@super-one/cli 0.55.2-alpha → 0.56.0-alpha

package/lib/cli.mjs

@@ -164,10 +164,105 @@ var init_host_actions = __esm({
 });
 
 // ../../packages/shared/src/environment/host-action-superone-descriptors.ts
-var HOST_ACTION_SUPERONE_TOOL_DESCRIPTORS;
+var deviceDescriptionProperty, deviceConditionSchema, deviceActionSchema, HOST_ACTION_SUPERONE_TOOL_DESCRIPTORS;
 var init_host_action_superone_descriptors = __esm({
   "../../packages/shared/src/environment/host-action-superone-descriptors.ts"() {
     "use strict";
+    deviceDescriptionProperty = {
+      type: "string",
+      minLength: 1,
+      maxLength: 160,
+      description: "A short human-friendly explanation of what this step accomplishes, phrased for the user watching (e.g. 'Open the profile tab', 'Check the order total'). Shown in the UI in place of refs and coordinates. Write it in the conversation's language."
+    };
+    deviceConditionSchema = {
+      type: "object",
+      properties: {
+        kind: { type: "string", enum: ["exists", "notExists", "textEquals", "textContains"] },
+        ref: {
+          description: "Only valid within the snapshot it came from; prefer label or identifier when waiting.",
+          type: "string"
+        },
+        label: { description: "Visible name of the element.", type: "string" },
+        identifier: {
+          description: "Developer-assigned id. Survives copy changes and translation \u2014 the most durable target.",
+          type: "string"
+        },
+        text: {
+          description: "The string textEquals/textContains compares against. Required by those two kinds, and NOT a way to name an element \u2014 use label for that.",
+          type: "string",
+          minLength: 1
+        }
+      },
+      required: ["kind"],
+      additionalProperties: false
+    };
+    deviceActionSchema = {
+      type: "object",
+      properties: {
+        type: {
+          type: "string",
+          enum: ["tap", "doubleTap", "longPress", "swipe", "pinch", "press", "type", "key", "rotate", "keyboard"]
+        },
+        ref: { description: 'Element ref from the snapshot, e.g. "@e12". Preferred over coordinates.', type: "string" },
+        x: {
+          description: "Horizontal position as a fraction of the screen (0-1). Only when no ref fits.",
+          type: "number",
+          minimum: 0,
+          maximum: 1
+        },
+        y: {
+          description: "Vertical position as a fraction of the screen (0-1).",
+          type: "number",
+          minimum: 0,
+          maximum: 1
+        },
+        direction: {
+          description: 'swipe: which way the finger travels. Content moves the opposite way, so "up" scrolls down a list.',
+          type: "string",
+          enum: ["up", "down", "left", "right"]
+        },
+        distance: {
+          description: "swipe: travel as a fraction of the screen. Default 0.6.",
+          type: "number",
+          minimum: 0.05,
+          maximum: 1
+        },
+        toX: {
+          description: "swipe: explicit destination instead of direction.",
+          type: "number",
+          minimum: 0,
+          maximum: 1
+        },
+        toY: { type: "number", minimum: 0, maximum: 1 },
+        scale: {
+          description: "pinch: final separation factor. Below 1 pinches in (zoom out), above 1 spreads.",
+          type: "number",
+          minimum: 0.1,
+          maximum: 5
+        },
+        durationMs: {
+          description: "How long the gesture takes. Short swipes flick and coast; long ones drag and stop.",
+          type: "integer",
+          minimum: 16,
+          maximum: 1e4
+        },
+        text: {
+          description: "type: text to enter. Anything the simulated keyboard cannot spell (Chinese, emoji) is pasted automatically.",
+          type: "string"
+        },
+        button: { type: "string", enum: ["home", "lock", "side", "volume-up", "volume-down"] },
+        orientation: {
+          type: "string",
+          enum: ["portrait", "landscape-left", "portrait-upside-down", "landscape-right"]
+        },
+        connected: {
+          description: "keyboard: attach or detach the hardware keyboard. Detach it to make the on-screen keyboard appear.",
+          type: "boolean"
+        }
+      },
+      required: ["type"],
+      additionalProperties: false
+    };
     HOST_ACTION_SUPERONE_TOOL_DESCRIPTORS = [
       {
         "name": "session_collab_list_agents",
@@ -3620,6 +3715,75 @@ If the tool returns an error containing "user_locked", the user has manually nam
           ],
           "additionalProperties": false
         }
+      },
+      {
+        "name": "device_snapshot",
+        "description": "Capture the screen and return a stateId later calls must quote. mode=semantic (default) returns the accessibility tree with @eN refs, labels, identifiers and bounds \u2014 prefer it: refs survive animation and rotation, coordinates do not. mode=visual saves a PNG and returns image.path (not pixels); Read it only if you need to look. mode=fused returns both. Waits for animation to stop first; settled=false means it was still moving, so treat geometry as approximate. A screen with no accessibility tree falls back to text read from pixels; the reply says source=ocr. Re-snapshot after anything that changes the screen \u2014 refs are positional and a stale stateId is rejected by device_act.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "description": deviceDescriptionProperty,
+            "mode": { "description": "Default semantic", "type": "string", "enum": ["semantic", "visual", "fused"] },
+            "maxNodes": {
+              "description": "Ceiling on tree size. Default 500; truncated=true means the screen has more.",
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 2e3
+            }
+          },
+          "required": ["description"],
+          "additionalProperties": false
+        }
+      },
+      {
+        "name": "device_query",
+        "description": "Search or inspect an existing snapshot without re-capturing the device. Use this instead of taking another snapshot when you only need to find an element or read its details \u2014 it costs no device round trip and cannot race an animation. op=search matches text against labels, values and identifiers. op=inspect returns one element and its children.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "description": deviceDescriptionProperty,
+            "stateId": { "type": "string", "description": "From a prior device_snapshot." },
+            "op": { "type": "string", "enum": ["search", "inspect"] },
+            "text": { "description": "For search.", "type": "string" },
+            "ref": { "description": 'For inspect, e.g. "@e12".', "type": "string" }
+          },
+          "required": ["description", "stateId", "op"],
+          "additionalProperties": false
+        }
+      },
+      {
+        "name": "device_act",
+        "description": "Run 1-10 touch actions against a snapshot, then re-observe to judge if they worked. Actions: tap, doubleTap, longPress, swipe(direction|toX/toY), pinch(scale), press(ref), type, key, rotate, keyboard. Prefer press for a ref-backed control; it goes through accessibility, immune to animation, rotation and scale (not on a source=ocr snapshot \u2014 tap there). Aim touch actions at refs too; raw x/y is a last resort. The whole batch, stale stateId included, is validated up front. rotate ends the snapshot it is in: put it last, then re-snapshot \u2014 a later ref or coordinate is refused. Returns worked|didnt|unknown; unknown means input landed but nothing visibly changed. Pass expect to define success.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "description": deviceDescriptionProperty,
+            "stateId": { "type": "string" },
+            "actions": { "minItems": 1, "maxItems": 10, "type": "array", "items": deviceActionSchema },
+            "expect": { "description": "Postcondition checked after the actions run.", ...deviceConditionSchema }
+          },
+          "required": ["description", "stateId", "actions"],
+          "additionalProperties": false
+        }
+      },
+      {
+        "name": "device_wait_for",
+        "description": "Wait until the screen satisfies a condition. Use this instead of snapshotting in a loop. Distinguishes preexisting (already true when asked) from verified (became true while waiting), so you can tell a real transition from a check that was never going to fail. Returns a fresh settled stateId and matching tree when successful. Target the element by label or identifier, not by ref: refs belong to one snapshot, and what you are waiting for usually does not exist yet. Every condition must name an element that way \u2014 text only says what to compare, it never selects.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "description": deviceDescriptionProperty,
+            "condition": deviceConditionSchema,
+            "timeoutMs": {
+              "description": "Default 5000",
+              "type": "integer",
+              "minimum": 100,
+              "maximum": 6e4
+            }
+          },
+          "required": ["description", "condition"],
+          "additionalProperties": false
+        }
       }
     ];
   }
@@ -3693,6 +3857,9 @@ var init_host_action_browser_catalog = __esm({
       "widget_list_templates",
       "miniapp_list",
       "automation_list",
+      "device_snapshot",
+      "device_query",
+      "device_wait_for",
       // session_collab_* are node-local (not HA); list_agents stays "safe" if ever reclassified
       "computer_apps",
       "computer_snapshot",
@@ -20267,6 +20434,45 @@ function readString3(value) {
 function readBoolean2(value) {
   return typeof value === "boolean" ? value : null;
 }
+function parseAccountAuthMode(value) {
+  switch (value) {
+    case "apiKey":
+    case "chatgpt":
+    case "chatgptAuthTokens":
+    case "agentIdentity":
+    case "personalAccessToken":
+    case "amazonBedrock":
+    case "bedrockApiKey":
+      return value;
+    default:
+      return null;
+  }
+}
+function parseAccountStatus(raw) {
+  const account = asRecord3(raw.account);
+  return {
+    signedIn: account !== null,
+    authMode: parseAccountAuthMode(account?.type),
+    email: readString3(account?.email),
+    planType: readString3(account?.planType),
+    requiresOpenaiAuth: readBoolean2(raw.requiresOpenaiAuth) ?? false
+  };
+}
+function parseAccountLoginStart(raw) {
+  const loginId = readString3(raw.loginId);
+  const type = readString3(raw.type);
+  if (!loginId || type !== "chatgpt" && type !== "chatgptDeviceCode") {
+    throw new Error("Codex returned an invalid account login response");
+  }
+  const result = { type, loginId };
+  const authUrl = readString3(raw.authUrl);
+  const verificationUrl = readString3(raw.verificationUrl);
+  const userCode = readString3(raw.userCode);
+  if (authUrl) result.authUrl = authUrl;
+  if (verificationUrl) result.verificationUrl = verificationUrl;
+  if (userCode) result.userCode = userCode;
+  return result;
+}
 function readFiniteNumber(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : null;
 }
@@ -20367,6 +20573,37 @@ async function readRateLimits(client3) {
     throw safePublicError("account/rateLimits/read failed", err);
   }
 }
+async function readAccountStatus(client3, refreshToken = false) {
+  try {
+    return parseAccountStatus(await client3.request("account/read", { refreshToken }));
+  } catch (err) {
+    throw safePublicError("account/read failed", err);
+  }
+}
+async function startAccountLogin(client3, type) {
+  try {
+    return parseAccountLoginStart(await client3.request(
+      "account/login/start",
+      type === "chatgpt" ? { type, useHostedLoginSuccessPage: true, appBrand: "chatgpt" } : { type }
+    ));
+  } catch (err) {
+    throw safePublicError("account/login/start failed", err);
+  }
+}
+async function cancelAccountLogin(client3, loginId) {
+  try {
+    await client3.request("account/login/cancel", { loginId });
+  } catch (err) {
+    throw safePublicError("account/login/cancel failed", err);
+  }
+}
+async function logoutAccount(client3) {
+  try {
+    await client3.request("account/logout");
+  } catch (err) {
+    throw safePublicError("account/logout failed", err);
+  }
+}
 async function readAccountUsage(client3) {
   try {
     const result = await client3.request("account/usage/read");
@@ -20618,7 +20855,7 @@ function isStaticHostOwnedSuperoneToolQualified(qualifiedName) {
