@dylanpiercey/work 0.0.72 → 0.0.74

package/dist/{_BfXE8Kjn.js → _BDyG-m5v.js}

@@ -149,6 +149,64 @@ function ensureColumn(table, column, decl) {
 ensureColumn("review_comments", "head", "TEXT");
 ensureColumn("review_comments", "snippet", "TEXT");
 //#endregion
+//#region lib/setup/agents.json
+var agents_default = [
+	{
+		"id": "claude",
+		"label": "Claude",
+		"bins": ["claude"],
+		"install": {
+			"url": "https://claude.ai/install.sh",
+			"shell": "bash"
+		},
+		"icon": "M4.709 15.955l4.72-2.647.08-.23-.08-.128H9.2l-.79-.048-2.698-.073-2.339-.097-2.266-.122-.571-.121L0 11.784l.055-.352.48-.321.686.06 1.52.103 2.278.158 1.652.097 2.449.255h.389l.055-.157-.134-.098-.103-.097-2.358-1.596-2.552-1.688-1.336-.972-.724-.491-.364-.462-.158-1.008.656-.722.881.06.225.061.893.686 1.908 1.476 2.491 1.833.365.304.145-.103.019-.073-.164-.274-1.355-2.446-1.446-2.49-.644-1.032-.17-.619a2.97 2.97 0 01-.104-.729L6.283.134 6.696 0l.996.134.42.364.62 1.414 1.002 2.229 1.555 3.03.456.898.243.832.091.255h.158V9.01l.128-1.706.237-2.095.23-2.695.08-.76.376-.91.747-.492.584.28.48.685-.067.444-.286 1.851-.559 2.903-.364 1.942h.212l.243-.242.985-1.306 1.652-2.064.73-.82.85-.904.547-.431h1.033l.76 1.129-.34 1.166-1.064 1.347-.881 1.142-1.264 1.7-.79 1.36.073.11.188-.02 2.856-.606 1.543-.28 1.841-.315.833.388.091.395-.328.807-1.969.486-2.309.462-3.439.813-.042.03.049.061 1.549.146.662.036h1.622l3.02.225.79.522.474.638-.079.485-1.215.62-1.64-.389-3.829-.91-1.312-.329h-.182v.11l1.093 1.068 2.006 1.81 2.509 2.33.127.578-.322.455-.34-.049-2.205-1.657-.851-.747-1.926-1.62h-.128v.17l.444.649 2.345 3.521.122 1.08-.17.353-.608.213-.668-.122-1.374-1.925-1.415-2.167-1.143-1.943-.14.08-.674 7.254-.316.37-.729.28-.607-.461-.322-.747.322-1.476.389-1.924.315-1.53.286-1.9.17-.632-.012-.042-.14.018-1.434 1.967-2.18 2.945-1.726 1.845-.414.164-.717-.37.067-.662.401-.589 2.388-3.036 1.44-1.882.93-1.086-.006-.158h-.055L4.132 18.56l-1.13.146-.487-.456.061-.746.231-.243 1.908-1.312-.006.006z"
+	},
+	{
+		"id": "codex",
+		"label": "Codex",
+		"bins": ["codex"],
+		"install": {
+			"url": "https://chatgpt.com/codex/install.sh",
+			"shell": "sh"
+		},
+		"icon": "M9.205 8.658v-2.26c0-.19.072-.333.238-.428l4.543-2.616c.619-.357 1.356-.523 2.117-.523 2.854 0 4.662 2.212 4.662 4.566 0 .167 0 .357-.024.547l-4.71-2.759a.797.797 0 00-.856 0l-5.97 3.473zm10.609 8.8V12.06c0-.333-.143-.57-.429-.737l-5.97-3.473 1.95-1.118a.433.433 0 01.476 0l4.543 2.617c1.309.76 2.189 2.378 2.189 3.948 0 1.808-1.07 3.473-2.76 4.163zM7.802 12.703l-1.95-1.142c-.167-.095-.239-.238-.239-.428V5.899c0-2.545 1.95-4.472 4.591-4.472 1 0 1.927.333 2.712.928L8.23 5.067c-.285.166-.428.404-.428.737v6.898zM12 15.128l-2.795-1.57v-3.33L12 8.658l2.795 1.57v3.33L12 15.128zm1.796 7.23c-1 0-1.927-.332-2.712-.927l4.686-2.712c.285-.166.428-.404.428-.737v-6.898l1.974 1.142c.167.095.238.238.238.428v5.233c0 2.545-1.974 4.472-4.614 4.472zm-5.637-5.303l-4.544-2.617c-1.308-.761-2.188-2.378-2.188-3.948A4.482 4.482 0 014.21 6.327v5.423c0 .333.143.571.428.738l5.947 3.449-1.95 1.118a.432.432 0 01-.476 0zm-.262 3.9c-2.688 0-4.662-2.021-4.662-4.519 0-.19.024-.38.047-.57l4.686 2.71c.286.167.571.167.856 0l5.97-3.448v2.26c0 .19-.07.333-.237.428l-4.543 2.616c-.619.357-1.356.523-2.117.523zm5.899 2.83a5.947 5.947 0 005.827-4.756C22.287 18.339 24 15.84 24 13.296c0-1.665-.713-3.282-1.998-4.448.119-.5.19-.999.19-1.498 0-3.401-2.759-5.947-5.946-5.947-.642 0-1.26.095-1.88.31A5.962 5.962 0 0010.205 0a5.947 5.947 0 00-5.827 4.757C1.713 5.447 0 7.945 0 10.49c0 1.666.713 3.283 1.998 4.448-.119.5-.19 1-.19 1.499 0 3.401 2.759 5.946 5.946 5.946.642 0 1.26-.095 1.88-.309a5.96 5.96 0 004.162 1.713z",
+		"reauth": "codex login"
+	},
+	{
+		"id": "copilot",
+		"label": "Copilot",
+		"bins": ["copilot"],
+		"install": {
+			"url": "https://gh.io/copilot-install",
+			"shell": "bash"
+		},
+		"icon": "M19.245 5.364c1.322 1.36 1.877 3.216 2.11 5.817.622 0 1.2.135 1.592.654l.73.964c.21.278.323.61.323.955v2.62c0 .339-.173.669-.453.868C20.239 19.602 16.157 21.5 12 21.5c-4.6 0-9.205-2.583-11.547-4.258-.28-.2-.452-.53-.453-.868v-2.62c0-.345.113-.679.321-.956l.73-.963c.392-.517.974-.654 1.593-.654l.029-.297c.25-2.446.81-4.213 2.082-5.52 2.461-2.54 5.71-2.851 7.146-2.864h.198c1.436.013 4.685.323 7.146 2.864zm-7.244 4.328c-.284 0-.613.016-.962.05-.123.447-.305.85-.57 1.108-1.05 1.023-2.316 1.18-2.994 1.18-.638 0-1.306-.13-1.851-.464-.516.165-1.012.403-1.044.996a65.882 65.882 0 00-.063 2.884l-.002.48c-.002.563-.005 1.126-.013 1.69.002.326.204.63.51.765 2.482 1.102 4.83 1.657 6.99 1.657 2.156 0 4.504-.555 6.985-1.657a.854.854 0 00.51-.766c.03-1.682.006-3.372-.076-5.053-.031-.596-.528-.83-1.046-.996-.546.333-1.212.464-1.85.464-.677 0-1.942-.157-2.993-1.18-.266-.258-.447-.661-.57-1.108-.32-.032-.64-.049-.96-.05zm-2.525 4.013c.539 0 .976.426.976.95v1.753c0 .525-.437.95-.976.95a.964.964 0 01-.976-.95v-1.752c0-.525.437-.951.976-.951zm5 0c.539 0 .976.426.976.95v1.753c0 .525-.437.95-.976.95a.964.964 0 01-.976-.95v-1.752c0-.525.437-.951.976-.951zM7.635 5.087c-1.05.102-1.935.438-2.385.906-.975 1.037-.765 3.668-.21 4.224.405.394 1.17.657 1.995.657h.09c.649-.013 1.785-.176 2.73-1.11.435-.41.705-1.433.675-2.47-.03-.834-.27-1.52-.63-1.813-.39-.336-1.275-.482-2.265-.394zm6.465.394c-.36.292-.6.98-.63 1.813-.03 1.037.24 2.06.675 2.47.968.957 2.136 1.104 2.776 1.11h.044c.825 0 1.59-.263 1.995-.657.555-.556.765-3.187-.21-4.224-.45-.468-1.335-.804-2.385-.906-.99-.088-1.875.058-2.265.394zM12 7.615c-.24 0-.525.015-.84.044.03.16.045.336.06.526l-.001.159a2.94 2.94 0 01-.014.25c.225-.022.425-.027.612-.028h.366c.187 0 .387.006.612.028-.015-.146-.015-.277-.015-.409.015-.19.03-.365.06-.526a9.29 9.29 0 00-.84-.044z",
+		"reauth": "gh auth login"
+	},
+	{
+		"id": "cursor",
+		"label": "Cursor",
+		"bins": ["cursor-agent"],
+		"install": {
+			"url": "https://cursor.com/install",
+			"shell": "bash"
+		},
+		"icon": "M22.106 5.68L12.5.135a.998.998 0 00-.998 0L1.893 5.68a.84.84 0 00-.419.726v11.186c0 .3.16.577.42.727l9.607 5.547a.999.999 0 00.998 0l9.608-5.547a.84.84 0 00.42-.727V6.407a.84.84 0 00-.42-.726zm-.603 1.176L12.228 22.92c-.063.108-.228.064-.228-.061V12.34a.59.59 0 00-.295-.51l-9.11-5.26c-.107-.062-.063-.228.062-.228h18.55c.264 0 .428.286.296.514z",
+		"reauth": "cursor-agent login"
+	},
+	{
+		"id": "grok",
+		"label": "Grok",
+		"bins": ["grok"],
+		"install": {
+			"url": "https://x.ai/cli/install.sh",
+			"shell": "bash"
+		},
+		"icon": "M9.27 15.29l7.978-5.897c.391-.29.95-.177 1.137.272.98 2.369.542 5.215-1.41 7.169-1.951 1.954-4.667 2.382-7.149 1.406l-2.711 1.257c3.889 2.661 8.611 2.003 11.562-.953 2.341-2.344 3.066-5.539 2.388-8.42l.006.007c-.983-4.232.242-5.924 2.75-9.383.06-.082.12-.164.179-.248l-3.301 3.305v-.01L9.267 15.292M7.623 16.723c-2.792-2.67-2.31-6.801.071-9.184 1.761-1.763 4.647-2.483 7.166-1.425l2.705-1.25a7.808 7.808 0 00-1.829-1A8.975 8.975 0 005.984 5.83c-2.533 2.536-3.33 6.436-1.962 9.764 1.022 2.487-.653 4.246-2.34 6.022-.599.63-1.199 1.259-1.682 1.925l7.62-6.815",
+		"reauth": "grok"
+	}
+];
+//#endregion
 //#region lib/setup/catalog.mjs
 /** Machine tools. `required` ones gate readiness; the rest are the utilities
 * agents reach for constantly (mirrors DylanPiercey/start). Static binaries via
@@ -238,62 +296,19 @@ var TOOLS = [
 		mise: "pnpm"
 	}
 ];
-/** Coding agent CLIs. Installed via each vendor's own installer (not npm) so
-* self-update works. `bins` lists the executable names a family answers to;
-* numeric suffixes (`claude1`) are discovered on top of these. */
-var AGENTS = [
-	{
-		id: "claude",
-		label: "Claude",
-		bins: ["claude"],
-		install: {
-			url: "https://claude.ai/install.sh",
-			shell: "bash"
-		}
-	},
-	{
-		id: "codex",
-		label: "Codex",
-		bins: ["codex"],
-		install: {
-			url: "https://chatgpt.com/codex/install.sh",
-			shell: "sh"
-		}
-	},
-	{
-		id: "copilot",
-		label: "Copilot",
-		bins: ["copilot"],
-		install: {
-			url: "https://gh.io/copilot-install",
-			shell: "bash"
-		}
-	},
-	{
-		id: "cursor",
-		label: "Cursor",
-		bins: ["cursor-agent"],
-		install: {
-			url: "https://cursor.com/install",
-			shell: "bash"
-		}
-	},
-	{
-		id: "grok",
-		label: "Grok",
-		bins: ["grok"],
-		install: {
-			url: "https://x.ai/cli/install.sh",
-			shell: "bash"
-		}
-	}
-];
+/** Coding agent CLIs — one folder each under src/agents/, whose meta.json is
+* the family's whole description (id, label, bins, vendor installer, icon).
