@evident-ai/runner-synchroniser 0.1.1-dev.e4d9a44 → 3.1.1-dev.297b927

package/dist/cli.js

@@ -10,8 +10,6 @@ var __export = (target, all) => {
 };
 
 // ../../node_modules/.pnpm/tsup@8.5.1_@swc+core@1.15.10_jiti@2.7.0_postcss@8.5.6_tsx@4.21.0_typescript@5.9.3_yaml@2.9.0/node_modules/tsup/assets/esm_shims.js
-import path from "path";
-import { fileURLToPath } from "url";
 var init_esm_shims = __esm({
   "../../node_modules/.pnpm/tsup@8.5.1_@swc+core@1.15.10_jiti@2.7.0_postcss@8.5.6_tsx@4.21.0_typescript@5.9.3_yaml@2.9.0/node_modules/tsup/assets/esm_shims.js"() {
     "use strict";
@@ -19,7 +17,7 @@ var init_esm_shims = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/retry/middleware-retry/isStreamingPayload/isStreamingPayload.js
-import { Readable } from "stream";
+import { Readable } from "node:stream";
 var isStreamingPayload;
 var init_isStreamingPayload = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/retry/middleware-retry/isStreamingPayload/isStreamingPayload.js"() {
@@ -2567,7 +2565,7 @@ var init_hex_encoding = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/util-body-length/calculateBodyLength.js
-import { ReadStream, fstatSync, lstatSync } from "fs";
+import { ReadStream, fstatSync, lstatSync } from "node:fs";
 var calculateBodyLength;
 var init_calculateBodyLength = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/util-body-length/calculateBodyLength.js"() {
@@ -2831,8 +2829,8 @@ var init_types = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getHomeDir.js
-import { homedir } from "os";
-import { sep } from "path";
+import { homedir } from "node:os";
+import { sep } from "node:path";
 var homeDirCache, getHomeDirCacheKey, getHomeDir;
 var init_getHomeDir = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getHomeDir.js"() {
@@ -2874,8 +2872,8 @@ var init_getProfileName = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getSSOTokenFilepath.js
-import { createHash } from "crypto";
-import { join } from "path";
+import { createHash } from "node:crypto";
+import { join } from "node:path";
 var getSSOTokenFilepath;
 var init_getSSOTokenFilepath = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getSSOTokenFilepath.js"() {
@@ -2891,7 +2889,7 @@ var init_getSSOTokenFilepath = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getSSOTokenFromFile.js
-import { readFile } from "fs/promises";
+import { readFile } from "node:fs/promises";
 var tokenIntercept, getSSOTokenFromFile;
 var init_getSSOTokenFromFile = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getSSOTokenFromFile.js"() {
@@ -2946,7 +2944,7 @@ var init_getConfigData = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getConfigFilepath.js
-import { join as join2 } from "path";
+import { join as join2 } from "node:path";
 var ENV_CONFIG_PATH, getConfigFilepath;
 var init_getConfigFilepath = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getConfigFilepath.js"() {
@@ -2959,7 +2957,7 @@ var init_getConfigFilepath = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getCredentialsFilepath.js
-import { join as join3 } from "path";
+import { join as join3 } from "node:path";
 var ENV_CREDENTIALS_PATH, getCredentialsFilepath;
 var init_getCredentialsFilepath = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getCredentialsFilepath.js"() {
@@ -3030,7 +3028,7 @@ var init_parseIni = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/readFile.js
-import { readFile as fsReadFile } from "fs/promises";
+import { readFile as fsReadFile } from "node:fs/promises";
 var filePromises, fileIntercept, readFile2;
 var init_readFile = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/readFile.js"() {
@@ -3038,20 +3036,20 @@ var init_readFile = __esm({
     init_esm_shims();
     filePromises = {};
     fileIntercept = {};
-    readFile2 = (path2, options) => {
-      if (fileIntercept[path2] !== void 0) {
-        return fileIntercept[path2];
+    readFile2 = (path, options) => {
+      if (fileIntercept[path] !== void 0) {
+        return fileIntercept[path];
       }
-      if (!filePromises[path2] || options?.ignoreCache) {
-        filePromises[path2] = fsReadFile(path2, "utf8");
+      if (!filePromises[path] || options?.ignoreCache) {
+        filePromises[path] = fsReadFile(path, "utf8");
       }
-      return filePromises[path2];
+      return filePromises[path];
     };
   }
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/loadSharedConfigFiles.js
-import { join as join4 } from "path";
+import { join as join4 } from "node:path";
 var swallowError, loadSharedConfigFiles;
 var init_loadSharedConfigFiles = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/loadSharedConfigFiles.js"() {
@@ -3169,8 +3167,8 @@ var init_externalDataInterceptor = __esm({
       getFileRecord() {
         return fileIntercept;
       },
-      interceptFile(path2, contents) {
-        fileIntercept[path2] = Promise.resolve(contents);
+      interceptFile(path, contents) {
+        fileIntercept[path] = Promise.resolve(contents);
       },
       getTokenRecord() {
         return tokenIntercept;
@@ -3397,7 +3395,7 @@ var init_getInstanceMetadataRegion = __esm({
       return { hostname: "169.254.169.254" };
     };
     imdsRequest = async (options) => {
-      const { request } = await import("http");
+      const { request } = await import("node:http");
       return new Promise((resolve, reject) => {
         const req = request({
           hostname: options.hostname,
@@ -3812,8 +3810,8 @@ var init_createConfigValueProvider = __esm({
               return endpoint.url.href;
             }
             if ("hostname" in endpoint) {
-              const { protocol, hostname, port, path: path2 } = endpoint;
-              return `${protocol}//${hostname}${port ? ":" + port : ""}${path2}`;
+              const { protocol, hostname, port, path } = endpoint;
+              return `${protocol}//${hostname}${port ? ":" + port : ""}${path}`;
             }
           }
           return endpoint;
@@ -4220,18 +4218,18 @@ var init_getAttrPathList = __esm({
     "use strict";
     init_esm_shims();
     init_types2();
-    getAttrPathList = (path2) => {
-      const parts = path2.split(".");
+    getAttrPathList = (path) => {
+      const parts = path.split(".");
       const pathList = [];
       for (const part of parts) {
         const squareBracketIndex = part.indexOf("[");
         if (squareBracketIndex !== -1) {
           if (part.indexOf("]") !== part.length - 1) {
-            throw new EndpointError(`Path: '${path2}' does not end with ']'`);
+            throw new EndpointError(`Path: '${path}' does not end with ']'`);
           }
           const arrayIndex = part.slice(squareBracketIndex + 1, -1);
           if (Number.isNaN(parseInt(arrayIndex))) {
-            throw new EndpointError(`Invalid array index: '${arrayIndex}' in path: '${path2}'`);
+            throw new EndpointError(`Invalid array index: '${arrayIndex}' in path: '${path}'`);
           }
           if (squareBracketIndex !== 0) {
             pathList.push(part.slice(0, squareBracketIndex));
@@ -4254,9 +4252,9 @@ var init_getAttr = __esm({
     init_esm_shims();
     init_types2();
     init_getAttrPathList();
-    getAttr = (value, path2) => getAttrPathList(path2).reduce((acc, index) => {
+    getAttr = (value, path) => getAttrPathList(path).reduce((acc, index) => {
       if (typeof acc !== "object") {
-        throw new EndpointError(`Index '${index}' in '${path2}' not found in '${JSON.stringify(value)}'`);
+        throw new EndpointError(`Index '${index}' in '${path}' not found in '${JSON.stringify(value)}'`);
       } else if (Array.isArray(acc)) {
         const i12 = parseInt(index);
         return acc[i12 < 0 ? acc.length + i12 : i12];
@@ -4327,8 +4325,8 @@ var init_parseURL = __esm({
             return value;
           }
           if (typeof value === "object" && "hostname" in value) {
-            const { hostname: hostname2, port, protocol: protocol2 = "", path: path2 = "", query = {} } = value;
-            const url = new URL(`${protocol2}//${hostname2}${port ? `:${port}` : ""}${path2}`);
+            const { hostname: hostname2, port, protocol: protocol2 = "", path = "", query = {} } = value;
+            const url = new URL(`${protocol2}//${hostname2}${port ? `:${port}` : ""}${path}`);
             url.search = Object.entries(query).map(([k12, v2]) => `${k12}=${v2}`).join("&");
             return url;
           }
@@ -4764,7 +4762,7 @@ var init_endpoints = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/util-stream/checksum/ChecksumStream.js
-import { Readable as Readable2 } from "stream";
+import { Readable as Readable2 } from "node:stream";
 var ChecksumStream;
 var init_ChecksumStream = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/util-stream/checksum/ChecksumStream.js"() {
@@ -5142,7 +5140,7 @@ var init_createBufferedReadable_browser = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/util-stream/createBufferedReadable.js
-import { Readable as Readable3 } from "stream";
+import { Readable as Readable3 } from "node:stream";
 function createBufferedReadable(upstream, size, logger3) {
   if (isReadableStream(upstream)) {
     return createBufferedReadableStream(upstream, size, logger3);
@@ -5243,7 +5241,7 @@ ${value}\r
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/util-stream/getAwsChunkedEncodingStream.js
-import { Readable as Readable4 } from "stream";
+import { Readable as Readable4 } from "node:stream";
 function getAwsChunkedEncodingStream2(stream, options) {
   const readable = stream;
   const readableStream = stream;
@@ -5411,7 +5409,7 @@ var init_sdk_stream_mixin_browser = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/util-stream/stream-collector.js
-import { Writable } from "stream";
+import { Writable } from "node:stream";
 var streamCollector2, Collector;
 var init_stream_collector = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/util-stream/stream-collector.js"() {
@@ -5453,7 +5451,7 @@ var init_stream_collector = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/util-stream/sdk-stream-mixin.js
-import { Readable as Readable5 } from "stream";
+import { Readable as Readable5 } from "node:stream";
 var ERR_MSG_STREAM_HAS_BEEN_TRANSFORMED2, sdkStreamMixin2;
 var init_sdk_stream_mixin = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/util-stream/sdk-stream-mixin.js"() {
@@ -5510,7 +5508,7 @@ var init_sdk_stream_mixin = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/index.js
-import { getRandomValues } from "crypto";
+import { getRandomValues } from "node:crypto";
 var Uint8ArrayBlobAdapter, _getRandomValues, v4, generateIdempotencyToken;
 var init_serde = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/serde/index.js"() {
@@ -5595,7 +5593,7 @@ var init_SerdeContext = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/checksum/hash-stream-node/HashCalculator.js
-import { Writable as Writable2 } from "stream";
+import { Writable as Writable2 } from "node:stream";
 var HashCalculator;
