@overdeck/desktop 0.47.1 → 0.48.0

package/server/{auto-spawn-consent-BooqhC3L.js → auto-spawn-consent-lXqRJ1Dr.js}

@@ -1,10 +1,10 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { H as init_providers, W as qualifyPiModel, ci as getOverdeckHome$1, di as packageRoot, li as init_paths } from "./config-yaml-CxdwhAIA.js";
-import { i as releaseRecordLock, n as init_fs_lock, t as acquireRecordLock } from "./fs-lock-Bre3sGoz.js";
-import { $ as colorFgBgForTheme, G as tmuxExecAsync, K as validateSessionName, et as getUiThemeSync, tt as init_ui_theme, w as init_tmux } from "./tmux-CfDHob9M.js";
-import { s as getHarnessBehavior } from "./src-B948bGVR.js";
-import { t as init_behavior } from "./behavior-B7biGtFT.js";
-import { f as toCodexSandboxValue, l as init_codex } from "./codex-BYwi1uyW.js";
+import { $n as qualifyPiModel, Ir as MessageDeliveryFailed, Vr as init_errors, Zn as init_providers, _i as packageRoot, hi as init_paths, mi as getOverdeckHome$1 } from "./config-yaml-BSCqwmX0.js";
+import { n as init_fs_lock, o as releaseRecordLock, t as acquireRecordLock } from "./fs-lock-D_GeJtXl.js";
+import { $ as getUiThemeSync, C as init_tmux, G as validateSessionName, Q as colorFgBgForTheme, W as tmuxExecAsync, Y as paneHasBlockingChoiceMenu, a as capturePaneText, c as deliveryVerifyLine, et as init_ui_theme, q as init_pane_choice_menu } from "./tmux-CImZaX4q.js";
+import { s as getHarnessBehavior } from "./src-BYdwL_n-.js";
+import { t as init_behavior } from "./behavior-DIMQMRzs.js";
+import { f as toCodexSandboxValue, l as init_codex } from "./codex-CjkD1PJu.js";
 import { dirname, join } from "node:path";
 import { Data } from "effect";
 import { join as join$1 } from "path";
@@ -56,7 +56,7 @@ var init_model_validation = __esmMin((() => {
 *      prepending its own, so a Flywheel-spawned agent never runs behind the
 *      orchestrator's shim inherited through the environment.
 */
-function shellQuote$1(value) {
+function shellQuote$2(value) {
 	return `'${value.replace(/'/g, `'\\''`)}'`;
 }
 /**
@@ -79,10 +79,10 @@ function buildGitGuardLines(agentId, guardRoot) {
 		"PATH=\"$(IFS=':'; echo \"${_overdeck_kept_path[*]}\")\"",
 		"unset _overdeck_path_segments _overdeck_kept_path _overdeck_path_segment",
 		"_OVERDECK_REAL_GIT=\"$(command -v git)\"",
-		`_OVERDECK_GUARD_ROOT="$(cd ${shellQuote$1(guardRoot)} 2>/dev/null && pwd -P)"`,
-		`[ -n "$_OVERDECK_GUARD_ROOT" ] || _OVERDECK_GUARD_ROOT=${shellQuote$1(guardRoot)}`,
-		`mkdir -p ${shellQuote$1(guardDir)}`,
-		`cat > ${shellQuote$1(guardPath)} <<EOF`,
+		`_OVERDECK_GUARD_ROOT="$(cd ${shellQuote$2(guardRoot)} 2>/dev/null && pwd -P)"`,
+		`[ -n "$_OVERDECK_GUARD_ROOT" ] || _OVERDECK_GUARD_ROOT=${shellQuote$2(guardRoot)}`,
+		`mkdir -p ${shellQuote$2(guardDir)}`,
+		`cat > ${shellQuote$2(guardPath)} <<EOF`,
 		"#!/bin/sh",
 		"_OVERDECK_REAL_GIT=\"$_OVERDECK_REAL_GIT\"",
 		"_OVERDECK_GUARD_ROOT=\"$_OVERDECK_GUARD_ROOT\"",
@@ -210,7 +210,7 @@ function buildGitGuardLines(agentId, guardRoot) {
 		"esac",
 		"exec \"\\$_OVERDECK_REAL_GIT\" \"\\$@\"",
 		"EOF",
-		`chmod 0755 ${shellQuote$1(guardPath)}`,
+		`chmod 0755 ${shellQuote$2(guardPath)}`,
 		`export PATH="${pathForDoubleQuotes}:$PATH"`
 	];
 }
@@ -218,14 +218,83 @@ var init_launcher_git_guard = __esmMin((() => {
 	init_paths();
 }));
 //#endregion
-//#region ../../lib/launcher-generator.ts
+//#region ../../lib/shell-quote.ts
 /**
 * Quote a string for safe use as a shell literal in single quotes.
 * e.g. shellQuote("foo'bar") → "'foo'\\''bar'"
+*
+* Leaf module (PAN-3300) so launcher-generator.ts and the launcher command
+* builders extracted out of it share one implementation.
 */
-function shellQuote(value) {
+function shellQuote$1(value) {
 	return `'${value.replace(/'/g, `'\\''`)}'`;
 }
+var init_shell_quote = __esmMin((() => {}));
+//#endregion
+//#region ../../lib/launcher-codex-command.ts
+/**
+* Codex command-line construction for the launcher generator (PAN-3300).
+*
+* Extracted from launcher-generator.ts (file-size ceiling): every `codex` and
+* codex-app-server invocation shape lives here. The generator passes the
+* LauncherConfig fields these shapes read plus its own PTY-supervisor wrapper,
+* so this module stays a leaf — it never imports back into the generator.
