branchora-opencode 1.0.0 → 1.1.0

package/dist/index.js

@@ -8,7 +8,7 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// node_modules/zod/v4/core/util.js
+// ../../opt/toolchain/node_modules/zod/v4/core/util.js
 var util_exports = {};
 __export(util_exports, {
   BIGINT_FORMAT_RANGES: () => BIGINT_FORMAT_RANGES,
@@ -754,7 +754,7 @@ function constantCatch(value) {
 }
 var Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH;
 var init_util = __esm({
-  "node_modules/zod/v4/core/util.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/util.js"() {
     init_core();
     Cached = class {
       constructor(getter) {
@@ -869,7 +869,7 @@ var init_util = __esm({
   }
 });
 
-// node_modules/zod/v4/core/core.js
+// ../../opt/toolchain/node_modules/zod/v4/core/core.js
 function newError(Definition) {
   const E = _E;
   if (E) {
@@ -972,7 +972,7 @@ function config(newConfig) {
 }
 var _a, NEVER, _zodDesc, _E, $brand, $ZodAsyncError, $ZodEncodeError, globalConfig;
 var init_core = __esm({
-  "node_modules/zod/v4/core/core.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/core.js"() {
     init_util();
     NEVER = /* @__PURE__ */ Object.freeze({
       status: "aborted"
@@ -996,7 +996,7 @@ var init_core = __esm({
   }
 });
 
-// node_modules/zod/v4/core/errors.js
+// ../../opt/toolchain/node_modules/zod/v4/core/errors.js
 function _getMessage() {
   const internals = this._zod;
   internals.message ?? (internals.message = JSON.stringify(internals.def, jsonStringifyReplacer, 2));
@@ -1154,7 +1154,7 @@ function prettifyError(error62) {
 }
 var _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError;
 var init_errors = __esm({
-  "node_modules/zod/v4/core/errors.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/errors.js"() {
     init_core();
     init_util();
     _messageDesc = {
@@ -1195,7 +1195,7 @@ var init_errors = __esm({
   }
 });
 
-// node_modules/zod/v4/core/parse.js
+// ../../opt/toolchain/node_modules/zod/v4/core/parse.js
 function finalizeParams(callee, params) {
   return { callee: params?.callee ?? callee, Err: params?.Err };
 }
@@ -1235,7 +1235,7 @@ function validateFallback(schema, value, _ctx) {
 }
 var _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, encode, _decode, decode, _encodeAsync, encodeAsync, _decodeAsync, decodeAsync, _safeEncode, safeEncode, _safeDecode, safeDecode, _safeEncodeAsync, safeEncodeAsync, _safeDecodeAsync, safeDecodeAsync;
 var init_parse = __esm({
-  "node_modules/zod/v4/core/parse.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/parse.js"() {
     init_core();
     init_errors();
     init_util();
@@ -1363,7 +1363,7 @@ var init_parse = __esm({
   }
 });
 
-// node_modules/zod/v4/core/regexes.js
+// ../../opt/toolchain/node_modules/zod/v4/core/regexes.js
 var regexes_exports = {};
 __export(regexes_exports, {
   anyString: () => anyString,
@@ -1464,7 +1464,7 @@ function fixedBase64url(length) {
 }
 var cuid, cuid2, ulid, xid, ksuid, nanoid, duration, extendedDuration, guid, uuid, uuid4, uuid6, uuid7, email, html5Email, rfc5322Email, unicodeEmail, idnEmail, browserEmail, _emoji, ipv4, ipv6, mac, cidrv4, cidrv6, base64, base64url, hostname, domain, httpProtocol, e164, creditCard, currencyCode, iban, dateSource, date, anyString, string, bigint, integer, number, boolean, _null, _undefined, lowercase, uppercase, hex, md5_hex, md5_base64, md5_base64url, sha1_hex, sha1_base64, sha1_base64url, sha256_hex, sha256_base64, sha256_base64url, sha384_hex, sha384_base64, sha384_base64url, sha512_hex, sha512_base64, sha512_base64url;
 var init_regexes = __esm({
-  "node_modules/zod/v4/core/regexes.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/regexes.js"() {
     init_util();
     cuid = /^[cC][0-9a-z]{6,}$/;
     cuid2 = /^[0-9a-z]+$/;
@@ -1541,7 +1541,7 @@ var init_regexes = __esm({
   }
 });
 
-// node_modules/zod/v4/core/checks.js
+// ../../opt/toolchain/node_modules/zod/v4/core/checks.js
 function handleCheckPropertyResult(result, payload, property) {
   if (result.issues.length) {
     payload.issues.push(...prefixIssues(property, result.issues));
@@ -1549,7 +1549,7 @@ function handleCheckPropertyResult(result, payload, property) {
 }
 var $ZodCheck, _whenHasSize, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckBigIntFormat, $ZodCheckMaxSize, $ZodCheckMinSize, $ZodCheckSizeEquals, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckProperty, $ZodCheckProperties, $ZodCheckMimeType, $ZodCheckOverwrite;
