alink-cli 0.8.9 → 0.9.0

package/dist/bin.mjs

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
 
-import { $ as make$62, A as withLoggerDisabled, At as matchStatus, B as limitsServices, Bt as post$1, C as update$2, Ct as setHeader, D as compression, Dt as uint8Array$1, Et as text$2, F as schemaHeaders, Ft as appendUrlParams, G as CloseEvent, Gt as setUrl, Ht as setBody, I as schemaSearchParams, It as bodyFormData, Jt as HttpClientErrorSchema, K as SocketError, Kt as DecodeError, L as toURL, Lt as bodyJson, M as ParsedSearchParams, O as cors$1, Ot as urlParams$1, P as schemaCookies, Pt as schemaBodyJson, Q as join$1, Rt as get$4, S as set$2, Sn as __commonJSMin, T as appendPreResponseHandler, Tt as stream, Ut as setHeader$1, Vt as prependUrl, Wt as setHeaders, X as makeWebSocket, Xt as isHttpClientError, Y as make$63, Yt as StatusCodeError, Z as awaitEmpty, Zt as empty$2, _ as get$3, _n as fromInput, _t as mergeCookies, a as layer$40, an as CurrentRedactedNames, b as makeUnsafe$3, bn as hasBody, cn as fromRecordUnsafe, d as HttpClient, dn as jsonUnsafe$1, en as set$3, et as run$4, f as TracerPropagationEnabled, g as transformResponse$1, gn as urlParams, gt as jsonUnsafe, h as retryTransient, hn as uint8Array, ht as isHttpServerResponse, j as HttpServerRequest, k as logger, kt as filterStatusOk, l as serve$1, ln as merge, lt as symbol$1, m as mapRequest, mn as text$1, mt as file, o as HttpServer, on as empty$3, ot as RouteNotFound, p as filterStatusOk$1, pt as empty$1, q as SocketErrorReason, qt as HttpClientError, r as Mime_default, rt as HttpServerError, sn as fromInput$1, t as layerWebSocketConstructor, tt as runtime, u as withLogAddress, un as isHttpBody, ut as toResponse, v as getAndSet, vn as schemaRecord, w as updateAndGet, wn as __require, wt as setHeaders$1, x as modify$2, xn as map$3, xt as schemaJson, y as make$60, yn as toRecord, yt as redirect, zt as make$61 } from "./NodeSocket-08w4osAf.mjs";
-import { $ as decodeUnknownExit, $c as combine$1, $d as isNotNull, $i as makeUnsafe$7, $l as fromInput$2, $o as service, $s as taggedEnum, $t as Union$1, $u as empty$5, A as StructWithRest, Ac as die$2, Ad as getStackTraceLimit, Ai as makeUnsafe$5, Al as fnUntraced$1, An as encodeBase64, Ao as never, Ar as mapError$1, As as withTracerEnabled, At as suspend$1, Au as reduce, B as Union, Ba as catch_, Bc as die$1, Bd as NodeInspectSymbol, Bn as now, Bo as provideContext, Br as run$5, Bt as value, C as Number$1, Ca as annotateCurrentSpan, Cc as make$73, Cd as match$1, Ci as fromTransform, Cn as parseJson, Cr as fromSubscription, Cs as void_$1, Ct as isTrimmed, Cu as fromIterable, D as String$1, Da as as, Dc as TracerEnabled, Dd as make$69, Dn as decodeBase64String, Do as matchCauseEffect, Dr as map$8, Dt as mutable, Du as map$5, E as Record, Ea as annotateSpans, Ec as MinimumLogLevel, Ed as Number$2, Ei as pipeTo, Eo as match$2, Er as make$71, Es as withFiber$1, Et as makeFilter, Fa as catchFilter, Fc as isDeferred, Fd as isEffect$1, Fn as isGreaterThan$1, Fo as option, Fs as timer, Ft as toJsonSchemaDocument, Fu as map$7, G as annotateKey, Ga as die, Gc as isSuccess, Gd as equals, Gi as unbounded$2, Gl as Tracer, Gn as InvalidValue$1, Go as retry, Gr as runForEach, Gs as parse$2, Gt as toJsonSchemaMultiDocument, Gu as isFailure$1, H as UnknownFromJsonString$1, Ha as context, Hc as failCause$4, Hd as format, Hi as sliding$1, Hl as MinimumTraceLevel, Hn as toEpochMillis, Ho as raceFirst, Hr as runDrain, Hs as spaced, Ht as toMultiDocumentOpenApi3_1, Hu as failVoid, I as URLFromString, Ia as catchIf, Id as withFiber, Ii as make$75, In as isGreaterThanOrEqualTo$1, Io as orDie, Ir as pipeThroughChannel, Is as update$3, It as toType, J as decodeEffect, Ja as exit, Jc as void_$2, Ji as sliding, Jn as Path, Jo as runPromiseWith, Js as currentTimeMillis, Ju as succeed$2, K as brand, Kc as match$3, Ki as publish, Kl as externalSpan, Ko as runFork, Kr as runForEachArray, Ks as round, Kt as escapeToken, Ku as isSuccess$1, L as Uint8Array$1, La as catchReason, Lc as make$70, Ld as assignProperty, Li as offer$1, Ll as sync$1, Ln as isLessThan$1, Lo as orElseSucceed, Ls as withAttributes, Lt as withConstructorDefault, M as TaggedStruct, Ma as catchCause, Mc as fail$3, Md as Prototype, Mi as end, Mn as encodeHex, Mo as onExit, Ms as zipWith, Mt as toCodecJson, Mu as sort, N as TemplateLiteral, Na as catchDefect, Nc as failCause$2, Nd as PipeInspectableProto, Nn as add$3, Ns as counter, Nt as toCodecJsonAST, O as StringFromUriComponent, Oa as asSome, Oc as TracerTimingEnabled, Oi as splitLines, On as decodeBase64Url, Or as mapArrayEffect, Os as withParentSpan, Ot as optional$3, Ou as match, Pi as failCause$3, Pl as reportCauseUnsafe, Pn as formatIso, Po as onInterrupt, Pr as onExit$1, Ps as snapshotUnsafe, Pt as toCodecStringTree, Q as decodeUnknownEffect, Qa as flatMap$1, Qd as hasProperty, Ql as format$1, Qo as scopedWith, Qs as TaggedError, Qt as isSchemaError, Qu as add$2, R as Undefined, Ra as catchTag, Ri as offerAll, Rl as tracerLogger$1, Rn as make$68, Ro as promise, Rr as provideContext$1, Rs as addDelay, Rt as withDecodingDefault, S as NullOr, Sa as andThen, Sc as forkUnsafe, Sd as map$6, Sl as CurrentLoggers$1, Sn as onSome, So as map$4, Ss as useSpan, St as isSchema, Su as flatMapNullishOr, T as OptionFromNullOr, Ta as annotateLogsScoped, Tc as provide$2, Td as some, Ti as mapEffect$2, Tn as stringifyJson, Tr as isStream, Ts as withErrorReporting, Tt as make$67, Tu as isReadonlyArrayNonEmpty, U as Void, Ua as contextWith, Uc as interrupt$3, Ui as take$1, Ul as NativeSpan, Un as toUtc, Uo as repeat, Ur as runFold, Us as catchDone, Ut as apply, Uu as getOrThrow, V as Unknown, Vc as fail$4, Vd as toJson, Vi as shutdown$1, Vn as toDate, Vo as provideService, Vr as runCollect, Vs as passthrough, Vt as VALID_OPEN_API_COMPONENTS_SCHEMAS_KEY_REGEXP, Vu as fail$1, W as annotate$2, Wa as currentParentSpan, Wc as isFailure, Wi as takeAll, Wl as ParentSpan, Wn as Forbidden$1, Wo as result, Wr as runFoldEffect, Ws as isDoneCause, Wt as toRepresentations, Wu as getOrUndefined$2, X as decodeSync, Xa as failCause$1, Xc as NoSuchElementError, Xi as unbounded$1, Xn as FileSystem, Xo as scope, Xr as takeWhile, Xu as Reference, Y as decodeExit, Ya as fail, Yi as subscribe, Ys as currentTimeNanos, Z as decodeTo, Za as filterOrFail, Zc as StackTrace, Zd as compose$1, Zl as days, Zo as scoped, Zr as toAsyncIterable, Zs as TaggedClass, Zt as SchemaError, Zu as Service$2, _a as Transaction, _c as Scope, _d as getOrElse, _f as pipe, _l as pretty, _n as Transformation, _o as logError, _s as tx, _t as isMaxLength, _u as filter$1, a as Class, aa as runIn, ac as effectDiscard, ad as make$65, an as isLiteral, ao as forkChild, ar as debounce, as as suspend, at as encodeUnknownExit, au as max, b as NonEmptyString, ba as addFinalizer, bc as close, bd as isNone, bi as decodeText$1, bn as transformOrFail, bo as logWarning$1, br as fromPubSub, bt as isNonEmpty, bu as findFirstIndex, c as Defect, ca as empty$6, cc as launch, cd as omit, cf as compose, ci as invalidate, cl as hasInterruptsOnly, cn as isOptional, co as fromResult, cr as drain, cs as tapCause, ct as instanceOf, cu as nanos, d as ErrorClass, da as size$2, dc as provideMerge, dd as filter, df as constUndefined, dl as isCause, dn as isVoid, do as ignoreCause, ds as tapErrorTag, dt as isFinite, ea as await_, ec as CurrentMemoMap, ed as get$5, ef as isNotUndefined, eo as flatten$1, et as decodeUnknownOption, eu as fromInputUnsafe, f as Exit, fa as toArray, fc as succeed$3, fd as firstSomeOf, ff as constVoid, fl as isFailReason, fn as resolveAt, fo as interrupt$1, fr as fail$5, fs as timeout, ft as isGreaterThan, fu as zero, g as Literals, gc as unwrap, gd as fromUndefinedOr, gf as identity, gi as forEach$1, gl as map$9, go as logDebug, gr as fromAsyncIterable, gs as try_, gt as isLessThanOrEqualTo, gu as ensure, h as Literal, hc as tap$1, hd as fromNullishOr, hi as drain$1, hn as toEncoded, ho as log$1, hr as flatMap$2, hs as tryPromise, ht as isLessThan, hu as empty$4, i as Cause, ia as join$2, ic as effectContext, id as getUnsafe$1, if as isTagged, il as findErrorOption, in as isDeclaration, io as forever, ir as concat, is as succeedSome, it as encodeUnknownEffect, j as TaggedErrorClass, ja as callback, jd as setStackTraceLimit, ji as bounded, jn as encodeBase64Url, jo as onError, jr as merge$2, js as yieldNow, jt as tag, ju as reverse, k as Struct, ka as asVoid, kc as _await, ki as make$72, kn as decodeBase64UrlString, ko as matchEffect, kr as mapEffect$1, ks as withSpan, kt as optionalKey, l as Duration, la as head, lc as mergeAll, ld as contains, lf as constFalse, li as make$66, ll as interrupt$2, ln as isSuspend, lo as gen, lr as empty$7, ls as tapDefect, lt as is, lu as seconds, m as Int, ma as PlatformError, mc as sync$2, md as flatten, mf as dual, mn as resolveIdentifier, mo as isEffect, mr as filter$2, mt as isInt, n as ArraySchema, na as interrupt$4, nc as buildWithMemoMap, nd as getOrElse$1, nf as isObject$1, ni as unwrap$1, nl as fail$2, nn as getAST, no as fnUntraced, nr as catchCause$1, ns as succeed$1, nt as encodeEffect, o as DateTimeUtc, oa as append$1, oc as empty$8, od as makeUnsafe$4, oi as get$6, ol as hasDies, on as isNull, oo as forkIn, or as decodeText, os as sync, ot as fieldsAssign, ou as millis, p as Finite, pc as succeedContext, pd as flatMap$3, pf as constant, pn as resolveDescription, po as interruptible, pr as failCause$5, ps as timeoutOption, pt as isGreaterThanOrEqualTo, pu as allocate, q as declare, qa as ensuring, qi as shutdown$2, ql as make$74, qn as makeFormatterDefault, qo as runForkWith, qs as Clock, qt as assign, r as Boolean$1, rc as effect, rd as getOrUndefined$1, rf as isString, ri as withSpan$1, rn as getLastEncoding, ro as forEach, rr as changes, rs as succeedNone, rt as encodeSync, s as DateTimeUtcFromString, sa as drop$1, sd as merge$1, sf as cast, si as has, sl as hasInterrupts, sn as isObjects, so as forkScoped, ss as tap, st as fromJsonString, su as minutes, t as Any, ta as getCurrent, tc as build, td as getOption, tf as isNullish, ti as transformPull, to as fn, ts as sleep, tt as encode$1, tu as hours, u as DurationFromMillis, ua as isEmpty$2, uc as provide, ud as exists, uf as constTrue, ul as interruptors, un as isUnion, uo as ignore$1, ur as encodeText, us as tapError, ut as isBetween, uu as toMillis, v as Never, va as acquireRelease, vc as addFinalizer$1, vd as getOrNull, vf as pipeArguments, vl as prettyErrors, vo as logFatal, vr as fromEffect, vs as txRetry, vt as isMaxProperties, vu as filterMap, w as Option, wa as annotateLogs, wc as makeUnsafe$8, wd as none, wl as consolePretty$1, wo as mapError, wr as groupedWithin, ws as whileLoop, wu as isArrayNonEmpty, x as Null, xa as all, xc as closeUnsafe, xd as isSome, xi as filterArray, xl as ConsoleRef, xn as trim, xo as makeSpanScoped, xr as fromQueue, xs as updateContext, xt as isPattern, xu as findLast, y as NonEmptyArray, ya as acquireUseRelease, yc as addFinalizerExit, yd as getOrUndefined, yi as mapInput, yl as squash, yn as transform$1, yo as logInfo, yr as fromIterable$1, ys as uninterruptible, yt as isMinLength, yu as findFirst, z as UndefinedOr, za as catchTags, zc as succeed$4, zi as offerUnsafe, zn as makeUnsafe$6, zo as provide$1, zr as provideService$1, zs as forever$1, zt as make$64 } from "./Schema-B3i-HrZQ.mjs";
-import { a as isQuitError, g as ChildProcessSpawner, h as make$76, i as Terminal$1, l as Crypto, n as layer$41, o as Stdio, r as QuitError, s as make$77, u as fromReadable } from "./NodeServices-DDZTiw5K.mjs";
-import { _ as withDefault$2, a as all$1, c as logLevel, d as option$1, f as port, g as url$1, i as TrueValues, l as map$10, m as string$4, n as FalseValues, o as boolean$3, p as schema$1, r as Record$1, s as int, t as Boolean$2, u as number } from "./Config-Bj2ZPCsP.mjs";
-import { c as getOption$1, d as make$78, f as makeWith$1, l as invalidate$1, n as SqlClient, p as set$4, s as get$7, u as keys } from "./SqlClient-DcM69ZvI.mjs";
+import { $ as make$65, A as withLoggerDisabled, At as matchStatus, B as limitsServices, Bt as post$1, C as update$2, Ct as setHeader, D as compression, Dt as uint8Array$1, Et as text$2, F as schemaHeaders, Ft as appendUrlParams, G as CloseEvent, Gt as setUrl, Ht as setBody, I as schemaSearchParams, It as bodyFormData, Jt as HttpClientErrorSchema, K as SocketError, Kt as DecodeError, L as toURL, Lt as bodyJson, M as ParsedSearchParams, O as cors$1, Ot as urlParams$1, P as schemaCookies, Pt as schemaBodyJson, Q as join$1, Rt as get$4, S as set$2, Sn as __commonJSMin, T as appendPreResponseHandler, Tt as stream, Ut as setHeader$1, Vt as prependUrl, Wt as setHeaders, X as makeWebSocket, Xt as isHttpClientError, Y as make$66, Yt as StatusCodeError, Z as awaitEmpty, Zt as empty$2, _ as get$3, _n as fromInput, _t as mergeCookies, a as layer$43, an as CurrentRedactedNames, b as makeUnsafe$3, bn as hasBody, cn as fromRecordUnsafe, d as HttpClient, dn as jsonUnsafe$1, en as set$3, et as run$4, f as TracerPropagationEnabled, g as transformResponse$1, gn as urlParams, gt as jsonUnsafe, h as retryTransient, hn as uint8Array, ht as isHttpServerResponse, j as HttpServerRequest, k as logger, kt as filterStatusOk, l as serve$1, ln as merge, lt as symbol$1, m as mapRequest, mn as text$1, mt as file, o as HttpServer, on as empty$3, ot as RouteNotFound, p as filterStatusOk$1, pt as empty$1, q as SocketErrorReason, qt as HttpClientError, r as Mime_default, rt as HttpServerError, sn as fromInput$1, t as layerWebSocketConstructor, tt as runtime, u as withLogAddress, un as isHttpBody, ut as toResponse, v as getAndSet, vn as schemaRecord, w as updateAndGet, wn as __require, wt as setHeaders$1, x as modify$2, xn as map$3, xt as schemaJson, y as make$63, yn as toRecord, yt as redirect, zt as make$64 } from "./NodeSocket-CLfrrutd.mjs";
+import { $ as decodeUnknownExit, $a as flatMap$1, $d as hasProperty, $l as format$1, $o as scopedWith, $s as TaggedError, $t as Union$1, $u as add$2, A as StructWithRest, Aa as asVoid, Ac as _await, Ai as make$75, An as encodeBase64, Ao as matchEffect, Ar as mapEffect$1, As as withSpan, At as suspend$1, B as Union, Ba as catchTags, Bc as succeed$4, Bi as offerUnsafe, Bn as now$1, Bo as provide$1, Br as provideService$1, Bs as forever$1, Bt as value, C as Number$1, Ca as andThen, Cc as forkUnsafe, Cd as map$6, Cl as CurrentLoggers$1, Cn as parseJson, Co as map$4, Cs as useSpan, Ct as isTrimmed, Cu as flatMapNullishOr, D as String$1, Da as annotateSpans, Dc as MinimumLogLevel, Dd as Number$2, Di as pipeTo, Dn as decodeBase64String, Do as match$2, Dr as make$74, Ds as withFiber$1, Dt as mutable, E as Record, Ea as annotateLogsScoped, Ec as provide$2, Ed as some, Ei as mapEffect$2, Er as isStream, Es as withErrorReporting, Et as makeFilter, Eu as isReadonlyArrayNonEmpty, Fi as failCause$3, Fl as reportCauseUnsafe, Fn as isGreaterThan$1, Fo as onInterrupt, Fr as onExit$1, Fs as snapshotUnsafe, Ft as toJsonSchemaDocument, G as annotateKey, Ga as currentParentSpan, Gc as isFailure, Gi as takeAll, Gl as ParentSpan, Gn as InvalidValue$1, Go as result, Gr as runFoldEffect, Gs as isDoneCause, Gt as toJsonSchemaMultiDocument, Gu as getOrUndefined$2, H as UnknownFromJsonString$1, Hc as fail$4, Hd as toJson, Hi as shutdown$1, Hn as toEpochMillis, Ho as provideService, Hr as runCollect, Hs as passthrough, Ht as toMultiDocumentOpenApi3_1, Hu as fail$1, I as URLFromString, Ia as catchFilter, Ic as isDeferred, Id as isEffect$1, In as isGreaterThanOrEqualTo$1, Io as option, Is as timer, It as toType, Iu as map$7, J as decodeEffect, Ja as ensuring, Ji as shutdown$2, Jl as make$77, Jn as Path, Jo as runForkWith, Js as Clock, K as brand, Ka as die, Kc as isSuccess, Kd as equals, Ki as unbounded$2, Kl as Tracer, Ko as retry, Kr as runForEach, Ks as parse$2, Kt as escapeToken, Ku as isFailure$1, L as Uint8Array$1, La as catchIf, Ld as withFiber, Li as make$78, Ln as isLessThan$1, Lo as orDie, Lr as pipeThroughChannel, Ls as update$3, Lt as withConstructorDefault, M as TaggedStruct, Ma as callback, Md as setStackTraceLimit, Mi as bounded, Mn as encodeHex, Mo as onError, Mr as merge$2, Ms as yieldNow, Mt as toCodecJson, Mu as reverse, N as TemplateLiteral, Na as catchCause, Nc as fail$3, Nd as Prototype, Ni as end, Nn as add$3, No as onExit, Ns as zipWith, Nt as toCodecJsonAST, Nu as sort, O as StringFromUriComponent, Oa as as, Oc as TracerEnabled, Od as make$72, On as decodeBase64Url, Oo as matchCauseEffect, Or as map$8, Ot as optional$3, Ou as map$5, Pa as catchDefect, Pc as failCause$2, Pd as PipeInspectableProto, Pn as formatIso, Ps as counter, Pt as toCodecStringTree, Q as decodeUnknownEffect, Qa as filterOrFail, Qc as StackTrace, Qd as compose$1, Ql as days, Qo as scoped, Qr as toAsyncIterable, Qs as TaggedClass, Qt as isSchemaError, Qu as Service$2, R as Undefined, Ra as catchReason, Rc as make$73, Rd as assignProperty, Ri as offer$1, Rl as sync$1, Rn as make$71, Ro as orElseSucceed, Rs as withAttributes, Rt as withDecodingDefault, S as NullOr, Sa as all, Sc as closeUnsafe, Sd as isSome, Si as filterArray, Sl as ConsoleRef, Sn as onSome, So as makeSpanScoped, Sr as fromQueue, Ss as updateContext, St as isSchema, Su as findLast, T as OptionFromNullOr, Ta as annotateLogs, Tc as makeUnsafe$8, Td as none, Tl as consolePretty$1, Tn as stringifyJson, To as mapError, Tr as groupedWithin, Ts as whileLoop, Tt as make$70, Tu as isArrayNonEmpty, U as Void, Ua as context, Uc as failCause$4, Ud as format, Ui as sliding$1, Ul as MinimumTraceLevel, Un as toUtc, Uo as raceFirst, Ur as runDrain, Us as spaced, Ut as apply, Uu as failVoid, V as Unknown, Va as catch_, Vc as die$1, Vd as NodeInspectSymbol, Vn as toDate, Vo as provideContext, Vr as run$5, Vt as VALID_OPEN_API_COMPONENTS_SCHEMAS_KEY_REGEXP, W as annotate$2, Wa as contextWith, Wc as interrupt$3, Wi as take$1, Wl as NativeSpan, Wn as Forbidden$1, Wo as repeat, Wr as runFold, Ws as catchDone, Wt as toRepresentations, Wu as getOrThrow, X as decodeSync, Xa as fail, Xi as subscribe, Xn as FileSystem, Xs as currentTimeNanos, Y as decodeExit, Ya as exit, Yc as void_$2, Yi as sliding, Yo as runPromiseWith, Ys as currentTimeMillis, Yu as succeed$2, Z as decodeTo, Za as failCause$1, Zc as NoSuchElementError, Zi as unbounded$1, Zo as scope, Zr as takeWhile, Zt as SchemaError, Zu as Reference, _c as unwrap, _d as fromUndefinedOr, _f as identity, _i as forEach$1, _l as map$9, _n as Transformation, _o as logDebug, _s as try_, _t as isMaxLength, _u as ensure, a as Class, aa as join$2, ac as effectContext, ad as getUnsafe$1, af as isTagged, al as findErrorOption, an as isLiteral, ao as forever, ar as debounce, as as succeedSome, at as encodeUnknownExit, b as NonEmptyString, ba as acquireUseRelease, bc as addFinalizerExit, bd as getOrUndefined, bi as mapInput, bl as squash, bn as transformOrFail, bo as logInfo, br as fromIterable$1, bs as uninterruptible, bt as isNonEmpty, bu as findFirst, c as Defect, ca as drop$1, cd as merge$1, cf as cast, ci as has, cl as hasInterrupts, cn as isOptional, co as forkScoped, cr as drain, cs as tap, ct as instanceOf, cu as minutes, d as ErrorClass, da as isEmpty$2, dc as provide, dd as exists, df as constTrue, dl as interruptors, dn as isVoid, do as ignore$1, ds as tapError, dt as isFinite, du as toMillis, ea as makeUnsafe$7, ec as taggedEnum, ed as empty$5, ef as isNotNull, el as combine$1, es as service, et as decodeUnknownOption, eu as fromInput$2, f as Exit, fa as size$2, fc as provideMerge, fd as filter, ff as constUndefined, fl as isCause, fn as resolveAt, fo as ignoreCause, fr as fail$5, fs as tapErrorTag, ft as isGreaterThan, g as Literals, gc as tap$1, gd as fromNullishOr, gi as drain$1, go as log$1, gr as fromAsyncIterable, gs as tryPromise, gt as isLessThanOrEqualTo, gu as empty$4, h as Literal, ha as PlatformError, hc as sync$2, hd as flatten, hf as dual, hn as toEncoded, ho as isEffect, hr as flatMap$2, ht as isLessThan, i as Cause, ic as effect, id as getOrUndefined$1, if as isString, ii as withSpan$1, in as isDeclaration, io as forEach, ir as concat, is as succeedNone, it as encodeUnknownEffect, j as TaggedErrorClass, ja as cached, jc as die$2, jd as getStackTraceLimit, ji as makeUnsafe$5, jl as fnUntraced$1, jn as encodeBase64Url, jo as never, jr as mapError$1, js as withTracerEnabled, jt as tag, ju as reduce, k as Struct, ka as asSome, kc as TracerTimingEnabled, ki as splitLines, kn as decodeBase64UrlString, kr as mapArrayEffect, ks as withParentSpan, kt as optionalKey, ku as match, l as Duration, la as empty$6, lc as launch, ld as omit, lf as compose, li as invalidate, ll as hasInterruptsOnly, ln as isSuspend, lo as fromResult, lr as empty$7, ls as tapCause, lt as is, lu as nanos, m as Int, mc as succeedContext, md as flatMap$3, mf as constant, mn as resolveIdentifier, mo as interruptible, mr as filter$2, ms as timeoutOption, mt as isInt, mu as allocate, n as ArraySchema, na as getCurrent, nc as build, nd as getOption, nf as isNullish, ni as transformPull, nn as getAST, no as fn, nr as catchCause$1, ns as sleep, nt as encodeEffect, nu as hours, o as DateTimeUtc, oa as runIn, oc as effectDiscard, od as make$68, on as isNull, oo as forkChild, or as decodeText, os as suspend, ot as fieldsAssign, ou as max, p as Finite, pa as toArray, pc as succeed$3, pd as firstSomeOf, pf as constVoid, pl as isFailReason, pn as resolveDescription, po as interrupt$1, pr as failCause$5, ps as timeout, pt as isGreaterThanOrEqualTo, pu as zero, q as declare, qc as match$3, qi as publish, ql as externalSpan, qn as makeFormatterDefault, qo as runFork, qr as runForEachArray, qs as round, qt as assign, qu as isSuccess$1, r as Boolean$1, ra as interrupt$4, rc as buildWithMemoMap, rd as getOrElse$1, rf as isObject$1, ri as unwrap$1, rl as fail$2, rn as getLastEncoding, ro as fnUntraced, rr as changes, rs as succeed$1, rt as encodeSync, s as DateTimeUtcFromString, sa as append$1, sc as empty$8, sd as makeUnsafe$4, si as get$6, sl as hasDies, sn as isObjects, so as forkIn, ss as sync, st as fromJsonString, su as millis, t as Any, ta as await_, tc as CurrentMemoMap, td as get$5, tf as isNotUndefined, to as flatten$1, tr as callback$1, ts as serviceOption, tt as encode$1, tu as fromInputUnsafe, u as DurationFromMillis, ua as head, uc as mergeAll, ud as contains, uf as constFalse, ui as make$69, ul as interrupt$2, un as isUnion, uo as gen, ur as encodeText, us as tapDefect, ut as isBetween, uu as seconds, v as Never, va as Transaction, vc as Scope, vd as getOrElse, vf as pipe, vl as pretty, vo as logError, vr as fromEffect, vs as tx, vt as isMaxProperties, vu as filter$1, w as Option, wa as annotateCurrentSpan, wc as make$76, wd as match$1, wi as fromTransform, wr as fromSubscription, ws as void_$1, wu as fromIterable, x as Null, xa as addFinalizer, xc as close, xd as isNone, xi as decodeText$1, xn as trim, xo as logWarning$1, xr as fromPubSub, xt as isPattern, xu as findFirstIndex, y as NonEmptyArray, ya as acquireRelease, yc as addFinalizer$1, yd as getOrNull, yf as pipeArguments, yl as prettyErrors, yn as transform$1, yo as logFatal, yr as fromEffectSchedule, ys as txRetry, yt as isMinLength, yu as filterMap, z as UndefinedOr, za as catchTag, zi as offerAll, zl as tracerLogger$1, zn as makeUnsafe$6, zo as promise, zr as provideContext$1, zs as addDelay, zt as make$67 } from "./Schema-B4KtKnpr.mjs";
+import { a as isQuitError, g as ChildProcessSpawner, h as make$79, i as Terminal$1, l as Crypto, n as layer$44, o as Stdio, r as QuitError, s as make$80, u as fromReadable } from "./NodeServices-BtcL7AtO.mjs";
+import { _ as withDefault$2, a as all$1, c as logLevel, d as option$1, f as port, g as url$1, i as TrueValues, l as map$10, m as string$4, n as FalseValues, o as boolean$3, p as schema$1, r as Record$1, s as int, t as Boolean$2, u as number } from "./Config-CxDW-52j.mjs";
+import { c as getOption$1, d as make$81, f as makeWith$1, l as invalidate$1, n as SqlClient, p as set$4, s as get$7, u as keys } from "./SqlClient-BQM_tAo_.mjs";
+import * as NodeModule from "node:module";
 import * as NodeChildProcess from "node:child_process";
 import * as NodeCrypto from "node:crypto";
 import { createCipheriv, createDecipheriv, hkdfSync, randomBytes, randomUUID } from "node:crypto";
@@ -17,7 +18,7 @@ import { fileURLToPath } from "node:url";
 import * as NodeReadline from "node:readline";
 import { parse } from "yaml";
 import * as NodeNet from "node:net";
-import { createRequire } from "module";
+import { createRequire as createRequire$1 } from "module";
 import * as NodeFSP from "node:fs/promises";
 import { FileFinder } from "@ff-labs/fff-node";
 import { query } from "@anthropic-ai/claude-agent-sdk";
@@ -5880,7 +5881,7 @@ const map$2 = /*#__PURE__*/ dual(2, (self, f) => flatMap(self, (a) => succeed(f(
 * @category constructors
 * @since 4.0.0
 */
-const password = (options) => basePrompt(options, "password").pipe(map$2(make$64));
+const password = (options) => basePrompt(options, "password").pipe(map$2(make$67));
 /**
 * Runs a prompt by reading terminal input and rendering prompt frames until the
 * prompt submits a value.
@@ -10588,7 +10589,7 @@ const isCommand = (u) => hasProperty(u, TypeId$14);
 * @category constructors
 * @since 4.0.0
 */
-const make$59 = (name, config, handler) => {
+const make$62 = (name, config, handler) => {
 	return makeCommand({
 		name,
 		config: parseConfig(config ?? {}),
@@ -11084,7 +11085,7 @@ const runWith = (command, config) => {
 		}
 		const services = match$1(logLevel, {
 			onNone: () => empty$5(),
-			onSome: (level) => make$65(MinimumLogLevel, level)
+			onSome: (level) => make$68(MinimumLogLevel, level)
 		});
 		yield* provideContext(program, services);
 	}, catchFilter((error) => isCliError(error) && error._tag === "ShowHelp" ? succeed$2(error) : fail$1(error), (error) => andThen(showHelp(command, error), fail(error))), catchFilter((e) => isQuitError(e) ? succeed$2(e) : fail$1(e), (_) => interrupt$1));
@@ -11102,7 +11103,7 @@ const closeServer = (server) => {
 * NetService - Service tag for startup networking helpers.
 */
 var NetService = class extends Service$2()("@t3tools/shared/Net/NetService") {};
-const make$58 = () => {
+const make$61 = () => {
 	/**
 	* Returns true when a TCP server can bind to {host, port}.
 	* `EADDRNOTAVAIL` is treated as available so IPv6-absent hosts don't fail
@@ -11211,7 +11212,7 @@ const make$58 = () => {
 		})
 	};
 };
-const layer$39 = sync$2(NetService, make$58);
+const layer$42 = sync$2(NetService, make$61);
 //#endregion
 //#region package.json
 var version = "0.0.31";
@@ -12086,7 +12087,7 @@ function parse$1(input) {
 const FULL_PATH_REGEXP = /^https?:\/\/.*?\//;
 const OPTIONAL_PARAM_REGEXP = /(\/:[^/()]*?)\?(\/?)/;
 /** @internal */
-const make$57 = (options = {}) => new RouterImpl(options);
+const make$60 = (options = {}) => new RouterImpl(options);
 var RouterImpl = class {
 	constructor(options = {}) {
 		this.options = {
@@ -12605,7 +12606,7 @@ const httpMethods = [
 * @since 1.0.0
 * @category constructors
 */
-const make$56 = make$57;
+const make$59 = make$60;
 //#endregion
 //#region ../../node_modules/.pnpm/effect@4.0.0-beta.103_patch_hash=a18f963109656ddbeb2a99ca45f942ecf54830986259eb01ce6a970421c9c6a9/node_modules/effect/dist/unstable/http/HttpRouter.js
 /**
@@ -12640,8 +12641,8 @@ const HttpRouter = /*#__PURE__*/ Service$2("effect/http/HttpRouter");
 * @category constructors
 * @since 4.0.0
 */
-const make$55 = /*#__PURE__*/ gen(function* () {
-	const router = make$56(yield* RouterConfig);
+const make$58 = /*#__PURE__*/ gen(function* () {
+	const router = make$59(yield* RouterConfig);
 	const middleware = /* @__PURE__ */ new Set();
 	const addAll = (routes) => contextWith((context) => {
 		const middleware = getMiddleware(context);
@@ -12807,7 +12808,7 @@ const add$1 = (method, path, handler, options) => use((router) => router.add(met
 * @category layers
 * @since 4.0.0
 */
-const layer$38 = /*#__PURE__*/ effect(HttpRouter)(make$55);
+const layer$41 = /*#__PURE__*/ effect(HttpRouter)(make$58);
 const RouteTypeId = "~effect/http/HttpRouter/Route";
 const makeRoute = (options) => ({
 	...options,
@@ -12939,11 +12940,11 @@ var MiddlewareImpl = class MiddlewareImpl {
 		this.dependencies = dependencies;
 		const contextKey = `effect/http/HttpRouter/Middleware-${++middlewareId}`;
 		this.layer = effectContext(gen({ self: this }, function* () {
-			const context$3 = yield* context();
-			const stack = [context$3.mapUnsafe.get(fnContextKey)];
+			const context$4 = yield* context();
+			const stack = [context$4.mapUnsafe.get(fnContextKey)];
 			if (this.dependencies) {
 				const memoMap = yield* CurrentMemoMap;
-				const scope = get$5(context$3, Scope);
+				const scope = get$5(context$4, Scope);
 				const depsContext = yield* buildWithMemoMap(this.dependencies, memoMap, scope);
 				stack.push(...getMiddleware(depsContext));
 			}
@@ -12991,7 +12992,7 @@ const cors = (options) => middleware(cors$1(options), { global: true });
 const serve = (appLayer, options) => {
 	let middleware = options?.middleware;
 	if (options?.disableLogger !== true) middleware = middleware ? compose(middleware, logger) : logger;
-	const RouterLayer = options?.routerConfig ? provide(layer$38, succeed$3(RouterConfig)(options.routerConfig)) : layer$38;
+	const RouterLayer = options?.routerConfig ? provide(layer$41, succeed$3(RouterConfig)(options.routerConfig)) : layer$41;
 	return gen(function* () {
 		const handler = (yield* HttpRouter).asHttpEffect();
 		return middleware ? serve$1(handler, middleware) : serve$1(handler);
@@ -13098,7 +13099,7 @@ function makeProto$4(options) {
 * @category constructors
 * @since 4.0.0
 */
-const make$54 = (method) => (identifier, path, options) => {
+const make$57 = (method) => (identifier, path, options) => {
 	const disableCodecs = options?.disableCodecs ?? false;
 	const transformStringTree = disableCodecs ? identity : toCodecStringTree;
 	return makeProto$4({
@@ -13239,15 +13240,15 @@ function transformPayload(schema, method) {
 * @category constructors
 * @since 4.0.0
 */
-const get$2 = /*#__PURE__*/ make$54("GET");
+const get$2 = /*#__PURE__*/ make$57("GET");
 /**
 * Creates a `POST` endpoint declaration.
 *
 * @category constructors
 * @since 4.0.0
 */
-const post = /*#__PURE__*/ make$54("POST");
-const del = /*#__PURE__*/ make$54("DELETE");
+const post = /*#__PURE__*/ make$57("POST");
+const del = /*#__PURE__*/ make$57("DELETE");
 //#endregion
 //#region ../../node_modules/.pnpm/effect@4.0.0-beta.103_patch_hash=a18f963109656ddbeb2a99ca45f942ecf54830986259eb01ce6a970421c9c6a9/node_modules/effect/dist/unstable/httpapi/HttpApi.js
 const TypeId$11 = "~effect/httpapi/HttpApi";
@@ -13322,7 +13323,7 @@ const makeProto$3 = (options) => {
 * @category constructors
 * @since 4.0.0
 */
-const make$53 = (identifier) => makeProto$3({
+const make$56 = (identifier) => makeProto$3({
 	identifier,
 	groups: {},
 	annotations: empty$5()
@@ -13461,7 +13462,7 @@ const makeProto$2 = (options) => {
 * @category constructors
 * @since 4.0.0
 */
-const make$52 = (identifier, options) => makeProto$2({
+const make$55 = (identifier, options) => makeProto$2({
 	identifier,
 	topLevel: options?.topLevel ?? false,
 	endpoints: {},
@@ -16172,11 +16173,11 @@ const RelayHealthResponse = Struct({
 	ok: Boolean$1,
 	service: Literal("relay")
 });
-const RelayHealthGroup = make$52("health").add(get$2("health", "/health", {
+const RelayHealthGroup = make$55("health").add(get$2("health", "/health", {
 	success: RelayHealthResponse,
 	error: RelayInternalError
 }).annotate(Summary, "Check relay health")).annotate(Description, "Service health and readiness.");
-const RelayMetadataGroup = make$52("metadata").add(get$2("authorizationServer", "/.well-known/oauth-authorization-server", { success: RelayAuthorizationServerMetadata }).annotate(Summary, "Read OAuth authorization-server metadata"), get$2("protectedResource", "/.well-known/oauth-protected-resource", { success: RelayProtectedResourceMetadata }).annotate(Summary, "Read OAuth protected-resource metadata")).annotate(Description, "OAuth and DPoP discovery metadata.");
+const RelayMetadataGroup = make$55("metadata").add(get$2("authorizationServer", "/.well-known/oauth-authorization-server", { success: RelayAuthorizationServerMetadata }).annotate(Summary, "Read OAuth authorization-server metadata"), get$2("protectedResource", "/.well-known/oauth-protected-resource", { success: RelayProtectedResourceMetadata }).annotate(Summary, "Read OAuth protected-resource metadata")).annotate(Description, "OAuth and DPoP discovery metadata.");
 const RelayRegisterDeviceEndpoint = post("registerDevice", "/v1/mobile/devices", {
 	headers: RelayDpopRequestHeaders,
 	payload: RelayDeviceRegistrationRequest,
@@ -16200,8 +16201,8 @@ const RelayUnregisterDeviceEndpoint = del("unregisterDevice", "/v1/mobile/device
 	success: RelayOkResponse,
 	error: RelayAuthAndInternalErrors
 }).annotate(Summary, "Unregister a mobile device");
-const RelayMobileGroup = make$52("mobile").add(RelayRegisterDeviceEndpoint, RelayRegisterLiveActivityEndpoint, RelayAgentActivitySnapshotEndpoint, RelayUnregisterDeviceEndpoint).annotate(Description, "Mobile push-notification and Live Activity registration.").middleware(RelayDpopClientAuth);
-const RelayClientGroup = make$52("client").add(get$2("listEnvironments", "/v1/environments", {
+const RelayMobileGroup = make$55("mobile").add(RelayRegisterDeviceEndpoint, RelayRegisterLiveActivityEndpoint, RelayAgentActivitySnapshotEndpoint, RelayUnregisterDeviceEndpoint).annotate(Description, "Mobile push-notification and Live Activity registration.").middleware(RelayDpopClientAuth);
+const RelayClientGroup = make$55("client").add(get$2("listEnvironments", "/v1/environments", {
 	headers: RelayBearerRequestHeaders,
 	success: RelayListEnvironmentsResponse,
 	error: RelayAuthAndInternalErrors
@@ -16236,7 +16237,7 @@ const RelayExchangeDpopAccessTokenEndpoint = post("exchangeDpopAccessToken", "/v
 	success: RelayDpopAccessTokenResponse,
 	error: RelayAuthAndInternalErrors
 }).annotate(Summary, "Exchange a Clerk token for a DPoP access token").annotate(Description, "Bootstrap endpoint. Send the DPoP proof JWT in the dpop header and the Clerk token in subject_token. The returned access token is bound to the proof key.");
-const RelayTokenGroup = make$52("token").add(RelayExchangeDpopAccessTokenEndpoint).annotate(Description, "OAuth token exchange for DPoP-bound client access.");
+const RelayTokenGroup = make$55("token").add(RelayExchangeDpopAccessTokenEndpoint).annotate(Description, "OAuth token exchange for DPoP-bound client access.");
 const RelayConnectEnvironmentEndpoint = post("connectEnvironment", "/v1/environments/:environmentId/connect", {
 	headers: RelayDpopRequestHeaders,
 	params: Struct({ environmentId: EnvironmentId }),
@@ -16250,8 +16251,8 @@ const RelayGetEnvironmentStatusEndpoint = post("getEnvironmentStatus", "/v1/envi
 	success: RelayEnvironmentStatusResponse,
 	error: RelayEnvironmentConnectErrors
 }).annotate(Summary, "Check environment status");
-const RelayDpopClientGroup = make$52("dpopClient").add(RelayConnectEnvironmentEndpoint, RelayGetEnvironmentStatusEndpoint).annotate(Description, "DPoP-authenticated client access to linked environments.").middleware(RelayDpopClientAuth);
-const RelayServerGroup = make$52("server").add(post("publishAgentActivity", "/v1/environments/:environmentId/threads/:threadId/agent-activity", {
+const RelayDpopClientGroup = make$55("dpopClient").add(RelayConnectEnvironmentEndpoint, RelayGetEnvironmentStatusEndpoint).annotate(Description, "DPoP-authenticated client access to linked environments.").middleware(RelayDpopClientAuth);
+const RelayServerGroup = make$55("server").add(post("publishAgentActivity", "/v1/environments/:environmentId/threads/:threadId/agent-activity", {
 	params: Struct({
 		environmentId: EnvironmentId,
 		threadId: ThreadId
@@ -16260,7 +16261,7 @@ const RelayServerGroup = make$52("server").add(post("publishAgentActivity", "/v1
 	success: RelayPublishResponse,
 	error: RelayAgentActivityPublishErrors
 }).annotate(Summary, "Publish agent activity")).annotate(Description, "Environment-authenticated activity publication.").middleware(RelayEnvironmentAuth);
-make$53("RelayApi").add(RelayHealthGroup, RelayMetadataGroup, RelayMobileGroup, RelayClientGroup, RelayTokenGroup, RelayDpopClientGroup, RelayServerGroup).annotate(Title$1, "AgentLink Relay API").annotate(Version, "1.0.0").annotate(Description, "Control-plane API for linking T3 environments, connecting authorized clients, and publishing agent activity.");
+make$56("RelayApi").add(RelayHealthGroup, RelayMetadataGroup, RelayMobileGroup, RelayClientGroup, RelayTokenGroup, RelayDpopClientGroup, RelayServerGroup).annotate(Title$1, "AgentLink Relay API").annotate(Version, "1.0.0").annotate(Description, "Control-plane API for linking T3 environments, connecting authorized clients, and publishing agent activity.");
 //#endregion
 //#region ../t3-contracts/src/environmentHttp.ts
 const OptionalBearerHeaders = Struct({
@@ -16438,8 +16439,8 @@ const EnvironmentCloudPreferencesRequest = Struct({ publishAgentActivity: Boolea
 const AuthPairingLinkRevokeResult = Struct({ revoked: Boolean$1 });
 const AuthClientSessionRevokeResult = Struct({ revoked: Boolean$1 });
 const AuthOtherClientSessionsRevokeResult = Struct({ revokedCount: Number$1 });
-var EnvironmentMetadataHttpApi = class extends make$52("metadata").add(get$2("descriptor", "/.well-known/t3/environment", { success: ExecutionEnvironmentDescriptor })) {};
-var EnvironmentAuthHttpApi = class extends make$52("auth").add(get$2("session", "/api/auth/session", {
+var EnvironmentMetadataHttpApi = class extends make$55("metadata").add(get$2("descriptor", "/.well-known/t3/environment", { success: ExecutionEnvironmentDescriptor })) {};
+var EnvironmentAuthHttpApi = class extends make$55("auth").add(get$2("session", "/api/auth/session", {
 	headers: OptionalBearerHeaders,
 	success: AuthSessionState,
 	error: [EnvironmentInternalError]
@@ -16485,7 +16486,7 @@ var EnvironmentAuthHttpApi = class extends make$52("auth").add(get$2("session",
 	error: EnvironmentScopedOperationErrors
 }).middleware(EnvironmentAuthenticatedAuth)) {};
 const EnvironmentOrchestrationThreadSnapshotParams = Struct({ threadId: ThreadId });
-var EnvironmentOrchestrationHttpApi = class extends make$52("orchestration").add(get$2("snapshot", "/api/orchestration/snapshot", {
+var EnvironmentOrchestrationHttpApi = class extends make$55("orchestration").add(get$2("snapshot", "/api/orchestration/snapshot", {
 	headers: OptionalBearerHeaders,
 	success: OrchestrationReadModel,
 	error: EnvironmentOrchestrationSnapshotErrors
@@ -16504,7 +16505,7 @@ var EnvironmentOrchestrationHttpApi = class extends make$52("orchestration").add
 	success: DispatchResult,
 	error: EnvironmentOrchestrationDispatchErrors
 }).middleware(EnvironmentAuthenticatedAuth)) {};
-var EnvironmentConnectHttpApi = class extends make$52("connect").add(post("linkProof", "/api/connect/link-proof", {
+var EnvironmentConnectHttpApi = class extends make$55("connect").add(post("linkProof", "/api/connect/link-proof", {
 	headers: OptionalBearerHeaders,
 	payload: RelayLinkProofRequest,
 	success: RelayEnvironmentLinkProof,
@@ -16540,7 +16541,7 @@ var EnvironmentConnectHttpApi = class extends make$52("connect").add(post("linkP
 	success: RelayEnvironmentMintResponse,
 	error: EnvironmentHttpCloudErrors
 })) {};
-var EnvironmentHttpApi = class extends make$53("environment").add(EnvironmentMetadataHttpApi).add(EnvironmentAuthHttpApi).add(EnvironmentOrchestrationHttpApi).add(EnvironmentConnectHttpApi) {};
+var EnvironmentHttpApi = class extends make$56("environment").add(EnvironmentMetadataHttpApi).add(EnvironmentAuthHttpApi).add(EnvironmentOrchestrationHttpApi).add(EnvironmentConnectHttpApi) {};
 //#endregion
 //#region ../t3-contracts/src/relayClient.ts
 const RelayClientStatusSchema = Union([
@@ -16763,10 +16764,10 @@ const TypeId$7 = "~effect/LayerMap";
 * @category constructors
 * @since 3.14.0
 */
-const make$51 = /*#__PURE__*/ fnUntraced(function* (lookup, options) {
-	const context$2 = yield* context();
-	const memoMap = CurrentMemoMap.forkOrCreate(context$2);
-	const rcMap = yield* make$66({
+const make$54 = /*#__PURE__*/ fnUntraced(function* (lookup, options) {
+	const context$3 = yield* context();
+	const memoMap = CurrentMemoMap.forkOrCreate(context$3);
+	const rcMap = yield* make$69({
 		lookup: (key) => contextWith((_) => buildWithMemoMap(lookup(key), memoMap, get$5(_, Scope))),
 		idleTimeToLive: options?.idleTimeToLive
 	});
@@ -16831,7 +16832,7 @@ const make$51 = /*#__PURE__*/ fnUntraced(function* (lookup, options) {
 * @category constructors
 * @since 3.14.0
 */
-const fromRecord$1 = (layers, options) => make$51((key) => layers[key], {
+const fromRecord$1 = (layers, options) => make$54((key) => layers[key], {
 	...options,
 	preloadKeys: options?.preload ? Object.keys(layers) : void 0
 });
@@ -16893,7 +16894,7 @@ const Service = () => (id, options) => {
 	Object.defineProperty(TagClass, "stack", { get() {
 		return creationError.stack;
 	} });
-	TagClass_.layerNoDeps = effect(TagClass_)("lookup" in options ? make$51(options.lookup, options) : fromRecord$1(options.layers, options));
+	TagClass_.layerNoDeps = effect(TagClass_)("lookup" in options ? make$54(options.lookup, options) : fromRecord$1(options.layers, options));
 	TagClass_.layer = options.dependencies && options.dependencies.length > 0 ? provide(TagClass_.layerNoDeps, options.dependencies) : TagClass_.layerNoDeps;
 	TagClass_.get = (key) => unwrap(map$4(TagClass_, (layerMap) => layerMap.get(key)));
 	TagClass_.contextEffect = (key) => flatMap$1(TagClass_, (layerMap) => layerMap.contextEffect(key));
@@ -17018,7 +17019,7 @@ const tracerLogger = tracerLogger$1;
 * @category layers
 * @since 4.0.0
 */
-const layer$37 = (loggers, options) => effect(CurrentLoggers, withFiber(fnUntraced$1(function* (fiber) {
+const layer$40 = (loggers, options) => effect(CurrentLoggers, withFiber(fnUntraced$1(function* (fiber) {
 	const currentLoggers = new Set(options?.mergeWithExisting === true ? fiber.getRef(CurrentLoggers$1) : []);
 	for (const logger of loggers) currentLoggers.add(isEffect$1(logger) ? yield* logger : logger);
 	return currentLoggers;
@@ -17084,7 +17085,7 @@ const makeUnsafe$2 = (value) => {
 * @category constructors
 * @since 2.0.0
 */
-const make$50 = (value) => sync(() => makeUnsafe$2(value));
+const make$53 = (value) => sync(() => makeUnsafe$2(value));
 /**
 * Reads the current value synchronously, bypassing the `Effect` API and the
 * ref's semaphore.
@@ -17169,7 +17170,7 @@ const TypeId$5 = "~effect/transactions/TxRef";
 * @category constructors
 * @since 2.0.0
 */
-const make$49 = (initial) => sync(() => makeUnsafe$1(initial));
+const make$52 = (initial) => sync(() => makeUnsafe$1(initial));
 /**
 * Creates a new `TxRef` synchronously with the specified initial value.
 *
@@ -17397,7 +17398,7 @@ const TxChunkProto = {
 * @category constructors
 * @since 4.0.0
 */
-const empty = () => map$4(make$49(empty$6()), (ref) => makeUnsafe(ref));
+const empty = () => map$4(make$52(empty$6()), (ref) => makeUnsafe(ref));
 /**
 * Creates a new `TxChunk` with the specified TxRef.
 *
@@ -17722,7 +17723,7 @@ const TxQueueProto = {
 */
 const unbounded = () => gen(function* () {
 	const items = yield* empty();
-	const stateRef = yield* make$49({ _tag: "Open" });
+	const stateRef = yield* make$52({ _tag: "Open" });
 	const txQueue = Object.create(TxQueueProto);
 	txQueue.strategy = "unbounded";
 	txQueue.capacity = Number.POSITIVE_INFINITY;
@@ -22845,7 +22846,7 @@ const schema = /*#__PURE__*/ declare(isStream);
 * @since 4.0.0
 */
 function Stream(success, error) {
-	return make$67(schema.ast, {
+	return make$70(schema.ast, {
 		[StreamSchemaTypeId]: StreamSchemaTypeId,
 		success,
 		error
@@ -22999,7 +23000,7 @@ const makeProto$1 = (options) => {
 * @category constructors
 * @since 4.0.0
 */
-const make$48 = (tag, options) => {
+const make$51 = (tag, options) => {
 	const successSchema = options?.success ?? Void;
 	const errorSchema = options?.error ?? Never;
 	const defectSchema = options?.defect ?? Defect();
@@ -23155,7 +23156,7 @@ const RpcGroupProto = {
 		});
 	},
 	annotateRpcs(service, value) {
-		return this.annotateRpcsMerge(make$65(service, value));
+		return this.annotateRpcsMerge(make$68(service, value));
 	},
 	annotateMerge(context) {
 		return makeProto({
@@ -23182,7 +23183,7 @@ const makeProto = (options) => Object.assign(function() {}, RpcGroupProto, {
 * @category constructors
 * @since 4.0.0
 */
-const make$47 = (...rpcs) => makeProto({
+const make$50 = (...rpcs) => makeProto({
 	requests: new Map(rpcs.map((rpc) => [rpc._tag, rpc])),
 	annotations: empty$5()
 });
@@ -23266,22 +23267,22 @@ const WS_METHODS = {
 	subscribeBackgroundPolicy: "subscribeBackgroundPolicy",
 	subscribeResourceTelemetry: "subscribeResourceTelemetry"
 };
-const WsServerUpsertKeybindingRpc = make$48(WS_METHODS.serverUpsertKeybinding, {
+const WsServerUpsertKeybindingRpc = make$51(WS_METHODS.serverUpsertKeybinding, {
 	payload: ServerUpsertKeybindingInput,
 	success: ServerUpsertKeybindingResult,
 	error: Union([KeybindingsConfigError, EnvironmentAuthorizationError])
 });
-const WsServerRemoveKeybindingRpc = make$48(WS_METHODS.serverRemoveKeybinding, {
+const WsServerRemoveKeybindingRpc = make$51(WS_METHODS.serverRemoveKeybinding, {
 	payload: ServerRemoveKeybindingInput,
 	success: ServerRemoveKeybindingResult,
 	error: Union([KeybindingsConfigError, EnvironmentAuthorizationError])
 });
-const WsServerProbeRpc = make$48(WS_METHODS.serverProbe, {
+const WsServerProbeRpc = make$51(WS_METHODS.serverProbe, {
 	payload: Struct({}),
 	success: Struct({}),
 	error: EnvironmentAuthorizationError
 });
-const WsServerGetConfigRpc = make$48(WS_METHODS.serverGetConfig, {
+const WsServerGetConfigRpc = make$51(WS_METHODS.serverGetConfig, {
 	payload: Struct({}),
 	success: ServerConfig$1,
 	error: Union([
@@ -23290,7 +23291,7 @@ const WsServerGetConfigRpc = make$48(WS_METHODS.serverGetConfig, {
 		EnvironmentAuthorizationError
 	])
 });
-const WsServerRefreshProvidersRpc = make$48(WS_METHODS.serverRefreshProviders, {
+const WsServerRefreshProvidersRpc = make$51(WS_METHODS.serverRefreshProviders, {
 	payload: Struct({ 
 	/**
 	* When supplied, only refresh this specific provider instance. When
@@ -23302,202 +23303,202 @@ instanceId: optional$3(ProviderInstanceId) }),
 	success: ServerProviderUpdatedPayload,
 	error: EnvironmentAuthorizationError
 });
-const WsServerUpdateProviderRpc = make$48(WS_METHODS.serverUpdateProvider, {
+const WsServerUpdateProviderRpc = make$51(WS_METHODS.serverUpdateProvider, {
 	payload: ServerProviderUpdateInput,
 	success: ServerProviderUpdatedPayload,
 	error: Union([ServerProviderUpdateError, EnvironmentAuthorizationError])
 });
-const WsServerUpdateServerRpc = make$48(WS_METHODS.serverUpdateServer, {
+const WsServerUpdateServerRpc = make$51(WS_METHODS.serverUpdateServer, {
 	payload: ServerSelfUpdateInput,
 	success: ServerSelfUpdateResult,
 	error: Union([ServerSelfUpdateError, EnvironmentAuthorizationError])
 });
-const WsServerUpdateServerWithProgressRpc = make$48(WS_METHODS.serverUpdateServerWithProgress, {
+const WsServerUpdateServerWithProgressRpc = make$51(WS_METHODS.serverUpdateServerWithProgress, {
 	payload: ServerSelfUpdateInput,
 	success: ServerSelfUpdateProgressEvent,
 	error: Union([ServerSelfUpdateError, EnvironmentAuthorizationError]),
 	stream: true
 });
-const WsServerGetSettingsRpc = make$48(WS_METHODS.serverGetSettings, {
+const WsServerGetSettingsRpc = make$51(WS_METHODS.serverGetSettings, {
 	payload: Struct({}),
 	success: ServerSettings,
 	error: Union([ServerSettingsError, EnvironmentAuthorizationError])
 });
-const WsServerUpdateSettingsRpc = make$48(WS_METHODS.serverUpdateSettings, {
+const WsServerUpdateSettingsRpc = make$51(WS_METHODS.serverUpdateSettings, {
 	payload: Struct({ patch: ServerSettingsPatch }),
 	success: ServerSettings,
 	error: Union([ServerSettingsError, EnvironmentAuthorizationError])
 });
-const WsServerDiscoverSourceControlRpc = make$48(WS_METHODS.serverDiscoverSourceControl, {
+const WsServerDiscoverSourceControlRpc = make$51(WS_METHODS.serverDiscoverSourceControl, {
 	payload: Struct({}),
 	success: SourceControlDiscoveryResult,
 	error: EnvironmentAuthorizationError
 });
-const WsServerGetTraceDiagnosticsRpc = make$48(WS_METHODS.serverGetTraceDiagnostics, {
+const WsServerGetTraceDiagnosticsRpc = make$51(WS_METHODS.serverGetTraceDiagnostics, {
 	payload: Struct({}),
 	success: ServerTraceDiagnosticsResult,
 	error: EnvironmentAuthorizationError
 });
-const WsServerGetProcessDiagnosticsRpc = make$48(WS_METHODS.serverGetProcessDiagnostics, {
+const WsServerGetProcessDiagnosticsRpc = make$51(WS_METHODS.serverGetProcessDiagnostics, {
 	payload: Struct({}),
 	success: ServerProcessDiagnosticsResult,
 	error: EnvironmentAuthorizationError
 });
-const WsServerGetProcessResourceHistoryRpc = make$48(WS_METHODS.serverGetProcessResourceHistory, {
+const WsServerGetProcessResourceHistoryRpc = make$51(WS_METHODS.serverGetProcessResourceHistory, {
 	payload: ServerProcessResourceHistoryInput,
 	success: ServerProcessResourceHistoryResult,
 	error: EnvironmentAuthorizationError
 });
-const WsServerGetResourceTelemetryHistoryRpc = make$48(WS_METHODS.serverGetResourceTelemetryHistory, {
+const WsServerGetResourceTelemetryHistoryRpc = make$51(WS_METHODS.serverGetResourceTelemetryHistory, {
 	payload: ResourceTelemetryHistoryInput,
 	success: ResourceTelemetryHistory,
 	error: EnvironmentAuthorizationError
 });
-const WsServerRetryResourceTelemetryRpc = make$48(WS_METHODS.serverRetryResourceTelemetry, {
+const WsServerRetryResourceTelemetryRpc = make$51(WS_METHODS.serverRetryResourceTelemetry, {
 	payload: Struct({}),
 	success: ResourceTelemetryRetryResult,
 	error: EnvironmentAuthorizationError
 });
-const WsServerSignalProcessRpc = make$48(WS_METHODS.serverSignalProcess, {
+const WsServerSignalProcessRpc = make$51(WS_METHODS.serverSignalProcess, {
 	payload: ServerSignalProcessInput,
 	success: ServerSignalProcessResult,
 	error: EnvironmentAuthorizationError
 });
-const WsCloudGetRelayClientStatusRpc = make$48(WS_METHODS.cloudGetRelayClientStatus, {
+const WsCloudGetRelayClientStatusRpc = make$51(WS_METHODS.cloudGetRelayClientStatus, {
 	payload: Struct({}),
 	success: RelayClientStatusSchema,
 	error: EnvironmentAuthorizationError
 });
-const WsCloudInstallRelayClientRpc = make$48(WS_METHODS.cloudInstallRelayClient, {
+const WsCloudInstallRelayClientRpc = make$51(WS_METHODS.cloudInstallRelayClient, {
 	payload: Struct({}),
 	success: RelayClientInstallProgressEventSchema,
 	error: Union([RelayClientInstallFailedError, EnvironmentAuthorizationError]),
 	stream: true
 });
-const WsServerReportClientActivityRpc = make$48(WS_METHODS.serverReportClientActivity, {
+const WsServerReportClientActivityRpc = make$51(WS_METHODS.serverReportClientActivity, {
 	payload: ClientActivityReportInput,
 	error: EnvironmentAuthorizationError
 });
-const WsServerReportHostPowerStateRpc = make$48(WS_METHODS.serverReportHostPowerState, {
+const WsServerReportHostPowerStateRpc = make$51(WS_METHODS.serverReportHostPowerState, {
 	payload: HostPowerSnapshot,
 	error: EnvironmentAuthorizationError
 });
-const WsServerGetBackgroundPolicyRpc = make$48(WS_METHODS.serverGetBackgroundPolicy, {
+const WsServerGetBackgroundPolicyRpc = make$51(WS_METHODS.serverGetBackgroundPolicy, {
 	payload: Struct({}),
 	success: BackgroundPolicySnapshot,
 	error: EnvironmentAuthorizationError
 });
-const WsSourceControlLookupRepositoryRpc = make$48(WS_METHODS.sourceControlLookupRepository, {
+const WsSourceControlLookupRepositoryRpc = make$51(WS_METHODS.sourceControlLookupRepository, {
 	payload: SourceControlRepositoryLookupInput,
 	success: SourceControlRepositoryInfo,
 	error: Union([SourceControlRepositoryError, EnvironmentAuthorizationError])
 });
-const WsSourceControlCloneRepositoryRpc = make$48(WS_METHODS.sourceControlCloneRepository, {
+const WsSourceControlCloneRepositoryRpc = make$51(WS_METHODS.sourceControlCloneRepository, {
 	payload: SourceControlCloneRepositoryInput,
 	success: SourceControlCloneRepositoryResult,
 	error: Union([SourceControlRepositoryError, EnvironmentAuthorizationError])
 });
-const WsSourceControlPublishRepositoryRpc = make$48(WS_METHODS.sourceControlPublishRepository, {
+const WsSourceControlPublishRepositoryRpc = make$51(WS_METHODS.sourceControlPublishRepository, {
 	payload: SourceControlPublishRepositoryInput,
 	success: SourceControlPublishRepositoryResult,
 	error: Union([SourceControlRepositoryError, EnvironmentAuthorizationError])
 });
-const WsProjectsSearchEntriesRpc = make$48(WS_METHODS.projectsSearchEntries, {
+const WsProjectsSearchEntriesRpc = make$51(WS_METHODS.projectsSearchEntries, {
 	payload: ProjectSearchEntriesInput,
 	success: ProjectSearchEntriesResult,
 	error: Union([ProjectSearchEntriesError, EnvironmentAuthorizationError])
 });
-const WsProjectsSearchContentsRpc = make$48(WS_METHODS.projectsSearchContents, {
+const WsProjectsSearchContentsRpc = make$51(WS_METHODS.projectsSearchContents, {
 	payload: ProjectSearchContentsInput,
 	success: ProjectSearchContentsResult,
 	error: Union([ProjectSearchContentsError, EnvironmentAuthorizationError])
 });
-const WsProjectsListEntriesRpc = make$48(WS_METHODS.projectsListEntries, {
+const WsProjectsListEntriesRpc = make$51(WS_METHODS.projectsListEntries, {
 	payload: ProjectListEntriesInput,
 	success: ProjectListEntriesResult,
 	error: Union([ProjectListEntriesError, EnvironmentAuthorizationError])
 });
-const WsProjectsReadFileRpc = make$48(WS_METHODS.projectsReadFile, {
+const WsProjectsReadFileRpc = make$51(WS_METHODS.projectsReadFile, {
 	payload: ProjectReadFileInput,
 	success: ProjectReadFileResult,
 	error: Union([ProjectReadFileError, EnvironmentAuthorizationError])
 });
-const WsProjectsWriteFileRpc = make$48(WS_METHODS.projectsWriteFile, {
+const WsProjectsWriteFileRpc = make$51(WS_METHODS.projectsWriteFile, {
 	payload: ProjectWriteFileInput,
 	success: ProjectWriteFileResult,
 	error: Union([ProjectWriteFileError, EnvironmentAuthorizationError])
 });
-const WsShellOpenInEditorRpc = make$48(WS_METHODS.shellOpenInEditor, {
+const WsShellOpenInEditorRpc = make$51(WS_METHODS.shellOpenInEditor, {
 	payload: LaunchEditorInput,
 	error: Union([ExternalLauncherError, EnvironmentAuthorizationError])
 });
-const WsFilesystemBrowseRpc = make$48(WS_METHODS.filesystemBrowse, {
+const WsFilesystemBrowseRpc = make$51(WS_METHODS.filesystemBrowse, {
 	payload: FilesystemBrowseInput,
 	success: FilesystemBrowseResult,
 	error: Union([FilesystemBrowseError, EnvironmentAuthorizationError])
 });
-const WsAssetsCreateUrlRpc = make$48(WS_METHODS.assetsCreateUrl, {
+const WsAssetsCreateUrlRpc = make$51(WS_METHODS.assetsCreateUrl, {
 	payload: AssetCreateUrlInput,
 	success: AssetCreateUrlResult,
 	error: Union([AssetAccessError, EnvironmentAuthorizationError])
 });
-const WsSubscribeVcsStatusRpc = make$48(WS_METHODS.subscribeVcsStatus, {
+const WsSubscribeVcsStatusRpc = make$51(WS_METHODS.subscribeVcsStatus, {
 	payload: VcsStatusInput,
 	success: VcsStatusStreamEvent,
 	error: Union([GitManagerServiceError, EnvironmentAuthorizationError]),
 	stream: true
 });
-const WsVcsPullRpc = make$48(WS_METHODS.vcsPull, {
+const WsVcsPullRpc = make$51(WS_METHODS.vcsPull, {
 	payload: VcsPullInput,
 	success: VcsPullResult,
 	error: Union([GitCommandError, EnvironmentAuthorizationError])
 });
-const WsVcsRefreshStatusRpc = make$48(WS_METHODS.vcsRefreshStatus, {
+const WsVcsRefreshStatusRpc = make$51(WS_METHODS.vcsRefreshStatus, {
 	payload: VcsStatusInput,
 	success: VcsStatusResult,
 	error: Union([GitManagerServiceError, EnvironmentAuthorizationError])
 });
-const WsGitRunStackedActionRpc = make$48(WS_METHODS.gitRunStackedAction, {
+const WsGitRunStackedActionRpc = make$51(WS_METHODS.gitRunStackedAction, {
 	payload: GitRunStackedActionInput,
 	success: GitActionProgressEvent,
 	error: Union([GitManagerServiceError, EnvironmentAuthorizationError]),
 	stream: true
 });
-const WsGitResolvePullRequestRpc = make$48(WS_METHODS.gitResolvePullRequest, {
+const WsGitResolvePullRequestRpc = make$51(WS_METHODS.gitResolvePullRequest, {
 	payload: GitPullRequestRefInput,
 	success: GitResolvePullRequestResult,
 	error: Union([GitManagerServiceError, EnvironmentAuthorizationError])
 });
-const WsGitPreparePullRequestThreadRpc = make$48(WS_METHODS.gitPreparePullRequestThread, {
+const WsGitPreparePullRequestThreadRpc = make$51(WS_METHODS.gitPreparePullRequestThread, {
 	payload: GitPreparePullRequestThreadInput,
 	success: GitPreparePullRequestThreadResult,
 	error: Union([GitManagerServiceError, EnvironmentAuthorizationError])
 });
-const WsVcsListRefsRpc = make$48(WS_METHODS.vcsListRefs, {
+const WsVcsListRefsRpc = make$51(WS_METHODS.vcsListRefs, {
 	payload: VcsListRefsInput,
 	success: VcsListRefsResult,
 	error: Union([GitCommandError, EnvironmentAuthorizationError])
 });
-const WsVcsCreateWorktreeRpc = make$48(WS_METHODS.vcsCreateWorktree, {
+const WsVcsCreateWorktreeRpc = make$51(WS_METHODS.vcsCreateWorktree, {
 	payload: VcsCreateWorktreeInput,
 	success: VcsCreateWorktreeResult,
 	error: Union([GitCommandError, EnvironmentAuthorizationError])
 });
-const WsVcsRemoveWorktreeRpc = make$48(WS_METHODS.vcsRemoveWorktree, {
+const WsVcsRemoveWorktreeRpc = make$51(WS_METHODS.vcsRemoveWorktree, {
 	payload: VcsRemoveWorktreeInput,
 	error: Union([GitCommandError, EnvironmentAuthorizationError])
 });
-const WsVcsCreateRefRpc = make$48(WS_METHODS.vcsCreateRef, {
+const WsVcsCreateRefRpc = make$51(WS_METHODS.vcsCreateRef, {
 	payload: VcsCreateRefInput,
 	success: VcsCreateRefResult,
 	error: Union([GitCommandError, EnvironmentAuthorizationError])
 });
-const WsVcsSwitchRefRpc = make$48(WS_METHODS.vcsSwitchRef, {
+const WsVcsSwitchRefRpc = make$51(WS_METHODS.vcsSwitchRef, {
 	payload: VcsSwitchRefInput,
 	success: VcsSwitchRefResult,
 	error: Union([GitCommandError, EnvironmentAuthorizationError])
 });
-const WsVcsInitRpc = make$48(WS_METHODS.vcsInit, {
+const WsVcsInitRpc = make$51(WS_METHODS.vcsInit, {
 	payload: VcsInitInput,
 	error: Union([VcsError, EnvironmentAuthorizationError])
 });
@@ -23506,159 +23507,159 @@ const WsVcsInitRpc = make$48(WS_METHODS.vcsInit, {
 * Not the persisted T3 Review model. Future review sessions should use
 * review.open* + review.getSnapshot.
 */
-const WsReviewGetDiffPreviewRpc = make$48(WS_METHODS.reviewGetDiffPreview, {
+const WsReviewGetDiffPreviewRpc = make$51(WS_METHODS.reviewGetDiffPreview, {
 	payload: ReviewDiffPreviewInput,
 	success: ReviewDiffPreviewResult,
 	error: Union([ReviewDiffPreviewError, EnvironmentAuthorizationError])
 });
-const WsReviewGetDiffFileContentsRpc = make$48(WS_METHODS.reviewGetDiffFileContents, {
+const WsReviewGetDiffFileContentsRpc = make$51(WS_METHODS.reviewGetDiffFileContents, {
 	payload: ReviewDiffFileContentsInput,
 	success: ReviewDiffFileContentsResult,
 	error: Union([ReviewDiffPreviewError, EnvironmentAuthorizationError])
 });
-const WsTerminalOpenRpc = make$48(WS_METHODS.terminalOpen, {
+const WsTerminalOpenRpc = make$51(WS_METHODS.terminalOpen, {
 	payload: TerminalOpenInput,
 	success: TerminalSessionSnapshot,
 	error: Union([TerminalError, EnvironmentAuthorizationError])
 });
-const WsTerminalAttachRpc = make$48(WS_METHODS.terminalAttach, {
+const WsTerminalAttachRpc = make$51(WS_METHODS.terminalAttach, {
 	payload: TerminalAttachInput,
 	success: TerminalAttachStreamEvent,
 	error: Union([TerminalError, EnvironmentAuthorizationError]),
 	stream: true
 });
-const WsTerminalWriteRpc = make$48(WS_METHODS.terminalWrite, {
+const WsTerminalWriteRpc = make$51(WS_METHODS.terminalWrite, {
 	payload: TerminalWriteInput,
 	error: Union([TerminalError, EnvironmentAuthorizationError])
 });
-const WsTerminalResizeRpc = make$48(WS_METHODS.terminalResize, {
+const WsTerminalResizeRpc = make$51(WS_METHODS.terminalResize, {
 	payload: TerminalResizeInput,
 	error: Union([TerminalError, EnvironmentAuthorizationError])
 });
-const WsTerminalClearRpc = make$48(WS_METHODS.terminalClear, {
+const WsTerminalClearRpc = make$51(WS_METHODS.terminalClear, {
 	payload: TerminalClearInput,
 	error: Union([TerminalError, EnvironmentAuthorizationError])
 });
-const WsTerminalRestartRpc = make$48(WS_METHODS.terminalRestart, {
+const WsTerminalRestartRpc = make$51(WS_METHODS.terminalRestart, {
 	payload: TerminalRestartInput,
 	success: TerminalSessionSnapshot,
 	error: Union([TerminalError, EnvironmentAuthorizationError])
 });
-const WsTerminalCloseRpc = make$48(WS_METHODS.terminalClose, {
+const WsTerminalCloseRpc = make$51(WS_METHODS.terminalClose, {
 	payload: TerminalCloseInput,
 	error: Union([TerminalError, EnvironmentAuthorizationError])
 });
-const WsPreviewOpenRpc = make$48(WS_METHODS.previewOpen, {
+const WsPreviewOpenRpc = make$51(WS_METHODS.previewOpen, {
 	payload: PreviewOpenInput,
 	success: PreviewSessionSnapshot,
 	error: Union([PreviewError, EnvironmentAuthorizationError])
 });
-const WsPreviewNavigateRpc = make$48(WS_METHODS.previewNavigate, {
+const WsPreviewNavigateRpc = make$51(WS_METHODS.previewNavigate, {
 	payload: PreviewNavigateInput,
 	success: PreviewSessionSnapshot,
 	error: Union([PreviewError, EnvironmentAuthorizationError])
 });
-const WsPreviewResizeRpc = make$48(WS_METHODS.previewResize, {
+const WsPreviewResizeRpc = make$51(WS_METHODS.previewResize, {
 	payload: PreviewResizeInput,
 	success: PreviewSessionSnapshot,
 	error: Union([PreviewError, EnvironmentAuthorizationError])
 });
-const WsPreviewRefreshRpc = make$48(WS_METHODS.previewRefresh, {
+const WsPreviewRefreshRpc = make$51(WS_METHODS.previewRefresh, {
 	payload: PreviewRefreshInput,
 	error: Union([PreviewError, EnvironmentAuthorizationError])
 });
-const WsPreviewCloseRpc = make$48(WS_METHODS.previewClose, {
+const WsPreviewCloseRpc = make$51(WS_METHODS.previewClose, {
 	payload: PreviewCloseInput,
 	error: Union([PreviewError, EnvironmentAuthorizationError])
 });
-const WsPreviewListRpc = make$48(WS_METHODS.previewList, {
+const WsPreviewListRpc = make$51(WS_METHODS.previewList, {
 	payload: PreviewListInput,
 	success: PreviewListResult,
 	error: EnvironmentAuthorizationError
 });
-const WsPreviewReportStatusRpc = make$48(WS_METHODS.previewReportStatus, {
+const WsPreviewReportStatusRpc = make$51(WS_METHODS.previewReportStatus, {
 	payload: PreviewReportStatusInput,
 	error: Union([PreviewError, EnvironmentAuthorizationError])
 });
-const WsPreviewAutomationConnectRpc = make$48(WS_METHODS.previewAutomationConnect, {
+const WsPreviewAutomationConnectRpc = make$51(WS_METHODS.previewAutomationConnect, {
 	payload: PreviewAutomationHost,
 	success: PreviewAutomationStreamEvent,
 	error: Union([PreviewAutomationError, EnvironmentAuthorizationError]),
 	stream: true
 });
-const WsPreviewAutomationRespondRpc = make$48(WS_METHODS.previewAutomationRespond, {
+const WsPreviewAutomationRespondRpc = make$51(WS_METHODS.previewAutomationRespond, {
 	payload: PreviewAutomationResponse,
 	error: Union([PreviewAutomationError, EnvironmentAuthorizationError])
 });
-const WsPreviewAutomationFocusHostRpc = make$48(WS_METHODS.previewAutomationFocusHost, {
+const WsPreviewAutomationFocusHostRpc = make$51(WS_METHODS.previewAutomationFocusHost, {
 	payload: PreviewAutomationHostFocus,
 	error: EnvironmentAuthorizationError
 });
-const WsSubscribePreviewEventsRpc = make$48(WS_METHODS.subscribePreviewEvents, {
+const WsSubscribePreviewEventsRpc = make$51(WS_METHODS.subscribePreviewEvents, {
 	payload: Struct({}),
 	success: PreviewEvent,
 	error: EnvironmentAuthorizationError,
 	stream: true
 });
-const WsSubscribeDiscoveredLocalServersRpc = make$48(WS_METHODS.subscribeDiscoveredLocalServers, {
+const WsSubscribeDiscoveredLocalServersRpc = make$51(WS_METHODS.subscribeDiscoveredLocalServers, {
 	payload: Struct({}),
 	success: DiscoveredLocalServerList,
 	error: EnvironmentAuthorizationError,
 	stream: true
 });
-const WsOrchestrationDispatchCommandRpc = make$48(ORCHESTRATION_WS_METHODS.dispatchCommand, {
+const WsOrchestrationDispatchCommandRpc = make$51(ORCHESTRATION_WS_METHODS.dispatchCommand, {
 	payload: ClientOrchestrationCommand,
 	success: OrchestrationRpcSchemas.dispatchCommand.output,
 	error: Union([OrchestrationDispatchCommandError, EnvironmentAuthorizationError])
 });
-const WsOrchestrationGetWorkflowScriptRpc = make$48(ORCHESTRATION_WS_METHODS.getWorkflowScript, {
+const WsOrchestrationGetWorkflowScriptRpc = make$51(ORCHESTRATION_WS_METHODS.getWorkflowScript, {
 	payload: OrchestrationRpcSchemas.getWorkflowScript.input,
 	success: OrchestrationRpcSchemas.getWorkflowScript.output,
 	error: Union([OrchestrationGetWorkflowScriptError, EnvironmentAuthorizationError])
 });
-const WsOrchestrationGetTurnDiffRpc = make$48(ORCHESTRATION_WS_METHODS.getTurnDiff, {
+const WsOrchestrationGetTurnDiffRpc = make$51(ORCHESTRATION_WS_METHODS.getTurnDiff, {
 	payload: OrchestrationGetTurnDiffInput,
 	success: OrchestrationRpcSchemas.getTurnDiff.output,
 	error: Union([OrchestrationGetTurnDiffError, EnvironmentAuthorizationError])
 });
-const WsOrchestrationGetFullThreadDiffRpc = make$48(ORCHESTRATION_WS_METHODS.getFullThreadDiff, {
+const WsOrchestrationGetFullThreadDiffRpc = make$51(ORCHESTRATION_WS_METHODS.getFullThreadDiff, {
 	payload: OrchestrationGetFullThreadDiffInput,
 	success: OrchestrationRpcSchemas.getFullThreadDiff.output,
 	error: Union([OrchestrationGetFullThreadDiffError, EnvironmentAuthorizationError])
 });
-const WsOrchestrationSearchThreadsRpc = make$48(ORCHESTRATION_WS_METHODS.searchThreads, {
+const WsOrchestrationSearchThreadsRpc = make$51(ORCHESTRATION_WS_METHODS.searchThreads, {
 	payload: OrchestrationSearchThreadsInput,
 	success: OrchestrationRpcSchemas.searchThreads.output,
 	error: Union([OrchestrationSearchThreadsError, EnvironmentAuthorizationError])
 });
-const WsOrchestrationGetArchivedShellSnapshotRpc = make$48(ORCHESTRATION_WS_METHODS.getArchivedShellSnapshot, {
+const WsOrchestrationGetArchivedShellSnapshotRpc = make$51(ORCHESTRATION_WS_METHODS.getArchivedShellSnapshot, {
 	payload: OrchestrationRpcSchemas.getArchivedShellSnapshot.input,
 	success: OrchestrationRpcSchemas.getArchivedShellSnapshot.output,
 	error: Union([OrchestrationGetSnapshotError, EnvironmentAuthorizationError])
 });
-const WsOrchestrationSubscribeShellRpc = make$48(ORCHESTRATION_WS_METHODS.subscribeShell, {
+const WsOrchestrationSubscribeShellRpc = make$51(ORCHESTRATION_WS_METHODS.subscribeShell, {
 	payload: OrchestrationRpcSchemas.subscribeShell.input,
 	success: OrchestrationRpcSchemas.subscribeShell.output,
 	error: Union([OrchestrationGetSnapshotError, EnvironmentAuthorizationError]),
 	stream: true
 });
-const WsOrchestrationSubscribeThreadRpc = make$48(ORCHESTRATION_WS_METHODS.subscribeThread, {
+const WsOrchestrationSubscribeThreadRpc = make$51(ORCHESTRATION_WS_METHODS.subscribeThread, {
 	payload: OrchestrationRpcSchemas.subscribeThread.input,
 	success: OrchestrationRpcSchemas.subscribeThread.output,
 	error: Union([OrchestrationGetSnapshotError, EnvironmentAuthorizationError]),
 	stream: true
 });
-const WsRpcGroup = make$47(WsServerProbeRpc, WsServerGetConfigRpc, WsServerRefreshProvidersRpc, WsServerUpdateProviderRpc, WsServerUpdateServerRpc, WsServerUpdateServerWithProgressRpc, WsServerUpsertKeybindingRpc, WsServerRemoveKeybindingRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerDiscoverSourceControlRpc, WsServerGetTraceDiagnosticsRpc, WsServerGetProcessDiagnosticsRpc, WsServerGetProcessResourceHistoryRpc, WsServerGetResourceTelemetryHistoryRpc, WsServerRetryResourceTelemetryRpc, WsServerSignalProcessRpc, WsServerReportClientActivityRpc, WsServerReportHostPowerStateRpc, WsServerGetBackgroundPolicyRpc, WsCloudGetRelayClientStatusRpc, WsCloudInstallRelayClientRpc, WsSourceControlLookupRepositoryRpc, WsSourceControlCloneRepositoryRpc, WsSourceControlPublishRepositoryRpc, WsProjectsListEntriesRpc, WsProjectsReadFileRpc, WsProjectsSearchContentsRpc, WsProjectsSearchEntriesRpc, WsProjectsWriteFileRpc, WsShellOpenInEditorRpc, WsFilesystemBrowseRpc, WsAssetsCreateUrlRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsVcsListRefsRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsReviewGetDiffPreviewRpc, WsReviewGetDiffFileContentsRpc, WsTerminalOpenRpc, WsTerminalAttachRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, make$48(WS_METHODS.subscribeTerminalEvents, {
+const WsRpcGroup = make$50(WsServerProbeRpc, WsServerGetConfigRpc, WsServerRefreshProvidersRpc, WsServerUpdateProviderRpc, WsServerUpdateServerRpc, WsServerUpdateServerWithProgressRpc, WsServerUpsertKeybindingRpc, WsServerRemoveKeybindingRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerDiscoverSourceControlRpc, WsServerGetTraceDiagnosticsRpc, WsServerGetProcessDiagnosticsRpc, WsServerGetProcessResourceHistoryRpc, WsServerGetResourceTelemetryHistoryRpc, WsServerRetryResourceTelemetryRpc, WsServerSignalProcessRpc, WsServerReportClientActivityRpc, WsServerReportHostPowerStateRpc, WsServerGetBackgroundPolicyRpc, WsCloudGetRelayClientStatusRpc, WsCloudInstallRelayClientRpc, WsSourceControlLookupRepositoryRpc, WsSourceControlCloneRepositoryRpc, WsSourceControlPublishRepositoryRpc, WsProjectsListEntriesRpc, WsProjectsReadFileRpc, WsProjectsSearchContentsRpc, WsProjectsSearchEntriesRpc, WsProjectsWriteFileRpc, WsShellOpenInEditorRpc, WsFilesystemBrowseRpc, WsAssetsCreateUrlRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsVcsListRefsRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsReviewGetDiffPreviewRpc, WsReviewGetDiffFileContentsRpc, WsTerminalOpenRpc, WsTerminalAttachRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, make$51(WS_METHODS.subscribeTerminalEvents, {
 	payload: Struct({}),
 	success: TerminalEvent,
 	error: EnvironmentAuthorizationError,
 	stream: true
-}), make$48(WS_METHODS.subscribeTerminalMetadata, {
+}), make$51(WS_METHODS.subscribeTerminalMetadata, {
 	payload: Struct({}),
 	success: TerminalMetadataStreamEvent,
 	error: EnvironmentAuthorizationError,
 	stream: true
-}), WsPreviewOpenRpc, WsPreviewNavigateRpc, WsPreviewResizeRpc, WsPreviewRefreshRpc, WsPreviewCloseRpc, WsPreviewListRpc, WsPreviewReportStatusRpc, WsPreviewAutomationConnectRpc, WsPreviewAutomationRespondRpc, WsPreviewAutomationFocusHostRpc, WsSubscribePreviewEventsRpc, WsSubscribeDiscoveredLocalServersRpc, make$48(WS_METHODS.subscribeServerConfig, {
+}), WsPreviewOpenRpc, WsPreviewNavigateRpc, WsPreviewResizeRpc, WsPreviewRefreshRpc, WsPreviewCloseRpc, WsPreviewListRpc, WsPreviewReportStatusRpc, WsPreviewAutomationConnectRpc, WsPreviewAutomationRespondRpc, WsPreviewAutomationFocusHostRpc, WsSubscribePreviewEventsRpc, WsSubscribeDiscoveredLocalServersRpc, make$51(WS_METHODS.subscribeServerConfig, {
 	payload: Struct({}),
 	success: ServerConfigStreamEvent,
 	error: Union([
@@ -23667,22 +23668,22 @@ const WsRpcGroup = make$47(WsServerProbeRpc, WsServerGetConfigRpc, WsServerRefre
 		EnvironmentAuthorizationError
 	]),
 	stream: true
-}), make$48(WS_METHODS.subscribeServerLifecycle, {
+}), make$51(WS_METHODS.subscribeServerLifecycle, {
 	payload: Struct({}),
 	success: ServerLifecycleStreamEvent,
 	error: EnvironmentAuthorizationError,
 	stream: true
-}), make$48(WS_METHODS.subscribeAuthAccess, {
+}), make$51(WS_METHODS.subscribeAuthAccess, {
 	payload: Struct({}),
 	success: AuthAccessStreamEvent,
 	error: Union([AuthAccessStreamError, EnvironmentAuthorizationError]),
 	stream: true
-}), make$48(WS_METHODS.subscribeBackgroundPolicy, {
+}), make$51(WS_METHODS.subscribeBackgroundPolicy, {
 	payload: Struct({}),
 	success: BackgroundPolicySnapshot,
 	error: EnvironmentAuthorizationError,
 	stream: true
-}), make$48(WS_METHODS.subscribeResourceTelemetry, {
+}), make$51(WS_METHODS.subscribeResourceTelemetry, {
 	payload: Struct({}),
 	success: ResourceTelemetrySnapshot,
 	error: EnvironmentAuthorizationError,
@@ -23750,8 +23751,8 @@ var ServerConfig = class extends Service$2()("t3/config/ServerConfig") {
 	/** @deprecated Import and use `layerTest` from this module. */
 	static layerTest = (cwd, baseDirOrPrefix) => layerTest$2(cwd, baseDirOrPrefix);
 };
-const make$46 = (config) => ServerConfig.of(config);
-const layer$36 = (config) => succeed$3(ServerConfig, make$46(config));
+const make$49 = (config) => ServerConfig.of(config);
+const layer$39 = (config) => succeed$3(ServerConfig, make$49(config));
 const deriveServerPaths = fn(function* (baseDir, devUrl, options = {}) {
 	const { join } = yield* Path;
 	const stateDir = join(baseDir, devUrl !== void 0 && !options.baseDirIsExplicit ? "dev" : "userdata");
@@ -23947,7 +23948,7 @@ function deriveAuthClientMetadata(input) {
 //#endregion
 //#region src/auth/EnvironmentAuthPolicy.ts
 var EnvironmentAuthPolicy = class extends Service$2()("t3/auth/EnvironmentAuthPolicy") {};
-const layer$35 = effect(EnvironmentAuthPolicy, gen(function* () {
+const layer$38 = effect(EnvironmentAuthPolicy, gen(function* () {
 	const config = yield* ServerConfig;
 	const isRemoteReachable = isRemoteReachableHost(config.host);
 	const policy = config.mode === "desktop" ? isRemoteReachable ? "remote-reachable" : "desktop-managed-local" : isRemoteReachable ? "remote-reachable" : "loopback-browser";
@@ -24159,7 +24160,7 @@ function toPersistenceSqlOrDecodeError$6(sqlOperation, decodeOperation, correlat
 		cause
 	});
 }
-const layer$34 = effect(AuthPairingLinkRepository, gen(function* () {
+const layer$37 = effect(AuthPairingLinkRepository, gen(function* () {
 	const sql = yield* SqlClient;
 	const createPairingLinkRow = void_({
 		Request: CreateAuthPairingLinkInput,
@@ -24387,11 +24388,11 @@ const DEV_STARTUP_TTL_HOURS = hours(24);
 const PAIRING_TOKEN_ALPHABET = "23456789ABCDEFGHJKLMNPQRSTUVWXYZ";
 const PAIRING_TOKEN_LENGTH = 12;
 const PAIRING_TOKEN_REJECTION_LIMIT = Math.floor(256 / 32) * 32;
-const layer$33 = effect(PairingGrantStore, gen(function* () {
+const layer$36 = effect(PairingGrantStore, gen(function* () {
 	const crypto = yield* Crypto;
 	const config = yield* ServerConfig;
 	const pairingLinks = yield* AuthPairingLinkRepository;
-	const seededGrantsRef = yield* make$60(/* @__PURE__ */ new Map());
+	const seededGrantsRef = yield* make$63(/* @__PURE__ */ new Map());
 	const changesPubSub = yield* unbounded$1();
 	const generatePairingToken = gen(function* () {
 		let credential = "";
@@ -24422,18 +24423,18 @@ const layer$33 = effect(PairingGrantStore, gen(function* () {
 		id
 	}).pipe(asVoid);
 	if (config.desktopBootstrapToken) {
-		const now$9 = yield* now;
+		const now = yield* now$1;
 		yield* seedGrant(config.desktopBootstrapToken, {
 			method: "desktop-bootstrap",
 			scopes: AuthAdministrativeScopes,
 			subject: "desktop-bootstrap",
-			expiresAt: add$3(now$9, { milliseconds: toMillis(DESKTOP_BOOTSTRAP_TTL_HOURS) }),
+			expiresAt: add$3(now, { milliseconds: toMillis(DESKTOP_BOOTSTRAP_TTL_HOURS) }),
 			remainingUses: "unbounded"
 		});
 	}
 	const listActive = fn("PairingGrantStore.listActive")(function* () {
-		const now$12 = yield* now;
-		return (yield* pairingLinks.listActive({ now: now$12 })).map((row) => row.label ? {
+		const now = yield* now$1;
+		return (yield* pairingLinks.listActive({ now })).map((row) => row.label ? {
 			id: row.id,
 			credential: row.credential,
 			scopes: row.scopes,
@@ -24451,7 +24452,7 @@ const layer$33 = effect(PairingGrantStore, gen(function* () {
 		});
 	}, mapError((cause) => new ActivePairingLinksLoadError({ cause })));
 	const revoke = fn("PairingGrantStore.revoke")(function* (id) {
-		const revokedAt = yield* now;
+		const revokedAt = yield* now$1;
 		const revoked = yield* pairingLinks.revoke({
 			id,
 			revokedAt
@@ -24470,8 +24471,8 @@ const layer$33 = effect(PairingGrantStore, gen(function* () {
 		const credential = yield* generatePairingToken;
 		const isDevStartupToken = config.devUrl !== void 0 && input?.purpose === "startup";
 		const ttl = input?.ttl ?? (isDevStartupToken ? DEV_STARTUP_TTL_HOURS : DEFAULT_ONE_TIME_TOKEN_TTL_MINUTES);
-		const now$10 = yield* now;
-		const expiresAt = add$3(now$10, { milliseconds: toMillis(ttl) });
+		const now = yield* now$1;
+		const expiresAt = add$3(now, { milliseconds: toMillis(ttl) });
 		const issued = {
 			id,
 			credential,
@@ -24488,7 +24489,7 @@ const layer$33 = effect(PairingGrantStore, gen(function* () {
 			subject,
 			label: input?.label ?? null,
 			proofKeyThumbprint: input?.proofKeyThumbprint ?? null,
-			createdAt: now$10,
+			createdAt: now,
 			expiresAt
 		}).pipe(mapError((cause) => new PairingCredentialIssueError({
 			pairingLinkId: id,
@@ -24502,13 +24503,13 @@ const layer$33 = effect(PairingGrantStore, gen(function* () {
 			scopes: input?.scopes ?? AuthStandardClientScopes,
 			subject: input?.subject ?? "one-time-token",
 			...input?.label ? { label: input.label } : {},
-			createdAt: now$10,
+			createdAt: now,
 			expiresAt
 		});
 		return issued;
 	});
 	const consume = fn("PairingGrantStore.consume")(function* (credential, input) {
-		const now$11 = yield* now;
+		const now = yield* now$1;
 		const seededResult = yield* modify$2(seededGrantsRef, (current) => {
 			const grant = current.get(credential);
 			if (!grant) return [{
@@ -24517,7 +24518,7 @@ const layer$33 = effect(PairingGrantStore, gen(function* () {
 				error: new UnknownBootstrapCredentialError({})
 			}, current];
 			const next = new Map(current);
-			if (isGreaterThanOrEqualTo$1(now$11, grant.expiresAt)) {
+			if (isGreaterThanOrEqualTo$1(now, grant.expiresAt)) {
 				next.delete(credential);
 				return [{
 					_tag: "error",
@@ -24553,8 +24554,8 @@ const layer$33 = effect(PairingGrantStore, gen(function* () {
 		const consumed = yield* pairingLinks.consumeAvailable({
 			credential,
 			proofKeyThumbprint: input?.proofKeyThumbprint ?? null,
-			consumedAt: now$11,
-			now: now$11
+			consumedAt: now,
+			now
 		}).pipe(mapError((cause) => new BootstrapCredentialConsumeAvailableError({ cause })));
 		if (isSome(consumed)) {
 			yield* emitRemoved(consumed.value.id);
@@ -24571,7 +24572,7 @@ const layer$33 = effect(PairingGrantStore, gen(function* () {
 		if (isNone(matching)) return yield* new UnknownBootstrapCredentialError({});
 		if (matching.value.revokedAt !== null) return yield* new UnavailableBootstrapCredentialError({});
 		if (matching.value.consumedAt !== null) return yield* new UnknownBootstrapCredentialError({});
-		if (isGreaterThanOrEqualTo$1(now$11, matching.value.expiresAt)) return yield* new ExpiredBootstrapCredentialError({});
+		if (isGreaterThanOrEqualTo$1(now, matching.value.expiresAt)) return yield* new ExpiredBootstrapCredentialError({});
 		if (matching.value.proofKeyThumbprint !== null && matching.value.proofKeyThumbprint !== input?.proofKeyThumbprint) return yield* new BootstrapCredentialProofKeyMismatchError({});
 		return yield* new UnavailableBootstrapCredentialError({});
 	});
@@ -24584,7 +24585,7 @@ const layer$33 = effect(PairingGrantStore, gen(function* () {
 		revoke,
 		consume
 	});
-})).pipe(provideMerge(layer$34));
+})).pipe(provideMerge(layer$37));
 //#endregion
 //#region src/auth/ServerSecretStore.ts
 const secretStoreErrorContext = {
@@ -24650,7 +24651,7 @@ const isSecretStoreError = is(Union([
 const isPlatformError = (value) => isTagged(value, "PlatformError");
 const isSecretAlreadyExistsError = (error) => "cause" in error && isPlatformError(error.cause) && error.cause.reason._tag === "AlreadyExists";
 var ServerSecretStore = class extends Service$2()("t3/auth/ServerSecretStore") {};
-const layer$32 = effect(ServerSecretStore, gen(function* () {
+const layer$35 = effect(ServerSecretStore, gen(function* () {
 	const crypto = yield* Crypto;
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path;
@@ -24831,7 +24832,7 @@ function toPersistenceSqlOrDecodeError$5(sqlOperation, decodeOperation, correlat
 		cause
 	});
 }
-const layer$31 = effect(AuthSessionRepository, gen(function* () {
+const layer$34 = effect(AuthSessionRepository, gen(function* () {
 	const sql = yield* SqlClient;
 	const createSessionRow = void_({
 		Request: CreateAuthSessionInput,
@@ -25197,13 +25198,13 @@ function toAuthClientSession(input) {
 		current: false
 	};
 }
-const layer$30 = effect(SessionStore, gen(function* () {
+const layer$33 = effect(SessionStore, gen(function* () {
 	const crypto = yield* Crypto;
 	const serverConfig = yield* ServerConfig;
 	const secretStore = yield* ServerSecretStore;
 	const authSessions = yield* AuthSessionRepository;
 	const signingSecret = yield* secretStore.getOrCreateRandom(SIGNING_SECRET_NAME$1, 32);
-	const connectedSessionsRef = yield* make$60(/* @__PURE__ */ new Map());
+	const connectedSessionsRef = yield* make$63(/* @__PURE__ */ new Map());
 	const changesPubSub = yield* unbounded$1();
 	const cookieName = resolveSessionCookieName({
 		mode: serverConfig.mode,
@@ -25241,7 +25242,7 @@ const layer$30 = effect(SessionStore, gen(function* () {
 		const wasDisconnected = !next.has(sessionId);
 		next.set(sessionId, (next.get(sessionId) ?? 0) + 1);
 		return [wasDisconnected, next];
-	}).pipe(flatMap$1((wasDisconnected) => wasDisconnected ? now.pipe(flatMap$1((lastConnectedAt) => authSessions.setLastConnectedAt({
+	}).pipe(flatMap$1((wasDisconnected) => wasDisconnected ? now$1.pipe(flatMap$1((lastConnectedAt) => authSessions.setLastConnectedAt({
 		sessionId,
 		lastConnectedAt
 	}))) : void_$1), flatMap$1(() => loadActiveSession(sessionId)), flatMap$1((session) => isSome(session) ? emitUpsert(session.value) : void_$1), catchCause((cause) => logError("Failed to publish connected-session auth update.").pipe(annotateLogs({
@@ -25261,7 +25262,7 @@ const layer$30 = effect(SessionStore, gen(function* () {
 	const encodeClaims = encodeEffect(fromJsonString(SessionClaims));
 	const issue = fn("SessionStore.issue")(function* (input) {
 		const sessionId = AuthSessionId.make(yield* crypto.randomUUIDv4.pipe(mapError((cause) => new SessionCredentialIssueError({ cause }))));
-		const issuedAt = yield* now;
+		const issuedAt = yield* now$1;
 		const expiresAt = add$3(issuedAt, { milliseconds: toMillis(input?.ttl ?? DEFAULT_SESSION_TTL) });
 		const claims = {
 			v: 1,
@@ -25329,8 +25330,8 @@ const layer$30 = effect(SessionStore, gen(function* () {
 		if (!encodedPayload || !signature) return yield* new MalformedSessionTokenError({});
 		if (!timingSafeEqualBase64Url(signature, signPayload(encodedPayload, signingSecret))) return yield* new InvalidSessionTokenSignatureError({});
 		const claims = yield* decodeSessionClaims(base64UrlDecodeUtf8(encodedPayload)).pipe(mapError((cause) => new InvalidSessionTokenPayloadError({ cause })));
-		const observedAt = yield* now;
-		const expiresAt = make$68(claims.exp);
+		const observedAt = yield* now$1;
+		const expiresAt = make$71(claims.exp);
 		if (isNone(expiresAt)) return yield* new InvalidSessionExpirationClaimError({
 			sessionId: claims.sid,
 			expirationClaim: claims.exp
@@ -25362,7 +25363,7 @@ const layer$30 = effect(SessionStore, gen(function* () {
 	});
 	const encodeWsClaims = encodeEffect(fromJsonString(WebSocketClaims));
 	const issueWebSocketToken = fn("SessionStore.issueWebSocketToken")(function* (sessionId, input) {
-		const issuedAt = yield* now;
+		const issuedAt = yield* now$1;
 		const expiresAt = add$3(issuedAt, { milliseconds: toMillis(input?.ttl ?? DEFAULT_WEBSOCKET_TOKEN_TTL) });
 		const claims = {
 			v: 1,
@@ -25389,8 +25390,8 @@ const layer$30 = effect(SessionStore, gen(function* () {
 		if (!encodedPayload || !signature) return yield* new MalformedWebSocketTokenError({});
 		if (!timingSafeEqualBase64Url(signature, signPayload(encodedPayload, signingSecret))) return yield* new InvalidWebSocketTokenSignatureError({});
 		const claims = yield* decodeWebSocketClaims(base64UrlDecodeUtf8(encodedPayload)).pipe(mapError((cause) => new InvalidWebSocketTokenPayloadError({ cause })));
-		const observedAt = yield* now;
-		const expiresAt = make$68(claims.exp);
+		const observedAt = yield* now$1;
+		const expiresAt = make$71(claims.exp);
 		if (isNone(expiresAt)) return yield* new InvalidSessionExpirationClaimError({
 			sessionId: claims.sid,
 			expirationClaim: claims.exp
@@ -25425,9 +25426,9 @@ const layer$30 = effect(SessionStore, gen(function* () {
 		};
 	});
 	const listActive = fn("SessionStore.listActive")(function* () {
-		const now$8 = yield* now;
+		const now = yield* now$1;
 		const connectedSessions = yield* get$3(connectedSessionsRef);
-		return (yield* authSessions.listActive({ now: now$8 })).map((row) => toAuthClientSession({
+		return (yield* authSessions.listActive({ now })).map((row) => toAuthClientSession({
 			sessionId: row.sessionId,
 			subject: row.subject,
 			scopes: row.scopes,
@@ -25440,7 +25441,7 @@ const layer$30 = effect(SessionStore, gen(function* () {
 		}));
 	}, mapError((cause) => new ActiveSessionsListError({ cause })));
 	const revoke = fn("SessionStore.revoke")(function* (sessionId) {
-		const revokedAt = yield* now;
+		const revokedAt = yield* now$1;
 		const revoked = yield* authSessions.revoke({
 			sessionId,
 			revokedAt
@@ -25459,7 +25460,7 @@ const layer$30 = effect(SessionStore, gen(function* () {
 		return revoked;
 	});
 	const revokeAllExcept = fn("SessionStore.revokeAllExcept")(function* (sessionId) {
-		const revokedAt = yield* now;
+		const revokedAt = yield* now$1;
 		const revokedSessionIds = yield* authSessions.revokeAllExcept({
 			currentSessionId: sessionId,
 			revokedAt
@@ -25495,7 +25496,7 @@ const layer$30 = effect(SessionStore, gen(function* () {
 		markConnected,
 		markDisconnected
 	});
-})).pipe(provideMerge(layer$31));
+})).pipe(provideMerge(layer$34));
 //#endregion
 //#region ../../node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/esm/cryptoNode.js
 /**
@@ -28246,12 +28247,12 @@ const verifyRequestDpopProof = (input) => gen(function* () {
 	const proof = input.request.headers.dpop;
 	const url = toURL(input.request);
 	if (isNone(url)) return yield* new ServerAuthInvalidCredentialError({ diagnostic: "Invalid DPoP request URL." });
-	const now$7 = yield* now;
+	const now = yield* now$1;
 	const result = verifyDpopProof({
 		proof,
 		method: input.request.method,
 		url: url.value.href,
-		nowEpochSeconds: Math.floor(now$7.epochMilliseconds / 1e3),
+		nowEpochSeconds: Math.floor(now.epochMilliseconds / 1e3),
 		...input.expectedThumbprint ? { expectedThumbprint: input.expectedThumbprint } : {},
 		...input.expectedAccessToken ? { expectedAccessToken: input.expectedAccessToken } : {}
 	});
@@ -28262,7 +28263,7 @@ const verifyRequestDpopProof = (input) => gen(function* () {
 		`thumbprint=${result.thumbprint}`,
 		`jti=${result.jti}`,
 		`iat=${result.iat}`,
-		`consumedAt=${formatIso(now$7)}`
+		`consumedAt=${formatIso(now)}`
 	].join("\n"))).pipe(catchIf(isSecretStoreError, (error) => fail(mapDpopReplayStoreError(error))));
 	return result.thumbprint;
 });
@@ -28281,7 +28282,7 @@ var MigrationError = class extends TaggedError("MigrationError") {};
 * @category constructors
 * @since 4.0.0
 */
-const make$39 = ({ dumpSchema = () => void_$1 }) => ({ loader, schemaDirectory, table = "effect_sql_migrations" }) => gen(function* () {
+const make$42 = ({ dumpSchema = () => void_$1 }) => ({ loader, schemaDirectory, table = "effect_sql_migrations" }) => gen(function* () {
 	const sql = yield* SqlClient;
 	const ensureMigrationsTable = sql.onDialectOrElse({
 		mssql: () => sql`IF OBJECT_ID(N'${sql.literal(table)}', N'U') IS NULL
@@ -28370,7 +28371,7 @@ const make$39 = ({ dumpSchema = () => void_$1 }) => ({ loader, schemaDirectory,
 	if (schemaDirectory && completed.length > 0) yield* dumpSchema(`${schemaDirectory}/_schema.sql`, table).pipe(catchCause((cause) => logInfo("Could not dump schema", cause)));
 	return completed;
 });
-const migrationOrder = /*#__PURE__*/ make$69(([a], [b]) => Number$2(a, b));
+const migrationOrder = /*#__PURE__*/ make$72(([a], [b]) => Number$2(a, b));
 const isConstraintConflict = (error) => error.reason._tag === "ConstraintError" || error.reason._tag === "UniqueViolation";
 /**
 * Creates a migration loader from a record of migration effects keyed by
@@ -29937,7 +29938,7 @@ const makeMigrationLoader = (throughId) => fromRecord(Object.fromEntries(migrati
 * Migrator run function - no schema dumping needed
 * Uses the base Migrator.make without platform dependencies
 */
-const run = make$39({});
+const run = make$42({});
 /**
 * Run all pending migrations.
 *
@@ -29959,7 +29960,7 @@ effectDiscard(runMigrations());
 //#region src/persistence/Layers/Sqlite.ts
 const defaultSqliteClientLoaders = {
 	bun: () => import("@effect/sql-sqlite-bun/SqliteClient"),
-	node: () => import("./NodeSqliteClient-Byu521pt.mjs")
+	node: () => import("./NodeSqliteClient-FfrElFAX.mjs")
 };
 const makeRuntimeSqliteLayer = fn("makeRuntimeSqliteLayer")(function* (config) {
 	const runtime = process.versions.bun !== void 0 ? "bun" : "node";
@@ -30184,7 +30185,7 @@ function parseDpopToken(request) {
 	const token = header.slice(5).trim();
 	return token.length > 0 ? token : null;
 }
-const layer$29 = effect(EnvironmentAuth, gen(function* () {
+const layer$32 = effect(EnvironmentAuth, gen(function* () {
 	const policy = yield* EnvironmentAuthPolicy;
 	const bootstrapCredentials = yield* PairingGrantStore;
 	const sessions = yield* SessionStore;
@@ -30261,7 +30262,7 @@ const layer$29 = effect(EnvironmentAuth, gen(function* () {
 				...grant.label ? { label: grant.label } : {}
 			}
 		}).pipe(mapError((cause) => new ServerAuthAuthenticatedAccessTokenIssueError({ cause })));
-	})), flatMap$1((session) => now.pipe(map$4((now) => ({
+	})), flatMap$1((session) => now$1.pipe(map$4((now) => ({
 		access_token: session.token,
 		issued_token_type: AuthAccessTokenType,
 		token_type: input?.proofKeyThumbprint ? "DPoP" : "Bearer",
@@ -30280,7 +30281,7 @@ const layer$29 = effect(EnvironmentAuth, gen(function* () {
 		expiresAt: issued.expiresAt
 	})));
 	const createPairingLink = fn("EnvironmentAuth.createPairingLink")(function* (input) {
-		const createdAt = yield* now;
+		const createdAt = yield* now$1;
 		const issued = yield* bootstrapCredentials.issueOneTimeToken({
 			scopes: input?.scopes ?? AuthStandardClientScopes,
 			subject: input?.subject ?? "one-time-token",
@@ -30392,9 +30393,9 @@ const layer$29 = effect(EnvironmentAuth, gen(function* () {
 		issueWebSocketTicket,
 		issueStartupPairingUrl
 	});
-})).pipe(provideMerge(layer$33), provideMerge(layer$30), provideMerge(layer$35));
-const storageLayer = mergeAll(layer$32, layerConfig);
-const runtimeLayer = layer$29.pipe(provideMerge(storageLayer));
+})).pipe(provideMerge(layer$36), provideMerge(layer$33), provideMerge(layer$38));
+const storageLayer = mergeAll(layer$35, layerConfig);
+const runtimeLayer = layer$32.pipe(provideMerge(storageLayer));
 //#endregion
 //#region src/cliAuthFormat.ts
 const newline = "\n";
@@ -31791,7 +31792,7 @@ const runWithEnvironmentAuth = (flags, run, options) => gen(function* () {
 	const minimumLogLevel = options?.quietLogs ? "Error" : config.logLevel;
 	return yield* gen(function* () {
 		return yield* run(yield* EnvironmentAuth);
-	}).pipe(provide$1(mergeAll(runtimeLayer).pipe(provide(layer$36(config)), provide(succeed$3(MinimumLogLevel, minimumLogLevel)))));
+	}).pipe(provide$1(mergeAll(runtimeLayer).pipe(provide(layer$39(config)), provide(succeed$3(MinimumLogLevel, minimumLogLevel)))));
 });
 const ttlFlag$1 = string("ttl").pipe(withSchema(DurationFromString), withDescription$1("TTL, for example `5m`, `1h`, `30d`, or `15 minutes`."), optional);
 const jsonFlag = boolean("json").pipe(withDescription$1("Emit JSON instead of human-readable output."), withDefault(false));
@@ -31799,7 +31800,7 @@ const labelFlag$1 = string("label").pipe(withDescription$1("Optional human-reada
 const subjectFlag = string("subject").pipe(withDescription$1("Optional session subject."), optional);
 const baseUrlFlag = string("base-url").pipe(withDescription$1("Optional public base URL used to print a ready `/pair#token=...` link."), optional);
 const tokenOnlyFlag = boolean("token-only").pipe(withDescription$1("Print only the issued bearer token."), withDefault(false));
-const pairingCreateCommand = make$59("create", {
+const pairingCreateCommand = make$62("create", {
 	...authLocationFlags,
 	ttl: ttlFlag$1,
 	label: labelFlag$1,
@@ -31817,26 +31818,26 @@ const pairingCreateCommand = make$59("create", {
 	});
 	yield* log(output);
 }), { quietLogs: flags.json })));
-const pairingListCommand = make$59("list", {
+const pairingListCommand = make$62("list", {
 	...authLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription("List active client pairing tokens without revealing their secrets."), withHandler((flags) => runWithEnvironmentAuth(flags, (environmentAuth) => gen(function* () {
 	const pairingLinks = yield* environmentAuth.listPairingLinks({ excludeSubjects: [INTERNAL_ADMINISTRATIVE_BOOTSTRAP_SUBJECT] });
 	yield* log(formatPairingCredentialList(pairingLinks, { json: flags.json }));
 }), { quietLogs: flags.json })));
-const pairingRevokeCommand = make$59("revoke", {
+const pairingRevokeCommand = make$62("revoke", {
 	...authLocationFlags,
 	id: string$1("id").pipe(withDescription$2("Pairing credential id to revoke."))
 }).pipe(withDescription("Revoke an active client pairing token."), withHandler((flags) => runWithEnvironmentAuth(flags, (environmentAuth) => gen(function* () {
 	const revoked = yield* environmentAuth.revokePairingLink(flags.id);
 	yield* log(revoked ? `Revoked pairing credential ${flags.id}.\n` : `No active pairing credential found for ${flags.id}.\n`);
 }))));
-const pairingCommand = make$59("pairing").pipe(withDescription("Manage one-time client pairing tokens."), withSubcommands([
+const pairingCommand = make$62("pairing").pipe(withDescription("Manage one-time client pairing tokens."), withSubcommands([
 	pairingCreateCommand,
 	pairingListCommand,
 	pairingRevokeCommand
 ]));
-const sessionIssueCommand = make$59("issue", {
+const sessionIssueCommand = make$62("issue", {
 	...authLocationFlags,
 	ttl: ttlFlag$1,
 	label: labelFlag$1,
@@ -31855,26 +31856,26 @@ const sessionIssueCommand = make$59("issue", {
 		tokenOnly: flags.tokenOnly
 	}));
 }), { quietLogs: flags.json || flags.tokenOnly })));
-const sessionListCommand = make$59("list", {
+const sessionListCommand = make$62("list", {
 	...authLocationFlags,
 	json: jsonFlag
 }).pipe(withDescription("List active sessions without revealing bearer tokens."), withHandler((flags) => runWithEnvironmentAuth(flags, (environmentAuth) => gen(function* () {
 	const sessions = yield* environmentAuth.listSessions();
 	yield* log(formatSessionList(sessions, { json: flags.json }));
 }), { quietLogs: flags.json })));
-const sessionRevokeCommand = make$59("revoke", {
+const sessionRevokeCommand = make$62("revoke", {
 	...authLocationFlags,
 	sessionId: string$1("session-id").pipe(withDescription$2("Session id to revoke."), withSchema$1(AuthSessionId))
 }).pipe(withDescription("Revoke an active session."), withHandler((flags) => runWithEnvironmentAuth(flags, (environmentAuth) => gen(function* () {
 	const revoked = yield* environmentAuth.revokeSession(flags.sessionId);
 	yield* log(revoked ? `Revoked session ${flags.sessionId}.\n` : `No active session found for ${flags.sessionId}.\n`);
 }))));
-const sessionCommand = make$59("session").pipe(withDescription("Manage bearer sessions."), withSubcommands([
+const sessionCommand = make$62("session").pipe(withDescription("Manage bearer sessions."), withSubcommands([
 	sessionIssueCommand,
 	sessionListCommand,
 	sessionRevokeCommand
 ]));
-const authCommand = make$59("auth").pipe(withDescription("Manage the local auth control plane for headless deployments."), withSubcommands([pairingCommand, sessionCommand]));
+const authCommand = make$62("auth").pipe(withDescription("Manage the local auth control plane for headless deployments."), withSubcommands([pairingCommand, sessionCommand]));
 //#endregion
 //#region ../t3-shared/src/devHome.ts
 /**
@@ -32062,7 +32063,7 @@ const readTailscaleStatus = gen(function* () {
 		argumentCount: args.length
 	};
 	return yield* gen(function* () {
-		const child = yield* spawner.spawn(make$76(executable, args)).pipe(mapError((cause) => new TailscaleCommandSpawnError({
+		const child = yield* spawner.spawn(make$79(executable, args)).pipe(mapError((cause) => new TailscaleCommandSpawnError({
 			...commandContext,
 			cause
 		})));
@@ -32106,7 +32107,7 @@ const runTailscaleCommand = (args, timeoutInput) => gen(function* () {
 	};
 	const timeout$1 = fromInputUnsafe(timeoutInput);
 	return yield* gen(function* () {
-		const child = yield* spawner.spawn(make$76(executable, args)).pipe(mapError((cause) => new TailscaleCommandSpawnError({
+		const child = yield* spawner.spawn(make$79(executable, args)).pipe(mapError((cause) => new TailscaleCommandSpawnError({
 			...commandContext,
 			cause
 		})));
@@ -33121,7 +33122,7 @@ const decodePersistedServerRuntimeState = decodeUnknownEffect(fromJsonString(Per
 const runtimeOriginForConfig = (config, port) => {
 	return `http://${config.host && !isWildcardHost(config.host) ? formatHostForUrl(config.host) : "127.0.0.1"}:${port}`;
 };
-const makePersistedServerRuntimeState = (input) => map$4(now, (now) => ({
+const makePersistedServerRuntimeState = (input) => map$4(now$1, (now) => ({
 	version: 1,
 	pid: process.pid,
 	...input.config.host ? { host: input.config.host } : {},
@@ -33323,7 +33324,7 @@ const makePairServerConfig = fn(function* (input) {
 	const { baseDir, variant, state } = input.target;
 	const devUrl = state.devUrl !== void 0 ? new URL(state.devUrl) : void 0;
 	const derivedPaths = yield* deriveServerPaths(baseDir, variant === "dev" ? DEV_VARIANT_PLACEHOLDER_URL : void 0, {});
-	return make$46({
+	return make$49({
 		logLevel: input.logLevel,
 		traceMinLevel: "Info",
 		traceTimingEnabled: false,
@@ -33409,9 +33410,9 @@ const mintPairingLink = fn("pair.mintPairingLink")(function* (input) {
 			label: getOrElse(input.label, () => "t3 pair"),
 			...isSome(input.ttl) ? { ttl: input.ttl.value } : {}
 		});
-	}).pipe(provide$1(runtimeLayer.pipe(provide(layer$36(input.config)), provide(succeed$3(MinimumLogLevel, input.config.logLevel)))));
+	}).pipe(provide$1(runtimeLayer.pipe(provide(layer$39(input.config)), provide(succeed$3(MinimumLogLevel, input.config.logLevel)))));
 });
-const pairCommand = make$59("pair", {
+const pairCommand = make$62("pair", {
 	baseDir: baseDirFlag,
 	ttl: string("ttl").pipe(withSchema(DurationFromString), withDescription$1("Token TTL, for example `5m`, `1h`, or `15 minutes`. Defaults to 5 minutes."), optional),
 	label: string("label").pipe(withDescription$1("Optional label shown in the server's connections list."), optional),
@@ -33452,7 +33453,7 @@ const pairCommand = make$59("pair", {
 		expiresAt: issued.expiresAt,
 		notes
 	}));
-}).pipe(provide$1(layer$40))));
+}).pipe(provide$1(layer$43))));
 //#endregion
 //#region ../../node_modules/.pnpm/effect@4.0.0-beta.103_patch_hash=a18f963109656ddbeb2a99ca45f942ecf54830986259eb01ce6a970421c9c6a9/node_modules/effect/dist/unstable/encoding/Sse.js
 const SseErrorTypeId = "~effect/encoding/Sse/SseError";
@@ -33798,7 +33799,7 @@ const makeClient = (api, options) => gen(function* () {
 			const encodeQuery = map$3(endpoint.query, encodeUnknownEffect);
 			const middlewareKeys = Array.from(onEndpointOptions.middleware, (tag) => `${tag.key}/Client`);
 			const endpointFn = fnUntraced(function* (request) {
-				let httpRequest = make$61(endpoint.method)(endpoint.path);
+				let httpRequest = make$64(endpoint.method)(endpoint.path);
 				if (request !== void 0) {
 					if (encodeParams !== void 0) {
 						const params = yield* encodeParams(request.params);
@@ -33841,7 +33842,7 @@ const makeClient = (api, options) => gen(function* () {
 * @category constructors
 * @since 4.0.0
 */
-const make$37 = (api, options) => flatMap$1(HttpClient, (httpClient) => makeWith(api, {
+const make$40 = (api, options) => flatMap$1(HttpClient, (httpClient) => makeWith(api, {
 	...options,
 	httpClient: options?.transformClient ? options.transformClient(httpClient) : httpClient
 }));
@@ -34947,7 +34948,7 @@ function projectEvent(model, event) {
 }
 //#endregion
 //#region src/orchestration/decider.ts
-const nowIso$4 = map$4(now, formatIso);
+const nowIso$4 = map$4(now$1, formatIso);
 const QUEUED_TURN_START_GRACE_MS = 120 * 1e3;
 /**
 * Blocked-on-you work derived from the thread's retained activities: an
@@ -35954,7 +35955,7 @@ const OrchestrationEngineLive = effect(OrchestrationEngineService, gen(function*
 	const projectionPipeline = yield* OrchestrationProjectionPipeline;
 	const projectionSnapshotQuery = yield* ProjectionSnapshotQuery;
 	const crypto = yield* Crypto;
-	const nowIso = map$4(now, formatIso);
+	const nowIso = map$4(now$1, formatIso);
 	let commandReadModel = createEmptyReadModel(yield* nowIso);
 	const commandQueue = yield* unbounded$2();
 	const eventPubSub = yield* unbounded$1();
@@ -36076,7 +36077,7 @@ const OrchestrationEngineLive = effect(OrchestrationEngineService, gen(function*
 	yield* logDebug("orchestration engine started").pipe(annotateLogs({ sequence: commandReadModel.snapshotSequence }));
 	const readEvents = (fromSequenceExclusive, limit) => eventStore.readFromSequence(fromSequenceExclusive, limit);
 	const dispatch = (command) => gen(function* () {
-		const result = yield* make$70();
+		const result = yield* make$73();
 		yield* offer$1(commandQueue, {
 			command,
 			result,
@@ -38506,7 +38507,7 @@ const TERMINAL_STATUSES = /* @__PURE__ */ new Set([
 	"interrupted"
 ]);
 var ThreadBackgroundLivenessService = class extends Service$2()("t3/orchestration/ThreadBackgroundLiveness/ThreadBackgroundLivenessService") {};
-function make$36() {
+function make$39() {
 	const stateByThreadId = /* @__PURE__ */ new Map();
 	const stateFor = (threadId) => {
 		const existing = stateByThreadId.get(threadId);
@@ -38556,7 +38557,7 @@ function make$36() {
 		}
 	};
 }
-const layer$28 = effect(ThreadBackgroundLivenessService, sync(make$36));
+const layer$31 = effect(ThreadBackgroundLivenessService, sync(make$39));
 //#endregion
 //#region ../t3-shared/src/sourceControl.ts
 function parseRemoteHost(remoteUrl) {
@@ -38856,7 +38857,7 @@ const runProcessCore = fn("processRunner.runProcessCore")(function* (spawner, in
 		env: input.env,
 		extendEnv
 	});
-	const child = yield* spawner.spawn(make$76(spawnCommand.command, spawnCommand.args, {
+	const child = yield* spawner.spawn(make$79(spawnCommand.command, spawnCommand.args, {
 		...input.spawnCwd ?? input.cwd ? { cwd: input.spawnCwd ?? input.cwd } : {},
 		...input.env !== void 0 ? {
 			env: input.env,
@@ -38874,7 +38875,7 @@ const runProcessCore = fn("processRunner.runProcessCore")(function* (spawner, in
 		cause
 	})));
 	const stdin = input.stdin;
-	const writeStdin = stdin === void 0 ? void_$1 : run$5(encodeText(make$71(stdin)), child.stdin).pipe(mapError((cause) => new ProcessStdinError({
+	const writeStdin = stdin === void 0 ? void_$1 : run$5(encodeText(make$74(stdin)), child.stdin).pipe(mapError((cause) => new ProcessStdinError({
 		command: input.command,
 		argumentCount: input.args.length,
 		cwd: input.cwd,
@@ -38924,7 +38925,7 @@ const runProcessCore = fn("processRunner.runProcessCore")(function* (spawner, in
 		stderrTruncated: stderr.truncated
 	};
 });
-const layer$27 = effect(ProcessRunner, fn("ProcessRunner.make")(function* () {
+const layer$30 = effect(ProcessRunner, fn("ProcessRunner.make")(function* () {
 	const spawner = yield* ChildProcessSpawner;
 	const run = (input) => finalizeRunProcess(runProcessCore(spawner, input), input);
 	return ProcessRunner.of({ run });
@@ -39019,7 +39020,7 @@ const resolveRepositoryIdentityFromCacheKey = fn("RepositoryIdentityResolver.res
 		rootPath: cacheKey
 	}) : null;
 });
-const layer$26 = effect(RepositoryIdentityResolver, fn("RepositoryIdentityResolver.make")(function* (options = {}) {
+const layer$29 = effect(RepositoryIdentityResolver, fn("RepositoryIdentityResolver.make")(function* (options = {}) {
 	const processRunner = yield* ProcessRunner;
 	const repositoryIdentityCache = yield* makeWith$1((cacheKey) => resolveRepositoryIdentityFromCacheKey(cacheKey).pipe(provideService(ProcessRunner, processRunner)), {
 		capacity: options.cacheCapacity ?? DEFAULT_REPOSITORY_IDENTITY_CACHE_CAPACITY,
@@ -39033,7 +39034,7 @@ const layer$26 = effect(RepositoryIdentityResolver, fn("RepositoryIdentityResolv
 		return yield* get$7(repositoryIdentityCache, cacheKey);
 	});
 	return RepositoryIdentityResolver.of({ resolve });
-})()).pipe(provide(layer$27));
+})()).pipe(provide(layer$30));
 //#endregion
 //#region src/orchestration/Layers/ProjectionSnapshotQuery.ts
 const decodeReadModel = decodeUnknownEffect(OrchestrationReadModel);
@@ -40469,7 +40470,7 @@ const OrchestrationInfrastructureLayerLive = mergeAll(effect(ProjectionSnapshotQ
 		getThreadDetailById,
 		getThreadDetailSnapshot
 	};
-})), mergeAll(OrchestrationEventStoreLive, OrchestrationCommandReceiptRepositoryLive), OrchestrationProjectionPipelineLive.pipe(provide(OrchestrationEventStoreLive))).pipe(provideMerge(layer$28));
+})), mergeAll(OrchestrationEventStoreLive, OrchestrationCommandReceiptRepositoryLive), OrchestrationProjectionPipelineLive.pipe(provide(OrchestrationEventStoreLive))).pipe(provideMerge(layer$31));
 const OrchestrationLayerLive = mergeAll(OrchestrationInfrastructureLayerLive, OrchestrationEngineLive.pipe(provide(OrchestrationInfrastructureLayerLive)));
 //#endregion
 //#region ../t3-shared/src/keybindings.ts
@@ -40934,16 +40935,16 @@ function mergeWithDefaultKeybindings(custom) {
 * Keybindings - Service tag for keybinding configuration operations.
 */
 var Keybindings = class extends Service$2()("t3/keybindings") {};
-const layer$25 = effect(Keybindings, gen(function* () {
+const layer$28 = effect(Keybindings, gen(function* () {
 	const { keybindingsConfigPath } = yield* ServerConfig;
 	const fs = yield* FileSystem;
 	const path = yield* Path;
-	const upsertSemaphore = yield* make$72(1);
+	const upsertSemaphore = yield* make$75(1);
 	const resolvedConfigCacheKey = "resolved";
 	const changesPubSub = yield* unbounded$1();
-	const startedRef = yield* make$60(false);
-	const startedDeferred = yield* make$70();
-	const watcherScope = yield* make$73("sequential");
+	const startedRef = yield* make$63(false);
+	const startedDeferred = yield* make$73();
+	const watcherScope = yield* make$76("sequential");
 	yield* addFinalizer(() => close(watcherScope, void_$2));
 	const emitChange = (configState) => publish(changesPubSub, configState).pipe(asVoid);
 	const readConfigExists = fs.exists(keybindingsConfigPath).pipe(mapError((cause) => new KeybindingsConfigError({
@@ -41043,7 +41044,7 @@ const layer$25 = effect(Keybindings, gen(function* () {
 		keybindings: mergeWithDefaultKeybindings(compileResolvedKeybindingsConfig(keybindings)),
 		issues
 	})));
-	const resolvedConfigCache = yield* make$78({
+	const resolvedConfigCache = yield* make$81({
 		capacity: 1,
 		lookup: () => loadConfigStateFromDisk
 	});
@@ -41386,7 +41387,7 @@ const resolveEditorLaunch = fn("resolveEditorLaunch")(function* (input) {
 });
 const launchAndUnref = fn("externalLauncher.launchAndUnref")(function* (launch, onError) {
 	const spawner = yield* ChildProcessSpawner;
-	const command = make$76(launch.command, launch.args, launch.options);
+	const command = make$79(launch.command, launch.args, launch.options);
 	yield* spawner.spawn(command).pipe(flatMap$1((handle) => handle.unref), asVoid, scoped, mapError(onError));
 });
 const launchBrowser = fn("externalLauncher.launchBrowser")(function* (target) {
@@ -41423,7 +41424,7 @@ const launchEditorProcess = fn("externalLauncher.launchEditorProcess")(function*
 		cause
 	}));
 });
-const layer$24 = effect(ExternalLauncher, gen(function* () {
+const layer$27 = effect(ExternalLauncher, gen(function* () {
 	const spawner = yield* ChildProcessSpawner;
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path;
@@ -41451,9 +41452,9 @@ var OrchestrationReactor = class extends Service$2()("t3/orchestration/Services/
 //#endregion
 //#region src/serverLifecycleEvents.ts
 var ServerLifecycleEvents = class extends Service$2()("t3/serverLifecycleEvents") {};
-const layer$23 = effect(ServerLifecycleEvents, gen(function* () {
+const layer$26 = effect(ServerLifecycleEvents, gen(function* () {
 	const pubsub = yield* unbounded$1();
-	const state = yield* make$60({
+	const state = yield* make$63({
 		sequence: 0,
 		events: []
 	});
@@ -41530,7 +41531,7 @@ var ServerSettingsService = class extends Service$2()("t3/serverSettings/ServerS
 const makeTest = (overrides = {}) => gen(function* () {
 	const { automaticGitFetchInterval, providerHealthRefreshInterval, ...overridesForMerge } = overrides;
 	const merged = deepMerge(DEFAULT_SERVER_SETTINGS, overridesForMerge);
-	const currentSettingsRef = yield* make$60(yield* normalizeServerSettings({
+	const currentSettingsRef = yield* make$63(yield* normalizeServerSettings({
 		...merged,
 		...automaticGitFetchInterval !== void 0 ? { automaticGitFetchInterval } : {},
 		...providerHealthRefreshInterval !== void 0 ? { providerHealthRefreshInterval } : {}
@@ -41584,17 +41585,17 @@ function stripDefaultServerSettings(current, defaults) {
 	}
 	return Object.is(current, defaults) ? void 0 : current;
 }
-const layer$22 = effect(ServerSettingsService, gen(function* () {
+const layer$25 = effect(ServerSettingsService, gen(function* () {
 	const { settingsPath } = yield* ServerConfig;
 	const fs = yield* FileSystem;
 	const pathService = yield* Path;
 	const secretStore = yield* ServerSecretStore;
-	const writeSemaphore = yield* make$72(1);
+	const writeSemaphore = yield* make$75(1);
 	const cacheKey = "settings";
 	const changesPubSub = yield* unbounded$1();
-	const startedRef = yield* make$60(false);
-	const startedDeferred = yield* make$70();
-	const watcherScope = yield* make$73("sequential");
+	const startedRef = yield* make$63(false);
+	const startedDeferred = yield* make$73();
+	const watcherScope = yield* make$76("sequential");
 	yield* addFinalizer(() => close(watcherScope, void_$2));
 	const emitChange = (settings) => publish(changesPubSub, settings).pipe(asVoid);
 	const readConfigExists = fs.exists(settingsPath).pipe(mapError((cause) => new ServerSettingsError({
@@ -41621,7 +41622,7 @@ const layer$22 = effect(ServerSettingsService, gen(function* () {
 		}
 		return decoded.value;
 	});
-	const settingsCache = yield* make$78({
+	const settingsCache = yield* make$81({
 		capacity: 1,
 		lookup: () => loadSettingsFromDisk
 	});
@@ -41981,16 +41982,16 @@ var AnalyticsService = class AnalyticsService extends Service$2()("t3/telemetry/
 		flush: void_$1
 	}));
 };
-const layer$21 = effect(AnalyticsService, gen(function* () {
+const layer$24 = effect(AnalyticsService, gen(function* () {
 	const telemetryConfig = yield* TelemetryEnvConfig;
 	const httpClient = yield* HttpClient;
 	const serverConfig = yield* ServerConfig;
 	const identifier = yield* getTelemetryIdentifier;
-	const bufferRef = yield* make$60([]);
+	const bufferRef = yield* make$63([]);
 	const clientType = serverConfig.mode === "desktop" ? "desktop-app" : "cli-web-client";
 	const hostPlatform = yield* HostProcessPlatform;
 	const hostArchitecture = yield* HostProcessArchitecture;
-	const enqueueBufferedEvent = (event, properties) => flatMap$1(now, (now) => modify$2(bufferRef, (current) => {
+	const enqueueBufferedEvent = (event, properties) => flatMap$1(now$1, (now) => modify$2(bufferRef, (current) => {
 		const appended = [...current, {
 			event,
 			...properties ? { properties } : {},
@@ -42186,7 +42187,7 @@ function platformArch(architecture) {
 * state. It intentionally has no fallback Layer.succeed value: callers must
 * provide the external platform services and a ServerConfig.
 */
-const layer$20 = effect(ServerEnvironment, gen(function* () {
+const layer$23 = effect(ServerEnvironment, gen(function* () {
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path;
 	const serverConfig = yield* ServerConfig;
@@ -42240,7 +42241,7 @@ const layer$20 = effect(ServerEnvironment, gen(function* () {
 		getEnvironmentId: succeed$1(environmentId),
 		getDescriptor: succeed$1(descriptor)
 	});
-})).pipe(provide(layer$27));
+})).pipe(provide(layer$30));
 //#endregion
 //#region src/provider/Services/ProviderSessionReaper.ts
 var ProviderSessionReaper = class extends Service$2()("t3/provider/Services/ProviderSessionReaper") {};
@@ -42254,7 +42255,7 @@ const forkParked = (effect) => gen(function* () {
 		yield* forkScoped(effect);
 		return;
 	}
-	const parked = yield* make$70();
+	const parked = yield* make$73();
 	yield* forkScoped(succeed$4(parked, void 0).pipe(andThen(activation), andThen(effect)));
 	yield* _await(parked);
 });
@@ -42273,9 +42274,9 @@ var ServerRuntimeStartupError = class extends TaggedErrorClass()("ServerRuntimeS
 var ServerRuntimeStartup = class extends Service$2()("t3/serverRuntimeStartup") {};
 const settleQueuedCommand = (deferred, exit) => isSuccess(exit) ? succeed$4(deferred, exit.value) : failCause$2(deferred, exit.cause);
 const makeCommandGate = gen(function* () {
-	const commandReady = yield* make$70();
+	const commandReady = yield* make$73();
 	const commandQueue = yield* unbounded$2();
-	const commandReadinessState = yield* make$60("pending");
+	const commandReadinessState = yield* make$63("pending");
 	yield* forkScoped(forever(take$1(commandQueue).pipe(flatMap$1((command) => command.run))));
 	return {
 		awaitCommandReady: _await(commandReady),
@@ -42291,7 +42292,7 @@ const makeCommandGate = gen(function* () {
 			const readinessState = yield* get$3(commandReadinessState);
 			if (readinessState === "ready") return yield* effect;
 			if (readinessState !== "pending") return yield* readinessState;
-			const result = yield* make$70();
+			const result = yield* make$73();
 			yield* offer$1(commandQueue, { run: _await(commandReady).pipe(flatMap$1(() => effect), exit, flatMap$1((exit) => settleQueuedCommand(result, exit))) });
 			return yield* _await(result);
 		})
@@ -42335,7 +42336,7 @@ const resolveAutoBootstrapWelcomeTargets = gen(function* () {
 		let nextProjectId;
 		let nextProjectDefaultModelSelection;
 		if (isNone(existingProject)) {
-			const createdAt = formatIso(yield* now);
+			const createdAt = formatIso(yield* now$1);
 			nextProjectId = ProjectId.make(yield* randomUUID);
 			const bootstrapProjectTitle = path.basename(serverConfig.cwd) || "project";
 			nextProjectDefaultModelSelection = getAutoBootstrapDefaultModelSelection();
@@ -42354,7 +42355,7 @@ const resolveAutoBootstrapWelcomeTargets = gen(function* () {
 		}
 		const existingThreadId = yield* projectionReadModelQuery.getFirstActiveThreadIdByProjectId(nextProjectId);
 		if (isNone(existingThreadId)) {
-			const createdAt = formatIso(yield* now);
+			const createdAt = formatIso(yield* now$1);
 			const createdThreadId = ThreadId.make(yield* randomUUID);
 			yield* orchestrationEngine.dispatch({
 				type: "thread.create",
@@ -42394,7 +42395,7 @@ const maybeOpenBrowser = (target) => gen(function* () {
 	yield* (yield* ExternalLauncher).launchBrowser(target).pipe(catch_(() => logInfo("browser auto-open unavailable", { hint: `Open ${target} in your browser.` })));
 });
 const runStartupPhase = (phase, effect) => effect.pipe(annotateSpans({ "startup.phase": phase }), withSpan(`server.startup.${phase}`));
-const make$27 = (options) => gen(function* () {
+const make$30 = (options) => gen(function* () {
 	const serverConfig = yield* ServerConfig;
 	const keybindings = yield* Keybindings;
 	const orchestrationReactor = yield* OrchestrationReactor;
@@ -42404,8 +42405,8 @@ const make$27 = (options) => gen(function* () {
 	const serverEnvironment = yield* ServerEnvironment;
 	const crypto = yield* Crypto;
 	const commandGate = yield* makeCommandGate;
-	const httpListening = yield* make$70();
-	const reactorScope = yield* make$73("sequential");
+	const httpListening = yield* make$73();
+	const reactorScope = yield* make$76("sequential");
 	yield* addFinalizer(() => close(reactorScope, void_$2));
 	yield* forkScoped(exit(gen(function* () {
 		yield* logDebug("startup phase: starting keybindings runtime");
@@ -42480,7 +42481,7 @@ const make$27 = (options) => gen(function* () {
 			version: 1,
 			type: "ready",
 			payload: {
-				at: formatIso(yield* now),
+				at: formatIso(yield* now$1),
 				environment
 			}
 		}));
@@ -42508,7 +42509,7 @@ const make$27 = (options) => gen(function* () {
 		enqueueCommand: commandGate.enqueueCommand
 	};
 });
-const layerWithOptions = (options) => effect(ServerRuntimeStartup, make$27(options));
+const layerWithOptions = (options) => effect(ServerRuntimeStartup, make$30(options));
 layerWithOptions();
 //#endregion
 //#region src/workspace/WorkspacePaths.ts
@@ -42580,7 +42581,7 @@ function expandHomePath$2(input, path) {
 	if (input.startsWith("~/") || input.startsWith("~\\")) return path.join(NodeOS.homedir(), input.slice(2));
 	return input;
 }
-const layer$18 = effect(WorkspacePaths, gen(function* () {
+const layer$21 = effect(WorkspacePaths, gen(function* () {
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path;
 	const statWorkspaceRoot = fn("WorkspacePaths.statWorkspaceRoot")(function* (workspaceRoot, normalizedWorkspaceRoot, phase) {
@@ -42742,14 +42743,14 @@ const projectCommandUuid = Crypto.pipe(flatMap$1((crypto) => crypto.randomUUIDv4
 	operation: "generateProjectCommandId",
 	cause
 })));
-const ProjectCliRuntimeLive = mergeAll(layer$18, OrchestrationLayerLive.pipe(provideMerge(layer$26), provideMerge(layerConfig)));
+const ProjectCliRuntimeLive = mergeAll(layer$21, OrchestrationLayerLive.pipe(provideMerge(layer$29), provideMerge(layerConfig)));
 const PROJECT_CLI_LIVE_SERVER_TIMEOUT = seconds(1);
 const withProjectCliSessionToken = (environmentAuth, run) => acquireUseRelease(environmentAuth.issueSession({
 	scopes: AuthAdministrativeScopes,
 	label: "t3 project cli"
 }), (issued) => run(issued.token), (issued) => environmentAuth.revokeSession(issued.sessionId).pipe(ignore$1({ log: true })));
 const withProjectCliLiveServerTimeout = (effect) => effect.pipe(timeout(PROJECT_CLI_LIVE_SERVER_TIMEOUT));
-const makeLiveServerClient = (origin) => make$37(EnvironmentHttpApi, { baseUrl: origin });
+const makeLiveServerClient = (origin) => make$40(EnvironmentHttpApi, { baseUrl: origin });
 const normalizeWorkspaceRootForProjectCommand = fn("normalizeWorkspaceRootForProjectCommand")(function* (workspaceRoot) {
 	return yield* (yield* WorkspacePaths).normalizeWorkspaceRoot(workspaceRoot);
 });
@@ -42832,7 +42833,7 @@ const runProjectMutation = fn("runProjectMutation")(function* (flags, run) {
 			});
 			yield* log(output);
 		}));
-		const offlineRuntimeLayer = ProjectCliRuntimeLive.pipe(provide(layer$36(config)), provide(succeed$3(MinimumLogLevel, minimumLogLevel)));
+		const offlineRuntimeLayer = ProjectCliRuntimeLive.pipe(provide(layer$39(config)), provide(succeed$3(MinimumLogLevel, minimumLogLevel)));
 		return yield* gen(function* () {
 			const snapshot = yield* getOfflineSnapshot();
 			const orchestrationEngine = yield* OrchestrationEngineService;
@@ -42843,9 +42844,9 @@ const runProjectMutation = fn("runProjectMutation")(function* (flags, run) {
 			});
 			yield* log(output);
 		}).pipe(provide$1(offlineRuntimeLayer));
-	}).pipe(provide$1(mergeAll(runtimeLayer, layer$18).pipe(provideMerge(layer$40), provide(layer$36(config)), provide(succeed$3(MinimumLogLevel, minimumLogLevel)))));
+	}).pipe(provide$1(mergeAll(runtimeLayer, layer$21).pipe(provideMerge(layer$43), provide(layer$39(config)), provide(succeed$3(MinimumLogLevel, minimumLogLevel)))));
 });
-const projectAddCommand = make$59("add", {
+const projectAddCommand = make$62("add", {
 	...projectLocationFlags,
 	workspaceRoot: string$1("path").pipe(withDescription$2("Workspace root to add as a project.")),
 	title: string("title").pipe(withDescription$1("Optional project title."), optional)
@@ -42866,11 +42867,11 @@ const projectAddCommand = make$59("add", {
 		title,
 		workspaceRoot,
 		defaultModelSelection: getAutoBootstrapDefaultModelSelection(),
-		createdAt: formatIso(yield* now)
+		createdAt: formatIso(yield* now$1)
 	});
 	return `Added project ${projectId} (${title}) at ${workspaceRoot}.`;
 }))));
-const projectRemoveCommand = make$59("remove", {
+const projectRemoveCommand = make$62("remove", {
 	...projectLocationFlags,
 	project: string$1("project").pipe(withDescription$2("Project id or workspace root to remove.")),
 	force: boolean("force").pipe(withDescription$1("Delete the project and all of its threads."), withDefault(false))
@@ -42887,7 +42888,7 @@ const projectRemoveCommand = make$59("remove", {
 	});
 	return `Removed project ${project.id} (${project.title}).`;
 }))));
-const projectRenameCommand = make$59("rename", {
+const projectRenameCommand = make$62("rename", {
 	...projectLocationFlags,
 	project: string$1("project").pipe(withDescription$2("Project id or workspace root to rename.")),
 	title: string$1("title").pipe(withDescription$2("New project title."))
@@ -42906,7 +42907,7 @@ const projectRenameCommand = make$59("rename", {
 	});
 	return `Renamed project ${project.id} to ${nextTitle}.`;
 }))));
-const projectCommand = make$59("project").pipe(withDescription("Manage projects."), withSubcommands([
+const projectCommand = make$62("project").pipe(withDescription("Manage projects."), withSubcommands([
 	projectAddCommand,
 	projectRemoveCommand,
 	projectRenameCommand
@@ -42969,7 +42970,7 @@ function acquireDaemonLock(stateDir) {
 * @category layers
 * @since 4.0.0
 */
-const layer$17 = (api, options) => use(fnUntraced(function* (router) {
+const layer$20 = (api, options) => use(fnUntraced(function* (router) {
 	const services = yield* context();
 	const routes = [];
 	const availableGroups = Array.from(services.mapUnsafe.keys()).filter((key) => key.startsWith("effect/httpapi/HttpApiGroup/"));
@@ -43022,19 +43023,19 @@ const HandlersTypeId = "~effect/httpapi/HttpApiBuilder/Handlers";
 */
 const securityDecode = (self) => {
 	switch (self._tag) {
-		case "Http": return map$4(HttpServerRequest, (request) => make$64(getAuthorizationCredential(request.headers.authorization, self.scheme) ?? ""));
+		case "Http": return map$4(HttpServerRequest, (request) => make$67(getAuthorizationCredential(request.headers.authorization, self.scheme) ?? ""));
 		case "ApiKey": {
 			const key = self.in === "header" ? self.key.toLowerCase() : self.key;
 			const schema = Struct({ [key]: String$1 });
 			return match$2(self.in === "query" ? schemaSearchParams(schema) : self.in === "cookie" ? schemaCookies(schema) : schemaHeaders(schema), {
-				onFailure: () => make$64(""),
-				onSuccess: (match) => make$64(match[key])
+				onFailure: () => make$67(""),
+				onSuccess: (match) => make$67(match[key])
 			});
 		}
 		case "Basic": {
 			const empty = {
 				username: "",
-				password: make$64("")
+				password: make$67("")
 			};
 			return map$4(HttpServerRequest, (request) => {
 				const encoded = getAuthorizationCredential(request.headers.authorization, basicScheme);
@@ -43045,7 +43046,7 @@ const securityDecode = (self) => {
 				if (separator === -1) return empty;
 				return {
 					username: decoded.slice(0, separator),
-					password: make$64(decoded.slice(separator + 1))
+					password: make$67(decoded.slice(separator + 1))
 				};
 			});
 		}
@@ -43209,17 +43210,17 @@ const makeSecurityMiddleware = (key, service) => {
 		let lastResult;
 		for (let i = 0; i < entries.length; i++) {
 			const { decode, middleware } = entries[i];
-			const result$1 = yield* result(flatMap$1(decode, (credential) => middleware(handler, {
+			const result$2 = yield* result(flatMap$1(decode, (credential) => middleware(handler, {
 				credential,
 				endpoint: options.endpoint,
 				group: options.group
 			})));
-			if (isFailure$1(result$1)) {
-				if (isHandlerError(result$1.failure)) return yield* fail(result$1.failure.error);
-				lastResult = result$1;
+			if (isFailure$1(result$2)) {
+				if (isHandlerError(result$2.failure)) return yield* fail(result$2.failure.error);
+				lastResult = result$2;
 				continue;
 			}
-			return result$1.success;
+			return result$2.success;
 		}
 		return yield* fromResult(lastResult);
 	});
@@ -43583,18 +43584,18 @@ function requireDesktopTelemetryWriteProgress(fd, remainingBytes, written) {
 		remainingBytes
 	}));
 }
-const layer$16 = effect(DesktopTelemetryReceiver, fn("resourceTelemetry.desktopTelemetryReceiver.make")(function* () {
+const layer$19 = effect(DesktopTelemetryReceiver, fn("resourceTelemetry.desktopTelemetryReceiver.make")(function* () {
 	const config = yield* ServerConfig;
 	const serverSettings = yield* ServerSettingsService;
-	const latest = yield* make$60(none());
-	const receiverStartedAt = yield* now;
-	const lastContactAtMs = yield* make$60(initialDesktopTelemetryContactAt(config.desktopTelemetryFd, toEpochMillis(receiverStartedAt)));
-	const snapshotStaleAfterMs = yield* make$60(resolveDesktopTelemetrySnapshotStaleAfterMs(DEFAULT_HOST_POWER_ACTIVE_INTERVAL_MS, DEFAULT_HOST_POWER_IDLE_INTERVAL_MS));
+	const latest = yield* make$63(none());
+	const receiverStartedAt = yield* now$1;
+	const lastContactAtMs = yield* make$63(initialDesktopTelemetryContactAt(config.desktopTelemetryFd, toEpochMillis(receiverStartedAt)));
+	const snapshotStaleAfterMs = yield* make$63(resolveDesktopTelemetrySnapshotStaleAfterMs(DEFAULT_HOST_POWER_ACTIVE_INTERVAL_MS, DEFAULT_HOST_POWER_IDLE_INTERVAL_MS));
 	const changes = yield* sliding(8);
 	const healthChanges = yield* sliding(4);
-	const controlMutex = yield* make$72(1);
-	const snapshotMutex = yield* make$72(1);
-	const health = yield* make$60({
+	const controlMutex = yield* make$75(1);
+	const snapshotMutex = yield* make$75(1);
+	const health = yield* make$63({
 		status: config.desktopTelemetryFd === void 0 ? "unavailable" : "starting",
 		lastSampleAt: none(),
 		lastError: config.desktopTelemetryFd === void 0 ? some(new DesktopTelemetryDescriptorUnavailable({ mode: config.mode }).message) : none()
@@ -43668,7 +43669,7 @@ const layer$16 = effect(DesktopTelemetryReceiver, fn("resourceTelemetry.desktopT
 			}));
 			return decodeMessage(value).pipe(mapError((cause) => new DesktopTelemetryDecodeFailed({ cause })));
 		}), mapError$1(normalizeReceiverError)).pipe(runForEach((message) => {
-			const recordContact = now.pipe(flatMap$1((now) => set$2(lastContactAtMs, some(toEpochMillis(now)))));
+			const recordContact = now$1.pipe(flatMap$1((now) => set$2(lastContactAtMs, some(toEpochMillis(now)))));
 			if (message.type === "desktopTelemetryHello") return recordContact.pipe(andThen(updateHealth((current) => ({
 				...current,
 				status: "healthy",
@@ -43686,7 +43687,7 @@ const layer$16 = effect(DesktopTelemetryReceiver, fn("resourceTelemetry.desktopT
 			lastError: some(error.message)
 		}))), forkScoped);
 		yield* forever(sleep(STALE_CHECK_INTERVAL).pipe(andThen(snapshotMutex.withPermits(1)(gen(function* () {
-			const nowMs = toEpochMillis(yield* now);
+			const nowMs = toEpochMillis(yield* now$1);
 			const staleAfterMs = yield* get$3(snapshotStaleAfterMs);
 			const staleSnapshot = yield* modify$2(latest, (current) => {
 				if (isNone(current) || current.value.power.stale || nowMs - current.value.sampledAtUnixMs < staleAfterMs) return [none(), current];
@@ -43760,8 +43761,8 @@ const makeUnknownSnapshot = (source, updatedAt) => ({
 function samePowerState(left, right) {
 	return left.source === right.source && left.idle === right.idle && left.locked === right.locked && left.suspended === right.suspended && left.onBattery === right.onBattery && left.lowPowerMode === right.lowPowerMode && left.thermalState === right.thermalState && left.stale === right.stale;
 }
-const make$24 = fn("background.hostPower.make")(function* (initialSnapshot) {
-	const latestRef = yield* make$60(initialSnapshot ?? makeUnknownSnapshot("unknown", yield* now));
+const make$27 = fn("background.hostPower.make")(function* (initialSnapshot) {
+	const latestRef = yield* make$63(initialSnapshot ?? makeUnknownSnapshot("unknown", yield* now$1));
 	const changes = yield* sliding(1);
 	const report = (snapshot) => modify$2(latestRef, (current) => {
 		if (isLessThan$1(snapshot.updatedAt, current.updatedAt)) return [none(), current];
@@ -43776,12 +43777,12 @@ const make$24 = fn("background.hostPower.make")(function* (initialSnapshot) {
 		streamChanges: fromPubSub(changes)
 	});
 });
-const layer$15 = effect(HostPowerMonitor, gen(function* () {
+const layer$18 = effect(HostPowerMonitor, gen(function* () {
 	const desktopSubscription = yield* (yield* DesktopTelemetryReceiver).subscribe;
 	const initial = desktopSubscription.latest;
 	const monitor = yield* match$1(initial, {
-		onNone: () => make$24(),
-		onSome: (snapshot) => make$24(snapshot.power)
+		onNone: () => make$27(),
+		onSome: (snapshot) => make$27(snapshot.power)
 	});
 	yield* desktopSubscription.changes.pipe(map$8((snapshot) => snapshot.power), runForEach(monitor.report), forkScoped);
 	return monitor;
@@ -43871,34 +43872,34 @@ function computeSnapshot(input) {
 		updatedAt: input.updatedAt
 	};
 }
-const layer$14 = effect(BackgroundPolicy, fn("background.policy.make")(function* () {
+const layer$17 = effect(BackgroundPolicy, fn("background.policy.make")(function* () {
 	const hostPowerMonitor = yield* HostPowerMonitor;
 	const serverSettings = yield* ServerSettingsService;
-	const leasesRef = yield* make$60(/* @__PURE__ */ new Map());
+	const leasesRef = yield* make$63(/* @__PURE__ */ new Map());
 	const changes = yield* sliding(1);
-	const publishMutex = yield* make$72(1);
+	const publishMutex = yield* make$75(1);
 	const backgroundActivitySettings = serverSettings.getSettings.pipe(map$4(resolveServerBackgroundActivitySettings), orElseSucceed(() => getBackgroundActivityPresetSettings("balanced")));
 	const snapshot = gen(function* () {
-		const [hostPower, leases, now$4, settings] = yield* all([
+		const [hostPower, leases, now, settings] = yield* all([
 			hostPowerMonitor.snapshot,
 			get$3(leasesRef),
-			now,
+			now$1,
 			backgroundActivitySettings
 		]);
 		return computeSnapshot({
 			hostPower,
 			leases,
-			now: now$4,
+			now,
 			settings,
-			updatedAt: now$4
+			updatedAt: now
 		});
 	});
 	const publishSnapshotUnlocked = snapshot.pipe(flatMap$1((next) => publish(changes, next)));
 	const publishSnapshot = publishMutex.withPermits(1)(publishSnapshotUnlocked);
 	const reportClientActivity = (sessionId, rpcClientId, input) => publishMutex.withPermits(1)(gen(function* () {
 		const ttlMs = Math.min(Math.max(input.ttlMs ?? DEFAULT_LEASE_TTL_MS, 1e3), MAX_LEASE_TTL_MS);
-		const now$5 = yield* now;
-		const expiresAt = add$3(now$5, { milliseconds: ttlMs });
+		const now = yield* now$1;
+		const expiresAt = add$3(now, { milliseconds: ttlMs });
 		const lease = {
 			sessionId,
 			rpcClientId,
@@ -43912,10 +43913,10 @@ const layer$14 = effect(BackgroundPolicy, fn("background.policy.make")(function*
 			...input.batteryState !== void 0 ? { batteryState: input.batteryState } : {},
 			...input.networkType !== void 0 ? { networkType: input.networkType } : {},
 			scopes: input.scopes,
-			updatedAt: now$5,
+			updatedAt: now,
 			expiresAt
 		};
-		yield* update$2(leasesRef, (leases) => upsertClientActivityLease(leases, lease, now$5));
+		yield* update$2(leasesRef, (leases) => upsertClientActivityLease(leases, lease, now));
 		yield* publishSnapshotUnlocked;
 	}));
 	const removeRpcClient = (sessionId, rpcClientId) => publishMutex.withPermits(1)(update$2(leasesRef, (leases) => {
@@ -43933,10 +43934,10 @@ const layer$14 = effect(BackgroundPolicy, fn("background.policy.make")(function*
 	yield* runForEach(hostPowerMonitor.streamChanges, () => publishSnapshot).pipe(forkScoped);
 	yield* runForEach(serverSettings.streamChanges, () => publishSnapshot).pipe(forkScoped);
 	yield* forever(sleep("15 seconds").pipe(andThen(publishMutex.withPermits(1)(gen(function* () {
-		const now$3 = yield* now;
+		const now = yield* now$1;
 		yield* update$2(leasesRef, (leases) => {
 			const next = new Map(leases);
-			for (const [key, lease] of next) if (!isLeaseActive(lease, now$3)) next.delete(key);
+			for (const [key, lease] of next) if (!isLeaseActive(lease, now)) next.delete(key);
 			return next;
 		});
 		yield* publishSnapshotUnlocked;
@@ -43964,8 +43965,8 @@ function nonNegativeInteger(value, fallback) {
 	if (!Number.isFinite(value)) return 0;
 	return Math.max(0, Math.round(value));
 }
-const layer$13 = effect(ResourceAttribution, fn("resourceTelemetry.resourceAttribution.make")(function* () {
-	const entries = yield* make$60(/* @__PURE__ */ new Map());
+const layer$16 = effect(ResourceAttribution, fn("resourceTelemetry.resourceAttribution.make")(function* () {
+	const entries = yield* make$63(/* @__PURE__ */ new Map());
 	const record = (input) => update$2(entries, (current) => {
 		const next = new Map(current);
 		const entryKey = key(input);
@@ -43984,7 +43985,7 @@ const layer$13 = effect(ResourceAttribution, fn("resourceTelemetry.resourceAttri
 		record,
 		snapshot: gen(function* () {
 			return {
-				readAt: yield* now,
+				readAt: yield* now$1,
 				entries: [...(yield* get$3(entries)).values()].toSorted((left, right) => right.logicalWriteBytes - left.logicalWriteBytes)
 			};
 		})
@@ -44101,7 +44102,7 @@ const layerFlusher = /*#__PURE__*/ sync$2(Flusher, () => {
 * @category constructors
 * @since 4.0.0
 */
-const make$21 = /*#__PURE__*/ fnUntraced(function* (options) {
+const make$24 = /*#__PURE__*/ fnUntraced(function* (options) {
 	const services = yield* context();
 	const clock = get$5(services, Clock);
 	const scope = get$5(services, Scope);
@@ -44133,7 +44134,7 @@ const make$21 = /*#__PURE__*/ fnUntraced(function* (options) {
 		package: "@effect/opentelemetry",
 		module: options.label
 	}));
-	const exportFibers = yield* make$62();
+	const exportFibers = yield* make$65();
 	const runExportFork = yield* runtime(exportFibers)();
 	yield* (yield* Flusher).register(runExport);
 	yield* addFinalizer$1(scope, suspend(() => {
@@ -44171,7 +44172,7 @@ const make$21 = /*#__PURE__*/ fnUntraced(function* (options) {
 * @category constructors
 * @since 4.0.0
 */
-const make$20 = (options) => {
+const make$23 = (options) => {
 	const resourceAttributes = options.attributes ? entriesToAttributes(Object.entries(options.attributes)) : [];
 	resourceAttributes.push({
 		key: "service.name",
@@ -44218,7 +44219,7 @@ const fromConfig = /*#__PURE__*/ fnUntraced(function* (options) {
 	};
 	delete attributes["service.name"];
 	delete attributes["service.version"];
-	return make$20({
+	return make$23({
 		serviceName,
 		serviceVersion,
 		attributes
@@ -44337,7 +44338,7 @@ const layerJson$1 = /*#__PURE__*/ succeed$3(OtlpSerialization, {
 * @category constructors
 * @since 4.0.0
 */
-const make$19 = /*#__PURE__*/ fnUntraced(function* (options) {
+const make$22 = /*#__PURE__*/ fnUntraced(function* (options) {
 	const clock = yield* Clock;
 	const serialization = yield* OtlpSerialization;
 	const startTimeNanos = yield* clock.currentTimeNanos;
@@ -44618,7 +44619,7 @@ const make$19 = /*#__PURE__*/ fnUntraced(function* (options) {
 			}]
 		}] });
 	};
-	yield* make$21({
+	yield* make$24({
 		label: "OtlpMetrics",
 		url: options.url,
 		headers: options.headers,
@@ -44634,7 +44635,7 @@ const make$19 = /*#__PURE__*/ fnUntraced(function* (options) {
 * @category layers
 * @since 4.0.0
 */
-const layer$12 = (options) => effectDiscard(make$19(options)).pipe(provideMerge(layerFlusher));
+const layer$15 = (options) => effectDiscard(make$22(options)).pipe(provideMerge(layerFlusher));
 /** Creates a unique key for a metric including its attributes */
 const makeMetricKey = (id, attributes) => {
 	if (attributes === void 0 || Object.keys(attributes).length === 0) return id;
@@ -44729,11 +44730,11 @@ const EAggregationTemporality = {
 * @category constructors
 * @since 4.0.0
 */
-const make$18 = /*#__PURE__*/ fnUntraced(function* (options) {
+const make$21 = /*#__PURE__*/ fnUntraced(function* (options) {
 	const otelResource = yield* fromConfig(options.resource);
 	const serialization = yield* OtlpSerialization;
 	const scope = { name: serviceNameUnsafe(otelResource) };
-	const exporter = yield* make$21({
+	const exporter = yield* make$24({
 		label: "OtlpTracer",
 		url: options.url,
 		headers: options.headers,
@@ -44755,7 +44756,7 @@ const make$18 = /*#__PURE__*/ fnUntraced(function* (options) {
 		if (!span.sampled) return;
 		exporter.push(makeOtlpSpan(span));
 	}
-	return make$74({
+	return make$77({
 		span(options) {
 			return makeSpan({
 				...options,
@@ -45273,8 +45274,8 @@ const makeLocalFileTracer = fn("makeLocalFileTracer")(function* (options) {
 		batchWindowMs: options.batchWindowMs,
 		...options.onFlush ? { onFlush: options.onFlush } : {}
 	}));
-	const delegate = options.delegate ?? make$74({ span: (spanOptions) => new NativeSpan(spanOptions) });
-	return make$74({
+	const delegate = options.delegate ?? make$77({ span: (spanOptions) => new NativeSpan(spanOptions) });
+	return make$77({
 		span(spanOptions) {
 			return new LocalFileSpan(spanOptions, delegate.span(spanOptions), sink.push);
 		},
@@ -45440,7 +45441,7 @@ const logT3ProjectFileLoadError = (error) => logWarning$1(error).pipe(annotateLo
 	filePath: error.filePath,
 	errorTag: error._tag
 }));
-const layer$11 = effect(T3ProjectFileLoader, gen(function* () {
+const layer$14 = effect(T3ProjectFileLoader, gen(function* () {
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path;
 	const load = fn("T3ProjectFileLoader.load")(function* (workspaceRoot) {
@@ -45531,7 +45532,7 @@ function extractIconHref(source) {
 	return null;
 }
 const optionOnNotFound$1 = (effect) => effect.pipe(map$4(some), catchTags({ PlatformError: (error) => error.reason._tag === "NotFound" ? succeed$1(none()) : fail(error) }));
-const layer$10 = effect(ProjectFaviconResolver, gen(function* () {
+const layer$13 = effect(ProjectFaviconResolver, gen(function* () {
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path;
 	const workspacePaths = yield* WorkspacePaths;
@@ -45873,10 +45874,10 @@ const resolveAsset = fn("AssetAccess.resolveAsset")(function* (token, relativePa
 //#endregion
 //#region src/observability/BrowserTraceCollector.ts
 var BrowserTraceCollector = class extends Service$2()("t3/observability/BrowserTraceCollector") {};
-const make$15 = (sink) => BrowserTraceCollector.of({ record: (records) => sync(() => {
+const make$18 = (sink) => BrowserTraceCollector.of({ record: (records) => sync(() => {
 	for (const record of records) sink.push(record);
 }) });
-const layer$9 = (sink) => succeed$3(BrowserTraceCollector, make$15(sink));
+const layer$12 = (sink) => succeed$3(BrowserTraceCollector, make$18(sink));
 //#endregion
 //#region src/auth/http.ts
 const CREDENTIAL_RESPONSE_HEADERS = {
@@ -48793,7 +48794,7 @@ if (!(process.env.MSGPACKR_NATIVE_ACCELERATION_DISABLED !== void 0 && process.en
 	let extractor;
 	try {
 		if (typeof __require == "function") extractor = require_msgpackr_extract();
-		else extractor = createRequire(import.meta.url)("msgpackr-extract");
+		else extractor = createRequire$1(import.meta.url)("msgpackr-extract");
 		if (extractor) setExtractor(extractor.extractStrings);
 	} catch (error) {}
 }
@@ -49198,6 +49199,7 @@ const makeNoSerialization$1 = /*#__PURE__*/ fnUntraced(function* (group, options
 	const services = yield* context();
 	const scope = get$5(services, Scope);
 	const entries = /* @__PURE__ */ new Map();
+	const hooks = yield* serviceOption(RequestHooks);
 	let isShutdown = false;
 	yield* addFinalizer$1(scope, withFiber$1((parent) => {
 		isShutdown = true;
@@ -49228,6 +49230,11 @@ const makeNoSerialization$1 = /*#__PURE__*/ fnUntraced(function* (group, options
 	const onEffectRequest = (rpc, middleware, span, payload, headers, context, discard) => withFiber$1((parentFiber) => {
 		if (isShutdown) return interrupt$1;
 		const id = generateRequestId();
+		const onStart = isSome(hooks) && hooks.value.onRequestStart ? hooks.value.onRequestStart({
+			id,
+			tag: rpc._tag,
+			stream: false
+		}) : void_$1;
 		const send = middleware((message) => options.onFromClient({
 			message,
 			context,
@@ -49244,7 +49251,7 @@ const makeNoSerialization$1 = /*#__PURE__*/ fnUntraced(function* (group, options
 			} : {},
 			headers: merge(parentFiber.getRef(CurrentHeaders), headers)
 		});
-		if (discard) return send;
+		if (discard) return onStart.pipe(andThen(send));
 		let fiber;
 		return onInterrupt(callback((resume) => {
 			const entry = {
@@ -49259,13 +49266,14 @@ const makeNoSerialization$1 = /*#__PURE__*/ fnUntraced(function* (group, options
 				}
 			};
 			entries.set(id, entry);
-			fiber = send.pipe(span ? withParentSpan(span, { captureStackTrace: false }) : identity, runForkWith(parentFiber.context));
+			fiber = onStart.pipe(andThen(send), span ? withParentSpan(span, { captureStackTrace: false }) : identity, runForkWith(parentFiber.context));
 			fiber.addObserver((exit) => {
 				if (exit._tag === "Failure") return resume(exit);
 			});
 		}), (interruptors) => {
+			const entry = entries.get(id);
 			entries.delete(id);
-			return andThen(interrupt$4(fiber), sendInterrupt(id, Array.from(interruptors), context));
+			return andThen(interrupt$4(fiber), sendInterrupt(id, Array.from(interruptors), context, entry?.rpc._tag));
 		});
 	});
 	const onStreamRequest = fnUntraced(function* (rpc, middleware, payload, headers, streamBufferSize, context) {
@@ -49273,11 +49281,17 @@ const makeNoSerialization$1 = /*#__PURE__*/ fnUntraced(function* (group, options
 		const span = disableTracing ? void 0 : yield* makeSpanScoped(`${spanPrefix}.${rpc._tag}`, { attributes: options.spanAttributes });
 		const fiber = getCurrent();
 		const id = generateRequestId();
+		const onStart = isSome(hooks) && hooks.value.onRequestStart ? hooks.value.onRequestStart({
+			id,
+			tag: rpc._tag,
+			stream: true
+		}) : void_$1;
 		const scope = getUnsafe$1(fiber.context, Scope);
 		yield* addFinalizerExit(scope, (exit) => {
-			if (!entries.has(id)) return void_$1;
+			const entry = entries.get(id);
+			if (!entry) return void_$1;
 			entries.delete(id);
-			return sendInterrupt(id, isFailure(exit) ? Array.from(interruptors(exit.cause)) : [], context);
+			return sendInterrupt(id, isFailure(exit) ? Array.from(interruptors(exit.cause)) : [], context, entry.rpc._tag);
 		});
 		const queue = yield* bounded(streamBufferSize);
 		entries.set(id, {
@@ -49285,9 +49299,10 @@ const makeNoSerialization$1 = /*#__PURE__*/ fnUntraced(function* (group, options
 			rpc,
 			queue,
 			scope,
-			context
+			context,
+			chunkCount: 0
 		});
-		yield* middleware((message) => options.onFromClient({
+		yield* onStart.pipe(andThen(middleware((message) => options.onFromClient({
 			message,
 			context,
 			discard: false
@@ -49302,7 +49317,7 @@ const makeNoSerialization$1 = /*#__PURE__*/ fnUntraced(function* (group, options
 				sampled: span.sampled
 			} : {},
 			headers: merge(fiber.getRef(CurrentHeaders), headers)
-		}).pipe(span ? withParentSpan(span, { captureStackTrace: false }) : identity, catchCause((error) => failCause$3(queue, error)), interruptible, forkIn(scope, { startImmediately: true }));
+		}))).pipe(span ? withParentSpan(span, { captureStackTrace: false }) : identity, catchCause((error) => failCause$3(queue, error)), interruptible, forkIn(scope, { startImmediately: true }));
 		return queue;
 	});
 	const getRpcClientMiddleware = (rpc) => {
@@ -49324,7 +49339,10 @@ const makeNoSerialization$1 = /*#__PURE__*/ fnUntraced(function* (group, options
 			});
 		};
 	};
-	const sendInterrupt = (requestId, interruptors, context) => callback((resume) => {
+	const sendInterrupt = (requestId, interruptors, context, tag) => (isSome(hooks) && hooks.value.onRequestInterrupt ? hooks.value.onRequestInterrupt({
+		id: requestId,
+		tag
+	}) : void_$1).pipe(andThen(callback((resume) => {
 		const parentFiber = getCurrent();
 		options.onFromClient({
 			message: {
@@ -49337,14 +49355,20 @@ const makeNoSerialization$1 = /*#__PURE__*/ fnUntraced(function* (group, options
 		}).pipe(timeout(1e3), runForkWith(parentFiber.context)).addObserver(() => {
 			resume(void_$1);
 		});
-	});
+	})));
 	const write = (message) => {
 		switch (message._tag) {
 			case "Chunk": {
 				const requestId = message.requestId;
 				const entry = entries.get(requestId);
 				if (!entry || entry._tag !== "Queue") return void_$1;
-				return offerAll(entry.queue, message.values).pipe(supportsAck ? flatMap$1(() => options.onFromClient({
+				const chunkCount = entry.chunkCount += message.values.length;
+				const onChunk = isSome(hooks) && hooks.value.onRequestChunk ? hooks.value.onRequestChunk({
+					id: requestId,
+					tag: entry.rpc._tag,
+					chunkCount
+				}) : void_$1;
+				return offerAll(entry.queue, message.values).pipe(andThen(onChunk), supportsAck ? flatMap$1(() => options.onFromClient({
 					message: {
 						_tag: "Ack",
 						requestId: message.requestId
@@ -49358,11 +49382,16 @@ const makeNoSerialization$1 = /*#__PURE__*/ fnUntraced(function* (group, options
 				const entry = entries.get(requestId);
 				if (!entry) return void_$1;
 				entries.delete(requestId);
-				if (entry._tag === "Effect") {
+				const onExit = isSome(hooks) && hooks.value.onRequestExit ? hooks.value.onRequestExit({
+					id: requestId,
+					tag: entry.rpc._tag,
+					stream: entry._tag === "Queue",
+					exit: message.exit
+				}) : void_$1;
+				if (entry._tag === "Effect") return onExit.pipe(andThen(sync(() => {
 					entry.resume(message.exit);
-					return void_$1;
-				}
-				return message.exit._tag === "Success" ? end(entry.queue) : failCause$3(entry.queue, message.exit.cause);
+				})));
+				return onExit.pipe(andThen(message.exit._tag === "Success" ? end(entry.queue) : failCause$3(entry.queue, message.exit.cause)));
 			}
 			case "Defect": return clearEntries(die$1(message.defect));
 			case "ClientEnd": return void_$1;
@@ -49398,7 +49427,7 @@ let clientIdCounter = 0;
 * @category constructors
 * @since 4.0.0
 */
-const make$14 = /*#__PURE__*/ fnUntraced(function* (group, options) {
+const make$17 = /*#__PURE__*/ fnUntraced(function* (group, options) {
 	const clientId = clientIdCounter++;
 	const { run, send, supportsAck, supportsTransferables } = yield* Protocol$1;
 	const entries = /* @__PURE__ */ new Map();
@@ -49543,6 +49572,11 @@ var Protocol$1 = class extends Service$2()("effect/rpc/RpcClient/Protocol") {
 	*/
 	static make = withRunClient;
 };
+/**
+* @since 4.0.0
+* @category RequestHooks
+*/
+var RequestHooks = class extends Service$2()("effect/rpc/RpcClient/RequestHooks") {};
 Service$2()("effect/rpc/RpcClient/ConnectionHooks");
 const decodeDefect = /*#__PURE__*/ decodeSync(/*#__PURE__*/ Defect());
 //#endregion
@@ -49565,7 +49599,7 @@ const makeNoSerialization = /*#__PURE__*/ fnUntraced(function* (group, options)
 	const services = yield* context();
 	const scope = get$5(services, Scope);
 	const trackFiber = runIn(forkUnsafe(scope, "parallel"));
-	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* make$72(concurrency);
+	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* make$75(concurrency);
 	const clients = /* @__PURE__ */ new Map();
 	let isShutdown = false;
 	const shutdownLatch = makeUnsafe$7(false);
@@ -49801,10 +49835,10 @@ const applyMiddleware = (context, handler, options) => {
 * @category running
 * @since 4.0.0
 */
-const make$13 = /*#__PURE__*/ fnUntraced(function* (group, options) {
+const make$16 = /*#__PURE__*/ fnUntraced(function* (group, options) {
 	const { disconnects, end, run, send, supportsAck, supportsSpanPropagation, supportsTransferables } = yield* Protocol;
 	const services = yield* context();
-	const scope = yield* make$73();
+	const scope = yield* make$76();
 	const server = yield* makeNoSerialization(group, {
 		...options,
 		disableClientAcks: !supportsAck,
@@ -49992,12 +50026,12 @@ const makeProtocolWithHttpEffectWebsocket = /*#__PURE__*/ gen(function* () {
 */
 const toHttpEffectWebsocket = /*#__PURE__*/ fnUntraced(function* (group, options) {
 	const { httpEffect, protocol } = yield* makeProtocolWithHttpEffectWebsocket;
-	yield* make$13(group, options).pipe(provideService(Protocol, protocol), forkScoped);
+	yield* make$16(group, options).pipe(provideService(Protocol, protocol), forkScoped);
 	return httpEffect;
 });
 const makeSocketProtocol = /*#__PURE__*/ gen(function* () {
 	const serialization = yield* RpcSerialization;
-	const disconnects = yield* make$75();
+	const disconnects = yield* make$78();
 	let clientId = 0;
 	const clients = /* @__PURE__ */ new Map();
 	const clientIds = /* @__PURE__ */ new Set();
@@ -50072,8 +50106,8 @@ var ProviderRegistry = class extends Service$2()("t3/provider/Services/ProviderR
 //#endregion
 //#region src/provider/providerMaintenanceCommandCoordinator.ts
 const makeProviderMaintenanceCommandCoordinator = fn("makeProviderMaintenanceCommandCoordinator")(function* (input) {
-	const runningTargetsRef = yield* make$60(/* @__PURE__ */ new Set());
-	const locksRef = yield* make$60(/* @__PURE__ */ new Map());
+	const runningTargetsRef = yield* make$63(/* @__PURE__ */ new Set());
+	const locksRef = yield* make$63(/* @__PURE__ */ new Map());
 	const acquireTarget = fn("acquireTarget")(function* (targetKey) {
 		return yield* modify$2(runningTargetsRef, (runningTargets) => {
 			if (runningTargets.has(targetKey)) return [false, runningTargets];
@@ -50090,7 +50124,7 @@ const makeProviderMaintenanceCommandCoordinator = fn("makeProviderMaintenanceCom
 	const getLock = fn("getProviderMaintenanceCommandLock")(function* (lockKey) {
 		const existing = (yield* get$3(locksRef)).get(lockKey);
 		if (existing) return existing;
-		const lock = yield* make$72(1);
+		const lock = yield* make$75(1);
 		return yield* modify$2(locksRef, (locks) => {
 			const current = locks.get(lockKey);
 			if (current) return [current, locks];
@@ -50416,11 +50450,11 @@ const resolveLatestProviderVersion = fn("resolveLatestProviderVersion")(function
 	if (!packageName) return null;
 	const latestVersionCache = yield* ProviderVersionCache;
 	const cached = latestVersionCache.get(packageName);
-	const now$2 = toEpochMillis(yield* now);
-	if (cached && cached.expiresAt > now$2) return cached.version;
+	const now = toEpochMillis(yield* now$1);
+	if (cached && cached.expiresAt > now) return cached.version;
 	const version = yield* fetchNpmLatestVersion(packageName);
 	latestVersionCache.set(packageName, {
-		expiresAt: now$2 + LATEST_VERSION_CACHE_TTL_MS,
+		expiresAt: now + LATEST_VERSION_CACHE_TTL_MS,
 		version
 	});
 	return version;
@@ -50443,7 +50477,7 @@ const enrichProviderSnapshotWithVersionAdvisory = fn("enrichProviderSnapshotWith
 			driver: snapshot.driver,
 			currentVersion: snapshot.version,
 			latestVersion,
-			checkedAt: formatIso(yield* now),
+			checkedAt: formatIso(yield* now$1),
 			maintenanceCapabilities: capabilities
 		})
 	};
@@ -50455,11 +50489,11 @@ const UPDATE_TIMEOUT_MS = 5 * 6e4;
 const UPDATE_OUTPUT_MAX_BYTES = 1e4;
 var ProviderMaintenanceRunner = class extends Service$2()("t3/provider/providerMaintenanceRunner") {};
 var ProviderMaintenanceCommandError = class extends TaggedError("ProviderMaintenanceCommandError") {};
-const nowIso$3 = map$4(now, formatIso);
+const nowIso$3 = map$4(now$1, formatIso);
 const runProviderMaintenanceCommandWithSpawner = fn("ProviderMaintenanceRunner.runCommand")(function* (input) {
 	return yield* fn("ProviderMaintenanceRunner.collectCommandResult")(function* () {
 		const resolved = yield* resolveSpawnCommand(input.command, input.args);
-		const child = yield* input.spawner.spawn(make$76(resolved.command, resolved.args, { shell: resolved.shell })).pipe(mapError((cause) => new ProviderMaintenanceCommandError({
+		const child = yield* input.spawner.spawn(make$79(resolved.command, resolved.args, { shell: resolved.shell })).pipe(mapError((cause) => new ProviderMaintenanceCommandError({
 			message: `Failed to run update command ${input.command}: ${cause.message}`,
 			cause
 		})));
@@ -50527,7 +50561,7 @@ function makeUpdateState(input) {
 		output: input.output ?? null
 	};
 }
-const layer$8 = effect(ProviderMaintenanceRunner, fn("ProviderMaintenanceRunner.make")(function* () {
+const layer$11 = effect(ProviderMaintenanceRunner, fn("ProviderMaintenanceRunner.make")(function* () {
 	const providerRegistry = yield* ProviderRegistry;
 	const spawner = yield* ChildProcessSpawner;
 	const httpClient = yield* HttpClient;
@@ -50587,7 +50621,7 @@ const layer$8 = effect(ProviderMaintenanceRunner, fn("ProviderMaintenanceRunner.
 		})).pipe(asVoid);
 		const runProviderUpdate = fn("ProviderMaintenanceRunner.runProviderUpdate")(function* () {
 			const finish = (state) => setUpdateState(state).pipe(map$4((providers) => ({ providers })));
-			const startedAtRef = yield* make$60(null);
+			const startedAtRef = yield* make$63(null);
 			const runCommandAndVerify = fn("ProviderMaintenanceRunner.runCommandAndVerify")(function* () {
 				const startedAt = yield* nowIso$3;
 				yield* set$2(startedAtRef, startedAt);
@@ -50827,7 +50861,7 @@ const canonicalizeClientCommandTimestamps = (command, receivedAt) => {
 	};
 };
 const normalizeDispatchCommand = (command) => gen(function* () {
-	const receivedAt = formatIso(yield* now);
+	const receivedAt = formatIso(yield* now$1);
 	const canonicalCommand = canonicalizeClientCommandTimestamps(command, receivedAt);
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path;
@@ -51159,7 +51193,7 @@ const waitForIndexReady = fn("WorkspaceSearchIndex.waitForIndexReady")(function*
 		timeout: WORKSPACE_INDEX_SCAN_TIMEOUT
 	});
 });
-const make$11 = fn("WorkspaceSearchIndex.make")(function* (cwd, variant = "paths") {
+const make$14 = fn("WorkspaceSearchIndex.make")(function* (cwd, variant = "paths") {
 	const finder = yield* acquireRelease(createFinder(cwd, variant), (finder) => try_({
 		try: () => finder.destroy(),
 		catch: (cause) => new WorkspaceSearchIndexDestroyFailed({
@@ -51288,12 +51322,12 @@ function parseWorkspaceSearchIndexKey(key) {
 * idle cleanup; using a default cwd here would mix resources from different
 * workspaces.
 */
-const layer$7 = (key) => {
+const layer$10 = (key) => {
 	const { cwd, variant } = parseWorkspaceSearchIndexKey(key);
-	return effect(WorkspaceSearchIndex, make$11(cwd, variant));
+	return effect(WorkspaceSearchIndex, make$14(cwd, variant));
 };
 var WorkspaceSearchIndexMap = class extends Service()("t3/workspace/WorkspaceSearchIndexMap", {
-	lookup: layer$7,
+	lookup: layer$10,
 	idleTimeToLive: WORKSPACE_INDEX_IDLE_TTL
 }) {};
 //#endregion
@@ -51355,7 +51389,7 @@ const resolveBrowseTarget = fn("WorkspaceEntries.resolveBrowseTarget")(function*
 	if (!input.cwd) return yield* new WorkspaceEntriesCurrentProjectRequiredError({ partialPath: input.partialPath });
 	return path.resolve(expandHomePath$1(input.cwd, path), input.partialPath);
 });
-const layer$6 = effect(WorkspaceEntries, gen(function* () {
+const layer$9 = effect(WorkspaceEntries, gen(function* () {
 	const path = yield* Path;
 	const workspacePaths = yield* WorkspacePaths;
 	const workspaceSearchIndexes = yield* WorkspaceSearchIndexMap;
@@ -51508,7 +51542,7 @@ Union([
 ]);
 /** Service tag for workspace file operations. */
 var WorkspaceFileSystem = class extends Service$2()("t3/workspace/WorkspaceFileSystem") {};
-const layer$5 = effect(WorkspaceFileSystem, gen(function* () {
+const layer$8 = effect(WorkspaceFileSystem, gen(function* () {
 	const fileSystem = yield* FileSystem;
 	const path = yield* Path;
 	const workspacePaths = yield* WorkspacePaths;
@@ -51641,6 +51675,605 @@ const layer$5 = effect(WorkspaceFileSystem, gen(function* () {
 	});
 }));
 //#endregion
+//#region src/workspace/GitWorkspace.ts
+const EMPTY_WORKING_TREE = {
+	files: [],
+	insertions: 0,
+	deletions: 0
+};
+function parseGitStatus(output) {
+	const records = output.split("\0").filter(Boolean);
+	const branchRecord = records[0]?.startsWith("## ") ? records.shift().slice(3) : "";
+	let refName = null;
+	if (branchRecord.startsWith("No commits yet on ")) refName = branchRecord.slice(18).trim() || null;
+	else if (!branchRecord.startsWith("HEAD ")) refName = branchRecord.split("...")[0]?.trim() || null;
+	const aheadCount = Number(/ahead (\d+)/.exec(branchRecord)?.[1] ?? 0);
+	const behindCount = Number(/behind (\d+)/.exec(branchRecord)?.[1] ?? 0);
+	const files = [];
+	for (let index = 0; index < records.length; index += 1) {
+		const record = records[index];
+		const path = record.length > 3 ? record.slice(3) : "";
+		if (path) files.push(path);
+		if (record[0] === "R" || record[1] === "R") index += 1;
+	}
+	return {
+		refName,
+		hasUpstream: branchRecord.includes("..."),
+		aheadCount,
+		behindCount,
+		files
+	};
+}
+function parseGitRefs(output, refKind, query = "", currentRef = null) {
+	const normalizedQuery = query.toLowerCase();
+	return output.split("\n").filter(Boolean).flatMap((line) => {
+		const [fullName = "", name = "", head = "", worktreePath = ""] = line.split("	");
+		if (!name || fullName.endsWith("/HEAD") || !name.toLowerCase().includes(normalizedQuery)) return [];
+		const isRemote = fullName.startsWith("refs/remotes/");
+		if (refKind === "local" && isRemote) return [];
+		if (refKind === "remote" && !isRemote) return [];
+		const firstSlash = name.indexOf("/");
+		return [{
+			name,
+			...isRemote ? {
+				isRemote: true,
+				remoteName: name.slice(0, firstSlash)
+			} : {},
+			current: head.trim() === "*" || name === currentRef,
+			isDefault: false,
+			worktreePath: worktreePath || null
+		}];
+	});
+}
+var GitWorkspace = class extends Service$2()("agentlink/workspace/GitWorkspace") {};
+const layer$7 = effect(GitWorkspace, gen(function* () {
+	const runner = yield* ProcessRunner;
+	const run = fn("GitWorkspace.run")(function* (cwd, operation, args, allowFailure = false) {
+		const result = yield* runner.run({
+			command: "git",
+			args,
+			cwd,
+			timeout: "15 seconds",
+			maxOutputBytes: 2 * 1024 * 1024,
+			outputMode: "truncate"
+		}).pipe(mapError((cause) => new GitCommandError({
+			operation,
+			command: "git",
+			cwd,
+			argumentCount: args.length,
+			detail: cause.message,
+			cause
+		})));
+		if (!allowFailure && result.code !== 0) return yield* new GitCommandError({
+			operation,
+			command: "git",
+			cwd,
+			argumentCount: args.length,
+			exitCode: result.code ?? void 0,
+			stdoutLength: result.stdout.length,
+			stderrLength: result.stderr.length,
+			outputLength: result.stdout.length + result.stderr.length,
+			detail: result.stderr.trim() || result.stdout.trim() || "Git command failed."
+		});
+		return result;
+	});
+	const status = fn("GitWorkspace.status")(function* (cwd) {
+		const repository = yield* run(cwd, "status.detect", ["rev-parse", "--is-inside-work-tree"], true);
+		if (repository.code !== 0 || repository.stdout.trim() !== "true") return {
+			isRepo: false,
+			hasPrimaryRemote: false,
+			isDefaultRef: false,
+			refName: null,
+			hasWorkingTreeChanges: false,
+			workingTree: EMPTY_WORKING_TREE,
+			hasUpstream: false,
+			aheadCount: 0,
+			behindCount: 0,
+			aheadOfDefaultCount: 0,
+			pr: null
+		};
+		const parsed = parseGitStatus((yield* run(cwd, "status", [
+			"status",
+			"--porcelain=v1",
+			"-z",
+			"--branch",
+			"--untracked-files=normal"
+		])).stdout);
+		const [origin, defaultRef] = yield* all([run(cwd, "remote.origin", [
+			"remote",
+			"get-url",
+			"origin"
+		], true), run(cwd, "remote.default", [
+			"symbolic-ref",
+			"refs/remotes/origin/HEAD",
+			"--short"
+		], true)]);
+		return {
+			isRepo: true,
+			hasPrimaryRemote: origin.code === 0,
+			isDefaultRef: defaultRef.code === 0 && defaultRef.stdout.trim().replace(/^origin\//, "") === parsed.refName,
+			refName: parsed.refName,
+			hasWorkingTreeChanges: parsed.files.length > 0,
+			workingTree: {
+				files: parsed.files.map((path) => ({
+					path,
+					insertions: 0,
+					deletions: 0
+				})),
+				insertions: 0,
+				deletions: 0
+			},
+			hasUpstream: parsed.hasUpstream,
+			aheadCount: parsed.aheadCount,
+			behindCount: parsed.behindCount,
+			aheadOfDefaultCount: 0,
+			pr: null
+		};
+	});
+	const listRefs = fn("GitWorkspace.listRefs")(function* (input) {
+		const currentStatus = yield* status(input.cwd);
+		if (!currentStatus.isRepo) return {
+			refs: [],
+			isRepo: false,
+			hasPrimaryRemote: false,
+			nextCursor: null,
+			totalCount: 0
+		};
+		const refs = parseGitRefs((yield* run(input.cwd, "refs.list", [
+			"for-each-ref",
+			"--format=%(refname)	%(refname:short)	%(HEAD)	%(worktreepath)",
+			"refs/heads",
+			"refs/remotes"
+		])).stdout, input.refKind, input.query ?? "", currentStatus.refName);
+		const cursor = input.cursor ?? 0;
+		const limit = input.limit ?? 100;
+		const page = refs.slice(cursor, cursor + limit);
+		return {
+			refs: page,
+			isRepo: true,
+			hasPrimaryRemote: currentStatus.hasPrimaryRemote,
+			nextCursor: cursor + page.length < refs.length ? cursor + page.length : null,
+			totalCount: refs.length
+		};
+	});
+	const switchRef = fn("GitWorkspace.switchRef")(function* (input) {
+		yield* run(input.cwd, "refs.switch", ["switch", input.refName]);
+		return { refName: (yield* status(input.cwd)).refName };
+	});
+	return GitWorkspace.of({
+		status,
+		statusStream: (cwd) => fromEffectSchedule(status(cwd), spaced("3 seconds")).pipe(map$8((value) => ({
+			_tag: "snapshot",
+			local: {
+				isRepo: value.isRepo,
+				hasPrimaryRemote: value.hasPrimaryRemote,
+				isDefaultRef: value.isDefaultRef,
+				refName: value.refName,
+				hasWorkingTreeChanges: value.hasWorkingTreeChanges,
+				workingTree: value.workingTree
+			},
+			remote: value.isRepo ? {
+				hasUpstream: value.hasUpstream,
+				aheadCount: value.aheadCount,
+				behindCount: value.behindCount,
+				aheadOfDefaultCount: value.aheadOfDefaultCount,
+				pr: value.pr
+			} : null
+		}))),
+		listRefs,
+		switchRef
+	});
+})).pipe(provide(layer$30));
+//#endregion
+//#region src/terminal/PtyAdapter.ts
+/**
+* PtyAdapter - Terminal PTY adapter service contract.
+*
+* Defines the process primitives required by terminal session management
+* without binding to a specific PTY implementation.
+*
+* @module PtyAdapter
+*/
+/**
+* PtySpawnError - Error type for PTY spawn failures.
+*/
+var PtySpawnError = class extends TaggedErrorClass()("PtySpawnError", {
+	adapter: String$1,
+	shell: optional$3(String$1),
+	attemptedShells: optional$3(ArraySchema(String$1)),
+	cause: optional$3(Defect())
+}) {
+	get message() {
+		const shell = this.shell === void 0 ? "" : ` '${this.shell}'`;
+		const attemptedShells = this.attemptedShells === void 0 || this.attemptedShells.length === 0 ? "" : ` Tried shells: ${this.attemptedShells.join(", ")}.`;
+		return `Failed to spawn PTY process${shell} with ${this.adapter}.${attemptedShells}`;
+	}
+};
+/**
+* PtyAdapter - Service tag for PTY process integration.
+*/
+var PtyAdapter = class extends Service$2()("t3/terminal/PtyAdapter") {};
+//#endregion
+//#region src/terminal/Manager.ts
+const DEFAULT_COLS = 120;
+const DEFAULT_ROWS = 30;
+var TerminalManager = class extends Service$2()("agentlink/terminal/TerminalManager") {};
+function sessionKey(threadId, terminalId) {
+	return `${threadId}\0${terminalId}`;
+}
+function now() {
+	return (/* @__PURE__ */ new Date()).toISOString();
+}
+function label(session) {
+	return session.status === "running" ? "Terminal" : "Terminal (stopped)";
+}
+function snapshot(session) {
+	return {
+		threadId: session.threadId,
+		terminalId: session.terminalId,
+		cwd: session.cwd,
+		worktreePath: session.worktreePath,
+		status: session.status,
+		pid: session.process?.pid ?? null,
+		history: session.history,
+		exitCode: session.exitCode,
+		exitSignal: session.exitSignal,
+		label: label(session),
+		updatedAt: session.updatedAt,
+		sequence: session.sequence
+	};
+}
+function summary(session) {
+	return {
+		threadId: session.threadId,
+		terminalId: session.terminalId,
+		cwd: session.cwd,
+		worktreePath: session.worktreePath,
+		status: session.status,
+		pid: session.process?.pid ?? null,
+		exitCode: session.exitCode,
+		exitSignal: session.exitSignal,
+		hasRunningSubprocess: false,
+		label: label(session),
+		updatedAt: session.updatedAt
+	};
+}
+function validateCwd(cwd) {
+	return tryPromise({
+		try: () => NodeFSP.stat(cwd),
+		catch: (cause) => {
+			return cause.code === "ENOENT" ? new TerminalCwdNotFoundError({ cwd }) : new TerminalCwdStatError({
+				cwd,
+				cause
+			});
+		}
+	}).pipe(flatMap$1((stat) => stat.isDirectory() ? void_$1 : new TerminalCwdNotDirectoryError({ cwd })));
+}
+const layer$6 = effect(TerminalManager, gen(function* () {
+	const pty = yield* PtyAdapter;
+	const runFork = runForkWith(yield* context());
+	const sessions = /* @__PURE__ */ new Map();
+	const eventListeners = /* @__PURE__ */ new Set();
+	const metadataListeners = /* @__PURE__ */ new Set();
+	const attachListeners = /* @__PURE__ */ new Map();
+	const publish = (event) => {
+		if (eventListeners.size > 0) runFork(forEach(eventListeners, (listener) => listener(event), { discard: true }));
+		if (event.type !== "started") {
+			const listeners = attachListeners.get(sessionKey(event.threadId, event.terminalId));
+			if (listeners && listeners.size > 0) runFork(forEach(listeners, (listener) => listener(event), { discard: true }));
+		}
+	};
+	const publishMetadata = (event) => {
+		if (metadataListeners.size > 0) runFork(forEach(metadataListeners, (listener) => listener(event), { discard: true }));
+	};
+	const touch = (session) => {
+		session.updatedAt = now();
+		session.sequence += 1;
+	};
+	const stop = (session) => {
+		session.unsubscribeData?.();
+		session.unsubscribeExit?.();
+		session.unsubscribeData = null;
+		session.unsubscribeExit = null;
+		if (session.process) {
+			try {
+				session.process.kill();
+			} catch {}
+			session.process = null;
+		}
+	};
+	const spawn = fn("TerminalManager.spawn")(function* (session) {
+		session.status = "starting";
+		session.exitCode = null;
+		session.exitSignal = null;
+		touch(session);
+		const candidates = [
+			process.env.SHELL,
+			process.platform === "win32" ? process.env.ComSpec : void 0,
+			process.platform === "win32" ? "powershell.exe" : "/bin/zsh",
+			process.platform === "win32" ? "cmd.exe" : "/bin/bash",
+			process.platform === "win32" ? void 0 : "/bin/sh"
+		].filter((candidate) => Boolean(candidate));
+		let lastError = null;
+		let child = null;
+		for (const shell of [...new Set(candidates)]) {
+			const result$1 = yield* result(pty.spawn({
+				shell,
+				cwd: session.cwd,
+				cols: session.cols,
+				rows: session.rows,
+				env: {
+					...process.env,
+					...session.env,
+					TERM: "xterm-256color"
+				}
+			}));
+			if (result$1._tag === "Success") {
+				child = result$1.success;
+				break;
+			}
+			lastError = result$1.failure;
+		}
+		if (!child) {
+			session.status = "error";
+			touch(session);
+			publish({
+				type: "error",
+				threadId: session.threadId,
+				terminalId: session.terminalId,
+				sequence: session.sequence,
+				message: lastError instanceof Error ? lastError.message : "Could not start terminal."
+			});
+			publishMetadata({
+				type: "upsert",
+				terminal: summary(session)
+			});
+			return;
+		}
+		session.process = child;
+		session.status = "running";
+		touch(session);
+		const childPid = child.pid;
+		session.unsubscribeData = child.onData((data) => {
+			if (session.process?.pid !== childPid) return;
+			session.history = `${session.history}${data}`.slice(-524288);
+			touch(session);
+			publish({
+				type: "output",
+				threadId: session.threadId,
+				terminalId: session.terminalId,
+				sequence: session.sequence,
+				data
+			});
+		});
+		session.unsubscribeExit = child.onExit((event) => {
+			if (session.process?.pid !== childPid) return;
+			session.unsubscribeData?.();
+			session.unsubscribeData = null;
+			session.unsubscribeExit = null;
+			session.process = null;
+			session.status = "exited";
+			session.exitCode = event.exitCode;
+			session.exitSignal = event.signal;
+			touch(session);
+			publish({
+				type: "exited",
+				threadId: session.threadId,
+				terminalId: session.terminalId,
+				sequence: session.sequence,
+				exitCode: event.exitCode,
+				exitSignal: event.signal
+			});
+			publishMetadata({
+				type: "upsert",
+				terminal: summary(session)
+			});
+		});
+		publish({
+			type: "started",
+			threadId: session.threadId,
+			terminalId: session.terminalId,
+			sequence: session.sequence,
+			snapshot: snapshot(session)
+		});
+		publishMetadata({
+			type: "upsert",
+			terminal: summary(session)
+		});
+	});
+	const get = (threadId, terminalId) => sessions.get(sessionKey(threadId, terminalId));
+	const open = fn("TerminalManager.open")(function* (input) {
+		const existing = get(input.threadId, input.terminalId);
+		if (existing) return snapshot(existing);
+		yield* validateCwd(input.cwd);
+		const session = {
+			threadId: input.threadId,
+			terminalId: input.terminalId,
+			cwd: input.cwd,
+			worktreePath: input.worktreePath ?? null,
+			status: "starting",
+			process: null,
+			history: "",
+			exitCode: null,
+			exitSignal: null,
+			updatedAt: now(),
+			sequence: 0,
+			cols: input.cols ?? DEFAULT_COLS,
+			rows: input.rows ?? DEFAULT_ROWS,
+			env: input.env,
+			unsubscribeData: null,
+			unsubscribeExit: null
+		};
+		sessions.set(sessionKey(input.threadId, input.terminalId), session);
+		yield* spawn(session);
+		return snapshot(session);
+	});
+	const restart = fn("TerminalManager.restart")(function* (input) {
+		yield* validateCwd(input.cwd);
+		const session = get(input.threadId, input.terminalId);
+		if (!session) return yield* new TerminalSessionLookupError({
+			threadId: input.threadId,
+			terminalId: input.terminalId
+		});
+		stop(session);
+		session.cwd = input.cwd;
+		session.worktreePath = input.worktreePath ?? null;
+		session.cols = input.cols;
+		session.rows = input.rows;
+		session.env = input.env;
+		session.history = "";
+		yield* spawn(session);
+		publish({
+			type: "restarted",
+			threadId: session.threadId,
+			terminalId: session.terminalId,
+			sequence: session.sequence,
+			snapshot: snapshot(session)
+		});
+		return snapshot(session);
+	});
+	const attachStream = fn("TerminalManager.attachStream")(function* (input, listener) {
+		let session = get(input.threadId, input.terminalId);
+		if (!session && input.cwd) {
+			yield* open({
+				threadId: input.threadId,
+				terminalId: input.terminalId,
+				cwd: input.cwd,
+				worktreePath: input.worktreePath ?? null,
+				cols: input.cols,
+				rows: input.rows,
+				env: input.env
+			});
+			session = get(input.threadId, input.terminalId);
+		}
+		if (!session) return yield* new TerminalSessionLookupError({
+			threadId: input.threadId,
+			terminalId: input.terminalId
+		});
+		if (input.restartIfNotRunning && session.status !== "running" && input.cwd) yield* restart({
+			threadId: input.threadId,
+			terminalId: input.terminalId,
+			cwd: input.cwd,
+			worktreePath: input.worktreePath ?? null,
+			cols: input.cols ?? session.cols,
+			rows: input.rows ?? session.rows,
+			env: input.env
+		});
+		yield* listener({
+			type: "snapshot",
+			snapshot: snapshot(session)
+		});
+		const key = sessionKey(input.threadId, input.terminalId);
+		const listeners = attachListeners.get(key) ?? /* @__PURE__ */ new Set();
+		listeners.add(listener);
+		attachListeners.set(key, listeners);
+		return () => {
+			listeners.delete(listener);
+			if (listeners.size === 0) attachListeners.delete(key);
+		};
+	});
+	const write = (input) => gen(function* () {
+		const session = get(input.threadId, input.terminalId);
+		if (!session) return yield* new TerminalSessionLookupError({
+			threadId: input.threadId,
+			terminalId: input.terminalId
+		});
+		if (!session.process || session.status !== "running") return yield* new TerminalNotRunningError({
+			threadId: input.threadId,
+			terminalId: input.terminalId
+		});
+		yield* try_({
+			try: () => session.process.write(input.data),
+			catch: (cause) => new TerminalWriteError({
+				threadId: input.threadId,
+				terminalId: input.terminalId,
+				terminalPid: session.process.pid,
+				cause
+			})
+		});
+	});
+	const resize = (input) => gen(function* () {
+		const session = get(input.threadId, input.terminalId);
+		if (!session) return yield* new TerminalSessionLookupError({
+			threadId: input.threadId,
+			terminalId: input.terminalId
+		});
+		if (!session.process || session.status !== "running") return yield* new TerminalNotRunningError({
+			threadId: input.threadId,
+			terminalId: input.terminalId
+		});
+		yield* try_({
+			try: () => session.process.resize(input.cols, input.rows),
+			catch: (cause) => new TerminalResizeError({
+				threadId: input.threadId,
+				terminalId: input.terminalId,
+				terminalPid: session.process.pid,
+				cols: input.cols,
+				rows: input.rows,
+				cause
+			})
+		});
+		session.cols = input.cols;
+		session.rows = input.rows;
+	});
+	const clear = (input) => gen(function* () {
+		const session = get(input.threadId, input.terminalId);
+		if (!session) return yield* new TerminalSessionLookupError({
+			threadId: input.threadId,
+			terminalId: input.terminalId
+		});
+		session.history = "";
+		touch(session);
+		publish({
+			type: "cleared",
+			threadId: session.threadId,
+			terminalId: session.terminalId,
+			sequence: session.sequence
+		});
+	});
+	const close = (input) => sync(() => {
+		const targets = [...sessions.values()].filter((session) => session.threadId === input.threadId && (input.terminalId === void 0 || session.terminalId === input.terminalId));
+		for (const session of targets) {
+			stop(session);
+			sessions.delete(sessionKey(session.threadId, session.terminalId));
+			attachListeners.delete(sessionKey(session.threadId, session.terminalId));
+			touch(session);
+			publish({
+				type: "closed",
+				threadId: session.threadId,
+				terminalId: session.terminalId,
+				sequence: session.sequence
+			});
+			publishMetadata({
+				type: "remove",
+				threadId: session.threadId,
+				terminalId: session.terminalId
+			});
+		}
+	});
+	return TerminalManager.of({
+		open,
+		attachStream,
+		write,
+		resize,
+		clear,
+		restart,
+		close,
+		subscribe: (listener) => sync(() => {
+			eventListeners.add(listener);
+			return () => eventListeners.delete(listener);
+		}),
+		subscribeMetadata: (listener) => gen(function* () {
+			yield* listener({
+				type: "snapshot",
+				terminals: [...sessions.values()].map(summary)
+			});
+			metadataListeners.add(listener);
+			return () => metadataListeners.delete(listener);
+		})
+	});
+}));
+//#endregion
 //#region src/auth/RpcAuthorization.ts
 /**
 * Keep authorization coverage coupled to the RPC group itself. Adding an RPC to
@@ -51739,7 +52372,7 @@ function requiredScopeForRpcMethod(method) {
 //#endregion
 //#region src/ws.ts
 const isOrchestrationDispatchCommandError = is(OrchestrationDispatchCommandError);
-const nowIso$2 = map$4(now, formatIso);
+const nowIso$2 = map$4(now$1, formatIso);
 const EDITOR_DISCOVERY_TIMEOUT = seconds(5);
 const resolveAvailableEditorsForConfig = (discovery) => discovery.pipe(timeoutOption(EDITOR_DISCOVERY_TIMEOUT), map$4(getOrElse(() => [])));
 function unexpectedCompatibilityError(error) {
@@ -51870,11 +52503,7 @@ const UNSUPPORTED_STREAM_METHODS = /* @__PURE__ */ new Set([
 	WS_METHODS.serverUpdateServerWithProgress,
 	WS_METHODS.subscribeDiscoveredLocalServers,
 	WS_METHODS.subscribePreviewEvents,
-	WS_METHODS.subscribeResourceTelemetry,
-	WS_METHODS.subscribeTerminalEvents,
-	WS_METHODS.subscribeTerminalMetadata,
-	WS_METHODS.subscribeVcsStatus,
-	WS_METHODS.terminalAttach
+	WS_METHODS.subscribeResourceTelemetry
 ]);
 /**
 * Generic stub value: each usage below reads `unsupportedRpc<Tag>` with an
@@ -51898,6 +52527,8 @@ const wsRpcServices = gen(function* () {
 		startup: yield* ServerRuntimeStartup,
 		workspaceEntries: yield* WorkspaceEntries,
 		workspaceFileSystem: yield* WorkspaceFileSystem,
+		gitWorkspace: yield* GitWorkspace,
+		terminalManager: yield* TerminalManager,
 		serverEnvironment: yield* ServerEnvironment,
 		backgroundPolicy: yield* BackgroundPolicy,
 		serverAuth: yield* EnvironmentAuth,
@@ -51907,9 +52538,9 @@ const wsRpcServices = gen(function* () {
 });
 const makeWsRpcLayer = (currentSession) => WsRpcGroup.toLayer(gen(function* () {
 	const currentSessionId = currentSession.sessionId;
-	const { crypto, projectionSnapshotQuery, orchestrationEngine, keybindings, externalLauncher, providerRegistry, config, lifecycleEvents, serverSettings, startup, workspaceEntries, workspaceFileSystem, serverEnvironment, backgroundPolicy, serverAuth, bootstrapCredentials, sessions } = yield* wsRpcServices;
+	const { crypto, projectionSnapshotQuery, orchestrationEngine, keybindings, externalLauncher, providerRegistry, config, lifecycleEvents, serverSettings, startup, workspaceEntries, workspaceFileSystem, gitWorkspace, terminalManager, serverEnvironment, backgroundPolicy, serverAuth, bootstrapCredentials, sessions } = yield* wsRpcServices;
 	const providerMaintenanceRunner = yield* ProviderMaintenanceRunner;
-	const rpcClientIds = yield* make$60(/* @__PURE__ */ new Set());
+	const rpcClientIds = yield* make$63(/* @__PURE__ */ new Set());
 	yield* addFinalizer(() => get$3(rpcClientIds).pipe(flatMap$1((clientIds) => forEach(clientIds, (clientId) => backgroundPolicy.removeRpcClient(currentSessionId, clientId), { discard: true })), ignore$1));
 	const authorizationError = (requiredScope) => new EnvironmentAuthorizationError({
 		message: `The authenticated token is missing required scope: ${requiredScope}.`,
@@ -52124,7 +52755,7 @@ const makeWsRpcLayer = (currentSession) => WsRpcGroup.toLayer(gen(function* () {
 			if (input.afterSequence !== void 0) {
 				const afterSequence = input.afterSequence;
 				const replayGap = (yield* orchestrationEngine.latestSequence) - afterSequence;
-				if (replayGap < 0 || replayGap > SHELL_RESUME_MAX_GAP) return concat(make$71({
+				if (replayGap < 0 || replayGap > SHELL_RESUME_MAX_GAP) return concat(make$74({
 					kind: "snapshot",
 					snapshot: yield* loadSnapshot
 				}), synchronizedThenLive);
@@ -52133,7 +52764,7 @@ const makeWsRpcLayer = (currentSession) => WsRpcGroup.toLayer(gen(function* () {
 					cause
 				}))), synchronizedThenLive);
 			}
-			return concat(make$71({
+			return concat(make$74({
 				kind: "snapshot",
 				snapshot: yield* loadSnapshot
 			}), synchronizedThenLive);
@@ -52171,7 +52802,7 @@ const makeWsRpcLayer = (currentSession) => WsRpcGroup.toLayer(gen(function* () {
 				cause: input.threadId
 			});
 			const afterSnapshot = input.requestCompletionMarker === true ? concat(fromEffect(offer$1(liveBuffer, { kind: "synchronized" })).pipe(drain), bufferedLiveStream) : bufferedLiveStream;
-			return concat(make$71({
+			return concat(make$74({
 				kind: "snapshot",
 				snapshot: projectThreadDetailSnapshot(snapshot.value)
 			}), afterSnapshot);
@@ -52275,7 +52906,7 @@ const makeWsRpcLayer = (currentSession) => WsRpcGroup.toLayer(gen(function* () {
 			})));
 			yield* providerRegistry.refresh().pipe(ignoreCause({ log: true }), forkScoped);
 			const liveUpdates = merge$2(keybindingsUpdates, merge$2(providerStatuses, settingsUpdates));
-			return concat(make$71({
+			return concat(make$74({
 				version: 1,
 				type: "snapshot",
 				config: yield* loadServerConfig
@@ -52289,9 +52920,9 @@ const makeWsRpcLayer = (currentSession) => WsRpcGroup.toLayer(gen(function* () {
 		}), { "rpc.aggregate": "server" }),
 		[WS_METHODS.subscribeAuthAccess]: (_input) => observeRpcStreamEffect$1(WS_METHODS.subscribeAuthAccess, gen(function* () {
 			const initialSnapshot = yield* loadAuthAccessSnapshot();
-			const revisionRef = yield* make$60(1);
+			const revisionRef = yield* make$63(1);
 			const liveEvents = merge$2(bootstrapCredentials.streamChanges, sessions.streamChanges).pipe(mapEffect$1((change) => updateAndGet(revisionRef, (revision) => revision + 1).pipe(map$4((revision) => toAuthAccessStreamEvent(change, revision, currentSessionId)))));
-			return concat(make$71({
+			return concat(make$74({
 				version: 1,
 				revision: 1,
 				type: "snapshot",
@@ -52330,28 +52961,28 @@ const makeWsRpcLayer = (currentSession) => WsRpcGroup.toLayer(gen(function* () {
 		[WS_METHODS.subscribeDiscoveredLocalServers]: unsupportedRpc,
 		[WS_METHODS.subscribePreviewEvents]: unsupportedRpc,
 		[WS_METHODS.subscribeResourceTelemetry]: unsupportedRpc,
-		[WS_METHODS.subscribeTerminalEvents]: unsupportedRpc,
-		[WS_METHODS.subscribeTerminalMetadata]: unsupportedRpc,
-		[WS_METHODS.subscribeVcsStatus]: unsupportedRpc,
-		[WS_METHODS.terminalAttach]: unsupportedRpc,
-		[WS_METHODS.terminalClear]: unsupportedRpc,
-		[WS_METHODS.terminalClose]: unsupportedRpc,
-		[WS_METHODS.terminalOpen]: unsupportedRpc,
-		[WS_METHODS.terminalResize]: unsupportedRpc,
-		[WS_METHODS.terminalRestart]: unsupportedRpc,
-		[WS_METHODS.terminalWrite]: unsupportedRpc,
+		[WS_METHODS.subscribeTerminalEvents]: (_input) => observeRpcStream$1(WS_METHODS.subscribeTerminalEvents, callback$1((queue) => acquireRelease(terminalManager.subscribe((event) => offer$1(queue, event)), (unsubscribe) => sync(unsubscribe))), { "rpc.aggregate": "terminal" }),
+		[WS_METHODS.subscribeTerminalMetadata]: (_input) => observeRpcStream$1(WS_METHODS.subscribeTerminalMetadata, callback$1((queue) => acquireRelease(terminalManager.subscribeMetadata((event) => offer$1(queue, event)), (unsubscribe) => sync(unsubscribe))), { "rpc.aggregate": "terminal" }),
+		[WS_METHODS.subscribeVcsStatus]: (input) => observeRpcStream$1(WS_METHODS.subscribeVcsStatus, gitWorkspace.statusStream(input.cwd), { "rpc.aggregate": "vcs" }),
+		[WS_METHODS.terminalAttach]: (input) => observeRpcStream$1(WS_METHODS.terminalAttach, callback$1((queue) => acquireRelease(terminalManager.attachStream(input, (event) => offer$1(queue, event)), (unsubscribe) => sync(unsubscribe))), { "rpc.aggregate": "terminal" }),
+		[WS_METHODS.terminalClear]: (input) => observeRpcEffect$1(WS_METHODS.terminalClear, terminalManager.clear(input), { "rpc.aggregate": "terminal" }),
+		[WS_METHODS.terminalClose]: (input) => observeRpcEffect$1(WS_METHODS.terminalClose, terminalManager.close(input), { "rpc.aggregate": "terminal" }),
+		[WS_METHODS.terminalOpen]: (input) => observeRpcEffect$1(WS_METHODS.terminalOpen, terminalManager.open(input), { "rpc.aggregate": "terminal" }),
+		[WS_METHODS.terminalResize]: (input) => observeRpcEffect$1(WS_METHODS.terminalResize, terminalManager.resize(input), { "rpc.aggregate": "terminal" }),
+		[WS_METHODS.terminalRestart]: (input) => observeRpcEffect$1(WS_METHODS.terminalRestart, terminalManager.restart(input), { "rpc.aggregate": "terminal" }),
+		[WS_METHODS.terminalWrite]: (input) => observeRpcEffect$1(WS_METHODS.terminalWrite, terminalManager.write(input), { "rpc.aggregate": "terminal" }),
 		[WS_METHODS.vcsCreateRef]: unsupportedRpc,
 		[WS_METHODS.vcsCreateWorktree]: unsupportedRpc,
 		[WS_METHODS.vcsInit]: unsupportedRpc,
-		[WS_METHODS.vcsListRefs]: unsupportedRpc,
+		[WS_METHODS.vcsListRefs]: (input) => observeRpcEffect$1(WS_METHODS.vcsListRefs, gitWorkspace.listRefs(input), { "rpc.aggregate": "vcs" }),
 		[WS_METHODS.vcsPull]: unsupportedRpc,
-		[WS_METHODS.vcsRefreshStatus]: unsupportedRpc,
+		[WS_METHODS.vcsRefreshStatus]: (input) => observeRpcEffect$1(WS_METHODS.vcsRefreshStatus, gitWorkspace.status(input.cwd), { "rpc.aggregate": "vcs" }),
 		[WS_METHODS.vcsRemoveWorktree]: unsupportedRpc,
-		[WS_METHODS.vcsSwitchRef]: unsupportedRpc,
+		[WS_METHODS.vcsSwitchRef]: (input) => observeRpcEffect$1(WS_METHODS.vcsSwitchRef, gitWorkspace.switchRef(input), { "rpc.aggregate": "vcs" }),
 		[ORCHESTRATION_WS_METHODS.getFullThreadDiff]: unsupportedRpc,
 		[ORCHESTRATION_WS_METHODS.getTurnDiff]: unsupportedRpc,
 		[ORCHESTRATION_WS_METHODS.getWorkflowScript]: unsupportedRpc,
-		[WS_METHODS.subscribeBackgroundPolicy]: (_input) => observeRpcStream$1(WS_METHODS.subscribeBackgroundPolicy, unwrap$1(map$4(backgroundPolicy.subscribe, ({ latest, changes }) => concat(make$71(latest), changes))), { "rpc.aggregate": "server" })
+		[WS_METHODS.subscribeBackgroundPolicy]: (_input) => observeRpcStream$1(WS_METHODS.subscribeBackgroundPolicy, unwrap$1(map$4(backgroundPolicy.subscribe, ({ latest, changes }) => concat(make$74(latest), changes))), { "rpc.aggregate": "server" })
 	});
 }));
 const websocketRpcRouteLayer = unwrap(gen(function* () {
@@ -52360,7 +52991,7 @@ const websocketRpcRouteLayer = unwrap(gen(function* () {
 		const serverAuth = yield* EnvironmentAuth;
 		const sessions = yield* SessionStore;
 		const session = yield* serverAuth.authenticateWebSocketUpgrade(request).pipe(catchIf(isServerAuthCredentialError, (error) => failEnvironmentAuthInvalid(serverAuthCredentialReason(error))), catchIf(isServerAuthInternalError, (error) => failEnvironmentInternal("internal_error", error)));
-		const rpcWebSocketHttpEffect = yield* toHttpEffectWebsocket(WsRpcGroup, { disableTracing: true }).pipe(provide$1(makeWsRpcLayer(session).pipe(provideMerge(layerJson), provide(layer$8))));
+		const rpcWebSocketHttpEffect = yield* toHttpEffectWebsocket(WsRpcGroup, { disableTracing: true }).pipe(provide$1(makeWsRpcLayer(session).pipe(provideMerge(layerJson), provide(layer$11))));
 		return yield* acquireUseRelease(sessions.markConnected(session.sessionId), () => rpcWebSocketHttpEffect, () => sessions.markDisconnected(session.sessionId));
 	}).pipe(catchTags({
 		EnvironmentAuthInvalidError: toResponse,
@@ -52404,6 +53035,75 @@ function envelopeToUtf8(enckey, envelope) {
 function isEnvelope(value) {
 	return typeof value === "object" && value !== null && value.e2e === 1 && typeof value.iv === "string" && typeof value.ct === "string";
 }
+const AGENTLINK_FRAME_CHUNK_TAG = "agentlink-frame-chunk-v1";
+const AGENTLINK_FRAME_CHUNK_BYTES = 512 * 1024;
+const AGENTLINK_FRAME_MAX_CHUNKS = 64;
+const AGENTLINK_FRAME_MAX_IN_FLIGHT = 8;
+function chunkAgentLinkFrame(plaintext) {
+	const bytes = Buffer.from(plaintext, "utf8");
+	if (bytes.length <= AGENTLINK_FRAME_CHUNK_BYTES) return [plaintext];
+	const id = randomBytes(12).toString("base64url");
+	const total = Math.ceil(bytes.length / AGENTLINK_FRAME_CHUNK_BYTES);
+	if (total > AGENTLINK_FRAME_MAX_CHUNKS) throw new Error("AgentLink frame is too large");
+	const chunks = [];
+	for (let index = 0; index < total; index++) {
+		const start = index * AGENTLINK_FRAME_CHUNK_BYTES;
+		chunks.push(JSON.stringify({
+			__agentlink_chunk: AGENTLINK_FRAME_CHUNK_TAG,
+			id,
+			index,
+			total,
+			data: bytes.subarray(start, start + AGENTLINK_FRAME_CHUNK_BYTES).toString("base64url")
+		}));
+	}
+	return chunks;
+}
+function makeAgentLinkFrameAssembler() {
+	const inFlight = /* @__PURE__ */ new Map();
+	return (plaintext) => {
+		if (!plaintext.startsWith(`{"__agentlink_chunk":"${AGENTLINK_FRAME_CHUNK_TAG}"`)) return plaintext;
+		let value;
+		try {
+			value = JSON.parse(plaintext);
+		} catch {
+			return plaintext;
+		}
+		if (typeof value !== "object" || value === null || value.__agentlink_chunk !== AGENTLINK_FRAME_CHUNK_TAG) return plaintext;
+		const chunk = value;
+		if (typeof chunk.id !== "string" || !Number.isInteger(chunk.index) || !Number.isInteger(chunk.total) || typeof chunk.data !== "string") throw new Error("invalid AgentLink frame chunk");
+		const id = chunk.id;
+		const index = chunk.index;
+		const total = chunk.total;
+		const data = chunk.data;
+		if (total < 2 || total > AGENTLINK_FRAME_MAX_CHUNKS || index < 0 || index >= total) throw new Error("invalid AgentLink frame chunk");
+		const part = Buffer.from(data, "base64url");
+		let current = inFlight.get(id);
+		if (!current) {
+			if (inFlight.size >= AGENTLINK_FRAME_MAX_IN_FLIGHT) throw new Error("too many AgentLink frame chunks in flight");
+			current = {
+				total,
+				parts: Array.from({ length: total }, () => void 0),
+				bytes: 0
+			};
+			inFlight.set(id, current);
+		}
+		const state = current;
+		if (state.total !== total) throw new Error("inconsistent AgentLink frame chunk");
+		const previous = state.parts[index];
+		if (previous) {
+			if (!previous.equals(part)) throw new Error("duplicate AgentLink frame chunk differs");
+			return null;
+		}
+		state.parts[index] = part;
+		state.bytes += part.length;
+		if (state.bytes > AGENTLINK_FRAME_CHUNK_BYTES * AGENTLINK_FRAME_MAX_CHUNKS) throw new Error("AgentLink frame is too large");
+		if (!state.parts.every((item) => item !== void 0)) return null;
+		if (state.parts.some((item) => item === void 0)) throw new Error("incomplete AgentLink frame chunk");
+		const assembled = Buffer.concat(state.parts);
+		inFlight.delete(id);
+		return assembled.toString("utf8");
+	};
+}
 //#endregion
 //#region src/tunnel/bridge.ts
 const TUNNEL_SCOPES = [AuthOrchestrationReadScope, AuthOrchestrationOperateScope];
@@ -52447,7 +53147,7 @@ const ResponseDefectEncoded = (cause) => ({
 });
 const makeTunnelSocketProtocol = gen(function* () {
 	const serialization = yield* RpcSerialization;
-	const disconnects = yield* make$75();
+	const disconnects = yield* make$78();
 	let clientId = 0;
 	const clients = /* @__PURE__ */ new Map();
 	const clientIds = /* @__PURE__ */ new Set();
@@ -52529,7 +53229,7 @@ function encodeHttpTunnelResponseFrame(frame) {
 }
 const makeTunnelSocket = (input) => {
 	const runRaw = (handler, options) => scopedWith((scope) => gen(function* () {
-		const fiberSet = yield* make$62().pipe(provide$2(scope));
+		const fiberSet = yield* make$65().pipe(provide$2(scope));
 		const runFork = yield* runtime(fiberSet)();
 		const deliver = (frame) => {
 			const handled = handler(frame);
@@ -52540,10 +53240,10 @@ const makeTunnelSocket = (input) => {
 		if (options?.onOpen) yield* options.onOpen;
 		yield* _await(input.tunnel.closed).pipe(raceFirst(join$1(fiberSet)));
 	}));
-	return make$63({
+	return make$66({
 		runRaw,
 		writer: sync(() => (chunk) => sync(() => {
-			if (typeof chunk === "string") input.sendEncrypted(JSON.stringify(utf8ToEnvelope(input.enckey, chunk)));
+			if (typeof chunk === "string") for (const part of chunkAgentLinkFrame(chunk)) input.sendEncrypted(JSON.stringify(utf8ToEnvelope(input.enckey, part)));
 		}))
 	});
 };
@@ -52619,8 +53319,8 @@ const runHubTunnel = (config) => gen(function* () {
 					subject: "hub-tunnel",
 					method: "bearer-access-token",
 					scopes: [...TUNNEL_SCOPES]
-				}).pipe(provideMerge(layerJson), provide(layer$8))).pipe(provideContext(currentContext));
-				yield* make$13(WsRpcGroup, { disableTracing: true }).pipe(provideService(Protocol, protocol), provideContext(rpcContext));
+				}).pipe(provideMerge(layerJson), provide(layer$11))).pipe(provideContext(currentContext));
+				yield* make$16(WsRpcGroup, { disableTracing: true }).pipe(provideService(Protocol, protocol), provideContext(rpcContext));
 			}).pipe(tapCause((cause) => logError("hub tunnel: RPC server failed", { cause: String(cause) }))));
 			yield* forkScoped(onSocket(socketAdapter));
 			if (!writeHub(JSON.stringify({
@@ -52657,8 +53357,13 @@ const runHubTunnel = (config) => gen(function* () {
 			const localBaseUrl = `http://127.0.0.1:${serverConfig.port}`;
 			const sendEncrypted = (frame) => {
 				try {
-					const envelope = utf8ToEnvelope(config.enckey, encodeHttpTunnelResponseFrame(frame));
-					if (!writeHub(`${tunnelId} ${JSON.stringify(envelope)}`)) dropTunnel(tunnelId);
+					for (const part of chunkAgentLinkFrame(encodeHttpTunnelResponseFrame(frame))) {
+						const envelope = utf8ToEnvelope(config.enckey, part);
+						if (!writeHub(`${tunnelId} ${JSON.stringify(envelope)}`)) {
+							dropTunnel(tunnelId);
+							return;
+						}
+					}
 				} catch {
 					dropTunnel(tunnelId);
 				}
@@ -52698,7 +53403,7 @@ const runHubTunnel = (config) => gen(function* () {
 						if (lower === "authorization" || lower === "cookie") continue;
 						headers[lower] = value;
 					}
-					let request = make$61(requestFrame.method)(targetUrl).pipe(setHeaders(headers));
+					let request = make$64(requestFrame.method)(targetUrl).pipe(setHeaders(headers));
 					if (requestFrame.body !== null) request = setBody(uint8Array(Buffer.from(requestFrame.body, "base64")))(request);
 					const response = yield* httpClient.execute(request);
 					const responseBody = yield* response.arrayBuffer;
@@ -52751,13 +53456,14 @@ const runHubTunnel = (config) => gen(function* () {
 					const tunnelId = control.tunnelId;
 					if (tunnels.has(tunnelId)) return;
 					return gen(function* () {
-						const closed = yield* make$70();
+						const closed = yield* make$73();
 						const purpose = control.purpose === "http" ? "http" : "rpc";
 						const live = {
 							closed,
 							pendingFrames: [],
 							purpose,
-							onDecryptedFrame: null
+							onDecryptedFrame: null,
+							assembleFrame: makeAgentLinkFrameAssembler()
 						};
 						tunnels.set(tunnelId, live);
 						if (purpose === "http") yield* forkScoped(scoped(attachHttpTunnel(tunnelId, live)));
@@ -52765,6 +53471,7 @@ const runHubTunnel = (config) => gen(function* () {
 					});
 				}
 				if (control.type === "tunnel_close" && typeof control.tunnelId === "string") dropTunnel(control.tunnelId);
+				if (control.type === "enckey_upload_request") return sync(() => void runFork(upload));
 				return;
 			}
 			const framed = splitHubFrame(data);
@@ -52784,8 +53491,15 @@ const runHubTunnel = (config) => gen(function* () {
 				} catch {
 					return dropTunnel(framed.tunnelId);
 				}
-				if (live.onDecryptedFrame) live.onDecryptedFrame(frame);
-				else if (live.pendingFrames.length < 16) live.pendingFrames.push(frame);
+				let complete;
+				try {
+					complete = live.assembleFrame(frame);
+				} catch {
+					return dropTunnel(framed.tunnelId);
+				}
+				if (complete === null) return;
+				if (live.onDecryptedFrame) live.onDecryptedFrame(complete);
+				else if (live.pendingFrames.length < 16) live.pendingFrames.push(complete);
 				else dropTunnel(framed.tunnelId);
 				return;
 			}
@@ -52796,7 +53510,7 @@ const runHubTunnel = (config) => gen(function* () {
 		while: (error) => !(SocketError.is(error) && error.reason._tag === "SocketCloseError" && (error.reason.code === 4401 || error.reason.code === 4403))
 	});
 }).pipe(tapDefect((cause) => logError("hub tunnel: worker defect", { cause: String(cause) })), catchCause((cause) => logError("hub tunnel: worker failed", { cause: String(cause) })));
-const layer$4 = (config) => effectDiscard(forkScoped(runHubTunnel(config)));
+const layer$5 = (config) => effectDiscard(forkScoped(runHubTunnel(config)));
 //#endregion
 //#region src/persistence/ProviderSessionRuntime.ts
 /**
@@ -52855,7 +53569,7 @@ function toPersistenceSqlOrDecodeError(sqlOperation, decodeOperation, correlatio
 		cause
 	});
 }
-const layer$3 = effect(ProviderSessionRuntimeRepository, gen(function* () {
+const layer$4 = effect(ProviderSessionRuntimeRepository, gen(function* () {
 	const sql = yield* SqlClient;
 	const upsertRuntimeRow = void_({
 		Request: ProviderSessionRuntimeDbRowSchema,
@@ -53138,7 +53852,7 @@ const ProviderSessionDirectoryLive = effect(ProviderSessionDirectory, gen(functi
 			operation: "ProviderSessionDirectory.upsert",
 			issue: "threadId must be a non-empty string."
 		});
-		const now$1 = formatIso(yield* now);
+		const now = formatIso(yield* now$1);
 		const providerChanged = existingRuntime !== void 0 && existingRuntime.providerName !== binding.provider;
 		const providerInstanceId = binding.providerInstanceId ?? (!providerChanged ? existingRuntime?.providerInstanceId : null);
 		if (providerInstanceId === null || providerInstanceId === void 0) return yield* new ProviderValidationError({
@@ -53152,7 +53866,7 @@ const ProviderSessionDirectoryLive = effect(ProviderSessionDirectory, gen(functi
 			adapterKey: binding.adapterKey ?? (providerChanged ? binding.provider : existingRuntime?.adapterKey ?? binding.provider),
 			runtimeMode: binding.runtimeMode ?? existingRuntime?.runtimeMode ?? "full-access",
 			status: binding.status ?? existingRuntime?.status ?? "running",
-			lastSeenAt: now$1,
+			lastSeenAt: now,
 			resumeCursor: binding.resumeCursor !== void 0 ? binding.resumeCursor : existingRuntime?.resumeCursor ?? null,
 			runtimePayload: mergeRuntimePayload(existingRuntime?.runtimePayload ?? null, binding.runtimePayload)
 		}).pipe(mapError(toPersistenceError("ProviderSessionDirectory.upsert:upsert")));
@@ -53545,7 +54259,7 @@ const makeEventNdjsonLogStore = fnUntraced(function* (filePath, options = {}) {
 		filePath: failure.filePath,
 		errorTag: errorTag(failure.cause)
 	});
-	const stateRef = yield* make$50({
+	const stateRef = yield* make$53({
 		pending: [],
 		pendingBytes: 0,
 		sinks: /* @__PURE__ */ new Map(),
@@ -53553,7 +54267,7 @@ const makeEventNdjsonLogStore = fnUntraced(function* (filePath, options = {}) {
 		closed: false,
 		lastRetentionAt: initializedAt
 	});
-	const timerScope = yield* make$73();
+	const timerScope = yield* make$76();
 	const flush = fnUntraced(function* (timerFired, close) {
 		const startedAt = yield* currentTimeMillis;
 		const result = yield* modifyEffect(stateRef, (state) => sync(() => drainPending({
@@ -53599,7 +54313,7 @@ const makeEventNdjsonLogStore = fnUntraced(function* (filePath, options = {}) {
 				if (!shouldPersist(stream, event)) return;
 				const payload = yield* serializeEvent(event);
 				if (payload === void 0) return;
-				const line = `[${yield* now.pipe(map$4(formatIso))}] ${resolveStreamLabel(stream)}: ${payload}\n`;
+				const line = `[${yield* now$1.pipe(map$4(formatIso))}] ${resolveStreamLabel(stream)}: ${payload}\n`;
 				const bytes = Buffer.byteLength(line);
 				if ((yield* modifyEffect(stateRef, (state) => {
 					if (state.closed) return succeed$1([{ flush: false }, state]);
@@ -53686,7 +54400,7 @@ const NoOpProviderEventLoggers = {
 	native: void 0,
 	canonical: void 0
 };
-const layer$2 = effect(ProviderEventLoggers, gen(function* () {
+const layer$3 = effect(ProviderEventLoggers, gen(function* () {
 	const { providerEventLogPath } = yield* ServerConfig;
 	const attribution = yield* ResourceAttribution;
 	const store = yield* makeEventNdjsonLogStore(providerEventLogPath, { attribution }).pipe(catch_((error) => logWarning$1(error.message, { error }).pipe(annotateLogs({ scope: "provider-observability" }), as(void 0))));
@@ -53785,7 +54499,7 @@ const ProviderServiceLive = effect(ProviderService, fn("makeProviderService")(fu
 	const registry = yield* ProviderAdapterRegistry;
 	const directory = yield* ProviderSessionDirectory;
 	const runtimeEventPubSub = yield* unbounded$1();
-	const nowIso = map$4(now, formatIso);
+	const nowIso = map$4(now$1, formatIso);
 	const publishRuntimeEvent = (event) => succeed$1(event).pipe(tap((canonicalEvent) => canonicalEventLogger ? canonicalEventLogger.write(canonicalEvent, canonicalEvent.threadId) : void_$1), flatMap$1((canonicalEvent) => publish(runtimeEventPubSub, canonicalEvent)), asVoid);
 	const requireBindingInstanceId = (operation, payload) => payload.providerInstanceId !== void 0 ? succeed$1(payload.providerInstanceId) : fail(toValidationError(operation, payload.provider ? `Provider instance id is required for provider '${payload.provider}'.` : "Provider instance id is required."));
 	const upsertSessionBinding = (session, threadId, extra) => gen(function* () {
@@ -53804,7 +54518,7 @@ const ProviderServiceLive = effect(ProviderService, fn("makeProviderService")(fu
 		provider: canonicalEvent.provider,
 		eventType: canonicalEvent.type
 	}).pipe(andThen(publishRuntimeEvent(canonicalEvent)))));
-	const subscribedAdapters = yield* make$60(/* @__PURE__ */ new Map());
+	const subscribedAdapters = yield* make$63(/* @__PURE__ */ new Map());
 	const getAdapterEntries = get$3(subscribedAdapters).pipe(map$4((map) => Array.from(map.entries())));
 	const reconcileInstanceSubscriptions = gen(function* () {
 		const previous = yield* get$3(subscribedAdapters);
@@ -54352,7 +55066,7 @@ const makeTextGenerationFromRegistry = (registry) => TextGeneration.of({
 	generateBranchName: (input) => resolveInstance(registry, "generateBranchName", input.modelSelection.instanceId).pipe(flatMap$1((textGeneration) => textGeneration.generateBranchName(input))),
 	generateThreadTitle: (input) => resolveInstance(registry, "generateThreadTitle", input.modelSelection.instanceId).pipe(flatMap$1((textGeneration) => textGeneration.generateThreadTitle(input)))
 });
-const layer$1 = effect(TextGeneration, gen(function* () {
+const layer$2 = effect(TextGeneration, gen(function* () {
 	const registry = yield* ProviderInstanceRegistry;
 	return makeTextGenerationFromRegistry(registry);
 }));
@@ -55621,7 +56335,7 @@ const probeClaudeCapabilities = (claudeSettings, environment, cwd) => {
 const runClaudeCommand = fn("runClaudeCommand")(function* (claudeSettings, args, environment) {
 	const claudeEnvironment = yield* makeClaudeEnvironment(claudeSettings, environment);
 	const spawnCommand = yield* resolveSpawnCommand(claudeSettings.binaryPath, args, { env: claudeEnvironment });
-	const command = make$76(spawnCommand.command, spawnCommand.args, {
+	const command = make$79(spawnCommand.command, spawnCommand.args, {
 		env: claudeEnvironment,
 		shell: spawnCommand.shell
 	});
@@ -55629,7 +56343,7 @@ const runClaudeCommand = fn("runClaudeCommand")(function* (claudeSettings, args,
 });
 const checkClaudeProviderStatus = fn("checkClaudeProviderStatus")(function* (claudeSettings, resolveCapabilities, environment, cwd) {
 	const resolvedEnvironment = environment ?? process.env;
-	const checkedAt = formatIso(yield* now);
+	const checkedAt = formatIso(yield* now$1);
 	const allModels = providerModelsFromSettings(BUILT_IN_MODELS, claudeSettings.customModels, DEFAULT_CLAUDE_MODEL_CAPABILITIES);
 	if (!claudeSettings.enabled) return buildServerProvider({
 		presentation: CLAUDE_PRESENTATION,
@@ -55741,7 +56455,7 @@ const checkClaudeProviderStatus = fn("checkClaudeProviderStatus")(function* (cla
 		}
 	});
 });
-const nowIso$1 = map$4(now, formatIso);
+const nowIso$1 = map$4(now$1, formatIso);
 const makePendingClaudeProvider = (claudeSettings) => gen(function* () {
 	const checkedAt = yield* nowIso$1;
 	const models = providerModelsFromSettings(BUILT_IN_MODELS, claudeSettings.customModels, DEFAULT_CLAUDE_MODEL_CAPABILITIES);
@@ -55838,11 +56552,11 @@ const makeClaudeTextGeneration = fn("makeClaudeTextGeneration")(function* (claud
 				...settingsJson ? ["--settings", settingsJson] : [],
 				"--dangerously-skip-permissions"
 			], { env: claudeEnvironment });
-			const command = make$76(spawnCommand.command, spawnCommand.args, {
+			const command = make$79(spawnCommand.command, spawnCommand.args, {
 				env: claudeEnvironment,
 				cwd,
 				shell: spawnCommand.shell,
-				stdin: { stream: encodeText(make$71(prompt)) }
+				stdin: { stream: encodeText(make$74(prompt)) }
 			});
 			const child = yield* commandSpawner.spawn(command).pipe(mapError((cause) => normalizeCliError("claude", operation, cause, "Failed to spawn Claude CLI process")));
 			const [stdout, stderr, exitCode] = yield* all([
@@ -56806,7 +57520,7 @@ const makeClaudeAdapter = fn("makeClaudeAdapter")(function* (claudeSettings, opt
 	}));
 	const sessions = /* @__PURE__ */ new Map();
 	const runtimeEventQueue = yield* unbounded$2();
-	const nowIso = map$4(now, formatIso);
+	const nowIso = map$4(now$1, formatIso);
 	const randomUUIDv4 = crypto.randomUUIDv4.pipe(mapError((cause) => new ProviderAdapterRequestError({
 		provider: PROVIDER$2,
 		method: "crypto/randomUUIDv4",
@@ -58184,7 +58898,7 @@ const makeClaudeAdapter = fn("makeClaudeAdapter")(function* (claudeSettings, opt
 		const taskAgents = /* @__PURE__ */ new Map();
 		const workflowMemberFingerprints = /* @__PURE__ */ new Map();
 		const liveTaskIds = /* @__PURE__ */ new Set();
-		const contextRef = yield* make$60(void 0);
+		const contextRef = yield* make$63(void 0);
 		/**
 		* Handle AskUserQuestion tool calls by emitting a `user-input.requested`
 		* runtime event and waiting for the user to respond via `respondToUserInput`.
@@ -58201,7 +58915,7 @@ const makeClaudeAdapter = fn("makeClaudeAdapter")(function* (claudeSettings, opt
 				})) : [],
 				multiSelect: typeof q.multiSelect === "boolean" ? q.multiSelect : false
 			}));
-			const answersDeferred = yield* make$70();
+			const answersDeferred = yield* make$73();
 			let aborted = false;
 			const pendingInput = {
 				questions,
@@ -58297,7 +59011,7 @@ const makeClaudeAdapter = fn("makeClaudeAdapter")(function* (claudeSettings, opt
 			const requestId = ApprovalRequestId.make(yield* randomUUIDv4);
 			const requestType = classifyRequestType(toolName);
 			const detail = summarizeToolRequest(toolName, toolInput);
-			const decisionDeferred = yield* make$70();
+			const decisionDeferred = yield* make$73();
 			const pendingApproval = {
 				requestType,
 				detail,
@@ -58702,15 +59416,15 @@ const makeClaudeAdapter = fn("makeClaudeAdapter")(function* (claudeSettings, opt
 const makeManagedServerProvider = fn("makeManagedServerProvider")(function* (input) {
 	const backgroundPolicy = yield* BackgroundPolicy;
 	const serverSettings = yield* ServerSettingsService;
-	const refreshSemaphore = yield* make$72(1);
+	const refreshSemaphore = yield* make$75(1);
 	const changesPubSub = yield* acquireRelease(unbounded$1(), shutdown$2);
 	const initialSettings = yield* input.getSettings;
-	const snapshotStateRef = yield* make$60({
+	const snapshotStateRef = yield* make$63({
 		snapshot: yield* input.initialSnapshot(initialSettings),
 		enrichmentGeneration: 0
 	});
-	const settingsRef = yield* make$60(initialSettings);
-	const enrichmentFiberRef = yield* make$60(null);
+	const settingsRef = yield* make$63(initialSettings);
+	const enrichmentFiberRef = yield* make$63(null);
 	const scope$1 = yield* scope;
 	const publishEnrichedSnapshot = fn("publishEnrichedSnapshot")(function* (generation, nextSnapshot) {
 		const snapshotToPublish = yield* modify$2(snapshotStateRef, (state) => {
@@ -58901,7 +59615,7 @@ const ClaudeDriver = {
 			...eventLoggers.native ? { nativeEventLogger: eventLoggers.native } : {}
 		});
 		const textGeneration = yield* makeClaudeTextGeneration(effectiveConfig, processEnv);
-		const capabilitiesProbeCache = yield* make$78({
+		const capabilitiesProbeCache = yield* make$81({
 			capacity: 1,
 			timeToLive: CAPABILITIES_PROBE_TTL,
 			lookup: () => probeClaudeCapabilities(effectiveConfig, processEnv, cwd).pipe(provideService(Path, path))
@@ -59037,14 +59751,14 @@ const makeCodexTextGeneration = fn("makeCodexTextGeneration")(function* (codexCo
 				...imagePaths.flatMap((imagePath) => ["--image", imagePath]),
 				"-"
 			], { env: resolvedEnvironment });
-			const command = make$76(spawnCommand.command, spawnCommand.args, {
+			const command = make$79(spawnCommand.command, spawnCommand.args, {
 				env: {
 					...resolvedEnvironment,
 					...codexConfig.homePath ? { CODEX_HOME: expandHomePath(codexConfig.homePath) } : {}
 				},
 				cwd,
 				shell: spawnCommand.shell,
-				stdin: { stream: encodeText(make$71(prompt)) }
+				stdin: { stream: encodeText(make$74(prompt)) }
 			});
 			const child = yield* commandSpawner.spawn(command).pipe(mapError((cause) => normalizeCliError("codex", operation, cause, "Failed to spawn Codex CLI process")));
 			const [stdout, stderr, exitCode] = yield* all([
@@ -76997,10 +77711,10 @@ const makeCodexAppServerPatchedProtocol = fn("makeCodexAppServerPatchedProtocol"
 	const outgoing = yield* unbounded$2();
 	const incomingNotifications = yield* unbounded$2();
 	const incomingRequests = yield* unbounded$2();
-	const pending = yield* make$60(/* @__PURE__ */ new Map());
-	const nextRequestId = yield* make$60(1);
-	const remainder = yield* make$60("");
-	const terminationHandled = yield* make$60(false);
+	const pending = yield* make$63(/* @__PURE__ */ new Map());
+	const nextRequestId = yield* make$63(1);
+	const remainder = yield* make$63("");
+	const terminationHandled = yield* make$63(false);
 	const logProtocol = (event) => {
 		if (event.direction === "incoming" && !options.logIncoming) return void_$1;
 		if (event.direction === "outgoing" && !options.logOutgoing) return void_$1;
@@ -77099,7 +77813,7 @@ const makeCodexAppServerPatchedProtocol = fn("makeCodexAppServerPatchedProtocol"
 	yield* fromQueue(outgoing).pipe(run$5(options.stdio.stdout()), forkScoped);
 	const request = (method, payload) => gen(function* () {
 		const requestId = yield* modify$2(nextRequestId, (current) => [current, current + 1]);
-		const deferred = yield* make$70();
+		const deferred = yield* make$73();
 		yield* update$2(pending, (current) => new Map(current).set(String(requestId), {
 			deferred,
 			method
@@ -77127,7 +77841,7 @@ const makeCodexAppServerPatchedProtocol = fn("makeCodexAppServerPatchedProtocol"
 //#endregion
 //#region ../effect-codex-app-server/src/_internal/stdio.ts
 const encoder$2 = new TextEncoder();
-const makeChildStdio$1 = (handle) => make$77({
+const makeChildStdio$1 = (handle) => make$80({
 	args: succeed$1([]),
 	stdin: handle.stdout,
 	stdout: () => mapInput(handle.stdin, (chunk) => typeof chunk === "string" ? encoder$2.encode(chunk) : chunk),
@@ -77138,7 +77852,7 @@ fn("makeInMemoryStdio")(function* () {
 	const output = yield* unbounded$2();
 	const decoder = new TextDecoder();
 	return {
-		stdio: make$77({
+		stdio: make$80({
 			args: succeed$1([]),
 			stdin: fromQueue(input),
 			stdout: () => forEach$1((chunk) => offer$1(output, typeof chunk === "string" ? chunk : decoder.decode(chunk, { stream: true }))),
@@ -77162,7 +77876,7 @@ const makeTerminationError$1 = (handle) => match$2(handle.exitCode, {
 //#endregion
 //#region ../effect-codex-app-server/src/client.ts
 var CodexAppServerClient = class extends Service$2()("effect-codex-app-server/client/CodexAppServerClient") {};
-const make$5 = fn("effect-codex-app-server/CodexAppServerClient.make")(function* (stdio, options = {}, terminationError) {
+const make$6 = fn("effect-codex-app-server/CodexAppServerClient.make")(function* (stdio, options = {}, terminationError) {
 	const requestHandlers = /* @__PURE__ */ new Map();
 	const notificationHandlers = /* @__PURE__ */ new Map();
 	let unknownRequestHandler;
@@ -77229,7 +77943,7 @@ const make$5 = fn("effect-codex-app-server/CodexAppServerClient.make")(function*
 const layerChildProcess$1 = (handle, options = {}) => effect(CodexAppServerClient, makeChildProcessClient(handle, options));
 const makeChildProcessClient = fn("effect-codex-app-server/CodexAppServerClient.makeChildProcessClient")(function* (handle, options) {
 	yield* runDrain(handle.stderr).pipe(ignore$1, forkScoped);
-	return yield* make$5(makeChildStdio$1(handle), options, makeTerminationError$1(handle));
+	return yield* make$6(makeChildStdio$1(handle), options, makeTerminationError$1(handle));
 });
 //#endregion
 //#region src/provider/Layers/CodexProvider.ts
@@ -77425,7 +78139,7 @@ const probeCodexAppServerProvider = fn("probeCodexAppServerProvider")(function*
 		env: environment,
 		extendEnv: true
 	});
-	const child = yield* spawner.spawn(make$76(spawnCommand.command, spawnCommand.args, {
+	const child = yield* spawner.spawn(make$79(spawnCommand.command, spawnCommand.args, {
 		cwd: input.cwd,
 		env: environment,
 		extendEnv: true,
@@ -77477,7 +78191,7 @@ const emptyCodexModelsFromSettings = (codexSettings) => {
 	}));
 };
 const makePendingCodexProvider = (codexSettings) => gen(function* () {
-	const checkedAt = yield* map$4(now, formatIso);
+	const checkedAt = yield* map$4(now$1, formatIso);
 	const models = emptyCodexModelsFromSettings(codexSettings);
 	if (!codexSettings.enabled) return buildServerProvider({
 		presentation: CODEX_PRESENTATION,
@@ -77533,7 +78247,7 @@ function accountProbeStatus(account) {
 }
 const checkCodexProviderStatus = fn("checkCodexProviderStatus")(function* (codexSettings, probe = probeCodexAppServerProvider, environment) {
 	const resolvedEnvironment = environment ?? process.env;
-	const checkedAt = formatIso(yield* now);
+	const checkedAt = formatIso(yield* now$1);
 	const emptyModels = emptyCodexModelsFromSettings(codexSettings);
 	if (!codexSettings.enabled) return buildServerProvider({
 		presentation: CODEX_PRESENTATION,
@@ -78103,7 +78817,7 @@ function currentProviderThreadId(session) {
 }
 function updateSession(sessionRef, updates) {
 	return gen(function* () {
-		const updatedAt = formatIso(yield* now);
+		const updatedAt = formatIso(yield* now$1);
 		yield* update$2(sessionRef, (session) => ({
 			...session,
 			...updates,
@@ -78125,14 +78839,14 @@ const makeCodexSessionRuntime = (options) => gen(function* () {
 	const runtimeScope = yield* Scope;
 	const crypto = yield* Crypto;
 	const events = yield* unbounded$2();
-	const pendingApprovalsRef = yield* make$60(/* @__PURE__ */ new Map());
-	const approvalCorrelationsRef = yield* make$60(/* @__PURE__ */ new Map());
-	const pendingUserInputsRef = yield* make$60(/* @__PURE__ */ new Map());
-	const collabReceiverTurnsRef = yield* make$60(/* @__PURE__ */ new Map());
-	const collabChildAgentsRef = yield* make$60(/* @__PURE__ */ new Map());
+	const pendingApprovalsRef = yield* make$63(/* @__PURE__ */ new Map());
+	const approvalCorrelationsRef = yield* make$63(/* @__PURE__ */ new Map());
+	const pendingUserInputsRef = yield* make$63(/* @__PURE__ */ new Map());
+	const collabReceiverTurnsRef = yield* make$63(/* @__PURE__ */ new Map());
+	const collabChildAgentsRef = yield* make$63(/* @__PURE__ */ new Map());
 	/** Child provider-thread id → its currently running provider turn id. */
-	const collabChildLiveTurnsRef = yield* make$60(/* @__PURE__ */ new Map());
-	const closedRef = yield* make$60(false);
+	const collabChildLiveTurnsRef = yield* make$63(/* @__PURE__ */ new Map());
+	const closedRef = yield* make$63(false);
 	const resolvedHomePath = options.homePath ? expandHomePath(options.homePath) : void 0;
 	const env = {
 		...options.environment,
@@ -78144,7 +78858,7 @@ const makeCodexSessionRuntime = (options) => gen(function* () {
 		env,
 		extendEnv
 	});
-	const child = yield* spawner.spawn(make$76(spawnCommand.command, spawnCommand.args, {
+	const child = yield* spawner.spawn(make$79(spawnCommand.command, spawnCommand.args, {
 		cwd: options.cwd,
 		env,
 		extendEnv,
@@ -78157,13 +78871,13 @@ const makeCodexSessionRuntime = (options) => gen(function* () {
 	const clientContext = yield* layerChildProcess$1(child).pipe(build, provideService(Scope, runtimeScope));
 	const client = yield* service(CodexAppServerClient).pipe(provide$1(clientContext));
 	const serverNotifications = yield* unbounded$2();
-	const nowIso = map$4(now, formatIso);
+	const nowIso = map$4(now$1, formatIso);
 	const randomUUIDv4 = (purpose) => crypto.randomUUIDv4.pipe(mapError((cause) => new CodexAppServerIdentifierGenerationError({
 		purpose,
 		cause
 	})));
 	const sessionCreatedAt = yield* nowIso;
-	const sessionRef = yield* make$60({
+	const sessionRef = yield* make$63({
 		provider: PROVIDER$1,
 		...options.providerInstanceId ? { providerInstanceId: options.providerInstanceId } : {},
 		status: "connecting",
@@ -78491,7 +79205,7 @@ const makeCodexSessionRuntime = (options) => gen(function* () {
 		const requestId = ApprovalRequestId.make(yield* randomUUIDv4("command-approval-request"));
 		const turnId = TurnId.make(payload.turnId);
 		const itemId = ProviderItemId.make(payload.itemId);
-		const decision = yield* make$70();
+		const decision = yield* make$73();
 		yield* update$2(pendingApprovalsRef, (current) => {
 			const next = new Map(current);
 			next.set(requestId, {
@@ -78534,7 +79248,7 @@ const makeCodexSessionRuntime = (options) => gen(function* () {
 		const requestId = ApprovalRequestId.make(yield* randomUUIDv4("file-change-approval-request"));
 		const turnId = TurnId.make(payload.turnId);
 		const itemId = ProviderItemId.make(payload.itemId);
-		const decision = yield* make$70();
+		const decision = yield* make$73();
 		yield* update$2(pendingApprovalsRef, (current) => {
 			const next = new Map(current);
 			next.set(requestId, {
@@ -78577,7 +79291,7 @@ const makeCodexSessionRuntime = (options) => gen(function* () {
 		const requestId = ApprovalRequestId.make(yield* randomUUIDv4("user-input-request"));
 		const turnId = TurnId.make(payload.turnId);
 		const itemId = ProviderItemId.make(payload.itemId);
-		const answers = yield* make$70();
+		const answers = yield* make$73();
 		yield* update$2(pendingUserInputsRef, (current) => {
 			const next = new Map(current);
 			next.set(requestId, {
@@ -78610,7 +79324,7 @@ const makeCodexSessionRuntime = (options) => gen(function* () {
 		discard: true
 	});
 	yield* fromQueue(serverNotifications).pipe(runForEach(handleRawNotification), forkIn(runtimeScope));
-	const stderrRemainderRef = yield* make$60("");
+	const stderrRemainderRef = yield* make$63("");
 	yield* child.stderr.pipe(decodeText(), runForEach((chunk) => modify$2(stderrRemainderRef, (current) => {
 		const lines = (current + chunk).split("\n");
 		const remainder = lines.pop() ?? "";
@@ -79796,7 +80510,7 @@ const makeCodexAdapter = fn("makeCodexAdapter")(function* (codexConfig, options)
 			...input.modelSelection?.instanceId === boundInstanceId ? { model: input.modelSelection.model } : {},
 			...serviceTier ? { serviceTier } : {}
 		};
-		const sessionScope = yield* make$73("sequential");
+		const sessionScope = yield* make$76("sequential");
 		let sessionScopeTransferred = false;
 		yield* addFinalizer(() => sessionScopeTransferred ? void_$1 : close(sessionScope, void_$2));
 		const runtime = yield* (options?.makeRuntime ?? makeCodexSessionRuntime)(runtimeInput).pipe(provideService(Scope, sessionScope), provideService(ChildProcessSpawner, childProcessSpawner), provideService(Crypto, crypto), mapError((cause) => new ProviderAdapterProcessError({
@@ -83566,9 +84280,9 @@ const makeAcpPatchedProtocol = fn("makeAcpPatchedProtocol")(function* (options)
 	const notificationQueue = yield* unbounded$2();
 	const disconnects = yield* unbounded$2();
 	const outgoing = yield* unbounded$2();
-	const nextRequestId = yield* make$60(1);
-	const terminationHandled = yield* make$60(false);
-	const extPending = yield* make$60(/* @__PURE__ */ new Map());
+	const nextRequestId = yield* make$63(1);
+	const terminationHandled = yield* make$63(false);
+	const extPending = yield* make$63(/* @__PURE__ */ new Map());
 	const logProtocol = (event) => {
 		if (event.direction === "incoming" && !options.logIncoming) return void_$1;
 		if (event.direction === "outgoing" && !options.logOutgoing) return void_$1;
@@ -83786,7 +84500,7 @@ const makeAcpPatchedProtocol = fn("makeAcpPatchedProtocol")(function* (options)
 		},
 		request: fn("sendRequest")(function* (method, payload) {
 			const requestId = yield* modify$2(nextRequestId, (current) => [current, current + 1]);
-			const deferred = yield* make$70();
+			const deferred = yield* make$73();
 			yield* update$2(extPending, (pending) => new Map(pending).set(String(requestId), {
 				deferred,
 				method
@@ -83808,113 +84522,113 @@ function isProtocolError(value) {
 }
 //#endregion
 //#region ../effect-acp/src/rpc.ts
-const InitializeRpc = make$48(AGENT_METHODS.initialize, {
+const InitializeRpc = make$51(AGENT_METHODS.initialize, {
 	payload: InitializeRequest,
 	success: InitializeResponse,
 	error: Error$1
 });
-const AuthenticateRpc = make$48(AGENT_METHODS.authenticate, {
+const AuthenticateRpc = make$51(AGENT_METHODS.authenticate, {
 	payload: AuthenticateRequest,
 	success: AuthenticateResponse,
 	error: Error$1
 });
-const LogoutRpc = make$48(AGENT_METHODS.logout, {
+const LogoutRpc = make$51(AGENT_METHODS.logout, {
 	payload: LogoutRequest,
 	success: LogoutResponse,
 	error: Error$1
 });
-const NewSessionRpc = make$48(AGENT_METHODS.session_new, {
+const NewSessionRpc = make$51(AGENT_METHODS.session_new, {
 	payload: NewSessionRequest,
 	success: NewSessionResponse,
 	error: Error$1
 });
-const LoadSessionRpc = make$48(AGENT_METHODS.session_load, {
+const LoadSessionRpc = make$51(AGENT_METHODS.session_load, {
 	payload: LoadSessionRequest,
 	success: LoadSessionResponse,
 	error: Error$1
 });
-const ListSessionsRpc = make$48(AGENT_METHODS.session_list, {
+const ListSessionsRpc = make$51(AGENT_METHODS.session_list, {
 	payload: ListSessionsRequest,
 	success: ListSessionsResponse,
 	error: Error$1
 });
-const ForkSessionRpc = make$48(AGENT_METHODS.session_fork, {
+const ForkSessionRpc = make$51(AGENT_METHODS.session_fork, {
 	payload: ForkSessionRequest,
 	success: ForkSessionResponse,
 	error: Error$1
 });
-const ResumeSessionRpc = make$48(AGENT_METHODS.session_resume, {
+const ResumeSessionRpc = make$51(AGENT_METHODS.session_resume, {
 	payload: ResumeSessionRequest,
 	success: ResumeSessionResponse,
 	error: Error$1
 });
-const CloseSessionRpc = make$48(AGENT_METHODS.session_close, {
+const CloseSessionRpc = make$51(AGENT_METHODS.session_close, {
 	payload: CloseSessionRequest,
 	success: CloseSessionResponse,
 	error: Error$1
 });
-const PromptRpc = make$48(AGENT_METHODS.session_prompt, {
+const PromptRpc = make$51(AGENT_METHODS.session_prompt, {
 	payload: PromptRequest,
 	success: PromptResponse,
 	error: Error$1
 });
-const SetSessionModelRpc = make$48(AGENT_METHODS.session_set_model, {
+const SetSessionModelRpc = make$51(AGENT_METHODS.session_set_model, {
 	payload: SetSessionModelRequest,
 	success: SetSessionModelResponse,
 	error: Error$1
 });
-const SetSessionConfigOptionRpc = make$48(AGENT_METHODS.session_set_config_option, {
+const SetSessionConfigOptionRpc = make$51(AGENT_METHODS.session_set_config_option, {
 	payload: SetSessionConfigOptionRequest,
 	success: SetSessionConfigOptionResponse,
 	error: Error$1
 });
-const ReadTextFileRpc = make$48(CLIENT_METHODS.fs_read_text_file, {
+const ReadTextFileRpc = make$51(CLIENT_METHODS.fs_read_text_file, {
 	payload: ReadTextFileRequest,
 	success: ReadTextFileResponse,
 	error: Error$1
 });
-const WriteTextFileRpc = make$48(CLIENT_METHODS.fs_write_text_file, {
+const WriteTextFileRpc = make$51(CLIENT_METHODS.fs_write_text_file, {
 	payload: WriteTextFileRequest,
 	success: WriteTextFileResponse,
 	error: Error$1
 });
-const RequestPermissionRpc = make$48(CLIENT_METHODS.session_request_permission, {
+const RequestPermissionRpc = make$51(CLIENT_METHODS.session_request_permission, {
 	payload: RequestPermissionRequest,
 	success: RequestPermissionResponse,
 	error: Error$1
 });
-const ElicitationRpc = make$48(CLIENT_METHODS.session_elicitation, {
+const ElicitationRpc = make$51(CLIENT_METHODS.session_elicitation, {
 	payload: ElicitationRequest,
 	success: ElicitationResponse,
 	error: Error$1
 });
-const CreateTerminalRpc = make$48(CLIENT_METHODS.terminal_create, {
+const CreateTerminalRpc = make$51(CLIENT_METHODS.terminal_create, {
 	payload: CreateTerminalRequest,
 	success: CreateTerminalResponse,
 	error: Error$1
 });
-const TerminalOutputRpc = make$48(CLIENT_METHODS.terminal_output, {
+const TerminalOutputRpc = make$51(CLIENT_METHODS.terminal_output, {
 	payload: TerminalOutputRequest,
 	success: TerminalOutputResponse,
 	error: Error$1
 });
-const ReleaseTerminalRpc = make$48(CLIENT_METHODS.terminal_release, {
+const ReleaseTerminalRpc = make$51(CLIENT_METHODS.terminal_release, {
 	payload: ReleaseTerminalRequest,
 	success: ReleaseTerminalResponse,
 	error: Error$1
 });
-const WaitForTerminalExitRpc = make$48(CLIENT_METHODS.terminal_wait_for_exit, {
+const WaitForTerminalExitRpc = make$51(CLIENT_METHODS.terminal_wait_for_exit, {
 	payload: WaitForTerminalExitRequest,
 	success: WaitForTerminalExitResponse,
 	error: Error$1
 });
-const KillTerminalRpc = make$48(CLIENT_METHODS.terminal_kill, {
+const KillTerminalRpc = make$51(CLIENT_METHODS.terminal_kill, {
 	payload: KillTerminalRequest,
 	success: KillTerminalResponse,
 	error: Error$1
 });
-const AgentRpcs = make$47(InitializeRpc, AuthenticateRpc, LogoutRpc, NewSessionRpc, LoadSessionRpc, ListSessionsRpc, ForkSessionRpc, ResumeSessionRpc, CloseSessionRpc, PromptRpc, SetSessionModelRpc, SetSessionConfigOptionRpc);
-const ClientRpcs = make$47(ReadTextFileRpc, WriteTextFileRpc, RequestPermissionRpc, ElicitationRpc, CreateTerminalRpc, TerminalOutputRpc, ReleaseTerminalRpc, WaitForTerminalExitRpc, KillTerminalRpc);
+const AgentRpcs = make$50(InitializeRpc, AuthenticateRpc, LogoutRpc, NewSessionRpc, LoadSessionRpc, ListSessionsRpc, ForkSessionRpc, ResumeSessionRpc, CloseSessionRpc, PromptRpc, SetSessionModelRpc, SetSessionConfigOptionRpc);
+const ClientRpcs = make$50(ReadTextFileRpc, WriteTextFileRpc, RequestPermissionRpc, ElicitationRpc, CreateTerminalRpc, TerminalOutputRpc, ReleaseTerminalRpc, WaitForTerminalExitRpc, KillTerminalRpc);
 //#endregion
 //#region ../effect-acp/src/_internal/shared.ts
 const isError = is(Error$1);
@@ -83939,7 +84653,7 @@ ArraySchema(Unknown);
 //#endregion
 //#region ../effect-acp/src/_internal/stdio.ts
 const encoder = new TextEncoder();
-const makeChildStdio = (handle) => make$77({
+const makeChildStdio = (handle) => make$80({
 	args: succeed$1([]),
 	stdin: handle.stdout,
 	stdout: () => mapInput(handle.stdin, (chunk) => typeof chunk === "string" ? encoder.encode(chunk) : chunk),
@@ -83950,7 +84664,7 @@ fn("makeInMemoryStdio")(function* () {
 	const output = yield* unbounded$2();
 	const decoder = new TextDecoder();
 	return {
-		stdio: make$77({
+		stdio: make$80({
 			args: succeed$1([]),
 			stdin: fromQueue(input),
 			stdout: () => forEach$1((chunk) => offer$1(output, typeof chunk === "string" ? chunk : decoder.decode(chunk, { stream: true }))),
@@ -83974,7 +84688,7 @@ const makeTerminationError = (handle) => match$2(handle.exitCode, {
 //#endregion
 //#region ../effect-acp/src/client.ts
 var AcpClient = class extends Service$2()("effect-acp/client/AcpClient") {};
-const make$4 = fn("effect-acp/AcpClient.make")(function* (stdio, options = {}, terminationError) {
+const make$5 = fn("effect-acp/AcpClient.make")(function* (stdio, options = {}, terminationError) {
 	const coreHandlers = {};
 	const notificationHandlers = {
 		sessionUpdate: {
@@ -84042,9 +84756,9 @@ const make$4 = fn("effect-acp/AcpClient.make")(function* (stdio, options = {}, t
 		[CLIENT_METHODS.terminal_kill]: (payload) => runHandler(coreHandlers.terminalKill, payload, CLIENT_METHODS.terminal_kill).pipe(map$4((result) => result ?? {})),
 		[CLIENT_METHODS.terminal_release]: (payload) => runHandler(coreHandlers.terminalRelease, payload, CLIENT_METHODS.terminal_release).pipe(map$4((result) => result ?? {}))
 	}));
-	yield* make$13(ClientRpcs).pipe(provideService(Protocol, transport.serverProtocol), provide$1(clientHandlerLayer), forkScoped);
+	yield* make$16(ClientRpcs).pipe(provideService(Protocol, transport.serverProtocol), provide$1(clientHandlerLayer), forkScoped);
 	let nextRpcRequestId = 2 ** 32;
-	const rpc = yield* make$14(AgentRpcs, { generateRequestId: () => RequestId$2(nextRpcRequestId++) }).pipe(provideService(Protocol$1, transport.clientProtocol));
+	const rpc = yield* make$17(AgentRpcs, { generateRequestId: () => RequestId$2(nextRpcRequestId++) }).pipe(provideService(Protocol$1, transport.clientProtocol));
 	return AcpClient.of({
 		raw: {
 			notifications: transport.incoming,
@@ -84131,9 +84845,152 @@ const make$4 = fn("effect-acp/AcpClient.make")(function* (stdio, options = {}, t
 const layerChildProcess = (handle, options = {}) => {
 	const stdio = makeChildStdio(handle);
 	const terminationError = makeTerminationError(handle);
-	return effect(AcpClient, make$4(stdio, options, terminationError));
+	return effect(AcpClient, make$5(stdio, options, terminationError));
 };
 //#endregion
+//#region src/provider/acp/AcpLocalToolHost.ts
+/**
+* AcpLocalToolHost — agentlink fork addition.
+*
+* Default client-side implementations of the ACP `fs/*` and `terminal/*`
+* methods. Some ACP agents (Kimi CLI, notably) do not execute their local
+* tools in-process; they delegate shell and file operations to the client
+* through `terminal/create` + `fs/read_text_file` / `fs/write_text_file`.
+* When the client doesn't advertise those capabilities every such tool call
+* fails ("ACP terminal capability is unavailable").
+*
+* `AcpSessionRuntime` registers these handlers and advertises the matching
+* client capabilities only when `hostLocalTools` is enabled for the agent
+* (see `AcpAgentDescriptor.hostLocalTools`). Agents that run tools in their
+* own process (Gemini/Qwen today) leave the flag off and are unaffected.
+*
+* @module provider/acp/AcpLocalToolHost
+*/
+/**
+* Fallback cap for retained terminal output when the agent does not send
+* `outputByteLimit`. The spec only bounds output when the agent asks; an
+* unbounded buffer would let a noisy command exhaust daemon memory, so a
+* generous default (2 MB) is applied instead of retaining everything.
+*/
+const DEFAULT_OUTPUT_BYTE_LIMIT = 2e6;
+const internalError = (message) => AcpRequestError.internalError(message);
+const unknownTerminal = (terminalId) => AcpRequestError.resourceNotFound(`Unknown ACP terminal: ${terminalId}`);
+const isNotFoundCause = (cause) => typeof cause === "object" && cause !== null && cause._tag === "SystemError" && cause.reason === "NotFound";
+const toFsError = (operation, filePath, cause) => isNotFoundCause(cause) ? AcpRequestError.resourceNotFound(`Failed to ${operation} file (not found): ${filePath}`) : internalError(`Failed to ${operation} file: ${filePath}`);
+/**
+* Registers local `fs/*` and `terminal/*` handlers on the ACP client.
+* Terminals are tied to the surrounding scope: when the session runtime
+* shuts down, every still-running terminal process is killed with it.
+*/
+const registerLocalToolHandlers = (input) => gen(function* () {
+	const crypto = yield* Crypto;
+	const fileSystem = yield* FileSystem;
+	const path = yield* Path;
+	const spawner = yield* ChildProcessSpawner;
+	const scope = yield* Scope;
+	const terminals = /* @__PURE__ */ new Map();
+	const resolveFilePath = (filePath) => path.isAbsolute(filePath) ? filePath : path.join(input.cwd, filePath);
+	yield* input.acp.handleReadTextFile((request) => gen(function* () {
+		const filePath = resolveFilePath(request.path);
+		const lines = (yield* fileSystem.readFileString(filePath).pipe(mapError((cause) => toFsError("read", filePath, cause)))).split("\n");
+		const start = request.line !== void 0 && request.line !== null && request.line > 1 ? request.line - 1 : 0;
+		return { content: (request.limit !== void 0 && request.limit !== null ? lines.slice(start, start + request.limit) : lines.slice(start)).join("\n") };
+	}));
+	yield* input.acp.handleWriteTextFile((request) => gen(function* () {
+		const filePath = resolveFilePath(request.path);
+		yield* fileSystem.makeDirectory(path.dirname(filePath), { recursive: true }).pipe(ignore$1);
+		yield* fileSystem.writeFileString(filePath, request.content).pipe(mapError((cause) => toFsError("write", filePath, cause)));
+		return {};
+	}));
+	yield* input.acp.handleCreateTerminal((request) => gen(function* () {
+		const terminalId = yield* crypto.randomUUIDv4.pipe(mapError(() => internalError("Failed to allocate an ACP terminal id.")));
+		const env = (request.env ?? []).reduce((acc, entry) => {
+			acc[entry.name] = entry.value;
+			return acc;
+		}, {});
+		const hasEnv = Object.keys(env).length > 0;
+		const spawnCommand = yield* resolveSpawnCommand(request.command, request.args ?? [], hasEnv ? {
+			env,
+			extendEnv: true
+		} : {});
+		const handle = yield* spawner.spawn(make$79(spawnCommand.command, spawnCommand.args, {
+			cwd: request.cwd ?? input.cwd,
+			...hasEnv ? {
+				env,
+				extendEnv: true
+			} : {},
+			shell: spawnCommand.shell
+		})).pipe(provideService(Scope, scope), mapError(() => internalError(`Failed to spawn ACP terminal command: ${request.command}`)));
+		const exited = yield* make$73();
+		const state = {
+			handle,
+			exited,
+			output: "",
+			truncated: false,
+			exitStatus: void 0,
+			killSignal: void 0
+		};
+		const byteLimit = request.outputByteLimit ?? DEFAULT_OUTPUT_BYTE_LIMIT;
+		const decoder = new TextDecoder();
+		const appendOutput = (chunk) => {
+			state.output += decoder.decode(chunk, { stream: true });
+			if (state.output.length > byteLimit) {
+				state.output = state.output.slice(state.output.length - byteLimit);
+				state.truncated = true;
+			}
+		};
+		yield* runForEach(handle.all, (chunk) => sync(() => appendOutput(chunk))).pipe(ignore$1, forkIn(scope));
+		yield* handle.exitCode.pipe(match$2({
+			onFailure: () => ({
+				exitCode: null,
+				signal: state.killSignal ?? null
+			}),
+			onSuccess: (code) => ({
+				exitCode: Number(code),
+				signal: state.killSignal ?? null
+			})
+		}), flatMap$1((exitStatus) => {
+			state.exitStatus = exitStatus;
+			return succeed$4(exited, exitStatus);
+		}), ignore$1, forkIn(scope));
+		terminals.set(terminalId, state);
+		return { terminalId };
+	}));
+	yield* input.acp.handleTerminalOutput((request) => sync(() => {
+		const state = terminals.get(request.terminalId);
+		if (!state) return;
+		return {
+			output: state.output,
+			truncated: state.truncated,
+			...state.exitStatus ? { exitStatus: state.exitStatus } : {}
+		};
+	}).pipe(flatMap$1((result) => result === void 0 ? fail(unknownTerminal(request.terminalId)) : succeed$1(result))));
+	yield* input.acp.handleTerminalWaitForExit((request) => gen(function* () {
+		const state = terminals.get(request.terminalId);
+		if (!state) return yield* unknownTerminal(request.terminalId);
+		return yield* _await(state.exited);
+	}));
+	yield* input.acp.handleTerminalKill((request) => gen(function* () {
+		const state = terminals.get(request.terminalId);
+		if (!state) return yield* unknownTerminal(request.terminalId);
+		if (state.exitStatus === void 0) {
+			state.killSignal = "SIGTERM";
+			yield* state.handle.kill().pipe(ignore$1);
+		}
+		return {};
+	}));
+	yield* input.acp.handleTerminalRelease((request) => gen(function* () {
+		const state = terminals.get(request.terminalId);
+		if (!state) return yield* unknownTerminal(request.terminalId);
+		terminals.delete(request.terminalId);
+		if (state.exitStatus === void 0) {
+			state.killSignal = "SIGTERM";
+			yield* state.handle.kill().pipe(ignore$1);
+		}
+		return {};
+	}));
+});
+//#endregion
 //#region ../t3-shared/src/toolActivity.ts
 function asRecord(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
@@ -84591,23 +85448,23 @@ function formatConfigOptionValue(value) {
 const defaultSessionLoadTimeout = seconds(90);
 const defaultSessionLoadReplayIdleGap = seconds(2);
 var AcpSessionRuntime = class extends Service$2()("t3/provider/acp/AcpSessionRuntime") {};
-const make$3 = (options) => gen(function* () {
+const make$4 = (options) => gen(function* () {
 	const crypto = yield* Crypto;
 	const spawner = yield* ChildProcessSpawner;
 	const runtimeScope = yield* Scope;
 	const eventQueue = yield* unbounded$2();
-	const modeStateRef = yield* make$60(void 0);
-	const toolCallsRef = yield* make$60(/* @__PURE__ */ new Map());
+	const modeStateRef = yield* make$63(void 0);
+	const toolCallsRef = yield* make$63(/* @__PURE__ */ new Map());
 	const assistantItemRuntimeId = yield* crypto.randomUUIDv4.pipe(mapError((cause) => new AcpTransportError({
 		detail: "Failed to generate an ACP assistant item runtime identifier.",
 		cause
 	})));
-	const assistantSegmentRef = yield* make$60({ nextSegmentIndex: 0 });
-	const configOptionsRef = yield* make$60(sessionConfigOptionsFromSetup(void 0));
-	const startStateRef = yield* make$60({ _tag: "NotStarted" });
-	const promptSerializationSemaphore = yield* make$72(1);
-	const activePromptFiberRef = yield* make$60(none());
-	const sessionLoadGateRef = yield* make$60(none());
+	const assistantSegmentRef = yield* make$63({ nextSegmentIndex: 0 });
+	const configOptionsRef = yield* make$63(sessionConfigOptionsFromSetup(void 0));
+	const startStateRef = yield* make$63({ _tag: "NotStarted" });
+	const promptSerializationSemaphore = yield* make$75(1);
+	const activePromptFiberRef = yield* make$63(none());
+	const sessionLoadGateRef = yield* make$63(none());
 	const logRequest = (event) => options.requestLogger ? options.requestLogger(event) : void_$1;
 	const runLoggedRequest = (method, payload, effect) => logRequest({
 		method,
@@ -84628,7 +85485,7 @@ const make$3 = (options) => gen(function* () {
 		env: options.spawn.env,
 		extendEnv: true
 	} : {});
-	const child = yield* spawner.spawn(make$76(spawnCommand.command, spawnCommand.args, {
+	const child = yield* spawner.spawn(make$79(spawnCommand.command, spawnCommand.args, {
 		...options.spawn.cwd ? { cwd: options.spawn.cwd } : {},
 		...options.spawn.env ? {
 			env: options.spawn.env,
@@ -84667,13 +85524,18 @@ const make$3 = (options) => gen(function* () {
 			params: notification
 		});
 	}));
+	if (options.hostLocalTools === true) yield* registerLocalToolHandlers({
+		acp,
+		cwd: options.cwd
+	});
+	const hostLocalTools = options.hostLocalTools === true;
 	const initializeClientCapabilities = {
 		fs: {
-			readTextFile: false,
-			writeTextFile: false,
+			readTextFile: hostLocalTools,
+			writeTextFile: hostLocalTools,
 			...options.clientCapabilities?.fs
 		},
-		terminal: options.clientCapabilities?.terminal ?? false,
+		terminal: options.clientCapabilities?.terminal ?? hostLocalTools,
 		...options.clientCapabilities?.auth ? { auth: options.clientCapabilities.auth } : {},
 		...options.clientCapabilities?.elicitation ? { elicitation: options.clientCapabilities.elicitation } : {},
 		...options.clientCapabilities?._meta ? { _meta: options.clientCapabilities._meta } : {}
@@ -84816,7 +85678,7 @@ const make$3 = (options) => gen(function* () {
 		};
 	});
 	const start = gen(function* () {
-		const deferred = yield* make$70();
+		const deferred = yield* make$73();
 		return yield* yield* modify$2(startStateRef, (state) => {
 			switch (state._tag) {
 				case "Started": return [succeed$1(state.result), state];
@@ -84850,7 +85712,7 @@ const make$3 = (options) => gen(function* () {
 		start: () => start,
 		getEvents: () => fromQueue(eventQueue),
 		drainEvents: gen(function* () {
-			const acknowledge = yield* make$70();
+			const acknowledge = yield* make$73();
 			yield* offer$1(eventQueue, {
 				_tag: "EventStreamBarrier",
 				acknowledge
@@ -84902,7 +85764,7 @@ const make$3 = (options) => gen(function* () {
 		notify: acp.raw.notify
 	};
 });
-const layer = (options) => effect(AcpSessionRuntime, make$3(options));
+const layer$1 = (options) => effect(AcpSessionRuntime, make$4(options));
 function sessionConfigOptionsFromSetup(response) {
 	return response?.configOptions ?? [];
 }
@@ -85009,11 +85871,12 @@ function buildAcpAgentSpawnInput(descriptor, settings, cwd, environment) {
 * never sent.
