@corca-org/ceal-host-linux-arm64 1.0.18 → 1.0.20

package/libexec/ceal-host/codex-invocation-authentication.mjs

@@ -1,6 +1,2036 @@
 #!/usr/bin/env node
 import { createRequire as __cealCreateRequire } from "node:module";
 const require = __cealCreateRequire(import.meta.url);
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var __commonJS = (cb, mod) => function __require2() {
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/parser.js
+var require_parser = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/parser.js"(exports2, module2) {
+    "use strict";
+    var ParserEND = 1114112;
+    var ParserError = class _ParserError extends Error {
+      /* istanbul ignore next */
+      constructor(msg, filename, linenumber) {
+        super("[ParserError] " + msg, filename, linenumber);
+        this.name = "ParserError";
+        this.code = "ParserError";
+        if (Error.captureStackTrace) Error.captureStackTrace(this, _ParserError);
+      }
+    };
+    var State = class {
+      constructor(parser) {
+        this.parser = parser;
+        this.buf = "";
+        this.returned = null;
+        this.result = null;
+        this.resultTable = null;
+        this.resultArr = null;
+      }
+    };
+    var Parser = class {
+      constructor() {
+        this.pos = 0;
+        this.col = 0;
+        this.line = 0;
+        this.obj = {};
+        this.ctx = this.obj;
+        this.stack = [];
+        this._buf = "";
+        this.char = null;
+        this.ii = 0;
+        this.state = new State(this.parseStart);
+      }
+      parse(str) {
+        if (str.length === 0 || str.length == null) return;
+        this._buf = String(str);
+        this.ii = -1;
+        this.char = -1;
+        let getNext;
+        while (getNext === false || this.nextChar()) {
+          getNext = this.runOne();
+        }
+        this._buf = null;
+      }
+      nextChar() {
+        if (this.char === 10) {
+          ++this.line;
+          this.col = -1;
+        }
+        ++this.ii;
+        this.char = this._buf.codePointAt(this.ii);
+        ++this.pos;
+        ++this.col;
+        return this.haveBuffer();
+      }
+      haveBuffer() {
+        return this.ii < this._buf.length;
+      }
+      runOne() {
+        return this.state.parser.call(this, this.state.returned);
+      }
+      finish() {
+        this.char = ParserEND;
+        let last;
+        do {
+          last = this.state.parser;
+          this.runOne();
+        } while (this.state.parser !== last);
+        this.ctx = null;
+        this.state = null;
+        this._buf = null;
+        return this.obj;
+      }
+      next(fn) {
+        if (typeof fn !== "function") throw new ParserError("Tried to set state to non-existent state: " + JSON.stringify(fn));
+        this.state.parser = fn;
+      }
+      goto(fn) {
+        this.next(fn);
+        return this.runOne();
+      }
+      call(fn, returnWith) {
+        if (returnWith) this.next(returnWith);
+        this.stack.push(this.state);
+        this.state = new State(fn);
+      }
+      callNow(fn, returnWith) {
+        this.call(fn, returnWith);
+        return this.runOne();
+      }
+      return(value) {
+        if (this.stack.length === 0) throw this.error(new ParserError("Stack underflow"));
+        if (value === void 0) value = this.state.buf;
+        this.state = this.stack.pop();
+        this.state.returned = value;
+      }
+      returnNow(value) {
+        this.return(value);
+        return this.runOne();
+      }
+      consume() {
+        if (this.char === ParserEND) throw this.error(new ParserError("Unexpected end-of-buffer"));
+        this.state.buf += this._buf[this.ii];
+      }
+      error(err) {
+        err.line = this.line;
+        err.col = this.col;
+        err.pos = this.pos;
+        return err;
+      }
+      /* istanbul ignore next */
+      parseStart() {
+        throw new ParserError("Must declare a parseStart method");
+      }
+    };
+    Parser.END = ParserEND;
+    Parser.Error = ParserError;
+    module2.exports = Parser;
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-datetime.js
+var require_create_datetime = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-datetime.js"(exports2, module2) {
+    "use strict";
+    module2.exports = (value) => {
+      const date = new Date(value);
+      if (isNaN(date)) {
+        throw new TypeError("Invalid Datetime");
+      } else {
+        return date;
+      }
+    };
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/format-num.js
+var require_format_num = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/format-num.js"(exports2, module2) {
+    "use strict";
+    module2.exports = (d, num) => {
+      num = String(num);
+      while (num.length < d) num = "0" + num;
+      return num;
+    };
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-datetime-float.js
+var require_create_datetime_float = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-datetime-float.js"(exports2, module2) {
+    "use strict";
+    var f = require_format_num();
+    var FloatingDateTime = class extends Date {
+      constructor(value) {
+        super(value + "Z");
+        this.isFloating = true;
+      }
+      toISOString() {
+        const date = `${this.getUTCFullYear()}-${f(2, this.getUTCMonth() + 1)}-${f(2, this.getUTCDate())}`;
+        const time = `${f(2, this.getUTCHours())}:${f(2, this.getUTCMinutes())}:${f(2, this.getUTCSeconds())}.${f(3, this.getUTCMilliseconds())}`;
+        return `${date}T${time}`;
+      }
+    };
+    module2.exports = (value) => {
+      const date = new FloatingDateTime(value);
+      if (isNaN(date)) {
+        throw new TypeError("Invalid Datetime");
+      } else {
+        return date;
+      }
+    };
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-date.js
+var require_create_date = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-date.js"(exports2, module2) {
+    "use strict";
+    var f = require_format_num();
+    var DateTime = global.Date;
+    var Date2 = class extends DateTime {
+      constructor(value) {
+        super(value);
+        this.isDate = true;
+      }
+      toISOString() {
+        return `${this.getUTCFullYear()}-${f(2, this.getUTCMonth() + 1)}-${f(2, this.getUTCDate())}`;
+      }
+    };
+    module2.exports = (value) => {
+      const date = new Date2(value);
+      if (isNaN(date)) {
+        throw new TypeError("Invalid Datetime");
+      } else {
+        return date;
+      }
+    };
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-time.js
+var require_create_time = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-time.js"(exports2, module2) {
+    "use strict";
+    var f = require_format_num();
+    var Time = class extends Date {
+      constructor(value) {
+        super(`0000-01-01T${value}Z`);
+        this.isTime = true;
+      }
+      toISOString() {
+        return `${f(2, this.getUTCHours())}:${f(2, this.getUTCMinutes())}:${f(2, this.getUTCSeconds())}.${f(3, this.getUTCMilliseconds())}`;
+      }
+    };
+    module2.exports = (value) => {
+      const date = new Time(value);
+      if (isNaN(date)) {
+        throw new TypeError("Invalid Datetime");
+      } else {
+        return date;
+      }
+    };
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/toml-parser.js
+var require_toml_parser = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/toml-parser.js"(exports, module) {
+    "use strict";
+    module.exports = makeParserClass(require_parser());
+    module.exports.makeParserClass = makeParserClass;
+    var TomlError = class _TomlError extends Error {
+      constructor(msg) {
+        super(msg);
+        this.name = "TomlError";
+        if (Error.captureStackTrace) Error.captureStackTrace(this, _TomlError);
+        this.fromTOML = true;
+        this.wrapped = null;
+      }
+    };
+    TomlError.wrap = (err) => {
+      const terr = new TomlError(err.message);
+      terr.code = err.code;
+      terr.wrapped = err;
+      return terr;
+    };
+    module.exports.TomlError = TomlError;
+    var createDateTime = require_create_datetime();
+    var createDateTimeFloat = require_create_datetime_float();
+    var createDate = require_create_date();
+    var createTime = require_create_time();
+    var CTRL_I = 9;
+    var CTRL_J = 10;
+    var CTRL_M = 13;
+    var CTRL_CHAR_BOUNDARY = 31;
+    var CHAR_SP = 32;
+    var CHAR_QUOT = 34;
+    var CHAR_NUM = 35;
+    var CHAR_APOS = 39;
+    var CHAR_PLUS = 43;
+    var CHAR_COMMA = 44;
+    var CHAR_HYPHEN = 45;
+    var CHAR_PERIOD = 46;
+    var CHAR_0 = 48;
+    var CHAR_1 = 49;
+    var CHAR_7 = 55;
+    var CHAR_9 = 57;
+    var CHAR_COLON = 58;
+    var CHAR_EQUALS = 61;
+    var CHAR_A = 65;
+    var CHAR_E = 69;
+    var CHAR_F = 70;
+    var CHAR_T = 84;
+    var CHAR_U = 85;
+    var CHAR_Z = 90;
+    var CHAR_LOWBAR = 95;
+    var CHAR_a = 97;
+    var CHAR_b = 98;
+    var CHAR_e = 101;
+    var CHAR_f = 102;
+    var CHAR_i = 105;
+    var CHAR_l = 108;
+    var CHAR_n = 110;
+    var CHAR_o = 111;
+    var CHAR_r = 114;
+    var CHAR_s = 115;
+    var CHAR_t = 116;
+    var CHAR_u = 117;
+    var CHAR_x = 120;
+    var CHAR_z = 122;
+    var CHAR_LCUB = 123;
+    var CHAR_RCUB = 125;
+    var CHAR_LSQB = 91;
+    var CHAR_BSOL = 92;
+    var CHAR_RSQB = 93;
+    var CHAR_DEL = 127;
+    var SURROGATE_FIRST = 55296;
+    var SURROGATE_LAST = 57343;
+    var escapes = {
+      [CHAR_b]: "\b",
+      [CHAR_t]: "	",
+      [CHAR_n]: "\n",
+      [CHAR_f]: "\f",
+      [CHAR_r]: "\r",
+      [CHAR_QUOT]: '"',
+      [CHAR_BSOL]: "\\"
+    };
+    function isDigit(cp) {
+      return cp >= CHAR_0 && cp <= CHAR_9;
+    }
+    function isHexit(cp) {
+      return cp >= CHAR_A && cp <= CHAR_F || cp >= CHAR_a && cp <= CHAR_f || cp >= CHAR_0 && cp <= CHAR_9;
+    }
+    function isBit(cp) {
+      return cp === CHAR_1 || cp === CHAR_0;
+    }
+    function isOctit(cp) {
+      return cp >= CHAR_0 && cp <= CHAR_7;
+    }
+    function isAlphaNumQuoteHyphen(cp) {
+      return cp >= CHAR_A && cp <= CHAR_Z || cp >= CHAR_a && cp <= CHAR_z || cp >= CHAR_0 && cp <= CHAR_9 || cp === CHAR_APOS || cp === CHAR_QUOT || cp === CHAR_LOWBAR || cp === CHAR_HYPHEN;
+    }
+    function isAlphaNumHyphen(cp) {
+      return cp >= CHAR_A && cp <= CHAR_Z || cp >= CHAR_a && cp <= CHAR_z || cp >= CHAR_0 && cp <= CHAR_9 || cp === CHAR_LOWBAR || cp === CHAR_HYPHEN;
+    }
+    var _type = /* @__PURE__ */ Symbol("type");
+    var _declared = /* @__PURE__ */ Symbol("declared");
+    var hasOwnProperty = Object.prototype.hasOwnProperty;
+    var defineProperty = Object.defineProperty;
+    var descriptor = { configurable: true, enumerable: true, writable: true, value: void 0 };
+    function hasKey(obj, key) {
+      if (hasOwnProperty.call(obj, key)) return true;
+      if (key === "__proto__") defineProperty(obj, "__proto__", descriptor);
+      return false;
+    }
+    var INLINE_TABLE = /* @__PURE__ */ Symbol("inline-table");
+    function InlineTable() {
+      return Object.defineProperties({}, {
+        [_type]: { value: INLINE_TABLE }
+      });
+    }
+    function isInlineTable(obj) {
+      if (obj === null || typeof obj !== "object") return false;
+      return obj[_type] === INLINE_TABLE;
+    }
+    var TABLE = /* @__PURE__ */ Symbol("table");
+    function Table() {
+      return Object.defineProperties({}, {
+        [_type]: { value: TABLE },
+        [_declared]: { value: false, writable: true }
+      });
+    }
+    function isTable(obj) {
+      if (obj === null || typeof obj !== "object") return false;
+      return obj[_type] === TABLE;
+    }
+    var _contentType = /* @__PURE__ */ Symbol("content-type");
+    var INLINE_LIST = /* @__PURE__ */ Symbol("inline-list");
+    function InlineList(type) {
+      return Object.defineProperties([], {
+        [_type]: { value: INLINE_LIST },
+        [_contentType]: { value: type }
+      });
+    }
+    function isInlineList(obj) {
+      if (obj === null || typeof obj !== "object") return false;
+      return obj[_type] === INLINE_LIST;
+    }
+    var LIST = /* @__PURE__ */ Symbol("list");
+    function List() {
+      return Object.defineProperties([], {
+        [_type]: { value: LIST }
+      });
+    }
+    function isList(obj) {
+      if (obj === null || typeof obj !== "object") return false;
+      return obj[_type] === LIST;
+    }
+    var _custom;
+    try {
+      const utilInspect = eval("require('util').inspect");
+      _custom = utilInspect.custom;
+    } catch (_) {
+    }
+    var _inspect = _custom || "inspect";
+    var BoxedBigInt = class {
+      constructor(value) {
+        try {
+          this.value = global.BigInt.asIntN(64, value);
+        } catch (_) {
+          this.value = null;
+        }
+        Object.defineProperty(this, _type, { value: INTEGER });
+      }
+      isNaN() {
+        return this.value === null;
+      }
+      /* istanbul ignore next */
+      toString() {
+        return String(this.value);
+      }
+      /* istanbul ignore next */
+      [_inspect]() {
+        return `[BigInt: ${this.toString()}]}`;
+      }
+      valueOf() {
+        return this.value;
+      }
+    };
+    var INTEGER = /* @__PURE__ */ Symbol("integer");
+    function Integer(value) {
+      let num = Number(value);
+      if (Object.is(num, -0)) num = 0;
+      if (global.BigInt && !Number.isSafeInteger(num)) {
+        return new BoxedBigInt(value);
+      } else {
+        return Object.defineProperties(new Number(num), {
+          isNaN: { value: function() {
+            return isNaN(this);
+          } },
+          [_type]: { value: INTEGER },
+          [_inspect]: { value: () => `[Integer: ${value}]` }
+        });
+      }
+    }
+    function isInteger(obj) {
+      if (obj === null || typeof obj !== "object") return false;
+      return obj[_type] === INTEGER;
+    }
+    var FLOAT = /* @__PURE__ */ Symbol("float");
+    function Float(value) {
+      return Object.defineProperties(new Number(value), {
+        [_type]: { value: FLOAT },
+        [_inspect]: { value: () => `[Float: ${value}]` }
+      });
+    }
+    function isFloat(obj) {
+      if (obj === null || typeof obj !== "object") return false;
+      return obj[_type] === FLOAT;
+    }
+    function tomlType(value) {
+      const type = typeof value;
+      if (type === "object") {
+        if (value === null) return "null";
+        if (value instanceof Date) return "datetime";
+        if (_type in value) {
+          switch (value[_type]) {
+            case INLINE_TABLE:
+              return "inline-table";
+            case INLINE_LIST:
+              return "inline-list";
+            /* istanbul ignore next */
+            case TABLE:
+              return "table";
+            /* istanbul ignore next */
+            case LIST:
+              return "list";
+            case FLOAT:
+              return "float";
+            case INTEGER:
+              return "integer";
+          }
+        }
+      }
+      return type;
+    }
+    function makeParserClass(Parser) {
+      class TOMLParser extends Parser {
+        constructor() {
+          super();
+          this.ctx = this.obj = Table();
+        }
+        /* MATCH HELPER */
+        atEndOfWord() {
+          return this.char === CHAR_NUM || this.char === CTRL_I || this.char === CHAR_SP || this.atEndOfLine();
+        }
+        atEndOfLine() {
+          return this.char === Parser.END || this.char === CTRL_J || this.char === CTRL_M;
+        }
+        parseStart() {
+          if (this.char === Parser.END) {
+            return null;
+          } else if (this.char === CHAR_LSQB) {
+            return this.call(this.parseTableOrList);
+          } else if (this.char === CHAR_NUM) {
+            return this.call(this.parseComment);
+          } else if (this.char === CTRL_J || this.char === CHAR_SP || this.char === CTRL_I || this.char === CTRL_M) {
+            return null;
+          } else if (isAlphaNumQuoteHyphen(this.char)) {
+            return this.callNow(this.parseAssignStatement);
+          } else {
+            throw this.error(new TomlError(`Unknown character "${this.char}"`));
+          }
+        }
+        // HELPER, this strips any whitespace and comments to the end of the line
+        // then RETURNS. Last state in a production.
+        parseWhitespaceToEOL() {
+          if (this.char === CHAR_SP || this.char === CTRL_I || this.char === CTRL_M) {
+            return null;
+          } else if (this.char === CHAR_NUM) {
+            return this.goto(this.parseComment);
+          } else if (this.char === Parser.END || this.char === CTRL_J) {
+            return this.return();
+          } else {
+            throw this.error(new TomlError("Unexpected character, expected only whitespace or comments till end of line"));
+          }
+        }
+        /* ASSIGNMENT: key = value */
+        parseAssignStatement() {
+          return this.callNow(this.parseAssign, this.recordAssignStatement);
+        }
+        recordAssignStatement(kv) {
+          let target = this.ctx;
+          let finalKey = kv.key.pop();
+          for (let kw of kv.key) {
+            if (hasKey(target, kw) && (!isTable(target[kw]) || target[kw][_declared])) {
+              throw this.error(new TomlError("Can't redefine existing key"));
+            }
+            target = target[kw] = target[kw] || Table();
+          }
+          if (hasKey(target, finalKey)) {
+            throw this.error(new TomlError("Can't redefine existing key"));
+          }
+          if (isInteger(kv.value) || isFloat(kv.value)) {
+            target[finalKey] = kv.value.valueOf();
+          } else {
+            target[finalKey] = kv.value;
+          }
+          return this.goto(this.parseWhitespaceToEOL);
+        }
+        /* ASSSIGNMENT expression, key = value possibly inside an inline table */
+        parseAssign() {
+          return this.callNow(this.parseKeyword, this.recordAssignKeyword);
+        }
+        recordAssignKeyword(key) {
+          if (this.state.resultTable) {
+            this.state.resultTable.push(key);
+          } else {
+            this.state.resultTable = [key];
+          }
+          return this.goto(this.parseAssignKeywordPreDot);
+        }
+        parseAssignKeywordPreDot() {
+          if (this.char === CHAR_PERIOD) {
+            return this.next(this.parseAssignKeywordPostDot);
+          } else if (this.char !== CHAR_SP && this.char !== CTRL_I) {
+            return this.goto(this.parseAssignEqual);
+          }
+        }
+        parseAssignKeywordPostDot() {
+          if (this.char !== CHAR_SP && this.char !== CTRL_I) {
+            return this.callNow(this.parseKeyword, this.recordAssignKeyword);
+          }
+        }
+        parseAssignEqual() {
+          if (this.char === CHAR_EQUALS) {
+            return this.next(this.parseAssignPreValue);
+          } else {
+            throw this.error(new TomlError('Invalid character, expected "="'));
+          }
+        }
+        parseAssignPreValue() {
+          if (this.char === CHAR_SP || this.char === CTRL_I) {
+            return null;
+          } else {
+            return this.callNow(this.parseValue, this.recordAssignValue);
+          }
+        }
+        recordAssignValue(value) {
+          return this.returnNow({ key: this.state.resultTable, value });
+        }
+        /* COMMENTS: #...eol */
+        parseComment() {
+          do {
+            if (this.char === Parser.END || this.char === CTRL_J) {
+              return this.return();
+            }
+          } while (this.nextChar());
+        }
+        /* TABLES AND LISTS, [foo] and [[foo]] */
+        parseTableOrList() {
+          if (this.char === CHAR_LSQB) {
+            this.next(this.parseList);
+          } else {
+            return this.goto(this.parseTable);
+          }
+        }
+        /* TABLE [foo.bar.baz] */
+        parseTable() {
+          this.ctx = this.obj;
+          return this.goto(this.parseTableNext);
+        }
+        parseTableNext() {
+          if (this.char === CHAR_SP || this.char === CTRL_I) {
+            return null;
+          } else {
+            return this.callNow(this.parseKeyword, this.parseTableMore);
+          }
+        }
+        parseTableMore(keyword) {
+          if (this.char === CHAR_SP || this.char === CTRL_I) {
+            return null;
+          } else if (this.char === CHAR_RSQB) {
+            if (hasKey(this.ctx, keyword) && (!isTable(this.ctx[keyword]) || this.ctx[keyword][_declared])) {
+              throw this.error(new TomlError("Can't redefine existing key"));
+            } else {
+              this.ctx = this.ctx[keyword] = this.ctx[keyword] || Table();
+              this.ctx[_declared] = true;
+            }
+            return this.next(this.parseWhitespaceToEOL);
+          } else if (this.char === CHAR_PERIOD) {
+            if (!hasKey(this.ctx, keyword)) {
+              this.ctx = this.ctx[keyword] = Table();
+            } else if (isTable(this.ctx[keyword])) {
+              this.ctx = this.ctx[keyword];
+            } else if (isList(this.ctx[keyword])) {
+              this.ctx = this.ctx[keyword][this.ctx[keyword].length - 1];
+            } else {
+              throw this.error(new TomlError("Can't redefine existing key"));
+            }
+            return this.next(this.parseTableNext);
+          } else {
+            throw this.error(new TomlError("Unexpected character, expected whitespace, . or ]"));
+          }
+        }
+        /* LIST [[a.b.c]] */
+        parseList() {
+          this.ctx = this.obj;
+          return this.goto(this.parseListNext);
+        }
+        parseListNext() {
+          if (this.char === CHAR_SP || this.char === CTRL_I) {
+            return null;
+          } else {
+            return this.callNow(this.parseKeyword, this.parseListMore);
+          }
+        }
+        parseListMore(keyword) {
+          if (this.char === CHAR_SP || this.char === CTRL_I) {
+            return null;
+          } else if (this.char === CHAR_RSQB) {
+            if (!hasKey(this.ctx, keyword)) {
+              this.ctx[keyword] = List();
+            }
+            if (isInlineList(this.ctx[keyword])) {
+              throw this.error(new TomlError("Can't extend an inline array"));
+            } else if (isList(this.ctx[keyword])) {
+              const next = Table();
+              this.ctx[keyword].push(next);
+              this.ctx = next;
+            } else {
+              throw this.error(new TomlError("Can't redefine an existing key"));
+            }
+            return this.next(this.parseListEnd);
+          } else if (this.char === CHAR_PERIOD) {
+            if (!hasKey(this.ctx, keyword)) {
+              this.ctx = this.ctx[keyword] = Table();
+            } else if (isInlineList(this.ctx[keyword])) {
+              throw this.error(new TomlError("Can't extend an inline array"));
+            } else if (isInlineTable(this.ctx[keyword])) {
+              throw this.error(new TomlError("Can't extend an inline table"));
+            } else if (isList(this.ctx[keyword])) {
+              this.ctx = this.ctx[keyword][this.ctx[keyword].length - 1];
+            } else if (isTable(this.ctx[keyword])) {
+              this.ctx = this.ctx[keyword];
+            } else {
+              throw this.error(new TomlError("Can't redefine an existing key"));
+            }
+            return this.next(this.parseListNext);
+          } else {
+            throw this.error(new TomlError("Unexpected character, expected whitespace, . or ]"));
+          }
+        }
+        parseListEnd(keyword) {
+          if (this.char === CHAR_RSQB) {
+            return this.next(this.parseWhitespaceToEOL);
+          } else {
+            throw this.error(new TomlError("Unexpected character, expected whitespace, . or ]"));
+          }
+        }
+        /* VALUE string, number, boolean, inline list, inline object */
+        parseValue() {
+          if (this.char === Parser.END) {
+            throw this.error(new TomlError("Key without value"));
+          } else if (this.char === CHAR_QUOT) {
+            return this.next(this.parseDoubleString);
+          }
+          if (this.char === CHAR_APOS) {
+            return this.next(this.parseSingleString);
+          } else if (this.char === CHAR_HYPHEN || this.char === CHAR_PLUS) {
+            return this.goto(this.parseNumberSign);
+          } else if (this.char === CHAR_i) {
+            return this.next(this.parseInf);
+          } else if (this.char === CHAR_n) {
+            return this.next(this.parseNan);
+          } else if (isDigit(this.char)) {
+            return this.goto(this.parseNumberOrDateTime);
+          } else if (this.char === CHAR_t || this.char === CHAR_f) {
+            return this.goto(this.parseBoolean);
+          } else if (this.char === CHAR_LSQB) {
+            return this.call(this.parseInlineList, this.recordValue);
+          } else if (this.char === CHAR_LCUB) {
+            return this.call(this.parseInlineTable, this.recordValue);
+          } else {
+            throw this.error(new TomlError("Unexpected character, expecting string, number, datetime, boolean, inline array or inline table"));
+          }
+        }
+        recordValue(value) {
+          return this.returnNow(value);
+        }
+        parseInf() {
+          if (this.char === CHAR_n) {
+            return this.next(this.parseInf2);
+          } else {
+            throw this.error(new TomlError('Unexpected character, expected "inf", "+inf" or "-inf"'));
+          }
+        }
+        parseInf2() {
+          if (this.char === CHAR_f) {
+            if (this.state.buf === "-") {
+              return this.return(-Infinity);
+            } else {
+              return this.return(Infinity);
+            }
+          } else {
+            throw this.error(new TomlError('Unexpected character, expected "inf", "+inf" or "-inf"'));
+          }
+        }
+        parseNan() {
+          if (this.char === CHAR_a) {
+            return this.next(this.parseNan2);
+          } else {
+            throw this.error(new TomlError('Unexpected character, expected "nan"'));
+          }
+        }
+        parseNan2() {
+          if (this.char === CHAR_n) {
+            return this.return(NaN);
+          } else {
+            throw this.error(new TomlError('Unexpected character, expected "nan"'));
+          }
+        }
+        /* KEYS, barewords or basic, literal, or dotted */
+        parseKeyword() {
+          if (this.char === CHAR_QUOT) {
+            return this.next(this.parseBasicString);
+          } else if (this.char === CHAR_APOS) {
+            return this.next(this.parseLiteralString);
+          } else {
+            return this.goto(this.parseBareKey);
+          }
+        }
+        /* KEYS: barewords */
+        parseBareKey() {
+          do {
+            if (this.char === Parser.END) {
+              throw this.error(new TomlError("Key ended without value"));
+            } else if (isAlphaNumHyphen(this.char)) {
+              this.consume();
+            } else if (this.state.buf.length === 0) {
+              throw this.error(new TomlError("Empty bare keys are not allowed"));
+            } else {
+              return this.returnNow();
+            }
+          } while (this.nextChar());
+        }
+        /* STRINGS, single quoted (literal) */
+        parseSingleString() {
+          if (this.char === CHAR_APOS) {
+            return this.next(this.parseLiteralMultiStringMaybe);
+          } else {
+            return this.goto(this.parseLiteralString);
+          }
+        }
+        parseLiteralString() {
+          do {
+            if (this.char === CHAR_APOS) {
+              return this.return();
+            } else if (this.atEndOfLine()) {
+              throw this.error(new TomlError("Unterminated string"));
+            } else if (this.char === CHAR_DEL || this.char <= CTRL_CHAR_BOUNDARY && this.char !== CTRL_I) {
+              throw this.errorControlCharInString();
+            } else {
+              this.consume();
+            }
+          } while (this.nextChar());
+        }
+        parseLiteralMultiStringMaybe() {
+          if (this.char === CHAR_APOS) {
+            return this.next(this.parseLiteralMultiString);
+          } else {
+            return this.returnNow();
+          }
+        }
+        parseLiteralMultiString() {
+          if (this.char === CTRL_M) {
+            return null;
+          } else if (this.char === CTRL_J) {
+            return this.next(this.parseLiteralMultiStringContent);
+          } else {
+            return this.goto(this.parseLiteralMultiStringContent);
+          }
+        }
+        parseLiteralMultiStringContent() {
+          do {
+            if (this.char === CHAR_APOS) {
+              return this.next(this.parseLiteralMultiEnd);
+            } else if (this.char === Parser.END) {
+              throw this.error(new TomlError("Unterminated multi-line string"));
+            } else if (this.char === CHAR_DEL || this.char <= CTRL_CHAR_BOUNDARY && this.char !== CTRL_I && this.char !== CTRL_J && this.char !== CTRL_M) {
+              throw this.errorControlCharInString();
+            } else {
+              this.consume();
+            }
+          } while (this.nextChar());
+        }
+        parseLiteralMultiEnd() {
+          if (this.char === CHAR_APOS) {
+            return this.next(this.parseLiteralMultiEnd2);
+          } else {
+            this.state.buf += "'";
+            return this.goto(this.parseLiteralMultiStringContent);
+          }
+        }
+        parseLiteralMultiEnd2() {
+          if (this.char === CHAR_APOS) {
+            return this.return();
+          } else {
+            this.state.buf += "''";
+            return this.goto(this.parseLiteralMultiStringContent);
+          }
+        }
+        /* STRINGS double quoted */
+        parseDoubleString() {
+          if (this.char === CHAR_QUOT) {
+            return this.next(this.parseMultiStringMaybe);
+          } else {
+            return this.goto(this.parseBasicString);
+          }
+        }
+        parseBasicString() {
+          do {
+            if (this.char === CHAR_BSOL) {
+              return this.call(this.parseEscape, this.recordEscapeReplacement);
+            } else if (this.char === CHAR_QUOT) {
+              return this.return();
+            } else if (this.atEndOfLine()) {
+              throw this.error(new TomlError("Unterminated string"));
+            } else if (this.char === CHAR_DEL || this.char <= CTRL_CHAR_BOUNDARY && this.char !== CTRL_I) {
+              throw this.errorControlCharInString();
+            } else {
+              this.consume();
+            }
+          } while (this.nextChar());
+        }
+        recordEscapeReplacement(replacement) {
+          this.state.buf += replacement;
+          return this.goto(this.parseBasicString);
+        }
+        parseMultiStringMaybe() {
+          if (this.char === CHAR_QUOT) {
+            return this.next(this.parseMultiString);
+          } else {
+            return this.returnNow();
+          }
+        }
+        parseMultiString() {
+          if (this.char === CTRL_M) {
+            return null;
+          } else if (this.char === CTRL_J) {
+            return this.next(this.parseMultiStringContent);
+          } else {
+            return this.goto(this.parseMultiStringContent);
+          }
+        }
+        parseMultiStringContent() {
+          do {
+            if (this.char === CHAR_BSOL) {
+              return this.call(this.parseMultiEscape, this.recordMultiEscapeReplacement);
+            } else if (this.char === CHAR_QUOT) {
+              return this.next(this.parseMultiEnd);
+            } else if (this.char === Parser.END) {
+              throw this.error(new TomlError("Unterminated multi-line string"));
+            } else if (this.char === CHAR_DEL || this.char <= CTRL_CHAR_BOUNDARY && this.char !== CTRL_I && this.char !== CTRL_J && this.char !== CTRL_M) {
+              throw this.errorControlCharInString();
+            } else {
+              this.consume();
+            }
+          } while (this.nextChar());
+        }
+        errorControlCharInString() {
+          let displayCode = "\\u00";
+          if (this.char < 16) {
+            displayCode += "0";
+          }
+          displayCode += this.char.toString(16);
+          return this.error(new TomlError(`Control characters (codes < 0x1f and 0x7f) are not allowed in strings, use ${displayCode} instead`));
+        }
+        recordMultiEscapeReplacement(replacement) {
+          this.state.buf += replacement;
+          return this.goto(this.parseMultiStringContent);
+        }
+        parseMultiEnd() {
+          if (this.char === CHAR_QUOT) {
+            return this.next(this.parseMultiEnd2);
+          } else {
+            this.state.buf += '"';
+            return this.goto(this.parseMultiStringContent);
+          }
+        }
+        parseMultiEnd2() {
+          if (this.char === CHAR_QUOT) {
+            return this.return();
+          } else {
+            this.state.buf += '""';
+            return this.goto(this.parseMultiStringContent);
+          }
+        }
+        parseMultiEscape() {
+          if (this.char === CTRL_M || this.char === CTRL_J) {
+            return this.next(this.parseMultiTrim);
+          } else if (this.char === CHAR_SP || this.char === CTRL_I) {
+            return this.next(this.parsePreMultiTrim);
+          } else {
+            return this.goto(this.parseEscape);
+          }
+        }
+        parsePreMultiTrim() {
+          if (this.char === CHAR_SP || this.char === CTRL_I) {
+            return null;
+          } else if (this.char === CTRL_M || this.char === CTRL_J) {
+            return this.next(this.parseMultiTrim);
+          } else {
+            throw this.error(new TomlError("Can't escape whitespace"));
+          }
+        }
+        parseMultiTrim() {
+          if (this.char === CTRL_J || this.char === CHAR_SP || this.char === CTRL_I || this.char === CTRL_M) {
+            return null;
+          } else {
+            return this.returnNow();
+          }
+        }
+        parseEscape() {
+          if (this.char in escapes) {
+            return this.return(escapes[this.char]);
+          } else if (this.char === CHAR_u) {
+            return this.call(this.parseSmallUnicode, this.parseUnicodeReturn);
+          } else if (this.char === CHAR_U) {
+            return this.call(this.parseLargeUnicode, this.parseUnicodeReturn);
+          } else {
+            throw this.error(new TomlError("Unknown escape character: " + this.char));
+          }
+        }
+        parseUnicodeReturn(char) {
+          try {
+            const codePoint = parseInt(char, 16);
+            if (codePoint >= SURROGATE_FIRST && codePoint <= SURROGATE_LAST) {
+              throw this.error(new TomlError("Invalid unicode, character in range 0xD800 - 0xDFFF is reserved"));
+            }
+            return this.returnNow(String.fromCodePoint(codePoint));
+          } catch (err) {
+            throw this.error(TomlError.wrap(err));
+          }
+        }
+        parseSmallUnicode() {
+          if (!isHexit(this.char)) {
+            throw this.error(new TomlError("Invalid character in unicode sequence, expected hex"));
+          } else {
+            this.consume();
+            if (this.state.buf.length >= 4) return this.return();
+          }
+        }
+        parseLargeUnicode() {
+          if (!isHexit(this.char)) {
+            throw this.error(new TomlError("Invalid character in unicode sequence, expected hex"));
+          } else {
+            this.consume();
+            if (this.state.buf.length >= 8) return this.return();
+          }
+        }
+        /* NUMBERS */
+        parseNumberSign() {
+          this.consume();
+          return this.next(this.parseMaybeSignedInfOrNan);
+        }
+        parseMaybeSignedInfOrNan() {
+          if (this.char === CHAR_i) {
+            return this.next(this.parseInf);
+          } else if (this.char === CHAR_n) {
+            return this.next(this.parseNan);
+          } else {
+            return this.callNow(this.parseNoUnder, this.parseNumberIntegerStart);
+          }
+        }
+        parseNumberIntegerStart() {
+          if (this.char === CHAR_0) {
+            this.consume();
+            return this.next(this.parseNumberIntegerExponentOrDecimal);
+          } else {
+            return this.goto(this.parseNumberInteger);
+          }
+        }
+        parseNumberIntegerExponentOrDecimal() {
+          if (this.char === CHAR_PERIOD) {
+            this.consume();
+            return this.call(this.parseNoUnder, this.parseNumberFloat);
+          } else if (this.char === CHAR_E || this.char === CHAR_e) {
+            this.consume();
+            return this.next(this.parseNumberExponentSign);
+          } else {
