@rosthq/cli 0.7.134 → 0.7.135

package/dist/generator/flags.d.ts

@@ -7,5 +7,6 @@ export type FlagOverrides = {
     negatedFlags?: Readonly<Record<string, string>>;
 };
 export declare function booleanFlagsFor(entry: CommandManifestEntry, overrides?: FlagOverrides): Set<string>;
+export declare function assertKnownFlags(entry: CommandManifestEntry, parsed: ParsedFlags, overrides: FlagOverrides, extraKnownFlags?: ReadonlySet<string>): void;
 export declare function buildBodyFromFlags(entry: CommandManifestEntry, parsed: ParsedFlags, positional?: string, overrides?: FlagOverrides): Record<string, unknown>;
 //# sourceMappingURL=flags.d.ts.map

package/dist/generator/flags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../src/generator/flags.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,oBAAoB,EAAiB,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAwB,KAAK,WAAW,EAAc,MAAM,cAAc,CAAC;AA2BlF,MAAM,MAAM,aAAa,GAAG;IAG1B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE/C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAI7C,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD,CAAC;AAMF,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,GAAE,aAAkB,GAAG,GAAG,CAAC,MAAM,CAAC,CAsBvG;AA6GD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,WAAW,EACnB,UAAU,CAAC,EAAE,MAAM,EACnB,SAAS,GAAE,aAAkB,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsFzB"}
+{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../src/generator/flags.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,oBAAoB,EAAiB,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAwB,KAAK,WAAW,EAAc,MAAM,cAAc,CAAC;AA2BlF,MAAM,MAAM,aAAa,GAAG;IAG1B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE/C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAI7C,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD,CAAC;AAMF,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,GAAE,aAAkB,GAAG,GAAG,CAAC,MAAM,CAAC,CAsBvG;AAqJD,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,aAAa,EACxB,eAAe,GAAE,WAAW,CAAC,MAAM,CAAa,GAC/C,IAAI,CAUN;AAKD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,WAAW,EACnB,UAAU,CAAC,EAAE,MAAM,EACnB,SAAS,GAAE,aAAkB,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0FzB"}

package/dist/generator/verbs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verbs.d.ts","sourceRoot":"","sources":["../../src/generator/verbs.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,EAAuC,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAErF,OAAO,EAOL,KAAK,OAAO,EAEb,MAAM,cAAc,CAAC;AAItB,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG;IACrC,SAAS,EAAE,MAAM,CAAC;IAElB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;IAIrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IAEtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEhC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAIF,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAEhF;AAGD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,CA2BpE;AAYD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,MAAM,CAa9E;AA4CD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAMxE"}
+{"version":3,"file":"verbs.d.ts","sourceRoot":"","sources":["../../src/generator/verbs.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,EAAyD,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEvG,OAAO,EAQL,KAAK,OAAO,EAEb,MAAM,cAAc,CAAC;AAItB,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG;IACrC,SAAS,EAAE,MAAM,CAAC;IAElB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;IAIrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IAEtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEhC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAsBF,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAEhF;AAGD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,CAgCpE;AAeD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,MAAM,CAa9E;AA+GD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAMxE"}

package/dist/index.js

@@ -53680,7 +53680,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-30.2",
+    version: "2026-07-30.3",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -54265,7 +54265,7 @@ Ergonomic subcommands for everyday operation. Each wrapper is sugar over the sam
 
 These ergonomic wrappers (including the \`{{cli}} agent\` group) require **{{cli}} 0.2.0 or newer** \u2014 run \`npx {{cliPackage}}@latest \u2026\` to get them. Older versions can still reach every command through the \`{{cli}} command <id> --json\` floor, since command execution is server-side.
 