 var init_checks = __esm({
-  "node_modules/zod/v4/core/checks.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/checks.js"() {
     init_core();
     init_regexes();
     init_util();
@@ -2025,10 +2025,10 @@ var init_checks = __esm({
   }
 });
 
-// node_modules/zod/v4/core/doc.js
+// ../../opt/toolchain/node_modules/zod/v4/core/doc.js
 var Doc;
 var init_doc = __esm({
-  "node_modules/zod/v4/core/doc.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/doc.js"() {
     Doc = class {
       constructor(args = [], closed = {}) {
         this.content = [];
@@ -2071,10 +2071,10 @@ ${content.join("\n")}
   }
 });
 
-// node_modules/zod/v4/core/versions.js
+// ../../opt/toolchain/node_modules/zod/v4/core/versions.js
 var version;
 var init_versions = __esm({
-  "node_modules/zod/v4/core/versions.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/versions.js"() {
     version = {
       major: 4,
       minor: 6,
@@ -2083,7 +2083,7 @@ var init_versions = __esm({
   }
 });
 
-// node_modules/zod/v4/core/schemas.js
+// ../../opt/toolchain/node_modules/zod/v4/core/schemas.js
 async function validateAsync2(inst, value) {
   const ctx = { async: true };
   return toStandardResult(await inst._zod.run({ value, issues: [] }, ctx), ctx);
@@ -2764,7 +2764,7 @@ function handleRefineResult(result, payload, input2, inst) {
 }
 var $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodMAC, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, CC_SANITIZE, $ZodCreditCard, $ZodIBAN, $ZodJWT, $ZodCustomStringFormat, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodBigInt, $ZodBigIntFormat, $ZodSymbol, $ZodUndefined, $ZodNull, $ZodAny, $ZodUnknown, $ZodNever, $ZodVoid, $ZodDate, arraySize, mapSize, setSize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodXor, $ZodDiscriminatedUnion, $ZodIntersection, $ZodTuple, $ZodRecord, $ZodMap, $ZodSet, $ZodEnum, $ZodLiteral, $ZodFile, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodSuccess, $ZodCatch, $ZodNaN, $ZodPipe, $ZodCodec, $ZodPreprocess, $ZodReadonly, $ZodTemplateLiteral, $ZodFunction, $ZodPromise, $ZodLazy, $ZodCustom;
 var init_schemas = __esm({
-  "node_modules/zod/v4/core/schemas.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/schemas.js"() {
     init_checks();
     init_core();
     init_doc();
@@ -4538,7 +4538,7 @@ var init_schemas = __esm({
   }
 });
 
-// node_modules/zod/v4/core/memoizer.js
+// ../../opt/toolchain/node_modules/zod/v4/core/memoizer.js
 function isRef(value) {
   return value !== null && typeof value === "object";
 }
@@ -4702,7 +4702,7 @@ function isBackEdge(ctx, value) {
 }
 var $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open, memo;
 var init_memoizer = __esm({
-  "node_modules/zod/v4/core/memoizer.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/memoizer.js"() {
     init_util();
     $ZodCyclicError = class extends Error {
       constructor() {
@@ -4820,7 +4820,7 @@ var init_memoizer = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ar.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ar.js
 function ar_default() {
   return {
     localeError: error()
@@ -4828,7 +4828,7 @@ function ar_default() {
 }
 var error;
 var init_ar = __esm({
-  "node_modules/zod/v4/locales/ar.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ar.js"() {
     init_util();
     error = () => {
       const Sizable = {
@@ -4938,7 +4938,7 @@ var init_ar = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/az.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/az.js
 function az_default() {
   return {
     localeError: error2()
@@ -4946,7 +4946,7 @@ function az_default() {
 }
 var error2;
 var init_az = __esm({
-  "node_modules/zod/v4/locales/az.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/az.js"() {
     init_util();
     error2 = () => {
       const Sizable = {
@@ -5055,7 +5055,7 @@ var init_az = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/be.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/be.js
 function getBelarusianPlural(count2, one, few, many) {
   const absCount = Math.abs(count2);
   const lastDigit = absCount % 10;
@@ -5078,7 +5078,7 @@ function be_default() {
 }
 var error3;
 var init_be = __esm({
-  "node_modules/zod/v4/locales/be.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/be.js"() {
     init_util();
     error3 = () => {
       const Sizable = {