+            return this.returnNow(Integer(this.state.buf));
+          }
+        }
+        parseNumberInteger() {
+          if (isDigit(this.char)) {
+            this.consume();
+          } else if (this.char === CHAR_LOWBAR) {
+            return this.call(this.parseNoUnder);
+          } else if (this.char === CHAR_E || this.char === CHAR_e) {
+            this.consume();
+            return this.next(this.parseNumberExponentSign);
+          } else if (this.char === CHAR_PERIOD) {
+            this.consume();
+            return this.call(this.parseNoUnder, this.parseNumberFloat);
+          } else {
+            const result = Integer(this.state.buf);
+            if (result.isNaN()) {
+              throw this.error(new TomlError("Invalid number"));
+            } else {
+              return this.returnNow(result);
+            }
+          }
+        }
+        parseNoUnder() {
+          if (this.char === CHAR_LOWBAR || this.char === CHAR_PERIOD || this.char === CHAR_E || this.char === CHAR_e) {
+            throw this.error(new TomlError("Unexpected character, expected digit"));
+          } else if (this.atEndOfWord()) {
+            throw this.error(new TomlError("Incomplete number"));
+          }
+          return this.returnNow();
+        }
+        parseNoUnderHexOctBinLiteral() {
+          if (this.char === CHAR_LOWBAR || this.char === CHAR_PERIOD) {
+            throw this.error(new TomlError("Unexpected character, expected digit"));
+          } else if (this.atEndOfWord()) {
+            throw this.error(new TomlError("Incomplete number"));
+          }
+          return this.returnNow();
+        }
+        parseNumberFloat() {
+          if (this.char === CHAR_LOWBAR) {
+            return this.call(this.parseNoUnder, this.parseNumberFloat);
+          } else if (isDigit(this.char)) {
+            this.consume();
+          } else if (this.char === CHAR_E || this.char === CHAR_e) {
+            this.consume();
+            return this.next(this.parseNumberExponentSign);
+          } else {
+            return this.returnNow(Float(this.state.buf));
+          }
+        }
+        parseNumberExponentSign() {
+          if (isDigit(this.char)) {
+            return this.goto(this.parseNumberExponent);
+          } else if (this.char === CHAR_HYPHEN || this.char === CHAR_PLUS) {
+            this.consume();
+            this.call(this.parseNoUnder, this.parseNumberExponent);
+          } else {
+            throw this.error(new TomlError("Unexpected character, expected -, + or digit"));
+          }
+        }
+        parseNumberExponent() {
+          if (isDigit(this.char)) {
+            this.consume();
+          } else if (this.char === CHAR_LOWBAR) {
+            return this.call(this.parseNoUnder);
+          } else {
+            return this.returnNow(Float(this.state.buf));
+          }
+        }
+        /* NUMBERS or DATETIMES  */
+        parseNumberOrDateTime() {
+          if (this.char === CHAR_0) {
+            this.consume();
+            return this.next(this.parseNumberBaseOrDateTime);
+          } else {
+            return this.goto(this.parseNumberOrDateTimeOnly);
+          }
+        }
+        parseNumberOrDateTimeOnly() {
+          if (this.char === CHAR_LOWBAR) {
+            return this.call(this.parseNoUnder, this.parseNumberInteger);
+          } else if (isDigit(this.char)) {
+            this.consume();
+            if (this.state.buf.length > 4) this.next(this.parseNumberInteger);
+          } else if (this.char === CHAR_E || this.char === CHAR_e) {
+            this.consume();
+            return this.next(this.parseNumberExponentSign);
+          } else if (this.char === CHAR_PERIOD) {
+            this.consume();
+            return this.call(this.parseNoUnder, this.parseNumberFloat);
+          } else if (this.char === CHAR_HYPHEN) {
+            return this.goto(this.parseDateTime);
+          } else if (this.char === CHAR_COLON) {
+            return this.goto(this.parseOnlyTimeHour);
+          } else {
+            return this.returnNow(Integer(this.state.buf));
+          }
+        }
+        parseDateTimeOnly() {
+          if (this.state.buf.length < 4) {
+            if (isDigit(this.char)) {
+              return this.consume();
+            } else if (this.char === CHAR_COLON) {
+              return this.goto(this.parseOnlyTimeHour);
+            } else {
+              throw this.error(new TomlError("Expected digit while parsing year part of a date"));
+            }
+          } else {
+            if (this.char === CHAR_HYPHEN) {
+              return this.goto(this.parseDateTime);
+            } else {
+              throw this.error(new TomlError("Expected hyphen (-) while parsing year part of date"));
+            }
+          }
+        }
+        parseNumberBaseOrDateTime() {
+          if (this.char === CHAR_b) {
+            this.consume();
+            return this.call(this.parseNoUnderHexOctBinLiteral, this.parseIntegerBin);
+          } else if (this.char === CHAR_o) {
+            this.consume();
+            return this.call(this.parseNoUnderHexOctBinLiteral, this.parseIntegerOct);
+          } else if (this.char === CHAR_x) {
+            this.consume();
+            return this.call(this.parseNoUnderHexOctBinLiteral, this.parseIntegerHex);
+          } else if (this.char === CHAR_PERIOD) {
+            return this.goto(this.parseNumberInteger);
+          } else if (isDigit(this.char)) {
+            return this.goto(this.parseDateTimeOnly);
+          } else {
+            return this.returnNow(Integer(this.state.buf));
+          }
+        }
+        parseIntegerHex() {
+          if (isHexit(this.char)) {
+            this.consume();
+          } else if (this.char === CHAR_LOWBAR) {
+            return this.call(this.parseNoUnderHexOctBinLiteral);
+          } else {
+            const result = Integer(this.state.buf);
+            if (result.isNaN()) {
+              throw this.error(new TomlError("Invalid number"));
+            } else {
+              return this.returnNow(result);
+            }
+          }
+        }
+        parseIntegerOct() {
+          if (isOctit(this.char)) {
+            this.consume();
+          } else if (this.char === CHAR_LOWBAR) {
+            return this.call(this.parseNoUnderHexOctBinLiteral);
+          } else {
+            const result = Integer(this.state.buf);
+            if (result.isNaN()) {
+              throw this.error(new TomlError("Invalid number"));
+            } else {
+              return this.returnNow(result);
+            }
+          }
+        }
+        parseIntegerBin() {
+          if (isBit(this.char)) {
+            this.consume();
+          } else if (this.char === CHAR_LOWBAR) {
+            return this.call(this.parseNoUnderHexOctBinLiteral);
+          } else {
+            const result = Integer(this.state.buf);
+            if (result.isNaN()) {
+              throw this.error(new TomlError("Invalid number"));
+            } else {
+              return this.returnNow(result);
+            }
+          }
+        }
+        /* DATETIME */
+        parseDateTime() {
+          if (this.state.buf.length < 4) {
+            throw this.error(new TomlError("Years less than 1000 must be zero padded to four characters"));
+          }
+          this.state.result = this.state.buf;
+          this.state.buf = "";
+          return this.next(this.parseDateMonth);
+        }
+        parseDateMonth() {
+          if (this.char === CHAR_HYPHEN) {
+            if (this.state.buf.length < 2) {
+              throw this.error(new TomlError("Months less than 10 must be zero padded to two characters"));
+            }
+            this.state.result += "-" + this.state.buf;
+            this.state.buf = "";
+            return this.next(this.parseDateDay);
+          } else if (isDigit(this.char)) {
+            this.consume();
+          } else {
+            throw this.error(new TomlError("Incomplete datetime"));
+          }
+        }
+        parseDateDay() {
+          if (this.char === CHAR_T || this.char === CHAR_SP) {
+            if (this.state.buf.length < 2) {
+              throw this.error(new TomlError("Days less than 10 must be zero padded to two characters"));
+            }
+            this.state.result += "-" + this.state.buf;
+            this.state.buf = "";
+            return this.next(this.parseStartTimeHour);
+          } else if (this.atEndOfWord()) {
+            return this.returnNow(createDate(this.state.result + "-" + this.state.buf));
+          } else if (isDigit(this.char)) {
+            this.consume();
+          } else {
+            throw this.error(new TomlError("Incomplete datetime"));
+          }
+        }
+        parseStartTimeHour() {
+          if (this.atEndOfWord()) {
+            return this.returnNow(createDate(this.state.result));
+          } else {
+            return this.goto(this.parseTimeHour);
+          }
+        }
+        parseTimeHour() {
+          if (this.char === CHAR_COLON) {
+            if (this.state.buf.length < 2) {
+              throw this.error(new TomlError("Hours less than 10 must be zero padded to two characters"));
+            }
+            this.state.result += "T" + this.state.buf;
+            this.state.buf = "";
+            return this.next(this.parseTimeMin);
+          } else if (isDigit(this.char)) {
+            this.consume();
+          } else {
+            throw this.error(new TomlError("Incomplete datetime"));
+          }
+        }
+        parseTimeMin() {
+          if (this.state.buf.length < 2 && isDigit(this.char)) {
+            this.consume();
+          } else if (this.state.buf.length === 2 && this.char === CHAR_COLON) {
+            this.state.result += ":" + this.state.buf;
+            this.state.buf = "";
+            return this.next(this.parseTimeSec);
+          } else {
+            throw this.error(new TomlError("Incomplete datetime"));
+          }
+        }
+        parseTimeSec() {
+          if (isDigit(this.char)) {
+            this.consume();
+            if (this.state.buf.length === 2) {
+              this.state.result += ":" + this.state.buf;
+              this.state.buf = "";
+              return this.next(this.parseTimeZoneOrFraction);
+            }
+          } else {
+            throw this.error(new TomlError("Incomplete datetime"));
+          }
+        }
+        parseOnlyTimeHour() {
+          if (this.char === CHAR_COLON) {
+            if (this.state.buf.length < 2) {
+              throw this.error(new TomlError("Hours less than 10 must be zero padded to two characters"));
+            }
+            this.state.result = this.state.buf;
+            this.state.buf = "";
+            return this.next(this.parseOnlyTimeMin);
+          } else {
+            throw this.error(new TomlError("Incomplete time"));
+          }
+        }
+        parseOnlyTimeMin() {
+          if (this.state.buf.length < 2 && isDigit(this.char)) {
+            this.consume();
+          } else if (this.state.buf.length === 2 && this.char === CHAR_COLON) {
+            this.state.result += ":" + this.state.buf;
+            this.state.buf = "";
+            return this.next(this.parseOnlyTimeSec);
+          } else {
+            throw this.error(new TomlError("Incomplete time"));
+          }
+        }
+        parseOnlyTimeSec() {
+          if (isDigit(this.char)) {
+            this.consume();
+            if (this.state.buf.length === 2) {
+              return this.next(this.parseOnlyTimeFractionMaybe);
+            }
+          } else {
+            throw this.error(new TomlError("Incomplete time"));
+          }
+        }
+        parseOnlyTimeFractionMaybe() {
+          this.state.result += ":" + this.state.buf;
+          if (this.char === CHAR_PERIOD) {
+            this.state.buf = "";
+            this.next(this.parseOnlyTimeFraction);
+          } else {
+            return this.return(createTime(this.state.result));
+          }
+        }
+        parseOnlyTimeFraction() {
+          if (isDigit(this.char)) {
+            this.consume();
+          } else if (this.atEndOfWord()) {
+            if (this.state.buf.length === 0) throw this.error(new TomlError("Expected digit in milliseconds"));
+            return this.returnNow(createTime(this.state.result + "." + this.state.buf));
+          } else {
+            throw this.error(new TomlError("Unexpected character in datetime, expected period (.), minus (-), plus (+) or Z"));
+          }
+        }
+        parseTimeZoneOrFraction() {
+          if (this.char === CHAR_PERIOD) {
+            this.consume();
+            this.next(this.parseDateTimeFraction);
+          } else if (this.char === CHAR_HYPHEN || this.char === CHAR_PLUS) {
+            this.consume();
+            this.next(this.parseTimeZoneHour);
+          } else if (this.char === CHAR_Z) {
+            this.consume();
+            return this.return(createDateTime(this.state.result + this.state.buf));
+          } else if (this.atEndOfWord()) {
+            return this.returnNow(createDateTimeFloat(this.state.result + this.state.buf));
+          } else {
+            throw this.error(new TomlError("Unexpected character in datetime, expected period (.), minus (-), plus (+) or Z"));
+          }
+        }
+        parseDateTimeFraction() {
+          if (isDigit(this.char)) {
+            this.consume();
+          } else if (this.state.buf.length === 1) {
+            throw this.error(new TomlError("Expected digit in milliseconds"));
+          } else if (this.char === CHAR_HYPHEN || this.char === CHAR_PLUS) {
+            this.consume();
+            this.next(this.parseTimeZoneHour);
+          } else if (this.char === CHAR_Z) {
+            this.consume();
+            return this.return(createDateTime(this.state.result + this.state.buf));
+          } else if (this.atEndOfWord()) {
+            return this.returnNow(createDateTimeFloat(this.state.result + this.state.buf));
+          } else {
+            throw this.error(new TomlError("Unexpected character in datetime, expected period (.), minus (-), plus (+) or Z"));
+          }
+        }
+        parseTimeZoneHour() {
+          if (isDigit(this.char)) {
+            this.consume();
+            if (/\d\d$/.test(this.state.buf)) return this.next(this.parseTimeZoneSep);
+          } else {
+            throw this.error(new TomlError("Unexpected character in datetime, expected digit"));
+          }
+        }
+        parseTimeZoneSep() {
+          if (this.char === CHAR_COLON) {
+            this.consume();
+            this.next(this.parseTimeZoneMin);
+          } else {
+            throw this.error(new TomlError("Unexpected character in datetime, expected colon"));
+          }
+        }
+        parseTimeZoneMin() {
+          if (isDigit(this.char)) {
+            this.consume();
+            if (/\d\d$/.test(this.state.buf)) return this.return(createDateTime(this.state.result + this.state.buf));
+          } else {
+            throw this.error(new TomlError("Unexpected character in datetime, expected digit"));
+          }
+        }
+        /* BOOLEAN */
+        parseBoolean() {
+          if (this.char === CHAR_t) {
+            this.consume();
+            return this.next(this.parseTrue_r);
+          } else if (this.char === CHAR_f) {
+            this.consume();
+            return this.next(this.parseFalse_a);
+          }
+        }
+        parseTrue_r() {
+          if (this.char === CHAR_r) {
+            this.consume();
+            return this.next(this.parseTrue_u);
+          } else {
+            throw this.error(new TomlError("Invalid boolean, expected true or false"));
+          }
+        }
+        parseTrue_u() {
+          if (this.char === CHAR_u) {
+            this.consume();
+            return this.next(this.parseTrue_e);
+          } else {
+            throw this.error(new TomlError("Invalid boolean, expected true or false"));
+          }
+        }
+        parseTrue_e() {
+          if (this.char === CHAR_e) {
+            return this.return(true);
+          } else {
+            throw this.error(new TomlError("Invalid boolean, expected true or false"));
+          }
+        }
+        parseFalse_a() {
+          if (this.char === CHAR_a) {
+            this.consume();
+            return this.next(this.parseFalse_l);
+          } else {
+            throw this.error(new TomlError("Invalid boolean, expected true or false"));
+          }
+        }
+        parseFalse_l() {
+          if (this.char === CHAR_l) {
+            this.consume();
+            return this.next(this.parseFalse_s);
+          } else {
+            throw this.error(new TomlError("Invalid boolean, expected true or false"));
+          }
+        }
+        parseFalse_s() {
+          if (this.char === CHAR_s) {
+            this.consume();
+            return this.next(this.parseFalse_e);
+          } else {
+            throw this.error(new TomlError("Invalid boolean, expected true or false"));
+          }
+        }
+        parseFalse_e() {
+          if (this.char === CHAR_e) {
+            return this.return(false);
+          } else {
+            throw this.error(new TomlError("Invalid boolean, expected true or false"));
+          }
+        }
+        /* INLINE LISTS */
+        parseInlineList() {
+          if (this.char === CHAR_SP || this.char === CTRL_I || this.char === CTRL_M || this.char === CTRL_J) {
+            return null;
+          } else if (this.char === Parser.END) {
+            throw this.error(new TomlError("Unterminated inline array"));
+          } else if (this.char === CHAR_NUM) {
+            return this.call(this.parseComment);
+          } else if (this.char === CHAR_RSQB) {
+            return this.return(this.state.resultArr || InlineList());
+          } else {
+            return this.callNow(this.parseValue, this.recordInlineListValue);
+          }
+        }
+        recordInlineListValue(value) {
+          if (this.state.resultArr) {
+            const listType = this.state.resultArr[_contentType];
+            const valueType = tomlType(value);
+            if (listType !== valueType) {
+              throw this.error(new TomlError(`Inline lists must be a single type, not a mix of ${listType} and ${valueType}`));
+            }
+          } else {
+            this.state.resultArr = InlineList(tomlType(value));
+          }
+          if (isFloat(value) || isInteger(value)) {
+            this.state.resultArr.push(value.valueOf());
+          } else {
+            this.state.resultArr.push(value);
+          }
+          return this.goto(this.parseInlineListNext);
+        }
+        parseInlineListNext() {
+          if (this.char === CHAR_SP || this.char === CTRL_I || this.char === CTRL_M || this.char === CTRL_J) {
+            return null;
+          } else if (this.char === CHAR_NUM) {
+            return this.call(this.parseComment);
+          } else if (this.char === CHAR_COMMA) {
+            return this.next(this.parseInlineList);
+          } else if (this.char === CHAR_RSQB) {
+            return this.goto(this.parseInlineList);
+          } else {
+            throw this.error(new TomlError("Invalid character, expected whitespace, comma (,) or close bracket (])"));
+          }
+        }
+        /* INLINE TABLE */
+        parseInlineTable() {
+          if (this.char === CHAR_SP || this.char === CTRL_I) {
+            return null;
+          } else if (this.char === Parser.END || this.char === CHAR_NUM || this.char === CTRL_J || this.char === CTRL_M) {
+            throw this.error(new TomlError("Unterminated inline array"));
+          } else if (this.char === CHAR_RCUB) {
+            return this.return(this.state.resultTable || InlineTable());
+          } else {
+            if (!this.state.resultTable) this.state.resultTable = InlineTable();
+            return this.callNow(this.parseAssign, this.recordInlineTableValue);
+          }
+        }
+        recordInlineTableValue(kv) {
+          let target = this.state.resultTable;
+          let finalKey = kv.key.pop();
+          for (let kw of kv.key) {
+            if (hasKey(target, kw) && (!isTable(target[kw]) || target[kw][_declared])) {
+              throw this.error(new TomlError("Can't redefine existing key"));
+            }
+            target = target[kw] = target[kw] || Table();
+          }
+          if (hasKey(target, finalKey)) {
+            throw this.error(new TomlError("Can't redefine existing key"));
+          }
+          if (isInteger(kv.value) || isFloat(kv.value)) {
+            target[finalKey] = kv.value.valueOf();
+          } else {
+            target[finalKey] = kv.value;
+          }
+          return this.goto(this.parseInlineTableNext);
+        }
+        parseInlineTableNext() {
+          if (this.char === CHAR_SP || this.char === CTRL_I) {
+            return null;
+          } else if (this.char === Parser.END || this.char === CHAR_NUM || this.char === CTRL_J || this.char === CTRL_M) {
+            throw this.error(new TomlError("Unterminated inline array"));
+          } else if (this.char === CHAR_COMMA) {
+            return this.next(this.parseInlineTable);
+          } else if (this.char === CHAR_RCUB) {
+            return this.goto(this.parseInlineTable);
+          } else {
+            throw this.error(new TomlError("Invalid character, expected whitespace, comma (,) or close bracket (])"));
+          }
+        }
+      }
+      return TOMLParser;
+    }
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-pretty-error.js
+var require_parse_pretty_error = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-pretty-error.js"(exports2, module2) {
+    "use strict";
+    module2.exports = prettyError;
+    function prettyError(err, buf) {
+      if (err.pos == null || err.line == null) return err;
+      let msg = err.message;
+      msg += ` at row ${err.line + 1}, col ${err.col + 1}, pos ${err.pos}:
+`;
+      if (buf && buf.split) {
+        const lines = buf.split(/\n/);
+        const lineNumWidth = String(Math.min(lines.length, err.line + 3)).length;
+        let linePadding = " ";
+        while (linePadding.length < lineNumWidth) linePadding += " ";
+        for (let ii = Math.max(0, err.line - 1); ii < Math.min(lines.length, err.line + 2); ++ii) {
+          let lineNum = String(ii + 1);
+          if (lineNum.length < lineNumWidth) lineNum = " " + lineNum;
+          if (err.line === ii) {
+            msg += lineNum + "> " + lines[ii] + "\n";
+            msg += linePadding + "  ";
+            for (let hh = 0; hh < err.col; ++hh) {
+              msg += " ";
+            }
+            msg += "^\n";
+          } else {
+            msg += lineNum + ": " + lines[ii] + "\n";
+          }
+        }
+      }
+      err.message = msg + "\n";
+      return err;
+    }
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-string.js
+var require_parse_string = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-string.js"(exports2, module2) {
+    "use strict";
+    module2.exports = parseString;
+    var TOMLParser = require_toml_parser();
+    var prettyError = require_parse_pretty_error();
+    function parseString(str) {
+      if (global.Buffer && global.Buffer.isBuffer(str)) {
+        str = str.toString("utf8");
+      }
+      const parser = new TOMLParser();
+      try {
+        parser.parse(str);
+        return parser.finish();
+      } catch (err) {
+        throw prettyError(err, str);
+      }
+    }
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-async.js
+var require_parse_async = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-async.js"(exports2, module2) {
+    "use strict";
+    module2.exports = parseAsync;
+    var TOMLParser = require_toml_parser();
+    var prettyError = require_parse_pretty_error();
+    function parseAsync(str, opts) {
+      if (!opts) opts = {};
+      const index = 0;
+      const blocksize = opts.blocksize || 40960;
+      const parser = new TOMLParser();
+      return new Promise((resolve, reject2) => {
+        setImmediate(parseAsyncNext, index, blocksize, resolve, reject2);
+      });
+      function parseAsyncNext(index2, blocksize2, resolve, reject2) {
+        if (index2 >= str.length) {
+          try {
+            return resolve(parser.finish());
+          } catch (err) {
+            return reject2(prettyError(err, str));
+          }
+        }
+        try {
+          parser.parse(str.slice(index2, index2 + blocksize2));
+          setImmediate(parseAsyncNext, index2 + blocksize2, blocksize2, resolve, reject2);
+        } catch (err) {
+          reject2(prettyError(err, str));
+        }
+      }
+    }
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-stream.js
+var require_parse_stream = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-stream.js"(exports2, module2) {
+    "use strict";
+    module2.exports = parseStream;
+    var stream = __require("stream");
+    var TOMLParser = require_toml_parser();
+    function parseStream(stm) {
+      if (stm) {
+        return parseReadable(stm);
+      } else {
+        return parseTransform(stm);
+      }
+    }
+    function parseReadable(stm) {
+      const parser = new TOMLParser();
+      stm.setEncoding("utf8");
+      return new Promise((resolve, reject2) => {
+        let readable;
+        let ended = false;
+        let errored = false;
+        function finish() {
+          ended = true;
+          if (readable) return;
+          try {
+            resolve(parser.finish());
+          } catch (err) {
+            reject2(err);
+          }
+        }
+        function error(err) {
+          errored = true;
+          reject2(err);
+        }
+        stm.once("end", finish);
+        stm.once("error", error);
+        readNext();
+        function readNext() {
+          readable = true;
+          let data;
+          while ((data = stm.read()) !== null) {
+            try {
+              parser.parse(data);
+            } catch (err) {
+              return error(err);
+            }
+          }
+          readable = false;
+          if (ended) return finish();
+          if (errored) return;
+          stm.once("readable", readNext);
+        }
+      });
+    }
+    function parseTransform() {
+      const parser = new TOMLParser();
+      return new stream.Transform({
+        objectMode: true,
+        transform(chunk, encoding, cb) {
+          try {
+            parser.parse(chunk.toString(encoding));
+          } catch (err) {
+            this.emit("error", err);
+          }
+          cb();
+        },
+        flush(cb) {
+          try {
+            this.push(parser.finish());
+          } catch (err) {
+            this.emit("error", err);
+          }
+          cb();
+        }
+      });
+    }
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse.js
+var require_parse = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse.js"(exports2, module2) {
+    "use strict";
+    module2.exports = require_parse_string();
+    module2.exports.async = require_parse_async();
+    module2.exports.stream = require_parse_stream();
+    module2.exports.prettyError = require_parse_pretty_error();
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/stringify.js
+var require_stringify = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/stringify.js"(exports2, module2) {
+    "use strict";
+    module2.exports = stringify;
+    module2.exports.value = stringifyInline;
+    function stringify(obj) {
+      if (obj === null) throw typeError("null");
+      if (obj === void 0) throw typeError("undefined");
+      if (typeof obj !== "object") throw typeError(typeof obj);
+      if (typeof obj.toJSON === "function") obj = obj.toJSON();
+      if (obj == null) return null;
+      const type = tomlType2(obj);
+      if (type !== "table") throw typeError(type);
+      return stringifyObject("", "", obj);
+    }
+    function typeError(type) {
+      return new Error("Can only stringify objects, not " + type);
+    }
+    function arrayOneTypeError() {
+      return new Error("Array values can't have mixed types");
+    }
+    function getInlineKeys(obj) {
+      return Object.keys(obj).filter((key) => isInline(obj[key]));
+    }
+    function getComplexKeys(obj) {
+      return Object.keys(obj).filter((key) => !isInline(obj[key]));
+    }
+    function toJSON(obj) {
+      let nobj = Array.isArray(obj) ? [] : Object.prototype.hasOwnProperty.call(obj, "__proto__") ? { ["__proto__"]: void 0 } : {};
+      for (let prop of Object.keys(obj)) {
+        if (obj[prop] && typeof obj[prop].toJSON === "function" && !("toISOString" in obj[prop])) {
+          nobj[prop] = obj[prop].toJSON();
+        } else {
+          nobj[prop] = obj[prop];
+        }
+      }
+      return nobj;
+    }
+    function stringifyObject(prefix, indent, obj) {
+      obj = toJSON(obj);
+      var inlineKeys;
+      var complexKeys;
+      inlineKeys = getInlineKeys(obj);
+      complexKeys = getComplexKeys(obj);
+      var result = [];
+      var inlineIndent = indent || "";
+      inlineKeys.forEach((key) => {
+        var type = tomlType2(obj[key]);
+        if (type !== "undefined" && type !== "null") {
+          result.push(inlineIndent + stringifyKey(key) + " = " + stringifyAnyInline(obj[key], true));
+        }
+      });
+      if (result.length > 0) result.push("");
+      var complexIndent = prefix && inlineKeys.length > 0 ? indent + "  " : "";
+      complexKeys.forEach((key) => {
+        result.push(stringifyComplex(prefix, complexIndent, key, obj[key]));
+      });
+      return result.join("\n");
+    }
+    function isInline(value) {
+      switch (tomlType2(value)) {
+        case "undefined":
+        case "null":
+        case "integer":
+        case "nan":
+        case "float":
+        case "boolean":
+        case "string":
+        case "datetime":
+          return true;
+        case "array":
+          return value.length === 0 || tomlType2(value[0]) !== "table";
+        case "table":
+          return Object.keys(value).length === 0;
+        /* istanbul ignore next */
+        default:
+          return false;
+      }
+    }
+    function tomlType2(value) {
+      if (value === void 0) {
+        return "undefined";
+      } else if (value === null) {
+        return "null";
+      } else if (typeof value === "bigint" || Number.isInteger(value) && !Object.is(value, -0)) {
+        return "integer";
+      } else if (typeof value === "number") {
+        return "float";
+      } else if (typeof value === "boolean") {
+        return "boolean";
+      } else if (typeof value === "string") {
+        return "string";
+      } else if ("toISOString" in value) {
+        return isNaN(value) ? "undefined" : "datetime";
+      } else if (Array.isArray(value)) {
+        return "array";
+      } else {
+        return "table";
+      }
+    }
+    function stringifyKey(key) {
+      var keyStr = String(key);
+      if (/^[-A-Za-z0-9_]+$/.test(keyStr)) {
+        return keyStr;
+      } else {
+        return stringifyBasicString(keyStr);
+      }
+    }
+    function stringifyBasicString(str) {
+      return '"' + escapeString(str).replace(/"/g, '\\"') + '"';
+    }
+    function stringifyLiteralString(str) {
+      return "'" + str + "'";
+    }
+    function numpad(num, str) {
+      while (str.length < num) str = "0" + str;
+      return str;
+    }
+    function escapeString(str) {
+      return str.replace(/\\/g, "\\\\").replace(/[\b]/g, "\\b").replace(/\t/g, "\\t").replace(/\n/g, "\\n").replace(/\f/g, "\\f").replace(/\r/g, "\\r").replace(/([\u0000-\u001f\u007f])/, (c) => "\\u" + numpad(4, c.codePointAt(0).toString(16)));
+    }
+    function stringifyMultilineString(str) {
+      let escaped = str.split(/\n/).map((str2) => {
+        return escapeString(str2).replace(/"(?="")/g, '\\"');
+      }).join("\n");
+      if (escaped.slice(-1) === '"') escaped += "\\\n";
+      return '"""\n' + escaped + '"""';
+    }
+    function stringifyAnyInline(value, multilineOk) {
+      let type = tomlType2(value);
+      if (type === "string") {
+        if (multilineOk && /\n/.test(value)) {
+          type = "string-multiline";
+        } else if (!/[\b\t\n\f\r']/.test(value) && /"/.test(value)) {
+          type = "string-literal";
+        }
+      }
+      return stringifyInline(value, type);
+    }
+    function stringifyInline(value, type) {
+      if (!type) type = tomlType2(value);
+      switch (type) {
+        case "string-multiline":
+          return stringifyMultilineString(value);
+        case "string":
+          return stringifyBasicString(value);
+        case "string-literal":
+          return stringifyLiteralString(value);
+        case "integer":
+          return stringifyInteger(value);
+        case "float":
+          return stringifyFloat(value);
+        case "boolean":
+          return stringifyBoolean(value);
+        case "datetime":
+          return stringifyDatetime(value);
+        case "array":
+          return stringifyInlineArray(value.filter((_) => tomlType2(_) !== "null" && tomlType2(_) !== "undefined" && tomlType2(_) !== "nan"));
+        case "table":
+          return stringifyInlineTable(value);
+        /* istanbul ignore next */
+        default:
+          throw typeError(type);
+      }
+    }
+    function stringifyInteger(value) {
+      return String(value).replace(/\B(?=(\d{3})+(?!\d))/g, "_");
+    }
+    function stringifyFloat(value) {
+      if (value === Infinity) {
+        return "inf";
+      } else if (value === -Infinity) {
+        return "-inf";
+      } else if (Object.is(value, NaN)) {
+        return "nan";
+      } else if (Object.is(value, -0)) {
+        return "-0.0";
+      }
+      var chunks = String(value).split(".");
+      var int = chunks[0];
+      var dec = chunks[1] || 0;
+      return stringifyInteger(int) + "." + dec;
+    }
+    function stringifyBoolean(value) {
+      return String(value);
+    }
+    function stringifyDatetime(value) {
+      return value.toISOString();
+    }
+    function isNumber(type) {
+      return type === "float" || type === "integer";
+    }
+    function arrayType(values) {
+      var contentType = tomlType2(values[0]);
+      if (values.every((_) => tomlType2(_) === contentType)) return contentType;
+      if (values.every((_) => isNumber(tomlType2(_)))) return "float";
+      return "mixed";
+    }
+    function validateArray(values) {
+      const type = arrayType(values);
+      if (type === "mixed") {
+        throw arrayOneTypeError();
+      }
+      return type;
+    }
+    function stringifyInlineArray(values) {
+      values = toJSON(values);
+      const type = validateArray(values);
+      var result = "[";
+      var stringified = values.map((_) => stringifyInline(_, type));
+      if (stringified.join(", ").length > 60 || /\n/.test(stringified)) {
+        result += "\n  " + stringified.join(",\n  ") + "\n";
+      } else {
+        result += " " + stringified.join(", ") + (stringified.length > 0 ? " " : "");
+      }
+      return result + "]";
+    }
+    function stringifyInlineTable(value) {
+      value = toJSON(value);
+      var result = [];
+      Object.keys(value).forEach((key) => {
+        result.push(stringifyKey(key) + " = " + stringifyAnyInline(value[key], false));
+      });
+      return "{ " + result.join(", ") + (result.length > 0 ? " " : "") + "}";
+    }
+    function stringifyComplex(prefix, indent, key, value) {
+      var valueType = tomlType2(value);
+      if (valueType === "array") {
+        return stringifyArrayOfTables(prefix, indent, key, value);
+      } else if (valueType === "table") {
+        return stringifyComplexTable(prefix, indent, key, value);
+      } else {
+        throw typeError(valueType);
+      }
+    }
+    function stringifyArrayOfTables(prefix, indent, key, values) {
+      values = toJSON(values);
+      validateArray(values);
+      var firstValueType = tomlType2(values[0]);
+      if (firstValueType !== "table") throw typeError(firstValueType);
+      var fullKey = prefix + stringifyKey(key);
+      var result = "";
+      values.forEach((table) => {
+        if (result.length > 0) result += "\n";
+        result += indent + "[[" + fullKey + "]]\n";
+        result += stringifyObject(fullKey + ".", indent, table);
+      });
+      return result;
+    }
+    function stringifyComplexTable(prefix, indent, key, value) {
+      var fullKey = prefix + stringifyKey(key);
+      var result = "";
+      if (getInlineKeys(value).length > 0) {
+        result += indent + "[" + fullKey + "]\n";
+      }
+      return result + stringifyObject(fullKey + ".", indent, value);
+    }
+  }
+});
+
+// node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/toml.js
+var require_toml = __commonJS({
+  "node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/toml.js"(exports2) {
+    "use strict";
+    exports2.parse = require_parse();
+    exports2.stringify = require_stringify();
+  }
+});
 
