@tryarcanist/cli 0.1.256 → 0.1.257

package/dist/index.js

@@ -8207,856 +8207,201 @@ async function whoamiCommand(options, command) {
   });
 }
 
-// src/utils/pagination.ts
-var MAX_ALL_PAGES = 1e3;
-async function fetchPages(label, all, initialCursor, fetchPage) {
-  const items = [];
-  let cursor = initialCursor;
-  let nextCursor = null;
-  let pageCount = 0;
-  do {
-    pageCount += 1;
-    if (all && pageCount > MAX_ALL_PAGES) {
-      throw new CliError("user", `${label} exceeded ${MAX_ALL_PAGES} pages without reaching the end.`);
+// src/commands/codex.ts
+import { readFile } from "fs/promises";
+import { join as join4 } from "path";
+
+// src/vendor-login.ts
+import { spawn } from "child_process";
+import { rmSync } from "fs";
+import { mkdtemp, rm } from "fs/promises";
+import { tmpdir } from "os";
+import { join as join3 } from "path";
+function runVendorLoginProcess(spec) {
+  return new Promise((resolve3, reject) => {
+    const child = spawn(spec.binPath, spec.args, {
+      stdio: "inherit",
+      env: { ...process.env, ...spec.env }
+    });
+    child.on("error", (err) => {
+      if (err.code === "ENOENT") {
+        reject(
+          new CliError("user", `Could not find the \`${spec.binPath}\` executable.`, {
+            hint: spec.missingBinaryHint
+          })
+        );
+        return;
+      }
+      reject(new CliError("user", `Failed to launch \`${spec.binPath} ${spec.args.join(" ")}\`: ${err.message}`));
+    });
+    child.on("close", (code) => {
+      if (code === 0) {
+        resolve3();
+        return;
+      }
+      reject(
+        new CliError("user", `\`${spec.binPath} ${spec.args.join(" ")}\` exited with code ${code ?? "unknown"}.`, {
+          hint: `Complete the ${spec.displayName} login, then re-run \`${spec.retryCommand}\`.`
+        })
+      );
+    });
+  });
+}
+async function withIsolatedLoginDir(prefix, fn) {
+  let tempDir;
+  const handleSigint = () => {
+    if (tempDir) {
+      try {
+        rmSync(tempDir, { recursive: true, force: true });
+      } catch {
+      }
     }
-    const page = await fetchPage(cursor);
-    items.push(...page.items);
-    nextCursor = page.nextCursor;
-    cursor = nextCursor ?? void 0;
-  } while (all && nextCursor);
-  return { items, nextCursor: all ? null : nextCursor };
+    process.exit(EXIT_CODE_INTERRUPTED);
+  };
+  process.on("SIGINT", handleSigint);
+  try {
+    tempDir = await mkdtemp(join3(tmpdir(), prefix));
+    return await fn(tempDir);
+  } finally {
+    try {
+      if (tempDir) {
+        await rm(tempDir, { recursive: true, force: true }).catch(() => {
+        });
+      }
+    } finally {
+      process.off("SIGINT", handleSigint);
+    }
+  }
 }
 
-// ../../shared/github/repo-url.ts
-function parseGithubRepoFullName(value) {
-  const shorthand = value.match(/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.-]+)$/);
-  if (shorthand) return { owner: shorthand[1], repo: shorthand[2] };
-  const ssh = value.match(/^git@github\.com:([^/]+)\/([^/]+?)(?:\.git)?$/);
-  if (ssh) return { owner: ssh[1], repo: ssh[2] };
-  const https = value.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?\/?$/);
-  if (https) return { owner: https[1], repo: https[2] };
-  return null;
+// src/commands/codex.ts
+var CODEX_SUBSCRIPTION_PATH = "/api/settings/codex-subscription";
+var CODEX_SUBSCRIPTION_AUTH_JSON_PATH = "/api/settings/codex-subscription/auth-json";
+var CODEX_SUBSCRIPTION_ENABLED_PATH = "/api/settings/codex-subscription/enabled";
+function describeCredentialStatus(credential) {
+  if (!credential.isSet) return null;
+  if (credential.lastValidationStatus === "invalid") {
+    return "Expired. Upload a fresh auth.json in Settings, or run `arcanist codex login` if the Codex CLI is installed. `arcanist codex use off` falls back to your OpenAI key.";
+  }
+  if (credential.lastValidationStatus === "validated") return "Verified with OpenAI.";
+  return "Saved, but not verified with OpenAI yet.";
 }
-
-// src/git.ts
-import { execFileSync } from "child_process";
-function git(args) {
+function resolveCodexPath(optionPath) {
+  return optionPath?.trim() || process.env.ARCANIST_CODEX_BIN?.trim() || "codex";
+}
+function runCodexDeviceLogin(codexPath, codexHome) {
+  return runVendorLoginProcess({
+    displayName: "Codex",
+    binPath: codexPath,
+    args: ["login", "--device-auth"],
+    env: { CODEX_HOME: codexHome },
+    missingBinaryHint: "Install the Codex CLI, or point at it with --codex-path <path> or ARCANIST_CODEX_BIN.",
+    retryCommand: "arcanist codex login"
+  });
+}
+async function setCodexSubscriptionEnabled(config, enabled) {
+  return apiFetch(config, CODEX_SUBSCRIPTION_ENABLED_PATH, {
+    method: "PUT",
+    body: JSON.stringify({ enabled })
+  });
+}
+async function codexLoginCommand(options, command) {
+  const { config } = resolveBusinessContext(command, options);
+  const codexPath = resolveCodexPath(options.codexPath);
+  const authJson = await withIsolatedLoginDir("arcanist-codex-", async (codexHome) => {
+    await runCodexDeviceLogin(codexPath, codexHome);
+    let raw;
+    try {
+      raw = await readFile(join4(codexHome, "auth.json"), "utf8");
+    } catch {
+      throw new CliError("user", "Codex login completed but no auth.json was written.", {
+        hint: "Verify `codex login --device-auth` succeeds on its own, then re-run `arcanist codex login`."
+      });
+    }
+    if (!raw.trim()) {
+      throw new CliError("user", "Codex login produced an empty auth.json.");
+    }
+    return raw;
+  });
+  const state = await apiFetch(config, CODEX_SUBSCRIPTION_AUTH_JSON_PATH, {
+    method: "PUT",
+    body: JSON.stringify({ authJson })
+  });
+  let activated = false;
+  let activationError;
   try {
-    return execFileSync("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
+    await setCodexSubscriptionEnabled(config, true);
+    activated = true;
   } catch (err) {
-    throw new CliError("user", `git ${args.join(" ")} failed: ${stringifyError(err)}`);
+    activationError = err instanceof Error ? err.message : String(err);
   }
+  emit(command, options, { ...state, useCodexSubscription: activated }, (payload) => {
+    console.log(
+      activated ? "Codex subscription auth saved and activated for OpenAI sessions." : "Codex subscription auth saved."
+    );
+    const status = describeCredentialStatus(payload);
+    if (status) console.log(`Status: ${status}`);
+    if (!activated) {
+      console.log(`Could not activate it automatically${activationError ? ` (${activationError})` : ""}.`);
+      console.log("Run `arcanist codex use on` to start using it.");
+    }
+  });
 }
-function currentRepo() {
-  const parsed = parseGithubRepoFullName(git(["remote", "get-url", "origin"]));
-  if (!parsed) throw new CliError("user", "origin remote must point at a GitHub repository");
-  return { owner: parsed.owner, repo: parsed.repo };
+async function codexUseCommand(state, options, command) {
+  const normalized = state.trim().toLowerCase();
+  if (normalized !== "on" && normalized !== "off") {
+    throw new CliError("user", "Usage: arcanist codex use <on|off>");
+  }
+  const enabled = normalized === "on";
+  const { config } = resolveBusinessContext(command, options);
+  const result = await setCodexSubscriptionEnabled(config, enabled);
+  emit(
+    command,
+    options,
+    result,
+    () => console.log(
+      result.useCodexSubscription ? "Codex subscription auth is now used for OpenAI sessions." : "Codex subscription auth is no longer used for OpenAI sessions."
+    )
+  );
 }
-
-// src/utils/repo-arg.ts
-function parseRepoArg(value, argName = "repo") {
-  const parsed = parseGithubRepoFullName(value);
-  if (!parsed) throw new CliError("user", `${argName} must be owner/name or a GitHub URL`);
-  return { owner: parsed.owner, repo: parsed.repo.replace(/\.git$/, "") };
+async function codexStatusCommand(options, command) {
+  const { config } = resolveBusinessContext(command, options);
+  const payload = await apiFetch(config, CODEX_SUBSCRIPTION_PATH);
+  emit(command, options, payload, (state) => {
+    console.log(`Eligible: ${state.eligible ? "yes" : "no"}`);
+    console.log(`Auth.json saved: ${state.credential.isSet ? "yes" : "no"}`);
+    const status = describeCredentialStatus(state.credential);
+    if (status) console.log(`Status: ${status}`);
+  });
 }
-function parseRepoArgOrCurrent(value, argName = "repo") {
-  if (value === void 0) return currentRepo();
-  return parseRepoArg(value, argName);
+async function codexLogoutCommand(options, command) {
+  const { config } = resolveBusinessContext(command, options);
+  await setCodexSubscriptionEnabled(config, false).catch(() => {
+  });
+  const payload = await apiFetch(config, CODEX_SUBSCRIPTION_AUTH_JSON_PATH, {
+    method: "DELETE"
+  });
+  emit(command, options, payload, () => console.log("Codex subscription auth deactivated and cleared."));
 }
 
-// ../../shared/agent/agent-runtime-backend.ts
-var CODEX_AGENT_RUNTIME_BACKEND = "codex";
-var AGENT_RUNTIME_BACKENDS = [CODEX_AGENT_RUNTIME_BACKEND];
+// src/uploads.ts
+import { readFile as readFile2 } from "fs/promises";
+import { basename as basename2, extname } from "path";
 
-// ../../shared/utils/type-guards.ts
-function isRecord(value) {
-  return !!value && typeof value === "object" && !Array.isArray(value);
+// ../../shared/constants/uploads.ts
+var MAX_UPLOADED_FILES = 5;
+var MAX_UPLOADED_FILE_SIZE_BYTES = 102400;
+var UPLOADED_FILE_EXTENSIONS = [".md", ".txt", ".csv", ".json", ".yaml", ".yml", ".xml", ".html"];
+var MAX_UPLOADED_IMAGE_SIZE_BYTES = 5 * 1024 * 1024;
+var ALLOWED_IMAGE_MEDIA_TYPES = ["image/png", "image/jpeg", "image/gif", "image/webp"];
+
+// ../../shared/utils/uploads.ts
+var ALLOWED_IMAGE_MEDIA_TYPE_SET = new Set(ALLOWED_IMAGE_MEDIA_TYPES);
+function ok(value) {
+  return { ok: true, value };
 }
-function asNonEmptyString(value) {
-  if (typeof value !== "string") return void 0;
-  const trimmed = value.trim();
-  return trimmed.length > 0 ? trimmed : void 0;
-}
-
-// ../../shared/constants/models.ts
-var OpenAIModel = {
-  GPT56: "gpt-5.6",
-  GPT56Sol: "gpt-5.6-sol",
-  GPT56Terra: "gpt-5.6-terra",
-  GPT56Luna: "gpt-5.6-luna",
-  GPT55: "gpt-5.5",
-  GPT54: "gpt-5.4",
-  GPT54Pro: "gpt-5.4-pro",
-  GPT54Mini: "gpt-5.4-mini",
-  GPT54Nano: "gpt-5.4-nano",
-  GPT53CodexSpark: "gpt-5.3-codex-spark",
-  GPT53Codex: "gpt-5.3-codex",
-  GPT52: "gpt-5.2",
-  GPT52ChatLatest: "gpt-5.2-chat-latest",
-  GPT52Codex: "gpt-5.2-codex"
-};
-var MODEL_PROVIDERS_SET = /* @__PURE__ */ new Set(["openai", "anthropic"]);
-var BACKEND_DESKTOP_IMAGE_FEEDBACK_CONFIGS = {
-  [CODEX_AGENT_RUNTIME_BACKEND]: {
-    backend: CODEX_AGENT_RUNTIME_BACKEND,
-    fixture: "known_image_fixture",
-    deliveryPath: "synthetic_image_context",
-    verifiedAt: "2026-07-07"
-  }
-};
-var MODEL_REGISTRY = [
-  {
-    id: OpenAIModel.GPT54,
-    name: "GPT-5.4",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 1e6,
-    // Default codex model after the gpt-5.5 downgrade; carries gpt-5.5's prior
-    // "medium" default so default sessions keep the same reasoning effort.
