@sleds/cli 0.1.48 → 0.1.50

package/dist/sleds.mjs

@@ -4246,7 +4246,7 @@ async function actualTool(ctx, args, to = { path: "/proxy/estimate/actual" }) {
   const from = str5(r.elapsedFrom);
   const unsized = r.unsized === true;
   const bits = [
-    recorded !== undefined ? `${recorded} min${from ? ` measured from the ${from}` : ""}${num3(r.saidMinutes) !== undefined && num3(r.saidMinutes) !== recorded ? ` (you said ${num3(r.saidMinutes)})` : ""}` : phases ? "phases recorded" : null,
+    recorded !== undefined ? `${recorded} min${from === "runs" ? " of engine run time" : from ? ` measured from the ${from}` : ""}${num3(r.saidMinutes) !== undefined && num3(r.saidMinutes) !== recorded ? ` (you said ${num3(r.saidMinutes)})` : ""}` : phases ? "phases recorded" : null,
     num3(args.usd) !== undefined ? usd2(num3(args.usd)) : args.usd === null ? "$ cleared" : null,
     num3(args.tokensIn) !== undefined || num3(args.tokensOut) !== undefined ? `${(num3(args.tokensIn) ?? 0) + (num3(args.tokensOut) ?? 0)} tokens` : null,
     str5(args.model),
@@ -5479,6 +5479,9 @@ var init_agent = __esm(() => {
   init_mention();
 });
 
+// ../../packages/shared/src/slack/channel.ts
+var init_channel = () => {};
+
 // ../../packages/shared/src/item/productHits.ts
 var PATH_STOP, COMMON;
 var init_productHits = __esm(() => {
@@ -6531,6 +6534,30 @@ var init_deploys = __esm(() => {
   SERVICE_RE = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,39}$/;
 });
 
+// ../../packages/shared/src/deploys/metrics.ts
+var WEEK_MS;
+var init_metrics = __esm(() => {
+  WEEK_MS = 7 * 24 * 60 * 60 * 1000;
+});
+
+// ../../packages/shared/src/deploys/period.ts
+var DAY_MS2;
+var init_period = __esm(() => {
+  DAY_MS2 = 24 * 60 * 60 * 1000;
+});
+
+// ../../packages/shared/src/deploys/stability.ts
+var init_stability = __esm(() => {
+  init_outcome();
+  init_metrics();
+});
+
+// ../../packages/shared/src/deploys/batchSize.ts
+var init_batchSize = __esm(() => {
+  init_outcome();
+  init_metrics();
+});
+
 // ../../packages/shared/src/newrelic/newrelic.ts
 var init_newrelic = () => {};
 
@@ -7921,6 +7948,7 @@ var init_src = __esm(() => {
   init_mention();
   init_agent();
   init_copy();
+  init_channel();
   init_productHits();
   init_model();
   init_parse();
@@ -7936,6 +7964,10 @@ var init_src = __esm(() => {
   init_pack2();
   init_flags();
   init_deploys();
+  init_metrics();
+  init_period();
+  init_stability();
+  init_batchSize();
   init_sentry();
   init_newrelic();
   init_musher();
@@ -8611,7 +8643,7 @@ var init_seat = __esm(() => {
 
 // src/index.ts
 import { existsSync as existsSync36, realpathSync as realpathSync3 } from "fs";
-import { homedir as homedir9, platform as platform3 } from "os";
+import { homedir as homedir10, platform as platform3 } from "os";
 import { fileURLToPath } from "url";
 
 // ../../packages/shared/src/index.ts
@@ -8640,6 +8672,7 @@ init_outcome();
 init_mention();
 init_agent();
 init_copy();
+init_channel();
 init_productHits();
 init_model();
 init_parse();
@@ -8655,6 +8688,10 @@ init_cheatSheet();
 init_pack2();
 init_flags();
 init_deploys();
+init_metrics();
+init_period();
+init_stability();
+init_batchSize();
 init_sentry();
 init_newrelic();
 init_musher();
@@ -9824,6 +9861,7 @@ var defer = async (o) => {
 init_src();
 import { execFileSync as execFileSync2 } from "node:child_process";
 var DEPLOYS_URL = "https://hooks.sleds.ai/deploys";
+var DEPLOY_WAIT_MS = 120000;
 var USAGE = "usage: sleds deploy --env <slug> [--service <name>] [--sha <sha>] [--repo <owner/name>]";
 var FLAGS = ["env", "service", "sha", "repo"];
 var set = (x) => x?.trim() ? x.trim() : undefined;
@@ -9880,7 +9918,7 @@ var defaultPost = async (url, token, body) => {
       method: "POST",
       headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
       body: JSON.stringify(body),
-      signal: AbortSignal.timeout(15000)
+      signal: AbortSignal.timeout(DEPLOY_WAIT_MS)
     });
     let json = null;
     try {
@@ -9888,7 +9926,8 @@ var defaultPost = async (url, token, body) => {
     } catch {}
     return { status: res.status, json };
   } catch (e) {
-    return { error: e instanceof Error ? e.message : String(e) };
+    const timedOut = e instanceof Error && e.name === "TimeoutError";
+    return { error: e instanceof Error ? e.message : String(e), ...timedOut ? { timedOut } : {} };
   }
 };
 function deployLine(body, json) {
@@ -9921,6 +9960,10 @@ var deployCmd = async (o) => {
   const body = resolved.body;
   const url = set(env.SLEDS_DEPLOYS_URL) ?? DEPLOYS_URL;
   const r = await (o.post ?? defaultPost)(url, token, body);
+  if ("error" in r && r.timedOut) {
+    error(`notice: the report was sent but SLEDS did not answer within ${DEPLOY_WAIT_MS / 1000}s; it is usually still recorded — see Settings › Deploys › Recent deploys`);
+    return 0;
+  }
   if ("error" in r) {
     error(`warning: SLEDS unreachable, deploy not recorded — ${r.error}`);
     return 0;
@@ -9951,8 +9994,8 @@ import {
   rmSync as rmSync13,
   writeFileSync as writeFileSync19
 } from "node:fs";
-import { tmpdir } from "node:os";
-import { delimiter as delimiter3, dirname as dirname16, join as join25, resolve as resolve9 } from "node:path";
+import { tmpdir, userInfo as userInfo2 } from "node:os";
+import { delimiter as delimiter3, dirname as dirname17, join as join26, resolve as resolve9 } from "node:path";
 
 // src/agentMcp.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
@@ -10328,8 +10371,36 @@ var runCockpit = async (cockpit, argv, opts = {}) => {
 // src/commands/doctor.ts
 init_config();
 
+// src/engine/credential.ts
+import { homedir } from "node:os";
+import { join as join11 } from "node:path";
+var API_KEY_VAR = "ANTHROPIC_API_KEY";
+var SEAT_TOKEN_VAR = "CLAUDE_CODE_OAUTH_TOKEN";
+function namesVar(text, name) {
+  return new RegExp(`^\\s*(?:export\\s+)?${name}\\s*=\\s*\\S`, "m").test(text);
+}
+function loginPath(env, home = homedir()) {
+  return join11(env.CLAUDE_CONFIG_DIR?.trim() || join11(home, ".claude"), ".credentials.json");
+}
+function detectCredential(env, o) {
+  const file = o.boxEnvText ?? "";
+  const fileWhere = o.boxEnvPath ?? "box.env";
+  const vars = [
+    [API_KEY_VAR, "key", "api_key"],
+    [SEAT_TOKEN_VAR, "seat", "seat_token"]
+  ];
+  for (const [name, kind, source] of vars) {
+    if (env[name]?.trim())
+      return { kind, source, where: "this shell" };
+    if (namesVar(file, name))
+      return { kind, source, where: fileWhere };
+  }
+  const login = loginPath(env, o.home);
+  return o.exists(login) ? { kind: "seat", source: "login", where: login } : null;
+}
+
 // src/engine/repos.ts
-import { basename as basename2, dirname as dirname9, join as join11 } from "node:path";
+import { basename as basename2, dirname as dirname9, join as join12 } from "node:path";
 function splitReposDirs(raw) {
   return (raw ?? "").split(/[:\n]/).map((d) => d.trim()).filter(Boolean);
 }
@@ -10356,13 +10427,13 @@ function resolveRepoPath(o) {
     if (name.startsWith("."))
       continue;
     for (const dir of dirs) {
-      const p = join11(dir, name);
-      if (o.exists(join11(p, ".git")))
+      const p = join12(dir, name);
+      if (o.exists(join12(p, ".git")))
         return p;
     }
   }
   const want = o.repos.join(", ");
-  const where = names.flatMap((n) => dirs.map((d) => join11(d, n))).join(" or ");
+  const where = names.flatMap((n) => dirs.map((d) => join12(d, n))).join(" or ");
   return {
     error: `No checkout of ${want} on this engine's machine: expected ${where}. Clone it there (or pass --repo).`
   };
@@ -10370,7 +10441,7 @@ function resolveRepoPath(o) {
 var isRoot = (p) => dirname9(p) === p;
 function insideCheckout(dir, exists) {
   for (let d = dir;!isRoot(d); d = dirname9(d)) {
-    if (exists(join11(d, ".git")))
+    if (exists(join12(d, ".git")))
       return true;
   }
   return false;
@@ -10400,12 +10471,12 @@ init_meter();
 
 // src/runners/cmux.ts
 import { existsSync as existsSync11, rmSync as rmSync2, writeFileSync as writeFileSync10 } from "node:fs";
-import { delimiter, join as join13 } from "node:path";
+import { delimiter, join as join14 } from "node:path";
 
 // src/runners/exec.ts
 import { spawn, spawnSync as spawnSync3 } from "node:child_process";
 import { closeSync as closeSync2, fstatSync, openSync as openSync2, readSync as readSync2 } from "node:fs";
-import { basename as basename3, dirname as dirname10, join as join12 } from "node:path";
+import { basename as basename3, dirname as dirname10, join as join13 } from "node:path";
 
 // src/runners/sandbox.ts
 var absRule = (dir) => `/${dir.replace(/\/+$/, "")}/**`;
@@ -10549,7 +10620,7 @@ var readLogTail = (path) => {
 };
 var logPathFor = (promptFile, ext, dir) => {
   const base = basename3(promptFile).replace(/\.md$/i, "");
-  return join12(dir ?? dirname10(promptFile), `${base}.${ext}`);
+  return join13(dir ?? dirname10(promptFile), `${base}.${ext}`);
 };
 var tailText = (s, bytes = 4096) => {
   if (s.length <= bytes)
@@ -10573,7 +10644,7 @@ var isRunnerKey = (key) => /^(?:[1-9]|esc)$/.test(key);
 var CMUX_APP_BIN = "/Applications/cmux.app/Contents/Resources/bin/cmux";
 var resolveCmuxBin = (exists = existsSync11, path = process.env.PATH ?? "") => {
   for (const dir of path.split(delimiter)) {
-    if (dir && exists(join13(dir, "cmux")))
+    if (dir && exists(join14(dir, "cmux")))
       return "cmux";
   }
   return exists(CMUX_APP_BIN) ? CMUX_APP_BIN : "cmux";
@@ -10934,7 +11005,7 @@ function cmuxRunner(exec, deps = {}) {
 
 // src/runners/orca.ts
 import { existsSync as existsSync12, lstatSync, readlinkSync, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join14, resolve as resolve7 } from "node:path";
+import { join as join15, resolve as resolve7 } from "node:path";
 var obj = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
 var str8 = (v) => typeof v === "string" && v.length > 0 ? v : null;
 var parseOrcaJson = (stdout) => {
@@ -10995,7 +11066,7 @@ var realFs = { lstat: lstatSync, readlink: readlinkSync, exists: existsSync12 };
 var ORCA_LINK_FIX = "reinstall Orca's shell command from Orca (it links `orca` onto your PATH)";
 function danglingOrca(path, fs) {
   for (const dir of path.split(":").filter(Boolean)) {
-    const link = join14(dir, "orca");
+    const link = join15(dir, "orca");
     try {
       if (!fs.lstat(link).isSymbolicLink())
         return null;
@@ -11142,10 +11213,10 @@ function orcaRunner(exec, deps = {}) {
 }
 
