@sleds/cli 0.1.60 → 0.1.61

package/dist/sleds.mjs

@@ -797,9 +797,9 @@ var init_verbs = __esm(() => {
       id: "attach",
       group: "meter",
       want: "Put the spec, the prototype, a screenshot or a link on the item so the team can open it",
-      mcp: "attach {project, name, content, mime?, kind?} · attach {project, url, title?} — intake takes the same as `attachments` when filing",
+      mcp: "attach {project, name, content, mime?, kind?, mock?} · attach {project, url, title?} — intake takes the same as `attachments` when filing",
       app: "Work › the item › Links",
-      how: "The file itself lives in SLEDS, not only in the chat that made it: a spec as markdown, a prototype as one HTML page (opens and renders in its own tab), a screenshot — or a link to a doc, a Figma, a Loom. Up to 4 MB; the same name again replaces. Anyone on the board opens it from the item; the person who added it, or an admin, can remove it."
+      how: "The file itself lives in SLEDS, not only in the chat that made it: a spec as markdown, a prototype as one HTML page (opens and renders in its own tab), a screenshot — or a link to a doc, a Figma, a Loom. Up to 4 MB; the same name again replaces. Mark the prototype or screenshot that shows the change with `mock: true` — the item's Overview shows it as the proposal. Anyone on the board opens it from the item; the person who added it, or an admin, can remove it."
     },
     {
       id: "update",
@@ -1149,6 +1149,8 @@ function readForm(text) {
     const val = (f) => plain(f.value.join(" "));
     const one = (slot) => found.find((f) => f.slot === slot && val(f));
     const ask = one("ask");
+    const summary = one("summary");
+    const expected = one("expected");
     const users = one("users");
     const sid = one("sid");
     const loc = one("location");
@@ -1172,6 +1174,8 @@ function readForm(text) {
     return {
       form: def.name,
       ...ask ? { ask: val(ask) } : {},
+      ...summary ? { summary: val(summary) } : {},
+      ...expected ? { expected: val(expected) } : {},
       ...details ? { details } : {},
       ...touches ? { touches } : {},
       ...demand ? { demand } : {},
@@ -1196,6 +1200,8 @@ var init_forms = __esm(() => {
         [/^sids?\b/, "sid"],
         [/^location ids?\b/, "location"],
         [/^issue description\b/, "ask"],
+        [/^summary\b|^title\b/, "summary"],
+        [/^expected (?:behaviou?r|result|outcome)\b/, "expected"],
         [/^(?:number of )?clients? affected\b|^number of clients\b/, "clients"],
         [/\bimpacting revenue\b|\brevenue impact\b/, "revenue"]
       ],
@@ -1281,8 +1287,12 @@ function draftBrief(input) {
   const form = readForm(text);
   const parsed = sections(text);
   const preamble = parsed.preamble;
-  const byKey = form ? { touches: form.touches, demand: form.demand } : parsed.byKey;
-  const fromText = form?.ask ? form.ask : askFrom(text, preamble);
+  const byKey = form ? {
+    touches: form.touches,
+    demand: form.demand,
+    ...form.expected ? { done: form.expected } : {}
+  } : parsed.byKey;
+  const fromText = form?.summary ? form.summary : form?.ask ? form.ask : askFrom(text, preamble);
   const askText = a.ask?.trim() || (fromText ? titleOf(fromText) : undefined);
   if (!askText)
     return null;
@@ -3280,7 +3290,8 @@ function parseAttachments(raw) {
       mime,
       content,
       ...str5(a.kind) ? { kind: str5(a.kind) } : {},
-      ...a.encoding === "base64" ? { encoding: "base64" } : {}
+      ...a.encoding === "base64" ? { encoding: "base64" } : {},
+      ...typeof a.mock === "boolean" ? { mock: a.mock } : {}
     });
   }
   return out.slice(0, 12);
@@ -4777,7 +4788,11 @@ var init_server = __esm(() => {
                 },
                 mime: { type: "string", description: "text/markdown, text/html, image/png…" },
                 content: { type: "string", description: "The file: text as is, or base64." },
-                encoding: { type: "string", enum: ["text", "base64"] }
+                encoding: { type: "string", enum: ["text", "base64"] },
+                mock: {
+                  type: "boolean",
+                  description: "true on the prototype or screenshot that shows the change — the item's Overview shows it as the proposal."
+                }
               },
               required: ["name", "content"]
             }
@@ -5160,7 +5175,7 @@ var init_server = __esm(() => {
     },
     {
       name: "attach",
-      description: "Put a file or a link on an item so anyone on the board can open it — a spec or PRD as markdown, a prototype you made as one HTML page (it opens and renders in its own tab), a screenshot; or a URL (a doc, a Figma, a Loom) with `url` instead of a file. Pass the item's key (QW-142, from status, or what intake said). Files up to 4 MB; the same name again replaces the earlier one. `intake` takes the same files as `attachments` when filing.",
+      description: "Put a file or a link on an item so anyone on the board can open it — a spec or PRD as markdown, a prototype you made as one HTML page (it opens and renders in its own tab), a screenshot; or a URL (a doc, a Figma, a Loom) with `url` instead of a file. Pass the item's key (QW-142, from status, or what intake said). Files up to 4 MB; the same name again replaces the earlier one. Mark the prototype or screenshot that shows the change with `mock: true` — the item's Overview shows it as the proposal. `intake` takes the same files as `attachments` when filing.",
       inputSchema: {
         type: "object",
         properties: {
@@ -5184,7 +5199,11 @@ var init_server = __esm(() => {
             type: "string",
             description: "The file: text as is, or base64 with encoding base64."
           },
-          encoding: { type: "string", enum: ["text", "base64"] }
+          encoding: { type: "string", enum: ["text", "base64"] },
+          mock: {
+            type: "boolean",
+            description: "true on the prototype or screenshot that shows the change — the item's Overview shows it as the proposal. false clears the mark; omitted, a replaced file keeps its mark."
+          }
         },
         required: ["project"]
       }
@@ -5708,7 +5727,7 @@ var init_agent = __esm(() => {
   REPLY_RULES = [
     "How to answer this reply:",
     '- If it answers nothing and changes nothing — thanks, "noted", "copy", "will do", or people talking to each other — set quiet to true and post nothing.',
-    "- Never ask a question the thread already asked. If it is still open, say only what is still needed, once, in a few words.",
+    "- Never ask a question the thread already asked — by you or by anyone — and never ask one the thread has already answered, in anyone's reply. Read every reply in the thread as an answer first.",
     "- If someone in the thread already gave the cause or a fix, do not ask the poster for details it makes moot. Say in one line what is left, or set quiet.",
     "- Keep it to what changed and what is next. No recap of the ask."
   ].join(`
@@ -6731,12 +6750,14 @@ var init_sentry = () => {};
 var init_outside = () => {};
 
 // ../../packages/shared/src/pack/pack.ts
+var LANDING_GAP_MS;
 var init_pack = __esm(() => {
   init_flags();
   init_profile();
   init_sentry();
   init_outside();
   init_setup();
+  LANDING_GAP_MS = 10 * 60000;
 });
 // ../../packages/shared/src/pack/prHeader.ts
 var PR_HEADER_OPEN = "<!-- sleds:header -->", PR_HEADER_CLOSE = "<!-- /sleds:header -->";
@@ -6819,6 +6840,11 @@ var init_musher = __esm(() => {
   init_plan4();
 });
 
+// ../../packages/shared/src/route/handoff.ts
+var init_handoff = __esm(() => {
+  init_route();
+});
+
 // ../../packages/shared/src/route/doneChecks.ts
 function shellWords(s) {
   const out = [];
@@ -7034,6 +7060,55 @@ var init_doneChecks = __esm(() => {
 // ../../packages/shared/src/route/routeFix.ts
 var init_routeFix = () => {};
 
+// ../../packages/shared/src/route/reshape.ts
+var init_reshape = __esm(() => {
+  init_route();
+});
+
+// ../../packages/shared/src/route/say.ts
+var VERB_MODAL, ORDER_VERB, each = (a, b, f) => a.flatMap((x) => b.map((y) => f(x, y))), FORMS2;
+var init_say = __esm(() => {
+  init_reshape();
+  init_route();
+  VERB_MODAL = String.raw`(?:(?:should|must|can|has\s+to|have\s+to|needs?\s+to)\s+)?`;
+  ORDER_VERB = String.raw`(?:${VERB_MODAL}(?:comes?|runs?|go|goes|starts?|be|is|are)\s+)?`;
+  FORMS2 = [
+    {
+      kind: "pair",
+      re: /^(?:merge|fold|combine)\s+(.+?)\s+into\s+(.+)$/i,
+      ops: (a, b) => each(a, b, (absorb, into) => ({ op: "merge", absorb, into }))
+    },
+    { kind: "split", re: /^split\s+(.+?)(?:\s*,?\s+(?:moving|move|taking|with|off)\s+(.+))?$/i },
+    { kind: "rename", re: /^(?:rename|retitle)\s+(.+?)\s+(?:to|as)\s+(.+)$/i },
+    { kind: "move", re: /^move\s+(.+?)\s+from\s+(.+?)\s+(?:to|into|onto)\s+(.+)$/i },
+    {
+      kind: "pair",
+      re: /^unblock\s+(.+?)\s+from\s+(.+)$/i,
+      ops: (a, b) => each(a, b, (node, on) => ({ op: "unwait", node, on }))
+    },
+    {
+      kind: "pair",
+      re: /^(.+?)\s+(?:no\s+longer|doesn't|does\s+not|don't|do\s+not|shouldn't|should\s+not|needn't|need\s+not|(?:should\s+|can\s+)?stops?)\s+(?:waits?|waiting|depends?|depending)\s+(?:on|for|upon)\s+(.+)$/i,
+      ops: (a, b) => each(a, b, (node, on) => ({ op: "unwait", node, on }))
+    },
+    {
+      kind: "pair",
+      re: new RegExp(String.raw`^(?:make\s+)?(.+?)\s+${VERB_MODAL}(?:waits?|depends?)\s+(?:on|for|upon)\s+(.+)$`, "i"),
+      ops: (a, b) => each(a, b, (node, on) => ({ op: "wait", node, on }))
+    },
+    {
+      kind: "pair",
+      re: new RegExp(String.raw`^(.+?)\s+${ORDER_VERB}after\s+(.+)$`, "i"),
+      ops: (a, b) => each(a, b, (node, on) => ({ op: "wait", node, on }))
+    },
+    {
+      kind: "pair",
+      re: new RegExp(String.raw`^(.+?)\s+${ORDER_VERB}before\s+(.+)$`, "i"),
+      ops: (a, b) => each(b, a, (node, on) => ({ op: "wait", node, on }))
+    }
+  ];
+});
+
 // ../../packages/shared/src/route/engine.ts
 function seatSlots(atOnce) {
   if (typeof atOnce !== "number" || !Number.isFinite(atOnce))
@@ -7278,6 +7353,26 @@ function draftPrompt(o) {
 ${claim.pack.trim()}
 `;
 }
+function mockPrompt(o) {
+  const base = o.base ?? "main";
+  const lines = [
+    `You are drawing a mock for ${o.item} — "${o.title}"${o.engine ? ` — started by ${o.engine}` : ""}. Nobody is at the keyboard: a person signs the mock before the build gets its nodes.`,
+    "",
+    "- Draw one self-contained HTML file: CSS and JS inline, no other files, nothing loaded from the network. Build it from the repo's real design tokens and components (read them in the code: colors, type, spacing, radii) and data shaped like the real thing.",
+    "- Draw it on the screen the change lives on: find that page or component in this checkout and show it as it is today, with the change in place, so a person can compare it with the product. If the change has no screen of its own, draw the one a person sees it from.",
+    `- Write the HTML only to \`${o.out}\` — that one file, outside this checkout. Write nothing anywhere else.`,
+    `- Change no code: this checkout is \`origin/${base}\`, for reading. Do not edit, create or delete a file in it, and make no branch, commit, push or PR. The engine checks: a checkout left changed, or a commit, fails the run and nothing is attached.`,
+    "- Ask nobody: a mock run cannot park. Where the brief leaves something open, draw the plainest reading and say it in a short note inside the HTML.",
+    "- Once the file is written, stop. The engine reads it and attaches it to the item as its mock, marked as the next version."
+  ];
+  return `${lines.join(`
+`)}
+
+---
+
+${o.pack.trim()}
+`;
+}
 function quote(text) {
   return text.trim().split(`
 `).map((l) => l ? `> ${l}` : ">");
@@ -7542,7 +7637,7 @@ function eventPrompt(o) {
     return reviewPrompt({ ...o, event });
   return ciTwicePrompt({ ...o, event });
 }
-var DEFAULT_SEAT = "\x00default", MAX_SEAT_AT_ONCE = 16, HOLD_DEFAULTS, DRAFT_NODE = "draft", BRANCH_FIELDS, PR_TITLE_FIELDS, ENGINE_MCP_SERVER = "sleds", RUN_TOKEN_ENV = "SLEDS_RUN_TOKEN", NO_RUN_TOKEN = "no run token from SLEDS: this session acts as the seat", SANDBOX_DOMAIN, SANDBOX_DEFAULT_ALLOW, toolName = (name, engineMcp) => engineMcp ? `mcp__${ENGINE_MCP_SERVER}__${name}` : name, ENGINE_MARK = "<!-- sleds:engine -->", VISUAL_PATH, APPROACH_SHAPE, AUTONOMY_SAYS, IRREVERSIBLE = "deleting or migrating data in place; deploying outside the playbook's window; anything that leaves the org (a message to a customer, a publish, a release, an email); spend past the band or the allowance; force-pushing or deleting a branch someone else holds; granting or removing access; changing the brief. When in doubt, it is irreversible.", oneLine = (s, max) => s.replace(/\s+/g, " ").trim().slice(0, max), VERDICT_SHAPE, DECIDER_RULES, codes = (xs) => xs.map((x) => `\`${x}\``).join(", "), RESOLVE_MAX_FILES = 8;
+var DEFAULT_SEAT = "\x00default", MAX_SEAT_AT_ONCE = 16, HOLD_DEFAULTS, DRAFT_NODE = "draft", MOCK_NODE = "mock", BRANCH_FIELDS, PR_TITLE_FIELDS, ENGINE_MCP_SERVER = "sleds", RUN_TOKEN_ENV = "SLEDS_RUN_TOKEN", NO_RUN_TOKEN = "no run token from SLEDS: this session acts as the seat", SANDBOX_DOMAIN, SANDBOX_DEFAULT_ALLOW, toolName = (name, engineMcp) => engineMcp ? `mcp__${ENGINE_MCP_SERVER}__${name}` : name, ENGINE_MARK = "<!-- sleds:engine -->", VISUAL_PATH, APPROACH_SHAPE, AUTONOMY_SAYS, IRREVERSIBLE = "deleting or migrating data in place; deploying outside the playbook's window; anything that leaves the org (a message to a customer, a publish, a release, an email); spend past the band or the allowance; force-pushing or deleting a branch someone else holds; granting or removing access; changing the brief. When in doubt, it is irreversible.", oneLine = (s, max) => s.replace(/\s+/g, " ").trim().slice(0, max), VERDICT_SHAPE, DECIDER_RULES, codes = (xs) => xs.map((x) => `\`${x}\``).join(", "), RESOLVE_MAX_FILES = 8;
 var init_engine = __esm(() => {
   init_prHeader();
   init_route();
@@ -7727,6 +7822,18 @@ var BASE_URL_KEY = "ANTHROPIC_BASE_URL", AUTH_TOKEN_KEY = "ANTHROPIC_AUTH_TOKEN"
     return { ...settings };
   const { [BASE_URL_KEY]: _url, [AUTH_TOKEN_KEY]: _token, ...rest } = settings.env;
   return { ...settings, env: rest };
+}, bareUrl = (u) => u.trim().replace(/[./]+$/, "").toLowerCase(), isSledsProxyEnv = (settings, proxyUrls = []) => {
+  const env = envOf(settings);
+  const url = env[BASE_URL_KEY];
+  const token = env[AUTH_TOKEN_KEY];
+  if (typeof token === "string" && isSeatToken(token.trim()))
+    return true;
+  if (typeof url !== "string")
+    return false;
+  return proxyUrls.some((p) => p !== undefined && bareUrl(p) === bareUrl(url));
+}, hasGatewayEnv = (settings) => {
+  const env = envOf(settings);
+  return BASE_URL_KEY in env || AUTH_TOKEN_KEY in env;
 }, readProxy = (settings) => {
   const env = envOf(settings);
   const url = env[BASE_URL_KEY];
@@ -7734,7 +7841,7 @@ var BASE_URL_KEY = "ANTHROPIC_BASE_URL", AUTH_TOKEN_KEY = "ANTHROPIC_AUTH_TOKEN"
   if (typeof url !== "string" || typeof token !== "string")
     return null;
   return { url, token };
-}, STATUS_LINE_KEY = "statusLine", statusLineEntry = (command) => ({ type: "command", command }), isSledsStatusLine = (value) => isObject5(value) && value.type === "command" && typeof value.command === "string" && /\bstatusline\b/.test(value.command), applyStatusLine = (settings, command) => {
+}, STATUS_LINE_KEY = "statusLine", statusLineEntry = (command) => ({ type: "command", command }), invokesSleds = (command) => /\bsleds\b/.test(command), isSledsStatusLine = (value) => isObject5(value) && value.type === "command" && typeof value.command === "string" && invokesSleds(value.command) && /\bstatusline\b/.test(value.command), applyStatusLine = (settings, command) => {
   const current = settings[STATUS_LINE_KEY];
   const prior = current === undefined || isSledsStatusLine(current) ? undefined : current;
   return { settings: { ...settings, [STATUS_LINE_KEY]: statusLineEntry(command) }, prior };
@@ -7743,11 +7850,12 @@ var BASE_URL_KEY = "ANTHROPIC_BASE_URL", AUTH_TOKEN_KEY = "ANTHROPIC_AUTH_TOKEN"
     return { ...settings };
   const { [STATUS_LINE_KEY]: _ours, ...rest } = settings;
   return prior === undefined ? rest : { ...rest, [STATUS_LINE_KEY]: prior };
-}, HOOKS_KEY = "hooks", NOTIFICATION_EVENT = "Notification", SEAT_EVENT_MATCHER = "quota_auto_resume_fired|quota_auto_resume_stale|quota_auto_resume_disabled", SEAT_EVENT_TIMEOUT_S = 10, isSledsSeatHook = (entry) => {
+}, HOOKS_KEY = "hooks", NOTIFICATION_EVENT = "Notification", SEAT_EVENT_MATCHER = "quota_auto_resume_fired|quota_auto_resume_stale|quota_auto_resume_disabled", SEAT_EVENT_TIMEOUT_S = 10, isSledsHookFor = (sub) => (entry) => {
   if (!isObject5(entry) || !Array.isArray(entry.hooks))
     return false;
-  return entry.hooks.some((h) => isObject5(h) && h.type === "command" && typeof h.command === "string" && /\bseat-event\b/.test(h.command));
-}, seatHookEntry = (command) => ({
+  const re = new RegExp(`\\b${sub}\\b`);
+  return entry.hooks.some((h) => isObject5(h) && h.type === "command" && typeof h.command === "string" && invokesSleds(h.command) && re.test(h.command));
+}, isSledsSeatHook, seatHookEntry = (command) => ({
   matcher: SEAT_EVENT_MATCHER,
   hooks: [{ type: "command", command, timeout: SEAT_EVENT_TIMEOUT_S }]
 }), notificationHooks = (settings) => {
@@ -7778,11 +7886,7 @@ var BASE_URL_KEY = "ANTHROPIC_BASE_URL", AUTH_TOKEN_KEY = "ANTHROPIC_AUTH_TOKEN"
   if (!list.some(isSledsSeatHook))
     return { ...settings };
   return withNotificationHooks(settings, list.filter((e) => !isSledsSeatHook(e)));
-}, hasSeatHook = (settings) => notificationHooks(settings).some(isSledsSeatHook), POST_TOOL_EVENT = "PostToolUse", SPEC_EVENT_MATCHER = "Write|Edit|MultiEdit", SPEC_EVENT_TIMEOUT_S = 5, isSledsSpecHook = (entry) => {
-  if (!isObject5(entry) || !Array.isArray(entry.hooks))
-    return false;
-  return entry.hooks.some((h) => isObject5(h) && h.type === "command" && typeof h.command === "string" && /\bspec-event\b/.test(h.command));
-}, specHookEntry = (command) => ({
+}, hasSeatHook = (settings) => notificationHooks(settings).some(isSledsSeatHook), POST_TOOL_EVENT = "PostToolUse", SPEC_EVENT_MATCHER = "Write|Edit|MultiEdit", SPEC_EVENT_TIMEOUT_S = 5, isSledsSpecHook, specHookEntry = (command) => ({
   matcher: SPEC_EVENT_MATCHER,
   hooks: [{ type: "command", command, timeout: SPEC_EVENT_TIMEOUT_S }]
 }), eventHooks = (settings, event) => {
@@ -7813,11 +7917,7 @@ var BASE_URL_KEY = "ANTHROPIC_BASE_URL", AUTH_TOKEN_KEY = "ANTHROPIC_AUTH_TOKEN"
   if (!list.some(isSledsSpecHook))
     return { ...settings };
   return withEventHooks(settings, POST_TOOL_EVENT, list.filter((e) => !isSledsSpecHook(e)));
-}, hasSpecHook = (settings) => eventHooks(settings, POST_TOOL_EVENT).some(isSledsSpecHook), PROMPT_EVENT = "UserPromptSubmit", PROMPT_EVENT_TIMEOUT_S = 3, isSledsPromptHook = (entry) => {
-  if (!isObject5(entry) || !Array.isArray(entry.hooks))
-    return false;
-  return entry.hooks.some((h) => isObject5(h) && h.type === "command" && typeof h.command === "string" && /\bprompt-event\b/.test(h.command));
-}, promptHookEntry = (command) => ({
+}, hasSpecHook = (settings) => eventHooks(settings, POST_TOOL_EVENT).some(isSledsSpecHook), PROMPT_EVENT = "UserPromptSubmit", PROMPT_EVENT_TIMEOUT_S = 3, isSledsPromptHook, promptHookEntry = (command) => ({
   hooks: [{ type: "command", command, timeout: PROMPT_EVENT_TIMEOUT_S }]
 }), applyPromptHook = (settings, command) => {
   const list = eventHooks(settings, PROMPT_EVENT);
@@ -7830,12 +7930,7 @@ var BASE_URL_KEY = "ANTHROPIC_BASE_URL", AUTH_TOKEN_KEY = "ANTHROPIC_AUTH_TOKEN"
   if (!list.some(isSledsPromptHook))
     return { ...settings };
   return withEventHooks(settings, PROMPT_EVENT, list.filter((e) => !isSledsPromptHook(e)));
-}, hasPromptHook = (settings) => eventHooks(settings, PROMPT_EVENT).some(isSledsPromptHook), SESSION_EVENT = "SessionStart", SESSION_EVENT_TIMEOUT_S = 3, STOP_EVENT = "Stop", STOP_EVENT_TIMEOUT_S = 3, isSledsHookFor = (sub) => (entry) => {
-  if (!isObject5(entry) || !Array.isArray(entry.hooks))
-    return false;
-  const re = new RegExp(`\\b${sub}\\b`);
-  return entry.hooks.some((h) => isObject5(h) && h.type === "command" && typeof h.command === "string" && re.test(h.command));
-}, isSledsSessionHook, isSledsStopHook, sessionHookEntry = (command) => ({
+}, hasPromptHook = (settings) => eventHooks(settings, PROMPT_EVENT).some(isSledsPromptHook), SESSION_EVENT = "SessionStart", SESSION_EVENT_TIMEOUT_S = 3, STOP_EVENT = "Stop", STOP_EVENT_TIMEOUT_S = 3, isSledsSessionHook, isSledsStopHook, sessionHookEntry = (command) => ({
   hooks: [{ type: "command", command, timeout: SESSION_EVENT_TIMEOUT_S }]
 }), stopHookEntry = (command) => ({
   hooks: [{ type: "command", command, timeout: STOP_EVENT_TIMEOUT_S }]
@@ -7890,6 +7985,9 @@ var BASE_URL_KEY = "ANTHROPIC_BASE_URL", AUTH_TOKEN_KEY = "ANTHROPIC_AUTH_TOKEN"
 var init_settings = __esm(() => {
   LEADING_EXPORTS = /^(?:[A-Za-z_][A-Za-z0-9_]*=(?:'[^']*'|\S+)\s+)*/;
   ORG_EXPORT = /(?:^|\s)SLEDS_ORG=(?:'[^']*'|\S+)(?=\s)/;
+  isSledsSeatHook = isSledsHookFor("seat-event");
+  isSledsSpecHook = isSledsHookFor("spec-event");
+  isSledsPromptHook = isSledsHookFor("prompt-event");
   isSledsSessionHook = isSledsHookFor("session-event");
   isSledsStopHook = isSledsHookFor("stop-event");
   isSledsPermissionHook = isSledsHookFor("permission-event");
@@ -7946,6 +8044,9 @@ var configDir = (home, env = process.env) => {
     cfg.schedule = schedule;
   if (raw.priorStatusLine !== undefined)
     cfg.priorStatusLine = raw.priorStatusLine;
+  const priorGatewayEnv = parsePriorEnv(raw.priorGatewayEnv);
+  if (priorGatewayEnv !== undefined)
+    cfg.priorGatewayEnv = priorGatewayEnv;
   if (raw.wiring === "seat-first" || raw.wiring === "proxy-always")
     cfg.wiring = raw.wiring;
   if (raw.agentKind === "claude-code" || raw.agentKind === "codex")
@@ -8114,9 +8215,11 @@ var init_config = __esm(() => {
 });
 
