@cmmd-center/forge 0.13.95 → 0.13.97

package/dist/bin.mjs

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "./chunk-C5ckVeoz.mjs";
-import { $ as encodeEffect, $a as make$39, $i as spaced, $n as filterMapOrFail, $r as runPromise, $s as max, $t as stringifyJson, Aa as Scope$1, Ai as void_$1, An as cached$3, Ar as match$1, As as uninterruptibleMask, At as withConstructorDefault, Ba as CurrentLogSpans, Bi as counter, Bn as catch_, Bo as addFinalizer, Br as orDie, Bs as make$42, Bt as head, C as Record, Ca as mergeAll, Cc as map$4, Ci as tx$1, Cn as andThen, Co as hasDies, Cr as logInfo, Cs as sleep$3, Ct as optionalKey, D as TaggedStruct, Da as succeedContext, Di as uninterruptibleMask$1, Dn as as$3, Do as interruptors, Ds as suspend, Dt as toCodecStringTree, E as TaggedErrorClass, Ea as succeed$2, Ec as sort, Ei as uninterruptible, En as annotateSpans, Eo as interrupt$2, Er as map$3, Et as toCodecJson, F as UndefinedOr, Fa as forkUnsafe, Fc as fail$1, Fi as withParentSpan, Fn as catchFilter, Fr as onError$1, Fs as MinimumTraceLevel, G as decodeExit, Ga as done, Gc as empty$1, Gi as withAttributes, Gl as hasProperty, Gn as die$1, Gr as provideService, Gs as format$1, Gt as Transformation, H as declare, Hc as Reference$1, Hi as snapshotUnsafe, Hn as contextWith, Ho as as$2, Hr as promise, Ht as size$2, I as Union, Ia as make$37, Ii as withSpan, In as catchIf, Io as ConsoleRef, Ir as onExit, Is as NativeSpan, It as assign, J as decodeUnknownEffect, Ja as failCause$3, Ji as exponential, Jl as isNotUndefined, Jn as exit, Jr as repeat, Js as hours, Jt as transformOrFail, K as decodeSync, Kc as get$3, Ki as addDelay, Kl as isNotNull, Ko as consolePretty$1, Kr as race, Ks as fromInput, L as Unknown, La as makeUnsafe$4, Li as withTracerEnabled, Ln as catchReason, Lo as CurrentLoggers$1, Ls as ParentSpan, Lt as append$1, M as URLFromString, Ma as addFinalizerExit, Mi as whileLoop, Ml as NodeInspectSymbol, Mn as callback, Mo as pretty, Ms as void_$2, Na as close, Ni as withFiber$1, Nl as toJson, Nn as catchCause, No as prettyErrors, Nr as matchEffect, O as TemplateLiteral, Oa as sync$2, Ol as isEffect$1, On as asSome, Or as mapError, Os as sync, Ot as toJsonSchemaDocument, P as Undefined, Pa as closeUnsafe, Pl as format, Pn as catchDefect, Po as squash, Pr as never$1, Q as encode$4, Qc as merge$2, Qi as recurs, Qn as filter$1, Qr as runForkWith, R as UnknownFromJsonString$1, Ra as provide$2, Rc as isFailure$1, Ri as yieldNow, Rl as equals, Rn as catchTag, Rr as onInterrupt, Rs as Tracer, Rt as drop$1, S as Option, Sa as merge$3, Si as try_, Sn as all, Sr as logFatal, Ss as scopeAddFinalizerExit, St as optional$4, T as Struct, Ta as provideMerge, Tc as reverse, Ti as undefined_, Tn as annotateLogs, To as hasInterruptsOnly, Tr as makeSpanScoped, Tt as tag, Ua as TracerTimingEnabled, Uc as Service$1, Ui as timer, Un as currentSpan, Ur as provide, Ut as toArray, V as brand, Va as MinimumLogLevel, Vc as succeed$1, Vi as gauge, Vn as context, Vo as andThen$1, Vr as orElseSucceed, Vt as isEmpty$2, W as decodeEffect, Wa as _await, Wc as add$2, Wi as update$3, Wl as compose$1, Wr as provideContext, Ws as days, X as decodeUnknownOption, Xc as make$35, Xl as isObject$1, Xn as failCause$1, Xr as retry, Xt as onSome, Y as decodeUnknownExit, Yc as getUnsafe$1, Yi as forever$2, Yl as isNullish, Yn as fail, Yr as result, Z as decodeUnknownSync, Za as isDeferred, Zc as makeUnsafe$3, Zi as passthrough$1, Zl as isTagged, Zr as runFork, Zs as isGreaterThan$1, Zt as parseJson$1, _ as NonEmptyArray, _a as effectContext, _i as tapErrorTag, _n as toUtc, _t as isSchemaError, a as DateTimeUtc, aa as Random$1, ac as sum$1, al as getOrElse, an as value, ao as interrupt$3, ar as fnUntraced, at as isBetween, au as constVoid, b as NullOr, bi as timeoutOrElse, bl as PipeInspectableProto, bn as acquireUseRelease, br as logDebug, bs as reportCauseUnsafe, bt as makeFilter, c as Defect, ca as Clock, cc as toSeconds, ci as sleep$4, cl as isNone, cn as add$3, co as match$2, cr as forkChild, cs as flatMap$1, ct as isGreaterThanOrEqualTo, d as Exit, dc as empty$3, di as succeedSome, dl as match, dn as isGreaterThanOrEqualTo$1, dr as forkScoped, ds as forkDetach, dt as isMaxLength, du as pipeArguments, ea as catchDone, ec as millis, el as firstSomeOf, er as filterOrFail, et as encodeSync, eu as cast, fa as TaggedError, fc as ensure, fi as suspend$1, fl as none$4, fn as make$38, fr as gen, ft as isMaxProperties, g as Never, ga as effect, gi as tapError, gn as toEpochMillis, gr as interruptible, gt as isSchema, h as Literals, ha as buildWithMemoMap, hc as fromIterable, hi as tapCause, hl as make$41, hn as toDate, hr as interrupt$1, ht as isPattern, i as Class, ic as subtract, ii as scoped, il as fromUndefinedOr, in as make$40, io as failCause$2, ir as fn$1, it as is$1, iu as constUndefined, ja as addFinalizer$1, jn as cachedWithTTL, jo as map$6, jr as matchCauseEffect, jt as withDecodingDefault, k as Trim, ka as unwrap, ki as useSpan, kl as withFiber, kn as asVoid, ks as tracerLogger$1, kt as toType, l as Duration, la as currentTimeMillis, lc as zero, li as succeed, ll as isSome, ln as distance, lr as forkDetach$1, ls as fnUntraced$1, lt as isInt, lu as identity, m as Literal, ma as build, mc as flatMapNullishOr, mi as tap, ml as Number$2, mn as now, mo as StackTrace, mr as ignoreCause, ms as loggerMake, mt as isNonEmpty, n as ArraySchema, nc as minutes, nl as flatten$1, no as die$2, nt as encodeUnknownExit, o as DateTimeUtcFromString, oa as clamp, oc as times, oi as service, ol as getOrNull, oo as isFailure, or as forEach, ot as isFinite$1, ou as constant, p as Int$1, pa as CurrentMemoMap, pc as filter, pi as sync$1, pl as some, pn as makeUnsafe$5, po as NoSuchElementError, pr as ignore, pt as isMinLength, q as decodeTo, qa as fail$3, qi as both, ql as isNotNullish, qn as ensuring, qr as raceFirst, qs as fromInputUnsafe, r as Boolean$1, ra as isDoneCause, rc as seconds, ri as scope$1, rl as fromNullishOr, rn as makeFormatterDefault, ro as fail$2, rr as flatten$2, rt as fromJsonString, ru as constTrue, sa as parse$6, sc as toMillis, si as serviceOption, sl as getOrUndefined, sn as encodeBase64Url$2, so as isSuccess, sr as forever$1, st as isGreaterThan, su as dual, t as Any, tc as min, ti as runPromiseWith, tl as flatMap$2, tn as InvalidValue$1, to as succeed$3, tr as flatMap, ts as fiberInterrupt, tt as encodeUnknownEffect, tu as compose, u as ErrorClass, ua as Class$1, uc as allocate, ui as succeedNone, ul as map$5, un as formatIso, uo as void_$3, ur as forkIn, us as forever, ut as isLessThanOrEqualTo, uu as pipe$1, v as NonEmptyString, va as effectDiscard, vc as isArrayNonEmpty, vi as timeout$1, vn as Transaction$1, vo as done$1, vr as isEffect, w as String$1, wa as provide$1, wi as txRetry, wn as annotateCurrentSpan, wo as hasInterrupts, wr as logWarning$1, wt as suspend$2, x as Number$1, xa as launch$1, xi as tryPromise, xl as YieldableProto, xn as addFinalizer$2, xr as logError, xs as scope, xt as mutable, y as Null, ya as empty$4, yc as isReadonlyArrayNonEmpty, yi as timeoutOption, yn as acquireRelease, yo as fail$4, yr as log$4, yt as make$36, z as Void, za as CurrentLogAnnotations, zc as isSuccess$1, zi as zipWith, zn as catchTags, zr as option, zs as externalSpan, zt as empty$2 } from "./Schema-Ay3DUM83.mjs";
-import { $t as interrupt$4, A as fromSubscription, At as end, B as onExit$1, Bt as sliding, C as fromChannel, Ct as fromSubscriptionArray, D as fromPull, Dt as make$44, E as fromPubSub, F as mapEffect$1, Ft as offer$1, G as runCollect, Gt as shutdown$2, Ht as takeAll, I as mapError$1, It as offerAll, J as runForEach, K as runDrain, Kt as subscribe$1, L as merge$4, Lt as offerUnsafe, M as make$43, Mt as failCause$4, N as map$7, O as fromQueue, Ot as makeUnsafe$6, P as mapAccum, Pt as make$45, Q as succeed$4, Qt as getCurrent, S as fromAsyncIterable, T as fromIterable$1, U as provideContext$1, Ut as unbounded$2, Vt as take$1, W as run$2, Wt as publish, X as runHead, Xt as makeUnsafe$7, Y as runForEachArray, Zt as await_, _t as drain, b as flatMap$3, c as callback$1, ct as get$4, d as debounce$1, dt as make$47, et as takeWhile, f as decodeText$1, g as ensuring$1, h as encodeText, j as isStream, kt as bounded, l as catchCause$1, lt as make$46, m as empty$5, nt as toAsyncIterable, q as runFold, qt as unbounded$1, r as FileSystem, rt as toPull, st as unwrap$1, t as Path$2, tn as runIn, tt as tick, u as concat$2, ut as get$5, v as failCause$5, vt as forEach$1, w as fromEffect, wt as fromTransform, x as fromArray, xt as mapInput, y as filter$2, zt as shutdown$1 } from "./Path-BIaGSU2M.mjs";
-import { _ as ChildProcessSpawner, a as Stdio, g as make$48, o as make$49, r as isQuitError } from "./NodeTerminal-CeaWke6-.mjs";
+import { $ as encodeEffect, $a as make$38, $i as spaced, $n as filterMapOrFail, $r as runPromise, $s as max, $t as stringifyJson, Aa as Scope$1, Ai as void_$1, An as cached$3, Ar as match$1, As as uninterruptibleMask, At as withConstructorDefault, Ba as CurrentLogSpans, Bi as counter, Bn as catch_, Bo as addFinalizer, Br as orDie, Bs as make$41, Bt as head, C as Record, Ca as mergeAll, Cc as map$4, Ci as tx$1, Cn as andThen, Co as hasDies, Cr as logInfo, Cs as sleep$3, Ct as optionalKey, D as TaggedStruct, Da as succeedContext, Di as uninterruptibleMask$1, Dn as as$3, Do as interruptors, Ds as suspend, Dt as toCodecStringTree, E as TaggedErrorClass, Ea as succeed$2, Ec as sort, Ei as uninterruptible, En as annotateSpans, Eo as interrupt$2, Er as map$3, Et as toCodecJson, F as UndefinedOr, Fa as forkUnsafe, Fc as fail$1, Fi as withParentSpan, Fn as catchFilter, Fr as onError$1, Fs as MinimumTraceLevel, G as decodeExit, Ga as done, Gc as empty$1, Gi as withAttributes, Gl as hasProperty, Gn as die$1, Gr as provideService, Gs as format$1, Gt as Transformation, H as declare, Hc as Reference$1, Hi as snapshotUnsafe, Hn as contextWith, Ho as as$2, Hr as promise, Ht as size$2, I as Union, Ia as make$36, Ii as withSpan, In as catchIf, Io as ConsoleRef, Ir as onExit, Is as NativeSpan, It as assign, J as decodeUnknownEffect, Ja as failCause$3, Ji as exponential, Jl as isNotUndefined, Jn as exit, Jr as repeat, Js as hours, Jt as transformOrFail, K as decodeSync, Kc as get$3, Ki as addDelay, Kl as isNotNull, Ko as consolePretty$1, Kr as race, Ks as fromInput, L as Unknown, La as makeUnsafe$4, Li as withTracerEnabled, Ln as catchReason, Lo as CurrentLoggers$1, Ls as ParentSpan, Lt as append$1, M as URLFromString, Ma as addFinalizerExit, Mi as whileLoop, Ml as NodeInspectSymbol, Mn as callback, Mo as pretty, Ms as void_$2, Na as close, Ni as withFiber$1, Nl as toJson, Nn as catchCause, No as prettyErrors, Nr as matchEffect, O as TemplateLiteral, Oa as sync$2, Ol as isEffect$1, On as asSome, Or as mapError, Os as sync, Ot as toJsonSchemaDocument, P as Undefined, Pa as closeUnsafe, Pl as format, Pn as catchDefect, Po as squash, Pr as never$1, Q as encode$4, Qc as merge$2, Qi as recurs, Qn as filter$1, Qr as runForkWith, R as UnknownFromJsonString$1, Ra as provide$2, Rc as isFailure$1, Ri as yieldNow, Rl as equals, Rn as catchTag, Rr as onInterrupt, Rs as Tracer, Rt as drop$1, S as Option, Sa as merge$3, Si as try_, Sn as all, Sr as logFatal, Ss as scopeAddFinalizerExit, St as optional$4, T as Struct, Ta as provideMerge, Tc as reverse, Ti as undefined_, Tn as annotateLogs, To as hasInterruptsOnly, Tr as makeSpanScoped, Tt as tag, Ua as TracerTimingEnabled, Uc as Service$1, Ui as timer, Un as currentSpan, Ur as provide, Ut as toArray, V as brand, Va as MinimumLogLevel, Vc as succeed$1, Vi as gauge, Vn as context, Vo as andThen$1, Vr as orElseSucceed, Vt as isEmpty$2, W as decodeEffect, Wa as _await, Wc as add$2, Wi as update$3, Wl as compose$1, Wr as provideContext, Ws as days, X as decodeUnknownOption, Xc as make$34, Xl as isObject$1, Xn as failCause$1, Xr as retry, Xt as onSome, Y as decodeUnknownExit, Yc as getUnsafe$1, Yi as forever$2, Yl as isNullish, Yn as fail, Yr as result, Z as decodeUnknownSync, Za as isDeferred, Zc as makeUnsafe$3, Zi as passthrough$1, Zl as isTagged, Zr as runFork, Zs as isGreaterThan$1, Zt as parseJson$1, _ as NonEmptyArray, _a as effectContext, _i as tapErrorTag, _n as toUtc, _t as isSchemaError, a as DateTimeUtc, aa as Random$1, ac as sum$1, al as getOrElse, an as value, ao as interrupt$3, ar as fnUntraced, at as isBetween, au as constVoid, b as NullOr, bi as timeoutOrElse, bl as PipeInspectableProto, bn as acquireUseRelease, br as logDebug, bs as reportCauseUnsafe, bt as makeFilter, c as Defect, ca as Clock, cc as toSeconds, ci as sleep$4, cl as isNone, cn as add$3, co as match$2, cr as forkChild, cs as flatMap$1, ct as isGreaterThanOrEqualTo, d as Exit, dc as empty$3, di as succeedSome, dl as match, dn as isGreaterThanOrEqualTo$1, dr as forkScoped, ds as forkDetach, dt as isMaxLength, du as pipeArguments, ea as catchDone, ec as millis, el as firstSomeOf, er as filterOrFail, et as encodeSync, eu as cast, fa as TaggedError, fc as ensure, fi as suspend$1, fl as none$4, fn as make$37, fr as gen, ft as isMaxProperties, g as Never, ga as effect, gi as tapError, gn as toEpochMillis, gr as interruptible, gt as isSchema, h as Literals, ha as buildWithMemoMap, hc as fromIterable, hi as tapCause, hl as make$40, hn as toDate, hr as interrupt$1, ht as isPattern, i as Class, ic as subtract, ii as scoped, il as fromUndefinedOr, in as make$39, io as failCause$2, ir as fn$1, it as is$1, iu as constUndefined, ja as addFinalizer$1, jn as cachedWithTTL, jo as map$6, jr as matchCauseEffect, jt as withDecodingDefault, k as Trim, ka as unwrap, ki as useSpan, kl as withFiber, kn as asVoid, ks as tracerLogger$1, kt as toType, l as Duration, la as currentTimeMillis, lc as zero, li as succeed, ll as isSome, ln as distance, lr as forkDetach$1, ls as fnUntraced$1, lt as isInt, lu as identity, m as Literal, ma as build, mc as flatMapNullishOr, mi as tap, ml as Number$2, mn as now, mo as StackTrace, mr as ignoreCause, ms as loggerMake, mt as isNonEmpty, n as ArraySchema, nc as minutes, nl as flatten$1, no as die$2, nt as encodeUnknownExit, o as DateTimeUtcFromString, oa as clamp, oc as times, oi as service, ol as getOrNull, oo as isFailure, or as forEach, ot as isFinite$1, ou as constant, p as Int$1, pa as CurrentMemoMap, pc as filter, pi as sync$1, pl as some, pn as makeUnsafe$5, po as NoSuchElementError, pr as ignore, pt as isMinLength, q as decodeTo, qa as fail$3, qi as both, ql as isNotNullish, qn as ensuring, qr as raceFirst, qs as fromInputUnsafe, r as Boolean$1, ra as isDoneCause, rc as seconds, ri as scope$1, rl as fromNullishOr, rn as makeFormatterDefault, ro as fail$2, rr as flatten$2, rt as fromJsonString, ru as constTrue, sa as parse$6, sc as toMillis, si as serviceOption, sl as getOrUndefined, sn as encodeBase64Url$2, so as isSuccess, sr as forever$1, st as isGreaterThan, su as dual, t as Any, tc as min, ti as runPromiseWith, tl as flatMap$2, tn as InvalidValue$1, to as succeed$3, tr as flatMap, ts as fiberInterrupt, tt as encodeUnknownEffect, tu as compose, u as ErrorClass, ua as Class$1, uc as allocate, ui as succeedNone, ul as map$5, un as formatIso, uo as void_$3, ur as forkIn, us as forever, ut as isLessThanOrEqualTo, uu as pipe$1, v as NonEmptyString, va as effectDiscard, vc as isArrayNonEmpty, vi as timeout$1, vn as Transaction$1, vo as done$1, vr as isEffect, w as String$1, wa as provide$1, wi as txRetry, wn as annotateCurrentSpan, wo as hasInterrupts, wr as logWarning$1, wt as suspend$2, x as Number$1, xa as launch$1, xi as tryPromise, xl as YieldableProto, xn as addFinalizer$2, xr as logError, xs as scope, xt as mutable, y as Null, ya as empty$4, yc as isReadonlyArrayNonEmpty, yi as timeoutOption, yn as acquireRelease, yo as fail$4, yr as log$4, yt as make$35, z as Void, za as CurrentLogAnnotations, zc as isSuccess$1, zi as zipWith, zn as catchTags, zr as option, zs as externalSpan, zt as empty$2 } from "./Schema-Ay3DUM83.mjs";
+import { $t as interrupt$4, A as fromSubscription, At as end, B as onExit$1, Bt as sliding, C as fromChannel, Ct as fromSubscriptionArray, D as fromPull, Dt as make$43, E as fromPubSub, F as mapEffect$1, Ft as offer$1, G as runCollect, Gt as shutdown$2, Ht as takeAll, I as mapError$1, It as offerAll, J as runForEach, K as runDrain, Kt as subscribe$1, L as merge$4, Lt as offerUnsafe, M as make$42, Mt as failCause$4, N as map$7, O as fromQueue, Ot as makeUnsafe$6, P as mapAccum, Pt as make$44, Q as succeed$4, Qt as getCurrent, S as fromAsyncIterable, T as fromIterable$1, U as provideContext$1, Ut as unbounded$2, Vt as take$1, W as run$2, Wt as publish, X as runHead, Xt as makeUnsafe$7, Y as runForEachArray, Zt as await_, _t as drain, b as flatMap$3, c as callback$1, ct as get$4, d as debounce$1, dt as make$46, et as takeWhile, f as decodeText$1, g as ensuring$1, h as encodeText, j as isStream, kt as bounded, l as catchCause$1, lt as make$45, m as empty$5, nt as toAsyncIterable, q as runFold, qt as unbounded$1, r as FileSystem, rt as toPull, st as unwrap$1, t as Path$2, tn as runIn, tt as tick, u as concat$2, ut as get$5, v as failCause$5, vt as forEach$1, w as fromEffect, wt as fromTransform, x as fromArray, xt as mapInput, y as filter$2, zt as shutdown$1 } from "./Path-BIaGSU2M.mjs";
+import { _ as ChildProcessSpawner, a as Stdio, g as make$47, o as make$48, r as isQuitError } from "./NodeTerminal-CeaWke6-.mjs";
 import { n as layer$7 } from "./NodeServices-Bt1GwPBR.mjs";
-import { $ as file, A as SocketErrorReason, At as merge$5, Bt as set$3, Ct as HttpClientErrorSchema, Dt as empty$7, Ft as getAndSet, G as TracerPropagationEnabled, Ht as updateAndGet, I as HttpServerError, It as getUnsafe$2, J as transformResponse, K as filterStatusOk$1, Lt as make$50, Ot as fromInput$1, Pt as get$6, Q as empty$6, Rt as makeUnsafe$8, St as setBody, Tt as jsonUnsafe$1, U as layer$8, Vt as update$4, W as HttpClient, Z as symbol$1, _ as schemaBodyUrlParams, _t as acceptJson, a as withLogAddress, at as setCookie, bt as get$7, ct as stream, d as logger$1, dt as filterStatusOk, et as isHttpServerResponse, f as withLoggerDisabled, ft as matchStatus, g as schemaBodyJson, gt as schemaBodyJson$1, i as serve$1, it as schemaJson, kt as fromRecordUnsafe, lt as text$2, m as ParsedSearchParams, nt as raw, ot as setCookies, p as HttpServerRequest, q as retryTransient, rt as redirect, st as setHeader, t as HttpServer, tt as jsonUnsafe, u as cors, ut as uint8Array, v as schemaHeaders, vt as bearerToken, wt as isHttpClientError, xt as post, y as toURL, yt as bodyJson, z as RouteNotFound, zt as modify$3 } from "./HttpServer-5UTabe01.mjs";
+import { $ as file, A as SocketErrorReason, At as merge$5, Bt as set$3, Ct as HttpClientErrorSchema, Dt as empty$7, Ft as getAndSet, G as TracerPropagationEnabled, Gt as run$3, Ht as updateAndGet, I as HttpServerError, It as getUnsafe$2, J as transformResponse, K as filterStatusOk$1, Lt as make$49, Ot as fromInput$1, Pt as get$6, Q as empty$6, Rt as makeUnsafe$8, St as setBody, Tt as jsonUnsafe$1, U as layer$8, Vt as update$4, W as HttpClient, Wt as make$50, Z as symbol$1, _ as schemaBodyUrlParams, _t as acceptJson, a as withLogAddress, at as setCookie, bt as get$7, ct as stream, d as logger$1, dt as filterStatusOk, et as isHttpServerResponse, f as withLoggerDisabled, ft as matchStatus, g as schemaBodyJson, gt as schemaBodyJson$1, i as serve$1, it as schemaJson, kt as fromRecordUnsafe, lt as text$2, m as ParsedSearchParams, nt as raw, ot as setCookies, p as HttpServerRequest, q as retryTransient, rt as redirect, st as setHeader, t as HttpServer, tt as jsonUnsafe, u as cors, ut as uint8Array, v as schemaHeaders, vt as bearerToken, wt as isHttpClientError, xt as post, y as toURL, yt as bodyJson, z as RouteNotFound, zt as modify$3 } from "./HttpServer-BbbI8N6_.mjs";
 import { _ as withDefault$3, a as all$1, c as logLevel, d as option$1, f as port, g as url$2, i as TrueValues, l as map$8, m as string$7, n as FalseValues, o as boolean$5, p as schema$2, r as Record$1, s as int$2, t as Boolean$2, u as number$2 } from "./Config-BnFFyBjD.mjs";
 import { a as make$51, i as keys, n as getOption, o as makeWith$1, r as invalidate, s as set$4, t as get$8 } from "./Cache-DOwpGEYJ.mjs";
 import { S as layer$9, _ as defaultEscape, a as DeadlockError, b as makeCompiler$1, c as SqlError, d as UnknownError, g as custom, h as make$52, i as ConstraintError, l as SqlSyntaxError, m as SqlClient, n as AuthorizationError, o as LockTimeoutError, r as ConnectionError, s as SerializationError, t as AuthenticationError, u as StatementTimeoutError, v as defaultTransforms, y as fragment } from "./SqlError-BBR7DPrQ.mjs";
@@ -14746,7 +14746,7 @@ const isCommand = (u) => hasProperty(u, TypeId$10);
 * @since 4.0.0
 * @category constructors
 */
-const make$34 = (name, config, handler) => {
+const make$33 = (name, config, handler) => {
 	return makeCommand({
 		name,
 		config: parseConfig(config ?? {}),
@@ -15081,7 +15081,7 @@ const runWith = (command, config) => {
 		program = provideService(program, LogLevel, logLevel);
 		const services = match(logLevel, {
 			onNone: () => empty$1(),
-			onSome: (level) => make$35(MinimumLogLevel, level)
+			onSome: (level) => make$34(MinimumLogLevel, level)
 		});
 		yield* provideContext(program, services);
 	}, catchFilter((error) => isCliError(error) && error._tag === "ShowHelp" ? succeed$1(error) : fail$1(error), (error) => andThen(showHelp(command, error), fail(error))), catchFilter((e) => isQuitError(e) ? succeed$1(e) : fail$1(e), (_) => interrupt$1));
@@ -15262,7 +15262,7 @@ const CurrentLoggers = CurrentLoggers$1;
 * @since 2.0.0
 * @category constructors
 */
-const make$33 = loggerMake;
+const make$32 = loggerMake;
 /**
 * Returns a new `Logger` which will aggregate logs output by the specified
 * `Logger` over the provided `window`. After the `window` has elapsed, the
@@ -15558,7 +15558,7 @@ const makeUnsafe$2 = (value) => {
 * @since 2.0.0
 * @category constructors
 */
-const make$32 = (value) => sync$1(() => makeUnsafe$2(value));
+const make$31 = (value) => sync$1(() => makeUnsafe$2(value));
 /**
 * @since 2.0.0
 * @category getters
@@ -15627,7 +15627,7 @@ const TypeId$8 = "~effect/transactions/TxRef";
 * })
 * ```
 */
-const make$31 = (initial) => sync$1(() => makeUnsafe$1(initial));
+const make$30 = (initial) => sync$1(() => makeUnsafe$1(initial));
 /**
 * Creates a new `TxRef` with the specified initial value.
 *
@@ -15810,7 +15810,7 @@ const TxChunkProto = {
 * })
 * ```
 */
-const empty = () => map$3(make$31(empty$2()), (ref) => makeUnsafe(ref));
+const empty = () => map$3(make$30(empty$2()), (ref) => makeUnsafe(ref));
 /**
 * Creates a new `TxChunk` with the specified TxRef.
