@threadbase-sh/streamer 1.37.0 → 1.39.0

package/dist/cli.cjs

@@ -1490,6 +1490,9 @@ function isPermissionMode(value) {
 function isDangerousPermissionMode(mode) {
   return DANGEROUS_PERMISSION_MODES.includes(mode);
 }
+function isEffortLevel(value) {
+  return typeof value === "string" && EFFORT_LEVELS.includes(value);
+}
 function findFlag(id) {
   return CLAUDE_FLAGS.find((f2) => f2.id === id);
 }
@@ -1554,7 +1557,7 @@ function buildFlagArgs(values, extraArgs) {
   const args = [];
   const safe = validateFlagValues(values ?? {});
   for (const def of CLAUDE_FLAGS) {
-    if (def.id === "permissionMode") continue;
+    if (SPAWN_POSITIONAL_FLAG_IDS.has(def.id)) continue;
     const value = safe[def.id];
     if (value === void 0) continue;
     if (def.valueType === "boolean") {
@@ -1577,7 +1580,7 @@ function buildSettingsJson(permissionMode) {
   }
   return JSON.stringify(settings);
 }
-var PERMISSION_MODES, DANGEROUS_PERMISSION_MODES, CLAUDE_FLAGS;
+var PERMISSION_MODES, DANGEROUS_PERMISSION_MODES, EFFORT_LEVELS, CLAUDE_FLAGS, SPAWN_POSITIONAL_FLAG_IDS;
 var init_claude_flags = __esm({
   "src/claude-flags.ts"() {
     "use strict";
@@ -1593,6 +1596,7 @@ var init_claude_flags = __esm({
       "bypassPermissions",
       "dontAsk"
     ];
+    EFFORT_LEVELS = ["low", "medium", "high", "xhigh", "max"];
     CLAUDE_FLAGS = [
       {
         id: "permissionMode",
@@ -1604,9 +1608,10 @@ var init_claude_flags = __esm({
       { id: "addDir", flag: "--add-dir", valueType: "list", risk: "elevated" },
       { id: "allowedTools", flag: "--allowedTools", valueType: "list", risk: "elevated" },
       { id: "disallowedTools", flag: "--disallowedTools", valueType: "list", risk: "low" },
-      { id: "maxBudgetUsd", flag: "--max-budget-usd", valueType: "string", risk: "low" },
-      { id: "fallbackModel", flag: "--fallback-model", valueType: "string", risk: "low" }
+      { id: "model", flag: "--model", valueType: "string", risk: "low" },
+      { id: "effort", flag: "--effort", valueType: "enum", enumValues: EFFORT_LEVELS, risk: "low" }
     ];
+    SPAWN_POSITIONAL_FLAG_IDS = /* @__PURE__ */ new Set(["permissionMode", "model", "effort"]);
   }
 });
 
@@ -4632,11 +4637,11 @@ var require_tools = __commonJS({
         }
       }
     }
-    function buildFormatters(level, bindings, log8) {
+    function buildFormatters(level, bindings, log12) {
       return {
         level,
         bindings,
-        log: log8
+        log: log12
       };
     }
     function normalizeDestFileDescriptor(destination) {
@@ -5018,11 +5023,11 @@ var require_proto = __commonJS({
         }
       } else instance[serializersSym] = serializers;
       if (options.hasOwnProperty("formatters")) {
-        const { level, bindings: chindings, log: log8 } = options.formatters;
+        const { level, bindings: chindings, log: log12 } = options.formatters;
         instance[formattersSym] = buildFormatters(
           level || formatters.level,
           chindings || resetChildingsFormatter,
-          log8 || formatters.log
+          log12 || formatters.log
         );
       } else {
         instance[formattersSym] = buildFormatters(
@@ -5932,7 +5937,7 @@ var require_pino = __commonJS({
     } = symbols;
     var { epochTime, nullTime } = time3;
     var { pid } = process;
-    var hostname4 = os2.hostname();
+    var hostname5 = os2.hostname();
     var defaultErrorSerializer = stdSerializers.err;
     var defaultOptions2 = {
       level: "info",
@@ -5942,7 +5947,7 @@ var require_pino = __commonJS({
       errorKey: "err",
       nestedKey: null,
       enabled: true,
-      base: { pid, hostname: hostname4 },
+      base: { pid, hostname: hostname5 },
       serializers: Object.assign(/* @__PURE__ */ Object.create(null), {
         err: defaultErrorSerializer
       }),
@@ -6133,6 +6138,86 @@ var init_logger = __esm({
   }
 });
 
