@sideboard-ai/core 0.1.258 → 0.1.261

package/dist/agents/cursor-runner.js

@@ -1,9 +1,13 @@
 #!/usr/bin/env node
+import {
+  clipAgentEventForEmit
+} from "../chunk-HHEKVR6C.js";
 import {
   createAgentStreamCoalescer
 } from "../chunk-AXQ4ZWHK.js";
 import {
   CURSOR_SDK_INSTALL_HINT,
+  TOOL_RESULT_STORE_MAX_CHARS,
   cursorCostOnlyUsageEvent,
   cursorDeltaToEvents,
   cursorSdkHasExpectedExports,
@@ -15,15 +19,16 @@ import {
   importCursorSdk,
   looksLikeCursorHttp2StreamClose,
   resolveCursorSdkRoot
-} from "../chunk-VVHHBOIA.js";
-import {
-  cursorSdkStoreDir
-} from "../chunk-UWQ6UCIB.js";
-import "../chunk-EHT2DRT4.js";
+} from "../chunk-WV7KJH2E.js";
+import "../chunk-6K64FJDD.js";
 import "../chunk-QVN2WOKJ.js";
 import {
   dropNestedElectronEnvFromProcess
 } from "../chunk-4TR3HZFT.js";
+import {
+  cursorSdkStoreDir
+} from "../chunk-UWQ6UCIB.js";
+import "../chunk-EHT2DRT4.js";
 
 // src/agents/cursor-runner.ts
 import { mkdirSync } from "fs";
@@ -81,7 +86,7 @@ async function retryOnceOnRetryableCursorError(fn, onRetry, delayMs = CURSOR_RET
     if (!isRetryableCursorTransportError(err)) throw err;
     onRetry?.(err);
     if (delayMs > 0) {
-      await new Promise((resolve) => setTimeout(resolve, delayMs));
+      await new Promise((resolve2) => setTimeout(resolve2, delayMs));
     }
     return fn();
   }
@@ -109,8 +114,8 @@ async function* iterateUntilIdle(iterable, idleMs, onIdle, activity) {
       let idleTimer;
       const raced = await Promise.race([
         pending.then((result) => ({ kind: "item", result })),
-        new Promise((resolve) => {
-          idleTimer = setTimeout(() => resolve({ kind: "idle" }), waitMs);
+        new Promise((resolve2) => {
+          idleTimer = setTimeout(() => resolve2({ kind: "idle" }), waitMs);
           idleTimer.unref?.();
         })
       ]);
@@ -134,6 +139,138 @@ async function* iterateUntilIdle(iterable, idleMs, onIdle, activity) {
   }
 }
 