 *
@@ -16102,7 +16102,7 @@ const TxQueueProto = {
 */
 const unbounded = () => gen(function* () {
 	const items = yield* empty();
-	const stateRef = yield* make$31({ _tag: "Open" });
+	const stateRef = yield* make$30({ _tag: "Open" });
 	const txQueue = Object.create(TxQueueProto);
 	txQueue.strategy = "unbounded";
 	txQueue.capacity = Number.POSITIVE_INFINITY;
@@ -25063,7 +25063,7 @@ const schema$1 = /* @__PURE__ */ declare(isStream);
 * @category Stream
 */
 function Stream$1(success, error) {
-	return make$36(schema$1.ast, {
+	return make$35(schema$1.ast, {
 		[StreamSchemaTypeId]: StreamSchemaTypeId,
 		success,
 		error
@@ -25193,7 +25193,7 @@ const makeProto$1 = (options) => {
 * @since 4.0.0
 * @category constructors
 */
-const make$30 = (tag, options) => {
+const make$29 = (tag, options) => {
 	const successSchema = options?.success ?? Void;
 	const errorSchema = options?.error ?? Never;
 	const defectSchema = options?.defect ?? Defect;
@@ -25340,7 +25340,7 @@ const RpcGroupProto = {
 		});
 	},
 	annotateRpcs(service, value) {
-		return this.annotateRpcsMerge(make$35(service, value));
+		return this.annotateRpcsMerge(make$34(service, value));
 	},
 	annotateMerge(context) {
 		return makeProto({
@@ -25365,7 +25365,7 @@ const makeProto = (options) => Object.assign(function() {}, RpcGroupProto, {
 * @since 4.0.0
 * @category groups
 */
-const make$29 = (...rpcs) => makeProto({
+const make$28 = (...rpcs) => makeProto({
 	requests: new Map(rpcs.map((rpc) => [rpc._tag, rpc])),
 	annotations: empty$1()
 });
@@ -26091,319 +26091,319 @@ const WS_METHODS = {
 	attachmentsDelete: "attachments.delete",
 	providerUploadFeedback: "provider.uploadFeedback"
 };
-const WsServerUpsertKeybindingRpc = make$30(WS_METHODS.serverUpsertKeybinding, {
+const WsServerUpsertKeybindingRpc = make$29(WS_METHODS.serverUpsertKeybinding, {
 	payload: ServerUpsertKeybindingInput,
 	success: ServerUpsertKeybindingResult,
 	error: KeybindingsConfigError
 });
-const WsServerRemoveKeybindingRpc = make$30(WS_METHODS.serverRemoveKeybinding, {
+const WsServerRemoveKeybindingRpc = make$29(WS_METHODS.serverRemoveKeybinding, {
 	payload: ServerRemoveKeybindingInput,
 	success: ServerRemoveKeybindingResult,
 	error: KeybindingsConfigError
 });
-const WsServerGetConfigRpc = make$30(WS_METHODS.serverGetConfig, {
+const WsServerGetConfigRpc = make$29(WS_METHODS.serverGetConfig, {
 	payload: Struct({}),
 	success: ServerConfig$1,
 	error: Union([KeybindingsConfigError, ServerSettingsError])
 });
-const WsServerRefreshProvidersRpc = make$30(WS_METHODS.serverRefreshProviders, {
+const WsServerRefreshProvidersRpc = make$29(WS_METHODS.serverRefreshProviders, {
 	payload: Struct({}),
 	success: ServerProviderUpdatedPayload
 });
-const WsServerStartProviderAuthRpc = make$30(WS_METHODS.serverStartProviderAuth, {
+const WsServerStartProviderAuthRpc = make$29(WS_METHODS.serverStartProviderAuth, {
 	payload: ProviderAuthStartInput,
 	success: ProviderAuthSession
 });
-const WsServerRepairProviderAuthRuntimeRpc = make$30(WS_METHODS.serverRepairProviderAuthRuntime, {
+const WsServerRepairProviderAuthRuntimeRpc = make$29(WS_METHODS.serverRepairProviderAuthRuntime, {
 	payload: ProviderAuthRuntimeRepairInput,
 	success: ProviderAuthRuntimeRepairResult
 });
-const WsServerDisconnectProviderAuthRpc = make$30(WS_METHODS.serverDisconnectProviderAuth, {
+const WsServerDisconnectProviderAuthRpc = make$29(WS_METHODS.serverDisconnectProviderAuth, {
 	payload: ProviderAuthDisconnectInput,
 	success: ServerProviderUpdatedPayload
 });
-const WsServerGetProviderAuthSessionRpc = make$30(WS_METHODS.serverGetProviderAuthSession, {
+const WsServerGetProviderAuthSessionRpc = make$29(WS_METHODS.serverGetProviderAuthSession, {
 	payload: ProviderAuthSessionInput,
 	success: ProviderAuthSession
 });
-const WsServerCancelProviderAuthRpc = make$30(WS_METHODS.serverCancelProviderAuth, {
+const WsServerCancelProviderAuthRpc = make$29(WS_METHODS.serverCancelProviderAuth, {
 	payload: ProviderAuthSessionInput,
 	success: ProviderAuthSession
 });
-const WsServerSubmitProviderAuthCodeRpc = make$30(WS_METHODS.serverSubmitProviderAuthCode, {
+const WsServerSubmitProviderAuthCodeRpc = make$29(WS_METHODS.serverSubmitProviderAuthCode, {
 	payload: ProviderAuthSubmitCodeInput,
 	success: ProviderAuthSession
 });
-const WsServerSyncPersonalCodexToCloudRpc = make$30(WS_METHODS.serverSyncPersonalCodexToCloud, {
+const WsServerSyncPersonalCodexToCloudRpc = make$29(WS_METHODS.serverSyncPersonalCodexToCloud, {
 	payload: ProviderCredentialCloudSyncInput,
 	success: ProviderCredentialCloudSyncResult
 });
-const WsServerSyncPersonalClaudeToCloudRpc = make$30(WS_METHODS.serverSyncPersonalClaudeToCloud, {
+const WsServerSyncPersonalClaudeToCloudRpc = make$29(WS_METHODS.serverSyncPersonalClaudeToCloud, {
 	payload: ProviderCredentialCloudSyncInput,
 	success: ProviderCredentialCloudSyncResult
 });
-const WsServerGetSettingsRpc = make$30(WS_METHODS.serverGetSettings, {
+const WsServerGetSettingsRpc = make$29(WS_METHODS.serverGetSettings, {
 	payload: Struct({}),
 	success: ServerSettings,
 	error: ServerSettingsError
 });
-const WsServerUpdateSettingsRpc = make$30(WS_METHODS.serverUpdateSettings, {
+const WsServerUpdateSettingsRpc = make$29(WS_METHODS.serverUpdateSettings, {
 	payload: Struct({ patch: ServerSettingsPatch }),
 	success: ServerSettings,
 	error: ServerSettingsError
 });
-const WsServerUpdateEnvironmentDisplayNameRpc = make$30(WS_METHODS.serverUpdateEnvironmentDisplayName, {
+const WsServerUpdateEnvironmentDisplayNameRpc = make$29(WS_METHODS.serverUpdateEnvironmentDisplayName, {
 	payload: ServerEnvironmentDisplayNameUpdateInput,
 	success: ServerEnvironmentDisplayNameUpdateResult
 });
-const WsServerTraceDiagnosticsRpc = make$30(WS_METHODS.serverGetTraceDiagnostics, {
+const WsServerTraceDiagnosticsRpc = make$29(WS_METHODS.serverGetTraceDiagnostics, {
 	payload: Struct({ slowSpanThresholdMs: optionalKey(NonNegativeInt) }),
 	success: ServerTraceDiagnosticsResult
 });
-const WsServerHeartbeatRpc = make$30(WS_METHODS.serverHeartbeat, {
+const WsServerHeartbeatRpc = make$29(WS_METHODS.serverHeartbeat, {
 	payload: Struct({}),
 	success: Struct({})
 });
 const PullRequestRpcError = Union([PullRequestUnavailableError, PullRequestOperationError]);
-const WsPullRequestsListRpc = make$30(WS_METHODS.pullRequestsList, {
+const WsPullRequestsListRpc = make$29(WS_METHODS.pullRequestsList, {
 	payload: PullRequestListInput,
 	success: PullRequestListResult,
 	error: PullRequestRpcError
 });
-const WsPullRequestsListStatsRpc = make$30(WS_METHODS.pullRequestsListStats, {
+const WsPullRequestsListStatsRpc = make$29(WS_METHODS.pullRequestsListStats, {
 	payload: PullRequestListStatsInput,
 	success: PullRequestListStatsResult,
 	error: PullRequestRpcError
 });
-const WsPullRequestsDetailRpc = make$30(WS_METHODS.pullRequestsDetail, {
+const WsPullRequestsDetailRpc = make$29(WS_METHODS.pullRequestsDetail, {
 	payload: PullRequestRef,
 	success: PullRequestDetail,
 	error: PullRequestRpcError
 });
-const WsPullRequestsActivityRpc = make$30(WS_METHODS.pullRequestsActivity, {
+const WsPullRequestsActivityRpc = make$29(WS_METHODS.pullRequestsActivity, {
 	payload: PullRequestRef,
 	success: PullRequestActivity,
 	error: PullRequestRpcError
 });
-const WsPullRequestsThreadCommentsRpc = make$30(WS_METHODS.pullRequestsThreadComments, {
+const WsPullRequestsThreadCommentsRpc = make$29(WS_METHODS.pullRequestsThreadComments, {
 	payload: PullRequestThreadCommentsInput,
 	success: PullRequestThreadCommentsResult,
 	error: PullRequestRpcError
 });
-const WsPullRequestsDiffFileContentsRpc = make$30(WS_METHODS.pullRequestsDiffFileContents, {
+const WsPullRequestsDiffFileContentsRpc = make$29(WS_METHODS.pullRequestsDiffFileContents, {
 	payload: PullRequestDiffFileContentsInput,
 	success: PullRequestDiffFileContentsResult,
 	error: PullRequestRpcError
 });
-const WsPullRequestsRunActionRpc = make$30(WS_METHODS.pullRequestsRunAction, {
+const WsPullRequestsRunActionRpc = make$29(WS_METHODS.pullRequestsRunAction, {
 	payload: PullRequestActionInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsUpdateRpc = make$30(WS_METHODS.pullRequestsUpdate, {
+const WsPullRequestsUpdateRpc = make$29(WS_METHODS.pullRequestsUpdate, {
 	payload: PullRequestUpdateInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsCommentRpc = make$30(WS_METHODS.pullRequestsComment, {
+const WsPullRequestsCommentRpc = make$29(WS_METHODS.pullRequestsComment, {
 	payload: PullRequestCommentInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsUpdateCommentRpc = make$30(WS_METHODS.pullRequestsUpdateComment, {
+const WsPullRequestsUpdateCommentRpc = make$29(WS_METHODS.pullRequestsUpdateComment, {
 	payload: PullRequestCommentUpdateInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsSubmitReviewRpc = make$30(WS_METHODS.pullRequestsSubmitReview, {
+const WsPullRequestsSubmitReviewRpc = make$29(WS_METHODS.pullRequestsSubmitReview, {
 	payload: PullRequestSubmitReviewInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsReplyToThreadRpc = make$30(WS_METHODS.pullRequestsReplyToThread, {
+const WsPullRequestsReplyToThreadRpc = make$29(WS_METHODS.pullRequestsReplyToThread, {
 	payload: PullRequestThreadReplyInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsSetThreadResolutionRpc = make$30(WS_METHODS.pullRequestsSetThreadResolution, {
+const WsPullRequestsSetThreadResolutionRpc = make$29(WS_METHODS.pullRequestsSetThreadResolution, {
 	payload: PullRequestThreadResolutionInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsSetReactionRpc = make$30(WS_METHODS.pullRequestsSetReaction, {
+const WsPullRequestsSetReactionRpc = make$29(WS_METHODS.pullRequestsSetReaction, {
 	payload: PullRequestReactionInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsInvalidateRpc = make$30(WS_METHODS.pullRequestsInvalidate, {
+const WsPullRequestsInvalidateRpc = make$29(WS_METHODS.pullRequestsInvalidate, {
 	payload: PullRequestInvalidateInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsPullRequestsReviewerCandidatesRpc = make$30(WS_METHODS.pullRequestsReviewerCandidates, {
+const WsPullRequestsReviewerCandidatesRpc = make$29(WS_METHODS.pullRequestsReviewerCandidates, {
 	payload: PullRequestRef,
 	success: PullRequestReviewerCandidateList,
 	error: PullRequestRpcError
 });
-const WsPullRequestsRequestReviewersRpc = make$30(WS_METHODS.pullRequestsRequestReviewers, {
+const WsPullRequestsRequestReviewersRpc = make$29(WS_METHODS.pullRequestsRequestReviewers, {
 	payload: PullRequestReviewerRequestInput,
 	success: Void,
 	error: PullRequestRpcError
 });
-const WsProjectsSearchContentsRpc = make$30(WS_METHODS.projectsSearchContents, {
+const WsProjectsSearchContentsRpc = make$29(WS_METHODS.projectsSearchContents, {
 	payload: ProjectSearchContentsInput,
 	success: ProjectSearchContentsResult,
 	error: ProjectSearchContentsError
 });
-const WsProjectsSearchEntriesRpc = make$30(WS_METHODS.projectsSearchEntries, {
+const WsProjectsSearchEntriesRpc = make$29(WS_METHODS.projectsSearchEntries, {
 	payload: ProjectSearchEntriesInput,
 	success: ProjectSearchEntriesResult,
 	error: ProjectSearchEntriesError
 });
-const WsProjectsWriteFileRpc = make$30(WS_METHODS.projectsWriteFile, {
+const WsProjectsWriteFileRpc = make$29(WS_METHODS.projectsWriteFile, {
 	payload: ProjectWriteFileInput,
 	success: ProjectWriteFileResult,
 	error: ProjectWriteFileError
 });
-const WsProjectCheckoutDeletionPreviewRpc = make$30(WS_METHODS.projectCheckoutDeletionPreview, {
+const WsProjectCheckoutDeletionPreviewRpc = make$29(WS_METHODS.projectCheckoutDeletionPreview, {
 	payload: ProjectCheckoutDeletionPreviewInput,
 	success: ProjectCheckoutDeletionPreview
 });
-const WsProjectCheckoutDeletionExecuteRpc = make$30(WS_METHODS.projectCheckoutDeletionExecute, {
+const WsProjectCheckoutDeletionExecuteRpc = make$29(WS_METHODS.projectCheckoutDeletionExecute, {
 	payload: ProjectCheckoutDeletionExecuteInput,
 	success: ProjectCheckoutDeletionResult
 });
-const WsWorkspaceReadFileRpc = make$30(WS_METHODS.workspaceReadFile, {
+const WsWorkspaceReadFileRpc = make$29(WS_METHODS.workspaceReadFile, {
 	payload: BulkTransferReadFileInput,
 	success: BulkTransferStreamEvent,
 	error: BulkTransferError,
 	stream: true
 });
-const WsWorkspaceBeginWriteFileRpc = make$30(WS_METHODS.workspaceBeginWriteFile, {
+const WsWorkspaceBeginWriteFileRpc = make$29(WS_METHODS.workspaceBeginWriteFile, {
 	payload: BulkTransferWriteBeginInput,
 	success: BulkTransferWriteBeginResult,
 	error: BulkTransferError
 });
-const WsWorkspaceWriteFileChunkRpc = make$30(WS_METHODS.workspaceWriteFileChunk, {
+const WsWorkspaceWriteFileChunkRpc = make$29(WS_METHODS.workspaceWriteFileChunk, {
 	payload: BulkTransferWriteChunkInput,
 	success: BulkTransferWriteChunkResult,
 	error: BulkTransferError
 });
-const WsWorkspaceCommitWriteFileRpc = make$30(WS_METHODS.workspaceCommitWriteFile, {
+const WsWorkspaceCommitWriteFileRpc = make$29(WS_METHODS.workspaceCommitWriteFile, {
 	payload: BulkTransferIdInput,
 	success: BulkTransferWriteCommitResult,
 	error: BulkTransferError
 });
-const WsWorkspaceCancelWriteFileRpc = make$30(WS_METHODS.workspaceCancelWriteFile, {
+const WsWorkspaceCancelWriteFileRpc = make$29(WS_METHODS.workspaceCancelWriteFile, {
 	payload: BulkTransferIdInput,
 	success: BulkTransferCancelResult,
 	error: BulkTransferError
 });
-const WsShellOpenInEditorRpc = make$30(WS_METHODS.shellOpenInEditor, {
+const WsShellOpenInEditorRpc = make$29(WS_METHODS.shellOpenInEditor, {
 	payload: OpenInEditorInput,
 	error: OpenError$1
 });
-const WsSubscribeGitStatusRpc = make$30(WS_METHODS.subscribeGitStatus, {
+const WsSubscribeGitStatusRpc = make$29(WS_METHODS.subscribeGitStatus, {
 	payload: GitStatusInput,
 	success: GitStatusStreamEvent,
 	error: GitManagerServiceError,
 	stream: true
 });
-const WsGitPullRpc = make$30(WS_METHODS.gitPull, {
+const WsGitPullRpc = make$29(WS_METHODS.gitPull, {
 	payload: GitPullInput,
 	success: GitPullResult,
 	error: GitCommandError
 });
-const WsGitRefreshStatusRpc = make$30(WS_METHODS.gitRefreshStatus, {
+const WsGitRefreshStatusRpc = make$29(WS_METHODS.gitRefreshStatus, {
 	payload: GitStatusInput,
 	success: GitStatusResult,
 	error: GitManagerServiceError
 });
-const WsGitRunStackedActionRpc = make$30(WS_METHODS.gitRunStackedAction, {
+const WsGitRunStackedActionRpc = make$29(WS_METHODS.gitRunStackedAction, {
 	payload: GitRunStackedActionInput,
 	success: GitActionProgressEvent,
 	error: GitManagerServiceError,
 	stream: true
 });
-const WsGitResolvePullRequestRpc = make$30(WS_METHODS.gitResolvePullRequest, {
+const WsGitResolvePullRequestRpc = make$29(WS_METHODS.gitResolvePullRequest, {
 	payload: GitPullRequestRefInput,
 	success: GitResolvePullRequestResult,
 	error: GitManagerServiceError
 });
-const WsGitPreparePullRequestThreadRpc = make$30(WS_METHODS.gitPreparePullRequestThread, {
+const WsGitPreparePullRequestThreadRpc = make$29(WS_METHODS.gitPreparePullRequestThread, {
 	payload: GitPreparePullRequestThreadInput,
 	success: GitPreparePullRequestThreadResult,
 	error: GitManagerServiceError
 });
-const WsGitListBranchesRpc = make$30(WS_METHODS.gitListBranches, {
+const WsGitListBranchesRpc = make$29(WS_METHODS.gitListBranches, {
 	payload: GitListBranchesInput,
 	success: GitListBranchesResult,
 	error: GitCommandError
 });
-const WsVcsListRefsRpc = make$30(WS_METHODS.vcsListRefs, {
+const WsVcsListRefsRpc = make$29(WS_METHODS.vcsListRefs, {
 	payload: VcsListRefsInput,
 	success: VcsListRefsResult,
 	error: GitCommandError
 });
-const WsVcsRefreshStatusRpc = make$30(WS_METHODS.vcsRefreshStatus, {
+const WsVcsRefreshStatusRpc = make$29(WS_METHODS.vcsRefreshStatus, {
 	payload: GitStatusInput,
 	success: VcsStatusResult,
 	error: GitManagerServiceError
 });
-const WsSubscribeVcsStatusRpc = make$30(WS_METHODS.subscribeVcsStatus, {
+const WsSubscribeVcsStatusRpc = make$29(WS_METHODS.subscribeVcsStatus, {
 	payload: GitStatusInput,
 	success: VcsStatusStreamEvent,
 	error: GitManagerServiceError,
 	stream: true
 });
-const WsVcsPullRpc = make$30(WS_METHODS.vcsPull, {
+const WsVcsPullRpc = make$29(WS_METHODS.vcsPull, {
 	payload: VcsPullInput,
 	success: VcsPullResult,
 	error: GitCommandError
 });
-const WsVcsCreateWorktreeRpc = make$30(WS_METHODS.vcsCreateWorktree, {
+const WsVcsCreateWorktreeRpc = make$29(WS_METHODS.vcsCreateWorktree, {
 	payload: VcsCreateWorktreeInput,
 	success: VcsCreateWorktreeResult,
 	error: Union([GitCommandError, VcsUnsupportedRequestError])
 });
-const WsVcsRemoveWorktreeRpc = make$30(WS_METHODS.vcsRemoveWorktree, {
+const WsVcsRemoveWorktreeRpc = make$29(WS_METHODS.vcsRemoveWorktree, {
 	payload: GitRemoveWorktreeInput,
 	error: GitCommandError
 });
-const WsVcsCreateRefRpc = make$30(WS_METHODS.vcsCreateRef, {
+const WsVcsCreateRefRpc = make$29(WS_METHODS.vcsCreateRef, {
 	payload: VcsCreateRefInput,
 	success: VcsCreateRefResult,
 	error: GitCommandError
 });
-const WsVcsSwitchRefRpc = make$30(WS_METHODS.vcsSwitchRef, {
+const WsVcsSwitchRefRpc = make$29(WS_METHODS.vcsSwitchRef, {
 	payload: VcsSwitchRefInput,
 	success: VcsSwitchRefResult,
 	error: GitCommandError
 });
-const WsVcsInitRpc = make$30(WS_METHODS.vcsInit, {
+const WsVcsInitRpc = make$29(WS_METHODS.vcsInit, {
 	payload: VcsInitInput,
 	error: Union([GitCommandError, VcsUnsupportedRequestError])
 });
-const WsGitCreateWorktreeRpc = make$30(WS_METHODS.gitCreateWorktree, {
+const WsGitCreateWorktreeRpc = make$29(WS_METHODS.gitCreateWorktree, {
 	payload: GitCreateWorktreeInput,
 	success: GitCreateWorktreeResult,
 	error: GitCommandError
 });
-const WsGitRemoveWorktreeRpc = make$30(WS_METHODS.gitRemoveWorktree, {
+const WsGitRemoveWorktreeRpc = make$29(WS_METHODS.gitRemoveWorktree, {
 	payload: GitRemoveWorktreeInput,
 	error: GitCommandError
 });
-const WsGitCreateBranchRpc = make$30(WS_METHODS.gitCreateBranch, {
+const WsGitCreateBranchRpc = make$29(WS_METHODS.gitCreateBranch, {
 	payload: GitCreateBranchInput,
 	success: GitCreateBranchResult,
 	error: GitCommandError
 });
-const WsGitCheckoutRpc = make$30(WS_METHODS.gitCheckout, {
+const WsGitCheckoutRpc = make$29(WS_METHODS.gitCheckout, {
 	payload: GitCheckoutInput,
 	success: GitCheckoutResult,
 	error: GitCommandError
 });
-const WsGitInitRpc = make$30(WS_METHODS.gitInit, {
+const WsGitInitRpc = make$29(WS_METHODS.gitInit, {
 	payload: GitInitInput,
 	error: GitCommandError
 });
@@ -26411,7 +26411,7 @@ const WsGitInitRpc = make$30(WS_METHODS.gitInit, {
 * The git half of a review: the branch range and the uncommitted work. The
 * per-turn diffs beside it arrive through `orchestration.getTurnDiff`.
 */
-const WsReviewGetDiffPreviewRpc = make$30(WS_METHODS.reviewGetDiffPreview, {
+const WsReviewGetDiffPreviewRpc = make$29(WS_METHODS.reviewGetDiffPreview, {
 	payload: ReviewDiffPreviewInput,
 	success: ReviewDiffPreviewResult,
 	error: Union([ReviewDiffPreviewError])
@@ -26421,12 +26421,12 @@ const WsReviewGetDiffPreviewRpc = make$30(WS_METHODS.reviewGetDiffPreview, {
 * chunked bulk-transfer stream. A viewer wants the text once; a transfer wants
 * offsets and checksums.
 */
-const WsProjectsReadFileRpc = make$30(WS_METHODS.projectsReadFile, {
+const WsProjectsReadFileRpc = make$29(WS_METHODS.projectsReadFile, {
 	payload: ProjectReadFileInput,
 	success: ProjectReadFileResult,
 	error: Union([ProjectReadFileError])
 });
-const WsFilesystemBrowseRpc = make$30(WS_METHODS.filesystemBrowse, {
+const WsFilesystemBrowseRpc = make$29(WS_METHODS.filesystemBrowse, {
 	payload: FilesystemBrowseInput,
 	success: FilesystemBrowseResult,
 	error: Union([FilesystemBrowseError])
@@ -26436,87 +26436,87 @@ const WsFilesystemBrowseRpc = make$30(WS_METHODS.filesystemBrowse, {
 * Routed through the server because the phone keeps only the Forge-minted
 * session token, never a CMMD one.
 */
-const WsCloudListRuntimesRpc = make$30(WS_METHODS.cloudListRuntimes, {
+const WsCloudListRuntimesRpc = make$29(WS_METHODS.cloudListRuntimes, {
 	payload: CloudRuntimeListInput,
 	success: CloudRuntimeListResult,
 	error: Union([CloudRuntimeListError])
 });
-const WsTerminalOpenRpc = make$30(WS_METHODS.terminalOpen, {
+const WsTerminalOpenRpc = make$29(WS_METHODS.terminalOpen, {
 	payload: TerminalOpenInput,
 	success: TerminalSessionSnapshot,
 	error: TerminalError
 });
-const WsTerminalAttachRpc = make$30(WS_METHODS.terminalAttach, {
+const WsTerminalAttachRpc = make$29(WS_METHODS.terminalAttach, {
 	payload: TerminalAttachInput,
 	success: TerminalAttachStreamEvent,
 	error: TerminalError,
 	stream: true
 });
-const WsTerminalWriteRpc = make$30(WS_METHODS.terminalWrite, {
+const WsTerminalWriteRpc = make$29(WS_METHODS.terminalWrite, {
 	payload: TerminalWriteRequest,
 	success: TerminalControlAck,
 	error: TerminalError
 });
-const WsTerminalResizeRpc = make$30(WS_METHODS.terminalResize, {
+const WsTerminalResizeRpc = make$29(WS_METHODS.terminalResize, {
 	payload: TerminalResizeRequest,
 	success: TerminalControlAck,
 	error: TerminalError
 });
-const WsTerminalSignalRpc = make$30(WS_METHODS.terminalSignal, {
+const WsTerminalSignalRpc = make$29(WS_METHODS.terminalSignal, {
 	payload: TerminalSignalRequest,
 	success: TerminalControlAck,
 	error: TerminalError
 });
-const WsTerminalClearRpc = make$30(WS_METHODS.terminalClear, {
+const WsTerminalClearRpc = make$29(WS_METHODS.terminalClear, {
 	payload: TerminalClearRequest,
 	success: TerminalControlAck,
 	error: TerminalError
 });
-const WsTerminalRestartRpc = make$30(WS_METHODS.terminalRestart, {
+const WsTerminalRestartRpc = make$29(WS_METHODS.terminalRestart, {
 	payload: TerminalRestartRequest,
 	success: TerminalRestartResult,
 	error: TerminalError
 });
-const WsTerminalCloseRpc = make$30(WS_METHODS.terminalClose, {
+const WsTerminalCloseRpc = make$29(WS_METHODS.terminalClose, {
 	payload: TerminalCloseRequest,
 	success: TerminalControlAck,
 	error: TerminalError
 });
-const WsBrowserOpenSessionRpc = make$30(WS_METHODS.browserOpenSession, {
+const WsBrowserOpenSessionRpc = make$29(WS_METHODS.browserOpenSession, {
 	payload: BrowserOpenSessionInput,
 	success: BrowserSessionSnapshot,
 	error: BrowserError
 });
-const WsBrowserListSessionsRpc = make$30(WS_METHODS.browserListSessions, {
+const WsBrowserListSessionsRpc = make$29(WS_METHODS.browserListSessions, {
 	payload: BrowserListSessionsInput,
 	success: ArraySchema(BrowserSessionSnapshot),
 	error: BrowserError
 });
-const WsBrowserCloseSessionRpc = make$30(WS_METHODS.browserCloseSession, {
+const WsBrowserCloseSessionRpc = make$29(WS_METHODS.browserCloseSession, {
 	payload: BrowserCloseSessionInput,
 	error: BrowserError
 });
-const WsBrowserGetSessionRpc = make$30(WS_METHODS.browserGetSession, {
+const WsBrowserGetSessionRpc = make$29(WS_METHODS.browserGetSession, {
 	payload: BrowserGetSessionInput,
 	success: NullOr(BrowserSessionSnapshot),
 	error: BrowserError
 });
-const WsBrowserCommandRpc = make$30(WS_METHODS.browserCommand, {
+const WsBrowserCommandRpc = make$29(WS_METHODS.browserCommand, {
 	payload: BrowserCommandInput,
 	success: BrowserCommandResult,
 	error: BrowserError
 });
-const WsBrowserClearBrowsingDataRpc = make$30(WS_METHODS.browserClearBrowsingData, {
+const WsBrowserClearBrowsingDataRpc = make$29(WS_METHODS.browserClearBrowsingData, {
 	payload: BrowserClearBrowsingDataInput,
 	success: BrowserClearBrowsingDataResult,
 	error: BrowserError
 });
-const WsBrowserAttachDisplayRpc = make$30(WS_METHODS.browserAttachDisplay, {
+const WsBrowserAttachDisplayRpc = make$29(WS_METHODS.browserAttachDisplay, {
 	payload: BrowserDisplayAttachInput,
 	success: BrowserDisplayAttachResult,
 	error: BrowserError
 });
-const WsBrowserAddDisplayIceCandidateRpc = make$30(WS_METHODS.browserAddDisplayIceCandidate, {
+const WsBrowserAddDisplayIceCandidateRpc = make$29(WS_METHODS.browserAddDisplayIceCandidate, {
 	payload: BrowserDisplayIceCandidateInput,
 	success: Struct({}),
 	error: BrowserError
@@ -26528,87 +26528,87 @@ const WsBrowserAddDisplayIceCandidateRpc = make$30(WS_METHODS.browserAddDisplayI
 * page: it can click a DOM element but cannot touch the dock, a file manager,
 * or anything else outside Chromium. This one lands on the display itself.