 // src/runtime.ts
-import { homedir } from "node:os";
-import { join as join15, win32 } from "node:path";
+import { homedir as homedir2 } from "node:os";
+import { join as join16, win32 } from "node:path";
 var isCompiled = (argv1 = process.argv[1]) => Boolean(argv1 && (argv1.startsWith("/$bunfs/") || argv1.startsWith("B:\\~BUN\\")));
-var sledsLink = (home = homedir(), platform = process.platform) => platform === "win32" ? win32.join(process.env.LOCALAPPDATA ?? win32.join(home, "AppData", "Local"), "sleds", "bin", "sleds.exe") : join15(home, ".sleds", "bin", "sleds");
+var sledsLink = (home = homedir2(), platform = process.platform) => platform === "win32" ? win32.join(process.env.LOCALAPPDATA ?? win32.join(home, "AppData", "Local"), "sleds", "bin", "sleds.exe") : join16(home, ".sleds", "bin", "sleds");
 
 // src/commands/doctor.ts
 init_settings();
@@ -11161,10 +11232,11 @@ import {
   readFileSync as readFileSync15,
   existsSync as realExists,
   rmSync as rmSync10,
+  statSync as statSync5,
   writeFileSync as writeFileSync16
 } from "node:fs";
-import { hostname as hostname2 } from "node:os";
-import { join as join23, resolve as resolve8 } from "node:path";
+import { hostname as hostname2, userInfo } from "node:os";
+import { dirname as dirname15, isAbsolute as isAbsolute3, join as join24, resolve as resolve8 } from "node:path";
 
 // src/engine/beat.ts
 var BEAT_EVERY_MS = 60000;
@@ -11176,10 +11248,11 @@ function beatBody(state, flags, host = {}, cap = {}) {
     name: flags.name,
     os: host.os ?? process.platform,
     runner: flags.runner,
-    version: host.version ?? "0.1.48" ?? "dev",
+    version: host.version ?? "0.1.50" ?? "dev",
     running: live.length,
     items: live.slice(0, BEAT_ITEMS).map((r) => `${r.item}/${r.node}`),
     ...cap.atOnce !== undefined ? { atOnce: cap.atOnce } : {},
+    ...host.credential ? { credential: host.credential } : {},
     ...m ? {
       machine: {
         cpuPct: m.cpuPct,
@@ -13066,9 +13139,9 @@ function providerFailure(screen) {
 // src/engine/worktree.ts
 init_src();
 import { appendFileSync, existsSync as existsSync13, mkdirSync as mkdirSync11 } from "node:fs";
-import { dirname as dirname11, isAbsolute, join as join16 } from "node:path";
+import { dirname as dirname11, isAbsolute, join as join17 } from "node:path";
 function worktreePath(repoPath, name) {
-  return join16(repoPath, ".worktrees", name);
+  return join17(repoPath, ".worktrees", name);
 }
 var fail = (what, r) => new Error(`${what} failed: ${(r.stderr || r.stdout).trim() || `exit ${r.status}`}`);
 function defaultBranch(exec, repoPath) {
@@ -13103,7 +13176,7 @@ function ensureIgnored(exec, repoPath, fs = realWorktreeFs) {
   if (common.status !== 0)
     return;
   const dir = common.stdout.trim();
-  const exclude = join16(isAbsolute(dir) ? dir : join16(repoPath, dir), "info", "exclude");
+  const exclude = join17(isAbsolute(dir) ? dir : join17(repoPath, dir), "info", "exclude");
   fs.append(exclude, `
 # sleds engine: one worktree per route node
 .worktrees/
@@ -13115,7 +13188,7 @@ function ensureWorktree(exec, repoPath, branch, path, base = "main", fs = realWo
   return path;
 }
 function makeWorktree(exec, repoPath, branch, path, base, fs, log) {
-  if (fs.exists(join16(path, ".git"))) {
+  if (fs.exists(join17(path, ".git"))) {
     fastForwardUntouched(exec, path, base, log);
     return path;
   }
@@ -13191,13 +13264,13 @@ function installArgv(command) {
   return rest.every((a) => a.startsWith("-")) ? argv : null;
 }
 function lockfileInstall(path, exists) {
-  if (exists(join16(path, "pnpm-lock.yaml")))
+  if (exists(join17(path, "pnpm-lock.yaml")))
     return ["pnpm", "install", "--frozen-lockfile"];
-  if (exists(join16(path, "bun.lock")) || exists(join16(path, "bun.lockb")))
+  if (exists(join17(path, "bun.lock")) || exists(join17(path, "bun.lockb")))
     return ["bun", "install", "--frozen-lockfile"];
-  if (exists(join16(path, "yarn.lock")))
+  if (exists(join17(path, "yarn.lock")))
     return ["yarn", "install", "--frozen-lockfile"];
-  if (exists(join16(path, "package-lock.json")))
+  if (exists(join17(path, "package-lock.json")))
     return ["npm", "ci"];
   return null;
 }
@@ -13255,7 +13328,7 @@ function claimRunOf(run, repo) {
   };
 }
 function ensureInstalled(exec, path, fs, o = {}) {
-  if (!fs.exists(join16(path, "package.json")) || fs.exists(join16(path, "node_modules")))
+  if (!fs.exists(join17(path, "package.json")) || fs.exists(join17(path, "node_modules")))
     return null;
   const argv = installArgv(o.command) ?? lockfileInstall(path, fs.exists);
   if (!argv)
@@ -13270,7 +13343,7 @@ function ensureInstalled(exec, path, fs, o = {}) {
   return { argv, ok };
 }
 function ensureDetachedWorktree(exec, repoPath, path, base = "main", fs = realWorktreeFs) {
-  if (fs.exists(join16(path, ".git")))
+  if (fs.exists(join17(path, ".git")))
     return path;
   ensureIgnored(exec, repoPath, fs);
   const f = exec("git", ["-C", repoPath, "fetch", "origin", base]);
@@ -16559,8 +16632,8 @@ init_settings();
 
 // src/update/drain.ts
 import { closeSync as closeSync4, existsSync as existsSync18, mkdirSync as mkdirSync17, openSync as openSync4, rmSync as rmSync9, statSync as statSync4, writeSync as writeSync2 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { join as join22 } from "node:path";
+import { homedir as homedir7 } from "node:os";
+import { join as join23 } from "node:path";
 
 // ../../packages/shared/src/updates/manifest.ts
 var CLI_PLATFORMS = [
@@ -16702,13 +16775,13 @@ import {
   statSync as statSync2,
   writeFileSync as writeFileSync13
 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
-import { dirname as dirname12, join as join17, win32 as win322 } from "node:path";
+import { homedir as homedir3 } from "node:os";
+import { dirname as dirname12, join as join18, win32 as win322 } from "node:path";
 var UPDATE_LOCK_STALE_MS = 10 * 60000;
-function sledsRoot(home = homedir2(), platform = process.platform) {
-  return platform === "win32" ? win322.join(process.env.LOCALAPPDATA ?? win322.join(home, "AppData", "Local"), "sleds") : join17(home, ".sleds");
+function sledsRoot(home = homedir3(), platform = process.platform) {
+  return platform === "win32" ? win322.join(process.env.LOCALAPPDATA ?? win322.join(home, "AppData", "Local"), "sleds") : join18(home, ".sleds");
 }
-var pathFor = (platform) => platform === "win32" ? win322 : { join: join17 };
+var pathFor = (platform) => platform === "win32" ? win322 : { join: join18 };
 function versionDir(home, v, platform = process.platform) {
   return pathFor(platform).join(sledsRoot(home, platform), "versions", v);
 }
@@ -16900,7 +16973,7 @@ async function fetchVersion(o) {
   const platform = o.platform ?? process.platform;
   const arch = o.arch ?? process.arch;
   const publicKey = o.publicKey ?? RELEASE_PUBLIC_KEY;
-  const running = o.running ?? "0.1.48";
+  const running = o.running ?? "0.1.50";
   if (!publicKey)
     return { ok: false, why: "no release key yet" };
   if (!VERSION_RE2.test(o.version))
@@ -16977,7 +17050,7 @@ async function fetchVersion(o) {
 
 // src/update/guard.ts
 import { existsSync as existsSync17 } from "node:fs";
-import { homedir as homedir5 } from "node:os";
+import { homedir as homedir6 } from "node:os";
 
 // src/update/migrate.ts
 import { spawn as spawn2 } from "node:child_process";
@@ -16993,20 +17066,20 @@ import {
   symlinkSync,
   writeFileSync as writeFileSync15
 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
-import { basename as basename5, delimiter as delimiter2, dirname as dirname13, isAbsolute as isAbsolute2, join as join20, relative } from "node:path";
+import { homedir as homedir4 } from "node:os";
+import { basename as basename5, delimiter as delimiter2, dirname as dirname13, isAbsolute as isAbsolute2, join as join21, relative } from "node:path";
 