 // packages/ceal-client-protocol/src/canonical-json.ts
 function cealCanonicalJson(value) {
@@ -109,6 +2139,9 @@ var client_wire_contract_default = {
       "document"
     ],
     optional_fields: [
+      "operation_id",
+      "visible_output_max_bytes",
+      "local_delivery",
       "verified_artifact"
     ],
     bare_document_fields: [
@@ -195,6 +2228,7 @@ var CEAL_COMMAND_RESPONSE_FOCUSED_PROMPT_CONTINUATION_DOCUMENT_FIELDS = Object.f
 var CEAL_COMMAND_RESPONSE_DISCOVERY_COMMAND = response.discovery_command;
 var CEAL_COMMAND_RESPONSE_DISCOVERY_MANIFEST_SCHEMA_VERSION = response.discovery_manifest_schema_version;
 var CEAL_COMMAND_RESPONSE_DISCOVERY_MANIFEST_DOCUMENT_FIELDS = Object.freeze([...response.discovery_manifest_document_fields]);
+var CEAL_COMMAND_RESPONSE_MAX_BYTES = CEAL_ENCODED_JSON_DOCUMENT_MAX_BYTES;
 
 // packages/ceal-client-protocol/src/vocabulary.ts
 function vocabulary(words) {
@@ -225,6 +2259,7 @@ var CEAL_WRITE_RECEIPT_PROVIDER_STATES = vocabulary(["outcome_unknown", "verifie
 var CEAL_WRITE_RECEIPT_PROVIDER_READBACKS = vocabulary(["outcome_unknown", "verified", "not_applied"]);
 var CEAL_PROTOCOL_VERSION = "1.4.0";
 var CEAL_OPERATION_ACCESS_SCHEMA_VERSION = "ceal.operation_access.v1";
+var CEAL_GATEWAY_CONTINUATION_CURSOR_PHASES = vocabulary(["scan", "delivery", "terminal"]);
 var CEAL_GATEWAY_ACTIVE_CALL_PHASES = vocabulary([
   "audited_call_pending",
   "continuation_read_pending",
@@ -248,6 +2283,7 @@ var CEAL_GATEWAY_ORGANIZATION_ROUTE_FACT_CALL_KEYS = Object.freeze([
 // packages/ceal-client-protocol/src/operation-next-actions.ts
 var CEAL_REPEAT_REQUEST_NEXT_ACTION = "repeat_request";
 var CEAL_INSPECT_RECEIPT_NEXT_ACTION = "inspect_receipt";
+var CEAL_ANSWER_WITH_GAP_NEXT_ACTION = "answer_with_gap";
 var CALLER_RECOVERABLE_NEXT_ACTION_VALUES = [
   "select_did_you_mean",
   "choose_new_output_path",
@@ -301,10 +2337,20 @@ var CALLER_RECOVERABLE_NEXT_ACTION_VALUES = [
   "retry_after",
   // The ref names a container of rows (a Notion database or data source), which
   // has no body of its own; the caller searches its rows instead of reading it.
-  "search_container_rows"
+  "search_container_rows",
+  // A settled unknown write names the exact receipt Operation that can inspect
+  // its outcome without issuing another provider mutation.
+  "write_receipt.get",
+  // Command resolution carries the exact required Operation sequence beside
+  // this action, so the caller can execute each declared input in order.
+  "follow_required_action_sequence",
+  // The command needs caller-owned local materialization (for example an
+  // @path file) before the Gateway can receive the argument.
+  "materialize_local_argument"
 ];
 var CEAL_CALLER_RECOVERABLE_NEXT_ACTIONS = Object.freeze(CALLER_RECOVERABLE_NEXT_ACTION_VALUES);
 var NON_REMEDY_NEXT_ACTION_VALUES = [
+  CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
   // Only an administrator can take the named step -- approving a place for an
   // Operation, granting a withheld capability -- so a non-administrator asks
   // one. The refusal names the administrator step; this word is the ask.
@@ -352,7 +2398,58 @@ var NON_REMEDY_NEXT_ACTION_VALUES = [
   "select_exact_approval"
 ];
 var CEAL_NON_REMEDY_NEXT_ACTIONS = Object.freeze(NON_REMEDY_NEXT_ACTION_VALUES);
-var DECLARED = /* @__PURE__ */ new Set([...CEAL_CALLER_RECOVERABLE_NEXT_ACTIONS, ...CEAL_NON_REMEDY_NEXT_ACTIONS]);
+var CEAL_DECLARED_NEXT_ACTIONS = Object.freeze([...CEAL_CALLER_RECOVERABLE_NEXT_ACTIONS, ...CEAL_NON_REMEDY_NEXT_ACTIONS]);
+var DECLARED = new Set(CEAL_DECLARED_NEXT_ACTIONS);
+function defineCealNonModelNextActions(actions) {
+  return actions;
+}
+var NON_MODEL_NEXT_ACTION_VALUES = defineCealNonModelNextActions([
+  CEAL_INSPECT_RECEIPT_NEXT_ACTION,
+  "await_pending_approval",
+  "inspect_gateway",
+  "operator_action",
+  "none",
+  "check_gateway",
+  "inspect_context_store",
+  "inspect_local_cache",
+  "inspect_local_client",
+  "inspect_local_command",
+  "inspect_local_output",
+  "inspect_local_route",
+  "inspect_request",
+  "reconcile",
+  "reconcile_occurrence",
+  "retry_after_owner_recovery",
+  "select_exact_approval"
+]);
+var NON_MODEL_NEXT_ACTIONS = new Set(NON_MODEL_NEXT_ACTION_VALUES);
+function isCealModelActionableNonRemedyNextAction(action) {
+  return !NON_MODEL_NEXT_ACTIONS.has(action);
+}
+var CEAL_MODEL_ACTIONABLE_NEXT_ACTIONS = Object.freeze([
+  ...CEAL_CALLER_RECOVERABLE_NEXT_ACTIONS,
+  ...CEAL_NON_REMEDY_NEXT_ACTIONS.filter(isCealModelActionableNonRemedyNextAction)
+]);
+var MODEL_ACTIONABLE = new Set(CEAL_MODEL_ACTIONABLE_NEXT_ACTIONS);
+var NON_MODEL_ACTION_TO_MODEL_ACTION = Object.freeze({
+  [CEAL_INSPECT_RECEIPT_NEXT_ACTION]: CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
+  await_pending_approval: "ask_admin",
+  inspect_gateway: CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
+  operator_action: "ask_admin",
+  none: CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
+  check_gateway: "ask_admin",
+  inspect_context_store: CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
+  inspect_local_cache: CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
+  inspect_local_client: CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
+  inspect_local_command: CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
+  inspect_local_output: CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
+  inspect_local_route: CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
+  inspect_request: CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
+  reconcile: CEAL_ANSWER_WITH_GAP_NEXT_ACTION,
+  reconcile_occurrence: "ask_admin",
+  retry_after_owner_recovery: "ask_admin",
+  select_exact_approval: "ask_admin"
+});
 var RETRY_PROMISE_NEXT_ACTIONS = ["retry", "retry_after"];
 var RETRY_PROMISE = new Set(RETRY_PROMISE_NEXT_ACTIONS);
 var RECOVERABLE = new Set(CEAL_CALLER_RECOVERABLE_NEXT_ACTIONS);
@@ -622,21 +2719,15 @@ var CEAL_OPERATION_ACCESS_CLASSES = vocabulary(["read", "write"]);
 // packages/ceal-client-protocol/src/domain-vocabulary.ts
 var CEAL_CONNECTOR_STATUSES = vocabulary(["active", "disabled", "disconnected"]);
 var CEAL_CONNECTOR_CUSTODIES = vocabulary(["organization", "personal"]);
-var CEAL_PROVIDER_BOUNDARY_KINDS = vocabulary([
-  "github_account",
-  "github_organization",
-  "google_workspace_domain",
-  "notion_workspace",
-  "slack_workspace"
-]);
-var CEAL_PROVIDER_BOUNDARY_EVIDENCE = vocabulary(["provider_readback", "operator_stated"]);
 var CEAL_ACCESS_LEVELS = vocabulary(["none", "read", "read_write"]);
 var CEAL_PERSONAL_ACCESS_CEILINGS = vocabulary(["disabled", "read", "read_write"]);
 var CEAL_TARGET_REF_PATTERN = "^[^\\p{Cc}]+$";
 var TARGET_REF = new RegExp(CEAL_TARGET_REF_PATTERN, "u");
 var CEAL_TARGET_VISIBILITIES = vocabulary(["public", "private"]);
-var CEAL_PRINCIPAL_KINDS = vocabulary(["human", "service", "runtime"]);
+var CEAL_PRINCIPAL_KINDS = vocabulary(["human", "runtime"]);
+var CEAL_PERSISTED_PRINCIPAL_KINDS = vocabulary(["human", "service", "runtime"]);
 var CEAL_ORGANIZATION_ROLES = vocabulary(["member", "admin"]);
+var CEAL_CALENDAR_PERIODS = vocabulary(["day", "week", "month"]);
 var LABEL_EXPECTATION = `public-safe display text of at most ${CEAL_PUBLIC_DISPLAY_NAME_MAX_BYTES} bytes`;
 
 // packages/ceal-client-protocol/src/safe-json-budget.ts
@@ -812,7 +2903,7 @@ var CEAL_SCHEMA_LITERALS = [
   "ceal.operation_receipt.v1",
   "ceal.operation_result.v1",
   "ceal.operation_result.compact.v1",
-  "ceal.local_result_materialization.v1",
+  "ceal.local_result_file.v1",
   "ceal.local_result_root.v1",
   "ceal.owner_bootstrap_exchange_request.v1",
   "ceal.owner_bootstrap_exchange_result.v1",
@@ -842,6 +2933,9 @@ var CEAL_BOUNDED_SERIES_CATALOG = Object.freeze({
   gateway_personal_client_access_audit: (root) => join(root, "access-audit.jsonl")
 });
 
+// packages/ceal-client-protocol/src/canonical-http-boundary.ts
+var CEAL_CANONICAL_HTTP_MAX_RESPONSE_BYTES = CEAL_COMMAND_RESPONSE_MAX_BYTES;
+
 // packages/ceal-client-protocol/src/gateway-installation-activation.ts
 var CEAL_GATEWAY_INSTALLATION_ACTIVATION_CODE_DATA_CHARACTERS = 32;
 var CEAL_GATEWAY_INSTALLATION_ACTIVATION_CODE_CHECK_CHARACTERS = 8;
@@ -906,41 +3000,6 @@ var CEAL_VERIFIED_ARTIFACT_DESCRIPTOR_JSON_SCHEMA = Object.freeze({
   }
 });
 
-// packages/ceal-client-protocol/src/provider-operation-vocabulary.ts
-var CEAL_FILE_TYPE_FAMILIES = vocabulary(["all", "image", "pdf"]);
-var CEAL_GITHUB_ISSUE_STATES = vocabulary(["open", "closed", "all"]);
-var CEAL_NOTION_UPDATABLE_BLOCK_TYPES = vocabulary([
-  "paragraph",
-  "heading_1",
-  "heading_2",
-  "heading_3",
-  "bulleted_list_item",
-  "numbered_list_item",
-  "to_do",
-  "code"
-]);
-var CEAL_NOTION_NEUTRAL_TYPES = vocabulary([
-  "text",
-  "number",
-  "boolean",
-  "date",
-  "select",
-  "multi_select",
-  "people",
-  "url",
-  "email",
-  "phone",
-  "unsupported"
-]);
-var CEAL_NOTION_IDENTITY_GAP_REASONS = vocabulary([
-  "identity_unavailable",
-  "identity_stale",
-  "identity_ambiguous",
-  "identity_revoked",
-  "identity_unlinked"
-]);
-var CEAL_NOTION_STRING_VALUE_TYPES = vocabulary(["text", "select", "url", "email", "phone"]);
-
 // packages/ceal-client-protocol/src/opaque-reference.ts
 var CEAL_OPAQUE_HANDLE_KINDS = vocabulary(["target", "message", "thread", "artifact", "document", "block", "object"]);
 var CEAL_OPAQUE_REF_KINDS = vocabulary([...CEAL_OPAQUE_HANDLE_KINDS, "result", "operation-receipt", "reply-receipt", "field", "notion-data-source"]);
@@ -950,6 +3009,7 @@ var REQUIRED_FIELDS = CEAL_CLIENT_WIRE_CONTRACT.command_response.bare_document_f
 var OPTIONAL_FIELDS = CEAL_CLIENT_WIRE_CONTRACT.command_response.bare_document_optional_fields;
 
 // packages/ceal-client-protocol/src/resource-row.ts
+var CEAL_RESOURCE_ROW_TITLE_MATCH_DISPOSITIONS = vocabulary(["exact", "not_exact", "unknown"]);
 var CEAL_RESOURCE_SEARCH_ORDERS = vocabulary(["relevance", "modified", "viewed", "created"]);
 var CEAL_RESOURCE_SEARCH_DIRECTIONS = vocabulary(["ascending", "descending"]);
 var CEAL_RESOURCE_SEARCH_FILTERS = vocabulary(["query", "modified_since", "since", "until", "authored_by_me", "authored_by", "include_replies", "kinds", "container_ref", "container_refs", "container_names", "addressed_to_me", "unread"]);
@@ -973,6 +3033,7 @@ var CEAL_ACTIVITY_TIMESTAMP_BASES = vocabulary([
   "resource_modified"
 ]);
 var CEAL_ACTIVITY_CONNECTOR_KINDS = vocabulary(["slack", "github", "google-calendar", "google-drive", "notion"]);
+var CEAL_ACTIVITY_UNSUPPORTED_EVENT_KIND_CODE = "unsupported_event_kind";
 var CEAL_ACTIVITY_GAP_CODES = vocabulary([
   "provider_page_budget",
   "call_deadline",
@@ -980,7 +3041,7 @@ var CEAL_ACTIVITY_GAP_CODES = vocabulary([
   "provider_cursor_unavailable",
   "malformed_provider_page",
   "visibility_incomplete",
-  "unsupported_event_kind",
+  CEAL_ACTIVITY_UNSUPPORTED_EVENT_KIND_CODE,
   "direct_messages_excluded"
 ]);
 var CEAL_ACTIVITY_EVENT_KINDS = vocabulary([
@@ -1032,6 +3093,7 @@ var RESOURCE_ROW_KEY_RULES = Object.freeze({
   next: { required: true, timestamp: false },
   kind: { required: true, timestamp: false },
   matched_kinds: { required: false, timestamp: false },
+  title_match: { required: false, timestamp: false },
   title: { required: true, timestamp: false },
   container_label: { required: true, timestamp: false },
   container_ref: { required: false, timestamp: false },
@@ -1045,6 +3107,8 @@ var RESOURCE_ROW_KEY_RULES = Object.freeze({
   modified_at: { required: false, timestamp: true },
   modified_at_local: { required: false, timestamp: true },
   viewed_by_me_at: { required: false, timestamp: true },
+  own_ceal_write: { required: false, timestamp: false },
+  owned_by_me: { required: false, timestamp: false },
   visibility: { required: false, timestamp: false },
   start: { required: false, timestamp: false },
   end: { required: false, timestamp: false },
@@ -1078,6 +3142,15 @@ function cealExcludedTargetCoverageJsonSchema() {
   };
 }
 
+// packages/ceal-client-protocol/src/gateway-write-identity.ts
+var CEAL_GATEWAY_WRITE_IDENTITY_ROLES = Object.freeze(["replay_identity", "lookup_handle", "collision_evidence"]);
+var CEAL_GATEWAY_WRITE_REQUEST_REF_PATTERN = /^gateway-write-request:[a-f0-9]{8}-(?:[a-f0-9]{4}-){3}[a-f0-9]{12}$/u;
+var CEAL_GATEWAY_WRITE_IDENTITY_FIELDS = Object.freeze({
+  replay_identity: "idempotency_claim_sha256",
+  lookup_handle: "write_request_sha256",
+  collision_evidence: "normalized_mutation_sha256"
+});
+
 // packages/ceal-client-protocol/src/write-safety-finding.ts
 var CEAL_WRITE_SAFETY_FINDING_STATUSES = vocabulary(["warning", "unchecked"]);
 var CEAL_WRITE_SAFETY_AUDIENCES = vocabulary(["workspace", "person", "members", "unknown"]);
@@ -1105,7 +3178,11 @@ var CEAL_REFRESH_FAILURE_CODES = vocabulary([
   "refresh_revoked",
   "authority_replaced",
   "refresh_recovery_unavailable",
-  "refresh_recovery_expired"
+  "refresh_recovery_expired",
+  // The serving gate answers this while the Gateway is still starting and the
+  // refresh was never attempted; the same attempt stays retryable. It is never
+  // stored by the session owner, only answered at the serving edge.
+  "gateway_starting"
 ]);
 