@@ -5230,7 +5230,7 @@ var init_be = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/bg.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/bg.js
 function bg_default() {
   return {
     localeError: error4()
@@ -5238,7 +5238,7 @@ function bg_default() {
 }
 var error4;
 var init_bg = __esm({
-  "node_modules/zod/v4/locales/bg.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/bg.js"() {
     init_util();
     error4 = () => {
       const Sizable = {
@@ -5362,7 +5362,7 @@ var init_bg = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/bn.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/bn.js
 function bn_default() {
   return {
     localeError: error5()
@@ -5370,7 +5370,7 @@ function bn_default() {
 }
 var error5;
 var init_bn = __esm({
-  "node_modules/zod/v4/locales/bn.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/bn.js"() {
     init_util();
     error5 = () => {
       const Sizable = {
@@ -5482,7 +5482,7 @@ var init_bn = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ca.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ca.js
 function ca_default() {
   return {
     localeError: error6()
@@ -5490,7 +5490,7 @@ function ca_default() {
 }
 var error6;
 var init_ca = __esm({
-  "node_modules/zod/v4/locales/ca.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ca.js"() {
     init_util();
     error6 = () => {
       const Sizable = {
@@ -5602,7 +5602,7 @@ var init_ca = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ckb.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ckb.js
 function ckb_default() {
   return {
     localeError: error7()
@@ -5610,7 +5610,7 @@ function ckb_default() {
 }
 var error7;
 var init_ckb = __esm({
-  "node_modules/zod/v4/locales/ckb.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ckb.js"() {
     init_util();
     error7 = () => {
       const Sizable = {
@@ -5741,7 +5741,7 @@ var init_ckb = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/cs.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/cs.js
 function cs_default() {
   return {
     localeError: error8()
@@ -5749,7 +5749,7 @@ function cs_default() {
 }
 var error8;
 var init_cs = __esm({
-  "node_modules/zod/v4/locales/cs.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/cs.js"() {
     init_util();
     error8 = () => {
       const Sizable = {
@@ -5864,7 +5864,7 @@ var init_cs = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/da.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/da.js
 function da_default() {
   return {
     localeError: error9()
@@ -5872,7 +5872,7 @@ function da_default() {
 }
 var error9;
 var init_da = __esm({
-  "node_modules/zod/v4/locales/da.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/da.js"() {
     init_util();
     error9 = () => {
       const Sizable = {
@@ -5991,7 +5991,7 @@ var init_da = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/de.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/de.js
 function de_default() {
   return {
     localeError: error10()
@@ -5999,7 +5999,7 @@ function de_default() {
 }
 var error10;
 var init_de = __esm({
-  "node_modules/zod/v4/locales/de.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/de.js"() {
     init_util();
     error10 = () => {
       const Sizable = {
@@ -6111,7 +6111,7 @@ var init_de = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/el.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/el.js
 function el_default() {
   return {
     localeError: error11()
@@ -6119,7 +6119,7 @@ function el_default() {
 }
 var error11;
 var init_el = __esm({
-  "node_modules/zod/v4/locales/el.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/el.js"() {
     init_util();
     error11 = () => {
       const Sizable = {
@@ -6230,7 +6230,7 @@ var init_el = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/en.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/en.js
 function en_default() {
   return {
     localeError: error12()
@@ -6238,7 +6238,7 @@ function en_default() {
 }
 var error12;
 var init_en = __esm({
-  "node_modules/zod/v4/locales/en.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/en.js"() {
     init_util();
     error12 = () => {
       const Sizable = {
@@ -6361,7 +6361,7 @@ var init_en = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/eo.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/eo.js
 function eo_default() {
   return {
     localeError: error13()
