@super-one/cli 0.69.0 → 0.70.0

package/MANIFEST.json

@@ -1,7 +1,7 @@
 {
   "name": "@super-one/cli",
-  "version": "0.69.0",
+  "version": "0.70.0",
   "kind": "npm",
   "minNodeMajor": 20,
-  "builtAt": "2026-09-26T10:22:28.275Z"
+  "builtAt": "2026-09-30T02:29:21.399Z"
 }

package/README.md

@@ -41,4 +41,4 @@ bun run pack:cli -- --dry-run    # npm pack only
 
 - Local remote lab (host credentials, no Docker): [`docs/local-remote-lab.md`](./docs/local-remote-lab.md)
 - Docker SSH lab: [`docker/README.md`](./docker/README.md)
-- Design: `docs/design/remote-node-service.md` §15 (registry vs upload install)
+- Design: `docs/architecture/remote-node-service.md` §15 (registry vs upload install)

package/lib/cli.mjs

@@ -359,7 +359,7 @@ var init_interaction_memory = __esm({
 });
 
 // ../../packages/shared/src/superone-tool-descriptions.ts
-var MANUAL_READ_DESCRIPTION, SETUP_MINI_APP_DEV_DESCRIPTION, REGISTER_DEV_MINIAPP_DESCRIPTION, PACK_MINI_APP_DESCRIPTION, UPDATE_SUPERONE_TYPES_DESCRIPTION, RENAME_SESSION_DESCRIPTION, SESSION_TAG_DESCRIPTION, SESSION_TAG_LIST_DESCRIPTION, PROJECT_LIST_DESCRIPTION, SESSION_LIST_DESCRIPTION, SESSION_SEARCH_DESCRIPTION, SESSION_READ_DESCRIPTION, SESSION_TAGS_FILTER_DESCRIPTION, SESSION_TAG_MATCH_DESCRIPTION, SESSION_CLEANUP_DESCRIPTION, CONFIG_READ_DESCRIPTION, CONFIG_APPLY_DESCRIPTION, LIST_MEDIA_PROVIDERS_DESCRIPTION, GENERATE_IMAGE_DESCRIPTION, GENERATE_VIDEO_DESCRIPTION, VIDEO_STATUS_DESCRIPTION, SESSION_LIST_AGENTS_DESCRIPTION, SESSION_REQUEST_AGENTS_DESCRIPTION, LAUNCH_SUMMARY_DESCRIPTION, START_LAUNCH_ID_DESCRIPTION, LAUNCH_TASK_DESCRIPTION, LAUNCH_MODE_DESCRIPTION, LAUNCH_SESSION_ID_DESCRIPTION, LAUNCH_PERMISSION_MODE_DESCRIPTION, LAUNCH_CWD_DESCRIPTION, LAUNCH_WORKTREE_DESCRIPTION, LAUNCH_BRANCH_NAME_DESCRIPTION, SESSION_START_DESCRIPTION, SESSION_SEND_DESCRIPTION, SESSION_SEND_TO_DESCRIPTION, SESSION_SEND_CONTENT_DESCRIPTION, SESSION_RETRIEVE_DESCRIPTION, SESSION_RETRIEVE_FROM_DESCRIPTION, AUTOMATION_LIST_DESCRIPTION, AUTOMATION_APPLY_DESCRIPTION, AUTOMATION_DELETE_DESCRIPTION, TERMINAL_TABS_DESCRIPTION, TERMINAL_SNAPSHOT_DESCRIPTION, TERMINAL_ACT_DESCRIPTION, TERMINAL_WAIT_FOR_DESCRIPTION;
+var MANUAL_READ_DESCRIPTION, SETUP_MINI_APP_DEV_DESCRIPTION, REGISTER_DEV_MINIAPP_DESCRIPTION, PACK_MINI_APP_DESCRIPTION, UPDATE_SUPERONE_TYPES_DESCRIPTION, MINIAPP_DEV_PREVIEW_DESCRIPTION, MINIAPP_DEV_RELOAD_DESCRIPTION, MINIAPP_DEV_PREVIEW_INPUT_SCHEMA, MINIAPP_DEV_RELOAD_INPUT_SCHEMA, RENAME_SESSION_DESCRIPTION, SESSION_TAG_DESCRIPTION, SESSION_TAG_LIST_DESCRIPTION, PROJECT_LIST_DESCRIPTION, SESSION_LIST_DESCRIPTION, SESSION_SEARCH_DESCRIPTION, SESSION_READ_DESCRIPTION, SESSION_TAGS_FILTER_DESCRIPTION, SESSION_TAG_MATCH_DESCRIPTION, SESSION_CLEANUP_DESCRIPTION, CONFIG_READ_DESCRIPTION, CONFIG_APPLY_DESCRIPTION, LIST_MEDIA_PROVIDERS_DESCRIPTION, GENERATE_IMAGE_DESCRIPTION, GENERATE_VIDEO_DESCRIPTION, VIDEO_STATUS_DESCRIPTION, SESSION_LIST_AGENTS_DESCRIPTION, SESSION_REQUEST_AGENTS_DESCRIPTION, LAUNCH_SUMMARY_DESCRIPTION, START_LAUNCH_ID_DESCRIPTION, LAUNCH_TASK_DESCRIPTION, LAUNCH_MODE_DESCRIPTION, LAUNCH_SESSION_ID_DESCRIPTION, LAUNCH_PERMISSION_MODE_DESCRIPTION, LAUNCH_CWD_DESCRIPTION, LAUNCH_WORKTREE_DESCRIPTION, LAUNCH_BRANCH_NAME_DESCRIPTION, SESSION_START_DESCRIPTION, SESSION_SEND_DESCRIPTION, SESSION_SEND_TO_DESCRIPTION, SESSION_SEND_CONTENT_DESCRIPTION, SESSION_RETRIEVE_DESCRIPTION, SESSION_RETRIEVE_FROM_DESCRIPTION, AUTOMATION_LIST_DESCRIPTION, AUTOMATION_APPLY_DESCRIPTION, AUTOMATION_DELETE_DESCRIPTION, TERMINAL_TABS_DESCRIPTION, TERMINAL_SNAPSHOT_DESCRIPTION, TERMINAL_ACT_DESCRIPTION, TERMINAL_WAIT_FOR_DESCRIPTION;
 var init_superone_tool_descriptions = __esm({
   "../../packages/shared/src/superone-tool-descriptions.ts"() {
     "use strict";
@@ -368,6 +368,30 @@ var init_superone_tool_descriptions = __esm({
     REGISTER_DEV_MINIAPP_DESCRIPTION = "Register an existing mini-app directory without modifying its source files. Reads manifest.json from the directory or dist, updates dev-registry.json in the variant-specific personal data root, and optionally writes a project- or user-scoped .s1-dev.json pointer.";
     PACK_MINI_APP_DESCRIPTION = "Package a mini-app directory into a .s1app file for distribution. The app directory must contain a valid manifest.json with a version field. Generates integrity checksums and creates a compressed archive.";
     UPDATE_SUPERONE_TYPES_DESCRIPTION = "Update the superone.d.ts type definitions in an existing mini-app project to the latest version. Use this when the mini-app needs access to newly added SuperOne APIs.";
+    MINIAPP_DEV_PREVIEW_DESCRIPTION = "Render a development mini-app tool's chat UI (intercept, result, or standalone template) from fixture input/result without running the tool. Returns a view id to pass as tab to browser_* tools for snapshots, clicks, screenshots, and console. Intercept submit/cancel and result close are logged as info console entries instead of executing. A new call replaces the app's previous preview. Workflow: read_manual miniapp/debugging.";
+    MINIAPP_DEV_RELOAD_DESCRIPTION = "Reload a development mini-app after editing it (build first if it has a build step): restarts its MiniApp Host so changed main code loads, refreshes manifest tools and templates, and reloads its open WebViews. Then inspect them with browser_* tools via miniapp: view ids.";
+    MINIAPP_DEV_PREVIEW_INPUT_SCHEMA = {
+      type: "object",
+      properties: {
+        appId: { type: "string", description: "Development mini-app id." },
+        tool: { type: "string", description: "Tool name from the manifest; it must declare a renderer." },
+        phase: { type: "string", enum: ["intercept", "result", "standalone"], description: "UI to render. Defaults to the result UI (standalone for standalone tools)." },
+        input: { type: "object", description: "Fixture tool input (intercept data and standalone args)." },
+        result: { description: "Fixture tool result for result and standalone UIs." },
+        running: { type: "boolean", description: "Standalone only: render the in-progress state (no result yet)." },
+        width: { type: "integer", minimum: 240, maximum: 1600, description: "Max width in px, to check narrow chat columns." }
+      },
+      required: ["appId", "tool"],
+      additionalProperties: false
+    };
+    MINIAPP_DEV_RELOAD_INPUT_SCHEMA = {
+      type: "object",
+      properties: {
+        appId: { type: "string", description: "Development mini-app id." }
+      },
+      required: ["appId"],
+      additionalProperties: false
+    };
     RENAME_SESSION_DESCRIPTION = "Rename the current chat session to a concise topic label shown in the sidebar. Always pass tags (set): 1\u20134 short kebab-case labels you choose so session_list/session_search can find this chat. Reuse names from session_tag_list when they fit; invent one when they don't. When the session fixes an issue, reviews a PR, or opens one, add a ref tag issue-N / pr-N on top of the labels. Top-level agent only \u2014 a Task/subagent worker does not own the user-facing title and must not call it.";
     SESSION_TAG_DESCRIPTION = "Tag SuperOne sessions so session_list/session_search can filter by tag. Default: current session. Pass sessionId for one other session, or sessionIds with add to tag many. Use add, remove, or set (exactly one). set: [] clears. Pick 1\u20134 short kebab-case labels; reuse names from session_tag_list when they fit, otherwise invent. Add pr-N as soon as the session opens a PR, and issue-N / pr-N when work turns out to target one. Only the top-level agent may call this; subagents must not. Not session_rename (titles) and not live collab.";
