@sleds/cli 0.1.16 → 0.1.17

package/dist/sleds.mjs

@@ -240,6 +240,8 @@ var configDir = (home, env = process.env) => {
     cfg.priorStatusLine = raw.priorStatusLine;
   if (raw.wiring === "seat-first" || raw.wiring === "proxy-always")
     cfg.wiring = raw.wiring;
+  if (raw.agentKind === "claude-code" || raw.agentKind === "codex")
+    cfg.agentKind = raw.agentKind;
   const org = parseOrgInfo(raw.org);
   if (org)
     cfg.org = org;
@@ -440,14 +442,14 @@ var init_format = __esm(() => {
 });
 
 // src/meter.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, renameSync as renameSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join3 } from "node:path";
-var METER_CACHE_TTL_MS = 1e4, METER_TIMEOUT_MS = 1500, isObject4 = (v) => typeof v === "object" && v !== null && !Array.isArray(v), num2 = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined, meterCachePath = (home) => join3(configDir(home), "meter.json"), readMeterCache = (home, now) => {
+import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync4, renameSync as renameSync3, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join4 } from "node:path";
+var METER_CACHE_TTL_MS = 1e4, METER_TIMEOUT_MS = 1500, isObject4 = (v) => typeof v === "object" && v !== null && !Array.isArray(v), num2 = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined, meterCachePath = (home) => join4(configDir(home), "meter.json"), readMeterCache = (home, now) => {
   const p = meterCachePath(home);
-  if (!existsSync3(p))
+  if (!existsSync4(p))
     return null;
   try {
-    const raw = JSON.parse(readFileSync3(p, "utf8"));
+    const raw = JSON.parse(readFileSync4(p, "utf8"));
     if (!isObject4(raw))
       return null;
     const fetchedAt = num2(raw.fetchedAt);
@@ -459,11 +461,11 @@ var METER_CACHE_TTL_MS = 1e4, METER_TIMEOUT_MS = 1500, isObject4 = (v) => typeof
   }
 }, writeMeterCache = (home, meter, now) => {
   const dir = configDir(home);
-  mkdirSync3(dir, { recursive: true, mode: 448 });
+  mkdirSync4(dir, { recursive: true, mode: 448 });
   const target = meterCachePath(home);
   const tmp = `${target}.${process.pid}.tmp`;
   const file = { fetchedAt: now, meter };
-  writeFileSync3(tmp, `${JSON.stringify(file)}
+  writeFileSync4(tmp, `${JSON.stringify(file)}
 `, { mode: 384 });
   renameSync3(tmp, target);
 }, fetchMeter = async (o) => {
@@ -481,7 +483,7 @@ var METER_CACHE_TTL_MS = 1e4, METER_TIMEOUT_MS = 1500, isObject4 = (v) => typeof
   }
 }, meterSource = (home) => {
   const cfg = readConfig(home);
-  const settings = existsSync3(settingsPath(home)) ? readSettings(home) : {};
+  const settings = existsSync4(settingsPath(home)) ? readSettings(home) : {};
   const inSettings = readProxy(settings);
   const proxyUrl = inSettings?.url ?? cfg.proxyUrl;
   const token = inSettings?.token ?? cfg.token;
@@ -537,9 +539,9 @@ __export(exports_seat, {
   shouldPostSeat: () => shouldPostSeat2,
   writeSeatState: () => writeSeatState2
 });
-import { existsSync as existsSync13, mkdirSync as mkdirSync10, readFileSync as readFileSync10, renameSync as renameSync5, writeFileSync as writeFileSync10 } from "node:fs";
-import { join as join11 } from "node:path";
-var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_MS2 = 1500, STDIN_TIMEOUT_MS2 = 300, isObject10 = (v) => typeof v === "object" && v !== null && !Array.isArray(v), num6 = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined, EPOCH_MS_THRESHOLD2 = 100000000000, parseResetsAt2 = (v) => {
+import { existsSync as existsSync16, mkdirSync as mkdirSync13, readFileSync as readFileSync13, renameSync as renameSync6, writeFileSync as writeFileSync13 } from "node:fs";
+import { join as join14 } from "node:path";
+var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_MS2 = 1500, STDIN_TIMEOUT_MS2 = 300, isObject11 = (v) => typeof v === "object" && v !== null && !Array.isArray(v), num6 = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined, EPOCH_MS_THRESHOLD2 = 100000000000, parseResetsAt2 = (v) => {
   const n = num6(v);
   if (n !== undefined) {
     if (n <= 0)
@@ -552,7 +554,7 @@ var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_
   }
   return;
 }, parseBar2 = (v) => {
-  if (!isObject10(v))
+  if (!isObject11(v))
     return;
   const usedPct = num6(v.used_percentage) ?? num6(v.usedPct);
   const resetsAt = parseResetsAt2(v.resets_at ?? v.resetsAt);
@@ -560,14 +562,14 @@ var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_
     return;
   return { usedPct, resetsAt };
 }, parseSeatWindow2 = (raw, capturedAt) => {
-  if (!isObject10(raw))
+  if (!isObject11(raw))
     return null;
-  const limits = isObject10(raw.rate_limits) ? raw.rate_limits : raw;
+  const limits = isObject11(raw.rate_limits) ? raw.rate_limits : raw;
   const fiveHour = parseBar2(limits.five_hour ?? limits.fiveHour);
   const sevenDay = parseBar2(limits.seven_day ?? limits.sevenDay);
   const spendLimit = parseBar2(limits.spend_limit ?? limits.spendLimit);
   const models = {};
-  if (isObject10(limits.models))
+  if (isObject11(limits.models))
     for (const [k, v] of Object.entries(limits.models)) {
       const bar = parseBar2(v);
       if (bar)
@@ -611,15 +613,15 @@ var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_
   if (parts.length === 0)
     return null;
   return `seat ${parts.join(SEP)}`;
-}, seatStatePath2 = (home) => join11(configDir(home), "seat.json"), parseWindowStored2 = (v) => {
-  if (!isObject10(v))
+}, seatStatePath2 = (home) => join14(configDir(home), "seat.json"), parseWindowStored2 = (v) => {
+  if (!isObject11(v))
     return;
   const capturedAt = num6(v.capturedAt);
   if (capturedAt === undefined)
     return;
   return parseSeatWindow2(v, capturedAt) ?? undefined;
 }, parseSeatState2 = (raw) => {
-  if (!isObject10(raw))
+  if (!isObject11(raw))
     return {};
   const out = {};
   const window = parseWindowStored2(raw.window);
@@ -628,7 +630,7 @@ var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_
   const lastPostedAt = num6(raw.lastPostedAt);
   if (lastPostedAt !== undefined)
     out.lastPostedAt = lastPostedAt;
-  if (isObject10(raw.lastPosted)) {
+  if (isObject11(raw.lastPosted)) {
     const lp = {};
     const f = num6(raw.lastPosted.fiveHour);
     const s = num6(raw.lastPosted.sevenDay);
@@ -649,7 +651,7 @@ var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_
     out.session = session;
   return out;
 }, parseSeatSession2 = (v) => {
-  if (!isObject10(v) || typeof v.id !== "string" || !v.id)
+  if (!isObject11(v) || typeof v.id !== "string" || !v.id)
     return;
   const at = num6(v.at);
   if (at === undefined)
@@ -666,12 +668,12 @@ var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_
     return null;
   try {
     const raw = JSON.parse(trimmed);
-    if (!isObject10(raw) || typeof raw.session_id !== "string" || !raw.session_id)
+    if (!isObject11(raw) || typeof raw.session_id !== "string" || !raw.session_id)
       return null;
     const out = { id: raw.session_id, at: now };
     if (typeof raw.cwd === "string" && raw.cwd)
       out.cwd = raw.cwd;
-    const model = isObject10(raw.model) ? raw.model.id : raw.model;
+    const model = isObject11(raw.model) ? raw.model.id : raw.model;
     if (typeof model === "string" && model)
       out.model = model;
     return out;
@@ -692,21 +694,21 @@ var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_
   return pick.length ? Math.min(...pick) : undefined;
 }, readSeatState2 = (home) => {
   const p = seatStatePath2(home);
-  if (!existsSync13(p))
+  if (!existsSync16(p))
     return {};
   try {
-    return parseSeatState2(JSON.parse(readFileSync10(p, "utf8")));
+    return parseSeatState2(JSON.parse(readFileSync13(p, "utf8")));
   } catch {
     return {};
   }
 }, writeSeatState2 = (home, state) => {
   const dir = configDir(home);
-  mkdirSync10(dir, { recursive: true, mode: 448 });
+  mkdirSync13(dir, { recursive: true, mode: 448 });
   const target = seatStatePath2(home);
   const tmp = `${target}.${process.pid}.tmp`;
-  writeFileSync10(tmp, `${JSON.stringify(state)}
+  writeFileSync13(tmp, `${JSON.stringify(state)}
 `, { mode: 384 });
-  renameSync5(tmp, target);
+  renameSync6(tmp, target);
 }, pctOf2 = (b) => b?.usedPct, shouldPostSeat2 = (state, next, now) => {
   if (state.lastPostedAt === undefined || !state.lastPosted)
     return true;
@@ -757,9 +759,9 @@ var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_
   } catch {
     return false;
   }
-}, postSeatWindow2 = (o, w) => postJson2(o, "/proxy/seat", seatWindowBody2(w)), postSeatWall2 = (o, input) => postJson2(o, "/proxy/seat-wall", input), SEAT_WALL_LINE2 = "Seat limit hit. sleds on --until-reset to continue on the org key, or sleds defer to resume here at the reset.", SEAT_WALL_LINE_NO_KEY2 = "Seat limit hit. sleds defer resumes this session on this Mac at the reset; /sled 5 to hand off — this org has no platform key to switch to.", seatWallLine2 = (hasUpstreamKey) => hasUpstreamKey ? SEAT_WALL_LINE2 : SEAT_WALL_LINE_NO_KEY2, readStdin2 = (timeoutMs, stdin = process.stdin) => new Promise((resolve5) => {
+}, postSeatWindow2 = (o, w) => postJson2(o, "/proxy/seat", seatWindowBody2(w)), postSeatWall2 = (o, input) => postJson2(o, "/proxy/seat-wall", input), SEAT_WALL_LINE2 = "Seat limit hit. sleds on --until-reset to continue on the platform key, or sleds defer to resume here at the reset.", SEAT_WALL_LINE_NO_KEY2 = "Seat limit hit. sleds defer resumes this session on this Mac at the reset; /sled 5 to hand off — this org has no platform key to switch to.", seatWallLine2 = (hasUpstreamKey) => hasUpstreamKey ? SEAT_WALL_LINE2 : SEAT_WALL_LINE_NO_KEY2, readStdin2 = (timeoutMs, stdin = process.stdin) => new Promise((resolve6) => {
   if (stdin.isTTY) {
-    resolve5("");
+    resolve6("");
     return;
   }
   let data = "";
@@ -769,7 +771,7 @@ var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_
       return;
     settled = true;
     clearTimeout(timer);
-    resolve5(data);
+    resolve6(data);
   };
   const timer = setTimeout(finish, timeoutMs);
   stdin.setEncoding("utf8");
@@ -791,16 +793,124 @@ import { realpathSync } from "fs";
 import { homedir, platform as platform2 } from "os";
 import { fileURLToPath } from "url";
 
+// src/codex.ts
+init_config();
+import { spawnSync } from "node:child_process";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { dirname as dirname2, join as join3 } from "node:path";
+var PROVIDER_ID = "sleds";
+var TOKEN_ENV = "SLEDS_TOKEN";
+var codexDir = (home) => join3(home, ".codex");
+var codexConfigPath = (home) => join3(codexDir(home), "config.toml");
+function providerBlock(proxyUrl) {
+  const base = `${proxyUrl.replace(/\/+$/, "")}/v1`;
+  return [
+    `[model_providers.${PROVIDER_ID}]`,
+    'name = "SLEDS"',
+    `base_url = "${base}"`,
+    `env_key = "${TOKEN_ENV}"`,
+    'wire_api = "responses"'
+  ].join(`
+`);
+}
+function applyCodexProvider(toml, proxyUrl) {
+  let out = removeCodexProvider(toml, { keepPrior: true });
+  const top = topLevel(out);
+  const m = top.match(/^model_provider[ \t]*=[ \t]*"([^"]*)"[ \t]*$/m);
+  if (m && m[1] !== PROVIDER_ID && !/^# sleds-prior-model-provider/m.test(out)) {
+    out = out.replace(m[0], `# sleds-prior-model-provider = "${m[1]}"
+model_provider = "${PROVIDER_ID}"`);
+  } else if (m) {
+    out = out.replace(m[0], `model_provider = "${PROVIDER_ID}"`);
+  } else {
+    out = `model_provider = "${PROVIDER_ID}"
+${out.startsWith(`
+`) || out === "" ? "" : `
+`}${out}`;
+  }
+  return `${out.replace(/\s+$/, "")}
+
+${providerBlock(proxyUrl)}
+`;
+}
+function removeCodexProvider(toml, o = {}) {
+  const lines = toml.split(`
+`);
+  const out = [];
+  let skipping = false;
+  for (const line of lines) {
+    if (/^\s*\[/.test(line))
+      skipping = line.trim() === `[model_providers.${PROVIDER_ID}]`;
+    if (!skipping)
+      out.push(line);
+  }
+  let text = out.join(`
+`);
+  if (!o.keepPrior) {
+    const prior = text.match(/^# sleds-prior-model-provider = "([^"]*)"\s*\n/m);
+    if (prior) {
+      text = text.replace(prior[0], "");
+      text = text.replace(/^model_provider\s*=\s*"sleds"\s*$/m, `model_provider = "${prior[1]}"`);
+    } else {
+      text = text.replace(/^model_provider\s*=\s*"sleds"\s*\n?/m, "");
+    }
+  }
+  return text.replace(/\n{3,}/g, `
+
+`);
+}
+function topLevel(toml) {
+  const i = toml.search(/^\s*\[/m);
+  return i === -1 ? toml : toml.slice(0, i);
+}
+function initCodex(o) {
+  const wrote = [];
+  const path = codexConfigPath(o.home);
+  const prior = existsSync3(path) ? readFileSync3(path, "utf8") : "";
+  mkdirSync3(dirname2(path), { recursive: true });
+  writeFileSync3(path, applyCodexProvider(prior, o.proxyUrl), { mode: 384 });
+  wrote.push(`${prior ? "updated" : "created"} ${path}: provider "${PROVIDER_ID}" → ${o.proxyUrl}/v1 (key from $${TOKEN_ENV}), model_provider = "${PROVIDER_ID}"`);
+  const cfg = readConfig(o.home);
+  writeConfig(o.home, {
+    ...cfg,
+    token: o.token,
+    proxyUrl: o.proxyUrl,
+    agentKind: "codex",
+    ...o.email ? { email: o.email } : {}
+  });
+  wrote.push(`saved token and proxy URL to ${configPath(o.home)} (0600)`);
+  return wrote;
+}
+function runCodex(home, args, deps = {}) {
+  const cfg = readConfig(home);
+  const error = deps.error ?? console.error;
+  if (!cfg.token || !cfg.proxyUrl) {
+    error("No seat here. Run `sleds init --agent codex --token <sled_…> --url https://proxy.sleds.ai` first.");
+    return 2;
+  }
+  const env = {
+    ...deps.env ?? process.env,
+    [TOKEN_ENV]: cfg.token,
+    OPENAI_BASE_URL: `${cfg.proxyUrl.replace(/\/+$/, "")}/v1`
+  };
+  const r = (deps.spawnSync ?? spawnSync)("codex", args, { stdio: "inherit", env });
+  if (r.error) {
+    error(`could not start codex: ${r.error.message}. Is Codex CLI installed (npm i -g @openai/codex)?`);
+    return 127;
+  }
+  return r.status ?? 1;
+}
+
 // src/commands/defer.ts
 init_config();
 init_meter();
-import { existsSync as existsSync5 } from "node:fs";
+import { existsSync as existsSync6 } from "node:fs";
 import { hostname } from "node:os";
 