 // src/commands/engineSystemd.ts
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 var BOX_ENV_UNIT_PATH = "%h/.config/sleds/box.env";
 function boxEnvPath(home) {
-  return join18(home, ".config", "sleds", "box.env");
+  return join19(home, ".config", "sleds", "box.env");
 }
 function engineUnitDir(home) {
-  return join18(home, ".config", "systemd", "user");
+  return join19(home, ".config", "systemd", "user");
 }
 function engineUnitPath(home, label) {
-  return join18(engineUnitDir(home), `${label}.service`);
+  return join19(engineUnitDir(home), `${label}.service`);
 }
 function systemdQuote(s) {
   const body = s.replace(/\\/g, "\\\\").replace(/"/g, "\\\"").replace(/\n/g, "\\n").replace(/%/g, "%%").replace(/\$/g, "$$$$");
@@ -17048,7 +17121,7 @@ function parseEngineUnit(text) {
 // src/schedule.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { existsSync as existsSync15, mkdirSync as mkdirSync14, rmSync as rmSync6, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 var REVERT_LABEL = "ai.sleds.revert";
 var defaultExec2 = (cmd, args) => {
   const r = spawnSync4(cmd, [...args], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
@@ -17056,7 +17129,7 @@ var defaultExec2 = (cmd, args) => {
     return { ok: false, stderr: r.error.message };
   return { ok: r.status === 0, stderr: r.stderr ?? "" };
 };
-var plistPath = (home) => join19(home, "Library", "LaunchAgents", `${REVERT_LABEL}.plist`);
+var plistPath = (home) => join20(home, "Library", "LaunchAgents", `${REVERT_LABEL}.plist`);
 var xmlEscape2 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 var buildLaunchdPlist = (sledsArgv, deadline) => {
   const args = [...sledsArgv, "off"].map((a) => `    <string>${xmlEscape2(a)}</string>`).join(`
@@ -17095,7 +17168,7 @@ var scheduleRevert = (d, deadlineMs) => {
   if (d.platform === "darwin") {
     const p = plistPath(d.home);
     try {
-      mkdirSync14(join19(d.home, "Library", "LaunchAgents"), { recursive: true });
+      mkdirSync14(join20(d.home, "Library", "LaunchAgents"), { recursive: true });
       d.exec("launchctl", ["unload", p]);
       writeFileSync14(p, buildLaunchdPlist(d.sledsArgv, deadline));
       const r = d.exec("launchctl", ["load", p]);
@@ -17147,8 +17220,8 @@ var HOOK_SUBS = [
   "stop-event",
   "permission-event"
 ];
-var migrateBakDir = (home) => join20(sledsRoot(home), "migrate.bak");
-var manifestPath = (home) => join20(migrateBakDir(home), "manifest.json");
+var migrateBakDir = (home) => join21(sledsRoot(home), "migrate.bak");
+var manifestPath = (home) => join21(migrateBakDir(home), "manifest.json");
 var xmlEscape3 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 var xmlUnescape = (s) => s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
 var shQuote = (s) => /^[\w./~-]+$/.test(s) ? s : `'${s.replace(/'/g, "'\\''")}'`;
@@ -17248,13 +17321,13 @@ function rewriteSettings(text, link) {
 }
 var listDir = (dir, keep) => {
   try {
-    return readdirSync2(dir).filter(keep).sort().map((n) => join20(dir, n));
+    return readdirSync2(dir).filter(keep).sort().map((n) => join21(dir, n));
   } catch {
     return [];
   }
 };
 function unitFiles(home) {
-  const agents = listDir(join20(home, "Library", "LaunchAgents"), (n) => n.startsWith("ai.sleds.") && n.endsWith(".plist")).map((path) => ({
+  const agents = listDir(join21(home, "Library", "LaunchAgents"), (n) => n.startsWith("ai.sleds.") && n.endsWith(".plist")).map((path) => ({
     path,
     ...basename5(path).startsWith("ai.sleds.revert") ? {} : { reload: "launchd" }
   }));
@@ -17266,7 +17339,7 @@ function unitClaudeDir(text) {
   return plist ? xmlUnescape(plist) : undefined;
 }
 function claudeDirs(home, env) {
-  const dirs = [join20(home, ".claude"), claudeDir(home, env)];
+  const dirs = [join21(home, ".claude"), claudeDir(home, env)];
   for (const u of unitFiles(home)) {
     try {
       const d = unitClaudeDir(readFileSync14(u.path, "utf8"));
@@ -17290,7 +17363,7 @@ function migrationPlan(home, link, env = process.env) {
       out.push({ ...u, text: next });
   }
   for (const dir of claudeDirs(home, env)) {
-    const path = join20(dir, "settings.json");
+    const path = join21(dir, "settings.json");
     let text;
     try {
       text = readFileSync14(path, "utf8");
@@ -17305,7 +17378,7 @@ function migrationPlan(home, link, env = process.env) {
 }
 var backupFor = (home, path) => {
   const rel = relative(home, path);
-  return rel.startsWith("..") || isAbsolute2(rel) ? join20(migrateBakDir(home), "abs", path) : join20(migrateBakDir(home), rel);
+  return rel.startsWith("..") || isAbsolute2(rel) ? join21(migrateBakDir(home), "abs", path) : join21(migrateBakDir(home), rel);
 };
 function writeKeepingMode(path, text) {
   let mode = 420;
@@ -17390,7 +17463,7 @@ function putBack(home, m) {
   return failed;
 }
 function restoreMigration(s, o) {
-  const home = o.home ?? homedir3();
+  const home = o.home ?? homedir4();
   const m = readManifest(home);
   const to = m?.to ?? s.pending?.to ?? "?";
   const failed = m ? putBack(home, m) : [];
@@ -17402,7 +17475,7 @@ function restoreMigration(s, o) {
   return failed.length ? `moved back to the npm install, but could not restore ${failed.join(", ")} — the copies are in ${migrateBakDir(home)}` : "moved back to the npm install";
 }
 async function migrateToBinary(o) {
-  const home = o.home ?? homedir3();
+  const home = o.home ?? homedir4();
   const log = o.log ?? console.error;
   const env = o.env ?? process.env;
   const platform = o.platform ?? process.platform;
@@ -17496,11 +17569,11 @@ import {
   rmSync as rmSync8,
   symlinkSync as symlinkSync2
 } from "node:fs";
-import { homedir as homedir4 } from "node:os";
-import { dirname as dirname14, join as join21 } from "node:path";
+import { homedir as homedir5 } from "node:os";
+import { dirname as dirname14, join as join22 } from "node:path";
 var NO_PREVIOUS = "no previous version on this machine";
-function allStateFiles(home = homedir4(), env = process.env) {
-  const roots = [...new Set([configDir(home, env), join21(home, ".config", "sleds")])];
+function allStateFiles(home = homedir5(), env = process.env) {
+  const roots = [...new Set([configDir(home, env), join22(home, ".config", "sleds")])];
   const out = [];
   const walk = (dir) => {
     let names;
@@ -17511,20 +17584,20 @@ function allStateFiles(home = homedir4(), env = process.env) {
     }
     for (const n of names.sort())
       if (n.endsWith(".json") && n !== "removed-engines.json")
-        out.push(join21(dir, n));
+        out.push(join22(dir, n));
     for (const sub of ["orgs", "seats"]) {
       let kids;
       try {
-        kids = readdirSync3(join21(dir, sub));
+        kids = readdirSync3(join22(dir, sub));
       } catch {
         continue;
       }
       for (const k of kids.sort())
-        walk(join21(dir, sub, k));
+        walk(join22(dir, sub, k));
     }
   };
   for (const r of roots)
-    walk(join21(r, "engine"));
+    walk(join22(r, "engine"));
   return out;
 }
 var backupPath2 = (file, v) => `${file}.${v}.bak`;
@@ -17620,7 +17693,7 @@ function applyConfirm(s, home, o = {}) {
     }
     for (const n of names)
       if (n.startsWith(prefix) && n.endsWith(".bak"))
-        rmSync8(join21(dir, n), { force: true });
+        rmSync8(join22(dir, n), { force: true });
   }
   const keep = new Set([s.current, s.previous, s.drain?.to].filter(Boolean));
   const versions = dirname14(versionDir(home, s.current, platform));
@@ -17710,7 +17783,7 @@ function movedAway(s, home, version, platform) {
   return at && at !== version ? at : null;
 }
 async function startGuard(o) {
-  const home = o.home ?? homedir5();
+  const home = o.home ?? homedir6();
   const platform = o.platform ?? process.platform;
   const version = o.version;
   if (!version || !guarded(home, version, platform))
@@ -17742,7 +17815,7 @@ async function startGuard(o) {
   }
 }
 function firstBeatWatchdog(o) {
-  const home = o.home ?? homedir5();
+  const home = o.home ?? homedir6();
   const platform = o.platform ?? process.platform;
   const version = o.version;
   const idle = { beat: async () => {}, stop: () => {} };
@@ -17883,7 +17956,7 @@ async function machineAnswer(client, tokens) {
 }
 async function fetchOnce(o) {
   const dir = versionDir(o.home, o.version, o.platform);
-  const lock = join22(dir, "fetch.lock");
+  const lock = join23(dir, "fetch.lock");
   mkdirSync17(dir, { recursive: true, mode: 493 });
   let fd;
   try {
@@ -17927,7 +18000,7 @@ var realPidAlive = (pid) => {
   }
 };
 function engineUpdater(o) {
-  const home = o.home ?? homedir6();
+  const home = o.home ?? homedir7();
   const platform = o.platform ?? process.platform;
   const version = o.version;
   if (!version || !VERSION_RE3.test(version))
@@ -18166,10 +18239,11 @@ var VALUE_FLAGS = [
   "hold-cpu",
   "hold-load",
   "hold-pressure",
-  "hold"
+  "hold",
+  "lent-by"
 ];
 var BOOL_FLAGS = ["once", "strict-mcp", "no-strict-mcp", "sandbox", "no-sandbox"];
-var ENGINE_USAGE = "usage: sleds engine [--name <n>] [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir[:dir…]>] [--jira <EPIC>] [--mode <permission-mode>] [--model <id>] [--decider-model <id>] [--effort <e>] [--decider-effort <e>] [--drafter-model <id>] [--drafter-effort <e>] [--branch '<template>'] [--pr-title '<template>'] [--events <file>] [--org <slug>] [--strict-mcp [--mcp-allow <a,b>] | --no-strict-mcp] [--sandbox [--sandbox-allow <a,b>] | --no-sandbox] [--hold-cpu <%>] [--hold-load <per-core>] [--hold-pressure warn|critical] [--hold on|off] [--once]";
+var ENGINE_USAGE = "usage: sleds engine [--name <n>] [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir[:dir…]>] [--jira <EPIC>] [--mode <permission-mode>] [--model <id>] [--decider-model <id>] [--effort <e>] [--decider-effort <e>] [--drafter-model <id>] [--drafter-effort <e>] [--branch '<template>'] [--pr-title '<template>'] [--events <file>] [--org <slug>] [--strict-mcp [--mcp-allow <a,b>] | --no-strict-mcp] [--sandbox [--sandbox-allow <a,b>] | --no-sandbox] [--lent-by <lender> --sandbox] [--hold-cpu <%>] [--hold-load <per-core>] [--hold-pressure warn|critical] [--hold on|off] [--once]";
 function templateProblem(flag, template, jira = false) {
   const known = flag === "branch" ? BRANCH_FIELDS : PR_TITLE_FIELDS;
   const used = templateFields(template);
@@ -18267,6 +18341,9 @@ function parseEngineArgs(argv, host) {
     return {
       error: `--sandbox-allow takes hosts like pypi.org or *.example.com — no scheme, port or path (got ${badHost})`
     };
+  const lentBy = s("lent-by")?.trim();
+  if (lentBy && !raw.sandbox)
+    return { error: LENT_NEEDS_SANDBOX };
   const opt = (k, v) => v ? { [k]: v } : {};
   return {
     flags: {
@@ -18297,6 +18374,7 @@ function parseEngineArgs(argv, host) {
       ...mcpAllow.length ? { mcpAllow } : {},
       ...raw.sandbox ? { sandbox: true } : raw["no-sandbox"] ? { sandbox: false } : {},
       ...sandboxAllow.length ? { sandboxAllow: [...new Set(sandboxAllow)] } : {},
+      ...opt("lentBy", lentBy),
       ...holdCpu !== undefined ? { holdCpu } : {},
       ...holdLoad !== undefined ? { holdLoad } : {},
       ...holdPressure ? { holdPressure } : {},
@@ -18385,7 +18463,7 @@ function flagsFromProfile(flags, given, profile, home) {
     }
   }
   if (profile.reposDir && !has("repos-dir") && !has("repo")) {
-    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join23(home, d.slice(1)) : d).join(":");
+    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join24(home, d.slice(1)) : d).join(":");
     used.push(`repos ${profile.reposDir}`);
   }
   if (profile.mcpStrict !== undefined && !has("strict-mcp") && !has("no-strict-mcp")) {
@@ -18479,7 +18557,7 @@ function engineClient(o, org) {
     return fetchClient({
       ...src,
       timeoutMs: ENGINE_TIMEOUT_MS,
-      version: "0.1.48"
+      version: "0.1.50"
     });
   const asked = org?.trim() || env.SLEDS_ORG?.trim();
   if (asked && !selectOrg(readConfig(o.home), org, env).seat)
@@ -18519,12 +18597,12 @@ function memberMcpConfigs(o, cwd) {
   });
   const claudeDir = (o.env ?? process.env).CLAUDE_CONFIG_DIR;
   return [
-    read(claudeDir ? join23(claudeDir, ".claude.json") : join23(o.home, ".claude.json")),
-    ...cwd ? [read(join23(cwd, ".mcp.json"))] : []
+    read(claudeDir ? join24(claudeDir, ".claude.json") : join24(o.home, ".claude.json")),
+    ...cwd ? [read(join24(cwd, ".mcp.json"))] : []
   ];
 }
 function engineStateDir(o, org, seat) {
-  return seatStateDir(orgStateDir(o.stateDir ?? join23(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
+  return seatStateDir(orgStateDir(o.stateDir ?? join24(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
 }
 function engineSeat(o, org) {
   try {
@@ -18554,8 +18632,8 @@ function engineDeps(o, flags, source, runner, stateName) {
   const repo = flags.repo ? resolve8(cwd, flags.repo) : undefined;
   const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve8(cwd, d));
   const { branch, prTitle } = flags;
-  const hooksDir = join23(stateDir, "hooks");
-  const permissionMark = (name) => join23(hooksDir, `${name}.permission.json`);
+  const hooksDir = join24(stateDir, "hooks");
+  const permissionMark = (name) => join24(hooksDir, `${name}.permission.json`);
   const withHook = (name, settings) => applyPermissionHook(settings, [...o.sledsArgv ?? ["sleds"], "permission-event", "--mark", permissionMark(name)].map(shq2).join(" "));
   return {
     source,
@@ -18580,9 +18658,9 @@ function engineDeps(o, flags, source, runner, stateName) {
       sandbox: true,
       writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd, allow) => {
         const gitCommonDir = gitCommonDirOf(exec, cwd);
-        const dir = join23(stateDir, "sandbox");
+        const dir = join24(stateDir, "sandbox");
         mkdirSync18(dir, { recursive: true, mode: 448 });
-        const p = join23(dir, `${name}.json`);
+        const p = join24(dir, `${name}.json`);
         const walls = engineSandboxSettings(o.home, o.env ?? process.env, gitCommonDir, [
           ...SANDBOX_DEFAULT_ALLOW,
           ...flags.sandboxAllow ?? []
@@ -18599,7 +18677,7 @@ function engineDeps(o, flags, source, runner, stateName) {
     } : {},
     writeHookSettings: (name, allow) => {
       mkdirSync18(hooksDir, { recursive: true, mode: 448 });
-      const p = join23(hooksDir, `${name}.json`);
+      const p = join24(hooksDir, `${name}.json`);
       const base = allow?.length ? { permissions: { allow: [...allow] } } : {};
       writeFileSync16(p, `${JSON.stringify(withHook(name, base), null, 2)}
 `, { mode: 384 });
@@ -18627,9 +18705,9 @@ function engineDeps(o, flags, source, runner, stateName) {
       exists
     }),
     writeMcpConfig: o.writeMcpConfig ?? ((name, runToken, worktree) => {
-      const dir = join23(stateDir, "mcp");
+      const dir = join24(stateDir, "mcp");
       mkdirSync18(dir, { recursive: true, mode: 448 });
-      const p = join23(dir, `${name}.json`);
+      const p = join24(dir, `${name}.json`);
       let others = {};
       if (flags.strictMcp && flags.mcpAllow?.length) {
         const r = mcpPassThrough(flags.mcpAllow, memberMcpConfigs(o, worktree));
@@ -18645,9 +18723,9 @@ function engineDeps(o, flags, source, runner, stateName) {
     }),
     removeMcpConfig: o.removeMcpConfig ?? ((p) => rmSync10(p, { force: true })),
     writePrompt: o.writePrompt ?? ((name, text) => {
-      const dir = join23(stateDir, "prompts");
+      const dir = join24(stateDir, "prompts");
       mkdirSync18(dir, { recursive: true, mode: 448 });
-      const p = join23(dir, `${name}.md`);
+      const p = join24(dir, `${name}.md`);
       writeFileSync16(p, text, { mode: 384 });
       return p;
     }),
@@ -18674,14 +18752,14 @@ function engineDeps(o, flags, source, runner, stateName) {
 }
 function sandboxDenyRead(home, env) {
   return {
-    dirs: [...new Set([configDir(home, env), join23(home, ".config", "sleds")])],
+    dirs: [...new Set([configDir(home, env), join24(home, ".config", "sleds")])],
     files: [
       ...new Set([
         tokenPath(home, env),
-        join23(home, ".sleds-token"),
+        join24(home, ".sleds-token"),
         settingsPath(home, env),
         backupPath(home, env),
-        join23(claudeDir(home, env), "settings.local.json")
+        join24(claudeDir(home, env), "settings.local.json")
       ])
     ]
   };
@@ -18700,6 +18778,36 @@ function gitCommonDirOf(exec, cwd) {
     throw new Error(`git has no common dir for ${cwd}, so the sandbox has nowhere to commit`);
   return resolve8(cwd, dir);
 }
+var LENT_NEEDS_SANDBOX = "a lent engine runs every session sandboxed (spec 48 rule 10) — add --sandbox to --lent-by";
+function lenderHome(accountHome, lentBy) {
+  return isAbsolute3(lentBy) ? resolve8(lentBy) : join24(dirname15(accountHome), lentBy);
+}
+function lentHomeProblems(accountHome, lentBy, modeOf) {
+  const lender = lenderHome(accountHome, lentBy);
+  if (lender === resolve8(accountHome))
+    return [
+      `--lent-by ${lentBy} is this account — a lent engine runs as the borrower's own OS user, not the lender's`
+    ];
+  const problems = [];
+  for (const [who, home] of [
+    ["the borrower's", resolve8(accountHome)],
+    ["the lender's", lender]
+  ]) {
+    const mode = modeOf(home);
+    if (mode === null)
+      problems.push(`${who} home ${home} cannot be read — is ${lentBy} right?`);
+    else if ((mode & 63) !== 0)
+      problems.push(`${who} home ${home} is ${(mode & 511).toString(8)}, open to other users — run: sudo chmod 700 ${home}`);
+  }
+  return problems;
+}
+var homeMode = (path) => {
+  try {
+    return statSync5(path).mode & 4095;
+  } catch {
+    return null;
+  }
+};
 function pinOrg2(configJson, org) {
   if (!org)
     return configJson;
@@ -18740,7 +18848,7 @@ async function driveEngine(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.48"
+    cliVersion: "0.1.50"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -18818,6 +18926,7 @@ async function drive(o, flags, deps, until, beat) {
   deps.log = (line) => event(noteEvent(line));
   let running = 0;
   let down = 0;
+  await until.beforeFirstTick?.();
   for (;; ) {
     let report = null;
     try {
@@ -19085,7 +19194,7 @@ import {
   writeFileSync as writeFileSync17
 } from "node:fs";
 import { hostname as hostname3 } from "node:os";
-import { basename as basename6, dirname as dirname15, isAbsolute as isAbsolute3, join as join24 } from "node:path";
+import { basename as basename6, dirname as dirname16, isAbsolute as isAbsolute4, join as join25 } from "node:path";
 init_state();
 var ENGINE_LABEL = "ai.sleds.engine";
 var ENGINE_INSTALL_USAGE = `usage: sleds engine install [engine flags]   |   sleds engine uninstall [--name <n>] [--org <slug>]
@@ -19093,7 +19202,7 @@ ${ENGINE_USAGE}`;
 function stableArgv(argv, realpath = realpathSync, home) {
   const link = sledsLink(home);
   return argv.map((a) => {
-    if (!isAbsolute3(a) || a === link)
+    if (!isAbsolute4(a) || a === link)
       return a;
     try {
       return realpath(a);
@@ -19106,13 +19215,13 @@ function engineLabel(name, org, seat) {
   return [ENGINE_LABEL, org, seat?.trim(), name].filter((p) => Boolean(p)).map((p, i) => i === 0 ? p : engineSlug(p)).join(".");
 }
 function enginePlistPath(home, name, org, seat) {
-  return join24(home, "Library", "LaunchAgents", `${engineLabel(name, org, seat)}.plist`);
+  return join25(home, "Library", "LaunchAgents", `${engineLabel(name, org, seat)}.plist`);
 }
 function engineLogPath(stateDir, name) {
-  return join24(stateDir, `${engineSlug(name)}.log`);
+  return join25(stateDir, `${engineSlug(name)}.log`);
 }
 function engineEventsPath(stateDir, name) {
-  return join24(stateDir, `${engineSlug(name)}.events.jsonl`);
+  return join25(stateDir, `${engineSlug(name)}.events.jsonl`);
 }
 var xmlEscape4 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 function buildEnginePlist(o) {
@@ -19209,7 +19318,7 @@ function readEngines(dir, suffix, manager, parse) {
   }
   const out = [];
   for (const name of names.filter((n) => n.startsWith(`${ENGINE_LABEL}.`) && n.endsWith(suffix))) {
-    const path = join24(dir, name);
+    const path = join25(dir, name);
     let parsed;
     try {
       parsed = parse(readFileSync16(path, "utf8"), name);
@@ -19229,7 +19338,7 @@ function readEngines(dir, suffix, manager, parse) {
 }
 function installedEngines(home) {
   return [
-    ...readEngines(join24(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist),
+    ...readEngines(join25(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist),
     ...readEngines(engineUnitDir(home), ".service", "systemd", (text, file) => {
       const parsed = parseEngineUnit(text);
       return parsed && { label: basename6(file, ".service"), ...parsed };
@@ -19279,7 +19388,7 @@ function engineInstall(o) {
   if (platform === "linux")
     return installUnit({ o, parsed, label, sledsArgv, env: agentEnv, logPath, exec });
   const plist = enginePlistPath(o.home, parsed.name, parsed.org, seat);
-  mkdirSync19(dirname15(plist), { recursive: true });
+  mkdirSync19(dirname16(plist), { recursive: true });
   if (existsSync19(plist))
     exec("launchctl", ["unload", plist]);
   for (const other of installedEngines(o.home)) {
@@ -19321,7 +19430,7 @@ function installUnit(a) {
   const unit = engineUnitPath(o.home, label);
   const unitName = basename6(unit);
   const systemctl = (...args) => exec("systemctl", ["--user", ...args]);
-  mkdirSync19(dirname15(unit), { recursive: true });
+  mkdirSync19(dirname16(unit), { recursive: true });
   if (existsSync19(unit))
     systemctl("stop", unitName);
   for (const other of installedEngines(o.home)) {
@@ -19697,7 +19806,7 @@ async function runDoctor(o) {
     checks.push({ level: "ok", name: "path", detail: which[0] ?? "" });
   const link = sledsLink(home, o.platform);
   if (existsSync21(link)) {
-    const binDir = dirname16(link);
+    const binDir = dirname17(link);
     const onPath = (env.PATH ?? "").split(delimiter3).includes(binDir);
     const first = which[0];
     const fix = `echo 'export PATH="${binDir}:$PATH"' >> ~/.zshrc`;
@@ -19886,12 +19995,12 @@ function sandboxChecks(o, env) {
       }
     ];
   const nonce = o.nonce ?? `sleds-probe-${randomBytes(16).toString("hex")}`;
-  const probe = join25(dir, SANDBOX_PROBE);
-  const work = mkdtempSync(join25(tmpdir(), "sleds-sandbox-"));
+  const probe = join26(dir, SANDBOX_PROBE);
+  const work = mkdtempSync(join26(tmpdir(), "sleds-sandbox-"));
   try {
     writeFileSync19(probe, `${nonce}
 `, { mode: 384 });
-    const settingsFile = join25(work, "settings.json");
+    const settingsFile = join26(work, "settings.json");
     const settings = engineSandboxSettings(o.home, env, work, SANDBOX_DEFAULT_ALLOW);
     const claudeSettings = settingsPath(o.home, env);
     writeFileSync19(settingsFile, JSON.stringify(settings, null, 2), { mode: 384 });
@@ -19935,6 +20044,8 @@ function engineChecks(o, env) {
   const org = engineOrg({ home: o.home, env }).slug;
   const engines = installedEngines(o.home).filter((e) => e.manager === manager && (e.org === null || !org || e.org === org));
   const need = engines.length > 0 ? "fail" : "warn";
+  if (o.lentBy && !engines.some((e) => engineArg(e.programArgs, "lent-by")))
+    checks.push(...lentChecks(o, o.lentBy, null));
   const runner = engines.map((e) => engineArg(e.programArgs, "runner")).find(Boolean) ?? "tmux";
   const gh = which("gh");
   if (!gh)
@@ -20034,18 +20145,45 @@ function engineChecks(o, env) {
       detail: `${e.label} names no --repos-dir — it works only if your engine profile sets Repos folders`,
       fix: "set Repos folders in Settings › Running work, or sleds engine install --repos-dir ~/code"
     });
