@cmmd-center/forge 0.13.82 → 0.13.84

package/dist/bin.mjs

@@ -23,7 +23,7 @@ import { createCipheriv, createDecipheriv, createHash, createHmac, createPublicK
 import * as FS$1 from "node:fs";
 import fs, { accessSync, chmodSync, constants, createReadStream, existsSync, mkdirSync, mkdtempSync, promises, readFile, readFileSync, readdir, readdirSync, realpathSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import * as NodeOS from "node:os";
-import $U, { homedir, networkInterfaces, tmpdir } from "node:os";
+import os, { homedir, networkInterfaces, tmpdir } from "node:os";
 import * as Path$1 from "node:path";
 import path, { basename, delimiter, dirname, extname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { pathToFileURL } from "node:url";
@@ -19653,6 +19653,63 @@ const BrowserPointerButton = Literals([
 	"middle",
 	"right"
 ]);
+const BrowserClickPointCommand = Struct({
+	type: Literal("clickPoint"),
+	...BrowserBaseTabAction.fields,
+	x: Number$1,
+	y: Number$1,
+	button: optional$4(BrowserPointerButton),
+	clickCount: optional$4(Number$1)
+});
+const BrowserWheelCommand = Struct({
+	type: Literal("wheel"),
+	...BrowserBaseTabAction.fields,
+	deltaX: Number$1,
+	deltaY: Number$1,
+	x: optional$4(Number$1),
+	y: optional$4(Number$1)
+});
+const BrowserPressKeyCommand = Struct({
+	type: Literal("pressKey"),
+	...BrowserBaseTabAction.fields,
+	key: TrimmedNonEmptyString,
+	x: optional$4(Number$1),
+	y: optional$4(Number$1)
+});
+const BrowserTypeTextCommand = Struct({
+	type: Literal("typeText"),
+	...BrowserBaseTabAction.fields,
+	text: String$1,
+	pressEnter: optional$4(Boolean$1)
+});
+const BrowserSnapshotCommand = Struct({
+	type: Literal("snapshot"),
+	...BrowserBaseTabAction.fields
+});
+const BrowserScreenshotCommand = Struct({
+	type: Literal("screenshot"),
+	...BrowserBaseTabAction.fields,
+	fullPage: optional$4(Boolean$1)
+});
+const BrowserSetViewportCommand = Struct({
+	type: Literal("setViewport"),
+	viewport: BrowserViewport
+});
+const BrowserResetViewportCommand = Struct({ type: Literal("resetViewport") });
+const BrowserSetVisibilityCommand = Struct({
+	type: Literal("setVisibility"),
+	visibility: BrowserVisibility
+});
+const BrowserNameSessionCommand = Struct({
+	type: Literal("nameSession"),
+	name: TrimmedNonEmptyString
+});
+const BrowserConsoleLogsCommand = Struct({
+	type: Literal("consoleLogs"),
+	tabId: optional$4(BrowserTabId),
+	limit: optional$4(Number$1),
+	levels: optional$4(ArraySchema(BrowserConsoleLogLevel))
+});
 const BrowserCommand = Union([
 	BrowserNavigateCommand,
 	BrowserNewTabCommand,
@@ -19664,63 +19721,21 @@ const BrowserCommand = Union([
 	BrowserClickCommand,
 	BrowserTypeCommand,
 	BrowserScrollCommand,
+	BrowserClickPointCommand,
+	BrowserWheelCommand,
+	BrowserPressKeyCommand,
+	BrowserTypeTextCommand,
+	BrowserSnapshotCommand,
+	BrowserScreenshotCommand,
+	BrowserSetViewportCommand,
+	BrowserResetViewportCommand,
+	BrowserSetVisibilityCommand,
 	Struct({
-		type: Literal("clickPoint"),
-		...BrowserBaseTabAction.fields,
-		x: Number$1,
-		y: Number$1,
-		button: optional$4(BrowserPointerButton),
-		clickCount: optional$4(Number$1)
-	}),
-	Struct({
-		type: Literal("wheel"),
-		...BrowserBaseTabAction.fields,
-		deltaX: Number$1,
-		deltaY: Number$1,
-		x: optional$4(Number$1),
-		y: optional$4(Number$1)
-	}),
-	Struct({
-		type: Literal("pressKey"),
-		...BrowserBaseTabAction.fields,
-		key: TrimmedNonEmptyString,
-		x: optional$4(Number$1),
-		y: optional$4(Number$1)
-	}),
-	Struct({
-		type: Literal("typeText"),
-		...BrowserBaseTabAction.fields,
-		text: String$1,
-		pressEnter: optional$4(Boolean$1)
-	}),
-	Struct({
-		type: Literal("snapshot"),
-		...BrowserBaseTabAction.fields
-	}),
-	Struct({
-		type: Literal("screenshot"),
-		...BrowserBaseTabAction.fields,
-		fullPage: optional$4(Boolean$1)
-	}),
-	Struct({
-		type: Literal("setViewport"),
-		viewport: BrowserViewport
+		type: Literal("setAudioMuted"),
+		muted: Boolean$1
 	}),
-	Struct({ type: Literal("resetViewport") }),
-	Struct({
-		type: Literal("setVisibility"),
-		visibility: BrowserVisibility
-	}),
-	Struct({
-		type: Literal("nameSession"),
-		name: TrimmedNonEmptyString
-	}),
-	Struct({
-		type: Literal("consoleLogs"),
-		tabId: optional$4(BrowserTabId),
-		limit: optional$4(Number$1),
-		levels: optional$4(ArraySchema(BrowserConsoleLogLevel))
-	})
+	BrowserNameSessionCommand,
+	BrowserConsoleLogsCommand
 ]);
 const BrowserOpenSessionInput = Struct({
 	threadId: ThreadId,
@@ -50591,7 +50606,7 @@ function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
 	const min = forceColor || 0;
 	if (env.TERM === "dumb") return min;
 	if (process$1.platform === "win32") {
-		const osRelease = $U.release().split(".");
+		const osRelease = os.release().split(".");
 		if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) return Number(osRelease[2]) >= 14931 ? 3 : 2;
 		return 1;
 	}
@@ -53034,7 +53049,7 @@ var require_ProcessDetector = /* @__PURE__ */ __commonJSMin(((exports) => {
 	exports.processDetector = void 0;
 	const api_1 = (init_esm$1(), __toCommonJS(esm_exports$1));
 	const semconv_1 = require_semconv$1();
-	const os$3 = __require("os");
+	const os$4 = __require("os");
 	/**
 	* ProcessDetector will be used to detect the resources related current process running
 	* and being instrumented from the NodeJS Process module.
