@cmmd-center/forge 0.13.94 → 0.13.96

package/dist/bin.mjs

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "./chunk-C5ckVeoz.mjs";
-import { $ as encodeEffect, $a as make$39, $i as spaced, $n as filterMapOrFail, $r as runPromise, $s as max, $t as stringifyJson, Aa as Scope$1, Ai as void_$1, An as cached$3, Ar as match$1, As as uninterruptibleMask, At as withConstructorDefault, Ba as CurrentLogSpans, Bi as counter, Bn as catch_, Bo as addFinalizer, Br as orDie, Bs as make$42, Bt as head, C as Record, Ca as mergeAll, Cc as map$4, Ci as tx$1, Cn as andThen, Co as hasDies, Cr as logInfo, Cs as sleep$3, Ct as optionalKey, D as TaggedStruct, Da as succeedContext, Di as uninterruptibleMask$1, Dn as as$3, Do as interruptors, Ds as suspend, Dt as toCodecStringTree, E as TaggedErrorClass, Ea as succeed$2, Ec as sort, Ei as uninterruptible, En as annotateSpans, Eo as interrupt$2, Er as map$3, Et as toCodecJson, F as UndefinedOr, Fa as forkUnsafe, Fc as fail$1, Fi as withParentSpan, Fn as catchFilter, Fr as onError$1, Fs as MinimumTraceLevel, G as decodeExit, Ga as done, Gc as empty$1, Gi as withAttributes, Gl as hasProperty, Gn as die$1, Gr as provideService, Gs as format$1, Gt as Transformation, H as declare, Hc as Reference$1, Hi as snapshotUnsafe, Hn as contextWith, Ho as as$2, Hr as promise, Ht as size$2, I as Union, Ia as make$37, Ii as withSpan, In as catchIf, Io as ConsoleRef, Ir as onExit, Is as NativeSpan, It as assign, J as decodeUnknownEffect, Ja as failCause$3, Ji as exponential, Jl as isNotUndefined, Jn as exit, Jr as repeat, Js as hours, Jt as transformOrFail, K as decodeSync, Kc as get$3, Ki as addDelay, Kl as isNotNull, Ko as consolePretty$1, Kr as race, Ks as fromInput, L as Unknown, La as makeUnsafe$4, Li as withTracerEnabled, Ln as catchReason, Lo as CurrentLoggers$1, Ls as ParentSpan, Lt as append$1, M as URLFromString, Ma as addFinalizerExit, Mi as whileLoop, Ml as NodeInspectSymbol, Mn as callback, Mo as pretty, Ms as void_$2, Na as close, Ni as withFiber$1, Nl as toJson, Nn as catchCause, No as prettyErrors, Nr as matchEffect, O as TemplateLiteral, Oa as sync$2, Ol as isEffect$1, On as asSome, Or as mapError, Os as sync, Ot as toJsonSchemaDocument, P as Undefined, Pa as closeUnsafe, Pl as format, Pn as catchDefect, Po as squash, Pr as never$1, Q as encode$4, Qc as merge$2, Qi as recurs, Qn as filter$1, Qr as runForkWith, R as UnknownFromJsonString$1, Ra as provide$2, Rc as isFailure$1, Ri as yieldNow, Rl as equals, Rn as catchTag, Rr as onInterrupt, Rs as Tracer, Rt as drop$1, S as Option, Sa as merge$3, Si as try_, Sn as all, Sr as logFatal, Ss as scopeAddFinalizerExit, St as optional$4, T as Struct, Ta as provideMerge, Tc as reverse, Ti as undefined_, Tn as annotateLogs, To as hasInterruptsOnly, Tr as makeSpanScoped, Tt as tag, Ua as TracerTimingEnabled, Uc as Service$1, Ui as timer, Un as currentSpan, Ur as provide, Ut as toArray, V as brand, Va as MinimumLogLevel, Vc as succeed$1, Vi as gauge, Vn as context, Vo as andThen$1, Vr as orElseSucceed, Vt as isEmpty$2, W as decodeEffect, Wa as _await, Wc as add$2, Wi as update$3, Wl as compose$1, Wr as provideContext, Ws as days, X as decodeUnknownOption, Xc as make$35, Xl as isObject$1, Xn as failCause$1, Xr as retry, Xt as onSome, Y as decodeUnknownExit, Yc as getUnsafe$1, Yi as forever$2, Yl as isNullish, Yn as fail, Yr as result, Z as decodeUnknownSync, Za as isDeferred, Zc as makeUnsafe$3, Zi as passthrough$1, Zl as isTagged, Zr as runFork, Zs as isGreaterThan$1, Zt as parseJson$1, _ as NonEmptyArray, _a as effectContext, _i as tapErrorTag, _n as toUtc, _t as isSchemaError, a as DateTimeUtc, aa as Random$1, ac as sum$1, al as getOrElse, an as value, ao as interrupt$3, ar as fnUntraced, at as isBetween, au as constVoid, b as NullOr, bi as timeoutOrElse, bl as PipeInspectableProto, bn as acquireUseRelease, br as logDebug, bs as reportCauseUnsafe, bt as makeFilter, c as Defect, ca as Clock, cc as toSeconds, ci as sleep$4, cl as isNone, cn as add$3, co as match$2, cr as forkChild, cs as flatMap$1, ct as isGreaterThanOrEqualTo, d as Exit, dc as empty$3, di as succeedSome, dl as match, dn as isGreaterThanOrEqualTo$1, dr as forkScoped, ds as forkDetach, dt as isMaxLength, du as pipeArguments, ea as catchDone, ec as millis, el as firstSomeOf, er as filterOrFail, et as encodeSync, eu as cast, fa as TaggedError, fc as ensure, fi as suspend$1, fl as none$4, fn as make$38, fr as gen, ft as isMaxProperties, g as Never, ga as effect, gi as tapError, gn as toEpochMillis, gr as interruptible, gt as isSchema, h as Literals, ha as buildWithMemoMap, hc as fromIterable, hi as tapCause, hl as make$41, hn as toDate, hr as interrupt$1, ht as isPattern, i as Class, ic as subtract, ii as scoped, il as fromUndefinedOr, in as make$40, io as failCause$2, ir as fn$1, it as is$1, iu as constUndefined, ja as addFinalizer$1, jn as cachedWithTTL, jo as map$6, jr as matchCauseEffect, jt as withDecodingDefault, k as Trim, ka as unwrap, ki as useSpan, kl as withFiber, kn as asVoid, ks as tracerLogger$1, kt as toType, l as Duration, la as currentTimeMillis, lc as zero, li as succeed, ll as isSome, ln as distance, lr as forkDetach$1, ls as fnUntraced$1, lt as isInt, lu as identity, m as Literal, ma as build, mc as flatMapNullishOr, mi as tap, ml as Number$2, mn as now, mo as StackTrace, mr as ignoreCause, ms as loggerMake, mt as isNonEmpty, n as ArraySchema, nc as minutes, nl as flatten$1, no as die$2, nt as encodeUnknownExit, o as DateTimeUtcFromString, oa as clamp, oc as times, oi as service, ol as getOrNull, oo as isFailure, or as forEach, ot as isFinite$1, ou as constant, p as Int$1, pa as CurrentMemoMap, pc as filter, pi as sync$1, pl as some, pn as makeUnsafe$5, po as NoSuchElementError, pr as ignore, pt as isMinLength, q as decodeTo, qa as fail$3, qi as both, ql as isNotNullish, qn as ensuring, qr as raceFirst, qs as fromInputUnsafe, r as Boolean$1, ra as isDoneCause, rc as seconds, ri as scope$1, rl as fromNullishOr, rn as makeFormatterDefault, ro as fail$2, rr as flatten$2, rt as fromJsonString, ru as constTrue, sa as parse$6, sc as toMillis, si as serviceOption, sl as getOrUndefined, sn as encodeBase64Url$2, so as isSuccess, sr as forever$1, st as isGreaterThan, su as dual, t as Any, tc as min, ti as runPromiseWith, tl as flatMap$2, tn as InvalidValue$1, to as succeed$3, tr as flatMap, ts as fiberInterrupt, tt as encodeUnknownEffect, tu as compose, u as ErrorClass, ua as Class$1, uc as allocate, ui as succeedNone, ul as map$5, un as formatIso, uo as void_$3, ur as forkIn, us as forever, ut as isLessThanOrEqualTo, uu as pipe$1, v as NonEmptyString, va as effectDiscard, vc as isArrayNonEmpty, vi as timeout$1, vn as Transaction$1, vo as done$1, vr as isEffect, w as String$1, wa as provide$1, wi as txRetry, wn as annotateCurrentSpan, wo as hasInterrupts, wr as logWarning$1, wt as suspend$2, x as Number$1, xa as launch$1, xi as tryPromise, xl as YieldableProto, xn as addFinalizer$2, xr as logError, xs as scope, xt as mutable, y as Null, ya as empty$4, yc as isReadonlyArrayNonEmpty, yi as timeoutOption, yn as acquireRelease, yo as fail$4, yr as log$4, yt as make$36, z as Void, za as CurrentLogAnnotations, zc as isSuccess$1, zi as zipWith, zn as catchTags, zr as option, zs as externalSpan, zt as empty$2 } from "./Schema-Ay3DUM83.mjs";
-import { $t as interrupt$4, A as fromSubscription, At as end, B as onExit$1, Bt as sliding, C as fromChannel, Ct as fromSubscriptionArray, D as fromPull, Dt as make$44, E as fromPubSub, F as mapEffect$1, Ft as offer$1, G as runCollect, Gt as shutdown$2, Ht as takeAll, I as mapError$1, It as offerAll, J as runForEach, K as runDrain, Kt as subscribe$1, L as merge$4, Lt as offerUnsafe, M as make$43, Mt as failCause$4, N as map$7, O as fromQueue, Ot as makeUnsafe$6, P as mapAccum, Pt as make$45, Q as succeed$4, Qt as getCurrent, S as fromAsyncIterable, T as fromIterable$1, U as provideContext$1, Ut as unbounded$2, Vt as take$1, W as run$2, Wt as publish, X as runHead, Xt as makeUnsafe$7, Y as runForEachArray, Zt as await_, _t as drain, b as flatMap$3, c as callback$1, ct as get$4, d as debounce$1, dt as make$47, et as takeWhile, f as decodeText$1, g as ensuring$1, h as encodeText, j as isStream, kt as bounded, l as catchCause$1, lt as make$46, m as empty$5, nt as toAsyncIterable, q as runFold, qt as unbounded$1, r as FileSystem, rt as toPull, st as unwrap$1, t as Path$2, tn as runIn, tt as tick, u as concat$2, ut as get$5, v as failCause$5, vt as forEach$1, w as fromEffect, wt as fromTransform, x as fromArray, xt as mapInput, y as filter$2, zt as shutdown$1 } from "./Path-BIaGSU2M.mjs";
-import { _ as ChildProcessSpawner, a as Stdio, g as make$48, o as make$49, r as isQuitError } from "./NodeTerminal-CeaWke6-.mjs";
+import { $ as encodeEffect, $a as make$38, $i as spaced, $n as filterMapOrFail, $r as runPromise, $s as max, $t as stringifyJson, Aa as Scope$1, Ai as void_$1, An as cached$3, Ar as match$1, As as uninterruptibleMask, At as withConstructorDefault, Ba as CurrentLogSpans, Bi as counter, Bn as catch_, Bo as addFinalizer, Br as orDie, Bs as make$41, Bt as head, C as Record, Ca as mergeAll, Cc as map$4, Ci as tx$1, Cn as andThen, Co as hasDies, Cr as logInfo, Cs as sleep$3, Ct as optionalKey, D as TaggedStruct, Da as succeedContext, Di as uninterruptibleMask$1, Dn as as$3, Do as interruptors, Ds as suspend, Dt as toCodecStringTree, E as TaggedErrorClass, Ea as succeed$2, Ec as sort, Ei as uninterruptible, En as annotateSpans, Eo as interrupt$2, Er as map$3, Et as toCodecJson, F as UndefinedOr, Fa as forkUnsafe, Fc as fail$1, Fi as withParentSpan, Fn as catchFilter, Fr as onError$1, Fs as MinimumTraceLevel, G as decodeExit, Ga as done, Gc as empty$1, Gi as withAttributes, Gl as hasProperty, Gn as die$1, Gr as provideService, Gs as format$1, Gt as Transformation, H as declare, Hc as Reference$1, Hi as snapshotUnsafe, Hn as contextWith, Ho as as$2, Hr as promise, Ht as size$2, I as Union, Ia as make$36, Ii as withSpan, In as catchIf, Io as ConsoleRef, Ir as onExit, Is as NativeSpan, It as assign, J as decodeUnknownEffect, Ja as failCause$3, Ji as exponential, Jl as isNotUndefined, Jn as exit, Jr as repeat, Js as hours, Jt as transformOrFail, K as decodeSync, Kc as get$3, Ki as addDelay, Kl as isNotNull, Ko as consolePretty$1, Kr as race, Ks as fromInput, L as Unknown, La as makeUnsafe$4, Li as withTracerEnabled, Ln as catchReason, Lo as CurrentLoggers$1, Ls as ParentSpan, Lt as append$1, M as URLFromString, Ma as addFinalizerExit, Mi as whileLoop, Ml as NodeInspectSymbol, Mn as callback, Mo as pretty, Ms as void_$2, Na as close, Ni as withFiber$1, Nl as toJson, Nn as catchCause, No as prettyErrors, Nr as matchEffect, O as TemplateLiteral, Oa as sync$2, Ol as isEffect$1, On as asSome, Or as mapError, Os as sync, Ot as toJsonSchemaDocument, P as Undefined, Pa as closeUnsafe, Pl as format, Pn as catchDefect, Po as squash, Pr as never$1, Q as encode$4, Qc as merge$2, Qi as recurs, Qn as filter$1, Qr as runForkWith, R as UnknownFromJsonString$1, Ra as provide$2, Rc as isFailure$1, Ri as yieldNow, Rl as equals, Rn as catchTag, Rr as onInterrupt, Rs as Tracer, Rt as drop$1, S as Option, Sa as merge$3, Si as try_, Sn as all, Sr as logFatal, Ss as scopeAddFinalizerExit, St as optional$4, T as Struct, Ta as provideMerge, Tc as reverse, Ti as undefined_, Tn as annotateLogs, To as hasInterruptsOnly, Tr as makeSpanScoped, Tt as tag, Ua as TracerTimingEnabled, Uc as Service$1, Ui as timer, Un as currentSpan, Ur as provide, Ut as toArray, V as brand, Va as MinimumLogLevel, Vc as succeed$1, Vi as gauge, Vn as context, Vo as andThen$1, Vr as orElseSucceed, Vt as isEmpty$2, W as decodeEffect, Wa as _await, Wc as add$2, Wi as update$3, Wl as compose$1, Wr as provideContext, Ws as days, X as decodeUnknownOption, Xc as make$34, Xl as isObject$1, Xn as failCause$1, Xr as retry, Xt as onSome, Y as decodeUnknownExit, Yc as getUnsafe$1, Yi as forever$2, Yl as isNullish, Yn as fail, Yr as result, Z as decodeUnknownSync, Za as isDeferred, Zc as makeUnsafe$3, Zi as passthrough$1, Zl as isTagged, Zr as runFork, Zs as isGreaterThan$1, Zt as parseJson$1, _ as NonEmptyArray, _a as effectContext, _i as tapErrorTag, _n as toUtc, _t as isSchemaError, a as DateTimeUtc, aa as Random$1, ac as sum$1, al as getOrElse, an as value, ao as interrupt$3, ar as fnUntraced, at as isBetween, au as constVoid, b as NullOr, bi as timeoutOrElse, bl as PipeInspectableProto, bn as acquireUseRelease, br as logDebug, bs as reportCauseUnsafe, bt as makeFilter, c as Defect, ca as Clock, cc as toSeconds, ci as sleep$4, cl as isNone, cn as add$3, co as match$2, cr as forkChild, cs as flatMap$1, ct as isGreaterThanOrEqualTo, d as Exit, dc as empty$3, di as succeedSome, dl as match, dn as isGreaterThanOrEqualTo$1, dr as forkScoped, ds as forkDetach, dt as isMaxLength, du as pipeArguments, ea as catchDone, ec as millis, el as firstSomeOf, er as filterOrFail, et as encodeSync, eu as cast, fa as TaggedError, fc as ensure, fi as suspend$1, fl as none$4, fn as make$37, fr as gen, ft as isMaxProperties, g as Never, ga as effect, gi as tapError, gn as toEpochMillis, gr as interruptible, gt as isSchema, h as Literals, ha as buildWithMemoMap, hc as fromIterable, hi as tapCause, hl as make$40, hn as toDate, hr as interrupt$1, ht as isPattern, i as Class, ic as subtract, ii as scoped, il as fromUndefinedOr, in as make$39, io as failCause$2, ir as fn$1, it as is$1, iu as constUndefined, ja as addFinalizer$1, jn as cachedWithTTL, jo as map$6, jr as matchCauseEffect, jt as withDecodingDefault, k as Trim, ka as unwrap, ki as useSpan, kl as withFiber, kn as asVoid, ks as tracerLogger$1, kt as toType, l as Duration, la as currentTimeMillis, lc as zero, li as succeed, ll as isSome, ln as distance, lr as forkDetach$1, ls as fnUntraced$1, lt as isInt, lu as identity, m as Literal, ma as build, mc as flatMapNullishOr, mi as tap, ml as Number$2, mn as now, mo as StackTrace, mr as ignoreCause, ms as loggerMake, mt as isNonEmpty, n as ArraySchema, nc as minutes, nl as flatten$1, no as die$2, nt as encodeUnknownExit, o as DateTimeUtcFromString, oa as clamp, oc as times, oi as service, ol as getOrNull, oo as isFailure, or as forEach, ot as isFinite$1, ou as constant, p as Int$1, pa as CurrentMemoMap, pc as filter, pi as sync$1, pl as some, pn as makeUnsafe$5, po as NoSuchElementError, pr as ignore, pt as isMinLength, q as decodeTo, qa as fail$3, qi as both, ql as isNotNullish, qn as ensuring, qr as raceFirst, qs as fromInputUnsafe, r as Boolean$1, ra as isDoneCause, rc as seconds, ri as scope$1, rl as fromNullishOr, rn as makeFormatterDefault, ro as fail$2, rr as flatten$2, rt as fromJsonString, ru as constTrue, sa as parse$6, sc as toMillis, si as serviceOption, sl as getOrUndefined, sn as encodeBase64Url$2, so as isSuccess, sr as forever$1, st as isGreaterThan, su as dual, t as Any, tc as min, ti as runPromiseWith, tl as flatMap$2, tn as InvalidValue$1, to as succeed$3, tr as flatMap, ts as fiberInterrupt, tt as encodeUnknownEffect, tu as compose, u as ErrorClass, ua as Class$1, uc as allocate, ui as succeedNone, ul as map$5, un as formatIso, uo as void_$3, ur as forkIn, us as forever, ut as isLessThanOrEqualTo, uu as pipe$1, v as NonEmptyString, va as effectDiscard, vc as isArrayNonEmpty, vi as timeout$1, vn as Transaction$1, vo as done$1, vr as isEffect, w as String$1, wa as provide$1, wi as txRetry, wn as annotateCurrentSpan, wo as hasInterrupts, wr as logWarning$1, wt as suspend$2, x as Number$1, xa as launch$1, xi as tryPromise, xl as YieldableProto, xn as addFinalizer$2, xr as logError, xs as scope, xt as mutable, y as Null, ya as empty$4, yc as isReadonlyArrayNonEmpty, yi as timeoutOption, yn as acquireRelease, yo as fail$4, yr as log$4, yt as make$35, z as Void, za as CurrentLogAnnotations, zc as isSuccess$1, zi as zipWith, zn as catchTags, zr as option, zs as externalSpan, zt as empty$2 } from "./Schema-Ay3DUM83.mjs";
+import { $t as interrupt$4, A as fromSubscription, At as end, B as onExit$1, Bt as sliding, C as fromChannel, Ct as fromSubscriptionArray, D as fromPull, Dt as make$43, E as fromPubSub, F as mapEffect$1, Ft as offer$1, G as runCollect, Gt as shutdown$2, Ht as takeAll, I as mapError$1, It as offerAll, J as runForEach, K as runDrain, Kt as subscribe$1, L as merge$4, Lt as offerUnsafe, M as make$42, Mt as failCause$4, N as map$7, O as fromQueue, Ot as makeUnsafe$6, P as mapAccum, Pt as make$44, Q as succeed$4, Qt as getCurrent, S as fromAsyncIterable, T as fromIterable$1, U as provideContext$1, Ut as unbounded$2, Vt as take$1, W as run$2, Wt as publish, X as runHead, Xt as makeUnsafe$7, Y as runForEachArray, Zt as await_, _t as drain, b as flatMap$3, c as callback$1, ct as get$4, d as debounce$1, dt as make$46, et as takeWhile, f as decodeText$1, g as ensuring$1, h as encodeText, j as isStream, kt as bounded, l as catchCause$1, lt as make$45, m as empty$5, nt as toAsyncIterable, q as runFold, qt as unbounded$1, r as FileSystem, rt as toPull, st as unwrap$1, t as Path$2, tn as runIn, tt as tick, u as concat$2, ut as get$5, v as failCause$5, vt as forEach$1, w as fromEffect, wt as fromTransform, x as fromArray, xt as mapInput, y as filter$2, zt as shutdown$1 } from "./Path-BIaGSU2M.mjs";
+import { _ as ChildProcessSpawner, a as Stdio, g as make$47, o as make$48, r as isQuitError } from "./NodeTerminal-CeaWke6-.mjs";
 import { n as layer$7 } from "./NodeServices-Bt1GwPBR.mjs";
-import { $ as file, A as SocketErrorReason, At as merge$5, Bt as set$3, Ct as HttpClientErrorSchema, Dt as empty$7, Ft as getAndSet, G as TracerPropagationEnabled, Ht as updateAndGet, I as HttpServerError, It as getUnsafe$2, J as transformResponse, K as filterStatusOk$1, Lt as make$50, Ot as fromInput$1, Pt as get$6, Q as empty$6, Rt as makeUnsafe$8, St as setBody, Tt as jsonUnsafe$1, U as layer$8, Vt as update$4, W as HttpClient, Z as symbol$1, _ as schemaBodyUrlParams, _t as acceptJson, a as withLogAddress, at as setCookie, bt as get$7, ct as stream, d as logger$1, dt as filterStatusOk, et as isHttpServerResponse, f as withLoggerDisabled, ft as matchStatus, g as schemaBodyJson, gt as schemaBodyJson$1, i as serve$1, it as schemaJson, kt as fromRecordUnsafe, lt as text$2, m as ParsedSearchParams, nt as raw, ot as setCookies, p as HttpServerRequest, q as retryTransient, rt as redirect, st as setHeader, t as HttpServer, tt as jsonUnsafe, u as cors, ut as uint8Array, v as schemaHeaders, vt as bearerToken, wt as isHttpClientError, xt as post, y as toURL, yt as bodyJson, z as RouteNotFound, zt as modify$3 } from "./HttpServer-5UTabe01.mjs";
+import { $ as file, A as SocketErrorReason, At as merge$5, Bt as set$3, Ct as HttpClientErrorSchema, Dt as empty$7, Ft as getAndSet, G as TracerPropagationEnabled, Gt as run$3, Ht as updateAndGet, I as HttpServerError, It as getUnsafe$2, J as transformResponse, K as filterStatusOk$1, Lt as make$49, Ot as fromInput$1, Pt as get$6, Q as empty$6, Rt as makeUnsafe$8, St as setBody, Tt as jsonUnsafe$1, U as layer$8, Vt as update$4, W as HttpClient, Wt as make$50, Z as symbol$1, _ as schemaBodyUrlParams, _t as acceptJson, a as withLogAddress, at as setCookie, bt as get$7, ct as stream, d as logger$1, dt as filterStatusOk, et as isHttpServerResponse, f as withLoggerDisabled, ft as matchStatus, g as schemaBodyJson, gt as schemaBodyJson$1, i as serve$1, it as schemaJson, kt as fromRecordUnsafe, lt as text$2, m as ParsedSearchParams, nt as raw, ot as setCookies, p as HttpServerRequest, q as retryTransient, rt as redirect, st as setHeader, t as HttpServer, tt as jsonUnsafe, u as cors, ut as uint8Array, v as schemaHeaders, vt as bearerToken, wt as isHttpClientError, xt as post, y as toURL, yt as bodyJson, z as RouteNotFound, zt as modify$3 } from "./HttpServer-BbbI8N6_.mjs";
 import { _ as withDefault$3, a as all$1, c as logLevel, d as option$1, f as port, g as url$2, i as TrueValues, l as map$8, m as string$7, n as FalseValues, o as boolean$5, p as schema$2, r as Record$1, s as int$2, t as Boolean$2, u as number$2 } from "./Config-BnFFyBjD.mjs";
 import { a as make$51, i as keys, n as getOption, o as makeWith$1, r as invalidate, s as set$4, t as get$8 } from "./Cache-DOwpGEYJ.mjs";
 import { S as layer$9, _ as defaultEscape, a as DeadlockError, b as makeCompiler$1, c as SqlError, d as UnknownError, g as custom, h as make$52, i as ConstraintError, l as SqlSyntaxError, m as SqlClient, n as AuthorizationError, o as LockTimeoutError, r as ConnectionError, s as SerializationError, t as AuthenticationError, u as StatementTimeoutError, v as defaultTransforms, y as fragment } from "./SqlError-BBR7DPrQ.mjs";
@@ -14746,7 +14746,7 @@ const isCommand = (u) => hasProperty(u, TypeId$10);
 * @since 4.0.0
 * @category constructors
 */
-const make$34 = (name, config, handler) => {
+const make$33 = (name, config, handler) => {
 	return makeCommand({
 		name,
 		config: parseConfig(config ?? {}),
@@ -15081,7 +15081,7 @@ const runWith = (command, config) => {
 		program = provideService(program, LogLevel, logLevel);
 		const services = match(logLevel, {
 			onNone: () => empty$1(),
-			onSome: (level) => make$35(MinimumLogLevel, level)
+			onSome: (level) => make$34(MinimumLogLevel, level)
 		});
 		yield* provideContext(program, services);
 	}, catchFilter((error) => isCliError(error) && error._tag === "ShowHelp" ? succeed$1(error) : fail$1(error), (error) => andThen(showHelp(command, error), fail(error))), catchFilter((e) => isQuitError(e) ? succeed$1(e) : fail$1(e), (_) => interrupt$1));
@@ -15262,7 +15262,7 @@ const CurrentLoggers = CurrentLoggers$1;
 * @since 2.0.0
 * @category constructors
 */
-const make$33 = loggerMake;
+const make$32 = loggerMake;
 /**
 * Returns a new `Logger` which will aggregate logs output by the specified
 * `Logger` over the provided `window`. After the `window` has elapsed, the
@@ -15558,7 +15558,7 @@ const makeUnsafe$2 = (value) => {
 * @since 2.0.0
 * @category constructors
 */
-const make$32 = (value) => sync$1(() => makeUnsafe$2(value));
+const make$31 = (value) => sync$1(() => makeUnsafe$2(value));
 /**
 * @since 2.0.0
 * @category getters
@@ -15627,7 +15627,7 @@ const TypeId$8 = "~effect/transactions/TxRef";
 * })
 * ```
 */
-const make$31 = (initial) => sync$1(() => makeUnsafe$1(initial));
+const make$30 = (initial) => sync$1(() => makeUnsafe$1(initial));
 /**
 * Creates a new `TxRef` with the specified initial value.
