agent-shim 8.26.0 → 8.27.1

package/dist/cli.cjs

@@ -61796,7 +61796,7 @@ function registerIdentityCommand(program2, deps) {
 // package.json
 var package_default = {
   name: "agent-shim",
-  version: "8.26.0",
+  version: "8.27.1",
   description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   license: "MIT",
   author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -73850,9 +73850,12 @@ function createRcLiveUsage(deps) {
 // src/frontdoor/rcSelfHostMint.ts
 var import_node_path34 = __toESM(require("node:path"), 1);
 
-// src/frontdoor/rcSelfHostEndpoints.ts
-var RC_SOURCE_WORKER = "worker";
-var RC_SOURCE_CLIENT = "client";
+// src/frontdoor/rcSelfHostLocal.ts
+var RC_SELF_HOST_OAUTH_HOST = "platform.claude.com";
+var RC_SELF_HOST_SCOPE_LIST = ["user:profile", "user:inference", "user:sessions:claude_code", "user:mcp_servers", "user:file_upload"];
+var RC_SELF_HOST_OAUTH_TOKEN_TTL_SECONDS = 3600;
+var MS_PER_SECOND7 = 1e3;
+var HTTP_SERVICE_UNAVAILABLE = 503;
 function isRecord5(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
@@ -73865,2186 +73868,2328 @@ function parseJsonObject2(body) {
   }
   return isRecord5(parsed) ? parsed : void 0;
 }
-function nonEmptyString2(record2, field) {
-  const value2 = record2 === void 0 ? void 0 : record2[field];
-  return typeof value2 === "string" && value2 !== "" ? value2 : void 0;
+function growthBookFeatures() {
+  return {
+    tengu_ccr_bridge: { defaultValue: true },
+    tengu_bridge_repl_v2: { defaultValue: true },
+    tengu_bridge_repl_v2_cse_shim_enabled: { defaultValue: true },
+    tengu_bridge_min_version: { defaultValue: { minVersion: "0.0.0" } }
+  };
 }
-function numberOf(record2, field) {
-  const value2 = record2 === void 0 ? void 0 : record2[field];
-  if (typeof value2 === "number" && Number.isFinite(value2)) {
-    return value2;
+var answerServerJson = (response, status, body) => {
+  const text2 = JSON.stringify(body);
+  response.writeHead(status, { "content-type": "application/json", "content-length": String(Buffer.byteLength(text2, "utf8")) });
+  response.end(text2);
+};
+function createRcSelfHostLocal(deps) {
+  return {
+    parsesHost: (host) => host === RC_SELF_HOST_OAUTH_HOST,
+    serve: async (host, request7, response) => {
+      const method = (request7.method ?? "").toUpperCase();
+      const pathname = new URL(request7.url ?? "/", "http://127.0.0.1").pathname;
+      if (host === RC_SELF_HOST_OAUTH_HOST) {
+        if (method === "POST" && pathname === "/v1/oauth/token") {
+          const body = parseJsonObject2(await deps.readBody(request7, CONTROL_BODY_CAP_BYTES));
+          const record2 = deps.credentialRecord();
+          if (record2 === void 0) {
+            answerServerJson(response, HTTP_SERVICE_UNAVAILABLE, { error: "the front door's self-hosted Remote Control surface is on but no credential has been minted for it" });
+            return true;
+          }
+          if (body?.grant_type !== void 0 && body.grant_type !== "refresh_token") {
+            answerServerJson(response, HTTP_STATUS.badRequest, { error: "unsupported_grant_type" });
+            return true;
+          }
+          answerServerJson(response, HTTP_STATUS.ok, { access_token: record2.accessToken, refresh_token: record2.refreshToken, expires_in: RC_SELF_HOST_OAUTH_TOKEN_TTL_SECONDS, scope: RC_SELF_HOST_SCOPE_LIST.join(" ") });
+          return true;
+        }
+        if (method === "GET" && pathname === "/v1/oauth/hello") {
+          answerServerJson(response, HTTP_STATUS.ok, {});
+          return true;
+        }
+        return false;
+      }
+      if (method === "POST" && pathname.startsWith("/api/eval/")) {
+        await deps.readBody(request7, CONTROL_BODY_CAP_BYTES);
+        answerServerJson(response, HTTP_STATUS.ok, { features: growthBookFeatures(), dateUpdated: Math.floor(deps.now() / MS_PER_SECOND7) });
+        return true;
+      }
+      if (method === "GET" && pathname === "/api/oauth/profile") {
+        const record2 = deps.credentialRecord();
+        if (record2 === void 0) {
+          answerServerJson(response, HTTP_SERVICE_UNAVAILABLE, { error: "the front door's self-hosted Remote Control surface is on but no credential has been minted for it" });
+          return true;
+        }
+        answerServerJson(response, HTTP_STATUS.ok, {
+          account: { uuid: record2.accountUuid, display_name: "agent-shim self-hosted", created_at: (/* @__PURE__ */ new Date(0)).toISOString() },
+          organization: { uuid: record2.organizationUuid, organization_type: "claude_max" }
+        });
+        return true;
+      }
+      if (method === "GET" && pathname === "/api/claude_code/policy_limits") {
+        answerServerJson(response, HTTP_STATUS.ok, {});
+        return true;
+      }
+      if (method === "POST" && pathname === "/api/oauth/validate") {
+        await deps.readBody(request7, CONTROL_BODY_CAP_BYTES);
+        const record2 = deps.credentialRecord();
+        if (record2 === void 0) {
+          answerServerJson(response, HTTP_SERVICE_UNAVAILABLE, { error: "the front door's self-hosted Remote Control surface is on but no credential has been minted for it" });
+          return true;
+        }
+        answerServerJson(response, HTTP_STATUS.ok, { scopes: [...RC_SELF_HOST_SCOPE_LIST], expiresAt: null, subscriptionType: "max", account_uuid: record2.accountUuid, organization_uuid: record2.organizationUuid });
+        return true;
+      }
+      if (method === "POST" && (pathname === "/api/event_logging/v2/batch" || pathname === "/api/claude_code/metrics" || pathname === "/api/claude_cli_feedback")) {
+        await deps.readBody(request7, CONTROL_BODY_CAP_BYTES);
+        answerServerJson(response, HTTP_STATUS.ok, {});
+        return true;
+      }
+      if (method === "GET" && pathname === "/api/hello") {
+        answerServerJson(response, HTTP_STATUS.ok, {});
+        return true;
+      }
+      return false;
+    }
+  };
+}
+
+// src/frontdoor/rcSelfHostMint.ts
+var CREDENTIALS_FILE = ".credentials.json";
+var CLAUDE_JSON2 = ".claude.json";
+var RC_SELF_HOST_RECORD_DIR = "rc-selfhost";
+var RC_SELF_HOST_RECORD_FILE = "credential.json";
+var SELF_HOST_EMAIL = "selfhost@agent-shim.invalid";
+var SELF_HOST_SUBSCRIPTION_TYPE = "max";
+function isRecord6(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function readJsonObject(fs20, file2) {
+  const raw = fs20.readFileUtf8(file2);
+  if (raw === void 0) {
+    return void 0;
   }
-  if (typeof value2 === "string" && /^[0-9]+$/.test(value2)) {
-    return Number(value2);
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return void 0;
   }
-  return void 0;
+  return isRecord6(parsed) ? parsed : void 0;
 }
-function pageOfRcChannel(url2, rows, idOf, rowOf) {
-  const query = new URL(url2, "http://127.0.0.1").searchParams;
-  const anchor2 = query.get("after_event_id") ?? query.get("cursor");
-  const rawLimit = query.get("limit");
-  const limit = rawLimit === null ? void 0 : numberOf({ value: rawLimit }, "value");
-  if (limit !== void 0 && limit < 1) {
-    return { error: "the limit names a whole number of rows of at least one" };
+function readRcSelfHostRecord(fs20, frontdoorDir) {
+  const parsed = readJsonObject(fs20, import_node_path34.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
+  if (parsed === void 0) {
+    return void 0;
   }
-  const from = anchor2 === null ? 0 : rows.findIndex((row) => idOf(row) === anchor2) + 1;
-  if (anchor2 !== null && from === 0) {
-    return { error: `the anchor names an event id this surface holds no row for: ${anchor2}` };
+  const { accessToken, refreshToken, organizationUuid, accountUuid } = parsed;
+  if (typeof accessToken !== "string" || accessToken === "" || typeof refreshToken !== "string" || refreshToken === "" || typeof organizationUuid !== "string" || organizationUuid === "" || typeof accountUuid !== "string" || accountUuid === "") {
+    return void 0;
   }
-  const page = limit === void 0 ? rows.slice(from) : rows.slice(from, from + limit);
-  const last = page[page.length - 1];
-  return { data: page.map(rowOf), ...last === void 0 ? {} : { next_cursor: idOf(last) } };
+  return { accessToken, refreshToken, organizationUuid, accountUuid };
 }
-async function serveRcClientChannels(ctx, tail, method, maxBatchEvents) {
-  const { request: request7, response, session } = ctx;
-  if (tail === "client/presence" && method === "POST") {
-    const body = parseJsonObject2(await ctx.readBody(request7.body, CONTROL_BODY_CAP_BYTES));
-    const clientId = nonEmptyString2(body, "client_id");
-    const clear = body?.clear;
-    if (clientId === void 0 || clear !== void 0 && typeof clear !== "boolean") {
-      await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a presence announcement is JSON naming a non-empty client_id, with clear only as a boolean or absent" } });
-      return true;
-    }
-    if (clear === true) {
-      session.clients.delete(clientId);
-      ctx.log?.(`rc selfhost ${session.id}: client ${clientId} cleared its presence`);
-    } else {
-      session.clients.set(clientId, ctx.now());
-      ctx.log?.(`rc selfhost ${session.id}: client ${clientId} announced its presence${session.clients.size === 1 ? "" : ` (${String(session.clients.size)} clients now announced)`}`);
-    }
-    await ctx.answerJson(response, HTTP_STATUS.ok, { refresh_after_seconds: ctx.presenceRefreshSeconds });
-    return true;
+function mintRcSelfHostCredential(deps) {
+  if (!isIdentityName(deps.identity)) {
+    throw new Error(`"${deps.identity}" is not a valid identity name.`);
   }
-  if (tail === "mark_read" && method === "POST") {
-    const body = parseJsonObject2(await ctx.readBody(request7.body, CONTROL_BODY_CAP_BYTES));
-    const eventId = nonEmptyString2(body, "event_id");
-    const clientId = nonEmptyString2(body, "client_id");
-    if (body !== void 0 && "event_id" in body && eventId === void 0 || "client_id" in (body ?? {}) && clientId === void 0) {
-      await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a read receipt is JSON naming the event_id it read or none for the whole session, and client_id only as a non-empty string or absent" } });
-      return true;
-    }
-    const receipt = ctx.publish(session, clientId ?? RC_SOURCE_CLIENT, { type: "mark_read", ...eventId === void 0 ? {} : { event_id: eventId }, ...clientId === void 0 ? {} : { client_id: clientId } }, true);
-    ctx.log?.(`rc selfhost ${session.id}: ${clientId === void 0 ? "an unnamed client" : `client ${clientId}`} marked ${eventId === void 0 ? "the session read" : `event ${eventId} read`} as sequence ${String(receipt.sequenceNum)}`);
-    await ctx.answerJson(response, HTTP_STATUS.ok, {});
-    return true;
+  const identityDir = import_node_path34.default.join(deps.identitiesDir, deps.identity);
+  const credentialsFile = import_node_path34.default.join(identityDir, CREDENTIALS_FILE);
+  const claudeJsonFile = import_node_path34.default.join(identityDir, CLAUDE_JSON2);
+  const recordDir = import_node_path34.default.join(deps.frontdoorDir, RC_SELF_HOST_RECORD_DIR);
+  const recordFile = import_node_path34.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
+  const previousRecord = readRcSelfHostRecord(deps.fs, deps.frontdoorDir);
+  const existingCredentials = readJsonObject(deps.fs, credentialsFile);
+  const existingOauth = isRecord6(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
+  const existingToken = typeof existingOauth?.accessToken === "string" && existingOauth.accessToken !== "" ? existingOauth.accessToken : void 0;
+  const existingIsOwn = existingToken !== void 0 && previousRecord?.accessToken === existingToken;
+  if (existingToken !== void 0 && !existingIsOwn && !deps.force) {
+    throw new Error(
+      `identity ${deps.identity} already holds an OAuth credential this door did not mint (a real claude.ai login): pass --force to replace it, or mint into an identity with no login. The self-hosted mode expects no Anthropic credential to be in play.`
+    );
   }
-  if (tail === "teleport-events" && method === "POST") {
-    const body = parseJsonObject2(await ctx.readBody(request7.body, CONTROL_BODY_CAP_BYTES));
-    const events = body?.events;
-    if (!Array.isArray(events) || events.length === 0 || events.length > maxBatchEvents) {
-      await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: `a teleport write is a non-empty array of at most ${String(maxBatchEvents)} events` } });
-      return true;
-    }
-    const results = [];
-    for (const event of events) {
-      if (!isRecord5(event) || !isRecord5(event.payload)) {
-        await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a teleport write is an object carrying one payload object" } });
-        return true;
-      }
-      const published = ctx.publish(session, RC_SOURCE_CLIENT, event.payload);
-      results.push({ sequence_num: String(published.sequenceNum), duplicate: published.duplicate });
+  const accessToken = `sk-ant-oat${deps.randomToken()}`;
+  const refreshToken = deps.randomToken();
+  const organizationUuid = deps.newUuid();
+  const accountUuid = deps.newUuid();
+  const mintedAt = new Date(deps.now()).toISOString();
+  deps.fs.mkdirPrivate(import_node_path34.default.dirname(credentialsFile));
+  deps.fs.writeFilePrivate(credentialsFile, `${JSON.stringify({ ...existingCredentials, claudeAiOauth: { accessToken, refreshToken, expiresAt: null, scopes: [...RC_SELF_HOST_SCOPE_LIST], subscriptionType: SELF_HOST_SUBSCRIPTION_TYPE, rateLimitTier: null } }, null, 2)}
+`);
+  const claudeJson = readJsonObject(deps.fs, claudeJsonFile) ?? {};
+  const existingBlock = (value2) => isRecord6(value2) ? value2 : {};
+  deps.fs.writeFilePrivate(claudeJsonFile, `${JSON.stringify({
+    ...claudeJson,
+    oauthAccount: {
+      ...existingBlock(claudeJson.oauthAccount),
+      accountUuid,
+      emailAddress: SELF_HOST_EMAIL,
+      organizationUuid,
+      organizationName: "agent-shim self-hosted",
+      // The billing and creation fields exist so the CLI's "populate the account block if it is missing" step finds a complete block and skips its profile fetch; the door answers that fetch locally anyway, so these are the quiet path, not a load-bearing claim.
+      billingType: "stripe_subscription",
+      accountCreatedAt: mintedAt,
+      subscriptionCreatedAt: mintedAt
+    },
+    cachedGrowthBookFeatures: {
+      ...existingBlock(claudeJson.cachedGrowthBookFeatures),
+      tengu_ccr_bridge: true,
+      tengu_bridge_repl_v2: true,
+      tengu_bridge_repl_v2_cse_shim_enabled: true
     }
-    ctx.sweep();
-    ctx.log?.(`rc selfhost ${session.id}: teleport write published ${String(results.length)} marker event(s)`);
-    await ctx.answerJson(response, HTTP_STATUS.ok, { results });
-    return true;
+  }, null, 2)}
+`);
+  deps.fs.mkdirPrivate(recordDir);
+  deps.fs.writeFilePrivate(recordFile, `${JSON.stringify({ accessToken, refreshToken, organizationUuid, accountUuid }, null, 2)}
+`);
+  return { identity: deps.identity, organizationUuid, credentialsFile, claudeJsonFile, recordFile, replaced: existingIsOwn };
+}
+
+// src/frontdoor/rcCommands.ts
+var MINTED_TOKEN_RANDOM_BYTES = 32;
+function reportControlWrite(what, session, result, json2, extra = {}) {
+  if (!result.ok) {
+    throw new Error(result.message);
   }
-  if (tail === "teleport-events" && method === "GET") {
-    const page = pageOfRcChannel(request7.url, session.events, (event) => event.eventId, (event) => ({ event_id: event.eventId, payload: event.payload }));
-    if ("error" in page) {
-      await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: page.error } });
-      return true;
-    }
-    await ctx.answerJson(response, HTTP_STATUS.ok, page);
-    return true;
+  if (json2 === true) {
+    printJson({ session, ...result.requestId === void 0 ? {} : { request: result.requestId }, sequenceNums: result.sequenceNums, ...extra });
+    return;
   }
-  return false;
+  console.log(`${what} on ${session}${result.requestId === void 0 ? "" : `: request ${result.requestId}`} sequence_num ${result.sequenceNums.join(", ")}`);
 }
-var compatSessionRow = (session, now) => ({ id: session.id, title: session.title, created_at: new Date(session.createdAt).toISOString(), updated_at: new Date(now()).toISOString(), session_status: "active" });
-async function serveRcCompatSessions(ctx, pathname, compatPath) {
-  const { request: request7, response } = ctx;
-  const method = request7.method.toUpperCase();
-  if (pathname === compatPath) {
-    if (method !== "GET") {
-      await ctx.answerJson(response, HTTP_STATUS.methodNotAllowed, { type: "error", error: { type: "api_error", message: "the compatibility session list is a GET" } });
-      return;
-    }
-    const listRefusal = ctx.credentialRefusal(request7.headers);
-    if (listRefusal !== void 0) {
-      await ctx.unauthorized(response, listRefusal);
-      return;
-    }
-    await ctx.answerJson(response, HTTP_STATUS.ok, { data: [...ctx.sessions.values()].map((session2) => compatSessionRow(session2, ctx.now)) });
-    return;
+function formatRcSessionList(sessions) {
+  if (sessions.length === 0) {
+    return ["no Remote Control sessions observed"];
   }
-  const rest = pathname.slice(`${compatPath}/`.length);
-  const slash = rest.indexOf("/");
-  const address = slash === -1 ? rest : rest.slice(0, slash);
-  const compatTail = slash === -1 ? "" : rest.slice(slash + 1);
-  const refusal = ctx.credentialRefusal(request7.headers);
-  if (refusal !== void 0) {
-    await ctx.unauthorized(response, refusal);
-    return;
+  return sessions.map((session) => `${session.id}  created ${new Date(session.createdAt).toISOString()}  last seen ${new Date(session.lastSeenAt).toISOString()}`);
+}
+function formatRcSessionStatus(statuses) {
+  if (statuses.length === 0) {
+    return ["no Remote Control sessions observed"];
   }
-  const session = ctx.sessions.get(address) ?? ctx.sessions.get(`cse_${address}`);
-  if (compatTail === "") {
-    if (method === "GET") {
-      if (session === void 0) {
-        await ctx.answerJson(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `Session not found: ${address}` } });
-        return;
-      }
-      await ctx.answerJson(response, HTTP_STATUS.ok, compatSessionRow(session, ctx.now));
-      return;
-    }
-    if (method === "PATCH" || method === "PUT") {
-      if (session === void 0) {
-        await ctx.answerJson(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `Session not found: ${address}` } });
-        return;
-      }
-      const body = parseJsonObject2(await ctx.readBody(request7.body, CONTROL_BODY_CAP_BYTES));
-      const title = nonEmptyString2(body, "title");
-      if (title === void 0) {
-        await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a compatibility session update is JSON naming a non-empty title" } });
-        return;
+  const lines = [];
+  for (const status of statuses) {
+    lines.push(`${status.id}  created ${new Date(status.createdAt).toISOString()}  last seen ${new Date(status.lastSeenAt).toISOString()}`);
+    const worker = status.workerState === void 0 && status.workerIdleSeconds === void 0 ? "not observed" : [
+      status.workerState === void 0 ? "state unknown" : `state ${status.workerState.value} since ${new Date(status.workerState.observedAt).toISOString()}`,
+      status.workerIdleSeconds === void 0 ? "idle unknown" : `idle ${String(status.workerIdleSeconds.value)} s as of ${new Date(status.workerIdleSeconds.observedAt).toISOString()}`
+    ].join(", ");
+    lines.push(`  worker: ${worker}`);
+    if (status.pending.length === 0) {
+      lines.push("  pending: none");
+    } else {
+      lines.push("  pending:");
+      for (const pending of status.pending) {
+        lines.push(...formatRcPendingList([pending]).map((line) => `    ${line}`));
       }
-      session.title = title;
-      session.lastTrafficAt = ctx.now();
-      ctx.log?.(`rc selfhost ${session.id}: retitled through the compatibility family`);
-      await ctx.answerJson(response, HTTP_STATUS.ok, compatSessionRow(session, ctx.now));
-      return;
     }
-    await ctx.answerJson(response, HTTP_STATUS.methodNotAllowed, { type: "error", error: { type: "api_error", message: "the compatibility session read is a GET and its update a PATCH or PUT" } });
-    return;
   }
-  if ((compatTail === "archive" || compatTail === "unarchive") && method === "POST") {
-    await ctx.readBody(request7.body, CONTROL_BODY_CAP_BYTES);
-    if (session === void 0) {
-      await ctx.answerJson(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `Session not found: ${address}` } });
-      return;
-    }
-    if (compatTail === "unarchive") {
-      await ctx.answerJson(response, HTTP_STATUS.ok, compatSessionRow(session, ctx.now));
-      return;
-    }
-    for (const sink of [...session.workerStreams, ...session.clientStreams]) {
-      sink.retire();
-    }
-    ctx.sessions.delete(session.id);
-    ctx.log?.(`rc selfhost ${session.id}: archived through the compatibility family`);
-    await ctx.answerJson(response, HTTP_STATUS.ok, {});
-    return;
+  return lines;
+}
+function formatRcPendingList(pending) {
+  if (pending.length === 0) {
+    return ["no pending control requests observed"];
   }
-  await ctx.answerJson(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `the compatibility session family serves no path "${compatTail}"` } });
+  return pending.map((request7) => `${request7.sessionId}  ${request7.requestId}  ${request7.type}${request7.summary === "" ? "" : `  ${request7.summary}`}  observed ${new Date(request7.observedAt).toISOString()}`);
 }
-
-// src/frontdoor/rcWebFetch.ts
-var dns2 = __toESM(require("node:dns"), 1);
-var http6 = __toESM(require("node:http"), 1);
-var https5 = __toESM(require("node:https"), 1);
-var net3 = __toESM(require("node:net"), 1);
-var RC_WEB_FETCH_MAX_BYTES = 12582912;
-var RC_WEB_FETCH_DEADLINE_MS = 4e4;
-var RC_WEB_FETCH_MAX_REDIRECTS = 20;
-var RC_WEB_FETCH_ALLOW_PRIVATE_ENV = "AGENT_SHIM_FRONTDOOR_RC_SELF_HOST_WEB_FETCH_ALLOW_PRIVATE";
-function rcWebFetchAllowsPrivateFromEnv(env) {
-  return env[RC_WEB_FETCH_ALLOW_PRIVATE_ENV] === "1";
+function eventExcerpt(text2) {
+  return text2.length <= RC_PENDING_SUMMARY_EXCERPT_CHARS ? text2 : `${text2.slice(0, RC_PENDING_SUMMARY_EXCERPT_CHARS)}...`;
 }
-var WEB_FETCH_USER_AGENT = "agent-shim-frontdoor";
-var ERROR_PREFIX = "web_fetch_";
-var V4_THIS_NETWORK_OCTET = 0;
-var V4_PRIVATE_A_OCTET = 10;
-var V4_LOOPBACK_OCTET = 127;
-var V4_CGNAT_OCTET = 100;
-var V4_CGNAT_SECOND_FROM = 64;
-var V4_CGNAT_SECOND_TO = 127;
-var V4_LINK_LOCAL_OCTET = 169;
-var V4_LINK_LOCAL_SECOND = 254;
-var V4_PRIVATE_B_OCTET = 172;
-var V4_PRIVATE_B_SECOND_FROM = 16;
-var V4_PRIVATE_B_SECOND_TO = 31;
-var V4_PRIVATE_C_OCTET = 192;
-var V4_PRIVATE_C_SECOND = 168;
-var V4_MULTICAST_FROM_OCTET = 224;
-var V6_UNIQUE_LOCAL_FROM = 64512;
-var V6_UNIQUE_LOCAL_TO = 65023;
-var V6_LINK_LOCAL_FROM = 65152;
-var V6_LINK_LOCAL_TO = 65215;
-var V6_MULTICAST_FROM = 65280;
-var IP_VERSION_4 = 4;
-var IP_VERSION_6 = 6;
-var HTTP_MOVED_PERMANENTLY = 301;
-var HTTP_FOUND = 302;
-var HTTP_SEE_OTHER = 303;
-var HTTP_TEMPORARY_REDIRECT = 307;
-var HTTP_PERMANENT_REDIRECT = 308;
-var SUCCESS_STATUS_MAX_EXCLUSIVE3 = 300;
-function refused(errorType, errorMessage2) {
-  return { kind: "refused", errorType: `${ERROR_PREFIX}${errorType}`, errorMessage: errorMessage2 };
+var PERCENT_SCALE = 100;
+var MS_PER_SECOND8 = 1e3;
+function percentOf(fraction) {
+  return `${String(Math.round(fraction * PERCENT_SCALE))}%`;
 }
-function isPrivateAddress(address) {
-  const version2 = net3.isIP(address);
-  if (version2 === IP_VERSION_4) {
-    const octets = address.split(".").map((part) => Number(part));
-    const first = octets[0] ?? -1;
-    const second = octets[1] ?? -1;
-    if (first === V4_THIS_NETWORK_OCTET || first === V4_PRIVATE_A_OCTET || first === V4_LOOPBACK_OCTET) {
-      return true;
-    }
-    if (first === V4_CGNAT_OCTET && second >= V4_CGNAT_SECOND_FROM && second <= V4_CGNAT_SECOND_TO) {
-      return true;
-    }
-    if (first === V4_LINK_LOCAL_OCTET && second === V4_LINK_LOCAL_SECOND) {
-      return true;
-    }
-    if (first === V4_PRIVATE_B_OCTET && second >= V4_PRIVATE_B_SECOND_FROM && second <= V4_PRIVATE_B_SECOND_TO) {
-      return true;
-    }
-    if (first === V4_PRIVATE_C_OCTET && second === V4_PRIVATE_C_SECOND) {
-      return true;
-    }
-    return first >= V4_MULTICAST_FROM_OCTET;
+function resetInstantOf(epochSeconds) {
+  return new Date(epochSeconds * MS_PER_SECOND8).toISOString();
+}
+function formatRcRateLimitInfo(info) {
+  const parts = [info.status];
+  if (info.rateLimitType !== void 0) {
+    parts.push(info.rateLimitType);
   }
-  if (version2 === IP_VERSION_6) {
-    const lower = address.toLowerCase();