-    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: "medium" },
-    // No cacheWritePerMillion: the pricing page shows a dash in the cache-writes
-    // column for gpt-5.4 and gpt-5.5, so the absence is deliberate, not an
-    // oversight (checked 2026-07-30). The 5.6 family does publish that rate.
-    pricing: {
-      inputPerMillion: 2.5,
-      outputPerMillion: 15,
-      cacheReadPerMillion: 0.25,
-      longContext: {
-        thresholdTokens: 272e3,
-        inputPerMillion: 5,
-        outputPerMillion: 22.5,
-        cacheReadPerMillion: 0.5
-      }
-    },
-    sessionStart: { eligible: true, isDefault: true }
-  },
-  {
-    id: OpenAIModel.GPT56,
-    name: "GPT-5.6",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 105e4,
-    // Verified 2026-07-09 against OpenAI's GPT-5.6 migration guide and model
-    // catalog: the alias routes to gpt-5.6-sol and supports max effort. Pricing
-    // mirrors gpt-5.6-sol since the alias resolves to it. Cache-write rates
-    // verified 2026-07-30 against the Standard tier at
-    // developers.openai.com/api/docs/pricing.
-    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh", "max"], default: "medium" },
-    pricing: {
-      inputPerMillion: 5,
-      outputPerMillion: 30,
-      cacheReadPerMillion: 0.5,
-      cacheWritePerMillion: 6.25,
-      longContext: {
-        thresholdTokens: 272e3,
-        inputPerMillion: 10,
-        outputPerMillion: 45,
-        cacheReadPerMillion: 1,
-        cacheWritePerMillion: 12.5
-      }
-    },
-    sessionStart: { eligible: true }
-  },
-  {
-    id: OpenAIModel.GPT56Sol,
-    name: "GPT-5.6 Sol",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 105e4,
-    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh", "max"], default: "medium" },
-    // Cache-write rates verified 2026-07-30 against the Standard tier at
-    // developers.openai.com/api/docs/pricing.
-    pricing: {
-      inputPerMillion: 5,
-      outputPerMillion: 30,
-      cacheReadPerMillion: 0.5,
-      cacheWritePerMillion: 6.25,
-      longContext: {
-        thresholdTokens: 272e3,
-        inputPerMillion: 10,
-        outputPerMillion: 45,
-        cacheReadPerMillion: 1,
-        cacheWritePerMillion: 12.5
-      }
-    },
-    sessionStart: { eligible: true }
-  },
-  {
-    id: OpenAIModel.GPT56Terra,
-    name: "GPT-5.6 Terra",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 105e4,
-    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh", "max"], default: "medium" },
-    // Verified 2026-07-30 against the Standard tier at
-    // developers.openai.com/api/docs/pricing: short and long context input,
-    // cached input, cache writes, and output.
-    pricing: {
-      inputPerMillion: 2,
-      outputPerMillion: 12,
-      cacheReadPerMillion: 0.2,
-      cacheWritePerMillion: 2.5,
-      longContext: {
-        thresholdTokens: 272e3,
-        inputPerMillion: 4,
-        outputPerMillion: 18,
-        cacheReadPerMillion: 0.4,
-        cacheWritePerMillion: 5
-      }
-    },
-    sessionStart: { eligible: true }
-  },
-  {
-    id: OpenAIModel.GPT56Luna,
-    name: "GPT-5.6 Luna",
-    provider: "openai",
-    overloadFallback: OpenAIModel.GPT56Terra,
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 105e4,
-    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh", "max"], default: "medium" },
-    // Verified 2026-07-30 against the Standard tier at
-    // developers.openai.com/api/docs/pricing: short and long context input,
-    // cached input, cache writes, and output.
-    pricing: {
-      inputPerMillion: 0.2,
-      outputPerMillion: 1.2,
-      cacheReadPerMillion: 0.02,
-      cacheWritePerMillion: 0.25,
-      longContext: {
-        thresholdTokens: 272e3,
-        inputPerMillion: 0.4,
-        outputPerMillion: 1.8,
-        cacheReadPerMillion: 0.04,
-        cacheWritePerMillion: 0.5
-      }
-    },
-    sessionStart: { eligible: true }
-  },
-  {
-    id: OpenAIModel.GPT55,
-    name: "GPT-5.5",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 1e6,
-    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: "medium" },
-    pricing: {
-      inputPerMillion: 5,
-      outputPerMillion: 30,
-      cacheReadPerMillion: 0.5,
-      longContext: {
-        thresholdTokens: 272e3,
-        inputPerMillion: 10,
-        outputPerMillion: 45,
-        cacheReadPerMillion: 1
-      }
-    },
-    sessionStart: { eligible: true }
-  },
-  {
-    id: OpenAIModel.GPT54Mini,
-    name: "GPT-5.4 Mini",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 4e5,
-    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: void 0 },
-    pricing: {
-      inputPerMillion: 0.75,
-      outputPerMillion: 4.5,
-      cacheReadPerMillion: 0.075,
-      // Flex bills at Batch rates: a flat 50% off standard across input,
-      // cached input, and output (verified against the OpenAI pricing page,
-      // June 2026). Bridge cost estimates deliberately strip this gateway-only
-      // axis when deriving MODEL_PRICING.
-      flex: { inputPerMillion: 0.375, outputPerMillion: 2.25, cacheReadPerMillion: 0.0375 }
-    },
-    sessionStart: { eligible: true }
-  },
-  {
-    id: OpenAIModel.GPT54Nano,
-    name: "GPT-5.4 Nano",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: false },
-    contextWindow: 4e5,
-    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: void 0 },
-    pricing: { inputPerMillion: 0.2, outputPerMillion: 1.25, cacheReadPerMillion: 0.02 },
-    sessionStart: { eligible: true }
-  },
-  {
-    id: OpenAIModel.GPT53CodexSpark,
-    name: "GPT-5.3 Codex Spark",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 128e3,
-    reasoning: { efforts: ["low", "medium", "high", "xhigh"], default: "high" },
-    costTracked: false,
-    requiresCodexSubscriptionAuth: true,
-    sessionStart: { eligible: true },
-    visibility: "internal_probe"
-  },
-  {
-    id: OpenAIModel.GPT53Codex,
-    name: "GPT-5.3 Codex",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 4e5,
-    reasoning: { efforts: ["low", "medium", "high", "xhigh"], default: "high" },
-    pricing: { inputPerMillion: 1.75, outputPerMillion: 14, cacheReadPerMillion: 0.175 }
-  },
-  {
-    id: OpenAIModel.GPT52,
-    name: "GPT-5.2",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 4e5,
-    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: void 0 },
-    pricing: { inputPerMillion: 1.75, outputPerMillion: 14, cacheReadPerMillion: 0.175 }
-  },
-  {
-    id: OpenAIModel.GPT52ChatLatest,
-    name: "GPT-5.2 Chat",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 128e3,
-    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: void 0 },
-    pricing: { inputPerMillion: 1.75, outputPerMillion: 14, cacheReadPerMillion: 0.175 }
-  },
-  {
-    id: OpenAIModel.GPT52Codex,
-    name: "GPT-5.2 Codex",
-    provider: "openai",
-    backends: [CODEX_AGENT_RUNTIME_BACKEND],
-    capabilities: { codexToolSearch: true },
-    contextWindow: 4e5,
-    reasoning: { efforts: ["low", "medium", "high", "xhigh"], default: "high" },
-    pricing: { inputPerMillion: 1.75, outputPerMillion: 14, cacheReadPerMillion: 0.175 }
-  }
-];
-var MODEL_PROVIDER_NAMES = {
-  openai: "OpenAI",
-  anthropic: "Anthropic"
-};
-function buildSessionStartModelIdsByBackend() {
-  const byBackend = Object.fromEntries(AGENT_RUNTIME_BACKENDS.map((backend) => [backend, []]));
-  for (const model of MODEL_REGISTRY) {
-    if (!model.sessionStart?.eligible) continue;
-    for (const backend of model.backends) {
-      if (!modelSupportsRequiredSessionStartCapabilities(model, backend)) continue;
-      byBackend[backend].push(model.id);
-    }
-  }
-  return byBackend;
-}
-function modelSupportsRequiredSessionStartCapabilities(model, backend) {
-  if (backend !== CODEX_AGENT_RUNTIME_BACKEND) return true;
-  return model.capabilities?.codexToolSearch === true;
-}
-function buildDefaultSessionStartModelIdByBackend() {
-  const defaults = {};
-  for (const backend of AGENT_RUNTIME_BACKENDS) {
-    const backendDefaults = MODEL_REGISTRY.filter(
-      (model) => model.sessionStart?.eligible && model.sessionStart.isDefault === true && model.backends.includes(backend)
-    );
-    if (backendDefaults.length !== 1) {
-      throw new Error(`Expected exactly one default session-start model for ${backend}, got ${backendDefaults.length}`);
-    }
-    defaults[backend] = backendDefaults[0].id;
-  }
-  return defaults;
-}
-var SESSION_START_MODEL_IDS_BY_BACKEND = buildSessionStartModelIdsByBackend();
-var DEFAULT_SESSION_START_MODEL_ID_BY_BACKEND = buildDefaultSessionStartModelIdByBackend();
-var DEFAULT_SESSION_START_MODEL_ID = DEFAULT_SESSION_START_MODEL_ID_BY_BACKEND[CODEX_AGENT_RUNTIME_BACKEND];
-var VALID_MODEL_IDS = new Set(MODEL_REGISTRY.map((model) => model.id));
-var VALID_SESSION_START_MODEL_IDS_BY_BACKEND = {
-  [CODEX_AGENT_RUNTIME_BACKEND]: new Set(SESSION_START_MODEL_IDS_BY_BACKEND[CODEX_AGENT_RUNTIME_BACKEND])
-};
-var MODEL_CONTEXT_WINDOWS = {
-  ...Object.fromEntries(
-    MODEL_REGISTRY.flatMap((model) => model.contextWindow === void 0 ? [] : [[model.id, model.contextWindow]])
-  )
-};
-var MODEL_PROVIDERS = {
-  ...Object.fromEntries(MODEL_REGISTRY.map((model) => [model.id, model.provider]))
-};
-var MODEL_REASONING_CONFIG = Object.fromEntries(
-  MODEL_REGISTRY.flatMap((model) => model.reasoning ? [[model.id, model.reasoning]] : [])
-);
-var MODEL_DEFINITIONS_BY_ID = Object.fromEntries(MODEL_REGISTRY.map((model) => [model.id, model]));
-function splitModelIdentifier(value) {
-  let hasSeparator = false;
-  for (const separator of [":", "/"]) {
-    const index = value.indexOf(separator);
-    if (index <= 0 || index >= value.length - 1) continue;
-    hasSeparator = true;
-    const providerID = value.slice(0, index);
-    const modelID = value.slice(index + 1);
-    if (MODEL_PROVIDERS_SET.has(providerID) && modelID.length > 0) {
-      return { providerID, modelID };
-    }
-  }
-  if (hasSeparator) return void 0;
-  return value.length > 0 ? { modelID: value } : void 0;
-}
-function getRawModelValue(raw) {
-  if (typeof raw === "string") return asNonEmptyString(raw);
-  if (!raw || typeof raw !== "object") return void 0;
-  const value = raw;
