@sleds/cli 0.1.7 → 0.1.14

package/dist/sleds.mjs

@@ -1,47 +1,30 @@
 #!/usr/bin/env node
 // @bun
 import { createRequire } from "node:module";
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
-// src/index.ts
-import { realpathSync } from "fs";
-import { homedir as homedir3, platform as platform2 } from "os";
-import { fileURLToPath } from "url";
-
-// src/commands/bar.ts
-import { execFileSync } from "node:child_process";
-import {
-  chmodSync as chmodSync2,
-  existsSync as existsSync5,
-  lstatSync,
-  mkdirSync as mkdirSync5,
-  symlinkSync,
-  unlinkSync,
-  writeFileSync as writeFileSync5
-} from "node:fs";
-import { homedir } from "node:os";
-import { join as join5, resolve as resolve3 } from "node:path";
-
-// src/meter.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, renameSync as renameSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join3 } from "node:path";
-
-// src/config.ts
-import { chmodSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join2, resolve as resolve2 } from "node:path";
-
 // src/settings.ts
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
-var BASE_URL_KEY = "ANTHROPIC_BASE_URL";
-var AUTH_TOKEN_KEY = "ANTHROPIC_AUTH_TOKEN";
-var claudeDir = (home, env = process.env) => {
+var BASE_URL_KEY = "ANTHROPIC_BASE_URL", AUTH_TOKEN_KEY = "ANTHROPIC_AUTH_TOKEN", claudeDir = (home, env = process.env) => {
   const o = env.CLAUDE_CONFIG_DIR?.trim();
   return o ? resolve(home, o) : join(home, ".claude");
-};
-var hasHomeOverride = (env = process.env) => Boolean(env.SLEDS_HOME?.trim() || env.CLAUDE_CONFIG_DIR?.trim());
-var settingsPath = (home) => join(claudeDir(home), "settings.json");
-var sledsCommand = (sub, home, env = process.env) => {
+}, hasHomeOverride = (env = process.env) => Boolean(env.SLEDS_HOME?.trim() || env.CLAUDE_CONFIG_DIR?.trim()), settingsPath = (home) => join(claudeDir(home), "settings.json"), sledsCommand = (sub, home, env = process.env) => {
   const parts = [];
   const sh = env.SLEDS_HOME?.trim();
   const cc = env.CLAUDE_CONFIG_DIR?.trim();
@@ -51,8 +34,7 @@ var sledsCommand = (sub, home, env = process.env) => {
     parts.push(`CLAUDE_CONFIG_DIR=${shellWord(resolve(home, cc))}`);
   parts.push(`sleds ${sub}`);
   return parts.join(" ");
-};
-var sledsCommandsIn = (settings) => {
+}, sledsCommandsIn = (settings) => {
   const out = [];
   const visit = (v) => {
     if (Array.isArray(v)) {
@@ -70,74 +52,50 @@ var sledsCommandsIn = (settings) => {
   visit(settings[STATUS_LINE_KEY]);
   visit(settings.hooks);
   return out;
-};
-var bakedHome = (command) => command.match(/(?:^|\s)SLEDS_HOME=('([^']*)'|(\S+))/)?.[2] ?? command.match(/(?:^|\s)SLEDS_HOME=(\S+)/)?.[1];
-var shellWord = (v) => /^[\w./~-]+$/.test(v) ? v : `'${v.replace(/'/g, "'\\''")}'`;
-var backupPath = (home) => join(claudeDir(home), "settings.json.sleds-backup");
-var tokenPath = (home, env = process.env) => {
+}, bakedHome = (command) => command.match(/(?:^|\s)SLEDS_HOME=('([^']*)'|(\S+))/)?.[2] ?? command.match(/(?:^|\s)SLEDS_HOME=(\S+)/)?.[1], shellWord = (v) => /^[\w./~-]+$/.test(v) ? v : `'${v.replace(/'/g, "'\\''")}'`, backupPath = (home) => join(claudeDir(home), "settings.json.sleds-backup"), tokenPath = (home, env = process.env) => {
   const o = env.SLEDS_HOME?.trim();
   return o ? join(resolve(home, o), ".sleds-token") : join(home, ".sleds-token");
-};
-var skillDir = (home) => join(claudeDir(home), "skills", "sled");
-var skillPath = (home) => join(skillDir(home), "SKILL.md");
-var isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var envOf = (settings) => {
+}, skillDir = (home) => join(claudeDir(home), "skills", "sled"), skillPath = (home) => join(skillDir(home), "SKILL.md"), isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v), envOf = (settings) => {
   const env = settings.env;
   return isObject(env) ? env : {};
-};
-var applyProxy = (settings, cfg) => ({
+}, applyProxy = (settings, cfg) => ({
   ...settings,
   env: { ...envOf(settings), [BASE_URL_KEY]: cfg.url, [AUTH_TOKEN_KEY]: cfg.token }
-});
-var removeProxy = (settings) => {
+}), removeProxy = (settings) => {
   if (!isObject(settings.env))
     return { ...settings };
   const { [BASE_URL_KEY]: _url, [AUTH_TOKEN_KEY]: _token, ...rest } = settings.env;
   return { ...settings, env: rest };
-};
-var readProxy = (settings) => {
+}, readProxy = (settings) => {
   const env = envOf(settings);
   const url = env[BASE_URL_KEY];
   const token = env[AUTH_TOKEN_KEY];
   if (typeof url !== "string" || typeof token !== "string")
     return null;
   return { url, token };
-};
-var STATUS_LINE_KEY = "statusLine";
-var statusLineEntry = (command) => ({ type: "command", command });
-var isSledsStatusLine = (value) => isObject(value) && value.type === "command" && typeof value.command === "string" && /\bstatusline\b/.test(value.command);
-var applyStatusLine = (settings, command) => {
+}, STATUS_LINE_KEY = "statusLine", statusLineEntry = (command) => ({ type: "command", command }), isSledsStatusLine = (value) => isObject(value) && value.type === "command" && typeof value.command === "string" && /\bstatusline\b/.test(value.command), applyStatusLine = (settings, command) => {
   const current = settings[STATUS_LINE_KEY];
   const prior = current === undefined || isSledsStatusLine(current) ? undefined : current;
   return { settings: { ...settings, [STATUS_LINE_KEY]: statusLineEntry(command) }, prior };
-};
-var removeStatusLine = (settings, prior) => {
+}, removeStatusLine = (settings, prior) => {
   if (!isSledsStatusLine(settings[STATUS_LINE_KEY]))
     return { ...settings };
   const { [STATUS_LINE_KEY]: _ours, ...rest } = settings;
   return prior === undefined ? rest : { ...rest, [STATUS_LINE_KEY]: prior };
-};
-var HOOKS_KEY = "hooks";
-var NOTIFICATION_EVENT = "Notification";
-var SEAT_EVENT_MATCHER = "quota_auto_resume_fired|quota_auto_resume_stale|quota_auto_resume_disabled";
-var SEAT_EVENT_TIMEOUT_S = 10;
-var isSledsSeatHook = (entry) => {
+}, HOOKS_KEY = "hooks", NOTIFICATION_EVENT = "Notification", SEAT_EVENT_MATCHER = "quota_auto_resume_fired|quota_auto_resume_stale|quota_auto_resume_disabled", SEAT_EVENT_TIMEOUT_S = 10, isSledsSeatHook = (entry) => {
   if (!isObject(entry) || !Array.isArray(entry.hooks))
     return false;
   return entry.hooks.some((h) => isObject(h) && h.type === "command" && typeof h.command === "string" && /\bseat-event\b/.test(h.command));
-};
-var seatHookEntry = (command) => ({
+}, seatHookEntry = (command) => ({
   matcher: SEAT_EVENT_MATCHER,
   hooks: [{ type: "command", command, timeout: SEAT_EVENT_TIMEOUT_S }]
-});
-var notificationHooks = (settings) => {
+}), notificationHooks = (settings) => {
   const hooks = settings[HOOKS_KEY];
   if (!isObject(hooks))
     return [];
   const list = hooks[NOTIFICATION_EVENT];
   return Array.isArray(list) ? list : [];
-};
-var withNotificationHooks = (settings, list) => {
+}, withNotificationHooks = (settings, list) => {
   const hooks = isObject(settings[HOOKS_KEY]) ? settings[HOOKS_KEY] : {};
   if (list.length === 0) {
     const { [NOTIFICATION_EVENT]: _gone, ...restHooks } = hooks;
@@ -148,41 +106,31 @@ var withNotificationHooks = (settings, list) => {
     return { ...settings, [HOOKS_KEY]: restHooks };
   }
   return { ...settings, [HOOKS_KEY]: { ...hooks, [NOTIFICATION_EVENT]: list } };
-};
-var applySeatHook = (settings, command) => {
+}, applySeatHook = (settings, command) => {
   const list = notificationHooks(settings);
   const idx = list.findIndex(isSledsSeatHook);
   const entry = seatHookEntry(command);
   const next = idx === -1 ? [...list, entry] : list.map((e, i) => i === idx ? entry : e);
   return withNotificationHooks(settings, next);
-};
-var removeSeatHook = (settings) => {
+}, removeSeatHook = (settings) => {
   const list = notificationHooks(settings);
   if (!list.some(isSledsSeatHook))
     return { ...settings };
   return withNotificationHooks(settings, list.filter((e) => !isSledsSeatHook(e)));
-};
-var hasSeatHook = (settings) => notificationHooks(settings).some(isSledsSeatHook);
-var POST_TOOL_EVENT = "PostToolUse";
-var SPEC_EVENT_MATCHER = "Write|Edit|MultiEdit";
-var SPEC_EVENT_TIMEOUT_S = 5;
-var isSledsSpecHook = (entry) => {
+}, hasSeatHook = (settings) => notificationHooks(settings).some(isSledsSeatHook), POST_TOOL_EVENT = "PostToolUse", SPEC_EVENT_MATCHER = "Write|Edit|MultiEdit", SPEC_EVENT_TIMEOUT_S = 5, isSledsSpecHook = (entry) => {
   if (!isObject(entry) || !Array.isArray(entry.hooks))
     return false;
   return entry.hooks.some((h) => isObject(h) && h.type === "command" && typeof h.command === "string" && /\bspec-event\b/.test(h.command));
-};
-var specHookEntry = (command) => ({
+}, specHookEntry = (command) => ({
   matcher: SPEC_EVENT_MATCHER,
   hooks: [{ type: "command", command, timeout: SPEC_EVENT_TIMEOUT_S }]
-});
-var eventHooks = (settings, event) => {
+}), eventHooks = (settings, event) => {
   const hooks = settings[HOOKS_KEY];
   if (!isObject(hooks))
     return [];
   const list = hooks[event];
   return Array.isArray(list) ? list : [];
-};
-var withEventHooks = (settings, event, list) => {
+}, withEventHooks = (settings, event, list) => {
   const hooks = isObject(settings[HOOKS_KEY]) ? settings[HOOKS_KEY] : {};
   if (list.length === 0) {
     const { [event]: _gone, ...restHooks } = hooks;
@@ -193,27 +141,19 @@ var withEventHooks = (settings, event, list) => {
     return { ...settings, [HOOKS_KEY]: restHooks };
   }
   return { ...settings, [HOOKS_KEY]: { ...hooks, [event]: list } };
-};
-var applySpecHook = (settings, command) => {
+}, applySpecHook = (settings, command) => {
   const list = eventHooks(settings, POST_TOOL_EVENT);
   const idx = list.findIndex(isSledsSpecHook);
   const entry = specHookEntry(command);
   const next = idx === -1 ? [...list, entry] : list.map((e, i) => i === idx ? entry : e);
   return withEventHooks(settings, POST_TOOL_EVENT, next);
-};
-var removeSpecHook = (settings) => {
+}, removeSpecHook = (settings) => {
   const list = eventHooks(settings, POST_TOOL_EVENT);
   if (!list.some(isSledsSpecHook))
     return { ...settings };
   return withEventHooks(settings, POST_TOOL_EVENT, list.filter((e) => !isSledsSpecHook(e)));
-};
-var hasSpecHook = (settings) => eventHooks(settings, POST_TOOL_EVENT).some(isSledsSpecHook);
-var isSeatToken = (token) => /^sled_[A-Za-z0-9_-]+$/.test(token);
-var maskToken = (token) => token.length <= 9 ? `${token.slice(0, 5)}…` : `${token.slice(0, 9)}…`;
-var serialize = (settings) => `${JSON.stringify(settings, null, 2)}
-`;
-var hasClaudeCode = (home) => existsSync(claudeDir(home));
-var readSettings = (home) => {
+}, hasSpecHook = (settings) => eventHooks(settings, POST_TOOL_EVENT).some(isSledsSpecHook), isSeatToken = (token) => /^sled_[A-Za-z0-9_-]+$/.test(token), maskToken = (token) => token.length <= 9 ? `${token.slice(0, 5)}…` : `${token.slice(0, 9)}…`, serialize = (settings) => `${JSON.stringify(settings, null, 2)}
+`, hasClaudeCode = (home) => existsSync(claudeDir(home)), readSettings = (home) => {
   const p = settingsPath(home);
   if (!existsSync(p))
     return {};
@@ -221,44 +161,39 @@ var readSettings = (home) => {
   if (!isObject(parsed))
     throw new Error(`${p} is not a JSON object`);
   return parsed;
-};
-var writeSettings = (home, settings) => {
+}, writeSettings = (home, settings) => {
   mkdirSync(claudeDir(home), { recursive: true });
   const target = settingsPath(home);
   const tmp = `${target}.${process.pid}.tmp`;
   writeFileSync(tmp, serialize(settings));
   renameSync(tmp, target);
-};
-var backupSettings = (home) => {
+}, backupSettings = (home) => {
   const src = settingsPath(home);
   const dst = backupPath(home);
   if (!existsSync(src) || existsSync(dst))
     return false;
   writeFileSync(dst, readFileSync(src));
   return true;
-};
-var readTokenFile = (home) => {
+}, readTokenFile = (home) => {
   const p = tokenPath(home);
   if (!existsSync(p))
     return null;
   const t = readFileSync(p, "utf8").trim();
   return t.length > 0 ? t : null;
-};
-var writeTokenFile = (home, token) => {
+}, writeTokenFile = (home, token) => {
   mkdirSync(dirname(tokenPath(home)), { recursive: true, mode: 448 });
   writeFileSync(tokenPath(home), `${token}
 `, { mode: 384 });
 };
+var init_settings = () => {};
 
 // src/config.ts
+import { chmodSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join2, resolve as resolve2 } from "node:path";
 var configDir = (home, env = process.env) => {
   const o = env.SLEDS_HOME?.trim();
   return o ? resolve2(home, o) : join2(home, ".config", "sleds");
-};
-var configPath = (home) => join2(configDir(home), "config.json");
-var isObject2 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var optString = (v) => typeof v === "string" ? v : undefined;
-var parsePriorEnv = (v) => {
+}, configPath = (home) => join2(configDir(home), "config.json"), isObject2 = (v) => typeof v === "object" && v !== null && !Array.isArray(v), optString = (v) => typeof v === "string" ? v : undefined, parsePriorEnv = (v) => {
   if (!isObject2(v))
     return;
   const out = {};
@@ -271,9 +206,7 @@ var parsePriorEnv = (v) => {
   if (typeof v.hadEnv === "boolean")
     out.hadEnv = v.hadEnv;
   return out;
-};
-var parseSchedule = (v) => v === "launchd" || v === "systemd" || v === "manual" ? v : undefined;
-var parseConfig = (raw) => {
+}, parseSchedule = (v) => v === "launchd" || v === "systemd" || v === "manual" ? v : undefined, parseConfig = (raw) => {
   if (!isObject2(raw))
     return {};
   const cfg = {};
@@ -305,15 +238,58 @@ var parseConfig = (raw) => {
     cfg.schedule = schedule;
   if (raw.priorStatusLine !== undefined)
     cfg.priorStatusLine = raw.priorStatusLine;
+  if (raw.wiring === "seat-first" || raw.wiring === "proxy-always")
+    cfg.wiring = raw.wiring;
+  const org = parseOrgInfo(raw.org);
+  if (org)
+    cfg.org = org;
+  const musher = parseMusher(raw.musher);
+  if (musher)
+    cfg.musher = musher;
   return cfg;
-};
-var readConfig = (home) => {
+}, parseMusher = (raw) => {
+  if (!isObject2(raw))
+    return;
+  const out = {};
+  const pm = optString(raw.permissionMode);
+  const cp = optString(raw.claudePath);
+  if (pm)
+    out.permissionMode = pm;
+  if (cp)
+    out.claudePath = cp;
+  if (typeof raw.timeoutMinutes === "number" && raw.timeoutMinutes > 0)
+    out.timeoutMinutes = raw.timeoutMinutes;
+  if (raw.agent === "launchd" || raw.agent === "none")
+    out.agent = raw.agent;
+  return out;
+}, parseOrgInfo = (raw) => {
+  if (!isObject2(raw) || !isObject2(raw.capabilities))
+    return;
+  const name = optString(raw.name);
+  const slug = optString(raw.slug);
+  const plan = raw.plan;
+  const c = raw.capabilities;
+  const src = c.upstreamSource;
+  if (name === undefined || slug === undefined || plan !== "team" && plan !== "enterprise" && plan !== "api" && plan !== "individual" || src !== "own" && src !== "shared" && src !== "none")
+    return;
+  return {
+    name,
+    slug,
+    plan,
+    capabilities: {
+      upstreamKey: c.upstreamKey === true,
+      adminKey: c.adminKey === true,
+      seats: c.seats !== false,
+      upstreamSource: src
+    },
+    mode: raw.mode === "proxy-always" ? "proxy-always" : "seat-first"
+  };
+}, readConfig = (home) => {
   const p = configPath(home);
   if (!existsSync2(p))
     return {};
   return parseConfig(JSON.parse(readFileSync2(p, "utf8")));
-};
-var writeConfig = (home, cfg) => {
+}, writeConfig = (home, cfg) => {
   const dir = configDir(home);
   mkdirSync2(dir, { recursive: true, mode: 448 });
   const target = configPath(home);
@@ -323,14 +299,14 @@ var writeConfig = (home, cfg) => {
   renameSync2(tmp, target);
   chmodSync(target, 384);
 };
+var init_config = __esm(() => {
+  init_settings();
+});
 