-    const mapped = /^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/.exec(lower);
-    if (mapped !== null) {
-      return isPrivateAddress(mapped[1] ?? "");
-    }
-    if (lower === "::" || lower === "::1") {
-      return true;
-    }
-    const firstGroup = Number.parseInt(/^([0-9a-f]+):/.exec(lower)?.[1] ?? "0", 16);
-    if (Number.isNaN(firstGroup)) {
-      return true;
+  if (info.utilization !== void 0) {
+    parts.push(percentOf(info.utilization));
+  }
+  if (info.resetsAt !== void 0) {
+    parts.push(`resets ${resetInstantOf(info.resetsAt)}`);
+  }
+  const windows = [];
+  for (const name of ["five_hour", "seven_day", "seven_day_overage_included"]) {
+    const window = info.unifiedWindows?.[name];
+    if (window === void 0) {
+      continue;
     }
-    if (firstGroup >= V6_UNIQUE_LOCAL_FROM && firstGroup <= V6_UNIQUE_LOCAL_TO) {
-      return true;
+    const bits = [];
+    if (window.utilization !== void 0) {
+      bits.push(percentOf(window.utilization));
     }
-    if (firstGroup >= V6_LINK_LOCAL_FROM && firstGroup <= V6_LINK_LOCAL_TO) {
-      return true;
+    if (window.resetsAt !== void 0) {
+      bits.push(`resets ${resetInstantOf(window.resetsAt)}`);
     }
-    return firstGroup >= V6_MULTICAST_FROM;
+    windows.push(bits.length === 0 ? name : `${name} ${bits.join(" ")}`);
   }
-  return true;
+  if (windows.length > 0) {
+    parts.push(`windows ${windows.join(", ")}`);
+  }
+  if (info.isUsingOverage === true) {
+    parts.push("overage in use");
+  } else if (info.overageStatus !== void 0) {
+    parts.push(`overage ${info.overageStatus}`);
+  }
+  return parts.join(" ");
 }
-function isSuccessful3(status) {
-  return status >= HTTP_STATUS.ok && status < SUCCESS_STATUS_MAX_EXCLUSIVE3;
+function formatRcStreamEvent(event) {
+  const { envelope } = event;
+  const rateLimit = rcRateLimitInfoOf(event);
+  const sketch = rateLimit !== void 0 ? `  ${formatRcRateLimitInfo(rateLimit)}` : envelope.payload === void 0 ? "" : `  ${eventExcerpt(JSON.stringify(envelope.payload))}`;
+  return `${event.session}  ${envelope.event_type}  sequence_num ${String(envelope.sequence_num)}  source ${envelope.source}${sketch}`;
 }
-function isRedirect(status) {
-  return status === HTTP_MOVED_PERMANENTLY || status === HTTP_FOUND || status === HTTP_SEE_OTHER || status === HTTP_TEMPORARY_REDIRECT || status === HTTP_PERMANENT_REDIRECT;
+function formatRcSelfHostMint(result) {
+  return [
+    `identity:       ${result.identity} (organisation ${result.organizationUuid})`,
+    `credential:     ${result.credentialsFile}${result.replaced ? " (replacing this door's previous mint)" : ""}`,
+    `account block:  ${result.claudeJsonFile} (oauthAccount and the feature-cache seed merged in)`,
+    `door record:    ${result.recordFile} (the copy the door's served surface authenticates against)`,
+    "next:           start the door with AGENT_SHIM_FRONTDOOR_RC_SELF_HOST=1 and its transparent surface pointed at the interception port, then launch this identity and switch Remote Control on; no claude.ai login is involved"
+  ];
 }
-function readableContentType(contentType) {
-  if (contentType === void 0 || contentType.trim() === "") {
-    return true;
+function frontDoorRcControlFromState(fsPort, paths) {
+  const state = readFrontDoorState(fsPort, paths.frontdoorStateFile);
+  if (state?.port === void 0) {
+    throw new Error("the front door is not serving: Remote Control sessions are observed only while it runs, so start a session through the door first");
   }
-  const normalised = contentType.split(";")[0]?.trim().toLowerCase() ?? "";
-  const slash = normalised.indexOf("/");
-  const main2 = slash === -1 ? normalised : normalised.slice(0, slash);
-  const sub = slash === -1 ? "" : normalised.slice(slash + 1);
-  if (main2 === "text") {
-    return true;
+  const ca = fsPort.readFileUtf8(paths.frontdoorCaCertFile);
+  if (ca === void 0) {
+    throw new Error(`the front door's CA certificate is missing at ${paths.frontdoorCaCertFile}, so its control listener cannot be authenticated`);
   }
-  return /json|xml|javascript|ecmascript|yaml|csv/.test(sub);
-}
-async function readCapped(chunks) {
-  const collected = [];
-  let total = 0;
-  for await (const chunk of chunks) {
-    total += chunk.byteLength;
-    if (total > RC_WEB_FETCH_MAX_BYTES) {
-      return { tooLarge: true, text: "" };
-    }
-    collected.push(Buffer.from(chunk));
+  const token = fsPort.readFileUtf8(paths.frontdoorControlTokenFile)?.trim();
+  if (token === void 0 || token === "") {
+    throw new Error(`the serving front door's control token is missing at ${paths.frontdoorControlTokenFile}`);
   }
-  return { tooLarge: false, text: Buffer.concat(collected).toString("utf8") };
+  return frontDoorRcControl(realRcControlTransport(state.port, ca), token);
 }
-async function checkTarget(url2, deps) {
-  if (url2.protocol !== "http:" && url2.protocol !== "https:") {
-    return refused("scheme", `the web-fetch proxy dials http and https only, not ${url2.protocol}`);
-  }
-  if (deps.allowPrivate) {
-    return void 0;
+function frontDoorRcApiFromState(fsPort, paths) {
+  const state = readFrontDoorState(fsPort, paths.frontdoorStateFile);
+  if (state?.port === void 0) {
+    throw new Error("the front door is not serving: Remote Control sessions are observed only while it runs, so start a session through the door first");
   }
-  const hostname3 = url2.hostname.replace(/^\[|\]$/g, "");
-  let addresses;
-  try {
-    addresses = net3.isIP(hostname3) === 0 ? await deps.lookup(hostname3) : [hostname3];
-  } catch {
-    return refused("resolve", `${hostname3} did not resolve`);
+  const ca = fsPort.readFileUtf8(paths.frontdoorCaCertFile);
+  if (ca === void 0) {
+    throw new Error(`the front door's CA certificate is missing at ${paths.frontdoorCaCertFile}, so its typed API cannot be authenticated`);
   }
-  for (const address of addresses) {
-    if (isPrivateAddress(address)) {
-      return refused("private_address", `${hostname3} resolves to ${address}, a private address this web-fetch proxy refuses; set ${RC_WEB_FETCH_ALLOW_PRIVATE_ENV}=1 on the door if serving internal targets is intended`);
-    }
+  const token = fsPort.readFileUtf8(paths.frontdoorControlTokenFile)?.trim();
+  if (token === void 0 || token === "") {
+    throw new Error(`the serving front door's control token is missing at ${paths.frontdoorControlTokenFile}`);
   }
-  return void 0;
+  return frontDoorRcApiClient(state.port, ca, token);
 }
-async function fetchThroughWebProxy(url2, deps) {
-  let current;
-  try {
-    current = new URL(url2);
-  } catch {
-    return refused("malformed_url", `${url2} is not a URL this proxy can dial`);
-  }
-  const controller = new AbortController();
-  const timer = setTimeout(() => {
-    controller.abort();
-  }, deps.deadlineMs);
-  timer.unref();
-  try {
-    let redirects = 0;
-    for (; ; ) {
-      const refusal = await checkTarget(current, deps);
-      if (refusal !== void 0) {
-        return refusal;
+function registerRcCommand(frontdoor, paths) {
+  const rc = withExamples(
+    frontdoor.command("rc").description("Observe the Remote Control sessions passing through the front door, watch the stream their attached client receives, send a prompt into one, answer its pending control requests, and steer one with the client half's own control requests (interrupt, model, permission mode, end-session, the usage and context queries, read-file, file-suggestions, keep-alive, and the mcp_* family)."),
+    ["agent-shim frontdoor rc list", "agent-shim frontdoor rc pending"]
+  );
+  withExamples(
+    rc.command("list").description("List the Remote Control sessions the front door has observed, with when each was created and last seen. Read-only.").option("--json", "Print the sessions as JSON.").action(async (options) => {
+      const sessions = await frontDoorRcControlFromState(realFarmFs, paths).listSessions();
+      if (options.json === true) {
+        printJson({ sessions });
+        return;
       }
-      let hop;
-      try {
-        hop = await deps.dial(current, controller.signal);
-      } catch (error62) {
-        if (controller.signal.aborted) {
-          return refused("deadline", `the fetch of ${url2} did not settle within its deadline`);
-        }
-        return refused("transport", `the dial of ${current.toString()} failed: ${error62 instanceof Error ? error62.message : "unknown error"}`);
+      for (const line of formatRcSessionList(sessions)) {
+        console.log(line);
       }
-      if (isRedirect(hop.status) && hop.location !== void 0) {
-        if (redirects >= RC_WEB_FETCH_MAX_REDIRECTS) {
-          controller.abort();
-          return refused("too_many_redirects", `${url2} followed more than ${String(RC_WEB_FETCH_MAX_REDIRECTS)} redirects without settling`);
-        }
-        let next;
-        try {
-          next = new URL(hop.location, current);
-        } catch {
-          controller.abort();
-          return refused("malformed_url", `a redirect of ${current.toString()} named ${hop.location}, which is not a URL this proxy can dial`);
-        }
-        const drained = await readCapped(hop.chunks);
-        if (drained.tooLarge) {
-          controller.abort();
-          return refused("too_large", `the body of a redirect from ${url2} exceeds the ${String(RC_WEB_FETCH_MAX_BYTES)} byte cap the CLI's proxy client reads`);
-        }
-        redirects += 1;
-        current = next;
-        continue;
+    }),
+    ["agent-shim frontdoor rc list", "agent-shim frontdoor rc list --json"]
+  );
+  withExamples(
+    rc.command("status").description("Report each observed Remote Control session's worker state and idle from its latest observed heartbeat and registration, with its pending control requests. Read-only.").argument("[session]", "One cse_ session id, as `frontdoor rc list` shows it; every observed session when omitted.").option("--json", "Print the statuses as JSON.").action(async (session, options) => {
+      const statuses = await frontDoorRcControlFromState(realFarmFs, paths).statusOf(session);
+      if (options.json === true) {
+        printJson({ statuses });
+        return;
       }
-      if (!isSuccessful3(hop.status)) {
-        controller.abort();
-        return refused("status", `the target answered HTTP ${String(hop.status)} for ${current.toString()}`);
+      for (const line of formatRcSessionStatus(statuses)) {
+        console.log(line);
       }
-      const contentType = hop.contentType ?? "";
-      if (!readableContentType(contentType)) {
-        controller.abort();
-        return refused("content_type", `the target at ${current.toString()} served a ${contentType} answer, which the proxy's text field cannot carry`);
+    }),
+    ["agent-shim frontdoor rc status", "agent-shim frontdoor rc status cse_00000000-0000-4000-8000-000000000000 --json"]
+  );
+  withExamples(
+    rc.command("pending").description("List the control requests (tool and plan approvals above all) the front door has observed and that are still awaiting an answer. Read-only.").argument("[session]", "One cse_ session id, as `frontdoor rc list` shows it; every observed session when omitted.").option("--json", "Print the pending requests as JSON.").action(async (session, options) => {
+      const pending = await frontDoorRcControlFromState(realFarmFs, paths).pendingOf(session);
+      if (options.json === true) {
+        printJson({ pending });
+        return;
       }
-      const read = await readCapped(hop.chunks);
-      if (read.tooLarge) {
-        controller.abort();
-        return refused("too_large", `the body of ${current.toString()} exceeds the ${String(RC_WEB_FETCH_MAX_BYTES)} byte cap the CLI's proxy client reads`);
+      for (const line of formatRcPendingList(pending)) {
+        console.log(line);
       }
-      return { kind: "fetched", url: url2, destinationUrl: current.toString(), contentType: hop.contentType, text: read.text };
-    }
-  } finally {
-    clearTimeout(timer);
-  }
-}
-function realRcWebFetch(options) {
-  const plainAgent = new ExemptHttpAgent();
-  const tlsAgent = new ExemptTlsAgent();
-  const deps = {
-    dial: async (url2, signal) => await new Promise((resolve, reject) => {
-      const request7 = (url2.protocol === "https:" ? https5 : http6).request(
-        {
-          hostname: url2.hostname,
-          port: url2.port === "" ? void 0 : Number(url2.port),
-          method: "GET",
-          path: `${url2.pathname}${url2.search}`,
-          headers: { accept: "*/*", "accept-encoding": "identity", "user-agent": WEB_FETCH_USER_AGENT },
-          agent: url2.protocol === "https:" ? tlsAgent : plainAgent,
-          signal
-        },
-        (response) => {
-          const location = response.headers.location;
-          resolve({
-            status: response.statusCode ?? 0,
-            location: typeof location === "string" ? location : void 0,
-            contentType: typeof response.headers["content-type"] === "string" ? response.headers["content-type"] : void 0,
-            chunks: response
-          });
-        }
-      );
-      request7.once("error", reject);
-      request7.end();
     }),
-    lookup: async (hostname3) => (await dns2.promises.lookup(hostname3, { all: true })).map((entry) => entry.address),
-    allowPrivate: options.allowPrivate,
-    deadlineMs: RC_WEB_FETCH_DEADLINE_MS
-  };
-  return async (url2) => await fetchThroughWebProxy(url2, deps);
-}
-
-// src/frontdoor/rcSelfHost.ts
-var RC_SELF_HOST_ENV = "AGENT_SHIM_FRONTDOOR_RC_SELF_HOST";
-function rcSelfHostFromEnv(env) {
-  return env[RC_SELF_HOST_ENV] === "1";
-}
-var RC_SELF_HOST_SCOPE_LIST = ["user:profile", "user:inference", "user:sessions:claude_code", "user:mcp_servers", "user:file_upload"];
-var RC_SESSIONS_PATH_PREFIX2 = "/v1/code/sessions";
-var RC_COMPAT_SESSIONS_PATH = "/v1/sessions";
-var RC_SESSION_ID_PREFIX2 = "cse_";
-var RC_SELF_HOST_API_BASE_URL = "https://api.anthropic.com";
-var RC_SELF_HOST_OAUTH_HOST = "platform.claude.com";
-var HTTP_CONFLICT = 409;
-var MS_PER_SECOND7 = 1e3;
-var HTTP_SERVICE_UNAVAILABLE = 503;
-var RC_SELF_HOST_WORKER_JWT_TTL_SECONDS = 46800;
-var RC_SELF_HOST_OAUTH_TOKEN_TTL_SECONDS = 3600;
-var RC_SELF_HOST_KEEPALIVE_MS = 15e3;
-var RC_SELF_HOST_RETENTION_MS = 6e5;
-var RC_PRESENCE_REFRESH_SECONDS = 60;
-var RC_SELF_HOST_MAX_BATCH_EVENTS = 100;
-var RC_SELF_HOST_WORKER_EPOCH = 1;
-var RC_STREAM_EVENT_NAME = "client_event";
-var CONFLICT_REASON_HEADER2 = "x-ccr-conflict-reason";
-var CONFLICT_REASON_EPOCH_STALE = "epoch_stale";
-function isRecord6(value2) {
-  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
-}
-function isWebSearchRefusal(value2) {
-  return !Array.isArray(value2);
-}
-function nonEmptyString3(record2, field) {
-  const value2 = record2 === void 0 ? void 0 : record2[field];
-  return typeof value2 === "string" && value2 !== "" ? value2 : void 0;
-}
-function numberOf2(record2, field) {
-  const value2 = record2 === void 0 ? void 0 : record2[field];
-  if (typeof value2 === "number" && Number.isFinite(value2)) {
-    return value2;
-  }
-  if (typeof value2 === "string" && /^[0-9]+$/.test(value2)) {
-    return Number(value2);
-  }
-  return void 0;
-}
-function stringArray(record2, field) {
-  const value2 = record2 === void 0 ? void 0 : record2[field];
-  if (!Array.isArray(value2)) {
-    return void 0;
-  }
-  const members2 = [];
-  for (const member of value2) {
-    if (typeof member !== "string") {
-      return void 0;
-    }
-    members2.push(member);
-  }
-  return members2;
-}
-function singleHeader2(headers, name) {
-  const value2 = headers[name];
-  return typeof value2 === "string" ? value2 : void 0;
-}
-function bearerOf(headers) {
-  const presented = singleHeader2(headers, "authorization");
-  if (presented === void 0) {
-    return void 0;
-  }
-  return presented.slice(0, "bearer ".length).toLowerCase() === "bearer " ? presented.slice("bearer ".length) : void 0;
-}
-function presentationRefusal(headers) {
-  const presented = singleHeader2(headers, "authorization");
-  if (presented === void 0) {
-    return "absent";
-  }
-  if (presented.slice(0, "bearer ".length).toLowerCase() !== "bearer ") {
-    return "not-a-bearer";
-  }
-  const bearer = presented.slice("bearer ".length);
-  return bearer.slice(0, "bearer ".length).toLowerCase() === "bearer " ? "doubled-scheme-word" : "unrecognised";
-}
-async function readBody3(request7, capBytes) {
-  return await new Promise((resolve, reject) => {
-    const chunks = [];
-    let total = 0;
-    request7.on("data", (chunk) => {
-      total += chunk.length;
-      if (total > capBytes) {
-        request7.destroy();
-        reject(new Error("body too large"));
+    ["agent-shim frontdoor rc pending", "agent-shim frontdoor rc pending --json"]
+  );
+  withExamples(
+    rc.command("send").description("Send a text prompt into one observed Remote Control session, arriving as a message from an attached client would.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--text <text>", "The prompt text to deliver.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      const result = await frontDoorRcControlFromState(realFarmFs, paths).sendPrompt(options.session, options.text);
+      if (!result.ok) {
+        throw new Error(result.message);
+      }
+      if (options.json === true) {
+        printJson({ session: options.session, sequenceNums: result.sequenceNums });
         return;
       }
-      chunks.push(chunk);
-    });
-    request7.on("end", () => {
-      resolve(Buffer.concat(chunks).toString("utf8"));
-    });
-    request7.on("error", () => {
-      reject(new Error("the request body ended early"));
-    });
-  });
-}
-function parseJsonObject3(body) {
-  let parsed;
-  try {
-    parsed = JSON.parse(body);
-  } catch {
-    return void 0;
-  }
-  return isRecord6(parsed) ? parsed : void 0;
-}
-function mintWorkerJwt(randomToken, issuedAt) {
-  const encode3 = (value2) => Buffer.from(JSON.stringify(value2), "utf8").toString("base64url");
-  const header = encode3({ alg: "HS256", typ: "JWT" });
-  const payload = encode3({ exp: Math.floor((issuedAt + RC_SELF_HOST_WORKER_JWT_TTL_SECONDS * MS_PER_SECOND7) / MS_PER_SECOND7), iat: Math.floor(issuedAt / MS_PER_SECOND7) });
-  return `${header}.${payload}.${Buffer.from(randomToken(), "utf8").toString("base64url")}`;
-}
-function growthBookFeatures() {
-  return {
-    tengu_ccr_bridge: { defaultValue: true },
-    tengu_bridge_repl_v2: { defaultValue: true },
-    tengu_bridge_repl_v2_cse_shim_enabled: { defaultValue: true },
-    tengu_bridge_min_version: { defaultValue: { minVersion: "0.0.0" } }
-  };
-}
-function createRcSelfHostSurface(deps) {
-  const sessions = /* @__PURE__ */ new Map();
-  const sweep = () => {
-    const now = deps.now();
-    for (const session of sessions.values()) {
-      while (session.events[0] !== void 0 && now - session.events[0].storedAt > RC_SELF_HOST_RETENTION_MS) {
-        const dropped = session.events.shift();
-        const uuid3 = dropped === void 0 ? void 0 : nonEmptyString3(dropped.payload, "uuid");
-        if (uuid3 !== void 0) {
-          session.seenPayloadUuids.delete(uuid3);
-        }
-      }
-      for (const [clientId, lastSeenAt] of session.clients) {
-        if (now - lastSeenAt > RC_SELF_HOST_RETENTION_MS) {
-          session.clients.delete(clientId);
-        }
-      }
-      if (session.workerStreams.size === 0 && session.clientStreams.size === 0 && now - session.lastTrafficAt > RC_SELF_HOST_RETENTION_MS) {
-        sessions.delete(session.id);
+      console.log(`sent to ${options.session}: sequence_num ${result.sequenceNums.join(", ")}`);
+    }),
+    ['agent-shim frontdoor rc send --session cse_00000000-0000-4000-8000-000000000000 --text "run the tests"']
+  );
+  withExamples(
+    rc.command("answer").description("Answer one pending control request on an observed session, approving or denying it as an attached client's approval would.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--request <id>", "The control request's id, as `frontdoor rc pending` shows it.").option("--approve", "Approve the request.").option("--deny", "Deny the request.").option("--text <text>", "The denial message the worker sees; applies to --deny only.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      if (options.approve === options.deny) {
+        throw new UsageError("answer exactly one way: pass --approve or --deny, not both and not neither");
       }
-    }
-  };
-  const timer = setInterval(sweep, RC_SELF_HOST_RETENTION_MS);
-  timer.unref();
-  const keepalive = setInterval(() => {
-    for (const session of sessions.values()) {
-      for (const sink of [...session.workerStreams, ...session.clientStreams]) {
-        sink.write(": keep-alive\n\n");
+      if (options.approve === true && options.text !== void 0) {
+        throw new UsageError("--text is the denial message; an approval carries no text (the protocol's allow result has no message field)");
       }
-    }
-  }, RC_SELF_HOST_KEEPALIVE_MS);
-  keepalive.unref();
-  const presentsCredential = (headers) => {
-    const expected = deps.credentialRecord()?.accessToken;
-    const presented = bearerOf(headers);
-    return expected !== void 0 && presented !== void 0 && isLiveCapability(presented, [expected]);
-  };
-  const presentsWorkerJwt = (headers, session) => {
-    const presented = bearerOf(headers);
-    if (presented === void 0) {
-      return false;
-    }
-    for (const minted of session.workerJwts) {
-      if (isLiveCapability(presented, [minted])) {
-        return true;
+      const result = await frontDoorRcControlFromState(realFarmFs, paths).answerRequest(options.session, options.request, { approve: options.approve === true, message: options.deny === true ? options.text : void 0 });
+      if (!result.ok) {
+        throw new Error(result.message);
       }
-    }
-    return false;
-  };
-  const credentialRefusal = (headers) => presentsCredential(headers) ? void 0 : presentationRefusal(headers);
-  const workerRefusal = (headers, session) => presentsWorkerJwt(headers, session) ? void 0 : presentationRefusal(headers);
-  const workerOrCredentialRefusal = (headers, session) => presentsWorkerJwt(headers, session) || presentsCredential(headers) ? void 0 : presentationRefusal(headers);
-  const frameOf = (event) => {
-    const envelope = {
-      event_id: event.eventId,
-      event_type: nonEmptyString3(event.payload, "type") ?? "event",
-      sequence_num: event.sequenceNum,
-      source: event.source,
-      payload: event.payload,
-      created_at: event.createdAt
-    };
-    return `event: ${RC_STREAM_EVENT_NAME}
-id: ${String(event.sequenceNum)}
-data: ${JSON.stringify(envelope)}
-
-`;
-  };
-  const holdStream = async (session, which, wantsReplay, request7, response) => {
-    const url2 = new URL(request7.url, "http://127.0.0.1");
-    const cursor3 = numberOf2({ value: url2.searchParams.get("from_sequence_num") }, "value") ?? numberOf2({ value: singleHeader2(request7.headers, "last-event-id") }, "value");
-    const replay = cursor3 === void 0 ? [] : session.events.filter((event) => wantsReplay(event) && event.sequenceNum > cursor3);
-    response.start(HTTP_STATUS.ok, { "content-type": "text/event-stream", "cache-control": "no-cache" });
-    response.flush();
-    let pending = Promise.resolve();
-    const sink = {
-      write: (frame) => {
-        pending = pending.then(async () => {
-          await response.write(frame);
-        }).catch(() => {
-        });
-      },
-      retire: () => {
-        session[which].delete(sink);
+      if (options.json === true) {
+        printJson({ session: options.session, request: options.request, sequenceNums: result.sequenceNums });
+        return;
       }
-    };
-    session[which].add(sink);
-    session.lastTrafficAt = deps.now();
-    for (const event of replay) {
-      sink.write(frameOf(event));
-    }
-    await new Promise((resolve) => {
-      request7.signal.addEventListener("abort", () => {
-        resolve(void 0);
-      }, { once: true });
-    });
-    sink.retire();
-    response.end();
-  };
-  const publish = (session, source, payload, toWorker = source === RC_SOURCE_CLIENT) => {
-    const uuid3 = nonEmptyString3(payload, "uuid");
-    const duplicate = uuid3 !== void 0 && session.seenPayloadUuids.has(uuid3);
-    session.sequenceNum += 1;
-    const event = {
-      sequenceNum: session.sequenceNum,
-      eventId: uuid3 ?? deps.newUuid(),
-      source,
-      // The one enrichment the real service was observed making on the live rig's stream: the wall-clock instant it took the write. The worker's handler ignores it; the door's own parser forwards it verbatim.
