@linzumi/cli 0.0.51-beta → 0.0.53-beta

package/dist/index.js

@@ -4,21 +4,35 @@ var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+function __accessProp(key) {
+  return this[key];
+}
+var __toESMCache_node;
+var __toESMCache_esm;
 var __toESM = (mod, isNodeMode, target) => {
+  var canCache = mod != null && typeof mod === "object";
+  if (canCache) {
+    var cache = isNodeMode ? __toESMCache_node ??= new WeakMap : __toESMCache_esm ??= new WeakMap;
+    var cached = cache.get(mod);
+    if (cached)
+      return cached;
+  }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
   for (let key of __getOwnPropNames(mod))
     if (!__hasOwnProp.call(to, key))
       __defProp(to, key, {
-        get: () => mod[key],
+        get: __accessProp.bind(mod, key),
         enumerable: true
       });
+  if (canCache)
+    cache.set(mod, to);
   return to;
 };
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
-// ../../node_modules/yoctocolors-cjs/index.js
+// node_modules/yoctocolors-cjs/index.js
 var require_yoctocolors_cjs = __commonJS((exports, module) => {
   var tty = __require("node:tty");
   var hasColors = tty?.WriteStream?.prototype?.hasColors?.() ?? false;
@@ -92,7 +106,7 @@ var require_yoctocolors_cjs = __commonJS((exports, module) => {
   module.exports = colors;
 });
 
-// ../../node_modules/cli-width/index.js
+// node_modules/cli-width/index.js
 var require_cli_width = __commonJS((exports, module) => {
   module.exports = cliWidth;
   function normalizeOpts(options) {
@@ -132,7 +146,7 @@ var require_cli_width = __commonJS((exports, module) => {
   }
 });
 
-// ../../node_modules/ansi-regex/index.js
+// node_modules/ansi-regex/index.js
 var require_ansi_regex = __commonJS((exports, module) => {
   module.exports = ({ onlyFirst = false } = {}) => {
     const pattern = [
@@ -143,13 +157,13 @@ var require_ansi_regex = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/strip-ansi/index.js
+// node_modules/strip-ansi/index.js
 var require_strip_ansi = __commonJS((exports, module) => {
   var ansiRegex = require_ansi_regex();
   module.exports = (string) => typeof string === "string" ? string.replace(ansiRegex(), "") : string;
 });
 
-// ../../node_modules/string-width/node_modules/is-fullwidth-code-point/index.js
+// node_modules/is-fullwidth-code-point/index.js
 var require_is_fullwidth_code_point = __commonJS((exports, module) => {
   var isFullwidthCodePoint = (codePoint) => {
     if (Number.isNaN(codePoint)) {
@@ -164,14 +178,14 @@ var require_is_fullwidth_code_point = __commonJS((exports, module) => {
   module.exports.default = isFullwidthCodePoint;
 });
 
-// ../../node_modules/string-width/node_modules/emoji-regex/index.js
+// node_modules/emoji-regex/index.js
 var require_emoji_regex = __commonJS((exports, module) => {
   module.exports = function() {
     return /\uD83C\uDFF4\uDB40\uDC67\uDB40\uDC62(?:\uDB40\uDC65\uDB40\uDC6E\uDB40\uDC67|\uDB40\uDC73\uDB40\uDC63\uDB40\uDC74|\uDB40\uDC77\uDB40\uDC6C\uDB40\uDC73)\uDB40\uDC7F|\uD83D\uDC68(?:\uD83C\uDFFC\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68\uD83C\uDFFB|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFF\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFE])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFE\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFD])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFD\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB\uDFFC])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\u200D(?:\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D)?\uD83D\uDC68|(?:\uD83D[\uDC68\uDC69])\u200D(?:\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67]))|\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67])|(?:\uD83D[\uDC68\uDC69])\u200D(?:\uD83D[\uDC66\uDC67])|[\u2695\u2696\u2708]\uFE0F|\uD83D[\uDC66\uDC67]|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|(?:\uD83C\uDFFB\u200D[\u2695\u2696\u2708]|\uD83C\uDFFF\u200D[\u2695\u2696\u2708]|\uD83C\uDFFE\u200D[\u2695\u2696\u2708]|\uD83C\uDFFD\u200D[\u2695\u2696\u2708]|\uD83C\uDFFC\u200D[\u2695\u2696\u2708])\uFE0F|\uD83C\uDFFB\u200D(?:\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C[\uDFFB-\uDFFF])|(?:\uD83E\uDDD1\uD83C\uDFFB\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFC\u200D\uD83E\uDD1D\u200D\uD83D\uDC69)\uD83C\uDFFB|\uD83E\uDDD1(?:\uD83C\uDFFF\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1(?:\uD83C[\uDFFB-\uDFFF])|\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1)|(?:\uD83E\uDDD1\uD83C\uDFFE\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFF\u200D\uD83E\uDD1D\u200D(?:\uD83D[\uDC68\uDC69]))(?:\uD83C[\uDFFB-\uDFFE])|(?:\uD83E\uDDD1\uD83C\uDFFC\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFD\u200D\uD83E\uDD1D\u200D\uD83D\uDC69)(?:\uD83C[\uDFFB\uDFFC])|\uD83D\uDC69(?:\uD83C\uDFFE\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFD\uDFFF])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFC\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB\uDFFD-\uDFFF])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFB\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFC-\uDFFF])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFD\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB\uDFFC\uDFFE\uDFFF])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\u200D(?:\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D(?:\uD83D[\uDC68\uDC69])|\uD83D[\uDC68\uDC69])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFF\u200D(?:\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD]))|\uD83D\uDC69\u200D\uD83D\uDC69\u200D(?:\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67]))|(?:\uD83E\uDDD1\uD83C\uDFFD\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFE\u200D\uD83E\uDD1D\u200D\uD83D\uDC69)(?:\uD83C[\uDFFB-\uDFFD])|\uD83D\uDC69\u200D\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC69\u200D\uD83D\uDC69\u200D(?:\uD83D[\uDC66\uDC67])|(?:\uD83D\uDC41\uFE0F\u200D\uD83D\uDDE8|\uD83D\uDC69(?:\uD83C\uDFFF\u200D[\u2695\u2696\u2708]|\uD83C\uDFFE\u200D[\u2695\u2696\u2708]|\uD83C\uDFFC\u200D[\u2695\u2696\u2708]|\uD83C\uDFFB\u200D[\u2695\u2696\u2708]|\uD83C\uDFFD\u200D[\u2695\u2696\u2708]|\u200D[\u2695\u2696\u2708])|(?:(?:\u26F9|\uD83C[\uDFCB\uDFCC]|\uD83D\uDD75)\uFE0F|\uD83D\uDC6F|\uD83E[\uDD3C\uDDDE\uDDDF])\u200D[\u2640\u2642]|(?:\u26F9|\uD83C[\uDFCB\uDFCC]|\uD83D\uDD75)(?:\uD83C[\uDFFB-\uDFFF])\u200D[\u2640\u2642]|(?:\uD83C[\uDFC3\uDFC4\uDFCA]|\uD83D[\uDC6E\uDC71\uDC73\uDC77\uDC81\uDC82\uDC86\uDC87\uDE45-\uDE47\uDE4B\uDE4D\uDE4E\uDEA3\uDEB4-\uDEB6]|\uD83E[\uDD26\uDD37-\uDD39\uDD3D\uDD3E\uDDB8\uDDB9\uDDCD-\uDDCF\uDDD6-\uDDDD])(?:(?:\uD83C[\uDFFB-\uDFFF])\u200D[\u2640\u2642]|\u200D[\u2640\u2642])|\uD83C\uDFF4\u200D\u2620)\uFE0F|\uD83D\uDC69\u200D\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67])|\uD83C\uDFF3\uFE0F\u200D\uD83C\uDF08|\uD83D\uDC15\u200D\uD83E\uDDBA|\uD83D\uDC69\u200D\uD83D\uDC66|\uD83D\uDC69\u200D\uD83D\uDC67|\uD83C\uDDFD\uD83C\uDDF0|\uD83C\uDDF4\uD83C\uDDF2|\uD83C\uDDF6\uD83C\uDDE6|[#\*0-9]\uFE0F\u20E3|\uD83C\uDDE7(?:\uD83C[\uDDE6\uDDE7\uDDE9-\uDDEF\uDDF1-\uDDF4\uDDF6-\uDDF9\uDDFB\uDDFC\uDDFE\uDDFF])|\uD83C\uDDF9(?:\uD83C[\uDDE6\uDDE8\uDDE9\uDDEB-\uDDED\uDDEF-\uDDF4\uDDF7\uDDF9\uDDFB\uDDFC\uDDFF])|\uD83C\uDDEA(?:\uD83C[\uDDE6\uDDE8\uDDEA\uDDEC\uDDED\uDDF7-\uDDFA])|\uD83E\uDDD1(?:\uD83C[\uDFFB-\uDFFF])|\uD83C\uDDF7(?:\uD83C[\uDDEA\uDDF4\uDDF8\uDDFA\uDDFC])|\uD83D\uDC69(?:\uD83C[\uDFFB-\uDFFF])|\uD83C\uDDF2(?:\uD83C[\uDDE6\uDDE8-\uDDED\uDDF0-\uDDFF])|\uD83C\uDDE6(?:\uD83C[\uDDE8-\uDDEC\uDDEE\uDDF1\uDDF2\uDDF4\uDDF6-\uDDFA\uDDFC\uDDFD\uDDFF])|\uD83C\uDDF0(?:\uD83C[\uDDEA\uDDEC-\uDDEE\uDDF2\uDDF3\uDDF5\uDDF7\uDDFC\uDDFE\uDDFF])|\uD83C\uDDED(?:\uD83C[\uDDF0\uDDF2\uDDF3\uDDF7\uDDF9\uDDFA])|\uD83C\uDDE9(?:\uD83C[\uDDEA\uDDEC\uDDEF\uDDF0\uDDF2\uDDF4\uDDFF])|\uD83C\uDDFE(?:\uD83C[\uDDEA\uDDF9])|\uD83C\uDDEC(?:\uD83C[\uDDE6\uDDE7\uDDE9-\uDDEE\uDDF1-\uDDF3\uDDF5-\uDDFA\uDDFC\uDDFE])|\uD83C\uDDF8(?:\uD83C[\uDDE6-\uDDEA\uDDEC-\uDDF4\uDDF7-\uDDF9\uDDFB\uDDFD-\uDDFF])|\uD83C\uDDEB(?:\uD83C[\uDDEE-\uDDF0\uDDF2\uDDF4\uDDF7])|\uD83C\uDDF5(?:\uD83C[\uDDE6\uDDEA-\uDDED\uDDF0-\uDDF3\uDDF7-\uDDF9\uDDFC\uDDFE])|\uD83C\uDDFB(?:\uD83C[\uDDE6\uDDE8\uDDEA\uDDEC\uDDEE\uDDF3\uDDFA])|\uD83C\uDDF3(?:\uD83C[\uDDE6\uDDE8\uDDEA-\uDDEC\uDDEE\uDDF1\uDDF4\uDDF5\uDDF7\uDDFA\uDDFF])|\uD83C\uDDE8(?:\uD83C[\uDDE6\uDDE8\uDDE9\uDDEB-\uDDEE\uDDF0-\uDDF5\uDDF7\uDDFA-\uDDFF])|\uD83C\uDDF1(?:\uD83C[\uDDE6-\uDDE8\uDDEE\uDDF0\uDDF7-\uDDFB\uDDFE])|\uD83C\uDDFF(?:\uD83C[\uDDE6\uDDF2\uDDFC])|\uD83C\uDDFC(?:\uD83C[\uDDEB\uDDF8])|\uD83C\uDDFA(?:\uD83C[\uDDE6\uDDEC\uDDF2\uDDF3\uDDF8\uDDFE\uDDFF])|\uD83C\uDDEE(?:\uD83C[\uDDE8-\uDDEA\uDDF1-\uDDF4\uDDF6-\uDDF9])|\uD83C\uDDEF(?:\uD83C[\uDDEA\uDDF2\uDDF4\uDDF5])|(?:\uD83C[\uDFC3\uDFC4\uDFCA]|\uD83D[\uDC6E\uDC71\uDC73\uDC77\uDC81\uDC82\uDC86\uDC87\uDE45-\uDE47\uDE4B\uDE4D\uDE4E\uDEA3\uDEB4-\uDEB6]|\uD83E[\uDD26\uDD37-\uDD39\uDD3D\uDD3E\uDDB8\uDDB9\uDDCD-\uDDCF\uDDD6-\uDDDD])(?:\uD83C[\uDFFB-\uDFFF])|(?:\u26F9|\uD83C[\uDFCB\uDFCC]|\uD83D\uDD75)(?:\uD83C[\uDFFB-\uDFFF])|(?:[\u261D\u270A-\u270D]|\uD83C[\uDF85\uDFC2\uDFC7]|\uD83D[\uDC42\uDC43\uDC46-\uDC50\uDC66\uDC67\uDC6B-\uDC6D\uDC70\uDC72\uDC74-\uDC76\uDC78\uDC7C\uDC83\uDC85\uDCAA\uDD74\uDD7A\uDD90\uDD95\uDD96\uDE4C\uDE4F\uDEC0\uDECC]|\uD83E[\uDD0F\uDD18-\uDD1C\uDD1E\uDD1F\uDD30-\uDD36\uDDB5\uDDB6\uDDBB\uDDD2-\uDDD5])(?:\uD83C[\uDFFB-\uDFFF])|(?:[\u231A\u231B\u23E9-\u23EC\u23F0\u23F3\u25FD\u25FE\u2614\u2615\u2648-\u2653\u267F\u2693\u26A1\u26AA\u26AB\u26BD\u26BE\u26C4\u26C5\u26CE\u26D4\u26EA\u26F2\u26F3\u26F5\u26FA\u26FD\u2705\u270A\u270B\u2728\u274C\u274E\u2753-\u2755\u2757\u2795-\u2797\u27B0\u27BF\u2B1B\u2B1C\u2B50\u2B55]|\uD83C[\uDC04\uDCCF\uDD8E\uDD91-\uDD9A\uDDE6-\uDDFF\uDE01\uDE1A\uDE2F\uDE32-\uDE36\uDE38-\uDE3A\uDE50\uDE51\uDF00-\uDF20\uDF2D-\uDF35\uDF37-\uDF7C\uDF7E-\uDF93\uDFA0-\uDFCA\uDFCF-\uDFD3\uDFE0-\uDFF0\uDFF4\uDFF8-\uDFFF]|\uD83D[\uDC00-\uDC3E\uDC40\uDC42-\uDCFC\uDCFF-\uDD3D\uDD4B-\uDD4E\uDD50-\uDD67\uDD7A\uDD95\uDD96\uDDA4\uDDFB-\uDE4F\uDE80-\uDEC5\uDECC\uDED0-\uDED2\uDED5\uDEEB\uDEEC\uDEF4-\uDEFA\uDFE0-\uDFEB]|\uD83E[\uDD0D-\uDD3A\uDD3C-\uDD45\uDD47-\uDD71\uDD73-\uDD76\uDD7A-\uDDA2\uDDA5-\uDDAA\uDDAE-\uDDCA\uDDCD-\uDDFF\uDE70-\uDE73\uDE78-\uDE7A\uDE80-\uDE82\uDE90-\uDE95])|(?:[#\*0-9\xA9\xAE\u203C\u2049\u2122\u2139\u2194-\u2199\u21A9\u21AA\u231A\u231B\u2328\u23CF\u23E9-\u23F3\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB-\u25FE\u2600-\u2604\u260E\u2611\u2614\u2615\u2618\u261D\u2620\u2622\u2623\u2626\u262A\u262E\u262F\u2638-\u263A\u2640\u2642\u2648-\u2653\u265F\u2660\u2663\u2665\u2666\u2668\u267B\u267E\u267F\u2692-\u2697\u2699\u269B\u269C\u26A0\u26A1\u26AA\u26AB\u26B0\u26B1\u26BD\u26BE\u26C4\u26C5\u26C8\u26CE\u26CF\u26D1\u26D3\u26D4\u26E9\u26EA\u26F0-\u26F5\u26F7-\u26FA\u26FD\u2702\u2705\u2708-\u270D\u270F\u2712\u2714\u2716\u271D\u2721\u2728\u2733\u2734\u2744\u2747\u274C\u274E\u2753-\u2755\u2757\u2763\u2764\u2795-\u2797\u27A1\u27B0\u27BF\u2934\u2935\u2B05-\u2B07\u2B1B\u2B1C\u2B50\u2B55\u3030\u303D\u3297\u3299]|\uD83C[\uDC04\uDCCF\uDD70\uDD71\uDD7E\uDD7F\uDD8E\uDD91-\uDD9A\uDDE6-\uDDFF\uDE01\uDE02\uDE1A\uDE2F\uDE32-\uDE3A\uDE50\uDE51\uDF00-\uDF21\uDF24-\uDF93\uDF96\uDF97\uDF99-\uDF9B\uDF9E-\uDFF0\uDFF3-\uDFF5\uDFF7-\uDFFF]|\uD83D[\uDC00-\uDCFD\uDCFF-\uDD3D\uDD49-\uDD4E\uDD50-\uDD67\uDD6F\uDD70\uDD73-\uDD7A\uDD87\uDD8A-\uDD8D\uDD90\uDD95\uDD96\uDDA4\uDDA5\uDDA8\uDDB1\uDDB2\uDDBC\uDDC2-\uDDC4\uDDD1-\uDDD3\uDDDC-\uDDDE\uDDE1\uDDE3\uDDE8\uDDEF\uDDF3\uDDFA-\uDE4F\uDE80-\uDEC5\uDECB-\uDED2\uDED5\uDEE0-\uDEE5\uDEE9\uDEEB\uDEEC\uDEF0\uDEF3-\uDEFA\uDFE0-\uDFEB]|\uD83E[\uDD0D-\uDD3A\uDD3C-\uDD45\uDD47-\uDD71\uDD73-\uDD76\uDD7A-\uDDA2\uDDA5-\uDDAA\uDDAE-\uDDCA\uDDCD-\uDDFF\uDE70-\uDE73\uDE78-\uDE7A\uDE80-\uDE82\uDE90-\uDE95])\uFE0F|(?:[\u261D\u26F9\u270A-\u270D]|\uD83C[\uDF85\uDFC2-\uDFC4\uDFC7\uDFCA-\uDFCC]|\uD83D[\uDC42\uDC43\uDC46-\uDC50\uDC66-\uDC78\uDC7C\uDC81-\uDC83\uDC85-\uDC87\uDC8F\uDC91\uDCAA\uDD74\uDD75\uDD7A\uDD90\uDD95\uDD96\uDE45-\uDE47\uDE4B-\uDE4F\uDEA3\uDEB4-\uDEB6\uDEC0\uDECC]|\uD83E[\uDD0F\uDD18-\uDD1F\uDD26\uDD30-\uDD39\uDD3C-\uDD3E\uDDB5\uDDB6\uDDB8\uDDB9\uDDBB\uDDCD-\uDDCF\uDDD1-\uDDDD])/g;
   };
 });
 
-// ../../node_modules/string-width/index.js
+// node_modules/string-width/index.js
 var require_string_width = __commonJS((exports, module) => {
   var stripAnsi = require_strip_ansi();
   var isFullwidthCodePoint = require_is_fullwidth_code_point();
@@ -205,7 +219,7 @@ var require_string_width = __commonJS((exports, module) => {
   module.exports.default = stringWidth;
 });
 
-// ../../node_modules/color-name/index.js
+// node_modules/color-name/index.js
 var require_color_name = __commonJS((exports, module) => {
   module.exports = {
     aliceblue: [240, 248, 255],
@@ -359,7 +373,7 @@ var require_color_name = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/color-convert/conversions.js
+// node_modules/color-convert/conversions.js
 var require_conversions = __commonJS((exports, module) => {
   var cssKeywords = require_color_name();
   var reverseKeywords = {};
@@ -1028,7 +1042,7 @@ var require_conversions = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/color-convert/route.js
+// node_modules/color-convert/route.js
 var require_route = __commonJS((exports, module) => {
   var conversions = require_conversions();
   function buildGraph() {
@@ -1094,7 +1108,7 @@ var require_route = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/color-convert/index.js
+// node_modules/color-convert/index.js
 var require_color_convert = __commonJS((exports, module) => {
   var conversions = require_conversions();
   var route = require_route();
@@ -1153,7 +1167,7 @@ var require_color_convert = __commonJS((exports, module) => {
   module.exports = convert;
 });
 
-// ../../node_modules/ansi-styles/index.js
+// node_modules/ansi-styles/index.js
 var require_ansi_styles = __commonJS((exports, module) => {
   var wrapAnsi16 = (fn, offset) => (...args) => {
     const code = fn(...args);
@@ -1289,7 +1303,7 @@ var require_ansi_styles = __commonJS((exports, module) => {
   });
 });
 
-// ../../node_modules/@inquirer/core/node_modules/wrap-ansi/index.js
+// node_modules/wrap-ansi/index.js
 var require_wrap_ansi = __commonJS((exports, module) => {
   var stringWidth = require_string_width();
   var stripAnsi = require_strip_ansi();
@@ -1425,7 +1439,7 @@ var require_wrap_ansi = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/mute-stream/lib/index.js
+// node_modules/mute-stream/lib/index.js
 var require_lib = __commonJS((exports, module) => {
   var Stream = __require("stream");
 
@@ -1757,6 +1771,7 @@ function localRunnerPayload(options, instanceId, eventType, codexThreadId, conte
         fast: options.fast ?? false,
         sandbox: options.channelSession?.sandbox ?? null,
         approval_policy: options.channelSession?.approvalPolicy ?? null,
+        allow_port_forwarding_by_default: options.channelSession?.allowPortForwardingByDefault ?? null,
         user_id: context.runnerIdentity.actorUserId ?? null,
         ...sourceMessageSeq === undefined ? {} : { source_message_seq: sourceMessageSeq }
       }
@@ -3362,8 +3377,17 @@ function reviewPortForwardCandidate(options) {
       reason: "listener_changed"
     };
   }
-  if (options.pendingRequests.some((request) => request.port === options.candidate.port)) {
-    return { type: "skip", reason: "already_pending" };
+  const pendingRequest = options.pendingRequests.find((request) => request.port === options.candidate.port);
+  if (pendingRequest !== undefined) {
+    if (sameForwardCandidate(approvedTargetFromRequest(pendingRequest), options.candidate)) {
+      return { type: "skip", reason: "already_pending" };
+    }
+    return {
+      type: "replace_pending",
+      expired: pendingRequest,
+      candidate: options.candidate,
+      reason: "listener_changed"
+    };
   }
   return { type: "prompt", candidate: options.candidate };
 }
@@ -4319,7 +4343,7 @@ async function bindChannelSession(args, state, payloadContext) {
 }
 async function handleChannelSessionControl(args, state, payloadContext, control) {
   if (control.type === "update_session_settings") {
-    return updateSessionSettings(args, state, control);
+    return updateSessionSettings(args, state, payloadContext, control);
   }
   if (control.type === "resolve_codex_approval_request") {
     return resolvePendingCodexApprovalRequest(args, state, control);
@@ -4386,7 +4410,7 @@ async function handleChannelSessionControl(args, state, payloadContext, control)
     interruptedQueuedMessages: interrupted.ok ? interrupted.selectedCount : 0
   };
 }
-async function updateSessionSettings(args, state, control) {
+async function updateSessionSettings(args, state, payloadContext, control) {
   if (state.codexThreadId !== control.threadId) {
     return;
   }
@@ -4410,8 +4434,12 @@ async function updateSessionSettings(args, state, control) {
     reasoning_effort: state.runtimeSettings.reasoningEffort ?? null,
     approval_policy: state.runtimeSettings.approvalPolicy ?? null,
     sandbox: state.runtimeSettings.sandbox ?? null,
-    fast: state.runtimeSettings.fast ?? null
+    fast: state.runtimeSettings.fast ?? null,
+    allow_port_forwarding_by_default: state.runtimeSettings.allowPortForwardingByDefault ?? null
   });
+  if (state.runtimeSettings.allowPortForwardingByDefault === true) {
+    await approvePendingPortForwardRequestsByDefault(args, state, payloadContext);
+  }
   await tryResumeCodexThreadForPendingRuntimeSettings(args, state);
   return {
     instanceId: args.instanceId,
@@ -4420,7 +4448,8 @@ async function updateSessionSettings(args, state, control) {
     reasoningEffort: state.runtimeSettings.reasoningEffort ?? null,
     approvalPolicy: state.runtimeSettings.approvalPolicy ?? null,
     sandbox: state.runtimeSettings.sandbox ?? null,
-    fast: state.runtimeSettings.fast ?? null
+    fast: state.runtimeSettings.fast ?? null,
+    allowPortForwardingByDefault: state.runtimeSettings.allowPortForwardingByDefault ?? null
   };
 }
 async function resumeCodexThreadForPendingRuntimeSettings(args, state) {
@@ -4570,6 +4599,29 @@ async function resolvePendingPortForwardRequest(args, state, payloadContext, con
     await drainQueuedPortForwardPrompt(args, state, payloadContext);
     return { instanceId: args.instanceId, ok: true };
   }
+  await approvePortForwardRequest(args, state, payloadContext, request, {
+    publishMessageState: true,
+    logEvent: "port_forward.request_approved"
+  });
+  await drainQueuedPortForwardPrompt(args, state, payloadContext);
+  return { instanceId: args.instanceId, ok: true, port: request.port };
+}
+async function expirePendingPortForwardRequest(args, state, request, reason) {
+  const failedReason = reason === "listener_exited" ? "port_forward_listener_exited" : "port_forward_listener_changed";
+  state.pendingPortForwardRequests.delete(request.requestId);
+  await publishForwardPortResolvedEvent(args, request, {
+    decision: "expired",
+    reason
+  });
+  await publishMessageStateForPortForwardResult(args, state, request, "failed", failedReason);
+  args.log("port_forward.pending_request_expired", {
+    request_id: request.requestId,
+    port: request.port,
+    pid: request.pid,
+    reason
+  });
+}
+async function approvePortForwardRequest(args, state, payloadContext, request, options) {
   state.approvedForwardPorts.add(request.port);
   state.approvedForwardTargets.set(request.port, approvedTargetFromRequest(request));
   const processIdentity = guessCanonicalProcessFromCommand(request.command);
@@ -4584,15 +4636,15 @@ async function resolvePendingPortForwardRequest(args, state, payloadContext, con
     decision: "approve",
     capabilities
   });
-  await publishMessageStateForPortForwardResult(args, state, request, "processed");
+  if (options.publishMessageState) {
+    await publishMessageStateForPortForwardResult(args, state, request, "processed");
+  }
   await publishPortForwardReadyMessage(args, state, payloadContext, request);
-  args.log("port_forward.request_approved", {
-    request_id: control.requestId,
+  args.log(options.logEvent, {
+    request_id: request.requestId,
     port: request.port,
     pid: request.pid
   });
-  await drainQueuedPortForwardPrompt(args, state, payloadContext);
-  return { instanceId: args.instanceId, ok: true, port: request.port };
 }
 function portForwardControlSenderAllowed(args, payloadContext, control) {
   if (control.actorSlug === undefined && control.actorUserId === undefined) {
@@ -4621,6 +4673,7 @@ async function publishPortForwardPrompt(args, state, payloadContext, candidate)
     dismissedTargets: state.dismissedForwardTargets,
     pendingRequests: Array.from(state.pendingPortForwardRequests.values())
   });
+  const allowByDefault = state.runtimeSettings.allowPortForwardingByDefault === true;
   switch (review.type) {
     case "skip":
       return;
@@ -4628,7 +4681,7 @@ async function publishPortForwardPrompt(args, state, payloadContext, candidate)
       state.approvedForwardTargets.set(review.target.port, review.target);
       return;
     case "revoke_and_prompt":
-      if (state.pendingPortForwardRequests.size > 0) {
+      if (state.pendingPortForwardRequests.size > 0 && !allowByDefault) {
         state.queuedPortForwardCandidates.set(candidate.port, candidate);
         args.log("port_forward.request_queued", {
           port: candidate.port,
@@ -4638,8 +4691,32 @@ async function publishPortForwardPrompt(args, state, payloadContext, candidate)
         return;
       }
       await revokeApprovedForwardPort(args, state, review.revoked, review.reason);
+      if (allowByDefault) {
+        await autoApprovePortForwardCandidate(args, state, payloadContext, candidate);
+        return;
+      }
+      break;
+    case "replace_pending":
+      await expirePendingPortForwardRequest(args, state, review.expired, review.reason);
+      if (allowByDefault) {
+        await autoApprovePortForwardCandidate(args, state, payloadContext, review.candidate);
+        return;
+      }
+      if (state.pendingPortForwardRequests.size > 0) {
+        state.queuedPortForwardCandidates.set(review.candidate.port, review.candidate);
+        args.log("port_forward.request_queued", {
+          port: review.candidate.port,
+          pid: review.candidate.pid,
+          pending_count: state.pendingPortForwardRequests.size
+        });
+        return;
+      }
       break;
     case "prompt":
+      if (allowByDefault) {
+        await autoApprovePortForwardCandidate(args, state, payloadContext, candidate);
+        return;
+      }
       if (state.pendingPortForwardRequests.size > 0) {
         state.queuedPortForwardCandidates.set(candidate.port, candidate);
         args.log("port_forward.request_queued", {
@@ -4717,6 +4794,45 @@ async function publishPortForwardPrompt(args, state, payloadContext, candidate)
     pid: candidate.pid
   });
 }
+async function autoApprovePortForwardCandidate(args, state, payloadContext, candidate) {
+  const sourceSeq = portForwardApprovalSourceSeq(state);
+  if (sourceSeq === undefined) {
+    args.log("port_forward.auto_approval_skipped", {
+      port: candidate.port,
+      pid: candidate.pid,
+      reason: "source_seq_missing"
+    });
+    return;
+  }
+  const request = pendingRequestFromCandidate({
+    requestId: `port-forward-auto-${randomUUID()}`,
+    sourceSeq,
+    candidate
+  });
+  await approvePortForwardRequest(args, state, payloadContext, request, {
+    publishMessageState: false,
+    logEvent: "port_forward.request_auto_approved"
+  });
+}
+async function approvePendingPortForwardRequestsByDefault(args, state, payloadContext) {
+  for (const request of Array.from(state.pendingPortForwardRequests.values())) {
+    state.pendingPortForwardRequests.delete(request.requestId);
+    await approvePortForwardRequest(args, state, payloadContext, request, {
+      publishMessageState: true,
+      logEvent: "port_forward.request_auto_approved"
+    });
+  }
+  await drainQueuedPortForwardPromptsByDefault(args, state, payloadContext);
+}
+async function drainQueuedPortForwardPromptsByDefault(args, state, payloadContext) {
+  const next = Array.from(state.queuedPortForwardCandidates.values()).sort((left, right) => left.port - right.port)[0];
+  if (next === undefined) {
+    return;
+  }
+  state.queuedPortForwardCandidates.delete(next.port);
+  await publishPortForwardPrompt(args, state, payloadContext, next);
+  await drainQueuedPortForwardPromptsByDefault(args, state, payloadContext);
+}
 function portForwardApprovalSourceSeq(state) {
   return state.activeProcessingState?.seq ?? state.rootSeq;
 }
@@ -4750,18 +4866,7 @@ async function expireLostPendingPortForwardRequest(args, state, payloadContext,
   if (request === undefined) {
     return;
   }
-  state.pendingPortForwardRequests.delete(request.requestId);
-  await publishForwardPortResolvedEvent(args, request, {
-    decision: "expired",
-    reason: "listener_exited"
-  });
-  await publishMessageStateForPortForwardResult(args, state, request, "failed", "port_forward_listener_exited");
-  args.log("port_forward.pending_request_expired", {
-    request_id: request.requestId,
-    port: request.port,
-    pid: request.pid,
-    reason: "listener_exited"
-  });
+  await expirePendingPortForwardRequest(args, state, request, "listener_exited");
   await drainQueuedPortForwardPrompt(args, state, payloadContext);
 }
 async function publishPortForwardReadyMessage(args, state, payloadContext, request) {
@@ -4995,10 +5100,6 @@ async function handleKandanChatEvent(args, state, runnerIdentity, payloadContext
       actor_user_id: event.actorUserId ?? null,
       reason: "different_thread"
     });
-    await publishKandanMessageState(args, event, {
-      status: "ignored",
-      reason: "different_thread"
-    });
     return;
   }
   if (!claimKandanMessage(args, state, event)) {
@@ -5416,48 +5517,15 @@ async function forwardCompletedCodexTurn(args, state, turnId, payloadContext) {
     if (completingLocalTuiTurn && sourceMessageSeqForTurn(state, turnId) === undefined) {
       throw new LogicalProjectionError(`Cannot forward Codex output for local TUI turn ${turnId} before mirroring its human input`);
     }
-    for (const message of messages) {
-      const sourceMessageSeq = sourceMessageSeqForTurn(state, turnId);
-      const rootSeq = state.rootSeq;
-      const streamedStructured = resolveStreamingStructuredOutputForCompletedMessage(state, message.itemKey, message.structured);
-      if (streamedStructured !== undefined) {
-        await editCodexStructuredOutput(args, state, streamedStructured.seq, message.body, message.structured);
-        forgetStreamingStructuredOutput(state, message.itemKey, message.structured);
-        args.log("kandan.codex_output_forwarded", {
-          turn_id: turnId,
-          item_key: message.itemKey,
-          structured_kind: stringValue(message.structured.kind) ?? null,
-          command: stringValue(message.structured.command) ?? null,
-          file_paths: fileChangePaths(message.structured)
-        });
-        continue;
-      }
-      if (stringValue(message.structured.kind) === "codex_terminal_input" && state.forwardedTerminalInputKeys.has(message.itemKey)) {
-        continue;
-      }
-      const streamed = resolveStreamingAssistantOutputForCompletedMessage(state, turnId, message.itemKey, message.body, message.structured);
-      switch (streamed.status) {
-        case "none":
-          await streamCompletedCodexOutput(args, state, payloadContext, {
-            turnId,
-            sourceMessageSeq,
-            rootSeq,
-            message
-          });
-          break;
-        case "matched":
-          await editStreamedCodexOutput(args, state, streamed.output.seq, message.itemKey, message.body, "completed");
-          forgetStreamingAssistantOutput(state, streamed.output.itemKey);
-          break;
-        case "ambiguous":
-          throw new LogicalProjectionError(`Cannot reconcile completed assistant item ${message.itemKey} for turn ${turnId}; ${streamed.candidateCount} active streamed assistant outputs exist`);
-      }
-      args.log("kandan.codex_output_forwarded", {
-        turn_id: turnId,
-        item_key: message.itemKey,
-        structured_kind: stringValue(message.structured.kind) ?? null,
-        command: stringValue(message.structured.command) ?? null,
