@slayzone/computer 0.36.1 → 0.36.2

package/dist/bin.cjs

@@ -21,9 +21,9 @@ var __commonJS = (cb, mod) => function __require() {
     throw mod = 0, e;
   }
 };
-var __export = (target, all) => {
+var __export = (target2, all) => {
   for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
+    __defProp(target2, name, { get: all[name], enumerable: true });
 };
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
@@ -33,12 +33,12 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+var __toESM = (mod, isNodeMode, target2) => (target2 = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
   // If the importer is in node compatibility mode or this is not an ESM
   // file that has been converted to a CommonJS file using a Babel-
   // compatible transform (i.e. "__esModule" has not been set), then set
   // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target2, "default", { value: mod, enumerable: true }) : target2,
   mod
 ));
 
@@ -126,17 +126,17 @@ var require_buffer_util = __commonJS({
     function concat(list, totalLength) {
       if (list.length === 0) return EMPTY_BUFFER;
       if (list.length === 1) return list[0];
-      const target = Buffer.allocUnsafe(totalLength);
+      const target2 = Buffer.allocUnsafe(totalLength);
       let offset = 0;
       for (let i = 0; i < list.length; i++) {
         const buf = list[i];
-        target.set(buf, offset);
+        target2.set(buf, offset);
         offset += buf.length;
       }
       if (offset < totalLength) {
-        return new FastBuffer(target.buffer, target.byteOffset, offset);
+        return new FastBuffer(target2.buffer, target2.byteOffset, offset);
       }
-      return target;
+      return target2;
     }
     function _mask(source, mask, output2, offset, length) {
       for (let i = 0; i < length; i++) {
@@ -1560,29 +1560,29 @@ var require_sender = __commonJS({
           offset += 2;
           payloadLength = 126;
         }
-        const target = Buffer.allocUnsafe(merge2 ? dataLength + offset : offset);
-        target[0] = options.fin ? options.opcode | 128 : options.opcode;
-        if (options.rsv1) target[0] |= 64;
-        target[1] = payloadLength;
+        const target2 = Buffer.allocUnsafe(merge2 ? dataLength + offset : offset);
+        target2[0] = options.fin ? options.opcode | 128 : options.opcode;
+        if (options.rsv1) target2[0] |= 64;
+        target2[1] = payloadLength;
         if (payloadLength === 126) {
-          target.writeUInt16BE(dataLength, 2);
+          target2.writeUInt16BE(dataLength, 2);
         } else if (payloadLength === 127) {
-          target[2] = target[3] = 0;
-          target.writeUIntBE(dataLength, 4, 6);
-        }
-        if (!options.mask) return [target, data];
-        target[1] |= 128;
-        target[offset - 4] = mask[0];
-        target[offset - 3] = mask[1];
-        target[offset - 2] = mask[2];
-        target[offset - 1] = mask[3];
-        if (skipMasking) return [target, data];
+          target2[2] = target2[3] = 0;
+          target2.writeUIntBE(dataLength, 4, 6);
+        }
+        if (!options.mask) return [target2, data];
+        target2[1] |= 128;
+        target2[offset - 4] = mask[0];
+        target2[offset - 3] = mask[1];
+        target2[offset - 2] = mask[2];
+        target2[offset - 1] = mask[3];
+        if (skipMasking) return [target2, data];
         if (merge2) {
-          applyMask(data, mask, target, offset, dataLength);
-          return [target];
+          applyMask(data, mask, target2, offset, dataLength);
+          return [target2];
         }
         applyMask(data, mask, data, 0, dataLength);
-        return [target, data];
+        return [target2, data];
       }
       /**
        * Sends a close message to the other peer.
@@ -2180,7 +2180,7 @@ var require_extension = __commonJS({
       if (dest[name] === void 0) dest[name] = [elem];
       else dest[name].push(elem);
     }
-    function parse3(header) {
+    function parse5(header) {
       const offers = /* @__PURE__ */ Object.create(null);
       let params = /* @__PURE__ */ Object.create(null);
       let mustUnescape = false;
@@ -2320,7 +2320,7 @@ var require_extension = __commonJS({
         }).join(", ");
       }).join(", ");
     }
-    module2.exports = { format, parse: parse3 };
+    module2.exports = { format, parse: parse5 };
   }
 });
 
@@ -2354,7 +2354,7 @@ var require_websocket = __commonJS({
     var {
       EventTarget: { addEventListener, removeEventListener }
     } = require_event_target();
-    var { format, parse: parse3 } = require_extension();
+    var { format, parse: parse5 } = require_extension();
     var { toBuffer } = require_buffer_util();
     var kAborted = /* @__PURE__ */ Symbol("kAborted");
     var protocolVersions = [8, 13];
@@ -3044,7 +3044,7 @@ var require_websocket = __commonJS({
           }
           let extensions;
           try {
-            extensions = parse3(secWebSocketExtensions);
+            extensions = parse5(secWebSocketExtensions);
           } catch (err) {
             const message = "Invalid Sec-WebSocket-Extensions header";
             abortHandshake(websocket, socket, message);
@@ -3336,7 +3336,7 @@ var require_subprotocol = __commonJS({
   "../../../node_modules/ws/lib/subprotocol.js"(exports2, module2) {
     "use strict";
     var { tokenChars } = require_validation();
-    function parse3(header) {
+    function parse5(header) {
       const protocols = /* @__PURE__ */ new Set();
       let start = -1;
       let end = -1;
@@ -3372,7 +3372,7 @@ var require_subprotocol = __commonJS({
       protocols.add(protocol);
       return protocols;
     }
-    module2.exports = { parse: parse3 };
+    module2.exports = { parse: parse5 };
   }
 });
 
@@ -3779,44 +3779,44 @@ var require_websocket_server = __commonJS({
 
 // ../../shared/platform/src/fs-utils.ts
 async function writeFileIfChanged(filePath, content, mode) {
-  const target = await resolveTarget(filePath);
+  const target2 = await resolveTarget(filePath);
   const buf = Buffer.isBuffer(content) ? content : Buffer.from(content, "utf8");
-  const existing = await safeReadFile(target);
+  const existing = await safeReadFile(target2);
   if (existing && existing.equals(buf)) return false;
-  await import_promises3.default.mkdir(import_path2.default.dirname(target), { recursive: true });
-  const tmp = `${target}.tmp.${import_crypto.default.randomBytes(6).toString("hex")}`;
+  await import_promises3.default.mkdir(import_path2.default.dirname(target2), { recursive: true });
+  const tmp = `${target2}.tmp.${import_crypto.default.randomBytes(6).toString("hex")}`;
   await import_promises3.default.writeFile(tmp, buf);
   if (mode != null && process.platform !== "win32") {
     await import_promises3.default.chmod(tmp, mode);
   }
-  await import_promises3.default.rename(tmp, target);
+  await import_promises3.default.rename(tmp, target2);
   return true;
 }
 async function updateFileAtomically(filePath, merge2, opts = {}) {
   const { mode, retries = 5 } = opts;
-  const target = await resolveTarget(filePath);
-  await import_promises3.default.mkdir(import_path2.default.dirname(target), { recursive: true });
-  const release = await acquireLock(`${target}.lock`);
+  const target2 = await resolveTarget(filePath);
+  await import_promises3.default.mkdir(import_path2.default.dirname(target2), { recursive: true });
+  const release = await acquireLock(`${target2}.lock`);
   try {
     for (let attempt = 0; ; attempt++) {
-      const baseline = await safeReadFile(target);
+      const baseline = await safeReadFile(target2);
       const merged = await merge2(baseline);
       if (merged == null) return false;
       const buf = Buffer.isBuffer(merged) ? merged : Buffer.from(merged, "utf8");
       if (baseline && baseline.equals(buf)) return false;
-      const tmp = `${target}.tmp.${import_crypto.default.randomBytes(6).toString("hex")}`;
+      const tmp = `${target2}.tmp.${import_crypto.default.randomBytes(6).toString("hex")}`;
       await import_promises3.default.writeFile(tmp, buf);
       if (mode != null && process.platform !== "win32") {
         await import_promises3.default.chmod(tmp, mode);
       }
-      if (sameBytes(baseline, await safeReadFile(target))) {
-        await import_promises3.default.rename(tmp, target);
+      if (sameBytes(baseline, await safeReadFile(target2))) {
+        await import_promises3.default.rename(tmp, target2);
         return true;
       }
       await import_promises3.default.rm(tmp, { force: true });
       if (attempt >= retries) {
         throw new Error(
-          `[fs-utils] updateFileAtomically: ${target} kept changing underneath ${retries + 1} merge attempts \u2014 giving up rather than writing a stale merge`
+          `[fs-utils] updateFileAtomically: ${target2} kept changing underneath ${retries + 1} merge attempts \u2014 giving up rather than writing a stale merge`
         );
       }
       await sleep(2 ** attempt + Math.floor(Math.random() * 5));
@@ -3864,7 +3864,7 @@ function sameBytes(a, b) {
   return a.equals(b);
 }
 function sleep(ms) {
-  return new Promise((resolve7) => setTimeout(resolve7, ms));
+  return new Promise((resolve9) => setTimeout(resolve9, ms));
 }
 async function safeReadFile(p) {
   try {
@@ -3876,8 +3876,8 @@ async function safeReadFile(p) {
 }
 async function resolveTarget(p) {
   try {
-    const stat2 = await import_promises3.default.lstat(p);
-    if (stat2.isSymbolicLink()) return await import_promises3.default.realpath(p);
+    const stat3 = await import_promises3.default.lstat(p);
+    if (stat3.isSymbolicLink()) return await import_promises3.default.realpath(p);
   } catch (err) {
     if (!isENOENT(err)) throw err;
   }
@@ -4197,7 +4197,7 @@ var require_ignore = __commonJS({
         // Zero, one or several directories
         // should not use '*', or it will be replaced by the next replacer
         // Check if it is not the last `'/**'`
-        (_, index, str) => index + 6 < str.length ? str.slice(index + 6) === "\\/" ? "(?:\\/[^\\/]+)+" : "(?:\\/[^\\/]+)*" : "\\/.+",
+        (_, index, str2) => index + 6 < str2.length ? str2.slice(index + 6) === "\\/" ? "(?:\\/[^\\/]+)+" : "(?:\\/[^\\/]+)*" : "\\/.+",
         "*"
       ],
       // normal intermediate wildcards
@@ -4436,8 +4436,8 @@ var require_ignore = __commonJS({
       );
       return cut < 0 ? EMPTY : path9.slice(0, cut + 1);
     };
-    var isString = (subject) => typeof subject === "string";
-    var checkPattern = (pattern) => pattern && isString(pattern) && !REGEX_TEST_BLANK_LINE.test(pattern) && !REGEX_INVALID_TRAILING_BACKSLASH.test(pattern) && pattern.indexOf("#") !== 0;
+    var isString2 = (subject) => typeof subject === "string";
+    var checkPattern = (pattern) => pattern && isString2(pattern) && !REGEX_TEST_BLANK_LINE.test(pattern) && !REGEX_INVALID_TRAILING_BACKSLASH.test(pattern) && pattern.indexOf("#") !== 0;
     var splitPattern = (pattern) => pattern.split(REGEX_SPLITALL_CRLF).filter(Boolean);
     var IgnoreRule = class {
       constructor(pattern, mark, body, ignoreCase, negative, prefix) {
@@ -4471,12 +4471,12 @@ var require_ignore = __commonJS({
         return this._make(MODE_CHECK_IGNORE, key);
       }
       _make(mode, key) {
-        const str = pinWildcards(this.regexPrefix.replace(
+        const str2 = pinWildcards(this.regexPrefix.replace(
           REGEX_REPLACE_TRAILING_WILDCARD,
           // It does not need to bind pattern
           TRAILING_WILD_CARD_REPLACERS[mode]
         ));
-        const regex = this.ignoreCase ? new RegExp(str, "i") : new RegExp(str);
+        const regex = this.ignoreCase ? new RegExp(str2, "i") : new RegExp(str2);
         return define(this, key, regex);
       }
     };
@@ -4514,7 +4514,7 @@ var require_ignore = __commonJS({
           this._added = true;
           return;
         }
-        if (isString(pattern)) {
+        if (isString2(pattern)) {
           pattern = {
             pattern
           };
@@ -4532,7 +4532,7 @@ var require_ignore = __commonJS({
       add(pattern) {
         this._added = false;
         makeArray(
-          isString(pattern) ? splitPattern(pattern) : pattern
+          isString2(pattern) ? splitPattern(pattern) : pattern
         ).forEach(this._add, this);
         return this._added;
       }
@@ -4577,7 +4577,7 @@ var require_ignore = __commonJS({
       throw new Ctor(message);
     };
     var checkPath = (path9, originalPath, doThrow) => {
-      if (!isString(path9)) {
+      if (!isString2(path9)) {
         return doThrow(
           `path must be a string, but got \`${originalPath}\``,
           TypeError
@@ -4690,7 +4690,7 @@ var require_ignore = __commonJS({
     var factory = (options) => new Ignore(options);
     var isPathValid = (path9) => checkPath(path9 && checkPath.convert(path9), path9, RETURN_FALSE);
     var setupWindows = () => {
-      const makePosix = (str) => /^\\\\\?\\/.test(str) || /["<>|\u0000-\u001F]+/u.test(str) ? str : str.replace(/\\/g, "/");
+      const makePosix = (str2) => /^\\\\\?\\/.test(str2) || /["<>|\u0000-\u001F]+/u.test(str2) ? str2 : str2.replace(/\\/g, "/");
       checkPath.convert = makePosix;
       const REGEX_TEST_WINDOWS_PATH_ABSOLUTE = /^[a-z]:\//i;
       checkPath.isNotRelative = (path9) => REGEX_TEST_WINDOWS_PATH_ABSOLUTE.test(path9) || isNotRelative(path9);
@@ -4716,11 +4716,11 @@ function parseNotifyVersion(script) {
   return Number.isFinite(n) ? n : 0;
 }
 async function installNotifyScript(opts) {
-  const target = opts.targetPath ?? import_path3.default.join(getHooksDir(), "notify.sh");
+  const target2 = opts.targetPath ?? import_path3.default.join(getHooksDir(), "notify.sh");
   const source = opts.source;
   const incomingV = parseNotifyVersion(source);
   const changed = await updateFileAtomically(
-    target,
+    target2,
     (current) => {
       if (current === null) return source;
       if (incomingV < parseNotifyVersion(current.toString("utf8"))) return null;
@@ -4728,7 +4728,7 @@ async function installNotifyScript(opts) {
     },
     { mode: 493 }
   );
-  return { path: target, changed };
+  return { path: target2, changed };
 }
 var import_path3;
 var init_notify_script_installer = __esm({
@@ -4757,10 +4757,10 @@ var init_hook_paths = __esm({
 
 // ../../shared/platform/src/agent-hooks/claude-hook-installer.ts
 async function installClaudeHooks(opts) {
-  const target = opts.settingsPath ?? getClaudeSettingsPath();
+  const target2 = opts.settingsPath ?? getClaudeSettingsPath();
   const events = opts.events ?? CLAUDE_HOOK_EVENTS;
   let result = { installed: false, eventsAdded: [], reason: "unwritten" };
-  await updateFileAtomically(target, (current) => {
+  await updateFileAtomically(target2, (current) => {
     let settings;
     if (current === null) {
       settings = {};
@@ -4868,10 +4868,10 @@ async function installGeminiHooks(opts) {
       return { installed: false, eventsAdded: [], reason: "gemini binary not on PATH" };
     }
   }
-  const target = opts.settingsPath ?? getGeminiSettingsPath();
+  const target2 = opts.settingsPath ?? getGeminiSettingsPath();
   const events = opts.events ?? GEMINI_HOOK_EVENTS;
   let result = { installed: false, eventsAdded: [], reason: "unwritten" };
-  await updateFileAtomically(target, (current) => {
+  await updateFileAtomically(target2, (current) => {
     let settings;
     if (current === null) {
       settings = {};
@@ -4971,10 +4971,10 @@ async function installCodexHooks(opts) {
       );
     }
   }
-  const target = opts.hooksPath ?? getCodexHooksPath();
+  const target2 = opts.hooksPath ?? getCodexHooksPath();
   const events = opts.events ?? CODEX_HOOK_EVENTS;
   let result = { installed: false, eventsAdded: [], reason: "unwritten" };
-  await updateFileAtomically(target, (current) => {
+  await updateFileAtomically(target2, (current) => {
     let config2;
     if (current === null) {
       config2 = {};
@@ -5041,11 +5041,11 @@ function isManagedSlayzoneHook3(hook) {
   return cmd.includes(".slayzone/hooks/notify.sh") || cmd.includes("/slayzone/hooks/notify.sh");
 }
 async function uninstallCodexWrapper(opts = {}) {
-  const target = opts.wrapperPath ?? import_path4.default.join(getSlayzoneBinDir(), "codex");
+  const target2 = opts.wrapperPath ?? import_path4.default.join(getSlayzoneBinDir(), "codex");
   try {
-    const content = await import_promises10.default.readFile(target, "utf8");
+    const content = await import_promises11.default.readFile(target2, "utf8");
     if (!content.includes("slayzone codex wrapper")) return false;
-    await import_promises10.default.unlink(target);
+    await import_promises11.default.unlink(target2);
     return true;
   } catch (err) {
     if (isENOENT2(err)) return false;
@@ -5064,9 +5064,9 @@ async function probeCodexVersion() {
   }
 }
 function stripSlayzoneBin(pathVar) {
-  const sep5 = process.platform === "win32" ? ";" : ":";
+  const sep6 = process.platform === "win32" ? ";" : ":";
   const ours = getSlayzoneBinDir();
-  return pathVar.split(sep5).filter((p) => p !== ours).join(sep5);
+  return pathVar.split(sep6).filter((p) => p !== ours).join(sep6);
 }
 function parseCodexVersion(raw) {
   const match = raw.match(/(\d+)\.(\d+)(?:\.(\d+))?/);
@@ -5080,18 +5080,18 @@ function isAtLeast(v, min) {
 function isENOENT2(err) {
   return typeof err === "object" && err != null && err.code === "ENOENT";
 }
-var import_promises10, import_path4, import_child_process2, import_util10, execP, MARKER_KEY3, CODEX_HOOK_EVENTS, TOOL_MATCHED_EVENTS3, MIN_CODEX_VERSION;
+var import_promises11, import_path4, import_child_process2, import_util14, execP, MARKER_KEY3, CODEX_HOOK_EVENTS, TOOL_MATCHED_EVENTS3, MIN_CODEX_VERSION;
 var init_codex_hook_installer = __esm({
   "../../shared/platform/src/agent-hooks/codex-hook-installer.ts"() {
     "use strict";
-    import_promises10 = __toESM(require("fs/promises"), 1);
+    import_promises11 = __toESM(require("fs/promises"), 1);
     import_path4 = __toESM(require("path"), 1);
     import_child_process2 = require("child_process");
-    import_util10 = require("util");
+    import_util14 = require("util");
     init_dirs();
     init_fs_utils();
     init_hook_paths();
-    execP = (0, import_util10.promisify)(import_child_process2.exec);
+    execP = (0, import_util14.promisify)(import_child_process2.exec);
     MARKER_KEY3 = "_slayzoneManaged";
     CODEX_HOOK_EVENTS = [
       "SessionStart",
@@ -5123,14 +5123,14 @@ async function installAntigravityHooks(opts) {
       return { installed: false, eventsAdded: [], reason: "agy binary not on PATH" };
     }
   }
-  const target = opts.hooksPath ?? getAntigravityHooksPath();
+  const target2 = opts.hooksPath ?? getAntigravityHooksPath();
   const events = opts.events ?? ANTIGRAVITY_HOOK_EVENTS;
   let result = {
     installed: false,
     eventsAdded: [],
     reason: "unwritten"
   };
-  await updateFileAtomically(target, (current) => {
+  await updateFileAtomically(target2, (current) => {
     let hooksFile;
     if (current === null) {
       hooksFile = {};
@@ -5189,11 +5189,11 @@ var init_antigravity_hook_installer = __esm({
 
 // ../../shared/platform/src/agent-hooks/opencode-plugin-installer.ts
 async function installOpencodePlugin(opts) {
-  const target = opts.targetPath ?? getOpencodePluginPath();
+  const target2 = opts.targetPath ?? getOpencodePluginPath();
   const rawSource = opts.source;
   const content = rawSource.split(NOTIFY_PATH_PLACEHOLDER).join(toPosixPath(opts.notifyPath));
-  const changed = await writeFileIfChanged(target, content, 420);
-  return { path: target, changed };
+  const changed = await writeFileIfChanged(target2, content, 420);
+  return { path: target2, changed };
 }
 var NOTIFY_PATH_PLACEHOLDER;
 var init_opencode_plugin_installer = __esm({
@@ -5220,10 +5220,10 @@ var init_agent_hooks = __esm({
   }
 });
 
-// raw-import:/tmp/slz-publish-wt.C8azA7/packages/shared/hooks/src/notify.sh
+// raw-import:/tmp/slz-publish-wt.AbcjgE/packages/shared/hooks/src/notify.sh
 var notify_default;
 var init_notify = __esm({
-  "raw-import:/tmp/slz-publish-wt.C8azA7/packages/shared/hooks/src/notify.sh"() {
+  "raw-import:/tmp/slz-publish-wt.AbcjgE/packages/shared/hooks/src/notify.sh"() {
     notify_default = `#!/bin/sh
 # SlayZone agent lifecycle hook \u2014 BENIGN DUMB FORWARDER.
 #
@@ -5385,10 +5385,10 @@ exit 0
   }
 });
 
-// raw-import:/tmp/slz-publish-wt.C8azA7/packages/shared/hooks/src/opencode-plugin.js
+// raw-import:/tmp/slz-publish-wt.AbcjgE/packages/shared/hooks/src/opencode-plugin.js
 var opencode_plugin_default;
 var init_opencode_plugin = __esm({
-  "raw-import:/tmp/slz-publish-wt.C8azA7/packages/shared/hooks/src/opencode-plugin.js"() {
+  "raw-import:/tmp/slz-publish-wt.AbcjgE/packages/shared/hooks/src/opencode-plugin.js"() {
     opencode_plugin_default = "// SlayZone opencode plugin v1\n//\n// Forwards OpenCode SDK session lifecycle events to the SlayZone agent-hook\n// notify script over a local shell exec. Plugin is loaded by OpenCode from\n//   ${XDG_CONFIG_HOME:-~/.config}/opencode/plugin/slayzone-notify.js\n//\n// The {{NOTIFY_PATH}} placeholder is substituted by the SlayZone installer\n// (packages/apps/app/src/main/agent-hooks/opencode-plugin-installer.ts) at\n// install time with the absolute path to `~/.slayzone/hooks/notify.sh`.\n//\n// Behavior:\n//   - No-op when SLAYZONE_TASK_ID is unset (plugin only fires inside SlayZone PTYs).\n//   - Subagent (child session) events are suppressed \u2014 oh-my-opencode + similar\n//     tools spawn many child sessions and would otherwise flap Start/Stop.\n//   - On client.session.list() error, sessions are assumed CHILD (safer to\n//     suppress than emit a false-positive Start/Stop).\n//   - Handles both modern (session.status w/ nested type) and legacy\n//     (session.busy / session.idle) event shapes for forward compat.\n//   - Singleton guard prevents double-load if OpenCode re-imports the plugin.\n\nexport const SlayzoneNotifyPlugin = async ({ $, client }) => {\n  if (globalThis.__slayzoneOpencodePluginV1) return {}\n  globalThis.__slayzoneOpencodePluginV1 = true\n  if (!process?.env?.SLAYZONE_TASK_ID) return {}\n\n  const notifyPath = '{{NOTIFY_PATH}}'\n  let currentState = 'idle' // 'idle' | 'busy'\n  let rootSessionID = null // first non-child session we see\n  let stopSent = false // dedup Stop emits\n  const childSessionCache = new Map() // sessionID -> isChild bool\n\n  const notify = async (eventName) => {\n    const payload = JSON.stringify({ hook_event_name: eventName })\n    try {\n      await $`bash ${notifyPath} ${payload}`\n    } catch {\n      // Hook failures must never bubble into the OpenCode TUI.\n    }\n  }\n\n  const isChildSession = async (sessionID) => {\n    if (!sessionID) return true\n    if (!client?.session?.list) return true\n    if (childSessionCache.has(sessionID)) return childSessionCache.get(sessionID)\n    try {\n      const sessions = await client.session.list()\n      const session = sessions.data?.find((s) => s.id === sessionID)\n      const isChild = !!session?.parentID\n      childSessionCache.set(sessionID, isChild)\n      return isChild\n    } catch {\n      // On error, assume CHILD \u2014 safer than emitting a false-positive Start/Stop.\n      return true\n    }\n  }\n\n  const handleBusy = async (sessionID) => {\n    if (!rootSessionID) rootSessionID = sessionID\n    if (sessionID !== rootSessionID) return\n    if (currentState === 'idle') {\n      currentState = 'busy'\n      stopSent = false\n      await notify('Start')\n    }\n  }\n\n  const handleStop = async (sessionID) => {\n    if (rootSessionID && sessionID !== rootSessionID) return\n    if (currentState === 'busy' && !stopSent) {\n      currentState = 'idle'\n      stopSent = true\n      await notify('Stop')\n      rootSessionID = null // reset for next session\n    }\n  }\n\n  return {\n    event: async ({ event }) => {\n      const sessionID = event.properties?.sessionID ?? event.properties?.info?.id ?? null\n\n      if (event.type === 'session.created') {\n        const isChild = Boolean(event.properties?.info?.parentID)\n        if (sessionID) childSessionCache.set(sessionID, isChild)\n        if (!isChild) await notify('SessionStart')\n        return\n      }\n\n      if (event.type === 'session.deleted') {\n        const cached = sessionID ? childSessionCache.get(sessionID) : undefined\n        const isChild = cached !== undefined ? cached : await isChildSession(sessionID)\n        if (!isChild) await notify('SessionEnd')\n        if (sessionID) childSessionCache.delete(sessionID)\n        return\n      }\n\n      if (await isChildSession(sessionID)) return\n\n      if (event.type === 'session.status') {\n        const status = event.properties?.status\n        if (status?.type === 'busy') await handleBusy(sessionID)\n        else if (status?.type === 'idle') await handleStop(sessionID)\n      }\n      // Backwards-compat: some OpenCode versions emit busy/idle as top-level events.\n      if (event.type === 'session.busy') await handleBusy(sessionID)\n      if (event.type === 'session.idle') await handleStop(sessionID)\n      if (event.type === 'session.error') await handleStop(sessionID)\n    },\n    'permission.ask': async (_permission, output) => {\n      if (output.status === 'ask') await notify('PermissionRequest')\n    }\n  }\n}\n";
   }
 });
@@ -5431,8 +5431,8 @@ var init_agent_hooks2 = __esm({
 });
 