-      payload: source === RC_SOURCE_WORKER ? payload : { ...payload, server_received_wall_ms: deps.now() },
-      createdAt: new Date(deps.now()).toISOString(),
-      toWorker,
-      storedAt: deps.now()
-    };
-    session.events.push(event);
-    if (uuid3 !== void 0) {
-      session.seenPayloadUuids.add(uuid3);
-    }
-    session.lastTrafficAt = event.storedAt;
-    const frame = frameOf(event);
-    if (event.toWorker) {
-      for (const sink of [...session.workerStreams]) {
-        sink.write(frame);
+      console.log(`${options.approve === true ? "approved" : "denied"} ${options.request} on ${options.session}: sequence_num ${result.sequenceNums.join(", ")}`);
+    }),
+    [
+      "agent-shim frontdoor rc answer --session cse_00000000-0000-4000-8000-000000000000 --request req_00000000-0000-4000-8000-000000000000 --approve",
+      'agent-shim frontdoor rc answer --session cse_00000000-0000-4000-8000-000000000000 --request req_00000000-0000-4000-8000-000000000000 --deny --text "not today"'
+    ]
+  );
+  withExamples(
+    rc.command("interrupt").description("Interrupt one observed Remote Control session's running turn, as an attached client's stop button would. Queued commands survive the interrupt.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      reportControlWrite("interrupted", options.session, await frontDoorRcControlFromState(realFarmFs, paths).interruptSession(options.session), options.json);
+    }),
+    ["agent-shim frontdoor rc interrupt --session cse_00000000-0000-4000-8000-000000000000"]
+  );
+  withExamples(
+    rc.command("set-model").description("Set the model one observed Remote Control session's subsequent turns use, as an attached client's model picker would.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--model <model>", "The model id to switch the session to.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      reportControlWrite(`set model ${options.model}`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).setModel(options.session, options.model), options.json, { model: options.model });
+    }),
+    ["agent-shim frontdoor rc set-model --session cse_00000000-0000-4000-8000-000000000000 --model claude-opus-5-5"]
+  );
+  withExamples(
+    rc.command("set-permission-mode").description("Set one observed Remote Control session's permission mode, as an attached client's mode switcher would.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--mode <mode>", `The permission mode to set; one of the SDK's own modes (${RC_PERMISSION_MODES.join(", ")}).`).option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      if (!isRcPermissionMode(options.mode)) {
+        throw new UsageError(`--mode must be one of the SDK's own permission modes (${RC_PERMISSION_MODES.join(", ")}), not "${options.mode}"`);
       }
-    }
-    for (const sink of [...session.clientStreams]) {
-      sink.write(frame);
-    }
-    return { sequenceNum: event.sequenceNum, eventId: event.eventId, duplicate };
-  };
-  const answerJson2 = async (response, status, body, extraHeaders = {}) => {
-    const text2 = JSON.stringify(body);
-    response.start(status, { "content-type": "application/json", "content-length": String(Buffer.byteLength(text2, "utf8")), ...extraHeaders });
-    await response.write(text2);
-    response.end();
-  };
-  const noCredential = async (response) => {
-    await answerJson2(response, HTTP_SERVICE_UNAVAILABLE, { type: "error", error: { type: "api_error", message: "the front door's self-hosted Remote Control surface is on but no credential has been minted for it; run agent-shim frontdoor rc selfhost mint first" } });
-  };
-  const epochStale = async (response) => {
-    await answerJson2(response, HTTP_CONFLICT, { type: "error", error: { type: "api_error", message: "worker_epoch does not match the session's live epoch" } }, { [CONFLICT_REASON_HEADER2]: CONFLICT_REASON_EPOCH_STALE });
-  };
-  const refusalMessages = {
-    absent: "the self-hosted Remote Control surface authenticates by the Authorization header, and this call carried none",
-    "not-a-bearer": "the self-hosted Remote Control surface reads a Bearer authorization, and this call's Authorization header did not carry the Bearer scheme word",
-    "doubled-scheme-word": "the self-hosted Remote Control surface reads one Bearer scheme word, and this call's Authorization header carried it twice: a persisted session record holds the whole header value with the scheme word included, so prefixing Bearer onto it presents a different credential",
-    unrecognised: "the self-hosted Remote Control surface did not recognise the presented credential"
-  };
-  const unauthorized = async (response, refusal) => {
-    await answerJson2(response, HTTP_STATUS.unauthorized, { type: "error", error: { type: "authentication_error", message: refusalMessages[refusal] } });
-  };
-  const serveSessionPath = async (session, tail, request7, response) => {
-    const method = request7.method.toUpperCase();
-    if (session === void 0) {
-      await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: "no such Remote Control session on this door" } });
-      return;
-    }
-    session.lastTrafficAt = deps.now();
-    if (tail === "") {
-      if (method === "PATCH" || method === "PUT") {
-        const refusal = credentialRefusal(request7.headers);
-        if (refusal !== void 0) {
-          await unauthorized(response, refusal);
-          return;
-        }
-        const body = parseJsonObject3(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
-        const title = nonEmptyString3(body, "title");
-        if (title === void 0) {
-          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a session update is JSON naming a non-empty title" } });
-          return;
-        }
-        session.title = title;
-        session.lastTrafficAt = deps.now();
-        deps.log?.(`rc selfhost ${session.id}: retitled at its client's request`);
-        await answerJson2(response, HTTP_STATUS.ok, {});
-        return;
+      reportControlWrite(`set permission mode ${options.mode}`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).setPermissionMode(options.session, options.mode), options.json, { mode: options.mode });
+    }),
+    [
+      "agent-shim frontdoor rc set-permission-mode --session cse_00000000-0000-4000-8000-000000000000 --mode plan",
+      "agent-shim frontdoor rc set-permission-mode --session cse_00000000-0000-4000-8000-000000000000 --mode acceptEdits"
+    ]
+  );
+  withExamples(
+    rc.command("end-session").description("End one observed Remote Control session, as an attached client closing it would: the worker aborts its turn and shuts down on receipt of the request.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--reason <text>", "The reason the worker's own log names; omitted means the protocol's unspecified form.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      reportControlWrite("ended", options.session, await frontDoorRcControlFromState(realFarmFs, paths).endSession(options.session, options.reason), options.json);
+    }),
+    ["agent-shim frontdoor rc end-session --session cse_00000000-0000-4000-8000-000000000000 --reason done for today"]
+  );
+  withExamples(
+    rc.command("get-usage").description("Ask one observed session's worker for its structured usage (session totals plus the plan's rate limits). The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--skip-behaviors", "Skip the worker's local-transcript scan that fills the answer's behaviours section.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      reportControlWrite("requested usage", options.session, await frontDoorRcControlFromState(realFarmFs, paths).getUsage(options.session, options.skipBehaviors === true ? true : void 0), options.json);
+    }),
+    ["agent-shim frontdoor rc get-usage --session cse_00000000-0000-4000-8000-000000000000 --skip-behaviors"]
+  );
+  withExamples(
+    rc.command("get-context-usage").description("Ask one observed session's worker for its context-window breakdown by category. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--detail <level>", `The detail level; one of the SDK's own levels (${RC_CONTEXT_USAGE_DETAILS.join(", ")}); the worker defaults to full.`).option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      if (options.detail !== void 0 && !isRcContextUsageDetail(options.detail)) {
+        throw new UsageError(`--detail must be one of the SDK's own context-usage levels (${RC_CONTEXT_USAGE_DETAILS.join(", ")}), not "${options.detail}"`);
       }
-      if (method !== "GET") {
-        await answerJson2(response, HTTP_STATUS.methodNotAllowed, { type: "error", error: { type: "api_error", message: "the session read is a GET, and its update a PATCH or PUT" } });
-        return;
+      reportControlWrite("requested context usage", options.session, await frontDoorRcControlFromState(realFarmFs, paths).getContextUsage(options.session, options.detail), options.json);
+    }),
+    ["agent-shim frontdoor rc get-context-usage --session cse_00000000-0000-4000-8000-000000000000 --detail summary"]
+  );
+  withExamples(
+    rc.command("read-file").description("Ask one observed session's worker to read one file from the session filesystem, gated by its own read-permission rules. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--path <path>", "The file's path, as the worker resolves it against the session's cwd.").option("--max-bytes <n>", "The byte cap on the read, a positive whole number.").option("--encoding <encoding>", `How the answer encodes the contents; one of the SDK's own encodings (${RC_READ_FILE_ENCODINGS.join(", ")}).`).option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      if (options.maxBytes !== void 0 && !/^[1-9][0-9]*$/.test(options.maxBytes)) {
+        throw new UsageError(`--max-bytes must be a positive whole number of bytes, not "${options.maxBytes}"`);
       }
-      await answerJson2(response, HTTP_STATUS.ok, { session: { id: session.id, title: session.title, created_at: new Date(session.createdAt).toISOString(), status: "active" } });
-      return;
-    }
-    if (tail === "bridge" && method === "POST") {
-      const refusal = credentialRefusal(request7.headers);
-      if (refusal !== void 0) {
-        await unauthorized(response, refusal);
-        return;
+      if (options.encoding !== void 0 && !isRcReadFileEncoding(options.encoding)) {
+        throw new UsageError(`--encoding must be one of the SDK's own read-file encodings (${RC_READ_FILE_ENCODINGS.join(", ")}), not "${options.encoding}"`);
       }
-      const workerJwt = mintWorkerJwt(deps.randomToken, deps.now());
-      session.workerJwts.add(workerJwt);
-      deps.log?.(`rc selfhost ${session.id}: bridge registration minted a worker credential`);
-      await answerJson2(response, HTTP_STATUS.ok, { worker_jwt: workerJwt, expires_in: RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, api_base_url: RC_SELF_HOST_API_BASE_URL, worker_epoch: RC_SELF_HOST_WORKER_EPOCH });
-      return;
-    }
-    if (tail === "archive" && method === "POST") {
-      const refusal = credentialRefusal(request7.headers);
-      if (refusal !== void 0) {
-        await unauthorized(response, refusal);
-        return;
-      }
-      for (const sink of [...session.workerStreams, ...session.clientStreams]) {
-        sink.retire();
-      }
-      sessions.delete(session.id);
-      deps.log?.(`rc selfhost ${session.id}: archived at its client's request`);
-      await answerJson2(response, HTTP_STATUS.ok, {});
-      return;
-    }
-    if (tail === "worker" || tail.startsWith("worker/")) {
-      const workerTail = tail === "worker" ? "" : tail.slice("worker/".length);
-      const webProxy = workerTail === "web-fetch" || workerTail === "web-search";
-      const refusal = webProxy ? workerOrCredentialRefusal(request7.headers, session) : workerRefusal(request7.headers, session);
-      if (refusal !== void 0) {
-        await unauthorized(response, refusal);
-        return;
-      }
-      if (workerTail === "" && method === "GET") {
-        await answerJson2(response, HTTP_STATUS.ok, { worker: { external_metadata: session.externalMetadata ?? null } });
-        return;
-      }
-      if (workerTail === "" && method === "PUT") {
-        const body = parseJsonObject3(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
-        const claimedEpoch = numberOf2(body, "worker_epoch");
-        if (claimedEpoch !== void 0 && claimedEpoch !== RC_SELF_HOST_WORKER_EPOCH) {
-          await epochStale(response);
-          return;
-        }
-        const status = nonEmptyString3(body, "worker_status");
-        if (status !== void 0) {
-          session.workerStatus = status;
+      reportControlWrite(`requested a read of ${options.path}`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).readFile(options.session, options.path, { ...options.maxBytes === void 0 ? {} : { maxBytes: Number(options.maxBytes) }, ...options.encoding === void 0 ? {} : { encoding: options.encoding } }), options.json, { path: options.path });
+    }),
+    [
+      "agent-shim frontdoor rc read-file --session cse_00000000-0000-4000-8000-000000000000 --path src/index.ts",
+      "agent-shim frontdoor rc read-file --session cse_00000000-0000-4000-8000-000000000000 --path screenshot.png --encoding base64 --max-bytes 65536"
+    ]
+  );
+  withExamples(
+    rc.command("file-suggestions").description("Ask one observed session's worker for its at-mention file suggestions for a partial path prefix, the same fuzzy-matched results the TUI shows. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--query <prefix>", "The partial path prefix to fuzzy-match; the empty string is the root listing.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      reportControlWrite(`requested file suggestions for "${options.query}"`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).fileSuggestions(options.session, options.query), options.json);
+    }),
+    ['agent-shim frontdoor rc file-suggestions --session cse_00000000-0000-4000-8000-000000000000 --query "src/frontdoor/rc"']
+  );
+  withExamples(
+    rc.command("keep-alive").description("Send one liveness heartbeat into an observed session: the payload every receiver ignores by its own contract, useful to keep the client half's stream warm without saying anything.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      reportControlWrite("sent a keep-alive", options.session, await frontDoorRcControlFromState(realFarmFs, paths).keepAlive(options.session), options.json);
+    }),
+    ["agent-shim frontdoor rc keep-alive --session cse_00000000-0000-4000-8000-000000000000"]
+  );
+  withExamples(
+    rc.command("mcp-status").description("Ask one observed session's worker for the status of its MCP server connections. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      reportControlWrite("requested MCP status", options.session, await frontDoorRcControlFromState(realFarmFs, paths).mcpStatus(options.session), options.json);
+    }),
+    ["agent-shim frontdoor rc mcp-status --session cse_00000000-0000-4000-8000-000000000000"]
+  );
+  withExamples(
+    rc.command("mcp-reconnect").description("Ask one observed session's worker to reconnect one MCP server, named exactly as `mcp-status` reports it.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--server <name>", "The MCP server's name, as `mcp-status` reports it.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      reportControlWrite(`requested a reconnect of MCP server ${options.server}`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).mcpReconnect(options.session, options.server), options.json);
+    }),
+    ["agent-shim frontdoor rc mcp-reconnect --session cse_00000000-0000-4000-8000-000000000000 --server github"]
+  );
+  withExamples(
+    rc.command("mcp-authenticate").description("Start one MCP server's OAuth handshake on an observed session, naming the redirect URI the flow redirects back to. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--server <name>", "The MCP server's name, as `mcp-status` reports it.").requiredOption("--redirect-uri <uri>", "The URI the server's OAuth flow redirects back to.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      reportControlWrite(`requested authentication of MCP server ${options.server}`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).mcpAuthenticate(options.session, options.server, options.redirectUri), options.json);
+    }),
+    ["agent-shim frontdoor rc mcp-authenticate --session cse_00000000-0000-4000-8000-000000000000 --server github --redirect-uri https://example.com/oauth/callback"]
+  );
+  withExamples(
+    rc.command("mcp-oauth-callback-url").description("Hand one MCP server's OAuth callback URL to an observed session's worker, completing the handshake `mcp-authenticate` started. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--server <name>", "The MCP server's name, as `mcp-status` reports it.").requiredOption("--callback-url <url>", "The callback URL the browser landed on.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      reportControlWrite(`handed MCP server ${options.server} its OAuth callback`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).mcpOAuthCallbackUrl(options.session, options.server, options.callbackUrl), options.json);
+    }),
+    ["agent-shim frontdoor rc mcp-oauth-callback-url --session cse_00000000-0000-4000-8000-000000000000 --server github --callback-url https://example.com/oauth/callback?code=x"]
+  );
+  withExamples(
+    rc.command("teleport").description("Send one teleport marker into an observed session over the teleport-events channel, the write half the cloud UI's ultrapan path owns on the real service. The marker rides the SDK user-message shape, the line the teleport relay anchors on.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--marker <text>", "The marker text, the string content the teleport relay anchors on.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      reportControlWrite(`teleported a marker into the session`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).teleport(options.session, options.marker), options.json, { marker: options.marker });
+    }),
+    ['agent-shim frontdoor rc teleport --session cse_00000000-0000-4000-8000-000000000000 --marker "__ULTRAPAN_TELEPORT_LOCAL__"']
+  );
+  withExamples(
+    rc.command("watch").description("Print the observed sessions' client read stream events as they arrive, the approvals the door's held stream receives above all, with each rate_limit_event rendered as the account's quota state. Read-only, until Ctrl-C leaves.").argument("[session]", "One cse_ session id, as `frontdoor rc list` shows it; every observed session when omitted.").option("--json", "Print each event as one JSON line as it arrives.").action(async (session, options) => {
+      const client = frontDoorRcApiFromState(realFarmFs, paths);
+      const leave = new AbortController();
+      const onInterrupt = () => {
+        leave.abort();
+      };
+      process.once("SIGINT", onInterrupt);
+      try {
+        for await (const event of await client.rc.subscribe(session === void 0 ? {} : { session }, { signal: leave.signal })) {
+          if (options.json === true) {
+            console.log(JSON.stringify(event));
+            continue;
+          }
+          console.log(formatRcStreamEvent(event));
         }
-        if (isRecord6(body?.external_metadata)) {
-          session.externalMetadata = body.external_metadata;
+      } catch (error62) {
+        if (!leave.signal.aborted) {
+          throw error62;
         }
-        await answerJson2(response, HTTP_STATUS.ok, {});
-        return;
+      } finally {
+        process.off("SIGINT", onInterrupt);
       }
-      if (workerTail === "register" && method === "POST") {
-        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
-        await answerJson2(response, HTTP_STATUS.ok, { worker_epoch: RC_SELF_HOST_WORKER_EPOCH });
+    }),
+    ["agent-shim frontdoor rc watch", "agent-shim frontdoor rc watch cse_00000000-0000-4000-8000-000000000000 --json"]
+  );
+  const selfhost = withExamples(
+    rc.command("selfhost").description("Mint the local credential behind the door's self-hosted Remote Control surface: the opt-in mode (AGENT_SHIM_FRONTDOOR_RC_SELF_HOST=1 in the door's environment) where the door serves the CCR surface itself and a session activates Remote Control with no Anthropic credential anywhere."),
+    ["agent-shim frontdoor rc selfhost mint rig"]
+  );
+  withExamples(
+    selfhost.command("mint").description("Mint the local OAuth credential, account block and feature-cache seed one identity needs to activate Remote Control against the door's own served surface, and record the door-side copy the surface authenticates against. Refuses to replace a real claude.ai login unless --force. Never prints a token.").argument("<identity>", "The identity to mint into, as `agent-shim identity list` names it.").option("--force", "Replace an existing OAuth credential this door did not mint.").option("--json", "Print the mint result as JSON.").action((identity, options) => {
+      const result = mintRcSelfHostCredential({
+        fs: realFarmFs,
+        identitiesDir: paths.identitiesDir,
+        frontdoorDir: paths.frontdoorDir,
+        identity,
+        newUuid: import_node_crypto14.randomUUID,
+        randomToken: () => (0, import_node_crypto14.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
+        force: options.force === true,
+        now: () => Date.now()
+      });
+      if (options.json === true) {
+        printJson(result);
         return;
       }
-      if (workerTail === "heartbeat" && method === "POST") {
-        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
-        await answerJson2(response, HTTP_STATUS.ok, {});
-        return;
+      for (const line of formatRcSelfHostMint(result)) {
+        console.log(line);
       }
-      if (workerTail === "events" && method === "POST") {
-        const body = parseJsonObject3(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
-        const claimedEpoch = numberOf2(body, "worker_epoch");
-        if (claimedEpoch !== void 0 && claimedEpoch !== RC_SELF_HOST_WORKER_EPOCH) {
-          await epochStale(response);
-          return;
-        }
-        const events = body?.events;
-        if (!Array.isArray(events) || events.length === 0 || events.length > RC_SELF_HOST_MAX_BATCH_EVENTS) {
-          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: `a worker event batch is a non-empty array of at most ${String(RC_SELF_HOST_MAX_BATCH_EVENTS)} events` } });
-          return;
-        }
-        const results = [];
-        for (const event of events) {
-          if (!isRecord6(event) || !isRecord6(event.payload)) {
-            await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a batch is an object carrying one payload object" } });
-            return;
-          }
-          const published = publish(session, RC_SOURCE_WORKER, event.payload);
-          results.push({ event_id: published.eventId, sequence_num: String(published.sequenceNum) });
-        }
-        sweep();
-        await answerJson2(response, HTTP_STATUS.ok, { results });
-        return;
+    }),
+    ["agent-shim frontdoor rc selfhost mint rig", "agent-shim frontdoor rc selfhost mint rig --force"]
+  );
+}
+
+// src/frontdoor/rcCredentialStore.ts
+var import_node_path35 = __toESM(require("node:path"), 1);
+function isSafeSessionId(sessionId) {
+  return /^[A-Za-z0-9_-]+$/.test(sessionId);
+}
+function isRecord7(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function credentialOfJson(parsed) {
+  if (!isRecord7(parsed)) {
+    return void 0;
+  }
+  const { authorization, anthropicVersion, anthropicClientPlatform } = parsed;
+  if (typeof authorization !== "string" || authorization === "") {
+    return void 0;
+  }
+  return {
+    authorization,
+    anthropicVersion: typeof anthropicVersion === "string" ? anthropicVersion : void 0,
+    anthropicClientPlatform: typeof anthropicClientPlatform === "string" ? anthropicClientPlatform : void 0
+  };
+}
+function sequenceNumOfJson(value2) {
+  return typeof value2 === "number" && Number.isInteger(value2) && value2 >= 0 ? value2 : void 0;
+}
+function createRcCredentialStore(fs20, dir) {
+  fs20.mkdirPrivate(dir);
+  const fileFor = (sessionId) => import_node_path35.default.join(dir, `${sessionId}.json`);
+  const readParsed = (sessionId) => {
+    const raw = fs20.readFileUtf8(fileFor(sessionId));
+    if (raw === void 0) {
+      return void 0;
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      return void 0;
+    }
+    return isRecord7(parsed) ? parsed : void 0;
+  };
+  return {
+    read: (sessionId) => {
+      if (!isSafeSessionId(sessionId)) {
+        return void 0;
       }
-      if (workerTail === "events/stream" && method === "GET") {
-        await holdStream(session, "workerStreams", (event) => event.toWorker, request7, response);
+      return credentialOfJson(readParsed(sessionId));
+    },
+    write: (sessionId, credential) => {
+      if (!isSafeSessionId(sessionId)) {
         return;
       }
-      if (workerTail === "events/delivery" && method === "POST") {
-        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
-        await answerJson2(response, HTTP_STATUS.ok, {});
+      const cursor3 = sequenceNumOfJson(readParsed(sessionId)?.highestSequenceNum);
+      const record2 = { ...credential, ...cursor3 === void 0 ? {} : { highestSequenceNum: cursor3 } };
+      fs20.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record2, null, 2)}
+`);
+    },
+    readCursor: (sessionId) => {
+      if (!isSafeSessionId(sessionId)) {
+        return void 0;
+      }
+      return sequenceNumOfJson(readParsed(sessionId)?.highestSequenceNum);
+    },
+    writeCursor: (sessionId, highestSequenceNum) => {
+      if (!isSafeSessionId(sessionId)) {
         return;
       }
-      if (workerTail === "internal-events" && method === "POST") {
-        const body = parseJsonObject3(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
-        const claimedEpoch = numberOf2(body, "worker_epoch");
-        if (claimedEpoch !== void 0 && claimedEpoch !== RC_SELF_HOST_WORKER_EPOCH) {
-          await epochStale(response);
-          return;
-        }
-        const events = body?.events;
-        if (!Array.isArray(events)) {
-          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "an internal event batch is an array" } });
-          return;
-        }
-        for (const event of events) {
-          if (isRecord6(event)) {
-            session.internalEvents.push({ eventId: deps.newUuid(), body: event });
-          }
-        }
-        await answerJson2(response, HTTP_STATUS.ok, {});
+      const credential = credentialOfJson(readParsed(sessionId));
+      const record2 = credential === void 0 ? { highestSequenceNum } : { ...credential, highestSequenceNum };
+      fs20.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record2, null, 2)}
+`);
+    },
+    remove: (sessionId) => {
+      if (!isSafeSessionId(sessionId)) {
         return;
       }
-      if (workerTail === "internal-events" && method === "GET") {
-        const query = new URL(request7.url, "http://127.0.0.1").searchParams;
-        if (query.get("session_agent_id") !== null || query.get("subagents") !== null) {
-          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "this surface keeps one internal-events channel per session, so an agent-scoped read has no subset to serve" } });
-          return;
-        }
-        const page = pageOfRcChannel(request7.url, session.internalEvents, (event) => event.eventId, (event) => ({ event_id: event.eventId, payload: event.body }));
-        if ("error" in page) {
-          const anchorUnknown = query.get("after_event_id") !== null && page.error.startsWith("the anchor names an event id");
-          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: anchorUnknown ? "after_event_id_not_found" : "invalid_request_error", message: page.error } });
-          return;
-        }
-        await answerJson2(response, HTTP_STATUS.ok, page);
-        return;
-      }
-      if (workerTail === "diagnostics" && method === "POST") {
-        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
-        await answerJson2(response, HTTP_STATUS.ok, {});
-        return;
-      }
-      if (workerTail === "web-fetch" && method === "POST") {
-        const body = parseJsonObject3(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
-        const target = nonEmptyString3(body, "url");
-        if (target === void 0) {
-          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a worker web-fetch carries one url" } });
-          return;
-        }
-        const outcome = await deps.webFetch(target);
-        if (outcome.kind === "fetched") {
-          const answer = { url: target, destination_url: outcome.destinationUrl, text: outcome.text, ...outcome.contentType === void 0 ? {} : { content_type: outcome.contentType } };
-          if (Buffer.byteLength(JSON.stringify(answer), "utf8") > RC_WEB_FETCH_MAX_BYTES) {
-            deps.log?.(`rc selfhost ${session.id}: worker web-fetch of ${target} escaped past the reader cap when framed`);
-            await answerJson2(response, HTTP_STATUS.ok, { error: { error_type: "web_fetch_too_large", error_message: `the answer for ${target} exceeds the ${String(RC_WEB_FETCH_MAX_BYTES)} byte cap the CLI's proxy client reads` } });
-            return;
-          }
-          deps.log?.(`rc selfhost ${session.id}: worker web-fetch served ${target} as ${outcome.destinationUrl}`);
-          await answerJson2(response, HTTP_STATUS.ok, answer);
-          return;
-        }
-        deps.log?.(`rc selfhost ${session.id}: worker web-fetch of ${target} refused: ${outcome.errorType}`);
-        await answerJson2(response, HTTP_STATUS.ok, { error: { error_type: outcome.errorType, error_message: outcome.errorMessage } });
-        return;
-      }
-      if (workerTail === "web-search" && method === "POST") {
-        const body = parseJsonObject3(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
-        const query = nonEmptyString3(body, "query");
-        if (query === void 0) {
-          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a worker web-search carries one query" } });
-          return;
-        }
-        const allowedDomains = stringArray(body, "allowed_domains");
-        const blockedDomains = stringArray(body, "blocked_domains");
-        if (body?.allowed_domains !== void 0 && allowedDomains === void 0 || body?.blocked_domains !== void 0 && blockedDomains === void 0) {
-          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "the domain filters of a worker web-search are string arrays" } });
-          return;
-        }
-        const searchProfile = nonEmptyString3(body, "search_profile");
-        const backend = deps.webSearch;
-        if (backend === void 0) {
-          deps.log?.(`rc selfhost ${session.id}: worker web-search of "${query}" refused: no search backend serves this door`);
-          await answerJson2(response, HTTP_STATUS.ok, { results: [], error: { error_type: "web_search_unavailable", error_message: "this front door serves the Remote Control web-search proxy without a search backend, so no query can be served here" } });
-          return;
-        }
-        const answered = await backend({ query, ...allowedDomains === void 0 ? {} : { allowedDomains }, ...blockedDomains === void 0 ? {} : { blockedDomains }, ...searchProfile === void 0 ? {} : { searchProfile } });
-        deps.log?.(`rc selfhost ${session.id}: worker web-search of "${query}" answered by its backend`);
-        if (isWebSearchRefusal(answered)) {
-          await answerJson2(response, HTTP_STATUS.ok, { results: [], error: { error_type: answered.errorType, error_message: answered.errorMessage } });
-          return;
+      fs20.removeRecursive(fileFor(sessionId));
+    }
+  };
+}
+
+// src/frontdoor/rcClientPage.ts
+var RC_CLIENT_PATH = "/__agent-shim/client";
+var RC_CLIENT_PAGE_SCRIPT = `'use strict';
+// The door's typed API as this page speaks it: the oRPC RPC protocol over plain fetch, which is one POST per procedure with a {"json": input} body and a {"json": output} answer, so no client library is needed. These helpers are plain top-level functions (not boot-scoped) so the page's tests can evaluate this script outside a browser and drive them against a mounted listener.
+var API_PREFIX = '/__agent-shim/orpc';
+var TOKEN_KEY = 'agent-shim-rc-token';
+var token = null;
+
+function apiBase() { return window.location.origin + API_PREFIX; }
+
+// Calls one procedure: resolves the output's own value, rejects with the door's error message when it answered one.
+async function rpc(path, input) {
+  var response = await fetch(apiBase() + '/' + path, {
+    method: 'POST',
+    headers: { 'content-type': 'application/json', authorization: 'Bearer ' + token },
+    body: JSON.stringify({ json: input === undefined ? {} : input }),
+  });
+  var envelope = await response.json().catch(function () { return {}; });
+  if (!response.ok) {
+    var message = envelope && envelope.json && envelope.json.message ? envelope.json.message : ('HTTP ' + response.status);
+    var error = new Error(message);
+    error.status = response.status;
+    throw error;
+  }
+  return envelope.json;
+}
+
+// Parses every complete SSE frame out of the buffered text, returning the frames and the unparsed remainder. Comment frames (the door's keepalive opens with one) carry no event name and are dropped.
+function parseSseFrames(buffer) {
+  var frames = [];
+  var rest = buffer;
+  for (;;) {
+    var boundary = rest.indexOf('\\n\\n');
+    if (boundary === -1) { break; }
+    var raw = rest.slice(0, boundary);
+    rest = rest.slice(boundary + 2);
+    var frame = { event: 'message', id: '', data: '' };
+    var lines = raw.split('\\n');
+    for (var i = 0; i < lines.length; i++) {
+      var line = lines[i];
+      if (line === '' || line.charAt(0) === ':') { continue; }
+      var colon = line.indexOf(':');
+      var field = colon === -1 ? line : line.slice(0, colon);
+      var value = colon === -1 ? '' : line.slice(colon + 1);
+      if (value.charAt(0) === ' ') { value = value.slice(1); }
+      if (field === 'event') { frame.event = value; }
+      if (field === 'id') { frame.id = value; }
+      if (field === 'data') { frame.data += (frame.data === '' ? '' : '\\n') + value; }
+    }
+    if (frame.data !== '') { frames.push(frame); }
+  }
+  return { frames: frames, rest: rest };
+}
+
+// Whether one source-tagged event continues the per-source sequence the tracker holds: the count of events the stream dropped when it does not, zero when it does. The tracker keeps the high-water mark, so a number the door re-sends after a reconnect is a duplicate, not a step back, and never reports a negative gap. The backbone holds no replay, so a gap is reported, never hidden.
+function sequenceGap(tracker, event) {
+  var previous = tracker[event.source];
+  if (event.sequence > (previous === undefined ? 0 : previous)) { tracker[event.source] = event.sequence; }
+  if (previous === undefined || event.sequence <= previous) { return 0; }
+  return event.sequence - previous - 1;
+}
+
+function shortId(id) { return id.length > 14 ? id.slice(0, 8) + '..' + id.slice(-4) : id; }
+
+// A bounded sketch of any payload, the feed's fallback rendering: one JSON line, cut with a marker rather than silently.
+function sketch(value, cap) {
+  var text;
+  try { text = JSON.stringify(value); } catch (e) { text = String(value); }
+  if (text === undefined) { text = 'undefined'; }
+  return text.length > cap ? text.slice(0, cap) + '...' : text;
+}
+
+// One utilization fraction as a whole percentage, the same rounding the CLI's own watch line applies.
+function percentOf(fraction) { return String(Math.round(fraction * 100)) + '%'; }
+
+// The reset instant a rate-limit payload states (unix epoch seconds) as an ISO instant; no countdown is derived from it, because a ticking derivation would claim a freshness the event stream never promised.
+function resetInstantOf(epochSeconds) { return new Date(epochSeconds * 1000).toISOString(); }
+
+// Whether one rate-limit payload is readable, narrowed the same way the door's live usage state narrows it: the event type and a rate_limit_info object.
+function rateLimitInfoOf(payload) {
+  if (payload === undefined || payload === null || typeof payload !== 'object' || payload.type !== 'rate_limit_event') { return undefined; }
+  var info = payload.rate_limit_info;
+  if (info === undefined || info === null || typeof info !== 'object' || typeof info.status !== 'string') { return undefined; }
+  return info;
+}
+
+// One rate-limit payload's facts as the quota summary the feed and the header render: the limiting window's status and utilisation, each subscription window, and the overage state, every value the payload's own words.
+function quotaSummary(info) {
+  var parts = [info.status];
+  if (info.rateLimitType !== undefined) { parts.push(info.rateLimitType); }
+  if (typeof info.utilization === 'number') { parts.push(percentOf(info.utilization)); }
+  if (typeof info.resetsAt === 'number') { parts.push('resets ' + resetInstantOf(info.resetsAt)); }
+  if (info.unifiedWindows !== undefined && info.unifiedWindows !== null && typeof info.unifiedWindows === 'object') {
+    var names = ['five_hour', 'seven_day', 'seven_day_overage_included'];
+    var windows = [];
+    for (var i = 0; i < names.length; i++) {
+      var window = info.unifiedWindows[names[i]];
+      if (window === undefined || window === null) { continue; }
+      var bits = [];
+      if (typeof window.utilization === 'number') { bits.push(percentOf(window.utilization)); }
+      if (typeof window.resetsAt === 'number') { bits.push('resets ' + resetInstantOf(window.resetsAt)); }
+      windows.push(bits.length === 0 ? names[i] : names[i] + ' ' + bits.join(' '));
+    }
+    if (windows.length > 0) { parts.push('windows ' + windows.join(', ')); }
+  }
+  if (info.isUsingOverage === true) { parts.push('overage in use'); }
+  else if (typeof info.overageStatus === 'string') { parts.push('overage ' + info.overageStatus); }
+  return parts.join(' ');
+}
+
+// The header's quota text from the door's freshest live observation: the quota summary plus when the door observed it, or the plain statement that none has arrived yet.
+function quotaText(latest) {
+  if (latest === undefined || latest === null) { return 'quota: not observed yet'; }
+  var info = rateLimitInfoOf({ type: 'rate_limit_event', rate_limit_info: latest.rateLimit });
+  if (info === undefined) { return 'quota: not readable'; }
+  return 'quota: ' + quotaSummary(info) + '  observed ' + new Date(latest.observedAt).toLocaleTimeString();
+}
+
+// The headline text of one Remote Control stream event: a rate-limit payload renders as its quota summary, the assistant and user payloads that carry a content array of text blocks render as their prose, everything else as its type plus a sketch.
