@evident-ai/cli 3.4.1-dev.bcdc457 → 3.4.1-dev.c03b461

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { createRequire } from "module";
+import { createRequire as createRequire2 } from "module";
 import { Command } from "commander";
 
 // src/commands/login.ts
@@ -371,14 +371,14 @@ function blank() {
   console.log();
 }
 function waitForEnter(prompt = "Press Enter to continue...") {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     process.stdout.write(chalk.dim(prompt));
     const handler = () => {
       process.stdin.removeListener("data", handler);
       process.stdin.setRawMode?.(false);
       process.stdin.pause();
       console.log();
-      resolve3();
+      resolve4();
     };
     if (process.stdin.isTTY) {
       process.stdin.setRawMode?.(true);
@@ -388,7 +388,7 @@ function waitForEnter(prompt = "Press Enter to continue...") {
   });
 }
 function sleep(ms) {
-  return new Promise((resolve3) => setTimeout(resolve3, ms));
+  return new Promise((resolve4) => setTimeout(resolve4, ms));
 }
 
 // src/commands/login.ts
@@ -466,19 +466,19 @@ async function tokenLogin() {
   );
   blank();
   process.stdout.write("Paste token: ");
-  const token = await new Promise((resolve3) => {
+  const token = await new Promise((resolve4) => {
     let data = "";
     process.stdin.setEncoding("utf8");
     process.stdin.on("data", (chunk) => {
       data += chunk;
     });
     process.stdin.on("end", () => {
-      resolve3(data.trim());
+      resolve4(data.trim());
     });
     if (process.stdin.isTTY) {
       process.stdin.once("data", (chunk) => {
         process.stdin.pause();
-        resolve3(chunk.toString().trim());
+        resolve4(chunk.toString().trim());
       });
       process.stdin.resume();
     }
@@ -722,6 +722,14 @@ function toReportedWindow(window) {
   if (!window) return null;
   return { utilization: window.utilization, resets_at: window.resetsAt };
 }
+function toReportedOwner(snapshot) {
+  if (!snapshot.owner) return null;
+  return {
+    email: snapshot.owner.email,
+    organization_name: snapshot.owner.organizationName,
+    rate_limit_tier: snapshot.owner.rateLimitTier
+  };
+}
 async function reportClaudeUsage(agentId, authHeader, snapshot) {
   try {
     const apiUrl = getApiUrlConfig();
@@ -730,7 +738,8 @@ async function reportClaudeUsage(agentId, authHeader, snapshot) {
       headers: { Authorization: authHeader, "Content-Type": "application/json" },
       body: JSON.stringify({
         five_hour: toReportedWindow(snapshot.fiveHour),
-        seven_day: toReportedWindow(snapshot.sevenDay)
+        seven_day: toReportedWindow(snapshot.sevenDay),
+        owner: toReportedOwner(snapshot)
       }),
       signal: AbortSignal.timeout(BEST_EFFORT_NOTIFY_TIMEOUT_MS)
     });
@@ -996,7 +1005,10 @@ import { readFileSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
 var CLAUDE_USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
+var CLAUDE_PROFILE_URL = "https://api.anthropic.com/api/oauth/profile";
+var CLAUDE_PROFILE_TIMEOUT_MS = 2e3;
 var KEYCHAIN_SERVICE = "Claude Code-credentials";
+var cachedOwner = null;
 var CLAUDE_CREDENTIALS_SEGMENTS = [".claude", ".credentials.json"];
 function parseClaudeCliCredentials(raw) {
   let parsed;
@@ -1070,6 +1082,47 @@ function toWindow(value) {
   }
   return { utilization: window.utilization, resetsAt };
 }
+function ownerLookupFailure(error2) {
+  const name = error2?.name;
+  return name === "TimeoutError" || name === "AbortError" ? "timed out" : "request failed";
+}
+async function getClaudeUsageOwner(accessToken) {
+  if (cachedOwner?.accessToken === accessToken) {
+    return { owner: cachedOwner.owner, ownerLookupError: null };
+  }
+  try {
+    const response = await fetch(CLAUDE_PROFILE_URL, {
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+        "Content-Type": "application/json",
+        "anthropic-version": "2023-06-01"
+      },
+      signal: AbortSignal.timeout(CLAUDE_PROFILE_TIMEOUT_MS)
+    });
+    if (!response.ok) {
+      return { owner: null, ownerLookupError: `HTTP ${response.status}` };
+    }
+    let body;
+    try {
+      body = await response.json();
+    } catch (error2) {
+      return { owner: null, ownerLookupError: "malformed response" };
+    }
+    const profile = body;
+    if (typeof profile.account?.email !== "string" || !profile.account.email.trim()) {
+      return { owner: null, ownerLookupError: "malformed response" };
+    }
+    const owner = {
+      email: profile.account.email,
+      organizationName: typeof profile.organization?.name === "string" && profile.organization.name.trim() ? profile.organization.name.trim() : null,
+      rateLimitTier: typeof profile.organization?.rate_limit_tier === "string" && profile.organization.rate_limit_tier.trim() ? profile.organization.rate_limit_tier.trim() : null
+    };
+    cachedOwner = { accessToken, owner };
+    return { owner, ownerLookupError: null };
+  } catch (error2) {
+    return { owner: null, ownerLookupError: ownerLookupFailure(error2) };
+  }
+}
 async function getClaudeUsage() {
   const credentials2 = readClaudeCliCredentials();
   if (!credentials2) {
@@ -1089,15 +1142,19 @@ async function getClaudeUsage() {
       Authorization: `Bearer ${credentials2.accessToken}`,
       "Content-Type": "application/json",
       "anthropic-version": "2023-06-01"
-    }
+    },
+    signal: AbortSignal.timeout(CLAUDE_PROFILE_TIMEOUT_MS)
   });
   if (!res.ok) {
     throw new ClaudeUsageError(`Claude usage request failed: HTTP ${res.status}`, "request_failed");
   }
   const body = await res.json();
+  const { owner, ownerLookupError } = await getClaudeUsageOwner(credentials2.accessToken);
   return {
     fiveHour: toWindow(body.five_hour),
-    sevenDay: toWindow(body.seven_day)
+    sevenDay: toWindow(body.seven_day),
+    owner,
+    ownerLookupError
   };
 }
 
@@ -1126,8 +1183,9 @@ async function claudeUsage() {
 }
 
 // src/commands/run.ts
-import { homedir as homedir4 } from "os";
-import { isAbsolute as isAbsolute2, join as join7, parse, resolve as resolvePath } from "path";
+import { chmodSync as chmodSync3, existsSync as existsSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "fs";
+import { homedir as homedir5 } from "os";
+import { isAbsolute as isAbsolute3, join as join9, parse, resolve as resolvePath2 } from "path";
 import chalk6 from "chalk";
 
 // ../../packages/types/src/agents/index.ts
@@ -1467,7 +1525,14 @@ function drainSessionDbRecoveryReport({
         skippedLines++;
         return [];
       }
-      return [value];
+      return [
+        {
+          ...value,
+          provenance_reason: value.provenance_reason ?? null,
+          provenance_migration_delta: value.provenance_migration_delta ?? null,
+          replication_suspended: value.replication_suspended ?? false
+        }
+      ];
     } catch (error2) {
       skippedLines++;
       console.error(
@@ -1492,12 +1557,39 @@ function buildSessionDbRecoveryActivity(record) {
   const level = record.severity === "warning" ? "warn" : record.severity === "error" ? "error" : null;
   if (!level) return null;
   const noVerifiedPoint = record.verified_restore_point ? ` The verified restore point is ${record.verified_restore_point}.` : " No verified restore point is known.";
+  const replication = record.replication_suspended ? " This start is not backing up its new session history; restart after fixing the cause." : "";
+  const giveupMessage = (() => {
+    switch (record.reason) {
+      case "restore_deadline_exceeded":
+        return "The restore did not finish before this startup deadline. Earlier sessions are unavailable for this start; collect the SESSION-DB-RESTORE-TRUNCATED boot log before retrying.";
+      case "restore_tool_unusable":
+      case "classification_unrecognised":
+        return "The restore or classification tool produced an unsupported result. Inspect the named boot marker or log and repair the runner image or bundle before restarting.";
+      case "synchroniser_config_unevaluable":
+      case "synchroniser_config_incomplete":
+        return "The installed hook and synchroniser bundle could not agree on configuration. Inspect the named boot marker or log and repair the runner image or bundle before restarting.";
+      case "synchroniser_config_unresolved":
+        return "The synchroniser configuration could not be resolved. Inspect the preceding boot error and repair the identified runner image, bundle, or local environment before restarting.";
+      case "litestream_config_unavailable":
+        return "The local Litestream configuration could not be generated or written. Inspect the preceding boot error and repair the runner image, bundle, local environment, or write permissions before restarting.";
+      case "classification_fatal":
+        return "Session history could not be restored because backup setup could not be established. Inspect the named boot marker or log and repair the identified backup configuration or permissions.";
+      default:
+        return null;
+    }
+  })();
+  if (giveupMessage)
+    return {
+      level,
+      metadata: withoutContractFields(record),
+      message: `${giveupMessage}${replication}`
+    };
   switch (record.outcome) {
     case "fresh_session_db":
       return {
         level,
         metadata: withoutContractFields(record),
-        message: `This runner started with a fresh session database. Earlier sessions are unavailable, and queued conversation or session references from before this start may no longer resolve.${noVerifiedPoint} Review the runner's backup configuration before relying on restored session history.`
+        message: `This runner started with a fresh session database. Earlier sessions are unavailable, and queued conversation or session references from before this start may no longer resolve.${noVerifiedPoint} Review the runner's backup configuration before relying on restored session history.${replication}`
       };
     case "restore_retried":
       return {
@@ -1535,7 +1627,7 @@ function buildSessionDbRecoveryActivity(record) {
       return {
         level,
         metadata: withoutContractFields(record),
-        message: "This runner started with a fresh session database because it could not verify where its session history is backed up. Nothing in the backup was changed; check the runner backup configuration and permissions."
+        message: `This runner started without restoring session history because it could not verify where its session history is backed up. Nothing in the backup was changed; check the runner backup configuration and permissions.${replication}`
       };
     case "session_db_boot_refused":
       return {
@@ -1543,6 +1635,12 @@ function buildSessionDbRecoveryActivity(record) {
         metadata: withoutContractFields(record),
         message: `This runner did not come online because its damaged session database could not be safely separated from its active backup or proven removed. Backed-up session history remains readable at ${record.quarantine_destination ?? "its original location or the quarantine destination named in the boot logs"}; any local session-database files that remain were left in place and nothing opened or wrote them. See the runner boot logs for SESSION-DB-LOCAL-DISCARD-FAILED details.`
       };
+    case "schema_provenance_mismatch":
+      return {
+        level,
+        metadata: withoutContractFields(record),
+        message: `Session database schema provenance mismatch for ${record.dbPath ?? record.db_path ?? "unknown"}: recorded version=${record.recorded_version ?? "unknown"}, current version=${record.current_version ?? "unknown"}, reason=${record.provenance_reason ?? "unknown"}, migration delta=${record.provenance_migration_delta ?? "unknown"}. Inspect the session database and runner backup before continuing.`
+      };
     default:
       return null;
   }
@@ -1557,7 +1655,8 @@ var OUTCOMES = /* @__PURE__ */ new Set([
   "fresh_session_db",
   "history_rolled_back",
   "restore_misconfigured",
-  "session_db_boot_refused"
+  "session_db_boot_refused",
+  "schema_provenance_mismatch"
 ]);
 var STAGES = /* @__PURE__ */ new Set(["restore", "verify"]);
 var SEVERITIES = /* @__PURE__ */ new Set(["warning", "error"]);
@@ -1575,7 +1674,7 @@ var STRING_OR_NULL_FIELDS = ["quarantine_destination", "verified_restore_point"]
 function isSessionDbRecoveryRecord(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
   const record = value;
-  return record.v === 1 && record.event === "session_db_recovery" && typeof record.at === "string" && STAGES.has(record.stage) && OUTCOMES.has(record.outcome) && SEVERITIES.has(record.severity) && typeof record.reason === "string" && NUMBER_FIELDS.every((field) => record[field] === null || Number.isInteger(record[field])) && STRING_OR_NULL_FIELDS.every(
+  return record.v === 1 && record.event === "session_db_recovery" && typeof record.at === "string" && STAGES.has(record.stage) && OUTCOMES.has(record.outcome) && SEVERITIES.has(record.severity) && typeof record.reason === "string" && (record.replication_suspended === void 0 || typeof record.replication_suspended === "boolean") && (record.provenance_reason === void 0 || record.provenance_reason === null || typeof record.provenance_reason === "string") && (record.provenance_migration_delta === void 0 || record.provenance_migration_delta === null || Number.isInteger(record.provenance_migration_delta)) && NUMBER_FIELDS.every((field) => record[field] === null || Number.isInteger(record[field])) && STRING_OR_NULL_FIELDS.every(
     (field) => record[field] === null || typeof record[field] === "string"
   );
 }
@@ -1604,11 +1703,644 @@ async function waitForOpenCodeHealth(port, timeoutMs = 3e4) {
     if (health.healthy) {
       return health;
     }
-    await new Promise((resolve3) => setTimeout(resolve3, 1e3));
+    await new Promise((resolve4) => setTimeout(resolve4, 1e3));
   }
   return { healthy: false, error: "Timeout waiting for OpenCode to be healthy" };
 }
 