@@ -6369,7 +6369,7 @@ function eo_default() {
 }
 var error13;
 var init_eo = __esm({
-  "node_modules/zod/v4/locales/eo.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/eo.js"() {
     init_util();
     error13 = () => {
       const Sizable = {
@@ -6482,7 +6482,7 @@ var init_eo = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/es.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/es.js
 function es_default() {
   return {
     localeError: error14()
@@ -6490,7 +6490,7 @@ function es_default() {
 }
 var error14;
 var init_es = __esm({
-  "node_modules/zod/v4/locales/es.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/es.js"() {
     init_util();
     error14 = () => {
       const Sizable = {
@@ -6625,7 +6625,7 @@ var init_es = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/fa.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/fa.js
 function fa_default() {
   return {
     localeError: error15()
@@ -6633,7 +6633,7 @@ function fa_default() {
 }
 var error15;
 var init_fa = __esm({
-  "node_modules/zod/v4/locales/fa.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/fa.js"() {
     init_util();
     error15 = () => {
       const Sizable = {
@@ -6751,7 +6751,7 @@ var init_fa = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/fi.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/fi.js
 function fi_default() {
   return {
     localeError: error16()
@@ -6759,7 +6759,7 @@ function fi_default() {
 }
 var error16;
 var init_fi = __esm({
-  "node_modules/zod/v4/locales/fi.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/fi.js"() {
     init_util();
     error16 = () => {
       const Sizable = {
@@ -6875,7 +6875,7 @@ var init_fi = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/fr.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/fr.js
 function fr_default() {
   return {
     localeError: error17()
@@ -6883,7 +6883,7 @@ function fr_default() {
 }
 var error17;
 var init_fr = __esm({
-  "node_modules/zod/v4/locales/fr.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/fr.js"() {
     init_util();
     error17 = () => {
       const Sizable = {
@@ -7011,7 +7011,7 @@ var init_fr = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/fr-CA.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/fr-CA.js
 function fr_CA_default() {
   return {
     localeError: error18()
@@ -7019,7 +7019,7 @@ function fr_CA_default() {
 }
 var error18;
 var init_fr_CA = __esm({
-  "node_modules/zod/v4/locales/fr-CA.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/fr-CA.js"() {
     init_util();
     error18 = () => {
       const Sizable = {
@@ -7130,7 +7130,7 @@ var init_fr_CA = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/gu.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/gu.js
 function gu_default() {
   return {
     localeError: error19()
@@ -7138,7 +7138,7 @@ function gu_default() {
 }
 var error19;
 var init_gu = __esm({
-  "node_modules/zod/v4/locales/gu.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/gu.js"() {
     init_util();
     error19 = () => {
       const Sizable = {
@@ -7250,7 +7250,7 @@ var init_gu = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/he.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/he.js
 function he_default() {
   return {
     localeError: error20()
@@ -7258,7 +7258,7 @@ function he_default() {
 }
 var error20;
 var init_he = __esm({
-  "node_modules/zod/v4/locales/he.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/he.js"() {
     init_util();
     error20 = () => {
       const TypeNames = {
@@ -7458,7 +7458,7 @@ var init_he = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/hi.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/hi.js
 function hi_default() {
   return {
     localeError: error21()
@@ -7466,7 +7466,7 @@ function hi_default() {
 }
 var error21;
 var init_hi = __esm({
-  "node_modules/zod/v4/locales/hi.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/hi.js"() {
     init_util();
     error21 = () => {
       const Sizable = {
@@ -7576,7 +7576,7 @@ var init_hi = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/hr.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/hr.js
 function hr_default() {
   return {
     localeError: error22()
@@ -7584,7 +7584,7 @@ function hr_default() {
 }
 var error22;
 var init_hr = __esm({
-  "node_modules/zod/v4/locales/hr.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/hr.js"() {