+*/
+function buildCodexCommand(config, useExec, wrap) {
+	const cmd = computeCodexCommandTokens(config, useExec, wrap);
+	const flat = cmd.join(" ").replace(/\s+/g, " ");
+	const applied = /(^|\s)resume(\s|$)/.test(flat) ? "YES" : "no";
+	console.log(`[codex-launcher] agent=${config.overdeckEnv?.agentId ?? "?"} mode=${config.codexMode ?? "exec"} resumeSessionId=${config.resumeSessionId ?? "(none)"} resumeApplied=${applied} cmd=${flat.slice(0, 200)}`);
+	return cmd;
+}
+function computeCodexCommandTokens(config, useExec, wrap) {
+	const codexMode = config.codexMode ?? "exec";
+	if (codexMode === "tui") {
+		const tokens = ["codex"];
+		if (config.resumeSessionId) tokens.push("resume");
+		tokens.push("-c", "project_doc_max_bytes=0");
+		if (config.resumeSessionId) tokens.push(shellQuote$1(config.resumeSessionId));
+		const cmd = wrap(tokens.join(" "));
+		return [useExec ? `exec ${cmd}` : cmd];
+	}
+	if (codexMode === "work-tui") {
+		const tokens = ["codex"];
+		if (config.resumeSessionId) tokens.push("resume");
+		if (config.model) tokens.push("-m", shellQuoteModelIdSync(config.model));
+		if (config.resumeSessionId) tokens.push(shellQuote$1(config.resumeSessionId));
+		const cmd = wrap(tokens.join(" "));
+		return [useExec ? `exec ${cmd}` : cmd];
+	}
+	if (codexMode === "app-server") {
+		const tokens = ["node", shellQuote$1(join(packageRoot, "dist", "codex-app-server-host.js"))];
+		if (config.model) tokens.push("--model", shellQuoteModelIdSync(config.model));
+		if (config.resumeSessionId) tokens.push("--resume", shellQuote$1(config.resumeSessionId));
+		const cmd = tokens.join(" ");
+		return [useExec ? `exec ${cmd}` : cmd];
+	}
+	const isResume = Boolean(config.resumeSessionId);
+	const tokens = ["codex", "exec"];
+	if (isResume) tokens.push("resume");
+	if (config.model) tokens.push("-m", shellQuoteModelIdSync(config.model));
+	tokens.push("-c", "approval_policy=never");
+	const sandbox = toCodexSandboxValue(config.codexSandboxMode);
+	if (isResume) tokens.push("-c", `sandbox_mode=${sandbox}`);
+	else tokens.push("-s", sandbox);
+	tokens.push("--skip-git-repo-check");
+	if (isResume) tokens.push(shellQuote$1(config.resumeSessionId));
+	if (config.promptFile) tokens.push("\"$prompt\"");
+	else if (config.promptInline) tokens.push(shellQuote$1(config.promptInline));
+	const cmd = tokens.join(" ").replace(/\s+/g, " ").trim();
+	return [useExec ? `exec ${cmd}` : cmd];
+}
+var init_launcher_codex_command = __esmMin((() => {
+	init_codex();
+	init_model_validation();
+	init_paths();
+	init_shell_quote();
+}));
+//#endregion
+//#region ../../lib/launcher-generator.ts
 /**
 * Build the trailing `--mcp-config <path> --dangerously-load-development-channels server:<name>`
 * fragment when both channels-bridge fields are set. Returns an empty string when
@@ -237,13 +306,13 @@ function shellQuote(value) {
 function buildChannelsArgs(config) {
 	if (!config.channelsBridgeMcpConfig) return "";
 	const serverName = config.channelsBridgeServerName ?? "overdeck-bridge";
-	return ` --mcp-config ${shellQuote(config.channelsBridgeMcpConfig)} --dangerously-load-development-channels server:${serverName}`;
+	return ` --mcp-config ${shellQuote$1(config.channelsBridgeMcpConfig)} --dangerously-load-development-channels server:${serverName}`;
 }
 function wrapWithSupervisor(config, cmd) {
 	if (!config.useSupervisor) return cmd;
 	if (!getHarnessBehavior(config.harness ?? "claude-code").supportsPtySupervisor || config.reviewSignal) return cmd;
 	if (!config.supervisorScriptPath) throw new Error("LauncherConfig.supervisorScriptPath is required when useSupervisor=true");
-	return `node ${shellQuote(config.supervisorScriptPath)} ${cmd}`;
+	return `node ${shellQuote$1(config.supervisorScriptPath)} ${cmd}`;
 }
 /**
 * Canonical launcher script generator.
@@ -256,6 +325,7 @@ function wrapWithSupervisor(config, cmd) {
 function generateLauncherScriptSync(config) {
 	const lines = [];
 	lines.push("#!/bin/bash");
+	lines.push("export OVERDECK_HOST_TMUX=\"$TMUX\" OVERDECK_HOST_TMUX_PANE=\"$TMUX_PANE\"");
 	lines.push("unset TMUX TMUX_PANE STY");
 	if (config.setPipefail) lines.push("set -o pipefail");
 	lines.push("command -v mkcert >/dev/null 2>&1 && export NODE_EXTRA_CA_CERTS=\"$(mkcert -CAROOT)/rootCA.pem\"");
@@ -271,22 +341,22 @@ function generateLauncherScriptSync(config) {
 	const explicitlySetOverdeckKeys = /* @__PURE__ */ new Set();
 	if (config.overdeckEnv) {
 		if (config.overdeckEnv.agentId != null) {
-			lines.push(`export OVERDECK_AGENT_ID=${shellQuote(config.overdeckEnv.agentId)}`);
+			lines.push(`export OVERDECK_AGENT_ID=${shellQuote$1(config.overdeckEnv.agentId)}`);
 			explicitlySetOverdeckKeys.add("OVERDECK_AGENT_ID");
 		}
 		if (config.overdeckEnv.issueId != null) {
-			lines.push(`export OVERDECK_ISSUE_ID=${shellQuote(config.overdeckEnv.issueId)}`);
+			lines.push(`export OVERDECK_ISSUE_ID=${shellQuote$1(config.overdeckEnv.issueId)}`);
 			explicitlySetOverdeckKeys.add("OVERDECK_ISSUE_ID");
 		}
 		if (config.overdeckEnv.sessionType != null) {
-			lines.push(`export OVERDECK_SESSION_TYPE=${shellQuote(config.overdeckEnv.sessionType)}`);
+			lines.push(`export OVERDECK_SESSION_TYPE=${shellQuote$1(config.overdeckEnv.sessionType)}`);
 			explicitlySetOverdeckKeys.add("OVERDECK_SESSION_TYPE");
 		}
 	}