+function rcLine(event) {
+  var envelope = event.envelope;
+  var payload = envelope.payload;
+  var headline = '';
+  var rateLimit = rateLimitInfoOf(payload);
+  if (rateLimit !== undefined) {
+    headline = quotaSummary(rateLimit);
+  } else if (payload !== undefined && payload !== null && typeof payload === 'object' && Array.isArray(payload.content)) {
+    var parts = [];
+    for (var i = 0; i < payload.content.length; i++) {
+      var block = payload.content[i];
+      if (block !== null && typeof block === 'object' && block.type === 'text' && typeof block.text === 'string') { parts.push(block.text); }
+    }
+    if (parts.length > 0) { headline = parts.join(' '); }
+  }
+  if (headline === '') {
+    headline = envelope.event_type;
+    if (payload !== undefined) { headline += '  ' + sketch(payload, 240); }
+  }
+  return new Date().toLocaleTimeString() + '  ' + shortId(event.session) + '  ' + envelope.event_type + '  ' + headline;
+}
+
+function el(tag, className, text) {
+  var node = document.createElement(tag);
+  if (className) { node.className = className; }
+  if (text !== undefined) { node.textContent = text; }
+  return node;
+}
+
+var ui = null;
+
+function renderEvent(event, gap) {
+  if (ui === null) { return; }
+  var list = ui.eventList;
+  if (gap > 0) {
+    list.appendChild(el('div', 'event gap', 'dropped events: ' + String(gap) + ' on source ' + event.source + ' (the stream holds no replay)'));
+  }
+  var line;
+  if (event.source === 'rc') {
+    line = rcLine(event.payload);
+  } else {
+    line = new Date().toLocaleTimeString() + '  [' + event.source + ']  ' + sketch(event.payload, 240);
+  }
+  list.appendChild(el('div', 'event', line));
+  while (list.childElementCount > 500) { list.removeChild(list.firstChild); }
+  list.scrollTop = list.scrollHeight;
+}
+
+function renderSessions(statuses) {
+  if (ui === null) { return; }
+  var list = ui.sessionList;
+  list.textContent = '';
+  if (statuses.length === 0) {
+    list.appendChild(el('div', 'event dim', 'no Remote Control sessions observed'));
+    return;
+  }
+  for (var i = 0; i < statuses.length; i++) {
+    var status = statuses[i];
+    var worker = status.workerState === undefined ? 'worker unknown' : 'worker ' + status.workerState.value;
+    var row = el('div', 'session' + (status.id === ui.selected ? ' selected' : ''));
+    row.appendChild(el('div', null, shortId(status.id)));
+    row.appendChild(el('div', 'dim', worker + (status.pending.length === 0 ? '' : ', ' + String(status.pending.length) + ' pending') + ', seen ' + new Date(status.lastSeenAt).toLocaleTimeString()));
+    row.addEventListener('click', selectSession(status.id));
+    list.appendChild(row);
+  }
+}
+
+function selectSession(id) {
+  return function () {
+    if (ui === null) { return; }
+    ui.selected = ui.selected === id ? null : id;
+    ui.promptTarget.textContent = ui.selected === null ? 'no session selected' : 'to ' + ui.selected;
+    refreshSessions();
+    refreshPending();
+  };
+}
+
+function renderPending(pending) {
+  if (ui === null) { return; }
+  var list = ui.pendingList;
+  list.textContent = '';
+  if (pending.length === 0) {
+    list.appendChild(el('div', 'event dim', 'no control requests awaiting an answer'));
+    return;
+  }
+  for (var i = 0; i < pending.length; i++) {
+    var request = pending[i];
+    var card = el('div', 'card');
+    card.appendChild(el('div', null, request.type + '  ' + (request.summary === '' ? shortId(request.requestId) : request.summary)));
+    card.appendChild(el('div', 'dim', shortId(request.sessionId) + '  ' + shortId(request.requestId) + '  observed ' + new Date(request.observedAt).toLocaleTimeString()));
+    var row = el('div', 'row');
+    var denial = el('input');
+    denial.type = 'text';
+    denial.placeholder = 'denial message (optional)';
+    var approve = el('button', null, 'Approve');
+    var deny = el('button', 'secondary', 'Deny');
+    approve.addEventListener('click', answerRequest(request, true, denial));
+    deny.addEventListener('click', answerRequest(request, false, denial));
+    row.appendChild(denial);
+    row.appendChild(approve);
+    row.appendChild(deny);
+    card.appendChild(row);
+    list.appendChild(card);
+  }
+}
+
+function answerRequest(request, approve, denialInput) {
+  return function () {
+    var input = { session: request.sessionId, request: request.requestId, approve: approve };
+    if (!approve && denialInput.value !== '') { input.text = denialInput.value; }
+    rpc('rc/answer', input).then(function () {
+      renderEvent({ source: 'page', sequence: 0, payload: { note: (approve ? 'approved' : 'denied') + ' ' + request.requestId } }, 0);
+      refreshPending();
+    }, function (error) { window.alert('answer failed: ' + error.message); });
+  };
+}
+
+function sendPrompt() {
+  if (ui === null || ui.selected === null) { window.alert('select a session first'); return; }
+  var text = ui.prompt.value;
+  if (text === '') { return; }
+  ui.send.disabled = true;
+  rpc('rc/send', { session: ui.selected, text: text }).then(function (result) {
+    ui.prompt.value = '';
+    renderEvent({ source: 'page', sequence: 0, payload: { note: 'sent, sequence_num ' + result.sequenceNums.join(', ') } }, 0);
+  }, function (error) { window.alert('send failed: ' + error.message); }).then(function () { ui.send.disabled = false; });
+}
+
+function refreshSessions() {
+  rpc('rc/status', {}).then(function (result) { renderSessions(result.statuses); }, authOrReport('rc/status'));
+}
+
+function refreshPending() {
+  rpc('rc/pending', ui !== null && ui.selected !== null ? { session: ui.selected } : {}).then(function (result) { renderPending(result.pending); }, authOrReport('rc/pending'));
+}
+
+// The header's quota span, fed by the door's live read on the same refresh cycle as the session and pending lists: the freshest rate-limit observation any session's stream has filed, with its observation time so its freshness reads at a glance.
+function refreshQuota() {
+  rpc('usage/live', {}).then(function (result) {
+    if (ui !== null) { ui.quotaState.textContent = quotaText(result.latest); }
+  }, authOrReport('usage/live'));
+}
+
+// The one error path every call shares: a 401 means this token is not this generation's, so the page says so and asks for it again; anything else is reported in the feed.
+function authOrReport(what) {
+  return function (error) {
+    if (error.status === 401) {
+      handleUnauthorized();
+      return;
+    }
+    renderEvent({ source: 'page', sequence: 0, payload: { note: what + ' failed: ' + error.message } }, 0);
+  };
+}
+
+function handleUnauthorized() {
+  window.sessionStorage.removeItem(TOKEN_KEY);
+  if (feedAbort !== null) { feedAbort.abort(); }
+  streamState('');
+  showTokenForm('this door refused the token: it names a different door generation, paste the current one');
+}
+
+function streamState(text) { if (ui !== null) { ui.streamState.textContent = text; } }
+
+var feedAbort = null;
+
+// Subscribes to the door's backbone and renders what it yields, reconnecting on any drop. The stream holds no replay, so a reconnect starts at the live head and the per-source sequence numbers surface whatever the gap swallowed.
+async function runFeed() {
+  var tracker = {};
+  for (;;) {
+    if (feedAbort !== null) { feedAbort.abort(); }
+    feedAbort = new AbortController();
+    var filter = document.getElementById('source-filter').value;
+    var input = filter === '' ? {} : { sources: [filter] };
+    try {
+      streamState('stream: connecting');
+      var response = await fetch(apiBase() + '/events/subscribe', {
+        method: 'POST',
+        headers: { 'content-type': 'application/json', authorization: 'Bearer ' + token },
+        body: JSON.stringify({ json: input }),
+        signal: feedAbort.signal,
+      });
+      if (response.status === 401) { handleUnauthorized(); return; }
+      if (!response.ok || response.body === null) { throw new Error('HTTP ' + String(response.status)); }
+      streamState('stream: live');
+      var reader = response.body.getReader();
+      var decoder = new TextDecoder();
+      var buffer = '';
+      for (;;) {
+        var chunk = await reader.read();
+        if (chunk.done) { break; }
+        buffer += decoder.decode(chunk.value, { stream: true });
+        var parsed = parseSseFrames(buffer);
+        buffer = parsed.rest;
+        for (var i = 0; i < parsed.frames.length; i++) {
+          var frame = parsed.frames[i];
+          if (frame.event !== 'message') { continue; }
+          var event;
+          try { event = JSON.parse(frame.data).json; } catch (e) { continue; }
+          if (event === undefined || event.source === undefined) { continue; }
+          renderEvent(event, sequenceGap(tracker, event));
         }
-        await answerJson2(response, HTTP_STATUS.ok, { results: answered.map((result) => ({ title: result.title ?? "", url: result.url, snippet: result.snippet ?? "" })) });
-        return;
       }
-      await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `the self-hosted Remote Control surface serves no worker path "${workerTail}"` } });
-      return;
+    } catch (error) {
+      if (feedAbort !== null && feedAbort.signal.aborted) { return; }
+    }
+    streamState('stream: dropped, reconnecting');
+    await new Promise(function (resolve) { window.setTimeout(resolve, 1000); });
+  }
+}
+
+function showTokenForm(message) {
+  if (feedAbort !== null) { feedAbort.abort(); }
+  if (ui !== null) { ui.main.classList.add('hidden'); }
+  var form = document.getElementById('token-form');
+  form.classList.remove('hidden');
+  document.getElementById('token-error').textContent = message === undefined ? '' : message;
+  document.getElementById('token-input').focus();
+}
+
+function startPage(heldToken) {
+  token = heldToken;
+  ui = {
+    main: document.getElementById('main'),
+    eventList: document.getElementById('event-list'),
+    sessionList: document.getElementById('session-list'),
+    pendingList: document.getElementById('pending-list'),
+    prompt: document.getElementById('prompt'),
+    promptTarget: document.getElementById('prompt-target'),
+    send: document.getElementById('send'),
+    streamState: document.getElementById('stream-state'),
+    quotaState: document.getElementById('quota-state'),
+    selected: null,
+  };
+  document.getElementById('token-form').classList.add('hidden');
+  ui.main.classList.remove('hidden');
+  document.getElementById('refresh').addEventListener('click', function () { refreshSessions(); refreshPending(); refreshQuota(); });
+  document.getElementById('send').addEventListener('click', sendPrompt);
+  document.getElementById('source-filter').addEventListener('change', function () { runFeed(); });
+  ui.prompt.addEventListener('keydown', function (event) {
+    if (event.key === 'Enter' && (event.metaKey || event.ctrlKey)) { sendPrompt(); }
+  });
+  refreshSessions();
+  refreshPending();
+  refreshQuota();
+  window.setInterval(function () { refreshSessions(); refreshPending(); refreshQuota(); }, 4000);
+  runFeed();
+  document.getElementById('door-state').textContent = 'connected';
+}
+
+function boot() {
+  var held = null;
+  var query = new URLSearchParams(window.location.search);
+  var fromQuery = query.get('token');
+  if (fromQuery !== null && fromQuery !== '') {
+    window.sessionStorage.setItem(TOKEN_KEY, fromQuery);
+    // The token leaves the address bar the moment the page holds it, so a refresh or a shared screen shows the clean URL; sessionStorage keeps the tab working.
+    window.history.replaceState(null, '', window.location.pathname);
+    held = fromQuery;
+  } else {
+    held = window.sessionStorage.getItem(TOKEN_KEY);
+  }
+  document.getElementById('token-save').addEventListener('click', function () {
+    var value = document.getElementById('token-input').value.trim();
+    if (value === '') { return; }
+    window.sessionStorage.setItem(TOKEN_KEY, value);
+    startPage(value);
+  });
+  document.getElementById('token-input').addEventListener('keydown', function (event) {
+    if (event.key === 'Enter') { document.getElementById('token-save').click(); }
+  });
+  if (held !== null && held !== '') { startPage(held); }
+}
+
+if (typeof document !== 'undefined' && document.getElementById('event-list') !== null) {
+  window.addEventListener('DOMContentLoaded', boot);
+}
+`;
+var RC_CLIENT_PAGE_HTML = `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>agent-shim Remote Control</title>
+<style>
+  :root { color-scheme: dark; }
+  * { box-sizing: border-box; }
+  body { margin: 0; background: #101418; color: #d7dde3; font: 14px/1.45 ui-monospace, Menlo, Consolas, monospace; }
+  header { display: flex; gap: 12px; align-items: baseline; padding: 10px 16px; background: #171d24; border-bottom: 1px solid #2a333d; }
+  header h1 { font-size: 15px; margin: 0; font-weight: 600; }
+  header .state { color: #8b98a5; }
+  main { display: flex; gap: 1px; background: #2a333d; min-height: calc(100vh - 39px); }
+  section { background: #101418; padding: 12px 16px; overflow-y: auto; }
+  #sessions { flex: 0 0 320px; border-right: 1px solid #2a333d; }
+  #right { flex: 1; display: flex; flex-direction: column; min-width: 0; }
+  #feed { flex: 1; }
+  #controls { border-top: 1px solid #2a333d; }
+  h2 { font-size: 12px; text-transform: uppercase; letter-spacing: 0.08em; color: #8b98a5; margin: 8px 0 8px; font-weight: 600; }
+  .session { padding: 6px 8px; border: 1px solid transparent; border-radius: 4px; cursor: pointer; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+  .session:hover { background: #171d24; }
+  .session.selected { border-color: #3d6ea5; background: #17222e; }
+  .session .dim { color: #8b98a5; }
+  .event { padding: 2px 0; white-space: pre-wrap; word-break: break-word; }
+  .event .dim { color: #8b98a5; }
+  .event.gap { color: #d29922; }
+  .event.error { color: #e5534b; }
+  textarea, input[type=text], select { background: #171d24; color: #d7dde3; border: 1px solid #2a333d; border-radius: 4px; padding: 6px 8px; font: inherit; width: 100%; }
+  textarea { resize: vertical; min-height: 44px; }
+  button { background: #1f4a7a; color: #d7dde3; border: 1px solid #3d6ea5; border-radius: 4px; padding: 5px 12px; font: inherit; cursor: pointer; }
+  button.secondary { background: #2a333d; border-color: #3a444f; }
+  button:disabled { opacity: 0.5; cursor: default; }
+  .row { display: flex; gap: 8px; margin: 6px 0; align-items: center; }
+  .card { border: 1px solid #3d6ea5; border-radius: 4px; padding: 8px; margin: 6px 0; background: #17222e; }
+  .card .dim { color: #8b98a5; }
+  #token-form { max-width: 480px; margin: 48px auto; }
+  #token-form p { color: #8b98a5; }
+  .hidden { display: none !important; }
+</style>
+</head>
+<body data-agent-shim-rc-client>
+<header>
+  <h1>agent-shim Remote Control</h1>
+  <span class="state" id="door-state">connecting</span>
+  <span class="state" id="stream-state"></span>
+  <span class="state" id="quota-state">quota: not observed yet</span>
+</header>
+<div id="token-form">
+  <h2>This door's control token</h2>
+  <p>The page is served behind the door's per-generation control token. Paste this door generation's token (the owner-only value the door writes beside its state) to use the page; it stays in this tab only.</p>
+  <div class="row"><input type="text" id="token-input" placeholder="control token" autocomplete="off"><button id="token-save">Use</button></div>
+  <p id="token-error" class="event error"></p>
+</div>
+<main class="hidden" id="main">
+  <section id="sessions">
+    <h2>Sessions <button class="secondary" id="refresh">Refresh</button></h2>
+    <div id="session-list"></div>
+  </section>
+  <section id="right">
+    <div id="feed">
+      <h2>Feed <select id="source-filter"><option value="">all sources</option><option value="rc">Remote Control only</option></select></h2>
+      <div id="event-list"></div>
+    </div>
+    <div id="controls">
+      <h2>Pending approvals</h2>
+      <div id="pending-list"></div>
+      <h2>Send a prompt</h2>
+      <div class="row"><textarea id="prompt" placeholder="Prompt for the selected session"></textarea></div>
+      <div class="row"><span class="dim" id="prompt-target">no session selected</span><span style="flex:1"></span><button id="send">Send</button></div>
+    </div>
+  </section>
+</main>
+<script>
+${RC_CLIENT_PAGE_SCRIPT}
+</script>
+</body>
+</html>
+`;
+function pageTokenOf(request7, url2) {
+  const presented = request7.headers.authorization;
+  const bearerPrefix = "bearer ".length;
+  const header = typeof presented === "string" && presented.slice(0, bearerPrefix).toLowerCase() === "bearer " ? presented.slice(bearerPrefix) : void 0;
+  const query = url2.searchParams.get("token") ?? void 0;
+  return header ?? query;
+}
+function serveRcClientPage(expectedToken, request7, response) {
+  const url2 = new URL(request7.url ?? "/", "https://door.invalid");
+  if (url2.pathname !== RC_CLIENT_PATH && url2.pathname !== `${RC_CLIENT_PATH}/`) {
+    response.writeHead(HTTP_STATUS.notFound, { "Content-Type": "text/plain" });
+    response.end("no such page under the door's client prefix");
+    return;
+  }
+  if (request7.method !== "GET" && request7.method !== "HEAD") {
+    response.writeHead(HTTP_STATUS.methodNotAllowed, { Allow: "GET, HEAD", "Content-Type": "text/plain" });
+    response.end("the door's web client page is read-only");
+    return;
+  }
+  const token = pageTokenOf(request7, url2);
+  if (token === void 0 || !isLiveCapability(token, [expectedToken])) {
+    response.writeHead(HTTP_STATUS.unauthorized, { "Content-Type": "application/json" });
+    response.end(JSON.stringify({ error: "the door's web client demands this generation's control token, as a Bearer credential or the token query parameter" }));
+    return;
+  }
+  response.writeHead(HTTP_STATUS.ok, {
+    "Content-Type": "text/html; charset=utf-8",
+    "Cache-Control": "no-store",
+    "Referrer-Policy": "no-referrer",
+    "Content-Security-Policy": "default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; connect-src 'self'"
+  });
+  response.end(request7.method === "HEAD" ? void 0 : RC_CLIENT_PAGE_HTML);
+}
+function createRcClientPage(expectedToken) {
+  return {
+    pathPrefix: RC_CLIENT_PATH,
+    handle: async (request7, response) => {
+      serveRcClientPage(expectedToken, request7, response);
+      await Promise.resolve();
+      return { matched: true };
+    }
+  };
+}
+
+// src/frontdoor/rcSelfHostEndpoints.ts
+var RC_SOURCE_WORKER = "worker";
+var RC_SOURCE_CLIENT = "client";
+function isRecord8(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function parseJsonObject3(body) {
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return void 0;
+  }
+  return isRecord8(parsed) ? parsed : void 0;
+}
+function nonEmptyString2(record2, field) {
+  const value2 = record2 === void 0 ? void 0 : record2[field];
+  return typeof value2 === "string" && value2 !== "" ? value2 : void 0;
+}
+function numberOf(record2, field) {
+  const value2 = record2 === void 0 ? void 0 : record2[field];
+  if (typeof value2 === "number" && Number.isFinite(value2)) {
+    return value2;
+  }
+  if (typeof value2 === "string" && /^[0-9]+$/.test(value2)) {
+    return Number(value2);
+  }
+  return void 0;
+}
+function pageOfRcChannel(url2, rows, idOf, rowOf) {
+  const query = new URL(url2, "http://127.0.0.1").searchParams;
+  const anchor2 = query.get("after_event_id") ?? query.get("cursor");
+  const rawLimit = query.get("limit");
+  const limit = rawLimit === null ? void 0 : numberOf({ value: rawLimit }, "value");
+  if (limit !== void 0 && limit < 1) {
+    return { error: "the limit names a whole number of rows of at least one" };
+  }
+  const from = anchor2 === null ? 0 : rows.findIndex((row) => idOf(row) === anchor2) + 1;
+  if (anchor2 !== null && from === 0) {
+    return { error: `the anchor names an event id this surface holds no row for: ${anchor2}` };
+  }
+  const page = limit === void 0 ? rows.slice(from) : rows.slice(from, from + limit);
+  const last = page[page.length - 1];
+  return { data: page.map(rowOf), ...last === void 0 ? {} : { next_cursor: idOf(last) } };
+}
+async function serveRcClientChannels(ctx, tail, method, maxBatchEvents) {
+  const { request: request7, response, host } = ctx;
+  if (tail === "client/presence" && method === "POST") {
+    const body = parseJsonObject3(await ctx.readBody(request7.body, CONTROL_BODY_CAP_BYTES));
+    const clientId = nonEmptyString2(body, "client_id");
+    const clear = body?.clear;
+    if (clientId === void 0 || clear !== void 0 && typeof clear !== "boolean") {
+      await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a presence announcement is JSON naming a non-empty client_id, with clear only as a boolean or absent" } });
+      return true;
     }
-    const clientRefusal = credentialRefusal(request7.headers);
-    if (clientRefusal !== void 0) {
-      await unauthorized(response, clientRefusal);
-      return;
+    if (clear === true) {
+      host.clients.delete(clientId);
+      ctx.log?.(`rc selfhost ${host.id}: client ${clientId} cleared its presence`);
+    } else {
+      host.clients.set(clientId, ctx.now());
+      ctx.log?.(`rc selfhost ${host.id}: client ${clientId} announced its presence${host.clients.size === 1 ? "" : ` (${String(host.clients.size)} clients now announced)`}`);
     }
-    if (tail === "events" && method === "POST") {
-      const body = parseJsonObject3(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
-      const events = body?.events;
-      if (!Array.isArray(events) || events.length === 0 || events.length > RC_SELF_HOST_MAX_BATCH_EVENTS) {
-        await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: `a client event write is a non-empty array of at most ${String(RC_SELF_HOST_MAX_BATCH_EVENTS)} events` } });
-        return;
-      }
-      const results = [];
-      for (const event of events) {
-        if (!isRecord6(event) || !isRecord6(event.payload)) {
-          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
-          return;
-        }
-        const published = publish(session, RC_SOURCE_CLIENT, event.payload);
-        results.push({ sequence_num: String(published.sequenceNum), duplicate: published.duplicate });
+    await ctx.answerJson(response, HTTP_STATUS.ok, { refresh_after_seconds: ctx.presenceRefreshSeconds });
+    return true;
+  }
+  if (tail === "mark_read" && method === "POST") {
+    const body = parseJsonObject3(await ctx.readBody(request7.body, CONTROL_BODY_CAP_BYTES));
+    const eventId = nonEmptyString2(body, "event_id");
+    const clientId = nonEmptyString2(body, "client_id");
+    if (body !== void 0 && "event_id" in body && eventId === void 0 || "client_id" in (body ?? {}) && clientId === void 0) {
+      await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a read receipt is JSON naming the event_id it read or none for the whole session, and client_id only as a non-empty string or absent" } });
+      return true;
+    }
+    const receipt = ctx.publish(host.conversation, host.writer, clientId ?? RC_SOURCE_CLIENT, { type: "mark_read", ...eventId === void 0 ? {} : { event_id: eventId }, ...clientId === void 0 ? {} : { client_id: clientId } });
+    ctx.log?.(`rc selfhost ${host.id}: ${clientId === void 0 ? "an unnamed client" : `client ${clientId}`} marked ${eventId === void 0 ? "the session read" : `event ${eventId} read`} as sequence ${String(receipt.sequenceNum)}`);
+    await ctx.answerJson(response, HTTP_STATUS.ok, {});
+    return true;
+  }
+  if (tail === "teleport-events" && method === "POST") {
+    const body = parseJsonObject3(await ctx.readBody(request7.body, CONTROL_BODY_CAP_BYTES));
+    const events = body?.events;
+    if (!Array.isArray(events) || events.length === 0 || events.length > maxBatchEvents) {
+      await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: `a teleport write is a non-empty array of at most ${String(maxBatchEvents)} events` } });
+      return true;
+    }
+    const results = [];
+    for (const event of events) {
+      if (!isRecord8(event) || !isRecord8(event.payload)) {
+        await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a teleport write is an object carrying one payload object" } });
+        return true;
       }
-      sweep();
-      await answerJson2(response, HTTP_STATUS.ok, { results });
-      return;
+      const published = ctx.publish(host.conversation, host.writer, RC_SOURCE_CLIENT, event.payload);
+      results.push({ sequence_num: String(published.sequenceNum), duplicate: published.duplicate });
     }
-    if (tail === "events" && method === "GET") {
-      await answerJson2(response, HTTP_STATUS.ok, { data: session.events.map((event) => ({ event_id: event.eventId, event_type: nonEmptyString3(event.payload, "type") ?? "event", sequence_num: event.sequenceNum, source: event.source, payload: event.payload, created_at: event.createdAt })) });
-      return;
+    ctx.sweep();
+    ctx.log?.(`rc selfhost ${host.id}: teleport write published ${String(results.length)} marker event(s)`);
+    await ctx.answerJson(response, HTTP_STATUS.ok, { results });
+    return true;
+  }
+  if (tail === "teleport-events" && method === "GET") {
+    const page = pageOfRcChannel(request7.url, host.conversation.events, (event) => event.eventId, (event) => ({ event_id: event.eventId, payload: event.payload }));