     init_util();
     error22 = () => {
       const Sizable = {
@@ -7709,7 +7709,7 @@ var init_hr = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/hu.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/hu.js
 function hu_default() {
   return {
     localeError: error23()
@@ -7717,7 +7717,7 @@ function hu_default() {
 }
 var error23;
 var init_hu = __esm({
-  "node_modules/zod/v4/locales/hu.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/hu.js"() {
     init_util();
     error23 = () => {
       const Sizable = {
@@ -7829,7 +7829,7 @@ var init_hu = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/hy.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/hy.js
 function getArmenianPlural(count2, one, many) {
   return Math.abs(count2) === 1 ? one : many;
 }
@@ -7847,7 +7847,7 @@ function hy_default() {
 }
 var error24;
 var init_hy = __esm({
-  "node_modules/zod/v4/locales/hy.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/hy.js"() {
     init_util();
     error24 = () => {
       const Sizable = {
@@ -7994,7 +7994,7 @@ var init_hy = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/id.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/id.js
 function id_default() {
   return {
     localeError: error25()
@@ -8002,7 +8002,7 @@ function id_default() {
 }
 var error25;
 var init_id = __esm({
-  "node_modules/zod/v4/locales/id.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/id.js"() {
     init_util();
     error25 = () => {
       const Sizable = {
@@ -8112,7 +8112,7 @@ var init_id = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/is.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/is.js
 function is_default() {
   return {
     localeError: error26()
@@ -8120,7 +8120,7 @@ function is_default() {
 }
 var error26;
 var init_is = __esm({
-  "node_modules/zod/v4/locales/is.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/is.js"() {
     init_util();
     error26 = () => {
       const Sizable = {
@@ -8233,7 +8233,7 @@ var init_is = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/it.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/it.js
 function it_default() {
   return {
     localeError: error27()
@@ -8241,7 +8241,7 @@ function it_default() {
 }
 var error27;
 var init_it = __esm({
-  "node_modules/zod/v4/locales/it.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/it.js"() {
     init_util();
     error27 = () => {
       const Sizable = {
@@ -8353,7 +8353,7 @@ var init_it = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ja.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ja.js
 function ja_default() {
   return {
     localeError: error28()
@@ -8361,7 +8361,7 @@ function ja_default() {
 }
 var error28;
 var init_ja = __esm({
-  "node_modules/zod/v4/locales/ja.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ja.js"() {
     init_util();
     error28 = () => {
       const Sizable = {
@@ -8472,7 +8472,7 @@ var init_ja = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ka.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ka.js
 function ka_default() {
   return {
     localeError: error29()
@@ -8480,7 +8480,7 @@ function ka_default() {
 }
 var error29;
 var init_ka = __esm({
-  "node_modules/zod/v4/locales/ka.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ka.js"() {
     init_util();
     error29 = () => {
       const Sizable = {
@@ -8596,7 +8596,7 @@ var init_ka = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/km.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/km.js
 function km_default() {
   return {
     localeError: error30()
@@ -8604,7 +8604,7 @@ function km_default() {
 }
 var error30;
 var init_km = __esm({
-  "node_modules/zod/v4/locales/km.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/km.js"() {
     init_util();
     error30 = () => {
       const Sizable = {
@@ -8718,17 +8718,17 @@ var init_km = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/kh.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/kh.js
 function kh_default() {
   return km_default();
 }
 var init_kh = __esm({
-  "node_modules/zod/v4/locales/kh.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/kh.js"() {
     init_km();
   }
 });
 
-// node_modules/zod/v4/locales/kn.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/kn.js
 function kn_default() {
   return {
     localeError: error31()
@@ -8736,7 +8736,7 @@ function kn_default() {