 var init_HashCalculator = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/checksum/hash-stream-node/HashCalculator.js"() {
@@ -5747,7 +5745,7 @@ var init_Md5Js = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/checksum/md5/Md5Node.js
-import { createHash as createHash2 } from "crypto";
+import { createHash as createHash2 } from "node:crypto";
 function buildNativeClass() {
   return class Md5Node {
     digestLength = 16;
@@ -5823,7 +5821,7 @@ var init_Crc32Js = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/checksum/crc32/Crc32Node.js
-import * as zlib from "zlib";
+import * as zlib from "node:zlib";
 function buildNativeClass2(nativeCrc32) {
   return class Crc32Node {
     digestLength = 4;
@@ -6096,7 +6094,7 @@ var init_Sha256Js = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/checksum/sha256/Sha256Node.js
-import { createHash as createHash3, createHmac } from "crypto";
+import { createHash as createHash3, createHmac } from "node:crypto";
 function buildNativeClass3() {
   return class Sha256Node {
     digestLength = 32;
@@ -6799,7 +6797,7 @@ var init_EventStreamMarshaller = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.30.0/node_modules/@smithy/core/dist-es/submodules/event-streams/eventstream-serde/EventStreamMarshaller.js
-import { Readable as Readable6 } from "stream";
+import { Readable as Readable6 } from "node:stream";
 async function* readableToIterable(readStream) {
   let streamEnded = false;
   let generationEnded = false;
@@ -7416,11 +7414,11 @@ var init_HttpBindingProtocol = __esm({
           const opTraits = translateTraits(operationSchema.traits);
           if (opTraits.http) {
             request.method = opTraits.http[0];
-            const [path2, search] = opTraits.http[1].split("?");
+            const [path, search] = opTraits.http[1].split("?");
             if (request.path == "/") {
-              request.path = path2;
+              request.path = path;
             } else {
-              request.path += path2;
+              request.path += path;
             }
             const traitSearchParams = new URLSearchParams(search ?? "");
             for (const [key, value] of traitSearchParams) {
@@ -8953,7 +8951,7 @@ var init_invoke_store = __esm({
       als;
       static async create() {
         const instance = new _InvokeStoreMulti();
-        const asyncHooks = await import("async_hooks");
+        const asyncHooks = await import("node:async_hooks");
         instance.als = new asyncHooks.AsyncLocalStorage();
         return instance;
       }
@@ -9945,7 +9943,7 @@ var init_date_utils2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/serde/util-body-length/calculateBodyLength.js
-import { ReadStream as ReadStream2, fstatSync as fstatSync2, lstatSync as lstatSync2 } from "fs";
+import { ReadStream as ReadStream2, fstatSync as fstatSync2, lstatSync as lstatSync2 } from "node:fs";
 var calculateBodyLength2;
 var init_calculateBodyLength2 = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/serde/util-body-length/calculateBodyLength.js"() {
@@ -10169,8 +10167,8 @@ var init_types3 = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getHomeDir.js
-import { homedir as homedir2 } from "os";
-import { sep as sep2 } from "path";
+import { homedir as homedir2 } from "node:os";
+import { sep as sep2 } from "node:path";
 var homeDirCache2, getHomeDirCacheKey2, getHomeDir2;
 var init_getHomeDir2 = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getHomeDir.js"() {
@@ -10247,7 +10245,7 @@ var init_getConfigData2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getConfigFilepath.js
-import { join as join5 } from "path";
+import { join as join5 } from "node:path";
 var ENV_CONFIG_PATH2, getConfigFilepath2;
 var init_getConfigFilepath2 = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getConfigFilepath.js"() {
@@ -10260,7 +10258,7 @@ var init_getConfigFilepath2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getCredentialsFilepath.js
-import { join as join6 } from "path";
+import { join as join6 } from "node:path";
 var ENV_CREDENTIALS_PATH2, getCredentialsFilepath2;
 var init_getCredentialsFilepath2 = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getCredentialsFilepath.js"() {
@@ -10331,7 +10329,7 @@ var init_parseIni2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/readFile.js
-import { readFile as fsReadFile2 } from "fs/promises";
+import { readFile as fsReadFile2 } from "node:fs/promises";
 var filePromises2, fileIntercept2, readFile3;
 var init_readFile2 = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/readFile.js"() {
@@ -10339,20 +10337,20 @@ var init_readFile2 = __esm({
     init_esm_shims();
     filePromises2 = {};
     fileIntercept2 = {};
-    readFile3 = (path2, options) => {
-      if (fileIntercept2[path2] !== void 0) {
-        return fileIntercept2[path2];
+    readFile3 = (path, options) => {
+      if (fileIntercept2[path] !== void 0) {
+        return fileIntercept2[path];
       }
-      if (!filePromises2[path2] || options?.ignoreCache) {
-        filePromises2[path2] = fsReadFile2(path2, "utf8");
+      if (!filePromises2[path] || options?.ignoreCache) {
+        filePromises2[path] = fsReadFile2(path, "utf8");
       }
-      return filePromises2[path2];
+      return filePromises2[path];
     };
   }
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/loadSharedConfigFiles.js
-import { join as join7 } from "path";
+import { join as join7 } from "node:path";
 var swallowError3, loadSharedConfigFiles2;
 var init_loadSharedConfigFiles2 = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/loadSharedConfigFiles.js"() {
@@ -11969,7 +11967,7 @@ var init_getInstanceMetadataRegion2 = __esm({
       return { hostname: "169.254.169.254" };
     };
     imdsRequest2 = async (options) => {
-      const { request } = await import("http");
+      const { request } = await import("node:http");
       return new Promise((resolve, reject) => {
         const req = request({
           hostname: options.hostname,
@@ -12345,8 +12343,8 @@ var init_createConfigValueProvider2 = __esm({
               return endpoint.url.href;
             }
             if ("hostname" in endpoint) {
-              const { protocol, hostname, port, path: path2 } = endpoint;
-              return `${protocol}//${hostname}${port ? ":" + port : ""}${path2}`;
+              const { protocol, hostname, port, path } = endpoint;
+              return `${protocol}//${hostname}${port ? ":" + port : ""}${path}`;
             }
           }
           return endpoint;
@@ -12751,18 +12749,18 @@ var init_getAttrPathList2 = __esm({
     "use strict";
     init_esm_shims();
     init_types4();
-    getAttrPathList2 = (path2) => {
-      const parts = path2.split(".");
+    getAttrPathList2 = (path) => {
+      const parts = path.split(".");
       const pathList = [];
       for (const part of parts) {
         const squareBracketIndex = part.indexOf("[");
         if (squareBracketIndex !== -1) {
           if (part.indexOf("]") !== part.length - 1) {
-            throw new EndpointError2(`Path: '${path2}' does not end with ']'`);
+            throw new EndpointError2(`Path: '${path}' does not end with ']'`);
           }
           const arrayIndex = part.slice(squareBracketIndex + 1, -1);
           if (Number.isNaN(parseInt(arrayIndex))) {
-            throw new EndpointError2(`Invalid array index: '${arrayIndex}' in path: '${path2}'`);
+            throw new EndpointError2(`Invalid array index: '${arrayIndex}' in path: '${path}'`);
           }
           if (squareBracketIndex !== 0) {
             pathList.push(part.slice(0, squareBracketIndex));
@@ -12785,9 +12783,9 @@ var init_getAttr2 = __esm({
     init_esm_shims();
     init_types4();
     init_getAttrPathList2();
-    getAttr2 = (value, path2) => getAttrPathList2(path2).reduce((acc, index) => {
+    getAttr2 = (value, path) => getAttrPathList2(path).reduce((acc, index) => {
       if (typeof acc !== "object") {
-        throw new EndpointError2(`Index '${index}' in '${path2}' not found in '${JSON.stringify(value)}'`);
+        throw new EndpointError2(`Index '${index}' in '${path}' not found in '${JSON.stringify(value)}'`);
       } else if (Array.isArray(acc)) {
         const i12 = parseInt(index);
         return acc[i12 < 0 ? acc.length + i12 : i12];
@@ -12858,8 +12856,8 @@ var init_parseURL2 = __esm({
             return value;
           }
           if (typeof value === "object" && "hostname" in value) {
-            const { hostname: hostname2, port, protocol: protocol2 = "", path: path2 = "", query = {} } = value;
-            const url = new URL(`${protocol2}//${hostname2}${port ? `:${port}` : ""}${path2}`);
+            const { hostname: hostname2, port, protocol: protocol2 = "", path = "", query = {} } = value;
+            const url = new URL(`${protocol2}//${hostname2}${port ? `:${port}` : ""}${path}`);
             url.search = Object.entries(query).map(([k12, v2]) => `${k12}=${v2}`).join("&");
             return url;
           }
@@ -13292,7 +13290,7 @@ var init_endpoints2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/serde/index.js
-import { getRandomValues as getRandomValues2 } from "crypto";
+import { getRandomValues as getRandomValues2 } from "node:crypto";
 var Uint8ArrayBlobAdapter2, _getRandomValues2, v42;
 var init_serde2 = __esm({
   "../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/serde/index.js"() {
@@ -14116,7 +14114,7 @@ var init_user_agent_middleware = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+core@3.977.1/node_modules/@aws-sdk/core/dist-es/submodules/client/util-user-agent-node/getRuntimeUserAgentPair.js
-import { versions as versions2 } from "process";
+import { versions as versions2 } from "node:process";
 var getRuntimeUserAgentPair2;
 var init_getRuntimeUserAgentPair = __esm({
   "../../node_modules/.pnpm/@aws-sdk+core@3.977.1/node_modules/@aws-sdk/core/dist-es/submodules/client/util-user-agent-node/getRuntimeUserAgentPair.js"() {
@@ -14163,8 +14161,8 @@ var init_is_crt_available = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+core@3.977.1/node_modules/@aws-sdk/core/dist-es/submodules/client/util-user-agent-node/defaultUserAgent.js
-import { platform as platform2, release as release2 } from "os";
-import { env as env2 } from "process";
+import { platform as platform2, release as release2 } from "node:os";
+import { env as env2 } from "node:process";
 var createDefaultUserAgentProvider2;
 var init_defaultUserAgent = __esm({
   "../../node_modules/.pnpm/@aws-sdk+core@3.977.1/node_modules/@aws-sdk/core/dist-es/submodules/client/util-user-agent-node/defaultUserAgent.js"() {
@@ -14464,7 +14462,7 @@ var init_RemoteProviderInit = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+credential-provider-imds@4.4.10/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/node-http.js
-import node_http from "http";
+import node_http from "node:http";
 var init_node_http = __esm({