+    if ("error" in page) {
+      await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: page.error } });
+      return true;
     }
-    if (tail === "events/stream" && method === "GET") {
-      await holdStream(session, "clientStreams", () => true, request7, response);
+    await ctx.answerJson(response, HTTP_STATUS.ok, page);
+    return true;
+  }
+  return false;
+}
+var compatSessionRow = (session, now) => ({ id: session.id, title: session.title, created_at: new Date(session.createdAt).toISOString(), updated_at: new Date(now()).toISOString(), session_status: "active" });
+async function serveRcCompatSessions(ctx, pathname, compatPath) {
+  const { request: request7, response } = ctx;
+  const method = request7.method.toUpperCase();
+  if (pathname === compatPath) {
+    if (method !== "GET") {
+      await ctx.answerJson(response, HTTP_STATUS.methodNotAllowed, { type: "error", error: { type: "api_error", message: "the compatibility session list is a GET" } });
       return;
     }
-    if (await serveRcClientChannels({ request: request7, response, session, answerJson: answerJson2, readBody: readBody3, publish, sweep, now: deps.now, presenceRefreshSeconds: RC_PRESENCE_REFRESH_SECONDS, ...deps.log === void 0 ? {} : { log: deps.log } }, tail, method, RC_SELF_HOST_MAX_BATCH_EVENTS)) {
+    const listRefusal = ctx.credentialRefusal(request7.headers);
+    if (listRefusal !== void 0) {
+      await ctx.unauthorized(response, listRefusal);
       return;
     }
-    await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `the self-hosted Remote Control surface serves no path "${tail}"` } });
-  };
-  const recordMissing = () => deps.credentialRecord() === void 0;
-  const route = {
-    name: "rc-selfhost",
-    headroomEligible: false,
-    headroomUpstream: void 0,
-    serve: async (request7, response) => {
-      const method = request7.method.toUpperCase();
-      const pathname = new URL(request7.url, "http://127.0.0.1").pathname;
-      if (recordMissing()) {
-        await noCredential(response);
-        return;
-      }
-      if (pathname === RC_COMPAT_SESSIONS_PATH || pathname.startsWith(`${RC_COMPAT_SESSIONS_PATH}/`)) {
-        await serveRcCompatSessions({ request: request7, response, sessions, answerJson: answerJson2, readBody: readBody3, credentialRefusal, unauthorized, now: deps.now, ...deps.log === void 0 ? {} : { log: deps.log } }, pathname, RC_COMPAT_SESSIONS_PATH);
-        return;
-      }
-      if (pathname !== RC_SESSIONS_PATH_PREFIX2 && !pathname.startsWith(`${RC_SESSIONS_PATH_PREFIX2}/`)) {
-        await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `the self-hosted Remote Control surface serves no path "${pathname}"` } });
-        return;
-      }
-      if (pathname === RC_SESSIONS_PATH_PREFIX2) {
-        if (method === "POST") {
-          const createRefusal = credentialRefusal(request7.headers);
-          if (createRefusal !== void 0) {
-            await unauthorized(response, createRefusal);
-            return;
-          }
-          const body = parseJsonObject3(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
-          const session = {
-            id: `${RC_SESSION_ID_PREFIX2}${deps.newUuid()}`,
-            createdAt: deps.now(),
-            title: nonEmptyString3(body, "title"),
-            workerJwts: /* @__PURE__ */ new Set(),
-            sequenceNum: 0,
-            events: [],
-            seenPayloadUuids: /* @__PURE__ */ new Set(),
-            workerStreams: /* @__PURE__ */ new Set(),
-            clientStreams: /* @__PURE__ */ new Set(),
-            internalEvents: [],
-            clients: /* @__PURE__ */ new Map(),
-            workerStatus: void 0,
-            externalMetadata: void 0,
-            lastTrafficAt: deps.now()
-          };
-          sessions.set(session.id, session);
-          deps.log?.(`rc selfhost ${session.id}: session created on the door's own surface`);
-          await answerJson2(response, HTTP_STATUS.ok, { session: { id: session.id, title: session.title, created_at: new Date(session.createdAt).toISOString(), status: "active" } });
-          return;
-        }
-        if (method === "GET") {
-          const readRefusal = credentialRefusal(request7.headers);
-          if (readRefusal !== void 0) {
-            await unauthorized(response, readRefusal);
-            return;
-          }
-          await answerJson2(response, HTTP_STATUS.ok, { data: [...sessions.values()].map((session) => ({ id: session.id, title: session.title, created_at: new Date(session.createdAt).toISOString(), updated_at: new Date(session.lastTrafficAt).toISOString(), session_status: "active" })) });
-          return;
-        }
-        await answerJson2(response, HTTP_STATUS.methodNotAllowed, { type: "error", error: { type: "api_error", message: "the session collection is a POST (create) and a GET (list)" } });
-        return;
-      }
-      const rest = pathname.slice(`${RC_SESSIONS_PATH_PREFIX2}/`.length);
-      const slash = rest.indexOf("/");
-      const id = slash === -1 ? rest : rest.slice(0, slash);
-      const tail = slash === -1 ? "" : rest.slice(slash + 1);
-      if (!id.startsWith(RC_SESSION_ID_PREFIX2)) {
-        await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: "the session family names one cse_-prefixed session id" } });
-        return;
-      }
-      await serveSessionPath(sessions.get(id), tail, request7, response);
-    }
-  };
-  const answerServerJson = (response, status, body) => {
-    const text2 = JSON.stringify(body);
-    response.writeHead(status, { "content-type": "application/json", "content-length": String(Buffer.byteLength(text2, "utf8")) });
-    response.end(text2);
-  };
-  const local = {
-    parsesHost: (host) => host === RC_SELF_HOST_OAUTH_HOST,
-    serve: async (host, request7, response) => {
-      const method = (request7.method ?? "").toUpperCase();
-      const pathname = new URL(request7.url ?? "/", "http://127.0.0.1").pathname;
-      if (host === RC_SELF_HOST_OAUTH_HOST) {
-        if (method === "POST" && pathname === "/v1/oauth/token") {
-          const body = parseJsonObject3(await readBody3(request7, CONTROL_BODY_CAP_BYTES));
-          const record2 = deps.credentialRecord();
-          if (record2 === void 0) {
-            answerServerJson(response, HTTP_SERVICE_UNAVAILABLE, { error: "the front door's self-hosted Remote Control surface is on but no credential has been minted for it" });
-            return true;
-          }
-          if (body?.grant_type !== void 0 && body.grant_type !== "refresh_token") {
-            answerServerJson(response, HTTP_STATUS.badRequest, { error: "unsupported_grant_type" });
-            return true;
-          }
-          answerServerJson(response, HTTP_STATUS.ok, { access_token: record2.accessToken, refresh_token: record2.refreshToken, expires_in: RC_SELF_HOST_OAUTH_TOKEN_TTL_SECONDS, scope: RC_SELF_HOST_SCOPE_LIST.join(" ") });
-          return true;
-        }
-        if (method === "GET" && pathname === "/v1/oauth/hello") {
-          answerServerJson(response, HTTP_STATUS.ok, {});
-          return true;
-        }
-        return false;
-      }
-      if (method === "POST" && pathname.startsWith("/api/eval/")) {
-        await readBody3(request7, CONTROL_BODY_CAP_BYTES);
-        answerServerJson(response, HTTP_STATUS.ok, { features: growthBookFeatures(), dateUpdated: Math.floor(deps.now() / MS_PER_SECOND7) });
-        return true;
-      }
-      if (method === "GET" && pathname === "/api/oauth/profile") {
-        const record2 = deps.credentialRecord();
-        if (record2 === void 0) {
-          answerServerJson(response, HTTP_SERVICE_UNAVAILABLE, { error: "the front door's self-hosted Remote Control surface is on but no credential has been minted for it" });
-          return true;
-        }
-        answerServerJson(response, HTTP_STATUS.ok, {
-          account: { uuid: record2.accountUuid, display_name: "agent-shim self-hosted", created_at: (/* @__PURE__ */ new Date(0)).toISOString() },
-          organization: { uuid: record2.organizationUuid, organization_type: "claude_max" }
-        });
-        return true;
-      }
-      if (method === "GET" && pathname === "/api/claude_code/policy_limits") {
-        answerServerJson(response, HTTP_STATUS.ok, {});
-        return true;
-      }
-      if (method === "POST" && pathname === "/api/oauth/validate") {
-        await readBody3(request7, CONTROL_BODY_CAP_BYTES);
-        const record2 = deps.credentialRecord();
-        if (record2 === void 0) {
-          answerServerJson(response, HTTP_SERVICE_UNAVAILABLE, { error: "the front door's self-hosted Remote Control surface is on but no credential has been minted for it" });
-          return true;
-        }
-        answerServerJson(response, HTTP_STATUS.ok, { scopes: [...RC_SELF_HOST_SCOPE_LIST], expiresAt: null, subscriptionType: "max", account_uuid: record2.accountUuid, organization_uuid: record2.organizationUuid });
-        return true;
-      }
-      if (method === "POST" && (pathname === "/api/event_logging/v2/batch" || pathname === "/api/claude_code/metrics" || pathname === "/api/claude_cli_feedback")) {
-        await readBody3(request7, CONTROL_BODY_CAP_BYTES);
-        answerServerJson(response, HTTP_STATUS.ok, {});
-        return true;
-      }
-      if (method === "GET" && pathname === "/api/hello") {
-        answerServerJson(response, HTTP_STATUS.ok, {});
-        return true;
+    await ctx.answerJson(response, HTTP_STATUS.ok, { data: [...ctx.sessions.values()].map((session2) => compatSessionRow(session2, ctx.now)) });
+    return;
+  }
+  const rest = pathname.slice(`${compatPath}/`.length);
+  const slash = rest.indexOf("/");
+  const address = slash === -1 ? rest : rest.slice(0, slash);
+  const compatTail = slash === -1 ? "" : rest.slice(slash + 1);
+  const refusal = ctx.credentialRefusal(request7.headers);
+  if (refusal !== void 0) {
+    await ctx.unauthorized(response, refusal);
+    return;
+  }
+  const session = ctx.sessions.get(address) ?? ctx.sessions.get(`cse_${address}`);
+  if (compatTail === "") {
+    if (method === "GET") {
+      if (session === void 0) {
+        await ctx.answerJson(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `Session not found: ${address}` } });
+        return;
       }
-      return false;
+      await ctx.answerJson(response, HTTP_STATUS.ok, compatSessionRow(session, ctx.now));
+      return;
     }
-  };
-  return {
-    route,
-    local,
-    close: () => {
-      clearInterval(timer);
-      clearInterval(keepalive);
-      for (const session of sessions.values()) {
-        for (const sink of [...session.workerStreams, ...session.clientStreams]) {
-          sink.retire();
-        }
+    if (method === "PATCH" || method === "PUT") {
+      if (session === void 0) {
+        await ctx.answerJson(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `Session not found: ${address}` } });
+        return;
       }
-      sessions.clear();
+      const body = parseJsonObject3(await ctx.readBody(request7.body, CONTROL_BODY_CAP_BYTES));
+      const title = nonEmptyString2(body, "title");
+      if (title === void 0) {
+        await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a compatibility session update is JSON naming a non-empty title" } });
+        return;
+      }
+      session.title = title;
+      session.lastTrafficAt = ctx.now();
+      ctx.log?.(`rc selfhost ${session.id}: retitled through the compatibility family`);
+      await ctx.answerJson(response, HTTP_STATUS.ok, compatSessionRow(session, ctx.now));
+      return;
     }
-  };
+    await ctx.answerJson(response, HTTP_STATUS.methodNotAllowed, { type: "error", error: { type: "api_error", message: "the compatibility session read is a GET and its update a PATCH or PUT" } });
+    return;
+  }
+  if ((compatTail === "archive" || compatTail === "unarchive") && method === "POST") {
+    await ctx.readBody(request7.body, CONTROL_BODY_CAP_BYTES);
+    if (session === void 0) {
+      await ctx.answerJson(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `Session not found: ${address}` } });
+      return;
+    }
+    if (compatTail === "unarchive") {
+      await ctx.answerJson(response, HTTP_STATUS.ok, compatSessionRow(session, ctx.now));
+      return;
+    }
+    ctx.retireSession(session);
+    ctx.log?.(`rc selfhost ${session.id}: archived through the compatibility family`);
+    await ctx.answerJson(response, HTTP_STATUS.ok, {});
+    return;
+  }
+  await ctx.answerJson(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `the compatibility session family serves no path "${compatTail}"` } });
 }
 
-// src/frontdoor/rcSelfHostMint.ts
-var CREDENTIALS_FILE = ".credentials.json";
-var CLAUDE_JSON2 = ".claude.json";
-var RC_SELF_HOST_RECORD_DIR = "rc-selfhost";
-var RC_SELF_HOST_RECORD_FILE = "credential.json";
-var SELF_HOST_EMAIL = "selfhost@agent-shim.invalid";
-var SELF_HOST_SUBSCRIPTION_TYPE = "max";
-function isRecord7(value2) {
+// src/frontdoor/rcSelfHostConversations.ts
+var RC_CONVERSATIONS_PATH_PREFIX = "/v1/code/conversations";
+var RC_CONVERSATION_ID_PREFIX = "conv_";
+function isRecord9(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
-function readJsonObject(fs20, file2) {
-  const raw = fs20.readFileUtf8(file2);
-  if (raw === void 0) {
-    return void 0;
-  }
+function parseJsonObject4(body) {
   let parsed;
   try {
-    parsed = JSON.parse(raw);
+    parsed = JSON.parse(body);
   } catch {
     return void 0;
   }
-  return isRecord7(parsed) ? parsed : void 0;
+  return isRecord9(parsed) ? parsed : void 0;
 }
-function readRcSelfHostRecord(fs20, frontdoorDir) {
-  const parsed = readJsonObject(fs20, import_node_path34.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
-  if (parsed === void 0) {
-    return void 0;
+function nonEmptyString3(record2, field) {
+  const value2 = record2 === void 0 ? void 0 : record2[field];
+  return typeof value2 === "string" && value2 !== "" ? value2 : void 0;
+}
+function newRcSelfHostConversation(newUuid, now) {
+  return { id: `${RC_CONVERSATION_ID_PREFIX}${newUuid()}`, createdAt: now(), sequenceNum: 0, events: [], seenPayloadUuids: /* @__PURE__ */ new Set(), workerStreams: /* @__PURE__ */ new Set(), clientStreams: /* @__PURE__ */ new Set(), clients: /* @__PURE__ */ new Map(), sessionIds: /* @__PURE__ */ new Set(), lastTrafficAt: now() };
+}
+function conversationRow(conversation) {
+  return { id: conversation.id, created_at: new Date(conversation.createdAt).toISOString(), updated_at: new Date(conversation.lastTrafficAt).toISOString(), sessions: [...conversation.sessionIds] };
+}
+async function serveRcConversations(ctx, pathname, method) {
+  const { request: request7, response, conversations } = ctx;
+  const refusal = ctx.credentialRefusal(request7.headers);
+  if (refusal !== void 0) {
+    await ctx.unauthorized(response, refusal);
+    return;
   }
-  const { accessToken, refreshToken, organizationUuid, accountUuid } = parsed;
-  if (typeof accessToken !== "string" || accessToken === "" || typeof refreshToken !== "string" || refreshToken === "" || typeof organizationUuid !== "string" || organizationUuid === "" || typeof accountUuid !== "string" || accountUuid === "") {
-    return void 0;
+  if (pathname === RC_CONVERSATIONS_PATH_PREFIX) {
+    if (method !== "GET") {
+      await ctx.answerJson(response, HTTP_STATUS.methodNotAllowed, { type: "error", error: { type: "api_error", message: "the conversation collection is a GET; a conversation is born from a session create, never here" } });
+      return;
+    }
+    await ctx.answerJson(response, HTTP_STATUS.ok, { data: [...conversations.values()].sort((left, right) => left.createdAt - right.createdAt || (left.id < right.id ? -1 : 1)).map(conversationRow) });
+    return;
   }
-  return { accessToken, refreshToken, organizationUuid, accountUuid };
-}
-function mintRcSelfHostCredential(deps) {
-  if (!isIdentityName(deps.identity)) {
-    throw new Error(`"${deps.identity}" is not a valid identity name.`);
+  const rest = pathname.slice(`${RC_CONVERSATIONS_PATH_PREFIX}/`.length);
+  const slash = rest.indexOf("/");
+  const conversationId = slash === -1 ? rest : rest.slice(0, slash);
+  const tail = slash === -1 ? "" : rest.slice(slash + 1);
+  if (!conversationId.startsWith(RC_CONVERSATION_ID_PREFIX)) {
+    await ctx.answerJson(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: "the conversation family names one conv_-prefixed conversation id" } });
+    return;
   }
-  const identityDir = import_node_path34.default.join(deps.identitiesDir, deps.identity);
-  const credentialsFile = import_node_path34.default.join(identityDir, CREDENTIALS_FILE);
-  const claudeJsonFile = import_node_path34.default.join(identityDir, CLAUDE_JSON2);
-  const recordDir = import_node_path34.default.join(deps.frontdoorDir, RC_SELF_HOST_RECORD_DIR);
-  const recordFile = import_node_path34.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
-  const previousRecord = readRcSelfHostRecord(deps.fs, deps.frontdoorDir);
-  const existingCredentials = readJsonObject(deps.fs, credentialsFile);
-  const existingOauth = isRecord7(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
-  const existingToken = typeof existingOauth?.accessToken === "string" && existingOauth.accessToken !== "" ? existingOauth.accessToken : void 0;
-  const existingIsOwn = existingToken !== void 0 && previousRecord?.accessToken === existingToken;
-  if (existingToken !== void 0 && !existingIsOwn && !deps.force) {
-    throw new Error(
-      `identity ${deps.identity} already holds an OAuth credential this door did not mint (a real claude.ai login): pass --force to replace it, or mint into an identity with no login. The self-hosted mode expects no Anthropic credential to be in play.`
-    );
+  const conversation = conversations.get(conversationId);
+  if (conversation === void 0) {
+    await ctx.answerJson(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: "no such Remote Control conversation on this door" } });
+    return;
   }
-  const accessToken = `sk-ant-oat${deps.randomToken()}`;
-  const refreshToken = deps.randomToken();
-  const organizationUuid = deps.newUuid();
-  const accountUuid = deps.newUuid();
-  const mintedAt = new Date(deps.now()).toISOString();
-  deps.fs.mkdirPrivate(import_node_path34.default.dirname(credentialsFile));
-  deps.fs.writeFilePrivate(credentialsFile, `${JSON.stringify({ ...existingCredentials, claudeAiOauth: { accessToken, refreshToken, expiresAt: null, scopes: [...RC_SELF_HOST_SCOPE_LIST], subscriptionType: SELF_HOST_SUBSCRIPTION_TYPE, rateLimitTier: null } }, null, 2)}
-`);
-  const claudeJson = readJsonObject(deps.fs, claudeJsonFile) ?? {};
-  const existingBlock = (value2) => isRecord7(value2) ? value2 : {};
-  deps.fs.writeFilePrivate(claudeJsonFile, `${JSON.stringify({
-    ...claudeJson,
-    oauthAccount: {
-      ...existingBlock(claudeJson.oauthAccount),
-      accountUuid,
-      emailAddress: SELF_HOST_EMAIL,
-      organizationUuid,
-      organizationName: "agent-shim self-hosted",
-      // The billing and creation fields exist so the CLI's "populate the account block if it is missing" step finds a complete block and skips its profile fetch; the door answers that fetch locally anyway, so these are the quiet path, not a load-bearing claim.
-      billingType: "stripe_subscription",
-      accountCreatedAt: mintedAt,
-      subscriptionCreatedAt: mintedAt
-    },
-    cachedGrowthBookFeatures: {
-      ...existingBlock(claudeJson.cachedGrowthBookFeatures),
-      tengu_ccr_bridge: true,
-      tengu_bridge_repl_v2: true,
-      tengu_bridge_repl_v2_cse_shim_enabled: true
+  conversation.lastTrafficAt = ctx.now();
+  if (tail === "" && method === "GET") {
+    await ctx.answerJson(response, HTTP_STATUS.ok, { conversation: conversationRow(conversation) });
+    return;
+  }
+  if (tail === "events" && method === "POST") {
+    const body = parseJsonObject4(await ctx.readBody(request7.body, CONTROL_BODY_CAP_BYTES));
+    const events = body?.events;
+    if (!Array.isArray(events) || events.length === 0 || events.length > ctx.maxBatchEvents) {
+      await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: `a client event write is a non-empty array of at most ${String(ctx.maxBatchEvents)} events` } });
+      return;
     }
-  }, null, 2)}
-`);
-  deps.fs.mkdirPrivate(recordDir);
-  deps.fs.writeFilePrivate(recordFile, `${JSON.stringify({ accessToken, refreshToken, organizationUuid, accountUuid }, null, 2)}
-`);
-  return { identity: deps.identity, organizationUuid, credentialsFile, claudeJsonFile, recordFile, replaced: existingIsOwn };
-}
-
-// src/frontdoor/rcCommands.ts
-var MINTED_TOKEN_RANDOM_BYTES = 32;
-function reportControlWrite(what, session, result, json2, extra = {}) {
-  if (!result.ok) {
-    throw new Error(result.message);
+    const results = [];
+    for (const event of events) {
+      if (!isRecord9(event) || !isRecord9(event.payload)) {
+        await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
+        return;
+      }
+      const published = ctx.publish(conversation, { session: void 0, half: "client" }, RC_SOURCE_CLIENT, event.payload);
+      results.push({ sequence_num: String(published.sequenceNum), duplicate: published.duplicate });
+    }
+    ctx.sweep();
+    ctx.log?.(`rc selfhost ${conversation.id}: a conversation client wrote ${String(results.length)} event(s) into the shared space`);
+    await ctx.answerJson(response, HTTP_STATUS.ok, { results });
+    return;
   }
-  if (json2 === true) {
-    printJson({ session, ...result.requestId === void 0 ? {} : { request: result.requestId }, sequenceNums: result.sequenceNums, ...extra });
+  if (tail === "events" && method === "GET") {
+    await ctx.answerJson(response, HTTP_STATUS.ok, { data: conversation.events.map((event) => ({ event_id: event.eventId, event_type: nonEmptyString3(event.payload, "type") ?? "event", sequence_num: event.sequenceNum, source: event.source, payload: event.payload, created_at: event.createdAt })) });
     return;
   }
-  console.log(`${what} on ${session}${result.requestId === void 0 ? "" : `: request ${result.requestId}`} sequence_num ${result.sequenceNums.join(", ")}`);
-}
-function formatRcSessionList(sessions) {
-  if (sessions.length === 0) {
-    return ["no Remote Control sessions observed"];
+  if (tail === "events/stream" && method === "GET") {
+    await ctx.holdStream(conversation, conversation.id, "clientStreams", () => true, request7, response);
+    return;
   }
-  return sessions.map((session) => `${session.id}  created ${new Date(session.createdAt).toISOString()}  last seen ${new Date(session.lastSeenAt).toISOString()}`);
+  if (await serveRcClientChannels({ request: request7, response, host: { id: conversation.id, clients: conversation.clients, conversation, writer: { session: void 0, half: "client" } }, answerJson: ctx.answerJson, readBody: ctx.readBody, publish: ctx.publish, sweep: ctx.sweep, now: ctx.now, presenceRefreshSeconds: ctx.presenceRefreshSeconds, ...ctx.log === void 0 ? {} : { log: ctx.log } }, tail, method, ctx.maxBatchEvents)) {
+    return;
+  }
+  await ctx.answerJson(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `the conversation family serves no path "${tail}"` } });
 }
-function formatRcSessionStatus(statuses) {
-  if (statuses.length === 0) {
-    return ["no Remote Control sessions observed"];
+
+// src/frontdoor/rcWebFetch.ts
+var dns2 = __toESM(require("node:dns"), 1);
+var http6 = __toESM(require("node:http"), 1);
+var https5 = __toESM(require("node:https"), 1);
+var net3 = __toESM(require("node:net"), 1);
+var RC_WEB_FETCH_MAX_BYTES = 12582912;
+var RC_WEB_FETCH_DEADLINE_MS = 4e4;
+var RC_WEB_FETCH_MAX_REDIRECTS = 20;
+var RC_WEB_FETCH_ALLOW_PRIVATE_ENV = "AGENT_SHIM_FRONTDOOR_RC_SELF_HOST_WEB_FETCH_ALLOW_PRIVATE";
+function rcWebFetchAllowsPrivateFromEnv(env) {
+  return env[RC_WEB_FETCH_ALLOW_PRIVATE_ENV] === "1";
+}
+var WEB_FETCH_USER_AGENT = "agent-shim-frontdoor";
+var ERROR_PREFIX = "web_fetch_";
+var V4_THIS_NETWORK_OCTET = 0;
+var V4_PRIVATE_A_OCTET = 10;
+var V4_LOOPBACK_OCTET = 127;
+var V4_CGNAT_OCTET = 100;
+var V4_CGNAT_SECOND_FROM = 64;
+var V4_CGNAT_SECOND_TO = 127;
+var V4_LINK_LOCAL_OCTET = 169;
+var V4_LINK_LOCAL_SECOND = 254;
+var V4_PRIVATE_B_OCTET = 172;
+var V4_PRIVATE_B_SECOND_FROM = 16;
+var V4_PRIVATE_B_SECOND_TO = 31;
+var V4_PRIVATE_C_OCTET = 192;
+var V4_PRIVATE_C_SECOND = 168;
+var V4_MULTICAST_FROM_OCTET = 224;
+var V6_UNIQUE_LOCAL_FROM = 64512;
+var V6_UNIQUE_LOCAL_TO = 65023;
+var V6_LINK_LOCAL_FROM = 65152;
+var V6_LINK_LOCAL_TO = 65215;
+var V6_MULTICAST_FROM = 65280;
+var IP_VERSION_4 = 4;
+var IP_VERSION_6 = 6;
+var HTTP_MOVED_PERMANENTLY = 301;
+var HTTP_FOUND = 302;
+var HTTP_SEE_OTHER = 303;
+var HTTP_TEMPORARY_REDIRECT = 307;
+var HTTP_PERMANENT_REDIRECT = 308;
+var SUCCESS_STATUS_MAX_EXCLUSIVE3 = 300;
+function refused(errorType, errorMessage2) {
+  return { kind: "refused", errorType: `${ERROR_PREFIX}${errorType}`, errorMessage: errorMessage2 };
+}
+function isPrivateAddress(address) {
+  const version2 = net3.isIP(address);
+  if (version2 === IP_VERSION_4) {
+    const octets = address.split(".").map((part) => Number(part));
+    const first = octets[0] ?? -1;
+    const second = octets[1] ?? -1;
+    if (first === V4_THIS_NETWORK_OCTET || first === V4_PRIVATE_A_OCTET || first === V4_LOOPBACK_OCTET) {
+      return true;