 *
@@ -15810,7 +15810,7 @@ const TxChunkProto = {
 * })
 * ```
 */
-const empty = () => map$3(make$31(empty$2()), (ref) => makeUnsafe(ref));
+const empty = () => map$3(make$30(empty$2()), (ref) => makeUnsafe(ref));
 /**
 * Creates a new `TxChunk` with the specified TxRef.
 *
@@ -16102,7 +16102,7 @@ const TxQueueProto = {
 */
 const unbounded = () => gen(function* () {
 	const items = yield* empty();
-	const stateRef = yield* make$31({ _tag: "Open" });
+	const stateRef = yield* make$30({ _tag: "Open" });
 	const txQueue = Object.create(TxQueueProto);
 	txQueue.strategy = "unbounded";
 	txQueue.capacity = Number.POSITIVE_INFINITY;
@@ -22813,6 +22813,25 @@ const ProviderUnavailableDetail = Literals([
 	"reconnect-required"
 ]);
 /**
+* Whether the check behind this snapshot's `installed`/`status`/`auth`/`models`
+* fields actually completed (`confirmed`), or a probe failed, timed out, or
+* errored before it could answer (`could-not-check`). Absent means the
+* snapshot predates this field and carries no opinion either way.
+*
+* Deliberately not a new `ProviderUnavailableReason` member, and not folded
+* into `ProviderUnavailableDetail`. That union is the wire vocabulary a
+* separate CMMD receiver already validates with a `.strict()` schema (see
+* `docs/adr/withheld-providers-carry-their-reason.md`), and a value that
+* receiver has never heard of fails the whole snapshot, which its outbox then
+* retries forever. A brand new field costs a receiver that has never heard of
+* it nothing: Effect Schema drops an unrecognized struct property instead of
+* failing the decode, and `serializeProviderCatalog`
+* (`apps/server/src/runtimeReplication/providerCatalog.ts`) never copies this
+* field to that wire in the first place, so the CMMD-facing shape does not
+* change at all.
+*/
+const ProviderAvailabilityCheck = Literals(["confirmed", "could-not-check"]);
+/**
 * Whether the provider CLI honours the credential-directory variable, as this
 * Environment's probe found. `inconclusive` is a probe that ran and could not
 * tell. It is not `unsupported`, and it is never reported as `supported`. The
@@ -22869,6 +22888,8 @@ const ServerProvider = Struct({
 	availability: optional$4(ProviderAvailability),
 	unavailableReason: optional$4(ProviderUnavailableReason),
 	unavailableDetail: optional$4(ProviderUnavailableDetail),
+	availabilityCheck: optional$4(ProviderAvailabilityCheck),
+	lastConfirmedAt: optional$4(IsoDateTime),
 	credentialDirectory: optional$4(ProviderCredentialDirectoryAnswer),
 	credentialStore: optional$4(ProviderCredentialStore),
 	slashCommands: ArraySchema(ServerProviderSlashCommand).pipe(withDecodingDefault(succeed([]))),
@@ -25042,7 +25063,7 @@ const schema$1 = /* @__PURE__ */ declare(isStream);
 * @category Stream
 */
 function Stream$1(success, error) {
-	return make$36(schema$1.ast, {
+	return make$35(schema$1.ast, {
 		[StreamSchemaTypeId]: StreamSchemaTypeId,
 		success,
 		error
@@ -25172,7 +25193,7 @@ const makeProto$1 = (options) => {
 * @since 4.0.0
 * @category constructors
 */
-const make$30 = (tag, options) => {
+const make$29 = (tag, options) => {
 	const successSchema = options?.success ?? Void;
 	const errorSchema = options?.error ?? Never;
 	const defectSchema = options?.defect ?? Defect;
@@ -25319,7 +25340,7 @@ const RpcGroupProto = {
 		});
 	},
 	annotateRpcs(service, value) {
-		return this.annotateRpcsMerge(make$35(service, value));
+		return this.annotateRpcsMerge(make$34(service, value));
 	},
 	annotateMerge(context) {
 		return makeProto({
@@ -25344,7 +25365,7 @@ const makeProto = (options) => Object.assign(function() {}, RpcGroupProto, {
 * @since 4.0.0
 * @category groups
 */
-const make$29 = (...rpcs) => makeProto({
+const make$28 = (...rpcs) => makeProto({
 	requests: new Map(rpcs.map((rpc) => [rpc._tag, rpc])),
 	annotations: empty$1()
 });
@@ -26070,319 +26091,319 @@ const WS_METHODS = {
 	attachmentsDelete: "attachments.delete",
 	providerUploadFeedback: "provider.uploadFeedback"
 };
-const WsServerUpsertKeybindingRpc = make$30(WS_METHODS.serverUpsertKeybinding, {
+const WsServerUpsertKeybindingRpc = make$29(WS_METHODS.serverUpsertKeybinding, {
 	payload: ServerUpsertKeybindingInput,
 	success: ServerUpsertKeybindingResult,
 	error: KeybindingsConfigError
 });
-const WsServerRemoveKeybindingRpc = make$30(WS_METHODS.serverRemoveKeybinding, {
+const WsServerRemoveKeybindingRpc = make$29(WS_METHODS.serverRemoveKeybinding, {
 	payload: ServerRemoveKeybindingInput,
 	success: ServerRemoveKeybindingResult,
 	error: KeybindingsConfigError
 });
-const WsServerGetConfigRpc = make$30(WS_METHODS.serverGetConfig, {
+const WsServerGetConfigRpc = make$29(WS_METHODS.serverGetConfig, {
 	payload: Struct({}),
 	success: ServerConfig$1,
 	error: Union([KeybindingsConfigError, ServerSettingsError])
 });
-const WsServerRefreshProvidersRpc = make$30(WS_METHODS.serverRefreshProviders, {
+const WsServerRefreshProvidersRpc = make$29(WS_METHODS.serverRefreshProviders, {
 	payload: Struct({}),
 	success: ServerProviderUpdatedPayload
 });
-const WsServerStartProviderAuthRpc = make$30(WS_METHODS.serverStartProviderAuth, {
+const WsServerStartProviderAuthRpc = make$29(WS_METHODS.serverStartProviderAuth, {
 	payload: ProviderAuthStartInput,
 	success: ProviderAuthSession
 });
-const WsServerRepairProviderAuthRuntimeRpc = make$30(WS_METHODS.serverRepairProviderAuthRuntime, {
+const WsServerRepairProviderAuthRuntimeRpc = make$29(WS_METHODS.serverRepairProviderAuthRuntime, {
 	payload: ProviderAuthRuntimeRepairInput,
 	success: ProviderAuthRuntimeRepairResult
 });
-const WsServerDisconnectProviderAuthRpc = make$30(WS_METHODS.serverDisconnectProviderAuth, {
+const WsServerDisconnectProviderAuthRpc = make$29(WS_METHODS.serverDisconnectProviderAuth, {
 	payload: ProviderAuthDisconnectInput,
 	success: ServerProviderUpdatedPayload
 });
-const WsServerGetProviderAuthSessionRpc = make$30(WS_METHODS.serverGetProviderAuthSession, {
+const WsServerGetProviderAuthSessionRpc = make$29(WS_METHODS.serverGetProviderAuthSession, {
 	payload: ProviderAuthSessionInput,
 	success: ProviderAuthSession
 });
-const WsServerCancelProviderAuthRpc = make$30(WS_METHODS.serverCancelProviderAuth, {
+const WsServerCancelProviderAuthRpc = make$29(WS_METHODS.serverCancelProviderAuth, {
 	payload: ProviderAuthSessionInput,
 	success: ProviderAuthSession
 });
-const WsServerSubmitProviderAuthCodeRpc = make$30(WS_METHODS.serverSubmitProviderAuthCode, {
+const WsServerSubmitProviderAuthCodeRpc = make$29(WS_METHODS.serverSubmitProviderAuthCode, {
 	payload: ProviderAuthSubmitCodeInput,
 	success: ProviderAuthSession
 });
-const WsServerSyncPersonalCodexToCloudRpc = make$30(WS_METHODS.serverSyncPersonalCodexToCloud, {
+const WsServerSyncPersonalCodexToCloudRpc = make$29(WS_METHODS.serverSyncPersonalCodexToCloud, {
 	payload: ProviderCredentialCloudSyncInput,
 	success: ProviderCredentialCloudSyncResult
 });
-const WsServerSyncPersonalClaudeToCloudRpc = make$30(WS_METHODS.serverSyncPersonalClaudeToCloud, {
+const WsServerSyncPersonalClaudeToCloudRpc = make$29(WS_METHODS.serverSyncPersonalClaudeToCloud, {
 	payload: ProviderCredentialCloudSyncInput,
 	success: ProviderCredentialCloudSyncResult
 });
-const WsServerGetSettingsRpc = make$30(WS_METHODS.serverGetSettings, {
+const WsServerGetSettingsRpc = make$29(WS_METHODS.serverGetSettings, {
 	payload: Struct({}),
 	success: ServerSettings,
 	error: ServerSettingsError
 });
-const WsServerUpdateSettingsRpc = make$30(WS_METHODS.serverUpdateSettings, {
+const WsServerUpdateSettingsRpc = make$29(WS_METHODS.serverUpdateSettings, {
 	payload: Struct({ patch: ServerSettingsPatch }),
 	success: ServerSettings,
 	error: ServerSettingsError
 });
-const WsServerUpdateEnvironmentDisplayNameRpc = make$30(WS_METHODS.serverUpdateEnvironmentDisplayName, {
+const WsServerUpdateEnvironmentDisplayNameRpc = make$29(WS_METHODS.serverUpdateEnvironmentDisplayName, {
 	payload: ServerEnvironmentDisplayNameUpdateInput,
 	success: ServerEnvironmentDisplayNameUpdateResult
 });
-const WsServerTraceDiagnosticsRpc = make$30(WS_METHODS.serverGetTraceDiagnostics, {
+const WsServerTraceDiagnosticsRpc = make$29(WS_METHODS.serverGetTraceDiagnostics, {
 	payload: Struct({ slowSpanThresholdMs: optionalKey(NonNegativeInt) }),
 	success: ServerTraceDiagnosticsResult
 });
-const WsServerHeartbeatRpc = make$30(WS_METHODS.serverHeartbeat, {
+const WsServerHeartbeatRpc = make$29(WS_METHODS.serverHeartbeat, {
 	payload: Struct({}),
 	success: Struct({})
 });
 const PullRequestRpcError = Union([PullRequestUnavailableError, PullRequestOperationError]);
-const WsPullRequestsListRpc = make$30(WS_METHODS.pullRequestsList, {
+const WsPullRequestsListRpc = make$29(WS_METHODS.pullRequestsList, {
 	payload: PullRequestListInput,
 	success: PullRequestListResult,
 	error: PullRequestRpcError
 });
-const WsPullRequestsListStatsRpc = make$30(WS_METHODS.pullRequestsListStats, {
+const WsPullRequestsListStatsRpc = make$29(WS_METHODS.pullRequestsListStats, {
 	payload: PullRequestListStatsInput,
 	success: PullRequestListStatsResult,
 	error: PullRequestRpcError
 });
-const WsPullRequestsDetailRpc = make$30(WS_METHODS.pullRequestsDetail, {
+const WsPullRequestsDetailRpc = make$29(WS_METHODS.pullRequestsDetail, {
 	payload: PullRequestRef,
 	success: PullRequestDetail,
 	error: PullRequestRpcError
 });
-const WsPullRequestsActivityRpc = make$30(WS_METHODS.pullRequestsActivity, {
+const WsPullRequestsActivityRpc = make$29(WS_METHODS.pullRequestsActivity, {
 	payload: PullRequestRef,
 	success: PullRequestActivity,
 	error: PullRequestRpcError
 });
-const WsPullRequestsThreadCommentsRpc = make$30(WS_METHODS.pullRequestsThreadComments, {
+const WsPullRequestsThreadCommentsRpc = make$29(WS_METHODS.pullRequestsThreadComments, {
 	payload: PullRequestThreadCommentsInput,
 	success: PullRequestThreadCommentsResult,
 	error: PullRequestRpcError
 });
-const WsPullRequestsDiffFileContentsRpc = make$30(WS_METHODS.pullRequestsDiffFileContents, {
+const WsPullRequestsDiffFileContentsRpc = make$29(WS_METHODS.pullRequestsDiffFileContents, {
 	payload: PullRequestDiffFileContentsInput,
 	success: PullRequestDiffFileContentsResult,
 	error: PullRequestRpcError
 });
-const WsPullRequestsRunActionRpc = make$30(WS_METHODS.pullRequestsRunAction, {
+const WsPullRequestsRunActionRpc = make$29(WS_METHODS.pullRequestsRunAction, {
 	payload: PullRequestActionInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsUpdateRpc = make$30(WS_METHODS.pullRequestsUpdate, {
+const WsPullRequestsUpdateRpc = make$29(WS_METHODS.pullRequestsUpdate, {
 	payload: PullRequestUpdateInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsCommentRpc = make$30(WS_METHODS.pullRequestsComment, {
+const WsPullRequestsCommentRpc = make$29(WS_METHODS.pullRequestsComment, {
 	payload: PullRequestCommentInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsUpdateCommentRpc = make$30(WS_METHODS.pullRequestsUpdateComment, {
+const WsPullRequestsUpdateCommentRpc = make$29(WS_METHODS.pullRequestsUpdateComment, {
 	payload: PullRequestCommentUpdateInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsSubmitReviewRpc = make$30(WS_METHODS.pullRequestsSubmitReview, {
+const WsPullRequestsSubmitReviewRpc = make$29(WS_METHODS.pullRequestsSubmitReview, {
 	payload: PullRequestSubmitReviewInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsReplyToThreadRpc = make$30(WS_METHODS.pullRequestsReplyToThread, {
+const WsPullRequestsReplyToThreadRpc = make$29(WS_METHODS.pullRequestsReplyToThread, {
 	payload: PullRequestThreadReplyInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsSetThreadResolutionRpc = make$30(WS_METHODS.pullRequestsSetThreadResolution, {
+const WsPullRequestsSetThreadResolutionRpc = make$29(WS_METHODS.pullRequestsSetThreadResolution, {
 	payload: PullRequestThreadResolutionInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsSetReactionRpc = make$30(WS_METHODS.pullRequestsSetReaction, {
+const WsPullRequestsSetReactionRpc = make$29(WS_METHODS.pullRequestsSetReaction, {
 	payload: PullRequestReactionInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsInvalidateRpc = make$30(WS_METHODS.pullRequestsInvalidate, {
+const WsPullRequestsInvalidateRpc = make$29(WS_METHODS.pullRequestsInvalidate, {
 	payload: PullRequestInvalidateInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsReviewerCandidatesRpc = make$30(WS_METHODS.pullRequestsReviewerCandidates, {
+const WsPullRequestsReviewerCandidatesRpc = make$29(WS_METHODS.pullRequestsReviewerCandidates, {
 	payload: PullRequestRef,
 	success: PullRequestReviewerCandidateList,
 	error: PullRequestRpcError
 });
-const WsPullRequestsRequestReviewersRpc = make$30(WS_METHODS.pullRequestsRequestReviewers, {
+const WsPullRequestsRequestReviewersRpc = make$29(WS_METHODS.pullRequestsRequestReviewers, {
 	payload: PullRequestReviewerRequestInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsProjectsSearchContentsRpc = make$30(WS_METHODS.projectsSearchContents, {
+const WsProjectsSearchContentsRpc = make$29(WS_METHODS.projectsSearchContents, {
 	payload: ProjectSearchContentsInput,
 	success: ProjectSearchContentsResult,
 	error: ProjectSearchContentsError
 });
-const WsProjectsSearchEntriesRpc = make$30(WS_METHODS.projectsSearchEntries, {
+const WsProjectsSearchEntriesRpc = make$29(WS_METHODS.projectsSearchEntries, {
 	payload: ProjectSearchEntriesInput,
 	success: ProjectSearchEntriesResult,
 	error: ProjectSearchEntriesError
 });
-const WsProjectsWriteFileRpc = make$30(WS_METHODS.projectsWriteFile, {
+const WsProjectsWriteFileRpc = make$29(WS_METHODS.projectsWriteFile, {
 	payload: ProjectWriteFileInput,
 	success: ProjectWriteFileResult,
 	error: ProjectWriteFileError
 });
-const WsProjectCheckoutDeletionPreviewRpc = make$30(WS_METHODS.projectCheckoutDeletionPreview, {
+const WsProjectCheckoutDeletionPreviewRpc = make$29(WS_METHODS.projectCheckoutDeletionPreview, {
 	payload: ProjectCheckoutDeletionPreviewInput,
 	success: ProjectCheckoutDeletionPreview
 });
-const WsProjectCheckoutDeletionExecuteRpc = make$30(WS_METHODS.projectCheckoutDeletionExecute, {
+const WsProjectCheckoutDeletionExecuteRpc = make$29(WS_METHODS.projectCheckoutDeletionExecute, {
 	payload: ProjectCheckoutDeletionExecuteInput,
 	success: ProjectCheckoutDeletionResult
 });
-const WsWorkspaceReadFileRpc = make$30(WS_METHODS.workspaceReadFile, {
+const WsWorkspaceReadFileRpc = make$29(WS_METHODS.workspaceReadFile, {
 	payload: BulkTransferReadFileInput,
 	success: BulkTransferStreamEvent,
 	error: BulkTransferError,
 	stream: true
 });
-const WsWorkspaceBeginWriteFileRpc = make$30(WS_METHODS.workspaceBeginWriteFile, {
+const WsWorkspaceBeginWriteFileRpc = make$29(WS_METHODS.workspaceBeginWriteFile, {
 	payload: BulkTransferWriteBeginInput,
 	success: BulkTransferWriteBeginResult,
 	error: BulkTransferError
 });
-const WsWorkspaceWriteFileChunkRpc = make$30(WS_METHODS.workspaceWriteFileChunk, {
+const WsWorkspaceWriteFileChunkRpc = make$29(WS_METHODS.workspaceWriteFileChunk, {
 	payload: BulkTransferWriteChunkInput,
 	success: BulkTransferWriteChunkResult,
 	error: BulkTransferError
 });
-const WsWorkspaceCommitWriteFileRpc = make$30(WS_METHODS.workspaceCommitWriteFile, {
+const WsWorkspaceCommitWriteFileRpc = make$29(WS_METHODS.workspaceCommitWriteFile, {
 	payload: BulkTransferIdInput,
 	success: BulkTransferWriteCommitResult,
 	error: BulkTransferError
 });
-const WsWorkspaceCancelWriteFileRpc = make$30(WS_METHODS.workspaceCancelWriteFile, {
+const WsWorkspaceCancelWriteFileRpc = make$29(WS_METHODS.workspaceCancelWriteFile, {
 	payload: BulkTransferIdInput,
 	success: BulkTransferCancelResult,
 	error: BulkTransferError
 });
-const WsShellOpenInEditorRpc = make$30(WS_METHODS.shellOpenInEditor, {
+const WsShellOpenInEditorRpc = make$29(WS_METHODS.shellOpenInEditor, {
 	payload: OpenInEditorInput,
 	error: OpenError$1
 });
-const WsSubscribeGitStatusRpc = make$30(WS_METHODS.subscribeGitStatus, {
+const WsSubscribeGitStatusRpc = make$29(WS_METHODS.subscribeGitStatus, {
 	payload: GitStatusInput,
 	success: GitStatusStreamEvent,
 	error: GitManagerServiceError,
 	stream: true
 });
-const WsGitPullRpc = make$30(WS_METHODS.gitPull, {
+const WsGitPullRpc = make$29(WS_METHODS.gitPull, {
 	payload: GitPullInput,
 	success: GitPullResult,
 	error: GitCommandError
 });
-const WsGitRefreshStatusRpc = make$30(WS_METHODS.gitRefreshStatus, {
+const WsGitRefreshStatusRpc = make$29(WS_METHODS.gitRefreshStatus, {
 	payload: GitStatusInput,
 	success: GitStatusResult,
 	error: GitManagerServiceError
 });
-const WsGitRunStackedActionRpc = make$30(WS_METHODS.gitRunStackedAction, {
+const WsGitRunStackedActionRpc = make$29(WS_METHODS.gitRunStackedAction, {
 	payload: GitRunStackedActionInput,
 	success: GitActionProgressEvent,
 	error: GitManagerServiceError,
 	stream: true
 });
-const WsGitResolvePullRequestRpc = make$30(WS_METHODS.gitResolvePullRequest, {
+const WsGitResolvePullRequestRpc = make$29(WS_METHODS.gitResolvePullRequest, {
 	payload: GitPullRequestRefInput,
 	success: GitResolvePullRequestResult,
 	error: GitManagerServiceError
 });
-const WsGitPreparePullRequestThreadRpc = make$30(WS_METHODS.gitPreparePullRequestThread, {
+const WsGitPreparePullRequestThreadRpc = make$29(WS_METHODS.gitPreparePullRequestThread, {
 	payload: GitPreparePullRequestThreadInput,
 	success: GitPreparePullRequestThreadResult,
 	error: GitManagerServiceError
 });
-const WsGitListBranchesRpc = make$30(WS_METHODS.gitListBranches, {
+const WsGitListBranchesRpc = make$29(WS_METHODS.gitListBranches, {
 	payload: GitListBranchesInput,
 	success: GitListBranchesResult,
 	error: GitCommandError
 });
-const WsVcsListRefsRpc = make$30(WS_METHODS.vcsListRefs, {
+const WsVcsListRefsRpc = make$29(WS_METHODS.vcsListRefs, {
 	payload: VcsListRefsInput,
 	success: VcsListRefsResult,
 	error: GitCommandError
 });
-const WsVcsRefreshStatusRpc = make$30(WS_METHODS.vcsRefreshStatus, {
+const WsVcsRefreshStatusRpc = make$29(WS_METHODS.vcsRefreshStatus, {
 	payload: GitStatusInput,
 	success: VcsStatusResult,
 	error: GitManagerServiceError
 });
-const WsSubscribeVcsStatusRpc = make$30(WS_METHODS.subscribeVcsStatus, {
+const WsSubscribeVcsStatusRpc = make$29(WS_METHODS.subscribeVcsStatus, {
 	payload: GitStatusInput,
 	success: VcsStatusStreamEvent,
 	error: GitManagerServiceError,
 	stream: true
 });
-const WsVcsPullRpc = make$30(WS_METHODS.vcsPull, {
+const WsVcsPullRpc = make$29(WS_METHODS.vcsPull, {
 	payload: VcsPullInput,
 	success: VcsPullResult,
 	error: GitCommandError
 });
-const WsVcsCreateWorktreeRpc = make$30(WS_METHODS.vcsCreateWorktree, {
+const WsVcsCreateWorktreeRpc = make$29(WS_METHODS.vcsCreateWorktree, {
 	payload: VcsCreateWorktreeInput,
 	success: VcsCreateWorktreeResult,
 	error: Union([GitCommandError, VcsUnsupportedRequestError])
 });
-const WsVcsRemoveWorktreeRpc = make$30(WS_METHODS.vcsRemoveWorktree, {
+const WsVcsRemoveWorktreeRpc = make$29(WS_METHODS.vcsRemoveWorktree, {
 	payload: GitRemoveWorktreeInput,
 	error: GitCommandError
 });
-const WsVcsCreateRefRpc = make$30(WS_METHODS.vcsCreateRef, {
+const WsVcsCreateRefRpc = make$29(WS_METHODS.vcsCreateRef, {
 	payload: VcsCreateRefInput,
 	success: VcsCreateRefResult,
 	error: GitCommandError
 });
-const WsVcsSwitchRefRpc = make$30(WS_METHODS.vcsSwitchRef, {
+const WsVcsSwitchRefRpc = make$29(WS_METHODS.vcsSwitchRef, {
 	payload: VcsSwitchRefInput,
 	success: VcsSwitchRefResult,
 	error: GitCommandError
 });
-const WsVcsInitRpc = make$30(WS_METHODS.vcsInit, {
+const WsVcsInitRpc = make$29(WS_METHODS.vcsInit, {
 	payload: VcsInitInput,
 	error: Union([GitCommandError, VcsUnsupportedRequestError])
 });
-const WsGitCreateWorktreeRpc = make$30(WS_METHODS.gitCreateWorktree, {
+const WsGitCreateWorktreeRpc = make$29(WS_METHODS.gitCreateWorktree, {
 	payload: GitCreateWorktreeInput,
 	success: GitCreateWorktreeResult,
 	error: GitCommandError
 });
-const WsGitRemoveWorktreeRpc = make$30(WS_METHODS.gitRemoveWorktree, {
+const WsGitRemoveWorktreeRpc = make$29(WS_METHODS.gitRemoveWorktree, {
 	payload: GitRemoveWorktreeInput,
 	error: GitCommandError
 });
-const WsGitCreateBranchRpc = make$30(WS_METHODS.gitCreateBranch, {
+const WsGitCreateBranchRpc = make$29(WS_METHODS.gitCreateBranch, {
 	payload: GitCreateBranchInput,
 	success: GitCreateBranchResult,
 	error: GitCommandError
 });
-const WsGitCheckoutRpc = make$30(WS_METHODS.gitCheckout, {
+const WsGitCheckoutRpc = make$29(WS_METHODS.gitCheckout, {
 	payload: GitCheckoutInput,
 	success: GitCheckoutResult,
 	error: GitCommandError
 });
-const WsGitInitRpc = make$30(WS_METHODS.gitInit, {
+const WsGitInitRpc = make$29(WS_METHODS.gitInit, {
 	payload: GitInitInput,
 	error: GitCommandError
 });
@@ -26390,7 +26411,7 @@ const WsGitInitRpc = make$30(WS_METHODS.gitInit, {
 * The git half of a review: the branch range and the uncommitted work. The
 * per-turn diffs beside it arrive through `orchestration.getTurnDiff`.