-  return asNonEmptyString(value.modelID) ?? asNonEmptyString(value.modelId) ?? asNonEmptyString(value.id);
-}
-function getExplicitProvider(raw) {
-  if (raw && typeof raw === "object") {
-    const value = raw;
-    const providerID = asNonEmptyString(value.providerID) ?? asNonEmptyString(value.providerId);
-    if (providerID && MODEL_PROVIDERS_SET.has(providerID)) {
-      return providerID;
-    }
-  }
-  const modelValue = getRawModelValue(raw);
-  if (!modelValue) return void 0;
-  return splitModelIdentifier(modelValue)?.providerID;
-}
-function extractModelId(raw) {
-  const value = getRawModelValue(raw);
-  if (!value) return void 0;
-  return splitModelIdentifier(value)?.modelID;
-}
-function getSessionStartModelIdsForBackend(backend) {
-  return SESSION_START_MODEL_IDS_BY_BACKEND[backend];
-}
-function isSessionStartModelAllowedForBackend(modelId, backend) {
-  return VALID_SESSION_START_MODEL_IDS_BY_BACKEND[backend].has(modelId);
-}
-function getProviderForModel(modelId) {
-  return MODEL_PROVIDERS[modelId] ?? "openai";
-}
-function toModelSelection(raw) {
-  const modelID = extractModelId(raw);
-  if (!modelID) return void 0;
-  return {
-    providerID: getExplicitProvider(raw) ?? getProviderForModel(modelID),
-    modelID
-  };
-}
-function getModelDefinition(raw) {
-  const modelID = extractModelId(raw);
-  if (!modelID) return void 0;
-  return MODEL_DEFINITIONS_BY_ID[modelID];
-}
-function formatModelLabel(raw, options = {}) {
-  const includeProvider = options.includeProvider ?? false;
-  const definition = getModelDefinition(raw);
-  if (definition) {
-    return includeProvider ? `${MODEL_PROVIDER_NAMES[definition.provider]} / ${definition.name}` : definition.name;
-  }
-  const selection = toModelSelection(raw);
-  if (!selection) return void 0;
-  const providerName = MODEL_PROVIDER_NAMES[selection.providerID];
-  return includeProvider ? `${providerName} / ${selection.modelID}` : selection.modelID;
-}
-function buildModelProviderGroups(models2) {
-  const groups = /* @__PURE__ */ new Map();
-  for (const model of models2) {
-    let group = groups.get(model.provider);
-    if (!group) {
-      group = { id: model.provider, name: MODEL_PROVIDER_NAMES[model.provider], models: [] };
-      groups.set(model.provider, group);
-    }
-    group.models.push({
-      id: model.id,
-      name: model.name,
-      label: formatModelLabel(model, { includeProvider: true }) ?? model.name,
-      backends: model.backends,
-      reasoning: model.reasoning
-    });
-  }
-  const defaultModelIds = new Set(
-    models2.filter((model) => model.sessionStart?.isDefault === true).map((model) => model.id)
-  );
-  for (const group of groups.values()) {
-    group.models.sort((a, b) => Number(defaultModelIds.has(b.id)) - Number(defaultModelIds.has(a.id)));
-  }
-  return [...groups.values()];
-}
-var SESSION_START_MODEL_ID_SET_ANY_BACKEND = new Set(
-  AGENT_RUNTIME_BACKENDS.flatMap((backend) => [...SESSION_START_MODEL_IDS_BY_BACKEND[backend]])
-);
-var PUBLIC_SESSION_START_MODEL_PROVIDER_GROUPS = buildModelProviderGroups(
-  MODEL_REGISTRY.filter(
-    (model) => SESSION_START_MODEL_ID_SET_ANY_BACKEND.has(model.id) && model.visibility !== "internal_probe"
-  )
-);
-var CODEX_SUBSCRIPTION_SESSION_START_MODEL_PROVIDER_GROUPS = buildModelProviderGroups(
-  MODEL_REGISTRY.filter(
-    (model) => SESSION_START_MODEL_ID_SET_ANY_BACKEND.has(model.id) && (model.visibility !== "internal_probe" || model.requiresCodexSubscriptionAuth === true)
-  )
-);
-
-// src/commands/model-options.ts
-function resolveModelAndBackend(options) {
-  let agentRuntimeBackend = CODEX_AGENT_RUNTIME_BACKEND;
-  const normalizedModel = options.model !== void 0 ? extractModelId(options.model) : void 0;
-  if (options.model !== void 0) {
-    if (normalizedModel === void 0 || !isSessionStartModelAllowedForBackend(normalizedModel, agentRuntimeBackend)) {
-      const allowed = getSessionStartModelIdsForBackend(agentRuntimeBackend).join(", ");
-      throw new CliError(
-        "user",
-        `Model '${options.model}' is not selectable for backend '${agentRuntimeBackend}'. Allowed: ${allowed}.`
-      );
-    }
-  }
-  return { agentRuntimeBackend, modelId: normalizedModel };
-}
-
-// src/commands/automations.ts
-var AUTOMATION_ERROR_HINTS = {
-  invalid_cron: "Use a standard five-field cron expression, for example: */15 * * * *",
-  invalid_model: "Model is unknown or not selectable for its backend. Run `arcanist automations create --help` for allowed models.",
-  repo_not_available: "Check that the token owner has GitHub access and Arcanist is installed for that repo.",
-  duplicate_rule: "An enabled automation already exists for this repo, cron, and prompt.",
-  invalid_skill: "Use a leading slash skill that exists in the selected repo, for example: /your-repo-skill",
-  invalid_slack_target: "Pass both --slack-team-id and --slack-channel-id to enable Slack delivery.",
-  slack_workspace_not_connected: "Connect that Slack workspace to Arcanist before creating the automation.",
-  slack_channel_unavailable: "Check the Slack channel ID and confirm the bot can see the channel.",
-  slack_bot_not_in_channel: "Invite the Arcanist bot to the channel, then retry.",
-  rule_cap_reached: "Delete or disable an existing automation before creating another one. The cap is 20 enabled rules.",
-  model_not_available: "That model is not available for this business; use the codex default or a codex model.",
-  repo_skills_unavailable: "Arcanist could not verify the repo's skills right now. Retry once GitHub skill discovery is healthy.",
-  unknown_skill: "That leading slash skill does not exist in the selected repository."
-};
-async function createAutomationCommand(repoUrl, promptArg, options, command) {
-  const repo = parseRepoArg(repoUrl, "repo-url");
-  const prompt = await resolvePromptInput(promptArg, options);
-  const slackTeamId = options.slackTeamId?.trim();
-  const slackChannelId = options.slackChannelId?.trim();
-  const slackDeliveryRequested = options.slackTeamId !== void 0 || options.slackChannelId !== void 0;
-  if (slackDeliveryRequested && (!slackTeamId || !slackChannelId)) {
-    throw new CliError(
-      "user",
-      "Slack delivery requires both --slack-team-id and --slack-channel-id with non-empty values."
-    );
-  }
-  const runtime = getRuntimeOptions(command, options);
-  const config = requireConfig(runtime);
-  const { modelId: normalizedModel } = resolveModelAndBackend(options);
-  const body = {
-    repoOwner: repo.owner,
-    repoName: repo.repo,
-    cron: options.cron,
-    prompt
-  };
-  if (options.name !== void 0) body.name = options.name;
-  if (options.model !== void 0) body.modelId = normalizedModel;
-  if (slackDeliveryRequested) {
-    body.slackTeamId = slackTeamId;
-    body.slackChannelId = slackChannelId;
-  }
-  const payload = await automationApiFetch(config, "/api/automation/schedules", {
-    method: "POST",
-    body: JSON.stringify(body)
-  });
-  if (isJson(command, options)) {
-    writeJson(payload.data);
-    return;
-  }
-  printAutomationRule(payload.data);
-}
-async function listAutomationsCommand(options, command) {
-  const runtime = getRuntimeOptions(command, options);
-  const config = requireConfig(runtime);
-  const { items, nextCursor } = await fetchPages(
-    "automations list --all",
-    options.all === true,
-    options.cursor,
-    async (cursor) => {
-      const query = new URLSearchParams();
-      if (options.limit) query.set("limit", options.limit);
-      if (cursor) query.set("cursor", cursor);
-      const payload = await automationApiFetch(
-        config,
-        `/api/automation/schedules${query.size ? `?${query.toString()}` : ""}`
-      );
-      return { items: payload.data.items, nextCursor: payload.data.nextCursor };
-    }
-  );
-  const output = { items, nextCursor };
-  if (isJson(command, options)) {
-    writeJson(output);
-    return;
-  }
-  if (items.length === 0) {
-    console.log("No automations found.");
-    return;
-  }
-  for (const rule of items) {
-    console.log(
-      `${rule.id}	${rule.repoOwner}/${rule.repoName}	${rule.normalizedCron}	${String(rule.enabled)}	${formatTime(rule.nextFireAt)}`
-    );
-  }
-  if (output.nextCursor) console.log(`Next cursor: ${output.nextCursor}`);
-}
-async function deleteAutomationCommand(id, options, command) {
-  if (isJson(command, options) && options.yes !== true) {
-    throw new CliError("user", "`automations delete --json` requires --yes.");
-  }
-  if (options.yes !== true) {
-    await confirmOrThrow(`Delete automation ${id}?`);
-  }
-  const runtime = getRuntimeOptions(command, options);
-  const config = requireConfig(runtime);
-  await automationApiFetchText(config, `/api/automation/schedules/${encodeURIComponent(id)}`, { method: "DELETE" });
-  if (isJson(command, options)) {
-    writeJson({ ok: true, id });
-    return;
-  }
-  console.log(`Deleted automation ${id}.`);
-}
-async function automationApiFetch(config, path, init) {
-  try {
-    return await apiFetch(config, path, init);
-  } catch (err) {
-    throw mapAutomationApiError(err);
-  }
-}
-async function automationApiFetchText(config, path, init) {
-  try {
-    return await apiFetchText(config, path, init);
-  } catch (err) {
-    throw mapAutomationApiError(err);
-  }
-}
-function mapAutomationApiError(err) {
-  if (!(err instanceof ApiError)) {
-    return err instanceof CliError ? err : new CliError("server", stringifyError(err));
-  }
-  const parsed = parseApiErrorBody(err.body);
-  const serverCode = parsed?.rawError ?? parsed?.serverCode;
-  return new CliError(codeForHttpStatus(err.status), parsed?.message || serverCode || err.message, {
-    exitCode: err.exitCode,
-    hint: serverCode ? AUTOMATION_ERROR_HINTS[serverCode] : void 0,
-    requestId: err.requestId
-  });
-}
-function printAutomationRule(rule) {
-  console.log(`ID: ${rule.id}`);
-  console.log(`Repo: ${rule.repoOwner}/${rule.repoName}`);
-  console.log(`Cron: ${rule.normalizedCron}`);
-  if (rule.modelId) console.log(`Model: ${rule.modelId}`);
-  if (rule.slackTeamId && rule.slackChannelId) {
-    console.log(`Slack delivery: ${rule.slackTeamId}/${rule.slackChannelId}`);
-  }
-  console.log(`Next fire: ${formatTime(rule.nextFireAt)}`);
-}
-function formatTime(value) {