     SESSION_TAG_LIST_DESCRIPTION = "List session tags and counts. Default: current project; projectId or allProjects changes scope. kind: label (default) = topic labels to reuse; ref = issue-N / pr-N tracker references; all = both. Use query for a tag substring. Discover unknown label tags here before filtering session_list/session_search; reuse known tags, and a known ref tag (pr-456) needs no lookup. Filter with tagMatch any or all. Hidden sessions are omitted unless includeHidden.";
@@ -919,6 +943,16 @@ var init_host_action_setup_descriptors = __esm({
           ],
           "additionalProperties": false
         }
+      },
+      {
+        "name": "miniapp_dev_preview",
+        "description": MINIAPP_DEV_PREVIEW_DESCRIPTION,
+        "inputSchema": MINIAPP_DEV_PREVIEW_INPUT_SCHEMA
+      },
+      {
+        "name": "miniapp_dev_reload",
+        "description": MINIAPP_DEV_RELOAD_DESCRIPTION,
+        "inputSchema": MINIAPP_DEV_RELOAD_INPUT_SCHEMA
       }
     ];
   }
@@ -1517,7 +1551,7 @@ var init_host_action_browser_descriptors = __esm({
           "type": "object",
           "properties": {
             "tab": {
-              "description": "Browser view id. Omit to target the focused browser view (errors if multiple are open).",
+              "description": "Browser view id, or a development mini-app view id: miniapp:<appId> for its panel, or one returned by miniapp_dev_preview or browser_tabs. Omit to target the focused browser view (errors if multiple are open).",
               "type": "string"
             }
           },
@@ -1531,7 +1565,7 @@ var init_host_action_browser_descriptors = __esm({
           "type": "object",
           "properties": {
             "tab": {
-              "description": "Browser view id. Omit to target the focused browser view (errors if multiple are open).",
+              "description": "Browser view id, or a development mini-app view id: miniapp:<appId> for its panel, or one returned by miniapp_dev_preview or browser_tabs. Omit to target the focused browser view (errors if multiple are open).",
               "type": "string"
             },
             "description": {
@@ -1565,7 +1599,7 @@ var init_host_action_browser_descriptors = __esm({
           "type": "object",
           "properties": {
             "tab": {
-              "description": "Browser view id. Omit to target the focused browser view (errors if multiple are open).",
+              "description": "Browser view id, or a development mini-app view id: miniapp:<appId> for its panel, or one returned by miniapp_dev_preview or browser_tabs. Omit to target the focused browser view (errors if multiple are open).",
               "type": "string"
             },
             "description": {
@@ -1660,7 +1694,7 @@ var init_host_action_browser_descriptors = __esm({
           "type": "object",
           "properties": {
             "tab": {
-              "description": "Browser view id. Omit to target the focused browser view (errors if multiple are open).",
+              "description": "Browser view id, or a development mini-app view id: miniapp:<appId> for its panel, or one returned by miniapp_dev_preview or browser_tabs. Omit to target the focused browser view (errors if multiple are open).",
               "type": "string"
             },
             "description": {
@@ -1733,7 +1767,7 @@ var init_host_action_browser_descriptors = __esm({
           "type": "object",
           "properties": {
             "tab": {
-              "description": "Browser view id. Omit to target the focused browser view (errors if multiple are open).",
+              "description": "Browser view id, or a development mini-app view id: miniapp:<appId> for its panel, or one returned by miniapp_dev_preview or browser_tabs. Omit to target the focused browser view (errors if multiple are open).",
               "type": "string"
             },
             "description": {
@@ -1773,7 +1807,7 @@ var init_host_action_browser_descriptors = __esm({
           "type": "object",
           "properties": {
             "tab": {
-              "description": "Browser view id. Omit to target the focused browser view (errors if multiple are open).",
+              "description": "Browser view id, or a development mini-app view id: miniapp:<appId> for its panel, or one returned by miniapp_dev_preview or browser_tabs. Omit to target the focused browser view (errors if multiple are open).",
               "type": "string"
             },
             "description": {
@@ -1864,7 +1898,7 @@ var init_host_action_browser_descriptors = __esm({
           "type": "object",
           "properties": {
             "tab": {
-              "description": "Browser view id. Omit to target the focused browser view (errors if multiple are open).",
+              "description": "Browser view id, or a development mini-app view id: miniapp:<appId> for its panel, or one returned by miniapp_dev_preview or browser_tabs. Omit to target the focused browser view (errors if multiple are open).",
               "type": "string"
             },
             "description": {
@@ -2055,7 +2089,7 @@ var init_host_action_browser_descriptors = __esm({
           "type": "object",
           "properties": {
             "tab": {
-              "description": "Browser view id. Omit to target the focused browser view (errors if multiple are open).",
+              "description": "Browser view id, or a development mini-app view id: miniapp:<appId> for its panel, or one returned by miniapp_dev_preview or browser_tabs. Omit to target the focused browser view (errors if multiple are open).",
               "type": "string"
             },
             "description": {
@@ -4063,7 +4097,7 @@ var init_host_action_browser_perf_descriptors = __esm({
           "type": "object",
           "properties": {
             "tab": {
-              "description": "Browser view id. Omit to target the focused browser view (errors if multiple are open).",
+              "description": "Browser view id, or a development mini-app view id: miniapp:<appId> for its panel, or one returned by miniapp_dev_preview or browser_tabs. Omit to target the focused browser view (errors if multiple are open).",
               "type": "string"
             },
             "description": {
@@ -7474,7 +7508,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net2 = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes6, createHash: createHash12 } = __require("crypto");
+    var { randomBytes: randomBytes6, createHash: createHash13 } = __require("crypto");
     var { Duplex, Readable: Readable4 } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -8142,7 +8176,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash12("sha1").update(key + GUID).digest("base64");
+        const digest = createHash13("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -8511,7 +8545,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash12 } = __require("crypto");
+    var { createHash: createHash13 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -8818,7 +8852,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash12("sha1").update(key + GUID).digest("base64");
+        const digest = createHash13("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -10801,6 +10835,115 @@ var init_app_server_client = __esm({
   }
 });
 