 // src/musher.ts
-import { spawnSync } from "node:child_process";
+import { spawnSync as spawnSync2 } from "node:child_process";
 import { createPublicKey, verify as cryptoVerify } from "node:crypto";
-import { basename, dirname as dirname2, join as join4 } from "node:path";
+import { basename, dirname as dirname3, join as join5 } from "node:path";
 var MUSHER_LABEL = "ai.sleds.musher";
 var MUSHER_INTERVAL_S = 300;
 var DEFAULT_PERMISSION_MODE = "acceptEdits";
@@ -813,15 +923,15 @@ var musherLabel = (env = process.env) => {
   const tag = basename(sh).replace(/^\.+/, "").replace(/[^A-Za-z0-9_-]+/g, "-") || "seat";
   return `${MUSHER_LABEL}.${tag}`;
 };
-var musherPlistPath = (home, env = process.env) => join4(home, "Library", "LaunchAgents", `${musherLabel(env)}.plist`);
-var musherLogPath = (configDir2) => join4(configDir2, "musher.log");
+var musherPlistPath = (home, env = process.env) => join5(home, "Library", "LaunchAgents", `${musherLabel(env)}.plist`);
+var musherLogPath = (configDir2) => join5(configDir2, "musher.log");
 var xmlEscape = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 var musherPath = (home, execPath, currentPath = "") => {
   const parts = [
-    dirname2(execPath),
-    join4(home, ".sleds", "bin"),
-    join4(home, ".local", "bin"),
-    join4(home, ".bun", "bin"),
+    dirname3(execPath),
+    join5(home, ".sleds", "bin"),
+    join5(home, ".local", "bin"),
+    join5(home, ".bun", "bin"),
     "/opt/homebrew/bin",
     "/usr/local/bin",
     "/usr/bin",
@@ -914,7 +1024,7 @@ var parseClaudeOutput = (stdout, exitCode) => {
   return { ok: false, summary: tail || `claude exited ${exitCode ?? "without a code"}` };
 };
 var defaultExecCapture = (cmd, args, o) => {
-  const r = spawnSync(cmd, [...args], {
+  const r = spawnSync2(cmd, [...args], {
     cwd: o.cwd,
     encoding: "utf8",
     timeout: o.timeoutMs,
@@ -1045,8 +1155,8 @@ var parsePayload = (payload) => {
 // src/seat.ts
 init_config();
 init_meter();
-import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync4, renameSync as renameSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join5 } from "node:path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync5, renameSync as renameSync4, writeFileSync as writeFileSync5 } from "node:fs";
+import { join as join6 } from "node:path";
 var SEAT_POST_MIN_DELTA_PCT = 1;
 var SEAT_POST_MIN_INTERVAL_MS = 5 * 60000;
 var SEAT_POST_TIMEOUT_MS = 1500;
@@ -1131,7 +1241,7 @@ var formatSeatFragment = (w) => {
     return null;
   return `seat ${parts.join(SEP)}`;
 };
-var seatStatePath = (home) => join5(configDir(home), "seat.json");
+var seatStatePath = (home) => join6(configDir(home), "seat.json");
 var parseWindowStored = (v) => {
   if (!isObject5(v))
     return;
@@ -1218,20 +1328,20 @@ var bindingResetAt = (w, now) => {
 };
 var readSeatState = (home) => {
   const p = seatStatePath(home);
-  if (!existsSync4(p))
+  if (!existsSync5(p))
     return {};
   try {
-    return parseSeatState(JSON.parse(readFileSync4(p, "utf8")));
+    return parseSeatState(JSON.parse(readFileSync5(p, "utf8")));
   } catch {
     return {};
   }
 };
 var writeSeatState = (home, state) => {
   const dir = configDir(home);
-  mkdirSync4(dir, { recursive: true, mode: 448 });
+  mkdirSync5(dir, { recursive: true, mode: 448 });
   const target = seatStatePath(home);
   const tmp = `${target}.${process.pid}.tmp`;
-  writeFileSync4(tmp, `${JSON.stringify(state)}
+  writeFileSync5(tmp, `${JSON.stringify(state)}
 `, { mode: 384 });
   renameSync4(tmp, target);
 };
@@ -1293,7 +1403,7 @@ var postJson = async (o, path, body) => {
 };
 var postSeatWindow = (o, w) => postJson(o, "/proxy/seat", seatWindowBody(w));
 var postSeatWall = (o, input) => postJson(o, "/proxy/seat-wall", input);
-var SEAT_WALL_LINE = "Seat limit hit. sleds on --until-reset to continue on the org key, or sleds defer to resume here at the reset.";
+var SEAT_WALL_LINE = "Seat limit hit. sleds on --until-reset to continue on the platform key, or sleds defer to resume here at the reset.";
 var SEAT_WALL_LINE_NO_KEY = "Seat limit hit. sleds defer resumes this session on this Mac at the reset; /sled 5 to hand off — this org has no platform key to switch to.";
 var seatWallLine = (hasUpstreamKey) => hasUpstreamKey ? SEAT_WALL_LINE : SEAT_WALL_LINE_NO_KEY;
 var readStdin = (timeoutMs, stdin = process.stdin) => new Promise((resolve3) => {
@@ -1471,7 +1581,7 @@ var defer = async (o) => {
   log(`Deferred. This Mac resumes ${sessionId ? `session ${sessionId.slice(0, 8)}…` : "the work"}${model ? ` on ${model}` : ""} ${when}.`);
   log(`  job ${r.jobId}${cwd ? ` · ${cwd}` : ""} · runs on your seat, no key · sleds musher --status to watch`);
   const cfg = readConfig(o.home);
-  if (process.platform === "darwin" && !existsSync5(musherPlistPath(o.home)) && cfg.musher?.agent !== "launchd")
+  if (process.platform === "darwin" && !existsSync6(musherPlistPath(o.home)) && cfg.musher?.agent !== "launchd")
     log(`  The musher agent is not installed on this Mac: run \`sleds musher --install\` once, or \`sleds run ${r.jobId}\` by hand at the reset.`);
   log("  Keep this Mac awake at that time (System Settings → Battery → prevent sleeping on power adapter).");
   return 0;
@@ -1481,25 +1591,25 @@ var defer = async (o) => {
 init_config();
 init_meter();
 import { execFileSync } from "node:child_process";
-import { existsSync as existsSync7, lstatSync, readlinkSync } from "node:fs";
+import { existsSync as existsSync8, lstatSync, readlinkSync } from "node:fs";
 import { resolve as resolve3 } from "node:path";
 init_settings();
 
 // src/commands/musher.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync5, rmSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync6, readFileSync as readFileSync6, rmSync, writeFileSync as writeFileSync6 } from "node:fs";
 init_config();
 init_meter();
 var defaultWhich = (cmd) => {
   const path = process.env.PATH ?? "";
   for (const dir of path.split(":").filter(Boolean)) {
     const p = `${dir}/${cmd}`;
-    if (existsSync6(p))
+    if (existsSync7(p))
       return p;
   }
   return null;
 };
 var findClaude = (home, configured, which) => {
-  if (configured && existsSync6(configured))
+  if (configured && existsSync7(configured))
     return configured;
   const found = which("claude");
   if (found)
@@ -1510,16 +1620,16 @@ var findClaude = (home, configured, which) => {
     "/usr/local/bin/claude",
     `${home}/.npm-global/bin/claude`
   ])
-    if (existsSync6(p))
+    if (existsSync7(p))
       return p;
   return null;
 };
 var musherAgentState = (home, env = process.env) => {
   const plist = musherPlistPath(home, env);
-  if (!existsSync6(plist))
+  if (!existsSync7(plist))
     return { installed: false, thisSeat: false };
   try {
-    const text = readFileSync5(plist, "utf8");
+    const text = readFileSync6(plist, "utf8");
     const want = env.SLEDS_HOME?.trim();
     const has = /<key>SLEDS_HOME<\/key>\s*<string>([^<]*)<\/string>/.exec(text)?.[1];
     return { installed: true, thisSeat: (want ?? undefined) === (has ?? undefined) };
@@ -1584,7 +1694,7 @@ async function runDoctor(o) {
   ].filter(Boolean);
   const cfgDir = configDir(home, env);
   const cfg = readConfig(home);
-  const cfgExists = existsSync7(configPath(home));
+  const cfgExists = existsSync8(configPath(home));
   if (!cfgExists) {
     checks.push({
       level: "fail",
@@ -1600,7 +1710,7 @@ async function runDoctor(o) {
     });
   }
   const sPath = settingsPath(home);
-  const settings = existsSync7(sPath) ? readSettings(home) : null;
+  const settings = existsSync8(sPath) ? readSettings(home) : null;
   const pointed = settings ? readProxy(settings) : null;
   if (!settings) {
     checks.push({
@@ -1658,7 +1768,7 @@ async function runDoctor(o) {
         fix: wrong.length === 0 ? undefined : `${overrides.length ? `${overrides.join(" ")} ` : ""}sleds hooks   (re-writes the status line + hooks with this seat baked in)`
       });
     }
-    const skill = existsSync7(skillPath(home));
+    const skill = existsSync8(skillPath(home));
     checks.push({
       level: skill ? "ok" : "warn",
       name: "skill",
@@ -1761,597 +1871,243 @@ var doctor = async (o) => {
   return checks.some((c) => c.level === "fail") ? 1 : 0;
 };
 