+// src/lib/opencode/session-db-boot.ts
+import { spawn as spawn2 } from "child_process";
+import { mkdirSync, statSync as statSync2, unlinkSync as unlinkSync2, writeFileSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { dirname as dirname2, resolve as resolvePath } from "path";
+
+// src/lib/runner-synchroniser.ts
+import { spawn } from "child_process";
+function appendError(stderr, error2) {
+  const message = error2 instanceof Error ? error2.message : String(error2);
+  return stderr === "" ? message : `${stderr}
+${message}`;
+}
+function runSynchroniser(args, opts) {
+  return new Promise((resolve4) => {
+    let child;
+    let stdout = "";
+    let stderr = "";
+    let settled = false;
+    const timer = {};
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      if (timer.handle) clearTimeout(timer.handle);
+      resolve4(result);
+    };
+    try {
+      child = spawn("runner-synchroniser", args, {
+        env: opts.env ?? process.env,
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+    } catch (error2) {
+      finish({ code: null, stdout, stderr: appendError(stderr, error2), timedOut: false });
+      return;
+    }
+    child.stdout?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => {
+      stdout += chunk;
+    });
+    child.stderr?.setEncoding("utf8");
+    child.stderr?.on("data", (chunk) => {
+      stderr += chunk;
+    });
+    child.once("error", (error2) => {
+      finish({ code: null, stdout, stderr: appendError(stderr, error2), timedOut: false });
+    });
+    child.once("close", (code) => {
+      finish({ code, stdout, stderr, timedOut: false });
+    });
+    timer.handle = setTimeout(
+      () => {
+        child.kill("SIGKILL");
+        finish({ code: null, stdout, stderr, timedOut: true });
+      },
+      Math.max(0, opts.timeoutMs)
+    );
+  });
+}
+
+// src/lib/opencode/session-db-boot.ts
+var SESSION_DB_RESTORE_TIMEOUT_MS = 3e5;
+var SESSION_DB_VERIFY_TIMEOUT_MS = 12e4;
+var SESSION_DB_SYNCHRONISER_TIMEOUT_MS = 12e4;
+var SESSION_DB_VERIFY_WALKBACK_BUDGET_SECONDS = 120;
+function commandError(result) {
+  return result.stderr.trim() || `process exited with code ${result.code ?? "null"}`;
+}
+function reportRecord(stage, outcome, reason, litestreamExitCode, options) {
+  options.reportRecovery({
+    v: 1,
+    event: "session_db_recovery",
+    at: (/* @__PURE__ */ new Date()).toISOString(),
+    stage,
+    outcome,
+    severity: "error",
+    reason,
+    litestream_exit_code: litestreamExitCode,
+    attempt: null,
+    replica_objects: null,
+    replica_bytes: null,
+    quarantine_destination: null,
+    quarantined_objects: null,
+    quarantine_failed_objects: null,
+    quarantined_bytes: null,
+    verified_restore_point: null,
+    restore_points_tried: null,
+    provenance_reason: null,
+    provenance_migration_delta: null,
+    replication_suspended: stage === "restore"
+  });
+}
+function clearMarker(options) {
+  if (!options.noReplicateMarker) return;
+  try {
+    unlinkSync2(options.noReplicateMarker);
+  } catch (error2) {
+    if (error2 instanceof Error && "code" in error2 && error2.code === "ENOENT") return;
+    options.log(
+      `Could not clear the previous session-DB no-replicate marker ${options.noReplicateMarker}: ${error2 instanceof Error ? error2.message : String(error2)}`,
+      "warn"
+    );
+  }
+}
+function markNoReplicate(options, message) {
+  if (options.noReplicateMarker) {
+    try {
+      mkdirSync(dirname2(options.noReplicateMarker), { recursive: true });
+      writeFileSync(options.noReplicateMarker, "");
+    } catch (error2) {
+      options.log(
+        `Could not write session-DB no-replicate marker ${options.noReplicateMarker}: ${error2 instanceof Error ? error2.message : String(error2)}`,
+        "error"
+      );
+    }
+  }
+  options.log(`SESSION-DB-NO-REPLICATE: ${message}`, "warn");
+}
+function discardSessionDbDebris(options) {
+  for (const path of [options.dbPath, `${options.dbPath}-wal`, `${options.dbPath}-shm`]) {
+    try {
+      unlinkSync2(path);
+    } catch (error2) {
+      if (error2 instanceof Error && "code" in error2 && error2.code === "ENOENT") continue;
+      options.log(
+        `Could not remove session-DB debris ${path}: ${error2 instanceof Error ? error2.message : String(error2)}`,
+        "warn"
+      );
+    }
+  }
+}
+function splitDiagnostics(text) {
+  return text.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
+}
+function logSynchroniserDiagnostics(result, options) {
+  for (const line of splitDiagnostics(result.stderr)) options.log(line, "warn");
+}
+function parseSingleQuotedAssignment(line) {
+  const match = /^([A-Za-z_][A-Za-z0-9_]*)=(.*)$/.exec(line);
+  if (!match || !match[2].startsWith("'")) return null;
+  const valueSource = match[2];
+  let value = "";
+  for (let index = 1; index < valueSource.length; index++) {
+    const character = valueSource[index];
+    if (character !== "'") {
+      value += character;
+      continue;
+    }
+    if (index === valueSource.length - 1) return [match[1], value];
+    if (valueSource.slice(index + 1, index + 4) !== "\\''") return null;
+    value += "'";
+    index += 3;
+  }
+  return null;
+}
+function parseSynchroniserEnv(stdout) {
+  const values = {};
+  for (const line of stdout.split("\n")) {
+    if (line.trim() === "") continue;
+    const assignment = parseSingleQuotedAssignment(line);
+    if (!assignment) return null;
+    values[assignment[0]] = assignment[1];
+  }
+  return values;
+}
+function runCommand(command, args, options) {
+  return new Promise((resolve4) => {
+    let child;
+    let stdout = "";
+    let stderr = "";
+    let settled = false;
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      if (timer) clearTimeout(timer);
+      resolve4(result);
+    };
+    try {
+      child = spawn2(command, args, {
+        env: options.env,
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+    } catch (error2) {
+      resolve4({
+        code: null,
+        stdout,
+        stderr: error2 instanceof Error ? error2.message : String(error2),
+        timedOut: false
+      });
+      return;
+    }
+    child.stdout?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => {
+      stdout += chunk;
+    });
+    child.stderr?.setEncoding("utf8");
+    child.stderr?.on("data", (chunk) => {
+      stderr += chunk;
+    });
+    child.once("error", (error2) => {
+      finish({
+        code: null,
+        stdout,
+        stderr: stderr === "" ? error2.message : `${stderr}
+${error2.message}`,
+        timedOut: false
+      });
+    });
+    child.once("close", (code) => finish({ code, stdout, stderr, timedOut: false }));
+    const timer = setTimeout(
+      () => {
+        child.kill("SIGKILL");
+        finish({ code: null, stdout, stderr, timedOut: true });
+      },
+      Math.max(0, options.timeoutMs)
+    );
+  });
+}
+async function ensureLitestreamConfig(options, env) {
+  const configPath = options.litestreamConfig;
+  if (!configPath) {
+    markNoReplicate(options, "no Litestream configuration path was provided");
+    reportRecord(
+      "restore",
+      "restore_misconfigured",
+      "litestream_config_unavailable",
+      null,
+      options
+    );
+    return null;
+  }
+  try {
+    if (statSync2(configPath).size > 0) return configPath;
+  } catch (error2) {
+    if (!(error2 instanceof Error && "code" in error2 && error2.code === "ENOENT")) {
+      options.log(
+        `Could not inspect ${configPath}: ${error2 instanceof Error ? error2.message : String(error2)}`,
+        "warn"
+      );
+    }
+  }
+  const rendered = await runSynchroniser(["litestream-config"], {
+    timeoutMs: SESSION_DB_SYNCHRONISER_TIMEOUT_MS,
+    env
+  });
+  logSynchroniserDiagnostics(rendered, options);
+  if (rendered.timedOut || rendered.code !== 0) {
+    options.log(
+      `Could not generate ${configPath}: runner-synchroniser litestream-config failed (${commandError(rendered)})`,
+      "error"
+    );
+    markNoReplicate(options, `could not generate ${configPath}`);
+    reportRecord(
+      "restore",
+      "restore_misconfigured",
+      "litestream_config_unavailable",
+      null,
+      options
+    );
+    return null;
+  }
+  try {
+    mkdirSync(dirname2(configPath), { recursive: true });
+    writeFileSync(configPath, rendered.stdout);
+  } catch (error2) {
+    options.log(
+      `Could not write ${configPath}: ${error2 instanceof Error ? error2.message : String(error2)}`,
+      "error"
+    );
+    markNoReplicate(options, `could not generate ${configPath}`);
+    reportRecord(
+      "restore",
+      "restore_misconfigured",
+      "litestream_config_unavailable",
+      null,
+      options
+    );
+    return null;
+  }
+  const version2 = await runCommand("litestream", ["version"], {
+    env,
+    timeoutMs: 1e4
+  });
+  const litestreamVersion = version2.code === 0 ? version2.stdout.trim() || "unknown" : "unknown";
+  const regionEmpty = !/^\s*region:\s*\S+/m.test(rendered.stdout);
+  options.log(
+    `litestream ${litestreamVersion}; AWS_REGION=${env.AWS_REGION ?? "<unset>"} AWS_DEFAULT_REGION=${env.AWS_DEFAULT_REGION ?? "<unset>"}; rendered litestream.yml region empty: ${regionEmpty ? "yes" : "no"}`
+  );
+  return configPath;
+}
+function restoreGiveUp(options, reason, message, litestreamExitCode, outcome = "fresh_session_db") {
+  discardSessionDbDebris(options);
+  markNoReplicate(options, message);
+  reportRecord("restore", outcome, reason, litestreamExitCode, options);
+}
+async function restoreSessionDb(options, configPath, env) {
+  const restored = await runCommand(
+    "litestream",
+    ["restore", "-config", configPath, "-if-db-not-exists", "-if-replica-exists", options.dbPath],
+    { env, timeoutMs: SESSION_DB_RESTORE_TIMEOUT_MS }
+  );
+  for (const line of splitDiagnostics(restored.stderr)) options.log(line, "warn");
+  if (restored.timedOut || restored.code === 124 || restored.code === 137) {
+    restoreGiveUp(
+      options,
+      "restore_deadline_exceeded",
+      `SESSION-DB-RESTORE-TRUNCATED: litestream restore did not finish within ${SESSION_DB_RESTORE_TIMEOUT_MS}ms; opencode starts with a fresh session DB and nothing is replicated this boot`,
+      restored.code ?? 124
+    );
+    return;
+  }
+  if (restored.code === null || restored.code === 125 || restored.code === 126 || restored.code === 127) {
+    options.log(`litestream restore could not run (${commandError(restored)})`, "error");
+    restoreGiveUp(
+      options,
+      "restore_tool_unusable",
+      `restore tool is broken (${commandError(restored)}); opencode starts with a fresh session DB and nothing is replicated this boot`,
+      restored.code
+    );
+    return;
+  }
+  const classified = await runSynchroniser(
+    [
+      "session-db-classify",
+      String(restored.code ?? 1),
+      "1",
+      "--on-unusable-replica=leave",
+      "--fresh-db-fallback"
+    ],
+    { timeoutMs: SESSION_DB_SYNCHRONISER_TIMEOUT_MS, env }
+  );
+  logSynchroniserDiagnostics(classified, options);
+  const classifyCode = classified.code;
+  switch (classifyCode) {
+    case 0:
+      return;
+    case 31:
+      acknowledgeSessionDbRecoveryReport(sessionDbRecoveryReportPath(homedir2(), env));
+      options.log(
+        "SESSION-DB-REPLICA-UNUSABLE: booting with a fresh opencode.db and replicating into the existing prefix this boot",
+        "warn"
+      );
+      return;
+    case 32:
+      acknowledgeSessionDbRecoveryReport(sessionDbRecoveryReportPath(homedir2(), env));
+      discardSessionDbDebris(options);
+      markNoReplicate(
+        options,
+        "session-db-classify asked for another restore attempt (32), but this boot has budget for only one; treating it as a give-up rather than retrying"
+      );
+      return;
+    case 30:
+      restoreGiveUp(
+        options,
+        "classification_fatal",
+        "session-db-classify returned fatal (30); see the FATAL message above",
+        restored.code,
+        "restore_misconfigured"
+      );
+      return;
+    default:
+      restoreGiveUp(
+        options,
+        "classification_unrecognised",
+        `session-db-classify exited ${classifyCode ?? "null"}, which is none of its documented answers`,
+        restored.code
+      );
+  }
+}
+async function verifySessionDb(options, configPath, env) {
+  if (!options.noReplicateMarker || !fileExists(options.noReplicateMarker)) {
+    const result = await runSynchroniser(["session-db-verify", configPath], {
+      timeoutMs: SESSION_DB_VERIFY_TIMEOUT_MS,
+      env: {
+        ...env,
+        // The synchroniser reads this value in SECONDS. Keep this at 120, not
+        // 120_000, so the walkback gives up before the outer process bound.
+        EVIDENT_SESSION_DB_WALKBACK_BUDGET_SECONDS: String(
+          SESSION_DB_VERIFY_WALKBACK_BUDGET_SECONDS
+        )
+      }
+    });
+    logSynchroniserDiagnostics(result, options);
+    if (result.timedOut || result.code === 124 || result.code === 137) {
+      options.log(
+        `SESSION-DB-VERIFY-TIMEOUT: verification did not finish within its ${SESSION_DB_VERIFY_TIMEOUT_MS}ms deadline; continuing with the restored opencode.db as-is, unverified`,
+        "warn"
+      );
+      return false;
+    }
+    if (result.code === 34) {
+      reportRecord(
+        "verify",
+        "session_db_boot_refused",
+        result.stderr.includes("SESSION-DB-LOCAL-DISCARD-FAILED") ? "local_discard_failed" : "replica_separation_unproven",
+        null,
+        options
+      );
+      return true;
+    }
+    if (result.code === 33) {
+      options.log(
+        "SESSION-DB-INTEGRITY-EXHAUSTED: booting continues and litestream still replicates, starting an empty backup chain after the corrupt replica was separated.",
+        "warn"
+      );
+      return false;
+    }
+    if (result.code !== 0) {
+      options.log(
+        `SESSION-DB-VERIFY-UNKNOWN: session-db-verify exited ${result.code ?? "null"}, which is none of its documented answers; continuing with the restored opencode.db as-is`,
+        "warn"
+      );
+    }
+    return false;
+  }
+  options.log(
+    "skipping session-DB verification: this boot's session DB was not proven safe to replicate",
+    "debug"
+  );
+  return false;
+}
+function fileExists(path) {
+  try {
+    statSync2(path);
+    return true;
+  } catch (error2) {
+    if (error2 instanceof Error && "code" in error2 && error2.code === "ENOENT") return false;
+    return true;
+  }
+}
+async function restoreAndVerifySessionDb(options) {
+  const env = options.env ?? process.env;
+  clearMarker(options);
+  acknowledgeSessionDbRecoveryReport(sessionDbRecoveryReportPath(homedir2(), env));
+  const synchroniserEnv = await runSynchroniser(["env"], {
+    timeoutMs: SESSION_DB_SYNCHRONISER_TIMEOUT_MS,
+    env
+  });
+  logSynchroniserDiagnostics(synchroniserEnv, options);
+  if (synchroniserEnv.timedOut || synchroniserEnv.code !== 0) {
+    options.log(
+      `runner-synchroniser env could not resolve the session-DB configuration (${commandError(synchroniserEnv)})`,
+      "error"
+    );
+    markNoReplicate(
+      options,
+      "could not resolve the runner-synchroniser configuration (see the ERROR above)"
+    );
+    reportRecord(
+      "restore",
+      "restore_misconfigured",
+      "synchroniser_config_unresolved",
+      null,
+      options
+    );
+    return { verifyFatal: false };
+  }
+  const values = parseSynchroniserEnv(synchroniserEnv.stdout);
+  if (!values) {
+    markNoReplicate(
+      options,
+      "the runner-synchroniser configuration could not be evaluated; the installed bundle likely does not match this hook"
+    );
+    reportRecord(
+      "restore",
+      "restore_misconfigured",
+      "synchroniser_config_unevaluable",
+      null,
+      options
+    );
+    return { verifyFatal: false };
+  }
+  const synchroniserDbPath = values.OPENCODE_DB_PATH;
+  if (!synchroniserDbPath) {
+    markNoReplicate(
+      options,
+      "run_synchroniser env did not define OPENCODE_DB_PATH; the installed runner-synchroniser build likely does not match this hook"
+    );
+    reportRecord(
+      "restore",
+      "restore_misconfigured",
+      "synchroniser_config_incomplete",
+      null,
+      options
+    );
+    return { verifyFatal: false };
+  }
+  if (resolvePath(synchroniserDbPath) !== resolvePath(options.dbPath)) {
+    options.log(
+      `runner-synchroniser reported OPENCODE_DB_PATH=${synchroniserDbPath}, but OpenCode uses ${options.dbPath}; continuing with OpenCode's session-DB path`,
+      "warn"
+    );
+  }
+  if (!values.PERSISTENCE_BUCKET) {
+    options.log(
+      "SESSION-DB-PERSISTENCE-DISABLED: LITESTREAM_BUCKET/LITESTREAM_PREFIX are not both set; opencode starts with a fresh session DB and nothing is replicated.",
+      "warn"
+    );
+    return { verifyFatal: false };
+  }
+  const configPath = await ensureLitestreamConfig(options, env);
+  if (!configPath) return { verifyFatal: false };
+  await restoreSessionDb(options, configPath, env);
+  if (options.noReplicateMarker && fileExists(options.noReplicateMarker)) {
+    return { verifyFatal: false };
+  }
+  return { verifyFatal: await verifySessionDb(options, configPath, env) };
+}
+
+// src/lib/opencode/session-db-provenance.ts
+import { createRequire } from "module";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { dirname as dirname3, join as join3 } from "path";
+var require2 = createRequire(import.meta.url);
+function readSessionDbMigrationIds(dbPath) {
+  let db;
+  try {
+    const { DatabaseSync } = require2("node:sqlite");
+    db = new DatabaseSync(dbPath, { readOnly: true });
+    const columns = db.prepare("PRAGMA table_info(migration)").all();
+    const hasExpectedShape = columns.length === 2 && columns.some(
+      (column) => column.name === "id" && typeof column.type === "string" && column.type.toUpperCase() === "TEXT" && column.pk === 1
+    ) && columns.some(
+      (column) => column.name === "time_completed" && typeof column.type === "string" && column.type.toUpperCase() === "INTEGER" && column.notnull === 1 && column.pk === 0
+    );
+    if (!hasExpectedShape) {
+      console.warn(`[readSessionDbMigrationIds] unsupported migration table shape in ${dbPath}`);
+      return null;
+    }
+    const rows = db.prepare("SELECT id FROM migration ORDER BY id").all();
+    if (rows.some((row) => typeof row.id !== "string")) return null;
+    return rows.map((row) => row.id);
+  } catch (error2) {
+    console.warn(
+      `[readSessionDbMigrationIds] could not read migration history from ${dbPath}: ${error2 instanceof Error ? error2.message : String(error2)}`
+    );
+    return null;
+  } finally {
+    try {
+      db?.close();
+    } catch (error2) {
+      console.warn(
+        `[readSessionDbMigrationIds] could not close ${dbPath}: ${error2 instanceof Error ? error2.message : String(error2)}`
+      );
+    }
+  }
+}
+function sessionDbProvenanceStatePath(homeDir, env) {
+  const override = env.EVIDENT_SESSION_DB_PROVENANCE_STATE?.trim();
+  return override || join3(homeDir, ".local", "state", "evident", "session-db-provenance.json");
+}
+function loadSessionDbProvenanceState(path) {
+  let value;
+  try {
+    value = JSON.parse(readFileSync3(path, "utf8"));
+  } catch (error2) {
+    if (error2 instanceof Error && "code" in error2 && error2.code === "ENOENT") return {};
+    console.error(
+      `[session-db-provenance] could not read ${path}: ${error2 instanceof Error ? error2.message : String(error2)}`
+    );
+    return {};
+  }
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    console.error(`[session-db-provenance] ignored malformed state in ${path}`);
+    return {};
+  }
+  const state = {};
+  for (const [dbPath, record] of Object.entries(value)) {
+    if (!isSessionDbProvenanceRecord(record)) {
+      console.error(`[session-db-provenance] ignored malformed state in ${path}`);
+      return {};
+    }
+    state[dbPath] = record;
+  }
+  return state;
+}
+function saveSessionDbProvenanceState(path, state) {
+  try {
+    mkdirSync2(dirname3(path), { recursive: true });
+    writeFileSync2(path, `${JSON.stringify(state, null, 2)}
+`, "utf8");
+  } catch (error2) {
+    console.error(
+      `[session-db-provenance] could not write ${path}: ${error2 instanceof Error ? error2.message : String(error2)}`
+    );
+  }
+}
+function evaluateSessionDbProvenance(input) {
+  const { currentVersion, currentIds, previous } = input;
+  if (!previous) return { anomaly: false, reason: null };
+  const current = new Set(currentIds);
+  const prior = new Set(previous.migrationIds);
+  for (const id of prior) {
+    if (!current.has(id)) return { anomaly: true, reason: "migration-history-regressed" };
+  }
+  if (current.size > prior.size && previous.opencodeVersion === currentVersion) {
+    return { anomaly: true, reason: "foreign-version-migrations" };
+  }
+  return { anomaly: false, reason: null };
+}
+function checkSessionDbProvenance(input) {
+  const { dbPath, currentVersion, homeDir, env } = input;
+  const path = sessionDbProvenanceStatePath(homeDir, env);
+  const state = loadSessionDbProvenanceState(path);
+  const previous = state[dbPath];
+  const currentIds = readSessionDbMigrationIds(dbPath);
+  if (currentIds === null) {
+    return {
+      anomaly: false,
+      reason: null,
+      recordedVersion: previous?.opencodeVersion ?? null,
+      migrationDelta: null
+    };
+  }
+  const decision = evaluateSessionDbProvenance({ currentVersion, currentIds, previous });
+  const migrationDelta = previous ? new Set(currentIds).size - new Set(previous.migrationIds).size : null;
+  state[dbPath] = {
+    opencodeVersion: currentVersion,
+    migrationIds: currentIds,
+    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  saveSessionDbProvenanceState(path, state);
+  return {
+    ...decision,
+    recordedVersion: previous?.opencodeVersion ?? null,
+    migrationDelta
+  };
+}
+function isSessionDbProvenanceRecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const record = value;
+  return typeof record.opencodeVersion === "string" && Array.isArray(record.migrationIds) && record.migrationIds.every((id) => typeof id === "string") && typeof record.updatedAt === "string";
+}
+
 // src/lib/opencode/opencode-version-gate.ts
 var QUEUE_VALIDATED_OPENCODE_VERSIONS = ["1.17.11", "1.18.3"];
 function isQueueValidatedVersion(version2) {
@@ -1623,7 +2355,63 @@ function buildOpenCodeVersionWarning(version2) {
 }
 
