:fs";
 import { join as join34 } from "node:path";
 function validTimestamp(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value > 0;
@@ -42120,13 +42332,13 @@ function validName(value) {
 }
 function isRecord4(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const record5 = value;
-  if (typeof record5.boxId !== "string" || !BOX_ID2.test(record5.boxId) || !validName(record5.name) || !(record5.ownerBotId === null || typeof record5.ownerBotId === "string" && BOT_ID2.test(record5.ownerBotId)) || !["prepared", "accepted", "blocked"].includes(record5.phase) || !validTimestamp(record5.requestedAt) || !validTimestamp(record5.updatedAt) || record5.updatedAt < record5.requestedAt || !(record5.operationId === void 0 || typeof record5.operationId === "string" && OPERATION_ID.test(record5.operationId)) || !(record5.status === void 0 || typeof record5.status === "string" && PROVIDER_STATUSES.has(record5.status))) return false;
-  if (record5.phase === "prepared") return record5.operationId === void 0 && record5.status === void 0;
-  if (record5.phase === "accepted") {
-    return typeof record5.operationId === "string" && (record5.status === "pending" || record5.status === "processing" || record5.status === "completed");
+  const record6 = value;
+  if (typeof record6.boxId !== "string" || !BOX_ID2.test(record6.boxId) || !validName(record6.name) || !(record6.ownerBotId === null || typeof record6.ownerBotId === "string" && BOT_ID2.test(record6.ownerBotId)) || !["prepared", "accepted", "blocked"].includes(record6.phase) || !validTimestamp(record6.requestedAt) || !validTimestamp(record6.updatedAt) || record6.updatedAt < record6.requestedAt || !(record6.operationId === void 0 || typeof record6.operationId === "string" && OPERATION_ID.test(record6.operationId)) || !(record6.status === void 0 || typeof record6.status === "string" && PROVIDER_STATUSES.has(record6.status))) return false;
+  if (record6.phase === "prepared") return record6.operationId === void 0 && record6.status === void 0;
+  if (record6.phase === "accepted") {
+    return typeof record6.operationId === "string" && (record6.status === "pending" || record6.status === "processing" || record6.status === "completed");
   }
-  return record5.status === "blocked";
+  return record6.status === "blocked";
 }
 function stateError(detail, cause) {
   return Object.assign(
@@ -42136,13 +42348,13 @@ function stateError(detail, cause) {
     { status: 503, cause }
   );
 }
-function clone2(record5) {
-  return { ...record5 };
+function clone2(record6) {
+  return { ...record6 };
 }
 function loadFresh2() {
   let raw;
   try {
-    raw = JSON.parse(readFileSync17(FILE2, "utf8"));
+    raw = JSON.parse(readFileSync18(FILE2, "utf8"));
   } catch (error51) {
     if (error51?.code === "ENOENT") return [];
     throw stateError("unreadable", error51);
@@ -42151,12 +42363,12 @@ function loadFresh2() {
   if (!journal || typeof journal !== "object" || Array.isArray(journal) || journal.version !== 1 || !Array.isArray(journal.records) || journal.records.length > MAX_RECORDS || !journal.records.every(isRecord4)) throw stateError("invalid");
   const boxIds = /* @__PURE__ */ new Set();
   const operationIds = /* @__PURE__ */ new Set();
-  for (const record5 of journal.records) {
-    if (boxIds.has(record5.boxId)) throw stateError("invalid");
-    boxIds.add(record5.boxId);
-    if (record5.operationId) {
-      if (operationIds.has(record5.operationId)) throw stateError("invalid");
-      operationIds.add(record5.operationId);
+  for (const record6 of journal.records) {
+    if (boxIds.has(record6.boxId)) throw stateError("invalid");
+    boxIds.add(record6.boxId);
+    if (record6.operationId) {
+      if (operationIds.has(record6.operationId)) throw stateError("invalid");
+      operationIds.add(record6.operationId);
     }
   }
   return journal.records.map(clone2);
@@ -42169,7 +42381,7 @@ function isLockOwner2(value) {
 function readLockOwner2() {
   let raw;
   try {
-    raw = readFileSync17(LOCK_FILE2, "utf8");
+    raw = readFileSync18(LOCK_FILE2, "utf8");
   } catch (error51) {
     if (error51?.code === "ENOENT") return null;
     throw stateError("lock is unreadable", error51);
@@ -42206,7 +42418,7 @@ function unlinkCandidate2(path4) {
 function readReaperOwner2(path4, targetToken) {
   let raw;
   try {
-    raw = readFileSync17(path4, "utf8");
+    raw = readFileSync18(path4, "utf8");
   } catch (error51) {
     if (error51?.code === "ENOENT") return null;
     throw stateError("stale-lock recovery record is unreadable", error51);
@@ -42345,13 +42557,13 @@ function withJournalLock2(operation) {
 function getBoxDeletion(boxId) {
   if (!BOX_ID2.test(boxId)) throw new Error("invalid cloud computer id for deletion");
   return withJournalLock2((records) => {
-    const record5 = records.find((candidate) => candidate.boxId === boxId);
-    return record5 ? clone2(record5) : null;
+    const record6 = records.find((candidate) => candidate.boxId === boxId);
+    return record6 ? clone2(record6) : null;
   });
 }
 function hasPendingBoxDeletionForBot(botId) {
   if (!BOT_ID2.test(botId)) throw new Error("invalid bot id for cloud computer deletion");
-  return withJournalLock2((records) => records.some((record5) => record5.ownerBotId === botId));
+  return withJournalLock2((records) => records.some((record6) => record6.ownerBotId === botId));
 }
 var FILE2, LOCK_FILE2, MAX_RECORDS, LOCK_WAIT_MS2, LOCK_RETRY_MS2, MAX_REAPER_GENERATIONS3, UUID4, BOT_ID2, BOX_ID2, OPERATION_ID, PROVIDER_STATUSES, lockWait2;
 var init_box_delete_journal = __esm({
@@ -43892,7 +44104,7 @@ var init_grok = __esm({
 });
 