+    const lentBy = engineArg(e.programArgs, "lent-by");
+    if (lentBy)
+      checks.push(...lentChecks(o, lentBy, e));
   }
   return checks;
 }
+function lentChecks(o, lentBy, engine) {
+  const checks = [];
+  const problems = lentHomeProblems((o.accountHome ?? (() => userInfo2().homedir))(), lentBy, o.homeMode ?? homeMode);
+  checks.push(problems.length === 0 ? { level: "ok", name: "lent homes", detail: `lent by ${lentBy} · both homes 700` } : {
+    level: "fail",
+    name: "lent homes",
+    detail: problems.join("; "),
+    fix: "sudo chmod 700 on each home named (the lender runs it for theirs)"
+  });
+  if (engine)
+    checks.push(engine.programArgs.includes("--sandbox") ? { level: "ok", name: "lent sandbox", detail: `${engine.label} runs --sandbox` } : {
+      level: "fail",
+      name: "lent sandbox",
+      detail: `${engine.label}: ${LENT_NEEDS_SANDBOX}`,
+      fix: `sleds engine install --lent-by ${lentBy} --sandbox`
+    });
+  return checks;
+}
 function boxChecks(o, env, which, need) {
   const claude = which("claude");
   const file = boxEnvPath(o.home);
-  let named = false;
+  let boxEnvText = null;
   try {
-    named = /^\s*(?:export\s+)?ANTHROPIC_API_KEY\s*=\s*\S/m.test(readFileSync19(file, "utf8"));
+    boxEnvText = readFileSync19(file, "utf8");
   } catch {
-    named = false;
+    boxEnvText = null;
   }
+  const cred = detectCredential(env, {
+    home: o.home,
+    boxEnvText,
+    boxEnvPath: file,
+    exists: o.exists ?? existsSync21
+  });
   return [
     claude ? { level: "ok", name: "claude cli", detail: `${claude} · the headless runner's agent` } : {
       level: need,
@@ -20053,14 +20191,20 @@ function boxChecks(o, env, which, need) {
       detail: "`claude` not on PATH — the headless runner starts Claude Code for each node",
       fix: "npm install -g @anthropic-ai/claude-code"
     },
-    env.ANTHROPIC_API_KEY?.trim() ? { level: "ok", name: "api key", detail: "ANTHROPIC_API_KEY set in this shell" } : named ? { level: "ok", name: "api key", detail: `ANTHROPIC_API_KEY named in ${file}` } : {
+    cred ? { level: "ok", name: "credential", detail: credentialDetail(cred) } : {
       level: need,
-      name: "api key",
-      detail: `ANTHROPIC_API_KEY is not set here or in ${file} — a headless session cannot sign in`,
-      fix: `add ANTHROPIC_API_KEY=… to ${file} (the engine's unit reads it at start)`
+      name: "credential",
+      detail: `no ${API_KEY_VAR}, ${SEAT_TOKEN_VAR} or claude login here or in ${file} — a headless session cannot sign in`,
+      fix: `add ${API_KEY_VAR}=… (a key) or ${SEAT_TOKEN_VAR}=… (a seat, from \`claude setup-token\`) to ${file}, or sign in once with \`claude\` and /login`
     }
   ];
 }
+function credentialDetail(c) {
+  if (c.source === "login")
+    return `seat · claude login at ${c.where}`;
+  const name = c.source === "api_key" ? API_KEY_VAR : SEAT_TOKEN_VAR;
+  return `${c.kind} · ${name} ${c.where === "this shell" ? "set in this shell" : `named in ${c.where}`}`;
+}
 function cmuxCheck(o, env) {
   const exec = o.exec ?? defaultExec3;
   const bin = resolveCmuxBin(o.exists ?? existsSync21, env.PATH ?? "");
@@ -20151,10 +20295,11 @@ import {
   readFileSync as readFileSync20,
   existsSync as realExists2,
   rmSync as rmSync14,
+  statSync as statSync6,
   writeFileSync as writeFileSync20
 } from "node:fs";
-import { hostname as hostname4 } from "node:os";
-import { join as join26, resolve as resolve10 } from "node:path";
+import { hostname as hostname4, userInfo as userInfo3 } from "node:os";
+import { dirname as dirname18, isAbsolute as isAbsolute5, join as join27, resolve as resolve10 } from "node:path";
 init_machine();
 init_state();
 init_meter();
@@ -20190,10 +20335,11 @@ var VALUE_FLAGS2 = [
   "hold-cpu",
   "hold-load",
   "hold-pressure",
-  "hold"
+  "hold",
+  "lent-by"
 ];
 var BOOL_FLAGS2 = ["once", "strict-mcp", "no-strict-mcp", "sandbox", "no-sandbox"];
-var ENGINE_USAGE2 = "usage: sleds engine [--name <n>] [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir[:dir…]>] [--jira <EPIC>] [--mode <permission-mode>] [--model <id>] [--decider-model <id>] [--effort <e>] [--decider-effort <e>] [--drafter-model <id>] [--drafter-effort <e>] [--branch '<template>'] [--pr-title '<template>'] [--events <file>] [--org <slug>] [--strict-mcp [--mcp-allow <a,b>] | --no-strict-mcp] [--sandbox [--sandbox-allow <a,b>] | --no-sandbox] [--hold-cpu <%>] [--hold-load <per-core>] [--hold-pressure warn|critical] [--hold on|off] [--once]";
+var ENGINE_USAGE2 = "usage: sleds engine [--name <n>] [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir[:dir…]>] [--jira <EPIC>] [--mode <permission-mode>] [--model <id>] [--decider-model <id>] [--effort <e>] [--decider-effort <e>] [--drafter-model <id>] [--drafter-effort <e>] [--branch '<template>'] [--pr-title '<template>'] [--events <file>] [--org <slug>] [--strict-mcp [--mcp-allow <a,b>] | --no-strict-mcp] [--sandbox [--sandbox-allow <a,b>] | --no-sandbox] [--lent-by <lender> --sandbox] [--hold-cpu <%>] [--hold-load <per-core>] [--hold-pressure warn|critical] [--hold on|off] [--once]";
 function templateProblem2(flag, template, jira = false) {
   const known = flag === "branch" ? BRANCH_FIELDS : PR_TITLE_FIELDS;
   const used = templateFields(template);
@@ -20291,6 +20437,9 @@ function parseEngineArgs2(argv, host) {
     return {
       error: `--sandbox-allow takes hosts like pypi.org or *.example.com — no scheme, port or path (got ${badHost})`
     };
+  const lentBy = s("lent-by")?.trim();
+  if (lentBy && !raw.sandbox)
+    return { error: LENT_NEEDS_SANDBOX2 };
   const opt = (k, v) => v ? { [k]: v } : {};
   return {
     flags: {
@@ -20321,6 +20470,7 @@ function parseEngineArgs2(argv, host) {
       ...mcpAllow.length ? { mcpAllow } : {},
       ...raw.sandbox ? { sandbox: true } : raw["no-sandbox"] ? { sandbox: false } : {},
       ...sandboxAllow.length ? { sandboxAllow: [...new Set(sandboxAllow)] } : {},
+      ...opt("lentBy", lentBy),
       ...holdCpu !== undefined ? { holdCpu } : {},
       ...holdLoad !== undefined ? { holdLoad } : {},
       ...holdPressure ? { holdPressure } : {},
@@ -20409,7 +20559,7 @@ function flagsFromProfile2(flags, given, profile, home) {
     }
   }
   if (profile.reposDir && !has("repos-dir") && !has("repo")) {
-    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join26(home, d.slice(1)) : d).join(":");
+    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join27(home, d.slice(1)) : d).join(":");
     used.push(`repos ${profile.reposDir}`);
   }
   if (profile.mcpStrict !== undefined && !has("strict-mcp") && !has("no-strict-mcp")) {
@@ -20555,7 +20705,7 @@ function engineClient2(o, org) {
     return fetchClient({
       ...src,
       timeoutMs: ENGINE_TIMEOUT_MS2,
-      version: "0.1.48"
+      version: "0.1.50"
     });
   const asked = org?.trim() || env.SLEDS_ORG?.trim();
   if (asked && !selectOrg(readConfig(o.home), org, env).seat)
@@ -20604,12 +20754,12 @@ function memberMcpConfigs2(o, cwd) {
   });
   const claudeDir = (o.env ?? process.env).CLAUDE_CONFIG_DIR;
   return [
-    read(claudeDir ? join26(claudeDir, ".claude.json") : join26(o.home, ".claude.json")),
-    ...cwd ? [read(join26(cwd, ".mcp.json"))] : []
+    read(claudeDir ? join27(claudeDir, ".claude.json") : join27(o.home, ".claude.json")),
+    ...cwd ? [read(join27(cwd, ".mcp.json"))] : []
   ];
 }
 function engineStateDir2(o, org, seat) {
-  return seatStateDir(orgStateDir(o.stateDir ?? join26(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
+  return seatStateDir(orgStateDir(o.stateDir ?? join27(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
 }
 function engineSeat2(o, org) {
   try {
@@ -20628,6 +20778,19 @@ function engineToken2(o, org) {
   }
 }
 var withToken2 = (token, now) => token ? { token, tokenNow: now } : {};
+function engineCredential(o) {
+  const file = boxEnvPath(o.home);
+  let boxEnvText = null;
+  try {
+    boxEnvText = readFileSync20(file, "utf8");
+  } catch {}
+  return detectCredential(o.env ?? process.env, {
+    home: o.home,
+    boxEnvText,
+    boxEnvPath: file,
+    exists: o.exists ?? realExists2
+  })?.kind;
+}
 function engineDeps2(o, flags, source, runner, stateName) {
   const exec = guardGit(o.exec ?? defaultExec);
   const cwd = o.cwd ?? process.cwd();
@@ -20639,8 +20802,8 @@ function engineDeps2(o, flags, source, runner, stateName) {
   const repo = flags.repo ? resolve10(cwd, flags.repo) : undefined;
   const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve10(cwd, d));
   const { branch, prTitle } = flags;
-  const hooksDir = join26(stateDir, "hooks");
-  const permissionMark = (name) => join26(hooksDir, `${name}.permission.json`);
+  const hooksDir = join27(stateDir, "hooks");
+  const permissionMark = (name) => join27(hooksDir, `${name}.permission.json`);
   const withHook = (name, settings) => applyPermissionHook(settings, [...o.sledsArgv ?? ["sleds"], "permission-event", "--mark", permissionMark(name)].map(shq2).join(" "));
   return {
     source,
@@ -20665,9 +20828,9 @@ function engineDeps2(o, flags, source, runner, stateName) {
       sandbox: true,
       writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd, allow) => {
         const gitCommonDir = gitCommonDirOf2(exec, cwd);
-        const dir = join26(stateDir, "sandbox");
+        const dir = join27(stateDir, "sandbox");
         mkdirSync21(dir, { recursive: true, mode: 448 });
-        const p = join26(dir, `${name}.json`);
+        const p = join27(dir, `${name}.json`);
         const walls = engineSandboxSettings2(o.home, o.env ?? process.env, gitCommonDir, [
           ...SANDBOX_DEFAULT_ALLOW,
           ...flags.sandboxAllow ?? []
@@ -20684,7 +20847,7 @@ function engineDeps2(o, flags, source, runner, stateName) {
     } : {},
     writeHookSettings: (name, allow) => {
       mkdirSync21(hooksDir, { recursive: true, mode: 448 });
-      const p = join26(hooksDir, `${name}.json`);
+      const p = join27(hooksDir, `${name}.json`);
       const base = allow?.length ? { permissions: { allow: [...allow] } } : {};
       writeFileSync20(p, `${JSON.stringify(withHook(name, base), null, 2)}
 `, { mode: 384 });
@@ -20712,9 +20875,9 @@ function engineDeps2(o, flags, source, runner, stateName) {
       exists
     }),
     writeMcpConfig: o.writeMcpConfig ?? ((name, runToken, worktree) => {
-      const dir = join26(stateDir, "mcp");
+      const dir = join27(stateDir, "mcp");
       mkdirSync21(dir, { recursive: true, mode: 448 });
-      const p = join26(dir, `${name}.json`);
+      const p = join27(dir, `${name}.json`);
       let others = {};
       if (flags.strictMcp && flags.mcpAllow?.length) {
         const r = mcpPassThrough(flags.mcpAllow, memberMcpConfigs2(o, worktree));
@@ -20730,9 +20893,9 @@ function engineDeps2(o, flags, source, runner, stateName) {
     }),
     removeMcpConfig: o.removeMcpConfig ?? ((p) => rmSync14(p, { force: true })),
     writePrompt: o.writePrompt ?? ((name, text) => {
-      const dir = join26(stateDir, "prompts");
+      const dir = join27(stateDir, "prompts");
       mkdirSync21(dir, { recursive: true, mode: 448 });
-      const p = join26(dir, `${name}.md`);
+      const p = join27(dir, `${name}.md`);
       writeFileSync20(p, text, { mode: 384 });
       return p;
     }),
@@ -20759,14 +20922,14 @@ function engineDeps2(o, flags, source, runner, stateName) {
 }
 function sandboxDenyRead2(home, env) {
   return {
-    dirs: [...new Set([configDir(home, env), join26(home, ".config", "sleds")])],
+    dirs: [...new Set([configDir(home, env), join27(home, ".config", "sleds")])],
     files: [
       ...new Set([
         tokenPath(home, env),
-        join26(home, ".sleds-token"),
+        join27(home, ".sleds-token"),
         settingsPath(home, env),
         backupPath(home, env),
-        join26(claudeDir(home, env), "settings.local.json")
+        join27(claudeDir(home, env), "settings.local.json")
       ])
     ]
   };
@@ -20786,6 +20949,8 @@ function gitCommonDirOf2(exec, cwd) {
   return resolve10(cwd, dir);
 }
 function sandboxRefusal(flags) {
+  if (flags.lentBy && !flags.sandbox)
+    return LENT_NEEDS_SANDBOX2;
   if (!flags.sandbox)
     return null;
   if (flags.runner === "conductor")
@@ -20796,6 +20961,36 @@ function sandboxRefusal(flags) {
     return "sandboxed sessions: Codex's sandbox walls writes, not reads — the seat token stays readable; use Claude Code, or --no-sandbox";
   return null;
 }
+var LENT_NEEDS_SANDBOX2 = "a lent engine runs every session sandboxed (spec 48 rule 10) — add --sandbox to --lent-by";
+function lenderHome2(accountHome, lentBy) {
+  return isAbsolute5(lentBy) ? resolve10(lentBy) : join27(dirname18(accountHome), lentBy);
+}
+function lentHomeProblems2(accountHome, lentBy, modeOf) {
+  const lender = lenderHome2(accountHome, lentBy);
+  if (lender === resolve10(accountHome))
+    return [
+      `--lent-by ${lentBy} is this account — a lent engine runs as the borrower's own OS user, not the lender's`
+    ];
+  const problems = [];
+  for (const [who, home] of [
+    ["the borrower's", resolve10(accountHome)],
+    ["the lender's", lender]
+  ]) {
+    const mode = modeOf(home);
+    if (mode === null)
+      problems.push(`${who} home ${home} cannot be read — is ${lentBy} right?`);
+    else if ((mode & 63) !== 0)
+      problems.push(`${who} home ${home} is ${(mode & 511).toString(8)}, open to other users — run: sudo chmod 700 ${home}`);
+  }
+  return problems;
+}
+var homeMode2 = (path) => {
+  try {
+    return statSync6(path).mode & 4095;
+  } catch {
+    return null;
+  }
+};
 function pinOrg3(configJson, org) {
   if (!org)
     return configJson;
@@ -20836,7 +21031,7 @@ async function driveEngine2(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.48"
+    cliVersion: "0.1.50"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -20914,6 +21109,7 @@ async function drive2(o, flags, deps, until, beat) {
   deps.log = (line) => event(noteEvent(line));
   let running = 0;
   let down = 0;
+  await until.beforeFirstTick?.();
   for (;; ) {
     let report = null;
     try {
@@ -21095,6 +21291,14 @@ var engineCmd = async (o) => {
     error(refusal);
     return 2;
   }
+  if (flags.lentBy) {
+    const open = lentHomeProblems2((o.accountHome ?? (() => userInfo3().homedir))(), flags.lentBy, o.homeMode ?? homeMode2);
+    if (open.length) {
+      for (const line of open)
+        error(`lent engine: ${line}`);
+      return 2;
+    }
+  }
   if (flags.sandbox && flags.runner === "managed")
     notes.push("sandboxed sessions: the managed runner's container is its own sandbox — the engine's settings do not reach it");
   let source;
@@ -21186,6 +21390,7 @@ var engineCmd = async (o) => {
       watch.beat();
     return update();
   };
+  let beforeFirstTick;
   if (client) {
     const send = beater(client, o.now ?? Date.now);
     let noted;
@@ -21204,20 +21409,34 @@ var engineCmd = async (o) => {
       refused = r.refused;
       error(r.below ? `${r.refused}. This engine is not shown as up until it beats on a version SLEDS serves.` : `${r.refused}. This engine is not shown as up until it beats under a name of its own.`);
     };
+    const credential = engineCredential(o);
+    const body = () => {
+      const m = deps.machine;
+      return beatBody(deps.readState(), { name: flags.name, runner: deps.runner.name }, credential ? { credential } : {}, {
+        atOnce: deps.atOnce,
+        ...m?.last ? { machine: m.last } : {},
+        ...m?.hold && !m.off ? { hold: m.hold } : {}
+      });
+    };
+    const heard = (r) => {
+      sayRefused(r);
+      if (r.ok) {
+        updater.sawBeat(r.update);
+        noteBeat(r.update);
+      }
+    };
+    beforeFirstTick = async () => {
+      try {
+        heard(await postBeat(client, body()));
+      } catch {}
+    };
     afterTick = async () => {
       try {
-        const m = deps.machine;
-        send(beatBody(deps.readState(), { name: flags.name, runner: deps.runner.name }, {}, {
-          atOnce: deps.atOnce,
-          ...m?.last ? { machine: m.last } : {},
-          ...m?.hold && !m.off ? { hold: m.hold } : {}
-        }))?.then((r) => {
-          sayRefused(r);
-          if (r?.ok) {
-            updater.sawBeat(r.update);
-            noteBeat(r.update);
-          }
-          if (r && (r.ok || ("unreachable" in r)))
+        send(body())?.then((r) => {
+          if (!r)
+            return;
+          heard(r);
+          if (r.ok || "unreachable" in r)
             watch.beat();
         }, () => {});
       } catch {}
@@ -21225,7 +21444,7 @@ var engineCmd = async (o) => {
     };
   }
   try {
-    return await driveEngine2(o, flags, deps, { afterTick });
+    return await driveEngine2(o, flags, deps, { afterTick, beforeFirstTick });
   } finally {
     watch.stop();
   }
@@ -21435,7 +21654,7 @@ import {
   writeFileSync as writeFileSync21
 } from "node:fs";
 import { hostname as hostname5 } from "node:os";
-import { basename as basename7, dirname as dirname17, isAbsolute as isAbsolute4, join as join27 } from "node:path";
+import { basename as basename7, dirname as dirname19, isAbsolute as isAbsolute6, join as join28 } from "node:path";
 init_state();
 var ENGINE_LABEL2 = "ai.sleds.engine";
 var ENGINE_INSTALL_USAGE2 = `usage: sleds engine install [engine flags]   |   sleds engine uninstall [--name <n>] [--org <slug>]
@@ -21443,7 +21662,7 @@ ${ENGINE_USAGE}`;
 function stableArgv2(argv, realpath = realpathSync2, home) {
   const link = sledsLink(home);
   return argv.map((a) => {
-    if (!isAbsolute4(a) || a === link)
+    if (!isAbsolute6(a) || a === link)
       return a;
     try {
       return realpath(a);
@@ -21456,13 +21675,13 @@ function engineLabel2(name, org, seat) {
   return [ENGINE_LABEL2, org, seat?.trim(), name].filter((p) => Boolean(p)).map((p, i) => i === 0 ? p : engineSlug(p)).join(".");
 }
 function enginePlistPath2(home, name, org, seat) {
-  return join27(home, "Library", "LaunchAgents", `${engineLabel2(name, org, seat)}.plist`);
+  return join28(home, "Library", "LaunchAgents", `${engineLabel2(name, org, seat)}.plist`);
 }
 function engineLogPath2(stateDir, name) {
-  return join27(stateDir, `${engineSlug(name)}.log`);
+  return join28(stateDir, `${engineSlug(name)}.log`);
 }
 function engineEventsPath2(stateDir, name) {
-  return join27(stateDir, `${engineSlug(name)}.events.jsonl`);
+  return join28(stateDir, `${engineSlug(name)}.events.jsonl`);
 }
 var xmlEscape5 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 function buildEnginePlist2(o) {
@@ -21559,7 +21778,7 @@ function readEngines2(dir, suffix, manager, parse) {
   }
   const out = [];
   for (const name of names.filter((n) => n.startsWith(`${ENGINE_LABEL2}.`) && n.endsWith(suffix))) {
-    const path = join27(dir, name);
+    const path = join28(dir, name);
     let parsed;
     try {
       parsed = parse(readFileSync21(path, "utf8"), name);
@@ -21579,7 +21798,7 @@ function readEngines2(dir, suffix, manager, parse) {
 }
 function installedEngines2(home) {
   return [
-    ...readEngines2(join27(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist2),
+    ...readEngines2(join28(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist2),
     ...readEngines2(engineUnitDir(home), ".service", "systemd", (text, file) => {
       const parsed = parseEngineUnit(text);
       return parsed && { label: basename7(file, ".service"), ...parsed };
@@ -21617,7 +21836,7 @@ async function ensureReposDir(o) {
     return false;
   }
   const exists = o.exists ?? existsSync22;
-  const missing = dirs.filter((d) => !exists(/^~(\/|$)/.test(d) ? join27(o.home, d.slice(1)) : d));
+  const missing = dirs.filter((d) => !exists(/^~(\/|$)/.test(d) ? join28(o.home, d.slice(1)) : d));
   if (missing.length) {
     error(`Not a folder on this machine: ${missing.join(", ")}. ${REPOS_DIR_NEEDED}`);
     return false;
@@ -21673,7 +21892,7 @@ function engineInstall2(o) {
   if (platform === "linux")
     return installUnit2({ o, parsed, label, sledsArgv, env: agentEnv, logPath, exec });
   const plist = enginePlistPath2(o.home, parsed.name, parsed.org, seat);
-  mkdirSync22(dirname17(plist), { recursive: true });
+  mkdirSync22(dirname19(plist), { recursive: true });
   if (existsSync22(plist))
     exec("launchctl", ["unload", plist]);
   for (const other of installedEngines2(o.home)) {
@@ -21715,7 +21934,7 @@ function installUnit2(a) {
   const unit = engineUnitPath(o.home, label);
   const unitName = basename7(unit);
   const systemctl = (...args) => exec("systemctl", ["--user", ...args]);
-  mkdirSync22(dirname17(unit), { recursive: true });
+  mkdirSync22(dirname19(unit), { recursive: true });
   if (existsSync22(unit))
     systemctl("stop", unitName);
   for (const other of installedEngines2(o.home)) {
@@ -22740,9 +22959,9 @@ init_meter();
 // src/owed.ts
 init_config();
 import { existsSync as existsSync26, mkdirSync as mkdirSync23, readFileSync as readFileSync25, renameSync as renameSync11, writeFileSync as writeFileSync22 } from "node:fs";
-import { dirname as dirname18, join as join28 } from "node:path";
-var owedPath = (home) => join28(configDir(home), "owed.json");
-var sessionPath = (home) => join28(configDir(home), "session.json");
+import { dirname as dirname20, join as join29 } from "node:path";
+var owedPath = (home) => join29(configDir(home), "owed.json");
+var sessionPath = (home) => join29(configDir(home), "session.json");
 var OWED_TTL_MS = 3 * 24 * 60 * 60000;
 var str14 = (v) => typeof v === "string" ? v : undefined;
 function sourceKey(s) {
@@ -22766,7 +22985,7 @@ var readJson = (p) => {
   }
 };
 var writeJson = (p, v) => {
-  mkdirSync23(dirname18(p), { recursive: true, mode: 448 });
+  mkdirSync23(dirname20(p), { recursive: true, mode: 448 });
   const tmp = `${p}.${process.pid}.tmp`;
   writeFileSync22(tmp, `${JSON.stringify(v, null, 2)}
 `, { mode: 384 });
@@ -22900,7 +23119,7 @@ function contextFor(deps) {
     ...src,
     fetchFn: deps.fetchFn,
     timeoutMs: deps.timeoutMs,
-    version: "0.1.48"
+    version: "0.1.50"
   }), deps.home, now) : null;
   return {
     channel: "code",
@@ -24029,7 +24248,7 @@ init_meter();
 import { spawnSync as spawnSync7 } from "node:child_process";
 import { existsSync as existsSync28, mkdirSync as mkdirSync25, readFileSync as readFileSync27, rmSync as rmSync17, writeFileSync as writeFileSync24 } from "node:fs";
 import { hostname as hostname11 } from "node:os";
-import { dirname as dirname19 } from "node:path";
+import { dirname as dirname21 } from "node:path";
 var defaultWhich3 = (cmd) => {
   const path = process.env.PATH ?? "";
   for (const dir of path.split(":").filter(Boolean)) {
@@ -24067,7 +24286,7 @@ var musherInstall = (o) => {
   const plist = musherPlistPath(o.home, env);
   const label = musherLabel(env);
   const dir = configDir(o.home, env);
-  mkdirSync25(dirname19(plist), { recursive: true });
+  mkdirSync25(dirname21(plist), { recursive: true });
   mkdirSync25(dir, { recursive: true, mode: 448 });
   const execPath = o.sledsArgv[0] ?? process.execPath;
   const agentEnv = {
@@ -24467,7 +24686,7 @@ var orgCmd = (o) => {
 init_src();
 import { spawnSync as spawnSync8 } from "node:child_process";
 import { writeFileSync as writeFileSync25 } from "node:fs";
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 function packFileName(key) {
   return `pack-${slugify(key, 80) || "item"}.md`;
 }
@@ -24495,7 +24714,7 @@ var packCmd = async (o) => {
     log(r.text);
     return 0;
   }
-  const path = join29(o.cwd ?? process.cwd(), packFileName(key));
+  const path = join30(o.cwd ?? process.cwd(), packFileName(key));
   (o.write ?? ((p, t) => writeFileSync25(p, t.endsWith(`
 `) ? t : `${t}
 `)))(path, r.text);
@@ -24505,7 +24724,7 @@ var packCmd = async (o) => {
 