-// src/commands/hooks.ts
-init_settings();
-var hooks = (o) => {
-  const log = o.log ?? console.log;
-  const error = o.error ?? console.error;
-  if (!hasClaudeCode(o.home)) {
-    error(`Claude Code not found (${claudeDir(o.home)} does not exist). Install it, then re-run.`);
-    return 1;
+// ../../packages/shared/src/mcp/server.ts
+init_format();
+function fetchClient(o) {
+  const fetchFn = o.fetchFn ?? fetch;
+  const base = o.proxyUrl.replace(/\/+$/, "");
+  const headers = { "content-type": "application/json", authorization: `Bearer ${o.token}` };
+  const timeout = () => AbortSignal.timeout(o.timeoutMs ?? MCP_TIMEOUT_MS);
+  return {
+    async post(path, body) {
+      try {
+        const res = await fetchFn(`${base}${path}`, {
+          method: "POST",
+          headers,
+          body: JSON.stringify(body),
+          signal: timeout()
+        });
+        if (!res.ok)
+          return null;
+        const parsed = await res.json();
+        return isObject7(parsed) ? parsed : null;
+      } catch {
+        return null;
+      }
+    },
+    async postFull(path, body) {
+      try {
+        const res = await fetchFn(`${base}${path}`, {
+          method: "POST",
+          headers,
+          body: JSON.stringify(body),
+          signal: timeout()
+        });
+        let json = null;
+        try {
+          json = await res.json();
+        } catch {
+          json = null;
+        }
+        return { status: res.status, json: isObject7(json) ? json : null };
+      } catch {
+        return null;
+      }
+    },
+    async get(path) {
+      try {
+        const res = await fetchFn(`${base}${path}`, { headers, signal: timeout() });
+        if (!res.ok)
+          return null;
+        const parsed = await res.json();
+        return isObject7(parsed) ? parsed : null;
+      } catch {
+        return null;
+      }
+    }
+  };
+}
+var PROTOCOL_VERSION = "2025-06-18";
+var SERVER_INFO = { name: "sleds", version: "0.0.1" };
+var MCP_TIMEOUT_MS = 5000;
+var sourceSchema = {
+  type: "object",
+  description: "Where this item lives, so the Projects page groups it: a Claude Project doc, a repo spec, a Linear/GitHub issue. Same source + same text on a later call returns the same estimate (idempotent sync).",
+  properties: {
+    kind: { type: "string", enum: ["claude-project", "repo", "linear", "github", "manual"] },
+    project: { type: "string", description: "Project / repo / board name." },
+    doc: { type: "string", description: "Doc path or issue key inside it." },
+    item: {
+      type: "string",
+      description: "The line or phase inside the doc, when a doc holds many."
+    },
+    url: { type: "string", description: "Link to open it, if any." }
+  },
+  required: ["kind", "project"]
+};
+var specSchema = {
+  type: "object",
+  properties: {
+    spec: {
+      type: "string",
+      description: "What the job should do. The first line becomes the title."
+    },
+    model: { type: "string", description: "Model to price and run with; org default when absent." },
+    source: sourceSchema
+  },
+  required: ["spec"]
+};
+var TOOLS = [
+  {
+    name: "usage",
+    description: "The SLEDS meter for this seat: built today, month against the ceiling, window and reset, allowance, queued/running/delivered jobs, the last wall, and the seat's own Pro/Max limit bars.",
+    inputSchema: { type: "object", properties: {} }
+  },
+  {
+    name: "estimate",
+    description: "Size a task before running it: the org estimator's cost and time band with confidence and a spend cap. Recorded, so its actuals calibrate the next estimate. Never a point figure.",
+    inputSchema: specSchema
+  },
+  {
+    name: "overnight",
+    description: "Queue a task as an overnight batch job at half price. The estimator sizes it first and its cap bounds the spend; the job runs in the org's overnight window and is pulled into a session later with /sled resume <id>.",
+    inputSchema: specSchema
+  },
+  {
+    name: "jobs",
+    description: "This seat's overnight jobs, newest first (id, status, route, cost, when), then the team's open hand-offs waiting for pickup.",
+    inputSchema: { type: "object", properties: {} }
+  },
+  {
+    name: "handoffs",
+    description: "The team's open hand-offs: tasks and walled sessions parked for pickup, the ones meant for this seat first. Each has an id for the pickup tool (or /sled pickup <id> in Claude Code).",
+    inputSchema: { type: "object", properties: {} }
+  },
+  {
+    name: "handoff",
+    description: "Park the current task for a teammate (or anyone on the team) to pick up. Give the task in full — what to do, where things stand, what is left — because the picker starts from this text alone. Optionally name the coworker by email. The team is told on Slack; they take it with /sled pickup <id>.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        task: {
+          type: "string",
+          description: "The task to hand off, in full. First line becomes the title."
+        },
+        to: {
+          type: "string",
+          description: "Coworker's email — a member of your org, or a buddy in another org (see the buddy tool). Omit to park for anyone in your org."
+        },
+        note: { type: "string", description: "One line on where things stand (≤280 chars)." }
+      },
+      required: ["task"]
+    }
+  },
+  {
+    name: "defer",
+    description: "Hit a limit? Defer the work to the reset — the musher runs it then. With an platform key it runs in the cloud on the pinned model; without one, the seat's own Mac resumes the last Claude Code session at the reset (sleds musher). Give `at` as +2h, +90m or an ISO time to override the binding reset.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        at: {
+          type: "string",
+          description: "When to start: +2h, +90m, or an ISO timestamp. Omit for the binding reset."
+        },
+        model: { type: "string", description: "Pin the model the deferred run must use." },
+        task: {
+          type: "string",
+          description: "Optional note on what the deferred run should finish (kept with the job)."
+        }
+      }
+    }
+  },
+  {
+    name: "actual",
+    description: "Close the loop on an estimated item: record what actually happened — minutes, dollars, tokens, model, who did it, when it started and finished, where the output lives (PR url), time by phase (discuss/build/deploy/test), and its state (started · done · merged · shipped). Same `source` as the estimate; Projects shows estimate vs actual and calibrates future bands.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        source: {
+          type: "object",
+          description: "The same source the estimate was filed under.",
+          properties: {
+            kind: {
+              type: "string",
+              enum: ["claude-project", "repo", "linear", "github", "manual"]
+            },
+            project: { type: "string" },
+            doc: { type: "string" },
+            item: { type: "string" },
+            url: { type: "string" }
+          },
+          required: ["kind", "project"]
+        },
+        minutes: { type: "number", description: "Total wall-clock minutes of work." },
+        usd: { type: "number", description: "Dollars spent, when known." },
+        seatCreditsUsd: {
+          type: "number",
+          description: "Seat credits ($, Cowork/Claude Code overage) this item burned — the rail the proxy never sees."
+        },
+        tokensIn: { type: "number" },
+        tokensOut: { type: "number" },
+        model: { type: "string", description: "Model that did the work, e.g. claude-fable-5-1." },
+        by: {
+          type: "string",
+          description: "Who or what: an email, 'claude-fable-5-1 · cowork', 'musher local'."
+        },
+        ref: { type: "string", description: "Where the output lives: PR url, commit, doc." },
+        startedAt: { type: "string", description: "ISO time work began." },
+        finishedAt: { type: "string", description: "ISO time work finished." },
+        state: {
+          type: "string",
+          description: "started · done · merged · shipped · parked (default: done when minutes or finishedAt are given)."
+        },
+        phases: {
+          type: "object",
+          description: "Minutes by phase; total defaults to their sum when `minutes` is absent.",
+          properties: {
+            discussMin: { type: "number" },
+            buildMin: { type: "number" },
+            deployMin: { type: "number" },
+            testMin: { type: "number" }
+          }
+        }
+      },
+      required: ["source"]
+    }
+  },
+  {
+    name: "buddy",
+    description: "Pair with one person outside your org so hand-offs can cross to them (spec 04 §4): they get an email, click Accept, and from then on `handoff {to: their email}` lands in their Waiting for you and runs on their seat. Nothing else crosses — no keys, usage or membership. With no `email`, lists your buddies. `remove: true` unpairs.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        email: { type: "string", description: "Their email. Omit to list." },
+        remove: { type: "boolean", description: "Unpair instead of inviting." }
+      }
+    }
+  },
+  {
+    name: "withdraw",
+    description: "Take back a hand-off you parked before anyone picks it up (the id from the handoffs tool). Only the seat that parked it can withdraw it.",
+    inputSchema: {
+      type: "object",
+      properties: { handoffId: { type: "string", description: "The hand-off id." } },
+      required: ["handoffId"]
+    }
+  },
+  {
+    name: "pickup",
+    description: "Take an open hand-off and get its context to continue here: a parked task comes back verbatim; a walled Claude Code session comes back as its first and last user messages. Marks it picked for the team.",
+    inputSchema: {
+      type: "object",
+      properties: { handoffId: { type: "string", description: "From the handoffs tool." } },
+      required: ["handoffId"]
+    }
   }
-  const settings = readSettings(o.home);
-  const had = hasSeatHook(settings);
-  const hadSpec = hasSpecHook(settings);
-  const withSeat = applySeatHook(settings, o.seatEventCommand ?? sledsCommand("seat-event", o.home, o.env));
-  const withSpec = applySpecHook(withSeat, o.specEventCommand ?? sledsCommand("spec-event", o.home, o.env));
-  const hadLine = o.refreshStatusLine !== false && isSledsStatusLine(withSpec[STATUS_LINE_KEY]);
-  writeSettings(o.home, hadLine ? applyStatusLine(withSpec, sledsCommand("statusline", o.home, o.env)).settings : withSpec);
-  log(`${had ? "refreshed" : "set"} hooks.Notification (${SEAT_EVENT_MATCHER}) in ${settingsPath(o.home)}`);
-  if (hadLine)
-    log(`refreshed statusLine in ${settingsPath(o.home)}`);
-  log(`${hadSpec ? "refreshed" : "set"} hooks.PostToolUse (${SPEC_EVENT_MATCHER} → estimate spec files) in ${settingsPath(o.home)}`);
-  return 0;
-};
-
-// src/commands/init.ts
-init_config();
-init_settings();
-import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync6 } from "node:fs";
-import { createInterface } from "node:readline";
-
-// src/skill.ts
-var SKILL_MD = `---
-name: sled
-description: Hand work to SLEDS — continue past a rate limit or credit wall on the org's key, hold until reset, or run overnight at half price. Use when the user says /sled, hits a usage limit, mentions their window reset, asks what ran overnight, or asks to defer or schedule agent work.
----
-
-# SLEDS
-
-Nine to five is 40 of 168 hours. SLEDS puts the other 128 to work: it carries a session past a wall, and it runs whole tasks overnight with the Musher, a night-shift orchestrator that answers the questions an agent would otherwise stop on. Nothing changes until a wall or a \`/sled\`.
-
-## Hit a limit on your seat
-
-A Team or Max seat caps on Anthropic's side ("You've hit your limit…"). SLEDS is what you switch to. When the user reports a limit, a cap, or that Claude stopped for the day, tell them exactly this:
-
-\`\`\`
-sleds on --until-reset +5h
-\`\`\`
-
-then restart \`claude\`. Claude Code runs on the org key through the proxy; the seat is untouched. \`--until-reset\` takes \`+5h\`, \`+90m\`, or an ISO time; \`--reason "<text>"\` notes why. The switch reverts itself at the deadline where a scheduler exists.
-
-## At the wall
-
-When the proxy is active it answers a walled request with its options. The user picks one by number:
-
-\`\`\`
-/sled 1    continue now on the org key
-/sled 2    hold; resume when the window resets
-/sled 3    run overnight at half price
-/sled 4    switch to a cheaper model for the rest of the session (offered when one saves ≥15%)
-/sled 5    hand off to an idle coworker, or park for the team (offered on a team of two or more)
-/sled 6    defer to reset: the job runs itself when the seat resets — same model, done in minutes, full price (offered when the wall has a reset and the org has a key)
-\`\`\`
-
-No key (Team plan, seat-first)? The musher still runs: \`sleds defer\` in a terminal schedules this Mac to resume the current session itself at the reset — \`claude --resume\` on the seat's own quota, the model pinned. \`sleds musher --status\` lists what is waiting; \`sleds run <jobId>\` runs one now; the Mac must be awake at the reset (\`sleds doctor\` checks). When the user says "defer this" or "pick it up at the reset" and the org has no key, tell them to run \`sleds defer\`.
-
-A hand-off carries a brief (the packet): what, note, cost so far, how to pick it up. The \`handoffs\` MCP tool and the dashboard's Jobs page show it; read it before taking one.
-
-## Window reset
-
-When the user mentions their window has reset, or the deadline shown by \`sleds status\` has passed:
-
-\`\`\`
-sleds off
-\`\`\`
-
-then restart \`claude\`. Settings go back to exactly what they were.
-
-## Check
-
-\`sleds status\` — on/off, since, reverts at, proxy health, wall mode, and the org's shape (\`Org:\` / \`Wiring:\`). An org with no platform key runs seat-first and its walls offer hold (\`/sled 2\`), \`sleds defer\` (this Mac resumes at the reset) and hand-off (\`/sled 5\`) — continue, overnight and switch need a key an admin adds on the dashboard.
-
-The status line's \`seat wk 52% · 5h 12%\` is the user's own Pro/Max window as Claude Code reports it (weekly, then 5-hour); \`window\` is the org key's headroom through the proxy. At \`wk 100%\` the answer is \`sleds on --until-reset\` (org key) or \`sleds defer\` (this Mac resumes at the reset, no key).
-
-## /sled — estimate the task, offer overnight
-
-Bare \`/sled\` (or \`/sled <spec>\`) means: size the current task and offer to hand it to the night shift. Do this in order.
-
-1. Read the task. The spec is the argument if given, otherwise the current conversation's open task (the todo list, the last user request).
-2. Estimate with \`/sled estimate <spec>\` — the proxy answers with the calibrated band and cap, and the estimate is recorded so its actuals feed the next one. Quote that band, never a point and never your own guess.
-3. Offer the window when any of these hold: the high end of the cost band is above the org's approval threshold, the wall-clock is over 30 minutes, or the result is not needed before end of day. The offer is one line: \`Run this overnight from 18:00? Estimated $40–120 at half price.\`
-4. On yes, write the hand-off the Musher will work from: the spec, the acceptance test, the org conventions that apply, and every decision already made in this session as \`question -> answer\` pairs. Ask one thing before queueing: the autonomy for this job.
-   - \`ask\`: every question pages on-call.
-   - \`decide_and_flag\` (default): reversible defaults are taken and listed in the morning.
-   - \`decide\`: reversible defaults are taken quietly.
-   Irreversible questions always page, whatever the autonomy. No answer in 30 minutes parks the job and the Musher moves to the next one.
-5. Queue it with \`/sled overnight <spec>\` (the hand-off from step 4 is the spec). The proxy runs the real estimator (its cap bounds the job's spend), schedules the job for the org's overnight window, and snapshots this session so the batch runner has the context. Confirm with the job id and the band from the reply — not your own guess.
-
-## /sled review — the morning queue
-
-Morning ritual. List what the night shift did, grouped:
-
-- Delivered: jobs with a PR or a result, with actual cost against the estimate.
-- Flagged: decisions the Musher took on a \`decide_and_flag\` job, each as \`question -> answer\` with the rung that answered it (spec, convention, or default). These need a human eye, not a redo.
-- Parked: questions nobody answered in 30 minutes. Each shows the option set; answering resumes the job.
-
-Read the Musher log for every delivered job before summarizing, and put each decision into the PR body with its reasoning. Then offer the next step for each: merge, kick back with a note, or \`/sled resume <id>\`. On Monday the review covers the weekend.
-
-## /sled weekend — Friday sweep
-
-Friday afternoon. Sweep the open task list into a weekend batch: everything the user has queued or labeled for the weekend becomes overnight jobs with the org's default autonomy, and the Monday review covers all of it. For now, explain that the sweep queues the current task list as overnight jobs; sweeping issues by GitHub label is a later ticket. Confirm the count and the total estimate band before queueing.
-
-## /sled overnight [spec]
-
-Queue a batch job without waiting for a wall. \`/sled overnight <spec>\` runs the spec; bare \`/sled overnight\` runs the session's original ask. The reply carries the band, the cap, when it runs, and \`/sled resume <id>\` for the morning. Half price on the batch tier.
-
-## /sled jobs
-
-List the org's jobs: queued, running, delivered, parked, with the estimate band, the actual so far, and the autonomy. Parked jobs show the unanswered question. Keep it to one line per job.
-
-## /sled resume <id>
-
-Resume a parked job. Show the unanswered question and its options, take the answer, and confirm the job is back in the queue. The answer is logged with the user's name, and it becomes a prior decision the Musher can reuse on the next question like it.
-
-## /sled sync-backlog — price the backlog
-
-With the \`sleds\` MCP server available, size every open issue so the dashboard's Projects page shows the backlog in dollars and hours, not T-shirt sizes or points. SLEDS is not a tracker and never the system of record: Linear and GitHub keep the issues; SLEDS mirrors their words (cycle, labels, priority, assignee, state) and adds the price.
-
-1. Find the issues. In Cowork with a Claude Project attached: each spec doc, each phase or slice inside a spec, and each line of a backlog list (a numbered or bulleted list under a heading like Backlog, Next, To do, Roadmap). With a Linear or GitHub MCP available: the open issues of the team / repo the user names, with their cycle or milestone, labels, priority, assignee and state. Skip anything done, closed or shipped.
-2. For each issue call the \`estimate\` tool with \`spec\` = the title on the first line, then the body (quote the issue or doc, do not paraphrase), and \`source\` = \`{ kind: "linear" | "github" | "claude-project", project: <team, repo or Project name>, doc: <issue key like ENG-42 or #123, or the doc path>, item: <heading or line, only when a doc holds many>, url, cycle, labels, priority, assignee, state }\` — the tracker's values verbatim. The estimator dedupes: an unchanged issue returns its existing estimate, so re-running is safe.
-3. Report one line per issue — \`ENG-42 · Cycle 34 · high · priya · $6–18 · 60–150 min · 55%\` — then the total of what is open, and the Projects page address (\`/o/<slug>/projects\`). Never invent a number: the band is the estimator's. Do not change anything in the tracker from this command; the page's verbs (defer, prioritize, hand off) do that, and write back in the tracker's terms.
-
-To keep the backlog priced as issues change, set a Cowork scheduled task: "Every weekday at 7:00, run /sled sync-backlog for <team or Project> and post the open total." An issue whose text changed gets a fresh band; the page counts how many times each was re-sized.
-
-## Voice
-
-Plain sentences, sentence case, no emoji. Numbers with units and bands. Say what happens next, not what could.
-
-## Overnight jobs (how it runs)
-
-At a wall the proxy prints its options; \`/sled 3\` queues the session for the org's overnight window on the batch tier at half price. The next morning:
-
-- \`/sled jobs\` — this seat's jobs: id, status, route, cost, when — then the team's open hand-offs waiting for pickup (yours first).
-- \`/sled resume <id>\` — pull a delivered job's output into the session as the assistant's reply and keep going.
-
-A job that is \`parked\` or \`failed\` shows its reason in \`/sled jobs\`; the admin can see and cancel jobs on the dashboard's Jobs page.
-
-## Team hand-off
-
-\`/sled 5\` at a wall hands the snapshotted session to the most idle coworker (or parks it for anyone on the team). The team hears on Slack and the dashboard's Jobs page lists open hand-offs with the pickup command.
-
-- \`/sled pickup <id>\` — in the coworker's Claude Code session: the handed-off session resumes there on the org key, metered to them. A task parked from Cowork (no session) starts this turn from the task text. A hand-off meant for someone else or already taken gets one line saying so.
-
-From Cowork or any MCP client (\`sleds mcp\`): the \`handoffs\` tool lists what is waiting, \`handoff\` parks the current task for a teammate (give the task in full — the picker starts from that text), and \`pickup\` takes one and returns its context to continue there.
-`;
-
-// src/commands/hooks.ts
-init_settings();
-var hooks2 = (o) => {
-  const log = o.log ?? console.log;
-  const error = o.error ?? console.error;
-  if (!hasClaudeCode(o.home)) {
-    error(`Claude Code not found (${claudeDir(o.home)} does not exist). Install it, then re-run.`);
-    return 1;
-  }
-  const settings = readSettings(o.home);
-  const had = hasSeatHook(settings);
-  const hadSpec = hasSpecHook(settings);
-  const withSeat = applySeatHook(settings, o.seatEventCommand ?? sledsCommand("seat-event", o.home, o.env));
-  const withSpec = applySpecHook(withSeat, o.specEventCommand ?? sledsCommand("spec-event", o.home, o.env));
-  const hadLine = o.refreshStatusLine !== false && isSledsStatusLine(withSpec[STATUS_LINE_KEY]);
-  writeSettings(o.home, hadLine ? applyStatusLine(withSpec, sledsCommand("statusline", o.home, o.env)).settings : withSpec);
-  log(`${had ? "refreshed" : "set"} hooks.Notification (${SEAT_EVENT_MATCHER}) in ${settingsPath(o.home)}`);
-  if (hadLine)
-    log(`refreshed statusLine in ${settingsPath(o.home)}`);
-  log(`${hadSpec ? "refreshed" : "set"} hooks.PostToolUse (${SPEC_EVENT_MATCHER} → estimate spec files) in ${settingsPath(o.home)}`);
-  return 0;
-};
-
-// src/commands/init.ts
-var DEFAULT_PROXY_URL = "http://localhost:8787";
-var promptStdin = (question) => new Promise((resolve4) => {
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  rl.question(question, (answer) => {
-    rl.close();
-    resolve4(answer.trim());
-  });
-});
-async function signupIndividual(proxyUrl, email, credential, fetchFn = fetch) {
-  return signupRequest(proxyUrl, { email, apiKey: credential }, fetchFn);
-}
-async function signupTeam(proxyUrl, email, team, credential, fetchFn = fetch) {
-  return signupRequest(proxyUrl, { email, team, ...credential ? { apiKey: credential } : {} }, fetchFn);
-}
-async function signupRequest(proxyUrl, payload, fetchFn) {
-  try {
-    const res = await fetchFn(`${proxyUrl}/signup`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify(payload),
-      signal: AbortSignal.timeout(20000)
-    });
-    const body = await res.json().catch(() => ({}));
-    if (res.ok && typeof body.token === "string")
-      return {
-        ok: true,
-        token: body.token,
-        created: body.created === true,
-        verifyPending: body.verifyPending === true
-      };
-    return {
-      ok: false,
-      reason: typeof body.reason === "string" ? body.reason : `http_${res.status}`,
-      status: res.status
-    };
-  } catch {
-    return { ok: false, reason: "unreachable", status: 0 };
-  }
-}
-var SIGNUP_REASONS = {
-  email: "that does not look like an email address.",
-  key: "that does not look like an Anthropic API key (sk-ant-…).",
-  key_rejected: "Anthropic did not accept that API key. Check it at console.anthropic.com → API keys.",
-  rate_limited: "too many signups from this network in the last hour. Try again later.",
-  not_configured: "the proxy is not set up for self-serve signup yet.",
-  team: "the team needs a name (2–80 characters).",
-  personal_email: "a team needs a work email — that domain is a personal mailbox. Sign up as an individual instead, or use your company address.",
-  org_exists: "someone at your company already set up SLEDS. Ask them for a seat (Members → invite, Admin → Mint a seat) and run `sleds init --token …`.",
-  unavailable: "the proxy could not reach its control plane. Try again in a moment.",
-  unreachable: "could not reach the proxy."
-};
-function signupFailureText(r) {
-  return `Signup failed: ${SIGNUP_REASONS[r.reason] ?? `unexpected answer (${r.reason}, HTTP ${r.status}).`}`;
-}
-function normalizeProxyUrl(raw) {
-  let t = raw.trim();
-  if (!t)
-    return null;
-  if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(t))
-    t = `https://${t}`;
-  t = t.replace(/[./]+$/, "");
-  try {
-    const u = new URL(t);
-    if (u.protocol !== "http:" && u.protocol !== "https:")
-      return null;
-    if (!u.hostname)
-      return null;
-    u.hostname = u.hostname.replace(/\.+$/, "");
-    return `${u.protocol}//${u.host}${u.pathname === "/" ? "" : u.pathname.replace(/\/+$/, "")}`;
-  } catch {
-    return null;
-  }
-}
-async function fetchOrgInfo(url, token, fetchFn = fetch) {
-  try {
-    const res = await fetchFn(`${url}/proxy/meter`, {
-      headers: { authorization: `Bearer ${token}` },
-      signal: AbortSignal.timeout(1e4)
-    });
-    if (!res.ok)
-      return null;
-    const body = await res.json();
-    return body.org?.capabilities ? body.org : null;
-  } catch {
-    return null;
-  }
-}
-async function probeProxy(url, fetchFn = fetch, opts = {}) {
-  const tries = opts.tries ?? 2;
-  const timeoutMs = opts.timeoutMs ?? 1e4;
-  for (let i = 0;i < tries; i++) {
-    try {
-      const res = await fetchFn(`${url}/healthz`, { signal: AbortSignal.timeout(timeoutMs) });
-      if (res.ok)
-        return true;
-    } catch {}
-  }
-  return false;
-}
-var resolveToken = async (o) => {
-  const env = o.env ?? process.env;
-  if (o.token)
-    return { token: o.token.trim(), source: "flag" };
-  if (env.SLEDS_TOKEN)
-    return { token: env.SLEDS_TOKEN.trim(), source: "env" };
-  const fromFile = readTokenFile(o.home);
-  if (fromFile)
-    return { token: fromFile, source: "file" };
-  if (o.nonInteractive || !o.prompt)
-    return null;
-  if (!o.signup) {
-    const typed = (await o.prompt("Paste your SLEDS seat token (sled_…), or press enter to sign up as an individual: ")).trim();
-    if (typed)
-      return { token: typed, source: "prompt" };
-  }
-  const url = normalizeProxyUrl(o.url ?? env.SLEDS_PROXY_URL ?? readConfig(o.home).proxyUrl ?? DEFAULT_PROXY_URL);
-  if (!url)
-    return null;
-  const log = o.log ?? console.log;
-  const err = o.error ?? console.error;
-  let team = o.team?.trim() || null;
-  if (team === null && !o.email) {
-    const which = (await o.prompt("Set up SLEDS for (1) just you, or (2) your team? [1/2]: ")).trim();
-    if (which === "2") {
-      team = (await o.prompt("Team name (e.g. your company): ")).trim();
-      if (!team)
-        return null;
-    }
-  }
-  const email = (o.email ?? await o.prompt(team ? "Your work email: " : "Your email: ")).trim();
-  if (!email.includes("@"))
-    return null;
-  if (team) {
-    const credential2 = (await o.prompt("Your organization's Anthropic API key, if you have one (sk-ant-…; press enter to skip — a Team plan without one still works, walls offer hold and hand-off): ")).trim();
-    const r2 = await signupTeam(url, email, team, credential2 || null, o.fetchFn);
-    if (!r2.ok) {
-      err(signupFailureText(r2));
-      return null;
-    }
-    log(`Created ${team} with you as owner (${email}).${credential2 ? " Your platform key is stored encrypted as the org's upstream key." : " No platform key yet — add one on the dashboard (Admin → Keys) to unlock continue / overnight / switch at a wall."}`);
-    if (r2.verifyPending)
-      log(`Check ${email} for a verification link and click it — inviting members unlocks then (an unverified team is removed after 48 h; your own seat works meanwhile).`);
-    log("Invite your team on the dashboard (Members → invite by email, Admin → Mint a seat); each person runs `sleds init --token …`.");
-    return { token: r2.token, source: "signup" };
-  }
-  const credential = (await o.prompt("Your Anthropic API key (sk-ant-…, stored encrypted, spends only your account): ")).trim();
-  if (!credential)
-    return null;
-  const r = await signupIndividual(url, email, credential, o.fetchFn);
-  if (!r.ok) {
-    err(signupFailureText(r));
-    return null;
-  }
-  log(r.created ? `Created your individual seat (${email}). Your key is stored encrypted and is the only key this seat spends.` : `Re-issued your individual seat (${email}); the previous token is revoked.`);
-  return { token: r.token, source: "signup" };
-};
-var init = async (o) => {
-  const log = o.log ?? console.log;
-  const error = o.error ?? console.error;
-  const env = o.env ?? process.env;
-  if (!hasClaudeCode(o.home)) {
-    error(`Claude Code not found (${claudeDir(o.home)} does not exist). Install it, then re-run.`);
-    return 1;
-  }
-  const resolved = await resolveToken(o);
-  if (!resolved) {
-    error(o.signup ? "Signup did not complete. Nothing was changed." : "No seat token. Pass --token, set SLEDS_TOKEN, run without --non-interactive, or use --signup.");
-    return 2;
-  }
-  if (!isSeatToken(resolved.token)) {
-    error("Invalid seat token: expected something like sled_xxxxxxxx.");
-    return 2;
-  }
-  const url = normalizeProxyUrl(o.url ?? env.SLEDS_PROXY_URL ?? readConfig(o.home).proxyUrl ?? DEFAULT_PROXY_URL);
-  if (!url) {