+    }
+    if (first === V4_CGNAT_OCTET && second >= V4_CGNAT_SECOND_FROM && second <= V4_CGNAT_SECOND_TO) {
+      return true;
+    }
+    if (first === V4_LINK_LOCAL_OCTET && second === V4_LINK_LOCAL_SECOND) {
+      return true;
+    }
+    if (first === V4_PRIVATE_B_OCTET && second >= V4_PRIVATE_B_SECOND_FROM && second <= V4_PRIVATE_B_SECOND_TO) {
+      return true;
+    }
+    if (first === V4_PRIVATE_C_OCTET && second === V4_PRIVATE_C_SECOND) {
+      return true;
+    }
+    return first >= V4_MULTICAST_FROM_OCTET;
   }
-  const lines = [];
-  for (const status of statuses) {
-    lines.push(`${status.id}  created ${new Date(status.createdAt).toISOString()}  last seen ${new Date(status.lastSeenAt).toISOString()}`);
-    const worker = status.workerState === void 0 && status.workerIdleSeconds === void 0 ? "not observed" : [
-      status.workerState === void 0 ? "state unknown" : `state ${status.workerState.value} since ${new Date(status.workerState.observedAt).toISOString()}`,
-      status.workerIdleSeconds === void 0 ? "idle unknown" : `idle ${String(status.workerIdleSeconds.value)} s as of ${new Date(status.workerIdleSeconds.observedAt).toISOString()}`
-    ].join(", ");
-    lines.push(`  worker: ${worker}`);
-    if (status.pending.length === 0) {
-      lines.push("  pending: none");
-    } else {
-      lines.push("  pending:");
-      for (const pending of status.pending) {
-        lines.push(...formatRcPendingList([pending]).map((line) => `    ${line}`));
-      }
+  if (version2 === IP_VERSION_6) {
+    const lower = address.toLowerCase();
+    const mapped = /^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/.exec(lower);
+    if (mapped !== null) {
+      return isPrivateAddress(mapped[1] ?? "");
+    }
+    if (lower === "::" || lower === "::1") {
+      return true;
+    }
+    const firstGroup = Number.parseInt(/^([0-9a-f]+):/.exec(lower)?.[1] ?? "0", 16);
+    if (Number.isNaN(firstGroup)) {
+      return true;
+    }
+    if (firstGroup >= V6_UNIQUE_LOCAL_FROM && firstGroup <= V6_UNIQUE_LOCAL_TO) {
+      return true;
+    }
+    if (firstGroup >= V6_LINK_LOCAL_FROM && firstGroup <= V6_LINK_LOCAL_TO) {
+      return true;
     }
+    return firstGroup >= V6_MULTICAST_FROM;
   }
-  return lines;
+  return true;
 }
-function formatRcPendingList(pending) {
-  if (pending.length === 0) {
-    return ["no pending control requests observed"];
-  }
-  return pending.map((request7) => `${request7.sessionId}  ${request7.requestId}  ${request7.type}${request7.summary === "" ? "" : `  ${request7.summary}`}  observed ${new Date(request7.observedAt).toISOString()}`);
+function isSuccessful3(status) {
+  return status >= HTTP_STATUS.ok && status < SUCCESS_STATUS_MAX_EXCLUSIVE3;
 }
-function eventExcerpt(text2) {
-  return text2.length <= RC_PENDING_SUMMARY_EXCERPT_CHARS ? text2 : `${text2.slice(0, RC_PENDING_SUMMARY_EXCERPT_CHARS)}...`;
+function isRedirect(status) {
+  return status === HTTP_MOVED_PERMANENTLY || status === HTTP_FOUND || status === HTTP_SEE_OTHER || status === HTTP_TEMPORARY_REDIRECT || status === HTTP_PERMANENT_REDIRECT;
 }
-var PERCENT_SCALE = 100;
-var MS_PER_SECOND8 = 1e3;
-function percentOf(fraction) {
-  return `${String(Math.round(fraction * PERCENT_SCALE))}%`;
+function readableContentType(contentType) {
+  if (contentType === void 0 || contentType.trim() === "") {
+    return true;
+  }
+  const normalised = contentType.split(";")[0]?.trim().toLowerCase() ?? "";
+  const slash = normalised.indexOf("/");
+  const main2 = slash === -1 ? normalised : normalised.slice(0, slash);
+  const sub = slash === -1 ? "" : normalised.slice(slash + 1);
+  if (main2 === "text") {
+    return true;
+  }
+  return /json|xml|javascript|ecmascript|yaml|csv/.test(sub);
 }
-function resetInstantOf(epochSeconds) {
-  return new Date(epochSeconds * MS_PER_SECOND8).toISOString();
+async function readCapped(chunks) {
+  const collected = [];
+  let total = 0;
+  for await (const chunk of chunks) {
+    total += chunk.byteLength;
+    if (total > RC_WEB_FETCH_MAX_BYTES) {
+      return { tooLarge: true, text: "" };
+    }
+    collected.push(Buffer.from(chunk));
+  }
+  return { tooLarge: false, text: Buffer.concat(collected).toString("utf8") };
 }
-function formatRcRateLimitInfo(info) {
-  const parts = [info.status];
-  if (info.rateLimitType !== void 0) {
-    parts.push(info.rateLimitType);
+async function checkTarget(url2, deps) {
+  if (url2.protocol !== "http:" && url2.protocol !== "https:") {
+    return refused("scheme", `the web-fetch proxy dials http and https only, not ${url2.protocol}`);
   }
-  if (info.utilization !== void 0) {
-    parts.push(percentOf(info.utilization));
+  if (deps.allowPrivate) {
+    return void 0;
   }
-  if (info.resetsAt !== void 0) {
-    parts.push(`resets ${resetInstantOf(info.resetsAt)}`);
+  const hostname3 = url2.hostname.replace(/^\[|\]$/g, "");
+  let addresses;
+  try {
+    addresses = net3.isIP(hostname3) === 0 ? await deps.lookup(hostname3) : [hostname3];
+  } catch {
+    return refused("resolve", `${hostname3} did not resolve`);
   }
-  const windows = [];
-  for (const name of ["five_hour", "seven_day", "seven_day_overage_included"]) {
-    const window = info.unifiedWindows?.[name];
-    if (window === void 0) {
-      continue;
-    }
-    const bits = [];
-    if (window.utilization !== void 0) {
-      bits.push(percentOf(window.utilization));
-    }
-    if (window.resetsAt !== void 0) {
-      bits.push(`resets ${resetInstantOf(window.resetsAt)}`);
+  for (const address of addresses) {
+    if (isPrivateAddress(address)) {
+      return refused("private_address", `${hostname3} resolves to ${address}, a private address this web-fetch proxy refuses; set ${RC_WEB_FETCH_ALLOW_PRIVATE_ENV}=1 on the door if serving internal targets is intended`);
     }
-    windows.push(bits.length === 0 ? name : `${name} ${bits.join(" ")}`);
   }
-  if (windows.length > 0) {
-    parts.push(`windows ${windows.join(", ")}`);
+  return void 0;
+}
+async function fetchThroughWebProxy(url2, deps) {
+  let current;
+  try {
+    current = new URL(url2);
+  } catch {
+    return refused("malformed_url", `${url2} is not a URL this proxy can dial`);
   }
-  if (info.isUsingOverage === true) {
-    parts.push("overage in use");
-  } else if (info.overageStatus !== void 0) {
-    parts.push(`overage ${info.overageStatus}`);
+  const controller = new AbortController();
+  const timer = setTimeout(() => {
+    controller.abort();
+  }, deps.deadlineMs);
+  timer.unref();
+  try {
+    let redirects = 0;
+    for (; ; ) {
+      const refusal = await checkTarget(current, deps);
+      if (refusal !== void 0) {
+        return refusal;
+      }
+      let hop;
+      try {
+        hop = await deps.dial(current, controller.signal);
+      } catch (error62) {
+        if (controller.signal.aborted) {
+          return refused("deadline", `the fetch of ${url2} did not settle within its deadline`);
+        }
+        return refused("transport", `the dial of ${current.toString()} failed: ${error62 instanceof Error ? error62.message : "unknown error"}`);
+      }
+      if (isRedirect(hop.status) && hop.location !== void 0) {
+        if (redirects >= RC_WEB_FETCH_MAX_REDIRECTS) {
+          controller.abort();
+          return refused("too_many_redirects", `${url2} followed more than ${String(RC_WEB_FETCH_MAX_REDIRECTS)} redirects without settling`);
+        }
+        let next;
+        try {
+          next = new URL(hop.location, current);
+        } catch {
+          controller.abort();
+          return refused("malformed_url", `a redirect of ${current.toString()} named ${hop.location}, which is not a URL this proxy can dial`);
+        }
+        const drained = await readCapped(hop.chunks);
+        if (drained.tooLarge) {
+          controller.abort();
+          return refused("too_large", `the body of a redirect from ${url2} exceeds the ${String(RC_WEB_FETCH_MAX_BYTES)} byte cap the CLI's proxy client reads`);
+        }
+        redirects += 1;
+        current = next;
+        continue;
+      }
+      if (!isSuccessful3(hop.status)) {
+        controller.abort();
+        return refused("status", `the target answered HTTP ${String(hop.status)} for ${current.toString()}`);
+      }
+      const contentType = hop.contentType ?? "";
+      if (!readableContentType(contentType)) {
+        controller.abort();
+        return refused("content_type", `the target at ${current.toString()} served a ${contentType} answer, which the proxy's text field cannot carry`);
+      }
+      const read = await readCapped(hop.chunks);
+      if (read.tooLarge) {
+        controller.abort();
+        return refused("too_large", `the body of ${current.toString()} exceeds the ${String(RC_WEB_FETCH_MAX_BYTES)} byte cap the CLI's proxy client reads`);
+      }
+      return { kind: "fetched", url: url2, destinationUrl: current.toString(), contentType: hop.contentType, text: read.text };
+    }
+  } finally {
+    clearTimeout(timer);
   }
-  return parts.join(" ");
 }
-function formatRcStreamEvent(event) {
-  const { envelope } = event;
-  const rateLimit = rcRateLimitInfoOf(event);
-  const sketch = rateLimit !== void 0 ? `  ${formatRcRateLimitInfo(rateLimit)}` : envelope.payload === void 0 ? "" : `  ${eventExcerpt(JSON.stringify(envelope.payload))}`;
-  return `${event.session}  ${envelope.event_type}  sequence_num ${String(envelope.sequence_num)}  source ${envelope.source}${sketch}`;
+function realRcWebFetch(options) {
+  const plainAgent = new ExemptHttpAgent();
+  const tlsAgent = new ExemptTlsAgent();
+  const deps = {
+    dial: async (url2, signal) => await new Promise((resolve, reject) => {
+      const request7 = (url2.protocol === "https:" ? https5 : http6).request(
+        {
+          hostname: url2.hostname,
+          port: url2.port === "" ? void 0 : Number(url2.port),
+          method: "GET",
+          path: `${url2.pathname}${url2.search}`,
+          headers: { accept: "*/*", "accept-encoding": "identity", "user-agent": WEB_FETCH_USER_AGENT },
+          agent: url2.protocol === "https:" ? tlsAgent : plainAgent,
+          signal
+        },
+        (response) => {
+          const location = response.headers.location;
+          resolve({
+            status: response.statusCode ?? 0,
+            location: typeof location === "string" ? location : void 0,
+            contentType: typeof response.headers["content-type"] === "string" ? response.headers["content-type"] : void 0,
+            chunks: response
+          });
+        }
+      );
+      request7.once("error", reject);
+      request7.end();
+    }),
+    lookup: async (hostname3) => (await dns2.promises.lookup(hostname3, { all: true })).map((entry) => entry.address),
+    allowPrivate: options.allowPrivate,
+    deadlineMs: RC_WEB_FETCH_DEADLINE_MS
+  };
+  return async (url2) => await fetchThroughWebProxy(url2, deps);
 }
-function formatRcSelfHostMint(result) {
-  return [
-    `identity:       ${result.identity} (organisation ${result.organizationUuid})`,
-    `credential:     ${result.credentialsFile}${result.replaced ? " (replacing this door's previous mint)" : ""}`,
-    `account block:  ${result.claudeJsonFile} (oauthAccount and the feature-cache seed merged in)`,
-    `door record:    ${result.recordFile} (the copy the door's served surface authenticates against)`,
-    "next:           start the door with AGENT_SHIM_FRONTDOOR_RC_SELF_HOST=1 and its transparent surface pointed at the interception port, then launch this identity and switch Remote Control on; no claude.ai login is involved"
-  ];
+
+// src/frontdoor/rcSelfHost.ts
+var RC_SELF_HOST_ENV = "AGENT_SHIM_FRONTDOOR_RC_SELF_HOST";
+function rcSelfHostFromEnv(env) {
+  return env[RC_SELF_HOST_ENV] === "1";
 }
-function frontDoorRcControlFromState(fsPort, paths) {
-  const state = readFrontDoorState(fsPort, paths.frontdoorStateFile);
-  if (state?.port === void 0) {
-    throw new Error("the front door is not serving: Remote Control sessions are observed only while it runs, so start a session through the door first");
+var RC_SESSIONS_PATH_PREFIX2 = "/v1/code/sessions";
+var RC_COMPAT_SESSIONS_PATH = "/v1/sessions";
+var RC_SESSION_ID_PREFIX2 = "cse_";
+var RC_SELF_HOST_API_BASE_URL = "https://api.anthropic.com";
+var HTTP_CONFLICT = 409;
+var MS_PER_SECOND9 = 1e3;
+var HTTP_SERVICE_UNAVAILABLE2 = 503;
+var RC_SELF_HOST_WORKER_JWT_TTL_SECONDS = 46800;
+var RC_SELF_HOST_KEEPALIVE_MS = 15e3;
+var RC_SELF_HOST_RETENTION_MS = 6e5;
+var RC_PRESENCE_REFRESH_SECONDS = 60;
+var RC_SELF_HOST_MAX_BATCH_EVENTS = 100;
+var RC_SELF_HOST_WORKER_EPOCH = 1;
+var RC_STREAM_EVENT_NAME = "client_event";
+var CONFLICT_REASON_HEADER2 = "x-ccr-conflict-reason";
+var CONFLICT_REASON_EPOCH_STALE = "epoch_stale";
+function isRecord10(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function isWebSearchRefusal(value2) {
+  return !Array.isArray(value2);
+}
+function nonEmptyString4(record2, field) {
+  const value2 = record2 === void 0 ? void 0 : record2[field];
+  return typeof value2 === "string" && value2 !== "" ? value2 : void 0;
+}
+function numberOf2(record2, field) {
+  const value2 = record2 === void 0 ? void 0 : record2[field];
+  if (typeof value2 === "number" && Number.isFinite(value2)) {
+    return value2;
   }
-  const ca = fsPort.readFileUtf8(paths.frontdoorCaCertFile);
-  if (ca === void 0) {
-    throw new Error(`the front door's CA certificate is missing at ${paths.frontdoorCaCertFile}, so its control listener cannot be authenticated`);
+  if (typeof value2 === "string" && /^[0-9]+$/.test(value2)) {
+    return Number(value2);
   }
-  const token = fsPort.readFileUtf8(paths.frontdoorControlTokenFile)?.trim();
-  if (token === void 0 || token === "") {
-    throw new Error(`the serving front door's control token is missing at ${paths.frontdoorControlTokenFile}`);
+  return void 0;
+}
+function stringArray(record2, field) {
+  const value2 = record2 === void 0 ? void 0 : record2[field];
+  if (!Array.isArray(value2)) {
+    return void 0;
   }
-  return frontDoorRcControl(realRcControlTransport(state.port, ca), token);
+  const members2 = [];
+  for (const member of value2) {
+    if (typeof member !== "string") {
+      return void 0;
+    }
+    members2.push(member);
+  }
+  return members2;
 }
-function frontDoorRcApiFromState(fsPort, paths) {
-  const state = readFrontDoorState(fsPort, paths.frontdoorStateFile);
-  if (state?.port === void 0) {
-    throw new Error("the front door is not serving: Remote Control sessions are observed only while it runs, so start a session through the door first");
+function singleHeader2(headers, name) {
+  const value2 = headers[name];
+  return typeof value2 === "string" ? value2 : void 0;
+}
+function bearerOf(headers) {
+  const presented = singleHeader2(headers, "authorization");
+  if (presented === void 0) {
+    return void 0;
   }
-  const ca = fsPort.readFileUtf8(paths.frontdoorCaCertFile);
-  if (ca === void 0) {
-    throw new Error(`the front door's CA certificate is missing at ${paths.frontdoorCaCertFile}, so its typed API cannot be authenticated`);
+  return presented.slice(0, "bearer ".length).toLowerCase() === "bearer " ? presented.slice("bearer ".length) : void 0;
+}
+function presentationRefusal(headers) {
+  const presented = singleHeader2(headers, "authorization");
+  if (presented === void 0) {
+    return "absent";
   }
-  const token = fsPort.readFileUtf8(paths.frontdoorControlTokenFile)?.trim();
-  if (token === void 0 || token === "") {
-    throw new Error(`the serving front door's control token is missing at ${paths.frontdoorControlTokenFile}`);
+  if (presented.slice(0, "bearer ".length).toLowerCase() !== "bearer ") {
+    return "not-a-bearer";
   }
-  return frontDoorRcApiClient(state.port, ca, token);
+  const bearer = presented.slice("bearer ".length);
+  return bearer.slice(0, "bearer ".length).toLowerCase() === "bearer " ? "doubled-scheme-word" : "unrecognised";
 }
-function registerRcCommand(frontdoor, paths) {
-  const rc = withExamples(
-    frontdoor.command("rc").description("Observe the Remote Control sessions passing through the front door, watch the stream their attached client receives, send a prompt into one, answer its pending control requests, and steer one with the client half's own control requests (interrupt, model, permission mode, end-session, the usage and context queries, read-file, file-suggestions, keep-alive, and the mcp_* family)."),
-    ["agent-shim frontdoor rc list", "agent-shim frontdoor rc pending"]
-  );
-  withExamples(
-    rc.command("list").description("List the Remote Control sessions the front door has observed, with when each was created and last seen. Read-only.").option("--json", "Print the sessions as JSON.").action(async (options) => {
-      const sessions = await frontDoorRcControlFromState(realFarmFs, paths).listSessions();
-      if (options.json === true) {
-        printJson({ sessions });
+async function readBody3(request7, capBytes) {
+  return await new Promise((resolve, reject) => {
+    const chunks = [];
+    let total = 0;
+    request7.on("data", (chunk) => {
+      total += chunk.length;
+      if (total > capBytes) {
+        request7.destroy();
+        reject(new Error("body too large"));
         return;
       }
-      for (const line of formatRcSessionList(sessions)) {
-        console.log(line);
+      chunks.push(chunk);
+    });
+    request7.on("end", () => {
+      resolve(Buffer.concat(chunks).toString("utf8"));
+    });
+    request7.on("error", () => {
+      reject(new Error("the request body ended early"));
+    });
+  });
+}
+function parseJsonObject5(body) {
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return void 0;
+  }
+  return isRecord10(parsed) ? parsed : void 0;
+}
+function mintWorkerJwt(randomToken, issuedAt) {
+  const encode3 = (value2) => Buffer.from(JSON.stringify(value2), "utf8").toString("base64url");
+  const header = encode3({ alg: "HS256", typ: "JWT" });
+  const payload = encode3({ exp: Math.floor((issuedAt + RC_SELF_HOST_WORKER_JWT_TTL_SECONDS * MS_PER_SECOND9) / MS_PER_SECOND9), iat: Math.floor(issuedAt / MS_PER_SECOND9) });
+  return `${header}.${payload}.${Buffer.from(randomToken(), "utf8").toString("base64url")}`;
+}
+function createRcSelfHostSurface(deps) {
+  const sessions = /* @__PURE__ */ new Map();
+  const conversations = /* @__PURE__ */ new Map();
+  const retireSession = (session) => {
+    for (const sink of [...session.conversation.workerStreams, ...session.conversation.clientStreams]) {
+      if (sink.owner === session.id) {
+        sink.retire();
       }
-    }),
-    ["agent-shim frontdoor rc list", "agent-shim frontdoor rc list --json"]
-  );
-  withExamples(
-    rc.command("status").description("Report each observed Remote Control session's worker state and idle from its latest observed heartbeat and registration, with its pending control requests. Read-only.").argument("[session]", "One cse_ session id, as `frontdoor rc list` shows it; every observed session when omitted.").option("--json", "Print the statuses as JSON.").action(async (session, options) => {
-      const statuses = await frontDoorRcControlFromState(realFarmFs, paths).statusOf(session);
-      if (options.json === true) {
-        printJson({ statuses });
-        return;
+    }
+    session.conversation.sessionIds.delete(session.id);
+    sessions.delete(session.id);
+  };
+  const sweep = () => {
+    const now = deps.now();
+    for (const session of sessions.values()) {
+      for (const [clientId, lastSeenAt] of session.clients) {
+        if (now - lastSeenAt > RC_SELF_HOST_RETENTION_MS) {
+          session.clients.delete(clientId);
+        }
       }
-      for (const line of formatRcSessionStatus(statuses)) {
-        console.log(line);
+      const holdsStream = [...session.conversation.workerStreams, ...session.conversation.clientStreams].some((sink) => sink.owner === session.id);
+      if (!holdsStream && now - session.lastTrafficAt > RC_SELF_HOST_RETENTION_MS) {
+        retireSession(session);
       }
-    }),
-    ["agent-shim frontdoor rc status", "agent-shim frontdoor rc status cse_00000000-0000-4000-8000-000000000000 --json"]
-  );
-  withExamples(
-    rc.command("pending").description("List the control requests (tool and plan approvals above all) the front door has observed and that are still awaiting an answer. Read-only.").argument("[session]", "One cse_ session id, as `frontdoor rc list` shows it; every observed session when omitted.").option("--json", "Print the pending requests as JSON.").action(async (session, options) => {
-      const pending = await frontDoorRcControlFromState(realFarmFs, paths).pendingOf(session);
-      if (options.json === true) {
-        printJson({ pending });
+    }
+    for (const conversation of conversations.values()) {
+      while (conversation.events[0] !== void 0 && now - conversation.events[0].storedAt > RC_SELF_HOST_RETENTION_MS) {
+        const dropped = conversation.events.shift();
+        const uuid3 = dropped === void 0 ? void 0 : nonEmptyString4(dropped.payload, "uuid");
+        if (uuid3 !== void 0) {
+          conversation.seenPayloadUuids.delete(uuid3);
+        }
+      }
+      for (const [clientId, lastSeenAt] of conversation.clients) {
+        if (now - lastSeenAt > RC_SELF_HOST_RETENTION_MS) {
+          conversation.clients.delete(clientId);
+        }
+      }
+      if (conversation.sessionIds.size === 0 && conversation.workerStreams.size === 0 && conversation.clientStreams.size === 0 && now - conversation.lastTrafficAt > RC_SELF_HOST_RETENTION_MS) {
+        conversations.delete(conversation.id);
+      }
+    }
+  };
+  const timer = setInterval(sweep, RC_SELF_HOST_RETENTION_MS);
+  timer.unref();
+  const keepalive = setInterval(() => {
+    for (const conversation of conversations.values()) {
+      for (const sink of [...conversation.workerStreams, ...conversation.clientStreams]) {
+        sink.write(": keep-alive\n\n");
+      }
+    }
+  }, RC_SELF_HOST_KEEPALIVE_MS);
+  keepalive.unref();
+  const presentsCredential = (headers) => {
+    const expected = deps.credentialRecord()?.accessToken;
+    const presented = bearerOf(headers);
+    return expected !== void 0 && presented !== void 0 && isLiveCapability(presented, [expected]);
+  };
+  const presentsWorkerJwt = (headers, session) => {
+    const presented = bearerOf(headers);
+    if (presented === void 0) {
+      return false;
+    }
+    for (const minted of session.workerJwts) {
+      if (isLiveCapability(presented, [minted])) {
+        return true;
+      }
+    }
+    return false;
+  };
+  const credentialRefusal = (headers) => presentsCredential(headers) ? void 0 : presentationRefusal(headers);
+  const workerRefusal = (headers, session) => presentsWorkerJwt(headers, session) ? void 0 : presentationRefusal(headers);
+  const workerOrCredentialRefusal = (headers, session) => presentsWorkerJwt(headers, session) || presentsCredential(headers) ? void 0 : presentationRefusal(headers);
+  const frameOf = (event) => {
+    const envelope = {
+      event_id: event.eventId,
+      event_type: nonEmptyString4(event.payload, "type") ?? "event",
+      sequence_num: event.sequenceNum,
+      source: event.source,
+      payload: event.payload,
+      created_at: event.createdAt
+    };
+    return `event: ${RC_STREAM_EVENT_NAME}
+id: ${String(event.sequenceNum)}
+data: ${JSON.stringify(envelope)}
+
+`;
+  };
+  const reachesWorkerStream = (event, owner) => !(event.writer.half === "worker" && event.writer.session === owner);
+  const holdStream = async (conversation, owner, which, wantsReplay, request7, response) => {
+    const url2 = new URL(request7.url, "http://127.0.0.1");
+    const cursor3 = numberOf2({ value: url2.searchParams.get("from_sequence_num") }, "value") ?? numberOf2({ value: singleHeader2(request7.headers, "last-event-id") }, "value");
+    const replay = cursor3 === void 0 ? [] : conversation.events.filter((event) => wantsReplay(event) && event.sequenceNum > cursor3);
+    response.start(HTTP_STATUS.ok, { "content-type": "text/event-stream", "cache-control": "no-cache" });
+    response.flush();
+    let pending = Promise.resolve();
+    const sink = {
+      owner,
+      write: (frame) => {
+        pending = pending.then(async () => {
+          await response.write(frame);
+        }).catch(() => {
+        });
+      },
+      retire: () => {
+        conversation[which].delete(sink);
+      }
+    };
+    conversation[which].add(sink);
+    conversation.lastTrafficAt = deps.now();
+    for (const event of replay) {
+      sink.write(frameOf(event));
+    }
+    await new Promise((resolve) => {
+      request7.signal.addEventListener("abort", () => {
+        resolve(void 0);
+      }, { once: true });
+    });
+    sink.retire();
+    response.end();
+  };
+  const publish = (conversation, writer, source, payload) => {
+    const uuid3 = nonEmptyString4(payload, "uuid");
+    const duplicate = uuid3 !== void 0 && conversation.seenPayloadUuids.has(uuid3);
+    conversation.sequenceNum += 1;
+    const event = {
+      sequenceNum: conversation.sequenceNum,
+      eventId: uuid3 ?? deps.newUuid(),
+      source,
+      // The one enrichment the real service was observed making on the live rig's stream: the wall-clock instant it took the write. The worker's handler ignores it; the door's own parser forwards it verbatim.