+// src/feature-flags.ts
+function findFeatureFlag(id) {
+  return FEATURE_FLAGS.find((f2) => f2.id === id);
+}
+function parseBooleanEnv(raw2) {
+  if (raw2 === void 0) return void 0;
+  const v2 = raw2.trim().toLowerCase();
+  if (v2 === "") return false;
+  return !(v2 === "0" || v2 === "false" || v2 === "no" || v2 === "off");
+}
+function validateFeatureFlagValues(raw2) {
+  if (!raw2 || typeof raw2 !== "object" || Array.isArray(raw2)) return {};
+  const out = {};
+  const dropped = [];
+  for (const [id, value] of Object.entries(raw2)) {
+    if (!findFeatureFlag(id) || typeof value !== "boolean") {
+      dropped.push(id);
+      continue;
+    }
+    out[id] = value;
+  }
+  if (dropped.length > 0) {
+    getLogger("feature-flags").warn(
+      `Ignoring unknown or non-boolean feature flags: ${dropped.join(", ")}`,
+      {
+        event: "config.feature_flags_dropped",
+        dropped
+      }
+    );
+  }
+  return out;
+}
+function parseFeatureFlagArgs(entries) {
+  const values = {};
+  const errors = [];
+  for (const entry of entries) {
+    const eq = entry.indexOf("=");
+    const id = (eq === -1 ? entry : entry.slice(0, eq)).trim();
+    const rawValue = eq === -1 ? "true" : entry.slice(eq + 1).trim().toLowerCase();
+    if (!findFeatureFlag(id)) {
+      errors.push(
+        `Unknown feature flag "${id}". Known flags: ${FEATURE_FLAGS.map((f2) => f2.id).join(", ")}`
+      );
+      continue;
+    }
+    if (rawValue !== "true" && rawValue !== "false") {
+      errors.push(`Invalid value "${rawValue}" for feature flag "${id}" \u2014 expected true/false`);
+      continue;
+    }
+    values[id] = rawValue === "true";
+  }
+  return { values, errors };
+}
+function resolveFeatureFlags(opts) {
+  const env = opts?.env ?? process.env;
+  const out = {};
+  for (const def of FEATURE_FLAGS) {
+    out[def.id] = parseBooleanEnv(env[def.env]) ?? opts?.cli?.[def.id] ?? opts?.yaml?.[def.id] ?? def.default;
+  }
+  return out;
+}
+function nonDefaultFeatureFlags(values) {
+  return FEATURE_FLAGS.filter((f2) => values[f2.id] !== f2.default).map((f2) => f2.id);
+}
+var FEATURE_FLAGS;
+var init_feature_flags = __esm({
+  "src/feature-flags.ts"() {
+    "use strict";
+    init_logger();
+    FEATURE_FLAGS = [
+      {
+        id: "codexSystemPrompt",
+        description: "Send the built system prompt to fresh Codex sessions. Off by default: Codex has no --system-prompt flag, so the prompt goes in the positional [PROMPT] argument, which Codex treats as the user's opening turn rather than a system-level instruction.",
+        default: false,
+        env: "THREADBASE_FEATURE_CODEX_SYSTEM_PROMPT"
+      }
+    ];
+  }
+});
+
 // src/auth.ts
 function configDir() {
   return process.env.THREADBASE_CONFIG_DIR ?? (0, import_path.join)((0, import_os.homedir)(), ".threadbase");
@@ -6297,6 +6382,21 @@ function setClaudeExtraArgs(text) {
   }
   setConfigValue("claude_extra_args", trimmed && trimmed.length > 0 ? trimmed : void 0);
 }
+function loadFeatureFlags() {
+  try {
+    const content = (0, import_fs.readFileSync)(configFile(), "utf-8");
+    const match2 = content.match(/^feature_flags:\s*(.+)$/m);
+    if (!match2?.[1]) return {};
+    return validateFeatureFlagValues(JSON.parse(match2[1].trim()));
+  } catch (err) {
+    if (err.code !== "ENOENT") {
+      getLogger("auth").warn(`Ignoring unreadable feature_flags in server.yaml: ${String(err)}`, {
+        event: "config.feature_flags_parse_failed"
+      });
+    }
+    return {};
+  }
+}
 function validatePublicUrl(raw2) {
   let parsed;
   try {
@@ -6354,6 +6454,7 @@ var init_auth = __esm({
     import_os = require("os");
     import_path = require("path");
     init_claude_flags();
+    init_feature_flags();
     init_logger();
   }
 });
@@ -8078,7 +8179,7 @@ var require_merge = __commonJS({
 var require_addPairToJSMap = __commonJS({
   "node_modules/yaml/dist/nodes/addPairToJSMap.js"(exports2) {
     "use strict";
-    var log8 = require_log();
+    var log12 = require_log();
     var merge2 = require_merge();
     var stringify = require_stringify();
     var identity = require_identity();
@@ -8127,7 +8228,7 @@ var require_addPairToJSMap = __commonJS({
           let jsonStr = JSON.stringify(strKey);
           if (jsonStr.length > 40)
             jsonStr = jsonStr.substring(0, 36) + '..."';
-          log8.warn(ctx.doc.options.logLevel, `Keys with collection values will be stringified due to JS Object restrictions: ${jsonStr}. Set mapAsMap: true to use object keys.`);
+          log12.warn(ctx.doc.options.logLevel, `Keys with collection values will be stringified due to JS Object restrictions: ${jsonStr}. Set mapAsMap: true to use object keys.`);
           ctx.mapKeyWarned = true;
         }
         return strKey;
@@ -13543,7 +13644,7 @@ var require_public_api = __commonJS({
     var composer = require_composer();
     var Document = require_Document();
     var errors = require_errors();
-    var log8 = require_log();
+    var log12 = require_log();
     var identity = require_identity();
     var lineCounter = require_line_counter();
     var parser = require_parser();
@@ -13595,7 +13696,7 @@ var require_public_api = __commonJS({
       const doc = parseDocument(src, options);
       if (!doc)
         return null;
-      doc.warnings.forEach((warning) => log8.warn(doc.options.logLevel, warning));
+      doc.warnings.forEach((warning) => log12.warn(doc.options.logLevel, warning));
       if (doc.errors.length > 0) {
         if (doc.options.logLevel !== "silent")
           throw doc.errors[0];
@@ -14354,8 +14455,8 @@ function uint8ArrayToBase64(bytes) {
   }
   return btoa(binaryString);
 }
-function base64urlToUint8Array(base64url3) {
-  const base643 = base64url3.replace(/-/g, "+").replace(/_/g, "/");
+function base64urlToUint8Array(base64url4) {
+  const base643 = base64url4.replace(/-/g, "+").replace(/_/g, "/");
   const padding = "=".repeat((4 - base643.length % 4) % 4);
   return base64ToUint8Array(base643 + padding);
 }
@@ -37111,7 +37212,7 @@ var require_logging = __commonJS({
       _logVerbosity = verbosity;
     };
     exports2.setLoggerVerbosity = setLoggerVerbosity;
-    var log8 = (severity, ...args) => {
+    var log12 = (severity, ...args) => {
       let logFunction;
       if (severity >= _logVerbosity) {
         switch (severity) {
@@ -37133,7 +37234,7 @@ var require_logging = __commonJS({
         }
       }
     };
-    exports2.log = log8;
+    exports2.log = log12;
     var tracersString = (_d = (_c = process.env.GRPC_NODE_TRACE) !== null && _c !== void 0 ? _c : process.env.GRPC_TRACE) !== null && _d !== void 0 ? _d : "";
     var enabledTracers = /* @__PURE__ */ new Set();
     var disabledTracers = /* @__PURE__ */ new Set();
@@ -38519,8 +38620,8 @@ var require_service_config = __commonJS({
         }
         if (Array.isArray(validatedConfig.clientHostname)) {
           let hostnameMatched = false;
-          for (const hostname4 of validatedConfig.clientHostname) {
-            if (hostname4 === os2.hostname()) {
+          for (const hostname5 of validatedConfig.clientHostname) {
+            if (hostname5 === os2.hostname()) {
               hostnameMatched = true;
             }
           }
@@ -51089,8 +51190,8 @@ var require_single_subchannel_channel = __commonJS({
         if (splitPath2.length >= 2) {
           serviceName = splitPath2[1];
         }
-        const hostname4 = (_b = (_a3 = (0, uri_parser_1.splitHostPort)(this.options.host)) === null || _a3 === void 0 ? void 0 : _a3.host) !== null && _b !== void 0 ? _b : "localhost";
-        this.serviceUrl = `https://${hostname4}/${serviceName}`;
+        const hostname5 = (_b = (_a3 = (0, uri_parser_1.splitHostPort)(this.options.host)) === null || _a3 === void 0 ? void 0 : _a3.host) !== null && _b !== void 0 ? _b : "localhost";
+        this.serviceUrl = `https://${hostname5}/${serviceName}`;
         const timeout = (0, deadline_1.getRelativeTimeout)(options.deadline);
         if (timeout !== Infinity) {
           if (timeout <= 0) {
@@ -51737,8 +51838,8 @@ var require_resolver_dns = __commonJS({
           }
           trace("Looking up DNS hostname " + this.dnsHostname);
           this.latestLookupResult = null;
-          const hostname4 = this.dnsHostname;
-          this.pendingLookupPromise = this.lookup(hostname4);
+          const hostname5 = this.dnsHostname;
+          this.pendingLookupPromise = this.lookup(hostname5);
           this.pendingLookupPromise.then((addressList) => {
             if (this.pendingLookupPromise === null) {
               return;
@@ -51761,7 +51862,7 @@ var require_resolver_dns = __commonJS({
             this.listener((0, call_interface_1.statusOrFromError)(this.defaultResolutionError), {}, this.latestServiceConfigResult, "");
           });
           if (this.isServiceConfigEnabled && this.pendingTxtPromise === null) {
-            this.pendingTxtPromise = this.resolveTxt(hostname4);
+            this.pendingTxtPromise = this.resolveTxt(hostname5);
             this.pendingTxtPromise.then((txtRecord) => {
               if (this.pendingTxtPromise === null) {
                 return;
@@ -51803,12 +51904,12 @@ var require_resolver_dns = __commonJS({
           this.continueResolving = true;
         }
       }
-      async lookup(hostname4) {
+      async lookup(hostname5) {
         if (environment_1.GRPC_NODE_USE_ALTERNATIVE_RESOLVER) {
           trace("Using alternative DNS resolver.");
           const records = await Promise.allSettled([
-            this.alternativeResolver.resolve4(hostname4),
-            this.alternativeResolver.resolve6(hostname4)
+            this.alternativeResolver.resolve4(hostname5),
+            this.alternativeResolver.resolve6(hostname5)
           ]);
           if (records.every((result) => result.status === "rejected")) {
             throw new Error(records[0].reason);
@@ -51820,15 +51921,15 @@ var require_resolver_dns = __commonJS({
             port: +this.port
           }));
         }
-        const addressList = await dns_1.promises.lookup(hostname4, { all: true });
+        const addressList = await dns_1.promises.lookup(hostname5, { all: true });
         return addressList.map((addr) => ({ host: addr.address, port: +this.port }));
       }
-      async resolveTxt(hostname4) {
+      async resolveTxt(hostname5) {
         if (environment_1.GRPC_NODE_USE_ALTERNATIVE_RESOLVER) {
           trace("Using alternative DNS resolver.");
-          return this.alternativeResolver.resolveTxt(hostname4);
+          return this.alternativeResolver.resolveTxt(hostname5);
         }
-        return dns_1.promises.resolveTxt(hostname4);
+        return dns_1.promises.resolveTxt(hostname5);
       }
       startNextResolutionTimer() {
         var _a3, _b;
@@ -51956,13 +52057,13 @@ var require_http_proxy = __commonJS({
           userCred = proxyUrl.username;
         }
       }
-      const hostname4 = proxyUrl.hostname;
+      const hostname5 = proxyUrl.hostname;
       let port = proxyUrl.port;
       if (port === "") {
         port = "80";
       }
       const result = {
-        address: `${hostname4}:${port}`
+        address: `${hostname5}:${port}`
       };
       if (userCred) {
         result.creds = userCred;
@@ -53275,8 +53376,8 @@ var require_load_balancing_call = __commonJS({
         if (splitPath2.length >= 2) {
           serviceName = splitPath2[1];
         }
-        const hostname4 = (_b = (_a3 = (0, uri_parser_1.splitHostPort)(this.host)) === null || _a3 === void 0 ? void 0 : _a3.host) !== null && _b !== void 0 ? _b : "localhost";
-        this.serviceUrl = `https://${hostname4}/${serviceName}`;
+        const hostname5 = (_b = (_a3 = (0, uri_parser_1.splitHostPort)(this.host)) === null || _a3 === void 0 ? void 0 : _a3.host) !== null && _b !== void 0 ? _b : "localhost";
+        this.serviceUrl = `https://${hostname5}/${serviceName}`;
         this.startTime = /* @__PURE__ */ new Date();
       }
       getDeadlineInfo() {
@@ -91085,9 +91186,9 @@ var require_parse_host_uri = __commonJS({
     var ipv4Hostname = "(?:\\d{1,3}(?:\\.\\d{1,3}){3})";
     var ipv6Hostname = "(?:\\[(?<ipv6>[0-9a-fA-F.:]+)\\])";
     var dnsHostname = "(?:[^:/]+)";
-    var hostname4 = `(?:${ipv4Hostname}|${ipv6Hostname}|${dnsHostname})`;
+    var hostname5 = `(?:${ipv4Hostname}|${ipv6Hostname}|${dnsHostname})`;
     var port = "(?::(?<port>\\d+))";
-    var protoHostPortRegex = new RegExp(`^${scheme}??(?<hostname>${hostname4})${port}?$`);
+    var protoHostPortRegex = new RegExp(`^${scheme}??(?<hostname>${hostname5})${port}?$`);
     function splitProtoHostPort(uri) {
       const match2 = protoHostPortRegex.exec(uri);
       if (!match2?.groups)
@@ -91099,9 +91200,9 @@ var require_parse_host_uri = __commonJS({
       };
     }
     function joinProtoHostPort(components) {
-      const { scheme: scheme2, hostname: hostname5, port: port2 } = components;
+      const { scheme: scheme2, hostname: hostname6, port: port2 } = components;
       const schemeText = scheme2 ? `${scheme2}:` : "";
-      const hostnameText = hostname5.includes(":") ? `[${hostname5}]` : hostname5;
+      const hostnameText = hostname6.includes(":") ? `[${hostname6}]` : hostname6;
       const portText = port2 !== void 0 ? `:${port2}` : "";
       return `${schemeText}${hostnameText}${portText}`;
     }
@@ -98687,7 +98788,7 @@ var require_scan = __commonJS({
 var require_parse4 = __commonJS({
   "node_modules/picomatch/lib/parse.js"(exports2, module2) {
     "use strict";
-    var constants = require_constants5();
+    var constants2 = require_constants5();
     var utils = require_utils2();
     var {
       MAX_LENGTH,
@@ -98695,7 +98796,7 @@ var require_parse4 = __commonJS({
       REGEX_NON_SPECIAL_CHARS,
       REGEX_SPECIAL_CHARS_BACKREF,
       REPLACEMENTS
-    } = constants;
+    } = constants2;
     var expandRange = (args, options) => {
       if (typeof options.expandRange === "function") {
         return options.expandRange(...args, options);
@@ -98901,7 +99002,7 @@ var require_parse4 = __commonJS({
       if (options.maxExtglobRecursion === false) {
         return { risky: false };
       }
-      const max = typeof options.maxExtglobRecursion === "number" ? options.maxExtglobRecursion : constants.DEFAULT_MAX_EXTGLOB_RECURSION;
+      const max = typeof options.maxExtglobRecursion === "number" ? options.maxExtglobRecursion : constants2.DEFAULT_MAX_EXTGLOB_RECURSION;
       const branches = splitTopLevel(body).map((branch) => branch.trim());
       if (branches.length > 1) {
         if (branches.some((branch) => branch === "") || branches.some((branch) => /^[*?]+$/.test(branch)) || hasRepeatedCharPrefixOverlap(branches)) {
@@ -98934,8 +99035,8 @@ var require_parse4 = __commonJS({
       const tokens = [bos];
       const capture = opts.capture ? "" : "?:";
       const win32 = utils.isWindows(options);
-      const PLATFORM_CHARS = constants.globChars(win32);
-      const EXTGLOB_CHARS = constants.extglobChars(PLATFORM_CHARS);
+      const PLATFORM_CHARS = constants2.globChars(win32);
+      const EXTGLOB_CHARS = constants2.extglobChars(PLATFORM_CHARS);
       const {
         DOT_LITERAL,
         PLUS_LITERAL,
@@ -99634,7 +99735,7 @@ var require_parse4 = __commonJS({
         NO_DOTS_SLASH,
         STAR,
         START_ANCHOR
-      } = constants.globChars(win32);
+      } = constants2.globChars(win32);
       const nodot = opts.dot ? NO_DOTS : NO_DOT;
       const slashDot = opts.dot ? NO_DOTS_SLASH : NO_DOT;
       const capture = opts.capture ? "" : "?:";
@@ -99693,7 +99794,7 @@ var require_picomatch = __commonJS({
     var scan = require_scan();
     var parse3 = require_parse4();
     var utils = require_utils2();
-    var constants = require_constants5();
+    var constants2 = require_constants5();
     var isObject2 = (val) => val && typeof val === "object" && !Array.isArray(val);
     var picomatch = (glob, options, returnState = false) => {
       if (Array.isArray(glob)) {
@@ -99821,7 +99922,7 @@ var require_picomatch = __commonJS({
         return /$^/;
       }
     };
-    picomatch.constants = constants;
+    picomatch.constants = constants2;
     module2.exports = picomatch;
   }
 });
@@ -104039,11 +104140,11 @@ var require_pg_connection_string = __commonJS({
         config2.client_encoding = result.searchParams.get("encoding");
         return config2;
       }
-      const hostname4 = dummyHost ? "" : result.hostname;
+      const hostname5 = dummyHost ? "" : result.hostname;
       if (!config2.host) {
-        config2.host = decodeURIComponent(hostname4);
-      } else if (hostname4 && /^%2f/i.test(hostname4)) {
-        result.pathname = hostname4 + result.pathname;
+        config2.host = decodeURIComponent(hostname5);
+      } else if (hostname5 && /^%2f/i.test(hostname5)) {
+        result.pathname = hostname5 + result.pathname;
       }
       if (!config2.port) {
         config2.port = result.port;
@@ -119963,7 +120064,7 @@ var require_crc = __commonJS({
 var require_parser3 = __commonJS({
   "node_modules/pngjs/lib/parser.js"(exports2, module2) {
     "use strict";
-    var constants = require_constants7();
+    var constants2 = require_constants7();
     var CrcCalculator = require_crc();
     var Parser = module2.exports = function(options, dependencies) {
       this._options = options;
@@ -119974,12 +120075,12 @@ var require_parser3 = __commonJS({
       this._palette = [];
       this._colorType = 0;
       this._chunks = {};
-      this._chunks[constants.TYPE_IHDR] = this._handleIHDR.bind(this);
-      this._chunks[constants.TYPE_IEND] = this._handleIEND.bind(this);
-      this._chunks[constants.TYPE_IDAT] = this._handleIDAT.bind(this);
-      this._chunks[constants.TYPE_PLTE] = this._handlePLTE.bind(this);
-      this._chunks[constants.TYPE_tRNS] = this._handleTRNS.bind(this);
-      this._chunks[constants.TYPE_gAMA] = this._handleGAMA.bind(this);
+      this._chunks[constants2.TYPE_IHDR] = this._handleIHDR.bind(this);
+      this._chunks[constants2.TYPE_IEND] = this._handleIEND.bind(this);
+      this._chunks[constants2.TYPE_IDAT] = this._handleIDAT.bind(this);
+      this._chunks[constants2.TYPE_PLTE] = this._handlePLTE.bind(this);
+      this._chunks[constants2.TYPE_tRNS] = this._handleTRNS.bind(this);
+      this._chunks[constants2.TYPE_gAMA] = this._handleGAMA.bind(this);
       this.read = dependencies.read;
       this.error = dependencies.error;
       this.metadata = dependencies.metadata;
@@ -119994,10 +120095,10 @@ var require_parser3 = __commonJS({
       };
     };
     Parser.prototype.start = function() {
-      this.read(constants.PNG_SIGNATURE.length, this._parseSignature.bind(this));
+      this.read(constants2.PNG_SIGNATURE.length, this._parseSignature.bind(this));
     };
     Parser.prototype._parseSignature = function(data) {
-      let signature = constants.PNG_SIGNATURE;
+      let signature = constants2.PNG_SIGNATURE;
       for (let i = 0; i < signature.length; i++) {
         if (data[i] !== signature[i]) {
           this.error(new Error("Invalid file signature"));
@@ -120014,7 +120115,7 @@ var require_parser3 = __commonJS({
         name += String.fromCharCode(data[i]);
       }
       let ancillary = Boolean(data[4] & 32);
-      if (!this._hasIHDR && type !== constants.TYPE_IHDR) {
+      if (!this._hasIHDR && type !== constants2.TYPE_IHDR) {
         this.error(new Error("Expected IHDR on beggining"));
         return;
       }
@@ -120062,7 +120163,7 @@ var require_parser3 = __commonJS({
         this.error(new Error("Unsupported bit depth " + depth));
         return;
       }
-      if (!(colorType in constants.COLORTYPE_TO_BPP_MAP)) {
+      if (!(colorType in constants2.COLORTYPE_TO_BPP_MAP)) {
         this.error(new Error("Unsupported color type"));
         return;
       }
@@ -120079,16 +120180,16 @@ var require_parser3 = __commonJS({
         return;
       }
       this._colorType = colorType;
-      let bpp = constants.COLORTYPE_TO_BPP_MAP[this._colorType];
+      let bpp = constants2.COLORTYPE_TO_BPP_MAP[this._colorType];
       this._hasIHDR = true;
       this.metadata({
         width,
         height,
         depth,
         interlace: Boolean(interlace),
-        palette: Boolean(colorType & constants.COLORTYPE_PALETTE),
-        color: Boolean(colorType & constants.COLORTYPE_COLOR),
-        alpha: Boolean(colorType & constants.COLORTYPE_ALPHA),
+        palette: Boolean(colorType & constants2.COLORTYPE_PALETTE),
+        color: Boolean(colorType & constants2.COLORTYPE_COLOR),
+        alpha: Boolean(colorType & constants2.COLORTYPE_ALPHA),
         bpp,
         colorType
       });
@@ -120112,7 +120213,7 @@ var require_parser3 = __commonJS({
     };
     Parser.prototype._parseTRNS = function(data) {
       this._crc.write(data);
-      if (this._colorType === constants.COLORTYPE_PALETTE_COLOR) {
+      if (this._colorType === constants2.COLORTYPE_PALETTE_COLOR) {
         if (this._palette.length === 0) {
           this.error(new Error("Transparency chunk must be after palette"));
           return;
@@ -120126,10 +120227,10 @@ var require_parser3 = __commonJS({
         }
         this.palette(this._palette);
       }
-      if (this._colorType === constants.COLORTYPE_GRAYSCALE) {
+      if (this._colorType === constants2.COLORTYPE_GRAYSCALE) {
         this.transColor([data.readUInt16BE(0)]);
       }
-      if (this._colorType === constants.COLORTYPE_COLOR) {
+      if (this._colorType === constants2.COLORTYPE_COLOR) {
         this.transColor([
           data.readUInt16BE(0),
           data.readUInt16BE(2),
@@ -120143,7 +120244,7 @@ var require_parser3 = __commonJS({
     };
     Parser.prototype._parseGAMA = function(data) {
       this._crc.write(data);
-      this.gamma(data.readUInt32BE(0) / constants.GAMMA_DIVISION);
+      this.gamma(data.readUInt32BE(0) / constants2.GAMMA_DIVISION);
       this._handleChunkEnd();
     };
     Parser.prototype._handleIDAT = function(length) {
@@ -120155,7 +120256,7 @@ var require_parser3 = __commonJS({
     };
     Parser.prototype._parseIDAT = function(length, data) {
       this._crc.write(data);
-      if (this._colorType === constants.COLORTYPE_PALETTE_COLOR && this._palette.length === 0) {
+      if (this._colorType === constants2.COLORTYPE_PALETTE_COLOR && this._palette.length === 0) {
         throw new Error("Expected palette not found");
       }
       this.inflateData(data);
@@ -120643,9 +120744,9 @@ var require_parser_async = __commonJS({
 var require_bitpacker = __commonJS({
   "node_modules/pngjs/lib/bitpacker.js"(exports2, module2) {
     "use strict";
-    var constants = require_constants7();
+    var constants2 = require_constants7();
     module2.exports = function(dataIn, width, height, options) {
-      let outHasAlpha = [constants.COLORTYPE_COLOR_ALPHA, constants.COLORTYPE_ALPHA].indexOf(
+      let outHasAlpha = [constants2.COLORTYPE_COLOR_ALPHA, constants2.COLORTYPE_ALPHA].indexOf(
         options.colorType
       ) !== -1;
       if (options.colorType === options.inputColorType) {
@@ -120665,11 +120766,11 @@ var require_bitpacker = __commonJS({
       }
       let data = options.bitDepth !== 16 ? dataIn : new Uint16Array(dataIn.buffer);
       let maxValue = 255;
-      let inBpp = constants.COLORTYPE_TO_BPP_MAP[options.inputColorType];
+      let inBpp = constants2.COLORTYPE_TO_BPP_MAP[options.inputColorType];
       if (inBpp === 4 && !options.inputHasAlpha) {
         inBpp = 3;
       }
-      let outBpp = constants.COLORTYPE_TO_BPP_MAP[options.colorType];
+      let outBpp = constants2.COLORTYPE_TO_BPP_MAP[options.colorType];
       if (options.bitDepth === 16) {
         maxValue = 65535;
         outBpp *= 2;
@@ -120693,24 +120794,24 @@ var require_bitpacker = __commonJS({
         let blue;
         let alpha = maxValue;
         switch (options.inputColorType) {
-          case constants.COLORTYPE_COLOR_ALPHA:
+          case constants2.COLORTYPE_COLOR_ALPHA:
             alpha = data[inIndex + 3];
             red = data[inIndex];
             green = data[inIndex + 1];
             blue = data[inIndex + 2];
             break;
-          case constants.COLORTYPE_COLOR:
+          case constants2.COLORTYPE_COLOR:
             red = data[inIndex];
             green = data[inIndex + 1];
             blue = data[inIndex + 2];
             break;
-          case constants.COLORTYPE_ALPHA:
+          case constants2.COLORTYPE_ALPHA:
             alpha = data[inIndex + 1];
             red = data[inIndex];
             green = red;
             blue = red;
             break;
-          case constants.COLORTYPE_GRAYSCALE:
+          case constants2.COLORTYPE_GRAYSCALE:
             red = data[inIndex];
             green = red;
             blue = red;
@@ -120743,8 +120844,8 @@ var require_bitpacker = __commonJS({
         for (let x = 0; x < width; x++) {
           let rgba = getRGBA(data, inIndex);
           switch (options.colorType) {
-            case constants.COLORTYPE_COLOR_ALPHA:
-            case constants.COLORTYPE_COLOR:
+            case constants2.COLORTYPE_COLOR_ALPHA:
+            case constants2.COLORTYPE_COLOR:
               if (options.bitDepth === 8) {
                 outData[outIndex] = rgba.red;
                 outData[outIndex + 1] = rgba.green;
@@ -120761,8 +120862,8 @@ var require_bitpacker = __commonJS({
                 }
               }
               break;
-            case constants.COLORTYPE_ALPHA:
-            case constants.COLORTYPE_GRAYSCALE: {
+            case constants2.COLORTYPE_ALPHA:
+            case constants2.COLORTYPE_GRAYSCALE: {
               let grayscale = (rgba.red + rgba.green + rgba.blue) / 3;
               if (options.bitDepth === 8) {
                 outData[outIndex] = grayscale;
@@ -120935,7 +121036,7 @@ var require_filter_pack = __commonJS({
 var require_packer = __commonJS({
   "node_modules/pngjs/lib/packer.js"(exports2, module2) {
     "use strict";
-    var constants = require_constants7();
+    var constants2 = require_constants7();
     var CrcStream = require_crc();
     var bitPacker = require_bitpacker();
     var filter = require_filter_pack();
@@ -120948,23 +121049,23 @@ var require_packer = __commonJS({
       options.inputHasAlpha = options.inputHasAlpha != null ? options.inputHasAlpha : true;
       options.deflateFactory = options.deflateFactory || zlib.createDeflate;
       options.bitDepth = options.bitDepth || 8;
-      options.colorType = typeof options.colorType === "number" ? options.colorType : constants.COLORTYPE_COLOR_ALPHA;
-      options.inputColorType = typeof options.inputColorType === "number" ? options.inputColorType : constants.COLORTYPE_COLOR_ALPHA;
+      options.colorType = typeof options.colorType === "number" ? options.colorType : constants2.COLORTYPE_COLOR_ALPHA;
+      options.inputColorType = typeof options.inputColorType === "number" ? options.inputColorType : constants2.COLORTYPE_COLOR_ALPHA;
       if ([
-        constants.COLORTYPE_GRAYSCALE,
-        constants.COLORTYPE_COLOR,
-        constants.COLORTYPE_COLOR_ALPHA,
-        constants.COLORTYPE_ALPHA
+        constants2.COLORTYPE_GRAYSCALE,
+        constants2.COLORTYPE_COLOR,
+        constants2.COLORTYPE_COLOR_ALPHA,
+        constants2.COLORTYPE_ALPHA
       ].indexOf(options.colorType) === -1) {
         throw new Error(
           "option color type:" + options.colorType + " is not supported at present"
         );
       }
       if ([
-        constants.COLORTYPE_GRAYSCALE,
-        constants.COLORTYPE_COLOR,
-        constants.COLORTYPE_COLOR_ALPHA,
-        constants.COLORTYPE_ALPHA
+        constants2.COLORTYPE_GRAYSCALE,
+        constants2.COLORTYPE_COLOR,
+        constants2.COLORTYPE_COLOR_ALPHA,
+        constants2.COLORTYPE_ALPHA
       ].indexOf(options.inputColorType) === -1) {
         throw new Error(
           "option input color type:" + options.inputColorType + " is not supported at present"
@@ -120988,7 +121089,7 @@ var require_packer = __commonJS({
     };
     Packer.prototype.filterData = function(data, width, height) {
       let packedData = bitPacker(data, width, height, this._options);
-      let bpp = constants.COLORTYPE_TO_BPP_MAP[this._options.colorType];
+      let bpp = constants2.COLORTYPE_TO_BPP_MAP[this._options.colorType];
       let filteredData = filter(packedData, width, height, this._options, bpp);
       return filteredData;
     };
@@ -121008,8 +121109,8 @@ var require_packer = __commonJS({
     };
     Packer.prototype.packGAMA = function(gamma) {
       let buf = Buffer.alloc(4);
-      buf.writeUInt32BE(Math.floor(gamma * constants.GAMMA_DIVISION), 0);
-      return this._packChunk(constants.TYPE_gAMA, buf);
+      buf.writeUInt32BE(Math.floor(gamma * constants2.GAMMA_DIVISION), 0);
+      return this._packChunk(constants2.TYPE_gAMA, buf);
     };
     Packer.prototype.packIHDR = function(width, height) {
       let buf = Buffer.alloc(13);
@@ -121020,13 +121121,13 @@ var require_packer = __commonJS({
       buf[10] = 0;
       buf[11] = 0;
       buf[12] = 0;
-      return this._packChunk(constants.TYPE_IHDR, buf);
+      return this._packChunk(constants2.TYPE_IHDR, buf);
     };
     Packer.prototype.packIDAT = function(data) {
-      return this._packChunk(constants.TYPE_IDAT, data);
+      return this._packChunk(constants2.TYPE_IDAT, data);
     };
     Packer.prototype.packIEND = function() {
-      return this._packChunk(constants.TYPE_IEND, null);
+      return this._packChunk(constants2.TYPE_IEND, null);
     };
   }
 });
@@ -121037,7 +121138,7 @@ var require_packer_async = __commonJS({
     "use strict";
     var util = require("util");
     var Stream = require("stream");
-    var constants = require_constants7();
+    var constants2 = require_constants7();
     var Packer = require_packer();
     var PackerAsync = module2.exports = function(opt) {
       Stream.call(this);
@@ -121048,7 +121149,7 @@ var require_packer_async = __commonJS({
     };
     util.inherits(PackerAsync, Stream);
     PackerAsync.prototype.pack = function(data, width, height, gamma) {
-      this.emit("data", Buffer.from(constants.PNG_SIGNATURE));
+      this.emit("data", Buffer.from(constants2.PNG_SIGNATURE));
       this.emit("data", this._packer.packIHDR(width, height));
       if (gamma) {
         this.emit("data", this._packer.packGAMA(gamma));
@@ -121376,7 +121477,7 @@ var require_packer_sync = __commonJS({
     if (!zlib.deflateSync) {
       hasSyncZlib = false;
     }
-    var constants = require_constants7();
+    var constants2 = require_constants7();
     var Packer = require_packer();
     module2.exports = function(metaData, opt) {
       if (!hasSyncZlib) {
@@ -121387,7 +121488,7 @@ var require_packer_sync = __commonJS({
       let options = opt || {};
       let packer = new Packer(options);
       let chunks = [];
-      chunks.push(Buffer.from(constants.PNG_SIGNATURE));
+      chunks.push(Buffer.from(constants2.PNG_SIGNATURE));
       chunks.push(packer.packIHDR(metaData.width, metaData.height));
       if (metaData.gamma) {
         chunks.push(packer.packGAMA(metaData.gamma));
@@ -122490,10 +122591,10 @@ var require_truncate = __commonJS({
   "node_modules/semver/functions/truncate.js"(exports2, module2) {
     "use strict";
     var parse3 = require_parse5();
-    var constants = require_constants8();
+    var constants2 = require_constants8();
     var SemVer = require_semver();
     var truncate = (version2, truncation, options) => {
-      if (!constants.RELEASE_TYPES.includes(truncation)) {
+      if (!constants2.RELEASE_TYPES.includes(truncation)) {
         return null;
       }
       const clonedVersion = cloneInputVersion(version2, options);
@@ -123542,7 +123643,7 @@ var require_semver2 = __commonJS({
   "node_modules/semver/index.js"(exports2, module2) {
     "use strict";
     var internalRe = require_re();
-    var constants = require_constants8();
+    var constants2 = require_constants8();
     var SemVer = require_semver();
     var identifiers = require_identifiers();
     var parse3 = require_parse5();
@@ -123626,8 +123727,8 @@ var require_semver2 = __commonJS({
       re: internalRe.re,
       src: internalRe.src,
       tokens: internalRe.t,
-      SEMVER_SPEC_VERSION: constants.SEMVER_SPEC_VERSION,
-      RELEASE_TYPES: constants.RELEASE_TYPES,
+      SEMVER_SPEC_VERSION: constants2.SEMVER_SPEC_VERSION,
+      RELEASE_TYPES: constants2.RELEASE_TYPES,
       compareIdentifiers: identifiers.compareIdentifiers,
       rcompareIdentifiers: identifiers.rcompareIdentifiers
     };
@@ -123850,7 +123951,7 @@ function readMarker() {
     const parsed = JSON.parse(raw2);
     return MarkerSchema.parse(parsed);
   } catch (err) {
-    log3.warn(`marker at ${markerPath()} is malformed; treating as absent`, {
+    log7.warn(`marker at ${markerPath()} is malformed; treating as absent`, {
       error: err instanceof Error ? err.message : String(err)
     });
     return null;
@@ -123867,7 +123968,7 @@ function writeMarker(marker) {
 function clearMarker() {
   if ((0, import_node_fs21.existsSync)(markerPath())) (0, import_node_fs21.rmSync)(markerPath());
 }
-var import_node_fs21, import_node_path25, log3;
+var import_node_fs21, import_node_path25, log7;
 var init_marker = __esm({
   "src/lifecycle/marker.ts"() {
     "use strict";
@@ -123876,7 +123977,7 @@ var init_marker = __esm({
     init_logger();
     init_constants();
     init_marker_schema();
-    log3 = getLogger("lifecycle.marker");
+    log7 = getLogger("lifecycle.marker");
   }
 });
 