 */
-const WsComputerInputRpc = make$30(WS_METHODS.computerInput, {
+const WsComputerInputRpc = make$29(WS_METHODS.computerInput, {
 	payload: ComputerInputInput,
 	success: ComputerInputResult,
 	error: ComputerError
 });
-const WsDevTunnelRegisterRpc = make$30(WS_METHODS.devTunnelRegister, {
+const WsDevTunnelRegisterRpc = make$29(WS_METHODS.devTunnelRegister, {
 	payload: DevTunnelRegisterInput,
 	success: DevTunnelRecord,
 	error: DevTunnelError
 });
-const WsDevTunnelUnregisterRpc = make$30(WS_METHODS.devTunnelUnregister, {
+const WsDevTunnelUnregisterRpc = make$29(WS_METHODS.devTunnelUnregister, {
 	payload: DevTunnelUnregisterInput,
 	error: DevTunnelError
 });
-const WsDevTunnelListRpc = make$30(WS_METHODS.devTunnelList, {
+const WsDevTunnelListRpc = make$29(WS_METHODS.devTunnelList, {
 	payload: DevTunnelListInput,
 	success: ArraySchema(DevTunnelRecord),
 	error: DevTunnelError
 });
-const WsThreadDevRuntimeGetRpc = make$30(WS_METHODS.threadDevRuntimeGet, {
+const WsThreadDevRuntimeGetRpc = make$29(WS_METHODS.threadDevRuntimeGet, {
 	payload: ThreadDevRuntimeGetInput,
 	success: NullOr(ThreadDevRuntimeRecord),
 	error: ThreadDevRuntimeError
 });
-const WsThreadDevRuntimeAllocatePortRpc = make$30(WS_METHODS.threadDevRuntimeAllocatePort, {
+const WsThreadDevRuntimeAllocatePortRpc = make$29(WS_METHODS.threadDevRuntimeAllocatePort, {
 	payload: ThreadDevRuntimeAllocatePortInput,
 	success: ThreadDevRuntimeRecord,
 	error: ThreadDevRuntimeError
 });
-const WsThreadDevRuntimeReleaseRpc = make$30(WS_METHODS.threadDevRuntimeRelease, {
+const WsThreadDevRuntimeReleaseRpc = make$29(WS_METHODS.threadDevRuntimeRelease, {
 	payload: ThreadDevRuntimeReleaseInput,
 	error: ThreadDevRuntimeError
 });
-const WsWorkspaceEnvironmentPreflightRpc = make$30(WS_METHODS.workspaceEnvironmentPreflight, {
+const WsWorkspaceEnvironmentPreflightRpc = make$29(WS_METHODS.workspaceEnvironmentPreflight, {
 	payload: WorkspaceEnvironmentPreflightInput,
 	success: WorkspaceEnvironmentPreflightReport,
 	error: WorkspaceEnvironmentError
 });
-const WsWorkspaceEnsureScratchRpc = make$30(WS_METHODS.workspaceEnsureScratch, {
+const WsWorkspaceEnsureScratchRpc = make$29(WS_METHODS.workspaceEnsureScratch, {
 	payload: WorkspaceEnsureScratchInput,
 	success: WorkspaceEnsureScratchResult,
 	error: WorkspaceEnvironmentError
 });
-const WsOrchestrationDispatchCommandRpc = make$30(ORCHESTRATION_WS_METHODS.dispatchCommand, {
+const WsOrchestrationDispatchCommandRpc = make$29(ORCHESTRATION_WS_METHODS.dispatchCommand, {
 	payload: ClientOrchestrationCommand,
 	success: OrchestrationRpcSchemas.dispatchCommand.output,
 	error: OrchestrationDispatchCommandError
 });
-const WsOrchestrationGetTurnDiffRpc = make$30(ORCHESTRATION_WS_METHODS.getTurnDiff, {
+const WsOrchestrationGetTurnDiffRpc = make$29(ORCHESTRATION_WS_METHODS.getTurnDiff, {
 	payload: OrchestrationGetTurnDiffInput,
 	success: OrchestrationRpcSchemas.getTurnDiff.output,
 	error: OrchestrationGetTurnDiffError
 });
-const WsOrchestrationGetFullThreadDiffRpc = make$30(ORCHESTRATION_WS_METHODS.getFullThreadDiff, {
+const WsOrchestrationGetFullThreadDiffRpc = make$29(ORCHESTRATION_WS_METHODS.getFullThreadDiff, {
 	payload: OrchestrationGetFullThreadDiffInput,
 	success: OrchestrationRpcSchemas.getFullThreadDiff.output,
 	error: OrchestrationGetFullThreadDiffError
 });
-const WsOrchestrationStreamTurnDiffRpc = make$30(ORCHESTRATION_WS_METHODS.streamTurnDiff, {
+const WsOrchestrationStreamTurnDiffRpc = make$29(ORCHESTRATION_WS_METHODS.streamTurnDiff, {
 	payload: OrchestrationGetTurnDiffInput,
 	success: BulkTransferStreamEvent,
 	error: Union([OrchestrationGetTurnDiffError, BulkTransferError]),
 	stream: true
 });
-const WsOrchestrationStreamFullThreadDiffRpc = make$30(ORCHESTRATION_WS_METHODS.streamFullThreadDiff, {
+const WsOrchestrationStreamFullThreadDiffRpc = make$29(ORCHESTRATION_WS_METHODS.streamFullThreadDiff, {
 	payload: OrchestrationGetFullThreadDiffInput,
 	success: BulkTransferStreamEvent,
 	error: Union([OrchestrationGetFullThreadDiffError, BulkTransferError]),
 	stream: true
 });
-const WsOrchestrationReplayEventsRpc = make$30(ORCHESTRATION_WS_METHODS.replayEvents, {
+const WsOrchestrationReplayEventsRpc = make$29(ORCHESTRATION_WS_METHODS.replayEvents, {
 	payload: OrchestrationReplayEventsInput,
 	success: OrchestrationRpcSchemas.replayEvents.output,
 	error: OrchestrationReplayEventsError
 });
-const WsOrchestrationGetArchivedShellSnapshotRpc = make$30(ORCHESTRATION_WS_METHODS.getArchivedShellSnapshot, {
+const WsOrchestrationGetArchivedShellSnapshotRpc = make$29(ORCHESTRATION_WS_METHODS.getArchivedShellSnapshot, {
 	payload: OrchestrationRpcSchemas.getArchivedShellSnapshot.input,
 	success: OrchestrationRpcSchemas.getArchivedShellSnapshot.output,
 	error: OrchestrationGetSnapshotError
 });
-const WsOrchestrationSearchThreadsRpc = make$30(ORCHESTRATION_WS_METHODS.searchThreads, {
+const WsOrchestrationSearchThreadsRpc = make$29(ORCHESTRATION_WS_METHODS.searchThreads, {
 	payload: OrchestrationSearchThreadsInput,
 	success: OrchestrationRpcSchemas.searchThreads.output,
 	error: OrchestrationSearchThreadsError
@@ -26619,7 +26619,7 @@ const WsOrchestrationSearchThreadsRpc = make$30(ORCHESTRATION_WS_METHODS.searchT
 * route and `subscribeThread`'s fallback snapshot serve, over the RPC socket
 * instead.
 */
-const WsOrchestrationGetThreadDetailPageRpc = make$30(ORCHESTRATION_WS_METHODS.getThreadDetailPage, {
+const WsOrchestrationGetThreadDetailPageRpc = make$29(ORCHESTRATION_WS_METHODS.getThreadDetailPage, {
 	payload: OrchestrationRpcSchemas.getThreadDetailPage.input,
 	success: OrchestrationRpcSchemas.getThreadDetailPage.output,
 	error: OrchestrationGetSnapshotError
@@ -26632,29 +26632,29 @@ const WsOrchestrationGetThreadDetailPageRpc = make$30(ORCHESTRATION_WS_METHODS.g
 * also be authorized, and a repository the caller cannot reach is a failure
 * here rather than a clone that dies half way.
 */
-const WsSourceControlLookupRepositoryRpc = make$30(WS_METHODS.sourceControlLookupRepository, {
+const WsSourceControlLookupRepositoryRpc = make$29(WS_METHODS.sourceControlLookupRepository, {
 	payload: SourceControlRepositoryLookupInput,
 	success: SourceControlRepositoryInfo,
 	error: SourceControlRepositoryError
 });
-const WsSourceControlCloneRepositoryRpc = make$30(WS_METHODS.sourceControlCloneRepository, {
+const WsSourceControlCloneRepositoryRpc = make$29(WS_METHODS.sourceControlCloneRepository, {
 	payload: SourceControlCloneRepositoryInput,
 	success: SourceControlCloneRepositoryResult,
 	error: SourceControlRepositoryError
 });
-const WsOrchestrationSubscribeShellRpc = make$30(ORCHESTRATION_WS_METHODS.subscribeShell, {
+const WsOrchestrationSubscribeShellRpc = make$29(ORCHESTRATION_WS_METHODS.subscribeShell, {
 	payload: OrchestrationRpcSchemas.subscribeShell.input,
 	success: OrchestrationRpcSchemas.subscribeShell.output,
 	error: OrchestrationGetSnapshotError,
 	stream: true
 });
-const WsOrchestrationSubscribeThreadRpc = make$30(ORCHESTRATION_WS_METHODS.subscribeThread, {
+const WsOrchestrationSubscribeThreadRpc = make$29(ORCHESTRATION_WS_METHODS.subscribeThread, {
 	payload: OrchestrationRpcSchemas.subscribeThread.input,
 	success: OrchestrationRpcSchemas.subscribeThread.output,
 	error: OrchestrationGetSnapshotError,
 	stream: true
 });
-const WsSubscribeTerminalEventsRpc = make$30(WS_METHODS.subscribeTerminalEvents, {
+const WsSubscribeTerminalEventsRpc = make$29(WS_METHODS.subscribeTerminalEvents, {
 	payload: Struct({}),
 	success: TerminalEvent,
 	stream: true
@@ -26675,65 +26675,65 @@ const WsSubscribeTerminalEventsRpc = make$30(WS_METHODS.subscribeTerminalEvents,
 * The client's activity report, accepted and dropped. See
 * packages/contracts/src/clientActivityCompat.ts for why there is no answer.
 */
-const WsServerReportClientActivityRpc = make$30(WS_METHODS.serverReportClientActivity, { payload: ClientActivityReportInput });
-const WsServerDiscoverSourceControlRpc = make$30(WS_METHODS.serverDiscoverSourceControl, {
+const WsServerReportClientActivityRpc = make$29(WS_METHODS.serverReportClientActivity, { payload: ClientActivityReportInput });
+const WsServerDiscoverSourceControlRpc = make$29(WS_METHODS.serverDiscoverSourceControl, {
 	payload: Struct({}),
 	success: SourceControlDiscoveryResult
 });
-const WsProjectsListEntriesRpc = make$30(WS_METHODS.projectsListEntries, {
+const WsProjectsListEntriesRpc = make$29(WS_METHODS.projectsListEntries, {
 	payload: ProjectListEntriesInput,
 	success: ProjectListEntriesResult,
 	error: ProjectListEntriesError
 });
-const WsSubscribeTerminalMetadataRpc = make$30(WS_METHODS.subscribeTerminalMetadata, {
+const WsSubscribeTerminalMetadataRpc = make$29(WS_METHODS.subscribeTerminalMetadata, {
 	payload: Struct({}),
 	success: TerminalMetadataStreamEvent,
 	stream: true
 });
-const WsSubscribeBrowserEventsRpc = make$30(WS_METHODS.subscribeBrowserEvents, {
+const WsSubscribeBrowserEventsRpc = make$29(WS_METHODS.subscribeBrowserEvents, {
 	payload: BrowserSubscribeInput,
 	success: BrowserStreamEvent,
 	error: BrowserError,
 	stream: true
 });
-const WsSubscribeServerConfigRpc = make$30(WS_METHODS.subscribeServerConfig, {
+const WsSubscribeServerConfigRpc = make$29(WS_METHODS.subscribeServerConfig, {
 	payload: Struct({}),
 	success: ServerConfigStreamEvent,
 	error: Union([KeybindingsConfigError, ServerSettingsError]),
 	stream: true
 });
-const WsSubscribeServerLifecycleRpc = make$30(WS_METHODS.subscribeServerLifecycle, {
+const WsSubscribeServerLifecycleRpc = make$29(WS_METHODS.subscribeServerLifecycle, {
 	payload: Struct({}),
 	success: ServerLifecycleStreamEvent,
 	stream: true
 });
-const WsSubscribeAuthAccessRpc = make$30(WS_METHODS.subscribeAuthAccess, {
+const WsSubscribeAuthAccessRpc = make$29(WS_METHODS.subscribeAuthAccess, {
 	payload: Struct({}),
 	success: AuthAccessStreamEvent,
 	stream: true
 });
-const WsSubscribeWorkspaceReadinessRpc = make$30(WS_METHODS.subscribeWorkspaceReadiness, {
+const WsSubscribeWorkspaceReadinessRpc = make$29(WS_METHODS.subscribeWorkspaceReadiness, {
 	payload: WorkspaceReadinessSubscribeInput,
 	success: PhaseEvent,
 	error: WorkspaceReadinessError,
 	stream: true
 });
-const WsRpcGroup = make$29(WsServerGetConfigRpc, WsServerRefreshProvidersRpc, WsServerStartProviderAuthRpc, WsServerRepairProviderAuthRuntimeRpc, WsServerDisconnectProviderAuthRpc, WsServerGetProviderAuthSessionRpc, WsServerCancelProviderAuthRpc, WsServerSubmitProviderAuthCodeRpc, WsServerSyncPersonalCodexToCloudRpc, WsServerSyncPersonalClaudeToCloudRpc, WsServerUpsertKeybindingRpc, WsServerRemoveKeybindingRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerUpdateEnvironmentDisplayNameRpc, WsServerTraceDiagnosticsRpc, WsServerHeartbeatRpc, make$30(WS_METHODS.usageGetSummary, {
+const WsRpcGroup = make$28(WsServerGetConfigRpc, WsServerRefreshProvidersRpc, WsServerStartProviderAuthRpc, WsServerRepairProviderAuthRuntimeRpc, WsServerDisconnectProviderAuthRpc, WsServerGetProviderAuthSessionRpc, WsServerCancelProviderAuthRpc, WsServerSubmitProviderAuthCodeRpc, WsServerSyncPersonalCodexToCloudRpc, WsServerSyncPersonalClaudeToCloudRpc, WsServerUpsertKeybindingRpc, WsServerRemoveKeybindingRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerUpdateEnvironmentDisplayNameRpc, WsServerTraceDiagnosticsRpc, WsServerHeartbeatRpc, make$29(WS_METHODS.usageGetSummary, {
 	payload: UsageSummaryInput,
 	success: UsageSummary,
 	error: UsageReadError
-}), WsPullRequestsListRpc, WsPullRequestsListStatsRpc, WsPullRequestsDetailRpc, WsPullRequestsActivityRpc, WsPullRequestsThreadCommentsRpc, WsPullRequestsDiffFileContentsRpc, WsPullRequestsRunActionRpc, WsPullRequestsUpdateRpc, WsPullRequestsCommentRpc, WsPullRequestsUpdateCommentRpc, WsPullRequestsSubmitReviewRpc, WsPullRequestsReplyToThreadRpc, WsPullRequestsSetThreadResolutionRpc, WsPullRequestsSetReactionRpc, WsPullRequestsInvalidateRpc, WsPullRequestsReviewerCandidatesRpc, WsPullRequestsRequestReviewersRpc, WsProjectsSearchContentsRpc, WsProjectsSearchEntriesRpc, WsProjectsWriteFileRpc, WsProjectCheckoutDeletionPreviewRpc, WsProjectCheckoutDeletionExecuteRpc, WsWorkspaceReadFileRpc, WsWorkspaceBeginWriteFileRpc, WsWorkspaceWriteFileChunkRpc, WsWorkspaceCommitWriteFileRpc, WsWorkspaceCancelWriteFileRpc, WsShellOpenInEditorRpc, WsSubscribeGitStatusRpc, WsGitPullRpc, WsGitRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitListBranchesRpc, WsVcsListRefsRpc, WsVcsRefreshStatusRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsGitCreateWorktreeRpc, WsGitRemoveWorktreeRpc, WsGitCreateBranchRpc, WsGitCheckoutRpc, WsGitInitRpc, WsFilesystemBrowseRpc, WsProjectsReadFileRpc, WsReviewGetDiffPreviewRpc, WsCloudListRuntimesRpc, WsTerminalOpenRpc, WsTerminalAttachRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalSignalRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsBrowserOpenSessionRpc, WsBrowserListSessionsRpc, WsBrowserCloseSessionRpc, WsBrowserGetSessionRpc, WsBrowserCommandRpc, WsBrowserClearBrowsingDataRpc, WsBrowserAttachDisplayRpc, WsBrowserAddDisplayIceCandidateRpc, WsComputerInputRpc, WsDevTunnelRegisterRpc, WsDevTunnelUnregisterRpc, WsDevTunnelListRpc, WsThreadDevRuntimeGetRpc, WsThreadDevRuntimeAllocatePortRpc, WsThreadDevRuntimeReleaseRpc, WsWorkspaceEnvironmentPreflightRpc, WsWorkspaceEnsureScratchRpc, WsSubscribeTerminalEventsRpc, WsSubscribeTerminalMetadataRpc, WsProjectsListEntriesRpc, WsServerDiscoverSourceControlRpc, WsServerReportClientActivityRpc, WsSubscribeBrowserEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsSubscribeWorkspaceReadinessRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationStreamTurnDiffRpc, WsOrchestrationStreamFullThreadDiffRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationGetArchivedShellSnapshotRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, make$30(WS_METHODS.assetsCreateUrl, {
+}), WsPullRequestsListRpc, WsPullRequestsListStatsRpc, WsPullRequestsDetailRpc, WsPullRequestsActivityRpc, WsPullRequestsThreadCommentsRpc, WsPullRequestsDiffFileContentsRpc, WsPullRequestsRunActionRpc, WsPullRequestsUpdateRpc, WsPullRequestsCommentRpc, WsPullRequestsUpdateCommentRpc, WsPullRequestsSubmitReviewRpc, WsPullRequestsReplyToThreadRpc, WsPullRequestsSetThreadResolutionRpc, WsPullRequestsSetReactionRpc, WsPullRequestsInvalidateRpc, WsPullRequestsReviewerCandidatesRpc, WsPullRequestsRequestReviewersRpc, WsProjectsSearchContentsRpc, WsProjectsSearchEntriesRpc, WsProjectsWriteFileRpc, WsProjectCheckoutDeletionPreviewRpc, WsProjectCheckoutDeletionExecuteRpc, WsWorkspaceReadFileRpc, WsWorkspaceBeginWriteFileRpc, WsWorkspaceWriteFileChunkRpc, WsWorkspaceCommitWriteFileRpc, WsWorkspaceCancelWriteFileRpc, WsShellOpenInEditorRpc, WsSubscribeGitStatusRpc, WsGitPullRpc, WsGitRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitListBranchesRpc, WsVcsListRefsRpc, WsVcsRefreshStatusRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsGitCreateWorktreeRpc, WsGitRemoveWorktreeRpc, WsGitCreateBranchRpc, WsGitCheckoutRpc, WsGitInitRpc, WsFilesystemBrowseRpc, WsProjectsReadFileRpc, WsReviewGetDiffPreviewRpc, WsCloudListRuntimesRpc, WsTerminalOpenRpc, WsTerminalAttachRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalSignalRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsBrowserOpenSessionRpc, WsBrowserListSessionsRpc, WsBrowserCloseSessionRpc, WsBrowserGetSessionRpc, WsBrowserCommandRpc, WsBrowserClearBrowsingDataRpc, WsBrowserAttachDisplayRpc, WsBrowserAddDisplayIceCandidateRpc, WsComputerInputRpc, WsDevTunnelRegisterRpc, WsDevTunnelUnregisterRpc, WsDevTunnelListRpc, WsThreadDevRuntimeGetRpc, WsThreadDevRuntimeAllocatePortRpc, WsThreadDevRuntimeReleaseRpc, WsWorkspaceEnvironmentPreflightRpc, WsWorkspaceEnsureScratchRpc, WsSubscribeTerminalEventsRpc, WsSubscribeTerminalMetadataRpc, WsProjectsListEntriesRpc, WsServerDiscoverSourceControlRpc, WsServerReportClientActivityRpc, WsSubscribeBrowserEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsSubscribeWorkspaceReadinessRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationStreamTurnDiffRpc, WsOrchestrationStreamFullThreadDiffRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationGetArchivedShellSnapshotRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, make$29(WS_METHODS.assetsCreateUrl, {
 	payload: AssetsRpcSchemas.createUrl.input,
 	success: AssetsRpcSchemas.createUrl.output,
 	error: AssetAccessError
-}), make$30(WS_METHODS.attachmentsCreateUploadUrl, {
+}), make$29(WS_METHODS.attachmentsCreateUploadUrl, {
 	payload: AttachmentCreateUploadUrlInput,
 	success: AttachmentCreateUploadUrlResult,
 	error: AttachmentUploadSigningKeyError
-}), make$30(WS_METHODS.attachmentsDelete, {
+}), make$29(WS_METHODS.attachmentsDelete, {
 	payload: AttachmentDeleteInput,
 	success: Void
-}), make$30(WS_METHODS.providerUploadFeedback, {
+}), make$29(WS_METHODS.providerUploadFeedback, {
 	payload: ProviderUploadFeedbackInput,
 	success: ProviderUploadFeedbackResult,
 	error: ProviderUploadFeedbackError
@@ -34361,7 +34361,7 @@ function parse$5(input) {
 const FULL_PATH_REGEXP = /^https?:\/\/.*?\//;
 const OPTIONAL_PARAM_REGEXP = /(\/:[^/()]*?)\?(\/?)/;
 /** @internal */
-const make$28 = (options = {}) => new RouterImpl(options);
+const make$27 = (options = {}) => new RouterImpl(options);
 var RouterImpl = class {
 	constructor(options = {}) {
 		this.options = {
@@ -34880,7 +34880,7 @@ const httpMethods = [
 * @since 1.0.0
 * @category constructors
 */
-const make$27 = make$28;
+const make$26 = make$27;
 //#endregion
 //#region ../../node_modules/.bun/effect@4.0.0-beta.51/node_modules/effect/dist/unstable/http/HttpRouter.js
 /**
@@ -34896,8 +34896,8 @@ const HttpRouter = /* @__PURE__ */ Service$1("effect/http/HttpRouter");
 * @since 4.0.0
 * @category HttpRouter
 */
-const make$26 = /* @__PURE__ */ gen(function* () {
-	const router = make$27(yield* RouterConfig);
+const make$25 = /* @__PURE__ */ gen(function* () {
+	const router = make$26(yield* RouterConfig);
 	const middleware = /* @__PURE__ */ new Set();
 	const addAll = (routes) => contextWith((context) => {
 		const middleware = getMiddleware(context);
@@ -35027,7 +35027,7 @@ const add$1 = (method, path, handler, options) => use((router) => router.add(met
 * @since 4.0.0
 * @category HttpRouter
 */
-const layer$5 = /* @__PURE__ */ effect(HttpRouter)(make$26);
+const layer$5 = /* @__PURE__ */ effect(HttpRouter)(make$25);
 const RouteTypeId = "~effect/http/HttpRouter/Route";
 const makeRoute = (options) => ({
 	...options,
@@ -66041,7 +66041,7 @@ function normalizeNumberish(value) {
 }
 //#endregion
 //#region package.json
-var version$1 = "0.13.95";
+var version$1 = "0.13.97";
 //#endregion
 //#region src/sentry.ts
 const SERVER_APP_NAME = "forge-server";
@@ -70888,7 +70888,7 @@ const storeAttachmentUpload = fn$1("AttachmentUpload.store")(function* (claims,
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path$2;
 	let receivedBytes = 0;
-	const bodyStream = body instanceof Uint8Array ? make$43(body) : body;
+	const bodyStream = body instanceof Uint8Array ? make$42(body) : body;
 	return yield* gen(function* () {
 		yield* fileSystem.makeDirectory(path.dirname(finalPath), { recursive: true });
 		yield* run$2(bodyStream.pipe(takeWhile((chunk) => {
@@ -76837,7 +76837,7 @@ let clientIdCounter = 0;
 * @since 4.0.0
 * @category client
 */
-const make$25 = /* @__PURE__ */ fnUntraced(function* (group, options) {
+const make$24 = /* @__PURE__ */ fnUntraced(function* (group, options) {
 	const clientId = clientIdCounter++;
 	const { run, send, supportsAck, supportsTransferables } = yield* Protocol$1;
 	const entries = /* @__PURE__ */ new Map();
@@ -76981,7 +76981,7 @@ const makeNoSerialization = /* @__PURE__ */ fnUntraced(function* (group, options
 	const services = yield* context();
 	const scope = get$3(services, Scope$1);
 	const trackFiber = runIn(forkUnsafe(scope, "parallel"));
-	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* make$44(concurrency);
+	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* make$43(concurrency);
 	const clients = /* @__PURE__ */ new Map();
 	let isShutdown = false;
 	const shutdownLatch = makeUnsafe$7(false);
@@ -77212,10 +77212,10 @@ const applyMiddleware = (context, handler, options) => {
 * @since 4.0.0
 * @category server
 */
-const make$24 = /* @__PURE__ */ fnUntraced(function* (group, options) {
+const make$23 = /* @__PURE__ */ fnUntraced(function* (group, options) {
 	const { disconnects, end, run, send, supportsAck, supportsSpanPropagation, supportsTransferables } = yield* Protocol;
 	const services = yield* context();
-	const scope = yield* make$37();
+	const scope = yield* make$36();
 	const server = yield* makeNoSerialization(group, {
 		...options,
 		disableClientAcks: !supportsAck,
@@ -77384,12 +77384,12 @@ const makeProtocolWithHttpEffectWebsocket = /* @__PURE__ */ gen(function* () {
 */
 const toHttpEffectWebsocket = /* @__PURE__ */ fnUntraced(function* (group, options) {
 	const { httpEffect, protocol } = yield* makeProtocolWithHttpEffectWebsocket;
-	yield* make$24(group, options).pipe(provideService(Protocol, protocol), forkScoped);
+	yield* make$23(group, options).pipe(provideService(Protocol, protocol), forkScoped);
 	return httpEffect;
 });
 const makeSocketProtocol = /* @__PURE__ */ gen(function* () {
 	const serialization = yield* RpcSerialization;
-	const disconnects = yield* make$45();
+	const disconnects = yield* make$44();
 	let clientId = 0;
 	const clients = /* @__PURE__ */ new Map();
 	const clientIds = /* @__PURE__ */ new Set();
@@ -79007,7 +79007,7 @@ function updateSuccessfulEntry(input) {
 	return next;
 }
 const makeSourceControlRateLimit = gen(function* () {
-	const entries = yield* make$50(/* @__PURE__ */ new Map());
+	const entries = yield* make$49(/* @__PURE__ */ new Map());
 	const check = fn$1("SourceControlRateLimit.check")(function* (input, options) {
 		const now = yield* currentTimeMillis;
 		const entry = (yield* get$6(entries)).get(normalizedKey(input));
@@ -80042,7 +80042,7 @@ function trimmed$2(value) {
 * the other hosts already use.