 	if (config.overdeckEnv?.agentId && config.spawnMode !== "conversation") lines.push(...buildGitGuardLines(config.overdeckEnv.agentId, config.workingDir));
 	if (config.extraEnvExports) for (const expr of config.extraEnvExports) lines.push(expr);
-	if (config.codexHome) lines.push(`export CODEX_HOME=${shellQuote(config.codexHome)}`);
-	if (config.changeDir !== false) lines.push(`cd -- ${shellQuote(config.workingDir)}`);
+	if (config.codexHome) lines.push(`export CODEX_HOME=${shellQuote$1(config.codexHome)}`);
+	if (config.changeDir !== false) lines.push(`cd -- ${shellQuote$1(config.workingDir)}`);
 	if (config.unsetProviderEnv) for (const key of PROVIDER_ENV_UNSETS) lines.push(`unset ${key}`);
 	if (config.providerExports) {
 		const trimmed = config.providerExports.trimEnd();
@@ -305,19 +375,19 @@ function generateLauncherScriptSync(config) {
 		if (keysToUnset.length > 0) lines.push(`unset ${keysToUnset.join(" ")}`);
 	}
 	if (config.trapHup) lines.push("trap '' HUP");
-	if (config.promptFile && config.promptFileMode !== "stdin") lines.push(`prompt=$(cat ${shellQuote(config.promptFile)})`);
-	if (config.debugLog) lines.push(`echo "[launcher] Claude starting at $(date)" >> ${shellQuote(config.debugLog)}`);
+	if (config.promptFile && config.promptFileMode !== "stdin") lines.push(`prompt=$(cat ${shellQuote$1(config.promptFile)})`);
+	if (config.debugLog) lines.push(`echo "[launcher] Claude starting at $(date)" >> ${shellQuote$1(config.debugLog)}`);
 	const commandParts = buildCommand(config);
 	if (commandParts.length > 0) lines.push(...commandParts);
 	if (config.debugLog) {
 		lines.push("CLAUDE_EXIT=$?");
-		lines.push(`echo "[launcher] Claude exited with code $CLAUDE_EXIT at $(date)" >> ${shellQuote(config.debugLog)}`);
+		lines.push(`echo "[launcher] Claude exited with code $CLAUDE_EXIT at $(date)" >> ${shellQuote$1(config.debugLog)}`);
 	}
 	if (config.role === "plan") {
 		lines.push("echo \"\"");
 		lines.push("echo \"Planning agent has exited. Session kept alive for review.\"");
 		lines.push("echo \"Click 'Done' in the dashboard when ready to hand off to implementation.\"");
-		if (config.debugLog) lines.push(`echo "[launcher] Keep-alive loop starting at $(date)" >> ${shellQuote(config.debugLog)}`);
+		if (config.debugLog) lines.push(`echo "[launcher] Keep-alive loop starting at $(date)" >> ${shellQuote$1(config.debugLog)}`);
 	}
 	if (config.spawnMode === "conversation") {
 		lines.push("echo \"\"");
@@ -333,14 +403,15 @@ function buildCommand(config) {
 	const behavior = getHarnessBehavior(config.harness ?? "claude-code");
 	if (config.spawnMode === "conversation") {
 		if (behavior.launchCommandKind === "ohmypi-rpc") return buildOhmypiCommand(config, false);
-		if (behavior.launchCommandKind === "codex-work-tui") return buildCodexCommand(config, false);
+		if (behavior.launchCommandKind === "codex-work-tui") return buildCodexCommand(config, false, (cmd) => wrapWithSupervisor(config, cmd));
 		if (behavior.launchCommandKind === "acp-host") return buildAcpCommand(config, false);
+		if (behavior.launchCommandKind === "kimi-code-tui") return buildKimiCodeCommand(config, false);
 		if (config.baseCommand) {
 			let cmd = config.baseCommand;
 			cmd += buildChannelsArgs(config);
 			const args = [];
-			if (config.resumeSessionId) args.push(`--resume ${shellQuote(config.resumeSessionId)}`);
-			else if (config.sessionId) args.push(`--session-id ${shellQuote(config.sessionId)}`);
+			if (config.resumeSessionId) args.push(`--resume ${shellQuote$1(config.resumeSessionId)}`);
+			else if (config.sessionId) args.push(`--session-id ${shellQuote$1(config.sessionId)}`);
 			if (config.extraArgs) args.push(config.extraArgs);
 			parts.push(wrapWithSupervisor(config, `${cmd} ${args.join(" ")}`.trim()));
 		}
@@ -363,22 +434,22 @@ function buildReviewSubRoleCommand(config) {
 	const inner = buildNonConversationCommand(config, false);
 	if (inner.length === 0) return inner;
 	const claudeCmd = `timeout ${sig.timeoutSeconds} ${inner[0]}`;
-	const synth = shellQuote(sig.synthesisAgentId);
+	const synth = shellQuote$1(sig.synthesisAgentId);
 	const out = sig.outputPath;
 	const role = sig.subRole;
-	const pidFile = shellQuote(sig.launcherPidPath);
+	const pidFile = shellQuote$1(sig.launcherPidPath);
 	return [
 		`echo $$ > ${pidFile}`,
 		claudeCmd,
 		"CLAUDE_EXIT=$?",
 		`if [ "$CLAUDE_EXIT" = "124" ]; then`,
 		`  pan tell ${synth} "REVIEWER_TIMEOUT ${role} reviewer exceeded ${sig.timeoutSeconds}s deadline" || true`,
-		`elif [ -s ${shellQuote(out)} ]; then`,
+		`elif [ -s ${shellQuote$1(out)} ]; then`,
 		`  pan tell ${synth} "REVIEWER_READY ${role} ${out}" || true`,
 		`else`,
 		`  pan tell ${synth} "REVIEWER_FAILED ${role} reviewer exited (code $CLAUDE_EXIT) without writing report" || true`,
 		`fi`,
-		`touch ${shellQuote(sig.signalMarkerPath)}`,
+		`touch ${shellQuote$1(sig.signalMarkerPath)}`,
 		`rm -f ${pidFile}`
 	];
 }
@@ -393,8 +464,9 @@ function buildReviewSubRoleCommand(config) {
 function buildNonConversationCommand(config, useExec) {
 	const behavior = getHarnessBehavior(config.harness ?? "claude-code");
 	if (behavior.launchCommandKind === "ohmypi-rpc") return buildOhmypiCommand(config, useExec);
-	if (behavior.launchCommandKind === "codex-work-tui") return buildCodexCommand(config, useExec);