+* agents.json beside this file is those metas collected by
+* scripts/agents-catalog.mjs — a build artifact (`pnpm build`/`check`
+* write it; it is not committed), because src/ is not published and this
+* file runs under plain node in the CLI. */
+var AGENTS$1 = agents_default;
 var DEFAULT_GITHUB_HOST = "github.com";
 function toolById(id) {
 	return TOOLS.find((t) => t.id === id) || null;
 }
 function agentById(id) {
-	return AGENTS.find((a) => a.id === id) || null;
+	return AGENTS$1.find((a) => a.id === id) || null;
 }
 /**
 * Agent *instances* are the family id plus an optional numeric suffix —
@@ -315,7 +330,7 @@ function agentCommand(id) {
 	return parsed ? `${parsed.family.bins[0]}${parsed.suffix}` : null;
 }
 /** "Claude" / "Claude 2". */
-function agentLabel(id) {
+function agentLabel$1(id) {
 	const parsed = parseAgentId(id);
 	return parsed ? `${parsed.family.label}${parsed.suffix ? ` ${parsed.suffix}` : ""}` : id;
 }
@@ -414,7 +429,7 @@ function discoverAgents() {
 			continue;
 		}
 		for (const name of names) {
-			const hit = AGENTS.find((a) => a.bins.some((b) => name === b || name.startsWith(b) && /^\d+$/.test(name.slice(b.length))));
+			const hit = AGENTS$1.find((a) => a.bins.some((b) => name === b || name.startsWith(b) && /^\d+$/.test(name.slice(b.length))));
 			if (!hit || seen.has(name)) continue;
 			const full = path.join(dir, name);
 			try {
@@ -431,7 +446,7 @@ function discoverAgents() {
 			});
 		}
 	}
-	return AGENTS.map((a) => {
+	return AGENTS$1.map((a) => {
 		const instances = [...seen.values()].filter((i) => i.family === a).map(({ id, command, path: p }) => ({
 			id,
 			command,
@@ -557,7 +572,7 @@ function agentChoices() {
 	const out = [];
 	for (const family of discoverAgents()) for (const inst of family.instances) out.push({
 		id: inst.id,
-		label: agentLabel(inst.id),
+		label: agentLabel$1(inst.id),
 		family: family.id,
 		command: inst.command,
 		enabled: !off.has(inst.id)
@@ -6324,110 +6339,6 @@ var scraped = /* @__PURE__ */ new Map();
 var reasons = /* @__PURE__ */ new Map();
 var summaries = /* @__PURE__ */ new Map();
 var viewers = /* @__PURE__ */ new Map();
-/** Human-readable one-liner mined from an agent CLI's hook payload.
-* Claude's Stop hook carries the agent's actual final message
-* (last_assistant_message), as does Codex's Stop hook; the legacy notify payload spells it
-* last-assistant-message; Claude Notifications carry a type. Anything
-* else falls back to terminal scraping. */
-function summaryFromHookPayload(payload) {
-	if (!payload || typeof payload !== "object") return void 0;
-	const p = payload;
-	const text = typeof p.last_assistant_message === "string" && p.last_assistant_message || typeof p["last-assistant-message"] === "string" && p["last-assistant-message"] || typeof p.lastAssistantMessage === "string" && p.lastAssistantMessage || typeof p.agent_message === "string" && p.agent_message || "";
-	if (text) return cleanSummary(text);
-	const kind = notificationType(p);
-	if (kind) {
-		const message = typeof p.message === "string" ? p.message.trim() : "";
-		return message ? cleanSummary(message) : NOTIFICATION_LABELS[kind];
-	}
-	if (typeof p.errorDetails === "string" && p.errorDetails.trim()) return cleanSummary(p.errorDetails);
-	if (typeof p.error === "string" && p.error.trim()) return cleanSummary(p.error);
-	if (p.hook_event_name === "PermissionRequest") {
-		const input = p.tool_input;
-		const what = (input && typeof input.command === "string" ? input.command : "") || (typeof p.tool_name === "string" ? p.tool_name : "");
-		return what ? cleanSummary(`Approve: ${what}`) : "Waiting for permission";
-	}
-}
-var NOTIFICATION_LABELS = {
-	permission_prompt: "Waiting for permission",
-	idle_prompt: "Waiting for your reply",
-	agent_needs_input: "Waiting for input",
-	elicitation_dialog: "Asking a question",
-	elicitation_url_dialog: "Needs a browser sign-in"
-};
-/** Notification hooks are one channel for several kinds of event. Only some
-* mean the agent is blocked on the user; Copilot also routes shell and
-* inbox chatter through it. Those the state endpoint must drop, not paint
-* red — the notification is neither "needs input" nor "done". */
-var CHATTER_NOTIFICATIONS = /* @__PURE__ */ new Set([
-	"shell_completed",
-	"shell_detached_completed",
-	"new_inbox_message",
-	"instruction_discovered",
-	"factory_completed",
-	"unclassified"
-]);
-function ignoreHookPayload(payload) {
-	if (!payload || typeof payload !== "object") return false;
-	const p = payload;
-	const kind = notificationType(p);
-	if (kind && CHATTER_NOTIFICATIONS.has(kind)) return true;
-	if (typeof p.subagentType === "string" && p.subagentType) return true;
-	if (p.hookEventName === "stop" && typeof p.reason === "string" && p.reason !== "end_turn") return true;
-	return false;
-}
-/** `notification_type` (Claude, Copilot) or `notificationType` (Grok). */
-function notificationType(p) {
-	const kind = p.notification_type ?? p.notificationType;
-	return typeof kind === "string" ? kind : void 0;
-}
-/** Copilot's Stop payload names its transcript but not the last message;
-* the last non-empty `assistant.message` in that JSONL is it. Reads the
-* tail only — transcripts grow for the life of a session. */
-function summaryFromTranscript(payload) {
-	if (!payload || typeof payload !== "object") return void 0;
-	const file = payload.transcript_path;
-	if (typeof file !== "string" || !file.endsWith("events.jsonl")) return void 0;
-	try {
-		const fd = fs.openSync(file, "r");
-		try {
-			const size = fs.fstatSync(fd).size;
-			const len = Math.min(size, 65536);
-			const buf = Buffer.alloc(len);
-			fs.readSync(fd, buf, 0, len, size - len);
-			const lines = buf.toString("utf8").split("\n");
-			for (let i = lines.length - 1; i >= 0; i--) {
-				const line = lines[i];
-				if (!line.includes("\"assistant.message\"")) continue;
-				try {
-					const ev = JSON.parse(line);
-					const content = ev.type === "assistant.message" ? ev.data?.content : void 0;
-					if (typeof content === "string" && content.trim()) return cleanSummary(content);
-				} catch {}
-			}
-		} finally {
-			fs.closeSync(fd);
-		}
-	} catch {}
-}
-/** Notifications that mean the agent is nudging about an idle session
-* rather than blocking on one. The hook cannot tell them apart when it
-* fires — it reports every notification the same way — so the kind has to
-* come out of the payload, or a session that merely sat there reads as
-* stuck and paints the nav red. */
-var NUDGE_NOTIFICATIONS = /* @__PURE__ */ new Set(["idle_prompt"]);
-/** The reason a hook's `waiting` actually carries, given its payload. */
-function reasonFromHookPayload(payload, reported) {
-	if (reported !== "attention" || !payload || typeof payload !== "object") return reported;
-	const kind = notificationType(payload);
-	return kind && NUDGE_NOTIFICATIONS.has(kind) ? "done" : reported;
-}
-/** First meaningful line(s) of an agent message, markdown chrome stripped,
-* sized for a push notification. */
-function cleanSummary(text) {
-	const flat = text.replace(/```[\s\S]*?```/g, " ").split("\n").map((line) => line.replace(/^#{1,6}\s+/, "").replace(/^\s*[-*>]\s+/, "").replace(/\*\*([^*]+)\*\*/g, "$1").replace(/`([^`]+)`/g, "$1").trim()).filter(Boolean).join(" ").replace(/\s+/g, " ").trim();
-	if (!flat) return void 0;
-	return flat.length > 180 ? `${flat.slice(0, 177)}…` : flat;
-}
 function setAgentPhase(sessionId, phase, reason, summary) {
 	if (phase === "waiting" && reason === "done") {
 		if (summary) summaries.set(sessionId, summary);
@@ -6509,110 +6420,803 @@ function publishChange(sessionId) {
 	const row = get("SELECT workspace_id FROM sessions WHERE id = ?", sessionId);
 	if (row?.workspace_id) {
 		const workspaceId = row.workspace_id;
-		import("./_DLxkSyzt.js").then((m) => m.notifySessionsChanged(workspaceId));
+		import("./_wbad_ZHd.js").then((m) => m.notifySessionsChanged(workspaceId));
 		return;
 	}
 	publish("sessions.changed");
 }
 //#endregion
-//#region src/server/agent-flags.ts
-/** Agent-state reporting via launch-time flags — nothing is written to the
-* workspace or the user's global config. Claude takes an inline settings
-* JSON (--settings accepts a JSON string); Codex takes lifecycle hooks via
-* `-c` overrides, trusted through a `hooks.state` entry in the same
-* override layer (see codexHookFlags); Copilot mounts a plugin directory
-* that lives in work's own data dir (`--plugin-dir`, see copilotPluginDir).
-* Grok has no flag at all: its hook file also lives in work's data dir, and
-* the one thing written outside it is a line naming that file in Grok's
-* hook registry `~/.grok/hooks-paths` (see grokHooksRegistered). Cursor
-* exposes no hook mechanism, so its sessions get working/idle from pane
-* activity (see scraper.ts) and nothing else — a stopped turn and a
-* question look the same. */
+//#region src/agents/hooks.ts
+/** Shell command a CLI hook runs to report a state: POSTs the hook's own
+* stdin JSON to the app, which mines it for a notification summary. `exit 0`
+* always — a state report must never block the agent. Session and port
+* come from the env tmux gave the pane (see sessions.ts). */
 function stateCurl(state, reason) {
 	const qs = `session=$WORK_SESSION_ID&state=${state}` + (reason ? `&reason=${reason}` : "");
 	return `[ -n "$WORK_SESSION_ID" ] && curl -sf -m 3 -X POST "http://127.0.0.1:\${WORK_APP_PORT:-${config.appPort}}/api/agent-state?${qs}" -H 'content-type: application/json' --data-binary @- >/dev/null 2>&1; exit 0`;
 }
-/** Whether the agent says when it *starts* working, not just when it stops.