@@ -53056,7 +53071,7 @@ var require_ProcessDetector = /* @__PURE__ */ __commonJSMin(((exports) => {
 			};
 			if (process.argv.length > 1) attributes[semconv_1.ATTR_PROCESS_COMMAND] = process.argv[1];
 			try {
-				const userInfo = os$3.userInfo();
+				const userInfo = os$4.userInfo();
 				attributes[semconv_1.ATTR_PROCESS_OWNER] = userInfo.username;
 			} catch (e) {
 				api_1.diag.debug(`error obtaining process owner: ${e}`);
@@ -65979,7 +65994,7 @@ function normalizeNumberish(value) {
 }
 //#endregion
 //#region package.json
-var version$1 = "0.13.82";
+var version$1 = "0.13.84";
 //#endregion
 //#region src/sentry.ts
 const SERVER_APP_NAME = "forge-server";
@@ -76022,7 +76037,7 @@ var require_node_gyp_build = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	var fs$6 = __require("fs");
 	var path$5 = __require("path");
 	var url$1 = __require("url");
-	var os$2 = __require("os");
+	var os$3 = __require("os");
 	var runtimeRequire = typeof __webpack_require__ === "function" ? __non_webpack_require__ : __require;
 	var vars = process.config && process.config.variables || {};
 	var prebuildsOnly = !!process.env.PREBUILDS_ONLY;
@@ -76030,8 +76045,8 @@ var require_node_gyp_build = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	var abi = versions.modules;
 	if (versions.deno || process.isBun) abi = "unsupported";
 	var runtime = isElectron() ? "electron" : isNwjs() ? "node-webkit" : "node";
-	var arch = process.env.npm_config_arch || os$2.arch();
-	var platform = process.env.npm_config_platform || os$2.platform();
+	var arch = process.env.npm_config_arch || os$3.arch();
+	var platform = process.env.npm_config_platform || os$3.platform();
 	var libc = process.env.LIBC || (isMusl(platform) ? "musl" : "glibc");
 	var armv = process.env.ARM_VERSION || (arch === "arm64" ? "8" : vars.arm_version) || "";
 	var uv = (versions.uv || "").split(".")[0];
@@ -79845,10 +79860,7 @@ function dedupeChecks(entries) {
 	for (const entry of survivors) countsByName.set(entry.check.name, (countsByName.get(entry.check.name) ?? 0) + 1);
 	return survivors.map((entry) => {
 		const workflowName = entry.workflowName ?? "";
-		return workflowName.length > 0 && (countsByName.get(entry.check.name) ?? 0) > 1 ? {
-			...entry.check,
-			name: `${workflowName} / ${entry.check.name}`
-		} : entry.check;
+		return workflowName.length > 0 && (countsByName.get(entry.check.name) ?? 0) > 1 ? Object.assign({}, entry.check, { name: `${workflowName} / ${entry.check.name}` }) : entry.check;
 	});
 }
 //#endregion
@@ -87199,13 +87211,8 @@ const make$21 = gen(function* () {
 			author: withAvatar(pullRequest.author, reviewThreads.avatarsByLogin, input.host),
 			reviewers: reviewThreads.reviewers,
 			reactions: reviewThreads.reactions,
-			commits: (reviewThreads.commits.length > 0 ? reviewThreads.commits : pullRequest.commits).map((commit) => ({
-				...commit,
-				...reviewThreads.commitStats.get(commit.oid),
-				authors: commit.authors?.map((author) => withAvatar(author, reviewThreads.avatarsByLogin, input.host) ?? author)
-			})),
-			comments: [...pullRequest.comments, ...reviewThreads.comments].map((comment) => ({
-				...comment,
+			commits: (reviewThreads.commits.length > 0 ? reviewThreads.commits : pullRequest.commits).map((commit) => Object.assign({}, commit, reviewThreads.commitStats.get(commit.oid), { authors: commit.authors?.map((author) => withAvatar(author, reviewThreads.avatarsByLogin, input.host) ?? author) })),
+			comments: [...pullRequest.comments, ...reviewThreads.comments].map((comment) => Object.assign({}, comment, {
 				body: comment.kind === "review" && comment.reviewState?.toUpperCase() === "DISMISSED" && rendersEmpty(comment.body) ? reviewThreads.dismissalsByReviewId.get(comment.id) ?? comment.body : comment.body,
 				author: withAvatar(comment.author, reviewThreads.avatarsByLogin, input.host),
 				reactions: comment.reactions ?? reviewThreads.reactionsById.get(comment.id) ?? []
@@ -93872,7 +93879,7 @@ const launchDetached = (launch) => gen(function* () {
 });
 const OpenLive = effect(Open, gen(function* () {
 	const open = yield* tryPromise({
-		try: () => import("./open-2-reBrpv.mjs"),
+		try: () => import("./open-yHTUkd2Y.mjs"),
 		catch: (cause) => new OpenError$1({
 			message: "failed to load browser opener",
 			cause
@@ -151361,7 +151368,7 @@ const OPENAI_PROXY_ENV_KEYS = ["OPENAI_API_KEY", "OPENAI_BASE_URL"];
 function personalCodexServedByControlPlane(env = process.env) {
 	return env.FORGE_CMMD_RUNTIME_MODE === "true" && env.FORGE_PERSONAL_CODEX_VIA_EGRESS === "true";
 }
-function resolveCodexAccessMode(input) {
+function resolveCodexAccessMode$1(input) {
 	if (clampWorkspaceAccessMode(input.accessMode) === "workspace") return "workspace";
 	if (personalCodexServedByControlPlane(input.env ?? process.env)) return "workspace";
 	if (!input.hasCodexChatGptLogin()) throw personalCodexAuthError("This runtime is not signed in to ChatGPT. Open Settings > Providers and connect ChatGPT on this runtime.");
@@ -153079,7 +153086,7 @@ var CodexAppServerManager = class extends EventEmitter$1 {
 				cwd: resolvedCwd,
 				...codexHomePath ? { homePath: codexHomePath } : {}
 			});
-			const accessMode = resolveCodexAccessMode({