 // server/drivers/acp/grok.ts
-import { existsSync as existsSync16, readFileSync as readFileSync18, writeFileSync as writeFileSync12 } from "node:fs";
+import { existsSync as existsSync16, readFileSync as readFileSync19, writeFileSync as writeFileSync12 } from "node:fs";
 import { homedir as homedir16 } from "node:os";
 import { join as join35 } from "node:path";
 function decodeGrokModelText(text4) {
@@ -43941,7 +44153,7 @@ function readGrokModelCatalog(env = process.env, base3 = STATIC_GROK_MODELS) {
   const path4 = join35(grokHome(env), "config.toml");
   let text4 = "";
   try {
-    text4 = readFileSync18(path4, "utf8");
+    text4 = readFileSync19(path4, "utf8");
   } catch {
     return base3;
   }
@@ -44020,7 +44232,7 @@ function ensureGrokInjectSlug(modelId, env = process.env) {
   const path4 = join35(grokHome(env), "config.toml");
   let text4 = "";
   try {
-    text4 = readFileSync18(path4, "utf8");
+    text4 = readFileSync19(path4, "utf8");
   } catch {
     text4 = "";
   }
@@ -44186,12 +44398,12 @@ ${turn.text}` : turn.text
 });
 
 // server/drivers/acp/gemini.ts
-import { existsSync as existsSync17, readFileSync as readFileSync19 } from "node:fs";
+import { existsSync as existsSync17, readFileSync as readFileSync20 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
 import { join as join36 } from "node:path";
 function liveOauthCredential() {
   try {
-    const creds = JSON.parse(readFileSync19(join36(homedir17(), ".gemini", "oauth_creds.json"), "utf8"));
+    const creds = JSON.parse(readFileSync20(join36(homedir17(), ".gemini", "oauth_creds.json"), "utf8"));
     if (typeof creds.access_token !== "string" || creds.access_token.trim().length === 0) return false;
     const hasRefresh = typeof creds.refresh_token === "string" && creds.refresh_token.trim().length > 0;
     if (creds.expiry_date !== void 0) {
@@ -44251,7 +44463,7 @@ ${turn.text}` : turn.text
 });
 
 // server/drivers/acp/kimi.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync17, readFileSync as readFileSync20, writeFileSync as writeFileSync13 } from "node:fs";
+import { existsSync as existsSync18, mkdirSync as mkdirSync17, readFileSync as readFileSync21, writeFileSync as writeFileSync13 } from "node:fs";
 import { homedir as homedir18 } from "node:os";
 import { join as join37 } from "node:path";
 function isLocalInjectAlias(slug) {
@@ -44552,7 +44764,7 @@ function ensureKimiInjectAlias(modelId, env = process.env) {
   const path4 = join37(dataRoot, "config.toml");
   let text4 = "";
   try {
-    text4 = readFileSync20(path4, "utf8");
+    text4 = readFileSync21(path4, "utf8");
   } catch {
     text4 = "";
   }
@@ -44614,7 +44826,7 @@ function readKimiModelCatalog(env) {
   const dataRoot = kimiDataRoot(env);
   let text4 = "";
   try {
-    text4 = readFileSync20(join37(dataRoot, "config.toml"), "utf8");
+    text4 = readFileSync21(join37(dataRoot, "config.toml"), "utf8");
   } catch {
     return STATIC_KIMI_MODELS;
   }
@@ -44761,7 +44973,7 @@ ${turn.text}` : turn.text
 });
 
 // server/drivers/acp/droid.ts
-import { existsSync as existsSync19, mkdirSync as mkdirSync18, readFileSync as readFileSync21, writeFileSync as writeFileSync14 } from "node:fs";
+import { existsSync as existsSync19, mkdirSync as mkdirSync18, readFileSync as readFileSync22, writeFileSync as writeFileSync14 } from "node:fs";
 import { homedir as homedir19 } from "node:os";
 import { join as join38 } from "node:path";
 function authFilePaths(env) {
@@ -44786,7 +44998,7 @@ function ensureDroidInjectModel(modelId, env = process.env) {
   const path4 = join38(dir, "settings.json");
   let settings2 = {};
   try {
-    settings2 = JSON.parse(readFileSync21(path4, "utf8"));
+    settings2 = JSON.parse(readFileSync22(path4, "utf8"));
   } catch (error51) {
     if (existsSync19(path4)) throw error51;
   }
@@ -44823,7 +45035,7 @@ function applyDroidLocalAuthEnv(env, modelId) {
   env.FACTORY_API_KEY = "openmausbot-local";
 }
 function readSettings(env) {
-  return JSON.parse(readFileSync21(join38(factoryHome(env), ".factory", "settings.json"), "utf8"));
+  return JSON.parse(readFileSync22(join38(factoryHome(env), ".factory", "settings.json"), "utf8"));
 }
 async function resolveModels(env) {
   let catalog2 = MODELS3;
@@ -46709,7 +46921,7 @@ var init_muse_code_login = __esm({
 });
 