-* Claude and Codex announce it through hooks; believing the screen over that
-* costs them the state their own hook just reported. */
-function reportsWorking(agent) {
-	const family = agentFamily(agent);
-	return family === "claude" || family === "codex" || family === "copilot" || family === "grok" && grokHooksOk;
+/** Claude-format hook groups (`{matcher?, hooks:[{type:"command",command}]}`)
+* for a hook map — the JSON shape Claude, Copilot plugins and Grok all read. */
+function claudeStyleHooks(map, extra = {}) {
+	const hooks = {};
+	for (const [event, state, reason, matcher] of map) hooks[event] = [{
+		...matcher ? { matcher } : {},
+		hooks: [{
+			type: "command",
+			command: stateCurl(state, reason),
+			...extra
+		}]
+	}];
+	return hooks;
 }
-/** Whether Grok's hook registry took work's hook file — without it Grok
-* reports nothing and the screen has to speak for it. */
-var grokHooksOk = false;
-/** Grok hook events → state. Payloads are camelCase (hookEventName,
-* notificationType, lastAssistantMessage); agent-state.ts reads both
-* spellings. Notification is matched to the two kinds that mean a prompt is
-* on screen; Stop fires on shutdown too, with a reason the endpoint uses to
-* tell a finished turn from a closed session. */
-var GROK_HOOKS = [
+var NOTIFICATION_LABELS = {
+	permission_prompt: "Waiting for permission",
+	idle_prompt: "Waiting for your reply",
+	agent_needs_input: "Waiting for input",
+	elicitation_dialog: "Asking a question",
+	elicitation_url_dialog: "Needs a browser sign-in"
+};
+/** Notifications that mean the agent is nudging about an idle session
+* rather than blocking on one: the hook reports every notification the
+* same way, so the kind has to come out of the payload, or a session that
+* merely sat there reads as stuck and paints the nav red. */
+var NUDGE_NOTIFICATIONS = /* @__PURE__ */ new Set(["idle_prompt"]);
+function str$1(v) {
+	return typeof v === "string" ? v.trim() : "";
+}
+/** `notification_type` (Claude, Copilot) or `notificationType` (Grok). */
+function notificationType(p) {
+	return str$1(p.notification_type) || str$1(p.notificationType);
+}
+/** Read a Claude-format payload: last message on Stop, the CLI's own
+* notification line (or a label for its type) on Notification, and the
+* idle nudge downgraded to done. Families that speak this dialect start
+* here and add their own quirks. */
+function readClaudeStyle(p, reported) {
+	const kind = notificationType(p);
+	const reason = reported === "attention" && NUDGE_NOTIFICATIONS.has(kind) ? "done" : reported;
+	const text = str$1(p.last_assistant_message) || str$1(p["last-assistant-message"]) || str$1(p.lastAssistantMessage);
+	if (text) return {
+		reason,
+		summary: cleanSummary(text)
+	};
+	if (kind) return {
+		reason,
+		summary: cleanSummary(str$1(p.message)) ?? NOTIFICATION_LABELS[kind]
+	};
+	return { reason };
+}
+/** First meaningful line(s) of an agent message, markdown chrome stripped,
+* sized for a push notification. */
+function cleanSummary(text) {
+	const flat = text.replace(/```[\s\S]*?```/g, " ").split("\n").map((line) => line.replace(/^#{1,6}\s+/, "").replace(/^\s*[-*>]\s+/, "").replace(/\*\*([^*]+)\*\*/g, "$1").replace(/`([^`]+)`/g, "$1").trim()).filter(Boolean).join(" ").replace(/\s+/g, " ").trim();
+	if (!flat) return void 0;
+	return flat.length > 180 ? `${flat.slice(0, 177)}…` : flat;
+}
+var meta_default$4 = {
+	id: "claude",
+	label: "Claude",
+	bins: ["claude"],
+	install: {
+		"url": "https://claude.ai/install.sh",
+		"shell": "bash"
+	},
+	icon: "M4.709 15.955l4.72-2.647.08-.23-.08-.128H9.2l-.79-.048-2.698-.073-2.339-.097-2.266-.122-.571-.121L0 11.784l.055-.352.48-.321.686.06 1.52.103 2.278.158 1.652.097 2.449.255h.389l.055-.157-.134-.098-.103-.097-2.358-1.596-2.552-1.688-1.336-.972-.724-.491-.364-.462-.158-1.008.656-.722.881.06.225.061.893.686 1.908 1.476 2.491 1.833.365.304.145-.103.019-.073-.164-.274-1.355-2.446-1.446-2.49-.644-1.032-.17-.619a2.97 2.97 0 01-.104-.729L6.283.134 6.696 0l.996.134.42.364.62 1.414 1.002 2.229 1.555 3.03.456.898.243.832.091.255h.158V9.01l.128-1.706.237-2.095.23-2.695.08-.76.376-.91.747-.492.584.28.48.685-.067.444-.286 1.851-.559 2.903-.364 1.942h.212l.243-.242.985-1.306 1.652-2.064.73-.82.85-.904.547-.431h1.033l.76 1.129-.34 1.166-1.064 1.347-.881 1.142-1.264 1.7-.79 1.36.073.11.188-.02 2.856-.606 1.543-.28 1.841-.315.833.388.091.395-.328.807-1.969.486-2.309.462-3.439.813-.042.03.049.061 1.549.146.662.036h1.622l3.02.225.79.522.474.638-.079.485-1.215.62-1.64-.389-3.829-.91-1.312-.329h-.182v.11l1.093 1.068 2.006 1.81 2.509 2.33.127.578-.322.455-.34-.049-2.205-1.657-.851-.747-1.926-1.62h-.128v.17l.444.649 2.345 3.521.122 1.08-.17.353-.608.213-.668-.122-1.374-1.925-1.415-2.167-1.143-1.943-.14.08-.674 7.254-.316.37-.729.28-.607-.461-.322-.747.322-1.476.389-1.924.315-1.53.286-1.9.17-.632-.012-.042-.14.018-1.434 1.967-2.18 2.945-1.726 1.845-.414.164-.717-.37.067-.662.401-.589 2.388-3.036 1.44-1.882.93-1.086-.006-.158h-.055L4.132 18.56l-1.13.146-.487-.456.061-.746.231-.243 1.908-1.312-.006.006z"
+};
+var meta_default$3 = {
+	id: "codex",
+	label: "Codex",
+	bins: ["codex"],
+	install: {
+		"url": "https://chatgpt.com/codex/install.sh",
+		"shell": "sh"
+	},
+	icon: "M9.205 8.658v-2.26c0-.19.072-.333.238-.428l4.543-2.616c.619-.357 1.356-.523 2.117-.523 2.854 0 4.662 2.212 4.662 4.566 0 .167 0 .357-.024.547l-4.71-2.759a.797.797 0 00-.856 0l-5.97 3.473zm10.609 8.8V12.06c0-.333-.143-.57-.429-.737l-5.97-3.473 1.95-1.118a.433.433 0 01.476 0l4.543 2.617c1.309.76 2.189 2.378 2.189 3.948 0 1.808-1.07 3.473-2.76 4.163zM7.802 12.703l-1.95-1.142c-.167-.095-.239-.238-.239-.428V5.899c0-2.545 1.95-4.472 4.591-4.472 1 0 1.927.333 2.712.928L8.23 5.067c-.285.166-.428.404-.428.737v6.898zM12 15.128l-2.795-1.57v-3.33L12 8.658l2.795 1.57v3.33L12 15.128zm1.796 7.23c-1 0-1.927-.332-2.712-.927l4.686-2.712c.285-.166.428-.404.428-.737v-6.898l1.974 1.142c.167.095.238.238.238.428v5.233c0 2.545-1.974 4.472-4.614 4.472zm-5.637-5.303l-4.544-2.617c-1.308-.761-2.188-2.378-2.188-3.948A4.482 4.482 0 014.21 6.327v5.423c0 .333.143.571.428.738l5.947 3.449-1.95 1.118a.432.432 0 01-.476 0zm-.262 3.9c-2.688 0-4.662-2.021-4.662-4.519 0-.19.024-.38.047-.57l4.686 2.71c.286.167.571.167.856 0l5.97-3.448v2.26c0 .19-.07.333-.237.428l-4.543 2.616c-.619.357-1.356.523-2.117.523zm5.899 2.83a5.947 5.947 0 005.827-4.756C22.287 18.339 24 15.84 24 13.296c0-1.665-.713-3.282-1.998-4.448.119-.5.19-.999.19-1.498 0-3.401-2.759-5.947-5.946-5.947-.642 0-1.26.095-1.88.31A5.962 5.962 0 0010.205 0a5.947 5.947 0 00-5.827 4.757C1.713 5.447 0 7.945 0 10.49c0 1.666.713 3.283 1.998 4.448-.119.5-.19 1-.19 1.499 0 3.401 2.759 5.946 5.946 5.946.642 0 1.26-.095 1.88-.309a5.96 5.96 0 004.162 1.713z",
+	reauth: "codex login"
+};
+var meta_default$2 = {
+	id: "copilot",
+	label: "Copilot",
+	bins: ["copilot"],
+	install: {
+		"url": "https://gh.io/copilot-install",
+		"shell": "bash"
+	},
+	icon: "M19.245 5.364c1.322 1.36 1.877 3.216 2.11 5.817.622 0 1.2.135 1.592.654l.73.964c.21.278.323.61.323.955v2.62c0 .339-.173.669-.453.868C20.239 19.602 16.157 21.5 12 21.5c-4.6 0-9.205-2.583-11.547-4.258-.28-.2-.452-.53-.453-.868v-2.62c0-.345.113-.679.321-.956l.73-.963c.392-.517.974-.654 1.593-.654l.029-.297c.25-2.446.81-4.213 2.082-5.52 2.461-2.54 5.71-2.851 7.146-2.864h.198c1.436.013 4.685.323 7.146 2.864zm-7.244 4.328c-.284 0-.613.016-.962.05-.123.447-.305.85-.57 1.108-1.05 1.023-2.316 1.18-2.994 1.18-.638 0-1.306-.13-1.851-.464-.516.165-1.012.403-1.044.996a65.882 65.882 0 00-.063 2.884l-.002.48c-.002.563-.005 1.126-.013 1.69.002.326.204.63.51.765 2.482 1.102 4.83 1.657 6.99 1.657 2.156 0 4.504-.555 6.985-1.657a.854.854 0 00.51-.766c.03-1.682.006-3.372-.076-5.053-.031-.596-.528-.83-1.046-.996-.546.333-1.212.464-1.85.464-.677 0-1.942-.157-2.993-1.18-.266-.258-.447-.661-.57-1.108-.32-.032-.64-.049-.96-.05zm-2.525 4.013c.539 0 .976.426.976.95v1.753c0 .525-.437.95-.976.95a.964.964 0 01-.976-.95v-1.752c0-.525.437-.951.976-.951zm5 0c.539 0 .976.426.976.95v1.753c0 .525-.437.95-.976.95a.964.964 0 01-.976-.95v-1.752c0-.525.437-.951.976-.951zM7.635 5.087c-1.05.102-1.935.438-2.385.906-.975 1.037-.765 3.668-.21 4.224.405.394 1.17.657 1.995.657h.09c.649-.013 1.785-.176 2.73-1.11.435-.41.705-1.433.675-2.47-.03-.834-.27-1.52-.63-1.813-.39-.336-1.275-.482-2.265-.394zm6.465.394c-.36.292-.6.98-.63 1.813-.03 1.037.24 2.06.675 2.47.968.957 2.136 1.104 2.776 1.11h.044c.825 0 1.59-.263 1.995-.657.555-.556.765-3.187-.21-4.224-.45-.468-1.335-.804-2.385-.906-.99-.088-1.875.058-2.265.394zM12 7.615c-.24 0-.525.015-.84.044.03.16.045.336.06.526l-.001.159a2.94 2.94 0 01-.014.25c.225-.022.425-.027.612-.028h.366c.187 0 .387.006.612.028-.015-.146-.015-.277-.015-.409.015-.19.03-.365.06-.526a9.29 9.29 0 00-.84-.044z",
+	reauth: "gh auth login"
+};
+var meta_default$1 = {
+	id: "cursor",
+	label: "Cursor",
+	bins: ["cursor-agent"],
+	install: {
+		"url": "https://cursor.com/install",
+		"shell": "bash"
+	},