   "../../node_modules/.pnpm/@smithy+credential-provider-imds@4.4.10/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/node-http.js"() {
     "use strict";
@@ -14995,7 +14993,7 @@ var init_get_transformed_headers = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+node-http-handler@4.9.11/node_modules/@smithy/node-http-handler/dist-es/node-https.js
-import node_https from "https";
+import node_https from "node:https";
 var init_node_https = __esm({
   "../../node_modules/.pnpm/@smithy+node-http-handler@4.9.11/node_modules/@smithy/node-http-handler/dist-es/node-https.js"() {
     "use strict";
@@ -15150,7 +15148,7 @@ var init_set_socket_timeout = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+node-http-handler@4.9.11/node_modules/@smithy/node-http-handler/dist-es/write-request-body.js
-import { Readable as Readable8 } from "stream";
+import { Readable as Readable8 } from "node:stream";
 async function writeRequestBody(httpRequest3, request, maxContinueTimeoutMs = MIN_WAIT_TIME, externalAgent = false) {
   const headers = request.headers;
   const expect = headers ? headers.Expect || headers.expect : void 0;
@@ -15343,12 +15341,12 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             const password = request.password ?? "";
             auth = `${username}:${password}`;
           }
-          let path2 = request.path;
+          let path = request.path;
           if (queryString) {
-            path2 += `?${queryString}`;
+            path += `?${queryString}`;
           }
           if (request.fragment) {
-            path2 += `#${request.fragment}`;
+            path += `#${request.fragment}`;
           }
           let hostname = request.hostname ?? "";
           if (hostname[0] === "[" && hostname.endsWith("]")) {
@@ -15360,7 +15358,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             headers: request.headers,
             host: hostname,
             method: request.method,
-            path: path2,
+            path,
             port: request.port,
             agent,
             auth
@@ -15436,7 +15434,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
           socketAcquisitionWarningTimeout,
           throwOnRequestTimeout,
           httpAgentProvider: async () => {
-            const node_http3 = await import("http");
+            const node_http3 = await import("node:http");
             const { Agent, request } = node_http3.default ?? node_http3;
             hRequest = request;
             hAgent = Agent;
@@ -15587,7 +15585,7 @@ var init_retry_wrapper = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+credential-provider-http@3.972.61/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
-import fs from "fs/promises";
+import fs from "node:fs/promises";
 var AWS_CONTAINER_CREDENTIALS_RELATIVE_URI, DEFAULT_LINK_LOCAL_HOST, AWS_CONTAINER_CREDENTIALS_FULL_URI, AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE, AWS_CONTAINER_AUTHORIZATION_TOKEN, fromHttp, validateToken;
 var init_fromHttp = __esm({
   "../../node_modules/.pnpm/@aws-sdk+credential-provider-http@3.972.61/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js"() {
@@ -16235,10 +16233,10 @@ ${longDate}
 ${credentialScope}
 ${toHex(hashedRequest)}`;
       }
-      getCanonicalPath({ path: path2 }) {
+      getCanonicalPath({ path }) {
         if (this.uriEscapePath) {
           const normalizedPathSegments = [];
-          for (const pathSegment of path2.split("/")) {
+          for (const pathSegment of path.split("/")) {
             if (pathSegment?.length === 0)
               continue;
             if (pathSegment === ".")
@@ -16249,11 +16247,11 @@ ${toHex(hashedRequest)}`;
               normalizedPathSegments.push(pathSegment);
             }
           }
-          const normalizedPath = `${path2?.startsWith("/") ? "/" : ""}${normalizedPathSegments.join("/")}${normalizedPathSegments.length > 0 && path2?.endsWith("/") ? "/" : ""}`;
+          const normalizedPath = `${path?.startsWith("/") ? "/" : ""}${normalizedPathSegments.join("/")}${normalizedPathSegments.length > 0 && path?.endsWith("/") ? "/" : ""}`;
           const doubleEncoded = escapeUri(normalizedPath);
           return doubleEncoded.replace(/%2F/g, "/");
         }
-        return path2;
+        return path;
       }
       validateResolvedCredentials(credentials) {
         if (typeof credentials !== "object" || typeof credentials.accessKeyId !== "string" || typeof credentials.secretAccessKey !== "string") {
@@ -20245,7 +20243,7 @@ var init_validateTokenKey = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+token-providers@3.1088.0/node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js
-import { promises as fsPromises } from "fs";
+import { promises as fsPromises } from "node:fs";
 var writeFile, writeSSOTokenToFile;
 var init_writeSSOTokenToFile = __esm({
   "../../node_modules/.pnpm/@aws-sdk+token-providers@3.1088.0/node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js"() {
@@ -23767,10 +23765,10 @@ var init_signin = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+credential-provider-login@3.972.66/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
-import { createHash as createHash4, createPrivateKey, createPublicKey, sign } from "crypto";
-import { promises as fs2 } from "fs";
-import { homedir as homedir3 } from "os";
-import { dirname, join as join8 } from "path";
+import { createHash as createHash4, createPrivateKey, createPublicKey, sign } from "node:crypto";
+import { promises as fs2 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { dirname, join as join8 } from "node:path";
 var LoginCredentialsFetcher;
 var init_LoginCredentialsFetcher = __esm({
   "../../node_modules/.pnpm/@aws-sdk+credential-provider-login@3.972.66/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js"() {
@@ -24130,8 +24128,8 @@ var init_getValidatedProcessCredentials = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+credential-provider-process@3.972.59/node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js
-import { exec } from "child_process";
-import { promisify } from "util";
+import { exec } from "node:child_process";
+import { promisify } from "node:util";
 var resolveProcessCredentials;
 var init_resolveProcessCredentials = __esm({
   "../../node_modules/.pnpm/@aws-sdk+credential-provider-process@3.972.59/node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js"() {
@@ -24304,7 +24302,7 @@ var init_fromWebToken = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+credential-provider-web-identity@3.972.65/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
-import { readFileSync } from "fs";
+import { readFileSync } from "node:fs";
 var ENV_TOKEN_FILE, ENV_ROLE_ARN, ENV_ROLE_SESSION_NAME, fromTokenFile;
 var init_fromTokenFile = __esm({
   "../../node_modules/.pnpm/@aws-sdk+credential-provider-web-identity@3.972.65/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js"() {
@@ -24693,7 +24691,7 @@ var init_Sha256Js2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/checksum/sha256/Sha256Node.js
-import { createHash as createHash5, createHmac as createHmac2 } from "crypto";
+import { createHash as createHash5, createHmac as createHmac2 } from "node:crypto";
 function buildNativeClass4() {
   return class Sha256Node {
     digestLength = 32;
@@ -24855,7 +24853,7 @@ var init_RemoteProviderInit2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@smithy+credential-provider-imds@4.4.14/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/node-http.js
-import node_http2 from "http";
+import node_http2 from "node:http";
 var init_node_http2 = __esm({
   "../../node_modules/.pnpm/@smithy+credential-provider-imds@4.4.14/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/node-http.js"() {
     "use strict";
@@ -25450,7 +25448,7 @@ var init_retry_wrapper2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+credential-provider-http@3.972.63/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
-import fs3 from "fs/promises";
+import fs3 from "node:fs/promises";
 var AWS_CONTAINER_CREDENTIALS_RELATIVE_URI2, DEFAULT_LINK_LOCAL_HOST2, AWS_CONTAINER_CREDENTIALS_FULL_URI2, AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE2, AWS_CONTAINER_AUTHORIZATION_TOKEN2, fromHttp2, validateToken2;
 var init_fromHttp2 = __esm({
   "../../node_modules/.pnpm/@aws-sdk+credential-provider-http@3.972.63/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js"() {
@@ -26716,7 +26714,7 @@ var init_validateTokenKey2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+token-providers@3.1095.0/node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js
-import { promises as fsPromises2 } from "fs";
+import { promises as fsPromises2 } from "node:fs";
 var writeFile2, writeSSOTokenToFile2;
 var init_writeSSOTokenToFile2 = __esm({
   "../../node_modules/.pnpm/@aws-sdk+token-providers@3.1095.0/node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js"() {
@@ -30076,10 +30074,10 @@ var init_signin2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+credential-provider-login@3.972.68/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
-import { createHash as createHash6, createPrivateKey as createPrivateKey2, createPublicKey as createPublicKey2, sign as sign2 } from "crypto";
-import { promises as fs4 } from "fs";
-import { homedir as homedir4 } from "os";
-import { dirname as dirname2, join as join9 } from "path";
+import { createHash as createHash6, createPrivateKey as createPrivateKey2, createPublicKey as createPublicKey2, sign as sign2 } from "node:crypto";
+import { promises as fs4 } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { dirname as dirname2, join as join9 } from "node:path";
 var LoginCredentialsFetcher2;
 var init_LoginCredentialsFetcher2 = __esm({
   "../../node_modules/.pnpm/@aws-sdk+credential-provider-login@3.972.68/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js"() {
@@ -30439,8 +30437,8 @@ var init_getValidatedProcessCredentials2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+credential-provider-process@3.972.61/node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js
-import { exec as exec2 } from "child_process";
-import { promisify as promisify2 } from "util";
+import { exec as exec2 } from "node:child_process";
+import { promisify as promisify2 } from "node:util";
 var resolveProcessCredentials3;
 var init_resolveProcessCredentials3 = __esm({
   "../../node_modules/.pnpm/@aws-sdk+credential-provider-process@3.972.61/node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js"() {
@@ -30613,7 +30611,7 @@ var init_fromWebToken2 = __esm({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+credential-provider-web-identity@3.972.67/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync as readFileSync2 } from "node:fs";
 var ENV_TOKEN_FILE2, ENV_ROLE_ARN2, ENV_ROLE_SESSION_NAME2, fromTokenFile2;
 var init_fromTokenFile2 = __esm({
   "../../node_modules/.pnpm/@aws-sdk+credential-provider-web-identity@3.972.67/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js"() {
@@ -30763,8 +30761,8 @@ var init_dist_es24 = __esm({
 