 // server/drivers/muse-code.ts
-import { existsSync as existsSync20, mkdtempSync as mkdtempSync4, readFileSync as readFileSync22, rmSync as rmSync8, statSync as statSync5 } from "node:fs";
+import { existsSync as existsSync20, mkdtempSync as mkdtempSync4, readFileSync as readFileSync23, rmSync as rmSync8, statSync as statSync5 } from "node:fs";
 import { readFile as readFile4 } from "node:fs/promises";
 import { homedir as homedir20, tmpdir as tmpdir5 } from "node:os";
 import { join as join39 } from "node:path";
@@ -46722,7 +46934,7 @@ function museCredential(path4) {
   let raw;
   try {
     if (statSync5(path4).size > 1024 * 1024) return { signedIn: false };
-    raw = readFileSync22(path4, "utf8");
+    raw = readFileSync23(path4, "utf8");
   } catch {
     return { signedIn: false };
   }
@@ -46764,8 +46976,8 @@ function museCatalog(result, preferred) {
   return { default: preferred ?? listedDefault ?? options[0].id, options };
 }
 function museListedFromAccount(result) {
-  const record5 = result ?? {};
-  return record5.source !== "bundledCatalog" && Array.isArray(record5.models) && record5.models.length > 0;
+  const record6 = result ?? {};
+  return record6.source !== "bundledCatalog" && Array.isArray(record6.models) && record6.models.length > 0;
 }
 function museApprovalMode(mode) {
   return mode === "full" ? "allowAll" : mode === "auto" ? "onRequest" : "promptUnmatched";
@@ -47474,7 +47686,7 @@ ${body}` : body;
 });
 
 // server/drivers/acp/opencode-go.ts
-import { existsSync as existsSync21, mkdirSync as mkdirSync19, readFileSync as readFileSync23, writeFileSync as writeFileSync15 } from "node:fs";
+import { existsSync as existsSync21, mkdirSync as mkdirSync19, readFileSync as readFileSync24, writeFileSync as writeFileSync15 } from "node:fs";
 import { homedir as homedir21 } from "node:os";
 import { join as join40 } from "node:path";
 function labelForModel(id) {
@@ -47491,8 +47703,8 @@ function validModelSlug(value) {
   if (separator <= 0 || separator >= value.length - 1 || /\s/u.test(value)) return false;
   return [...value].every((character) => (character.codePointAt(0) ?? 0) > 31);
 }
-function localModelRecord(record5) {
-  const api2 = record5.api && typeof record5.api === "object" && !Array.isArray(record5.api) ? record5.api : {};
+function localModelRecord(record6) {
+  const api2 = record6.api && typeof record6.api === "object" && !Array.isArray(record6.api) ? record6.api : {};
   if (typeof api2.url !== "string") return false;
   try {
     const host = new URL(api2.url).hostname.replace(/^\[|\]$/gu, "");
@@ -47511,27 +47723,27 @@ function parseOpenCodeModelsOutput(stdout2) {
     const separator = slug.indexOf("/");
     const provider = slug.slice(0, separator);
     const model = slug.slice(separator + 1);
-    let record5 = {};
+    let record6 = {};
     const raw = jsonLines.join("\n").trim();
     if (raw) {
       try {
         const parsed = JSON.parse(raw);
         if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-          record5 = parsed;
+          record6 = parsed;
         }
       } catch {
       }
     }
-    if (record5.status === "deprecated") return;
-    const name = typeof record5.name === "string" && record5.name.trim() ? record5.name.trim() : labelForModel(model);
-    const limit = record5.limit && typeof record5.limit === "object" && !Array.isArray(record5.limit) ? record5.limit : {};
+    if (record6.status === "deprecated") return;
+    const name = typeof record6.name === "string" && record6.name.trim() ? record6.name.trim() : labelForModel(model);
+    const limit = record6.limit && typeof record6.limit === "object" && !Array.isArray(record6.limit) ? record6.limit : {};
     const contextWindow = typeof limit.context === "number" && Number.isFinite(limit.context) && limit.context > 0 ? Math.floor(limit.context) : void 0;
-    const variants = record5.variants && typeof record5.variants === "object" && !Array.isArray(record5.variants) ? Object.entries(record5.variants).filter(([, settings2]) => settings2 && typeof settings2 === "object" && !Array.isArray(settings2) && settings2.disabled !== true).map(([id]) => ({ id, label: labelForModel(id) })) : void 0;
+    const variants = record6.variants && typeof record6.variants === "object" && !Array.isArray(record6.variants) ? Object.entries(record6.variants).filter(([, settings2]) => settings2 && typeof settings2 === "object" && !Array.isArray(settings2) && settings2.disabled !== true).map(([id]) => ({ id, label: labelForModel(id) })) : void 0;
     seen.add(slug);
     options.push({
       id: slug,
       label: `${providerLabel(provider)} \xB7 ${name}`,
-      ...localModelRecord(record5) ? { custom: true, loaded: true } : {},
+      ...localModelRecord(record6) ? { custom: true, loaded: true } : {},
       ...contextWindow ? { contextWindow } : {},
       ...variants ? { variants } : {}
     });
@@ -47593,7 +47805,7 @@ function ensureOpenCodeInjectModel(modelId, env = process.env) {
   let config2 = { $schema: "https://opencode.ai/config.json" };
   if (existsSync21(path4)) {
     try {
-      config2 = JSON.parse(readFileSync23(path4, "utf8"));
+      config2 = JSON.parse(readFileSync24(path4, "utf8"));
     } catch {
     }
   }
@@ -47644,7 +47856,7 @@ function hasStoredOpenCodeAuth(env) {
   if (env.OPENCODE_AUTH_CONTENT) candidates.push(env.OPENCODE_AUTH_CONTENT);
   for (const path4 of storedAuthPaths(env)) {
     try {
-      candidates.push(readFileSync23(path4, "utf8"));
+      candidates.push(readFileSync24(path4, "utf8"));
     } catch {
     }
   }
@@ -47786,7 +47998,7 @@ ${turn.text}` : turn.text
 });
 