+			const accessMode = resolveCodexAccessMode$1({
 				accessMode: input.accessMode ?? "workspace",
 				hasCodexChatGptLogin: () => hasCodexChatGptLogin({
 					binaryPath: codexBinaryPath,
@@ -191811,7 +191818,7 @@ var Vce = {
 function Ve() {
 	return Vce;
 }
-var Us = $U.homedir(), lk = $U.tmpdir(), { env: Vc } = process$1, Yce = (e) => {
+var Us = os.homedir(), lk = os.tmpdir(), { env: Vc } = process$1, Yce = (e) => {
 	let t = path.join(Us, "Library");
 	return {
 		data: path.join(t, "Application Support", e),
@@ -202011,12 +202018,12 @@ function qZ(e, t) {
 	}
 	return n;
 }
-var os$1 = "https://code.claude.com/docs/en", kKe = [
+var os$2 = "https://code.claude.com/docs/en", kKe = [
 	{
 		matches: (e) => e.path === "permissions.defaultMode" && e.code === "invalid_value",
 		tip: {
 			suggestion: "Valid modes: \"acceptEdits\" (ask before file changes), \"plan\" (analysis only), \"bypassPermissions\" (auto-accept all), or \"default\" (standard behavior)",
-			docLink: `${os$1}/iam#permission-modes`
+			docLink: `${os$2}/iam#permission-modes`
 		}
 	},
 	{
@@ -202031,7 +202038,7 @@ var os$1 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path.startsWith("env.") && e.code === "invalid_type",
 		tip: {
 			suggestion: "Environment variables must be strings. Wrap numbers and booleans in quotes. Example: \"DEBUG\": \"true\", \"PORT\": \"3000\"",
-			docLink: `${os$1}/settings#environment-variables`
+			docLink: `${os$2}/settings#environment-variables`
 		}
 	},
 	{
@@ -202042,14 +202049,14 @@ var os$1 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path.startsWith("hooks.") && e.code === "invalid_key",
 		tip: {
 			suggestion: "Not a recognized hook event. Common events: PreToolUse, PostToolUse, UserPromptSubmit, SessionStart, SessionEnd, Stop. Check spelling and capitalization.",
-			docLink: `${os$1}/hooks`
+			docLink: `${os$2}/hooks`
 		}
 	},
 	{
 		matches: (e) => /\.hooks\.\d+\.command$/.test(e.path) && e.code === "invalid_type" && e.received === "undefined",
 		tip: {
 			suggestion: "Command hooks require `command`. For exec form (no shell), set `command` to the executable and `args` to its arguments: {\"type\": \"command\", \"command\": \"echo\", \"args\": [\"hi\"]}. For shell form, set `command` to the full shell string: {\"type\": \"command\", \"command\": \"echo hi\"}.",
-			docLink: `${os$1}/hooks#exec-form-and-shell-form`
+			docLink: `${os$2}/hooks#exec-form-and-shell-form`
 		}
 	},
 	{
@@ -202064,7 +202071,7 @@ var os$1 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.code === "unrecognized_keys",
 		tip: {
 			suggestion: "Check for typos or refer to the documentation for valid fields",
-			docLink: `${os$1}/settings`
+			docLink: `${os$2}/settings`
 		}
 	},
 	{
@@ -202079,13 +202086,13 @@ var os$1 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path === "permissions.additionalDirectories" && e.code === "invalid_type",
 		tip: {
 			suggestion: "Must be an array of directory paths. Example: [\"~/projects\", \"/tmp/workspace\"]. You can also use --add-dir flag or /add-dir command",
-			docLink: `${os$1}/iam#working-directories`
+			docLink: `${os$2}/iam#working-directories`
 		}
 	}
 ], AKe = {
-	permissions: `${os$1}/iam#configuring-permissions`,
-	env: `${os$1}/settings#environment-variables`,
-	hooks: `${os$1}/hooks`
+	permissions: `${os$2}/iam#configuring-permissions`,
+	env: `${os$2}/settings#environment-variables`,
+	hooks: `${os$2}/hooks`
 };
 function GZ(e) {
 	let t = kKe.find((r) => r.matches(e));
@@ -223029,6 +223036,9 @@ const makeTerminationError = (handle) => match$1(handle.exitCode, {
 });
 //#endregion
 //#region ../../packages/effect-acp/src/client.ts
+function runNotificationHandlers(registration, notification) {
+	return forEach(registration.handlers, (handler) => handler(notification).pipe(catch_(() => void_$1)), { discard: true });
+}
 var AcpClient = class extends Service$1()("effect-acp/AcpClient") {};
 const make$12 = fn$1("effect-acp/AcpClient.make")(function* (stdio, options = {}, terminationError) {
 	const coreHandlers = {};
@@ -223046,7 +223056,6 @@ const make$12 = fn$1("effect-acp/AcpClient.make")(function* (stdio, options = {}
 	const extNotificationHandlers = /* @__PURE__ */ new Map();
 	let unknownExtRequestHandler;
 	let unknownExtNotificationHandler;
-	const runNotificationHandlers = (registration, notification) => forEach(registration.handlers, (handler) => handler(notification).pipe(catch_(() => void_$1)), { discard: true });
 	const flushBufferedNotifications = (registration) => suspend$1(() => {
 		if (registration.handlers.length === 0 || registration.pending.length === 0) return void_$1;
 		return forEach(registration.pending.splice(0, registration.pending.length), (notification) => runNotificationHandlers(registration, notification), { discard: true });
@@ -237256,6 +237265,34 @@ const CodexProviderLive = effect(CodexProvider, gen(function* () {
 //#region src/git/Layers/CodexTextGeneration.ts
 const CODEX_GIT_TEXT_GENERATION_REASONING_EFFORT = "low";
 const CODEX_TIMEOUT_MS = 18e4;
+const readCodexStreamAsString = (operation, stream) => stream.pipe(decodeText$1(), runFold(() => "", (acc, chunk) => acc + chunk), mapError((cause) => normalizeCliError("codex", operation, cause, "Failed to collect process output")));
