@cortexkit/anthropic-auth-core 2.4.8 → 2.4.9

package/dist/index.js

@@ -1,6 +1,104 @@
 import { createRequire } from "node:module";
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
+// ../../node_modules/@cortexkit/common-auth/dist/routing-accessor/index.js
+function isObject(value) {
+  return typeof value === "object" && value !== null;
+}
+function routingHandle(sessionId) {
+  const routing = Reflect.get(globalThis, Symbol.for("cortexkit.routing"));
+  if (typeof routing !== "function")
+    return;
+  const handle = routing(sessionId);
+  return isObject(handle) ? handle : undefined;
+}
+function selectionFor(answer, candidates) {
+  if (!isObject(answer))
+    return;
+  const accountId = answer.account_id;
+  const credentialId = answer.credential_id;
+  if (typeof accountId !== "string")
+    return;
+  if (credentialId !== undefined && typeof credentialId !== "string") {
+    return;
+  }
+  const candidate = candidates.find((route) => route.accountId === accountId && (credentialId === undefined || route.credentialId === credentialId));
+  if (!candidate)
+    return;
+  const hold = answer.hold;
+  const retryAfterMs = isObject(hold) ? hold.retry_after_ms : undefined;
+  if (typeof retryAfterMs === "number" && Number.isFinite(retryAfterMs) && retryAfterMs >= 0) {
+    return { candidate, hold: { retry_after_ms: retryAfterMs } };
+  }
+  return { candidate };
+}
+async function askRouting(input) {
+  let timer;
+  try {
+    const handle = routingHandle(input.sessionId);
+    if (!handle)
+      return;
+    const accountFor = handle.accountFor;
+    if (typeof accountFor !== "function")
+      return;
+    const requested = input.deadlineMs ?? 500;
+    const deadlineMs = Number.isNaN(requested) ? 500 : Math.min(2000, Math.max(1, requested));
+    const expired = new Promise((resolve) => {
+      timer = setTimeout(() => resolve(undefined), deadlineMs);
+      timer.unref();
+    });
+    const pending = accountFor.call(handle, { provider: input.provider, modelId: input.modelId }, { deadlineMs });
+    if (!isObject(pending) || typeof pending.then !== "function")
+      return;
+    const answer = await Promise.race([pending, expired]);
+    return selectionFor(answer, input.candidates);
+  } catch {
+    return;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function reportRouting(input) {
+  try {
+    const handle = routingHandle(input.sessionId);
+    if (!handle)
+      return;
+    const report = handle.report;
+    if (typeof report !== "function")
+      return;
+    const identity = {
+      account_id: input.accountId,
+      ...input.credentialId !== undefined ? { credential_id: input.credentialId } : {}
+    };
+    let payload;
+    switch (input.outcome) {
+      case "served":
+        payload = { ...identity, outcome: "served", headers: input.headers };
+        break;
+      case "exhausted": {
+        const { window, pool } = input;
+        if (window !== "5h" && window !== "7d")
+          return;
+        if (pool !== undefined && (typeof pool !== "string" || pool.length === 0 || pool.includes(":")))
+          return;
+        payload = {
+          ...identity,
+          outcome: "exhausted",
+          window,
+          ...pool ? { pool } : {},
+          ...input.resetsAt !== undefined ? { resets_at: input.resetsAt } : {}
+        };
+        break;
+      }
+      default:
+        return;
+    }
+    const pending = report.call(handle, payload);
+    if (isObject(pending) && typeof pending.then === "function") {
+      Promise.resolve(pending).catch(() => {});
+    }
+  } catch {}
+}
 // ../../node_modules/@cortexkit/common-auth/dist/auth-menu/ansi.js
 var ANSI = {
   hide: "\x1B[?25l",
@@ -241,7 +339,7 @@ async function select(terminal, items, options) {
 import { createHash, randomBytes, randomUUID as randomUUID4 } from "node:crypto";
 import { constants as fsConstants } from "node:fs";
 import { chmod, mkdir as mkdir3, open as open3, readFile as readFile3, realpath, rename as rename4, stat as stat2, unlink as unlink2 } from "node:fs/promises";
-import { basename, dirname as dirname4, extname, isAbsolute, join as join3, resolve as resolve3 } from "node:path";
+import { basename, dirname as dirname4, extname, isAbsolute, join as join4, resolve as resolve4 } from "node:path";
 import { ClaustrumCredentialError, ClaustrumClient as ClaustrumWireClient, writeEnrollmentTokenFile } from "@cortexkit/claustrum-client";
 
 // ../../node_modules/@cortexkit/common-auth/dist/fs/file-read-cache.js
@@ -688,9 +786,10 @@ var WRITER_LOCK_CONSTANTS = Object.freeze({
 // ../../node_modules/@cortexkit/common-auth/dist/fs/refresh-file-lock.js
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { lstat as lstat3, mkdir as mkdir2, open as open2, readFile as readFile2, rename as rename3, rm as rm2, stat } from "node:fs/promises";
-import { dirname as dirname3, join as join2 } from "node:path";
+import { dirname as dirname3, join as join3 } from "node:path";
 
 // ../../node_modules/@cortexkit/common-auth/dist/fs/with-lock.js
+import { join as join2, resolve as resolve3 } from "node:path";
 function lockPathFor(target, name) {
   return `${target}.${name}.lock`;
 }
@@ -712,18 +811,33 @@ class LockOwnershipError extends Error {
     this.details = details;
   }
 }
+function isChangingLockRead(error, target, name) {
+  if (!windowsPrivateFiles || !(error instanceof PrivateFileError) || error.reason !== "io-error" || error.win32Code !== 32 && error.win32Code !== 303 || error.stage !== "read" && error.stage !== "verify")
+    return false;
+  const path = resolve3(lockPathFor(target, name));
+  return error.path === path || error.path === join2(path, "owner.json");
+}
 async function withLock(target, options, fn) {
   const started = performance.now();
   for (;; ) {
     options.signal?.throwIfAborted();
-    const lock = await acquireRefreshFileLock({
-      path: target,
-      name: options.name,
-      ttlMs: options.ttlMs,
-      renew: options.renew ?? false,
-      ...options.onStep ? { onStep: options.onStep } : {},
-      ...options.onRenewalTimer ? { onRenewalTimer: options.onRenewalTimer } : {}
-    });
+    let lock;
+    let changingReadError;
+    try {
+      lock = await acquireRefreshFileLock({
+        path: target,
+        name: options.name,
+        ttlMs: options.ttlMs,
+        renew: options.renew ?? false,
+        ...options.onStep ? { onStep: options.onStep } : {},
+        ...options.onRenewalTimer ? { onRenewalTimer: options.onRenewalTimer } : {}
+      });
+    } catch (error) {
+      if (!isChangingLockRead(error, target, options.name))
+        throw error;
+      lock = null;
+      changingReadError = error;
+    }
     if (lock) {
       try {
         options.signal?.throwIfAborted();
@@ -734,13 +848,15 @@ async function withLock(target, options, fn) {
     }
     const remaining = options.timeoutMs - (performance.now() - started);
     if (remaining <= 0) {
+      if (changingReadError)
+        throw changingReadError;
       throw new LockContentionError({
         target,
         name: options.name,
         timeoutMs: options.timeoutMs
       });
     }
-    await new Promise((resolve3) => setTimeout(resolve3, Math.min(25, Math.ceil(remaining))));
+    await new Promise((resolve4) => setTimeout(resolve4, Math.min(25, Math.ceil(remaining))));
   }
 }
 
@@ -789,7 +905,7 @@ function acquireRefreshFileLock(options) {
 }
 async function acquireRefreshFileLockWithClock(options) {
   const lockPath = lockPathFor(options.path, options.name);
-  const legacyOwnerPath = join2(lockPath, "owner.json");
+  const legacyOwnerPath = join3(lockPath, "owner.json");
   const ownerId = randomUUID3();
   const now = options.now ?? Date.now;
   let renewTimer = null;
@@ -797,8 +913,8 @@ async function acquireRefreshFileLockWithClock(options) {
   let releaseConfirmed = false;
   let loss;
   let resolveLoss;
-  const lostPromise = new Promise((resolve3) => {
-    resolveLoss = resolve3;
+  const lostPromise = new Promise((resolve4) => {
+    resolveLoss = resolve4;
   });
   function notifyTimerStep(event) {
     try {
@@ -830,7 +946,7 @@ async function acquireRefreshFileLockWithClock(options) {
   let terminalIOError;
   let renewalInFlight = null;
   const evictPath = `${lockPath}.evicting`;
-  const evictOwnerPath = join2(evictPath, "owner.json");
+  const evictOwnerPath = join3(evictPath, "owner.json");
   const evictOwnerId = randomUUID3();
   const EVICT_TTL = 5000;
   const MAX_STEAL_ATTEMPTS = 8;
@@ -955,7 +1071,7 @@ async function acquireRefreshFileLockWithClock(options) {
     }
   }
   async function backoff() {
-    await new Promise((resolve3) => setTimeout(resolve3, Math.floor(Math.random() * 4)));
+    await new Promise((resolve4) => setTimeout(resolve4, Math.floor(Math.random() * 4)));
   }
   async function readLockState(notifyReady = true) {
     if (notifyReady && options.onStep)
@@ -1439,7 +1555,7 @@ async function acquireRefreshFileLockWithClock(options) {
         const remainingMs = deadline - performance.now();
         if (remainingMs <= 0)
           break;
-        await new Promise((resolve3) => setTimeout(resolve3, Math.min(delayMs, remainingMs)));
+        await new Promise((resolve4) => setTimeout(resolve4, Math.min(delayMs, remainingMs)));
         delayMs = Math.min(delayMs * 2, 50);
       }
       if (windowsPrivateFiles)
@@ -1496,7 +1612,7 @@ function getClaustrumEnrollmentPaths(tokenPath) {
   const extension = extname(tokenPath) || ".json";
   const stem = basename(tokenPath, extname(tokenPath));
   return {
-    statePath: join3(dirname4(tokenPath), `${stem}-state${extension}`),
+    statePath: join4(dirname4(tokenPath), `${stem}-state${extension}`),
     tokenPath
   };
 }
@@ -1504,7 +1620,7 @@ function hostEnrollmentPaths(input) {
   const override = input.override?.trim();
   if (override && !isAbsolute(override) && !input.cwd)
     throw new ClaustrumConsumerError("invalid-state", "A relative Claustrum enrollment override needs a base directory");
-  const tokenPath = override ? isAbsolute(override) ? override : resolve3(input.cwd, override) : join3(input.stateDir, `${input.host}-enrollment.json`);
+  const tokenPath = override ? isAbsolute(override) ? override : resolve4(input.cwd, override) : join4(input.stateDir, `${input.host}-enrollment.json`);
   return getClaustrumEnrollmentPaths(tokenPath);
 }
 function isRecord(value) {
@@ -1740,7 +1856,7 @@ async function writeStateAtomic(path, state, ancestorOptions = {}) {
   }
   if (windowsPrivateFiles)
     return writePrivateAtomic(path, bytes);
-  const temporary = join3(parent, `.${basename(path)}.${process.pid}.${randomUUID4()}.tmp`);
+  const temporary = join4(parent, `.${basename(path)}.${process.pid}.${randomUUID4()}.tmp`);
   let descriptor;
   let created = false;
   try {
@@ -2241,7 +2357,7 @@ class ByteTail {
 }
 var defaultCommandRunner = {
   run(file, args, options = {}) {
-    return new Promise((resolve4) => {
+    return new Promise((resolve5) => {
       const started = performance.now();
       const timeoutMs = options.timeoutMs ?? 15000;
       const stderr = new ByteTail;
@@ -2259,7 +2375,7 @@ var defaultCommandRunner = {
           stdio: ["ignore", "pipe", "pipe"]
         });
       } catch {
-        resolve4({
+        resolve5({
           exitCode: 1,
           stdout: "",
           stderr: "",
@@ -2294,7 +2410,7 @@ var defaultCommandRunner = {
         settled = true;
         if (timer)
           clearTimeout(timer);
-        resolve4({
+        resolve5({
           exitCode: spawnError ? 1 : outputExceeded ? 1 : code ?? 1,
           stdout: Buffer.concat(stdout, stdoutLength).toString("utf8"),
           stderr: stderr.toString(),
@@ -2388,7 +2504,7 @@ function setupEnrollment(error) {
 import { accessSync, constants, existsSync, readFileSync, realpathSync, statSync } from "node:fs";
 import { mkdtemp, rm as rm3 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join4 } from "node:path";
+import { join as join5 } from "node:path";
 import { parse } from "jsonc-parser";
 