+// ../../packages/shared/src/subscription-usage.ts
+function sameUsageReset(a, b3) {
+  return a === b3 || a != null && b3 != null && Math.abs(a - b3) * 1e3 <= USAGE_RESET_TOLERANCE_MS;
+}
+function usageRisk(window2, now = Date.now()) {
+  const { forecast, resetsAt, usedPercent } = window2;
+  if (resetsAt != null && resetsAt * 1e3 <= now) return "unknown";
+  if (!forecast || now - forecast.sampledAt > USAGE_FRESH_MS || forecast.sampledAt > now + 6e4) return "unknown";
+  if (usedPercent >= 100) return "exhausted";
+  if (forecast.status !== "ready" || forecast.exhaustsAt == null || resetsAt == null) return "unknown";
+  const untilReset = resetsAt * 1e3 - now;
+  const untilEmpty = forecast.exhaustsAt - now;
+  if (untilEmpty >= untilReset * 1.2) return "safe";
+  if (untilEmpty >= untilReset * 0.8) return "watch";
+  return untilEmpty <= 30 * 6e4 ? "critical" : "risk";
+}
+function forecastUsage(samples) {
+  const last = samples.at(-1);
+  const learning = { sampledAt: last?.at ?? 0, status: "learning", ratePerHour: null, exhaustsAt: null, confirmed: false };
+  if (!last || samples.length < 4 || last.at - samples[0].at < 15 * 6e4) return learning;
+  let weightedUsage = 0;
+  let weightedHours = 0;
+  let lastIncrease = samples[0].at;
+  for (let i = 1; i < samples.length; i++) {
+    const previous = samples[i - 1];
+    const sample = samples[i];
+    const delta = sample.usedPercent - previous.usedPercent;
+    const hours = (sample.at - previous.at) / 36e5;
+    if (hours <= 0 || delta < 0) return learning;
+    if (delta > 0) lastIncrease = sample.at;
+    const weight = Math.pow(0.5, (last.at - sample.at) / (20 * 6e4));
+    weightedUsage += delta * weight;
+    weightedHours += hours * weight;
+  }
+  if (last.at - lastIncrease >= 20 * 6e4) return { ...learning, status: "idle" };
+  if (last.usedPercent - samples[0].usedPercent < 1 || weightedHours <= 0) return learning;
+  const ratePerHour = weightedUsage / weightedHours;
+  return {
+    ...learning,
+    status: "ready",
+    ratePerHour,
+    exhaustsAt: last.at + Math.max(0, 100 - last.usedPercent) / ratePerHour * 36e5
+  };
+}
+var USAGE_POLL_MS, USAGE_FRESH_MS, USAGE_HISTORY_MS, USAGE_RESET_TOLERANCE_MS, SubscriptionUsageTracker;
+var init_subscription_usage = __esm({
+  "../../packages/shared/src/subscription-usage.ts"() {
+    "use strict";
+    USAGE_POLL_MS = 5 * 6e4;
+    USAGE_FRESH_MS = 10 * 6e4;
+    USAGE_HISTORY_MS = 60 * 6e4;
+    USAGE_RESET_TOLERANCE_MS = 6e4;
+    SubscriptionUsageTracker = class {
+      history = /* @__PURE__ */ new Map();
+      observe(accountKey, window2, sampledAt) {
+        const key = JSON.stringify([accountKey, window2.id ?? window2.label]);
+        let entry = this.history.get(key);
+        const last = entry?.samples.at(-1);
+        if (!Number.isFinite(sampledAt) || !Number.isFinite(window2.usedPercent) || window2.usedPercent < 0 || window2.usedPercent > 100 || window2.resetsAt != null && !Number.isFinite(window2.resetsAt)) {
+          this.history.delete(key);
+          return { ...window2, forecast: { sampledAt, status: "learning", ratePerHour: null, exhaustsAt: null, confirmed: false } };
+        }
+        if (last && sampledAt <= last.at) return { ...window2, usedPercent: last.usedPercent, resetsAt: last.resetsAt, forecast: entry.forecast };
+        const restarted = !last || !sameUsageReset(last.resetsAt, window2.resetsAt) || sampledAt - last.at > 15 * 6e4 || window2.usedPercent < last.usedPercent;
+        if (restarted) entry = void 0;
+        if (entry && last && sampledAt - last.at < 6e4) return { ...window2, forecast: window2.usedPercent === last.usedPercent ? entry.forecast : { sampledAt, status: "learning", ratePerHour: null, exhaustsAt: null, confirmed: false } };
+        const samples = [...entry?.samples ?? [], { at: sampledAt, usedPercent: window2.usedPercent, resetsAt: window2.resetsAt }].filter((sample) => sampledAt - sample.at <= USAGE_HISTORY_MS).slice(-61);
+        const forecast = forecastUsage(samples);
+        const risk = usageRisk({ ...window2, forecast }, sampledAt);
+        forecast.confirmed = risk !== "unknown" && entry?.risk === risk;
+        this.history.delete(key);
+        this.history.set(key, { samples, forecast, risk });
+        for (const [id, value] of this.history) {
+          if (sampledAt - value.forecast.sampledAt > USAGE_HISTORY_MS || this.history.size > 256) this.history.delete(id);
+        }
+        return { ...window2, forecast };
+      }
+    };
+  }
+});
+
+// ../../packages/codex/src/subscription-usage.ts
+import { createHash as createHash2 } from "node:crypto";
+function trackCodexSubscription(limits, account, scope) {
+  const fetchedAt = Date.now();
+  if (!account || typeof account.email !== "string") return { ...limits, fetchedAt };
+  const quotaKey = `codex:${createHash2("sha256").update(JSON.stringify([
+    scope,
+    account.id ?? account.accountId ?? "",
+    account.email,
+    account.planType ?? limits.planType
+  ])).digest("hex")}`;
+  const track = (window2, slot) => {
+    if (!window2) return null;
+    const id = `${slot}:${window2.windowDurationMins ?? "unknown"}`;
+    const observed = history.observe(quotaKey, { ...window2, id, label: id }, fetchedAt);
+    return { ...window2, id, usedPercent: observed.usedPercent, resetsAt: observed.resetsAt, forecast: observed.forecast };
+  };
+  return { ...limits, quotaKey, fetchedAt, primary: track(limits.primary, "primary"), secondary: track(limits.secondary, "secondary") };
+}
+var history;
+var init_subscription_usage2 = __esm({
+  "../../packages/codex/src/subscription-usage.ts"() {
+    "use strict";
+    init_subscription_usage();
+    history = new SubscriptionUsageTracker();
+  }
+});
+
 // ../../packages/codex/src/codex-admin.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
 function normalizeApiKey(value) {
@@ -11001,10 +11144,14 @@ function summarizeImportResults(raw) {
   }
   return { successCount, failureCount };
 }
-async function readRateLimits(client3) {
+async function readRateLimits(client3, scope = "cli") {
   try {
-    const result = await client3.request("account/rateLimits/read");
-    return parseRateLimits(result);
+    const [result, identity] = await Promise.all([
+      client3.request("account/rateLimits/read"),
+      client3.request("account/read", { refreshToken: false }).catch(() => null)
+    ]);
+    const limits = parseRateLimits(result);
+    return limits ? trackCodexSubscription(limits, asRecord6(identity?.account), scope) : null;
   } catch (err) {
     throw safePublicError("account/rateLimits/read failed", err);
   }
@@ -11203,6 +11350,7 @@ var init_codex_admin = __esm({
   "../../packages/codex/src/codex-admin.ts"() {
     "use strict";
     init_app_server_client();
+    init_subscription_usage2();
   }
 });
 