+function buildCodexExecArgs(input) {
+	return [
+		"exec",
+		"--ephemeral",
+		"--skip-git-repo-check",
+		"-s",
+		"read-only",
+		"--model",
+		input.model,
+		"--config",
+		`model_reasoning_effort="${input.reasoningEffort}"`,
+		"--config",
+		`project_doc_max_bytes=${CODEX_PROJECT_DOC_MAX_BYTES}`,
+		...input.fastMode ? ["--config", `service_tier="fast"`] : [],
+		"--output-schema",
+		input.schemaPath,
+		"--output-last-message",
+		input.outputPath,
+		"--json",
+		...input.imagePaths.flatMap((imagePath) => ["--image", imagePath]),
+		"-"
+	];
+}
+function resolveCodexAccessMode(configuredAccessMode) {
+	const accessMode = clampWorkspaceAccessMode(configuredAccessMode);
+	return accessMode === "personal" && personalCodexServedByControlPlane() ? "workspace" : accessMode;
+}
 /**
 * Byte budget Codex spends on `AGENTS.md` when it builds project instructions.
 * The Codex config reference defines `project_doc_max_bytes` as "Maximum bytes
@@ -237277,7 +237314,6 @@ const CodexTextGenerationLive = effect(TextGeneration, gen(function* () {
 	const serverConfig = yield* service(ServerConfig);
 	const serverSettingsService = yield* service(ServerSettingsService);
 	const textGenerationUsage = yield* service(TextGenerationUsage);
-	const readStreamAsString = (operation, stream) => stream.pipe(decodeText$1(), runFold(() => "", (acc, chunk) => acc + chunk), mapError((cause) => normalizeCliError("codex", operation, cause, "Failed to collect process output")));
 	const writeTempFile = (operation, prefix, content) => {
 		return fileSystem.makeTempFileScoped({ prefix: `forge-${prefix}-${process.pid}-${randomUUID()}.tmp` }).pipe(tap((filePath) => fileSystem.writeFileString(filePath, content)), mapError((cause) => new TextGenerationError({
 			operation,
@@ -237365,39 +237401,47 @@ const CodexTextGenerationLive = effect(TextGeneration, gen(function* () {
 		const outputPath = yield* writeTempFile(operation, "codex-output", "");
 		const workingDirectory = yield* makeNeutralWorkingDirectory(operation);
 		const codexSettings = yield* map$3(serverSettingsService.getSettings, (settings) => settings.providers.codex).pipe(catch_(() => undefined_));
-		const runCodexCommand = fn$1("runCodexJson.runCodexCommand")(function* () {
+		const launchCodexCommand = (command) => gen(function* () {
+			const child = yield* commandSpawner.spawn(command).pipe(mapError((cause) => normalizeCliError("codex", operation, cause, "Failed to spawn Codex CLI process")));
+			const [stdout, stderr, exitCode] = yield* all([
+				readCodexStreamAsString(operation, child.stdout),
+				readCodexStreamAsString(operation, child.stderr),
+				child.exitCode.pipe(mapError((cause) => normalizeCliError("codex", operation, cause, "Failed to read Codex CLI exit code")))
+			], { concurrency: "unbounded" });
+			if (exitCode === 0) return stdout;
+			const detail = stderr.trim() || stdout.trim();
+			return yield* new TextGenerationError({
+				operation,
+				detail: detail.length > 0 ? `Codex CLI command failed: ${detail}` : `Codex CLI command failed with code ${exitCode}.`
+			});
+		});
+		const resolveCodexCommandTarget = fn$1("runCodexJson.resolveCommandTarget")(function* () {
 			const normalizedOptions = normalizeCodexModelOptionsWithCapabilities(getCodexModelCapabilities(modelSelection.model), modelSelection.options);
 			const reasoningEffort = modelSelection.options?.reasoningEffort ?? CODEX_GIT_TEXT_GENERATION_REASONING_EFFORT;
-			const clampedAccessMode = clampWorkspaceAccessMode(codexSettings?.accessMode ?? "workspace");
-			const accessMode = clampedAccessMode === "personal" && personalCodexServedByControlPlane() ? "workspace" : clampedAccessMode;
-			const providerProxyToken = yield* resolveCodexProviderProxyToken({
-				operation,
+			const accessMode = resolveCodexAccessMode(codexSettings?.accessMode ?? "workspace");
+			return {
+				normalizedOptions,
+				reasoningEffort,
 				accessMode,
+				providerProxyToken: yield* resolveCodexProviderProxyToken({
+					operation,
+					accessMode,
+					model: modelSelection.model,
+					...threadId ? { threadId } : {},
+					authSessionId
+				})
+			};
+		});
+		const runCodexCommand = fn$1("runCodexJson.runCodexCommand")(function* () {
+			const { normalizedOptions, reasoningEffort, accessMode, providerProxyToken } = yield* resolveCodexCommandTarget();
+			return yield* launchCodexCommand(make$48(codexSettings?.binaryPath || "codex", buildCodexExecArgs({
 				model: modelSelection.model,
-				...threadId ? { threadId } : {},
-				authSessionId
-			});
-			const command = make$48(codexSettings?.binaryPath || "codex", [
-				"exec",
-				"--ephemeral",
-				"--skip-git-repo-check",
-				"-s",
-				"read-only",
-				"--model",
-				modelSelection.model,
-				"--config",
-				`model_reasoning_effort="${reasoningEffort}"`,
-				"--config",
-				`project_doc_max_bytes=${CODEX_PROJECT_DOC_MAX_BYTES}`,
-				...normalizedOptions?.fastMode ? ["--config", `service_tier="fast"`] : [],
-				"--output-schema",
+				reasoningEffort,
+				fastMode: normalizedOptions?.fastMode,
 				schemaPath,
-				"--output-last-message",