+// src/agents/sliced-file-read.ts
+import { readFileSync, realpathSync, statSync } from "fs";
+import { isAbsolute, relative, resolve, sep } from "path";
+var SLICED_READ_DEFAULT_LIMIT = 200;
+var SLICED_READ_MAX_LINE_CHARS = 2e3;
+var SLICED_READ_DESCRIPTION = "Read a text file. Defaults to 200 lines (and a small char budget). Pass offset (1-based) + limit to continue \u2014 never request the whole file when it is large.";
+var SLICED_READ_INPUT_SCHEMA = {
+  type: "object",
+  properties: {
+    path: {
+      type: "string",
+      description: "Absolute or cwd-relative path inside the worktree."
+    },
+    offset: {
+      type: "number",
+      description: "1-based start line (default 1)."
+    },
+    limit: {
+      type: "number",
+      description: `Max lines to return (default ${SLICED_READ_DEFAULT_LIMIT}).`
+    }
+  },
+  required: ["path"]
+};
+function realpathOrSelf(path) {
+  try {
+    return realpathSync(path);
+  } catch {
+    return resolve(path);
+  }
+}
+function isOutsideWorktree(root, abs) {
+  const rel = relative(root, abs);
+  return rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute(rel);
+}
+function resolveWithinCwd(cwd, input) {
+  const root = realpathOrSelf(cwd);
+  const abs = isAbsolute(input) ? resolve(input) : resolve(root, input);
+  if (isOutsideWorktree(root, abs)) {
+    throw new Error(`Path is outside the worktree: ${input}`);
+  }
+  const real = realpathOrSelf(abs);
+  if (isOutsideWorktree(root, real)) {
+    throw new Error(`Path is outside the worktree: ${input}`);
+  }
+  return real;
+}
+function capLine(line) {
+  if (line.length <= SLICED_READ_MAX_LINE_CHARS) return line;
+  return `${line.slice(0, SLICED_READ_MAX_LINE_CHARS)}\u2026(${line.length - SLICED_READ_MAX_LINE_CHARS} more chars on this line)`;
+}
+function looksBinary(buf) {
+  const n = Math.min(buf.length, 8192);
+  for (let i = 0; i < n; i += 1) {
+    if (buf[i] === 0) return true;
+  }
+  return false;
+}
+function asPositiveInt(value, fallback) {
+  const n = typeof value === "number" ? value : Number(value);
+  if (!Number.isFinite(n)) return fallback;
+  return Math.max(1, Math.floor(n));
+}
+function executeSlicedFileRead(cwd, args) {
+  const rawPath = typeof args.path === "string" ? args.path.trim() : "";
+  if (!rawPath) return "Error: path is required.";
+  let abs;
+  try {
+    abs = resolveWithinCwd(cwd, rawPath);
+  } catch (err) {
+    return `Error: ${err instanceof Error ? err.message : String(err)}`;
+  }
+  let buf;
+  try {
+    const st = statSync(abs);
+    if (!st.isFile()) return `Error: not a file: ${rawPath}`;
+    buf = readFileSync(abs);
+  } catch (err) {
+    return `Error: ${err instanceof Error ? err.message : String(err)}`;
+  }
+  if (looksBinary(buf)) {
+    return `Error: ${rawPath} looks binary (${buf.length} bytes). Do not dump it into the turn.`;
+  }
+  const text = buf.toString("utf8");
+  const lines = text.split("\n");
+  if (lines.length > 0 && lines[lines.length - 1] === "") lines.pop();
+  const totalLines = lines.length;
+  const offset = asPositiveInt(args.offset, 1);
+  const limit = asPositiveInt(args.limit, SLICED_READ_DEFAULT_LIMIT);
+  const start = Math.min(offset, totalLines + 1);
+  const end = Math.min(start + limit - 1, totalLines);
+  const numbered = [];
+  let used = 0;
+  let stoppedEarly = false;
+  for (let i = start; i <= end; i += 1) {
+    const row = `${String(i).padStart(6, " ")}|${capLine(lines[i - 1] ?? "")}`;
+    if (used + row.length + 1 > TOOL_RESULT_STORE_MAX_CHARS && numbered.length > 0) {
+      stoppedEarly = true;
+      break;
+    }
+    numbered.push(row);
+    used += row.length + 1;
+  }
+  const header = `${rawPath} (${totalLines} lines, ${buf.length} bytes)`;
+  if (totalLines === 0) return `${header}
+(empty file)`;
+  if (start > totalLines) {
+    return `${header}
+offset ${offset} is past EOF. Last line is ${totalLines}.`;
+  }
+  const shownEnd = start + numbered.length - 1;
+  const truncated = stoppedEarly || shownEnd < totalLines;
+  const body = numbered.join("\n");
+  if (!truncated && start === 1) return `${header}
+${body}`;
+  const next = shownEnd + 1;
+  const hint = truncated ? `
+
+\u2026truncated; ${totalLines - shownEnd} lines remain. Re-call with offset=${next} (and limit) \u2014 do not read the whole file.` : start > 1 ? `
+
+(lines ${start}\u2013${shownEnd} of ${totalLines})` : "";
+  return `${header}
+${body}${hint}`;
+}
+function slicedReadCustomToolConfig(cwd) {
+  return {
+    description: SLICED_READ_DESCRIPTION,
+    inputSchema: SLICED_READ_INPUT_SCHEMA,
+    execute: (args) => executeSlicedFileRead(cwd, args)
+  };
+}
+
 // src/agents/cursor-model-selection.ts
 function buildCursorModelSelection(model, opts) {
   const raw = model && model.trim() || "";
@@ -151,7 +288,7 @@ function buildCursorModelSelection(model, opts) {
 // src/agents/cursor-runner.ts
 dropNestedElectronEnvFromProcess();
 function emit(event) {
-  process.stdout.write(`${JSON.stringify(event)}
+  process.stdout.write(`${JSON.stringify(clipAgentEventForEmit(event, process.cwd()))}
 `);
 }
 function localAgentStore(Store, threadId) {
@@ -227,9 +364,13 @@ async function main() {
   const mode = req.planMode ? "plan" : "agent";
   const store = localAgentStore(JsonlLocalAgentStore, req.threadId);
   const isolateSources = [];
+  const customTools = {
+    read: slicedReadCustomToolConfig(req.cwd)
+  };
   const local = withCursorLocalHangGuards({
     cwd: req.cwd,
     store,
+    customTools,
     ...req.isolateAmbientMcp ? { settingSources: isolateSources } : {}
   });
   const mcpServers = req.mcpServers && Object.keys(req.mcpServers).length > 0 ? req.mcpServers : void 0;
@@ -239,6 +380,7 @@ async function main() {
     mode,
     local,
     name: "Sideboard",
+    disallowedTools: ["read"],
     ...mcpServers ? { mcpServers } : {}
   };
   const retryTransport = (fn) => retryOnceOnRetryableCursorError(fn, (err) => {
@@ -255,6 +397,7 @@ async function main() {
           model,
           mode,
           local,
+          disallowedTools: ["read"],
           ...mcpServers ? { mcpServers } : {}
         })
       ) : await createAgent();
@@ -303,8 +446,8 @@ async function main() {
     shuttingDown = true;
     void Promise.race([
       cancelLiveRun(),
-      new Promise((resolve) => {
-        setTimeout(resolve, 2e3);
+      new Promise((resolve2) => {
+        setTimeout(resolve2, 2e3);
       })
     ]).finally(() => process.exit(1));
   };
@@ -359,8 +502,8 @@ async function main() {
       stream.flush();
       const result = streamIdle ? await Promise.race([
         run.wait(),
-        new Promise((resolve) => {
-          setTimeout(() => resolve({ status: "cancelled" }), 5e3);
+        new Promise((resolve2) => {
+          setTimeout(() => resolve2({ status: "cancelled" }), 5e3);
         })
       ]) : await run.wait();
       if (result.status === "error") {