@@ -11359,24 +11507,53 @@ var init_account_manager = __esm({
 });
 
 // ../../packages/codex/src/fork-thread.ts
+async function resolveBeforeTurnId(request, threadId, drop) {
+  let remaining = drop;
+  let beforeTurnId;
+  let cursor;
+  const seenCursors = /* @__PURE__ */ new Set();
+  do {
+    const page2 = await request("thread/turns/list", {
+      threadId,
+      sortDirection: "desc",
+      itemsView: "notLoaded",
+      limit: Math.min(remaining, 100),
+      ...cursor ? { cursor } : {}
+    });
+    const turns = Array.isArray(page2.data) ? page2.data : [];
+    for (const turn of turns.slice(0, remaining)) {
+      const id = turn?.id;
+      if (typeof id !== "string" || !id) throw new Error("Codex fork boundary has no turn id");
+      beforeTurnId = id;
+      remaining -= 1;
+    }
+    cursor = typeof page2.nextCursor === "string" && page2.nextCursor ? page2.nextCursor : void 0;
+    if (remaining > 0 && cursor) {
+      if (!turns.length || seenCursors.has(cursor)) throw new Error("Codex fork boundary pagination did not advance");
+      seenCursors.add(cursor);
+    }
+  } while (remaining > 0 && cursor);
+  if (!beforeTurnId) throw new Error("Codex fork boundary could not be resolved from source history");
+  return beforeTurnId;
+}
 async function forkCodexThread(input) {
   const threadId = input.threadId?.trim();
   if (!threadId) {
     throw new Error("Codex thread id is required to fork");
   }
+  const drop = input.lastTurnId ? 0 : Math.max(0, input.dropTrailingTurns ?? 0);
+  if (!Number.isSafeInteger(drop)) throw new Error("Codex trailing-turn count must be a finite integer");
+  const beforeTurnId = drop > 0 ? await resolveBeforeTurnId(input.request, threadId, drop) : void 0;
   const forked = await input.request("thread/fork", {
     threadId,
-    ...input.lastTurnId ? { lastTurnId: input.lastTurnId } : {}
+    ...input.lastTurnId ? { lastTurnId: input.lastTurnId } : {},
+    ...beforeTurnId ? { beforeTurnId } : {}
   });
   const thread = forked.thread;
   const newThreadId = typeof thread?.id === "string" ? thread.id : null;
   if (!newThreadId) {
     throw new Error("Codex thread/fork did not return a thread id");
   }
-  const drop = input.lastTurnId ? 0 : Math.max(0, input.dropTrailingTurns ?? 0);
-  if (drop > 0) {
-    await input.request("thread/rollback", { threadId: newThreadId, numTurns: drop });
-  }
   return newThreadId;
 }
 var init_fork_thread = __esm({
@@ -11515,6 +11692,8 @@ var init_superone_host_owned_tools = __esm({
       "miniapp_dev_register",
       "miniapp_dev_pack",
       "miniapp_dev_update_types",
+      "miniapp_dev_preview",
+      "miniapp_dev_reload",
       "session_rename",
       "session_tag",
       "session_tag_list",
@@ -11862,7 +12041,7 @@ var init_harness_capabilities = __esm({
         displayName: "Cursor"
       },
       dsh: {
-        // In-process dsh Cordis tree (docs/draft/deepseek-harness-integration.md).
+        // In-process dsh Cordis tree (docs/harness/dsh/deepseek-harness-integration.md).
         // Flags flip only when the corresponding event path is wired.
         // `supportsStreamingToolInput`: live `tool-call-delta` frames open the row
         // and stream its arguments before the durable `tool/call` completes it.
@@ -13405,6 +13584,9 @@ var init_claude_live_session = __esm({
       bridge = new MessageBridge();
       pending = [];
       active = null;
+      ambient = null;
+      backgroundTaskIds = /* @__PURE__ */ new Set();
+      idleSystemMapper = null;
       sdkSessionId;
       closed = false;
       iterationDone;
@@ -13431,7 +13613,26 @@ var init_claude_live_session = __esm({
         return this.sdkSessionId;
       }
       get isBusy() {
-        return this.active != null;
+        return this.active != null || this.ambient != null;
+      }
+      get hasActiveBackgroundTasks() {
+        return this.backgroundTaskIds.size > 0;
+      }
+      trackBackgroundTasks(msg) {
+        if (msg.type !== "system") return;
+        const system = msg;
+        if (system.subtype === "task_started" && system.task_id && system.ambient !== true) {
+          this.backgroundTaskIds.add(system.task_id);
+        } else if (system.subtype === "task_notification" && system.task_id) {
+          this.backgroundTaskIds.delete(system.task_id);
+        } else if (system.subtype === "task_updated" && system.task_id && (system.patch?.status === "completed" || system.patch?.status === "failed" || system.patch?.status === "killed")) {
+          this.backgroundTaskIds.delete(system.task_id);
+        } else if (system.subtype === "background_tasks_changed") {
+          this.backgroundTaskIds.clear();
+          for (const task of system.tasks ?? []) {
+            if (task.task_id && task.ambient !== true) this.backgroundTaskIds.add(task.task_id);
+          }
+        }
       }
       /**
        * Send one user turn on the long-lived query.
@@ -13444,7 +13645,7 @@ var init_claude_live_session = __esm({
         }
         const tag = input.clientMessageId || randomUUID3();
         const sessionId = this.sdkSessionId || "";
-        const priorityNext = input.priorityNext !== false && this.active != null;
+        const priorityNext = input.priorityNext !== false && this.isBusy;
         const msg = toUserMessage(input.content, sessionId, priorityNext);