-    error(`Invalid proxy URL: ${JSON.stringify(o.url ?? env.SLEDS_PROXY_URL ?? "")}. Expected https://proxy.sleds.ai.`);
-    return 2;
-  }
-  if (!o.noProbe && !await probeProxy(url, o.fetchFn)) {
-    error(`No SLEDS proxy answered at ${url}/healthz. Check the URL (or pass --no-probe to save it anyway).`);
-    return 2;
-  }
-  const wrote = [];
-  const org = await fetchOrgInfo(url, resolved.token, o.fetchFn);
-  const wiring = o.proxyAlways ? "proxy-always" : o.seatFirst ? "seat-first" : org?.mode ?? "proxy-always";
-  if (wiring === "proxy-always" && org && !org.capabilities.upstreamKey) {
-    error(`${org.name} has no platform key for the proxy to forward with; --proxy-always would break every request. Using seat-first.`);
-  }
-  const finalWiring = wiring === "proxy-always" && org && !org.capabilities.upstreamKey ? "seat-first" : wiring;
-  if (backupSettings(o.home))
-    wrote.push(`backed up settings to ${backupPath(o.home)}`);
-  const current = readSettings(o.home);
-  const wired = finalWiring === "proxy-always" ? applyProxy(current, { url, token: resolved.token }) : removeProxy(current);
-  const statusLine = applyStatusLine(wired, o.statusLineCommand ?? sledsCommand("statusline", o.home, o.env));
-  writeSettings(o.home, statusLine.settings);
-  wrote.push(finalWiring === "proxy-always" ? `set env.ANTHROPIC_BASE_URL and env.ANTHROPIC_AUTH_TOKEN in ${settingsPath(o.home)} (everything through the proxy)` : `left Claude Code on your seat (no ANTHROPIC_BASE_URL in ${settingsPath(o.home)}); \`sleds on\` switches to the proxy at a wall`);
-  wrote.push(statusLine.prior === undefined ? `set statusLine in ${settingsPath(o.home)}` : `set statusLine in ${settingsPath(o.home)} (previous one kept for uninstall)`);
-  hooks2({
-    home: o.home,
-    env: o.env,
-    refreshStatusLine: false,
-    seatEventCommand: o.seatEventCommand,
-    specEventCommand: o.specEventCommand,
-    log: (line) => wrote.push(line),
-    error
-  });
-  if (resolved.source !== "file") {
-    writeTokenFile(o.home, resolved.token);
-    wrote.push(`saved token to ${tokenPath(o.home)} (0600)`);
-  }
-  const prior = readConfig(o.home);
-  writeConfig(o.home, {
-    ...prior,
-    token: resolved.token,
-    proxyUrl: url,
-    wiring: finalWiring,
-    ...org ? { org } : {},
-    ...statusLine.prior !== undefined ? { priorStatusLine: statusLine.prior } : {}
-  });
-  wrote.push(`saved token and proxy URL to ${configPath(o.home)} (0600)`);
-  mkdirSync6(skillDir(o.home), { recursive: true });
-  writeFileSync6(skillPath(o.home), SKILL_MD);
-  wrote.push(`installed skill at ${skillPath(o.home)}`);
-  if (o.installMusher) {
-    const r = o.installMusher();
-    if (r)
-      wrote.push(r);
-  }
-  const orgLine = org ? `${org.name} · ${org.plan}${org.capabilities.upstreamKey ? ` · ${org.capabilities.upstreamSource === "own" ? "org key" : "shared key"}` : " · no platform key"}` : "org unknown (proxy did not answer /proxy/meter)";
-  if (finalWiring === "proxy-always") {
-    log(`Claude Code now runs through SLEDS on the org key.  (${orgLine})`);
-    log("");
-    for (const w of wrote)
-      log(`  ${w}`);
-    log("");
-    log(`Every request goes to ${url} and is metered to this seat. Run \`sleds status\` to check.`);
-    log("The status line shows your meter: spend today, seat limits, window, allowance, queued jobs.");
-    log("Prefer your seat first? `sleds init --seat-first` leaves Claude Code on it and switches only at a wall.");
-  } else {
-    log(`SLEDS is watching your seat. Nothing changes until a wall.  (${orgLine})`);
-    log("");
-    for (const w of wrote)
-      log(`  ${w}`);
-    log("");
-    log("Claude Code keeps running on your seat; the status line reports its quota to SLEDS on every turn.");
-    if (org && !org.capabilities.upstreamKey) {
-      log("This org has no platform key, so at a wall the choices are hold until reset, `sleds defer` (this Mac resumes the session itself at the reset), or hand off to a teammate. An admin can add a key on the dashboard to unlock continue / overnight / switch.");
-    } else {
-      log("At a wall: `sleds on --until-reset +5h` (or /sled 1) switches to the org key through the proxy until the reset; `sleds off` puts you back.");
-    }
-  }
-  return 0;
-};
-
-// ../../packages/shared/src/mcp/server.ts
-init_format();
-function fetchClient(o) {
-  const fetchFn = o.fetchFn ?? fetch;
-  const base = o.proxyUrl.replace(/\/+$/, "");
-  const headers = { "content-type": "application/json", authorization: `Bearer ${o.token}` };
-  const timeout = () => AbortSignal.timeout(o.timeoutMs ?? MCP_TIMEOUT_MS);
-  return {
-    async post(path, body) {
-      try {
-        const res = await fetchFn(`${base}${path}`, {
-          method: "POST",
-          headers,
-          body: JSON.stringify(body),
-          signal: timeout()
-        });
-        if (!res.ok)
-          return null;
-        const parsed = await res.json();
-        return isObject7(parsed) ? parsed : null;
-      } catch {
-        return null;
-      }
-    },
-    async postFull(path, body) {
-      try {
-        const res = await fetchFn(`${base}${path}`, {
-          method: "POST",
-          headers,
-          body: JSON.stringify(body),
-          signal: timeout()
-        });
-        let json = null;
-        try {
-          json = await res.json();
-        } catch {
-          json = null;
-        }
-        return { status: res.status, json: isObject7(json) ? json : null };
-      } catch {
-        return null;
-      }
-    },
-    async get(path) {
-      try {
-        const res = await fetchFn(`${base}${path}`, { headers, signal: timeout() });
-        if (!res.ok)
-          return null;
-        const parsed = await res.json();
-        return isObject7(parsed) ? parsed : null;
-      } catch {
-        return null;
-      }
-    }
-  };
-}
-var PROTOCOL_VERSION = "2025-06-18";
-var SERVER_INFO = { name: "sleds", version: "0.0.1" };
-var MCP_TIMEOUT_MS = 5000;
-var sourceSchema = {
-  type: "object",
-  description: "Where this item lives, so the Projects page groups it: a Claude Project doc, a repo spec, a Linear/GitHub issue. Same source + same text on a later call returns the same estimate (idempotent sync).",
-  properties: {
-    kind: { type: "string", enum: ["claude-project", "repo", "linear", "github", "manual"] },
-    project: { type: "string", description: "Project / repo / board name." },
-    doc: { type: "string", description: "Doc path or issue key inside it." },
-    item: {
-      type: "string",
-      description: "The line or phase inside the doc, when a doc holds many."
-    },
-    url: { type: "string", description: "Link to open it, if any." }
-  },
-  required: ["kind", "project"]
-};
-var specSchema = {
-  type: "object",
-  properties: {
-    spec: {
-      type: "string",
-      description: "What the job should do. The first line becomes the title."
-    },
-    model: { type: "string", description: "Model to price and run with; org default when absent." },
-    source: sourceSchema
-  },
-  required: ["spec"]
-};
-var TOOLS = [
-  {
-    name: "usage",
-    description: "The SLEDS meter for this seat: built today, month against the ceiling, window and reset, allowance, queued/running/delivered jobs, the last wall, and the seat's own Pro/Max limit bars.",
-    inputSchema: { type: "object", properties: {} }
-  },
-  {
-    name: "estimate",
-    description: "Size a task before running it: the org estimator's cost and time band with confidence and a spend cap. Recorded, so its actuals calibrate the next estimate. Never a point figure.",
-    inputSchema: specSchema
-  },
-  {
-    name: "overnight",
-    description: "Queue a task as an overnight batch job at half price. The estimator sizes it first and its cap bounds the spend; the job runs in the org's overnight window and is pulled into a session later with /sled resume <id>.",
-    inputSchema: specSchema
-  },
-  {
-    name: "jobs",
-    description: "This seat's overnight jobs, newest first (id, status, route, cost, when), then the team's open hand-offs waiting for pickup.",
-    inputSchema: { type: "object", properties: {} }
-  },
-  {
-    name: "handoffs",
-    description: "The team's open hand-offs: tasks and walled sessions parked for pickup, the ones meant for this seat first. Each has an id for the pickup tool (or /sled pickup <id> in Claude Code).",
-    inputSchema: { type: "object", properties: {} }
-  },
-  {
-    name: "handoff",
-    description: "Park the current task for a teammate (or anyone on the team) to pick up. Give the task in full — what to do, where things stand, what is left — because the picker starts from this text alone. Optionally name the coworker by email. The team is told on Slack; they take it with /sled pickup <id>.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        task: {
-          type: "string",
-          description: "The task to hand off, in full. First line becomes the title."
-        },
-        to: { type: "string", description: "Coworker's email; omit to park for anyone." },
-        note: { type: "string", description: "One line on where things stand (≤280 chars)." }
-      },
-      required: ["task"]
-    }
-  },
-  {
-    name: "defer",
-    description: "Hit a limit? Defer the work to the reset — the musher runs it then. With an org key it runs in the cloud on the pinned model; without one, the seat's own Mac resumes the last Claude Code session at the reset (sleds musher). Give `at` as +2h, +90m or an ISO time to override the binding reset.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        at: {
-          type: "string",
-          description: "When to start: +2h, +90m, or an ISO timestamp. Omit for the binding reset."
-        },
-        model: { type: "string", description: "Pin the model the deferred run must use." },
-        task: {
-          type: "string",
-          description: "Optional note on what the deferred run should finish (kept with the job)."
-        }
-      }
-    }
-  },
-  {
-    name: "pickup",
-    description: "Take an open hand-off and get its context to continue here: a parked task comes back verbatim; a walled Claude Code session comes back as its first and last user messages. Marks it picked for the team.",
-    inputSchema: {
-      type: "object",
-      properties: { handoffId: { type: "string", description: "From the handoffs tool." } },
-      required: ["handoffId"]
-    }
-  }
-];
-var NOT_SET_UP = {
-  text: "SLEDS is not connected to a seat here. Run `sleds init` (CLI) or connect SLEDS as a connector.",
-  isError: true
+];
+var NOT_SET_UP = {
+  text: "SLEDS is not connected to a seat here. Run `sleds init` (CLI) or connect SLEDS as a connector.",
+  isError: true
 };
 var UNREACHABLE = {
   text: "Control plane unreachable. Nothing was recorded → try again in a moment.",
@@ -2497,11 +2253,12 @@ async function jobsTool(ctx) {
     return UNREACHABLE;
   const rows = Array.isArray(r.jobs) ? r.jobs.filter(isObject7) : [];
   const handoffs = Array.isArray(r.handoffs) ? r.handoffs.filter(isObject7) : [];
+  const me = isObject7(r.seat) ? str2(r.seat.email) : undefined;
   const now = (ctx.now ?? Date.now)();
   if (rows.length === 0 && handoffs.length === 0)
     return { text: "No jobs for this seat. Queue one with the overnight tool." };
   if (rows.length === 0)
-    return { text: ["No jobs for this seat.", ...handoffLines(handoffs, now)].join(`
+    return { text: ["No jobs for this seat.", ...handoffLines(handoffs, now, me)].join(`
 `) };
   const lines = rows.map((j) => {
     const when = (ts) => num4(ts) !== undefined ? shortDuration(Math.abs(now - num4(ts))) : "";
@@ -2516,251 +2273,835 @@ async function jobsTool(ctx) {
       tail
     ].join("  ").trimEnd();
   });
-  lines.push("Resume a delivered job in a session with /sled resume <id>.");
-  lines.push(...handoffLines(handoffs, now));
+  lines.push("Resume a delivered job in a session with /sled resume <id>.");
+  lines.push(...handoffLines(handoffs, now, me));
+  return { text: lines.join(`
+`) };
+}
+function handoffLines(handoffs, now, me) {
+  if (handoffs.length === 0)
+    return [];
+  const out = ["", `Hand-offs waiting (${handoffs.length}):`];
+  for (const h of handoffs) {
+    const forMe = h.forMe === true;
+    const to = str2(h.to);
+    const mine = me !== undefined && str2(h.from)?.toLowerCase() === me.toLowerCase();
+    const who = mine ? `yours · for ${to ?? "anyone"}` : forMe ? to ? "for you" : "parked for anyone" : `for ${to ?? "anyone"}`;
+    const created = num4(h.createdAt);
+    const age = created !== undefined ? `${shortDuration(Math.max(0, now - created))} ago` : "";
+    const note = str2(h.note);
+    const parts = [`from ${str2(h.from) ?? "?"}`, who, str2(h.wallKind) ?? "", age].filter(Boolean);
+    if (h.hasSnapshot === false)
+      parts.push("note only");
+    out.push(`${str2(h.handoffId) ?? "?"}  ${parts.join(" · ")}${note ? `  «${note.length > 60 ? `${note.slice(0, 57)}…` : note}»` : ""}`);
+  }
+  out.push(me !== undefined && handoffs.some((h) => str2(h.from)?.toLowerCase() === me.toLowerCase()) ? "Take one with /sled pickup <id>; take back one of yours with the withdraw tool." : "Take one in Claude Code with /sled pickup <id>.");
+  return out;
+}
+async function handoffsTool(ctx) {
+  if (!ctx.client)
+    return NOT_SET_UP;
+  const r = await ctx.client.get("/proxy/jobs");
+  if (!r)
+    return UNREACHABLE;
+  const handoffs = Array.isArray(r.handoffs) ? r.handoffs.filter(isObject7) : [];
+  if (handoffs.length === 0)
+    return { text: "No open hand-offs on your team. Park one with the handoff tool." };
+  const now = (ctx.now ?? Date.now)();
+  const packets = handoffs.map((h) => str2(h.packet)).filter((p) => Boolean(p)).join(`
+
+---
+
+`);
+  const me = isObject7(r.seat) ? str2(r.seat.email) : undefined;
+  return {
+    text: [handoffLines(handoffs, now, me).slice(1).join(`
+`), packets ? `
+${packets}` : ""].join(`
+`)
+  };
+}
+async function withdrawTool(ctx, args) {
+  if (!ctx.client)
+    return NOT_SET_UP;
+  const handoffId = str2(args.handoffId)?.trim();
+  if (!handoffId)
+    return { text: "Pass handoffId: the id from the handoffs tool.", isError: true };
+  const r = await ctx.client.postFull("/proxy/handoff/withdraw", { handoffId });
+  if (!r)
+    return { text: `Nothing withdrawn. ${UNREACHABLE.text}`, isError: true };
+  if (r.status < 200 || r.status >= 300) {
+    const msg = isObject7(r.json) && isObject7(r.json.error) ? str2(r.json.error.message) : undefined;
+    return { text: msg ?? `Could not withdraw ${handoffId} (${r.status}).`, isError: true };
+  }
+  return { text: `Withdrawn ${handoffId}. It is off the team's list; nobody can pick it up.` };
+}
+async function handoffTool(ctx, args) {
+  if (!ctx.client)
+    return NOT_SET_UP;
+  const task = str2(args.task)?.trim();
+  if (!task)
+    return { text: "Nothing to hand off. Pass task: what the picker should do.", isError: true };
+  const to = str2(args.to)?.trim();
+  const r = await ctx.client.postFull("/proxy/handoff/park", {
+    task,
+    to: to || undefined,
+    note: str2(args.note)?.trim() || undefined
+  });
+  if (!r)
+    return { text: `Nothing was parked. ${UNREACHABLE.text}`, isError: true };
+  if (r.status === 404 && to)
+    return {
+      text: `${to} is not a member of your org and not a buddy. Nothing was parked. Pair first with the buddy tool (they accept by email), then hand off again.`,
+      isError: true
+    };
+  if (r.status !== 200)
+    return {
+      text: errorMessage(r.json) ?? `Nothing was parked (HTTP ${r.status}).`,
+      isError: true
+    };
+  const id = str2(r.json?.handoffId) ?? "unknown";
+  return {
+    text: `${to ? `Handed off to ${to}` : "Parked for the team"}. They take it in Claude Code with /sled pickup ${id}, or with the pickup tool here. The team was told on Slack.`
+  };
+}
+async function pickupTool(ctx, args) {
+  if (!ctx.client)
+    return NOT_SET_UP;
+  const handoffId = str2(args.handoffId)?.trim();
+  if (!handoffId)
+    return { text: "Pass handoffId, from the handoffs tool.", isError: true };
+  const r = await ctx.client.postFull("/proxy/handoff/pickup", { handoffId });
+  if (!r)
+    return { text: `Nothing was picked up. ${UNREACHABLE.text}`, isError: true };
+  if (r.status !== 200)
+    return {
+      text: errorMessage(r.json) ?? `Could not pick it up (HTTP ${r.status}).`,
+      isError: true
+    };
+  const j = r.json ?? {};
+  const from = str2(j.from) ?? "a teammate";
+  const note = str2(j.note);
+  const head = `Picked up from ${from}.${note ? ` Where it stands: ${note}` : ""}`;
+  if (j.kind === "task")
+    return { text: `${head}
+
+The task:
+${str2(j.task) ?? ""}
+
+Carry it through from here.` };
+  const first = str2(j.firstUserText) ?? "";
+  const last = str2(j.lastUserText) ?? "";
+  const n = num4(j.messageCount);
+  return {
+    text: [
+      `${head} This was a Claude Code session${n !== undefined ? ` (${n} messages)` : ""} that hit a wall; its snapshot can also be replayed in Claude Code with /sled pickup ${handoffId} — but it is now marked picked by you.`,
+      "",
+      `It started with:
+${first}`,
+      ...last && last !== first ? ["", `The last ask was:
+${last}`] : [],
+      "",
+      "Continue the work from here."
+    ].join(`
+`)
+  };
+}
+function parseAt2(v, now) {
+  const rel = /^\+(\d+)([hm])$/.exec(v.trim());
+  if (rel)
+    return now + Number.parseInt(rel[1] ?? "0", 10) * (rel[2] === "h" ? 3600000 : 60000);
+  const t = Date.parse(v);
+  return Number.isFinite(t) ? t : undefined;
+}
+async function deferTool(ctx, args) {
+  if (!ctx.client)
+    return NOT_SET_UP;
+  const now = (ctx.now ?? Date.now)();
+  const atRaw = str2(args.at)?.trim();
+  const at = atRaw ? parseAt2(atRaw, now) : undefined;
+  if (atRaw && at === undefined)
+    return { text: "`at` takes +2h, +90m or an ISO time.", isError: true };
+  const r = await ctx.client.post("/proxy/defer", {
+    ...at !== undefined ? { resetAt: at } : {},
+    ...str2(args.model) ? { model: str2(args.model) } : {},
+    host: "mcp"
+  });
+  if (!r)
+    return { text: `Nothing was deferred. ${UNREACHABLE.text}`, isError: true };
+  const jobId = str2(r.jobId) ?? "unknown";
+  const when = num4(r.scheduledAt);
+  const startsIn = when !== undefined && when > now + 60000 ? `starts in ${shortDuration(when - now)}` : "starts at the next musher tick (within 5 min)";
+  return {
+    text: `Deferred. Job ${jobId} ${startsIn}. With no platform key it runs on the seat's own Mac (sleds musher must be installed there — sleds doctor checks); with a key, in the cloud. Watch it with the jobs tool or /sled jobs.${str2(args.task) ? ` Note kept: ${str2(args.task)}` : ""}`
+  };
+}
+async function actualTool(ctx, args) {
+  if (!ctx.client)
+    return NOT_SET_UP;
+  const source = args.source;
+  if (typeof source !== "object" || source === null)
+    return {
+      text: "`source` is required — the same one the estimate was filed under.",
+      isError: true
+    };
+  const iso = (v) => {
+    const t = str2(v) ? Date.parse(str2(v)) : Number.NaN;
+    return Number.isFinite(t) ? t : undefined;
+  };
+  const phasesRaw = typeof args.phases === "object" && args.phases !== null ? args.phases : undefined;
+  const phases = phasesRaw ? Object.fromEntries(["discussMin", "buildMin", "deployMin", "testMin"].map((k) => [k, num4(phasesRaw[k])]).filter(([, v]) => v !== undefined)) : undefined;
+  const work = {
+    ...iso(args.startedAt) !== undefined ? { startedAt: iso(args.startedAt) } : {},
+    ...iso(args.finishedAt) !== undefined ? { finishedAt: iso(args.finishedAt) } : {},
+    ...str2(args.model) ? { model: str2(args.model) } : {},
+    ...num4(args.tokensIn) !== undefined ? { tokensIn: num4(args.tokensIn) } : {},
+    ...num4(args.tokensOut) !== undefined ? { tokensOut: num4(args.tokensOut) } : {},
+    ...str2(args.by) ? { by: str2(args.by) } : {},
+    ...str2(args.ref) ? { ref: str2(args.ref) } : {},
+    ...phases && Object.keys(phases).length > 0 ? { phases } : {},
+    ...num4(args.seatCreditsUsd) !== undefined ? { seatCreditsUsd: num4(args.seatCreditsUsd) } : {}
+  };
+  const r = await ctx.client.post("/proxy/estimate/actual", {
+    source,
+    ...num4(args.minutes) !== undefined ? { actualMinutes: num4(args.minutes) } : {},
+    ...num4(args.usd) !== undefined ? { actualUsd: num4(args.usd) } : {},
+    ...str2(args.state) ? { state: str2(args.state) } : {},
+    ...Object.keys(work).length > 0 ? { work } : {}
+  });
+  if (!r)
+    return { text: `Nothing recorded. ${UNREACHABLE.text}`, isError: true };
+  if (r.ok === false)
+    return {
+      text: `No estimate on file for that source (${str2(r.reason) ?? "unknown"}). Estimate it first.`,
+      isError: true
+    };
+  const bits = [
+    num4(args.minutes) !== undefined ? `${num4(args.minutes)} min` : phases ? "phases recorded" : null,
+    num4(args.usd) !== undefined ? usd(num4(args.usd)) : null,
+    num4(args.tokensIn) !== undefined || num4(args.tokensOut) !== undefined ? `${(num4(args.tokensIn) ?? 0) + (num4(args.tokensOut) ?? 0)} tokens` : null,
+    str2(args.model),
+    str2(args.state) ?? "done"
+  ].filter(Boolean);
+  return { text: `Recorded: ${bits.join(" · ")}. Projects shows it beside the estimate.` };
+}
+async function buddyTool(ctx, args) {
+  if (!ctx.client)
+    return NOT_SET_UP;
+  const email = str2(args.email)?.trim();
+  if (!email) {
+    const r2 = await ctx.client.get("/proxy/buddy");
+    if (!r2)
+      return UNREACHABLE;
+    const list = Array.isArray(r2.buddies) ? r2.buddies : [];
+    if (list.length === 0)
+      return {
+        text: "No buddies yet. `buddy {email}` sends someone an invite; once they accept, `handoff {to: email}` reaches them in their own org."
+      };
+    const lines = list.map((b) => `${str2(b.email)}  ${b.status === "active" ? "paired" : b.mine ? "invited · waiting for them" : "invited you · accept from the email"}`);
+    return { text: `Buddies:
+${lines.join(`
+`)}` };
+  }
+  if (args.remove === true) {
+    const r2 = await ctx.client.postFull("/proxy/buddy", { email, remove: true });
+    if (!r2)
+      return UNREACHABLE;
+    return { text: r2.json?.ok ? `Unpaired from ${email}.` : `${email} was not a buddy.` };
+  }
+  const r = await ctx.client.postFull("/proxy/buddy", { email });
+  if (!r)
+    return UNREACHABLE;
+  if (r.status !== 200) {
+    const reason = str2(r.json?.reason);
+    const why = reason === "teammate" ? `${email} is already in your org — hand off to them directly.` : reason === "self" ? "That is your own address." : reason === "bad_email" ? "That does not look like an email." : errorMessage(r.json) ?? `HTTP ${r.status}`;
+    return { text: `Not paired. ${why}`, isError: true };
+  }
+  return {
+    text: r.json?.status === "active" ? `Already paired with ${email}.` : `Invite sent to ${email}. When they click Accept, hand off with \`handoff {to: "${email}"}\` — it shows in their Waiting for you and runs on their seat.`
+  };
+}
+async function callTool(name, args, ctx) {
+  switch (name) {
+    case "usage":
+      return usageTool(ctx);
+    case "estimate":
+      return estimateTool(ctx, args);
+    case "overnight":
+      return overnightTool(ctx, args);
+    case "jobs":
+      return jobsTool(ctx);
+    case "handoffs":
+      return handoffsTool(ctx);
+    case "handoff":
+      return handoffTool(ctx, args);
+    case "pickup":
+      return pickupTool(ctx, args);
+    case "defer":
+      return deferTool(ctx, args);
+    case "actual":
+      return actualTool(ctx, args);
+    case "buddy":
+      return buddyTool(ctx, args);
+    case "withdraw":
+      return withdrawTool(ctx, args);
+    default:
+      return { text: `Unknown tool: ${name}`, isError: true };
+  }
+}
+var response = (id, result) => JSON.stringify({ jsonrpc: "2.0", id, result });
+var errorResponse = (id, code, message) => JSON.stringify({ jsonrpc: "2.0", id, error: { code, message } });
+async function handleLine(line, ctx) {
+  const trimmed = line.trim();
+  if (trimmed.length === 0)
+    return null;
+  let msg;
+  try {
+    msg = JSON.parse(trimmed);
+  } catch {
+    return errorResponse(null, -32700, "parse error");
+  }
+  if (!isObject7(msg))
+    return errorResponse(null, -32600, "invalid request");
+  const id = typeof msg.id === "string" || typeof msg.id === "number" ? msg.id : null;
+  const method = str2(msg.method);
+  const isNotification = msg.id === undefined;
+  if (!method)
+    return isNotification ? null : errorResponse(id, -32600, "invalid request");
+  if (method.startsWith("notifications/"))
+    return null;
+  const params = isObject7(msg.params) ? msg.params : {};
+  switch (method) {
+    case "initialize": {
+      const requested = str2(params.protocolVersion);
+      return response(id, {
+        protocolVersion: requested ?? PROTOCOL_VERSION,
+        capabilities: { tools: {} },
+        serverInfo: SERVER_INFO
+      });
+    }
+    case "ping":
+      return response(id, {});
+    case "tools/list":
+      return response(id, { tools: TOOLS });
+    case "tools/call": {
+      const name = str2(params.name) ?? "";
+      const args = isObject7(params.arguments) ? params.arguments : {};
+      const r = await callTool(name, args, ctx);
+      return response(id, {
+        content: [{ type: "text", text: r.text }],
+        ...r.isError ? { isError: true } : {}
+      });
+    }
+    default:
+      return isNotification ? null : errorResponse(id, -32601, `method not found: ${method}`);
+  }
+}
+
+// src/mcp.ts
+init_meter();
+async function usageTool2(deps) {
+  if (!meterSource(deps.home))
+    return { text: "SLEDS is not set up on this machine. Run `sleds init` first.", isError: true };
+  const now = (deps.now ?? Date.now)();
+  const m = await loadMeter({
+    home: deps.home,
+    now,
+    fetchFn: deps.fetchFn,
+    timeoutMs: deps.timeoutMs
+  });
+  const frag = formatSeatFragment(readSeatState(deps.home).window ?? null);
+  if (!m) {
+    return {
+      text: frag ? `sleds offline (proxy did not answer) · ${frag}` : "sleds offline (proxy did not answer).",
+      isError: true
+    };
+  }
+  const lines = formatMeter(m, now);
+  if (frag)
+    lines.push(`${"Limits:".padEnd(12)}${frag.replace(/^seat /, "")}`);
   return { text: lines.join(`
 `) };
 }
-function handoffLines(handoffs, now) {
-  if (handoffs.length === 0)
-    return [];
-  const out = ["", `Hand-offs waiting (${handoffs.length}):`];
-  for (const h of handoffs) {
-    const forMe = h.forMe === true;
-    const to = str2(h.to);
-    const who = forMe ? to ? "for you" : "parked for anyone" : `for ${to ?? "anyone"}`;
-    const created = num4(h.createdAt);
-    const age = created !== undefined ? `${shortDuration(Math.max(0, now - created))} ago` : "";
-    const note = str2(h.note);
-    const parts = [`from ${str2(h.from) ?? "?"}`, who, str2(h.wallKind) ?? "", age].filter(Boolean);
-    if (h.hasSnapshot === false)
-      parts.push("note only");
-    out.push(`${str2(h.handoffId) ?? "?"}  ${parts.join(" · ")}${note ? `  «${note.length > 60 ? `${note.slice(0, 57)}…` : note}»` : ""}`);
-  }
-  out.push("Take one in Claude Code with /sled pickup <id>.");
-  return out;
+function contextFor(deps) {
+  const src = meterSource(deps.home);
+  const client = src ? fetchClient({ ...src, fetchFn: deps.fetchFn, timeoutMs: deps.timeoutMs }) : null;
+  return { client, now: deps.now, usage: () => usageTool2(deps) };
 }
-async function handoffsTool(ctx) {
-  if (!ctx.client)
-    return NOT_SET_UP;
-  const r = await ctx.client.get("/proxy/jobs");
-  if (!r)
-    return UNREACHABLE;
-  const handoffs = Array.isArray(r.handoffs) ? r.handoffs.filter(isObject7) : [];
-  if (handoffs.length === 0)
-    return { text: "No open hand-offs on your team. Park one with the handoff tool." };
-  const now = (ctx.now ?? Date.now)();
-  const packets = handoffs.map((h) => str2(h.packet)).filter((p) => Boolean(p)).join(`
+var callTool2 = (name, args, deps) => callTool(name, args, contextFor(deps));
+var handleLine2 = (line, deps) => handleLine(line, contextFor(deps));
+
+// src/commands/handoffs.ts
+var handoffsCmd = async (o) => {
+  const r = await callTool2("handoffs", {}, { home: o.home });
+  (r.isError ? o.error ?? console.error : o.log ?? console.log)(r.text);
+  return r.isError ? 1 : 0;
+};
+var pickupCmd = async (o) => {
+  const id = o.argv[0];
+  if (!id) {
+    (o.error ?? console.error)("usage: sleds pickup <handoffId>   (ids from `sleds handoffs`)");
+    return 2;
+  }
+  const r = await callTool2("pickup", { handoffId: id }, { home: o.home });
+  (r.isError ? o.error ?? console.error : o.log ?? console.log)(r.text);
+  return r.isError ? 1 : 0;
+};
+var withdrawCmd = async (o) => {
+  const id = o.argv[0];
+  if (!id) {
+    (o.error ?? console.error)("usage: sleds withdraw <handoffId>   (one you parked)");
+    return 2;
+  }
+  const r = await callTool2("withdraw", { handoffId: id }, { home: o.home });
+  (r.isError ? o.error ?? console.error : o.log ?? console.log)(r.text);
+  return r.isError ? 1 : 0;
+};
+
+// src/commands/hooks.ts
+init_settings();
+var hooks = (o) => {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  if (!hasClaudeCode(o.home)) {
+    error(`Claude Code not found (${claudeDir(o.home)} does not exist). Install it, then re-run.`);
+    return 1;
+  }
+  const settings = readSettings(o.home);
+  const had = hasSeatHook(settings);
+  const hadSpec = hasSpecHook(settings);
+  const withSeat = applySeatHook(settings, o.seatEventCommand ?? sledsCommand("seat-event", o.home, o.env));
+  const withSpec = applySpecHook(withSeat, o.specEventCommand ?? sledsCommand("spec-event", o.home, o.env));
+  const hadLine = o.refreshStatusLine !== false && isSledsStatusLine(withSpec[STATUS_LINE_KEY]);
+  writeSettings(o.home, hadLine ? applyStatusLine(withSpec, sledsCommand("statusline", o.home, o.env)).settings : withSpec);
+  log(`${had ? "refreshed" : "set"} hooks.Notification (${SEAT_EVENT_MATCHER}) in ${settingsPath(o.home)}`);
+  if (hadLine)
+    log(`refreshed statusLine in ${settingsPath(o.home)}`);
+  log(`${hadSpec ? "refreshed" : "set"} hooks.PostToolUse (${SPEC_EVENT_MATCHER} → estimate spec files) in ${settingsPath(o.home)}`);
+  return 0;
+};
+
+// src/commands/init.ts
+init_config();
+init_settings();
+import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync7 } from "node:fs";
+import { createInterface } from "node:readline";
 