@@ -124077,7 +124178,7 @@ function readPrefs() {
   try {
     return PrefsSchema.parse(JSON.parse((0, import_node_fs23.readFileSync)(path2, "utf8")));
   } catch (err) {
-    log5.warn(`prefs at ${path2} are malformed; treating as empty`, {
+    log9.warn(`prefs at ${path2} are malformed; treating as empty`, {
       error: err instanceof Error ? err.message : String(err)
     });
     return { repos: {} };
@@ -124112,7 +124213,7 @@ function forgetAll() {
   const path2 = prefsPath();
   if ((0, import_node_fs23.existsSync)(path2)) (0, import_node_fs23.rmSync)(path2);
 }
-var import_node_fs23, import_node_path26, log5, PrefsSchema;
+var import_node_fs23, import_node_path26, log9, PrefsSchema;
 var init_prefs = __esm({
   "src/lifecycle/prefs.ts"() {
     "use strict";
@@ -124121,7 +124222,7 @@ var init_prefs = __esm({
     init_zod();
     init_logger();
     init_constants();
-    log5 = getLogger("lifecycle.prefs");
+    log9 = getLogger("lifecycle.prefs");
     PrefsSchema = external_exports.object({
       repos: external_exports.record(
         external_exports.string(),
@@ -124224,7 +124325,7 @@ function takeoverProd(opts) {
         `prod is already suspended by dev pid ${existing.devPid} (since ${existing.suspendedAt}). Stop that dev session first, or run 'tb-streamer prod doctor'.`
       );
     }
-    log6.info(`stale marker found (pid ${existing.devPid} is gone) \u2014 clearing and proceeding`);
+    log10.info(`stale marker found (pid ${existing.devPid} is gone) \u2014 clearing and proceeding`);
   }
   getSupervisor().bootoutAgent();
   writeMarker({
@@ -124239,7 +124340,7 @@ function takeoverProd(opts) {
     const m2 = readMarker();
     if (m2 && m2.devPid === process.pid) {
       writeMarker({ ...m2, userHeld: true });
-      log6.info(
+      log10.info(
         `prod is suspended (userHeld). Run 'tb-streamer prod start' to restore the supervised instance.`
       );
     }
@@ -124258,14 +124359,14 @@ function takeoverProd(opts) {
   });
   process.on("uncaughtException", (err) => {
     flipUserHeld();
-    log6.error(`uncaught: ${err.message}`);
+    log10.error(`uncaught: ${err.message}`);
     process.exit(1);
   });
   process.on("exit", () => {
     flipUserHeld();
   });
 }
-var import_node_net, log6;
+var import_node_net, log10;
 var init_dev_takeover = __esm({
   "src/lifecycle/dev-takeover.ts"() {
     "use strict";
@@ -124274,7 +124375,7 @@ var init_dev_takeover = __esm({
     init_marker();
     init_platform();
     init_prefs();
-    log6 = getLogger("lifecycle.dev-takeover");
+    log10 = getLogger("lifecycle.dev-takeover");
   }
 });
 