 // packages/ceal-client-protocol/src/request-validation-primitives.ts
@@ -1138,7 +3215,7 @@ var CANCELLATION_STATES = vocabulary(["requested", "cancelled"]);
 var CEAL_REQUEST_KEYS = Object.freeze(["schema_version", "ceal_request_ref", "created_at", "authority", "prompt_ref", "host_session_ref", "host_turn_ref", "host_source_ref"]);
 var CEAL_REQUEST_JSON_SCHEMA = {
   type: "object",
-  maxProperties: 10,
+  maxProperties: 11,
   additionalProperties: false,
   properties: {
     schema_version: { type: "string", const: CEAL_REQUEST_SCHEMA_VERSION, maxLength: 32 },
@@ -1162,7 +3239,8 @@ var CEAL_REQUEST_JSON_SCHEMA = {
     host_turn_ref: { type: "string", minLength: 1, maxLength: 128, pattern: SAFE_REF.source },
     host_input_ref: { type: "string", minLength: 1, maxLength: 128, pattern: SAFE_REF.source },
     host_source_ref: { type: "string", minLength: 1, maxLength: 128, pattern: SAFE_REF.source },
-    requester_timezone: { type: "string", minLength: 1, maxLength: 128, description: "IANA timezone observed for the requester on this Request." }
+    requester_timezone: { type: "string", minLength: 1, maxLength: 128, description: "IANA timezone observed for the requester on this Request." },
+    device_ref: { type: "string", minLength: 1, maxLength: 128, pattern: SAFE_REF.source, description: "Device that submitted this Request through its client session; absent for Host turns and older records." }
   },
   required: CEAL_REQUEST_KEYS
 };
@@ -1221,6 +3299,7 @@ var REQUEST_EXECUTION_PREPARE_REFUSAL_PROPERTIES = {
   retryable: { type: "boolean" },
   source: { type: "string", enum: ["provider", "gateway"] },
   retry_after_ms: { type: "integer", minimum: 0, maximum: CEAL_RETRY_AFTER_MAX_MS },
+  write_request_ref: { type: "string", pattern: CEAL_GATEWAY_WRITE_REQUEST_REF_PATTERN.source, maxLength: 128 },
   excluded_targets: cealExcludedTargetCoverageJsonSchema(),
   repaired_input: {},
   unrepaired_pointers: { type: "array", maxItems: 128, items: { type: "string", minLength: 1, maxLength: 256 } },
@@ -1285,6 +3364,43 @@ function cealHostObservationRef(producer, digest2) {
   if (!HOST_OBSERVATION_PRODUCER.test(producer) || !HOST_OBSERVATION_DIGEST.test(digest2)) invalid("Ceal Host observation reference parts are invalid.");
   return `${CEAL_HOST_OBSERVATION_REF_PREFIX}${producer}-${digest2}`;
 }
+var HOST_TOKEN_OBSERVATION_BREAKDOWN_KEYS = vocabulary(["cached_input", "cache_write_input", "reasoning_output"]);
+function createHostTokenObservationValue(counts, source) {
+  const core = validTokenCore(counts);
+  if (typeof source !== "string" || source.length === 0 || source.length > 256) invalid("Ceal Host token observation source is invalid.");
+  const value = { status: "available", unit: "tokens", input: core.input, output: core.output, total: core.total, source };
+  for (const breakdown of validTokenBreakdowns(counts)) value[breakdown.key] = breakdown.tokens;
+  assertHostObservationValue(value, "token");
+  return value;
+}
+function validTokenCore(counts) {
+  if (!isOperationRecord(counts) || !safeCount(counts.input) || !safeCount(counts.output) || !safeCount(counts.total)) invalid("Ceal Host token observation counts are invalid.");
+  if (counts.total !== counts.input + counts.output) invalid("Ceal Host token observation counts are invalid.");
+  return { input: counts.input, output: counts.output, total: counts.total };
+}
+function validTokenBreakdowns(counts) {
+  const breakdowns = [
+    { key: "cached_input", tokens: counts.cached_input },
+    { key: "cache_write_input", tokens: counts.cache_write_input },
+    { key: "reasoning_output", tokens: counts.reasoning_output }
+  ];
+  const stated = breakdowns.filter((breakdown) => breakdown.tokens !== void 0).map((breakdown) => ({ key: breakdown.key, tokens: Number(breakdown.tokens) }));
+  for (const breakdown of stated) {
+    if (!safeCount(breakdown.tokens)) invalid("Ceal Host token observation counts are invalid.");
+  }
+  const cached = counts.cached_input ?? 0;
+  const created = counts.cache_write_input ?? 0;
+  const reasoning = counts.reasoning_output ?? 0;
+  if (cached + created > counts.input || reasoning > counts.output) invalid("Ceal Host token observation counts are invalid.");
+  return stated;
+}
+function hostObservationNotRecorded(reason) {
+  if (typeof reason !== "string" || reason.length === 0 || reason.length > 256) invalid("Ceal Host observation gap reason is invalid.");
+  return { status: "not_recorded", reason };
+}
+function safeCount(value) {
+  return Number.isSafeInteger(value) && Number(value) >= 0;
+}
 function validateCealHostObservationDraft(value) {
   const record3 = operationRecord(value, "Ceal Host observation draft is invalid.");
   requirePrefixedRef(record3.observation_ref, CEAL_HOST_OBSERVATION_REF_PREFIX, "Ceal Host observation reference is invalid.");
@@ -1437,6 +3553,55 @@ var CEAL_HOST_MINT_REQUEST_CONTEXT_REFUSAL_REASONS = vocabulary([
   "host_input_mismatch",
   "host_prompt_mismatch"
 ]);
+var CEAL_HOST_AUTHENTICATION_CAUSES = vocabulary([
+  "invalid_arguments",
+  "options_invalid",
+  "session_unavailable",
+  "context_unavailable",
+  "context_replaced",
+  "no_binding",
+  "context_stale",
+  "context_expired",
+  "host_source_refused",
+  "host_credential_refused",
+  "gateway_unavailable",
+  "gateway_rate_limited",
+  "gateway_refused",
+  "gateway_response_invalid",
+  "producer_frame_invalid",
+  "relay_permission_denied",
+  "relay_unavailable",
+  "transient_retryable",
+  "mint_failed",
+  "relay_failed",
+  "host_refusal_invalid"
+]);
+var CEAL_HOST_AUTHENTICATION_POLICY = Object.freeze({
+  invalid_arguments: Object.freeze({ classification: "host_arguments_invalid", next_action: "answer_with_gap" }),
+  options_invalid: Object.freeze({ classification: "host_configuration_invalid", next_action: "answer_with_gap" }),
+  session_unavailable: Object.freeze({ classification: "host_session_unavailable", next_action: "answer_with_gap" }),
+  context_unavailable: Object.freeze({ classification: "host_context_unavailable", next_action: "refresh_host_invocation_context", remedy: "the Host has no invocation context from the current transcript turn; send a new message to start a fresh Host turn, then retry this command on that turn (run `ceal-host install` only if the Host hook registration is missing or drifted)" }),
+  context_replaced: Object.freeze({ classification: "host_invocation_context_stale", next_action: "refresh_host_invocation_context" }),
+  no_binding: Object.freeze({ classification: "host_binding_unavailable", next_action: "refresh_host_invocation_context" }),
+  context_stale: Object.freeze({ classification: "host_invocation_context_stale", next_action: "refresh_host_invocation_context" }),
+  context_expired: Object.freeze({ classification: "host_invocation_context_expired", next_action: "refresh_host_invocation_context" }),
+  host_source_refused: Object.freeze({ classification: "host_source_refused", next_action: "answer_with_gap" }),
+  host_credential_refused: Object.freeze({ classification: "host_registration_credential_refused", next_action: "ask_admin" }),
+  gateway_unavailable: Object.freeze({ classification: "host_mint_gateway_unavailable", next_action: "ask_admin" }),
+  gateway_rate_limited: Object.freeze({ classification: "host_mint_gateway_rate_limited", next_action: "answer_with_gap" }),
+  gateway_refused: Object.freeze({ classification: "host_mint_gateway_refused", next_action: "answer_with_gap" }),
+  gateway_response_invalid: Object.freeze({ classification: "host_mint_gateway_response_invalid", next_action: "answer_with_gap" }),
+  producer_frame_invalid: Object.freeze({ classification: "host_producer_frame_invalid", next_action: "ask_admin", remedy: "ask an administrator to inspect and repair the producer frame, then start a fresh Host turn" }),
+  relay_permission_denied: Object.freeze({ classification: "host_relay_permission_denied", next_action: "rerun_outside_agent_sandbox", remedy: "an agent sandbox denied the Host Relay socket; run `ceal` as the only command, with no pipe, redirect, or `&&`, so the Host allow rule runs it outside the sandbox" }),
+  relay_unavailable: Object.freeze({ classification: "host_relay_unavailable", next_action: "answer_with_gap" }),
+  transient_retryable: Object.freeze({ classification: "host_mint_transient_retryable", next_action: "retry" }),
+  mint_failed: Object.freeze({ classification: "host_mint_failed", next_action: "answer_with_gap" }),
+  relay_failed: Object.freeze({ classification: "host_relay_failed", next_action: "answer_with_gap" }),
+  host_refusal_invalid: Object.freeze({ classification: "host_refusal_invalid", next_action: "answer_with_gap" })
+});
+function isCealHostAuthenticationCause(value) {
+  return isVocabularyWord(CEAL_HOST_AUTHENTICATION_CAUSES, value);
+}
 function decodeCealHostInvocationAuthenticationRequest(value) {
   if (!isCealJsonRecord(value) || !exactKeys(value, ["schema_version", "client_nonce"]) || value.schema_version !== CEAL_HOST_INVOCATION_AUTHENTICATION_REQUEST_SCHEMA || typeof value.client_nonce !== "string" || !CEAL_HOST_CLIENT_NONCE_PATTERN.test(value.client_nonce)) {
     throw new TypeError("The Host invocation authentication request is invalid.");
@@ -1450,19 +3615,46 @@ function decodeCealHostInvocationAuthenticationResult(value, now = /* @__PURE__
   return Object.freeze({ schema_version: CEAL_HOST_INVOCATION_AUTHENTICATION_RESULT_SCHEMA, context_token: value.context_token, expires_at: value.expires_at });
 }
 function validFutureTimestamp(value, now) {
-  const timestamp5 = Date.parse(value);
-  return Number.isFinite(timestamp5) && new Date(timestamp5).toISOString() === value && timestamp5 > now.getTime();
+  const timestamp4 = Date.parse(value);
+  return Number.isFinite(timestamp4) && new Date(timestamp4).toISOString() === value && timestamp4 > now.getTime();
 }
 function exactKeys(value, expected) {
   const keys = Object.keys(value);
   return keys.length === expected.length && expected.every((key) => Object.hasOwn(value, key));
 }
 
+// packages/ceal-client-protocol/src/host-service-diagnostic.ts
+var CEAL_HOST_SERVICE_DIAGNOSTIC_SCHEMA = "ceal.host_service_diagnostic.v1";
+var CEAL_HOST_SERVICE_DIAGNOSTIC_PRODUCERS = vocabulary(["claude", "codex"]);
+var CEAL_HOST_SERVICE_DIAGNOSTIC_EVENTS = vocabulary([
+  "hook_invoked",
+  "registration_written",
+  "hook_failed",
+  "watcher_turn_observed",
+  "current_prompt_registered",
+  "current_prompt_registration_failed",
+  "current_prompt_capacity_exhausted",
+  "activation_recorded",
+  "activation_failed",
+  "watcher_scan_failed",
+  "activation_wait_skipped",
+  "activation_wait_engaged",
+  "activation_wait_completed",
+  "activation_wait_exhausted"
+]);
+var CEAL_HOST_SERVICE_DIAGNOSTIC_FAILURE_KINDS = vocabulary([
+  "malformed_line",
+  "other",
+  "payload_rejected",
+  "read_error",
+  "size_budget",
+  "symlink"
+]);
+
 // packages/ceal-client-protocol/src/client-result-materialization.ts
 var CEAL_UNREAD_REASONS = vocabulary(["blocked", "unavailable", "too_large", "unsupported", "download_failed", "permission_denied"]);
-var CEAL_MODEL_VISIBLE_COMMAND_OUTPUT_MAX_BYTES = 32 * 1024;
-var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id", "read_argv"]);
-var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root", "continue_argv", "model_disclosure"]);
+var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id", "path", "sha256"]);
+var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "items_path", "row_count", "result_complete", "coverage", "local_result_root", "model_disclosure", "continue_argv", "how_to_read"]);
 
 // packages/ceal-client-protocol/src/gateway-cache-origin-validation.ts
 var CEAL_MAX_CACHE_ORIGIN_AGE_MS = 30 * 24 * 60 * 60 * 1e3;
@@ -1492,14 +3684,6 @@ var CEAL_GATEWAY_ANNOUNCEMENT_POLICY_NON_CLAIMS = vocabulary([
   "target_specific_scope_not_declared"
 ]);
 
-// packages/ceal-client-protocol/src/gateway-write-identity.ts
-var CEAL_GATEWAY_WRITE_IDENTITY_ROLES = Object.freeze(["replay_identity", "lookup_handle", "collision_evidence"]);
-var CEAL_GATEWAY_WRITE_IDENTITY_FIELDS = Object.freeze({
-  replay_identity: "idempotency_claim_sha256",
-  lookup_handle: "write_request_sha256",
-  collision_evidence: "normalized_mutation_sha256"
-});
-
 // packages/ceal-client-protocol/src/gateway-scoped-identity-projection-validation.ts
 var PROJECTION_REVISION_KEYS = Object.freeze(["graph_revision", "subject_key_revision", "projection_revision"]);
 
@@ -1512,6 +3696,18 @@ var CEAL_SUPPORTED_GATEWAY_PROTOCOL_RANGE = Object.freeze({
 // packages/ceal-client-protocol/src/admin-projection-vocabulary.ts
 var ADMIN_PROJECTION_STATES = vocabulary(["ready", "empty", "partial", "unknown"]);
 var ADMIN_VIEW_KINDS = vocabulary(["request_detail", "resource_access_timeline", "weekly_usage"]);
+var ADMIN_RECORD_PROJECTION_KINDS = vocabulary([
+  "request_list",
+  "usage_series",
+  "connector_health",
+  "person_connections",
+  "client_sessions",
+  "knowledge_base",
+  "change_history",
+  "approval_queue",
+  "access_group_list",
+  "capability_catalogue"
+]);
 var ADMIN_GAP_KINDS = vocabulary(["unknown", "unavailable", "partial"]);
 var ADMIN_UNAVAILABLE_REASONS = vocabulary([
   "not_recorded",
@@ -1535,7 +3731,11 @@ var ADMIN_SOURCE_OWNERS = vocabulary([
   "person",
   "resource",
   "prompt",
-  "usage"
+  "usage",
+  "connector",
+  "session",
+  "knowledge",
+  "policy"
 ]);
 var ADMIN_COMPLETENESS_STATES = vocabulary(["complete", "partial", "unknown"]);
 var ADMIN_OPERATION_OUTCOMES = vocabulary(["completed", "failed", "denied", "cancelled", "unknown"]);
@@ -1813,6 +4013,9 @@ async function doctorCodexClient(options = {}) {
   return { schema_version: CODEX_CLIENT_DOCTOR_SCHEMA_VERSION, ...await doctorClient(options, "Codex") };
 }
 
+// host/invocation-authentication-command.ts
+import { performance } from "node:perf_hooks";
+
 // host/relay/src/producer-frame.ts
 var HOST_PRODUCER_FRAME_SCHEMA = "ceal.host_producer_frame.v1";
 var HOST_PRODUCER_MAX_JSON_BYTES = 262144;
@@ -1824,6 +4027,15 @@ var FRAME_KINDS = new Set(HOST_PRODUCER_FRAME_KINDS);
 function isHostProducerFrameKind(value) {
   return typeof value === "string" && FRAME_KINDS.has(value);
 }
+var HOST_PRODUCER_FRAME_ERROR_CODES = [
+  "invalid_frame_encoding",
+  "invalid_frame_length",
+  "frame_truncated",
+  "unsupported_frame_schema",
+  "invalid_frame_shape",
+  "invalid_producer_identity",
+  "frame_too_large"
+];
 var HostProducerFrameError = class extends Error {
   code;
   constructor(code, message = code) {
@@ -1858,6 +4070,9 @@ function decodeHostProducerFrame(input) {
   validateFrame(value);
   return value;
 }
+function isHostSafeRef(value) {
+  return safeRef(value);
+}
 function validateFrame(value) {
   if (!record(value)) throw new HostProducerFrameError("invalid_frame_shape");
   if (value.schema_version !== HOST_PRODUCER_FRAME_SCHEMA) throw new HostProducerFrameError("unsupported_frame_schema", `unsupported_frame_schema: ${refusalFact("schema_version", value.schema_version, HOST_PRODUCER_FRAME_SCHEMA)}`);
@@ -1945,6 +4160,15 @@ function exactOptional(value, required, optional) {
   return required.every((key) => keys.includes(key)) && keys.every((key) => required.includes(key) || optional.includes(key));
 }
 
+// host/relay/src/host-producer-core.ts
+import { createHash as createHash3 } from "node:crypto";
+import { O_NOFOLLOW, O_RDONLY as O_RDONLY2 } from "node:constants";
+import { mkdir as mkdir2, open as open3, readFile as readFile2, rename as rename2, writeFile } from "node:fs/promises";
+import { join as join3 } from "node:path";
+
+// host/relay/src/relay-ipc.ts
+import { createConnection, createServer } from "node:net";
+
 // host/relay/src/durable-atomic-replacement.ts
 import { O_RDONLY } from "node:constants";
 import { lstat, mkdir, open as open2, rename, unlink } from "node:fs/promises";
@@ -1962,20 +4186,24 @@ var DEFAULT_PORT = {
 // host/relay/src/relay-request-binding-store.ts
 var MAX_STATE_BYTES = 8 * 1024 * 1024;
 
-// host/relay/src/relay-quarantine-store.ts
-var RELAY_QUARANTINE_MAX_BYTES = 16 * 1024 * 1024;
-
-// host/relay/src/relay-admission-store.ts
-var DEFAULT_LIMITS = { global_count: 8192, global_bytes: 64 * 1024 * 1024, producer_count: 4096, producer_bytes: 32 * 1024 * 1024 };
-var RETRY_SECONDS = [1, 2, 4, 8, 16, 32, 60];
-var MAX_RETRYABLE_ATTEMPTS = RETRY_SECONDS.length + 10;
-
-// host/relay/src/relay-ipc.ts
-import { createConnection, createServer } from "node:net";
-
 // host/relay/src/current-prompt-custody.ts
 var HOST_CURRENT_PROMPT_MAX_BYTES = 256 * 1024;
 
+// host/service-log.ts
+function writeHostServiceDiagnostic(producer_id, event, failure_kind, cause, sink) {
+  const line = `${JSON.stringify({ schema_version: CEAL_HOST_SERVICE_DIAGNOSTIC_SCHEMA, producer_id, event, ...event === "watcher_scan_failed" && failure_kind !== void 0 ? { failure_kind } : {}, ...event === "watcher_scan_failed" && cause !== void 0 ? { cause } : {} })}
+`;
+  try {
+    (sink ?? defaultHostServiceDiagnosticSink)(line);
+  } catch {
+  }
+}
+function defaultHostServiceDiagnosticSink(line) {
+  process.stderr.write(line);
+}
+var HOST_SERVICE_LOG_MAX_BYTES = 1024 * 1024;
+var HOST_SERVICE_LOG_TAIL_BYTES = 64 * 1024;
+
 // host/relay/src/relay-ipc.ts
 var HOST_RELAY_REQUEST_BINDING_KEYS = Object.freeze([
   "schema_version",
@@ -1996,6 +4224,7 @@ var HOST_RELAY_IPC_RESPONSE_SCHEMA = "ceal.host_relay_admission.v1";
 var HOST_RELAY_INVOCATION_CONTEXT_QUERY_SCHEMA = "ceal.host_relay_invocation_context_query.v1";
 var HOST_RELAY_INVOCATION_CONTEXT_RESULT_SCHEMA = "ceal.host_relay_invocation_context_result.v1";
 var HOST_RELAY_CURRENT_PROMPT_REGISTER_SCHEMA = "ceal.host_relay_current_prompt_register.v1";
+var HOST_RELAY_CURRENT_PROMPT_RELEASE_SCHEMA = "ceal.host_relay_current_prompt_release.v1";
 var HOST_RELAY_CURRENT_PROMPT_RESULT_SCHEMA = "ceal.host_relay_current_prompt_result.v1";
 var HOST_RELAY_IPC_LENGTH_BYTES = Uint32Array.BYTES_PER_ELEMENT;
 var HOST_RELAY_ADMISSION_RESPONSE_MAX_BYTES = 4096;
@@ -2008,6 +4237,8 @@ var HOST_RELAY_INVOCATION_MINT_REFUSAL_REASONS = vocabulary([
   "gateway_unavailable",
   "gateway_refused",
   "gateway_response_invalid",
+  "gateway_rate_limited",
+  "producer_frame_invalid",
   "deadline",
   "cancelled",
   "mint_failed",
@@ -2021,6 +4252,17 @@ var HOST_RELAY_INVOCATION_MINT_REFUSAL_REASONS = vocabulary([
   "host_input_mismatch",
   "host_prompt_mismatch"
 ]);
+var HOST_RELAY_DIRECT_WIRE_MINT_REASONS = vocabulary([
+  "context_stale",
+  "context_expired",
+  "host_source_refused",
+  "host_credential_refused",
+  "gateway_unavailable",
+  "gateway_rate_limited",
+  "gateway_refused",
+  "gateway_response_invalid",
+  "producer_frame_invalid"
+]);
 var HOST_RELAY_INVOCATION_MINT_OUTCOMES = vocabulary(["completed", "caller_cancelled", "deadline", "failed", "no_binding"]);
 var HOST_RELAY_EXCHANGE_FAILURES = vocabulary([
   "permission_denied",
@@ -2042,6 +4284,12 @@ var HostRelayIpcError = class extends Error {
     this.failure = failure2;
   }
 };
+var HostRelayCurrentPromptCapacityRefusal = class extends Error {
+  constructor() {
+    super("current_prompt_capacity_exhausted");
+    this.name = "HostRelayCurrentPromptCapacityRefusal";
+  }
+};
 function hostRelayExchangeFailure(error) {
   return error instanceof HostRelayIpcError ? error.failure : void 0;
 }
@@ -2090,8 +4338,14 @@ var HostRelayCurrentPromptPort = class {
   async register(input) {
     const request2 = { schema_version: HOST_RELAY_CURRENT_PROMPT_REGISTER_SCHEMA, ...input };
     const response2 = await exchange(this.endpoint, encodeLengthPrefixed(request2), this.timeout_ms, decodeCurrentPromptResponseBuffer);
+    if (response2.status === "capacity_exhausted") throw new HostRelayCurrentPromptCapacityRefusal();
     if (response2.status !== "registered") throw new HostRelayIpcError("relay_unavailable", response2.status);
   }
+  async release(identity) {
+    const request2 = { schema_version: HOST_RELAY_CURRENT_PROMPT_RELEASE_SCHEMA, ...identity };
+    const response2 = await exchange(this.endpoint, encodeLengthPrefixed(request2), this.timeout_ms, decodeCurrentPromptResponseBuffer);
+    if (response2.status !== "released") throw new HostRelayIpcError("relay_unavailable", response2.status, "response_invalid");
+  }
 };
 function submitHostProducerFrame(endpoint, frame, timeoutMs = 5e3) {
   return exchange(endpoint, encodeHostProducerFrame(frame), timeoutMs, decodeResponseBuffer);
@@ -2183,7 +4437,7 @@ function decodeInvocationContextResponseBuffer(buffer) {
 function decodeCurrentPromptResponseBuffer(buffer) {
   const value = decodeLengthPrefixedJson(buffer, HOST_RELAY_ADMISSION_RESPONSE_MAX_BYTES);
   if (value === null) return null;
-  if (!record2(value) || !exactKeys3(value, ["schema_version", "status"]) || value.schema_version !== HOST_RELAY_CURRENT_PROMPT_RESULT_SCHEMA || value.status !== "registered" && value.status !== "current_prompt_unavailable") throw new HostRelayIpcError("relay_unavailable");
+  if (!record2(value) || !exactKeys3(value, ["schema_version", "status"]) || value.schema_version !== HOST_RELAY_CURRENT_PROMPT_RESULT_SCHEMA || value.status !== "registered" && value.status !== "capacity_exhausted" && value.status !== "current_prompt_unavailable" && value.status !== "released") throw new HostRelayIpcError("relay_unavailable", "Host Relay current-prompt response is invalid.", "response_invalid");
   return { schema_version: HOST_RELAY_CURRENT_PROMPT_RESULT_SCHEMA, status: value.status };
 }
 function encodeInvocationContextQuery(query) {
@@ -2192,11 +4446,14 @@ function encodeInvocationContextQuery(query) {
   return encodeLengthPrefixed(value);
 }
 function validInvocationContextQueryRequest(value) {
-  return validQueryIdentity(value, HOST_RELAY_INVOCATION_CONTEXT_QUERY_SCHEMA) && exactKeys3(value, ["schema_version", "producer_id", "producer_installation_ref", "local_session_ref", "local_turn_ref", "client_nonce"]) && typeof value.client_nonce === "string" && CEAL_HOST_CLIENT_NONCE_PATTERN.test(value.client_nonce);
+  return validQueryIdentity(value, HOST_RELAY_INVOCATION_CONTEXT_QUERY_SCHEMA) && exactKeys3(value, ["schema_version", "producer_id", "producer_installation_ref", "local_session_ref", "local_turn_ref", "client_nonce"], ["visible_output_max_bytes"]) && typeof value.client_nonce === "string" && CEAL_HOST_CLIENT_NONCE_PATTERN.test(value.client_nonce) && (value.visible_output_max_bytes === void 0 || validVisibleOutputBudget(value.visible_output_max_bytes));
 }
 function validQueryIdentity(value, schema) {
   return record2(value) && value.schema_version === schema && (value.producer_id === "codex" || value.producer_id === "claude") && safeRef2(value.producer_installation_ref) && safeRef2(value.local_session_ref) && safeRef2(value.local_turn_ref);
 }
+function validVisibleOutputBudget(value) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value > 0 && value <= CEAL_CANONICAL_HTTP_MAX_RESPONSE_BYTES;
+}
 function validInvocationContextResponse(value) {
   if (!record2(value) || value.schema_version !== HOST_RELAY_INVOCATION_CONTEXT_RESULT_SCHEMA) return false;
   if (value.status === "no_binding") return Object.keys(value).length === 2;
@@ -2228,8 +4485,9 @@ function encodeLengthPrefixed(value) {
   body.copy(output, HOST_RELAY_IPC_LENGTH_BYTES);
   return output;
 }
-function exactKeys3(value, keys) {
-  return Object.keys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
+function exactKeys3(value, required, optional = []) {
+  const keys = Object.keys(value);
+  return required.every((key) => Object.hasOwn(value, key)) && keys.every((key) => required.includes(key) || optional.includes(key));
 }
 function safeRef2(value) {
   return typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u.test(value);
@@ -2238,24 +4496,385 @@ function errorCode2(error) {
   return record2(error) && typeof error.code === "string" ? error.code : null;
 }
 