 // ../../node_modules/@cortexkit/common-auth/dist/setup/paths.js
@@ -2557,7 +2673,7 @@ async function detectHosts(plugin, io = {}) {
       return null;
     let root;
     try {
-      root = await mkdtemp(join4(tmpdir2(), "common-auth-setup-version-"));
+      root = await mkdtemp(join5(tmpdir2(), "common-auth-setup-version-"));
       const probeEnv = {
         ...env,
         HOME: root,
@@ -3151,7 +3267,7 @@ import { applyEdits, createScanner, findNodeAtLocation, modify, parse as parse2,
 // ../../node_modules/@cortexkit/common-auth/dist/setup/config-write.js
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { mkdir as mkdir4, open as open4, rename as rename5, stat as stat4, unlink as unlink3 } from "node:fs/promises";
-import { basename as basename2, dirname as dirname5, join as join5 } from "node:path";
+import { basename as basename2, dirname as dirname5, join as join6 } from "node:path";
 import { setTimeout as delay2 } from "node:timers/promises";
 async function writeHostConfigAtomic(file, content, options = {}) {
   const windows = (options.platform ?? process.platform) === "win32";
@@ -3166,7 +3282,7 @@ async function writeHostConfigAtomic(file, content, options = {}) {
         throw error;
     }
   }
-  const stage = join5(parent, `.${basename2(file)}.${(options.stageName ?? randomUUID5)()}.tmp`);
+  const stage = join6(parent, `.${basename2(file)}.${(options.stageName ?? randomUUID5)()}.tmp`);
   let created = false;
   try {
     const handle = await open4(stage, "wx", mode ?? 438);
@@ -3583,13 +3699,13 @@ ${write.content}`);
 import { createHash as createHash2, randomUUID as randomUUID6 } from "node:crypto";
 import { mkdir as mkdir5, readFile as readFile5, rename as rename6, rm as rm4, stat as stat5, writeFile } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { dirname as dirname6, join as join7 } from "node:path";
+import { dirname as dirname6, join as join8 } from "node:path";
 
 // src/claustrum.ts
 import { readdirSync, statSync as statSync2 } from "node:fs";
 import * as fs from "node:fs/promises";
 import { tmpdir as tmpdir3, userInfo } from "node:os";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 function errorCode(error) {
   return error && typeof error === "object" && "code" in error && typeof error.code === "string" ? error.code : "unknown";
 }
@@ -3617,7 +3733,7 @@ function listSubcTempConnectionFiles(dir) {
     if (!name.startsWith(CLAUSTRUM_TEMP_PREFIX) || !name.endsWith(CLAUSTRUM_TEMP_SUFFIX)) {
       continue;
     }
-    const candidate = join6(dir, name);
+    const candidate = join7(dir, name);
     if (safeIsFile(candidate))
       matches.push(candidate);
   }
@@ -3627,13 +3743,13 @@ function listSubcTempConnectionFiles(dir) {
 function findExistingClaustrumConnectionPath(env = process.env) {
   const runtime = env.XDG_RUNTIME_DIR?.trim();
   if (runtime) {
-    const candidate = join6(runtime, PRODUCTION_CLAUSTRUM_CONNECTION_FILE_NAME);
+    const candidate = join7(runtime, PRODUCTION_CLAUSTRUM_CONNECTION_FILE_NAME);
     if (safeIsFile(candidate))
       return candidate;
   }
   const home = env.HOME?.trim();
   if (home) {
-    const candidate = join6(home, ".local", "share", "cortexkit", "run", PRODUCTION_CLAUSTRUM_CONNECTION_FILE_NAME);
+    const candidate = join7(home, ".local", "share", "cortexkit", "run", PRODUCTION_CLAUSTRUM_CONNECTION_FILE_NAME);
     if (safeIsFile(candidate))
       return candidate;
   }
@@ -3652,11 +3768,11 @@ function getDefaultClaustrumConnectionPath(env = process.env) {
     return existing;
   const runtime = env.XDG_RUNTIME_DIR?.trim();
   if (runtime && (process.platform !== "darwin" || safeIsFile(runtime))) {
-    return join6(runtime, PRODUCTION_CLAUSTRUM_CONNECTION_FILE_NAME);
+    return join7(runtime, PRODUCTION_CLAUSTRUM_CONNECTION_FILE_NAME);
   }
   if (process.platform === "darwin") {
     const home = env.HOME?.trim() || userInfo().homedir;
-    return join6(home, ".local", "share", "cortexkit", "run", PRODUCTION_CLAUSTRUM_CONNECTION_FILE_NAME);
+    return join7(home, ".local", "share", "cortexkit", "run", PRODUCTION_CLAUSTRUM_CONNECTION_FILE_NAME);
   }
   const uid = process.getuid?.() ?? userInfo().uid;
   return `/run/user/${uid}/${PRODUCTION_CLAUSTRUM_CONNECTION_FILE_NAME}`;
@@ -4252,7 +4368,7 @@ async function refreshClaudeOAuthToken(input) {
     try {
       if (attempt > 0) {
         const delay3 = baseDelayMs * 2 ** (attempt - 1);
-        await new Promise((resolve4) => setTimeoutImpl(resolve4, delay3));
+        await new Promise((resolve5) => setTimeoutImpl(resolve5, delay3));
       }
       const response = await fetchImpl(TOKEN_URL, {
         method: "POST",
@@ -4444,16 +4560,16 @@ function getOpenCodeConfigDir(env = process.env, home = homedir2()) {
   if (env.OPENCODE_CONFIG_DIR?.trim()) {
     return env.OPENCODE_CONFIG_DIR.trim();
   }
-  return join7(env.XDG_CONFIG_HOME || join7(home, ".config"), "opencode");
+  return join8(env.XDG_CONFIG_HOME || join8(home, ".config"), "opencode");
 }
 function getAccountStoragePath() {
-  return process.env.OPENCODE_ANTHROPIC_AUTH_FILE?.trim() || join7(getOpenCodeConfigDir(), ACCOUNT_FILE_NAME);
+  return process.env.OPENCODE_ANTHROPIC_AUTH_FILE?.trim() || join8(getOpenCodeConfigDir(), ACCOUNT_FILE_NAME);
 }
 function getAccountStatePath(configPath = getAccountStoragePath()) {
   const explicit = process.env.OPENCODE_ANTHROPIC_AUTH_STATE_FILE?.trim();
   if (explicit)
     return explicit;
-  return configPath.endsWith(ACCOUNT_FILE_NAME) ? join7(dirname6(configPath), ACCOUNT_STATE_FILE_NAME) : `${configPath}.state.json`;
+  return configPath.endsWith(ACCOUNT_FILE_NAME) ? join8(dirname6(configPath), ACCOUNT_STATE_FILE_NAME) : `${configPath}.state.json`;
 }
 function createEmptyStorage() {
   return {
@@ -4581,7 +4697,7 @@ function getClaustrumMode(storage) {
 async function acquireRefreshFileLock2(options) {
   const accountPath = options.path ?? getAccountStoragePath();
   const lockPath = `${accountPath}.${options.name}.lock`;
-  const legacyOwnerPath = join7(lockPath, "owner.json");
+  const legacyOwnerPath = join8(lockPath, "owner.json");
   const ownerId = randomUUID6();
   const now = Date.now;
   let renewTimer = null;
@@ -4635,12 +4751,12 @@ async function acquireRefreshFileLock2(options) {
   let acquired = await tryAcquire();
   if (!acquired) {
     const evictPath = `${lockPath}.evicting`;
-    const evictOwnerPath = join7(evictPath, "owner.json");
+    const evictOwnerPath = join8(evictPath, "owner.json");
     const evictOwnerId = randomUUID6();
     const EVICT_TTL = 5000;
     const MAX_STEAL_ATTEMPTS = 8;
     async function backoff() {
-      await new Promise((resolve4) => setTimeout(resolve4, Math.floor(Math.random() * 4)));
+      await new Promise((resolve5) => setTimeout(resolve5, Math.floor(Math.random() * 4)));
     }
     async function lockIsLive() {
       try {
@@ -5985,7 +6101,7 @@ import {
   writeFile as writeFile2
 } from "node:fs/promises";
 import { tmpdir as tmpdir5 } from "node:os";
-import { join as join9, resolve as resolve4 } from "node:path";
+import { join as join10, resolve as resolve5 } from "node:path";
 
 // src/json.ts
 function parseJsonRedacted(text) {
@@ -6256,7 +6372,7 @@ var DUMP_USAGE_TITLE = "## Claude Dump Usage";
 var DUMP_USAGE = "Usage: `/claude-dump`, `/claude-dump on`, or `/claude-dump off`.";
 var DUMP_DIR_ENV = "OPENCODE_ANTHROPIC_AUTH_DUMP_DIR";
 var DUMP_MAX_BYTES_ENV = "OPENCODE_ANTHROPIC_AUTH_DUMP_MAX_BYTES";
-var DEFAULT_DUMP_DIR = join9(tmpdir5(), "opencode-anthropic-auth-dumps");
+var DEFAULT_DUMP_DIR = join10(tmpdir5(), "opencode-anthropic-auth-dumps");
 var DEFAULT_DUMP_MAX_BYTES = 512 * 1024 * 1024;
 var DUMP_SWEEP_INTERVAL_MS = 5 * 60 * 1000;
 var DUMP_SWEEP_NEWNESS_FLOOR_MS = 60 * 1000;
@@ -6293,7 +6409,7 @@ function getDumpMaxBytes() {
   return Number.isFinite(configured) && configured >= 0 ? Math.floor(configured) : DEFAULT_DUMP_MAX_BYTES;
 }
 function isConfiguredDumpDirectory(path2) {
-  return resolve4(path2) === resolve4(getDumpDirectory());
+  return resolve5(path2) === resolve5(getDumpDirectory());
 }
 function isDumpArtifactFileName(name) {
   const stem = name.replace(DUMP_ARTIFACT_SUFFIX_PATTERN, "");
@@ -6350,7 +6466,7 @@ async function sweepDumpDirectory(options) {
     const dumpDirStats = await lstat4(dumpDir);
     if (dumpDirStats.isSymbolicLink())
       return emptyResult;
-    const protectedPaths = new Set((options.protectedPaths ?? []).map((path2) => resolve4(path2)));
+    const protectedPaths = new Set((options.protectedPaths ?? []).map((path2) => resolve5(path2)));
     const entries = await readdir(dumpDir, { withFileTypes: true });
     const files = [];
     await Promise.all(entries.map(async (entry) => {
@@ -6359,7 +6475,7 @@ async function sweepDumpDirectory(options) {
       const partial = isDumpPartialFileName(entry.name);
       if (!partial && !isDumpArtifactFileName(entry.name))
         return;
-      const path2 = join9(dumpDir, entry.name);
+      const path2 = join10(dumpDir, entry.name);
       try {
         const stats = await lstat4(path2);
         if (!stats.isFile() || stats.isSymbolicLink())
@@ -6388,7 +6504,7 @@ async function sweepDumpDirectory(options) {
     };
     const partials = files.filter((file) => file.partial).sort((left, right) => left.mtimeMs - right.mtimeMs || left.path.localeCompare(right.path));
     for (const file of partials) {
-      if (protectedPaths.has(resolve4(file.path)))
+      if (protectedPaths.has(resolve5(file.path)))
         continue;
       if (now - file.mtimeMs < partialStaleMs)
         continue;
@@ -6412,7 +6528,7 @@ async function sweepDumpDirectory(options) {
         break;
       if (now - group.newestMtimeMs < minAgeMs)
         continue;
-      if (group.files.some((file) => protectedPaths.has(resolve4(file.path)))) {
+      if (group.files.some((file) => protectedPaths.has(resolve5(file.path)))) {
         continue;
       }
       for (const file of group.files)
@@ -6564,7 +6680,7 @@ async function loadLatestDumpBody(input) {
   const candidates = names.map((name) => ({ name, tag: dumpBodyTagForAffinity(name, affinity) })).filter((candidate) => candidate.tag !== undefined).sort((a, b) => b.name.localeCompare(a.name));
   for (const candidate of candidates) {
     try {
-      const path2 = join9(dumpDir, candidate.name);
+      const path2 = join10(dumpDir, candidate.name);
       const metadataPath = path2.replace(/\.body\.json$/, ".meta.json");
       if (!(await lstat4(path2)).isFile())
         continue;
@@ -6691,7 +6807,7 @@ async function dumpRequest(input) {
   const tagSegment = dumpTagSegment(input.tag);
   const id = `${new Date().toISOString().replace(/[:.]/g, "-")}-${String(nextDumpId).padStart(6, "0")}-${dumpFileSessionSegment(affinity, 80 - tagSegment.length)}${tagSegment}-${dumpRequestSegment(input)}`;
   const dumpDir = getDumpDirectory();
-  const prefix = join9(dumpDir, id);
+  const prefix = join10(dumpDir, id);
   const files = {
     body: `${prefix}.body.json`,
     metadata: `${prefix}.meta.json`,
@@ -7034,7 +7150,7 @@ function classifyVaultFailure(error) {
 }
 