package/dist/{agents-HZP7YEKC.js → agents-IKVUGW5H.js}

@@ -39,6 +39,7 @@ import {
   listModelsForAgent,
   listOpencodeModels,
   loginAgent,
+  loginManagedAccount,
   mcpStatusThinkingFromClaudeInit,
   openInSystemTerminal,
   opencodeAdapter,
@@ -55,15 +56,13 @@ import {
   resolveQuotaFallbackAgent,
   turnCostUsdFromCursorUsage,
   whichOnPath
-} from "./chunk-F7ANS66U.js";
-import "./chunk-PJK24CN3.js";
+} from "./chunk-4F7J6UWD.js";
+import "./chunk-JTNY5CK4.js";
+import "./chunk-FSZ7YYFQ.js";
+import "./chunk-N2WW62LF.js";
 import "./chunk-XAISOBBG.js";
 import "./chunk-P2BSMNHB.js";
 import "./chunk-VKQGAWHY.js";
-import "./chunk-HCNCZPDL.js";
-import "./chunk-D6JWYJ4P.js";
-import "./chunk-RJC2MKXN.js";
-import "./chunk-H547WSSZ.js";
 import "./chunk-DD67JWTN.js";
 import {
   conductorBundledBinDir,
@@ -81,12 +80,15 @@ import {
   assertOrchestratorCapableAgent,
   coerceOrchestratorAgent,
   isOrchestratorCapableAgent
-} from "./chunk-452Y24PW.js";
+} from "./chunk-VIC6TDYT.js";
 import "./chunk-NSTQ6QKD.js";
-import "./chunk-KGZBYWZ3.js";
-import "./chunk-Z2LGMV6C.js";
 import "./chunk-WWUABK6B.js";
 import "./chunk-FJZWM2ON.js";
+import "./chunk-CEMNIGQH.js";
+import "./chunk-TJ673EZT.js";
+import "./chunk-H547WSSZ.js";
+import "./chunk-KGZBYWZ3.js";
+import "./chunk-Z2LGMV6C.js";
 export {
   CLAUDE_MODEL_CATALOG,
   CURSOR_SDK_INSTALL_HINT,
@@ -134,6 +136,7 @@ export {
   listModelsForAgent,
   listOpencodeModels,
   loginAgent,
+  loginManagedAccount,
   mcpStatusThinkingFromClaudeInit,
   npmGlobalNodeModules,
   npmGlobalPrefix,

package/dist/{agents-FSUI5MET.js → agents-J2P4KNEY.js}

@@ -34,6 +34,7 @@ import {
   listModelsForAgent,
   listOpencodeModels,
   loginAgent,
+  loginManagedAccount,
   mcpStatusThinkingFromClaudeInit,
   openInSystemTerminal,
   opencodeAdapter,
@@ -46,12 +47,11 @@ import {
   resolveLoginCommand,
   resolveQuotaFallbackAgent,
   whichOnPath
-} from "./chunk-R4DWUBOL.js";
-import "./chunk-BYRZS2S2.js";
-import "./chunk-63YSFXLT.js";
-import "./chunk-6K64FJDD.js";
+} from "./chunk-ABPNIYRS.js";
+import "./chunk-X2OTZ36G.js";
+import "./chunk-U3AOJLH3.js";
 import "./chunk-2P4XKWV2.js";
-import "./chunk-5F4YFGHL.js";
+import "./chunk-LDXSAVWO.js";
 import "./chunk-ROPGQRPU.js";
 import "./chunk-N7WZ6NIN.js";
 import {
@@ -62,19 +62,8 @@ import {
   preferredCursorCostCents,
   resolveCursorSdkRoot,
   turnCostUsdFromCursorUsage
-} from "./chunk-VVHHBOIA.js";
-import {
-  ORCHESTRATOR_AGENT_KINDS,
-  assertOrchestratorCapableAgent,
-  coerceOrchestratorAgent,
-  isOrchestratorCapableAgent
-} from "./chunk-KJM3E3NF.js";
-import "./chunk-WDRMZKVB.js";
-import "./chunk-JT7R45JB.js";
-import "./chunk-4723RAO3.js";
-import "./chunk-UWQ6UCIB.js";
-import "./chunk-77WWLBCI.js";
-import "./chunk-EHT2DRT4.js";
+} from "./chunk-WV7KJH2E.js";
+import "./chunk-6K64FJDD.js";
 import {
   conductorBundledBinDir,
   enrichPathWithNpmGlobalBin,
@@ -86,7 +75,20 @@ import {
   resolveCommandBinarySync,
   withExportedPath
 } from "./chunk-QVN2WOKJ.js";
+import {
+  ORCHESTRATOR_AGENT_KINDS,
+  assertOrchestratorCapableAgent,
+  coerceOrchestratorAgent,
+  isOrchestratorCapableAgent
+} from "./chunk-6PFZ6XO7.js";
 import "./chunk-4TR3HZFT.js";
+import "./chunk-WDRMZKVB.js";
+import "./chunk-3HO2OY5T.js";
+import "./chunk-JT7R45JB.js";
+import "./chunk-FWNL62VA.js";
+import "./chunk-UWQ6UCIB.js";
+import "./chunk-77WWLBCI.js";
+import "./chunk-EHT2DRT4.js";
 export {
   CLAUDE_MODEL_CATALOG,
   CURSOR_SDK_INSTALL_HINT,
@@ -134,6 +136,7 @@ export {
   listModelsForAgent,
   listOpencodeModels,
   loginAgent,
+  loginManagedAccount,
   mcpStatusThinkingFromClaudeInit,
   npmGlobalNodeModules,
   npmGlobalPrefix,

package/dist/{app-settings-CLARFJUX.js → app-settings-OM7H64YM.js}

@@ -11,6 +11,7 @@ import {
   PROFILE_NOTES_MAX,
   REVIEW_LABEL_MAX,
   USAGE_ON_LIMIT_VALUES,
+  addManagedAccount,
   agentDoneSound,
   appSettingsPath,
   applyAppEnvironment,
@@ -72,6 +73,8 @@ import {
   orchestrationQuotaFallbackAgent,
   orchestrationQuotaOnLimit,
   readViewerContext,
+  removeManagedAccount,
+  renameManagedAccount,
   resolveAccountProfile,
   resolveAccountProfileFromSettings,
   resolveAgentExecutable,
@@ -88,6 +91,7 @@ import {
   saveAbleTimeConnection,
   saveAppSettings,
   saveLinearOAuth,
+  selectManagedAccount,
   showCostEnabled,
   slackAppLevelToken,
   slackListenEnabled,
@@ -104,12 +108,13 @@ import {
   updateProjectProfileSettings,
   usageOnLimit,
   writeViewerContext
-} from "./chunk-452Y24PW.js";
+} from "./chunk-VIC6TDYT.js";
 import "./chunk-NSTQ6QKD.js";
-import "./chunk-KGZBYWZ3.js";
-import "./chunk-Z2LGMV6C.js";
 import "./chunk-WWUABK6B.js";
 import "./chunk-FJZWM2ON.js";
+import "./chunk-CEMNIGQH.js";
+import "./chunk-KGZBYWZ3.js";
+import "./chunk-Z2LGMV6C.js";
 export {
   AGENT_DONE_SOUNDS,
   CHAT_TEXT_SCALES,
@@ -121,6 +126,7 @@ export {
   PROFILE_NOTES_MAX,
   REVIEW_LABEL_MAX,
   USAGE_ON_LIMIT_VALUES,
+  addManagedAccount,
   agentDoneSound,
   appSettingsPath,
   applyAppEnvironment,
@@ -182,6 +188,8 @@ export {
   orchestrationQuotaFallbackAgent,
   orchestrationQuotaOnLimit,
   readViewerContext,
+  removeManagedAccount,
+  renameManagedAccount,
   resolveAccountProfile,
   resolveAccountProfileFromSettings,
   resolveAgentExecutable,
@@ -198,6 +206,7 @@ export {
   saveAbleTimeConnection,
   saveAppSettings,
   saveLinearOAuth,
+  selectManagedAccount,
   showCostEnabled,
   slackAppLevelToken,
   slackListenEnabled,