+// host/relay/src/host-producer-core.ts
+var HOST_TRANSCRIPT_CURSOR_REASONS = vocabulary(["transcript_replaced", "transcript_truncated", "transcript_rewritten", "transcript_malformed"]);
+function isHostTranscriptCursorReason(value) {
+  return typeof value === "string" && HOST_TRANSCRIPT_CURSOR_REASONS.some((reason) => reason === value);
+}
+var TRANSCRIPT_MISSING_REASON = "transcript_missing";
+var TRANSCRIPT_SCAN_READ_ERROR_ERRNOS = ["EBADF", "EACCES", "EIO", "EMFILE", "ENFILE", "ENOENT", "ENOTDIR", "EPERM"];
+function transcriptScanFailureKind(error, adapterFailureKind) {
+  if (transcriptErrorCode(error) === "ELOOP") return "symlink";
+  const adapter = adapterFailureKind(error);
+  if (adapter !== void 0) return adapter;
+  const code = transcriptErrorCode(error);
+  if (code === "EFBIG") return "size_budget";
+  if (code !== null && TRANSCRIPT_SCAN_READ_ERROR_ERRNOS.includes(code)) return "read_error";
+  return "other";
+}
+async function registerHostCurrentPromptDiagnosed(register, diagnostic) {
+  try {
+    await register();
+    diagnostic("current_prompt_registered");
+    return true;
+  } catch (error) {
+    if (!(error instanceof HostRelayCurrentPromptCapacityRefusal)) diagnostic("current_prompt_registration_failed");
+    throw error;
+  }
+}
+function transcriptErrorCode(error) {
+  return typeof error === "object" && error !== null && "code" in error && typeof error.code === "string" ? error.code : null;
+}
+var HOST_TRANSCRIPT_READ_CHUNK_BYTES = 256 * 1024;
+async function readTranscriptCompleteChunk(handle, offset, size) {
+  const available = Math.max(0, size - offset);
+  if (available === 0) return "empty";
+  const chunks = [];
+  let position = offset;
+  let total = 0;
+  let lastNewline = -1;
+  while (position < size) {
+    const buffer = Buffer.alloc(Math.min(HOST_TRANSCRIPT_READ_CHUNK_BYTES, size - position));
+    const read = await handle.read(buffer, 0, buffer.length, position);
+    if (read.bytesRead === 0) break;
+    const chunk = buffer.subarray(0, read.bytesRead);
+    chunks.push(chunk);
+    const newline = chunk.lastIndexOf(10);
+    if (newline >= 0) lastNewline = total + newline;
+    total += chunk.length;
+    position += chunk.length;
+    if (lastNewline >= 0) break;
+  }
+  if (lastNewline < 0) return "partial";
+  return Buffer.concat(chunks, total).subarray(0, lastNewline + 1);
+}
+async function readTranscriptAnchor(handle, offset, anchorBytes) {
+  const start = Math.max(0, offset - anchorBytes);
+  const anchor = Buffer.alloc(offset - start);
+  if (anchor.length > 0) await handle.read(anchor, 0, anchor.length, start);
+  return { start, sha256: transcriptSha256(anchor) };
+}
+async function transcriptAnchorMatches(handle, cursor) {
+  const buffer = Buffer.alloc(cursor.offset - cursor.anchor_start);
+  if (buffer.length > 0) await handle.read(buffer, 0, buffer.length, cursor.anchor_start);
+  return transcriptSha256(buffer) === cursor.anchor_sha256;
+}
+function transcriptCursorIdentityReason(cursor, transcriptPath, device, inode) {
+  if (cursor.device !== device || cursor.inode !== inode || cursor.transcript_path !== transcriptPath) return "transcript_replaced";
+  return null;
+}
+async function transcriptCursorBoundsReason(handle, cursor, size) {
+  if (size < cursor.offset) return "transcript_truncated";
+  if (cursor.offset > 0 && !await transcriptAnchorMatches(handle, cursor)) return "transcript_rewritten";
+  return null;
+}
+function transcriptSha256(value) {
+  return createHash3("sha256").update(value).digest("hex");
+}
+function transcriptObjectSha256(value) {
+  return createHash3("sha256").update(JSON.stringify(value), "utf8").digest("hex");
+}
+function isTranscriptRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isMissingTranscriptError(error) {
+  return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
+}
+function transcriptTimestamp(now, fail) {
+  const value = now();
+  if (!Number.isFinite(value.getTime())) throw fail();
+  return value.toISOString();
+}
+function transcriptExpiration(now, retentionMs, fail) {
+  return new Date(Date.parse(transcriptTimestamp(now, fail)) + retentionMs).toISOString();
+}
+function createTranscriptWatcherBase(options, owner) {
+  if (typeof options.outbox_dir !== "string" || options.outbox_dir.length === 0) throw owner.invalid_outbox();
+  return {
+    outboxRetentionMs: options.retention_ms ?? owner.default_retention_ms,
+    now: options.now ?? (() => /* @__PURE__ */ new Date()),
+    log: options.log ?? ((line) => {
+      process.stderr.write(`${line}
+`);
+    }),
+    producerInstallationRef: options.producer_installation_ref
+  };
+}
+async function scanTranscriptRegistrations(registrations, scanOne) {
+  let records = 0;
+  let enqueued = 0;
+  let quarantined = 0;
+  for (const registration of registrations) {
+    const result = await scanOne(registration);
+    records += result.records;
+    enqueued += result.enqueued;
+    if (result.quarantined) quarantined += 1;
+  }
+  return { registrations: registrations.length, records, enqueued, quarantined };
+}
+function formatRetiredTranscriptLog(producerLabel, transcriptPath) {
+  return `${producerLabel} retired a transcript registration: transcript_path=${JSON.stringify(transcriptPath)}, reason=${TRANSCRIPT_MISSING_REASON}.`;
+}
+var HostTranscriptWatcher = class {
+  outboxRetentionMs;
+  now;
+  log;
+  producerInstallationRef;
+  clockFailure;
+  constructor(options, owner) {
+    const base = createTranscriptWatcherBase(options, owner);
+    this.outboxRetentionMs = base.outboxRetentionMs;
+    this.now = base.now;
+    this.log = base.log;
+    this.producerInstallationRef = base.producerInstallationRef;
+    this.clockFailure = owner.clock_failure;
+  }
+  async scanOnce() {
+    return scanTranscriptRegistrations(await this.listRegistrations(), (registration) => this.scanRegistration(registration));
+  }
+  async scanRegistration(registration) {
+    try {
+      return await this.openTranscript(registration, (handle) => this.scanOpened(handle, registration), {
+        missing: () => this.retireMissing(registration),
+        failed: (handle, error) => this.scanFailed(handle, registration, error)
+      });
+    } catch (error) {
+      if (error instanceof HostRelayCurrentPromptCapacityRefusal) return { records: 0, enqueued: 0, quarantined: false };
+      throw error;
+    }
+  }
+  async openTranscript(registration, scan, handlers) {
+    let handle;
+    try {
+      handle = await open3(this.transcriptPathOf(registration), O_RDONLY2 | O_NOFOLLOW);
+      return await scan(handle);
+    } catch (error) {
+      if (handle === void 0 && isMissingTranscriptError(error)) return handlers.missing();
+      if (hostRelayExchangeFailure(error) !== void 0 || error instanceof HostRelayCurrentPromptCapacityRefusal) throw error;
+      return handlers.failed(handle, error);
+    } finally {
+      await handle?.close();
+    }
+  }
+  /**
+   * A transcript the Host deleted never comes back, so retrying its
+   * registration once per reconcile interval is a failure with no end.
+   * Retire it at the scan that finds it missing and say so once. Only
+   * ENOENT means gone; a permission or busy failure is about this moment,
+   * not about the file, and keeps the registration for the next scan.
+   */
+  async retireMissingTranscript(transcriptPath, producerLabel, retire) {
+    await retire();
+    this.log(formatRetiredTranscriptLog(producerLabel, transcriptPath));
+    return { records: 0, enqueued: 0, quarantined: false };
+  }
+  stamp() {
+    return transcriptTimestamp(this.now, this.clockFailure);
+  }
+  expire(retentionMs) {
+    return transcriptExpiration(this.now, retentionMs, this.clockFailure);
+  }
+  sha(value) {
+    return transcriptSha256(value);
+  }
+  objectSha(value) {
+    return transcriptObjectSha256(value);
+  }
+  isRecord(value) {
+    return isTranscriptRecord(value);
+  }
+  readChunk(handle, offset, size) {
+    return readTranscriptCompleteChunk(handle, offset, size);
+  }
+  readAnchor(handle, offset, anchorBytes) {
+    return readTranscriptAnchor(handle, offset, anchorBytes);
+  }
+  cursorIdentityReason(cursor, transcriptPath, device, inode) {
+    return transcriptCursorIdentityReason(cursor, transcriptPath, device, inode);
+  }
+  cursorBoundsReason(handle, cursor, size) {
+    return transcriptCursorBoundsReason(handle, cursor, size);
+  }
+};
+var HOST_PRODUCER_STATE_IDENTITY = {
+  codex: { file_name: "codex-producer-state.json", schema: "ceal.codex_producer_state.v1" },
+  claude: { file_name: "claude-producer-state.json", schema: "ceal.claude_producer_state.v1" }
+};
+var HostProducerDrainCore = class {
+  host;
+  relay;
+  statePath;
+  stateSchema;
+  installationRef;
+  epoch;
+  now;
+  tail = Promise.resolve();
+  constructor(host, runtime) {
+    if (!isHostSafeRef(runtime.producer_installation_ref)) throw host.fail("configuration", `${host.producer_label} producer installation identity is invalid.`);
+    const epoch = runtime.producer_epoch ?? 1;
+    if (!Number.isSafeInteger(epoch) || epoch <= 0) throw host.fail("configuration", `${host.producer_label} producer epoch is invalid.`);
+    this.host = host;
+    this.relay = runtime.relay;
+    this.statePath = join3(host.outbox_directory, HOST_PRODUCER_STATE_IDENTITY[host.producer_id].file_name);
+    this.stateSchema = HOST_PRODUCER_STATE_IDENTITY[host.producer_id].schema;
+    this.installationRef = runtime.producer_installation_ref;
+    this.epoch = epoch;
+    this.now = runtime.now ?? (() => /* @__PURE__ */ new Date());
+  }
+  drainOutbox() {
+    const run = this.tail.then(() => this.drainLocked());
+    this.tail = run.then(() => void 0, () => void 0);
+    return run;
+  }
+  async drainLocked() {
+    const read = await this.host.listEnvelopes();
+    let admitted = 0;
+    let expired = 0;
+    let retained = 0;
+    for (const envelope of read.entries) {
+      const reserved = await this.hasReservation(this.host.submissionRefOf(envelope));
+      if (!reserved && Date.parse(this.host.expiresAtOf(envelope)) <= this.now().getTime()) {
+        await this.host.removeEnvelope(envelope);
+        expired += 1;
+        continue;
+      }
+      const frames = await this.reserve(envelope);
+      let complete = true;
+      for (const frame of frames) {
+        const outcome = await this.relay.admit(frame);
+        if (outcome.code !== "admitted" && outcome.code !== "already_admitted") {
+          complete = false;
+          break;
+        }
+      }
+      if (!complete) {
+        retained += 1;
+        break;
+      }
+      await this.host.removeEnvelope(envelope);
+      await this.release(this.host.submissionRefOf(envelope));
+      admitted += 1;
+    }
+    return { admitted, retained: retained + Math.max(0, read.entries.length - admitted - expired - retained), expired, malformed: read.malformed };
+  }
+  async hasReservation(submissionRef) {
+    return (await this.readState()).pending[submissionRef] !== void 0;
+  }
+  async reserve(envelope) {
+    const state = await this.readState();
+    const submissionRef = this.host.submissionRefOf(envelope);
+    const existing = state.pending[submissionRef];
+    if (existing !== void 0) return existing;
+    const drafts = await this.host.mapEnvelope(envelope);
+    const frames = drafts.map((draft, offset) => ({
+      schema_version: "ceal.host_producer_frame.v1",
+      producer_id: this.host.producer_id,
+      producer_installation_ref: this.installationRef,
+      producer_epoch: this.epoch,
+      sequence: state.next_sequence + offset,
+      frame_kind: draft.frame_kind,
+      occurred_at: this.host.createdAtOf(envelope),
+      payload: draft.payload
+    }));
+    await this.writeState({ ...state, next_sequence: state.next_sequence + frames.length, pending: { ...state.pending, [submissionRef]: frames } });
+    return frames;
+  }
+  async release(submissionRef) {
+    const state = await this.readState();
+    if (state.pending[submissionRef] === void 0) return;
+    const pending = { ...state.pending };
+    delete pending[submissionRef];
+    await this.writeState({ ...state, pending });
+  }
+  async readState() {
+    try {
+      const value = JSON.parse(await readFile2(this.statePath, "utf8"));
+      return this.decodeState(value);
+    } catch (error) {
+      if (errorCode3(error) !== "ENOENT") throw error;
+      return { schema_version: this.stateSchema, producer_installation_ref: this.installationRef, producer_epoch: this.epoch, next_sequence: 1, pending: {} };
+    }
+  }
+  async writeState(state) {
+    await mkdir2(this.host.outbox_directory, { recursive: true, mode: 448 });
+    const temporary = `${this.statePath}.${process.pid}.new`;
+    await writeFile(temporary, JSON.stringify(state), { mode: 384 });
+    await rename2(temporary, this.statePath);
+  }
+  decodeState(value) {
+    const label = this.host.producer_label;
+    const fail = (code, message) => this.host.fail(code, message);
+    if (!isDrainStateHeader(value, this.stateSchema, this.installationRef)) {
+      throw fail("storage", `${label} producer state header is malformed or belongs to another installation (${refusalFacts([
+        { name: "schema_version", value: isTranscriptRecord(value) ? value.schema_version : void 0, expected: this.stateSchema },
+        { name: "producer_installation_ref", value: isTranscriptRecord(value) ? value.producer_installation_ref : void 0, expected: this.installationRef }
+      ])}).`);
+    }
+    if (Number(value.producer_epoch) > this.epoch) throw fail("storage", `${label} producer state epoch is ahead of this installation (${refusalFact("producer_epoch", value.producer_epoch, `at most ${this.epoch}`)}).`);
+    const pending = {};
+    const storedEpoch = Number(value.producer_epoch);
+    for (const [submissionRef, frames] of Object.entries(value.pending)) {
+      if (!isHostSafeRef(submissionRef) || !Array.isArray(frames) || frames.length === 0) throw fail("storage", `${label} producer pending reservation is malformed.`);
+      pending[submissionRef] = frames.map((frame) => this.decodeStoredFrame(frame, storedEpoch));
+    }
+    return { schema_version: this.stateSchema, producer_installation_ref: this.installationRef, producer_epoch: this.epoch, next_sequence: Number(value.next_sequence), pending };
+  }
+  decodeStoredFrame(value, storedEpoch) {
+    const label = this.host.producer_label;
+    const json = Buffer.from(JSON.stringify(value), "utf8");
+    const encoded = Buffer.allocUnsafe(json.length + 4);
+    encoded.writeUInt32BE(json.length, 0);
+    json.copy(encoded, 4);
+    const frame = decodeHostProducerFrame(encoded);
+    if (frame.producer_id !== this.host.producer_id || frame.producer_installation_ref !== this.installationRef || frame.producer_epoch > storedEpoch) throw this.host.fail("storage", `${label} producer pending frame identity is malformed (${refusalFacts([
+      { name: "producer_id", value: frame.producer_id, expected: this.host.producer_id },
+      { name: "producer_installation_ref", value: frame.producer_installation_ref, expected: this.installationRef },
+      { name: "producer_epoch", value: frame.producer_epoch, expected: `at most ${storedEpoch}` }
+    ])}).`);
+    return frame;
+  }
+};
+function isDrainStateHeader(value, schema, installationRef) {
+  return isTranscriptRecord(value) && value.schema_version === schema && value.producer_installation_ref === installationRef && Number.isSafeInteger(value.producer_epoch) && Number(value.producer_epoch) > 0 && Number.isSafeInteger(value.next_sequence) && Number(value.next_sequence) > 0 && isTranscriptRecord(value.pending);
+}
+function errorCode3(error) {
+  return typeof error === "object" && error !== null && "code" in error ? String(error.code) : null;
+}
+
+// host/relay/src/relay-quarantine-store.ts
+var RELAY_QUARANTINE_MAX_BYTES = 16 * 1024 * 1024;
+var RELAY_QUARANTINE_FRAME_REASONS = ["frame_identity_conflict", "sequence_gap", "gateway_refused"];
+var RELAY_QUARANTINE_REASONS = [...RELAY_QUARANTINE_FRAME_REASONS, ...HOST_PRODUCER_FRAME_ERROR_CODES];
+
+// host/relay/src/relay-admission-store.ts
+var DEFAULT_LIMITS = { global_count: 8192, global_bytes: 64 * 1024 * 1024, producer_count: 4096, producer_bytes: 32 * 1024 * 1024 };
+var RETRY_SECONDS = [1, 2, 4, 8, 16, 32, 60];
+var MAX_RETRYABLE_ATTEMPTS = RETRY_SECONDS.length + 10;
+
 // host/invocation-authentication-command.ts
 var HOST_INVOCATION_AUTHENTICATION_COMMAND_PREFIX = ["authenticate", "--client-nonce"];
-var REFUSAL_REASON_PATTERN = /^[a-z][a-z0-9_ ]{0,63}$/u;
-function installedHostInvocationAuthenticationCommandOptions(config) {
+var HOST_AUTHENTICATION_BUDGET_ENVIRONMENT = "CEAL_HOST_AUTHENTICATION_BUDGET_MS";
+var HOST_CONTEXT_ACTIVATION_WAIT_MAX_MS = 2e4;
+var CODEX_CONTEXT_ACTIVATION_WAIT_MAX_MS = HOST_CONTEXT_ACTIVATION_WAIT_MAX_MS;
+var HOST_AUTHENTICATION_COMPLETION_RESERVE_MS = 5e3;
+var INVOCATION_CONTEXT_POLL_INTERVAL_MS = 250;
+var REFUSAL_REASON_PATTERN = /^[a-z][a-z0-9_]{0,63}$/u;
+function installedHostInvocationAuthenticationCommandOptions(config, contextBudgetMs, maxContextWaitMs) {
   const port = new HostRelayInvocationContextPort(config.relay_endpoint);
   return {
     host_source_ref: config.host_source_ref,
     outbox_dir: config.outbox_dir,
     producer_installation_ref: config.producer_installation_ref,
+    context_activation_wait_ms: boundedContextActivationWait(contextBudgetMs, config.ipc_timeout_ms, maxContextWaitMs),
     mint_invocation_context: (input) => port.mintInvocationContext({ ...input, producer_id: input.producer_id })
   };
 }
-async function runHostInvocationAuthenticationCommand(descriptor, args, options) {
+async function runHostInvocationAuthenticationCommand(descriptor2, args, options) {
   let sink = options?.output_sink;
   try {
-    const resolved = await resolveOptions(descriptor, args, options);
+    const resolved = await resolveOptions(descriptor2, args, options);
     sink = resolved.options.output_sink;
-    writeResult(await authenticateHostInvocation(descriptor, resolved.input, resolved.options), sink);
+    writeResult(await authenticateHostInvocation(descriptor2, resolved.input, resolved.options), sink);
     return 0;
   } catch (error) {
     writeResult({ ok: false, code: "invocation_authentication_unavailable", reason: authenticationRefusalReason(error) }, sink);
@@ -2264,65 +4883,150 @@ async function runHostInvocationAuthenticationCommand(descriptor, args, options)
 }
 function authenticationRefusalReason(error) {
   const message = error instanceof Error ? error.message : "";
-  return REFUSAL_REASON_PATTERN.test(message) ? message : "unclassified";
+  if (!REFUSAL_REASON_PATTERN.test(message)) return "host_refusal_invalid";
+  return isCealHostAuthenticationCause(message) ? message : "host_refusal_invalid";
 }
-async function authenticateHostInvocation(descriptor, input, options) {
-  if (input.length !== HOST_INVOCATION_AUTHENTICATION_COMMAND_PREFIX.length + 1 || input[0] !== HOST_INVOCATION_AUTHENTICATION_COMMAND_PREFIX[0] || input[1] !== HOST_INVOCATION_AUTHENTICATION_COMMAND_PREFIX[1]) throw new TypeError("invalid arguments");
+async function authenticateHostInvocation(descriptor2, input, options) {
+  if (input.length !== HOST_INVOCATION_AUTHENTICATION_COMMAND_PREFIX.length + 1 || input[0] !== HOST_INVOCATION_AUTHENTICATION_COMMAND_PREFIX[0] || input[1] !== HOST_INVOCATION_AUTHENTICATION_COMMAND_PREFIX[1]) throw new TypeError("invalid_arguments");
   const request2 = decodeCealHostInvocationAuthenticationRequest({ schema_version: CEAL_HOST_INVOCATION_AUTHENTICATION_REQUEST_SCHEMA, client_nonce: input[2] });
   const config = validateOptions(options);
-  const now = (config.now ?? (() => /* @__PURE__ */ new Date()))();
-  const { store, current } = await currentInvocation(descriptor, config, now);
-  if (config.mint_invocation_context === void 0) throw new TypeError("mint unavailable");
+  const now = config.now ?? (() => /* @__PURE__ */ new Date());
+  const { store, current } = await currentInvocation(descriptor2, config, now);
+  if (config.mint_invocation_context === void 0) throw new TypeError("relay_failed");
   const query = {
-    producer_id: descriptor.producer_id,
+    producer_id: descriptor2.producer_id,
     producer_installation_ref: config.producer_installation_ref,
     local_session_ref: current.identity.host_session_ref,
     local_turn_ref: current.identity.host_turn_ref,
-    client_nonce: request2.client_nonce
+    client_nonce: request2.client_nonce,
+    ...await visibleOutputBudget(descriptor2)
   };
   const response2 = await mintedResult(config.mint_invocation_context, query);
-  const rechecked = await store.readInvocationContext(current.identity.host_source_ref, current.identity.host_session_ref, (config.now ?? (() => /* @__PURE__ */ new Date()))());
-  if (rechecked === null || !sameTurn(current, rechecked)) throw new TypeError("context replaced");
-  return decodeCealHostInvocationAuthenticationResult(response2.result, now);
+  const completedAt = now();
+  const rechecked = await store.readInvocationContext(current.identity.host_source_ref, current.identity.host_session_ref, completedAt);
+  if (rechecked === null || !sameTurn(current, rechecked)) throw new TypeError("context_replaced");
+  return decodeCealHostInvocationAuthenticationResult(response2.result, completedAt);
+}
+async function visibleOutputBudget(descriptor2) {
+  const bytes = await descriptor2.resolve_visible_output_max_bytes?.();
+  return bytes === void 0 ? {} : { visible_output_max_bytes: bytes };
 }
 async function mintedResult(mint, query) {
   let response2;
   try {
     response2 = await mint(query);
   } catch (error) {
-    throw new TypeError(`relay ${hostRelayExchangeFailure(error) ?? "unavailable"}`);
+    throw new TypeError(exchangeFailureCause(hostRelayExchangeFailure(error) ?? "unavailable"));
   }
-  if (response2.status === "refused") throw new TypeError(`mint ${response2.reason}`);
-  if (response2.status !== "ready") throw new TypeError(response2.status);
+  if (response2.status === "refused") throw new TypeError(mintRefusalCause(response2.reason));
+  if (response2.status !== "ready") throw new TypeError("no_binding");
   return response2;
 }
-async function currentInvocation(descriptor, config, now) {
-  const store = descriptor.create_store(config.outbox_dir);
-  const identity = resolveIdentity(descriptor, config);
+function mintRefusalCause(reason) {
+  if (isDirectMintRefusalCause(reason)) return reason;
+  if (reason === "deadline" || reason === "cancelled") return "transient_retryable";
+  if (reason === "mint_failed" || reason === "relay_failed") return reason;
+  return isVocabularyWord(CEAL_HOST_MINT_REQUEST_CONTEXT_REFUSAL_REASONS, reason) ? "context_stale" : "host_refusal_invalid";
+}
+function isDirectMintRefusalCause(reason) {
+  return isVocabularyWord(HOST_RELAY_DIRECT_WIRE_MINT_REASONS, reason);
+}
+function exchangeFailureCause(failure2) {
+  if (failure2 === "permission_denied") return "relay_permission_denied";
+  if (failure2 === "timed_out") return "transient_retryable";
+  return "relay_unavailable";
+}
+async function currentInvocation(descriptor2, config, now) {
+  const store = descriptor2.create_store(config.outbox_dir);
+  const identity = resolveIdentity(descriptor2, config);
   if (identity.status !== "ready") throw new TypeError(identity.status);
-  const current = await store.readInvocationContext(identity.identity.host_source_ref, identity.identity.host_session_ref, now);
-  if (current === null || Date.parse(current.expires_at) <= now.getTime()) throw new TypeError("context unavailable");
-  return { store, current };
+  const waitBudgetMs = config.context_activation_wait_ms ?? 0;
+  const monotonicNow = config.monotonic_now ?? (() => performance.now());
+  const deadline = monotonicNow() + waitBudgetMs;
+  let firstCheck = true;
+  let waitEngaged = false;
+  while (true) {
+    if (!firstCheck && monotonicNow() >= deadline) {
+      recordActivationWaitExhaustion(descriptor2.producer_id, waitEngaged, waitBudgetMs, config.diagnostic_sink);
+      throw new TypeError("context_unavailable");
+    }
+    firstCheck = false;
+    const observedAt = now();
+    const current = await readLiveSessionContext(store, identity.identity.host_source_ref, identity.identity.host_session_ref, observedAt);
+    if (current !== null) {
+      recordActivationWaitCompletion(descriptor2.producer_id, waitEngaged, config.diagnostic_sink);
+      return { store, current };
+    }
+    const remainingMs = deadline - monotonicNow();
+    if (remainingMs <= 0) {
+      recordActivationWaitExhaustion(descriptor2.producer_id, waitEngaged, waitBudgetMs, config.diagnostic_sink);
+      throw new TypeError("context_unavailable");
+    }
+    recordActivationWaitEngagement(descriptor2.producer_id, waitEngaged, config.diagnostic_sink);
+    waitEngaged = true;
+    const intervalMs = Math.min(INVOCATION_CONTEXT_POLL_INTERVAL_MS, remainingMs);
+    await (config.wait ?? waitForContextActivation)(intervalMs);
+  }
+}
+function recordActivationWaitExhaustion(producer, engaged, budgetMs, sink) {
+  if (engaged || budgetMs > 0) writeHostServiceDiagnostic(producer, "activation_wait_exhausted", void 0, void 0, sink);
+  else writeHostServiceDiagnostic(producer, "activation_wait_skipped", void 0, void 0, sink);
+}
+function recordActivationWaitCompletion(producer, engaged, sink) {
+  if (engaged) writeHostServiceDiagnostic(producer, "activation_wait_completed", void 0, void 0, sink);
+}
+function recordActivationWaitEngagement(producer, engaged, sink) {
+  if (!engaged) writeHostServiceDiagnostic(producer, "activation_wait_engaged", void 0, void 0, sink);
+}
+async function readLiveSessionContext(store, hostSourceRef, hostSessionRef, now) {
+  const current = await store.readInvocationContext(hostSourceRef, hostSessionRef, now);
+  if (current !== null) {
+    if (Date.parse(current.expires_at) <= now.getTime()) throw new TypeError("context_expired");
+    return current;
+  }
+  const raw = await store.readRawInvocationContext?.(hostSourceRef, hostSessionRef);
+  if (raw !== null && raw !== void 0 && Date.parse(raw.expires_at) <= now.getTime()) throw new TypeError("context_expired");
+  return null;
 }
-function resolveIdentity(descriptor, options) {
-  const sessionId = options.session_id === null ? void 0 : options.session_id ?? process.env[descriptor.session_id_env];
-  if (isHostSessionId(sessionId)) return { status: "ready", identity: { host_source_ref: options.host_source_ref, host_session_ref: descriptor.session_ref(options.host_source_ref, sessionId) } };
-  return { status: "unavailable" };
+function resolveIdentity(descriptor2, options) {
+  const sessionId = options.session_id === null ? void 0 : options.session_id ?? process.env[descriptor2.session_id_env];
+  if (isHostSessionId(sessionId)) return { status: "ready", identity: { host_source_ref: options.host_source_ref, host_session_ref: descriptor2.session_ref(options.host_source_ref, sessionId) } };
+  return { status: "session_unavailable" };
 }
-async function resolveOptions(descriptor, args, options) {
+async function resolveOptions(descriptor2, args, options) {
   if (options !== void 0) return { input: [...args], options };
-  const configPath = descriptor.parse_config_flag(args);
+  const configPath = descriptor2.parse_config_flag(args);
+  const config = await descriptor2.read_producer_config(configPath);
   return {
-    input: args.filter((argument) => !argument.startsWith(`${descriptor.config_flag}=`)),
-    options: installedHostInvocationAuthenticationCommandOptions(await descriptor.read_producer_config(configPath))
+    input: args.filter((argument) => !argument.startsWith(`${descriptor2.config_flag}=`)),
+    options: installedHostInvocationAuthenticationCommandOptions(config, authenticationBudgetMsFromEnvironment(), descriptor2.context_activation_wait_max_ms)
   };
 }
+function authenticationBudgetMsFromEnvironment() {
+  const value = process.env[HOST_AUTHENTICATION_BUDGET_ENVIRONMENT];
+  if (value === void 0) return 0;
+  if (!/^(?:0|[1-9][0-9]{0,8})$/u.test(value)) throw new TypeError("invalid_arguments");
+  return Number(value);
+}
+function boundedContextActivationWait(contextBudgetMs, relayTimeoutMs, maxContextWaitMs) {
+  if (maxContextWaitMs === void 0 || contextBudgetMs <= 0) return 0;
+  const availableWaitMs = contextBudgetMs - relayTimeoutMs - HOST_AUTHENTICATION_COMPLETION_RESERVE_MS;
+  return Math.max(0, Math.min(maxContextWaitMs, availableWaitMs));
+}
+function waitForContextActivation(milliseconds) {
+  return new Promise((resolve) => {
+    setTimeout(resolve, milliseconds);
+  });
+}
 function validateOptions(options) {
-  if (typeof options.outbox_dir !== "string" || options.outbox_dir.length === 0 || typeof options.host_source_ref !== "string" || !SAFE_REF.test(options.host_source_ref) || typeof options.producer_installation_ref !== "string" || !SAFE_REF.test(options.producer_installation_ref) || !validOptionalSession(options.session_id)) {
-    throw new TypeError("options invalid");
+  if (typeof options.outbox_dir !== "string" || options.outbox_dir.length === 0 || typeof options.host_source_ref !== "string" || !SAFE_REF.test(options.host_source_ref) || typeof options.producer_installation_ref !== "string" || !SAFE_REF.test(options.producer_installation_ref) || !validContextActivationWait(options.context_activation_wait_ms) || !validOptionalSession(options.session_id)) {
+    throw new TypeError("options_invalid");
   }
   return options;
 }
+function validContextActivationWait(value) {
+  return value === void 0 || Number.isSafeInteger(value) && value >= 0 && value <= HOST_CONTEXT_ACTIVATION_WAIT_MAX_MS;
+}
 function isHostSessionId(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 256 && !value.includes("\0");
 }
@@ -2341,7 +5045,7 @@ function writeResult(value, sink) {
 import { posix as posix3, win32 as win323 } from "node:path";
 