 // ../../node_modules/@cortexkit/common-auth/dist/claustrum/insula.js
-import { resolve as resolve5 } from "node:path";
+import { resolve as resolve6 } from "node:path";
 import { storeIdentity } from "@cortexkit/claustrum-client";
 import { SubcClient } from "@cortexkit/subc-client";
 
@@ -7568,8 +7684,8 @@ class InsulaQuotaSource {
 }
 function acquireInsulaQuotaSource(transport, tokenPath) {
   const key = JSON.stringify([
-    resolve5(transport.connectionFile),
-    resolve5(tokenPath)
+    resolve6(transport.connectionFile),
+    resolve6(tokenPath)
   ]);
   let shared = sources.get(key);
   if (!shared) {
@@ -7595,7 +7711,7 @@ import { ClaustrumCredentialError as ClaustrumCredentialError4 } from "@cortexki
 // ../../node_modules/@cortexkit/common-auth/dist/logger/engine.js
 import { appendFileSync as appendFileSync2, chmodSync, existsSync as existsSync3, renameSync as renameSync2, statSync as statSync4 } from "node:fs";
 import { open as open5 } from "node:fs/promises";
-import { dirname as dirname7, resolve as resolve6 } from "node:path";
+import { dirname as dirname7, resolve as resolve7 } from "node:path";
 var ORDER = {
   error: 0,
   warn: 1,
@@ -7653,7 +7769,7 @@ async function openWindowsFile(sink, file) {
   return sink.handle;
 }
 async function flushWindowsFile(sink, file, text) {
-  file = resolve6(file);
+  file = resolve7(file);
   try {
     if (sink.file !== file)
       await closeWindowsFile(sink);
@@ -7929,10 +8045,10 @@ async function drainShutdown(pending, onTimeout) {
   try {
     await Promise.race([
       drained,
-      new Promise((resolve7) => {
+      new Promise((resolve8) => {
         timer = setTimeout(() => {
           expired = true;
-          resolve7();
+          resolve8();
         }, 2000);
       })
     ]);
@@ -8548,7 +8664,7 @@ class ClaustrumScopedCustody {
 }
 
 // ../../node_modules/@cortexkit/common-auth/dist/claustrum/quota-writer.js
-import { resolve as resolve8 } from "node:path";
+import { resolve as resolve9 } from "node:path";
 
 // ../../node_modules/@cortexkit/common-auth/dist/quota/commit-interval.js
 var QUOTA_COMMIT_INTERVAL_MS = 30000;
@@ -8877,7 +8993,7 @@ function displayOrder(left, right) {
   return left.label < right.label ? -1 : left.label > right.label ? 1 : 0;
 }
 function quotaWindowParts(quota, options) {
-  const { windows, age } = scopedWindowParts(quota, options);
+  const { windows, age } = scopedWindowParts(quota, options, true);
   const parts = windows.map(({ part }) => part);
   return age === undefined ? { windows: parts } : { windows: parts, age };
 }
@@ -8888,25 +9004,36 @@ function withShortNames(windows) {
   }
   return windows;
 }
-function scopedWindowParts(quota, options) {
+function hasWindowReading(limit) {
+  return Number.isFinite(limit.remainingPercent) && Number.isFinite(limit.checkedAt);
+}
+function scopedWindowParts(quota, options, includeUnknown = false) {
   if (!quota)
     return { windows: [] };
   const { now } = options;
-  const readings = quota.limits.filter((limit) => limit.kind === "reading" && limit.remainingPercent !== undefined).sort(displayOrder);
+  const readings = quota.limits.filter((limit) => limit.kind === "reading" && (includeUnknown || hasWindowReading(limit))).sort(displayOrder);
   const windows = readings.map((limit) => {
-    const remainingPercent = clampPercent2(limit.remainingPercent ?? 0);
+    const part = hasWindowReading(limit) ? {
+      kind: "window",
+      reading: "known",
+      name: quotaWindowName(limit),
+      short: "",
+      figure: percentLeft(limit.remainingPercent),
+      remainingPercent: clampPercent2(limit.remainingPercent),
+      checkedAt: limit.checkedAt,
+      ...resetDetails(limit.resetsAt, limit.checkedAt, now)
+    } : {
+      kind: "window",
+      reading: "unknown",
+      name: quotaWindowName(limit),
+      short: "",
+      figure: "no reading",
+      resetSinceReading: false
+    };
     return {
       scope: limit.scope,
       ...limit.windowMinutes === undefined ? {} : { windowMinutes: limit.windowMinutes },
-      part: {
-        kind: "window",
-        name: quotaWindowName(limit),
-        short: "",
-        figure: percentLeft(limit.remainingPercent ?? 0),
-        remainingPercent,
-        checkedAt: limit.checkedAt,
-        ...resetDetails(limit.resetsAt, limit.checkedAt, now)
-      }
+      part
     };
   });
   const budget = quota.budget;
@@ -8918,6 +9045,7 @@ function scopedWindowParts(quota, options) {
       spent: budget.reached,
       part: {
         kind: "budget",
+        reading: "known",
         name: "credits",
         short: "",
         figure,
@@ -8928,8 +9056,9 @@ function scopedWindowParts(quota, options) {
     });
   }
   withShortNames(windows);
-  if (windows.length > 0) {
-    const age = now - Math.min(...windows.map(({ part }) => part.checkedAt));
+  const readingTimes = windows.flatMap(({ part }) => part.reading === "known" && part.checkedAt !== undefined ? [part.checkedAt] : []);
+  if (readingTimes.length > 0) {
+    const age = now - Math.min(...readingTimes);
     if (age > (options.staleAfterMs ?? QUOTA_STALE_AFTER_MS)) {
       return { windows, age: `checked ${shortSpan(age)} ago` };
     }
@@ -9029,13 +9158,13 @@ function narrowTextParts(quota, options) {
 function quotaTextParts(quota, options) {
   if (options.form === "narrow")
     return narrowTextParts(quota, options);
-  const parts = quotaWindowParts(quota, options);
+  const { windows, age } = scopedWindowParts(quota, options);
   const full = (options.form ?? "full") === "full";
-  const text = parts.windows.map((part) => {
+  const text = windows.map(({ part }) => {
     const reset = full && part.resetIn ? `, resets ${part.resetIn}` : "";
     return `${part.kind === "budget" ? "" : `${part.name} `}${part.figure}${reset}`;
   });
-  return parts.age === undefined ? text : [...text, parts.age];
+  return age === undefined ? text : [...text, age];
 }
 function formatQuota(quota, options) {
   const parts = quotaTextParts(quota, options);
@@ -9094,7 +9223,7 @@ function quotaFields(publication, witness = "") {
 // ../../node_modules/@cortexkit/common-auth/dist/claustrum/roster.js
 import { createHash as createHash5 } from "node:crypto";
 import { stat as stat6 } from "node:fs/promises";
-import { resolve as resolve7 } from "node:path";
+import { resolve as resolve8 } from "node:path";
 