 }
 var error31;
 var init_kn = __esm({
-  "node_modules/zod/v4/locales/kn.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/kn.js"() {
     init_util();
     error31 = () => {
       const Sizable = {
@@ -8850,7 +8850,7 @@ var init_kn = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ko.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ko.js
 function ko_default() {
   return {
     localeError: error32()
@@ -8858,7 +8858,7 @@ function ko_default() {
 }
 var error32;
 var init_ko = __esm({
-  "node_modules/zod/v4/locales/ko.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ko.js"() {
     init_util();
     error32 = () => {
       const Sizable = {
@@ -8973,7 +8973,7 @@ var init_ko = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/lt.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/lt.js
 function getUnitTypeFromNumber(number4) {
   const abs = Math.abs(number4);
   const last = abs % 10;
@@ -8991,7 +8991,7 @@ function lt_default() {
 }
 var capitalizeFirstCharacter, error33;
 var init_lt = __esm({
-  "node_modules/zod/v4/locales/lt.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/lt.js"() {
     init_util();
     capitalizeFirstCharacter = (text) => {
       return text.charAt(0).toUpperCase() + text.slice(1);
@@ -9187,7 +9187,7 @@ var init_lt = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/mk.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/mk.js
 function mk_default() {
   return {
     localeError: error34()
@@ -9195,7 +9195,7 @@ function mk_default() {
 }
 var error34;
 var init_mk = __esm({
-  "node_modules/zod/v4/locales/mk.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/mk.js"() {
     init_util();
     error34 = () => {
       const Sizable = {
@@ -9308,7 +9308,7 @@ var init_mk = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ms.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ms.js
 function ms_default() {
   return {
     localeError: error35()
@@ -9316,7 +9316,7 @@ function ms_default() {
 }
 var error35;
 var init_ms = __esm({
-  "node_modules/zod/v4/locales/ms.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ms.js"() {
     init_util();
     error35 = () => {
       const Sizable = {
@@ -9427,7 +9427,7 @@ var init_ms = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ne.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ne.js
 function ne_default() {
   return {
     localeError: error36()
@@ -9435,7 +9435,7 @@ function ne_default() {
 }
 var error36;
 var init_ne = __esm({
-  "node_modules/zod/v4/locales/ne.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ne.js"() {
     init_util();
     error36 = () => {
       const Sizable = {
@@ -9545,7 +9545,7 @@ var init_ne = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/nl.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/nl.js
 function nl_default() {
   return {
     localeError: error37()
@@ -9553,7 +9553,7 @@ function nl_default() {
 }
 var error37;
 var init_nl = __esm({
-  "node_modules/zod/v4/locales/nl.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/nl.js"() {
     init_util();
     error37 = () => {
       const Sizable = {
@@ -9667,7 +9667,7 @@ var init_nl = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/nn.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/nn.js
 function nn_default() {
   return {
     localeError: error38()
@@ -9675,7 +9675,7 @@ function nn_default() {
 }
 var error38;
 var init_nn = __esm({
-  "node_modules/zod/v4/locales/nn.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/nn.js"() {
     init_util();
     error38 = () => {
       const Sizable = {
@@ -9787,7 +9787,7 @@ var init_nn = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/no.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/no.js
 function no_default() {
   return {
     localeError: error39()
@@ -9795,7 +9795,7 @@ function no_default() {
 }
 var error39;
 var init_no = __esm({
-  "node_modules/zod/v4/locales/no.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/no.js"() {
     init_util();
     error39 = () => {
       const Sizable = {
@@ -9907,7 +9907,7 @@ var init_no = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ota.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ota.js
 function ota_default() {
   return {
     localeError: error40()
@@ -9915,7 +9915,7 @@ function ota_default() {
 }
 var error40;
 var init_ota = __esm({