 // src/lib/opencode/process.ts
-import { execSync, spawn } from "child_process";
+import { execSync, spawn as spawn3 } from "child_process";
+
+// src/lib/process-stop.ts
+async function stopProcessAndWait(child, timeoutMs, sendTerm, sendKill) {
+  if (!child.pid) {
+    return { outcome: "not-running", code: child.exitCode, signal: child.signalCode };
+  }
+  if (child.exitCode !== null || child.signalCode !== null) {
+    return { outcome: "exited", code: child.exitCode, signal: child.signalCode };
+  }
+  return new Promise((resolve4, reject) => {
+    let forced = false;
+    let settled = false;
+    const timer = setTimeout(() => {
+      forced = true;
+      try {
+        sendKill();
+      } catch (error2) {
+        if (error2.code === "ESRCH") {
+          finish({ outcome: "exited", code: child.exitCode, signal: child.signalCode });
+        } else {
+          fail(error2);
+        }
+      }
+    }, timeoutMs);
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      child.removeListener("exit", onExit);
+      resolve4(result);
+    };
+    const fail = (error2) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      child.removeListener("exit", onExit);
+      reject(error2);
+    };
+    const onExit = (code, signal) => {
+      finish({ outcome: forced ? "killed" : "exited", code, signal });
+    };
+    child.once("exit", onExit);
+    try {
+      sendTerm();
+    } catch (error2) {
+      if (error2.code === "ESRCH") {
+        finish({ outcome: "exited", code: child.exitCode, signal: child.signalCode });
+      } else {
+        fail(error2);
+      }
+      return;
+    }
+  });
+}
+
+// src/lib/opencode/process.ts
 var OPENCODE_PORT_RANGE = [4096, 4097, 4098, 4099, 4100];
 function getProcessCwd(pid) {
   const platform = process.platform;
@@ -1779,39 +2567,45 @@ async function findHealthyOpenCodeInstances() {
   }
   return healthy;
 }
-async function startOpenCode(port) {
+async function startOpenCode(port, options = {}) {
   let command = "opencode";
-  let args = ["serve", "--port", port.toString(), "--hostname", "127.0.0.1"];
+  const printLogs = options.inheritStdio ? ["--print-logs"] : [];
+  let args = ["serve", "--port", port.toString(), "--hostname", "127.0.0.1", ...printLogs];
   try {
     execSync("which opencode", { stdio: "ignore" });
   } catch {
     command = "npx";
-    args = ["opencode", "serve", "--port", port.toString(), "--hostname", "127.0.0.1"];
-  }
-  const child = spawn(command, args, {
+    args = [
+      "opencode",
+      "serve",
+      "--port",
+      port.toString(),
+      "--hostname",
+      "127.0.0.1",
+      ...printLogs
+    ];
+  }
+  const child = spawn3(command, args, {
     detached: true,
-    stdio: "ignore",
+    stdio: options.inheritStdio ? "inherit" : "ignore",
     cwd: process.cwd()
   });
   return child;
 }
-function stopOpenCode(opencodeProcess) {
-  if (!opencodeProcess || !opencodeProcess.pid) {
-    return;
-  }
-  try {
+function stopOpenCodeAndWait(opencodeProcess, timeoutMs) {
+  const sendSignal = (signal) => {
     if (process.platform === "win32") {
-      opencodeProcess.kill("SIGTERM");
+      opencodeProcess.kill(signal);
     } else {
-      process.kill(-opencodeProcess.pid, "SIGTERM");
-    }
-  } catch (err) {
-    if (err.code !== "ESRCH") {
-      console.warn(
-        `stopOpenCode: kill failed: ${err instanceof Error ? err.message : String(err)}`
-      );
+      process.kill(-opencodeProcess.pid, signal);
     }
-  }
+  };
+  return stopProcessAndWait(
+    opencodeProcess,
+    timeoutMs,
+    () => sendSignal("SIGTERM"),
+    () => sendSignal("SIGKILL")
+  );
 }
 