 // ../../node_modules/@cortexkit/common-auth/dist/claustrum/interlock.js
 function matches(entry, credentialId, accountIdentity) {
@@ -9519,16 +9648,16 @@ function applyVaultQuota(current, input) {
 }
 var pendingDiscoveries = new Map;
 function forgetPendingVaultDiscovery(path2) {
-  pendingDiscoveries.delete(resolve7(path2));
+  pendingDiscoveries.delete(resolve8(path2));
 }
 function isVaultRosterLockRefusal(path2, error) {
-  const target = resolve7(path2);
+  const target = resolve8(path2);
   if (error instanceof ClaustrumConsumerError)
     return error.kind === "roster-busy";
   if (error instanceof LockContentionError || error instanceof LockOwnershipError)
-    return resolve7(error.details.target) === target;
+    return resolve8(error.details.target) === target;
   if (error instanceof PrivateFileError) {
-    const failed = resolve7(error.path);
+    const failed = resolve8(error.path);
     return [WRITE_LOCK.name, DISCOVERY_LEASE.name].some((name) => {
       const lock = lockPathFor(target, name);
       return failed === lock || failed.startsWith(`${lock}.`);
@@ -9589,7 +9718,7 @@ async function refreshVaultRoster(options) {
       throw new ClaustrumConsumerError("roster-busy", "Claustrum account discovery is already in progress");
     return persisted;
   }
-  const key = resolve7(options.path);
+  const key = resolve8(options.path);
   const listedOver = options.listedOver;
   let discovered;
   try {
@@ -9652,7 +9781,7 @@ var writers = new Map;
 var logger2 = createLogger("claustrum");
 var COALESCE_MS = 100;
 function writerFor(path2, clock = quotaCommitTimer) {
-  const key = resolve8(path2);
+  const key = resolve9(path2);
   let writer = writers.get(key);
   if (!writer) {
     writer = {
@@ -9716,7 +9845,7 @@ function orderedFields(pending) {
   return [...pending.values()].flatMap((account) => [...account.values()]).sort((a, b) => a.order - b.order);
 }
 function pendingVaultQuota(path2, roster) {
-  const writer = writers.get(resolve8(path2));
+  const writer = writers.get(resolve9(path2));
   if (writer) {
     for (const field of orderedFields(writer.pending)) {
       if (field.priorReading)
@@ -9727,7 +9856,7 @@ function pendingVaultQuota(path2, roster) {
   return roster;
 }
 function hasPendingVaultQuota(path2) {
-  return !!writers.get(resolve8(path2))?.pending.size;
+  return !!writers.get(resolve9(path2))?.pending.size;
 }
 function schedule(writer, delay3) {
   if (writer.running || writer.timer || !writer.pending.size || writer.abort.signal.aborted)
@@ -9792,7 +9921,7 @@ function flush2(writer) {
   return writer.running;
 }
 async function drainVaultQuota(path2, timeoutMs = 1000) {
-  const key = resolve8(path2);
+  const key = resolve9(path2);
   const writer = writers.get(key);
   if (!writer)
     return;
@@ -9902,7 +10031,7 @@ class ClaustrumConsumer {
       this.#shutdown.signal,
       ...signal ? [signal] : []
     ]);
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       const cleanup = () => {
         combined.signal.removeEventListener("abort", abort);
         combined.dispose();
@@ -9917,7 +10046,7 @@ class ClaustrumConsumer {
         if (combined.signal.aborted)
           reject(combined.signal.reason);
         else
-          resolve9(value);
+          resolve10(value);
       }, (error) => {
         cleanup();
         reject(error);
@@ -10520,7 +10649,7 @@ class ClaustrumConsumer {
 import { createHash as createHash6 } from "node:crypto";
 import { channel as channel2 } from "node:diagnostics_channel";
 import { readdir as readdir2, stat as stat7 } from "node:fs/promises";
-import { dirname as dirname8, join as join10, resolve as resolve9 } from "node:path";
+import { dirname as dirname8, join as join11, resolve as resolve10 } from "node:path";
 var sharedRosters = new Map;
 var FILE_ID = /^[a-z0-9][a-z0-9._-]{0,63}$/;
 var WINDOWS_DEVICE = /^(con|prn|aux|nul|com[0-9]|lpt[0-9])(\.|$)/;
@@ -10584,12 +10713,12 @@ function unreachableConnect2() {
   return new ClaustrumUnreachableError;
 }
 function untilAborted(pending, signal) {
-  return new Promise((resolve10, reject) => {
+  return new Promise((resolve11, reject) => {
     const abort = () => reject(signal.reason);
     signal.addEventListener("abort", abort, { once: true });
     pending.then((value) => {
       signal.removeEventListener("abort", abort);
-      resolve10(value);
+      resolve11(value);
     }, (error) => {
       signal.removeEventListener("abort", abort);
       reject(error);
@@ -10635,13 +10764,13 @@ class ClaustrumDiscoveryHub {
     this.#options = options;
     this.#logger = options.logger ?? createLogger("claustrum");
     this.#warnShutdown = shutdownWarning(this.#logger, this.#shutdown.signal);
-    this.#generationDirectory = join10(options.stateDir, "rosters", hostGeneration);
+    this.#generationDirectory = join11(options.stateDir, "rosters", hostGeneration);
     this.#key = rosterFingerprint(options, providers);
-    const directory = join10(this.#generationDirectory, this.#key);
+    const directory = join11(this.#generationDirectory, this.#key);
     for (const provider of providers)
       this.#members.set(provider, {
         provider,
-        path: join10(directory, `${provider}.json`),
+        path: join11(directory, `${provider}.json`),
         closed: false
       });
   }
@@ -10716,7 +10845,7 @@ class ClaustrumDiscoveryHub {
     };
     const { consumer, hooks } = createHubMember(port, consumerOptions);
     entry.hooks = hooks;
-    const path2 = resolve9(entry.path);
+    const path2 = resolve10(entry.path);
     const subscribers = sharedRosters.get(path2) ?? new Set;
     const install = (roster) => {
       if (entry.closed || this.#active !== true || !this.#current || !this.#live(this.#current) || !hooks.roster() || this.#collides(hooks, roster))
@@ -10747,7 +10876,7 @@ class ClaustrumDiscoveryHub {
       return;
     entry.seen = JSON.stringify(decodedVaultRoster(roster));
     entry.hooks?.install(roster);
-    for (const install of sharedRosters.get(resolve9(entry.path)) ?? []) {
+    for (const install of sharedRosters.get(resolve10(entry.path)) ?? []) {
       if (!this.#live(generation))
         return;
       if (install !== entry.receiveRoster)
@@ -11151,17 +11280,17 @@ class ClaustrumDiscoveryHub {
     for (const directory of [
       dirname8(this.#generationDirectory),
       this.#generationDirectory,
-      join10(this.#generationDirectory, this.#key)
+      join11(this.#generationDirectory, this.#key)
     ])
       await ensureClaustrumPrivateDirectory(directory, {}, "roster directory");
   }
   async#seed(entry) {
     const name = `${entry.provider}.json`;
-    const candidates = [join10(this.#generationDirectory, name)];
+    const candidates = [join11(this.#generationDirectory, name)];
     try {
       for (const key of await readdir2(this.#generationDirectory))
         if (key !== this.#key && FINGERPRINT.test(key))
-          candidates.push(join10(this.#generationDirectory, key, name));
+          candidates.push(join11(this.#generationDirectory, key, name));
     } catch {}
     let newest;
     for (const path2 of candidates) {
@@ -11401,8 +11530,8 @@ import {
   dirname as dirname11,
   extname as extname2,
   isAbsolute as isAbsolute3,
-  join as join12,
-  resolve as resolve10
+  join as join13,
+  resolve as resolve11
 } from "node:path";
 import {
   ClaustrumCredentialError as ClaustrumCredentialError5,
@@ -11799,13 +11928,13 @@ function getClaustrumEnrollmentPaths2(tokenPath) {
   const extension = extname2(tokenPath) || ".json";
   const stem = basename4(tokenPath, extname2(tokenPath));
   return {
-    statePath: join12(dirname11(tokenPath), `${stem}-state${extension}`),
+    statePath: join13(dirname11(tokenPath), `${stem}-state${extension}`),
     tokenPath
   };
 }
 function getHostClaustrumEnrollmentPaths(host, env = process.env, cwd = process.cwd()) {
   const configured = env[`${host.toUpperCase()}_ANTHROPIC_AUTH_CLAUSTRUM_ENROLLMENT_FILE`]?.trim();
-  const tokenPath = configured ? isAbsolute3(configured) ? configured : resolve10(cwd, configured) : join12(anthropicAuthStateRoot({
+  const tokenPath = configured ? isAbsolute3(configured) ? configured : resolve11(cwd, configured) : join13(anthropicAuthStateRoot({
     xdgStateHome: env.XDG_STATE_HOME,
     home: homedir4(),
     acceptRelative: true
@@ -11954,7 +12083,7 @@ async function writeStateAtomic2(path2, state, beforeRename) {
   if (Buffer.byteLength(bytes) > ENROLLMENT_FILE_MAX_BYTES2) {
     throw new Error("Claustrum enrollment state is too large");
   }
-  const temporary = join12(parent, `.${basename4(path2)}.${process.pid}.${randomUUID8()}.tmp`);
+  const temporary = join13(parent, `.${basename4(path2)}.${process.pid}.${randomUUID8()}.tmp`);
   let descriptor;
   try {
     const nativeCreated = await createWindowsOwnerOnly(temporary, bytes);
@@ -11973,7 +12102,7 @@ async function writeStateAtomic2(path2, state, beforeRename) {
   }
 }
 async function writeTokenAtomic(path2, value, writeTokenFile, beforeRename) {
-  const staged = join12(dirname11(path2), `.${basename4(path2)}.${process.pid}.${randomUUID8()}.tmp`);
+  const staged = join13(dirname11(path2), `.${basename4(path2)}.${process.pid}.${randomUUID8()}.tmp`);
   try {
     await writeTokenFile(staged, value);
     await beforeRename();
@@ -12357,8 +12486,8 @@ function createNativeCustody(options) {
     let stopped = false;
     let inner;
     let finish = () => {};
-    const ended = new Promise((resolve11) => {
-      finish = resolve11;
+    const ended = new Promise((resolve12) => {
+      finish = resolve12;
     });
     const failed = (error) => stopped || closed2 || error instanceof NativeCustodyError ? { kind: "stopped" } : classifyVaultFailure(error) === "unreachable" ? { kind: "transport_lost", error: new ClaustrumUnreachableError } : { kind: "ended" };
     Promise.resolve().then(connection).then((owned) => {
@@ -14018,8 +14147,8 @@ function createProviderErrorResponseScope(secrets, mode) {
     wrappedBodies: 0
   };
   let resolveSettled = () => {};
-  const settled = new Promise((resolve11) => {
-    resolveSettled = resolve11;
+  const settled = new Promise((resolve12) => {
+    resolveSettled = resolve12;
   });
   let retired = false;
   let used = false;
@@ -14877,14 +15006,14 @@ import {
   writeFile as writeFile4
 } from "node:fs/promises";
 import { tmpdir as tmpdir6 } from "node:os";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 
 // src/holder-registry.ts
 import { execFile } from "node:child_process";
 import { randomUUID as randomUUID14 } from "node:crypto";
 import { readFileSync as readFileSync2 } from "node:fs";
 import { lstat as lstat12, mkdir as mkdir10, readFile as readFile11 } from "node:fs/promises";
-import { basename as basename9, dirname as dirname17, join as join19 } from "node:path";
+import { basename as basename9, dirname as dirname17, join as join20 } from "node:path";
 
 // src/native-lock-observer.ts
 import { AsyncLocalStorage } from "node:async_hooks";
@@ -14927,17 +15056,17 @@ function observeNativeLocks(acquire, observer) {
 
 // src/native-vault-paths.ts
 import { createHash as createHash18 } from "node:crypto";
-import { basename as basename8, dirname as dirname15, join as join16 } from "node:path";
+import { basename as basename8, dirname as dirname15, join as join17 } from "node:path";
 
 // src/pool-paths.ts
 import { createHash as createHash17 } from "node:crypto";
 import { realpath as realpath3 } from "node:fs/promises";
-import { basename as basename7, dirname as dirname14, join as join15, resolve as resolve11 } from "node:path";
+import { basename as basename7, dirname as dirname14, join as join16, resolve as resolve12 } from "node:path";
 
 // src/sticky-routing.ts
 import { createHash as createHash16, randomUUID as randomUUID12 } from "node:crypto";
 import { mkdir as mkdir9, readFile as readFile8, rename as rename11, rm as rm6, stat as stat9, writeFile as writeFile3 } from "node:fs/promises";
-import { basename as basename6, dirname as dirname13, join as join14 } from "node:path";
+import { basename as basename6, dirname as dirname13, join as join15 } from "node:path";
 
 // src/native-vault-seed.ts
 import { lstat as lstat7, readFile as readFile7 } from "node:fs/promises";
@@ -15108,7 +15237,7 @@ async function acquirePoolLock(spec, defaults, env) {
       });
     }
     const jitter = Math.floor(Math.random() * (options.retryMs + 1));
-    await new Promise((resolve11) => setTimeout(resolve11, Math.min(options.retryMs + jitter, remaining)));
+    await new Promise((resolve12) => setTimeout(resolve12, Math.min(options.retryMs + jitter, remaining)));
   }
 }
 function definedOnly(spec) {
@@ -17750,11 +17879,11 @@ class PoolQuotaWriter {
       const left = deadline - performance.now();
       if (left <= 0)
         throw refusal("pull", id, "lock-contention", `pool quota queue for ${id} is full (${POOL_QUOTA_QUEUE_LIMIT} readings) and the store locks stayed held`, true);
-      await new Promise((resolve11) => {
+      await new Promise((resolve12) => {
         const done = () => {
           clearTimeout(timer);
           this.wake.delete(done);
-          resolve11();
+          resolve12();
         };
         const timer = setTimeout(done, left);
         this.wake.add(done);
@@ -18866,7 +18995,7 @@ var nativeQuotaCodec = {
 import { randomUUID as randomUUID11 } from "node:crypto";
 import { constants as constants2 } from "node:fs";
 import { lstat as lstat6, mkdir as mkdir8, open as open8, rename as rename10, rm as rm5 } from "node:fs/promises";
-import { basename as basename5, dirname as dirname12, isAbsolute as isAbsolute4, join as join13 } from "node:path";
+import { basename as basename5, dirname as dirname12, isAbsolute as isAbsolute4, join as join14 } from "node:path";
 import { types as utilTypes5 } from "node:util";
 