@@ -127787,6 +127888,9 @@ function appendDevSessionMarker() {
   }
 }
 
+// cli/index.ts
+init_feature_flags();
+
 // src/lan-url.ts
 var import_os2 = require("os");
 function resolveServerUrl({ publicUrl, port }) {
@@ -132113,7 +132217,7 @@ var REF_PREFIX = "ref: refs/heads/";
 var MAX_DEPTH = 6;
 function readGitBranch(projectPath) {
   if (!projectPath) return null;
-  const log8 = getLogger2();
+  const log12 = getLogger2();
   let dir = projectPath;
   let depth = 0;
   while (depth < MAX_DEPTH) {
@@ -132122,11 +132226,11 @@ function readGitBranch(projectPath) {
       const content = (0, import_fs2.readFileSync)(headPath, "utf-8").trim();
       if (content.startsWith(REF_PREFIX)) {
         const branch = content.slice(REF_PREFIX.length);
-        log8.trace({ projectPath, dir, branch }, "git: branch resolved");
+        log12.trace({ projectPath, dir, branch }, "git: branch resolved");
         return branch;
       }
       if (content.length >= 7) {
-        log8.trace({ projectPath, dir }, "git: detached HEAD");
+        log12.trace({ projectPath, dir }, "git: detached HEAD");
         return "(detached)";
       }
       return null;
@@ -132137,7 +132241,7 @@ function readGitBranch(projectPath) {
     dir = parent;
     depth++;
   }
-  log8.trace({ projectPath }, "git: no .git found within depth");
+  log12.trace({ projectPath }, "git: no .git found within depth");
   return null;
 }
 function generateMatches(meta3, query) {
@@ -132430,8 +132534,8 @@ function cleanSystemTags(text) {
   return text.replace(SYSTEM_TAG_RE, "").replace(/[^\S\n]+/g, " ").replace(/\n{3,}/g, "\n\n").trim();
 }
 async function parseMeta(filePath, account, tier) {
-  const log8 = getLogger2();
-  log8.trace({ filePath, account, tier: tier.name }, "parseMeta: start");
+  const log12 = getLogger2();
+  log12.trace({ filePath, account, tier: tier.name }, "parseMeta: start");
   const state = initialReducerState();
   const fileStream = (0, import_fs3.createReadStream)(filePath);
   const rl = (0, import_readline.createInterface)({ input: fileStream, crlfDelay: Infinity });
@@ -132448,22 +132552,22 @@ async function parseMeta(filePath, account, tier) {
       reduceLine(state, entry, tier);
     }
   } catch (err) {
-    log8.warn({ filePath, err }, "parseMeta: read failed");
+    log12.warn({ filePath, err }, "parseMeta: read failed");
     return null;
   }
   if (state.badJsonLines > 0) {
-    log8.warn(
+    log12.warn(
       { filePath, badJsonLines: state.badJsonLines },
       "parseMeta: skipped malformed JSON lines"
     );
   }
   const meta3 = finalizeMeta(state, filePath, account, tier);
-  if (!meta3) log8.trace({ filePath }, "parseMeta: no messages");
+  if (!meta3) log12.trace({ filePath }, "parseMeta: no messages");
   return meta3;
 }
 async function parseConversation(filePath, account) {
-  const log8 = getLogger2();
-  log8.trace({ filePath, account }, "parseConversation: start");
+  const log12 = getLogger2();
+  log12.trace({ filePath, account }, "parseConversation: start");
   const messages = [];
   let badJsonLines = 0;
   const textParts = [];
@@ -132496,17 +132600,17 @@ async function parseConversation(filePath, account) {
       }
     }
   } catch (err) {
-    log8.warn({ filePath, err }, "parseConversation: read failed");
+    log12.warn({ filePath, err }, "parseConversation: read failed");
     return null;
   }
   if (badJsonLines > 0) {
-    log8.warn({ filePath, badJsonLines }, "parseConversation: skipped malformed JSON lines");
+    log12.warn({ filePath, badJsonLines }, "parseConversation: skipped malformed JSON lines");
   }
   if (messages.length === 0) {
-    log8.trace({ filePath }, "parseConversation: no messages");
+    log12.trace({ filePath }, "parseConversation: no messages");
     return null;
   }
-  log8.debug({ filePath, messageCount: messages.length }, "parseConversation: complete");
+  log12.debug({ filePath, messageCount: messages.length }, "parseConversation: complete");
   applyTeamInfo(messages, state);
   return {
     id: filePath,
@@ -132771,15 +132875,15 @@ async function detectDefaultProfile() {
   };
 }
 async function loadProfiles(configPath) {
-  const log8 = getLogger2();
+  const log12 = getLogger2();
   try {
     const resolved = resolveConfigDir(configPath);
     const data = await (0, import_promises4.readFile)((0, import_path5.join)(resolved, PROFILES_FILE), "utf-8");
     const profiles = JSON.parse(data);
-    log8.debug({ configPath, count: profiles.length }, "profiles: loaded");
+    log12.debug({ configPath, count: profiles.length }, "profiles: loaded");
     return profiles;
   } catch (err) {
-    log8.debug({ configPath, err }, "profiles: load failed, using default");
+    log12.debug({ configPath, err }, "profiles: load failed, using default");
     const defaultProfile = await detectDefaultProfile();
     return [defaultProfile];
   }
@@ -132790,7 +132894,7 @@ function canonicalPath(p2) {
 var CodexCliProvider = class {
   name = CODEX_CLI_PROVIDER;
   async discover(roots) {
-    const log8 = getLogger2();
+    const log12 = getLogger2();
     const results = [];
     for (const root of roots) {
       let paths;
@@ -132802,7 +132906,7 @@ var CodexCliProvider = class {
           unique: true
         });
       } catch (err) {
-        log8.warn({ root, err }, "codex discovery: glob failed");
+        log12.warn({ root, err }, "codex discovery: glob failed");
         continue;
       }
       for (const filePath of paths) {
@@ -132810,7 +132914,7 @@ var CodexCliProvider = class {
           const s3 = await (0, import_promises5.stat)(filePath);
           if (s3.size > 0) results.push({ filePath: canonicalPath(filePath), account: "codex" });
         } catch (err) {
-          log8.warn({ filePath, err }, "codex discovery: stat failed");
+          log12.warn({ filePath, err }, "codex discovery: stat failed");
         }
       }
     }
@@ -132954,7 +133058,7 @@ function getShortProjectName3(fullPath) {
   return fullPath.split("/").filter(Boolean).slice(-3).join("/");
 }
 async function parseCodexConversation(filePath, account) {
-  const log8 = getLogger2();
+  const log12 = getLogger2();
   const messages = [];
   const textParts = [];
   let sessionId = "";
@@ -132990,7 +133094,7 @@ async function parseCodexConversation(filePath, account) {
       if (role === "user") lastUserText = text;
     }
   } catch (err) {
-    log8.warn({ filePath, err }, "parseCodexConversation: read failed");
+    log12.warn({ filePath, err }, "parseCodexConversation: read failed");
     return null;
   }
   if (messages.length === 0) return null;
@@ -133012,7 +133116,7 @@ async function parseCodexConversation(filePath, account) {
 var EXCLUDED_SEGMENTS = ["/memory/", "/tool-results/"];
 var STAT_CONCURRENCY = 32;
 async function discoverJsonlFiles(dirs, onProgress) {
-  const log8 = getLogger2();
+  const log12 = getLogger2();
   const results = [];
   for (const { projectsDir, account } of dirs) {
     let filePaths;
@@ -133023,7 +133127,7 @@ async function discoverJsonlFiles(dirs, onProgress) {
         dot: false
       });
     } catch (err) {
-      log8.warn({ projectsDir, account, err }, "discovery: glob failed");
+      log12.warn({ projectsDir, account, err }, "discovery: glob failed");
       continue;
     }
     const filtered = filePaths.filter((fp) => !EXCLUDED_SEGMENTS.some((seg) => fp.includes(seg)));
@@ -133038,7 +133142,7 @@ async function discoverJsonlFiles(dirs, onProgress) {
             const s3 = await (0, import_promises6.stat)(filePath);
             return { filePath, size: s3.size };
           } catch (err) {
-            log8.warn({ filePath, err }, "discovery: stat failed");
+            log12.warn({ filePath, err }, "discovery: stat failed");
             return { filePath, size: -1 };
           }
         })
@@ -133054,7 +133158,7 @@ async function discoverJsonlFiles(dirs, onProgress) {
         }
       }
     }
-    log8.debug(
+    log12.debug(
       {
         projectsDir,
         account,
@@ -133068,7 +133172,7 @@ async function discoverJsonlFiles(dirs, onProgress) {
     );
     onProgress?.(results.length);
   }
-  log8.debug({ totalFiles: results.length, dirs: dirs.length }, "discovery: complete");
+  log12.debug({ totalFiles: results.length, dirs: dirs.length }, "discovery: complete");
   return results;
 }
 var ThreadbaseProvider = class {
@@ -133378,7 +133482,7 @@ function classify(filePath, existing) {
   return { change: "reindex", stat: stat42 };
 }
 async function parseMetaWithProvider(provider, filePath, account, tier) {
-  const log8 = getLogger2();
+  const log12 = getLogger2();
   const acc = provider.createEmptyAccumulator();
   const rl = (0, import_readline3.createInterface)({
     input: (0, import_fs11.createReadStream)(filePath),
@@ -133396,11 +133500,11 @@ async function parseMetaWithProvider(provider, filePath, account, tier) {
       try {
         provider.reduceEntry(acc, entry, tier);
       } catch (err) {
-        log8.warn({ filePath, provider: provider.name, err }, "provider reduce threw; line skipped");
+        log12.warn({ filePath, provider: provider.name, err }, "provider reduce threw; line skipped");
       }
     }
   } catch (err) {
-    log8.warn({ filePath, provider: provider.name, err }, "provider parse: read failed");
+    log12.warn({ filePath, provider: provider.name, err }, "provider parse: read failed");
     return null;
   }
   return provider.finalize(acc, filePath, account, tier);
@@ -133574,8 +133678,8 @@ CREATE INDEX IF NOT EXISTS idx_scanned_dirs_parent_root ON scanned_dirs(parent_r
 function runMigrations(db) {
   const current = db.pragma("user_version", { simple: true });
   if (current >= SCHEMA_VERSION) return;
-  const log8 = getLogger2();
-  log8.info({ from: current, to: SCHEMA_VERSION }, "migrations: applying");
+  const log12 = getLogger2();
+  log12.info({ from: current, to: SCHEMA_VERSION }, "migrations: applying");
   if (current >= 1 && current < 2 && tableExists(db, "conversations")) {
     for (const [col, ddl] of [
       [
@@ -133617,7 +133721,7 @@ function openDatabase(dbPath) {
 }
 var FULL_RECONCILE_EVERY_N_SCANS = 20;
 async function discoverJsonlFilesGated(dirs, files, scannedDirs, options = {}) {
-  const log8 = getLogger2();
+  const log12 = getLogger2();
   if (options.fullRescan) {
     return discoverJsonlFiles(dirs);
   }
@@ -133659,7 +133763,7 @@ async function discoverJsonlFilesGated(dirs, files, scannedDirs, options = {}) {
       }
     }
   }
-  log8.debug(
+  log12.debug(
     { totalFiles: results.length, dirs: dirs.length },
     "dir-watermark: gated discovery complete"
   );
@@ -134165,7 +134269,7 @@ var PersistentEngine = class {
   // changed since the last index, and upsert their metadata. Returns the number
   // of files seen on disk this pass (the scan "scanned" count).
   async indexAll(activeProfiles, options) {
-    const log8 = getLogger2();
+    const log12 = getLogger2();
     const tier = resolveTier(options.tier ?? "standard", options.tiers);
     const enabled = options.providers ?? [CLAUDE_CODE_PROVIDER];
     const discovered = [];
@@ -134229,7 +134333,7 @@ var PersistentEngine = class {
     for (const path2 of this.files.activePathsByAccounts([...coveredAccounts])) {
       if (!seen.has(path2)) this.markDeleted(path2);
     }
-    log8.info({ scanned, indexed: this.conversations.count() }, "persistent: indexAll complete");
+    log12.info({ scanned, indexed: this.conversations.count() }, "persistent: indexAll complete");
     return { scanned };
   }
   // (Re)index a single file. Classifies the change vs. the persisted cursor:
@@ -134240,7 +134344,7 @@ var PersistentEngine = class {
   // alongside the meta so callers (refreshFile) can keep, extend, or evict
   // their own per-file caches without re-stat'ing the file (racy) themselves.
   async indexFile(rawFilePath, account, tierName, customTiers, resolveGitBranch, force = false, provider) {
-    const log8 = getLogger2();
+    const log12 = getLogger2();
     const tier = resolveTier(tierName, customTiers);
     const filePath = canonicalPath(rawFilePath);
     const existing = this.files.getByPath(filePath);
@@ -134271,7 +134375,7 @@ var PersistentEngine = class {
     try {
       result = await tailReduce(filePath, startOffset, startLine, state, tier);
     } catch (err) {
-      log8.warn({ filePath, err }, "persistent: tail read failed");
+      log12.warn({ filePath, err }, "persistent: tail read failed");
       return { meta: null, change };
     }
     const meta3 = finalizeMeta(state, filePath, account, tier);
@@ -134314,7 +134418,7 @@ var PersistentEngine = class {
         )
       );
     }
-    log8.debug(
+    log12.debug(
       { filePath, change, bytesRead: result.newOffset - startOffset, msgs: meta3.messageCount },
       "persistent: indexed file"
     );
@@ -134326,7 +134430,7 @@ var PersistentEngine = class {
   // so the next pass classifies an unchanged file as "unchanged" and skips it;
   // any change reparses from 0 again. No reducer_state is persisted.
   async indexFileWithProvider(provider, filePath, account, tier, stat42, resolveGitBranch) {
-    const log8 = getLogger2();
+    const log12 = getLogger2();
     const meta3 = await parseMetaWithProvider(provider, filePath, account, tier);
     if (!meta3) {
       this.markDeleted(filePath);
@@ -134354,7 +134458,7 @@ var PersistentEngine = class {
       });
     });
     upsert();
-    log8.debug(
+    log12.debug(
       { filePath, provider: provider.name, msgs: meta3.messageCount },
       "persistent: indexed provider file"
     );
@@ -134468,7 +134572,7 @@ var FileWatcher = class {
   // Resolves once every underlying chokidar watcher has finished its initial
   // scan, so the caller knows subsequent FS changes will be observed.
   async start() {
-    const log8 = getLogger2();
+    const log12 = getLogger2();
     const ready = [];
     for (const profile of this.profiles) {
       const dir = getProjectsDir(profile);
@@ -134480,7 +134584,7 @@ var FileWatcher = class {
       watcher.on("add", (p2) => this.dispatch(p2, profile.id, "add")).on("change", (p2) => this.dispatch(p2, profile.id, "change")).on("unlink", (p2) => this.dispatch(p2, profile.id, "unlink"));
       ready.push(new Promise((resolve4) => watcher.once("ready", () => resolve4())));
       this.watchers.push(watcher);
-      log8.debug({ dir, account: profile.id }, "watcher: watching");
+      log12.debug({ dir, account: profile.id }, "watcher: watching");
     }
     await Promise.all(ready);
   }
@@ -134527,14 +134631,14 @@ var IndexQueue = class {
   async drain() {
     if (this.running) return;
     this.running = true;
-    const log8 = getLogger2();
+    const log12 = getLogger2();
     while (this.pending.size > 0) {
       const [path2, job] = this.pending.entries().next().value;
       this.pending.delete(path2);
       try {
         await this.process(job);
       } catch (err) {
-        log8.warn({ filePath: job.filePath, err }, "index-queue: job failed");
+        log12.warn({ filePath: job.filePath, err }, "index-queue: job failed");
       }
     }
     this.running = false;
@@ -134643,13 +134747,13 @@ var ConversationScanner = class {
   // active metas and run the identical filter/sort/view/paginate pipeline as
   // the in-memory path — guaranteeing an identical ScanResult shape.
   async scanPersistent(activeProfiles, options) {
-    const log8 = getLogger2();
+    const log12 = getLogger2();
     const startedAt = Date.now();
     const engine = this.engine();
     const { scanned } = await engine.indexAll(activeProfiles, options);
     const allMetas = engine.allActive();
     const { conversations, total } = this.finalize(allMetas, options);
-    log8.info(
+    log12.info(
       { scanned, kept: allMetas.length, filteredTotal: total, elapsedMs: Date.now() - startedAt },
       "scan: complete (persistent)"
     );
@@ -134676,10 +134780,10 @@ var ConversationScanner = class {
     return { conversations, total };
   }
   async scanInMemory(activeProfiles, options) {
-    const log8 = getLogger2();
+    const log12 = getLogger2();
     const startedAt = Date.now();
     const tier = this.lastTier;
-    log8.info(
+    log12.info(
       {
         activeProfiles: activeProfiles.length,
         tier: tier.name,
@@ -134733,7 +134837,7 @@ var ConversationScanner = class {
             return meta3;
           } catch (err) {
             parseFailures++;
-            log8.warn({ filePath, account, provider: provider.name, err }, "scan: parse threw");
+            log12.warn({ filePath, account, provider: provider.name, err }, "scan: parse threw");
             return null;
           }
         })
@@ -134753,12 +134857,12 @@ var ConversationScanner = class {
         options.onBatch?.(batchMetas);
       }
       scanned += batch.length;
-      log8.debug({ scanned, totalFiles, batchKept: batchMetas.length }, "scan: batch complete");
+      log12.debug({ scanned, totalFiles, batchKept: batchMetas.length }, "scan: batch complete");
       options.onProgress?.(scanned, totalFiles);
     }
     const { conversations, total } = this.finalize(allMetas, options);
     const elapsedMs = Date.now() - startedAt;
-    log8.info(
+    log12.info(
       {
         totalFiles,
         scanned,
@@ -134772,13 +134876,13 @@ var ConversationScanner = class {
     return { conversations, total, scanned };
   }
   async search(query, options = {}) {
-    const log8 = getLogger2();
-    log8.debug({ query, indexSize: this.indexer.getDocumentCount() }, "search: start");
+    const log12 = getLogger2();
+    log12.debug({ query, indexSize: this.indexer.getDocumentCount() }, "search: start");
     let results;
     if (this.persistent) {
       const engine = this.engine();
       if (engine.conversations.count() === 0) {
-        log8.debug("search: persistent index empty, triggering scan");
+        log12.debug("search: persistent index empty, triggering scan");
         const profiles = await this.resolveProfiles(options.profiles);
         const activeProfiles = profiles.filter((p2) => p2.enabled && p2.scanHistory !== false);
         await engine.indexAll(activeProfiles, { ...options, limit: void 0, offset: void 0 });
@@ -134791,7 +134895,7 @@ var ConversationScanner = class {
       }));
     } else {
       if (this.indexer.getDocumentCount() === 0) {
-        log8.debug("search: index empty, triggering scan");
+        log12.debug("search: index empty, triggering scan");
         await this.scan({ ...options, limit: void 0, offset: void 0 });
       }
       results = this.indexer.search(query, {
@@ -134834,23 +134938,23 @@ var ConversationScanner = class {
     const limit = options.limit ?? 50;
     const offset = options.offset ?? 0;
     const sliced = results.slice(offset, offset + limit);
-    log8.debug({ query, matched: results.length, returned: sliced.length }, "search: complete");
+    log12.debug({ query, matched: results.length, returned: sliced.length }, "search: complete");
     return sliced;
   }
   async getConversation(id, _options) {
-    const log8 = getLogger2();
+    const log12 = getLogger2();
     const cid = canonicalPath(id);
     const cached3 = this.conversationLRU.get(cid);
     if (cached3) {
-      log8.debug({ id }, "getConversation: cache hit");
+      log12.debug({ id }, "getConversation: cache hit");
       return cached3.conversation;
     }
     const meta3 = this.persistent ? this.engine().getByIdOrSession(cid) : this.metadataCache.get(cid) ?? this.resolveSessionId(cid);
     if (!meta3) {
-      log8.debug({ id }, "getConversation: not found in metadata");
+      log12.debug({ id }, "getConversation: not found in metadata");
       return null;
     }
-    log8.debug({ id, filePath: meta3.filePath }, "getConversation: cache miss, parsing");
+    log12.debug({ id, filePath: meta3.filePath }, "getConversation: cache miss, parsing");
     try {
       if (this.persistent && meta3.provider !== CODEX_CLI_PROVIDER) {
         const parsed = await parseConversationResumable(meta3.filePath, meta3.account);
@@ -134863,7 +134967,7 @@ var ConversationScanner = class {
       }
       return conversation;
     } catch (err) {
-      log8.warn({ id, filePath: meta3.filePath, err }, "getConversation: parse failed");
+      log12.warn({ id, filePath: meta3.filePath, err }, "getConversation: parse failed");
       return null;
     }
   }
@@ -134949,7 +135053,7 @@ var ConversationScanner = class {
     return refresh;
   }
   async doRefreshFile(filePath, account) {
-    const log8 = getLogger2();
+    const log12 = getLogger2();
     if (this.persistent) {
       const engine = this.engine();
       const previous2 = engine.getByIdOrSession(filePath);
@@ -134976,7 +135080,7 @@ var ConversationScanner = class {
       } else if (change === "appended") {
         await this.extendCachedConversations(cacheKeys, filePath, meta22.account);
       }
-      log8.debug({ filePath, change, kept: !!meta22 }, "refreshFile: updated persistent index");
+      log12.debug({ filePath, change, kept: !!meta22 }, "refreshFile: updated persistent index");
       return meta22;
     }
     const previous = this.metadataCache.get(filePath);
@@ -134985,7 +135089,7 @@ var ConversationScanner = class {
     try {
       meta3 = await parseMeta(filePath, resolvedAccount, this.lastTier);
     } catch (err) {
-      log8.warn({ filePath, err }, "refreshFile: parseMeta threw");
+      log12.warn({ filePath, err }, "refreshFile: parseMeta threw");
       meta3 = null;
     }
     const evict = (m2) => {
@@ -135001,7 +135105,7 @@ var ConversationScanner = class {
         this.removeFromSessionIndex(previous);
         this.indexer.removeDocument(previous.id);
       }
-      log8.debug({ filePath }, "refreshFile: dropped (no parseable messages)");
+      log12.debug({ filePath }, "refreshFile: dropped (no parseable messages)");
       return null;
     }
     meta3.gitBranch = readGitBranch(meta3.projectPath);
@@ -135014,7 +135118,7 @@ var ConversationScanner = class {
     } else {
       this.indexer.addDocument(meta3);
     }
-    log8.debug(
+    log12.debug(
       { filePath, messageCount: meta3.messageCount },
       "refreshFile: updated in-memory indexes"
     );
@@ -138222,6 +138326,7 @@ function readRawBody2(req) {
 var createConfigRoutes = (deps) => {
   const app = new Hono2();
   app.get("/claude-flags", (c) => c.json(deps.claudeFlagsConfig()));
+  app.get("/feature-flags", (c) => c.json(deps.featureFlagsConfig()));
   app.put("/claude-flags", async (c) => {
     if (deps.localNoAuth) {
       return c.json({ error: "claude flag changes are disabled while localNoAuth is active" }, 403);
@@ -138475,7 +138580,266 @@ function createLogsRoutes() {
 var import_node_child_process2 = require("child_process");
 var import_node_crypto = require("crypto");
 var import_os5 = require("os");
+
+// src/db/repositories/push.repository.ts
+var FAILURE_STREAK_LIMIT = 5;
+var PUSH_TOKEN_KINDS = ["expo", "liveactivity_start", "liveactivity_update"];
+var DEFAULT_PUSH_TOKEN_KIND = "expo";
+function isPushTokenKind(value) {
+  return typeof value === "string" && PUSH_TOKEN_KINDS.includes(value);
+}
+function tokenState(row, now = Date.now()) {
+  if (row.revoked_at != null) return "revoked";
+  if (row.expires_at != null && row.expires_at <= now) return "expired";
+  if (row.failure_streak >= FAILURE_STREAK_LIMIT) return "dead";
+  if (row.failure_streak > 0) return "failing";
+  if (row.last_success_at == null) return "never-delivered";
+  return "healthy";
+}
+function toHealth(row, now = Date.now()) {
+  return {
+    platform: row.platform,
+    deviceId: row.device_id,
+    registeredAt: row.registered_at,
+    lastSuccessAt: row.last_success_at,
+    lastFailureAt: row.last_failure_at,
+    lastFailureCode: row.last_failure_code,
+    failureStreak: row.failure_streak,
+    revokedAt: row.revoked_at,
+    state: tokenState(row, now),
+    kind: row.kind,
+    activityId: row.activity_id,
+    sessionId: row.session_id,
+    expiresAt: row.expires_at
+  };
+}
+var PushRepository = class {
+  upsertStmt;
+  getStmt;
+  listActiveStmt;
+  listAllStmt;
+  successStmt;
+  failureStmt;
+  revokeStmt;
+  claimEventStmt;
+  markDeliveredStmt;
+  listByKindSessionStmt;
+  listByKindStmt;
+  listRenewableStmt;
+  claimRenewalStmt;
+  expireStmt;
+  expireSessionActivitiesStmt;
+  constructor(db) {
+    this.upsertStmt = db.prepare(`
+      INSERT INTO push_tokens (
+        token, platform, device_id, registered_at,
+        kind, activity_id, session_id, expires_at, stale_date, started_at
+      )
+      VALUES (
+        @token, @platform, @device_id, @registered_at,
+        @kind, @activity_id, @session_id, @expires_at, @stale_date, @started_at
+      )
+      ON CONFLICT(token) DO UPDATE SET
+        platform = excluded.platform,
+        device_id = COALESCE(excluded.device_id, push_tokens.device_id),
+        registered_at = excluded.registered_at,
+        kind = excluded.kind,
+        activity_id = COALESCE(excluded.activity_id, push_tokens.activity_id),
+        session_id = COALESCE(excluded.session_id, push_tokens.session_id),
+        expires_at = excluded.expires_at,
+        stale_date = excluded.stale_date,
+        -- Preserve the ORIGINAL start across a re-registration. iOS renders its
+        -- own ticking timer from started_at, so overwriting it with a fresh
+        -- value visibly resets the user's elapsed time to zero.
+        started_at = COALESCE(push_tokens.started_at, excluded.started_at),
+        -- A fresh registration clears prior failure state and any revocation:
+        -- the client is telling us this token is live again. renewed_at clears
+        -- too \u2014 this is a new activity generation, so it is renewable again.
+        failure_streak = 0,
+        last_failure_at = NULL,
+        last_failure_code = NULL,
+        revoked_at = NULL,
+        renewed_at = NULL
+    `);
+    this.getStmt = db.prepare("SELECT * FROM push_tokens WHERE token = ?");
+    this.listActiveStmt = db.prepare(`
+      SELECT * FROM push_tokens
+       WHERE revoked_at IS NULL AND failure_streak < ${FAILURE_STREAK_LIMIT}
+         AND kind = 'expo'
+       ORDER BY registered_at ASC
+    `);
+    this.listAllStmt = db.prepare("SELECT * FROM push_tokens ORDER BY registered_at ASC");
+    this.successStmt = db.prepare(`
+      UPDATE push_tokens
+         SET last_success_at = @at, failure_streak = 0,
+             last_failure_code = NULL
+       WHERE token = @token
+    `);
+    this.failureStmt = db.prepare(`
+      UPDATE push_tokens
+         SET last_failure_at = @at, last_failure_code = @code,
+             failure_streak = failure_streak + 1
+       WHERE token = @token
+    `);
+    this.revokeStmt = db.prepare("UPDATE push_tokens SET revoked_at = ? WHERE token = ?");
+    this.listByKindSessionStmt = db.prepare(`
+      SELECT * FROM push_tokens
+       WHERE kind = @kind AND session_id = @session_id
+         AND revoked_at IS NULL AND failure_streak < ${FAILURE_STREAK_LIMIT}
+         AND (expires_at IS NULL OR expires_at > @now)
+       ORDER BY registered_at ASC
+    `);
+    this.listByKindStmt = db.prepare(`
+      SELECT * FROM push_tokens
+       WHERE kind = @kind
+         AND revoked_at IS NULL AND failure_streak < ${FAILURE_STREAK_LIMIT}
+         AND (expires_at IS NULL OR expires_at > @now)
+       ORDER BY registered_at ASC
+    `);
+    this.listRenewableStmt = db.prepare(`
+      SELECT * FROM push_tokens
+       WHERE kind = 'liveactivity_update'
+         AND stale_date IS NOT NULL AND renewed_at IS NULL
+         AND revoked_at IS NULL AND failure_streak < ${FAILURE_STREAK_LIMIT}
+       ORDER BY stale_date ASC
+    `);
+    this.claimRenewalStmt = db.prepare(`
+      UPDATE push_tokens SET renewed_at = @at
+       WHERE token = @token AND renewed_at IS NULL
+    `);
+    this.expireStmt = db.prepare("UPDATE push_tokens SET expires_at = ? WHERE token = ?");
+    this.expireSessionActivitiesStmt = db.prepare(`
+      UPDATE push_tokens SET expires_at = @at
+       WHERE session_id = @session_id AND kind = 'liveactivity_update'
+         AND (expires_at IS NULL OR expires_at > @at)
+    `);
+    this.claimEventStmt = db.prepare(`
+      INSERT OR IGNORE INTO push_events (event_id, session_id, created_at)
+      VALUES (@event_id, @session_id, @created_at)
+    `);
+    this.markDeliveredStmt = db.prepare(
+      "UPDATE push_events SET delivered_at = ? WHERE event_id = ?"
+    );
+  }
+  /**
+   * Register or refresh a token.
+   *
+   * `kind` defaults to Expo so a released client posting `{ token, platform }`
+   * keeps working — tb-mobile cannot be force-updated, and every client
+   * predating Live Activities is registering an Expo relay token.
+   *
+   * Several rows per device is normal and intended: a device runs one activity
+   * per live session, each with its own update token. The token itself is the
+   * primary key, so distinct activities never collide.
+   */
+  register(args) {
+    this.upsertStmt.run({
+      token: args.token,
+      platform: args.platform,
+      device_id: args.deviceId ?? null,
+      registered_at: args.now ?? Date.now(),
+      kind: args.kind ?? DEFAULT_PUSH_TOKEN_KIND,
+      activity_id: args.activityId ?? null,
+      session_id: args.sessionId ?? null,
+      expires_at: args.expiresAt ?? null,
+      stale_date: args.staleDate ?? null,
+      started_at: args.startedAt ?? null
+    });
+  }
+  get(token) {
+    return this.getStmt.get(token) ?? null;
+  }
+  /**
+   * Expo tokens eligible for delivery — not revoked, not past the failure limit.
+   *
+   * Deliberately Expo-only. ActivityKit tokens go over direct APNs with a
+   * different topic and are rejected by Expo's relay, so the ordinary
+   * notification fan-out must not see them.
+   */
+  listDeliverable() {
+    return this.listActiveStmt.all();
+  }
+  /** Live-activity tokens for one session, eligible for delivery. */
+  listForSession(kind, sessionId, now = Date.now()) {
+    return this.listByKindSessionStmt.all({
+      kind,
+      session_id: sessionId,
+      now
+    });
+  }
+  /**
+   * Every deliverable token of one kind.
+   *
+   * Used for push-to-start, which is app-wide rather than session-scoped: the
+   * activity does not exist yet, so there is no per-activity token to look up.
+   */
+  listByKind(kind, now = Date.now()) {
+    return this.listByKindStmt.all({ kind, now });
+  }
+  /** Unrenewed activities with a renewal deadline, soonest first. */
+  listRenewable() {
+    return this.listRenewableStmt.all();
+  }
+  /**
+   * Claim a row for renewal.
+   *
+   * Returns true exactly once per row. A restart re-arms timers from the
+   * persisted deadline, so the same renewal can be attempted twice; the loser
+   * gets false and must not send. Doing this as a conditional UPDATE rather
+   * than read-then-write avoids the race where both attempts observe
+   * "not yet renewed".
+   */
+  claimRenewal(token, now = Date.now()) {
+    return this.claimRenewalStmt.run({ token, at: now }).changes > 0;
+  }
+  /** Mark one token expired, so it stops being a delivery target. */
+  expire(token, now = Date.now()) {
+    this.expireStmt.run(now, token);
+  }
+  /**
+   * Expire every live activity for a session.
+   *
+   * Called when the session ends. Without this, a per-activity token outlives
+   * its session and a later renewal sweep would resurrect an activity for a
+   * session that is already gone.
+   */
+  expireSessionActivities(sessionId, now = Date.now()) {
+    this.expireSessionActivitiesStmt.run({ session_id: sessionId, at: now });
+  }
+  /** Every token, including dead and revoked ones, for the health report. */
+  listHealth(now = Date.now()) {
+    return this.listAllStmt.all().map((r) => toHealth(r, now));
+  }
+  recordSuccess(token, now = Date.now()) {
+    this.successStmt.run({ token, at: now });
+  }
+  recordFailure(token, code, now = Date.now()) {
+    this.failureStmt.run({ token, at: now, code });
+  }
+  revoke(token, now = Date.now()) {
+    return this.revokeStmt.run(now, token).changes > 0;
+  }
+  /**
+   * Claim an event id for delivery.
+   *
+   * Returns true exactly once per event id. A retry, a reconnect
+   * reconciliation, or two triggers firing for the same underlying event all
+   * get false and must not notify — the user should never be told twice about
+   * one thing.
+   */
+  claimEvent(eventId, sessionId, now = Date.now()) {
+    return this.claimEventStmt.run({ event_id: eventId, session_id: sessionId, created_at: now }).changes > 0;
+  }
+  markDelivered(eventId, now = Date.now()) {
+    this.markDeliveredStmt.run(now, eventId);
+  }
+};
+
+// src/api/routes/misc.routes.ts
 init_logger();
+function numberOrNull(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
 function readJsonBody(req) {
   return new Promise((resolve4, reject) => {
     const chunks = [];
@@ -138522,7 +138886,11 @@ var createMiscRoutes = (deps) => {
       // Capability flag: this server serves /api/config/claude-flags. Additive —
       // older clients ignore it, and clients talking to an older server see it
       // absent and hide the UI rather than 404ing.
-      claudeFlags: true
+      claudeFlags: true,
+      // Same contract: this server serves GET /api/config/feature-flags. Lives
+      // here rather than behind /api/config (admin-only) so a read-only client
+      // still learns the server supports flags even if it can't read values.
+      featureFlags: true
     });
   });
   app.get("/api/profiles", (c) => c.json([]));
@@ -138549,6 +138917,22 @@ var createMiscRoutes = (deps) => {
     if (platform3 !== "ios" && platform3 !== "android") {
       return c.json({ error: "platform must be 'ios' or 'android'" }, 400);
     }
+    const kind = body?.kind === void 0 ? DEFAULT_PUSH_TOKEN_KIND : body.kind;
+    if (!isPushTokenKind(kind)) {
+      return c.json(
+        { error: `kind must be one of ${PUSH_TOKEN_KINDS.join(", ")}`, code: "INVALID_KIND" },
+        400
+      );
+    }
+    if (kind === "liveactivity_update" && typeof body?.activityId !== "string") {
+      return c.json(
+        {
+          error: "activityId is required for kind 'liveactivity_update'",
+          code: "MISSING_ACTIVITY"
+        },
+        400
+      );
+    }
     const repo = deps.pushRepo();
     if (!repo) {
       return c.json({ error: "Push registration is unavailable", code: "STORE_UNAVAILABLE" }, 503);
@@ -138556,7 +138940,13 @@ var createMiscRoutes = (deps) => {
     repo.register({
       token,
       platform: platform3,
-      deviceId: typeof body?.deviceId === "string" ? body.deviceId : null
+      deviceId: typeof body?.deviceId === "string" ? body.deviceId : null,
+      kind,
+      activityId: typeof body?.activityId === "string" ? body.activityId : null,
+      sessionId: typeof body?.sessionId === "string" ? body.sessionId : null,
+      expiresAt: numberOrNull(body?.expiresAt),
+      staleDate: numberOrNull(body?.staleDate),
+      startedAt: numberOrNull(body?.startedAt)
     });
     return c.json({ ok: true });
   });
@@ -139114,6 +139504,14 @@ var createSessionRoutes = (deps) => {
     await deps.handleSetSessionName(c.req.param("id"), c.env.incoming, c.env.outgoing);
     return alreadyHandled6();
   });
+  app.patch("/:id/model", async (c) => {
+    await deps.handleSetSessionModel(c.req.param("id"), c.env.incoming, c.env.outgoing);
+    return alreadyHandled6();
+  });
+  app.patch("/:id/effort", async (c) => {
+    await deps.handleSetSessionEffort(c.req.param("id"), c.env.incoming, c.env.outgoing);
+    return alreadyHandled6();
+  });
   app.post("/:id/adopt", async (c) => {
     await deps.handleAdopt(c.req.param("id"), c.env.outgoing);
     return alreadyHandled6();
@@ -139453,6 +139851,7 @@ CREATE TABLE IF NOT EXISTS conversation_meta (
 );
 CREATE INDEX IF NOT EXISTS idx_meta_last_activity ON conversation_meta(last_activity DESC);
 CREATE INDEX IF NOT EXISTS idx_meta_project ON conversation_meta(project_path);
+CREATE INDEX IF NOT EXISTS idx_meta_file_path ON conversation_meta(file_path);
 