-  "node_modules/zod/v4/locales/ota.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ota.js"() {
     init_util();
     error40 = () => {
       const Sizable = {
@@ -10028,7 +10028,7 @@ var init_ota = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ps.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ps.js
 function ps_default() {
   return {
     localeError: error41()
@@ -10036,7 +10036,7 @@ function ps_default() {
 }
 var error41;
 var init_ps = __esm({
-  "node_modules/zod/v4/locales/ps.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ps.js"() {
     init_util();
     error41 = () => {
       const Sizable = {
@@ -10154,7 +10154,7 @@ var init_ps = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/pl.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/pl.js
 function pl_default() {
   return {
     localeError: error42()
@@ -10162,7 +10162,7 @@ function pl_default() {
 }
 var error42;
 var init_pl = __esm({
-  "node_modules/zod/v4/locales/pl.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/pl.js"() {
     init_util();
     error42 = () => {
       const Sizable = {
@@ -10275,7 +10275,7 @@ var init_pl = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/pt.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/pt.js
 function pt_default() {
   return {
     localeError: error43()
@@ -10283,7 +10283,7 @@ function pt_default() {
 }
 var error43;
 var init_pt = __esm({
-  "node_modules/zod/v4/locales/pt.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/pt.js"() {
     init_util();
     error43 = () => {
       const Sizable = {
@@ -10425,7 +10425,7 @@ var init_pt = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/pt-BR.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/pt-BR.js
 function pt_BR_default() {
   return {
     localeError: error44()
@@ -10433,7 +10433,7 @@ function pt_BR_default() {
 }
 var error44;
 var init_pt_BR = __esm({
-  "node_modules/zod/v4/locales/pt-BR.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/pt-BR.js"() {
     init_util();
     error44 = () => {
       const Sizable = {
@@ -10576,7 +10576,7 @@ var init_pt_BR = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ro.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ro.js
 function ro_default() {
   return {
     localeError: error45()
@@ -10584,7 +10584,7 @@ function ro_default() {
 }
 var error45;
 var init_ro = __esm({
-  "node_modules/zod/v4/locales/ro.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ro.js"() {
     init_util();
     error45 = () => {
       const Sizable = {
@@ -10705,7 +10705,7 @@ var init_ro = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ru.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ru.js
 function getRussianPlural(count2, one, few, many) {
   const absCount = Math.abs(count2);
   const lastDigit = absCount % 10;
@@ -10728,7 +10728,7 @@ function ru_default() {
 }
 var error46;
 var init_ru = __esm({
-  "node_modules/zod/v4/locales/ru.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ru.js"() {
     init_util();
     error46 = () => {
       const Sizable = {
@@ -10880,7 +10880,7 @@ var init_ru = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/sk.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/sk.js
 function sk_default() {
   return {
     localeError: error47()
@@ -10888,7 +10888,7 @@ function sk_default() {
 }
 var error47;
 var init_sk = __esm({
-  "node_modules/zod/v4/locales/sk.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/sk.js"() {
     init_util();
     error47 = () => {
       const Sizable = {
@@ -11003,7 +11003,7 @@ var init_sk = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/sl.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/sl.js
 function sl_default() {
   return {
     localeError: error48()
@@ -11011,7 +11011,7 @@ function sl_default() {
 }
 var error48;
 var init_sl = __esm({
-  "node_modules/zod/v4/locales/sl.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/sl.js"() {
     init_util();
     error48 = () => {
       const Sizable = {
@@ -11124,7 +11124,7 @@ var init_sl = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/sv.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/sv.js
 function sv_default() {
   return {
     localeError: error49()
@@ -11132,7 +11132,7 @@ function sv_default() {
 }
 var error49;
 var init_sv = __esm({
-  "node_modules/zod/v4/locales/sv.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/sv.js"() {