-  return typeof value === "number" ? new Date(value).toISOString() : "none";
-}
-
-// src/commands/codex.ts
-import { readFile } from "fs/promises";
-import { join as join4 } from "path";
-
-// src/vendor-login.ts
-import { spawn } from "child_process";
-import { rmSync } from "fs";
-import { mkdtemp, rm } from "fs/promises";
-import { tmpdir } from "os";
-import { join as join3 } from "path";
-function runVendorLoginProcess(spec) {
-  return new Promise((resolve3, reject) => {
-    const child = spawn(spec.binPath, spec.args, {
-      stdio: "inherit",
-      env: { ...process.env, ...spec.env }
-    });
-    child.on("error", (err) => {
-      if (err.code === "ENOENT") {
-        reject(
-          new CliError("user", `Could not find the \`${spec.binPath}\` executable.`, {
-            hint: spec.missingBinaryHint
-          })
-        );
-        return;
-      }
-      reject(new CliError("user", `Failed to launch \`${spec.binPath} ${spec.args.join(" ")}\`: ${err.message}`));
-    });
-    child.on("close", (code) => {
-      if (code === 0) {
-        resolve3();
-        return;
-      }
-      reject(
-        new CliError("user", `\`${spec.binPath} ${spec.args.join(" ")}\` exited with code ${code ?? "unknown"}.`, {
-          hint: `Complete the ${spec.displayName} login, then re-run \`${spec.retryCommand}\`.`
-        })
-      );
-    });
-  });
-}
-async function withIsolatedLoginDir(prefix, fn) {
-  let tempDir;
-  const handleSigint = () => {
-    if (tempDir) {
-      try {
-        rmSync(tempDir, { recursive: true, force: true });
-      } catch {
-      }
-    }
-    process.exit(EXIT_CODE_INTERRUPTED);
-  };
-  process.on("SIGINT", handleSigint);
-  try {
-    tempDir = await mkdtemp(join3(tmpdir(), prefix));
-    return await fn(tempDir);
-  } finally {
-    try {
-      if (tempDir) {
-        await rm(tempDir, { recursive: true, force: true }).catch(() => {
-        });
-      }
-    } finally {
-      process.off("SIGINT", handleSigint);
-    }
-  }
-}
-
-// src/commands/codex.ts
-var CODEX_SUBSCRIPTION_PATH = "/api/settings/codex-subscription";
-var CODEX_SUBSCRIPTION_AUTH_JSON_PATH = "/api/settings/codex-subscription/auth-json";
-var CODEX_SUBSCRIPTION_ENABLED_PATH = "/api/settings/codex-subscription/enabled";
-function describeCredentialStatus(credential) {
-  if (!credential.isSet) return null;
-  if (credential.lastValidationStatus === "invalid") {
-    return "Expired. Upload a fresh auth.json in Settings, or run `arcanist codex login` if the Codex CLI is installed. `arcanist codex use off` falls back to your OpenAI key.";
-  }
-  if (credential.lastValidationStatus === "validated") return "Verified with OpenAI.";
-  return "Saved, but not verified with OpenAI yet.";
-}
-function resolveCodexPath(optionPath) {
-  return optionPath?.trim() || process.env.ARCANIST_CODEX_BIN?.trim() || "codex";
-}
-function runCodexDeviceLogin(codexPath, codexHome) {
-  return runVendorLoginProcess({
-    displayName: "Codex",
-    binPath: codexPath,
-    args: ["login", "--device-auth"],
-    env: { CODEX_HOME: codexHome },
-    missingBinaryHint: "Install the Codex CLI, or point at it with --codex-path <path> or ARCANIST_CODEX_BIN.",
-    retryCommand: "arcanist codex login"
-  });
-}
-async function setCodexSubscriptionEnabled(config, enabled) {
-  return apiFetch(config, CODEX_SUBSCRIPTION_ENABLED_PATH, {
-    method: "PUT",
-    body: JSON.stringify({ enabled })
-  });
-}
-async function codexLoginCommand(options, command) {
-  const { config } = resolveBusinessContext(command, options);
-  const codexPath = resolveCodexPath(options.codexPath);
-  const authJson = await withIsolatedLoginDir("arcanist-codex-", async (codexHome) => {
-    await runCodexDeviceLogin(codexPath, codexHome);
-    let raw;
-    try {
-      raw = await readFile(join4(codexHome, "auth.json"), "utf8");
-    } catch {
-      throw new CliError("user", "Codex login completed but no auth.json was written.", {
-        hint: "Verify `codex login --device-auth` succeeds on its own, then re-run `arcanist codex login`."
-      });
-    }
-    if (!raw.trim()) {
-      throw new CliError("user", "Codex login produced an empty auth.json.");
-    }
-    return raw;
-  });
-  const state = await apiFetch(config, CODEX_SUBSCRIPTION_AUTH_JSON_PATH, {
-    method: "PUT",
-    body: JSON.stringify({ authJson })
-  });
-  let activated = false;
-  let activationError;
-  try {
-    await setCodexSubscriptionEnabled(config, true);
-    activated = true;
-  } catch (err) {
-    activationError = err instanceof Error ? err.message : String(err);
-  }
-  emit(command, options, { ...state, useCodexSubscription: activated }, (payload) => {
-    console.log(
-      activated ? "Codex subscription auth saved and activated for OpenAI sessions." : "Codex subscription auth saved."
-    );
-    const status = describeCredentialStatus(payload);
-    if (status) console.log(`Status: ${status}`);
-    if (!activated) {
-      console.log(`Could not activate it automatically${activationError ? ` (${activationError})` : ""}.`);
-      console.log("Run `arcanist codex use on` to start using it.");
-    }
-  });
-}
-async function codexUseCommand(state, options, command) {
-  const normalized = state.trim().toLowerCase();
-  if (normalized !== "on" && normalized !== "off") {
-    throw new CliError("user", "Usage: arcanist codex use <on|off>");
-  }
-  const enabled = normalized === "on";
-  const { config } = resolveBusinessContext(command, options);
-  const result = await setCodexSubscriptionEnabled(config, enabled);
-  emit(
-    command,
-    options,
-    result,
-    () => console.log(
-      result.useCodexSubscription ? "Codex subscription auth is now used for OpenAI sessions." : "Codex subscription auth is no longer used for OpenAI sessions."
-    )
-  );
-}
-async function codexStatusCommand(options, command) {
-  const { config } = resolveBusinessContext(command, options);
-  const payload = await apiFetch(config, CODEX_SUBSCRIPTION_PATH);
-  emit(command, options, payload, (state) => {
-    console.log(`Eligible: ${state.eligible ? "yes" : "no"}`);
-    console.log(`Auth.json saved: ${state.credential.isSet ? "yes" : "no"}`);
-    const status = describeCredentialStatus(state.credential);
-    if (status) console.log(`Status: ${status}`);
-  });
-}
-async function codexLogoutCommand(options, command) {
-  const { config } = resolveBusinessContext(command, options);
-  await setCodexSubscriptionEnabled(config, false).catch(() => {
-  });
-  const payload = await apiFetch(config, CODEX_SUBSCRIPTION_AUTH_JSON_PATH, {
-    method: "DELETE"
-  });
-  emit(command, options, payload, () => console.log("Codex subscription auth deactivated and cleared."));
-}
-
-// src/uploads.ts
-import { readFile as readFile2 } from "fs/promises";
-import { basename as basename2, extname } from "path";
-
-// ../../shared/constants/uploads.ts
-var MAX_UPLOADED_FILES = 5;
-var MAX_UPLOADED_FILE_SIZE_BYTES = 102400;
-var UPLOADED_FILE_EXTENSIONS = [".md", ".txt", ".csv", ".json", ".yaml", ".yml", ".xml", ".html"];
-var MAX_UPLOADED_IMAGE_SIZE_BYTES = 5 * 1024 * 1024;
-var ALLOWED_IMAGE_MEDIA_TYPES = ["image/png", "image/jpeg", "image/gif", "image/webp"];
-
-// ../../shared/utils/uploads.ts
-var ALLOWED_IMAGE_MEDIA_TYPE_SET = new Set(ALLOWED_IMAGE_MEDIA_TYPES);
-function ok(value) {
-  return { ok: true, value };
-}
-function fail(error) {
-  return { ok: false, error };
+function fail(error) {
+  return { ok: false, error };
 }
 function validateUploadedName(name, kind) {
   const trimmed = name.trim();
@@ -9228,6 +8573,16 @@ function noChangeOutcomeCopy(reason) {
   }
 }
 
+// ../../shared/utils/type-guards.ts
+function isRecord(value) {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function asNonEmptyString(value) {
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
+
 // ../../shared/transcript/malformed-search.ts
 var MALFORMED_SEARCH_BLOCKED_TRANSCRIPT_PREFIX = "Arcanist blocked this malformed search command before execution.";
 var BASH_UNMATCHED_QUOTE_EOF_RE = /\/bin\/bash:\s+-c:\s+line\s+\d+:\s+unexpected EOF while looking for matching [`'"][`'"]?/i;
@@ -10532,149 +9887,594 @@ function parseSsePayload(payload) {
       flush();
       continue;
     }
-    if (line.startsWith("event:")) {
-      currentEvent = line.slice("event:".length).trim();
-      continue;
+    if (line.startsWith("event:")) {
+      currentEvent = line.slice("event:".length).trim();
+      continue;
+    }
+    if (line.startsWith("id:")) {
+      const parsed = Number.parseInt(line.slice("id:".length).trim(), 10);
+      currentId = Number.isFinite(parsed) ? parsed : void 0;
+      continue;
+    }
+    if (line.startsWith("data:")) {
+      currentData.push(line.slice("data:".length).trimStart());
+    }
+  }
+  flush();
+  let status = null;
+  const events = [];
+  for (const message of messages) {
+    const data = message.data ? parseJsonObject(message.data) : {};
+    if (message.event === "status") {
+      const phaseRaw = data.phase;
+      const phase = typeof phaseRaw === "string" && VALID_PHASES.has(phaseRaw) ? phaseRaw : null;
+      const entry = {
+        phase
+      };
+      const sandboxSubstate = validateEnumField(data.sandboxSubstate, VALID_SANDBOX_SUBSTATES);
+      if (sandboxSubstate !== void 0) entry.sandboxSubstate = sandboxSubstate;
+      const stopMode = validateEnumField(data.stopMode, VALID_STOP_MODES);
+      if (stopMode !== void 0) entry.stopMode = stopMode;
+      const finalizingStep = validateEnumField(data.finalizingStep, VALID_FINALIZING_STEPS);
+      if (finalizingStep !== void 0) entry.finalizingStep = finalizingStep;
+      if (typeof data.title === "string") entry.title = data.title;
+      if (typeof data.spawnDurationMs === "number" || data.spawnDurationMs === null) {
+        entry.spawnDurationMs = data.spawnDurationMs;
+      }
+      status = entry;
+      continue;
+    }
+    events.push({
+      type: message.event,
+      ...message.id !== void 0 ? { id: message.id } : {},
+      data
+    });
+  }
+  return { status, events };
+}
+function validateEnumField(value, validSet) {
+  return typeof value === "string" && validSet.has(value) ? value : void 0;
+}