+// src/skill.ts
+var SKILL_MD = `---
+name: sled
+description: Hand work to SLEDS — continue past a rate limit or credit wall on the org's key, hold until reset, or run overnight at half price. Use when the user says /sled, hits a usage limit, mentions their window reset, asks what ran overnight, or asks to defer or schedule agent work.
 ---
 
-`);
-  return {
-    text: [handoffLines(handoffs, now).slice(1).join(`
-`), packets ? `
-${packets}` : ""].join(`
-`)
-  };
-}
-async function handoffTool(ctx, args) {
-  if (!ctx.client)
-    return NOT_SET_UP;
-  const task = str2(args.task)?.trim();
-  if (!task)
-    return { text: "Nothing to hand off. Pass task: what the picker should do.", isError: true };
-  const to = str2(args.to)?.trim();
-  const r = await ctx.client.postFull("/proxy/handoff/park", {
-    task,
-    to: to || undefined,
-    note: str2(args.note)?.trim() || undefined
+# SLEDS
+
+Nine to five is 40 of 168 hours. SLEDS puts the other 128 to work: it carries a session past a wall, and it runs whole tasks overnight with the Musher, a night-shift orchestrator that answers the questions an agent would otherwise stop on. Nothing changes until a wall or a \`/sled\`.
+
+## Hit a limit on your seat
+
+A Team or Max seat caps on Anthropic's side ("You've hit your limit…"). SLEDS is what you switch to. When the user reports a limit, a cap, or that Claude stopped for the day, tell them exactly this:
+
+\`\`\`
+sleds on --until-reset +5h
+\`\`\`
+
+then restart \`claude\`. Claude Code runs on the platform key through the proxy; the seat is untouched. \`--until-reset\` takes \`+5h\`, \`+90m\`, or an ISO time; \`--reason "<text>"\` notes why. The switch reverts itself at the deadline where a scheduler exists.
+
+## At the wall
+
+When the proxy is active it answers a walled request with its options. The user picks one by number:
+
+\`\`\`
+/sled 1    continue now on the platform key
+/sled 2    hold; resume when the window resets
+/sled 3    run overnight at half price
+/sled 4    switch to a cheaper model for the rest of the session (offered when one saves ≥15%)
+/sled 5    hand off to an idle coworker, or park for the team (offered on a team of two or more)
+/sled 6    defer to reset: the job runs itself when the seat resets — same model, done in minutes, full price (offered when the wall has a reset and the org has a key)
+\`\`\`
+
+No key (Team plan, seat-first)? The musher still runs: \`sleds defer\` in a terminal schedules this Mac to resume the current session itself at the reset — \`claude --resume\` on the seat's own quota, the model pinned. \`sleds musher --status\` lists what is waiting; \`sleds run <jobId>\` runs one now; the Mac must be awake at the reset (\`sleds doctor\` checks). When the user says "defer this" or "pick it up at the reset" and the org has no key, tell them to run \`sleds defer\`.
+
+A hand-off carries a brief (the packet): what, note, cost so far, how to pick it up. The \`handoffs\` MCP tool and the dashboard's Jobs page show it; read it before taking one.
+
+## Window reset
+
+When the user mentions their window has reset, or the deadline shown by \`sleds status\` has passed:
+
+\`\`\`
+sleds off
+\`\`\`
+
+then restart \`claude\`. Settings go back to exactly what they were.
+
+## Check
+
+\`sleds status\` — on/off, since, reverts at, proxy health, wall mode, and the org's shape (\`Org:\` / \`Wiring:\`). An org with no platform key runs seat-first and its walls offer hold (\`/sled 2\`), \`sleds defer\` (this Mac resumes at the reset) and hand-off (\`/sled 5\`) — continue, overnight and switch need a key an admin adds on the dashboard.
+
+The status line's \`seat wk 52% · 5h 12%\` is the user's own Pro/Max window as Claude Code reports it (weekly, then 5-hour); \`window\` is the platform key's headroom through the proxy. At \`wk 100%\` the answer is \`sleds on --until-reset\` (platform key) or \`sleds defer\` (this Mac resumes at the reset, no key).
+
+## /sled — estimate the task, offer overnight
+
+Bare \`/sled\` (or \`/sled <spec>\`) means: size the current task and offer to hand it to the night shift. Do this in order.
+
+1. Read the task. The spec is the argument if given, otherwise the current conversation's open task (the todo list, the last user request).
+2. Estimate with \`/sled estimate <spec>\` — the proxy answers with the calibrated band and cap, and the estimate is recorded so its actuals feed the next one. Quote that band, never a point and never your own guess.
+3. Offer the window when any of these hold: the high end of the cost band is above the org's approval threshold, the wall-clock is over 30 minutes, or the result is not needed before end of day. The offer is one line: \`Run this overnight from 18:00? Estimated $40–120 at half price.\`
+4. On yes, write the hand-off the Musher will work from: the spec, the acceptance test, the org conventions that apply, and every decision already made in this session as \`question -> answer\` pairs. Ask one thing before queueing: the autonomy for this job.
+   - \`ask\`: every question pages on-call.
+   - \`decide_and_flag\` (default): reversible defaults are taken and listed in the morning.
+   - \`decide\`: reversible defaults are taken quietly.
+   Irreversible questions always page, whatever the autonomy. No answer in 30 minutes parks the job and the Musher moves to the next one.
+5. Queue it with \`/sled overnight <spec>\` (the hand-off from step 4 is the spec). The proxy runs the real estimator (its cap bounds the job's spend), schedules the job for the org's overnight window, and snapshots this session so the batch runner has the context. Confirm with the job id and the band from the reply — not your own guess.
+
+## /sled review — the morning queue
+
+Morning ritual. List what the night shift did, grouped:
+
+- Delivered: jobs with a PR or a result, with actual cost against the estimate.
+- Flagged: decisions the Musher took on a \`decide_and_flag\` job, each as \`question -> answer\` with the rung that answered it (spec, convention, or default). These need a human eye, not a redo.
+- Parked: questions nobody answered in 30 minutes. Each shows the option set; answering resumes the job.
+
+Read the Musher log for every delivered job before summarizing, and put each decision into the PR body with its reasoning. Then offer the next step for each: merge, kick back with a note, or \`/sled resume <id>\`. On Monday the review covers the weekend.
+
+## /sled weekend — Friday sweep
+
+Friday afternoon. Sweep the open task list into a weekend batch: everything the user has queued or labeled for the weekend becomes overnight jobs with the org's default autonomy, and the Monday review covers all of it. For now, explain that the sweep queues the current task list as overnight jobs; sweeping issues by GitHub label is a later ticket. Confirm the count and the total estimate band before queueing.
+
+## /sled overnight [spec]
+
+Queue a batch job without waiting for a wall. \`/sled overnight <spec>\` runs the spec; bare \`/sled overnight\` runs the session's original ask. The reply carries the band, the cap, when it runs, and \`/sled resume <id>\` for the morning. Half price on the batch tier.
+
+## /sled jobs
+
+List the org's jobs: queued, running, delivered, parked, with the estimate band, the actual so far, and the autonomy. Parked jobs show the unanswered question. Keep it to one line per job.
+
+## /sled resume <id>
+
+Resume a parked job. Show the unanswered question and its options, take the answer, and confirm the job is back in the queue. The answer is logged with the user's name, and it becomes a prior decision the Musher can reuse on the next question like it.
+
+## /sled sync-backlog — price the backlog
+
+With the \`sleds\` MCP server available, size every open issue so the dashboard's Projects page shows the backlog in dollars and hours, not T-shirt sizes or points. SLEDS is not a tracker and never the system of record: Linear and GitHub keep the issues; SLEDS mirrors their words (cycle, labels, priority, assignee, state) and adds the price.
+
+1. Find the issues. In Cowork with a Claude Project attached: each spec doc, each phase or slice inside a spec, and each line of a backlog list (a numbered or bulleted list under a heading like Backlog, Next, To do, Roadmap). With a Linear or GitHub MCP available: the open issues of the team / repo the user names, with their cycle or milestone, labels, priority, assignee and state. Skip anything done, closed or shipped.
+2. For each issue call the \`estimate\` tool with \`spec\` = the title on the first line, then the body (quote the issue or doc, do not paraphrase), and \`source\` = \`{ kind: "linear" | "github" | "claude-project", project: <team, repo or Project name>, doc: <issue key like ENG-42 or #123, or the doc path>, item: <heading or line, only when a doc holds many>, url, cycle, labels, priority, assignee, state }\` — the tracker's values verbatim. The estimator dedupes: an unchanged issue returns its existing estimate, so re-running is safe.
+3. Report one line per issue — \`ENG-42 · Cycle 34 · high · priya · $6–18 · 60–150 min · 55%\` — then the total of what is open, and the Projects page address (\`/o/<slug>/projects\`). Never invent a number: the band is the estimator's. Do not change anything in the tracker from this command; the page's verbs (defer, prioritize, hand off) do that, and write back in the tracker's terms.
+
+To keep the backlog priced as issues change, set a Cowork scheduled task: "Every weekday at 7:00, run /sled sync-backlog for <team or Project> and post the open total." An issue whose text changed gets a fresh band; the page counts how many times each was re-sized.
+
+## Voice
+
+Plain sentences, sentence case, no emoji. Numbers with units and bands. Say what happens next, not what could.
+
+## Overnight jobs (how it runs)
+
+At a wall the proxy prints its options; \`/sled 3\` queues the session for the org's overnight window on the batch tier at half price. The next morning:
+
+- \`/sled jobs\` — this seat's jobs: id, status, route, cost, when — then the team's open hand-offs waiting for pickup (yours first).
+- \`/sled resume <id>\` — pull a delivered job's output into the session as the assistant's reply and keep going.
+
+A job that is \`parked\` or \`failed\` shows its reason in \`/sled jobs\`; the admin can see and cancel jobs on the dashboard's Jobs page.
+
+## Team hand-off
+
+\`/sled 5\` at a wall hands the snapshotted session to the most idle coworker (or parks it for anyone on the team). The team hears on Slack and the dashboard's Jobs page lists open hand-offs with the pickup command.
+
+- \`/sled pickup <id>\` — in the coworker's Claude Code session: the handed-off session resumes there on the platform key, metered to them. A task parked from Cowork (no session) starts this turn from the task text. A hand-off meant for someone else or already taken gets one line saying so.
+
+- \`/sled handoffs\` — the team's open hand-offs, yours marked \`yours · for <who>\`; \`/sled withdraw <id>\` takes back one you parked before anyone picks it up.
+
+From Cowork or any MCP client (\`sleds mcp\`): the \`handoffs\` tool lists what is waiting, \`handoff\` parks the current task for a teammate (give the task in full — the picker starts from that text), \`pickup\` takes one and returns its context to continue there, and \`withdraw\` takes back one of yours. From a plain terminal (a Codex seat, or Claude Code closed): \`sleds handoffs\`, \`sleds pickup <id>\`, \`sleds withdraw <id>\` — the same words.
+
+
+## Buddies (spec 04 §4)
+
+A buddy is one person outside your org you can hand work to and from. Pair once (MCP \`buddy {email}\` — they click Accept in the mail); then \`handoff {task, to: "<their email>"}\` lands in their Waiting for you, in whatever org their seat is, and \`pickup\` there runs it on their seat, metered to them. Only the packet crosses — never keys, usage or membership. \`buddy\` with no email lists your pairs; \`buddy {email, remove: true}\` unpairs. A teammate is never a buddy: hand off to them directly.
+`;
+
+// src/commands/hooks.ts
+init_settings();
+var hooks2 = (o) => {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  if (!hasClaudeCode(o.home)) {
+    error(`Claude Code not found (${claudeDir(o.home)} does not exist). Install it, then re-run.`);
+    return 1;
+  }
+  const settings = readSettings(o.home);
+  const had = hasSeatHook(settings);
+  const hadSpec = hasSpecHook(settings);
+  const withSeat = applySeatHook(settings, o.seatEventCommand ?? sledsCommand("seat-event", o.home, o.env));
+  const withSpec = applySpecHook(withSeat, o.specEventCommand ?? sledsCommand("spec-event", o.home, o.env));
+  const hadLine = o.refreshStatusLine !== false && isSledsStatusLine(withSpec[STATUS_LINE_KEY]);
+  writeSettings(o.home, hadLine ? applyStatusLine(withSpec, sledsCommand("statusline", o.home, o.env)).settings : withSpec);
+  log(`${had ? "refreshed" : "set"} hooks.Notification (${SEAT_EVENT_MATCHER}) in ${settingsPath(o.home)}`);
+  if (hadLine)
+    log(`refreshed statusLine in ${settingsPath(o.home)}`);
+  log(`${hadSpec ? "refreshed" : "set"} hooks.PostToolUse (${SPEC_EVENT_MATCHER} → estimate spec files) in ${settingsPath(o.home)}`);
+  return 0;
+};
+
+// src/commands/init.ts
+var DEFAULT_PROXY_URL = "http://localhost:8787";
+var promptStdin = (question) => new Promise((resolve4) => {
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  rl.question(question, (answer) => {
+    rl.close();
+    resolve4(answer.trim());
   });
-  if (!r)
-    return { text: `Nothing was parked. ${UNREACHABLE.text}`, isError: true };
-  if (r.status === 404 && to)
-    return { text: `${to} is not a member of your org. Nothing was parked.`, isError: true };
-  if (r.status !== 200)
+});
+async function signupIndividual(proxyUrl, email, credential, fetchFn = fetch) {
+  return signupRequest(proxyUrl, { email, apiKey: credential }, fetchFn);
+}
+async function signupTeam(proxyUrl, email, team, credential, fetchFn = fetch) {
+  return signupRequest(proxyUrl, { email, team, ...credential ? { apiKey: credential } : {} }, fetchFn);
+}
+async function signupRequest(proxyUrl, payload, fetchFn) {
+  try {
+    const res = await fetchFn(`${proxyUrl}/signup`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(payload),
+      signal: AbortSignal.timeout(20000)
+    });
+    const body = await res.json().catch(() => ({}));
+    if (res.ok && typeof body.token === "string")
+      return {
+        ok: true,
+        token: body.token,
+        created: body.created === true,
+        verifyPending: body.verifyPending === true
+      };
     return {
-      text: errorMessage(r.json) ?? `Nothing was parked (HTTP ${r.status}).`,
-      isError: true
+      ok: false,
+      reason: typeof body.reason === "string" ? body.reason : `http_${res.status}`,
+      status: res.status
     };
-  const id = str2(r.json?.handoffId) ?? "unknown";
-  return {
-    text: `${to ? `Handed off to ${to}` : "Parked for the team"}. They take it in Claude Code with /sled pickup ${id}, or with the pickup tool here. The team was told on Slack.`
-  };
+  } catch {
+    return { ok: false, reason: "unreachable", status: 0 };
+  }
 }
-async function pickupTool(ctx, args) {
-  if (!ctx.client)
-    return NOT_SET_UP;
-  const handoffId = str2(args.handoffId)?.trim();
-  if (!handoffId)
-    return { text: "Pass handoffId, from the handoffs tool.", isError: true };
-  const r = await ctx.client.postFull("/proxy/handoff/pickup", { handoffId });
-  if (!r)
-    return { text: `Nothing was picked up. ${UNREACHABLE.text}`, isError: true };
-  if (r.status !== 200)
+var SIGNUP_REASONS = {
+  email: "that does not look like an email address.",
+  key: "that does not look like an Anthropic API key (sk-ant-…).",
+  key_rejected: "Anthropic did not accept that API key. Check it at console.anthropic.com → API keys.",
+  rate_limited: "too many signups from this network in the last hour. Try again later.",
+  not_configured: "the proxy is not set up for self-serve signup yet.",
+  team: "the team needs a name (2–80 characters).",
+  personal_email: "a team needs a work email — that domain is a personal mailbox. Sign up as an individual instead, or use your company address.",
+  org_exists: "someone at your company already set up SLEDS. Ask them for a seat (Members → invite, Admin → Mint a seat) and run `sleds init --token …`.",
+  unavailable: "the proxy could not reach its control plane. Try again in a moment.",
+  unreachable: "could not reach the proxy."
+};
+function signupFailureText(r) {
+  return `Signup failed: ${SIGNUP_REASONS[r.reason] ?? `unexpected answer (${r.reason}, HTTP ${r.status}).`}`;
+}
+function normalizeProxyUrl(raw) {
+  let t = raw.trim();
+  if (!t)
+    return null;
+  if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(t))
+    t = `https://${t}`;
+  t = t.replace(/[./]+$/, "");
+  try {
+    const u = new URL(t);
+    if (u.protocol !== "http:" && u.protocol !== "https:")
+      return null;
+    if (!u.hostname)
+      return null;
+    u.hostname = u.hostname.replace(/\.+$/, "");
+    return `${u.protocol}//${u.host}${u.pathname === "/" ? "" : u.pathname.replace(/\/+$/, "")}`;
+  } catch {
+    return null;
+  }
+}
+async function fetchSeatInfo(url, token, fetchFn = fetch) {
+  try {
+    const res = await fetchFn(`${url}/proxy/meter`, {
+      headers: { authorization: `Bearer ${token}` },
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!res.ok)
+      return { org: null, email: null };
+    const body = await res.json();
     return {
-      text: errorMessage(r.json) ?? `Could not pick it up (HTTP ${r.status}).`,
-      isError: true
+      org: body.org?.capabilities ? body.org : null,
+      email: typeof body.seat?.email === "string" ? body.seat.email : null
     };
-  const j = r.json ?? {};
-  const from = str2(j.from) ?? "a teammate";
-  const note = str2(j.note);
-  const head = `Picked up from ${from}.${note ? ` Where it stands: ${note}` : ""}`;
-  if (j.kind === "task")
-    return { text: `${head}
-
-The task:
-${str2(j.task) ?? ""}
-
-Carry it through from here.` };
-  const first = str2(j.firstUserText) ?? "";
-  const last = str2(j.lastUserText) ?? "";
-  const n = num4(j.messageCount);
-  return {
-    text: [
-      `${head} This was a Claude Code session${n !== undefined ? ` (${n} messages)` : ""} that hit a wall; its snapshot can also be replayed in Claude Code with /sled pickup ${handoffId} — but it is now marked picked by you.`,
-      "",
-      `It started with:
-${first}`,
-      ...last && last !== first ? ["", `The last ask was:
-${last}`] : [],
-      "",
-      "Continue the work from here."
-    ].join(`
-`)
-  };
-}
-function parseAt2(v, now) {
-  const rel = /^\+(\d+)([hm])$/.exec(v.trim());
-  if (rel)
-    return now + Number.parseInt(rel[1] ?? "0", 10) * (rel[2] === "h" ? 3600000 : 60000);
-  const t = Date.parse(v);
-  return Number.isFinite(t) ? t : undefined;
+  } catch {
+    return { org: null, email: null };
+  }
 }
-async function deferTool(ctx, args) {
-  if (!ctx.client)
-    return NOT_SET_UP;
-  const now = (ctx.now ?? Date.now)();
-  const atRaw = str2(args.at)?.trim();
-  const at = atRaw ? parseAt2(atRaw, now) : undefined;
-  if (atRaw && at === undefined)
-    return { text: "`at` takes +2h, +90m or an ISO time.", isError: true };
-  const r = await ctx.client.post("/proxy/defer", {
-    ...at !== undefined ? { resetAt: at } : {},
-    ...str2(args.model) ? { model: str2(args.model) } : {},
-    host: "mcp"
-  });
-  if (!r)
-    return { text: `Nothing was deferred. ${UNREACHABLE.text}`, isError: true };
-  const jobId = str2(r.jobId) ?? "unknown";
-  const when = num4(r.scheduledAt);
-  const startsIn = when !== undefined && when > now + 60000 ? `starts in ${shortDuration(when - now)}` : "starts at the next musher tick (within 5 min)";
-  return {
-    text: `Deferred. Job ${jobId} ${startsIn}. With no org key it runs on the seat's own Mac (sleds musher must be installed there — sleds doctor checks); with a key, in the cloud. Watch it with the jobs tool or /sled jobs.${str2(args.task) ? ` Note kept: ${str2(args.task)}` : ""}`
-  };
+async function probeProxy(url, fetchFn = fetch, opts = {}) {
+  const tries = opts.tries ?? 2;
+  const timeoutMs = opts.timeoutMs ?? 1e4;
+  for (let i = 0;i < tries; i++) {
+    try {
+      const res = await fetchFn(`${url}/healthz`, { signal: AbortSignal.timeout(timeoutMs) });
+      if (res.ok)
+        return true;
+    } catch {}
+  }
+  return false;
 }
-async function callTool(name, args, ctx) {
-  switch (name) {
-    case "usage":
-      return usageTool(ctx);
-    case "estimate":
-      return estimateTool(ctx, args);
-    case "overnight":
-      return overnightTool(ctx, args);
-    case "jobs":
-      return jobsTool(ctx);
-    case "handoffs":
-      return handoffsTool(ctx);
-    case "handoff":
-      return handoffTool(ctx, args);
-    case "pickup":
-      return pickupTool(ctx, args);
-    case "defer":
-      return deferTool(ctx, args);
-    default:
-      return { text: `Unknown tool: ${name}`, isError: true };
+var resolveToken = async (o) => {
+  const env = o.env ?? process.env;
+  if (o.token)
+    return { token: o.token.trim(), source: "flag" };
+  if (env.SLEDS_TOKEN)
+    return { token: env.SLEDS_TOKEN.trim(), source: "env" };
+  const fromFile = readTokenFile(o.home);
+  if (fromFile)
+    return { token: fromFile, source: "file" };
+  if (o.nonInteractive || !o.prompt)
+    return null;
+  if (!o.signup) {
+    const typed = (await o.prompt("Paste your SLEDS seat token (sled_…), or press enter to sign up as an individual: ")).trim();
+    if (typed)
+      return { token: typed, source: "prompt" };
+  }
+  const url = normalizeProxyUrl(o.url ?? env.SLEDS_PROXY_URL ?? readConfig(o.home).proxyUrl ?? DEFAULT_PROXY_URL);
+  if (!url)
+    return null;
+  const log = o.log ?? console.log;
+  const err = o.error ?? console.error;
+  let team = o.team?.trim() || null;
+  if (team === null && !o.email) {
+    const which = (await o.prompt("Set up SLEDS for (1) just you, or (2) your team? [1/2]: ")).trim();
+    if (which === "2") {
+      team = (await o.prompt("Team name (e.g. your company): ")).trim();
+      if (!team)
+        return null;
+    }
+  }
+  const email = (o.email ?? await o.prompt(team ? "Your work email: " : "Your email: ")).trim();
+  if (!email.includes("@"))
+    return null;
+  if (team) {
+    const credential2 = (await o.prompt("Your organization's Anthropic API key, if you have one (sk-ant-…; press enter to skip — a Team plan without one still works, walls offer hold and hand-off): ")).trim();
+    const r2 = await signupTeam(url, email, team, credential2 || null, o.fetchFn);
+    if (!r2.ok) {
+      err(signupFailureText(r2));
+      return null;
+    }
+    log(`Created ${team} with you as owner (${email}).${credential2 ? " Your platform key is stored encrypted as the org's upstream key." : " No platform key yet — add one on the dashboard (Admin → Keys) to unlock continue / overnight / switch at a wall."}`);
+    if (r2.verifyPending)
+      log(`Check ${email} for a verification link and click it — inviting members unlocks then (an unverified team is removed after 48 h; your own seat works meanwhile).`);
+    log("Invite your team on the dashboard (Members → invite by email, Admin → Mint a seat); each person runs `sleds init --token …`.");
+    return { token: r2.token, source: "signup" };
+  }
+  const credential = (await o.prompt("Your Anthropic API key (sk-ant-…, stored encrypted, spends only your account): ")).trim();
+  if (!credential)
+    return null;
+  const r = await signupIndividual(url, email, credential, o.fetchFn);
+  if (!r.ok) {
+    err(signupFailureText(r));
+    return null;
+  }
+  log(r.created ? `Created your individual seat (${email}). Your key is stored encrypted and is the only key this seat spends.` : `Re-issued your individual seat (${email}); the previous token is revoked.`);
+  return { token: r.token, source: "signup" };
+};
+var init = async (o) => {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  const env = o.env ?? process.env;
+  if (!hasClaudeCode(o.home)) {
+    error(`Claude Code not found (${claudeDir(o.home)} does not exist). Install it, then re-run.`);
+    return 1;
+  }
+  const resolved = await resolveToken(o);
+  if (!resolved) {
+    error(o.signup ? "Signup did not complete. Nothing was changed." : "No seat token. Pass --token, set SLEDS_TOKEN, run without --non-interactive, or use --signup.");
+    return 2;
+  }
+  if (!isSeatToken(resolved.token)) {
+    error("Invalid seat token: expected something like sled_xxxxxxxx.");
+    return 2;
   }
-}
-var response = (id, result) => JSON.stringify({ jsonrpc: "2.0", id, result });
-var errorResponse = (id, code, message) => JSON.stringify({ jsonrpc: "2.0", id, error: { code, message } });
-async function handleLine(line, ctx) {
-  const trimmed = line.trim();
-  if (trimmed.length === 0)
-    return null;
-  let msg;
-  try {
-    msg = JSON.parse(trimmed);
-  } catch {
-    return errorResponse(null, -32700, "parse error");
+  const url = normalizeProxyUrl(o.url ?? env.SLEDS_PROXY_URL ?? readConfig(o.home).proxyUrl ?? DEFAULT_PROXY_URL);
+  if (!url) {
+    error(`Invalid proxy URL: ${JSON.stringify(o.url ?? env.SLEDS_PROXY_URL ?? "")}. Expected https://proxy.sleds.ai.`);
+    return 2;
   }
-  if (!isObject7(msg))
-    return errorResponse(null, -32600, "invalid request");
-  const id = typeof msg.id === "string" || typeof msg.id === "number" ? msg.id : null;
-  const method = str2(msg.method);
-  const isNotification = msg.id === undefined;
-  if (!method)
-    return isNotification ? null : errorResponse(id, -32600, "invalid request");
-  if (method.startsWith("notifications/"))
-    return null;
-  const params = isObject7(msg.params) ? msg.params : {};
-  switch (method) {
-    case "initialize": {
-      const requested = str2(params.protocolVersion);
-      return response(id, {
-        protocolVersion: requested ?? PROTOCOL_VERSION,
-        capabilities: { tools: {} },
-        serverInfo: SERVER_INFO
-      });
-    }
-    case "ping":
-      return response(id, {});
-    case "tools/list":
-      return response(id, { tools: TOOLS });
-    case "tools/call": {
-      const name = str2(params.name) ?? "";
-      const args = isObject7(params.arguments) ? params.arguments : {};
-      const r = await callTool(name, args, ctx);
-      return response(id, {
-        content: [{ type: "text", text: r.text }],
-        ...r.isError ? { isError: true } : {}
-      });
-    }
-    default:
-      return isNotification ? null : errorResponse(id, -32601, `method not found: ${method}`);
+  if (!o.noProbe && !await probeProxy(url, o.fetchFn)) {
+    error(`No SLEDS proxy answered at ${url}/healthz. Check the URL (or pass --no-probe to save it anyway).`);
+    return 2;
   }
-}
-
-// src/mcp.ts
-init_meter();
-async function usageTool2(deps) {
-  if (!meterSource(deps.home))
-    return { text: "SLEDS is not set up on this machine. Run `sleds init` first.", isError: true };
-  const now = (deps.now ?? Date.now)();
-  const m = await loadMeter({
-    home: deps.home,
-    now,
-    fetchFn: deps.fetchFn,
-    timeoutMs: deps.timeoutMs
+  const wrote = [];
+  const seatInfo = await fetchSeatInfo(url, resolved.token, o.fetchFn);
+  const org = seatInfo.org;
+  const wiring = o.proxyAlways ? "proxy-always" : o.seatFirst ? "seat-first" : org?.mode ?? "proxy-always";
+  if (wiring === "proxy-always" && org && !org.capabilities.upstreamKey) {
+    error(`${org.name} has no platform key for the proxy to forward with; --proxy-always would break every request. Using seat-first.`);
+  }
+  const finalWiring = wiring === "proxy-always" && org && !org.capabilities.upstreamKey ? "seat-first" : wiring;
+  if (backupSettings(o.home))
+    wrote.push(`backed up settings to ${backupPath(o.home)}`);
+  const current = readSettings(o.home);
+  const wired = finalWiring === "proxy-always" ? applyProxy(current, { url, token: resolved.token }) : removeProxy(current);
+  const statusLine = applyStatusLine(wired, o.statusLineCommand ?? sledsCommand("statusline", o.home, o.env));
+  writeSettings(o.home, statusLine.settings);
+  wrote.push(finalWiring === "proxy-always" ? `set env.ANTHROPIC_BASE_URL and env.ANTHROPIC_AUTH_TOKEN in ${settingsPath(o.home)} (everything through the proxy)` : `left Claude Code on your seat (no ANTHROPIC_BASE_URL in ${settingsPath(o.home)}); \`sleds on\` switches to the proxy at a wall`);
+  wrote.push(statusLine.prior === undefined ? `set statusLine in ${settingsPath(o.home)}` : `set statusLine in ${settingsPath(o.home)} (previous one kept for uninstall)`);
+  hooks2({
+    home: o.home,
+    env: o.env,
+    refreshStatusLine: false,
+    seatEventCommand: o.seatEventCommand,
+    specEventCommand: o.specEventCommand,
+    log: (line) => wrote.push(line),
+    error
   });
-  const frag = formatSeatFragment(readSeatState(deps.home).window ?? null);
-  if (!m) {
-    return {
-      text: frag ? `sleds offline (proxy did not answer) · ${frag}` : "sleds offline (proxy did not answer).",
-      isError: true
-    };
+  if (resolved.source !== "file") {
+    writeTokenFile(o.home, resolved.token);
+    wrote.push(`saved token to ${tokenPath(o.home)} (0600)`);
   }
-  const lines = formatMeter(m, now);
-  if (frag)
-    lines.push(`${"Limits:".padEnd(12)}${frag.replace(/^seat /, "")}`);
-  return { text: lines.join(`
-`) };
-}
-function contextFor(deps) {
-  const src = meterSource(deps.home);
-  const client = src ? fetchClient({ ...src, fetchFn: deps.fetchFn, timeoutMs: deps.timeoutMs }) : null;
-  return { client, now: deps.now, usage: () => usageTool2(deps) };
-}
-var handleLine2 = (line, deps) => handleLine(line, contextFor(deps));
+  const prior = readConfig(o.home);
+  writeConfig(o.home, {
+    ...prior,
+    token: resolved.token,
+    proxyUrl: url,
+    wiring: finalWiring,
+    agentKind: "claude-code",
+    ...seatInfo.email ? { email: seatInfo.email } : {},
+    ...org ? { org } : {},
+    ...statusLine.prior !== undefined ? { priorStatusLine: statusLine.prior } : {}
+  });
+  wrote.push(`saved token and proxy URL to ${configPath(o.home)} (0600)`);
+  mkdirSync7(skillDir(o.home), { recursive: true });
+  writeFileSync7(skillPath(o.home), SKILL_MD);
+  wrote.push(`installed skill at ${skillPath(o.home)}`);
+  if (o.installMusher) {
+    const r = o.installMusher();
+    if (r)
+      wrote.push(r);
+  }
+  const orgLine = org ? `${org.name} · ${org.plan}${org.capabilities.upstreamKey ? ` · ${org.capabilities.upstreamSource === "own" ? "platform key" : "shared key"}` : " · no platform key"}` : "org unknown (proxy did not answer /proxy/meter)";
+  if (finalWiring === "proxy-always") {
+    log(`Claude Code now runs through SLEDS on the platform key.  (${orgLine})`);
+    log("");
+    for (const w of wrote)
+      log(`  ${w}`);
+    log("");
+    log(`Every request goes to ${url} and is metered to this seat. Run \`sleds status\` to check.`);
+    log("The status line shows your meter: spend today, seat limits, window, allowance, queued jobs.");
+    log("Prefer your seat first? `sleds init --seat-first` leaves Claude Code on it and switches only at a wall.");
+  } else {
+    log(`SLEDS is watching your seat. Nothing changes until a wall.  (${orgLine})`);
+    log("");
+    for (const w of wrote)
+      log(`  ${w}`);
+    log("");
+    log("Claude Code keeps running on your seat; the status line reports its quota to SLEDS on every turn.");
+    if (org && !org.capabilities.upstreamKey) {
+      log("This org has no platform key, so at a wall the choices are hold until reset, `sleds defer` (this Mac resumes the session itself at the reset), or hand off to a teammate. An admin can add a key on the dashboard to unlock continue / overnight / switch.");
+    } else {
+      log("At a wall: `sleds on --until-reset +5h` (or /sled 1) switches to the platform key through the proxy until the reset; `sleds off` puts you back.");
+    }
+  }
+  return 0;
+};
 