 */
 const makeAcpAgentRuntime = (descriptor, input) => gen(function* () {
-	const acpContext = yield* build(layer({
+	const acpContext = yield* build(layer$1({
 		...input,
 		spawn: buildAcpAgentSpawnInput(descriptor, input.settings, input.cwd, input.environment),
 		authMethodId: "none",
-		skipAuthentication: true
+		skipAuthentication: true,
+		hostLocalTools: descriptor.hostLocalTools === true
 	}).pipe(provide(succeed$3(ChildProcessSpawner, input.childProcessSpawner))));
 	return yield* service(AcpSessionRuntime).pipe(provide$1(acpContext));
 });
@@ -85084,9 +85947,11 @@ const isTextGenerationError = is(TextGenerationError);
 const makeAcpAgentTextGeneration = (descriptor, settings, environment = process.env) => gen(function* () {
 	const crypto = yield* Crypto;
 	const commandSpawner = yield* ChildProcessSpawner;
+	const fileSystem = yield* FileSystem;
+	const path = yield* Path;
 	const runAcpAgentJson = ({ operation, cwd, prompt, outputSchemaJson, modelSelection }) => gen(function* () {
 		const resolvedModel = resolveAcpAgentModelId(descriptor, modelSelection.model);
-		const outputRef = yield* make$60("");
+		const outputRef = yield* make$63("");
 		const runtime = yield* makeAcpAgentRuntime(descriptor, {
 			settings,
 			environment,
@@ -85096,7 +85961,7 @@ const makeAcpAgentTextGeneration = (descriptor, settings, environment = process.
 				name: "agentlink-text-generation",
 				version: "0.0.0"
 			}
-		}).pipe(provideService(Crypto, crypto));
+		}).pipe(provideService(Crypto, crypto), provideService(FileSystem, fileSystem), provideService(Path, path));
 		yield* runtime.handleSessionUpdate((notification) => {
 			const update = notification.update;
 			if (update.sessionUpdate !== "agent_message_chunk") return void_$1;
@@ -85435,7 +86300,7 @@ const makeAcpNativeLoggerFactory = fn("makeAcpNativeLoggerFactory")(function* ()
 	return (input) => {
 		const writeNativeAcpLog = (logInput) => gen(function* () {
 			if (!input.nativeEventLogger) return;
-			const observedAt = formatIso(yield* now);
+			const observedAt = formatIso(yield* now$1);
 			yield* input.nativeEventLogger.write({
 				observedAt,
 				event: {
@@ -85541,9 +86406,9 @@ function makeAcpAgentAdapter(descriptor, settings, options) {
 		const managedNativeEventLogger = options?.nativeEventLogger === void 0 ? nativeEventLogger : void 0;
 		const makeAcpNativeLoggers = yield* makeAcpNativeLoggerFactory();
 		const sessions = /* @__PURE__ */ new Map();
-		const threadLocksRef = yield* make$50(/* @__PURE__ */ new Map());
+		const threadLocksRef = yield* make$53(/* @__PURE__ */ new Map());
 		const runtimeEventPubSub = yield* unbounded$1();
-		const nowIso = map$4(now, formatIso);
+		const nowIso = map$4(now$1, formatIso);
 		const randomUUIDv4 = crypto.randomUUIDv4.pipe(mapError((cause) => new ProviderAdapterRequestError({
 			provider: PROVIDER,
 			method: "crypto/randomUUIDv4",
@@ -85562,7 +86427,7 @@ function makeAcpAgentAdapter(descriptor, settings, options) {
 		const offerRuntimeEvent = (event) => publish(runtimeEventPubSub, event).pipe(asVoid);
 		const getThreadSemaphore = (threadId) => modifyEffect(threadLocksRef, (current) => {
 			return match$1(fromNullishOr(current.get(threadId)), {
-				onNone: () => make$72(1).pipe(map$4((semaphore) => {
+				onNone: () => make$75(1).pipe(map$4((semaphore) => {
 					const next = new Map(current);
 					next.set(threadId, semaphore);
 					return [semaphore, next];
@@ -85745,7 +86610,7 @@ function makeAcpAgentAdapter(descriptor, settings, options) {
 			const existing = sessions.get(input.threadId);
 			if (existing && !existing.stopped) yield* stopSessionInternal(existing);
 			const pendingApprovals = /* @__PURE__ */ new Map();
-			const sessionScope = yield* make$73("sequential");
+			const sessionScope = yield* make$76("sequential");
 			let sessionScopeTransferred = false;
 			yield* addFinalizer(() => sessionScopeTransferred ? void_$1 : close(sessionScope, void_$2));
 			const resumeSessionId = resolveResumeSessionId(descriptor, input.resumeCursor);
@@ -85765,7 +86630,7 @@ function makeAcpAgentAdapter(descriptor, settings, options) {
 					version: "0.0.0"
 				},
 				...acpNativeLoggers
-			}).pipe(provideService(Crypto, crypto), provideService(Scope, sessionScope), mapError((cause) => new ProviderAdapterProcessError({
+			}).pipe(provideService(Crypto, crypto), provideService(FileSystem, fileSystem), provideService(Path, path), provideService(Scope, sessionScope), mapError((cause) => new ProviderAdapterProcessError({
 				provider: PROVIDER,
 				threadId: input.threadId,
 				detail: cause.message,
@@ -85784,7 +86649,7 @@ function makeAcpAgentAdapter(descriptor, settings, options) {
 					const permissionRequest = parsePermissionRequest(params);
 					const requestId = ApprovalRequestId.make(yield* randomUUIDv4);
 					const runtimeRequestId = RuntimeRequestId.make(requestId);
-					const decision = yield* make$70();
+					const decision = yield* make$73();
 					const turnId = resolveSessionCallbackTurnId(sessions, input.threadId);
 					pendingApprovals.set(requestId, { decision });
 					yield* offerRuntimeEvent(makeAcpRequestOpenedEvent({
@@ -86041,10 +86906,10 @@ function makeAcpAgentAdapter(descriptor, settings, options) {
 					});
 				})));
 			}));
-			const promptSettled = yield* make$60(false);
-			const promptRpcSucceeded = yield* make$60(false);
-			const promptResultRef = yield* make$60(void 0);
-			const promptFailureMessageRef = yield* make$60(void 0);
+			const promptSettled = yield* make$63(false);
+			const promptRpcSucceeded = yield* make$63(false);
+			const promptResultRef = yield* make$63(void 0);
+			const promptFailureMessageRef = yield* make$63(void 0);
 			return yield* gen(function* () {
 				const result = yield* prepared.acp.prompt({ prompt: prepared.promptParts }).pipe(tap((promptResult) => all([set$2(promptRpcSucceeded, true), set$2(promptResultRef, promptResult)])), tapError((error) => set$2(promptFailureMessageRef, mapAcpToAdapterError(PROVIDER, input.threadId, "session/prompt", error).message).pipe(andThen(prepared.acp.drainEvents))), mapError((error) => mapAcpToAdapterError(PROVIDER, input.threadId, "session/prompt", error)));
 				return yield* withThreadLock(input.threadId, gen(function* () {
@@ -86271,7 +87136,7 @@ const VERSION_PROBE_TIMEOUT_MS = 4e3;
 const ACP_MODEL_DISCOVERY_TIMEOUT_MS = 15e3;
 function buildInitialAcpAgentProviderSnapshot(descriptor, settings) {
 	return gen(function* () {
-		const checkedAt = yield* map$4(now, formatIso);
+		const checkedAt = yield* map$4(now$1, formatIso);
 		const models = acpAgentModelsFromSettings(descriptor, settings.customModels);
 		if (!settings.enabled) return buildServerProvider({
 			presentation: descriptorPresentation(descriptor),
@@ -86344,13 +87209,13 @@ const discoverModelsViaAcp = (descriptor, settings, environment = process.env) =
 const runVersionCommand = (descriptor, settings, environment = process.env) => gen(function* () {
 	const command = settings.binaryPath.trim() || descriptor.defaultBinary;
 	const spawnCommand = yield* resolveSpawnCommand(command, ["--version"], { env: environment });
-	return yield* spawnAndCollect(command, make$76(spawnCommand.command, spawnCommand.args, {
+	return yield* spawnAndCollect(command, make$79(spawnCommand.command, spawnCommand.args, {
 		env: environment,
 		shell: spawnCommand.shell
 	}));
 });
 const checkAcpAgentProviderStatus = (descriptor, settings, environment = process.env) => gen(function* () {
-	const checkedAt = formatIso(yield* now);
+	const checkedAt = formatIso(yield* now$1);
 	const fallbackModels = acpAgentModelsFromSettings(descriptor, settings.customModels);
 	const presentation = descriptorPresentation(descriptor);
 	if (!settings.enabled) return buildServerProvider({
@@ -86597,7 +87462,8 @@ const KimiAcpAgent = {
 	acpArgs: ["acp"],
 	defaultModel: "kimi-k2",
 	builtInModels: ["kimi-k2", "kimi-for-coding"],
-	supportsSessionLoad: false
+	supportsSessionLoad: false,
+	hostLocalTools: true
 };
 //#endregion
 //#region src/provider/Drivers/KimiDriver.ts
@@ -86708,7 +87574,7 @@ var ProviderInstanceRegistryMutator = class extends Service$2()("t3/provider/Ser
 *
 * @module unavailableProviderSnapshot
 */
-const nowIso = map$4(now, formatIso);
+const nowIso = map$4(now$1, formatIso);
 /**
 * Produce a `ServerProvider` snapshot representing a configured instance
 * whose driver the running build does not implement. The result is safe
@@ -86829,7 +87695,7 @@ const buildEntry = (input) => gen(function* () {
 		};
 	}
 	const typedConfig = decodeResult.success;
-	const childScope = yield* make$73();
+	const childScope = yield* make$76();
 	yield* addFinalizer$1(parentScope, close(childScope, void_$2).pipe(ignore$1));
 	const createResult = yield* driver.create({
 		instanceId,
@@ -86950,8 +87816,8 @@ const makeProviderInstanceRegistry = (input) => gen(function* () {
 	const driversById = new Map(input.drivers.map((driver) => [driver.driverKind, driver]));
 	const parentScope = yield* Scope;
 	const driverContext = yield* context();
-	const entries = yield* make$60(/* @__PURE__ */ new Map());
-	const unavailable = yield* make$60(/* @__PURE__ */ new Map());
+	const entries = yield* make$63(/* @__PURE__ */ new Map());
+	const unavailable = yield* make$63(/* @__PURE__ */ new Map());
 	const changes = yield* unbounded$1();
 	yield* addFinalizer(() => shutdown$2(changes));
 	const reconcileWithR = makeReconcile({
@@ -86986,7 +87852,7 @@ const makeProviderInstanceRegistry = (input) => gen(function* () {
 * changes. Tests that exercise the mutator directly can pair this Layer
 * with a test-local `ServerSettingsService`.
 */
-const ProviderInstanceRegistryMutableLayer = (input) => effectContext(makeProviderInstanceRegistry(input).pipe(map$4(({ registry, mutator }) => make$65(ProviderInstanceRegistry, registry).pipe(add$2(ProviderInstanceRegistryMutator, mutator)))));
+const ProviderInstanceRegistryMutableLayer = (input) => effectContext(makeProviderInstanceRegistry(input).pipe(map$4(({ registry, mutator }) => make$68(ProviderInstanceRegistry, registry).pipe(add$2(ProviderInstanceRegistryMutator, mutator)))));
 //#endregion
 //#region src/provider/Layers/ProviderInstanceRegistryHydration.ts
 /**
@@ -87221,7 +88087,7 @@ effect(RuntimeReceiptBus, makeRuntimeReceiptBusTest);
 */
 const makeDrainableWorker = (process) => gen(function* () {
 	const queue = yield* acquireRelease(unbounded(), shutdown);
-	const outstanding = yield* make$49(0);
+	const outstanding = yield* make$52(0);
 	yield* take(queue).pipe(tap((a) => ensuring(process(a), update$1(outstanding, (n) => n - 1))), forever, forkScoped);
 	const drain = get$1(outstanding).pipe(tap((n) => n > 0 ? txRetry : void_$1), tx);
 	const enqueue = (element) => offer(queue, element).pipe(tap(() => update$1(outstanding, (n) => n + 1)), tx);
@@ -87689,22 +88555,22 @@ const ProviderRuntimeIngestionLive = effect(ProviderRuntimeIngestionService, gen
 	const projectionTurnRepository = yield* ProjectionTurnRepository;
 	const serverSettingsService = yield* ServerSettingsService;
 	const providerCommandId = (event, tag) => crypto.randomUUIDv4.pipe(map$4((uuid) => CommandId.make(`provider:${event.eventId}:${tag}:${uuid}`)));
-	const turnMessageIdsByTurnKey = yield* make$78({
+	const turnMessageIdsByTurnKey = yield* make$81({
 		capacity: TURN_MESSAGE_IDS_BY_TURN_CACHE_CAPACITY,
 		timeToLive: TURN_MESSAGE_IDS_BY_TURN_TTL,
 		lookup: () => succeed$1(/* @__PURE__ */ new Set())
 	});
-	const bufferedAssistantTextByMessageId = yield* make$78({
+	const bufferedAssistantTextByMessageId = yield* make$81({
 		capacity: BUFFERED_MESSAGE_TEXT_BY_MESSAGE_ID_CACHE_CAPACITY,
 		timeToLive: BUFFERED_MESSAGE_TEXT_BY_MESSAGE_ID_TTL,
 		lookup: () => succeed$1("")
 	});
-	const assistantSegmentStateByTurnKey = yield* make$78({
+	const assistantSegmentStateByTurnKey = yield* make$81({
 		capacity: TURN_MESSAGE_IDS_BY_TURN_CACHE_CAPACITY,
 		timeToLive: TURN_MESSAGE_IDS_BY_TURN_TTL,
 		lookup: () => die(/* @__PURE__ */ new Error("assistant segment state should be read through getOption before initialization"))
 	});
-	const bufferedProposedPlanById = yield* make$78({
+	const bufferedProposedPlanById = yield* make$81({
 		capacity: BUFFERED_PROPOSED_PLAN_BY_ID_CACHE_CAPACITY,
 		timeToLive: BUFFERED_PROPOSED_PLAN_BY_ID_TTL,
 		lookup: () => succeed$1({
@@ -87712,7 +88578,7 @@ const ProviderRuntimeIngestionLive = effect(ProviderRuntimeIngestionService, gen
 			createdAt: ""
 		})
 	});
-	const taskDescriptionByTaskKey = yield* make$78({
+	const taskDescriptionByTaskKey = yield* make$81({
 		capacity: TASK_DESCRIPTION_BY_TASK_CACHE_CAPACITY,
 		timeToLive: TASK_DESCRIPTION_BY_TASK_TTL,
 		lookup: () => succeed$1("")
@@ -88406,7 +89272,7 @@ const ProviderCommandReactorLive = effect(ProviderCommandReactor, gen(function*
 	const serverSettingsService = yield* ServerSettingsService;
 	const serverCommandId = (tag) => crypto.randomUUIDv4.pipe(map$4((uuid) => CommandId.make(`server:${tag}:${uuid}`)));
 	const serverEventId = () => crypto.randomUUIDv4.pipe(map$4(EventId.make));
-	const handledTurnStartKeys = yield* make$78({
+	const handledTurnStartKeys = yield* make$81({
 		capacity: HANDLED_TURN_START_KEY_MAX,
 		timeToLive: HANDLED_TURN_START_KEY_TTL,
 		lookup: () => succeed$1(true)
@@ -89215,7 +90081,7 @@ const ProviderRegistryLive = effect(ProviderRegistry, gen(function* () {
 		if (provider === void 0 || source === void 0) continue;
 		fallbackByInstance.set(source.instanceId, provider);
 	}
-	const providersRef = yield* make$60(yield* forEach(bootSources, (source) => gen(function* () {
+	const providersRef = yield* make$63(yield* forEach(bootSources, (source) => gen(function* () {
 		const filePath = yield* resolveProviderStatusCachePath({
 			cacheDir: config.providerStatusCacheDir,
 			instanceId: source.instanceId
@@ -89238,9 +90104,9 @@ const ProviderRegistryLive = effect(ProviderRegistry, gen(function* () {
 			return succeed$1(hydrateCachedProvider(correlation));
 		}));
 	}), { concurrency: "unbounded" }).pipe(map$4((providers) => orderProviderSnapshots(providers.filter((provider) => provider !== void 0)))));
-	const maintenanceActionStatesRef = yield* make$60(/* @__PURE__ */ new Map());
-	const liveSubsRef = yield* make$60(/* @__PURE__ */ new Map());
-	const syncSemaphore = yield* make$72(1);
+	const maintenanceActionStatesRef = yield* make$63(/* @__PURE__ */ new Map());
+	const liveSubsRef = yield* make$63(/* @__PURE__ */ new Map());
+	const syncSemaphore = yield* make$75(1);
 	const getLiveSources = get$3(liveSubsRef).pipe(map$4((map) => Array.from(map.values(), buildSnapshotSource)));
 	const persistProvider = (provider) => gen(function* () {
 		const key = snapshotInstanceKey(provider);
@@ -89425,13 +90291,118 @@ const ProviderRegistryLive = effect(ProviderRegistry, gen(function* () {
 	};
 }));
 //#endregion
+//#region src/terminal/NodePtyAdapter.ts
+var NodePtyModuleLoadError = class extends TaggedErrorClass()("NodePtyModuleLoadError", {
+	platform: String$1,
+	architecture: String$1,
+	cause: Defect()
+}) {
+	get message() {
+		return `Failed to load node-pty for ${this.platform}-${this.architecture}.`;
+	}
+};
+let didEnsureSpawnHelperExecutable = false;
+const resolveNodePtySpawnHelperPath = gen(function* () {
+	const requireForNodePty = NodeModule.createRequire(import.meta.url);
+	const path = yield* Path;
+	const fs = yield* FileSystem;
+	const platform = yield* HostProcessPlatform;
+	const architecture = yield* HostProcessArchitecture;
+	const packageJsonPath = requireForNodePty.resolve("node-pty/package.json");
+	const packageDir = path.dirname(packageJsonPath);
+	const candidates = [
+		path.join(packageDir, "build", "Release", "spawn-helper"),
+		path.join(packageDir, "build", "Debug", "spawn-helper"),
+		path.join(packageDir, "prebuilds", `${platform}-${architecture}`, "spawn-helper")
+	];
+	for (const candidate of candidates) if (yield* fs.exists(candidate)) return candidate;
+	return null;
+}).pipe(orElseSucceed(() => null));
+const ensureNodePtySpawnHelperExecutable = fn(function* () {
+	const fs = yield* FileSystem;
+	if ((yield* HostProcessPlatform) === "win32") return;
+	if (didEnsureSpawnHelperExecutable) return;
+	const helperPath = yield* resolveNodePtySpawnHelperPath;
+	if (!helperPath) return;
+	didEnsureSpawnHelperExecutable = true;
+	if (!(yield* fs.exists(helperPath))) return;
+	yield* fs.chmod(helperPath, 493).pipe(orElseSucceed(() => void 0));
+});
+var NodePtyProcess = class {
+	process;
+	constructor(process) {
+		this.process = process;
+	}
+	get pid() {
+		return this.process.pid;
+	}
+	write(data) {
+		this.process.write(data);
+	}
+	resize(cols, rows) {
+		this.process.resize(cols, rows);
+	}
+	kill(signal) {
+		this.process.kill(signal);
+	}
+	onData(callback) {
+		const disposable = this.process.onData(callback);
+		return () => {
+			disposable.dispose();
+		};
+	}
+	onExit(callback) {
+		const disposable = this.process.onExit((event) => {
+			callback({
+				exitCode: event.exitCode,
+				signal: event.signal ?? null
+			});
+		});
+		return () => {
+			disposable.dispose();
+		};
+	}
+};
+const layer = effect(PtyAdapter, fn("NodePtyAdapter.make")(function* (loadNodePtyModule = () => import("node-pty")) {
+	const fs = yield* FileSystem;
+	const path = yield* Path;
+	const platform = yield* HostProcessPlatform;
+	const architecture = yield* HostProcessArchitecture;
+	const nodePty = yield* tryPromise({
+		try: loadNodePtyModule,
+		catch: (cause) => new NodePtyModuleLoadError({
+			platform,
+			architecture,
+			cause
+		})
+	}).pipe(orDie);
+	const ensureNodePtySpawnHelperExecutableCached = yield* cached(ensureNodePtySpawnHelperExecutable().pipe(provideService(FileSystem, fs), provideService(Path, path), provideService(HostProcessPlatform, platform), provideService(HostProcessArchitecture, architecture), orElseSucceed(() => void 0)));
+	return PtyAdapter.of({ spawn: fn("NodePtyAdapter.spawn")(function* (input) {
+		yield* ensureNodePtySpawnHelperExecutableCached;
+		return new NodePtyProcess(yield* try_({
+			try: () => nodePty.spawn(input.shell, input.args ?? [], {
+				cwd: input.cwd,
+				cols: input.cols,
+				rows: input.rows,
+				env: input.env,
+				name: platform === "win32" ? "xterm-color" : "xterm-256color"
+			}),
+			catch: (cause) => new PtySpawnError({
+				adapter: "node-pty",
+				shell: input.shell,
+				cause
+			})
+		}));
+	}) });
+})());
+//#endregion
 //#region ../t3-shared/src/httpObservability.ts
 const httpHeaderRedactionLayer = effect(CurrentRedactedNames, map$4(CurrentRedactedNames, (names) => [...names, "dpop"]));
 //#endregion
 //#region src/serverLogger.ts
 const ServerLoggerLive = gen(function* () {
 	const minimumLogLevelLayer = succeed$3(MinimumLogLevel, (yield* ServerConfig).logLevel);
-	return mergeAll(layer$37([consolePretty(), tracerLogger], { mergeWithExisting: false }), minimumLogLevelLayer);
+	return mergeAll(layer$40([consolePretty(), tracerLogger], { mergeWithExisting: false }), minimumLogLevelLayer);
 }).pipe(unwrap);
 //#endregion
 //#region src/observability/Layers/Observability.ts
@@ -89454,7 +90425,7 @@ const ObservabilityLive = unwrap(gen(function* () {
 				durationMs: stats.durationMs
 			})
 		});
-		const delegate = config.otlpTracesUrl === void 0 ? void 0 : yield* make$18({
+		const delegate = config.otlpTracesUrl === void 0 ? void 0 : yield* make$21({
 			url: config.otlpTracesUrl,
 			exportInterval: `${config.otlpExportIntervalMs} millis`,
 			resource: {
@@ -89472,9 +90443,9 @@ const ObservabilityLive = unwrap(gen(function* () {
 			batchWindowMs: config.traceBatchWindowMs,
 			sink,
 			...delegate ? { delegate } : {}
-		})), layer$9(sink));
+		})), layer$12(sink));
 	})).pipe(provide(layerFlusher), provideMerge(otlpSerializationLayer));
-	const metricsLayer = config.otlpMetricsUrl === void 0 ? empty$8 : layer$12({
+	const metricsLayer = config.otlpMetricsUrl === void 0 ? empty$8 : layer$15({
 		url: config.otlpMetricsUrl,
 		exportInterval: `${config.otlpExportIntervalMs} millis`,
 		resource: {
@@ -89527,11 +90498,11 @@ const orchestrationHttpApiLayer = group(EnvironmentHttpApi, "orchestration", fnU
 //#endregion
 //#region src/server.ts
 const HTTP_PREEMPTIVE_SHUTDOWN_GRACE_MS = 0;
-const ApplicationObservabilityLive = ObservabilityLive.pipe(provideMerge(layer$13));
-const ServerSettingsLayerLive = layer$22.pipe(provide(layer$32));
-const DesktopTelemetryReceiverLayerLive = layer$16.pipe(provideMerge(ServerSettingsLayerLive));
-const HostPowerMonitorLayerLive = layer$15.pipe(provide(DesktopTelemetryReceiverLayerLive));
-const BackgroundLayerLive = layer$14.pipe(provide(HostPowerMonitorLayerLive), provideMerge(ServerSettingsLayerLive));
+const ApplicationObservabilityLive = ObservabilityLive.pipe(provideMerge(layer$16));
+const ServerSettingsLayerLive = layer$25.pipe(provide(layer$35));
+const DesktopTelemetryReceiverLayerLive = layer$19.pipe(provideMerge(ServerSettingsLayerLive));
+const HostPowerMonitorLayerLive = layer$18.pipe(provide(DesktopTelemetryReceiverLayerLive));
+const BackgroundLayerLive = layer$17.pipe(provide(HostPowerMonitorLayerLive), provideMerge(ServerSettingsLayerLive));
 const HttpServerLive = unwrap(gen(function* () {
 	const config = yield* ServerConfig;
 	if (typeof Bun !== "undefined") return (yield* promise(() => import("@effect/platform-bun/BunHttpServer"))).layer({
@@ -89544,7 +90515,7 @@ const HttpServerLive = unwrap(gen(function* () {
 		} }
 	});
 	else {
-		const [NodeHttpServer, NodeHttp] = yield* all([promise(() => import("./NodeHttpServer-BGJlR_Kf.mjs")), promise(() => import("node:http"))]);
+		const [NodeHttpServer, NodeHttp] = yield* all([promise(() => import("./NodeHttpServer-D2VeYRw1.mjs")), promise(() => import("node:http"))]);
 		return NodeHttpServer.layer(NodeHttp.createServer, {
 			host: config.host ?? "127.0.0.1",
 			port: config.port,
@@ -89558,30 +90529,31 @@ const PlatformServicesLive = unwrap(gen(function* () {
 		const { layer } = yield* promise(() => import("@effect/platform-bun/BunServices"));
 		return layer;
 	} else {
-		const { layer } = yield* promise(() => import("./NodeServices-DDZTiw5K.mjs").then((n) => n.t));
+		const { layer } = yield* promise(() => import("./NodeServices-BtcL7AtO.mjs").then((n) => n.t));
 		return layer;
 	}
 }));
 const ReactorLayerLive = empty$8.pipe(provideMerge(OrchestrationReactorLive), provideMerge(ProviderRuntimeIngestionLive), provideMerge(ProviderCommandReactorLive), provideMerge(ThreadDeletionReactorLive), provideMerge(RuntimeReceiptBusLive));
-const ProviderSessionDirectoryLayerLive = ProviderSessionDirectoryLive.pipe(provide(layer$3));
+const ProviderSessionDirectoryLayerLive = ProviderSessionDirectoryLive.pipe(provide(layer$4));
 const ProviderLayerLive = ProviderServiceLive.pipe(provide(ProviderAdapterRegistryLive), provideMerge(ProviderSessionDirectoryLayerLive));
 const PersistenceLayerLive = empty$8.pipe(provideMerge(layerConfig));
-const WorkspaceEntriesLayerLive = layer$6.pipe(provide(layer$18));
-const WorkspaceLayerLive = mergeAll(layer$18, WorkspaceEntriesLayerLive, layer$5.pipe(provide(layer$18), provide(WorkspaceEntriesLayerLive)));
-const ProjectFaviconResolverLayerLive = layer$10.pipe(provide(layer$18), provide(layer$11));
-const AuthLayerLive = layer$29.pipe(provideMerge(PersistenceLayerLive), provide(layer$32));
+const WorkspaceEntriesLayerLive = layer$9.pipe(provide(layer$21));
+const WorkspaceLayerLive = mergeAll(layer$21, WorkspaceEntriesLayerLive, layer$8.pipe(provide(layer$21), provide(WorkspaceEntriesLayerLive)));
+const TerminalLayerLive = layer$6.pipe(provide(layer));
+const ProjectFaviconResolverLayerLive = layer$13.pipe(provide(layer$21), provide(layer$14));
+const AuthLayerLive = layer$32.pipe(provideMerge(PersistenceLayerLive), provide(layer$35));
 const ProviderRuntimeLayerLive = ProviderSessionReaperLive.pipe(provideMerge(ProviderLayerLive), provideMerge(OrchestrationLayerLive));
-const RuntimeDependenciesLive = ReactorLayerLive.pipe(provideMerge(ServerSettingsLayerLive), provideMerge(ProviderRuntimeLayerLive), provideMerge(PersistenceLayerLive), provideMerge(layer$25), provideMerge(layer$1), provideMerge(ProviderRegistryLive), provideMerge(ProviderInstanceRegistryHydrationLive), provideMerge(layer$2), provideMerge(WorkspaceLayerLive), provideMerge(ProjectFaviconResolverLayerLive), provideMerge(layer$26), provideMerge(layer$20), provideMerge(AuthLayerLive), provideMerge(layer$32)).pipe(provideMerge(BackgroundLayerLive), provideMerge(layer$21), provideMerge(layer$24), provideMerge(layer$23), provide(layer$39));
+const RuntimeDependenciesLive = ReactorLayerLive.pipe(provideMerge(ServerSettingsLayerLive), provideMerge(ProviderRuntimeLayerLive), provideMerge(PersistenceLayerLive), provideMerge(layer$28), provideMerge(layer$2), provideMerge(ProviderRegistryLive), provideMerge(ProviderInstanceRegistryHydrationLive), provideMerge(layer$3), provideMerge(WorkspaceLayerLive), provideMerge(layer$7), provideMerge(TerminalLayerLive), provideMerge(ProjectFaviconResolverLayerLive), provideMerge(layer$29), provideMerge(layer$23), provideMerge(AuthLayerLive), provideMerge(layer$35)).pipe(provideMerge(BackgroundLayerLive), provideMerge(layer$24), provideMerge(layer$27), provideMerge(layer$26), provide(layer$42));
 const commandReadinessLayer = middleware((httpEffect) => flatMap$1(ServerRuntimeStartup, (startup) => startup.awaitCommandReady.pipe(orDie, andThen(httpEffect))), { global: true });
-const makeRoutesLayer = mergeAll(layer$17(EnvironmentHttpApi).pipe(provide(authHttpApiLayer), provide(connectHttpApiLayer), provide(orchestrationHttpApiLayer), provide(serverEnvironmentHttpApiLayer), provide(environmentAuthenticatedAuthLayer)), otlpTracesProxyRouteLayer, assetRouteLayer, staticAndDevRouteLayer, websocketRpcRouteLayer).pipe(provide(commandReadinessLayer), provide(browserApiCorsLayer), provide(httpCompressionLayer));
+const makeRoutesLayer = mergeAll(layer$20(EnvironmentHttpApi).pipe(provide(authHttpApiLayer), provide(connectHttpApiLayer), provide(orchestrationHttpApiLayer), provide(serverEnvironmentHttpApiLayer), provide(environmentAuthenticatedAuthLayer)), otlpTracesProxyRouteLayer, assetRouteLayer, staticAndDevRouteLayer, websocketRpcRouteLayer).pipe(provide(commandReadinessLayer), provide(browserApiCorsLayer), provide(httpCompressionLayer));
 const runServer = launch(unwrap(gen(function* () {
 	const config = yield* ServerConfig;
-	const activation = yield* make$70();
+	const activation = yield* make$73();
 	const awaitActivation = _await(activation);
 	const activationLayer = succeed$3(ServerActivation, awaitActivation);
-	const runtimeStateParked = yield* make$70();
-	const tailscaleParked = yield* make$70();
-	const routesReady = yield* make$70();
+	const runtimeStateParked = yield* make$73();
+	const tailscaleParked = yield* make$73();
+	const routesReady = yield* make$73();
 	yield* fixPath();
 	const httpListeningLayer = effectDiscard(gen(function* () {
 		yield* HttpServer;
@@ -89635,7 +90607,7 @@ const runServer = launch(unwrap(gen(function* () {
 			...config.tailscaleServeEnabled ? [_await(tailscaleParked)] : []
 		], { concurrency: "unbounded" }).pipe(asVoid)
 	}).pipe(provideMerge(RuntimeDependenciesLive));
-	return mergeAll(serve(makeRoutesLayer, { disableLogger: !config.logWebSocketEvents }).pipe(tap$1(() => succeed$4(routesReady, void 0).pipe(orDie))), httpListeningLayer, runtimeStateLayer, tailscaleServeLayer, config.hubTunnel ? layer$4(config.hubTunnel).pipe(provideMerge(runtimeServicesLive)) : empty$8).pipe(provideMerge(runtimeServicesLive), provide(activationLayer), provideMerge(HttpServerLive), provide(ApplicationObservabilityLive), provideMerge(layer$40), provideMerge(PlatformServicesLive));
+	return mergeAll(serve(makeRoutesLayer, { disableLogger: !config.logWebSocketEvents }).pipe(tap$1(() => succeed$4(routesReady, void 0).pipe(orDie))), httpListeningLayer, runtimeStateLayer, tailscaleServeLayer, config.hubTunnel ? layer$5(config.hubTunnel).pipe(provideMerge(runtimeServicesLive)) : empty$8).pipe(provideMerge(runtimeServicesLive), provide(activationLayer), provideMerge(HttpServerLive), provide(ApplicationObservabilityLive), provideMerge(layer$43), provideMerge(PlatformServicesLive));
 })));
 //#endregion
 //#region src/cli/server.ts
@@ -89647,15 +90619,15 @@ const runServerCommand = (flags, options) => gen(function* () {
 	});
 	return yield* runServer.pipe(provideService(ServerConfig, config), ensuring(sync(releaseDaemonLock)));
 });
-const startCommand = make$59("start", { ...sharedServerCommandFlags }).pipe(withDescription("Run the T3 Code server."), withHandler((flags) => runServerCommand(flags)));
-const serveCommand = make$59("serve", { ...sharedServerCommandFlags }).pipe(withDescription("Run the T3 Code server without opening a browser."), withHandler((flags) => runServerCommand(flags, {
+const startCommand = make$62("start", { ...sharedServerCommandFlags }).pipe(withDescription("Run the T3 Code server."), withHandler((flags) => runServerCommand(flags)));
+const serveCommand = make$62("serve", { ...sharedServerCommandFlags }).pipe(withDescription("Run the T3 Code server without opening a browser."), withHandler((flags) => runServerCommand(flags, {
 	startupPresentation: "headless",
 	forceAutoBootstrapProjectFromCwd: false
 })));
 //#endregion
 //#region src/bin.ts
-const CliRuntimeLayer = mergeAll(layer$41, layer$39);
-const makeCli = () => make$59("t3", { ...sharedServerCommandFlags }).pipe(withDescription("Run the T3 Code server."), withHandler((flags) => runServerCommand(flags)), withSubcommands([
+const CliRuntimeLayer = mergeAll(layer$44, layer$42);
+const makeCli = () => make$62("t3", { ...sharedServerCommandFlags }).pipe(withDescription("Run the T3 Code server."), withHandler((flags) => runServerCommand(flags)), withSubcommands([
 	startCommand,
 	serveCommand,
 	pairCommand,