+function parseJsonObject(value) {
+  try {
+    const parsed = JSON.parse(value);
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch (err) {
+    throw new Error(`Malformed SSE JSON payload: ${stringifyError(err)}`);
+  }
+}
+function formatPromptLabel(promptId, promptLabels) {
+  if (!promptId) return "";
+  const prompt = promptLabels.get(promptId);
+  return prompt ? ` - ${prompt}` : "";
+}
+function buildPromptLabelMap(prompts) {
+  const labels = /* @__PURE__ */ new Map();
+  for (const prompt of prompts) {
+    const text = derivePromptDisplayText({ prompt: prompt.prompt, replyToText: prompt.replyToText });
+    labels.set(prompt.promptId, text.replace(/\s+/g, " ").trim().slice(0, PROMPT_LABEL_MAX_CHARS));
+  }
+  return labels;
+}
+function renderWatchEvent(event, state) {
+  const data = event.data;
+  switch (event.type) {
+    case "text":
+      return { kind: "text", text: String(data.text ?? "") };
+    case "prompt_enqueued": {
+      const promptId = typeof data.promptId === "string" ? data.promptId : void 0;
+      return {
+        kind: "line",
+        line: `[queued] ${promptId ?? "unknown"}${formatPromptLabel(promptId, state.promptLabels)}`
+      };
+    }
+    case "prompt_processing": {
+      const promptId = typeof data.promptId === "string" ? data.promptId : void 0;
+      return {
+        kind: "line",
+        line: `[prompt] ${promptId ?? "unknown"} started${formatPromptLabel(promptId, state.promptLabels)}`
+      };
     }
-    if (line.startsWith("id:")) {
-      const parsed = Number.parseInt(line.slice("id:".length).trim(), 10);
-      currentId = Number.isFinite(parsed) ? parsed : void 0;
-      continue;
+    case "prompt_completed": {
+      const promptId = typeof data.promptId === "string" ? data.promptId : void 0;
+      return { kind: "line", line: `[prompt] ${promptId ?? "unknown"} completed` };
     }
-    if (line.startsWith("data:")) {
-      currentData.push(line.slice("data:".length).trimStart());
+    case "prompt_failed": {
+      const promptId = typeof data.promptId === "string" ? data.promptId : void 0;
+      const error = typeof data.error === "string" ? data.error : "unknown error";
+      return { kind: "line", line: `[prompt] ${promptId ?? "unknown"} failed: ${error}` };
     }
-  }
-  flush();
-  let status = null;
-  const events = [];
-  for (const message of messages) {
-    const data = message.data ? parseJsonObject(message.data) : {};
-    if (message.event === "status") {
-      const phaseRaw = data.phase;
-      const phase = typeof phaseRaw === "string" && VALID_PHASES.has(phaseRaw) ? phaseRaw : null;
-      const entry = {
-        phase
+    case "tool_call": {
+      const toolId = String(data.id ?? "");
+      const tool = String(data.tool ?? "unknown");
+      const summary = String(data.summary ?? "");
+      state.toolCalls.set(toolId, { tool, summary });
+      return { kind: "line", line: `[tool] ${tool}${summary ? ` - ${summary}` : ""}` };
+    }
+    case "tool_update": {
+      const toolId = String(data.id ?? "");
+      const status = typeof data.status === "string" ? data.status : null;
+      if (!status) return null;
+      const tool = state.toolCalls.get(toolId);
+      if (!tool) return { kind: "line", line: `[tool] ${toolId} ${status}` };
+      return { kind: "line", line: `[tool ${status}] ${tool.tool}${tool.summary ? ` - ${tool.summary}` : ""}` };
+    }
+    case "question":
+      return { kind: "line", line: `[question] ${String(data.question ?? "")}` };
+    case "patch": {
+      const files = Array.isArray(data.files) ? data.files.filter((item) => typeof item === "string") : [];
+      return { kind: "line", line: `[patch] ${files.join(", ")}` };
+    }
+    case "agent_timeline": {
+      const eventType = String(data.eventType ?? "timeline");
+      const status = typeof data.status === "string" ? ` ${data.status}` : "";
+      return { kind: "line", line: `[agent] ${eventType}${status}: ${String(data.summary ?? "")}` };
+    }
+    case "session_error":
+      return {
+        kind: "line",
+        line: `[error] ${formatSessionErrorMessage(String(data.error ?? "Unknown error"), typeof data.code === "string" ? data.code : null)}`
       };
-      const sandboxSubstate = validateEnumField(data.sandboxSubstate, VALID_SANDBOX_SUBSTATES);
-      if (sandboxSubstate !== void 0) entry.sandboxSubstate = sandboxSubstate;
-      const stopMode = validateEnumField(data.stopMode, VALID_STOP_MODES);
-      if (stopMode !== void 0) entry.stopMode = stopMode;
-      const finalizingStep = validateEnumField(data.finalizingStep, VALID_FINALIZING_STEPS);
-      if (finalizingStep !== void 0) entry.finalizingStep = finalizingStep;
-      if (typeof data.title === "string") entry.title = data.title;
-      if (typeof data.spawnDurationMs === "number" || data.spawnDurationMs === null) {
-        entry.spawnDurationMs = data.spawnDurationMs;
+    case "pr_created":
+    case "pr_updated":
+      return { kind: "line", line: `[pr] ${String(data.prUrl ?? "")}` };
+    case "pr_failed":
+      return { kind: "line", line: `[pr error] ${String(data.error ?? "Unknown error")}` };
+    case "session_idle":
+      return { kind: "line", line: "[idle] waiting for next prompt" };
+    default:
+      return null;
+  }
+}
+
+// src/utils/session-payload.ts
+function unwrapSessionState(payload) {
+  return payload.session && typeof payload.session === "object" ? payload.session : payload;
+}
+
+// ../../shared/agent/agent-runtime-backend.ts
+var CODEX_AGENT_RUNTIME_BACKEND = "codex";
+var AGENT_RUNTIME_BACKENDS = [CODEX_AGENT_RUNTIME_BACKEND];
+
+// ../../shared/constants/models.ts
+var OpenAIModel = {
+  GPT56: "gpt-5.6",
+  GPT56Sol: "gpt-5.6-sol",
+  GPT56Terra: "gpt-5.6-terra",
+  GPT56Luna: "gpt-5.6-luna",
+  GPT55: "gpt-5.5",
+  GPT54: "gpt-5.4",
+  GPT54Pro: "gpt-5.4-pro",
+  GPT54Mini: "gpt-5.4-mini",
+  GPT54Nano: "gpt-5.4-nano",
+  GPT53CodexSpark: "gpt-5.3-codex-spark",
+  GPT53Codex: "gpt-5.3-codex",
+  GPT52: "gpt-5.2",
+  GPT52ChatLatest: "gpt-5.2-chat-latest",
+  GPT52Codex: "gpt-5.2-codex"
+};
+var MODEL_PROVIDERS_SET = /* @__PURE__ */ new Set(["openai", "anthropic"]);
+var BACKEND_DESKTOP_IMAGE_FEEDBACK_CONFIGS = {
+  [CODEX_AGENT_RUNTIME_BACKEND]: {
+    backend: CODEX_AGENT_RUNTIME_BACKEND,
+    fixture: "known_image_fixture",
+    deliveryPath: "synthetic_image_context",
+    verifiedAt: "2026-07-07"
+  }
+};
+var MODEL_REGISTRY = [
+  {
+    id: OpenAIModel.GPT54,
+    name: "GPT-5.4",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 1e6,
+    // Default codex model after the gpt-5.5 downgrade; carries gpt-5.5's prior
+    // "medium" default so default sessions keep the same reasoning effort.
+    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: "medium" },
+    // No cacheWritePerMillion: the pricing page shows a dash in the cache-writes
+    // column for gpt-5.4 and gpt-5.5, so the absence is deliberate, not an
+    // oversight (checked 2026-07-30). The 5.6 family does publish that rate.
+    pricing: {
+      inputPerMillion: 2.5,
+      outputPerMillion: 15,
+      cacheReadPerMillion: 0.25,
+      longContext: {
+        thresholdTokens: 272e3,
+        inputPerMillion: 5,
+        outputPerMillion: 22.5,
+        cacheReadPerMillion: 0.5
+      }
+    },
+    sessionStart: { eligible: true, isDefault: true }
+  },
+  {
+    id: OpenAIModel.GPT56,
+    name: "GPT-5.6",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 105e4,
+    // Verified 2026-07-09 against OpenAI's GPT-5.6 migration guide and model
+    // catalog: the alias routes to gpt-5.6-sol and supports max effort. Pricing
+    // mirrors gpt-5.6-sol since the alias resolves to it. Cache-write rates
+    // verified 2026-07-30 against the Standard tier at
+    // developers.openai.com/api/docs/pricing.
+    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh", "max"], default: "medium" },
+    pricing: {
+      inputPerMillion: 5,
+      outputPerMillion: 30,
+      cacheReadPerMillion: 0.5,
+      cacheWritePerMillion: 6.25,
+      longContext: {
+        thresholdTokens: 272e3,
+        inputPerMillion: 10,
+        outputPerMillion: 45,
+        cacheReadPerMillion: 1,
+        cacheWritePerMillion: 12.5
+      }
+    },
+    sessionStart: { eligible: true }
+  },
+  {
+    id: OpenAIModel.GPT56Sol,
+    name: "GPT-5.6 Sol",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 105e4,
+    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh", "max"], default: "medium" },
+    // Cache-write rates verified 2026-07-30 against the Standard tier at
+    // developers.openai.com/api/docs/pricing.
+    pricing: {
+      inputPerMillion: 5,
+      outputPerMillion: 30,
+      cacheReadPerMillion: 0.5,
+      cacheWritePerMillion: 6.25,
+      longContext: {
+        thresholdTokens: 272e3,
+        inputPerMillion: 10,
+        outputPerMillion: 45,
+        cacheReadPerMillion: 1,
+        cacheWritePerMillion: 12.5
+      }
+    },
+    sessionStart: { eligible: true }
+  },
+  {
+    id: OpenAIModel.GPT56Terra,
+    name: "GPT-5.6 Terra",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 105e4,
+    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh", "max"], default: "medium" },
+    // Verified 2026-07-30 against the Standard tier at
+    // developers.openai.com/api/docs/pricing: short and long context input,
+    // cached input, cache writes, and output.
+    pricing: {
+      inputPerMillion: 2,
+      outputPerMillion: 12,
+      cacheReadPerMillion: 0.2,
+      cacheWritePerMillion: 2.5,
+      longContext: {
+        thresholdTokens: 272e3,
+        inputPerMillion: 4,
+        outputPerMillion: 18,
+        cacheReadPerMillion: 0.4,
+        cacheWritePerMillion: 5
+      }
+    },
+    sessionStart: { eligible: true }
+  },
+  {
+    id: OpenAIModel.GPT56Luna,
+    name: "GPT-5.6 Luna",
+    provider: "openai",
+    overloadFallback: OpenAIModel.GPT56Terra,
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 105e4,
+    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh", "max"], default: "medium" },
+    // Verified 2026-07-30 against the Standard tier at
+    // developers.openai.com/api/docs/pricing: short and long context input,
+    // cached input, cache writes, and output.