 // server/drivers/acp/qwen.ts
-import { chmodSync as chmodSync5, existsSync as existsSync22, mkdirSync as mkdirSync20, readFileSync as readFileSync24, writeFileSync as writeFileSync16 } from "node:fs";
+import { chmodSync as chmodSync5, existsSync as existsSync22, mkdirSync as mkdirSync20, readFileSync as readFileSync25, writeFileSync as writeFileSync16 } from "node:fs";
 import { createHash as createHash13 } from "node:crypto";
 import { homedir as homedir22 } from "node:os";
 import { join as join41 } from "node:path";
@@ -47804,7 +48016,7 @@ function qwenModelLabel(id, name) {
 function readQwenRoutes(env) {
   let settings2;
   try {
-    settings2 = JSON.parse(readFileSync24(join41(qwenHome(env), "settings.json"), "utf8"));
+    settings2 = JSON.parse(readFileSync25(join41(qwenHome(env), "settings.json"), "utf8"));
   } catch {
     return [];
   }
@@ -47892,7 +48104,7 @@ function ensureQwenInjectModel(modelId, env = process.env) {
   let settings2 = {};
   if (existsSync22(path4)) {
     try {
-      settings2 = JSON.parse(readFileSync24(path4, "utf8"));
+      settings2 = JSON.parse(readFileSync25(path4, "utf8"));
     } catch {
     }
   }
@@ -48375,7 +48587,7 @@ var init_claude_accounts = __esm({
 });
 
 // server/atomic-engine-accounts.ts
-import { mkdirSync as mkdirSync21, readFileSync as readFileSync25, writeFileSync as writeFileSync17 } from "node:fs";
+import { mkdirSync as mkdirSync21, readFileSync as readFileSync26, writeFileSync as writeFileSync17 } from "node:fs";
 import { homedir as homedir23 } from "node:os";
 import { join as join42 } from "node:path";
 function rawConfig2(entry) {
@@ -48478,7 +48690,7 @@ function writeAtomicEngineAccountsFile(engineHome, accounts) {
 `;
   const path4 = join42(engineHome, ACCOUNTS_FILE);
   try {
-    if (readFileSync25(path4, "utf8") === text4) return;
+    if (readFileSync26(path4, "utf8") === text4) return;
   } catch {
   }
   try {
@@ -48552,7 +48764,7 @@ var init_atomic_engine_release = __esm({
 
 // server/atomic-engine-runtime.ts
 import { createHash as createHash14, randomUUID as randomUUID15 } from "node:crypto";
-import { createWriteStream as createWriteStream2, existsSync as existsSync23, mkdirSync as mkdirSync22, readdirSync as readdirSync6, readFileSync as readFileSync26, rmSync as rmSync9, writeFileSync as writeFileSync18 } from "node:fs";
+import { createWriteStream as createWriteStream2, existsSync as existsSync23, mkdirSync as mkdirSync22, readdirSync as readdirSync6, readFileSync as readFileSync27, rmSync as rmSync9, writeFileSync as writeFileSync18 } from "node:fs";
 import { join as join43 } from "node:path";
 import { Readable, Transform as Transform2 } from "node:stream";
 import { pipeline as pipeline2 } from "node:stream/promises";
@@ -48566,7 +48778,7 @@ function managedAtomicEngine(baseDir = DATA_DIR, asset = atomicEngineAsset(), pl
   if (!asset) return null;
   const root = join43(atomicEngineHome(baseDir), asset.version);
   try {
-    if (readFileSync26(join43(root, MARKER2), "utf8").trim() !== asset.sha512) return null;
+    if (readFileSync27(join43(root, MARKER2), "utf8").trim() !== asset.sha512) return null;
   } catch {
     return null;
   }
@@ -55570,11 +55782,11 @@ var init_memory_policy = __esm({
 
 // server/drivers/acp/hermes-memory-lock.ts
 import { createHash as createHash15 } from "node:crypto";
-import { mkdirSync as mkdirSync23, readdirSync as readdirSync7, readFileSync as readFileSync27, writeFileSync as writeFileSync19 } from "node:fs";
+import { mkdirSync as mkdirSync23, readdirSync as readdirSync7, readFileSync as readFileSync28, writeFileSync as writeFileSync19 } from "node:fs";
 import { join as join44 } from "node:path";
 function readText2(path4) {
   try {
-    return readFileSync27(path4, "utf8");
+    return readFileSync28(path4, "utf8");
   } catch {
     return null;
   }
@@ -55587,7 +55799,7 @@ function parseYamlSafe(text4) {
     return null;
   }
 }
-function record2(value) {
+function record3(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function memoryProviderPlugins(pluginsDir) {
@@ -55600,12 +55812,12 @@ function memoryProviderPlugins(pluginsDir) {
   return dirs.flatMap((dir) => {
     const source2 = (readText2(join44(pluginsDir, dir, "__init__.py")) ?? "").slice(0, 8192);
     if (!source2.includes("register_memory_provider") && !source2.includes("MemoryProvider")) return [];
-    const name = record2(parseYamlSafe(readText2(join44(pluginsDir, dir, "plugin.yaml"))))?.name;
+    const name = record3(parseYamlSafe(readText2(join44(pluginsDir, dir, "plugin.yaml"))))?.name;
     return typeof name === "string" && name.trim() && name.trim() !== dir ? [dir, name.trim()] : [dir];
   });
 }
 function lockHermesMemory(env, home, dataDir = DATA_DIR) {
-  const own = record2(record2(parseYamlSafe(readText2(join44(home, "config.yaml"))))?.plugins);
+  const own = record3(record3(parseYamlSafe(readText2(join44(home, "config.yaml"))))?.plugins);
   const disabled = new Set(Array.isArray(own?.disabled) ? own.disabled.map(String) : []);
   for (const name of memoryProviderPlugins(join44(home, "plugins"))) disabled.add(name);
   for (const name of BLOCKED_HERMES_MEMORY_PLUGINS) disabled.add(name);
@@ -55631,7 +55843,7 @@ var init_hermes_memory_lock = __esm({
 