 				outputPath,
-				"--json",
-				...imagePaths.flatMap((imagePath) => ["--image", imagePath]),
-				"-"
-			], {
+				imagePaths
+			}), {
 				env: scrubForgeProviderChildEnvSecrets(buildCodexProcessEnv({
 					baseEnv: process.env,
 					accessMode,
@@ -237410,23 +237454,7 @@ const CodexTextGenerationLive = effect(TextGeneration, gen(function* () {
 				cwd: workingDirectory,
 				shell: process.platform === "win32",
 				stdin: { stream: encodeText(make$43(prompt)) }
-			});
-			const child = yield* commandSpawner.spawn(command).pipe(mapError((cause) => normalizeCliError("codex", operation, cause, "Failed to spawn Codex CLI process")));
-			const [stdout, stderr, exitCode] = yield* all([
-				readStreamAsString(operation, child.stdout),
-				readStreamAsString(operation, child.stderr),
-				child.exitCode.pipe(mapError((cause) => normalizeCliError("codex", operation, cause, "Failed to read Codex CLI exit code")))
-			], { concurrency: "unbounded" });
-			if (exitCode !== 0) {
-				const stderrDetail = stderr.trim();
-				const stdoutDetail = stdout.trim();
-				const detail = stderrDetail.length > 0 ? stderrDetail : stdoutDetail;
-				return yield* new TextGenerationError({
-					operation,
-					detail: detail.length > 0 ? `Codex CLI command failed: ${detail}` : `Codex CLI command failed with code ${exitCode}.`
-				});
-			}
-			return stdout;
+			}));
 		});
 		const cleanup = all([...[
 			schemaPath,
@@ -237565,6 +237593,7 @@ const CodexTextGenerationLive = effect(TextGeneration, gen(function* () {
 * @module ClaudeTextGeneration
 */
 const CLAUDE_TIMEOUT_MS = 18e4;
+const readClaudeStreamAsString = (operation, stream) => stream.pipe(decodeText$1(), runFold(() => "", (acc, chunk) => acc + chunk), mapError((cause) => normalizeCliError("claude", operation, cause, "Failed to collect process output")));
 /**
 * Schema for the wrapper JSON returned by `claude -p --output-format json`.
 * We only care about `structured_output`.
@@ -237600,7 +237629,6 @@ const ClaudeTextGenerationLive = effect(TextGeneration, gen(function* () {
 			...report.providerSessionId ? { providerSessionId: report.providerSessionId } : {}
 		});
 	});
-	const readStreamAsString = (operation, stream) => stream.pipe(decodeText$1(), runFold(() => "", (acc, chunk) => acc + chunk), mapError((cause) => normalizeCliError("claude", operation, cause, "Failed to collect process output")));
 	/**
 	* Spawn the Claude CLI with structured JSON output and return the parsed,
 	* schema-validated result.
@@ -237633,8 +237661,8 @@ const ClaudeTextGenerationLive = effect(TextGeneration, gen(function* () {
 			});
 			const child = yield* commandSpawner.spawn(command).pipe(mapError((cause) => normalizeCliError("claude", operation, cause, "Failed to spawn Claude CLI process")));
 			const [stdout, stderr, exitCode] = yield* all([
-				readStreamAsString(operation, child.stdout),
-				readStreamAsString(operation, child.stderr),
+				readClaudeStreamAsString(operation, child.stdout),
+				readClaudeStreamAsString(operation, child.stderr),
 				child.exitCode.pipe(mapError((cause) => normalizeCliError("claude", operation, cause, "Failed to read Claude CLI exit code")))
 			], { concurrency: "unbounded" });
 			if (exitCode !== 0) {
@@ -238029,6 +238057,21 @@ var TerminalProcessSignalError = class extends TaggedErrorClass()("TerminalProce
 	cause: optional$4(Defect),
 	signal: Literals(["SIGTERM", "SIGKILL"])
 }) {};
+function toTerminalHistoryError(operation, threadId, terminalId) {
+	return (cause) => new TerminalHistoryError({
+		operation,
+		threadId,
+		terminalId,
+		cause
+	});
+}
+function requireRunningProcess(session) {
+	if (session.process && session.status === "running") return succeed(session.process);
+	return fail(new TerminalNotRunningError({
+		threadId: session.threadId,
+		terminalId: session.terminalId
+	}));
+}
 const MAX_TERMINAL_CONTROL_RECEIPTS = 256;
 function terminalControlPayloadHash(method, payload) {
 	return createHash("sha256").update(method).update("\0").update(payload).digest("base64url");
@@ -238473,12 +238516,6 @@ const makeTerminalManagerWithOptions = fn$1("makeTerminalManagerWithOptions")(fu
 		return path.join(logsDir, `${threadPart}_${toSafeTerminalId(terminalId)}.log`);
 	};
 	const legacyHistoryPath = (threadId) => path.join(logsDir, `${legacySafeThreadId(threadId)}.log`);
-	const toTerminalHistoryError = (operation, threadId, terminalId) => (cause) => new TerminalHistoryError({
-		operation,
-		threadId,
-		terminalId,
-		cause
-	});
 	const readManagerState = get$2(managerStateRef);
 	const modifyManagerState = (f) => modify$2(managerStateRef, f);
 	const getThreadSemaphore = (threadId) => modifyEffect(threadLocksRef, (current) => {
@@ -239135,13 +239172,6 @@ const makeTerminalManagerWithOptions = fn$1("makeTerminalManagerWithOptions")(fu
 			transitionReceipts.delete(oldest);
 		}
 	};
-	const requireRunningProcess = (session) => {
-		if (session.process && session.status === "running") return succeed(session.process);
-		return fail(new TerminalNotRunningError({
-			threadId: session.threadId,
-			terminalId: session.terminalId
-		}));
-	};
 	const write = fn$1("terminal.write")(function* (input) {