+    pricing: {
+      inputPerMillion: 0.2,
+      outputPerMillion: 1.2,
+      cacheReadPerMillion: 0.02,
+      cacheWritePerMillion: 0.25,
+      longContext: {
+        thresholdTokens: 272e3,
+        inputPerMillion: 0.4,
+        outputPerMillion: 1.8,
+        cacheReadPerMillion: 0.04,
+        cacheWritePerMillion: 0.5
+      }
+    },
+    sessionStart: { eligible: true }
+  },
+  {
+    id: OpenAIModel.GPT55,
+    name: "GPT-5.5",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 1e6,
+    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: "medium" },
+    pricing: {
+      inputPerMillion: 5,
+      outputPerMillion: 30,
+      cacheReadPerMillion: 0.5,
+      longContext: {
+        thresholdTokens: 272e3,
+        inputPerMillion: 10,
+        outputPerMillion: 45,
+        cacheReadPerMillion: 1
       }
-      status = entry;
-      continue;
+    },
+    sessionStart: { eligible: true }
+  },
+  {
+    id: OpenAIModel.GPT54Mini,
+    name: "GPT-5.4 Mini",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 4e5,
+    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: void 0 },
+    pricing: {
+      inputPerMillion: 0.75,
+      outputPerMillion: 4.5,
+      cacheReadPerMillion: 0.075,
+      // Flex bills at Batch rates: a flat 50% off standard across input,
+      // cached input, and output (verified against the OpenAI pricing page,
+      // June 2026). Bridge cost estimates deliberately strip this gateway-only
+      // axis when deriving MODEL_PRICING.
+      flex: { inputPerMillion: 0.375, outputPerMillion: 2.25, cacheReadPerMillion: 0.0375 }
+    },
+    sessionStart: { eligible: true }
+  },
+  {
+    id: OpenAIModel.GPT54Nano,
+    name: "GPT-5.4 Nano",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: false },
+    contextWindow: 4e5,
+    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: void 0 },
+    pricing: { inputPerMillion: 0.2, outputPerMillion: 1.25, cacheReadPerMillion: 0.02 },
+    sessionStart: { eligible: true }
+  },
+  {
+    id: OpenAIModel.GPT53CodexSpark,
+    name: "GPT-5.3 Codex Spark",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 128e3,
+    reasoning: { efforts: ["low", "medium", "high", "xhigh"], default: "high" },
+    costTracked: false,
+    requiresCodexSubscriptionAuth: true,
+    sessionStart: { eligible: true },
+    visibility: "internal_probe"
+  },
+  {
+    id: OpenAIModel.GPT53Codex,
+    name: "GPT-5.3 Codex",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 4e5,
+    reasoning: { efforts: ["low", "medium", "high", "xhigh"], default: "high" },
+    pricing: { inputPerMillion: 1.75, outputPerMillion: 14, cacheReadPerMillion: 0.175 }
+  },
+  {
+    id: OpenAIModel.GPT52,
+    name: "GPT-5.2",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 4e5,
+    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: void 0 },
+    pricing: { inputPerMillion: 1.75, outputPerMillion: 14, cacheReadPerMillion: 0.175 }
+  },
+  {
+    id: OpenAIModel.GPT52ChatLatest,
+    name: "GPT-5.2 Chat",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 128e3,
+    reasoning: { efforts: ["none", "low", "medium", "high", "xhigh"], default: void 0 },
+    pricing: { inputPerMillion: 1.75, outputPerMillion: 14, cacheReadPerMillion: 0.175 }
+  },
+  {
+    id: OpenAIModel.GPT52Codex,
+    name: "GPT-5.2 Codex",
+    provider: "openai",
+    backends: [CODEX_AGENT_RUNTIME_BACKEND],
+    capabilities: { codexToolSearch: true },
+    contextWindow: 4e5,
+    reasoning: { efforts: ["low", "medium", "high", "xhigh"], default: "high" },
+    pricing: { inputPerMillion: 1.75, outputPerMillion: 14, cacheReadPerMillion: 0.175 }
+  }
+];
+var MODEL_PROVIDER_NAMES = {
+  openai: "OpenAI",
+  anthropic: "Anthropic"
+};
+function buildSessionStartModelIdsByBackend() {
+  const byBackend = Object.fromEntries(AGENT_RUNTIME_BACKENDS.map((backend) => [backend, []]));
+  for (const model of MODEL_REGISTRY) {
+    if (!model.sessionStart?.eligible) continue;
+    for (const backend of model.backends) {
+      if (!modelSupportsRequiredSessionStartCapabilities(model, backend)) continue;
+      byBackend[backend].push(model.id);
     }
-    events.push({
-      type: message.event,
-      ...message.id !== void 0 ? { id: message.id } : {},
-      data
-    });
   }
-  return { status, events };
+  return byBackend;
 }
-function validateEnumField(value, validSet) {
-  return typeof value === "string" && validSet.has(value) ? value : void 0;
+function modelSupportsRequiredSessionStartCapabilities(model, backend) {
+  if (backend !== CODEX_AGENT_RUNTIME_BACKEND) return true;
+  return model.capabilities?.codexToolSearch === true;
 }
-function parseJsonObject(value) {
-  try {
-    const parsed = JSON.parse(value);
-    return parsed && typeof parsed === "object" ? parsed : {};
-  } catch (err) {
-    throw new Error(`Malformed SSE JSON payload: ${stringifyError(err)}`);
+function buildDefaultSessionStartModelIdByBackend() {
+  const defaults = {};
+  for (const backend of AGENT_RUNTIME_BACKENDS) {
+    const backendDefaults = MODEL_REGISTRY.filter(
+      (model) => model.sessionStart?.eligible && model.sessionStart.isDefault === true && model.backends.includes(backend)
+    );
+    if (backendDefaults.length !== 1) {
+      throw new Error(`Expected exactly one default session-start model for ${backend}, got ${backendDefaults.length}`);
+    }
+    defaults[backend] = backendDefaults[0].id;
   }
+  return defaults;
 }
-function formatPromptLabel(promptId, promptLabels) {
-  if (!promptId) return "";
-  const prompt = promptLabels.get(promptId);
-  return prompt ? ` - ${prompt}` : "";
-}
-function buildPromptLabelMap(prompts) {
-  const labels = /* @__PURE__ */ new Map();
-  for (const prompt of prompts) {
-    const text = derivePromptDisplayText({ prompt: prompt.prompt, replyToText: prompt.replyToText });
-    labels.set(prompt.promptId, text.replace(/\s+/g, " ").trim().slice(0, PROMPT_LABEL_MAX_CHARS));
+var SESSION_START_MODEL_IDS_BY_BACKEND = buildSessionStartModelIdsByBackend();
+var DEFAULT_SESSION_START_MODEL_ID_BY_BACKEND = buildDefaultSessionStartModelIdByBackend();
+var DEFAULT_SESSION_START_MODEL_ID = DEFAULT_SESSION_START_MODEL_ID_BY_BACKEND[CODEX_AGENT_RUNTIME_BACKEND];
+var VALID_MODEL_IDS = new Set(MODEL_REGISTRY.map((model) => model.id));
+var VALID_SESSION_START_MODEL_IDS_BY_BACKEND = {
+  [CODEX_AGENT_RUNTIME_BACKEND]: new Set(SESSION_START_MODEL_IDS_BY_BACKEND[CODEX_AGENT_RUNTIME_BACKEND])
+};
+var MODEL_CONTEXT_WINDOWS = {
+  ...Object.fromEntries(
+    MODEL_REGISTRY.flatMap((model) => model.contextWindow === void 0 ? [] : [[model.id, model.contextWindow]])
+  )
+};
+var MODEL_PROVIDERS = {
+  ...Object.fromEntries(MODEL_REGISTRY.map((model) => [model.id, model.provider]))
+};
+var MODEL_REASONING_CONFIG = Object.fromEntries(
+  MODEL_REGISTRY.flatMap((model) => model.reasoning ? [[model.id, model.reasoning]] : [])
+);
+var MODEL_DEFINITIONS_BY_ID = Object.fromEntries(MODEL_REGISTRY.map((model) => [model.id, model]));
+function splitModelIdentifier(value) {
+  let hasSeparator = false;
+  for (const separator of [":", "/"]) {
+    const index = value.indexOf(separator);
+    if (index <= 0 || index >= value.length - 1) continue;
+    hasSeparator = true;
+    const providerID = value.slice(0, index);
+    const modelID = value.slice(index + 1);
+    if (MODEL_PROVIDERS_SET.has(providerID) && modelID.length > 0) {
+      return { providerID, modelID };
+    }
   }
-  return labels;
+  if (hasSeparator) return void 0;
+  return value.length > 0 ? { modelID: value } : void 0;
 }
-function renderWatchEvent(event, state) {
-  const data = event.data;
-  switch (event.type) {
-    case "text":
-      return { kind: "text", text: String(data.text ?? "") };
-    case "prompt_enqueued": {
-      const promptId = typeof data.promptId === "string" ? data.promptId : void 0;
-      return {
-        kind: "line",
-        line: `[queued] ${promptId ?? "unknown"}${formatPromptLabel(promptId, state.promptLabels)}`
-      };
-    }
-    case "prompt_processing": {
-      const promptId = typeof data.promptId === "string" ? data.promptId : void 0;
-      return {
-        kind: "line",
-        line: `[prompt] ${promptId ?? "unknown"} started${formatPromptLabel(promptId, state.promptLabels)}`
-      };
-    }
-    case "prompt_completed": {
-      const promptId = typeof data.promptId === "string" ? data.promptId : void 0;
-      return { kind: "line", line: `[prompt] ${promptId ?? "unknown"} completed` };
-    }
-    case "prompt_failed": {
-      const promptId = typeof data.promptId === "string" ? data.promptId : void 0;
-      const error = typeof data.error === "string" ? data.error : "unknown error";
-      return { kind: "line", line: `[prompt] ${promptId ?? "unknown"} failed: ${error}` };
-    }
-    case "tool_call": {
-      const toolId = String(data.id ?? "");
-      const tool = String(data.tool ?? "unknown");
-      const summary = String(data.summary ?? "");
-      state.toolCalls.set(toolId, { tool, summary });
-      return { kind: "line", line: `[tool] ${tool}${summary ? ` - ${summary}` : ""}` };
-    }
-    case "tool_update": {
-      const toolId = String(data.id ?? "");
-      const status = typeof data.status === "string" ? data.status : null;
-      if (!status) return null;
-      const tool = state.toolCalls.get(toolId);
-      if (!tool) return { kind: "line", line: `[tool] ${toolId} ${status}` };
-      return { kind: "line", line: `[tool ${status}] ${tool.tool}${tool.summary ? ` - ${tool.summary}` : ""}` };
-    }
-    case "question":
-      return { kind: "line", line: `[question] ${String(data.question ?? "")}` };
-    case "patch": {
-      const files = Array.isArray(data.files) ? data.files.filter((item) => typeof item === "string") : [];
-      return { kind: "line", line: `[patch] ${files.join(", ")}` };
+function getRawModelValue(raw) {
+  if (typeof raw === "string") return asNonEmptyString(raw);
+  if (!raw || typeof raw !== "object") return void 0;
+  const value = raw;
+  return asNonEmptyString(value.modelID) ?? asNonEmptyString(value.modelId) ?? asNonEmptyString(value.id);
+}
+function getExplicitProvider(raw) {
+  if (raw && typeof raw === "object") {
+    const value = raw;
+    const providerID = asNonEmptyString(value.providerID) ?? asNonEmptyString(value.providerId);
+    if (providerID && MODEL_PROVIDERS_SET.has(providerID)) {
+      return providerID;
     }
-    case "agent_timeline": {
-      const eventType = String(data.eventType ?? "timeline");
-      const status = typeof data.status === "string" ? ` ${data.status}` : "";
-      return { kind: "line", line: `[agent] ${eventType}${status}: ${String(data.summary ?? "")}` };
+  }