   const bare = qualifiedName.slice(MCP_SUPERONE_TOOL_PREFIX.length);
   return isStaticHostOwnedSuperoneBareName(bare);
 }
-var MCP_SUPERONE_TOOL_PREFIX, BROWSER_PRIMITIVE_TOOL_NAMES, BROWSER_ACTION_TOOL_NAMES, BROWSER_LEGACY_TOOL_NAMES, BROWSER_COMPACT_TOOL_NAMES, BROWSER_TOOL_NAMES, BUILT_IN_SUPERONE_TOOL_NAMES, MOBILE_SHARE_FILE_TOOL_NAME, MINIAPP_LIST_BARE_NAME, MINIAPP_CALL_BARE_NAME, STATIC_HOST_OWNED_SUPERONE_QUALIFIED_TOOL_NAMES;
+var MCP_SUPERONE_TOOL_PREFIX, BROWSER_PRIMITIVE_TOOL_NAMES, BROWSER_ACTION_TOOL_NAMES, BROWSER_LEGACY_TOOL_NAMES, BROWSER_COMPACT_TOOL_NAMES, BROWSER_TOOL_NAMES, DEVICE_AGENT_TOOL_NAMES, BUILT_IN_SUPERONE_TOOL_NAMES, MOBILE_SHARE_FILE_TOOL_NAME, MINIAPP_LIST_BARE_NAME, MINIAPP_CALL_BARE_NAME, STATIC_HOST_OWNED_SUPERONE_QUALIFIED_TOOL_NAMES;
 var init_superone_host_owned_tools = __esm({
   "../../packages/shared/src/superone-host-owned-tools.ts"() {
     "use strict";
@@ -20679,6 +20916,12 @@ var init_superone_host_owned_tools = __esm({
         (name) => !BROWSER_LEGACY_TOOL_NAMES.includes(name)
       )
     ];
+    DEVICE_AGENT_TOOL_NAMES = [
+      "device_snapshot",
+      "device_query",
+      "device_act",
+      "device_wait_for"
+    ];
     BUILT_IN_SUPERONE_TOOL_NAMES = [
       "read_manual",
       "miniapp_dev_setup",
@@ -20709,7 +20952,8 @@ var init_superone_host_owned_tools = __esm({
       "automation_list",
       "automation_apply",
       "automation_delete",
-      ...BROWSER_TOOL_NAMES
+      ...BROWSER_TOOL_NAMES,
+      ...DEVICE_AGENT_TOOL_NAMES
     ];
     MOBILE_SHARE_FILE_TOOL_NAME = "mobile_share_file";
     MINIAPP_LIST_BARE_NAME = "miniapp_list";
@@ -21182,6 +21426,7 @@ function createClaudeAgentEventMapper(options) {
             outputStyle: system.output_style,
             availableOutputStyles: system.available_output_styles,
             plugins: system.plugins,
+            ...system.effort !== void 0 ? { appliedEffort: system.effort } : {},
             fastModeState: system.fast_mode_state,
             fastModeDisabledReason: system.fast_mode_disabled_reason
           }
@@ -21716,6 +21961,94 @@ var init_root_permission_guard = __esm({
   }
 });
 
+// ../../packages/shared/src/ask-user-question.ts
+function asQuestionPreviewFormat(value) {
+  const v2 = value?.trim();
+  return v2 === "markdown" || v2 === "html" ? v2 : void 0;
+}
+function buildAnsweredQuestionInput(params) {
+  const { questions, answers, previewFormat } = params;
+  const annotations = { ...params.annotations };
+  for (const q of questions) {
+    const answer = answers[q.question];
+    if (!answer) continue;
+    const lastLabel = q.multiSelect ? answer.split(", ").pop() : answer;
+    const selected = q.options?.find((o) => o.label === lastLabel);
+    if (selected?.preview) {
+      annotations[q.question] = { ...annotations[q.question], preview: selected.preview };
+    }
+  }
+  return {
+    questions,
+    answers,
+    ...Object.keys(annotations).length > 0 && { annotations },
+    ...previewFormat ? { previewFormat } : {}
+  };
+}
+function answeredQuestionDelta(messageId, toolUseId, input) {
+  return {
+    type: "content_delta",
+    messageId,
+    delta: {
+      type: "tool_use",
+      toolName: "AskUserQuestion",
+      toolUseId,
+      input: JSON.stringify(input)
+    }
+  };
+}
+var init_ask_user_question = __esm({
+  "../../packages/shared/src/ask-user-question.ts"() {
+    "use strict";
+  }
+});
+
+// ../../packages/claude/src/ask-user-question-bridge.ts
+function asRecord5(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+async function resolveAskUserQuestion(params) {
+  const { onQuestion, interactionId, toolName, toolUseId, input } = params;
+  if (!onQuestion) {
+    return { behavior: "deny", message: "Question denied by SuperOne node (no question handler)" };
+  }
+  const previewFormat = asQuestionPreviewFormat(params.previewFormat);
+  const rawInput = asRecord5(input);
+  const baseInput = rawInput ? { ...rawInput, ...previewFormat ? { previewFormat } : {} } : null;
+  const answer = await onQuestion({
+    interactionId,
+    kind: "question",
+    toolName,
+    toolUseId,
+    input: baseInput ?? void 0
+  });
+  const record2 = asRecord5(answer);
+  const answers = record2 && "answers" in record2 ? record2.answers : answer;
+  const answerMap = asRecord5(answers);
+  const updatedInput = {
+    ...baseInput,
+    ...buildAnsweredQuestionInput({
+      questions: Array.isArray(baseInput?.questions) ? baseInput.questions : [],
+      answers: answerMap ?? {},
+      annotations: record2?.annotations,
+      previewFormat
+    }),
+    // Preserve the host's answer shape verbatim — it is not always a record.
+    answers
+  };
+  const messageId = params.getMessageId?.();
+  if (messageId && toolUseId && params.emitAgentEvent) {
+    params.emitAgentEvent(answeredQuestionDelta(messageId, toolUseId, updatedInput));
+  }
+  return { behavior: "allow", updatedInput };
+}
+var init_ask_user_question_bridge = __esm({
+  "../../packages/claude/src/ask-user-question-bridge.ts"() {
+    "use strict";
+    init_ask_user_question();
+  }
+});
+
 // ../../packages/claude/src/run-sdk-turn.ts
 import { query as sdkQuery } from "@anthropic-ai/claude-agent-sdk";
 var init_run_sdk_turn = __esm({
@@ -21727,6 +22060,8 @@ var init_run_sdk_turn = __esm({
     init_agent_event_mapper2();
     init_resolve_sdk_binary();
     init_root_permission_guard();
+    init_ask_user_question_bridge();
+    init_ask_user_question();
   }
 });
 
@@ -21800,7 +22135,7 @@ var init_message_bridge = __esm({
 import { existsSync as existsSync18 } from "node:fs";
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { query as sdkQuery2 } from "@anthropic-ai/claude-agent-sdk";
-function buildLiveOptions(opts, onPermission, onQuestion, onPlan, signal, timing) {
+function buildLiveOptions(opts, onPermission, onQuestion, onPlan, signal, timing, turn) {
   const abortController = new AbortController();
   if (signal.aborted) abortController.abort();
   else signal.addEventListener("abort", () => abortController.abort(), { once: true });
@@ -21813,26 +22148,16 @@ function buildLiveOptions(opts, onPermission, onQuestion, onPlan, signal, timing
     }
     const interactionId = typeof toolOpts.requestId === "string" && toolOpts.requestId || typeof toolOpts.toolUseID === "string" && toolOpts.toolUseID || `interaction_${Date.now()}`;
     if (toolName === "AskUserQuestion") {
-      if (!onQuestion) {
-        return { behavior: "deny", message: "Question denied by SuperOne node (no question handler)" };
-      }
-      const answer = await onQuestion({
+      return resolveAskUserQuestion({
+        onQuestion,
         interactionId,
-        kind: "question",
         toolName,
         toolUseId: typeof toolOpts.toolUseID === "string" ? toolOpts.toolUseID : void 0,
-        input: input && typeof input === "object" ? input : void 0
+        input,
+        previewFormat: opts.askUserQuestionPreviewFormat,
+        emitAgentEvent: turn.emitAgentEvent,
+        getMessageId: turn.getMessageId
       });
-      const record2 = answer && typeof answer === "object" ? answer : null;
-      const answers = record2 && "answers" in record2 ? record2.answers : answer;
-      return {
-        behavior: "allow",
-        updatedInput: {
-          ...input && typeof input === "object" ? input : {},
-          answers,
-          ...record2 && record2.annotations !== void 0 ? { annotations: record2.annotations } : {}
-        }
-      };
     }
     if (toolName === "ExitPlanMode") {
       if (!onPlan) {
@@ -21900,6 +22225,7 @@ function buildLiveOptions(opts, onPermission, onQuestion, onPlan, signal, timing
     ...sandbox ? { sandbox } : {},
     ...opts.additionalDirectories && opts.additionalDirectories.length > 0 ? { additionalDirectories: opts.additionalDirectories } : {},
     ...opts.enabledSkills && opts.enabledSkills.length > 0 ? { skills: opts.enabledSkills } : {},
+    ...asQuestionPreviewFormat(opts.askUserQuestionPreviewFormat) ? { toolConfig: { askUserQuestion: { previewFormat: asQuestionPreviewFormat(opts.askUserQuestionPreviewFormat) } } } : {},
     systemPrompt: {
       type: "preset",
       preset: "claude_code",
@@ -21936,6 +22262,8 @@ var init_claude_live_session = __esm({
     init_map_sdk_message();
     init_resolve_sdk_binary();
     init_root_permission_guard();
+    init_ask_user_question_bridge();
+    init_ask_user_question();
     init_superone_system_prompt();
     init_superone_host_owned_tools();
     ClaudeLiveSession = class _ClaudeLiveSession {
@@ -21959,7 +22287,11 @@ var init_claude_live_session = __esm({
             return this.planHandler(req);
           },
           this.processAbort.signal,
-          this.timing
+          this.timing,
+          {
+            emitAgentEvent: (e) => this.active?.input.onAgentEvent?.(e),
+            getMessageId: () => this.active?.messageId
+          }
         );
         const q = queryFn({ prompt: this.bridge, options });
         this.iterationDone = this.iterate(q);
@@ -22481,7 +22813,7 @@ var init_content_delta = __esm({
 });
 
 // ../../packages/shared/src/node-session-event-map.ts
-function asRecord5(value) {
+function asRecord6(value) {
   if (value && typeof value === "object" && !Array.isArray(value)) {
     return value;
   }
@@ -22513,7 +22845,7 @@ function stamp(event, ctx, sequence) {
 }
 function mapQuestionRequest(payload, fallbackId) {
   const interactionId = asString2(payload.interactionId) ?? asString2(payload.requestId) ?? fallbackId;
-  const input = asRecord5(payload.input);
+  const input = asRecord6(payload.input);
   const rawQuestions = Array.isArray(payload.questions) ? payload.questions : Array.isArray(input.questions) ? input.questions : [];
   const questions = [];
   for (const q of rawQuestions) {
@@ -22552,7 +22884,7 @@ function mapQuestionRequest(payload, fallbackId) {
 }
 function mapPlanRequest(payload, fallbackId) {
   const interactionId = asString2(payload.interactionId) ?? asString2(payload.requestId) ?? fallbackId;
-  const input = asRecord5(payload.input);
+  const input = asRecord6(payload.input);
   let planContent = asString2(payload.plan) ?? asString2(payload.planContent) ?? asString2(input.plan) ?? asString2(input.planContent) ?? "";
   if (!planContent && input.plan && typeof input.plan === "object") {
     try {
@@ -22618,7 +22950,7 @@ function createNodeSessionEventMapper(ctx) {
     if (envelope.aggregateType && envelope.aggregateType !== "session") return [];
     if (envelope.aggregateId && envelope.aggregateId !== ctx.sessionId) return [];
     const eventType = envelope.eventType;
-    const payload = asRecord5(envelope.payload);
+    const payload = asRecord6(envelope.payload);
     const out = [];
     const push = (event) => {
       out.push(stamp(event, ctx, envelope.sequence));
@@ -22644,7 +22976,7 @@ function createNodeSessionEventMapper(ctx) {
         break;
       }
       case SESSION_DURABLE_EVENT.agentEvent: {
-        const rawEvent = asRecord5(payload.event);
+        const rawEvent = asRecord6(payload.event);
         const type = asString2(rawEvent.type);
         if (!type) break;
         const eventRecord = { ...rawEvent };
@@ -22654,7 +22986,7 @@ function createNodeSessionEventMapper(ctx) {
         delete eventRecord.seq;
         delete eventRecord.epoch;
         const event = eventRecord;
-        const rawMessageId = type === "message_start" ? asString2(asRecord5(eventRecord.message).id) : asString2(eventRecord.messageId);
+        const rawMessageId = type === "message_start" ? asString2(asRecord6(eventRecord.message).id) : asString2(eventRecord.messageId);
         if (type === "message_start" && rawMessageId) {
           startedAssistantIds.add(rawMessageId);
           lastAssistantId = rawMessageId;
@@ -22832,7 +23164,7 @@ function createNodeSessionEventMapper(ctx) {
           requestId: interactionId,
           toolName,
           toolUseId: asString2(payload.toolUseId),
-          input: asRecord5(payload.input),
+          input: asRecord6(payload.input),
           allowAlwaysAllow: requestKind === "session_agents_confirm" ? false : payload.allowAlwaysAllow !== false,
           ...requestKind ? {
             requestKind
@@ -22937,7 +23269,7 @@ var init_node_session_event_map = __esm({
 });
 
 // ../../packages/runtime/src/session/message-catalog.ts
-function asRecord6(value) {
+function asRecord7(value) {