 */
-const WsReviewGetDiffPreviewRpc = make$30(WS_METHODS.reviewGetDiffPreview, {
+const WsReviewGetDiffPreviewRpc = make$29(WS_METHODS.reviewGetDiffPreview, {
 	payload: ReviewDiffPreviewInput,
 	success: ReviewDiffPreviewResult,
 	error: Union([ReviewDiffPreviewError])
@@ -26400,12 +26421,12 @@ const WsReviewGetDiffPreviewRpc = make$30(WS_METHODS.reviewGetDiffPreview, {
 * chunked bulk-transfer stream. A viewer wants the text once; a transfer wants
 * offsets and checksums.
 */
-const WsProjectsReadFileRpc = make$30(WS_METHODS.projectsReadFile, {
+const WsProjectsReadFileRpc = make$29(WS_METHODS.projectsReadFile, {
 	payload: ProjectReadFileInput,
 	success: ProjectReadFileResult,
 	error: Union([ProjectReadFileError])
 });
-const WsFilesystemBrowseRpc = make$30(WS_METHODS.filesystemBrowse, {
+const WsFilesystemBrowseRpc = make$29(WS_METHODS.filesystemBrowse, {
 	payload: FilesystemBrowseInput,
 	success: FilesystemBrowseResult,
 	error: Union([FilesystemBrowseError])
@@ -26415,87 +26436,87 @@ const WsFilesystemBrowseRpc = make$30(WS_METHODS.filesystemBrowse, {
 * Routed through the server because the phone keeps only the Forge-minted
 * session token, never a CMMD one.
 */
-const WsCloudListRuntimesRpc = make$30(WS_METHODS.cloudListRuntimes, {
+const WsCloudListRuntimesRpc = make$29(WS_METHODS.cloudListRuntimes, {
 	payload: CloudRuntimeListInput,
 	success: CloudRuntimeListResult,
 	error: Union([CloudRuntimeListError])
 });
-const WsTerminalOpenRpc = make$30(WS_METHODS.terminalOpen, {
+const WsTerminalOpenRpc = make$29(WS_METHODS.terminalOpen, {
 	payload: TerminalOpenInput,
 	success: TerminalSessionSnapshot,
 	error: TerminalError
 });
-const WsTerminalAttachRpc = make$30(WS_METHODS.terminalAttach, {
+const WsTerminalAttachRpc = make$29(WS_METHODS.terminalAttach, {
 	payload: TerminalAttachInput,
 	success: TerminalAttachStreamEvent,
 	error: TerminalError,
 	stream: true
 });
-const WsTerminalWriteRpc = make$30(WS_METHODS.terminalWrite, {
+const WsTerminalWriteRpc = make$29(WS_METHODS.terminalWrite, {
 	payload: TerminalWriteRequest,
 	success: TerminalControlAck,
 	error: TerminalError
 });
-const WsTerminalResizeRpc = make$30(WS_METHODS.terminalResize, {
+const WsTerminalResizeRpc = make$29(WS_METHODS.terminalResize, {
 	payload: TerminalResizeRequest,
 	success: TerminalControlAck,
 	error: TerminalError
 });
-const WsTerminalSignalRpc = make$30(WS_METHODS.terminalSignal, {
+const WsTerminalSignalRpc = make$29(WS_METHODS.terminalSignal, {
 	payload: TerminalSignalRequest,
 	success: TerminalControlAck,
 	error: TerminalError
 });
-const WsTerminalClearRpc = make$30(WS_METHODS.terminalClear, {
+const WsTerminalClearRpc = make$29(WS_METHODS.terminalClear, {
 	payload: TerminalClearRequest,
 	success: TerminalControlAck,
 	error: TerminalError
 });
-const WsTerminalRestartRpc = make$30(WS_METHODS.terminalRestart, {
+const WsTerminalRestartRpc = make$29(WS_METHODS.terminalRestart, {
 	payload: TerminalRestartRequest,
 	success: TerminalRestartResult,
 	error: TerminalError
 });
-const WsTerminalCloseRpc = make$30(WS_METHODS.terminalClose, {
+const WsTerminalCloseRpc = make$29(WS_METHODS.terminalClose, {
 	payload: TerminalCloseRequest,
 	success: TerminalControlAck,
 	error: TerminalError
 });
-const WsBrowserOpenSessionRpc = make$30(WS_METHODS.browserOpenSession, {
+const WsBrowserOpenSessionRpc = make$29(WS_METHODS.browserOpenSession, {
 	payload: BrowserOpenSessionInput,
 	success: BrowserSessionSnapshot,
 	error: BrowserError
 });
-const WsBrowserListSessionsRpc = make$30(WS_METHODS.browserListSessions, {
+const WsBrowserListSessionsRpc = make$29(WS_METHODS.browserListSessions, {
 	payload: BrowserListSessionsInput,
 	success: ArraySchema(BrowserSessionSnapshot),
 	error: BrowserError
 });
-const WsBrowserCloseSessionRpc = make$30(WS_METHODS.browserCloseSession, {
+const WsBrowserCloseSessionRpc = make$29(WS_METHODS.browserCloseSession, {
 	payload: BrowserCloseSessionInput,
 	error: BrowserError
 });
-const WsBrowserGetSessionRpc = make$30(WS_METHODS.browserGetSession, {
+const WsBrowserGetSessionRpc = make$29(WS_METHODS.browserGetSession, {
 	payload: BrowserGetSessionInput,
 	success: NullOr(BrowserSessionSnapshot),
 	error: BrowserError
 });
-const WsBrowserCommandRpc = make$30(WS_METHODS.browserCommand, {
+const WsBrowserCommandRpc = make$29(WS_METHODS.browserCommand, {
 	payload: BrowserCommandInput,
 	success: BrowserCommandResult,
 	error: BrowserError
 });
-const WsBrowserClearBrowsingDataRpc = make$30(WS_METHODS.browserClearBrowsingData, {
+const WsBrowserClearBrowsingDataRpc = make$29(WS_METHODS.browserClearBrowsingData, {
 	payload: BrowserClearBrowsingDataInput,
 	success: BrowserClearBrowsingDataResult,
 	error: BrowserError
 });
-const WsBrowserAttachDisplayRpc = make$30(WS_METHODS.browserAttachDisplay, {
+const WsBrowserAttachDisplayRpc = make$29(WS_METHODS.browserAttachDisplay, {
 	payload: BrowserDisplayAttachInput,
 	success: BrowserDisplayAttachResult,
 	error: BrowserError
 });
-const WsBrowserAddDisplayIceCandidateRpc = make$30(WS_METHODS.browserAddDisplayIceCandidate, {
+const WsBrowserAddDisplayIceCandidateRpc = make$29(WS_METHODS.browserAddDisplayIceCandidate, {
 	payload: BrowserDisplayIceCandidateInput,
 	success: Struct({}),
 	error: BrowserError
@@ -26507,87 +26528,87 @@ const WsBrowserAddDisplayIceCandidateRpc = make$30(WS_METHODS.browserAddDisplayI
 * page: it can click a DOM element but cannot touch the dock, a file manager,
 * or anything else outside Chromium. This one lands on the display itself.
 */
-const WsComputerInputRpc = make$30(WS_METHODS.computerInput, {
+const WsComputerInputRpc = make$29(WS_METHODS.computerInput, {
 	payload: ComputerInputInput,
 	success: ComputerInputResult,
 	error: ComputerError
 });
-const WsDevTunnelRegisterRpc = make$30(WS_METHODS.devTunnelRegister, {
+const WsDevTunnelRegisterRpc = make$29(WS_METHODS.devTunnelRegister, {
 	payload: DevTunnelRegisterInput,
 	success: DevTunnelRecord,
 	error: DevTunnelError
 });
-const WsDevTunnelUnregisterRpc = make$30(WS_METHODS.devTunnelUnregister, {
+const WsDevTunnelUnregisterRpc = make$29(WS_METHODS.devTunnelUnregister, {
 	payload: DevTunnelUnregisterInput,
 	error: DevTunnelError
 });
-const WsDevTunnelListRpc = make$30(WS_METHODS.devTunnelList, {
+const WsDevTunnelListRpc = make$29(WS_METHODS.devTunnelList, {
 	payload: DevTunnelListInput,
 	success: ArraySchema(DevTunnelRecord),
 	error: DevTunnelError
 });
-const WsThreadDevRuntimeGetRpc = make$30(WS_METHODS.threadDevRuntimeGet, {
+const WsThreadDevRuntimeGetRpc = make$29(WS_METHODS.threadDevRuntimeGet, {
 	payload: ThreadDevRuntimeGetInput,
 	success: NullOr(ThreadDevRuntimeRecord),
 	error: ThreadDevRuntimeError
 });
-const WsThreadDevRuntimeAllocatePortRpc = make$30(WS_METHODS.threadDevRuntimeAllocatePort, {
+const WsThreadDevRuntimeAllocatePortRpc = make$29(WS_METHODS.threadDevRuntimeAllocatePort, {
 	payload: ThreadDevRuntimeAllocatePortInput,
 	success: ThreadDevRuntimeRecord,
 	error: ThreadDevRuntimeError
 });
-const WsThreadDevRuntimeReleaseRpc = make$30(WS_METHODS.threadDevRuntimeRelease, {
+const WsThreadDevRuntimeReleaseRpc = make$29(WS_METHODS.threadDevRuntimeRelease, {
 	payload: ThreadDevRuntimeReleaseInput,
 	error: ThreadDevRuntimeError
 });
-const WsWorkspaceEnvironmentPreflightRpc = make$30(WS_METHODS.workspaceEnvironmentPreflight, {
+const WsWorkspaceEnvironmentPreflightRpc = make$29(WS_METHODS.workspaceEnvironmentPreflight, {
 	payload: WorkspaceEnvironmentPreflightInput,
 	success: WorkspaceEnvironmentPreflightReport,
 	error: WorkspaceEnvironmentError
 });
-const WsWorkspaceEnsureScratchRpc = make$30(WS_METHODS.workspaceEnsureScratch, {
+const WsWorkspaceEnsureScratchRpc = make$29(WS_METHODS.workspaceEnsureScratch, {
 	payload: WorkspaceEnsureScratchInput,
 	success: WorkspaceEnsureScratchResult,
 	error: WorkspaceEnvironmentError
 });
-const WsOrchestrationDispatchCommandRpc = make$30(ORCHESTRATION_WS_METHODS.dispatchCommand, {
+const WsOrchestrationDispatchCommandRpc = make$29(ORCHESTRATION_WS_METHODS.dispatchCommand, {
 	payload: ClientOrchestrationCommand,
 	success: OrchestrationRpcSchemas.dispatchCommand.output,
 	error: OrchestrationDispatchCommandError
 });
-const WsOrchestrationGetTurnDiffRpc = make$30(ORCHESTRATION_WS_METHODS.getTurnDiff, {
+const WsOrchestrationGetTurnDiffRpc = make$29(ORCHESTRATION_WS_METHODS.getTurnDiff, {
 	payload: OrchestrationGetTurnDiffInput,
 	success: OrchestrationRpcSchemas.getTurnDiff.output,
 	error: OrchestrationGetTurnDiffError
 });
-const WsOrchestrationGetFullThreadDiffRpc = make$30(ORCHESTRATION_WS_METHODS.getFullThreadDiff, {
+const WsOrchestrationGetFullThreadDiffRpc = make$29(ORCHESTRATION_WS_METHODS.getFullThreadDiff, {
 	payload: OrchestrationGetFullThreadDiffInput,
 	success: OrchestrationRpcSchemas.getFullThreadDiff.output,
 	error: OrchestrationGetFullThreadDiffError
 });
-const WsOrchestrationStreamTurnDiffRpc = make$30(ORCHESTRATION_WS_METHODS.streamTurnDiff, {
+const WsOrchestrationStreamTurnDiffRpc = make$29(ORCHESTRATION_WS_METHODS.streamTurnDiff, {
 	payload: OrchestrationGetTurnDiffInput,
 	success: BulkTransferStreamEvent,
 	error: Union([OrchestrationGetTurnDiffError, BulkTransferError]),
 	stream: true
 });
-const WsOrchestrationStreamFullThreadDiffRpc = make$30(ORCHESTRATION_WS_METHODS.streamFullThreadDiff, {
+const WsOrchestrationStreamFullThreadDiffRpc = make$29(ORCHESTRATION_WS_METHODS.streamFullThreadDiff, {
 	payload: OrchestrationGetFullThreadDiffInput,
 	success: BulkTransferStreamEvent,
 	error: Union([OrchestrationGetFullThreadDiffError, BulkTransferError]),
 	stream: true
 });
-const WsOrchestrationReplayEventsRpc = make$30(ORCHESTRATION_WS_METHODS.replayEvents, {
+const WsOrchestrationReplayEventsRpc = make$29(ORCHESTRATION_WS_METHODS.replayEvents, {
 	payload: OrchestrationReplayEventsInput,
 	success: OrchestrationRpcSchemas.replayEvents.output,
 	error: OrchestrationReplayEventsError
 });
-const WsOrchestrationGetArchivedShellSnapshotRpc = make$30(ORCHESTRATION_WS_METHODS.getArchivedShellSnapshot, {
+const WsOrchestrationGetArchivedShellSnapshotRpc = make$29(ORCHESTRATION_WS_METHODS.getArchivedShellSnapshot, {
 	payload: OrchestrationRpcSchemas.getArchivedShellSnapshot.input,
 	success: OrchestrationRpcSchemas.getArchivedShellSnapshot.output,
 	error: OrchestrationGetSnapshotError
 });
-const WsOrchestrationSearchThreadsRpc = make$30(ORCHESTRATION_WS_METHODS.searchThreads, {
+const WsOrchestrationSearchThreadsRpc = make$29(ORCHESTRATION_WS_METHODS.searchThreads, {
 	payload: OrchestrationSearchThreadsInput,
 	success: OrchestrationRpcSchemas.searchThreads.output,
 	error: OrchestrationSearchThreadsError
@@ -26598,7 +26619,7 @@ const WsOrchestrationSearchThreadsRpc = make$30(ORCHESTRATION_WS_METHODS.searchT
 * route and `subscribeThread`'s fallback snapshot serve, over the RPC socket
 * instead.
 */
-const WsOrchestrationGetThreadDetailPageRpc = make$30(ORCHESTRATION_WS_METHODS.getThreadDetailPage, {
+const WsOrchestrationGetThreadDetailPageRpc = make$29(ORCHESTRATION_WS_METHODS.getThreadDetailPage, {
 	payload: OrchestrationRpcSchemas.getThreadDetailPage.input,
 	success: OrchestrationRpcSchemas.getThreadDetailPage.output,
 	error: OrchestrationGetSnapshotError
@@ -26611,29 +26632,29 @@ const WsOrchestrationGetThreadDetailPageRpc = make$30(ORCHESTRATION_WS_METHODS.g
 * also be authorized, and a repository the caller cannot reach is a failure
 * here rather than a clone that dies half way.
 */
-const WsSourceControlLookupRepositoryRpc = make$30(WS_METHODS.sourceControlLookupRepository, {
+const WsSourceControlLookupRepositoryRpc = make$29(WS_METHODS.sourceControlLookupRepository, {
 	payload: SourceControlRepositoryLookupInput,
 	success: SourceControlRepositoryInfo,
 	error: SourceControlRepositoryError
 });
-const WsSourceControlCloneRepositoryRpc = make$30(WS_METHODS.sourceControlCloneRepository, {
+const WsSourceControlCloneRepositoryRpc = make$29(WS_METHODS.sourceControlCloneRepository, {
 	payload: SourceControlCloneRepositoryInput,
 	success: SourceControlCloneRepositoryResult,
 	error: SourceControlRepositoryError
 });
-const WsOrchestrationSubscribeShellRpc = make$30(ORCHESTRATION_WS_METHODS.subscribeShell, {
+const WsOrchestrationSubscribeShellRpc = make$29(ORCHESTRATION_WS_METHODS.subscribeShell, {
 	payload: OrchestrationRpcSchemas.subscribeShell.input,
 	success: OrchestrationRpcSchemas.subscribeShell.output,
 	error: OrchestrationGetSnapshotError,
 	stream: true
 });
-const WsOrchestrationSubscribeThreadRpc = make$30(ORCHESTRATION_WS_METHODS.subscribeThread, {
+const WsOrchestrationSubscribeThreadRpc = make$29(ORCHESTRATION_WS_METHODS.subscribeThread, {
 	payload: OrchestrationRpcSchemas.subscribeThread.input,
 	success: OrchestrationRpcSchemas.subscribeThread.output,
 	error: OrchestrationGetSnapshotError,
 	stream: true
 });
-const WsSubscribeTerminalEventsRpc = make$30(WS_METHODS.subscribeTerminalEvents, {
+const WsSubscribeTerminalEventsRpc = make$29(WS_METHODS.subscribeTerminalEvents, {
 	payload: Struct({}),
 	success: TerminalEvent,
 	stream: true
@@ -26654,65 +26675,65 @@ const WsSubscribeTerminalEventsRpc = make$30(WS_METHODS.subscribeTerminalEvents,
 * The client's activity report, accepted and dropped. See
 * packages/contracts/src/clientActivityCompat.ts for why there is no answer.
 */
-const WsServerReportClientActivityRpc = make$30(WS_METHODS.serverReportClientActivity, { payload: ClientActivityReportInput });
-const WsServerDiscoverSourceControlRpc = make$30(WS_METHODS.serverDiscoverSourceControl, {
+const WsServerReportClientActivityRpc = make$29(WS_METHODS.serverReportClientActivity, { payload: ClientActivityReportInput });
+const WsServerDiscoverSourceControlRpc = make$29(WS_METHODS.serverDiscoverSourceControl, {
 	payload: Struct({}),
 	success: SourceControlDiscoveryResult
 });
-const WsProjectsListEntriesRpc = make$30(WS_METHODS.projectsListEntries, {
+const WsProjectsListEntriesRpc = make$29(WS_METHODS.projectsListEntries, {
 	payload: ProjectListEntriesInput,
 	success: ProjectListEntriesResult,
 	error: ProjectListEntriesError
 });
-const WsSubscribeTerminalMetadataRpc = make$30(WS_METHODS.subscribeTerminalMetadata, {
+const WsSubscribeTerminalMetadataRpc = make$29(WS_METHODS.subscribeTerminalMetadata, {
 	payload: Struct({}),
 	success: TerminalMetadataStreamEvent,
 	stream: true
 });
-const WsSubscribeBrowserEventsRpc = make$30(WS_METHODS.subscribeBrowserEvents, {
+const WsSubscribeBrowserEventsRpc = make$29(WS_METHODS.subscribeBrowserEvents, {
 	payload: BrowserSubscribeInput,
 	success: BrowserStreamEvent,
 	error: BrowserError,
 	stream: true
 });
-const WsSubscribeServerConfigRpc = make$30(WS_METHODS.subscribeServerConfig, {
+const WsSubscribeServerConfigRpc = make$29(WS_METHODS.subscribeServerConfig, {
 	payload: Struct({}),
 	success: ServerConfigStreamEvent,
 	error: Union([KeybindingsConfigError, ServerSettingsError]),
 	stream: true
 });
-const WsSubscribeServerLifecycleRpc = make$30(WS_METHODS.subscribeServerLifecycle, {
+const WsSubscribeServerLifecycleRpc = make$29(WS_METHODS.subscribeServerLifecycle, {
 	payload: Struct({}),
 	success: ServerLifecycleStreamEvent,
 	stream: true
 });
-const WsSubscribeAuthAccessRpc = make$30(WS_METHODS.subscribeAuthAccess, {
+const WsSubscribeAuthAccessRpc = make$29(WS_METHODS.subscribeAuthAccess, {
 	payload: Struct({}),
 	success: AuthAccessStreamEvent,
 	stream: true
 });
-const WsSubscribeWorkspaceReadinessRpc = make$30(WS_METHODS.subscribeWorkspaceReadiness, {
+const WsSubscribeWorkspaceReadinessRpc = make$29(WS_METHODS.subscribeWorkspaceReadiness, {
 	payload: WorkspaceReadinessSubscribeInput,
 	success: PhaseEvent,
 	error: WorkspaceReadinessError,
 	stream: true
 });
-const WsRpcGroup = make$29(WsServerGetConfigRpc, WsServerRefreshProvidersRpc, WsServerStartProviderAuthRpc, WsServerRepairProviderAuthRuntimeRpc, WsServerDisconnectProviderAuthRpc, WsServerGetProviderAuthSessionRpc, WsServerCancelProviderAuthRpc, WsServerSubmitProviderAuthCodeRpc, WsServerSyncPersonalCodexToCloudRpc, WsServerSyncPersonalClaudeToCloudRpc, WsServerUpsertKeybindingRpc, WsServerRemoveKeybindingRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerUpdateEnvironmentDisplayNameRpc, WsServerTraceDiagnosticsRpc, WsServerHeartbeatRpc, make$30(WS_METHODS.usageGetSummary, {
+const WsRpcGroup = make$28(WsServerGetConfigRpc, WsServerRefreshProvidersRpc, WsServerStartProviderAuthRpc, WsServerRepairProviderAuthRuntimeRpc, WsServerDisconnectProviderAuthRpc, WsServerGetProviderAuthSessionRpc, WsServerCancelProviderAuthRpc, WsServerSubmitProviderAuthCodeRpc, WsServerSyncPersonalCodexToCloudRpc, WsServerSyncPersonalClaudeToCloudRpc, WsServerUpsertKeybindingRpc, WsServerRemoveKeybindingRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerUpdateEnvironmentDisplayNameRpc, WsServerTraceDiagnosticsRpc, WsServerHeartbeatRpc, make$29(WS_METHODS.usageGetSummary, {
 	payload: UsageSummaryInput,
 	success: UsageSummary,
 	error: UsageReadError
-}), WsPullRequestsListRpc, WsPullRequestsListStatsRpc, WsPullRequestsDetailRpc, WsPullRequestsActivityRpc, WsPullRequestsThreadCommentsRpc, WsPullRequestsDiffFileContentsRpc, WsPullRequestsRunActionRpc, WsPullRequestsUpdateRpc, WsPullRequestsCommentRpc, WsPullRequestsUpdateCommentRpc, WsPullRequestsSubmitReviewRpc, WsPullRequestsReplyToThreadRpc, WsPullRequestsSetThreadResolutionRpc, WsPullRequestsSetReactionRpc, WsPullRequestsInvalidateRpc, WsPullRequestsReviewerCandidatesRpc, WsPullRequestsRequestReviewersRpc, WsProjectsSearchContentsRpc, WsProjectsSearchEntriesRpc, WsProjectsWriteFileRpc, WsProjectCheckoutDeletionPreviewRpc, WsProjectCheckoutDeletionExecuteRpc, WsWorkspaceReadFileRpc, WsWorkspaceBeginWriteFileRpc, WsWorkspaceWriteFileChunkRpc, WsWorkspaceCommitWriteFileRpc, WsWorkspaceCancelWriteFileRpc, WsShellOpenInEditorRpc, WsSubscribeGitStatusRpc, WsGitPullRpc, WsGitRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitListBranchesRpc, WsVcsListRefsRpc, WsVcsRefreshStatusRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsGitCreateWorktreeRpc, WsGitRemoveWorktreeRpc, WsGitCreateBranchRpc, WsGitCheckoutRpc, WsGitInitRpc, WsFilesystemBrowseRpc, WsProjectsReadFileRpc, WsReviewGetDiffPreviewRpc, WsCloudListRuntimesRpc, WsTerminalOpenRpc, WsTerminalAttachRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalSignalRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsBrowserOpenSessionRpc, WsBrowserListSessionsRpc, WsBrowserCloseSessionRpc, WsBrowserGetSessionRpc, WsBrowserCommandRpc, WsBrowserClearBrowsingDataRpc, WsBrowserAttachDisplayRpc, WsBrowserAddDisplayIceCandidateRpc, WsComputerInputRpc, WsDevTunnelRegisterRpc, WsDevTunnelUnregisterRpc, WsDevTunnelListRpc, WsThreadDevRuntimeGetRpc, WsThreadDevRuntimeAllocatePortRpc, WsThreadDevRuntimeReleaseRpc, WsWorkspaceEnvironmentPreflightRpc, WsWorkspaceEnsureScratchRpc, WsSubscribeTerminalEventsRpc, WsSubscribeTerminalMetadataRpc, WsProjectsListEntriesRpc, WsServerDiscoverSourceControlRpc, WsServerReportClientActivityRpc, WsSubscribeBrowserEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsSubscribeWorkspaceReadinessRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationStreamTurnDiffRpc, WsOrchestrationStreamFullThreadDiffRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationGetArchivedShellSnapshotRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, make$30(WS_METHODS.assetsCreateUrl, {
+}), WsPullRequestsListRpc, WsPullRequestsListStatsRpc, WsPullRequestsDetailRpc, WsPullRequestsActivityRpc, WsPullRequestsThreadCommentsRpc, WsPullRequestsDiffFileContentsRpc, WsPullRequestsRunActionRpc, WsPullRequestsUpdateRpc, WsPullRequestsCommentRpc, WsPullRequestsUpdateCommentRpc, WsPullRequestsSubmitReviewRpc, WsPullRequestsReplyToThreadRpc, WsPullRequestsSetThreadResolutionRpc, WsPullRequestsSetReactionRpc, WsPullRequestsInvalidateRpc, WsPullRequestsReviewerCandidatesRpc, WsPullRequestsRequestReviewersRpc, WsProjectsSearchContentsRpc, WsProjectsSearchEntriesRpc, WsProjectsWriteFileRpc, WsProjectCheckoutDeletionPreviewRpc, WsProjectCheckoutDeletionExecuteRpc, WsWorkspaceReadFileRpc, WsWorkspaceBeginWriteFileRpc, WsWorkspaceWriteFileChunkRpc, WsWorkspaceCommitWriteFileRpc, WsWorkspaceCancelWriteFileRpc, WsShellOpenInEditorRpc, WsSubscribeGitStatusRpc, WsGitPullRpc, WsGitRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitListBranchesRpc, WsVcsListRefsRpc, WsVcsRefreshStatusRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsGitCreateWorktreeRpc, WsGitRemoveWorktreeRpc, WsGitCreateBranchRpc, WsGitCheckoutRpc, WsGitInitRpc, WsFilesystemBrowseRpc, WsProjectsReadFileRpc, WsReviewGetDiffPreviewRpc, WsCloudListRuntimesRpc, WsTerminalOpenRpc, WsTerminalAttachRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalSignalRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsBrowserOpenSessionRpc, WsBrowserListSessionsRpc, WsBrowserCloseSessionRpc, WsBrowserGetSessionRpc, WsBrowserCommandRpc, WsBrowserClearBrowsingDataRpc, WsBrowserAttachDisplayRpc, WsBrowserAddDisplayIceCandidateRpc, WsComputerInputRpc, WsDevTunnelRegisterRpc, WsDevTunnelUnregisterRpc, WsDevTunnelListRpc, WsThreadDevRuntimeGetRpc, WsThreadDevRuntimeAllocatePortRpc, WsThreadDevRuntimeReleaseRpc, WsWorkspaceEnvironmentPreflightRpc, WsWorkspaceEnsureScratchRpc, WsSubscribeTerminalEventsRpc, WsSubscribeTerminalMetadataRpc, WsProjectsListEntriesRpc, WsServerDiscoverSourceControlRpc, WsServerReportClientActivityRpc, WsSubscribeBrowserEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsSubscribeWorkspaceReadinessRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationStreamTurnDiffRpc, WsOrchestrationStreamFullThreadDiffRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationGetArchivedShellSnapshotRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, make$29(WS_METHODS.assetsCreateUrl, {
 	payload: AssetsRpcSchemas.createUrl.input,
 	success: AssetsRpcSchemas.createUrl.output,
 	error: AssetAccessError
-}), make$30(WS_METHODS.attachmentsCreateUploadUrl, {
+}), make$29(WS_METHODS.attachmentsCreateUploadUrl, {
 	payload: AttachmentCreateUploadUrlInput,
 	success: AttachmentCreateUploadUrlResult,
 	error: AttachmentUploadSigningKeyError
-}), make$30(WS_METHODS.attachmentsDelete, {
+}), make$29(WS_METHODS.attachmentsDelete, {
 	payload: AttachmentDeleteInput,
 	success: Void
-}), make$30(WS_METHODS.providerUploadFeedback, {
+}), make$29(WS_METHODS.providerUploadFeedback, {
 	payload: ProviderUploadFeedbackInput,
 	success: ProviderUploadFeedbackResult,
 	error: ProviderUploadFeedbackError
@@ -34340,7 +34361,7 @@ function parse$5(input) {
 const FULL_PATH_REGEXP = /^https?:\/\/.*?\//;
 const OPTIONAL_PARAM_REGEXP = /(\/:[^/()]*?)\?(\/?)/;
 /** @internal */
-const make$28 = (options = {}) => new RouterImpl(options);
+const make$27 = (options = {}) => new RouterImpl(options);
 var RouterImpl = class {
 	constructor(options = {}) {
 		this.options = {
@@ -34859,7 +34880,7 @@ const httpMethods = [
 * @since 1.0.0
 * @category constructors
 */
-const make$27 = make$28;
+const make$26 = make$27;
 //#endregion
 //#region ../../node_modules/.bun/effect@4.0.0-beta.51/node_modules/effect/dist/unstable/http/HttpRouter.js
 /**
@@ -34875,8 +34896,8 @@ const HttpRouter = /* @__PURE__ */ Service$1("effect/http/HttpRouter");
 * @since 4.0.0
 * @category HttpRouter
 */
-const make$26 = /* @__PURE__ */ gen(function* () {
-	const router = make$27(yield* RouterConfig);
+const make$25 = /* @__PURE__ */ gen(function* () {
+	const router = make$26(yield* RouterConfig);
 	const middleware = /* @__PURE__ */ new Set();
 	const addAll = (routes) => contextWith((context) => {
 		const middleware = getMiddleware(context);
@@ -35006,7 +35027,7 @@ const add$1 = (method, path, handler, options) => use((router) => router.add(met
 * @since 4.0.0
 * @category HttpRouter
 */
-const layer$5 = /* @__PURE__ */ effect(HttpRouter)(make$26);
+const layer$5 = /* @__PURE__ */ effect(HttpRouter)(make$25);
 const RouteTypeId = "~effect/http/HttpRouter/Route";
 const makeRoute = (options) => ({
 	...options,
@@ -66020,7 +66041,7 @@ function normalizeNumberish(value) {
 }
 //#endregion
 //#region package.json
-var version$1 = "0.13.94";
+var version$1 = "0.13.96";
 //#endregion
 //#region src/sentry.ts
 const SERVER_APP_NAME = "forge-server";
@@ -70867,7 +70888,7 @@ const storeAttachmentUpload = fn$1("AttachmentUpload.store")(function* (claims,
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path$2;
 	let receivedBytes = 0;
-	const bodyStream = body instanceof Uint8Array ? make$43(body) : body;
+	const bodyStream = body instanceof Uint8Array ? make$42(body) : body;
 	return yield* gen(function* () {
 		yield* fileSystem.makeDirectory(path.dirname(finalPath), { recursive: true });
 		yield* run$2(bodyStream.pipe(takeWhile((chunk) => {
@@ -76816,7 +76837,7 @@ let clientIdCounter = 0;
 * @since 4.0.0
 * @category client
 */
-const make$25 = /* @__PURE__ */ fnUntraced(function* (group, options) {
+const make$24 = /* @__PURE__ */ fnUntraced(function* (group, options) {
 	const clientId = clientIdCounter++;
 	const { run, send, supportsAck, supportsTransferables } = yield* Protocol$1;
 	const entries = /* @__PURE__ */ new Map();
@@ -76960,7 +76981,7 @@ const makeNoSerialization = /* @__PURE__ */ fnUntraced(function* (group, options
 	const services = yield* context();
 	const scope = get$3(services, Scope$1);
 	const trackFiber = runIn(forkUnsafe(scope, "parallel"));
-	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* make$44(concurrency);
+	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* make$43(concurrency);
 	const clients = /* @__PURE__ */ new Map();
 	let isShutdown = false;
 	const shutdownLatch = makeUnsafe$7(false);
@@ -77191,10 +77212,10 @@ const applyMiddleware = (context, handler, options) => {
 * @since 4.0.0
 * @category server
 */
-const make$24 = /* @__PURE__ */ fnUntraced(function* (group, options) {
+const make$23 = /* @__PURE__ */ fnUntraced(function* (group, options) {
 	const { disconnects, end, run, send, supportsAck, supportsSpanPropagation, supportsTransferables } = yield* Protocol;
 	const services = yield* context();
-	const scope = yield* make$37();
+	const scope = yield* make$36();
 	const server = yield* makeNoSerialization(group, {
 		...options,
 		disableClientAcks: !supportsAck,
@@ -77363,12 +77384,12 @@ const makeProtocolWithHttpEffectWebsocket = /* @__PURE__ */ gen(function* () {
 */
 const toHttpEffectWebsocket = /* @__PURE__ */ fnUntraced(function* (group, options) {
 	const { httpEffect, protocol } = yield* makeProtocolWithHttpEffectWebsocket;
-	yield* make$24(group, options).pipe(provideService(Protocol, protocol), forkScoped);
+	yield* make$23(group, options).pipe(provideService(Protocol, protocol), forkScoped);
 	return httpEffect;
 });
 const makeSocketProtocol = /* @__PURE__ */ gen(function* () {
 	const serialization = yield* RpcSerialization;
-	const disconnects = yield* make$45();
+	const disconnects = yield* make$44();
 	let clientId = 0;
 	const clients = /* @__PURE__ */ new Map();
 	const clientIds = /* @__PURE__ */ new Set();
@@ -78986,7 +79007,7 @@ function updateSuccessfulEntry(input) {
 	return next;
 }
 const makeSourceControlRateLimit = gen(function* () {
-	const entries = yield* make$50(/* @__PURE__ */ new Map());
+	const entries = yield* make$49(/* @__PURE__ */ new Map());
 	const check = fn$1("SourceControlRateLimit.check")(function* (input, options) {
 		const now = yield* currentTimeMillis;
 		const entry = (yield* get$6(entries)).get(normalizedKey(input));
@@ -80021,7 +80042,7 @@ function trimmed$2(value) {
 * the other hosts already use.