-        file_paths: fileChangePaths(message.structured)
+    const completedOutputs = completedOutputProjectionsForTurn(state, turnId, messages);
+    const sourceMessageSeq = sourceMessageSeqForTurn(state, turnId);
+    const rootSeq = state.rootSeq;
+    for (const output of completedOutputs) {
+      await postCompletedOutputProjection(args, state, payloadContext, {
+        turnId,
+        sourceMessageSeq,
+        rootSeq,
+        output
       });
     }
     rememberForwardedTurnId(state, turnId);
@@ -5506,6 +5574,202 @@ async function forwardCompletedCodexTurn(args, state, turnId, payloadContext) {
     }
   }
 }
+function completedOutputProjectionsForTurn(state, turnId, messages) {
+  const snapshotOutputs = messages.flatMap((message, snapshotIndex) => completedSnapshotOutputProjection(state, turnId, message, snapshotIndex));
+  const matchedStructuredKeys = new Set(snapshotOutputs.flatMap((output) => {
+    switch (output.match.kind) {
+      case "structured":
+        return [output.match.matchKey];
+      case "assistant":
+      case "none":
+        return [];
+    }
+  }));
+  const filteredReasoningOutputs = boundedCacheValues(state.streamingReasoningOutputs).filter((output) => output.turnId === turnId && !matchedStructuredKeys.has(structuredOutputMatchKey("codex_reasoning", output.itemKey)));
+  const filteredCommandOutputs = boundedCacheValues(state.streamingCommandOutputs).filter((output) => output.turnId === turnId && !matchedStructuredKeys.has(structuredOutputMatchKey("codex_command_execution", output.itemKey)));
+  const filteredFileChangeOutputs = boundedCacheValues(state.streamingFileChangeOutputs).filter((output) => output.turnId === turnId && !matchedStructuredKeys.has(structuredOutputMatchKey("codex_file_change", output.itemKey)));
+  const cachedOutputs = [
+    ...filteredReasoningOutputs.map((output, index) => ({
+      kind: "cached_reasoning",
+      sortOrder: output.seq,
+      snapshotIndex: messages.length + index,
+      output
+    })),
+    ...filteredCommandOutputs.map((output, index) => ({
+      kind: "cached_command",
+      sortOrder: output.seq,
+      snapshotIndex: messages.length + filteredReasoningOutputs.length + index,
+      output
+    })),
+    ...filteredFileChangeOutputs.map((output, index) => ({
+      kind: "cached_file_change",
+      sortOrder: output.seq,
+      snapshotIndex: messages.length + filteredReasoningOutputs.length + filteredCommandOutputs.length + index,
+      output
+    }))
+  ];
+  const fallbackSortOrderBase = fallbackSnapshotOutputBase([
+    ...snapshotOutputs.flatMap((output) => {
+      switch (output.match.kind) {
+        case "assistant":
+        case "structured":
+          return [output.sortOrder];
+        case "none":
+          return [];
+      }
+    }),
+    ...cachedOutputs.map((output) => output.sortOrder)
+  ]);
+  const orderedSnapshotOutputs = snapshotOutputs.map((output) => {
+    switch (output.match.kind) {
+      case "none":
+        return {
+          ...output,
+          sortOrder: fallbackSnapshotOutputOrder(fallbackSortOrderBase, output.snapshotIndex)
+        };
+      case "assistant":
+      case "structured":
+        return output;
+    }
+  });
+  return [...orderedSnapshotOutputs, ...cachedOutputs].sort(compareCompletedOutputProjection);
+}
+function completedSnapshotOutputProjection(state, turnId, message, snapshotIndex) {
+  const streamedStructured = resolveStreamingStructuredOutputForCompletedMessage(state, message.itemKey, message.structured);
+  if (streamedStructured !== undefined) {
+    const structuredKind = stringValue(message.structured.kind) ?? "";
+    return [
+      {
+        kind: "snapshot",
+        sortOrder: streamedStructured.seq,
+        snapshotIndex,
+        message,
+        match: {
+          kind: "structured",
+          itemKey: message.itemKey,
+          structured: message.structured,
+          matchKey: structuredOutputMatchKey(structuredKind, message.itemKey)
+        }
+      }
+    ];
+  }
+  if (stringValue(message.structured.kind) === "codex_terminal_input" && state.forwardedTerminalInputKeys.has(message.itemKey)) {
+    return [];
+  }
+  const streamed = resolveStreamingAssistantOutputForCompletedMessage(state, turnId, message.itemKey, message.body, message.structured);
+  switch (streamed.status) {
+    case "none":
+      return [
+        {
+          kind: "snapshot",
+          sortOrder: snapshotIndex,
+          snapshotIndex,
+          message,
+          match: { kind: "none" }
+        }
+      ];
+    case "matched":
+      return [
+        {
+          kind: "snapshot",
+          sortOrder: streamed.output.seq,
+          snapshotIndex,
+          message,
+          match: { kind: "assistant", itemKey: streamed.output.itemKey }
+        }
+      ];
+    case "ambiguous":
+      throw new LogicalProjectionError(`Cannot reconcile completed assistant item ${message.itemKey} for turn ${turnId}; ${streamed.candidateCount} active streamed assistant outputs exist`);
+  }
+}
+async function postCompletedOutputProjection(args, state, payloadContext, params) {
+  switch (params.output.kind) {
+    case "snapshot": {
+      switch (params.output.match.kind) {
+        case "none":
+          await streamCompletedCodexOutput(args, state, payloadContext, {
+            turnId: params.turnId,
+            sourceMessageSeq: params.sourceMessageSeq,
+            rootSeq: params.rootSeq,
+            message: params.output.message
+          });
+          break;
+        case "assistant":
+          await editStreamedCodexOutput(args, state, params.output.sortOrder, params.output.message.itemKey, params.output.message.body, "completed");
+          forgetStreamingAssistantOutput(state, params.output.match.itemKey);
+          break;
+        case "structured":
+          await editCodexStructuredOutput(args, state, params.output.sortOrder, params.output.message.body, params.output.message.structured);
+          forgetStreamingStructuredOutput(state, params.output.match.itemKey, params.output.match.structured);
+          break;
+      }
+      logCompletedCodexOutput(args, params.turnId, params.output.message);
+      break;
+    }
+    case "cached_reasoning": {
+      const output = params.output.output;
+      const message = {
+        itemKey: output.itemKey,
+        body: output.content,
+        structured: codexReasoningStructuredMessage(output.itemKey, output.content, "completed")
+      };
+      await editCodexStructuredOutput(args, state, output.seq, message.body, message.structured);
+      forgetStreamingReasoningOutput(state, output.itemKey);
+      logCompletedCodexOutput(args, params.turnId, message);
+      break;
+    }
+    case "cached_command": {
+      const output = params.output.output;
+      const message = {
+        itemKey: output.itemKey,
+        body: codexCommandOutputBody("command output", output.output),
+        structured: codexCommandExecutionStructuredMessage(output.itemKey, {
+          command: "command output",
+          output: output.output,
+          processId: output.processId,
+          stream: output.stream
+        }, "completed")
+      };
+      await editCodexStructuredOutput(args, state, output.seq, message.body, message.structured);
+      forgetStreamingCommandOutput(state, output.itemKey);
+      logCompletedCodexOutput(args, params.turnId, message);
+      break;
+    }
+    case "cached_file_change": {
+      const output = params.output.output;
+      const message = {
+        itemKey: output.itemKey,
+        body: output.patchText,
+        structured: codexFileChangeStructuredMessage(output.itemKey, output.patchText, "completed", "completed")
+      };
+      await editCodexStructuredOutput(args, state, output.seq, message.body, message.structured);
+      forgetStreamingFileChangeOutput(state, output.itemKey);
+      logCompletedCodexOutput(args, params.turnId, message);
+      break;
+    }
+  }
+}
+function logCompletedCodexOutput(args, turnId, message) {
+  args.log("kandan.codex_output_forwarded", {
+    turn_id: turnId,
+    item_key: message.itemKey,
+    structured_kind: stringValue(message.structured.kind) ?? null,
+    command: stringValue(message.structured.command) ?? null,
+    file_paths: fileChangePaths(message.structured)
+  });
+}
+function compareCompletedOutputProjection(left, right) {
+  return left.sortOrder === right.sortOrder ? left.snapshotIndex - right.snapshotIndex : left.sortOrder - right.sortOrder;
+}
+function fallbackSnapshotOutputBase(sortOrders) {
+  return sortOrders.reduce((max, sortOrder) => Math.max(max, sortOrder), 0) + 1;
+}
+function fallbackSnapshotOutputOrder(base, snapshotIndex) {
+  return base + snapshotIndex;
+}
+function structuredOutputMatchKey(kind, itemKey) {
+  return `${kind}:${itemKey}`;
+}
 async function forwardAssistantDeltaPayload(args, state, delta, payloadContext) {
   if (state.kandanThreadId === undefined || state.codexThreadId === undefined) {
     return;
@@ -6846,7 +7110,8 @@ function runtimeSettingsFromOptions(options) {
     reasoningEffort: options.channelSession.reasoningEffort,
     approvalPolicy: codexApprovalPolicySetting(options.channelSession.approvalPolicy, options.channelSession.sandbox),
     sandbox: options.channelSession.sandbox,
-    fast: options.fast
+    fast: options.fast,
+    allowPortForwardingByDefault: options.channelSession.allowPortForwardingByDefault
   };
 }
 function mergeRuntimeSettings(current, update) {
@@ -6856,7 +7121,8 @@ function mergeRuntimeSettings(current, update) {
     reasoningEffort: mergeOptionalStringRuntimeSetting(current.reasoningEffort, update, "reasoningEffort"),
     approvalPolicy: mergeOptionalApprovalPolicyRuntimeSetting(current.approvalPolicy, update, sandbox),
     sandbox,
-    fast: update.fast ?? current.fast
+    fast: update.fast ?? current.fast,
+    allowPortForwardingByDefault: update.allowPortForwardingByDefault ?? current.allowPortForwardingByDefault
   };
 }
 function mergeOptionalApprovalPolicyRuntimeSetting(current, update, sandbox) {
@@ -6880,7 +7146,8 @@ function runtimeOptionsForSettings(options, settings) {
       model: settings.model,
       reasoningEffort: settings.reasoningEffort,
       approvalPolicy: settings.approvalPolicy,
-      sandbox: settings.sandbox
+      sandbox: settings.sandbox,
+      allowPortForwardingByDefault: settings.allowPortForwardingByDefault
     }
   };
 }
@@ -6899,6 +7166,7 @@ async function publishRuntimeSettings(args, state) {
     approvalPolicy: state.runtimeSettings.approvalPolicy ?? null,
     sandbox: state.runtimeSettings.sandbox ?? null,
     fast: state.runtimeSettings.fast ?? null,
+    allowPortForwardingByDefault: state.runtimeSettings.allowPortForwardingByDefault ?? null,
     updated_at: new Date().toISOString()
   });
 }
@@ -8776,7 +9044,7 @@ function kandanHttpBaseUrl(kandanUrl) {
     case "https:":
       break;
     default:
-      throw new Error("--linzumi-url must be ws://, wss://, http://, or https://");
+      throw new Error("--api-url must be ws://, wss://, http://, or https://");
   }
   parsed.pathname = "";
   parsed.search = "";
@@ -9414,7 +9682,8 @@ function probeTool(command, cwd) {
     });
     const child = spawn5(command, args, {
       cwd,
-      stdio: ["ignore", "pipe", "pipe"]
+      stdio: ["ignore", "pipe", "pipe"],
+      detached: process.platform !== "win32"
     });
     writeCliAuditEvent("process.spawned", {
       command,
@@ -9435,7 +9704,7 @@ function probeTool(command, cwd) {
       resolve5(status);
     };
     const timeout = setTimeout(() => {
-      child.kill("SIGKILL");
+      killDependencyProbe(child.pid);
       writeCliAuditEvent("process.exit", {
         command,
         args,
@@ -9485,6 +9754,18 @@ function probeTool(command, cwd) {
     });
   });
 }
+function killDependencyProbe(pid) {
+  if (pid === undefined) {
+    return;
+  }
+  try {
+    process.kill(process.platform === "win32" ? pid : -pid, "SIGKILL");
+  } catch (_error) {
+    try {
+      process.kill(pid, "SIGKILL");
+    } catch (_nestedError) {}
+  }
+}
 async function buildRunnerDependencyStatus(args) {
   const [bun, codex, codeServer] = await Promise.all([
     probeTool(process.execPath, args.cwd),
@@ -9617,6 +9898,21 @@ async function connectPhoenixClient(baseUrl, token, socketFactory = (url) => new
       state.rejectReady = reject;
     });
   };
+  const dispatchRejoinEvents = (topic, response) => {
+    if (!topic.startsWith("chat:")) {
+      return;
+    }
+    const events = response.events;
+    if (events === undefined || events === null) {
+      return;
+    }
+    if (!Array.isArray(events)) {
+      throw new Error(`phoenix rejoin returned invalid events for ${topic}`);
+    }
+    events.forEach((backlogEvent) => {
+      eventCallbacks.forEach((callback) => callback(topic, "event", backlogEvent));
+    });
+  };
   const handleMessage = (event) => {
     const frame = decodeFrame(String(event.data));
     const [, ref, topic, name, payload] = frame;
@@ -9630,6 +9926,14 @@ async function connectPhoenixClient(baseUrl, token, socketFactory = (url) => new
         } else if (isNonOkPushReply(payload) && pendingPush.event !== "phx_join") {
           pendingPush.reject(new Error(`phoenix push failed: ${replyErrorMessage(payload)}`));
         } else {
+          if (pendingPush.event === "phx_join" && state.connectionGeneration > 1 && joins.has(topic) && isJoinReply(payload)) {
+            try {
+              dispatchRejoinEvents(topic, payload.response);
+            } catch (error) {
+              pendingPush.reject(error instanceof Error ? error : new Error(String(error)));
+              return;
+            }
+          }
           pendingPush.resolve(payload);
         }
       }
@@ -10152,7 +10456,7 @@ function realpathOrResolved(pathValue) {
 }
 