         return new Promise((resolve17, reject) => {
           if (input.signal?.aborted) {
@@ -13466,7 +13667,7 @@ var init_claude_live_session = __esm({
             }
           };
           input.signal?.addEventListener("abort", onAbort, { once: true });
-          if (this.active) {
+          if (this.isBusy) {
             this.pending.push({ tag, msg, input, resolve: resolve17, reject });
             return;
           }
@@ -13483,6 +13684,8 @@ var init_claude_live_session = __esm({
           this.active.reject(new Error("Claude live session disposed"));
           this.active = null;
         }
+        this.ambient = null;
+        this.backgroundTaskIds.clear();
         this.bridge.close();
         this.processAbort.abort();
         await this.iterationDone.catch(() => void 0);
@@ -13494,6 +13697,7 @@ var init_claude_live_session = __esm({
         this.planHandler = item.input.onPlan;
         this.active = {
           tag: item.tag,
+          userUuid: item.msg.uuid ?? item.tag,
           messageId,
           input: item.input,
           resolve: item.resolve,
@@ -13509,7 +13713,7 @@ var init_claude_live_session = __esm({
         this.bridge.push(item.msg, item.tag);
       }
       flushPending() {
-        if (this.active || this.closed) return;
+        if (this.isBusy || this.closed) return;
         const next = this.pending.shift();
         if (!next) return;
         this.startTurn(next);
@@ -13532,12 +13736,61 @@ var init_claude_live_session = __esm({
         }
         this.flushPending();
       }
+      applyAmbientMessage(msg) {
+        if (!this.ambient && ((msg.type === "assistant" || msg.type === "stream_event") && !msg.parent_tool_use_id)) {
+          const messageId = `ambient-${randomUUID3()}`;
+          this.opts.onAmbientEvent?.({
+            type: "message_start",
+            message: { id: messageId, role: "assistant", status: "streaming", content: [], createdAt: (/* @__PURE__ */ new Date()).toISOString(), providerId: "claude" }
+          });
+          this.opts.onAmbientEvent?.({ type: "status_change", status: "streaming" });
+          this.ambient = {
+            messageId,
+            mapper: createClaudeAgentEventMapper({ messageId, emit: (event) => this.opts.onAmbientEvent?.(event) })
+          };
+        }
+        if (!this.ambient) return;
+        const applied = this.ambient.mapper.apply(msg);
+        if (applied.sessionId) this.sdkSessionId = applied.sessionId;
+        if (applied.isResult) {
+          this.ambient = null;
+          this.flushPending();
+        }
+      }
+      failAmbient(error51) {
+        const ambient = this.ambient;
+        if (!ambient) return;
+        this.ambient = null;
+        this.opts.onAmbientEvent?.({ type: "message_error", messageId: ambient.messageId, error: error51 });
+      }
       async iterate(q2) {
         try {
           for await (const msg of q2) {
             if (this.closed) break;
+            this.trackBackgroundTasks(msg);
             const cur = this.active;
-            if (!cur) continue;
+            if (!cur) {
+              if (!this.ambient && msg.type === "system") {
+                this.idleSystemMapper ??= createClaudeAgentEventMapper({
+                  messageId: "",
+                  emit: (event) => this.opts.onAmbientEvent?.(event)
+                });
+                this.idleSystemMapper.apply(msg);
+              } else {
+                this.applyAmbientMessage(msg);
+              }
+              continue;
+            }
+            const tagged = msg;
+            const uuids = tagged.user_message_uuids ?? (tagged.user_message_uuid ? [tagged.user_message_uuid] : null);
+            if (uuids && !uuids.includes(cur.userUuid) || this.ambient && !uuids) {
+              this.applyAmbientMessage(msg);
+              continue;
+            }
+            if (msg.type === "result") {
+              const result = msg;
+              if (!uuids && this.opts.sessionId && result.num_turns === 0 && result.is_error === false && !cur.sawResult && !cur.streamedText) continue;
+            }
             if (cur.cancelled) {
               if (msg.type === "result") {
                 this.active = null;
@@ -13593,6 +13846,7 @@ var init_claude_live_session = __esm({
             }
           }
         } catch (err) {
+          this.failAmbient(err instanceof Error ? err.message : String(err));
           if (this.active) {
             if (!this.active.cancelled) {
               this.active.reject(err instanceof Error ? err : new Error(String(err)));
@@ -13603,6 +13857,12 @@ var init_claude_live_session = __esm({
             p3.reject(err instanceof Error ? err : new Error(String(err)));
           }
         } finally {
+          if (!this.closed) {
+            this.failAmbient("Claude SDK stream ended before the background turn completed");
+            this.active?.reject(new Error("Claude SDK stream ended before the user turn completed"));
+            this.active = null;
+            for (const pending2 of this.pending.splice(0)) pending2.reject(new Error("Claude SDK stream ended before the queued turn started"));
+          }
           this.closed = true;
           this.bridge.close();
         }
@@ -14986,12 +15246,12 @@ var init_host_wake = __esm({
 });
 
 // ../../packages/runtime/src/session/host-action-store.ts
-import { createHash as createHash2, randomBytes as randomBytes2, randomUUID as randomUUID4, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+import { createHash as createHash3, randomBytes as randomBytes2, randomUUID as randomUUID4, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 function hashToken(token) {
-  return createHash2("sha256").update(token).digest("hex");
+  return createHash3("sha256").update(token).digest("hex");
 }
 function payloadHash(outcome, result, error51) {
-  return createHash2("sha256").update(JSON.stringify({ outcome, result: result ?? null, error: error51 ?? null })).digest("hex");
+  return createHash3("sha256").update(JSON.stringify({ outcome, result: result ?? null, error: error51 ?? null })).digest("hex");
 }
 function tokensEqual(a, b3) {
   const ba = Buffer.from(a, "utf8");
@@ -15904,6 +16164,7 @@ var init_session_runtime = __esm({
       deliveringArtifactNotifications = /* @__PURE__ */ new Map();
       /** In-flight runTurn count per session (for multi-turn live inject). */
       activeTurnCounts = /* @__PURE__ */ new Map();
+      ambientTurns = /* @__PURE__ */ new Map();
       /**
        * Ephemeral system-prompt append (e.g. collaboration credential instructions).
        * Not durable in sessions table — reconstructed from grants on restart when needed.
@@ -16450,7 +16711,7 @@ var init_session_runtime = __esm({
       }
       /**
        * Deliver a host-built completion notification for finished artifact
-       * transfers (`docs/design/session-sync-zone.md` §4.1). Controller-bound like
+       * transfers (`docs/architecture/session-sync-zone.md` §5.3). Controller-bound like
        * the Host Action channel, and idempotent by `notificationId` so a desktop
        * retry after a dropped ACK injects the turn once. The text is built on the
        * node from files it has confirmed — the desktop cannot inject arbitrary
@@ -16545,6 +16806,48 @@ var init_session_runtime = __esm({
           this.inFlightTurns.delete(turnPromise);
         });
       }
+      handleAmbientEvent(sessionId, event) {
+        const session = this.live.get(sessionId);
+        if (!session || session.closed || this.disposing) return;
+        const activeUsers = this.activeTurnCounts.get(sessionId) ?? 0;
+        if (event.type === "status_change" && event.status === "idle" && activeUsers > 0) return;
+        if (event.type === "message_start") {
+          this.ambientTurns.set(sessionId, { messageId: event.message.id, text: "" });
+          session.status = "streaming";
+          if (activeUsers === 0) {
+            this.events.appendSession({ sessionId, eventType: SESSION_DURABLE_EVENT.turnStarted, payload: { status: "streaming" } });
+          }
+        }
+        const ambient = this.ambientTurns.get(sessionId);
+        if (ambient && event.type === "content_delta" && event.messageId === ambient.messageId && event.delta.type === "text" && !event.delta.parentToolUseId) {
+          ambient.text += event.delta.text;
+        }
+        this.events.appendSession({ sessionId, eventType: SESSION_DURABLE_EVENT.agentEvent, payload: { event } });
+        if (ambient && event.type === "message_complete" && event.messageId === ambient.messageId) {
+          const text2 = ambient.text || event.metadata?.resultText || "";
+          session.transcript.push({ id: ambient.messageId, role: "assistant", text: text2, createdAt: Date.now() });
+          this.events.appendSession({ sessionId, eventType: SESSION_DURABLE_EVENT.assistantMessage, payload: { blockId: ambient.messageId, text: text2 } });
+          this.ambientTurns.delete(sessionId);
+          if (activeUsers === 0) {
+            session.status = "idle";
+            this.events.appendSession({ sessionId, eventType: SESSION_DURABLE_EVENT.turnCompleted, payload: { status: "idle" } });
+            this.cancelHostActionsForSession(sessionId, "turn_ended");
+          }
+        } else if (ambient && (event.type === "message_error" || event.type === "message_interrupted") && event.messageId === ambient.messageId) {
+          this.ambientTurns.delete(sessionId);
+          if (activeUsers === 0) {
+            session.status = event.type === "message_error" ? "error" : "interrupted";
+            this.events.appendSession({
+              sessionId,
+              eventType: event.type === "message_error" ? SESSION_DURABLE_EVENT.turnError : SESSION_DURABLE_EVENT.turnInterrupted,
+              payload: event.type === "message_error" ? { message: event.error } : { reason: "ambient_interrupted" }
+            });
+            this.cancelHostActionsForSession(sessionId, "turn_ended");
+          }
+        }
+        session.updatedAt = Date.now();
+        this.persist(session);
+      }
       async runTurn(session, opts, abort) {
         const assistantId = randomUUID5();
         let assistantText = "";
@@ -16593,6 +16896,7 @@ var init_session_runtime = __esm({
                 causationRequestId: requestId
               });
             },
+            onAmbientEvent: (event) => this.handleAmbientEvent(session.sessionId, event),
             onPermission: (interaction) => {
               if (permissionMode === "bypassPermissions" || permissionMode === "dontAsk" || permissionMode === "acceptEdits") {
                 return Promise.resolve("allow");
@@ -16634,7 +16938,7 @@ var init_session_runtime = __esm({
             }
             const remainingPeers = Math.max(0, (this.activeTurnCounts.get(session.sessionId) ?? 1) - 1);
             const fifo = this.turnQueues.get(session.sessionId)?.length ?? 0;
-            if (remainingPeers > 0 || fifo > 0) {
+            if (remainingPeers > 0 || fifo > 0 || this.ambientTurns.has(session.sessionId)) {
               session.status = "streaming";
             } else {
               session.status = "idle";
@@ -16671,7 +16975,7 @@ var init_session_runtime = __esm({
           const remainingAfter = Math.max(0, (this.activeTurnCounts.get(sid) ?? 1) - 1);
           if (remainingAfter <= 0) this.activeTurnCounts.delete(sid);
           else this.activeTurnCounts.set(sid, remainingAfter);
-          if (!session.closed && remainingAfter <= 0) {
+          if (!session.closed && remainingAfter <= 0 && !this.ambientTurns.has(sid)) {
             this.cancelHostActionsForSession(sid, "turn_ended");
           }
           if (!session.closed) {
@@ -16710,6 +17014,7 @@ var init_session_runtime = __esm({
         const session = this.live.get(sessionId);
         if (!session) throw Object.assign(new Error("session not found"), { code: "not_found" });
         if (session.closed) return;
+        this.ambientTurns.delete(sessionId);
         const aborts = this.aborts.get(sessionId);
         for (const abort of aborts ?? []) abort.abort();
         this.aborts.delete(sessionId);
@@ -22826,10 +23131,10 @@ var init_server = __esm({
 });
 
 // ../../packages/runtime/src/llm-proxy/manager.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 import net from "node:net";
 function upstreamKey(u2) {
-  return createHash3("sha256").update(JSON.stringify(u2)).digest("hex").slice(0, 16);
+  return createHash4("sha256").update(JSON.stringify(u2)).digest("hex").slice(0, 16);
 }
 async function getFreePort() {
   return new Promise((resolve17, reject) => {
@@ -33651,6 +33956,11 @@ function createNodeClaudeTurnRunner(opts) {
       } : void 0;
       const live = ClaudeLiveSession.open({
         cwd,
+        onAmbientEvent: (event) => {
+          const current = lives.get(sessionKey);
+          if (current) current.lastActivityAt = Date.now();
+          input.onAmbientEvent?.(event);
+        },
         binaryPath: binary,
         sessionId: priorSession,
         model: input.model && input.model.trim() ? input.model.trim() : void 0,
@@ -33742,7 +34052,7 @@ function createNodeClaudeTurnRunner(opts) {
   runner.listActiveRuntimes = () => [...lives.entries()].map(([sessionId, entry]) => ({
     sessionId,
     lastActivityAt: entry.lastActivityAt,
-    busy: entry.busyCount > 0
+    busy: entry.busyCount > 0 || entry.live.isBusy || entry.live.hasActiveBackgroundTasks
   }));
   return runner;
 }
@@ -64172,10 +64482,10 @@ var init_cursor_event_map = __esm({
 // ../../packages/cursor/src/cursor-store.ts
 import Database from "better-sqlite3";
 import { mkdirSync as mkdirSync11 } from "node:fs";
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 import { join as join23 } from "node:path";
 function workspaceHash(workspaceRef) {
-  return createHash4("md5").update(workspaceRef).digest("hex");
+  return createHash5("md5").update(workspaceRef).digest("hex");
 }
 function page(items, limit, cursor, encode3, decode3, after) {
   let sorted = items;
@@ -66247,7 +66557,7 @@ var init_codex_admin_service = __esm({
         const auth = this.getProjectAuth(projectId);
         if (resolveMode(auth.mode, auth.apiKey) !== "chatgpt") return null;
         try {
-          return await this.withClient(projectId, apiProviderId, (client3) => readRateLimits(client3));
+          return await this.withClient(projectId, apiProviderId, (client3) => readRateLimits(client3, apiProviderId ?? "cli"));
         } catch {
           return null;
         }
@@ -73443,8 +73753,8 @@ import { fileURLToPath } from "node:url";
 function resolveCliReleaseVersion() {
   const fromEnv = process.env.SUPERONE_CLI_VERSION?.trim();
   if (fromEnv) return fromEnv;
-  if ("0.69.0".trim()) {
-    return "0.69.0".trim();
+  if ("0.70.0".trim()) {
+    return "0.70.0".trim();
   }
   const fromDist = readDistManifestVersion();
   if (fromDist) return fromDist;
@@ -80630,7 +80940,7 @@ import {
   statSync as statSync8,
   writeFileSync as writeFileSync12
 } from "node:fs";
-import { createHash as createHash5, randomBytes as randomBytes4 } from "node:crypto";
+import { createHash as createHash6, randomBytes as randomBytes4 } from "node:crypto";
 import { dirname as dirname13, join as join28, relative, resolve as resolve7, sep as sep3 } from "node:path";
 import { arch as osArch, platform as osPlatform } from "node:os";
 var releaseVersionProvider = null;
@@ -80797,7 +81107,7 @@ function selectArtifactPin(pin, platform2 = currentHostPlatform(), arch2 = curre
 }
 async function sha256File(path) {
   return new Promise((resolveHash, reject) => {
-    const hash2 = createHash5("sha256");
+    const hash2 = createHash6("sha256");
     const stream = createReadStream(path);
     stream.on("data", (chunk) => hash2.update(chunk));
     stream.on("error", reject);
@@ -81038,8 +81348,8 @@ function requiredRuntimeVersion(harnessId, manifest) {
 import { existsSync as existsSync29, mkdirSync as mkdirSync18, readFileSync as readFileSync17, readdirSync as readdirSync11, statSync as statSync9, writeFileSync as writeFileSync13 } from "node:fs";
 import { arch as osArch2, platform as osPlatform2 } from "node:os";
 import { join as join29, resolve as resolve8 } from "node:path";
-var OFFICIAL_CLAUDE_SDK_VERSION = "0.3.280";
-var OFFICIAL_CODEX_NPM_VERSION = "0.155.1";
+var OFFICIAL_CLAUDE_SDK_VERSION = "0.3.285";
+var OFFICIAL_CODEX_NPM_VERSION = "0.159.0";
 var OFFICIAL_CODEX_PACKAGE = "@openai/codex";
 function codexPlatformPackageVersion(baseVersion = OFFICIAL_CODEX_NPM_VERSION) {
   const platform2 = process.platform;
@@ -81235,7 +81545,7 @@ async function fetchTarballWithFallback(opts) {
 }
 
 // ../../packages/runtime/src/harness/resumable-download.ts
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 import {
   appendFileSync,
   createReadStream as createReadStream2,
@@ -81273,8 +81583,8 @@ function parseContentRange(header) {
   };
 }
 async function seedHashesFromFile(path) {
-  const sha256 = createHash6("sha256");
-  const sha512 = createHash6("sha512");
+  const sha256 = createHash7("sha256");
+  const sha512 = createHash7("sha512");
   const size = statSync10(path).size;
   if (size === 0) return { sha256, sha512, size };
   await new Promise((resolve17, reject) => {
@@ -81324,8 +81634,8 @@ async function streamResponseToFile(res, destPath, onProgress, opts = {}) {
     received = resumeFrom;
     emit?.(received, total || received);
   } else {
-    sha256 = createHash6("sha256");
-    sha512 = createHash6("sha512");
+    sha256 = createHash7("sha256");
+    sha512 = createHash7("sha512");
     received = 0;
   }
   if (!res.body) {
@@ -85640,7 +85950,7 @@ var NodeTerminalManager = class {
 // ../../packages/runtime/src/workspace/project-registry.ts
 import { basename as basename2, resolve as resolve11 } from "node:path";
 import { existsSync as existsSync36, realpathSync as realpathSync4, statSync as statSync13 } from "node:fs";
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 import { execFileSync as execFileSync2 } from "node:child_process";
 