+	if (behavior.launchCommandKind === "codex-work-tui") return buildCodexCommand(config, useExec, (cmd) => wrapWithSupervisor(config, cmd));
 	if (behavior.launchCommandKind === "acp-host") return buildAcpCommand(config, useExec);
+	if (behavior.launchCommandKind === "kimi-code-tui") return buildKimiCodeCommand(config, useExec);
 	const parts = [];
 	if (!config.baseCommand) return parts;
 	let cmd = config.baseCommand;
@@ -403,14 +475,14 @@ function buildNonConversationCommand(config, useExec) {
 		for (const flag of config.permissionFlags) if (!cmdTokens.includes(flag)) cmd += ` ${flag}`;
 	}
 	cmd += buildChannelsArgs(config);
-	if (config.resumeSessionId) cmd += ` --resume ${shellQuote(config.resumeSessionId)}`;
-	if (config.sessionId) cmd += ` --session-id ${shellQuote(config.sessionId)}`;
+	if (config.resumeSessionId) cmd += ` --resume ${shellQuote$1(config.resumeSessionId)}`;
+	if (config.sessionId) cmd += ` --session-id ${shellQuote$1(config.sessionId)}`;
 	if (config.model) cmd += ` --model ${shellQuoteModelIdSync(config.model)}`;
 	if (config.extraArgs) cmd += ` ${config.extraArgs}`;
-	for (const file of systemPromptFiles(config)) cmd += ` --append-system-prompt-file ${shellQuote(file)}`;
-	if (config.promptFile) if (config.promptFileMode === "stdin") cmd += ` < ${shellQuote(config.promptFile)}`;
+	for (const file of systemPromptFiles(config)) cmd += ` --append-system-prompt-file ${shellQuote$1(file)}`;
+	if (config.promptFile) if (config.promptFileMode === "stdin") cmd += ` < ${shellQuote$1(config.promptFile)}`;
 	else cmd += " \"$prompt\"";
-	if (config.promptInline) cmd += ` ${shellQuote(config.promptInline)}`;
+	if (config.promptInline) cmd += ` ${shellQuote$1(config.promptInline)}`;
 	const wrapped = wrapWithSupervisor(config, cmd.trim());
 	parts.push(useExec ? `exec ${wrapped}` : wrapped);
 	return parts;
@@ -449,22 +521,22 @@ function buildOhmypiCommand(config, useExec) {
 	const tokens = ["omp"];
 	if (piMode === "rpc") tokens.push("--mode", "rpc");
 	if (config.model) tokens.push("--model", shellQuoteModelIdSync(qualifyPiModel(config.model)));
-	tokens.push("--session-dir", shellQuote(config.piSessionDir));
-	if (config.piExtensionPath) tokens.push("--extension", shellQuote(config.piExtensionPath));
-	for (const file of systemPromptFiles(config)) tokens.push("--append-system-prompt", `"$(cat ${shellQuote(file)} 2>/dev/null)"`);
-	if (config.resumeSessionId) tokens.push("--resume", shellQuote(config.resumeSessionId));
+	tokens.push("--session-dir", shellQuote$1(config.piSessionDir));
+	if (config.piExtensionPath) tokens.push("--extension", shellQuote$1(config.piExtensionPath));
+	for (const file of systemPromptFiles(config)) tokens.push("--append-system-prompt", `"$(cat ${shellQuote$1(file)} 2>/dev/null)"`);
+	if (config.resumeSessionId) tokens.push("--resume", shellQuote$1(config.resumeSessionId));
 	if (config.extraArgs) tokens.push(config.extraArgs);
 	if (config.promptFile) tokens.push("--append-system-prompt", "\"$prompt\"");
-	else if (config.promptInline) tokens.push("--append-system-prompt", shellQuote(config.promptInline));
+	else if (config.promptInline) tokens.push("--append-system-prompt", shellQuote$1(config.promptInline));
 	let cmd = tokens.join(" ").replace(/\s+/g, " ").trim();
 	if (piMode === "rpc") {
 		const agentDir = dirname(config.piFifoPath);
 		const outputLogPath = join(agentDir, "output.log");
 		const exitStatusPath = join(agentDir, "exit-status");
 		return [
-			`${cmd} <> ${shellQuote(config.piFifoPath)} >> ${shellQuote(outputLogPath)} 2>&1`,
+			`${cmd} <> ${shellQuote$1(config.piFifoPath)} >> ${shellQuote$1(outputLogPath)} 2>&1`,
 			"__omp_exit=$?",
-			`printf '%s %s\\n' "$__omp_exit" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" > ${shellQuote(exitStatusPath)}`,
+			`printf '%s %s\\n' "$__omp_exit" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" > ${shellQuote$1(exitStatusPath)}`,
 			"exit $__omp_exit"
 		];
 	}
@@ -505,78 +577,56 @@ function buildAcpCommand(config, useExec) {
 	if (!config.acpBinaryPath) throw new Error("acp launcher requires acpBinaryPath");
 	const tokens = [
 		"node",
-		shellQuote(join(packageRoot, "dist", "acp-host.js")),
+		shellQuote$1(join(packageRoot, "dist", "acp-host.js")),
 		"--agent",
-		shellQuote(config.acpAgentId),
+		shellQuote$1(config.acpAgentId),
 		"--provider",
-		shellQuote(config.acpProvider),
+		shellQuote$1(config.acpProvider),
 		"--workspace",
-		shellQuote(config.acpWorkspace),
+		shellQuote$1(config.acpWorkspace),
 		"--binary-path",
-		shellQuote(config.acpBinaryPath)
+		shellQuote$1(config.acpBinaryPath)
 	];
-	if (config.resumeSessionId) tokens.push("--resume", shellQuote(config.resumeSessionId));
+	if (config.resumeSessionId) tokens.push("--resume", shellQuote$1(config.resumeSessionId));
 	if (config.model) tokens.push("--model", shellQuoteModelIdSync(config.model));
-	if (config.acpContextFile) tokens.push("--context-file", shellQuote(config.acpContextFile));
+	if (config.acpContextFile) tokens.push("--context-file", shellQuote$1(config.acpContextFile));
 	const cmd = tokens.join(" ");
 	return [useExec ? `exec ${cmd}` : cmd];
 }
-function buildCodexCommand(config, useExec) {
-	const cmd = computeCodexCommandTokens(config, useExec);
-	const flat = cmd.join(" ").replace(/\s+/g, " ");