 		const terminalId = input.terminalId ?? "default";
 		const session = yield* requireSession(input.threadId, terminalId);
@@ -241788,6 +241818,9 @@ const HOST_COMMAND_MAPPERS = {
 		...command.x !== void 0 ? { x: command.x } : {},
 		...command.y !== void 0 ? { y: command.y } : {}
 	}),
+	setAudioMuted: () => {
+		throw new Error("setAudioMuted is only supported over the desktop native browser bridge.");
+	},
 	setViewport: (command) => ({
 		type: "setViewport",
 		viewport: command.viewport
@@ -270288,7 +270321,7 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 	var dgram = __require("dgram");
 	var thunky = require_thunky();
 	var events = __require("events");
-	var os = __require("os");
+	var os$1 = __require("os");
 	var noop = function() {};
 	module.exports = function(opts) {
 		if (!opts) opts = {};
@@ -270419,14 +270452,14 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 		return that;
 	};
 	function defaultInterface() {
-		var networks = os.networkInterfaces();
+		var networks = os$1.networkInterfaces();
 		var names = Object.keys(networks);
 		for (var i = 0; i < names.length; i++) {
 			var net = networks[names[i]];
 			for (var j = 0; j < net.length; j++) {
 				var iface = net[j];
 				if (isIPv4(iface.family) && !iface.internal) {
-					if (os.platform() === "darwin" && names[i] === "en0") return iface.address;
+					if (os$1.platform() === "darwin" && names[i] === "en0") return iface.address;
 					return "0.0.0.0";
 				}
 			}
@@ -270434,7 +270467,7 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 		return "127.0.0.1";
 	}
 	function allInterfaces() {
-		var networks = os.networkInterfaces();
+		var networks = os$1.networkInterfaces();
 		var names = Object.keys(networks);
 		var res = [];
 		for (var i = 0; i < names.length; i++) {
@@ -292078,7 +292111,7 @@ function mapProviderSessionStatusToOrchestrationStatus(status) {
 	}
 }
 const turnStartKeyForEvent = (event) => event.commandId !== null ? `command:${event.commandId}` : `event:${event.eventId}`;
-const serverCommandId$1 = (tag) => CommandId.make(`server:${tag}:${crypto.randomUUID()}`);
+const serverCommandId$2 = (tag) => CommandId.make(`server:${tag}:${crypto.randomUUID()}`);
 const HANDLED_TURN_START_KEY_MAX = 1e4;
 const HANDLED_TURN_START_KEY_TTL = minutes(30);
 const DEFAULT_RUNTIME_MODE = "full-access";
@@ -292500,7 +292533,7 @@ const ProviderCommandReactorLive = effect(ProviderCommandReactor, gen(function*
 	const threadSessionAccountIds = /* @__PURE__ */ new Map();
 	const appendProviderFailureActivity = (input) => orchestrationEngine.dispatch({
 		type: "thread.activity.append",
-		commandId: serverCommandId$1("provider-failure-activity"),
+		commandId: serverCommandId$2("provider-failure-activity"),
 		threadId: input.threadId,
 		activity: {
 			id: EventId.make(crypto.randomUUID()),
@@ -292518,7 +292551,7 @@ const ProviderCommandReactorLive = effect(ProviderCommandReactor, gen(function*
 	});
 	const setThreadSession = (input) => orchestrationEngine.dispatch({
 		type: "thread.session.set",
-		commandId: serverCommandId$1("provider-session-set"),
+		commandId: serverCommandId$2("provider-session-set"),
 		threadId: input.threadId,
 		session: input.session,
 		createdAt: input.createdAt
@@ -292801,7 +292834,7 @@ const ProviderCommandReactorLive = effect(ProviderCommandReactor, gen(function*
 			});
 			yield* orchestrationEngine.dispatch({
 				type: "thread.meta.update",
-				commandId: serverCommandId$1("worktree-branch-rename"),
+				commandId: serverCommandId$2("worktree-branch-rename"),
 				threadId: input.threadId,
 				branch: renamed.branch,
 				worktreePath: cwd
@@ -292840,7 +292873,7 @@ const ProviderCommandReactorLive = effect(ProviderCommandReactor, gen(function*
 			if (!canReplaceThreadTitle(thread.title, input.titleSeed)) return;
 			yield* orchestrationEngine.dispatch({
 				type: "thread.meta.update",
-				commandId: serverCommandId$1("thread-title-rename"),
+				commandId: serverCommandId$2("thread-title-rename"),
 				threadId: input.threadId,
 				title: generated.title
 			});
@@ -292903,7 +292936,7 @@ const ProviderCommandReactorLive = effect(ProviderCommandReactor, gen(function*
 	const dispatchThreadTitleRegenerationCompletion = fn$1("dispatchThreadTitleRegenerationCompletion")(function* (input) {
 		yield* orchestrationEngine.dispatch({
 			type: "thread.title.regeneration.complete",
-			commandId: serverCommandId$1("thread-title-regeneration-complete"),
+			commandId: serverCommandId$2("thread-title-regeneration-complete"),
 			threadId: input.threadId,
 			requestId: input.requestId,
 			...input.title !== void 0 ? { title: input.title } : {}
@@ -293211,7 +293244,7 @@ const ProviderCommandReactorLive = effect(ProviderCommandReactor, gen(function*
 	});
 	const appendRecoverableTurnStartTimeout = (event) => orchestrationEngine.dispatch({
 		type: "thread.activity.append",
-		commandId: serverCommandId$1("provider-turn-start-timeout"),
+		commandId: serverCommandId$2("provider-turn-start-timeout"),
 		threadId: event.payload.threadId,
 		activity: {
 			id: EventId.make(crypto.randomUUID()),
@@ -294044,7 +294077,13 @@ function isGitOutputLimitError(error) {