+	icon: "M22.106 5.68L12.5.135a.998.998 0 00-.998 0L1.893 5.68a.84.84 0 00-.419.726v11.186c0 .3.16.577.42.727l9.607 5.547a.999.999 0 00.998 0l9.608-5.547a.84.84 0 00.42-.727V6.407a.84.84 0 00-.42-.726zm-.603 1.176L12.228 22.92c-.063.108-.228.064-.228-.061V12.34a.59.59 0 00-.295-.51l-9.11-5.26c-.107-.062-.063-.228.062-.228h18.55c.264 0 .428.286.296.514z",
+	reauth: "cursor-agent login"
+};
+var meta_default = {
+	id: "grok",
+	label: "Grok",
+	bins: ["grok"],
+	install: {
+		"url": "https://x.ai/cli/install.sh",
+		"shell": "bash"
+	},
+	icon: "M9.27 15.29l7.978-5.897c.391-.29.95-.177 1.137.272.98 2.369.542 5.215-1.41 7.169-1.951 1.954-4.667 2.382-7.149 1.406l-2.711 1.257c3.889 2.661 8.611 2.003 11.562-.953 2.341-2.344 3.066-5.539 2.388-8.42l.006.007c-.983-4.232.242-5.924 2.75-9.383.06-.082.12-.164.179-.248l-3.301 3.305v-.01L9.267 15.292M7.623 16.723c-2.792-2.67-2.31-6.801.071-9.184 1.761-1.763 4.647-2.483 7.166-1.425l2.705-1.25a7.808 7.808 0 00-1.829-1A8.975 8.975 0 005.984 5.83c-2.533 2.536-3.33 6.436-1.962 9.764 1.022 2.487-.653 4.246-2.34 6.022-.599.63-1.199 1.259-1.682 1.925l7.62-6.815",
+	reauth: "grok"
+};
+//#endregion
+//#region src/agents/meta.ts
+/** Alphabetical, which is also the order every picker shows. */
+var AGENT_METAS = [
+	meta_default$4,
+	meta_default$3,
+	meta_default$2,
+	meta_default$1,
+	meta_default
+];
+var byId = new Map(AGENT_METAS.map((m) => [m.id, m]));
+function agentMeta(family) {
+	return byId.get(family);
+}
+/** Agent *instances* are the family id plus an optional numeric suffix —
+* `claude`, `claude1`, `claude2` — one per binary on PATH (`claude1`,
+* `cursor-agent2`, …). This is the canonical id everywhere: sessions,
+* settings, usage rows (`~/.claude-2` reports as `claude2`), icons. */
+function parseAgent(id) {
+	const m = /^([a-z]+?)(\d*)$/.exec(id || "");
+	const family = m && byId.get(m[1]);
+	return family ? {
+		family,
+		suffix: m[2]
+	} : null;
+}
+/** Family id of an instance — `shell` (or unknown) passes through, which is
+* what icons and pickers want. */
+function agentFamily(id) {
+	return parseAgent(id)?.family.id ?? id;
+}
+/** Numeric suffix to badge on the icon; empty for the primary instance. */
+function agentBadge(id) {
+	return parseAgent(id)?.suffix ?? "";
+}
+/** "Claude 2" / "Shell". */
+function agentLabel(id) {
+	const p = parseAgent(id);
+	if (!p) return id === "shell" ? "Shell" : id;
+	return `${p.family.label}${p.suffix ? ` ${p.suffix}` : ""}`;
+}
+/** Instance id for a running command (`cursor-agent2` → `cursor2`), or null. */
+function agentFromCommand(command) {
+	for (const meta of AGENT_METAS) for (const bin of meta.bins) {
+		if (command === bin) return meta.id;
+		if (command.startsWith(bin) && /^\d+$/.test(command.slice(bin.length))) return `${meta.id}${command.slice(bin.length)}`;
+	}
+	return null;
+}
+//#endregion
+//#region src/server/usage/shared.ts
+var HOME = os.homedir();
+var obj = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
+var arr = (value) => Array.isArray(value) ? value : [];
+var str = (value) => typeof value === "string" ? value : "";
+/** Numeric coercion that refuses NaN/Infinity — a provider sending "n/a"
+* must read as "no number", not as a percentage that renders a bar. */
+function num(value) {
+	if (value == null || value === "") return null;
+	const n = typeof value === "number" ? value : Number(value);
+	return Number.isFinite(n) ? n : null;
+}
+function readJson(file) {
+	try {
+		return obj(JSON.parse(fs.readFileSync(file, "utf8")));
+	} catch {
+		return null;
+	}
+}
+/** True if an epoch (seconds or ms) or ISO-8601 expiry is in the past. */
+function expired(value) {
+	if (value == null) return false;
+	if (typeof value === "string") {
+		const t = Date.parse(value.replace(/\.\d+/, ""));
+		return Number.isFinite(t) && t < Date.now();
+	}
+	const n = num(value);
+	if (n == null) return false;
+	return (n > 1e11 ? n : n * 1e3) < Date.now();
+}
+function isoFromEpoch(value) {
+	const n = num(value);
+	if (n == null || n <= 0) return null;
+	const ms = n > 1e11 ? n : n * 1e3;
+	return new Date(ms).toISOString();
+}
+/** `p•••@g•••.com` — enough to tell two accounts apart, and the page is
+* screenshotted into PRs and chat, so the address itself doesn't belong. */
+function maskEmail(email) {
+	if (!email || !email.includes("@")) return email || "—";
+	const [local, domain] = email.split("@");
+	if (!local || !domain) return email;
+	const tld = domain.split(".").pop() || "";
+	return `${local[0]}•••@${domain[0]}•••.${tld}`;
+}
+/** A fetch that failed, carrying a reason fit to show on the row.
+*
+* A stale number with no explanation is what makes a usage table untrustworthy
+* — "why is claude2 from yesterday?" deserves an answer next to the number. */
+var FetchFailed = class extends Error {
+	reason;
+	constructor(reason) {
+		super(reason);
+		this.reason = reason;
+	}
+};
+function httpReason(status) {
+	if (status === 401 || status === 403) return "auth expired";
+	if (status === 429) return "rate limited or auth expired";
+	if (status >= 500) return `provider error (HTTP ${status})`;
+	return `HTTP ${status}`;
+}
+var TIMEOUT_MS = 15e3;
+/** JSON over HTTPS, with every failure mode collapsed into a FetchFailed
+* whose reason is worth showing to a human. */
+async function fetchJson(url, init = {}) {
+	let res;
+	try {
+		res = await fetch(url, {
+			...init,
+			signal: AbortSignal.timeout(TIMEOUT_MS)
+		});
+	} catch (err) {
+		const name = err?.name;
+		throw new FetchFailed(name === "TimeoutError" || name === "AbortError" ? "timed out" : "network unreachable");
+	}
+	if (!res.ok) throw new FetchFailed(httpReason(res.status));
+	try {
+		return await res.json();
+	} catch {
+		throw new FetchFailed("unreadable response");
+	}
+}
+var cacheDir = path.join(config.dataDir, "usage");
+function readCache(key) {
+	const blob = readJson(path.join(cacheDir, `${key}.json`));
+	if (!blob) return null;
+	const payload = blob.payload;
+	const at = num(blob.fetched_at);
+	if (!payload || typeof payload !== "object" || at == null) return null;
+	return {
+		payload: obj(payload),
+		ageMs: Math.max(0, Date.now() - at)
+	};
+}
+function writeCache(key, payload) {
+	try {
+		fs.mkdirSync(cacheDir, { recursive: true });
+		fs.writeFileSync(path.join(cacheDir, `${key}.json`), JSON.stringify({
+			fetched_at: Date.now(),
+			payload
+		}));
+	} catch {}
+}
+/** Live fetch, falling back to the last good payload on disk.
+*
+* There is no "cache is fresh enough, skip the fetch" branch: the page's own
+* 60s stale-while-revalidate (server/usage/index.ts) already decides how often
+* this runs, and a second TTL underneath it only makes the numbers older than
+* the page claims. */
+async function loadPayload(key, live) {
+	let reason;
+	try {
+		const data = await live();
+		if (data) {
+			writeCache(key, data);
+			return {
+				payload: data,
+				source: "live"
+			};
+		}
+	} catch (err) {
+		reason = err instanceof FetchFailed ? err.reason : "fetch failed";
+	}
+	const disk = readCache(key);
+	if (disk) return {
+		payload: disk.payload,
+		source: `stale-cache ${Math.round(disk.ageMs / 1e3)}s`,
+		reason
+	};
+	return {
+		payload: null,
+		source: "missing",
+		reason
+	};
+}
+/** How to get a fresh token back, per provider (meta.json `reauth`). */
+var reauthHint = (key) => agentMeta(key)?.reauth;
+/** Never signed in (or the CLI's credentials went missing) — not an outage.
+* Distinct from a failed request: nothing was ever sent, so blaming the
+* network would send you debugging the wrong thing. */
+/** Row note for a CLI signed in with an API key: metered by the bill, not
+* by plan windows, so the empty meters are the whole story. */
+var API_KEY_NOTE = "API key — pay per use, no plan limits";
+function noAuthReason(key) {
+	const hint = reauthHint(key);
+	return hint ? `not signed in (run \`${hint}\`)` : "no credentials on disk";
+}
+function blankRow(agent, source = "missing") {
+	return {
+		agent,
+		plan: agent,
+		account: "—",
+		five_h: null,
+		five_h_resets: null,
+		seven_d: null,
+		seven_d_resets: null,
+		fable: null,
+		fable_resets: null,
+		source
+	};
+}
+/** Say *why* a row is showing last-known numbers, on the row itself.
+*
+* `tokenExpired` is the local credential check: true/false where an expiry is
+* readable off disk, undefined where it isn't. It beats guessing from the
+* status code — a dead token comes back 429 or 403 as readily as 401 — and
+* knowing the token is *good* is what lets a 429 be reported as plain
+* throttling instead of sending you to re-authenticate for nothing. */
+function markStale(row, key, tokenExpired, reason) {
+	if (!/^(stale|claude\.json|missing)/.test(row.source)) return row;
+	let why = reason ?? (tokenExpired ? "auth expired" : void 0);
+	if (!why) why = "couldn't reach provider";
+	if (why.startsWith("rate limited") && tokenExpired === false) why = "rate limited — retry shortly";
+	else if (/^(auth expired|rate limited)/.test(why)) {
+		const hint = reauthHint(key);
+		why += hint ? ` (run \`${hint}\`)` : " (sign in again)";
+	}
+	return {
+		...row,
+		stale_reason: why
+	};
+}
+//#endregion
+//#region src/agents/claude/usage.ts
+/** Every Claude account this machine can read.
+*
+* Numbered dirs (~/.claude-1, -2, …) keep metadata at <dir>/.claude.json; the
+* stock single-account install keeps it at ~/.claude.json with only
+* credentials under ~/.claude/. The numbered ones are discovered rather than
+* assumed — hardcoding a count is a guess about one machine's setup. */
+function claudeAccounts() {
+	const candidates = [...numberedDirs().map((n) => ({
+		suffix: n,
+		dir: path.join(HOME, `.claude-${n}`),
+		meta: path.join(HOME, `.claude-${n}`, ".claude.json"),
+		label: `claude${n}`
+	})), {
+		suffix: "",
+		dir: path.join(HOME, ".claude"),
+		meta: path.join(HOME, ".claude.json"),
+		label: "claude"
+	}];
+	const out = [];
+	for (const candidate of candidates) {
+		const meta = readJson(candidate.meta);
+		if (!meta) continue;
+		const oauth = obj(meta.oauthAccount);
+		out.push({
+			...candidate,
+			email: str(oauth.emailAddress).trim(),
+			plan: str(oauth.organizationRateLimitTier || oauth.organizationType)
+		});
+	}
+	return out;
+}
+/** `.claude-<n>` directories in $HOME, in numeric order. */
+function numberedDirs() {
+	try {
+		return fs.readdirSync(HOME).map((entry) => /^\.claude-(\d+)$/.exec(entry)?.[1]).filter((n) => !!n).sort((a, b) => Number(a) - Number(b));
+	} catch {
+		return [];
+	}
+}
+var credentials = (account) => readJson(path.join(account.dir, ".credentials.json"));
+/** Why an account has no live data — an expired token is the common case
+* and only that account's own CLI can refresh it. */
+function credentialNote(account) {
+	const cred = credentials(account);
+	if (!cred) return "no credentials — run: claude";
+	if (expired(obj(cred.claudeAiOauth).expiresAt)) return "token expired — use this Claude account to refresh";
+	return "usage unavailable";
+}
+function tokenExpired(account) {
+	const cred = credentials(account);
+	return cred ? expired(obj(cred.claudeAiOauth).expiresAt) : false;
+}
+async function fetchUsage$3(account) {
+	const token = str(obj(credentials(account)?.claudeAiOauth).accessToken);
+	if (!token) return null;
+	return obj(await fetchJson("https://api.anthropic.com/api/oauth/usage", { headers: {
+		Authorization: `Bearer ${token}`,
+		"anthropic-beta": "oauth-2025-04-20",
+		"User-Agent": "claude-cli",
+		Accept: "application/json"
+	} }));
+}
+/** The CLI's own last-seen utilization, written into .claude.json. Older and
+* coarser than the API, but it survives an expired token. */
+function claudeJsonFallback(account) {
+	const cached = readJson(account.meta)?.cachedUsageUtilization;
+	return cached && typeof cached === "object" ? obj(cached) : null;
+}
+/** The payload nests windows under `utilization` on some plans and inlines
+* them on others. */
+function utilRoot(data) {
+	const util = obj(data.utilization);
+	return "five_hour" in util || "limits" in util ? util : data;
+}
+function window$2(data, key) {
+	const win = obj(utilRoot(data)[key]);
+	const used = num(win.utilization);
+	return [used == null ? null : Math.trunc(used), str(win.resets_at) || null];
+}
+/** Fable gets its own weekly cap, listed as a model-scoped limit rather than
+* a top-level window. */
+function fableWindow(data) {
+	for (const entry of arr(utilRoot(data).limits)) {
+		const limit = obj(entry);
+		if (limit.kind !== "weekly_scoped") continue;
+		const model = obj(obj(limit.scope).model);
+		if (!str(model.display_name || model.id).toLowerCase().includes("fable")) continue;
+		const pct = num(limit.percent);
+		return [pct == null ? null : Math.trunc(pct), str(limit.resets_at) || null];
+	}
+	return [null, null];
+}
+function parseRow$4(account, data, source) {
+	const [five, fiveResets] = data ? window$2(data, "five_hour") : [null, null];
+	const [seven, sevenResets] = data ? window$2(data, "seven_day") : [null, null];
+	const [fable, fableResets] = data ? fableWindow(data) : [null, null];
+	const row = {
+		agent: account.label,
+		plan: account.plan || "claude",
+		account: maskEmail(account.email),
+		five_h: five,
+		five_h_resets: fiveResets,
+		seven_d: seven,
+		seven_d_resets: sevenResets,
+		fable,
+		fable_resets: fableResets,
+		source
+	};
+	if (five == null && seven == null && fable == null) row.note = credentialNote(account);
+	return row;
+}
+/** No OAuth session but an API key in play (helper, an approved key, or
+* the env): pay-as-you-go, nothing to meter. */
+function apiKeyMode$1(account) {
+	if (str(obj(credentials(account)?.claudeAiOauth).accessToken)) return false;
+	const settings = readJson(path.join(account.dir, "settings.json"));
+	const approved = obj(readJson(account.meta)?.customApiKeyResponses).approved;
+	return !!str(settings?.apiKeyHelper) || Array.isArray(approved) && approved.length > 0 || !!process.env.ANTHROPIC_API_KEY;
+}
+async function claudeRow(account) {
+	if (apiKeyMode$1(account)) return {
+		...blankRow(account.label, "api-key"),
+		plan: "API key",
+		note: API_KEY_NOTE
+	};
+	const loaded = await loadPayload(`claude${account.suffix}`, () => fetchUsage$3(account));
+	const fallback = loaded.payload ? null : claudeJsonFallback(account);
+	return markStale(parseRow$4(account, loaded.payload ?? fallback, fallback ? "claude.json" : loaded.source), account.label, tokenExpired(account), loaded.reason);
+}
+/** Claude Code takes its settings inline (`--settings` accepts a JSON
+* string), so the hooks travel in argv and nothing is written anywhere.
+* Its Notification hook fires for permission prompts and questions —
+* and for the idle nudge, which readClaudeStyle downgrades. */
+var claude = {
+	meta: meta_default$4,
+	launchFlags: () => ["--settings", JSON.stringify({ hooks: claudeStyleHooks([
+		["UserPromptSubmit", "working"],
+		["PreToolUse", "working"],
+		[
+			"Stop",
+			"waiting",
+			"done"
+		],
+		[
+			"Notification",
+			"waiting",
+			"attention"
+		]
+	]) })],
+	reportsWorking: () => true,
+	envPrefixes: [
+		"CLAUDE",
+		"CLAUDECODE",
+		"AI_AGENT"
+	],
+	readHook: readClaudeStyle,
+	usage: () => Promise.all(claudeAccounts().map((account) => claudeRow(account)))
+};
+//#endregion
+//#region src/agents/codex/usage.ts
+var AUTH$2 = path.join(HOME, ".codex", "auth.json");
+/** Live rate-limit windows from the endpoint the Codex CLI itself uses. */
+async function fetchUsage$2() {
+	const tokens = obj(readJson(AUTH$2)?.tokens);
+	const token = str(tokens.access_token);
+	if (!token) return null;
+	return obj(await fetchJson("https://chatgpt.com/backend-api/wham/usage", { headers: {
+		Authorization: `Bearer ${token}`,
+		"chatgpt-account-id": str(tokens.account_id),
+		"User-Agent": "codex-cli",
+		Accept: "application/json"
+	} }));
+}
+/** (used percent, reset) for whichever window is `seconds` long — the two
+* windows arrive as primary/secondary rather than named 5h / 7d. */
+function window$1(rateLimit, seconds) {
+	for (const key of ["primary_window", "secondary_window"]) {
+		const win = obj(rateLimit[key]);
+		if (num(win.limit_window_seconds) !== seconds) continue;
+		const used = num(win.used_percent);
+		return [used == null ? null : Math.trunc(used), isoFromEpoch(win.reset_at)];
+	}
+	return [null, null];
+}
+function parseRow$3(payload, source) {
+	const rateLimit = obj(payload.rate_limit);
+	const [five, fiveResets] = window$1(rateLimit, 18e3);
+	const [seven, sevenResets] = window$1(rateLimit, 604800);
+	return {
+		agent: "codex",
+		plan: str(payload.plan_type) || "codex",
+		account: maskEmail(str(payload.email)),
+		five_h: five,
+		five_h_resets: fiveResets,
+		seven_d: seven,
+		seven_d_resets: sevenResets,
+		fable: null,
+		fable_resets: null,
+		source
+	};
+}
+/** Signed in with an API key rather than a ChatGPT plan: pay-as-you-go,
+* no rate-limit windows to draw. */
+function apiKeyMode() {
+	const auth = readJson(AUTH$2);
+	return !!auth && (str(auth.auth_mode) === "apikey" || !obj(auth.tokens).access_token && !!auth.OPENAI_API_KEY);
+}
+async function codexRow() {
+	if (apiKeyMode()) return {
+		...blankRow("codex", "api-key"),
+		plan: "API key",
+		note: API_KEY_NOTE
+	};
+	const { payload, source, reason } = await loadPayload("codex", fetchUsage$2);
+	const missingAuth = fs.existsSync(AUTH$2) ? void 0 : noAuthReason("codex");
+	return markStale(payload ? parseRow$3(payload, source) : {
+		...blankRow("codex", source),
+		note: missingAuth ?? "usage unavailable"
+	}, "codex", void 0, missingAuth ?? reason);
+}
+//#endregion
+//#region src/agents/codex/index.ts
+var meta$3 = meta_default$3;
+/** Codex hook events → state. PermissionRequest fires just before the
+* approval prompt (PostToolUse clears it once the approved call has run,
+* or the next PreToolUse does if a reviewer auto-decided). */
+var HOOKS$2 = claudeStyleHooks([
 	["UserPromptSubmit", "working"],
 	["PreToolUse", "working"],
 	["PostToolUse", "working"],
 	[
-		"Notification",
+		"PermissionRequest",
 		"waiting",
-		"attention",
-		"permission_prompt|elicitation_dialog"
+		"attention"
 	],
 	[
 		"Stop",
 		"waiting",
 		"done"
-	],
-	[
-		"StopCancelled",
-		"waiting",
-		"done"
-	],
-	[
-		"StopFailure",
-		"waiting",
-		"attention"
 	]
-];
-/** Grok discovers hooks from `~/.grok/hooks-paths`: one absolute path per
-* line, the registry its own `/hooks-add` command appends to. work's hook
-* file is kept in the data dir — the commands read the port from env, so
-* the file never needs rewriting — and registered once. Returns false when
-* the registry cannot be written (hooks then simply don't report). */
-function grokHooksRegistered() {
-	const file = path.join(config.dataDir, "grok-hooks.json");
-	const hooks = {};
-	for (const [event, state, reason, matcher] of GROK_HOOKS) hooks[event] = [{
-		...matcher ? { matcher } : {},
+]);
+/** Codex only runs hooks it trusts. Trust is a hash of the normalized hook
+* kept in config (`hooks.state.<key>.trusted_hash`), and both the hooks and
+* that state are read from the `-c` override layer too — so the launch flags
+* can carry their own trust without touching ~/.codex/config.toml.