 // src/commands/mcp.ts
 var mcp = async (o) => {
@@ -2814,21 +3155,21 @@ var meter = async (o) => {
 // src/commands/musher.ts
 init_config();
 init_meter();
-import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync8, mkdirSync as mkdirSync7, readFileSync as readFileSync7, rmSync as rmSync2, writeFileSync as writeFileSync7 } from "node:fs";
+import { spawnSync as spawnSync3 } from "node:child_process";
+import { existsSync as existsSync9, mkdirSync as mkdirSync8, readFileSync as readFileSync8, rmSync as rmSync2, writeFileSync as writeFileSync8 } from "node:fs";
 import { hostname as hostname2 } from "node:os";
-import { dirname as dirname3 } from "node:path";
+import { dirname as dirname4 } from "node:path";
 var defaultWhich3 = (cmd) => {
   const path = process.env.PATH ?? "";
   for (const dir of path.split(":").filter(Boolean)) {
     const p = `${dir}/${cmd}`;
-    if (existsSync8(p))
+    if (existsSync9(p))
       return p;
   }
   return null;
 };
 var findClaude2 = (home, configured, which) => {
-  if (configured && existsSync8(configured))
+  if (configured && existsSync9(configured))
     return configured;
   const found = which("claude");
   if (found)
@@ -2839,7 +3180,7 @@ var findClaude2 = (home, configured, which) => {
     "/usr/local/bin/claude",
     `${home}/.npm-global/bin/claude`
   ])
-    if (existsSync8(p))
+    if (existsSync9(p))
       return p;
   return null;
 };
@@ -2855,8 +3196,8 @@ var musherInstall = (o) => {
   const plist = musherPlistPath(o.home, env);
   const label = musherLabel(env);
   const dir = configDir(o.home, env);
-  mkdirSync7(dirname3(plist), { recursive: true });
-  mkdirSync7(dir, { recursive: true, mode: 448 });
+  mkdirSync8(dirname4(plist), { recursive: true });
+  mkdirSync8(dir, { recursive: true, mode: 448 });
   const execPath = o.sledsArgv[0] ?? process.execPath;
   const agentEnv = {
     PATH: musherPath(o.home, execPath, env.PATH ?? ""),
@@ -2865,9 +3206,9 @@ var musherInstall = (o) => {
     ...env.CLAUDE_CONFIG_DIR ? { CLAUDE_CONFIG_DIR: env.CLAUDE_CONFIG_DIR } : {}
   };
   const exec = o.exec ?? defaultExecSync;
-  if (existsSync8(plist))
+  if (existsSync9(plist))
     exec("launchctl", ["unload", plist]);
-  writeFileSync7(plist, buildMusherPlist({ sledsArgv: o.sledsArgv, env: agentEnv, logPath: musherLogPath(dir), label }));
+  writeFileSync8(plist, buildMusherPlist({ sledsArgv: o.sledsArgv, env: agentEnv, logPath: musherLogPath(dir), label }));
   const r = exec("launchctl", ["load", plist]);
   if (!r.ok) {
     error(`launchctl load failed: ${r.stderr.trim() || "unknown"}`);
@@ -2886,7 +3227,7 @@ var musherUninstall = (o) => {
   const env = o.env ?? process.env;
   const plist = musherPlistPath(o.home, env);
   const exec = o.exec ?? defaultExecSync;
-  if (existsSync8(plist)) {
+  if (existsSync9(plist)) {
     exec("launchctl", ["unload", plist]);
     rmSync2(plist, { force: true });
     log(`musher removed: ${musherLabel(env)}`);
@@ -2921,7 +3262,7 @@ var musherStatus = async (o) => {
   const env = o.env ?? process.env;
   const plist = musherPlistPath(o.home, env);
   const cfg = readConfig(o.home);
-  log(existsSync8(plist) ? `agent     ${musherLabel(env)} installed (${plist})` : "agent     not installed — sleds musher --install");
+  log(existsSync9(plist) ? `agent     ${musherLabel(env)} installed (${plist})` : "agent     not installed — sleds musher --install");
   const claude = findClaude2(o.home, cfg.musher?.claudePath, o.which ?? defaultWhich3);
   log(`claude    ${claude ?? "not found — sleds musher --claude /path/to/claude"}`);
   log(`mode      ${cfg.musher?.permissionMode ?? DEFAULT_PERMISSION_MODE} · timeout ${cfg.musher?.timeoutMinutes ?? DEFAULT_TIMEOUT_MINUTES} min`);
@@ -2994,7 +3335,7 @@ var musherConfigure = (o, flags) => {
   return 0;
 };
 var defaultExecSync = (cmd, args) => {
-  const r = spawnSync2(cmd, [...args], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
+  const r = spawnSync3(cmd, [...args], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
   if (r.error)
     return { ok: false, stderr: r.error.message };
   return { ok: r.status === 0, stderr: r.stderr ?? "" };
@@ -3033,10 +3374,10 @@ var musher = async (o) => {
 init_config();
 