 	const text = `${"detail" in error && typeof error.detail === "string" ? error.detail : ""}\n${"message" in error && typeof error.message === "string" ? error.message : ""}`;
 	return text.includes("output exceeded") && text.includes("bytes and was truncated");
 }
-const serverCommandId = (tag) => CommandId.make(`server:${tag}:${crypto.randomUUID()}`);
+const serverCommandId$1 = (tag) => CommandId.make(`server:${tag}:${crypto.randomUUID()}`);
+function findSessionWithCwd(session) {
+	return session?.cwd ? some({
+		threadId: session.threadId,
+		cwd: session.cwd
+	}) : none$4();
+}
 const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 	const orchestrationEngine = yield* OrchestrationEngineService;
 	const providerService = yield* ProviderService;
@@ -294054,7 +294093,7 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 	const gitStatusBroadcaster = yield* GitStatusBroadcaster;
 	const appendRevertFailureActivity = (input) => orchestrationEngine.dispatch({
 		type: "thread.activity.append",
-		commandId: serverCommandId("checkpoint-revert-failure"),
+		commandId: serverCommandId$1("checkpoint-revert-failure"),
 		threadId: input.threadId,
 		activity: {
 			id: EventId.make(crypto.randomUUID()),
@@ -294072,7 +294111,7 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 	});
 	const appendCaptureFailureActivity = (input) => orchestrationEngine.dispatch({
 		type: "thread.activity.append",
-		commandId: serverCommandId("checkpoint-capture-failure"),
+		commandId: serverCommandId$1("checkpoint-capture-failure"),
 		threadId: input.threadId,
 		activity: {
 			id: EventId.make(crypto.randomUUID()),
@@ -294090,7 +294129,7 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 	});
 	const appendDiffSummarySkippedActivity = (input) => orchestrationEngine.dispatch({
 		type: "thread.activity.append",
-		commandId: serverCommandId("checkpoint-diff-summary-skipped"),
+		commandId: serverCommandId$1("checkpoint-diff-summary-skipped"),
 		threadId: input.threadId,
 		activity: {
 			id: EventId.make(crypto.randomUUID()),
@@ -294106,20 +294145,12 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 	const resolveSessionRuntimeForThread = fn$1("resolveSessionRuntimeForThread")(function* (threadId) {
 		const thread = (yield* orchestrationEngine.getReadModel()).threads.find((entry) => entry.id === threadId);
 		const sessions = yield* providerService.listSessions();
-		const findSessionWithCwd = (session) => {
-			if (!session?.cwd) return none$4();
-			return some({
-				threadId: session.threadId,
-				cwd: session.cwd
-			});
-		};
 		if (thread) {
 			const fromProjected = findSessionWithCwd(sessions.find((session) => session.threadId === thread.id));
 			if (isSome(fromProjected)) return fromProjected;
 		}
 		return none$4();
 	});
-	const isGitWorkspace = (cwd) => isGitRepository(cwd);
 	const resolveCheckpointCwd = fn$1("resolveCheckpointCwd")(function* (input) {
 		const fromSession = yield* resolveSessionRuntimeForThread(input.threadId);
 		const fromThread = resolveThreadWorkspaceCwd({
@@ -294134,7 +294165,7 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 			onSome: (runtime) => runtime.cwd
 		});
 		if (!cwd) return;
-		if (!isGitWorkspace(cwd)) return;
+		if (!isGitRepository(cwd)) return;
 		return cwd;
 	});
 	const captureAndDispatchCheckpoint = fn$1("captureAndDispatchCheckpoint")(function* (input) {
@@ -294194,7 +294225,7 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 		const assistantMessageId = input.assistantMessageId ?? input.thread.messages.toReversed().find((entry) => entry.role === "assistant" && entry.turnId === input.turnId)?.id ?? MessageId.make(`assistant:${input.turnId}`);
 		yield* orchestrationEngine.dispatch({
 			type: "thread.turn.diff.complete",
-			commandId: serverCommandId("checkpoint-turn-diff-complete"),
+			commandId: serverCommandId$1("checkpoint-turn-diff-complete"),
 			threadId: input.threadId,
 			turnId: input.turnId,
 			completedAt: input.createdAt,
@@ -294223,7 +294254,7 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 		});
 		yield* orchestrationEngine.dispatch({
 			type: "thread.activity.append",
-			commandId: serverCommandId("checkpoint-captured-activity"),
+			commandId: serverCommandId$1("checkpoint-captured-activity"),
 			threadId: input.threadId,
 			activity: {
 				id: EventId.make(crypto.randomUUID()),
@@ -294405,7 +294436,7 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 			}).pipe(catch_(() => void_$1));
 			return;
 		}
-		if (!isGitWorkspace(sessionRuntime.value.cwd)) {
+		if (!isGitRepository(sessionRuntime.value.cwd)) {
 			yield* appendRevertFailureActivity({
 				threadId: event.payload.threadId,
 				turnCount: event.payload.turnCount,
@@ -294461,7 +294492,7 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 		});
 		yield* orchestrationEngine.dispatch({
 			type: "thread.revert.complete",
-			commandId: serverCommandId("checkpoint-revert-complete"),
+			commandId: serverCommandId$1("checkpoint-revert-complete"),
 			threadId: event.payload.threadId,
 			turnCount: event.payload.turnCount,
 			createdAt: now
@@ -298768,7 +298799,7 @@ function resolveBuildCommitFromEnv(env) {
 * environment descriptor down instead of reporting an honest "unknown".