-**Generated verbs (0.6.0+).** Every registry command now has a first-class \`{{cli}} <namespace> <action>\` verb, projected directly from the command's input schema \u2014 so namespaces that previously had no ergonomic wrapper (for example \`{{cli}} measurable create\`, \`{{cli}} work_order enqueue\`, \`{{cli}} mcp_token create\`) are usable without dropping to the raw \`command <id>\` path. Flags follow the schema field names (\`--seat-id\`, \`--name\`, \u2026); read a command's exact input offline with \`{{cli}} <namespace> <action> --schema\` before calling it, and pass a nested payload with \`--input '<json>'\` when a field is a complex object. \`--json\` still selects machine output, \`--seat <id>\` still sets seat scope, and \`{{cli}} command <id> --json '<body>'\` remains the universal fallback.
+**Generated verbs (0.6.0+).** Every registry command now has a first-class \`{{cli}} <namespace> <action>\` verb, projected directly from the command's input schema \u2014 so namespaces that previously had no ergonomic wrapper (for example \`{{cli}} measurable create\`, \`{{cli}} work_order enqueue\`, \`{{cli}} mcp_token create\`) are usable without dropping to the raw \`command <id>\` path. Flags follow the schema field names (\`--seat-id\`, \`--name\`, \u2026); read a command's exact input offline with \`{{cli}} <namespace> <action> --schema\` before calling it, and pass a nested payload with \`--input '<json>'\` or \`--input-file <path>\` (a JSON file read client-side) when a field is a complex object \u2014 explicit field flags merge on top of either payload form. On these generated verbs, a flag the verb does not support is a usage error naming the flag before anything is sent, never silently ignored (the bespoke handler verbs, such as \`status record\` and \`agent create\`, still parse flags by hand and are being hardened separately). \`--json\` still selects machine output, \`--seat <id>\` still sets seat scope, and \`{{cli}} command <id> --json '<body>'\` remains the universal fallback.
 
 For a complete Seat, inspect \`{{cli}} seat create-complete --schema\`, then pass the strict nested request with \`{{cli}} seat create-complete --input '<json>' --json\`. The generic \`{{cli}} command seat.create_complete --json '<json>'\` path and the generated MCP tool \`rost_create_complete_seat\` expose the same registry schema and server-side command. \`seat create-complete\` authenticates with an existing implementation-bootstrap credential first (it is one of the vetted bootstrap staging primitives) and falls back to the user session. Staging surfaces as the CLI's confirmation-required envelope: a \`COMMAND_CONFIRMATION_REQUIRED\` JSON object on stderr, exit code 3, whose \`details\` carry the pending confirmation id and the exact approval URL (\`details.approveVia.webUrl\`) \u2014 read the URL from there; the command has done its job at that point. The human owner reviews one card covering the Seat, canonical Charter and permission manifest, disclosed staffing, effective agent lane/readiness, exact pinned Skill versions and dependency state, and schedule. Approval applies the proposal in one transaction and returns its application and receipt ids. Any failure rolls back the whole proposal. An optional agent remains in \`dry_run\`; this command never approves go-live. Direct calls use existing parent and Steward Seat ids\u2014logical references are reserved for the later composite onboarding flow. Retained source ingestion is not available on this direct command yet, so \`sources\` and every \`source_uses\` collection must be empty and planned staffing must omit \`source_ref\`; the command rejects source-backed provenance instead of accepting an unverified upload id or caller-supplied digest.
 
@@ -59836,10 +59836,36 @@ function explicitArgvValue(entry, field4, parsed, positional, overrides, aliasFl
   }
   return { provided: true, value: coerceScalar(field4, raw) };
 }
+var RESERVED_FLAGS = /* @__PURE__ */ new Set(["json", "seat", "input", "body", "yes", "y", "schema"]);
+function knownFlagsFor(entry, overrides) {
+  const known = new Set(RESERVED_FLAGS);
+  for (const field4 of entry.fields) {
+    known.add(field4.flag);
+  }
+  for (const aliasFlag of Object.keys(overrides.flagAliases ?? {})) {
+    known.add(aliasFlag);
+  }
+  for (const negatedFlag of Object.keys(overrides.negatedFlags ?? {})) {
+    known.add(negatedFlag);
+  }
+  return known;
+}
+function assertKnownFlags(entry, parsed, overrides, extraKnownFlags = /* @__PURE__ */ new Set()) {
+  const knownFlags = knownFlagsFor(entry, overrides);
+  for (const flag of extraKnownFlags) {
+    knownFlags.add(flag);
+  }
+  for (const key of [...parsed.values.keys(), ...parsed.flags]) {
+    if (!knownFlags.has(key)) {
+      throw new UsageError(`Unknown flag: --${key}. Run this command with --schema to see its supported flags.`);
+    }
+  }
+}
 function buildBodyFromFlags(entry, parsed, positional, overrides = {}) {
   if (entry.secretBlocked) {
     throw new UsageError(SECRET_ARGV_GUIDANCE);
   }
+  assertKnownFlags(entry, parsed, overrides);
   const aliasFlags = new Map(Object.entries(overrides.flagAliases ?? {}));
   const booleanFields = new Set(entry.fields.filter((field4) => field4.type === "boolean").map((field4) => field4.name));
   for (const [negatedFlag, fieldName] of Object.entries(overrides.negatedFlags ?? {})) {
@@ -60022,7 +60048,12 @@ function renderCommandOutput(output) {
 }
 