 // host/runtime-source-paths.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 import { posix as posix2, win32 as win322 } from "node:path";
 
 // host/absolute-path.ts
@@ -2363,7 +5067,7 @@ function hostRuntimeSourcePaths(stateRoot, sourceRef, platform = process.platfor
   const sourcesRoot = path.join(stateRoot, "sources");
   const sourceRoot = path.join(sourcesRoot, sourceId);
   const runtimeRoot = path.join(stateRoot, "run");
-  const endpoint = platform === "win32" ? `\\\\.\\pipe\\ceal-host-${createHash3("sha256").update(`${stateRoot}\0${sourceRef}`).digest("hex").slice(0, 24)}` : path.join(runtimeRoot, `${sourceId}.sock`);
+  const endpoint = platform === "win32" ? `\\\\.\\pipe\\ceal-host-${createHash4("sha256").update(`${stateRoot}\0${sourceRef}`).digest("hex").slice(0, 24)}` : path.join(runtimeRoot, `${sourceId}.sock`);
   assertHostRuntimeIpcLength(endpoint, platform);
   return { sourceId, sourcesRoot, sourceRoot, relayRoot: path.join(sourceRoot, "relay"), codexOutbox: path.join(sourceRoot, "producers", "codex", "outbox"), claudeOutbox: path.join(sourceRoot, "producers", "claude", "outbox"), endpoint, runtimeRoot };
 }
@@ -2379,7 +5083,7 @@ function assertHostProducerSourcePaths(stateRoot, config, producer, platform = p
 
 // host/producer-service.ts
 import { constants } from "node:fs";
-import { lstat as lstat2, open as open3 } from "node:fs/promises";
+import { lstat as lstat2, open as open4 } from "node:fs/promises";
 var SAFE_REF4 = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
 var HOST_PRODUCER_CONFIG_FLAG = "--ceal-host-config";
 var HostProducerServiceError = class extends Error {
@@ -2400,22 +5104,22 @@ function hostProducerExtraPath(extras, key) {
 function parseHostProducerConfigFlag(args, platform = process.platform) {
   return parseProducerHostConfigFlag(args, HOST_PRODUCER_CONFIG_FLAG, platform, hostProducerError);
 }
-async function readHostProducerConfig(descriptor, configPath, platform = process.platform) {
-  const config = decodeHostProducerConfigText(descriptor, await readProducerConfigText(configPath, platform, hostProducerError), platform);
+async function readHostProducerConfig(descriptor2, configPath, platform = process.platform) {
+  const config = decodeHostProducerConfigText(descriptor2, await readProducerConfigText(configPath, platform, hostProducerError), platform);
   const path = platform === "win32" ? win323 : posix3;
   const root = path.resolve(config.outbox_dir, "../../../../..");
   try {
-    assertHostProducerSourcePaths(root, config, descriptor.producer_id, platform);
+    assertHostProducerSourcePaths(root, config, descriptor2.producer_id, platform);
   } catch (error) {
     throw hostProducerError("invalid_config", error instanceof Error ? error.message : "Host producer source tuple is invalid.");
   }
   return config;
 }
-function decodeHostProducerConfigText(descriptor, text, platform = process.platform) {
-  const extraPaths = descriptor.extra_paths ?? [];
-  const decoded = decodeProducerConfigCore(text, { schema: descriptor.schema, keys: [...HOST_PRODUCER_CONFIG_KEYS, ...extraPaths], platform, extraPaths, error: hostProducerError });
+function decodeHostProducerConfigText(descriptor2, text, platform = process.platform) {
+  const extraPaths = descriptor2.extra_paths ?? [];
+  const decoded = decodeProducerConfigCore(text, { schema: descriptor2.schema, keys: [...HOST_PRODUCER_CONFIG_KEYS, ...extraPaths], platform, extraPaths, error: hostProducerError });
   const { extra_paths: extras, ...core } = decoded;
-  return Object.freeze(descriptor.config({ schema_version: descriptor.schema, ...core }, extras));
+  return Object.freeze(descriptor2.config({ schema_version: descriptor2.schema, ...core }, extras));
 }
 function hostProducerError(code, message = code) {
   return new HostProducerServiceError(code, message);
@@ -2490,7 +5194,7 @@ function validateConfigFile(value, platform, error) {
 }
 async function openConfigFile(configPath, flags, error) {
   try {
-    return await open3(configPath, flags);
+    return await open4(configPath, flags);
   } catch {
     throw error("config_unavailable");
   }
@@ -2551,7 +5255,7 @@ function boundedMilliseconds(value) {
 }
 
 // host/codex/src/codex-decoder.ts
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 
 // host/codex/src/codex-types.ts
 var CODEX_THREAD_ID_ENVIRONMENT = "CODEX_THREAD_ID";
@@ -2562,10 +5266,6 @@ var CODEX_INVOCATION_CONTEXT_SCHEMA_VERSION = "ceal.codex_invocation_context.v1"
 var CODEX_TRANSCRIPT_REGISTRATION_SCHEMA_VERSION = "ceal.codex_transcript_registration.v1";
 var CODEX_TRANSCRIPT_CURSOR_SCHEMA_VERSION = "ceal.codex_transcript_cursor.v1";
 var CODEX_DEFAULT_RETENTION_MS = 24 * 60 * 60 * 1e3;
-var CODEX_TRANSCRIPT_CURSOR_REASONS = ["transcript_replaced", "transcript_truncated", "transcript_rewritten", "transcript_malformed"];
-function isCodexTranscriptCursorReason(value) {
-  return typeof value === "string" && CODEX_TRANSCRIPT_CURSOR_REASONS.some((reason) => reason === value);
-}
 var CodexHostAdapterError = class extends Error {
   name = "CodexHostAdapterError";
   code;
@@ -2577,7 +5277,7 @@ var CodexHostAdapterError = class extends Error {
 
 // host/codex/src/codex-decoder.ts
 var SAFE_REF5 = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
-var MAX_PAYLOAD_BYTES = 64 * 1024;
+var MAX_PAYLOAD_BYTES = 512 * 1024;
 function observationRef(event, identity, value) {
   return cealHostObservationRef("codex", shortDigest({ event, identity, value }));
 }
@@ -2601,16 +5301,16 @@ function turnObservationValue(sessionId, turnRef, status) {
   return { status, host_session_id_sha256: sha256(sessionId), host_turn_ref: turnRef };
 }
 function sha256(value) {
-  return createHash4("sha256").update(value, "utf8").digest("hex");
+  return createHash5("sha256").update(value, "utf8").digest("hex");
 }
 function shortDigest(value) {
   return cealRequestSha256(value);
 }
 
 // host/codex/src/codex-outbox.ts
-import { O_NOFOLLOW, O_RDONLY as O_RDONLY2 } from "node:constants";
-import { lstat as lstat3, mkdir as mkdir2, open as open4, readdir, rename as rename2, unlink as unlink2 } from "node:fs/promises";
-import { dirname, isAbsolute as isAbsolute2, join as join3 } from "node:path";
+import { O_NOFOLLOW as O_NOFOLLOW2, O_RDONLY as O_RDONLY3 } from "node:constants";
+import { lstat as lstat3, mkdir as mkdir3, open as open5, readdir, rename as rename3, unlink as unlink2 } from "node:fs/promises";
+import { dirname, isAbsolute as isAbsolute2, join as join4 } from "node:path";
 
 // host/invocation-context.ts
 var HOST_INVOCATION_IDENTITY_KEYS = ["host_session_ref", "host_turn_ref", "host_source_ref"];
@@ -2624,17 +5324,32 @@ function hasHostInvocationIdentityKeys(value) {
 function hasHostInvocationContextKeys(value, optional = []) {
   return requiredKeys(value, HOST_INVOCATION_CONTEXT_REQUIRED_KEYS, optional);
 }
-function invocationContextFromTurn(identity, promptRef, expiresAt, descriptor) {
+async function readLatestSessionProjection(file, hostSourceRef, hostSessionRef, readProjection) {
+  const context = await readProjection(file);
+  if (context === null || context.identity.host_source_ref !== hostSourceRef || context.identity.host_session_ref !== hostSessionRef) return null;
+  return context;
+}
+function isLiveSessionProjection(context, now) {
+  return context !== null && Date.parse(context.expires_at) > now.getTime();
+}
+function invocationContextFromTurn(identity, promptRef, expiresAt, descriptor2) {
   const context = {
-    schema_version: descriptor.schema_version,
+    schema_version: descriptor2.schema_version,
     identity,
     prompt_ref: promptRef,
     expires_at: expiresAt,
-    ...descriptor.working_directory === void 0 ? {} : { working_directory: descriptor.working_directory }
+    ...descriptor2.turn_generation_ref === void 0 ? {} : { turn_generation_ref: descriptor2.turn_generation_ref },
+    ...descriptor2.working_directory === void 0 ? {} : { working_directory: descriptor2.working_directory }
   };
-  descriptor.validate(context);
+  descriptor2.validate(context);
   return Object.freeze(context);
 }
+function isHostInvocationTurnSelection(value) {
+  return isRecord3(value) && Object.keys(value).length === 5 && value.schema_version === "ceal.host_invocation_turn_selection.v1" && ["host_source_ref", "host_session_ref", "prompt_ref", "turn_generation_ref"].every((key) => safeRef3(value[key]));
+}
+function invocationTurnSelectionMatches(context, selection) {
+  return selection === null || context !== null && selection.host_source_ref === context.identity.host_source_ref && selection.host_session_ref === context.identity.host_session_ref && selection.prompt_ref === context.prompt_ref && selection.turn_generation_ref === context.turn_generation_ref;
+}
 function exactKeys4(value, keys) {
   const actual = Object.keys(value);
   return actual.length === keys.length && keys.every((key) => Object.hasOwn(value, key)) && actual.every((key) => keys.includes(key));
@@ -2644,10 +5359,16 @@ function requiredKeys(value, required, optional) {
   const allowed = /* @__PURE__ */ new Set([...required, ...optional]);
   return actual.length >= required.length && actual.length <= allowed.size && required.every((key) => Object.hasOwn(value, key)) && actual.every((key) => allowed.has(key));
 }
+function isRecord3(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function safeRef3(value) {
+  return typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u.test(value);
+}
 
 // host/codex/src/codex-invocation-context.ts
-function codexInvocationContextFromTurn(identity, promptRef, expiresAt) {
-  return invocationContextFromTurn(identity, promptRef, expiresAt, { schema_version: CODEX_INVOCATION_CONTEXT_SCHEMA_VERSION, validate: validateCodexHostInvocationContext });
+function codexInvocationContextFromTurn(identity, promptRef, expiresAt, turnGenerationRef) {
+  return invocationContextFromTurn(identity, promptRef, expiresAt, { schema_version: CODEX_INVOCATION_CONTEXT_SCHEMA_VERSION, validate: validateCodexHostInvocationContext, turn_generation_ref: turnGenerationRef });
 }
 function validateCodexHostInvocationContext(value) {
   if (!isContextShape(value)) {
@@ -2657,28 +5378,29 @@ function validateCodexHostInvocationContext(value) {
   validateContextReferences(value);
   validateContextTimes(value);
 }
-function invocationContextFromBinding(binding) {
+function invocationContextFromBinding(binding, turnGenerationRef) {
   const context = {
     schema_version: CODEX_INVOCATION_CONTEXT_SCHEMA_VERSION,
     identity: binding.identity,
     prompt_ref: binding.prompt_ref,
     request_ref: binding.request_ref,
     bound_at: binding.bound_at,
-    expires_at: binding.expires_at
+    expires_at: binding.expires_at,
+    ...turnGenerationRef === void 0 ? {} : { turn_generation_ref: turnGenerationRef }
   };
   validateCodexHostInvocationContext(context);
   return Object.freeze(context);
 }
 function validateIdentity2(value) {
-  if (!isRecord3(value) || !hasHostInvocationIdentityKeys(value) || ![value.host_session_ref, value.host_turn_ref, value.host_source_ref].every(safeRef3)) {
+  if (!isRecord4(value) || !hasHostInvocationIdentityKeys(value) || ![value.host_session_ref, value.host_turn_ref, value.host_source_ref].every(safeRef4)) {
     throw new CodexHostAdapterError("storage", "Codex Host invocation identity is malformed.");
   }
 }
 function isContextShape(value) {
-  return isRecord3(value) && hasHostInvocationContextKeys(value, ["request_ref", "bound_at"]) && value.schema_version === CODEX_INVOCATION_CONTEXT_SCHEMA_VERSION;
+  return isRecord4(value) && hasHostInvocationContextKeys(value, ["request_ref", "bound_at", "turn_generation_ref"]) && value.schema_version === CODEX_INVOCATION_CONTEXT_SCHEMA_VERSION;
 }
 function validateContextReferences(value) {
-  if (!safeRef3(value.prompt_ref) || !optionalSafeRef(value.request_ref)) throw new CodexHostAdapterError("storage", "Codex Host invocation context is malformed.");
+  if (!safeRef4(value.prompt_ref) || !optionalSafeRef(value.request_ref) || !optionalSafeRef(value.turn_generation_ref)) throw new CodexHostAdapterError("storage", "Codex Host invocation context is malformed.");
 }
 function validateContextTimes(value) {
   const expiresAt = value.expires_at;
@@ -2687,18 +5409,18 @@ function validateContextTimes(value) {
   if (typeof boundAt === "string" && Date.parse(boundAt) > Date.parse(expiresAt)) throw new CodexHostAdapterError("storage", `Codex Host invocation context has invalid binding time (${refusalFact("bound_at", boundAt, `at or before ${expiresAt}`)}).`);
 }
 function optionalSafeRef(value) {
-  return value === void 0 || safeRef3(value);
+  return value === void 0 || safeRef4(value);
 }
 function optionalTimestamp(value) {
   return value === void 0 || timestamp2(value);
 }
-function safeRef3(value) {
+function safeRef4(value) {
   return typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u.test(value);
 }
 function timestamp2(value) {
   return typeof value === "string" && value.length <= 64 && Number.isFinite(Date.parse(value));
 }
-function isRecord3(value) {
+function isRecord4(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 
@@ -2711,20 +5433,22 @@ var CodexOutboxStore = class {
   bindingsDirectory;
   sessionsDirectory;
   activeContextsDirectory;
+  turnSelectionsDirectory;
   registrationsDirectory;
   cursorsDirectory;
   constructor(directory) {
     if (typeof directory !== "string" || directory.length === 0) throw new CodexHostAdapterError("configuration", "Codex outbox directory is required.");
     this.directory = directory;
-    this.entriesDirectory = join3(directory, "entries");
-    this.bindingsDirectory = join3(directory, "bindings");
-    this.sessionsDirectory = join3(directory, "sessions");
-    this.activeContextsDirectory = join3(directory, "active-contexts");
-    this.registrationsDirectory = join3(directory, "transcript-registrations");
-    this.cursorsDirectory = join3(directory, "transcript-cursors");
+    this.entriesDirectory = join4(directory, "entries");
+    this.bindingsDirectory = join4(directory, "bindings");
+    this.sessionsDirectory = join4(directory, "sessions");
+    this.activeContextsDirectory = join4(directory, "active-contexts");
+    this.turnSelectionsDirectory = join4(directory, "turn-selections");
+    this.registrationsDirectory = join4(directory, "transcript-registrations");
+    this.cursorsDirectory = join4(directory, "transcript-cursors");
   }
   async prepare() {
-    for (const path of [this.directory, this.entriesDirectory, this.bindingsDirectory, this.sessionsDirectory, this.activeContextsDirectory, this.registrationsDirectory, this.cursorsDirectory]) {
+    for (const path of [this.directory, this.entriesDirectory, this.bindingsDirectory, this.sessionsDirectory, this.activeContextsDirectory, this.turnSelectionsDirectory, this.registrationsDirectory, this.cursorsDirectory]) {
       await ensurePrivateOwnerDirectory(path);
     }
   }
@@ -2740,7 +5464,7 @@ var CodexOutboxStore = class {
     for (const name of await readdir(this.entriesDirectory)) {
       if (!name.endsWith(".json")) continue;
       try {
-        const value = JSON.parse(await readPrivateFile(join3(this.entriesDirectory, name)));
+        const value = JSON.parse(await readPrivateFile(join4(this.entriesDirectory, name)));
         validateEnvelope(value);
         entries.push(value);
       } catch {
@@ -2768,8 +5492,8 @@ var CodexOutboxStore = class {
    * prompt replaces this projection, so it cannot inherit the prior turn's
    * Request by session alone.
    */
-  async activateInvocationContext(identity, promptRef, expiresAt) {
-    const context = codexInvocationContextFromTurn(identity, promptRef, expiresAt);
+  async activateInvocationContext(identity, promptRef, expiresAt, turnGenerationRef) {
+    const context = codexInvocationContextFromTurn(identity, promptRef, expiresAt, turnGenerationRef);
     await this.prepare();
     const path = this.activeContextPath(identity);
     try {
@@ -2783,6 +5507,25 @@ var CodexOutboxStore = class {
       throw error;
     }
   }
+  async writeInvocationTurnSelection(selection) {
+    if (!isHostInvocationTurnSelection(selection)) throw new CodexHostAdapterError("invalid_input", "Codex Host turn selection is invalid.");
+    await this.prepare();
+    await writeAtomicJson(this.turnSelectionPath(selection.host_source_ref, selection.host_session_ref), selection);
+  }
+  async readInvocationTurnSelection(hostSourceRef, hostSessionRef) {
+    if (!SAFE_REF6.test(hostSourceRef) || !SAFE_REF6.test(hostSessionRef)) throw new CodexHostAdapterError("invalid_input", "Codex Host turn selection identity is invalid.");
+    await this.prepare();
+    return readOptionalJson(this.turnSelectionPath(hostSourceRef, hostSessionRef), validateTurnSelection);
+  }
+  async attachInvocationTurnGeneration(identity, promptRef, turnGenerationRef) {
+    const selection = await this.readInvocationTurnSelection(identity.host_source_ref, identity.host_session_ref);
+    if (selection === null || selection.prompt_ref !== promptRef || selection.turn_generation_ref !== turnGenerationRef) return false;
+    const path = this.activeContextPath(identity);
+    const active = await readOptionalJson(path, validateCodexHostInvocationContext);
+    if (active === null || active.prompt_ref !== promptRef || !sameIdentity(active.identity, identity)) return false;
+    await writeAtomicJson(path, { ...active, turn_generation_ref: turnGenerationRef });
+    return true;
+  }
   /**
    * Publish a Request reference only while the acknowledged binding is still
    * the active turn. A delayed relay response therefore cannot overwrite a
@@ -2792,17 +5535,25 @@ var CodexOutboxStore = class {
     validateBinding(binding);
     const active = await this.readInvocationContext(binding.identity.host_source_ref, binding.identity.host_session_ref, now);
     if (active === null || !sameIdentity(active.identity, binding.identity)) return false;
-    await writeAtomicJson(this.activeContextPath(binding.identity), invocationContextFromBinding(binding));
+    await writeAtomicJson(this.activeContextPath(binding.identity), invocationContextFromBinding(binding, active.turn_generation_ref));
     return true;
   }
-  /** Return only the active session projection; never fall back to another turn. */
+  /** Return only the live session projection; never fall back to another turn. */
   async readInvocationContext(hostSourceRef, hostSessionRef, now = /* @__PURE__ */ new Date()) {
-    if (!SAFE_REF6.test(hostSourceRef) || !SAFE_REF6.test(hostSessionRef)) throw new CodexHostAdapterError("invalid_input", "Codex Host session identity is invalid.");
     if (!(now instanceof Date) || !Number.isFinite(now.getTime())) throw new CodexHostAdapterError("invalid_input", "Codex Host context clock is invalid.");
+    const context = await this.readRawInvocationContext(hostSourceRef, hostSessionRef);
+    return isLiveSessionProjection(context, now) && invocationTurnSelectionMatches(context, await this.readInvocationTurnSelection(hostSourceRef, hostSessionRef)) ? context : null;
+  }
+  /**
+   * The latest Codex session projection even when past expiry, so the
+   * invocation authenticator can report an expired context distinctly from
+   * a missing one. Every other caller keeps the fail-closed read above.
+   */
+  async readRawInvocationContext(hostSourceRef, hostSessionRef) {
+    if (!SAFE_REF6.test(hostSourceRef) || !SAFE_REF6.test(hostSessionRef)) throw new CodexHostAdapterError("invalid_input", "Codex Host session identity is invalid.");
     await this.prepare();
-    const context = await readOptionalJson(this.activeContextPath({ host_source_ref: hostSourceRef, host_session_ref: hostSessionRef }), validateCodexHostInvocationContext);
-    if (context === null || context.identity.host_source_ref !== hostSourceRef || context.identity.host_session_ref !== hostSessionRef) return null;
-    return Date.parse(context.expires_at) > now.getTime() ? context : null;
+    const context = await readLatestSessionProjection(this.activeContextPath({ host_source_ref: hostSourceRef, host_session_ref: hostSessionRef }), hostSourceRef, hostSessionRef, (file) => readOptionalJson(file, validateCodexHostInvocationContext));
+    return invocationTurnSelectionMatches(context, await this.readInvocationTurnSelection(hostSourceRef, hostSessionRef)) ? context : null;
   }
   /** Clear the projection only if the caller still owns its exact active turn. */
   async clearInvocationContext(identity, now = /* @__PURE__ */ new Date()) {
@@ -2861,7 +5612,7 @@ var CodexOutboxStore = class {
     for (const name of await readdir(this.registrationsDirectory)) {
       if (!name.endsWith(".json")) continue;
       try {
-        const value = JSON.parse(await readPrivateFile(join3(this.registrationsDirectory, name)));
+        const value = JSON.parse(await readPrivateFile(join4(this.registrationsDirectory, name)));
         validateRegistration(value);
         registrations.push(value);
       } catch {
@@ -2903,22 +5654,25 @@ var CodexOutboxStore = class {
   }
   entryPath(submissionRef) {
     if (!SAFE_REF6.test(submissionRef)) throw storageError("Codex submission identity is malformed.");
-    return join3(this.entriesDirectory, `${cealRequestSha256(submissionRef)}.json`);
+    return join4(this.entriesDirectory, `${cealRequestSha256(submissionRef)}.json`);
   }
   bindingPath(identity) {
-    return join3(this.bindingsDirectory, `${identityKey(identity)}.json`);
+    return join4(this.bindingsDirectory, `${identityKey(identity)}.json`);
   }
   sessionPath(sourceRef, sessionRef) {
-    return join3(this.sessionsDirectory, `${identityKey({ host_source_ref: sourceRef, host_session_ref: sessionRef, host_turn_ref: "session" })}.json`);
+    return join4(this.sessionsDirectory, `${identityKey({ host_source_ref: sourceRef, host_session_ref: sessionRef, host_turn_ref: "session" })}.json`);
   }
   activeContextPath(identity) {
-    return join3(this.activeContextsDirectory, `${invocationContextKey(identity)}.json`);
+    return join4(this.activeContextsDirectory, `${invocationContextKey(identity)}.json`);
+  }
+  turnSelectionPath(sourceRef, sessionRef) {
+    return join4(this.turnSelectionsDirectory, `${invocationContextKey({ host_source_ref: sourceRef, host_session_ref: sessionRef })}.json`);
   }
   registrationPath(sourceRef, sessionRef) {
-    return join3(this.registrationsDirectory, `${sessionStateKey(sourceRef, sessionRef)}.json`);
+    return join4(this.registrationsDirectory, `${sessionStateKey(sourceRef, sessionRef)}.json`);
   }
   cursorPath(sourceRef, sessionRef) {
-    return join3(this.cursorsDirectory, `${sessionStateKey(sourceRef, sessionRef)}.json`);
+    return join4(this.cursorsDirectory, `${sessionStateKey(sourceRef, sessionRef)}.json`);
   }
 };
 async function removeOwnerState(path, what) {
@@ -2956,7 +5710,7 @@ async function findBindingByAlias(directory, sourceRef, sessionRef, alias) {
 }
 async function readBindingCandidate(directory, name) {
   try {
-    const value = JSON.parse(await readPrivateFile(join3(directory, name)));
+    const value = JSON.parse(await readPrivateFile(join4(directory, name)));
     validateBinding(value);
     return value;
   } catch {
@@ -2975,14 +5729,14 @@ async function writeAtomicJson(path, value) {
   if (text === void 0) throw storageError("Codex owner state cannot be serialized.");
   const temp = `${path}.${process.pid}.${Math.random().toString(16).slice(2)}.tmp`;
   try {
-    const handle = await open4(temp, "wx", 384);
+    const handle = await open5(temp, "wx", 384);
     try {
       await handle.writeFile(text, "utf8");
       await handle.sync();
     } finally {
       await handle.close();
     }
-    await rename2(temp, path);
+    await rename3(temp, path);
     await syncDirectory(dirname(path));
   } catch (error) {
     try {
@@ -2995,7 +5749,7 @@ async function writeAtomicJson(path, value) {
 }
 async function syncDirectory(path) {
   try {
-    const handle = await open4(path, "r");
+    const handle = await open5(path, "r");
     try {
       await handle.sync();
     } finally {
@@ -3020,7 +5774,7 @@ async function ensurePrivateOwnerDirectory(path) {
     await lstat3(path);
   } catch (error) {
     if (!isNotFound(error)) throw storageError("Codex owner state directory is unavailable.");
-    await mkdir2(path, { recursive: true, mode: 448 });
+    await mkdir3(path, { recursive: true, mode: 448 });
   }
   const stats = await lstat3(path);
   const uid = typeof process.geteuid === "function" ? process.geteuid() : stats.uid;
@@ -3031,7 +5785,7 @@ async function ensurePrivateOwnerDirectory(path) {
 async function readPrivateFile(path) {
   let handle;
   try {
-    handle = await open4(path, O_RDONLY2 | O_NOFOLLOW);
+    handle = await open5(path, O_RDONLY3 | O_NOFOLLOW2);
     const stats = await handle.stat();
     const uid = typeof process.geteuid === "function" ? process.geteuid() : stats.uid;
     if (!stats.isFile()) throw storageError(`Codex owner state path is not a regular file (${refusalFact("mode", `0o${stats.mode.toString(8)}`, "a regular-file mode (0o100xxx)")}).`);
@@ -3043,7 +5797,7 @@ async function readPrivateFile(path) {
   }
 }
 function validateEnvelope(value) {
-  if (!isRecord4(value)) throw storageError("Codex outbox entry is malformed.");
+  if (!isRecord5(value)) throw storageError("Codex outbox entry is malformed.");
   if (!sameKeys(value, ["schema_version", "identity", "host_input_ref", "input_kind", "prompt_ref", "observations", "origin_input", "submission_ref", "created_at", "expires_at"], ["request_ref", "codex_turn_id"])) throw storageError(`Codex outbox entry key set is malformed (${refusalFact("keys", Object.keys(value), "exactly the outbox entry key set")}).`);
   if (value.schema_version !== CODEX_OUTBOX_SCHEMA_VERSION) throw storageError(`Codex outbox entry is malformed (${refusalFact("schema_version", value.schema_version, `expected ${CODEX_OUTBOX_SCHEMA_VERSION}`)}).`);
   validateIdentity3(value.identity);
@@ -3061,7 +5815,7 @@ function validateEnvelopeReferences(value) {
   if (typeof value.origin_input !== "boolean") throw storageError("Codex outbox origin disposition is malformed.");
 }
 function validateRegistration(value) {
-  if (!isRecord4(value)) throw storageError("Codex transcript registration is malformed.");
+  if (!isRecord5(value)) throw storageError("Codex transcript registration is malformed.");
   if (!sameKeys(value, ["schema_version", "host_source_ref", "host_session_ref", "codex_session_id", "transcript_path", "registered_at", "expires_at"], ["cwd"])) throw storageError(`Codex transcript registration key set is malformed (${refusalFact("keys", Object.keys(value), "exactly the registration key set")}).`);
   if (value.schema_version !== CODEX_TRANSCRIPT_REGISTRATION_SCHEMA_VERSION) throw storageError(`Codex transcript registration is malformed (${refusalFact("schema_version", value.schema_version, `expected ${CODEX_TRANSCRIPT_REGISTRATION_SCHEMA_VERSION}`)}).`);
   validateRegistrationFields(value);
@@ -3077,12 +5831,12 @@ function validRegistrationCwd(value) {
   return value === void 0 || typeof value === "string" && isAbsolute2(value) && value.length <= CODEX_TRANSCRIPT_PATH_MAX_CHARACTERS && !value.includes("\0");
 }
 function validateCursor(value) {
-  if (!isRecord4(value)) throw storageError("Codex transcript cursor is malformed.");
+  if (!isRecord5(value)) throw storageError("Codex transcript cursor is malformed.");
   if (!sameKeys(value, ["schema_version", "host_source_ref", "host_session_ref", "transcript_path", "device", "inode", "offset", "last_ordinal", "anchor_start", "anchor_sha256", "header_validated", "status", "updated_at"], ["active_task", "reason"])) throw storageError(`Codex transcript cursor key set is malformed (${refusalFact("keys", Object.keys(value), "exactly the cursor key set")}).`);
   if (value.schema_version !== CODEX_TRANSCRIPT_CURSOR_SCHEMA_VERSION) throw storageError(`Codex transcript cursor is malformed (${refusalFact("schema_version", value.schema_version, `expected ${CODEX_TRANSCRIPT_CURSOR_SCHEMA_VERSION}`)}).`);
   if (!validCursorSource(value) || !validCursorPosition(value) || !validCursorStatus(value)) throw storageError("Codex transcript cursor fields are malformed.");
   if (value.active_task !== void 0 && !validActiveTask(value.active_task)) throw storageError("Codex transcript task cursor is malformed.");
-  if (value.reason !== void 0 && !isCodexTranscriptCursorReason(value.reason)) throw storageError("Codex transcript cursor reason is malformed.");
+  if (value.reason !== void 0 && !isHostTranscriptCursorReason(value.reason)) throw storageError("Codex transcript cursor reason is malformed.");
 }
 function validCursorSource(value) {
   return [value.host_source_ref, value.host_session_ref].every((candidate) => typeof candidate === "string" && SAFE_REF6.test(candidate)) && typeof value.transcript_path === "string" && value.transcript_path.length > 0 && typeof value.device === "string" && typeof value.inode === "string";
@@ -3094,7 +5848,7 @@ function validCursorStatus(value) {
   return (value.status === "active" || value.status === "quarantined") && isTimestamp(value.updated_at);
 }
 function validActiveTask(value) {
-  if (!isRecord4(value) || !sameKeys(value, ["codex_turn_id", "host_turn_ref", "started_at"], ["origin_host_input_ref", "prompt_ref", "model", "token_usage", "last_total_usage", "token_usage_gap_reason"])) return false;
+  if (!isRecord5(value) || !sameKeys(value, ["codex_turn_id", "host_turn_ref", "started_at"], ["origin_host_input_ref", "prompt_ref", "model", "token_usage", "last_total_usage", "token_usage_gap_reason"])) return false;
   return validActiveTaskIdentity(value) && validActiveTaskReferences(value) && validActiveTaskUsage(value);
 }
 function validActiveTaskIdentity(value) {
@@ -3110,7 +5864,7 @@ function validActiveTaskUsage(value) {
   return (value.token_usage === void 0 || validTokenUsage(value.token_usage)) && (value.last_total_usage === void 0 || validTokenUsage(value.last_total_usage)) && (value.token_usage_gap_reason === void 0 || value.token_usage_gap_reason === "token_count_shape_not_attributable");
 }
 function validTokenUsage(value) {
-  if (!isRecord4(value) || !sameKeys(value, ["input_tokens", "cached_input_tokens", "cache_write_input_tokens", "output_tokens", "reasoning_output_tokens", "total_tokens"])) return false;
+  if (!isRecord5(value) || !sameKeys(value, ["input_tokens", "cached_input_tokens", "cache_write_input_tokens", "output_tokens", "reasoning_output_tokens", "total_tokens"])) return false;
   if (![value.input_tokens, value.cached_input_tokens, value.cache_write_input_tokens, value.output_tokens, value.reasoning_output_tokens, value.total_tokens].every(nonNegativeInteger)) return false;
   return value.total_tokens === Number(value.input_tokens) + Number(value.output_tokens) && Number(value.cached_input_tokens) + Number(value.cache_write_input_tokens) <= Number(value.input_tokens) && Number(value.reasoning_output_tokens) <= Number(value.output_tokens);
 }
@@ -3130,7 +5884,7 @@ function validateEnvelopeTimestamps(value) {
   if (!isTimestamp(value.expires_at)) throw storageError("Codex outbox timestamps are malformed.");
 }
 function validateBinding(value) {
-  if (!isRecord4(value)) throw storageError("Codex turn binding is malformed.");
+  if (!isRecord5(value)) throw storageError("Codex turn binding is malformed.");
   if (!sameKeys(value, ["schema_version", "identity", "prompt_ref", "request_ref", "codex_turn_ids", "bound_at", "expires_at"])) throw storageError(`Codex turn binding key set is malformed (${refusalFact("keys", Object.keys(value), "exactly the turn binding key set")}).`);
   if (value.schema_version !== CODEX_TURN_BINDING_SCHEMA_VERSION) throw storageError(`Codex turn binding is malformed (${refusalFact("schema_version", value.schema_version, `expected ${CODEX_TURN_BINDING_SCHEMA_VERSION}`)}).`);
   validateIdentity3(value.identity);
@@ -3138,19 +5892,22 @@ function validateBinding(value) {
   if (!isStringList(value.codex_turn_ids) || !isTimestamp(value.bound_at) || !isTimestamp(value.expires_at)) throw storageError("Codex turn binding fields are malformed.");
 }
 function validateSession(value) {
-  if (!isRecord4(value)) throw storageError("Codex session snapshot is malformed.");
+  if (!isRecord5(value)) throw storageError("Codex session snapshot is malformed.");
   if (!sameKeys(value, ["schema_version", "host_session_ref", "host_source_ref", "observed_at", "value", "expires_at"])) throw storageError(`Codex session snapshot key set is malformed (${refusalFact("keys", Object.keys(value), "exactly the session snapshot key set")}).`);
   if (value.schema_version !== CODEX_SESSION_SCHEMA_VERSION) throw storageError(`Codex session snapshot is malformed (${refusalFact("schema_version", value.schema_version, `expected ${CODEX_SESSION_SCHEMA_VERSION}`)}).`);
   if (!SAFE_REF6.test(String(value.host_session_ref)) || !SAFE_REF6.test(String(value.host_source_ref)) || !isTimestamp(value.observed_at) || !isTimestamp(value.expires_at) || !isJsonValue(value.value)) throw storageError("Codex session snapshot fields are malformed.");
 }
+function validateTurnSelection(value) {
+  if (!isHostInvocationTurnSelection(value)) throw storageError("Codex Host turn selection is malformed.");
+}
 function validateIdentity3(value) {
-  if (!isRecord4(value) || !hasHostInvocationIdentityKeys(value) || ![value.host_session_ref, value.host_turn_ref, value.host_source_ref].every((candidate) => typeof candidate === "string" && SAFE_REF6.test(candidate))) throw storageError("Codex Host identity is malformed.");
+  if (!isRecord5(value) || !hasHostInvocationIdentityKeys(value) || ![value.host_session_ref, value.host_turn_ref, value.host_source_ref].every((candidate) => typeof candidate === "string" && SAFE_REF6.test(candidate))) throw storageError("Codex Host identity is malformed.");
 }
 function isJsonValue(value) {
   if (value === null || typeof value === "string" || typeof value === "boolean") return true;
   if (typeof value === "number") return Number.isFinite(value);
   if (Array.isArray(value)) return value.every(isJsonValue);
-  return isRecord4(value) && Object.entries(value).every(([key, child]) => key.length > 0 && key.length <= 128 && isJsonValue(child));
+  return isRecord5(value) && Object.entries(value).every(([key, child]) => key.length > 0 && key.length <= 128 && isJsonValue(child));
 }
 function isStringList(value) {
   return Array.isArray(value) && value.every((candidate) => typeof candidate === "string" && SAFE_REF6.test(candidate));
@@ -3163,104 +5920,50 @@ function sameKeys(value, required, optional = []) {
   const keys = Object.keys(value);
   return keys.length >= required.length && keys.length <= allowed.size && required.every((key) => Object.hasOwn(value, key)) && keys.every((key) => allowed.has(key));
 }
-function isRecord4(value) {
+function isRecord5(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function isNotFound(error) {
-  return isRecord4(error) && error.code === "ENOENT";
+  return isRecord5(error) && error.code === "ENOENT";
 }
 function storageError(message) {
   return new CodexHostAdapterError("storage", message);
 }
 
 // host/codex/src/codex-producer.ts
-import { createHash as createHash5 } from "node:crypto";
-import { mkdir as mkdir3, readFile as readFile2, rename as rename3, writeFile } from "node:fs/promises";
-import { join as join4 } from "node:path";
-var STATE_SCHEMA = "ceal.codex_producer_state.v1";
+import { createHash as createHash6 } from "node:crypto";
 var SAFE_REF7 = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
 var CodexProducer = class {
+  producer_id = "codex";
+  producer_label = "Codex";
+  outbox_directory;
   store;
-  statePath;
-  installationRef;
-  epoch;
-  relay;
-  now;
-  tail = Promise.resolve();
+  core;
   constructor(options) {
-    if (!SAFE_REF7.test(options.producer_installation_ref)) throw new CodexHostAdapterError("configuration", "Codex producer installation identity is invalid.");
-    const epoch = options.producer_epoch ?? 1;
-    if (!Number.isSafeInteger(epoch) || epoch <= 0) throw new CodexHostAdapterError("configuration", "Codex producer epoch is invalid.");
     this.store = new CodexOutboxStore(options.outbox_dir);
-    this.statePath = join4(options.outbox_dir, "codex-producer-state.json");
-    this.installationRef = options.producer_installation_ref;
-    this.epoch = epoch;
-    this.relay = options.relay;
-    this.now = options.now ?? (() => /* @__PURE__ */ new Date());
+    this.outbox_directory = this.store.directory;
+    this.core = new HostProducerDrainCore(this, options);
   }
   drainOutbox() {
-    const run = this.tail.then(() => this.drainLocked());
-    this.tail = run.then(() => void 0, () => void 0);
-    return run;
+    return this.core.drainOutbox();
   }
-  async drainLocked() {
-    const read = await this.store.list();
-    let admitted = 0;
-    let expired = 0;
-    let retained = 0;
-    for (const envelope of read.entries) {
-      const reserved = await this.hasReservation(envelope.submission_ref);
-      if (!reserved && Date.parse(envelope.expires_at) <= this.now().getTime()) {
-        await this.store.remove(envelope);
-        expired += 1;
-        continue;
-      }
-      const frames = await this.reserve(envelope);
-      let complete = true;
-      for (const frame of frames) {
-        const outcome = await this.relay.admit(frame);
-        if (outcome.code !== "admitted" && outcome.code !== "already_admitted") {
-          complete = false;
-          break;
-        }
-      }
-      if (!complete) {
-        retained += 1;
-        break;
-      }
-      await this.store.remove(envelope);
-      await this.release(envelope.submission_ref);
-      admitted += 1;
-    }
-    return { admitted, retained: retained + Math.max(0, read.entries.length - admitted - expired - retained), expired, malformed: read.malformed };
+  fail(code, message) {
+    return new CodexHostAdapterError(code, message);
   }
-  async hasReservation(submissionRef) {
-    return (await this.readState()).pending[submissionRef] !== void 0;
+  listEnvelopes() {
+    return this.store.list();
   }
-  async reserve(envelope) {
-    const state = await this.readState();
-    const existing = state.pending[envelope.submission_ref];
-    if (existing !== void 0) return existing;
-    const drafts = await this.mapEnvelope(envelope);
-    const frames = drafts.map((draft, offset) => ({
-      schema_version: "ceal.host_producer_frame.v1",
-      producer_id: "codex",
-      producer_installation_ref: this.installationRef,
-      producer_epoch: this.epoch,
-      sequence: state.next_sequence + offset,
-      frame_kind: draft.frame_kind,
-      occurred_at: envelope.created_at,
-      payload: draft.payload
-    }));
-    await this.writeState({ ...state, next_sequence: state.next_sequence + frames.length, pending: { ...state.pending, [envelope.submission_ref]: frames } });
-    return frames;
+  removeEnvelope(envelope) {
+    return this.store.remove(envelope);
   }
-  async release(submissionRef) {
-    const state = await this.readState();
-    if (state.pending[submissionRef] === void 0) return;
-    const pending = { ...state.pending };
-    delete pending[submissionRef];
-    await this.writeState({ ...state, pending });
+  submissionRefOf(envelope) {
+    return envelope.submission_ref;
+  }
+  expiresAtOf(envelope) {
+    return envelope.expires_at;
+  }
+  createdAtOf(envelope) {
+    return envelope.created_at;
   }
   async mapEnvelope(envelope) {
     const prompt = observation(envelope, "prompt");
@@ -3276,7 +5979,7 @@ var CodexProducer = class {
       const directoryIdentity = registration?.cwd ?? envelope.identity.host_session_ref;
       drafts.push({ frame_kind: "session_started", payload: compact({
         local_session_ref: envelope.identity.host_session_ref,
-        working_directory_ref: `workspace:${createHash5("sha256").update(directoryIdentity, "utf8").digest("hex")}`,
+        working_directory_ref: `workspace:${createHash6("sha256").update(directoryIdentity, "utf8").digest("hex")}`,
         model: recordText(session.value, "model"),
         host_version: nestedText(session.value, "host_version"),
         observations: [session]
@@ -3301,21 +6004,6 @@ var CodexProducer = class {
     }) });
     return drafts;
   }
-  async readState() {
-    try {
-      const value = JSON.parse(await readFile2(this.statePath, "utf8"));
-      return decodeState(value, this.installationRef, this.epoch);
-    } catch (error) {
-      if (errorCode3(error) !== "ENOENT") throw error;
-      return { schema_version: STATE_SCHEMA, producer_installation_ref: this.installationRef, producer_epoch: this.epoch, next_sequence: 1, pending: {} };
-    }
-  }
-  async writeState(state) {
-    await mkdir3(this.store.directory, { recursive: true, mode: 448 });
-    const temporary = `${this.statePath}.${process.pid}.new`;
-    await writeFile(temporary, JSON.stringify(state), { mode: 384 });
-    await rename3(temporary, this.statePath);
-  }
 };
 function mapTerminal(envelope) {
   const timing = observation(envelope, "timing");
@@ -3343,7 +6031,7 @@ function compact(value) {
   return Object.fromEntries(Object.entries(value).filter((entry) => entry[1] !== void 0));
 }
 function asRecord(value) {
-  return isRecord5(value) ? value : void 0;
+  return isRecord6(value) ? value : void 0;
 }
 function recordText(value, key) {
   const record3 = asRecord(value);
@@ -3357,53 +6045,14 @@ function nonNegativeNumber(value) {
   return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : void 0;
 }
 function safeReasonRef(value) {
-  return SAFE_REF7.test(value) ? value : `reason:${createHash5("sha256").update(value, "utf8").digest("hex")}`;
-}
-function errorCode3(error) {
-  return typeof error === "object" && error !== null && "code" in error ? String(error.code) : null;
-}
-function decodeState(value, installationRef, epoch) {
-  if (!validStateHeader(value, installationRef)) {
-    throw new CodexHostAdapterError("storage", `Codex producer state header is malformed or belongs to another installation (${refusalFacts([
-      { name: "schema_version", value: isRecord5(value) ? value.schema_version : void 0, expected: STATE_SCHEMA },
-      { name: "producer_installation_ref", value: isRecord5(value) ? value.producer_installation_ref : void 0, expected: installationRef }
-    ])}).`);
-  }
-  if (Number(value.producer_epoch) > epoch) throw new CodexHostAdapterError("storage", `Codex producer state epoch is ahead of this installation (${refusalFact("producer_epoch", value.producer_epoch, `at most ${epoch}`)}).`);
-  const pending = {};
-  for (const [submissionRef, frames] of Object.entries(value.pending)) {
-    if (!SAFE_REF7.test(submissionRef) || !Array.isArray(frames) || frames.length === 0) throw new CodexHostAdapterError("storage", "Codex producer pending reservation is malformed.");
-    pending[submissionRef] = frames.map((frame) => decodeStoredFrame(frame, installationRef, Number(value.producer_epoch)));
-  }
-  return { schema_version: STATE_SCHEMA, producer_installation_ref: installationRef, producer_epoch: epoch, next_sequence: Number(value.next_sequence), pending };
-}
-function validStateHeader(value, installationRef) {
-  return isRecord5(value) && value.schema_version === STATE_SCHEMA && value.producer_installation_ref === installationRef && Number.isSafeInteger(value.producer_epoch) && Number(value.producer_epoch) > 0 && Number.isSafeInteger(value.next_sequence) && Number(value.next_sequence) > 0 && isRecord5(value.pending);
-}
-function decodeStoredFrame(value, installationRef, epoch) {
-  const json = Buffer.from(JSON.stringify(value), "utf8");
-  const encoded = Buffer.allocUnsafe(json.length + 4);
-  encoded.writeUInt32BE(json.length, 0);
-  json.copy(encoded, 4);
-  const frame = decodeHostProducerFrame(encoded);
-  if (frame.producer_id !== "codex" || frame.producer_installation_ref !== installationRef || frame.producer_epoch > epoch) throw new CodexHostAdapterError("storage", `Codex producer pending frame identity is malformed (${refusalFacts([
-    { name: "producer_id", value: frame.producer_id, expected: "codex" },
-    { name: "producer_installation_ref", value: frame.producer_installation_ref, expected: installationRef },
-    { name: "producer_epoch", value: frame.producer_epoch, expected: `at most ${epoch}` }
-  ])}).`);
-  return frame;
+  return SAFE_REF7.test(value) ? value : `reason:${createHash6("sha256").update(value, "utf8").digest("hex")}`;
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 
-// host/codex/src/codex-transcript-watcher.ts
-import { createHash as createHash7 } from "node:crypto";
-import { O_NOFOLLOW as O_NOFOLLOW2, O_RDONLY as O_RDONLY3 } from "node:constants";
-import { open as open5 } from "node:fs/promises";
-
 // host/codex/src/codex-transcript-baseline.ts
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 
 // host/codex/src/codex-transcript-decoder.ts
 var SAFE_REF8 = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/u;
@@ -3415,40 +6064,40 @@ function decodeCodexTranscriptLine(line) {
   } catch {
     reject("Codex transcript record is not valid JSON.");
   }
-  if (!isRecord6(value)) reject("Codex transcript record envelope is malformed.");
+  if (!isRecord7(value)) reject("Codex transcript record envelope is malformed.");
   const ordinal = safeOrdinal(value.ordinal);
-  const timestamp5 = safeTimestamp(value.timestamp);
-  if (!isRecord6(value.payload) || typeof value.type !== "string") reject("Codex transcript record payload is malformed.");
-  if (value.type === "session_meta") return decodeSessionMeta(value.payload, ordinal, timestamp5);
-  if (value.type === "turn_context") return decodeTurnContext(value.payload, ordinal, timestamp5);
-  if (value.type === "event_msg") return decodeEventMessage(value.payload, ordinal, timestamp5);
-  if (value.type === "response_item") return decodeResponseItem(value.payload, ordinal, timestamp5);
-  return { kind: "ignored", ordinal, timestamp: timestamp5 };
-}
-function decodeTurnContext(payload, ordinal, timestamp5) {
+  const timestamp4 = safeTimestamp(value.timestamp);
+  if (!isRecord7(value.payload) || typeof value.type !== "string") reject("Codex transcript record payload is malformed.");
+  if (value.type === "session_meta") return decodeSessionMeta(value.payload, ordinal, timestamp4);
+  if (value.type === "turn_context") return decodeTurnContext(value.payload, ordinal, timestamp4);
+  if (value.type === "event_msg") return decodeEventMessage(value.payload, ordinal, timestamp4);
+  if (value.type === "response_item") return decodeResponseItem(value.payload, ordinal, timestamp4);
+  return { kind: "ignored", ordinal, timestamp: timestamp4 };
+}
+function decodeTurnContext(payload, ordinal, timestamp4) {
   return {
     kind: "turn_context",
     ordinal,
-    timestamp: timestamp5,
-    turn_id: safeRef4(payload.turn_id, "Codex turn context identity is invalid."),
+    timestamp: timestamp4,
+    turn_id: safeRef5(payload.turn_id, "Codex turn context identity is invalid."),
     model: boundedNonEmptyText(payload.model, 256, "Codex turn context model is invalid.")
   };
 }
-function decodeSessionMeta(payload, ordinal, timestamp5) {
-  const sessionId = safeRef4(payload.id, "Codex transcript session identity is invalid.");
+function decodeSessionMeta(payload, ordinal, timestamp4) {
+  const sessionId = safeRef5(payload.id, "Codex transcript session identity is invalid.");
   const cliVersion = boundedNonEmptyText(payload.cli_version, 64, "Codex transcript version is invalid.");
-  return { kind: "session_meta", ordinal, timestamp: timestamp5, session_id: sessionId, cli_version: cliVersion };
+  return { kind: "session_meta", ordinal, timestamp: timestamp4, session_id: sessionId, cli_version: cliVersion };
 }
-function decodeEventMessage(payload, ordinal, timestamp5) {
+function decodeEventMessage(payload, ordinal, timestamp4) {
   if (payload.type === "task_started") {
-    return { kind: "task_started", ordinal, timestamp: timestamp5, turn_id: safeRef4(payload.turn_id, "Codex task identity is invalid."), started_at: safeNumber(payload.started_at) };
+    return { kind: "task_started", ordinal, timestamp: timestamp4, turn_id: safeRef5(payload.turn_id, "Codex task identity is invalid."), started_at: safeNumber(payload.started_at) };
   }
   if (payload.type === "task_complete") {
     return {
       kind: "task_complete",
       ordinal,
-      timestamp: timestamp5,
-      turn_id: safeRef4(payload.turn_id, "Codex task identity is invalid."),
+      timestamp: timestamp4,
+      turn_id: safeRef5(payload.turn_id, "Codex task identity is invalid."),
       started_at: safeNumber(payload.started_at),
       completed_at: safeNumber(payload.completed_at),
       duration_ms: safeNumber(payload.duration_ms),
@@ -3459,20 +6108,20 @@ function decodeEventMessage(payload, ordinal, timestamp5) {
     return {
       kind: "turn_aborted",
       ordinal,
-      timestamp: timestamp5,
-      turn_id: safeRef4(payload.turn_id, "Codex task identity is invalid."),
+      timestamp: timestamp4,
+      turn_id: safeRef5(payload.turn_id, "Codex task identity is invalid."),
       started_at: safeNumber(payload.started_at),
       completed_at: safeNumber(payload.completed_at),
       duration_ms: safeNumber(payload.duration_ms),
       reason: boundedText(payload.reason, 256, "Codex task abort reason is invalid.")
     };
   }
-  if (payload.type === "token_count") return decodeTokenCount(payload, ordinal, timestamp5);
-  return { kind: "ignored", ordinal, timestamp: timestamp5 };
+  if (payload.type === "token_count") return decodeTokenCount(payload, ordinal, timestamp4);
+  return { kind: "ignored", ordinal, timestamp: timestamp4 };
 }
-function decodeTokenCount(payload, ordinal, timestamp5) {
-  if (payload.info === null) return { kind: "token_count", ordinal, timestamp: timestamp5 };
-  if (!isRecord6(payload.info)) return { kind: "token_count", ordinal, timestamp: timestamp5, usage_gap_reason: "token_count_shape_not_attributable" };
+function decodeTokenCount(payload, ordinal, timestamp4) {
+  if (payload.info === null) return { kind: "token_count", ordinal, timestamp: timestamp4 };
+  if (!isRecord7(payload.info)) return { kind: "token_count", ordinal, timestamp: timestamp4, usage_gap_reason: "token_count_shape_not_attributable" };
   const lastUsage = optionalTokenUsage(payload.info.last_token_usage);
   const totalUsage = optionalTokenUsage(payload.info.total_token_usage);
   const gap = lastUsage.status === "invalid" || totalUsage.status === "invalid";
@@ -3480,7 +6129,7 @@ function decodeTokenCount(payload, ordinal, timestamp5) {
   return {
     kind: "token_count",
     ordinal,
-    timestamp: timestamp5,
+    timestamp: timestamp4,
     ...lastUsage.status === "valid" ? { last_usage: lastUsage.value } : {},
     ...totalUsage.status === "valid" ? { total_usage: totalUsage.value } : {},
     ...usageGapReason === void 0 ? {} : { usage_gap_reason: usageGapReason }
@@ -3496,7 +6145,7 @@ function optionalTokenUsage(value) {
   }
 }
 function decodeTokenUsage(value) {
-  if (!isRecord6(value)) reject("Codex token usage is malformed.");
+  if (!isRecord7(value)) reject("Codex token usage is malformed.");
   const usage = {
     input_tokens: safeTokenCount(value.input_tokens),
     cached_input_tokens: safeTokenCount(value.cached_input_tokens),
@@ -3508,20 +6157,20 @@ function decodeTokenUsage(value) {
   if (usage.total_tokens !== usage.input_tokens + usage.output_tokens || usage.cached_input_tokens + usage.cache_write_input_tokens > usage.input_tokens || usage.reasoning_output_tokens > usage.output_tokens) reject("Codex token usage buckets are inconsistent.");
   return usage;
 }
-function decodeResponseItem(payload, ordinal, timestamp5) {
-  if (payload.type !== "message" || payload.role !== "user") return { kind: "ignored", ordinal, timestamp: timestamp5 };
+function decodeResponseItem(payload, ordinal, timestamp4) {
+  if (payload.type !== "message" || payload.role !== "user") return { kind: "ignored", ordinal, timestamp: timestamp4 };
   const metadata = userMessageMetadata(payload.internal_chat_message_metadata_passthrough);
   const inputKind = inputKindFromContentItems(metadata.content_item_kinds);
-  if (inputKind === void 0) return { kind: "ignored", ordinal, timestamp: timestamp5 };
+  if (inputKind === void 0) return { kind: "ignored", ordinal, timestamp: timestamp4 };
   const prompt = userTextContent(payload.content);
   return {
     kind: "user_text",
     ordinal,
-    timestamp: timestamp5,
+    timestamp: timestamp4,
     prompt,
     input_kind: inputKind,
-    message_id: safeRef4(payload.id, "Codex user message identity is invalid."),
-    turn_id: safeRef4(metadata.turn_id, "Codex user message task identity is invalid.")
+    message_id: safeRef5(payload.id, "Codex user message identity is invalid."),
+    turn_id: safeRef5(metadata.turn_id, "Codex user message task identity is invalid.")
   };
 }
 function inputKindFromContentItems(kinds) {
@@ -3530,13 +6179,13 @@ function inputKindFromContentItems(kinds) {
   return kinds[0] === "goal.internal_context" ? "host_automatic" : void 0;
 }
 function userMessageMetadata(value) {
-  if (!isRecord6(value) || !Array.isArray(value.content_item_kinds)) reject("Codex user message provenance is malformed.");
+  if (!isRecord7(value) || !Array.isArray(value.content_item_kinds)) reject("Codex user message provenance is malformed.");
   return { ...value, content_item_kinds: value.content_item_kinds };
 }
 function userTextContent(value) {
   if (!Array.isArray(value)) reject(`Codex user text content is malformed (${refusalFact("kind", typeof value, "array")}).`);
   if (value.length !== 1) reject(`Codex user text content is malformed (${refusalFact("items", value.length, "exactly one")}).`);
-  if (!isRecord6(value[0]) || value[0].type !== "input_text") reject(`Codex user text content is malformed (${refusalFact("item_type", isRecord6(value[0]) ? value[0].type : typeof value[0], "input_text")}).`);
+  if (!isRecord7(value[0]) || value[0].type !== "input_text") reject(`Codex user text content is malformed (${refusalFact("item_type", isRecord7(value[0]) ? value[0].type : typeof value[0], "input_text")}).`);
   return boundedText(value[0].text, MAX_PROMPT_BYTES, "Codex user text is invalid.");
 }
 function safeOrdinal(value) {
@@ -3557,7 +6206,7 @@ function safeTimestamp(value) {
   if (!Number.isFinite(Date.parse(value))) reject(`Codex transcript timestamp is invalid (${refusalFact("parsed_ms", Date.parse(value), "a finite epoch milliseconds value")}).`);
   return value;
 }
-function safeRef4(value, message) {
+function safeRef5(value, message) {
   if (typeof value !== "string" || !SAFE_REF8.test(value)) reject(message);
   return value;
 }
@@ -3572,7 +6221,7 @@ function boundedNonEmptyText(value, maximum, message) {
   if (result.length === 0) reject(message);
   return result;
 }
-function isRecord6(value) {
+function isRecord7(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function reject(message) {
@@ -3616,7 +6265,7 @@ function assertCodexTranscriptHeader(registration, record3) {
   ])}).`);
 }
 function digest(value) {
-  return createHash6("sha256").update(value).digest("hex");
+  return createHash7("sha256").update(value).digest("hex");
 }
 function timestamp3(now) {
   const value = now();
@@ -3632,78 +6281,53 @@ function codexSubmissionReference(hostInputRef, event, ordinal) {
 }
 
 // host/codex/src/codex-transcript-watcher.ts
-var READ_CHUNK_BYTES = 256 * 1024;
-var TRANSCRIPT_MISSING_REASON = "transcript_missing";
-var CodexTranscriptWatcher = class {
+var CodexTranscriptWatcher = class extends HostTranscriptWatcher {
   store;
-  outboxRetentionMs;
-  now;
-  log;
-  producerInstallationRef;
   registerCurrentPrompt;
+  releaseCurrentPrompt;
+  diagnostic;
   constructor(options) {
-    if (typeof options.outbox_dir !== "string" || options.outbox_dir.length === 0) throw new CodexHostAdapterError("configuration", "Codex transcript watcher outbox is invalid.");
-    this.store = new CodexOutboxStore(options.outbox_dir);
-    this.outboxRetentionMs = options.retention_ms ?? CODEX_DEFAULT_RETENTION_MS;
-    this.now = options.now ?? (() => /* @__PURE__ */ new Date());
-    this.log = options.log ?? ((line) => {
-      process.stderr.write(`${line}
-`);
+    super(options, {
+      default_retention_ms: CODEX_DEFAULT_RETENTION_MS,
+      invalid_outbox: () => new CodexHostAdapterError("configuration", "Codex transcript watcher outbox is invalid."),
+      clock_failure: () => new CodexHostAdapterError("storage", "Codex watcher clock is invalid.")
     });
-    this.producerInstallationRef = options.producer_installation_ref;
+    this.store = new CodexOutboxStore(options.outbox_dir);
     this.registerCurrentPrompt = options.register_current_prompt;
+    this.releaseCurrentPrompt = options.release_current_prompt;
+    this.diagnostic = options.diagnostic ?? (() => void 0);
   }
-  async scanOnce() {
-    const registrations = await this.store.listTranscriptRegistrations();
-    let records = 0;
-    let enqueued = 0;
-    let quarantined = 0;
-    for (const registration of registrations) {
-      const result = await this.scanRegistration(registration);
-      records += result.records;
-      enqueued += result.enqueued;
-      if (result.quarantined) quarantined += 1;
-    }
-    return { registrations: registrations.length, records, enqueued, quarantined };
+  transcriptPathOf(registration) {
+    return registration.transcript_path;
   }
-  async scanRegistration(registration) {
-    let handle;
-    try {
-      handle = await open5(registration.transcript_path, O_RDONLY3 | O_NOFOLLOW2);
-      const { size, device, inode } = await ownedCodexTranscriptFile(handle);
-      const preflight = await this.preflight(registration, handle, size, device, inode);
-      if (preflight.cursor === null) return preflight.result;
-      const complete = await readCompleteChunk(handle, preflight.cursor, size);
-      if (complete === "empty" || complete === "partial") return { records: 0, enqueued: 0, quarantined: false };
-      return await this.consumeCompleteChunk(registration, handle, preflight.cursor, complete, device, inode);
-    } catch (error) {
-      if (handle === void 0 && isMissingTranscript(error)) return await this.retireRegistration(registration);
-      await this.quarantineFailure(registration, handle);
-      return { records: 0, enqueued: 0, quarantined: true };
-    } finally {
-      await handle?.close();
-    }
+  async listRegistrations() {
+    return this.store.listTranscriptRegistrations();
   }
-  /**
-   * A transcript the Host deleted never comes back, so retrying its
-   * registration once per reconcile interval is a failure with no end: a
-   * long-lived installation collects one permanently failing registration for
-   * every session Codex or the operator removes. Retire it at the scan that
-   * finds it missing and say so once, so the removal is readable and the next
-   * scan has nothing left to retry. Only ENOENT means gone; a permission or
-   * busy failure is about this moment, not about the file, and keeps the
-   * registration for the next scan.
-   */
-  async retireRegistration(registration) {
-    await this.store.retireTranscriptRegistration(registration);
-    this.log(`Codex retired a transcript registration: transcript_path=${JSON.stringify(registration.transcript_path)}, reason=${TRANSCRIPT_MISSING_REASON}.`);
-    return { records: 0, enqueued: 0, quarantined: false };
+  async scanOpened(handle, registration) {
+    const { size, device, inode } = await ownedCodexTranscriptFile(handle);
+    const preflight = await this.preflight(registration, handle, size, device, inode);
+    if (preflight.cursor === null) return preflight.result;
+    const complete = await this.readChunk(handle, preflight.cursor.offset, size);
+    if (complete === "empty" || complete === "partial") return { records: 0, enqueued: 0, quarantined: false };
+    return await this.consumeCompleteChunk(registration, handle, preflight.cursor, complete, device, inode);
+  }
+  async scanFailed(handle, registration, error) {
+    this.diagnostic("watcher_scan_failed", codexTranscriptScanFailureKind(error));
+    await this.quarantineFailure(registration, handle);
+    return { records: 0, enqueued: 0, quarantined: true };
+  }
+  async retireMissing(registration) {
+    await this.releaseStoredPromptBestEffort(registration.host_session_ref, await this.store.readTranscriptCursor(registration).catch(() => null));
+    return this.retireMissingTranscript(registration.transcript_path, "Codex", () => this.store.retireTranscriptRegistration(registration));
   }
   async preflight(registration, handle, size, device, inode) {
     const existing = await this.store.readTranscriptCursor(registration);
     let cursor = existing ?? codexTranscriptInitialCursor(registration, device, inode, this.now);
-    if (cursor.status === "quarantined") return { cursor: null, result: { records: 0, enqueued: 0, quarantined: true } };
-    const reason = await cursorFailureReason(registration, handle, cursor, size, device, inode);
+    if (cursor.status === "quarantined") {
+      if (cursor.reason !== "transcript_malformed") await this.releaseStoredPromptBestEffort(registration.host_session_ref, cursor);
+      return { cursor: null, result: { records: 0, enqueued: 0, quarantined: true } };
+    }
+    const reason = this.cursorIdentityReason(cursor, registration.transcript_path, device, inode) ?? await this.cursorBoundsReason(handle, cursor, size);
     if (reason === null) return { cursor, result: { records: 0, enqueued: 0, quarantined: false } };
     await this.quarantine(registration, cursor, device, inode, reason);
     return { cursor: null, result: { records: 0, enqueued: 0, quarantined: true } };
@@ -3729,39 +6353,53 @@ var CodexTranscriptWatcher = class {
   async observeSessionMetadata(registration, record3) {
     if (record3.kind !== "session_meta") return;
     const session = await this.store.readSession(registration.host_source_ref, registration.host_session_ref);
-    if (session !== null && isRecord7(session.value)) await this.store.saveSession({ ...session, value: { ...session.value, host_version: record3.cli_version } });
+    if (session !== null && this.isRecord(session.value)) await this.store.saveSession({ ...session, value: { ...session.value, host_version: record3.cli_version } });
   }
   async commitCursor(registration, handle, cursor, consumedBytes, device, inode, lastOrdinal, activeTask) {
     const offset = cursor.offset + consumedBytes;
-    const anchorStart = Math.max(0, offset - CODEX_TRANSCRIPT_ANCHOR_BYTES);
-    const anchor = Buffer.alloc(offset - anchorStart);
-    if (anchor.length > 0) await handle.read(anchor, 0, anchor.length, anchorStart);
-    await this.store.writeTranscriptCursor({ schema_version: "ceal.codex_transcript_cursor.v1", host_source_ref: registration.host_source_ref, host_session_ref: registration.host_session_ref, transcript_path: registration.transcript_path, device, inode, offset, last_ordinal: lastOrdinal, anchor_start: anchorStart, anchor_sha256: sha2562(anchor), header_validated: true, ...activeTask === void 0 ? {} : { active_task: activeTask }, status: "active", updated_at: timestamp4(this.now) });
+    const anchor = await this.readAnchor(handle, offset, CODEX_TRANSCRIPT_ANCHOR_BYTES);
+    await this.store.writeTranscriptCursor({ schema_version: "ceal.codex_transcript_cursor.v1", host_source_ref: registration.host_source_ref, host_session_ref: registration.host_session_ref, transcript_path: registration.transcript_path, device, inode, offset, last_ordinal: lastOrdinal, anchor_start: anchor.start, anchor_sha256: anchor.sha256, header_validated: true, ...activeTask === void 0 ? {} : { active_task: activeTask }, status: "active", updated_at: this.stamp() });
   }
   async quarantineFailure(registration, handle) {
     if (handle === void 0) return;
     const stats = await handle.stat().catch(() => null);
     if (stats === null) return;
     const existing = await this.store.readTranscriptCursor(registration).catch(() => null);
-    await this.quarantine(registration, existing ?? codexTranscriptInitialCursor(registration, String(stats.dev), String(stats.ino), this.now), String(stats.dev), String(stats.ino), "transcript_malformed");
+    const quarantined = {
+      ...existing ?? codexTranscriptInitialCursor(registration, String(stats.dev), String(stats.ino), this.now),
+      transcript_path: registration.transcript_path,
+      device: String(stats.dev),
+      inode: String(stats.ino),
+      status: "quarantined",
+      reason: "transcript_malformed",
+      updated_at: this.stamp()
+    };
+    await this.store.writeTranscriptCursor(quarantined);
   }
   async processRecord(registration, activeTask, record3) {
-    if (record3.kind === "task_started") {
-      return { activeTask: { codex_turn_id: record3.turn_id, host_turn_ref: hostTurnReference(registration.host_source_ref, registration.host_session_ref, record3.turn_id), started_at: record3.timestamp }, enqueued: 0 };
-    }
+    if (record3.kind === "task_started") return this.processTaskStarted(registration, activeTask, record3);
     if (record3.kind === "turn_context") return { ...activeTask === void 0 ? {} : { activeTask: record3.turn_id === activeTask.codex_turn_id ? { ...activeTask, model: record3.model } : activeTask }, enqueued: 0 };
     if (record3.kind === "token_count") return { ...activeTask === void 0 ? {} : { activeTask: accumulateTokenCount(activeTask, record3) }, enqueued: 0 };
     if (record3.kind === "user_text") return this.processUserInput(registration, activeTask, record3);
     if (record3.kind === "task_complete" || record3.kind === "turn_aborted") return this.processTerminal(registration, activeTask, record3);
     return { ...activeTask === void 0 ? {} : { activeTask }, enqueued: 0 };
   }
+  async processTaskStarted(registration, activeTask, record3) {
+    if (activeTask !== void 0 && activeTask.codex_turn_id !== record3.turn_id && activeTask.prompt_ref !== void 0) await this.releasePrompt(registration.host_session_ref, activeTask, activeTask.prompt_ref);
+    return { activeTask: { codex_turn_id: record3.turn_id, host_turn_ref: hostTurnReference(registration.host_source_ref, registration.host_session_ref, record3.turn_id), started_at: record3.timestamp }, enqueued: 0 };
+  }
   async processUserInput(registration, activeTask, record3) {
-    if (activeTask === void 0 || activeTask.codex_turn_id !== record3.turn_id) return { ...activeTask === void 0 ? {} : { activeTask }, enqueued: 0 };
+    if (activeTask === void 0 || activeTask.codex_turn_id !== record3.turn_id) {
+      const adopted = await this.adoptHookCorrelatedTurn(registration, activeTask, record3);
+      if (adopted === void 0) return { ...activeTask === void 0 ? {} : { activeTask }, enqueued: 0 };
+      activeTask = adopted;
+    }
     const hostInputRef = hostInputReference(registration.host_source_ref, registration.host_session_ref, record3.turn_id, record3.message_id, record3.ordinal, record3.prompt);
     const origin = activeTask.origin_host_input_ref === void 0;
     const promptValue = promptObservationValue(record3.prompt);
     const currentPromptRef = hostProducerPromptRef(promptValue.body_sha256);
     const promptRef = activeTask.prompt_ref ?? currentPromptRef;
+    const steeredPromptRef = await this.steeredPromptRef(registration, activeTask, origin, currentPromptRef);
     const identity = { host_source_ref: registration.host_source_ref, host_session_ref: registration.host_session_ref, host_turn_ref: activeTask.host_turn_ref };
     const observations = [{
       observation_ref: observationRef("transcript_user_text", hostInputRef, record3.prompt),
@@ -3785,16 +6423,90 @@ var CodexTranscriptWatcher = class {
       origin_input: origin,
       submission_ref: codexSubmissionReference(hostInputRef, "input", record3.ordinal),
       created_at: record3.timestamp,
-      expires_at: expiration(this.now, this.outboxRetentionMs)
+      expires_at: this.expire(this.outboxRetentionMs)
+    };
+    const persisted = await this.persistUserInputTurn(registration, activeTask, record3, hostInputRef, origin, currentPromptRef, promptRef, identity, envelope);
+    if (steeredPromptRef !== null) await this.activateTranscriptTurnContext(identity, steeredPromptRef, envelope.expires_at);
+    return persisted;
+  }
+  /**
+   * The steered prompt to re-activate under the running task, or null when
+   * there is nothing to repair. A steered message joins the running turn
+   * with new prompt bytes but no task_started. When the steer hook already
+   * replaced the turn selection (a turn id the hook did not recognize as
+   * the running one, or a hook that ran before any context was live), the
+   * running task's context no longer matches and the next invocation would
+   * wait for a boundary that never comes. When the hook kept the live
+   * selection, the context still matches and this stays null.
+   */
+  async steeredPromptRef(registration, activeTask, origin, currentPromptRef) {
+    if (origin || activeTask.prompt_ref === void 0 || activeTask.prompt_ref === currentPromptRef) return null;
+    const selection = await this.store.readInvocationTurnSelection(registration.host_source_ref, registration.host_session_ref).catch(() => null);
+    return selection?.prompt_ref === currentPromptRef ? currentPromptRef : null;
+  }
+  /**
+   * Adopt the live hooked turn when its transcript message arrives before
+   * (or without) its task_started, as an interrupted turn's follow-up can.
+   * The UserPromptSubmit hook names the exact hooked prompt, so only a
+   * message carrying those bytes adopts; inherited history and other turns
+   * stay ignored. A stale active task for another turn releases first, the
+   * same as a task_started supersession.
+   */
+  async adoptHookCorrelatedTurn(registration, activeTask, record3) {
+    const currentPromptRef = hostProducerPromptRef(promptObservationValue(record3.prompt).body_sha256);
+    const selection = await this.store.readInvocationTurnSelection(registration.host_source_ref, registration.host_session_ref);
+    if (selection?.prompt_ref !== currentPromptRef) return void 0;
+    if (activeTask !== void 0 && activeTask.codex_turn_id !== record3.turn_id && activeTask.prompt_ref !== void 0) {
+      await this.releasePrompt(registration.host_session_ref, activeTask, activeTask.prompt_ref);
+    }
+    return {
+      codex_turn_id: record3.turn_id,
+      host_turn_ref: hostTurnReference(registration.host_source_ref, registration.host_session_ref, record3.turn_id),
+      started_at: record3.timestamp
     };
-    await this.registerPrompt(origin, registration, activeTask, currentPromptRef, record3.prompt, envelope.expires_at);
-    await this.store.put(envelope);
-    if (origin) await this.store.activateInvocationContext(identity, promptRef, envelope.expires_at);
+  }
+  async persistUserInputTurn(registration, activeTask, record3, hostInputRef, origin, currentPromptRef, promptRef, identity, envelope) {
+    const custodyRegistered = await this.registerPrompt(origin, registration, activeTask, currentPromptRef, record3.prompt, envelope.expires_at);
+    if (custodyRegistered) this.diagnostic("watcher_turn_observed");
+    try {
+      await this.store.put(envelope);
+      if (origin) await this.activateTranscriptTurnContext(identity, promptRef, envelope.expires_at);
+    } catch (error) {
+      if (custodyRegistered) await this.releasePrompt(registration.host_session_ref, activeTask, currentPromptRef).catch(() => void 0);
+      throw error;
+    }
     return { activeTask: { ...activeTask, origin_host_input_ref: activeTask.origin_host_input_ref ?? hostInputRef, prompt_ref: activeTask.prompt_ref ?? currentPromptRef }, enqueued: 1 };
   }
   async registerPrompt(origin, registration, activeTask, promptRef, prompt, expiresAt) {
-    if (!origin || this.producerInstallationRef === void 0 || this.registerCurrentPrompt === void 0) return;
-    await this.registerCurrentPrompt({ producer_id: "codex", producer_installation_ref: this.producerInstallationRef, local_session_ref: registration.host_session_ref, local_turn_ref: activeTask.host_turn_ref, prompt_ref: promptRef, current_prompt: prompt, context_expires_at: expiresAt });
+    if (!origin || this.producerInstallationRef === void 0 || this.registerCurrentPrompt === void 0) return false;
+    const register = this.registerCurrentPrompt;
+    const installationRef = this.producerInstallationRef;
+    return registerHostCurrentPromptDiagnosed(
+      () => register({ producer_id: "codex", producer_installation_ref: installationRef, local_session_ref: registration.host_session_ref, local_turn_ref: activeTask.host_turn_ref, prompt_ref: promptRef, current_prompt: prompt, context_expires_at: expiresAt }),
+      (event) => this.diagnostic(event)
+    );
+  }
+  async activateTranscriptTurnContext(identity, promptRef, expiresAt) {
+    try {
+      const selection = await this.store.readInvocationTurnSelection(identity.host_source_ref, identity.host_session_ref);
+      const turnGenerationRef = selection?.prompt_ref === promptRef ? selection.turn_generation_ref : void 0;
+      await this.store.activateInvocationContext(identity, promptRef, expiresAt, turnGenerationRef);
+      this.diagnostic("activation_recorded");
+    } catch (error) {
+      this.diagnostic("activation_failed");
+      throw error;
+    }
+  }
+  async releasePrompt(sessionRef, activeTask, promptRef) {
+    if (this.producerInstallationRef === void 0 || this.releaseCurrentPrompt === void 0) return;
+    await this.releaseCurrentPrompt({ producer_id: "codex", producer_installation_ref: this.producerInstallationRef, local_session_ref: sessionRef, local_turn_ref: activeTask.host_turn_ref, prompt_ref: promptRef });
+  }
+  async releaseStoredPromptBestEffort(sessionRef, cursor) {
+    await this.releaseActiveTaskBestEffort(sessionRef, cursor?.active_task);
+  }
+  async releaseActiveTaskBestEffort(sessionRef, activeTask) {
+    if (activeTask?.prompt_ref === void 0) return;
+    await this.releasePrompt(sessionRef, activeTask, activeTask.prompt_ref).catch(() => void 0);
   }
   async processTerminal(registration, activeTask, record3) {
     if (activeTask === void 0 || activeTask.codex_turn_id !== record3.turn_id || activeTask.origin_host_input_ref === void 0 || activeTask.prompt_ref === void 0) return { ...activeTask === void 0 ? {} : { activeTask }, enqueued: 0 };
@@ -3812,16 +6524,26 @@ var CodexTranscriptWatcher = class {
       origin_input: false,
       submission_ref: codexSubmissionReference(activeTask.origin_host_input_ref, "terminal", record3.ordinal),
       created_at: record3.timestamp,
-      expires_at: expiration(this.now, this.outboxRetentionMs)
+      expires_at: this.expire(this.outboxRetentionMs)
     });
+    await this.releasePrompt(registration.host_session_ref, activeTask, activeTask.prompt_ref);
     await this.store.clearInvocationContext(identity, this.now());
     return { enqueued: 1 };
   }
   async quarantine(registration, cursor, device, inode, reason) {
-    const quarantined = { ...cursor, transcript_path: registration.transcript_path, device, inode, status: "quarantined", reason, updated_at: timestamp4(this.now) };
+    await this.releaseStoredPromptBestEffort(registration.host_session_ref, cursor);
+    const quarantined = { ...cursor, transcript_path: registration.transcript_path, device, inode, status: "quarantined", reason, updated_at: this.stamp() };
     await this.store.writeTranscriptCursor(quarantined);
   }
 };
+function codexTranscriptScanFailureKind(error) {
+  return transcriptScanFailureKind(error, (candidate) => {
+    if (!(candidate instanceof CodexHostAdapterError)) return void 0;
+    if (candidate.code === "payload_rejected") return "payload_rejected";
+    if (candidate.code === "storage") return "read_error";
+    return void 0;
+  });
+}
 function accumulateTokenCount(activeTask, record3) {
   if (record3.usage_gap_reason !== void 0) return { ...activeTask, token_usage_gap_reason: record3.usage_gap_reason };
   const last = record3.last_usage;
@@ -3855,19 +6577,18 @@ function terminalCostValue() {
   return notRecorded("provider_cost_not_observed");
 }
 function notRecorded(reason) {
-  return { status: "not_recorded", reason };
+  return hostObservationNotRecorded(reason);
 }
 function tokenObservationValue(usage) {
   return {
-    status: "available",
-    unit: "tokens",
-    input: usage.input_tokens,
-    output: usage.output_tokens,
-    total: usage.total_tokens,
-    cached_input: usage.cached_input_tokens,
-    cache_write_input: usage.cache_write_input_tokens,
-    reasoning_output: usage.reasoning_output_tokens,
-    source: "codex_transcript.event_msg.token_count.info.last_token_usage",
+    ...createHostTokenObservationValue({
+      input: usage.input_tokens,
+      output: usage.output_tokens,
+      total: usage.total_tokens,
+      cached_input: usage.cached_input_tokens,
+      cache_write_input: usage.cache_write_input_tokens,
+      reasoning_output: usage.reasoning_output_tokens
+    }, "codex_transcript.event_msg.token_count.info.last_token_usage"),
     attribution: "sequential_active_task",
     total_usage_role: "dedup_and_reset_detection_only"
   };
@@ -3901,65 +6622,24 @@ function looksLikeStaleRegression(current, previous, last) {
   if (previous.total_tokens <= 0 || current.total_tokens <= 0 || last.total_tokens <= 0) return false;
   return current.total_tokens * 100 >= previous.total_tokens * 98 || current.total_tokens + last.total_tokens * 2 >= previous.total_tokens;
 }
-function isMissingTranscript(error) {
-  return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
-}
-async function cursorFailureReason(registration, handle, cursor, size, device, inode) {
-  if (cursor.device !== device || cursor.inode !== inode || cursor.transcript_path !== registration.transcript_path) return "transcript_replaced";
-  if (size < cursor.offset) return "transcript_truncated";
-  if (cursor.offset > 0 && !await anchorMatches(handle, cursor)) return "transcript_rewritten";
-  return null;
-}
-async function readCompleteChunk(handle, cursor, size) {
-  const available = Math.max(0, size - cursor.offset);
-  if (available === 0) return "empty";
-  const chunks = [];
-  let position = cursor.offset;
-  let total = 0;
-  let lastNewline = -1;
-  while (position < size) {
-    const buffer = Buffer.alloc(Math.min(READ_CHUNK_BYTES, size - position));
-    const read = await handle.read(buffer, 0, buffer.length, position);
-    if (read.bytesRead === 0) break;
-    const chunk = buffer.subarray(0, read.bytesRead);
-    chunks.push(chunk);
-    const newline = chunk.lastIndexOf(10);
-    if (newline >= 0) lastNewline = total + newline;
-    total += chunk.length;
-    position += chunk.length;
-    if (lastNewline >= 0) break;
-  }
-  if (lastNewline < 0) return "partial";
-  return Buffer.concat(chunks, total).subarray(0, lastNewline + 1);
-}
 function assertRecordSequence(registration, cursor, records, lastOrdinal, record3) {
   if ((cursor.header_validated || records > 0) && record3.ordinal <= lastOrdinal) throw new CodexHostAdapterError("payload_rejected", `Codex transcript ordinal is not monotonic (${refusalFact("ordinal", record3.ordinal, `greater than ${lastOrdinal}`)}).`);
   if (!cursor.header_validated && records === 0) assertCodexTranscriptHeader(registration, record3);
 }
-async function anchorMatches(handle, cursor) {
-  const buffer = Buffer.alloc(cursor.offset - cursor.anchor_start);
-  if (buffer.length > 0) await handle.read(buffer, 0, buffer.length, cursor.anchor_start);
-  return sha2562(buffer) === cursor.anchor_sha256;
-}
-function sha2562(value) {
-  return createHash7("sha256").update(value).digest("hex");
-}
-function isRecord7(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function timestamp4(now) {
-  const value = now();
-  if (!Number.isFinite(value.getTime())) throw new CodexHostAdapterError("storage", "Codex watcher clock is invalid.");
-  return value.toISOString();
-}
-function expiration(now, retentionMs) {
-  return new Date(Date.parse(timestamp4(now)) + retentionMs).toISOString();
-}
 
 // host/codex/src/codex-producer-runtime.ts
 async function drainCodexProducerOnce(options) {
   const promptPort = new HostRelayCurrentPromptPort(options.relay_endpoint, options.timeout_ms);
-  const scan = await new CodexTranscriptWatcher({ outbox_dir: options.outbox_dir, producer_installation_ref: options.producer_installation_ref, register_current_prompt: (input) => promptPort.register(input) }).scanOnce();
+  const scan = await new CodexTranscriptWatcher({
+    outbox_dir: options.outbox_dir,
+    producer_installation_ref: options.producer_installation_ref,
+    register_current_prompt: (input) => promptPort.register(input),
+    release_current_prompt: (identity) => promptPort.release(identity),
+    diagnostic: (event, failure_kind) => writeHostServiceDiagnostic("codex", event, failure_kind)
+  }).scanOnce().catch((error) => {
+    writeHostServiceDiagnostic("codex", "watcher_scan_failed", codexTranscriptScanFailureKind(error));
+    throw error;
+  });
   const producer = new CodexProducer({ outbox_dir: options.outbox_dir, producer_installation_ref: options.producer_installation_ref, relay: new HostRelayIpcAdmissionPort(options.relay_endpoint, options.timeout_ms), ...options.producer_epoch === void 0 ? {} : { producer_epoch: options.producer_epoch }, ...options.now === void 0 ? {} : { now: options.now } });
   return { scanned: scan.enqueued, ...await producer.drainOutbox() };
 }
@@ -3982,15 +6662,52 @@ var CODEX_PRODUCER_DESCRIPTOR = {
   drain: drainCodexProducerOnce
 };
 
+// host/codex/src/codex-visible-output-budget.ts
+import { readFile as readFile3 } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join as join5 } from "node:path";
+var import_toml = __toESM(require_toml(), 1);
+var CODEX_DEFAULT_TOOL_OUTPUT_TOKEN_LIMIT = 5e3;
+var CODEX_UTF8_BYTES_PER_OUTPUT_TOKEN = 4;
+async function resolveCodexVisibleOutputMaxBytes(environment = process.env) {
+  const codexHome = environment.CODEX_HOME || join5(homedir(), ".codex");
+  let source;
+  try {
+    source = await readFile3(join5(codexHome, "config.toml"), "utf8");
+  } catch (error) {
+    return isNotFound2(error) ? codexBytes(CODEX_DEFAULT_TOOL_OUTPUT_TOKEN_LIMIT) : void 0;
+  }
+  try {
+    const parsed = import_toml.default.parse(source);
+    if (!isRecord8(parsed)) return void 0;
+    const configured = parsed.tool_output_token_limit;
+    if (configured === void 0) return codexBytes(CODEX_DEFAULT_TOOL_OUTPUT_TOKEN_LIMIT);
+    return typeof configured === "number" && Number.isSafeInteger(configured) && configured > 0 ? codexBytes(configured) : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function codexBytes(tokens) {
+  return Math.min(tokens * CODEX_UTF8_BYTES_PER_OUTPUT_TOKEN, CEAL_CANONICAL_HTTP_MAX_RESPONSE_BYTES);
+}
+function isRecord8(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isNotFound2(error) {
+  return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
+}
+
 // host/codex/src/codex-invocation-authentication-command.ts
 var CODEX_INVOCATION_AUTHENTICATION_DESCRIPTOR = {
   producer_id: "codex",
+  context_activation_wait_max_ms: CODEX_CONTEXT_ACTIVATION_WAIT_MAX_MS,
   create_store: (directory) => new CodexOutboxStore(directory),
   session_id_env: CODEX_THREAD_ID_ENVIRONMENT,
   session_ref: hostSessionReference,
   config_flag: HOST_PRODUCER_CONFIG_FLAG,
   parse_config_flag: parseHostProducerConfigFlag,
-  read_producer_config: (configPath) => readHostProducerConfig(CODEX_PRODUCER_DESCRIPTOR, configPath)
+  read_producer_config: (configPath) => readHostProducerConfig(CODEX_PRODUCER_DESCRIPTOR, configPath),
+  resolve_visible_output_max_bytes: () => resolveCodexVisibleOutputMaxBytes()
 };
 function runCodexInvocationAuthenticationCommand(args, options) {
   return runHostInvocationAuthenticationCommand(CODEX_INVOCATION_AUTHENTICATION_DESCRIPTOR, args, options);