 // src/version.ts
-var linzumiCliVersion = "0.0.51-beta";
+var linzumiCliVersion = "0.0.53-beta";
 var linzumiCliVersionText = `linzumi ${linzumiCliVersion}`;
 
 // src/runnerLock.ts
@@ -10761,6 +11065,25 @@ async function openLocalCodexRunner(options, log, cleanup, close) {
         }
         revokeEditorForwardPort(review.revoked.port, review.reason);
         break;
+      case "replace_pending":
+        localEditorForwardState.pendingRequests.delete(review.expired.port);
+        pushEditorPortForwardEvent("forward_port_resolved", {
+          instanceId,
+          requestId: review.expired.requestId,
+          source: "local_editor",
+          port: review.expired.port,
+          pid: review.expired.pid,
+          command: review.expired.command,
+          ...review.expired.cwd === undefined ? {} : { cwd: review.expired.cwd },
+          decision: "expired",
+          reason: review.reason,
+          capabilities: capabilitiesPayload()
+        });
+        if (localEditorForwardState.pendingRequests.size > 0) {
+          localEditorForwardState.queuedCandidates.set(review.candidate.port, review.candidate);
+          return;
+        }
+        break;
       case "prompt":
         if (localEditorForwardState.pendingRequests.size > 0) {
           localEditorForwardState.queuedCandidates.set(candidate.port, candidate);
@@ -10917,8 +11240,7 @@ async function openLocalCodexRunner(options, log, cleanup, close) {
   const codex = await connectCodexAppServer(codexUrl);
   cleanup.actions.push(() => codex.close());
   const seq = { value: 0 };
-  const codexThreads = options.channelSession === undefined ? await discoverCodexThreads(codex, options.cwd) : [];
-  const discoveredCodexThreads = { value: codexThreads };
+  const discoveredCodexThreads = { value: [] };
   const runtimeDefaults = runnerRuntimeDefaults(options);
   const instancePayload = {
     instanceId,
@@ -10927,11 +11249,12 @@ async function openLocalCodexRunner(options, log, cleanup, close) {
     tuiLaunched: options.launchTui,
     cwd: options.cwd,
     hostname: runnerHost,
-    codexThreads,
+    codexThreads: discoveredCodexThreads.value,
     workspace: runnerWorkspaceSlug(options) ?? null,
     channel: options.channelSession?.channelSlug ?? null,
     model: runtimeDefaults.model ?? null,
     reasoningEffort: runtimeDefaults.reasoningEffort ?? null,
+    allowPortForwardingByDefault: runtimeDefaults.allowPortForwardingByDefault ?? null,
     fast: options.fast ?? false
   };
   await kandan.push(topic, "instance_started", instancePayload);
@@ -11039,7 +11362,8 @@ async function openLocalCodexRunner(options, log, cleanup, close) {
           model: runtimeSettings.model,
           reasoningEffort: runtimeSettings.reasoningEffort,
           sandbox: runtimeSettings.sandbox,
-          approvalPolicy: runtimeSettings.approvalPolicy
+          approvalPolicy: runtimeSettings.approvalPolicy,
+          allowPortForwardingByDefault: runtimeSettings.allowPortForwardingByDefault
         }
       },
       log
@@ -11060,6 +11384,7 @@ async function openLocalCodexRunner(options, log, cleanup, close) {
     codexThreads: discoveredCodexThreads.value,
     model: runtimeDefaults.model ?? null,
     reasoningEffort: runtimeDefaults.reasoningEffort ?? null,
+    allowPortForwardingByDefault: runtimeDefaults.allowPortForwardingByDefault ?? null,
     fast: options.fast ?? false,
     capabilities: capabilitiesPayload()
   });
@@ -11068,19 +11393,11 @@ async function openLocalCodexRunner(options, log, cleanup, close) {
       message: error instanceof Error ? error.message : String(error)
     });
   });
-  const refreshDiscoveredCodexThreads = () => discoverCodexThreads(codex, options.cwd).then((threads) => {
-    discoveredCodexThreads.value = threads;
-    return kandan.push(topic, "heartbeat", heartbeatPayload());
-  }).catch((error) => {
-    log("kandan.codex_threads_refresh_failed", {
-      message: error instanceof Error ? error.message : String(error)
-    });
-  });
   const heartbeatInterval = setInterval(() => {
-    channelSession === undefined ? refreshDiscoveredCodexThreads() : pushHeartbeat();
+    pushHeartbeat();
   }, 15000);
   cleanup.actions.push(() => clearInterval(heartbeatInterval));
-  kandan.onReconnect(() => (channelSession === undefined ? refreshDiscoveredCodexThreads() : pushHeartbeat()).then(() => {
+  kandan.onReconnect(() => pushHeartbeat().then(() => {
     return;
   }));
   pushHeartbeat();
@@ -11350,25 +11667,6 @@ async function closeCleanupStack(cleanup) {
   })();
   return cleanup.closePromise;
 }
-async function discoverCodexThreads(codex, cwd) {
-  const response = await codex.request("thread/list", { cwd });
-  if ("error" in response) {
-    return [];
-  }
-  const result = objectValue(response.result);
-  const data = arrayValue(result?.data);
-  return data === undefined ? [] : data.filter(isJsonObject).map((thread) => ({
-    id: stringValue(thread.id) ?? "",
-    title: stringValue(thread.title) ?? stringValue(thread.name) ?? stringValue(thread.preview) ?? "",
-    description: stringValue(thread.description) ?? stringValue(thread.summary) ?? stringValue(thread.preview) ?? "",
-    preview: stringValue(thread.preview) ?? "",
-    cwd: stringValue(thread.cwd) ?? "",
-    source: stringValue(thread.source) ?? "",
-    createdAt: integerValue(thread.createdAt) ?? stringValue(thread.createdAt) ?? null,
-    updatedAt: integerValue(thread.updatedAt) ?? null,
-    status: objectValue(thread.status) ?? null
-  })).filter((thread) => thread.id !== "");
-}
 function extractStartedThreadId(response) {
   if ("error" in response) {
     throw new Error(`thread/start failed: ${response.error.message}`);
@@ -11801,6 +12099,10 @@ You MUST NOT ask the Bootstrapper Codex to do implementation work.
 You MUST NOT inspect unrelated repositories or folders.
 You MUST report the exact blocker if a command, preview, editor, or tunnel step
 fails.
+When several Linzumi Codex sessions work in the same repository, create or use
+a separate checkout or git worktree for this task before making changes, unless
+the human explicitly asks you to share the current checkout. Do not overwrite or
+revert another session's work.
 </rules>
 
 <examples>
@@ -11892,7 +12194,8 @@ function startInstanceRuntimeSettings(options, control) {
     reasoningEffort: control.reasoningEffort ?? defaults.reasoningEffort,
     approvalPolicy: codexApprovalPolicyForRequest(control.approvalPolicy ?? defaults.approvalPolicy, sandbox),
     sandbox,
-    fast: control.fast ?? options.fast
+    fast: control.fast ?? options.fast,
+    allowPortForwardingByDefault: control.allowPortForwardingByDefault ?? defaults.allowPortForwardingByDefault
   };
 }
 async function startOwnedCodexAppServer(options) {
@@ -11915,7 +12218,8 @@ function runnerRuntimeDefaults(options) {
     model: defaults?.model ?? session?.model,
     reasoningEffort: defaults?.reasoningEffort ?? session?.reasoningEffort,
     approvalPolicy: codexApprovalPolicySetting(defaults?.approvalPolicy ?? session?.approvalPolicy, sandbox),
-    sandbox
+    sandbox,
+    allowPortForwardingByDefault: defaults?.allowPortForwardingByDefault ?? session?.allowPortForwardingByDefault
   };
 }
 function isUpdateRunnerConfigControl(control) {
@@ -13396,7 +13700,7 @@ To kick the agent off:
 3. Paste into the thread. Codex will pick it up and start editing this folder.
 `;
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/key.js
+// node_modules/@inquirer/core/dist/esm/lib/key.js
 var isUpKey = (key, keybindings = []) => key.name === "up" || keybindings.includes("vim") && key.name === "k" || keybindings.includes("emacs") && key.ctrl && key.name === "p";
 var isDownKey = (key, keybindings = []) => key.name === "down" || keybindings.includes("vim") && key.name === "j" || keybindings.includes("emacs") && key.ctrl && key.name === "n";
 var isSpaceKey = (key) => key.name === "space";
@@ -13404,7 +13708,7 @@ var isBackspaceKey = (key) => key.name === "backspace";
 var isTabKey = (key) => key.name === "tab";
 var isNumberKey = (key) => "1234567890".includes(key.name);
 var isEnterKey = (key) => key.name === "enter" || key.name === "return";
-// ../../node_modules/@inquirer/core/dist/esm/lib/errors.js
+// node_modules/@inquirer/core/dist/esm/lib/errors.js
 class AbortPromptError extends Error {
   name = "AbortPromptError";
   message = "Prompt was aborted";
@@ -13430,10 +13734,10 @@ class HookError extends Error {
 class ValidationError extends Error {
   name = "ValidationError";
 }
-// ../../node_modules/@inquirer/core/dist/esm/lib/use-state.js
+// node_modules/@inquirer/core/dist/esm/lib/use-state.js
 import { AsyncResource as AsyncResource2 } from "node:async_hooks";
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/hook-engine.js
+// node_modules/@inquirer/core/dist/esm/lib/hook-engine.js
 import { AsyncLocalStorage, AsyncResource } from "node:async_hooks";
 var hookStorage = new AsyncLocalStorage;
 function createStore(rl) {
@@ -13538,7 +13842,7 @@ var effectScheduler = {
   }
 };
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/use-state.js
+// node_modules/@inquirer/core/dist/esm/lib/use-state.js
 function useState(defaultValue) {
   return withPointer((pointer) => {
     const setState = AsyncResource2.bind(function setState2(newValue) {
@@ -13556,7 +13860,7 @@ function useState(defaultValue) {
   });
 }
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/use-effect.js
+// node_modules/@inquirer/core/dist/esm/lib/use-effect.js
 function useEffect(cb, depArray) {
   withPointer((pointer) => {
     const oldDeps = pointer.get();
@@ -13568,10 +13872,10 @@ function useEffect(cb, depArray) {
   });
 }
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/theme.js
+// node_modules/@inquirer/core/dist/esm/lib/theme.js
 var import_yoctocolors_cjs = __toESM(require_yoctocolors_cjs(), 1);
 
-// ../../node_modules/@inquirer/figures/dist/esm/index.js
+// node_modules/@inquirer/figures/dist/esm/index.js
 import process2 from "node:process";
 function isUnicodeSupported() {
   if (process2.platform !== "win32") {
@@ -13860,7 +14164,7 @@ var figures = shouldUseMain ? mainSymbols : fallbackSymbols;
 var esm_default = figures;
 var replacements = Object.entries(specialMainSymbols);
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/theme.js
+// node_modules/@inquirer/core/dist/esm/lib/theme.js
 var defaultTheme = {
   prefix: {
     idle: import_yoctocolors_cjs.default.blue("?"),
@@ -13881,7 +14185,7 @@ var defaultTheme = {
   }
 };
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/make-theme.js
+// node_modules/@inquirer/core/dist/esm/lib/make-theme.js
 function isPlainObject(value) {
   if (typeof value !== "object" || value === null)
     return false;
@@ -13909,7 +14213,7 @@ function makeTheme(...themes) {
   return deepMerge(...themesToMerge);
 }
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/use-prefix.js
+// node_modules/@inquirer/core/dist/esm/lib/use-prefix.js
 function usePrefix({ status = "idle", theme }) {
   const [showLoader, setShowLoader] = useState(false);
   const [tick, setTick] = useState(0);
@@ -13939,7 +14243,7 @@ function usePrefix({ status = "idle", theme }) {
   const iconName = status === "loading" ? "idle" : status;
   return typeof prefix === "string" ? prefix : prefix[iconName] ?? prefix["idle"];
 }
-// ../../node_modules/@inquirer/core/dist/esm/lib/use-memo.js
+// node_modules/@inquirer/core/dist/esm/lib/use-memo.js
 function useMemo(fn, dependencies) {
   return withPointer((pointer) => {
     const prev = pointer.get();
@@ -13951,11 +14255,11 @@ function useMemo(fn, dependencies) {
     return prev.value;
   });
 }
-// ../../node_modules/@inquirer/core/dist/esm/lib/use-ref.js
+// node_modules/@inquirer/core/dist/esm/lib/use-ref.js
 function useRef(val) {
   return useState({ current: val })[0];
 }
-// ../../node_modules/@inquirer/core/dist/esm/lib/use-keypress.js
+// node_modules/@inquirer/core/dist/esm/lib/use-keypress.js
 function useKeypress(userHandler) {
   const signal = useRef(userHandler);
   signal.current = userHandler;
@@ -13973,7 +14277,7 @@ function useKeypress(userHandler) {
     };
   }, []);
 }
-// ../../node_modules/@inquirer/core/dist/esm/lib/utils.js
+// node_modules/@inquirer/core/dist/esm/lib/utils.js
 var import_cli_width = __toESM(require_cli_width(), 1);
 var import_wrap_ansi = __toESM(require_wrap_ansi(), 1);
 function breakLines(content, width) {
@@ -13986,7 +14290,7 @@ function readlineWidth() {
   return import_cli_width.default({ defaultWidth: 80, output: readline().output });
 }
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/pagination/use-pagination.js
+// node_modules/@inquirer/core/dist/esm/lib/pagination/use-pagination.js
 function usePointerPosition({ active, renderedItems, pageSize, loop }) {
   const state = useRef({
     lastPointer: active,
@@ -14052,12 +14356,12 @@ function usePagination({ items, active, renderItem, pageSize, loop = true }) {
   return pageBuffer.filter((line) => typeof line === "string").join(`
 `);
 }
-// ../../node_modules/@inquirer/core/dist/esm/lib/create-prompt.js
+// node_modules/@inquirer/core/dist/esm/lib/create-prompt.js
 var import_mute_stream = __toESM(require_lib(), 1);
 import * as readline2 from "node:readline";
 import { AsyncResource as AsyncResource3 } from "node:async_hooks";
 
-// ../../node_modules/@inquirer/core/node_modules/signal-exit/dist/mjs/signals.js
+// node_modules/signal-exit/dist/mjs/signals.js
 var signals = [];
 signals.push("SIGHUP", "SIGINT", "SIGTERM");
 if (process.platform !== "win32") {
@@ -14067,7 +14371,7 @@ if (process.platform === "linux") {
   signals.push("SIGIO", "SIGPOLL", "SIGPWR", "SIGSTKFLT");
 }
 
-// ../../node_modules/@inquirer/core/node_modules/signal-exit/dist/mjs/index.js
+// node_modules/signal-exit/dist/mjs/index.js
 var processOk = (process3) => !!process3 && typeof process3 === "object" && typeof process3.removeListener === "function" && typeof process3.emit === "function" && typeof process3.reallyExit === "function" && typeof process3.listeners === "function" && typeof process3.kill === "function" && typeof process3.pid === "number" && typeof process3.on === "function";
 var kExitEmitter = Symbol.for("signal-exit emitter");
 var global = globalThis;
@@ -14265,10 +14569,10 @@ var {
   unload
 } = signalExitWrap(processOk(process3) ? new SignalExit(process3) : new SignalExitFallback);
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/screen-manager.js
+// node_modules/@inquirer/core/dist/esm/lib/screen-manager.js
 import { stripVTControlCharacters } from "node:util";
 
-// ../../node_modules/@inquirer/ansi/dist/esm/index.js
+// node_modules/@inquirer/ansi/dist/esm/index.js
 var ESC = "\x1B[";
 var cursorLeft = ESC + "G";
 var cursorHide = ESC + "?25l";
@@ -14284,7 +14588,7 @@ var cursorTo = (x, y) => {
 var eraseLine = ESC + "2K";
 var eraseLines = (lines) => lines > 0 ? (eraseLine + cursorUp(1)).repeat(lines - 1) + eraseLine + cursorLeft : "";
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/screen-manager.js
+// node_modules/@inquirer/core/dist/esm/lib/screen-manager.js
 var height = (content) => content.split(`
 `).length;
 var lastLine = (content) => content.split(`
@@ -14349,7 +14653,7 @@ class ScreenManager {
   }
 }
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/promise-polyfill.js
+// node_modules/@inquirer/core/dist/esm/lib/promise-polyfill.js
 class PromisePolyfill extends Promise {
   static withResolver() {
     let resolve8;
@@ -14362,7 +14666,7 @@ class PromisePolyfill extends Promise {
   }
 }
 
-// ../../node_modules/@inquirer/core/dist/esm/lib/create-prompt.js
+// node_modules/@inquirer/core/dist/esm/lib/create-prompt.js
 function getCallSites() {
   const _prepareStackTrace = Error.prepareStackTrace;
   let result = [];
@@ -14448,7 +14752,7 @@ function createPrompt(view) {
   };
   return prompt;
 }
-// ../../node_modules/@inquirer/core/dist/esm/lib/Separator.js
+// node_modules/@inquirer/core/dist/esm/lib/Separator.js
 var import_yoctocolors_cjs2 = __toESM(require_yoctocolors_cjs(), 1);
 class Separator {
   separator = import_yoctocolors_cjs2.default.dim(Array.from({ length: 15 }).join(esm_default.line));
@@ -14462,7 +14766,7 @@ class Separator {
     return Boolean(choice && typeof choice === "object" && "type" in choice && choice.type === "separator");
   }
 }
-// ../../node_modules/@inquirer/checkbox/dist/esm/index.js
+// node_modules/@inquirer/checkbox/dist/esm/index.js
 var import_yoctocolors_cjs3 = __toESM(require_yoctocolors_cjs(), 1);
 var checkboxTheme = {
   icon: {
@@ -14649,7 +14953,7 @@ var esm_default2 = createPrompt((config, done) => {
 `).trimEnd();
   return `${lines}${cursorHide}`;
 });
-// ../../node_modules/@inquirer/input/dist/esm/index.js
+// node_modules/@inquirer/input/dist/esm/index.js
 var inputTheme = {
   validationFailureMode: "keep"
 };
@@ -14733,7 +15037,7 @@ var esm_default3 = createPrompt((config, done) => {
     error
   ];
 });
-// ../../node_modules/@inquirer/select/dist/esm/index.js
+// node_modules/@inquirer/select/dist/esm/index.js
 var import_yoctocolors_cjs4 = __toESM(require_yoctocolors_cjs(), 1);
 var selectTheme = {
   icon: { cursor: esm_default.pointer },
@@ -14900,28 +15204,19 @@ var esm_default4 = createPrompt((config, done) => {
 // src/signupFlow.ts
 import { spawn as spawn7 } from "node:child_process";
 import {
-  closeSync as closeSync2,
   existsSync as existsSync10,
   constants as fsConstants,
-  mkdirSync as mkdirSync10,
   mkdtempSync as mkdtempSync3,
-  openSync as openSync3,
   readFileSync as readFileSync10,
   readdirSync,
   rmSync as rmSync3,
   statSync,
-  watch,
   writeFileSync as writeFileSync8
 } from "node:fs";
 import { access } from "node:fs/promises";
 import { homedir as homedir8, tmpdir as tmpdir2 } from "node:os";
-import { delimiter as delimiter2, dirname as dirname9, join as join12, resolve as resolve8 } from "node:path";
-import {
-  argv as processArgv,
-  execPath as processExecPath,
-  stdin as defaultStdin,
-  stdout as defaultStdout
-} from "node:process";
+import { delimiter as delimiter2, join as join12, resolve as resolve8 } from "node:path";
+import { stdin as defaultStdin, stdout as defaultStdout } from "node:process";
 import { emitKeypressEvents } from "node:readline";
 
 // src/signupServerClient.ts
@@ -15207,11 +15502,6 @@ function booleanValue(record, key) {
 }
 
 // src/signupFlow.ts
-var commanderConnectedMarkers = [
-  "Connected to Linzumi",
-  "Runner connected:",
-  '"event":"runner.instance_started"'
-];
 var blue = (value) => `\x1B[38;5;75m${value}\x1B[0m`;
 var green = (value) => `\x1B[38;5;114m${value}\x1B[0m`;
 var red = (value) => `\x1B[38;5;203m${value}\x1B[0m`;
@@ -15519,6 +15809,8 @@ async function runSignupFlow(deps = {}) {
         rootSeq: thread.rootSeq,
         threadSeq: thread.threadSeq
       }));
+      const starterProjectPath = missionControl.config.starterProjectPath ?? starterProject.path;
+      const verifiedCodexBin = verifiedCodexBinFromPreflightChecks(state.preflightChecks);
       const storedSignupAuth = writeSignupCompletion({
         email: verifiedAuth.user.primaryEmail ?? state.email ?? verifiedAuth.user.username,
         serviceUrl,
@@ -15530,20 +15822,24 @@ async function runSignupFlow(deps = {}) {
         launchUrl: missionControl.launchUrl,
         allowedCwds: missionControl.config.allowedCwds
       });
-      const commanderLaunch = await launchSignupCommanderForCompletedSignup(commanderLauncher, {
+      const commanderLaunch = verifiedCodexBin === undefined ? failedSignupCommanderLaunchForMissingCodex({
+        serviceUrl,
+        workspaceSlug: missionControl.workspace.slug,
+        projectPath: starterProjectPath
+      }) : await launchSignupCommanderForCompletedSignup(commanderLauncher, {
         serviceUrl,
         localRunnerAccessToken: missionControl.localRunnerToken.accessToken,
         localRunnerExpiresInSeconds: missionControl.localRunnerToken.expiresInSeconds,
         workspaceSlug: missionControl.workspace.slug,
-        officeChannelSlug: missionControl.channels.office.slug,
-        projectPath: missionControl.config.starterProjectPath ?? starterProject.path,
-        selectedProjectPaths: missionControl.config.allowedCwds
+        projectPath: starterProjectPath,
+        selectedProjectPaths: missionControl.config.allowedCwds,
+        codexBin: verifiedCodexBin
       });
       const starterTaskLaunches = await startSignupTasksForCommander(signupServerClient, {
         accessToken: verifiedAuth.accessToken,
         missionControl,
         commanderLaunch,
-        starterProjectPath: missionControl.config.starterProjectPath ?? starterProject.path,
+        starterProjectPath,
         threads: starterTaskThreads
       });
       state = updateSignupState(state, {
@@ -16022,7 +16318,7 @@ function writeLaunchSummary(output, state) {
         writeBoundedLine(output, `${green("✓")} Local Commander connected this computer to Mission Control (${state.commanderLaunch.runnerId})`);
         break;
       case "failed":
-        writeStatusMessage(output, red("x"), `Local Commander could not start automatically: ${state.commanderLaunch.error}`);
+        writeStatusMessage(output, red("x"), `Local Commander could not connect: ${state.commanderLaunch.error}`);
         break;
     }
   }
@@ -16064,48 +16360,17 @@ async function defaultSignupCommanderLauncher(args) {
     accessToken: args.localRunnerAccessToken,
     expiresInSeconds: args.localRunnerExpiresInSeconds
   });
-  const scriptPath = processArgv[1];
   const runnerId = signupCommanderRunnerId(args.workspaceSlug);
   const restartCommand = signupConnectRestartCommand(args);
-  if (scriptPath === undefined || scriptPath.trim() === "") {
-    return {
-      status: "failed",
-      runnerId,
-      restartCommand,
-      error: "current CLI entrypoint could not be resolved"
-    };
-  }
-  const logFile = signupCommanderLaunchLogFile(runnerId);
-  let stdoutFd;
-  let stderrFd;
   try {
-    mkdirSync10(dirname9(logFile), { recursive: true });
-    stdoutFd = openSync3(logFile, "a");
-    stderrFd = openSync3(logFile, "a");
-    const child = spawn7(processExecPath, signupCommanderConnectSpawnArgs(args, runnerId, logFile, scriptPath), {
-      detached: true,
-      stdio: ["ignore", stdoutFd, stderrFd]
-    });
-    closeSync2(stdoutFd);
-    closeSync2(stderrFd);
-    stdoutFd = undefined;
-    stderrFd = undefined;
-    child.unref();
-    const connected = await waitForSignupCommanderConnection(logFile, 30000);
-    if (!connected) {
-      return {
-        status: "failed",
-        runnerId,
-        restartCommand,
-        error: `Local Commander did not connect within 30 seconds. Check ${logFile}`
-      };
-    }
+    const handle = await runLocalCodexRunner(await signupCommanderRunnerOptions(args, runnerId));
     return {
       status: "started",
       runnerId,
       restartCommand,
-      logFile,
-      ...child.pid === undefined ? {} : { pid: child.pid }
+      pid: process.pid,
+      instanceId: handle.instanceId,
+      codexUrl: handle.codexUrl
     };
   } catch (error) {
     return {
@@ -16114,82 +16379,58 @@ async function defaultSignupCommanderLauncher(args) {
       restartCommand,
       error: error instanceof Error ? error.message : String(error)
     };
-  } finally {
-    closeFileDescriptor(stdoutFd);
-    closeFileDescriptor(stderrFd);
-  }
-}
-async function waitForSignupCommanderConnection(logFile, timeoutMs) {
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() <= deadline) {
-    const log = readTextFile(logFile);
-    if (log !== undefined && signupCommanderLogIsConnected(log)) {
-      return true;
-    }
-    await waitForSignupCommanderLogChange(logFile, deadline, () => {
-      const updatedLog = readTextFile(logFile);
-      return updatedLog !== undefined && signupCommanderLogIsConnected(updatedLog);
-    });
   }
-  return false;
-}
-function signupCommanderLogIsConnected(log) {
-  return commanderConnectedMarkers.some((marker) => log.includes(marker));
-}
-function readTextFile(path) {
-  try {
-    return readFileSync10(path, "utf8");
-  } catch (_error) {
-    return;
-  }
-}
-function closeFileDescriptor(fd) {
-  if (fd === undefined) {
-    return;
-  }
-  try {
-    closeSync2(fd);
-  } catch (_error) {}
-}
-async function waitForSignupCommanderLogChange(logFile, deadline, ready2) {
-  const remaining = Math.max(0, deadline - Date.now());
-  await new Promise((resolve9) => {
-    let resolved = false;
-    let watcher;
-    const finish = () => {
-      if (resolved) {
-        return;
-      }
-      resolved = true;
-      watcher?.close();
-      clearTimeout(timer);
-      resolve9();
-    };
-    const timer = setTimeout(finish, remaining);
-    try {
-      watcher = watch(logFile, finish);
-      watcher.on("error", finish);
-      if (ready2()) {
-        finish();
-      }
-    } catch (_error) {
-      if (ready2()) {
-        finish();
-        return;
-      }
-      try {
-        watcher = watch(dirname9(logFile), finish);
-        watcher.on("error", finish);
-      } catch (_nestedError) {}
-    }
-  });
 }
 function signupCommanderRunnerId(workspaceSlug) {
   return `signup-${workspaceSlug}-commander`;
 }
-function signupCommanderLaunchLogFile(runnerId) {
-  const launchId = `${Date.now()}-${process.pid}`;
-  return join12(homedir8(), ".linzumi", "commanders", `${runnerId}-${launchId}.log`);
+function failedSignupCommanderLaunchForMissingCodex(args) {
+  return {
+    status: "failed",
+    runnerId: signupCommanderRunnerId(args.workspaceSlug),
+    restartCommand: signupConnectRestartCommand(args),
+    error: "Codex preflight did not resolve a verified Codex command. Install Codex or fix the Codex CLI on PATH, then rerun signup."
+  };
+}
+async function signupCommanderRunnerOptions(args, runnerId) {
+  const trust = kandanTlsTrustFromEnv();
+  const editorRuntime = await resolveEditorRuntime({
+    kandanUrl: args.serviceUrl,
+    token: args.localRunnerAccessToken,
+    fetchImpl: trustedFetch(trust)
+  });
+  const dependencyStatus = await buildRunnerDependencyStatus({
+    cwd: args.projectPath,
+    codexBin: args.codexBin,
+    codeServerBin: editorRuntime.codeServerBin,
+    editorRuntime: editorRuntime.status
+  });
+  assertStartDependencies(dependencyStatus);
+  return {
+    kandanUrl: args.serviceUrl,
+    token: args.localRunnerAccessToken,
+    runnerId,
+    machineId: ensureLocalMachineIdForLinzumiUrl(args.serviceUrl),
+    workspaceSlug: args.workspaceSlug,
+    cwd: args.projectPath,
+    codexBin: args.codexBin,
+    codexUrl: undefined,
+    launchTui: false,
+    fast: false,
+    allowedCwds: Array.from(new Set([args.projectPath, ...args.selectedProjectPaths])),
+    allowedForwardPorts: [],
+    codeServerBin: editorRuntime.codeServerBin,
+    editorRuntime: editorRuntime.runtime,
+    socketFactory: trustedWebSocketFactory(trust),
+    dependencyStatus,
+    runtimeDefaults: {
+      model: undefined,
+      reasoningEffort: undefined,
+      approvalPolicy: undefined,
+      sandbox: undefined
+    },
+    channelSession: undefined
+  };
 }
 function signupConnectRestartCommand(args) {
   return [
@@ -16199,23 +16440,12 @@ function signupConnectRestartCommand(args) {
     "connect",
     "--workspace",
     args.workspaceSlug,
-    ...args.serviceUrl === defaultLinzumiHttpUrl ? [] : ["--linzumi-url", args.serviceUrl]
+    ...args.codexBin === undefined ? [] : ["--codex-bin", args.codexBin],
+    "--cwd",
+    args.projectPath,
+    ...args.serviceUrl === defaultLinzumiHttpUrl ? [] : ["--api-url", args.serviceUrl]
   ].map(shellArg).join(" ");
 }
-function signupCommanderConnectSpawnArgs(args, runnerId, logFile, scriptPath) {
-  return [
-    scriptPath,
-    "connect",
-    "--linzumi-url",
-    args.serviceUrl,
-    "--workspace",
-    args.workspaceSlug,
-    "--runner-id",
-    runnerId,
-    "--log-file",
-    logFile
-  ];
-}
 function shellArg(value) {
   if (/^[A-Za-z0-9_./:=@%+-]+$/.test(value)) {
     return value;
@@ -17036,6 +17266,10 @@ function defaultPreflightRuntime() {
     checkBrowserHandoff: async () => true
   };
 }
+function verifiedCodexBinFromPreflightChecks(checks) {
+  const codex = checks.find((check2) => check2.id === "codex");
+  return codex?.command;
+}
 function defaultProjectDiscoveryRuntime() {
   const cwd = process.cwd();
   return {
@@ -17162,13 +17396,9 @@ async function resolveSignupCodexCommand(env = process.env, homeDir = homedir8()
     env.LINZUMI_CODEX_BIN
   ]);
   if (override !== undefined) {
-    return resolveHomePath(override, homeDir);
+    return resolveCodexCommandOverride(override, homeDir);
   }
-  const homeCandidates = [
-    join12(homeDir, ".volta", "bin", "codex"),
-    join12(homeDir, ".local", "bin", "codex"),
-    join12(homeDir, "bin", "codex")
-  ];
+  const homeCandidates = homeManagedCodexCandidates(homeDir);
   const homeCodex = await firstExecutablePath(homeCandidates, executableExists);
   if (homeCodex !== undefined) {
     return homeCodex;
@@ -17200,6 +17430,20 @@ function resolveHomePath(path, homeDir) {
   }
   return resolve8(path);
 }
+function resolveCodexCommandOverride(command, homeDir) {
+  const trimmed = command.trim();
+  return commandLooksPathLike(trimmed) ? resolveHomePath(trimmed, homeDir) : trimmed;
+}
+function commandLooksPathLike(command) {
+  return command === "~" || command.startsWith("~/") || command.startsWith("/") || command.startsWith("./") || command.startsWith("../") || command.includes("/") || command.includes("\\");
+}
+function homeManagedCodexCandidates(homeDir) {
+  return [
+    join12(homeDir, ".volta", "bin", "codex"),
+    join12(homeDir, ".local", "bin", "codex"),
+    join12(homeDir, "bin", "codex")
+  ];
+}
 async function firstExecutablePath(paths, executableExists) {
   for (const path of paths) {
     if (await executableExists(path)) {
@@ -17363,19 +17607,51 @@ async function checkGit(runtime) {
   };
 }
 async function checkCodex(runtime) {
-  const [pathCodex, voltaCodex] = await Promise.all([
-    runtime.probeTool("codex", runtime.cwd),
-    runtime.probeTool(join12(runtime.homeDir, ".volta", "bin", "codex"), runtime.cwd)
-  ]);
-  const codex = pathCodex.available ? pathCodex : voltaCodex;
-  const location = pathCodex.available ? "on PATH" : "via Volta";
+  const configuredCodex = process.env.LINZUMI_SIGNUP_CODEX_BIN !== undefined && process.env.LINZUMI_SIGNUP_CODEX_BIN.trim() !== "" ? {
+    value: process.env.LINZUMI_SIGNUP_CODEX_BIN,
+    source: "LINZUMI_SIGNUP_CODEX_BIN"
+  } : process.env.LINZUMI_CODEX_BIN !== undefined && process.env.LINZUMI_CODEX_BIN.trim() !== "" ? {
+    value: process.env.LINZUMI_CODEX_BIN,
+    source: "LINZUMI_CODEX_BIN"
+  } : undefined;
+  const configuredCommand = configuredCodex === undefined ? undefined : resolveCodexCommandOverride(configuredCodex.value, runtime.homeDir);
+  if (configuredCommand !== undefined) {
+    const codex2 = await runtime.probeTool(configuredCommand, runtime.cwd);
+    const location2 = `from ${configuredCodex?.source ?? "configured env"}`;
+    return {
+      id: "codex",
+      title: "Codex CLI",
+      detail: codex2.available ? `${codex2.version ?? "codex found"} ${location2}` : `${configuredCommand} ${location2} did not pass --version`,
+      status: codex2.available ? "pass" : "warn",
+      command: codex2.available ? codex2.command : undefined
+    };
+  }
+  const candidates = ["codex", ...homeManagedCodexCandidates(runtime.homeDir)];
+  const [firstCodex, ...otherCodexes] = await Promise.all(candidates.map((candidate) => runtime.probeTool(candidate, runtime.cwd)));
+  const codex = [firstCodex, ...otherCodexes].find((status) => status.available) ?? firstCodex;
+  const location = codexPreflightLocation(codex.command, runtime.homeDir);
   return {
     id: "codex",
     title: "Codex CLI",
     detail: codex.available ? `${codex.version ?? "codex found"} ${location}` : "codex not found",
-    status: codex.available ? "pass" : "warn"
+    status: codex.available ? "pass" : "warn",
+    command: codex.available ? codex.command : undefined
   };
 }
+function codexPreflightLocation(command, homeDir) {
+  switch (command) {
+    case "codex":
+      return "on PATH";
+    case join12(homeDir, ".volta", "bin", "codex"):
+      return "via Volta";
+    case join12(homeDir, ".local", "bin", "codex"):
+      return "via ~/.local/bin";
+    case join12(homeDir, "bin", "codex"):
+      return "via ~/bin";
+    default:
+      return "from configured path";
+  }
+}
 async function checkGitEmail(runtime) {
   const email = await runtime.readGitEmail(runtime.cwd);
   return {
@@ -17703,15 +17979,15 @@ function renderPreflightRow(check2, spinnerFrame, columns) {
 // src/commanderDaemon.ts
 import {
   existsSync as existsSync11,
-  closeSync as closeSync3,
+  closeSync as closeSync2,
   mkdirSync as mkdirSync11,
-  openSync as openSync4,
+  openSync as openSync3,
   readFileSync as readFileSync11,
-  watch as watch2,
+  watch,
   writeFileSync as writeFileSync9
 } from "node:fs";
 import { homedir as homedir9 } from "node:os";
-import { dirname as dirname10, join as join13, resolve as resolve9 } from "node:path";
+import { dirname as dirname9, join as join13, resolve as resolve9 } from "node:path";
 import { execFileSync, spawn as spawn8 } from "node:child_process";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var connectedMarkers = ["Connected to Linzumi", "Runner connected:"];
@@ -17744,9 +18020,9 @@ function startCommanderDaemon(options) {
     logFile
   ];
   mkdirSync11(statusDir, { recursive: true });
-  mkdirSync11(dirname10(logFile), { recursive: true });
-  const out = openSync4(logFile, "a");
-  const err = openSync4(logFile, "a");
+  mkdirSync11(dirname9(logFile), { recursive: true });
+  const out = openSync3(logFile, "a");
+  const err = openSync3(logFile, "a");
   writeCliAuditEvent("process.spawn", {
     command: nodeBin,
     args: command,
@@ -17765,8 +18041,8 @@ function startCommanderDaemon(options) {
     pid: child.pid,
     purpose: "commander_daemon.start"
   }, { sessionId: options.runnerId });
-  closeSync3(out);
-  closeSync3(err);
+  closeSync2(out);
+  closeSync2(err);
   child.unref();
   if (child.pid === undefined) {
     throw new Error("commander daemon did not report a pid");
@@ -17796,7 +18072,7 @@ function commanderDaemonStatus(runnerId, statusDir = commanderStatusDir(), proce
 }
 async function waitForCommanderDaemon(options) {
   const now = options.now ?? (() => Date.now());
-  const readTextFile2 = options.readTextFile ?? ((path) => existsSync11(path) ? readFileSync11(path, "utf8") : undefined);
+  const readTextFile = options.readTextFile ?? ((path) => existsSync11(path) ? readFileSync11(path, "utf8") : undefined);
   const statusImpl = options.statusImpl ?? commanderDaemonStatus;
   const deadline = now() + options.timeoutMs;
   while (now() <= deadline) {
@@ -17807,7 +18083,7 @@ async function waitForCommanderDaemon(options) {
       case "stopped":
         return { ok: false, reason: "stopped" };
       case "running": {
-        const log = readTextFile2(status.record.logFile);
+        const log = readTextFile(status.record.logFile);
         if (log === undefined) {
           return { ok: false, reason: "timeout" };
         }
@@ -17815,7 +18091,7 @@ async function waitForCommanderDaemon(options) {
           return { ok: true, record: status.record };
         }
         await waitForFileChangeOrTimeout(status.record.logFile, deadline, now, () => {
-          const updatedLog = readTextFile2(status.record.logFile);
+          const updatedLog = readTextFile(status.record.logFile);
           return updatedLog !== undefined && commanderLogIsConnected(updatedLog);
         });
       }
@@ -17941,7 +18217,7 @@ async function waitForFileChangeOrTimeout(path, deadline, now, ready2 = () => fa
     };
     const timer = setTimeout(finish, remaining);
     try {
-      watcher = watch2(path, finish);
+      watcher = watch(path, finish);
       watcher.on("error", finish);
       if (ready2()) {
         finish();
@@ -17959,8 +18235,8 @@ async function waitForFileChangeOrTimeout(path, deadline, now, ready2 = () => fa
 // src/index.ts
 var flagDefinitions = new Map([
   ["version", { kind: "boolean" }],
+  ["api-url", { kind: "value" }],
   ["linzumi-url", { kind: "value" }],
-  ["kandan-url", { kind: "value" }],
   ["token", { kind: "value" }],
   ["runner-id", { kind: "value" }],
   ["cwd", { kind: "value" }],
@@ -17970,12 +18246,12 @@ var flagDefinitions = new Map([
   ["workspace", { kind: "value" }],
   ["channel", { kind: "value" }],
   ["linzumi-thread-id", { kind: "value" }],
-  ["kandan-thread-id", { kind: "value" }],
   ["listen-user", { kind: "value" }],
   ["model", { kind: "value" }],
   ["reasoning-effort", { kind: "value" }],
   ["sandbox", { kind: "value" }],
   ["approval-policy", { kind: "value" }],
+  ["allow-port-forwarding-by-default", { kind: "boolean" }],
   ["stream-flush-ms", { kind: "value" }],
   ["allowed-cwd", { kind: "value" }],
   ["forward-port", { kind: "value" }],
@@ -17989,10 +18265,6 @@ var flagDefinitions = new Map([
   ["oauth-callback-host", { kind: "value" }],
   ["help", { kind: "boolean" }]
 ]);
-var flagAliases = new Map([
-  ["kandan-url", "linzumi-url"],
-  ["kandan-thread-id", "linzumi-thread-id"]
-]);
 var helloFlagDefinitions = new Map([
   ["dir", { kind: "value" }],
   ["parent-dir", { kind: "value" }],
@@ -18248,8 +18520,7 @@ function parsePathsCommandArgs(args) {
       case "--help":
         help = true;
         break;
-      case "--linzumi-url":
-      case "--kandan-url": {
+      case "--api-url": {
         const value = args[index + 1];
         if (value === undefined || value.startsWith("--")) {
           throw new Error(`missing value for ${arg}`);
@@ -18360,7 +18631,7 @@ async function runAuthCommand(args) {
     process.stdout.write(helpText());
     return;
   }
-  const kandanUrl = required(values, "linzumi-url");
+  const kandanUrl = requiredKandanUrl(values);
   const target = parseOptionalChannelTarget(values);
   const token = await acquireLocalRunnerTokenDetails({
     kandanUrl,
@@ -18391,7 +18662,7 @@ async function parseStartRunnerArgs(args, deps = {
     process.exit(0);
   }
   rejectStartTargetingFlags(values);
-  const kandanUrl = stringValue4(values, "linzumi-url") ?? defaultLinzumiWebSocketUrl;
+  const kandanUrl = kandanUrlValue(values) ?? defaultLinzumiWebSocketUrl;
   const requestedCwd = resolveUserPath(cwdArg ?? process.cwd());
   const cwd = assertConfiguredAllowedCwds([requestedCwd])[0] ?? requestedCwd;
   const explicitAllowedCwds = values.has("allowed-cwd") ? assertConfiguredAllowedCwds(parseAllowedCwdList(stringValue4(values, "allowed-cwd"))) : [];
@@ -18475,6 +18746,7 @@ async function parseStartRunnerArgs(args, deps = {
       reasoningEffort: stringValue4(values, "reasoning-effort"),
       sandbox: stringValue4(values, "sandbox"),
       approvalPolicy: stringValue4(values, "approval-policy"),
+      allowPortForwardingByDefault: booleanFlagValue(values, "allow-port-forwarding-by-default"),
       streamFlushMs: positiveIntegerValue2(values, "stream-flush-ms")
     }
   };
@@ -18507,9 +18779,10 @@ async function parseAgentRunnerArgs(args, deps = {
     reasoningEffort: stringValue4(values, "reasoning-effort"),
     sandbox: stringValue4(values, "sandbox"),
     approvalPolicy: stringValue4(values, "approval-policy"),
+    allowPortForwardingByDefault: booleanFlagValue(values, "allow-port-forwarding-by-default"),
     streamFlushMs: positiveIntegerValue2(values, "stream-flush-ms")
   };
-  const kandanUrl = stringValue4(values, "linzumi-url") ?? agentApiUrlToKandanUrl(tokenFile.apiUrl);
+  const kandanUrl = kandanUrlValue(values) ?? agentApiUrlToKandanUrl(tokenFile.apiUrl);
   const requestedCwdValue = cwdArg ?? stringValue4(values, "cwd");
   const requestedCwd = resolveUserPath(requestedCwdValue ?? process.cwd());
   const configuredAllowedCwds2 = requestedCwdValue === undefined && !values.has("allowed-cwd") ? readConfiguredAllowedCwdDetailsForLinzumiUrl(kandanUrl) : { allowedCwds: [], missingAllowedCwds: [] };
@@ -18641,7 +18914,7 @@ async function parseRunnerArgs(args, deps = {
   }
   rejectConnectChannelFlags(values);
   const workspaceSlug = stringValue4(values, "workspace");
-  const kandanUrl = stringValue4(values, "linzumi-url") ?? defaultLinzumiWebSocketUrl;
+  const kandanUrl = kandanUrlValue(values) ?? defaultLinzumiWebSocketUrl;
   const cwd = stringValue4(values, "cwd") ?? process.cwd();
   const cwdAllowedCwds = assertConfiguredAllowedCwds([cwd]);
   const localConfiguredAllowedCwds = values.has("allowed-cwd") ? { allowedCwds: [], missingAllowedCwds: [] } : readConfiguredAllowedCwdDetailsForLinzumiUrl(kandanUrl);
@@ -18699,9 +18972,28 @@ function runnerRuntimeDefaultsFromValues(values) {
     model: stringValue4(values, "model"),
     reasoningEffort: stringValue4(values, "reasoning-effort"),
     approvalPolicy: stringValue4(values, "approval-policy"),
-    sandbox: stringValue4(values, "sandbox")
+    sandbox: stringValue4(values, "sandbox"),
+    allowPortForwardingByDefault: booleanFlagValue(values, "allow-port-forwarding-by-default")
   };
 }
+function kandanUrlValue(values) {
+  const apiUrl = stringValue4(values, "api-url");
+  const linzumiUrl = stringValue4(values, "linzumi-url");
+  if (apiUrl !== undefined && linzumiUrl !== undefined && apiUrl !== linzumiUrl) {
+    throw new Error("use only one of --api-url or --linzumi-url");
+  }
+  return apiUrl ?? linzumiUrl;
+}
+function requiredKandanUrl(values) {
+  const value = kandanUrlValue(values);
+  if (value === undefined) {
+    throw new Error("missing required flag: --api-url or --linzumi-url");
+  }
+  return value;
+}
+function booleanFlagValue(values, key) {
+  return values.get(key) === true ? true : undefined;
+}
 function strictFlagValues(args, definitions = flagDefinitions) {
   const values = new Map;
   for (let index = 0;index < args.length; index += 1) {
@@ -18714,16 +19006,15 @@ function strictFlagValues(args, definitions = flagDefinitions) {
     if (definition === undefined) {
       throw new Error(`invalid flag: --${rawKey}`);
     }
-    const key = flagAliases.get(rawKey) ?? rawKey;
     if (definition.kind === "boolean") {
-      values.set(key, true);
+      values.set(rawKey, true);
       continue;
     }
     const next = args[index + 1];
     if (next === undefined || next.startsWith("--")) {
       throw new Error(`missing value for --${rawKey}`);
     }
-    values.set(key, next);
+    values.set(rawKey, next);
     index += 1;
   }
   return values;
@@ -18905,11 +19196,11 @@ Usage:
   linzumi start <folder> [options]
   linzumi paths list|add|remove [path]
   linzumi connect --workspace <slug> [options]
-  linzumi auth --linzumi-url <ws-url> [--workspace <slug> --channel <slug>]
+  linzumi auth --api-url <url> [--workspace <slug> --channel <slug>]
 
 Connection:
-  --linzumi-url <ws-url>      Linzumi backend URL, default ${defaultLinzumiWebSocketUrl}
-                                (deprecated alias: --kandan-url)
+  --api-url <url>             Linzumi API URL, default ${defaultLinzumiWebSocketUrl}
+  --linzumi-url <url>         Alias for --api-url
   --token <jwt>               Optional override token. Otherwise ~/.linzumi/auth.json is validated or OAuth opens.
   --auth-file <path>          Auth cache path, default ~/.linzumi/auth.json
   --oauth-callback-host <ip>  Callback host reachable by your browser
@@ -18926,6 +19217,8 @@ Codex:
   --reasoning-effort <value>  Reasoning effort requested for Codex and shown in Linzumi
   --sandbox <value>           Sandbox metadata shown in Linzumi
   --approval-policy <value>   Approval-policy metadata shown in Linzumi
+  --allow-port-forwarding-by-default
+                              Auto-approve detected port-forward candidates for started sessions
   --stream-flush-ms <ms>      Batch live Codex deltas before Linzumi persistence, default 150
   --fast                      Mark this runner as low-latency/fast in the availability message
   --log-file <path>           JSONL event log path, default <cwd>/.linzumi-runner.log
@@ -19022,12 +19315,12 @@ function pathsHelpText() {
   return `Linzumi trusted paths
 
 Usage:
-  linzumi paths [--linzumi-url <ws-url>] list
-  linzumi paths [--linzumi-url <ws-url>] add <path>
-  linzumi paths [--linzumi-url <ws-url>] remove <path>
+  linzumi paths [--api-url <url>] list
+  linzumi paths [--api-url <url>] add <path>
+  linzumi paths [--api-url <url>] remove <path>
 
 Trusted paths are stored in ~/.linzumi/config.json. Production/default paths
-use the root config fields; explicit --linzumi-url paths use a URL-scoped config
+use the root config fields; explicit --api-url paths use a URL-scoped config
 section so local, staging, and production runners do not share trust state.
 `;
 }
@@ -19044,8 +19337,7 @@ What it does:
   previews, and the browser VS Code editor.
 
 Options:
-  --linzumi-url <ws-url>      Linzumi backend URL, default ${defaultLinzumiWebSocketUrl}
-                                (deprecated alias: --kandan-url)
+  --api-url <url>             Linzumi API URL, default ${defaultLinzumiWebSocketUrl}
   --token <jwt>               Optional scoped local-runner token override
   --auth-file <path>          Auth cache path, default ~/.linzumi/auth.json
   --oauth-callback-host <ip>  Callback host reachable by your browser
@@ -19085,8 +19377,7 @@ What it does:
 
 Options:
   --agent-token-file <path>   Agent token cache, default ~/.linzumi/agent-token.json
-  --linzumi-url <ws-url>      Linzumi websocket base URL. Defaults deterministically from the stored apiUrl.
-                                (deprecated alias: --kandan-url)
+  --api-url <url>             Linzumi API URL. Defaults deterministically from the stored apiUrl.
   --runner-id <id>            Stable Commander id
   --codex-bin <path>          Codex executable, default codex
   --code-server-bin <path>    Custom development code-server executable. By default Linzumi installs the approved editor runtime.
@@ -19102,7 +19393,7 @@ Options:
 Examples:
   linzumi paths add "$PWD"
   linzumi commander daemon --runner-id hello-world-commander
-  linzumi commander ~/code/my-app --linzumi-url ws://127.0.0.1:4162 --runner-id local-qa-commander
+  linzumi commander ~/code/my-app --api-url http://127.0.0.1:4162 --runner-id local-qa-commander
 `;
 }
 function connectGuideText() {