package/dist/{app-settings-ONYJ36XH.js → app-settings-VQEUCONM.js}

@@ -9,6 +9,7 @@ import {
   PROFILE_NOTES_MAX,
   REVIEW_LABEL_MAX,
   USAGE_ON_LIMIT_VALUES,
+  addManagedAccount,
   agentDoneSound,
   appSettingsPath,
   applyAppEnvironment,
@@ -70,6 +71,8 @@ import {
   orchestrationQuotaFallbackAgent,
   orchestrationQuotaOnLimit,
   readViewerContext,
+  removeManagedAccount,
+  renameManagedAccount,
   resolveAccountProfile,
   resolveAccountProfileFromSettings,
   resolveAgentExecutable,
@@ -86,6 +89,7 @@ import {
   saveAbleTimeConnection,
   saveAppSettings,
   saveLinearOAuth,
+  selectManagedAccount,
   showCostEnabled,
   slackAppLevelToken,
   slackListenEnabled,
@@ -102,12 +106,13 @@ import {
   updateProjectProfileSettings,
   usageOnLimit,
   writeViewerContext
-} from "./chunk-KJM3E3NF.js";
+} from "./chunk-6PFZ6XO7.js";
+import "./chunk-4TR3HZFT.js";
 import "./chunk-WDRMZKVB.js";
+import "./chunk-3HO2OY5T.js";
 import "./chunk-JT7R45JB.js";
 import "./chunk-77WWLBCI.js";
 import "./chunk-EHT2DRT4.js";
-import "./chunk-4TR3HZFT.js";
 export {
   AGENT_DONE_SOUNDS,
   CHAT_TEXT_SCALES,
@@ -119,6 +124,7 @@ export {
   PROFILE_NOTES_MAX,
   REVIEW_LABEL_MAX,
   USAGE_ON_LIMIT_VALUES,
+  addManagedAccount,
   agentDoneSound,
   appSettingsPath,
   applyAppEnvironment,
@@ -180,6 +186,8 @@ export {
   orchestrationQuotaFallbackAgent,
   orchestrationQuotaOnLimit,
   readViewerContext,
+  removeManagedAccount,
+  renameManagedAccount,
   resolveAccountProfile,
   resolveAccountProfileFromSettings,
   resolveAgentExecutable,
@@ -196,6 +204,7 @@ export {
   saveAbleTimeConnection,
   saveAppSettings,
   saveLinearOAuth,
+  selectManagedAccount,
   showCostEnabled,
   slackAppLevelToken,
   slackListenEnabled,