+  const modelValue = getRawModelValue(raw);
+  if (!modelValue) return void 0;
+  return splitModelIdentifier(modelValue)?.providerID;
+}
+function extractModelId(raw) {
+  const value = getRawModelValue(raw);
+  if (!value) return void 0;
+  return splitModelIdentifier(value)?.modelID;
+}
+function getSessionStartModelIdsForBackend(backend) {
+  return SESSION_START_MODEL_IDS_BY_BACKEND[backend];
+}
+function isSessionStartModelAllowedForBackend(modelId, backend) {
+  return VALID_SESSION_START_MODEL_IDS_BY_BACKEND[backend].has(modelId);
+}
+function getProviderForModel(modelId) {
+  return MODEL_PROVIDERS[modelId] ?? "openai";
+}
+function toModelSelection(raw) {
+  const modelID = extractModelId(raw);
+  if (!modelID) return void 0;
+  return {
+    providerID: getExplicitProvider(raw) ?? getProviderForModel(modelID),
+    modelID
+  };
+}
+function getModelDefinition(raw) {
+  const modelID = extractModelId(raw);
+  if (!modelID) return void 0;
+  return MODEL_DEFINITIONS_BY_ID[modelID];
+}
+function formatModelLabel(raw, options = {}) {
+  const includeProvider = options.includeProvider ?? false;
+  const definition = getModelDefinition(raw);
+  if (definition) {
+    return includeProvider ? `${MODEL_PROVIDER_NAMES[definition.provider]} / ${definition.name}` : definition.name;
+  }
+  const selection = toModelSelection(raw);
+  if (!selection) return void 0;
+  const providerName = MODEL_PROVIDER_NAMES[selection.providerID];
+  return includeProvider ? `${providerName} / ${selection.modelID}` : selection.modelID;
+}
+function buildModelProviderGroups(models2) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const model of models2) {
+    let group = groups.get(model.provider);
+    if (!group) {
+      group = { id: model.provider, name: MODEL_PROVIDER_NAMES[model.provider], models: [] };
+      groups.set(model.provider, group);
     }
-    case "session_error":
-      return {
-        kind: "line",
-        line: `[error] ${formatSessionErrorMessage(String(data.error ?? "Unknown error"), typeof data.code === "string" ? data.code : null)}`
-      };
-    case "pr_created":
-    case "pr_updated":
-      return { kind: "line", line: `[pr] ${String(data.prUrl ?? "")}` };
-    case "pr_failed":
-      return { kind: "line", line: `[pr error] ${String(data.error ?? "Unknown error")}` };
-    case "session_idle":
-      return { kind: "line", line: "[idle] waiting for next prompt" };
-    default:
-      return null;
+    group.models.push({
+      id: model.id,
+      name: model.name,
+      label: formatModelLabel(model, { includeProvider: true }) ?? model.name,
+      backends: model.backends,
+      reasoning: model.reasoning
+    });
+  }
+  const defaultModelIds = new Set(
+    models2.filter((model) => model.sessionStart?.isDefault === true).map((model) => model.id)
+  );
+  for (const group of groups.values()) {
+    group.models.sort((a, b) => Number(defaultModelIds.has(b.id)) - Number(defaultModelIds.has(a.id)));
   }
+  return [...groups.values()];
 }
+var SESSION_START_MODEL_ID_SET_ANY_BACKEND = new Set(
+  AGENT_RUNTIME_BACKENDS.flatMap((backend) => [...SESSION_START_MODEL_IDS_BY_BACKEND[backend]])
+);
+var PUBLIC_SESSION_START_MODEL_PROVIDER_GROUPS = buildModelProviderGroups(
+  MODEL_REGISTRY.filter(
+    (model) => SESSION_START_MODEL_ID_SET_ANY_BACKEND.has(model.id) && model.visibility !== "internal_probe"
+  )
+);
+var CODEX_SUBSCRIPTION_SESSION_START_MODEL_PROVIDER_GROUPS = buildModelProviderGroups(
+  MODEL_REGISTRY.filter(
+    (model) => SESSION_START_MODEL_ID_SET_ANY_BACKEND.has(model.id) && (model.visibility !== "internal_probe" || model.requiresCodexSubscriptionAuth === true)
+  )
+);
 
-// src/utils/session-payload.ts
-function unwrapSessionState(payload) {
-  return payload.session && typeof payload.session === "object" ? payload.session : payload;
+// src/commands/model-options.ts
+function resolveModelAndBackend(options) {
+  let agentRuntimeBackend = CODEX_AGENT_RUNTIME_BACKEND;
+  const normalizedModel = options.model !== void 0 ? extractModelId(options.model) : void 0;
+  if (options.model !== void 0) {
+    if (normalizedModel === void 0 || !isSessionStartModelAllowedForBackend(normalizedModel, agentRuntimeBackend)) {
+      const allowed = getSessionStartModelIdsForBackend(agentRuntimeBackend).join(", ");
+      throw new CliError(
+        "user",
+        `Model '${options.model}' is not selectable for backend '${agentRuntimeBackend}'. Allowed: ${allowed}.`
+      );
+    }
+  }
+  return { agentRuntimeBackend, modelId: normalizedModel };
 }
 
 // ../../shared/session/transient-disconnect.ts
@@ -10978,16 +10778,6 @@ async function createCommand(repoUrl, promptArg, options, command) {
   if (promptPreview) body.prompt = promptPreview;
   if (baseBranch) body.baseBranch = baseBranch;
   if (startBranch) body.startBranch = startBranch;
-  const linearIssue = options.linearIssue?.trim();
-  if (options.linearIssue !== void 0 && !linearIssue) {
-    throw new CliError("user", "--linear-issue must not be empty.");
-  }
-  if (linearIssue) body.linearIssue = linearIssue;
-  const jiraIssue = options.jiraIssue?.trim();
-  if (options.jiraIssue !== void 0 && !jiraIssue) {
-    throw new CliError("user", "--jira-issue must not be empty.");
-  }
-  if (jiraIssue) body.jiraIssue = jiraIssue;
   if (continuePr) body.continuePrUrl = continuePr;
   if (continueMode) body.continueMode = continueMode;
   if (options.onboarding) body.onboarding = true;
@@ -11062,8 +10852,6 @@ async function createCommand(repoUrl, promptArg, options, command) {
     if (options.autoVerify) output.autoVerify = true;
     if (baseBranch) output.baseBranch = baseBranch;
     if (startBranch) output.startBranch = startBranch;
-    if (linearIssue) output.linearIssue = linearIssue;
-    if (jiraIssue) output.jiraIssue = jiraIssue;
     if (continuePr) output.continuePrUrl = continuePr;
     if (continueMode) output.continueMode = continueMode;
     if (options.onboarding) output.onboarding = true;
@@ -11119,6 +10907,43 @@ function parseEgressAllowlistSourceFile(content, key = EGRESS_ALLOWLIST_SOURCE_P
   return normalizeEgressDomains(domains, key);
 }
 
+// ../../shared/github/repo-url.ts
+function parseGithubRepoFullName(value) {
+  const shorthand = value.match(/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.-]+)$/);
+  if (shorthand) return { owner: shorthand[1], repo: shorthand[2] };
+  const ssh = value.match(/^git@github\.com:([^/]+)\/([^/]+?)(?:\.git)?$/);
+  if (ssh) return { owner: ssh[1], repo: ssh[2] };
+  const https = value.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?\/?$/);
+  if (https) return { owner: https[1], repo: https[2] };
+  return null;
+}
+
+// src/git.ts
+import { execFileSync } from "child_process";
+function git(args) {
+  try {
+    return execFileSync("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
+  } catch (err) {
+    throw new CliError("user", `git ${args.join(" ")} failed: ${stringifyError(err)}`);
+  }
+}
+function currentRepo() {
+  const parsed = parseGithubRepoFullName(git(["remote", "get-url", "origin"]));
+  if (!parsed) throw new CliError("user", "origin remote must point at a GitHub repository");
+  return { owner: parsed.owner, repo: parsed.repo };
+}
+
+// src/utils/repo-arg.ts
+function parseRepoArg(value, argName = "repo") {
+  const parsed = parseGithubRepoFullName(value);
+  if (!parsed) throw new CliError("user", `${argName} must be owner/name or a GitHub URL`);
+  return { owner: parsed.owner, repo: parsed.repo.replace(/\.git$/, "") };
+}
+function parseRepoArgOrCurrent(value, argName = "repo") {
+  if (value === void 0) return currentRepo();
+  return parseRepoArg(value, argName);
+}
+
 // src/commands/egress.ts
 async function egressSourceSetCommand(sourceRepoArg, options = {}, command) {
   const { config } = resolveBusinessContext(command, options);
@@ -11312,142 +11137,6 @@ async function modelsListCommand(options = {}, command) {
   });
 }
 
-// ../../shared/agent/verify-directive.ts
-var MAX_TARGET_PR_URL_LENGTH = 500;
-function normalizeGithubPullRequestUrl(rawUrl) {
-  if (typeof rawUrl !== "string") return null;
-  const trimmed = rawUrl.trim();
-  if (!trimmed || trimmed.length > MAX_TARGET_PR_URL_LENGTH) return null;
-  let url;
-  try {
-    url = new URL(trimmed);
-  } catch {
-    return null;
-  }
-  if (url.protocol !== "https:" || url.hostname.toLowerCase() !== "github.com") return null;
-  const pathParts = url.pathname.split("/").filter(Boolean);
-  if (pathParts.length !== 4 || pathParts[2] !== "pull" || !/^\d+$/.test(pathParts[3])) return null;
-  if (!/^[A-Za-z0-9_.-]+$/.test(pathParts[0]) || !/^[A-Za-z0-9_.-]+$/.test(pathParts[1])) return null;
-  return `https://github.com/${pathParts[0]}/${pathParts[1]}/pull/${pathParts[3]}`;
-}
-
-// src/commands/qa.ts
-var QA_PROMPT = "Verify this pull request.";
-function parseCanonicalPrUrl(prUrl) {
-  const targetPrUrl = normalizeGithubPullRequestUrl(prUrl);
-  if (!targetPrUrl) {
-    throw new CliError(
-      "user",
-      `Invalid pull request URL: "${prUrl}". Expected https://github.com/<owner>/<repo>/pull/<number>.`
-    );
-  }
-  const url = new URL(targetPrUrl);
-  const [owner, repo] = url.pathname.split("/").filter(Boolean);
-  return {
-    targetPrUrl,
-    repoUrl: `https://github.com/${owner}/${repo}`
-  };
-}
-function parseCreateConflict(error) {
-  let message = error.message;
-  let sessionId;
-  let sessionUrl;
-  const parsed = parseConflictBody(error);
-  if (parsed) {
-    const rawError = parsed.error;
-    const parsedMessage = typeof rawError === "string" ? rawError : rawError && typeof rawError === "object" && typeof rawError.message === "string" ? rawError.message : void 0;
-    if (parsedMessage) message = parsedMessage;
-    if (typeof parsed.sessionId === "string") sessionId = parsed.sessionId;
-    if (typeof parsed.sessionUrl === "string") sessionUrl = parsed.sessionUrl;
-  }
-  const location = sessionUrl ? ` (${sessionUrl})` : "";
-  const existing = sessionId ? ` Existing verifier session: ${sessionId}${location}.` : "";
-  return new CliError("conflict", `${message}${existing}`, {
-    hint: error.hint,
-    requestId: error.requestId
-  });
-}
-async function qaCommand(prUrl, options, command) {
-  const runtime = getRuntimeOptions(command, options);
-  assertArcanistSessionMutationAllowed("qa");
-  const config = requireConfig(runtime);
-  const { targetPrUrl, repoUrl } = parseCanonicalPrUrl(prUrl);
-  resolveModelAndBackend(options);
-  const idempotencyKey = options.idempotencyKey ?? randomIdempotencyKey();
-  const sessionIdempotencyKey = `${idempotencyKey}:session`;
-  const promptIdempotencyKey = `${idempotencyKey}:prompt`;
-  const body = {
-    context: { repoUrl },