 // src/pool-binding.ts
@@ -19070,7 +19199,7 @@ async function renameWithWindowsSharingRetry(from, to, options = {}, beforeRetry
     return "published";
   }
   const now = options.now ?? (() => performance.now());
-  const sleep = options.sleep ?? ((ms) => new Promise((resolve11) => setTimeout(resolve11, ms)));
+  const sleep = options.sleep ?? ((ms) => new Promise((resolve12) => setTimeout(resolve12, ms)));
   const start = now();
   let original;
   try {
@@ -19437,7 +19566,7 @@ async function writeNativeRuntimeOutcome(path2, storageId, change, hooks, firstI
       assertTransitions(current, next, firstIdentity);
       const bytes = `${JSON.stringify(next, null, 2)}
 `;
-      const stage = join13(dirname12(path2), `${basename5(path2)}.native-runtime.${randomUUID11()}.partial`);
+      const stage = join14(dirname12(path2), `${basename5(path2)}.native-runtime.${randomUUID11()}.partial`);
       let ownsStage = false;
       try {
         const nativeCreated = await createWindowsOwnerOnly(stage, bytes);
@@ -20914,7 +21043,7 @@ function stickyRetainRetryHeaders(upstream, now = Date.now()) {
 function getStickyRoutingStatePath(accountStoragePath) {
   const name = basename6(accountStoragePath);
   const stem = name.endsWith(".json") ? name.slice(0, -5) : name;
-  return join14(dirname13(accountStoragePath), `${stem}-routing-state.json`);
+  return join15(dirname13(accountStoragePath), `${stem}-routing-state.json`);
 }
 function stickyRetryAfterWithJitter(sessionId, retryAfterSeconds) {
   const hash2 = createHash16("sha256").update(sessionId).digest().readUInt32BE(0);
@@ -21015,7 +21144,7 @@ class StickySessionRouter {
       if (!wait || performance.now() >= deadline) {
         throw new Error("Timed out acquiring sticky routing state lock");
       }
-      await new Promise((resolve11) => setTimeout(resolve11, STICKY_ROUTING_LOCK_POLL_MS));
+      await new Promise((resolve12) => setTimeout(resolve12, STICKY_ROUTING_LOCK_POLL_MS));
     }
   }
   recoverLocalPins() {
@@ -21386,7 +21515,7 @@ function resolveLocalRoutingDestination(host, paths, env) {
   return (host === "opencode" ? env.OPENCODE_ANTHROPIC_AUTH_ROUTING_STATE_FILE : env.PI_ANTHROPIC_AUTH_ROUTING_STATE_FILE) || getStickyRoutingStatePath(paths.config);
 }
 async function canonicalPath(path2) {
-  const absolute = resolve11(path2);
+  const absolute = resolve12(path2);
   try {
     return await realpath3(absolute);
   } catch (error) {
@@ -21397,10 +21526,10 @@ async function canonicalPath(path2) {
   const parent = dirname14(absolute);
   if (parent === absolute)
     return absolute;
-  return join15(await canonicalPath(parent), basename7(absolute));
+  return join16(await canonicalPath(parent), basename7(absolute));
 }
 function sibling(path2, legacyName, name, suffix) {
-  return basename7(path2) === legacyName ? join15(dirname14(path2), name) : `${path2}.${suffix}.json`;
+  return basename7(path2) === legacyName ? join16(dirname14(path2), name) : `${path2}.${suffix}.json`;
 }
 async function resolveNativePoolPaths(legacyConfig = getAccountStoragePath(), legacyState = getAccountStatePath(legacyConfig), layout) {
   const [sourceConfig, sourceState] = await Promise.all([
@@ -21450,7 +21579,7 @@ async function resolveNativePoolPaths(legacyConfig = getAccountStoragePath(), le
 
 // src/native-vault-paths.ts
 function sibling2(path2, expected, name, suffix) {
-  return basename8(path2) === expected ? join16(dirname15(path2), name) : path2.replace(/(?:\.json)?$/, `.${suffix}.json`);
+  return basename8(path2) === expected ? join17(dirname15(path2), name) : path2.replace(/(?:\.json)?$/, `.${suffix}.json`);
 }
 function nativeVaultPaths(local, layout = stateLayoutOfPaths(local)) {
   const config = sibling2(local.legacyConfig, "anthropic-auth.json", "anthropic-auth-vault-settings.json", "vault-settings");
@@ -21494,7 +21623,7 @@ import { lstat as lstat11 } from "node:fs/promises";
 
 // src/state-home-serving-guard.ts
 import { lstat as lstat10 } from "node:fs/promises";
-import { dirname as dirname16, join as join18 } from "node:path";
+import { dirname as dirname16, join as join19 } from "node:path";
 
 // src/state-layout-errors.ts
 var RESTORE_LEGACY_COMMAND = "npx @cortexkit/opencode-anthropic-auth setup --restore-legacy";
@@ -21687,7 +21816,7 @@ class StateLayoutLockStack {
           name: spec.name,
           timeoutMs
         });
-      await new Promise((resolve12) => setTimeout(resolve12, Math.min(remaining, POOL_LOCK_DEFAULTS.retryMs + Math.floor(Math.random() * 25))));
+      await new Promise((resolve13) => setTimeout(resolve13, Math.min(remaining, POOL_LOCK_DEFAULTS.retryMs + Math.floor(Math.random() * 25))));
     }
   }
   async assertAll() {
@@ -21722,7 +21851,7 @@ class StateLayoutLockStack {
 // src/state-layout-record.ts
 import { randomUUID as randomUUID13 } from "node:crypto";
 import { lstat as lstat9, readFile as readFile10, unlink as unlink6 } from "node:fs/promises";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 var RELOCATION_ROLES = [
   "localPoolState",
   "journal",
@@ -21901,7 +22030,7 @@ function parseRestore(value, phase) {
   };
 }
 function layoutRecordPath(sub) {
-  return join17(sub, STATE_HOME_FILE_NAMES.layoutMarker);
+  return join18(sub, STATE_HOME_FILE_NAMES.layoutMarker);
 }
 function movingJournalPath(journal, attempt) {
   return `${journal}.moving-${attempt}`;
@@ -21959,11 +22088,11 @@ function stateHomeServingFiles(paths) {
   const oldDir = dirname16(paths.legacyState);
   return {
     sub: dirname16(paths.runtime),
-    oldPoolState: join18(oldDir, STATE_HOME_FILE_NAMES.localPoolState),
+    oldPoolState: join19(oldDir, STATE_HOME_FILE_NAMES.localPoolState),
     newPoolState: paths.state,
-    oldJournal: join18(oldDir, STATE_HOME_FILE_NAMES.journal),
+    oldJournal: join19(oldDir, STATE_HOME_FILE_NAMES.journal),
     newJournal: paths.journal,
-    oldMetadata: METADATA_ROLES.map((role) => join18(oldDir, STATE_HOME_FILE_NAMES[role]))
+    oldMetadata: METADATA_ROLES.map((role) => join19(oldDir, STATE_HOME_FILE_NAMES[role]))
   };
 }
 var METADATA_ROLES = [
@@ -22088,14 +22217,14 @@ function guardIoFailure(sub, error) {
   return error instanceof StateLayoutRefusalError ? error : stateLayoutIoFailure(`check the state of ${sub}`, [sub], error);
 }
 function markerRefusal(sub, cause) {
-  const path2 = join18(sub, STATE_HOME_FILE_NAMES.layoutMarker);
+  const path2 = join19(sub, STATE_HOME_FILE_NAMES.layoutMarker);
   return new StateLayoutRefusalError("marker-unreadable", `anthropic-auth can't read ${path2}, which records where its state is, so it stopped using that state. Restore the file from a backup or ask for help; do not delete the state folder.`, [path2], cause);
 }
 var reported = new Set;
 var observations = new Map;
 var probe;
 function createStateHomeServingGuard(files) {
-  const marker = join18(files.sub, STATE_HOME_FILE_NAMES.layoutMarker);
+  const marker = join19(files.sub, STATE_HOME_FILE_NAMES.layoutMarker);
   const dataset = JSON.stringify(files);
   function report(refusal2) {
     if (refusal2 && !reported.has(refusal2.message)) {
@@ -22355,10 +22484,10 @@ async function linuxIncarnation(pid) {
   }
 }
 function macosIncarnation(pid) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     execFile("ps", ["-o", "lstart=", "-p", String(pid)], { env: { ...process.env, TZ: "UTC0" }, timeout: 5000 }, (error, stdout) => {
       const text5 = String(stdout ?? "").trim();
-      resolve12(error || !text5 ? null : text5);
+      resolve13(error || !text5 ? null : text5);
     });
   });
 }
@@ -22442,7 +22571,7 @@ async function anyExists(paths) {
   return false;
 }
 async function isManagedDirectory(dir) {
-  return await exists2(join19(dir, STATE_HOME_FILE_NAMES.configDirMarker)) || await exists2(join19(dir, STATE_HOME_FILE_NAMES.layoutMarker));
+  return await exists2(join20(dir, STATE_HOME_FILE_NAMES.configDirMarker)) || await exists2(join20(dir, STATE_HOME_FILE_NAMES.layoutMarker));
 }
 async function assertUnmanagedInjectedPaths(paths) {
   if (stateLayoutOfPaths(paths).kind === "state-home")
@@ -22561,7 +22690,7 @@ async function buildEntry(options) {
 async function registerNativePoolHolder(options) {
   const entry2 = await buildEntry(options);
   const dirs = [...new Set(entry2.files.map((file) => dirname17(file)))].sort();
-  const holderFiles = dirs.map((dir) => join19(dir, HOLDER_FILE_NAME));
+  const holderFiles = dirs.map((dir) => join20(dir, HOLDER_FILE_NAME));
   const done = {
     status: "registered",
     settled: Promise.resolve(),
@@ -22599,7 +22728,7 @@ function warnRegistrationFailure(dir, error) {
 }
 function registrationAttempt(options, entry2, mandatory) {
   const dirs = [...new Set(entry2.files.map((file) => dirname17(file)))].sort();
-  const holderFiles = dirs.map((dir) => join19(dir, HOLDER_FILE_NAME));
+  const holderFiles = dirs.map((dir) => join20(dir, HOLDER_FILE_NAME));
   return async () => {
     let complete = true;
     for (const holderFile of holderFiles) {
@@ -22628,8 +22757,8 @@ function retryInBackground(attempt, options) {
   let timer;
   let closed2 = false;
   let settle = () => {};
-  const settled = new Promise((resolve12) => {
-    settle = resolve12;
+  const settled = new Promise((resolve13) => {
+    settle = resolve13;
   });
   const schedule2 = () => {
     if (closed2)
@@ -22698,7 +22827,7 @@ function isExpiredRecord(record8, now, leaseMs) {
   return record8.updatedAt <= now && now - record8.updatedAt > leaseMs;
 }
 function getDefaultCacheKeepRegistryDirectory(scope) {
-  return join20(tmpdir6(), "opencode-anthropic-auth", "cachekeep-sessions", scope);
+  return join21(tmpdir6(), "opencode-anthropic-auth", "cachekeep-sessions", scope);
 }
 
 class CacheKeepSessionRegistry {
@@ -22709,7 +22838,7 @@ class CacheKeepSessionRegistry {
   constructor(options) {
     this.options = options;
     const instanceId = options.instanceId ?? `${process.pid}-${randomUUID15()}`;
-    this.filePath = join20(options.directory, `${instanceId}.json`);
+    this.filePath = join21(options.directory, `${instanceId}.json`);
   }
   publish(sessions) {
     const snapshot = sessions.map((session) => ({ ...session }));
@@ -22750,7 +22879,7 @@ class CacheKeepSessionRegistry {
     }
     const records = await Promise.all(names.map(async (name) => {
       try {
-        const raw = await readFile12(join20(this.options.directory, name), "utf8");
+        const raw = await readFile12(join21(this.options.directory, name), "utf8");
         return normalizeRecord(JSON.parse(raw));
       } catch {
         return;
@@ -22792,7 +22921,7 @@ class CacheKeepSessionRegistry {
       return;
     }
     await Promise.all(names.map(async (name) => {
-      const recordPath = join20(this.options.directory, name);
+      const recordPath = join21(this.options.directory, name);
       if (recordPath === this.filePath)
         return;
       let initialRecord;
@@ -24272,13 +24401,13 @@ function logCommittedNativeAccountAdded(account) {
 }
 