-	const applied = /(^|\s)resume(\s|$)/.test(flat) ? "YES" : "no";
-	console.log(`[codex-launcher] agent=${config.overdeckEnv?.agentId ?? "?"} mode=${config.codexMode ?? "exec"} resumeSessionId=${config.resumeSessionId ?? "(none)"} resumeApplied=${applied} cmd=${flat.slice(0, 200)}`);
-	return cmd;
-}
-function computeCodexCommandTokens(config, useExec) {
-	const codexMode = config.codexMode ?? "exec";
-	if (codexMode === "tui") {
-		const tokens = ["codex"];
-		if (config.resumeSessionId) tokens.push("resume");
-		tokens.push("-c", "project_doc_max_bytes=0");
-		if (config.resumeSessionId) tokens.push(shellQuote(config.resumeSessionId));
-		const cmd = wrapWithSupervisor(config, tokens.join(" "));
-		return [useExec ? `exec ${cmd}` : cmd];
-	}
-	if (codexMode === "work-tui") {
-		const tokens = ["codex"];
-		if (config.resumeSessionId) tokens.push("resume");
-		if (config.model) tokens.push("-m", shellQuoteModelIdSync(config.model));
-		if (config.resumeSessionId) tokens.push(shellQuote(config.resumeSessionId));
-		const cmd = wrapWithSupervisor(config, tokens.join(" "));
-		return [useExec ? `exec ${cmd}` : cmd];
-	}
-	if (codexMode === "app-server") {
-		const tokens = ["node", shellQuote(join(packageRoot, "dist", "codex-app-server-host.js"))];
-		if (config.model) tokens.push("--model", shellQuoteModelIdSync(config.model));
-		if (config.resumeSessionId) tokens.push("--resume", shellQuote(config.resumeSessionId));
-		const cmd = tokens.join(" ");
-		return [useExec ? `exec ${cmd}` : cmd];
-	}
-	const isResume = Boolean(config.resumeSessionId);
-	const tokens = ["codex", "exec"];
-	if (isResume) tokens.push("resume");
-	if (config.model) tokens.push("-m", shellQuoteModelIdSync(config.model));
-	tokens.push("-c", "approval_policy=never");
-	const sandbox = toCodexSandboxValue(config.codexSandboxMode);
-	if (isResume) tokens.push("-c", `sandbox_mode=${sandbox}`);
-	else tokens.push("-s", sandbox);
-	tokens.push("--skip-git-repo-check");
-	if (isResume) tokens.push(shellQuote(config.resumeSessionId));
-	if (config.promptFile) tokens.push("\"$prompt\"");
-	else if (config.promptInline) tokens.push(shellQuote(config.promptInline));
-	let cmd = tokens.join(" ").replace(/\s+/g, " ").trim();
+/**
+* Build a native Kimi Code CLI command line (D2/erratum E1 — RESOLVED 0.29.2
+* checkpoint): `kimi [-S <id>] -m <model> --yolo [--add-dir <dir>]...`,
+* wrapped in the PTY supervisor like claude-code
+* (KIMI_CODE_BEHAVIOR.supportsPtySupervisor is true). Deliberately NO
+* --session (long form), NO --work-dir (neither flag exists on the installed
+* binary), and NO -p/--print (v1 work agents run interactively). On a fresh
+* launch, Kimi generates its own session id, captured post-launch as the
+* newest session directory under the workspace's workDirKey bucket; on a
+* true resume, that captured id is passed back via `-S` (PAN-1837).
+*/
+function buildKimiCodeCommand(config, useExec) {
+	if (!config.kimiCodeModel) throw new Error("kimi-code launcher requires kimiCodeModel");
+	const tokens = [
+		"kimi",
+		"-m",
+		shellQuoteModelIdSync(config.kimiCodeModel)
+	];
+	if (config.resumeSessionId) tokens.push("-S", shellQuote$1(config.resumeSessionId));
+	if (config.kimiCodeYolo) tokens.push("--yolo");
+	for (const dir of config.kimiCodeAddDirs ?? []) tokens.push("--add-dir", shellQuote$1(dir));
+	const cmd = wrapWithSupervisor(config, tokens.join(" "));
 	return [useExec ? `exec ${cmd}` : cmd];
 }
 var PROVIDER_ENV_UNSETS;
 var init_launcher_generator = __esmMin((() => {
-	init_codex();
 	init_behavior();
 	init_providers();
 	init_model_validation();
 	init_ui_theme();
 	init_paths();
 	init_launcher_git_guard();
+	init_launcher_codex_command();
+	init_shell_quote();
 	PROVIDER_ENV_UNSETS = [
 		"ANTHROPIC_API_KEY",
 		"ANTHROPIC_BASE_URL",
@@ -620,11 +670,15 @@ var init_provenance = __esmMin((() => {}));
 *
 *   (none) ──paste──► PENDING ──atomic claim+Enter──► TERMINAL
 *
-* - `sendKeysDedup` atomically pastes and sets the PENDING option only when
-*   neither option is set. A replay that finds PENDING (a prior attempt
-*   crashed before submitting) returns 'submit-pending' WITHOUT re-pasting.
-*   A POISON breadcrumb (a terminal marker that proved false but could not be
-*   rolled back) is repaired first and never honored as a dedup.
+* - `sendKeysDedup` atomically pastes and sets PENDING plus payload-state
+*   `unverified`. Recovery proves that payload in the cursor-anchored composer
+*   before reusing the claim, or re-pastes after positive absence. An Enter
+*   attempt atomically advances the state to `enter-attempted`, so rollback
+*   recovery does not duplicate content that may already have landed. State
+*   reads are strict; unset legacy and unknown values fail closed.
+*   A POISON breadcrumb (a terminal marker that proved
+*   false but could not be rolled back) is repaired first and never honored as
+*   a dedup.
 * - `completeKeyedSubmit` issues ONE `if-shell`: only when PENDING is
 *   present, TERMINAL absent, and the pane alive does the tmux server send
 *   the Enter and then flip TERMINAL and clear PENDING — in that order, in a
@@ -636,6 +690,9 @@ var init_provenance = __esmMin((() => {}));
 *   server-side condition and sends nothing, so no stray Enter can ever land
 *   in a composer holding unrelated text.
 */
+function shellQuote(value) {
+	return `'${value.replace(/'/g, `'\\''`)}'`;
+}
 /** Set once the keyed message has been SUBMITTED (Enter sent). */
 function dedupTerminalOptionName(dedupKey) {
 	return `@overdeck-dedup-${dedupKey}`;
@@ -663,9 +720,16 @@ function dedupPoisonOptionName(dedupKey) {
 function dedupTargetOptionName(dedupKey) {
 	return `@overdeck-dedup-target-${dedupKey}`;
 }
+/** Explicit payload phase for a pending claim; unset means legacy/unknown. */
+function dedupPayloadStateOptionName(dedupKey) {
+	return `@overdeck-dedup-payload-state-${dedupKey}`;
+}
 function assertValidDedupKey(dedupKey) {
 	if (!DEDUP_KEY_RE.test(dedupKey)) throw new Error(`dedupKey must match [A-Za-z0-9:_-]+, got: ${dedupKey.slice(0, 40)}`);
 }
+function isKeyedSubmitBlockedMenuError(error) {
+	return error instanceof KeyedSubmitBlockedMenuError || error instanceof Error && error.name === "KeyedSubmitBlockedMenuError";
+}
 /** pane_pid + pane_dead in one read — the identity of the Enter's target. */
 async function readPaneTarget(sessionName) {
 	return tmuxExecAsync([
@@ -711,6 +775,60 @@ async function readMarkerStrict(sessionName, option) {
 	], { encoding: "utf-8" });
 	return String(result.stdout).trim();
 }
+async function readPendingPayloadState(sessionName, dedupKey, option, readStrict, context) {
+	let state;
+	try {
+		state = await readStrict(sessionName, option);
+	} catch (error) {
+		throw new KeyedMarkerVerificationError(sessionName, `${context} payload-state read (key "${dedupKey}")`, { cause: error });
+	}
+	if (state === PAYLOAD_STATE_UNVERIFIED || state === PAYLOAD_STATE_ENTER_ATTEMPTED) return state;
+	throw new KeyedMarkerVerificationError(sessionName, `${context} payload-state is ${state === "" ? "legacy/unset" : `unknown value "${state}"`} (key "${dedupKey}")`);
+}
+async function captureVisiblePane(sessionName) {
+	const [pane, cursor] = await Promise.all([tmuxExecAsync([
+		"capture-pane",
+		"-t",
+		sessionName,
+		"-p"
+	], { encoding: "utf-8" }), tmuxExecAsync([
+		"display-message",
+		"-p",
+		"-t",
+		sessionName,
+		"#{cursor_y}"
+	], { encoding: "utf-8" })]);
+	const cursorY = Number.parseInt(String(cursor.stdout).trim(), 10);
+	if (!Number.isInteger(cursorY)) throw new Error(`Unreadable cursor row for ${sessionName}`);
+	return {
+		text: String(pane.stdout),
+		cursorY
+	};
+}
+function activeComposerRegion(viewport) {
+	const lines = viewport.text.replace(PANE_ANSI_PATTERN, "").split("\n").map((line) => line.replace(/\s+$/g, ""));
+	if (lines.every((line) => line.trim() === "")) return null;
+	if (viewport.cursorY < 0 || viewport.cursorY >= lines.length) return null;
+	let start = viewport.cursorY;
+	for (let index = viewport.cursorY; index >= 0; index -= 1) if (COMPOSER_TOP_BOUNDARY.test(lines[index])) {
+		start = index + 1;
+		break;
+	}
+	return lines.slice(start, viewport.cursorY + 1).join("\n");
+}
+async function pendingPayloadPresence(sessionName, keys, readViewport) {
+	const verifyLine = deliveryVerifyLine(keys);
+	if (verifyLine.length < 3) return "unproven";
+	let viewport;
+	try {
+		viewport = await readViewport(sessionName);
+	} catch {
+		return "unproven";
+	}
+	const composer = activeComposerRegion(viewport);
+	if (composer === null) return "unproven";
+	return composer.includes(verifyLine.slice(0, 40)) ? "present" : "absent";
+}
 /**
 * Clear the poison breadcrumb and VERIFY it is gone with a strict read.
 * EVERY failure here — the clear command, the verification read, or a
@@ -755,6 +873,7 @@ async function repairPoisonedMarkers(sessionName, dedupKey, sendId, readStrict)
 	const terminalOption = dedupTerminalOptionName(dedupKey);
 	const pendingOption = dedupPendingOptionName(dedupKey);
 	const poisonOption = dedupPoisonOptionName(dedupKey);
+	const payloadStateOption = dedupPayloadStateOptionName(dedupKey);
 	await tmuxExecAsync([
 		"set-option",
 		"-u",
@@ -766,16 +885,27 @@ async function repairPoisonedMarkers(sessionName, dedupKey, sendId, readStrict)
 		"-t",
 		sessionName,
 		pendingOption,
-		sendId
+		sendId,
+		";",
+		"set-option",
+		"-t",
+		sessionName,
+		payloadStateOption,
+		PAYLOAD_STATE_ENTER_ATTEMPTED
 	], { encoding: "utf-8" });
 	let repairedTerminal;
 	let repairedPending;
+	let repairedPayloadState;
 	try {
-		[repairedTerminal, repairedPending] = await Promise.all([readStrict(sessionName, terminalOption), readStrict(sessionName, pendingOption)]);
+		[repairedTerminal, repairedPending, repairedPayloadState] = await Promise.all([
+			readStrict(sessionName, terminalOption),
+			readStrict(sessionName, pendingOption),
+			readStrict(sessionName, payloadStateOption)
+		]);
 	} catch {
 		throw new KeyedMarkerVerificationError(sessionName, `repair verification of key "${dedupKey}"`);
 	}
-	if (repairedTerminal !== "" || repairedPending === "") throw new Error(`Keyed tmux markers for ${sessionName} are poisoned and could not be repaired (key "${dedupKey}")`);
+	if (repairedTerminal !== "" || repairedPending === "" || repairedPayloadState !== PAYLOAD_STATE_ENTER_ATTEMPTED) throw new Error(`Keyed tmux markers for ${sessionName} are poisoned and could not be repaired (key "${dedupKey}")`);
 	await clearPoisonVerified(sessionName, poisonOption, `repair of key "${dedupKey}"`, readStrict);
 }
 /**
@@ -798,6 +928,7 @@ async function sendKeysDedup(sessionName, keys, dedupKey, caller, deps = {}) {
 	const terminalOption = dedupTerminalOptionName(dedupKey);
 	const pendingOption = dedupPendingOptionName(dedupKey);
 	const poisonOption = dedupPoisonOptionName(dedupKey);
+	const payloadStateOption = dedupPayloadStateOptionName(dedupKey);
 	const sendId = randomUUID();
 	let poisonMarker;
 	try {
@@ -823,7 +954,7 @@ async function sendKeysDedup(sessionName, keys, dedupKey, caller, deps = {}) {
 			"-t",
 			sessionName,
 			`test -z "$(tmux show-option -qv -t ${sessionName} ${pendingOption})" && test -z "$(tmux show-option -qv -t ${sessionName} ${terminalOption})"`,
-			`paste-buffer -b ${bufferName} -p -t ${sessionName} \; set-option -t ${sessionName} ${pendingOption} ${sendId} \; set-option -F -t ${sessionName} ${targetOption} '#{pane_pid}'`
+			`paste-buffer -b ${bufferName} -p -t ${sessionName} \; set-option -t ${sessionName} ${pendingOption} ${sendId} \; set-option -F -t ${sessionName} ${targetOption} '#{pane_pid}' \; set-option -t ${sessionName} ${payloadStateOption} ${PAYLOAD_STATE_UNVERIFIED}`
 		], { encoding: "utf-8" });
 		const [pendingMarker, terminalMarker] = await Promise.all([read(sessionName, pendingOption), read(sessionName, terminalOption)]);
 		if (terminalMarker !== "") return "deduplicated";
@@ -831,14 +962,27 @@ async function sendKeysDedup(sessionName, keys, dedupKey, caller, deps = {}) {
 		if (pendingMarker !== "") {
 			const recordedTarget = await read(sessionName, targetOption);
 			const currentPid = (await (deps.readPaneTarget ?? readPaneTarget)(sessionName)).pid;
-			if (recordedTarget !== "" && currentPid !== "" && recordedTarget === currentPid) return "submit-pending";
-			await tmuxExecAsync([
+			const payloadState = await readPendingPayloadState(sessionName, dedupKey, payloadStateOption, readStrict, "pending claim");
+			const readViewport = deps.readPaneViewport ?? captureVisiblePane;
+			if (recordedTarget !== "" && currentPid !== "" && recordedTarget === currentPid) {
+				if (payloadState === PAYLOAD_STATE_ENTER_ATTEMPTED) return "submit-pending";
+				const presence = await pendingPayloadPresence(sessionName, keys, readViewport);
+				if (presence === "present") return "submit-pending";
+				if (presence === "unproven") throw new KeyedMarkerVerificationError(sessionName, `pending payload visibility (key "${dedupKey}")`);
+			}
+			const repasteArgs = [
 				"if-shell",
 				"-t",
 				sessionName,
-				`test -n "$(tmux show-option -qv -t ${sessionName} ${pendingOption})" && test -z "$(tmux show-option -qv -t ${sessionName} ${terminalOption})" && ! test "$(tmux display-message -p -t ${sessionName} '#{pane_pid}')" = "$(tmux show-option -qv -t ${sessionName} ${targetOption})"`,
-				`paste-buffer -b ${bufferName} -p -t ${sessionName} \; set-option -t ${sessionName} ${pendingOption} ${sendId} \; set-option -F -t ${sessionName} ${targetOption} '#{pane_pid}'`
-			], { encoding: "utf-8" });
+				`test "$(tmux show-option -qv -t ${sessionName} ${pendingOption})" = ${shellQuote(pendingMarker)} && test -z "$(tmux show-option -qv -t ${sessionName} ${terminalOption})"`,
+				`paste-buffer -b ${bufferName} -p -t ${sessionName} \; set-option -t ${sessionName} ${pendingOption} ${sendId} \; set-option -F -t ${sessionName} ${targetOption} '#{pane_pid}' \; set-option -t ${sessionName} ${payloadStateOption} ${PAYLOAD_STATE_UNVERIFIED}`
+			];
+			try {
+				if (deps.runTmuxCommand) await deps.runTmuxCommand(repasteArgs);
+				else await tmuxExecAsync(repasteArgs, { encoding: "utf-8" });
+			} catch (error) {
+				throw new KeyedMarkerVerificationError(sessionName, `pending payload re-paste command (key "${dedupKey}")`, { cause: error });
+			}
 			const [repastedPending, repastedTerminal, repastedTarget] = await Promise.all([
 				read(sessionName, pendingOption),
 				read(sessionName, terminalOption),
@@ -848,7 +992,12 @@ async function sendKeysDedup(sessionName, keys, dedupKey, caller, deps = {}) {
 			if (repastedPending === sendId) return "pasted";
 			if (repastedPending !== "") {
 				const nowPid = (await (deps.readPaneTarget ?? readPaneTarget)(sessionName)).pid;
-				if (repastedTarget !== "" && nowPid !== "" && repastedTarget === nowPid) return "submit-pending";
+				const repastedPayloadState = await readPendingPayloadState(sessionName, dedupKey, payloadStateOption, readStrict, "concurrent claim");
+				if (repastedTarget !== "" && nowPid !== "" && repastedTarget === nowPid) {
+					if (repastedPayloadState === PAYLOAD_STATE_ENTER_ATTEMPTED) return "submit-pending";
+					if (await pendingPayloadPresence(sessionName, keys, readViewport) === "present") return "submit-pending";
+				}
+				throw new KeyedMarkerVerificationError(sessionName, `concurrent pending payload visibility (key "${dedupKey}")`);
 			}
 		}
 		throw new Error(`Keyed tmux paste for ${sessionName} did not land and no dedup marker was recorded` + (caller ? ` (caller: ${caller})` : ""));
@@ -907,15 +1056,20 @@ async function completeKeyedSubmit(sessionName, dedupKey, deps = {}) {
 	const pendingOption = dedupPendingOptionName(dedupKey);
 	const poisonOption = dedupPoisonOptionName(dedupKey);
 	const targetOption = dedupTargetOptionName(dedupKey);
+	const payloadStateOption = dedupPayloadStateOptionName(dedupKey);
 	await new Promise((resolve) => setTimeout(resolve, PASTE_SETTLE_MS));
 	const preTarget = await readTarget(sessionName);
 	const pendingBefore = await read(sessionName, pendingOption);
+	if (pendingBefore !== "") {
+		const paneSnapshot = await (deps.readPaneText ?? capturePaneText)(sessionName, 90).catch(() => "");
+		if (paneSnapshot && paneHasBlockingChoiceMenu(paneSnapshot)) throw new KeyedSubmitBlockedMenuError(sessionName, dedupKey, paneSnapshot);
+	}
 	await tmuxExecAsync([
 		"if-shell",
 		"-t",
 		sessionName,
 		`test -z "$(tmux show-option -qv -t ${sessionName} ${terminalOption})" && test -n "$(tmux show-option -qv -t ${sessionName} ${pendingOption})" && test "$(tmux display-message -p -t ${sessionName} '#{pane_dead}')" = "0" && test "$(tmux display-message -p -t ${sessionName} '#{pane_pid}')" = "$(tmux show-option -qv -t ${sessionName} ${targetOption})"`,
-		`send-keys -t ${sessionName} C-m \; set-option -t ${sessionName} ${poisonOption} 1 \; set-option -t ${sessionName} ${terminalOption} 1 \; set-option -u -t ${sessionName} ${pendingOption}`
+		`send-keys -t ${sessionName} C-m \; set-option -t ${sessionName} ${poisonOption} 1 \; set-option -t ${sessionName} ${terminalOption} 1 \; set-option -u -t ${sessionName} ${pendingOption} \; set-option -t ${sessionName} ${payloadStateOption} ${PAYLOAD_STATE_ENTER_ATTEMPTED}`
 	], { encoding: "utf-8" });
 	const [terminalAfter, pendingAfter, postTarget, recordedTarget] = await Promise.all([
 		read(sessionName, terminalOption),
@@ -940,7 +1094,13 @@ async function completeKeyedSubmit(sessionName, dedupKey, deps = {}) {
 			"-u",
 			"-t",
 			sessionName,
-			pendingOption
+			pendingOption,
+			";",
+			"set-option",
+			"-t",
+			sessionName,
+			payloadStateOption,
+			PAYLOAD_STATE_ENTER_ATTEMPTED
 		] : [
 			"set-option",
 			"-u",
@@ -952,16 +1112,27 @@ async function completeKeyedSubmit(sessionName, dedupKey, deps = {}) {
 			"-t",
 			sessionName,
 			pendingOption,
-			pendingBefore
+			pendingBefore,
+			";",
+			"set-option",
+			"-t",
+			sessionName,
+			payloadStateOption,
+			PAYLOAD_STATE_ENTER_ATTEMPTED
 		], { encoding: "utf-8" }).catch(() => {});
 		let rolledTerminal;
 		let restoredPending;
+		let remainingPayloadState;
 		try {
-			[rolledTerminal, restoredPending] = await Promise.all([readStrict(sessionName, terminalOption), readStrict(sessionName, pendingOption)]);
+			[rolledTerminal, restoredPending, remainingPayloadState] = await Promise.all([
+				readStrict(sessionName, terminalOption),
+				readStrict(sessionName, pendingOption),
+				readStrict(sessionName, payloadStateOption)
+			]);
 		} catch {
 			throw new KeyedMarkerVerificationError(sessionName, `rollback verification of key "${dedupKey}"`);
 		}
-		if (rolledTerminal === "" && restoredPending !== "") await clearPoisonVerified(sessionName, poisonOption, `verified rollback of key "${dedupKey}"`, readStrict).catch(() => {});
+		if (rolledTerminal === "" && restoredPending !== "" && remainingPayloadState === PAYLOAD_STATE_ENTER_ATTEMPTED) await clearPoisonVerified(sessionName, poisonOption, `verified rollback of key "${dedupKey}"`, readStrict).catch(() => {});
 		throw new KeyedSubmitTargetDeadError(sessionName, dedupKey);
 	}
 	if (pendingAfter !== "") {
@@ -971,10 +1142,14 @@ async function completeKeyedSubmit(sessionName, dedupKey, deps = {}) {
 	}
 	throw new Error(`Keyed tmux submit for ${sessionName} found neither a pending claim nor a terminal marker — the paste vanished without submission`);
 }
-var DEDUP_KEY_RE, PASTE_SETTLE_MS, KeyedSubmitTargetDeadError, KeyedMarkerVerificationError;
+var DEDUP_KEY_RE, PAYLOAD_STATE_UNVERIFIED, PAYLOAD_STATE_ENTER_ATTEMPTED, PASTE_SETTLE_MS, KeyedSubmitTargetDeadError, KeyedSubmitBlockedMenuError, KeyedMarkerVerificationError, PANE_ANSI_PATTERN, COMPOSER_TOP_BOUNDARY;
 var init_tmux_dedup = __esmMin((() => {
 	init_tmux();
+	init_errors();
+	init_pane_choice_menu();
 	DEDUP_KEY_RE = /^[A-Za-z0-9:_-]+$/;
+	PAYLOAD_STATE_UNVERIFIED = "unverified";
+	PAYLOAD_STATE_ENTER_ATTEMPTED = "enter-attempted";
 	PASTE_SETTLE_MS = 300;
 	KeyedSubmitTargetDeadError = class extends Error {
 		constructor(sessionName, dedupKey) {
@@ -982,6 +1157,12 @@ var init_tmux_dedup = __esmMin((() => {
 			this.name = "KeyedSubmitTargetDeadError";
 		}
 	};
+	KeyedSubmitBlockedMenuError = class extends MessageDeliveryFailed {
+		constructor(sessionName, dedupKey, paneSnapshot) {
+			super(`Keyed submit to ${sessionName} aborted: the pane is blocked on a choice menu, so Enter would answer that menu (key "${dedupKey}")`, sessionName, paneSnapshot);
+			this.name = "KeyedSubmitBlockedMenuError";
+		}
+	};
 	KeyedMarkerVerificationError = class extends Error {
 		constructor(sessionName, context, options) {
 			const causeText = options?.cause instanceof Error ? `: ${options.cause.message}` : "";
@@ -989,6 +1170,8 @@ var init_tmux_dedup = __esmMin((() => {
 			this.name = "KeyedMarkerVerificationError";
 		}
 	};
+	PANE_ANSI_PATTERN = /\x1b\[[0-9;?]*[ -/]*[@-~]/g;
+	COMPOSER_TOP_BOUNDARY = /^\s*[─━═]{6,}/;
 }));
 //#endregion
 //#region ../../lib/planning/auto-spawn-consent.ts
@@ -1136,6 +1319,6 @@ var init_auto_spawn_consent = __esmMin((() => {
 	init_fs_lock();
 }));
 //#endregion
-export { init_launcher_generator as C, requireModelOverrideSync as D, normalizeModelOverrideSync as E, shellQuoteModelIdSync as O, generateLauncherScriptSync as S, init_model_validation as T, init_tmux_dedup as _, readAutoSpawnOnFinalizeFlagAsync as a, isOperatorStartedBy as b, writeAutoSpawnOnFinalizeFlag as c, assertValidDedupKey as d, completeKeyedSubmit as f, dedupTerminalOptionName as g, dedupTargetOptionName as h, init_auto_spawn_consent as i, KeyedMarkerVerificationError as l, dedupPoisonOptionName as m, claimAutoSpawnConsentForWorkStart as n, releaseAutoSpawnConsentClaim as o, dedupPendingOptionName as p, completeAutoSpawnConsentClaim as r, withAutoSpawnConsentClaim as s, autoSpawnOnFinalizeFlagPath as t, KeyedSubmitTargetDeadError as u, sendKeysDedup as v, MODEL_ID_PATTERN as w, normalizeFlywheelRunId as x, init_provenance as y };
+export { generateLauncherScriptSync as C, normalizeModelOverrideSync as D, init_model_validation as E, requireModelOverrideSync as O, normalizeFlywheelRunId as S, MODEL_ID_PATTERN as T, init_tmux_dedup as _, readAutoSpawnOnFinalizeFlagAsync as a, init_provenance as b, writeAutoSpawnOnFinalizeFlag as c, assertValidDedupKey as d, completeKeyedSubmit as f, dedupTerminalOptionName as g, dedupTargetOptionName as h, init_auto_spawn_consent as i, shellQuoteModelIdSync as k, KeyedMarkerVerificationError as l, dedupPoisonOptionName as m, claimAutoSpawnConsentForWorkStart as n, releaseAutoSpawnConsentClaim as o, dedupPendingOptionName as p, completeAutoSpawnConsentClaim as r, withAutoSpawnConsentClaim as s, autoSpawnOnFinalizeFlagPath as t, KeyedSubmitTargetDeadError as u, isKeyedSubmitBlockedMenuError as v, init_launcher_generator as w, isOperatorStartedBy as x, sendKeysDedup as y };
 
-//# sourceMappingURL=auto-spawn-consent-BooqhC3L.js.map
+//# sourceMappingURL=auto-spawn-consent-lXqRJ1Dr.js.map