 CREATE TABLE IF NOT EXISTS conversation_tail (
   conversation_id TEXT PRIMARY KEY REFERENCES conversation_meta(id) ON DELETE CASCADE,
@@ -141004,125 +141403,6 @@ function deriveNameFromPath(path2) {
   return parts.length > 0 ? parts[parts.length - 1] : null;
 }
 
-// src/db/repositories/push.repository.ts
-var FAILURE_STREAK_LIMIT = 5;
-function tokenState(row) {
-  if (row.revoked_at != null) return "revoked";
-  if (row.failure_streak >= FAILURE_STREAK_LIMIT) return "dead";
-  if (row.failure_streak > 0) return "failing";
-  if (row.last_success_at == null) return "never-delivered";
-  return "healthy";
-}
-function toHealth(row) {
-  return {
-    platform: row.platform,
-    deviceId: row.device_id,
-    registeredAt: row.registered_at,
-    lastSuccessAt: row.last_success_at,
-    lastFailureAt: row.last_failure_at,
-    lastFailureCode: row.last_failure_code,
-    failureStreak: row.failure_streak,
-    revokedAt: row.revoked_at,
-    state: tokenState(row)
-  };
-}
-var PushRepository = class {
-  upsertStmt;
-  getStmt;
-  listActiveStmt;
-  listAllStmt;
-  successStmt;
-  failureStmt;
-  revokeStmt;
-  claimEventStmt;
-  markDeliveredStmt;
-  constructor(db) {
-    this.upsertStmt = db.prepare(`
-      INSERT INTO push_tokens (token, platform, device_id, registered_at)
-      VALUES (@token, @platform, @device_id, @registered_at)
-      ON CONFLICT(token) DO UPDATE SET
-        platform = excluded.platform,
-        device_id = COALESCE(excluded.device_id, push_tokens.device_id),
-        registered_at = excluded.registered_at,
-        -- A fresh registration clears prior failure state and any revocation:
-        -- the client is telling us this token is live again.
-        failure_streak = 0,
-        last_failure_at = NULL,
-        last_failure_code = NULL,
-        revoked_at = NULL
-    `);
-    this.getStmt = db.prepare("SELECT * FROM push_tokens WHERE token = ?");
-    this.listActiveStmt = db.prepare(`
-      SELECT * FROM push_tokens
-       WHERE revoked_at IS NULL AND failure_streak < ${FAILURE_STREAK_LIMIT}
-       ORDER BY registered_at ASC
-    `);
-    this.listAllStmt = db.prepare("SELECT * FROM push_tokens ORDER BY registered_at ASC");
-    this.successStmt = db.prepare(`
-      UPDATE push_tokens
-         SET last_success_at = @at, failure_streak = 0,
-             last_failure_code = NULL
-       WHERE token = @token
-    `);
-    this.failureStmt = db.prepare(`
-      UPDATE push_tokens
-         SET last_failure_at = @at, last_failure_code = @code,
-             failure_streak = failure_streak + 1
-       WHERE token = @token
-    `);
-    this.revokeStmt = db.prepare("UPDATE push_tokens SET revoked_at = ? WHERE token = ?");
-    this.claimEventStmt = db.prepare(`
-      INSERT OR IGNORE INTO push_events (event_id, session_id, created_at)
-      VALUES (@event_id, @session_id, @created_at)
-    `);
-    this.markDeliveredStmt = db.prepare(
-      "UPDATE push_events SET delivered_at = ? WHERE event_id = ?"
-    );
-  }
-  register(args) {
-    this.upsertStmt.run({
-      token: args.token,
-      platform: args.platform,
-      device_id: args.deviceId ?? null,
-      registered_at: args.now ?? Date.now()
-    });
-  }
-  get(token) {
-    return this.getStmt.get(token) ?? null;
-  }
-  /** Tokens eligible for delivery — not revoked, not past the failure limit. */
-  listDeliverable() {
-    return this.listActiveStmt.all();
-  }
-  /** Every token, including dead and revoked ones, for the health report. */
-  listHealth() {
-    return this.listAllStmt.all().map(toHealth);
-  }
-  recordSuccess(token, now = Date.now()) {
-    this.successStmt.run({ token, at: now });
-  }
-  recordFailure(token, code, now = Date.now()) {
-    this.failureStmt.run({ token, at: now, code });
-  }
-  revoke(token, now = Date.now()) {
-    return this.revokeStmt.run(now, token).changes > 0;
-  }
-  /**
-   * Claim an event id for delivery.
-   *
-   * Returns true exactly once per event id. A retry, a reconnect
-   * reconciliation, or two triggers firing for the same underlying event all
-   * get false and must not notify — the user should never be told twice about
-   * one thing.
-   */
-  claimEvent(eventId, sessionId, now = Date.now()) {
-    return this.claimEventStmt.run({ event_id: eventId, session_id: sessionId, created_at: now }).changes > 0;
-  }
-  markDelivered(eventId, now = Date.now()) {
-    this.markDeliveredStmt.run(now, eventId);
-  }
-};
-
 // src/db/repositories/sessions.repository.ts
 var SessionsRepository = class {
   constructor(store) {
@@ -141156,6 +141436,9 @@ async function recordUpload(pool2, instanceId, row) {
   );
 }
 
+// src/server.ts
+init_feature_flags();
+
 // src/handlers/handleListProjects.ts
 var import_fs18 = require("fs");
 var import_os7 = require("os");
@@ -143429,10 +143712,10 @@ function fingerprintOf(ids) {
   return `sha256:${(0, import_crypto11.createHash)("sha256").update(sorted.join("\n")).digest("hex")}`;
 }
 var CacheIntegrityMonitor = class {
-  constructor(cache, wsHub, log8, cacheDir, rescan, runDuringReset) {
+  constructor(cache, wsHub, log12, cacheDir, rescan, runDuringReset) {
     this.cache = cache;
     this.wsHub = wsHub;
-    this.log = log8;
+    this.log = log12;
     this.cacheDir = cacheDir;
     this.rescan = rescan;
     this.runDuringReset = runDuringReset;
@@ -144264,6 +144547,585 @@ function deriveProjectChatTitle(input) {
   return `Untitled \xB7 ${input.id.slice(0, 8)}`;
 }
 