 // src/lib/opencode/install.ts
@@ -2098,6 +2892,7 @@ async function createOpenCodeSession(port, directory) {
   return data.id;
 }
 async function getModelAttachmentCapability(port, model) {
+  const { model: baseModel } = splitModelVariant(model);
   try {
     const res = await timedFetch(`${opencodeBase(port)}/config/providers`);
     if (!res.ok) {
@@ -2114,9 +2909,9 @@ async function getModelAttachmentCapability(port, model) {
       );
       return null;
     }
-    const slash = model ? model.indexOf("/") : -1;
-    const providerId = slash > 0 ? model.slice(0, slash) : void 0;
-    let modelId = slash > 0 ? model.slice(slash + 1) : void 0;
+    const slash = baseModel ? baseModel.indexOf("/") : -1;
+    const providerId = slash > 0 ? baseModel.slice(0, slash) : void 0;
+    let modelId = slash > 0 ? baseModel.slice(slash + 1) : void 0;
     const defaults2 = body?.default && typeof body.default === "object" ? body.default : void 0;
     let provider = providerId ? providers.find((p) => p?.id === providerId) : void 0;
     if (!provider && !providerId) {
@@ -2196,6 +2991,29 @@ async function buildFileParts(attachments, capable) {
   }
   return { parts, outcomes, capabilityUnknown };
 }
+function splitModelVariant(raw) {
+  const value = raw?.trim();
+  if (!value) return {};
+  const hashIndex = value.indexOf("#");
+  if (hashIndex === -1) return { model: value };
+  const model = value.slice(0, hashIndex).trim() || void 0;
+  const variant = value.slice(hashIndex + 1).trim() || void 0;
+  return { model, variant };
+}
+function applyModelOptions(body, options) {
+  if (options?.agent) body.agent = options.agent;
+  const { model, variant } = splitModelVariant(options?.model);
+  if (model) {
+    const slashIndex = model.indexOf("/");
+    if (slashIndex !== -1) {
+      body.model = {
+        providerID: model.substring(0, slashIndex),
+        modelID: model.substring(slashIndex + 1)
+      };
+    }
+  }
+  if (variant) body.variant = variant;
+}
 function messageText(m) {
   if (!m || !Array.isArray(m.parts)) return "";
   return m.parts.filter((p) => p.type === "text" && typeof p.text === "string").map((p) => p.text).join("");
@@ -2220,18 +3038,7 @@ async function sendPromptAsync(port, sessionId, content, options, attachments) {
   const body = {
     parts
   };
-  if (options?.agent) {
-    body.agent = options.agent;
-  }
-  if (options?.model) {
-    const slashIndex = options.model.indexOf("/");
-    if (slashIndex !== -1) {
-      body.model = {
-        providerID: options.model.substring(0, slashIndex),
-        modelID: options.model.substring(slashIndex + 1)
-      };
-    }
-  }
+  applyModelOptions(body, options);
   const res = await timedFetch(`${opencodeBase(port)}/session/${sessionId}/prompt_async`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
@@ -2239,7 +3046,10 @@ async function sendPromptAsync(port, sessionId, content, options, attachments) {
   });
   if (res.status < 200 || res.status >= 300) {
     const text = await res.text().catch(() => "");
-    throw new Error(`OpenCode prompt_async failed: HTTP ${res.status}${text ? `: ${text}` : ""}`);
+    const { variant } = splitModelVariant(options?.model);
+    throw new Error(
+      `OpenCode prompt_async failed: HTTP ${res.status}${text ? `: ${text}` : ""}${variant ? ` (variant: ${variant})` : ""}`
+    );
   }
   const READ_BACK_ATTEMPTS = 5;
   const READ_BACK_DELAY_MS = 150;
@@ -2263,7 +3073,7 @@ async function sendPromptAsync(port, sessionId, content, options, attachments) {
       }
     }
     if (attempt < READ_BACK_ATTEMPTS - 1) {
-      await new Promise((resolve3) => setTimeout(resolve3, READ_BACK_DELAY_MS));
+      await new Promise((resolve4) => setTimeout(resolve4, READ_BACK_DELAY_MS));
     }
   }
   return null;
@@ -2394,7 +3204,7 @@ function isPreamblePinnedRunning(messages, userMessageId) {
   return completedOf(reply) != null && finishOf(reply) === "tool-calls";
 }
 function isB2AbandonmentConfirmed(params) {
-  return params.pinnedForMs >= params.minPinnedMs && params.descendantOngoing === false;
+  return params.pinnedForMs >= params.minPinnedMs && params.descendantOngoing === false && params.rootOngoing === false;
 }
 function isAmbiguousTerminalFinish(m) {
   if (completedOf(m) == null) return false;
@@ -2407,7 +3217,7 @@ function isAmbiguousFinishPinnedRunning(messages, userMessageId) {
   return isAmbiguousTerminalFinish(reply);
 }
 function isAmbiguousFinishResolved(params) {
-  return params.sessionOngoing === false || params.pinnedForMs >= params.maxPinnedMs;
+  return params.sessionOngoing === false || params.sessionOngoing !== true && params.pinnedForMs >= params.maxPinnedMs;
 }
 function messageError(messages, userMessageId) {
   const reply = findLastAssistantReplyFor(messages, userMessageId);
@@ -2616,13 +3426,13 @@ function resolveSessionCleanupConfig(flags, env = process.env) {
 }
 
 // src/lib/opencode/session-db-size.ts
-import { statSync as statSync2 } from "fs";
-import { join as join3 } from "path";
+import { statSync as statSync3 } from "fs";
+import { join as join4 } from "path";
 var LARGE_DB_THRESHOLD_BYTES = 268435456;
 function statSessionDbBytes(homeDir) {
-  const dbPath = join3(homeDir, ".local", "share", "opencode", "opencode.db");
+  const dbPath = join4(homeDir, ".local", "share", "opencode", "opencode.db");
   try {
-    return statSync2(dbPath).size;
+    return statSync3(dbPath).size;
   } catch (err) {
     const isMissingFile = err instanceof Error && "code" in err && err.code === "ENOENT";
     if (!isMissingFile) {
@@ -2648,11 +3458,11 @@ function buildSessionStoreSizeWarning(input) {
 }
 
 // src/lib/opencode/session-db-reclaim.ts
-import { statSync as statSync3, statfsSync } from "fs";
-import { dirname as dirname2 } from "path";
+import { statSync as statSync4, statfsSync } from "fs";
+import { dirname as dirname4 } from "path";
 function insufficientSpaceReason(dbPath, requiredBytes) {
   try {
-    const fsStats = statfsSync(dirname2(dbPath));
+    const fsStats = statfsSync(dirname4(dbPath));
     const availableBytes = fsStats.bavail * fsStats.bsize;
     if (availableBytes < requiredBytes) {
       return `only ${availableBytes} bytes free, need ${requiredBytes} for a second copy`;
@@ -2721,7 +3531,7 @@ async function reclaimSessionDbSpace(input) {
         );
         return { ok: false, skipped: "full-vacuum-blocked" };
       }
-      const fileBytesForGuard = statSync3(dbPath).size;
+      const fileBytesForGuard = statSync4(dbPath).size;
       const skipReason = insufficientSpaceReason(dbPath, fileBytesForGuard);
       if (skipReason !== null) {
         console.warn(
@@ -2849,12 +3659,12 @@ var StreamForwarder = class {
     let endBody;
     if (has_body) {
       const chunks = [];
-      bodyPromise = new Promise((resolve3) => {
+      bodyPromise = new Promise((resolve4) => {
         pushBody = (buf) => {
           chunks.push(buf);
         };
         endBody = () => {
-          resolve3(Buffer.concat(chunks));
+          resolve4(Buffer.concat(chunks));
         };
       });
     }
@@ -2983,7 +3793,7 @@ function connectTunnel(options) {
   } = options;
   const tunnelUrl = getTunnelUrlConfig();
   const url = `${tunnelUrl}/tunnel/${agentId}/connect`;
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const ws = new WebSocket2(url, {
       headers: {
         Authorization: authHeader
@@ -3047,7 +3857,7 @@ function connectTunnel(options) {
           clearTimeout(connectionTimeout);
           const connectedAgentId = message.agent_id ?? agentId;
           onConnected?.(connectedAgentId);
-          resolve3({
+          resolve4({
             ws,
             close: () => ws.close(1e3, "CLI shutdown")
           });
@@ -3178,10 +3988,10 @@ var RunnerConnection = class {
 };
 