 // src/cli.ts
 init_esm_shims();
-import { realpathSync } from "fs";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { realpathSync } from "node:fs";
+import { fileURLToPath } from "node:url";
 
 // src/aws-self-stop.ts
 init_esm_shims();
@@ -31488,12 +31486,12 @@ var getUserAgentPlugin = (config) => ({
 
 // ../../node_modules/.pnpm/@aws-sdk+core@3.975.3/node_modules/@aws-sdk/core/dist-es/submodules/client/util-user-agent-node/defaultUserAgent.js
 init_esm_shims();
-import { platform, release } from "os";
-import { env } from "process";
+import { platform, release } from "node:os";
+import { env } from "node:process";
 
 // ../../node_modules/.pnpm/@aws-sdk+core@3.975.3/node_modules/@aws-sdk/core/dist-es/submodules/client/util-user-agent-node/getRuntimeUserAgentPair.js
 init_esm_shims();
-import { versions } from "process";
+import { versions } from "node:process";
 var getRuntimeUserAgentPair = () => {
   const runtimesToCheck = ["deno", "bun", "llrt"];
   for (const runtime of runtimesToCheck) {
@@ -31885,7 +31883,7 @@ init_esm_shims();
 
 // ../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/retry/middleware-retry/isStreamingPayload/isStreamingPayload.js
 init_esm_shims();
-import { Readable as Readable7 } from "stream";
+import { Readable as Readable7 } from "node:stream";
 var isStreamingPayload2 = (request) => request?.body instanceof Readable7 || typeof ReadableStream !== "undefined" && request?.body instanceof ReadableStream;
 
 // ../../node_modules/.pnpm/@smithy+core@3.29.5/node_modules/@smithy/core/dist-es/submodules/retry/middleware-retry/retryMiddleware.js
@@ -32911,10 +32909,10 @@ ${longDate}
 ${credentialScope}
 ${toHex(hashedRequest)}`;
   }
-  getCanonicalPath({ path: path2 }) {
+  getCanonicalPath({ path }) {
     if (this.uriEscapePath) {
       const normalizedPathSegments = [];
-      for (const pathSegment of path2.split("/")) {
+      for (const pathSegment of path.split("/")) {
         if (pathSegment?.length === 0)
           continue;
         if (pathSegment === ".")
@@ -32925,11 +32923,11 @@ ${toHex(hashedRequest)}`;
           normalizedPathSegments.push(pathSegment);
         }
       }
-      const normalizedPath = `${path2?.startsWith("/") ? "/" : ""}${normalizedPathSegments.join("/")}${normalizedPathSegments.length > 0 && path2?.endsWith("/") ? "/" : ""}`;
+      const normalizedPath = `${path?.startsWith("/") ? "/" : ""}${normalizedPathSegments.join("/")}${normalizedPathSegments.length > 0 && path?.endsWith("/") ? "/" : ""}`;
       const doubleEncoded = escapeUri(normalizedPath);
       return doubleEncoded.replace(/%2F/g, "/");
     }
-    return path2;
+    return path;
   }
   validateResolvedCredentials(credentials) {
     if (typeof credentials !== "object" || typeof credentials.accessKeyId !== "string" || typeof credentials.secretAccessKey !== "string") {
@@ -33654,7 +33652,7 @@ var getTransformedHeaders2 = (headers) => {
 
 // ../../node_modules/.pnpm/@smithy+node-http-handler@4.9.7/node_modules/@smithy/node-http-handler/dist-es/node-https.js
 init_esm_shims();
-import node_https2 from "https";
+import node_https2 from "node:https";
 
 // ../../node_modules/.pnpm/@smithy+node-http-handler@4.9.7/node_modules/@smithy/node-http-handler/dist-es/set-connection-timeout.js
 init_esm_shims();
@@ -33772,7 +33770,7 @@ var setSocketTimeout2 = (request, reject, timeoutInMs = 0) => {
 