+// src/services/push/apnsClient.ts
+var import_node_crypto3 = require("crypto");
+var import_node_http2 = require("http2");
+init_logger();
+var log3 = getLogger("apns");
+var APNS_HOST_SANDBOX = "api.sandbox.push.apple.com";
+var APNS_MAX_PAYLOAD_BYTES = 4096;
+var JWT_TTL_SECONDS = 3e3;
+var DEAD_TOKEN_REASONS = /* @__PURE__ */ new Set([
+  "BadDeviceToken",
+  "DeviceTokenNotForTopic",
+  "Unregistered",
+  "ExpiredToken"
+]);
+function base64url3(input) {
+  return Buffer.from(input).toString("base64url");
+}
+function readApnsCredentialsFromEnv(env = process.env) {
+  const key = env.APNS_KEY;
+  if (!key || key.trim().length === 0) return null;
+  const keyId = env.APNS_KEY_ID?.trim();
+  const teamId = env.APNS_TEAM_ID?.trim();
+  const bundleId = env.APNS_BUNDLE_ID?.trim();
+  if (!keyId || !teamId || !bundleId) return null;
+  const host = env.APNS_HOST ?? APNS_HOST_SANDBOX;
+  return { key, keyId, teamId, bundleId, host };
+}
+function describeMissingApnsCredentials(env = process.env) {
+  if (!env.APNS_KEY || env.APNS_KEY.trim().length === 0) {
+    return "APNS_KEY is not set, so Live Activity push is disabled. Set it to the p8 key contents (not a path) to enable it.";
+  }
+  const missing = [
+    ["APNS_KEY_ID", env.APNS_KEY_ID],
+    ["APNS_TEAM_ID", env.APNS_TEAM_ID],
+    ["APNS_BUNDLE_ID", env.APNS_BUNDLE_ID]
+  ].filter(([, value]) => !value || value.trim().length === 0).map(([name]) => name);
+  if (missing.length === 0) return null;
+  return `APNS_KEY is set but ${missing.join(", ")} ${missing.length === 1 ? "is" : "are"} not, so Live Activity push is disabled. Under launchd, APNS_KEY_ID is derived from the AuthKey_<keyId>.p8 filename; the team and bundle ids must be set explicitly.`;
+}
+var ApnsClient = class {
+  constructor(creds) {
+    this.creds = creds;
+  }
+  creds;
+  session = null;
+  cachedJwt = null;
+  /**
+   * The `apns-topic` for Live Activity pushes.
+   *
+   * The `.push-type.liveactivity` suffix is mandatory and is why the signing key
+   * must be Team Scoped (All Topics) — a key scoped to the bundle id alone
+   * cannot sign this topic.
+   */
+  get topic() {
+    return `${this.creds.bundleId}.push-type.liveactivity`;
+  }
+  /**
+   * Mint or reuse the provider JWT.
+   *
+   * ES256 over the p8 key. Cached until shortly before expiry: Apple rejects a
+   * token older than an hour, but minting one per request is wasteful and can
+   * trip APNs' provider-token-update throttle.
+   */
+  getJwt(now = Date.now()) {
+    const nowSeconds = Math.floor(now / 1e3);
+    if (this.cachedJwt && this.cachedJwt.expiresAt > nowSeconds + 60) {
+      return this.cachedJwt.token;
+    }
+    const header = base64url3(JSON.stringify({ alg: "ES256", kid: this.creds.keyId, typ: "JWT" }));
+    const payload = base64url3(JSON.stringify({ iss: this.creds.teamId, iat: nowSeconds }));
+    const signingInput = `${header}.${payload}`;
+    const signature = (0, import_node_crypto3.createSign)("SHA256").update(signingInput).sign({ key: this.creds.key, dsaEncoding: "ieee-p1363" });
+    const token = `${signingInput}.${base64url3(signature)}`;
+    this.cachedJwt = { token, expiresAt: nowSeconds + JWT_TTL_SECONDS };
+    return token;
+  }
+  /**
+   * Reuse one HTTP/2 session across sends.
+   *
+   * APNs expects a long-lived connection; a fresh TLS handshake per push is slow
+   * and Apple treats connection churn as abuse.
+   */
+  getSession() {
+    if (this.session && !this.session.closed && !this.session.destroyed) {
+      return this.session;
+    }
+    const session = (0, import_node_http2.connect)(`https://${this.creds.host}`);
+    session.on("error", (err) => {
+      log3.warn("apns.session_error", { event: "apns.session_error", err: String(err) });
+    });
+    this.session = session;
+    return session;
+  }
+  /**
+   * Send one push.
+   *
+   * Resolves with a result rather than rejecting on an APNs rejection: a
+   * rejected push is an expected outcome the caller must act on (retire the
+   * token), not an exception. Only a genuinely unexpected local failure throws,
+   * and the caller logs it.
+   */
+  async send(args) {
+    const body = Buffer.from(JSON.stringify(args.payload), "utf-8");
+    if (body.byteLength > APNS_MAX_PAYLOAD_BYTES) {
+      throw new Error(
+        `APNs payload is ${body.byteLength} bytes, over the ${APNS_MAX_PAYLOAD_BYTES} byte limit`
+      );
+    }
+    const session = this.getSession();
+    const headers = {
+      [import_node_http2.constants.HTTP2_HEADER_METHOD]: "POST",
+      [import_node_http2.constants.HTTP2_HEADER_PATH]: `/3/device/${args.deviceToken}`,
+      [import_node_http2.constants.HTTP2_HEADER_AUTHORIZATION]: `bearer ${this.getJwt()}`,
+      "apns-push-type": "liveactivity",
+      "apns-topic": this.topic,
+      "apns-priority": String(args.priority ?? 10),
+      ...args.expirationSeconds != null && {
+        "apns-expiration": String(args.expirationSeconds)
+      },
+      [import_node_http2.constants.HTTP2_HEADER_CONTENT_TYPE]: "application/json",
+      [import_node_http2.constants.HTTP2_HEADER_CONTENT_LENGTH]: String(body.byteLength)
+    };
+    return new Promise((resolve4, reject) => {
+      const req = session.request(headers);
+      req.setTimeout(args.timeoutMs ?? 1e4, () => {
+        req.close(import_node_http2.constants.NGHTTP2_CANCEL);
+        resolve4({ ok: false, status: 0, reason: "Timeout", tokenDead: false });
+      });
+      let status = 0;
+      req.on("response", (resHeaders) => {
+        status = Number(resHeaders[import_node_http2.constants.HTTP2_HEADER_STATUS] ?? 0);
+      });
+      const chunks = [];
+      req.on("data", (chunk) => chunks.push(chunk));
+      req.on("error", reject);
+      req.on("end", () => {
+        const raw2 = Buffer.concat(chunks).toString("utf-8");
+        let reason;
+        if (raw2.length > 0) {
+          try {
+            reason = JSON.parse(raw2).reason;
+          } catch {
+            reason = raw2.slice(0, 200);
+          }
+        }
+        resolve4({
+          ok: status === 200,
+          status,
+          reason,
+          tokenDead: reason != null && DEAD_TOKEN_REASONS.has(reason)
+        });
+      });
+      req.end(body);
+    });
+  }
+  /** Close the shared connection. Called on server shutdown. */
+  close() {
+    this.session?.close();
+    this.session = null;
+  }
+};
+
+// src/services/push/liveActivityNotifier.ts
+init_logger();
+
+// src/services/push/liveActivityContentState.ts
+var LAST_OUTPUT_MAX_LENGTH = 90;
+function toLiveActivityStatus(status) {
+  return status === "running" || status === "waiting_input" ? status : null;
+}
+function truncateLastOutput(raw2) {
+  const oneLine = raw2.replace(/\s+/g, " ").trim();
+  return oneLine.length <= LAST_OUTPUT_MAX_LENGTH ? oneLine : oneLine.slice(0, LAST_OUTPUT_MAX_LENGTH);
+}
+
+// src/services/push/liveActivityNotifier.ts
+var log4 = getLogger("live-activity");
+function contentStateForSession(args) {
+  const status = toLiveActivityStatus(args.session.status);
+  if (!status) return null;
+  return {
+    sessionId: args.session.id,
+    serverId: args.serverId,
+    projectName: args.session.projectName,
+    status,
+    startedAt: args.startedAtOverride ?? args.session.startedAt.getTime(),
+    lastOutput: truncateLastOutput(args.session.lastOutput ?? ""),
+    ...args.serverLabel != null && { serverLabel: args.serverLabel }
+  };
+}
+var LiveActivityNotifier = class {
+  constructor(sender, serverId, serverLabel) {
+    this.sender = sender;
+    this.serverId = serverId;
+    this.serverLabel = serverLabel;
+  }
+  sender;
+  serverId;
+  serverLabel;
+  /**
+   * Last status pushed per session.
+   *
+   * Live Activity pushes are rate-limited by iOS and the surface only renders
+   * `running` vs `waiting_input`, so re-pushing an unchanged status is pure
+   * budget spend for no visible change. This is what makes the notifier
+   * edge-triggered rather than level-triggered.
+   */
+  lastPushed = /* @__PURE__ */ new Map();
+  /**
+   * React to a session status change.
+   *
+   * Fire-and-forget by design: a push must never delay or fail a session
+   * transition, so this returns a promise the caller may ignore and every error
+   * is logged rather than propagated.
+   */
+  async onStatusChange(session) {
+    const status = toLiveActivityStatus(session.status);
+    try {
+      if (!status) {
+        await this.endFor(session);
+        return;
+      }
+      if (this.lastPushed.get(session.id) === status) return;
+      const contentState = contentStateForSession({
+        session,
+        serverId: this.serverId,
+        serverLabel: this.serverLabel
+      });
+      if (!contentState) return;
+      const outcome = await this.sender.send({
+        sessionId: session.id,
+        event: "update",
+        contentState
+      });
+      this.lastPushed.set(session.id, status);
+      if (outcome.attempted > 0) {
+        log4.info("live_activity.updated", {
+          event: "live_activity.updated",
+          sessionId: session.id,
+          status,
+          ...outcome
+        });
+      }
+    } catch (err) {
+      log4.error("live_activity.notify_failed", {
+        event: "live_activity.notify_failed",
+        sessionId: session.id,
+        status: session.status,
+        err: String(err)
+      });
+    }
+  }
+  async endFor(session) {
+    const lastStatus = this.lastPushed.get(session.id);
+    this.lastPushed.delete(session.id);
+    const contentState = contentStateForSession({
+      session: {
+        ...session,
+        status: lastStatus === "waiting_input" ? "waiting_input" : "running"
+      },
+      serverId: this.serverId,
+      serverLabel: this.serverLabel
+    });
+    if (!contentState) return;
+    const outcome = await this.sender.end({ sessionId: session.id, contentState });
+    if (outcome.attempted > 0) {
+      log4.info("live_activity.ended", {
+        event: "live_activity.ended",
+        sessionId: session.id,
+        ...outcome
+      });
+    }
+  }
+  /** Drop cached state for a session, so a resume re-pushes its first status. */
+  forget(sessionId) {
+    this.lastPushed.delete(sessionId);
+  }
+};
+
+// src/services/push/liveActivityRenewal.ts
+init_logger();
+
+// src/services/push/liveActivitySender.ts
+init_logger();
+var log5 = getLogger("live-activity");
+var ACTIVITY_MAX_LIFETIME_MS = 8 * 60 * 60 * 1e3;
+function buildActivityKitPayload(args) {
+  return {
+    aps: {
+      timestamp: Math.floor(args.now / 1e3),
+      event: args.event,
+      "content-state": args.contentState,
+      ...args.staleDate != null && { "stale-date": Math.floor(args.staleDate / 1e3) },
+      ...args.dismissalDate != null && {
+        "dismissal-date": Math.floor(args.dismissalDate / 1e3)
+      }
+    }
+  };
+}
+var LiveActivitySender = class {
+  constructor(apns, repo) {
+    this.apns = apns;
+    this.repo = repo;
+  }
+  apns;
+  repo;
+  /**
+   * Push to every live activity of a session.
+   *
+   * Sends are independent: one rejected token must not stop the others, because
+   * a single dead device would otherwise silence every other device watching the
+   * same session.
+   */
+  async send(args) {
+    const now = args.now ?? Date.now();
+    return this.sendToTokens({
+      tokens: this.repo.listForSession("liveactivity_update", args.sessionId, now),
+      sessionId: args.sessionId,
+      event: args.event,
+      contentState: args.contentState,
+      now,
+      priority: args.priority
+    });
+  }
+  /**
+   * Push to an explicit token list.
+   *
+   * Renewal needs this: a replacement activity does not exist yet, so it is
+   * started via the app-wide push-to-start token rather than any per-session
+   * lookup. Shares one fan-out body with `send()` so failure handling cannot
+   * drift between the two paths.
+   */
+  async sendToTokens(args) {
+    const now = args.now ?? Date.now();
+    const tokens = args.tokens;
+    const outcome = {
+      attempted: tokens.length,
+      succeeded: 0,
+      retired: 0
+    };
+    if (tokens.length === 0) return outcome;
+    const results = await Promise.all(
+      tokens.map(
+        (row) => this.sendToToken(row, args.event, args.contentState, now, args.priority, args.staleDate)
+      )
+    );
+    for (const { row, result, error: error51 } of results) {
+      if (error51) {
+        log5.error("live_activity.send_failed", {
+          event: "live_activity.send_failed",
+          sessionId: args.sessionId,
+          activityId: row.activity_id,
+          apnsEvent: args.event,
+          err: String(error51)
+        });
+        this.repo.recordFailure(row.token, "SendError", now);
+        continue;
+      }
+      if (!result) continue;
+      if (result.ok) {
+        this.repo.recordSuccess(row.token, now);
+        outcome.succeeded += 1;
+        continue;
+      }
+      this.repo.recordFailure(row.token, result.reason ?? `HTTP_${result.status}`, now);
+      if (result.tokenDead) {
+        this.repo.expire(row.token, now);
+        outcome.retired += 1;
+      }
+      log5.warn("live_activity.send_rejected", {
+        event: "live_activity.send_rejected",
+        sessionId: args.sessionId,
+        activityId: row.activity_id,
+        apnsEvent: args.event,
+        status: result.status,
+        reason: result.reason,
+        tokenDead: result.tokenDead
+      });
+    }
+    return outcome;
+  }
+  /**
+   * End every live activity for a session and stop tracking them.
+   *
+   * Expiring locally is what stops the renewal sweep from later resurrecting an
+   * activity for a session that has already finished.
+   */
+  async end(args) {
+    const now = args.now ?? Date.now();
+    const outcome = await this.send({
+      sessionId: args.sessionId,
+      event: "end",
+      contentState: args.contentState,
+      now
+    });
+    this.repo.expireSessionActivities(args.sessionId, now);
+    return outcome;
+  }
+  async sendToToken(row, event, contentState, now, priority, staleDateOverride) {
+    const staleDate = event === "update" ? staleDateOverride ?? row.stale_date ?? contentState.startedAt + ACTIVITY_MAX_LIFETIME_MS : null;
+    try {
+      const result = await this.apns.send({
+        deviceToken: row.token,
+        payload: buildActivityKitPayload({ event, contentState, now, staleDate }),
+        priority
+      });
+      return { row, result };
+    } catch (error51) {
+      return { row, error: error51 };
+    }
+  }
+};
+
+// src/services/push/liveActivityRenewal.ts
+var log6 = getLogger("live-activity");
+var RENEWAL_LEAD_MS = 30 * 60 * 1e3;
+var MAX_TIMER_MS = 60 * 60 * 1e3;
+function renewalDueAt(row) {
+  return row.stale_date == null ? null : row.stale_date - RENEWAL_LEAD_MS;
+}
+var LiveActivityRenewalScheduler = class {
+  constructor(deps) {
+    this.deps = deps;
+    this.now = deps.now ?? (() => Date.now());
+  }
+  deps;
+  timer = null;
+  stopped = false;
+  now;
+  /**
+   * Arm the scheduler from persisted state.
+   *
+   * Called on boot, which is what makes a renewal survive a restart: the
+   * deadlines were never in memory to begin with.
+   */
+  start() {
+    this.stopped = false;
+    void this.tick();
+  }
+  stop() {
+    this.stopped = true;
+    if (this.timer) {
+      clearTimeout(this.timer);
+      this.timer = null;
+    }
+  }
+  /**
+   * Renew everything due, then sleep until the next deadline.
+   *
+   * Re-reads from the DB every tick rather than caching a schedule in memory, so
+   * an activity registered after boot is picked up without re-arming anything.
+   */
+  async tick() {
+    if (this.stopped) return;
+    const now = this.now();
+    try {
+      for (const row of this.deps.repo.listRenewable()) {
+        const dueAt = renewalDueAt(row);
+        if (dueAt == null || dueAt > now) continue;
+        await this.renew(row, now);
+      }
+    } catch (err) {
+      log6.error("live_activity.renewal_sweep_failed", {
+        event: "live_activity.renewal_sweep_failed",
+        err: String(err)
+      });
+    }
+    this.scheduleNext();
+  }
+  scheduleNext() {
+    if (this.stopped) return;
+    const now = this.now();
+    const pending = this.deps.repo.listRenewable().map(renewalDueAt).filter((d) => d != null);
+    const nextDue = pending.length > 0 ? Math.min(...pending) : now + MAX_TIMER_MS;
+    const delay = Math.min(Math.max(nextDue - now, 0), MAX_TIMER_MS);
+    this.timer = setTimeout(() => void this.tick(), delay);
+    this.timer.unref?.();
+  }
+  /**
+   * Renew one activity.
+   *
+   * Claims first: `claimRenewal()` succeeds exactly once per row, so a timer
+   * re-armed after a restart mid-window cannot send a second time.
+   */
+  async renew(row, now) {
+    if (!row.session_id) return;
+    const session = this.deps.sessionStore.getManaged(row.session_id);
+    const status = session ? toLiveActivityStatus(session.status) : null;
+    if (!session || !status) {
+      this.deps.repo.claimRenewal(row.token, now);
+      this.deps.repo.expire(row.token, now);
+      log6.info("live_activity.renewal_skipped", {
+        event: "live_activity.renewal_skipped",
+        sessionId: row.session_id,
+        activityId: row.activity_id,
+        reason: session ? `status_${session.status}` : "session_gone"
+      });
+      return;
+    }
+    if (!this.deps.repo.claimRenewal(row.token, now)) {
+      return;
+    }
+    const startedAt = row.started_at ?? session.startedAt.getTime();
+    const contentState = {
+      sessionId: session.id,
+      serverId: this.deps.serverId,
+      projectName: session.projectName,
+      status,
+      startedAt,
+      lastOutput: session.lastOutput ?? "",
+      ...this.deps.serverLabel != null && { serverLabel: this.deps.serverLabel }
+    };
+    try {
+      await this.deps.sender.send({
+        sessionId: session.id,
+        event: "end",
+        contentState: { ...contentState, lastOutput: truncateLastOutput(contentState.lastOutput) },
+        now
+      });
+      this.deps.repo.expire(row.token, now);
+      const started = await this.startReplacement({
+        sessionId: session.id,
+        startedAt,
+        now
+      });
+      log6.info("live_activity.renewed", {
+        event: "live_activity.renewed",
+        sessionId: session.id,
+        activityId: row.activity_id,
+        // Logged because a regression here is invisible on the server and only
+        // shows up as a reset timer on someone's Lock Screen.
+        startedAt,
+        replacementRequested: started
+      });
+    } catch (err) {
+      log6.error("live_activity.renewal_failed", {
+        event: "live_activity.renewal_failed",
+        sessionId: session.id,
+        activityId: row.activity_id,
+        err: String(err)
+      });
+    }
+  }
+  /**
+   * Ask the device to start a replacement activity.
+   *
+   * Uses the app-wide push-to-start token, because the replacement does not
+   * exist yet and therefore has no per-activity token. Returns false when the
+   * device never registered one, which is not an error: the app simply cannot be
+   * asked to start an activity remotely, and the next foreground WS update
+   * recreates it.
+   */
+  async startReplacement(args) {
+    const starters = this.deps.repo.listByKind("liveactivity_start", args.now);
+    if (starters.length === 0) return false;
+    const session = this.deps.sessionStore.getManaged(args.sessionId);
+    const status = session ? toLiveActivityStatus(session.status) : null;
+    if (!session || !status) return false;
+    await this.deps.sender.sendToTokens({
+      tokens: starters,
+      event: "update",
+      sessionId: args.sessionId,
+      contentState: {
+        sessionId: session.id,
+        serverId: this.deps.serverId,
+        projectName: session.projectName,
+        status,
+        // Carried through unchanged — the whole point of the renewal.
+        startedAt: args.startedAt,
+        lastOutput: truncateLastOutput(session.lastOutput ?? ""),
+        ...this.deps.serverLabel != null && { serverLabel: this.deps.serverLabel }
+      },
+      now: args.now,
+      staleDate: args.startedAt + ACTIVITY_MAX_LIFETIME_MS
+    });
+    return true;
+  }
+};
+
 // src/services/questions/parseStatusLine.ts
 var MODEL_RE = /(Opus|Sonnet|Haiku|Fable)\s+[\d.]+(?:\s*\([^)]*\))?/;
 var EFFORT_RE = /●\s*([A-Za-z]+)\s*·\s*\/effort/;
@@ -144972,13 +145834,13 @@ function hashPrefix(text) {
 }
 
 // src/utils/conversationEtag.ts
-var import_node_crypto3 = require("crypto");
+var import_node_crypto4 = require("crypto");
 function computeConversationEtag({
   filePath,
   messageCount,
   timestamp: timestamp2
 }) {
-  const digest = (0, import_node_crypto3.createHash)("sha1").update(`${filePath}:${messageCount}:${timestamp2}`).digest("hex").slice(0, 16);
+  const digest = (0, import_node_crypto4.createHash)("sha1").update(`${filePath}:${messageCount}:${timestamp2}`).digest("hex").slice(0, 16);
   return `"${digest}"`;
 }
 