 // src/lib/tunnel/ready-marker.ts
-import { writeFileSync } from "fs";
+import { writeFileSync as writeFileSync3 } from "fs";
 function writeTunnelReadyMarker(path, agentId) {
   try {
-    writeFileSync(path, `${agentId}
+    writeFileSync3(path, `${agentId}
 `);
     return { ok: true };
   } catch (error2) {
@@ -3189,10 +3999,52 @@ function writeTunnelReadyMarker(path, agentId) {
   }
 }
 
+// src/lib/replication.ts
+import { spawn as spawn4 } from "child_process";
+function startSessionDbReplication(configPath) {
+  return spawn4("litestream", ["replicate", "-config", configPath], {
+    stdio: "inherit"
+  });
+}
+async function stopSessionDbReplication(child, timeoutMs) {
+  return stopProcessAndWait(
+    child,
+    timeoutMs,
+    () => child.kill("SIGTERM"),
+    () => child.kill("SIGKILL")
+  );
+}
+
+// src/lib/process-liveness.ts
+import { readFileSync as readFileSync4 } from "fs";
+function isProcessAlive(pid) {
+  try {
+    process.kill(pid, 0);
+  } catch (error2) {
+    const code = error2.code;
+    if (code === "ESRCH") return false;
+    if (code === "EPERM") return true;
+    console.error(
+      `[process-liveness] could not probe process ${pid}: ${error2 instanceof Error ? error2.message : String(error2)}`
+    );
+    return false;
+  }
+  if (process.platform !== "linux") return true;
+  try {
+    const status2 = readFileSync4(`/proc/${pid}/status`, "utf8");
+    return !/^State:\s+Z(?:\s|$)/m.test(status2);
+  } catch (error2) {
+    console.error(
+      `[process-liveness] could not inspect /proc/${pid}/status: ${error2 instanceof Error ? error2.message : String(error2)}`
+    );
+    return true;
+  }
+}
+
 // src/lib/openai-usage.ts
-import { readFileSync as readFileSync3 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join4 } from "path";
+import { readFileSync as readFileSync5 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join5 } from "path";
 var CODEX_RESPONSES_URL = "https://chatgpt.com/backend-api/codex/responses";
 var OPENCODE_AUTH_SEGMENTS = [".local", "share", "opencode", "auth.json"];
 var OpenAiUsageError = class extends Error {
@@ -3206,7 +4058,7 @@ function isLocalCredentialProblem2(err) {
 }
 function readOpenCodeChatGptCredentials() {
   try {
-    const raw = readFileSync3(join4(homedir2(), ...OPENCODE_AUTH_SEGMENTS), "utf-8");
+    const raw = readFileSync5(join5(homedir3(), ...OPENCODE_AUTH_SEGMENTS), "utf-8");
     let parsed;
     try {
       parsed = JSON.parse(raw);
@@ -3579,15 +4431,15 @@ function createResourceUsageCollector(homeDir) {
 }
 
 // src/lib/channels/driver.ts
-import { homedir as homedir3 } from "os";
+import { homedir as homedir4 } from "os";
 
 // src/lib/runner-file-sync.ts
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 
 // src/lib/file-push.ts
 import { randomUUID } from "crypto";
 import { chmod, mkdir, open as open2, realpath, rename, unlink } from "fs/promises";
-import { basename, dirname as dirname3, isAbsolute, join as join5, relative, resolve as resolve2, sep } from "path";
+import { basename, dirname as dirname5, isAbsolute, join as join6, relative, resolve as resolve2, sep } from "path";
 var FILE_MODE = 384;
 var DIRECTORY_MODE = 448;
 async function writePushedFile(request) {
@@ -3618,9 +4470,9 @@ async function writePushedFile(request) {
   }
   try {
     const { existingAncestor, missingSegments } = await resolveNearestExistingAncestor(
-      dirname3(candidate)
+      dirname5(candidate)
     );
-    const realTarget = join5(existingAncestor, ...missingSegments, basename(candidate));
+    const realTarget = join6(existingAncestor, ...missingSegments, basename(candidate));
     const allowedDirectory = await findContainingAllowedDirectory(allowedDirectories, realTarget);
     if (allowedDirectory === null) {
       return refuse("path_not_allowed", "The runner does not allow writing to that location.", {
@@ -3630,8 +4482,8 @@ async function writePushedFile(request) {
     }
     if (missingSegments.length > 0) {
       await createMissingDirectories(existingAncestor, missingSegments);
-      const realParent = await realpath(dirname3(realTarget));
-      if (realParent !== dirname3(realTarget) || !contains(allowedDirectory, realTarget)) {
+      const realParent = await realpath(dirname5(realTarget));
+      if (realParent !== dirname5(realTarget) || !contains(allowedDirectory, realTarget)) {
         return refuse("path_not_allowed", "The runner does not allow writing to that location.", {
           path: realTarget,
           bytes,
@@ -3656,7 +4508,7 @@ function expandAndValidate(requestedPath, homeDir) {
   if (requestedPath.trim() === "" || requestedPath.includes("\0")) {
     return null;
   }
-  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join5(homeDir, requestedPath.slice(2)) : requestedPath;
+  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join6(homeDir, requestedPath.slice(2)) : requestedPath;
   if (expanded.split(/[/\\]/).includes("..")) {
     return null;
   }
@@ -3674,7 +4526,7 @@ async function resolveNearestExistingAncestor(directory) {
     try {
       return { existingAncestor: await realpath(current), missingSegments };
     } catch (err) {
-      const parent = dirname3(current);
+      const parent = dirname5(current);
       if (err.code !== "ENOENT" || parent === current) {
         throw err;
       }
@@ -3729,13 +4581,13 @@ function contains(realDirectory, realTarget) {
 async function createMissingDirectories(existingAncestor, missingSegments) {
   let current = existingAncestor;
   for (const segment of missingSegments) {
-    current = join5(current, segment);
+    current = join6(current, segment);
     await mkdir(current, { recursive: true, mode: DIRECTORY_MODE });
     await chmod(current, DIRECTORY_MODE);
   }
 }
 async function writeAtomically(realTarget, content) {
-  const temporaryPath = join5(dirname3(realTarget), `.evident-push-${randomUUID()}.tmp`);
+  const temporaryPath = join6(dirname5(realTarget), `.evident-push-${randomUUID()}.tmp`);
   let handle;
   try {
     handle = await open2(temporaryPath, "wx", FILE_MODE);
@@ -3865,12 +4717,12 @@ var NOT_APPLIED = {
   opencodeAuthApplied: false
 };
 function isClaudeCredentialPath(requestedPath, homeDir) {
-  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join6(homeDir, requestedPath.slice(2)) : requestedPath;
-  return expanded === join6(homeDir, ...CLAUDE_CREDENTIALS_SEGMENTS);
+  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join7(homeDir, requestedPath.slice(2)) : requestedPath;
+  return expanded === join7(homeDir, ...CLAUDE_CREDENTIALS_SEGMENTS);
 }
 function isOpenCodeAuthPath(requestedPath, homeDir) {
-  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join6(homeDir, requestedPath.slice(2)) : requestedPath;
-  return expanded === join6(homeDir, ...OPENCODE_AUTH_SEGMENTS);
+  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join7(homeDir, requestedPath.slice(2)) : requestedPath;
+  return expanded === join7(homeDir, ...OPENCODE_AUTH_SEGMENTS);
 }
 async function applyOne(options, file) {
   const label = `${file.id.slice(0, 8)} (${file.path})`;
@@ -4416,7 +5268,7 @@ var ChannelDriver = class _ChannelDriver {
     this.stuckQueuedMs = config.stuckQueuedMs ?? DEFAULT_STUCK_QUEUED_MS;
     this.now = config.now ?? (() => Date.now());
     this.fileSyncDirectories = config.fileSyncDirectories ?? [];
-    this.homeDir = config.homeDir ?? homedir3();
+    this.homeDir = config.homeDir ?? homedir4();
     this.maxActiveSessions = config.maxActiveSessions;
     this.watcherStallMs = config.watcherStallMs ?? WATCHER_STALL_MS;
     this.wedgeWarningIntervalMs = config.wedgeWarningIntervalMs ?? WEDGE_WARNING_INTERVAL_MS;
@@ -5683,6 +6535,7 @@ var ChannelDriver = class _ChannelDriver {
       deliveryDeadlineAnchored: false,
       b2PinnedSinceMs: 0,
       b2LastDescendantCheckMs: 0,
+      b2RootOngoingHeldLogged: false,
       b2AbandonedSignalled: false,
       ambiguousPinnedSinceMs: 0,
       ambiguousResolved: false
@@ -5777,6 +6630,7 @@ var ChannelDriver = class _ChannelDriver {
       deliveryDeadlineAnchored: false,
       b2PinnedSinceMs: 0,
       b2LastDescendantCheckMs: 0,
+      b2RootOngoingHeldLogged: false,
       b2AbandonedSignalled: false,
       ambiguousPinnedSinceMs: 0,
       ambiguousResolved: false
@@ -6130,6 +6984,7 @@ var ChannelDriver = class _ChannelDriver {
       if (snapshotReadable) {
         inFlight.b2PinnedSinceMs = 0;
         inFlight.b2LastDescendantCheckMs = 0;
+        inFlight.b2RootOngoingHeldLogged = false;
         inFlight.b2AbandonedSignalled = false;
       }
     } else {
@@ -6141,11 +6996,15 @@ var ChannelDriver = class _ChannelDriver {
       const pinnedForMs = this.now() - inFlight.b2PinnedSinceMs;
       if (pinnedForMs >= B2_ABANDONMENT_MIN_PINNED_MS && this.now() - inFlight.b2LastDescendantCheckMs >= B2_ABANDONMENT_RECHECK_MS) {
         inFlight.b2LastDescendantCheckMs = this.now();
-        const descendantOngoing = await this.isAnyDescendantSessionOngoing(sessionId);
+        const [descendantOngoing, rootOngoing] = await Promise.all([
+          this.isAnyDescendantSessionOngoing(sessionId),
+          isSessionOngoing(this.port, sessionId)
+        ]);
         if (isB2AbandonmentConfirmed({
           pinnedForMs,
           minPinnedMs: B2_ABANDONMENT_MIN_PINNED_MS,
-          descendantOngoing
+          descendantOngoing,
+          rootOngoing
         })) {
           inFlight.b2AbandonedSignalled = true;
           this.log({
@@ -6154,12 +7013,26 @@ var ChannelDriver = class _ChannelDriver {
             conversation_id: conv.id,
             message_id: id
           });
+          const reply = findLastAssistantReplyFor(messages, inFlight.opencodeMessageId);
           void this.postSignal(conv.id, id, "b2_abandoned_resolved", {
-            watched_for_ms: pinnedForMs
+            watched_for_ms: pinnedForMs,
+            finish: reply?.info?.finish ?? reply?.finish,
+            ...rootOngoing != null ? { root_ongoing: rootOngoing } : {},
+            ...descendantOngoing != null ? { descendant_ongoing: descendantOngoing } : {},
+            opencode_message_id: inFlight.opencodeMessageId
           });
           await this.settleMessageDone(sessionId, watcher, inFlight, messages);
           return;
         }
+        if (rootOngoing === true && !inFlight.b2RootOngoingHeldLogged) {
+          inFlight.b2RootOngoingHeldLogged = true;
+          this.log({
+            level: "warn",
+            message: `Message ${id.slice(0, 8)} b2-pinned for ${Math.round(pinnedForMs / 1e3)}s with root_ongoing=${rootOngoing} and descendant_ongoing=${descendantOngoing} \u2014 holding until OpenCode confirms the root is idle`,
+            conversation_id: conv.id,
+            message_id: id
+          });
+        }
       }
     }
     const ambiguousPinnedNow = activelyRunning && isAmbiguousFinishPinnedRunning(messages, inFlight.opencodeMessageId);
@@ -7816,7 +8689,7 @@ async function ensureOpenCodeRunning(ctx) {
   }
   if (!ctx.interactive) {
     ctx.log(`OpenCode is not running on port ${ctx.port}. Starting it automatically...`);
-    const proc = await startOpenCode(ctx.port);
+    const proc = await startOpenCode(ctx.port, { inheritStdio: ctx.inheritStdio });
     const health = await waitForOpenCodeHealth(ctx.port, ctx.startTimeoutMs);
     if (!health.healthy) {
       return {
@@ -7884,7 +8757,7 @@ Port ${port} is already in use.`));
   }
   if (action === "start") {
     const spinner = ora2("Starting OpenCode...").start();
-    const proc = await startOpenCode(port);
+    const proc = await startOpenCode(port, { inheritStdio: ctx.inheritStdio });
     const health = await waitForOpenCodeHealth(port, INTERACTIVE_START_TIMEOUT_MS);
     if (!health.healthy) {
       spinner.fail("Failed to start OpenCode");
@@ -7896,12 +8769,323 @@ Port ${port} is already in use.`));
   return { port, process: null, version: null, notReadyReason: "you chose to continue without it" };
 }
 
+// src/lib/runner-credentials.ts
+import { chmodSync as chmodSync2, writeFileSync as writeFileSync4 } from "fs";
+import { spawn as spawn5 } from "child_process";
+var RUNNER_SECRET_FETCH_TIMEOUT_MS = 6e4;
+var CREDENTIAL_RESTORE_TIMEOUT_MS = 6e4;
+var GITHUB_PROBE_TIMEOUT_MS = 1e4;
+var GIT_CONFIG_GLOBAL = "/tmp/gitconfig";
+var GIT_CREDENTIAL_HELPER = "/tmp/git-credential-helper.sh";
+function commandError2(result) {
+  return result.stderr.trim() || `process exited with code ${result.code ?? "null"}`;
+}
+var runCommand2 = (command, args, opts) => {
+  return new Promise((resolve4) => {
+    let child;
+    let stdout = "";
+    let stderr = "";
+    let settled = false;
+    const timer = {};
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      if (timer.handle) clearTimeout(timer.handle);
+      resolve4(result);
+    };
+    try {
+      child = spawn5(command, args, { env: opts.env, stdio: ["ignore", "pipe", "pipe"] });
+    } catch (error2) {
+      finish({
+        code: null,
+        stdout,
+        stderr: error2 instanceof Error ? error2.message : String(error2),
+        timedOut: false
+      });
+      return;
+    }
+    child.stdout?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => {
+      stdout += chunk;
+    });
+    child.stderr?.setEncoding("utf8");
+    child.stderr?.on("data", (chunk) => {
+      stderr += chunk;
+    });
+    child.once("error", (error2) => {
+      finish({
+        code: null,
+        stdout,
+        stderr: stderr === "" ? error2.message : `${stderr}
+${error2.message}`,
+        timedOut: false
+      });
+    });
+    child.once("close", (code) => finish({ code, stdout, stderr, timedOut: false }));
+    timer.handle = setTimeout(
+      () => {
+        child.kill("SIGKILL");
+        finish({ code: null, stdout, stderr, timedOut: true });
+      },
+      Math.max(0, opts.timeoutMs)
+    );
+  });
+};
+function isEnvironmentObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function secretFailure(marker, detail, log3) {
+  const message = `${marker}: ${detail}`;
+  log3(message, "error");
+  return new Error(message);
+}
+async function installRunnerSecret({
+  env,
+  log: log3,
+  commandRunner
+}) {
+  const arn = env.RUNNER_SECRET_ARN?.trim();
+  if (!arn) {
+    log3("runner secret is not configured; continuing without GitHub and MCP credentials");
+    return false;
+  }
+  const result = await (commandRunner ?? runCommand2)(
+    "aws",
+    [
+      "secretsmanager",
+      "get-secret-value",
+      "--secret-id",
+      arn,
+      "--query",
+      "SecretString",
+      "--output",
+      "text"
+    ],
+    { env, timeoutMs: RUNNER_SECRET_FETCH_TIMEOUT_MS }
+  );
+  if (result.timedOut) {
+    throw secretFailure(
+      "CREDENTIAL-RESTORE-TIMEOUT",
+      `runner-secret did not finish within ${RUNNER_SECRET_FETCH_TIMEOUT_MS}ms`,
+      log3
+    );
+  }
+  if (result.code !== 0) {
+    throw secretFailure("RUNNER-SECRET-UNREADABLE", commandError2(result), log3);
+  }
+  let payload;
+  try {
+    payload = JSON.parse(result.stdout);
+  } catch (error2) {
+    log3(
+      `RUNNER-SECRET-UNPARSEABLE: secret value is not a JSON object (${error2 instanceof Error ? error2.message : String(error2)})`,
+      "warn"
+    );
+    return false;
+  }
+  if (!isEnvironmentObject(payload)) {
+    log3("RUNNER-SECRET-UNPARSEABLE: secret value is not a JSON object", "warn");
+    return false;
+  }
+  let populated = 0;
+  let skipped = 0;
+  let githubTokenPopulated = false;
+  for (const [key, value] of Object.entries(payload)) {
+    if (typeof value !== "string" || value.length === 0) continue;
+    if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(key)) {
+      log3(
+        `RUNNER-SECRET-KEY-SKIPPED: ${JSON.stringify(key)} is not a valid environment variable name`,
+        "warn"
+      );
+      skipped += 1;
+      continue;
+    }
+    env[key] = value;
+    populated += 1;
+    if (key === "GH_TOKEN") githubTokenPopulated = true;
+  }
+  if (populated === 0) {
+    log3(
+      "RUNNER-SECRET-UNPOPULATED: populate the runner secret as documented in infrastructure/evident-runner/MICROVM.md",
+      "warn"
+    );
+  } else {
+    log3(
+      `RUNNER-SECRET-OK: exported ${populated} secret values; skipped ${skipped} invalid environment variable names`
+    );
+  }
+  return githubTokenPopulated;
+}
+function restoreFailure(operation, result, log3) {
+  const message = `CREDENTIAL-RESTORE-FAILED: ${operation} failed: ${commandError2(result)}`;
+  log3(message, "error");
+  return new Error(message);
+}
+async function runCredentialRestore(args, operation, log3, synchroniserRunner) {
+  const result = await synchroniserRunner(args, { timeoutMs: CREDENTIAL_RESTORE_TIMEOUT_MS });
+  if (result.timedOut) {
+    log3(
+      `CREDENTIAL-RESTORE-TIMEOUT: ${operation} did not finish within ${CREDENTIAL_RESTORE_TIMEOUT_MS}ms; continuing without it`,
+      "warn"
+    );
+    return result;
+  }
+  if (result.code !== 0) throw restoreFailure(operation, result, log3);
+  return result;
+}
+async function restoreCredentialStores({
+  env,
+  log: log3,
+  synchroniserRunner = runSynchroniser
+}) {
+  await runCredentialRestore(["restore", "claude"], "restore-claude", log3, synchroniserRunner);
+  await runCredentialRestore(["restore", "opencode"], "restore-opencode", log3, synchroniserRunner);
+  const result = await synchroniserRunner(["model-auth-ready"], {
+    timeoutMs: CREDENTIAL_RESTORE_TIMEOUT_MS
+  });
+  if (result.timedOut) {
+    log3(
+      `CREDENTIAL-RESTORE-TIMEOUT: model-auth-ready did not finish within ${CREDENTIAL_RESTORE_TIMEOUT_MS}ms; continuing without it`,
+      "warn"
+    );
+    return;
+  }
+  switch (result.code) {
+    case 0:
+      return;
+    case 10:
+      log3(
+        `no model credentials under s3://${env.LITESTREAM_BUCKET ?? ""}/${env.LITESTREAM_PREFIX ?? ""}/ (neither claude/credentials.json nor opencode/auth.json yielded valid JSON) and neither ANTHROPIC_API_KEY nor OPENAI_API_KEY is set. This VM boots and connects; a turn that needs a model provider fails until one is connected. See 'Seeding a credential store' in infrastructure/evident-runner/MICROVM.md.`,
+        "warn"
+      );
+      return;
+    default:
+      log3("could not determine whether this VM has model credentials", "warn");
+  }
+}
+var GIT_CREDENTIAL_HELPER_CONTENT = [
+  "#!/usr/bin/env bash",
+  '[ "$1" = get ] || exit 0',
+  "echo username=x-access-token",
+  'echo "password=${GH_TOKEN}"',
+  ""
+].join("\n");
+async function probeGitHubAccess({ env, log: log3 }) {
+  const auth = await runCommand2("gh", ["api", "user", "--jq", ".login"], {
+    env,
+    timeoutMs: GITHUB_PROBE_TIMEOUT_MS
+  });
+  if (auth.timedOut) {
+    log3(`GITHUB-PROBE-TIMEOUT: auth probe exceeded ${GITHUB_PROBE_TIMEOUT_MS}ms`, "warn");
+    return;
+  }
+  if (auth.code !== 0) {
+    log3(`GITHUB-AUTH-REJECTED: ${commandError2(auth)}`, "warn");
+    return;
+  }
+  log3(`GITHUB-AUTH-OK: ${auth.stdout.trim()}`, "debug");
+  const remote = await runCommand2("git", ["-C", process.cwd(), "remote", "get-url", "origin"], {
+    env,
+    timeoutMs: GITHUB_PROBE_TIMEOUT_MS
+  });
+  if (remote.code !== 0 || remote.timedOut) return;
+  const repo = remote.stdout.trim().replace(/^(?:https:\/\/github\.com\/|git@github\.com:)/, "").replace(/\.git$/, "");
+  if (!repo) return;
+  const repository = await runCommand2("gh", ["api", `repos/${repo}`, "--jq", ".full_name"], {
+    env,
+    timeoutMs: GITHUB_PROBE_TIMEOUT_MS
+  });
+  if (repository.timedOut) {
+    log3(
+      `GITHUB-PROBE-TIMEOUT: repository probe for ${repo} exceeded ${GITHUB_PROBE_TIMEOUT_MS}ms`,
+      "warn"
+    );
+  } else if (repository.code !== 0) {
+    log3(`GITHUB-REPO-INACCESSIBLE: ${repo}: ${commandError2(repository)}`, "warn");
+  }
+}
+async function configureGitHubAccess({ env, log: log3 }) {
+  if (!env.GH_TOKEN) {
+    log3("GITHUB-CREDENTIALS-MISSING: GH_TOKEN is unavailable; see RUNNER-SECRET-* above", "warn");
+    return;
+  }
+  try {
+    env.GIT_CONFIG_GLOBAL = GIT_CONFIG_GLOBAL;
+    writeFileSync4(GIT_CONFIG_GLOBAL, "");
+    writeFileSync4(GIT_CREDENTIAL_HELPER, GIT_CREDENTIAL_HELPER_CONTENT, { mode: 448 });
+    chmodSync2(GIT_CREDENTIAL_HELPER, 448);
+    const config = [
+      ["user.name", env.GIT_USER_NAME ?? "evident-bot"],
+      ["user.email", env.GIT_USER_EMAIL ?? "evident-bot@users.noreply.github.com"],
+      ["init.defaultBranch", "main"],
+      ["credential.https://github.com.helper", GIT_CREDENTIAL_HELPER]
+    ];
+    for (const [key, value] of config) {
+      const result = await runCommand2("git", ["config", "--global", key, value], {
+        env,
+        timeoutMs: GITHUB_PROBE_TIMEOUT_MS
+      });
+      if (result.timedOut || result.code !== 0) throw new Error(commandError2(result));
+    }
+  } catch (error2) {
+    log3(
+      `GITHUB-SETUP-FAILED: could not configure local git credentials; continuing without GitHub access (${error2 instanceof Error ? error2.message : String(error2)})`,
+      "warn"
+    );
+    return;
+  }
+  void probeGitHubAccess({ env, log: log3 }).catch((error2) => {
+    log3(
+      `GITHUB-SETUP-FAILED: GitHub access probe failed: ${error2 instanceof Error ? error2.message : String(error2)}`,
+      "warn"
+    );
+  });
+}
+
+// src/lib/opencode/config-overlay.ts
+import { execFileSync as execFileSync2 } from "child_process";
+import { copyFileSync, existsSync as existsSync2, statSync as statSync5 } from "fs";
+import { isAbsolute as isAbsolute2, join as join8, resolve as resolve3 } from "path";
+function isFile(filePath) {
+  return existsSync2(filePath) && statSync5(filePath).isFile();
+}
+function applyRunnerOpenCodeConfig({
+  overlayPath,
+  cwd = process.cwd(),
+  log: log3
+}) {
+  if (!overlayPath) {
+    log3("runner OpenCode config is not configured; using the baked project config", "debug");
+    return;
+  }
+  const source = isAbsolute2(overlayPath) ? overlayPath : resolve3(cwd, overlayPath);
+  const target = isFile(join8(cwd, "opencode.jsonc")) ? "opencode.jsonc" : "opencode.json";
+  if (!isFile(source)) {
+    log3(
+      `RUNNER-OPENCODE-CONFIG-MISSING: ${source} is not a file; headless turns will wedge on the first external-directory permission prompt (#563)`,
+      "error"
+    );
+    return;
+  }
+  copyFileSync(source, join8(cwd, target));
+  try {
+    execFileSync2("git", ["-C", cwd, "update-index", "--skip-worktree", target], {
+      stdio: "ignore"
+    });
+  } catch (error2) {
+    const detail = error2 instanceof Error ? error2.message : String(error2);
+    log3(`could not mark ${target} skip-worktree: ${detail}; it may show as a local change`, "warn");
+  }
+  log3(`Applied runner OpenCode config ${source} to ${join8(cwd, target)}`);
+}
+
 // src/commands/run.ts
 var MAX_ACTIVITY_LOG_ENTRIES = 10;
 var CHANNEL_POLL_INTERVAL_MS = Number(process.env.EVIDENT_CHANNEL_POLL_INTERVAL_MS) || 2e3;
 var CHANNEL_STUCK_QUEUED_MS = Number(process.env.EVIDENT_STUCK_QUEUED_MS) || void 0;
 var SHUTDOWN_DRAIN_TIMEOUT_MS = Number(process.env.EVIDENT_SHUTDOWN_DRAIN_MS) || 25e3;
 var TELEMETRY_SHUTDOWN_TIMEOUT_MS = 5e3;
+var CHILD_STOP_TIMEOUT_MS = 1e4;
 function resolveLogLevel(options) {
   const accepted = Object.keys(LOG_LEVELS);
   const validate = (value, source) => {
@@ -7932,11 +9116,11 @@ function resolveFileSyncDirectories(raw, homeDir) {
     if (trimmed === "") {
       throw new Error("--enable-file-sync-to requires a directory path (got an empty value)");
     }
-    const expanded = trimmed === "~" ? homeDir : trimmed.startsWith("~/") ? join7(homeDir, trimmed.slice(2)) : trimmed;
-    if (!isAbsolute2(expanded)) {
+    const expanded = trimmed === "~" ? homeDir : trimmed.startsWith("~/") ? join9(homeDir, trimmed.slice(2)) : trimmed;
+    if (!isAbsolute3(expanded)) {
       throw new Error(`--enable-file-sync-to requires an absolute directory path; got "${entry}"`);
     }
-    const normalized = resolvePath(expanded);
+    const normalized = resolvePath2(expanded);
     if (parse(normalized).root === normalized) {
       throw new Error(
         `--enable-file-sync-to will not allow-list the filesystem root ("${entry}"); name the specific directory the credentials belong in (for example ~/.claude)`
@@ -8052,7 +9236,7 @@ function logActivity(state, entry) {
 }
 function reportSessionDbRecovery(state) {
   try {
-    const report = drainSessionDbRecoveryReport({ homeDir: homedir4(), env: process.env });
+    const report = drainSessionDbRecoveryReport({ homeDir: homedir5(), env: process.env });
     for (const record of report.records) {
       const activity = buildSessionDbRecoveryActivity(record);
       if (!activity) throw new Error("could not map session-DB recovery record");
@@ -8070,6 +9254,16 @@ function reportSessionDbRecovery(state) {
     );
   }
 }
+function reportSessionDbRecoveryRecord(state, record) {
+  const activity = buildSessionDbRecoveryActivity(record);
+  if (!activity) throw new Error("could not map session-DB recovery record");
+  logActivity(state, {
+    type: activity.level === "error" ? "error" : "info",
+    level: activity.level,
+    ...activity.level === "error" ? { error: activity.message } : { message: activity.message },
+    metadata: activity.metadata
+  });
+}
 function displayStatus(state) {
   if (!state.interactive) return;
   const attempt = state.connection?.reconnectAttempt ?? 0;
@@ -8242,7 +9436,7 @@ async function driveChannels(state, driver) {
         }
       }
     }
-    await new Promise((resolve3) => setTimeout(resolve3, CHANNEL_POLL_INTERVAL_MS));
+    await new Promise((resolve4) => setTimeout(resolve4, CHANNEL_POLL_INTERVAL_MS));
     const cycleMs = performance.now() - cycleStartedAtMs;
     if (idleThisCycle) idleMs += cycleMs;
     if (unreachableThisCycle) unreachableMs += cycleMs;
@@ -8265,7 +9459,43 @@ async function driveChannels(state, driver) {
 var SESSION_CLEANUP_FIRST_SWEEP_MS = 1e4;
 var SESSION_DB_RECLAIM_MAX_PAGES = 2e3;
 function sessionDbPath() {
-  return join7(homedir4(), ".local", "share", "opencode", "opencode.db");
+  return join9(homedir5(), ".local", "share", "opencode", "opencode.db");
+}
+function logSessionDbProvenanceMismatch(state, provenance, currentVersion, preBootMigrationCount) {
+  const record = {
+    v: 1,
+    event: "session_db_recovery",
+    at: (/* @__PURE__ */ new Date()).toISOString(),
+    stage: "verify",
+    outcome: "schema_provenance_mismatch",
+    severity: "error",
+    reason: provenance.reason ?? "schema-provenance-mismatch",
+    litestream_exit_code: null,
+    attempt: null,
+    replica_objects: null,
+    replica_bytes: null,
+    quarantine_destination: null,
+    quarantined_objects: null,
+    quarantine_failed_objects: null,
+    quarantined_bytes: null,
+    verified_restore_point: null,
+    restore_points_tried: null,
+    provenance_reason: provenance.reason,
+    provenance_migration_delta: provenance.migrationDelta,
+    replication_suspended: false,
+    dbPath: sessionDbPath(),
+    recorded_version: provenance.recordedVersion,
+    current_version: currentVersion,
+    provenance_pre_boot_migration_count: preBootMigrationCount
+  };
+  const activity = buildSessionDbRecoveryActivity(record);
+  if (!activity) throw new Error("could not map session-DB provenance activity");
+  logActivity(state, {
+    type: activity.level === "error" ? "error" : "info",
+    level: activity.level,
+    ...activity.level === "error" ? { error: activity.message } : { message: activity.message },
+    metadata: activity.metadata
+  });
 }
 async function runSweep(state, driver, config) {
   const mode = `age=${config.maxAgeMs ?? "\u2014"} count=${config.maxCount ?? "\u2014"}`;
@@ -8312,7 +9542,7 @@ async function runSweep(state, driver, config) {
     const reclaimResult = await reclaimSessionDbSpace({
       dbPath: sessionDbPath(),
       maxPages: SESSION_DB_RECLAIM_MAX_PAGES,
-      allowFullVacuum: protectedNow.size === 0
+      allowFullVacuum: protectedNow.size === 0 && !state.sessionDbProvenanceAnomaly
     });
     if (reclaimResult.ok) {
       const beforeMib = (reclaimResult.beforeBytes / 1024 / 1024).toFixed(1);
@@ -8348,7 +9578,7 @@ function scheduleSessionCleanup(state, driver, options) {
   for (const warning2 of config.warnings) {
     logActivity(state, { type: "info", level: "warn", message: `Session cleanup: ${warning2}` });
   }
-  const dbBytes = statSessionDbBytes(homedir4());
+  const dbBytes = statSessionDbBytes(homedir5());
   void (async () => {
     const reclaimSkipReason = dbBytes !== null && config.enabled ? await probeReclaimAvailability({ dbPath: sessionDbPath(), requiredBytes: dbBytes }) : null;
     const sizeWarning = buildSessionStoreSizeWarning({
@@ -8507,7 +9737,17 @@ function scheduleClaudeUsageReporting(state, options) {
     setTimer: (timer) => {
       state.claudeUsageTimer = timer;
     },
-    fetchUsage: getClaudeUsage,
+    fetchUsage: async () => {
+      const usage = await getClaudeUsage();
+      if (usage.ownerLookupError) {
+        logActivity(state, {
+          type: "info",
+          level: "debug",
+          message: `Claude usage owner lookup failed: ${usage.ownerLookupError}`
+        });
+      }
+      return usage;
+    },
     report: (usage) => reportClaudeUsage(state.agentId, state.authHeader, usage),
     isLocalCredentialProblem,
     forcedOnHint: "run `claude` to sign in",
@@ -8539,7 +9779,7 @@ function scheduleResourceUsageReporting(state, options) {
     });
     return;
   }
-  const collect = createResourceUsageCollector(homedir4());
+  const collect = createResourceUsageCollector(homedir5());
   let consecutiveFailures = 0;
   const tick = async () => {
     try {
@@ -8679,15 +9919,31 @@ async function cleanup(state, opts = {}) {
   }
   if (state.opencodeProcess) {
     const opencodeProcess = state.opencodeProcess;
-    await timeShutdownPhase(state, durations, "opencode_stop", () => stopOpenCode(opencodeProcess));
+    const result = await timeShutdownPhase(
+      state,
+      durations,
+      "opencode_stop",
+      () => stopOpenCodeAndWait(opencodeProcess, CHILD_STOP_TIMEOUT_MS)
+    );
     if (state.interactive) {
-      logActivity(state, { type: "info", message: "Stopped OpenCode process" });
+      logActivity(state, { type: "info", message: `Stopped OpenCode process (${result.outcome})` });
       displayStatus(state);
     } else {
-      log2(state, "Stopped OpenCode process");
+      log2(state, `Stopped OpenCode process (${result.outcome})`);
     }
     state.opencodeProcess = null;
   }
+  if (state.litestreamProcess) {
+    const litestreamProcess = state.litestreamProcess;
+    const result = await timeShutdownPhase(
+      state,
+      durations,
+      "litestream_stop",
+      () => stopSessionDbReplication(litestreamProcess, CHILD_STOP_TIMEOUT_MS)
+    );
+    log2(state, `Stopped litestream replication (${result.outcome})`);
+    state.litestreamProcess = null;
+  }
   return durations;
 }
 async function run(options) {
@@ -8696,7 +9952,12 @@ async function run(options) {
   let fileSyncDirectories;
   try {
     logLevel = resolveLogLevel(options);
-    fileSyncDirectories = resolveFileSyncDirectories(options.enableFileSyncTo, homedir4());
+    fileSyncDirectories = resolveFileSyncDirectories(options.enableFileSyncTo, homedir5());
+    if (options.restoreSessionDb && !options.sessionDbNoReplicateMarker) {
+      throw new Error(
+        "--restore-session-db requires --session-db-no-replicate-marker <path>; restore failures must block Litestream replication"
+      );
+    }
   } catch (error2) {
     const message = error2 instanceof Error ? error2.message : String(error2);
     if (options.json) {
@@ -8720,7 +9981,9 @@ async function run(options) {
     connected: false,
     opencodeConnected: false,
     opencodeVersion: null,
+    sessionDbProvenanceAnomaly: false,
     opencodeProcess: null,
+    litestreamProcess: null,
     connection: null,
     channelDriver: null,
     running: true,
@@ -8787,8 +10050,8 @@ async function run(options) {
           return true;
         }
       );
-      const timedOut = new Promise((resolve3) => {
-        timer = setTimeout(() => resolve3(false), telemetryBudgetMs);
+      const timedOut = new Promise((resolve4) => {
+        timer = setTimeout(() => resolve4(false), telemetryBudgetMs);
       });
       if (!await Promise.race([flushed, timedOut])) {
         log2(state, `Telemetry flush exceeded ${telemetryBudgetMs}ms \u2014 exiting anyway`, "warn");
@@ -8928,7 +10191,67 @@ async function run(options) {
     } else {
       log2(state, "Not running in a MicroVM (MICROVM_ID unset) \u2014 nothing to report", "debug");
     }
+    if (options.restoreRunnerCredentials) {
+      log2(state, "Restoring runner credentials before starting OpenCode");
+      const credentialContext = {
+        env: process.env,
+        log: (message, level = "info") => {
+          if (level === "error") {
+            logActivity(state, { type: "error", error: message });
+          } else {
+            logActivity(state, { type: "info", level, message });
+          }
+        }
+      };
+      const githubTokenPopulated = await installRunnerSecret(credentialContext);
+      await restoreCredentialStores(credentialContext);
+      if (githubTokenPopulated) await configureGitHubAccess(credentialContext);
+    }
+    let sessionDbVerifyFatal = false;
+    if (!options.restoreSessionDb) {
+      log2(state, "Skipping session-DB restore: --restore-session-db was not passed", "debug");
+    } else {
+      const health = await checkOpenCodeHealth(state.port);
+      if (health.healthy) {
+        log2(
+          state,
+          "Skipping session-DB restore: OpenCode is already serving this database",
+          "debug"
+        );
+      } else {
+        const result = await restoreAndVerifySessionDb({
+          dbPath: sessionDbPath(),
+          litestreamConfig: options.litestreamConfig,
+          noReplicateMarker: options.sessionDbNoReplicateMarker,
+          env: process.env,
+          log: (message, level = "info") => {
+            if (level === "error") {
+              logActivity(state, { type: "error", error: message });
+            } else {
+              logActivity(state, { type: "info", level, message });
+            }
+          },
+          reportRecovery: (record) => reportSessionDbRecoveryRecord(state, record)
+        });
+        sessionDbVerifyFatal = result.verifyFatal;
+      }
+    }
     reportSessionDbRecovery(state);
+    if (sessionDbVerifyFatal) {
+      throw new Error(
+        "SESSION-DB-INTEGRITY-EXHAUSTED: the corrupt session DB could not be proven separated from the active backup prefix or removed from disk"
+      );
+    }
+    applyRunnerOpenCodeConfig({
+      overlayPath: options.opencodeConfigOverlay,
+      log: (message, level = "info") => {
+        if (level === "error") {
+          logActivity(state, { type: "error", error: message });
+        } else {
+          logActivity(state, { type: "info", level, message });
+        }
+      }
+    });
     const { timeoutMs: opencodeStartTimeoutMs, warnings: opencodeStartTimeoutWarnings } = resolveOpenCodeStartTimeoutMs(options, process.env);
     for (const warning2 of opencodeStartTimeoutWarnings) {
       logActivity(state, { type: "info", level: "warn", message: warning2 });
@@ -8937,6 +10260,7 @@ async function run(options) {
     for (const warning2 of maxActiveSessionsWarnings) {
       logActivity(state, { type: "info", level: "warn", message: warning2 });
     }
+    const preBootMigrationIds = readSessionDbMigrationIds(sessionDbPath());
     const ocSpinner = interactive && !state.json ? ora3("Checking OpenCode...").start() : null;
     try {
       const oc = await ensureOpenCodeRunning({
@@ -8944,11 +10268,41 @@ async function run(options) {
         interactive: state.interactive,
         agentId: state.agentId,
         log: (message) => log2(state, message),
-        startTimeoutMs: opencodeStartTimeoutMs
+        startTimeoutMs: opencodeStartTimeoutMs,
+        inheritStdio: Boolean(options.opencodePidFile)
       });
       state.port = oc.port;
-      state.opencodeProcess = oc.process;
+      state.opencodeProcess = options.opencodePidFile ? null : oc.process;
       state.opencodeVersion = oc.version;
+      if (options.opencodePidFile && oc.process?.pid !== void 0) {
+        try {
+          writeFileSync5(options.opencodePidFile, `${oc.process.pid}
+`, { mode: 384 });
+          chmodSync3(options.opencodePidFile, 384);
+        } catch (error2) {
+          logActivity(state, {
+            type: "error",
+            error: `Failed to write OpenCode pid file ${options.opencodePidFile}: ${error2 instanceof Error ? error2.message : String(error2)}`
+          });
+        }
+      }
+      if (state.opencodeVersion !== null) {
+        const provenance = checkSessionDbProvenance({
+          dbPath: sessionDbPath(),
+          currentVersion: state.opencodeVersion,
+          homeDir: homedir5(),
+          env: process.env
+        });
+        if (provenance.anomaly) {
+          state.sessionDbProvenanceAnomaly = true;
+          logSessionDbProvenanceMismatch(
+            state,
+            provenance,
+            state.opencodeVersion,
+            preBootMigrationIds?.length ?? null
+          );
+        }
+      }
       state.opencodeConnected = oc.notReadyReason === null;
       const version2 = state.opencodeVersion ? ` (v${state.opencodeVersion})` : "";
       ocSpinner?.succeed(`OpenCode running on port ${state.port}${version2}`);
@@ -8985,6 +10339,108 @@ async function run(options) {
       ocSpinner?.fail(error2.message);
       throw error2;
     }
+    if (options.litestreamPidFile) {
+      if (options.sessionDbNoReplicateMarker && existsSync3(options.sessionDbNoReplicateMarker)) {
+        log2(
+          state,
+          `Skipping Litestream replication because ${options.sessionDbNoReplicateMarker} marks this session database unsafe to replicate`
+        );
+      } else if (!options.litestreamConfig) {
+        logActivity(state, {
+          type: "info",
+          level: "warn",
+          message: "Skipping Litestream replication because no configuration file was provided"
+        });
+      } else {
+        let existingPid;
+        if (existsSync3(options.litestreamPidFile)) {
+          try {
+            const rawPid = readFileSync6(options.litestreamPidFile, "utf8").trim();
+            const parsedPid = Number(rawPid);
+            if (/^\d+$/.test(rawPid) && Number.isSafeInteger(parsedPid) && parsedPid > 0) {
+              existingPid = parsedPid;
+            }
+          } catch (error2) {
+            logActivity(state, {
+              type: "info",
+              level: "warn",
+              message: `Could not read Litestream pid file ${options.litestreamPidFile}; checking for a new process: ${error2 instanceof Error ? error2.message : String(error2)}`
+            });
+          }
+        }
+        if (existingPid !== void 0 && isProcessAlive(existingPid)) {
+          log2(state, `Litestream replication is already running with pid ${existingPid}`);
+        } else {
+          const litestreamProcess = startSessionDbReplication(options.litestreamConfig);
+          state.litestreamProcess = null;
+          let failureHandled = false;
+          const reportImageOwnedReplicationFailure = (message) => {
+            if (failureHandled || state.shuttingDown || !state.running) return;
+            failureHandled = true;
+            logActivity(state, { type: "error", error: message });
+            if (state.interactive) displayStatus(state);
+          };
+          litestreamProcess.on("exit", (code, signal) => {
+            reportImageOwnedReplicationFailure(
+              `Litestream replication stopped unexpectedly (code: ${code ?? "null"}, signal: ${signal ?? "none"})`
+            );
+          });
+          litestreamProcess.on("error", (error2) => {
+            reportImageOwnedReplicationFailure(
+              `Litestream replication failed: ${error2 instanceof Error ? error2.message : String(error2)}`
+            );
+          });
+          try {
+            if (litestreamProcess.pid !== void 0) {
+              writeFileSync5(options.litestreamPidFile, `${litestreamProcess.pid}
+`, {
+                mode: 384
+              });
+              chmodSync3(options.litestreamPidFile, 384);
+            }
+          } catch (error2) {
+            logActivity(state, {
+              type: "error",
+              error: `Failed to write Litestream pid file ${options.litestreamPidFile}: ${error2 instanceof Error ? error2.message : String(error2)}`
+            });
+          }
+          log2(state, `Started litestream replication with config ${options.litestreamConfig}`);
+        }
+      }
+    } else if (options.litestreamConfig) {
+      const litestreamProcess = startSessionDbReplication(options.litestreamConfig);
+      state.litestreamProcess = litestreamProcess;
+      let failureHandled = false;
+      const failRunForReplication = (message) => {
+        if (failureHandled || state.shuttingDown || !state.running) return;
+        failureHandled = true;
+        state.shuttingDown = true;
+        logActivity(state, { type: "error", error: message });
+        if (state.interactive) displayStatus(state);
+        void (async () => {
+          try {
+            await cleanup(state);
+            await shutdownTelemetry();
+          } catch (error2) {
+            console.error(
+              `[run] replication failure cleanup failed: ${error2 instanceof Error ? error2.message : String(error2)}`
+            );
+          }
+          process.exit(1);
+        })();
+      };
+      litestreamProcess.on("exit", (code, signal) => {
+        failRunForReplication(
+          `Litestream replication stopped unexpectedly (code: ${code ?? "null"}, signal: ${signal ?? "none"})`
+        );
+      });
+      litestreamProcess.on("error", (error2) => {
+        failRunForReplication(
+          `Litestream replication failed: ${error2 instanceof Error ? error2.message : String(error2)}`
+        );
+      });
+      log2(state, `Started litestream replication with config ${options.litestreamConfig}`);
+    }
     const tunnelSpinner = interactive && !state.json ? ora3("Connecting tunnel...").start() : null;
     const channelDriver = new ChannelDriver({
       agentId: state.agentId,
@@ -8996,7 +10452,7 @@ async function run(options) {
       // #559: the `--enable-file-sync-to` allow-list. Empty ⇒ pending files are
       // REJECTED with `file_sync_disabled` on the ack, not silently ignored.
       fileSyncDirectories,
-      homeDir: homedir4(),
+      homeDir: homedir5(),
       maxActiveSessions,
       log: (entry) => (
         // Thread the driver's real level straight through so `debug`/`warn`
@@ -9188,7 +10644,7 @@ async function run(options) {
 }
 