 // src/native-vault-invalidation.ts
-import { resolve as resolve12 } from "node:path";
+import { resolve as resolve13 } from "node:path";
 var holders = new Set;
 function watchNativeVaultAuthority(holder) {
   const held = {
     ...holder,
-    roster: resolve12(holder.roster),
-    tokenPath: resolve12(holder.tokenPath)
+    roster: resolve13(holder.roster),
+    tokenPath: resolve13(holder.tokenPath)
   };
   holders.add(held);
   return () => {
@@ -24287,12 +24416,12 @@ function watchNativeVaultAuthority(holder) {
 }
 function retainNativeVaultRoster(path2, roster) {
   for (const holder of holders)
-    if (holder.roster === resolve12(path2))
+    if (holder.roster === resolve13(path2))
       holder.retain(roster);
 }
 function closeNativeVaultAuthority(tokenPath) {
   for (const holder of holders)
-    if (holder.tokenPath === resolve12(tokenPath))
+    if (holder.tokenPath === resolve13(tokenPath))
       holder.close();
 }
 
@@ -24601,12 +24730,12 @@ async function joinNativePoolWrite(paths, signals, check, onLockEvent) {
 function pause(ms, signals) {
   if (signals.some((signal) => signal.aborted))
     return Promise.resolve();
-  return new Promise((resolve13) => {
+  return new Promise((resolve14) => {
     const wake = () => {
       clearTimeout(timer);
       for (const signal of signals)
         signal.removeEventListener("abort", wake);
-      resolve13();
+      resolve14();
     };
     const timer = setTimeout(wake, ms);
     for (const signal of signals)
@@ -24862,7 +24991,7 @@ function createNativeRefreshCoordinator(options) {
           name: spec.name,
           timeoutMs: POOL_LOCK_DEFAULTS.timeoutMs
         });
-      await new Promise((resolve13) => setTimeout(resolve13, Math.min(POOL_LOCK_DEFAULTS.retryMs, remaining)));
+      await new Promise((resolve14) => setTimeout(resolve14, Math.min(POOL_LOCK_DEFAULTS.retryMs, remaining)));
     }
   }
   async function run(job, request) {
@@ -26257,7 +26386,7 @@ function createPublisher() {
       const batch = { patch, result: Promise.resolve(false) };
       pending.set(key, batch);
       batch.result = run(async () => {
-        await new Promise((resolve13) => setTimeout(resolve13, 0));
+        await new Promise((resolve14) => setTimeout(resolve14, 0));
         pending.delete(key);
         return write(batch.patch);
       });
@@ -26379,7 +26508,7 @@ function createNativeUsagePublisher(channel3) {
   return {
     observe: observe2,
     publish(write) {
-      observe2(new Promise((resolve13) => setTimeout(resolve13, 0)).then(write));
+      observe2(new Promise((resolve14) => setTimeout(resolve14, 0)).then(write));
     },
     async drain() {
       while (pending.size)
@@ -26466,7 +26595,7 @@ class NativeQuotaObservations extends Map {
 }
 
 // src/native-runtime-registry.ts
-import { resolve as resolve13 } from "node:path";
+import { resolve as resolve14 } from "node:path";
 var identities = new WeakMap;
 var nextIdentity = 0;
 function nativeRuntimeOptionIdentity(value) {
@@ -26495,14 +26624,14 @@ function nativeRuntimeStorageKey(options) {
       "runtime",
       "journal",
       "roster"
-    ].map((field) => resolve13(paths[field])),
-    resolve13(enrollment.tokenPath),
-    resolve13(enrollment.statePath),
-    resolve13(connection)
+    ].map((field) => resolve14(paths[field])),
+    resolve14(enrollment.tokenPath),
+    resolve14(enrollment.statePath),
+    resolve14(connection)
   ]);
 }
 function nativeRuntimeConnectionFile(host, env) {
-  return resolve13(resolveClaustrumConnectionPath(host === "pi" ? env.PI_ANTHROPIC_AUTH_CLAUSTRUM_CONNECTION_FILE : undefined, host === "pi" ? {
+  return resolve14(resolveClaustrumConnectionPath(host === "pi" ? env.PI_ANTHROPIC_AUTH_CLAUSTRUM_CONNECTION_FILE : undefined, host === "pi" ? {
     ...env,
     OPENCODE_ANTHROPIC_AUTH_CLAUSTRUM_CONNECTION_FILE: undefined
   } : env));
@@ -26977,8 +27106,8 @@ function validateNativeVaultRosterSeed(existing, input) {
 // src/quota-manager.ts
 var nativeSetTimeout = globalThis.setTimeout;
 function pauseOnRealTimer(ms) {
-  return new Promise((resolve14) => {
-    const id2 = nativeSetTimeout(resolve14, ms);
+  return new Promise((resolve15) => {
+    const id2 = nativeSetTimeout(resolve15, ms);
     if (typeof id2 === "object" && "unref" in id2)
       id2.unref();
   });
@@ -28582,7 +28711,7 @@ function recencyOnly(patch) {
   return keys4.length === 1 && keys4[0] === "lastUsed" && typeof patch.lastUsed === "number";
 }
 function waitFor(pending, signal) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve15, reject) => {
     const abort = () => {
       cleanup2();
       reject(signal.reason);
@@ -28591,7 +28720,7 @@ function waitFor(pending, signal) {
     signal.addEventListener("abort", abort, { once: true });
     pending.then((value) => {
       cleanup2();
-      signal.aborted ? reject(signal.reason) : resolve14(value);
+      signal.aborted ? reject(signal.reason) : resolve15(value);
     }, (error) => {
       cleanup2();
       reject(error);
@@ -29202,7 +29331,7 @@ class PersistentRelaySession {
       return;
     if (this.connecting)
       return await this.connecting;
-    this.connecting = new Promise((resolve14, reject) => {
+    this.connecting = new Promise((resolve15, reject) => {
       const url = toWebSocketUrl(this.config.url, this.config.token);
       const parsed = new URL(url);
       parsed.searchParams.set("affinity", this.affinity);
@@ -29224,7 +29353,7 @@ class PersistentRelaySession {
           if (message.type === "ready") {
             this.timers.clearTimeout(timeout);
             this.serverState = message.state;
-            resolve14();
+            resolve15();
             return;
           }
           this.handleMessage(message);
@@ -29276,15 +29405,15 @@ class PersistentRelaySession {
     const sentAt = perfNowMs();
     let resolveDone;
     let rejectDone;
-    const done = new Promise((resolve14, reject) => {
-      resolveDone = resolve14;
+    const done = new Promise((resolve15, reject) => {
+      resolveDone = resolve15;
       rejectDone = reject;
     });
-    const response = new Promise((resolve14, reject) => {
+    const response = new Promise((resolve15, reject) => {
       const pending = {
         payload,
         bodyText,
-        resolve: resolve14,
+        resolve: resolve15,
         reject,
         streamDone: false,
         accepted: false,
@@ -30697,7 +30826,7 @@ function createNativeAccountRuntime(options) {
       const { mode, paths: paths2, store: store2 } = await selectedStorage();
       for (let attempt = 0;attempt < 4; attempt++) {
         if (attempt)
-          await new Promise((resolve14) => setTimeout(resolve14, 10));
+          await new Promise((resolve15) => setTimeout(resolve15, 10));
         const settings = await store2.readSettings();
         if (settings.status !== "ready")
           throw new NativeRuntimeError("publication-refused");
@@ -31429,7 +31558,7 @@ function relayGeneration(input) {
 // src/native-host-auth-write.ts
 import { randomUUID as randomUUID18 } from "node:crypto";
 import { lstat as lstat14, open as open11, rename as rename13, unlink as unlink7 } from "node:fs/promises";
-import { dirname as dirname18, isAbsolute as isAbsolute6, join as join21 } from "node:path";
+import { dirname as dirname18, isAbsolute as isAbsolute6, join as join22 } from "node:path";
 class NativeHostAuthWriteError extends Error {
   code;
   effect;
@@ -31490,7 +31619,7 @@ async function writeNativeHostAuth(input, hooks = {}) {
     const removingFile = host === "pi" && Object.keys(next).length === 0;
     const outcome = Object.freeze(host === "pi" ? { status: "removed", file: removingFile ? "unlinked" : "replaced" } : { status: snapshot.data === undefined ? "created" : "replaced" });
     if (!removingFile) {
-      stage = join21(dirname18(authPath), `.native-host-auth-write.${randomUUID18()}.tmp`);
+      stage = join22(dirname18(authPath), `.native-host-auth-write.${randomUUID18()}.tmp`);
       const bytes = `${JSON.stringify(next, null, 2)}
 `;
       const nativeCreated = await createWindowsOwnerOnly(stage, bytes);
@@ -33030,8 +33159,8 @@ async function runNativeCustodyActivation(options, hooks = {}) {
 }
 async function commitMode(paths, routingPath, plan, context) {
   let openGate = () => {};
-  const gate = new Promise((resolve14) => {
-    openGate = resolve14;
+  const gate = new Promise((resolve15) => {
+    openGate = resolve15;
   });
   let leases;
   let scope;
@@ -34733,11 +34862,11 @@ async function refreshForRequest(runtime2, ready) {
         break;
       if (combined.aborted)
         break;
-      await new Promise((resolve14) => {
+      await new Promise((resolve15) => {
         const finish = () => {
           clearTimeout(pause2);
           combined.removeEventListener("abort", finish);
-          resolve14();
+          resolve15();
         };
         const pause2 = setTimeout(finish, 25);
         combined.addEventListener("abort", finish, { once: true });
@@ -34753,16 +34882,16 @@ async function refreshForRequest(runtime2, ready) {
 function waitForRequest(pending, signal) {
   if (!signal)
     return pending;
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve15, reject) => {
     const abort = () => reject(signal.reason);
     signal.addEventListener("abort", abort, { once: true });
-    pending.then(resolve14, reject).finally(() => signal.removeEventListener("abort", abort));
+    pending.then(resolve15, reject).finally(() => signal.removeEventListener("abort", abort));
     if (signal.aborted)
       abort();
   });
 }
 // src/native-vault-connection.ts
-import { dirname as dirname21, join as join22, resolve as resolve15 } from "node:path";
+import { dirname as dirname21, join as join23, resolve as resolve16 } from "node:path";
 // ../../node_modules/@cortexkit/common-auth/dist/opencode2/integration.js
 var PLACEHOLDER_PREFIX = "common-auth-placeholder";
 var PLACEHOLDER_LIFETIME_MS = 365 * 24 * 60 * 60 * 1000;
@@ -34776,7 +34905,7 @@ var MAX_RETRY_HOLD_MS = 20 * 60 * 1000;
 import { createHash as createHash24 } from "node:crypto";
 import { constants as constants4 } from "node:fs";
 import { lstat as lstat16, mkdir as mkdir14, open as open12, unlink as unlink9 } from "node:fs/promises";
-import { dirname as dirname20, resolve as resolve14 } from "node:path";
+import { dirname as dirname20, resolve as resolve15 } from "node:path";
 import { setTimeout as sleep } from "node:timers/promises";
 