 // src/generator/verbs.ts
+import { readFile as readFile6 } from "node:fs/promises";
 var MANIFEST_BY_ID = new Map(COMMAND_MANIFEST.map((entry) => [entry.id, entry]));
+function hasBespokeHandler(verbSpec) {
+  return verbSpec.handler !== void 0;
+}
+var INPUT_FILE_FLAG = /* @__PURE__ */ new Set(["input-file"]);
 function manifestById(commandId) {
   return MANIFEST_BY_ID.get(commandId);
 }
@@ -60047,6 +60078,7 @@ function renderVerbSchema(entry) {
     }
     if (entry.hasComplexInput) {
       lines.push("  --input '<json>' \u2014 nested payload (this command has complex input fields)");
+      lines.push("  --input-file <path> \u2014 read the nested payload from a JSON file (same merge rules as --input)");
     }
   }
   if (entry.example !== void 0) {
@@ -60054,12 +60086,12 @@ function renderVerbSchema(entry) {
   }
   return lines.join("\n");
 }
-function verbUsageLine(bin, group, verb, entry) {
+function verbUsageLine(bin, group, verb, entry, advertiseComplexInput) {
   const parts = entry.fields.map((field4) => {
     const token = field4.type === "boolean" ? `--${field4.flag}` : `--${field4.flag} <${field4.type === "enum" && field4.enumValues ? field4.enumValues.join("|") : field4.name}>`;
     return field4.required ? token : `[${token}]`;
   });
-  const complex = entry.hasComplexInput ? " [--input '<json>']" : "";
+  const complex = entry.hasComplexInput && advertiseComplexInput ? " [--input '<json>' | --input-file <path>]" : "";
   return `  ${bin} ${group} ${verb} ${parts.join(" ")}${complex}`.replace(/\s+$/, "");
 }
 function groupUsage(bin, group, spec) {
@@ -60071,16 +60103,47 @@ function groupUsage(bin, group, spec) {
     if (verbSpec.usage) {
       lines.push(`  ${verbSpec.usage}`);
     } else if (entry) {
-      lines.push(verbUsageLine(bin, group, verb, entry));
+      lines.push(verbUsageLine(bin, group, verb, entry, !hasBespokeHandler(verbSpec)));
     }
   }
   return lines.join("\n");
 }
+async function resolveInputFileFlag(parsed) {
+  const inputFile = parsed.values.get("input-file");
+  if (inputFile === void 0) {
+    if (parsed.flags.has("input-file")) {
+      throw new UsageError("Missing required --input-file value.");
+    }
+    return;
+  }
+  if (parsed.values.has("input") || parsed.values.has("body") || parsed.flags.has("input") || parsed.flags.has("body")) {
+    throw new UsageError("Use only one of --input, --body, or --input-file.");
+  }
+  let text;
+  try {
+    text = await readFile6(inputFile, "utf8");
+  } catch (error51) {
+    throw new UsageError(
+      `Could not read --input-file ${inputFile}: ${error51 instanceof Error ? error51.message : String(error51)}`
+    );
+  }
+  let fileJson;
+  try {
+    fileJson = JSON.parse(text);
+  } catch {
+    throw new UsageError(`--input-file ${inputFile} must be valid JSON.`);
+  }
+  if (typeof fileJson !== "object" || fileJson === null || Array.isArray(fileJson)) {
+    throw new UsageError(`--input-file ${inputFile} must contain a JSON object.`);
+  }
+  parsed.values.set("input", text);
+  parsed.values.delete("input-file");
+}
 function makeVerb(commandId, verbSpec) {
-  if (verbSpec.handler) {
+  if (hasBespokeHandler(verbSpec)) {
     return verbSpec.handler;
   }
-  return (context, rest) => {
+  return async (context, rest) => {
     const entry = MANIFEST_BY_ID.get(commandId);
     if (!entry) {
       throw new UsageError(`Unknown command ${commandId}.`);
@@ -60105,6 +60168,11 @@ function makeVerb(commandId, verbSpec) {