+* Mirrors codex-rs/hooks/src/engine/discovery.rs (hook_hash, hook_key,
+* normalized Command config: timeout defaults to 600, async false, None
+* fields omitted) and codex-rs/config/src/fingerprint.rs (sha256 of
+* key-sorted JSON). scripts/smoke.mjs pins it against a hash Codex wrote. */
+function codexHookTrustHash(event, command) {
+	const identity = {
+		event_name: hookKeyLabel(event),
 		hooks: [{
-			type: "command",
-			command: stateCurl(state, reason),
-			timeout: 5
+			async: false,
+			command,
+			timeout: 600,
+			type: "command"
 		}]
-	}];
-	writeIfChanged(file, JSON.stringify({ hooks }, null, 2));
-	const registry = path.join(process.env.HOME || "", ".grok", "hooks-paths");
+	};
+	return "sha256:" + createHash("sha256").update(JSON.stringify(identity)).digest("hex");
+}
+/** `PermissionRequest` → `permission_request` (codex-rs/hooks/src/lib.rs). */
+function hookKeyLabel(event) {
+	return event.replace(/([a-z])([A-Z])/g, "$1_$2").toLowerCase();
+}
+/** Synthetic path Codex gives the `-c` override layer when keying hook state. */
+var SESSION_FLAGS_PATH = "/<session-flags>/config.toml";
+/** `-c` overrides that install work's state hooks and trust them. */
+function launchFlags() {
+	const flags = [];
+	const state = [];
+	for (const [event, groups] of Object.entries(HOOKS$2)) {
+		const command = groups[0].hooks[0].command;
+		flags.push("-c", `hooks.${event}=[{hooks=[{type="command",command=${JSON.stringify(command)}}]}]`);
+		const key = `${SESSION_FLAGS_PATH}:${hookKeyLabel(event)}:0:0`;
+		state.push(`${JSON.stringify(key)}={trusted_hash=${JSON.stringify(codexHookTrustHash(event, command))}}`);
+	}
+	flags.push("-c", `hooks.state={${state.join(",")}}`);
+	return flags;
+}
+function readHook$2(p, reported) {
+	const read = readClaudeStyle(p, reported);
+	if (!read.summary && p.hook_event_name === "PermissionRequest") {
+		const input = p.tool_input;
+		const what = str$1(input?.command) || str$1(p.tool_name);
+		read.summary = what ? cleanSummary(`Approve: ${what}`) : "Waiting for permission";
+	}
+	return read;
+}
+var codex = {
+	meta: meta$3,
+	launchFlags,
+	reportsWorking: () => true,
+	envPrefixes: ["CODEX_"],
+	pathDirs: ["~/.codex/bin"],
+	readHook: readHook$2,
+	usage: () => codexRow().then((row) => [row])
+};
+//#endregion
+//#region src/agents/copilot/usage.ts
+var USER_API = "https://api.github.com/copilot_internal/user";
+var HOSTS = path.join(process.env.XDG_CONFIG_HOME || path.join(HOME, ".config"), "gh", "hosts.yml");
+var SESSION_DB = path.join(HOME, ".copilot", "session-store.db");
+/** github.com's `oauth_token` straight out of gh's own hosts.yml.
+*
+* Deliberately not a YAML parse (no dependency): track the current top-level
+* host key by indentation and take the first token beneath github.com. */
+function hostsToken() {
+	let text;
 	try {
-		let current = "";
+		text = fs.readFileSync(HOSTS, "utf8");
+	} catch {
+		return null;
+	}
+	let host = "";
+	for (const line of text.split("\n")) {
+		if (line[0]?.trim() && line.trimEnd().endsWith(":")) {
+			host = line.trim().replace(/:$/, "");
+			continue;
+		}
+		if (host !== "github.com") continue;
+		const match = /^\s+oauth_token:\s*(\S+)/.exec(line);
+		if (match) return match[1] ?? null;
+	}
+	return null;
+}
+/** The Copilot CLI keeps its own auth in the OS keyring, so reuse the token
+* gh manages. Copilot entitlement is account-scoped, so any valid token for
+* the entitled user reads the quota. */
+async function token() {
+	for (const key of ["GH_TOKEN", "GITHUB_TOKEN"]) {
+		const value = process.env[key]?.trim();
+		if (value) return value;
+	}
+	const fromHosts = hostsToken();
+	if (fromHosts) return fromHosts;
+	try {
+		return await run$1("gh", ["auth", "token"]) || null;
+	} catch {
+		return null;
+	}
+}
+async function fetchUsage$1(auth) {
+	if (!auth) return null;
+	const data = obj(await fetchJson(USER_API, { headers: {
+		Authorization: `token ${auth}`,
+		"User-Agent": "GitHubCopilotCLI",
+		Accept: "application/json"
+	} }));
+	return data.quota_snapshots == null ? null : data;
+}
+/** Billing period start = one month before the quota reset date. */
+function periodStart(resetIso) {
+	const reset = new Date(resetIso);
+	if (Number.isNaN(reset.getTime())) return null;
+	const year = reset.getUTCMonth() === 0 ? reset.getUTCFullYear() - 1 : reset.getUTCFullYear();
+	const month = reset.getUTCMonth() === 0 ? 12 : reset.getUTCMonth();
+	const day = Math.min(reset.getUTCDate(), 28);
+	return `${String(year).padStart(4, "0")}-${String(month).padStart(2, "0")}-${String(day).padStart(2, "0")}`;
+}
+/** Credits this machine's Copilot CLI has spent in the current period.
+*
+* GitHub's own quota snapshot is batched — it can still read `credits_used: 0`
+* minutes after a session that plainly spent credits — so the CLI's local
+* ledger is the only number that moves in real time. It sees this machine
+* only, which is why the caller floors it with upstream rather than trusting
+* it alone. */
+function localCredits(start) {
+	if (!start || !fs.existsSync(SESSION_DB)) return null;
+	try {
+		const db = new DatabaseSync(SESSION_DB, { readOnly: true });
 		try {
-			current = fs.readFileSync(registry, "utf8");
-		} catch {}
-		if (!current.split("\n").some((line) => line.trim() === file)) {
-			fs.mkdirSync(path.dirname(registry), { recursive: true });
-			fs.appendFileSync(registry, `${current && !current.endsWith("\n") ? "\n" : ""}${file}\n`);
+			const nano = num(db.prepare("select sum(total_nano_aiu) as nano from assistant_usage_events where created_at >= ?").get(start)?.nano);
+			return nano == null ? 0 : nano / 1e9;
+		} finally {
+			db.close();
 		}
-		grokHooksOk = true;
 	} catch {
-		grokHooksOk = false;
+		return null;
 	}
-	return grokHooksOk;
 }
+function parseRow$2(payload, source) {
+	const premium = obj(obj(payload.quota_snapshots).premium_interactions);
+	const reset = str(payload.quota_reset_date_utc || payload.quota_reset_date) || null;
+	let pct = null;
+	let note;
+	if (!Object.keys(premium).length || !premium.has_quota) note = "no premium quota";
+	else if (premium.unlimited) note = "unlimited premium requests";
+	else {
+		const remaining = num(premium.percent_remaining);
+		if (remaining != null) pct = 100 - remaining;
+		const entitlement = num(premium.entitlement) ?? 0;
+		const used = reset ? localCredits(periodStart(reset)) : null;
+		if (entitlement > 0 && used != null) {
+			const localPct = 100 * used / entitlement;
+			if (pct == null || localPct > pct) {
+				pct = localPct;
+				source = `${source}+local`;
+			}
+		}
+	}
+	if (pct != null) pct = Math.round(pct * 1e3) / 1e3;
+	const row = {
+		agent: "copilot",
+		plan: str(payload.copilot_plan) || "copilot",
+		account: str(payload.login) || "—",
+		five_h: null,
+		five_h_resets: null,
+		seven_d: pct,
+		seven_d_resets: pct == null ? null : reset,
+		seven_d_label: "month",
+		fable: null,
+		fable_resets: null,
+		source
+	};
+	if (note) row.note = note;
+	return row;
+}
+async function copilotRow() {
+	const auth = await token();
+	const { payload, source, reason } = await loadPayload("copilot", () => fetchUsage$1(auth));
+	const missingAuth = auth ? void 0 : noAuthReason("copilot");
+	return markStale(payload ? parseRow$2(payload, source) : {
+		...blankRow("copilot", source),
+		note: missingAuth ?? "usage unavailable"
+	}, "copilot", void 0, missingAuth ?? reason);
+}
+//#endregion
+//#region src/agents/copilot/index.ts
+var meta$2 = meta_default$2;
 /** Copilot hook events (Claude-format names, which make it emit Claude's
-* snake_case payloads: hook_event_name, notification_type…) → state.
-* Notification rather than PermissionRequest for "needs input": the latter
-* fires before Copilot's own allow rules, the former only once a prompt is
-* actually on screen. Its Stop payload has no last message; the server
-* reads it from transcript_path (see agent-state.ts). */
-var COPILOT_HOOKS = [
+* snake_case payloads) → state. Notification rather than PermissionRequest
+* for "needs input": the latter fires before Copilot's own allow rules, the
+* former only once a prompt is actually on screen. */
+var HOOKS$1 = claudeStyleHooks([
 	["UserPromptSubmit", "working"],
 	["PreToolUse", "working"],
 	["PostToolUse", "working"],
@@ -6626,25 +7230,20 @@ var COPILOT_HOOKS = [
 		"waiting",
 		"done"
 	]
-];
+]);
 /** Copilot has no flag or env for inline hooks; the file-free option is a
 * plugin directory passed with `--plugin-dir`, which loads without a trust
 * prompt. The plugin is two files kept under work's data dir and rewritten
 * only when their content changes (a stale hook would report to the wrong
-* port after a config change). Returns the directory. */
-function copilotPluginDir() {
+* port after a config change). */
+function pluginDir() {
 	const dir = path.join(config.dataDir, "copilot-plugin");
-	const hooks = {};
-	for (const [event, state, reason] of COPILOT_HOOKS) hooks[event] = [{ hooks: [{
-		type: "command",
-		command: stateCurl(state, reason)
-	}] }];
 	writeIfChanged(path.join(dir, ".claude-plugin", "plugin.json"), JSON.stringify({
 		name: "work-session-state",
 		version: "1",
 		description: "Reports this session's working / needs-input / done state to work."