 // server/drivers/acp/hermes.ts
 import { spawn as spawn7 } from "node:child_process";
-import { mkdirSync as mkdirSync24, readFileSync as readFileSync28, writeFileSync as writeFileSync20 } from "node:fs";
+import { mkdirSync as mkdirSync24, readFileSync as readFileSync29, writeFileSync as writeFileSync20 } from "node:fs";
 import { homedir as homedir24 } from "node:os";
 import { join as join45 } from "node:path";
 function bindHermesScreenshotCompat(env, modelId) {
@@ -55688,7 +55900,7 @@ function ensureHermesInjectProvider(modelId, env = process.env, home = hermesHom
   const path4 = join45(dir, "config.yaml");
   let text4 = "";
   try {
-    text4 = readFileSync28(path4, "utf8");
+    text4 = readFileSync29(path4, "utf8");
   } catch {
     text4 = "";
   }
@@ -55756,13 +55968,13 @@ function hermesConfiguredModel(env = process.env) {
   const dir = hermesHome(env);
   let secrets = "";
   try {
-    secrets = readFileSync28(join45(dir, ".env"), "utf8");
+    secrets = readFileSync29(join45(dir, ".env"), "utf8");
   } catch {
   }
   const hasHostedProviderKey = HERMES_HOSTED_PROVIDER_KEYS.some((name) => nonEmptyDotenvValue(secrets, name));
   let configuredDefault = null;
   try {
-    configuredDefault = hermesConfigDefault(readFileSync28(join45(dir, "config.yaml"), "utf8"));
+    configuredDefault = hermesConfigDefault(readFileSync29(join45(dir, "config.yaml"), "utf8"));
   } catch {
   }
   const configuredProvider = configuredDefault?.provider.toLowerCase() ?? "";
@@ -55787,12 +55999,12 @@ function hermesModelProvider(modelId) {
 }
 function readJson(path4) {
   try {
-    return JSON.parse(readFileSync28(path4, "utf8"));
+    return JSON.parse(readFileSync29(path4, "utf8"));
   } catch {
     return null;
   }
 }
-function record3(value) {
+function record4(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function notExpired(row, now) {
@@ -55807,18 +56019,18 @@ function oauthRowSignedIn(row, now) {
   return present(row.access_token) && notExpired(row, now);
 }
 function hermesSignedInProviders(env = process.env, now = Date.now()) {
-  const store = record3(readJson(join45(hermesHome(env), "auth.json")));
+  const store = record4(readJson(join45(hermesHome(env), "auth.json")));
   const out = /* @__PURE__ */ new Set();
   if (!store) return out;
-  const providers = record3(store.providers) ?? {};
+  const providers = record4(store.providers) ?? {};
   for (const [id, state2] of Object.entries(providers)) {
-    const row = record3(state2);
+    const row = record4(state2);
     if (row && oauthRowSignedIn(row, now)) out.add(id.toLowerCase());
   }
-  for (const [id, rows] of Object.entries(record3(store.credential_pool) ?? {})) {
+  for (const [id, rows] of Object.entries(record4(store.credential_pool) ?? {})) {
     if (id in providers || !Array.isArray(rows)) continue;
     const signedIn = rows.some((value) => {
-      const row = record3(value);
+      const row = record4(value);
       if (!row) return false;
       const oauth = String(row.auth_type ?? "").toLowerCase().startsWith("oauth") || present(row.refresh_token);
       return oauth && present(row.access_token) && oauthRowSignedIn(row, now);
@@ -55831,7 +56043,7 @@ function hermesZaiCodingPlan(env = process.env) {
   const dir = hermesHome(env);
   let secrets = "";
   try {
-    secrets = readFileSync28(join45(dir, ".env"), "utf8");
+    secrets = readFileSync29(join45(dir, ".env"), "utf8");
   } catch {
   }
   const keyed = ["GLM_API_KEY", "ZAI_API_KEY", "Z_AI_API_KEY"].some((name) => present(env[name]) || nonEmptyDotenvValue(secrets, name));
@@ -55839,21 +56051,21 @@ function hermesZaiCodingPlan(env = process.env) {
   const coding = (url2) => typeof url2 === "string" && /\/api\/coding\/paas\//i.test(url2);
   const override = present(env.GLM_BASE_URL) ? env.GLM_BASE_URL : nonEmptyDotenvValue(secrets, "GLM_BASE_URL");
   if (override) return coding(override);
-  const detected = record3(record3(record3(record3(readJson(join45(dir, "auth.json")))?.providers)?.zai)?.detected_endpoint);
+  const detected = record4(record4(record4(record4(readJson(join45(dir, "auth.json")))?.providers)?.zai)?.detected_endpoint);
   return coding(detected?.base_url);
 }
 function hermesZaiPlanHosts(options, codingPlan) {
   return codingPlan ? options.map((option) => option.provider === "zai" ? { ...option, provider: "zai-coding-plan" } : option) : [...options];
 }
 function hermesCachedModels(home, provider) {
-  const catalog2 = record3(record3(record3(readJson(join45(home, "cache", "model_catalog.json")))?.providers)?.[provider]);
-  const name = String(record3(catalog2?.metadata)?.display_name ?? "").trim() || provider;
-  const rows = Array.isArray(catalog2?.models) ? catalog2.models.map(record3).filter((row) => row && present(row.id)) : [];
+  const catalog2 = record4(record4(record4(readJson(join45(home, "cache", "model_catalog.json")))?.providers)?.[provider]);
+  const name = String(record4(catalog2?.metadata)?.display_name ?? "").trim() || provider;
+  const rows = Array.isArray(catalog2?.models) ? catalog2.models.map(record4).filter((row) => row && present(row.id)) : [];
   if (rows.length) {
     const ordered = [...rows.filter((row) => row.default === true), ...rows.filter((row) => row.default !== true)];
     return { ids: ordered.map((row) => String(row.id).trim()), name };
   }
-  const cached3 = record3(record3(readJson(join45(home, "provider_models_cache.json")))?.[provider])?.models;
+  const cached3 = record4(record4(readJson(join45(home, "provider_models_cache.json")))?.[provider])?.models;
   return { ids: Array.isArray(cached3) ? cached3.filter(present).map((id) => String(id).trim()) : [], name };
 }
 function hermesAuthStoreModels(env = process.env, now = Date.now()) {
@@ -55871,7 +56083,7 @@ function hermesConfiguredHostModel(env = process.env) {
   const home = hermesHome(env);
   let configured = null;
   try {
-    configured = hermesConfigDefault(readFileSync28(join45(home, "config.yaml"), "utf8"));
+    configured = hermesConfigDefault(readFileSync29(join45(home, "config.yaml"), "utf8"));
   } catch {
     return null;
   }
@@ -56245,8 +56457,8 @@ function decodeConfig5(raw) {
   return config2;
 }
 function ollamaCloudCatalog(body, configuredModel) {
-  const record5 = body && typeof body === "object" && !Array.isArray(body) ? body : null;
-  const rows = Array.isArray(body) ? body : Array.isArray(record5?.data) ? record5.data : [];
+  const record6 = body && typeof body === "object" && !Array.isArray(body) ? body : null;
+  const rows = Array.isArray(body) ? body : Array.isArray(record6?.data) ? record6.data : [];
   const options = [];
   const seen = /* @__PURE__ */ new Set();
   for (const row of rows) {
@@ -56502,13 +56714,13 @@ var init_openai_compat = __esm({
 });
 