package/dist/chunk-3HO2OY5T.js

@@ -0,0 +1,159 @@
+import {
+  appDataDir
+} from "./chunk-EHT2DRT4.js";
+
+// src/store/managed-accounts.ts
+import { existsSync, mkdirSync, copyFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+var EMPTY_MANAGED_ACCOUNTS = {
+  accounts: [],
+  activeClaudeAccountId: null,
+  activeCodexAccountId: null
+};
+function isManagedAccountKind(value) {
+  return value === "claude" || value === "codex";
+}
+function systemConfigDir(kind) {
+  return kind === "claude" ? join(homedir(), ".claude") : join(homedir(), ".codex");
+}
+function managedAccountConfigDir(kind, id) {
+  return join(appDataDir(), "accounts", kind, id);
+}
+function activeAccountId(kind, state) {
+  return kind === "claude" ? state.activeClaudeAccountId : state.activeCodexAccountId;
+}
+function findManagedAccount(state, id, kind) {
+  if (!id) return null;
+  return state.accounts.find((a) => a.id === id && (kind == null || a.kind === kind)) ?? null;
+}
+function resolveAccountForThread(thread, state) {
+  if (thread.agent !== "claude" && thread.agent !== "codex") return null;
+  const kind = thread.agent;
+  if (thread.accountId !== void 0) {
+    return findManagedAccount(state, thread.accountId, kind);
+  }
+  return findManagedAccount(state, activeAccountId(kind, state), kind);
+}
+function accountIdToPin(thread, state) {
+  if (thread.agent !== "claude" && thread.agent !== "codex") return void 0;
+  if (thread.accountId !== void 0) return thread.accountId;
+  return activeAccountId(thread.agent, state);
+}
+function applyManagedAccountEnv(env, agent, account) {
+  if (!account) return;
+  if (agent === "claude" && account.kind === "claude") {
+    env.CLAUDE_CONFIG_DIR = account.configDir;
+  }
+  if (agent === "codex" && account.kind === "codex") {
+    env.CODEX_HOME = account.configDir;
+  }
+}
+function nextManagedAccount(kind, currentId, state) {
+  const list = state.accounts.filter((a) => a.kind === kind);
+  if (list.length === 0) return null;
+  const slots = [
+    { accountId: null, label: "System default" },
+    ...list.map((a) => ({ accountId: a.id, label: a.label }))
+  ];
+  const idx = slots.findIndex((s) => s.accountId === (currentId ?? null));
+  const from = idx < 0 ? 0 : idx;
+  const next = slots[(from + 1) % slots.length];
+  if (!next || next.accountId === (currentId ?? null)) return null;
+  return next;
+}
+function ensureManagedAccountDir(kind, id) {
+  const dir = managedAccountConfigDir(kind, id);
+  mkdirSync(dir, { recursive: true });
+  mirrorHostConfig(kind, dir);
+  return dir;
+}
+function mirrorHostConfig(kind, destDir) {
+  const src = systemConfigDir(kind);
+  const files = kind === "claude" ? ["settings.json"] : ["config.toml"];
+  for (const name of files) {
+    const from = join(src, name);
+    const to = join(destDir, name);
+    if (!existsSync(from) || existsSync(to)) continue;
+    try {
+      copyFileSync(from, to);
+    } catch {
+    }
+  }
+}
+function normalizeManagedAccounts(raw) {
+  if (!raw || typeof raw !== "object") return { ...EMPTY_MANAGED_ACCOUNTS };
+  const source = raw;
+  const accounts = [];
+  if (Array.isArray(source.accounts)) {
+    for (const item of source.accounts) {
+      if (!item || typeof item !== "object") continue;
+      const rec = item;
+      if (typeof rec.id !== "string" || !rec.id.trim()) continue;
+      if (!isManagedAccountKind(rec.kind)) continue;
+      if (typeof rec.label !== "string" || !rec.label.trim()) continue;
+      if (typeof rec.configDir !== "string" || !rec.configDir.trim()) continue;
+      accounts.push({
+        id: rec.id.trim(),
+        kind: rec.kind,
+        label: rec.label.trim().slice(0, 80),
+        configDir: rec.configDir.trim(),
+        createdAt: typeof rec.createdAt === "string" && rec.createdAt.trim() ? rec.createdAt.trim() : (/* @__PURE__ */ new Date()).toISOString()
+      });
+    }
+  }
+  const claudeId = typeof source.activeClaudeAccountId === "string" && source.activeClaudeAccountId.trim() ? source.activeClaudeAccountId.trim() : null;
+  const codexId = typeof source.activeCodexAccountId === "string" && source.activeCodexAccountId.trim() ? source.activeCodexAccountId.trim() : null;
+  return {
+    accounts,
+    activeClaudeAccountId: accounts.some((a) => a.id === claudeId && a.kind === "claude") ? claudeId : null,
+    activeCodexAccountId: accounts.some((a) => a.id === codexId && a.kind === "codex") ? codexId : null
+  };
+}
+function withAddedAccount(state, account) {
+  const accounts = [...state.accounts.filter((a) => a.id !== account.id), account];
+  if (account.kind === "claude") {
+    return { ...state, accounts, activeClaudeAccountId: account.id };
+  }
+  return { ...state, accounts, activeCodexAccountId: account.id };
+}
+function withSelectedAccount(state, kind, accountId) {
+  if (accountId && !findManagedAccount(state, accountId, kind)) {
+    accountId = null;
+  }
+  if (kind === "claude") return { ...state, activeClaudeAccountId: accountId };
+  return { ...state, activeCodexAccountId: accountId };
+}
+function withRemovedAccount(state, id) {
+  const accounts = state.accounts.filter((a) => a.id !== id);
+  return {
+    accounts,
+    activeClaudeAccountId: state.activeClaudeAccountId === id ? null : state.activeClaudeAccountId,
+    activeCodexAccountId: state.activeCodexAccountId === id ? null : state.activeCodexAccountId
+  };
+}
+function loginEnvPrefix(account) {
+  const key = account.kind === "claude" ? "CLAUDE_CONFIG_DIR" : "CODEX_HOME";
+  const escaped = account.configDir.replace(/'/g, `'\\''`);
+  return `export ${key}='${escaped}'`;
+}
+
+export {
+  EMPTY_MANAGED_ACCOUNTS,
+  isManagedAccountKind,
+  systemConfigDir,
+  managedAccountConfigDir,
+  activeAccountId,
+  findManagedAccount,
+  resolveAccountForThread,
+  accountIdToPin,
+  applyManagedAccountEnv,
+  nextManagedAccount,
+  ensureManagedAccountDir,
+  mirrorHostConfig,
+  normalizeManagedAccounts,
+  withAddedAccount,
+  withSelectedAccount,
+  withRemovedAccount,
+  loginEnvPrefix
+};