 // src/meter.ts
+import { createHash } from "node:crypto";
 import { existsSync as existsSync6, mkdirSync as mkdirSync6, readFileSync as readFileSync6, renameSync as renameSync3, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join6 } from "node:path";
-var METER_CACHE_TTL_MS = 1e4, METER_TIMEOUT_MS = 1500, isObject7 = (v) => typeof v === "object" && v !== null && !Array.isArray(v), num4 = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined, meterCachePath = (home) => join6(configDir(home), "meter.json"), readMeterCache = (home, now) => {
+var METER_CACHE_TTL_MS = 1e4, METER_TIMEOUT_MS = 1500, isObject7 = (v) => typeof v === "object" && v !== null && !Array.isArray(v), num4 = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined, meterCachePath = (home) => join6(configDir(home), "meter.json"), meterCacheKey = (src) => createHash("sha256").update(`${src.proxyUrl}
+${src.token}`).digest("hex").slice(0, 16), readMeterCache = (home, now, source) => {
   const p = meterCachePath(home);
   if (!existsSync6(p))
     return null;
@@ -8124,6 +8227,8 @@ var METER_CACHE_TTL_MS = 1e4, METER_TIMEOUT_MS = 1500, isObject7 = (v) => typeof
     const raw = JSON.parse(readFileSync6(p, "utf8"));
     if (!isObject7(raw))
       return null;
+    if (source !== undefined && raw.source !== source)
+      return null;
     const fetchedAt = num4(raw.fetchedAt);
     if (fetchedAt === undefined || now - fetchedAt >= METER_CACHE_TTL_MS || fetchedAt > now)
       return null;
@@ -8131,12 +8236,12 @@ var METER_CACHE_TTL_MS = 1e4, METER_TIMEOUT_MS = 1500, isObject7 = (v) => typeof
   } catch {
     return null;
   }
-}, writeMeterCache = (home, meter, now) => {
+}, writeMeterCache = (home, meter, now, source) => {
   const dir = configDir(home);
   mkdirSync6(dir, { recursive: true, mode: 448 });
   const target = meterCachePath(home);
   const tmp = `${target}.${process.pid}.tmp`;
-  const file = { fetchedAt: now, meter };
+  const file = { fetchedAt: now, meter, ...source ? { source } : {} };
   writeFileSync6(tmp, `${JSON.stringify(file)}
 `, { mode: 384 });
   renameSync3(tmp, target);
@@ -8167,16 +8272,17 @@ var METER_CACHE_TTL_MS = 1e4, METER_TIMEOUT_MS = 1500, isObject7 = (v) => typeof
   return proxyUrl && token ? { proxyUrl, token } : null;
 }, loadMeter = async (o) => {
   const now = o.now ?? Date.now();
-  const cached = readMeterCache(o.home, now);
-  if (cached)
-    return cached;
-  const src = meterSource(o.home);
+  const src = meterSource(o.home, undefined, { env: o.env });
   if (!src)
     return null;
+  const key = meterCacheKey(src);
+  const cached = readMeterCache(o.home, now, key);
+  if (cached)
+    return cached;
   const fresh = await fetchMeter({ ...src, fetchFn: o.fetchFn, timeoutMs: o.timeoutMs });
   if (fresh) {
     try {
-      writeMeterCache(o.home, fresh, now);
+      writeMeterCache(o.home, fresh, now, key);
     } catch {}
   }
   return fresh;
@@ -8241,8 +8347,11 @@ var init_src = __esm(() => {
   init_newrelic();
   init_musher();
   init_route();
+  init_handoff();
   init_doneChecks();
   init_routeFix();
+  init_reshape();
+  init_say();
   init_engine();
   init_sources();
   init_otlp();
@@ -8640,7 +8749,15 @@ function parseRun(v) {
     item,
     node,
     title: typeof title === "string" ? title : "",
-    ...v.kind === "draft" ? { kind: "draft" } : {},
+    ...v.kind === "draft" || v.kind === "mock" ? { kind: v.kind } : {},
+    ...isObject8(v.mock) && typeof v.mock.out === "string" && typeof v.mock.base === "string" ? {
+      mock: {
+        out: v.mock.out,
+        base: v.mock.base,
+        ...typeof v.mock.model === "string" ? { model: v.mock.model } : {},
+        ...typeof v.mock.drawn === "string" ? { drawn: v.mock.drawn } : {}
+      }
+    } : {},
     ...typeof v.seatId === "string" ? { seatId: v.seatId } : {},
     ...typeof v.runId === "string" ? { runId: v.runId } : {},
     ...typeof v.leaseUntil === "number" ? { leaseUntil: v.leaseUntil } : {},
@@ -8688,6 +8805,7 @@ function parseRun(v) {
           }
         } : {},
         ...v.pr.clear === true ? { clear: true } : {},
+        ...v.pr.queued === true ? { queued: true } : {},
         ...typeof v.pr.ci === "string" ? { ci: v.pr.ci } : {},
         ...typeof v.pr.review === "string" ? { review: v.pr.review } : {},
         ...typeof v.pr.posted === "string" ? { posted: v.pr.posted } : {},
@@ -8698,13 +8816,15 @@ function parseRun(v) {
         ...conflicted ? { conflicted } : {},
         ...typeof v.pr.reviewed === "string" ? { reviewed: v.pr.reviewed } : {},
         ...typeof v.pr.look === "string" ? { look: v.pr.look } : {},
+        ...typeof v.pr.instructAt === "number" ? { instructAt: v.pr.instructAt } : {},
         ...isObject8(v.pr.instructed) && Array.isArray(v.pr.instructed.ids) && (v.pr.instructed.how === "told" || v.pr.instructed.how === "restarted") ? {
           instructed: {
             ids: v.pr.instructed.ids.filter((x) => typeof x === "string"),
             how: v.pr.instructed.how
           }
         } : {},
-        ...typeof v.pr.findings === "string" ? { findings: v.pr.findings } : {}
+        ...typeof v.pr.findings === "string" ? { findings: v.pr.findings } : {},
+        ...v.pr.live === true ? { live: true } : {}
       }
     } : {}
   };
@@ -8996,8 +9116,11 @@ init_sentry();
 init_newrelic();
 init_musher();
 init_route();
+init_handoff();
 init_doneChecks();
 init_routeFix();
+init_reshape();
+init_say();
 init_engine();
 init_sources();
 init_otlp();
@@ -9276,6 +9399,14 @@ import { basename, dirname as dirname5, join as join7 } from "node:path";
 var MUSHER_LABEL = "ai.sleds.musher";
 var MUSHER_INTERVAL_S = 300;
 var DEFAULT_PERMISSION_MODE = "acceptEdits";
+var PERMISSION_MODES = [
+  "acceptEdits",
+  "auto",
+  "bypassPermissions",
+  "default",
+  "dontAsk",
+  "plan"
+];
 var DEFAULT_TIMEOUT_MINUTES = 90;
 var SUMMARY_MAX = 2000;
 var musherLabel = (env = process.env) => {
@@ -9394,11 +9525,12 @@ var defaultExecCapture = (cmd, args, o) => {
     stdio: ["ignore", "pipe", "pipe"],
     env: { ...process.env, SLEDS_MUSHER: "1" }
   });
+  const timedOut = r.error?.code === "ETIMEDOUT";
   return {
     stdout: r.stdout ?? "",
     stderr: r.stderr ?? "",
     status: r.status,
-    ...r.error ? { error: r.error.message } : {}
+    ...timedOut ? { timedOut } : r.error ? { error: r.error.message } : {}
   };
 };
 var musherClient = (o) => {
@@ -9474,8 +9606,10 @@ var runJob = async (o) => {
   const r = exec(o.claudePath, args, { cwd, timeoutMs: o.timeoutMs });
   const durationMs = Date.now() - t0;
   const result = r.error ? { ok: false, summary: `could not run ${o.claudePath}: ${r.error}` } : parseClaudeOutput(r.stdout, r.status);
-  if (!r.error && r.status === null)
+  if (!r.error && (r.timedOut || r.status === null)) {
+    result.ok = false;
     result.summary = `timed out after ${Math.round(o.timeoutMs / 60000)} min. ${result.summary}`.trim();
+  }
   const outputs = collectOutputs(gitNewCommits(cwd, headBefore, gitHead(cwd, exec), exec), result.summary);
   await o.client.finish({
     jobId: o.job.jobId,
@@ -9910,8 +10044,32 @@ var markWarned = (state, events) => {
   }
   return { ...state, warned, ...lastWallResetsAt !== undefined ? { lastWallResetsAt } : {} };
 };
-var CREDITS_PATTERN = /out of usage credits|cc_cli_limit_message/i;
-var creditsHitIn = (text) => CREDITS_PATTERN.test(text);
+var CREDITS_LINE = /^\s*you(?:'|’)re out of usage credits\b/i;
+var entryText = (v) => {
+  if (typeof v === "string")
+    return v;
+  if (!Array.isArray(v))
+    return "";
+  return v.map((b) => isObject9(b) && b.type === "text" && typeof b.text === "string" ? b.text : "").join(`
+`);
+};
+var isCreditsLine = (line) => {
+  if (!line.includes("usage credits"))
+    return false;
+  let raw;
+  try {
+    raw = JSON.parse(line);
+  } catch {
+    return false;
+  }
+  if (!isObject9(raw))
+    return false;
+  const message = isObject9(raw.message) ? raw.message : undefined;
+  const texts = raw.type === "system" ? [entryText(raw.content), entryText(raw.text)] : raw.type === "assistant" && raw.isApiErrorMessage === true ? [entryText(message?.content)] : [];
+  return texts.some((t) => CREDITS_LINE.test(t));
+};
+var creditsHitIn = (text) => text.split(`
+`).some(isCreditsLine);
 var transcriptPathFromStdin = (text) => {
   try {
     const raw = JSON.parse(text.trim());
@@ -9934,12 +10092,14 @@ var scanTranscriptForCredits = (path, prior) => {
     try {
       const buf = Buffer.alloc(size - start);
       readSync(fd, buf, 0, buf.length, start);
-      const hit = creditsHitIn(buf.toString("utf8"));
+      const lastNewline = buf.lastIndexOf(10);
+      const whole = lastNewline >= 0 ? buf.subarray(0, lastNewline + 1) : Buffer.alloc(0);
+      const hit = creditsHitIn(whole.toString("utf8"));
       return {
         hit,
         next: {
           path,
-          offset: size,
+          offset: lastNewline >= 0 ? start + lastNewline + 1 : start,
           ...hit ? { hitAt: Date.now() } : prior?.hitAt ? { hitAt: prior.hitAt } : {}
         }
       };
@@ -10033,10 +10193,7 @@ var switchOff = (settings, prior) => {
   }
   return { ...stripped, env };
 };
-var isPointedAtProxy = (settings) => {
-  const env = envOf2(settings);
-  return BASE_URL_KEY in env || AUTH_TOKEN_KEY in env;
-};
+var envToRestore = (priors, proxyUrls) => priors.find((p) => p !== undefined && !isSledsProxyEnv({ env: p }, proxyUrls)) ?? {};
 var RELATIVE = /^\+(?:(\d+)h)?(?:(\d+)m)?$/;
 var parseUntilReset = (input, nowMs) => {
   const trimmed = input.trim();
@@ -10274,7 +10431,7 @@ var deployCmd = async (o) => {
     return 0;
   }
   const why = typeof r.json?.error === "string" ? r.json.error : `HTTP ${r.status}`;
-  if (r.status >= 400 && r.status < 500) {
+  if (r.status >= 400 && r.status < 500 && r.status !== 429 && r.status !== 408) {
     error(r.status === 401 ? `SLEDS refused the deploy token (${why})` : why);
     return 1;
   }
@@ -10290,13 +10447,13 @@ import {
   existsSync as existsSync21,
   lstatSync as lstatSync2,
   mkdtempSync,
-  readFileSync as readFileSync19,
+  readFileSync as readFileSync20,
   readlinkSync as readlinkSync4,
   rmSync as rmSync13,
   writeFileSync as writeFileSync19
 } from "node:fs";
-import { tmpdir, userInfo as userInfo2 } from "node:os";
-import { delimiter as delimiter3, dirname as dirname17, join as join26, resolve as resolve9 } from "node:path";
+import { tmpdir as tmpdir2, userInfo as userInfo2 } from "node:os";
+import { delimiter as delimiter3, dirname as dirname18, join as join27, resolve as resolve10 } from "node:path";
 
 // src/agentMcp.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
@@ -10402,6 +10559,7 @@ async function offerMcp2(o) {
 }
 
 // src/channels/cockpit.ts
+import { execFile } from "node:child_process";
 var detectCockpit = (env) => {
   if (env.CMUX_SOCKET_PATH || env.CMUX_WORKSPACE_ID || env.CMUX_SURFACE_ID) {
     const c = { kind: "cmux" };
@@ -10650,23 +10808,19 @@ var fetchFeed = async (o, now) => {
     return null;
   }
 };
+var execCockpit = (bin, args, timeoutMs) => new Promise((resolve) => {
+  try {
+    const child = execFile(bin, [...args], { timeout: timeoutMs }, () => resolve());
+    child.stdin?.end();
+  } catch {
+    resolve();
+  }
+});
 var runCockpit = async (cockpit, argv, opts = {}) => {
-  const spawn = opts.spawn ?? Bun.spawn;
+  const exec = opts.exec ?? execCockpit;
   const timeoutMs = opts.timeoutMs ?? 300;
   const bin = cockpit.kind === "cmux" ? "cmux" : cockpit.kind;
-  await Promise.allSettled(argv.map(async (a) => {
-    const proc = spawn([bin, ...a], { stdout: "ignore", stderr: "ignore", stdin: "ignore" });
-    const timer = setTimeout(() => {
-      try {
-        proc.kill();
-      } catch {}
-    }, timeoutMs);
-    try {
-      await proc.exited;
-    } finally {
-      clearTimeout(timer);
-    }
-  }));
+  await Promise.allSettled(argv.map((a) => exec(bin, a, timeoutMs)));
 };
 
 // src/commands/doctor.ts
@@ -10678,7 +10832,14 @@ import { join as join11 } from "node:path";
 var API_KEY_VAR = "ANTHROPIC_API_KEY";
 var SEAT_TOKEN_VAR = "CLAUDE_CODE_OAUTH_TOKEN";
 function namesVar(text, name) {
-  return new RegExp(`^\\s*(?:export\\s+)?${name}\\s*=\\s*\\S`, "m").test(text);
+  const assign = new RegExp(`^[ \\t]*(?:export[ \\t]+)?${name}[ \\t]*=(.*)$`);
+  return text.split(/\r?\n/).some((line) => {
+    const value = assign.exec(line)?.[1]?.trim();
+    if (!value)
+      return false;
+    const quoted = /^(["'])(.*)\1$/.exec(value);
+    return (quoted ? (quoted[2] ?? "").trim() : value) !== "";
+  });
 }
 function loginPath(env, home = homedir()) {
   return join11(env.CLAUDE_CONFIG_DIR?.trim() || join11(home, ".claude"), ".credentials.json");
@@ -10758,12 +10919,18 @@ var readCmuxPassword = (exec) => {
     return null;
   return r.stdout.trim() || null;
 };
+var securityQuote = (s) => `"${s.replace(/[\\"]/g, (c) => `\\${c}`)}"`;
 var writeCmuxPassword = (exec, pw) => {
-  const r = exec("security", ["add-generic-password", "-U", ...item, "-w", pw]);
-  if (r.status !== 0) {
-    const why = r.stderr.split(pw).join("…").trim() || `exit ${r.status}`;
-    throw new Error(`could not store the cmux password in the Keychain: ${why}`);
-  }
+  if (/[\r\n\0]/.test(pw))
+    throw new Error("could not store the cmux password in the Keychain: it has a line break");
+  const command = ["add-generic-password", "-U", ...item, "-w"].join(" ");
+  const r = exec("security", ["-i"], { input: `${command} ${securityQuote(pw)}
+` });
+  const why = r.stderr.split(pw).join("…").trim();
+  if (r.status !== 0)
+    throw new Error(`could not store the cmux password in the Keychain: ${why || `exit ${r.status}`}`);
+  if (readCmuxPassword(exec) !== pw.trim())
+    throw new Error(`could not store the cmux password in the Keychain: ${why || "it did not read back"}`);
 };
 var clearCmuxPassword = (exec) => exec("security", ["delete-generic-password", ...item]).status === 0;
 
@@ -11595,14 +11762,14 @@ import {
   appendFileSync as appendFileSync2,
   chmodSync as chmodSync5,
   mkdirSync as mkdirSync18,
-  readFileSync as readFileSync15,
+  readFileSync as readFileSync16,
   existsSync as realExists,
   rmSync as rmSync10,
-  statSync as statSync5,
+  statSync as statSync6,
   writeFileSync as writeFileSync16
 } from "node:fs";
-import { hostname as hostname2, userInfo } from "node:os";
-import { dirname as dirname15, isAbsolute as isAbsolute3, join as join24, resolve as resolve8 } from "node:path";
+import { hostname as hostname2, tmpdir, userInfo } from "node:os";
+import { dirname as dirname16, isAbsolute as isAbsolute3, join as join25, resolve as resolve9 } from "node:path";
 
 // src/engine/beat.ts
 var BEAT_EVERY_MS = 60000;
@@ -11614,7 +11781,7 @@ function beatBody(state, flags, host = {}, cap = {}) {
     name: flags.name,
     os: host.os ?? process.platform,
     runner: flags.runner,
-    version: host.version ?? "0.1.60" ?? "dev",
+    version: host.version ?? "0.1.61" ?? "dev",
     running: live.length,
     items: live.slice(0, BEAT_ITEMS).map((r) => `${r.item}/${r.node}`),
     ...cap.atOnce !== undefined ? { atOnce: cap.atOnce } : {},
@@ -12054,17 +12221,19 @@ function parsePrView(stdout) {
     const name = String(r.name ?? r.context ?? "");
     if (!name)
       continue;
-    latest.set(name, {
+    latest.set(`${String(r.workflowName ?? "")}\x00${name}`, {
+      name,
       status: String(r.status ?? "COMPLETED"),
       conclusion: String(r.conclusion ?? r.state ?? "")
     });
   }
   const failing = [];
   let pending = 0;
-  for (const [name, c] of latest) {
-    if (FAILED.has(c.conclusion))
-      failing.push(name);
-    else if (c.status !== "COMPLETED" && c.conclusion !== "SUCCESS")
+  for (const c of latest.values()) {
+    if (FAILED.has(c.conclusion)) {
+      if (!failing.includes(c.name))
+        failing.push(c.name);
+    } else if (c.status !== "COMPLETED" && c.conclusion !== "SUCCESS")
       pending++;
     else if (c.conclusion === "PENDING" || c.conclusion === "EXPECTED")
       pending++;
@@ -12283,6 +12452,7 @@ function prComment(exec, repoPath, url, body) {
 
 // src/engine/jiraSource.ts
 var JIRA_LOG_MAX = 1000;
+var JIRA_MAX_PAGES = 20;
 function nodeKeyOf(summary) {
   return /^\s*\[([A-Za-z]{1,3})\]/.exec(summary)?.[1]?.toUpperCase();
 }
@@ -12428,10 +12598,20 @@ function jiraSource(o) {
   };
   const read = async () => {
     const jql = encodeURIComponent(`parent = ${epic} ORDER BY key`);
-    const r = await call(`/rest/api/3/search/jql?jql=${jql}&fields=summary,description,status,issuelinks&maxResults=100`);
-    if (!r.ok)
-      throw new Error(`Jira: could not read ${epic}'s children — ${errorOf(r)}`);
-    const issues = Array.isArray(r.json?.issues) ? r.json.issues.filter(isObject8) : [];
+    const issues = [];
+    let token;
+    for (let page = 0;; page++) {
+      if (page >= JIRA_MAX_PAGES)
+        throw new Error(`Jira: ${epic} has more than ${JIRA_MAX_PAGES} pages of children`);
+      const r = await call(`/rest/api/3/search/jql?jql=${jql}&fields=summary,description,status,issuelinks&maxResults=100${token ? `&nextPageToken=${encodeURIComponent(token)}` : ""}`);
+      if (!r.ok)
+        throw new Error(`Jira: could not read ${epic}'s children — ${errorOf(r)}`);
+      if (Array.isArray(r.json?.issues))
+        issues.push(...r.json.issues.filter(isObject8));
+      token = str6(r.json?.nextPageToken);
+      if (!token || r.json?.isLast === true)
+        break;
+    }
     const nodes = issues.map(jiraNode);
     byNode.clear();
     for (const n of nodes)
@@ -12763,6 +12943,26 @@ function instructionsOf(s) {
   const i = s;
   return i && typeof i.instructions === "function" ? s : null;
 }
+function mocksOf(s) {
+  const m = s;
+  return m && typeof m.finishMock === "function" && typeof m.failMock === "function" ? s : null;
+}
+function mockRunOf(row) {
+  const m = isObject8(row.mockRun) ? row.mockRun : {};
+  return { asked: isObject8(m.asked), running: isObject8(m.running) };
+}
+function askedMocks(r) {
+  const mine = Array.isArray(r.mine) ? r.mine.filter(isObject8) : [];
+  return mine.filter((row) => {
+    const m = mockRunOf(row);
+    return m.asked && !m.running;
+  });
+}
+function mockBandText(b) {
+  const lo = num5(b.lowMin);
+  const hi = num5(b.highMin);
+  return lo !== undefined && hi !== undefined ? `${lo}–${hi} min` : undefined;
+}
 function instructionsFrom(waiting) {
   if (!Array.isArray(waiting))
     return [];
@@ -13049,6 +13249,8 @@ function sledRunning(r) {
     const route = row.route;
     if (isObject8(route) && route.drafting === true)
       running++;
+    if (mockRunOf(row).running)
+      running++;
     if (!isObject8(route) || !isObject8(route.armed))
       continue;
     running += keysIn(isObject8(route.states) ? route.states : {}, "running").length;
@@ -13084,14 +13286,12 @@ function routeText(route, states) {
 }
 function sledsSource(client, o) {
   const routeOf = (q) => client.get(`/proxy/route?q=${encodeURIComponent(q)}`);
-  async function pickup(sled, drafted) {
+  const mockRefused = new Map;
+  async function pickup(sled, drafted, profile) {
     const engine = o.engine;
-    const profile = await readProfile(client);
-    if (profile?.pickup !== "auto")
+    if (!autoHere(profile))
       return null;
-    if (profile.engine && !sameEngine(profile.engine, engine))
-      return null;
-    const atOnce = (o.atOnce ?? profile.atOnce ?? 1) - drafted;
+    const atOnce = (o.atOnce ?? profile?.atOnce ?? 1) - drafted;
     const row = nextPickup(sled, { atOnce, engine });
     if (!row)
       return null;
@@ -13171,8 +13371,94 @@ function sledsSource(client, o) {
     };
     return { item, ready: [], running: [], landed: false, seatIds: [], draft: { claim, why } };
   }
+  function autoHere(profile) {
+    if (profile?.pickup !== "auto")
+      return false;
+    return !profile.engine || sameEngine(profile.engine, o.engine);
+  }
+  async function mocks(sled, held, profile) {
+    const waiting = askedMocks(sled);
+    if (waiting.length === 0 || !autoHere(profile))
+      return [];
+    let room = (o.atOnce ?? profile?.atOnce ?? 1) - sledRunning(sled) - held;
+    const out = [];
+    for (const row of waiting) {
+      if (room <= 0)
+        break;
+      const claim = await takeMock(row);
+      if (!claim)
+        continue;
+      out.push(claim);
+      room--;
+    }
+    return out;
+  }
+  async function takeMock(row) {
+    const project = str6(row.project) ?? str6(row.key);
+    if (!project)
+      return null;
+    const item = str6(row.key) ?? project;
+    const runner = typeof o.runner === "function" ? o.runner() : o.runner;
+    const r = await client.postFull("/proxy/mock", {
+      project,
+      take: true,
+      engine: o.engine,
+      ...runner ? { runner } : {},
+      ...o.leaseMin !== undefined ? { leaseMin: o.leaseMin } : {}
+    });
+    if (!r || r.status >= 300 || !r.json || r.json.ok === false || !str6(r.json.runId)) {
+      const why = r ? serverMessage(r) : UNREACHABLE3;
+      if (mockRefused.get(item) !== why)
+        o.log?.(`Pickup: Auto could not take ${item}'s mock — ${why}`);
+      mockRefused.set(item, why);
+      return null;
+    }
+    mockRefused.delete(item);
+    const j = r.json;
+    const key = str6(j.key) ?? item;
+    const band = isObject8(j.band) ? mockBandText(j.band) : undefined;
+    o.log?.(`Pickup: Auto is drawing ${key}'s mock — a no-code session${band ? `, sized ${band}` : ""}`);
+    const leaseUntil = num5(j.leaseUntil);
+    return {
+      item: key,
+      node: MOCK_NODE,
+      title: str6(j.title) ?? key,
+      pack: str6(j.pack) ?? "",
+      repos: strings(j.repos),
+      kind: "mock",
+      runId: str6(j.runId),
+      ...leaseUntil !== undefined ? { leaseUntil } : {},
+      ...str6(j.seatId) ? { seatId: str6(j.seatId) } : {},
+      ...str6(j.runToken) ? { runToken: str6(j.runToken) } : {}
+    };
+  }
+  async function postMock(body, what) {
+    const r = await client.postFull("/proxy/mock", body);
+    if (!r)
+      throw new Error(`${UNREACHABLE3} — ${what} not recorded`);
+    if (r.status < 300 && r.json?.ok !== false)
+      return { ok: true };
+    if (r.status === 401 || r.status === 403 || r.status === 404 && !r.json)
+      throw new SeatTokenError(r.status);
+    if (r.status === 409)
+      return { gone: serverMessage(r) };
+    if (r.status === 400 || r.status === 413)
+      return { refused: serverMessage(r) };
+    throw new Error(`${what}: ${serverMessage(r)}`);
+  }
+  async function failMock(claim, log, engine) {
+    if (!claim.runId)
+      return { gone: "no run" };
+    return postMock({ runId: claim.runId, engine, fail: { log: log.slice(-FAIL_LOG_MAX) } }, `${claim.item}/${claim.node} fail`);
+  }
   return {
     name: "sleds",
+    async finishMock(claim, html, f) {
+      if (!claim.runId)
+        return { gone: "no run" };
+      return postMock({ runId: claim.runId, engine: f.engine, html, ...f.model ? { model: f.model } : {} }, `${claim.item}/${claim.node} mock`);
+    },
+    failMock,
     async read() {
       if (o.only) {
         const q = o.only;
@@ -13183,6 +13469,11 @@ function sledsSource(client, o) {
       const r = await readOrSay(client, "/proxy/sled", "the sled");
       const items = sledItems(r, o.armedOnly === true, o.engine);
       if (o.armedOnly && o.engine) {
+        let profileRead;
+        const profileNow = () => {
+          profileRead ??= readProfile(client);
+          return profileRead;
+        };
         const mine = Array.isArray(r.mine) ? r.mine.filter(isObject8) : [];
         for (const row of mine) {
           const route = row.route;
@@ -13197,7 +13488,7 @@ function sledsSource(client, o) {
         const waiting = armedDrafts(r, o.engine);
         let drafted = 0;
         if (waiting.length > 0) {
-          const cap = o.atOnce ?? (await readProfile(client))?.atOnce ?? 1;
+          const cap = o.atOnce ?? (await profileNow())?.atOnce ?? 1;
           let room = cap - sledRunning(r);
           for (const row of waiting) {
             const item = str6(row.key) ?? String(row.project);
@@ -13215,7 +13506,22 @@ function sledsSource(client, o) {
             }
           }
         }
-        const picked = await pickup(r, drafted);
+        const asked = askedMocks(r).length > 0 ? await mocks(r, drafted, await profileNow()) : [];
+        for (const claim of asked) {
+          const it = items.find((x) => x.item === claim.item);
+          if (it)
+            it.mock = { claim };
+          else
+            items.push({
+              item: claim.item,
+              ready: [],
+              running: [],
+              landed: false,
+              seatIds: [],
+              mock: { claim }
+            });
+        }
+        const picked = await pickup(r, drafted + asked.length, await profileNow());
         if (picked)
           items.push(picked);
       }
@@ -13283,6 +13589,8 @@ function sledsSource(client, o) {
       });
       if (r?.status !== 409)
         return "running";
+      if (claim.kind === "mock")
+        return "lost";
       let route;
       try {
         route = await routeOf(claim.item);
@@ -13308,6 +13616,15 @@ function sledsSource(client, o) {
       return "lost";
     },
     async report(claim, outcome, by) {
+      if (claim.kind === "mock") {
+        if (outcome.kind === "pr" || outcome.kind === "merged")
+          return;
+        const log = outcome.kind === "park" ? outcome.question : outcome.kind === "release" ? `released: ${outcome.why}` : outcome.log;
+        const r = await failMock(claim, log, by);
+        if ("refused" in r)
+          throw new ReportRefusedError(400, `${claim.item}/${claim.node} fail: ${r.refused}`, true);
+        return;
+      }
       let path;
       let body;
       if (outcome.kind === "pr" || outcome.kind === "merged") {
@@ -13823,6 +14140,24 @@ function fastForwardUntouched(exec, path, base, log) {
 var INSTALL_TIMEOUT_MS = 15 * 60000;
 var MANAGERS = new Set(["pnpm", "npm", "yarn", "bun"]);
 var INSTALL_VERBS = new Set(["install", "i", "ci"]);
+var INSTALL_FLAGS = new Set([
+  "--frozen-lockfile",
+  "--immutable",
+  "--prefer-offline",
+  "--offline",
+  "--ignore-scripts",
+  "--prod",
+  "--production",
+  "--no-optional",
+  "--no-audit",
+  "--no-fund",
+  "--non-interactive",
+  "--silent",
+  "--reporter=silent",
+  "--reporter=append-only",
+  "--loglevel=error",
+  "--loglevel=warn"
+]);
 function installArgv(command) {
   const line = command?.trim().replace(/^`|`$/g, "") ?? "";
   if (!line || /[;&|<>$`()\n]/.test(line))
@@ -13838,7 +14173,7 @@ function installArgv(command) {
     rest = argv.slice(2);
   else
     return null;
-  return rest.every((a) => a.startsWith("-")) ? argv : null;
+  return rest.every((a) => INSTALL_FLAGS.has(a)) ? argv : null;
 }
 function lockfileInstall(path, exists) {
   if (exists(join17(path, "pnpm-lock.yaml")))
@@ -14047,6 +14382,7 @@ function mcpConfigsOf(state) {
 }
 async function tick(deps) {
   deps.setupNoted ??= new Set;
+  deps.noClone ??= new Map;
   const made = new Set(mcpConfigsOf(deps.readState()));
   const write = deps.writeMcpConfig;
   const d = write ? {
@@ -14136,6 +14472,11 @@ async function tickOnce(d) {
         keep.push(run);
       continue;
     }
+    if (run.kind === "mock") {
+      if (await settleMock(d, run, claim, runner, finished))
+        keep.push(run);
+      continue;
+    }
     if (run.parked) {
       if (liveAnswerer(run) && await settleAnswerer(d, run) === "released")
         continue;
@@ -14208,6 +14549,7 @@ async function tickOnce(d) {
       try {
         await d.source.report(claim, outcome, d.engine);
         finished.push({ item: run.item, node: run.node, outcome });
+        endNodeSession(d, runner, run.handle, run.repoPath, ref(run));
       } catch (e) {
         d.log(`${ref(run)}: exited with no PR; the fail report failed, retrying next tick: ${message(e)}`);
         keep.push(run);
@@ -14240,10 +14582,11 @@ async function tickOnce(d) {
         run.seenTicks = (run.seenTicks ?? 0) + 1;
         if (!ghDown) {
           const quiet = now - (run.seenAt ?? run.startedAt);
+          const provider = providerFailure(shown);
           if (quiet >= PROVIDER_RETRY_MIN * 60000)
-            failing = providerFailure(shown);
-          asked = !failing && run.seenTicks >= STILL_TICKS && !providerFailure(shown) && askedAndStopped(shown);
-          idle = !failing && (asked || quiet >= d.idleMin * 60000);
+            failing = provider;
+          asked = !provider && run.seenTicks >= STILL_TICKS && askedAndStopped(shown);
+          idle = !provider && (asked || quiet >= d.idleMin * 60000);
         }
       }
     }
@@ -14263,6 +14606,11 @@ async function tickOnce(d) {
         continue;
       }
       if (beat === "done") {
+        if (ghDown) {
+          d.log(`${ref(run)}: moved on, but its PR is not seen yet — kept until GitHub answers`);
+          keep.push(run);
+          continue;
+        }
         d.log(`${ref(run)}: moved on without the engine (PR or landed) — the session is left open (${runner.watchHint(run.handle)})`);
         continue;
       }
@@ -14374,6 +14722,9 @@ async function tickOnce(d) {
   for (const it of items)
     if (it.draft && !takeNone && !startsHeld(d))
       await startDraft(d, it.draft.claim, it.draft.why, state, started, finished);
+  for (const it of items)
+    if (it.mock && !takeNone && !startsHeld(d))
+      await startMock(d, it.mock.claim, state, started, finished);
   const live = new Map(items.map((i) => [i.item, i]));
   const unheld = state.runs.filter((r) => r.parked && (live.get(r.item)?.landed ?? true));
   if (unheld.length) {
@@ -14400,8 +14751,14 @@ async function tickOnce(d) {
   await rereadAtOnce(d);
   const cap = await machineCap(d);
   const atOnce = startsHeld(d) ? 0 : cap;
+  for (const [k, c] of d.noClone ?? [])
+    if (!alive(c) || typeof d.resolveRepo(c) === "string")
+      d.noClone?.delete(k);
   const takes = planTakes({
-    items,
+    items: d.noClone?.size ? items.map((i) => ({
+      ...i,
+      ready: i.ready.filter((n) => !d.noClone?.has(ref({ item: i.item, node: n })))
+    })) : items,
     tracked: [
       ...state.runs.filter((r) => !r.pr && (!r.parked || liveAnswerer(r))).map((r) => ({
         item: r.item,
@@ -14474,6 +14831,7 @@ async function tickOnce(d) {
         d.setupNoted?.add(repoPath.error);
         d.log(`${at}: released, no try spent — ${repoPath.error}`);
       }
+      d.noClone?.set(at, claim);
       await report({ kind: "release", why: repoPath.error });
       continue;
     }
@@ -14496,10 +14854,17 @@ async function tickOnce(d) {
     }
     let start;
     let mcpConfig;
+    let made;
+    const dropMade = () => {
+      if (made)
+        removeEngineWorktree(d, repoPath, made, at);
+    };
     try {
       const base = d.defaultBranch(d.exec, repoPath);
       const { install, gate } = claimRunOf(claim.run, claim.repos[0]);
       const worktree = d.runner.makesWorktree ? repoPath : d.ensureWorktree(d.exec, repoPath, branch, worktreePath(repoPath, name), base, install) ?? worktreePath(repoPath, name);
+      if (!d.runner.makesWorktree)
+        made = worktree;
       const prTitle = d.prTitleOf?.(claim);
       mcpConfig = engineMcpConfigFor(d, name, claim.runToken, at, worktree);
       const allow = gateAllowRules(gate);
@@ -14535,6 +14900,7 @@ async function tickOnce(d) {
       };
     } catch (e) {
       d.log(`${at}: could not start: ${message(e)}`);
+      dropMade();
       await report({ kind: "fail", log: `The engine could not start the session: ${message(e)}` });
       continue;
     }
@@ -14545,6 +14911,7 @@ async function tickOnce(d) {
       const down = probeRunner(d);
       if (down) {
         d.log(`${at}: released — the runner could not start it: ${message(e)}`);
+        dropMade();
         await report({ kind: "release", why: `runner unavailable: ${down}` });
         continue;
       }
@@ -14563,6 +14930,8 @@ async function tickOnce(d) {
       if (slow)
         d.log(`${at}: ${slow} ${inRow} times in a row — failed, not released again`);
       d.log(`${at}: could not start: ${message(e)}`);
+      if (!slow)
+        dropMade();
       await report({ kind: "fail", log: `The engine could not start the session: ${message(e)}` });
       continue;
     }
@@ -14591,18 +14960,9 @@ async function tickOnce(d) {
     setLane(d, d.runner, handle, "working");
     try {
       const beat = await d.source.heartbeat(claim, watch);
-      if (beat === "parked" || beat === "done") {
-        state.runs = state.runs.filter((r) => r !== run);
-        save();
-        continue;
-      }
-      if (beat === "lost") {
-        d.log(`${at}: the claim was lost as the session started — stopping it`);
-        try {
-          d.runner.stop(handle);
-        } catch (e) {
-          d.log(`${at}: could not stop the session: ${message(e)}`);
-        }
+      if (beat === "parked" || beat === "done" || beat === "lost") {
+        d.log(beat === "lost" ? `${at}: the claim was lost as the session started — stopping it` : `${at}: the node moved on as the session started (${beat}) — stopping it`);
+        endNodeSession(d, d.runner, handle, repoPath, at);
         state.runs = state.runs.filter((r) => r !== run);
         save();
         continue;
@@ -15732,26 +16092,250 @@ ${shown}`;
   endDraft(d, run, runner);
   return false;
 }
-function endDraft(d, run, runner) {
+function endDraft(d, run, runner, who = "drafter") {
+  try {
+    if (runner.status(run.handle) === "running")
+      runner.stop(run.handle);
+  } catch (e) {
+    d.log(`${ref(run)}: could not close the session: ${message(e)}`);
+  }
+  const wt = run.handle.cwd;
+  if (wt === run.repoPath)
+    return;
+  try {
+    if (runner.makesWorktree) {
+      const note = runner.removeWorktree?.(run.handle, run.repoPath);
+      if (note)
+        d.log(`${ref(run)}: ${note}`);
+    } else if (wt.startsWith(`${run.repoPath}/.worktrees/`)) {
+      d.removeWorktree(d.exec, run.repoPath, wt);
+    }
+  } catch (e) {
+    d.log(`${ref(run)}: kept the ${who}'s checkout ${wt}: ${message(e)}`);
+  }
+}
+async function startMock(d, claim, state, started, finished) {
+  const at = ref(claim);
+  const fail = async (log) => {
+    d.log(`${at}: the mock was not drawn — ${log}`);
+    try {
+      await d.source.report(claim, { kind: "fail", log }, d.engine);
+    } catch (e) {
+      d.log(`${at}: fail report failed: ${message(e)}`);
+    }
+    finished.push({ item: claim.item, node: claim.node, outcome: { kind: "fail", log } });
+  };
+  if (!mocksOf(d.source) || !d.mockOut || !d.readMock) {
+    await fail("this engine cannot draw mocks (its source or its files do not carry them)");
+    return;
+  }
+  const repoPath = d.resolveRepo(claim);
+  if (typeof repoPath !== "string") {
+    await fail(repoPath.error);
+    return;
+  }
+  const name = sessionName(claim.item, MOCK_NODE);
+  const branch = nodeBranch(claim.item, MOCK_NODE);
+  let handle;
+  let out;
+  let base;
+  let launch;
+  try {
+    base = d.defaultBranch(d.exec, repoPath);
+    const worktree = d.runner.makesWorktree ? repoPath : d.ensureDraftWorktree(d.exec, repoPath, worktreePath(repoPath, name), base) ?? worktreePath(repoPath, name);
+    out = d.mockOut(name);
+    const prompt = mockPrompt({
+      item: claim.item,
+      title: claim.title,
+      pack: claim.pack,
+      out,
+      base,
+      engine: d.engine
+    });
+    launch = nodeLaunchFor(d, at);
+    const allow = [`Edit(/${out})`];
+    handle = d.runner.start({
+      name,
+      repoPath,
+      worktree,
+      branch,
+      base,
+      promptFile: d.writePrompt(name, prompt),
+      permissionMode: d.permissionMode,
+      ...launchOptions(launch),
+      ...sandboxFor(d, name, worktree, allow),
+      ...hooksFor(d, name, allow),
+      ...mainCheckoutFor(d, worktree)
+    });
+  } catch (e) {
+    await fail(`the engine could not start the session: ${message(e)}`);
+    return;
+  }
+  const watch = safeWatch(d.runner, handle);
+  const run = {
+    item: claim.item,
+    node: MOCK_NODE,
+    title: claim.title,
+    kind: "mock",
+    mock: { out, base, ...launch.model ? { model: launch.model } : {} },
+    ...claim.seatId ? { seatId: claim.seatId } : {},
+    ...claim.runId ? { runId: claim.runId } : {},
+    ...claim.leaseUntil !== undefined ? { leaseUntil: claim.leaseUntil } : {},
+    branch,
+    repoPath,
+    handle,
+    startedAt: d.now(),
+    seenAt: d.now()
+  };
+  state.runs.push(run);
+  d.writeState(state);
+  d.log(`${at}: drawing a mock — no code; the HTML goes to ${out}`);
+  try {
+    await d.source.heartbeat(claim, watch);
+  } catch (e) {
+    d.log(`${at}: started, but the watch handle was not recorded: ${message(e)}`);
+  }
+  started.push({ item: claim.item, node: MOCK_NODE, watch, watchTarget: watchTarget(handle) });
+}
+function mockChangedCode(exec, cwd, base) {
+  const status = exec("git", ["-C", cwd, "status", "--porcelain"]);
+  if (status.status !== 0)
+    return `git could not read the checkout: ${status.stderr.trim()}`;
+  const changed = status.stdout.split(`
+`).filter((l) => l.trim());
+  if (changed.length)
+    return `${changed.length} file${changed.length === 1 ? "" : "s"} changed (${changed.slice(0, 5).map((l) => l.slice(3).trim()).join(", ")}${changed.length > 5 ? ", …" : ""})`;
+  const ahead = exec("git", ["-C", cwd, "rev-list", "--count", `origin/${base}..HEAD`]);
+  if (ahead.status !== 0)
+    return `git could not count the commits: ${ahead.stderr.trim()}`;
+  const n = Number.parseInt(ahead.stdout.trim(), 10);
+  if (!Number.isFinite(n))
+    return "git could not count the commits";
+  return n > 0 ? `${n} commit${n === 1 ? "" : "s"} past origin/${base}` : null;
+}
+async function settleMock(d, run, claim, runner, finished) {
+  let beat;
+  try {
+    beat = await d.source.heartbeat(claim, safeWatch(runner, run.handle));
+  } catch (e) {
+    d.log(`${ref(run)}: heartbeat failed, retrying next tick: ${message(e)}`);
+    return true;
+  }
+  if (beat !== "running") {
+    d.log(`${ref(run)}: the mock claim was lost — stopping the session`);
+    endDraft(d, run, runner, "mock session");
+    return false;
+  }
+  if (run.runId)
+    run.leaseUntil = d.now() + d.leaseMin * 60000;
+  let status;
+  try {
+    status = runner.status(run.handle);
+  } catch (e) {
+    d.log(`${ref(run)}: could not read the session's status: ${message(e)}`);
+    return true;
+  }
+  const out = run.mock?.out;
+  const read = out ? d.readMock?.(out) ?? null : null;
+  const drawn = read?.trim() ? read : null;
+  if (status === "running") {
+    if (drawn) {
+      const print = fingerprint(drawn);
+      if (run.mock && run.mock.drawn !== print) {
+        run.mock.drawn = print;
+        return true;
+      }
+    } else {
+      if (!runner.readsSession)
+        return true;
+      let shown = "";
+      try {
+        shown = runner.read(run.handle);
+      } catch {
+        shown = "";
+      }
+      const now = d.now();
+      const print = fingerprint(shown);
+      if (run.seen !== print) {
+        run.seen = print;
+        run.seenAt = now;
+        return true;
+      }
+      if (now - (run.seenAt ?? run.startedAt) < d.idleMin * 60000)
+        return true;
+    }
+  }
+  const changed = mockChangedCode(d.exec, run.handle.cwd, run.mock?.base ?? "main");
+  let log = "";
+  if (changed)
+    log = `the mock run changed code: ${changed}. Nothing was attached.`;
+  else if (!drawn) {
+    let tail = "";
+    try {
+      tail = runner.read(run.handle);
+    } catch (e) {
+      tail = `(the session's output could not be read: ${message(e)})`;
+    }
+    log = status === "exited" ? `The session exited with no HTML at ${out ?? "its file"}.${tail ? `
+${tail}` : ""}` : `Idle for ${d.idleMin} min with no HTML written.${tail ? ` Last output:
+${tail}` : ""}`;
+  }
+  const mocks = mocksOf(d.source);
+  if (!log && mocks && drawn) {
+    let posted;
+    try {
+      posted = await mocks.finishMock(claim, drawn, {
+        engine: d.engine,
+        ...run.mock?.model ? { model: run.mock.model } : {}
+      });
+    } catch (e) {
+      d.log(`${ref(run)}: the mock is drawn; posting it failed, retrying next tick: ${message(e)}`);
+      return true;
+    }
+    if ("ok" in posted) {
+      d.log(`${ref(run)}: mock drawn — attached to ${run.item} as its mock, for a person to sign`);
+      endDraft(d, run, runner, "mock session");
+      return false;
+    }
+    if ("gone" in posted) {
+      d.log(`${ref(run)}: the mock is drawn, but SLEDS no longer runs it (${posted.gone}) — not attached`);
+      endDraft(d, run, runner, "mock session");
+      return false;
+    }
+    log = `SLEDS refused the HTML: ${posted.refused}`;
+  }
+  if (!log)
+    log = "this engine cannot post mocks";
+  const outcome = { kind: "fail", log };
+  try {
+    await d.source.report(claim, outcome, d.engine);
+  } catch (e) {
+    d.log(`${ref(run)}: the mock run failed; the fail report failed, retrying next tick: ${message(e)}`);
+    return true;
+  }
+  d.log(`${ref(run)}: the mock was not drawn — ${log.split(`
+`)[0]}`);
+  finished.push({ item: run.item, node: run.node, outcome });
+  endDraft(d, run, runner, "mock session");
+  return false;
+}
+function endNodeSession(d, runner, h, repoPath, at) {
   try {
-    if (runner.status(run.handle) === "running")
-      runner.stop(run.handle);
+    if (runner.status(h) === "running")
+      runner.stop(h);
   } catch (e) {
-    d.log(`${ref(run)}: could not close the session: ${message(e)}`);
+    d.log(`${at}: could not close the session: ${message(e)}`);
   }
-  const wt = run.handle.cwd;
-  if (wt === run.repoPath)
+  if (!runner.makesWorktree)
+    removeEngineWorktree(d, repoPath, h.cwd, at);
+}
+function removeEngineWorktree(d, repoPath, wt, at) {
+  if (wt === repoPath || !wt.startsWith(`${repoPath}/.worktrees/`))
     return;
   try {
-    if (runner.makesWorktree) {
-      const note = runner.removeWorktree?.(run.handle, run.repoPath);
-      if (note)
-        d.log(`${ref(run)}: ${note}`);
-    } else if (wt.startsWith(`${run.repoPath}/.worktrees/`)) {
-      d.removeWorktree(d.exec, run.repoPath, wt);
-    }
+    d.removeWorktree(d.exec, repoPath, wt);
   } catch (e) {
-    d.log(`${ref(run)}: kept the drafter's checkout ${wt}: ${message(e)}`);
+    d.log(`${at}: kept the worktree ${wt}: ${message(e)}`);
   }
 }
 function ciNudge(url, failing) {
@@ -15842,6 +16426,11 @@ async function follow(d, state, run, claim, runner, finished, attention, changes
     stopOpen(d, run, runner);
     return false;
   }
+  try {
+    pr.live = runner.status(run.handle) === "running" || undefined;
+  } catch {
+    pr.live = undefined;
+  }
   const at = { item: run.item, node: run.node, url: pr.url };
   const ci = ciLine(view);
   if (ci !== pr.ci)
@@ -16791,16 +17380,60 @@ init_state();
 init_meter();
 