   if (value && typeof value === "object" && !Array.isArray(value)) {
     return value;
   }
@@ -23020,7 +23352,7 @@ function collectToolsByAssistantId(events, sessionId) {
   for (const ev of events) {
     if (ev.aggregateType && ev.aggregateType !== "session") continue;
     if (ev.aggregateId && ev.aggregateId !== sessionId) continue;
-    const payload = asRecord6(ev.payload);
+    const payload = asRecord7(ev.payload);
     switch (ev.eventType) {
       case SESSION_DURABLE_EVENT.turnStarted: {
         turnKey += 1;
@@ -23046,10 +23378,10 @@ function collectToolsByAssistantId(events, sessionId) {
         break;
       }
       case SESSION_DURABLE_EVENT.agentEvent: {
-        const raw = asRecord6(payload.event);
+        const raw = asRecord7(payload.event);
         const type = asString3(raw.type);
         if (type === "message_start") {
-          const id = asString3(asRecord6(raw.message).id);
+          const id = asString3(asRecord7(raw.message).id);
           if (id) bindAssistant(id);
         } else if (type === "message_complete") {
           const id = asString3(raw.messageId);
@@ -23057,7 +23389,7 @@ function collectToolsByAssistantId(events, sessionId) {
         } else if (type === "content_delta") {
           const messageId = asString3(raw.messageId);
           if (messageId) bindAssistant(messageId);
-          const delta = asRecord6(raw.delta);
+          const delta = asRecord7(raw.delta);
           const dType = asString3(delta.type);
           if (dType === "tool_use") {
             const toolUseId = asString3(delta.toolUseId);
@@ -23200,7 +23532,7 @@ function collectContentByAssistantId(events, sessionId) {
         if (changed) contentById.set(ev.messageId, next);
       }
     }
-    const payload = asRecord6(envelope.payload);
+    const payload = asRecord7(envelope.payload);
     if (envelope.eventType === SESSION_DURABLE_EVENT.assistantMessage) {
       const blockId = asString3(payload.blockId);
       const sticky = stickyBefore ?? mapper.currentAssistantMessageId();
@@ -23224,7 +23556,7 @@ function extractCheckpointMeta(events, sessionId, blockId) {
     const ev = events[i];
     if (ev.aggregateType && ev.aggregateType !== "session") continue;
     if (ev.aggregateId && ev.aggregateId !== sessionId) continue;
-    const payload = asRecord6(ev.payload);
+    const payload = asRecord7(ev.payload);
     if (ev.eventType === SESSION_DURABLE_EVENT.assistantMessage) {
       if (asString3(payload.blockId) !== blockId) continue;
       const checkpointId = asString3(payload.checkpointId);
@@ -23239,7 +23571,7 @@ function extractCheckpointMeta(events, sessionId, blockId) {
       }
     }
     if (ev.eventType === SESSION_DURABLE_EVENT.agentEvent) {
-      const raw = asRecord6(payload.event);
+      const raw = asRecord7(payload.event);
       if (asString3(raw.type) !== "message_complete" && asString3(raw.type) !== "checkpoint_captured") {
         continue;
       }
@@ -31046,6 +31378,7 @@ function createNodeClaudeTurnRunner(opts) {
         permissionMode: permissions.permissionMode,
         uid,
         sandboxMode: input.sandboxMode && input.sandboxMode.trim() ? input.sandboxMode.trim() : void 0,
+        askUserQuestionPreviewFormat: opts.askUserQuestionPreviewFormat?.(),
         additionalDirectories: input.additionalDirectories?.filter(Boolean),
         enabledSkills: resolveEnabledSkills(cwd, input.enabledSkills, input.disabledSkills),
         env: authEnv,
@@ -50495,7 +50828,7 @@ function toolInputJson(raw) {
     return "{}";
   }
 }
-function asRecord7(raw) {
+function asRecord8(raw) {
   if (raw && typeof raw === "object" && !Array.isArray(raw)) return raw;
   return {};
 }
@@ -50634,7 +50967,7 @@ function grokMetaInput(tool) {
   const xai = meta3["x.ai/tool"];
   if (!xai || typeof xai !== "object") return {};
   const input = xai.input;
-  return asRecord7(input);
+  return asRecord8(input);
 }
 function queryFromWebSearchTitle(title) {
   if (!title) return void 0;
@@ -50895,11 +51228,11 @@ function unwrapMcpEnvelope(tool, raw) {
   if (!isEnvelope) return null;
   const id = raw.tool_name;
   if (typeof id !== "string" || !id.includes("__")) return null;
-  return { toolName: `mcp__${id}`, input: asRecord7(raw.tool_input) };
+  return { toolName: `mcp__${id}`, input: asRecord8(raw.tool_input) };
 }
 function normalizeAcpTool(tool, opts) {
-  const raw = { ...grokMetaInput(tool), ...asRecord7(tool.rawInput) };
-  const mcp = unwrapMcpEnvelope(tool, asRecord7(tool.rawInput));
+  const raw = { ...grokMetaInput(tool), ...asRecord8(tool.rawInput) };
+  const mcp = unwrapMcpEnvelope(tool, asRecord8(tool.rawInput));
   if (mcp) return mcp;
   const diffs = extractDiffs(tool.content);
   const terminalId = extractEmbeddedTerminalId(tool.content);
@@ -51093,6 +51426,39 @@ var init_tool_result_map = __esm({
   }
 });
 
+// ../../packages/shared/src/acp-goal.ts
+function normalizeAcpGoalStatus(raw) {
+  const status = raw.trim().toLowerCase().replace(/-/g, "_");
+  switch (status) {
+    case "active":
+      return "active";
+    case "blocked":
+      return "blocked";
+    case "budget_limited":
+    case "budgetlimited":
+      return "budgetLimited";
+    case "complete":
+    case "completed":
+      return "complete";
+    case "cleared":
+      return "cleared";
+    case "user_paused":
+    case "backoff_paused":
+    case "back_off_paused":
+    case "no_progress_paused":
+    case "infra_paused":
+    case "paused":
+      return "paused";
+    default:
+      return "paused";
+  }
+}
+var init_acp_goal = __esm({
+  "../../packages/shared/src/acp-goal.ts"() {
+    "use strict";
+  }
+});
+
 // ../../packages/acp/src/xai-state.ts
 import { homedir as homedir4 } from "node:os";
 import { join as join20 } from "node:path";
@@ -51157,7 +51523,7 @@ function bindSubagentToolId(state, subagentId, toolUseId, description, migrateOu
     });
   }
 }
-function asRecord8(v2) {
+function asRecord9(v2) {
   if (!v2 || typeof v2 !== "object" || Array.isArray(v2)) return null;
   return v2;
 }
@@ -51190,18 +51556,18 @@ function arrField(o, ...keys) {
   return void 0;
 }
 function parseXaiSessionNotificationEnvelope(raw) {
-  const o = asRecord8(raw);
+  const o = asRecord9(raw);
   if (!o) return null;
-  const update = asRecord8(o.update);
+  const update = asRecord9(o.update);
   if (!update) return null;
   const sessionId = strField(o, "sessionId", "session_id");
-  const meta3 = asRecord8(o._meta) ?? asRecord8(o.meta);
+  const meta3 = asRecord9(o._meta) ?? asRecord9(o.meta);
   const eventSeq = meta3 ? numField(meta3, "eventSeq", "event_seq") ?? null : null;
   const eventId = meta3 ? strField(meta3, "eventId", "event_id") ?? null : null;
   return { sessionId, update, meta: meta3, eventSeq, eventId };
 }
 function parseXaiExtParams(raw) {
-  return asRecord8(raw) ?? {};
+  return asRecord9(raw) ?? {};
 }
 function parsePlainTextTaskAck(text) {
   const subagentId = text.match(/subagent_id:\s*(\S+)/i)?.[1] ?? text.match(/task_ids?\s*=\s*\[\s*"([^"]+)"/i)?.[1];
@@ -51306,13 +51672,13 @@ function tryParseJsonObject(text) {
   if (!trimmed.startsWith("{") && !trimmed.startsWith("[")) return null;
   try {
     const v2 = JSON.parse(trimmed);
-    return asRecord8(v2);
+    return asRecord9(v2);
   } catch {
     const start = trimmed.indexOf("{");
     const end = trimmed.lastIndexOf("}");
     if (start < 0 || end <= start) return null;
     try {
-      return asRecord8(JSON.parse(trimmed.slice(start, end + 1)));
+      return asRecord9(JSON.parse(trimmed.slice(start, end + 1)));
     } catch {
       return null;
     }
@@ -51550,7 +51916,7 @@ function mapWorkflowPhases(raw) {
   if (!raw?.length) return [];
   const out = [];
   for (const item of raw) {
-    const p2 = asRecord8(item);
+    const p2 = asRecord9(item);
     if (!p2) continue;
     const title = strField(p2, "title");
     if (!title) continue;
@@ -51568,7 +51934,7 @@ function mapWorkflowAgents(raw) {
   if (!raw?.length) return [];
   const out = [];
   for (const item of raw) {
-    const a = asRecord8(item);
+    const a = asRecord9(item);
     if (!a) continue;
     const agentId = strField(a, "agent_id", "agentId");
     const label = strField(a, "label") ?? agentId ?? "agent";
@@ -51594,7 +51960,7 @@ function buildWorkflowPhaseSummary(u, currentPhase, pauseMessage, lastEvent, las
   const phaseBits = [];
   if (phases?.length) {
     for (const p2 of phases) {
-      const ph = asRecord8(p2);
+      const ph = asRecord9(p2);
       if (!ph) continue;
       const title = strField(ph, "title") ?? "?";
       const state = strField(ph, "state") ?? "";
@@ -51742,7 +52108,7 @@ function mapTaskBackgrounded(u, state) {
   }];
 }
 function mapTaskCompleted(u, state) {
-  const snapshot = asRecord8(u.task_snapshot) ?? asRecord8(u.taskSnapshot) ?? u;
+  const snapshot = asRecord9(u.task_snapshot) ?? asRecord9(u.taskSnapshot) ?? u;
   const taskId = strField(snapshot, "task_id", "taskId");
   if (!taskId) return [];
   const known = state.bgTaskById.get(taskId);
@@ -51824,6 +52190,16 @@ function mapGoalUpdated(u, state) {
     pauseMessage || lastEvent
   ].filter(Boolean).join(" \xB7 ");
   const events = [];
+  const goal = {
+    goalId,
+    objective,
+    status: normalizeAcpGoalStatus(status),
+    tokensUsed,
+    elapsedMs,
+    ...pauseMessage ? { pauseMessage } : {},
+    ...phase ? { phase } : {}
+  };
+  events.push({ type: "acp_goal", goal: goal.status === "cleared" ? null : goal });
   if (!state.goalStarted.has(goalId)) {
     state.goalStarted.add(goalId);
     events.push({
@@ -52008,7 +52384,7 @@ function mapResponseStarted(u, state, ctx) {
   return event ? [event] : [];
 }
 function mapResponseCompleted(u, state, ctx) {
-  const usageRaw = asRecord8(u.usage) ?? u;
+  const usageRaw = asRecord9(u.usage) ?? u;
   const input = numField(usageRaw, "inputTokens", "input_tokens") ?? 0;
   const output = numField(usageRaw, "outputTokens", "output_tokens") ?? 0;
   const cacheRead = numField(usageRaw, "cacheReadInputTokens", "cache_read_input_tokens") ?? 0;
@@ -52023,7 +52399,7 @@ function mapResponseCompleted(u, state, ctx) {
 }
 function mapTurnCompleted(u, state, ctx) {
   const events = mapTurnStopReason(u, state);
-  const usageRaw = asRecord8(u.usage);
+  const usageRaw = asRecord9(u.usage);
   if (!usageRaw) {
     resetTurnTokens(state);
     return events;
@@ -52190,7 +52566,7 @@ function mapModelAutoSwitched(u) {
   ];
 }
 function mapRetryState(u) {
-  const nested = asRecord8(u.retry_state) ?? asRecord8(u.retryState) ?? u;
+  const nested = asRecord9(u.retry_state) ?? asRecord9(u.retryState) ?? u;
   const type = (strField(nested, "type") ?? "").toLowerCase();
   if (type === "retrying") {
     const attempt = numField(nested, "attempt") ?? 1;
@@ -52257,7 +52633,7 @@ function mapAutoRecoveryExhausted(u) {
   }];
 }
 function mapFollowUps(u) {
-  const meta3 = asRecord8(u._meta) ?? asRecord8(u.meta);
+  const meta3 = asRecord9(u._meta) ?? asRecord9(u.meta);
   if (meta3 && meta3["x.ai/replayed"] === true) return [];
   const responseId = strField(u, "response_id", "responseId");
   if (!responseId || responseId.length > 128) return [];
@@ -52266,7 +52642,7 @@ function mapFollowUps(u) {
   let count = 0;
   for (const s2 of suggestions) {
     if (count >= 6) break;
-    const rec = asRecord8(s2);
+    const rec = asRecord9(s2);
     const label = (rec ? strField(rec, "label") : typeof s2 === "string" ? s2 : void 0)?.trim();
     if (!label) continue;
     const cleaned = label.replace(/[\u0000-\u001f\u007f]/g, "").slice(0, 256).trim();
@@ -52288,6 +52664,7 @@ var log, WORKFLOW_TERMINAL;
 var init_xai_event_map = __esm({
   "../../packages/acp/src/xai-event-map.ts"() {
     "use strict";
+    init_acp_goal();
     init_xai_state();
     log = { debug: (..._args) => void 0 };
     WORKFLOW_TERMINAL = /* @__PURE__ */ new Set([
@@ -60112,7 +60489,7 @@ function toolDisplayName(name) {
 }
 function unwrapCursorMcpTool(toolType, args) {
   if (toolType.toLowerCase() !== "mcp") return { toolType, args };
-  const rec = asRecord9(args);
+  const rec = asRecord10(args);
   if (!rec) return { toolType, args };
   const server = typeof rec.providerIdentifier === "string" ? rec.providerIdentifier.trim() : "";
   const name = typeof rec.toolName === "string" ? rec.toolName.trim() : "";
@@ -60138,12 +60515,12 @@ function idField(obj, ...keys) {
   return stableIdField(obj, ...keys) ?? `tool_${Date.now()}`;
 }
 function extractCursorCallId(update) {
-  const rec = asRecord9(update);
+  const rec = asRecord10(update);
   if (!rec) return null;
-  const nested = asRecord9(rec.toolCall) ?? asRecord9(rec.message);
+  const nested = asRecord10(rec.toolCall) ?? asRecord10(rec.message);
   return stableIdField(rec, ...TOOL_CALL_ID_KEYS) ?? (nested ? stableIdField(nested, ...TOOL_CALL_ID_KEYS) : null);
 }
-function asRecord9(value) {
+function asRecord10(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return null;
   return value;
 }
@@ -60157,13 +60534,13 @@ function stringifyPayload(value) {
   }
 }
 function extractToolCallParts(update) {
-  const rec = asRecord9(update) ?? {};
+  const rec = asRecord10(update) ?? {};
   const callId = extractCursorCallId(update);
-  const nested = asRecord9(rec.toolCall);
+  const nested = asRecord10(rec.toolCall);
   if (nested) {
     const toolType2 = typeof nested.type === "string" && nested.type ? nested.type : "Tool";
     const result = nested.result;
-    const resultRec = asRecord9(result);
+    const resultRec = asRecord10(result);
     const isError = resultRec?.status === "error" || Boolean(rec.isError);
     return {
       callId,
@@ -60187,7 +60564,7 @@ function mapTodosPayload(todos) {
   return {
     type: "todos_updated",
     todos: todos.map((todo, index) => {
-      const row = asRecord9(todo) ?? {};
+      const row = asRecord10(todo) ?? {};
       const statusRaw = String(row.status ?? "pending");
       return {
         id: String(row.id ?? index + 1),
@@ -60216,15 +60593,15 @@ function toolUseEvent(messageId, callId, toolType, args, status) {
 }
 function normalizeCursorToolInput(toolName, args) {
   if (toolName.startsWith("mcp__")) return args;
-  const rec = asRecord9(args);
+  const rec = asRecord10(args);
   if (!rec) return args ?? {};
   return normalizeTranscriptTool(toolName, rec).input;
 }
 function mergeCursorToolResultArgs(toolType, args, result) {
   if (toolType.toLowerCase() === "mcp") return args;
-  const res = asRecord9(result);
+  const res = asRecord10(result);
   if (!res) return args;
-  const rec = asRecord9(args);
+  const rec = asRecord10(args);
   if (!rec) return args;
   const diff = typeof res.diffString === "string" ? res.diffString : void 0;
   const linesAdded = typeof res.linesAdded === "number" ? res.linesAdded : void 0;
@@ -60285,7 +60662,7 @@ function stampParentToolUseId(events, parentToolUseId) {
 function mapInteractionUpdate(messageId, update, options) {
   const events = [];
   const type = String(update.type ?? "");
-  const rec = asRecord9(update) ?? {};
+  const rec = asRecord10(update) ?? {};
   switch (type) {
     case "text-delta": {
       const text = strField2(update, "text");
@@ -60325,7 +60702,7 @@ function mapInteractionUpdate(messageId, update, options) {
       if (!parts.callId) break;
       events.push(toolUseEvent(messageId, parts.callId, parts.toolType, parts.args, "streaming"));
       if (parts.toolType === "updateTodos" || parts.toolType === "update_todos") {
-        const todos = asRecord9(parts.args)?.todos;
+        const todos = asRecord10(parts.args)?.todos;
         const todoEvent = mapTodosPayload(todos);
         if (todoEvent) events.push(todoEvent);
       }
@@ -60362,7 +60739,7 @@ function mapInteractionUpdate(messageId, update, options) {
       events.push(toolUseEvent(messageId, parts.callId, parts.toolType, args, "complete"));
       events.push(toolResultEvent(messageId, parts.callId, parts.result, parts.isError));
       if (parts.toolType === "updateTodos" || parts.toolType === "update_todos") {
-        const todos = asRecord9(parts.args)?.todos ?? asRecord9(parts.result)?.todos;
+        const todos = asRecord10(parts.args)?.todos ?? asRecord10(parts.result)?.todos;
         const todoEvent = mapTodosPayload(todos);
         if (todoEvent) events.push(todoEvent);
       }
@@ -60467,7 +60844,7 @@ ${text}
 }
 function mapConversationStep(messageId, step, options) {
   const events = [];
-  const rec = asRecord9(step);
+  const rec = asRecord10(step);
   if (!rec) return events;
   const stepType = strField2(rec, "type");
   if (stepType === "assistantMessage" || stepType === "thinkingMessage") {
@@ -60475,14 +60852,14 @@ function mapConversationStep(messageId, step, options) {
   }
   if (stepType === "toolCall") {
     const message = rec.message ?? rec.toolCall ?? rec;
-    const nested = asRecord9(message);
+    const nested = asRecord10(message);
     const callId = extractCursorCallId(rec) || options?.resolveCallId?.(step) || null;
     if (!callId) {
       return events;
     }
     const toolType = nested && typeof nested.type === "string" && nested.type ? nested.type : strField2(rec, "name") || "Tool";
     const args = nested?.args ?? nested?.input ?? {};
-    const resultRec = asRecord9(nested?.result);
+    const resultRec = asRecord10(nested?.result);
     const resultValue = resultRec?.status === "success" ? resultRec.value ?? nested?.result : nested?.result;
     events.push(toolUseEvent(
       messageId,
@@ -60492,7 +60869,7 @@ function mapConversationStep(messageId, step, options) {
       "complete"
     ));
     if (toolType === "updateTodos" || toolType === "update_todos") {
-      const todos = asRecord9(args)?.todos;
+      const todos = asRecord10(args)?.todos;
       const todoEvent = mapTodosPayload(todos);
       if (todoEvent) events.push(todoEvent);
     }
@@ -60629,7 +61006,7 @@ var init_cursor_event_map = __esm({
       observeDelta(update) {
         const type = String(update.type ?? "");
         if (type === "tool-call-delta") {
-          const taskUpdate = asRecord9(update)?.taskUpdate;
+          const taskUpdate = asRecord10(update)?.taskUpdate;
           if (taskUpdate && typeof taskUpdate === "object") {
             this.observeDelta(taskUpdate);
           }
@@ -62010,7 +62387,7 @@ var init_harness_runners = __esm({
 });
 
 // src/session/codex-live-turn.ts
-function asRecord10(value) {
+function asRecord11(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function readString4(value) {
@@ -62041,7 +62418,7 @@ function extractAgentTextFromTurn2(turn) {
   let text = "";
   const items = Array.isArray(turn.items) ? turn.items : [];
   for (const item of items) {
-    const rec = asRecord10(item);
+    const rec = asRecord11(item);
     if (!rec) continue;
     if (readString4(rec.type) === "agentMessage" || readString4(rec.itemType) === "agentMessage") {
       const t = readString4(rec.text);
@@ -62073,7 +62450,7 @@ async function openTurnAndStream(opts) {
       ...collaborationMode ? { collaborationMode } : {}
     })
   );
-  const turn = asRecord10(turnStartResult.turn);
+  const turn = asRecord11(turnStartResult.turn);
   const turnId = readString4(turn?.id);
   opts.onTurnStarted?.(turnId);
   let finalText = "";
@@ -62101,7 +62478,7 @@ async function openTurnAndStream(opts) {
       continue;
     }
     if (note.method === "turn/completed" || note.method === "turn/completed/v2") {
-      const completedTurn = asRecord10(note.params.turn);
+      const completedTurn = asRecord11(note.params.turn);
       const completedId = readString4(completedTurn?.id);
       if (turnId && completedId && completedId !== turnId) continue;
     }
@@ -62109,14 +62486,14 @@ async function openTurnAndStream(opts) {
       const applied = agentEventMapper.apply(note);
       if (applied.textDelta) finalText += applied.textDelta;
     } else if (note.method === "item/agentMessage/delta" || note.method === "item/agentMessageDelta") {
-      const delta = readString4(note.params.delta) ?? readString4(note.params.text) ?? readString4(asRecord10(note.params.item)?.delta);
+      const delta = readString4(note.params.delta) ?? readString4(note.params.text) ?? readString4(asRecord11(note.params.item)?.delta);
       if (delta) {
         finalText += delta;
         opts.onDelta?.(delta);
       }
     }
     if (note.method === "turn/completed" || note.method === "turn/completed/v2") {
-      const completedTurn = asRecord10(note.params.turn);
+      const completedTurn = asRecord11(note.params.turn);
       const status = readString4(completedTurn?.status) ?? readString4(note.params.status);
       if (status === "failed" || status === "error") {
         throw new Error("Codex turn failed");
@@ -62387,6 +62764,7 @@ function createProductionTurnRunner(opts) {
     allowSimulatedFallback: opts.allowSimulatedFallback,
     providers: opts.providers,
     experimentalClaudeOpenAiChatEnabled: opts.experimentalClaudeOpenAiChatEnabled,
+    askUserQuestionPreviewFormat: opts.askUserQuestionPreviewFormat,
     createHostActionClaudeMcp: opts.createHostActionClaudeMcp,
     mcpMergeMode: opts.mcpMergeMode,
     homeDir: opts.homeDir
@@ -62452,8 +62830,13 @@ function createCodexAdminService(opts) {
 }
 function clearCodexAdminAuthForTest() {
   projectAuthById.clear();
+  for (const pending of pendingAccountLogins.values()) {
+    void pending.client.close().catch(() => {
+    });
+  }
+  pendingAccountLogins.clear();
 }
-var projectAuthById, CodexAdminService;
+var projectAuthById, pendingAccountLogins, CodexAdminService;
 var init_codex_admin_service = __esm({
   "src/session/codex-admin-service.ts"() {
     "use strict";
@@ -62462,6 +62845,7 @@ var init_codex_admin_service = __esm({
     init_codex_turn_runner();
     init_resolve_service();
     projectAuthById = /* @__PURE__ */ new Map();
+    pendingAccountLogins = /* @__PURE__ */ new Map();
     CodexAdminService = class {
       constructor(opts) {
         this.opts = opts;
@@ -62535,6 +62919,91 @@ var init_codex_admin_service = __esm({
           });
         }
       }
+      async openAccountClient() {
+        const binary = resolveCodexBinaryPath({
+          binaryPath: this.opts.binaryPath,
+          harnesses: this.opts.harnesses
+        });
+        if (!binary) {
+          throw Object.assign(new Error("Codex binary not available"), {
+            code: "failed_precondition"
+          });
+        }
+        const env = { ...process.env, ...this.opts.env };
+        delete env.CODEX_API_KEY;
+        return openCodexAppServer({
+          binaryPath: binary,
+          env,
+          spawnFn: this.opts.spawnFn
+        });
+      }
+      async getAccountStatus() {
+        const client3 = await this.openAccountClient();
+        try {
+          return await readAccountStatus(client3);
+        } finally {
+          await client3.close().catch(() => {
+          });
+        }
+      }
+      async startAccountLogin(projectId) {
+        const client3 = await this.openAccountClient();
+        try {
+          const result = await startAccountLogin(client3, "chatgptDeviceCode");
+          pendingAccountLogins.set(result.loginId, { projectId, client: client3 });
+          void this.waitForAccountLogin(result.loginId, client3);
+          return result;
+        } catch (error51) {
+          await client3.close().catch(() => {
+          });
+          throw error51;
+        }
+      }
+      async waitForAccountLogin(loginId, client3) {
+        const deadline = Date.now() + 15 * 6e4;
+        try {
+          while (Date.now() < deadline && pendingAccountLogins.get(loginId)?.client === client3) {
+            const notification = await client3.nextNotification(Math.min(1e3, deadline - Date.now()));
+            if (!notification) continue;
+            if (notification.method === "account/login/completed" && notification.params.loginId === loginId) return;
+          }
+        } catch {
+        } finally {
+          if (pendingAccountLogins.get(loginId)?.client === client3) {
+            pendingAccountLogins.delete(loginId);
+          }
+          await client3.close().catch(() => {
+          });
+        }
+      }
+      async cancelAccountLogin(loginId) {
+        const pending = pendingAccountLogins.get(loginId);
+        if (!pending) return;
+        pendingAccountLogins.delete(loginId);
+        try {
+          await cancelAccountLogin(pending.client, loginId);
+        } finally {
+          await pending.client.close().catch(() => {
+          });
+        }
+      }
+      async logoutAccount() {
+        for (const [loginId, pending] of [...pendingAccountLogins]) {
+          pendingAccountLogins.delete(loginId);
+          await cancelAccountLogin(pending.client, loginId).catch(() => {
+          });
+          await pending.client.close().catch(() => {
+          });
+        }
+        const client3 = await this.openAccountClient();
+        try {
+          await logoutAccount(client3);
+          return await readAccountStatus(client3);
+        } finally {
+          await client3.close().catch(() => {
+          });
+        }
+      }
       async getRateLimits(projectId, apiProviderId) {
         const auth = this.getProjectAuth(projectId);
         if (resolveMode(auth.mode, auth.apiKey) !== "chatgpt") return null;
@@ -69749,8 +70218,8 @@ import { fileURLToPath } from "node:url";
 function resolveCliReleaseVersion() {
   const fromEnv = process.env.SUPERONE_CLI_VERSION?.trim();
   if (fromEnv) return fromEnv;
-  if ("0.55.2-alpha".trim()) {
-    return "0.55.2-alpha".trim();
+  if ("0.56.0-alpha".trim()) {
+    return "0.56.0-alpha".trim();
   }
   const fromDist = readDistManifestVersion();
   if (fromDist) return fromDist;
@@ -71385,13 +71854,15 @@ import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as rea
 import { dirname as dirname4 } from "node:path";
 var CODEX_PRESETS = /* @__PURE__ */ new Set(["", "read-only", "default", "full-access"]);
 var SANDBOX_MODES = /* @__PURE__ */ new Set(["", "off", "on", "auto"]);
+var QUESTION_PREVIEW_FORMATS = /* @__PURE__ */ new Set(["", "markdown", "html"]);
 var DEFAULT_NODE_AGENT_SETTINGS = {
   claude: {
     defaultModel: "",
     defaultEffort: "",
     permissionMode: "",
     sandboxMode: "",
-    disabledSkills: []
+    disabledSkills: [],
+    askUserQuestionPreviewFormat: ""
   },
   codex: {
     defaultModel: "",
@@ -71414,12 +71885,14 @@ function normalizeClaude(raw) {
   const r = raw && typeof raw === "object" ? raw : {};
   const sandboxMode = asString(r.sandboxMode ?? r.defaultSandboxMode, "");
   const permissionMode = asString(r.permissionMode ?? r.defaultPermissionMode, "");
+  const previewFormat = asString(r.askUserQuestionPreviewFormat, "");
   return {
     defaultModel: asString(r.defaultModel, ""),
     defaultEffort: asString(r.defaultEffort, ""),
     permissionMode,
     sandboxMode: SANDBOX_MODES.has(sandboxMode) ? sandboxMode : "",
-    disabledSkills: asStringArray(r.disabledSkills, [])
+    disabledSkills: asStringArray(r.disabledSkills, []),
+    askUserQuestionPreviewFormat: QUESTION_PREVIEW_FORMATS.has(previewFormat) ? previewFormat : ""
   };
 }
 function normalizeCodex(raw) {
@@ -71466,6 +71939,10 @@ function mergeNodeAgentSettings(current, patch) {
       const m2 = patch.claude.sandboxMode;
       next.claude.sandboxMode = SANDBOX_MODES.has(m2) ? m2 : next.claude.sandboxMode;
     }
+    if (typeof patch.claude.askUserQuestionPreviewFormat === "string") {
+      const f2 = patch.claude.askUserQuestionPreviewFormat;
+      if (QUESTION_PREVIEW_FORMATS.has(f2)) next.claude.askUserQuestionPreviewFormat = f2;
+    }
     if (Array.isArray(patch.claude.disabledSkills)) {
       next.claude.disabledSkills = patch.claude.disabledSkills.filter((s2) => typeof s2 === "string").map((s2) => s2.trim()).filter(Boolean);
     }
@@ -71788,7 +72265,7 @@ function requireResourceWrite(client3, scope) {
   if (scope === "user") return requireScopes(client3, OPERATION_SCOPES.adminNode);
   return null;
 }
-function asRecord11(payload) {
+function asRecord12(payload) {
   return payload && typeof payload === "object" ? payload : {};
 }
 function mapThrown(err) {
@@ -71817,7 +72294,7 @@ function manageOpts(ctx) {
 function handleSkillsList(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -71837,7 +72314,7 @@ function handleSkillsList(payload, ctx) {
 function handleSkillsGet(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -71862,7 +72339,7 @@ function handleSkillsGet(payload, ctx) {
 function handleSkillsReadFile(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -71896,7 +72373,7 @@ function handleSkillsReadFile(payload, ctx) {
 function handleSkillsDelete(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -71921,7 +72398,7 @@ function handleSkillsDelete(payload, ctx) {
 function handleSkillsInstall(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -71955,7 +72432,7 @@ function handleSkillsInstall(payload, ctx) {
 function handleMcpList(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -71979,7 +72456,7 @@ function handleMcpList(payload, ctx) {
 function handleAdditionalDirsList(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -71994,7 +72471,7 @@ function handleAdditionalDirsList(payload, ctx) {
 function handleAdditionalDirsAdd(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72012,7 +72489,7 @@ function handleAdditionalDirsAdd(payload, ctx) {
 function handleAdditionalDirsRemove(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72063,7 +72540,7 @@ function parseMcpWriteConfig(raw) {
 function handleMcpSave(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72093,7 +72570,7 @@ function handleMcpSave(payload, ctx) {
 function handleMcpToggle(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72124,7 +72601,7 @@ function handleMcpToggle(payload, ctx) {
 function handleMcpDelete(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72164,7 +72641,7 @@ function parseMarketplaceScope(raw) {
 async function handlePluginsList(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     projectRoot(ctx.projects, projectId);
@@ -72211,7 +72688,7 @@ async function handlePluginsList(payload, ctx) {
 function handlePluginsGet(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72235,7 +72712,7 @@ function handlePluginsGet(payload, ctx) {
 function handlePluginsReadFile(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72263,7 +72740,7 @@ function handlePluginsReadFile(payload, ctx) {
 function handlePluginsDelete(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72289,7 +72766,7 @@ function handlePluginsDelete(payload, ctx) {
 async function handlePluginsInstall(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72315,7 +72792,7 @@ async function handlePluginsInstall(payload, ctx) {
 function handlePluginsUpdate(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72341,7 +72818,7 @@ function handlePluginsUpdate(payload, ctx) {
 function handlePluginsListMarketplace(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72363,7 +72840,7 @@ function handlePluginsListMarketplace(payload, ctx) {
 async function handlePluginsAddMarketplace(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72389,7 +72866,7 @@ async function handlePluginsAddMarketplace(payload, ctx) {
 async function handlePluginsRemoveMarketplace(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72424,7 +72901,7 @@ async function handlePluginsUpdateMarketplace(payload, ctx) {
   if (denied) return denied;
   const adminDenied = requireScopes(ctx.client, OPERATION_SCOPES.adminNode);
   if (adminDenied) return adminDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     if (projectId) {
@@ -72446,7 +72923,7 @@ async function handlePluginsUpdateMarketplace(payload, ctx) {
 function handlePluginsReadMarketplace(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     if (projectId) {
@@ -72477,7 +72954,7 @@ function handlePluginsReadMarketplace(payload, ctx) {
 function handlePluginsReadMarketplaceFile(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     if (projectId) {
@@ -72511,7 +72988,7 @@ function handlePluginsReadMarketplaceFile(payload, ctx) {
 function handleAgentsList(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72528,7 +73005,7 @@ function handleAgentsList(payload, ctx) {
 function handleAgentsReadFile(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72560,7 +73037,7 @@ function parseHookSavePayload(raw) {
 function handleHooksList(payload, ctx) {
   const denied = requireScopes(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72573,7 +73050,7 @@ function handleHooksList(payload, ctx) {
 function handleHooksSave(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72601,7 +73078,7 @@ function handleHooksSave(payload, ctx) {
 function handleHooksDelete(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
-  const p2 = asRecord11(payload);
+  const p2 = asRecord12(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = projectRoot(ctx.projects, projectId);
@@ -72706,7 +73183,7 @@ function requireScopes2(client3, scopes) {
   }
   return null;
 }
-function asRecord12(payload) {
+function asRecord13(payload) {
   return payload && typeof payload === "object" ? payload : {};
 }
 function mapThrown2(err) {
@@ -72797,7 +73274,7 @@ function parseSchedule(raw) {
 function handleAutomationList(payload, ctx) {
   const denied = requireScopes2(ctx.client, OPERATION_SCOPES.readSession);
   if (denied) return denied;
-  const p2 = asRecord12(payload);
+  const p2 = asRecord13(payload);
   const projectId = String(p2.projectId ?? "").trim();
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId is required" } };
@@ -72816,7 +73293,7 @@ function handleAutomationList(payload, ctx) {
 function handleAutomationCreate(payload, ctx) {
   const denied = requireScopes2(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord12(payload);
+  const p2 = asRecord13(payload);
   const projectId = String(p2.projectId ?? "").trim();
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId is required" } };
@@ -72853,7 +73330,7 @@ function handleAutomationCreate(payload, ctx) {
 function handleAutomationUpdate(payload, ctx) {
   const denied = requireScopes2(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord12(payload);
+  const p2 = asRecord13(payload);
   const automationId = String(p2.automationId ?? p2.id ?? "").trim();
   if (!automationId) {
     return { error: { code: "invalid_argument", message: "automationId is required" } };
@@ -72897,7 +73374,7 @@ function handleAutomationUpdate(payload, ctx) {
 function handleAutomationDelete(payload, ctx) {
   const denied = requireScopes2(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord12(payload);
+  const p2 = asRecord13(payload);
   const automationId = String(p2.automationId ?? p2.id ?? "").trim();
   if (!automationId) {
     return { error: { code: "invalid_argument", message: "automationId is required" } };
@@ -72923,7 +73400,7 @@ function handleAutomationDelete(payload, ctx) {
 async function handleAutomationRunNow(payload, ctx) {
   const denied = requireScopes2(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord12(payload);
+  const p2 = asRecord13(payload);
   const automationId = String(p2.automationId ?? p2.id ?? "").trim();
   if (!automationId) {
     return { error: { code: "invalid_argument", message: "automationId is required" } };
@@ -72980,7 +73457,7 @@ function requireScopes3(client3, scopes) {
   }
   return null;
 }
-function asRecord13(payload) {
+function asRecord14(payload) {
   return payload && typeof payload === "object" ? payload : {};
 }
 function optionalString(value) {
@@ -72989,7 +73466,7 @@ function optionalString(value) {
 function parseAttachments(value) {
   if (!Array.isArray(value)) return [];
   return value.flatMap((raw) => {
-    const a = asRecord13(raw);
+    const a = asRecord14(raw);
     const name = typeof a.name === "string" ? a.name : "";
     const mimeType = typeof a.mimeType === "string" ? a.mimeType : "";
     const data = typeof a.data === "string" ? a.data : "";
@@ -73002,7 +73479,7 @@ function mapThrown3(err) {
 function handleDraftList(payload, ctx) {
   const denied = requireScopes3(ctx.client, OPERATION_SCOPES.readSession);
   if (denied) return denied;
-  const p2 = asRecord13(payload);
+  const p2 = asRecord14(payload);
   const projectPath = optionalString(p2.projectPath);
   try {
     return { result: { drafts: ctx.drafts.list(projectPath ?? void 0) } };
@@ -73013,7 +73490,7 @@ function handleDraftList(payload, ctx) {
 function handleDraftUpsert(payload, ctx) {
   const denied = requireScopes3(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord13(payload);
+  const p2 = asRecord14(payload);
   const id = String(p2.id ?? "").trim();
   if (!id) {
     return { error: { code: "invalid_argument", message: "id is required" } };
@@ -73044,7 +73521,7 @@ function handleDraftUpsert(payload, ctx) {
 function handleDraftDelete(payload, ctx) {
   const denied = requireScopes3(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord13(payload);
+  const p2 = asRecord14(payload);
   const draftId = String(p2.draftId ?? "").trim();
   if (!draftId) {
     return { error: { code: "invalid_argument", message: "draftId is required" } };
@@ -73078,7 +73555,7 @@ function requireScopes4(client3, scopes) {
   }
   return null;
 }
-function asRecord14(payload) {
+function asRecord15(payload) {
   return payload && typeof payload === "object" ? payload : {};
 }
 function mapThrown4(err) {
@@ -73105,6 +73582,14 @@ async function dispatchCodexRpc(method, payload, ctx) {
       return handleGetAuthStatus(payload, ctx);
     case "codex.setAuth":
       return handleSetAuth(payload, ctx);
+    case "codex.getAccountStatus":
+      return handleGetAccountStatus(payload, ctx);
+    case "codex.accountLoginStart":
+      return handleAccountLoginStart(payload, ctx);
+    case "codex.accountLoginCancel":
+      return handleAccountLoginCancel(payload, ctx);
+    case "codex.accountLogout":
+      return handleAccountLogout(payload, ctx);
     case "codex.getRateLimits":
       return handleGetRateLimits(payload, ctx);
     case "codex.getAccountUsage":
@@ -73137,6 +73622,9 @@ async function dispatchCodexRpc(method, payload, ctx) {
 }
 var CODEX_MUTATING_METHODS = [
   "codex.setAuth",
+  "codex.accountLoginStart",
+  "codex.accountLoginCancel",
+  "codex.accountLogout",
   "codex.consumeRateLimitReset",
   "codex.loginMcpOauth",
   "codex.importExternalAgent",
@@ -73149,7 +73637,7 @@ var CODEX_MUTATING_METHODS = [
 function handleGetAuthStatus(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.readEnvironment);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId required" } };
@@ -73162,7 +73650,7 @@ function handleGetAuthStatus(payload, ctx) {
 function handleSetAuth(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId required" } };
@@ -73184,10 +73672,62 @@ function handleSetAuth(payload, ctx) {
     return mapThrown4(err);
   }
 }
+async function handleGetAccountStatus(payload, ctx) {
+  const denied = requireScopes4(ctx.client, OPERATION_SCOPES.readEnvironment);
+  if (denied) return denied;
+  const p2 = asRecord15(payload);
+  const projectId = projectIdOf(p2);
+  if (!projectId) return { error: { code: "invalid_argument", message: "projectId required" } };
+  if (!ctx.projects.get(projectId)) return { error: { code: "not_found", message: "project not found" } };
+  try {
+    return { result: await admin(ctx).getAccountStatus() };
+  } catch (err) {
+    return mapThrown4(err);
+  }
+}
+async function handleAccountLoginStart(payload, ctx) {
+  const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
+  if (denied) return denied;
+  const p2 = asRecord15(payload);
+  const projectId = projectIdOf(p2);
+  if (!projectId) return { error: { code: "invalid_argument", message: "projectId required" } };
+  if (!ctx.projects.get(projectId)) return { error: { code: "not_found", message: "project not found" } };
+  try {
+    return { result: await admin(ctx).startAccountLogin(projectId) };
+  } catch (err) {
+    return mapThrown4(err);
+  }
+}
+async function handleAccountLoginCancel(payload, ctx) {
+  const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
+  if (denied) return denied;
+  const p2 = asRecord15(payload);
+  const loginId = typeof p2.loginId === "string" ? p2.loginId.trim() : "";
+  if (!loginId) return { error: { code: "invalid_argument", message: "loginId required" } };
+  try {
+    await admin(ctx).cancelAccountLogin(loginId);
+    return { result: { ok: true } };
+  } catch (err) {
+    return mapThrown4(err);
+  }
+}
+async function handleAccountLogout(payload, ctx) {
+  const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
+  if (denied) return denied;
+  const p2 = asRecord15(payload);
+  const projectId = projectIdOf(p2);
+  if (!projectId) return { error: { code: "invalid_argument", message: "projectId required" } };
+  if (!ctx.projects.get(projectId)) return { error: { code: "not_found", message: "project not found" } };
+  try {
+    return { result: await admin(ctx).logoutAccount() };
+  } catch (err) {
+    return mapThrown4(err);
+  }
+}
 async function handleGetRateLimits(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.readEnvironment);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId required" } };
@@ -73214,7 +73754,7 @@ async function handleGetRateLimits(payload, ctx) {
 async function handleGetAccountUsage(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.readEnvironment);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId required" } };
@@ -73241,7 +73781,7 @@ async function handleGetAccountUsage(payload, ctx) {
 async function handleConsumeRateLimitReset(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId required" } };
@@ -73271,7 +73811,7 @@ async function handleConsumeRateLimitReset(payload, ctx) {
 async function handleLoginMcpOauth(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   const serverName = String(p2.serverName ?? p2.name ?? "").trim();
   if (!projectId || !serverName) {
@@ -73291,7 +73831,7 @@ async function handleLoginMcpOauth(payload, ctx) {
 async function handleDetectExternalAgent(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.readEnvironment);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId required" } };
@@ -73310,7 +73850,7 @@ async function handleDetectExternalAgent(payload, ctx) {
 async function handleImportExternalAgent(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId required" } };
@@ -73328,7 +73868,7 @@ async function handleImportExternalAgent(payload, ctx) {
 async function handlePluginsList2(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId required" } };
@@ -73351,7 +73891,7 @@ async function handlePluginsList2(payload, ctx) {
 async function handlePluginsInstall2(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   const key = String(p2.key ?? p2.pluginId ?? "").trim();
   if (!projectId || !key) {
@@ -73367,7 +73907,7 @@ async function handlePluginsInstall2(payload, ctx) {
 async function handlePluginsUninstall(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   const key = String(p2.key ?? p2.pluginId ?? "").trim();
   if (!projectId || !key) {
@@ -73383,7 +73923,7 @@ async function handlePluginsUninstall(payload, ctx) {
 async function handleMarketplaceAdd(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   const source = String(p2.source ?? "").trim();
   if (!projectId || !source) {
@@ -73412,7 +73952,7 @@ async function handleMarketplaceAdd(payload, ctx) {
 async function handleMarketplaceRemove(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   const marketplaceName = String(p2.marketplaceName ?? p2.name ?? "").trim();
   if (!projectId || !marketplaceName) {
@@ -73435,7 +73975,7 @@ async function handleMarketplaceRemove(payload, ctx) {
 async function handleMarketplaceUpgrade(payload, ctx) {
   const denied = requireScopes4(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord14(payload);
+  const p2 = asRecord15(payload);
   const projectId = projectIdOf(p2);
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId required" } };
@@ -73468,7 +74008,7 @@ function requireScopes5(client3, scopes) {
   }
   return null;
 }
-function asRecord15(payload) {
+function asRecord16(payload) {
   return payload && typeof payload === "object" ? payload : {};
 }
 function mapThrown5(err) {
@@ -73497,7 +74037,7 @@ function dispatchSessionProviderRpc(method, payload, ctx) {
 function handleList(payload, ctx) {
   const denied = requireScopes5(ctx.client, OPERATION_SCOPES.readEnvironment);
   if (denied) return denied;
-  const p2 = asRecord15(payload);
+  const p2 = asRecord16(payload);
   try {
     const harnessId = typeof p2.harnessId === "string" && p2.harnessId.trim() ? p2.harnessId.trim() : null;
     const providers = harnessId ? ctx.sessionProviders.listByHarness(harnessId) : ctx.sessionProviders.list();
@@ -73509,7 +74049,7 @@ function handleList(payload, ctx) {
 function handleGet(payload, ctx) {
   const denied = requireScopes5(ctx.client, OPERATION_SCOPES.readEnvironment);
   if (denied) return denied;
-  const p2 = asRecord15(payload);
+  const p2 = asRecord16(payload);
   const id = String(p2.id ?? "");
   if (!id) return { error: { code: "invalid_argument", message: "id required" } };
   try {
@@ -73521,7 +74061,7 @@ function handleGet(payload, ctx) {
 function handleGetBase(payload, ctx) {
   const denied = requireScopes5(ctx.client, OPERATION_SCOPES.readEnvironment);
   if (denied) return denied;
-  const p2 = asRecord15(payload);
+  const p2 = asRecord16(payload);
   const harnessId = String(p2.harnessId ?? "");
   if (!harnessId) return { error: { code: "invalid_argument", message: "harnessId required" } };
   try {
@@ -73533,7 +74073,7 @@ function handleGetBase(payload, ctx) {
 function handleCreate(payload, ctx) {
   const denied = requireScopes5(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord15(payload);
+  const p2 = asRecord16(payload);
   try {
     const provider = ctx.sessionProviders.create({
       harnessId: String(p2.harnessId ?? ""),
@@ -73549,7 +74089,7 @@ function handleCreate(payload, ctx) {
 function handleUpdate(payload, ctx) {
   const denied = requireScopes5(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord15(payload);
+  const p2 = asRecord16(payload);
   const id = String(p2.id ?? "");
   if (!id) return { error: { code: "invalid_argument", message: "id required" } };
   try {
@@ -73565,7 +74105,7 @@ function handleUpdate(payload, ctx) {
 function handleDelete(payload, ctx) {
   const denied = requireScopes5(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord15(payload);
+  const p2 = asRecord16(payload);
   const id = String(p2.id ?? "");
   if (!id) return { error: { code: "invalid_argument", message: "id required" } };
   try {
@@ -73606,7 +74146,7 @@ function requireScopes6(client3, scopes) {
   }
   return null;
 }
-function asRecord16(payload) {
+function asRecord17(payload) {
   return payload && typeof payload === "object" ? payload : {};
 }
 function defaultProbeModels(ctx) {
@@ -73634,7 +74174,7 @@ async function dispatchHarnessResourcesRpc(method, payload, ctx) {
 async function handleHarnessResources(payload, ctx) {
   const denied = requireScopes6(ctx.client, OPERATION_SCOPES.readEnvironment);
   if (denied) return denied;
-  const p2 = asRecord16(payload);
+  const p2 = asRecord17(payload);
   const projectId = String(p2.projectId ?? "");
   if (!projectId) {
     return { error: { code: "invalid_argument", message: "projectId required" } };
@@ -74076,7 +74616,7 @@ function handleProviderListCredentials(ctx) {
 function handleProviderGetCredentialDecrypted(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const cred = ctx.providers.getCredentialDecrypted(String(p2.id ?? ""));
   if (!cred) return { error: { code: "not_found", message: "credential not found" } };
   return { result: cred };
@@ -74084,7 +74624,7 @@ function handleProviderGetCredentialDecrypted(payload, ctx) {
 function handleProviderCreateCredential(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.providers.createCredential({
@@ -74106,7 +74646,7 @@ function handleProviderCreateCredential(payload, ctx) {
 function handleProviderUpdateCredential(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const id = String(p2.id ?? "");
   const updated = ctx.providers.updateCredential(id, {
     name: typeof p2.name === "string" ? p2.name : void 0,
@@ -74123,7 +74663,7 @@ function handleProviderUpdateCredential(payload, ctx) {
 function handleProviderDeleteCredential(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const ok = ctx.providers.deleteCredential(String(p2.id ?? ""));
   if (!ok) return { error: { code: "not_found", message: "credential not found" } };
   return { result: { ok: true } };
@@ -74136,7 +74676,7 @@ function handleProviderListBindings(ctx) {
 function handleProviderSetBinding(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const binding = p2;
   if (!binding.consumer || !binding.credentialId) {
     return { error: { code: "invalid_argument", message: "consumer and credentialId required" } };
@@ -74147,7 +74687,7 @@ function handleProviderSetBinding(payload, ctx) {
 function handleProviderClearBinding(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   ctx.providers.clearBinding(String(p2.consumer ?? ""));
   return { result: { ok: true } };
 }
@@ -74159,14 +74699,14 @@ function handleProviderListCustomPlatforms(ctx) {
 function handleProviderUpsertCustomPlatform(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const def = asRecord17(payload);
+  const def = asRecord18(payload);
   if (!def?.id) return { error: { code: "invalid_argument", message: "platform id required" } };
   return { result: ctx.providers.upsertCustomPlatform(def) };
 }
 function handleProviderDeleteCustomPlatform(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const ok = ctx.providers.deleteCustomPlatform(String(p2.id ?? ""));
   if (!ok) return { error: { code: "not_found", message: "custom platform not found" } };
   return { result: { ok: true } };
@@ -74179,7 +74719,7 @@ function handleProviderExportBundle(ctx) {
 function handleProviderListModels(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readEnvironment);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const harness = String(p2.harness ?? p2.harnessId ?? "claude");
   const apiProviderId = typeof p2.apiProviderId === "string" && p2.apiProviderId.trim() ? p2.apiProviderId.trim() : null;
   return {
@@ -74191,7 +74731,7 @@ function handleProviderListModels(payload, ctx) {
 function handleProviderImportBundle(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const bundle = p2.bundle && typeof p2.bundle === "object" ? p2.bundle : p2;
   const replaceAll = p2.replaceAll === true;
   try {
@@ -74256,7 +74796,7 @@ function handleHarnessList(ctx) {
 function handleHarnessShow(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const id = typeof p2.harnessId === "string" ? p2.harnessId : typeof p2.id === "string" ? p2.id : "";
   if (!isNodeHarnessId(id)) {
     return { error: { code: "invalid_argument", message: `unknown harnessId: ${id}` } };
@@ -74266,7 +74806,7 @@ function handleHarnessShow(payload, ctx) {
 function handleHarnessProbe(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const id = typeof p2.harnessId === "string" ? p2.harnessId : typeof p2.id === "string" ? p2.id : "";
   if (!isNodeHarnessId(id)) {
     return { error: { code: "invalid_argument", message: `unknown harnessId: ${id}` } };
@@ -74281,7 +74821,7 @@ function handleHarnessProbe(payload, ctx) {
 async function handleHarnessEnable(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const id = typeof p2.harnessId === "string" ? p2.harnessId : typeof p2.id === "string" ? p2.id : "";
   if (!isNodeHarnessId(id)) {
     return { error: { code: "invalid_argument", message: `unknown harnessId: ${id}` } };
@@ -74307,7 +74847,7 @@ async function handleHarnessEnable(payload, ctx) {
 function handleHarnessDisable(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const id = typeof p2.harnessId === "string" ? p2.harnessId : typeof p2.id === "string" ? p2.id : "";
   if (!isNodeHarnessId(id)) {
     return { error: { code: "invalid_argument", message: `unknown harnessId: ${id}` } };
@@ -74372,7 +74912,7 @@ function handleSettingsGet(ctx) {
 function handleSettingsPatch(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.adminNode);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const rawPatch = p2.patch && typeof p2.patch === "object" ? p2.patch : p2;
   try {
     const settings = patchNodeAgentSettings(
@@ -74393,13 +74933,13 @@ async function handleSandboxProbe(ctx) {
     return mapThrown7(err);
   }
 }
-function asRecord17(payload) {
+function asRecord18(payload) {
   return payload && typeof payload === "object" ? payload : {};
 }
 function handleTerminalCreate(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateTerminal);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const cwd = typeof p2.cwd === "string" ? p2.cwd : process.cwd();
   try {
     const info = ctx.terminals.create({
@@ -74424,7 +74964,7 @@ function handleTerminalCreate(payload, ctx) {
 function handleTerminalAttach(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateTerminal);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const terminalId = String(p2.terminalId ?? "");
   try {
     const attached = ctx.terminals.attach(terminalId);
@@ -74436,7 +74976,7 @@ function handleTerminalAttach(payload, ctx) {
 function handleTerminalRead(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateTerminal);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.terminals.readAfter(
@@ -74464,7 +75004,7 @@ function requireTerminalLease(payload, ctx, terminalId) {
 function handleTerminalWrite(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateTerminal);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const terminalId = String(p2.terminalId ?? "");
   const leaseErr = requireTerminalLease(p2, ctx, terminalId);
   if (leaseErr) return leaseErr;
@@ -74482,7 +75022,7 @@ function handleTerminalWrite(payload, ctx) {
 function handleTerminalResize(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateTerminal);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const terminalId = String(p2.terminalId ?? "");
   const leaseErr = requireTerminalLease(p2, ctx, terminalId);
   if (leaseErr) return leaseErr;
@@ -74498,7 +75038,7 @@ function handleTerminalResize(payload, ctx) {
 function handleTerminalKill(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateTerminal);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const terminalId = String(p2.terminalId ?? "");
   const leaseErr = requireTerminalLease(p2, ctx, terminalId);
   if (leaseErr) return leaseErr;
@@ -74512,7 +75052,7 @@ function handleTerminalKill(payload, ctx) {
 function handleTerminalAcquireControl(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateTerminal);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const terminalId = String(p2.terminalId ?? "");
   try {
     return {
@@ -74529,7 +75069,7 @@ function handleTerminalAcquireControl(payload, ctx) {
 function handleTerminalRenewControl(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateTerminal);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.leases.renew({
@@ -74546,7 +75086,7 @@ function handleTerminalRenewControl(payload, ctx) {
 function handleTerminalReleaseControl(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateTerminal);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     ctx.leases.release(
       String(p2.leaseId ?? ""),
@@ -74571,7 +75111,7 @@ function handleProjectList(ctx) {
 function handleProjectGet(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readProject);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const projectId = String(p2.projectId ?? "");
   return { result: ctx.projects.get(projectId) };
 }
@@ -74587,7 +75127,7 @@ function expandHostPath(path) {
 function handleProjectOpen(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.manageProject);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const path = expandHostPath(String(p2.path ?? ""));
   if (!path) {
     return { error: { code: "invalid_argument", message: "path is required" } };
@@ -74605,7 +75145,7 @@ function handleProjectOpen(payload, ctx) {
 function handleProjectRemove(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.manageProject);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const projectId = typeof p2.projectId === "string" && p2.projectId ? p2.projectId : void 0;
   const pathRaw = typeof p2.path === "string" && p2.path ? expandHostPath(p2.path) : void 0;
   if (!projectId && !pathRaw) {
@@ -74624,7 +75164,7 @@ function handleProjectRemove(payload, ctx) {
 function handleFsListDir(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const raw = String(p2.path ?? "");
   if (!raw || raw.includes("\0")) {
     return { error: { code: "invalid_argument", message: "path is required" } };
@@ -74650,7 +75190,7 @@ function handleFsListDir(payload, ctx) {
 function handleWorkspaceListDir(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceFs.listDir(String(p2.projectId ?? ""), String(p2.relativePath ?? "."))
@@ -74662,7 +75202,7 @@ function handleWorkspaceListDir(payload, ctx) {
 function handleWorkspaceListFiles(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: {
@@ -74680,7 +75220,7 @@ function handleWorkspaceListFiles(payload, ctx) {
 function handleWorkspaceListSkills(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceFs.listSkillsAndCommands(String(p2.projectId ?? ""))
@@ -74692,7 +75232,7 @@ function handleWorkspaceListSkills(payload, ctx) {
 function handleWorkspaceReadFile(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceFs.readFile(String(p2.projectId ?? ""), String(p2.relativePath ?? ""), {
@@ -74707,7 +75247,7 @@ function handleWorkspaceReadFile(payload, ctx) {
 function handleWorkspaceWriteFile(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const raw = typeof p2.content === "string" ? p2.content : String(p2.content ?? "");
   const encoding = p2.encoding === "base64" ? "base64" : "utf8";
   let content = raw;
@@ -74737,7 +75277,7 @@ function handleWorkspaceWriteFile(payload, ctx) {
 function handleWorkspaceSearch(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceFs.search(
@@ -74753,7 +75293,7 @@ function handleWorkspaceSearch(payload, ctx) {
 function handleWorkspaceRename(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceFs.rename(
@@ -74769,7 +75309,7 @@ function handleWorkspaceRename(payload, ctx) {
 function handleWorkspaceMove(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceFs.move(
@@ -74785,7 +75325,7 @@ function handleWorkspaceMove(payload, ctx) {
 function handleWorkspaceDelete(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceFs.delete(
@@ -74800,7 +75340,7 @@ function handleWorkspaceDelete(payload, ctx) {
 function handleWorkspaceMkdir(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceFs.mkdir(
@@ -74815,7 +75355,7 @@ function handleWorkspaceMkdir(payload, ctx) {
 function handleWorkspaceWatchStart(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     const events = [];
     const { watchId, cancel } = ctx.workspaceWatch.subscribe(
@@ -74836,7 +75376,7 @@ function handleWorkspaceWatchStart(payload, ctx) {
 function handleWorkspaceWatchPoll(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const watchId = String(p2.watchId ?? "");
   const buf = watchBuffers.get(watchId);
   if (!buf || buf.owner !== ctx.client.clientSessionId) {
@@ -74848,7 +75388,7 @@ function handleWorkspaceWatchPoll(payload, ctx) {
 function handleWorkspaceWatchStop(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const watchId = String(p2.watchId ?? "");
   const buf = watchBuffers.get(watchId);
   if (buf && buf.owner === ctx.client.clientSessionId) {
@@ -74860,7 +75400,7 @@ function handleWorkspaceWatchStop(payload, ctx) {
 function handleWorkspaceTailWatchStart(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     const offset = typeof p2.offset === "number" ? p2.offset : void 0;
     const absolutePath = typeof p2.absolutePath === "string" ? p2.absolutePath : void 0;
@@ -74878,7 +75418,7 @@ function handleWorkspaceTailWatchStart(payload, ctx) {
 function handleWorkspaceTailWatchPoll(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceTailWatch.poll(String(p2.watchId ?? ""), ctx.client.clientSessionId)
@@ -74890,7 +75430,7 @@ function handleWorkspaceTailWatchPoll(payload, ctx) {
 function handleWorkspaceTailWatchStop(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceTailWatch.stop(String(p2.watchId ?? ""), ctx.client.clientSessionId)
@@ -74902,7 +75442,7 @@ function handleWorkspaceTailWatchStop(payload, ctx) {
 function handleGitStatus(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     const projectId = String(p2.projectId ?? "");
     const cwd = typeof p2.cwd === "string" ? p2.cwd : null;
@@ -74916,7 +75456,7 @@ function handleGitStatus(payload, ctx) {
 function handleGitDiff(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceGit.diff(String(p2.projectId ?? ""), {
@@ -74931,7 +75471,7 @@ function handleGitDiff(payload, ctx) {
 function handleGitBranches(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceGit.branches(
@@ -74946,7 +75486,7 @@ function handleGitBranches(payload, ctx) {
 function handleGitSwitchBranch(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceGit.switchBranch(String(p2.projectId ?? ""), String(p2.branch ?? ""), {
@@ -74961,7 +75501,7 @@ function handleGitSwitchBranch(payload, ctx) {
 function handleGitCreateBranch(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceGit.switchBranch(String(p2.projectId ?? ""), String(p2.branch ?? ""), {
@@ -74976,7 +75516,7 @@ function handleGitCreateBranch(payload, ctx) {
 function handleGitWorktrees(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return { result: ctx.workspaceGit.worktrees(String(p2.projectId ?? "")) };
   } catch (err) {
@@ -74986,7 +75526,7 @@ function handleGitWorktrees(payload, ctx) {
 function handleGitWorktreeActivate(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const mode = p2.mode === "attach" || p2.mode === "detach" || p2.mode === "branch" ? p2.mode : null;
   if (!mode) {
     return { error: { code: "invalid_argument", message: "mode must be branch|attach|detach" } };
@@ -75007,7 +75547,7 @@ function handleGitWorktreeActivate(payload, ctx) {
 function handleGitWorktreeCheckedOutBranches(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return { result: { branches: ctx.workspaceGit.checkedOutBranches(String(p2.projectId ?? "")) } };
   } catch (err) {
@@ -75017,7 +75557,7 @@ function handleGitWorktreeCheckedOutBranches(payload, ctx) {
 function handleGitWorktreeAssignBranch(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceGit.assignBranch(
@@ -75033,7 +75573,7 @@ function handleGitWorktreeAssignBranch(payload, ctx) {
 function handleGitWorktreeHandoff(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceGit.handoffToMain(
@@ -75048,7 +75588,7 @@ function handleGitWorktreeHandoff(payload, ctx) {
 function handleGitWorktreeHandoffPreview(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.workspaceGit.handoffPreview(
@@ -75063,7 +75603,7 @@ function handleGitWorktreeHandoffPreview(payload, ctx) {
 function handleSessionSetCwd(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const sessionId = String(p2.sessionId ?? "");
   const cwdRaw = p2.cwd;
   const cwd = cwdRaw === null || cwdRaw === void 0 || cwdRaw === "" ? null : String(cwdRaw);
@@ -75092,7 +75632,7 @@ function handleSessionSetCwd(payload, ctx) {
 function handleSessionPatchSettings(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const sessionId = String(p2.sessionId ?? "").trim();
   if (!sessionId) {
     return { error: { code: "invalid_argument", message: "sessionId required" } };
@@ -75108,7 +75648,7 @@ function handleSessionPatchSettings(payload, ctx) {
       generation: String(p2.generation ?? ""),
       holderClientId: ctx.client.clientSessionId
     });
-    const settingsSrc = asRecord17(p2.settings ?? p2);
+    const settingsSrc = asRecord18(p2.settings ?? p2);
     const patch = {};
     const take = (key) => {
       if (!(key in settingsSrc)) return;
@@ -75134,7 +75674,7 @@ function handleSessionPatchSettings(payload, ctx) {
 async function handleSessionFork(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const sessionId = String(p2.sessionId ?? "").trim();
   if (!sessionId) {
     return { error: { code: "invalid_argument", message: "sessionId required" } };
@@ -75221,7 +75761,7 @@ async function handleSessionFork(payload, ctx) {
 async function handleGitClone(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.manageProject);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     const cloned = await cloneRepository({
       remoteUrl: String(p2.remoteUrl ?? ""),
@@ -75237,7 +75777,7 @@ async function handleGitClone(payload, ctx) {
 function handleSessionCreate(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const rawHarnessId = typeof p2.harnessId === "string" ? p2.harnessId : "claude";
   const harnessId = normalizeSessionHarnessId(rawHarnessId);
   if (!harnessId) {
@@ -75290,7 +75830,7 @@ function handleSessionCreate(payload, ctx) {
   try {
     const agentSettings = loadNodeAgentSettings(ctx.settingsConfigPath);
     const defaults = resolveAgentTurnDefaults(agentSettings, harnessId);
-    const options = asRecord17(p2.options);
+    const options = asRecord18(p2.options);
     const providerId = typeof p2.providerId === "string" && p2.providerId.trim() ? p2.providerId.trim() : void 0;
     const profile = providerId ? ctx.sessionProviders.get(providerId) : null;
     const profileSettings = profile ? settingsFromSessionProviderConfig(profile.config) : {};
@@ -75351,13 +75891,13 @@ function handleSessionCreate(payload, ctx) {
 function handleSessionGet(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   return { result: ctx.sessions.get(String(p2.sessionId ?? "")) };
 }
 function handleSessionList(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const projectId = typeof p2.projectId === "string" ? p2.projectId : void 0;
   if (typeof p2.limit !== "number" || !Number.isFinite(p2.limit)) {
     return { error: { code: "invalid_argument", message: "session.list requires finite limit" } };
@@ -75397,7 +75937,7 @@ function handleSessionList(payload, ctx) {
 function handleSessionAcquireControl(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const sessionId = String(p2.sessionId ?? "");
   if (!sessionId) {
     return { error: { code: "invalid_argument", message: "sessionId required" } };
@@ -75421,7 +75961,7 @@ function handleSessionAcquireControl(payload, ctx) {
 function handleSessionRenewControl(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     return {
       result: ctx.leases.renew({
@@ -75438,7 +75978,7 @@ function handleSessionRenewControl(payload, ctx) {
 function handleSessionReleaseControl(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     ctx.leases.release(
       String(p2.leaseId ?? ""),
@@ -75453,7 +75993,7 @@ function handleSessionReleaseControl(payload, ctx) {
 function handleSessionClose(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const sessionId = String(p2.sessionId ?? "");
   try {
     ctx.leases.assertValid({
@@ -75479,7 +76019,7 @@ function handleSessionClose(payload, ctx) {
 function handleSessionRemove(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const sessionId = String(p2.sessionId ?? "");
   if (!sessionId) {
     return { error: { code: "invalid_argument", message: "sessionId required" } };
@@ -75506,7 +76046,7 @@ function handleSessionRemove(payload, ctx) {
 function handleSessionRename(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const sessionId = String(p2.sessionId ?? "");
   const title = String(p2.title ?? "");
   const source = p2.source === "agent" ? "agent" : "user";
@@ -75522,7 +76062,7 @@ function handleSessionRename(payload, ctx) {
 function handleSessionSetTags(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const sessionId = String(p2.sessionId ?? "");
   if (!sessionId) {
     return { error: { code: "invalid_argument", message: "sessionId required" } };
@@ -75548,7 +76088,7 @@ function handleSessionSetTags(payload, ctx) {
 function handleSessionSetUiFlags(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const sessionId = String(p2.sessionId ?? "");
   if (!sessionId) {
     return { error: { code: "invalid_argument", message: "sessionId required" } };
@@ -75567,9 +76107,9 @@ function handleSessionSetUiFlags(payload, ctx) {
 async function handleSessionSend(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
-    const options = asRecord17(p2.options);
+    const options = asRecord18(p2.options);
     const modelFromOptions = typeof options.model === "string" && options.model.trim() ? options.model.trim() : null;
     const modelTopLevel = typeof p2.model === "string" && p2.model.trim() ? p2.model.trim() : null;
     const apiProviderId = typeof options.apiProviderId === "string" && options.apiProviderId.trim() ? options.apiProviderId.trim() : typeof p2.apiProviderId === "string" && p2.apiProviderId.trim() ? p2.apiProviderId.trim() : null;
@@ -75662,7 +76202,7 @@ async function handleSessionSend(payload, ctx) {
 function handleSessionInterrupt(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     ctx.sessions.interrupt(
       String(p2.sessionId ?? ""),
@@ -75678,7 +76218,7 @@ function handleSessionInterrupt(payload, ctx) {
 function handleSessionRespondPermission(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     const formAnswers = p2.formAnswers && typeof p2.formAnswers === "object" && !Array.isArray(p2.formAnswers) ? p2.formAnswers : p2.options && typeof p2.options === "object" && !Array.isArray(p2.options) ? p2.options.formAnswers ?? p2.options : void 0;
     ctx.sessions.respondPermission({
@@ -75699,7 +76239,7 @@ function handleSessionRespondPermission(payload, ctx) {
 function handleSessionRespondQuestion(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     ctx.sessions.respondQuestion({
       sessionId: String(p2.sessionId ?? ""),
@@ -75717,7 +76257,7 @@ function handleSessionRespondQuestion(payload, ctx) {
 function handleSessionRespondPlan(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const decision = p2.decision === "approve" || p2.decision === "reject" ? p2.decision : null;
   if (!decision) {
     return { error: { code: "invalid_argument", message: "decision must be approve|reject" } };
@@ -75740,7 +76280,7 @@ function handleSessionRespondPlan(payload, ctx) {
 async function handleSessionHostActionsPoll(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     const result = await ctx.sessions.pollHostActions({
       controllerClientSessionId: ctx.client.clientSessionId,
@@ -75756,7 +76296,7 @@ async function handleSessionHostActionsPoll(payload, ctx) {
 function handleSessionClaimHostAction(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   try {
     const result = ctx.sessions.claimHostAction({
       actionId: String(p2.actionId ?? ""),
@@ -75772,7 +76312,7 @@ function handleSessionClaimHostAction(payload, ctx) {
 function handleSessionRespondHostAction(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const outcome = p2.outcome === "failed" ? "failed" : p2.outcome === "succeeded" ? "succeeded" : null;
   if (!outcome) {
     return { error: { code: "invalid_argument", message: "outcome must be succeeded|failed" } };
@@ -75794,14 +76334,14 @@ function handleSessionRespondHostAction(payload, ctx) {
 function handleSessionEvents(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const after = String(p2.afterSequence ?? "0");
   return { result: { events: ctx.sessions.listEventsAfter(after) } };
 }
 function handleSessionMessagesList(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const sessionId = String(p2.sessionId ?? "").trim();
   if (!sessionId) {
     return { error: { code: "invalid_argument", message: "sessionId required" } };
@@ -75840,7 +76380,7 @@ function handleCollaborationListProfiles(ctx) {
 async function handleCollaborationRequest(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const parentSessionId = String(p2.parentSessionId ?? "");
   if (!parentSessionId) {
     return { error: { code: "invalid_argument", message: "parentSessionId required" } };
@@ -75874,7 +76414,7 @@ async function handleCollaborationRequest(payload, ctx) {
 async function handleCollaborationStart(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const credential = typeof p2.credential === "string" ? p2.credential : void 0;
   const grantId = typeof p2.grantId === "string" ? p2.grantId : void 0;
   if (!credential && !grantId) {
@@ -75920,7 +76460,7 @@ async function handleCollaborationStart(payload, ctx) {
 function handleCollaborationSend(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const credential = String(p2.credential ?? "");
   const sessionId = String(p2.sessionId ?? p2.fromSessionId ?? "");
   const content = typeof p2.content === "string" ? p2.content : p2.body !== void 0 ? typeof p2.body === "string" ? p2.body : JSON.stringify(p2.body) : "";
@@ -75956,7 +76496,7 @@ function handleCollaborationSend(payload, ctx) {
 function handleCollaborationRetrieve(payload, ctx) {
   const denied = requireScopes7(ctx.client, OPERATION_SCOPES.readSession);
   if (denied) return denied;
-  const p2 = asRecord17(payload);
+  const p2 = asRecord18(payload);
   const credential = String(p2.credential ?? "");
   const sessionId = String(p2.sessionId ?? "");
   if (!credential) {
@@ -76802,7 +77342,7 @@ function requiredRuntimeVersion(harnessId, manifest) {
 import { existsSync as existsSync29, mkdirSync as mkdirSync18, readFileSync as readFileSync17, readdirSync as readdirSync10, statSync as statSync9, writeFileSync as writeFileSync13 } from "node:fs";
 import { arch as osArch2, platform as osPlatform2 } from "node:os";
 import { join as join27, resolve as resolve7 } from "node:path";
-var OFFICIAL_CLAUDE_SDK_VERSION = "0.3.232";
+var OFFICIAL_CLAUDE_SDK_VERSION = "0.3.238";
 var OFFICIAL_CODEX_NPM_VERSION = "0.147.0";
 var OFFICIAL_CODEX_PACKAGE = "@openai/codex";
 function codexPlatformPackageVersion(baseVersion = OFFICIAL_CODEX_NPM_VERSION) {
@@ -94751,6 +95291,7 @@ async function startNodeRuntime(partial2 = {}) {
     allowSimulatedFallback: allowSimulatedTurnFallback,
     providers,
     experimentalClaudeOpenAiChatEnabled: () => loadNodeAgentSettings(paths.configJson).experimentalClaudeOpenAiChatEnabled,
+    askUserQuestionPreviewFormat: () => loadNodeAgentSettings(paths.configJson).claude.askUserQuestionPreviewFormat,
     // Claude: in-process SDK MCP (same core tools as HTTP).
     createHostActionClaudeMcp: (sessionId) => hostActionMcp.createClaudeSdkMcp(sessionId),
     // Codex / ACP / OpenCode: loopback HTTP with per-session HMAC.