 // src/meter.ts
-var METER_CACHE_TTL_MS = 1e4;
-var METER_TIMEOUT_MS = 1500;
-var isObject3 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var num = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined;
-var str = (v) => typeof v === "string" ? v : undefined;
-var parseMeter = (raw) => {
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, renameSync as renameSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { join as join3 } from "node:path";
+var METER_CACHE_TTL_MS = 1e4, METER_TIMEOUT_MS = 1500, isObject3 = (v) => typeof v === "object" && v !== null && !Array.isArray(v), num = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined, str = (v) => typeof v === "string" ? v : undefined, parseMeter = (raw) => {
   if (!isObject3(raw))
     return null;
   const seat = isObject3(raw.seat) ? str(raw.seat.email) : undefined;
@@ -385,18 +361,15 @@ var parseMeter = (raw) => {
   if (acc !== undefined)
     out.estimateAccuracyPct = acc;
   return out;
-};
-var usd = (n) => {
+}, usd = (n) => {
   const abs = Math.abs(n);
   if (abs >= 1000)
     return `${n < 0 ? "-" : ""}$${Math.round(abs).toLocaleString("en-US")}`;
   return `${n < 0 ? "-" : ""}$${abs.toFixed(2)}`;
-};
-var usdRange = (low, high) => {
+}, usdRange = (low, high) => {
   const d = high >= 10 ? 0 : 2;
   return `$${low.toFixed(d)}–${high.toFixed(d)}`;
-};
-var shortDuration = (ms) => {
+}, shortDuration = (ms) => {
   const total = Math.max(0, Math.round(ms / 60000));
   const d = Math.floor(total / (24 * 60));
   const h = Math.floor(total % (24 * 60) / 60);
@@ -406,18 +379,7 @@ var shortDuration = (ms) => {
   if (h > 0)
     return `${h}h${String(m).padStart(2, "0")}m`;
   return `${m}m`;
-};
-var KIND_WORDS = {
-  rate_limit: "rate limit hit",
-  weekly_cap: "usage limit reached",
-  budget: "budget exhausted",
-  provider_down: "provider unavailable"
-};
-var kindInWords = (kind) => KIND_WORDS[kind] ?? kind.replace(/_/g, " ");
-var SEP = " · ";
-var PREFIX = "sleds  ";
-var OFFLINE_LINE = `${PREFIX}offline`;
-var jobParts = (m) => {
+}, KIND_WORDS, kindInWords = (kind) => KIND_WORDS[kind] ?? kind.replace(/_/g, " "), SEP = " · ", PREFIX = "sleds  ", OFFLINE_LINE, jobParts = (m) => {
   const parts = [];
   const [low, high] = m.jobs.queuedEstimateUsd;
   if (m.jobs.queued > 0) {
@@ -429,8 +391,7 @@ var jobParts = (m) => {
   if (m.jobs.deliveredToday > 0)
     parts.push(`${m.jobs.deliveredToday} delivered`);
   return parts;
-};
-var formatMeterLine = (m, now, seatFragment = null) => {
+}, formatMeterLine = (m, now, seatFragment = null) => {
   if (!m)
     return seatFragment ? `${OFFLINE_LINE}${SEP}${seatFragment}` : OFFLINE_LINE;
   const parts = [`${usd(m.today.spentUsd)} today`];
@@ -445,10 +406,7 @@ var formatMeterLine = (m, now, seatFragment = null) => {
     parts.push(`allowance ${usd(m.allowance.remainingUsd)}`);
   parts.push(...jobParts(m));
   return `${PREFIX}${parts.join(SEP)}`;
-};
-var row = (label, value) => `${label.padEnd(12)}${value}`;
-var plural = (n, word) => `${n} ${word}${n === 1 ? "" : "s"}`;
-var formatMeter = (m, now) => {
+}, row = (label, value) => `${label.padEnd(12)}${value}`, plural = (n, word) => `${n} ${word}${n === 1 ? "" : "s"}`, formatMeter = (m, now) => {
   const lines = [row("Seat:", m.seat.email)];
   lines.push(row("Built today:", `${usd(m.today.spentUsd)}${SEP}${plural(m.today.requests, "request")}`));
   lines.push(row("Month:", m.month.ceilingUsd !== undefined ? `${usd(m.month.spentUsd)} of ${usd(m.month.ceilingUsd)} ceiling` : usd(m.month.spentUsd)));
@@ -472,9 +430,7 @@ var formatMeter = (m, now) => {
   if (m.estimateAccuracyPct !== undefined)
     lines.push(row("Estimates:", `${Math.round(m.estimateAccuracyPct)}% landed in band`));
   return lines;
-};
-var meterCachePath = (home) => join3(configDir(home), "meter.json");
-var readMeterCache = (home, now) => {
+}, meterCachePath = (home) => join3(configDir(home), "meter.json"), readMeterCache = (home, now) => {
   const p = meterCachePath(home);
   if (!existsSync3(p))
     return null;
@@ -489,8 +445,7 @@ var readMeterCache = (home, now) => {
   } catch {
     return null;
   }
-};
-var writeMeterCache = (home, meter, now) => {
+}, writeMeterCache = (home, meter, now) => {
   const dir = configDir(home);
   mkdirSync3(dir, { recursive: true, mode: 448 });
   const target = meterCachePath(home);
@@ -499,8 +454,7 @@ var writeMeterCache = (home, meter, now) => {
   writeFileSync3(tmp, `${JSON.stringify(file)}
 `, { mode: 384 });
   renameSync3(tmp, target);
-};
-var fetchMeter = async (o) => {
+}, fetchMeter = async (o) => {
   const fetchFn = o.fetchFn ?? fetch;
   try {
     const res = await fetchFn(`${o.proxyUrl}/proxy/meter`, {
@@ -513,16 +467,14 @@ var fetchMeter = async (o) => {
   } catch {
     return null;
   }
-};
-var meterSource = (home) => {
+}, meterSource = (home) => {
   const cfg = readConfig(home);
   const settings = existsSync3(settingsPath(home)) ? readSettings(home) : {};
   const inSettings = readProxy(settings);
   const proxyUrl = inSettings?.url ?? cfg.proxyUrl;
   const token = inSettings?.token ?? cfg.token;
   return proxyUrl && token ? { proxyUrl, token } : null;
-};
-var loadMeter = async (o) => {
+}, loadMeter = async (o) => {
   const now = o.now ?? Date.now();
   const cached = readMeterCache(o.home, now);
   if (cached)
@@ -538,99 +490,548 @@ var loadMeter = async (o) => {
   }
   return fresh;
 };
+var init_meter = __esm(() => {
+  init_config();
+  init_settings();
+  KIND_WORDS = {
+    rate_limit: "rate limit hit",
+    weekly_cap: "usage limit reached",
+    budget: "budget exhausted",
+    provider_down: "provider unavailable"
+  };
+  OFFLINE_LINE = `${PREFIX}offline`;
+});
 