 // src/commands/permissionEvent.ts
 import { chmodSync as chmodSync7, mkdirSync as mkdirSync26, readFileSync as readFileSync28, renameSync as renameSync12, rmSync as rmSync19, writeFileSync as writeFileSync26 } from "node:fs";
-import { dirname as dirname20 } from "node:path";
+import { dirname as dirname22 } from "node:path";
 var isObject13 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var messageOf = (text) => {
   try {
@@ -24529,7 +24748,7 @@ var permissionEvent = async (o) => {
     if (!isToolPermission2(message))
       return 0;
     const mark = { message, at: (o.now ?? Date.now)() };
-    mkdirSync26(dirname20(o.mark), { recursive: true, mode: 448 });
+    mkdirSync26(dirname22(o.mark), { recursive: true, mode: 448 });
     const tmp = `${o.mark}.${process.pid}.tmp`;
     writeFileSync26(tmp, `${JSON.stringify(mark)}
 `, { mode: 384 });
@@ -25569,16 +25788,86 @@ var seatEvent = async (o) => {
   return 0;
 };
 
+// src/commands/seatRevoke.ts
+var SEAT_REVOKE_USAGE = "usage: sleds seat revoke [--box <name>] [--yes] [--json]";
+var LAG = "a proxy may honour it for up to 60 s more";
+function parseSeatRevokeArgs(argv) {
+  let box = null;
+  let yes = false;
+  let json = false;
+  for (let i = 0;i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--json")
+      json = true;
+    else if (a === "--yes" || a === "-y")
+      yes = true;
+    else if (a === "--box") {
+      const value = argv[i + 1]?.trim();
+      if (!value || value.startsWith("--"))
+        return { error: "--box needs the box's name" };
+      box = value.replace(/^box:/, "");
+      i++;
+    } else
+      return { error: `unknown argument ${a}` };
+  }
+  return { box, yes, json };
+}
+function why(j, status) {
+  if (typeof j?.reason === "string")
+    return j.reason;
+  if (typeof j?.error === "string")
+    return j.error;
+  const e = j?.error;
+  return typeof e?.message === "string" ? e.message : `HTTP ${status}`;
+}
+async function seatRevokeCmd(o) {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  const a = parseSeatRevokeArgs(o.argv);
+  if ("error" in a) {
+    error(a.error);
+    error(SEAT_REVOKE_USAGE);
+    return 2;
+  }
+  if (!a.box && !a.yes) {
+    error("this revokes this machine's own seat — SLEDS stops here until `sleds init` again.");
+    error("Add --yes to go ahead, or --box <name> to revoke one of your boxes instead.");
+    return 2;
+  }
+  const client = engineClient({ home: o.home, ...o.client ? { client: o.client } : {} });
+  if ("error" in client) {
+    error(client.error);
+    return 1;
+  }
+  const r = await client.postFull("/proxy/seat/revoke", a.box ? { box: a.box } : {});
+  if (!r) {
+    error("SLEDS unreachable — nothing revoked");
+    return 1;
+  }
+  const ok = r.status < 300 && r.json?.ok !== false;
+  if (a.json) {
+    log(JSON.stringify({ v: 1, ...r.json ?? { ok: false, reason: `HTTP ${r.status}` } }));
+    return ok ? 0 : 1;
+  }
+  if (!ok) {
+    error(clean(`nothing revoked — ${why(r.json, r.status)}`));
+    return 1;
+  }
+  const label = typeof r.json?.label === "string" ? r.json.label : a.box ? `box:${a.box}` : "";
+  log(clean(a.box ? `${label} revoked — its token is dead; ${LAG}` : `this machine's seat${label ? ` (${label})` : ""} revoked — its token is dead; ${LAG}. Run \`sleds init\` with a new one to use SLEDS here again`));
+  return 0;
+}
+
 // src/commands/seatSync.ts
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { existsSync as existsSync30, mkdirSync as mkdirSync27, readFileSync as readFileSync30, readdirSync as readdirSync7, rmSync as rmSync21, writeFileSync as writeFileSync27 } from "node:fs";
 import { platform as platform2 } from "node:os";
-import { dirname as dirname21, join as join31 } from "node:path";
+import { dirname as dirname23, join as join32 } from "node:path";
 