@@ -145067,6 +145929,24 @@ var WSHub = class {
       this.clients.delete(client);
     }
   }
+  // Scoped broadcast for high-frequency per-session messages (terminal_output,
+  // user_message). Sending to every connected client for every PTY output
+  // chunk made broadcast() cost scale with connections x active sessions;
+  // this bounds it to only that session's subscribers.
+  broadcastToClients(clients, message) {
+    const data = JSON.stringify(message);
+    for (const client of clients) {
+      try {
+        if (client.readyState === client.OPEN) {
+          client.send(data);
+        } else {
+          this.clients.delete(client);
+        }
+      } catch {
+        this.clients.delete(client);
+      }
+    }
+  }
   unicast(ws2, message) {
     try {
       if (ws2.readyState === ws2.OPEN) {
@@ -145129,6 +146009,7 @@ var ADOPT_KILL_TIMEOUT_MS = 5e3;
 var ADOPT_KILL_POLL_MS = 100;
 var REFRESH_TTL_MS = 2e3;
 var START_READY_TIMEOUT_MS = 1e4;
+var MODEL_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 var EXTERNAL_TAIL_RECENCY_MS = RESUME_BUSY_WINDOW_MS;
 var EXTERNAL_TAIL_MAX = 32;
 var EXTERNAL_TAIL_IDLE_MS = 3e5;
@@ -145232,6 +146113,8 @@ var StreamerServer = class {
   dbPool = null;
   dbInstanceId = null;
   disableDb = false;
+  // Skip the startup warm-up scan (test hook; see ServerConfig.skipStartupWarmup).
+  skipStartupWarmup;
   browseRoot = null;
   publicUrl = null;
   browserCors;
@@ -145241,6 +146124,12 @@ var StreamerServer = class {
   sessionInputAttempts = /* @__PURE__ */ new Map();
   ptyGracePeriodMs;
   defaultSystemPrompt;
+  // Resolved once at boot; see src/feature-flags.ts. Total map — every registry
+  // id is present, so indexing it never yields undefined.
+  featureFlags;
+  // Derived from featureFlags.codexSystemPrompt. Kept as its own field so the
+  // read site in startFresh() is unchanged.
+  codexSystemPromptEnabled;
   defaultPermissionMode;
   defaultModel;
   defaultEffort;
@@ -145265,6 +146154,11 @@ var StreamerServer = class {
   // every provider; read only by the idle reaper. Entries are dropped when the
   // session leaves the runner (reap/exit/hold).
   lastAgentChunkAt = /* @__PURE__ */ new Map();
+  // sessionId → last terminal_output seq broadcast (starts at 1, per session).
+  // Stamped on every terminal_output/terminal_replay so a client can detect a
+  // stale chunk delivered after a reconnect race instead of trusting raw WS
+  // arrival order. Entries dropped alongside lastAgentChunkAt.
+  terminalSeq = /* @__PURE__ */ new Map();
   // Recently accepted input idempotency keys (C4). A retried POST replays its
   // original outcome instead of submitting the prompt to the agent twice.
   idempotency = new IdempotencyStore();
@@ -145296,6 +146190,12 @@ var StreamerServer = class {
   // Paired-device registry (C5). Null when the cache DB failed to open — auth
   // then falls back to the shared API key alone, which is the pre-C5 behaviour.
   devicesRepo = null;
+  // Live Activity push (Feature 12). Null when APNS_KEY is unset — the ordinary
+  // case on a dev machine and in CI, where the feature is simply off. Missing an
+  // optional push credential must never stop the server from booting.
+  apnsClient = null;
+  liveActivityNotifier = null;
+  liveActivityRenewal = null;
   discoveryCache = null;
   cacheDir;
   tailSize;
@@ -145326,11 +146226,17 @@ var StreamerServer = class {
     }
     this.verbose = config2.verbose ?? false;
     this.disableDb = config2.disableDb ?? false;
+    this.skipStartupWarmup = config2.skipStartupWarmup ?? false;
     this.scannerPersistenceDisabled = config2.scannerPersistent === false;
     this.scanProfiles = config2.scanProfiles;
     this.codexRoots = config2.codexRoots ?? [(0, import_path29.join)((0, import_os12.homedir)(), ".codex", "sessions")];
     this.ptyGracePeriodMs = config2.ptyGracePeriodMs ?? DEFAULT_PTY_GRACE_PERIOD_MS;
     this.defaultSystemPrompt = config2.defaultSystemPrompt ?? DEFAULT_SYSTEM_PROMPT;
+    this.featureFlags = resolveFeatureFlags({ cli: config2.featureFlags, yaml: loadFeatureFlags() });
+    if (config2.codexSystemPromptEnabled !== void 0) {
+      this.featureFlags.codexSystemPrompt = config2.codexSystemPromptEnabled;
+    }
+    this.codexSystemPromptEnabled = this.featureFlags.codexSystemPrompt;
     this.defaultPermissionMode = config2.defaultPermissionMode ?? loadDefaultPermissionMode() ?? "acceptEdits";
     this.defaultModel = config2.defaultModel ?? "sonnet";
     this.defaultEffort = config2.defaultEffort ?? "low";
@@ -145346,6 +146252,13 @@ var StreamerServer = class {
     }, this.directoryDebounceMs);
     this.includeAgents = parseIncludeAgentsEnv(process.env.THREADBASE_INCLUDE_AGENTS);
     this.agentEntrypoints = parseAgentEntrypointsEnv(process.env.THREADBASE_AGENT_ENTRYPOINTS);
+    const enabledFlags = nonDefaultFeatureFlags(this.featureFlags);
+    if (enabledFlags.length > 0) {
+      this.log.info(`Feature flags active: ${enabledFlags.join(", ")}`, {
+        event: "config.feature_flags_active",
+        flags: enabledFlags
+      });
+    }
     const rawRoot = process.env.THREADBASE_BROWSE_ROOT ?? loadBrowseRoot() ?? config2.browseRoot;
     if (rawRoot) {
       (0, import_promises16.realpath)(rawRoot).then((resolved) => {
@@ -145462,10 +146375,22 @@ var StreamerServer = class {
       logger: getLogger("pty"),
       onOutput: (sessionId, data) => {
         this.lastAgentChunkAt.set(sessionId, Date.now());
-        this.wsHub.broadcast({ type: "terminal_output", sessionId, data });
+        const seq = (this.terminalSeq.get(sessionId) ?? 0) + 1;
+        this.terminalSeq.set(sessionId, seq);
+        this.wsHub.broadcastToClients(this.sessionSubscribers.get(sessionId) ?? [], {
+          type: "terminal_output",
+          sessionId,
+          data,
+          seq
+        });
       },
       onUserMessage: (sessionId, text, ts2) => {
-        this.wsHub.broadcast({ type: "user_message", sessionId, text, ts: ts2 });
+        this.wsHub.broadcastToClients(this.sessionSubscribers.get(sessionId) ?? [], {
+          type: "user_message",
+          sessionId,
+          text,
+          ts: ts2
+        });
       },
       onPermissionChange: (sessionId, gate) => {
         this.handlePermissionChange(sessionId, gate);
@@ -145539,6 +146464,7 @@ var StreamerServer = class {
         if (resp) {
           this.wsHub.broadcast({ type: "session_update", session: resp });
         }
+        void this.liveActivityNotifier?.onStatusChange(session);
         this.sessionStatusBus.emit(`status:${session.id}`, session.status);
       }
     });
@@ -145573,6 +146499,7 @@ var StreamerServer = class {
       logMenubarRequests: this.logMenubarRequests,
       rotateApiKey: () => this.rotateApiKey(),
       claudeFlagsConfig: () => this.getClaudeFlagsConfig(),
+      featureFlagsConfig: () => this.getFeatureFlagsConfig(),
       setClaudeFlagsConfig: (values, extraArgs) => this.setClaudeFlagsConfig(values, extraArgs),
       publicUrl: this.publicUrl,
       browseRoot: this.browseRoot,
@@ -145600,6 +146527,8 @@ var StreamerServer = class {
       handleCancel: (id, res) => this.handleCancel(id, res),
       handleStopSession: (id, res) => this.handleStopSession(id, res),
       handleSetSessionName: (id, req, res) => this.handleSetSessionName(id, req, res),
+      handleSetSessionModel: (id, req, res) => this.applyLiveSessionSetting(id, req, res, "model"),
+      handleSetSessionEffort: (id, req, res) => this.applyLiveSessionSetting(id, req, res, "effort"),
       handleUploadFile: (id, req, res) => this.handleUploadFile(id, req, res),
       handleAdopt: (id, res) => this.handleAdopt(id, res),
       handleResume: (req, res) => this.handleResume(req, res),
@@ -145646,7 +146575,8 @@ var StreamerServer = class {
                   type: "terminal_replay",
                   sessionId: msg.sessionId,
                   lines,
-                  userMessages
+                  userMessages,
+                  seq: this.terminalSeq.get(msg.sessionId)
                 })
               );
             }
@@ -145804,6 +146734,41 @@ var StreamerServer = class {
     }
     this.ptyGraceDeferCounts.delete(sessionId);
   }
+  /**
+   * Bring up Live Activity push, if credentials are present (Feature 12).
+   *
+   * APNS_KEY absent is the ordinary case on a dev machine and in CI, so this
+   * logs once at info and leaves the feature off rather than failing: the server
+   * must not refuse to boot over a missing optional push credential.
+   *
+   * The key is read from the environment as PEM contents and never from a path
+   * on disk; neither it nor any device token is ever logged.
+   */
+  initLiveActivityPush(pushRepo) {
+    const creds = readApnsCredentialsFromEnv();
+    if (!creds) {
+      const why = describeMissingApnsCredentials();
+      if (why) this.log.info(why, { event: "live_activity.disabled" });
+      return;
+    }
+    this.apnsClient = new ApnsClient(creds);
+    const sender = new LiveActivitySender(this.apnsClient, pushRepo);
+    const serverId = process.env.THREADBASE_INSTANCE_ID ?? (0, import_os12.hostname)();
+    this.liveActivityNotifier = new LiveActivityNotifier(sender, serverId, (0, import_os12.hostname)());
+    this.liveActivityRenewal = new LiveActivityRenewalScheduler({
+      repo: pushRepo,
+      sender,
+      sessionStore: this.sessionStore,
+      serverId,
+      serverLabel: (0, import_os12.hostname)()
+    });
+    this.liveActivityRenewal.start();
+    this.log.info("Live Activity push enabled", {
+      event: "live_activity.enabled",
+      host: creds.host,
+      topic: `${creds.bundleId}.push-type.liveactivity`
+    });
+  }
   /**
    * Classify sessions left behind by previous streamer runs (C1 Phase 3a).
    *
@@ -145971,6 +146936,7 @@ var StreamerServer = class {
       );
       this.ptyManager.putOnHold(session.id);
       this.lastAgentChunkAt.delete(session.id);
+      this.terminalSeq.delete(session.id);
       this.idempotency.clear(session.id);
       this.sessionSubscribers.delete(session.id);
       reaped.push(session.id);
@@ -146113,6 +147079,7 @@ var StreamerServer = class {
           this.cacheMetadataRepo = new CacheMetadataRepository(db);
           this.pushRepo = new PushRepository(db);
           this.devicesRepo = new DevicesRepository(db);
+          this.initLiveActivityPush(this.pushRepo);
           this.cacheMonitor = new CacheIntegrityMonitor(
             this.cache,
             this.wsHub,
@@ -146144,6 +147111,14 @@ var StreamerServer = class {
           );
           this.scannerPersistenceDisabled = true;
         }
+        if (this.skipStartupWarmup) {
+          this.log.debug?.("startup warm-up scan skipped (skipStartupWarmup)", {
+            event: "cache.warmup_skipped"
+          });
+          this.finishWarmup(0);
+          resolveWarm();
+          return;
+        }
         const warmupStatCache = this.buildStatCache(null);
         const warmupScanner = this.newScanner(warmupStatCache ? { persistent: false } : void 0);
         this.allScanners.add(warmupScanner);
@@ -146335,6 +147310,7 @@ var StreamerServer = class {
       this.idleReaperTimer = null;
     }
     this.lastAgentChunkAt.clear();
+    this.terminalSeq.clear();
     this.recordShutdownState();
     this.markScannerStaleDebounced.cancel();
     await Promise.all([...this.inFlightCacheWrites]);
@@ -146347,6 +147323,8 @@ var StreamerServer = class {
     this.externalTails.clear();
     this.wsHub.dispose();
     this.pairTokens.dispose();
+    this.liveActivityRenewal?.stop();
+    this.apnsClient?.close();
     if (this.dbPool) {
       await this.dbPool.end();
     }
@@ -146418,7 +147396,6 @@ var StreamerServer = class {
       json2(res, 400, { error: message });
       return;
     }
-    const { hostname: hostname4 } = require("os");
     const ts2 = (/* @__PURE__ */ new Date()).toISOString();
     this.log.info(`[pair] token exchanged from ${ip} at ${ts2}`, {
       event: "pair.token_exchanged",
@@ -146441,7 +147418,7 @@ var StreamerServer = class {
       nonce: sealed.nonce,
       ephemeralPublicKey: sealed.ephemeralPublicKey,
       publicUrl: this.publicUrl,
-      machineName: hostname4(),
+      machineName: (0, import_os12.hostname)(),
       ...device && {
         deviceId: device.deviceId,
         deviceToken: device.deviceToken,
@@ -146463,6 +147440,16 @@ var StreamerServer = class {
     });
     return { newKey, persisted };
   }
+  /**
+   * The registry ships with the values so a client renders the list from one
+   * round-trip, same as getClaudeFlagsConfig().
+   *
+   * Deliberately no `persisted` field: unlike claude-flags there is no PUT, and
+   * the absence of that field is the signal that this endpoint is read-only.
+   */
+  getFeatureFlagsConfig() {
+    return { registry: FEATURE_FLAGS, values: this.featureFlags };
+  }
   getClaudeFlagsConfig() {
     return {
       registry: CLAUDE_FLAGS,
@@ -146505,6 +147492,30 @@ var StreamerServer = class {
       persisted: this.claudeFlagsPersistable
     };
   }
+  /**
+   * The three spawn options that a configured claude-flag can override, with
+   * the boot-time CLI/yaml default as the fallback. Spread into every
+   * start/resume/adopt call so all three paths agree.
+   *
+   * These ids are excluded from buildFlagArgs (SPAWN_POSITIONAL_FLAG_IDS)
+   * precisely because they arrive here instead — the PTY spawn paths pass them
+   * as explicit positionals, so emitting them from the allowlist too would
+   * duplicate the flag.
+   *
+   * Narrowed with the type guards rather than cast: ClaudeFlagValues is a loose
+   * Record by design, and while validateFlagValues already guarantees the shape
+   * on the way in, TypeScript cannot see that through the record.
+   */
+  spawnFlagOverrides() {
+    const mode = this.claudeFlags.permissionMode;
+    const model = this.claudeFlags.model;
+    const effort = this.claudeFlags.effort;
+    return {
+      permissionMode: isPermissionMode(mode) ? mode : this.defaultPermissionMode,
+      model: typeof model === "string" ? model : this.defaultModel,
+      effort: isEffortLevel(effort) ? effort : this.defaultEffort
+    };
+  }
   checkRateLimit(map2, key, limit, windowMs) {
     const now = Date.now();
     const arr = (map2.get(key) ?? []).filter((t) => now - t < windowMs);
@@ -147654,11 +148665,9 @@ var StreamerServer = class {
       projectPath,
       projectName: body.projectName,
       branch: body.branch,
-      permissionMode: this.defaultPermissionMode,
       claudeFlags: this.claudeFlags,
       claudeExtraArgs: this.claudeExtraArgs,
-      model: this.defaultModel,
-      effort: this.defaultEffort
+      ...this.spawnFlagOverrides()
     });
     this.sessionStore.addManaged(session);
     this.recordSessionSpawn(session);
@@ -148105,11 +149114,9 @@ var StreamerServer = class {
       projectPath,
       projectName,
       branch,
-      permissionMode: this.defaultPermissionMode,
       claudeFlags: this.claudeFlags,
       claudeExtraArgs: this.claudeExtraArgs,
-      model: this.defaultModel,
-      effort: this.defaultEffort
+      ...this.spawnFlagOverrides()
     });
     this.sessionStore.addManaged(session);
     this.recordSessionSpawn(session);
@@ -148175,17 +149182,16 @@ var StreamerServer = class {
       BROWSE_SYSTEM_PROMPT(this.browseRoot),
       typeof clientPrompt === "string" ? clientPrompt : null
     ].filter(Boolean);
+    const includeSystemPrompt = provider !== CODEX_CLI_PROVIDER2 || this.codexSystemPromptEnabled;
     try {
       const session = await this.ptyManager.startFresh({
         provider,
         projectPath: resolvedPath,
         projectName: body.projectName,
-        systemPrompt: systemPromptParts.join("\n"),
-        permissionMode: this.defaultPermissionMode,
+        ...includeSystemPrompt && { systemPrompt: systemPromptParts.join("\n") },
         claudeFlags: this.claudeFlags,
         claudeExtraArgs: this.claudeExtraArgs,
-        model: this.defaultModel,
-        effort: this.defaultEffort
+        ...this.spawnFlagOverrides()
       });
       this.sessionStore.addManaged(session);
       this.recordSessionSpawn(session);
@@ -148545,6 +149551,87 @@ var StreamerServer = class {
     this.cache.upsertSessionName(sessionId, name);
     json2(res, 200, { ok: true });
   }
+  /**
+   * Retarget a LIVE session's model or effort by typing the corresponding
+   * Claude Code slash command into its PTY.
+   *
+   * There is no CLI or IPC channel for this — `--model`/`--effort` are spawn
+   * arguments — so the interactive `/model <x>` / `/effort <y>` commands are the
+   * only way to change a session already running. Both accept an argument and
+   * apply it without opening the picker (verified against Claude Code v2.1.220).
+   *
+   * Answers 202, not 200: the value is applied by the TUI on its next render, so
+   * there is nothing truthful to echo back synchronously. Clients confirm with
+   * `GET /api/sessions/:id`, which scrapes the applied value off the live status
+   * line.
+   */
+  async applyLiveSessionSetting(sessionId, req, res, setting) {
+    const session = this.ptyManager.getSession(sessionId);
+    if (!session) {
+      const known = this.sessionStore.getManaged(sessionId);
+      if (known) {
+        json2(res, 409, {
+          error: "Session has no live PTY; resume it first",
+          code: "SESSION_IDLE"
+        });
+        return;
+      }
+      json2(res, 404, { error: "Session not found" });
+      return;
+    }
+    if ((session.provider ?? CLAUDE_CODE_PROVIDER2) !== CLAUDE_CODE_PROVIDER2) {
+      json2(res, 501, {
+        error: `Setting ${setting} on a ${session.provider} session is not supported`,
+        code: "UNSUPPORTED_PROVIDER"
+      });
+      return;
+    }
+    if (session.status === "running") {
+      json2(res, 409, {
+        error: "Session is mid-turn; retry once it is waiting for input",
+        code: "SESSION_BUSY"
+      });
+      return;
+    }
+    let parsed;
+    try {
+      parsed = await readBody(req);
+    } catch {
+      json2(res, 400, { error: "Invalid JSON" });
+      return;
+    }
+    let value;
+    if (setting === "effort") {
+      if (!isEffortLevel(parsed.effort)) {
+        json2(res, 400, {
+          error: `effort must be one of ${EFFORT_LEVELS.join(", ")}`
+        });
+        return;
+      }
+      value = parsed.effort;
+    } else {
+      if (typeof parsed.model !== "string" || !MODEL_NAME_RE.test(parsed.model)) {
+        json2(res, 400, {
+          error: "model must be an alias or full model name (letters, digits, dot, dash, underscore)"
+        });
+        return;
+      }
+      value = parsed.model;
+    }
+    try {
+      this.ptyManager.sendKeys(sessionId, `/${setting} ${value}\r`);
+    } catch (err) {
+      json2(res, 400, { error: err instanceof Error ? err.message : "Failed to write to session" });
+      return;
+    }
+    this.log.info(`Live session ${setting} set to ${value}`, {
+      event: "session.setting_applied",
+      sessionId,
+      setting,
+      value
+    });
+    json2(res, 202, { id: sessionId, [setting]: value });
+  }
   handleGetSessionNames(res) {
     if (!this.cache) {
       json2(res, 200, {});
@@ -148886,7 +149973,7 @@ function isBrewInstall(scriptPath = process.argv[1] ?? "") {
 }
 