 // server/drivers/pi.ts
-import { chmodSync as chmodSync6, existsSync as existsSync24, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync5, readFileSync as readFileSync29, rmSync as rmSync10, writeFileSync as writeFileSync21 } from "node:fs";
+import { chmodSync as chmodSync6, existsSync as existsSync24, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync5, readFileSync as readFileSync30, rmSync as rmSync10, writeFileSync as writeFileSync21 } from "node:fs";
 import { homedir as homedir26, tmpdir as tmpdir6 } from "node:os";
 import { join as join47 } from "node:path";
 function readPiPromptImages(turn) {
   return (turn.images ?? []).map((image) => ({
     type: "image",
-    data: readFileSync29(image.path).toString("base64"),
+    data: readFileSync30(image.path).toString("base64"),
     mimeType: image.mime
   }));
 }
@@ -56565,7 +56777,7 @@ function piMcpToolRef(title, customServers, hintsPath) {
   const tool2 = match[2];
   if (!hintsPath) return { server, tool: tool2 };
   try {
-    const hints = JSON.parse(readFileSync29(hintsPath, "utf8"));
+    const hints = JSON.parse(readFileSync30(hintsPath, "utf8"));
     const known = hints?.[server]?.[tool2];
     return known && typeof known === "object" ? { server, tool: tool2, annotations: known } : { server, tool: tool2 };
   } catch {
@@ -56641,7 +56853,7 @@ function ensurePiInjectModel(modelId, env = process.env) {
   let root = { providers: {} };
   if (existsSync24(path4)) {
     try {
-      const parsed = JSON.parse(readFileSync29(path4, "utf8"));
+      const parsed = JSON.parse(readFileSync30(path4, "utf8"));
       if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
         root = parsed;
       } else {
@@ -56693,7 +56905,7 @@ function ensurePiInjectModel(modelId, env = process.env) {
 function readPiDefaultModel(env) {
   const home = env.HOME || env.USERPROFILE || homedir26();
   try {
-    const s4 = JSON.parse(readFileSync29(`${home}/.pi/agent/settings.json`, "utf8"));
+    const s4 = JSON.parse(readFileSync30(`${home}/.pi/agent/settings.json`, "utf8"));
     return s4.defaultProvider && s4.defaultModel ? `${s4.defaultProvider}/${s4.defaultModel}` : "";
   } catch {
     return "";
@@ -57358,7 +57570,7 @@ var init_mistral = __esm({
 });
 
 // server/drivers/minimax.ts
-import { readFileSync as readFileSync30 } from "node:fs";
+import { readFileSync as readFileSync31 } from "node:fs";
 import { homedir as homedir27 } from "node:os";
 import { join as join48 } from "node:path";
 function normalizedApiUrl(value) {
@@ -57367,7 +57579,7 @@ function normalizedApiUrl(value) {
 }
 function loadLocalMiniMaxConfig(home = homedir27()) {
   try {
-    const raw = localConfigSchema.parse(JSON.parse(readFileSync30(join48(home, ".mmx", "config.json"), "utf8")));
+    const raw = localConfigSchema.parse(JSON.parse(readFileSync31(join48(home, ".mmx", "config.json"), "utf8")));
     const configuredUrl = raw.base_url?.trim() ? raw.base_url : raw.region === "cn" ? CN_URL : DEFAULT_URL3;
     return {
       apiKey: raw.api_key?.trim() ?? "",
@@ -57843,10 +58055,14 @@ var init_apple_intelligence2 = __esm({
 });
 
 // server/drivers/builtIn.ts
-var BUILT_IN_DRIVERS;
+function builtInDriversFor(platform) {
+  return ALL_BUILT_IN_DRIVERS.filter((driver) => engineOnPlatform(driver.driverKind, platform));
+}
+var ALL_BUILT_IN_DRIVERS, BUILT_IN_DRIVERS;
 var init_builtIn = __esm({
   "server/drivers/builtIn.ts"() {
     "use strict";
+    init_engine_platforms();
     init_antigravity();
     init_boxagent();
     init_claude();
@@ -57869,7 +58085,7 @@ var init_builtIn = __esm({
     init_minimax();
     init_ollama_cloud();
     init_apple_intelligence2();
-    BUILT_IN_DRIVERS = [
+    ALL_BUILT_IN_DRIVERS = [
       GrokDriver,
       GrokAgentDriver,
       GeminiAgentDriver,
@@ -57893,6 +58109,7 @@ var init_builtIn = __esm({
       OllamaCloudDriver,
       AppleIntelligenceDriver
     ];
+    BUILT_IN_DRIVERS = builtInDriversFor(process.platform);
   }
 });
 
@@ -57970,10 +58187,10 @@ async function setupJson(url2, key, body) {
   }
 }
 async function fetchSetupModels(url2, key) {
-  const json2 = record4(await setupJson(url2, key));
+  const json2 = record5(await setupJson(url2, key));
   const models2 = /* @__PURE__ */ new Map();
   for (const entry of Array.isArray(json2?.data) ? json2.data : []) {
-    const item = record4(entry);
+    const item = record5(entry);
     const id = typeof item?.id === "string" ? item.id.trim() : "";
     if (!id || /[\u0000-\u001f\u007f]/u.test(id) || models2.has(id)) continue;
     const name = typeof item?.name === "string" ? item.name.replace(/[\u0000-\u001f\u007f]/gu, "").trim() : "";
@@ -57987,19 +58204,19 @@ async function verifySetupCompletion(url2, key, model, provider) {
   if (!id || /[\u0000-\u001f\u007f]/u.test(id)) throw new SetupApiError("Choose a non-empty model ID without control characters.");
   const host = new URL(normalizeApiUrl(url2)).hostname.toLowerCase();
   const pinProvider = provider && (host === "openrouter.ai" || host.endsWith(".openrouter.ai"));
-  const json2 = record4(await setupJson(url2, key, {
+  const json2 = record5(await setupJson(url2, key, {
     model: id,
     messages: [{ role: "user", content: "Reply with exactly OK." }],
     stream: false,
     ...pinProvider ? { provider: { order: [provider], allow_fallbacks: false } } : {}
   }));
-  const choice = record4(Array.isArray(json2?.choices) ? json2.choices[0] : void 0);
-  const message2 = record4(choice?.message);
+  const choice = record5(Array.isArray(json2?.choices) ? json2.choices[0] : void 0);
+  const message2 = record5(choice?.message);
   if (message2?.role !== "assistant" || typeof message2.content !== "string" || !message2.content.trim()) {
     throw new SetupApiError("The API did not return an assistant text reply. Choose a model that supports Chat Completions, then try again.");
   }
 }
-var API_ENDPOINTS, SetupApiError, record4;
+var API_ENDPOINTS, SetupApiError, record5;
 var init_cli_api_setup = __esm({
   "server/cli-api-setup.ts"() {
     "use strict";
@@ -58010,7 +58227,7 @@ var init_cli_api_setup = __esm({
     ];
     SetupApiError = class extends Error {
     };
-    record4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+    record5 = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
   }
 });
 
@@ -58024,7 +58241,7 @@ __export(cli_setup_exports, {
   saveCliStartup: () => saveCliStartup
 });
 import { spawn as spawn9 } from "node:child_process";
-import { readFileSync as readFileSync31 } from "node:fs";
+import { readFileSync as readFileSync32 } from "node:fs";
 import { join as join50, resolve as resolve11 } from "node:path";
 import { randomUUID as randomUUID16 } from "node:crypto";
 async function inspect(id, entry) {
@@ -58062,7 +58279,7 @@ function assertDataDir(dataDir) {
 }
 function checkStoredConfig(dataDir) {
   try {
-    parseStoredConfig(JSON.parse(readFileSync31(join50(dataDir, "config.json"), "utf8")));
+    parseStoredConfig(JSON.parse(readFileSync32(join50(dataDir, "config.json"), "utf8")));
   } catch (error51) {
     if (error51.code === "ENOENT") return;
     throw new Error("Existing config.json could not be read or validated. Setup has not changed it; repair it before continuing.");
@@ -58472,7 +58689,7 @@ __export(browser_engine_exports, {
   resolveAgentBrowserBinary: () => resolveAgentBrowserBinary
 });
 import { createHash as createHash16, randomBytes as randomBytes3, randomUUID as randomUUID17 } from "node:crypto";
-import { chmodSync as chmodSync7, constants as constants3, copyFileSync, existsSync as existsSync25, mkdirSync as mkdirSync26, readFileSync as readFileSync32, readdirSync as readdirSync8, renameSync as renameSync8, rmSync as rmSync11, statSync as statSync6, unlinkSync as unlinkSync7, writeFileSync as writeFileSync22 } from "node:fs";
+import { chmodSync as chmodSync7, constants as constants3, copyFileSync, existsSync as existsSync25, mkdirSync as mkdirSync26, readFileSync as readFileSync33, readdirSync as readdirSync8, renameSync as renameSync8, rmSync as rmSync11, statSync as statSync6, unlinkSync as unlinkSync7, writeFileSync as writeFileSync22 } from "node:fs";
 import { homedir as homedir28, tmpdir as tmpdir7 } from "node:os";
 import { delimiter as delimiter7, dirname as dirname12, join as join53, resolve as resolve12 } from "node:path";
 function browserRestoreKey(session) {
@@ -58496,7 +58713,7 @@ function ensureManagedBrowserConfig(env) {
     writeFileSync22(path4, "{}\n", { flag: "wx", mode: 384 });
   } catch (error51) {
     if (error51.code !== "EEXIST") throw error51;
-    if (readFileSync32(path4, "utf8").trim() !== "{}") throw new Error("The managed browser configuration was changed. Restore it to an empty JSON object before connecting.");
+    if (readFileSync33(path4, "utf8").trim() !== "{}") throw new Error("The managed browser configuration was changed. Restore it to an empty JSON object before connecting.");
   }
   return path4;
 }
@@ -58752,12 +58969,12 @@ function ensureChrome(binaryPath, options = {}) {
   return new Promise((done, fail) => {
     const child = spawnCommand(binaryPath, args, { env: options.env ?? process.env, stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
     let output = "";
-    const record5 = (chunk) => {
+    const record6 = (chunk) => {
       output += String(chunk);
       if (output.length > 262144) output = output.slice(-262144);
     };
-    child.stdout?.on("data", record5);
-    child.stderr?.on("data", record5);
+    child.stdout?.on("data", record6);
+    child.stderr?.on("data", record6);
     let timedOut = false;
     let exited = false;
     const timer = setTimeout(() => {
@@ -58791,7 +59008,7 @@ function ensureChrome(binaryPath, options = {}) {
 function browserEngineEncryptionKey(dataDir = DATA_DIR) {
   const file2 = join53(dataDir, KEY_FILE);
   try {
-    const existing = readFileSync32(file2, "utf8").trim();
+    const existing = readFileSync33(file2, "utf8").trim();
     if (/^[0-9a-f]{64}$/u.test(existing)) return existing;
   } catch {
   }
@@ -58872,7 +59089,7 @@ function agentBrowserFrame(input) {
           fail(error51);
           return;
         }
-        settle({ png: readFileSync32(file2).toString("base64"), format: "png" });
+        settle({ png: readFileSync33(file2).toString("base64"), format: "png" });
       } catch {
         fail(new Error("the browser reported a picture it did not write"));
       } finally {
@@ -59037,7 +59254,7 @@ Or run without a global install: \`npx @chibitek/chibi\`. Node 24+ is required.
 var import_qrcode_terminal = __toESM(require_main(), 1);
 import { spawn as spawn10 } from "node:child_process";
 import { randomBytes as randomBytes4 } from "node:crypto";
-import { closeSync as closeSync6, existsSync as existsSync26, mkdirSync as mkdirSync27, openSync as openSync6, readFileSync as readFileSync33 } from "node:fs";
+import { closeSync as closeSync6, existsSync as existsSync26, mkdirSync as mkdirSync27, openSync as openSync6, readFileSync as readFileSync34 } from "node:fs";
 import { homedir as homedir29 } from "node:os";
 import { dirname as dirname13, join as join54, resolve as resolve13 } from "node:path";
 import { createInterface as createInterface2 } from "node:readline/promises";
@@ -59062,18 +59279,18 @@ var isPlainRecord = (value) => {
 };
 var plainObject = (value) => {
   if (!isPlainRecord(value)) return null;
-  const record5 = {};
+  const record6 = {};
   try {
     for (const key of Reflect.ownKeys(value)) {
       if (!Object.prototype.propertyIsEnumerable.call(value, key)) continue;
       if (typeof key !== "string") return null;
       if (key === "__proto__") continue;
-      record5[key] = value[key];
+      record6[key] = value[key];
     }
   } catch {
     return null;
   }
-  return record5;
+  return record6;
 };
 var validClientInstance = (value) => {
   const input = stringValue(value);
@@ -60553,14 +60770,14 @@ async function writeRow(dataDir, row) {
   }
 }
 function appendAdminAction(dataDir, row) {
-  const record5 = {
+  const record6 = {
     ...row,
     at: row.at ?? (/* @__PURE__ */ new Date()).toISOString(),
     ...row.before ? { before: auditValues(row.before) } : {},
     ...row.after ? { after: auditValues(row.after) } : {}
   };
   const previous = writeQueues.get(dataDir) ?? Promise.resolve();
-  const queued = previous.then(() => writeRow(dataDir, record5)).catch(() => {
+  const queued = previous.then(() => writeRow(dataDir, record6)).catch(() => {
   });
   writeQueues.set(dataDir, queued);
   void queued.finally(() => {
@@ -61293,16 +61510,16 @@ function emptyRegistry(domain2) {
 }
 function parseRegistry(text4) {
   const value = JSON.parse(text4);
-  const record5 = value && typeof value === "object" ? value : null;
-  if (!record5 || record5.version !== 1 || typeof record5.domain !== "string" || typeof record5.nextPort !== "number" || !record5.workspaces || typeof record5.workspaces !== "object") {
+  const record6 = value && typeof value === "object" ? value : null;
+  if (!record6 || record6.version !== 1 || typeof record6.domain !== "string" || typeof record6.nextPort !== "number" || !record6.workspaces || typeof record6.workspaces !== "object") {
     throw new Error("fleet.json is not a fleet registry this version understands");
   }
   return {
     version: 1,
-    domain: record5.domain,
-    nextPort: record5.nextPort,
-    ...typeof record5.operator === "string" ? { operator: record5.operator } : {},
-    workspaces: { ...record5.workspaces }
+    domain: record6.domain,
+    nextPort: record6.nextPort,
+    ...typeof record6.operator === "string" ? { operator: record6.operator } : {},
+    workspaces: { ...record6.workspaces }
   };
 }
 function fleetUser(slug) {
@@ -62867,7 +63084,7 @@ function defaultIo() {
 }
 function serverVersion(here = HERE2) {
   try {
-    const parsed = JSON.parse(readFileSync33(resolve13(here, "..", "package.json"), "utf8"));
+    const parsed = JSON.parse(readFileSync34(resolve13(here, "..", "package.json"), "utf8"));
     const version2 = typeof parsed === "object" && parsed !== null ? Reflect.get(parsed, "version") : void 0;
     return typeof version2 === "string" && version2 ? version2 : "0.0.0";
   } catch {
@@ -62898,7 +63115,7 @@ async function isWorkspaceRunning(options) {
   try {
     const { status, body } = await api(options.port, "/api/health");
     if (status !== 200 || body?.app !== "openmausbot") return false;
-    const expected = readFileSync33(join54(options.dataDir, "environment-id"), "utf8").trim();
+    const expected = readFileSync34(join54(options.dataDir, "environment-id"), "utf8").trim();
     const descriptor = await api(options.port, "/.well-known/openmausbot/environment");
     return /^[0-9a-f-]{36}$/i.test(expected) && descriptor.status === 200 && descriptor.body?.environmentId === expected;
   } catch {
@@ -63141,7 +63358,7 @@ async function runAccess(options, io2 = defaultIo()) {
   let raw = {};
   if (existsSync26(file2)) {
     try {
-      const parsed = JSON.parse(readFileSync33(file2, "utf8"));
+      const parsed = JSON.parse(readFileSync34(file2, "utf8"));
       if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) throw new Error("not an object");
       raw = Object.fromEntries(Object.entries(parsed));
     } catch (error51) {