 */
 function toIsoUtc(value) {
-	return match(make$38(value), {
+	return match(make$37(value), {
 		onNone: () => value,
 		onSome: formatIso
 	});
@@ -84182,7 +84203,7 @@ function resolveGithubWriteIdentity(getSettings) {
 }
 var ServerSettingsService = class ServerSettingsService extends Service$1()("forge/serverSettings/ServerSettingsService") {
 	static layerTest = (overrides = {}) => effect(ServerSettingsService, gen(function* () {
-		const currentSettingsRef = yield* make$50(deepMerge$1(DEFAULT_SERVER_SETTINGS, overrides));
+		const currentSettingsRef = yield* make$49(deepMerge$1(DEFAULT_SERVER_SETTINGS, overrides));
 		return {
 			start: void_$1,
 			ready: void_$1,
@@ -84240,12 +84261,12 @@ const ServerSettingsLive = effect(ServerSettingsService, gen(function* () {
 	const { settingsPath } = yield* ServerConfig;
 	const fs = yield* FileSystem;
 	const pathService = yield* Path$2;
-	const writeSemaphore = yield* make$44(1);
+	const writeSemaphore = yield* make$43(1);
 	const cacheKey = "settings";
 	const changesPubSub = yield* unbounded$1();
-	const startedRef = yield* make$50(false);
-	const startedDeferred = yield* make$39();
-	const watcherScope = yield* make$37("sequential");
+	const startedRef = yield* make$49(false);
+	const startedDeferred = yield* make$38();
+	const watcherScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(watcherScope, void_$3));
 	const emitChange = (settings) => publish(changesPubSub, settings).pipe(asVoid);
 	const readConfigExists = fs.exists(settingsPath).pipe(mapError((cause) => new ServerSettingsError({
@@ -86323,7 +86344,7 @@ function toReviewThreadListing(threads, dismissalsByReviewId) {
 		viewer: threads.metadata.viewer
 	};
 }
-const make$22 = gen(function* () {
+const make$21 = gen(function* () {
 	const github = yield* GitHubCli$1;
 	/**
 	* The pull request's own node id, which is what a mutation against the pull request itself is
@@ -87028,9 +87049,9 @@ const make$22 = gen(function* () {
 		})))
 	});
 });
-effect(GitHubPullRequestCli, make$22);
+effect(GitHubPullRequestCli, make$21);
 /** Builds a PR CLI for one authenticated session without touching global git or auth state. */
-const makeFromCommandRunner = (runner) => make$22.pipe(provideService(GitHubCli$1, runner));
+const makeFromCommandRunner = (runner) => make$21.pipe(provideService(GitHubCli$1, runner));
 //#endregion
 //#region src/pullRequest/GitHubPullRequestProvider.ts
 const CAPABILITIES$3 = {
@@ -87150,7 +87171,7 @@ function loginAvatarUrl(login, host) {
 }
 /** True where markdown would render nothing: whitespace, or only HTML comments. */
 const rendersEmpty = (body) => body.replace(/<!--[\s\S]*?-->/g, "").trim().length === 0;
-const make$21 = gen(function* () {
+const make$20 = gen(function* () {
 	const cli = yield* GitHubPullRequestCli;
 	const fail = (operation) => (error) => new PullRequestProviderError({
 		provider: "github",
@@ -87359,7 +87380,7 @@ const make$21 = gen(function* () {
 	};
 });
 /** Constructs the provider from a session-bound command service supplied by the caller. */
-const makeFromCli = (cli) => make$21.pipe(provideService(GitHubPullRequestCli, cli));
+const makeFromCli = (cli) => make$20.pipe(provideService(GitHubPullRequestCli, cli));
 //#endregion
 //#region src/git/AgentAttribution.ts
 /**
@@ -92972,7 +92993,7 @@ function toResolvableLinks(links) {
 * A Forge project id is installation-local; it must never be sent to CMMD as a project id.
 */
 var CmmdProjectIdentityResolver = class extends Service$1()("forge/pullRequest/CmmdProjectIdentityResolver") {};
-const make$20 = gen(function* () {
+const make$19 = gen(function* () {
 	const environment = yield* ServerEnvironment;
 	const repositoryIdentity = yield* RepositoryIdentityResolver;
 	const resolve = (forgeProjectId, cmmdJwt) => gen(function* () {
@@ -93013,7 +93034,7 @@ function resolveCanonicalKey(repositoryIdentity, forgeProjectId) {
 		return (yield* repositoryIdentity.resolve(workspaceRoot))?.canonicalKey ?? null;
 	}).pipe(orElseSucceed(() => null));
 }
-const cmmdProjectIdentityResolverLive = effect(CmmdProjectIdentityResolver, make$20);
+const cmmdProjectIdentityResolverLive = effect(CmmdProjectIdentityResolver, make$19);
 //#endregion
 //#region src/pullRequest/PullRequestServiceFactory.ts
 var PullRequestServiceFactory = class extends Service$1()("forge/pullRequest/PullRequestServiceFactory") {};
@@ -93491,12 +93512,12 @@ const KeybindingsLive = effect(Keybindings, gen(function* () {
 	const { keybindingsConfigPath } = yield* ServerConfig;
 	const fs = yield* FileSystem;
 	const path = yield* Path$2;
-	const upsertSemaphore = yield* make$44(1);
+	const upsertSemaphore = yield* make$43(1);
 	const resolvedConfigCacheKey = "resolved";
 	const changesPubSub = yield* unbounded$1();
-	const startedRef = yield* make$50(false);
-	const startedDeferred = yield* make$39();
-	const watcherScope = yield* make$37("sequential");
+	const startedRef = yield* make$49(false);
+	const startedDeferred = yield* make$38();
+	const watcherScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(watcherScope, void_$3));
 	const emitChange = (configState) => publish(changesPubSub, configState).pipe(asVoid);
 	const readConfigExists = fs.exists(keybindingsConfigPath).pipe(mapError((cause) => new KeybindingsConfigError({
@@ -94820,7 +94841,7 @@ var ProviderRegistry = class extends Service$1()("forge/provider/Services/Provid
 var ServerLifecycleEvents = class extends Service$1()("forge/serverLifecycleEvents") {};
 const ServerLifecycleEventsLive = effect(ServerLifecycleEvents, gen(function* () {
 	const pubsub = yield* unbounded$1();
-	const state = yield* make$50({
+	const state = yield* make$49({
 		sequence: 0,
 		events: []
 	});
@@ -96605,7 +96626,7 @@ function normalizeCount(count) {
 	return Number.isFinite(count) ? Math.max(0, Math.floor(count)) : 0;
 }
 const makeRuntimeDrainState = gen(function* () {
-	const stateRef = yield* make$50(initialState);
+	const stateRef = yield* make$49(initialState);
 	const update = (f) => updateAndGet(stateRef, f).pipe(map$3(snapshotFromState));
 	return {
 		beginTurn: (input) => update((state) => {
@@ -99226,7 +99247,7 @@ function askTheLedger(request) {
 		return logWarning$1("usage session lookup failed; local lanes keep their records").pipe(annotateLogs({ cause: outcome.error }), as$3(UNAVAILABLE.callFailed));
 	}));
 }
-const make$16 = (fetchImpl, resolveOwnerCredential) => gen(function* () {
+const make$15 = (fetchImpl, resolveOwnerCredential) => gen(function* () {
 	const config = yield* ServerConfig;
 	const sql = yield* SqlClient;
 	/** The cloud lane: this runtime's own scoped grant. */
@@ -99265,7 +99286,7 @@ const make$16 = (fetchImpl, resolveOwnerCredential) => gen(function* () {
 * without a signed-in machine behind it. Both default to the real thing.
 */
 function makeUsageSessionLookupLayer(fetchImpl = fetch, resolveOwnerCredential = resolveOwnerCredentialLive) {
-	return effect(UsageSessionLookup, make$16(fetchImpl, resolveOwnerCredential));
+	return effect(UsageSessionLookup, make$15(fetchImpl, resolveOwnerCredential));
 }
 const UsageSessionLookupLive = makeUsageSessionLookupLayer();
 //#endregion
@@ -99880,8 +99901,8 @@ function parseJson(raw) {
 	}
 }
 function resolveHourlyWindow(input) {
-	const sinceTime = input.sinceTime === void 0 ? none$4() : make$38(input.sinceTime);
-	const untilTime = input.untilTime === void 0 ? none$4() : make$38(input.untilTime);
+	const sinceTime = input.sinceTime === void 0 ? none$4() : make$37(input.sinceTime);
+	const untilTime = input.untilTime === void 0 ? none$4() : make$37(input.untilTime);
 	if (isNone(sinceTime) || isNone(untilTime)) return "Hourly usage requires valid sinceTime and untilTime instants";
 	const sinceTimeMs = toEpochMillis(sinceTime.value);
 	const untilTimeMs = toEpochMillis(untilTime.value);
@@ -99917,7 +99938,7 @@ function resolveWindow(input) {
 		};
 		hourly = resolved;
 	}
-	const windowStart = make$38(`${input.sinceDay}T00:00:00Z`);
+	const windowStart = make$37(`${input.sinceDay}T00:00:00Z`);
 	if (isNone(windowStart)) return {
 		kind: "invalid",
 		detail: `sinceDay '${input.sinceDay}' is not a valid date`
@@ -100075,7 +100096,7 @@ function failedRecordedSources(hostId, detail) {
 		message: detail
 	}));
 }
-const make$15 = (hooks) => gen(function* () {
+const make$14 = (hooks) => gen(function* () {
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path$2;
 	const config = yield* ServerConfig;
@@ -100088,9 +100109,9 @@ const make$15 = (hooks) => gen(function* () {
 	const lookupCache = /* @__PURE__ */ new Map();
 	let lookupCacheDirty = false;
 	const selfRuntimeId = resolveRuntimeReplicationRuntimeId(config);
-	const scanScope = yield* make$37("sequential");
+	const scanScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(scanScope, void_$3));
-	const scanSemaphore = yield* make$44(1);
+	const scanSemaphore = yield* make$43(1);
 	const inFlight = /* @__PURE__ */ new Map();
 	const ratesCachePath = path.join(config.stateDir, RATES_CACHE_FILE);
 	const scanCachePath = path.join(config.stateDir, SCAN_CACHE_FILE);
@@ -100494,7 +100515,7 @@ const make$15 = (hooks) => gen(function* () {
 		const key = summaryKey(input);
 		const joined = inFlight.get(key);
 		if (joined !== void 0) return yield* _await(joined);
-		const deferred = yield* make$39();
+		const deferred = yield* make$38();
 		inFlight.set(key, deferred);
 		yield* scanSemaphore.withPermits(1)(computeSummary(input, window)).pipe(exit, flatMap((exit) => done(deferred, exit)), ensuring(sync$1(() => {
 			inFlight.delete(key);
@@ -100504,7 +100525,7 @@ const make$15 = (hooks) => gen(function* () {
 });
 /** The service with a seam into the scan; tests pass their own hooks. */
 function makeUsageServiceLayer(hooks = NOOP_SCAN_HOOKS) {
-	return effect(UsageService, make$15(hooks));
+	return effect(UsageService, make$14(hooks));
 }
 const UsageServiceLive = makeUsageServiceLayer();
 const DAY_MS = 1440 * 60 * 1e3;
@@ -100550,7 +100571,7 @@ const runUsageScanWarmup = (options) => gen(function* () {
 	const now = options.now ?? currentTimeMillis;
 	const startDelayMs = options.startDelayMs ?? 2e4;
 	const intervalMs = options.intervalMs ?? 36e5;
-	const scanning = yield* make$50(false);
+	const scanning = yield* make$49(false);
 	yield* sleep(startDelayMs);
 	return yield* forever$1(gen(function* () {
 		if (yield* get$6(scanning)) yield* logInfo("usage scan warm-up skipped; the previous scan is still running");
@@ -100567,9 +100588,9 @@ var ServerRuntimeStartupError = class extends TaggedError("ServerRuntimeStartupE
 var ServerRuntimeStartup = class extends Service$1()("forge/serverRuntimeStartup") {};
 const settleQueuedCommand = (deferred, exit) => isSuccess(exit) ? succeed$3(deferred, exit.value) : failCause$3(deferred, exit.cause);
 const makeCommandGate = gen(function* () {
-	const commandReady = yield* make$39();
+	const commandReady = yield* make$38();
 	const commandQueue = yield* unbounded$2();
-	const commandReadinessState = yield* make$50("pending");
+	const commandReadinessState = yield* make$49("pending");
 	yield* forkScoped(forever$1(take$1(commandQueue).pipe(flatMap((command) => command.run))));
 	return {
 		awaitCommandReady: _await(commandReady),
@@ -100585,7 +100606,7 @@ const makeCommandGate = gen(function* () {
 			const readinessState = yield* get$6(commandReadinessState);
 			if (readinessState === "ready") return yield* effect;
 			if (readinessState !== "pending") return yield* readinessState;
-			const result = yield* make$39();
+			const result = yield* make$38();
 			yield* offer$1(commandQueue, { run: _await(commandReady).pipe(flatMap(() => effect), exit, flatMap((exit) => settleQueuedCommand(result, exit))) });
 			return yield* _await(result);
 		})
@@ -100797,8 +100818,8 @@ const ServerRuntimeStartupLive = effect(ServerRuntimeStartup, gen(function* () {
 	const usage = yield* UsageService;
 	const drainState = yield* RuntimeDrainState;
 	const commandGate = yield* makeCommandGate;
-	const httpListening = yield* make$39();
-	const reactorScope = yield* make$37("sequential");
+	const httpListening = yield* make$38();
+	const reactorScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(reactorScope, void_$3));
 	const startup = gen(function* () {
 		yield* logDebug("startup phase: starting keybindings runtime");
@@ -101569,8 +101590,8 @@ function previewUrlForPort(port) {
 	return `http://127.0.0.1:${port}/`;
 }
 const ThreadDevRuntimeLive = effect(ThreadDevRuntime, gen(function* () {
-	const byThreadId = yield* make$50(/* @__PURE__ */ new Map());
-	const usedPorts = yield* make$50(/* @__PURE__ */ new Set());
+	const byThreadId = yield* make$49(/* @__PURE__ */ new Map());
+	const usedPorts = yield* make$49(/* @__PURE__ */ new Set());
 	const allocateNextPort = gen(function* () {
 		const used = yield* get$6(usedPorts);
 		for (let port = DEFAULT_PORT_MIN; port <= DEFAULT_PORT_MAX; port += 1) if (!used.has(port)) return port;
@@ -107057,7 +107078,7 @@ function makeSnapshotThenLiveStream(input) {
 		const liveEvents = yield* input.subscribeLiveEvents;
 		const snapshot = yield* input.loadSnapshot;
 		const eventsAfterSnapshot = liveEvents.pipe(filter$2((event) => event.sequence > snapshot.snapshotSequence));
-		return concat$2(make$43({
+		return concat$2(make$42({
 			kind: "snapshot",
 			snapshot
 		}), eventsAfterSnapshot);
@@ -107719,7 +107740,7 @@ const makeWsRpcLayer = (currentSessionId, currentUserId) => WsRpcGroup.toLayer(g
 				discard: true
 			}).pipe(ignoreCause({ log: true }), forkScoped);
 			const liveUpdates = merge$4(keybindingsUpdates, merge$4(providerStatuses, merge$4(settingsUpdates, environmentUpdates)));
-			return concat$2(make$43({
+			return concat$2(make$42({
 				version: 1,
 				type: "snapshot",
 				config: yield* loadServerConfig
@@ -107733,9 +107754,9 @@ const makeWsRpcLayer = (currentSessionId, currentUserId) => WsRpcGroup.toLayer(g
 		}), { "rpc.aggregate": "server" }),
 		[WS_METHODS.subscribeAuthAccess]: (_input) => observeRpcStreamEffect(WS_METHODS.subscribeAuthAccess, gen(function* () {
 			const initialSnapshot = yield* loadAuthAccessSnapshot();
-			const revisionRef = yield* make$50(1);
+			const revisionRef = yield* make$49(1);
 			const liveEvents = merge$4(bootstrapCredentials.streamChanges, sessions.streamChanges).pipe(mapEffect$1((change) => updateAndGet(revisionRef, (revision) => revision + 1).pipe(map$3((revision) => toAuthAccessStreamEvent(change, revision, currentSessionId)))));
-			return concat$2(make$43({
+			return concat$2(make$42({
 				version: 1,
 				revision: 1,
 				type: "snapshot",
@@ -114978,7 +114999,7 @@ const PgClient = /* @__PURE__ */ Service$1("@effect/sql-pg/PgClient");
 * @category constructors
 * @since 1.0.0
 */
-const make$14 = (options) => fromPool({
+const make$13 = (options) => fromPool({
 	...options,
 	acquire: gen(function* () {
 		const pool = new Pool({
@@ -115087,7 +115108,7 @@ const fromPool = /* @__PURE__ */ fnUntraced(function* (options) {
 	});
 	const reserve = map$3(reserveRaw, makeConection);
 	const onListenClientError = (_) => {};
-	const listenAcquirer = yield* make$46({ acquire: acquireRelease(tryPromise({
+	const listenAcquirer = yield* make$45({ acquire: acquireRelease(tryPromise({
 		try: async () => {
 			const client = new Client(pool.options);
 			await client.connect();
@@ -115100,12 +115121,12 @@ const fromPool = /* @__PURE__ */ fnUntraced(function* (options) {
 		return client.end();
 	}).pipe(timeoutOption(1e3))) });
 	let config = {
-		url: pool.options.connectionString ? make$40(pool.options.connectionString) : void 0,
+		url: pool.options.connectionString ? make$39(pool.options.connectionString) : void 0,
 		host: pool.options.host,
 		port: pool.options.port,
 		database: pool.options.database,
 		username: pool.options.user,
-		password: typeof pool.options.password === "string" ? make$40(pool.options.password) : void 0,
+		password: typeof pool.options.password === "string" ? make$39(pool.options.password) : void 0,
 		ssl: pool.options.ssl,
 		applicationName: pool.options.application_name,
 		types: pool.options.types
@@ -115117,7 +115138,7 @@ const fromPool = /* @__PURE__ */ fnUntraced(function* (options) {
 			host: config.host ?? parsed.host ?? void 0,
 			port: config.port ?? (parsed.port ? getOrUndefined(parse$6(parsed.port)) : void 0),
 			username: config.username ?? parsed.user ?? void 0,
-			password: config.password ?? (parsed.password ? make$40(parsed.password) : void 0),
+			password: config.password ?? (parsed.password ? make$39(parsed.password) : void 0),
 			database: config.database ?? parsed.database ?? void 0
 		};
 	} catch {}
@@ -115251,12 +115272,12 @@ const makeCancel = (pool, client) => {
 * @category layers
 * @since 1.0.0
 */
-const layerFrom = (acquire) => effectContext(map$3(acquire, (client) => make$35(PgClient, client).pipe(add$2(SqlClient, client)))).pipe(provide$1(layer$9));
+const layerFrom = (acquire) => effectContext(map$3(acquire, (client) => make$34(PgClient, client).pipe(add$2(SqlClient, client)))).pipe(provide$1(layer$9));
 /**
 * @category layers
 * @since 1.0.0
 */
-const layer$3 = (config) => layerFrom(make$14(config));
+const layer$3 = (config) => layerFrom(make$13(config));
 /**
 * @category constructor
 * @since 1.0.0
@@ -115783,7 +115804,7 @@ const CloudStateSyncLive = effectDiscard(gen(function* () {
 //#region src/persistence/Layers/Postgres.ts
 function makePostgresPersistenceLive(config, databaseUrl) {
 	const client = layer$3({
-		url: make$40(databaseUrl),
+		url: make$39(databaseUrl),
 		applicationName: "forge-cloud-shell",
 		connectTimeout: "10 seconds",
 		idleTimeout: "30 seconds",
@@ -115809,7 +115830,7 @@ var MigrationError = class extends TaggedError("MigrationError") {};
 * @category constructor
 * @since 4.0.0
 */
-const make$13 = ({ dumpSchema = () => void_$1 }) => ({ loader, schemaDirectory, table = "effect_sql_migrations" }) => gen(function* () {
+const make$12 = ({ dumpSchema = () => void_$1 }) => ({ loader, schemaDirectory, table = "effect_sql_migrations" }) => gen(function* () {
 	const sql = yield* SqlClient;
 	const ensureMigrationsTable = sql.onDialectOrElse({
 		mssql: () => sql`IF OBJECT_ID(N'${sql.literal(table)}', N'U') IS NULL
@@ -115898,7 +115919,7 @@ const make$13 = ({ dumpSchema = () => void_$1 }) => ({ loader, schemaDirectory,
 	if (schemaDirectory && completed.length > 0) yield* dumpSchema(`${schemaDirectory}/_schema.sql`, table).pipe(catchCause((cause) => logInfo("Could not dump schema", cause)));
 	return completed;
 });
-const migrationOrder = /* @__PURE__ */ make$41(([a], [b]) => Number$2(a, b));
+const migrationOrder = /* @__PURE__ */ make$40(([a], [b]) => Number$2(a, b));
 /**
 * @since 4.0.0
 * @category loaders
@@ -118888,7 +118909,7 @@ const makeMigrationLoader = (throughId) => fromRecord(Object.fromEntries(migrati
 * Migrator run function - no schema dumping needed
 * Uses the base Migrator.make without platform dependencies
 */
-const run = make$13({});
+const run = make$12({});
 /**
 * Run all pending migrations.
 *
@@ -150122,7 +150143,7 @@ const AnalyticsServiceLayerLive = effect(AnalyticsService, gen(function* () {
 	const httpClient = yield* HttpClient;
 	const serverConfig = yield* ServerConfig;
 	const identifier = yield* getTelemetryIdentifier;
-	const bufferRef = yield* make$50([]);
+	const bufferRef = yield* make$49([]);
 	const clientType = serverConfig.mode === "desktop" ? "desktop-app" : "cli-web-client";
 	const enqueueBufferedEvent = (event, properties) => flatMap(now, (now) => modify$3(bufferRef, (current) => {
 		const appended = [...current, {
@@ -150283,7 +150304,7 @@ function formatLoggerMessage(message) {
 	return typeof message === "string" ? message : String(message);
 }
 function makeLineLogger(streamLabel) {
-	return make$33(({ date, message }) => `[${date.toISOString()}] ${streamLabel}: ${formatLoggerMessage(message)}\n`);
+	return make$32(({ date, message }) => `[${date.toISOString()}] ${streamLabel}: ${formatLoggerMessage(message)}\n`);
 }
 function resolveStreamLabel(stream) {
 	switch (stream) {
@@ -150344,7 +150365,7 @@ const makeThreadWriter = fn$1("makeThreadWriter")(function* (input) {
 		return;
 	}
 	const sink = sinkResult.sink;
-	const scope = yield* make$37();
+	const scope = yield* make$36();
 	const loggerLayer = layer$6([yield* batched(makeLineLogger(input.streamLabel), {
 		window: input.batchWindowMs,
 		flush: fn$1("makeThreadWriter.flush")(function* (messages) {
@@ -150399,7 +150420,7 @@ const makeEventNdjsonLogger = fn$1("makeEventNdjsonLogger")(function* (filePath,
 		});
 		return;
 	}
-	const stateRef = yield* make$32({
+	const stateRef = yield* make$31({
 		threadWriters: /* @__PURE__ */ new Map(),
 		failedSegments: /* @__PURE__ */ new Set()
 	});
@@ -212178,6 +212199,17 @@ function isCommandMissingCause(error) {
 	const lower = error.message.toLowerCase();
 	return lower.includes("enoent") || lower.includes("notfound");
 }
+/**
+* The one thing a spawn failure answers for sure when it is command-missing
+* shaped: the binary is not there. Any other spawn failure (a permissions
+* error, a crashed shell, a Sprite freeze mid-spawn) never actually asked the
+* CLI anything, so it is not evidence the binary is missing (forge#3588).
+* Shared by every provider Layer's version-probe failure branch so the
+* classification reads the same way everywhere it is made.
+*/
+function availabilityCheckForSpawnFailure(commandMissing) {
+	return commandMissing ? "confirmed" : "could-not-check";
+}
 const spawnAndCollect = (binaryPath, command) => gen(function* () {
 	const child = yield* (yield* ChildProcessSpawner).spawn(command);
 	const [stdout, stderr, exitCode] = yield* all([
@@ -212243,7 +212275,7 @@ const MODEL_LIST_PROBE_TIMEOUT_MS = 5e3;
 const probeCliModels = (input) => gen(function* () {
 	const useShell = process.platform === "win32";
 	if (useShell && !isShellSafeCommandPath(input.binaryPath)) return;
-	const command = make$48(input.binaryPath, [...input.args], {
+	const command = make$47(input.binaryPath, [...input.args], {
 		shell: useShell,
 		env: scrubForgeProviderChildEnvSecrets(process.env)
 	});
@@ -212284,6 +212316,7 @@ function buildServerProvider(input) {
 		auth: input.probe.auth,
 		checkedAt: input.checkedAt,
 		...input.probe.message ? { message: input.probe.message } : {},
+		...input.probe.availabilityCheck ? { availabilityCheck: input.probe.availabilityCheck } : {},
 		models: input.models,
 		slashCommands: [...input.slashCommands ?? []],
 		skills: [...withForgeBuiltInSkills(input.skills)]
@@ -214341,11 +214374,11 @@ async function runClaudeCommand$1(execFileImpl, binaryPath, args, env) {
 //#endregion
 //#region src/provider/makeManagedServerProvider.ts
 const makeManagedServerProvider = fn$1("makeManagedServerProvider")(function* (input) {
-	const refreshSemaphore = yield* make$44(1);
+	const refreshSemaphore = yield* make$43(1);
 	const changesPubSub = yield* acquireRelease(unbounded$1(), shutdown$2);
 	const initialSettings = yield* input.getSettings;
-	const snapshotRef = yield* make$50(input.initialSnapshot(initialSettings));
-	const settingsRef = yield* make$50(initialSettings);
+	const snapshotRef = yield* make$49(input.initialSnapshot(initialSettings));
+	const settingsRef = yield* make$49(initialSettings);
 	const applySnapshotBase = fn$1("applySnapshot")(function* (nextSettings, options) {
 		const forceRefresh = options?.forceRefresh === true;
 		const previousSettings = yield* get$6(settingsRef);
@@ -214364,18 +214397,28 @@ const makeManagedServerProvider = fn$1("makeManagedServerProvider")(function* (i
 		return yield* applySnapshot(yield* input.getSettings, { forceRefresh: true });
 	});
 	yield* runForEach(input.streamSettings, (nextSettings) => asVoid(applySnapshot(nextSettings))).pipe(forkScoped);
-	const refreshFailureCount = yield* make$50(0);
+	const refreshFailureCount = yield* make$49(0);
+	const QUICK_RETRY_MS = 5e3;
+	const MAX_QUICK_RETRIES = 3;
+	const quickRetriesSoFar = yield* make$49(0);
 	yield* forever$1(gen(function* () {
 		const failureCount = yield* get$6(refreshFailureCount);
+		const quickRetriesDone = yield* get$6(quickRetriesSoFar);
 		const baseMs = 6e4;
-		yield* sleep$4(millis(Math.min(baseMs * Math.pow(2, failureCount), 3e5)));
-		if (isFailure(yield* refreshSnapshot().pipe(tapError((e) => sync$1(() => captureServerError(e))), exit))) {
+		const backoffMs = Math.min(baseMs * Math.pow(2, failureCount), 3e5);
+		yield* sleep$4(millis(quickRetriesDone > 0 ? QUICK_RETRY_MS : backoffMs));
+		const result = yield* refreshSnapshot().pipe(tapError((e) => sync$1(() => captureServerError(e))), exit);
+		if (isFailure(result)) {
 			yield* update$4(refreshFailureCount, (n) => Math.min(n + 1, 4));
+			yield* set$3(quickRetriesSoFar, 0);
 			yield* logInfo("Provider refresh failed, backing off", {
 				failureCount: failureCount + 1,
 				nextDelayMs: Math.min(baseMs * Math.pow(2, failureCount + 1), 3e5)
 			});
-		} else yield* set$3(refreshFailureCount, 0);
+		} else {
+			yield* set$3(refreshFailureCount, 0);
+			yield* set$3(quickRetriesSoFar, result.value.availabilityCheck === "could-not-check" && quickRetriesDone < MAX_QUICK_RETRIES ? quickRetriesDone + 1 : 0);
+		}
 	})).pipe(forkScoped);
 	return {
 		getSnapshot: input.getSettings.pipe(flatMap(applySnapshot), tapError(logError), orDie),
@@ -214652,7 +214695,7 @@ function makeClaudeCredentialAnswersResolver(options) {
 */
 function runSupervisedRepeat(input) {
 	return gen(function* () {
-		const shutdownSignal = yield* make$39();
+		const shutdownSignal = yield* make$38();
 		yield* addFinalizer$2(() => succeed$3(shutdownSignal, void 0));
 		let firstAttempt = true;
 		while (true) {
@@ -215028,7 +215071,8 @@ function buildClaudeProviderFromAuthProbe(input) {
 				version: input.parsedVersion,
 				status: "warning",
 				auth: { status: "unknown" },
-				message: error instanceof Error ? `Could not verify Claude authentication status: ${error.message}.` : "Could not verify Claude authentication status."
+				message: error instanceof Error ? `Could not verify Claude authentication status: ${error.message}.` : "Could not verify Claude authentication status.",
+				availabilityCheck: "could-not-check"
 			}
 		});
 	}
@@ -215049,7 +215093,8 @@ function buildClaudeProviderFromAuthProbe(input) {
 				status: "warning",
 				auth: { status: "unknown" },
 				message: "Could not verify Claude authentication status. Timed out while running command."
-			}
+			},
+			availabilityCheck: "could-not-check"
 		}
 	});
 	const parsed = parseClaudeAuthStatusFromOutput(input.authProbe.success.value, { proxiedCredential: input.provenance.credentialScope === "proxied" });
@@ -215068,7 +215113,8 @@ function buildClaudeProviderFromAuthProbe(input) {
 				...input.authMetadata ? input.authMetadata : {},
 				provenance: input.provenance
 			},
-			...parsed.message ? { message: parsed.message } : {}
+			...parsed.message ? { message: parsed.message } : {},
+			availabilityCheck: "confirmed"
 		}
 	});
 }
@@ -215114,7 +215160,7 @@ const runClaudeCommand = fn$1("runClaudeCommand")(function* (args) {
 	}));
 	const claudeSettings = yield* service(ServerSettingsService).pipe(flatMap((service) => service.getSettings), map$3((settings) => settings.providers.claudeAgent));
 	const effectiveConfigPath = claudeSettings.configPath || config.forgeClaudeConfigPath || process.env.CLAUDE_CONFIG_DIR || void 0;
-	const command = make$48(claudeSettings.binaryPath, [...args], {
+	const command = make$47(claudeSettings.binaryPath, [...args], {
 		shell: process.platform === "win32",
 		env: scrubForgeProviderChildEnvSecrets({
 			...process.env,
@@ -215134,7 +215180,8 @@ function claudeVersionProbeTimeoutProvider(input) {
 			version: null,
 			status: "error",
 			auth: { status: "unknown" },
-			message: "Claude Agent CLI is installed but failed to run. Timed out while running command."
+			message: "Claude Agent CLI is installed but failed to run. Timed out while running command.",
+			availabilityCheck: "could-not-check"
 		}
 	});
 }
@@ -215166,7 +215213,8 @@ const nativeClaudeProviderStatus = fn$1("nativeClaudeProviderStatus")(function*
 				status: usable ? "authenticated" : "unauthenticated",
 				provenance: input.provenance
 			},
-			...usable ? {} : { message: claudeNativeCredentialUnusableMessage() }
+			...usable ? {} : { message: claudeNativeCredentialUnusableMessage() },
+			availabilityCheck: "confirmed"
 		}
 	});
 });
@@ -215212,23 +215260,26 @@ const checkClaudeProviderStatus = fn$1("checkClaudeProviderStatus")(function* (r
 			version: null,
 			status: "warning",
 			auth: { status: "unknown" },
-			message: "Claude is disabled in Forge settings."
+			message: "Claude is disabled in Forge settings.",
+			availabilityCheck: "confirmed"
 		}
 	});
 	const versionProbe = yield* runClaudeCommand(["--version"]).pipe(timeoutOption(CLAUDE_VERSION_PROBE_TIMEOUT_MS), result);
 	if (isFailure$1(versionProbe)) {
 		const error = versionProbe.failure;
+		const commandMissing = isCommandMissingCause(error);
 		return buildServerProvider({
 			provider: PROVIDER$12,
 			enabled: claudeSettings.enabled,
 			checkedAt,
 			models: fallbackModels,
 			probe: {
-				installed: !isCommandMissingCause(error),
+				installed: !commandMissing,
 				version: null,
 				status: "error",
 				auth: { status: "unknown" },
-				message: isCommandMissingCause(error) ? "Claude Agent CLI (`claude`) is not installed or not on PATH." : `Failed to execute Claude Agent CLI health check: ${error instanceof Error ? error.message : String(error)}.`
+				message: commandMissing ? "Claude Agent CLI (`claude`) is not installed or not on PATH." : `Failed to execute Claude Agent CLI health check: ${error instanceof Error ? error.message : String(error)}.`,
+				availabilityCheck: availabilityCheckForSpawnFailure(commandMissing)
 			}
 		});
 	}
@@ -215251,7 +215302,8 @@ const checkClaudeProviderStatus = fn$1("checkClaudeProviderStatus")(function* (r
 				version: parsedVersion,
 				status: "error",
 				auth: { status: "unknown" },
-				message: detail ? `Claude Agent CLI is installed but failed to run. ${detail}` : "Claude Agent CLI is installed but failed to run."
+				message: detail ? `Claude Agent CLI is installed but failed to run. ${detail}` : "Claude Agent CLI is installed but failed to run.",
+				availabilityCheck: "confirmed"
 			}
 		});
 	}
@@ -218287,7 +218339,7 @@ const makeClaudeAdapter = fn$1("makeClaudeAdapter")(function* (options) {
 	const handleAskUserQuestion = fn$1("handleAskUserQuestion")(function* (context, toolInput, callbackOptions, pendingUserInputs, runFork) {
 		const requestId = ApprovalRequestId.make(yield* nextUUIDv4);
 		const questions = userInputQuestionsFromToolInput(toolInput);
-		const answersDeferred = yield* make$39();
+		const answersDeferred = yield* make$38();
 		let aborted = false;
 		const requestedStamp = yield* makeEventStamp();
 		yield* offerRuntimeEvent({
@@ -218375,7 +218427,7 @@ const makeClaudeAdapter = fn$1("makeClaudeAdapter")(function* (options) {
 		const requestId = ApprovalRequestId.make(yield* nextUUIDv4);
 		const requestType = classifyRequestType(toolName);
 		const detail = summarizeToolRequest(toolName, toolInput);
-		const decisionDeferred = yield* make$39();
+		const decisionDeferred = yield* make$38();
 		const pendingApproval = {
 			requestType,
 			detail,
@@ -218645,7 +218697,7 @@ const makeClaudeAdapter = fn$1("makeClaudeAdapter")(function* (options) {
 		const pendingApprovals = /* @__PURE__ */ new Map();
 		const pendingUserInputs = /* @__PURE__ */ new Map();
 		const inFlightTools = /* @__PURE__ */ new Map();
-		const contextRef = yield* make$50(void 0);
+		const contextRef = yield* make$49(void 0);
 		const canUseTool = makeCanUseTool(contextRef, input.runtimeMode, pendingApprovals, pendingUserInputs, runFork, runPromise);
 		const serverSettings = yield* serverSettingsService.getSettings.pipe(mapError((error) => new ProviderAdapterProcessError({
 			provider: PROVIDER$11,
@@ -222949,9 +223001,9 @@ const makeAcpPatchedProtocol = fn$1("makeAcpPatchedProtocol")(function* (options
 	const notificationQueue = yield* sliding(1024);
 	const disconnects = yield* unbounded$2();
 	const outgoing = yield* unbounded$2();
-	const nextRequestId = yield* make$50(1n);
-	const terminationHandled = yield* make$50(false);
-	const extPending = yield* make$50(/* @__PURE__ */ new Map());
+	const nextRequestId = yield* make$49(1n);
+	const terminationHandled = yield* make$49(false);
+	const extPending = yield* make$49(/* @__PURE__ */ new Map());
 	const logProtocol = (event) => {
 		if (event.direction === "incoming" && !options.logIncoming) return void_$1;
 		if (event.direction === "outgoing" && !options.logOutgoing) return void_$1;
@@ -223157,7 +223209,7 @@ const makeAcpPatchedProtocol = fn$1("makeAcpPatchedProtocol")(function* (options
 		},
 		request: fn$1("sendRequest")(function* (method, payload) {
 			const requestId = yield* modify$3(nextRequestId, (current) => [current, current + 1n]);
-			const deferred = yield* make$39();
+			const deferred = yield* make$38();
 			yield* update$4(extPending, (pending) => new Map(pending).set(String(requestId), deferred));
 			yield* offerOutgoing({
 				_tag: "Request",
@@ -223185,113 +223237,113 @@ function toRpcClientError(error) {
 }
 //#endregion
 //#region ../../packages/effect-acp/src/rpc.ts
-const InitializeRpc = make$30(AGENT_METHODS.initialize, {
+const InitializeRpc = make$29(AGENT_METHODS.initialize, {
 	payload: InitializeRequest,
 	success: InitializeResponse,
 	error: Error$1
 });
-const AuthenticateRpc = make$30(AGENT_METHODS.authenticate, {
+const AuthenticateRpc = make$29(AGENT_METHODS.authenticate, {
 	payload: AuthenticateRequest,
 	success: AuthenticateResponse,
 	error: Error$1
 });
-const LogoutRpc = make$30(AGENT_METHODS.logout, {
+const LogoutRpc = make$29(AGENT_METHODS.logout, {
 	payload: LogoutRequest,
 	success: LogoutResponse,
 	error: Error$1
 });
-const NewSessionRpc = make$30(AGENT_METHODS.session_new, {
+const NewSessionRpc = make$29(AGENT_METHODS.session_new, {
 	payload: NewSessionRequest,
 	success: NewSessionResponse,
 	error: Error$1
 });
-const LoadSessionRpc = make$30(AGENT_METHODS.session_load, {
+const LoadSessionRpc = make$29(AGENT_METHODS.session_load, {
 	payload: LoadSessionRequest,
 	success: LoadSessionResponse,
 	error: Error$1
 });
-const ListSessionsRpc = make$30(AGENT_METHODS.session_list, {
+const ListSessionsRpc = make$29(AGENT_METHODS.session_list, {
 	payload: ListSessionsRequest,
 	success: ListSessionsResponse,
 	error: Error$1
 });
-const ForkSessionRpc = make$30(AGENT_METHODS.session_fork, {
+const ForkSessionRpc = make$29(AGENT_METHODS.session_fork, {
 	payload: ForkSessionRequest,
 	success: ForkSessionResponse,
 	error: Error$1
 });
-const ResumeSessionRpc = make$30(AGENT_METHODS.session_resume, {
+const ResumeSessionRpc = make$29(AGENT_METHODS.session_resume, {
 	payload: ResumeSessionRequest,
 	success: ResumeSessionResponse,
 	error: Error$1
 });
-const CloseSessionRpc = make$30(AGENT_METHODS.session_close, {
+const CloseSessionRpc = make$29(AGENT_METHODS.session_close, {
 	payload: CloseSessionRequest,
 	success: CloseSessionResponse,
 	error: Error$1
 });
-const PromptRpc = make$30(AGENT_METHODS.session_prompt, {
+const PromptRpc = make$29(AGENT_METHODS.session_prompt, {
 	payload: PromptRequest,
 	success: PromptResponse,
 	error: Error$1
 });
-const SetSessionModelRpc = make$30(AGENT_METHODS.session_set_model, {
+const SetSessionModelRpc = make$29(AGENT_METHODS.session_set_model, {
 	payload: SetSessionModelRequest,
 	success: SetSessionModelResponse,
 	error: Error$1
 });
-const SetSessionConfigOptionRpc = make$30(AGENT_METHODS.session_set_config_option, {
+const SetSessionConfigOptionRpc = make$29(AGENT_METHODS.session_set_config_option, {
 	payload: SetSessionConfigOptionRequest,
 	success: SetSessionConfigOptionResponse,
 	error: Error$1
 });
-const ReadTextFileRpc = make$30(CLIENT_METHODS.fs_read_text_file, {
+const ReadTextFileRpc = make$29(CLIENT_METHODS.fs_read_text_file, {
 	payload: ReadTextFileRequest,
 	success: ReadTextFileResponse,
 	error: Error$1
 });
-const WriteTextFileRpc = make$30(CLIENT_METHODS.fs_write_text_file, {
+const WriteTextFileRpc = make$29(CLIENT_METHODS.fs_write_text_file, {
 	payload: WriteTextFileRequest,
 	success: WriteTextFileResponse,
 	error: Error$1
 });
-const RequestPermissionRpc = make$30(CLIENT_METHODS.session_request_permission, {
+const RequestPermissionRpc = make$29(CLIENT_METHODS.session_request_permission, {
 	payload: RequestPermissionRequest,
 	success: RequestPermissionResponse,
 	error: Error$1
 });
-const ElicitationRpc = make$30(CLIENT_METHODS.session_elicitation, {
+const ElicitationRpc = make$29(CLIENT_METHODS.session_elicitation, {
 	payload: ElicitationRequest,
 	success: ElicitationResponse,
 	error: Error$1
 });
-const CreateTerminalRpc = make$30(CLIENT_METHODS.terminal_create, {
+const CreateTerminalRpc = make$29(CLIENT_METHODS.terminal_create, {
 	payload: CreateTerminalRequest,
 	success: CreateTerminalResponse,
 	error: Error$1
 });
-const TerminalOutputRpc = make$30(CLIENT_METHODS.terminal_output, {
+const TerminalOutputRpc = make$29(CLIENT_METHODS.terminal_output, {
 	payload: TerminalOutputRequest,
 	success: TerminalOutputResponse,
 	error: Error$1
 });
-const ReleaseTerminalRpc = make$30(CLIENT_METHODS.terminal_release, {
+const ReleaseTerminalRpc = make$29(CLIENT_METHODS.terminal_release, {
 	payload: ReleaseTerminalRequest,
 	success: ReleaseTerminalResponse,
 	error: Error$1
 });
-const WaitForTerminalExitRpc = make$30(CLIENT_METHODS.terminal_wait_for_exit, {
+const WaitForTerminalExitRpc = make$29(CLIENT_METHODS.terminal_wait_for_exit, {
 	payload: WaitForTerminalExitRequest,
 	success: WaitForTerminalExitResponse,
 	error: Error$1
 });
-const KillTerminalRpc = make$30(CLIENT_METHODS.terminal_kill, {
+const KillTerminalRpc = make$29(CLIENT_METHODS.terminal_kill, {
 	payload: KillTerminalRequest,
 	success: KillTerminalResponse,
 	error: Error$1
 });
-const AgentRpcs = make$29(InitializeRpc, AuthenticateRpc, LogoutRpc, NewSessionRpc, LoadSessionRpc, ListSessionsRpc, ForkSessionRpc, ResumeSessionRpc, CloseSessionRpc, PromptRpc, SetSessionModelRpc, SetSessionConfigOptionRpc);
-const ClientRpcs = make$29(ReadTextFileRpc, WriteTextFileRpc, RequestPermissionRpc, ElicitationRpc, CreateTerminalRpc, TerminalOutputRpc, ReleaseTerminalRpc, WaitForTerminalExitRpc, KillTerminalRpc);
+const AgentRpcs = make$28(InitializeRpc, AuthenticateRpc, LogoutRpc, NewSessionRpc, LoadSessionRpc, ListSessionsRpc, ForkSessionRpc, ResumeSessionRpc, CloseSessionRpc, PromptRpc, SetSessionModelRpc, SetSessionConfigOptionRpc);
+const ClientRpcs = make$28(ReadTextFileRpc, WriteTextFileRpc, RequestPermissionRpc, ElicitationRpc, CreateTerminalRpc, TerminalOutputRpc, ReleaseTerminalRpc, WaitForTerminalExitRpc, KillTerminalRpc);
 //#endregion
 //#region ../../packages/effect-acp/src/_internal/shared.ts
 const isError = is$1(Error$1);
@@ -223320,7 +223372,7 @@ ArraySchema(Unknown);
 //#endregion
 //#region ../../packages/effect-acp/src/_internal/stdio.ts
 const encoder$1 = new TextEncoder();
-const makeChildStdio = (handle) => make$49({
+const makeChildStdio = (handle) => make$48({
 	args: succeed([]),
 	stdin: handle.stdout,
 	stdout: () => mapInput(handle.stdin, (chunk) => typeof chunk === "string" ? encoder$1.encode(chunk) : chunk),
@@ -223331,7 +223383,7 @@ fn$1("makeInMemoryStdio")(function* () {
 	const output = yield* unbounded$2();
 	const decoder = new TextDecoder();
 	return {
-		stdio: make$49({
+		stdio: make$48({
 			args: succeed([]),
 			stdin: fromQueue(input),
 			stdout: () => forEach$1((chunk) => offer$1(output, typeof chunk === "string" ? chunk : decoder.decode(chunk, { stream: true }))),
@@ -223354,7 +223406,7 @@ function runNotificationHandlers(registration, notification) {
 	return forEach(registration.handlers, (handler) => handler(notification).pipe(catch_(() => void_$1)), { discard: true });
 }
 var AcpClient = class extends Service$1()("effect-acp/AcpClient") {};
-const make$12 = fn$1("effect-acp/AcpClient.make")(function* (stdio, options = {}, terminationError) {
+const make$11 = fn$1("effect-acp/AcpClient.make")(function* (stdio, options = {}, terminationError) {
 	const coreHandlers = {};
 	const notificationHandlers = {
 		sessionUpdate: {
@@ -223421,9 +223473,9 @@ const make$12 = fn$1("effect-acp/AcpClient.make")(function* (stdio, options = {}
 		[CLIENT_METHODS.terminal_kill]: (payload) => runHandler(coreHandlers.terminalKill, payload, CLIENT_METHODS.terminal_kill).pipe(map$3((result) => result ?? {})),
 		[CLIENT_METHODS.terminal_release]: (payload) => runHandler(coreHandlers.terminalRelease, payload, CLIENT_METHODS.terminal_release).pipe(map$3((result) => result ?? {}))
 	}));
-	yield* make$24(ClientRpcs).pipe(provideService(Protocol, transport.serverProtocol), provide(clientHandlerLayer), forkScoped);
+	yield* make$23(ClientRpcs).pipe(provideService(Protocol, transport.serverProtocol), provide(clientHandlerLayer), forkScoped);
 	let nextRpcRequestId = 1n << 32n;
-	const rpc = yield* make$25(AgentRpcs, { generateRequestId: () => nextRpcRequestId++ }).pipe(provideService(Protocol$1, transport.clientProtocol));
+	const rpc = yield* make$24(AgentRpcs, { generateRequestId: () => nextRpcRequestId++ }).pipe(provideService(Protocol$1, transport.clientProtocol));
 	return AcpClient.of({
 		raw: {
 			notifications: transport.incoming,
@@ -223508,7 +223560,7 @@ const make$12 = fn$1("effect-acp/AcpClient.make")(function* (stdio, options = {}
 	});
 });
 const layerChildProcess = (handle, options = {}) => {
-	return effect(AcpClient, make$12(makeChildStdio(handle), options, makeTerminationError(handle)));
+	return effect(AcpClient, make$11(makeChildStdio(handle), options, makeTerminationError(handle)));
 };
 //#endregion
 //#region src/provider/acp/AcpSessionRuntime.ts
@@ -223550,11 +223602,11 @@ const makeAcpSessionRuntime = (options) => gen(function* () {
 	const spawner = yield* ChildProcessSpawner;
 	const runtimeScope = yield* Scope$1;
 	const eventQueue = yield* unbounded$2();
-	const modeStateRef = yield* make$50(void 0);
-	const toolCallsRef = yield* make$50(/* @__PURE__ */ new Map());
-	const assistantSegmentRef = yield* make$50({ nextSegmentIndex: 0 });
-	const configOptionsRef = yield* make$50(sessionConfigOptionsFromSetup(void 0));
-	const startStateRef = yield* make$50({ _tag: "NotStarted" });
+	const modeStateRef = yield* make$49(void 0);
+	const toolCallsRef = yield* make$49(/* @__PURE__ */ new Map());
+	const assistantSegmentRef = yield* make$49({ nextSegmentIndex: 0 });
+	const configOptionsRef = yield* make$49(sessionConfigOptionsFromSetup(void 0));
+	const startStateRef = yield* make$49({ _tag: "NotStarted" });
 	const logRequest = (event) => options.requestLogger ? options.requestLogger(event) : void_$1;
 	const runLoggedRequest = (method, payload, effect) => logRequest({
 		method,
@@ -223576,7 +223628,7 @@ const makeAcpSessionRuntime = (options) => gen(function* () {
 		command: options.spawn.command,
 		cause: /* @__PURE__ */ new Error(`Refusing to spawn ACP child process: command path contains shell metacharacters that cmd.exe would interpret as additional commands. Adjust the provider \`binaryPath\` setting to an unquoted absolute path.`)
 	});
-	const acpContext = yield* build(layerChildProcess(yield* spawner.spawn(make$48(options.spawn.command, [...options.spawn.args], {
+	const acpContext = yield* build(layerChildProcess(yield* spawner.spawn(make$47(options.spawn.command, [...options.spawn.args], {
 		...options.spawn.cwd ? { cwd: options.spawn.cwd } : {},
 		env: scrubForgeProviderChildEnvSecrets({
 			...process.env,
@@ -223908,7 +223960,7 @@ const makeStartCoordinator = (startStateRef, startOnce) => gen(function* () {
 	const currentState = yield* get$6(startStateRef);
 	if (currentState._tag === "Started") return currentState.result;
 	if (currentState._tag === "Starting") return yield* _await(currentState.deferred);
-	const deferred = yield* make$39();
+	const deferred = yield* make$38();
 	return yield* yield* modify$3(startStateRef, (state) => {
 		switch (state._tag) {
 			case "Started": return [succeed(state.result), state];
@@ -224030,7 +224082,7 @@ const readCursorApiKey = (_settings) => process.env.CURSOR_API_KEY || null;
 const runCursorCommand = fn$1("runCursorCommand")(function* (binaryPath, args) {
 	const useShell = process.platform === "win32";
 	if (useShell && !isShellSafeCommandPath(binaryPath)) return yield* fail(/* @__PURE__ */ new Error(`Refusing to spawn cursor-agent: \`binaryPath\` contains shell metacharacters that cmd.exe would interpret as additional commands.`));
-	return yield* spawnAndCollect(binaryPath, make$48(binaryPath, [...args], {
+	return yield* spawnAndCollect(binaryPath, make$47(binaryPath, [...args], {
 		shell: useShell,
 		env: scrubForgeProviderChildEnvSecrets(process.env)
 	}));
@@ -224616,7 +224668,7 @@ function makeCursorAdapter(cursorSettings, options) {
 		const nativeEventLogger = options?.nativeEventLogger ?? (options?.nativeEventLogPath !== void 0 ? yield* makeEventNdjsonLogger(options.nativeEventLogPath, { stream: "native" }) : void 0);
 		const managedNativeEventLogger = options?.nativeEventLogger === void 0 ? nativeEventLogger : void 0;
 		const sessions = /* @__PURE__ */ new Map();
-		const threadLocksRef = yield* make$32(/* @__PURE__ */ new Map());
+		const threadLocksRef = yield* make$31(/* @__PURE__ */ new Map());
 		const runtimeEventPubSub = yield* unbounded$1();
 		const nowIso = map$3(now, formatIso);
 		const nextEventId = map$3(nextUUIDv4, (id) => EventId.make(id));
@@ -224627,7 +224679,7 @@ function makeCursorAdapter(cursorSettings, options) {
 		const offerRuntimeEvent = (event) => publish(runtimeEventPubSub, event).pipe(asVoid);
 		const getThreadSemaphore = (threadId) => modifyEffect(threadLocksRef, (current) => {
 			return match(fromNullishOr(current.get(threadId)), {
-				onNone: () => make$44(1).pipe(map$3((semaphore) => {
+				onNone: () => make$43(1).pipe(map$3((semaphore) => {
 					const next = new Map(current);
 					next.set(threadId, semaphore);
 					return [semaphore, next];
@@ -224708,7 +224760,7 @@ function makeCursorAdapter(cursorSettings, options) {
 			if (existing && !existing.stopped) yield* stopSessionInternal(existing);
 			const pendingApprovals = /* @__PURE__ */ new Map();
 			const pendingUserInputs = /* @__PURE__ */ new Map();
-			const sessionScope = yield* make$37("sequential");
+			const sessionScope = yield* make$36("sequential");
 			let sessionScopeTransferred = false;
 			yield* addFinalizer$2(() => sessionScopeTransferred ? void_$1 : close(sessionScope, void_$3));
 			let ctx;
@@ -224742,7 +224794,7 @@ function makeCursorAdapter(cursorSettings, options) {
 					yield* logNative(input.threadId, "cursor/ask_question", params, "acp.cursor.extension");
 					const requestId = ApprovalRequestId.make(crypto.randomUUID());
 					const runtimeRequestId = RuntimeRequestId.make(requestId);
-					const answers = yield* make$39();
+					const answers = yield* make$38();
 					pendingUserInputs.set(requestId, { answers });
 					yield* offerRuntimeEvent({
 						type: "user-input.requested",
@@ -224804,7 +224856,7 @@ function makeCursorAdapter(cursorSettings, options) {
 					const permissionRequest = parsePermissionRequest(params);
 					const requestId = ApprovalRequestId.make(crypto.randomUUID());
 					const runtimeRequestId = RuntimeRequestId.make(requestId);
-					const decision = yield* make$39();
+					const decision = yield* make$38();
 					pendingApprovals.set(requestId, {
 						decision,
 						kind: permissionRequest.kind
@@ -231852,7 +231904,7 @@ const makeOpenCodeRuntime = gen(function* () {
 	const netService = yield* NetService;
 	const runOpenCodeCommand = (input) => gen(function* () {
 		yield* rejectUnsafeWindowsBinaryPath("runOpenCodeCommand", input.binaryPath);
-		const child = yield* spawner.spawn(make$48(input.binaryPath, [...input.args], {
+		const child = yield* spawner.spawn(make$47(input.binaryPath, [...input.args], {
 			shell: process.platform === "win32",
 			env: input.environment ?? process.env
 		}));
@@ -231887,7 +231939,7 @@ const makeOpenCodeRuntime = gen(function* () {
 			`--hostname=${hostname}`,
 			`--port=${port}`
 		];
-		const child = yield* spawner.spawn(make$48(input.binaryPath, args, {
+		const child = yield* spawner.spawn(make$47(input.binaryPath, args, {
 			detached: process.platform !== "win32",
 			shell: process.platform === "win32",
 			env: {
@@ -231908,9 +231960,9 @@ const makeOpenCodeRuntime = gen(function* () {
 			} catch {}
 		});
 		yield* addFinalizer$1(runtimeScope, killOpenCodeProcessGroup("SIGTERM").pipe(andThen(sleep$4("1 second")), andThen(killOpenCodeProcessGroup("SIGKILL")), ignore));
-		const stdoutRef = yield* make$50("");
-		const stderrRef = yield* make$50("");
-		const readyDeferred = yield* make$39();
+		const stdoutRef = yield* make$49("");
+		const stderrRef = yield* make$49("");
+		const readyDeferred = yield* make$38();
 		const setReadyFromStdoutChunk = (chunk) => updateAndGet(stdoutRef, (stdout) => `${stdout}${chunk}`).pipe(flatMap((nextStdout) => {
 			const parsed = parseServerUrlFromOutput(nextStdout);
 			return parsed ? succeed$3(readyDeferred, parsed).pipe(ignore) : void_$1;
@@ -232168,7 +232220,7 @@ function classifyGlobalEventEnvelope(envelope) {
 		payload
 	};
 }
-const isoFromEpochMs = (value) => make$38(value).pipe(match({
+const isoFromEpochMs = (value) => make$37(value).pipe(match({
 	onNone: () => void 0,
 	onSome: formatIso
 }));
@@ -232601,7 +232653,7 @@ function makeOpenCodeAdapter(openCodeSettings, options) {
 				sessions.delete(input.threadId);
 			}
 			const started = yield* gen(function* () {
-				const sessionScope = yield* make$37();
+				const sessionScope = yield* make$36();
 				const startedExit = yield* exit(gen(function* () {
 					const server = yield* openCodeRuntime.connectToOpenCodeServer({
 						binaryPath,
@@ -232668,7 +232720,7 @@ function makeOpenCodeAdapter(openCodeSettings, options) {
 				activeTurnId: void 0,
 				activeAgent: void 0,
 				activeVariant: void 0,
-				stopped: yield* make$50(false),
+				stopped: yield* make$49(false),
 				sessionScope: started.sessionScope
 			};
 			sessions.set(input.threadId, context);
@@ -233168,7 +233220,7 @@ const makeProviderService = fn$1("makeProviderService")(function* (options) {
 	const canonicalEventLogger = options?.canonicalEventLogger ?? (options?.canonicalEventLogPath !== void 0 ? yield* makeEventNdjsonLogger(options.canonicalEventLogPath, { stream: "canonical" }) : void 0);
 	const registry = yield* ProviderAdapterRegistry;
 	const directory = yield* ProviderSessionDirectory;
-	const sessionLocks = yield* make$47({ lookup: (_threadId) => make$44(1) });
+	const sessionLocks = yield* make$46({ lookup: (_threadId) => make$43(1) });
 	const withSessionLock = (threadId, effect) => get$5(sessionLocks, threadId).pipe(flatMap((lock) => lock.withPermit(effect)), scoped);
 	const runtimeEventPubSub = yield* unbounded$1();
 	const assertProviderExecutable = options?.assertProviderExecutable ?? (() => succeed(null));
@@ -235133,7 +235185,7 @@ const createTrace2Monitor = fn$1("createTrace2Monitor")(function* (input, progre
 		suffix: ".json"
 	});
 	const hookStartByChildKey = /* @__PURE__ */ new Map();
-	const traceTailState = yield* make$50({
+	const traceTailState = yield* make$49({
 		processedChars: 0,
 		remainder: ""
 	});
@@ -235179,7 +235231,7 @@ const createTrace2Monitor = fn$1("createTrace2Monitor")(function* (input, progre
 			});
 		}
 	});
-	const readTraceDelta = (yield* make$44(1)).withPermit(fs.readFileString(traceFilePath).pipe(flatMap((contents) => uninterruptible(modify$3(traceTailState, ({ processedChars, remainder }) => {
+	const readTraceDelta = (yield* make$43(1)).withPermit(fs.readFileString(traceFilePath).pipe(flatMap((contents) => uninterruptible(modify$3(traceTailState, ({ processedChars, remainder }) => {
 		if (contents.length <= processedChars) return [[], {
 			processedChars,
 			remainder
@@ -235308,7 +235360,7 @@ const GitCoreLive = effect(GitCore, fn$1("makeGitCore")(function* (options) {
 			const truncateOutputAtMaxBytes = input.truncateOutputAtMaxBytes ?? false;
 			return yield* fn$1("runGitCommand")(function* () {
 				const trace2Monitor = yield* createTrace2Monitor(commandInput, input.progress).pipe(provideService(Path$2, path$10), provideService(FileSystem, fileSystem), mapError(toGitCommandError(commandInput, "failed to create trace2 monitor.")));
-				const child = yield* commandSpawner.spawn(make$48("git", commandInput.args, {
+				const child = yield* commandSpawner.spawn(make$47("git", commandInput.args, {
 					cwd: commandInput.cwd,
 					env: withRepositoryOwnershipTrust({
 						...process.env,
@@ -235320,7 +235372,7 @@ const GitCoreLive = effect(GitCore, fn$1("makeGitCore")(function* (options) {
 					collectOutput(commandInput, child.stdout, maxOutputBytes, truncateOutputAtMaxBytes, input.progress?.onStdoutLine),
 					collectOutput(commandInput, child.stderr, maxOutputBytes, truncateOutputAtMaxBytes, input.progress?.onStderrLine),
 					child.exitCode.pipe(map$3((value) => Number(value)), mapError(toGitCommandError(commandInput, "failed to report exit code."))),
-					input.stdin === void 0 ? void_$1 : run$2(encodeText(make$43(input.stdin)), child.stdin).pipe(mapError(toGitCommandError(commandInput, "failed to write stdin.")))
+					input.stdin === void 0 ? void_$1 : run$2(encodeText(make$42(input.stdin)), child.stdin).pipe(mapError(toGitCommandError(commandInput, "failed to write stdin.")))
 				], { concurrency: "unbounded" }).pipe(map$3(([stdout, stderr, exitCode]) => [
 					stdout,
 					stderr,
@@ -236691,9 +236743,9 @@ function fingerprintStatusPart(status) {
 const GitStatusBroadcasterLive = effect(GitStatusBroadcaster, gen(function* () {
 	const gitManager = yield* GitManager;
 	const changesPubSub = yield* acquireRelease(unbounded$1(), (pubsub) => shutdown$2(pubsub));
-	const broadcasterScope = yield* acquireRelease(make$37(), (scope) => close(scope, void_$3));
-	const cacheRef = yield* make$50(/* @__PURE__ */ new Map());
-	const pollersRef = yield* make$32(/* @__PURE__ */ new Map());
+	const broadcasterScope = yield* acquireRelease(make$36(), (scope) => close(scope, void_$3));
+	const cacheRef = yield* make$49(/* @__PURE__ */ new Map());
+	const pollersRef = yield* make$31(/* @__PURE__ */ new Map());
 	const getCachedStatus = fn$1("getCachedStatus")(function* (cwd) {
 		return yield* get$6(cacheRef).pipe(map$3((cache) => cache.get(cwd) ?? null));
 	});
@@ -236847,7 +236899,7 @@ const GitStatusBroadcasterLive = effect(GitStatusBroadcaster, gen(function* () {
 		const initialRemote = (yield* getCachedStatus(normalizedCwd))?.remote?.value ?? null;
 		yield* retainRemotePoller(normalizedCwd);
 		const release = releaseRemotePoller(normalizedCwd).pipe(ignore, asVoid);
-		return concat$2(make$43({
+		return concat$2(make$42({
 			_tag: "snapshot",
 			local: initialLocal,
 			remote: initialRemote
@@ -237318,7 +237370,7 @@ const runCodexCommand = fn$1("runCodexCommand")(function* (args) {
 	}));
 	const codexSettings = yield* (yield* ServerSettingsService).getSettings.pipe(map$3((settings) => settings.providers.codex));
 	const effectiveHomePath = codexSettings.homePath || config.forgeCodexHomePath || process.env.CODEX_HOME || void 0;
-	const command = make$48(codexSettings.binaryPath, [...args], {
+	const command = make$47(codexSettings.binaryPath, [...args], {
 		shell: process.platform === "win32",
 		env: scrubForgeProviderChildEnvSecrets({
 			...process.env,
@@ -237357,23 +237409,26 @@ const checkCodexProviderStatus = fn$1("checkCodexProviderStatus")(function* (res
 				status: "unknown",
 				provenance
 			},
-			message: "Codex is disabled in Forge settings."
+			message: "Codex is disabled in Forge settings.",
+			availabilityCheck: "confirmed"
 		}
 	});
 	const versionProbe = yield* runCodexCommand(["--version"]).pipe(timeoutOption(CODEX_VERSION_PROBE_TIMEOUT_MS), result);
 	if (isFailure$1(versionProbe)) {
 		const error = versionProbe.failure;
+		const commandMissing = isCommandMissingCause(error);
 		return buildServerProvider({
 			provider: PROVIDER$4,
 			enabled: codexSettings.enabled,
 			checkedAt,
 			models: fallbackModels,
 			probe: {
-				installed: !isCommandMissingCause(error),
+				installed: !commandMissing,
 				version: null,
 				status: "error",
 				auth: { status: "unknown" },
-				message: isCommandMissingCause(error) ? "Codex CLI (`codex`) is not installed or not on PATH." : `Failed to execute Codex CLI health check: ${error.message}.`
+				message: commandMissing ? "Codex CLI (`codex`) is not installed or not on PATH." : `Failed to execute Codex CLI health check: ${error.message}.`,
+				availabilityCheck: availabilityCheckForSpawnFailure(commandMissing)
 			}
 		});
 	}
@@ -237387,7 +237442,8 @@ const checkCodexProviderStatus = fn$1("checkCodexProviderStatus")(function* (res
 			version: null,
 			status: "error",
 			auth: { status: "unknown" },
-			message: "Codex CLI is installed but failed to run. Timed out while running command."
+			message: "Codex CLI is installed but failed to run. Timed out while running command.",
+			availabilityCheck: "could-not-check"
 		}
 	});
 	const version = versionProbe.success.value;
@@ -237404,7 +237460,8 @@ const checkCodexProviderStatus = fn$1("checkCodexProviderStatus")(function* (res
 				version: parsedVersion,
 				status: "error",
 				auth: { status: "unknown" },
-				message: detail ? `Codex CLI is installed but failed to run. ${detail}` : "Codex CLI is installed but failed to run."
+				message: detail ? `Codex CLI is installed but failed to run. ${detail}` : "Codex CLI is installed but failed to run.",
+				availabilityCheck: "confirmed"
 			}
 		});
 	}
@@ -237418,7 +237475,8 @@ const checkCodexProviderStatus = fn$1("checkCodexProviderStatus")(function* (res
 			version: parsedVersion,
 			status: "error",
 			auth: { status: "unknown" },
-			message: formatCodexCliUpgradeMessage(parsedVersion)
+			message: formatCodexCliUpgradeMessage(parsedVersion),
+			availabilityCheck: "confirmed"
 		}
 	});
 	const skills = (resolveSkills ? yield* resolveSkills({
@@ -237443,7 +237501,8 @@ const checkCodexProviderStatus = fn$1("checkCodexProviderStatus")(function* (res
 			version: parsedVersion,
 			status: "ready",
 			auth: { status: "unknown" },
-			message: "Using a custom Codex model provider; OpenAI login check skipped."
+			message: "Using a custom Codex model provider; OpenAI login check skipped.",
+			availabilityCheck: "confirmed"
 		}
 	});
 	const authProbe = yield* runCodexCommand(["login", "status"]).pipe(timeoutOption(CODEX_AUTH_PROBE_TIMEOUT_MS), result);
@@ -237465,7 +237524,8 @@ const checkCodexProviderStatus = fn$1("checkCodexProviderStatus")(function* (res
 				version: parsedVersion,
 				status: "warning",
 				auth: { status: "unknown" },
-				message: `Could not verify Codex authentication status: ${error.message}.`
+				message: `Could not verify Codex authentication status: ${error.message}.`,
+				availabilityCheck: "could-not-check"
 			}
 		});
 	}
@@ -237480,7 +237540,8 @@ const checkCodexProviderStatus = fn$1("checkCodexProviderStatus")(function* (res
 			version: parsedVersion,
 			status: "warning",
 			auth: { status: "unknown" },
-			message: "Codex authentication status check did not respond in time. The agent can still run; refresh the provider from Settings to retry."
+			message: "Codex authentication status check did not respond in time. The agent can still run; refresh the provider from Settings to retry.",
+			availabilityCheck: "could-not-check"
 		}
 	});
 	const parsed = parseAuthStatusFromOutput(authProbe.success.value);
@@ -237507,7 +237568,8 @@ const checkCodexProviderStatus = fn$1("checkCodexProviderStatus")(function* (res
 					...accountEmail ? { accountLabel: accountEmail } : {}
 				}
 			},
-			...parsed.message ? { message: parsed.message } : {}
+			...parsed.message ? { message: parsed.message } : {},
+			availabilityCheck: "confirmed"
 		}
 	});
 });
@@ -237748,7 +237810,7 @@ const CodexTextGenerationLive = effect(TextGeneration, gen(function* () {
 		});
 		const runCodexCommand = fn$1("runCodexJson.runCodexCommand")(function* () {
 			const { normalizedOptions, reasoningEffort, accessMode, providerProxyToken } = yield* resolveCodexCommandTarget();
-			return yield* launchCodexCommand(make$48(codexSettings?.binaryPath || "codex", buildCodexExecArgs({
+			return yield* launchCodexCommand(make$47(codexSettings?.binaryPath || "codex", buildCodexExecArgs({
 				model: modelSelection.model,
 				reasoningEffort,
 				fastMode: normalizedOptions?.fastMode,
@@ -237767,7 +237829,7 @@ const CodexTextGenerationLive = effect(TextGeneration, gen(function* () {
 				})),
 				cwd: workingDirectory,
 				shell: process.platform === "win32",
-				stdin: { stream: encodeText(make$43(prompt)) }
+				stdin: { stream: encodeText(make$42(prompt)) }
 			}));
 		});
 		const cleanup = all([...[
@@ -237957,7 +238019,7 @@ const ClaudeTextGenerationLive = effect(TextGeneration, gen(function* () {
 		};
 		const claudeSettings = yield* map$3(serverSettingsService.getSettings, (settings) => settings.providers.claudeAgent).pipe(catch_(() => undefined_));
 		const rawStdout = yield* fn$1("runClaudeJson.runClaudeCommand")(function* () {
-			const command = make$48(claudeSettings?.binaryPath || "claude", [
+			const command = make$47(claudeSettings?.binaryPath || "claude", [
 				"-p",
 				"--output-format",
 				"json",
@@ -237971,7 +238033,7 @@ const ClaudeTextGenerationLive = effect(TextGeneration, gen(function* () {
 			], {
 				cwd,
 				shell: process.platform === "win32",
-				stdin: { stream: encodeText(make$43(prompt)) }
+				stdin: { stream: encodeText(make$42(prompt)) }
 			});
 			const child = yield* commandSpawner.spawn(command).pipe(mapError((cause) => normalizeCliError("claude", operation, cause, "Failed to spawn Claude CLI process")));
 			const [stdout, stderr, exitCode] = yield* all([
@@ -238252,7 +238314,7 @@ const TextGenerationUsageLive = effect(TextGenerationUsage, gen(function* () {
 //#region ../../packages/shared/src/KeyedCoalescingWorker.ts
 const makeKeyedCoalescingWorker = (options) => gen(function* () {
 	const queue = yield* acquireRelease(unbounded(), shutdown);
-	const stateRef = yield* make$31({
+	const stateRef = yield* make$30({
 		latestByKey: /* @__PURE__ */ new Map(),
 		queuedKeys: /* @__PURE__ */ new Set(),
 		activeKeys: /* @__PURE__ */ new Set()
@@ -238812,14 +238874,14 @@ const makeTerminalManagerWithOptions = fn$1("makeTerminalManagerWithOptions")(fu
 	const processKillGraceMs = options.processKillGraceMs ?? DEFAULT_PROCESS_KILL_GRACE_MS;
 	const maxRetainedInactiveSessions = options.maxRetainedInactiveSessions ?? DEFAULT_MAX_RETAINED_INACTIVE_SESSIONS;
 	yield* fileSystem.makeDirectory(logsDir, { recursive: true }).pipe(orDie);
-	const managerStateRef = yield* make$32({
+	const managerStateRef = yield* make$31({
 		sessions: /* @__PURE__ */ new Map(),
 		killFibers: /* @__PURE__ */ new Map()
 	});
-	const threadLocksRef = yield* make$32(/* @__PURE__ */ new Map());
+	const threadLocksRef = yield* make$31(/* @__PURE__ */ new Map());
 	const terminalEventListeners = /* @__PURE__ */ new Set();
 	const transitionReceipts = /* @__PURE__ */ new Map();
-	const workerScope = yield* make$37("sequential");
+	const workerScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(workerScope, void_$3));
 	const publishEvent = (event) => gen(function* () {
 		for (const listener of terminalEventListeners) yield* listener(event).pipe(ignoreCause({ log: true }));
@@ -238834,7 +238896,7 @@ const makeTerminalManagerWithOptions = fn$1("makeTerminalManagerWithOptions")(fu
 	const modifyManagerState = (f) => modify$2(managerStateRef, f);
 	const getThreadSemaphore = (threadId) => modifyEffect(threadLocksRef, (current) => {
 		return match(fromNullishOr(current.get(threadId)), {
-			onNone: () => make$44(1).pipe(map$3((semaphore) => {
+			onNone: () => make$43(1).pipe(map$3((semaphore) => {
 				const next = new Map(current);
 				next.set(threadId, semaphore);
 				return [semaphore, next];
@@ -241722,6 +241784,18 @@ var SpriteTaskHoldManager = class {
 		return [...this.#holds.keys()];
 	}
 	/**
+	* Every hold key currently associated with one thread: what `releaseThread`
+	* releases. Read-only and synchronous, so a caller can snapshot what is
+	* live right now and decide later, from that snapshot, what it is still
+	* safe to release -- rather than asking this manager what is live AFTER
+	* some delay of its own, by which point a fresh acquire may have replaced
+	* the very hold the caller meant to release (SpriteTaskHoldReactor's
+	* session.exited handling does exactly this, forge#3602).
+	*/
+	activeTurnIdsForThread(threadId) {
+		return [...this.#holds.entries()].filter(([, hold]) => hold.threadId === threadId).map(([turnId]) => turnId);
+	}
+	/**
 	* `maxRefreshes` bounds a hold that has no terminal event of its own, such as a launch
 	* whose turn may never start. When the budget is spent the hold releases itself.
 	*
@@ -241997,7 +242071,7 @@ var SpriteTaskHoldManager = class {
 	* from silently dropping the holds of the other turns running beside it.
 	*/
 	async releaseThread(threadId) {
-		const turnIds = [...this.#holds.entries()].filter(([, hold]) => hold.threadId === threadId).map(([turnId]) => turnId);
+		const turnIds = this.activeTurnIdsForThread(threadId);
 		await Promise.all(turnIds.map((turnId) => this.release(turnId)));
 	}
 	/**
@@ -287854,7 +287928,7 @@ const GitManagerLive = effect(GitManager, fn$1("makeGitManager")(function* () {
 		preparePullRequestThread,
 		runStackedAction: fn$1("runStackedAction")(function* (input, options) {
 			const progress = createProgressEmitter(input, options);
-			const currentPhase = yield* make$50(none$4());
+			const currentPhase = yield* make$49(none$4());
 			return yield* fn$1("runStackedAction.runAction")(function* () {
 				const initialStatus = yield* gitCore.statusDetails(input.cwd);
 				const wantsCommit = isCommitAction(input.action);
@@ -289795,7 +289869,7 @@ const ApprovedWorkerPlanReactorLive = effect(ApprovedWorkerPlanReactor, gen(func
 	const git = yield* GitCore;
 	const runPromise = runPromiseWith(yield* context());
 	const eventState = makeApprovedWorkerPlanEventState();
-	const reconcileSemaphore = yield* make$44(1);
+	const reconcileSemaphore = yield* make$43(1);
 	const dispatch = (command) => runPromise(orchestration.dispatch(command).pipe(asVoid));
 	const readMasterContext = async (prompt) => {
 		const thread = getOrNull(await runPromise(readDurableWorkerDetail(projectionSnapshotQuery, ThreadId.make(prompt.masterThreadId))));
@@ -291071,7 +291145,7 @@ const makeRuntimeDrainReporter = gen(function* () {
 	const providerService = yield* ProviderService;
 	const serverConfig = yield* ServerConfig;
 	const spriteTaskHoldReactor = yield* SpriteTaskHoldReactor;
-	const reportSemaphore = yield* make$44(1);
+	const reportSemaphore = yield* make$43(1);
 	let heartbeatSilent = false;
 	const applyControlPlaneState = (runtime) => drainState.applyControlPlaneState({
 		draining: runtime.draining,
@@ -291654,7 +291728,7 @@ function shouldApplyProviderTurnCompleted(activeTurnId, eventTurnId) {
 const ProviderRuntimeIngestionLive = effect(ProviderRuntimeIngestionService, fn$1("make")(function* () {
 	const orchestrationEngine = yield* OrchestrationEngineService;
 	const claudeUsageTelemetry = yield* ClaudeUsageTelemetry;
-	const claudeUsageScope = yield* make$37("parallel");
+	const claudeUsageScope = yield* make$36("parallel");
 	yield* addFinalizer$2(() => close(claudeUsageScope, void_$3));
 	const providerService = yield* ProviderService;
 	const projectionTurnRepository = yield* ProjectionTurnRepository;
@@ -292293,7 +292367,7 @@ const ClaudeUsageTelemetryLive = effect(ClaudeUsageTelemetry, gen(function* () {
 */
 const makeDrainableWorker = (process) => gen(function* () {
 	const queue = yield* acquireRelease(unbounded(), shutdown);
-	const outstanding = yield* make$31(0);
+	const outstanding = yield* make$30(0);
 	yield* take(queue).pipe(tap((a) => ensuring(process(a), update$1(outstanding, (n) => n - 1))), forever$1, forkScoped);
 	const drain = get$1(outstanding).pipe(tap((n) => n > 0 ? txRetry : void_$1), tx$1);
 	const enqueue = (element) => offer(queue, element).pipe(tap(() => update$1(outstanding, (n) => n + 1)), tx$1);
@@ -293086,7 +293160,7 @@ const ProviderCommandReactorLive = effect(ProviderCommandReactor, gen(function*
 	* gap between the ack and this call (review item 1).
 	*/
 	const watchTurnStartOutcome = fn$1("watchTurnStartOutcome")(function* (input) {
-		const lastRetrySignal = yield* make$50(null);
+		const lastRetrySignal = yield* make$49(null);
 		const terminalEvent = yield* fromQueue(input.events).pipe(mapEffect$1((event) => gen(function* () {
 			if (event.type === "runtime.warning") {
 				const classified = classifyRetryableProviderFailure(event.payload.message);
@@ -294970,6 +295044,9 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 	};
 }));
 //#endregion
+//#region src/runtimeReplication/Services/RuntimeReplicationThreadFlush.ts
+var RuntimeReplicationThreadFlush = class extends Service$1()("forge/runtimeReplication/Services/RuntimeReplicationThreadFlush") {};
+//#endregion
 //#region src/orchestration/Layers/SpriteTaskHoldReactor.ts
 /**
 * Holds the sprite awake for the duration of every agent turn.
@@ -294985,6 +295062,48 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 * `turn.started` / `turn.completed` through `ProviderService.streamEvents`.
 */
 /**
+* Bound for how long a terminal turn event (`turn.completed` / `turn.aborted`)
+* waits on that thread's pending replication before releasing the sprite's
+* turn hold anyway (forge#3600). The sprite freezes about a second after the
+* hold goes, so this is also roughly how much longer a finished turn's sprite
+* stays billed.
+*
+* Justified from the numbers already in this codebase, not a guess: the
+* outbox drain loop claims and posts on a 2 s tick
+* (`Schedule.spaced("2 seconds")` in RuntimeReplication.ts), each CMMD publish
+* attempt has its own 10 s deadline (`RUNTIME_REPLICATION_TIMEOUT_MS` in
+* RuntimeReplicationClient.ts), and `claim()` orders a thread's inventory row
+* ahead of its thread-events row, so one tick can mean two requests before the
+* thread's own batch goes out. 15 s covers one drain tick plus one full
+* publish attempt with headroom for that second request, while still keeping
+* a completed turn's sprite from staying billed anywhere near CMMD's own
+* stalled-turn sweep window (production: about 15 minutes, per forge#3600).
+*/
+const REPLICATION_FLUSH_TIMEOUT_MS = 15e3;
+/**
+* How often the flush re-checks the thread's outbox row while waiting. Short
+* enough that the wait tracks CMMD's actual ack latency (typically well under
+* a second) rather than the bound, long enough that a 15 s wait costs at most
+* about 60 reads against the outbox table.
+*/
+const REPLICATION_FLUSH_POLL_INTERVAL_MS = 250;
+/**
+* A single extra wait before trusting a flush's very first "nothing pending"
+* read (forge#3600 review follow-up). SpriteTaskHoldReactor and
+* RuntimeReplication's own domain-event-driven enqueue are independent
+* subscribers of the same ProviderService.streamEvents broadcast: this
+* reactor can see turn.completed and read the outbox before the OTHER
+* subscriber has finished projecting the turn's final events into a row. In
+* both production runs behind forge#3600, the final assistant_message and
+* turn_usage writes landed about a second apart from each other (00:43:15Z
+* and 00:43:16Z), so an immediate "nothing pending" read cannot be trusted:
+* that is exactly the race that stranded both turns. One settle wait,
+* re-checked once, closes it without turning every genuinely idle turn's
+* release into a long poll -- a thread that already has nothing to replicate
+* pays this once, never the full flushTimeoutMs bound.
+*/
+const REPLICATION_FLUSH_SETTLE_MS = 1e3;
+/**
 * A launch hold refreshes every 60 s, so this budget is about ten minutes. A launch whose turn
 * never starts, because the provider refused it or the process died first, has no event to
 * release it. The budget is what stops that hold from keeping the sprite billing.
@@ -295002,8 +295121,69 @@ const TURN_START_HOLD_MAX_REFRESHES = 10;
 /** The hold id for `holdTurnStart` / `releaseTurnStart`. Distinct from `launchHoldId` on purpose:
 * see the shape's doc comment on `holdTurnStart`. */
 const turnStartHoldId = (key) => `turn-start-${key}`;
-const SpriteTaskHoldReactorLive = effect(SpriteTaskHoldReactor, gen(function* () {
+const makeSpriteTaskHoldReactor = (overrides = {}) => gen(function* () {
 	const providerService = yield* ProviderService;
+	const replicationOutbox = yield* RuntimeReplicationThreadFlush;
+	const replicationRuntimeId = resolveRuntimeReplicationRuntimeId(yield* ServerConfig);
+	const flushTimeoutMs = overrides.replicationFlushTimeoutMs ?? REPLICATION_FLUSH_TIMEOUT_MS;
+	const flushPollIntervalMs = overrides.replicationFlushPollIntervalMs ?? REPLICATION_FLUSH_POLL_INTERVAL_MS;
+	const flushSettleMs = overrides.replicationFlushSettleMs ?? REPLICATION_FLUSH_SETTLE_MS;
+	/**
+	* Waits for CMMD to acknowledge this thread's outstanding replication -- or
+	* for nothing to have been pending in the first place -- before the caller
+	* releases the turn hold that keeps the sprite awake for the outbox drain
+	* loop to run (forge#3600). Bounded so a wedged publish cannot hold a
+	* finished turn's sprite open indefinitely: the bound firing releases
+	* anyway and logs a warning with however much was still outstanding.
+	*
+	* Never fails: a defect from the outbox read (a SQL error, say) is caught
+	* and treated the same as a timeout -- release the hold rather than let a
+	* replication-read bug strand the sprite awake, or worse, crash the worker
+	* that also has to release every OTHER turn's hold.
+	*/
+	const flushThreadReplication = (threadId) => {
+		if (replicationRuntimeId === void 0) return void_$1;
+		const runtimeId = replicationRuntimeId;
+		const streamKey = `thread:${threadId}`;
+		const startedAt = Date.now();
+		const poll = (phase) => replicationOutbox.readPendingCount({
+			runtimeId,
+			streamKey
+		}).pipe(flatMap((pending) => {
+			if (pending === 0) {
+				if (phase === "initial") return sleep$4(flushSettleMs).pipe(andThen(suspend$1(() => poll("settle-recheck"))));
+				return succeed({
+					outcome: phase === "settle-recheck" ? "nothing_pending" : "delivered",
+					pending,
+					settled: phase === "settle-recheck"
+				});
+			}
+			if (Date.now() - startedAt >= flushTimeoutMs) return succeed({
+				outcome: "timed_out",
+				pending,
+				settled: false
+			});
+			return sleep$4(flushPollIntervalMs).pipe(andThen(suspend$1(() => poll("steady"))));
+		}));
+		return poll("initial").pipe(flatMap(({ outcome, pending, settled }) => {
+			const elapsedMs = Date.now() - startedAt;
+			const logOutcome = logInfo("sprite task hold replication flush", {
+				threadId,
+				outcome,
+				pending,
+				elapsedMs,
+				...settled ? { settledMs: flushSettleMs } : {}
+			});
+			return outcome === "timed_out" ? logOutcome.pipe(andThen(logWarning$1("sprite task hold replication flush timed out; releasing the turn hold anyway", {
+				threadId,
+				pending,
+				elapsedMs
+			}))) : logOutcome;
+		}), catchCause((cause) => logError("sprite task hold replication flush failed; releasing the turn hold anyway", {
+			threadId,
+			cause: pretty(cause)
+		})));
+	};
 	const manager = makeSpriteTaskHoldManager(process.env, (message, cause) => {
 		runFork(logWarning$1(message, { cause: cause instanceof Error ? cause.message : cause }));
 	}, (event) => {
@@ -295032,61 +295212,111 @@ const SpriteTaskHoldReactorLive = effect(SpriteTaskHoldReactor, gen(function* ()
 	const launchCallers = /* @__PURE__ */ new Map();
 	const launchGeneration = /* @__PURE__ */ new Map();
 	const turnLaunchGeneration = /* @__PURE__ */ new Map();
+	const turnHoldGeneration = /* @__PURE__ */ new Map();
+	let nextTurnHoldGeneration = 0;
 	/**
-	* Belt-and-braces cleanup for a turn reaching a terminal state
-	* (turn.completed or turn.aborted): a launch hold whose hand-off never
-	* confirmed (the turn hold's PUT kept failing) is still up, refreshing on
-	* its own budget, and the turn ending either way means the launch phase is
-	* over. `manager.release(String(turnId))` above can itself wait on the
-	* guest API, so by the time this runs the NEXT stage's own dispatch may
-	* already have acquired a fresh launch hold for the same thread; only
-	* release it here when no such newer launch has started since this turn's
-	* own turn.started was processed (CodeRabbit review, forge#3592). A no-op
-	* when this turn's own generation is stale, or when the hold was already
-	* released.
+	* Release a launch hold left over from a turn hand-off that never
+	* confirmed, once the turn it was covering has reached a terminal state
+	* one way or another. `capturedGeneration` must be read from
+	* `turnLaunchGeneration` by the caller before this runs -- see that map's
+	* own doc comment for why the read cannot happen in here. A no-op when
+	* nothing was captured, when a newer launch has since superseded it, or
+	* when the hold was already released.
 	*/
-	const releaseLingeringLaunchHold = async (turnId, threadId) => {
-		const capturedGeneration = turnLaunchGeneration.get(turnId);
-		turnLaunchGeneration.delete(turnId);
+	const releaseLingeringLaunchHoldIfCurrent = async (threadId, capturedGeneration) => {
 		if (manager === null || capturedGeneration === void 0) return;
 		if (launchGeneration.get(threadId) !== capturedGeneration) return;
 		await manager.release(launchHoldId(threadId));
 	};
+	/**
+	* Release a completed or aborted turn's hold, once its thread's pending
+	* replication has flushed (forge#3600). Skips the release entirely once
+	* `turnHoldGeneration` has moved past `expectedGeneration`: see that map's
+	* own doc comment for the reused-turnId race this guards against.
+	*/
+	const processTerminalItem = (item) => flushThreadReplication(item.threadId).pipe(andThen(promise(async () => {
+		if (manager === null) return;
+		if (turnHoldGeneration.get(item.turnId) !== item.expectedGeneration) return;
+		await manager.release(item.turnId);
+		await releaseLingeringLaunchHoldIfCurrent(item.threadId, item.capturedLaunchGeneration);
+		if (turnHoldGeneration.get(item.turnId) === item.expectedGeneration) turnHoldGeneration.delete(item.turnId);
+	})));
+	/**
+	* Release every hold a dead session was covering, once its thread's
+	* pending replication has flushed (#3603 item 1: this used to call
+	* `manager.releaseThread` on the spot, with nothing stopping a provider
+	* process that died right after its own turn from stranding that turn's
+	* final events the same way forge#3600 did for a clean completion).
+	* `turns` and `capturedLaunchGeneration` are snapshotted by the caller at
+	* session.exited time, BEFORE the flush runs: a launch or a turn that
+	* starts on this thread WHILE the flush is running must survive. Reading
+	* "what is live for this thread" only AFTER the flush -- the naive
+	* flush-then-releaseThread shape -- would reopen the exact hand-off gap
+	* forge#3589 already closed once, just moved behind a longer wait.
+	*/
+	const processSessionExited = (item) => flushThreadReplication(item.threadId).pipe(andThen(promise(async () => {
+		if (manager === null) return;
+		await Promise.all(item.turns.filter((turn) => turnHoldGeneration.get(turn.turnId) === turn.expectedGeneration).map(async (turn) => {
+			await manager.release(turn.turnId);
+			if (turnHoldGeneration.get(turn.turnId) === turn.expectedGeneration) turnHoldGeneration.delete(turn.turnId);
+		}));
+		await releaseLingeringLaunchHoldIfCurrent(item.threadId, item.capturedLaunchGeneration);
+	})));
 	const start = fn$1("start")(function* () {
 		if (manager === null) return;
+		const terminalFibers = yield* make$50();
+		const onTurnStarted = (turnIdKey, threadId) => {
+			const generation = launchGeneration.get(threadId) ?? 0;
+			turnHoldGeneration.set(turnIdKey, ++nextTurnHoldGeneration);
+			return promise(async () => {
+				const outcome = await manager.acquire(turnIdKey, threadId);
+				launchCallers.delete(threadId);
+				turnLaunchGeneration.set(turnIdKey, generation);
+				if (outcome === "succeeded") await manager.release(launchHoldId(threadId));
+			});
+		};
+		/** Shared by turn.completed and turn.aborted: see the dispatch below for why they are distinct wire events but handled identically. */
+		const onTerminalTurnEvent = (turnIdKey, threadIdKey) => {
+			const capturedLaunchGeneration = turnLaunchGeneration.get(turnIdKey);
+			turnLaunchGeneration.delete(turnIdKey);
+			return run$3(terminalFibers, processTerminalItem({
+				turnId: turnIdKey,
+				threadId: threadIdKey,
+				expectedGeneration: turnHoldGeneration.get(turnIdKey) ?? 0,
+				capturedLaunchGeneration
+			})).pipe(asVoid);
+		};
+		const onSessionExited = (threadId) => {
+			launchCallers.delete(threadId);
+			const launchKey = launchHoldId(threadId);
+			const turns = manager.activeTurnIdsForThread(threadId).filter((turnId) => turnId !== launchKey).map((turnId) => ({
+				turnId,
+				expectedGeneration: turnHoldGeneration.get(turnId) ?? 0
+			}));
+			for (const turn of turns) turnLaunchGeneration.delete(turn.turnId);
+			return run$3(terminalFibers, processSessionExited({
+				threadId,
+				turns,
+				capturedLaunchGeneration: launchGeneration.get(threadId)
+			})).pipe(asVoid);
+		};
 		yield* forkScoped(runForEach(providerService.streamEvents, (event) => {
 			if (event.type === "turn.started") {
 				const turnId = event.turnId;
 				if (turnId === void 0) return void_$1;
-				const threadId = String(event.threadId);
-				const generation = launchGeneration.get(threadId) ?? 0;
-				return promise(async () => {
-					const outcome = await manager.acquire(String(turnId), threadId);
-					launchCallers.delete(threadId);
-					turnLaunchGeneration.set(String(turnId), generation);
-					if (outcome === "succeeded") await manager.release(launchHoldId(threadId));
-				});
+				return onTurnStarted(String(turnId), String(event.threadId));
 			}
 			if (event.type === "turn.completed") {
 				const turnId = event.turnId;
 				if (turnId === void 0) return void_$1;
-				return promise(async () => {
-					await manager.release(String(turnId));
-					await releaseLingeringLaunchHold(String(turnId), String(event.threadId));
-				});
+				return onTerminalTurnEvent(String(turnId), String(event.threadId));
 			}
 			if (event.type === "turn.aborted") {
 				const turnId = event.turnId;
 				if (turnId === void 0) return void_$1;
-				return promise(async () => {
-					await manager.release(String(turnId));
-					await releaseLingeringLaunchHold(String(turnId), String(event.threadId));
-				});
-			}
-			if (event.type === "session.exited") {
-				launchCallers.delete(String(event.threadId));
-				return promise(() => manager.releaseThread(String(event.threadId)));
+				return onTerminalTurnEvent(String(turnId), String(event.threadId));
 			}
+			if (event.type === "session.exited") return onSessionExited(String(event.threadId));
 			return void_$1;
 		}));
 	});
@@ -295123,7 +295353,8 @@ const SpriteTaskHoldReactorLive = effect(SpriteTaskHoldReactor, gen(function* ()
 		releaseTurnStart,
 		releaseAll: onManager((taskHolds) => taskHolds.releaseAll())
 	};
-}));
+});
+const SpriteTaskHoldReactorLive = effect(SpriteTaskHoldReactor, makeSpriteTaskHoldReactor());
 //#endregion
 //#region src/orchestration/Layers/PlanTaskCreationReactor.ts
 var PlanMaterializationRequestError = class extends TaggedError("PlanMaterializationRequestError") {};
@@ -295950,7 +296181,7 @@ const readOpenCodeApiKey = (_settings) => process.env.OPENCODE_API_KEY || proces
 const runOpenCodeCommand = fn$1("runOpenCodeCommand")(function* (binaryPath, args) {
 	const useShell = process.platform === "win32";
 	if (useShell && !isShellSafeCommandPath(binaryPath)) return yield* fail(/* @__PURE__ */ new Error(`Refusing to spawn opencode: \`binaryPath\` contains shell metacharacters that cmd.exe would interpret as additional commands.`));
-	return yield* spawnAndCollect(binaryPath, make$48(binaryPath, [...args], {
+	return yield* spawnAndCollect(binaryPath, make$47(binaryPath, [...args], {
 		shell: useShell,
 		env: scrubForgeProviderChildEnvSecrets(process.env)
 	}));
@@ -296175,6 +296406,31 @@ const loadProviders = (codexProvider, claudeProvider, ollamaProvider, cmmdProvid
 	opencodeProvider.getSnapshot
 ], { concurrency: "unbounded" });
 const haveProvidersChanged = (previousProviders, nextProviders) => !equals(previousProviders, nextProviders);
+/**
+* Keep publishing a previous good reading, marked stale, across a probe that
+* could not check rather than replacing it with a false "not on this
+* environment" (forge#3588).
+*
+* A Sprite freezes the cgroup about a second after the last inbound request,
+* so a probe already in flight at the freeze resumes into a timeout that
+* proves nothing: `checkCodexProviderStatus`/`checkClaudeProviderStatus` mark
+* exactly that shape `availabilityCheck: "could-not-check"`. When the last
+* thing this registry confirmed for the same provider was available, this
+* keeps publishing THAT reading rather than the fresh could-not-check one,
+* stamped stale with the time it was last confirmed. A provider with no prior
+* confirmed reading, or one whose previous reading was itself withheld, has
+* nothing to carry forward, so the fresh (still unavailable) reading stands.
+*/
+function carryForwardStaleReading(incoming, previous) {
+	if (incoming.availabilityCheck !== "could-not-check") return incoming;
+	if (previous === void 0 || previous.availability !== "available") return incoming;
+	return {
+		...previous,
+		checkedAt: incoming.checkedAt,
+		availabilityCheck: "could-not-check",
+		lastConfirmedAt: previous.lastConfirmedAt ?? previous.checkedAt
+	};
+}
 const ProviderRegistryLive = effect(ProviderRegistry, gen(function* () {
 	const config = yield* ServerConfig;
 	const codexProvider = yield* CodexProvider;
@@ -296193,7 +296449,7 @@ const ProviderRegistryLive = effect(ProviderRegistry, gen(function* () {
 		provider
 	})]));
 	const fallbackByProvider = new Map(fallbackProviders.map((provider) => [provider.provider, provider]));
-	const providersRef = yield* make$50(yield* forEach(PROVIDER_CACHE_IDS, (provider) => {
+	const providersRef = yield* make$49(yield* forEach(PROVIDER_CACHE_IDS, (provider) => {
 		const filePath = cachePathByProvider.get(provider);
 		const fallbackProvider = fallbackByProvider.get(provider);
 		return readProviderStatusCache(filePath).pipe(provideService(FileSystem, fileSystem), map$3((cachedProvider) => {
@@ -296212,15 +296468,25 @@ const ProviderRegistryLive = effect(ProviderRegistry, gen(function* () {
 		error
 	})), ignore);
 	const upsertProviders = fn$1("upsertProviders")(function* (incomingProviders, options) {
-		const nextProviders = incomingProviders.map((provider) => withProviderAvailability(provider));
-		const [previousProviders, providers] = yield* modify$3(providersRef, (previousProviders) => {
-			const mergedProviders = new Map(previousProviders.map((provider) => [provider.provider, provider]));
-			for (const provider of nextProviders) mergedProviders.set(provider.provider, provider);
+		const withAvailability = incomingProviders.map((provider) => withProviderAvailability(provider));
+		const [previousProviders, providers, resolvedProviders] = yield* modify$3(providersRef, (previousProviders) => {
+			const previousByKind = new Map(previousProviders.map((provider) => [provider.provider, provider]));
+			const mergedProviders = new Map(previousByKind);
+			const resolvedProviders = [];
+			for (const provider of withAvailability) {
+				const resolved = carryForwardStaleReading(provider, previousByKind.get(provider.provider));
+				resolvedProviders.push(resolved);
+				mergedProviders.set(provider.provider, resolved);
+			}
 			const providers = orderProviderSnapshots([...mergedProviders.values()]);
-			return [[previousProviders, providers], providers];
+			return [[
+				previousProviders,
+				providers,
+				resolvedProviders
+			], providers];
 		});
 		if (haveProvidersChanged(previousProviders, providers)) {
-			yield* forEach(nextProviders, persistProvider, {
+			yield* forEach(resolvedProviders, persistProvider, {
 				concurrency: "unbounded",
 				discard: true
 			});
@@ -297299,7 +297565,7 @@ const makeWorkspaceBulkTransfer = (options = {}) => gen(function* () {
 	const workspacePaths = yield* WorkspacePaths;
 	const workspaceEntries = yield* WorkspaceEntries;
 	const fault = options.fault ?? (() => void_$1);
-	const transferLocks = yield* forEach(Array.from({ length: TRANSFER_LOCK_STRIPE_COUNT }), () => make$44(1));
+	const transferLocks = yield* forEach(Array.from({ length: TRANSFER_LOCK_STRIPE_COUNT }), () => make$43(1));
 	const withTransferLock = (transferId, effect) => transferLocks[transferLockStripe(transferId)].withPermit(effect);
 	const findTransfer = (transferId) => sql`
         SELECT transfer_id AS "transferId", workspace_root AS "workspaceRoot",
@@ -298346,7 +298612,7 @@ const make$3 = /* @__PURE__ */ fnUntraced(function* (options) {
 		excludeLogSpans: options.excludeLogSpans ?? false,
 		clock: yield* Clock
 	};
-	return make$33((options) => {
+	return make$32((options) => {
 		exporter.push(makeLogRecord(options, opts));
 	});
 });
@@ -298784,7 +299050,7 @@ const make$1 = /* @__PURE__ */ fnUntraced(function* (options) {
 		if (!span.sampled) return;
 		exporter.push(makeOtlpSpan(span));
 	}
-	return make$42({
+	return make$41({
 		span(options) {
 			return makeSpan({
 				...options,
@@ -299110,8 +299376,8 @@ const makeLocalFileTracer = fn$1("makeLocalFileTracer")(function* (options) {
 		maxFiles: options.maxFiles,
 		batchWindowMs: options.batchWindowMs
 	}));
-	const delegate = options.delegate ?? make$42({ span: (spanOptions) => new NativeSpan(spanOptions) });
-	return make$42({
+	const delegate = options.delegate ?? make$41({ span: (spanOptions) => new NativeSpan(spanOptions) });
+	return make$41({
 		span(spanOptions) {
 			return new LocalFileSpan(spanOptions, delegate.span(spanOptions), sink.push);
 		},
@@ -299235,7 +299501,7 @@ function resolveBuildCommitFromEnv(env) {
 * environment descriptor down instead of reporting an honest "unknown".
 */
 function readBakedBuildCommit() {
-	return "bb958274b2ec30ab04e69fa421419a546b6490de";
+	return "96780e9bb987ecd23f530709589bda1b4b5791e5";
 }
 async function resolveServerBuildCommit(input) {
 	if (isFullCommitSha(input.baked)) return input.baked;
@@ -299411,7 +299677,7 @@ const ServerEnvironmentLive = effect(ServerEnvironment, fn$1("makeServerEnvironm
 		return yield* decodeUnknownEffect(EnvironmentMetadata)(parsed).pipe(orElseSucceed(() => ({ displayName: null })));
 	});
 	const writeMetadata = (metadata) => fileSystem.writeFileString(serverConfig.environmentMetadataPath, `${JSON.stringify(metadata, null, 2)}\n`);
-	const displayNameOverrideRef = yield* make$50(normalizeDisplayName((yield* readMetadata).displayName ?? null));
+	const displayNameOverrideRef = yield* make$49(normalizeDisplayName((yield* readMetadata).displayName ?? null));
 	const posthog = yield* PosthogPublicConfig.asEffect();
 	const buildCommit = yield* promise(() => resolveServerBuildCommit({
 		baked: readBakedBuildCommit(),
@@ -301018,7 +301284,7 @@ const internalBootstrapCredentialError = (message, cause) => new BootstrapCreden
 const BootstrapCredentialServiceLive = effect(BootstrapCredentialService, gen(function* () {
 	const config = yield* ServerConfig;
 	const pairingLinks = yield* AuthPairingLinkRepository;
-	const seededGrantsRef = yield* make$50(/* @__PURE__ */ new Map());
+	const seededGrantsRef = yield* make$49(/* @__PURE__ */ new Map());
 	const changesPubSub = yield* unbounded$1();
 	const seedGrant = (credential, grant) => update$4(seededGrantsRef, (current) => {
 		const next = new Map(current);
@@ -301489,7 +301755,7 @@ const SessionCredentialServiceLive = effect(SessionCredentialService, gen(functi
 	if (serverConfig.forgeCloudShellMode === true && configuredSigningKey === null) return yield* die$1(/* @__PURE__ */ new Error("FORGE_SESSION_SIGNING_KEY must decode to at least 32 bytes in cloud-shell mode. Forge Cloud refuses to issue restart-unsafe or replica-local sessions."));
 	const signingSecret = configuredSigningKey ?? (yield* secretStore.getOrCreateRandom(SIGNING_SECRET_NAME, 32));
 	const statelessCookieSessions = configuredSigningKey !== null;
-	const connectedSessionsRef = yield* make$50(/* @__PURE__ */ new Map());
+	const connectedSessionsRef = yield* make$49(/* @__PURE__ */ new Map());
 	const changesPubSub = yield* unbounded$1();
 	const cookieName = resolveSessionCookieName({
 		mode: serverConfig.mode,
@@ -301998,7 +302264,7 @@ function verifyForgeCloudOwnerCallbackAssertion(assertion, config) {
 	}));
 	const verifier = assertionVerifierConfig(config);
 	const verified = verifier ? verifyAssertion(assertion, verifier) : null;
-	const expiresAt = verified ? make$38(verified.expiresAtMilliseconds) : none$4();
+	const expiresAt = verified ? make$37(verified.expiresAtMilliseconds) : none$4();
 	if (!verified || isNone(expiresAt)) return fail(new AuthError({
 		message: "Invalid Forge Cloud owner assertion.",
 		status: 401
@@ -304400,7 +304666,7 @@ const OrchestrationEngineLive = effect(OrchestrationEngineService, gen(function*
 	const getReadModel = () => sync$1(() => readModel);
 	const readEvents = (fromSequenceExclusive) => eventStore.readFromSequence(fromSequenceExclusive);
 	const dispatch = (command) => gen(function* () {
-		const result = yield* make$39();
+		const result = yield* make$38();
 		yield* offer$1(commandQueue, {
 			command,
 			result,
@@ -313611,7 +313877,7 @@ const RuntimeReplicationLive = effect(RuntimeReplication, gen(function* () {
 	const terminal = yield* serviceOption(TerminalManager);
 	const activeHourMeter = yield* ActiveHourMeter;
 	const runtimeId = resolveRuntimeReplicationRuntimeId(config);
-	const outboxWarningActive = yield* make$50(false);
+	const outboxWarningActive = yield* make$49(false);
 	const enqueueInventoryPayload = (payload) => runtimeId ? outbox.enqueue({
 		runtimeId,
 		streamKey: "inventory",
@@ -314802,6 +315068,36 @@ const RuntimeReplicationOutboxLive = effect(RuntimeReplicationOutbox, gen(functi
 		getDiagnostics
 	});
 }));
+//#endregion
+//#region src/runtimeReplication/Layers/RuntimeReplicationThreadFlush.ts
+/**
+* A thread's outbox row holds its whole unacknowledged batch as one
+* `{ events: [...] }` payload -- RuntimeReplicationOutbox upserts by
+* `(runtime_id, stream_key)`, so there is at most one row per thread -- so the
+* count is that array's length. A row whose payload does not decode that way
+* (a blocked THREAD_STREAM_LOCAL_HISTORY_CONFLICT placeholder, for instance)
+* still represents one undelivered publication, so it counts as 1 rather than
+* 0: a caller bounding a wait on this number must never read a blocked row as
+* "nothing pending".
+*/
+function pendingEventCount(payloadJson) {
+	try {
+		const parsed = JSON.parse(payloadJson);
+		if (Array.isArray(parsed.events)) return parsed.events.length;
+	} catch {}
+	return 1;
+}
+const RuntimeReplicationThreadFlushLive = effect(RuntimeReplicationThreadFlush, gen(function* () {
+	const sql = yield* SqlClient;
+	const readPendingCount = (input) => sql`
+        SELECT payload_json AS "payloadJson" FROM runtime_replication_outbox
+        WHERE runtime_id = ${input.runtimeId} AND stream_key = ${input.streamKey}
+      `.pipe(map$3((rows) => {
+		const row = rows[0];
+		return row === void 0 ? 0 : pendingEventCount(row.payloadJson);
+	}), orDie);
+	return RuntimeReplicationThreadFlush.of({ readPendingCount });
+}));
 /**
 * Gates guest-side Active Hour measurement (FOR-32642). Shadow-only: even
 * with this on, whether a reported interval is also recorded against the
@@ -314834,7 +315130,7 @@ const isActiveHourMeteringEnabled = gen(function* () {
 }).pipe(catch_(() => succeed(false)));
 const ActiveHourMeterLive = effect(ActiveHourMeter, gen(function* () {
 	const outbox = yield* RuntimeReplicationOutbox;
-	const statesByRuntime = yield* make$50(/* @__PURE__ */ new Map());
+	const statesByRuntime = yield* make$49(/* @__PURE__ */ new Map());
 	const markAwake = (runtimeId) => gen(function* () {
 		if (!(yield* isActiveHourMeteringEnabled)) return;
 		yield* update$4(statesByRuntime, (states) => {
@@ -316863,7 +317159,7 @@ const PipelineRunCoordinatorLive = effect(PipelineRunCoordinator, gen(function*
 	const providerAuthorityInstallations = /* @__PURE__ */ new Map();
 	const providerAuthorityPublications = /* @__PURE__ */ new Map();
 	const preparedHandoffs = /* @__PURE__ */ new WeakMap();
-	const authorityCleanupScope = yield* make$37("parallel");
+	const authorityCleanupScope = yield* make$36("parallel");
 	yield* addFinalizer$2(() => close(authorityCleanupScope, void_$3));
 	const retryAuthoritySecretCleanup = (work, cause) => {
 		const now = /* @__PURE__ */ new Date();
@@ -317239,12 +317535,12 @@ const PipelineRunCoordinatorLive = effect(PipelineRunCoordinator, gen(function*
 		if (!preparedHandoffMatchesRun(preparedHandoff, input.runId)) return yield* coordinatorError("registerHandoff", "PIPELINE_HANDOFF_PREPARATION_INVALID", "The pipeline handoff preparation is missing, belongs to another run, or was already consumed.");
 		preparedHandoffs.delete(input.preparedHandoff);
 		const ownedProviderAuthorityInstallations = /* @__PURE__ */ new Set();
-		const preparedAuthorityRef = yield* make$50({
+		const preparedAuthorityRef = yield* make$49({
 			authority: preparedHandoff.authority,
 			preparation: preparedHandoff.providerAuthorityPreparation
 		});
-		const acceptingHeartbeatRef = yield* make$50(true);
-		const heartbeatPublicationSemaphore = yield* make$44(1);
+		const acceptingHeartbeatRef = yield* make$49(true);
+		const heartbeatPublicationSemaphore = yield* make$43(1);
 		if ((yield* store.getByRunId(input.runId)) !== null) return yield* coordinatorError("registerHandoff", "PIPELINE_HANDOFF_ALREADY_BOUND", "The CMMD run already has a Forge task thread and must use the authority rebind contract.");
 		const snapshot = preparedHandoff.snapshot;
 		const readModel = yield* orchestration.getReadModel();
@@ -321126,7 +321422,7 @@ function makeProjectLeadSchedulerLive(options = {}) {
 	return effect(ProjectLeadScheduler, gen(function* () {
 		const client = yield* ProjectLeadControllerClient;
 		const dispatcher = yield* ProjectLeadReservationDispatcher;
-		const semaphore = yield* make$44(1);
+		const semaphore = yield* make$43(1);
 		const leaseSeconds = options.leaseSeconds ?? DEFAULT_LEASE_SECONDS;
 		const batchSize = options.batchSize ?? DEFAULT_BATCH_SIZE;
 		const projectLimit = options.projectLimit ?? DEFAULT_PROJECT_LIMIT;
@@ -322091,14 +322387,14 @@ const AgentProtocolReactorLive = effect(AgentProtocolReactor, gen(function* () {
 const PRUNE_GRACE_MS = 6e4;
 const makeUserSlot = gen(function* () {
 	return {
-		snapshotRef: yield* make$50(null),
+		snapshotRef: yield* make$49(null),
 		pubsub: yield* unbounded$1(),
-		subscriberCountRef: yield* make$50(0)
+		subscriberCountRef: yield* make$49(0)
 	};
 });
 const WorkspaceReadinessStateLive = effect(WorkspaceReadinessState, gen(function* () {
-	const slotsRef = yield* make$32(/* @__PURE__ */ new Map());
-	const pruneScope = yield* make$37("sequential");
+	const slotsRef = yield* make$31(/* @__PURE__ */ new Map());
+	const pruneScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(pruneScope, void_$3));
 	/**
 	* Atomically get-or-create the slot for `userId`. The Synchronized wrapper
@@ -323159,8 +323455,8 @@ const PtyAdapterLive = unwrap(gen(function* () {
 }));
 const HttpServerLive = unwrap(gen(function* () {
 	const config = yield* ServerConfig;
-	if (typeof Bun !== "undefined") return (yield* promise(() => import("./BunHttpServer-BpaVqxli.mjs"))).layer(bunHttpServerOptions(config));
-	const [NodeHttpServer, NodeHttp] = yield* all([promise(() => import("./NodeHttpServer-DePOzmYy.mjs")), promise(() => import("node:http"))]);
+	if (typeof Bun !== "undefined") return (yield* promise(() => import("./BunHttpServer-o7ISooSQ.mjs"))).layer(bunHttpServerOptions(config));
+	const [NodeHttpServer, NodeHttp] = yield* all([promise(() => import("./NodeHttpServer-BngJqAIT.mjs")), promise(() => import("node:http"))]);
 	return NodeHttpServer.layer(NodeHttp.createServer, {
 		host: config.host,
 		port: config.port
@@ -323175,7 +323471,7 @@ const PlatformServicesLive = unwrap(gen(function* () {
 		return layer;
 	}
 }));
-const RuntimeReplicationLayerLive = RuntimeReplicationLive.pipe(provideMerge(RuntimeReplicationClientLive), provideMerge(RuntimeReplicationOutboxLive), provideMerge(ActiveHourMeterLive.pipe(provide$1(RuntimeReplicationOutboxLive))));
+const RuntimeReplicationLayerLive = RuntimeReplicationLive.pipe(provideMerge(RuntimeReplicationClientLive), provideMerge(RuntimeReplicationOutboxLive), provideMerge(RuntimeReplicationThreadFlushLive), provideMerge(ActiveHourMeterLive.pipe(provide$1(RuntimeReplicationOutboxLive))));
 const RuntimeDrainLayerLive = RuntimeDrainReporterLive.pipe(provideMerge(RuntimeDrainStateLive));
 const RuntimeAwareProviderReactorsLive = mergeAll(ProviderRuntimeIngestionLive, ProviderCommandReactorLive).pipe(provide$1(RuntimeDrainLayerLive), provideMerge(RuntimeDrainStateLive), provide$1(ClaudeUsageTelemetryLive));
 const PipelineWorkerCoordinatorLayerLive = PipelineWorkerCoordinatorLive.pipe(provideMerge(PipelineRunClientLive));
@@ -323948,7 +324244,7 @@ const tokenOnlyFlag = boolean$2("token-only").pipe(withDescription$2("Print only
 * it stays least-privilege unless the operator asks otherwise.
 */
 const pairingRoleFlag = choice("role", ["owner", "client"]).pipe(withDescription$2("Role for the issued pairing token."), withDefault("client"));
-const pairingCreateCommand = make$34("create", {
+const pairingCreateCommand = make$33("create", {
 	...authLocationFlags,
 	ttl: ttlFlag,
 	role: pairingRoleFlag,
@@ -323966,24 +324262,24 @@ const pairingCreateCommand = make$34("create", {
 		...isSome(flags.baseUrl) ? { baseUrl: flags.baseUrl.value } : {}
 	}));
 }), { quietLogs: flags.json })));
-const pairingListCommand = make$34("list", {
+const pairingListCommand = make$33("list", {
 	...authLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription$1("List active client pairing tokens without revealing their secrets."), withHandler((flags) => runWithAuthControlPlane(flags, (authControlPlane) => gen(function* () {
 	yield* log$3(formatPairingCredentialList(yield* authControlPlane.listPairingLinks({ role: "client" }), { json: flags.json }));
 }), { quietLogs: flags.json })));
-const pairingRevokeCommand = make$34("revoke", {
+const pairingRevokeCommand = make$33("revoke", {
 	...authLocationFlags,
 	id: string$4("id").pipe(withDescription$3("Pairing credential id to revoke."))
 }).pipe(withDescription$1("Revoke an active client pairing token."), withHandler((flags) => runWithAuthControlPlane(flags, (authControlPlane) => gen(function* () {
 	yield* log$3((yield* authControlPlane.revokePairingLink(flags.id)) ? `Revoked pairing credential ${flags.id}.\n` : `No active pairing credential found for ${flags.id}.\n`);
 }))));
-const pairingCommand = make$34("pairing").pipe(withDescription$1("Manage one-time client pairing tokens."), withSubcommands([
+const pairingCommand = make$33("pairing").pipe(withDescription$1("Manage one-time client pairing tokens."), withSubcommands([
 	pairingCreateCommand,
 	pairingListCommand,
 	pairingRevokeCommand
 ]));
-const sessionIssueCommand = make$34("issue", {
+const sessionIssueCommand = make$33("issue", {
 	...authLocationFlags,
 	ttl: ttlFlag,
 	role: sessionRoleFlag,
@@ -324002,25 +324298,25 @@ const sessionIssueCommand = make$34("issue", {
 		tokenOnly: flags.tokenOnly
 	}));
 }), { quietLogs: flags.json || flags.tokenOnly })));
-const sessionListCommand = make$34("list", {
+const sessionListCommand = make$33("list", {
 	...authLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription$1("List active sessions without revealing bearer tokens."), withHandler((flags) => runWithAuthControlPlane(flags, (authControlPlane) => gen(function* () {
 	yield* log$3(formatSessionList(yield* authControlPlane.listSessions(), { json: flags.json }));
 }), { quietLogs: flags.json })));
-const sessionRevokeCommand = make$34("revoke", {
+const sessionRevokeCommand = make$33("revoke", {
 	...authLocationFlags,
 	sessionId: string$4("session-id").pipe(withDescription$3("Session id to revoke."), withSchema$1(AuthSessionId))
 }).pipe(withDescription$1("Revoke an active session."), withHandler((flags) => runWithAuthControlPlane(flags, (authControlPlane) => gen(function* () {
 	yield* log$3((yield* authControlPlane.revokeSession(flags.sessionId)) ? `Revoked session ${flags.sessionId}.\n` : `No active session found for ${flags.sessionId}.\n`);
 }))));
-const sessionCommand = make$34("session").pipe(withDescription$1("Manage bearer sessions."), withSubcommands([
+const sessionCommand = make$33("session").pipe(withDescription$1("Manage bearer sessions."), withSubcommands([
 	sessionIssueCommand,
 	sessionListCommand,
 	sessionRevokeCommand
 ]));
-const authCommand = make$34("auth").pipe(withDescription$1("Manage the local auth control plane for headless deployments."), withSubcommands([pairingCommand, sessionCommand]));
-const projectAddCommand = make$34("add", {
+const authCommand = make$33("auth").pipe(withDescription$1("Manage the local auth control plane for headless deployments."), withSubcommands([pairingCommand, sessionCommand]));
+const projectAddCommand = make$33("add", {
 	...projectLocationFlags,
 	workspaceRoot: string$4("path").pipe(withDescription$3("Workspace root to add as a project.")),
 	title: string$3("title").pipe(withDescription$2("Optional project title."), optional$1)
@@ -324040,7 +324336,7 @@ const projectAddCommand = make$34("add", {
 	});
 	return `Added project ${projectId} (${title}) at ${workspaceRoot}.`;
 }))));
-const projectRemoveCommand = make$34("remove", {
+const projectRemoveCommand = make$33("remove", {
 	...projectLocationFlags,
 	project: string$4("project").pipe(withDescription$3("Project id or workspace root to remove."))
 }).pipe(withDescription$1("Remove a project."), withHandler((flags) => runProjectMutation(flags, fn$1("projectRemoveMutation")(function* ({ snapshot, dispatch }) {
@@ -324055,7 +324351,7 @@ const projectRemoveCommand = make$34("remove", {
 	});
 	return `Removed project ${project.id} (${project.title}).`;
 }))));
-const projectRenameCommand = make$34("rename", {
+const projectRenameCommand = make$33("rename", {
 	...projectLocationFlags,
 	project: string$4("project").pipe(withDescription$3("Project id or workspace root to rename.")),
 	title: string$4("title").pipe(withDescription$3("New project title."))
@@ -324078,12 +324374,12 @@ const parseCmmdProjectId = (value) => {
 	const projectId = Number(value);
 	return Number.isSafeInteger(projectId) && projectId > 0 ? succeed(projectId) : fail(/* @__PURE__ */ new Error(`Invalid CMMD project id '${value}'. Expected a positive integer.`));
 };
-const projectLeadExplainCommand = make$34("explain", {
+const projectLeadExplainCommand = make$33("explain", {
 	...projectLocationFlags,
 	projectId: string$4("project-id").pipe(withDescription$3("Numeric CMMD project id.")),
 	json: jsonFlag
 }).pipe(withDescription$1("Explain canonical Project Lead controller state."), withHandler((flags) => parseCmmdProjectId(flags.projectId).pipe(flatMap((projectId) => runProjectLeadQuery(flags, projectId, (explanation) => flags.json ? JSON.stringify(explanation, null, 2) : formatProjectLeadExplanation(projectId, explanation))))));
-const projectLeadDoctorCommand = make$34("doctor", {
+const projectLeadDoctorCommand = make$33("doctor", {
 	...projectLocationFlags,
 	projectId: string$4("project-id").pipe(withDescription$3("Numeric CMMD project id.")),
 	json: jsonFlag
@@ -324091,7 +324387,7 @@ const projectLeadDoctorCommand = make$34("doctor", {
 	const report = diagnoseProjectLead(projectId, explanation);
 	return flags.json ? JSON.stringify(report, null, 2) : formatProjectLeadDoctor(report);
 })))));
-const projectLeadCommand = make$34("lead").pipe(withDescription$1("Inspect the CMMD-owned Project Lead controller."), withSubcommands([projectLeadExplainCommand, projectLeadDoctorCommand]));
+const projectLeadCommand = make$33("lead").pipe(withDescription$1("Inspect the CMMD-owned Project Lead controller."), withSubcommands([projectLeadExplainCommand, projectLeadDoctorCommand]));
 const connectStatePathFor = fn$1("connectStatePathFor")(function* (flags) {
 	const config = yield* resolveCliAuthConfig(flags, yield* LogLevel);
 	return (yield* Path$2).join(config.stateDir, "connect.json");
@@ -324104,18 +324400,18 @@ const runConnectCommand = (flags, update) => gen(function* () {
 	const state = next ?? current;
 	yield* log$3(flags.json ? JSON.stringify(state, null, 2) : formatConnectStatus(state));
 });
-const connectStatusCommand = make$34("status", {
+const connectStatusCommand = make$33("status", {
 	...projectLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription$1("Show whether this machine is offered to CMMD over the relay."), withHandler((flags) => runConnectCommand(flags, () => null)));
-const connectLinkCommand = make$34("link", {
+const connectLinkCommand = make$33("link", {
 	...projectLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription$1("Offer this machine to CMMD over the relay on the next start."), withHandler((flags) => runConnectCommand(flags, (current) => ({
 	...current,
 	linked: true
 }))));
-const connectUnlinkCommand = make$34("unlink", {
+const connectUnlinkCommand = make$33("unlink", {
 	...projectLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription$1("Stop offering this machine, keeping its runtime identity so relinking is the same device."), withHandler((flags) => runConnectCommand(flags, (current) => ({
@@ -324126,7 +324422,7 @@ const noBrowserLoginFlag = boolean$2("no-browser").pipe(withDescription$2("Print
 const CONNECT_CLI_CLIENT_ID = "cmmd-forge-web";
 const connectSecretsFor = (stateDir) => createFileSecretStorage({ keyPath: Path$1.join(stateDir, "connect-secret.key") });
 const loginEmailFlag = string$3("email").pipe(withDescription$2("Sign in with this CMMD email and a password prompt instead of the browser flow."), optional$1);
-const connectLoginCommand = make$34("login", {
+const connectLoginCommand = make$33("login", {
 	...projectLocationFlags,
 	noBrowser: noBrowserLoginFlag,
 	email: loginEmailFlag
@@ -324193,7 +324489,7 @@ const connectLoginCommand = make$34("login", {
 	});
 	yield* log$3("Signed in to CMMD. Run `cmmd-forge connect link` to offer this machine.");
 })));
-const connectLogoutCommand = make$34("logout", { ...projectLocationFlags }).pipe(withDescription$1("Sign this machine out of CMMD and stop offering it."), withHandler((flags) => gen(function* () {
+const connectLogoutCommand = make$33("logout", { ...projectLocationFlags }).pipe(withDescription$1("Sign this machine out of CMMD and stop offering it."), withHandler((flags) => gen(function* () {
 	const config = yield* resolveCliAuthConfig(flags, yield* LogLevel);
 	const statePath = Path$1.join(config.stateDir, "connect.json");
 	writeConnectState(statePath, {
@@ -324203,14 +324499,14 @@ const connectLogoutCommand = make$34("logout", { ...projectLocationFlags }).pipe
 	clearConnectCredential(Path$1.join(config.stateDir, "connect-credential.json"));
 	yield* log$3("Signed out of CMMD and stopped offering this machine.");
 })));
-const connectCommand = make$34("connect").pipe(withDescription$1("Offer this machine to CMMD so other surfaces can reach it."), withSubcommands([
+const connectCommand = make$33("connect").pipe(withDescription$1("Offer this machine to CMMD so other surfaces can reach it."), withSubcommands([
 	connectStatusCommand,
 	connectLoginCommand,
 	connectLogoutCommand,
 	connectLinkCommand,
 	connectUnlinkCommand
 ]));
-const projectCommand = make$34("project").pipe(withDescription$1("Manage projects."), withSubcommands([
+const projectCommand = make$33("project").pipe(withDescription$1("Manage projects."), withSubcommands([
 	projectAddCommand,
 	projectRemoveCommand,
 	projectRenameCommand,
@@ -324225,12 +324521,12 @@ const runServerCommand = (flags, options) => gen(function* () {
 	});
 	return yield* runServer.pipe(provideService(ServerConfig, config));
 });
-const startCommand = make$34("start", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server."), withHandler((flags) => runServerCommand(flags)));
-const serveCommand = make$34("serve", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server without opening a browser and print headless pairing details."), withHandler((flags) => runServerCommand(flags, {
+const startCommand = make$33("start", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server."), withHandler((flags) => runServerCommand(flags)));
+const serveCommand = make$33("serve", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server without opening a browser and print headless pairing details."), withHandler((flags) => runServerCommand(flags, {
 	startupPresentation: "headless",
 	forceAutoBootstrapProjectFromCwd: false
 })));
-const cli = make$34("cmmd-forge", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server."), withHandler((flags) => runServerCommand(flags)), withSubcommands([
+const cli = make$33("cmmd-forge", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server."), withHandler((flags) => runServerCommand(flags)), withSubcommands([
 	startCommand,
 	serveCommand,
 	authCommand,