 // src/cookieDb.ts
 import { copyFileSync as copyFileSync3, rmSync as rmSync20 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 var QUERY = "SELECT name, hex(encrypted_value) AS ev FROM cookies WHERE host_key LIKE '%claude.ai%'";
 var isBun = () => typeof globalThis.Bun !== "undefined";
 async function queryRows(dbPath) {
@@ -25607,7 +25896,7 @@ function nodeSqlite() {
   return mod;
 }
 async function readCookieRows(dbPath) {
-  const copy = join30(tmpdir2(), `sleds-cookies-${process.pid}-${Date.now()}.sqlite`);
+  const copy = join31(tmpdir2(), `sleds-cookies-${process.pid}-${Date.now()}.sqlite`);
   copyFileSync3(dbPath, copy);
   try {
     const rows = await queryRows(copy);
@@ -25900,7 +26189,7 @@ function findFile(root, name) {
       continue;
     }
     for (const e of entries) {
-      const p = join31(dir, e.name);
+      const p = join32(dir, e.name);
       if (e.isDirectory())
         stack.push(p);
       else if (e.name === name)
@@ -25911,7 +26200,7 @@ function findFile(root, name) {
 }
 function findCookieDb(home, source) {
   const b = BROWSERS[source.browser];
-  const root = join31(home, APP_SUPPORT, b.appDir);
+  const root = join32(home, APP_SUPPORT, b.appDir);
   if (!existsSync30(root))
     throw new Error(`no ${source.browser} data at ${root} (is it installed?)`);
   if (!b.profiled) {
@@ -25920,7 +26209,7 @@ function findCookieDb(home, source) {
       throw new Error(`no cookie store under ${root}`);
     return db;
   }
-  const localStatePath = join31(root, "Local State");
+  const localStatePath = join32(root, "Local State");
   const localState = existsSync30(localStatePath) ? readFileSync30(localStatePath, "utf8") : null;
   const wanted = source.profile ?? "Default";
   const { dir, ambiguous } = resolveProfileDir(localState, wanted);
@@ -25928,7 +26217,7 @@ function findCookieDb(home, source) {
     throw new Error(`"${wanted}" names ${ambiguous.length} ${source.browser} profiles (${ambiguous.join(", ")}) — pass the directory or the account email instead`);
   if (!dir)
     throw new Error(`no ${source.browser} profile named "${wanted}" (check chrome://version)`);
-  const db = cookieDbCandidates(join31(root, dir)).find((p) => existsSync30(p));
+  const db = cookieDbCandidates(join32(root, dir)).find((p) => existsSync30(p));
   if (!db)
     throw new Error(`profile "${dir}" has no cookie store yet (open claude.ai in it once)`);
   return db;
@@ -25972,7 +26261,7 @@ function fetchSeatUsage(jar, org, now, run) {
 }
 function launchAgentPlist(argv, home, source) {
   const label = launchLabel(source);
-  const log = join31(home, ".config", "sleds", `${label.slice("ai.sleds.".length)}.log`);
+  const log = join32(home, ".config", "sleds", `${label.slice("ai.sleds.".length)}.log`);
   const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
   const args = [...argv, "seat-sync", ...sourceArgs(source)].map((a) => `    <string>${esc(a)}</string>`).join(`
 `);
@@ -25994,20 +26283,20 @@ ${args}
 `;
 }
 function plistPath2(home, source) {
-  return join31(home, "Library", "LaunchAgents", `${launchLabel(source)}.plist`);
+  return join32(home, "Library", "LaunchAgents", `${launchLabel(source)}.plist`);
 }
 function install(home, argv, source, log, launchctl) {
   if (!argv[0]) {
     log("cannot resolve the sleds command to install the timer");
     return 1;
   }
-  const dir = join31(home, "Library", "LaunchAgents");
+  const dir = join32(home, "Library", "LaunchAgents");
   mkdirSync27(dir, { recursive: true });
   const path = plistPath2(home, source);
   const tokenPath = seatTokenPath(home, source);
   rmSync21(tokenPath, { force: true });
   if (source.token) {
-    mkdirSync27(dirname21(tokenPath), { recursive: true, mode: 448 });
+    mkdirSync27(dirname23(tokenPath), { recursive: true, mode: 448 });
     writeFileSync27(tokenPath, `${source.token}
 `, { mode: 384 });
   }
@@ -26184,8 +26473,8 @@ var sessionEvent = async (o) => {
 