 // src/bin.ts
-var import_node_os8 = require("node:os");
-var import_node_path14 = require("node:path");
+var import_node_os9 = require("node:os");
+var import_node_path15 = require("node:path");
 
 // ../../shared/platform/src/config-prompt.ts
 var import_promises = require("node:readline/promises");
@@ -5615,6 +5615,27 @@ function hubUrlFromAddr(addr, kind, path9 = "") {
   const scheme = kind === "ws" ? secure ? "wss" : "ws" : secure ? "https" : "http";
   return `${scheme}://${addr}${path9}`;
 }
+function hubAddrFromUrl(url2) {
+  let u;
+  try {
+    u = new URL(url2);
+  } catch {
+    return null;
+  }
+  if (!["ws:", "wss:", "http:", "https:"].includes(u.protocol)) return null;
+  const kind = u.protocol === "ws:" || u.protocol === "wss:" ? "ws" : "http";
+  if (u.username !== "" || u.password !== "" || !isBareAuthority(u.host)) return null;
+  return new URL(hubUrlFromAddr(u.host, kind)).protocol === u.protocol ? u.host : null;
+}
+function isBareAuthority(addr) {
+  if (addr === "" || /[/\s]/.test(addr) || addr.includes("://")) return false;
+  try {
+    const u = new URL(`http://${addr}`);
+    return u.host === addr && u.pathname === "/" && u.search === "" && u.hash === "" && u.username === "" && u.password === "";
+  } catch {
+    return false;
+  }
+}
 function isLoopbackComputerUrl(url2) {
   let host;
   try {
@@ -5758,13 +5779,13 @@ var DuplexRpc = class {
       ...params === void 0 ? {} : { params },
       ...actor === void 0 ? {} : { actor }
     });
-    return new Promise((resolve7, reject) => {
+    return new Promise((resolve9, reject) => {
       const timer = effectiveTimeout > 0 ? setTimeout(() => {
         this.pending.delete(id);
         reject(new RpcTimeoutError(method, effectiveTimeout, this.label));
       }, effectiveTimeout) : null;
       this.pending.set(id, {
-        resolve: resolve7,
+        resolve: resolve9,
         reject,
         timer
       });
@@ -6625,8 +6646,8 @@ function defineLazy(object2, key, getter) {
 function objectClone(obj) {
   return Object.create(Object.getPrototypeOf(obj), Object.getOwnPropertyDescriptors(obj));
 }
-function assignProp(target, prop, value) {
-  Object.defineProperty(target, prop, {
+function assignProp(target2, prop, value) {
+  Object.defineProperty(target2, prop, {
     value,
     writable: true,
     enumerable: true,
@@ -6640,8 +6661,8 @@ function rawShape(def) {
 function sourceShape(schema) {
   return rawShape(schema._zod.def) ?? schema._zod.def.shape;
 }
-function deferProp(target, key, getter) {
-  Object.defineProperty(target, key, {
+function deferProp(target2, key, getter) {
+  Object.defineProperty(target2, key, {
     get() {
       const value = getter();
       assignProp(this, key, value);
@@ -6651,36 +6672,36 @@ function deferProp(target, key, getter) {
     configurable: true
   });
 }
-function putProp(target, key, value) {
-  if (key in target)
-    assignProp(target, key, value);
+function putProp(target2, key, value) {
+  if (key in target2)
+    assignProp(target2, key, value);
   else
-    target[key] = value;
+    target2[key] = value;
 }
-function mirrorShape(target, source, keys, wrap) {
+function mirrorShape(target2, source, keys, wrap) {
   const raw = sourceShape(source);
   for (const key of keys) {
     const desc = Object.getOwnPropertyDescriptor(raw, key);
     if (!desc.enumerable)
       continue;
     if (desc.get) {
-      deferProp(target, key, () => {
+      deferProp(target2, key, () => {
         const value = source._zod.def.shape[key];
         return wrap ? wrap(value, key) : value;
       });
     } else
-      putProp(target, key, wrap ? wrap(desc.value, key) : desc.value);
+      putProp(target2, key, wrap ? wrap(desc.value, key) : desc.value);
   }
 }
-function mirrorProps(target, source) {
+function mirrorProps(target2, source) {
   for (const key of Reflect.ownKeys(source)) {
     const desc = Object.getOwnPropertyDescriptor(source, key);
     if (!desc.enumerable)
       continue;
     if (desc.get)
-      deferProp(target, key, () => source[key]);
+      deferProp(target2, key, () => source[key]);
     else
-      putProp(target, key, desc.value);
+      putProp(target2, key, desc.value);
   }
 }
 function mergeDefs(...defs) {
@@ -6712,14 +6733,14 @@ function promiseAllObject(promisesObj) {
 }
 function randomString(length = 10) {
   const chars = "abcdefghijklmnopqrstuvwxyz";
-  let str = "";
+  let str2 = "";
   for (let i = 0; i < length; i++) {
-    str += chars[Math.floor(Math.random() * chars.length)];
+    str2 += chars[Math.floor(Math.random() * chars.length)];
   }
-  return str;
+  return str2;
 }
-function esc(str) {
-  return JSON.stringify(str);
+function esc(str2) {
+  return JSON.stringify(str2);
 }
 function slugify(input2) {
   return input2.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
@@ -6781,8 +6802,8 @@ function numKeys(data) {
   return keyCount;
 }
 var getParsedType = (data) => {
-  const t = typeof data;
-  switch (t) {
+  const t2 = typeof data;
+  switch (t2) {
     case "undefined":
       return "undefined";
     case "string":
@@ -6821,7 +6842,7 @@ var getParsedType = (data) => {
       }
       return "object";
     default:
-      throw new Error(`Unknown data type: ${t}`);
+      throw new Error(`Unknown data type: ${t2}`);
   }
 };
 var propertyKeyTypes = /* @__PURE__ */ new Set(["string", "number", "symbol"]);
@@ -6833,8 +6854,8 @@ var primitiveTypes = /* @__PURE__ */ new Set([
   "symbol",
   "undefined"
 ]);
-function escapeRegex(str) {
-  return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function escapeRegex(str2) {
+  return str2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone(inst, def, params) {
   const cl = new inst._zod.constr(def ?? inst._zod.def);
@@ -6859,35 +6880,35 @@ function normalizeParams(_params) {
   return params;
 }
 function createTransparentProxy(getter) {
-  let target;
+  let target2;
   return new Proxy({}, {
     get(_, prop, receiver) {
-      target ?? (target = getter());
-      return Reflect.get(target, prop, receiver);
+      target2 ?? (target2 = getter());
+      return Reflect.get(target2, prop, receiver);
     },
     set(_, prop, value, receiver) {
-      target ?? (target = getter());
-      return Reflect.set(target, prop, value, receiver);
+      target2 ?? (target2 = getter());
+      return Reflect.set(target2, prop, value, receiver);
     },
     has(_, prop) {
-      target ?? (target = getter());
-      return Reflect.has(target, prop);
+      target2 ?? (target2 = getter());
+      return Reflect.has(target2, prop);
     },
     deleteProperty(_, prop) {
-      target ?? (target = getter());
-      return Reflect.deleteProperty(target, prop);
+      target2 ?? (target2 = getter());
+      return Reflect.deleteProperty(target2, prop);
     },
     ownKeys(_) {
-      target ?? (target = getter());
-      return Reflect.ownKeys(target);
+      target2 ?? (target2 = getter());
+      return Reflect.ownKeys(target2);
     },
     getOwnPropertyDescriptor(_, prop) {
-      target ?? (target = getter());
-      return Reflect.getOwnPropertyDescriptor(target, prop);
+      target2 ?? (target2 = getter());
+      return Reflect.getOwnPropertyDescriptor(target2, prop);
     },
     defineProperty(_, prop, descriptor) {
-      target ?? (target = getter());
-      return Reflect.defineProperty(target, prop, descriptor);
+      target2 ?? (target2 = getter());
+      return Reflect.defineProperty(target2, prop, descriptor);
     }
   });
 }
@@ -7088,13 +7109,13 @@ function getSizableOrigin(input2) {
   return "unknown";
 }
 var highSurrogate = /[\uD800-\uDBFF]/;
-function codePointLength(str) {
-  const units = str.length;
-  if (!highSurrogate.test(str))
+function codePointLength(str2) {
+  const units = str2.length;
+  if (!highSurrogate.test(str2))
     return units;
   let count = units;
   for (let i = 0; i < units - 1; i++) {
-    if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) {
+    if ((str2.charCodeAt(i) & 64512) === 55296 && (str2.charCodeAt(i + 1) & 64512) === 56320) {
       count--;
       i++;
     }
@@ -7109,8 +7130,8 @@ function getLengthableOrigin(input2) {
   return "unknown";
 }
 function parsedType(data) {
-  const t = typeof data;
-  switch (t) {
+  const t2 = typeof data;
+  switch (t2) {
     case "number": {
       return Number.isNaN(data) ? "nan" : "number";
     }
@@ -7127,7 +7148,7 @@ function parsedType(data) {
       }
     }
   }
-  return t;
+  return t2;
 }
 function issue(...args) {
   const [iss, input2, inst] = args;
@@ -7358,10 +7379,10 @@ function $constructor(name, initializer3, proto, params) {
       let up = own2;
       while (up && up !== ctorProto)
         up = Object.getPrototypeOf(up);
-      const target = up ?? own2;
-      if (!initialized.has(target)) {
-        initialized.add(target);
-        members(target, protoMembers);
+      const target2 = up ?? own2;
+      if (!initialized.has(target2)) {
+        initialized.add(target2);
+        members(target2, protoMembers);
       }
     }
     const proto2 = _.prototype;
@@ -7723,18 +7744,18 @@ var validateAsync = async (schema, value, _ctx) => {
   return result.issues.length === 0;
 };
 var _encode = (_Err) => {
-  const parse3 = _parse(_Err);
+  const parse5 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
     const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
-    return parse3(schema, value, ctx, finalizeParams(fn, _params));
+    return parse5(schema, value, ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
 var encode = /* @__PURE__ */ _encode($ZodRealError);
 var _decode = (_Err) => {
-  const parse3 = _parse(_Err);
+  const parse5 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
-    return parse3(schema, value, _ctx, finalizeParams(fn, _params));
+    return parse5(schema, value, _ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
@@ -9210,15 +9231,15 @@ var $ZodDate = /* @__PURE__ */ $constructor("$ZodDate", (inst, def) => {
       }
     }
     const input2 = payload.value;
-    const isDate = input2 instanceof Date;
-    const isValidDate = isDate && !Number.isNaN(input2.getTime());
+    const isDate2 = input2 instanceof Date;
+    const isValidDate = isDate2 && !Number.isNaN(input2.getTime());
     if (isValidDate)
       return payload;
     payload.issues.push({
       expected: "date",
       code: "invalid_type",
       input: input2,
-      ...isDate ? { received: "Invalid Date" } : {},
+      ...isDate2 ? { received: "Invalid Date" } : {},
       inst
     });
     return payload;
@@ -9325,7 +9346,7 @@ function handleCatchall(proms, input2, payload, ctx, def, inst, abortEarly) {
   const unrecognized = [];
   const keySet = def.keySet;
   const _catchall = def.catchall._zod;
-  const t = _catchall.def.type;
+  const t2 = _catchall.def.type;
   const optin = _catchall.optin;
   const optout = _catchall.optout;
   let seen = 0;
@@ -9338,11 +9359,11 @@ function handleCatchall(proms, input2, payload, ctx, def, inst, abortEarly) {
     if (keySet.has(key))
       continue;
     if (key === "__proto__") {
-      if (t === "never")
+      if (t2 === "never")
         unrecognized.push(key);
       continue;
     }
-    if (t === "never") {
+    if (t2 === "never") {
       unrecognized.push(key);
       continue;
     }
@@ -9401,7 +9422,7 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
     }
     return propValues;
   });
-  const isObject2 = isObject;
+  const isObject3 = isObject;
   const catchall = def.catchall;
   let value;
   const memo2 = globalConfig.memoizer;
@@ -9409,7 +9430,7 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
   inst._zod.parse = (payload, ctx) => {
     value ?? (value = _normalized.value);
     const input2 = payload.value;
-    if (!isObject2(input2)) {
+    if (!isObject3(input2)) {
       payload.issues.push({
         expected: "object",
         code: "invalid_type",
@@ -9545,7 +9566,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
     return doc.compile();
   };
   let fastpass;
-  const isObject2 = isObject;
+  const isObject3 = isObject;
   const jit = !globalConfig.jitless;
   const allowsEval2 = allowsEval;
   const fastEnabled = jit && allowsEval2.value;
@@ -9554,7 +9575,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
   inst._zod.parse = (payload, ctx) => {
     value ?? (value = _normalized.value);
     const input2 = payload.value;
-    if (!isObject2(input2)) {
+    if (!isObject3(input2)) {
       payload.issues.push({
         expected: "object",
         code: "invalid_type",
@@ -10904,7 +10925,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve7) {
+function isRecursive(inst, stack, resolve9) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -10914,7 +10935,7 @@ function isRecursive(inst, stack, resolve7) {
   let result = NONE;
   const check2 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve7);
+      const answer = isRecursive(child, stack, resolve9);
       if (answer > result)
         result = answer;
     }
@@ -10925,7 +10946,7 @@ function isRecursive(inst, stack, resolve7) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve7) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve9) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -10989,7 +11010,7 @@ function isRecursive(inst, stack, resolve7) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve7 ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve9 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -13576,16 +13597,16 @@ var error20 = () => {
     number: { unit: "", shortLabel: "\u05E7\u05D8\u05DF", longLabel: "\u05D2\u05D3\u05D5\u05DC" }
     // no unit
   };
-  const typeEntry = (t) => t ? TypeNames[t] : void 0;
-  const typeLabel = (t) => {
-    const e = typeEntry(t);
+  const typeEntry = (t2) => t2 ? TypeNames[t2] : void 0;
+  const typeLabel = (t2) => {
+    const e = typeEntry(t2);
     if (e)
       return e.label;
-    return t ?? TypeNames.unknown.label;
+    return t2 ?? TypeNames.unknown.label;
   };
-  const withDefinite = (t) => `\u05D4${typeLabel(t)}`;
-  const verbFor = (t) => {
-    const e = typeEntry(t);
+  const withDefinite = (t2) => `\u05D4${typeLabel(t2)}`;
+  const verbFor = (t2) => {
+    const e = typeEntry(t2);
     const gender = e?.gender ?? "m";
     return gender === "f" ? "\u05E6\u05E8\u05D9\u05DB\u05D4 \u05DC\u05D4\u05D9\u05D5\u05EA" : "\u05E6\u05E8\u05D9\u05DA \u05DC\u05D4\u05D9\u05D5\u05EA";
   };
@@ -18845,8 +18866,8 @@ function withParser(schema, parser) {
     installCompiledUserMethods(clone2, schema, parser);
   return clone2;
 }
-function installCompiledUserMethods(target, source, parser) {
-  const targetAny = target;
+function installCompiledUserMethods(target2, source, parser) {
+  const targetAny = target2;
   const sourceAny = source;
   if (typeof sourceAny.safeParse === "function") {
     const originalSafeParse = sourceAny.safeParse;
@@ -21007,12 +21028,12 @@ function _uppercase(params) {
   });
 }
 // @__NO_SIDE_EFFECTS__
-function _includes(includes, params) {
+function _includes(includes2, params) {
   return new $ZodCheckIncludes({
     check: "string_format",
     format: "includes",
     ...normalizeParams(params),
-    includes
+    includes: includes2
   });
 }
 // @__NO_SIDE_EFFECTS__
@@ -21441,26 +21462,26 @@ function _stringFormat(Class2, format, fnOrRegex, _params = {}) {
 }
 
 // ../../../node_modules/zod/v4/core/to-json-schema.js
-function assignProps(target, ...sources) {
+function assignProps(target2, ...sources) {
   for (const source of sources) {
     for (const key of Reflect.ownKeys(source)) {
       if (Object.prototype.propertyIsEnumerable.call(source, key)) {
-        assignProp(target, key, source[key]);
+        assignProp(target2, key, source[key]);
       }
     }
   }
-  return target;
+  return target2;
 }
 function initializeContext(params) {
-  let target = params?.target ?? "draft-2020-12";
-  if (target === "draft-4")
-    target = "draft-04";
-  if (target === "draft-7")
-    target = "draft-07";
+  let target2 = params?.target ?? "draft-2020-12";
+  if (target2 === "draft-4")
+    target2 = "draft-04";
+  if (target2 === "draft-7")
+    target2 = "draft-07";
   return {
     processors: params.processors ?? {},
     metadataRegistry: params?.metadata ?? globalRegistry,
-    target,
+    target: target2,
     unrepresentable: params?.unrepresentable ?? "throw",
     override: params?.override ?? (() => {
     }),
@@ -21963,8 +21984,8 @@ var createToJSONSchemaMethod = (schema, processors = {}) => (params) => {
   return finalize(ctx, schema);
 };
 var createStandardJSONSchemaMethod = (schema, io, processors = {}) => (params) => {
-  const { libraryOptions, target } = params ?? {};
-  const ctx = initializeContext({ ...libraryOptions ?? {}, target, io, processors });
+  const { libraryOptions, target: target2 } = params ?? {};
+  const ctx = initializeContext({ ...libraryOptions ?? {}, target: target2, io, processors });
   processSchema(schema, ctx);
   extractDefs(ctx, schema);
   return finalize(ctx, schema);
@@ -22458,7 +22479,7 @@ function stringifyKeyNames(bySchema, json2, visited) {
       json2 = { ...json2, [keyword]: mapped };
   }
   const types = Array.isArray(json2.type) ? json2.type : [json2.type];
-  const numericType = !types.includes("string") && types.some((t) => t === "number" || t === "integer");
+  const numericType = !types.includes("string") && types.some((t2) => t2 === "number" || t2 === "integer");
   const values = json2.enum ?? (json2.const !== void 0 ? [json2.const] : void 0);
   if (!numericType && !values?.some((v) => typeof v === "number"))
     return json2;
@@ -23158,8 +23179,8 @@ var ZodType = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
   catch(params) {
     return _catch2(this, params);
   },
-  pipe(target) {
-    return pipe(this, target);
+  pipe(target2) {
+    return pipe(this, target2);
   },
   readonly() {
     return readonly(this);
@@ -24961,8 +24982,8 @@ function convertBaseSchema(schema, ctx) {
   }
   const type = schema.type;
   if (Array.isArray(type)) {
-    const typeSchemas = type.map((t) => {
-      const typeSchema = { ...schema, type: t };
+    const typeSchemas = type.map((t2) => {
+      const typeSchema = { ...schema, type: t2 };
       return convertBaseSchema(typeSchema, ctx);
     });
     if (typeSchemas.length === 0) {
@@ -26295,10 +26316,10 @@ var TypedEventEmitter = class {
   }
   /** Promise for the next occurrence of `event`. */
   once(event) {
-    return new Promise((resolve7) => {
+    return new Promise((resolve9) => {
       const unsubscribe2 = this.on(event, (payload) => {
         unsubscribe2();
-        resolve7(payload);
+        resolve9(payload);
       });
     });
   }
@@ -26504,7 +26525,7 @@ var HubDialer = class {
     }
     const conn = this.current;
     if (conn) {
-      const closed = new Promise((resolve7) => conn.ws.once("close", () => resolve7()));
+      const closed = new Promise((resolve9) => conn.ws.once("close", () => resolve9()));
       if (conn.ws.readyState === wrapper_default.OPEN) {
         conn.ws.close(1e3, "computer-stop");
       } else {
@@ -26931,8 +26952,8 @@ var ENV_VARS = {
   // the normal way (see ignoredCertPinNotices).
 };
 var DEFAULT_CAPABILITIES = ["pty", "git", "fs", "proc"];
-function realpathBoundary(target) {
-  let current = (0, import_node_path3.resolve)(target);
+function realpathBoundary(target2) {
+  let current = (0, import_node_path3.resolve)(target2);
   const tail = [];
   for (; ; ) {
     try {
@@ -26941,7 +26962,7 @@ function realpathBoundary(target) {
     } catch {
       const parent = (0, import_node_path3.dirname)(current);
       if (parent === current) {
-        return (0, import_node_path3.resolve)(target);
+        return (0, import_node_path3.resolve)(target2);
       }
       tail.push((0, import_node_path3.basename)(current));
       current = parent;
@@ -27097,7 +27118,16 @@ var HUB_SWITCH_ENV = {
   enablePassword: "SLAYZONE_HUB_ENABLE_PASSWORD",
   enableSso: "SLAYZONE_HUB_ENABLE_SSO",
   enableProcesses: "SLAYZONE_HUB_ENABLE_PROCESSES",
-  enableIntegrations: "SLAYZONE_HUB_ENABLE_INTEGRATIONS"
+  enableIntegrations: "SLAYZONE_HUB_ENABLE_INTEGRATIONS",
+  enableTelemetry: "SLAYZONE_HUB_ENABLE_TELEMETRY"
+};
+var HUB_SWITCH_DEFAULTS = {
+  requireLogin: false,
+  enablePassword: true,
+  enableSso: false,
+  enableProcesses: true,
+  enableIntegrations: true,
+  enableTelemetry: true
 };
 var HUB_SSO_ENV = {
   tenantId: "SLAYZONE_HUB_SSO_TENANT_ID",
@@ -27135,12 +27165,136 @@ var HUB_PROCESS_ENV = [
   HUB_SESSION_RETENTION_DAYS_ENV,
   HUB_CONVEX_ADDRESS_ENV
 ];
+var HubSwitchValueError = class extends Error {
+  constructor(variable, value) {
+    super(
+      `[slayzone] ${variable} must be 0 or 1, got '${value}'. Switches take exactly 0 (off) or 1 (on) \u2014 not true/false/yes/no.`
+    );
+    this.variable = variable;
+    this.value = value;
+    this.name = "HubSwitchValueError";
+  }
+  variable;
+  value;
+};
+function parseSwitchValue(variable, raw) {
+  if (raw === void 0) return void 0;
+  if (raw === "1") return true;
+  if (raw === "0") return false;
+  throw new HubSwitchValueError(variable, raw);
+}
+function resolveHubSwitches(env = process.env) {
+  const out = { ...HUB_SWITCH_DEFAULTS };
+  for (const key of Object.keys(HUB_SWITCH_ENV)) {
+    const parsed = parseSwitchValue(HUB_SWITCH_ENV[key], env[HUB_SWITCH_ENV[key]]);
+    if (parsed !== void 0) out[key] = parsed;
+  }
+  return out;
+}
 
 // ../../shared/platform/src/security-log.ts
 var import_node_async_hooks = require("node:async_hooks");
+
+// ../../shared/platform/src/client-address.ts
+var adopted = /* @__PURE__ */ new WeakMap();
+function clientAddress(req) {
+  if (!req) return null;
+  const resolved = adopted.get(req);
+  if (resolved) return resolved;
+  const addr = req.socket?.remoteAddress;
+  return typeof addr === "string" && addr ? addr : null;
+}
+
+// ../../shared/platform/src/security-log.ts
+var SENSITIVE_KEY = /pass(word|wd|phrase)|token|secret|cookie|authori[sz]ation|api[-_]?key|private[-_]?key|credential|bearer|signature|prompt|content|body|payload|stdin|stdout|stderr|bytes|email|message|^(key|data|env|args|text|input|output)$/i;
+var MAX_STRING = 200;
+var MAX_DEPTH = 4;
+var MAX_ITEMS = 20;
+var MAX_KEYS = 30;
 var LINE_SEPARATOR = String.fromCharCode(8232);
 var PARAGRAPH_SEPARATOR = String.fromCharCode(8233);
+var clip = (s) => s.length > MAX_STRING ? `${s.slice(0, MAX_STRING)}\u2026` : s;
+var str = (v) => typeof v === "string" && v ? clip(v) : null;
+function clean(value, depth, seen) {
+  if (value === null) return null;
+  switch (typeof value) {
+    case "string":
+      return clip(value);
+    case "number":
+      return Number.isFinite(value) ? value : String(value);
+    case "boolean":
+      return value;
+    case "bigint":
+      return value.toString();
+    case "object":
+      break;
+    default:
+      return void 0;
+  }
+  const obj = value;
+  if (seen.has(obj)) return "[circular]";
+  if (depth >= MAX_DEPTH) return "[depth]";
+  if (obj instanceof Date) return Number.isNaN(obj.getTime()) ? null : obj.toISOString();
+  if (ArrayBuffer.isView(obj) || obj instanceof ArrayBuffer) return "[bytes]";
+  seen.add(obj);
+  if (Array.isArray(obj)) {
+    const out2 = obj.slice(0, MAX_ITEMS).map((v) => clean(v, depth + 1, seen) ?? null);
+    if (obj.length > MAX_ITEMS) out2.push(`\u2026${obj.length - MAX_ITEMS} more`);
+    return out2;
+  }
+  const proto = Object.getPrototypeOf(obj);
+  if (proto !== Object.prototype && proto !== null) {
+    return `[${obj.constructor?.name || "object"}]`;
+  }
+  const out = {};
+  let kept = 0;
+  for (const [k, v] of Object.entries(obj)) {
+    if (SENSITIVE_KEY.test(k)) continue;
+    const c = clean(v, depth + 1, seen);
+    if (c === void 0) continue;
+    if (kept++ >= MAX_KEYS) break;
+    out[k] = c;
+  }
+  return out;
+}
+var stdoutGuarded = false;
+var stdoutSink = (line) => {
+  if (!stdoutGuarded) {
+    stdoutGuarded = true;
+    process.stdout.on("error", () => {
+    });
+  }
+  process.stdout.write(`${line}
+`);
+};
+var sink = stdoutSink;
 var contextStore = new import_node_async_hooks.AsyncLocalStorage();
+function runWithSecurityContext(ctx, fn) {
+  return contextStore.run(ctx, fn);
+}
+var peerAddress = clientAddress;
+function securityEvent(input2) {
+  try {
+    const ctx = contextStore.getStore();
+    const route = input2.route === void 0 ? ctx?.route ?? null : input2.route;
+    const detail = input2.detail ? clean(input2.detail, 0, /* @__PURE__ */ new WeakSet()) : {};
+    const line = JSON.stringify({
+      type: "security",
+      ts: (/* @__PURE__ */ new Date()).toISOString(),
+      level: input2.level ?? (input2.outcome === "success" ? "info" : "warn"),
+      event: input2.event,
+      outcome: input2.outcome,
+      actor: str(input2.actor === void 0 ? ctx?.actor : input2.actor),
+      ip: str(input2.ip === void 0 ? ctx?.ip : input2.ip),
+      targetKind: str(input2.targetKind),
+      targetId: str(input2.targetId),
+      route: typeof route === "string" ? str(route.split("?")[0]) : null,
+      detail: detail && typeof detail === "object" && !Array.isArray(detail) ? detail : {}
+    }).replaceAll(LINE_SEPARATOR, "\\u2028").replaceAll(PARAGRAPH_SEPARATOR, "\\u2029");
+    sink(line);
+  } catch {
+  }
+}
 
 // ../../shared/platform/src/hub-switch-refusal.ts
 var MESSAGES = {
@@ -27149,7 +27303,8 @@ var MESSAGES = {
   NO_COMPUTER_CONNECTED: `Connect a computer: this hub does not read project files or run git, gh or other commands itself (${HUB_SWITCH_ENV.enableProcesses}=0).`,
   HUB_PASSWORD_DISABLED: `Password sign-in is switched off on this hub (${HUB_SWITCH_ENV.enablePassword}=0).`,
   HUB_CONVEX_NOT_CONFIGURED: `GitHub sign-in is off on this hub: no Convex deployment is configured (${HUB_CONVEX_ADDRESS_ENV}).`,
-  HUB_CONVEX_MISMATCH: `This hub starts GitHub sign-in only against its own Convex deployment (${HUB_CONVEX_ADDRESS_ENV}); the request named another.`
+  HUB_CONVEX_MISMATCH: `This hub starts GitHub sign-in only against its own Convex deployment (${HUB_CONVEX_ADDRESS_ENV}); the request named another.`,
+  HUB_TELEMETRY_DISABLED: `GitHub sign-in (leaderboard, feedback) is off on this hub: third-party telemetry is switched off (${HUB_SWITCH_ENV.enableTelemetry}=0).`
 };
 var VARIABLES = {
   HUB_PROCESSES_DISABLED: HUB_SWITCH_ENV.enableProcesses,
@@ -27157,8 +27312,41 @@ var VARIABLES = {
   NO_COMPUTER_CONNECTED: HUB_SWITCH_ENV.enableProcesses,
   HUB_PASSWORD_DISABLED: HUB_SWITCH_ENV.enablePassword,
   HUB_CONVEX_NOT_CONFIGURED: HUB_CONVEX_ADDRESS_ENV,
-  HUB_CONVEX_MISMATCH: HUB_CONVEX_ADDRESS_ENV
+  HUB_CONVEX_MISMATCH: HUB_CONVEX_ADDRESS_ENV,
+  HUB_TELEMETRY_DISABLED: HUB_SWITCH_ENV.enableTelemetry
+};
+var HubSwitchedOffError = class extends Error {
+  constructor(code) {
+    super(MESSAGES[code]);
+    this.code = code;
+    this.name = "HubSwitchedOffError";
+    this.variable = VARIABLES[code];
+  }
+  code;
+  /** The env var of the switch that is off. */
+  variable;
 };
+function isHubSwitchedOffError(err) {
+  if (err instanceof HubSwitchedOffError) return true;
+  if (!(err instanceof Error) || err.name !== "HubSwitchedOffError") return false;
+  const code = err.code;
+  return typeof code === "string" && code in MESSAGES;
+}
+function hubProcessesEnabled(env = process.env) {
+  return resolveHubSwitches(env).enableProcesses;
+}
+function refuse(event, code, refusal) {
+  securityEvent({
+    event,
+    outcome: "denied",
+    targetKind: "hub",
+    detail: { ...refusal.detail, op: refusal.op, code, variable: VARIABLES[code] }
+  });
+  throw new HubSwitchedOffError(code);
+}
+function assertHubLocalExecEnabled(refusal) {
+  if (!hubProcessesEnabled()) refuse("hub.local_exec", "NO_COMPUTER_CONNECTED", refusal);
+}
 
 // ../../shared/platform/src/env-manifest.ts
 var ENV_MANIFEST = {
@@ -27213,6 +27401,7 @@ var ENV_MANIFEST = {
   SLAYZONE_HUB_ENABLE_SSO: "infra",
   SLAYZONE_HUB_ENABLE_PROCESSES: "infra",
   SLAYZONE_HUB_ENABLE_INTEGRATIONS: "infra",
+  SLAYZONE_HUB_ENABLE_TELEMETRY: "infra",
   SLAYZONE_HUB_SSO_TENANT_ID: "infra",
   SLAYZONE_HUB_SSO_CLIENT_ID: "infra",
   // Paths to the Entra client certificate and its private key, and the MFA switch.
@@ -27253,6 +27442,10 @@ var ENV_MANIFEST = {
   // computers with none spawned" contract test).
   SLAYZONE_E2E_NO_COMPUTER: "infra",
   SLAYZONE_E2E_INSTALL_HOOKS: "infra",
+  // PLAYWRIGHT-only: the Convex deployment (host[:port], '' = off) the desktop app's
+  // renderer + hub use instead of the build's (app main convex-deployment.ts). Infra:
+  // a hub started from a task terminal must not inherit a spec's deployment.
+  SLAYZONE_E2E_CONVEX_ADDRESS: "infra",
   // Redirects the MACHINE-WIDE ~/.slayzone (hooks/, bin/) — the files shared by
   // every SlayZone process on the box, which deliberately do NOT follow
   // SLAYZONE_ROOT. Sandbox redirect for tests, same role as the per-provider
@@ -27435,12 +27628,12 @@ function mergePathLists(primary, secondary) {
   return [...entries].join(import_node_path4.default.delimiter);
 }
 function runProbe(probe, env) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve9) => {
     const child = (0, import_node_child_process2.execFile)(
       probe.file,
       probe.args,
       { encoding: "utf-8", timeout: LOGIN_SHELL_PATH_PROBE_TIMEOUT_MS, env },
-      (err, stdout2) => resolve7(err ? null : parseLoginShellPathOutput(stdout2))
+      (err, stdout2) => resolve9(err ? null : parseLoginShellPathOutput(stdout2))
     );
     child.stdin?.end();
   });
@@ -27471,8 +27664,8 @@ async function adoptLoginShellPath(opts = {}) {
 }
 
 // src/main.ts
-var import_node_fs10 = require("node:fs");
-var import_node_path13 = require("node:path");
+var import_node_fs11 = require("node:fs");
+var import_node_path14 = require("node:path");
 
 // src/request-log.ts
 var import_node_fs4 = require("node:fs");
@@ -27481,10 +27674,10 @@ var REQUEST_LOG_DIR_NAME = "request-log";
 var REQUEST_LOG_FILE_NAME = "requests.log";
 var DEFAULT_MAX_BYTES = 10 * 1024 * 1024;
 var DEFAULT_KEEP = 9;
-var MAX_STRING = 300;
-function clip(value) {
+var MAX_STRING2 = 300;
+function clip2(value) {
   if (typeof value !== "string") return void 0;
-  return value.length > MAX_STRING ? `${value.slice(0, MAX_STRING)}\u2026` : value;
+  return value.length > MAX_STRING2 ? `${value.slice(0, MAX_STRING2)}\u2026` : value;
 }
 function programName(command) {
   if (typeof command !== "string") return void 0;
@@ -27529,7 +27722,7 @@ function summarizeTarget(method, params) {
   const p = params;
   const out = {};
   for (const key of TARGET_KEYS) {
-    const v = clip(p[key]);
+    const v = clip2(p[key]);
     if (v !== void 0) out[key] = v;
   }
   const program = programName(p.command);
@@ -27540,7 +27733,7 @@ function summarizeTarget(method, params) {
     if (sub) out.subcommand = sub;
   }
   if (Array.isArray(p.roots)) {
-    out.roots = p.roots.slice(0, 20).map(clip).filter((r) => r !== void 0);
+    out.roots = p.roots.slice(0, 20).map(clip2).filter((r) => r !== void 0);
   }
   return out;
 }
@@ -27586,7 +27779,7 @@ function createRequestLog(opts) {
           target: summarizeTarget(entry.method, entry.params),
           result: entry.result,
           ...entry.code !== void 0 ? { code: entry.code } : {},
-          ...entry.reason !== void 0 ? { reason: clip(entry.reason) } : {}
+          ...entry.reason !== void 0 ? { reason: clip2(entry.reason) } : {}
         })}
 `;
         if (size > 0 && size + Buffer.byteLength(line) > maxBytes) rotate();
@@ -27760,13 +27953,13 @@ function createAgentHookServer(ctx) {
       if (!res.headersSent) res.writeHead(200, { "content-type": "application/json" }).end("{}");
     });
   });
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve9, reject) => {
     server.on("error", reject);
     server.listen(0, "127.0.0.1", () => {
       const addr = server.address();
       const port = typeof addr === "object" && addr ? addr.port : 0;
       ctx.log("agent-hook loopback relay listening", { port });
-      resolve7({
+      resolve9({
         url: `http://127.0.0.1:${port}${AGENT_HOOK_PATH}`,
         close: () => new Promise((r) => {
           server.close(() => r());
@@ -27777,10 +27970,10 @@ function createAgentHookServer(ctx) {
 }
 
 // src/handlers/fs.ts
-var import_node_fs6 = require("node:fs");
-var import_promises6 = require("node:fs/promises");
-var import_node_os5 = require("node:os");
-var import_node_path9 = require("node:path");
+var import_node_fs7 = require("node:fs");
+var import_promises7 = require("node:fs/promises");
+var import_node_os6 = require("node:os");
+var import_node_path10 = require("node:path");
 
 // ../../domains/file-editor/src/server/file-ops.ts
 var fs3 = __toESM(require("node:fs"), 1);
@@ -27790,8 +27983,8 @@ var import_ignore = __toESM(require_ignore(), 1);
 var ALWAYS_IGNORED = /* @__PURE__ */ new Set([".git", ".DS_Store"]);
 var MAX_FILE_SIZE = 1 * 1024 * 1024;
 var FORCE_MAX_FILE_SIZE = 10 * 1024 * 1024;
-function assertWithinRoot(root, target) {
-  const resolved = path4.resolve(root, target);
+function assertWithinRoot(root, target2) {
+  const resolved = path4.resolve(root, target2);
   if (!resolved.startsWith(path4.resolve(root) + path4.sep) && resolved !== path4.resolve(root)) {
     throw new Error("Path traversal denied");
   }
@@ -27862,12 +28055,12 @@ function readDir(rootPath, dirPath) {
 }
 function readFile3(rootPath, filePath, force) {
   const abs = assertWithinRoot(rootPath, filePath);
-  const stat2 = fs3.statSync(abs);
-  if (stat2.size > FORCE_MAX_FILE_SIZE) {
-    return { content: null, tooLarge: true, sizeBytes: stat2.size };
+  const stat3 = fs3.statSync(abs);
+  if (stat3.size > FORCE_MAX_FILE_SIZE) {
+    return { content: null, tooLarge: true, sizeBytes: stat3.size };
   }
-  if (!force && stat2.size > MAX_FILE_SIZE) {
-    return { content: null, tooLarge: true, sizeBytes: stat2.size };
+  if (!force && stat3.size > MAX_FILE_SIZE) {
+    return { content: null, tooLarge: true, sizeBytes: stat3.size };
   }
   return { content: fs3.readFileSync(abs, "utf-8") };
 }
@@ -27954,14 +28147,14 @@ function gitStatus(rootPath) {
   if (!fs3.existsSync(path4.join(root, ".git"))) {
     return Promise.resolve({ files: {}, isGitRepo: false });
   }
-  return new Promise((resolve7) => {
+  return new Promise((resolve9) => {
     const chunks = [];
     const proc = (0, import_node_child_process3.spawn)("git", ["status", "--porcelain"], { cwd: root });
     proc.stdout.on("data", (chunk) => chunks.push(chunk));
-    proc.on("error", () => resolve7({ files: {}, isGitRepo: false }));
+    proc.on("error", () => resolve9({ files: {}, isGitRepo: false }));
     proc.on("close", (code) => {
       if (code !== 0) {
-        resolve7({ files: {}, isGitRepo: true });
+        resolve9({ files: {}, isGitRepo: true });
         return;
       }
       const output2 = Buffer.concat(chunks).toString("utf-8");
@@ -27988,7 +28181,7 @@ function gitStatus(rootPath) {
         }
         files[filePath] = status;
       }
-      resolve7({ files, isGitRepo: true });
+      resolve9({ files, isGitRepo: true });
     });
   });
 }
@@ -28031,13 +28224,13 @@ function searchFiles(rootPath, query, options) {
   function searchFile(rootDir, relPath, re, out) {
     if (totalMatches >= maxResults) return;
     const abs = path4.join(rootDir, relPath);
-    let stat2;
+    let stat3;
     try {
-      stat2 = fs3.statSync(abs);
+      stat3 = fs3.statSync(abs);
     } catch {
       return;
     }
-    if (stat2.size > MAX_FILE_SIZE) return;
+    if (stat3.size > MAX_FILE_SIZE) return;
     let content;
     try {
       content = fs3.readFileSync(abs, "utf-8");
@@ -28125,7 +28318,7 @@ function unsubscribe(root, listener) {
   entry.listeners.delete(listener);
   if (entry.listeners.size === 0) {
     entry.watcher.close();
-    for (const t of entry.debounceMap.values()) clearTimeout(t);
+    for (const t2 of entry.debounceMap.values()) clearTimeout(t2);
     watchers.delete(root);
   }
 }
@@ -28158,10 +28351,10 @@ var SKIP_DIRS = /* @__PURE__ */ new Set([
   ".vscode"
 ]);
 function git(args, cwd) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve9, reject) => {
     (0, import_node_child_process4.execFile)("git", args, { cwd, maxBuffer: 8 * 1024 * 1024 }, (err, stdout2) => {
       if (err) reject(err);
-      else resolve7(stdout2);
+      else resolve9(stdout2);
     });
   });
 }
@@ -28261,124 +28454,2335 @@ async function discoverRepos(rootPath, maxDepth = DEFAULT_REPO_SCAN_DEPTH) {
   return entries;
 }
 
-// src/handlers/fs.ts
+// ../../domains/file-editor/src/server/workspace-fs.ts
+var import_node_fs6 = require("node:fs");
+var import_promises6 = require("node:fs/promises");
+var import_node_os5 = require("node:os");
+var import_node_path9 = require("node:path");
 var BROWSE_ALWAYS_HIDDEN = /* @__PURE__ */ new Set([".git", ".DS_Store", "node_modules"]);
-function createFsHandlers(ctx) {
-  const allow = (candidate, subtree = false) => assertPathAllowed(candidate, ctx.config.allowedRoots, { subtree });
-  const allowIn = (rootPath, rel, subtree = false) => {
-    const root = allow(rootPath);
-    allow((0, import_node_path9.join)(root, rel), subtree);
-    return root;
-  };
-  const watches = /* @__PURE__ */ new Map();
-  function pathExists(rawParams) {
-    const { path: path9 } = fsPathExistsParamsSchema.parse(rawParams);
-    const resolved = allow(path9);
-    return { exists: (0, import_node_fs6.existsSync)(resolved) };
-  }
-  async function removeDir(rawParams) {
-    const { path: path9 } = fsRemoveDirParamsSchema.parse(rawParams);
-    const resolved = allow(path9, true);
-    await (0, import_promises6.rm)(resolved, { recursive: true, force: true });
-    ctx.log("fs removeDir", { path: resolved });
-    return { ok: true };
+var WORKSPACE_MAX_LIST_ALL_FILES = 5e4;
+var WORKSPACE_MAX_SEARCH_RESULTS = 2e3;
+function createLocalWorkspaceFs() {
+  return refuseOnSwitchedOffHub(createUnguardedLocalWorkspaceFs());
+}
+function refuseOnSwitchedOffHub(fs7) {
+  const guarded = {};
+  for (const [op, fn] of Object.entries(fs7)) {
+    guarded[op] = (...args) => {
+      assertHubLocalExecEnabled({ op: `fs.${op}` });
+      return fn(...args);
+    };
   }
-  function listRoots(rawParams) {
-    fsListRootsParamsSchema.parse(rawParams ?? {});
-    const resolvedRoots = [];
-    for (const root of ctx.config.allowedRoots) {
+  return guarded;
+}
+function createUnguardedLocalWorkspaceFs() {
+  const localProjectPaths = /* @__PURE__ */ new Map();
+  return {
+    listRoots() {
+      let home = null;
       try {
-        resolvedRoots.push(import_node_fs6.realpathSync.native((0, import_node_path9.resolve)(root)));
+        home = import_node_fs6.realpathSync.native((0, import_node_os5.homedir)());
       } catch {
+        home = null;
       }
-    }
-    let home = null;
-    try {
-      home = import_node_fs6.realpathSync.native((0, import_node_os5.homedir)());
-    } catch {
-      home = null;
-    }
-    return { roots: resolvedRoots, home, platform: process.platform, sep: import_node_path9.sep };
-  }
-  async function listDir(rawParams) {
-    const params = fsListDirParamsSchema.parse(rawParams);
-    const abs = allow(params.path);
-    const dirents = await (0, import_promises6.readdir)(abs, { withFileTypes: true });
-    const entries = [];
-    for (const e of dirents) {
-      if (BROWSE_ALWAYS_HIDDEN.has(e.name)) continue;
-      if (!params.includeHidden && e.name.startsWith(".")) continue;
-      const full = (0, import_node_path9.join)(abs, e.name);
-      const symlink = e.isSymbolicLink();
-      let isDir = e.isDirectory();
-      if (symlink) {
-        try {
-          isDir = (await (0, import_promises6.stat)(full)).isDirectory();
-        } catch {
-          continue;
+      return {
+        roots: home ? [home] : [(0, import_node_path9.parse)(process.cwd()).root],
+        home,
+        platform: process.platform,
+        sep: import_node_path9.sep
+      };
+    },
+    async listDir(path9, options) {
+      const abs = import_node_fs6.realpathSync.native((0, import_node_path9.resolve)(path9));
+      const dirents = await (0, import_promises6.readdir)(abs, { withFileTypes: true });
+      const entries = [];
+      for (const e of dirents) {
+        if (BROWSE_ALWAYS_HIDDEN.has(e.name)) continue;
+        if (!options?.includeHidden && e.name.startsWith(".")) continue;
+        const full = (0, import_node_path9.join)(abs, e.name);
+        const symlink = e.isSymbolicLink();
+        let isDir = e.isDirectory();
+        if (symlink) {
+          try {
+            isDir = (await (0, import_promises6.stat)(full)).isDirectory();
+          } catch {
+            continue;
+          }
         }
+        if (options?.dirsOnly && !isDir) continue;
+        entries.push({
+          name: e.name,
+          path: full,
+          type: isDir ? "directory" : "file",
+          ...symlink && { isSymlink: true },
+          ...isDir && (0, import_node_fs6.existsSync)((0, import_node_path9.join)(full, ".git")) && { isGitRepo: true }
+        });
       }
-      if (params.dirsOnly && !isDir) continue;
-      entries.push({
-        name: e.name,
-        path: full,
-        type: isDir ? "directory" : "file",
-        ...symlink && { isSymlink: true },
-        ...isDir && (0, import_node_fs6.existsSync)((0, import_node_path9.join)(full, ".git")) && { isGitRepo: true }
+      entries.sort((a, b) => {
+        if (a.type !== b.type) return a.type === "directory" ? -1 : 1;
+        return a.name.localeCompare(b.name);
       });
+      const parent = (0, import_node_path9.dirname)(abs);
+      return { path: abs, parent: parent === abs ? null : parent, entries };
+    },
+    async mkdir(path9) {
+      const abs = (0, import_node_path9.resolve)(path9);
+      await (0, import_promises6.mkdir)(abs, { recursive: true });
+      return { path: import_node_fs6.realpathSync.native(abs) };
+    },
+    pathExists(path9) {
+      return (0, import_node_fs6.existsSync)((0, import_node_path9.resolve)(path9));
+    },
+    // A hub has no path-jail — `allowedRoots` is a computer concept. Saying so is
+    // better than accepting the edit and discarding it, which would leave the
+    // user believing they had restricted (or widened) something.
+    setAllowedRoots() {
+      return Promise.reject(
+        new Error("this host has no path jail to configure \u2014 allowedRoots is a computer setting")
+      );
+    },
+    // With no computer there is exactly one machine, so this process keeps the map
+    // itself. In-memory rather than on disk: the only hosts that reach here are
+    // the fork sidecar and tests, neither of which should be minting a new
+    // persistent state file for a mapping a real computer owns.
+    resolveProjectPath(projectId) {
+      const path9 = localProjectPaths.get(projectId);
+      if (!path9) return { path: null };
+      return { path: path9, exists: (0, import_node_fs6.existsSync)(path9) };
+    },
+    setProjectPath(projectId, path9) {
+      const abs = import_node_fs6.realpathSync.native((0, import_node_path9.resolve)(path9));
+      localProjectPaths.set(projectId, abs);
+      return { path: abs };
+    },
+    forgetProjectPath(projectId) {
+      localProjectPaths.delete(projectId);
+    },
+    readDir,
+    readFile: readFile3,
+    writeFile: writeFile3,
+    createFile,
+    createDir,
+    rename: renamePath,
+    delete: deletePath,
+    copyIn,
+    copy,
+    gitStatus,
+    searchFiles(rootPath, query, options) {
+      const maxResults = Math.min(
+        options?.maxResults ?? WORKSPACE_MAX_SEARCH_RESULTS,
+        WORKSPACE_MAX_SEARCH_RESULTS
+      );
+      const results = searchFiles(rootPath, query, { ...options, maxResults });
+      const total = results.reduce((n, r) => n + r.matches.length, 0);
+      return { results, truncated: total >= maxResults };
+    },
+    listAllFiles(rootPath) {
+      const all = listAllFiles(rootPath);
+      return {
+        files: all.slice(0, WORKSPACE_MAX_LIST_ALL_FILES),
+        truncated: all.length > WORKSPACE_MAX_LIST_ALL_FILES
+      };
+    },
+    watch: subscribeFileWatcher,
+    discoverRepos
+  };
+}
+function createLocalWorkspaceFsAdapters(local = createLocalWorkspaceFs()) {
+  return {
+    listRoots: async () => local.listRoots(),
+    listDir: async (_r, path9, options) => local.listDir(path9, options),
+    mkdir: async (_r, path9) => local.mkdir(path9),
+    pathExists: async (_r, path9) => local.pathExists(path9),
+    setAllowedRoots: async (_r, roots) => local.setAllowedRoots(roots),
+    resolveProjectPath: async (_r, projectId) => local.resolveProjectPath(projectId),
+    setProjectPath: async (_r, projectId, path9) => local.setProjectPath(projectId, path9),
+    forgetProjectPath: async (_r, projectId) => local.forgetProjectPath(projectId),
+    readDir: async (_r, rootPath, dirPath) => local.readDir(rootPath, dirPath),
+    readFile: async (_r, rootPath, filePath, force) => local.readFile(rootPath, filePath, force),
+    writeFile: async (_r, rootPath, filePath, content) => local.writeFile(rootPath, filePath, content),
+    createFile: async (_r, rootPath, filePath) => local.createFile(rootPath, filePath),
+    createDir: async (_r, rootPath, dirPath) => local.createDir(rootPath, dirPath),
+    rename: async (_r, rootPath, oldPath, newPath) => local.rename(rootPath, oldPath, newPath),
+    delete: async (_r, rootPath, targetPath) => local.delete(rootPath, targetPath),
+    copyIn: async (_r, rootPath, absoluteSrc, targetDir) => local.copyIn(rootPath, absoluteSrc, targetDir),
+    copy: async (_r, rootPath, srcPath, destPath) => local.copy(rootPath, srcPath, destPath),
+    gitStatus: async (_r, rootPath) => local.gitStatus(rootPath),
+    searchFiles: async (_r, rootPath, query, options) => local.searchFiles(rootPath, query, options),
+    listAllFiles: async (_r, rootPath) => local.listAllFiles(rootPath),
+    watch: (_r, rootPath, listener) => local.watch(rootPath, listener),
+    discoverRepos: async (_r, rootPath, maxDepth) => local.discoverRepos(rootPath, maxDepth)
+  };
+}
+
+// ../../domains/file-editor/src/server/workspace-deps.ts
+var workspaceDeps = {
+  fs: createLocalWorkspaceFsAdapters(),
+  resolveComputer: async () => null,
+  isLocalComputer: () => true
+};
+function getWorkspaceDeps() {
+  return workspaceDeps;
+}
+
+// ../../../node_modules/@trpc/server/dist/codes-D5Ya6_Bi.mjs
+function mergeWithoutOverrides(obj1, ...objs) {
+  const newObj = Object.assign(emptyObject(), obj1);
+  for (const overrides of objs) for (const key in overrides) {
+    if (key in newObj && newObj[key] !== overrides[key]) throw new Error(`Duplicate key ${key}`);
+    newObj[key] = overrides[key];
+  }
+  return newObj;
+}
+function isObject2(value) {
+  return !!value && !Array.isArray(value) && typeof value === "object";
+}
+function isFunction(fn) {
+  return typeof fn === "function";
+}
+function emptyObject() {
+  return /* @__PURE__ */ Object.create(null);
+}
+var TRPC_ERROR_CODES_BY_KEY = {
+  /**
+  * Invalid JSON was received by the server.
+  * An error occurred on the server while parsing the JSON text.
+  */
+  PARSE_ERROR: -32700,
+  /**
+  * The JSON sent is not a valid Request object.
+  */
+  BAD_REQUEST: -32600,
+  INTERNAL_SERVER_ERROR: -32603,
+  NOT_IMPLEMENTED: -32603,
+  BAD_GATEWAY: -32603,
+  SERVICE_UNAVAILABLE: -32603,
+  GATEWAY_TIMEOUT: -32603,
+  UNAUTHORIZED: -32001,
+  PAYMENT_REQUIRED: -32002,
+  FORBIDDEN: -32003,
+  NOT_FOUND: -32004,
+  METHOD_NOT_SUPPORTED: -32005,
+  TIMEOUT: -32008,
+  CONFLICT: -32009,
+  PRECONDITION_FAILED: -32012,
+  PAYLOAD_TOO_LARGE: -32013,
+  UNSUPPORTED_MEDIA_TYPE: -32015,
+  UNPROCESSABLE_CONTENT: -32022,
+  PRECONDITION_REQUIRED: -32028,
+  TOO_MANY_REQUESTS: -32029,
+  CLIENT_CLOSED_REQUEST: -32099
+};
+var retryableRpcCodes = [
+  TRPC_ERROR_CODES_BY_KEY.BAD_GATEWAY,
+  TRPC_ERROR_CODES_BY_KEY.SERVICE_UNAVAILABLE,
+  TRPC_ERROR_CODES_BY_KEY.GATEWAY_TIMEOUT,
+  TRPC_ERROR_CODES_BY_KEY.INTERNAL_SERVER_ERROR
+];
+
+// ../../../node_modules/@trpc/server/dist/getErrorShape-B0JBUs-i.mjs
+var noop = () => {
+};
+var freezeIfAvailable = (obj) => {
+  if (Object.freeze) Object.freeze(obj);
+};
+function createInnerProxy(callback, path9, memo2) {
+  var _memo$cacheKey;
+  const cacheKey = path9.join(".");
+  (_memo$cacheKey = memo2[cacheKey]) !== null && _memo$cacheKey !== void 0 || (memo2[cacheKey] = new Proxy(noop, {
+    get(_obj, key) {
+      if (typeof key !== "string" || key === "then") return;
+      return createInnerProxy(callback, [...path9, key], memo2);
+    },
+    apply(_1, _2, args) {
+      const lastOfPath = path9[path9.length - 1];
+      if (lastOfPath === "valueOf" || lastOfPath === "toString" || lastOfPath === "toJSON") return `tRPC.proxy(${path9.slice(0, -1).join(".")})`;
+      let opts = {
+        args,
+        path: path9
+      };
+      if (lastOfPath === "call") opts = {
+        args: args.length >= 2 ? [args[1]] : [],
+        path: path9.slice(0, -1)
+      };
+      else if (lastOfPath === "apply") opts = {
+        args: args.length >= 2 ? args[1] : [],
+        path: path9.slice(0, -1)
+      };
+      freezeIfAvailable(opts.args);
+      freezeIfAvailable(opts.path);
+      return callback(opts);
     }
-    entries.sort((a, b) => {
-      if (a.type !== b.type) return a.type === "directory" ? -1 : 1;
-      return a.name.localeCompare(b.name);
-    });
-    const isRoot = ctx.config.allowedRoots.some((r) => {
-      try {
-        return import_node_fs6.realpathSync.native((0, import_node_path9.resolve)(r)) === abs;
-      } catch {
-        return false;
-      }
+  }));
+  return memo2[cacheKey];
+}
+var createRecursiveProxy = (callback) => createInnerProxy(callback, [], emptyObject());
+function _typeof(o) {
+  "@babel/helpers - typeof";
+  return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(o2) {
+    return typeof o2;
+  } : function(o2) {
+    return o2 && "function" == typeof Symbol && o2.constructor === Symbol && o2 !== Symbol.prototype ? "symbol" : typeof o2;
+  }, _typeof(o);
+}
+function toPrimitive(t2, r) {
+  if ("object" != _typeof(t2) || !t2) return t2;
+  var e = t2[Symbol.toPrimitive];
+  if (void 0 !== e) {
+    var i = e.call(t2, r || "default");
+    if ("object" != _typeof(i)) return i;
+    throw new TypeError("@@toPrimitive must return a primitive value.");
+  }
+  return ("string" === r ? String : Number)(t2);
+}
+function toPropertyKey(t2) {
+  var i = toPrimitive(t2, "string");
+  return "symbol" == _typeof(i) ? i : i + "";
+}
+function _defineProperty(e, r, t2) {
+  return (r = toPropertyKey(r)) in e ? Object.defineProperty(e, r, {
+    value: t2,
+    enumerable: true,
+    configurable: true,
+    writable: true
+  }) : e[r] = t2, e;
+}
+function ownKeys(e, r) {
+  var t2 = Object.keys(e);
+  if (Object.getOwnPropertySymbols) {
+    var o = Object.getOwnPropertySymbols(e);
+    r && (o = o.filter(function(r2) {
+      return Object.getOwnPropertyDescriptor(e, r2).enumerable;
+    })), t2.push.apply(t2, o);
+  }
+  return t2;
+}
+function _objectSpread2(e) {
+  for (var r = 1; r < arguments.length; r++) {
+    var t2 = null != arguments[r] ? arguments[r] : {};
+    r % 2 ? ownKeys(Object(t2), true).forEach(function(r2) {
+      _defineProperty(e, r2, t2[r2]);
+    }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t2)) : ownKeys(Object(t2)).forEach(function(r2) {
+      Object.defineProperty(e, r2, Object.getOwnPropertyDescriptor(t2, r2));
     });
-    return { path: abs, parent: isRoot ? null : (0, import_node_path9.dirname)(abs), entries };
   }
-  async function mkdirHandler(rawParams) {
-    const { path: path9 } = fsMkdirParamsSchema.parse(rawParams);
-    const abs = allow(path9);
-    await (0, import_promises6.mkdir)(abs, { recursive: true });
-    ctx.log("fs mkdir", { path: abs });
-    return { path: import_node_fs6.realpathSync.native(abs) };
-  }
-  function readDirHandler(rawParams) {
-    const { rootPath, dirPath } = fsReadDirParamsSchema.parse(rawParams);
-    return { entries: readDir(allow(rootPath), dirPath) };
+  return e;
+}
+
+// ../../../node_modules/@trpc/server/dist/tracked-D4jU_Hb3.mjs
+var defaultFormatter = ({ shape }) => {
+  return shape;
+};
+var UnknownCauseError = class extends Error {
+  constructor(cause) {
+    super(getMessage(cause));
+    Object.assign(this, cause);
   }
-  function readFileHandler(rawParams) {
-    const { rootPath, filePath, force } = fsReadFileParamsSchema.parse(rawParams);
-    return readFile3(allowIn(rootPath, filePath), filePath, force);
+};
+function getMessage(cause) {
+  if ("message" in cause) return String(cause.message);
+}
+function getCauseFromUnknown(cause) {
+  if (cause instanceof Error) return cause;
+  const type = typeof cause;
+  if (type === "undefined" || type === "function" || cause === null) return;
+  if (type !== "object") return new Error(String(cause));
+  if (isObject2(cause)) return new UnknownCauseError(cause);
+}
+function getTRPCErrorFromUnknown(cause) {
+  if (cause instanceof TRPCError) return cause;
+  if (cause instanceof Error && cause.name === "TRPCError") return cause;
+  const trpcError = new TRPCError({
+    code: "INTERNAL_SERVER_ERROR",
+    cause
+  });
+  if (cause instanceof Error && cause.stack) trpcError.stack = cause.stack;
+  return trpcError;
+}
+var TRPCError = class extends Error {
+  constructor(opts) {
+    var _ref, _opts$message, _this$cause;
+    const cause = getCauseFromUnknown(opts.cause);
+    const message = (_ref = (_opts$message = opts.message) !== null && _opts$message !== void 0 ? _opts$message : cause === null || cause === void 0 ? void 0 : cause.message) !== null && _ref !== void 0 ? _ref : opts.code;
+    super(message, { cause });
+    _defineProperty(this, "cause", void 0);
+    _defineProperty(this, "code", void 0);
+    this.code = opts.code;
+    this.name = "TRPCError";
+    (_this$cause = this.cause) !== null && _this$cause !== void 0 || (this.cause = cause);
   }
-  function writeFileHandler(rawParams) {
-    const { rootPath, filePath, content } = fsWriteFileParamsSchema.parse(rawParams);
-    writeFile3(allowIn(rootPath, filePath), filePath, content);
-    return { ok: true };
+};
+function getDataTransformer(transformer) {
+  if ("input" in transformer) return transformer;
+  return {
+    input: transformer,
+    output: transformer
+  };
+}
+var defaultTransformer = {
+  input: {
+    serialize: (obj) => obj,
+    deserialize: (obj) => obj
+  },
+  output: {
+    serialize: (obj) => obj,
+    deserialize: (obj) => obj
   }
-  function createFileHandler(rawParams) {
-    const { rootPath, filePath } = fsCreateFileParamsSchema.parse(rawParams);
-    createFile(allowIn(rootPath, filePath), filePath);
-    return { ok: true };
+};
+var lazyMarker = "lazyMarker";
+function once(fn) {
+  const uncalled = /* @__PURE__ */ Symbol();
+  let result = uncalled;
+  return () => {
+    if (result === uncalled) result = fn();
+    return result;
+  };
+}
+function isLazy(input2) {
+  return typeof input2 === "function" && lazyMarker in input2;
+}
+function isRouter(value) {
+  return isObject2(value) && isObject2(value["_def"]) && "router" in value["_def"];
+}
+var emptyRouter = {
+  _ctx: null,
+  _errorShape: null,
+  _meta: null,
+  queries: {},
+  mutations: {},
+  subscriptions: {},
+  errorFormatter: defaultFormatter,
+  transformer: defaultTransformer
+};
+var reservedWords = [
+  "then",
+  "call",
+  "apply"
+];
+function createRouterFactory(config2) {
+  function createRouterInner(input2) {
+    const reservedWordsUsed = new Set(Object.keys(input2).filter((v) => reservedWords.includes(v)));
+    if (reservedWordsUsed.size > 0) throw new Error("Reserved words used in `router({})` call: " + Array.from(reservedWordsUsed).join(", "));
+    const procedures = emptyObject();
+    const lazy3 = emptyObject();
+    function createLazyLoader(opts) {
+      return {
+        ref: opts.ref,
+        load: once(async () => {
+          const router2 = await opts.ref();
+          const lazyPath = [...opts.path, opts.key];
+          const lazyKey = lazyPath.join(".");
+          opts.aggregate[opts.key] = step(router2._def.record, lazyPath);
+          delete lazy3[lazyKey];
+          for (const [nestedKey, nestedItem] of Object.entries(router2._def.lazy)) {
+            const nestedRouterKey = [...lazyPath, nestedKey].join(".");
+            lazy3[nestedRouterKey] = createLazyLoader({
+              ref: nestedItem.ref,
+              path: lazyPath,
+              key: nestedKey,
+              aggregate: opts.aggregate[opts.key]
+            });
+          }
+        })
+      };
+    }
+    function step(from, path9 = []) {
+      const aggregate = emptyObject();
+      for (const [key, item] of Object.entries(from !== null && from !== void 0 ? from : {})) {
+        if (isLazy(item)) {
+          lazy3[[...path9, key].join(".")] = createLazyLoader({
+            path: path9,
+            ref: item,
+            key,
+            aggregate
+          });
+          continue;
+        }
+        if (isRouter(item)) {
+          aggregate[key] = step(item._def.record, [...path9, key]);
+          continue;
+        }
+        if (!isProcedure(item)) {
+          aggregate[key] = step(item, [...path9, key]);
+          continue;
+        }
+        const newPath = [...path9, key].join(".");
+        if (procedures[newPath]) throw new Error(`Duplicate key: ${newPath}`);
+        procedures[newPath] = item;
+        aggregate[key] = item;
+      }
+      return aggregate;
+    }
+    const record2 = step(input2);
+    const _def = _objectSpread2(_objectSpread2({
+      _config: config2,
+      router: true,
+      procedures,
+      lazy: lazy3
+    }, emptyRouter), {}, { record: record2 });
+    return _objectSpread2(_objectSpread2({}, record2), {}, {
+      _def,
+      createCaller: createCallerFactory()({ _def })
+    });
   }
-  function createDirHandler(rawParams) {
-    const { rootPath, dirPath } = fsCreateDirParamsSchema.parse(rawParams);
-    createDir(allowIn(rootPath, dirPath), dirPath);
-    return { ok: true };
+  return createRouterInner;
+}
+function isProcedure(procedureOrRouter) {
+  return typeof procedureOrRouter === "function";
+}
+async function getProcedureAtPath(router2, path9) {
+  const { _def } = router2;
+  let procedure = _def.procedures[path9];
+  while (!procedure) {
+    const key = Object.keys(_def.lazy).find((key2) => path9 === key2 || path9.startsWith(key2 + "."));
+    if (!key) return null;
+    await _def.lazy[key].load();
+    procedure = _def.procedures[path9];
+  }
+  return procedure;
+}
+function createCallerFactory() {
+  return function createCallerInner(router2) {
+    const { _def } = router2;
+    return function createCaller(ctxOrCallback, opts) {
+      return createRecursiveProxy(async (innerOpts) => {
+        const { path: path9, args } = innerOpts;
+        const fullPath = path9.join(".");
+        if (path9.length === 1 && path9[0] === "_def") return _def;
+        const procedure = await getProcedureAtPath(router2, fullPath);
+        let ctx = void 0;
+        try {
+          if (!procedure) throw new TRPCError({
+            code: "NOT_FOUND",
+            message: `No procedure found on path "${path9}"`
+          });
+          ctx = isFunction(ctxOrCallback) ? await Promise.resolve(ctxOrCallback()) : ctxOrCallback;
+          return await procedure({
+            path: fullPath,
+            getRawInput: async () => args[0],
+            ctx,
+            type: procedure._def.type,
+            signal: opts === null || opts === void 0 ? void 0 : opts.signal,
+            batchIndex: 0
+          });
+        } catch (cause) {
+          var _opts$onError, _procedure$_def$type;
+          opts === null || opts === void 0 || (_opts$onError = opts.onError) === null || _opts$onError === void 0 || _opts$onError.call(opts, {
+            ctx,
+            error: getTRPCErrorFromUnknown(cause),
+            input: args[0],
+            path: fullPath,
+            type: (_procedure$_def$type = procedure === null || procedure === void 0 ? void 0 : procedure._def.type) !== null && _procedure$_def$type !== void 0 ? _procedure$_def$type : "unknown"
+          });
+          throw cause;
+        }
+      });
+    };
+  };
+}
+function mergeRouters(...routerList) {
+  var _routerList$, _routerList$2;
+  const record2 = mergeWithoutOverrides({}, ...routerList.map((r) => r._def.record));
+  return createRouterFactory({
+    errorFormatter: routerList.reduce((currentErrorFormatter, nextRouter) => {
+      if (nextRouter._def._config.errorFormatter && nextRouter._def._config.errorFormatter !== defaultFormatter) {
+        if (currentErrorFormatter !== defaultFormatter && currentErrorFormatter !== nextRouter._def._config.errorFormatter) throw new Error("You seem to have several error formatters");
+        return nextRouter._def._config.errorFormatter;
+      }
+      return currentErrorFormatter;
+    }, defaultFormatter),
+    transformer: routerList.reduce((prev, current) => {
+      if (current._def._config.transformer && current._def._config.transformer !== defaultTransformer) {
+        if (prev !== defaultTransformer && prev !== current._def._config.transformer) throw new Error("You seem to have several transformers");
+        return current._def._config.transformer;
+      }
+      return prev;
+    }, defaultTransformer),
+    isDev: routerList.every((r) => r._def._config.isDev),
+    allowOutsideOfServer: routerList.every((r) => r._def._config.allowOutsideOfServer),
+    isServer: routerList.every((r) => r._def._config.isServer),
+    $types: (_routerList$ = routerList[0]) === null || _routerList$ === void 0 ? void 0 : _routerList$._def._config.$types,
+    sse: (_routerList$2 = routerList[0]) === null || _routerList$2 === void 0 ? void 0 : _routerList$2._def._config.sse
+  })(record2);
+}
+
+// ../../../node_modules/@trpc/server/dist/initTRPC-B259os3T.mjs
+var middlewareMarker = "middlewareMarker";
+function createMiddlewareFactory() {
+  function createMiddlewareInner(middlewares) {
+    return {
+      _middlewares: middlewares,
+      unstable_pipe(middlewareBuilderOrFn) {
+        const pipedMiddleware = "_middlewares" in middlewareBuilderOrFn ? middlewareBuilderOrFn._middlewares : [middlewareBuilderOrFn];
+        return createMiddlewareInner([...middlewares, ...pipedMiddleware]);
+      }
+    };
   }
-  function renameHandler(rawParams) {
-    const { rootPath, oldPath, newPath } = fsRenameParamsSchema.parse(rawParams);
-    allowIn(rootPath, newPath, true);
-    renamePath(allowIn(rootPath, oldPath, true), oldPath, newPath);
-    return { ok: true };
+  function createMiddleware(fn) {
+    return createMiddlewareInner([fn]);
   }
-  function deleteHandler(rawParams) {
-    const { rootPath, targetPath } = fsDeleteParamsSchema.parse(rawParams);
-    deletePath(allowIn(rootPath, targetPath, true), targetPath);
+  return createMiddleware;
+}
+function createInputMiddleware(parse5) {
+  const inputMiddleware = async function inputValidatorMiddleware(opts) {
+    let parsedInput;
+    const rawInput = await opts.getRawInput();
+    try {
+      parsedInput = await parse5(rawInput);
+    } catch (cause) {
+      throw new TRPCError({
+        code: "BAD_REQUEST",
+        cause
+      });
+    }
+    const combinedInput = isObject2(opts.input) && isObject2(parsedInput) ? _objectSpread2(_objectSpread2({}, opts.input), parsedInput) : parsedInput;
+    return opts.next({ input: combinedInput });
+  };
+  inputMiddleware._type = "input";
+  return inputMiddleware;
+}
+function createOutputMiddleware(parse5) {
+  const outputMiddleware = async function outputValidatorMiddleware({ next }) {
+    const result = await next();
+    if (!result.ok) return result;
+    try {
+      const data = await parse5(result.data);
+      return _objectSpread2(_objectSpread2({}, result), {}, { data });
+    } catch (cause) {
+      throw new TRPCError({
+        message: "Output validation failed",
+        code: "INTERNAL_SERVER_ERROR",
+        cause
+      });
+    }
+  };
+  outputMiddleware._type = "output";
+  return outputMiddleware;
+}
+var StandardSchemaV1Error = class extends Error {
+  /**
+  * Creates a schema error with useful information.
+  *
+  * @param issues The schema issues.
+  */
+  constructor(issues) {
+    var _issues$;
+    super((_issues$ = issues[0]) === null || _issues$ === void 0 ? void 0 : _issues$.message);
+    _defineProperty(this, "issues", void 0);
+    this.name = "SchemaError";
+    this.issues = issues;
+  }
+};
+function getParseFn(procedureParser) {
+  const parser = procedureParser;
+  const isStandardSchema = "~standard" in parser;
+  if (typeof parser === "function" && typeof parser.assert === "function") return parser.assert.bind(parser);
+  if (typeof parser === "function" && !isStandardSchema) return parser;
+  if (typeof parser.parseAsync === "function") return parser.parseAsync.bind(parser);
+  if (typeof parser.parse === "function") return parser.parse.bind(parser);
+  if (typeof parser.validateSync === "function") return parser.validateSync.bind(parser);
+  if (typeof parser.create === "function") return parser.create.bind(parser);
+  if (typeof parser.assert === "function") return (value) => {
+    parser.assert(value);
+    return value;
+  };
+  if (isStandardSchema) return async (value) => {
+    const result = await parser["~standard"].validate(value);
+    if (result.issues) throw new StandardSchemaV1Error(result.issues);
+    return result.value;
+  };
+  throw new Error("Could not find a validator fn");
+}
+function _objectWithoutPropertiesLoose(r, e) {
+  if (null == r) return {};
+  var t2 = {};
+  for (var n in r) if ({}.hasOwnProperty.call(r, n)) {
+    if (e.includes(n)) continue;
+    t2[n] = r[n];
+  }
+  return t2;
+}
+function _objectWithoutProperties(e, t2) {
+  if (null == e) return {};
+  var o, r, i = _objectWithoutPropertiesLoose(e, t2);
+  if (Object.getOwnPropertySymbols) {
+    var s = Object.getOwnPropertySymbols(e);
+    for (r = 0; r < s.length; r++) o = s[r], t2.includes(o) || {}.propertyIsEnumerable.call(e, o) && (i[o] = e[o]);
+  }
+  return i;
+}
+var _excluded = [
+  "middlewares",
+  "inputs",
+  "meta"
+];
+function createNewBuilder(def1, def2) {
+  const { middlewares = [], inputs, meta: meta3 } = def2, rest = _objectWithoutProperties(def2, _excluded);
+  return createBuilder(_objectSpread2(_objectSpread2({}, mergeWithoutOverrides(def1, rest)), {}, {
+    inputs: [...def1.inputs, ...inputs !== null && inputs !== void 0 ? inputs : []],
+    middlewares: [...def1.middlewares, ...middlewares],
+    meta: def1.meta && meta3 ? _objectSpread2(_objectSpread2({}, def1.meta), meta3) : meta3 !== null && meta3 !== void 0 ? meta3 : def1.meta
+  }));
+}
+function createBuilder(initDef = {}) {
+  const _def = _objectSpread2({
+    procedure: true,
+    inputs: [],
+    middlewares: []
+  }, initDef);
+  return {
+    _def,
+    input(input2) {
+      const parser = getParseFn(input2);
+      return createNewBuilder(_def, {
+        inputs: [input2],
+        middlewares: [createInputMiddleware(parser)]
+      });
+    },
+    output(output2) {
+      const parser = getParseFn(output2);
+      return createNewBuilder(_def, {
+        output: output2,
+        middlewares: [createOutputMiddleware(parser)]
+      });
+    },
+    meta(meta3) {
+      return createNewBuilder(_def, { meta: meta3 });
+    },
+    use(middlewareBuilderOrFn) {
+      const middlewares = "_middlewares" in middlewareBuilderOrFn ? middlewareBuilderOrFn._middlewares : [middlewareBuilderOrFn];
+      return createNewBuilder(_def, { middlewares });
+    },
+    unstable_concat(builder) {
+      return createNewBuilder(_def, builder._def);
+    },
+    concat(builder) {
+      return createNewBuilder(_def, builder._def);
+    },
+    query(resolver) {
+      return createResolver(_objectSpread2(_objectSpread2({}, _def), {}, { type: "query" }), resolver);
+    },
+    mutation(resolver) {
+      return createResolver(_objectSpread2(_objectSpread2({}, _def), {}, { type: "mutation" }), resolver);
+    },
+    subscription(resolver) {
+      return createResolver(_objectSpread2(_objectSpread2({}, _def), {}, { type: "subscription" }), resolver);
+    },
+    experimental_caller(caller) {
+      return createNewBuilder(_def, { caller });
+    }
+  };
+}
+function createResolver(_defIn, resolver) {
+  const finalBuilder = createNewBuilder(_defIn, {
+    resolver,
+    middlewares: [async function resolveMiddleware(opts) {
+      const data = await resolver(opts);
+      return {
+        marker: middlewareMarker,
+        ok: true,
+        data,
+        ctx: opts.ctx
+      };
+    }]
+  });
+  const _def = _objectSpread2(_objectSpread2({}, finalBuilder._def), {}, {
+    type: _defIn.type,
+    experimental_caller: Boolean(finalBuilder._def.caller),
+    meta: finalBuilder._def.meta,
+    $types: null
+  });
+  const invoke = createProcedureCaller(finalBuilder._def);
+  const callerOverride = finalBuilder._def.caller;
+  if (!callerOverride) return invoke;
+  const callerWrapper = async (...args) => {
+    return await callerOverride({
+      args,
+      invoke,
+      _def
+    });
+  };
+  callerWrapper._def = _def;
+  return callerWrapper;
+}
+var codeblock = `
+This is a client-only function.
+If you want to call this function on the server, see https://trpc.io/docs/v11/server/server-side-calls
+`.trim();
+async function callRecursive(index, _def, opts) {
+  try {
+    const middleware2 = _def.middlewares[index];
+    return await middleware2(_objectSpread2(_objectSpread2({}, opts), {}, {
+      meta: _def.meta,
+      input: opts.input,
+      next(_nextOpts) {
+        var _nextOpts$getRawInput;
+        const nextOpts = _nextOpts;
+        return callRecursive(index + 1, _def, _objectSpread2(_objectSpread2({}, opts), {}, {
+          ctx: (nextOpts === null || nextOpts === void 0 ? void 0 : nextOpts.ctx) ? _objectSpread2(_objectSpread2({}, opts.ctx), nextOpts.ctx) : opts.ctx,
+          input: nextOpts && "input" in nextOpts ? nextOpts.input : opts.input,
+          getRawInput: (_nextOpts$getRawInput = nextOpts === null || nextOpts === void 0 ? void 0 : nextOpts.getRawInput) !== null && _nextOpts$getRawInput !== void 0 ? _nextOpts$getRawInput : opts.getRawInput
+        }));
+      }
+    }));
+  } catch (cause) {
+    return {
+      ok: false,
+      error: getTRPCErrorFromUnknown(cause),
+      marker: middlewareMarker
+    };
+  }
+}
+function createProcedureCaller(_def) {
+  async function procedure(opts) {
+    if (!opts || !("getRawInput" in opts)) throw new Error(codeblock);
+    const result = await callRecursive(0, _def, opts);
+    if (!result) throw new TRPCError({
+      code: "INTERNAL_SERVER_ERROR",
+      message: "No result from middlewares - did you forget to `return next()`?"
+    });
+    if (!result.ok) throw result.error;
+    return result.data;
+  }
+  procedure._def = _def;
+  procedure.procedure = true;
+  procedure.meta = _def.meta;
+  return procedure;
+}
+var _globalThis$process;
+var _globalThis$process2;
+var _globalThis$process3;
+var isServerDefault = typeof window === "undefined" || "Deno" in window || ((_globalThis$process = globalThis.process) === null || _globalThis$process === void 0 || (_globalThis$process = _globalThis$process.env) === null || _globalThis$process === void 0 ? void 0 : _globalThis$process["NODE_ENV"]) === "test" || !!((_globalThis$process2 = globalThis.process) === null || _globalThis$process2 === void 0 || (_globalThis$process2 = _globalThis$process2.env) === null || _globalThis$process2 === void 0 ? void 0 : _globalThis$process2["JEST_WORKER_ID"]) || !!((_globalThis$process3 = globalThis.process) === null || _globalThis$process3 === void 0 || (_globalThis$process3 = _globalThis$process3.env) === null || _globalThis$process3 === void 0 ? void 0 : _globalThis$process3["VITEST_WORKER_ID"]);
+var initTRPC = new class TRPCBuilder {
+  /**
+  * Add a context shape as a generic to the root object
+  * @see https://trpc.io/docs/v11/server/context
+  */
+  context() {
+    return new TRPCBuilder();
+  }
+  /**
+  * Add a meta shape as a generic to the root object
+  * @see https://trpc.io/docs/v11/quickstart
+  */
+  meta() {
+    return new TRPCBuilder();
+  }
+  /**
+  * Create the root object
+  * @see https://trpc.io/docs/v11/server/routers#initialize-trpc
+  */
+  create(opts) {
+    var _opts$transformer, _opts$isDev, _globalThis$process4, _opts$allowOutsideOfS, _opts$errorFormatter, _opts$isServer;
+    const config2 = _objectSpread2(_objectSpread2({}, opts), {}, {
+      transformer: getDataTransformer((_opts$transformer = opts === null || opts === void 0 ? void 0 : opts.transformer) !== null && _opts$transformer !== void 0 ? _opts$transformer : defaultTransformer),
+      isDev: (_opts$isDev = opts === null || opts === void 0 ? void 0 : opts.isDev) !== null && _opts$isDev !== void 0 ? _opts$isDev : ((_globalThis$process4 = globalThis.process) === null || _globalThis$process4 === void 0 ? void 0 : _globalThis$process4.env["NODE_ENV"]) !== "production",
+      allowOutsideOfServer: (_opts$allowOutsideOfS = opts === null || opts === void 0 ? void 0 : opts.allowOutsideOfServer) !== null && _opts$allowOutsideOfS !== void 0 ? _opts$allowOutsideOfS : false,
+      errorFormatter: (_opts$errorFormatter = opts === null || opts === void 0 ? void 0 : opts.errorFormatter) !== null && _opts$errorFormatter !== void 0 ? _opts$errorFormatter : defaultFormatter,
+      isServer: (_opts$isServer = opts === null || opts === void 0 ? void 0 : opts.isServer) !== null && _opts$isServer !== void 0 ? _opts$isServer : isServerDefault,
+      /**
+      * These are just types, they can't be used at runtime
+      * @internal
+      */
+      $types: null
+    });
+    var _opts$isServer2;
+    if (!((_opts$isServer2 = opts === null || opts === void 0 ? void 0 : opts.isServer) !== null && _opts$isServer2 !== void 0 ? _opts$isServer2 : isServerDefault) && (opts === null || opts === void 0 ? void 0 : opts.allowOutsideOfServer) !== true) throw new Error(`You're trying to use @trpc/server in a non-server environment. This is not supported by default.`);
+    return {
+      /**
+      * Your router config
+      * @internal
+      */
+      _config: config2,
+      /**
+      * Builder object for creating procedures
+      * @see https://trpc.io/docs/v11/server/procedures
+      */
+      procedure: createBuilder({ meta: opts === null || opts === void 0 ? void 0 : opts.defaultMeta }),
+      /**
+      * Create reusable middlewares
+      * @see https://trpc.io/docs/v11/server/middlewares
+      */
+      middleware: createMiddlewareFactory(),
+      /**
+      * Create a router
+      * @see https://trpc.io/docs/v11/server/routers
+      */
+      router: createRouterFactory(config2),
+      /**
+      * Merge Routers
+      * @see https://trpc.io/docs/v11/server/merging-routers
+      */
+      mergeRouters,
+      /**
+      * Create a server-side caller for a router
+      * @see https://trpc.io/docs/v11/server/server-side-calls
+      */
+      createCallerFactory: createCallerFactory()
+    };
+  }
+}();
+
+// ../../../node_modules/@trpc/server/dist/observable-DwUFSuKv.mjs
+function observable(subscribe) {
+  const self = {
+    subscribe(observer) {
+      let teardownRef = null;
+      let isDone = false;
+      let unsubscribed = false;
+      let teardownImmediately = false;
+      function unsubscribe2() {
+        if (teardownRef === null) {
+          teardownImmediately = true;
+          return;
+        }
+        if (unsubscribed) return;
+        unsubscribed = true;
+        if (typeof teardownRef === "function") teardownRef();
+        else if (teardownRef) teardownRef.unsubscribe();
+      }
+      teardownRef = subscribe({
+        next(value) {
+          var _observer$next;
+          if (isDone) return;
+          (_observer$next = observer.next) === null || _observer$next === void 0 || _observer$next.call(observer, value);
+        },
+        error(err) {
+          var _observer$error;
+          if (isDone) return;
+          isDone = true;
+          (_observer$error = observer.error) === null || _observer$error === void 0 || _observer$error.call(observer, err);
+          unsubscribe2();
+        },
+        complete() {
+          var _observer$complete;
+          if (isDone) return;
+          isDone = true;
+          (_observer$complete = observer.complete) === null || _observer$complete === void 0 || _observer$complete.call(observer);
+          unsubscribe2();
+        }
+      });
+      if (teardownImmediately) unsubscribe2();
+      return { unsubscribe: unsubscribe2 };
+    },
+    pipe(...operations) {
+      return operations.reduce(pipeReducer, self);
+    }
+  };
+  return self;
+}
+function pipeReducer(prev, fn) {
+  return fn(prev);
+}
+
+// ../../shared/platform/src/safe-path.ts
+var UnsafePathError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "UnsafePathError";
+  }
+  code;
+};
+function isUnsafePathError(err) {
+  if (err instanceof UnsafePathError) return true;
+  if (!(err instanceof Error) || err.name !== "UnsafePathError") return false;
+  const code = err.code;
+  return code === "INVALID_ID" || code === "PATH_OUTSIDE_BASE";
+}
+
+// ../../shared/trpc-server/src/auth-gate.ts
+var authGate = () => false;
+function getAuthGate() {
+  return authGate();
+}
+
+// ../../../node_modules/superjson/dist/double-indexed-kv.js
+var DoubleIndexedKV = class {
+  constructor() {
+    this.keyToValue = /* @__PURE__ */ new Map();
+    this.valueToKey = /* @__PURE__ */ new Map();
+  }
+  set(key, value) {
+    this.keyToValue.set(key, value);
+    this.valueToKey.set(value, key);
+  }
+  getByKey(key) {
+    return this.keyToValue.get(key);
+  }
+  getByValue(value) {
+    return this.valueToKey.get(value);
+  }
+  clear() {
+    this.keyToValue.clear();
+    this.valueToKey.clear();
+  }
+};
+
+// ../../../node_modules/superjson/dist/registry.js
+var Registry = class {
+  constructor(generateIdentifier) {
+    this.generateIdentifier = generateIdentifier;
+    this.kv = new DoubleIndexedKV();
+  }
+  register(value, identifier) {
+    if (this.kv.getByValue(value)) {
+      return;
+    }
+    if (!identifier) {
+      identifier = this.generateIdentifier(value);
+    }
+    this.kv.set(identifier, value);
+  }
+  clear() {
+    this.kv.clear();
+  }
+  getIdentifier(value) {
+    return this.kv.getByValue(value);
+  }
+  getValue(identifier) {
+    return this.kv.getByKey(identifier);
+  }
+};
+
+// ../../../node_modules/superjson/dist/class-registry.js
+var ClassRegistry = class extends Registry {
+  constructor() {
+    super((c) => c.name);
+    this.classToAllowedProps = /* @__PURE__ */ new Map();
+  }
+  register(value, options) {
+    if (typeof options === "object") {
+      if (options.allowProps) {
+        this.classToAllowedProps.set(value, options.allowProps);
+      }
+      super.register(value, options.identifier);
+    } else {
+      super.register(value, options);
+    }
+  }
+  getAllowedProps(value) {
+    return this.classToAllowedProps.get(value);
+  }
+};
+
+// ../../../node_modules/superjson/dist/util.js
+function valuesOfObj(record2) {
+  if ("values" in Object) {
+    return Object.values(record2);
+  }
+  const values = [];
+  for (const key in record2) {
+    if (record2.hasOwnProperty(key)) {
+      values.push(record2[key]);
+    }
+  }
+  return values;
+}
+function find(record2, predicate) {
+  const values = valuesOfObj(record2);
+  if ("find" in values) {
+    return values.find(predicate);
+  }
+  const valuesNotNever = values;
+  for (let i = 0; i < valuesNotNever.length; i++) {
+    const value = valuesNotNever[i];
+    if (predicate(value)) {
+      return value;
+    }
+  }
+  return void 0;
+}
+function forEach(record2, run) {
+  Object.entries(record2).forEach(([key, value]) => run(value, key));
+}
+function includes(arr, value) {
+  return arr.indexOf(value) !== -1;
+}
+function findArr(record2, predicate) {
+  for (let i = 0; i < record2.length; i++) {
+    const value = record2[i];
+    if (predicate(value)) {
+      return value;
+    }
+  }
+  return void 0;
+}
+
+// ../../../node_modules/superjson/dist/custom-transformer-registry.js
+var CustomTransformerRegistry = class {
+  constructor() {
+    this.transfomers = {};
+  }
+  register(transformer) {
+    this.transfomers[transformer.name] = transformer;
+  }
+  findApplicable(v) {
+    return find(this.transfomers, (transformer) => transformer.isApplicable(v));
+  }
+  findByName(name) {
+    return this.transfomers[name];
+  }
+};
+
+// ../../../node_modules/superjson/dist/is.js
+var getType = (payload) => Object.prototype.toString.call(payload).slice(8, -1);
+var isUndefined = (payload) => typeof payload === "undefined";
+var isNull = (payload) => payload === null;
+var isPlainObject2 = (payload) => {
+  if (typeof payload !== "object" || payload === null)
+    return false;
+  if (payload === Object.prototype)
+    return false;
+  if (Object.getPrototypeOf(payload) === null)
+    return true;
+  return Object.getPrototypeOf(payload) === Object.prototype;
+};
+var isEmptyObject = (payload) => isPlainObject2(payload) && Object.keys(payload).length === 0;
+var isArray = (payload) => Array.isArray(payload);
+var isString = (payload) => typeof payload === "string";
+var isNumber = (payload) => typeof payload === "number" && !isNaN(payload);
+var isBoolean = (payload) => typeof payload === "boolean";
+var isRegExp = (payload) => payload instanceof RegExp;
+var isMap = (payload) => payload instanceof Map;
+var isSet = (payload) => payload instanceof Set;
+var isSymbol = (payload) => getType(payload) === "Symbol";
+var isDate = (payload) => payload instanceof Date && !isNaN(payload.valueOf());
+var isError = (payload) => payload instanceof Error;
+var isNaNValue = (payload) => typeof payload === "number" && isNaN(payload);
+var isPrimitive = (payload) => isBoolean(payload) || isNull(payload) || isUndefined(payload) || isNumber(payload) || isString(payload) || isSymbol(payload);
+var isBigint = (payload) => typeof payload === "bigint";
+var isInfinite = (payload) => payload === Infinity || payload === -Infinity;
+var isTypedArray = (payload) => ArrayBuffer.isView(payload) && !(payload instanceof DataView);
+var isURL = (payload) => payload instanceof URL;
+
+// ../../../node_modules/superjson/dist/pathstringifier.js
+var escapeKey = (key) => key.replace(/\\/g, "\\\\").replace(/\./g, "\\.");
+var stringifyPath = (path9) => path9.map(String).map(escapeKey).join(".");
+var parsePath = (string4, legacyPaths) => {
+  const result = [];
+  let segment = "";
+  for (let i = 0; i < string4.length; i++) {
+    let char = string4.charAt(i);
+    if (!legacyPaths && char === "\\") {
+      const escaped = string4.charAt(i + 1);
+      if (escaped === "\\") {
+        segment += "\\";
+        i++;
+        continue;
+      } else if (escaped !== ".") {
+        throw Error("invalid path");
+      }
+    }
+    const isEscapedDot = char === "\\" && string4.charAt(i + 1) === ".";
+    if (isEscapedDot) {
+      segment += ".";
+      i++;
+      continue;
+    }
+    const isEndOfSegment = char === ".";
+    if (isEndOfSegment) {
+      result.push(segment);
+      segment = "";
+      continue;
+    }
+    segment += char;
+  }
+  const lastSegment = segment;
+  result.push(lastSegment);
+  return result;
+};
+
+// ../../../node_modules/superjson/dist/transformer.js
+function simpleTransformation(isApplicable, annotation, transform2, untransform) {
+  return {
+    isApplicable,
+    annotation,
+    transform: transform2,
+    untransform
+  };
+}
+var simpleRules = [
+  simpleTransformation(isUndefined, "undefined", () => null, () => void 0),
+  simpleTransformation(isBigint, "bigint", (v) => v.toString(), (v) => {
+    if (typeof BigInt !== "undefined") {
+      return BigInt(v);
+    }
+    console.error("Please add a BigInt polyfill.");
+    return v;
+  }),
+  simpleTransformation(isDate, "Date", (v) => v.toISOString(), (v) => new Date(v)),
+  simpleTransformation(isError, "Error", (v, superJson) => {
+    const baseError = {
+      name: v.name,
+      message: v.message
+    };
+    if ("cause" in v) {
+      baseError.cause = v.cause;
+    }
+    superJson.allowedErrorProps.forEach((prop) => {
+      baseError[prop] = v[prop];
+    });
+    return baseError;
+  }, (v, superJson) => {
+    const e = new Error(v.message, { cause: v.cause });
+    e.name = v.name;
+    e.stack = v.stack;
+    superJson.allowedErrorProps.forEach((prop) => {
+      e[prop] = v[prop];
+    });
+    return e;
+  }),
+  simpleTransformation(isRegExp, "regexp", (v) => "" + v, (regex) => {
+    const body = regex.slice(1, regex.lastIndexOf("/"));
+    const flags = regex.slice(regex.lastIndexOf("/") + 1);
+    return new RegExp(body, flags);
+  }),
+  simpleTransformation(
+    isSet,
+    "set",
+    // (sets only exist in es6+)
+    // eslint-disable-next-line es5/no-es6-methods
+    (v) => [...v.values()],
+    (v) => new Set(v)
+  ),
+  simpleTransformation(isMap, "map", (v) => [...v.entries()], (v) => new Map(v)),
+  simpleTransformation((v) => isNaNValue(v) || isInfinite(v), "number", (v) => {
+    if (isNaNValue(v)) {
+      return "NaN";
+    }
+    if (v > 0) {
+      return "Infinity";
+    } else {
+      return "-Infinity";
+    }
+  }, Number),
+  simpleTransformation((v) => v === 0 && 1 / v === -Infinity, "number", () => {
+    return "-0";
+  }, Number),
+  simpleTransformation(isURL, "URL", (v) => v.toString(), (v) => new URL(v))
+];
+function compositeTransformation(isApplicable, annotation, transform2, untransform) {
+  return {
+    isApplicable,
+    annotation,
+    transform: transform2,
+    untransform
+  };
+}
+var symbolRule = compositeTransformation((s, superJson) => {
+  if (isSymbol(s)) {
+    const isRegistered = !!superJson.symbolRegistry.getIdentifier(s);
+    return isRegistered;
+  }
+  return false;
+}, (s, superJson) => {
+  const identifier = superJson.symbolRegistry.getIdentifier(s);
+  return ["symbol", identifier];
+}, (v) => v.description, (_, a, superJson) => {
+  const value = superJson.symbolRegistry.getValue(a[1]);
+  if (!value) {
+    throw new Error("Trying to deserialize unknown symbol");
+  }
+  return value;
+});
+var constructorToName = [
+  Int8Array,
+  Uint8Array,
+  Int16Array,
+  Uint16Array,
+  Int32Array,
+  Uint32Array,
+  Float32Array,
+  Float64Array,
+  Uint8ClampedArray
+].reduce((obj, ctor) => {
+  obj[ctor.name] = ctor;
+  return obj;
+}, {});
+var typedArrayRule = compositeTransformation(isTypedArray, (v) => ["typed-array", v.constructor.name], (v) => [...v], (v, a) => {
+  const ctor = constructorToName[a[1]];
+  if (!ctor) {
+    throw new Error("Trying to deserialize unknown typed array");
+  }
+  return new ctor(v);
+});
+function isInstanceOfRegisteredClass(potentialClass, superJson) {
+  if (potentialClass?.constructor) {
+    const isRegistered = !!superJson.classRegistry.getIdentifier(potentialClass.constructor);
+    return isRegistered;
+  }
+  return false;
+}
+var classRule = compositeTransformation(isInstanceOfRegisteredClass, (clazz, superJson) => {
+  const identifier = superJson.classRegistry.getIdentifier(clazz.constructor);
+  return ["class", identifier];
+}, (clazz, superJson) => {
+  const allowedProps = superJson.classRegistry.getAllowedProps(clazz.constructor);
+  if (!allowedProps) {
+    return { ...clazz };
+  }
+  const result = {};
+  allowedProps.forEach((prop) => {
+    result[prop] = clazz[prop];
+  });
+  return result;
+}, (v, a, superJson) => {
+  const clazz = superJson.classRegistry.getValue(a[1]);
+  if (!clazz) {
+    throw new Error(`Trying to deserialize unknown class '${a[1]}' - check https://github.com/blitz-js/superjson/issues/116#issuecomment-773996564`);
+  }
+  return Object.assign(Object.create(clazz.prototype), v);
+});
+var customRule = compositeTransformation((value, superJson) => {
+  return !!superJson.customTransformerRegistry.findApplicable(value);
+}, (value, superJson) => {
+  const transformer = superJson.customTransformerRegistry.findApplicable(value);
+  return ["custom", transformer.name];
+}, (value, superJson) => {
+  const transformer = superJson.customTransformerRegistry.findApplicable(value);
+  return transformer.serialize(value);
+}, (v, a, superJson) => {
+  const transformer = superJson.customTransformerRegistry.findByName(a[1]);
+  if (!transformer) {
+    throw new Error("Trying to deserialize unknown custom value");
+  }
+  return transformer.deserialize(v);
+});
+var compositeRules = [classRule, symbolRule, customRule, typedArrayRule];
+var transformValue = (value, superJson) => {
+  const applicableCompositeRule = findArr(compositeRules, (rule) => rule.isApplicable(value, superJson));
+  if (applicableCompositeRule) {
+    return {
+      value: applicableCompositeRule.transform(value, superJson),
+      type: applicableCompositeRule.annotation(value, superJson)
+    };
+  }
+  const applicableSimpleRule = findArr(simpleRules, (rule) => rule.isApplicable(value, superJson));
+  if (applicableSimpleRule) {
+    return {
+      value: applicableSimpleRule.transform(value, superJson),
+      type: applicableSimpleRule.annotation
+    };
+  }
+  return void 0;
+};
+var simpleRulesByAnnotation = {};
+simpleRules.forEach((rule) => {
+  simpleRulesByAnnotation[rule.annotation] = rule;
+});
+var untransformValue = (json2, type, superJson) => {
+  if (isArray(type)) {
+    switch (type[0]) {
+      case "symbol":
+        return symbolRule.untransform(json2, type, superJson);
+      case "class":
+        return classRule.untransform(json2, type, superJson);
+      case "custom":
+        return customRule.untransform(json2, type, superJson);
+      case "typed-array":
+        return typedArrayRule.untransform(json2, type, superJson);
+      default:
+        throw new Error("Unknown transformation: " + type);
+    }
+  } else {
+    const transformation = simpleRulesByAnnotation[type];
+    if (!transformation) {
+      throw new Error("Unknown transformation: " + type);
+    }
+    return transformation.untransform(json2, superJson);
+  }
+};
+
+// ../../../node_modules/superjson/dist/accessDeep.js
+var getNthKey = (value, n) => {
+  if (n > value.size)
+    throw new Error("index out of bounds");
+  const keys = value.keys();
+  while (n > 0) {
+    keys.next();
+    n--;
+  }
+  return keys.next().value;
+};
+function validatePath(path9) {
+  if (includes(path9, "__proto__")) {
+    throw new Error("__proto__ is not allowed as a property");
+  }
+  if (includes(path9, "prototype")) {
+    throw new Error("prototype is not allowed as a property");
+  }
+  if (includes(path9, "constructor")) {
+    throw new Error("constructor is not allowed as a property");
+  }
+}
+var getDeep = (object2, path9) => {
+  validatePath(path9);
+  for (let i = 0; i < path9.length; i++) {
+    const key = path9[i];
+    if (isSet(object2)) {
+      object2 = getNthKey(object2, +key);
+    } else if (isMap(object2)) {
+      const row = +key;
+      const type = +path9[++i] === 0 ? "key" : "value";
+      const keyOfRow = getNthKey(object2, row);
+      switch (type) {
+        case "key":
+          object2 = keyOfRow;
+          break;
+        case "value":
+          object2 = object2.get(keyOfRow);
+          break;
+      }
+    } else {
+      object2 = object2[key];
+    }
+  }
+  return object2;
+};
+var setDeep = (object2, path9, mapper) => {
+  validatePath(path9);
+  if (path9.length === 0) {
+    return mapper(object2);
+  }
+  let parent = object2;
+  for (let i = 0; i < path9.length - 1; i++) {
+    const key = path9[i];
+    if (isArray(parent)) {
+      const index = +key;
+      parent = parent[index];
+    } else if (isPlainObject2(parent)) {
+      parent = parent[key];
+    } else if (isSet(parent)) {
+      const row = +key;
+      parent = getNthKey(parent, row);
+    } else if (isMap(parent)) {
+      const isEnd = i === path9.length - 2;
+      if (isEnd) {
+        break;
+      }
+      const row = +key;
+      const type = +path9[++i] === 0 ? "key" : "value";
+      const keyOfRow = getNthKey(parent, row);
+      switch (type) {
+        case "key":
+          parent = keyOfRow;
+          break;
+        case "value":
+          parent = parent.get(keyOfRow);
+          break;
+      }
+    }
+  }
+  const lastKey = path9[path9.length - 1];
+  if (isArray(parent)) {
+    parent[+lastKey] = mapper(parent[+lastKey]);
+  } else if (isPlainObject2(parent)) {
+    parent[lastKey] = mapper(parent[lastKey]);
+  }
+  if (isSet(parent)) {
+    const oldValue = getNthKey(parent, +lastKey);
+    const newValue = mapper(oldValue);
+    if (oldValue !== newValue) {
+      parent.delete(oldValue);
+      parent.add(newValue);
+    }
+  }
+  if (isMap(parent)) {
+    const row = +path9[path9.length - 2];
+    const keyToRow = getNthKey(parent, row);
+    const type = +lastKey === 0 ? "key" : "value";
+    switch (type) {
+      case "key": {
+        const newKey = mapper(keyToRow);
+        parent.set(newKey, parent.get(keyToRow));
+        if (newKey !== keyToRow) {
+          parent.delete(keyToRow);
+        }
+        break;
+      }
+      case "value": {
+        parent.set(keyToRow, mapper(parent.get(keyToRow)));
+        break;
+      }
+    }
+  }
+  return object2;
+};
+
+// ../../../node_modules/superjson/dist/plainer.js
+var enableLegacyPaths = (version2) => version2 < 1;
+function traverse(tree, walker2, version2, origin = []) {
+  if (!tree) {
+    return;
+  }
+  const legacyPaths = enableLegacyPaths(version2);
+  if (!isArray(tree)) {
+    forEach(tree, (subtree, key) => traverse(subtree, walker2, version2, [
+      ...origin,
+      ...parsePath(key, legacyPaths)
+    ]));
+    return;
+  }
+  const [nodeValue, children] = tree;
+  if (children) {
+    forEach(children, (child, key) => {
+      traverse(child, walker2, version2, [
+        ...origin,
+        ...parsePath(key, legacyPaths)
+      ]);
+    });
+  }
+  walker2(nodeValue, origin);
+}
+function applyValueAnnotations(plain, annotations, version2, superJson) {
+  traverse(annotations, (type, path9) => {
+    plain = setDeep(plain, path9, (v) => untransformValue(v, type, superJson));
+  }, version2);
+  return plain;
+}
+function applyReferentialEqualityAnnotations(plain, annotations, version2) {
+  const legacyPaths = enableLegacyPaths(version2);
+  function apply(identicalPaths, path9) {
+    const object2 = getDeep(plain, parsePath(path9, legacyPaths));
+    identicalPaths.map((path10) => parsePath(path10, legacyPaths)).forEach((identicalObjectPath) => {
+      plain = setDeep(plain, identicalObjectPath, () => object2);
+    });
+  }
+  if (isArray(annotations)) {
+    const [root, other] = annotations;
+    root.forEach((identicalPath) => {
+      plain = setDeep(plain, parsePath(identicalPath, legacyPaths), () => plain);
+    });
+    if (other) {
+      forEach(other, apply);
+    }
+  } else {
+    forEach(annotations, apply);
+  }
+  return plain;
+}
+var isDeep = (object2, superJson) => isPlainObject2(object2) || isArray(object2) || isMap(object2) || isSet(object2) || isError(object2) || isInstanceOfRegisteredClass(object2, superJson);
+function addIdentity(object2, path9, identities) {
+  const existingSet = identities.get(object2);
+  if (existingSet) {
+    existingSet.push(path9);
+  } else {
+    identities.set(object2, [path9]);
+  }
+}
+function generateReferentialEqualityAnnotations(identitites, dedupe) {
+  const result = {};
+  let rootEqualityPaths = void 0;
+  identitites.forEach((paths) => {
+    if (paths.length <= 1) {
+      return;
+    }
+    if (!dedupe) {
+      paths = paths.map((path9) => path9.map(String)).sort((a, b) => a.length - b.length);
+    }
+    const [representativePath, ...identicalPaths] = paths;
+    if (representativePath.length === 0) {
+      rootEqualityPaths = identicalPaths.map(stringifyPath);
+    } else {
+      result[stringifyPath(representativePath)] = identicalPaths.map(stringifyPath);
+    }
+  });
+  if (rootEqualityPaths) {
+    if (isEmptyObject(result)) {
+      return [rootEqualityPaths];
+    } else {
+      return [rootEqualityPaths, result];
+    }
+  } else {
+    return isEmptyObject(result) ? void 0 : result;
+  }
+}
+var walker = (object2, identities, superJson, dedupe, path9 = [], objectsInThisPath = [], seenObjects = /* @__PURE__ */ new Map()) => {
+  const primitive = isPrimitive(object2);
+  if (!primitive) {
+    addIdentity(object2, path9, identities);
+    const seen = seenObjects.get(object2);
+    if (seen) {
+      return dedupe ? {
+        transformedValue: null
+      } : seen;
+    }
+  }
+  if (!isDeep(object2, superJson)) {
+    const transformed2 = transformValue(object2, superJson);
+    const result2 = transformed2 ? {
+      transformedValue: transformed2.value,
+      annotations: [transformed2.type]
+    } : {
+      transformedValue: object2
+    };
+    if (!primitive) {
+      seenObjects.set(object2, result2);
+    }
+    return result2;
+  }
+  if (includes(objectsInThisPath, object2)) {
+    return {
+      transformedValue: null
+    };
+  }
+  const transformationResult = transformValue(object2, superJson);
+  const transformed = transformationResult?.value ?? object2;
+  const transformedValue = isArray(transformed) ? [] : {};
+  const innerAnnotations = {};
+  forEach(transformed, (value, index) => {
+    if (index === "__proto__" || index === "constructor" || index === "prototype") {
+      throw new Error(`Detected property ${index}. This is a prototype pollution risk, please remove it from your object.`);
+    }
+    const recursiveResult = walker(value, identities, superJson, dedupe, [...path9, index], [...objectsInThisPath, object2], seenObjects);
+    transformedValue[index] = recursiveResult.transformedValue;
+    if (isArray(recursiveResult.annotations)) {
+      innerAnnotations[escapeKey(index)] = recursiveResult.annotations;
+    } else if (isPlainObject2(recursiveResult.annotations)) {
+      forEach(recursiveResult.annotations, (tree, key) => {
+        innerAnnotations[escapeKey(index) + "." + key] = tree;
+      });
+    }
+  });
+  const result = isEmptyObject(innerAnnotations) ? {
+    transformedValue,
+    annotations: !!transformationResult ? [transformationResult.type] : void 0
+  } : {
+    transformedValue,
+    annotations: !!transformationResult ? [transformationResult.type, innerAnnotations] : innerAnnotations
+  };
+  if (!primitive) {
+    seenObjects.set(object2, result);
+  }
+  return result;
+};
+
+// ../../../node_modules/is-what/dist/getType.js
+function getType2(payload) {
+  return Object.prototype.toString.call(payload).slice(8, -1);
+}
+
+// ../../../node_modules/is-what/dist/isArray.js
+function isArray2(payload) {
+  return getType2(payload) === "Array";
+}
+
+// ../../../node_modules/is-what/dist/isPlainObject.js
+function isPlainObject3(payload) {
+  if (getType2(payload) !== "Object")
+    return false;
+  const prototype = Object.getPrototypeOf(payload);
+  return !!prototype && prototype.constructor === Object && prototype === Object.prototype;
+}
+
+// ../../../node_modules/copy-anything/dist/index.js
+function assignProp2(carry, key, newVal, originalObject, includeNonenumerable) {
+  const propType = {}.propertyIsEnumerable.call(originalObject, key) ? "enumerable" : "nonenumerable";
+  if (propType === "enumerable")
+    carry[key] = newVal;
+  if (includeNonenumerable && propType === "nonenumerable") {
+    Object.defineProperty(carry, key, {
+      value: newVal,
+      enumerable: false,
+      writable: true,
+      configurable: true
+    });
+  }
+}
+function copy2(target2, options = {}) {
+  if (isArray2(target2)) {
+    return target2.map((item) => copy2(item, options));
+  }
+  if (!isPlainObject3(target2)) {
+    return target2;
+  }
+  const props = Object.getOwnPropertyNames(target2);
+  const symbols = Object.getOwnPropertySymbols(target2);
+  return [...props, ...symbols].reduce((carry, key) => {
+    if (key === "__proto__")
+      return carry;
+    if (isArray2(options.props) && !options.props.includes(key)) {
+      return carry;
+    }
+    const val = target2[key];
+    const newVal = copy2(val, options);
+    assignProp2(carry, key, newVal, target2, options.nonenumerable);
+    return carry;
+  }, {});
+}
+
+// ../../../node_modules/superjson/dist/index.js
+var SuperJSON = class {
+  /**
+   * @param dedupeReferentialEqualities  If true, SuperJSON will make sure only one instance of referentially equal objects are serialized and the rest are replaced with `null`.
+   */
+  constructor({ dedupe = false } = {}) {
+    this.classRegistry = new ClassRegistry();
+    this.symbolRegistry = new Registry((s) => s.description ?? "");
+    this.customTransformerRegistry = new CustomTransformerRegistry();
+    this.allowedErrorProps = [];
+    this.dedupe = dedupe;
+  }
+  serialize(object2) {
+    const identities = /* @__PURE__ */ new Map();
+    const output2 = walker(object2, identities, this, this.dedupe);
+    const res = {
+      json: output2.transformedValue
+    };
+    if (output2.annotations) {
+      res.meta = {
+        ...res.meta,
+        values: output2.annotations
+      };
+    }
+    const equalityAnnotations = generateReferentialEqualityAnnotations(identities, this.dedupe);
+    if (equalityAnnotations) {
+      res.meta = {
+        ...res.meta,
+        referentialEqualities: equalityAnnotations
+      };
+    }
+    if (res.meta)
+      res.meta.v = 1;
+    return res;
+  }
+  deserialize(payload, options) {
+    const { json: json2, meta: meta3 } = payload;
+    let result = options?.inPlace ? json2 : copy2(json2);
+    if (meta3?.values) {
+      result = applyValueAnnotations(result, meta3.values, meta3.v ?? 0, this);
+    }
+    if (meta3?.referentialEqualities) {
+      result = applyReferentialEqualityAnnotations(result, meta3.referentialEqualities, meta3.v ?? 0);
+    }
+    return result;
+  }
+  stringify(object2) {
+    return JSON.stringify(this.serialize(object2));
+  }
+  parse(string4) {
+    return this.deserialize(JSON.parse(string4), { inPlace: true });
+  }
+  registerClass(v, options) {
+    this.classRegistry.register(v, options);
+  }
+  registerSymbol(v, identifier) {
+    this.symbolRegistry.register(v, identifier);
+  }
+  registerCustom(transformer, name) {
+    this.customTransformerRegistry.register({
+      name,
+      ...transformer
+    });
+  }
+  allowErrorProps(...props) {
+    this.allowedErrorProps.push(...props);
+  }
+};
+SuperJSON.defaultInstance = new SuperJSON();
+SuperJSON.serialize = SuperJSON.defaultInstance.serialize.bind(SuperJSON.defaultInstance);
+SuperJSON.deserialize = SuperJSON.defaultInstance.deserialize.bind(SuperJSON.defaultInstance);
+SuperJSON.stringify = SuperJSON.defaultInstance.stringify.bind(SuperJSON.defaultInstance);
+SuperJSON.parse = SuperJSON.defaultInstance.parse.bind(SuperJSON.defaultInstance);
+SuperJSON.registerClass = SuperJSON.defaultInstance.registerClass.bind(SuperJSON.defaultInstance);
+SuperJSON.registerSymbol = SuperJSON.defaultInstance.registerSymbol.bind(SuperJSON.defaultInstance);
+SuperJSON.registerCustom = SuperJSON.defaultInstance.registerCustom.bind(SuperJSON.defaultInstance);
+SuperJSON.allowErrorProps = SuperJSON.defaultInstance.allowErrorProps.bind(SuperJSON.defaultInstance);
+var dist_default = SuperJSON;
+var serialize = SuperJSON.serialize;
+var deserialize = SuperJSON.deserialize;
+var stringify = SuperJSON.stringify;
+var parse4 = SuperJSON.parse;
+var registerClass = SuperJSON.registerClass;
+var registerCustom = SuperJSON.registerCustom;
+var registerSymbol = SuperJSON.registerSymbol;
+var allowErrorProps = SuperJSON.allowErrorProps;
+
+// ../../shared/trpc-server/src/trpc-transformer.ts
+var OBJECT_PROTO = Object.prototype;
+var ARRAY_PROTO = Array.prototype;
+function isPlainJsonData(value, seen) {
+  switch (typeof value) {
+    case "string":
+    case "boolean":
+      return true;
+    case "number":
+      return Number.isFinite(value) && !(value === 0 && 1 / value < 0);
+    case "object":
+      break;
+    default:
+      return false;
+  }
+  if (value === null) return true;
+  if (seen.has(value)) return false;
+  seen.add(value);
+  const proto = Object.getPrototypeOf(value);
+  if (Array.isArray(value)) {
+    if (proto !== ARRAY_PROTO) return false;
+    const arr = value;
+    if (Object.keys(arr).length !== arr.length) return false;
+    for (let i = 0; i < arr.length; i++) {
+      if (!isPlainJsonData(arr[i], seen)) return false;
+    }
+    return true;
+  }
+  if (proto !== OBJECT_PROTO && proto !== null) return false;
+  if (value === OBJECT_PROTO) return false;
+  const obj = value;
+  for (const key of Object.keys(obj)) {
+    if (key === "__proto__" || key === "constructor" || key === "prototype") return false;
+    if (!isPlainJsonData(obj[key], seen)) return false;
+  }
+  return true;
+}
+function serializeOutput(value) {
+  if (isPlainJsonData(value, /* @__PURE__ */ new Set())) return { json: value };
+  return dist_default.serialize(value);
+}
+var trpcTransformer = {
+  input: dist_default,
+  output: {
+    serialize: serializeOutput,
+    deserialize: dist_default.deserialize
+  }
+};
+
+// ../../shared/trpc-server/src/access-class.ts
+var ADMIN_ONLY = "ADMIN_ONLY";
+function roleAllows(cls, role) {
+  if (role === "admin") return true;
+  return cls === "user" || cls === "open";
+}
+
+// ../../shared/trpc-server/src/admin-gate.ts
+var AdminOnlyError = class extends Error {
+  constructor(target2) {
+    super(`${target2} needs a hub admin account`);
+    this.target = target2;
+    this.name = "AdminOnlyError";
+  }
+  target;
+  code = ADMIN_ONLY;
+};
+function isAdminOnlyError(err) {
+  if (err instanceof AdminOnlyError) return true;
+  return err instanceof Error && err.name === "AdminOnlyError" && err.code === ADMIN_ONLY;
+}
+function auditAdminDenied(opts) {
+  securityEvent({
+    event: "authz.denied",
+    outcome: "denied",
+    targetKind: opts.targetKind ?? null,
+    targetId: opts.targetId ?? null,
+    actor: opts.actor,
+    ip: opts.ip,
+    route: opts.route,
+    detail: { reason: "not_admin", code: ADMIN_ONLY, ...opts.detail }
+  });
+}
+function adminOnlyTrpcError(path9) {
+  auditAdminDenied({ targetKind: "procedure", targetId: path9 });
+  return new TRPCError({
+    code: "FORBIDDEN",
+    message: `${path9} needs a hub admin account`,
+    cause: new AdminOnlyError(path9)
+  });
+}
+
+// ../../shared/trpc-server/src/app-codes.ts
+var extractors = [];
+function registeredAppCodes(cause) {
+  let out = {};
+  for (const extract of extractors) {
+    const code = extract(cause);
+    if (code !== void 0) out = { appCode: code };
+  }
+  return out;
+}
+
+// ../../shared/trpc-server/src/procedure-policy.ts
+var registered = null;
+function procedurePolicy() {
+  if (!registered) {
+    throw new Error(
+      "tRPC procedure policy not registered: import the composition (@slayzone/api router.ts) before serving"
+    );
+  }
+  return registered;
+}
+
+// ../../shared/trpc-server/src/trpc.ts
+var t = initTRPC.context().create({
+  // superjson on the wire; responses skip superjson's walk when they are plain
+  // JSON data (byte-identical output) — see trpc-transformer.ts.
+  transformer: trpcTransformer,
+  // A hub-switch refusal carries its stable code (`HUB_PROCESSES_DISABLED`, …) to the
+  // client as `data.appCode`; every other error keeps its shape exactly.
+  errorFormatter: ({ shape, error: error62 }) => ({
+    ...shape,
+    data: {
+      ...shape.data,
+      ...isHubSwitchedOffError(error62.cause) ? { appCode: error62.cause.code } : {},
+      // A role refusal (T-15) carries `ADMIN_ONLY` the same way.
+      ...isAdminOnlyError(error62.cause) ? { appCode: ADMIN_ONLY } : {},
+      // An id refused as a path segment (T-104): `INVALID_ID` / `PATH_OUTSIDE_BASE`.
+      ...isUnsafePathError(error62.cause) ? { appCode: error62.cause.code } : {},
+      // A domain's own refusal, registered by the module defining its error (see
+      // app-codes.ts) — e.g. a refused join-token mint (T-20, `@slayzone/api`'s
+      // join-token-policy.ts): `JOIN_TOKEN_OWNER_REQUIRED`, `…_TTL_TOO_LONG`, ….
+      ...registeredAppCodes(error62.cause)
+    }
+  })
+});
+var router = t.router;
+var middleware = t.middleware;
+var mergeRouters2 = t.mergeRouters;
+var securityContext = t.middleware(
+  ({ ctx, next, path: path9 }) => runWithSecurityContext(
+    { actor: ctx.principal?.userId ?? null, ip: peerAddress(ctx.req), route: `trpc ${path9}` },
+    () => next()
+  )
+);
+function auditDenied(path9, detail) {
+  securityEvent({
+    event: "authz.denied",
+    outcome: "denied",
+    targetKind: "procedure",
+    targetId: path9,
+    detail
+  });
+}
+var authGate2 = t.middleware(({ ctx, next, path: path9 }) => {
+  if (getAuthGate() && !ctx.principal) {
+    auditDenied(path9, { reason: "unauthenticated" });
+    throw new TRPCError({ code: "UNAUTHORIZED", message: "hub requires authentication" });
+  }
+  return next();
+});
+var scopeGate = t.middleware(({ ctx, next, path: path9 }) => {
+  if (!getAuthGate()) return next();
+  const scopes = ctx.principal?.scopes ?? [];
+  if (!procedurePolicy().scopeAllows(scopes, path9)) {
+    auditDenied(path9, { reason: "scope", scopes });
+    throw new TRPCError({ code: "FORBIDDEN", message: `insufficient scope for ${path9}` });
+  }
+  return next();
+});
+var adminGate = t.middleware(({ ctx, next, path: path9 }) => {
+  if (!getAuthGate()) return next();
+  if (!roleAllows(procedurePolicy().adminClassOf(path9), ctx.principal?.role ?? "user")) {
+    throw adminOnlyTrpcError(path9);
+  }
+  return next();
+});
+var ownerGate = t.middleware(async ({ ctx, next, path: path9, type, getRawInput }) => {
+  const filter = getAuthGate() ? await procedurePolicy().ownerCheck({ ctx, path: path9, type, getRawInput }) : null;
+  const result = await next();
+  if (!filter || !result.ok) return result;
+  return { ...result, data: await filter(result.data) };
+});
+var switchRefusal = t.middleware(async ({ next }) => {
+  const result = await next();
+  if (!result.ok && isHubSwitchedOffError(result.error.cause)) {
+    throw new TRPCError({
+      code: "FORBIDDEN",
+      message: result.error.cause.message,
+      cause: result.error.cause
+    });
+  }
+  return result;
+});
+var unsafePathRefusal = t.middleware(async ({ next }) => {
+  const result = await next();
+  if (!result.ok && isUnsafePathError(result.error.cause)) {
+    throw new TRPCError({
+      code: "BAD_REQUEST",
+      message: result.error.cause.message,
+      cause: result.error.cause
+    });
+  }
+  return result;
+});
+var publicProcedure = t.procedure.use(securityContext).use(authGate2).use(adminGate).use(scopeGate).use(ownerGate).use(switchRefusal).use(unsafePathRefusal);
+var hubLocalProcedure = publicProcedure.use(({ next, path: path9 }) => {
+  assertHubLocalExecEnabled({ op: path9 });
+  return next();
+});
+var openProcedure = t.procedure.use(securityContext);
+
+// ../../domains/file-editor/src/server/file-editor-router-deps.ts
+var deps = null;
+function getFileEditorRouterDeps() {
+  if (!deps)
+    throw new Error(
+      "fileEditor router deps not initialized \u2014 @slayzone/api wires them when it composes the router"
+    );
+  return deps;
+}
+
+// ../../domains/file-editor/src/server/file-editor-router.ts
+var searchOptions = external_exports.unknown();
+var target = {
+  computerId: external_exports.string().nullable().optional(),
+  taskId: external_exports.string().optional(),
+  projectId: external_exports.string().optional()
+};
+var resolve5 = (input2) => getWorkspaceDeps().resolveComputer(input2);
+var fs5 = () => getWorkspaceDeps().fs;
+var fileEditorRouter = router({
+  readDir: publicProcedure.input(external_exports.object({ ...target, rootPath: external_exports.string(), dirPath: external_exports.string() })).query(async ({ input: input2 }) => fs5().readDir(await resolve5(input2), input2.rootPath, input2.dirPath)),
+  readFile: publicProcedure.input(
+    external_exports.object({
+      ...target,
+      rootPath: external_exports.string(),
+      filePath: external_exports.string(),
+      force: external_exports.boolean().optional()
+    })
+  ).query(
+    async ({ input: input2 }) => fs5().readFile(await resolve5(input2), input2.rootPath, input2.filePath, input2.force)
+  ),
+  /**
+   * Whole-tree read, capped at the transport layer. `truncated` is preserved
+   * rather than dropped: a partial tree presented as complete is how a
+   * quick-open silently stops finding files.
+   */
+  listAllFiles: publicProcedure.input(external_exports.object({ ...target, rootPath: external_exports.string() })).query(async ({ input: input2 }) => fs5().listAllFiles(await resolve5(input2), input2.rootPath)),
+  writeFile: publicProcedure.input(external_exports.object({ ...target, rootPath: external_exports.string(), filePath: external_exports.string(), content: external_exports.string() })).mutation(async ({ input: input2 }) => {
+    await fs5().writeFile(await resolve5(input2), input2.rootPath, input2.filePath, input2.content);
+  }),
+  createFile: publicProcedure.input(external_exports.object({ ...target, rootPath: external_exports.string(), filePath: external_exports.string() })).mutation(async ({ input: input2 }) => {
+    await fs5().createFile(await resolve5(input2), input2.rootPath, input2.filePath);
+  }),
+  createDir: publicProcedure.input(external_exports.object({ ...target, rootPath: external_exports.string(), dirPath: external_exports.string() })).mutation(async ({ input: input2 }) => {
+    await fs5().createDir(await resolve5(input2), input2.rootPath, input2.dirPath);
+  }),
+  rename: publicProcedure.input(external_exports.object({ ...target, rootPath: external_exports.string(), oldPath: external_exports.string(), newPath: external_exports.string() })).mutation(async ({ input: input2 }) => {
+    await fs5().rename(await resolve5(input2), input2.rootPath, input2.oldPath, input2.newPath);
+  }),
+  delete: publicProcedure.input(external_exports.object({ ...target, rootPath: external_exports.string(), targetPath: external_exports.string() })).mutation(async ({ input: input2 }) => {
+    await fs5().delete(await resolve5(input2), input2.rootPath, input2.targetPath);
+  }),
+  copyIn: publicProcedure.input(
+    external_exports.object({
+      ...target,
+      rootPath: external_exports.string(),
+      absoluteSrc: external_exports.string(),
+      targetDir: external_exports.string().optional()
+    })
+  ).mutation(
+    async ({ input: input2 }) => fs5().copyIn(await resolve5(input2), input2.rootPath, input2.absoluteSrc, input2.targetDir)
+  ),
+  copy: publicProcedure.input(external_exports.object({ ...target, rootPath: external_exports.string(), srcPath: external_exports.string(), destPath: external_exports.string() })).mutation(async ({ input: input2 }) => {
+    await fs5().copy(await resolve5(input2), input2.rootPath, input2.srcPath, input2.destPath);
+  }),
+  gitStatus: publicProcedure.input(external_exports.object({ ...target, rootPath: external_exports.string() })).query(async ({ input: input2 }) => fs5().gitStatus(await resolve5(input2), input2.rootPath)),
+  searchFiles: publicProcedure.input(
+    external_exports.object({
+      ...target,
+      rootPath: external_exports.string(),
+      query: external_exports.string(),
+      options: searchOptions.optional()
+    })
+  ).query(
+    async ({ input: input2 }) => fs5().searchFiles(await resolve5(input2), input2.rootPath, input2.query, input2.options)
+  ),
+  /**
+   * Reveal in the OS file manager.
+   *
+   * Deliberately NOT routed. There is no Finder on a headless computer, and even if
+   * there were, revealing a folder on a machine the user is not sitting at is not
+   * the action they asked for. The path resolves against the DESKTOP, so the UI
+   * should only offer this when the workspace is co-resident — the caller decides.
+   */
+  showInFinder: publicProcedure.input(external_exports.object({ rootPath: external_exports.string(), targetPath: external_exports.string() })).mutation(async ({ input: input2 }) => {
+    const path9 = await import("node:path");
+    const abs = input2.targetPath ? path9.resolve(input2.rootPath, input2.targetPath) : path9.resolve(input2.rootPath);
+    getFileEditorRouterDeps().shellShowItemInFolder(abs);
+  }),
+  /**
+   * Subscribe to changes under rootPath.
+   *
+   * The source is the computer's watcher, streamed back as `fs.change` frames and
+   * demuxed by a hub-minted watchId. A lost computer COMPLETES the stream rather
+   * than going quiet, because a watcher that simply stops emitting is
+   * indistinguishable from a directory that stopped changing — and the client
+   * would keep showing a stale tree believing it was live.
+   */
+  watch: publicProcedure.input(external_exports.object({ ...target, rootPath: external_exports.string() })).subscription(
+    ({ input: input2 }) => observable((emit) => {
+      let dispose = null;
+      let cancelled = false;
+      resolve5(input2).then((computerId) => {
+        if (cancelled) return;
+        dispose = fs5().watch(computerId, input2.rootPath, (e) => emit.next(e));
+      }).catch((err) => {
+        if (cancelled) return;
+        emit.error(
+          isHubSwitchedOffError(err) ? new TRPCError({ code: "FORBIDDEN", message: err.message, cause: err }) : err
+        );
+      });
+      return () => {
+        cancelled = true;
+        dispose?.();
+      };
+    })
+  )
+});
+
+// ../../domains/file-editor/src/server/workspace-router.ts
+var targetInput = external_exports.object({
+  computerId: external_exports.string().nullable().optional(),
+  taskId: external_exports.string().optional(),
+  projectId: external_exports.string().optional()
+});
+function refusalCode(err) {
+  return isHubSwitchedOffError(err) ? { code: err.code } : {};
+}
+var workspaceRouter = router({
+  /**
+   * Where browsing may start on the target machine, in that machine's idiom
+   * (platform + separator), so the client never assumes POSIX or the desktop's OS.
+   *
+   * An empty `roots` array is a real, actionable state — a computer whose
+   * `allowedRoots` is unconfigured refuses all filesystem access — and must be
+   * surfaced as such rather than rendered as an empty directory.
+   */
+  listRoots: publicProcedure.input(targetInput).query(async ({ input: input2 }) => {
+    const { fs: fs7, resolveComputer, isLocalComputer } = getWorkspaceDeps();
+    const computerId = await resolveComputer(input2);
+    return { computerId, isLocal: isLocalComputer(computerId), ...await fs7.listRoots(computerId) };
+  }),
+  listDir: publicProcedure.input(
+    targetInput.extend({
+      /** Absolute path ON THE TARGET machine. */
+      path: external_exports.string().min(1),
+      dirsOnly: external_exports.boolean().optional(),
+      includeHidden: external_exports.boolean().optional()
+    })
+  ).query(async ({ input: input2 }) => {
+    const { fs: fs7, resolveComputer } = getWorkspaceDeps();
+    const computerId = await resolveComputer(input2);
+    const res = await fs7.listDir(computerId, input2.path, {
+      dirsOnly: input2.dirsOnly,
+      includeHidden: input2.includeHidden
+    });
+    return { computerId, ...res };
+  }),
+  mkdir: publicProcedure.input(targetInput.extend({ path: external_exports.string().min(1) })).mutation(async ({ input: input2 }) => {
+    const { fs: fs7, resolveComputer } = getWorkspaceDeps();
+    const computerId = await resolveComputer(input2);
+    const res = await fs7.mkdir(computerId, input2.path);
+    return { computerId, ...res };
+  }),
+  /**
+   * Replace a computer's path-jail (Settings → Computers).
+   *
+   * Routing the filesystem through computers gave the co-resident local computer's
+   * `[homedir()]` default authority over ops the desktop previously ran unjailed
+   * — so a project on `/Volumes` or `/opt` would have stopped working. This is
+   * the escape hatch that keeps that from being a cap.
+   *
+   * Returns what was actually applied plus what was rejected, so the UI can name
+   * the entry that did not take rather than showing a list that silently differs
+   * from the enforced one.
+   */
+  setAllowedRoots: publicProcedure.input(targetInput.extend({ roots: external_exports.array(external_exports.string().min(1)) })).mutation(async ({ input: input2 }) => {
+    const { fs: fs7, resolveComputer } = getWorkspaceDeps();
+    const computerId = await resolveComputer(input2);
+    return { computerId, ...await fs7.setAllowedRoots(computerId, input2.roots) };
+  }),
+  /**
+   * Where does the target machine keep this project?
+   *
+   * `path: null` means that machine has no checkout — the honest answer the
+   * hub's single `projects.path` column could never give, since it always had
+   * *a* path even for a computer that had never seen the project. `exists: false`
+   * is different again: recorded, but the folder is gone.
+   */
+  resolveProjectPath: publicProcedure.input(targetInput.extend({ projectId: external_exports.string().min(1) })).query(async ({ input: input2 }) => {
+    const { fs: fs7, resolveComputer } = getWorkspaceDeps();
+    const computerId = await resolveComputer(input2);
+    try {
+      return {
+        computerId,
+        reachable: true,
+        ...await fs7.resolveProjectPath(computerId, input2.projectId)
+      };
+    } catch (err) {
+      return {
+        computerId,
+        reachable: false,
+        path: null,
+        error: err instanceof Error ? err.message : String(err),
+        ...refusalCode(err)
+      };
+    }
+  }),
+  /** Adopt an existing folder on the target machine as this project's checkout. */
+  setProjectPath: publicProcedure.input(
+    targetInput.extend({
+      projectId: external_exports.string().min(1),
+      path: external_exports.string().min(1)
+    })
+  ).mutation(async ({ input: input2 }) => {
+    const { fs: fs7, resolveComputer } = getWorkspaceDeps();
+    const computerId = await resolveComputer(input2);
+    return {
+      computerId,
+      ...await fs7.setProjectPath(computerId, input2.projectId, input2.path)
+    };
+  }),
+  /** Drop the mapping on that machine. The checkout itself is left alone. */
+  forgetProjectPath: publicProcedure.input(targetInput.extend({ projectId: external_exports.string().min(1) })).mutation(async ({ input: input2 }) => {
+    const { fs: fs7, resolveComputer } = getWorkspaceDeps();
+    const computerId = await resolveComputer(input2);
+    await fs7.forgetProjectPath(computerId, input2.projectId);
+    return { computerId, ok: true };
+  }),
+  /**
+   * Does a path exist on the target machine?
+   *
+   * This is the honest replacement for `app.files.pathExists`, which always
+   * probed the hub. `reachable: false` distinguishes "the computer said no" from
+   * "we could not ask" — collapsing those is what produced a permanent
+   * "No repository path configured" for a path that was fine.
+   */
+  pathExists: publicProcedure.input(targetInput.extend({ path: external_exports.string().min(1) })).query(async ({ input: input2 }) => {
+    const { fs: fs7, resolveComputer } = getWorkspaceDeps();
+    const computerId = await resolveComputer(input2);
+    try {
+      return { computerId, exists: await fs7.pathExists(computerId, input2.path), reachable: true };
+    } catch (err) {
+      return {
+        computerId,
+        exists: false,
+        reachable: false,
+        error: err instanceof Error ? err.message : String(err),
+        ...refusalCode(err)
+      };
+    }
+  })
+});
+
+// src/handlers/fs.ts
+var BROWSE_ALWAYS_HIDDEN2 = /* @__PURE__ */ new Set([".git", ".DS_Store", "node_modules"]);
+function createFsHandlers(ctx) {
+  const allow = (candidate, subtree = false) => assertPathAllowed(candidate, ctx.config.allowedRoots, { subtree });
+  const allowIn = (rootPath, rel, subtree = false) => {
+    const root = allow(rootPath);
+    allow((0, import_node_path10.join)(root, rel), subtree);
+    return root;
+  };
+  const watches = /* @__PURE__ */ new Map();
+  function pathExists(rawParams) {
+    const { path: path9 } = fsPathExistsParamsSchema.parse(rawParams);
+    const resolved = allow(path9);
+    return { exists: (0, import_node_fs7.existsSync)(resolved) };
+  }
+  async function removeDir(rawParams) {
+    const { path: path9 } = fsRemoveDirParamsSchema.parse(rawParams);
+    const resolved = allow(path9, true);
+    await (0, import_promises7.rm)(resolved, { recursive: true, force: true });
+    ctx.log("fs removeDir", { path: resolved });
+    return { ok: true };
+  }
+  function listRoots(rawParams) {
+    fsListRootsParamsSchema.parse(rawParams ?? {});
+    const resolvedRoots = [];
+    for (const root of ctx.config.allowedRoots) {
+      try {
+        resolvedRoots.push(import_node_fs7.realpathSync.native((0, import_node_path10.resolve)(root)));
+      } catch {
+      }
+    }
+    let home = null;
+    try {
+      home = import_node_fs7.realpathSync.native((0, import_node_os6.homedir)());
+    } catch {
+      home = null;
+    }
+    return { roots: resolvedRoots, home, platform: process.platform, sep: import_node_path10.sep };
+  }
+  async function listDir(rawParams) {
+    const params = fsListDirParamsSchema.parse(rawParams);
+    const abs = allow(params.path);
+    const dirents = await (0, import_promises7.readdir)(abs, { withFileTypes: true });
+    const entries = [];
+    for (const e of dirents) {
+      if (BROWSE_ALWAYS_HIDDEN2.has(e.name)) continue;
+      if (!params.includeHidden && e.name.startsWith(".")) continue;
+      const full = (0, import_node_path10.join)(abs, e.name);
+      const symlink = e.isSymbolicLink();
+      let isDir = e.isDirectory();
+      if (symlink) {
+        try {
+          isDir = (await (0, import_promises7.stat)(full)).isDirectory();
+        } catch {
+          continue;
+        }
+      }
+      if (params.dirsOnly && !isDir) continue;
+      entries.push({
+        name: e.name,
+        path: full,
+        type: isDir ? "directory" : "file",
+        ...symlink && { isSymlink: true },
+        ...isDir && (0, import_node_fs7.existsSync)((0, import_node_path10.join)(full, ".git")) && { isGitRepo: true }
+      });
+    }
+    entries.sort((a, b) => {
+      if (a.type !== b.type) return a.type === "directory" ? -1 : 1;
+      return a.name.localeCompare(b.name);
+    });
+    const isRoot = ctx.config.allowedRoots.some((r) => {
+      try {
+        return import_node_fs7.realpathSync.native((0, import_node_path10.resolve)(r)) === abs;
+      } catch {
+        return false;
+      }
+    });
+    return { path: abs, parent: isRoot ? null : (0, import_node_path10.dirname)(abs), entries };
+  }
+  async function mkdirHandler(rawParams) {
+    const { path: path9 } = fsMkdirParamsSchema.parse(rawParams);
+    const abs = allow(path9);
+    await (0, import_promises7.mkdir)(abs, { recursive: true });
+    ctx.log("fs mkdir", { path: abs });
+    return { path: import_node_fs7.realpathSync.native(abs) };
+  }
+  function readDirHandler(rawParams) {
+    const { rootPath, dirPath } = fsReadDirParamsSchema.parse(rawParams);
+    return { entries: readDir(allow(rootPath), dirPath) };
+  }
+  function readFileHandler(rawParams) {
+    const { rootPath, filePath, force } = fsReadFileParamsSchema.parse(rawParams);
+    return readFile3(allowIn(rootPath, filePath), filePath, force);
+  }
+  function writeFileHandler(rawParams) {
+    const { rootPath, filePath, content } = fsWriteFileParamsSchema.parse(rawParams);
+    writeFile3(allowIn(rootPath, filePath), filePath, content);
+    return { ok: true };
+  }
+  function createFileHandler(rawParams) {
+    const { rootPath, filePath } = fsCreateFileParamsSchema.parse(rawParams);
+    createFile(allowIn(rootPath, filePath), filePath);
+    return { ok: true };
+  }
+  function createDirHandler(rawParams) {
+    const { rootPath, dirPath } = fsCreateDirParamsSchema.parse(rawParams);
+    createDir(allowIn(rootPath, dirPath), dirPath);
+    return { ok: true };
+  }
+  function renameHandler(rawParams) {
+    const { rootPath, oldPath, newPath } = fsRenameParamsSchema.parse(rawParams);
+    allowIn(rootPath, newPath, true);
+    renamePath(allowIn(rootPath, oldPath, true), oldPath, newPath);
+    return { ok: true };
+  }
+  function deleteHandler(rawParams) {
+    const { rootPath, targetPath } = fsDeleteParamsSchema.parse(rawParams);
+    deletePath(allowIn(rootPath, targetPath, true), targetPath);
     return { ok: true };
   }
   function copyInHandler(rawParams) {
@@ -28403,7 +30807,7 @@ function createFsHandlers(ctx) {
     const results = searchFiles(root, query, {
       ...options,
       maxResults
-    }).filter((r) => !isProtectedPath((0, import_node_path9.join)(root, r.path)));
+    }).filter((r) => !isProtectedPath((0, import_node_path10.join)(root, r.path)));
     const total = results.reduce((n, r) => n + r.matches.length, 0);
     return { results, truncated: total >= maxResults };
   }
@@ -28476,7 +30880,7 @@ function createGhHandlers(ctx) {
   async function ghExec(rawParams) {
     const params = ghExecParamsSchema.parse(rawParams);
     const cwd = assertPathAllowed(params.cwd, ctx.config.allowedRoots);
-    return new Promise((resolve7) => {
+    return new Promise((resolve9) => {
       const child = (0, import_node_child_process5.execFile)(
         "gh",
         params.args,
@@ -28491,7 +30895,7 @@ function createGhHandlers(ctx) {
         },
         (err, stdout2, stderr) => {
           const status = err && typeof err.code === "number" ? err.code : err ? null : 0;
-          resolve7({ status, stdout: stdout2 ?? "", stderr: stderr ?? "" });
+          resolve9({ status, stdout: stdout2 ?? "", stderr: stderr ?? "" });
         }
       );
       if (params.stdin !== void 0) {
@@ -28504,14 +30908,14 @@ function createGhHandlers(ctx) {
 
 // src/handlers/git.ts
 var import_node_child_process7 = require("node:child_process");
-var import_node_fs7 = require("node:fs");
-var import_promises7 = require("node:fs/promises");
-var import_node_path10 = require("node:path");
+var import_node_fs8 = require("node:fs");
+var import_promises8 = require("node:fs/promises");
+var import_node_path11 = require("node:path");
 
 // src/handlers/exec.ts
 var import_node_child_process6 = require("node:child_process");
 function execCapture(command, args, opts = {}) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve9) => {
     const child = (0, import_node_child_process6.spawn)(command, args, {
       ...opts.cwd ? { cwd: opts.cwd } : {},
       ...opts.env ? { env: opts.env } : {},
@@ -28527,11 +30931,11 @@ function execCapture(command, args, opts = {}) {
     }
     child.on("close", (code) => {
       if (timer) clearTimeout(timer);
-      resolve7({ stdout: stdout2.join(""), stderr: stderr.join(""), status: code });
+      resolve9({ stdout: stdout2.join(""), stderr: stderr.join(""), status: code });
     });
     child.on("error", (err) => {
       if (timer) clearTimeout(timer);
-      resolve7({ stdout: "", stderr: err.message, status: 1, spawnError: err.message });
+      resolve9({ stdout: "", stderr: err.message, status: 1, spawnError: err.message });
     });
   });
 }
@@ -28566,7 +30970,7 @@ function createGitHandlers(ctx) {
   async function isGitRepo(rawParams) {
     const { path: path9 } = isGitRepoParams.parse(rawParams);
     const repoPath = allow(path9);
-    if (!(0, import_node_fs7.existsSync)(repoPath)) return { isGitRepo: false };
+    if (!(0, import_node_fs8.existsSync)(repoPath)) return { isGitRepo: false };
     const result = await execCapture("git", ["rev-parse", "--git-dir"], { cwd: repoPath });
     if (result.spawnError) throw new Error(`Could not start git: ${result.spawnError}`);
     return { isGitRepo: result.status === 0 };
@@ -28599,7 +31003,7 @@ function createGitHandlers(ctx) {
     try {
       await execGit(["worktree", "remove", worktreePath, "--force"], repoPath);
     } catch (err) {
-      if (!(0, import_node_fs7.existsSync)(worktreePath)) {
+      if (!(0, import_node_fs8.existsSync)(worktreePath)) {
         await execGit(["worktree", "prune"], repoPath);
       } else {
         throw err;
@@ -28627,13 +31031,13 @@ function createGitHandlers(ctx) {
     const params = runWorktreeSetupScriptParams.parse(rawParams);
     const worktreePath = allow(params.worktreePath);
     const repoPath = allow(params.repoPath);
-    const scriptPath = (0, import_node_path10.resolve)(worktreePath, SETUP_SCRIPT);
-    if (!(0, import_node_fs7.existsSync)(scriptPath)) return Promise.resolve({ ran: false });
+    const scriptPath = (0, import_node_path11.resolve)(worktreePath, SETUP_SCRIPT);
+    if (!(0, import_node_fs8.existsSync)(scriptPath)) return Promise.resolve({ ran: false });
     try {
-      (0, import_node_fs7.accessSync)(scriptPath, import_node_fs7.constants.X_OK);
+      (0, import_node_fs8.accessSync)(scriptPath, import_node_fs8.constants.X_OK);
     } catch {
       try {
-        (0, import_node_fs7.chmodSync)(scriptPath, 493);
+        (0, import_node_fs8.chmodSync)(scriptPath, 493);
       } catch {
         return Promise.resolve({ ran: false });
       }
@@ -28684,20 +31088,20 @@ function createGitHandlers(ctx) {
     } else {
       relPaths = params.customPaths ?? [];
     }
-    const repoRoot = (0, import_node_path10.resolve)(repoPath);
-    const wtRoot = (0, import_node_path10.resolve)(worktreePath);
+    const repoRoot = (0, import_node_path11.resolve)(repoPath);
+    const wtRoot = (0, import_node_path11.resolve)(worktreePath);
     let copied = 0;
     for (const rel of relPaths) {
-      const src = (0, import_node_path10.resolve)(repoPath, rel);
-      const dest = (0, import_node_path10.resolve)(worktreePath, rel);
+      const src = (0, import_node_path11.resolve)(repoPath, rel);
+      const dest = (0, import_node_path11.resolve)(worktreePath, rel);
       if (!isInside2(src, repoRoot) || !isInside2(dest, wtRoot)) {
         ctx.log("copyIgnoredFiles skipped traversal", { rel });
         continue;
       }
-      if (!(0, import_node_fs7.existsSync)(src)) continue;
+      if (!(0, import_node_fs8.existsSync)(src)) continue;
       try {
-        await (0, import_promises7.mkdir)((0, import_node_path10.dirname)(dest), { recursive: true });
-        await (0, import_promises7.cp)(src, dest, { recursive: true, verbatimSymlinks: true });
+        await (0, import_promises8.mkdir)((0, import_node_path11.dirname)(dest), { recursive: true });
+        await (0, import_promises8.cp)(src, dest, { recursive: true, verbatimSymlinks: true });
         copied += 1;
       } catch (err) {
         ctx.log("copyIgnoredFiles copy failed", { rel, error: String(err) });
@@ -28715,8 +31119,8 @@ function createGitHandlers(ctx) {
   };
 }
 function isInside2(child, root) {
-  const c = (0, import_node_path10.resolve)(child);
-  return c === root || c.startsWith(root + import_node_path10.sep);
+  const c = (0, import_node_path11.resolve)(child);
+  return c === root || c.startsWith(root + import_node_path11.sep);
 }
 
 // src/handlers/proc.ts
@@ -28748,19 +31152,19 @@ var ExitTombstones = class {
   /** Wire form for `pty.list` / `proc.list`. */
   list() {
     this.prune();
-    return [...this.bySession].map(([sessionId, t]) => ({
+    return [...this.bySession].map(([sessionId, t2]) => ({
       sessionId,
-      ...t.spawnId !== void 0 ? { spawnId: t.spawnId } : {},
-      ...t.pid !== void 0 ? { pid: t.pid } : {},
-      exitCode: t.exitCode,
-      signal: t.signal,
-      ...t.reason !== void 0 ? { reason: t.reason } : {}
+      ...t2.spawnId !== void 0 ? { spawnId: t2.spawnId } : {},
+      ...t2.pid !== void 0 ? { pid: t2.pid } : {},
+      exitCode: t2.exitCode,
+      signal: t2.signal,
+      ...t2.reason !== void 0 ? { reason: t2.reason } : {}
     }));
   }
   prune() {
     const cutoff = Date.now() - TOMBSTONE_TTL_MS;
-    for (const [sessionId, t] of this.bySession) {
-      if (t.at > cutoff) break;
+    for (const [sessionId, t2] of this.bySession) {
+      if (t2.at > cutoff) break;
       this.bySession.delete(sessionId);
     }
   }
@@ -28819,6 +31223,17 @@ var RingBuffer = class {
   }
 };
 
+// src/handlers/spawn-env.ts
+function buildSpawnEnv(ctx, overrides) {
+  const merged = overrides ? { ...sanitizeSpawnEnv(process.env), ...overrides } : sanitizeSpawnEnv(process.env);
+  if (ctx.agentHookUrl) {
+    merged.SLAYZONE_AGENT_HOOK_URL = ctx.agentHookUrl;
+    delete merged.SLAYZONE_HUB_TOKEN;
+  }
+  if (ctx.hubAddress) merged.SLAYZONE_HUB_ADDRESS = ctx.hubAddress;
+  return merged;
+}
+
 // src/handlers/proc.ts
 var MAX_BUFFER_SIZE = 750 * 1024;
 var ProcMethods = {
@@ -28835,14 +31250,6 @@ var ProcNotifications = {
 function createProcHandlers(ctx, getProjectPaths) {
   const procs = /* @__PURE__ */ new Map();
   const tombstones = new ExitTombstones();
-  function buildEnv(overrides) {
-    const merged = overrides ? { ...sanitizeSpawnEnv(process.env), ...overrides } : sanitizeSpawnEnv(process.env);
-    if (ctx.agentHookUrl) {
-      merged.SLAYZONE_AGENT_HOOK_URL = ctx.agentHookUrl;
-      delete merged.SLAYZONE_HUB_TOKEN;
-    }
-    return merged;
-  }
   function killTree(child, signal = "SIGTERM") {
     if (typeof child.pid === "number") killPidTree(child.pid, signal);
   }
@@ -28867,7 +31274,7 @@ function createProcHandlers(ctx, getProjectPaths) {
     const invocation = params.shell ? buildShellInvocation(params.command) : { file: params.command, args: params.args ?? [] };
     const child = (0, import_node_child_process8.spawn)(invocation.file, invocation.args, {
       ...cwd ? { cwd } : {},
-      env: buildEnv(params.env),
+      env: buildSpawnEnv(ctx, params.env),
       // stdin PIPED (was 'ignore') so `proc.write` can reach the child.
       stdio: ["pipe", "pipe", "pipe"],
       // Its own process group, so a kill reaches everything it started (`pnpm dev`
@@ -28993,7 +31400,7 @@ function createProcHandlers(ctx, getProjectPaths) {
 }
 
 // src/handlers/project.ts
-var import_node_fs8 = require("node:fs");
+var import_node_fs9 = require("node:fs");
 function createProjectHandlers(ctx, getStore) {
   const allow = (candidate) => assertPathAllowed(candidate, ctx.config.allowedRoots);
   const store = () => {
@@ -29005,7 +31412,7 @@ function createProjectHandlers(ctx, getStore) {
     const { projectId } = projectResolvePathParamsSchema.parse(rawParams);
     const entry = store().get(projectId);
     if (!entry) return { path: null };
-    return { path: entry.path, exists: (0, import_node_fs8.existsSync)(entry.path) };
+    return { path: entry.path, exists: (0, import_node_fs9.existsSync)(entry.path) };
   }
   async function setPath(rawParams) {
     const { projectId, path: path9 } = projectSetPathParamsSchema.parse(rawParams);
@@ -29026,7 +31433,7 @@ function createProjectHandlers(ctx, getStore) {
       projects: store().list().map((e) => ({
         projectId: e.projectId,
         path: e.path,
-        exists: (0, import_node_fs8.existsSync)(e.path)
+        exists: (0, import_node_fs9.existsSync)(e.path)
       }))
     };
   }
@@ -29068,7 +31475,7 @@ function armStartupDeadline({
 
 // src/background-jobs.ts
 var import_node_child_process9 = require("node:child_process");
-var import_promises8 = require("node:fs/promises");
+var import_promises9 = require("node:fs/promises");
 var import_node_util = require("node:util");
 var execFileAsync2 = (0, import_node_util.promisify)(import_node_child_process9.execFile);
 var EXEC_TIMEOUT_MS = 5e3;
@@ -29121,7 +31528,7 @@ async function readStdoutPaths(pids) {
   if (process.platform === "linux") {
     await Promise.all(
       pids.map(
-        (pid2) => (0, import_promises8.readlink)(`/proc/${pid2}/fd/1`).then(
+        (pid2) => (0, import_promises9.readlink)(`/proc/${pid2}/fd/1`).then(
           (path9) => void out.set(pid2, path9),
           () => void 0
         )
@@ -29158,10 +31565,10 @@ async function probeBackgroundJobs(rootPid, jobs) {
 }
 
 // src/spawn-admission.ts
-var import_node_os6 = require("node:os");
+var import_node_os7 = require("node:os");
 var DEFAULT_START_CAP_MS = 5e3;
 var DEFAULT_WARM_QUIET_MS = 3e3;
-function defaultAdmissionConcurrency(cores = (0, import_node_os6.availableParallelism)()) {
+function defaultAdmissionConcurrency(cores = (0, import_node_os7.availableParallelism)()) {
   return Math.max(2, Math.min(4, Math.floor(cores / 2)));
 }
 var LANE_RANK = { foreground: 0, background: 1, warm: 2 };
@@ -29171,9 +31578,9 @@ function createSpawnAdmission(opts = {}) {
   const warmQuietMs = opts.warmQuietMs ?? DEFAULT_WARM_QUIET_MS;
   const now = opts.now ?? Date.now;
   const setTimer = opts.setTimer ?? ((fn, ms) => {
-    const t = setTimeout(fn, ms);
-    t.unref?.();
-    return t;
+    const t2 = setTimeout(fn, ms);
+    t2.unref?.();
+    return t2;
   });
   const clearTimer = opts.clearTimer ?? ((h) => clearTimeout(h));
   const queue = [];
@@ -29189,9 +31596,9 @@ function createSpawnAdmission(opts = {}) {
   function next() {
     if (active.size >= concurrency || queue.length === 0) return null;
     let best = null;
-    for (const t of queue) {
-      if (!best || LANE_RANK[t.lane] < LANE_RANK[best.lane] || t.lane === best.lane && t.order < best.order) {
-        best = t;
+    for (const t2 of queue) {
+      if (!best || LANE_RANK[t2.lane] < LANE_RANK[best.lane] || t2.lane === best.lane && t2.order < best.order) {
+        best = t2;
       }
     }
     if (!best || best.lane !== "warm") return best;
@@ -29237,7 +31644,7 @@ function createSpawnAdmission(opts = {}) {
     try {
       do {
         pumpAgain = false;
-        for (let t = next(); t; t = next()) admit(t);
+        for (let t2 = next(); t2; t2 = next()) admit(t2);
       } while (pumpAgain);
     } finally {
       pumping = false;
@@ -29259,10 +31666,10 @@ function createSpawnAdmission(opts = {}) {
       return true;
     },
     prioritize(ticket) {
-      const t = ticket;
-      if (!queue.includes(t)) return false;
-      t.lane = "foreground";
-      t.order = -++promotions;
+      const t2 = ticket;
+      if (!queue.includes(t2)) return false;
+      t2.lane = "foreground";
+      t2.order = -++promotions;
       pump();
       return true;
     },
@@ -29294,14 +31701,6 @@ function createPtyHandlers(ctx, getProjectPaths, options = {}) {
     }
     return spawnCwd(entry.path, ctx.config.allowedRoots);
   }
-  function buildEnv(overrides) {
-    const merged = overrides ? { ...sanitizeSpawnEnv(process.env), ...overrides } : sanitizeSpawnEnv(process.env);
-    if (ctx.agentHookUrl) {
-      merged.SLAYZONE_AGENT_HOOK_URL = ctx.agentHookUrl;
-      delete merged.SLAYZONE_HUB_TOKEN;
-    }
-    return merged;
-  }
   function spawnSession(id, opts) {
     const cwd = resolveCwd(opts);
     const existing = sessions.get(id);
@@ -29317,7 +31716,7 @@ function createPtyHandlers(ctx, getProjectPaths, options = {}) {
     const proc = pty.spawn(opts.command, opts.args ?? [], {
       name: "xterm-color",
       cwd,
-      env: buildEnv(opts.env),
+      env: buildSpawnEnv(ctx, opts.env),
       cols: opts.cols ?? 80,
       rows: opts.rows ?? 24
     });
@@ -29420,10 +31819,10 @@ function createPtyHandlers(ctx, getProjectPaths, options = {}) {
     if (prior && spec.spawnId !== void 0 && prior.spawnId === spec.spawnId) {
       return prior.promise;
     }
-    let resolve7;
+    let resolve9;
     let reject;
     const promise2 = new Promise((res, rej) => {
-      resolve7 = res;
+      resolve9 = res;
       reject = rej;
     });
     const item = {
@@ -29435,7 +31834,7 @@ function createPtyHandlers(ctx, getProjectPaths, options = {}) {
       ticket: void 0,
       run: (slot) => run(slot, item),
       promise: promise2,
-      resolve: resolve7,
+      resolve: resolve9,
       reject
     };
     if (prior) {
@@ -29727,19 +32126,19 @@ function createPtyHandlers(ctx, getProjectPaths, options = {}) {
 }
 
 // src/handlers/computer-config.ts
-var import_node_fs9 = require("node:fs");
-var import_node_path11 = require("node:path");
+var import_node_fs10 = require("node:fs");
+var import_node_path12 = require("node:path");
 function canonicalRoots(roots) {
   const applied = [];
   const rejected = [];
   for (const root of roots) {
-    if (!(0, import_node_path11.isAbsolute)(root)) {
+    if (!(0, import_node_path12.isAbsolute)(root)) {
       rejected.push({ path: root, reason: "not an absolute path" });
       continue;
     }
     let real;
     try {
-      real = import_node_fs9.realpathSync.native((0, import_node_path11.resolve)(root));
+      real = import_node_fs10.realpathSync.native((0, import_node_path12.resolve)(root));
     } catch {
       rejected.push({ path: root, reason: "does not exist on this computer" });
       continue;
@@ -29783,13 +32182,13 @@ function createComputerConfigHandlers(ctx) {
 }
 
 // src/project-paths.ts
-var import_promises9 = require("node:fs/promises");
-var import_node_os7 = require("node:os");
-var import_node_path12 = require("node:path");
+var import_promises10 = require("node:fs/promises");
+var import_node_os8 = require("node:os");
+var import_node_path13 = require("node:path");
 function slayzoneRootDir3() {
   if (process.env.SLAYZONE_ROOT) return process.env.SLAYZONE_ROOT;
-  const home = process.env.HOME ?? process.env.USERPROFILE ?? (0, import_node_os7.homedir)();
-  return (0, import_node_path12.join)(home, ".slayzone");
+  const home = process.env.HOME ?? process.env.USERPROFILE ?? (0, import_node_os8.homedir)();
+  return (0, import_node_path13.join)(home, ".slayzone");
 }
 var projectPathEntrySchema = external_exports.object({
   /** Absolute, realpath-resolved at write time. */
@@ -29798,13 +32197,13 @@ var projectPathEntrySchema = external_exports.object({
 });
 var projectMapSchema = external_exports.record(external_exports.string(), projectPathEntrySchema);
 function projectsFilePath(baseDir) {
-  return (0, import_node_path12.join)(baseDir ?? slayzoneRootDir3(), "computer.projects.json");
+  return (0, import_node_path13.join)(baseDir ?? slayzoneRootDir3(), "computer.projects.json");
 }
 var fileSchema = external_exports.record(external_exports.string(), projectMapSchema);
 async function readFileMap(filePath) {
   let raw;
   try {
-    raw = await (0, import_promises9.readFile)(filePath, "utf8");
+    raw = await (0, import_promises10.readFile)(filePath, "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return {};
     throw err;
@@ -29829,14 +32228,14 @@ async function readFileMap(filePath) {
   return fileSchema.parse(out);
 }
 async function writeFileMap(filePath, map2) {
-  await (0, import_promises9.mkdir)((0, import_node_path12.dirname)(filePath), { recursive: true, mode: 448 });
+  await (0, import_promises10.mkdir)((0, import_node_path13.dirname)(filePath), { recursive: true, mode: 448 });
   const tmpPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
-  await (0, import_promises9.writeFile)(tmpPath, `${JSON.stringify(map2, null, 2)}
+  await (0, import_promises10.writeFile)(tmpPath, `${JSON.stringify(map2, null, 2)}
 `, { mode: 384 });
   try {
-    await (0, import_promises9.rename)(tmpPath, filePath);
+    await (0, import_promises10.rename)(tmpPath, filePath);
   } catch (err) {
-    await (0, import_promises9.rm)(tmpPath, { force: true });
+    await (0, import_promises10.rm)(tmpPath, { force: true });
     throw err;
   }
 }
@@ -29873,26 +32272,27 @@ async function createProjectPathStore(hubHost, options = {}) {
 
 // src/main.ts
 var COMPUTER_VERSION = "0.0.0";
-function createHubRequestHandler(deps) {
-  const log = deps.log ?? (() => {
+function createHubRequestHandler(deps2) {
+  const log = deps2.log ?? (() => {
   });
   const ctx = {
-    dialer: deps.dialer,
-    config: deps.config,
+    dialer: deps2.dialer,
+    config: deps2.config,
     log,
-    ...deps.agentHookUrl ? { agentHookUrl: deps.agentHookUrl } : {}
+    ...deps2.agentHookUrl ? { agentHookUrl: deps2.agentHookUrl } : {},
+    ...deps2.hubAddress ? { hubAddress: deps2.hubAddress } : {}
   };
   const pty2 = createPtyHandlers(
     ctx,
-    deps.getProjectPaths,
-    deps.admission ? { admission: deps.admission } : {}
+    deps2.getProjectPaths,
+    deps2.admission ? { admission: deps2.admission } : {}
   );
-  const proc = createProcHandlers(ctx, deps.getProjectPaths);
-  const fs6 = createFsHandlers(ctx);
+  const proc = createProcHandlers(ctx, deps2.getProjectPaths);
+  const fs7 = createFsHandlers(ctx);
   const shutdownHandler = async (params) => {
     const parsed = computerShutdownParamsSchema.safeParse(params ?? {});
     const reason = parsed.success ? parsed.data.reason ?? "hub-requested" : "hub-requested";
-    queueMicrotask(() => deps.shutdown(reason));
+    queueMicrotask(() => deps2.shutdown(reason));
     return { ok: true };
   };
   const table = {
@@ -29900,17 +32300,17 @@ function createHubRequestHandler(deps) {
     ...pty2.handlers,
     ...proc.handlers,
     ...createGitHandlers(ctx),
-    ...fs6.handlers,
+    ...fs7.handlers,
     ...createComputerConfigHandlers(ctx),
     ...createGhHandlers(ctx),
-    ...createProjectHandlers(ctx, deps.getProjectPaths ?? (() => null))
+    ...createProjectHandlers(ctx, deps2.getProjectPaths ?? (() => null))
   };
-  const hub = deps.hubHost ?? "unknown";
+  const hub = deps2.hubHost ?? "unknown";
   const ptyMethods = new Set(Object.keys(pty2.handlers));
   const handle = async (method, params, rawActor) => {
     const parsedActor = requestActorSchema.safeParse(rawActor);
     const actor = parsedActor.success ? parsedActor.data : null;
-    const record2 = (result, code, reason) => deps.requestLog?.record({
+    const record2 = (result, code, reason) => deps2.requestLog?.record({
       hub,
       method,
       actor,
@@ -29937,7 +32337,7 @@ function createHubRequestHandler(deps) {
       throw err;
     }
     try {
-      if (deps.pathReady && !ptyMethods.has(method)) await deps.pathReady;
+      if (deps2.pathReady && !ptyMethods.has(method)) await deps2.pathReady;
       const result = await entry(params);
       record2("ok");
       return result;
@@ -29960,7 +32360,7 @@ function createHubRequestHandler(deps) {
   const dispose = () => {
     pty2.disposeAll();
     proc.disposeAll();
-    fs6.disposeAll();
+    fs7.disposeAll();
   };
   const setAgentHookUrl = (url2) => {
     ctx.agentHookUrl = url2;
@@ -29970,8 +32370,8 @@ function createHubRequestHandler(deps) {
   };
   return { handle, dispose, setAgentHookUrl, hubDisconnected };
 }
-function startComputer(config2, deps = {}) {
-  const log = deps.log ?? (() => {
+function startComputer(config2, deps2 = {}) {
+  const log = deps2.log ?? (() => {
   });
   const identity = {
     name: config2.name,
@@ -29989,14 +32389,14 @@ function startComputer(config2, deps = {}) {
     });
   });
   let handle;
-  const stateDir = deps.stateDir ?? (0, import_node_path13.dirname)(getComputerConfigFilePath());
-  const configFile = (0, import_node_path13.join)(stateDir, "computer.config.json");
+  const stateDir = deps2.stateDir ?? (0, import_node_path14.dirname)(getComputerConfigFilePath());
+  const configFile = (0, import_node_path14.join)(stateDir, "computer.config.json");
   setProtectedPaths([
     configFile,
     // The legacy file computer.config.json falls back to when absent.
-    (0, import_node_path13.join)(stateDir, "config.json"),
+    (0, import_node_path14.join)(stateDir, "config.json"),
     credentialsFilePath(stateDir),
-    (0, import_node_path13.join)(stateDir, REQUEST_LOG_DIR_NAME)
+    (0, import_node_path14.join)(stateDir, REQUEST_LOG_DIR_NAME)
   ]);
   const requestLog = createRequestLog({
     stateDir,
@@ -30005,7 +32405,7 @@ function startComputer(config2, deps = {}) {
   log("local request log", { file: requestLog.filePath });
   const watchLocalRoots = !config2.hubMayEditRoots;
   if (watchLocalRoots) {
-    (0, import_node_fs10.watchFile)(configFile, { interval: 2e3, persistent: false }, () => {
+    (0, import_node_fs11.watchFile)(configFile, { interval: 2e3, persistent: false }, () => {
       const declared = loadComputerConfigFile(configFile).allowedRoots;
       const applied = reloadLocalRoots(config2, declared);
       if (!applied) return;
@@ -30021,7 +32421,8 @@ function startComputer(config2, deps = {}) {
   }
   const admission = createSpawnAdmission();
   const connectHub = (hubUrl, isPrimary) => {
-    const credentialStore = (isPrimary ? deps.credentialStore : void 0) ?? createFileCredentialStore(hubHostFromUrl(hubUrl));
+    const credentialStore = (isPrimary ? deps2.credentialStore : void 0) ?? createFileCredentialStore(hubHostFromUrl(hubUrl));
+    const hubAddress = hubAddrFromUrl(hubUrl);
     let dispatch;
     const dialer = new HubDialer({
       url: hubUrl,
@@ -30043,7 +32444,7 @@ function startComputer(config2, deps = {}) {
     dispatch = createHubRequestHandler({
       shutdown: (reason) => {
         log("computer shutdown requested by hub", { hubUrl, reason });
-        void handle.stop().then(() => deps.onShutdown?.(reason));
+        void handle.stop().then(() => deps2.onShutdown?.(reason));
       },
       dialer,
       config: config2,
@@ -30052,7 +32453,9 @@ function startComputer(config2, deps = {}) {
       admission,
       requestLog,
       hubHost: hubHostFromUrl(hubUrl),
-      ...deps.pathReady ? { pathReady: deps.pathReady } : {}
+      // Per hub, like the hook relay: a pty THIS hub asked for belongs to it.
+      ...hubAddress ? { hubAddress } : {},
+      ...deps2.pathReady ? { pathReady: deps2.pathReady } : {}
     });
     dialer.events.on(
       "connected",
@@ -30102,7 +32505,7 @@ function startComputer(config2, deps = {}) {
     dialers: connections.map((c) => c.dialer),
     stop: async () => {
       hostIdStop?.();
-      if (watchLocalRoots) (0, import_node_fs10.unwatchFile)(configFile);
+      if (watchLocalRoots) (0, import_node_fs11.unwatchFile)(configFile);
       await Promise.all(connections.map((c) => c.dispose()));
     }
   };
@@ -30144,7 +32547,7 @@ async function maybeInteractiveSetup() {
         default: defaultRoot,
         transform: (raw) => {
           const roots = raw.split(",").map((r) => r.trim()).filter((r) => r.length > 0);
-          return roots.length > 0 ? { config: roots, env: roots.join(import_node_path14.delimiter) } : null;
+          return roots.length > 0 ? { config: roots, env: roots.join(import_node_path15.delimiter) } : null;
         }
       },
       {
@@ -30156,7 +32559,7 @@ async function maybeInteractiveSetup() {
         configKey: "computerName",
         envKey: "SLAYZONE_COMPUTER_NAME",
         label: "Computer display name",
-        hint: `default: ${(0, import_node_os8.hostname)()}`
+        hint: `default: ${(0, import_node_os9.hostname)()}`
       }
     ]
   });
@@ -30204,8 +32607,8 @@ async function main() {
     await installAgentHooks2(log);
   }
   const pathReady = adoptLoginShellPath().then(
-    (adopted) => log(
-      adopted ? `PATH: adopted login-shell PATH (+${adopted.added.length} entries)` : "PATH: no login-shell PATH probed \u2014 keeping the inherited one"
+    (adopted2) => log(
+      adopted2 ? `PATH: adopted login-shell PATH (+${adopted2.added.length} entries)` : "PATH: no login-shell PATH probed \u2014 keeping the inherited one"
     )
   );
   const handle = startComputer(config2, {