     const positional = hasPositional ? rest[0] : void 0;
     const flagArgs = hasPositional ? rest.slice(1) : rest;
     const parsed = parseFlags(flagArgs, booleanFlagsFor(entry, overrides));
+    assertKnownFlags(entry, parsed, overrides, INPUT_FILE_FLAG);
+    if (flagArgs.filter((token) => token === "--input-file").length > 1) {
+      throw new UsageError("Pass --input-file at most once.");
+    }
+    await resolveInputFileFlag(parsed);
     const body = buildBodyFromFlags(entry, parsed, positional, overrides);
     const render = verbSpec.render ?? renderCommandOutput;
     return execute(context, parsed, commandId, body, render);
@@ -63575,7 +63643,7 @@ async function sweepStaleRunnerTempFiles(dir, options = {}) {
 // src/runner-service.ts
 import { execFile as execFileCallback2 } from "node:child_process";
 import { realpathSync as realpathSync2 } from "node:fs";
-import { access, mkdir as mkdir4, readFile as readFile6, readdir as readdir2, rm as rm4, writeFile as writeFile4 } from "node:fs/promises";
+import { access, mkdir as mkdir4, readFile as readFile7, readdir as readdir2, rm as rm4, writeFile as writeFile4 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import path7 from "node:path";
 import { promisify as promisify2 } from "node:util";
@@ -63989,7 +64057,7 @@ async function inspectRunnerService(options) {
   const paths = runnerServicePaths(options.homeDir, safeName);
   const label = serviceLabel(safeName);
   const installed = await fileExists(paths.launchAgentPath);
-  const plist = installed ? await readFile6(paths.launchAgentPath, "utf8").catch(() => null) : null;
+  const plist = installed ? await readFile7(paths.launchAgentPath, "utf8").catch(() => null) : null;
   const programArgs = plist ? extractProgramArguments(plist) : [];
   const appUrl2 = plist ? extractPlistEnvironmentValue(plist, `${cliBrand.envPrefix}_APP_URL`) : null;
   const urlPolicyEnv = extractPlistEnvironmentValue(plist ?? "", allowInsecureAppUrlEnv) === "1" ? "set" : "unset";
@@ -64257,7 +64325,7 @@ async function fileExists(file2) {
 }
 async function readTail(file2, maxBytes) {
   try {
-    const content = await readFile6(file2, "utf8");
+    const content = await readFile7(file2, "utf8");
     return content.length > maxBytes ? content.slice(content.length - maxBytes) : content;
   } catch {
     return null;
@@ -64405,7 +64473,7 @@ function parseSemver2(value) {
 import { execFile as execFileCallback5, spawn } from "node:child_process";
 import { createHash as createHash4, randomUUID } from "node:crypto";
 import { constants as fsConstants4 } from "node:fs";
-import { access as access3, chmod as chmod2, lstat as lstat2, mkdir as mkdir6, open as open2, readFile as readFile8, rename as rename2, rm as rm6, statfs, writeFile as writeFile6 } from "node:fs/promises";
+import { access as access3, chmod as chmod2, lstat as lstat2, mkdir as mkdir6, open as open2, readFile as readFile9, rename as rename2, rm as rm6, statfs, writeFile as writeFile6 } from "node:fs/promises";
 import { cpus, homedir as homedir5, hostname as hostname3, platform, totalmem, tmpdir as tmpdir2 } from "node:os";
 import path10 from "node:path";
 import { setTimeout as sleep3 } from "node:timers/promises";
@@ -64415,7 +64483,7 @@ import { promisify as promisify5 } from "node:util";
 import { execFile as execFileCallback4 } from "node:child_process";
 import { createHash as createHash3, randomBytes } from "node:crypto";