 // src/commands/specEvent.ts
 init_meter();
-import { readFileSync as readFileSync31, statSync as statSync5 } from "node:fs";
-import { basename as basename8, isAbsolute as isAbsolute5, relative as relative2 } from "node:path";
+import { readFileSync as readFileSync31, statSync as statSync7 } from "node:fs";
+import { basename as basename8, isAbsolute as isAbsolute7, relative as relative2 } from "node:path";
 var HOOK_STDIN_TIMEOUT_MS3 = 1000;
 var ESTIMATE_TIMEOUT_MS = 4000;
 var MIN_SPEC_CHARS = 200;
@@ -26229,7 +26518,7 @@ function parseHookInput(raw) {
   return { toolName, filePath, cwd };
 }
 function projectKey(filePath, cwd) {
-  if (cwd && isAbsolute5(filePath) && isAbsolute5(cwd)) {
+  if (cwd && isAbsolute7(filePath) && isAbsolute7(cwd)) {
     const rel = relative2(cwd, filePath);
     if (rel && !rel.startsWith(".."))
       return rel;
@@ -26238,7 +26527,7 @@ function projectKey(filePath, cwd) {
 }
 function readFileOrNull(path) {
   try {
-    if (statSync5(path).size > 2000000)
+    if (statSync7(path).size > 2000000)
       return null;
     return readFileSync31(path, "utf8");
   } catch {
@@ -26850,7 +27139,7 @@ var hasEitherKey = (settings) => {
 // src/commands/update.ts
 init_server();
 import { existsSync as existsSync34 } from "node:fs";
-import { homedir as homedir7, userInfo } from "node:os";
+import { homedir as homedir8, userInfo as userInfo4 } from "node:os";
 import { basename as basename9 } from "node:path";
 init_config();
 init_state();
@@ -26916,7 +27205,7 @@ var realPidAlive4 = (pid) => {
 };
 function machineClient(home, env) {
   const src = meterSource(home, undefined, { env });
-  return src ? fetchClient({ ...src, version: "0.1.48" }) : null;
+  return src ? fetchClient({ ...src, version: "0.1.50" }) : null;
 }
 async function noteAnswer2(home, a, now) {
   try {
@@ -26938,7 +27227,7 @@ function busyLine(busy) {
   return `${n} session${n === 1 ? " is" : "s are"} running on ${on} — sleds update --now releases ${n === 1 ? "it" : "them"}`;
 }
 async function updateCmd(o) {
-  const home = o.home ?? homedir7();
+  const home = o.home ?? homedir8();
   const env = o.env ?? process.env;
   const log = o.log ?? console.log;
   const error = o.error ?? console.error;
@@ -26963,7 +27252,7 @@ async function updateCmd(o) {
     const r = await rollBack({
       home,
       restoreState: false,
-      why: `asked by ${o.user ?? userInfo().username}`,
+      why: `asked by ${o.user ?? userInfo4().username}`,
       now: now(),
       platform
     });
@@ -27242,12 +27531,12 @@ var webhooksCmd = async (o) => {
 // src/config.ts
 init_settings();
 import { chmodSync as chmodSync8, existsSync as existsSync35, mkdirSync as mkdirSync28, readFileSync as readFileSync33, renameSync as renameSync13, writeFileSync as writeFileSync28 } from "node:fs";
-import { join as join32, resolve as resolve11 } from "node:path";
+import { join as join33, resolve as resolve11 } from "node:path";
 var configDir2 = (home, env = process.env) => {
   const o = env.SLEDS_HOME?.trim();
-  return o ? resolve11(home, o) : join32(home, ".config", "sleds");
+  return o ? resolve11(home, o) : join33(home, ".config", "sleds");
 };
-var configPath2 = (home) => join32(configDir2(home), "config.json");
+var configPath2 = (home) => join33(configDir2(home), "config.json");
 var isObject17 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var optString2 = (v) => typeof v === "string" ? v : undefined;
 var parsePriorEnv2 = (v) => {
@@ -27424,10 +27713,10 @@ function runnerFor3(name, exec = defaultExec, o = {}) {
 }
 