-// src/bar.ts
-var SEAT_BAR_FRESH_MS = 6 * 60 * 60 * 1000;
-var DASHBOARD_URL = "https://app.sleds.ai";
-var WARM_PCT = 75;
-var HOT_PCT = 90;
-var MONO = "font=Menlo size=12";
-var HOT_COLOR = "#ff453a";
-var WARM_COLOR = "#ff9f0a";
-var freshSeat = (w, now) => {
-  if (!w)
+// src/seat.ts
+var exports_seat = {};
+__export(exports_seat, {
+  SEAT_POST_MIN_DELTA_PCT: () => SEAT_POST_MIN_DELTA_PCT2,
+  SEAT_POST_MIN_INTERVAL_MS: () => SEAT_POST_MIN_INTERVAL_MS2,
+  SEAT_POST_TIMEOUT_MS: () => SEAT_POST_TIMEOUT_MS2,
+  SEAT_WALL_LINE: () => SEAT_WALL_LINE2,
+  SEAT_WALL_LINE_NO_KEY: () => SEAT_WALL_LINE_NO_KEY2,
+  STDIN_TIMEOUT_MS: () => STDIN_TIMEOUT_MS2,
+  bindingResetAt: () => bindingResetAt2,
+  formatSeatFragment: () => formatSeatFragment2,
+  markPosted: () => markPosted2,
+  parseResetsAt: () => parseResetsAt2,
+  parseSeatState: () => parseSeatState2,
+  parseSeatWindow: () => parseSeatWindow2,
+  postSeatWall: () => postSeatWall2,
+  postSeatWindow: () => postSeatWindow2,
+  readSeatState: () => readSeatState2,
+  readStdin: () => readStdin2,
+  seatSessionFromStdin: () => seatSessionFromStdin2,
+  seatStatePath: () => seatStatePath2,
+  seatWallDue: () => seatWallDue2,
+  seatWallLine: () => seatWallLine2,
+  seatWindowBody: () => seatWindowBody2,
+  seatWindowFromStdin: () => seatWindowFromStdin2,
+  shouldPostSeat: () => shouldPostSeat2,
+  writeSeatState: () => writeSeatState2
+});
+import { existsSync as existsSync13, mkdirSync as mkdirSync10, readFileSync as readFileSync10, renameSync as renameSync5, writeFileSync as writeFileSync10 } from "node:fs";
+import { join as join10 } from "node:path";
+var SEAT_POST_MIN_DELTA_PCT2 = 1, SEAT_POST_MIN_INTERVAL_MS2, SEAT_POST_TIMEOUT_MS2 = 1500, STDIN_TIMEOUT_MS2 = 300, isObject9 = (v) => typeof v === "object" && v !== null && !Array.isArray(v), num5 = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined, EPOCH_MS_THRESHOLD2 = 100000000000, parseResetsAt2 = (v) => {
+  const n = num5(v);
+  if (n !== undefined) {
+    if (n <= 0)
+      return;
+    return n >= EPOCH_MS_THRESHOLD2 ? Math.round(n) : Math.round(n * 1000);
+  }
+  if (typeof v === "string" && v.trim() !== "") {
+    const parsed = Date.parse(v);
+    return Number.isFinite(parsed) ? parsed : undefined;
+  }
+  return;
+}, parseBar2 = (v) => {
+  if (!isObject9(v))
+    return;
+  const usedPct = num5(v.used_percentage) ?? num5(v.usedPct);
+  const resetsAt = parseResetsAt2(v.resets_at ?? v.resetsAt);
+  if (usedPct === undefined || usedPct < 0 || resetsAt === undefined)
+    return;
+  return { usedPct, resetsAt };
+}, parseSeatWindow2 = (raw, capturedAt) => {
+  if (!isObject9(raw))
     return null;
-  return now - w.capturedAt < SEAT_BAR_FRESH_MS ? w : null;
-};
-var modelLabel = (bucket) => bucket.replace(/^(seven_day|five_hour|weekly|daily)_/, "").toLowerCase();
-var seatBars = (w) => {
+  const limits = isObject9(raw.rate_limits) ? raw.rate_limits : raw;
+  const fiveHour = parseBar2(limits.five_hour ?? limits.fiveHour);
+  const sevenDay = parseBar2(limits.seven_day ?? limits.sevenDay);
+  const spendLimit = parseBar2(limits.spend_limit ?? limits.spendLimit);
+  const models = {};
+  if (isObject9(limits.models))
+    for (const [k, v] of Object.entries(limits.models)) {
+      const bar = parseBar2(v);
+      if (bar)
+        models[k] = bar;
+    }
+  const usedCreditsUsd = num5(limits.usedCreditsUsd);
+  const hasModels = Object.keys(models).length > 0;
+  if (!fiveHour && !sevenDay && !spendLimit && !hasModels && usedCreditsUsd === undefined)
+    return null;
+  const out = { capturedAt };
+  if (fiveHour)
+    out.fiveHour = fiveHour;
+  if (sevenDay)
+    out.sevenDay = sevenDay;
+  if (spendLimit)
+    out.spendLimit = spendLimit;
+  if (hasModels)
+    out.models = models;
+  if (usedCreditsUsd !== undefined)
+    out.usedCreditsUsd = usedCreditsUsd;
+  return out;
+}, seatWindowFromStdin2 = (text, capturedAt) => {
+  const trimmed = text.trim();
+  if (!trimmed)
+    return null;
+  try {
+    return parseSeatWindow2(JSON.parse(trimmed), capturedAt);
+  } catch {
+    return null;
+  }
+}, formatSeatFragment2 = (w) => {
   if (!w)
-    return [];
-  const out = [];
+    return null;
+  const parts = [];
   if (w.sevenDay)
-    out.push({ label: "wk", bar: w.sevenDay });
+    parts.push(`wk ${Math.round(w.sevenDay.usedPct)}%`);
   if (w.fiveHour)
-    out.push({ label: "5h", bar: w.fiveHour });
+    parts.push(`5h ${Math.round(w.fiveHour.usedPct)}%`);
   if (w.spendLimit)
-    out.push({ label: "spend", bar: w.spendLimit });
-  for (const k of Object.keys(w.models ?? {}).sort()) {
-    const bar = w.models?.[k];
-    if (bar)
-      out.push({ label: modelLabel(k), bar });
+    parts.push(`spend ${Math.round(w.spendLimit.usedPct)}%`);
+  if (parts.length === 0)
+    return null;
+  return `seat ${parts.join(SEP)}`;
+}, seatStatePath2 = (home) => join10(configDir(home), "seat.json"), parseWindowStored2 = (v) => {
+  if (!isObject9(v))
+    return;
+  const capturedAt = num5(v.capturedAt);
+  if (capturedAt === undefined)
+    return;
+  return parseSeatWindow2(v, capturedAt) ?? undefined;
+}, parseSeatState2 = (raw) => {
+  if (!isObject9(raw))
+    return {};
+  const out = {};
+  const window = parseWindowStored2(raw.window);
+  if (window)
+    out.window = window;
+  const lastPostedAt = num5(raw.lastPostedAt);
+  if (lastPostedAt !== undefined)
+    out.lastPostedAt = lastPostedAt;
+  if (isObject9(raw.lastPosted)) {
+    const lp = {};
+    const f = num5(raw.lastPosted.fiveHour);
+    const s = num5(raw.lastPosted.sevenDay);
+    const sp = num5(raw.lastPosted.spendLimit);
+    if (f !== undefined)
+      lp.fiveHour = f;
+    if (s !== undefined)
+      lp.sevenDay = s;
+    if (sp !== undefined)
+      lp.spendLimit = sp;
+    out.lastPosted = lp;
   }
+  const lastWallResetsAt = num5(raw.lastWallResetsAt);
+  if (lastWallResetsAt !== undefined)
+    out.lastWallResetsAt = lastWallResetsAt;
+  const session = parseSeatSession2(raw.session);
+  if (session)
+    out.session = session;
+  return out;
+}, parseSeatSession2 = (v) => {
+  if (!isObject9(v) || typeof v.id !== "string" || !v.id)
+    return;
+  const at = num5(v.at);
+  if (at === undefined)
+    return;
+  const out = { id: v.id, at };
+  if (typeof v.cwd === "string" && v.cwd)
+    out.cwd = v.cwd;
+  if (typeof v.model === "string" && v.model)
+    out.model = v.model;
   return out;
+}, seatSessionFromStdin2 = (text, now) => {
+  const trimmed = text.trim();
+  if (!trimmed)
+    return null;
+  try {
+    const raw = JSON.parse(trimmed);
+    if (!isObject9(raw) || typeof raw.session_id !== "string" || !raw.session_id)
+      return null;
+    const out = { id: raw.session_id, at: now };
+    if (typeof raw.cwd === "string" && raw.cwd)
+      out.cwd = raw.cwd;
+    const model = isObject9(raw.model) ? raw.model.id : raw.model;
+    if (typeof model === "string" && model)
+      out.model = model;
+    return out;
+  } catch {
+    return null;
+  }
+}, bindingResetAt2 = (w, now) => {
+  if (!w)
+    return;
+  const bars = [
+    ...w.fiveHour ? [w.fiveHour] : [],
+    ...w.sevenDay ? [w.sevenDay] : [],
+    ...w.spendLimit ? [w.spendLimit] : [],
+    ...Object.values(w.models ?? {})
+  ].filter((b) => b.resetsAt > now);
+  const full = bars.filter((b) => b.usedPct >= 100);
+  const pick = (full.length ? full : bars).map((b) => b.resetsAt);
+  return pick.length ? Math.min(...pick) : undefined;
+}, readSeatState2 = (home) => {
+  const p = seatStatePath2(home);
+  if (!existsSync13(p))
+    return {};
+  try {
+    return parseSeatState2(JSON.parse(readFileSync10(p, "utf8")));
+  } catch {
+    return {};
+  }
+}, writeSeatState2 = (home, state) => {
+  const dir = configDir(home);
+  mkdirSync10(dir, { recursive: true, mode: 448 });
+  const target = seatStatePath2(home);
+  const tmp = `${target}.${process.pid}.tmp`;
+  writeFileSync10(tmp, `${JSON.stringify(state)}
+`, { mode: 384 });
+  renameSync5(tmp, target);
+}, pctOf2 = (b) => b?.usedPct, shouldPostSeat2 = (state, next, now) => {
+  if (state.lastPostedAt === undefined || !state.lastPosted)
+    return true;
+  if (now - state.lastPostedAt >= SEAT_POST_MIN_INTERVAL_MS2)
+    return true;
+  const pairs = [
+    [state.lastPosted.fiveHour, pctOf2(next.fiveHour)],
+    [state.lastPosted.sevenDay, pctOf2(next.sevenDay)],
+    [state.lastPosted.spendLimit, pctOf2(next.spendLimit)]
+  ];
+  for (const [prev, cur] of pairs) {
+    if (prev === undefined && cur === undefined)
+      continue;
+    if (prev === undefined || cur === undefined)
+      return true;
+    if (Math.abs(cur - prev) >= SEAT_POST_MIN_DELTA_PCT2)
+      return true;
+  }
+  return false;
+}, markPosted2 = (state, w, now) => {
+  const lastPosted = {};
+  if (w.fiveHour)
+    lastPosted.fiveHour = w.fiveHour.usedPct;
+  if (w.sevenDay)
+    lastPosted.sevenDay = w.sevenDay.usedPct;
+  if (w.spendLimit)
+    lastPosted.spendLimit = w.spendLimit.usedPct;
+  return { ...state, window: w, lastPostedAt: now, lastPosted };
+}, seatWallDue2 = (state, w) => {
+  if (!w?.sevenDay || w.sevenDay.usedPct < 100)
+    return false;
+  return state.lastWallResetsAt === undefined || state.lastWallResetsAt < w.sevenDay.resetsAt;
+}, seatWindowBody2 = (w) => ({
+  capturedAt: w.capturedAt,
+  ...w.fiveHour ? { fiveHour: w.fiveHour } : {},
+  ...w.sevenDay ? { sevenDay: w.sevenDay } : {},
+  ...w.spendLimit ? { spendLimit: w.spendLimit } : {}
+}), postJson2 = async (o, path, body) => {
+  const fetchFn = o.fetchFn ?? fetch;
+  try {
+    const res = await fetchFn(`${o.proxyUrl}${path}`, {
+      method: "POST",
+      headers: { authorization: `Bearer ${o.token}`, "content-type": "application/json" },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(o.timeoutMs ?? SEAT_POST_TIMEOUT_MS2)
+    });
+    return res.ok;
+  } catch {
+    return false;
+  }
+}, postSeatWindow2 = (o, w) => postJson2(o, "/proxy/seat", seatWindowBody2(w)), postSeatWall2 = (o, input) => postJson2(o, "/proxy/seat-wall", input), SEAT_WALL_LINE2 = "Seat limit hit. sleds on --until-reset to continue on the org key, or sleds defer to resume here at the reset.", SEAT_WALL_LINE_NO_KEY2 = "Seat limit hit. sleds defer resumes this session on this Mac at the reset; /sled 5 to hand off — this org has no platform key to switch to.", seatWallLine2 = (hasUpstreamKey) => hasUpstreamKey ? SEAT_WALL_LINE2 : SEAT_WALL_LINE_NO_KEY2, readStdin2 = (timeoutMs, stdin = process.stdin) => new Promise((resolve4) => {
+  if (stdin.isTTY) {
+    resolve4("");
+    return;
+  }
+  let data = "";
+  let settled = false;
+  const finish = () => {
+    if (settled)
+      return;
+    settled = true;
+    clearTimeout(timer);
+    resolve4(data);
+  };
+  const timer = setTimeout(finish, timeoutMs);
+  stdin.setEncoding("utf8");
+  stdin.on("data", (chunk) => {
+    data += chunk;
+  });
+  stdin.on("end", finish);
+  stdin.on("error", finish);
+  stdin.resume();
+});
+var init_seat = __esm(() => {
+  init_config();
+  init_meter();
+  SEAT_POST_MIN_INTERVAL_MS2 = 5 * 60000;
+});
+
+// src/index.ts
+import { realpathSync } from "fs";
+import { homedir, platform as platform2 } from "os";
+import { fileURLToPath } from "url";
+
+// src/commands/defer.ts
+init_config();
+init_meter();
+import { existsSync as existsSync5 } from "node:fs";
+import { hostname } from "node:os";
+
+// src/musher.ts
+import { spawnSync } from "node:child_process";
+import { createPublicKey, verify as cryptoVerify } from "node:crypto";
+import { dirname as dirname2, join as join4 } from "node:path";
+var MUSHER_LABEL = "ai.sleds.musher";
+var MUSHER_INTERVAL_S = 300;
+var DEFAULT_PERMISSION_MODE = "acceptEdits";
+var DEFAULT_TIMEOUT_MINUTES = 90;
+var SUMMARY_MAX = 2000;
+var musherPlistPath = (home) => join4(home, "Library", "LaunchAgents", `${MUSHER_LABEL}.plist`);
+var musherLogPath = (configDir2) => join4(configDir2, "musher.log");
+var xmlEscape = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+var musherPath = (home, execPath, currentPath = "") => {
+  const parts = [
+    dirname2(execPath),
+    join4(home, ".sleds", "bin"),
+    join4(home, ".local", "bin"),
+    join4(home, ".bun", "bin"),
+    "/opt/homebrew/bin",
+    "/usr/local/bin",
+    "/usr/bin",
+    "/bin",
+    ...currentPath.split(":").filter(Boolean)
+  ];
+  return [...new Set(parts)].join(":");
 };
-var hottest = (w) => seatBars(w).reduce((best, cur) => !best || cur.bar.usedPct > best.bar.usedPct ? cur : best, null);
-var toneOf = (pct) => pct === undefined ? null : pct >= HOT_PCT ? "hot" : pct >= WARM_PCT ? "warm" : null;
-var colorParam = (tone) => tone === "hot" ? ` color=${HOT_COLOR}` : tone === "warm" ? ` color=${WARM_COLOR}` : "";
-var barTitle = (m, seat) => {
-  const head = m ? usd(m.today.spentUsd) : "offline";
-  const wk = seat?.sevenDay ? `wk ${Math.round(seat.sevenDay.usedPct)}%` : null;
-  const top = hottest(seat);
-  const risk = top && top.label !== "wk" && toneOf(top.bar.usedPct) ? `${top.label} ${Math.round(top.bar.usedPct)}%` : null;
-  return [`sleds ${head}`, ...wk ? [wk] : [], ...risk ? [risk] : []].join(SEP);
-};
-var resetIn = (bar, now) => bar.resetsAt > now ? `${SEP}resets in ${shortDuration(bar.resetsAt - now)}` : "";
-var formatBar = (m, seat, now) => {
-  const tone = toneOf(hottest(seat)?.bar.usedPct);
-  const lines = [`${barTitle(m, seat)}${colorParam(tone)}`, "---"];
-  if (m) {
-    for (const row2 of formatMeter(m, now))
-      lines.push(`${row2} | ${MONO}`);
-  } else {
-    lines.push(`offline${SEP}proxy did not answer | ${MONO}`);
-  }
-  const bars = seatBars(seat);
-  if (bars.length > 0 || seat?.usedCreditsUsd !== undefined) {
-    lines.push("---");
-    lines.push(`Seat limits${seat ? `${SEP}${shortDuration(now - seat.capturedAt)} ago` : ""} | ${MONO}`);
-    for (const { label, bar } of bars) {
-      const pct = Math.round(bar.usedPct);
-      lines.push(`${label.padEnd(12)}${String(pct).padStart(3)}%${resetIn(bar, now)} | ${MONO}${colorParam(toneOf(bar.usedPct))}`);
+var buildMusherPlist = (o) => {
+  const args = [...o.sledsArgv, "musher", "tick"].map((a) => `    <string>${xmlEscape(a)}</string>`).join(`
+`);
+  const env = Object.entries(o.env).filter(([, v]) => v !== "").map(([k, v]) => `    <key>${xmlEscape(k)}</key>
+    <string>${xmlEscape(v)}</string>`).join(`
+`);
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${MUSHER_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+${args}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+${env}
+  </dict>
+  <key>StartInterval</key>
+  <integer>${MUSHER_INTERVAL_S}</integer>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${xmlEscape(o.logPath)}</string>
+  <key>StandardErrorPath</key>
+  <string>${xmlEscape(o.logPath)}</string>
+</dict>
+</plist>
+`;
+};
+var RESUME_PROMPT = [
+  "SLEDS musher: the usage limit that stopped this session has reset, and the seat's owner",
+  "scheduled this unattended run to continue it. Pick up exactly where the session left off:",
+  "finish the task that was in flight, run the checks you would normally run, follow the repo's",
+  "own conventions for branches and commits, and do not start unrelated work. If you are blocked",
+  "on a decision only the owner can make, stop there and say so. Finish with a summary under",
+  "200 words: what was done, what remains, anything the owner must decide."
+].join(" ");
+var NO_SESSION_PROMPT = [
+  "SLEDS musher: a deferred job started on this seat, but no Claude Code session was recorded",
+  "to resume. Do not guess at work. Reply with one line saying so, and stop."
+].join(" ");
+var claudeArgs = (o) => [
+  "-p",
+  o.sessionId ? RESUME_PROMPT : NO_SESSION_PROMPT,
+  ...o.sessionId ? ["--resume", o.sessionId] : [],
+  ...o.model ? ["--model", o.model] : [],
+  "--output-format",
+  "json",
+  "--permission-mode",
+  o.permissionMode
+];
+var parseClaudeOutput = (stdout, exitCode) => {
+  const lines = stdout.split(`
+`).map((l) => l.trim()).filter(Boolean);
+  for (let i = lines.length - 1;i >= 0; i--) {
+    const line = lines[i] ?? "";
+    if (!line.startsWith("{"))
+      continue;
+    try {
+      const j = JSON.parse(line);
+      if (j.type !== "result" && typeof j.result !== "string")
+        continue;
+      const isError = j.is_error === true || typeof j.subtype === "string" && j.subtype !== "success";
+      const text = typeof j.result === "string" ? j.result : "";
+      const models = j.modelUsage;
+      const model = typeof j.model === "string" ? j.model : models && typeof models === "object" ? Object.keys(models)[0] : undefined;
+      return {
+        ok: !isError && exitCode === 0,
+        summary: (text || (isError ? "Claude Code reported an error" : "")).slice(0, SUMMARY_MAX),
+        ...typeof j.session_id === "string" ? { sessionId: j.session_id } : {},
+        ...model ? { model } : {},
+        ...typeof j.duration_ms === "number" ? { durationMs: j.duration_ms } : {},
+        ...typeof j.total_cost_usd === "number" ? { costUsd: j.total_cost_usd } : {}
+      };
+    } catch {}
+  }
+  const tail = lines.slice(-5).join(" ").slice(0, SUMMARY_MAX);
+  return { ok: false, summary: tail || `claude exited ${exitCode ?? "without a code"}` };
+};
+var defaultExecCapture = (cmd, args, o) => {
+  const r = spawnSync(cmd, [...args], {
+    cwd: o.cwd,
+    encoding: "utf8",
+    timeout: o.timeoutMs,
+    maxBuffer: 64 * 1024 * 1024,
+    stdio: ["ignore", "pipe", "pipe"],
+    env: { ...process.env, SLEDS_MUSHER: "1" }
+  });
+  return {
+    stdout: r.stdout ?? "",
+    stderr: r.stderr ?? "",
+    status: r.status,
+    ...r.error ? { error: r.error.message } : {}
+  };
+};
+var musherClient = (o) => {
+  const fetchFn = o.fetchFn ?? fetch;
+  const headers = { authorization: `Bearer ${o.token}`, "content-type": "application/json" };
+  const call = async (path, body) => {
+    try {
+      const res = await fetchFn(`${o.proxyUrl}${path}`, {
+        method: body === undefined ? "GET" : "POST",
+        headers,
+        ...body === undefined ? {} : { body: JSON.stringify(body) },
+        signal: AbortSignal.timeout(o.timeoutMs ?? 1e4)
+      });
+      if (!res.ok)
+        return null;
+      return await res.json();
+    } catch {
+      return null;
     }
-    if (seat?.usedCreditsUsd !== undefined)
-      lines.push(`${"credits".padEnd(12)}${usd(seat.usedCreditsUsd)} spent | ${MONO}`);
+  };
+  return {
+    list: () => call("/proxy/musher"),
+    start: (jobId, local) => call("/proxy/musher/start", { jobId, ...local }),
+    finish: async (input) => await call("/proxy/musher/finish", input) !== null,
+    defer: (input) => call("/proxy/defer", input),
+    attestation: (jobId) => call(`/proxy/attest/${encodeURIComponent(jobId)}`)
+  };
+};
+var gitHead = (cwd, exec) => {
+  if (!cwd)
+    return null;
+  const r = exec("git", ["rev-parse", "HEAD"], { cwd, timeoutMs: 5000 });
+  const sha = r.stdout.trim();
+  return r.status === 0 && /^[0-9a-f]{40}$/.test(sha) ? sha : null;
+};
+var gitNewCommits = (cwd, before, after, exec) => {
+  if (!cwd || !after || after === before)
+    return [];
+  if (!before)
+    return [after];
+  const r = exec("git", ["rev-list", `${before}..${after}`], { cwd, timeoutMs: 5000 });
+  if (r.status !== 0)
+    return [after];
+  return r.stdout.split(`
+`).map((l) => l.trim()).filter((l) => /^[0-9a-f]{40}$/.test(l)).slice(0, 40);
+};
+var collectOutputs = (commits, summary) => {
+  const out = commits.map((c) => `git:${c}`);
+  for (const m of summary.matchAll(/https:\/\/github\.com\/[\w.-]+\/[\w.-]+\/pull\/\d+/g))
+    if (!out.includes(`pr:${m[0]}`))
+      out.push(`pr:${m[0]}`);
+  return out.slice(0, 50);
+};
+var runJob = async (o) => {
+  const log = o.log ?? (() => {});
+  const sessionId = o.job.claudeSessionId ?? o.fallbackSession?.id ?? null;
+  const cwd = o.job.cwd ?? o.fallbackSession?.cwd ?? undefined;
+  const started = await o.client.start(o.job.jobId, {
+    ...sessionId ? { claudeSessionId: sessionId } : {},
+    ...cwd ? { cwd } : {},
+    host: o.host
+  });
+  if (!started)
+    return { kind: "skipped", reason: "control plane unreachable" };
+  if (!started.ok)
+    return { kind: "skipped", reason: started.reason };
+  const model = o.job.model ?? started.model ?? o.fallbackSession?.model ?? null;
+  const args = claudeArgs({ sessionId, model, permissionMode: o.permissionMode });
+  log(`musher: running job ${o.job.jobId} (${sessionId ? `resume ${sessionId}` : "no session"}${model ? ` · ${model}` : ""}${cwd ? ` · ${cwd}` : ""})`);
+  const exec = o.exec ?? defaultExecCapture;
+  const headBefore = gitHead(cwd, exec);
+  const t0 = Date.now();
+  const r = exec(o.claudePath, args, { cwd, timeoutMs: o.timeoutMs });
+  const durationMs = Date.now() - t0;
+  const result = r.error ? { ok: false, summary: `could not run ${o.claudePath}: ${r.error}` } : parseClaudeOutput(r.stdout, r.status);
+  if (!r.error && r.status === null)
+    result.summary = `timed out after ${Math.round(o.timeoutMs / 60000)} min. ${result.summary}`.trim();
+  const outputs = collectOutputs(gitNewCommits(cwd, headBefore, gitHead(cwd, exec), exec), result.summary);
+  await o.client.finish({
+    jobId: o.job.jobId,
+    runId: started.runId,
+    ok: result.ok,
+    summary: result.summary,
+    ...outputs.length ? { outputs } : {},
+    ...result.model ?? model ? { model: result.model ?? model } : {},
+    durationMs: result.durationMs ?? durationMs,
+    ...result.sessionId ?? sessionId ? { claudeSessionId: result.sessionId ?? sessionId } : {}
+  });
+  log(`musher: job ${o.job.jobId} ${result.ok ? "delivered" : "failed"} in ${Math.round(durationMs / 1000)}s`);
+  return { kind: "ran", ok: result.ok, summary: result.summary, durationMs, outputs };
+};
+var verifyAttestation = (payload, sig, publicKeyB64) => {
+  try {
+    const pub = createPublicKey({
+      key: Buffer.from(publicKeyB64, "base64"),
+      format: "der",
+      type: "spki"
+    });
+    const raw = Buffer.from(sig.replace(/-/g, "+").replace(/_/g, "/"), "base64");
+    return cryptoVerify(null, Buffer.from(payload, "utf8"), pub, raw);
+  } catch {
+    return false;
   }
-  lines.push("---");
-  lines.push(`Open dashboard | href=${DASHBOARD_URL}`);
-  lines.push("Refresh | refresh=true");
-  return lines;
 };
-var pluginScript = (nodePath, cliPath, env = {}) => [
-  "#!/bin/bash",
-  "# SLEDS menu-bar meter for SwiftBar — written by `sleds bar --install`; re-run it after moving the CLI.",
-  "# <swiftbar.title>SLEDS</swiftbar.title>",
-  "# <swiftbar.hideAbout>true</swiftbar.hideAbout>",
-  "# <swiftbar.hideRunInTerminal>true</swiftbar.hideRunInTerminal>",
-  "# <swiftbar.hideSwiftBar>true</swiftbar.hideSwiftBar>",
-  ...env.sledsHome ? [`export SLEDS_HOME=${shellQuote(env.sledsHome)}`] : ["unset SLEDS_HOME"],
-  ...env.claudeConfigDir ? [`export CLAUDE_CONFIG_DIR=${shellQuote(env.claudeConfigDir)}`] : ["unset CLAUDE_CONFIG_DIR"],
-  'export PATH="$HOME/.bun/bin:/opt/homebrew/bin:/usr/local/bin:$PATH"',
-  `if [ -x ${shellQuote(nodePath)} ] && [ -f ${shellQuote(cliPath)} ]; then`,
-  `  exec ${shellQuote(nodePath)} ${shellQuote(cliPath)} bar`,
-  "fi",
-  "if command -v sleds >/dev/null 2>&1; then exec sleds bar; fi",
-  'echo "sleds not found"',
-  'echo "---"',
-  'echo "Run \\`npx @sleds/cli bar --install\\` again. | font=Menlo size=12"',
-  ""
-].join(`
-`);
-var shellQuote = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
+var parsePayload = (payload) => {
+  const out = {};
+  for (const line of payload.split(`
+`).slice(1)) {
+    const eq = line.indexOf("=");
+    if (eq > 0)
+      out[line.slice(0, eq)] = line.slice(eq + 1);
+  }
+  return out;
+};
 
 // src/seat.ts
+init_config();
+init_meter();
 import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync4, renameSync as renameSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join4 } from "node:path";
+import { join as join5 } from "node:path";
 var SEAT_POST_MIN_DELTA_PCT = 1;
 var SEAT_POST_MIN_INTERVAL_MS = 5 * 60000;
 var SEAT_POST_TIMEOUT_MS = 1500;
@@ -715,7 +1116,7 @@ var formatSeatFragment = (w) => {
     return null;
   return `seat ${parts.join(SEP)}`;
 };
-var seatStatePath = (home) => join4(configDir(home), "seat.json");
+var seatStatePath = (home) => join5(configDir(home), "seat.json");
 var parseWindowStored = (v) => {
   if (!isObject4(v))
     return;
@@ -750,8 +1151,56 @@ var parseSeatState = (raw) => {
   const lastWallResetsAt = num2(raw.lastWallResetsAt);
   if (lastWallResetsAt !== undefined)
     out.lastWallResetsAt = lastWallResetsAt;
+  const session = parseSeatSession(raw.session);
+  if (session)
+    out.session = session;
+  return out;
+};
+var parseSeatSession = (v) => {
+  if (!isObject4(v) || typeof v.id !== "string" || !v.id)
+    return;
+  const at = num2(v.at);
+  if (at === undefined)
+    return;
+  const out = { id: v.id, at };
+  if (typeof v.cwd === "string" && v.cwd)
+    out.cwd = v.cwd;
+  if (typeof v.model === "string" && v.model)
+    out.model = v.model;
   return out;
 };
+var seatSessionFromStdin = (text, now) => {
+  const trimmed = text.trim();
+  if (!trimmed)
+    return null;
+  try {
+    const raw = JSON.parse(trimmed);
+    if (!isObject4(raw) || typeof raw.session_id !== "string" || !raw.session_id)
+      return null;
+    const out = { id: raw.session_id, at: now };
+    if (typeof raw.cwd === "string" && raw.cwd)
+      out.cwd = raw.cwd;
+    const model = isObject4(raw.model) ? raw.model.id : raw.model;
+    if (typeof model === "string" && model)
+      out.model = model;
+    return out;
+  } catch {
+    return null;
+  }
+};
+var bindingResetAt = (w, now) => {
+  if (!w)
+    return;
+  const bars = [
+    ...w.fiveHour ? [w.fiveHour] : [],
+    ...w.sevenDay ? [w.sevenDay] : [],
+    ...w.spendLimit ? [w.spendLimit] : [],
+    ...Object.values(w.models ?? {})
+  ].filter((b) => b.resetsAt > now);
+  const full = bars.filter((b) => b.usedPct >= 100);
+  const pick = (full.length ? full : bars).map((b) => b.resetsAt);
+  return pick.length ? Math.min(...pick) : undefined;
+};
 var readSeatState = (home) => {
   const p = seatStatePath(home);
   if (!existsSync4(p))
@@ -827,167 +1276,37 @@ var postJson = async (o, path, body) => {
     return false;
   }
 };
-var postSeatWindow = (o, w) => postJson(o, "/proxy/seat", seatWindowBody(w));
-var postSeatWall = (o, input) => postJson(o, "/proxy/seat-wall", input);
-var SEAT_WALL_LINE = "Seat limit hit. sleds on --until-reset to continue on the org key.";
-var readStdin = (timeoutMs, stdin = process.stdin) => new Promise((resolve3) => {
-  if (stdin.isTTY) {
-    resolve3("");
-    return;
-  }
-  let data = "";
-  let settled = false;
-  const finish = () => {
-    if (settled)
-      return;
-    settled = true;
-    clearTimeout(timer);
-    resolve3(data);
-  };
-  const timer = setTimeout(finish, timeoutMs);
-  stdin.setEncoding("utf8");
-  stdin.on("data", (chunk) => {
-    data += chunk;
-  });
-  stdin.on("end", finish);
-  stdin.on("error", finish);
-  stdin.resume();
-});
-
-// src/commands/bar.ts
-function parseInstallArgs(argv, env) {
-  const flag = (name2) => {
-    const i = argv.indexOf(`--${name2}`);
-    const v = i >= 0 ? argv[i + 1] : undefined;
-    return v && !v.startsWith("--") ? v : undefined;
-  };
-  const sledsHome = flag("home") ?? (env.SLEDS_HOME?.trim() || undefined);
-  const claudeConfigDir = flag("claude-config") ?? (env.CLAUDE_CONFIG_DIR?.trim() || undefined);
-  const name = flag("name");
-  return {
-    ...sledsHome ? { sledsHome } : {},
-    ...claudeConfigDir ? { claudeConfigDir } : {},
-    ...name ? { name } : {}
-  };
-}
-var PLUGIN_NAME = "sleds.1m.sh";
-var pluginName = (name) => name ? `sleds-${name}.1m.sh` : PLUGIN_NAME;
-var bar = async (o) => {
-  const log = o.log ?? console.log;
-  const argv = o.argv ?? [];
-  if (argv.includes("--install"))
-    return install(o, log);
-  if (argv.includes("--uninstall"))
-    return uninstall(o, log);
-  const now = (o.now ?? Date.now)();
-  const seat = freshSeat(readSeatState(o.home).window, now);
-  if (!meterSource(o.home)) {
-    log("sleds not set up");
-    log("---");
-    log("Run `sleds init` first | font=Menlo size=12");
-    return 0;
-  }
-  const m = await loadMeter({ home: o.home, now, fetchFn: o.fetchFn, timeoutMs: o.timeoutMs });
-  for (const line of formatBar(m, seat, now))
-    log(line);
-  return 0;
-};
-function swiftBarPluginDir() {
-  try {
-    const out = execFileSync("defaults", ["read", "com.ameba.SwiftBar", "PluginDirectory"], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-    return out ? out.replace(/^~(?=$|\/)/, homedir()) : null;
-  } catch {
-    return null;
-  }
-}
-var pluginPath = (home, name) => join5(configDir(home, {}), "swiftbar", pluginName(name));
-function install(o, log) {
-  const opts = parseInstallArgs(o.argv ?? [], o.env ?? process.env);
-  const script = pluginPath(o.home, opts.name);
-  mkdirSync5(join5(script, ".."), { recursive: true, mode: 448 });
-  writeFileSync5(script, pluginScript(o.nodePath ?? process.execPath, o.cliPath ?? process.argv[1] ?? "", {
-    ...opts.sledsHome ? { sledsHome: resolve3(o.home, opts.sledsHome) } : {},
-    ...opts.claudeConfigDir ? { claudeConfigDir: resolve3(o.home, opts.claudeConfigDir) } : {}
-  }), {
-    mode: 493
-  });
-  chmodSync2(script, 493);
-  log(`wrote ${script}`);
-  if (opts.sledsHome || opts.claudeConfigDir)
-    log(`tracks the seat at ${[opts.sledsHome && `SLEDS_HOME=${opts.sledsHome}`, opts.claudeConfigDir && `CLAUDE_CONFIG_DIR=${opts.claudeConfigDir}`].filter(Boolean).join(" ")}`);
-  const dir = (o.swiftBarPluginDir ?? swiftBarPluginDir)();
-  if (!dir) {
-    log("SwiftBar is not set up yet: `brew install --cask swiftbar`, launch it once and pick a plugin");
-    log("folder, then run `sleds bar --install` again — or symlink the file above into that folder.");
-    return 0;
-  }
-  const link = join5(dir, pluginName(opts.name));
-  try {
-    mkdirSync5(dir, { recursive: true });
-    if (existsSync5(link) || isDanglingLink(link))
-      unlinkSync(link);
-    symlinkSync(script, link);
-    log(`linked ${link}`);
-    log("SwiftBar picks it up within a minute; the item reads `sleds $… · wk …%`.");
-    return 0;
-  } catch (e) {
-    log(`could not link into ${dir}: ${e instanceof Error ? e.message : String(e)}`);
-    log(`symlink it yourself: ln -sf ${script} ${link}`);
-    return 1;
-  }
-}
-function uninstall(o, log) {
-  const { name } = parseInstallArgs(o.argv ?? [], {});
-  const dir = (o.swiftBarPluginDir ?? swiftBarPluginDir)();
-  const link = dir ? join5(dir, pluginName(name)) : null;
-  if (link && (existsSync5(link) || isDanglingLink(link))) {
-    unlinkSync(link);
-    log(`removed ${link}`);
-  } else
-    log("no SwiftBar plugin link to remove");
-  const script = pluginPath(o.home, name);
-  if (existsSync5(script)) {
-    unlinkSync(script);
-    log(`removed ${script}`);
-  }
-  return 0;
-}
-var isDanglingLink = (p) => {
-  try {
-    return lstatSync(p).isSymbolicLink();
-  } catch {
-    return false;
-  }
-};
-
-// src/commands/doctor.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync6, lstatSync as lstatSync2, readFileSync as readFileSync5, readdirSync, readlinkSync } from "node:fs";
-import { join as join7, resolve as resolve5 } from "node:path";
-
-// src/commands/bar.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
-import { homedir as homedir2 } from "node:os";
-import { join as join6, resolve as resolve4 } from "node:path";
-var PLUGIN_NAME2 = "sleds.1m.sh";
-var pluginName2 = (name) => name ? `sleds-${name}.1m.sh` : PLUGIN_NAME2;
-function swiftBarPluginDir2() {
-  try {
-    const out = execFileSync2("defaults", ["read", "com.ameba.SwiftBar", "PluginDirectory"], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-    return out ? out.replace(/^~(?=$|\/)/, homedir2()) : null;
-  } catch {
-    return null;
+var postSeatWindow = (o, w) => postJson(o, "/proxy/seat", seatWindowBody(w));
+var postSeatWall = (o, input) => postJson(o, "/proxy/seat-wall", input);
+var SEAT_WALL_LINE = "Seat limit hit. sleds on --until-reset to continue on the org key, or sleds defer to resume here at the reset.";
+var SEAT_WALL_LINE_NO_KEY = "Seat limit hit. sleds defer resumes this session on this Mac at the reset; /sled 5 to hand off — this org has no platform key to switch to.";
+var seatWallLine = (hasUpstreamKey) => hasUpstreamKey ? SEAT_WALL_LINE : SEAT_WALL_LINE_NO_KEY;
+var readStdin = (timeoutMs, stdin = process.stdin) => new Promise((resolve3) => {
+  if (stdin.isTTY) {
+    resolve3("");
+    return;
   }
-}
-var pluginPath2 = (home, name) => join6(configDir(home, {}), "swiftbar", pluginName2(name));
+  let data = "";
+  let settled = false;
+  const finish = () => {
+    if (settled)
+      return;
+    settled = true;
+    clearTimeout(timer);
+    resolve3(data);
+  };
+  const timer = setTimeout(finish, timeoutMs);
+  stdin.setEncoding("utf8");
+  stdin.on("data", (chunk) => {
+    data += chunk;
+  });
+  stdin.on("end", finish);
+  stdin.on("error", finish);
+  stdin.resume();
+});
 
 // src/switch.ts
+init_settings();
 var isObject5 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var envOf2 = (settings) => isObject5(settings.env) ? settings.env : {};
 var capturePriorEnv = (settings) => {
@@ -1062,7 +1381,141 @@ var formatDuration = (ms) => {
   return m === 0 ? `${h}h` : `${h}h ${m}m`;
 };
 
+// src/commands/defer.ts
+var parseAt = (v, now) => {
+  const rel = /^\+(\d+)([hm])$/.exec(v.trim());
+  if (rel) {
+    const n = Number.parseInt(rel[1] ?? "0", 10);
+    return now + n * (rel[2] === "h" ? 3600000 : 60000);
+  }
+  const t = Date.parse(v);
+  return Number.isFinite(t) ? t : undefined;
+};
+var parseFlags = (argv) => {
+  const flags = {};
+  for (let i = 0;i < argv.length; i++) {
+    const a = argv[i] ?? "";
+    if (!a.startsWith("--"))
+      continue;
+    const eq = a.indexOf("=");
+    if (eq > 0)
+      flags[a.slice(2, eq)] = a.slice(eq + 1);
+    else {
+      const next = argv[i + 1];
+      if (next !== undefined && !next.startsWith("--")) {
+        flags[a.slice(2)] = next;
+        i++;
+      } else
+        flags[a.slice(2)] = "true";
+    }
+  }
+  return flags;
+};
+var defer = async (o) => {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  const now = (o.now ?? Date.now)();
+  const flags = parseFlags(o.argv);
+  const client = o.client ?? (() => {
+    const src = meterSource(o.home);
+    return src ? musherClient({ ...src, fetchFn: o.fetchFn }) : null;
+  })();
+  if (!client) {
+    error("No seat on this machine. Run `sleds init` first.");
+    return 1;
+  }
+  const state = readSeatState(o.home);
+  const piped = o.stdin ? seatSessionFromStdin(o.stdin, now) : null;
+  const remembered = piped ?? state.session;
+  const sessionId = flags.session ?? remembered?.id;
+  const cwd = flags.cwd ?? remembered?.cwd;
+  const model = flags.model ?? remembered?.model;
+  let resetAt;
+  if (flags.at) {
+    resetAt = parseAt(flags.at, now);
+    if (resetAt === undefined) {
+      error(`--at takes +2h, +90m or an ISO timestamp (got ${flags.at})`);
+      return 1;
+    }
+  } else
+    resetAt = bindingResetAt(state.window, now);
+  if (!sessionId)
+    log("No Claude Code session remembered on this seat yet; the job will say so when it starts. Pass --session <id> to pick one.");
+  const r = await client.defer({
+    ...resetAt !== undefined ? { resetAt } : {},
+    ...model ? { model } : {},
+    ...sessionId ? { claudeSessionId: sessionId } : {},
+    ...cwd ? { cwd } : {},
+    host: o.host ?? hostname()
+  });
+  if (!r) {
+    error("Could not reach the SLEDS proxy; nothing was scheduled.");
+    return 1;
+  }
+  const when = r.scheduledAt <= now + 60000 ? "as soon as the musher ticks (within 5 min)" : `${formatLocal(r.scheduledAt)} (in ${formatDuration(r.scheduledAt - now)})`;
+  log(`Deferred. This Mac resumes ${sessionId ? `session ${sessionId.slice(0, 8)}…` : "the work"}${model ? ` on ${model}` : ""} ${when}.`);
+  log(`  job ${r.jobId}${cwd ? ` · ${cwd}` : ""} · runs on your seat, no key · sleds musher --status to watch`);
+  const cfg = readConfig(o.home);
+  if (process.platform === "darwin" && !existsSync5(musherPlistPath(o.home)) && cfg.musher?.agent !== "launchd")
+    log(`  The musher agent is not installed on this Mac: run \`sleds musher --install\` once, or \`sleds run ${r.jobId}\` by hand at the reset.`);
+  log("  Keep this Mac awake at that time (System Settings → Battery → prevent sleeping on power adapter).");
+  return 0;
+};
+
+// src/commands/doctor.ts
+init_config();
+init_meter();
+import { execFileSync } from "node:child_process";
+import { existsSync as existsSync7, lstatSync, readlinkSync } from "node:fs";
+import { resolve as resolve3 } from "node:path";
+init_settings();
+
+// src/commands/musher.ts
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync5, rmSync, writeFileSync as writeFileSync5 } from "node:fs";
+init_config();
+init_meter();
+var defaultWhich = (cmd) => {
+  const path = process.env.PATH ?? "";
+  for (const dir of path.split(":").filter(Boolean)) {
+    const p = `${dir}/${cmd}`;
+    if (existsSync6(p))
+      return p;
+  }
+  return null;
+};
+var findClaude = (home, configured, which) => {
+  if (configured && existsSync6(configured))
+    return configured;
+  const found = which("claude");
+  if (found)
+    return found;
+  for (const p of [
+    `${home}/.local/bin/claude`,
+    "/opt/homebrew/bin/claude",
+    "/usr/local/bin/claude",
+    `${home}/.npm-global/bin/claude`
+  ])
+    if (existsSync6(p))
+      return p;
+  return null;
+};
+var musherAgentState = (home, env = process.env) => {
+  const plist = musherPlistPath(home);
+  if (!existsSync6(plist))
+    return { installed: false, thisSeat: false };
+  try {
+    const text = readFileSync5(plist, "utf8");
+    const want = env.SLEDS_HOME?.trim();
+    const has = /<key>SLEDS_HOME<\/key>\s*<string>([^<]*)<\/string>/.exec(text)?.[1];
+    return { installed: true, thisSeat: (want ?? undefined) === (has ?? undefined) };
+  } catch {
+    return { installed: true, thisSeat: false };
+  }
+};
+
 // src/commands/status.ts
+init_config();
+init_settings();
 var checkHealth = async (url, fetchFn = fetch, timeoutMs = 1000) => {
   try {
     const res = await fetchFn(`${url}/healthz`, { signal: AbortSignal.timeout(timeoutMs) });
@@ -1080,16 +1533,6 @@ function nodeOk(version, min = NODE_MIN) {
   const [x, y, z] = parse(min);
   return (a ?? 0) !== (x ?? 0) ? (a ?? 0) > (x ?? 0) : (b ?? 0) !== (y ?? 0) ? (b ?? 0) > (y ?? 0) : (c ?? 0) >= (z ?? 0);
 }
-function pluginEnv(body) {
-  const out = {};
-  const home = /^export SLEDS_HOME='([^']*)'/m.exec(body);
-  const cfg = /^export CLAUDE_CONFIG_DIR='([^']*)'/m.exec(body);
-  if (home?.[1])
-    out.sledsHome = home[1];
-  if (cfg?.[1])
-    out.claudeConfigDir = cfg[1];
-  return out;
-}
 var MARK = { ok: "ok  ", warn: "warn", fail: "FAIL" };
 function formatDoctor(checks) {
   const lines = checks.map((c) => `${MARK[c.level]}  ${c.name.padEnd(16)}${c.detail}`);
@@ -1105,9 +1548,9 @@ function formatDoctor(checks) {
   lines.push(fails === 0 && warns === 0 ? "All good." : `${fails} problem${fails === 1 ? "" : "s"}, ${warns} warning${warns === 1 ? "" : "s"}.`);
   return lines;
 }
-function defaultWhich(cmd) {
+function defaultWhich2(cmd) {
   try {
-    return execFileSync3("which", ["-a", cmd], {
+    return execFileSync("which", ["-a", cmd], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     }).split(`
@@ -1116,16 +1559,6 @@ function defaultWhich(cmd) {
     return [];
   }
 }
-function defaultLaunchctl() {
-  try {
-    return execFileSync3("launchctl", ["list"], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    });
-  } catch {
-    return "";
-  }
-}
 async function runDoctor(o) {
   const env = o.env ?? process.env;
   const checks = [];
@@ -1136,7 +1569,7 @@ async function runDoctor(o) {
   ].filter(Boolean);
   const cfgDir = configDir(home, env);
   const cfg = readConfig(home);
-  const cfgExists = existsSync6(configPath(home));
+  const cfgExists = existsSync7(configPath(home));
   if (!cfgExists) {
     checks.push({
       level: "fail",
@@ -1152,7 +1585,7 @@ async function runDoctor(o) {
     });
   }
   const sPath = settingsPath(home);
-  const settings = existsSync6(sPath) ? readSettings(home) : null;
+  const settings = existsSync7(sPath) ? readSettings(home) : null;
   const pointed = settings ? readProxy(settings) : null;
   if (!settings) {
     checks.push({
@@ -1196,7 +1629,7 @@ async function runDoctor(o) {
       detail: `seat-event ${seat2 ? "on" : "missing"} · spec-event ${spec ? "on" : "missing"}`,
       fix: seat2 && spec ? undefined : "sleds hooks"
     });
-    const want = env.SLEDS_HOME?.trim() ? resolve5(home, env.SLEDS_HOME.trim()) : undefined;
+    const want = env.SLEDS_HOME?.trim() ? resolve3(home, env.SLEDS_HOME.trim()) : undefined;
     const cmds = sledsCommandsIn(settings);
     const wrong = cmds.filter((c) => {
       const got = bakedHome(c);
@@ -1210,7 +1643,7 @@ async function runDoctor(o) {
         fix: wrong.length === 0 ? undefined : `${overrides.length ? `${overrides.join(" ")} ` : ""}sleds hooks   (re-writes the status line + hooks with this seat baked in)`
       });
     }
-    const skill = existsSync6(skillPath(home));
+    const skill = existsSync7(skillPath(home));
     checks.push({
       level: skill ? "ok" : "warn",
       name: "skill",
@@ -1225,10 +1658,10 @@ async function runDoctor(o) {
     detail: `${nodeVersion}${nodeOk(nodeVersion) ? "" : ` — seat-sync needs ≥ ${NODE_MIN} (node:sqlite)`}`,
     fix: nodeOk(nodeVersion) ? undefined : `brew install node@22 && echo 'export PATH="/opt/homebrew/opt/node@22/bin:$PATH"' >> ~/.zshrc`
   });
-  const which = (o.which ?? defaultWhich)("sleds");
+  const which = (o.which ?? defaultWhich2)("sleds");
   const stale = which.filter((p) => {
     try {
-      const target = lstatSync2(p).isSymbolicLink() ? readlinkSync(p) : p;
+      const target = lstatSync(p).isSymbolicLink() ? readlinkSync(p) : p;
       return /\/src\/index\.ts$/.test(target) || /\.bun\/bin\/sleds$/.test(p);
     } catch {
       return false;
@@ -1243,49 +1676,64 @@ async function runDoctor(o) {
     });
   else if (which.length > 0)
     checks.push({ level: "ok", name: "path", detail: which[0] ?? "" });
-  const pluginBody = existsSync6(pluginPath2(home)) ? readFileSync5(pluginPath2(home), "utf8") : null;
-  const dir = (o.swiftBarPluginDir ?? swiftBarPluginDir2)();
-  if (pluginBody) {
-    const baked = pluginEnv(pluginBody);
-    const linked = dir ? existsSync6(join7(dir, PLUGIN_NAME2)) : false;
-    const seatDesc = baked.sledsHome || baked.claudeConfigDir ? `seat at ${[baked.sledsHome && `SLEDS_HOME=${baked.sledsHome}`, baked.claudeConfigDir && `CLAUDE_CONFIG_DIR=${baked.claudeConfigDir}`].filter(Boolean).join(" ")}` : "default seat";
-    checks.push({
-      level: linked ? "ok" : "warn",
-      name: "menu bar",
-      detail: linked ? `${PLUGIN_NAME2} linked · ${seatDesc}` : `plugin written but not linked into SwiftBar${dir ? ` (${dir})` : " (SwiftBar not set up)"}`,
-      fix: linked ? undefined : "sleds bar --install"
-    });
-  } else {
-    checks.push({
-      level: "warn",
-      name: "menu bar",
-      detail: "no SwiftBar plugin",
-      fix: "sleds bar --install"
-    });
-  }
-  const agents = join7(home, "Library", "LaunchAgents");
-  const plists = existsSync6(agents) ? readdirSync(agents).filter((f) => f.startsWith("ai.sleds.") && f.endsWith(".plist")) : [];
-  const loaded = (o.launchctlList ?? defaultLaunchctl)();
   const seat = readSeatState(home);
   const age = seat.window ? Math.round((Date.now() - seat.window.capturedAt) / 60000) : null;
-  if (plists.length === 0)
-    checks.push({
+  checks.push({
+    level: age === null ? "warn" : "ok",
+    name: "seat quota",
+    detail: age === null ? "no report yet — run one Claude Code turn on this seat" : `last report ${age < 1 ? "just now" : `${age}m ago`} via the status line${seat.window?.sevenDay ? ` · wk ${Math.round(seat.window.sevenDay.usedPct)}%` : ""}`,
+    fix: age === null ? "open claude, say hi, exit — the status line posts the seat's quota" : undefined
+  });
+  if ((o.platform ?? process.platform) === "darwin") {
+    const agent = musherAgentState(home, env);
+    checks.push(!agent.installed ? {
       level: "warn",
-      name: "seat-sync",
-      detail: "no timer installed (seat bars stay empty)",
-      fix: "sleds seat-sync --install"
-    });
-  else {
-    const running = plists.filter((p) => loaded.includes(p.replace(/\.plist$/, "")));
-    checks.push({
-      level: running.length === plists.length ? age !== null && age < 6 * 60 ? "ok" : "warn" : "warn",
-      name: "seat-sync",
-      detail: `${running.length}/${plists.length} timer${plists.length === 1 ? "" : "s"} loaded${age !== null ? ` · last read ${age}m ago` : " · no read yet"}`,
-      fix: running.length === plists.length && age !== null && age < 6 * 60 ? undefined : "sleds seat-sync (run once by hand and read its message)"
+      name: "musher",
+      detail: "agent not installed — `sleds defer` jobs would wait for `sleds run`",
+      fix: "sleds musher --install"
+    } : !agent.thisSeat ? {
+      level: "warn",
+      name: "musher",
+      detail: "agent installed for a different seat (SLEDS_HOME differs)",
+      fix: "sleds musher --install"
+    } : { level: "ok", name: "musher", detail: `launchd agent ${MUSHER_LABEL}, every 5 min` });
+    const claude = findClaude(home, readConfig(home).musher?.claudePath, (c) => (o.which ?? defaultWhich2)(c)[0] ?? null);
+    checks.push(claude ? { level: "ok", name: "claude cli", detail: claude } : {
+      level: "warn",
+      name: "claude cli",
+      detail: "`claude` not on PATH — the musher cannot run Claude Code",
+      fix: 'sleds musher --claude "$(which claude)"'
     });
+    const sleep = (o.pmset ?? defaultPmset)();
+    if (sleep !== null)
+      checks.push(sleep.acSleepMinutes === 0 ? {
+        level: "ok",
+        name: "awake",
+        detail: "does not sleep on power — deferred jobs can start"
+      } : {
+        level: "warn",
+        name: "awake",
+        detail: `sleeps after ${sleep.acSleepMinutes} min on power — a deferred job needs the Mac awake at the reset`,
+        fix: "System Settings → Battery → Options → Prevent automatic sleeping on power adapter (or: sudo pmset -c sleep 0)"
+      });
   }
   return checks;
 }
+function parsePmset(text) {
+  const ac = text.split(/AC Power:/i)[1];
+  const block = ac ?? text;
+  const m = /^\s*sleep\s+(\d+)/m.exec(block);
+  if (!m)
+    return null;
+  return { acSleepMinutes: Number.parseInt(m[1] ?? "0", 10) };
+}
+var defaultPmset = () => {
+  try {
+    return parsePmset(execFileSync("pmset", ["-g", "custom"], { encoding: "utf8", timeout: 2000 }));
+  } catch {
+    return null;
+  }
+};
 var doctor = async (o) => {
   const log = o.log ?? console.log;
   const checks = await runDoctor(o);
@@ -1295,6 +1743,7 @@ var doctor = async (o) => {
 };
 
 // src/commands/hooks.ts
+init_settings();
 var hooks = (o) => {
   const log = o.log ?? console.log;
   const error = o.error ?? console.error;
@@ -1317,6 +1766,8 @@ var hooks = (o) => {
 };
 
 // src/commands/init.ts
+init_config();
+init_settings();
 import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync6 } from "node:fs";
 import { createInterface } from "node:readline";
 
@@ -1350,8 +1801,13 @@ When the proxy is active it answers a walled request with its options. The user
 /sled 3    run overnight at half price
 /sled 4    switch to a cheaper model for the rest of the session (offered when one saves ≥15%)
 /sled 5    hand off to an idle coworker, or park for the team (offered on a team of two or more)
+/sled 6    defer to reset: the job runs itself when the seat resets — same model, done in minutes, full price (offered when the wall has a reset and the org has a key)
 \`\`\`
 
+No key (Team plan, seat-first)? The musher still runs: \`sleds defer\` in a terminal schedules this Mac to resume the current session itself at the reset — \`claude --resume\` on the seat's own quota, the model pinned. \`sleds musher --status\` lists what is waiting; \`sleds run <jobId>\` runs one now; the Mac must be awake at the reset (\`sleds doctor\` checks). When the user says "defer this" or "pick it up at the reset" and the org has no key, tell them to run \`sleds defer\`.
+
+A hand-off carries a brief (the packet): what, note, cost so far, how to pick it up. The \`handoffs\` MCP tool and the dashboard's Jobs page show it; read it before taking one.
+
 ## Window reset
 
 When the user mentions their window has reset, or the deadline shown by \`sleds status\` has passed:
@@ -1364,9 +1820,9 @@ then restart \`claude\`. Settings go back to exactly what they were.
 
 ## Check
 
-\`sleds status\` — on/off, since, reverts at, proxy health, wall mode.
+\`sleds status\` — on/off, since, reverts at, proxy health, wall mode, and the org's shape (\`Org:\` / \`Wiring:\`). An org with no platform key runs seat-first and its walls offer hold (\`/sled 2\`), \`sleds defer\` (this Mac resumes at the reset) and hand-off (\`/sled 5\`) — continue, overnight and switch need a key an admin adds on the dashboard.
 
-The status line's \`seat wk 52% · 5h 12%\` is the user's own Pro/Max window as Claude Code reports it (weekly, then 5-hour); \`window\` is the org key's headroom through the proxy. At \`wk 100%\` the answer is \`sleds on --until-reset\`.
+The status line's \`seat wk 52% · 5h 12%\` is the user's own Pro/Max window as Claude Code reports it (weekly, then 5-hour); \`window\` is the org key's headroom through the proxy. At \`wk 100%\` the answer is \`sleds on --until-reset\` (org key) or \`sleds defer\` (this Mac resumes at the reset, no key).
 
 ## /sled — estimate the task, offer overnight
 
@@ -1441,6 +1897,7 @@ From Cowork or any MCP client (\`sleds mcp\`): the \`handoffs\` tool lists what
 `;
 
 // src/commands/hooks.ts
+init_settings();
 var hooks2 = (o) => {
   const log = o.log ?? console.log;
   const error = o.error ?? console.error;
@@ -1464,24 +1921,35 @@ var hooks2 = (o) => {
 
 // src/commands/init.ts
 var DEFAULT_PROXY_URL = "http://localhost:8787";
-var promptStdin = (question) => new Promise((resolve6) => {
+var promptStdin = (question) => new Promise((resolve4) => {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
   rl.question(question, (answer) => {
     rl.close();
-    resolve6(answer.trim());
+    resolve4(answer.trim());
   });
 });
 async function signupIndividual(proxyUrl, email, credential, fetchFn = fetch) {
+  return signupRequest(proxyUrl, { email, apiKey: credential }, fetchFn);
+}
+async function signupTeam(proxyUrl, email, team, credential, fetchFn = fetch) {
+  return signupRequest(proxyUrl, { email, team, ...credential ? { apiKey: credential } : {} }, fetchFn);
+}
+async function signupRequest(proxyUrl, payload, fetchFn) {
   try {
     const res = await fetchFn(`${proxyUrl}/signup`, {
       method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({ email, apiKey: credential }),
+      body: JSON.stringify(payload),
       signal: AbortSignal.timeout(20000)
     });
     const body = await res.json().catch(() => ({}));
     if (res.ok && typeof body.token === "string")
-      return { ok: true, token: body.token, created: body.created === true };
+      return {
+        ok: true,
+        token: body.token,
+        created: body.created === true,
+        verifyPending: body.verifyPending === true
+      };
     return {
       ok: false,
       reason: typeof body.reason === "string" ? body.reason : `http_${res.status}`,
@@ -1497,6 +1965,9 @@ var SIGNUP_REASONS = {
   key_rejected: "Anthropic did not accept that API key. Check it at console.anthropic.com → API keys.",
   rate_limited: "too many signups from this network in the last hour. Try again later.",
   not_configured: "the proxy is not set up for self-serve signup yet.",
+  team: "the team needs a name (2–80 characters).",
+  personal_email: "a team needs a work email — that domain is a personal mailbox. Sign up as an individual instead, or use your company address.",
+  org_exists: "someone at your company already set up SLEDS. Ask them for a seat (Members → invite, Admin → Mint a seat) and run `sleds init --token …`.",
   unavailable: "the proxy could not reach its control plane. Try again in a moment.",
   unreachable: "could not reach the proxy."
 };
@@ -1522,6 +1993,20 @@ function normalizeProxyUrl(raw) {
     return null;
   }
 }
+async function fetchOrgInfo(url, token, fetchFn = fetch) {
+  try {
+    const res = await fetchFn(`${url}/proxy/meter`, {
+      headers: { authorization: `Bearer ${token}` },
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!res.ok)
+      return null;
+    const body = await res.json();
+    return body.org?.capabilities ? body.org : null;
+  } catch {
+    return null;
+  }
+}
 async function probeProxy(url, fetchFn = fetch, opts = {}) {
   const tries = opts.tries ?? 2;
   const timeoutMs = opts.timeoutMs ?? 1e4;
@@ -1550,21 +2035,45 @@ var resolveToken = async (o) => {
     if (typed)
       return { token: typed, source: "prompt" };
   }
-  const url = normalizeProxyUrl(o.url ?? env.SLEDS_PROXY_URL ?? DEFAULT_PROXY_URL);
+  const url = normalizeProxyUrl(o.url ?? env.SLEDS_PROXY_URL ?? readConfig(o.home).proxyUrl ?? DEFAULT_PROXY_URL);
   if (!url)
     return null;
-  const email = (await o.prompt("Your email: ")).trim();
+  const log = o.log ?? console.log;
+  const err = o.error ?? console.error;
+  let team = o.team?.trim() || null;
+  if (team === null && !o.email) {
+    const which = (await o.prompt("Set up SLEDS for (1) just you, or (2) your team? [1/2]: ")).trim();
+    if (which === "2") {
+      team = (await o.prompt("Team name (e.g. your company): ")).trim();
+      if (!team)
+        return null;
+    }
+  }
+  const email = (o.email ?? await o.prompt(team ? "Your work email: " : "Your email: ")).trim();
   if (!email.includes("@"))
     return null;
+  if (team) {
+    const credential2 = (await o.prompt("Your organization's Anthropic API key, if you have one (sk-ant-…; press enter to skip — a Team plan without one still works, walls offer hold and hand-off): ")).trim();
+    const r2 = await signupTeam(url, email, team, credential2 || null, o.fetchFn);
+    if (!r2.ok) {
+      err(signupFailureText(r2));
+      return null;
+    }
+    log(`Created ${team} with you as owner (${email}).${credential2 ? " Your platform key is stored encrypted as the org's upstream key." : " No platform key yet — add one on the dashboard (Admin → Keys) to unlock continue / overnight / switch at a wall."}`);
+    if (r2.verifyPending)
+      log(`Check ${email} for a verification link and click it — inviting members unlocks then (an unverified team is removed after 48 h; your own seat works meanwhile).`);
+    log("Invite your team on the dashboard (Members → invite by email, Admin → Mint a seat); each person runs `sleds init --token …`.");
+    return { token: r2.token, source: "signup" };
+  }
   const credential = (await o.prompt("Your Anthropic API key (sk-ant-…, stored encrypted, spends only your account): ")).trim();
   if (!credential)
     return null;
   const r = await signupIndividual(url, email, credential, o.fetchFn);
   if (!r.ok) {
-    (o.error ?? console.error)(signupFailureText(r));
+    err(signupFailureText(r));
     return null;
   }
-  (o.log ?? console.log)(r.created ? `Created your individual seat (${email}). Your key is stored encrypted and is the only key this seat spends.` : `Re-issued your individual seat (${email}); the previous token is revoked.`);
+  log(r.created ? `Created your individual seat (${email}). Your key is stored encrypted and is the only key this seat spends.` : `Re-issued your individual seat (${email}); the previous token is revoked.`);
   return { token: r.token, source: "signup" };
 };
 var init = async (o) => {
@@ -1584,7 +2093,7 @@ var init = async (o) => {
     error("Invalid seat token: expected something like sled_xxxxxxxx.");
     return 2;
   }
-  const url = normalizeProxyUrl(o.url ?? env.SLEDS_PROXY_URL ?? DEFAULT_PROXY_URL);
+  const url = normalizeProxyUrl(o.url ?? env.SLEDS_PROXY_URL ?? readConfig(o.home).proxyUrl ?? DEFAULT_PROXY_URL);
   if (!url) {
     error(`Invalid proxy URL: ${JSON.stringify(o.url ?? env.SLEDS_PROXY_URL ?? "")}. Expected https://proxy.sleds.ai.`);
     return 2;
@@ -1594,12 +2103,19 @@ var init = async (o) => {
     return 2;
   }
   const wrote = [];
+  const org = await fetchOrgInfo(url, resolved.token, o.fetchFn);
+  const wiring = o.proxyAlways ? "proxy-always" : o.seatFirst ? "seat-first" : org?.mode ?? "proxy-always";
+  if (wiring === "proxy-always" && org && !org.capabilities.upstreamKey) {
+    error(`${org.name} has no platform key for the proxy to forward with; --proxy-always would break every request. Using seat-first.`);
+  }
+  const finalWiring = wiring === "proxy-always" && org && !org.capabilities.upstreamKey ? "seat-first" : wiring;
   if (backupSettings(o.home))
     wrote.push(`backed up settings to ${backupPath(o.home)}`);
-  const withProxy = applyProxy(readSettings(o.home), { url, token: resolved.token });
-  const statusLine = applyStatusLine(withProxy, o.statusLineCommand ?? sledsCommand("statusline", o.home, o.env));
+  const current = readSettings(o.home);
+  const wired = finalWiring === "proxy-always" ? applyProxy(current, { url, token: resolved.token }) : removeProxy(current);
+  const statusLine = applyStatusLine(wired, o.statusLineCommand ?? sledsCommand("statusline", o.home, o.env));
   writeSettings(o.home, statusLine.settings);
-  wrote.push(`set env.ANTHROPIC_BASE_URL and env.ANTHROPIC_AUTH_TOKEN in ${settingsPath(o.home)}`);
+  wrote.push(finalWiring === "proxy-always" ? `set env.ANTHROPIC_BASE_URL and env.ANTHROPIC_AUTH_TOKEN in ${settingsPath(o.home)} (everything through the proxy)` : `left Claude Code on your seat (no ANTHROPIC_BASE_URL in ${settingsPath(o.home)}); \`sleds on\` switches to the proxy at a wall`);
   wrote.push(statusLine.prior === undefined ? `set statusLine in ${settingsPath(o.home)}` : `set statusLine in ${settingsPath(o.home)} (previous one kept for uninstall)`);
   hooks2({
     home: o.home,
@@ -1619,24 +2135,47 @@ var init = async (o) => {
     ...prior,
     token: resolved.token,
     proxyUrl: url,
+    wiring: finalWiring,
+    ...org ? { org } : {},
     ...statusLine.prior !== undefined ? { priorStatusLine: statusLine.prior } : {}
   });
   wrote.push(`saved token and proxy URL to ${configPath(o.home)} (0600)`);
   mkdirSync6(skillDir(o.home), { recursive: true });
   writeFileSync6(skillPath(o.home), SKILL_MD);
   wrote.push(`installed skill at ${skillPath(o.home)}`);
-  log("Claude Code now runs through SLEDS on the org key.");
-  log("");
-  for (const w of wrote)
-    log(`  ${w}`);
-  log("");
-  log(`Every request goes to ${url} and is metered to this seat. Run \`sleds status\` to check.`);
-  log("The status line shows your meter: spend today, seat limits, window, allowance, queued jobs.");
-  log("Prefer to burn your own Pro/Max/Team seat first? `sleds off` puts Claude Code back on it; `sleds on --until-reset +5h` switches to the org key at a wall.");
+  if (o.installMusher) {
+    const r = o.installMusher();
+    if (r)
+      wrote.push(r);
+  }
+  const orgLine = org ? `${org.name} · ${org.plan}${org.capabilities.upstreamKey ? ` · ${org.capabilities.upstreamSource === "own" ? "org key" : "shared key"}` : " · no platform key"}` : "org unknown (proxy did not answer /proxy/meter)";
+  if (finalWiring === "proxy-always") {
+    log(`Claude Code now runs through SLEDS on the org key.  (${orgLine})`);
+    log("");
+    for (const w of wrote)
+      log(`  ${w}`);
+    log("");
+    log(`Every request goes to ${url} and is metered to this seat. Run \`sleds status\` to check.`);
+    log("The status line shows your meter: spend today, seat limits, window, allowance, queued jobs.");
+    log("Prefer your seat first? `sleds init --seat-first` leaves Claude Code on it and switches only at a wall.");
+  } else {
+    log(`SLEDS is watching your seat. Nothing changes until a wall.  (${orgLine})`);
+    log("");
+    for (const w of wrote)
+      log(`  ${w}`);
+    log("");
+    log("Claude Code keeps running on your seat; the status line reports its quota to SLEDS on every turn.");
+    if (org && !org.capabilities.upstreamKey) {
+      log("This org has no platform key, so at a wall the choices are hold until reset, `sleds defer` (this Mac resumes the session itself at the reset), or hand off to a teammate. An admin can add a key on the dashboard to unlock continue / overnight / switch.");
+    } else {
+      log("At a wall: `sleds on --until-reset +5h` (or /sled 1) switches to the org key through the proxy until the reset; `sleds off` puts you back.");
+    }
+  }
   return 0;
 };
 
 // src/mcp.ts
+init_meter();
 var PROTOCOL_VERSION = "2025-06-18";
 var SERVER_INFO = { name: "sleds", version: "0.0.1" };
 var MCP_TIMEOUT_MS = 5000;
@@ -1992,8 +2531,17 @@ async function handoffsTool(deps) {
   if (handoffs.length === 0)
     return { text: "No open hand-offs on your team. Park one with the handoff tool." };
   const now = (deps.now ?? Date.now)();
-  return { text: handoffLines(handoffs, now).slice(1).join(`
-`) };
+  const packets = handoffs.map((h) => str2(h.packet)).filter((p) => Boolean(p)).join(`
+
+---
+
+`);
+  return {
+    text: [handoffLines(handoffs, now).slice(1).join(`
+`), packets ? `
+${packets}` : ""].join(`
+`)
+  };
 }
 async function handoffTool(deps, args) {
   if (!meterSource(deps.home))
@@ -2161,6 +2709,8 @@ var mcp = async (o) => {
 };
 
 // src/commands/meter.ts
+init_config();
+init_meter();
 var meter = async (o) => {
   const log = o.log ?? console.log;
   const now = (o.now ?? Date.now)();
@@ -2179,14 +2729,232 @@ var meter = async (o) => {
   return 0;
 };
 
+// src/commands/musher.ts
+init_config();
+init_meter();
+import { spawnSync as spawnSync2 } from "node:child_process";
+import { existsSync as existsSync8, mkdirSync as mkdirSync7, readFileSync as readFileSync7, rmSync as rmSync2, writeFileSync as writeFileSync7 } from "node:fs";
+import { hostname as hostname2 } from "node:os";
+import { dirname as dirname3 } from "node:path";
+var defaultWhich3 = (cmd) => {
+  const path = process.env.PATH ?? "";
+  for (const dir of path.split(":").filter(Boolean)) {
+    const p = `${dir}/${cmd}`;
+    if (existsSync8(p))
+      return p;
+  }
+  return null;
+};
+var findClaude2 = (home, configured, which) => {
+  if (configured && existsSync8(configured))
+    return configured;
+  const found = which("claude");
+  if (found)
+    return found;
+  for (const p of [
+    `${home}/.local/bin/claude`,
+    "/opt/homebrew/bin/claude",
+    "/usr/local/bin/claude",
+    `${home}/.npm-global/bin/claude`
+  ])
+    if (existsSync8(p))
+      return p;
+  return null;
+};
+var musherInstall = (o) => {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  const platform = o.platform ?? process.platform;
+  if (platform !== "darwin") {
+    error(`sleds musher --install needs launchd (macOS). On ${platform}, run \`sleds musher tick\` from cron every 5 minutes.`);
+    return 1;
+  }
+  const env = o.env ?? process.env;
+  const plist = musherPlistPath(o.home);
+  const dir = configDir(o.home, env);
+  mkdirSync7(dirname3(plist), { recursive: true });
+  mkdirSync7(dir, { recursive: true, mode: 448 });
+  const execPath = o.sledsArgv[0] ?? process.execPath;
+  const agentEnv = {
+    PATH: musherPath(o.home, execPath, env.PATH ?? ""),
+    HOME: o.home,
+    ...env.SLEDS_HOME ? { SLEDS_HOME: env.SLEDS_HOME } : {},
+    ...env.CLAUDE_CONFIG_DIR ? { CLAUDE_CONFIG_DIR: env.CLAUDE_CONFIG_DIR } : {}
+  };
+  const exec = o.exec ?? defaultExecSync;
+  if (existsSync8(plist))
+    exec("launchctl", ["unload", plist]);
+  writeFileSync7(plist, buildMusherPlist({ sledsArgv: o.sledsArgv, env: agentEnv, logPath: musherLogPath(dir) }));
+  const r = exec("launchctl", ["load", plist]);
+  if (!r.ok) {
+    error(`launchctl load failed: ${r.stderr.trim() || "unknown"}`);
+    return 1;
+  }
+  const cfg = readConfig(o.home);
+  writeConfig(o.home, { ...cfg, musher: { ...cfg.musher ?? {}, agent: "launchd" } });
+  const claude = findClaude2(o.home, cfg.musher?.claudePath, o.which ?? defaultWhich3);
+  log(`musher installed: launchd agent ${MUSHER_LABEL}, every ${5} min · log ${musherLogPath(dir)}`);
+  if (!claude)
+    log("warn: `claude` not found on PATH — set it with `sleds musher --claude /path/to/claude`");
+  return 0;
+};
+var musherUninstall = (o) => {
+  const log = o.log ?? console.log;
+  const plist = musherPlistPath(o.home);
+  const exec = o.exec ?? defaultExecSync;
+  if (existsSync8(plist)) {
+    exec("launchctl", ["unload", plist]);
+    rmSync2(plist, { force: true });
+    log(`musher removed: ${MUSHER_LABEL}`);
+  } else
+    log("musher was not installed.");
+  const cfg = readConfig(o.home);
+  if (cfg.musher)
+    writeConfig(o.home, { ...cfg, musher: { ...cfg.musher, agent: "none" } });
+  return 0;
+};
+var formatMusherStatus = (list, now) => {
+  const lines = [];
+  for (const j of list.running)
+    lines.push(`running   ${j.jobId}${j.startedAt ? ` · since ${formatLocal(j.startedAt)} (${formatDuration(now - j.startedAt)})` : ""}`);
+  for (const j of list.due)
+    lines.push(`due now   ${j.jobId}${j.model ? ` · ${j.model}` : ""} · was ${formatLocal(j.scheduledAt)}`);
+  for (const j of list.upcoming)
+    lines.push(`waiting   ${j.jobId}${j.model ? ` · ${j.model}` : ""} · starts ${formatLocal(j.scheduledAt)} (in ${formatDuration(j.scheduledAt - now)})`);
+  if (lines.length === 0)
+    lines.push("nothing deferred on this seat.");
+  return lines;
+};
+var clientFor = (o) => {
+  if (o.client)
+    return o.client;
+  const src = meterSource(o.home);
+  return src ? musherClient({ ...src, fetchFn: o.fetchFn }) : null;
+};
+var musherStatus = async (o) => {
+  const log = o.log ?? console.log;
+  const now = (o.now ?? Date.now)();
+  const plist = musherPlistPath(o.home);
+  const cfg = readConfig(o.home);
+  log(existsSync8(plist) ? `agent     ${MUSHER_LABEL} installed (${plist})` : "agent     not installed — sleds musher --install");
+  const claude = findClaude2(o.home, cfg.musher?.claudePath, o.which ?? defaultWhich3);
+  log(`claude    ${claude ?? "not found — sleds musher --claude /path/to/claude"}`);
+  log(`mode      ${cfg.musher?.permissionMode ?? DEFAULT_PERMISSION_MODE} · timeout ${cfg.musher?.timeoutMinutes ?? DEFAULT_TIMEOUT_MINUTES} min`);
+  const client = clientFor(o);
+  if (!client) {
+    log("seat      not initialised (sleds init)");
+    return 1;
+  }
+  const list = await client.list();
+  if (!list) {
+    log("proxy     unreachable");
+    return 1;
+  }
+  for (const line of formatMusherStatus(list, now))
+    log(line);
+  return 0;
+};
+var musherTick = async (o) => {
+  const log = o.log ?? console.log;
+  const client = clientFor(o);
+  if (!client) {
+    log("musher: seat not initialised; nothing to do");
+    return 1;
+  }
+  const list = await client.list();
+  if (!list) {
+    log("musher: proxy unreachable; will try again next tick");
+    return 0;
+  }
+  if (list.due.length === 0)
+    return 0;
+  const cfg = readConfig(o.home);
+  const claude = findClaude2(o.home, cfg.musher?.claudePath, o.which ?? defaultWhich3) ?? "claude";
+  const seat = readSeatState(o.home);
+  for (const job of list.due) {
+    const out = await runJob({
+      job,
+      client,
+      fallbackSession: seat.session,
+      host: o.host ?? hostname2(),
+      claudePath: claude,
+      permissionMode: cfg.musher?.permissionMode ?? DEFAULT_PERMISSION_MODE,
+      timeoutMs: (cfg.musher?.timeoutMinutes ?? DEFAULT_TIMEOUT_MINUTES) * 60000,
+      exec: o.execCapture,
+      log
+    });
+    if (out.kind === "skipped")
+      log(`musher: job ${job.jobId} skipped — ${out.reason}`);
+  }
+  return 0;
+};
+var musherConfigure = (o, flags) => {
+  const log = o.log ?? console.log;
+  const cfg = readConfig(o.home);
+  const musher = { ...cfg.musher ?? {} };
+  if (flags.claude)
+    musher.claudePath = flags.claude;
+  if (flags.mode)
+    musher.permissionMode = flags.mode;
+  if (flags.timeout) {
+    const n = Number.parseInt(flags.timeout, 10);
+    if (!Number.isFinite(n) || n <= 0) {
+      (o.error ?? console.error)("--timeout takes minutes, a positive number");
+      return 1;
+    }
+    musher.timeoutMinutes = n;
+  }
+  writeConfig(o.home, { ...cfg, musher });
+  log(`musher settings: claude ${musher.claudePath ?? "(PATH)"} · mode ${musher.permissionMode ?? DEFAULT_PERMISSION_MODE} · timeout ${musher.timeoutMinutes ?? DEFAULT_TIMEOUT_MINUTES} min`);
+  return 0;
+};
+var defaultExecSync = (cmd, args) => {
+  const r = spawnSync2(cmd, [...args], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
+  if (r.error)
+    return { ok: false, stderr: r.error.message };
+  return { ok: r.status === 0, stderr: r.stderr ?? "" };
+};
+var musher = async (o) => {
+  const args = [...o.argv];
+  const flags = {};
+  const positional = [];
+  for (let i = 0;i < args.length; i++) {
+    const a = args[i] ?? "";
+    if (a.startsWith("--")) {
+      const next = args[i + 1];
+      if (next !== undefined && !next.startsWith("--")) {
+        flags[a.slice(2)] = next;
+        i++;
+      } else
+        flags[a.slice(2)] = "true";
+    } else
+      positional.push(a);
+  }
+  if (flags.install)
+    return musherInstall(o);
+  if (flags.uninstall)
+    return musherUninstall(o);
+  if (flags.claude || flags.mode || flags.timeout)
+    return musherConfigure(o, flags);
+  if (positional[0] === "tick")
+    return musherTick(o);
+  if (flags.status || positional.length === 0)
+    return musherStatus(o);
+  (o.error ?? console.error)(`sleds musher: unknown argument ${positional[0]}`);
+  return 1;
+};
+
+// src/commands/off.ts
+init_config();
+
 // src/schedule.ts
-import { existsSync as existsSync7, mkdirSync as mkdirSync7, rmSync, writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join8 } from "node:path";
+import { existsSync as existsSync9, mkdirSync as mkdirSync8, rmSync as rmSync3, writeFileSync as writeFileSync8 } from "node:fs";
+import { join as join7 } from "node:path";
 var REVERT_LABEL = "ai.sleds.revert";
-var plistPath = (home) => join8(home, "Library", "LaunchAgents", `${REVERT_LABEL}.plist`);
-var xmlEscape = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+var plistPath = (home) => join7(home, "Library", "LaunchAgents", `${REVERT_LABEL}.plist`);
+var xmlEscape2 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 var buildLaunchdPlist = (sledsArgv, deadline) => {
-  const args = [...sledsArgv, "off"].map((a) => `    <string>${xmlEscape(a)}</string>`).join(`
+  const args = [...sledsArgv, "off"].map((a) => `    <string>${xmlEscape2(a)}</string>`).join(`
 `);
   return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -2222,9 +2990,9 @@ var scheduleRevert = (d, deadlineMs) => {
   if (d.platform === "darwin") {
     const p = plistPath(d.home);
     try {
-      mkdirSync7(join8(d.home, "Library", "LaunchAgents"), { recursive: true });
+      mkdirSync8(join7(d.home, "Library", "LaunchAgents"), { recursive: true });
       d.exec("launchctl", ["unload", p]);
-      writeFileSync7(p, buildLaunchdPlist(d.sledsArgv, deadline));
+      writeFileSync8(p, buildLaunchdPlist(d.sledsArgv, deadline));
       const r = d.exec("launchctl", ["load", p]);
       if (r.ok)
         return { kind: "launchd", detail: `launchd agent ${REVERT_LABEL}` };
@@ -2251,9 +3019,9 @@ var scheduleRevert = (d, deadlineMs) => {
 var cancelRevert = (d, kind) => {
   if (kind === "launchd" || d.platform === "darwin") {
     const p = plistPath(d.home);
-    if (existsSync7(p)) {
+    if (existsSync9(p)) {
       d.exec("launchctl", ["unload", p]);
-      rmSync(p, { force: true });
+      rmSync3(p, { force: true });
     }
   }
   if (kind === "systemd" || d.platform === "linux") {
@@ -2262,6 +3030,7 @@ var cancelRevert = (d, kind) => {
 };
 
 // src/commands/off.ts
+init_settings();
 var off = (o) => {
   const log = o.log ?? console.log;
   const cfg = readConfig(o.home);
@@ -2289,7 +3058,13 @@ var off = (o) => {
   return 0;
 };
 
+// src/commands/on.ts
+init_config();
+init_settings();
+
 // src/commands/init.ts
+init_config();
+init_settings();
 var DEFAULT_PROXY_URL2 = "http://localhost:8787";
 
 // src/commands/on.ts
@@ -2312,6 +3087,10 @@ var on = (o) => {
     error("Saved token is not a sled_ token. Run `sleds init --token <sled_…>`.");
     return 2;
   }
+  if (cfg.org && !cfg.org.capabilities.upstreamKey) {
+    error(`${cfg.org.name} has no platform key, so there is no org key to switch to. Hold until the reset, or hand off with /sled 5. An admin can add a key on the dashboard.`);
+    return 2;
+  }
   const url = (o.url ?? cfg.proxyUrl ?? env.SLEDS_PROXY_URL ?? DEFAULT_PROXY_URL2).replace(/\/+$/, "");
   let untilResetMs;
   if (o.untilReset !== undefined) {
@@ -2365,7 +3144,70 @@ var on = (o) => {
   return 0;
 };
 
+// src/commands/run.ts
+init_config();
+init_meter();
+import { hostname as hostname3 } from "node:os";
+var run = async (o) => {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  if (!o.jobId) {
+    error("usage: sleds run <jobId>");
+    return 2;
+  }
+  const client = o.client ?? (() => {
+    const src = meterSource(o.home);
+    return src ? musherClient({ ...src, fetchFn: o.fetchFn }) : null;
+  })();
+  if (!client) {
+    error("No seat on this machine. Run `sleds init` first.");
+    return 1;
+  }
+  const list = await client.list();
+  if (!list) {
+    error("Could not reach the SLEDS proxy.");
+    return 1;
+  }
+  const job = [...list.due, ...list.upcoming].find((j) => j.jobId === o.jobId);
+  if (!job) {
+    error(`Job ${o.jobId} is not a scheduled local job on this seat (sleds musher --status lists them).`);
+    return 1;
+  }
+  const cfg = readConfig(o.home);
+  const claude = findClaude(o.home, cfg.musher?.claudePath, o.which ?? defaultWhich);
+  if (!claude) {
+    error("`claude` not found. Install Claude Code, or `sleds musher --claude /path/to/claude`.");
+    return 1;
+  }
+  const out = await runJob({
+    job,
+    client,
+    fallbackSession: readSeatState(o.home).session,
+    host: o.host ?? hostname3(),
+    claudePath: claude,
+    permissionMode: cfg.musher?.permissionMode ?? DEFAULT_PERMISSION_MODE,
+    timeoutMs: (cfg.musher?.timeoutMinutes ?? DEFAULT_TIMEOUT_MINUTES) * 60000,
+    exec: o.execCapture,
+    log
+  });
+  if (out.kind === "skipped") {
+    error(`Not run: ${out.reason}`);
+    return 1;
+  }
+  log(out.summary);
+  if (out.ok) {
+    const a = await client.attestation(job.jobId);
+    if (a)
+      log(a.attestation.trailer);
+    else
+      log(`(attestation pending — sleds verify ${job.jobId})`);
+  }
+  return out.ok ? 0 : 1;
+};
+
 // src/commands/seatEvent.ts
+init_config();
+init_meter();
 var HOOK_STDIN_TIMEOUT_MS = 1000;
 var NOTIFICATION_TITLE = "sleds";
 var isObject7 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
@@ -2407,25 +3249,26 @@ var seatEvent = async (o) => {
     if (week && week.resetsAt > now)
       writeSeatState(o.home, { ...state, lastWallResetsAt: week.resetsAt });
   } catch {}
-  log(SEAT_WALL_LINE);
+  const line = seatWallLine(readConfig(o.home).org?.capabilities.upstreamKey !== false);
+  log(line);
   if ((o.platform ?? process.platform) === "darwin" && o.exec) {
     try {
-      o.exec("osascript", osascriptArgs(NOTIFICATION_TITLE, SEAT_WALL_LINE));
+      o.exec("osascript", osascriptArgs(NOTIFICATION_TITLE, line));
     } catch {}
   }
   return 0;
 };
 
 // src/commands/seatSync.ts
-import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync8, mkdirSync as mkdirSync8, readFileSync as readFileSync6, readdirSync as readdirSync2, writeFileSync as writeFileSync8 } from "node:fs";
+import { execFileSync as execFileSync2 } from "node:child_process";
+import { existsSync as existsSync10, mkdirSync as mkdirSync9, readFileSync as readFileSync8, readdirSync as readdirSync2, writeFileSync as writeFileSync9 } from "node:fs";
 import { platform } from "node:os";
-import { join as join10 } from "node:path";
+import { join as join9 } from "node:path";
 
 // src/cookieDb.ts
-import { copyFileSync, rmSync as rmSync2 } from "node:fs";
+import { copyFileSync, rmSync as rmSync4 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join9 } from "node:path";
+import { join as join8 } from "node:path";
 var QUERY = "SELECT name, hex(encrypted_value) AS ev FROM cookies WHERE host_key LIKE '%claude.ai%'";
 var isBun = () => typeof globalThis.Bun !== "undefined";
 async function queryRows(dbPath) {
@@ -2454,18 +3297,21 @@ function nodeSqlite() {
   return mod;
 }
 async function readCookieRows(dbPath) {
-  const copy = join9(tmpdir(), `sleds-cookies-${process.pid}-${Date.now()}.sqlite`);
+  const copy = join8(tmpdir(), `sleds-cookies-${process.pid}-${Date.now()}.sqlite`);
   copyFileSync(dbPath, copy);
   try {
     const rows = await queryRows(copy);
     return rows.map((r) => ({ name: r.name, encrypted_value: Buffer.from(r.ev, "hex") }));
   } finally {
     try {
-      rmSync2(copy, { force: true });
+      rmSync4(copy, { force: true });
     } catch {}
   }
 }
 
+// src/commands/seatSync.ts
+init_meter();
+
 // src/seatSync.ts
 import { createDecipheriv, pbkdf2Sync } from "node:crypto";
 var BROWSERS = {
@@ -2611,13 +3457,13 @@ function parseUsageResponse(raw, now = Date.now()) {
     const resetsAt = parseResetsAt(v.resets_at);
     if (usedPct === undefined || usedPct < 0 || resetsAt === undefined)
       continue;
-    const bar2 = { usedPct, resetsAt };
+    const bar = { usedPct, resetsAt };
     if (k === "five_hour")
-      out.fiveHour = bar2;
+      out.fiveHour = bar;
     else if (k === "seven_day")
-      out.sevenDay = bar2;
+      out.sevenDay = bar;
     else
-      out.models[k] = bar2;
+      out.models[k] = bar;
   }
   const hasAny = out.fiveHour || out.sevenDay || Object.keys(out.models).length > 0 || out.usedCreditsUsd !== undefined;
   return hasAny ? out : null;
@@ -2727,7 +3573,7 @@ function findFile(root, name) {
   const stack = [root];
   while (stack.length > 0) {
     const dir = stack.pop();
-    if (!dir || !existsSync8(dir))
+    if (!dir || !existsSync10(dir))
       continue;
     let entries;
     try {
@@ -2736,7 +3582,7 @@ function findFile(root, name) {
       continue;
     }
     for (const e of entries) {
-      const p = join10(dir, e.name);
+      const p = join9(dir, e.name);
       if (e.isDirectory())
         stack.push(p);
       else if (e.name === name)
@@ -2747,8 +3593,8 @@ function findFile(root, name) {
 }
 function findCookieDb(home, source) {
   const b = BROWSERS[source.browser];
-  const root = join10(home, APP_SUPPORT, b.appDir);
-  if (!existsSync8(root))
+  const root = join9(home, APP_SUPPORT, b.appDir);
+  if (!existsSync10(root))
     throw new Error(`no ${source.browser} data at ${root} (is it installed?)`);
   if (!b.profiled) {
     const db2 = findFile(root, "Cookies");
@@ -2756,15 +3602,15 @@ function findCookieDb(home, source) {
       throw new Error(`no cookie store under ${root}`);
     return db2;
   }
-  const localStatePath = join10(root, "Local State");
-  const localState = existsSync8(localStatePath) ? readFileSync6(localStatePath, "utf8") : null;
+  const localStatePath = join9(root, "Local State");
+  const localState = existsSync10(localStatePath) ? readFileSync8(localStatePath, "utf8") : null;
   const wanted = source.profile ?? "Default";
   const { dir, ambiguous } = resolveProfileDir(localState, wanted);
   if (ambiguous)
     throw new Error(`"${wanted}" names ${ambiguous.length} ${source.browser} profiles (${ambiguous.join(", ")}) — pass the directory or the account email instead`);
   if (!dir)
     throw new Error(`no ${source.browser} profile named "${wanted}" (check chrome://version)`);
-  const db = cookieDbCandidates(join10(root, dir)).find((p) => existsSync8(p));
+  const db = cookieDbCandidates(join9(root, dir)).find((p) => existsSync10(p));
   if (!db)
     throw new Error(`profile "${dir}" has no cookie store yet (open claude.ai in it once)`);
   return db;
@@ -2774,7 +3620,7 @@ async function readCookieRowsBun(home, source) {
 }
 function keychainKey(service) {
   try {
-    return execFileSync4("security", ["find-generic-password", "-w", "-s", service], {
+    return execFileSync2("security", ["find-generic-password", "-w", "-s", service], {
       encoding: "utf8"
     }).trim();
   } catch {
@@ -2786,7 +3632,7 @@ function decryptJar(rows, safeStoragePw) {
 }
 var curlUsage = (org, cookie) => {
   try {
-    const out = execFileSync4("curl", usageCurlArgs(org, cookie), {
+    const out = execFileSync2("curl", usageCurlArgs(org, cookie), {
       encoding: "utf8",
       maxBuffer: 8000000
     });
@@ -2795,8 +3641,8 @@ var curlUsage = (org, cookie) => {
     return { status: 0, body: "" };
   }
 };
-function fetchSeatUsage(jar, org, now, run) {
-  const { status, body } = run(org, cookieHeader(jar, org));
+function fetchSeatUsage(jar, org, now, run2) {
+  const { status, body } = run2(org, cookieHeader(jar, org));
   if (status !== 200)
     return { usage: null, status };
   try {
@@ -2807,7 +3653,7 @@ function fetchSeatUsage(jar, org, now, run) {
 }
 function launchAgentPlist(bun, script, home, source) {
   const label = launchLabel(source);
-  const log = join10(home, ".config", "sleds", `${label.slice("ai.sleds.".length)}.log`);
+  const log = join9(home, ".config", "sleds", `${label.slice("ai.sleds.".length)}.log`);
   const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
   const args = [bun, script, "seat-sync", ...sourceArgs(source)].map((a) => `    <string>${esc(a)}</string>`).join(`
 `);
@@ -2829,32 +3675,32 @@ ${args}
 `;
 }
 function plistPath2(home, source) {
-  return join10(home, "Library", "LaunchAgents", `${launchLabel(source)}.plist`);
+  return join9(home, "Library", "LaunchAgents", `${launchLabel(source)}.plist`);
 }
-function install2(home, argv, source, log) {
+function install(home, argv, source, log) {
   const bun = argv[0] ?? process.execPath;
   const script = argv[1] ?? "";
   if (!script) {
     log("cannot resolve the sleds script path to install the timer");
     return 1;
   }
-  const dir = join10(home, "Library", "LaunchAgents");
-  mkdirSync8(dir, { recursive: true });
+  const dir = join9(home, "Library", "LaunchAgents");
+  mkdirSync9(dir, { recursive: true });
   const path = plistPath2(home, source);
-  writeFileSync8(path, launchAgentPlist(bun, script, home, source), { mode: 384 });
+  writeFileSync9(path, launchAgentPlist(bun, script, home, source), { mode: 384 });
   try {
-    execFileSync4("launchctl", ["unload", path], { stdio: "ignore" });
+    execFileSync2("launchctl", ["unload", path], { stdio: "ignore" });
   } catch {}
-  execFileSync4("launchctl", ["load", "-w", path]);
+  execFileSync2("launchctl", ["load", "-w", path]);
   log(`seat-sync timer installed (every ${SYNC_INTERVAL_S / 60} min) → ${path}`);
   return 0;
 }
-function uninstall2(home, source, log) {
+function uninstall(home, source, log) {
   const path = plistPath2(home, source);
   try {
-    execFileSync4("launchctl", ["unload", "-w", path], { stdio: "ignore" });
+    execFileSync2("launchctl", ["unload", "-w", path], { stdio: "ignore" });
   } catch {}
-  log(existsSync8(path) ? `seat-sync timer removed (${path} can be deleted)` : "no seat-sync timer");
+  log(existsSync10(path) ? `seat-sync timer removed (${path} can be deleted)` : "no seat-sync timer");
   return 0;
 }
 var seatSync = async (o) => {
@@ -2867,9 +3713,9 @@ var seatSync = async (o) => {
   }
   const { source } = parsed;
   if (source.uninstall)
-    return uninstall2(o.home, source, log);
+    return uninstall(o.home, source, log);
   if (source.install)
-    return install2(o.home, [process.execPath, process.argv[1] ?? ""], source, log);
+    return install(o.home, [process.execPath, process.argv[1] ?? ""], source, log);
   if (platform() !== "darwin" && !o.readCookieRows) {
     log("seat-sync is macOS-only for now.");
     return 2;
@@ -2949,7 +3795,8 @@ async function postSeat(proxyUrl, token, body, fetchFn) {
 }
 