 // ../../node_modules/@cortexkit/common-auth/dist/pi-slot/lock.js
@@ -35179,8 +35308,8 @@ function createPiSlot(options, onStep, hooks) {
   if (!provider || !options.authPath || !options.stashPath || !placeholderKey || placeholderKey.startsWith("!") || placeholderKey.includes("$") || !Number.isFinite(timeout) || timeout < 0) {
     throw new PiSlotError("invalid-options");
   }
-  const authPath = resolve14(options.authPath);
-  const stashPath = resolve14(options.stashPath);
+  const authPath = resolve15(options.authPath);
+  const stashPath = resolve15(options.stashPath);
   if (authPath === stashPath || stashPath === `${authPath}.lock`) {
     throw new PiSlotError("invalid-options");
   }
@@ -35318,8 +35447,8 @@ function createPiSlot(options, onStep, hooks) {
 // src/native-vault-connection.ts
 function nativePiAuthSlotPaths(options) {
   return {
-    authPath: resolve15(options.authPath),
-    stashPath: join22(dirname21(getHostClaustrumEnrollmentPaths("pi", options.env).tokenPath), "pi-auth-slot", "anthropic.json"),
+    authPath: resolve16(options.authPath),
+    stashPath: join23(dirname21(getHostClaustrumEnrollmentPaths("pi", options.env).tokenPath), "pi-auth-slot", "anthropic.json"),
     provider: "anthropic",
     placeholderKey: placeholderSecret("anthropic")
   };
@@ -35446,7 +35575,7 @@ import { createHash as createHash25 } from "node:crypto";
 import { realpathSync as realpathSync3 } from "node:fs";
 import { mkdir as mkdir15, readdir as readdir4, rm as rm8, stat as stat11, writeFile as writeFile5 } from "node:fs/promises";
 import { tmpdir as tmpdir7 } from "node:os";
-import { join as join23, resolve as resolve16 } from "node:path";
+import { join as join24, resolve as resolve17 } from "node:path";
 var CLAUDE_PRIME_COMMAND_NAME = "claude-prime";
 var PRIME_TICK_MS = 60000;
 var PRIME_DUE_OFFSET_MS = 60000;
@@ -35634,10 +35763,10 @@ function buildPrimeRequestBody() {
   return JSON.parse(JSON.stringify(PRIME_REQUEST_BODY));
 }
 function defaultMarkerDir() {
-  return join23(tmpdir7(), "opencode-anthropic-auth", "prime");
+  return join24(tmpdir7(), "opencode-anthropic-auth", "prime");
 }
 function primeStorageFingerprint(storagePath) {
-  const absolutePath = resolve16(storagePath);
+  const absolutePath = resolve17(storagePath);
   let canonicalPath2;
   try {
     canonicalPath2 = realpathSync3(absolutePath);
@@ -35649,19 +35778,19 @@ function primeStorageFingerprint(storagePath) {
   return createHash25("sha256").update(canonicalPath2).digest("hex").slice(0, 12);
 }
 function primeMarkerNamespaceDir(markerDir, storagePath) {
-  return join23(markerDir, primeStorageFingerprint(storagePath));
+  return join24(markerDir, primeStorageFingerprint(storagePath));
 }
 function primeAccountMarkerDir(markerDir, storagePath, accountFingerprint) {
   if (!/^[a-f0-9]{12,}$/i.test(accountFingerprint)) {
     throw new Error("Prime account fingerprint must be a hexadecimal digest");
   }
-  return join23(primeMarkerNamespaceDir(markerDir, storagePath), accountFingerprint.toLowerCase().slice(0, 12));
+  return join24(primeMarkerNamespaceDir(markerDir, storagePath), accountFingerprint.toLowerCase().slice(0, 12));
 }
 function primeMarkerPath(markerDir, accountId2, resetsAtEpochMs) {
-  return join23(markerDir, `${encodeURIComponent(accountId2)}-${resetsAtEpochMs}`);
+  return join24(markerDir, `${encodeURIComponent(accountId2)}-${resetsAtEpochMs}`);
 }
 function primeBootstrapMarkerPath(markerDir, accountId2) {
-  return join23(markerDir, `${encodeURIComponent(accountId2)}-bootstrap`);
+  return join24(markerDir, `${encodeURIComponent(accountId2)}-bootstrap`);
 }
 function primeAccountLabel(id2, fallback) {
   if (id2 === "main")
@@ -36103,7 +36232,7 @@ class PrimeManager {
     let swept = 0;
     for (const entry2 of entries) {
       try {
-        const path2 = join23(dir, entry2);
+        const path2 = join24(dir, entry2);
         const s = await stat11(path2);
         if (s.isDirectory()) {
           swept += await this.sweepMarkerDirectory(path2, now);
@@ -36138,11 +36267,11 @@ import {
   writeFile as writeFile6
 } from "node:fs/promises";
 import { tmpdir as tmpdir8 } from "node:os";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 var QUOTA_HEADER_FEED_SCHEMA_VERSION = 3;
 var QUOTA_HEADER_FEED_LEASE_MS = 180000;
 function getDefaultQuotaHeaderFeedDirectory() {
-  return process.env.OPENCODE_ANTHROPIC_AUTH_QUOTA_FEED_DIR ?? join24(tmpdir8(), "opencode-anthropic-auth", "quota-header-feed");
+  return process.env.OPENCODE_ANTHROPIC_AUTH_QUOTA_FEED_DIR ?? join25(tmpdir8(), "opencode-anthropic-auth", "quota-header-feed");
 }
 function configuredAnthropicOAuthAccountCount(input) {
   const fallbackCount = input.storage?.accounts.filter(isOAuthAccount).length ?? 0;
@@ -36301,7 +36430,7 @@ class QuotaHeaderFeedRegistry {
   constructor(options = {}) {
     this.options = options;
     const instanceId = options.instanceId ?? `${process.pid}-${randomUUID19()}`;
-    this.filePath = join24(options.directory ?? getDefaultQuotaHeaderFeedDirectory(), `${instanceId}.json`);
+    this.filePath = join25(options.directory ?? getDefaultQuotaHeaderFeedDirectory(), `${instanceId}.json`);
   }
   publish(entry2) {
     const { accountKey, quota: quota2 } = entry2;
@@ -36362,7 +36491,7 @@ class QuotaHeaderFeedRegistry {
       return;
     }
     await Promise.all(names2.filter((name) => /^\d+-[0-9a-f-]+\.json$/i.test(name)).map(async (name) => {
-      const path2 = join24(directory, name);
+      const path2 = join25(directory, name);
       if (path2 === this.filePath)
         return;
       try {
@@ -36391,7 +36520,7 @@ class QuotaHeaderFeedRegistry {
     const newest = new Map;
     await Promise.all(names2.map(async (name) => {
       try {
-        const record9 = JSON.parse(await readFile13(join24(directory, name), "utf8"));
+        const record9 = JSON.parse(await readFile13(join25(directory, name), "utf8"));
         if (record9.version !== QUOTA_HEADER_FEED_SCHEMA_VERSION || !record9.entries || typeof record9.entries !== "object")
           return;
         for (const [accountKey, candidate] of Object.entries(record9.entries)) {
@@ -36572,7 +36701,7 @@ function buildClaudeQuotaSummary(input) {
 }
 // src/request-gzip.ts
 import { mkdir as mkdir17, readFile as readFile14, rename as rename15, rm as rm10, writeFile as writeFile7 } from "node:fs/promises";
-import { basename as basename10, dirname as dirname22, join as join25 } from "node:path";
+import { basename as basename10, dirname as dirname22, join as join26 } from "node:path";
 import { promisify } from "node:util";
 import { gzip } from "node:zlib";
 var gzipAsync = promisify(gzip);
@@ -36718,7 +36847,7 @@ function getRequestGzipLatch(path2) {
 function getRequestGzipLatchPath(accountStoragePath) {
   const name = basename10(accountStoragePath);
   const stem = name.endsWith(".json") ? name.slice(0, -5) : name;
-  return join25(dirname22(accountStoragePath), `${stem}-request-gzip.json`);
+  return join26(dirname22(accountStoragePath), `${stem}-request-gzip.json`);
 }
 async function decideRequestGzip(options) {
   if (!CLAUDE_CODE_GZIPS_REQUEST_BODIES)
@@ -37035,12 +37164,12 @@ function executeLaneStartCommand(input) {
 // src/state-layout-decision.ts
 import { mkdir as mkdir18, readdir as readdir8 } from "node:fs/promises";
 import { homedir as homedir7 } from "node:os";
-import { basename as basename13, dirname as dirname24, join as join29 } from "node:path";
+import { basename as basename13, dirname as dirname24, join as join30 } from "node:path";
 