 // src/runners/gitGuard.ts
-import { basename as basename4 } from "node:path";
+import { statSync as statSync2 } from "node:fs";
+import { basename as basename4, dirname as dirname12, join as join18, resolve as resolve8 } from "node:path";
 var GIT_GUARD_ENV = {
-  GIT_CONFIG_COUNT: "2",
+  GIT_CONFIG_COUNT: "4",
   GIT_CONFIG_KEY_0: "core.fsmonitor",
   GIT_CONFIG_VALUE_0: "false",
   GIT_CONFIG_KEY_1: "core.hooksPath",
-  GIT_CONFIG_VALUE_1: "/dev/null"
+  GIT_CONFIG_VALUE_1: "/dev/null",
+  GIT_CONFIG_KEY_2: "remote.origin.uploadpack",
+  GIT_CONFIG_VALUE_2: "git-upload-pack",
+  GIT_CONFIG_KEY_3: "remote.origin.receivepack",
+  GIT_CONFIG_VALUE_3: "git-receive-pack",
+  GIT_ALLOW_PROTOCOL: "file:http:https:ssh",
+  GIT_TERMINAL_PROMPT: "0"
+};
+function trustedSshCommand(env = process.env, exec = defaultExec) {
+  if (env.GIT_SSH_COMMAND?.trim())
+    return env.GIT_SSH_COMMAND;
+  const r = exec("git", ["config", "--get", "core.sshCommand"], {
+    cwd: "/",
+    env: { GIT_CEILING_DIRECTORIES: "/" },
+    timeoutMs: 5000
+  });
+  return r.status === 0 && r.stdout.trim() || "ssh";
+}
+var ssh;
+function gitGuardEnv() {
+  ssh ??= trustedSshCommand();
+  return { ...GIT_GUARD_ENV, GIT_SSH_COMMAND: ssh };
+}
+var isFile = (p) => statSync2(p, { throwIfNoEntry: false })?.isFile() ?? false;
+var isDir = (p) => statSync2(p, { throwIfNoEntry: false })?.isDirectory() ?? false;
+function ownGitDirs(dir, stat = { isFile, isDir }) {
+  const wt = resolve8(dir);
+  if (basename4(dirname12(wt)) !== ".worktrees")
+    return null;
+  const common = join18(dirname12(dirname12(wt)), ".git");
+  if (!stat.isFile(join18(wt, ".git")) || !stat.isDir(common))
+    return null;
+  return {
+    GIT_DIR: join18(common, "worktrees", basename4(wt)),
+    GIT_COMMON_DIR: common,
+    GIT_WORK_TREE: wt
+  };
+}
+var callDir = (args, cwd) => {
+  const base = cwd ?? process.cwd();
+  return args[0] === "-C" && args[1] ? resolve8(base, args[1]) : base;
 };
 var GUARDED = new Set(["git", "gh"]);
-var guardGit = (exec) => (cmd, args, o) => GUARDED.has(basename4(cmd)) ? exec(cmd, args, { ...o, env: { ...o?.env, ...GIT_GUARD_ENV } }) : exec(cmd, args, o);
+var guardGit = (exec, guard = gitGuardEnv) => (cmd, args, o) => GUARDED.has(basename4(cmd)) ? exec(cmd, args, {
+  ...o,
+  env: { ...o?.env, ...guard(), ...ownGitDirs(callDir(args, o?.cwd)) }
+}) : exec(cmd, args, o);
 
 // src/runners/command.ts
 var expandCommandTemplate = (template, o) => {
@@ -17500,7 +18133,7 @@ function tmuxRunner(exec) {
       return r.status === 0 ? r.stdout : "";
     },
     send(h, text) {
-      const typed = exec("tmux", ["send-keys", "-t", tmuxPane(h.id), "-l", text]);
+      const typed = exec("tmux", ["send-keys", "-t", tmuxPane(h.id), "-l", "--", text]);
       if (typed.status !== 0) {
         throw new Error(`tmux send-keys ${h.id} failed: ${typed.stderr.trim() || `exit ${typed.status}`}`);
       }
@@ -17568,9 +18201,20 @@ function restoreRunner(name, exec = defaultExec) {
 init_settings();
 
 // src/update/drain.ts
-import { closeSync as closeSync4, existsSync as existsSync18, mkdirSync as mkdirSync17, openSync as openSync4, rmSync as rmSync9, statSync as statSync4, writeSync as writeSync2 } from "node:fs";
+import { randomUUID as randomUUID3 } from "node:crypto";
+import {
+  closeSync as closeSync4,
+  existsSync as existsSync18,
+  mkdirSync as mkdirSync17,
+  openSync as openSync4,
+  readFileSync as readFileSync15,
+  rmSync as rmSync9,
+  statSync as statSync5,
+  utimesSync,
+  writeSync as writeSync2
+} from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { join as join23 } from "node:path";
+import { join as join24 } from "node:path";
 
 // ../../packages/shared/src/updates/manifest.ts
 var CLI_PLATFORMS = [
@@ -17665,7 +18309,7 @@ function belowMinimum(version, minimum) {
 init_state();
 
 // src/update/fetch.ts
-import { createHash } from "node:crypto";
+import { createHash as createHash2, randomUUID as randomUUID2 } from "node:crypto";
 import {
   chmodSync as chmodSync4,
   closeSync as closeSync3,
@@ -17709,16 +18353,16 @@ import {
   readlinkSync as readlinkSync2,
   renameSync as renameSync7,
   rmSync as rmSync4,
-  statSync as statSync2,
+  statSync as statSync3,
   writeFileSync as writeFileSync13
 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { dirname as dirname12, join as join18, win32 as win322 } from "node:path";
+import { dirname as dirname13, join as join19, win32 as win322 } from "node:path";
 var UPDATE_LOCK_STALE_MS = 10 * 60000;
 function sledsRoot(home = homedir3(), platform = process.platform) {
-  return platform === "win32" ? win322.join(process.env.LOCALAPPDATA ?? win322.join(home, "AppData", "Local"), "sleds") : join18(home, ".sleds");
+  return platform === "win32" ? win322.join(process.env.LOCALAPPDATA ?? win322.join(home, "AppData", "Local"), "sleds") : join19(home, ".sleds");
 }
-var pathFor = (platform) => platform === "win32" ? win322 : { join: join18 };
+var pathFor = (platform) => platform === "win32" ? win322 : { join: join19 };
 function versionDir(home, v, platform = process.platform) {
   return pathFor(platform).join(sledsRoot(home, platform), "versions", v);
 }
@@ -17791,36 +18435,87 @@ function readUpdateState(home) {
 }
 function writeUpdateState(home, s) {
   const path = updateStatePath(home);
-  mkdirSync12(dirname12(path), { recursive: true, mode: 448 });
+  mkdirSync12(dirname13(path), { recursive: true, mode: 448 });
   const tmp = `${path}.${process.pid}.${randomUUID()}.tmp`;
   writeFileSync13(tmp, `${JSON.stringify(s, null, 2)}
 `, { mode: 384 });
   renameSync7(tmp, path);
 }
-function readLockBody(path) {
+var BREAK_STALE_MS = 30000;
+var readText = (path) => {
+  try {
+    return readFileSync13(path, "utf8");
+  } catch {
+    return null;
+  }
+};
+function parseLockBody(text) {
+  if (text === null)
+    return null;
   try {
-    const v = JSON.parse(readFileSync13(path, "utf8"));
+    const v = JSON.parse(text);
     if (isObj3(v) && num7(v.pid) && num7(v.at))
       return { pid: v.pid, at: v.at, ...str11(v.token) ? { token: v.token } : {} };
   } catch {}
   return null;
 }
-function lockStale(path, now) {
-  const body = readLockBody(path);
+var readLockBody = (path) => parseLockBody(readText(path));
+function lockStale(path, text, now, maxMs) {
   try {
-    const at = body?.at ?? statSync2(path).mtimeMs;
-    return now - at > UPDATE_LOCK_STALE_MS;
+    const at = parseLockBody(text)?.at ?? statSync3(path).mtimeMs;
+    return now - at > maxMs;
   } catch {
     return false;
   }
 }
+function removeIfSame(path, text, aside) {
+  try {
+    renameSync7(path, aside);
+  } catch {
+    return;
+  }
+  if (readText(aside) !== text) {
+    try {
+      linkSync2(aside, path);
+    } catch {}
+  }
+  rmSync4(aside, { force: true });
+}
+function breakStale(path, seen, token) {
+  const brk = `${path}.break`;
+  const tmp = `${brk}.${token}.tmp`;
+  const aside = `${path}.${token}.stale`;
+  const body = `${JSON.stringify({ pid: process.pid, at: Date.now(), token })}
+`;
+  writeFileSync13(tmp, body, { mode: 384 });
+  try {
+    try {
+      linkSync2(tmp, brk);
+    } catch (e) {
+      if (e.code !== "EEXIST")
+        throw e;
+      const held = readText(brk);
+      if (held !== null && lockStale(brk, held, Date.now(), BREAK_STALE_MS))
+        removeIfSame(brk, held, aside);
+      return false;
+    }
+    try {
+      if (readText(path) === seen && lockStale(path, seen, Date.now(), UPDATE_LOCK_STALE_MS))
+        removeIfSame(path, seen, aside);
+      return true;
+    } finally {
+      removeIfSame(brk, body, aside);
+    }
+  } finally {
+    rmSync4(tmp, { force: true });
+  }
+}
 async function withUpdateLock(home, fn, o = {}) {
   const waitMs = o.waitMs ?? 30000;
   const path = updateLockPath(home);
-  mkdirSync12(dirname12(path), { recursive: true, mode: 448 });
+  mkdirSync12(dirname13(path), { recursive: true, mode: 448 });
   const token = randomUUID();
   const tmp = `${path}.${token}.tmp`;
-  const aside = `${path}.${token}.stale`;
   writeFileSync13(tmp, `${JSON.stringify({ pid: process.pid, at: Date.now(), token })}
 `, {
     mode: 384
@@ -17835,22 +18530,9 @@ async function withUpdateLock(home, fn, o = {}) {
         if (e.code !== "EEXIST")
           throw e;
       }
-      if (lockStale(path, Date.now())) {
-        try {
-          renameSync7(path, aside);
-        } catch (e) {
-          if (e.code === "ENOENT")
-            continue;
-          throw e;
-        }
-        if (!lockStale(aside, Date.now())) {
-          try {
-            linkSync2(aside, path);
-          } catch {}
-        }
-        rmSync4(aside, { force: true });
+      const seen = readText(path);
+      if (seen !== null && lockStale(path, seen, Date.now(), UPDATE_LOCK_STALE_MS) && breakStale(path, seen, token))
         continue;
-      }
       if (Date.now() - start >= waitMs) {
         const held = readLockBody(path);
         throw new Error(`update.json is locked${held ? ` by pid ${held.pid}` : ""} (${path})`);
@@ -17897,7 +18579,7 @@ async function getText(fetchFn, url) {
   return res.text();
 }
 async function sha256File(path) {
-  const hash = createHash("sha256");
+  const hash = createHash2("sha256");
   let size = 0;
   for await (const chunk of createReadStream(path)) {
     hash.update(chunk);
@@ -17910,7 +18592,7 @@ async function fetchVersion(o) {
   const platform = o.platform ?? process.platform;
   const arch = o.arch ?? process.arch;
   const publicKey = o.publicKey ?? RELEASE_PUBLIC_KEY;
-  const running = o.running ?? "0.1.60";
+  const running = o.running ?? "0.1.61";
   if (!publicKey)
     return { ok: false, why: "no release key yet" };
   if (!VERSION_RE2.test(o.version))
@@ -17949,12 +18631,12 @@ async function fetchVersion(o) {
     } catch {}
   }
   mkdirSync13(versionDir(o.home, o.version, platform), { recursive: true, mode: 493 });
-  const part = `${bin}.part`;
+  const part = `${bin}.${process.pid}.${randomUUID2()}.part`;
   try {
     const res = await fetchFn(asset.url);
     if (!res.ok || !res.body)
       return { ok: false, why: `${asset.url}: HTTP ${res.status}` };
-    const hash = createHash("sha256");
+    const hash = createHash2("sha256");
     let size = 0;
     const fd = openSync3(part, "w", 384);
     try {
@@ -17964,6 +18646,7 @@ async function fetchVersion(o) {
           break;
         hash.update(chunk);
         writeSync(fd, chunk);
+        o.progress?.();
       }
     } finally {
       closeSync3(fd);
@@ -17999,24 +18682,24 @@ import {
   readlinkSync as readlinkSync3,
   renameSync as renameSync9,
   rmSync as rmSync7,
-  statSync as statSync3,
+  statSync as statSync4,
   symlinkSync,
   writeFileSync as writeFileSync15
 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { basename as basename5, delimiter as delimiter2, dirname as dirname13, isAbsolute as isAbsolute2, join as join21, relative } from "node:path";
+import { basename as basename5, delimiter as delimiter2, dirname as dirname14, isAbsolute as isAbsolute2, join as join22, relative } from "node:path";
 