 // src/index.ts
-var { version } = createRequire(import.meta.url)("../package.json");
+var { version } = createRequire2(import.meta.url)("../package.json");
 var program = new Command();
 program.name("evident").description("Run OpenCode locally and connect it to Evident").version(version).option(
   "--endpoint <url>",
@@ -9245,6 +10701,27 @@ program.command("run").description("Connect to Evident and process messages").op
 ).option(
   "--tunnel-ready-file <path>",
   "Path to write once the tunnel is connected (opt-in; unused unless an operator/image sets it)"
+).option(
+  "--litestream-config <path>",
+  "Replicate the OpenCode session database with `litestream replicate` using this config file (written by the runner image). Omit to disable replication."
+).option(
+  "--opencode-pid-file <path>",
+  "Record the OpenCode pid here and leave the process running at shutdown for the runner image's lifecycle hooks to stop."
+).option(
+  "--litestream-pid-file <path>",
+  "Record the Litestream pid here and leave the process running at shutdown for the runner image's lifecycle hooks to stop."
+).option(
+  "--session-db-no-replicate-marker <path>",
+  "Read this marker as a gate before starting Litestream; the session-DB restore writes it when this boot's database is not safe to replicate."
+).option(
+  "--restore-session-db",
+  "Restore and verify the OpenCode session database before starting OpenCode; requires --litestream-config for the replica and --session-db-no-replicate-marker for give-up records."
+).option(
+  "--restore-runner-credentials",
+  "Restore the hosted runner secret and persisted credential stores before starting OpenCode."
+).option(
+  "--opencode-config-overlay <path>",
+  "Apply this runner-provided OpenCode config before starting OpenCode."
 ).action(
   (options) => {
     run({
@@ -9276,7 +10753,14 @@ program.command("run").description("Connect to Evident and process messages").op
       // Raw values — expansion/validation is single-sourced in run.ts's
       // resolveFileSyncDirectories.
       enableFileSyncTo: options.enableFileSyncTo,
-      tunnelReadyFile: options.tunnelReadyFile
+      tunnelReadyFile: options.tunnelReadyFile,
+      litestreamConfig: options.litestreamConfig,
+      opencodePidFile: options.opencodePidFile,
+      litestreamPidFile: options.litestreamPidFile,
+      sessionDbNoReplicateMarker: options.sessionDbNoReplicateMarker,
+      restoreSessionDb: options.restoreSessionDb,
+      restoreRunnerCredentials: options.restoreRunnerCredentials,
+      opencodeConfigOverlay: options.opencodeConfigOverlay
     });
   }
 );