 	}, null, 2));
-	writeIfChanged(path.join(dir, "hooks", "hooks.json"), JSON.stringify({ hooks }, null, 2));
+	writeIfChanged(path.join(dir, "hooks", "hooks.json"), JSON.stringify({ hooks: HOOKS$1 }, null, 2));
 	return dir;
 }
 function writeIfChanged(file, content) {
@@ -6654,89 +7253,401 @@ function writeIfChanged(file, content) {
 	fs.mkdirSync(path.dirname(file), { recursive: true });
 	fs.writeFileSync(file, content);
 }
-/** Codex hook events → the state each reports. Same shape as Claude's:
-* a prompt or a tool call means working, Stop means the turn is done,
-* PermissionRequest means it is about to ask (fires just before the
-* approval prompt; PostToolUse clears it once the approved call has run,
-* or the next PreToolUse does if a reviewer auto-decided). */
-var CODEX_HOOKS = [
+/** Copilot routes shell and inbox chatter through the same Notification
+* hook; those are neither "needs input" nor "done" and must be dropped. */
+var CHATTER = /* @__PURE__ */ new Set([
+	"shell_completed",
+	"shell_detached_completed",
+	"new_inbox_message",
+	"instruction_discovered",
+	"factory_completed",
+	"unclassified"
+]);
+function readHook$1(p, reported) {
+	if (CHATTER.has(notificationType(p))) return { ignore: true };
+	const read = readClaudeStyle(p, reported);
+	if (!read.summary && reported === "done") read.summary = lastMessageFromTranscript(p);
+	return read;
+}
+/** The last non-empty `assistant.message` in Copilot's events.jsonl. Reads
+* the tail only — transcripts grow for the life of a session. */
+function lastMessageFromTranscript(p) {
+	const file = p.transcript_path;
+	if (typeof file !== "string" || !file.endsWith("events.jsonl")) return void 0;
+	try {
+		const fd = fs.openSync(file, "r");
+		try {
+			const size = fs.fstatSync(fd).size;
+			const len = Math.min(size, 65536);
+			const buf = Buffer.alloc(len);
+			fs.readSync(fd, buf, 0, len, size - len);
+			const lines = buf.toString("utf8").split("\n");
+			for (let i = lines.length - 1; i >= 0; i--) {
+				if (!lines[i].includes("\"assistant.message\"")) continue;
+				try {
+					const ev = JSON.parse(lines[i]);
+					const content = ev.type === "assistant.message" ? ev.data?.content : void 0;
+					if (typeof content === "string" && content.trim()) return cleanSummary(content);
+				} catch {}
+			}
+		} finally {
+			fs.closeSync(fd);
+		}
+	} catch {}
+}
+var copilot = {
+	meta: meta$2,
+	launchFlags: () => ["--plugin-dir", pluginDir()],
+	reportsWorking: () => true,
+	envPrefixes: ["COPILOT_"],
+	readHook: readHook$1,
+	usage: () => copilotRow().then((row) => [row])
+};
+//#endregion
+//#region src/agents/cursor/usage.ts
+var AUTH$1 = path.join(HOME, ".config", "cursor", "auth.json");
+var CLI_CONFIG = path.join(HOME, ".cursor", "cli-config.json");
+var API = "https://api2.cursor.sh";
+var WWW = "https://cursor.com";
+function cursorAuth() {
+	const auth = readJson(AUTH$1);
+	if (!auth) return null;
+	const token = str(auth.accessToken || auth.access_token);
+	if (!token) return null;
+	let sub = "";
+	try {
+		sub = str(obj(JSON.parse(Buffer.from(str(token.split(".")[1]), "base64url").toString())).sub);
+	} catch {}
+	return {
+		token,
+		sub,
+		email: str(obj(readJson(CLI_CONFIG)?.authInfo).email).trim()
+	};
+}
+var dashboardPost = async (token, method) => obj(await fetchJson(`${API}/aiserver.v1.DashboardService/${method}`, {
+	method: "POST",
+	body: "{}",
+	headers: {
+		Authorization: `Bearer ${token}`,
+		"Content-Type": "application/json",
+		Accept: "application/json",
+		"Connect-Protocol-Version": "1",
+		"User-Agent": "cursor-agent"
+	}
+}));
+/** Enterprise/team monthly pool, which the dashboard service leaves empty —
+* it is only readable with the web session cookie. */
+async function usageSummary(auth) {
+	if (!auth.sub) return null;
+	const cookie = `WorkosCursorSessionToken=${encodeURIComponent(`${auth.sub}::${auth.token}`)}`;
+	return obj(await fetchJson(`${WWW}/api/usage-summary`, { headers: {
+		Cookie: cookie,
+		Accept: "application/json",
+		"User-Agent": "Mozilla/5.0"
+	} }));
+}
+/** Prefer the dashboard's planUsage (Pro/Ultra); fall back to the web
+* summary for Enterprise/team accounts, where planUsage comes back empty.
+* Each call is optional on its own, so one failing endpoint must not hide a
+* number another would have produced — but if nothing lands, the first
+* failure is rethrown so the row can say why. */
+async function fetchUsage(auth) {
+	let failure;
+	const soft = async (load) => {
+		try {
+			return await load();
+		} catch (err) {
+			failure ??= err;
+			return null;
+		}
+	};
+	const [period, planInfo] = await Promise.all([soft(() => dashboardPost(auth.token, "GetCurrentPeriodUsage")), soft(() => dashboardPost(auth.token, "GetPlanInfo"))]);
+	const planUsage = obj(obj(period).planUsage);
+	const summary = num(planUsage.limit) ? null : await soft(() => usageSummary(auth));
+	if (!Object.keys(planUsage).length && !summary) {
+		if (failure) throw failure;
+		return null;
+	}
+	return {
+		period: obj(period),
+		plan_info: obj(obj(planInfo).planInfo),
+		summary
+	};
+}
+function parseRow$1(payload, auth, source) {
+	const period = obj(payload.period);
+	const planInfo = obj(payload.plan_info);
+	const summary = obj(payload.summary);
+	let pct = num(obj(period.planUsage).totalPercentUsed);
+	let resets = isoFromEpoch(period.billingCycleEnd);
+	if (pct == null) {
+		const overall = obj(obj(summary.individualUsage).overall);
+		const used = num(overall.used);
+		const limit = num(overall.limit);
+		if (used != null && limit) pct = Math.round(100 * used / limit);
+		resets = str(summary.billingCycleEnd) || resets;
+	}
+	return {
+		agent: "cursor",
+		plan: str(planInfo.planName || summary.membershipType) || "cursor",
+		account: auth?.email ? maskEmail(auth.email) : "—",
+		five_h: null,
+		five_h_resets: null,
+		seven_d: pct == null ? null : Math.trunc(pct),
+		seven_d_resets: resets,
+		seven_d_label: "month",
+		fable: null,
+		fable_resets: null,
+		source
+	};
+}
+async function cursorRow() {
+	const auth = cursorAuth();
+	const { payload, source, reason } = await loadPayload("cursor", () => auth ? fetchUsage(auth) : Promise.resolve(null));
+	const missingAuth = auth ? void 0 : noAuthReason("cursor");
+	return markStale(payload ? parseRow$1(payload, auth, source) : {
+		...blankRow("cursor", source),
+		note: missingAuth ?? "usage unavailable"
+	}, "cursor", void 0, missingAuth ?? reason);
+}
+/** Cursor's plugin-dir hooks can't carry stop/prompt events (those load only
+* from ~/.cursor/hooks.json) and it has no permission-prompt hook at all,
+* so its sessions get working/idle from pane activity (see scraper.ts) and
+* nothing else — a stopped turn and a question look the same. */
+var cursor = {
+	meta: meta_default$1,
+	usage: () => cursorRow().then((row) => [row])
+};
+//#endregion
+//#region src/agents/grok/usage.ts
+var AUTH = path.join(HOME, ".grok", "auth.json");
+var LOG = path.join(HOME, ".grok", "logs", "unified.jsonl");
+/** The newest usable entry in ~/.grok/auth.json, which is keyed by scope
+* rather than being a single credential. */
+function grokAuth() {
+	const auth = readJson(AUTH);
+	if (!auth) return null;
+	const entry = Object.values(auth).map(obj).filter((entry) => str(entry.key) || str(entry.access_token)).sort((a, b) => str(b.create_time || b.expires_at).localeCompare(str(a.create_time || a.expires_at)))[0];
+	if (!entry) return null;
+	return {
+		token: str(entry.key) || str(entry.access_token),
+		email: str(entry.email),
+		expiresAt: entry.expires_at
+	};
+}
+/** Weekly credit pool from the Grok Build CLI's own proxy. */
+async function fetchBilling(token) {
+	const data = obj(await fetchJson("https://cli-chat-proxy.grok.com/v1/billing?format=credits", { headers: {
+		Authorization: `Bearer ${token}`,
+		Accept: "application/json",
+		"User-Agent": "grok-cli",
+		"x-grok-client-mode": "cli"
+	} }));
+	return data.config ? data : null;
+}
+/** Fallback: the last credits config the CLI logged, normalized to the live
+* API's shape. Reads only the tail — this log grows without bound. */
+function billingFromLogs() {
+	let chunk;
+	try {
+		const { size } = fs.statSync(LOG);
+		const start = Math.max(0, size - 512e3);
+		const fd = fs.openSync(LOG, "r");
+		try {
+			const buf = Buffer.alloc(size - start);
+			fs.readSync(fd, buf, 0, buf.length, start);
+			chunk = buf.toString("utf8");
+		} finally {
+			fs.closeSync(fd);
+		}
+	} catch {
+		return null;
+	}
+	let latest = null;
+	for (const line of chunk.split("\n")) {
+		if (!line.includes("billing: fetched credits config")) continue;
+		try {
+			const entry = obj(JSON.parse(line));
+			if (entry.msg === "billing: fetched credits config") latest = entry;
+		} catch {}
+	}
+	if (!latest) return null;
+	const ctx = obj(latest.ctx);
+	const cfg = obj(ctx.config);
+	if (!Object.keys(cfg).length) return null;
+	return {
+		config: cfg,
+		subscriptionTier: ctx.subscriptionTier
+	};
+}
+function parseRow(payload, auth, source) {
+	const cfg = payload.config ? obj(payload.config) : payload;
+	const pct = num(cfg.creditUsagePercent);
+	let productPct = null;
+	for (const entry of arr(cfg.productUsage)) {
+		const usage = obj(entry);
+		if (!str(usage.product).toLowerCase().includes("grok")) continue;
+		productPct = num(usage.usagePercent);
+		break;
+	}
+	const used = pct ?? productPct;
+	const period = obj(cfg.currentPeriod);
+	return {
+		agent: "grok",
+		plan: str(payload.subscriptionTier || cfg.subscriptionTier) || "Grok Build",
+		account: auth?.email ? maskEmail(auth.email) : "—",
+		five_h: null,
+		five_h_resets: null,
+		seven_d: used == null ? null : Math.trunc(used),
+		seven_d_resets: str(period.end || cfg.billingPeriodEnd) || null,
+		seven_d_label: /MONTH/i.test(str(period.type)) ? "month" : "7d",
+		fable: null,
+		fable_resets: null,
+		source
+	};
+}
+async function grokRow() {
+	const auth = grokAuth();
+	const loaded = await loadPayload("grok", () => auth?.token ? fetchBilling(auth.token) : Promise.resolve(null));
+	const fromLog = loaded.payload ? null : billingFromLogs();
+	const payload = loaded.payload ?? fromLog;
+	const source = fromLog ? "unified.jsonl" : loaded.source;
+	const missingAuth = auth?.token ? void 0 : noAuthReason("grok");
+	return markStale(payload ? parseRow(payload, auth, source) : {
+		...blankRow("grok", source),
+		note: missingAuth ?? "usage unavailable"
+	}, "grok", expired(auth?.expiresAt), missingAuth ?? loaded.reason);
+}
+//#endregion
+//#region src/agents/grok/index.ts
+var meta = meta_default;
+/** Grok hook events → state. Payloads are camelCase (hookEventName,
+* notificationType, lastAssistantMessage). Notification is matched to the
+* two kinds that mean a prompt is on screen; Stop fires on shutdown too,
+* with a reason readHook uses to tell a finished turn from a closed
+* session. */
+var HOOKS = claudeStyleHooks([
 	["UserPromptSubmit", "working"],
 	["PreToolUse", "working"],
 	["PostToolUse", "working"],
 	[
-		"PermissionRequest",
+		"Notification",
 		"waiting",
-		"attention"
+		"attention",
+		"permission_prompt|elicitation_dialog"
 	],
 	[
 		"Stop",
 		"waiting",
 		"done"
+	],
+	[
+		"StopCancelled",
+		"waiting",
+		"done"
+	],
+	[
+		"StopFailure",
+		"waiting",
+		"attention"
 	]
-];
-/** Codex only runs hooks it trusts. Trust is a hash of the normalized hook
-* kept in config (`hooks.state.<key>.trusted_hash`), and both the hooks and
-* that state are read from the `-c` override layer too — so the launch flags
-* can carry their own trust without touching ~/.codex/config.toml.