 // ../../node_modules/.pnpm/@smithy+node-http-handler@4.9.7/node_modules/@smithy/node-http-handler/dist-es/write-request-body.js
 init_esm_shims();
-import { Readable as Readable9 } from "stream";
+import { Readable as Readable9 } from "node:stream";
 var MIN_WAIT_TIME2 = 6e3;
 async function writeRequestBody2(httpRequest3, request, maxContinueTimeoutMs = MIN_WAIT_TIME2, externalAgent = false) {
   const headers = request.headers;
@@ -33941,12 +33939,12 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
         const password = request.password ?? "";
         auth = `${username}:${password}`;
       }
-      let path2 = request.path;
+      let path = request.path;
       if (queryString) {
-        path2 += `?${queryString}`;
+        path += `?${queryString}`;
       }
       if (request.fragment) {
-        path2 += `#${request.fragment}`;
+        path += `#${request.fragment}`;
       }
       let hostname = request.hostname ?? "";
       if (hostname[0] === "[" && hostname.endsWith("]")) {
@@ -33958,7 +33956,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
         headers: request.headers,
         host: hostname,
         method: request.method,
-        path: path2,
+        path,
         port: request.port,
         agent,
         auth
@@ -34034,7 +34032,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       socketAcquisitionWarningTimeout,
       throwOnRequestTimeout,
       httpAgentProvider: async () => {
-        const node_http3 = await import("http");
+        const node_http3 = await import("node:http");
         const { Agent, request } = node_http3.default ?? node_http3;
         hRequest2 = request;
         hAgent2 = Agent;
@@ -39545,6 +39543,12 @@ var AwsSelfStopAccess = class {
 // src/config.ts
 init_esm_shims();
 var DEFAULT_SYNC_INTERVAL_SECONDS = 60;
+var DEFAULT_WALKBACK_MAX_POINTS = 10;
+var DEFAULT_WALKBACK_BUDGET_SECONDS = 180;
+function positiveIntOr(value, defaultValue) {
+  const parsed = Number.parseInt(value ?? "", 10);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : defaultValue;
+}
 function nonEmpty(value) {
   return value !== void 0 && value !== "" ? value : null;
 }
@@ -39556,7 +39560,6 @@ function resolveConfig(env3) {
   const bucket = nonEmpty(env3.LITESTREAM_BUCKET);
   const prefix = nonEmpty(env3.LITESTREAM_PREFIX);
   const persistenceEnabled = bucket !== null && prefix !== null;
-  const interval = Number.parseInt(env3.CREDS_SYNC_INTERVAL ?? "", 10);
   return {
     homeDir,
     claude: {
@@ -39573,7 +39576,15 @@ function resolveConfig(env3) {
     bucket: persistenceEnabled ? bucket : null,
     prefix: persistenceEnabled ? prefix : null,
     region: nonEmpty(env3.AWS_REGION),
-    syncIntervalSeconds: Number.isFinite(interval) && interval > 0 ? interval : DEFAULT_SYNC_INTERVAL_SECONDS,
+    syncIntervalSeconds: positiveIntOr(env3.CREDS_SYNC_INTERVAL, DEFAULT_SYNC_INTERVAL_SECONDS),
+    walkbackMaxPoints: positiveIntOr(
+      env3.EVIDENT_SESSION_DB_WALKBACK_MAX_POINTS,
+      DEFAULT_WALKBACK_MAX_POINTS
+    ),
+    walkbackBudgetSeconds: positiveIntOr(
+      env3.EVIDENT_SESSION_DB_WALKBACK_BUDGET_SECONDS,
+      DEFAULT_WALKBACK_BUDGET_SECONDS
+    ),
     hasModelApiKey: nonEmpty(env3.ANTHROPIC_API_KEY) !== null || nonEmpty(env3.OPENAI_API_KEY) !== null
   };
 }
@@ -39586,22 +39597,22 @@ init_esm_shims();
 function assertNever(value) {
   throw new Error(`Unhandled restore outcome: ${JSON.stringify(value)}`);
 }
-function describeRestoreOutcome(label, path2, outcome) {
+function describeRestoreOutcome(label, path, outcome) {
   switch (outcome.kind) {
     case "local":
-      return `Found valid ${label} credentials at ${path2}.`;
+      return `Found valid ${label} credentials at ${path}.`;
     case "restored":
-      return `Found valid ${label} credentials at ${path2} (restored from the object store).`;
+      return `Found valid ${label} credentials at ${path} (restored from the object store).`;
     case "failed":
       return `WARNING: ${label} credentials could not be restored from S3 (${outcome.reason}). Check the earlier S3 error for IAM/network details before bootstrapping again; the existing persisted credentials may still be recoverable.`;
     case "invalid":
       return `WARNING: a persisted ${label} credentials object was found in S3 but was invalid/corrupt and was discarded (see the warning above) \u2014 nothing usable was restored. Re-bootstrap auth, or check what wrote that S3 object.`;
     case "localInvalid":
-      return `WARNING: local ${label} credentials at ${path2} are invalid/unreadable and were kept in place (see the warning above), which blocks restoring a good S3 object over them. Fix or remove the local file so a valid persisted copy (if any) can restore. If they were written by root during an SSM-Exec bootstrap they are simply unreadable by the runner user: 'chown -R 10001:10001' them from the exec shell.`;
+      return `WARNING: local ${label} credentials at ${path} are invalid/unreadable and were kept in place (see the warning above), which blocks restoring a good S3 object over them. Fix or remove the local file so a valid persisted copy (if any) can restore. If they were written by root during an SSM-Exec bootstrap they are simply unreadable by the runner user: 'chown -R 10001:10001' them from the exec shell.`;
     case "missing":
-      return `No ${label} credentials at ${path2} (and none persisted in S3).`;
+      return `No ${label} credentials at ${path} (and none persisted in S3).`;
     case "disabled":
-      return `No ${label} credentials at ${path2}; credential persistence is disabled (LITESTREAM_BUCKET/LITESTREAM_PREFIX unset), so nothing could be restored.`;
+      return `No ${label} credentials at ${path}; credential persistence is disabled (LITESTREAM_BUCKET/LITESTREAM_PREFIX unset), so nothing could be restored.`;
     default:
       return assertNever(outcome);
   }
@@ -39615,6 +39626,9 @@ function assertNeverUnusableReplicaReason(value) {
 function assertNeverFatalCause(value) {
   throw new Error(`Unhandled fatal cause: ${JSON.stringify(value)}`);
 }
+function assertNeverNoReplicaLocalDb(value) {
+  throw new Error(`Unhandled noReplica local-DB state: ${JSON.stringify(value)}`);
+}
 function sessionDbExitCode(outcome) {
   switch (outcome.kind) {
     case "disabled":
@@ -39627,7 +39641,7 @@ function sessionDbExitCode(outcome) {
     // re-run `litestream restore` and ask again
     case "unusableReplica":
       return 31;
-    // booted with a fresh DB; the shell must skip `litestream replicate`
+    // booted with a fresh DB; the shell still starts a fresh backup chain (#1106)
     case "fatal":
       return 30;
     // shared by a genuine misconfig and a deliberate `crash` choice
@@ -39643,7 +39657,9 @@ function describeUnusableReplica(reason) {
     case "attemptsExhausted":
       return `${base} (recovery did not make the replica usable after retrying; giving up.)`;
     case "layoutMismatch":
-      return `${base} (no level-0 LTX object was found under the replica prefix, so --on-unusable-replica=prune had nothing matching its expected layout to delete.)`;
+      return `${base} (objects exist under the replica prefix but NONE of them match the LTX key layout --on-unusable-replica=prune expects \u2014 see the SESSION-DB-REPLICA-LAYOUT-MISMATCH warning above for a sample key. This means our key parsing is wrong, or litestream's on-disk layout changed.)`;
+    case "noL0Present":
+      return `${base} (--on-unusable-replica=prune found no level-0 object to prune. This is expected: litestream expires level-0 objects itself after a few minutes, so at boot the newest one is normally absent. prune only ever targets level 0, so it cannot repair corruption at a higher compaction level.)`;
     case "recoveryFailed":
       return `${base} (the recovery delete itself failed; see the warning above for the S3 error.)`;
     case "targetHealthy":
@@ -39665,18 +39681,31 @@ function describeSessionDbFatal(outcome, config) {
       return assertNeverFatalCause(outcome.cause);
   }
 }
+function describeNoReplica(localDb) {
+  switch (localDb) {
+    case "absent":
+      return "No opencode.db replica found in the object store; opencode will create a fresh session DB.";
+    case "empty":
+      return "litestream restore succeeded but left a zero-byte opencode.db; opencode will create a fresh session DB.";
+    default:
+      return assertNeverNoReplicaLocalDb(localDb);
+  }
+}
 function describeSessionDbClassification(outcome, config) {
   switch (outcome.kind) {
     case "disabled":
       return "No opencode.db restore attempted; credential persistence is disabled (LITESTREAM_BUCKET/LITESTREAM_PREFIX unset).";
     case "restored":
-      return "opencode.db restored from the object store.";
+      return `SESSION-DB-SIZE: opencode.db restored from the object store. state=restored bytes=${outcome.bytes}`;
     case "noReplica":
-      return "No opencode.db replica found in the object store; opencode will create a fresh session DB.";
+      return `SESSION-DB-SIZE: ${describeNoReplica(outcome.localDb)} state=${outcome.localDb} bytes=0`;
     case "retryTransient":
       return "opencode.db replica restore failed (transient); retrying.";
     case "recovered": {
       const objects = outcome.deleted.length === 0 ? "no objects (see the warnings above for what failed)" : `${outcome.deleted.length} object${outcome.deleted.length === 1 ? "" : "s"} (${outcome.deleted.join(", ")})`;
+      if (outcome.strategy === "quarantine") {
+        return `Escalated opencode.db replica recovery to quarantine: --on-unusable-replica=prune found nothing at level 0 to delete, so the corruption is deeper than prune can reach. Moved ${objects} aside; retrying the restore. Prior session history is set aside, NOT deleted \u2014 see the SESSION-DB-REPLICA-QUARANTINED warning above for where.`;
+      }
       return `Attempted opencode.db replica recovery via --on-unusable-replica=${outcome.strategy}, deleting ${objects}; retrying the restore.` + (outcome.strategy === "clear" ? " Prior session history is lost." : "");
     }
     case "unusableReplica":
@@ -39687,40 +39716,173 @@ function describeSessionDbClassification(outcome, config) {
       return assertNeverSessionDb(outcome);
   }
 }
+function assertNeverSessionDbVerify(value) {
+  throw new Error(`Unhandled session-DB verify outcome: ${JSON.stringify(value)}`);
+}
+function assertNeverSessionDbVerifySkippedLocalDb(value) {
+  throw new Error(`Unhandled session-DB verify skipped local-DB state: ${JSON.stringify(value)}`);
+}
+function assertNeverSessionDbVerifyExhaustedReason(value) {
+  throw new Error(`Unhandled session-DB verify exhausted reason: ${JSON.stringify(value)}`);
+}
+function sessionDbVerifyExitCode(outcome) {
+  switch (outcome.kind) {
+    case "skipped":
+    case "healthy":
+    case "walkedBack":
+      return 0;
+    case "exhausted":
+      return 33;
+    // booted with a fresh DB; the shell still starts a fresh backup chain
+    default:
+      return assertNeverSessionDbVerify(outcome);
+  }
+}
+function describeSessionDbVerifySkipped(localDb) {
+  switch (localDb) {
+    case "absent":
+      return "No opencode.db found; nothing to verify at boot.";
+    case "empty":
+      return "opencode.db is zero bytes; nothing to verify at boot.";
+    default:
+      return assertNeverSessionDbVerifySkippedLocalDb(localDb);
+  }
+}
+function describeSessionDbVerifyExhausted(outcome) {
+  const tried = `tried ${outcome.candidatesTried} restore point${outcome.candidatesTried === 1 ? "" : "s"}`;
+  switch (outcome.reason) {
+    case "enumerationFailed":
+      return `SESSION-DB-INTEGRITY-EXHAUSTED: opencode.db failed its integrity check and litestream's restore-point listing could not be read (${tried}); booting with a FRESH opencode.db.`;
+    case "noCandidates":
+      return `SESSION-DB-INTEGRITY-EXHAUSTED: opencode.db failed its integrity check and no older restore point is retained (${tried}); booting with a FRESH opencode.db.`;
+    case "allFailed":
+      return `SESSION-DB-INTEGRITY-EXHAUSTED: opencode.db failed its integrity check and every retained restore point also failed (${tried}); booting with a FRESH opencode.db.`;
+    case "budgetExhausted":
+      return `SESSION-DB-INTEGRITY-EXHAUSTED: opencode.db failed its integrity check; the walkback search budget ran out before every retained restore point was tried (${tried}) \u2014 widen it with EVIDENT_SESSION_DB_WALKBACK_MAX_POINTS/EVIDENT_SESSION_DB_WALKBACK_BUDGET_SECONDS if there was more to try; booting with a FRESH opencode.db.`;
+    default:
+      return assertNeverSessionDbVerifyExhaustedReason(outcome.reason);
+  }
+}
+function describeSessionDbVerification(outcome) {
+  switch (outcome.kind) {
+    case "skipped":
+      return describeSessionDbVerifySkipped(outcome.localDb);
+    case "healthy":
+      return `SESSION-DB-INTEGRITY: ok bytes=${outcome.bytes}`;
+    case "walkedBack":
+      return `SESSION-DB-INTEGRITY-WALKBACK: opencode.db failed its integrity check; adopted an older litestream restore point after trying ${outcome.candidatesTried} candidate${outcome.candidatesTried === 1 ? "" : "s"}. Everything after this transaction is lost. txid=${outcome.txid} candidates=${outcome.candidatesTried} bytes=${outcome.bytes}`;
+    case "exhausted":
+      return describeSessionDbVerifyExhausted(outcome);
+    default:
+      return assertNeverSessionDbVerify(outcome);
+  }
+}
 
 // src/file-ops.ts
 init_esm_shims();
-import { createHash as createHash7 } from "crypto";
-import { chmod, mkdir, open, readFile as readFile4, rename, rm, stat, writeFile as writeFile3 } from "fs/promises";
+import { createHash as createHash7 } from "node:crypto";
+import { chmod, mkdir, open, readFile as readFile4, rename, rm, stat, writeFile as writeFile3 } from "node:fs/promises";
 var nodeFileOps = {
   async mkdirp(dir) {
     await mkdir(dir, { recursive: true });
   },
-  async chmod(path2, mode) {
-    await chmod(path2, mode);
+  async chmod(path, mode) {
+    await chmod(path, mode);
   },
-  async stat(path2) {
+  async stat(path) {
     try {
-      const stats = await stat(path2);
+      const stats = await stat(path);
       return { size: stats.size };
     } catch {
       return null;
     }
   },
   readFile: readFile4,
-  async writeFile(path2, data) {
-    await writeFile3(path2, data);
+  async writeFile(path, data) {
+    await writeFile3(path, data);
   },
-  async createExclusive(path2) {
-    const handle = await open(path2, "wx", 384);
+  async createExclusive(path) {
+    const handle = await open(path, "wx", 384);
     await handle.close();
   },
   rename,
-  async remove(path2) {
-    await rm(path2, { force: true });
+  async remove(path) {
+    await rm(path, { force: true });
   },
-  async hashFile(path2) {
-    return createHash7("sha256").update(await readFile4(path2)).digest("hex");
+  async hashFile(path) {
+    return createHash7("sha256").update(await readFile4(path)).digest("hex");
+  }
+};
+
+// src/litestream-cli.ts
+init_esm_shims();
+import { execFile } from "node:child_process";
+import { promisify as promisify3 } from "node:util";
+
+// src/logger.ts
+init_esm_shims();
+var LOG_PREFIX = "[auth-persistence]";
+var consoleLogger = (message) => {
+  process.stderr.write(`${LOG_PREFIX} ${message}
+`);
+};
+function describeError(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+
+// src/litestream-cli.ts
+var execFileAsync = promisify3(execFile);
+function stderrOf(error) {
+  if (typeof error === "object" && error !== null && "stderr" in error) {
+    const stderr = error.stderr;
+    if (typeof stderr === "string" && stderr.length > 0) return stderr;
+  }
+  return describeError(error);
+}
+var LitestreamCli = class {
+  constructor(configPath, dbPath) {
+    this.configPath = configPath;
+    this.dbPath = dbPath;
+  }
+  async listRestorePoints() {
+    try {
+      const { stdout, stderr } = await execFileAsync("litestream", [
+        "ltx",
+        "-config",
+        this.configPath,
+        // MEASURED: `-level` defaults to 0, which only shows L0 — `all` is
+        // required to see the L1/L2/L9 compaction levels too (plan §2.3).
+        "-level",
+        "all",
+        "-json",
+        this.dbPath
+      ]);
+      return { stdout, detail: stderr };
+    } catch (error) {
+      return { stdout: null, detail: stderrOf(error) };
+    }
+  }
+  async restoreAt(txid, outputPath) {
+    try {
+      const { stderr } = await execFileAsync("litestream", [
+        "restore",
+        "-config",
+        this.configPath,
+        "-txid",
+        txid,
+        // MEASURED: without `-force`, restoring into a path that already
+        // exists exits 1 with "output path already exists and is not
+        // empty" (plan §2.4) — the caller always restores into a scratch
+        // path it just cleared, so overwriting it is always intended.
+        "-force",
+        "-o",
+        outputPath,
+        this.dbPath
+      ]);
+      return { ok: true, detail: stderr };
+    } catch (error) {
+      return { ok: false, detail: stderrOf(error) };
+    }
   }
 };
 