 // src/commands/specEvent.ts
-import { readFileSync as readFileSync7, statSync } from "node:fs";
+init_meter();
+import { readFileSync as readFileSync9, statSync } from "node:fs";
 import { basename, isAbsolute, relative } from "node:path";
 var HOOK_STDIN_TIMEOUT_MS2 = 1000;
 var ESTIMATE_TIMEOUT_MS = 4000;
@@ -3005,7 +3852,7 @@ function readFileOrNull(path) {
   try {
     if (statSync(path).size > 2000000)
       return null;
-    return readFileSync7(path, "utf8");
+    return readFileSync9(path, "utf8");
   } catch {
     return null;
   }
@@ -3048,7 +3895,9 @@ var specEvent = async (o) => {
 };
 
 // src/commands/status.ts
-import { existsSync as existsSync9 } from "node:fs";
+init_config();
+init_settings();
+import { existsSync as existsSync11 } from "node:fs";
 var checkHealth2 = async (url, fetchFn = fetch, timeoutMs = 1000) => {
   try {
     const res = await fetchFn(`${url}/healthz`, { signal: AbortSignal.timeout(timeoutMs) });
@@ -3107,6 +3956,10 @@ var formatStatus = (s) => {
   }
   if (s.email)
     lines.push(row2("Seat:", s.email));
+  if (s.org)
+    lines.push(row2("Org:", `${s.org.name} · ${s.org.plan} · ${s.org.upstream === "none" ? "no platform key (walls: hold or hand off)" : s.org.upstream === "own" ? "org key" : "shared key"}`));
+  if (s.wiring)
+    lines.push(row2("Wiring:", s.wiring === "seat-first" ? "seat-first — Claude Code on your seat; the proxy only after `sleds on`" : "proxy-always — every request through the proxy"));
   if (s.mode === "off") {
     lines.push(s.pointed ? "Claude Code is pointed at the proxy by settings.json (set by `sleds init`)." : "Claude Code is on your seat. Hit a limit? `sleds on --until-reset +5h`.");
   }
@@ -3116,7 +3969,7 @@ var status = async (o) => {
   const log = o.log ?? console.log;
   const nowMs = (o.now ?? Date.now)();
   const cfg = readConfig(o.home);
-  const settings = existsSync9(settingsPath(o.home)) ? readSettings(o.home) : {};
+  const settings = existsSync11(settingsPath(o.home)) ? readSettings(o.home) : {};
   const inSettings = readProxy(settings);
   const proxyUrl = inSettings?.url ?? cfg.proxyUrl;
   const token = inSettings?.token ?? cfg.token;
@@ -3138,6 +3991,14 @@ var status = async (o) => {
     info.tokenMasked = maskToken(token);
   if (cfg.email)
     info.email = cfg.email;
+  if (cfg.wiring)
+    info.wiring = cfg.wiring;
+  if (cfg.org)
+    info.org = {
+      name: cfg.org.name,
+      plan: cfg.org.plan,
+      upstream: cfg.org.capabilities.upstreamSource
+    };
   if (cfg.reason)
     info.reason = cfg.reason;
   if (o.tz)
@@ -3162,15 +4023,19 @@ var status = async (o) => {
 };
 
 // src/commands/statusline.ts
+init_meter();
 var statusline = async (o) => {
   const log = o.log ?? console.log;
   const now = (o.now ?? Date.now)();
   const input = o.stdin ?? await readStdin(STDIN_TIMEOUT_MS);
   const window = seatWindowFromStdin(input, now);
+  const session = seatSessionFromStdin(input, now);
   let posts = [];
   try {
     if (window)
-      posts = rememberSeat(o, window, now);
+      posts = rememberSeat(o, window, session, now);
+    else if (session)
+      writeSeatState(o.home, { ...readSeatState(o.home), session });
   } catch {}
   const seatFragment = formatSeatFragment(window);
   let line;
@@ -3189,9 +4054,9 @@ var statusline = async (o) => {
   await Promise.allSettled(posts);
   return 0;
 };
-var rememberSeat = (o, window, now) => {
+var rememberSeat = (o, window, session, now) => {
   const prior = readSeatState(o.home);
-  let state = { ...prior, window };
+  let state = { ...prior, window, ...session ? { session } : {} };
   const src = meterSource(o.home);
   const posts = [];
   if (src) {
@@ -3214,11 +4079,18 @@ var rememberSeat = (o, window, now) => {
 };
 
 // src/commands/uninstall.ts
-import { existsSync as existsSync10, rmSync as rmSync3 } from "node:fs";
-var uninstall3 = (o) => {
+init_config();
+init_meter();
+import { spawnSync as spawnSync3 } from "node:child_process";
+import { existsSync as existsSync12, rmSync as rmSync5 } from "node:fs";
+init_settings();
+var defaultUnload = (plist) => {
+  spawnSync3("launchctl", ["unload", plist], { stdio: "ignore" });
+};
+var uninstall2 = (o) => {
   const log = o.log ?? console.log;
   const removed = [];
-  if (existsSync10(settingsPath(o.home))) {
+  if (existsSync12(settingsPath(o.home))) {
     let settings = readSettings(o.home);
     let changed = false;
     if (hasEitherKey(settings)) {
@@ -3250,16 +4122,22 @@ var uninstall3 = (o) => {
       writeSettings(o.home, settings);
   }
   for (const file of [meterCachePath(o.home), seatStatePath(o.home)]) {
-    if (existsSync10(file)) {
-      rmSync3(file, { force: true });
+    if (existsSync12(file)) {
+      rmSync5(file, { force: true });
       removed.push(file);
     }
   }
   const skill = skillDir(o.home);
-  if (existsSync10(skill)) {
-    rmSync3(skill, { recursive: true, force: true });
+  if (existsSync12(skill)) {
+    rmSync5(skill, { recursive: true, force: true });
     removed.push(skill);
   }
+  const plist = musherPlistPath(o.home);
+  if (existsSync12(plist)) {
+    (o.unloadAgent ?? defaultUnload)(plist);
+    rmSync5(plist, { force: true });
+    removed.push(`launchd agent ${MUSHER_LABEL}`);
+  }
   if (removed.length === 0) {
     log("Nothing to remove; SLEDS was not installed.");
   } else {
@@ -3277,10 +4155,58 @@ var hasEitherKey = (settings) => {
   return BASE_URL_KEY in env || AUTH_TOKEN_KEY in env;
 };
 
+// src/commands/verify.ts
+init_meter();
+var jobIdFromTarget = (target) => {
+  const t = target.trim();
+  const m = /SLEDS-Attest:.*\bjob=([^\s]+)/.exec(t);
+  if (m?.[1])
+    return m[1];
+  return /^[A-Za-z0-9_-]{3,64}$/.test(t) ? t : null;
+};
+var verify = async (o) => {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  const jobId = o.target ? jobIdFromTarget(o.target) : null;
+  if (!jobId) {
+    error("usage: sleds verify <jobId>   (or paste the SLEDS-Attest line)");
+    return 2;
+  }
+  const client = o.client ?? (() => {
+    const src = meterSource(o.home);
+    return src ? musherClient({ ...src, fetchFn: o.fetchFn }) : null;
+  })();
+  if (!client) {
+    error("No seat on this machine. Run `sleds init` first.");
+    return 1;
+  }
+  const a = await client.attestation(jobId);
+  if (!a) {
+    error(`No attestation for ${jobId} (not delivered, not signed, not your org, or the proxy is down).`);
+    return 1;
+  }
+  if (!a.publicKey) {
+    error(`Attestation found but its key ${a.attestation.keyId} is not on file — cannot verify.`);
+    return 1;
+  }
+  const ok = verifyAttestation(a.attestation.payload, a.attestation.sig, a.publicKey);
+  const f = parsePayload(a.attestation.payload);
+  log(`${ok ? "VERIFIED" : "INVALID "}  job ${jobId}`);
+  log(`  model     ${f.model ?? a.model ?? "unknown"}`);
+  log(`  engine    ${f.engine ?? a.engine}${f.seat ? ` · seat ${f.seat}` : ""}`);
+  log(`  finished  ${f.finished ?? "?"} · signed ${formatLocal(a.attestation.signedAt)} · key ${a.attestation.keyId}`);
+  if (a.outputs.length)
+    log(`  outputs   ${a.outputs.join(" ")}`);
+  log(`  ${a.attestation.trailer}`);
+  if (!ok)
+    log("  The signature does not match the payload under the org's public key.");
+  return ok ? 0 : 1;
+};
+
 // src/schedule.ts
-import { spawnSync } from "node:child_process";
+import { spawnSync as spawnSync4 } from "node:child_process";
 var defaultExec = (cmd, args) => {
-  const r = spawnSync(cmd, [...args], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
+  const r = spawnSync4(cmd, [...args], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
   if (r.error)
     return { ok: false, stderr: r.error.message };
   return { ok: r.status === 0, stderr: r.stderr ?? "" };
@@ -3294,21 +4220,33 @@ commands:
               --token <sled_\u2026>       seat token (else SLEDS_TOKEN, ~/.sleds-token, or prompt)
               --url <proxy-url>      proxy base URL (else SLEDS_PROXY_URL, default ${DEFAULT_PROXY_URL})
               --no-probe             skip the /healthz check of the proxy URL
+              --seat-first           keep Claude Code on your seat; the proxy only at a wall (default for seat plans)
+              --proxy-always         every request through the proxy on the org key (default for API-plan orgs)
               --non-interactive      never prompt; exit 2 if no token is available
-              --signup               no org? create an individual seat: your email + your own
-                                     Anthropic API key (validated, stored encrypted, the only key it spends)
+              --signup               no org? create one: (1) just you \u2014 your email + your own Anthropic
+                                     API key (validated, stored encrypted, the only key it spends), or
+                                     (2) your team \u2014 work email + team name, platform key optional
+              --team "<name>"        with --signup: create the team org (you become its owner)
+              --email <you@work.com> with --signup: skip the email prompt
   on          Hit a limit on your seat? Switch Claude Code to the org key through the proxy.
               --until-reset <when>   revert at this time: +5h, +90m, or an ISO timestamp
               --reason "<text>"      note shown by \`sleds status\`
               --no-schedule          record the deadline but do not install a launchd/systemd revert
+  defer       Hit a limit? Resume this session on this Mac at the reset \u2014 runs itself on your
+              seat, no key needed (the musher). Uses the last session the status line saw.
+              --at +2h | <ISO>       start then instead of the binding reset
+              --session <id> --cwd <dir> --model <id>   override what was remembered
+  musher      The agent that runs deferred jobs here: --install / --uninstall / --status,
+              --claude <path>, --mode <permission-mode> (default acceptEdits), --timeout <min>.
+  run <jobId> Run one deferred job on this Mac now (the manual musher).
+  verify <jobId | SLEDS-Attest line>   Check a finished job's attestation: which model built it,
+              signed by the org's key, verified locally.
   off         Switch Claude Code back to your seat. Restores whatever \`on\` replaced.
   uninstall   Remove the proxy settings, skill and status line. Keeps ~/.sleds-token.
   status      Show the switch state, deadline, proxy health and wall mode.
   doctor      Check the whole install: which seat this shell is, Claude settings, proxy, hooks,
-              Node version, stale links, the SwiftBar plugin, the seat-sync timer.
+              Node version, stale links, the seat's last quota report.
   meter       Show the pipeline: built today, queued with its band, delivered overnight.
-  bar         Print the menu-bar meter in SwiftBar format; --install links it into SwiftBar
-              (--home/--claude-config pick the seat it tracks; --name <x> adds a second item).
   mcp         Run the MCP server on stdio: tools usage, estimate, overnight, jobs.
               Register with \`claude mcp add sleds -- sleds mcp\` (Cowork sees the same server).
   seat-sync   Read the seat's subscription usage (weekly/5h limits, per-model, credits) from a
@@ -3359,17 +4297,24 @@ var stringFlag = (flags, name) => {
   const v = flags[name];
   return typeof v === "string" ? v : undefined;
 };
+var hookStdin = async () => {
+  if (process.stdin.isTTY)
+    return;
+  const { readStdin: readStdin3 } = await Promise.resolve().then(() => (init_seat(), exports_seat));
+  const text = await readStdin3(300);
+  return text.trim() ? text : undefined;
+};
 var sledsArgv = () => {
   const script = process.argv[1];
   return script ? [process.execPath, script] : [process.execPath];
 };
-var shellQuote2 = (s) => /^[\w./-]+$/.test(s) ? s : `'${s.replace(/'/g, "'\\''")}'`;
-var statusLineCommand = (argv) => [...argv, "statusline"].map(shellQuote2).join(" ");
-var seatEventCommand = (argv) => [...argv, "seat-event"].map(shellQuote2).join(" ");
-var specEventCommand = (argv) => [...argv, "spec-event"].map(shellQuote2).join(" ");
+var shellQuote = (s) => /^[\w./-]+$/.test(s) ? s : `'${s.replace(/'/g, "'\\''")}'`;
+var statusLineCommand = (argv) => [...argv, "statusline"].map(shellQuote).join(" ");
+var seatEventCommand = (argv) => [...argv, "seat-event"].map(shellQuote).join(" ");
+var specEventCommand = (argv) => [...argv, "spec-event"].map(shellQuote).join(" ");
 var main = async (argv) => {
   const { cmd, flags } = parseArgs(argv);
-  const home = homedir3();
+  const home = homedir();
   const scheduler = {
     platform: platform2(),
     home,
@@ -3384,7 +4329,24 @@ var main = async (argv) => {
         url: stringFlag(flags, "url"),
         nonInteractive: flags["non-interactive"] === true,
         signup: flags.signup === true,
+        team: typeof flags.team === "string" ? flags.team : undefined,
+        email: typeof flags.email === "string" ? flags.email : undefined,
         noProbe: flags["no-probe"] === true,
+        proxyAlways: flags["proxy-always"] === true,
+        seatFirst: flags["seat-first"] === true,
+        installMusher: () => {
+          if (platform2() !== "darwin")
+            return null;
+          const lines = [];
+          const code = musherInstall({
+            home,
+            argv: [],
+            sledsArgv: sledsArgv(),
+            log: (l) => lines.push(l),
+            error: (l) => lines.push(l)
+          });
+          return code === 0 ? lines[0] ?? "installed the musher agent" : `musher not installed: ${lines.join(" ")}`;
+        },
         prompt: promptStdin,
         statusLineCommand: statusLineCommand(sledsArgv()),
         seatEventCommand: seatEventCommand(sledsArgv()),
@@ -3411,16 +4373,22 @@ var main = async (argv) => {
       });
     case "off":
       return off({ home, scheduler });
+    case "defer":
+      return defer({ home, argv: process.argv.slice(3), stdin: await hookStdin() });
+    case "musher":
+      return musher({ home, argv: process.argv.slice(3), sledsArgv: sledsArgv() });
+    case "run":
+      return run({ home, jobId: process.argv[3] });
+    case "verify":
+      return verify({ home, target: process.argv.slice(3).join(" ") || undefined });
     case "uninstall":
-      return uninstall3({ home });
+      return uninstall2({ home });
     case "doctor":
       return doctor({ home });
     case "status":
       return status({ home });
     case "meter":
       return meter({ home });
-    case "bar":
-      return bar({ home, argv: process.argv.slice(3) });
     case "mcp":
       return mcp({ home });
     case "seat-sync":
@@ -3435,7 +4403,7 @@ var main = async (argv) => {
     case "version":
     case "--version":
     case "-v":
-      console.log(`sleds ${"0.1.7"}`);
+      console.log("sleds 0.1.14");
       return 0;
     default:
       console.error(`unknown command: ${cmd}