-* Mirrors codex-rs/hooks/src/engine/discovery.rs (hook_hash, hook_key,
-* normalized Command config: timeout defaults to 600, async false, None
-* fields omitted) and codex-rs/config/src/fingerprint.rs (sha256 of
-* key-sorted JSON). Verified against real trusted_hash entries. */
-function codexHookTrustHash(event, command) {
-	const identity = {
-		event_name: codexHookKeyLabel(event),
-		hooks: [{
-			async: false,
-			command,
-			timeout: 600,
-			type: "command"
-		}]
-	};
-	return "sha256:" + createHash("sha256").update(JSON.stringify(identity)).digest("hex");
-}
-/** `PermissionRequest` → `permission_request` (codex-rs/hooks/src/lib.rs). */
-function codexHookKeyLabel(event) {
-	return event.replace(/([a-z])([A-Z])/g, "$1_$2").toLowerCase();
+], { timeout: 5 });
+/** Whether Grok's hook registry took work's hook file — without it Grok
+* reports nothing and the screen has to speak for it. */
+var registered = false;
+/** Grok has no flag for hooks. It discovers them from `~/.grok/hooks-paths`:
+* one absolute path per line, the registry its own `/hooks-add` command
+* appends to. work's hook file is kept in the data dir — the commands read
+* the port from env, so the file never needs rewriting — and named there
+* once. The one line in that registry is the only thing work writes
+* outside its own dir for any agent. */
+function registerHooks() {
+	const file = path.join(config.dataDir, "grok-hooks.json");
+	writeIfChanged(file, JSON.stringify({ hooks: HOOKS }, null, 2));
+	const registry = path.join(process.env.HOME || "", ".grok", "hooks-paths");
+	try {
+		let current = "";
+		try {
+			current = fs.readFileSync(registry, "utf8");
+		} catch {}
+		if (!current.split("\n").some((line) => line.trim() === file)) {
+			fs.mkdirSync(path.dirname(registry), { recursive: true });
+			fs.appendFileSync(registry, `${current && !current.endsWith("\n") ? "\n" : ""}${file}\n`);
+		}
+		registered = true;
+	} catch {
+		registered = false;
+	}
+	return registered;
 }
-/** Synthetic path Codex gives the `-c` override layer when keying hook state. */
-var CODEX_SESSION_FLAGS_PATH = "/<session-flags>/config.toml";
-/** `-c` overrides that install work's state hooks in a Codex session. */
-function codexHookFlags() {
-	const flags = [];
-	const state = [];
-	for (const [event, st, reason] of CODEX_HOOKS) {
-		const command = stateCurl(st, reason);
-		flags.push("-c", `hooks.${event}=[{hooks=[{type="command",command=${JSON.stringify(command)}}]}]`);
-		const key = `${CODEX_SESSION_FLAGS_PATH}:${codexHookKeyLabel(event)}:0:0`;
-		state.push(`${JSON.stringify(key)}={trusted_hash=${JSON.stringify(codexHookTrustHash(event, command))}}`);
+function readHook(p, reported) {
+	if (str$1(p.subagentType)) return { ignore: true };
+	if (p.hookEventName === "stop" && str$1(p.reason) && p.reason !== "end_turn") return { ignore: true };
+	const read = readClaudeStyle(p, reported);
+	if (!read.summary) {
+		const err = str$1(p.errorDetails) || str$1(p.error);
+		if (err) read.summary = cleanSummary(err);
 	}
-	flags.push("-c", `hooks.state={${state.join(",")}}`);
-	return flags;
+	return read;
 }
-/** Family of an instance id (`claude2` → `claude`); flags and hooks are
-* per family, every numbered copy behaves the same. */
-function agentFamily(agent) {
-	return agent ? parseAgentId(agent)?.family.id : void 0;
+//#endregion
+//#region src/agents/index.ts
+/** Every agent family work integrates with, one folder each. Order is the
+* order Settings and pickers show; the folder's meta.json describes it,
+* index.ts drives it, usage.ts meters it. */
+var AGENTS = [
+	claude,
+	codex,
+	copilot,
+	cursor,
+	{
+		meta,
+		launchFlags: () => {
+			registerHooks();
+			return [];
+		},
+		reportsWorking: () => registered,
+		promptAsArgv: true,
+		envPrefixes: ["GROK_"],
+		pathDirs: ["~/.grok/bin"],
+		readHook,
+		usage: () => grokRow().then((row) => [row])
+	}
+];
+var byFamily = new Map(AGENTS.map((a) => [a.meta.id, a]));
+/** Integration for an instance id (`claude2` → claude), if any. */
+function agentFor(id) {
+	return id ? byFamily.get(agentFamily(id)) : void 0;
 }
 /** Extra argv for an agent CLI so it reports working/waiting state. */
-function agentLaunchFlags(agent) {
-	const family = agentFamily(agent);
-	if (family === "claude") {
-		const hook = (state, reason) => [{ hooks: [{
-			type: "command",
-			command: stateCurl(state, reason)
-		}] }];
-		return ["--settings", JSON.stringify({ hooks: {
-			UserPromptSubmit: hook("working"),
-			PreToolUse: hook("working"),
-			Stop: hook("waiting", "done"),
-			Notification: hook("waiting", "attention")
-		} })];
-	}
-	if (family === "codex") return codexHookFlags();
-	if (family === "copilot") return ["--plugin-dir", copilotPluginDir()];
-	if (family === "grok") grokHooksRegistered();
-	return [];
+function agentLaunchFlags(id) {
+	return agentFor(id)?.launchFlags?.() ?? [];
+}
+/** Whether the agent says when it *starts* working, not just when it stops
+* — believing the screen over that costs it the state its own hook just
+* reported, so the pane scraper leaves these alone. */
+function reportsWorking(id) {
+	return agentFor(id)?.reportsWorking?.() ?? false;
+}
+/** Cold launch takes the first prompt as argv rather than a paste. */
+function promptAsArgv(id) {
+	return agentFor(id)?.promptAsArgv ?? false;
+}
+/** Env var prefixes no fresh pane may inherit (the app may itself be
+* running inside one of these agents). */
+function agentEnvPrefixes() {
+	return AGENTS.flatMap((a) => a.envPrefixes ?? []);
+}
+/** Install dirs to put on a spawned pane's PATH (`~` = home). */
+function agentPathDirs(home) {
+	return AGENTS.flatMap((a) => (a.pathDirs ?? []).map((d) => d.replace(/^~/, home)));
+}
+/** What a hook payload the session's CLI POSTed means. Unknown families
+* (or an unreadable body) keep the reported reason and carry no summary. */
+function readHookPayload(id, payload, reported) {
+	if (!payload || typeof payload !== "object") return { reason: reported };
+	const read = agentFor(id)?.readHook;
+	return read ? read(payload, reported) : { reason: reported };
 }
 //#endregion
 //#region src/server/sessions.ts
@@ -6829,7 +7740,7 @@ async function sendToSession(id, text, size) {
 		"-t",
 		name
 	], env).then(() => true, () => false)) {
-		if (agentFamily(session.agent) === "grok") {
+		if (promptAsArgv(session.agent)) {
 			await tmux(newSessionArgs(session, wsPath, "-d", text, size), env);
 			markTmuxStarted(id);
 			return;
@@ -7038,17 +7949,14 @@ function shellQuote(word) {
 * inherit this env, and a service manager's PATH is usually minimal. */
 function cleanEnv() {
 	const env = {};
+	const agentPrefix = new RegExp(`^(${agentEnvPrefixes().join("|")})`);
 	for (const [key, value] of Object.entries(process.env)) {
 		if (value === void 0) continue;
-		if (/^(CLAUDE|CLAUDECODE|AI_AGENT|CODEX_|GROK_|COPILOT_)/.test(key)) continue;
+		if (agentPrefix.test(key)) continue;
 		env[key] = value;
 	}
 	const home = process.env.HOME || "";
-	const bins = [
-		`${home}/.local/bin`,
-		`${home}/.grok/bin`,
-		`${home}/.codex/bin`
-	];
+	const bins = [`${home}/.local/bin`, ...agentPathDirs(home)];
 	const parts = (env.PATH || "").split(":");
 	env.PATH = [...parts, ...bins.filter((bin) => !parts.includes(bin))].join(":");
 	if (!/utf-?8/i.test(env.LC_ALL || env.LC_CTYPE || env.LANG || "")) {
@@ -7085,4 +7993,4 @@ function sleep(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
 //#endregion
-export { all as $, saveSubscription as A, preferredAgent as B, setAgentPhase as C, summaryFromTranscript as D, summaryFromHookPayload as E, agentChoices as F, ghKnownHosts as G, setPref as H, allPrefs as I, which as J, miseVersions as K, disabledAgents as L, subscribe as M, subscriberCount as N, deleteSubscription as O, subscriberJoins as P, toolById as Q, enabledAgents as R, reasonFromHookPayload as S, setSessionViewers as T, setSetting as U, setDisabledAgents as V, doctor as W, TOOLS as X, DEFAULT_GITHUB_HOST as Y, agentById as Z, tmuxName as _, ensureTmuxServer as a, git as at, clearAgentPhase as b, killWorkspaceSessions as c, config as ct, newSessionArgs as d, db as et, notifySessionsChanged as f, sessionStates as g, sendToSession as h, disposeSessions as i, gh as it, publish as j, pushPublicKey as k, listSessions as l, renameSession as m, clearTmuxStarted as n, workspacePath as nt, getSession as o, run$1 as ot, panePids as p, setupPath as q, createSession as r, TMUX_SOCKET as rt, killSession as s, tmux as st, cleanEnv as t, get as tt, markTmuxStarted as u, tmuxWasStarted as v, setScrapedPhase as w, ignoreHookPayload as x, reportsWorking as y, getSetting as z };
+export { DEFAULT_GITHUB_HOST as $, setScrapedPhase as A, allPrefs as B, agentBadge as C, agentMeta as D, agentLabel as E, publish as F, setDisabledAgents as G, enabledAgents as H, subscribe as I, doctor as J, setPref as K, subscriberCount as L, deleteSubscription as M, pushPublicKey as N, clearAgentPhase as O, saveSubscription as P, which as Q, subscriberJoins as R, blankRow as S, agentFromCommand as T, getSetting as U, disabledAgents as V, preferredAgent as W, miseVersions as X, ghKnownHosts as Y, setupPath as Z, tmuxName as _, ensureTmuxServer as a, get as at, readHookPayload as b, killWorkspaceSessions as c, gh as ct, newSessionArgs as d, tmux as dt, TOOLS as et, notifySessionsChanged as f, config as ft, sessionStates as g, sendToSession as h, disposeSessions as i, db as it, setSessionViewers as j, setAgentPhase as k, listSessions as l, git as lt, renameSession as m, clearTmuxStarted as n, toolById as nt, getSession as o, workspacePath as ot, panePids as p, setSetting as q, createSession as r, all as rt, killSession as s, TMUX_SOCKET as st, cleanEnv as t, agentById as tt, markTmuxStarted as u, run$1 as ut, tmuxWasStarted as v, agentFamily as w, reportsWorking as x, AGENTS as y, agentChoices as z };