@@ -39750,26 +39912,15 @@ dbs:
 `;
 }
 
-// src/logger.ts
-init_esm_shims();
-var LOG_PREFIX = "[auth-persistence]";
-var consoleLogger = (message) => {
-  process.stderr.write(`${LOG_PREFIX} ${message}
-`);
-};
-function describeError(error) {
-  return error instanceof Error ? error.message : String(error);
-}
-
 // src/model-auth.ts
 init_esm_shims();
 
 // src/valid-json.ts
 init_esm_shims();
-async function isValidJson(fileOps, path2) {
+async function isValidJson(fileOps, path) {
   let contents;
   try {
-    contents = await fileOps.readFile(path2);
+    contents = await fileOps.readFile(path);
   } catch {
     return false;
   }
@@ -39803,7 +39954,7 @@ function replicaDbPrefix(prefix) {
 var LTX_FILENAME = /^([0-9a-fA-F]+)-([0-9a-fA-F]+)\.ltx$/;
 function parseLtxKey(prefix, key) {
   if (key.split("/").includes("..")) return null;
-  const root12 = `${replicaDbPrefix(prefix)}ltx/`;
+  const root12 = replicaDbPrefix(prefix);
   if (!key.startsWith(root12)) return null;
   const [levelPart, filename, ...rest] = key.slice(root12.length).split("/");
   if (rest.length > 0 || filename === void 0 || !/^\d+$/.test(levelPart)) return null;
@@ -39826,6 +39977,9 @@ function newestL0Key(prefix, keys) {
   }
   return newest?.key ?? null;
 }
+function hasParsableLtxKey(prefix, keys) {
+  return keys.some((key) => parseLtxKey(prefix, key) !== null);
+}
 function isDeletableReplicaKey(prefix, key) {
   if (!key.startsWith(replicaDbPrefix(prefix))) return false;
   return !key.split("/").includes("..");
@@ -39833,10 +39987,10 @@ function isDeletableReplicaKey(prefix, key) {
 
 // src/restore.ts
 init_esm_shims();
-import { dirname as dirname3 } from "path";
+import { dirname as dirname3 } from "node:path";
 async function restore(params) {
-  const { label, path: path2, bucket, key, store, fileOps, log } = params;
-  const dir = dirname3(path2);
+  const { label, path, bucket, key, store, fileOps, log } = params;
+  const dir = dirname3(path);
   try {
     await fileOps.mkdirp(dir);
   } catch {
@@ -39848,21 +40002,21 @@ async function restore(params) {
   } catch {
     log(`WARNING: could not restrict ${label} credential directory ${dir}.`);
   }
-  const local = await fileOps.stat(path2);
-  if (local !== null && local.size > 0 && !await isValidJson(fileOps, path2)) {
+  const local = await fileOps.stat(path);
+  if (local !== null && local.size > 0 && !await isValidJson(fileOps, path)) {
     log(
-      `WARNING: local ${label} credentials at ${path2} are invalid or unreadable; keeping them and skipping restore.`
+      `WARNING: local ${label} credentials at ${path} are invalid or unreadable; keeping them and skipping restore.`
     );
     return { kind: "localInvalid" };
   }
   if (local !== null && local.size === 0) {
     log(
-      `Local ${label} credentials at ${path2} are empty; will attempt to restore from S3 instead of protecting them.`
+      `Local ${label} credentials at ${path} are empty; will attempt to restore from S3 instead of protecting them.`
     );
   }
-  if (await isValidJson(fileOps, path2)) {
-    await chmodOrWarn(fileOps, log, path2, `local ${label} credentials at ${path2}`);
-    log(`Keeping valid local ${label} credentials at ${path2}; no restore.`);
+  if (await isValidJson(fileOps, path)) {
+    await chmodOrWarn(fileOps, log, path, `local ${label} credentials at ${path}`);
+    log(`Keeping valid local ${label} credentials at ${path}; no restore.`);
     return { kind: "local" };
   }
   if (store === null || bucket === null || key === null) {
@@ -39907,19 +40061,19 @@ async function restore(params) {
     return { kind: "invalid" };
   }
   try {
-    await fileOps.rename(temp, path2);
+    await fileOps.rename(temp, path);
   } catch {
     await fileOps.remove(temp);
-    log(`WARNING: could not install restored ${label} credentials at ${path2}.`);
-    return { kind: "failed", reason: `could not install ${path2}` };
+    log(`WARNING: could not install restored ${label} credentials at ${path}.`);
+    return { kind: "failed", reason: `could not install ${path}` };
   }
-  await chmodOrWarn(fileOps, log, path2, `restored ${label} credentials at ${path2}`);
-  log(`Restored ${label} credentials from ${location} to ${path2}.`);
+  await chmodOrWarn(fileOps, log, path, `restored ${label} credentials at ${path}`);
+  log(`Restored ${label} credentials from ${location} to ${path}.`);
   return { kind: "restored" };
 }
-async function chmodOrWarn(fileOps, log, path2, subject) {
+async function chmodOrWarn(fileOps, log, path, subject) {
   try {
-    await fileOps.chmod(path2, 384);
+    await fileOps.chmod(path, 384);
   } catch {
     log(`WARNING: could not restrict ${subject}.`);
   }
@@ -40970,7 +41124,7 @@ init_protocols();
 
 // ../../node_modules/.pnpm/@aws-sdk+middleware-sdk-s3@3.972.66/node_modules/@aws-sdk/middleware-sdk-s3/dist-es/submodules/s3/to-stream/toStream.js
 init_esm_shims();
-import { Readable as Readable10 } from "stream";
+import { Readable as Readable10 } from "node:stream";
 function toStream(bytes) {
   return Readable10.from(Buffer.from(bytes));
 }
@@ -43392,6 +43546,12 @@ var _ep011 = {
   Bucket: { type: "contextParams", name: "Bucket" },
   Key: { type: "contextParams", name: "Key" }
 };
+var _ep13 = {
+  DisableS3ExpressSessionAuth: { type: "staticContextParams", value: true },
+  Bucket: { type: "contextParams", name: "Bucket" },
+  Key: { type: "contextParams", name: "Key" },
+  CopySource: { type: "contextParams", name: "CopySource" }
+};
 var _ep4 = {
   DisableS3ExpressSessionAuth: { type: "staticContextParams", value: true },
   Bucket: { type: "contextParams", name: "Bucket" }
@@ -43403,6 +43563,10 @@ var _ep8 = {
 var _mw011 = (Command3, cs, config, o7) => [
   getThrow200ExceptionsPlugin(config)
 ];
+var _mw1 = (Command3, cs, config, o7) => [
+  getThrow200ExceptionsPlugin(config),
+  getSsecPlugin(config)
+];
 var _mw7 = (Command3, cs, config, o7) => [
   getFlexibleChecksumsPlugin(config, {
     requestChecksumRequired: false,
@@ -49428,7 +49592,7 @@ var Sha1Js = class _Sha1Js {
 
 // ../../node_modules/.pnpm/@aws-sdk+checksums@3.1000.20/node_modules/@aws-sdk/checksums/dist-es/submodules/sha/sha1/Sha1Node.js
 init_esm_shims();
-import { createHash as createHash8, createHmac as createHmac3 } from "crypto";
+import { createHash as createHash8, createHmac as createHmac3 } from "node:crypto";
 var hasNativeCrypto4 = (() => {
   try {
     createHash8("sha1");
@@ -49676,6 +49840,11 @@ var S3Client = class extends Client {
   }
 };
 
+// ../../node_modules/.pnpm/@aws-sdk+client-s3@3.1095.0/node_modules/@aws-sdk/client-s3/dist-es/commands/CopyObjectCommand.js
+init_esm_shims();
+var CopyObjectCommand = class extends command11(_ep13, _mw1, "CopyObject", CopyObject$) {
+};
+
 // ../../node_modules/.pnpm/@aws-sdk+client-s3@3.1095.0/node_modules/@aws-sdk/client-s3/dist-es/commands/DeleteObjectCommand.js
 init_esm_shims();
 var DeleteObjectCommand = class extends command11(_ep011, _mw011, "DeleteObject", DeleteObject$) {
@@ -49726,7 +49895,7 @@ var S3ObjectStore = class {
     await this.client.send(new PutObjectCommand({ Bucket: this.bucket, Key: key, Body: body }));
   }
   async list(prefix) {
-    const keys = [];
+    const objects = [];
     let continuationToken;
     do {
       const response = await this.client.send(
@@ -49737,11 +49906,11 @@ var S3ObjectStore = class {
         })
       );
       for (const object of response.Contents ?? []) {
-        if (object.Key) keys.push(object.Key);
+        if (object.Key) objects.push({ key: object.Key, size: object.Size ?? 0 });
       }
       continuationToken = response.NextContinuationToken;
     } while (continuationToken);
-    return keys;
+    return objects;
   }
   async delete(key) {
     try {
@@ -49751,6 +49920,30 @@ var S3ObjectStore = class {
       throw error;
     }
   }
+  /**
+   * `CopyObject` — S3 copies the bytes server-side, so a 545 MB snapshot never
+   * enters this process (see `ObjectStore.copy`).
+   *
+   * `CopySource` is `<bucket>/<key>` and S3 expects it URL-encoded. `encodeURI`
+   * (not `encodeURIComponent`) is the right one here: it leaves the `/`
+   * separators intact, which S3 needs, while still escaping anything exotic.
+   * Every key this is called with has already passed `isDeletableReplicaKey`,
+   * so it is `<prefix>/opencode.db/…` with no `..` segment and no `%` to
+   * double-encode.
+   *
+   * Deliberately does NOT swallow a not-found the way `delete` does: the only
+   * caller deletes the source immediately afterwards, so a copy that quietly
+   * did nothing would destroy the object it was meant to preserve.
+   */
+  async copy(fromKey, toKey) {
+    await this.client.send(
+      new CopyObjectCommand({
+        Bucket: this.bucket,
+        CopySource: encodeURI(`${this.bucket}/${fromKey}`),
+        Key: toKey
+      })
+    );
+  }
 };
 
 // src/session-db.ts
@@ -49772,20 +49965,38 @@ function isStructurallySoundLtxObject(bytes) {
 async function probeReplica(store, prefix, log) {
   const root12 = replicaDbPrefix(prefix);
   try {
-    const keys = await store.list(root12);
-    return { ok: true, keys };
+    const objects = await store.list(root12);
+    const objectCount = objects.length;
+    const totalBytes = objects.reduce((sum, object) => sum + object.size, 0);
+    logReplicaSize(root12, objectCount, totalBytes, log);
+    return { ok: true, keys: objects.map((object) => object.key) };
   } catch (error) {
     const detail = describeError(error);
     log(`WARNING: could not list the replica prefix ${root12}: ${detail}`);
     return { ok: false, detail };
   }
 }
+function logReplicaSize(root12, objectCount, totalBytes, log) {
+  log(
+    `INFO: SESSION-DB-REPLICA-SIZE: the opencode.db replica under ${root12} objects=${objectCount} bytes=${totalBytes}`
+  );
+}
+function logLayoutMismatch(prefix, keys, log) {
+  log(
+    `WARNING: SESSION-DB-REPLICA-LAYOUT-MISMATCH: listed ${keys.length} object(s) under the replica prefix ${replicaDbPrefix(prefix)} but none of them match the expected LTX key layout (<prefix>/opencode.db/<level>/<minTxid>-<maxTxid>.ltx). Sample key: ${keys[0]}. --on-unusable-replica=prune cannot select anything to delete until this is fixed.`
+  );
+}
 async function pruneNewestL0(store, prefix, keys, log) {
   const target = newestL0Key(prefix, keys);
-  if (target === null || !isDeletableReplicaKey(prefix, target)) {
-    if (target !== null) {
-      log(`WARNING: refusing to prune ${target}: failed the replica-key guard.`);
+  if (target === null) {
+    if (keys.length > 0 && !hasParsableLtxKey(prefix, keys)) {
+      logLayoutMismatch(prefix, keys, log);
+      return { deleted: null, reason: "layoutMismatch" };
     }
+    return { deleted: null, reason: "noL0Present" };
+  }
+  if (!isDeletableReplicaKey(prefix, target)) {
+    log(`WARNING: refusing to prune ${target}: failed the replica-key guard.`);
     return { deleted: null, reason: "layoutMismatch" };
   }
   let bytes;
@@ -49795,7 +50006,7 @@ async function pruneNewestL0(store, prefix, keys, log) {
     log(
       `WARNING: could not re-read ${target} to check whether it is actually corrupt before pruning it: ${describeError(error)}. Declining to prune without positive evidence.`
     );
-    return { deleted: null, reason: "targetHealthy" };
+    return { deleted: null, reason: "unreadable" };
   }
   if (bytes === null || isStructurallySoundLtxObject(bytes)) {
     log(
@@ -49812,6 +50023,48 @@ async function pruneNewestL0(store, prefix, keys, log) {
   }
   return { deleted: target };
 }
+function quarantineRoot(prefix, stamp) {
+  return `${prefix}/quarantine/opencode.db/${stamp}/`;
+}
+async function quarantineReplica(store, prefix, keys, log, stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")) {
+  const destination = quarantineRoot(prefix, stamp);
+  const root12 = replicaDbPrefix(prefix);
+  const moved = [];
+  const failed = [];
+  for (const key of keys) {
+    if (!isDeletableReplicaKey(prefix, key)) {
+      log(`WARNING: refusing to quarantine ${key}: outside the replica prefix.`);
+      continue;
+    }
+    const target = `${destination}${key.slice(root12.length)}`;
+    try {
+      await store.copy(key, target);
+    } catch (error) {
+      log(
+        `WARNING: could not copy ${key} to ${target}: ${describeError(error)}. Leaving the original in place \u2014 never deleting an object the quarantine did not preserve.`
+      );
+      failed.push(key);
+      continue;
+    }
+    try {
+      await store.delete(key);
+    } catch (error) {
+      log(
+        `WARNING: quarantined ${key} to ${target} but could not delete the original: ${describeError(error)}`
+      );
+      failed.push(key);
+      continue;
+    }
+    moved.push(key);
+  }
+  logQuarantined(destination, moved, failed, log);
+  return { destination, moved, failed };
+}
+function logQuarantined(destination, moved, failed, log) {
+  log(
+    `WARNING: SESSION-DB-REPLICA-QUARANTINED: moved ${moved.length} unusable replica object(s) aside to ${destination} (${failed.length} could not be moved) so this boot can start a fresh backup chain. The bytes are NOT deleted \u2014 copy them back from there to investigate. See SESSION-DB-REPLICA-SIZE above for how much was set aside.`
+  );
+}
 async function clearReplica(store, prefix, keys, log) {
   const deleted = [];
   const failed = [];
@@ -49850,7 +50103,7 @@ async function decideSessionDbRestore(params) {
   const prefix = config.prefix;
   if (exitCode === 0) {
     const stat2 = await fileOps.stat(config.opencodeDbPath);
-    return stat2 !== null && stat2.size > 0 ? { kind: "restored" } : { kind: "noReplica" };
+    return stat2 !== null && stat2.size > 0 ? { kind: "restored", bytes: stat2.size } : { kind: "noReplica", localDb: stat2 === null ? "absent" : "empty" };
   }
   if (store === null) {
     return {
@@ -49886,8 +50139,20 @@ async function decideSessionDbRestore(params) {
     case "prune": {
       const result = await pruneNewestL0(store, prefix, keys, log);
       if (result.deleted === null) {
-        const reason = result.reason === "deleteFailed" ? "recoveryFailed" : result.reason;
-        return { kind: "unusableReplica", reason };
+        if (shouldEscalateToQuarantine(result.reason, prefix, keys)) {
+          const quarantined = await quarantineReplica(store, prefix, keys, log);
+          if (quarantined.moved.length === 0) {
+            return { kind: "unusableReplica", reason: "recoveryFailed" };
+          }
+          return { kind: "recovered", strategy: "quarantine", deleted: quarantined.moved };
+        }
+        if (result.reason === "deleteFailed") {
+          return { kind: "unusableReplica", reason: "recoveryFailed" };
+        }
+        if (result.reason === "unreadable") {
+          return { kind: "unusableReplica", reason: "targetHealthy" };
+        }
+        return { kind: "unusableReplica", reason: result.reason };
       }
       return { kind: "recovered", strategy: "prune", deleted: [result.deleted] };
     }
@@ -49899,15 +50164,154 @@ async function decideSessionDbRestore(params) {
       return assertNeverStrategy(strategy);
   }
 }
+function shouldEscalateToQuarantine(reason, prefix, keys) {
+  if (reason !== "targetHealthy" && reason !== "noL0Present") return false;
+  return hasParsableLtxKey(prefix, keys);
+}
 async function discardLocalDebris(fileOps, dbPath, log) {
-  for (const path2 of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {
+  for (const path of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {
+    try {
+      await fileOps.remove(path);
+    } catch (error) {
+      log(`WARNING: could not remove local session-DB debris at ${path}: ${describeError(error)}`);
+    }
+  }
+}
+
+// src/session-db-verify.ts
+init_esm_shims();
+
+// src/restore-points.ts
+init_esm_shims();
+function isRestorePointShaped(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const candidate = value;
+  return typeof candidate.level === "number" && typeof candidate.max_txid === "string";
+}
+function parseLtxListing(stdout) {
+  let parsed;
+  try {
+    parsed = JSON.parse(stdout);
+  } catch {
+    return null;
+  }
+  if (!Array.isArray(parsed)) return null;
+  const points = [];
+  for (const element of parsed) {
+    if (!isRestorePointShaped(element)) return null;
+    points.push({
+      level: element.level,
+      minTxid: typeof element.min_txid === "string" ? element.min_txid : "",
+      maxTxid: element.max_txid,
+      size: typeof element.size === "number" ? element.size : 0,
+      timestamp: typeof element.timestamp === "string" ? element.timestamp : null
+    });
+  }
+  return points;
+}
+function walkbackCandidates(points) {
+  const distinct = /* @__PURE__ */ new Map();
+  for (const point of points) {
+    if (!distinct.has(point.maxTxid)) {
+      distinct.set(point.maxTxid, BigInt(`0x${point.maxTxid}`));
+    }
+  }
+  return [...distinct.entries()].sort((a12, b12) => a12[1] > b12[1] ? -1 : a12[1] < b12[1] ? 1 : 0).slice(1).map(([maxTxid]) => maxTxid);
+}
+
+// src/session-db-verify.ts
+async function verifySessionDb(params) {
+  const { config, fileOps, sqlite, log } = params;
+  const dbPath = config.opencodeDbPath;
+  const stat2 = await fileOps.stat(dbPath);
+  if (stat2 === null) return { kind: "skipped", localDb: "absent" };
+  if (stat2.size === 0) return { kind: "skipped", localDb: "empty" };
+  const result = await sqlite.check(dbPath);
+  if (result.ok) return { kind: "healthy", bytes: stat2.size };
+  log(
+    `WARNING: SESSION-DB-INTEGRITY-FAILED: opencode.db at ${dbPath} failed its integrity check: ${result.detail}`
+  );
+  return walkBack(params);
+}
+async function clearScratch(fileOps, scratch) {
+  await fileOps.remove(scratch);
+  await fileOps.remove(`${scratch}-wal`);
+  await fileOps.remove(`${scratch}-shm`);
+}
+async function discardCorruptDb(fileOps, dbPath, log) {
+  for (const path of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {
     try {
-      await fileOps.remove(path2);
+      await fileOps.remove(path);
     } catch (error) {
-      log(`WARNING: could not remove local session-DB debris at ${path2}: ${describeError(error)}`);
+      log(
+        `WARNING: could not remove corrupt local session-DB debris at ${path}: ${describeError(error)}`
+      );
     }
   }
 }
+async function adopt(fileOps, scratch, dbPath, log, txid, candidatesTried, bytes) {
+  await fileOps.remove(`${dbPath}-wal`);
+  await fileOps.remove(`${dbPath}-shm`);
+  await fileOps.remove(dbPath);
+  await fileOps.rename(scratch, dbPath);
+  log(
+    `INFO: SESSION-DB-WALKBACK-ADOPTED: adopted an older litestream restore point txid=${txid} candidates=${candidatesTried} bytes=${bytes}`
+  );
+}
+async function walkBack(params) {
+  const { config, fileOps, sqlite, litestream, log, maxPoints, budgetSeconds } = params;
+  const dbPath = config.opencodeDbPath;
+  const now = params.now ?? Date.now;
+  const scratch = `${dbPath}.walkback`;
+  const listing = await litestream.listRestorePoints();
+  const points = listing.stdout === null ? null : parseLtxListing(listing.stdout);
+  if (points === null) {
+    log(
+      `WARNING: SESSION-DB-WALKBACK-ENUMERATION-FAILED: ${listing.stdout === null ? `litestream ltx exited non-zero: ${listing.detail}` : "litestream ltx succeeded but its listing could not be parsed"}`
+    );
+    await discardCorruptDb(fileOps, dbPath, log);
+    return { kind: "exhausted", reason: "enumerationFailed", candidatesTried: 0 };
+  }
+  const candidates = walkbackCandidates(points);
+  if (candidates.length === 0) {
+    await discardCorruptDb(fileOps, dbPath, log);
+    return { kind: "exhausted", reason: "noCandidates", candidatesTried: 0 };
+  }
+  const deadline = now() + budgetSeconds * 1e3;
+  let candidatesTried = 0;
+  let index = 0;
+  for (; index < candidates.length; index++) {
+    if (candidatesTried >= maxPoints || now() >= deadline) break;
+    const txid = candidates[index];
+    candidatesTried++;
+    await clearScratch(fileOps, scratch);
+    const restoreResult = await litestream.restoreAt(txid, scratch);
+    if (!restoreResult.ok) {
+      log(
+        `WARNING: SESSION-DB-WALKBACK-CANDIDATE-FAILED: restoring txid=${txid} failed: ${restoreResult.detail}`
+      );
+      continue;
+    }
+    const check = await sqlite.check(scratch);
+    if (!check.ok) {
+      log(
+        `WARNING: SESSION-DB-WALKBACK-CANDIDATE-FAILED: txid=${txid} restored but failed its integrity check: ${check.detail}`
+      );
+      continue;
+    }
+    const scratchStat = await fileOps.stat(scratch);
+    const bytes = scratchStat?.size ?? 0;
+    await adopt(fileOps, scratch, dbPath, log, txid, candidatesTried, bytes);
+    return { kind: "walkedBack", txid, bytes, candidatesTried };
+  }
+  await clearScratch(fileOps, scratch);
+  await discardCorruptDb(fileOps, dbPath, log);
+  return {
+    kind: "exhausted",
+    reason: index < candidates.length ? "budgetExhausted" : "allFailed",
+    candidatesTried
+  };
+}
 
 // src/self-stop.ts
 init_esm_shims();
@@ -49992,22 +50396,55 @@ var shell_contract_default = {
     "sync-once",
     "model-auth-ready",
     "self-stop",
-    "session-db-classify"
+    "session-db-classify",
+    "session-db-verify"
   ]
 };
 
+// src/sqlite-integrity.ts
+init_esm_shims();
+import { DatabaseSync } from "node:sqlite";
+import { rm as rm2 } from "node:fs/promises";
+var MAX_DETAIL_LENGTH = 500;
+function truncate(text) {
+  return text.length > MAX_DETAIL_LENGTH ? `${text.slice(0, MAX_DETAIL_LENGTH)}\u2026` : text;
+}
+var nodeSqliteIntegrity = {
+  async check(path) {
+    let db;
+    try {
+      db = new DatabaseSync(path, { readOnly: true });
+      const row = db.prepare("PRAGMA integrity_check").get();
+      const value = row?.integrity_check;
+      if (value === "ok") {
+        return { ok: true };
+      }
+      return { ok: false, detail: truncate(String(value ?? "no result row")) };
+    } catch (err) {
+      return {
+        ok: false,
+        detail: truncate(err instanceof Error ? err.message : String(err))
+      };
+    } finally {
+      db?.close();
+      await rm2(`${path}-shm`, { force: true });
+      await rm2(`${path}-wal`, { force: true });
+    }
+  }
+};
+
 // src/sync.ts
 init_esm_shims();
 async function sync(params) {
-  const { label, path: path2, bucket, key, store, lastHash, fileOps, log } = params;
+  const { label, path, bucket, key, store, lastHash, fileOps, log } = params;
   if (store === null || bucket === null || key === null) {
     return { outcome: { kind: "disabled" }, hash: lastHash };
   }
-  const exists = await fileOps.stat(path2) !== null;
-  const valid = await isValidJson(fileOps, path2);
+  const exists = await fileOps.stat(path) !== null;
+  const valid = await isValidJson(fileOps, path);
   if (exists && !valid) {
     log(
-      `WARNING: local ${label} credentials at ${path2} are invalid or unreadable; keeping them and skipping sync.`
+      `WARNING: local ${label} credentials at ${path} are invalid or unreadable; keeping them and skipping sync.`
     );
     return { outcome: { kind: "localInvalid" }, hash: lastHash };
   }
@@ -50015,15 +50452,15 @@ async function sync(params) {
     return { outcome: { kind: "absent" }, hash: lastHash };
   }
   try {
-    await fileOps.chmod(path2, 384);
+    await fileOps.chmod(path, 384);
   } catch {
-    log(`WARNING: could not restrict local ${label} credentials at ${path2}.`);
+    log(`WARNING: could not restrict local ${label} credentials at ${path}.`);
   }
   let hash;
   try {
-    hash = await fileOps.hashFile(path2);
+    hash = await fileOps.hashFile(path);
   } catch {
-    log(`WARNING: could not hash local ${label} credentials at ${path2}; skipping this sync tick.`);
+    log(`WARNING: could not hash local ${label} credentials at ${path}; skipping this sync tick.`);
     return { outcome: { kind: "hashFailed" }, hash: lastHash };
   }
   if (hash === lastHash) {
@@ -50031,12 +50468,12 @@ async function sync(params) {
   }
   const location = `s3://${bucket}/${key}`;
   try {
-    await store.put(key, await fileOps.readFile(path2));
+    await store.put(key, await fileOps.readFile(path));
   } catch (error) {
     log(`WARNING: ${label} credentials upload failed to ${location}: ${describeError(error)}`);
     return { outcome: { kind: "failed", reason: describeError(error) }, hash: lastHash };
   }
-  log(`Uploaded ${label} credentials from ${path2} to ${location}.`);
+  log(`Uploaded ${label} credentials from ${path} to ${location}.`);
   return { outcome: { kind: "uploaded" }, hash };
 }
 
@@ -50048,6 +50485,7 @@ var EXIT_BROKEN = 1;
 var EXIT_SESSION_DB_FATAL = 30;
 var EXIT_SESSION_DB_UNUSABLE = 31;
 var EXIT_SESSION_DB_RETRY = 32;
+var EXIT_SESSION_DB_UNVERIFIABLE = 33;
 var STATE_SUFFIX = ".synchash";
 var COMMANDS = shell_contract_default.commands;
 var USAGE = `Usage: runner-synchroniser <command> [args]
@@ -50064,7 +50502,12 @@ var USAGE = `Usage: runner-synchroniser <command> [args]
                                classify a just-run \`litestream restore\` of opencode.db;
                                exit 0 restored/no-replica/disabled, ${EXIT_SESSION_DB_RETRY} re-run
                                and ask again, ${EXIT_SESSION_DB_UNUSABLE} unusable (booted fresh,
-                               skip replicate), ${EXIT_SESSION_DB_FATAL} fatal
+                               fresh backup chain), ${EXIT_SESSION_DB_FATAL} fatal
+  session-db-verify <litestream-config-path>
+                               verify opencode.db's integrity at boot, walking back through
+                               litestream's retained restore points if it's corrupt; exit 0
+                               healthy/skipped/walked-back, ${EXIT_SESSION_DB_UNVERIFIABLE} every
+                               candidate was exhausted (booted fresh)
 `;
 function shellQuote(value) {
   return `'${value.replaceAll("'", `'\\''`)}'`;
@@ -50075,6 +50518,12 @@ function s3ObjectStoreFor(config) {
 function awsSelfStopAccessFor(config) {
   return new AwsSelfStopAccess(config.region);
 }
+function nodeSqliteIntegrityFor() {
+  return nodeSqliteIntegrity;
+}
+function litestreamCliFor(configPath, dbPath) {
+  return new LitestreamCli(configPath, dbPath);
+}
 function parseStoreName(value) {
   return value === "claude" || value === "opencode" ? value : null;
 }
@@ -50190,6 +50639,24 @@ async function commandSessionDbClassify(args, config, deps) {
   log(describeSessionDbClassification(outcome, { bucket: config.bucket, region: config.region }));
   return sessionDbExitCode(outcome);
 }
+async function commandSessionDbVerify(litestreamConfigPath, config, deps) {
+  const { fileOps, log } = deps;
+  const litestream = (deps.litestreamFor ?? litestreamCliFor)(
+    litestreamConfigPath,
+    config.opencodeDbPath
+  );
+  const outcome = await verifySessionDb({
+    config: { opencodeDbPath: config.opencodeDbPath },
+    fileOps,
+    sqlite: (deps.sqliteIntegrityFor ?? nodeSqliteIntegrityFor)(),
+    litestream,
+    log,
+    maxPoints: config.walkbackMaxPoints,
+    budgetSeconds: config.walkbackBudgetSeconds
+  });
+  log(describeSessionDbVerification(outcome));
+  return sessionDbVerifyExitCode(outcome);
+}
 async function main(argv, deps) {
   const { env: env3, fileOps, log, out } = deps;
   const [command12, ...rest] = argv;
@@ -50236,6 +50703,14 @@ ${USAGE}`
     }
     return commandSessionDbClassify(args, config, deps);
   }
+  if (command12 === "session-db-verify") {
+    if (rest.length !== 1) {
+      log(`'session-db-verify' needs exactly one argument: the litestream config path.
+${USAGE}`);
+      return EXIT_USAGE;
+    }
+    return commandSessionDbVerify(rest[0], config, deps);
+  }
   const name = parseStoreName(rest[0]);
   if (name === null) {
     log(`'${command12}' needs a store name: claude or opencode.
@@ -50253,7 +50728,7 @@ function isEntryPoint() {
   const entry = process.argv[1];
   if (entry === void 0) return false;
   try {
-    return realpathSync(entry) === realpathSync(fileURLToPath2(import.meta.url));
+    return realpathSync(entry) === realpathSync(fileURLToPath(import.meta.url));
   } catch {
     return false;
   }
@@ -50278,6 +50753,7 @@ export {
   EXIT_SESSION_DB_FATAL,
   EXIT_SESSION_DB_RETRY,
   EXIT_SESSION_DB_UNUSABLE,
+  EXIT_SESSION_DB_UNVERIFIABLE,
   EXIT_USAGE,
   main
 };