 // src/runtime.ts
-import { homedir as homedir8 } from "node:os";
-import { join as join33, win32 as win323 } from "node:path";
+import { homedir as homedir9 } from "node:os";
+import { join as join34, win32 as win323 } from "node:path";
 var isCompiled2 = (argv1 = process.argv[1]) => Boolean(argv1 && (argv1.startsWith("/$bunfs/") || argv1.startsWith("B:\\~BUN\\")));
-var sledsLink2 = (home = homedir8(), platform = process.platform) => platform === "win32" ? win323.join(process.env.LOCALAPPDATA ?? win323.join(home, "AppData", "Local"), "sleds", "bin", "sleds.exe") : join33(home, ".sleds", "bin", "sleds");
+var sledsLink2 = (home = homedir9(), platform = process.platform) => platform === "win32" ? win323.join(process.env.LOCALAPPDATA ?? win323.join(home, "AppData", "Local"), "sleds", "bin", "sleds.exe") : join34(home, ".sleds", "bin", "sleds");
 
 // src/schedule.ts
 import { spawnSync as spawnSync11 } from "node:child_process";
@@ -27439,7 +27728,7 @@ var defaultExec5 = (cmd, args) => {
 };
 
 // src/settings.ts
-import { dirname as dirname22, join as join34, resolve as resolve12 } from "node:path";
+import { dirname as dirname24, join as join35, resolve as resolve12 } from "node:path";
 var withSeatEnv2 = (command, home, env = process.env, org) => {
   const parts = [];
   const sh = env.SLEDS_HOME?.trim();
@@ -27625,10 +27914,16 @@ commands:
               needs (gh signed in, git, tmux, its launchd agent, a repos dir). --json: {v, checks}.
               --sandbox: also run one short sandboxed Claude Code session (haiku) and prove it
               cannot read the SLEDS config dir or reach a host off the allowlist.
+              --lent-by <lender>: check this account as a lent engine's before the install \u2014
+              both homes 700 (an installed engine with --lent-by is checked without it).
   meter       Show the pipeline: built today, queued with its band, delivered overnight.
   mcp         Run the MCP server on stdio: tools usage, estimate, overnight, jobs.
               Register with \`claude mcp add sleds -- sleds mcp\` (Cowork sees the same server).
-  seat-sync   Read the seat's subscription usage (weekly/5h limits, per-model, credits) from a
+  seat revoke [--box <name>] [--yes] [--json]   Kill a seat's token in one step. --box revokes
+              your own box:<name> seat, from any terminal; without it this machine's own seat
+              is revoked (--yes, since SLEDS stops here until \`sleds init\` again). A proxy may
+              honour the token for up to 60 s more. --json: {v, ok, seatId, label} or {v, ok, reason}
+  seat-sync  Read the seat's subscription usage (weekly/5h limits, per-model, credits) from a
               claude.ai session and post it to the proxy. macOS.
               --browser <claude|chrome|brave|edge|chromium|\u2026>  which cookie store (default claude)
               --profile <name>       browser profile dir ("Profile 1") or its display name/email
@@ -27681,6 +27976,7 @@ var parseArgs = (argv) => {
   }
   return { cmd, flags };
 };
+var lentByOf = (v) => typeof v === "string" && v.trim() ? { lentBy: v.trim() } : {};
 var HELP = new Set(["help", "--help", "-h"]);
 var wantsHelp = (argv) => {
   if (HELP.has(argv[0] ?? "--help"))
@@ -27729,12 +28025,12 @@ var sledsArgv = (execPath = process.execPath, script = process.argv[1], realpath
   return stableArgv2(script ? [execPath, script] : [execPath], realpath, o.home);
 };
 var shellQuote = (s) => /^[\w./-]+$/.test(s) ? s : `'${s.replace(/'/g, "'\\''")}'`;
-var statusLineCommand = (argv, home = homedir9()) => withSeatEnv2([...argv, "statusline"].map(shellQuote).join(" "), home);
-var seatEventCommand = (argv, home = homedir9()) => withSeatEnv2([...argv, "seat-event"].map(shellQuote).join(" "), home);
-var promptEventCommand = (argv, home = homedir9()) => withSeatEnv2([...argv, "prompt-event"].map(shellQuote).join(" "), home);
-var sessionEventCommand = (argv, home = homedir9()) => withSeatEnv2([...argv, "session-event"].map(shellQuote).join(" "), home);
-var stopEventCommand = (argv, home = homedir9()) => withSeatEnv2([...argv, "stop-event"].map(shellQuote).join(" "), home);
-var specEventCommand = (argv, home = homedir9()) => withSeatEnv2([...argv, "spec-event"].map(shellQuote).join(" "), home);
+var statusLineCommand = (argv, home = homedir10()) => withSeatEnv2([...argv, "statusline"].map(shellQuote).join(" "), home);
+var seatEventCommand = (argv, home = homedir10()) => withSeatEnv2([...argv, "seat-event"].map(shellQuote).join(" "), home);
+var promptEventCommand = (argv, home = homedir10()) => withSeatEnv2([...argv, "prompt-event"].map(shellQuote).join(" "), home);
+var sessionEventCommand = (argv, home = homedir10()) => withSeatEnv2([...argv, "session-event"].map(shellQuote).join(" "), home);
+var stopEventCommand = (argv, home = homedir10()) => withSeatEnv2([...argv, "stop-event"].map(shellQuote).join(" "), home);
+var specEventCommand = (argv, home = homedir10()) => withSeatEnv2([...argv, "spec-event"].map(shellQuote).join(" "), home);
 var mcpFlag = (flags) => flags["no-mcp"] === true ? false : flags.mcp === true ? true : undefined;
 var main = async (argv) => {
   const { cmd, flags } = parseArgs(argv);
@@ -27742,7 +28038,7 @@ var main = async (argv) => {
     console.log(commandUsage(cmd));
     return 0;
   }
-  const home = homedir9();
+  const home = homedir10();
   const scheduler = {
     platform: platform3(),
     home,
@@ -27754,7 +28050,7 @@ var main = async (argv) => {
     now: Date.now(),
     stderr: (line) => console.error(line),
     isTTY: !!process.stderr.isTTY,
-    version: "0.1.48"
+    version: "0.1.50"
   });
   switch (cmd) {
     case "update":
@@ -27775,6 +28071,11 @@ var main = async (argv) => {
       return sledCmd({ home, argv: argv.slice(1) });
     case "reopen":
       return reopenCmd({ home, argv: argv.slice(1) });
+    case "seat":
+      if (argv[1] === "revoke")
+        return seatRevokeCmd({ home, argv: argv.slice(2) });
+      console.error(SEAT_REVOKE_USAGE);
+      return 2;
     case "engine":
     case "route": {
       if (cmd === "engine" && argv[1] === "status")
@@ -27957,7 +28258,8 @@ var main = async (argv) => {
       return doctor({
         home,
         json: argv.slice(1).includes("--json"),
-        sandbox: argv.slice(1).includes("--sandbox")
+        sandbox: argv.slice(1).includes("--sandbox"),
+        ...lentByOf(parseArgs(argv).flags["lent-by"])
       });
     case "status":
       return status3({ home });
@@ -27981,7 +28283,7 @@ ${renderHelpText(argv[1])}`);
     case "version":
     case "--version":
     case "-v":
-      console.log("sleds 0.1.48");
+      console.log("sleds 0.1.50");
       return 0;
     default:
       console.error(`unknown command: ${cmd}