 // src/schedule.ts
-import { existsSync as existsSync9, mkdirSync as mkdirSync8, rmSync as rmSync3, writeFileSync as writeFileSync8 } from "node:fs";
-import { join as join7 } from "node:path";
+import { existsSync as existsSync10, mkdirSync as mkdirSync9, rmSync as rmSync3, writeFileSync as writeFileSync9 } from "node:fs";
+import { join as join8 } from "node:path";
 var REVERT_LABEL = "ai.sleds.revert";
-var plistPath = (home) => join7(home, "Library", "LaunchAgents", `${REVERT_LABEL}.plist`);
+var plistPath = (home) => join8(home, "Library", "LaunchAgents", `${REVERT_LABEL}.plist`);
 var xmlEscape2 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 var buildLaunchdPlist = (sledsArgv, deadline) => {
   const args = [...sledsArgv, "off"].map((a) => `    <string>${xmlEscape2(a)}</string>`).join(`
@@ -3075,9 +3416,9 @@ var scheduleRevert = (d, deadlineMs) => {
   if (d.platform === "darwin") {
     const p = plistPath(d.home);
     try {
-      mkdirSync8(join7(d.home, "Library", "LaunchAgents"), { recursive: true });
+      mkdirSync9(join8(d.home, "Library", "LaunchAgents"), { recursive: true });
       d.exec("launchctl", ["unload", p]);
-      writeFileSync8(p, buildLaunchdPlist(d.sledsArgv, deadline));
+      writeFileSync9(p, buildLaunchdPlist(d.sledsArgv, deadline));
       const r = d.exec("launchctl", ["load", p]);
       if (r.ok)
         return { kind: "launchd", detail: `launchd agent ${REVERT_LABEL}` };
@@ -3104,7 +3445,7 @@ var scheduleRevert = (d, deadlineMs) => {
 var cancelRevert = (d, kind) => {
   if (kind === "launchd" || d.platform === "darwin") {
     const p = plistPath(d.home);
-    if (existsSync9(p)) {
+    if (existsSync10(p)) {
       d.exec("launchctl", ["unload", p]);
       rmSync3(p, { force: true });
     }
@@ -3173,7 +3514,7 @@ var on = (o) => {
     return 2;
   }
   if (cfg.org && !cfg.org.capabilities.upstreamKey) {
-    error(`${cfg.org.name} has no platform key, so there is no org key to switch to. Hold until the reset, or hand off with /sled 5. An admin can add a key on the dashboard.`);
+    error(`${cfg.org.name} has no platform key, so there is no platform key to switch to. Hold until the reset, or hand off with /sled 5. An admin can add a key on the dashboard.`);
     return 2;
   }
   const url = (o.url ?? cfg.proxyUrl ?? env.SLEDS_PROXY_URL ?? DEFAULT_PROXY_URL2).replace(/\/+$/, "");
@@ -3216,7 +3557,7 @@ var on = (o) => {
   next.reason = o.reason?.trim() || undefined;
   next.schedule = schedule;
   writeConfig(o.home, next);
-  log(`Sleds on. Claude Code now runs on the org key through ${url}. Restart claude to apply.`);
+  log(`Sleds on. Claude Code now runs on the platform key through ${url}. Restart claude to apply.`);
   if (untilResetMs !== undefined) {
     log(`Reverts at ${formatLocal(untilResetMs, o.tz)} — run \`sleds off\` earlier if you want.`);
     if (schedule === undefined || schedule === "manual") {
@@ -3346,14 +3687,14 @@ var seatEvent = async (o) => {
 
 // src/commands/seatSync.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync10, mkdirSync as mkdirSync9, readFileSync as readFileSync8, readdirSync as readdirSync2, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync10, readFileSync as readFileSync9, readdirSync as readdirSync2, writeFileSync as writeFileSync10 } from "node:fs";
 import { platform } from "node:os";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 
 // src/cookieDb.ts
 import { copyFileSync, rmSync as rmSync4 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 var QUERY = "SELECT name, hex(encrypted_value) AS ev FROM cookies WHERE host_key LIKE '%claude.ai%'";
 var isBun = () => typeof globalThis.Bun !== "undefined";
 async function queryRows(dbPath) {
@@ -3382,7 +3723,7 @@ function nodeSqlite() {
   return mod;
 }
 async function readCookieRows(dbPath) {
-  const copy = join8(tmpdir(), `sleds-cookies-${process.pid}-${Date.now()}.sqlite`);
+  const copy = join9(tmpdir(), `sleds-cookies-${process.pid}-${Date.now()}.sqlite`);
   copyFileSync(dbPath, copy);
   try {
     const rows = await queryRows(copy);
@@ -3658,7 +3999,7 @@ function findFile(root, name) {
   const stack = [root];
   while (stack.length > 0) {
     const dir = stack.pop();
-    if (!dir || !existsSync10(dir))
+    if (!dir || !existsSync11(dir))
       continue;
     let entries;
     try {
@@ -3667,7 +4008,7 @@ function findFile(root, name) {
       continue;
     }
     for (const e of entries) {
-      const p = join9(dir, e.name);
+      const p = join10(dir, e.name);
       if (e.isDirectory())
         stack.push(p);
       else if (e.name === name)
@@ -3678,8 +4019,8 @@ function findFile(root, name) {
 }
 function findCookieDb(home, source) {
   const b = BROWSERS[source.browser];
-  const root = join9(home, APP_SUPPORT, b.appDir);
-  if (!existsSync10(root))
+  const root = join10(home, APP_SUPPORT, b.appDir);
+  if (!existsSync11(root))
     throw new Error(`no ${source.browser} data at ${root} (is it installed?)`);
   if (!b.profiled) {
     const db2 = findFile(root, "Cookies");
@@ -3687,15 +4028,15 @@ function findCookieDb(home, source) {
       throw new Error(`no cookie store under ${root}`);
     return db2;
   }
-  const localStatePath = join9(root, "Local State");
-  const localState = existsSync10(localStatePath) ? readFileSync8(localStatePath, "utf8") : null;
+  const localStatePath = join10(root, "Local State");
+  const localState = existsSync11(localStatePath) ? readFileSync9(localStatePath, "utf8") : null;
   const wanted = source.profile ?? "Default";
   const { dir, ambiguous } = resolveProfileDir(localState, wanted);
   if (ambiguous)
     throw new Error(`"${wanted}" names ${ambiguous.length} ${source.browser} profiles (${ambiguous.join(", ")}) — pass the directory or the account email instead`);
   if (!dir)
     throw new Error(`no ${source.browser} profile named "${wanted}" (check chrome://version)`);
-  const db = cookieDbCandidates(join9(root, dir)).find((p) => existsSync10(p));
+  const db = cookieDbCandidates(join10(root, dir)).find((p) => existsSync11(p));
   if (!db)
     throw new Error(`profile "${dir}" has no cookie store yet (open claude.ai in it once)`);
   return db;
@@ -3738,7 +4079,7 @@ function fetchSeatUsage(jar, org, now, run2) {
 }
 function launchAgentPlist(bun, script, home, source) {
   const label = launchLabel(source);
-  const log = join9(home, ".config", "sleds", `${label.slice("ai.sleds.".length)}.log`);
+  const log = join10(home, ".config", "sleds", `${label.slice("ai.sleds.".length)}.log`);
   const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
   const args = [bun, script, "seat-sync", ...sourceArgs(source)].map((a) => `    <string>${esc(a)}</string>`).join(`
 `);
@@ -3760,7 +4101,7 @@ ${args}
 `;
 }
 function plistPath2(home, source) {
-  return join9(home, "Library", "LaunchAgents", `${launchLabel(source)}.plist`);
+  return join10(home, "Library", "LaunchAgents", `${launchLabel(source)}.plist`);
 }
 function install(home, argv, source, log) {
   const bun = argv[0] ?? process.execPath;
@@ -3769,10 +4110,10 @@ function install(home, argv, source, log) {
     log("cannot resolve the sleds script path to install the timer");
     return 1;
   }
-  const dir = join9(home, "Library", "LaunchAgents");
-  mkdirSync9(dir, { recursive: true });
+  const dir = join10(home, "Library", "LaunchAgents");
+  mkdirSync10(dir, { recursive: true });
   const path = plistPath2(home, source);
-  writeFileSync9(path, launchAgentPlist(bun, script, home, source), { mode: 384 });
+  writeFileSync10(path, launchAgentPlist(bun, script, home, source), { mode: 384 });
   try {
     execFileSync2("launchctl", ["unload", path], { stdio: "ignore" });
   } catch {}
@@ -3785,7 +4126,7 @@ function uninstall(home, source, log) {
   try {
     execFileSync2("launchctl", ["unload", "-w", path], { stdio: "ignore" });
   } catch {}
-  log(existsSync10(path) ? `seat-sync timer removed (${path} can be deleted)` : "no seat-sync timer");
+  log(existsSync11(path) ? `seat-sync timer removed (${path} can be deleted)` : "no seat-sync timer");
   return 0;
 }
 var seatSync = async (o) => {
@@ -3881,7 +4222,7 @@ async function postSeat(proxyUrl, token, body, fetchFn) {
 
 // src/commands/specEvent.ts
 init_meter();
-import { readFileSync as readFileSync9, statSync } from "node:fs";
+import { readFileSync as readFileSync10, statSync } from "node:fs";
 import { basename as basename2, isAbsolute, relative } from "node:path";
 var HOOK_STDIN_TIMEOUT_MS2 = 1000;
 var ESTIMATE_TIMEOUT_MS = 4000;
@@ -3937,7 +4278,7 @@ function readFileOrNull(path) {
   try {
     if (statSync(path).size > 2000000)
       return null;
-    return readFileSync9(path, "utf8");
+    return readFileSync10(path, "utf8");
   } catch {
     return null;
   }
@@ -3982,7 +4323,7 @@ var specEvent = async (o) => {
 // src/commands/status.ts
 init_config();
 init_settings();
-import { existsSync as existsSync11 } from "node:fs";
+import { existsSync as existsSync12 } from "node:fs";
 var checkHealth2 = async (url, fetchFn = fetch, timeoutMs = 1000) => {
   try {
     const res = await fetchFn(`${url}/healthz`, { signal: AbortSignal.timeout(timeoutMs) });
@@ -4040,9 +4381,11 @@ var formatStatus = (s) => {
     }
   }
   if (s.email)
-    lines.push(row2("Seat:", s.email));
+    lines.push(row2("Seat:", `${s.email}${s.agentKind ? ` · ${s.agentKind}` : ""}`));
+  else if (s.agentKind)
+    lines.push(row2("Agent:", s.agentKind));
   if (s.org)
-    lines.push(row2("Org:", `${s.org.name} · ${s.org.plan} · ${s.org.upstream === "none" ? "no platform key (walls: hold or hand off)" : s.org.upstream === "own" ? "org key" : "shared key"}`));
+    lines.push(row2("Org:", `${s.org.name} · ${s.org.plan} · ${s.org.upstream === "none" ? "no platform key (walls: hold or hand off)" : s.org.upstream === "own" ? "platform key" : "shared key"}`));
   if (s.wiring)
     lines.push(row2("Wiring:", s.wiring === "seat-first" ? "seat-first — Claude Code on your seat; the proxy only after `sleds on`" : "proxy-always — every request through the proxy"));
   if (s.mode === "off") {
@@ -4054,7 +4397,7 @@ var status = async (o) => {
   const log = o.log ?? console.log;
   const nowMs = (o.now ?? Date.now)();
   const cfg = readConfig(o.home);
-  const settings = existsSync11(settingsPath(o.home)) ? readSettings(o.home) : {};
+  const settings = existsSync12(settingsPath(o.home)) ? readSettings(o.home) : {};
   const inSettings = readProxy(settings);
   const proxyUrl = inSettings?.url ?? cfg.proxyUrl;
   const token = inSettings?.token ?? cfg.token;
@@ -4076,6 +4419,8 @@ var status = async (o) => {
     info.tokenMasked = maskToken(token);
   if (cfg.email)
     info.email = cfg.email;
+  if (cfg.agentKind)
+    info.agentKind = cfg.agentKind;
   if (cfg.wiring)
     info.wiring = cfg.wiring;
   if (cfg.org)
@@ -4163,19 +4508,69 @@ var rememberSeat = (o, window, session, now) => {
   return posts;
 };
 
+// src/commands/uninstall.ts
+import { spawnSync as spawnSync4 } from "node:child_process";
+import { existsSync as existsSync14, rmSync as rmSync5 } from "node:fs";
+
+// src/codex.ts
+init_config();
+import { existsSync as existsSync13, mkdirSync as mkdirSync11, readFileSync as readFileSync11, writeFileSync as writeFileSync11 } from "node:fs";
+import { dirname as dirname5, join as join11 } from "node:path";
+var PROVIDER_ID2 = "sleds";
+var codexDir2 = (home) => join11(home, ".codex");
+var codexConfigPath2 = (home) => join11(codexDir2(home), "config.toml");
+function removeCodexProvider2(toml, o = {}) {
+  const lines = toml.split(`
+`);
+  const out = [];
+  let skipping = false;
+  for (const line of lines) {
+    if (/^\s*\[/.test(line))
+      skipping = line.trim() === `[model_providers.${PROVIDER_ID2}]`;
+    if (!skipping)
+      out.push(line);
+  }
+  let text = out.join(`
+`);
+  if (!o.keepPrior) {
+    const prior = text.match(/^# sleds-prior-model-provider = "([^"]*)"\s*\n/m);
+    if (prior) {
+      text = text.replace(prior[0], "");
+      text = text.replace(/^model_provider\s*=\s*"sleds"\s*$/m, `model_provider = "${prior[1]}"`);
+    } else {
+      text = text.replace(/^model_provider\s*=\s*"sleds"\s*\n?/m, "");
+    }
+  }
+  return text.replace(/\n{3,}/g, `
+
+`);
+}
+function uninstallCodex(home) {
+  const path = codexConfigPath2(home);
+  if (!existsSync13(path))
+    return null;
+  const prior = readFileSync11(path, "utf8");
+  const next = removeCodexProvider2(prior);
+  if (next === prior)
+    return null;
+  writeFileSync11(path, next, { mode: 384 });
+  return `removed the "${PROVIDER_ID2}" provider from ${path}`;
+}
+
 // src/commands/uninstall.ts
 init_config();
 init_meter();
-import { spawnSync as spawnSync3 } from "node:child_process";
-import { existsSync as existsSync12, rmSync as rmSync5 } from "node:fs";
 init_settings();
 var defaultUnload = (plist) => {
-  spawnSync3("launchctl", ["unload", plist], { stdio: "ignore" });
+  spawnSync4("launchctl", ["unload", plist], { stdio: "ignore" });
 };
 var uninstall2 = (o) => {
+  const codexLine = uninstallCodex(o.home);
+  if (codexLine)
+    (o.log ?? console.log)(`  ${codexLine}`);
   const log = o.log ?? console.log;
   const removed = [];
-  if (existsSync12(settingsPath(o.home))) {
+  if (existsSync14(settingsPath(o.home))) {
     let settings = readSettings(o.home);
     let changed = false;
     if (hasEitherKey(settings)) {
@@ -4207,18 +4602,18 @@ var uninstall2 = (o) => {
       writeSettings(o.home, settings);
   }
   for (const file of [meterCachePath(o.home), seatStatePath(o.home)]) {
-    if (existsSync12(file)) {
+    if (existsSync14(file)) {
       rmSync5(file, { force: true });
       removed.push(file);
     }
   }
   const skill = skillDir(o.home);
-  if (existsSync12(skill)) {
+  if (existsSync14(skill)) {
     rmSync5(skill, { recursive: true, force: true });
     removed.push(skill);
   }
   const plist = musherPlistPath(o.home);
-  if (existsSync12(plist)) {
+  if (existsSync14(plist)) {
     (o.unloadAgent ?? defaultUnload)(plist);
     rmSync5(plist, { force: true });
     removed.push(`launchd agent ${musherLabel()}`);
@@ -4288,25 +4683,141 @@ var verify = async (o) => {
   return ok ? 0 : 1;
 };
 
+// src/config.ts
+init_settings();
+import { chmodSync as chmodSync2, existsSync as existsSync15, mkdirSync as mkdirSync12, readFileSync as readFileSync12, renameSync as renameSync5, writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join12, resolve as resolve4 } from "node:path";
+var configDir2 = (home, env = process.env) => {
+  const o = env.SLEDS_HOME?.trim();
+  return o ? resolve4(home, o) : join12(home, ".config", "sleds");
+};
+var configPath2 = (home) => join12(configDir2(home), "config.json");
+var isObject10 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var optString2 = (v) => typeof v === "string" ? v : undefined;
+var parsePriorEnv2 = (v) => {
+  if (!isObject10(v))
+    return;
+  const out = {};
+  const url = optString2(v[BASE_URL_KEY]);
+  const token = optString2(v[AUTH_TOKEN_KEY]);
+  if (url !== undefined)
+    out[BASE_URL_KEY] = url;
+  if (token !== undefined)
+    out[AUTH_TOKEN_KEY] = token;
+  if (typeof v.hadEnv === "boolean")
+    out.hadEnv = v.hadEnv;
+  return out;
+};
+var parseSchedule2 = (v) => v === "launchd" || v === "systemd" || v === "manual" ? v : undefined;
+var parseConfig2 = (raw) => {
+  if (!isObject10(raw))
+    return {};
+  const cfg = {};
+  const token = optString2(raw.token);
+  const proxyUrl = optString2(raw.proxyUrl);
+  const email = optString2(raw.email);
+  const since = optString2(raw.since);
+  const untilReset = optString2(raw.untilReset);
+  const reason = optString2(raw.reason);
+  const priorEnv = parsePriorEnv2(raw.priorEnv);
+  const schedule = parseSchedule2(raw.schedule);
+  if (token !== undefined)
+    cfg.token = token;
+  if (proxyUrl !== undefined)
+    cfg.proxyUrl = proxyUrl;
+  if (email !== undefined)
+    cfg.email = email;
+  if (raw.mode === "on" || raw.mode === "off")
+    cfg.mode = raw.mode;
+  if (since !== undefined)
+    cfg.since = since;
+  if (untilReset !== undefined)
+    cfg.untilReset = untilReset;
+  if (reason !== undefined)
+    cfg.reason = reason;
+  if (priorEnv !== undefined)
+    cfg.priorEnv = priorEnv;
+  if (schedule !== undefined)
+    cfg.schedule = schedule;
+  if (raw.priorStatusLine !== undefined)
+    cfg.priorStatusLine = raw.priorStatusLine;
+  if (raw.wiring === "seat-first" || raw.wiring === "proxy-always")
+    cfg.wiring = raw.wiring;
+  if (raw.agentKind === "claude-code" || raw.agentKind === "codex")
+    cfg.agentKind = raw.agentKind;
+  const org = parseOrgInfo2(raw.org);
+  if (org)
+    cfg.org = org;
+  const musher2 = parseMusher2(raw.musher);
+  if (musher2)
+    cfg.musher = musher2;
+  return cfg;
+};
+var parseMusher2 = (raw) => {
+  if (!isObject10(raw))
+    return;
+  const out = {};
+  const pm = optString2(raw.permissionMode);
+  const cp = optString2(raw.claudePath);
+  if (pm)
+    out.permissionMode = pm;
+  if (cp)
+    out.claudePath = cp;
+  if (typeof raw.timeoutMinutes === "number" && raw.timeoutMinutes > 0)
+    out.timeoutMinutes = raw.timeoutMinutes;
+  if (raw.agent === "launchd" || raw.agent === "none")
+    out.agent = raw.agent;
+  return out;
+};
+var parseOrgInfo2 = (raw) => {
+  if (!isObject10(raw) || !isObject10(raw.capabilities))
+    return;
+  const name = optString2(raw.name);
+  const slug2 = optString2(raw.slug);
+  const plan = raw.plan;
+  const c = raw.capabilities;
+  const src = c.upstreamSource;
+  if (name === undefined || slug2 === undefined || plan !== "team" && plan !== "enterprise" && plan !== "api" && plan !== "individual" || src !== "own" && src !== "shared" && src !== "none")
+    return;
+  return {
+    name,
+    slug: slug2,
+    plan,
+    capabilities: {
+      upstreamKey: c.upstreamKey === true,
+      adminKey: c.adminKey === true,
+      seats: c.seats !== false,
+      upstreamSource: src
+    },
+    mode: raw.mode === "proxy-always" ? "proxy-always" : "seat-first"
+  };
+};
+var readConfig2 = (home) => {
+  const p = configPath2(home);
+  if (!existsSync15(p))
+    return {};
+  return parseConfig2(JSON.parse(readFileSync12(p, "utf8")));
+};
+
 // src/schedule.ts
-import { spawnSync as spawnSync4 } from "node:child_process";
+import { spawnSync as spawnSync5 } from "node:child_process";
 var defaultExec = (cmd, args) => {
-  const r = spawnSync4(cmd, [...args], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
+  const r = spawnSync5(cmd, [...args], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
   if (r.error)
     return { ok: false, stderr: r.error.message };
   return { ok: r.status === 0, stderr: r.stderr ?? "" };
 };
 
 // src/settings.ts
-import { dirname as dirname4, join as join10, resolve as resolve4 } from "node:path";
+import { dirname as dirname6, join as join13, resolve as resolve5 } from "node:path";
 var withSeatEnv2 = (command, home, env = process.env) => {
   const parts = [];
   const sh = env.SLEDS_HOME?.trim();
   const cc = env.CLAUDE_CONFIG_DIR?.trim();
   if (sh)
-    parts.push(`SLEDS_HOME=${shellWord2(resolve4(home, sh))}`);
+    parts.push(`SLEDS_HOME=${shellWord2(resolve5(home, sh))}`);
   if (cc)
-    parts.push(`CLAUDE_CONFIG_DIR=${shellWord2(resolve4(home, cc))}`);
+    parts.push(`CLAUDE_CONFIG_DIR=${shellWord2(resolve5(home, cc))}`);
   parts.push(command);
   return parts.join(" ");
 };
@@ -4321,14 +4832,16 @@ commands:
               --url <proxy-url>      proxy base URL (else SLEDS_PROXY_URL, default ${DEFAULT_PROXY_URL})
               --no-probe             skip the /healthz check of the proxy URL
               --seat-first           keep Claude Code on your seat; the proxy only at a wall (default for seat plans)
-              --proxy-always         every request through the proxy on the org key (default for API-plan orgs)
+              --proxy-always         every request through the proxy on the platform key (default for API-plan orgs)
               --non-interactive      never prompt; exit 2 if no token is available
+              --agent codex          Codex CLI instead of Claude Code: writes ~/.codex/config.toml
+                                     (provider "sleds" \u2192 the proxy, key from $SLEDS_TOKEN); no hooks/status line
               --signup               no org? create one: (1) just you \u2014 your email + your own Anthropic
                                      API key (validated, stored encrypted, the only key it spends), or
                                      (2) your team \u2014 work email + team name, platform key optional
               --team "<name>"        with --signup: create the team org (you become its owner)
               --email <you@work.com> with --signup: skip the email prompt
-  on          Hit a limit on your seat? Switch Claude Code to the org key through the proxy.
+  on          Hit a limit on your seat? Switch Claude Code to the platform key through the proxy.
               --until-reset <when>   revert at this time: +5h, +90m, or an ISO timestamp
               --reason "<text>"      note shown by \`sleds status\`
               --no-schedule          record the deadline but do not install a launchd/systemd revert
@@ -4339,6 +4852,9 @@ commands:
   musher      The agent that runs deferred jobs here: --install / --uninstall / --status,
               --claude <path>, --mode <permission-mode> (default acceptEdits), --timeout <min>.
   run <jobId> Run one deferred job on this Mac now (the manual musher).
+  codex [...] Run Codex CLI through this seat (sets SLEDS_TOKEN + OPENAI_BASE_URL for the run).
+  handoffs    The team's open hand-offs (yours marked); pickup <id> takes one here; withdraw <id>
+              takes back one you parked.
   verify <jobId | SLEDS-Attest line>   Check a finished job's attestation: which model built it,
               signed by the org's key, verified locally.
   off         Switch Claude Code back to your seat. Restores whatever \`on\` replaced.
@@ -4422,7 +4938,39 @@ var main = async (argv) => {
     exec: defaultExec
   };
   switch (cmd) {
-    case "init":
+    case "handoffs":
+      return handoffsCmd({ home, argv: argv.slice(1) });
+    case "pickup":
+      return pickupCmd({ home, argv: argv.slice(1) });
+    case "withdraw":
+      return withdrawCmd({ home, argv: argv.slice(1) });
+    case "codex":
+      return runCodex(home, [...argv.slice(1)]);
+    case "init": {
+      if (stringFlag(flags, "agent") === "codex") {
+        const token = stringFlag(flags, "token") ?? process.env.SLEDS_TOKEN;
+        const url = stringFlag(flags, "url") ?? process.env.SLEDS_PROXY_URL ?? readConfig2(home).proxyUrl;
+        if (!token || !token.startsWith("sled_")) {
+          console.error("sleds init --agent codex needs --token <sled_\u2026> (from Settings \u203A Your seat & tools).");
+          return 2;
+        }
+        if (!url) {
+          console.error("sleds init --agent codex needs --url https://proxy.sleds.ai");
+          return 2;
+        }
+        const proxyUrl = url.replace(/\/+$/, "");
+        const info = await fetchSeatInfo(proxyUrl, token);
+        const wrote = initCodex({ home, token, proxyUrl, email: info.email });
+        if (info.org)
+          console.log(`Seat ${info.email ?? "?"} \xB7 ${info.org.name} \xB7 ${info.org.plan}. Codex requests go to ${proxyUrl}/v1 and are metered to this seat.`);
+        console.log("Codex now runs through SLEDS on this seat.");
+        console.log("");
+        for (const w of wrote)
+          console.log(`  ${w}`);
+        console.log("");
+        console.log("Start it with `sleds codex` (sets SLEDS_TOKEN for the run), or export SLEDS_TOKEN yourself and run `codex`.");
+        return 0;
+      }
       return init({
         home,
         token: stringFlag(flags, "token"),
@@ -4452,6 +5000,7 @@ var main = async (argv) => {
         seatEventCommand: seatEventCommand(sledsArgv()),
         specEventCommand: specEventCommand(sledsArgv())
       });
+    }
     case "hooks":
       return hooks({
         home,
@@ -4503,7 +5052,7 @@ var main = async (argv) => {
     case "version":
     case "--version":
     case "-v":
-      console.log("sleds 0.1.16");
+      console.log("sleds 0.1.17");
       return 0;
     default:
       console.error(`unknown command: ${cmd}