 */
 function readBakedBuildCommit() {
-	return "ead85bde2f90454fa6699c98fddcff9d86f6de37";
+	return "c9cd5df237295bb4b5d502b6d379c1b9cbd1bf8f";
 }
 async function resolveServerBuildCommit(input) {
 	if (isFullCommitSha(input.baked)) return input.baked;
@@ -300154,6 +300185,15 @@ var AuthPairingLinkRepository = class extends Service$1()("forge/persistence/Ser
 function toPersistenceSqlOrDecodeError$4(sqlOperation, decodeOperation) {
 	return (cause) => isSchemaError(cause) ? toPersistenceDecodeError(decodeOperation)(cause) : toPersistenceSqlError(sqlOperation)(cause);
 }
+function decodeCredential(row) {
+	return try_({
+		try: () => ({
+			...row,
+			credential: decodeSensitiveValue("auth-pairing-link", row.credential)
+		}),
+		catch: toPersistenceDecodeDefect("AuthPairingLinkRepository.decryptCredential")
+	});
+}
 const AuthPairingLinkRepositoryLive = effect(AuthPairingLinkRepository, gen(function* () {
 	const sql = yield* SqlClient;
 	const StoredCreateAuthPairingLinkInput = Struct({
@@ -300275,13 +300315,6 @@ const AuthPairingLinkRepositoryLive = effect(AuthPairingLinkRepository, gen(func
         WHERE credential_lookup = ${credentialLookup}
       `
 	});
-	const decodeCredential = (row) => try_({
-		try: () => ({
-			...row,
-			credential: decodeSensitiveValue("auth-pairing-link", row.credential)
-		}),
-		catch: toPersistenceDecodeDefect("AuthPairingLinkRepository.decryptCredential")
-	});
 	const create = (input) => createPairingLinkRow({
 		...input,
 		credential: encodeSensitiveValue("auth-pairing-link", input.credential),
@@ -313137,14 +313170,8 @@ function buildRuntimeUsageRowBatch(rows, cursor, batchSize = 500) {
 		previousHeadHash: cursor.headHash,
 		rows: capped.map((row, index) => {
 			const sequence = cursor.acknowledgedSequence + 1 + index;
-			return {
-				...row,
-				sequence,
-				payloadHash: hashRuntimeUsageRow({
-					...row,
-					sequence
-				})
-			};
+			const sequencedRow = Object.assign({}, row, { sequence });
+			return Object.assign(sequencedRow, { payloadHash: hashRuntimeUsageRow(sequencedRow) });
 		})
 	};
 }
@@ -315635,6 +315662,23 @@ const EXECUTABLE_STAGES = [
 ];
 const encoder = new TextEncoder();
 const decoder = new TextDecoder();
+function decodePersistedReport(item) {
+	let value;
+	try {
+		value = JSON.parse(item.payloadJson);
+	} catch {
+		return null;
+	}
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
+	const report = value;
+	return [
+		report.stage === item.stage,
+		Number.isSafeInteger(report.attempt),
+		(report.attempt ?? 0) > 0,
+		Number.isSafeInteger(report.expectedLockVersion),
+		(report.expectedLockVersion ?? -1) >= 0
+	].every(Boolean) ? report : null;
+}
 function isRecord$2(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -317076,23 +317120,6 @@ const PipelineRunCoordinatorLive = effect(PipelineRunCoordinator, gen(function*
 		})).applied) return yield* coordinatorError("reconcileTerminalHandoff", "PIPELINE_RECONCILE_CONFLICT", "The pipeline binding changed before its terminal state could be reconciled.");
 		yield* finalizeTerminalResources(binding, publicationGeneration);
 	}).pipe(mapError((cause) => cause instanceof PipelineRunCoordinatorError ? cause : coordinatorError("reconcileTerminalHandoff", "PIPELINE_RECONCILE_FAILED", `Failed to reconcile terminal CMMD run ${input.runId}.`, cause)));
-	const decodePersistedReport = (item) => {
-		let value;
-		try {
-			value = JSON.parse(item.payloadJson);
-		} catch {
-			return null;
-		}
-		if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-		const report = value;
-		return [
-			report.stage === item.stage,
-			Number.isSafeInteger(report.attempt),
-			(report.attempt ?? 0) > 0,
-			Number.isSafeInteger(report.expectedLockVersion),
-			(report.expectedLockVersion ?? -1) >= 0
-		].every(Boolean) ? report : null;
-	};
 	const synchronizeNonAppliedReport = (item, binding, authority, reportEpoch, currentEpoch) => gen(function* () {
 		const snapshot = yield* client.read({
 			runId: item.runId,
@@ -321016,6 +321043,9 @@ function requireMergeValue(value, message) {
 	if (value === null || value === void 0) throw new Error(message);
 	return value;
 }
+function serverCommandId(tag) {
+	return CommandId.make(`server:agent-protocol:${tag}:${crypto.randomUUID()}`);
+}
 const AgentProtocolReactorLive = effect(AgentProtocolReactor, gen(function* () {
 	const orchestration = yield* OrchestrationEngineService;
 	const projectionSnapshotQuery = yield* ProjectionSnapshotQuery;
@@ -321026,7 +321056,6 @@ const AgentProtocolReactorLive = effect(AgentProtocolReactor, gen(function* () {
 	const dispatch = (command) => runPromise(orchestration.dispatch(command).pipe(asVoid));
 	const readThread = (threadId) => runPromise(readDurableWorkerDetail(projectionSnapshotQuery, threadId)).then(getOrNull);
 	const readProject = (projectId) => runPromise(projectionSnapshotQuery.getProjectShellById(projectId)).then(getOrNull);
-	const serverCommandId = (tag) => CommandId.make(`server:agent-protocol:${tag}:${crypto.randomUUID()}`);
 	const appendActivity = async (input) => {
 		const createdAt = input.createdAt ?? (/* @__PURE__ */ new Date()).toISOString();
 		await dispatch({
@@ -323401,7 +323430,7 @@ const connectLoginCommand = make$34("login", {
 			})).json();
 		},
 		openBrowser: async (url) => {
-			const open = (await import("./open-2-reBrpv.mjs")).default;
+			const open = (await import("./open-yHTUkd2Y.mjs")).default;
 			await open(url);
 			return true;
 		},