 // src/updater/download.ts
-var import_node_crypto4 = require("crypto");
+var import_node_crypto5 = require("crypto");
 var import_node_fs9 = require("fs");
 var import_node_path10 = require("path");
 var import_promises17 = require("stream/promises");
@@ -148953,7 +150040,7 @@ async function downloadAndVerify(opts) {
   if (!res.ok || !res.body) {
     throw new Error(`Failed to download ${artifact.filename}: ${res.status} ${res.statusText}`);
   }
-  const hash2 = (0, import_node_crypto4.createHash)("sha256");
+  const hash2 = (0, import_node_crypto5.createHash)("sha256");
   const out = (0, import_node_fs9.createWriteStream)(targetPath);
   let bytes = 0;
   const measured = new TransformStream({
@@ -149258,7 +150345,7 @@ var import_node_path17 = require("path");
 var import_path32 = __toESM(require("path"), 1);
 var import_node_fs13 = __toESM(require("fs"), 1);
 var import_node_assert = __toESM(require("assert"), 1);
-var import_node_crypto5 = require("crypto");
+var import_node_crypto6 = require("crypto");
 var import_node_fs14 = __toESM(require("fs"), 1);
 var import_node_path18 = __toESM(require("path"), 1);
 var import_fs33 = __toESM(require("fs"), 1);
@@ -151666,7 +152753,7 @@ var Te = fo === "win32";
 var mo = 1024;
 var uo = (s3, t) => {
   if (!Te) return import_node_fs14.default.unlink(s3, t);
-  let e = s3 + ".DELETE." + (0, import_node_crypto5.randomBytes)(16).toString("hex");
+  let e = s3 + ".DELETE." + (0, import_node_crypto6.randomBytes)(16).toString("hex");
   import_node_fs14.default.rename(s3, e, (i) => {
     if (i) return t(i);
     import_node_fs14.default.unlink(e, t);
@@ -151674,7 +152761,7 @@ var uo = (s3, t) => {
 };
 var po = (s3) => {
   if (!Te) return import_node_fs14.default.unlinkSync(s3);
-  let t = s3 + ".DELETE." + (0, import_node_crypto5.randomBytes)(16).toString("hex");
+  let t = s3 + ".DELETE." + (0, import_node_crypto6.randomBytes)(16).toString("hex");
   import_node_fs14.default.renameSync(s3, t), import_node_fs14.default.unlinkSync(t);
 };
 var vr = (s3, t, e) => s3 !== void 0 && s3 === s3 >>> 0 ? s3 : t !== void 0 && t === t >>> 0 ? t : e;
@@ -152331,7 +153418,7 @@ init_launchd();
 init_marker();
 init_platform();
 init_logger();
-var log4 = getLogger("prod");
+var log8 = getLogger("prod");
 function clearSupervisorLogs() {
   let paths;
   try {
@@ -152488,12 +153575,12 @@ function registerProdCommands(program3) {
   prod.command("start").description("Restore prod after a user-held suspension").option("--clear-logs", "Clear existing stdout + stderr logs", false).action(async (opts) => {
     if (opts.clearLogs === true) clearSupervisorLogs();
     const r = await runProdStart();
-    log4.info(r.message, void 0, "console");
+    log8.info(r.message, void 0, "console");
     if (!r.ok) process.exitCode = 1;
   });
   prod.command("stop").description("Unload the launchd agent (prod will not auto-restart)").action(async () => {
     const r = await runProdStop();
-    log4.info(r.message, void 0, "console");
+    log8.info(r.message, void 0, "console");
   });
   prod.command("status").description("Report whether prod is supervised, suspended, or down").action(async () => {
     const s3 = await runProdStatus();
@@ -152502,7 +153589,7 @@ function registerProdCommands(program3) {
       `pid: ${s3.agentPid ?? "(none)"}`,
       s3.marker ? `marker: ${s3.marker.userHeld ? "userHeld (intentional stop)" : "dev-suspended"}, devPid=${s3.marker.devPid}, port=${s3.marker.port}, repo=${s3.marker.repoToplevel}` : "marker: none"
     ];
-    log4.info(parts.join("\n  "), void 0, "console");
+    log8.info(parts.join("\n  "), void 0, "console");
   });
   prod.command("restart").description("Stop + restart the supervised streamer (re-reads service definition)").option("--clear-logs", "Clear existing stdout + stderr logs", false).action(async (opts) => {
     const sup = getSupervisor();
@@ -152511,17 +153598,17 @@ function registerProdCommands(program3) {
     sup.bootoutAgent();
     sup.bootstrapAgent(specPath, { afterBootout: true });
     const what = process.platform === "darwin" ? `agent restarted from ${specPath}` : `task '${TASK_NAME}' restarted`;
-    log4.info(what, void 0, "console");
+    log8.info(what, void 0, "console");
   });
   prod.command("doctor").description("Detect & repair stale markers, missing agent, plist drift").option("--fix", "Apply repairs (default is dry-run)", false).action(async (opts) => {
     const r = await runProdDoctor({ fix: opts.fix === true });
-    log4.info(`findings: ${r.findings.length === 0 ? "(none)" : ""}`, void 0, "console");
-    for (const f2 of r.findings) log4.info(`  - ${f2}`, void 0, "console");
+    log8.info(`findings: ${r.findings.length === 0 ? "(none)" : ""}`, void 0, "console");
+    for (const f2 of r.findings) log8.info(`  - ${f2}`, void 0, "console");
     if (r.repairs.length) {
-      log4.info(`repairs:`, void 0, "console");
-      for (const fix of r.repairs) log4.info(`  - ${fix}`, void 0, "console");
+      log8.info(`repairs:`, void 0, "console");
+      for (const fix of r.repairs) log8.info(`  - ${fix}`, void 0, "console");
     } else if (!opts.fix && r.findings.length > 0) {
-      log4.info(`(re-run with --fix to apply repairs)`, void 0, "console");
+      log8.info(`(re-run with --fix to apply repairs)`, void 0, "console");
     }
   });
   prod.command("logs").description("Tail the supervised streamer's stdout + stderr log files").option("-n, --lines <count>", "Seed with the last N lines (default 50)", "50").option("--no-follow", "Print last N lines and exit (do not follow)").option("--errors-only", "Tail only stderr", false).option("--clear", "Truncate stdout + stderr logs in place, then exit", false).action(async (opts) => {
@@ -152532,14 +153619,14 @@ function registerProdCommands(program3) {
       errorsOnly: opts.errorsOnly === true,
       clear: opts.clear === true
     });
-    if (r.message) log4.info(r.message, void 0, "console");
+    if (r.message) log8.info(r.message, void 0, "console");
     if (!r.ok) process.exitCode = 1;
   });
   program3.addCommand(prod);
 }
 
 // cli/index.ts
-var log7 = getLogger("cli");
+var log11 = getLogger("cli");
 var program2 = new Command();
 program2.name("threadbase-streamer").description("PTY session management, WebSocket streaming, and REST API server for Claude Code").version(getVersion());
 program2.command("serve").description("Start the streamer server").option("-p, --port <number>", "Port to listen on", "8766").option("--api-key <key>", "API key for authentication").option("--local-no-auth", "Skip auth for localhost requests", false).option("-v, --verbose", "Verbose output", false).option("--log-menubar-requests", "Log /healthz requests from the menubar app", false).option("--browse-root <path>", "Root directory for file browsing").option(
@@ -152561,6 +153648,10 @@ program2.command("serve").description("Start the streamer server").option("-p, -
   "--claude-flag <id=value>",
   "Allowlisted Claude CLI flag applied to every spawned session, e.g. --claude-flag permissionMode=bypassPermissions. Repeatable; repeat the same id to build a list (--claude-flag addDir=/a --claude-flag addDir=/b). Overrides claude_flags: in ~/.threadbase/server.yaml and makes the value non-persistable.",
   (value, previous = []) => [...previous, value]
+).option(
+  "--feature <id=bool>",
+  "Enable or disable a server feature flag, e.g. --feature codexSystemPrompt=true. Repeatable. Overridden by the flag's THREADBASE_FEATURE_* env var; overrides feature_flags: in ~/.threadbase/server.yaml.",
+  (value, previous = []) => [...previous, value]
 ).option(
   "--claude-extra-args <args>",
   "Free-text argv appended verbatim to every spawned Claude session, after the allowlisted flags. Unvalidated escape hatch."
@@ -152577,14 +153668,14 @@ program2.command("serve").description("Start the streamer server").option("-p, -
     const { checkSqliteAbi: checkSqliteAbi2 } = await Promise.resolve().then(() => (init_check_sqlite_abi(), check_sqlite_abi_exports));
     checkSqliteAbi2();
   } catch (err) {
-    log7.error(err instanceof Error ? err.message : String(err), void 0, "console");
+    log11.error(err instanceof Error ? err.message : String(err), void 0, "console");
     process.exit(1);
   }
   if (opts.multiAgentFlow) {
     process.env.MULTI_AGENT_FLOW = "true";
   }
   if (opts.defaultPermissionMode !== void 0 && !isPermissionMode(opts.defaultPermissionMode)) {
-    log7.error(
+    log11.error(
       `Invalid --default-permission-mode: ${opts.defaultPermissionMode} (expected one of ${PERMISSION_MODES.join(", ")})`,
       void 0,
       "console"
@@ -152600,7 +153691,7 @@ program2.command("serve").description("Start the streamer server").option("-p, -
       const value = eq === -1 ? true : entry.slice(eq + 1);
       const def = findFlag(id);
       if (!def) {
-        log7.error(
+        log11.error(
           `Invalid --claude-flag id: ${id} (expected one of ${CLAUDE_FLAGS.map((f2) => f2.id).join(", ")})`,
           void 0,
           "console"
@@ -152617,15 +153708,23 @@ program2.command("serve").description("Start the streamer server").option("-p, -
     claudeFlags = validateFlagValues(raw2);
     for (const id of Object.keys(raw2)) {
       if (!(id in claudeFlags)) {
-        log7.error(`Invalid value for --claude-flag ${id}`, void 0, "console");
+        log11.error(`Invalid value for --claude-flag ${id}`, void 0, "console");
         process.exit(1);
       }
     }
   }
-  const validEfforts = ["low", "medium", "high", "xhigh", "max"];
-  if (opts.defaultEffort !== void 0 && !validEfforts.includes(opts.defaultEffort)) {
-    log7.error(
-      `Invalid --default-effort: ${opts.defaultEffort} (expected one of ${validEfforts.join(", ")})`,
+  let featureFlags;
+  if (Array.isArray(opts.feature) && opts.feature.length > 0) {
+    const parsed = parseFeatureFlagArgs(opts.feature);
+    if (parsed.errors.length > 0) {
+      for (const error51 of parsed.errors) log11.error(`--feature: ${error51}`, void 0, "console");
+      process.exit(1);
+    }
+    featureFlags = parsed.values;
+  }
+  if (opts.defaultEffort !== void 0 && !isEffortLevel(opts.defaultEffort)) {
+    log11.error(
+      `Invalid --default-effort: ${opts.defaultEffort} (expected one of ${EFFORT_LEVELS.join(", ")})`,
       void 0,
       "console"
     );
@@ -152635,7 +153734,7 @@ program2.command("serve").description("Start the streamer server").option("-p, -
   if (opts.ptyGracePeriodMs !== void 0) {
     const parsed = Number(opts.ptyGracePeriodMs);
     if (!Number.isInteger(parsed) || parsed < 0) {
-      log7.error(
+      log11.error(
         `Invalid --pty-grace-period-ms: ${opts.ptyGracePeriodMs} (expected a non-negative integer; 0 disables auto-hold)`,
         void 0,
         "console"
@@ -152655,7 +153754,7 @@ program2.command("serve").description("Start the streamer server").option("-p, -
     const { detectConflictingAgents: detectConflictingAgents2, formatConflictMessage: formatConflictMessage2 } = await Promise.resolve().then(() => (init_conflict_check(), conflict_check_exports));
     const conflicts = detectConflictingAgents2();
     if (conflicts.length > 0) {
-      log7.warn(formatConflictMessage2(conflicts), void 0, "console");
+      log11.warn(formatConflictMessage2(conflicts), void 0, "console");
     }
   }
   let resolvedDefaultPermissionMode = opts.defaultPermissionMode;
@@ -152701,20 +153800,21 @@ program2.command("serve").description("Start the streamer server").option("-p, -
     defaultEffort: opts.defaultEffort,
     ptyGracePeriodMs,
     claudeFlags,
+    featureFlags,
     claudeExtraArgs: opts.claudeExtraArgs
   });
   await server.listen(resolvedPort);
   {
     const v2 = getVersion();
-    log7.info(`Threadbase Streamer v${v2}`, { version: v2, port: resolvedPort });
+    log11.info(`Threadbase Streamer v${v2}`, { version: v2, port: resolvedPort });
   }
-  log7.info(`Listening on http://localhost:${resolvedPort}`, {
+  log11.info(`Listening on http://localhost:${resolvedPort}`, {
     url: `http://localhost:${resolvedPort}`
   });
-  log7.info(`WebSocket at ws://localhost:${resolvedPort}/ws`, {
+  log11.info(`WebSocket at ws://localhost:${resolvedPort}/ws`, {
     wsUrl: `ws://localhost:${resolvedPort}/ws`
   });
-  log7.info(`API key: ${apiKey}`, { apiKeyMasked: `${apiKey.slice(0, 6)}\u2026` });
+  log11.info(`API key: ${apiKey}`, { apiKeyMasked: `${apiKey.slice(0, 6)}\u2026` });
   try {
     await printServerBanner({
       port: resolvedPort,
@@ -152724,15 +153824,15 @@ program2.command("serve").description("Start the streamer server").option("-p, -
     });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log7.warn(`(skipped pairing QR: ${message})`, { reason: message });
-    log7.info(
+    log11.warn(`(skipped pairing QR: ${message})`, { reason: message });
+    log11.info(
       printUrlBanner({ url: resolveServerUrl({ publicUrl, port: resolvedPort }) }),
       void 0,
       "console"
     );
   }
   const shutdown = async () => {
-    log7.info("Shutting down...");
+    log11.info("Shutting down...");
     await server.close();
     process.exit(0);
   };
@@ -152740,7 +153840,7 @@ program2.command("serve").description("Start the streamer server").option("-p, -
     process.on("SIGINT", shutdown);
     process.on("SIGTERM", shutdown);
     process.on("uncaughtException", (err) => {
-      log7.error(`uncaught: ${err.message}`, {
+      log11.error(`uncaught: ${err.message}`, {
         error: err.message,
         stack: err.stack,
         event: "process.uncaught"
@@ -152749,7 +153849,7 @@ program2.command("serve").description("Start the streamer server").option("-p, -
     });
     process.on("unhandledRejection", (reason) => {
       const msg = reason instanceof Error ? reason.message : String(reason);
-      log7.error(`unhandled rejection: ${msg}`, {
+      log11.error(`unhandled rejection: ${msg}`, {
         error: msg,
         event: "process.unhandled_rejection"
       });
@@ -152774,10 +153874,10 @@ program2.command("cache").description("Manage the local SQLite conversation cach
       const f2 = dbPath + suffix;
       if (existsSync15(f2)) {
         rmSync6(f2);
-        log7.info(`Deleted ${f2}`, { path: f2 }, "console");
+        log11.info(`Deleted ${f2}`, { path: f2 }, "console");
       }
     }
-    log7.info("Cache cleared. Restart the server to rebuild.", void 0, "console");
+    log11.info("Cache cleared. Restart the server to rebuild.", void 0, "console");
   })
 );
 program2.command("pair").description("Print a pairing QR code (server must already be running)").option("-p, --port <number>", "Port the server is listening on", "8766").action(async (opts) => {
@@ -152802,7 +153902,7 @@ program2.command("set-key [key]").description("Set the streamer API key in ~/.th
 program2.command("update").description("Check for streamer updates from GitHub Releases and install them").option("--check", "Check only; do not install", false).option("--version <version>", "Pin to a specific release tag").option("--allow-major", "Allow a major-version bump", false).option("--force", "Skip the active-session defer check", false).option("--dry-run", "Print what would be installed without writing to disk", false).option("-p, --port <number>", "Port of the running streamer for active-session check", "8766").action(async (opts) => {
   const cfg = loadUpdateConfig();
   if (!cfg) {
-    log7.warn(
+    log11.warn(
       `No update config found at ${DEFAULT_CONFIG_PATH}. Create one with at least 'github_repo: owner/name' to enable updates.`,
       void 0,
       "console"
@@ -152821,11 +153921,11 @@ program2.command("update").description("Check for streamer updates from GitHub R
       appendUpdateLog(
         `[check] current=${result2.current} latest=${result2.latest ?? "none"} status=${result2.reason}`
       );
-      log7.info(`Current : ${result2.current}`, void 0, "console");
-      log7.info(`Latest  : ${result2.latest ?? "(none)"}`, void 0, "console");
-      log7.info(`Channel : ${cfg.channel}`, void 0, "console");
-      log7.info(`Diff    : ${result2.diff ?? "(none)"}`, void 0, "console");
-      log7.info(`Status  : ${result2.reason}`, void 0, "console");
+      log11.info(`Current : ${result2.current}`, void 0, "console");
+      log11.info(`Latest  : ${result2.latest ?? "(none)"}`, void 0, "console");
+      log11.info(`Channel : ${cfg.channel}`, void 0, "console");
+      log11.info(`Diff    : ${result2.diff ?? "(none)"}`, void 0, "console");
+      log11.info(`Status  : ${result2.reason}`, void 0, "console");
       return;
     }
     const port = Number.parseInt(opts.port, 10);
@@ -152841,20 +153941,20 @@ program2.command("update").description("Check for streamer updates from GitHub R
     });
     switch (result.kind) {
       case "no-op":
-        log7.info(`Current : ${result.current}`, void 0, "console");
-        log7.info(`Latest  : ${result.latest ?? "(none)"}`, void 0, "console");
-        log7.info(`Status  : ${result.reason}`, void 0, "console");
+        log11.info(`Current : ${result.current}`, void 0, "console");
+        log11.info(`Latest  : ${result.latest ?? "(none)"}`, void 0, "console");
+        log11.info(`Status  : ${result.reason}`, void 0, "console");
         break;
       case "unsupported-install":
-        log7.warn(result.reason, void 0, "console");
+        log11.warn(result.reason, void 0, "console");
         process.exitCode = 2;
         break;
       case "deferred":
-        log7.warn(`Deferred: ${result.reason}`, void 0, "console");
+        log11.warn(`Deferred: ${result.reason}`, void 0, "console");
         process.exitCode = 2;
         break;
       case "dry-run":
-        log7.info(
+        log11.info(
           `Would install ${result.latest} from ${result.tarballUrl}`,
           void 0,
           "console"
@@ -152862,28 +153962,28 @@ program2.command("update").description("Check for streamer updates from GitHub R
         break;
       case "installed":
         if (result.restart.method.startsWith("failed:")) {
-          log7.error(
+          log11.error(
             `Installed ${result.installed} on disk, but the running service was not updated. Restart: ${result.restart.method}.`,
             void 0,
             "console"
           );
           process.exitCode = 1;
         } else {
-          log7.info(
+          log11.info(
             `Installed ${result.installed} (was ${result.previous}). Restart: ${result.restart.method}.`,
             void 0,
             "console"
           );
         }
         if (result.pruned.length > 0) {
-          log7.info(`Pruned old releases: ${result.pruned.join(", ")}`, void 0, "console");
+          log11.info(`Pruned old releases: ${result.pruned.join(", ")}`, void 0, "console");
         }
         break;
     }
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     appendUpdateLog(`[error] ${message}`);
-    log7.error(`Update failed: ${message}`, { error: message }, "console");
+    log11.error(`Update failed: ${message}`, { error: message }, "console");
     process.exitCode = 1;
   }
 });
@@ -152929,7 +154029,7 @@ async function printServerBanner({
 }) {
   const url2 = resolveServerUrl({ publicUrl, port });
   if (!includeQr) {
-    log7.info(printUrlBanner({ url: url2 }), void 0, "console");
+    log11.info(printUrlBanner({ url: url2 }), void 0, "console");
     return;
   }
   const res = await fetch(`http://localhost:${port}/api/pair/start`, {
@@ -152944,9 +154044,9 @@ async function printServerBanner({
   const expSeconds = Math.floor(expiresAt / 1e3);
   const payload = `threadbase://pair?url=${encodeURIComponent(url2)}&token=${token}&exp=${expSeconds}`;
   const qr2 = await generateQr(payload);
-  log7.info(printUrlBanner({ url: url2, qr: qr2, expiresAt }), void 0, "console");
-  log7.info(`Pair URL: ${payload}`, void 0, "console");
-  log7.info(`Expires in ${expiresInSeconds}s`, void 0, "console");
+  log11.info(printUrlBanner({ url: url2, qr: qr2, expiresAt }), void 0, "console");
+  log11.info(`Pair URL: ${payload}`, void 0, "console");
+  log11.info(`Expires in ${expiresInSeconds}s`, void 0, "console");
 }
 /*! Bundled license information: