@cmmd-center/forge 0.10.13 → 0.10.16

package/dist/bin.cjs

@@ -2,18 +2,18 @@
 
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-BhaIgcZK.cjs");
-const require_Schema$1 = require("./Schema-Cf_uEUQU.cjs");
-const require_Path = require("./Path-CHDjKLrB.cjs");
-const require_NodeTerminal = require("./NodeTerminal-DfKMT-mE.cjs");
-const require_NodeServices = require("./NodeServices-pfwgkiUu.cjs");
-const require_HttpServer = require("./HttpServer-B-QOc7bR.cjs");
-const require_Config = require("./Config-e5bi-5Ut.cjs");
-const require_Cache = require("./Cache-D56wNKiH.cjs");
-const require_SqlError = require("./SqlError-Du_dEWbw.cjs");
+const require_Schema$1 = require("./Schema-dLi7Qssy.cjs");
+const require_Path = require("./Path-Be7zSwar.cjs");
+const require_NodeTerminal = require("./NodeTerminal-5iWbO0B2.cjs");
+const require_NodeServices = require("./NodeServices-Cw6SxEbl.cjs");
+const require_HttpServer = require("./HttpServer-DGoLR-kU.cjs");
+const require_Config = require("./Config-CkEzdD9L.cjs");
+const require_Cache = require("./Cache-CWlxNDbC.cjs");
+const require_SqlError = require("./SqlError-Bt0Bcd5C.cjs");
 const require_Mime = require("./Mime-Bilnh8zE.cjs");
 const require_esm = require("./esm-BZhXwX5p.cjs");
 const require_runtimeControlAuthority = require("./runtimeControlAuthority-BdIovv-r.cjs");
-const require_PTY = require("./PTY-DB-DmqyE.cjs");
+const require_PTY = require("./PTY-BxYDiW3h.cjs");
 let node_child_process = require("node:child_process");
 node_child_process = require_chunk.__toESM(node_child_process);
 let node_stream = require("node:stream");
@@ -65775,7 +65775,7 @@ function normalizeNumberish(value) {
 }
 //#endregion
 //#region package.json
-var version$1 = "0.10.13";
+var version$1 = "0.10.16";
 //#endregion
 //#region src/sentry.ts
 const SERVER_APP_NAME = "forge-server";
@@ -66248,7 +66248,7 @@ function readCmmdAvatarUrl(raw) {
 function readTrimmedString$2(value) {
 	return typeof value === "string" ? value.trim() || null : null;
 }
-function asRecord$13(value) {
+function asRecord$14(value) {
 	return value && typeof value === "object" ? value : null;
 }
 function readDirectPlanLabelFromRecord(obj) {
@@ -66260,26 +66260,26 @@ function readNestedPlanLabelFromRecord(obj) {
 function readCmmdPlanLabel(obj) {
 	const direct = readDirectPlanLabelFromRecord(obj);
 	if (direct) return direct;
-	const plan = asRecord$13(obj["plan"]);
+	const plan = asRecord$14(obj["plan"]);
 	if (plan) {
 		const label = readNestedPlanLabelFromRecord(plan);
 		if (label) return label;
 	}
-	const subscription = asRecord$13(obj["subscription"]);
+	const subscription = asRecord$14(obj["subscription"]);
 	if (subscription) {
 		const label = readNestedPlanLabelFromRecord(subscription);
 		if (label) return label;
-		const subscriptionPlan = asRecord$13(subscription["plan"]);
+		const subscriptionPlan = asRecord$14(subscription["plan"]);
 		if (subscriptionPlan) {
 			const nestedLabel = readNestedPlanLabelFromRecord(subscriptionPlan);
 			if (nestedLabel) return nestedLabel;
 		}
 	}
-	const billing = asRecord$13(obj["billing"]);
+	const billing = asRecord$14(obj["billing"]);
 	if (billing) {
 		const label = readNestedPlanLabelFromRecord(billing);
 		if (label) return label;
-		const billingPlan = asRecord$13(billing["plan"]);
+		const billingPlan = asRecord$14(billing["plan"]);
 		if (billingPlan) return readNestedPlanLabelFromRecord(billingPlan);
 	}
 	return null;
@@ -70094,22 +70094,22 @@ const EMPTY_PARSED_ERROR = {
 	message: null,
 	raw: null
 };
-function asRecord$12(value) {
+function asRecord$13(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function readTrimmedString$1(value) {
 	return (typeof value === "string" ? value.trim() : "") || null;
 }
 function readErrorEnvelope(record) {
-	return asRecord$12(record["error"]);
+	return asRecord$13(record["error"]);
 }
 function readUpstreamErrorCode(body) {
-	const record = asRecord$12(body);
+	const record = asRecord$13(body);
 	if (record === null) return null;
 	return readTrimmedString$1(record["code"]) ?? readTrimmedString$1(readErrorEnvelope(record)?.["code"]);
 }
 function readErrorMessage$2(raw) {
-	const record = asRecord$12(raw);
+	const record = asRecord$13(raw);
 	if (record === null) return null;
 	const error = record["error"];
 	const nestedMessage = readErrorEnvelope(record)?.["message"];
@@ -72197,7 +72197,7 @@ function readStringJS(length) {
 	if (units.length > 0) result += fromCharCode.apply(String, units);
 	return result;
 }
-function readString$4(source, start, length) {
+function readString$5(source, start, length) {
 	let existingSrc = src;
 	src = source;
 	position$1 = start;
@@ -74062,7 +74062,7 @@ function readStruct(src, position, srcEnd, unpackr) {
 						}
 						if (end == null) end = source.bytesEnd - refStart;
 						if (source.srcString) return source.srcString.slice(ref, end);
-						return readString$4(src, ref + refStart, end - ref);
+						return readString$5(src, ref + refStart, end - ref);
 					};
 					break;
 				case UTF8:
@@ -75409,7 +75409,7 @@ const makeNoSerialization = /* @__PURE__ */ require_Schema$1.fnUntraced(function
 	const services = yield* require_Schema$1.context();
 	const scope = require_Schema$1.get(services, require_Schema$1.Scope);
 	const trackFiber = require_Path.runIn(require_Schema$1.forkUnsafe(scope, "parallel"));
-	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* require_Path.make$4(concurrency);
+	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* require_Path.make$5(concurrency);
 	const clients = /* @__PURE__ */ new Map();
 	let isShutdown = false;
 	const shutdownLatch = require_Path.makeUnsafe$1(false);
@@ -75818,7 +75818,7 @@ const toHttpEffectWebsocket = /* @__PURE__ */ require_Schema$1.fnUntraced(functi
 });
 const makeSocketProtocol = /* @__PURE__ */ require_Schema$1.gen(function* () {
 	const serialization = yield* RpcSerialization;
-	const disconnects = yield* require_Path.make$5();
+	const disconnects = yield* require_Path.make$6();
 	let clientId = 0;
 	const clients = /* @__PURE__ */ new Map();
 	const clientIds = /* @__PURE__ */ new Set();
@@ -77414,7 +77414,7 @@ require_Schema$1.succeed$1(TraceDiagnostics, TraceDiagnostics.of({ read: (option
 * through the server is what lets it ask at all.
 */
 const RUNTIMES_PATH = "/api/forge/context/runtimes";
-function asRecord$11(value) {
+function asRecord$12(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 /** A trimmed string, or null. Empty and whitespace are the same as absent. */
@@ -77429,7 +77429,7 @@ function text$1(value) {
 * something that cannot work.
 */
 function toSummary(value) {
-	const row = asRecord$11(value);
+	const row = asRecord$12(value);
 	if (!row) return null;
 	const runtimeId = text$1(row["runtimeId"]);
 	const organizationId = row["organizationId"];
@@ -77453,7 +77453,7 @@ function listCloudRuntimes(input) {
 	return require_Schema$1.gen(function* () {
 		const jwt = input.jwt;
 		if (jwt === null || jwt.trim().length === 0) return yield* require_Schema$1.fail(new CloudRuntimeListError({ failure: "not_signed_in" }));
-		const runtimes = asRecord$11(asRecord$11(yield* require_Schema$1.tryPromise({
+		const runtimes = asRecord$12(asRecord$12(yield* require_Schema$1.tryPromise({
 			try: () => input.request({
 				method: "GET",
 				jwt,
@@ -83008,7 +83008,7 @@ const makeServerSettings = require_Schema$1.gen(function* () {
 	const { settingsPath } = yield* ServerConfig;
 	const fs = yield* require_Path.FileSystem;
 	const pathService = yield* require_Path.Path;
-	const writeSemaphore = yield* require_Path.make$4(1);
+	const writeSemaphore = yield* require_Path.make$5(1);
 	const cacheKey = "settings";
 	const changesPubSub = yield* require_Path.unbounded$1();
 	const startedRef = yield* require_HttpServer.make$3(false);
@@ -91856,7 +91856,7 @@ const makeKeybindings = require_Schema$1.gen(function* () {
 	const { keybindingsConfigPath } = yield* ServerConfig;
 	const fs = yield* require_Path.FileSystem;
 	const path = yield* require_Path.Path;
-	const upsertSemaphore = yield* require_Path.make$4(1);
+	const upsertSemaphore = yield* require_Path.make$5(1);
 	const resolvedConfigCacheKey = "resolved";
 	const changesPubSub = yield* require_Path.unbounded$1();
 	const startedRef = yield* require_HttpServer.make$3(false);
@@ -97761,7 +97761,7 @@ const make$15 = (hooks) => require_Schema$1.gen(function* () {
 	const selfRuntimeId = resolveRuntimeReplicationRuntimeId(config);
 	const scanScope = yield* require_Schema$1.make$3("sequential");
 	yield* require_Schema$1.addFinalizer(() => require_Schema$1.close(scanScope, require_Schema$1.void_$1));
-	const scanSemaphore = yield* require_Path.make$4(1);
+	const scanSemaphore = yield* require_Path.make$5(1);
 	const inFlight = /* @__PURE__ */ new Map();
 	const ratesCachePath = path.join(config.stateDir, RATES_CACHE_FILE);
 	const scanCachePath = path.join(config.stateDir, SCAN_CACHE_FILE);
@@ -98698,7 +98698,7 @@ const makeWorkspaceBulkTransfer = (options = {}) => require_Schema$1.gen(functio
 	const workspacePaths = yield* WorkspacePaths;
 	const workspaceEntries = yield* WorkspaceEntries;
 	const fault = options.fault ?? (() => require_Schema$1.void_);
-	const transferLocks = yield* require_Schema$1.forEach(Array.from({ length: TRANSFER_LOCK_STRIPE_COUNT }), () => require_Path.make$4(1));
+	const transferLocks = yield* require_Schema$1.forEach(Array.from({ length: TRANSFER_LOCK_STRIPE_COUNT }), () => require_Path.make$5(1));
 	const withTransferLock = (transferId, effect) => transferLocks[transferLockStripe(transferId)].withPermit(effect);
 	const findTransfer = (transferId) => sql`
         SELECT transfer_id AS "transferId", workspace_root AS "workspaceRoot",
@@ -100880,7 +100880,7 @@ const EMPTY_PLAN_VALUES = new Set([
 	"none",
 	"null"
 ]);
-function asRecord$10(value) {
+function asRecord$11(value) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
 	return value;
 }
@@ -100897,7 +100897,7 @@ function decodeJwtClaims(token) {
 	try {
 		const decoded = Buffer.from(payload, "base64url");
 		if (decoded.byteLength > MAX_CLAIMS_BYTES) return void 0;
-		return asRecord$10(JSON.parse(decoded.toString("utf8")));
+		return asRecord$11(JSON.parse(decoded.toString("utf8")));
 	} catch {
 		return;
 	}
@@ -100919,7 +100919,7 @@ function findPlanType(claims) {
 	const direct = fromRecord(claims);
 	if (direct) return direct;
 	for (const value of Object.values(claims)) {
-		const nested = asRecord$10(value);
+		const nested = asRecord$11(value);
 		if (!nested) continue;
 		const found = fromRecord(nested);
 		if (found) return found;
@@ -100936,7 +100936,7 @@ function readCodexAuthIdentity(authJson) {
 	} catch {
 		return {};
 	}
-	const claims = decodeJwtClaims(asRecord$10(asRecord$10(parsed)?.tokens)?.id_token);
+	const claims = decodeJwtClaims(asRecord$11(asRecord$11(parsed)?.tokens)?.id_token);
 	if (!claims) return {};
 	const email = findEmail(claims);
 	const planType = findPlanType(claims);
@@ -116557,8 +116557,8 @@ require_Schema$1.effectDiscard(runMigrations());
 //#endregion
 //#region src/persistence/Layers/Sqlite.ts
 const defaultSqliteClientLoaders = {
-	bun: () => Promise.resolve().then(() => require("./SqliteClient-D4Srj6O8.cjs")),
-	node: () => Promise.resolve().then(() => require("./NodeSqliteClient-PZ6NN2gq.cjs"))
+	bun: () => Promise.resolve().then(() => require("./SqliteClient-B08FzZM4.cjs")),
+	node: () => Promise.resolve().then(() => require("./NodeSqliteClient-CmxPzcBf.cjs"))
 };
 const makeRuntimeSqliteLayer = require_Schema$1.fn("makeRuntimeSqliteLayer")(function* (config) {
 	const loader = defaultSqliteClientLoaders[process.versions.bun !== void 0 ? "bun" : "node"];
@@ -149409,11 +149409,11 @@ function readObject(value) {
 function readArray(value) {
 	return Array.isArray(value) ? value : void 0;
 }
-function readString$3(value) {
+function readString$4(value) {
 	return typeof value === "string" ? value : void 0;
 }
 function nonEmptyTrimmed$1(value) {
-	const candidate = readString$3(value)?.trim();
+	const candidate = readString$4(value)?.trim();
 	return candidate ? candidate : void 0;
 }
 function readBoolean$2(value) {
@@ -150195,6 +150195,23 @@ function issueCmmdLocalUserProviderEgressCredential(input) {
 	});
 }
 //#endregion
+//#region src/provider/codexAccountTransition.ts
+function explicitProviderAccountTransition(fromAccountId, toAccountId) {
+	if (!fromAccountId || !toAccountId || fromAccountId === toAccountId) return void 0;
+	return {
+		fromAccountId,
+		toAccountId
+	};
+}
+function permitsCodexAccountTransition(input) {
+	const { transition, requestedAccountId, prior, current } = input;
+	if (!transition || transition.fromAccountId === transition.toAccountId || transition.toAccountId !== requestedAccountId || prior.identity.kind !== "provider_account" || current.identity.kind !== "provider_account" || prior.identity.provider !== "codex" || current.identity.provider !== "codex") return false;
+	return providerDeliveryBindingsEqual({
+		...prior,
+		identity: current.identity
+	}, current);
+}
+//#endregion
 //#region src/providerAuth/codexLocalAccountIdentity.ts
 const ACCOUNT_IDENTITY_PATH = "/api/forge/context/providers/codex/account-identity";
 const PROVIDER_ACCOUNT_IDENTITY$1 = /^pai_v1_[A-Za-z0-9_-]{43}$/;
@@ -150692,7 +150709,12 @@ var CodexAppServerManager = class extends node_events.EventEmitter {
 				const rawPriorDeliveryBinding = input.resumeCursor.providerDeliveryBinding;
 				const priorDeliveryBinding = readProviderDeliveryBinding(rawPriorDeliveryBinding);
 				if (rawPriorDeliveryBinding !== void 0 && rawPriorDeliveryBinding !== null && !priorDeliveryBinding) throw new Error("Existing Codex history cannot resume because its persisted delivered provider account binding is unreadable.");
-				if (priorDeliveryBinding && !providerDeliveryBindingsEqual(priorDeliveryBinding, currentDeliveryBinding)) throw new Error("Existing Codex history cannot resume because the delivered provider account changed.");
+				if (priorDeliveryBinding && !providerDeliveryBindingsEqual(priorDeliveryBinding, currentDeliveryBinding) && !permitsCodexAccountTransition({
+					transition: input.accountTransition,
+					requestedAccountId: input.providerAccountId,
+					prior: priorDeliveryBinding,
+					current: currentDeliveryBinding
+				})) throw new Error("Existing Codex history cannot resume because the delivered provider account changed.");
 			}
 			const initialResumeCursor = initialCodexResumeCursor({
 				resumeCursor: input.resumeCursor,
@@ -206906,7 +206928,7 @@ function createCodexBrowserDynamicTools() {
 function readArgs$3(value) {
 	return value && typeof value === "object" ? value : {};
 }
-function readString$2(args, key) {
+function readString$3(args, key) {
 	const value = args[key];
 	return typeof value === "string" && value.trim().length > 0 ? value : void 0;
 }
@@ -206935,27 +206957,27 @@ function createCodexBrowserDynamicToolHandler(browserManager, options = {}) {
 		const toolScope = options.environmentId === void 0 ? {} : { environmentId: options.environmentId };
 		const handlers = makeBrowserHandlers(browserManager, ThreadId.make(input.threadId), toolScope);
 		const args = readArgs$3(input.arguments);
-		const tabId = readString$2(args, "tabId");
+		const tabId = readString$3(args, "tabId");
 		switch (input.tool) {
 			case "forge_browser_list_sessions": return toCodexDynamicToolResult$2(await handlers.listSessions());
 			case "forge_browser_name_session": {
-				const name = readString$2(args, "name");
+				const name = readString$3(args, "name");
 				if (!name) throw new Error("forge_browser_name_session requires a name.");
 				return toCodexDynamicToolResult$2(await handlers.nameSession(name));
 			}
 			case "forge_browser_set_visibility": {
-				const visibility = readString$2(args, "visibility");
+				const visibility = readString$3(args, "visibility");
 				if (visibility !== "hidden" && visibility !== "visible") throw new Error("forge_browser_set_visibility requires visibility hidden or visible.");
 				return toCodexDynamicToolResult$2(await handlers.setVisibility(visibility));
 			}
 			case "forge_browser_close_session":
 			case "forge_browser_reset_session": return toCodexDynamicToolResult$2(await handlers.closeSession());
 			case "forge_browser_navigate": {
-				const url = readString$2(args, "url");
+				const url = readString$3(args, "url");
 				if (!url) throw new Error("forge_browser_navigate requires a URL.");
 				return toCodexDynamicToolResult$2(await handlers.navigate(url, tabId));
 			}
-			case "forge_browser_new_tab": return toCodexDynamicToolResult$2(await handlers.newTab(readString$2(args, "url")));
+			case "forge_browser_new_tab": return toCodexDynamicToolResult$2(await handlers.newTab(readString$3(args, "url")));
 			case "forge_browser_close_tab":
 				if (!tabId) throw new Error("forge_browser_close_tab requires a tabId.");
 				return toCodexDynamicToolResult$2(await handlers.closeTab(tabId));
@@ -206966,33 +206988,33 @@ function createCodexBrowserDynamicToolHandler(browserManager, options = {}) {
 			case "forge_browser_go_forward": return toCodexDynamicToolResult$2(await handlers.goForward(tabId));
 			case "forge_browser_reload": return toCodexDynamicToolResult$2(await handlers.reload(tabId));
 			case "forge_browser_click": {
-				const selector = readString$2(args, "selector");
+				const selector = readString$3(args, "selector");
 				if (!selector) throw new Error("forge_browser_click requires a selector.");
 				return toCodexDynamicToolResult$2(await handlers.click(selector, tabId));
 			}
 			case "forge_browser_click_point": {
 				const x = readNumber$2(args, "x");
 				const y = readNumber$2(args, "y");
-				const button = readString$2(args, "button");
+				const button = readString$3(args, "button");
 				const clickCount = readNumber$2(args, "clickCount");
 				if (x === void 0 || y === void 0) throw new Error("forge_browser_click_point requires x and y.");
 				if (button !== void 0 && button !== "left" && button !== "middle" && button !== "right") throw new Error("forge_browser_click_point requires button left, middle, or right.");
 				return toCodexDynamicToolResult$2(await handlers.clickPoint(x, y, button, clickCount, tabId));
 			}
 			case "forge_browser_type": {
-				const selector = readString$2(args, "selector");
+				const selector = readString$3(args, "selector");
 				if (!selector) throw new Error("forge_browser_type requires a selector.");
-				const text = readString$2(args, "text");
+				const text = readString$3(args, "text");
 				if (text === void 0) throw new Error("forge_browser_type requires text.");
 				return toCodexDynamicToolResult$2(await handlers.type(selector, text, readBoolean$1(args, "append"), tabId));
 			}
 			case "forge_browser_type_text": {
-				const text = readString$2(args, "text");
+				const text = readString$3(args, "text");
 				if (text === void 0) throw new Error("forge_browser_type_text requires text.");
 				return toCodexDynamicToolResult$2(await handlers.typeText(text, readBoolean$1(args, "pressEnter"), tabId));
 			}
 			case "forge_browser_press_key": {
-				const key = readString$2(args, "key");
+				const key = readString$3(args, "key");
 				if (!key) throw new Error("forge_browser_press_key requires a key.");
 				return toCodexDynamicToolResult$2(await handlers.pressKey(key, tabId));
 			}
@@ -207306,7 +207328,7 @@ function createCodexComputerDynamicToolHandler(computerManager) {
 function readArgs$1(value) {
 	return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
-function readString$1(args, key) {
+function readString$2(args, key) {
 	const value = args[key];
 	return typeof value === "string" ? value : void 0;
 }
@@ -207326,7 +207348,7 @@ function readStringArray(args, key) {
 	return value.filter((entry) => typeof entry === "string");
 }
 function readRequiredString(args, key, toolName) {
-	const value = readString$1(args, key)?.trim();
+	const value = readString$2(args, key)?.trim();
 	if (!value) throw new Error(`${toolName} requires ${key}.`);
 	return value;
 }
@@ -207361,7 +207383,7 @@ async function runGitHubLifecycleTool(toolName, context) {
 		action,
 		args: lifecycleArgs,
 		mode
-	}), mode === "write" ? readString$1(args, "confirmationId") : void 0);
+	}), mode === "write" ? readString$2(args, "confirmationId") : void 0);
 }
 //#endregion
 //#region src/github/GitHubCodexPullRequestTools.ts
@@ -207371,8 +207393,8 @@ async function runGitHubPullRequestTool(toolName, context) {
 		case "forge_github_create_pull_request": {
 			const cwd = readRequiredString(args, "cwd", toolName);
 			const title = readRequiredString(args, "title", toolName);
-			const body = readString$1(args, "body");
-			const headBranch = readString$1(args, "headBranch")?.trim();
+			const body = readString$2(args, "body");
+			const headBranch = readString$2(args, "headBranch")?.trim();
 			if (body === void 0) throw new Error("forge_github_create_pull_request requires body.");
 			const request = {
 				cwd,
@@ -207381,7 +207403,7 @@ async function runGitHubPullRequestTool(toolName, context) {
 				baseBranch: readRequiredString(args, "baseBranch", toolName),
 				...headBranch ? { headBranch } : {}
 			};
-			return runTool(request, () => broker.createPullRequest(auth, request), readString$1(args, "confirmationId"));
+			return runTool(request, () => broker.createPullRequest(auth, request), readString$2(args, "confirmationId"));
 		}
 		case "forge_github_get_pull_request": {
 			const cwd = readRequiredString(args, "cwd", toolName);
@@ -207403,29 +207425,29 @@ function runStatus$1({ auth, broker, runTool }) {
 	return runTool({}, () => broker.status(auth));
 }
 function runListRepositories({ args, auth, broker, runTool }) {
-	const search = readString$1(args, "search");
+	const search = readString$2(args, "search");
 	return runTool({ search: search ?? null }, () => broker.listRepositories(auth, { search }));
 }
 function runCloneRepository({ args, auth, broker, runTool }) {
 	const toolName = "forge_github_clone_repository";
 	const repoFullName = readRequiredString(args, "repoFullName", toolName);
 	const destination = readRequiredString(args, "destination", toolName);
-	const branch = readString$1(args, "branch");
+	const branch = readString$2(args, "branch");
 	const request = {
 		repoFullName,
 		destination,
 		...branch ? { branch } : {}
 	};
-	return runTool(request, () => broker.cloneRepository(auth, request), readString$1(args, "confirmationId"));
+	return runTool(request, () => broker.cloneRepository(auth, request), readString$2(args, "confirmationId"));
 }
 function runCreateRepository({ args, auth, broker, runTool }) {
 	const toolName = "forge_github_create_repository";
 	const owner = readRequiredString(args, "owner", toolName);
 	const name = readRequiredString(args, "name", toolName);
-	const visibility = readString$1(args, "visibility");
+	const visibility = readString$2(args, "visibility");
 	if (visibility !== void 0 && visibility !== "private" && visibility !== "public") throw new Error("forge_github_create_repository visibility must be private or public.");
 	const repositoryVisibility = visibility;
-	const description = readString$1(args, "description");
+	const description = readString$2(args, "description");
 	const request = {
 		owner,
 		name,
@@ -207433,32 +207455,32 @@ function runCreateRepository({ args, auth, broker, runTool }) {
 		...repositoryVisibility ? { visibility: repositoryVisibility } : {},
 		...description !== void 0 ? { description } : {}
 	};
-	return runTool(request, () => broker.createRepository(auth, request), readString$1(args, "confirmationId"));
+	return runTool(request, () => broker.createRepository(auth, request), readString$2(args, "confirmationId"));
 }
 function runLinkProjectRepository({ args, auth, broker, runTool }) {
 	const toolName = "forge_github_link_project_repository";
 	const cwd = readRequiredString(args, "cwd", toolName);
 	const repoFullName = readRequiredString(args, "repoFullName", toolName);
-	const branch = readString$1(args, "branch");
+	const branch = readString$2(args, "branch");
 	const request = {
 		cwd,
 		repoFullName,
 		...branch ? { branch } : {}
 	};
-	return runTool(request, () => broker.linkProjectRepository(auth, request), readString$1(args, "confirmationId"));
+	return runTool(request, () => broker.linkProjectRepository(auth, request), readString$2(args, "confirmationId"));
 }
 function runPushBranch({ args, auth, broker, runTool }) {
 	const cwd = readRequiredString(args, "cwd", "forge_github_push_branch");
-	const branch = readString$1(args, "branch");
+	const branch = readString$2(args, "branch");
 	const request = {
 		cwd,
 		...branch ? { branch } : {}
 	};
-	return runTool(request, () => broker.pushProjectBranch(auth, request), readString$1(args, "confirmationId"));
+	return runTool(request, () => broker.pushProjectBranch(auth, request), readString$2(args, "confirmationId"));
 }
 function runRefreshCredentials({ args, auth, broker, runTool }) {
 	const request = { cwd: readRequiredString(args, "cwd", "forge_github_refresh_credentials") };
-	return runTool(request, () => broker.refreshProjectCredentials(auth, request), readString$1(args, "confirmationId"));
+	return runTool(request, () => broker.refreshProjectCredentials(auth, request), readString$2(args, "confirmationId"));
 }
 const repositoryToolHandlers = {
 	forge_github_status: runStatus$1,
@@ -207496,7 +207518,7 @@ async function runGitHubWorkflowTool(toolName, context) {
 }
 function listWorkflowRuns({ args, auth, broker, runTool }) {
 	const cwd = readRequiredString(args, "cwd", "forge_github_list_workflow_runs");
-	const branch = readString$1(args, "branch")?.trim();
+	const branch = readString$2(args, "branch")?.trim();
 	const limit = readNumber$1(args, "limit");
 	const request = {
 		cwd,
@@ -207515,7 +207537,7 @@ function watchWorkflowRun({ args, auth, broker, runTool }) {
 }
 function getWorkflowRunLogs({ args, auth, broker, runTool }) {
 	const { cwd, runId } = readWorkflowRunRequest(args, "forge_github_get_workflow_run_logs");
-	const jobId = readString$1(args, "jobId")?.trim();
+	const jobId = readString$2(args, "jobId")?.trim();
 	const request = {
 		cwd,
 		runId,
@@ -207525,16 +207547,16 @@ function getWorkflowRunLogs({ args, auth, broker, runTool }) {
 }
 function downloadWorkflowArtifacts({ args, auth, broker, runTool }) {
 	const cwd = readRequiredString(args, "cwd", "forge_github_download_workflow_artifacts");
-	const runId = readString$1(args, "runId")?.trim();
-	const artifactName = readString$1(args, "artifactName")?.trim();
-	const destinationDir = readString$1(args, "destinationDir")?.trim();
+	const runId = readString$2(args, "runId")?.trim();
+	const artifactName = readString$2(args, "artifactName")?.trim();
+	const destinationDir = readString$2(args, "destinationDir")?.trim();
 	const request = {
 		cwd,
 		...runId ? { runId } : {},
 		...artifactName ? { artifactName } : {},
 		...destinationDir ? { destinationDir } : {}
 	};
-	return runTool(request, () => broker.downloadWorkflowArtifacts(auth, request), readString$1(args, "confirmationId"));
+	return runTool(request, () => broker.downloadWorkflowArtifacts(auth, request), readString$2(args, "confirmationId"));
 }
 function listWorkflows({ args, auth, broker, runTool }) {
 	const cwd = readRequiredString(args, "cwd", "forge_github_list_workflows");
@@ -207553,7 +207575,7 @@ function getWorkflow({ args, auth, broker, runTool }) {
 }
 function runWorkflow({ args, auth, broker, runTool }) {
 	const { cwd, workflow } = readWorkflowRequest(args, "forge_github_run_workflow");
-	const ref = readString$1(args, "ref")?.trim();
+	const ref = readString$2(args, "ref")?.trim();
 	const fields = readStringRecord(args, "fields");
 	const request = {
 		cwd,
@@ -207561,7 +207583,7 @@ function runWorkflow({ args, auth, broker, runTool }) {
 		...ref ? { ref } : {},
 		...fields && Object.keys(fields).length > 0 ? { fields } : {}
 	};
-	return runTool(request, () => broker.runWorkflow(auth, request), readString$1(args, "confirmationId"));
+	return runTool(request, () => broker.runWorkflow(auth, request), readString$2(args, "confirmationId"));
 }
 function enableWorkflow(context) {
 	return runWorkflowToggle("forge_github_enable_workflow", context, "enableWorkflow");
@@ -207584,12 +207606,12 @@ function readWorkflowRequest(args, toolName) {
 async function runWorkflowRunMutation(toolName, context, brokerMethod) {
 	const { args, auth, broker, runTool } = context;
 	const request = readWorkflowRunRequest(args, toolName);
-	return runTool(request, () => broker[brokerMethod](auth, request), readString$1(args, "confirmationId"));
+	return runTool(request, () => broker[brokerMethod](auth, request), readString$2(args, "confirmationId"));
 }
 function runWorkflowToggle(toolName, context, brokerMethod) {
 	const { args, auth, broker, runTool } = context;
 	const request = readWorkflowRequest(args, toolName);
-	return runTool(request, () => broker[brokerMethod](auth, request), readString$1(args, "confirmationId"));
+	return runTool(request, () => broker[brokerMethod](auth, request), readString$2(args, "confirmationId"));
 }
 //#endregion
 //#region src/github/GitHubCodexWorkspaceGitTools.ts
@@ -207606,7 +207628,7 @@ async function runWorkspaceGitTool(toolName, context) {
 		case "forge_git_commit": return runCommit("forge_git_commit", context);
 		case "forge_git_reset_hard": return runResetHard("forge_git_reset_hard", context);
 		case "forge_git": {
-			const operation = readString$1(args, "operation")?.trim();
+			const operation = readString$2(args, "operation")?.trim();
 			switch (operation) {
 				case "status": return runStatus(toolName, context, "status");
 				case "log": return runLog(toolName, context);
@@ -207635,7 +207657,7 @@ function runLog(toolName, { args, broker, runTool }) {
 }
 function runStash(toolName, { args, broker, runTool }, operation) {
 	const cwd = readRequiredString(args, "cwd", toolName);
-	const message = readString$1(args, "message")?.trim();
+	const message = readString$2(args, "message")?.trim();
 	return runTool({
 		cwd,
 		...operation ? { operation } : {},
@@ -207643,12 +207665,12 @@ function runStash(toolName, { args, broker, runTool }, operation) {
 	}, () => broker.stashWorkspace({
 		cwd,
 		...message ? { message } : {}
-	}), readString$1(args, "confirmationId"));
+	}), readString$2(args, "confirmationId"));
 }
 function runCommit(toolName, { args, broker, runTool }, operation) {
 	const cwd = readRequiredString(args, "cwd", toolName);
 	const message = readRequiredString(args, "message", operation ? `${toolName} operation=commit` : toolName);
-	const branch = readString$1(args, "branch")?.trim();
+	const branch = readString$2(args, "branch")?.trim();
 	return runTool({
 		cwd,
 		...operation ? { operation } : {},
@@ -207658,11 +207680,11 @@ function runCommit(toolName, { args, broker, runTool }, operation) {
 		cwd,
 		message,
 		...branch ? { branch } : {}
-	}), readString$1(args, "confirmationId"));
+	}), readString$2(args, "confirmationId"));
 }
 function runResetHard(toolName, { args, broker, runTool }, operation) {
 	const cwd = readRequiredString(args, "cwd", toolName);
-	const ref = readString$1(args, "ref")?.trim();
+	const ref = readString$2(args, "ref")?.trim();
 	return runTool({
 		cwd,
 		...operation ? { operation } : {},
@@ -207670,7 +207692,7 @@ function runResetHard(toolName, { args, broker, runTool }, operation) {
 	}, () => broker.resetWorkspaceHard({
 		cwd,
 		...ref ? { ref } : {}
-	}), readString$1(args, "confirmationId"));
+	}), readString$2(args, "confirmationId"));
 }
 //#endregion
 //#region src/github/GitHubCodexToolRunner.ts
@@ -208304,7 +208326,7 @@ function createCodexGitHubDynamicToolHandler(options = {}) {
 			error: "Forge could not resolve the authenticated user session for this thread. Send a new turn from the Forge UI and retry."
 		}, false);
 		const args = readArgs$1(input.arguments);
-		const dispatchOperation = input.tool === "forge_git" ? readString$1(args, "operation")?.trim() : void 0;
+		const dispatchOperation = input.tool === "forge_git" ? readString$2(args, "operation")?.trim() : void 0;
 		const operation = dispatchOperation ?? operationForTool(input.tool);
 		const requiresConfirmation = !bypassWriteConfirmation && (isGitHubWriteTool(input.tool) || dispatchOperation !== void 0 && FORGE_GIT_WRITE_OPERATIONS.has(dispatchOperation));
 		const runTool = async (request, execute, confirmationId) => {
@@ -208826,7 +208848,7 @@ function createCodexDevServerDynamicTools() {
 function readArgs(value) {
 	return value && typeof value === "object" ? value : {};
 }
-function readString(args, key) {
+function readString$1(args, key) {
 	const value = args[key];
 	return typeof value === "string" && value.trim().length > 0 ? value : void 0;
 }
@@ -208839,8 +208861,8 @@ function readBoolean(args, key) {
 	return typeof value === "boolean" ? value : void 0;
 }
 function runDevServerStart(handlers, args) {
-	const command = readString(args, "command");
-	const cwd = readString(args, "cwd");
+	const command = readString$1(args, "command");
+	const cwd = readString$1(args, "cwd");
 	const port = readNumber(args, "port");
 	const readyTimeoutMs = readNumber(args, "readyTimeoutMs");
 	const openPreview = readBoolean(args, "openPreview");
@@ -208996,7 +209018,7 @@ function readConnectorParams(tool, args) {
 	switch (tool.tool) {
 		case "forge_gmail_search": return {
 			...params,
-			query: readString$1(args, "query") ?? ""
+			query: readString$2(args, "query") ?? ""
 		};
 		case "forge_gmail_list_recent": return {
 			...params,
@@ -209008,7 +209030,7 @@ function readConnectorParams(tool, args) {
 	}
 }
 function appendString(target, args, key) {
-	const value = readString$1(args, key);
+	const value = readString$2(args, key);
 	if (value !== void 0) target[key] = value;
 }
 function appendNumber(target, args, key) {
@@ -209597,7 +209619,7 @@ const collectStreamAsString = (stream) => stream.pipe(require_Path.decodeText(),
 //#region src/orchestration/WorkerPlanCodexTools.ts
 const FORGE_PROPOSE_WORKER_TASKS_TOOL = "forge_propose_worker_tasks";
 const MAX_WORKER_PLAN_ITEMS = 5;
-function asRecord$9(value) {
+function asRecord$10(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function readTrimmedString(value) {
@@ -209613,7 +209635,7 @@ function isValidWorkerSummary(value) {
 	return value !== void 0 && value.length > 0 && value.length <= 4e3;
 }
 function decodeWorkerPlanItem(value) {
-	const item = asRecord$9(value);
+	const item = asRecord$10(value);
 	const slug = readTrimmedString(item?.slug);
 	const title = readTrimmedString(item?.title);
 	const summary = readTrimmedString(item?.summary);
@@ -209677,7 +209699,7 @@ function createWorkerPlanDynamicTools() {
 function createWorkerPlanDynamicToolHandler() {
 	return async (input) => {
 		if (input.tool !== "forge_propose_worker_tasks") throw new Error(`Unsupported worker-plan tool: ${input.tool}`);
-		if (!decodeWorkerPlanItems(asRecord$9(input.arguments)?.items)) throw new Error("Worker plans require one to five unique, fully described items.");
+		if (!decodeWorkerPlanItems(asRecord$10(input.arguments)?.items)) throw new Error("Worker plans require one to five unique, fully described items.");
 		return {
 			success: true,
 			contentItems: [{
@@ -210841,6 +210863,7 @@ const makeCodexAdapter = require_Schema$1.fn("makeCodexAdapter")(function* (opti
 			...browserToolEnvironmentId !== void 0 ? { environmentId: browserToolEnvironmentId } : {}
 		};
 		const managerInput = {
+			...input.accountTransition ? { accountTransition: input.accountTransition } : {},
 			threadId: input.threadId,
 			provider: "codex",
 			...input.cwd !== void 0 ? { cwd: input.cwd } : {},
@@ -211171,7 +211194,7 @@ function withoutInheritedAnthropicCredentials(env, options) {
 //#endregion
 //#region src/provider/makeManagedServerProvider.ts
 const makeManagedServerProvider = require_Schema$1.fn("makeManagedServerProvider")(function* (input) {
-	const refreshSemaphore = yield* require_Path.make$4(1);
+	const refreshSemaphore = yield* require_Path.make$5(1);
 	const changesPubSub = yield* require_Schema$1.acquireRelease(require_Path.unbounded$1(), require_Path.shutdown$1);
 	const initialSettings = yield* input.getSettings;
 	const initialSnapshot = input.initialSnapshot(initialSettings);
@@ -211497,25 +211520,25 @@ const AUTH_METHOD_CONTAINER_KEYS = [
 /** Lift an unknown value into `Option<string>` if it is a non-empty string. */
 const asNonEmptyString = (v) => typeof v === "string" && v.length > 0 ? require_Schema$1.some(v) : require_Schema$1.none();
 /** Lift an unknown value into `Option<Record>` if it is a plain object. */
-const asRecord$8 = (v) => typeof v === "object" && v !== null && !globalThis.Array.isArray(v) ? require_Schema$1.some(v) : require_Schema$1.none();
+const asRecord$9 = (v) => typeof v === "object" && v !== null && !globalThis.Array.isArray(v) ? require_Schema$1.some(v) : require_Schema$1.none();
 /**
 * Walk an unknown parsed JSON value looking for a subscription/plan
 * identifier, returning the first match as an `Option`.
 */
 function findSubscriptionType(value) {
 	if (globalThis.Array.isArray(value)) return require_Schema$1.firstSomeOf(value.map(findSubscriptionType));
-	return asRecord$8(value).pipe(require_Schema$1.flatMap$2((record) => {
+	return asRecord$9(value).pipe(require_Schema$1.flatMap$2((record) => {
 		const direct = require_Schema$1.firstSomeOf(SUBSCRIPTION_TYPE_KEYS.map((key) => asNonEmptyString(record[key])));
 		if (require_Schema$1.isSome(direct)) return direct;
-		return require_Schema$1.firstSomeOf(SUBSCRIPTION_CONTAINER_KEYS.map((key) => asRecord$8(record[key]).pipe(require_Schema$1.flatMap$2(findSubscriptionType))));
+		return require_Schema$1.firstSomeOf(SUBSCRIPTION_CONTAINER_KEYS.map((key) => asRecord$9(record[key]).pipe(require_Schema$1.flatMap$2(findSubscriptionType))));
 	}));
 }
 function findAuthMethod(value) {
 	if (globalThis.Array.isArray(value)) return require_Schema$1.firstSomeOf(value.map(findAuthMethod));
-	return asRecord$8(value).pipe(require_Schema$1.flatMap$2((record) => {
+	return asRecord$9(value).pipe(require_Schema$1.flatMap$2((record) => {
 		const direct = require_Schema$1.firstSomeOf(AUTH_METHOD_KEYS.map((key) => asNonEmptyString(record[key])));
 		if (require_Schema$1.isSome(direct)) return direct;
-		return require_Schema$1.firstSomeOf(AUTH_METHOD_CONTAINER_KEYS.map((key) => asRecord$8(record[key]).pipe(require_Schema$1.flatMap$2(findAuthMethod))));
+		return require_Schema$1.firstSomeOf(AUTH_METHOD_CONTAINER_KEYS.map((key) => asRecord$9(record[key]).pipe(require_Schema$1.flatMap$2(findAuthMethod))));
 	}));
 }
 /**
@@ -212761,7 +212784,7 @@ function userInputQuestionsFromToolInput(toolInput) {
 	return (Array.isArray(toolInput.questions) ? toolInput.questions : []).map((question, idx) => userInputQuestionFromUnknown(question, idx));
 }
 function userInputQuestionFromUnknown(question, idx) {
-	const value = asRecord$7(question) ?? {};
+	const value = asRecord$8(question) ?? {};
 	return {
 		id: typeof value.header === "string" ? value.header : `q-${idx}`,
 		header: typeof value.header === "string" ? value.header : `Question ${idx + 1}`,
@@ -212771,13 +212794,13 @@ function userInputQuestionFromUnknown(question, idx) {
 	};
 }
 function userInputOptionFromUnknown(option) {
-	const value = asRecord$7(option) ?? {};
+	const value = asRecord$8(option) ?? {};
 	return {
 		label: typeof value.label === "string" ? value.label : "",
 		description: typeof value.description === "string" ? value.description : ""
 	};
 }
-function asRecord$7(value) {
+function asRecord$8(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
 function permissionResultFromDecision(decision, toolInput, suggestions) {
@@ -213682,7 +213705,7 @@ const makeClaudeAdapter = require_Schema$1.fn("makeClaudeAdapter")(function* (op
 	const updateResumeCursor = require_Schema$1.fn("updateResumeCursor")(function* (context) {
 		const threadId = context.session.threadId;
 		if (!threadId) return;
-		const providerDeliveryBinding = readProviderDeliveryBinding(asRecord$7(context.session.resumeCursor)?.providerDeliveryBinding);
+		const providerDeliveryBinding = readProviderDeliveryBinding(asRecord$8(context.session.resumeCursor)?.providerDeliveryBinding);
 		const resumeCursor = {
 			threadId,
 			...context.resumeSessionId ? { resume: context.resumeSessionId } : {},
@@ -218760,7 +218783,7 @@ function makeAcpContentDeltaEvent(input) {
 }
 //#endregion
 //#region ../../packages/shared/src/toolActivity.ts
-function asRecord$6(value) {
+function asRecord$7(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
 function asTrimmedString(value) {
@@ -218786,10 +218809,10 @@ function extractCommandFromTitle$1(title) {
 	return /`([^`]+)`/u.exec(title)?.[1]?.trim() || void 0;
 }
 function extractToolCommand(data, title) {
-	const item = asRecord$6(data?.item);
-	const itemInput = asRecord$6(item?.input);
-	const itemResult = asRecord$6(item?.result);
-	const rawInput = asRecord$6(data?.rawInput);
+	const item = asRecord$7(data?.item);
+	const itemInput = asRecord$7(item?.input);
+	const itemResult = asRecord$7(item?.result);
+	const rawInput = asRecord$7(data?.rawInput);
 	const direct = [
 		normalizeCommandValue$1(item?.command),
 		normalizeCommandValue$1(itemInput?.command),
@@ -218817,7 +218840,7 @@ function collectPaths(value, paths, seen, depth) {
 		}
 		return;
 	}
-	const record = asRecord$6(value);
+	const record = asRecord$7(value);
 	if (!record) return;
 	for (const key of [
 		"path",
@@ -218876,7 +218899,7 @@ function deriveToolActivityPresentation(input) {
 	const title = asTrimmedString(input.title);
 	const detail = stripTrailingExitCode(asTrimmedString(input.detail));
 	const fallbackSummary = asTrimmedString(input.fallbackSummary) ?? "Tool";
-	const data = asRecord$6(input.data);
+	const data = asRecord$7(input.data);
 	const command = extractToolCommand(data, title);
 	const primaryPath = extractPrimaryPath(data);
 	const action = classifyToolAction({
@@ -218900,7 +218923,7 @@ function deriveToolActivityPresentation(input) {
 		...primaryPath ? { detail: primaryPath } : {}
 	};
 	if (action === "search") {
-		const query = asTrimmedString(asRecord$6(data?.rawInput)?.query) ?? asTrimmedString(asRecord$6(data?.rawInput)?.pattern) ?? asTrimmedString(asRecord$6(data?.rawInput)?.searchTerm);
+		const query = asTrimmedString(asRecord$7(data?.rawInput)?.query) ?? asTrimmedString(asRecord$7(data?.rawInput)?.pattern) ?? asTrimmedString(asRecord$7(data?.rawInput)?.searchTerm);
 		return {
 			summary: "Searched files",
 			...query ? { detail: query } : {}
@@ -220911,7 +220934,7 @@ function makeCursorAdapter(cursorSettings, options) {
 		const getThreadSemaphore = (threadId) => modifyEffect(threadLocksRef, (current) => {
 			const existing = require_Schema$1.fromNullishOr(current.get(threadId));
 			return require_Schema$1.match$2(existing, {
-				onNone: () => require_Path.make$4(1).pipe(require_Schema$1.map((semaphore) => {
+				onNone: () => require_Path.make$5(1).pipe(require_Schema$1.map((semaphore) => {
 					const next = new Map(current);
 					next.set(threadId, semaphore);
 					return [semaphore, next];
@@ -229321,6 +229344,8 @@ const makeProviderService = require_Schema$1.fn("makeProviderService")(function*
 	const canonicalEventLogger = options?.canonicalEventLogger ?? (options?.canonicalEventLogPath !== void 0 ? yield* makeEventNdjsonLogger(options.canonicalEventLogPath, { stream: "canonical" }) : void 0);
 	const registry = yield* ProviderAdapterRegistry;
 	const directory = yield* ProviderSessionDirectory;
+	const sessionLocks = yield* require_Path.make$3({ lookup: (_threadId) => require_Path.make$5(1) });
+	const withSessionLock = (threadId, effect) => require_Path.get$1(sessionLocks, threadId).pipe(require_Schema$1.flatMap((lock) => lock.withPermit(effect)), require_Schema$1.scoped);
 	const runtimeEventPubSub = yield* require_Path.unbounded$1();
 	const assertProviderExecutable = options?.assertProviderExecutable ?? (() => require_Schema$1.succeed(null));
 	const assertCurrentProviderDelivery = require_Schema$1.fn("assertCurrentProviderDelivery")(function* (input) {
@@ -229495,18 +229520,19 @@ const makeProviderService = require_Schema$1.fn("makeProviderService")(function*
 				"provider.runtime_mode": input.runtimeMode
 			});
 			const persistedBinding = require_Schema$1.getOrUndefined$1(yield* directory.getBinding(threadId));
-			yield* assertProviderAccountBoundary({
+			const adapter = yield* registry.getByProvider(effectiveProvider);
+			const priorAccountId = readPersistedProviderAccountId(persistedBinding?.runtimePayload);
+			const requestedAccountId = readProviderAccountIdFromModelSelection(input.modelSelection);
+			if (effectiveProvider !== "codex" || persistedBinding?.provider !== effectiveProvider || (yield* adapter.hasSession(threadId))) yield* assertProviderAccountBoundary({
 				operation: "ProviderService.startSession",
 				threadId,
-				persistedAccountId: readPersistedProviderAccountId(persistedBinding?.runtimePayload),
-				requestedAccountId: readProviderAccountIdFromModelSelection(input.modelSelection)
+				persistedAccountId: priorAccountId,
+				requestedAccountId
 			});
-			const effectiveResumeCursor = input.resumeCursor ?? (persistedBinding?.provider === effectiveProvider ? persistedBinding.resumeCursor : void 0);
-			const adapter = yield* registry.getByProvider(effectiveProvider);
 			const boundResumeCursor = yield* bindProviderDeliveryToResumeCursor({
 				operation: "ProviderService.startSession",
 				provider: effectiveProvider,
-				resumeCursor: effectiveResumeCursor,
+				resumeCursor: input.resumeCursor ?? (persistedBinding?.provider === effectiveProvider ? persistedBinding.resumeCursor : void 0),
 				currentBinding: yield* assertProviderExecutable({
 					threadId,
 					provider: effectiveProvider,
@@ -229515,6 +229541,7 @@ const makeProviderService = require_Schema$1.fn("makeProviderService")(function*
 			});
 			const session = yield* adapter.startSession({
 				...input,
+				accountTransition: explicitProviderAccountTransition(priorAccountId, requestedAccountId),
 				...boundResumeCursor !== void 0 ? { resumeCursor: boundResumeCursor } : {}
 			});
 			if (session.provider !== adapter.provider) return yield* toValidationError("ProviderService.startSession", `Adapter/provider mismatch: requested '${adapter.provider}', received '${session.provider}'.`);
@@ -229816,15 +229843,15 @@ const makeProviderService = require_Schema$1.fn("makeProviderService")(function*
 	});
 	yield* require_Schema$1.addFinalizer(() => require_Schema$1.catch_(runStopAll(), (cause) => require_Schema$1.logWarning("failed to stop provider service", { cause })));
 	return {
-		startSession,
-		sendTurn,
-		interruptTurn,
-		respondToRequest,
-		respondToUserInput,
-		stopSession,
+		startSession: (threadId, input) => withSessionLock(threadId, startSession(threadId, input)),
+		sendTurn: (input) => withSessionLock(input?.threadId, sendTurn(input)),
+		interruptTurn: (input) => withSessionLock(input?.threadId, interruptTurn(input)),
+		respondToRequest: (input) => withSessionLock(input?.threadId, respondToRequest(input)),
+		respondToUserInput: (input) => withSessionLock(input?.threadId, respondToUserInput(input)),
+		stopSession: (input) => withSessionLock(input?.threadId, stopSession(input)),
 		listSessions,
 		getCapabilities,
-		rollbackConversation,
+		rollbackConversation: (input) => withSessionLock(input?.threadId, rollbackConversation(input)),
 		get streamEvents() {
 			return require_Path.fromPubSub(runtimeEventPubSub);
 		}
@@ -231071,7 +231098,7 @@ const createTrace2Monitor = require_Schema$1.fn("createTrace2Monitor")(function*
 			});
 		}
 	});
-	const readTraceDelta = (yield* require_Path.make$4(1)).withPermit(fs.readFileString(traceFilePath).pipe(require_Schema$1.flatMap((contents) => require_Schema$1.uninterruptible(require_HttpServer.modify(traceTailState, ({ processedChars, remainder }) => {
+	const readTraceDelta = (yield* require_Path.make$5(1)).withPermit(fs.readFileString(traceFilePath).pipe(require_Schema$1.flatMap((contents) => require_Schema$1.uninterruptible(require_HttpServer.modify(traceTailState, ({ processedChars, remainder }) => {
 		if (contents.length <= processedChars) return [[], {
 			processedChars,
 			remainder
@@ -234690,7 +234717,7 @@ const makeTerminalManagerWithOptions = require_Schema$1.fn("makeTerminalManagerW
 	const getThreadSemaphore = (threadId) => modifyEffect(threadLocksRef, (current) => {
 		const existing = require_Schema$1.fromNullishOr(current.get(threadId));
 		return require_Schema$1.match$2(existing, {
-			onNone: () => require_Path.make$4(1).pipe(require_Schema$1.map((semaphore) => {
+			onNone: () => require_Path.make$5(1).pipe(require_Schema$1.map((semaphore) => {
 				const next = new Map(current);
 				next.set(threadId, semaphore);
 				return [semaphore, next];
@@ -285756,7 +285783,7 @@ function makeApprovedWorkerPlanEventState() {
 function promptKey(masterThreadId, promptId) {
 	return `${masterThreadId}\n${promptId}`;
 }
-function asRecord$5(value) {
+function asRecord$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 function exactMaterializedTaskIds(value, expectedCount) {
@@ -285766,7 +285793,7 @@ function exactMaterializedTaskIds(value, expectedCount) {
 }
 function readyBatchFromActivity(state, event) {
 	if (event.payload.activity.kind !== "plan.task-creation.batch-succeeded") return null;
-	const payload = asRecord$5(event.payload.activity.payload);
+	const payload = asRecord$6(event.payload.activity.payload);
 	const promptId = payload?.["promptId"];
 	if (typeof promptId !== "string") return null;
 	const key = promptKey(event.payload.threadId, promptId);
@@ -285848,7 +285875,7 @@ const make$10 = require_Schema$1.gen(function* () {
 	const runtimeContext = yield* require_Schema$1.context();
 	const runPromise = require_Schema$1.runPromiseWith(runtimeContext);
 	const eventState = makeApprovedWorkerPlanEventState();
-	const reconcileSemaphore = yield* require_Path.make$4(1);
+	const reconcileSemaphore = yield* require_Path.make$5(1);
 	const dispatch = (command) => runPromise(orchestration.dispatch(command).pipe(require_Schema$1.asVoid));
 	const readMasterContext = async (prompt) => {
 		const thread = require_Schema$1.getOrNull(await runPromise(readDurableWorkerDetail(projectionSnapshotQuery, ThreadId.make(prompt.masterThreadId))));
@@ -286966,7 +286993,7 @@ function runtimeGrantNeedsRefresh(token, identity, nowSeconds = Math.floor(Date.
 	return claims.expiresAtSeconds - nowSeconds <= RUNTIME_GRANT_REFRESH_SKEW_SECONDS;
 }
 /** Narrow an unknown to a plain object, or null. */
-function asRecord$4(value) {
+function asRecord$5(value) {
 	return value !== null && typeof value === "object" ? value : null;
 }
 /** The raw (untrimmed) string when it is present and not blank, else null. */
@@ -286978,7 +287005,7 @@ function asTimestamp(value) {
 	return typeof value === "string" && Number.isFinite(Date.parse(value)) ? value : null;
 }
 function parseRuntimeGrantRefreshResponse(runtimeId, value) {
-	const data = asRecord$4(asRecord$4(value)?.data);
+	const data = asRecord$5(asRecord$5(value)?.data);
 	if (!data || data.runtimeId !== runtimeId) return null;
 	const grantToken = asNonBlankString(data.grantToken);
 	const expiresAt = asTimestamp(data.expiresAt);
@@ -287039,7 +287066,6 @@ async function refreshRuntimeProvisioningGrant(input) {
 async function maybeRefreshRuntimeProvisioningGrant(input) {
 	const current = require_runtimeControlAuthority.runtimeGrantToken();
 	if (!current) return "skipped";
-	if (!runtimeGrantNeedsRefresh(current, input)) return "skipped";
 	const exactIdentity = exactRuntimeControlIdentity(input);
 	const currentClaims = currentGrantClaimsForRefresh({
 		currentGrant: current,
@@ -287048,6 +287074,11 @@ async function maybeRefreshRuntimeProvisioningGrant(input) {
 	});
 	if (!currentClaims) throw invalidRefreshResponse("Current runtime provisioning grant is unverifiable.");
 	const currentAuthorityClass = currentGrantAuthorityClass(currentClaims, exactIdentity);
+	const controlAuthorityMissing = currentAuthorityClass === "exact" && exactIdentity !== null && require_runtimeControlAuthority.readRuntimeControlAuthority({
+		runtimeId: input.runtimeId,
+		...exactIdentity
+	}) === null;
+	if (!runtimeGrantNeedsRefresh(current, input) && !controlAuthorityMissing) return "skipped";
 	const refreshed = await refreshRuntimeProvisioningGrant({
 		runtimeId: input.runtimeId,
 		currentGrant: current,
@@ -287244,7 +287275,7 @@ const makeRuntimeDrainReporter = require_Schema$1.gen(function* () {
 	const providerService = yield* ProviderService;
 	const serverConfig = yield* ServerConfig;
 	const spriteTaskHoldReactor = yield* SpriteTaskHoldReactor;
-	const reportSemaphore = yield* require_Path.make$4(1);
+	const reportSemaphore = yield* require_Path.make$5(1);
 	let heartbeatSilent = false;
 	const postHeartbeat = (config, snapshot) => require_Schema$1.promise(async () => {
 		const forgeGitCommit = await resolveForgeGitCommit();
@@ -294041,7 +294072,7 @@ function resolveBuildCommitFromEnv(env) {
 * environment descriptor down instead of reporting an honest "unknown".
 */
 function readBakedBuildCommit() {
-	return "75c8e9532c9e35e71d4da1d8d45474fa2855ff1d";
+	return "7f0d765bc59cb837f8aa8025b9b2f855df3fd36d";
 }
 async function resolveServerBuildCommit(input) {
 	if (isFullCommitSha(input.baked)) return input.baked;
@@ -303144,7 +303175,7 @@ const LocalAutomationSchedulerLive = require_Schema$1.effectDiscard(require_Sche
 }));
 //#endregion
 //#region src/command/providerUsageEnvironment.ts
-function asRecord$3(value) {
+function asRecord$4(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function positiveInteger(value) {
@@ -303164,7 +303195,7 @@ function readRuntimeId(row) {
 	return typeof runtimeId === "string" && runtimeId.trim() !== "" ? runtimeId : null;
 }
 function readCandidate(runtime, ownerUserId) {
-	const row = asRecord$3(runtime);
+	const row = asRecord$4(runtime);
 	if (row === null || !isOwnedRuntime(row, ownerUserId) || row["desiredState"] !== "running") return null;
 	const organizationId = positiveInteger(row["organizationId"]);
 	const environmentId = readEnvironmentId(row["environmentId"]);
@@ -303199,15 +303230,17 @@ function deduplicateCandidates(candidates) {
 * organization from browser input.
 */
 function selectProviderUsageEnvironment(rawCatalog, ownerUserId) {
-	const runtimes = asRecord$3(asRecord$3(rawCatalog)?.["data"])?.["runtimes"];
+	const runtimes = asRecord$4(asRecord$4(rawCatalog)?.["data"])?.["runtimes"];
 	if (!Array.isArray(runtimes)) return { kind: "unavailable" };
 	const candidates = deduplicateCandidates(runtimes.map((runtime) => readCandidate(runtime, ownerUserId)).filter((candidate) => candidate !== null));
 	const bestRank = Math.min(...candidates.map((candidate) => statusRank(candidate.status)));
 	const bestCandidates = candidates.filter((candidate) => statusRank(candidate.status) === bestRank);
 	if (bestCandidates.length !== 1) return { kind: "unavailable" };
+	const selected = bestCandidates[0];
 	return {
 		kind: "ready",
-		organizationId: bestCandidates[0].organizationId
+		organizationId: selected.organizationId,
+		runtimeId: selected.runtimeId
 	};
 }
 //#endregion
@@ -303228,13 +303261,22 @@ function selectProviderUsageEnvironment(rawCatalog, ownerUserId) {
 const FAILURE_TEXT = {
 	CLAUDE_USAGE_ENVIRONMENT_UNAVAILABLE: "Refresh needs your Environment running.",
 	CLAUDE_USAGE_CREDENTIAL_NOT_READY: "The Claude credential is not applied to your Environment yet.",
+	CLAUDE_USAGE_CREDENTIAL_APPLY_FAILED: "Your Environment rejected the delivered Claude credential.",
+	CLAUDE_USAGE_CREDENTIAL_REFRESHING: "The delivered Claude credential expired. CMMD is sending a replacement.",
 	CLAUDE_USAGE_REFRESH_IN_PROGRESS: "A refresh for this account is already running.",
 	CLAUDE_USAGE_PROBE_FAILED: "Your Environment could not read Claude usage.",
 	CLAUDE_USAGE_RECONNECT_REQUIRED: "Reconnect this Claude account to refresh usage.",
 	CLAUDE_USAGE_ACCOUNT_NOT_FOUND: "This Claude account is no longer connected.",
 	CLAUDE_USAGE_REFRESH_UNAVAILABLE: "Claude usage refresh is unavailable."
 };
-/** Verbatim from CMMD `personal-claude-usage.ts` and `provider-usage-service.ts`. */
+/**
+* Verbatim from CMMD `personal-claude-usage.ts` and `provider-usage-service.ts`.
+*
+* Three reasons land on `CLAUDE_USAGE_CREDENTIAL_NOT_READY` because the refresh
+* response cannot tell them apart. `claudeUsageCredentialReadiness.ts` splits
+* them afterwards by reading the runtime's readiness, which is the only place
+* that knows whether a delivery is on its way or has already failed.
+*/
 const CODE_BY_UPSTREAM_REASON = {
 	runtime_not_active: "CLAUDE_USAGE_ENVIRONMENT_UNAVAILABLE",
 	claude_native_delivery_disabled: "CLAUDE_USAGE_ENVIRONMENT_UNAVAILABLE",
@@ -303247,7 +303289,12 @@ const CODE_BY_UPSTREAM_REASON = {
 	usage_receipt_invalid: "CLAUDE_USAGE_PROBE_FAILED",
 	usage_output_invalid: "CLAUDE_USAGE_PROBE_FAILED"
 };
-function failure(code, status) {
+/**
+* The one place a failure body is built, so every sentence a browser reads is
+* written in `FAILURE_TEXT` above. `claudeUsageCredentialReadiness.ts` calls it
+* to reach the two codes no upstream reason maps to.
+*/
+function describeClaudeUsageRefreshFailureCode(code, status) {
 	return {
 		status,
 		body: {
@@ -303256,6 +303303,9 @@ function failure(code, status) {
 		}
 	};
 }
+function failure(code, status) {
+	return describeClaudeUsageRefreshFailureCode(code, status);
+}
 /**
 * CMMD sends the reason as `{ "error": "<reason>" }`. Anything else, including
 * a longer sentence that happens to start with an allowlisted word, is treated
@@ -303276,6 +303326,77 @@ function describeClaudeUsageRefreshFailure(error) {
 	return failure("CLAUDE_USAGE_REFRESH_UNAVAILABLE", error.status === 503 ? 503 : 502);
 }
 //#endregion
+//#region src/command/claudeUsageCredentialReadiness.ts
+/**
+* Which "credential not ready" a Claude usage refresh actually hit.
+*
+* CMMD answers a blocked refresh with one reason for three different worlds:
+* a delivery still travelling, a delivery CMMD cannot produce, and a delivery
+* the Environment already ran and rejected. `claudeUsageRefreshFailure.ts` has
+* to collapse all three into `CLAUDE_USAGE_CREDENTIAL_NOT_READY`, because the
+* refresh response carries nothing that separates them. The card then says
+* "not applied yet", which asks the user to wait even when waiting can never
+* work: on 2026-09-08 CMMD's reconciler failed native credential validation on
+* runtime 523cd771 forty-three times in seventy-two minutes, and the card said
+* "yet" through all of it.
+*
+* The runtime readiness read is the one source that separates the worlds, so
+* the handler makes that read only for the collapsed code and hands the answer
+* here. Every sentence is written in `claudeUsageRefreshFailure.ts`; nothing
+* from CMMD's `lastErrorCode` or `lastErrorMessage` is repeated to a browser.
+*/
+const CMMD_READINESS_PATH_PREFIX = "/api/forge/context/providers/claude/runtime-readiness/";
+/** Typed as the gateway's absolute-path shape so the call site needs no cast. */
+function claudeUsageReadinessPath(runtimeId) {
+	return `${CMMD_READINESS_PATH_PREFIX}${encodeURIComponent(runtimeId)}`;
+}
+/**
+* Whether a readiness read would tell the caller anything it does not know.
+*
+* Only the collapsed code is ambiguous. Every other failure already names its
+* own cause, so asking CMMD again would cost a round trip on the error path
+* and could only produce a less specific answer.
+*/
+function claudeUsageFailureWantsReadiness(failure) {
+	return failure.body.code === "CLAUDE_USAGE_CREDENTIAL_NOT_READY";
+}
+function asRecord$3(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function readString(value) {
+	return typeof value === "string" && value !== "" ? value : null;
+}
+/**
+* Refines the collapsed credential failure using the runtime's readiness.
+*
+* The ranking is by what the user can act on, not by which field looks most
+* severe:
+*
+* 1. A reason of `credential_reconnect_required` or `credential_not_connected`
+*    means CMMD holds no usable grant. That is upstream of delivery, so it wins
+*    even when the delivery it caused also failed. No re-delivery helps; only a
+*    reconnect does.
+* 2. `deliveryStatus: "failed"` means CMMD had a credential, sent it, and the
+*    Environment rejected it. Waiting cannot fix that, which is exactly what
+*    the collapsed sentence tells the user to do.
+* 3. `credential_expired_refreshing` means a replacement is already in flight,
+*    so the honest instruction is to retry shortly.
+*
+* Anything else, including a readiness read that failed or answered a shape
+* this module does not recognise, keeps the collapsed failure. A refinement
+* that guessed would be worse than the vague sentence it replaced.
+*/
+function refineClaudeUsageRefreshFailure(failure, rawReadiness) {
+	if (!claudeUsageFailureWantsReadiness(failure)) return failure;
+	const readiness = asRecord$3(asRecord$3(rawReadiness)?.["data"]);
+	if (readiness === null) return failure;
+	const reasonCode = claudeReadinessReasonCode(readString(readiness["reason"]));
+	if (reasonCode === "CREDENTIAL_RECONNECT_REQUIRED") return describeClaudeUsageRefreshFailureCode("CLAUDE_USAGE_RECONNECT_REQUIRED", 409);
+	if (readiness["deliveryStatus"] === "failed") return describeClaudeUsageRefreshFailureCode("CLAUDE_USAGE_CREDENTIAL_APPLY_FAILED", 503);
+	if (reasonCode === "CREDENTIAL_EXPIRED_REFRESHING") return describeClaudeUsageRefreshFailureCode("CLAUDE_USAGE_CREDENTIAL_REFRESHING", 503);
+	return failure;
+}
+//#endregion
 //#region src/command/wsToken.ts
 /**
 * Build the WS token response given an optional PAT and the configured CMMD
@@ -305141,6 +305262,25 @@ function buildClaudeUsageRefreshErrorResponse(error) {
 	const failure = describeClaudeUsageRefreshFailure(error);
 	return require_HttpServer.jsonUnsafe(failure.body, { status: failure.status });
 }
+/**
+* Answers a refresh CMMD refused, asking the selected runtime what state its
+* Claude credential is in when the refusal alone cannot say. Only the collapsed
+* credential code costs the extra read, and a readiness read that itself fails
+* leaves the original answer untouched.
+*/
+function answerBlockedClaudeUsageRefresh(input) {
+	return require_Schema$1.gen(function* () {
+		const failure = describeClaudeUsageRefreshFailure(input.error);
+		if (!claudeUsageFailureWantsReadiness(failure)) return require_HttpServer.jsonUnsafe(failure.body, { status: failure.status });
+		const readinessOutcome = yield* runCmmdRestProxy(input.session, (jwt) => cmmdGateway.request({
+			method: "GET",
+			jwt,
+			path: claudeUsageReadinessPath(input.runtimeId)
+		}), { jwt: input.requestJwt });
+		const refined = refineClaudeUsageRefreshFailure(failure, readinessOutcome.ok ? readinessOutcome.value : null);
+		return require_HttpServer.jsonUnsafe(refined.body, { status: refined.status });
+	});
+}
 function makeRefreshProviderUsageHandler(dependencies = {}) {
 	return require_Schema$1.gen(function* () {
 		const request = yield* require_HttpServer.HttpServerRequest;
@@ -305177,7 +305317,12 @@ function makeRefreshProviderUsageHandler(dependencies = {}) {
 				body: { providerAccountId: input.providerAccountId },
 				orgId: String(target.organizationId)
 			}), { jwt: requestJwt });
-			if (!refreshOutcome.ok) return buildClaudeUsageRefreshErrorResponse(refreshOutcome.error);
+			if (!refreshOutcome.ok) return yield* answerBlockedClaudeUsageRefresh({
+				session,
+				requestJwt,
+				runtimeId: target.runtimeId,
+				error: refreshOutcome.error
+			});
 			const snapshotOutcome = yield* runCmmdRestProxy(session, (jwt) => cmmdGateway.request({
 				method: "GET",
 				jwt,
@@ -305276,6 +305421,22 @@ registerProxyRoute({
 	responseShape: "unwrapData",
 	successStatus: 200
 });
+registerProxyRoute({
+	forgePath: "/api/cmmd/forge-runtimes/:runtimeId/execution-intents",
+	method: "POST",
+	cmmdPath: "/api/forge/context/runtimes/:runtimeId/execution-intents",
+	orgIdSource: "none",
+	responseShape: "unwrapData",
+	successStatus: 200
+});
+registerProxyRoute({
+	forgePath: "/api/cmmd/forge-runtimes/:runtimeId/execution-intents/:intentId/dispatched",
+	method: "POST",
+	cmmdPath: "/api/forge/context/runtimes/:runtimeId/execution-intents/:intentId/dispatched",
+	orgIdSource: "none",
+	responseShape: "unwrapData",
+	successStatus: 200
+});
 registerProxyRoute({
 	forgePath: "/api/cmmd/devices/:deviceId/revoke",
 	method: "POST",
@@ -311106,7 +311267,7 @@ const makePipelineRunCoordinator = require_Schema$1.gen(function* () {
 			preparation: preparedHandoff.providerAuthorityPreparation
 		});
 		const acceptingHeartbeatRef = yield* require_HttpServer.make$3(true);
-		const heartbeatPublicationSemaphore = yield* require_Path.make$4(1);
+		const heartbeatPublicationSemaphore = yield* require_Path.make$5(1);
 		if ((yield* store.getByRunId(input.runId)) !== null) return yield* coordinatorError("registerHandoff", "PIPELINE_HANDOFF_ALREADY_BOUND", "The CMMD run already has a Forge task thread and must use the authority rebind contract.");
 		const snapshot = preparedHandoff.snapshot;
 		const readModel = yield* orchestration.getReadModel();
@@ -314992,7 +315153,7 @@ function makeProjectLeadSchedulerLive(options = {}) {
 	return require_Schema$1.effect(ProjectLeadScheduler, require_Schema$1.gen(function* () {
 		const client = yield* ProjectLeadControllerClient;
 		const dispatcher = yield* ProjectLeadReservationDispatcher;
-		const semaphore = yield* require_Path.make$4(1);
+		const semaphore = yield* require_Path.make$5(1);
 		const leaseSeconds = options.leaseSeconds ?? DEFAULT_LEASE_SECONDS;
 		const batchSize = options.batchSize ?? DEFAULT_BATCH_SIZE;
 		const projectLimit = options.projectLimit ?? DEFAULT_PROJECT_LIMIT;
@@ -317011,13 +317172,13 @@ const gitUrlCloneRouteLayer = add$1("POST", "/api/cloud/git/clone-url", require_
 //#endregion
 //#region src/server.ts
 const PtyAdapterLive = require_Schema$1.unwrap(require_Schema$1.gen(function* () {
-	if (typeof Bun !== "undefined") return (yield* require_Schema$1.promise(() => Promise.resolve().then(() => require("./BunPTY-B4Ra6mph.cjs")))).layer;
-	else return (yield* require_Schema$1.promise(() => Promise.resolve().then(() => require("./NodePTY-wATyTf3M.cjs")))).layer;
+	if (typeof Bun !== "undefined") return (yield* require_Schema$1.promise(() => Promise.resolve().then(() => require("./BunPTY-86ttlTi6.cjs")))).layer;
+	else return (yield* require_Schema$1.promise(() => Promise.resolve().then(() => require("./NodePTY-Cps0jsDA.cjs")))).layer;
 }));
 const HttpServerLive = require_Schema$1.unwrap(require_Schema$1.gen(function* () {
 	const config = yield* ServerConfig;
-	if (typeof Bun !== "undefined") return (yield* require_Schema$1.promise(() => Promise.resolve().then(() => require("./BunHttpServer-CjwNydcy.cjs")))).layer(bunHttpServerOptions(config));
-	const [NodeHttpServer, NodeHttp] = yield* require_Schema$1.all([require_Schema$1.promise(() => Promise.resolve().then(() => require("./NodeHttpServer-Cy1XvkSE.cjs"))), require_Schema$1.promise(() => import("node:http"))]);
+	if (typeof Bun !== "undefined") return (yield* require_Schema$1.promise(() => Promise.resolve().then(() => require("./BunHttpServer-BhE7Szci.cjs")))).layer(bunHttpServerOptions(config));
+	const [NodeHttpServer, NodeHttp] = yield* require_Schema$1.all([require_Schema$1.promise(() => Promise.resolve().then(() => require("./NodeHttpServer-BPjxt_DT.cjs"))), require_Schema$1.promise(() => import("node:http"))]);
 	return NodeHttpServer.layer(NodeHttp.createServer, {
 		host: config.host,
 		port: config.port
@@ -317025,10 +317186,10 @@ const HttpServerLive = require_Schema$1.unwrap(require_Schema$1.gen(function* ()
 }));
 const PlatformServicesLive = require_Schema$1.unwrap(require_Schema$1.gen(function* () {
 	if (typeof Bun !== "undefined") {
-		const { layer } = yield* require_Schema$1.promise(() => Promise.resolve().then(() => require("./BunServices-CUeOgVUt.cjs")));
+		const { layer } = yield* require_Schema$1.promise(() => Promise.resolve().then(() => require("./BunServices-BwE9KexF.cjs")));
 		return layer;
 	} else {
-		const { layer } = yield* require_Schema$1.promise(() => Promise.resolve().then(() => require("./NodeServices-BqfcuvmN.cjs")));
+		const { layer } = yield* require_Schema$1.promise(() => Promise.resolve().then(() => require("./NodeServices-Ddr-tYRu.cjs")));
 		return layer;
 	}
 }));