 // ../../packages/shared/src/project-extra-dirs.ts
@@ -85730,7 +86040,7 @@ var ProjectRegistry = class {
       this.db.prepare(`UPDATE projects SET last_active_at = ?, name = COALESCE(?, name) WHERE project_id = ?`).run(now, name ?? null, existing.projectId);
       return this.get(existing.projectId);
     }
-    const projectId = createHash7("sha256").update(abs).digest("hex").slice(0, 32);
+    const projectId = createHash8("sha256").update(abs).digest("hex").slice(0, 32);
     const repoIdentity = detectRepoIdentity(abs);
     this.db.prepare(
       `INSERT INTO projects (project_id, path, name, repo_identity, opened_at, last_active_at)
@@ -85844,7 +86154,7 @@ import {
   writeFileSync as writeFileSync16
 } from "node:fs";
 import { dirname as dirname16, join as join31, relative as relative2 } from "node:path";
-import { createHash as createHash8 } from "node:crypto";
+import { createHash as createHash9 } from "node:crypto";
 function normalizeRel(path) {
   return path.replace(/\\/g, "/").replace(/\/+$/, "") || ".";
 }
@@ -85951,7 +86261,7 @@ var WorkspaceFsService = class {
       const slice = Buffer.alloc(toRead);
       if (toRead > 0) readSync(fd, slice, 0, toRead, offset);
       const content = slice.toString("base64");
-      const hash2 = createHash8("sha256").update(slice).digest("hex");
+      const hash2 = createHash9("sha256").update(slice).digest("hex");
       this.projects.touch(projectId);
       return { content, hash: hash2, encoding: "base64" };
     } finally {
@@ -86007,7 +86317,7 @@ var WorkspaceFsService = class {
         }
       }
     }
-    const hash2 = createHash8("sha256").update(data).digest("hex");
+    const hash2 = createHash9("sha256").update(data).digest("hex");
     this.projects.touch(projectId);
     return { hash: hash2 };
   }
@@ -86195,7 +86505,7 @@ var WorkspaceFsService = class {
 function hashFileBounded(absolutePath, size) {
   const fd = openSync(absolutePath, "r");
   try {
-    const hash2 = createHash8("sha256");
+    const hash2 = createHash9("sha256");
     const buf = Buffer.alloc(Math.min(64 * 1024, Math.max(1, size)));
     let offset = 0;
     while (offset < size) {
@@ -88583,7 +88893,7 @@ var WorkspaceTailWatchService = class {
 };
 
 // src/auth/idempotency.ts
-import { createHash as createHash9 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 var IdempotencyService = class {
   constructor(db) {
     this.db = db;
@@ -88591,7 +88901,7 @@ var IdempotencyService = class {
   db;
   inflight = /* @__PURE__ */ new Map();
   payloadHash(payload) {
-    return createHash9("sha256").update(JSON.stringify(payload ?? null)).digest("hex");
+    return createHash10("sha256").update(JSON.stringify(payload ?? null)).digest("hex");
   }
   key(clientIdentity, operation, idempotencyKey) {
     return `${clientIdentity}\0${operation}\0${idempotencyKey}`;
@@ -92568,7 +92878,7 @@ init_interaction_memory();
 // ../../packages/runtime/src/fs/interaction-memory.ts
 init_superone_home();
 init_interaction_memory();
-import { createHash as createHash10, randomUUID as randomUUID14 } from "node:crypto";
+import { createHash as createHash11, randomUUID as randomUUID14 } from "node:crypto";
 import { lstat, mkdir, open, readdir, rename, rm } from "node:fs/promises";
 import { constants as constants4 } from "node:fs";
 import { join as join34 } from "node:path";
@@ -92822,7 +93132,7 @@ var InteractionMemoryStore = class _InteractionMemoryStore {
         await file2.close();
       }
       const { meta: meta3, content } = parseNote(raw, { title: topic2, resource: target.resource });
-      return { ...meta3, topic: topic2, content, revision: createHash10("sha256").update(raw).digest("hex") };
+      return { ...meta3, topic: topic2, content, revision: createHash11("sha256").update(raw).digest("hex") };
     } catch (err) {
       if (missing(err)) return null;
       throw new Error(`Cannot read personal memory ${target.label}/${topic2}: ${err instanceof Error ? err.message : String(err)}`);
@@ -92915,7 +93225,7 @@ var InteractionMemoryStore = class _InteractionMemoryStore {
         saved: true,
         created: !existing,
         ...target.identity,
-        ...summary({ ...meta3, topic: args.topic, content, revision: createHash10("sha256").update(raw).digest("hex") })
+        ...summary({ ...meta3, topic: args.topic, content, revision: createHash11("sha256").update(raw).digest("hex") })
       };
     } finally {
       await rm(lock, { recursive: true, force: true });
@@ -102655,7 +102965,7 @@ ON CONFLICT(id) DO UPDATE SET
 
 // src/workspace/artifact-zone.ts
 init_environment();
-import { createHash as createHash11 } from "node:crypto";
+import { createHash as createHash12 } from "node:crypto";
 import {
   closeSync as closeSync3,
   fstatSync as fstatSync3,
@@ -102977,7 +103287,7 @@ var ArtifactZoneService = class {
       written: 0,
       total: req.total,
       sha256: req.sha256,
-      hash: createHash11("sha256"),
+      hash: createHash12("sha256"),
       lastActivityAt: Date.now()
     };
     this.transfers.set(transferId, transfer);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@super-one/cli",
-  "version": "0.69.0",
+  "version": "0.70.0",
   "description": "SuperOne headless node CLI — remote execution environment (RPC, workspaces, sessions).",
   "type": "module",
   "license": "BUSL-1.1",
@@ -25,20 +25,20 @@
     "directory": "apps/cli"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "0.3.280",
+    "@anthropic-ai/claude-agent-sdk": "0.3.285",
     "@cursor/sdk": "1.0.30",
     "better-sqlite3": "^13.0.1",
     "node-pty": "^1.0.0"
   },
   "optionalDependencies": {
-    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.280",
-    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.280",
-    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.280",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.280",
-    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.280",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.280",
-    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.280",
-    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.280",
+    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.285",
+    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.285",
+    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.285",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.285",
+    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.285",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.285",
+    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.285",
+    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.285",
     "@cursor/sdk-darwin-arm64": "1.0.30",
     "@cursor/sdk-darwin-x64": "1.0.30",
     "@cursor/sdk-linux-arm64": "1.0.30",