+      payload: source === RC_SOURCE_WORKER ? payload : { ...payload, server_received_wall_ms: deps.now() },
+      createdAt: new Date(deps.now()).toISOString(),
+      writer,
+      storedAt: deps.now()
+    };
+    conversation.events.push(event);
+    if (uuid3 !== void 0) {
+      conversation.seenPayloadUuids.add(uuid3);
+    }
+    conversation.lastTrafficAt = event.storedAt;
+    const frame = frameOf(event);
+    for (const sink of [...conversation.workerStreams]) {
+      if (reachesWorkerStream(event, sink.owner)) {
+        sink.write(frame);
+      }
+    }
+    for (const sink of [...conversation.clientStreams]) {
+      sink.write(frame);
+    }
+    return { sequenceNum: event.sequenceNum, eventId: event.eventId, duplicate };
+  };
+  const sessionRow = (session) => ({ id: session.id, title: session.title, created_at: new Date(session.createdAt).toISOString(), status: "active", conversation_id: session.conversation.id });
+  const answerJson2 = async (response, status, body, extraHeaders = {}) => {
+    const text2 = JSON.stringify(body);
+    response.start(status, { "content-type": "application/json", "content-length": String(Buffer.byteLength(text2, "utf8")), ...extraHeaders });
+    await response.write(text2);
+    response.end();
+  };
+  const noCredential = async (response) => {
+    await answerJson2(response, HTTP_SERVICE_UNAVAILABLE2, { type: "error", error: { type: "api_error", message: "the front door's self-hosted Remote Control surface is on but no credential has been minted for it; run agent-shim frontdoor rc selfhost mint first" } });
+  };
+  const epochStale = async (response) => {
+    await answerJson2(response, HTTP_CONFLICT, { type: "error", error: { type: "api_error", message: "worker_epoch does not match the session's live epoch" } }, { [CONFLICT_REASON_HEADER2]: CONFLICT_REASON_EPOCH_STALE });
+  };
+  const refusalMessages = {
+    absent: "the self-hosted Remote Control surface authenticates by the Authorization header, and this call carried none",
+    "not-a-bearer": "the self-hosted Remote Control surface reads a Bearer authorization, and this call's Authorization header did not carry the Bearer scheme word",
+    "doubled-scheme-word": "the self-hosted Remote Control surface reads one Bearer scheme word, and this call's Authorization header carried it twice: a persisted session record holds the whole header value with the scheme word included, so prefixing Bearer onto it presents a different credential",
+    unrecognised: "the self-hosted Remote Control surface did not recognise the presented credential"
+  };
+  const unauthorized = async (response, refusal) => {
+    await answerJson2(response, HTTP_STATUS.unauthorized, { type: "error", error: { type: "authentication_error", message: refusalMessages[refusal] } });
+  };
+  const serveSessionPath = async (session, tail, request7, response) => {
+    const method = request7.method.toUpperCase();
+    if (session === void 0) {
+      await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: "no such Remote Control session on this door" } });
+      return;
+    }
+    session.lastTrafficAt = deps.now();
+    if (tail === "") {
+      if (method === "PATCH" || method === "PUT") {
+        const refusal = credentialRefusal(request7.headers);
+        if (refusal !== void 0) {
+          await unauthorized(response, refusal);
+          return;
+        }
+        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const title = nonEmptyString4(body, "title");
+        if (title === void 0) {
+          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a session update is JSON naming a non-empty title" } });
+          return;
+        }
+        session.title = title;
+        session.lastTrafficAt = deps.now();
+        deps.log?.(`rc selfhost ${session.id}: retitled at its client's request`);
+        await answerJson2(response, HTTP_STATUS.ok, {});
         return;
       }
-      for (const line of formatRcPendingList(pending)) {
-        console.log(line);
-      }
-    }),
-    ["agent-shim frontdoor rc pending", "agent-shim frontdoor rc pending --json"]
-  );
-  withExamples(
-    rc.command("send").description("Send a text prompt into one observed Remote Control session, arriving as a message from an attached client would.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--text <text>", "The prompt text to deliver.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      const result = await frontDoorRcControlFromState(realFarmFs, paths).sendPrompt(options.session, options.text);
-      if (!result.ok) {
-        throw new Error(result.message);
-      }
-      if (options.json === true) {
-        printJson({ session: options.session, sequenceNums: result.sequenceNums });
+      if (method !== "GET") {
+        await answerJson2(response, HTTP_STATUS.methodNotAllowed, { type: "error", error: { type: "api_error", message: "the session read is a GET, and its update a PATCH or PUT" } });
         return;
       }
-      console.log(`sent to ${options.session}: sequence_num ${result.sequenceNums.join(", ")}`);
-    }),
-    ['agent-shim frontdoor rc send --session cse_00000000-0000-4000-8000-000000000000 --text "run the tests"']
-  );
-  withExamples(
-    rc.command("answer").description("Answer one pending control request on an observed session, approving or denying it as an attached client's approval would.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--request <id>", "The control request's id, as `frontdoor rc pending` shows it.").option("--approve", "Approve the request.").option("--deny", "Deny the request.").option("--text <text>", "The denial message the worker sees; applies to --deny only.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      if (options.approve === options.deny) {
-        throw new UsageError("answer exactly one way: pass --approve or --deny, not both and not neither");
-      }
-      if (options.approve === true && options.text !== void 0) {
-        throw new UsageError("--text is the denial message; an approval carries no text (the protocol's allow result has no message field)");
+      await answerJson2(response, HTTP_STATUS.ok, { session: sessionRow(session) });
+      return;
+    }
+    if (tail === "bridge" && method === "POST") {
+      const refusal = credentialRefusal(request7.headers);
+      if (refusal !== void 0) {
+        await unauthorized(response, refusal);
+        return;
       }
-      const result = await frontDoorRcControlFromState(realFarmFs, paths).answerRequest(options.session, options.request, { approve: options.approve === true, message: options.deny === true ? options.text : void 0 });
-      if (!result.ok) {
-        throw new Error(result.message);
+      const workerJwt = mintWorkerJwt(deps.randomToken, deps.now());
+      session.workerJwts.add(workerJwt);
+      deps.log?.(`rc selfhost ${session.id}: bridge registration minted a worker credential`);
+      await answerJson2(response, HTTP_STATUS.ok, { worker_jwt: workerJwt, expires_in: RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, api_base_url: RC_SELF_HOST_API_BASE_URL, worker_epoch: RC_SELF_HOST_WORKER_EPOCH });
+      return;
+    }
+    if (tail === "archive" && method === "POST") {
+      const refusal = credentialRefusal(request7.headers);
+      if (refusal !== void 0) {
+        await unauthorized(response, refusal);
+        return;
       }
-      if (options.json === true) {
-        printJson({ session: options.session, request: options.request, sequenceNums: result.sequenceNums });
+      retireSession(session);
+      deps.log?.(`rc selfhost ${session.id}: archived at its client's request`);
+      await answerJson2(response, HTTP_STATUS.ok, {});
+      return;
+    }
+    if (tail === "worker" || tail.startsWith("worker/")) {
+      const workerTail = tail === "worker" ? "" : tail.slice("worker/".length);
+      const webProxy = workerTail === "web-fetch" || workerTail === "web-search";
+      const refusal = webProxy ? workerOrCredentialRefusal(request7.headers, session) : workerRefusal(request7.headers, session);
+      if (refusal !== void 0) {
+        await unauthorized(response, refusal);
         return;
       }
-      console.log(`${options.approve === true ? "approved" : "denied"} ${options.request} on ${options.session}: sequence_num ${result.sequenceNums.join(", ")}`);
-    }),
-    [
-      "agent-shim frontdoor rc answer --session cse_00000000-0000-4000-8000-000000000000 --request req_00000000-0000-4000-8000-000000000000 --approve",
-      'agent-shim frontdoor rc answer --session cse_00000000-0000-4000-8000-000000000000 --request req_00000000-0000-4000-8000-000000000000 --deny --text "not today"'
-    ]
-  );
-  withExamples(
-    rc.command("interrupt").description("Interrupt one observed Remote Control session's running turn, as an attached client's stop button would. Queued commands survive the interrupt.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      reportControlWrite("interrupted", options.session, await frontDoorRcControlFromState(realFarmFs, paths).interruptSession(options.session), options.json);
-    }),
-    ["agent-shim frontdoor rc interrupt --session cse_00000000-0000-4000-8000-000000000000"]
-  );
-  withExamples(
-    rc.command("set-model").description("Set the model one observed Remote Control session's subsequent turns use, as an attached client's model picker would.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--model <model>", "The model id to switch the session to.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      reportControlWrite(`set model ${options.model}`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).setModel(options.session, options.model), options.json, { model: options.model });
-    }),
-    ["agent-shim frontdoor rc set-model --session cse_00000000-0000-4000-8000-000000000000 --model claude-opus-5-5"]
-  );
-  withExamples(
-    rc.command("set-permission-mode").description("Set one observed Remote Control session's permission mode, as an attached client's mode switcher would.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--mode <mode>", `The permission mode to set; one of the SDK's own modes (${RC_PERMISSION_MODES.join(", ")}).`).option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      if (!isRcPermissionMode(options.mode)) {
-        throw new UsageError(`--mode must be one of the SDK's own permission modes (${RC_PERMISSION_MODES.join(", ")}), not "${options.mode}"`);
+      if (workerTail === "" && method === "GET") {
+        await answerJson2(response, HTTP_STATUS.ok, { worker: { external_metadata: session.externalMetadata ?? null } });
+        return;
       }
-      reportControlWrite(`set permission mode ${options.mode}`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).setPermissionMode(options.session, options.mode), options.json, { mode: options.mode });
-    }),
-    [
-      "agent-shim frontdoor rc set-permission-mode --session cse_00000000-0000-4000-8000-000000000000 --mode plan",
-      "agent-shim frontdoor rc set-permission-mode --session cse_00000000-0000-4000-8000-000000000000 --mode acceptEdits"
-    ]
-  );
-  withExamples(
-    rc.command("end-session").description("End one observed Remote Control session, as an attached client closing it would: the worker aborts its turn and shuts down on receipt of the request.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--reason <text>", "The reason the worker's own log names; omitted means the protocol's unspecified form.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      reportControlWrite("ended", options.session, await frontDoorRcControlFromState(realFarmFs, paths).endSession(options.session, options.reason), options.json);
-    }),
-    ["agent-shim frontdoor rc end-session --session cse_00000000-0000-4000-8000-000000000000 --reason done for today"]
-  );
-  withExamples(
-    rc.command("get-usage").description("Ask one observed session's worker for its structured usage (session totals plus the plan's rate limits). The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--skip-behaviors", "Skip the worker's local-transcript scan that fills the answer's behaviours section.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      reportControlWrite("requested usage", options.session, await frontDoorRcControlFromState(realFarmFs, paths).getUsage(options.session, options.skipBehaviors === true ? true : void 0), options.json);
-    }),
-    ["agent-shim frontdoor rc get-usage --session cse_00000000-0000-4000-8000-000000000000 --skip-behaviors"]
-  );
-  withExamples(
-    rc.command("get-context-usage").description("Ask one observed session's worker for its context-window breakdown by category. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--detail <level>", `The detail level; one of the SDK's own levels (${RC_CONTEXT_USAGE_DETAILS.join(", ")}); the worker defaults to full.`).option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      if (options.detail !== void 0 && !isRcContextUsageDetail(options.detail)) {
-        throw new UsageError(`--detail must be one of the SDK's own context-usage levels (${RC_CONTEXT_USAGE_DETAILS.join(", ")}), not "${options.detail}"`);
+      if (workerTail === "" && method === "PUT") {
+        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const claimedEpoch = numberOf2(body, "worker_epoch");
+        if (claimedEpoch !== void 0 && claimedEpoch !== RC_SELF_HOST_WORKER_EPOCH) {
+          await epochStale(response);
+          return;
+        }
+        const status = nonEmptyString4(body, "worker_status");
+        if (status !== void 0) {
+          session.workerStatus = status;
+        }
+        if (isRecord10(body?.external_metadata)) {
+          session.externalMetadata = body.external_metadata;
+        }
+        await answerJson2(response, HTTP_STATUS.ok, {});
+        return;
       }
-      reportControlWrite("requested context usage", options.session, await frontDoorRcControlFromState(realFarmFs, paths).getContextUsage(options.session, options.detail), options.json);
-    }),
-    ["agent-shim frontdoor rc get-context-usage --session cse_00000000-0000-4000-8000-000000000000 --detail summary"]
-  );
-  withExamples(
-    rc.command("read-file").description("Ask one observed session's worker to read one file from the session filesystem, gated by its own read-permission rules. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--path <path>", "The file's path, as the worker resolves it against the session's cwd.").option("--max-bytes <n>", "The byte cap on the read, a positive whole number.").option("--encoding <encoding>", `How the answer encodes the contents; one of the SDK's own encodings (${RC_READ_FILE_ENCODINGS.join(", ")}).`).option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      if (options.maxBytes !== void 0 && !/^[1-9][0-9]*$/.test(options.maxBytes)) {
-        throw new UsageError(`--max-bytes must be a positive whole number of bytes, not "${options.maxBytes}"`);
+      if (workerTail === "register" && method === "POST") {
+        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
+        await answerJson2(response, HTTP_STATUS.ok, { worker_epoch: RC_SELF_HOST_WORKER_EPOCH });
+        return;
       }
-      if (options.encoding !== void 0 && !isRcReadFileEncoding(options.encoding)) {
-        throw new UsageError(`--encoding must be one of the SDK's own read-file encodings (${RC_READ_FILE_ENCODINGS.join(", ")}), not "${options.encoding}"`);
+      if (workerTail === "heartbeat" && method === "POST") {
+        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
+        await answerJson2(response, HTTP_STATUS.ok, {});
+        return;
       }
-      reportControlWrite(`requested a read of ${options.path}`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).readFile(options.session, options.path, { ...options.maxBytes === void 0 ? {} : { maxBytes: Number(options.maxBytes) }, ...options.encoding === void 0 ? {} : { encoding: options.encoding } }), options.json, { path: options.path });
-    }),
-    [
-      "agent-shim frontdoor rc read-file --session cse_00000000-0000-4000-8000-000000000000 --path src/index.ts",
-      "agent-shim frontdoor rc read-file --session cse_00000000-0000-4000-8000-000000000000 --path screenshot.png --encoding base64 --max-bytes 65536"
-    ]
-  );
-  withExamples(
-    rc.command("file-suggestions").description("Ask one observed session's worker for its at-mention file suggestions for a partial path prefix, the same fuzzy-matched results the TUI shows. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--query <prefix>", "The partial path prefix to fuzzy-match; the empty string is the root listing.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      reportControlWrite(`requested file suggestions for "${options.query}"`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).fileSuggestions(options.session, options.query), options.json);
-    }),
-    ['agent-shim frontdoor rc file-suggestions --session cse_00000000-0000-4000-8000-000000000000 --query "src/frontdoor/rc"']
-  );
-  withExamples(
-    rc.command("keep-alive").description("Send one liveness heartbeat into an observed session: the payload every receiver ignores by its own contract, useful to keep the client half's stream warm without saying anything.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      reportControlWrite("sent a keep-alive", options.session, await frontDoorRcControlFromState(realFarmFs, paths).keepAlive(options.session), options.json);
-    }),
-    ["agent-shim frontdoor rc keep-alive --session cse_00000000-0000-4000-8000-000000000000"]
-  );
-  withExamples(
-    rc.command("mcp-status").description("Ask one observed session's worker for the status of its MCP server connections. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      reportControlWrite("requested MCP status", options.session, await frontDoorRcControlFromState(realFarmFs, paths).mcpStatus(options.session), options.json);
-    }),
-    ["agent-shim frontdoor rc mcp-status --session cse_00000000-0000-4000-8000-000000000000"]
-  );
-  withExamples(
-    rc.command("mcp-reconnect").description("Ask one observed session's worker to reconnect one MCP server, named exactly as `mcp-status` reports it.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--server <name>", "The MCP server's name, as `mcp-status` reports it.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      reportControlWrite(`requested a reconnect of MCP server ${options.server}`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).mcpReconnect(options.session, options.server), options.json);
-    }),
-    ["agent-shim frontdoor rc mcp-reconnect --session cse_00000000-0000-4000-8000-000000000000 --server github"]
-  );
-  withExamples(
-    rc.command("mcp-authenticate").description("Start one MCP server's OAuth handshake on an observed session, naming the redirect URI the flow redirects back to. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--server <name>", "The MCP server's name, as `mcp-status` reports it.").requiredOption("--redirect-uri <uri>", "The URI the server's OAuth flow redirects back to.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      reportControlWrite(`requested authentication of MCP server ${options.server}`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).mcpAuthenticate(options.session, options.server, options.redirectUri), options.json);
-    }),
-    ["agent-shim frontdoor rc mcp-authenticate --session cse_00000000-0000-4000-8000-000000000000 --server github --redirect-uri https://example.com/oauth/callback"]
-  );
-  withExamples(
-    rc.command("mcp-oauth-callback-url").description("Hand one MCP server's OAuth callback URL to an observed session's worker, completing the handshake `mcp-authenticate` started. The worker's answer arrives on `frontdoor rc watch` as the control_response echoing the printed request id.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--server <name>", "The MCP server's name, as `mcp-status` reports it.").requiredOption("--callback-url <url>", "The callback URL the browser landed on.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      reportControlWrite(`handed MCP server ${options.server} its OAuth callback`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).mcpOAuthCallbackUrl(options.session, options.server, options.callbackUrl), options.json);
-    }),
-    ["agent-shim frontdoor rc mcp-oauth-callback-url --session cse_00000000-0000-4000-8000-000000000000 --server github --callback-url https://example.com/oauth/callback?code=x"]
-  );
-  withExamples(
-    rc.command("teleport").description("Send one teleport marker into an observed session over the teleport-events channel, the write half the cloud UI's ultrapan path owns on the real service. The marker rides the SDK user-message shape, the line the teleport relay anchors on.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--marker <text>", "The marker text, the string content the teleport relay anchors on.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
-      reportControlWrite(`teleported a marker into the session`, options.session, await frontDoorRcControlFromState(realFarmFs, paths).teleport(options.session, options.marker), options.json, { marker: options.marker });
-    }),
-    ['agent-shim frontdoor rc teleport --session cse_00000000-0000-4000-8000-000000000000 --marker "__ULTRAPAN_TELEPORT_LOCAL__"']
-  );
-  withExamples(
-    rc.command("watch").description("Print the observed sessions' client read stream events as they arrive, the approvals the door's held stream receives above all, with each rate_limit_event rendered as the account's quota state. Read-only, until Ctrl-C leaves.").argument("[session]", "One cse_ session id, as `frontdoor rc list` shows it; every observed session when omitted.").option("--json", "Print each event as one JSON line as it arrives.").action(async (session, options) => {
-      const client = frontDoorRcApiFromState(realFarmFs, paths);
-      const leave = new AbortController();
-      const onInterrupt = () => {
-        leave.abort();
-      };
-      process.once("SIGINT", onInterrupt);
-      try {
-        for await (const event of await client.rc.subscribe(session === void 0 ? {} : { session }, { signal: leave.signal })) {
-          if (options.json === true) {
-            console.log(JSON.stringify(event));
-            continue;
-          }
-          console.log(formatRcStreamEvent(event));
+      if (workerTail === "events" && method === "POST") {
+        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const claimedEpoch = numberOf2(body, "worker_epoch");
+        if (claimedEpoch !== void 0 && claimedEpoch !== RC_SELF_HOST_WORKER_EPOCH) {
+          await epochStale(response);
+          return;
         }
-      } catch (error62) {
-        if (!leave.signal.aborted) {
-          throw error62;
+        const events = body?.events;
+        if (!Array.isArray(events) || events.length === 0 || events.length > RC_SELF_HOST_MAX_BATCH_EVENTS) {
+          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: `a worker event batch is a non-empty array of at most ${String(RC_SELF_HOST_MAX_BATCH_EVENTS)} events` } });
+          return;
         }
-      } finally {
-        process.off("SIGINT", onInterrupt);
-      }
-    }),
-    ["agent-shim frontdoor rc watch", "agent-shim frontdoor rc watch cse_00000000-0000-4000-8000-000000000000 --json"]
-  );
-  const selfhost = withExamples(
-    rc.command("selfhost").description("Mint the local credential behind the door's self-hosted Remote Control surface: the opt-in mode (AGENT_SHIM_FRONTDOOR_RC_SELF_HOST=1 in the door's environment) where the door serves the CCR surface itself and a session activates Remote Control with no Anthropic credential anywhere."),
-    ["agent-shim frontdoor rc selfhost mint rig"]
-  );
-  withExamples(
-    selfhost.command("mint").description("Mint the local OAuth credential, account block and feature-cache seed one identity needs to activate Remote Control against the door's own served surface, and record the door-side copy the surface authenticates against. Refuses to replace a real claude.ai login unless --force. Never prints a token.").argument("<identity>", "The identity to mint into, as `agent-shim identity list` names it.").option("--force", "Replace an existing OAuth credential this door did not mint.").option("--json", "Print the mint result as JSON.").action((identity, options) => {
-      const result = mintRcSelfHostCredential({
-        fs: realFarmFs,
-        identitiesDir: paths.identitiesDir,
-        frontdoorDir: paths.frontdoorDir,
-        identity,
-        newUuid: import_node_crypto14.randomUUID,
-        randomToken: () => (0, import_node_crypto14.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
-        force: options.force === true,
-        now: () => Date.now()
-      });
-      if (options.json === true) {
-        printJson(result);
+        const results = [];
+        for (const event of events) {
+          if (!isRecord10(event) || !isRecord10(event.payload)) {
+            await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a batch is an object carrying one payload object" } });
+            return;
+          }
+          const published = publish(session.conversation, { session: session.id, half: "worker" }, RC_SOURCE_WORKER, event.payload);
+          results.push({ event_id: published.eventId, sequence_num: String(published.sequenceNum) });
+        }
+        sweep();
+        await answerJson2(response, HTTP_STATUS.ok, { results });
         return;
       }
-      for (const line of formatRcSelfHostMint(result)) {
-        console.log(line);
+      if (workerTail === "events/stream" && method === "GET") {
+        await holdStream(session.conversation, session.id, "workerStreams", (event) => reachesWorkerStream(event, session.id), request7, response);
+        return;
       }
-    }),
-    ["agent-shim frontdoor rc selfhost mint rig", "agent-shim frontdoor rc selfhost mint rig --force"]
-  );
-}
-
-// src/frontdoor/rcCredentialStore.ts
-var import_node_path35 = __toESM(require("node:path"), 1);
-function isSafeSessionId(sessionId) {
-  return /^[A-Za-z0-9_-]+$/.test(sessionId);
-}
-function isRecord8(value2) {
-  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
-}
-function credentialOfJson(parsed) {
-  if (!isRecord8(parsed)) {
-    return void 0;
-  }
-  const { authorization, anthropicVersion, anthropicClientPlatform } = parsed;
-  if (typeof authorization !== "string" || authorization === "") {
-    return void 0;
-  }
-  return {
-    authorization,
-    anthropicVersion: typeof anthropicVersion === "string" ? anthropicVersion : void 0,
-    anthropicClientPlatform: typeof anthropicClientPlatform === "string" ? anthropicClientPlatform : void 0
-  };
-}
-function sequenceNumOfJson(value2) {
-  return typeof value2 === "number" && Number.isInteger(value2) && value2 >= 0 ? value2 : void 0;
-}
-function createRcCredentialStore(fs20, dir) {
-  fs20.mkdirPrivate(dir);
-  const fileFor = (sessionId) => import_node_path35.default.join(dir, `${sessionId}.json`);
-  const readParsed = (sessionId) => {
-    const raw = fs20.readFileUtf8(fileFor(sessionId));
-    if (raw === void 0) {
-      return void 0;
-    }
-    let parsed;
-    try {
-      parsed = JSON.parse(raw);
-    } catch {
-      return void 0;
-    }
-    return isRecord8(parsed) ? parsed : void 0;
-  };
-  return {
-    read: (sessionId) => {
-      if (!isSafeSessionId(sessionId)) {
-        return void 0;
+      if (workerTail === "events/delivery" && method === "POST") {
+        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
+        await answerJson2(response, HTTP_STATUS.ok, {});
+        return;
       }
-      return credentialOfJson(readParsed(sessionId));
-    },
-    write: (sessionId, credential) => {
-      if (!isSafeSessionId(sessionId)) {
+      if (workerTail === "internal-events" && method === "POST") {
+        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const claimedEpoch = numberOf2(body, "worker_epoch");
+        if (claimedEpoch !== void 0 && claimedEpoch !== RC_SELF_HOST_WORKER_EPOCH) {
+          await epochStale(response);
+          return;
+        }
+        const events = body?.events;
+        if (!Array.isArray(events)) {
+          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "an internal event batch is an array" } });
+          return;
+        }
+        for (const event of events) {
+          if (isRecord10(event)) {
+            session.internalEvents.push({ eventId: deps.newUuid(), body: event });
+          }
+        }
+        await answerJson2(response, HTTP_STATUS.ok, {});
         return;
       }
-      const cursor3 = sequenceNumOfJson(readParsed(sessionId)?.highestSequenceNum);
-      const record2 = { ...credential, ...cursor3 === void 0 ? {} : { highestSequenceNum: cursor3 } };
-      fs20.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record2, null, 2)}
-`);
-    },
-    readCursor: (sessionId) => {
-      if (!isSafeSessionId(sessionId)) {
-        return void 0;
+      if (workerTail === "internal-events" && method === "GET") {
+        const query = new URL(request7.url, "http://127.0.0.1").searchParams;
+        if (query.get("session_agent_id") !== null || query.get("subagents") !== null) {
+          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "this surface keeps one internal-events channel per session, so an agent-scoped read has no subset to serve" } });
+          return;
+        }
+        const page = pageOfRcChannel(request7.url, session.internalEvents, (event) => event.eventId, (event) => ({ event_id: event.eventId, payload: event.body }));
+        if ("error" in page) {
+          const anchorUnknown = query.get("after_event_id") !== null && page.error.startsWith("the anchor names an event id");
+          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: anchorUnknown ? "after_event_id_not_found" : "invalid_request_error", message: page.error } });
+          return;
+        }
+        await answerJson2(response, HTTP_STATUS.ok, page);
+        return;
       }
-      return sequenceNumOfJson(readParsed(sessionId)?.highestSequenceNum);
-    },
-    writeCursor: (sessionId, highestSequenceNum) => {
-      if (!isSafeSessionId(sessionId)) {
+      if (workerTail === "diagnostics" && method === "POST") {
+        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
+        await answerJson2(response, HTTP_STATUS.ok, {});
         return;
       }
-      const credential = credentialOfJson(readParsed(sessionId));
-      const record2 = credential === void 0 ? { highestSequenceNum } : { ...credential, highestSequenceNum };
-      fs20.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record2, null, 2)}
-`);
-    },
-    remove: (sessionId) => {
-      if (!isSafeSessionId(sessionId)) {
+      if (workerTail === "web-fetch" && method === "POST") {
+        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const target = nonEmptyString4(body, "url");
+        if (target === void 0) {
+          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a worker web-fetch carries one url" } });
+          return;
+        }
+        const outcome = await deps.webFetch(target);
+        if (outcome.kind === "fetched") {
+          const answer = { url: target, destination_url: outcome.destinationUrl, text: outcome.text, ...outcome.contentType === void 0 ? {} : { content_type: outcome.contentType } };
+          if (Buffer.byteLength(JSON.stringify(answer), "utf8") > RC_WEB_FETCH_MAX_BYTES) {
+            deps.log?.(`rc selfhost ${session.id}: worker web-fetch of ${target} escaped past the reader cap when framed`);
+            await answerJson2(response, HTTP_STATUS.ok, { error: { error_type: "web_fetch_too_large", error_message: `the answer for ${target} exceeds the ${String(RC_WEB_FETCH_MAX_BYTES)} byte cap the CLI's proxy client reads` } });
+            return;
+          }
+          deps.log?.(`rc selfhost ${session.id}: worker web-fetch served ${target} as ${outcome.destinationUrl}`);
+          await answerJson2(response, HTTP_STATUS.ok, answer);
+          return;
+        }
+        deps.log?.(`rc selfhost ${session.id}: worker web-fetch of ${target} refused: ${outcome.errorType}`);
+        await answerJson2(response, HTTP_STATUS.ok, { error: { error_type: outcome.errorType, error_message: outcome.errorMessage } });
         return;
       }
-      fs20.removeRecursive(fileFor(sessionId));
-    }
-  };
-}
-
-// src/frontdoor/rcClientPage.ts
-var RC_CLIENT_PATH = "/__agent-shim/client";
-var RC_CLIENT_PAGE_SCRIPT = `'use strict';
-// The door's typed API as this page speaks it: the oRPC RPC protocol over plain fetch, which is one POST per procedure with a {"json": input} body and a {"json": output} answer, so no client library is needed. These helpers are plain top-level functions (not boot-scoped) so the page's tests can evaluate this script outside a browser and drive them against a mounted listener.
-var API_PREFIX = '/__agent-shim/orpc';
-var TOKEN_KEY = 'agent-shim-rc-token';
-var token = null;
-
-function apiBase() { return window.location.origin + API_PREFIX; }
-
-// Calls one procedure: resolves the output's own value, rejects with the door's error message when it answered one.
-async function rpc(path, input) {
-  var response = await fetch(apiBase() + '/' + path, {
-    method: 'POST',
-    headers: { 'content-type': 'application/json', authorization: 'Bearer ' + token },
-    body: JSON.stringify({ json: input === undefined ? {} : input }),
-  });
-  var envelope = await response.json().catch(function () { return {}; });
-  if (!response.ok) {
-    var message = envelope && envelope.json && envelope.json.message ? envelope.json.message : ('HTTP ' + response.status);
-    var error = new Error(message);
-    error.status = response.status;
-    throw error;
-  }
-  return envelope.json;
-}
-
-// Parses every complete SSE frame out of the buffered text, returning the frames and the unparsed remainder. Comment frames (the door's keepalive opens with one) carry no event name and are dropped.
-function parseSseFrames(buffer) {
-  var frames = [];
-  var rest = buffer;
-  for (;;) {
-    var boundary = rest.indexOf('\\n\\n');
-    if (boundary === -1) { break; }
-    var raw = rest.slice(0, boundary);
-    rest = rest.slice(boundary + 2);
-    var frame = { event: 'message', id: '', data: '' };
-    var lines = raw.split('\\n');
-    for (var i = 0; i < lines.length; i++) {
-      var line = lines[i];
-      if (line === '' || line.charAt(0) === ':') { continue; }
-      var colon = line.indexOf(':');
-      var field = colon === -1 ? line : line.slice(0, colon);
-      var value = colon === -1 ? '' : line.slice(colon + 1);
-      if (value.charAt(0) === ' ') { value = value.slice(1); }
-      if (field === 'event') { frame.event = value; }
-      if (field === 'id') { frame.id = value; }
-      if (field === 'data') { frame.data += (frame.data === '' ? '' : '\\n') + value; }
-    }
-    if (frame.data !== '') { frames.push(frame); }
-  }
-  return { frames: frames, rest: rest };
-}
-
-// Whether one source-tagged event continues the per-source sequence the tracker holds: the count of events the stream dropped when it does not, zero when it does. The tracker keeps the high-water mark, so a number the door re-sends after a reconnect is a duplicate, not a step back, and never reports a negative gap. The backbone holds no replay, so a gap is reported, never hidden.
-function sequenceGap(tracker, event) {
-  var previous = tracker[event.source];
-  if (event.sequence > (previous === undefined ? 0 : previous)) { tracker[event.source] = event.sequence; }
-  if (previous === undefined || event.sequence <= previous) { return 0; }
-  return event.sequence - previous - 1;
-}
-
-function shortId(id) { return id.length > 14 ? id.slice(0, 8) + '..' + id.slice(-4) : id; }
-
-// A bounded sketch of any payload, the feed's fallback rendering: one JSON line, cut with a marker rather than silently.
-function sketch(value, cap) {
-  var text;
-  try { text = JSON.stringify(value); } catch (e) { text = String(value); }
-  if (text === undefined) { text = 'undefined'; }
-  return text.length > cap ? text.slice(0, cap) + '...' : text;
-}
-
-// One utilization fraction as a whole percentage, the same rounding the CLI's own watch line applies.
-function percentOf(fraction) { return String(Math.round(fraction * 100)) + '%'; }
-
-// The reset instant a rate-limit payload states (unix epoch seconds) as an ISO instant; no countdown is derived from it, because a ticking derivation would claim a freshness the event stream never promised.
-function resetInstantOf(epochSeconds) { return new Date(epochSeconds * 1000).toISOString(); }
-
-// Whether one rate-limit payload is readable, narrowed the same way the door's live usage state narrows it: the event type and a rate_limit_info object.
-function rateLimitInfoOf(payload) {
-  if (payload === undefined || payload === null || typeof payload !== 'object' || payload.type !== 'rate_limit_event') { return undefined; }
-  var info = payload.rate_limit_info;
-  if (info === undefined || info === null || typeof info !== 'object' || typeof info.status !== 'string') { return undefined; }
-  return info;
-}
-
-// One rate-limit payload's facts as the quota summary the feed and the header render: the limiting window's status and utilisation, each subscription window, and the overage state, every value the payload's own words.
-function quotaSummary(info) {
-  var parts = [info.status];
-  if (info.rateLimitType !== undefined) { parts.push(info.rateLimitType); }
-  if (typeof info.utilization === 'number') { parts.push(percentOf(info.utilization)); }
-  if (typeof info.resetsAt === 'number') { parts.push('resets ' + resetInstantOf(info.resetsAt)); }
-  if (info.unifiedWindows !== undefined && info.unifiedWindows !== null && typeof info.unifiedWindows === 'object') {
-    var names = ['five_hour', 'seven_day', 'seven_day_overage_included'];
-    var windows = [];
-    for (var i = 0; i < names.length; i++) {
-      var window = info.unifiedWindows[names[i]];
-      if (window === undefined || window === null) { continue; }
-      var bits = [];
-      if (typeof window.utilization === 'number') { bits.push(percentOf(window.utilization)); }
-      if (typeof window.resetsAt === 'number') { bits.push('resets ' + resetInstantOf(window.resetsAt)); }
-      windows.push(bits.length === 0 ? names[i] : names[i] + ' ' + bits.join(' '));
+      if (workerTail === "web-search" && method === "POST") {
+        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const query = nonEmptyString4(body, "query");
+        if (query === void 0) {
+          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a worker web-search carries one query" } });
+          return;
+        }
+        const allowedDomains = stringArray(body, "allowed_domains");
+        const blockedDomains = stringArray(body, "blocked_domains");
+        if (body?.allowed_domains !== void 0 && allowedDomains === void 0 || body?.blocked_domains !== void 0 && blockedDomains === void 0) {
+          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "the domain filters of a worker web-search are string arrays" } });
+          return;
+        }
+        const searchProfile = nonEmptyString4(body, "search_profile");
+        const backend = deps.webSearch;
+        if (backend === void 0) {
+          deps.log?.(`rc selfhost ${session.id}: worker web-search of "${query}" refused: no search backend serves this door`);
+          await answerJson2(response, HTTP_STATUS.ok, { results: [], error: { error_type: "web_search_unavailable", error_message: "this front door serves the Remote Control web-search proxy without a search backend, so no query can be served here" } });
+          return;
+        }
+        const answered = await backend({ query, ...allowedDomains === void 0 ? {} : { allowedDomains }, ...blockedDomains === void 0 ? {} : { blockedDomains }, ...searchProfile === void 0 ? {} : { searchProfile } });
+        deps.log?.(`rc selfhost ${session.id}: worker web-search of "${query}" answered by its backend`);
+        if (isWebSearchRefusal(answered)) {
+          await answerJson2(response, HTTP_STATUS.ok, { results: [], error: { error_type: answered.errorType, error_message: answered.errorMessage } });
+          return;
+        }
+        await answerJson2(response, HTTP_STATUS.ok, { results: answered.map((result) => ({ title: result.title ?? "", url: result.url, snippet: result.snippet ?? "" })) });
+        return;
+      }
+      await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `the self-hosted Remote Control surface serves no worker path "${workerTail}"` } });
+      return;
     }
-    if (windows.length > 0) { parts.push('windows ' + windows.join(', ')); }
-  }
-  if (info.isUsingOverage === true) { parts.push('overage in use'); }
-  else if (typeof info.overageStatus === 'string') { parts.push('overage ' + info.overageStatus); }
-  return parts.join(' ');
-}
-
-// The header's quota text from the door's freshest live observation: the quota summary plus when the door observed it, or the plain statement that none has arrived yet.
-function quotaText(latest) {
-  if (latest === undefined || latest === null) { return 'quota: not observed yet'; }
-  var info = rateLimitInfoOf({ type: 'rate_limit_event', rate_limit_info: latest.rateLimit });
-  if (info === undefined) { return 'quota: not readable'; }
-  return 'quota: ' + quotaSummary(info) + '  observed ' + new Date(latest.observedAt).toLocaleTimeString();
-}
-
-// The headline text of one Remote Control stream event: a rate-limit payload renders as its quota summary, the assistant and user payloads that carry a content array of text blocks render as their prose, everything else as its type plus a sketch.