 // src/commands/engineSystemd.ts
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 var BOX_ENV_UNIT_PATH = "%h/.config/sleds/box.env";
 function boxEnvPath(home) {
-  return join19(home, ".config", "sleds", "box.env");
+  return join20(home, ".config", "sleds", "box.env");
 }
 function engineUnitDir(home) {
-  return join19(home, ".config", "systemd", "user");
+  return join20(home, ".config", "systemd", "user");
 }
 function engineUnitPath(home, label) {
-  return join19(engineUnitDir(home), `${label}.service`);
+  return join20(engineUnitDir(home), `${label}.service`);
 }
 function systemdQuote(s) {
   const body = s.replace(/\\/g, "\\\\").replace(/"/g, "\\\"").replace(/\n/g, "\\n").replace(/%/g, "%%").replace(/\$/g, "$$$$");
@@ -18058,7 +18741,7 @@ function parseEngineUnit(text) {
 // src/schedule.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { existsSync as existsSync15, mkdirSync as mkdirSync14, rmSync as rmSync6, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 var REVERT_LABEL = "ai.sleds.revert";
 var defaultExec2 = (cmd, args) => {
   const r = spawnSync4(cmd, [...args], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
@@ -18066,7 +18749,7 @@ var defaultExec2 = (cmd, args) => {
     return { ok: false, stderr: r.error.message };
   return { ok: r.status === 0, stderr: r.stderr ?? "" };
 };
-var plistPath = (home) => join20(home, "Library", "LaunchAgents", `${REVERT_LABEL}.plist`);
+var plistPath = (home) => join21(home, "Library", "LaunchAgents", `${REVERT_LABEL}.plist`);
 var xmlEscape2 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 var buildLaunchdPlist = (sledsArgv, deadline) => {
   const args = [...sledsArgv, "off"].map((a) => `    <string>${xmlEscape2(a)}</string>`).join(`
@@ -18105,7 +18788,7 @@ var scheduleRevert = (d, deadlineMs) => {
   if (d.platform === "darwin") {
     const p = plistPath(d.home);
     try {
-      mkdirSync14(join20(d.home, "Library", "LaunchAgents"), { recursive: true });
+      mkdirSync14(join21(d.home, "Library", "LaunchAgents"), { recursive: true });
       d.exec("launchctl", ["unload", p]);
       writeFileSync14(p, buildLaunchdPlist(d.sledsArgv, deadline));
       const r = d.exec("launchctl", ["load", p]);
@@ -18157,8 +18840,8 @@ var HOOK_SUBS = [
   "stop-event",
   "permission-event"
 ];
-var migrateBakDir = (home) => join21(sledsRoot(home), "migrate.bak");
-var manifestPath = (home) => join21(migrateBakDir(home), "manifest.json");
+var migrateBakDir = (home) => join22(sledsRoot(home), "migrate.bak");
+var manifestPath = (home) => join22(migrateBakDir(home), "manifest.json");
 var xmlEscape3 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 var xmlUnescape = (s) => s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
 var shQuote = (s) => /^[\w./~-]+$/.test(s) ? s : `'${s.replace(/'/g, "'\\''")}'`;
@@ -18258,13 +18941,13 @@ function rewriteSettings(text, link) {
 }
 var listDir = (dir, keep) => {
   try {
-    return readdirSync2(dir).filter(keep).sort().map((n) => join21(dir, n));
+    return readdirSync2(dir).filter(keep).sort().map((n) => join22(dir, n));
   } catch {
     return [];
   }
 };
 function unitFiles(home) {
-  const agents = listDir(join21(home, "Library", "LaunchAgents"), (n) => n.startsWith("ai.sleds.") && n.endsWith(".plist")).map((path) => ({
+  const agents = listDir(join22(home, "Library", "LaunchAgents"), (n) => n.startsWith("ai.sleds.") && n.endsWith(".plist")).map((path) => ({
     path,
     ...basename5(path).startsWith("ai.sleds.revert") ? {} : { reload: "launchd" }
   }));
@@ -18276,7 +18959,7 @@ function unitClaudeDir(text) {
   return plist ? xmlUnescape(plist) : undefined;
 }
 function claudeDirs(home, env) {
-  const dirs = [join21(home, ".claude"), claudeDir(home, env)];
+  const dirs = [join22(home, ".claude"), claudeDir(home, env)];
   for (const u of unitFiles(home)) {
     try {
       const d = unitClaudeDir(readFileSync14(u.path, "utf8"));
@@ -18300,7 +18983,7 @@ function migrationPlan(home, link, env = process.env) {
       out.push({ ...u, text: next });
   }
   for (const dir of claudeDirs(home, env)) {
-    const path = join21(dir, "settings.json");
+    const path = join22(dir, "settings.json");
     let text;
     try {
       text = readFileSync14(path, "utf8");
@@ -18315,12 +18998,12 @@ function migrationPlan(home, link, env = process.env) {
 }
 var backupFor = (home, path) => {
   const rel = relative(home, path);
-  return rel.startsWith("..") || isAbsolute2(rel) ? join21(migrateBakDir(home), "abs", path) : join21(migrateBakDir(home), rel);
+  return rel.startsWith("..") || isAbsolute2(rel) ? join22(migrateBakDir(home), "abs", path) : join22(migrateBakDir(home), rel);
 };
 function writeKeepingMode(path, text) {
   let mode = 420;
   try {
-    mode = statSync3(path).mode & 511;
+    mode = statSync4(path).mode & 511;
   } catch {}
   const tmp = `${path}.${process.pid}.migrate.tmp`;
   writeFileSync15(tmp, text, { mode });
@@ -18332,7 +19015,7 @@ function copyInto(from, to) {
   renameSync9(tmp, to);
 }
 function pointLink(link, bin) {
-  mkdirSync15(dirname13(link), { recursive: true, mode: 448 });
+  mkdirSync15(dirname14(link), { recursive: true, mode: 448 });
   const tmp = `${link}.tmp`;
   rmSync7(tmp, { force: true });
   symlinkSync(bin, tmp);
@@ -18357,9 +19040,7 @@ function reloadScript(lock, files) {
   for (const a of agents)
     lines.push(`launchctl unload ${shQuote(a.path)} 2>/dev/null; launchctl load ${shQuote(a.path)}`);
   if (units.length)
-    lines.push("systemctl --user daemon-reload");
-  for (const u of units)
-    lines.push(`systemctl --user restart ${shQuote(basename5(u.path))}`);
+    lines.push("systemctl --user daemon-reload", `systemctl --user --no-block restart ${units.map((u) => shQuote(basename5(u.path))).join(" ")}`);
   if (!lines.length)
     return null;
   return [
@@ -18453,7 +19134,7 @@ async function migrateToBinary(o) {
       rmSync7(migrateBakDir(home), { recursive: true, force: true });
       for (const p of plan) {
         const backup = backupFor(home, p.path);
-        mkdirSync15(dirname13(backup), { recursive: true, mode: 448 });
+        mkdirSync15(dirname14(backup), { recursive: true, mode: 448 });
         copyFileSync(p.path, backup);
         manifest.files.push({ path: p.path, backup, ...p.reload ? { reload: p.reload } : {} });
       }
@@ -18487,7 +19168,7 @@ async function migrateToBinary(o) {
     log(`sleds stays on the npm install: ${result.why}`);
     return { ok: false, why: result.why };
   }
-  const binDir = dirname13(link);
+  const binDir = dirname14(link);
   if (!(env.PATH ?? "").split(delimiter2).includes(binDir))
     log(`${binDir} is not on your PATH — add it in your shell profile to run this sleds from a terminal (sleds never edits it)`);
   reload(home, result.files, detach);
@@ -18507,10 +19188,10 @@ import {
   symlinkSync as symlinkSync2
 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname14, join as join22 } from "node:path";
+import { dirname as dirname15, join as join23 } from "node:path";
 var NO_PREVIOUS = "no previous version on this machine";
 function allStateFiles(home = homedir5(), env = process.env) {
-  const roots = [...new Set([configDir(home, env), join22(home, ".config", "sleds")])];
+  const roots = [...new Set([configDir(home, env), join23(home, ".config", "sleds")])];
   const out = [];
   const walk = (dir) => {
     let names;
@@ -18521,20 +19202,20 @@ function allStateFiles(home = homedir5(), env = process.env) {
     }
     for (const n of names.sort())
       if (n.endsWith(".json") && n !== "removed-engines.json")
-        out.push(join22(dir, n));
+        out.push(join23(dir, n));
     for (const sub of ["orgs", "seats"]) {
       let kids;
       try {
-        kids = readdirSync3(join22(dir, sub));
+        kids = readdirSync3(join23(dir, sub));
       } catch {
         continue;
       }
       for (const k of kids.sort())
-        walk(join22(dir, sub, k));
+        walk(join23(dir, sub, k));
     }
   };
   for (const r of roots)
-    walk(join22(r, "engine"));
+    walk(join23(r, "engine"));
   return out;
 }
 var backupPath2 = (file, v) => `${file}.${v}.bak`;
@@ -18548,7 +19229,7 @@ function pointBinAt(home, v, platform) {
   const target = versionBin(home, v, platform);
   if (!existsSync16(target))
     throw new Error(`${target} is missing — sleds ${v} is not downloaded`);
-  mkdirSync16(dirname14(bin), { recursive: true, mode: 448 });
+  mkdirSync16(dirname15(bin), { recursive: true, mode: 448 });
   if (platform === "win32") {
     replaceAside(bin, target);
     return;
@@ -18620,7 +19301,7 @@ function applyConfirm(s, home, o = {}) {
   if (!s.current)
     return;
   for (const f of o.stateFiles ?? allStateFiles(home)) {
-    const dir = dirname14(f);
+    const dir = dirname15(f);
     const prefix = `${f.slice(dir.length + 1)}.`;
     let names;
     try {
@@ -18630,10 +19311,10 @@ function applyConfirm(s, home, o = {}) {
     }
     for (const n of names)
       if (n.startsWith(prefix) && n.endsWith(".bak"))
-        rmSync8(join22(dir, n), { force: true });
+        rmSync8(join23(dir, n), { force: true });
   }
   const keep = new Set([s.current, s.previous, s.drain?.to].filter(Boolean));
-  const versions = dirname14(versionDir(home, s.current, platform));
+  const versions = dirname15(versionDir(home, s.current, platform));
   let names = [];
   try {
     names = readdirSync3(versions);
@@ -18684,6 +19365,7 @@ function reconcile(s, home, o) {
 // src/update/guard.ts
 var UPDATE_EXIT = 4;
 var FIRST_BEAT_MS = 180000;
+var FIRE_RETRY_MS = 15000;
 var STARTS_PER_ENGINE = 3;
 function guarded(home, version, platform) {
   return !!version && version !== "dev" && existsSync17(sledsRoot(home, platform));
@@ -18767,9 +19449,16 @@ function firstBeatWatchdog(o) {
   const clearTimer = o.clearTimer ?? ((t) => clearTimeout(t));
   let done = false;
   let confirming = false;
+  const setTimer = o.setTimer ?? ((fn, ms) => {
+    const t = setTimeout(fn, ms);
+    t.unref?.();
+    return t;
+  });
+  let timer;
   const fire = () => {
     if (done)
       return;
+    const lock = o.lockWaitMs !== undefined ? { waitMs: o.lockWaitMs } : {};
     withUpdateLock(home, (s) => {
       if (s.pending?.to === version)
         return rollBackHere(s, home, version, `sleds ${version} did not check in within 3 minutes`, now(), o);
@@ -18781,20 +19470,20 @@ function firstBeatWatchdog(o) {
           why: `sleds ${version} was rolled back on this machine — restarting onto ${at}`
         };
       return null;
-    }).then((g) => {
+    }, lock).then((g) => {
       done = true;
       if (g && !g.go) {
         say(g.why);
         exit(g.exit);
       }
-    }, (e) => say(`the first-beat check could not run: ${e instanceof Error ? e.message : String(e)}`));
+    }, (e) => {
+      if (done)
+        return;
+      say(`the first-beat check could not run: ${e instanceof Error ? e.message : String(e)} — trying again in ${FIRE_RETRY_MS / 1000} s`);
+      timer = setTimer(fire, FIRE_RETRY_MS);
+    });
   };
-  const setTimer = o.setTimer ?? ((fn, ms) => {
-    const t = setTimeout(fn, ms);
-    t.unref?.();
-    return t;
-  });
-  const timer = setTimer(fire, Math.max(0, pending.at + FIRST_BEAT_MS - now()));
+  timer = setTimer(fire, Math.max(0, pending.at + FIRST_BEAT_MS - now()));
   return {
     beat: async () => {
       if (done || confirming)
@@ -18891,9 +19580,10 @@ async function machineAnswer(client, tokens) {
     return null;
   }
 }
+var FETCH_LOCK_TOUCH_MS = 30000;
 async function fetchOnce(o) {
   const dir = versionDir(o.home, o.version, o.platform);
-  const lock = join23(dir, "fetch.lock");
+  const lock = join24(dir, "fetch.lock");
   mkdirSync17(dir, { recursive: true, mode: 493 });
   let fd;
   try {
@@ -18902,7 +19592,7 @@ async function fetchOnce(o) {
     if (e.code !== "EEXIST")
       throw e;
     try {
-      if ((o.now ?? Date.now()) - statSync4(lock).mtimeMs <= FETCH_LOCK_STALE_MS)
+      if ((o.now ?? Date.now()) - statSync5(lock).mtimeMs <= FETCH_LOCK_STALE_MS)
         return null;
     } catch {
       return null;
@@ -18910,14 +19600,28 @@ async function fetchOnce(o) {
     rmSync9(lock, { force: true });
     return fetchOnce(o);
   }
+  const mine = `${process.pid} ${randomUUID3()}
+`;
   try {
-    writeSync2(fd, `${process.pid}
-`);
+    writeSync2(fd, mine);
     closeSync4(fd);
     const { fetch: f = fetchVersion, now: _n, ...rest } = o;
-    return await f(rest);
+    let touchedAt = 0;
+    const progress = () => {
+      const t = Date.now();
+      if (t - touchedAt < FETCH_LOCK_TOUCH_MS)
+        return;
+      touchedAt = t;
+      try {
+        utimesSync(lock, t / 1000, t / 1000);
+      } catch {}
+    };
+    return await f({ ...rest, progress });
   } finally {
-    rmSync9(lock, { force: true });
+    try {
+      if (readFileSync15(lock, "utf8") === mine)
+        rmSync9(lock, { force: true });
+    } catch {}
   }
 }
 function machineVersion(home, platform) {
@@ -19400,7 +20104,7 @@ function flagsFromProfile(flags, given, profile, home) {
     }
   }
   if (profile.reposDir && !has("repos-dir") && !has("repo")) {
-    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join24(home, d.slice(1)) : d).join(":");
+    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join25(home, d.slice(1)) : d).join(":");
     used.push(`repos ${profile.reposDir}`);
   }
   if (profile.mcpStrict !== undefined && !has("strict-mcp") && !has("no-strict-mcp")) {
@@ -19495,7 +20199,7 @@ function engineClient(o, org, breaker) {
       ...src,
       ...breaker ? { fetchFn: breaker.fetch } : {},
       timeoutMs: ENGINE_TIMEOUT_MS,
-      version: "0.1.60"
+      version: "0.1.61"
     });
   const asked = org?.trim() || env.SLEDS_ORG?.trim();
   if (asked && !selectOrg(readConfig(o.home), org, env).seat)
@@ -19528,19 +20232,19 @@ function realPidAlive2(pid) {
 function memberMcpConfigs(o, cwd) {
   const read = o.readJson ?? ((p) => {
     try {
-      return JSON.parse(readFileSync15(p, "utf8"));
+      return JSON.parse(readFileSync16(p, "utf8"));
     } catch {
       return null;
     }
   });
   const claudeDir = (o.env ?? process.env).CLAUDE_CONFIG_DIR;
   return [
-    read(claudeDir ? join24(claudeDir, ".claude.json") : join24(o.home, ".claude.json")),
-    ...cwd ? [read(join24(cwd, ".mcp.json"))] : []
+    read(claudeDir ? join25(claudeDir, ".claude.json") : join25(o.home, ".claude.json")),
+    ...cwd ? [read(join25(cwd, ".mcp.json"))] : []
   ];
 }
 function engineStateDir(o, org, seat) {
-  return seatStateDir(orgStateDir(o.stateDir ?? join24(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
+  return seatStateDir(orgStateDir(o.stateDir ?? join25(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
 }
 function engineSeat(o, org) {
   try {
@@ -19567,11 +20271,11 @@ function engineDeps(o, flags, source, runner, stateName) {
   const stateDir = engineStateDir(o, flags.org, flags.seat);
   const file = statePath(stateDir, stateName);
   const mcpOrg = flags.org && engineOrg(o, flags.org).seated ? flags.org : undefined;
-  const repo = flags.repo ? resolve8(cwd, flags.repo) : undefined;
-  const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve8(cwd, d));
+  const repo = flags.repo ? resolve9(cwd, flags.repo) : undefined;
+  const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve9(cwd, d));
   const { branch, prTitle } = flags;
-  const hooksDir = join24(stateDir, "hooks");
-  const permissionMark = (name) => join24(hooksDir, `${name}.permission.json`);
+  const hooksDir = join25(stateDir, "hooks");
+  const permissionMark = (name) => join25(hooksDir, `${name}.permission.json`);
   const withHook = (name, settings) => applyPermissionHook(settings, [...o.sledsArgv ?? ["sleds"], "permission-event", "--mark", permissionMark(name)].map(shq2).join(" "));
   return {
     source,
@@ -19596,9 +20300,9 @@ function engineDeps(o, flags, source, runner, stateName) {
       sandbox: true,
       writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd, allow) => {
         const gitCommonDir = gitCommonDirOf(exec, cwd);
-        const dir = join24(stateDir, "sandbox");
+        const dir = join25(stateDir, "sandbox");
         mkdirSync18(dir, { recursive: true, mode: 448 });
-        const p = join24(dir, `${name}.json`);
+        const p = join25(dir, `${name}.json`);
         const walls = engineSandboxSettings(o.home, o.env ?? process.env, gitCommonDir, [
           ...SANDBOX_DEFAULT_ALLOW,
           ...flags.sandboxAllow ?? []
@@ -19615,7 +20319,7 @@ function engineDeps(o, flags, source, runner, stateName) {
     } : {},
     writeHookSettings: (name, allow) => {
       mkdirSync18(hooksDir, { recursive: true, mode: 448 });
-      const p = join24(hooksDir, `${name}.json`);
+      const p = join25(hooksDir, `${name}.json`);
       const base = allow?.length ? { permissions: { allow: [...allow] } } : {};
       writeFileSync16(p, `${JSON.stringify(withHook(name, base), null, 2)}
 `, { mode: 384 });
@@ -19643,9 +20347,9 @@ function engineDeps(o, flags, source, runner, stateName) {
       exists
     }),
     writeMcpConfig: o.writeMcpConfig ?? ((name, runToken, worktree) => {
-      const dir = join24(stateDir, "mcp");
+      const dir = join25(stateDir, "mcp");
       mkdirSync18(dir, { recursive: true, mode: 448 });
-      const p = join24(dir, `${name}.json`);
+      const p = join25(dir, `${name}.json`);
       let others = {};
       if (flags.strictMcp && flags.mcpAllow?.length) {
         const r = mcpPassThrough(flags.mcpAllow, memberMcpConfigs(o, worktree));
@@ -19661,12 +20365,26 @@ function engineDeps(o, flags, source, runner, stateName) {
     }),
     removeMcpConfig: o.removeMcpConfig ?? ((p) => rmSync10(p, { force: true })),
     writePrompt: o.writePrompt ?? ((name, text) => {
-      const dir = join24(stateDir, "prompts");
+      const dir = join25(stateDir, "prompts");
       mkdirSync18(dir, { recursive: true, mode: 448 });
-      const p = join24(dir, `${name}.md`);
+      const p = join25(dir, `${name}.md`);
       writeFileSync16(p, text, { mode: 384 });
       return p;
     }),
+    mockOut: (name) => {
+      const dir = join25(tmpdir(), "sleds-mocks");
+      mkdirSync18(dir, { recursive: true, mode: 448 });
+      const p = join25(dir, `${name}.html`);
+      rmSync10(p, { force: true });
+      return p;
+    },
+    readMock: (p) => {
+      try {
+        return readFileSync16(p, "utf8");
+      } catch {
+        return null;
+      }
+    },
     ensureWorktree: (e, repoPath, branch, path, base, install) => ensureWorktree(e, repoPath, branch, path, base, o.worktreeFs ?? { ...realWorktreeFs, exists }, { ...install ? { command: install } : {}, log: o.log ?? console.log }),
     ensureDraftWorktree: (e, repoPath, path, base) => ensureDetachedWorktree(e, repoPath, path, base, o.worktreeFs ?? { ...realWorktreeFs, exists }),
     defaultBranch,
@@ -19691,14 +20409,14 @@ function engineDeps(o, flags, source, runner, stateName) {
 }
 function sandboxDenyRead(home, env) {
   return {
-    dirs: [...new Set([configDir(home, env), join24(home, ".config", "sleds")])],
+    dirs: [...new Set([configDir(home, env), join25(home, ".config", "sleds")])],
     files: [
       ...new Set([
         tokenPath(home, env),
-        join24(home, ".sleds-token"),
+        join25(home, ".sleds-token"),
         settingsPath(home, env),
         backupPath(home, env),
-        join24(claudeDir(home, env), "settings.local.json")
+        join25(claudeDir(home, env), "settings.local.json")
       ])
     ]
   };
@@ -19715,21 +20433,21 @@ function gitCommonDirOf(exec, cwd) {
   const dir = r.status === 0 ? r.stdout.trim() : "";
   if (!dir)
     throw new Error(`git has no common dir for ${cwd}, so the sandbox has nowhere to commit`);
-  return resolve8(cwd, dir);
+  return resolve9(cwd, dir);
 }
 var LENT_NEEDS_SANDBOX = "a lent engine runs every session sandboxed (spec 48 rule 10) — add --sandbox to --lent-by";
 function lenderHome(accountHome, lentBy) {
-  return isAbsolute3(lentBy) ? resolve8(lentBy) : join24(dirname15(accountHome), lentBy);
+  return isAbsolute3(lentBy) ? resolve9(lentBy) : join25(dirname16(accountHome), lentBy);
 }
 function lentHomeProblems(accountHome, lentBy, modeOf) {
   const lender = lenderHome(accountHome, lentBy);
-  if (lender === resolve8(accountHome))
+  if (lender === resolve9(accountHome))
     return [
       `--lent-by ${lentBy} is this account — a lent engine runs as the borrower's own OS user, not the lender's`
     ];
   const problems = [];
   for (const [who, home] of [
-    ["the borrower's", resolve8(accountHome)],
+    ["the borrower's", resolve9(accountHome)],
     ["the lender's", lender]
   ]) {
     const mode = modeOf(home);
@@ -19742,7 +20460,7 @@ function lentHomeProblems(accountHome, lentBy, modeOf) {
 }
 var homeMode = (path) => {
   try {
-    return statSync5(path).mode & 4095;
+    return statSync6(path).mode & 4095;
   } catch {
     return null;
   }
@@ -19787,7 +20505,7 @@ async function driveEngine(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.60"
+    cliVersion: "0.1.61"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -20135,14 +20853,14 @@ init_config();
 import {
   existsSync as existsSync19,
   mkdirSync as mkdirSync19,
-  readFileSync as readFileSync16,
+  readFileSync as readFileSync17,
   readdirSync as readdirSync4,
   realpathSync,
   rmSync as rmSync11,
   writeFileSync as writeFileSync17
 } from "node:fs";
 import { hostname as hostname3 } from "node:os";
-import { basename as basename6, dirname as dirname16, isAbsolute as isAbsolute4, join as join25 } from "node:path";
+import { basename as basename6, dirname as dirname17, isAbsolute as isAbsolute4, join as join26 } from "node:path";
 init_state();
 var ENGINE_LABEL = "ai.sleds.engine";
 var ENGINE_INSTALL_USAGE = `usage: sleds engine install [engine flags]   |   sleds engine uninstall [--name <n>] [--org <slug>]
@@ -20163,13 +20881,13 @@ function engineLabel(name, org, seat) {
   return [ENGINE_LABEL, org, seat?.trim(), name].filter((p) => Boolean(p)).map((p, i) => i === 0 ? p : engineSlug(p)).join(".");
 }
 function enginePlistPath(home, name, org, seat) {
-  return join25(home, "Library", "LaunchAgents", `${engineLabel(name, org, seat)}.plist`);
+  return join26(home, "Library", "LaunchAgents", `${engineLabel(name, org, seat)}.plist`);
 }
 function engineLogPath(stateDir, name) {
-  return join25(stateDir, `${engineSlug(name)}.log`);
+  return join26(stateDir, `${engineSlug(name)}.log`);
 }
 function engineEventsPath(stateDir, name) {
-  return join25(stateDir, `${engineSlug(name)}.events.jsonl`);
+  return join26(stateDir, `${engineSlug(name)}.events.jsonl`);
 }
 var xmlEscape4 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 function buildEnginePlist(o) {
@@ -20266,10 +20984,10 @@ function readEngines(dir, suffix, manager, parse) {
   }
   const out = [];
   for (const name of names.filter((n) => n.startsWith(`${ENGINE_LABEL}.`) && n.endsWith(suffix))) {
-    const path = join25(dir, name);
+    const path = join26(dir, name);
     let parsed;
     try {
-      parsed = parse(readFileSync16(path, "utf8"), name);
+      parsed = parse(readFileSync17(path, "utf8"), name);
     } catch {
       parsed = null;
     }
@@ -20286,7 +21004,7 @@ function readEngines(dir, suffix, manager, parse) {
 }
 function installedEngines(home) {
   return [
-    ...readEngines(join25(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist),
+    ...readEngines(join26(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist),
     ...readEngines(engineUnitDir(home), ".service", "systemd", (text, file) => {
       const parsed = parseEngineUnit(text);
       return parsed && { label: basename6(file, ".service"), ...parsed };
@@ -20336,7 +21054,7 @@ function engineInstall(o) {
   if (platform === "linux")
     return installUnit({ o, parsed, label, sledsArgv, env: agentEnv, logPath, exec });
   const plist = enginePlistPath(o.home, parsed.name, parsed.org, seat);
-  mkdirSync19(dirname16(plist), { recursive: true });
+  mkdirSync19(dirname17(plist), { recursive: true });
   if (existsSync19(plist))
     exec("launchctl", ["unload", plist]);
   for (const other of installedEngines(o.home)) {
@@ -20378,7 +21096,7 @@ function installUnit(a) {
   const unit = engineUnitPath(o.home, label);
   const unitName = basename6(unit);
   const systemctl = (...args) => exec("systemctl", ["--user", ...args]);
-  mkdirSync19(dirname16(unit), { recursive: true });
+  mkdirSync19(dirname17(unit), { recursive: true });
   if (existsSync19(unit))
     systemctl("stop", unitName);
   for (const other of installedEngines(o.home)) {
@@ -20456,7 +21174,7 @@ function engineUninstall(o) {
 }
 
 // src/commands/musher.ts
-import { existsSync as existsSync20, mkdirSync as mkdirSync20, readFileSync as readFileSync17, rmSync as rmSync12, writeFileSync as writeFileSync18 } from "node:fs";
+import { existsSync as existsSync20, mkdirSync as mkdirSync20, readFileSync as readFileSync18, rmSync as rmSync12, writeFileSync as writeFileSync18 } from "node:fs";
 init_config();
 init_meter();
 var defaultWhich = (cmd) => {
@@ -20484,12 +21202,14 @@ var findClaude = (home, configured, which) => {
       return p;
   return null;
 };
+var MUSHER_SWITCHES = new Set(["install", "uninstall", "status"]);
+var MUSHER_SETTINGS = new Set(["claude", "mode", "timeout"]);
 var musherAgentState = (home, env = process.env) => {
   const plist = musherPlistPath(home, env);
   if (!existsSync20(plist))
     return { installed: false, thisSeat: false };
   try {
-    const text = readFileSync17(plist, "utf8");
+    const text = readFileSync18(plist, "utf8");
     const want = env.SLEDS_HOME?.trim();
     const has = /<key>SLEDS_HOME<\/key>\s*<string>([^<]*)<\/string>/.exec(text)?.[1];
     return { installed: true, thisSeat: (want ?? undefined) === (has ?? undefined) };
@@ -20499,7 +21219,7 @@ var musherAgentState = (home, env = process.env) => {
 };
 