 import { constants as fsConstants3 } from "node:fs";
-import { chmod, link, lstat, mkdir as mkdir5, mkdtemp, open, readdir as readdir3, readFile as readFile7, realpath, rename, rm as rm5, stat as stat4, writeFile as writeFile5 } from "node:fs/promises";
+import { chmod, link, lstat, mkdir as mkdir5, mkdtemp, open, readdir as readdir3, readFile as readFile8, realpath, rename, rm as rm5, stat as stat4, writeFile as writeFile5 } from "node:fs/promises";
 import os3 from "node:os";
 import path8 from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
@@ -64527,7 +64595,7 @@ async function provisionIsolatedClaudeConfigDir(base, configDir, onRepair) {
   const source = resolveSourceClaudeConfigDir(base);
   for (const file2 of CLAUDE_CONFIG_AUTH_FILES) {
     try {
-      const data = await readFile7(path8.join(source, file2));
+      const data = await readFile8(path8.join(source, file2));
       await writeFileAtomicNoFollow(path8.join(configDir, file2), data, { mode: 384 });
     } catch {
     }
@@ -64730,7 +64798,7 @@ trust_level = "untrusted"
     await rm5(dest, { recursive: true, force: true });
   }
   const source = resolveSourceCodexHomeDir(base);
-  const data = await readFile7(path8.join(source, CODEX_HOME_AUTH_FILE)).catch(() => null);
+  const data = await readFile8(path8.join(source, CODEX_HOME_AUTH_FILE)).catch(() => null);
   if (data === null) {
     return homeDir;
   }
@@ -64813,7 +64881,7 @@ async function acquireCodexHomeLock(homeDir, options = {}) {
       ino = String((await handle.stat()).ino);
     } catch (error51) {
       await handle.close().catch(() => void 0);
-      const stillOurs = await readFile7(lockPath, "utf8").then((raw) => JSON.parse(raw).nonce === nonce).catch(() => false);
+      const stillOurs = await readFile8(lockPath, "utf8").then((raw) => JSON.parse(raw).nonce === nonce).catch(() => false);
       if (stillOurs) {
         await rm5(lockPath, { force: true }).catch(() => void 0);
       }
@@ -64856,7 +64924,7 @@ async function breakCodexHomeLock(lockPath, expected) {
   }
   let raw;
   try {
-    raw = await readFile7(lockPath, "utf8");
+    raw = await readFile8(lockPath, "utf8");
   } catch {
     return;
   }
@@ -64873,7 +64941,7 @@ async function judgeCodexHomeLock(lockPath, staleMs) {
   }
   let raw;
   try {
-    raw = await readFile7(lockPath, "utf8");
+    raw = await readFile8(lockPath, "utf8");
   } catch (error51) {
     if (error51.code === "ENOENT") {
       return { stale: false, identity: null };
@@ -66436,7 +66504,7 @@ async function migrateOneLegacyCodexHome(legacyHome, newHome, io) {
 }
 async function loadState(filePath, expectedTenantId) {
   try {
-    const parsed = JSON.parse(await readFile8(filePath, "utf8"));
+    const parsed = JSON.parse(await readFile9(filePath, "utf8"));
     if (typeof parsed.runner_id === "string" && typeof parsed.runner_secret === "string") {
       if (expectedTenantId && parsed.tenant_id !== expectedTenantId) {
         return null;
@@ -68259,7 +68327,7 @@ async function reconcileOrphanedInFlightWorkOrders(deps) {
         const transcriptPath = await findClaudeTranscriptPath(entry.claude_config_dir, entry.claude_session_id);
         if (transcriptPath) {
           try {
-            const content = await readFile8(transcriptPath, "utf8");
+            const content = await readFile9(transcriptPath, "utf8");
             verdict = classifyClaudeTranscript(content);
           } catch {
             verdict = { kind: "missing" };