-function rcLine(event) {
-  var envelope = event.envelope;
-  var payload = envelope.payload;
-  var headline = '';
-  var rateLimit = rateLimitInfoOf(payload);
-  if (rateLimit !== undefined) {
-    headline = quotaSummary(rateLimit);
-  } else if (payload !== undefined && payload !== null && typeof payload === 'object' && Array.isArray(payload.content)) {
-    var parts = [];
-    for (var i = 0; i < payload.content.length; i++) {
-      var block = payload.content[i];
-      if (block !== null && typeof block === 'object' && block.type === 'text' && typeof block.text === 'string') { parts.push(block.text); }
+    const clientRefusal = credentialRefusal(request7.headers);
+    if (clientRefusal !== void 0) {
+      await unauthorized(response, clientRefusal);
+      return;
     }
-    if (parts.length > 0) { headline = parts.join(' '); }
-  }
-  if (headline === '') {
-    headline = envelope.event_type;
-    if (payload !== undefined) { headline += '  ' + sketch(payload, 240); }
-  }
-  return new Date().toLocaleTimeString() + '  ' + shortId(event.session) + '  ' + envelope.event_type + '  ' + headline;
-}
-
-function el(tag, className, text) {
-  var node = document.createElement(tag);
-  if (className) { node.className = className; }
-  if (text !== undefined) { node.textContent = text; }
-  return node;
-}
-
-var ui = null;
-
-function renderEvent(event, gap) {
-  if (ui === null) { return; }
-  var list = ui.eventList;
-  if (gap > 0) {
-    list.appendChild(el('div', 'event gap', 'dropped events: ' + String(gap) + ' on source ' + event.source + ' (the stream holds no replay)'));
-  }
-  var line;
-  if (event.source === 'rc') {
-    line = rcLine(event.payload);
-  } else {
-    line = new Date().toLocaleTimeString() + '  [' + event.source + ']  ' + sketch(event.payload, 240);
-  }
-  list.appendChild(el('div', 'event', line));
-  while (list.childElementCount > 500) { list.removeChild(list.firstChild); }
-  list.scrollTop = list.scrollHeight;
-}
-
-function renderSessions(statuses) {
-  if (ui === null) { return; }
-  var list = ui.sessionList;
-  list.textContent = '';
-  if (statuses.length === 0) {
-    list.appendChild(el('div', 'event dim', 'no Remote Control sessions observed'));
-    return;
-  }
-  for (var i = 0; i < statuses.length; i++) {
-    var status = statuses[i];
-    var worker = status.workerState === undefined ? 'worker unknown' : 'worker ' + status.workerState.value;
-    var row = el('div', 'session' + (status.id === ui.selected ? ' selected' : ''));
-    row.appendChild(el('div', null, shortId(status.id)));
-    row.appendChild(el('div', 'dim', worker + (status.pending.length === 0 ? '' : ', ' + String(status.pending.length) + ' pending') + ', seen ' + new Date(status.lastSeenAt).toLocaleTimeString()));
-    row.addEventListener('click', selectSession(status.id));
-    list.appendChild(row);
-  }
-}
-
-function selectSession(id) {
-  return function () {
-    if (ui === null) { return; }
-    ui.selected = ui.selected === id ? null : id;
-    ui.promptTarget.textContent = ui.selected === null ? 'no session selected' : 'to ' + ui.selected;
-    refreshSessions();
-    refreshPending();
-  };
-}
-
-function renderPending(pending) {
-  if (ui === null) { return; }
-  var list = ui.pendingList;
-  list.textContent = '';
-  if (pending.length === 0) {
-    list.appendChild(el('div', 'event dim', 'no control requests awaiting an answer'));
-    return;
-  }
-  for (var i = 0; i < pending.length; i++) {
-    var request = pending[i];
-    var card = el('div', 'card');
-    card.appendChild(el('div', null, request.type + '  ' + (request.summary === '' ? shortId(request.requestId) : request.summary)));
-    card.appendChild(el('div', 'dim', shortId(request.sessionId) + '  ' + shortId(request.requestId) + '  observed ' + new Date(request.observedAt).toLocaleTimeString()));
-    var row = el('div', 'row');
-    var denial = el('input');
-    denial.type = 'text';
-    denial.placeholder = 'denial message (optional)';
-    var approve = el('button', null, 'Approve');
-    var deny = el('button', 'secondary', 'Deny');
-    approve.addEventListener('click', answerRequest(request, true, denial));
-    deny.addEventListener('click', answerRequest(request, false, denial));
-    row.appendChild(denial);
-    row.appendChild(approve);
-    row.appendChild(deny);
-    card.appendChild(row);
-    list.appendChild(card);
-  }
-}
-
-function answerRequest(request, approve, denialInput) {
-  return function () {
-    var input = { session: request.sessionId, request: request.requestId, approve: approve };
-    if (!approve && denialInput.value !== '') { input.text = denialInput.value; }
-    rpc('rc/answer', input).then(function () {
-      renderEvent({ source: 'page', sequence: 0, payload: { note: (approve ? 'approved' : 'denied') + ' ' + request.requestId } }, 0);
-      refreshPending();
-    }, function (error) { window.alert('answer failed: ' + error.message); });
-  };
-}
-
-function sendPrompt() {
-  if (ui === null || ui.selected === null) { window.alert('select a session first'); return; }
-  var text = ui.prompt.value;
-  if (text === '') { return; }
-  ui.send.disabled = true;
-  rpc('rc/send', { session: ui.selected, text: text }).then(function (result) {
-    ui.prompt.value = '';
-    renderEvent({ source: 'page', sequence: 0, payload: { note: 'sent, sequence_num ' + result.sequenceNums.join(', ') } }, 0);
-  }, function (error) { window.alert('send failed: ' + error.message); }).then(function () { ui.send.disabled = false; });
-}
-
-function refreshSessions() {
-  rpc('rc/status', {}).then(function (result) { renderSessions(result.statuses); }, authOrReport('rc/status'));
-}
-
-function refreshPending() {
-  rpc('rc/pending', ui !== null && ui.selected !== null ? { session: ui.selected } : {}).then(function (result) { renderPending(result.pending); }, authOrReport('rc/pending'));
-}
-
-// The header's quota span, fed by the door's live read on the same refresh cycle as the session and pending lists: the freshest rate-limit observation any session's stream has filed, with its observation time so its freshness reads at a glance.
-function refreshQuota() {
-  rpc('usage/live', {}).then(function (result) {
-    if (ui !== null) { ui.quotaState.textContent = quotaText(result.latest); }
-  }, authOrReport('usage/live'));
-}
-
-// The one error path every call shares: a 401 means this token is not this generation's, so the page says so and asks for it again; anything else is reported in the feed.
-function authOrReport(what) {
-  return function (error) {
-    if (error.status === 401) {
-      handleUnauthorized();
+    if (tail === "events" && method === "POST") {
+      const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+      const events = body?.events;
+      if (!Array.isArray(events) || events.length === 0 || events.length > RC_SELF_HOST_MAX_BATCH_EVENTS) {
+        await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: `a client event write is a non-empty array of at most ${String(RC_SELF_HOST_MAX_BATCH_EVENTS)} events` } });
+        return;
+      }
+      const results = [];
+      for (const event of events) {
+        if (!isRecord10(event) || !isRecord10(event.payload)) {
+          await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
+          return;
+        }
+        const published = publish(session.conversation, { session: session.id, half: "client" }, RC_SOURCE_CLIENT, event.payload);
+        results.push({ sequence_num: String(published.sequenceNum), duplicate: published.duplicate });
+      }
+      sweep();
+      await answerJson2(response, HTTP_STATUS.ok, { results });
       return;
     }
-    renderEvent({ source: 'page', sequence: 0, payload: { note: what + ' failed: ' + error.message } }, 0);
+    if (tail === "events" && method === "GET") {
+      await answerJson2(response, HTTP_STATUS.ok, { data: session.conversation.events.map((event) => ({ event_id: event.eventId, event_type: nonEmptyString4(event.payload, "type") ?? "event", sequence_num: event.sequenceNum, source: event.source, payload: event.payload, created_at: event.createdAt })) });
+      return;
+    }
+    if (tail === "events/stream" && method === "GET") {
+      await holdStream(session.conversation, session.id, "clientStreams", () => true, request7, response);
+      return;
+    }
+    if (await serveRcClientChannels({ request: request7, response, host: { id: session.id, clients: session.clients, conversation: session.conversation, writer: { session: session.id, half: "client" } }, answerJson: answerJson2, readBody: readBody3, publish, sweep, now: deps.now, presenceRefreshSeconds: RC_PRESENCE_REFRESH_SECONDS, ...deps.log === void 0 ? {} : { log: deps.log } }, tail, method, RC_SELF_HOST_MAX_BATCH_EVENTS)) {
+      return;
+    }
+    await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `the self-hosted Remote Control surface serves no path "${tail}"` } });
   };
-}
-
-function handleUnauthorized() {
-  window.sessionStorage.removeItem(TOKEN_KEY);
-  if (feedAbort !== null) { feedAbort.abort(); }
-  streamState('');
-  showTokenForm('this door refused the token: it names a different door generation, paste the current one');
-}
-
-function streamState(text) { if (ui !== null) { ui.streamState.textContent = text; } }
-
-var feedAbort = null;
-
-// Subscribes to the door's backbone and renders what it yields, reconnecting on any drop. The stream holds no replay, so a reconnect starts at the live head and the per-source sequence numbers surface whatever the gap swallowed.
-async function runFeed() {
-  var tracker = {};
-  for (;;) {
-    if (feedAbort !== null) { feedAbort.abort(); }
-    feedAbort = new AbortController();
-    var filter = document.getElementById('source-filter').value;
-    var input = filter === '' ? {} : { sources: [filter] };
-    try {
-      streamState('stream: connecting');
-      var response = await fetch(apiBase() + '/events/subscribe', {
-        method: 'POST',
-        headers: { 'content-type': 'application/json', authorization: 'Bearer ' + token },
-        body: JSON.stringify({ json: input }),
-        signal: feedAbort.signal,
-      });
-      if (response.status === 401) { handleUnauthorized(); return; }
-      if (!response.ok || response.body === null) { throw new Error('HTTP ' + String(response.status)); }
-      streamState('stream: live');
-      var reader = response.body.getReader();
-      var decoder = new TextDecoder();
-      var buffer = '';
-      for (;;) {
-        var chunk = await reader.read();
-        if (chunk.done) { break; }
-        buffer += decoder.decode(chunk.value, { stream: true });
-        var parsed = parseSseFrames(buffer);
-        buffer = parsed.rest;
-        for (var i = 0; i < parsed.frames.length; i++) {
-          var frame = parsed.frames[i];
-          if (frame.event !== 'message') { continue; }
-          var event;
-          try { event = JSON.parse(frame.data).json; } catch (e) { continue; }
-          if (event === undefined || event.source === undefined) { continue; }
-          renderEvent(event, sequenceGap(tracker, event));
+  const recordMissing = () => deps.credentialRecord() === void 0;
+  const route = {
+    name: "rc-selfhost",
+    headroomEligible: false,
+    headroomUpstream: void 0,
+    serve: async (request7, response) => {
+      const method = request7.method.toUpperCase();
+      const pathname = new URL(request7.url, "http://127.0.0.1").pathname;
+      if (recordMissing()) {
+        await noCredential(response);
+        return;
+      }
+      if (pathname === RC_COMPAT_SESSIONS_PATH || pathname.startsWith(`${RC_COMPAT_SESSIONS_PATH}/`)) {
+        await serveRcCompatSessions({ request: request7, response, sessions, retireSession, answerJson: answerJson2, readBody: readBody3, credentialRefusal, unauthorized, now: deps.now, ...deps.log === void 0 ? {} : { log: deps.log } }, pathname, RC_COMPAT_SESSIONS_PATH);
+        return;
+      }
+      if (pathname === RC_CONVERSATIONS_PATH_PREFIX || pathname.startsWith(`${RC_CONVERSATIONS_PATH_PREFIX}/`)) {
+        await serveRcConversations({ request: request7, response, conversations, answerJson: answerJson2, readBody: readBody3, credentialRefusal, unauthorized, publish, holdStream, sweep, now: deps.now, presenceRefreshSeconds: RC_PRESENCE_REFRESH_SECONDS, maxBatchEvents: RC_SELF_HOST_MAX_BATCH_EVENTS, ...deps.log === void 0 ? {} : { log: deps.log } }, pathname, method);
+        return;
+      }
+      if (pathname !== RC_SESSIONS_PATH_PREFIX2 && !pathname.startsWith(`${RC_SESSIONS_PATH_PREFIX2}/`)) {
+        await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `the self-hosted Remote Control surface serves no path "${pathname}"` } });
+        return;
+      }
+      if (pathname === RC_SESSIONS_PATH_PREFIX2) {
+        if (method === "POST") {
+          const createRefusal = credentialRefusal(request7.headers);
+          if (createRefusal !== void 0) {
+            await unauthorized(response, createRefusal);
+            return;
+          }
+          const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+          const namedConversation = nonEmptyString4(body, "conversation");
+          let conversation;
+          if (namedConversation === void 0) {
+            conversation = newRcSelfHostConversation(deps.newUuid, deps.now);
+            conversations.set(conversation.id, conversation);
+          } else {
+            conversation = conversations.get(namedConversation);
+            if (conversation === void 0) {
+              await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `no such Remote Control conversation on this door: ${namedConversation}` } });
+              return;
+            }
+            conversation.lastTrafficAt = deps.now();
+          }
+          const session = {
+            id: `${RC_SESSION_ID_PREFIX2}${deps.newUuid()}`,
+            createdAt: deps.now(),
+            title: nonEmptyString4(body, "title"),
+            conversation,
+            workerJwts: /* @__PURE__ */ new Set(),
+            internalEvents: [],
+            clients: /* @__PURE__ */ new Map(),
+            workerStatus: void 0,
+            externalMetadata: void 0,
+            lastTrafficAt: deps.now()
+          };
+          conversation.sessionIds.add(session.id);
+          sessions.set(session.id, session);
+          deps.log?.(`rc selfhost ${session.id}: session created on the door's own surface, attached to conversation ${conversation.id}${namedConversation === void 0 ? "" : " at its client's request"}`);
+          await answerJson2(response, HTTP_STATUS.ok, { session: sessionRow(session) });
+          return;
+        }
+        if (method === "GET") {
+          const readRefusal = credentialRefusal(request7.headers);
+          if (readRefusal !== void 0) {
+            await unauthorized(response, readRefusal);
+            return;
+          }
+          await answerJson2(response, HTTP_STATUS.ok, { data: [...sessions.values()].map((session) => ({ id: session.id, title: session.title, created_at: new Date(session.createdAt).toISOString(), updated_at: new Date(session.lastTrafficAt).toISOString(), session_status: "active", conversation_id: session.conversation.id })) });
+          return;
         }
+        await answerJson2(response, HTTP_STATUS.methodNotAllowed, { type: "error", error: { type: "api_error", message: "the session collection is a POST (create) and a GET (list)" } });
+        return;
       }
-    } catch (error) {
-      if (feedAbort !== null && feedAbort.signal.aborted) { return; }
+      const rest = pathname.slice(`${RC_SESSIONS_PATH_PREFIX2}/`.length);
+      const slash = rest.indexOf("/");
+      const id = slash === -1 ? rest : rest.slice(0, slash);
+      const tail = slash === -1 ? "" : rest.slice(slash + 1);
+      if (!id.startsWith(RC_SESSION_ID_PREFIX2)) {
+        await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: "the session family names one cse_-prefixed session id" } });
+        return;
+      }
+      await serveSessionPath(sessions.get(id), tail, request7, response);
     }
-    streamState('stream: dropped, reconnecting');
-    await new Promise(function (resolve) { window.setTimeout(resolve, 1000); });
-  }
-}
-
-function showTokenForm(message) {
-  if (feedAbort !== null) { feedAbort.abort(); }
-  if (ui !== null) { ui.main.classList.add('hidden'); }
-  var form = document.getElementById('token-form');
-  form.classList.remove('hidden');
-  document.getElementById('token-error').textContent = message === undefined ? '' : message;
-  document.getElementById('token-input').focus();
-}
-
-function startPage(heldToken) {
-  token = heldToken;
-  ui = {
-    main: document.getElementById('main'),
-    eventList: document.getElementById('event-list'),
-    sessionList: document.getElementById('session-list'),
-    pendingList: document.getElementById('pending-list'),
-    prompt: document.getElementById('prompt'),
-    promptTarget: document.getElementById('prompt-target'),
-    send: document.getElementById('send'),
-    streamState: document.getElementById('stream-state'),
-    quotaState: document.getElementById('quota-state'),
-    selected: null,
   };
-  document.getElementById('token-form').classList.add('hidden');
-  ui.main.classList.remove('hidden');
-  document.getElementById('refresh').addEventListener('click', function () { refreshSessions(); refreshPending(); refreshQuota(); });
-  document.getElementById('send').addEventListener('click', sendPrompt);
-  document.getElementById('source-filter').addEventListener('change', function () { runFeed(); });
-  ui.prompt.addEventListener('keydown', function (event) {
-    if (event.key === 'Enter' && (event.metaKey || event.ctrlKey)) { sendPrompt(); }
-  });
-  refreshSessions();
-  refreshPending();
-  refreshQuota();
-  window.setInterval(function () { refreshSessions(); refreshPending(); refreshQuota(); }, 4000);
-  runFeed();
-  document.getElementById('door-state').textContent = 'connected';
-}
-
-function boot() {
-  var held = null;
-  var query = new URLSearchParams(window.location.search);
-  var fromQuery = query.get('token');
-  if (fromQuery !== null && fromQuery !== '') {
-    window.sessionStorage.setItem(TOKEN_KEY, fromQuery);
-    // The token leaves the address bar the moment the page holds it, so a refresh or a shared screen shows the clean URL; sessionStorage keeps the tab working.
-    window.history.replaceState(null, '', window.location.pathname);
-    held = fromQuery;
-  } else {
-    held = window.sessionStorage.getItem(TOKEN_KEY);
-  }
-  document.getElementById('token-save').addEventListener('click', function () {
-    var value = document.getElementById('token-input').value.trim();
-    if (value === '') { return; }
-    window.sessionStorage.setItem(TOKEN_KEY, value);
-    startPage(value);
-  });
-  document.getElementById('token-input').addEventListener('keydown', function (event) {
-    if (event.key === 'Enter') { document.getElementById('token-save').click(); }
-  });
-  if (held !== null && held !== '') { startPage(held); }
-}
-
-if (typeof document !== 'undefined' && document.getElementById('event-list') !== null) {
-  window.addEventListener('DOMContentLoaded', boot);
-}
-`;
-var RC_CLIENT_PAGE_HTML = `<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>agent-shim Remote Control</title>
-<style>
-  :root { color-scheme: dark; }
-  * { box-sizing: border-box; }
-  body { margin: 0; background: #101418; color: #d7dde3; font: 14px/1.45 ui-monospace, Menlo, Consolas, monospace; }
-  header { display: flex; gap: 12px; align-items: baseline; padding: 10px 16px; background: #171d24; border-bottom: 1px solid #2a333d; }
-  header h1 { font-size: 15px; margin: 0; font-weight: 600; }
-  header .state { color: #8b98a5; }
-  main { display: flex; gap: 1px; background: #2a333d; min-height: calc(100vh - 39px); }
-  section { background: #101418; padding: 12px 16px; overflow-y: auto; }
-  #sessions { flex: 0 0 320px; border-right: 1px solid #2a333d; }
-  #right { flex: 1; display: flex; flex-direction: column; min-width: 0; }
-  #feed { flex: 1; }
-  #controls { border-top: 1px solid #2a333d; }
-  h2 { font-size: 12px; text-transform: uppercase; letter-spacing: 0.08em; color: #8b98a5; margin: 8px 0 8px; font-weight: 600; }
-  .session { padding: 6px 8px; border: 1px solid transparent; border-radius: 4px; cursor: pointer; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
-  .session:hover { background: #171d24; }
-  .session.selected { border-color: #3d6ea5; background: #17222e; }
-  .session .dim { color: #8b98a5; }
-  .event { padding: 2px 0; white-space: pre-wrap; word-break: break-word; }
-  .event .dim { color: #8b98a5; }
-  .event.gap { color: #d29922; }
-  .event.error { color: #e5534b; }
-  textarea, input[type=text], select { background: #171d24; color: #d7dde3; border: 1px solid #2a333d; border-radius: 4px; padding: 6px 8px; font: inherit; width: 100%; }
-  textarea { resize: vertical; min-height: 44px; }
-  button { background: #1f4a7a; color: #d7dde3; border: 1px solid #3d6ea5; border-radius: 4px; padding: 5px 12px; font: inherit; cursor: pointer; }
-  button.secondary { background: #2a333d; border-color: #3a444f; }
-  button:disabled { opacity: 0.5; cursor: default; }
-  .row { display: flex; gap: 8px; margin: 6px 0; align-items: center; }
-  .card { border: 1px solid #3d6ea5; border-radius: 4px; padding: 8px; margin: 6px 0; background: #17222e; }
-  .card .dim { color: #8b98a5; }
-  #token-form { max-width: 480px; margin: 48px auto; }
-  #token-form p { color: #8b98a5; }
-  .hidden { display: none !important; }
-</style>
-</head>
-<body data-agent-shim-rc-client>
-<header>
-  <h1>agent-shim Remote Control</h1>
-  <span class="state" id="door-state">connecting</span>
-  <span class="state" id="stream-state"></span>
-  <span class="state" id="quota-state">quota: not observed yet</span>
-</header>
-<div id="token-form">
-  <h2>This door's control token</h2>
-  <p>The page is served behind the door's per-generation control token. Paste this door generation's token (the owner-only value the door writes beside its state) to use the page; it stays in this tab only.</p>
-  <div class="row"><input type="text" id="token-input" placeholder="control token" autocomplete="off"><button id="token-save">Use</button></div>
-  <p id="token-error" class="event error"></p>
-</div>
-<main class="hidden" id="main">
-  <section id="sessions">
-    <h2>Sessions <button class="secondary" id="refresh">Refresh</button></h2>
-    <div id="session-list"></div>
-  </section>
-  <section id="right">
-    <div id="feed">
-      <h2>Feed <select id="source-filter"><option value="">all sources</option><option value="rc">Remote Control only</option></select></h2>
-      <div id="event-list"></div>
-    </div>
-    <div id="controls">
-      <h2>Pending approvals</h2>
-      <div id="pending-list"></div>
-      <h2>Send a prompt</h2>
-      <div class="row"><textarea id="prompt" placeholder="Prompt for the selected session"></textarea></div>
-      <div class="row"><span class="dim" id="prompt-target">no session selected</span><span style="flex:1"></span><button id="send">Send</button></div>
-    </div>
-  </section>
-</main>
-<script>
-${RC_CLIENT_PAGE_SCRIPT}
-</script>
-</body>
-</html>
-`;
-function pageTokenOf(request7, url2) {
-  const presented = request7.headers.authorization;
-  const bearerPrefix = "bearer ".length;
-  const header = typeof presented === "string" && presented.slice(0, bearerPrefix).toLowerCase() === "bearer " ? presented.slice(bearerPrefix) : void 0;
-  const query = url2.searchParams.get("token") ?? void 0;
-  return header ?? query;
-}
-function serveRcClientPage(expectedToken, request7, response) {
-  const url2 = new URL(request7.url ?? "/", "https://door.invalid");
-  if (url2.pathname !== RC_CLIENT_PATH && url2.pathname !== `${RC_CLIENT_PATH}/`) {
-    response.writeHead(HTTP_STATUS.notFound, { "Content-Type": "text/plain" });
-    response.end("no such page under the door's client prefix");
-    return;
-  }
-  if (request7.method !== "GET" && request7.method !== "HEAD") {
-    response.writeHead(HTTP_STATUS.methodNotAllowed, { Allow: "GET, HEAD", "Content-Type": "text/plain" });
-    response.end("the door's web client page is read-only");
-    return;
-  }
-  const token = pageTokenOf(request7, url2);
-  if (token === void 0 || !isLiveCapability(token, [expectedToken])) {
-    response.writeHead(HTTP_STATUS.unauthorized, { "Content-Type": "application/json" });
-    response.end(JSON.stringify({ error: "the door's web client demands this generation's control token, as a Bearer credential or the token query parameter" }));
-    return;
-  }
-  response.writeHead(HTTP_STATUS.ok, {
-    "Content-Type": "text/html; charset=utf-8",
-    "Cache-Control": "no-store",
-    "Referrer-Policy": "no-referrer",
-    "Content-Security-Policy": "default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; connect-src 'self'"
-  });
-  response.end(request7.method === "HEAD" ? void 0 : RC_CLIENT_PAGE_HTML);
-}
-function createRcClientPage(expectedToken) {
+  const local = createRcSelfHostLocal({ now: deps.now, credentialRecord: deps.credentialRecord, readBody: readBody3 });
   return {
-    pathPrefix: RC_CLIENT_PATH,
-    handle: async (request7, response) => {
-      serveRcClientPage(expectedToken, request7, response);
-      await Promise.resolve();
-      return { matched: true };
+    route,
+    local,
+    close: () => {
+      clearInterval(timer);
+      clearInterval(keepalive);
+      for (const conversation of conversations.values()) {
+        for (const sink of [...conversation.workerStreams, ...conversation.clientStreams]) {
+          sink.retire();
+        }
+      }
+      sessions.clear();
+      conversations.clear();
     }
   };
 }
@@ -76111,7 +76256,7 @@ function createSseParser() {
     }
   };
 }
-function isRecord9(value2) {
+function isRecord11(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function sequenceNumOf(value2) {
@@ -76133,7 +76278,7 @@ function parseRcStreamEnvelope(parsed) {
   } catch {
     return void 0;
   }
-  if (!isRecord9(data)) {
+  if (!isRecord11(data)) {
     return void 0;
   }
   const eventType = data.event_type;
@@ -76421,7 +76566,7 @@ var ProviderQuotaError = class extends Error {
     this.name = "ProviderQuotaError";
   }
 };
-var MS_PER_SECOND9 = 1e3;
+var MS_PER_SECOND10 = 1e3;
 var SECONDS_PER_HOUR = 3600;
 var HOURS_PER_DAY3 = 24;
 var DAYS_PER_MONTH = 30;
@@ -76433,8 +76578,8 @@ var ZAI_QUOTA_URL = `https://${ZAI_HOST}/api/monitor/usage/quota/limit`;
 var ZAI_UNIT_HOURS = 3;
 var ZAI_UNIT_MONTHS = 5;
 var ZAI_UNIT_MS = /* @__PURE__ */ new Map([
-  [ZAI_UNIT_HOURS, SECONDS_PER_HOUR * MS_PER_SECOND9],
-  [ZAI_UNIT_MONTHS, DAYS_PER_MONTH * HOURS_PER_DAY3 * SECONDS_PER_HOUR * MS_PER_SECOND9]
+  [ZAI_UNIT_HOURS, SECONDS_PER_HOUR * MS_PER_SECOND10],
+  [ZAI_UNIT_MONTHS, DAYS_PER_MONTH * HOURS_PER_DAY3 * SECONDS_PER_HOUR * MS_PER_SECOND10]
 ]);
 var ZAI_MEASURES = { TOKENS_LIMIT: "tokens", TIME_LIMIT: "tool-calls" };
 var ZaiLimitSchema = external_exports.object({
@@ -76498,7 +76643,7 @@ var OPENROUTER_HOST = "openrouter.ai";
 var OPENROUTER_KEY_URL = `https://${OPENROUTER_HOST}/api/v1/key`;
 var OPENROUTER_CREDITS_URL = `https://${OPENROUTER_HOST}/api/v1/credits`;
 var HTTP_FORBIDDEN = 403;
-var MS_PER_DAY2 = HOURS_PER_DAY3 * SECONDS_PER_HOUR * MS_PER_SECOND9;
+var MS_PER_DAY2 = HOURS_PER_DAY3 * SECONDS_PER_HOUR * MS_PER_SECOND10;
 var OpenRouterKeySchema = external_exports.object({
   data: external_exports.object({
     limit: external_exports.number().nonnegative().nullable(),
@@ -79178,6 +79323,11 @@ function buildFlagArgs(flags) {
 function buildArgv(params) {
   return [...params.toolFlags, ...params.extraFlags, ...params.passthrough];
 }
+var LOOPBACK_HOSTS = ["127.0.0.1", "localhost", "::1"];
+function withLoopbackHosts(existing) {
+  const listed = (existing ?? "").split(",").map((entry) => entry.trim()).filter((entry) => entry !== "");
+  return [...listed, ...LOOPBACK_HOSTS.filter((host) => !listed.includes(host))].join(",");
+}
 function buildEnv(params) {
   const env = { ...params.baseEnv };
   const parentCustomHeaders = params.baseEnv.ANTHROPIC_CUSTOM_HEADERS;
@@ -79222,6 +79372,8 @@ function buildEnv(params) {
     );
     env.NODE_EXTRA_CA_CERTS = params.frontdoor.trustBundlePath;
     env.HTTPS_PROXY = connectProxyUrl(params.frontdoor.connectPort, params.frontdoor.sessionToken);
+    env.NO_PROXY = withLoopbackHosts(env.NO_PROXY);
+    env.no_proxy = withLoopbackHosts(env.no_proxy);
   }
   return env;
 }