 // src/layout-fence.ts
 import { readdir as readdir6, readFile as readFile15 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
-import { basename as basename11, join as join26, resolve as resolve17 } from "node:path";
+import { basename as basename11, join as join27, resolve as resolve18 } from "node:path";
 var STATE_PATH_OVERRIDE_VARIABLES = [
   "OPENCODE_ANTHROPIC_AUTH_FILE",
   "OPENCODE_ANTHROPIC_AUTH_STATE_FILE",
@@ -37076,7 +37205,7 @@ async function holderFenceBlockers(input) {
   const files = new Set(input.files);
   const blockers = [];
   for (const dir of [...new Set(input.directories)].sort()) {
-    const holderFile = join26(dir, HOLDER_FILE_NAME);
+    const holderFile = join27(dir, HOLDER_FILE_NAME);
     let contents;
     try {
       contents = await readHolderFile(holderFile);
@@ -37126,8 +37255,8 @@ function defaultPreNArtifactLocations(env = process.env, home = homedir5()) {
   });
   const rpcOverride = env.OPENCODE_ANTHROPIC_AUTH_RPC_DIR?.trim();
   return {
-    rpcRoots: [join26(root, "rpc")],
-    rpcDirs: rpcOverride ? [resolve17(rpcOverride)] : [],
+    rpcRoots: [join27(root, "rpc")],
+    rpcDirs: rpcOverride ? [resolve18(rpcOverride)] : [],
     cacheKeepDirs: [
       ...new Set([
         getDefaultCacheKeepRegistryDirectory("opencode"),
@@ -37176,12 +37305,12 @@ async function preNArtifactBlockers(locations, pidAlive2 = defaultLiveness2.pidA
   const portDirs = [...locations.rpcDirs];
   for (const root of locations.rpcRoots)
     for (const name of await listDir(root, blockers))
-      portDirs.push(join26(root, name));
+      portDirs.push(join27(root, name));
   for (const dir of [...new Set(portDirs)]) {
     for (const name of await listDir(dir, blockers)) {
       if (!/^port-\d+\.json$/.test(name))
         continue;
-      const path2 = join26(dir, name);
+      const path2 = join27(dir, name);
       const value = await readArtifact(path2, blockers);
       if (value === undefined || stamped(value))
         continue;
@@ -37199,7 +37328,7 @@ async function preNArtifactBlockers(locations, pidAlive2 = defaultLiveness2.pidA
       const match = /^(\d+)-.+\.json$/.exec(name);
       if (!match)
         continue;
-      const path2 = join26(dir, name);
+      const path2 = join27(dir, name);
       const value = await readArtifact(path2, blockers);
       if (value === undefined || stamped(value))
         continue;
@@ -37228,13 +37357,13 @@ function describeFenceBlocker(blocker) {
 // src/state-layout-move.ts
 import { randomUUID as randomUUID20 } from "node:crypto";
 import { lstat as lstat18, readdir as readdir7, readFile as readFile16, stat as stat13, unlink as unlink10 } from "node:fs/promises";
-import { basename as basename12, dirname as dirname23, join as join27, sep as sep2 } from "node:path";
+import { basename as basename12, dirname as dirname23, join as join28, sep as sep2 } from "node:path";
 var ACCOUNT_FILE = "anthropic-auth.json";
 var ACCOUNT_STATE_FILE = "anthropic-auth-state.json";
 var LAYOUT_LOCK_NAME = "runtime-layout";
 var LAYOUT_LOCK_TIMEOUT_MS = 120000;
 async function resolveLegacyDatasetFiles(configDir) {
-  const oldPaths = await resolveNativePoolPaths(join27(configDir, ACCOUNT_FILE), join27(configDir, ACCOUNT_STATE_FILE), { kind: "legacy" });
+  const oldPaths = await resolveNativePoolPaths(join28(configDir, ACCOUNT_FILE), join28(configDir, ACCOUNT_STATE_FILE), { kind: "legacy" });
   return {
     oldDir: await canonicalPath(configDir),
     oldPaths,
@@ -37242,8 +37371,8 @@ async function resolveLegacyDatasetFiles(configDir) {
   };
 }
 async function resolveRelocationDataset(input) {
-  const legacyConfig = join27(input.configDir, ACCOUNT_FILE);
-  const legacyState = join27(input.configDir, ACCOUNT_STATE_FILE);
+  const legacyConfig = join28(input.configDir, ACCOUNT_FILE);
+  const legacyState = join28(input.configDir, ACCOUNT_STATE_FILE);
   const { oldDir, oldPaths, oldVault } = await resolveLegacyDatasetFiles(input.configDir);
   const stateHome = { kind: "state-home", dir: input.sub };
   const newPaths = await resolveNativePoolPaths(legacyConfig, legacyState, stateHome);
@@ -37272,7 +37401,7 @@ async function resolveRelocationDataset(input) {
       role,
       from: pairs[role][0],
       to: pairs[role][1],
-      configured: join27(input.configDir, STATE_HOME_FILE_NAMES[role])
+      configured: join28(input.configDir, STATE_HOME_FILE_NAMES[role])
     })),
     storageIds: { local: oldPaths.storageId, vault: oldVault.storageId }
   };
@@ -37294,8 +37423,8 @@ function errorCode6(error) {
 }
 function transitionHolderFiles(dataset) {
   return [
-    join27(dataset.oldDir, HOLDER_FILE_NAME),
-    join27(dataset.sub, HOLDER_FILE_NAME)
+    join28(dataset.oldDir, HOLDER_FILE_NAME),
+    join28(dataset.sub, HOLDER_FILE_NAME)
   ].sort();
 }
 async function acquireHolderLock(ctx, holderFile, timeoutMs) {
@@ -37312,7 +37441,7 @@ async function acquireHolderLock(ctx, holderFile, timeoutMs) {
   }
 }
 async function acquireHolderLocks(dataset, ctx) {
-  const oldHolders = join27(dataset.oldDir, HOLDER_FILE_NAME);
+  const oldHolders = join28(dataset.oldDir, HOLDER_FILE_NAME);
   for (const file of transitionHolderFiles(dataset)) {
     if (file === oldHolders)
       await stateLayoutStep(ctx, "old-holders-locking");
@@ -37728,7 +37857,7 @@ async function rollbackPreparing(record9, dataset, ctx) {
   }
   for (const name of await readdir7(dataset.sub))
     if (isLayoutRecordStage(name, attempt))
-      await removeOwnStaging(join27(dataset.sub, name));
+      await removeOwnStaging(join28(dataset.sub, name));
   await stateLayoutStep(ctx, "rollback:destination-removed");
   await ctx.fs.syncDirectory(dataset.sub);
   await stateLayoutStep(ctx, "rollback:sub-flushed");
@@ -37842,7 +37971,7 @@ async function moveDataset(dataset, ctx, checkArtifacts) {
     });
   const sha = (role) => files.find((file) => file.role === role)?.sha256 ?? null;
   await ctx.stack.assertAll();
-  const configDirPath = join27(dataset.sub, STATE_HOME_FILE_NAMES.configDirMarker);
+  const configDirPath = join28(dataset.sub, STATE_HOME_FILE_NAMES.configDirMarker);
   if (!await exists3(configDirPath)) {
     const stage = `${configDirPath}.${attempt}.tmp`;
     await createOwnerOnlyFile(ctx.fs, stage, Buffer.from(`${JSON.stringify({ version: 1, identity: dataset.identity })}
@@ -37853,7 +37982,7 @@ async function moveDataset(dataset, ctx, checkArtifacts) {
       await removeOwnStaging(stage);
     }
   }
-  const holderFile = join27(dataset.sub, HOLDER_FILE_NAME);
+  const holderFile = join28(dataset.sub, HOLDER_FILE_NAME);
   if (!await exists3(holderFile))
     await writeJsonAtomic(holderFile, { version: 1, entries: [] }, {
       beforeRename: () => ctx.stack.assertAll(),
@@ -38007,7 +38136,7 @@ async function rollbackAfterFailure(preparing, dataset, ctx) {
 import { randomUUID as randomUUID21 } from "node:crypto";
 import { readFile as readFile17 } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 var DATA_ROLES = [
   "localPoolState",
   "localRoster",
@@ -38283,7 +38412,7 @@ async function newRestoreProblems(record9, dataset, options) {
       if (await exists3(path2))
         problems.push(`${path2} changed after the move and was kept; move it aside or delete it`);
   }
-  problems.push(...await holderProblems(join28(dataset.sub, HOLDER_FILE_NAME), options.liveness, true), ...await holderProblems(join28(dataset.oldDir, HOLDER_FILE_NAME), options.liveness, false));
+  problems.push(...await holderProblems(join29(dataset.sub, HOLDER_FILE_NAME), options.liveness, true), ...await holderProblems(join29(dataset.oldDir, HOLDER_FILE_NAME), options.liveness, false));
   const artifacts = options.artifacts ?? defaultPreNArtifactLocations(options.env ?? process.env, options.home ?? homedir6());
   for (const blocker of await preNArtifactBlockers(artifacts, options.liveness?.pidAlive))
     problems.push(`${describeFenceBlocker(blocker)} is still running`);
@@ -38472,7 +38601,7 @@ async function restoreLegacyLayout(options = {}) {
           break;
         case "restore-staged": {
           await syncObservedRestoreRecord(dataset, ctx);
-          const problems = await holderProblems(join28(dataset.sub, HOLDER_FILE_NAME), options.liveness, true);
+          const problems = await holderProblems(join29(dataset.sub, HOLDER_FILE_NAME), options.liveness, true);
           if (problems.length)
             throw refused2(`anthropic-auth can't finish restoring its state to ${dataset.oldDir}: ${problems.join("; ")}. Close them, then run ${RESTORE_LEGACY_COMMAND} again.`, [dataset.sub]);
           result = await finishStagedRestore(record9, dataset, ctx);
@@ -38587,7 +38716,7 @@ function deferLegacyRegistration(paths, dir, options, error) {
 }
 async function registerLegacyHeld(oldDir, paths, identity3, options, ctx) {
   try {
-    await registerHeld(join29(oldDir, HOLDER_FILE_NAME), paths, "legacy", identity3, options, ctx);
+    await registerHeld(join30(oldDir, HOLDER_FILE_NAME), paths, "legacy", identity3, options, ctx);
     return;
   } catch (error) {
     if (unmovedRegistrationPolicy(options) === "mandatory")
@@ -38620,14 +38749,14 @@ async function admitHeld(dataset, options, ctx, moved, allowPendingCleanup) {
     throw conflict;
   }
   await warnReappearedMetadata(record9);
-  await registerHeld(join29(dataset.sub, HOLDER_FILE_NAME), dataset.newPaths, "state-home", dataset.identity, options, ctx);
+  await registerHeld(join30(dataset.sub, HOLDER_FILE_NAME), dataset.newPaths, "state-home", dataset.identity, options, ctx);
   const layout = { kind: "state-home", dir: dataset.sub };
   recordProcessStateLayout(dataset.oldPaths.legacyConfig, layout);
   return { kind: "state-home", layout, dataset, record: record9, moved };
 }
 async function admitFast(dataset, options, ctx) {
   try {
-    await acquireHolderLock(ctx, join29(dataset.sub, HOLDER_FILE_NAME), ctx.holderLockTimeoutMs);
+    await acquireHolderLock(ctx, join30(dataset.sub, HOLDER_FILE_NAME), ctx.holderLockTimeoutMs);
   } catch (error) {
     if (error instanceof LockContentionError)
       busy(dataset.configDir, error);
@@ -38735,7 +38864,7 @@ async function legacyWhileMoveOff(configDir, identity3, options, ctx, stayReason
     await stateLayoutStep(ctx, "old-holders-locking");
     let lockFailure;
     try {
-      await acquireHolderLock(ctx, join29(old.oldDir, HOLDER_FILE_NAME), ctx.holderLockTimeoutMs);
+      await acquireHolderLock(ctx, join30(old.oldDir, HOLDER_FILE_NAME), ctx.holderLockTimeoutMs);
     } catch (error) {
       lockFailure = { error };
     }
@@ -38765,8 +38894,8 @@ async function decideOpenCodeStateLayout(options) {
     holderLockTimeoutMs: options.timeouts?.holderMs
   });
   if (isExplicit(env)) {
-    const legacyConfig = env.OPENCODE_ANTHROPIC_AUTH_FILE?.trim() || join29(configDir, ACCOUNT_FILE2);
-    const legacyState = env.OPENCODE_ANTHROPIC_AUTH_STATE_FILE?.trim() || (legacyConfig.endsWith(ACCOUNT_FILE2) ? join29(dirname24(legacyConfig), ACCOUNT_STATE_FILE2) : `${legacyConfig}.state.json`);
+    const legacyConfig = env.OPENCODE_ANTHROPIC_AUTH_FILE?.trim() || join30(configDir, ACCOUNT_FILE2);
+    const legacyState = env.OPENCODE_ANTHROPIC_AUTH_STATE_FILE?.trim() || (legacyConfig.endsWith(ACCOUNT_FILE2) ? join30(dirname24(legacyConfig), ACCOUNT_STATE_FILE2) : `${legacyConfig}.state.json`);
     const paths = await resolveNativePoolPaths(legacyConfig, legacyState, LEGACY_STATE_LAYOUT);
     const registration = await registerNativePoolHolder({
       paths,
@@ -38789,7 +38918,7 @@ async function decideOpenCodeStateLayout(options) {
     } catch (error) {
       if (unmovedRegistrationPolicy(options) === "mandatory")
         throw new HolderRegistrationError("unavailable", configDir, error);
-      const paths = await resolveNativePoolPaths(join29(configDir, ACCOUNT_FILE2), join29(configDir, ACCOUNT_STATE_FILE2), LEGACY_STATE_LAYOUT);
+      const paths = await resolveNativePoolPaths(join30(configDir, ACCOUNT_FILE2), join30(configDir, ACCOUNT_STATE_FILE2), LEGACY_STATE_LAYOUT);
       return chooseLegacy(paths, [reason], true, deferLegacyRegistration(paths, configDir, options, error));
     }
     identity3 = configIdentity(configDir);
@@ -38859,7 +38988,7 @@ async function decideOpenCodeStateLayout(options) {
       try {
         await stateLayoutStep(ctx, "old-holders-locking");
         try {
-          await acquireHolderLock(ctx, join29(dataset.oldDir, HOLDER_FILE_NAME), ctx.holderLockTimeoutMs);
+          await acquireHolderLock(ctx, join30(dataset.oldDir, HOLDER_FILE_NAME), ctx.holderLockTimeoutMs);
         } catch (error) {
           if (unmovedRegistrationPolicy(options) === "mandatory")
             throw error;
@@ -39291,6 +39420,7 @@ export {
   requireNoSupervisedAuthContentSnapshot,
   requireAnthropicOAuthOrigin,
   requestGzipPadding,
+  reportRouting,
   renameWithWindowsSharingRetry,
   remapRequestBodyModel,
   remapModelId,
@@ -39601,6 +39731,7 @@ export {
   assertNotCustodyTombstone,
   assertNoMeaningfulTrailingAssistant,
   assertHostsStopped,
+  askRouting,
   applyTurnEndNotes,
   applyThinkingBindingControls,
   applyMidConversationOutputConfig,