-    qa: true,
-    targetPrUrl
-  };
-  if (options.model) body.model = options.model;
-  if (options.reasoningEffort) body.reasoningEffort = options.reasoningEffort;
-  let sessionData;
-  try {
-    sessionData = await apiFetch(config, "/api/sessions", {
-      method: "POST",
-      headers: { "Idempotency-Key": sessionIdempotencyKey },
-      body: JSON.stringify(body)
-    });
-  } catch (err) {
-    if (err instanceof ApiError && err.status === 409) throw parseCreateConflict(err);
-    throw err;
-  }
-  const sessionId = sessionData.sessionId;
-  let promptId;
-  if (!sessionData.promptAlreadyEnqueued) {
-    try {
-      const promptData = await apiFetch(config, `/api/sessions/${sessionId}/prompts`, {
-        method: "POST",
-        headers: { "Idempotency-Key": promptIdempotencyKey },
-        body: JSON.stringify({ prompt: QA_PROMPT })
-      });
-      promptId = promptData.prompt?.promptId ?? promptData.prompt?.id;
-    } catch (err) {
-      throw new CliError(
-        err instanceof CliError ? err.code : "server",
-        `QA session created (${sessionId}) but prompt enqueue failed: ${stringifyError(err)}`,
-        {
-          exitCode: err instanceof CliError ? err.exitCode : void 0,
-          hint: `Retry with: arcanist sessions qa ${targetPrUrl} --idempotency-key ${idempotencyKey}`,
-          requestId: err instanceof CliError ? err.requestId : void 0,
-          data: {
-            ...err instanceof CliError && err.data ? err.data : {},
-            sessionId,
-            ...sessionData.sessionUrl ? { sessionUrl: sessionData.sessionUrl } : {}
-          }
-        }
-      );
-    }
-  }
-  if (options.wait) {
-    const waitPollIntervalMs = parsePollInterval(options.pollInterval);
-    if (!isJson(command, options)) {
-      console.log(`Session: ${sessionId}`);
-      if (sessionData.sessionUrl) console.log(`URL: ${sessionData.sessionUrl}`);
-    }
-    await waitForCreatedPrompt(sessionId, promptId, sessionData.sessionUrl, waitPollIntervalMs, runtime, command);
-    if (!isJson(command, options)) {
-      console.log(`Target PR: ${targetPrUrl}`);
-    }
-  }
-  if (isJson(command, options)) {
-    const output = { sessionId, repoUrl, targetPrUrl };
-    if (sessionData.sessionUrl) output.sessionUrl = sessionData.sessionUrl;
-    if (options.model) output.model = options.model;
-    if (options.reasoningEffort) output.reasoningEffort = options.reasoningEffort;
-    if (promptId) output.promptId = promptId;
-    writeJson(output);
-    return;
-  }
-  if (options.wait) return;
-  console.log(`Session: ${sessionId}`);
-  if (sessionData.sessionUrl) console.log(`URL: ${sessionData.sessionUrl}`);
-  console.log(`Target PR: ${targetPrUrl}`);
-  console.log(`Follow with: arcanist sessions events ${sessionId} --follow --json`);
-}
-
 // src/commands/repos.ts
 async function reposListCommand(options = {}, command) {
   const { config } = resolveBusinessContext(command, options);
@@ -12657,6 +12346,26 @@ async function sandboxUnassignRepoCommand(targetRepoArg, options = {}, command)
   emit(command, options, payload, () => console.log(`Cleared sandbox layer assignment for ${repoPath(targetRepo)}.`));
 }
 
+// src/utils/pagination.ts
+var MAX_ALL_PAGES = 1e3;
+async function fetchPages(label, all, initialCursor, fetchPage) {
+  const items = [];
+  let cursor = initialCursor;
+  let nextCursor = null;
+  let pageCount = 0;
+  do {
+    pageCount += 1;
+    if (all && pageCount > MAX_ALL_PAGES) {
+      throw new CliError("user", `${label} exceeded ${MAX_ALL_PAGES} pages without reaching the end.`);
+    }
+    const page = await fetchPage(cursor);
+    items.push(...page.items);
+    nextCursor = page.nextCursor;
+    cursor = nextCursor ?? void 0;
+  } while (all && nextCursor);
+  return { items, nextCursor: all ? null : nextCursor };
+}
+
 // src/commands/sessions.ts
 async function listSessionsCommand(options, command) {
   const runtime = getRuntimeOptions(command, options);
@@ -13043,7 +12752,7 @@ function addCreateOptions(cmd) {
   return cmd.argument("<repo-url>", "Repository URL").argument("[prompt]", "Prompt to send, or '-' to read stdin").option("--model <model>", "Model to use").option("--reasoning-effort <effort>", "Reasoning effort to use for models that support it").option("--auto-verify", "Opt this session into automatic QA verification after PR creation").option("--base-branch <branch>", "Base branch to create the session against (defaults to the repo default branch)").option(
     "--start-branch <branch>",
     "Resume an existing branch with its history instead of forking a new one off base"
-  ).option("--linear-issue <id|url>", "Associate the session with a Linear issue for pickup writeback").option("--jira-issue <key|url>", "Associate the session with a Jira issue for pickup writeback").option("--continue-pr <url>", "Continue from an existing same-repo pull request").option("--continue-mode <mode>", "Continuation mode: auto (default), update-pr, or new-pr").option("--browser-identity <id|none>", "Attach a business browser identity, or explicitly attach none").option("--prompt-stdin", "Read prompt from stdin").option(
+  ).option("--continue-pr <url>", "Continue from an existing same-repo pull request").option("--continue-mode <mode>", "Continuation mode: auto (default), update-pr, or new-pr").option("--browser-identity <id|none>", "Attach a business browser identity, or explicitly attach none").option("--prompt-stdin", "Read prompt from stdin").option(
     "--uploaded-file <path>",
     "Attach a local text file to the prompt as uploadedFiles; repeat for multiple files",
     collectUploadedFileOption
@@ -13089,25 +12798,6 @@ JSON mode returns {sessionId, promptId?}
 `
   );
 }
-function addQaOptions(cmd) {
-  return cmd.argument("<pr-url>", "GitHub pull request URL to QA").option("--model <model>", "Model to use").option("--reasoning-effort <effort>", "Reasoning effort to use for models that support it").option("--wait", "Wait for the QA prompt to finish and exit non-zero if it fails").option(
-    "--poll-interval <ms>",
-    "Polling interval in milliseconds while waiting",
-    String(DEFAULT_WATCH_POLL_INTERVAL_MS)
-  ).option("--idempotency-key <uuid>", "Request idempotency key for safe manual retries").addHelpText(
-    "after",
-    `
-Examples:
-  arcanist sessions qa https://github.com/org/repo/pull/123
-  arcanist sessions qa https://github.com/org/repo/pull/123 --model gpt-5.4 --wait
-  arcanist sessions qa https://github.com/org/repo/pull/123 --idempotency-key 1f0e6f1a-...
-
-JSON:
-JSON mode returns {sessionId, sessionUrl?, repoUrl, targetPrUrl, model?, reasoningEffort?, promptId?}
-  Inspect progress with the session URL or the session events stream.
-`
-  );
-}
 var auth = program.command("auth").description("Authentication commands");
 auth.command("login").description("Authenticate with a personal access token").option("--token-stdin", "Read token from stdin instead of interactive prompt").option("--api-url <url>", "Set custom API URL").addHelpText(
   "after",
@@ -13177,9 +12867,6 @@ addCreateOptions(sessions.command("create").description("Create a session and se
 addSendOptions(sessions.command("send").description("Send a message to an existing session")).action(
   (sessionId, prompt, options, command) => messageCommand(sessionId, prompt, options, command)
 );
-addQaOptions(sessions.command("qa").description("Start a QA verification session for a GitHub pull request")).action(
-  (prUrl, options, command) => qaCommand(prUrl, options, command)
-);
 sessions.command("respond").description("Answer a pending session question").argument("<session-id>", "Session ID").argument("[answer]", "Answer text, or '-' to read stdin").option("--answer-stdin", "Read answer from stdin").requiredOption("--question-id <id>", "Question ID from the question event").addHelpText(
   "after",
   `
@@ -13312,40 +12999,6 @@ JSON:
 JSON mode returns {models}
 `
 ).action((options, command) => modelsListCommand(options, command));
-var automations = program.command("automations").description("Automation commands");
-automations.command("create").description("Create a scheduled automation").argument("<repo-url>", "Repository URL").argument("[prompt]", "Prompt to run, or '-' to read stdin").requiredOption("--cron <expr>", "Cron expression").option("--name <name>", "Automation display name").option(
-  "--model <model>",
-  "Model to pin for this automation's sessions (e.g. gpt-5.5). Defaults to the codex backend default."
-).option(
-  "--slack-team-id <team-id>",
-  "Slack workspace/team ID for final digest delivery (requires --slack-channel-id)"
-).option("--slack-channel-id <channel-id>", "Slack channel ID for final digest delivery (requires --slack-team-id)").option("--prompt-stdin", "Read prompt from stdin").addHelpText(
-  "after",
-  `
-Examples:
-  arcanist automations create tryarcanist/arcanist "summarize regressions" --cron "*/15 * * * *"
-  arcanist automations create tryarcanist/arcanist "audit N+1s" --cron "0 13 * * 5" --model gpt-5.5
-  arcanist automations create tryarcanist/arcanist "/audit-zeus-day yesterday" --cron "0 8 * * *" --slack-team-id T0123ABC --slack-channel-id C0456DEF
-  printf "summarize regressions" | arcanist automations create tryarcanist/arcanist --prompt-stdin --cron "*/15 * * * *" --json
-`
-).action((repoUrl, prompt, options, command) => createAutomationCommand(repoUrl, prompt, options, command));
-automations.command("list").description("List scheduled automations").option("--limit <n>", "Maximum automations to return").option("--cursor <cursor>", "Pagination cursor").option("--all", "Fetch all pages").addHelpText(
-  "after",
-  `
-Examples:
-  arcanist automations list
-  arcanist automations list --limit 20 --json
-  arcanist automations list --all --json
-`
-).action((options, command) => listAutomationsCommand(options, command));
-automations.command("delete").description("Delete a scheduled automation").argument("<id>", "Automation ID").option("--yes", "Confirm deletion without prompting").addHelpText(
-  "after",
-  `
-Examples:
-  arcanist automations delete auto_123
-  arcanist automations delete auto_123 --yes --json
-`
-).action((id, options, command) => deleteAutomationCommand(id, options, command));
 var sandbox = program.command("sandbox").description("Sandbox layer commands");
 sandbox.command("init").description("Create sandbox layer source files").action((options, command) => sandboxInitCommand(options, command));
 sandbox.command("validate").description("Validate local sandbox layer source files").option("--manifest <path>", "Manifest path", ".arcanist/sandbox.yaml").action((options, command) => sandboxValidateCommand(options, command));