 // src/claudeAccount.ts
-import { readFileSync as readFileSync18 } from "node:fs";
+import { readFileSync as readFileSync19 } from "node:fs";
 var PLANS = {
   claude_max: "Max",
   claude_pro: "Pro",
@@ -20528,7 +21248,7 @@ var parseClaudeAccount = (raw) => {
 };
 var readClaudeAccount = (home, env = process.env) => {
   try {
-    return parseClaudeAccount(JSON.parse(readFileSync18(claudeUserConfigPath2(home, env), "utf8")));
+    return parseClaudeAccount(JSON.parse(readFileSync19(claudeUserConfigPath2(home, env), "utf8")));
   } catch {
     return null;
   }
@@ -20665,7 +21385,7 @@ async function runDoctor(o) {
       detail: `seat-event ${seat ? "on" : "missing"} · spec-event ${spec ? "on" : "missing"} · session-event ${session ? "on" : "missing"} · stop-event ${stop ? "on" : "missing"}`,
       fix: all ? undefined : "sleds hooks"
     });
-    const want = env.SLEDS_HOME?.trim() ? resolve9(home, env.SLEDS_HOME.trim()) : undefined;
+    const want = env.SLEDS_HOME?.trim() ? resolve10(home, env.SLEDS_HOME.trim()) : undefined;
     const cmds = sledsCommandsIn(settings);
     const wrong = cmds.filter((c) => {
       const got = bakedHome(c);
@@ -20754,7 +21474,7 @@ async function runDoctor(o) {
     checks.push({ level: "ok", name: "path", detail: which[0] ?? "" });
   const link = sledsLink(home, o.platform);
   if (existsSync21(link)) {
-    const binDir = dirname17(link);
+    const binDir = dirname18(link);
     const onPath = (env.PATH ?? "").split(delimiter3).includes(binDir);
     const first = which[0];
     const fix = `echo 'export PATH="${binDir}:$PATH"' >> ~/.zshrc`;
@@ -20943,12 +21663,12 @@ function sandboxChecks(o, env) {
       }
     ];
   const nonce = o.nonce ?? `sleds-probe-${randomBytes(16).toString("hex")}`;
-  const probe = join26(dir, SANDBOX_PROBE);
-  const work = mkdtempSync(join26(tmpdir(), "sleds-sandbox-"));
+  const probe = join27(dir, SANDBOX_PROBE);
+  const work = mkdtempSync(join27(tmpdir2(), "sleds-sandbox-"));
   try {
     writeFileSync19(probe, `${nonce}
 `, { mode: 384 });
-    const settingsFile = join26(work, "settings.json");
+    const settingsFile = join27(work, "settings.json");
     const settings = engineSandboxSettings(o.home, env, work, SANDBOX_DEFAULT_ALLOW);
     const claudeSettings = settingsPath(o.home, env);
     writeFileSync19(settingsFile, JSON.stringify(settings, null, 2), { mode: 384 });
@@ -21122,7 +21842,7 @@ function boxChecks(o, env, which, need) {
   const file = boxEnvPath(o.home);
   let boxEnvText = null;
   try {
-    boxEnvText = readFileSync19(file, "utf8");
+    boxEnvText = readFileSync20(file, "utf8");
   } catch {
     boxEnvText = null;
   }
@@ -21240,14 +21960,14 @@ import {
   appendFileSync as appendFileSync3,
   chmodSync as chmodSync6,
   mkdirSync as mkdirSync21,
-  readFileSync as readFileSync20,
+  readFileSync as readFileSync21,
   existsSync as realExists2,
   rmSync as rmSync14,
-  statSync as statSync6,
+  statSync as statSync7,
   writeFileSync as writeFileSync20
 } from "node:fs";
-import { hostname as hostname4, userInfo as userInfo3 } from "node:os";
-import { dirname as dirname18, isAbsolute as isAbsolute5, join as join27, resolve as resolve10 } from "node:path";
+import { hostname as hostname4, tmpdir as tmpdir3, userInfo as userInfo3 } from "node:os";
+import { dirname as dirname19, isAbsolute as isAbsolute5, join as join28, resolve as resolve11 } from "node:path";
 init_machine();
 init_state();
 init_meter();
@@ -21507,7 +22227,7 @@ function flagsFromProfile2(flags, given, profile, home) {
     }
   }
   if (profile.reposDir && !has("repos-dir") && !has("repo")) {
-    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join27(home, d.slice(1)) : d).join(":");
+    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join28(home, d.slice(1)) : d).join(":");
     used.push(`repos ${profile.reposDir}`);
   }
   if (profile.mcpStrict !== undefined && !has("strict-mcp") && !has("no-strict-mcp")) {
@@ -21654,7 +22374,7 @@ function engineClient2(o, org, breaker) {
       ...src,
       ...breaker ? { fetchFn: breaker.fetch } : {},
       timeoutMs: ENGINE_TIMEOUT_MS2,
-      version: "0.1.60"
+      version: "0.1.61"
     });
   const asked = org?.trim() || env.SLEDS_ORG?.trim();
   if (asked && !selectOrg(readConfig(o.home), org, env).seat)
@@ -21696,19 +22416,19 @@ function realPidAlive3(pid) {
 function memberMcpConfigs2(o, cwd) {
   const read = o.readJson ?? ((p) => {
     try {
-      return JSON.parse(readFileSync20(p, "utf8"));
+      return JSON.parse(readFileSync21(p, "utf8"));
     } catch {
       return null;
     }
   });
   const claudeDir = (o.env ?? process.env).CLAUDE_CONFIG_DIR;
   return [
-    read(claudeDir ? join27(claudeDir, ".claude.json") : join27(o.home, ".claude.json")),
-    ...cwd ? [read(join27(cwd, ".mcp.json"))] : []
+    read(claudeDir ? join28(claudeDir, ".claude.json") : join28(o.home, ".claude.json")),
+    ...cwd ? [read(join28(cwd, ".mcp.json"))] : []
   ];
 }
 function engineStateDir2(o, org, seat) {
-  return seatStateDir(orgStateDir(o.stateDir ?? join27(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
+  return seatStateDir(orgStateDir(o.stateDir ?? join28(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
 }
 function engineSeat2(o, org) {
   try {
@@ -21731,7 +22451,7 @@ function engineCredential(o) {
   const file = boxEnvPath(o.home);
   let boxEnvText = null;
   try {
-    boxEnvText = readFileSync20(file, "utf8");
+    boxEnvText = readFileSync21(file, "utf8");
   } catch {}
   return detectCredential(o.env ?? process.env, {
     home: o.home,
@@ -21748,11 +22468,11 @@ function engineDeps2(o, flags, source, runner, stateName) {
   const stateDir = engineStateDir2(o, flags.org, flags.seat);
   const file = statePath(stateDir, stateName);
   const mcpOrg = flags.org && engineOrg2(o, flags.org).seated ? flags.org : undefined;
-  const repo = flags.repo ? resolve10(cwd, flags.repo) : undefined;
-  const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve10(cwd, d));
+  const repo = flags.repo ? resolve11(cwd, flags.repo) : undefined;
+  const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve11(cwd, d));
   const { branch, prTitle } = flags;
-  const hooksDir = join27(stateDir, "hooks");
-  const permissionMark = (name) => join27(hooksDir, `${name}.permission.json`);
+  const hooksDir = join28(stateDir, "hooks");
+  const permissionMark = (name) => join28(hooksDir, `${name}.permission.json`);
   const withHook = (name, settings) => applyPermissionHook(settings, [...o.sledsArgv ?? ["sleds"], "permission-event", "--mark", permissionMark(name)].map(shq2).join(" "));
   return {
     source,
@@ -21777,9 +22497,9 @@ function engineDeps2(o, flags, source, runner, stateName) {
       sandbox: true,
       writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd, allow) => {
         const gitCommonDir = gitCommonDirOf2(exec, cwd);
-        const dir = join27(stateDir, "sandbox");
+        const dir = join28(stateDir, "sandbox");
         mkdirSync21(dir, { recursive: true, mode: 448 });
-        const p = join27(dir, `${name}.json`);
+        const p = join28(dir, `${name}.json`);
         const walls = engineSandboxSettings2(o.home, o.env ?? process.env, gitCommonDir, [
           ...SANDBOX_DEFAULT_ALLOW,
           ...flags.sandboxAllow ?? []
@@ -21796,7 +22516,7 @@ function engineDeps2(o, flags, source, runner, stateName) {
     } : {},
     writeHookSettings: (name, allow) => {
       mkdirSync21(hooksDir, { recursive: true, mode: 448 });
-      const p = join27(hooksDir, `${name}.json`);
+      const p = join28(hooksDir, `${name}.json`);
       const base = allow?.length ? { permissions: { allow: [...allow] } } : {};
       writeFileSync20(p, `${JSON.stringify(withHook(name, base), null, 2)}
 `, { mode: 384 });
@@ -21824,9 +22544,9 @@ function engineDeps2(o, flags, source, runner, stateName) {
       exists
     }),
     writeMcpConfig: o.writeMcpConfig ?? ((name, runToken, worktree) => {
-      const dir = join27(stateDir, "mcp");
+      const dir = join28(stateDir, "mcp");
       mkdirSync21(dir, { recursive: true, mode: 448 });
-      const p = join27(dir, `${name}.json`);
+      const p = join28(dir, `${name}.json`);
       let others = {};
       if (flags.strictMcp && flags.mcpAllow?.length) {
         const r = mcpPassThrough(flags.mcpAllow, memberMcpConfigs2(o, worktree));
@@ -21842,12 +22562,26 @@ function engineDeps2(o, flags, source, runner, stateName) {
     }),
     removeMcpConfig: o.removeMcpConfig ?? ((p) => rmSync14(p, { force: true })),
     writePrompt: o.writePrompt ?? ((name, text) => {
-      const dir = join27(stateDir, "prompts");
+      const dir = join28(stateDir, "prompts");
       mkdirSync21(dir, { recursive: true, mode: 448 });
-      const p = join27(dir, `${name}.md`);
+      const p = join28(dir, `${name}.md`);
       writeFileSync20(p, text, { mode: 384 });
       return p;
     }),
+    mockOut: (name) => {
+      const dir = join28(tmpdir3(), "sleds-mocks");
+      mkdirSync21(dir, { recursive: true, mode: 448 });
+      const p = join28(dir, `${name}.html`);
+      rmSync14(p, { force: true });
+      return p;
+    },
+    readMock: (p) => {
+      try {
+        return readFileSync21(p, "utf8");
+      } catch {
+        return null;
+      }
+    },
     ensureWorktree: (e, repoPath, branch, path, base, install) => ensureWorktree(e, repoPath, branch, path, base, o.worktreeFs ?? { ...realWorktreeFs, exists }, { ...install ? { command: install } : {}, log: o.log ?? console.log }),
     ensureDraftWorktree: (e, repoPath, path, base) => ensureDetachedWorktree(e, repoPath, path, base, o.worktreeFs ?? { ...realWorktreeFs, exists }),
     defaultBranch,
@@ -21872,14 +22606,14 @@ function engineDeps2(o, flags, source, runner, stateName) {
 }
 function sandboxDenyRead2(home, env) {
   return {
-    dirs: [...new Set([configDir(home, env), join27(home, ".config", "sleds")])],
+    dirs: [...new Set([configDir(home, env), join28(home, ".config", "sleds")])],
     files: [
       ...new Set([
         tokenPath(home, env),
-        join27(home, ".sleds-token"),
+        join28(home, ".sleds-token"),
         settingsPath(home, env),
         backupPath(home, env),
-        join27(claudeDir(home, env), "settings.local.json")
+        join28(claudeDir(home, env), "settings.local.json")
       ])
     ]
   };
@@ -21896,7 +22630,7 @@ function gitCommonDirOf2(exec, cwd) {
   const dir = r.status === 0 ? r.stdout.trim() : "";
   if (!dir)
     throw new Error(`git has no common dir for ${cwd}, so the sandbox has nowhere to commit`);
-  return resolve10(cwd, dir);
+  return resolve11(cwd, dir);
 }
 function sandboxRefusal(flags) {
   if (flags.lentBy && !flags.sandbox)
@@ -21913,17 +22647,17 @@ function sandboxRefusal(flags) {
 }
 var LENT_NEEDS_SANDBOX2 = "a lent engine runs every session sandboxed (spec 48 rule 10) — add --sandbox to --lent-by";
 function lenderHome2(accountHome, lentBy) {
-  return isAbsolute5(lentBy) ? resolve10(lentBy) : join27(dirname18(accountHome), lentBy);
+  return isAbsolute5(lentBy) ? resolve11(lentBy) : join28(dirname19(accountHome), lentBy);
 }
 function lentHomeProblems2(accountHome, lentBy, modeOf) {
   const lender = lenderHome2(accountHome, lentBy);
-  if (lender === resolve10(accountHome))
+  if (lender === resolve11(accountHome))
     return [
       `--lent-by ${lentBy} is this account — a lent engine runs as the borrower's own OS user, not the lender's`
     ];
   const problems = [];
   for (const [who, home] of [
-    ["the borrower's", resolve10(accountHome)],
+    ["the borrower's", resolve11(accountHome)],
     ["the lender's", lender]
   ]) {
     const mode = modeOf(home);
@@ -21936,7 +22670,7 @@ function lentHomeProblems2(accountHome, lentBy, modeOf) {
 }
 var homeMode2 = (path) => {
   try {
-    return statSync6(path).mode & 4095;
+    return statSync7(path).mode & 4095;
   } catch {
     return null;
   }
@@ -21981,7 +22715,7 @@ async function driveEngine2(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.60"
+    cliVersion: "0.1.61"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -22611,14 +23345,14 @@ init_config();
 import {
   existsSync as existsSync22,
   mkdirSync as mkdirSync22,
-  readFileSync as readFileSync21,
+  readFileSync as readFileSync22,
   readdirSync as readdirSync6,
   realpathSync as realpathSync2,
   rmSync as rmSync15,
   writeFileSync as writeFileSync21
 } from "node:fs";
 import { hostname as hostname5 } from "node:os";
-import { basename as basename7, dirname as dirname19, isAbsolute as isAbsolute6, join as join28 } from "node:path";
+import { basename as basename7, dirname as dirname20, isAbsolute as isAbsolute6, join as join29 } from "node:path";
 init_state();
 var ENGINE_LABEL2 = "ai.sleds.engine";
 var ENGINE_INSTALL_USAGE2 = `usage: sleds engine install [engine flags]   |   sleds engine uninstall [--name <n>] [--org <slug>]
@@ -22639,13 +23373,13 @@ function engineLabel2(name, org, seat) {
   return [ENGINE_LABEL2, org, seat?.trim(), name].filter((p) => Boolean(p)).map((p, i) => i === 0 ? p : engineSlug(p)).join(".");
 }
 function enginePlistPath2(home, name, org, seat) {
-  return join28(home, "Library", "LaunchAgents", `${engineLabel2(name, org, seat)}.plist`);
+  return join29(home, "Library", "LaunchAgents", `${engineLabel2(name, org, seat)}.plist`);
 }
 function engineLogPath2(stateDir, name) {
-  return join28(stateDir, `${engineSlug(name)}.log`);
+  return join29(stateDir, `${engineSlug(name)}.log`);
 }
 function engineEventsPath2(stateDir, name) {
-  return join28(stateDir, `${engineSlug(name)}.events.jsonl`);
+  return join29(stateDir, `${engineSlug(name)}.events.jsonl`);
 }
 var xmlEscape5 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 function buildEnginePlist2(o) {
@@ -22742,10 +23476,10 @@ function readEngines2(dir, suffix, manager, parse) {
   }
   const out = [];
   for (const name of names.filter((n) => n.startsWith(`${ENGINE_LABEL2}.`) && n.endsWith(suffix))) {
-    const path = join28(dir, name);
+    const path = join29(dir, name);
     let parsed;
     try {
-      parsed = parse(readFileSync21(path, "utf8"), name);
+      parsed = parse(readFileSync22(path, "utf8"), name);
     } catch {
       parsed = null;
     }
@@ -22762,7 +23496,7 @@ function readEngines2(dir, suffix, manager, parse) {
 }
 function installedEngines2(home) {
   return [
-    ...readEngines2(join28(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist2),
+    ...readEngines2(join29(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist2),
     ...readEngines2(engineUnitDir(home), ".service", "systemd", (text, file) => {
       const parsed = parseEngineUnit(text);
       return parsed && { label: basename7(file, ".service"), ...parsed };
@@ -22800,7 +23534,7 @@ async function ensureReposDir(o) {
     return false;
   }
   const exists = o.exists ?? existsSync22;
-  const missing = dirs.filter((d) => !exists(/^~(\/|$)/.test(d) ? join28(o.home, d.slice(1)) : d));
+  const missing = dirs.filter((d) => !exists(/^~(\/|$)/.test(d) ? join29(o.home, d.slice(1)) : d));
   if (missing.length) {
     error(`Not a folder on this machine: ${missing.join(", ")}. ${REPOS_DIR_NEEDED}`);
     return false;
@@ -22856,7 +23590,7 @@ function engineInstall2(o) {
   if (platform === "linux")
     return installUnit2({ o, parsed, label, sledsArgv, env: agentEnv, logPath, exec });
   const plist = enginePlistPath2(o.home, parsed.name, parsed.org, seat);
-  mkdirSync22(dirname19(plist), { recursive: true });
+  mkdirSync22(dirname20(plist), { recursive: true });
   if (existsSync22(plist))
     exec("launchctl", ["unload", plist]);
   for (const other of installedEngines2(o.home)) {
@@ -22898,7 +23632,7 @@ function installUnit2(a) {
   const unit = engineUnitPath(o.home, label);
   const unitName = basename7(unit);
   const systemctl = (...args) => exec("systemctl", ["--user", ...args]);
-  mkdirSync22(dirname19(unit), { recursive: true });
+  mkdirSync22(dirname20(unit), { recursive: true });
   if (existsSync22(unit))
     systemctl("stop", unitName);
   for (const other of installedEngines2(o.home)) {
@@ -23099,7 +23833,7 @@ import { closeSync as closeSync5, fstatSync as fstatSync2, openSync as openSync5
 import { hostname as hostname6 } from "node:os";
 
 // src/commands/engineStatus.ts
-import { existsSync as existsSync23, readFileSync as readFileSync22 } from "node:fs";
+import { existsSync as existsSync23, readFileSync as readFileSync23 } from "node:fs";
 init_state();
 
 // src/engine/status.ts
@@ -23181,7 +23915,10 @@ function engineStatus(i) {
         ...opt("review", r.pr.review || undefined),
         mergeable: r.pr.clear === true,
         queued: r.pr.queued === true,
-        ...opt("conflict", conflictOf(r, i.state.decisions, i.watchOf))
+        ...opt("conflict", conflictOf(r, i.state.decisions, i.watchOf)),
+        runner: r.handle.runner,
+        ...r.pr.live ? { watch: i.watchOf(r), watchTarget: watchTarget(r.handle) } : {},
+        ...opt("worktree", r.handle.cwd !== r.repoPath ? r.handle.cwd : undefined)
       });
       continue;
     }
@@ -23255,10 +23992,14 @@ function statusLines(s, now) {
   }
   lines.push(`running ${s.running.length}`);
   for (const r of s.running)
-    lines.push(`  ${r.item}/${r.node}  ${r.title}  · ${r.answerer ? `parked, the decider answers${r.answerer.model ? ` on ${r.answerer.model}` : ""}${r.answerer.effort ? ` · ${r.answerer.effort}` : ""}` : r.parked ? "parked, waiting for your answer" : ago(r.startedAt)} · watch: ${r.watch}`);
+    lines.push(`  ${r.item}/${r.node}  ${r.title}  · ${r.answerer ? `parked, the decider answers${r.answerer.model ? ` on ${r.answerer.model}` : ""}${r.answerer.effort ? ` · ${r.answerer.effort}` : ""}` : r.parked ? "parked, waiting for your answer" : `${r.kind === "mock" ? "drawing a mock · " : ""}${ago(r.startedAt)}`} · watch: ${r.watch}`);
   lines.push(`following ${s.following.length}`);
   for (const f of s.following) {
     lines.push(`  ${f.item}/${f.node}  ${f.pr}${f.checks ? `  checks ${f.checks}` : ""}${f.review ? ` · ${f.review}` : ""}${f.mergeable ? " · ready for your merge" : ""}${f.queued ? " · queued to merge" : ""}`);
+    if (f.watch)
+      lines.push(`    watch: ${f.watch}`);
+    else if (f.worktree)
+      lines.push(`    worktree: ${f.worktree}`);
     const c = f.conflict;
     if (c)
       lines.push(`    conflict on ${c.files.join(", ")}${c.cause ? ` · ${c.cause}` : ""} · ${CONFLICT_STAGE[c.stage]} · since ${ago(c.since)} ago${c.watch ? ` · watch: ${c.watch}` : ""}`);
@@ -23390,7 +24131,7 @@ var engineLogCmd = (o) => {
 
 // src/commands/engineProfile.ts
 init_src();
-import { existsSync as existsSync24, readFileSync as readFileSync23 } from "node:fs";
+import { existsSync as existsSync24, readFileSync as readFileSync24 } from "node:fs";
 import { hostname as hostname7 } from "node:os";
 var PROFILE_USAGE = "usage: sleds engine profile [--json]   |   sleds engine profile set <field>=<value>… [--workspace] [--json]   |   sleds engine profile set --stdin [--workspace] [--json]   |   sleds engine profile --strict-mcp [--mcp-allow <a,b>] | --no-strict-mcp [--workspace] [--json]   |   sleds engine profile --sandbox [--sandbox-allow <a,b>] | --no-sandbox [--workspace] [--json]   |   sleds engine profile set --hold on|off [--workspace] [--json]   |   sleds engine profile set cmuxPassword=<pw> | --cmux-password <pw> [--json]";
 var PROFILE_FIELDS = [
@@ -23661,7 +24402,7 @@ async function engineProfileCmd(o) {
     const rest = words.slice(1);
     let stdin = null;
     if (fromStdin) {
-      const taken = cmuxPasswordFromJson((o.stdin ?? (() => readFileSync23(0, "utf8")))());
+      const taken = cmuxPasswordFromJson((o.stdin ?? (() => readFileSync24(0, "utf8")))());
       if ("error" in taken || taken.password !== undefined && password !== undefined) {
         error("error" in taken ? taken.error : "the cmux password is given once");
         error(PROFILE_USAGE);
@@ -23746,7 +24487,7 @@ var keychainLine = (k) => k === "set" ? "cmuxPassword: set (Keychain)" : k === "
 
 // src/commands/engineStatus.ts
 init_state();
-import { existsSync as existsSync25, readFileSync as readFileSync24 } from "node:fs";
+import { existsSync as existsSync25, readFileSync as readFileSync25 } from "node:fs";
 import { hostname as hostname8 } from "node:os";
 var ENGINE_STATUS_USAGE = "usage: sleds engine status [--name <n>] [--org <slug>] [--json]";
 function parseStatusArgs(argv, host) {
@@ -23802,7 +24543,7 @@ function readEngineStatus(stateDir, engine, host, pidAlive, seat) {
 }
 function safeRead(path) {
   try {
-    return readFileSync24(path, "utf8");
+    return readFileSync25(path, "utf8");
   } catch {
     return "";
   }
@@ -23923,10 +24664,10 @@ init_meter();
 
 // src/owed.ts
 init_config();
-import { existsSync as existsSync26, mkdirSync as mkdirSync23, readFileSync as readFileSync25, renameSync as renameSync11, writeFileSync as writeFileSync22 } from "node:fs";
-import { dirname as dirname20, join as join29 } from "node:path";
-var owedPath = (home) => join29(configDir(home), "owed.json");
-var sessionPath = (home) => join29(configDir(home), "session.json");
+import { existsSync as existsSync26, mkdirSync as mkdirSync23, readFileSync as readFileSync26, renameSync as renameSync11, writeFileSync as writeFileSync22 } from "node:fs";
+import { dirname as dirname21, join as join30 } from "node:path";
+var owedPath = (home) => join30(configDir(home), "owed.json");
+var sessionPath = (home) => join30(configDir(home), "session.json");
 var OWED_TTL_MS = 3 * 24 * 60 * 60000;
 var str14 = (v) => typeof v === "string" ? v : undefined;
 function sourceKey(s) {
@@ -23944,13 +24685,13 @@ var readJson = (p) => {
   if (!existsSync26(p))
     return null;
   try {
-    return JSON.parse(readFileSync25(p, "utf8"));
+    return JSON.parse(readFileSync26(p, "utf8"));
   } catch {
     return null;
   }
 };
 var writeJson = (p, v) => {
-  mkdirSync23(dirname20(p), { recursive: true, mode: 448 });
+  mkdirSync23(dirname21(p), { recursive: true, mode: 448 });
   const tmp = `${p}.${process.pid}.tmp`;
   writeFileSync22(tmp, `${JSON.stringify(v, null, 2)}
 `, { mode: 384 });
@@ -24084,7 +24825,7 @@ function contextFor(deps) {
     ...src,
     fetchFn: deps.fetchFn,
     timeoutMs: deps.timeoutMs,
-    version: "0.1.60"
+    version: "0.1.61"
   }), deps.home, now) : null;
   return {
     channel: "code",
@@ -24788,19 +25529,27 @@ var init = async (o) => {
   const wrote = [];
   const seatInfo = await fetchSeatInfo(url, resolved.token, o.fetchFn);
   const org = seatInfo.org;
-  const wiring = o.proxyAlways ? "proxy-always" : o.seatFirst ? "seat-first" : org?.mode ?? "proxy-always";
+  const current = readSettings(o.home, env);
+  const prior = readConfig(o.home);
+  const proxyUrls = [url, prior.proxyUrl, DEFAULT_PROXY_URL];
+  const ours = isSledsProxyEnv(current, proxyUrls);
+  const gateway = hasGatewayEnv(current) && !ours;
+  const kept = ours ? "proxy-always" : "seat-first";
+  if (!org && !o.proxyAlways && !o.seatFirst)
+    error(`Could not read this seat's org from ${url}/proxy/meter; kept Claude Code's wiring as it was (${kept}). Re-run \`sleds init\` once the proxy answers.`);
+  const wiring = o.proxyAlways ? "proxy-always" : o.seatFirst ? "seat-first" : org?.mode ?? kept;
   if (wiring === "proxy-always" && org && !org.capabilities.upstreamKey) {
     error(`${org.name} has no platform key for the proxy to forward with; --proxy-always would break every request. Using seat-first.`);
   }
   const finalWiring = wiring === "proxy-always" && org && !org.capabilities.upstreamKey ? "seat-first" : wiring;
   if (backupSettings(o.home, env))
     wrote.push(`backed up settings to ${backupPath(o.home, env)}`);
-  const current = readSettings(o.home, env);
-  const wired = finalWiring === "proxy-always" ? applyProxy(current, { url, token: resolved.token }) : removeProxy(current);
+  const wired = finalWiring === "proxy-always" ? applyProxy(current, { url, token: resolved.token }) : ours ? switchOff(current, envToRestore([prior.priorEnv, prior.priorGatewayEnv], proxyUrls)) : current;
+  const priorGatewayEnv = finalWiring !== "proxy-always" ? undefined : gateway ? capturePriorEnv(current) : prior.priorGatewayEnv;
   const slug = org?.slug ?? resolved.approved?.org.slug;
   const statusLine = applyStatusLine(wired, pinOrg(o.statusLineCommand ?? sledsCommand("statusline", o.home, o.env), slug));
   writeSettings(o.home, statusLine.settings, env);
-  wrote.push(finalWiring === "proxy-always" ? `set env.ANTHROPIC_BASE_URL and env.ANTHROPIC_AUTH_TOKEN in ${settingsPath(o.home, env)} (everything through the proxy)` : `left Claude Code on your seat (no ANTHROPIC_BASE_URL in ${settingsPath(o.home, env)}); \`sleds on\` switches to the proxy at a wall`);
+  wrote.push(finalWiring === "proxy-always" ? `set env.ANTHROPIC_BASE_URL and env.ANTHROPIC_AUTH_TOKEN in ${settingsPath(o.home, env)} (everything through the proxy${gateway ? "; your own gateway is kept for `sleds off` and uninstall" : ""})` : gateway ? `left your own ANTHROPIC_BASE_URL / ANTHROPIC_AUTH_TOKEN in ${settingsPath(o.home, env)} as they were; \`sleds on\` switches to the proxy at a wall` : `left Claude Code on your seat (no ANTHROPIC_BASE_URL in ${settingsPath(o.home, env)}); \`sleds on\` switches to the proxy at a wall`);
   wrote.push(statusLine.prior === undefined ? `set statusLine in ${settingsPath(o.home, env)}` : `set statusLine in ${settingsPath(o.home, env)} (previous one kept for uninstall)`);
   hooks2({
     home: o.home,
@@ -24819,12 +25568,12 @@ var init = async (o) => {
     writeTokenFile(o.home, resolved.token);
     wrote.push(`saved token to ${tokenPath(o.home)} (0600)`);
   }
-  const prior = readConfig(o.home);
   const base = {
     ...prior,
     proxyUrl: url,
     agentKind: "claude-code",
-    ...statusLine.prior !== undefined ? { priorStatusLine: statusLine.prior } : {}
+    ...statusLine.prior !== undefined ? { priorStatusLine: statusLine.prior } : {},
+    priorGatewayEnv
   };
   const email = seatInfo.email ?? resolved.approved?.email;
   const asked = orgChoice(prior, o.org, env);
@@ -24978,8 +25727,9 @@ var login = async (o) => {
 // src/commands/logout.ts
 init_config();
 init_state();
-import { existsSync as existsSync27, readFileSync as readFileSync26, rmSync as rmSync16 } from "node:fs";
+import { existsSync as existsSync27, readFileSync as readFileSync27, rmSync as rmSync16 } from "node:fs";
 import { hostname as hostname10 } from "node:os";
+import { basename as basename8 } from "node:path";
 init_settings();
 var LOGOUT_USAGE = "usage: sleds logout [--org <slug>] [--json]";
 function parseLogoutArgs(argv) {
@@ -25101,8 +25851,15 @@ async function logout(o) {
     if (!name)
       continue;
     if (!e.org) {
-      (o.exec ?? defaultExec2)("launchctl", ["unload", e.plist]);
-      rmSync16(e.plist, { force: true });
+      const exec = o.exec ?? defaultExec2;
+      if (e.manager === "systemd") {
+        exec("systemctl", ["--user", "disable", "--now", basename8(e.plist)]);
+        rmSync16(e.plist, { force: true });
+        exec("systemctl", ["--user", "daemon-reload"]);
+      } else {
+        exec("launchctl", ["unload", e.plist]);
+        rmSync16(e.plist, { force: true });
+      }
       continue;
     }
     engineUninstall({
@@ -25135,7 +25892,7 @@ async function logout(o) {
     };
   writeConfig(o.home, next);
   const tp = tokenPath(o.home, env);
-  if (existsSync27(tp) && readFileSync26(tp, "utf8").trim() === seat.token)
+  if (existsSync27(tp) && readFileSync27(tp, "utf8").trim() === seat.token)
     rmSync16(tp, { force: true });
   const active = next.activeOrg ?? next.org?.slug ?? null;
   const result = { ok: true, email, org: slug, paused, active };
@@ -25213,9 +25970,9 @@ var meter = async (o) => {
 init_config();
 init_meter();
 import { spawnSync as spawnSync7 } from "node:child_process";
-import { existsSync as existsSync28, mkdirSync as mkdirSync25, readFileSync as readFileSync27, rmSync as rmSync17, writeFileSync as writeFileSync24 } from "node:fs";
+import { existsSync as existsSync28, mkdirSync as mkdirSync25, readFileSync as readFileSync28, rmSync as rmSync17, writeFileSync as writeFileSync24 } from "node:fs";
 import { hostname as hostname11 } from "node:os";
-import { dirname as dirname21 } from "node:path";
+import { dirname as dirname22 } from "node:path";
 var defaultWhich3 = (cmd) => {
   const path = process.env.PATH ?? "";
   for (const dir of path.split(":").filter(Boolean)) {
@@ -25253,7 +26010,7 @@ var musherInstall = (o) => {
   const plist = musherPlistPath(o.home, env);
   const label = musherLabel(env);
   const dir = configDir(o.home, env);
-  mkdirSync25(dirname21(plist), { recursive: true });
+  mkdirSync25(dirname22(plist), { recursive: true });
   mkdirSync25(dir, { recursive: true, mode: 448 });
   const execPath = o.sledsArgv[0] ?? process.execPath;
   const agentEnv = {
@@ -25373,16 +26130,22 @@ var musherTick = async (o) => {
 };
 var musherConfigure = (o, flags) => {
   const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
   const cfg = readConfig(o.home);
   const musher = { ...cfg.musher ?? {} };
   if (flags.claude)
     musher.claudePath = flags.claude;
-  if (flags.mode)
+  if (flags.mode) {
+    if (!PERMISSION_MODES.includes(flags.mode)) {
+      error(`--mode takes one of ${PERMISSION_MODES.join(", ")} (got ${flags.mode})`);
+      return 1;
+    }
     musher.permissionMode = flags.mode;
+  }
   if (flags.timeout) {
-    const n = Number.parseInt(flags.timeout, 10);
-    if (!Number.isFinite(n) || n <= 0) {
-      (o.error ?? console.error)("--timeout takes minutes, a positive number");
+    const n = /^\d+$/.test(flags.timeout) ? Number(flags.timeout) : Number.NaN;
+    if (!Number.isSafeInteger(n) || n <= 0) {
+      error("--timeout takes minutes, a positive whole number");
       return 1;
     }
     musher.timeoutMinutes = n;
@@ -25397,22 +26160,38 @@ var defaultExecSync = (cmd, args) => {
     return { ok: false, stderr: r.error.message };
   return { ok: r.status === 0, stderr: r.stderr ?? "" };
 };
-var musher3 = async (o) => {
-  const args = [...o.argv];
+var MUSHER_SWITCHES2 = new Set(["install", "uninstall", "status"]);
+var MUSHER_SETTINGS2 = new Set(["claude", "mode", "timeout"]);
+var parseMusherArgs = (argv) => {
   const flags = {};
   const positional = [];
-  for (let i = 0;i < args.length; i++) {
-    const a = args[i] ?? "";
-    if (a.startsWith("--")) {
-      const next = args[i + 1];
-      if (next !== undefined && !next.startsWith("--")) {
-        flags[a.slice(2)] = next;
-        i++;
-      } else
-        flags[a.slice(2)] = "true";
-    } else
+  for (let i = 0;i < argv.length; i++) {
+    const a = argv[i] ?? "";
+    if (!a.startsWith("--")) {
       positional.push(a);
+      continue;
+    }
+    const eq = a.indexOf("=");
+    const name = a.slice(2, eq < 0 ? undefined : eq);
+    if (MUSHER_SWITCHES2.has(name) && eq < 0)
+      flags[name] = "true";
+    else if (MUSHER_SETTINGS2.has(name)) {
+      const v = eq < 0 ? argv[++i] : a.slice(eq + 1);
+      if (!v?.trim() || v.startsWith("--"))
+        return { error: `--${name} needs a value` };
+      flags[name] = v.trim();
+    } else
+      return { error: `unknown argument ${a}` };
+  }
+  return { flags, positional };
+};
+var musher3 = async (o) => {
+  const parsed = parseMusherArgs(o.argv);
+  if ("error" in parsed) {
+    (o.error ?? console.error)(`sleds musher: ${parsed.error}`);
+    return 1;
   }
+  const { flags, positional } = parsed;
   if (flags.install)
     return musherInstall(o);
   if (flags.uninstall)
@@ -25430,13 +26209,24 @@ var musher3 = async (o) => {
 // src/commands/off.ts
 init_config();
 init_settings();
+
+// src/commands/init.ts
+init_config();
+init_state();
+init_settings();
+var DEFAULT_PROXY_URL2 = "https://proxy.sleds.ai";
+var lineReaders2 = new WeakMap;
+
+// src/commands/off.ts
 var off = (o) => {
   const log = o.log ?? console.log;
   const cfg = readConfig(o.home);
   const settings = readSettings(o.home);
-  const wasOn = cfg.mode === "on" || isPointedAtProxy(settings);
-  if (wasOn)
-    writeSettings(o.home, switchOff(settings, cfg.priorEnv ?? {}));
+  const proxyUrls = [cfg.proxyUrl, DEFAULT_PROXY_URL2];
+  const pointed = isSledsProxyEnv(settings, proxyUrls);
+  const wasOn = cfg.mode === "on" || pointed;
+  if (pointed)
+    writeSettings(o.home, switchOff(settings, cfg.priorEnv ?? cfg.priorGatewayEnv ?? {}));
   if (o.scheduler)
     cancelRevert(o.scheduler, cfg.schedule);
   const next = {
@@ -25446,6 +26236,7 @@ var off = (o) => {
     untilReset: undefined,
     reason: undefined,
     priorEnv: undefined,
+    priorGatewayEnv: pointed && !cfg.priorEnv ? undefined : cfg.priorGatewayEnv,
     schedule: undefined
   };
   writeConfig(o.home, next);
@@ -25460,15 +26251,6 @@ var off = (o) => {
 // src/commands/on.ts
 init_config();
 init_settings();
-
-// src/commands/init.ts
-init_config();
-init_state();
-init_settings();
-var DEFAULT_PROXY_URL2 = "https://proxy.sleds.ai";
-var lineReaders2 = new WeakMap;
-
-// src/commands/on.ts
 var on = (o) => {
   const log = o.log ?? console.log;
   const error = o.error ?? console.error;
@@ -25618,7 +26400,7 @@ var orgUse = (o) => {
   writeTokenFile(o.home, seat.token);
   if (existsSync29(settingsPath(o.home)) && cfg.mode !== "on") {
     const settings = readSettings(o.home);
-    const pointed = readProxy(settings);
+    const pointed = isSledsProxyEnv(settings, [cfg.proxyUrl]) ? readProxy(settings) : null;
     const url = pointed?.url ?? cfg.proxyUrl;
     if (seat.wiring === "proxy-always" && url)
       writeSettings(o.home, applyProxy(settings, { url, token: seat.token }));
@@ -25653,7 +26435,7 @@ var orgCmd = (o) => {
 init_src();
 import { spawnSync as spawnSync8 } from "node:child_process";
 import { writeFileSync as writeFileSync25 } from "node:fs";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 function packFileName(key) {
   return `pack-${slugify(key, 80) || "item"}.md`;
 }
@@ -25681,7 +26463,7 @@ var packCmd = async (o) => {
     log(r.text);
     return 0;
   }
-  const path = join30(o.cwd ?? process.cwd(), packFileName(key));
+  const path = join31(o.cwd ?? process.cwd(), packFileName(key));
   (o.write ?? ((p, t) => writeFileSync25(p, t.endsWith(`
 `) ? t : `${t}
 `)))(path, r.text);
@@ -25690,8 +26472,8 @@ var packCmd = async (o) => {
 };
 
 // src/commands/permissionEvent.ts
-import { chmodSync as chmodSync7, mkdirSync as mkdirSync26, readFileSync as readFileSync28, renameSync as renameSync12, rmSync as rmSync19, writeFileSync as writeFileSync26 } from "node:fs";
-import { dirname as dirname22 } from "node:path";
+import { chmodSync as chmodSync7, mkdirSync as mkdirSync26, readFileSync as readFileSync29, renameSync as renameSync12, rmSync as rmSync19, writeFileSync as writeFileSync26 } from "node:fs";
+import { dirname as dirname23 } from "node:path";
 var isObject13 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var messageOf = (text) => {
   try {
@@ -25715,7 +26497,7 @@ var permissionEvent = async (o) => {
     if (!isToolPermission2(message))
       return 0;
     const mark = { message, at: (o.now ?? Date.now)() };
-    mkdirSync26(dirname22(o.mark), { recursive: true, mode: 448 });
+    mkdirSync26(dirname23(o.mark), { recursive: true, mode: 448 });
     const tmp = `${o.mark}.${process.pid}.tmp`;
     writeFileSync26(tmp, `${JSON.stringify(mark)}
 `, { mode: 384 });
@@ -25762,6 +26544,7 @@ var exitsLine = (hasUpstreamKey) => hasUpstreamKey ? "`/sled handoff <what you w
 var approachingContext = (bar, usedPct, resetsAt, hasUpstreamKey, now) => `[SLEDS] This seat is at ${usedPct !== undefined ? `${Math.round(usedPct)}%` : "90%+"} of its ${LABEL[bar]} limit; it resets in ${fmtIn(resetsAt - now)}. Tell the user in one short line before you answer, and offer the exits: ${exitsLine(hasUpstreamKey)} Do not mention this again unless asked.`;
 var hitContext = (bar, resetsAt, hasUpstreamKey, now) => `[SLEDS] This seat hit its ${LABEL[bar]} limit; it resets in ${fmtIn(resetsAt - now)}. If this reply fails or the user is stuck, the exits are: ${exitsLine(hasUpstreamKey)} Say so in one line.`;
 var creditsBlockText = (hasUpstreamKey) => `SLEDS: this seat is out of usage credits — the next reply would fail, so this prompt was not sent. ${hasUpstreamKey ? "Exits: /sled handoff <task> (a buddy picks it up), sleds on (continue on the workspace's platform key), or /model to a cheaper model." : "Exits: /sled handoff <task> (a buddy picks it up), sleds defer (resume when credits are topped up), or /model to a cheaper model."} Re-send your prompt after choosing; SLEDS will not block again.`;
+var creditsContext = (hasUpstreamKey) => `[SLEDS] This seat is out of usage credits; this reply may fail. Tell the user in one short line, and offer the exits: ${exitsLine(hasUpstreamKey)}`;
 var promptEvent = async (o) => {
   const log = o.log ?? console.log;
   const error = o.error ?? console.error;
@@ -25784,27 +26567,35 @@ var promptEvent = async (o) => {
   const mark = (bar, stage, at) => {
     told[bar] = { ...told[bar] ?? {}, [stage]: at };
   };
-  let code = 0;
+  for (const e of pending)
+    mark(e.bar, e.stage, e.resetsAt);
+  let saved = true;
+  try {
+    writeSeatState(o.home, { ...state, told }, key);
+  } catch {
+    saved = false;
+  }
+  let block = false;
   const lines = [];
   for (const e of pending) {
-    mark(e.bar, e.stage, e.resetsAt);
     if (e.bar === "credits") {
-      if (code !== 2) {
-        error(creditsBlockText(hasKey));
-        code = 2;
-      }
+      if (saved)
+        block = true;
+      else
+        lines.push(creditsContext(hasKey));
       continue;
     }
     const pct = state.window?.[e.bar]?.usedPct;
     lines.push(e.stage === "approaching" ? approachingContext(e.bar, pct, e.resetsAt, hasKey, now) : hitContext(e.bar, e.resetsAt, hasKey, now));
   }
-  try {
-    writeSeatState(o.home, { ...state, told }, key);
-  } catch {}
-  if (code === 0 && lines.length > 0)
+  if (block) {
+    error(creditsBlockText(hasKey));
+    return 2;
+  }
+  if (lines.length > 0)
     log(lines.join(`
 `));
-  return code;
+  return 0;
 };
 
 // src/commands/reopen.ts
@@ -25878,13 +26669,14 @@ async function reopenCmd(o) {
 
 // src/commands/route.ts
 init_src();
-import { readFileSync as readFileSync29 } from "node:fs";
+import { readFileSync as readFileSync30 } from "node:fs";
 import { hostname as hostname12 } from "node:os";
 var ARM_USAGE = "usage: sleds route arm <key> [--off] [--json] [--name <engine>] [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--mode <permission-mode>] [--model <id>] [--effort <e>] [--branch '<template>'] [--pr-title '<template>'] [--repos-dir <dir>]";
-var USAGE2 = "usage: sleds route <key> [--long | --dot | --json]   |   sleds route arm <key> [--off] [--json]   |   sleds route answer <key>/<node> --stdin   |   sleds route propose <key> --file <nodes.json>   |   sleds route approve <key>   |   sleds route redraft <key>   |   sleds route single <key>   |   sleds route elsewhere <key> [--note <text>]   |   sleds route decisions [<key>] [--flagged]   |   sleds route decision <key> <id> --seen | --answer --stdin [--route accept|keep|redraft] | --keep-route | --apply [--answer --stdin] | --overrule --stdin | --ready   |   sleds route run <key> [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir>] [--mode <permission-mode>] [--model <id>] [--branch '<template>'] [--pr-title '<template>'] [--once]";
+var USAGE2 = "usage: sleds route <key> [--long | --dot | --json]   |   sleds route arm <key> [--off] [--json]   |   sleds route answer <key>/<node> --stdin   |   sleds route instruct <key>/<node> --stdin [--voice]   |   sleds route propose <key> --file <nodes.json>   |   sleds route approve <key> [--voice --stdin]   |   sleds route redraft <key>   |   sleds route single <key>   |   sleds route elsewhere <key> [--note <text>]   |   sleds route decisions [<key>] [--flagged]   |   sleds route decision <key> <id> --seen | --answer --stdin [--route accept|keep|redraft] | --keep-route | --apply [--answer --stdin] | --overrule --stdin | --ready   |   sleds route run <key> [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir>] [--mode <permission-mode>] [--model <id>] [--branch '<template>'] [--pr-title '<template>'] [--once]";
 var ANSWER_USAGE = "usage: sleds route answer <key>/<node> <answer…>   |   sleds route answer <key>/<node> --stdin   [--json]";
+var INSTRUCT_USAGE = "usage: sleds route instruct <key>/<node> <instruction…>   |   sleds route instruct <key>/<node> --stdin [--voice]   [--json]";
 var PROPOSE_USAGE = "usage: sleds route propose <key> (--file <nodes.json> | --stdin) [--name <engine>] [--json]";
-var APPROVE_USAGE = "usage: sleds route approve <key> [--file <nodes.json>] [--json]";
+var APPROVE_USAGE = "usage: sleds route approve <key> [--file <nodes.json>] [--voice --stdin] [--json]";
 var REDRAFT_USAGE = "usage: sleds route redraft <key> [--json]";
 var SINGLE_USAGE = "usage: sleds route single <key> [--json]";
 var ELSEWHERE_USAGE = "usage: sleds route elsewhere <key> [--note <text>] [--json]";
@@ -25933,6 +26725,10 @@ function parseVerbArgs(argv, allowed) {
         out[flag] = true;
         continue;
       }
+      if (flag === "voice") {
+        out.voice = true;
+        continue;
+      }
       const value = argv[i + 1];
       if (value === undefined || value.startsWith("--"))
         return { error: `${a} needs a value` };
@@ -26056,7 +26852,7 @@ async function answerCmd(o, argv) {
   const words = argv.filter((a) => a !== "--json" && a !== "--stdin");
   const ref = words[0] ?? "";
   const slash = ref.lastIndexOf("/");
-  const answer = (fromStdin ? (o.stdin ?? (() => readFileSync29(0, "utf8")))() : words.slice(1).join(" ")).trim();
+  const answer = (fromStdin ? (o.stdin ?? (() => readFileSync30(0, "utf8")))() : words.slice(1).join(" ")).trim();
   if (slash <= 0 || slash === ref.length - 1 || fromStdin && words.length > 1) {
     error(ANSWER_USAGE);
     return 2;
@@ -26088,6 +26884,59 @@ async function answerCmd(o, argv) {
     log(r.json?.state === "answered" ? `${ref}: its landing is answered — the nodes it held are released` : `${ref} answered — back to ready; the engine takes it on its next check`);
   return 0;
 }
+async function instructCmd(o, argv) {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  const json = argv.includes("--json");
+  const fromStdin = argv.includes("--stdin");
+  const voice = argv.includes("--voice");
+  const words = argv.filter((a) => a !== "--json" && a !== "--stdin" && a !== "--voice");
+  const ref = words[0] ?? "";
+  const slash = ref.lastIndexOf("/");
+  if (slash <= 0 || slash === ref.length - 1 || fromStdin && words.length > 1 || voice && !fromStdin || words.some((w) => w.startsWith("--"))) {
+    error(INSTRUCT_USAGE);
+    return 2;
+  }
+  const text = fromStdin ? (o.stdin ?? (() => readFileSync30(0, "utf8")))() : words.slice(1).join(" ");
+  const { md, heard } = voice ? splitVoiceStdin(text) : { md: text.trim(), heard: undefined };
+  if (!md) {
+    error("an instruction needs some text");
+    return 2;
+  }
+  const client = engineClient(o);
+  if ("error" in client) {
+    error(client.error);
+    return 1;
+  }
+  const r = await client.postFull("/proxy/route/instruct", {
+    project: ref,
+    md,
+    ...heard !== undefined ? { voice: { heard } } : {}
+  });
+  if (!r) {
+    error(`${ref}: SLEDS unreachable — nothing sent`);
+    return 1;
+  }
+  const ok = r.status < 300 && r.json?.ok !== false;
+  if (json)
+    log(JSON.stringify(r.json ?? { ok: false, error: `HTTP ${r.status}` }));
+  if (!ok) {
+    const why = typeof r.json?.error === "string" ? r.json.error : `HTTP ${r.status}`;
+    if (!json)
+      error(`${ref}: ${why}`);
+    return 1;
+  }
+  if (!json)
+    log(`${ref} instructed — the engine following its PR hands it to the session`);
+  return 0;
+}
+function splitVoiceStdin(text) {
+  const nl = text.indexOf(`
+`);
+  const md = (nl < 0 ? text : text.slice(0, nl)).trim();
+  const rest = nl < 0 ? "" : text.slice(nl + 1).trim();
+  return { md, heard: rest || md };
+}
 async function proposeCmd(o, argv) {
   const log = o.log ?? console.log;
   const error = o.error ?? console.error;
@@ -26135,12 +26984,13 @@ async function proposeCmd(o, argv) {
 async function approveCmd(o, argv) {
   const log = o.log ?? console.log;
   const error = o.error ?? console.error;
-  const a = parseVerbArgs(argv, ["file", "json"]);
-  if ("error" in a) {
-    error(a.error);
+  const a = parseVerbArgs(argv, ["file", "json", "voice", "stdin"]);
+  if ("error" in a || Boolean(a.voice) !== a.stdin) {
+    error("error" in a ? a.error : "--voice and --stdin go together: stdin is what was heard");
     error(APPROVE_USAGE);
     return 2;
   }
+  const heard = a.voice ? (o.stdin ?? (() => readFileSync30(0, "utf8")))().trim() : undefined;
   let nodes;
   let approach;
   if (a.file) {
@@ -26160,7 +27010,8 @@ async function approveCmd(o, argv) {
   const r = await client.postFull("/proxy/route/approve", {
     project: a.key,
     ...nodes ? { nodes } : {},
-    ...approach ? { approach } : {}
+    ...approach ? { approach } : {},
+    ...heard !== undefined ? { voice: { heard } } : {}
   });
   if (!r) {
     error(`${a.key}: SLEDS unreachable — nothing approved`);
@@ -26262,7 +27113,7 @@ async function decisionCmd(o, argv) {
     error(DECISION_USAGE);
     return 2;
   }
-  const md = seen || routeAlone ? "" : (fromStdin ? (o.stdin ?? (() => readFileSync29(0, "utf8")))() : rest.join(" ")).trim();
+  const md = seen || routeAlone ? "" : (fromStdin ? (o.stdin ?? (() => readFileSync30(0, "utf8")))() : rest.join(" ")).trim();
   if (!seen && !routeAlone && (!md || fromStdin && rest.length > 0)) {
     error(md ? DECISION_USAGE : `${answer ? "an answer" : "an overrule"} needs some text`);
     return 2;
@@ -26441,7 +27292,7 @@ function approvedLine(key, j) {
 function readNodes(o, a) {
   let text;
   try {
-    text = a.file ? (o.readFile ?? ((p) => readFileSync29(p, "utf8")))(a.file) : (o.stdin ?? (() => readFileSync29(0, "utf8")))();
+    text = a.file ? (o.readFile ?? ((p) => readFileSync30(p, "utf8")))(a.file) : (o.stdin ?? (() => readFileSync30(0, "utf8")))();
   } catch (e) {
     return { error: e instanceof Error ? e.message : String(e) };
   }
@@ -26470,6 +27321,8 @@ var routeCmd = async (o) => {
     return armCmd(o, o.argv.slice(1));
   if (o.argv[0] === "answer")
     return answerCmd(o, o.argv.slice(1));
+  if (o.argv[0] === "instruct")
+    return instructCmd(o, o.argv.slice(1));
   if (o.argv[0] === "propose")
     return proposeCmd(o, o.argv.slice(1));
   if (o.argv[0] === "approve")
@@ -26796,8 +27649,11 @@ var seatEvent = async (o) => {
     if (week && week.resetsAt > now)
       writeSeatState(o.home, { ...state, lastWallResetsAt: week.resetsAt }, key);
   } catch {}
-  const line = seatWallLine(readConfig(o.home).org?.capabilities.upstreamKey !== false);
-  log(line);
+  let hasKey = true;
+  try {
+    hasKey = readConfig(o.home).org?.capabilities.upstreamKey !== false;
+  } catch {}
+  log(seatWallLine(hasKey));
   return 0;
 };
 
@@ -26873,14 +27729,14 @@ async function seatRevokeCmd(o) {
 
 // src/commands/seatSync.ts
 import { execFileSync as execFileSync5 } from "node:child_process";
-import { existsSync as existsSync30, mkdirSync as mkdirSync27, readFileSync as readFileSync30, readdirSync as readdirSync7, rmSync as rmSync21, writeFileSync as writeFileSync27 } from "node:fs";
+import { existsSync as existsSync30, mkdirSync as mkdirSync27, readFileSync as readFileSync31, readdirSync as readdirSync7, rmSync as rmSync21, writeFileSync as writeFileSync27 } from "node:fs";
 import { platform as platform2 } from "node:os";
-import { dirname as dirname23, join as join32 } from "node:path";
+import { dirname as dirname24, join as join33 } from "node:path";
 
 // src/cookieDb.ts
 import { copyFileSync as copyFileSync3, rmSync as rmSync20 } from "node:fs";
-import { tmpdir as tmpdir2 } from "node:os";
-import { join as join31 } from "node:path";
+import { tmpdir as tmpdir4 } from "node:os";
+import { join as join32 } from "node:path";
 var QUERY = "SELECT name, hex(encrypted_value) AS ev FROM cookies WHERE host_key LIKE '%claude.ai%'";
 var isBun = () => typeof globalThis.Bun !== "undefined";
 async function queryRows(dbPath) {
@@ -26909,7 +27765,7 @@ function nodeSqlite() {
   return mod;
 }
 async function readCookieRows(dbPath) {
-  const copy = join31(tmpdir2(), `sleds-cookies-${process.pid}-${Date.now()}.sqlite`);
+  const copy = join32(tmpdir4(), `sleds-cookies-${process.pid}-${Date.now()}.sqlite`);
   copyFileSync3(dbPath, copy);
   try {
     const rows = await queryRows(copy);
@@ -27202,7 +28058,7 @@ function findFile(root, name) {
       continue;
     }
     for (const e of entries) {
-      const p = join32(dir, e.name);
+      const p = join33(dir, e.name);
       if (e.isDirectory())
         stack.push(p);
       else if (e.name === name)
@@ -27213,7 +28069,7 @@ function findFile(root, name) {
 }
 function findCookieDb(home, source) {
   const b = BROWSERS[source.browser];
-  const root = join32(home, APP_SUPPORT, b.appDir);
+  const root = join33(home, APP_SUPPORT, b.appDir);
   if (!existsSync30(root))
     throw new Error(`no ${source.browser} data at ${root} (is it installed?)`);
   if (!b.profiled) {
@@ -27222,15 +28078,15 @@ function findCookieDb(home, source) {
       throw new Error(`no cookie store under ${root}`);
     return db;
   }
-  const localStatePath = join32(root, "Local State");
-  const localState = existsSync30(localStatePath) ? readFileSync30(localStatePath, "utf8") : null;
+  const localStatePath = join33(root, "Local State");
+  const localState = existsSync30(localStatePath) ? readFileSync31(localStatePath, "utf8") : null;
   const wanted = source.profile ?? "Default";
   const { dir, ambiguous } = resolveProfileDir(localState, wanted);
   if (ambiguous)
     throw new Error(`"${wanted}" names ${ambiguous.length} ${source.browser} profiles (${ambiguous.join(", ")}) — pass the directory or the account email instead`);
   if (!dir)
     throw new Error(`no ${source.browser} profile named "${wanted}" (check chrome://version)`);
-  const db = cookieDbCandidates(join32(root, dir)).find((p) => existsSync30(p));
+  const db = cookieDbCandidates(join33(root, dir)).find((p) => existsSync30(p));
   if (!db)
     throw new Error(`profile "${dir}" has no cookie store yet (open claude.ai in it once)`);
   return db;
@@ -27274,7 +28130,7 @@ function fetchSeatUsage(jar, org, now, run) {
 }
 function launchAgentPlist(argv, home, source) {
   const label = launchLabel(source);
-  const log = join32(home, ".config", "sleds", `${label.slice("ai.sleds.".length)}.log`);
+  const log = join33(home, ".config", "sleds", `${label.slice("ai.sleds.".length)}.log`);
   const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
   const args = [...argv, "seat-sync", ...sourceArgs(source)].map((a) => `    <string>${esc(a)}</string>`).join(`
 `);
@@ -27296,20 +28152,20 @@ ${args}
 `;
 }
 function plistPath2(home, source) {
-  return join32(home, "Library", "LaunchAgents", `${launchLabel(source)}.plist`);
+  return join33(home, "Library", "LaunchAgents", `${launchLabel(source)}.plist`);
 }
 function install(home, argv, source, log, launchctl) {
   if (!argv[0]) {
     log("cannot resolve the sleds command to install the timer");
     return 1;
   }
-  const dir = join32(home, "Library", "LaunchAgents");
+  const dir = join33(home, "Library", "LaunchAgents");
   mkdirSync27(dir, { recursive: true });
   const path = plistPath2(home, source);
   const tokenPath = seatTokenPath(home, source);
   rmSync21(tokenPath, { force: true });
   if (source.token) {
-    mkdirSync27(dirname23(tokenPath), { recursive: true, mode: 448 });
+    mkdirSync27(dirname24(tokenPath), { recursive: true, mode: 448 });
     writeFileSync27(tokenPath, `${source.token}
 `, { mode: 384 });
   }
@@ -27390,10 +28246,12 @@ var seatSync = async (o) => {
     log(`seat-sync: usage read failed — ${why}`);
     return 2;
   }
-  try {
-    const key = seatKeyFor(o.home, process.env);
-    writeSeatState(o.home, { ...readSeatState(o.home, key), window: usageAsWindow(usage) }, key);
-  } catch {}
+  if (token === saved?.token) {
+    try {
+      const key = seatKeyFor(o.home, process.env);
+      writeSeatState(o.home, { ...readSeatState(o.home, key), window: usageAsWindow(usage) }, key);
+    } catch {}
+  }
   const posted = await postSeat(proxyUrl, token, seatSyncBody(usage), o.fetchFn ?? fetch);
   const wk = usage.sevenDay ? `wk ${Math.round(usage.sevenDay.usedPct)}%` : "wk —";
   const models = Object.keys(usage.models).length;
@@ -27403,7 +28261,7 @@ var seatSync = async (o) => {
 };
 function readSeatToken(home, source) {
   try {
-    return readFileSync30(seatTokenPath(home, source), "utf8").trim() || undefined;
+    return readFileSync31(seatTokenPath(home, source), "utf8").trim() || undefined;
   } catch {
     return;
   }
@@ -27486,8 +28344,8 @@ var sessionEvent = async (o) => {
 
 // src/commands/specEvent.ts
 init_meter();
-import { readFileSync as readFileSync31, statSync as statSync7 } from "node:fs";
-import { basename as basename8, isAbsolute as isAbsolute7, relative as relative2 } from "node:path";
+import { readFileSync as readFileSync32, statSync as statSync8 } from "node:fs";
+import { basename as basename9, isAbsolute as isAbsolute7, relative as relative2 } from "node:path";
 var HOOK_STDIN_TIMEOUT_MS3 = 1000;
 var ESTIMATE_TIMEOUT_MS = 4000;
 var MIN_SPEC_CHARS = 200;
@@ -27500,12 +28358,12 @@ function isSpecPath(path) {
     return false;
   if (NOT_SPEC.test(path))
     return false;
-  return SPEC_DIRS.test(path) || SPEC_NAMES.test(basename8(path));
+  return SPEC_DIRS.test(path) || SPEC_NAMES.test(basename9(path));
 }
 function specTitle(body, path) {
   const m = /^#\s+(.+?)\s*$/m.exec(body);
   const t = m?.[1]?.trim();
-  return (t && t.length > 0 ? t : basename8(path).replace(/\.(md|mdx)$/i, "")).slice(0, 120);
+  return (t && t.length > 0 ? t : basename9(path).replace(/\.(md|mdx)$/i, "")).slice(0, 120);
 }
 function looksLikeSpec(body) {
   if (body.trim().length < MIN_SPEC_CHARS)
@@ -27540,9 +28398,9 @@ function projectKey(filePath, cwd) {
 }
 function readFileOrNull(path) {
   try {
-    if (statSync7(path).size > 2000000)
+    if (statSync8(path).size > 2000000)
       return null;
-    return readFileSync31(path, "utf8");
+    return readFileSync32(path, "utf8");
   } catch {
     return null;
   }
@@ -27553,7 +28411,12 @@ var specEvent = async (o) => {
   const input = raw ? parseHookInput(raw) : null;
   if (!input || !isSpecPath(input.filePath))
     return 0;
-  const src = meterSource(o.home);
+  let src;
+  try {
+    src = meterSource(o.home);
+  } catch {
+    return 0;
+  }
   if (!src)
     return 0;
   const body = (o.readFile ?? readFileOrNull)(input.filePath);
@@ -27563,7 +28426,7 @@ var specEvent = async (o) => {
   const spec = {
     title: specTitle(body, input.filePath),
     body: body.slice(0, MAX_SPEC_CHARS),
-    repoHint: input.cwd ? basename8(input.cwd) : undefined
+    repoHint: input.cwd ? basename9(input.cwd) : undefined
   };
   try {
     const res = await (o.fetchFn ?? fetch)(`${src.proxyUrl}/proxy/estimate`, {
@@ -27759,7 +28622,6 @@ var status3 = async (o) => {
 };
 
 // src/commands/statusline.ts
-init_config();
 init_meter();
 var statusline = async (o) => {
   const log = o.log ?? console.log;
@@ -27798,7 +28660,8 @@ var statusline = async (o) => {
       home: o.home,
       now,
       fetchFn: o.fetchFn,
-      timeoutMs: o.timeoutMs
+      timeoutMs: o.timeoutMs,
+      env: o.env
     });
     line = formatMeterLine(meter, now, seatFragment);
   } catch {
@@ -27817,9 +28680,9 @@ var speakToCockpit = async (o, key, window, events, now) => {
   try {
     const st = readSeatState(o.home, key);
     let feed;
-    const src = meterSource(o.home);
+    const src = meterSource(o.home, undefined, { env: o.env });
     if (src && now - (st.cockpit?.feed?.at ?? 0) >= FEED_MIN_INTERVAL_MS) {
-      const got = await fetchFeed({ ...src, email: readConfig(o.home).email, fetchFn: o.fetchFn, timeoutMs: o.timeoutMs }, now);
+      const got = await fetchFeed({ ...src, email: key.email ?? undefined, fetchFn: o.fetchFn, timeoutMs: o.timeoutMs }, now);
       if (got)
         feed = got;
     }
@@ -27832,13 +28695,13 @@ var speakToCockpit = async (o, key, window, events, now) => {
       return;
     writeSeatState(o.home, { ...readSeatState(o.home, key), cockpit: r.state }, key);
     if (r.argv.length)
-      await runCockpit(cockpit, r.argv, { spawn: o.spawn });
+      await runCockpit(cockpit, r.argv, { exec: o.exec });
   } catch {}
 };
 var rememberSeat = (o, key, window, session, now, input) => {
   const prior = readSeatState(o.home, key);
   let state = { ...prior, window, ...session ? { session } : {} };
-  const src = meterSource(o.home);
+  const src = meterSource(o.home, undefined, { env: o.env });
   const posts = [];
   if (src && shouldPostSeat(prior, window, now)) {
     state = markPosted(state, window, now);
@@ -27868,7 +28731,7 @@ var creditsEvent = (o, prior, input, now) => {
 var announce = (o, events) => {
   if (events.length === 0)
     return [];
-  const src = meterSource(o.home);
+  const src = meterSource(o.home, undefined, { env: o.env });
   if (!src)
     return [];
   return events.map((e) => postSeatWall({ ...src, fetchFn: o.fetchFn, timeoutMs: o.timeoutMs ?? SEAT_POST_TIMEOUT_MS }, {
@@ -27882,7 +28745,7 @@ var announce = (o, events) => {
 
 // src/commands/stopEvent.ts
 init_meter();
-import { existsSync as existsSync32, readFileSync as readFileSync32 } from "node:fs";
+import { existsSync as existsSync32, readFileSync as readFileSync33 } from "node:fs";
 
 // src/transcript.ts
 var isObject16 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
@@ -27975,10 +28838,15 @@ async function postTranscript(o, payload, now) {
   const path = payload.transcript_path?.trim();
   if (!sessionId || !path)
     return false;
-  const src = meterSource(o.home);
+  let src;
+  try {
+    src = meterSource(o.home);
+  } catch {
+    return false;
+  }
   if (!src)
     return false;
-  const read = o.readFile ?? ((p) => existsSync32(p) ? readFileSync32(p, "utf8") : null);
+  const read = o.readFile ?? ((p) => existsSync32(p) ? readFileSync33(p, "utf8") : null);
   let text;
   try {
     text = read(path);
@@ -28072,21 +28940,27 @@ var uninstall2 = (o) => {
   if (existsSync33(settingsPath(o.home))) {
     let settings = readSettings(o.home);
     let changed = false;
-    if (hasEitherKey(settings)) {
-      settings = removeProxy(settings);
+    const cfg = readConfig(o.home);
+    const proxyUrls = [cfg.proxyUrl, DEFAULT_PROXY_URL2];
+    const restoredEnv = isSledsProxyEnv(settings, proxyUrls);
+    if (restoredEnv) {
+      const restore = envToRestore([cfg.priorEnv, cfg.priorGatewayEnv], proxyUrls);
+      settings = switchOff(settings, restore);
       changed = true;
-      removed.push(`env.ANTHROPIC_BASE_URL and env.ANTHROPIC_AUTH_TOKEN from ${settingsPath(o.home)}`);
+      removed.push(hasGatewayEnv(settings) ? `env.ANTHROPIC_BASE_URL and env.ANTHROPIC_AUTH_TOKEN from ${settingsPath(o.home)} (your own gateway restored)` : `env.ANTHROPIC_BASE_URL and env.ANTHROPIC_AUTH_TOKEN from ${settingsPath(o.home)}`);
     }
-    if (isSledsStatusLine(settings[STATUS_LINE_KEY])) {
-      const cfg = readConfig(o.home);
+    const restoredLine = isSledsStatusLine(settings[STATUS_LINE_KEY]);
+    if (restoredLine) {
       settings = removeStatusLine(settings, cfg.priorStatusLine);
       changed = true;
       removed.push(cfg.priorStatusLine === undefined ? `statusLine from ${settingsPath(o.home)}` : `statusLine from ${settingsPath(o.home)} (previous one restored)`);
-      if (cfg.priorStatusLine !== undefined) {
-        const { priorStatusLine: _restored, ...rest } = cfg;
-        writeConfig(o.home, rest);
-      }
     }
+    if (restoredLine && cfg.priorStatusLine !== undefined || restoredEnv && (cfg.priorEnv !== undefined || cfg.priorGatewayEnv !== undefined))
+      writeConfig(o.home, {
+        ...cfg,
+        ...restoredLine ? { priorStatusLine: undefined } : {},
+        ...restoredEnv ? { priorEnv: undefined, priorGatewayEnv: undefined } : {}
+      });
     if (hasSeatHook(settings)) {
       settings = removeSeatHook(settings);
       changed = true;
@@ -28142,18 +29016,12 @@ var uninstall2 = (o) => {
   log(`Kept ${tokenPath(o.home)} (delete it yourself if you want the token gone).`);
   return 0;
 };
-var hasEitherKey = (settings) => {
-  const env = settings.env;
-  if (typeof env !== "object" || env === null)
-    return false;
-  return BASE_URL_KEY in env || AUTH_TOKEN_KEY in env;
-};
 
 // src/commands/update.ts
 init_server();
 import { existsSync as existsSync34 } from "node:fs";
 import { homedir as homedir8, userInfo as userInfo4 } from "node:os";
-import { basename as basename9 } from "node:path";
+import { basename as basename10 } from "node:path";
 init_config();
 init_state();
 init_meter();
@@ -28218,7 +29086,7 @@ var realPidAlive4 = (pid) => {
 };
 function machineClient(home, env) {
   const src = meterSource(home, undefined, { env });
-  return src ? fetchClient({ ...src, version: "0.1.60" }) : null;
+  return src ? fetchClient({ ...src, version: "0.1.61" }) : null;
 }
 async function noteAnswer2(home, a, now) {
   try {
@@ -28230,7 +29098,7 @@ async function noteAnswer2(home, a, now) {
 }
 function busyEngines(files) {
   return files.map((f) => ({
-    name: basename9(f, ".json"),
+    name: basename10(f, ".json"),
     running: readState(f).runs.filter(isRunning).length
   })).filter((e) => e.running > 0);
 }
@@ -28543,13 +29411,13 @@ var webhooksCmd = async (o) => {
 
 // src/config.ts
 init_settings();
-import { chmodSync as chmodSync8, existsSync as existsSync35, mkdirSync as mkdirSync28, readFileSync as readFileSync33, renameSync as renameSync13, writeFileSync as writeFileSync28 } from "node:fs";
-import { join as join33, resolve as resolve11 } from "node:path";
+import { chmodSync as chmodSync8, existsSync as existsSync35, mkdirSync as mkdirSync28, readFileSync as readFileSync34, renameSync as renameSync13, writeFileSync as writeFileSync28 } from "node:fs";
+import { join as join34, resolve as resolve12 } from "node:path";
 var configDir2 = (home, env = process.env) => {
   const o = env.SLEDS_HOME?.trim();
-  return o ? resolve11(home, o) : join33(home, ".config", "sleds");
+  return o ? resolve12(home, o) : join34(home, ".config", "sleds");
 };
-var configPath2 = (home) => join33(configDir2(home), "config.json");
+var configPath2 = (home) => join34(configDir2(home), "config.json");
 var isObject17 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var optString2 = (v) => typeof v === "string" ? v : undefined;
 var parsePriorEnv2 = (v) => {
@@ -28599,6 +29467,9 @@ var parseConfig2 = (raw) => {
     cfg.schedule = schedule;
   if (raw.priorStatusLine !== undefined)
     cfg.priorStatusLine = raw.priorStatusLine;
+  const priorGatewayEnv = parsePriorEnv2(raw.priorGatewayEnv);
+  if (priorGatewayEnv !== undefined)
+    cfg.priorGatewayEnv = priorGatewayEnv;
   if (raw.wiring === "seat-first" || raw.wiring === "proxy-always")
     cfg.wiring = raw.wiring;
   if (raw.agentKind === "claude-code" || raw.agentKind === "codex")
@@ -28683,7 +29554,7 @@ var readConfig2 = (home) => {
   const p = configPath2(home);
   if (!existsSync35(p))
     return {};
-  return parseConfig2(JSON.parse(readFileSync33(p, "utf8")));
+  return parseConfig2(JSON.parse(readFileSync34(p, "utf8")));
 };
 
 // src/runners/exec.ts
@@ -28741,9 +29612,9 @@ function runnerFor3(name, exec = defaultExec, o = {}) {
 
 // src/runtime.ts
 import { homedir as homedir9 } from "node:os";
-import { join as join34, win32 as win323 } from "node:path";
+import { join as join35, win32 as win323 } from "node:path";
 var isCompiled2 = (argv1 = process.argv[1]) => Boolean(argv1 && (argv1.startsWith("/$bunfs/") || argv1.startsWith("B:\\~BUN\\")));
-var sledsLink2 = (home = homedir9(), platform = process.platform) => platform === "win32" ? win323.join(process.env.LOCALAPPDATA ?? win323.join(home, "AppData", "Local"), "sleds", "bin", "sleds.exe") : join34(home, ".sleds", "bin", "sleds");
+var sledsLink2 = (home = homedir9(), platform = process.platform) => platform === "win32" ? win323.join(process.env.LOCALAPPDATA ?? win323.join(home, "AppData", "Local"), "sleds", "bin", "sleds.exe") : join35(home, ".sleds", "bin", "sleds");
 
 // src/schedule.ts
 import { spawnSync as spawnSync11 } from "node:child_process";
@@ -28755,15 +29626,15 @@ var defaultExec5 = (cmd, args) => {
 };
 
 // src/settings.ts
-import { dirname as dirname24, join as join35, resolve as resolve12 } from "node:path";
+import { dirname as dirname25, join as join36, resolve as resolve13 } from "node:path";
 var withSeatEnv2 = (command, home, env = process.env, org) => {
   const parts = [];
   const sh = env.SLEDS_HOME?.trim();
   const cc = env.CLAUDE_CONFIG_DIR?.trim();
   if (sh)
-    parts.push(`SLEDS_HOME=${shellWord2(resolve12(home, sh))}`);
+    parts.push(`SLEDS_HOME=${shellWord2(resolve13(home, sh))}`);
   if (cc)
-    parts.push(`CLAUDE_CONFIG_DIR=${shellWord2(resolve12(home, cc))}`);
+    parts.push(`CLAUDE_CONFIG_DIR=${shellWord2(resolve13(home, cc))}`);
   parts.push(command);
   return pinOrg4(parts.join(" "), org);
 };
@@ -28779,12 +29650,16 @@ var pinOrg4 = (command, org) => {
 };
 var shellWord2 = (v) => /^[\w./~-]+$/.test(v) ? v : `'${v.replace(/'/g, "'\\''")}'`;
 var isObject18 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var invokesSleds2 = (command) => /\bsleds\b/.test(command);
 var isSledsHookFor2 = (sub) => (entry) => {
   if (!isObject18(entry) || !Array.isArray(entry.hooks))
     return false;
   const re = new RegExp(`\\b${sub}\\b`);
-  return entry.hooks.some((h) => isObject18(h) && h.type === "command" && typeof h.command === "string" && re.test(h.command));
+  return entry.hooks.some((h) => isObject18(h) && h.type === "command" && typeof h.command === "string" && invokesSleds2(h.command) && re.test(h.command));
 };
+var isSledsSeatHook2 = isSledsHookFor2("seat-event");
+var isSledsSpecHook2 = isSledsHookFor2("spec-event");
+var isSledsPromptHook2 = isSledsHookFor2("prompt-event");
 var isSledsSessionHook2 = isSledsHookFor2("session-event");
 var isSledsStopHook2 = isSledsHookFor2("stop-event");
 var isSledsPermissionHook2 = isSledsHookFor2("permission-event");
@@ -29081,7 +29956,7 @@ var main = async (argv) => {
     now: Date.now(),
     stderr: (line) => console.error(line),
     isTTY: !!process.stderr.isTTY,
-    version: "0.1.60"
+    version: "0.1.61"
   });
   switch (cmd) {
     case "update":
@@ -29314,7 +30189,7 @@ ${renderHelpText(argv[1])}`);
     case "version":
     case "--version":
     case "-v":
-      console.log("sleds 0.1.60");
+      console.log("sleds 0.1.61");
       return 0;
     default:
       console.error(`unknown command: ${cmd}