 */
 function toIsoUtc(value) {
-	return match(make$38(value), {
+	return match(make$37(value), {
 		onNone: () => value,
 		onSome: formatIso
 	});
@@ -84203,7 +84203,7 @@ function resolveGithubWriteIdentity(getSettings) {
 }
 var ServerSettingsService = class ServerSettingsService extends Service$1()("forge/serverSettings/ServerSettingsService") {
 	static layerTest = (overrides = {}) => effect(ServerSettingsService, gen(function* () {
-		const currentSettingsRef = yield* make$50(deepMerge$1(DEFAULT_SERVER_SETTINGS, overrides));
+		const currentSettingsRef = yield* make$49(deepMerge$1(DEFAULT_SERVER_SETTINGS, overrides));
 		return {
 			start: void_$1,
 			ready: void_$1,
@@ -84261,12 +84261,12 @@ const ServerSettingsLive = effect(ServerSettingsService, gen(function* () {
 	const { settingsPath } = yield* ServerConfig;
 	const fs = yield* FileSystem;
 	const pathService = yield* Path$2;
-	const writeSemaphore = yield* make$44(1);
+	const writeSemaphore = yield* make$43(1);
 	const cacheKey = "settings";
 	const changesPubSub = yield* unbounded$1();
-	const startedRef = yield* make$50(false);
-	const startedDeferred = yield* make$39();
-	const watcherScope = yield* make$37("sequential");
+	const startedRef = yield* make$49(false);
+	const startedDeferred = yield* make$38();
+	const watcherScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(watcherScope, void_$3));
 	const emitChange = (settings) => publish(changesPubSub, settings).pipe(asVoid);
 	const readConfigExists = fs.exists(settingsPath).pipe(mapError((cause) => new ServerSettingsError({
@@ -86344,7 +86344,7 @@ function toReviewThreadListing(threads, dismissalsByReviewId) {
 		viewer: threads.metadata.viewer
 	};
 }
-const make$22 = gen(function* () {
+const make$21 = gen(function* () {
 	const github = yield* GitHubCli$1;
 	/**
 	* The pull request's own node id, which is what a mutation against the pull request itself is
@@ -87049,9 +87049,9 @@ const make$22 = gen(function* () {
 		})))
 	});
 });
-effect(GitHubPullRequestCli, make$22);
+effect(GitHubPullRequestCli, make$21);
 /** Builds a PR CLI for one authenticated session without touching global git or auth state. */
-const makeFromCommandRunner = (runner) => make$22.pipe(provideService(GitHubCli$1, runner));
+const makeFromCommandRunner = (runner) => make$21.pipe(provideService(GitHubCli$1, runner));
 //#endregion
 //#region src/pullRequest/GitHubPullRequestProvider.ts
 const CAPABILITIES$3 = {
@@ -87171,7 +87171,7 @@ function loginAvatarUrl(login, host) {
 }
 /** True where markdown would render nothing: whitespace, or only HTML comments. */
 const rendersEmpty = (body) => body.replace(/<!--[\s\S]*?-->/g, "").trim().length === 0;
-const make$21 = gen(function* () {
+const make$20 = gen(function* () {
 	const cli = yield* GitHubPullRequestCli;
 	const fail = (operation) => (error) => new PullRequestProviderError({
 		provider: "github",
@@ -87380,7 +87380,7 @@ const make$21 = gen(function* () {
 	};
 });
 /** Constructs the provider from a session-bound command service supplied by the caller. */
-const makeFromCli = (cli) => make$21.pipe(provideService(GitHubPullRequestCli, cli));
+const makeFromCli = (cli) => make$20.pipe(provideService(GitHubPullRequestCli, cli));
 //#endregion
 //#region src/git/AgentAttribution.ts
 /**
@@ -92993,7 +92993,7 @@ function toResolvableLinks(links) {
 * A Forge project id is installation-local; it must never be sent to CMMD as a project id.
 */
 var CmmdProjectIdentityResolver = class extends Service$1()("forge/pullRequest/CmmdProjectIdentityResolver") {};
-const make$20 = gen(function* () {
+const make$19 = gen(function* () {
 	const environment = yield* ServerEnvironment;
 	const repositoryIdentity = yield* RepositoryIdentityResolver;
 	const resolve = (forgeProjectId, cmmdJwt) => gen(function* () {
@@ -93034,7 +93034,7 @@ function resolveCanonicalKey(repositoryIdentity, forgeProjectId) {
 		return (yield* repositoryIdentity.resolve(workspaceRoot))?.canonicalKey ?? null;
 	}).pipe(orElseSucceed(() => null));
 }
-const cmmdProjectIdentityResolverLive = effect(CmmdProjectIdentityResolver, make$20);
+const cmmdProjectIdentityResolverLive = effect(CmmdProjectIdentityResolver, make$19);
 //#endregion
 //#region src/pullRequest/PullRequestServiceFactory.ts
 var PullRequestServiceFactory = class extends Service$1()("forge/pullRequest/PullRequestServiceFactory") {};
@@ -93512,12 +93512,12 @@ const KeybindingsLive = effect(Keybindings, gen(function* () {
 	const { keybindingsConfigPath } = yield* ServerConfig;
 	const fs = yield* FileSystem;
 	const path = yield* Path$2;
-	const upsertSemaphore = yield* make$44(1);
+	const upsertSemaphore = yield* make$43(1);
 	const resolvedConfigCacheKey = "resolved";
 	const changesPubSub = yield* unbounded$1();
-	const startedRef = yield* make$50(false);
-	const startedDeferred = yield* make$39();
-	const watcherScope = yield* make$37("sequential");
+	const startedRef = yield* make$49(false);
+	const startedDeferred = yield* make$38();
+	const watcherScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(watcherScope, void_$3));
 	const emitChange = (configState) => publish(changesPubSub, configState).pipe(asVoid);
 	const readConfigExists = fs.exists(keybindingsConfigPath).pipe(mapError((cause) => new KeybindingsConfigError({
@@ -94841,7 +94841,7 @@ var ProviderRegistry = class extends Service$1()("forge/provider/Services/Provid
 var ServerLifecycleEvents = class extends Service$1()("forge/serverLifecycleEvents") {};
 const ServerLifecycleEventsLive = effect(ServerLifecycleEvents, gen(function* () {
 	const pubsub = yield* unbounded$1();
-	const state = yield* make$50({
+	const state = yield* make$49({
 		sequence: 0,
 		events: []
 	});
@@ -96626,7 +96626,7 @@ function normalizeCount(count) {
 	return Number.isFinite(count) ? Math.max(0, Math.floor(count)) : 0;
 }
 const makeRuntimeDrainState = gen(function* () {
-	const stateRef = yield* make$50(initialState);
+	const stateRef = yield* make$49(initialState);
 	const update = (f) => updateAndGet(stateRef, f).pipe(map$3(snapshotFromState));
 	return {
 		beginTurn: (input) => update((state) => {
@@ -98014,6 +98014,119 @@ function providerAuthFailureMessage(message, provider, env = process.env) {
 	}).message;
 }
 //#endregion
+//#region ../../packages/shared/src/publicProviderCopy.ts
+const PUBLIC_PROVIDER_LEAK_PATTERNS = [
+	/\bDeepSeek\b/i,
+	/\bKimi\b/i,
+	/\bMoonshot\b/i,
+	/\bdeepseek[-._a-z0-9]*\b/i,
+	/\bkimi[-._a-z0-9]*\b/i,
+	/\bmoonshot[-._a-z0-9]*\b/i,
+	/\bAPEX_API_KEY\b/,
+	/\bDEEPSEEK_API_KEY\b/,
+	/\bKIMI_API_KEY\b/,
+	/\bOPENAI_API_KEY\b/,
+	/\bANTHROPIC_API_KEY\b/,
+	/\bCURSOR_API_KEY\b/,
+	/\bOPENCODE_API_KEY\b/,
+	/\bforge_proxy_[A-Za-z0-9._-]+\b/,
+	/\bProviderValidationError\b/,
+	/\/forge-server\/node_modules\//,
+	/https?:\/\/[^\s'"<>)]*\/api\/provider-egress\/[^\s'"<>)]*/i,
+	/https?:\/\/[^\s'"<>)]*(?:apex|deepseek|moonshot|kimi)[^\s'"<>)]*/i
+];
+const DEFAULT_PUBLIC_PROVIDER_ERROR = "CMMD is temporarily unavailable. Check the workspace AI connection and retry.";
+function isProviderRateOrQuotaError(message) {
+	if (!message) return false;
+	const normalized = message.toLowerCase();
+	return /\b(rate[\s-]?limit|too\s+many\s+requests|usage[ _-]limit|usage_limit_reached|quota|insufficient_quota)\b/.test(normalized) || /\b429\b/.test(normalized);
+}
+function providerLifecycleOrAccountCopy(message) {
+	if (/\bbound to provider account\b/.test(message) && /\bcannot use provider account\b/.test(message)) return "Forge could not switch this conversation to the selected AI account. Retry the account switch.";
+	if (/\bforge_runtime_repairing\b/.test(message) || /\bthis turn was interrupted because the environment is being repaired\b/.test(message)) return "This turn was interrupted because the environment is being repaired. Retry after the repair finishes.";
+	if (/\bforge_runtime_stopped\b/.test(message) || /\bthis turn was interrupted because the environment was stopped\b/.test(message)) return "This turn was interrupted because the environment was stopped. Start the environment and retry.";
+	return null;
+}
+/**
+* Infer a SAFE, clearer failure category from a (possibly leaky) provider error.
+*
+* Returns a canned, user-facing message — it never echoes the raw input, so it
+* is safe to use even when the source message contains provider internals.
+* Used to give actionable feedback ("model isn't available", "rate-limited",
+* "auth failed") instead of the blanket "CMMD is temporarily unavailable."
+* Returns null when no category can be confidently inferred.
+*/
+function categorizePublicProviderError(message) {
+	if (!message) return null;
+	const m = message.toLowerCase();
+	const lifecycleOrAccountCopy = providerLifecycleOrAccountCopy(m);
+	if (lifecycleOrAccountCopy !== null) return lifecycleOrAccountCopy;
+	if (/\bforge_provider_model_not_allowed\b/.test(m) || /\bnot\s+scoped\s+to\s+the\s+requested\s+model\b/.test(m)) return "The workspace AI credential does not cover the model this turn asked for. Retry, or pick that model for the thread.";
+	if (/\bmodel\b[\s\S]*\b(not\s+(found|available|supported)|does\s+not\s+exist|unsupported|invalid|unknown)\b/.test(m) || /\b(unsupported|unknown|invalid)\b[\s\S]*\bmodel\b/.test(m) || /\b(model_not_found|invalid_model|model_not_supported)\b/.test(m)) return "The selected model isn't available right now. Pick a different model and retry.";
+	if (isProviderRateOrQuotaError(m)) return "The AI service is rate-limited or out of quota. Wait a moment and retry.";
+	if (/_credential_reconnect_required\b/.test(m)) return "The workspace AI credential needs to be reconnected. Reconnect it in Settings > Providers, then retry.";
+	if (/\b(unauthorized|forbidden|authentication\s+(failed|error|required)|invalid\s+api\s+key|expired\s+(token|credential))\b/.test(m) || /\b40[13]\b/.test(m)) return "Workspace AI authentication failed. Reconnect the workspace and retry.";
+	if (/\b(timed?\s*out|timeout|overloaded|service\s+unavailable)\b/.test(m) || /\b50[234]\b/.test(m)) return "The AI service is temporarily overloaded. Retry in a moment.";
+	return null;
+}
+function containsPublicProviderLeak(message) {
+	if (!message) return false;
+	return PUBLIC_PROVIDER_LEAK_PATTERNS.some((pattern) => pattern.test(message));
+}
+function sanitizePublicProviderText(message, options = {}) {
+	if (message === void 0 || message === null) return null;
+	const trimmed = message.trim();
+	if (trimmed.length === 0) return null;
+	if (!containsPublicProviderLeak(trimmed)) return trimmed;
+	return categorizePublicProviderError(trimmed) ?? options.fallback ?? "CMMD is temporarily unavailable. Check the workspace AI connection and retry.";
+}
+//#endregion
+//#region src/orchestration/providerRetryableFailure.ts
+/**
+* Classifies a provider turn-start failure as a retryable rate-limit or
+* transient-availability failure (429/503), a terminal failure that names why
+* it will never clear on its own, or unrecognized (null).
+*
+* CMMD-Center/forge#3558: a 429 from CMMD's provider egress used to leave no
+* trace at all, because nothing in the turn-start path recognized it as a
+* distinct, retryable failure. `ProviderCommandReactor` uses this to decide
+* whether to retry a turn start with backoff, and to name the provider,
+* status and Retry-After in the `provider.turn.start.failed` activity CMMD's
+* watchdog reads once retries are exhausted.
+*
+* Reuses `isProviderRateOrQuotaError` (the same predicate the public-copy
+* sanitizer uses to recognize a rate-limit message) rather than restating its
+* word list here.
+*/
+const SERVICE_UNAVAILABLE_PATTERN = /\b(503|service\s+unavailable)\b/i;
+const RATE_LIMITED_PAST_TENSE_PATTERN = /\brate[\s-]?limit(?:ed|ing)?\b/i;
+const QUOTA_OR_USAGE_LIMIT_PATTERN = /\b(usage[ _-]limit|usage_limit_reached|quota|insufficient_quota)\b/i;
+const EXPLICIT_429_PATTERN = /\b429\b/;
+const RETRY_AFTER_SECONDS_PATTERN = /retry-after[^0-9]{0,10}(\d+)|(?:try again|retry)\s+in\s+(\d+)\s*(?:s\b|sec(?:onds?)?\b)?/i;
+function parseRetryAfterSeconds(detail) {
+	const match = detail.match(RETRY_AFTER_SECONDS_PATTERN);
+	if (!match) return null;
+	const raw = match[1] ?? match[2];
+	const seconds = raw ? Number(raw) : NaN;
+	return Number.isFinite(seconds) ? seconds : null;
+}
+function classifyRetryableProviderFailure(detail) {
+	if (!detail || detail.trim().length === 0) return null;
+	if (QUOTA_OR_USAGE_LIMIT_PATTERN.test(detail) && !EXPLICIT_429_PATTERN.test(detail)) return {
+		kind: "terminal",
+		reason: "quota",
+		message: detail
+	};
+	const isRateLimited = isProviderRateOrQuotaError(detail) || RATE_LIMITED_PAST_TENSE_PATTERN.test(detail);
+	const isUnavailable = SERVICE_UNAVAILABLE_PATTERN.test(detail);
+	if (!isRateLimited && !isUnavailable) return null;
+	return {
+		kind: "retryable",
+		status: isRateLimited ? 429 : 503,
+		retryAfterSeconds: parseRetryAfterSeconds(detail)
+	};
+}
+//#endregion
 //#region src/orchestration/turnFailureReason.ts
 /**
 * Machine-readable reasons for a turn that failed before it produced any
@@ -98047,6 +98160,31 @@ function classifyProviderTurnStartFailureReason(detail) {
 		message
 	};
 }
+/**
+* Classifies a turn that ended mid-flight, after it had already started
+* (CMMD-Center/forge#3562 piece A): a `runtime.error` that reached CMMD as
+* `error_summary`, now also read into a `turn_status: failed` reason.
+*
+* `provider_turn_failed` is the code CMMD's own error_summary heuristic
+* already assigns this class of failure
+* (`shared/forge-work-session-failure-reasons.ts`), so a Forge-sent
+* `turn_status` carrying it lines up with what CMMD already infers instead
+* of teaching it a new code for the common case. `provider_usage_limit`
+* reuses the same wording `classifyRetryableProviderFailure` already treats
+* as a wall that will not clear by retrying (CMMD-Center/forge#3558): a
+* usage-limit message inside a turn that already ended is worth naming
+* specifically, even without the fuller upstream port (see the piece A PR's
+* follow-up issue) that would stop Codex from retrying against that wall in
+* the first place.
+*/
+function classifyMidTurnFailureReason(detail) {
+	const message = detail && detail.trim().length > 0 ? detail : "The runtime reported an error while this run was in progress.";
+	const classified = classifyRetryableProviderFailure(detail);
+	return {
+		code: classified?.kind === "terminal" && classified.reason === "quota" ? "provider_usage_limit" : "provider_turn_failed",
+		message
+	};
+}
 function checkpointTimeoutReason(detail) {
 	return {
 		code: "checkpoint_timeout",
@@ -98181,6 +98319,108 @@ function serializeReplicaMessage(message) {
 	};
 }
 //#endregion
+//#region src/orchestration/turnTerminalStatus.ts
+/**
+* Shared vocabulary between the reactor that records how a turn ended
+* (`Layers/CheckpointReactor.ts`, on the provider's own `turn.completed`
+* event) and the serializer that turns that record into CMMD's `turn_status`
+* terminal event (`runtimeReplication/turnTerminalStatusSerializer.ts`).
+* CMMD-Center/forge#3562 piece A, CMMD-Center/CMMD#5822.
+*/
+/** The activity kind this durable record uses. Never sent to CMMD as-is: the
+* serializer reads it and emits the wire `turn_status` event instead. */
+const TURN_TERMINAL_STATUS_ACTIVITY_KIND = "turn.terminal-status";
+/**
+* CMMD's three-way outcome from the provider's own four-way `turn.completed`
+* state. `cancelled` and `interrupted` both read as `interrupted`: neither
+* the provider wording nor CMMD's Work Session UI distinguishes an
+* operator-cancelled turn from one the provider gave up on mid-flight.
+*/
+function turnTerminalOutcomeFromRuntimeState(state) {
+	if (state === "failed") return "failed";
+	if (state === "completed") return "completed";
+	return "interrupted";
+}
+/**
+* Deterministic activity id for a turn's terminal record: never
+* `crypto.randomUUID()`. The projector replaces an activity by id
+* (`thread.activity-appended`), so a redelivered `turn.completed` for the
+* same turn lands on the same row instead of adding a second one, and the
+* serializer's own `eventId` (`activity:<id>`) inherits the same guarantee.
+*/
+function turnTerminalStatusActivityId(turnId) {
+	return `turn-terminal:${turnId}`;
+}
+//#endregion
+//#region src/runtimeReplication/eventFormatting.ts
+/**
+* Small formatting helpers shared by every source `serializer.ts` folds into
+* a thread's replicated event list. Kept in their own module, with no
+* dependency on `serializer.ts` itself, so a narrower serializer (such as
+* `turnTerminalStatusSerializer.ts`) can reuse them without creating an
+* import cycle back into the file that assembles the full event list.
+*/
+function text(value, max) {
+	const normalized = value.trim();
+	return normalized ? normalized.slice(0, max) : null;
+}
+function canonicalRuntimeEventTimestamp(value) {
+	let timestamp = new Date(value);
+	if (Number.isNaN(timestamp.getTime())) {
+		const legacyBsdNanoseconds = value.match(/^(.*:\d{2})\.\d+NZ$/);
+		timestamp = new Date(legacyBsdNanoseconds ? `${legacyBsdNanoseconds[1]}Z` : value);
+	}
+	if (Number.isNaN(timestamp.getTime())) throw new Error(`Invalid runtime event timestamp: ${value}`);
+	return timestamp.toISOString();
+}
+//#endregion
+//#region src/runtimeReplication/turnTerminalStatusSerializer.ts
+function outcomeOf(payload) {
+	if (!payload || typeof payload !== "object") return null;
+	const outcome = payload.outcome;
+	return outcome === "completed" || outcome === "interrupted" || outcome === "failed" ? outcome : null;
+}
+function errorMessageOf(payload) {
+	if (!payload || typeof payload !== "object") return null;
+	const message = payload.errorMessage;
+	return typeof message === "string" && message.trim().length > 0 ? message : null;
+}
+/**
+* Turns the one durable activity `Layers/CheckpointReactor.ts` records when a
+* turn ends into CMMD's `turn_status` terminal event (CMMD-Center/forge#3562
+* piece A, CMMD-Center/CMMD#5822): `completed`, `interrupted`, or `failed`
+* with a structured `reason`. `error_summary` (`serializeFailureActivity` in
+* `serializer.ts`) keeps replicating separately for a mid-turn failure; this
+* is added next to it, never instead of it.
+*
+* The activity's own id is deterministic (`turn-terminal:<turnId>`,
+* `turnTerminalStatusActivityId`), so this event's `eventId` -- built from
+* that id the same way every other activity-sourced event on this thread is
+* (`activity:<id>`) -- can never collide with a second, different terminal
+* status for the same turn: there is exactly one activity row to read it
+* from, and the reactor that writes that row never overwrites it once set.
+*/
+function serializeTurnTerminalStatusActivity(activity) {
+	if (activity.kind !== "turn.terminal-status" || !activity.turnId) return null;
+	const outcome = outcomeOf(activity.payload);
+	if (outcome === null) return null;
+	const reason = outcome === "failed" ? classifyMidTurnFailureReason(errorMessageOf(activity.payload)) : null;
+	return {
+		sourceSequence: null,
+		event: {
+			eventId: `activity:${activity.id}`,
+			occurredAt: canonicalRuntimeEventTimestamp(activity.createdAt),
+			turnId: activity.turnId,
+			kind: "turn_status",
+			status: outcome,
+			...reason ? { reason: {
+				code: reason.code,
+				message: text(reason.message, 2e3) ?? reason.message
+			} } : {}
+		}
+	};
+}
+//#endregion
 //#region src/runtimeReplication/serializer.ts
 function threadStatus(thread) {
 	if (thread.archivedAt) return "archived";
@@ -98247,19 +98487,6 @@ function serializeRuntimeInventory(snapshot, providerInventory) {
 		...providerInventory === void 0 ? {} : { providers: serializeProviderCatalog(providerInventory) }
 	};
 }
-function text(value, max) {
-	const normalized = value.trim();
-	return normalized ? normalized.slice(0, max) : null;
-}
-function canonicalRuntimeEventTimestamp(value) {
-	let timestamp = new Date(value);
-	if (Number.isNaN(timestamp.getTime())) {
-		const legacyBsdNanoseconds = value.match(/^(.*:\d{2})\.\d+NZ$/);
-		timestamp = new Date(legacyBsdNanoseconds ? `${legacyBsdNanoseconds[1]}Z` : value);
-	}
-	if (Number.isNaN(timestamp.getTime())) throw new Error(`Invalid runtime event timestamp: ${value}`);
-	return timestamp.toISOString();
-}
 /** Spread onto an event: present only when the projection knows the turn. */
 function eventTurn(turnId) {
 	return turnId ? { turnId } : {};
@@ -98564,10 +98791,13 @@ function foldReportedUsage(reported) {
 * model, so a mid-thread switch used to republish a finished turn as a second
 * row for spend that happened once (FOR-36388, fixed in FOR-36438).
 */
-/** Turns named on this thread's own rows; hydrated replica rows carry no local turn. */
+/** Turns named on this thread's own rows; hydrated replica rows carry no local
+* turn, and the terminal-status activity (CMMD-Center/forge#3562 piece A) is
+* a wire-protocol source in its own right, not a Usage signal, so it is
+* excluded the same way a `replica.*` activity is. */
 function localTurnIds(thread) {
 	const fromMessages = thread.messages.filter((message) => !message.streaming).map((message) => message.turnId);
-	const fromActivities = thread.activities.filter((activity) => !activity.kind.startsWith("replica.")).map((activity) => activity.turnId);
+	const fromActivities = thread.activities.filter((activity) => !activity.kind.startsWith("replica.") && activity.kind !== "turn.terminal-status").map((activity) => activity.turnId);
 	const turnIds = /* @__PURE__ */ new Set();
 	for (const turnId of [...fromMessages, ...fromActivities]) if (turnId) turnIds.add(turnId);
 	return turnIds;
@@ -98577,8 +98807,12 @@ function settledTurnIds(thread) {
 	if (thread.latestTurn?.state === "running") turnIds.delete(thread.latestTurn.turnId);
 	return turnIds;
 }
+/** A turn's own activities for Usage derivation, excluding the terminal-status
+* activity: that record's own `createdAt` (the turn's very end) must never
+* shift `turnLatestAt`, or an already-acknowledged usage row would rehash
+* the moment a turn that used to have no terminal activity gains one. */
 function turnActivities(thread, turnId) {
-	return thread.activities.filter((activity) => activity.turnId === turnId).toSorted((left, right) => left.createdAt.localeCompare(right.createdAt) || left.id.localeCompare(right.id));
+	return thread.activities.filter((activity) => activity.turnId === turnId && activity.kind !== "turn.terminal-status").toSorted((left, right) => left.createdAt.localeCompare(right.createdAt) || left.id.localeCompare(right.id));
 }
 /** The last thing that happened in the turn: what the Recorded turn is stamped with. */
 function turnLatestAt(thread, turnId, activities) {
@@ -98787,6 +99021,10 @@ function serializeRuntimeThreadEvents(thread) {
 		const event = serializePlanActivity(activity);
 		return event === null ? [] : [event];
 	});
+	const turnTerminalStatuses = thread.activities.flatMap((activity) => {
+		const event = serializeTurnTerminalStatusActivity(activity);
+		return event === null ? [] : [event];
+	});
 	const recordedTurns = serializeRecordedTurns(thread);
 	const textGenerations = serializeTextGenerations(thread);
 	const priorEvents = [
@@ -98796,6 +99034,7 @@ function serializeRuntimeThreadEvents(thread) {
 		...worktreeLaunchActivities,
 		...planActivities,
 		...failureActivities,
+		...turnTerminalStatuses,
 		...recordedTurns,
 		...textGenerations
 	];
@@ -99247,7 +99486,7 @@ function askTheLedger(request) {
 		return logWarning$1("usage session lookup failed; local lanes keep their records").pipe(annotateLogs({ cause: outcome.error }), as$3(UNAVAILABLE.callFailed));
 	}));
 }
-const make$16 = (fetchImpl, resolveOwnerCredential) => gen(function* () {
+const make$15 = (fetchImpl, resolveOwnerCredential) => gen(function* () {
 	const config = yield* ServerConfig;
 	const sql = yield* SqlClient;
 	/** The cloud lane: this runtime's own scoped grant. */
@@ -99286,7 +99525,7 @@ const make$16 = (fetchImpl, resolveOwnerCredential) => gen(function* () {
 * without a signed-in machine behind it. Both default to the real thing.
 */
 function makeUsageSessionLookupLayer(fetchImpl = fetch, resolveOwnerCredential = resolveOwnerCredentialLive) {
-	return effect(UsageSessionLookup, make$16(fetchImpl, resolveOwnerCredential));
+	return effect(UsageSessionLookup, make$15(fetchImpl, resolveOwnerCredential));
 }
 const UsageSessionLookupLive = makeUsageSessionLookupLayer();
 //#endregion
@@ -99901,8 +100140,8 @@ function parseJson(raw) {
 	}
 }
 function resolveHourlyWindow(input) {
-	const sinceTime = input.sinceTime === void 0 ? none$4() : make$38(input.sinceTime);
-	const untilTime = input.untilTime === void 0 ? none$4() : make$38(input.untilTime);
+	const sinceTime = input.sinceTime === void 0 ? none$4() : make$37(input.sinceTime);
+	const untilTime = input.untilTime === void 0 ? none$4() : make$37(input.untilTime);
 	if (isNone(sinceTime) || isNone(untilTime)) return "Hourly usage requires valid sinceTime and untilTime instants";
 	const sinceTimeMs = toEpochMillis(sinceTime.value);
 	const untilTimeMs = toEpochMillis(untilTime.value);
@@ -99938,7 +100177,7 @@ function resolveWindow(input) {
 		};
 		hourly = resolved;
 	}
-	const windowStart = make$38(`${input.sinceDay}T00:00:00Z`);
+	const windowStart = make$37(`${input.sinceDay}T00:00:00Z`);
 	if (isNone(windowStart)) return {
 		kind: "invalid",
 		detail: `sinceDay '${input.sinceDay}' is not a valid date`
@@ -100096,7 +100335,7 @@ function failedRecordedSources(hostId, detail) {
 		message: detail
 	}));
 }
-const make$15 = (hooks) => gen(function* () {
+const make$14 = (hooks) => gen(function* () {
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path$2;
 	const config = yield* ServerConfig;
@@ -100109,9 +100348,9 @@ const make$15 = (hooks) => gen(function* () {
 	const lookupCache = /* @__PURE__ */ new Map();
 	let lookupCacheDirty = false;
 	const selfRuntimeId = resolveRuntimeReplicationRuntimeId(config);
-	const scanScope = yield* make$37("sequential");
+	const scanScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(scanScope, void_$3));
-	const scanSemaphore = yield* make$44(1);
+	const scanSemaphore = yield* make$43(1);
 	const inFlight = /* @__PURE__ */ new Map();
 	const ratesCachePath = path.join(config.stateDir, RATES_CACHE_FILE);
 	const scanCachePath = path.join(config.stateDir, SCAN_CACHE_FILE);
@@ -100515,7 +100754,7 @@ const make$15 = (hooks) => gen(function* () {
 		const key = summaryKey(input);
 		const joined = inFlight.get(key);
 		if (joined !== void 0) return yield* _await(joined);
-		const deferred = yield* make$39();
+		const deferred = yield* make$38();
 		inFlight.set(key, deferred);
 		yield* scanSemaphore.withPermits(1)(computeSummary(input, window)).pipe(exit, flatMap((exit) => done(deferred, exit)), ensuring(sync$1(() => {
 			inFlight.delete(key);
@@ -100525,7 +100764,7 @@ const make$15 = (hooks) => gen(function* () {
 });
 /** The service with a seam into the scan; tests pass their own hooks. */
 function makeUsageServiceLayer(hooks = NOOP_SCAN_HOOKS) {
-	return effect(UsageService, make$15(hooks));
+	return effect(UsageService, make$14(hooks));
 }
 const UsageServiceLive = makeUsageServiceLayer();
 const DAY_MS = 1440 * 60 * 1e3;
@@ -100571,7 +100810,7 @@ const runUsageScanWarmup = (options) => gen(function* () {
 	const now = options.now ?? currentTimeMillis;
 	const startDelayMs = options.startDelayMs ?? 2e4;
 	const intervalMs = options.intervalMs ?? 36e5;
-	const scanning = yield* make$50(false);
+	const scanning = yield* make$49(false);
 	yield* sleep(startDelayMs);
 	return yield* forever$1(gen(function* () {
 		if (yield* get$6(scanning)) yield* logInfo("usage scan warm-up skipped; the previous scan is still running");
@@ -100588,9 +100827,9 @@ var ServerRuntimeStartupError = class extends TaggedError("ServerRuntimeStartupE
 var ServerRuntimeStartup = class extends Service$1()("forge/serverRuntimeStartup") {};
 const settleQueuedCommand = (deferred, exit) => isSuccess(exit) ? succeed$3(deferred, exit.value) : failCause$3(deferred, exit.cause);
 const makeCommandGate = gen(function* () {
-	const commandReady = yield* make$39();
+	const commandReady = yield* make$38();
 	const commandQueue = yield* unbounded$2();
-	const commandReadinessState = yield* make$50("pending");
+	const commandReadinessState = yield* make$49("pending");
 	yield* forkScoped(forever$1(take$1(commandQueue).pipe(flatMap((command) => command.run))));
 	return {
 		awaitCommandReady: _await(commandReady),
@@ -100606,7 +100845,7 @@ const makeCommandGate = gen(function* () {
 			const readinessState = yield* get$6(commandReadinessState);
 			if (readinessState === "ready") return yield* effect;
 			if (readinessState !== "pending") return yield* readinessState;
-			const result = yield* make$39();
+			const result = yield* make$38();
 			yield* offer$1(commandQueue, { run: _await(commandReady).pipe(flatMap(() => effect), exit, flatMap((exit) => settleQueuedCommand(result, exit))) });
 			return yield* _await(result);
 		})
@@ -100818,8 +101057,8 @@ const ServerRuntimeStartupLive = effect(ServerRuntimeStartup, gen(function* () {
 	const usage = yield* UsageService;
 	const drainState = yield* RuntimeDrainState;
 	const commandGate = yield* makeCommandGate;
-	const httpListening = yield* make$39();
-	const reactorScope = yield* make$37("sequential");
+	const httpListening = yield* make$38();
+	const reactorScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(reactorScope, void_$3));
 	const startup = gen(function* () {
 		yield* logDebug("startup phase: starting keybindings runtime");
@@ -101590,8 +101829,8 @@ function previewUrlForPort(port) {
 	return `http://127.0.0.1:${port}/`;
 }
 const ThreadDevRuntimeLive = effect(ThreadDevRuntime, gen(function* () {
-	const byThreadId = yield* make$50(/* @__PURE__ */ new Map());
-	const usedPorts = yield* make$50(/* @__PURE__ */ new Set());
+	const byThreadId = yield* make$49(/* @__PURE__ */ new Map());
+	const usedPorts = yield* make$49(/* @__PURE__ */ new Set());
 	const allocateNextPort = gen(function* () {
 		const used = yield* get$6(usedPorts);
 		for (let port = DEFAULT_PORT_MIN; port <= DEFAULT_PORT_MAX; port += 1) if (!used.has(port)) return port;
@@ -107078,7 +107317,7 @@ function makeSnapshotThenLiveStream(input) {
 		const liveEvents = yield* input.subscribeLiveEvents;
 		const snapshot = yield* input.loadSnapshot;
 		const eventsAfterSnapshot = liveEvents.pipe(filter$2((event) => event.sequence > snapshot.snapshotSequence));
-		return concat$2(make$43({
+		return concat$2(make$42({
 			kind: "snapshot",
 			snapshot
 		}), eventsAfterSnapshot);
@@ -107740,7 +107979,7 @@ const makeWsRpcLayer = (currentSessionId, currentUserId) => WsRpcGroup.toLayer(g
 				discard: true
 			}).pipe(ignoreCause({ log: true }), forkScoped);
 			const liveUpdates = merge$4(keybindingsUpdates, merge$4(providerStatuses, merge$4(settingsUpdates, environmentUpdates)));
-			return concat$2(make$43({
+			return concat$2(make$42({
 				version: 1,
 				type: "snapshot",
 				config: yield* loadServerConfig
@@ -107754,9 +107993,9 @@ const makeWsRpcLayer = (currentSessionId, currentUserId) => WsRpcGroup.toLayer(g
 		}), { "rpc.aggregate": "server" }),
 		[WS_METHODS.subscribeAuthAccess]: (_input) => observeRpcStreamEffect(WS_METHODS.subscribeAuthAccess, gen(function* () {
 			const initialSnapshot = yield* loadAuthAccessSnapshot();
-			const revisionRef = yield* make$50(1);
+			const revisionRef = yield* make$49(1);
 			const liveEvents = merge$4(bootstrapCredentials.streamChanges, sessions.streamChanges).pipe(mapEffect$1((change) => updateAndGet(revisionRef, (revision) => revision + 1).pipe(map$3((revision) => toAuthAccessStreamEvent(change, revision, currentSessionId)))));
-			return concat$2(make$43({
+			return concat$2(make$42({
 				version: 1,
 				revision: 1,
 				type: "snapshot",
@@ -114999,7 +115238,7 @@ const PgClient = /* @__PURE__ */ Service$1("@effect/sql-pg/PgClient");
 * @category constructors
 * @since 1.0.0
 */
-const make$14 = (options) => fromPool({
+const make$13 = (options) => fromPool({
 	...options,
 	acquire: gen(function* () {
 		const pool = new Pool({
@@ -115108,7 +115347,7 @@ const fromPool = /* @__PURE__ */ fnUntraced(function* (options) {
 	});
 	const reserve = map$3(reserveRaw, makeConection);
 	const onListenClientError = (_) => {};
-	const listenAcquirer = yield* make$46({ acquire: acquireRelease(tryPromise({
+	const listenAcquirer = yield* make$45({ acquire: acquireRelease(tryPromise({
 		try: async () => {
 			const client = new Client(pool.options);
 			await client.connect();
@@ -115121,12 +115360,12 @@ const fromPool = /* @__PURE__ */ fnUntraced(function* (options) {
 		return client.end();
 	}).pipe(timeoutOption(1e3))) });
 	let config = {
-		url: pool.options.connectionString ? make$40(pool.options.connectionString) : void 0,
+		url: pool.options.connectionString ? make$39(pool.options.connectionString) : void 0,
 		host: pool.options.host,
 		port: pool.options.port,
 		database: pool.options.database,
 		username: pool.options.user,
-		password: typeof pool.options.password === "string" ? make$40(pool.options.password) : void 0,
+		password: typeof pool.options.password === "string" ? make$39(pool.options.password) : void 0,
 		ssl: pool.options.ssl,
 		applicationName: pool.options.application_name,
 		types: pool.options.types
@@ -115138,7 +115377,7 @@ const fromPool = /* @__PURE__ */ fnUntraced(function* (options) {
 			host: config.host ?? parsed.host ?? void 0,
 			port: config.port ?? (parsed.port ? getOrUndefined(parse$6(parsed.port)) : void 0),
 			username: config.username ?? parsed.user ?? void 0,
-			password: config.password ?? (parsed.password ? make$40(parsed.password) : void 0),
+			password: config.password ?? (parsed.password ? make$39(parsed.password) : void 0),
 			database: config.database ?? parsed.database ?? void 0
 		};
 	} catch {}
@@ -115272,12 +115511,12 @@ const makeCancel = (pool, client) => {
 * @category layers
 * @since 1.0.0
 */
-const layerFrom = (acquire) => effectContext(map$3(acquire, (client) => make$35(PgClient, client).pipe(add$2(SqlClient, client)))).pipe(provide$1(layer$9));
+const layerFrom = (acquire) => effectContext(map$3(acquire, (client) => make$34(PgClient, client).pipe(add$2(SqlClient, client)))).pipe(provide$1(layer$9));
 /**
 * @category layers
 * @since 1.0.0
 */
-const layer$3 = (config) => layerFrom(make$14(config));
+const layer$3 = (config) => layerFrom(make$13(config));
 /**
 * @category constructor
 * @since 1.0.0
@@ -115804,7 +116043,7 @@ const CloudStateSyncLive = effectDiscard(gen(function* () {
 //#region src/persistence/Layers/Postgres.ts
 function makePostgresPersistenceLive(config, databaseUrl) {
 	const client = layer$3({
-		url: make$40(databaseUrl),
+		url: make$39(databaseUrl),
 		applicationName: "forge-cloud-shell",
 		connectTimeout: "10 seconds",
 		idleTimeout: "30 seconds",
@@ -115830,7 +116069,7 @@ var MigrationError = class extends TaggedError("MigrationError") {};
 * @category constructor
 * @since 4.0.0
 */
-const make$13 = ({ dumpSchema = () => void_$1 }) => ({ loader, schemaDirectory, table = "effect_sql_migrations" }) => gen(function* () {
+const make$12 = ({ dumpSchema = () => void_$1 }) => ({ loader, schemaDirectory, table = "effect_sql_migrations" }) => gen(function* () {
 	const sql = yield* SqlClient;
 	const ensureMigrationsTable = sql.onDialectOrElse({
 		mssql: () => sql`IF OBJECT_ID(N'${sql.literal(table)}', N'U') IS NULL
@@ -115919,7 +116158,7 @@ const make$13 = ({ dumpSchema = () => void_$1 }) => ({ loader, schemaDirectory,
 	if (schemaDirectory && completed.length > 0) yield* dumpSchema(`${schemaDirectory}/_schema.sql`, table).pipe(catchCause((cause) => logInfo("Could not dump schema", cause)));
 	return completed;
 });
-const migrationOrder = /* @__PURE__ */ make$41(([a], [b]) => Number$2(a, b));
+const migrationOrder = /* @__PURE__ */ make$40(([a], [b]) => Number$2(a, b));
 /**
 * @since 4.0.0
 * @category loaders
@@ -118909,7 +119148,7 @@ const makeMigrationLoader = (throughId) => fromRecord(Object.fromEntries(migrati
 * Migrator run function - no schema dumping needed
 * Uses the base Migrator.make without platform dependencies
 */
-const run = make$13({});
+const run = make$12({});
 /**
 * Run all pending migrations.
 *
@@ -150143,7 +150382,7 @@ const AnalyticsServiceLayerLive = effect(AnalyticsService, gen(function* () {
 	const httpClient = yield* HttpClient;
 	const serverConfig = yield* ServerConfig;
 	const identifier = yield* getTelemetryIdentifier;
-	const bufferRef = yield* make$50([]);
+	const bufferRef = yield* make$49([]);
 	const clientType = serverConfig.mode === "desktop" ? "desktop-app" : "cli-web-client";
 	const enqueueBufferedEvent = (event, properties) => flatMap(now, (now) => modify$3(bufferRef, (current) => {
 		const appended = [...current, {
@@ -150304,7 +150543,7 @@ function formatLoggerMessage(message) {
 	return typeof message === "string" ? message : String(message);
 }
 function makeLineLogger(streamLabel) {
-	return make$33(({ date, message }) => `[${date.toISOString()}] ${streamLabel}: ${formatLoggerMessage(message)}\n`);
+	return make$32(({ date, message }) => `[${date.toISOString()}] ${streamLabel}: ${formatLoggerMessage(message)}\n`);
 }
 function resolveStreamLabel(stream) {
 	switch (stream) {
@@ -150365,7 +150604,7 @@ const makeThreadWriter = fn$1("makeThreadWriter")(function* (input) {
 		return;
 	}
 	const sink = sinkResult.sink;
-	const scope = yield* make$37();
+	const scope = yield* make$36();
 	const loggerLayer = layer$6([yield* batched(makeLineLogger(input.streamLabel), {
 		window: input.batchWindowMs,
 		flush: fn$1("makeThreadWriter.flush")(function* (messages) {
@@ -150420,7 +150659,7 @@ const makeEventNdjsonLogger = fn$1("makeEventNdjsonLogger")(function* (filePath,
 		});
 		return;
 	}
-	const stateRef = yield* make$32({
+	const stateRef = yield* make$31({
 		threadWriters: /* @__PURE__ */ new Map(),
 		failedSegments: /* @__PURE__ */ new Set()
 	});
@@ -212275,7 +212514,7 @@ const MODEL_LIST_PROBE_TIMEOUT_MS = 5e3;
 const probeCliModels = (input) => gen(function* () {
 	const useShell = process.platform === "win32";
 	if (useShell && !isShellSafeCommandPath(input.binaryPath)) return;
-	const command = make$48(input.binaryPath, [...input.args], {
+	const command = make$47(input.binaryPath, [...input.args], {
 		shell: useShell,
 		env: scrubForgeProviderChildEnvSecrets(process.env)
 	});
@@ -213749,73 +213988,6 @@ const makeCodexAdapter = fn$1("makeCodexAdapter")(function* (options) {
 function makeCodexAdapterLive(options) {
 	return effect(CodexAdapter, makeCodexAdapter(options));
 }
-//#endregion
-//#region ../../packages/shared/src/publicProviderCopy.ts
-const PUBLIC_PROVIDER_LEAK_PATTERNS = [
-	/\bDeepSeek\b/i,
-	/\bKimi\b/i,
-	/\bMoonshot\b/i,
-	/\bdeepseek[-._a-z0-9]*\b/i,
-	/\bkimi[-._a-z0-9]*\b/i,
-	/\bmoonshot[-._a-z0-9]*\b/i,
-	/\bAPEX_API_KEY\b/,
-	/\bDEEPSEEK_API_KEY\b/,
-	/\bKIMI_API_KEY\b/,
-	/\bOPENAI_API_KEY\b/,
-	/\bANTHROPIC_API_KEY\b/,
-	/\bCURSOR_API_KEY\b/,
-	/\bOPENCODE_API_KEY\b/,
-	/\bforge_proxy_[A-Za-z0-9._-]+\b/,
-	/\bProviderValidationError\b/,
-	/\/forge-server\/node_modules\//,
-	/https?:\/\/[^\s'"<>)]*\/api\/provider-egress\/[^\s'"<>)]*/i,
-	/https?:\/\/[^\s'"<>)]*(?:apex|deepseek|moonshot|kimi)[^\s'"<>)]*/i
-];
-const DEFAULT_PUBLIC_PROVIDER_ERROR = "CMMD is temporarily unavailable. Check the workspace AI connection and retry.";
-function isProviderRateOrQuotaError(message) {
-	if (!message) return false;
-	const normalized = message.toLowerCase();
-	return /\b(rate[\s-]?limit|too\s+many\s+requests|usage[ _-]limit|usage_limit_reached|quota|insufficient_quota)\b/.test(normalized) || /\b429\b/.test(normalized);
-}
-function providerLifecycleOrAccountCopy(message) {
-	if (/\bbound to provider account\b/.test(message) && /\bcannot use provider account\b/.test(message)) return "Forge could not switch this conversation to the selected AI account. Retry the account switch.";
-	if (/\bforge_runtime_repairing\b/.test(message) || /\bthis turn was interrupted because the environment is being repaired\b/.test(message)) return "This turn was interrupted because the environment is being repaired. Retry after the repair finishes.";
-	if (/\bforge_runtime_stopped\b/.test(message) || /\bthis turn was interrupted because the environment was stopped\b/.test(message)) return "This turn was interrupted because the environment was stopped. Start the environment and retry.";
-	return null;
-}
-/**
-* Infer a SAFE, clearer failure category from a (possibly leaky) provider error.
-*
-* Returns a canned, user-facing message — it never echoes the raw input, so it
-* is safe to use even when the source message contains provider internals.
-* Used to give actionable feedback ("model isn't available", "rate-limited",
-* "auth failed") instead of the blanket "CMMD is temporarily unavailable."
-* Returns null when no category can be confidently inferred.
-*/
-function categorizePublicProviderError(message) {
-	if (!message) return null;
-	const m = message.toLowerCase();
-	const lifecycleOrAccountCopy = providerLifecycleOrAccountCopy(m);
-	if (lifecycleOrAccountCopy !== null) return lifecycleOrAccountCopy;
-	if (/\bforge_provider_model_not_allowed\b/.test(m) || /\bnot\s+scoped\s+to\s+the\s+requested\s+model\b/.test(m)) return "The workspace AI credential does not cover the model this turn asked for. Retry, or pick that model for the thread.";
-	if (/\bmodel\b[\s\S]*\b(not\s+(found|available|supported)|does\s+not\s+exist|unsupported|invalid|unknown)\b/.test(m) || /\b(unsupported|unknown|invalid)\b[\s\S]*\bmodel\b/.test(m) || /\b(model_not_found|invalid_model|model_not_supported)\b/.test(m)) return "The selected model isn't available right now. Pick a different model and retry.";
-	if (isProviderRateOrQuotaError(m)) return "The AI service is rate-limited or out of quota. Wait a moment and retry.";
-	if (/_credential_reconnect_required\b/.test(m)) return "The workspace AI credential needs to be reconnected. Reconnect it in Settings > Providers, then retry.";
-	if (/\b(unauthorized|forbidden|authentication\s+(failed|error|required)|invalid\s+api\s+key|expired\s+(token|credential))\b/.test(m) || /\b40[13]\b/.test(m)) return "Workspace AI authentication failed. Reconnect the workspace and retry.";
-	if (/\b(timed?\s*out|timeout|overloaded|service\s+unavailable)\b/.test(m) || /\b50[234]\b/.test(m)) return "The AI service is temporarily overloaded. Retry in a moment.";
-	return null;
-}
-function containsPublicProviderLeak(message) {
-	if (!message) return false;
-	return PUBLIC_PROVIDER_LEAK_PATTERNS.some((pattern) => pattern.test(message));
-}
-function sanitizePublicProviderText(message, options = {}) {
-	if (message === void 0 || message === null) return null;
-	const trimmed = message.trim();
-	if (trimmed.length === 0) return null;
-	if (!containsPublicProviderLeak(trimmed)) return trimmed;
-	return categorizePublicProviderError(trimmed) ?? options.fallback ?? "CMMD is temporarily unavailable. Check the workspace AI connection and retry.";
-}
 function resolveApexBaseUrl(settings, config) {
 	return config?.forgeApexBaseUrl || settings.baseUrl || "https://apex.cmmd.ai";
 }
@@ -214374,11 +214546,11 @@ async function runClaudeCommand$1(execFileImpl, binaryPath, args, env) {
 //#endregion
 //#region src/provider/makeManagedServerProvider.ts
 const makeManagedServerProvider = fn$1("makeManagedServerProvider")(function* (input) {
-	const refreshSemaphore = yield* make$44(1);
+	const refreshSemaphore = yield* make$43(1);
 	const changesPubSub = yield* acquireRelease(unbounded$1(), shutdown$2);
 	const initialSettings = yield* input.getSettings;
-	const snapshotRef = yield* make$50(input.initialSnapshot(initialSettings));
-	const settingsRef = yield* make$50(initialSettings);
+	const snapshotRef = yield* make$49(input.initialSnapshot(initialSettings));
+	const settingsRef = yield* make$49(initialSettings);
 	const applySnapshotBase = fn$1("applySnapshot")(function* (nextSettings, options) {
 		const forceRefresh = options?.forceRefresh === true;
 		const previousSettings = yield* get$6(settingsRef);
@@ -214397,10 +214569,10 @@ const makeManagedServerProvider = fn$1("makeManagedServerProvider")(function* (i
 		return yield* applySnapshot(yield* input.getSettings, { forceRefresh: true });
 	});
 	yield* runForEach(input.streamSettings, (nextSettings) => asVoid(applySnapshot(nextSettings))).pipe(forkScoped);
-	const refreshFailureCount = yield* make$50(0);
+	const refreshFailureCount = yield* make$49(0);
 	const QUICK_RETRY_MS = 5e3;
 	const MAX_QUICK_RETRIES = 3;
-	const quickRetriesSoFar = yield* make$50(0);
+	const quickRetriesSoFar = yield* make$49(0);
 	yield* forever$1(gen(function* () {
 		const failureCount = yield* get$6(refreshFailureCount);
 		const quickRetriesDone = yield* get$6(quickRetriesSoFar);
@@ -214695,7 +214867,7 @@ function makeClaudeCredentialAnswersResolver(options) {
 */
 function runSupervisedRepeat(input) {
 	return gen(function* () {
-		const shutdownSignal = yield* make$39();
+		const shutdownSignal = yield* make$38();
 		yield* addFinalizer$2(() => succeed$3(shutdownSignal, void 0));
 		let firstAttempt = true;
 		while (true) {
@@ -215160,7 +215332,7 @@ const runClaudeCommand = fn$1("runClaudeCommand")(function* (args) {
 	}));
 	const claudeSettings = yield* service(ServerSettingsService).pipe(flatMap((service) => service.getSettings), map$3((settings) => settings.providers.claudeAgent));
 	const effectiveConfigPath = claudeSettings.configPath || config.forgeClaudeConfigPath || process.env.CLAUDE_CONFIG_DIR || void 0;
-	const command = make$48(claudeSettings.binaryPath, [...args], {
+	const command = make$47(claudeSettings.binaryPath, [...args], {
 		shell: process.platform === "win32",
 		env: scrubForgeProviderChildEnvSecrets({
 			...process.env,
@@ -218339,7 +218511,7 @@ const makeClaudeAdapter = fn$1("makeClaudeAdapter")(function* (options) {
 	const handleAskUserQuestion = fn$1("handleAskUserQuestion")(function* (context, toolInput, callbackOptions, pendingUserInputs, runFork) {
 		const requestId = ApprovalRequestId.make(yield* nextUUIDv4);
 		const questions = userInputQuestionsFromToolInput(toolInput);
-		const answersDeferred = yield* make$39();
+		const answersDeferred = yield* make$38();
 		let aborted = false;
 		const requestedStamp = yield* makeEventStamp();
 		yield* offerRuntimeEvent({
@@ -218427,7 +218599,7 @@ const makeClaudeAdapter = fn$1("makeClaudeAdapter")(function* (options) {
 		const requestId = ApprovalRequestId.make(yield* nextUUIDv4);
 		const requestType = classifyRequestType(toolName);
 		const detail = summarizeToolRequest(toolName, toolInput);
-		const decisionDeferred = yield* make$39();
+		const decisionDeferred = yield* make$38();
 		const pendingApproval = {
 			requestType,
 			detail,
@@ -218697,7 +218869,7 @@ const makeClaudeAdapter = fn$1("makeClaudeAdapter")(function* (options) {
 		const pendingApprovals = /* @__PURE__ */ new Map();
 		const pendingUserInputs = /* @__PURE__ */ new Map();
 		const inFlightTools = /* @__PURE__ */ new Map();
-		const contextRef = yield* make$50(void 0);
+		const contextRef = yield* make$49(void 0);
 		const canUseTool = makeCanUseTool(contextRef, input.runtimeMode, pendingApprovals, pendingUserInputs, runFork, runPromise);
 		const serverSettings = yield* serverSettingsService.getSettings.pipe(mapError((error) => new ProviderAdapterProcessError({
 			provider: PROVIDER$11,
@@ -223001,9 +223173,9 @@ const makeAcpPatchedProtocol = fn$1("makeAcpPatchedProtocol")(function* (options
 	const notificationQueue = yield* sliding(1024);
 	const disconnects = yield* unbounded$2();
 	const outgoing = yield* unbounded$2();
-	const nextRequestId = yield* make$50(1n);
-	const terminationHandled = yield* make$50(false);
-	const extPending = yield* make$50(/* @__PURE__ */ new Map());
+	const nextRequestId = yield* make$49(1n);
+	const terminationHandled = yield* make$49(false);
+	const extPending = yield* make$49(/* @__PURE__ */ new Map());
 	const logProtocol = (event) => {
 		if (event.direction === "incoming" && !options.logIncoming) return void_$1;
 		if (event.direction === "outgoing" && !options.logOutgoing) return void_$1;
@@ -223209,7 +223381,7 @@ const makeAcpPatchedProtocol = fn$1("makeAcpPatchedProtocol")(function* (options
 		},
 		request: fn$1("sendRequest")(function* (method, payload) {
 			const requestId = yield* modify$3(nextRequestId, (current) => [current, current + 1n]);
-			const deferred = yield* make$39();
+			const deferred = yield* make$38();
 			yield* update$4(extPending, (pending) => new Map(pending).set(String(requestId), deferred));
 			yield* offerOutgoing({
 				_tag: "Request",
@@ -223237,113 +223409,113 @@ function toRpcClientError(error) {
 }
 //#endregion
 //#region ../../packages/effect-acp/src/rpc.ts
-const InitializeRpc = make$30(AGENT_METHODS.initialize, {
+const InitializeRpc = make$29(AGENT_METHODS.initialize, {
 	payload: InitializeRequest,
 	success: InitializeResponse,
 	error: Error$1
 });
-const AuthenticateRpc = make$30(AGENT_METHODS.authenticate, {
+const AuthenticateRpc = make$29(AGENT_METHODS.authenticate, {
 	payload: AuthenticateRequest,
 	success: AuthenticateResponse,
 	error: Error$1
 });
-const LogoutRpc = make$30(AGENT_METHODS.logout, {
+const LogoutRpc = make$29(AGENT_METHODS.logout, {
 	payload: LogoutRequest,
 	success: LogoutResponse,
 	error: Error$1
 });
-const NewSessionRpc = make$30(AGENT_METHODS.session_new, {
+const NewSessionRpc = make$29(AGENT_METHODS.session_new, {
 	payload: NewSessionRequest,
 	success: NewSessionResponse,
 	error: Error$1
 });
-const LoadSessionRpc = make$30(AGENT_METHODS.session_load, {
+const LoadSessionRpc = make$29(AGENT_METHODS.session_load, {
 	payload: LoadSessionRequest,
 	success: LoadSessionResponse,
 	error: Error$1
 });
-const ListSessionsRpc = make$30(AGENT_METHODS.session_list, {
+const ListSessionsRpc = make$29(AGENT_METHODS.session_list, {
 	payload: ListSessionsRequest,
 	success: ListSessionsResponse,
 	error: Error$1
 });
-const ForkSessionRpc = make$30(AGENT_METHODS.session_fork, {
+const ForkSessionRpc = make$29(AGENT_METHODS.session_fork, {
 	payload: ForkSessionRequest,
 	success: ForkSessionResponse,
 	error: Error$1
 });
-const ResumeSessionRpc = make$30(AGENT_METHODS.session_resume, {
+const ResumeSessionRpc = make$29(AGENT_METHODS.session_resume, {
 	payload: ResumeSessionRequest,
 	success: ResumeSessionResponse,
 	error: Error$1
 });
-const CloseSessionRpc = make$30(AGENT_METHODS.session_close, {
+const CloseSessionRpc = make$29(AGENT_METHODS.session_close, {
 	payload: CloseSessionRequest,
 	success: CloseSessionResponse,
 	error: Error$1
 });
-const PromptRpc = make$30(AGENT_METHODS.session_prompt, {
+const PromptRpc = make$29(AGENT_METHODS.session_prompt, {
 	payload: PromptRequest,
 	success: PromptResponse,
 	error: Error$1
 });
-const SetSessionModelRpc = make$30(AGENT_METHODS.session_set_model, {
+const SetSessionModelRpc = make$29(AGENT_METHODS.session_set_model, {
 	payload: SetSessionModelRequest,
 	success: SetSessionModelResponse,
 	error: Error$1
 });
-const SetSessionConfigOptionRpc = make$30(AGENT_METHODS.session_set_config_option, {
+const SetSessionConfigOptionRpc = make$29(AGENT_METHODS.session_set_config_option, {
 	payload: SetSessionConfigOptionRequest,
 	success: SetSessionConfigOptionResponse,
 	error: Error$1
 });
-const ReadTextFileRpc = make$30(CLIENT_METHODS.fs_read_text_file, {
+const ReadTextFileRpc = make$29(CLIENT_METHODS.fs_read_text_file, {
 	payload: ReadTextFileRequest,
 	success: ReadTextFileResponse,
 	error: Error$1
 });
-const WriteTextFileRpc = make$30(CLIENT_METHODS.fs_write_text_file, {
+const WriteTextFileRpc = make$29(CLIENT_METHODS.fs_write_text_file, {
 	payload: WriteTextFileRequest,
 	success: WriteTextFileResponse,
 	error: Error$1
 });
-const RequestPermissionRpc = make$30(CLIENT_METHODS.session_request_permission, {
+const RequestPermissionRpc = make$29(CLIENT_METHODS.session_request_permission, {
 	payload: RequestPermissionRequest,
 	success: RequestPermissionResponse,
 	error: Error$1
 });
-const ElicitationRpc = make$30(CLIENT_METHODS.session_elicitation, {
+const ElicitationRpc = make$29(CLIENT_METHODS.session_elicitation, {
 	payload: ElicitationRequest,
 	success: ElicitationResponse,
 	error: Error$1
 });
-const CreateTerminalRpc = make$30(CLIENT_METHODS.terminal_create, {
+const CreateTerminalRpc = make$29(CLIENT_METHODS.terminal_create, {
 	payload: CreateTerminalRequest,
 	success: CreateTerminalResponse,
 	error: Error$1
 });
-const TerminalOutputRpc = make$30(CLIENT_METHODS.terminal_output, {
+const TerminalOutputRpc = make$29(CLIENT_METHODS.terminal_output, {
 	payload: TerminalOutputRequest,
 	success: TerminalOutputResponse,
 	error: Error$1
 });
-const ReleaseTerminalRpc = make$30(CLIENT_METHODS.terminal_release, {
+const ReleaseTerminalRpc = make$29(CLIENT_METHODS.terminal_release, {
 	payload: ReleaseTerminalRequest,
 	success: ReleaseTerminalResponse,
 	error: Error$1
 });
-const WaitForTerminalExitRpc = make$30(CLIENT_METHODS.terminal_wait_for_exit, {
+const WaitForTerminalExitRpc = make$29(CLIENT_METHODS.terminal_wait_for_exit, {
 	payload: WaitForTerminalExitRequest,
 	success: WaitForTerminalExitResponse,
 	error: Error$1
 });
-const KillTerminalRpc = make$30(CLIENT_METHODS.terminal_kill, {
+const KillTerminalRpc = make$29(CLIENT_METHODS.terminal_kill, {
 	payload: KillTerminalRequest,
 	success: KillTerminalResponse,
 	error: Error$1
 });
-const AgentRpcs = make$29(InitializeRpc, AuthenticateRpc, LogoutRpc, NewSessionRpc, LoadSessionRpc, ListSessionsRpc, ForkSessionRpc, ResumeSessionRpc, CloseSessionRpc, PromptRpc, SetSessionModelRpc, SetSessionConfigOptionRpc);
-const ClientRpcs = make$29(ReadTextFileRpc, WriteTextFileRpc, RequestPermissionRpc, ElicitationRpc, CreateTerminalRpc, TerminalOutputRpc, ReleaseTerminalRpc, WaitForTerminalExitRpc, KillTerminalRpc);
+const AgentRpcs = make$28(InitializeRpc, AuthenticateRpc, LogoutRpc, NewSessionRpc, LoadSessionRpc, ListSessionsRpc, ForkSessionRpc, ResumeSessionRpc, CloseSessionRpc, PromptRpc, SetSessionModelRpc, SetSessionConfigOptionRpc);
+const ClientRpcs = make$28(ReadTextFileRpc, WriteTextFileRpc, RequestPermissionRpc, ElicitationRpc, CreateTerminalRpc, TerminalOutputRpc, ReleaseTerminalRpc, WaitForTerminalExitRpc, KillTerminalRpc);
 //#endregion
 //#region ../../packages/effect-acp/src/_internal/shared.ts
 const isError = is$1(Error$1);
@@ -223372,7 +223544,7 @@ ArraySchema(Unknown);
 //#endregion
 //#region ../../packages/effect-acp/src/_internal/stdio.ts
 const encoder$1 = new TextEncoder();
-const makeChildStdio = (handle) => make$49({
+const makeChildStdio = (handle) => make$48({
 	args: succeed([]),
 	stdin: handle.stdout,
 	stdout: () => mapInput(handle.stdin, (chunk) => typeof chunk === "string" ? encoder$1.encode(chunk) : chunk),
@@ -223383,7 +223555,7 @@ fn$1("makeInMemoryStdio")(function* () {
 	const output = yield* unbounded$2();
 	const decoder = new TextDecoder();
 	return {
-		stdio: make$49({
+		stdio: make$48({
 			args: succeed([]),
 			stdin: fromQueue(input),
 			stdout: () => forEach$1((chunk) => offer$1(output, typeof chunk === "string" ? chunk : decoder.decode(chunk, { stream: true }))),
@@ -223406,7 +223578,7 @@ function runNotificationHandlers(registration, notification) {
 	return forEach(registration.handlers, (handler) => handler(notification).pipe(catch_(() => void_$1)), { discard: true });
 }
 var AcpClient = class extends Service$1()("effect-acp/AcpClient") {};
-const make$12 = fn$1("effect-acp/AcpClient.make")(function* (stdio, options = {}, terminationError) {
+const make$11 = fn$1("effect-acp/AcpClient.make")(function* (stdio, options = {}, terminationError) {
 	const coreHandlers = {};
 	const notificationHandlers = {
 		sessionUpdate: {
@@ -223473,9 +223645,9 @@ const make$12 = fn$1("effect-acp/AcpClient.make")(function* (stdio, options = {}
 		[CLIENT_METHODS.terminal_kill]: (payload) => runHandler(coreHandlers.terminalKill, payload, CLIENT_METHODS.terminal_kill).pipe(map$3((result) => result ?? {})),
 		[CLIENT_METHODS.terminal_release]: (payload) => runHandler(coreHandlers.terminalRelease, payload, CLIENT_METHODS.terminal_release).pipe(map$3((result) => result ?? {}))
 	}));
-	yield* make$24(ClientRpcs).pipe(provideService(Protocol, transport.serverProtocol), provide(clientHandlerLayer), forkScoped);
+	yield* make$23(ClientRpcs).pipe(provideService(Protocol, transport.serverProtocol), provide(clientHandlerLayer), forkScoped);
 	let nextRpcRequestId = 1n << 32n;
-	const rpc = yield* make$25(AgentRpcs, { generateRequestId: () => nextRpcRequestId++ }).pipe(provideService(Protocol$1, transport.clientProtocol));
+	const rpc = yield* make$24(AgentRpcs, { generateRequestId: () => nextRpcRequestId++ }).pipe(provideService(Protocol$1, transport.clientProtocol));
 	return AcpClient.of({
 		raw: {
 			notifications: transport.incoming,
@@ -223560,7 +223732,7 @@ const make$12 = fn$1("effect-acp/AcpClient.make")(function* (stdio, options = {}
 	});
 });
 const layerChildProcess = (handle, options = {}) => {
-	return effect(AcpClient, make$12(makeChildStdio(handle), options, makeTerminationError(handle)));
+	return effect(AcpClient, make$11(makeChildStdio(handle), options, makeTerminationError(handle)));
 };
 //#endregion
 //#region src/provider/acp/AcpSessionRuntime.ts
@@ -223602,11 +223774,11 @@ const makeAcpSessionRuntime = (options) => gen(function* () {
 	const spawner = yield* ChildProcessSpawner;
 	const runtimeScope = yield* Scope$1;
 	const eventQueue = yield* unbounded$2();
-	const modeStateRef = yield* make$50(void 0);
-	const toolCallsRef = yield* make$50(/* @__PURE__ */ new Map());
-	const assistantSegmentRef = yield* make$50({ nextSegmentIndex: 0 });
-	const configOptionsRef = yield* make$50(sessionConfigOptionsFromSetup(void 0));
-	const startStateRef = yield* make$50({ _tag: "NotStarted" });
+	const modeStateRef = yield* make$49(void 0);
+	const toolCallsRef = yield* make$49(/* @__PURE__ */ new Map());
+	const assistantSegmentRef = yield* make$49({ nextSegmentIndex: 0 });
+	const configOptionsRef = yield* make$49(sessionConfigOptionsFromSetup(void 0));
+	const startStateRef = yield* make$49({ _tag: "NotStarted" });
 	const logRequest = (event) => options.requestLogger ? options.requestLogger(event) : void_$1;
 	const runLoggedRequest = (method, payload, effect) => logRequest({
 		method,
@@ -223628,7 +223800,7 @@ const makeAcpSessionRuntime = (options) => gen(function* () {
 		command: options.spawn.command,
 		cause: /* @__PURE__ */ new Error(`Refusing to spawn ACP child process: command path contains shell metacharacters that cmd.exe would interpret as additional commands. Adjust the provider \`binaryPath\` setting to an unquoted absolute path.`)
 	});
-	const acpContext = yield* build(layerChildProcess(yield* spawner.spawn(make$48(options.spawn.command, [...options.spawn.args], {
+	const acpContext = yield* build(layerChildProcess(yield* spawner.spawn(make$47(options.spawn.command, [...options.spawn.args], {
 		...options.spawn.cwd ? { cwd: options.spawn.cwd } : {},
 		env: scrubForgeProviderChildEnvSecrets({
 			...process.env,
@@ -223960,7 +224132,7 @@ const makeStartCoordinator = (startStateRef, startOnce) => gen(function* () {
 	const currentState = yield* get$6(startStateRef);
 	if (currentState._tag === "Started") return currentState.result;
 	if (currentState._tag === "Starting") return yield* _await(currentState.deferred);
-	const deferred = yield* make$39();
+	const deferred = yield* make$38();
 	return yield* yield* modify$3(startStateRef, (state) => {
 		switch (state._tag) {
 			case "Started": return [succeed(state.result), state];
@@ -224082,7 +224254,7 @@ const readCursorApiKey = (_settings) => process.env.CURSOR_API_KEY || null;
 const runCursorCommand = fn$1("runCursorCommand")(function* (binaryPath, args) {
 	const useShell = process.platform === "win32";
 	if (useShell && !isShellSafeCommandPath(binaryPath)) return yield* fail(/* @__PURE__ */ new Error(`Refusing to spawn cursor-agent: \`binaryPath\` contains shell metacharacters that cmd.exe would interpret as additional commands.`));
-	return yield* spawnAndCollect(binaryPath, make$48(binaryPath, [...args], {
+	return yield* spawnAndCollect(binaryPath, make$47(binaryPath, [...args], {
 		shell: useShell,
 		env: scrubForgeProviderChildEnvSecrets(process.env)
 	}));
@@ -224668,7 +224840,7 @@ function makeCursorAdapter(cursorSettings, options) {
 		const nativeEventLogger = options?.nativeEventLogger ?? (options?.nativeEventLogPath !== void 0 ? yield* makeEventNdjsonLogger(options.nativeEventLogPath, { stream: "native" }) : void 0);
 		const managedNativeEventLogger = options?.nativeEventLogger === void 0 ? nativeEventLogger : void 0;
 		const sessions = /* @__PURE__ */ new Map();
-		const threadLocksRef = yield* make$32(/* @__PURE__ */ new Map());
+		const threadLocksRef = yield* make$31(/* @__PURE__ */ new Map());
 		const runtimeEventPubSub = yield* unbounded$1();
 		const nowIso = map$3(now, formatIso);
 		const nextEventId = map$3(nextUUIDv4, (id) => EventId.make(id));
@@ -224679,7 +224851,7 @@ function makeCursorAdapter(cursorSettings, options) {
 		const offerRuntimeEvent = (event) => publish(runtimeEventPubSub, event).pipe(asVoid);
 		const getThreadSemaphore = (threadId) => modifyEffect(threadLocksRef, (current) => {
 			return match(fromNullishOr(current.get(threadId)), {
-				onNone: () => make$44(1).pipe(map$3((semaphore) => {
+				onNone: () => make$43(1).pipe(map$3((semaphore) => {
 					const next = new Map(current);
 					next.set(threadId, semaphore);
 					return [semaphore, next];
@@ -224760,7 +224932,7 @@ function makeCursorAdapter(cursorSettings, options) {
 			if (existing && !existing.stopped) yield* stopSessionInternal(existing);
 			const pendingApprovals = /* @__PURE__ */ new Map();
 			const pendingUserInputs = /* @__PURE__ */ new Map();
-			const sessionScope = yield* make$37("sequential");
+			const sessionScope = yield* make$36("sequential");
 			let sessionScopeTransferred = false;
 			yield* addFinalizer$2(() => sessionScopeTransferred ? void_$1 : close(sessionScope, void_$3));
 			let ctx;
@@ -224794,7 +224966,7 @@ function makeCursorAdapter(cursorSettings, options) {
 					yield* logNative(input.threadId, "cursor/ask_question", params, "acp.cursor.extension");
 					const requestId = ApprovalRequestId.make(crypto.randomUUID());
 					const runtimeRequestId = RuntimeRequestId.make(requestId);
-					const answers = yield* make$39();
+					const answers = yield* make$38();
 					pendingUserInputs.set(requestId, { answers });
 					yield* offerRuntimeEvent({
 						type: "user-input.requested",
@@ -224856,7 +225028,7 @@ function makeCursorAdapter(cursorSettings, options) {
 					const permissionRequest = parsePermissionRequest(params);
 					const requestId = ApprovalRequestId.make(crypto.randomUUID());
 					const runtimeRequestId = RuntimeRequestId.make(requestId);
-					const decision = yield* make$39();
+					const decision = yield* make$38();
 					pendingApprovals.set(requestId, {
 						decision,
 						kind: permissionRequest.kind
@@ -231904,7 +232076,7 @@ const makeOpenCodeRuntime = gen(function* () {
 	const netService = yield* NetService;
 	const runOpenCodeCommand = (input) => gen(function* () {
 		yield* rejectUnsafeWindowsBinaryPath("runOpenCodeCommand", input.binaryPath);
-		const child = yield* spawner.spawn(make$48(input.binaryPath, [...input.args], {
+		const child = yield* spawner.spawn(make$47(input.binaryPath, [...input.args], {
 			shell: process.platform === "win32",
 			env: input.environment ?? process.env
 		}));
@@ -231939,7 +232111,7 @@ const makeOpenCodeRuntime = gen(function* () {
 			`--hostname=${hostname}`,
 			`--port=${port}`
 		];
-		const child = yield* spawner.spawn(make$48(input.binaryPath, args, {
+		const child = yield* spawner.spawn(make$47(input.binaryPath, args, {
 			detached: process.platform !== "win32",
 			shell: process.platform === "win32",
 			env: {
@@ -231960,9 +232132,9 @@ const makeOpenCodeRuntime = gen(function* () {
 			} catch {}
 		});
 		yield* addFinalizer$1(runtimeScope, killOpenCodeProcessGroup("SIGTERM").pipe(andThen(sleep$4("1 second")), andThen(killOpenCodeProcessGroup("SIGKILL")), ignore));
-		const stdoutRef = yield* make$50("");
-		const stderrRef = yield* make$50("");
-		const readyDeferred = yield* make$39();
+		const stdoutRef = yield* make$49("");
+		const stderrRef = yield* make$49("");
+		const readyDeferred = yield* make$38();
 		const setReadyFromStdoutChunk = (chunk) => updateAndGet(stdoutRef, (stdout) => `${stdout}${chunk}`).pipe(flatMap((nextStdout) => {
 			const parsed = parseServerUrlFromOutput(nextStdout);
 			return parsed ? succeed$3(readyDeferred, parsed).pipe(ignore) : void_$1;
@@ -232220,7 +232392,7 @@ function classifyGlobalEventEnvelope(envelope) {
 		payload
 	};
 }
-const isoFromEpochMs = (value) => make$38(value).pipe(match({
+const isoFromEpochMs = (value) => make$37(value).pipe(match({
 	onNone: () => void 0,
 	onSome: formatIso
 }));
@@ -232653,7 +232825,7 @@ function makeOpenCodeAdapter(openCodeSettings, options) {
 				sessions.delete(input.threadId);
 			}
 			const started = yield* gen(function* () {
-				const sessionScope = yield* make$37();
+				const sessionScope = yield* make$36();
 				const startedExit = yield* exit(gen(function* () {
 					const server = yield* openCodeRuntime.connectToOpenCodeServer({
 						binaryPath,
@@ -232720,7 +232892,7 @@ function makeOpenCodeAdapter(openCodeSettings, options) {
 				activeTurnId: void 0,
 				activeAgent: void 0,
 				activeVariant: void 0,
-				stopped: yield* make$50(false),
+				stopped: yield* make$49(false),
 				sessionScope: started.sessionScope
 			};
 			sessions.set(input.threadId, context);
@@ -233220,7 +233392,7 @@ const makeProviderService = fn$1("makeProviderService")(function* (options) {
 	const canonicalEventLogger = options?.canonicalEventLogger ?? (options?.canonicalEventLogPath !== void 0 ? yield* makeEventNdjsonLogger(options.canonicalEventLogPath, { stream: "canonical" }) : void 0);
 	const registry = yield* ProviderAdapterRegistry;
 	const directory = yield* ProviderSessionDirectory;
-	const sessionLocks = yield* make$47({ lookup: (_threadId) => make$44(1) });
+	const sessionLocks = yield* make$46({ lookup: (_threadId) => make$43(1) });
 	const withSessionLock = (threadId, effect) => get$5(sessionLocks, threadId).pipe(flatMap((lock) => lock.withPermit(effect)), scoped);
 	const runtimeEventPubSub = yield* unbounded$1();
 	const assertProviderExecutable = options?.assertProviderExecutable ?? (() => succeed(null));
@@ -235185,7 +235357,7 @@ const createTrace2Monitor = fn$1("createTrace2Monitor")(function* (input, progre
 		suffix: ".json"
 	});
 	const hookStartByChildKey = /* @__PURE__ */ new Map();
-	const traceTailState = yield* make$50({
+	const traceTailState = yield* make$49({
 		processedChars: 0,
 		remainder: ""
 	});
@@ -235231,7 +235403,7 @@ const createTrace2Monitor = fn$1("createTrace2Monitor")(function* (input, progre
 			});
 		}
 	});
-	const readTraceDelta = (yield* make$44(1)).withPermit(fs.readFileString(traceFilePath).pipe(flatMap((contents) => uninterruptible(modify$3(traceTailState, ({ processedChars, remainder }) => {
+	const readTraceDelta = (yield* make$43(1)).withPermit(fs.readFileString(traceFilePath).pipe(flatMap((contents) => uninterruptible(modify$3(traceTailState, ({ processedChars, remainder }) => {
 		if (contents.length <= processedChars) return [[], {
 			processedChars,
 			remainder
@@ -235360,7 +235532,7 @@ const GitCoreLive = effect(GitCore, fn$1("makeGitCore")(function* (options) {
 			const truncateOutputAtMaxBytes = input.truncateOutputAtMaxBytes ?? false;
 			return yield* fn$1("runGitCommand")(function* () {
 				const trace2Monitor = yield* createTrace2Monitor(commandInput, input.progress).pipe(provideService(Path$2, path$10), provideService(FileSystem, fileSystem), mapError(toGitCommandError(commandInput, "failed to create trace2 monitor.")));
-				const child = yield* commandSpawner.spawn(make$48("git", commandInput.args, {
+				const child = yield* commandSpawner.spawn(make$47("git", commandInput.args, {
 					cwd: commandInput.cwd,
 					env: withRepositoryOwnershipTrust({
 						...process.env,
@@ -235372,7 +235544,7 @@ const GitCoreLive = effect(GitCore, fn$1("makeGitCore")(function* (options) {
 					collectOutput(commandInput, child.stdout, maxOutputBytes, truncateOutputAtMaxBytes, input.progress?.onStdoutLine),
 					collectOutput(commandInput, child.stderr, maxOutputBytes, truncateOutputAtMaxBytes, input.progress?.onStderrLine),
 					child.exitCode.pipe(map$3((value) => Number(value)), mapError(toGitCommandError(commandInput, "failed to report exit code."))),
-					input.stdin === void 0 ? void_$1 : run$2(encodeText(make$43(input.stdin)), child.stdin).pipe(mapError(toGitCommandError(commandInput, "failed to write stdin.")))
+					input.stdin === void 0 ? void_$1 : run$2(encodeText(make$42(input.stdin)), child.stdin).pipe(mapError(toGitCommandError(commandInput, "failed to write stdin.")))
 				], { concurrency: "unbounded" }).pipe(map$3(([stdout, stderr, exitCode]) => [
 					stdout,
 					stderr,
@@ -236743,9 +236915,9 @@ function fingerprintStatusPart(status) {
 const GitStatusBroadcasterLive = effect(GitStatusBroadcaster, gen(function* () {
 	const gitManager = yield* GitManager;
 	const changesPubSub = yield* acquireRelease(unbounded$1(), (pubsub) => shutdown$2(pubsub));
-	const broadcasterScope = yield* acquireRelease(make$37(), (scope) => close(scope, void_$3));
-	const cacheRef = yield* make$50(/* @__PURE__ */ new Map());
-	const pollersRef = yield* make$32(/* @__PURE__ */ new Map());
+	const broadcasterScope = yield* acquireRelease(make$36(), (scope) => close(scope, void_$3));
+	const cacheRef = yield* make$49(/* @__PURE__ */ new Map());
+	const pollersRef = yield* make$31(/* @__PURE__ */ new Map());
 	const getCachedStatus = fn$1("getCachedStatus")(function* (cwd) {
 		return yield* get$6(cacheRef).pipe(map$3((cache) => cache.get(cwd) ?? null));
 	});
@@ -236899,7 +237071,7 @@ const GitStatusBroadcasterLive = effect(GitStatusBroadcaster, gen(function* () {
 		const initialRemote = (yield* getCachedStatus(normalizedCwd))?.remote?.value ?? null;
 		yield* retainRemotePoller(normalizedCwd);
 		const release = releaseRemotePoller(normalizedCwd).pipe(ignore, asVoid);
-		return concat$2(make$43({
+		return concat$2(make$42({
 			_tag: "snapshot",
 			local: initialLocal,
 			remote: initialRemote
@@ -237370,7 +237542,7 @@ const runCodexCommand = fn$1("runCodexCommand")(function* (args) {
 	}));
 	const codexSettings = yield* (yield* ServerSettingsService).getSettings.pipe(map$3((settings) => settings.providers.codex));
 	const effectiveHomePath = codexSettings.homePath || config.forgeCodexHomePath || process.env.CODEX_HOME || void 0;
-	const command = make$48(codexSettings.binaryPath, [...args], {
+	const command = make$47(codexSettings.binaryPath, [...args], {
 		shell: process.platform === "win32",
 		env: scrubForgeProviderChildEnvSecrets({
 			...process.env,
@@ -237810,7 +237982,7 @@ const CodexTextGenerationLive = effect(TextGeneration, gen(function* () {
 		});
 		const runCodexCommand = fn$1("runCodexJson.runCodexCommand")(function* () {
 			const { normalizedOptions, reasoningEffort, accessMode, providerProxyToken } = yield* resolveCodexCommandTarget();
-			return yield* launchCodexCommand(make$48(codexSettings?.binaryPath || "codex", buildCodexExecArgs({
+			return yield* launchCodexCommand(make$47(codexSettings?.binaryPath || "codex", buildCodexExecArgs({
 				model: modelSelection.model,
 				reasoningEffort,
 				fastMode: normalizedOptions?.fastMode,
@@ -237829,7 +238001,7 @@ const CodexTextGenerationLive = effect(TextGeneration, gen(function* () {
 				})),
 				cwd: workingDirectory,
 				shell: process.platform === "win32",
-				stdin: { stream: encodeText(make$43(prompt)) }
+				stdin: { stream: encodeText(make$42(prompt)) }
 			}));
 		});
 		const cleanup = all([...[
@@ -238019,7 +238191,7 @@ const ClaudeTextGenerationLive = effect(TextGeneration, gen(function* () {
 		};
 		const claudeSettings = yield* map$3(serverSettingsService.getSettings, (settings) => settings.providers.claudeAgent).pipe(catch_(() => undefined_));
 		const rawStdout = yield* fn$1("runClaudeJson.runClaudeCommand")(function* () {
-			const command = make$48(claudeSettings?.binaryPath || "claude", [
+			const command = make$47(claudeSettings?.binaryPath || "claude", [
 				"-p",
 				"--output-format",
 				"json",
@@ -238033,7 +238205,7 @@ const ClaudeTextGenerationLive = effect(TextGeneration, gen(function* () {
 			], {
 				cwd,
 				shell: process.platform === "win32",
-				stdin: { stream: encodeText(make$43(prompt)) }
+				stdin: { stream: encodeText(make$42(prompt)) }
 			});
 			const child = yield* commandSpawner.spawn(command).pipe(mapError((cause) => normalizeCliError("claude", operation, cause, "Failed to spawn Claude CLI process")));
 			const [stdout, stderr, exitCode] = yield* all([
@@ -238314,7 +238486,7 @@ const TextGenerationUsageLive = effect(TextGenerationUsage, gen(function* () {
 //#region ../../packages/shared/src/KeyedCoalescingWorker.ts
 const makeKeyedCoalescingWorker = (options) => gen(function* () {
 	const queue = yield* acquireRelease(unbounded(), shutdown);
-	const stateRef = yield* make$31({
+	const stateRef = yield* make$30({
 		latestByKey: /* @__PURE__ */ new Map(),
 		queuedKeys: /* @__PURE__ */ new Set(),
 		activeKeys: /* @__PURE__ */ new Set()
@@ -238874,14 +239046,14 @@ const makeTerminalManagerWithOptions = fn$1("makeTerminalManagerWithOptions")(fu
 	const processKillGraceMs = options.processKillGraceMs ?? DEFAULT_PROCESS_KILL_GRACE_MS;
 	const maxRetainedInactiveSessions = options.maxRetainedInactiveSessions ?? DEFAULT_MAX_RETAINED_INACTIVE_SESSIONS;
 	yield* fileSystem.makeDirectory(logsDir, { recursive: true }).pipe(orDie);
-	const managerStateRef = yield* make$32({
+	const managerStateRef = yield* make$31({
 		sessions: /* @__PURE__ */ new Map(),
 		killFibers: /* @__PURE__ */ new Map()
 	});
-	const threadLocksRef = yield* make$32(/* @__PURE__ */ new Map());
+	const threadLocksRef = yield* make$31(/* @__PURE__ */ new Map());
 	const terminalEventListeners = /* @__PURE__ */ new Set();
 	const transitionReceipts = /* @__PURE__ */ new Map();
-	const workerScope = yield* make$37("sequential");
+	const workerScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(workerScope, void_$3));
 	const publishEvent = (event) => gen(function* () {
 		for (const listener of terminalEventListeners) yield* listener(event).pipe(ignoreCause({ log: true }));
@@ -238896,7 +239068,7 @@ const makeTerminalManagerWithOptions = fn$1("makeTerminalManagerWithOptions")(fu
 	const modifyManagerState = (f) => modify$2(managerStateRef, f);
 	const getThreadSemaphore = (threadId) => modifyEffect(threadLocksRef, (current) => {
 		return match(fromNullishOr(current.get(threadId)), {
-			onNone: () => make$44(1).pipe(map$3((semaphore) => {
+			onNone: () => make$43(1).pipe(map$3((semaphore) => {
 				const next = new Map(current);
 				next.set(threadId, semaphore);
 				return [semaphore, next];
@@ -241784,6 +241956,18 @@ var SpriteTaskHoldManager = class {
 		return [...this.#holds.keys()];
 	}
 	/**
+	* Every hold key currently associated with one thread: what `releaseThread`
+	* releases. Read-only and synchronous, so a caller can snapshot what is
+	* live right now and decide later, from that snapshot, what it is still
+	* safe to release -- rather than asking this manager what is live AFTER
+	* some delay of its own, by which point a fresh acquire may have replaced
+	* the very hold the caller meant to release (SpriteTaskHoldReactor's
+	* session.exited handling does exactly this, forge#3602).
+	*/
+	activeTurnIdsForThread(threadId) {
+		return [...this.#holds.entries()].filter(([, hold]) => hold.threadId === threadId).map(([turnId]) => turnId);
+	}
+	/**
 	* `maxRefreshes` bounds a hold that has no terminal event of its own, such as a launch
 	* whose turn may never start. When the budget is spent the hold releases itself.
 	*
@@ -242059,7 +242243,7 @@ var SpriteTaskHoldManager = class {
 	* from silently dropping the holds of the other turns running beside it.
 	*/
 	async releaseThread(threadId) {
-		const turnIds = [...this.#holds.entries()].filter(([, hold]) => hold.threadId === threadId).map(([turnId]) => turnId);
+		const turnIds = this.activeTurnIdsForThread(threadId);
 		await Promise.all(turnIds.map((turnId) => this.release(turnId)));
 	}
 	/**
@@ -287916,7 +288100,7 @@ const GitManagerLive = effect(GitManager, fn$1("makeGitManager")(function* () {
 		preparePullRequestThread,
 		runStackedAction: fn$1("runStackedAction")(function* (input, options) {
 			const progress = createProgressEmitter(input, options);
-			const currentPhase = yield* make$50(none$4());
+			const currentPhase = yield* make$49(none$4());
 			return yield* fn$1("runStackedAction.runAction")(function* () {
 				const initialStatus = yield* gitCore.statusDetails(input.cwd);
 				const wantsCommit = isCommitAction(input.action);
@@ -289857,7 +290041,7 @@ const ApprovedWorkerPlanReactorLive = effect(ApprovedWorkerPlanReactor, gen(func
 	const git = yield* GitCore;
 	const runPromise = runPromiseWith(yield* context());
 	const eventState = makeApprovedWorkerPlanEventState();
-	const reconcileSemaphore = yield* make$44(1);
+	const reconcileSemaphore = yield* make$43(1);
 	const dispatch = (command) => runPromise(orchestration.dispatch(command).pipe(asVoid));
 	const readMasterContext = async (prompt) => {
 		const thread = getOrNull(await runPromise(readDurableWorkerDetail(projectionSnapshotQuery, ThreadId.make(prompt.masterThreadId))));
@@ -291133,7 +291317,7 @@ const makeRuntimeDrainReporter = gen(function* () {
 	const providerService = yield* ProviderService;
 	const serverConfig = yield* ServerConfig;
 	const spriteTaskHoldReactor = yield* SpriteTaskHoldReactor;
-	const reportSemaphore = yield* make$44(1);
+	const reportSemaphore = yield* make$43(1);
 	let heartbeatSilent = false;
 	const applyControlPlaneState = (runtime) => drainState.applyControlPlaneState({
 		draining: runtime.draining,
@@ -291716,7 +291900,7 @@ function shouldApplyProviderTurnCompleted(activeTurnId, eventTurnId) {
 const ProviderRuntimeIngestionLive = effect(ProviderRuntimeIngestionService, fn$1("make")(function* () {
 	const orchestrationEngine = yield* OrchestrationEngineService;
 	const claudeUsageTelemetry = yield* ClaudeUsageTelemetry;
-	const claudeUsageScope = yield* make$37("parallel");
+	const claudeUsageScope = yield* make$36("parallel");
 	yield* addFinalizer$2(() => close(claudeUsageScope, void_$3));
 	const providerService = yield* ProviderService;
 	const projectionTurnRepository = yield* ProjectionTurnRepository;
@@ -292355,7 +292539,7 @@ const ClaudeUsageTelemetryLive = effect(ClaudeUsageTelemetry, gen(function* () {
 */
 const makeDrainableWorker = (process) => gen(function* () {
 	const queue = yield* acquireRelease(unbounded(), shutdown);
-	const outstanding = yield* make$31(0);
+	const outstanding = yield* make$30(0);
 	yield* take(queue).pipe(tap((a) => ensuring(process(a), update$1(outstanding, (n) => n - 1))), forever$1, forkScoped);
 	const drain = get$1(outstanding).pipe(tap((n) => n > 0 ? txRetry : void_$1), tx$1);
 	const enqueue = (element) => offer(queue, element).pipe(tap(() => update$1(outstanding, (n) => n + 1)), tx$1);
@@ -292506,52 +292690,6 @@ function applyThreadGoalPreamble(goal, input) {
 	return trimmedInput.length > 0 ? `${preamble}\n\n${trimmedInput}` : preamble;
 }
 //#endregion
-//#region src/orchestration/providerRetryableFailure.ts
-/**
-* Classifies a provider turn-start failure as a retryable rate-limit or
-* transient-availability failure (429/503), a terminal failure that names why
-* it will never clear on its own, or unrecognized (null).
-*
-* CMMD-Center/forge#3558: a 429 from CMMD's provider egress used to leave no
-* trace at all, because nothing in the turn-start path recognized it as a
-* distinct, retryable failure. `ProviderCommandReactor` uses this to decide
-* whether to retry a turn start with backoff, and to name the provider,
-* status and Retry-After in the `provider.turn.start.failed` activity CMMD's
-* watchdog reads once retries are exhausted.
-*
-* Reuses `isProviderRateOrQuotaError` (the same predicate the public-copy
-* sanitizer uses to recognize a rate-limit message) rather than restating its
-* word list here.
-*/
-const SERVICE_UNAVAILABLE_PATTERN = /\b(503|service\s+unavailable)\b/i;
-const RATE_LIMITED_PAST_TENSE_PATTERN = /\brate[\s-]?limit(?:ed|ing)?\b/i;
-const QUOTA_OR_USAGE_LIMIT_PATTERN = /\b(usage[ _-]limit|usage_limit_reached|quota|insufficient_quota)\b/i;
-const EXPLICIT_429_PATTERN = /\b429\b/;
-const RETRY_AFTER_SECONDS_PATTERN = /retry-after[^0-9]{0,10}(\d+)|(?:try again|retry)\s+in\s+(\d+)\s*(?:s\b|sec(?:onds?)?\b)?/i;
-function parseRetryAfterSeconds(detail) {
-	const match = detail.match(RETRY_AFTER_SECONDS_PATTERN);
-	if (!match) return null;
-	const raw = match[1] ?? match[2];
-	const seconds = raw ? Number(raw) : NaN;
-	return Number.isFinite(seconds) ? seconds : null;
-}
-function classifyRetryableProviderFailure(detail) {
-	if (!detail || detail.trim().length === 0) return null;
-	if (QUOTA_OR_USAGE_LIMIT_PATTERN.test(detail) && !EXPLICIT_429_PATTERN.test(detail)) return {
-		kind: "terminal",
-		reason: "quota",
-		message: detail
-	};
-	const isRateLimited = isProviderRateOrQuotaError(detail) || RATE_LIMITED_PAST_TENSE_PATTERN.test(detail);
-	const isUnavailable = SERVICE_UNAVAILABLE_PATTERN.test(detail);
-	if (!isRateLimited && !isUnavailable) return null;
-	return {
-		kind: "retryable",
-		status: isRateLimited ? 429 : 503,
-		retryAfterSeconds: parseRetryAfterSeconds(detail)
-	};
-}
-//#endregion
 //#region src/orchestration/Layers/ProviderCommandReactor.ts
 function toNonEmptyProviderInput(value) {
 	const normalized = value?.trim();
@@ -293148,7 +293286,7 @@ const ProviderCommandReactorLive = effect(ProviderCommandReactor, gen(function*
 	* gap between the ack and this call (review item 1).
 	*/
 	const watchTurnStartOutcome = fn$1("watchTurnStartOutcome")(function* (input) {
-		const lastRetrySignal = yield* make$50(null);
+		const lastRetrySignal = yield* make$49(null);
 		const terminalEvent = yield* fromQueue(input.events).pipe(mapEffect$1((event) => gen(function* () {
 			if (event.type === "runtime.warning") {
 				const classified = classifyRetryableProviderFailure(event.payload.message);
@@ -294727,12 +294865,62 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 			createdAt: input.createdAt
 		});
 	});
+	/**
+	* The one durable, deterministic-id activity that records how a turn ended
+	* (CMMD-Center/forge#3562 piece A, CMMD-Center/CMMD#5822): `completed`,
+	* `interrupted` (an abort or a provider cancellation), or `failed` with the
+	* provider's own error message. Recorded here, ahead of every
+	* checkpoint-specific early return below, so it fires for every turn
+	* regardless of whether this workspace can capture a git checkpoint at
+	* all -- unlike a checkpoint, this never depends on `resolveCheckpointCwd`.
+	*
+	* The activity id is derived from the turn id, never `crypto.randomUUID()`,
+	* so a redelivered `turn.completed` for the same turn replaces the same
+	* row rather than adding a second one. The guard below additionally
+	* refuses to touch a turn that already has one: first write wins, so a
+	* later, different signal for the same turn can never overwrite an
+	* outcome CMMD may already have acknowledged.
+	*
+	* Deriving the wire `turn_status` event from a new activity recorded at
+	* the moment the turn actually ends -- not from `thread.latestTurn` or
+	* `thread.checkpoints`, both of which already hold outcomes for turns that
+	* settled before this shipped -- is deliberate: those would insert a brand
+	* new event into history CMMD already acknowledged for every existing
+	* thread, which `RuntimeThreadHistoryConflict` exists specifically to
+	* reject (CMMD-Center/forge#3497). A turn that settled before this shipped
+	* gets no terminal event; only a turn that ends after it does.
+	*/
+	const recordTurnTerminalStatus = fn$1("recordTurnTerminalStatus")(function* (event, thread, turnId) {
+		const activityId = turnTerminalStatusActivityId(turnId);
+		if (thread.activities.some((activity) => activity.id === activityId)) return;
+		const outcome = turnTerminalOutcomeFromRuntimeState(event.payload.state);
+		const recordedAt = (/* @__PURE__ */ new Date()).toISOString();
+		yield* orchestrationEngine.dispatch({
+			type: "thread.activity.append",
+			commandId: serverCommandId$1("turn-terminal-status"),
+			threadId: event.threadId,
+			activity: {
+				id: EventId.make(activityId),
+				tone: outcome === "failed" ? "error" : "info",
+				kind: TURN_TERMINAL_STATUS_ACTIVITY_KIND,
+				summary: `Turn ${outcome}`,
+				payload: {
+					outcome,
+					...outcome === "failed" && event.payload.errorMessage ? { errorMessage: event.payload.errorMessage } : {}
+				},
+				turnId,
+				createdAt: recordedAt
+			},
+			createdAt: recordedAt
+		});
+	});
 	const captureCheckpointFromTurnCompletion = fn$1("captureCheckpointFromTurnCompletion")(function* (event) {
 		const turnId = toTurnId(event.turnId);
 		if (!turnId) return;
 		const readModel = yield* orchestrationEngine.getReadModel();
 		const thread = readModel.threads.find((entry) => entry.id === event.threadId);
 		if (!thread) return;
+		yield* recordTurnTerminalStatus(event, thread, turnId);
 		if (thread.session?.activeTurnId && !sameId(thread.session.activeTurnId, turnId)) return;
 		if (thread.checkpoints.some((checkpoint) => checkpoint.turnId === turnId && checkpoint.status !== "missing")) return;
 		const checkpointCwd = yield* resolveCheckpointCwd({
@@ -295032,6 +295220,9 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 	};
 }));
 //#endregion
+//#region src/runtimeReplication/Services/RuntimeReplicationThreadFlush.ts
+var RuntimeReplicationThreadFlush = class extends Service$1()("forge/runtimeReplication/Services/RuntimeReplicationThreadFlush") {};
+//#endregion
 //#region src/orchestration/Layers/SpriteTaskHoldReactor.ts
 /**
 * Holds the sprite awake for the duration of every agent turn.
@@ -295047,6 +295238,48 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 * `turn.started` / `turn.completed` through `ProviderService.streamEvents`.
 */
 /**
+* Bound for how long a terminal turn event (`turn.completed` / `turn.aborted`)
+* waits on that thread's pending replication before releasing the sprite's
+* turn hold anyway (forge#3600). The sprite freezes about a second after the
+* hold goes, so this is also roughly how much longer a finished turn's sprite
+* stays billed.
+*
+* Justified from the numbers already in this codebase, not a guess: the
+* outbox drain loop claims and posts on a 2 s tick
+* (`Schedule.spaced("2 seconds")` in RuntimeReplication.ts), each CMMD publish
+* attempt has its own 10 s deadline (`RUNTIME_REPLICATION_TIMEOUT_MS` in
+* RuntimeReplicationClient.ts), and `claim()` orders a thread's inventory row
+* ahead of its thread-events row, so one tick can mean two requests before the
+* thread's own batch goes out. 15 s covers one drain tick plus one full
+* publish attempt with headroom for that second request, while still keeping
+* a completed turn's sprite from staying billed anywhere near CMMD's own
+* stalled-turn sweep window (production: about 15 minutes, per forge#3600).
+*/
+const REPLICATION_FLUSH_TIMEOUT_MS = 15e3;
+/**
+* How often the flush re-checks the thread's outbox row while waiting. Short
+* enough that the wait tracks CMMD's actual ack latency (typically well under
+* a second) rather than the bound, long enough that a 15 s wait costs at most
+* about 60 reads against the outbox table.
+*/
+const REPLICATION_FLUSH_POLL_INTERVAL_MS = 250;
+/**
+* A single extra wait before trusting a flush's very first "nothing pending"
+* read (forge#3600 review follow-up). SpriteTaskHoldReactor and
+* RuntimeReplication's own domain-event-driven enqueue are independent
+* subscribers of the same ProviderService.streamEvents broadcast: this
+* reactor can see turn.completed and read the outbox before the OTHER
+* subscriber has finished projecting the turn's final events into a row. In
+* both production runs behind forge#3600, the final assistant_message and
+* turn_usage writes landed about a second apart from each other (00:43:15Z
+* and 00:43:16Z), so an immediate "nothing pending" read cannot be trusted:
+* that is exactly the race that stranded both turns. One settle wait,
+* re-checked once, closes it without turning every genuinely idle turn's
+* release into a long poll -- a thread that already has nothing to replicate
+* pays this once, never the full flushTimeoutMs bound.
+*/
+const REPLICATION_FLUSH_SETTLE_MS = 1e3;
+/**
 * A launch hold refreshes every 60 s, so this budget is about ten minutes. A launch whose turn
 * never starts, because the provider refused it or the process died first, has no event to
 * release it. The budget is what stops that hold from keeping the sprite billing.
@@ -295064,8 +295297,69 @@ const TURN_START_HOLD_MAX_REFRESHES = 10;
 /** The hold id for `holdTurnStart` / `releaseTurnStart`. Distinct from `launchHoldId` on purpose:
 * see the shape's doc comment on `holdTurnStart`. */
 const turnStartHoldId = (key) => `turn-start-${key}`;
-const SpriteTaskHoldReactorLive = effect(SpriteTaskHoldReactor, gen(function* () {
+const makeSpriteTaskHoldReactor = (overrides = {}) => gen(function* () {
 	const providerService = yield* ProviderService;
+	const replicationOutbox = yield* RuntimeReplicationThreadFlush;
+	const replicationRuntimeId = resolveRuntimeReplicationRuntimeId(yield* ServerConfig);
+	const flushTimeoutMs = overrides.replicationFlushTimeoutMs ?? REPLICATION_FLUSH_TIMEOUT_MS;
+	const flushPollIntervalMs = overrides.replicationFlushPollIntervalMs ?? REPLICATION_FLUSH_POLL_INTERVAL_MS;
+	const flushSettleMs = overrides.replicationFlushSettleMs ?? REPLICATION_FLUSH_SETTLE_MS;
+	/**
+	* Waits for CMMD to acknowledge this thread's outstanding replication -- or
+	* for nothing to have been pending in the first place -- before the caller
+	* releases the turn hold that keeps the sprite awake for the outbox drain
+	* loop to run (forge#3600). Bounded so a wedged publish cannot hold a
+	* finished turn's sprite open indefinitely: the bound firing releases
+	* anyway and logs a warning with however much was still outstanding.
+	*
+	* Never fails: a defect from the outbox read (a SQL error, say) is caught
+	* and treated the same as a timeout -- release the hold rather than let a
+	* replication-read bug strand the sprite awake, or worse, crash the worker
+	* that also has to release every OTHER turn's hold.
+	*/
+	const flushThreadReplication = (threadId) => {
+		if (replicationRuntimeId === void 0) return void_$1;
+		const runtimeId = replicationRuntimeId;
+		const streamKey = `thread:${threadId}`;
+		const startedAt = Date.now();
+		const poll = (phase) => replicationOutbox.readPendingCount({
+			runtimeId,
+			streamKey
+		}).pipe(flatMap((pending) => {
+			if (pending === 0) {
+				if (phase === "initial") return sleep$4(flushSettleMs).pipe(andThen(suspend$1(() => poll("settle-recheck"))));
+				return succeed({
+					outcome: phase === "settle-recheck" ? "nothing_pending" : "delivered",
+					pending,
+					settled: phase === "settle-recheck"
+				});
+			}
+			if (Date.now() - startedAt >= flushTimeoutMs) return succeed({
+				outcome: "timed_out",
+				pending,
+				settled: false
+			});
+			return sleep$4(flushPollIntervalMs).pipe(andThen(suspend$1(() => poll("steady"))));
+		}));
+		return poll("initial").pipe(flatMap(({ outcome, pending, settled }) => {
+			const elapsedMs = Date.now() - startedAt;
+			const logOutcome = logInfo("sprite task hold replication flush", {
+				threadId,
+				outcome,
+				pending,
+				elapsedMs,
+				...settled ? { settledMs: flushSettleMs } : {}
+			});
+			return outcome === "timed_out" ? logOutcome.pipe(andThen(logWarning$1("sprite task hold replication flush timed out; releasing the turn hold anyway", {
+				threadId,
+				pending,
+				elapsedMs
+			}))) : logOutcome;
+		}), catchCause((cause) => logError("sprite task hold replication flush failed; releasing the turn hold anyway", {
+			threadId,
+			cause: pretty(cause)
+		})));
+	};
 	const manager = makeSpriteTaskHoldManager(process.env, (message, cause) => {
 		runFork(logWarning$1(message, { cause: cause instanceof Error ? cause.message : cause }));
 	}, (event) => {
@@ -295094,61 +295388,111 @@ const SpriteTaskHoldReactorLive = effect(SpriteTaskHoldReactor, gen(function* ()
 	const launchCallers = /* @__PURE__ */ new Map();
 	const launchGeneration = /* @__PURE__ */ new Map();
 	const turnLaunchGeneration = /* @__PURE__ */ new Map();
+	const turnHoldGeneration = /* @__PURE__ */ new Map();
+	let nextTurnHoldGeneration = 0;
 	/**
-	* Belt-and-braces cleanup for a turn reaching a terminal state
-	* (turn.completed or turn.aborted): a launch hold whose hand-off never
-	* confirmed (the turn hold's PUT kept failing) is still up, refreshing on
-	* its own budget, and the turn ending either way means the launch phase is
-	* over. `manager.release(String(turnId))` above can itself wait on the
-	* guest API, so by the time this runs the NEXT stage's own dispatch may
-	* already have acquired a fresh launch hold for the same thread; only
-	* release it here when no such newer launch has started since this turn's
-	* own turn.started was processed (CodeRabbit review, forge#3592). A no-op
-	* when this turn's own generation is stale, or when the hold was already
-	* released.
+	* Release a launch hold left over from a turn hand-off that never
+	* confirmed, once the turn it was covering has reached a terminal state
+	* one way or another. `capturedGeneration` must be read from
+	* `turnLaunchGeneration` by the caller before this runs -- see that map's
+	* own doc comment for why the read cannot happen in here. A no-op when
+	* nothing was captured, when a newer launch has since superseded it, or
+	* when the hold was already released.
 	*/
-	const releaseLingeringLaunchHold = async (turnId, threadId) => {
-		const capturedGeneration = turnLaunchGeneration.get(turnId);
-		turnLaunchGeneration.delete(turnId);
+	const releaseLingeringLaunchHoldIfCurrent = async (threadId, capturedGeneration) => {
 		if (manager === null || capturedGeneration === void 0) return;
 		if (launchGeneration.get(threadId) !== capturedGeneration) return;
 		await manager.release(launchHoldId(threadId));
 	};
+	/**
+	* Release a completed or aborted turn's hold, once its thread's pending
+	* replication has flushed (forge#3600). Skips the release entirely once
+	* `turnHoldGeneration` has moved past `expectedGeneration`: see that map's
+	* own doc comment for the reused-turnId race this guards against.
+	*/
+	const processTerminalItem = (item) => flushThreadReplication(item.threadId).pipe(andThen(promise(async () => {
+		if (manager === null) return;
+		if (turnHoldGeneration.get(item.turnId) !== item.expectedGeneration) return;
+		await manager.release(item.turnId);
+		await releaseLingeringLaunchHoldIfCurrent(item.threadId, item.capturedLaunchGeneration);
+		if (turnHoldGeneration.get(item.turnId) === item.expectedGeneration) turnHoldGeneration.delete(item.turnId);
+	})));
+	/**
+	* Release every hold a dead session was covering, once its thread's
+	* pending replication has flushed (#3603 item 1: this used to call
+	* `manager.releaseThread` on the spot, with nothing stopping a provider
+	* process that died right after its own turn from stranding that turn's
+	* final events the same way forge#3600 did for a clean completion).
+	* `turns` and `capturedLaunchGeneration` are snapshotted by the caller at
+	* session.exited time, BEFORE the flush runs: a launch or a turn that
+	* starts on this thread WHILE the flush is running must survive. Reading
+	* "what is live for this thread" only AFTER the flush -- the naive
+	* flush-then-releaseThread shape -- would reopen the exact hand-off gap
+	* forge#3589 already closed once, just moved behind a longer wait.
+	*/
+	const processSessionExited = (item) => flushThreadReplication(item.threadId).pipe(andThen(promise(async () => {
+		if (manager === null) return;
+		await Promise.all(item.turns.filter((turn) => turnHoldGeneration.get(turn.turnId) === turn.expectedGeneration).map(async (turn) => {
+			await manager.release(turn.turnId);
+			if (turnHoldGeneration.get(turn.turnId) === turn.expectedGeneration) turnHoldGeneration.delete(turn.turnId);
+		}));
+		await releaseLingeringLaunchHoldIfCurrent(item.threadId, item.capturedLaunchGeneration);
+	})));
 	const start = fn$1("start")(function* () {
 		if (manager === null) return;
+		const terminalFibers = yield* make$50();
+		const onTurnStarted = (turnIdKey, threadId) => {
+			const generation = launchGeneration.get(threadId) ?? 0;
+			turnHoldGeneration.set(turnIdKey, ++nextTurnHoldGeneration);
+			return promise(async () => {
+				const outcome = await manager.acquire(turnIdKey, threadId);
+				launchCallers.delete(threadId);
+				turnLaunchGeneration.set(turnIdKey, generation);
+				if (outcome === "succeeded") await manager.release(launchHoldId(threadId));
+			});
+		};
+		/** Shared by turn.completed and turn.aborted: see the dispatch below for why they are distinct wire events but handled identically. */
+		const onTerminalTurnEvent = (turnIdKey, threadIdKey) => {
+			const capturedLaunchGeneration = turnLaunchGeneration.get(turnIdKey);
+			turnLaunchGeneration.delete(turnIdKey);
+			return run$3(terminalFibers, processTerminalItem({
+				turnId: turnIdKey,
+				threadId: threadIdKey,
+				expectedGeneration: turnHoldGeneration.get(turnIdKey) ?? 0,
+				capturedLaunchGeneration
+			})).pipe(asVoid);
+		};
+		const onSessionExited = (threadId) => {
+			launchCallers.delete(threadId);
+			const launchKey = launchHoldId(threadId);
+			const turns = manager.activeTurnIdsForThread(threadId).filter((turnId) => turnId !== launchKey).map((turnId) => ({
+				turnId,
+				expectedGeneration: turnHoldGeneration.get(turnId) ?? 0
+			}));
+			for (const turn of turns) turnLaunchGeneration.delete(turn.turnId);
+			return run$3(terminalFibers, processSessionExited({
+				threadId,
+				turns,
+				capturedLaunchGeneration: launchGeneration.get(threadId)
+			})).pipe(asVoid);
+		};
 		yield* forkScoped(runForEach(providerService.streamEvents, (event) => {
 			if (event.type === "turn.started") {
 				const turnId = event.turnId;
 				if (turnId === void 0) return void_$1;
-				const threadId = String(event.threadId);
-				const generation = launchGeneration.get(threadId) ?? 0;
-				return promise(async () => {
-					const outcome = await manager.acquire(String(turnId), threadId);
-					launchCallers.delete(threadId);
-					turnLaunchGeneration.set(String(turnId), generation);
-					if (outcome === "succeeded") await manager.release(launchHoldId(threadId));
-				});
+				return onTurnStarted(String(turnId), String(event.threadId));
 			}
 			if (event.type === "turn.completed") {
 				const turnId = event.turnId;
 				if (turnId === void 0) return void_$1;
-				return promise(async () => {
-					await manager.release(String(turnId));
-					await releaseLingeringLaunchHold(String(turnId), String(event.threadId));
-				});
+				return onTerminalTurnEvent(String(turnId), String(event.threadId));
 			}
 			if (event.type === "turn.aborted") {
 				const turnId = event.turnId;
 				if (turnId === void 0) return void_$1;
-				return promise(async () => {
-					await manager.release(String(turnId));
-					await releaseLingeringLaunchHold(String(turnId), String(event.threadId));
-				});
-			}
-			if (event.type === "session.exited") {
-				launchCallers.delete(String(event.threadId));
-				return promise(() => manager.releaseThread(String(event.threadId)));
+				return onTerminalTurnEvent(String(turnId), String(event.threadId));
 			}
+			if (event.type === "session.exited") return onSessionExited(String(event.threadId));
 			return void_$1;
 		}));
 	});
@@ -295185,7 +295529,8 @@ const SpriteTaskHoldReactorLive = effect(SpriteTaskHoldReactor, gen(function* ()
 		releaseTurnStart,
 		releaseAll: onManager((taskHolds) => taskHolds.releaseAll())
 	};
-}));
+});
+const SpriteTaskHoldReactorLive = effect(SpriteTaskHoldReactor, makeSpriteTaskHoldReactor());
 //#endregion
 //#region src/orchestration/Layers/PlanTaskCreationReactor.ts
 var PlanMaterializationRequestError = class extends TaggedError("PlanMaterializationRequestError") {};
@@ -296012,7 +296357,7 @@ const readOpenCodeApiKey = (_settings) => process.env.OPENCODE_API_KEY || proces
 const runOpenCodeCommand = fn$1("runOpenCodeCommand")(function* (binaryPath, args) {
 	const useShell = process.platform === "win32";
 	if (useShell && !isShellSafeCommandPath(binaryPath)) return yield* fail(/* @__PURE__ */ new Error(`Refusing to spawn opencode: \`binaryPath\` contains shell metacharacters that cmd.exe would interpret as additional commands.`));
-	return yield* spawnAndCollect(binaryPath, make$48(binaryPath, [...args], {
+	return yield* spawnAndCollect(binaryPath, make$47(binaryPath, [...args], {
 		shell: useShell,
 		env: scrubForgeProviderChildEnvSecrets(process.env)
 	}));
@@ -296280,7 +296625,7 @@ const ProviderRegistryLive = effect(ProviderRegistry, gen(function* () {
 		provider
 	})]));
 	const fallbackByProvider = new Map(fallbackProviders.map((provider) => [provider.provider, provider]));
-	const providersRef = yield* make$50(yield* forEach(PROVIDER_CACHE_IDS, (provider) => {
+	const providersRef = yield* make$49(yield* forEach(PROVIDER_CACHE_IDS, (provider) => {
 		const filePath = cachePathByProvider.get(provider);
 		const fallbackProvider = fallbackByProvider.get(provider);
 		return readProviderStatusCache(filePath).pipe(provideService(FileSystem, fileSystem), map$3((cachedProvider) => {
@@ -297396,7 +297741,7 @@ const makeWorkspaceBulkTransfer = (options = {}) => gen(function* () {
 	const workspacePaths = yield* WorkspacePaths;
 	const workspaceEntries = yield* WorkspaceEntries;
 	const fault = options.fault ?? (() => void_$1);
-	const transferLocks = yield* forEach(Array.from({ length: TRANSFER_LOCK_STRIPE_COUNT }), () => make$44(1));
+	const transferLocks = yield* forEach(Array.from({ length: TRANSFER_LOCK_STRIPE_COUNT }), () => make$43(1));
 	const withTransferLock = (transferId, effect) => transferLocks[transferLockStripe(transferId)].withPermit(effect);
 	const findTransfer = (transferId) => sql`
         SELECT transfer_id AS "transferId", workspace_root AS "workspaceRoot",
@@ -298443,7 +298788,7 @@ const make$3 = /* @__PURE__ */ fnUntraced(function* (options) {
 		excludeLogSpans: options.excludeLogSpans ?? false,
 		clock: yield* Clock
 	};
-	return make$33((options) => {
+	return make$32((options) => {
 		exporter.push(makeLogRecord(options, opts));
 	});
 });
@@ -298881,7 +299226,7 @@ const make$1 = /* @__PURE__ */ fnUntraced(function* (options) {
 		if (!span.sampled) return;
 		exporter.push(makeOtlpSpan(span));
 	}
-	return make$42({
+	return make$41({
 		span(options) {
 			return makeSpan({
 				...options,
@@ -299207,8 +299552,8 @@ const makeLocalFileTracer = fn$1("makeLocalFileTracer")(function* (options) {
 		maxFiles: options.maxFiles,
 		batchWindowMs: options.batchWindowMs
 	}));
-	const delegate = options.delegate ?? make$42({ span: (spanOptions) => new NativeSpan(spanOptions) });
-	return make$42({
+	const delegate = options.delegate ?? make$41({ span: (spanOptions) => new NativeSpan(spanOptions) });
+	return make$41({
 		span(spanOptions) {
 			return new LocalFileSpan(spanOptions, delegate.span(spanOptions), sink.push);
 		},
@@ -299332,7 +299677,7 @@ function resolveBuildCommitFromEnv(env) {
 * environment descriptor down instead of reporting an honest "unknown".
 */
 function readBakedBuildCommit() {
-	return "88bc45ce168df8c9acf36ad6734d8a66bcb353ec";
+	return "c825d8a74e28836b97016dbd8c2abc730841a622";
 }
 async function resolveServerBuildCommit(input) {
 	if (isFullCommitSha(input.baked)) return input.baked;
@@ -299508,7 +299853,7 @@ const ServerEnvironmentLive = effect(ServerEnvironment, fn$1("makeServerEnvironm
 		return yield* decodeUnknownEffect(EnvironmentMetadata)(parsed).pipe(orElseSucceed(() => ({ displayName: null })));
 	});
 	const writeMetadata = (metadata) => fileSystem.writeFileString(serverConfig.environmentMetadataPath, `${JSON.stringify(metadata, null, 2)}\n`);
-	const displayNameOverrideRef = yield* make$50(normalizeDisplayName((yield* readMetadata).displayName ?? null));
+	const displayNameOverrideRef = yield* make$49(normalizeDisplayName((yield* readMetadata).displayName ?? null));
 	const posthog = yield* PosthogPublicConfig.asEffect();
 	const buildCommit = yield* promise(() => resolveServerBuildCommit({
 		baked: readBakedBuildCommit(),
@@ -301115,7 +301460,7 @@ const internalBootstrapCredentialError = (message, cause) => new BootstrapCreden
 const BootstrapCredentialServiceLive = effect(BootstrapCredentialService, gen(function* () {
 	const config = yield* ServerConfig;
 	const pairingLinks = yield* AuthPairingLinkRepository;
-	const seededGrantsRef = yield* make$50(/* @__PURE__ */ new Map());
+	const seededGrantsRef = yield* make$49(/* @__PURE__ */ new Map());
 	const changesPubSub = yield* unbounded$1();
 	const seedGrant = (credential, grant) => update$4(seededGrantsRef, (current) => {
 		const next = new Map(current);
@@ -301586,7 +301931,7 @@ const SessionCredentialServiceLive = effect(SessionCredentialService, gen(functi
 	if (serverConfig.forgeCloudShellMode === true && configuredSigningKey === null) return yield* die$1(/* @__PURE__ */ new Error("FORGE_SESSION_SIGNING_KEY must decode to at least 32 bytes in cloud-shell mode. Forge Cloud refuses to issue restart-unsafe or replica-local sessions."));
 	const signingSecret = configuredSigningKey ?? (yield* secretStore.getOrCreateRandom(SIGNING_SECRET_NAME, 32));
 	const statelessCookieSessions = configuredSigningKey !== null;
-	const connectedSessionsRef = yield* make$50(/* @__PURE__ */ new Map());
+	const connectedSessionsRef = yield* make$49(/* @__PURE__ */ new Map());
 	const changesPubSub = yield* unbounded$1();
 	const cookieName = resolveSessionCookieName({
 		mode: serverConfig.mode,
@@ -302095,7 +302440,7 @@ function verifyForgeCloudOwnerCallbackAssertion(assertion, config) {
 	}));
 	const verifier = assertionVerifierConfig(config);
 	const verified = verifier ? verifyAssertion(assertion, verifier) : null;
-	const expiresAt = verified ? make$38(verified.expiresAtMilliseconds) : none$4();
+	const expiresAt = verified ? make$37(verified.expiresAtMilliseconds) : none$4();
 	if (!verified || isNone(expiresAt)) return fail(new AuthError({
 		message: "Invalid Forge Cloud owner assertion.",
 		status: 401
@@ -304497,7 +304842,7 @@ const OrchestrationEngineLive = effect(OrchestrationEngineService, gen(function*
 	const getReadModel = () => sync$1(() => readModel);
 	const readEvents = (fromSequenceExclusive) => eventStore.readFromSequence(fromSequenceExclusive);
 	const dispatch = (command) => gen(function* () {
-		const result = yield* make$39();
+		const result = yield* make$38();
 		yield* offer$1(commandQueue, {
 			command,
 			result,
@@ -313708,7 +314053,7 @@ const RuntimeReplicationLive = effect(RuntimeReplication, gen(function* () {
 	const terminal = yield* serviceOption(TerminalManager);
 	const activeHourMeter = yield* ActiveHourMeter;
 	const runtimeId = resolveRuntimeReplicationRuntimeId(config);
-	const outboxWarningActive = yield* make$50(false);
+	const outboxWarningActive = yield* make$49(false);
 	const enqueueInventoryPayload = (payload) => runtimeId ? outbox.enqueue({
 		runtimeId,
 		streamKey: "inventory",
@@ -314899,6 +315244,36 @@ const RuntimeReplicationOutboxLive = effect(RuntimeReplicationOutbox, gen(functi
 		getDiagnostics
 	});
 }));
+//#endregion
+//#region src/runtimeReplication/Layers/RuntimeReplicationThreadFlush.ts
+/**
+* A thread's outbox row holds its whole unacknowledged batch as one
+* `{ events: [...] }` payload -- RuntimeReplicationOutbox upserts by
+* `(runtime_id, stream_key)`, so there is at most one row per thread -- so the
+* count is that array's length. A row whose payload does not decode that way
+* (a blocked THREAD_STREAM_LOCAL_HISTORY_CONFLICT placeholder, for instance)
+* still represents one undelivered publication, so it counts as 1 rather than
+* 0: a caller bounding a wait on this number must never read a blocked row as
+* "nothing pending".
+*/
+function pendingEventCount(payloadJson) {
+	try {
+		const parsed = JSON.parse(payloadJson);
+		if (Array.isArray(parsed.events)) return parsed.events.length;
+	} catch {}
+	return 1;
+}
+const RuntimeReplicationThreadFlushLive = effect(RuntimeReplicationThreadFlush, gen(function* () {
+	const sql = yield* SqlClient;
+	const readPendingCount = (input) => sql`
+        SELECT payload_json AS "payloadJson" FROM runtime_replication_outbox
+        WHERE runtime_id = ${input.runtimeId} AND stream_key = ${input.streamKey}
+      `.pipe(map$3((rows) => {
+		const row = rows[0];
+		return row === void 0 ? 0 : pendingEventCount(row.payloadJson);
+	}), orDie);
+	return RuntimeReplicationThreadFlush.of({ readPendingCount });
+}));
 /**
 * Gates guest-side Active Hour measurement (FOR-32642). Shadow-only: even
 * with this on, whether a reported interval is also recorded against the
@@ -314931,7 +315306,7 @@ const isActiveHourMeteringEnabled = gen(function* () {
 }).pipe(catch_(() => succeed(false)));
 const ActiveHourMeterLive = effect(ActiveHourMeter, gen(function* () {
 	const outbox = yield* RuntimeReplicationOutbox;
-	const statesByRuntime = yield* make$50(/* @__PURE__ */ new Map());
+	const statesByRuntime = yield* make$49(/* @__PURE__ */ new Map());
 	const markAwake = (runtimeId) => gen(function* () {
 		if (!(yield* isActiveHourMeteringEnabled)) return;
 		yield* update$4(statesByRuntime, (states) => {
@@ -316960,7 +317335,7 @@ const PipelineRunCoordinatorLive = effect(PipelineRunCoordinator, gen(function*
 	const providerAuthorityInstallations = /* @__PURE__ */ new Map();
 	const providerAuthorityPublications = /* @__PURE__ */ new Map();
 	const preparedHandoffs = /* @__PURE__ */ new WeakMap();
-	const authorityCleanupScope = yield* make$37("parallel");
+	const authorityCleanupScope = yield* make$36("parallel");
 	yield* addFinalizer$2(() => close(authorityCleanupScope, void_$3));
 	const retryAuthoritySecretCleanup = (work, cause) => {
 		const now = /* @__PURE__ */ new Date();
@@ -317336,12 +317711,12 @@ const PipelineRunCoordinatorLive = effect(PipelineRunCoordinator, gen(function*
 		if (!preparedHandoffMatchesRun(preparedHandoff, input.runId)) return yield* coordinatorError("registerHandoff", "PIPELINE_HANDOFF_PREPARATION_INVALID", "The pipeline handoff preparation is missing, belongs to another run, or was already consumed.");
 		preparedHandoffs.delete(input.preparedHandoff);
 		const ownedProviderAuthorityInstallations = /* @__PURE__ */ new Set();
-		const preparedAuthorityRef = yield* make$50({
+		const preparedAuthorityRef = yield* make$49({
 			authority: preparedHandoff.authority,
 			preparation: preparedHandoff.providerAuthorityPreparation
 		});
-		const acceptingHeartbeatRef = yield* make$50(true);
-		const heartbeatPublicationSemaphore = yield* make$44(1);
+		const acceptingHeartbeatRef = yield* make$49(true);
+		const heartbeatPublicationSemaphore = yield* make$43(1);
 		if ((yield* store.getByRunId(input.runId)) !== null) return yield* coordinatorError("registerHandoff", "PIPELINE_HANDOFF_ALREADY_BOUND", "The CMMD run already has a Forge task thread and must use the authority rebind contract.");
 		const snapshot = preparedHandoff.snapshot;
 		const readModel = yield* orchestration.getReadModel();
@@ -321223,7 +321598,7 @@ function makeProjectLeadSchedulerLive(options = {}) {
 	return effect(ProjectLeadScheduler, gen(function* () {
 		const client = yield* ProjectLeadControllerClient;
 		const dispatcher = yield* ProjectLeadReservationDispatcher;
-		const semaphore = yield* make$44(1);
+		const semaphore = yield* make$43(1);
 		const leaseSeconds = options.leaseSeconds ?? DEFAULT_LEASE_SECONDS;
 		const batchSize = options.batchSize ?? DEFAULT_BATCH_SIZE;
 		const projectLimit = options.projectLimit ?? DEFAULT_PROJECT_LIMIT;
@@ -322188,14 +322563,14 @@ const AgentProtocolReactorLive = effect(AgentProtocolReactor, gen(function* () {
 const PRUNE_GRACE_MS = 6e4;
 const makeUserSlot = gen(function* () {
 	return {
-		snapshotRef: yield* make$50(null),
+		snapshotRef: yield* make$49(null),
 		pubsub: yield* unbounded$1(),
-		subscriberCountRef: yield* make$50(0)
+		subscriberCountRef: yield* make$49(0)
 	};
 });
 const WorkspaceReadinessStateLive = effect(WorkspaceReadinessState, gen(function* () {
-	const slotsRef = yield* make$32(/* @__PURE__ */ new Map());
-	const pruneScope = yield* make$37("sequential");
+	const slotsRef = yield* make$31(/* @__PURE__ */ new Map());
+	const pruneScope = yield* make$36("sequential");
 	yield* addFinalizer$2(() => close(pruneScope, void_$3));
 	/**
 	* Atomically get-or-create the slot for `userId`. The Synchronized wrapper
@@ -323256,8 +323631,8 @@ const PtyAdapterLive = unwrap(gen(function* () {
 }));
 const HttpServerLive = unwrap(gen(function* () {
 	const config = yield* ServerConfig;
-	if (typeof Bun !== "undefined") return (yield* promise(() => import("./BunHttpServer-BpaVqxli.mjs"))).layer(bunHttpServerOptions(config));
-	const [NodeHttpServer, NodeHttp] = yield* all([promise(() => import("./NodeHttpServer-DePOzmYy.mjs")), promise(() => import("node:http"))]);
+	if (typeof Bun !== "undefined") return (yield* promise(() => import("./BunHttpServer-o7ISooSQ.mjs"))).layer(bunHttpServerOptions(config));
+	const [NodeHttpServer, NodeHttp] = yield* all([promise(() => import("./NodeHttpServer-BngJqAIT.mjs")), promise(() => import("node:http"))]);
 	return NodeHttpServer.layer(NodeHttp.createServer, {
 		host: config.host,
 		port: config.port
@@ -323272,7 +323647,7 @@ const PlatformServicesLive = unwrap(gen(function* () {
 		return layer;
 	}
 }));
-const RuntimeReplicationLayerLive = RuntimeReplicationLive.pipe(provideMerge(RuntimeReplicationClientLive), provideMerge(RuntimeReplicationOutboxLive), provideMerge(ActiveHourMeterLive.pipe(provide$1(RuntimeReplicationOutboxLive))));
+const RuntimeReplicationLayerLive = RuntimeReplicationLive.pipe(provideMerge(RuntimeReplicationClientLive), provideMerge(RuntimeReplicationOutboxLive), provideMerge(RuntimeReplicationThreadFlushLive), provideMerge(ActiveHourMeterLive.pipe(provide$1(RuntimeReplicationOutboxLive))));
 const RuntimeDrainLayerLive = RuntimeDrainReporterLive.pipe(provideMerge(RuntimeDrainStateLive));
 const RuntimeAwareProviderReactorsLive = mergeAll(ProviderRuntimeIngestionLive, ProviderCommandReactorLive).pipe(provide$1(RuntimeDrainLayerLive), provideMerge(RuntimeDrainStateLive), provide$1(ClaudeUsageTelemetryLive));
 const PipelineWorkerCoordinatorLayerLive = PipelineWorkerCoordinatorLive.pipe(provideMerge(PipelineRunClientLive));
@@ -324045,7 +324420,7 @@ const tokenOnlyFlag = boolean$2("token-only").pipe(withDescription$2("Print only
 * it stays least-privilege unless the operator asks otherwise.
 */
 const pairingRoleFlag = choice("role", ["owner", "client"]).pipe(withDescription$2("Role for the issued pairing token."), withDefault("client"));
-const pairingCreateCommand = make$34("create", {
+const pairingCreateCommand = make$33("create", {
 	...authLocationFlags,
 	ttl: ttlFlag,
 	role: pairingRoleFlag,
@@ -324063,24 +324438,24 @@ const pairingCreateCommand = make$34("create", {
 		...isSome(flags.baseUrl) ? { baseUrl: flags.baseUrl.value } : {}
 	}));
 }), { quietLogs: flags.json })));
-const pairingListCommand = make$34("list", {
+const pairingListCommand = make$33("list", {
 	...authLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription$1("List active client pairing tokens without revealing their secrets."), withHandler((flags) => runWithAuthControlPlane(flags, (authControlPlane) => gen(function* () {
 	yield* log$3(formatPairingCredentialList(yield* authControlPlane.listPairingLinks({ role: "client" }), { json: flags.json }));
 }), { quietLogs: flags.json })));
-const pairingRevokeCommand = make$34("revoke", {
+const pairingRevokeCommand = make$33("revoke", {
 	...authLocationFlags,
 	id: string$4("id").pipe(withDescription$3("Pairing credential id to revoke."))
 }).pipe(withDescription$1("Revoke an active client pairing token."), withHandler((flags) => runWithAuthControlPlane(flags, (authControlPlane) => gen(function* () {
 	yield* log$3((yield* authControlPlane.revokePairingLink(flags.id)) ? `Revoked pairing credential ${flags.id}.\n` : `No active pairing credential found for ${flags.id}.\n`);
 }))));
-const pairingCommand = make$34("pairing").pipe(withDescription$1("Manage one-time client pairing tokens."), withSubcommands([
+const pairingCommand = make$33("pairing").pipe(withDescription$1("Manage one-time client pairing tokens."), withSubcommands([
 	pairingCreateCommand,
 	pairingListCommand,
 	pairingRevokeCommand
 ]));
-const sessionIssueCommand = make$34("issue", {
+const sessionIssueCommand = make$33("issue", {
 	...authLocationFlags,
 	ttl: ttlFlag,
 	role: sessionRoleFlag,
@@ -324099,25 +324474,25 @@ const sessionIssueCommand = make$34("issue", {
 		tokenOnly: flags.tokenOnly
 	}));
 }), { quietLogs: flags.json || flags.tokenOnly })));
-const sessionListCommand = make$34("list", {
+const sessionListCommand = make$33("list", {
 	...authLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription$1("List active sessions without revealing bearer tokens."), withHandler((flags) => runWithAuthControlPlane(flags, (authControlPlane) => gen(function* () {
 	yield* log$3(formatSessionList(yield* authControlPlane.listSessions(), { json: flags.json }));
 }), { quietLogs: flags.json })));
-const sessionRevokeCommand = make$34("revoke", {
+const sessionRevokeCommand = make$33("revoke", {
 	...authLocationFlags,
 	sessionId: string$4("session-id").pipe(withDescription$3("Session id to revoke."), withSchema$1(AuthSessionId))
 }).pipe(withDescription$1("Revoke an active session."), withHandler((flags) => runWithAuthControlPlane(flags, (authControlPlane) => gen(function* () {
 	yield* log$3((yield* authControlPlane.revokeSession(flags.sessionId)) ? `Revoked session ${flags.sessionId}.\n` : `No active session found for ${flags.sessionId}.\n`);
 }))));
-const sessionCommand = make$34("session").pipe(withDescription$1("Manage bearer sessions."), withSubcommands([
+const sessionCommand = make$33("session").pipe(withDescription$1("Manage bearer sessions."), withSubcommands([
 	sessionIssueCommand,
 	sessionListCommand,
 	sessionRevokeCommand
 ]));
-const authCommand = make$34("auth").pipe(withDescription$1("Manage the local auth control plane for headless deployments."), withSubcommands([pairingCommand, sessionCommand]));
-const projectAddCommand = make$34("add", {
+const authCommand = make$33("auth").pipe(withDescription$1("Manage the local auth control plane for headless deployments."), withSubcommands([pairingCommand, sessionCommand]));
+const projectAddCommand = make$33("add", {
 	...projectLocationFlags,
 	workspaceRoot: string$4("path").pipe(withDescription$3("Workspace root to add as a project.")),
 	title: string$3("title").pipe(withDescription$2("Optional project title."), optional$1)
@@ -324137,7 +324512,7 @@ const projectAddCommand = make$34("add", {
 	});
 	return `Added project ${projectId} (${title}) at ${workspaceRoot}.`;
 }))));
-const projectRemoveCommand = make$34("remove", {
+const projectRemoveCommand = make$33("remove", {
 	...projectLocationFlags,
 	project: string$4("project").pipe(withDescription$3("Project id or workspace root to remove."))
 }).pipe(withDescription$1("Remove a project."), withHandler((flags) => runProjectMutation(flags, fn$1("projectRemoveMutation")(function* ({ snapshot, dispatch }) {
@@ -324152,7 +324527,7 @@ const projectRemoveCommand = make$34("remove", {
 	});
 	return `Removed project ${project.id} (${project.title}).`;
 }))));
-const projectRenameCommand = make$34("rename", {
+const projectRenameCommand = make$33("rename", {
 	...projectLocationFlags,
 	project: string$4("project").pipe(withDescription$3("Project id or workspace root to rename.")),
 	title: string$4("title").pipe(withDescription$3("New project title."))
@@ -324175,12 +324550,12 @@ const parseCmmdProjectId = (value) => {
 	const projectId = Number(value);
 	return Number.isSafeInteger(projectId) && projectId > 0 ? succeed(projectId) : fail(/* @__PURE__ */ new Error(`Invalid CMMD project id '${value}'. Expected a positive integer.`));
 };
-const projectLeadExplainCommand = make$34("explain", {
+const projectLeadExplainCommand = make$33("explain", {
 	...projectLocationFlags,
 	projectId: string$4("project-id").pipe(withDescription$3("Numeric CMMD project id.")),
 	json: jsonFlag
 }).pipe(withDescription$1("Explain canonical Project Lead controller state."), withHandler((flags) => parseCmmdProjectId(flags.projectId).pipe(flatMap((projectId) => runProjectLeadQuery(flags, projectId, (explanation) => flags.json ? JSON.stringify(explanation, null, 2) : formatProjectLeadExplanation(projectId, explanation))))));
-const projectLeadDoctorCommand = make$34("doctor", {
+const projectLeadDoctorCommand = make$33("doctor", {
 	...projectLocationFlags,
 	projectId: string$4("project-id").pipe(withDescription$3("Numeric CMMD project id.")),
 	json: jsonFlag
@@ -324188,7 +324563,7 @@ const projectLeadDoctorCommand = make$34("doctor", {
 	const report = diagnoseProjectLead(projectId, explanation);
 	return flags.json ? JSON.stringify(report, null, 2) : formatProjectLeadDoctor(report);
 })))));
-const projectLeadCommand = make$34("lead").pipe(withDescription$1("Inspect the CMMD-owned Project Lead controller."), withSubcommands([projectLeadExplainCommand, projectLeadDoctorCommand]));
+const projectLeadCommand = make$33("lead").pipe(withDescription$1("Inspect the CMMD-owned Project Lead controller."), withSubcommands([projectLeadExplainCommand, projectLeadDoctorCommand]));
 const connectStatePathFor = fn$1("connectStatePathFor")(function* (flags) {
 	const config = yield* resolveCliAuthConfig(flags, yield* LogLevel);
 	return (yield* Path$2).join(config.stateDir, "connect.json");
@@ -324201,18 +324576,18 @@ const runConnectCommand = (flags, update) => gen(function* () {
 	const state = next ?? current;
 	yield* log$3(flags.json ? JSON.stringify(state, null, 2) : formatConnectStatus(state));
 });
-const connectStatusCommand = make$34("status", {
+const connectStatusCommand = make$33("status", {
 	...projectLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription$1("Show whether this machine is offered to CMMD over the relay."), withHandler((flags) => runConnectCommand(flags, () => null)));
-const connectLinkCommand = make$34("link", {
+const connectLinkCommand = make$33("link", {
 	...projectLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription$1("Offer this machine to CMMD over the relay on the next start."), withHandler((flags) => runConnectCommand(flags, (current) => ({
 	...current,
 	linked: true
 }))));
-const connectUnlinkCommand = make$34("unlink", {
+const connectUnlinkCommand = make$33("unlink", {
 	...projectLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription$1("Stop offering this machine, keeping its runtime identity so relinking is the same device."), withHandler((flags) => runConnectCommand(flags, (current) => ({
@@ -324223,7 +324598,7 @@ const noBrowserLoginFlag = boolean$2("no-browser").pipe(withDescription$2("Print
 const CONNECT_CLI_CLIENT_ID = "cmmd-forge-web";
 const connectSecretsFor = (stateDir) => createFileSecretStorage({ keyPath: Path$1.join(stateDir, "connect-secret.key") });
 const loginEmailFlag = string$3("email").pipe(withDescription$2("Sign in with this CMMD email and a password prompt instead of the browser flow."), optional$1);
-const connectLoginCommand = make$34("login", {
+const connectLoginCommand = make$33("login", {
 	...projectLocationFlags,
 	noBrowser: noBrowserLoginFlag,
 	email: loginEmailFlag
@@ -324290,7 +324665,7 @@ const connectLoginCommand = make$34("login", {
 	});
 	yield* log$3("Signed in to CMMD. Run `cmmd-forge connect link` to offer this machine.");
 })));
-const connectLogoutCommand = make$34("logout", { ...projectLocationFlags }).pipe(withDescription$1("Sign this machine out of CMMD and stop offering it."), withHandler((flags) => gen(function* () {
+const connectLogoutCommand = make$33("logout", { ...projectLocationFlags }).pipe(withDescription$1("Sign this machine out of CMMD and stop offering it."), withHandler((flags) => gen(function* () {
 	const config = yield* resolveCliAuthConfig(flags, yield* LogLevel);
 	const statePath = Path$1.join(config.stateDir, "connect.json");
 	writeConnectState(statePath, {
@@ -324300,14 +324675,14 @@ const connectLogoutCommand = make$34("logout", { ...projectLocationFlags }).pipe
 	clearConnectCredential(Path$1.join(config.stateDir, "connect-credential.json"));
 	yield* log$3("Signed out of CMMD and stopped offering this machine.");
 })));
-const connectCommand = make$34("connect").pipe(withDescription$1("Offer this machine to CMMD so other surfaces can reach it."), withSubcommands([
+const connectCommand = make$33("connect").pipe(withDescription$1("Offer this machine to CMMD so other surfaces can reach it."), withSubcommands([
 	connectStatusCommand,
 	connectLoginCommand,
 	connectLogoutCommand,
 	connectLinkCommand,
 	connectUnlinkCommand
 ]));
-const projectCommand = make$34("project").pipe(withDescription$1("Manage projects."), withSubcommands([
+const projectCommand = make$33("project").pipe(withDescription$1("Manage projects."), withSubcommands([
 	projectAddCommand,
 	projectRemoveCommand,
 	projectRenameCommand,
@@ -324322,12 +324697,12 @@ const runServerCommand = (flags, options) => gen(function* () {
 	});
 	return yield* runServer.pipe(provideService(ServerConfig, config));
 });
-const startCommand = make$34("start", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server."), withHandler((flags) => runServerCommand(flags)));
-const serveCommand = make$34("serve", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server without opening a browser and print headless pairing details."), withHandler((flags) => runServerCommand(flags, {
+const startCommand = make$33("start", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server."), withHandler((flags) => runServerCommand(flags)));
+const serveCommand = make$33("serve", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server without opening a browser and print headless pairing details."), withHandler((flags) => runServerCommand(flags, {
 	startupPresentation: "headless",
 	forceAutoBootstrapProjectFromCwd: false
 })));
-const cli = make$34("cmmd-forge", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server."), withHandler((flags) => runServerCommand(flags)), withSubcommands([
+const cli = make$33("cmmd-forge", { ...sharedServerCommandFlags }).pipe(withDescription$1("Run the Forge server."), withHandler((flags) => runServerCommand(flags)), withSubcommands([
 	startCommand,
 	serveCommand,
 	authCommand,