     init_util();
     error49 = () => {
       const Sizable = {
@@ -11246,7 +11246,7 @@ var init_sv = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ta.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ta.js
 function ta_default() {
   return {
     localeError: error50()
@@ -11254,7 +11254,7 @@ function ta_default() {
 }
 var error50;
 var init_ta = __esm({
-  "node_modules/zod/v4/locales/ta.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ta.js"() {
     init_util();
     error50 = () => {
       const Sizable = {
@@ -11368,7 +11368,7 @@ var init_ta = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/tg.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/tg.js
 function tg_default() {
   return {
     localeError: error51()
@@ -11376,7 +11376,7 @@ function tg_default() {
 }
 var error51;
 var init_tg = __esm({
-  "node_modules/zod/v4/locales/tg.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/tg.js"() {
     init_util();
     error51 = () => {
       const Sizable = {
@@ -11491,7 +11491,7 @@ var init_tg = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/th.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/th.js
 function th_default() {
   return {
     localeError: error52()
@@ -11499,7 +11499,7 @@ function th_default() {
 }
 var error52;
 var init_th = __esm({
-  "node_modules/zod/v4/locales/th.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/th.js"() {
     init_util();
     error52 = () => {
       const Sizable = {
@@ -11613,7 +11613,7 @@ var init_th = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/tk.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/tk.js
 function tk_default() {
   return {
     localeError: error53()
@@ -11621,7 +11621,7 @@ function tk_default() {
 }
 var error53;
 var init_tk = __esm({
-  "node_modules/zod/v4/locales/tk.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/tk.js"() {
     init_util();
     error53 = () => {
       const Sizable = {
@@ -11727,7 +11727,7 @@ var init_tk = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/tr.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/tr.js
 function tr_default() {
   return {
     localeError: error54()
@@ -11735,7 +11735,7 @@ function tr_default() {
 }
 var error54;
 var init_tr = __esm({
-  "node_modules/zod/v4/locales/tr.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/tr.js"() {
     init_util();
     error54 = () => {
       const Sizable = {
@@ -11844,7 +11844,7 @@ var init_tr = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/uk.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/uk.js
 function uk_default() {
   return {
     localeError: error55()
@@ -11852,7 +11852,7 @@ function uk_default() {
 }
 var error55;
 var init_uk = __esm({
-  "node_modules/zod/v4/locales/uk.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/uk.js"() {
     init_util();
     error55 = () => {
       const Sizable = {
@@ -11964,17 +11964,17 @@ var init_uk = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/ua.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ua.js
 function ua_default() {
   return uk_default();
 }
 var init_ua = __esm({
-  "node_modules/zod/v4/locales/ua.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ua.js"() {
     init_uk();
   }
 });
 
-// node_modules/zod/v4/locales/ur.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/ur.js
 function ur_default() {
   return {
     localeError: error56()
@@ -11982,7 +11982,7 @@ function ur_default() {
 }
 var error56;
 var init_ur = __esm({
-  "node_modules/zod/v4/locales/ur.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/ur.js"() {
     init_util();
     error56 = () => {
       const Sizable = {
@@ -12096,7 +12096,7 @@ var init_ur = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/uz.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/uz.js
 function uz_default() {
   return {
     localeError: error57()
@@ -12104,7 +12104,7 @@ function uz_default() {
 }
 var error57;
 var init_uz = __esm({
-  "node_modules/zod/v4/locales/uz.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/uz.js"() {
     init_util();
     error57 = () => {
       const Sizable = {
@@ -12216,7 +12216,7 @@ var init_uz = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/vi.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/vi.js
 function vi_default() {
   return {
     localeError: error58()
@@ -12224,7 +12224,7 @@ function vi_default() {
 }
 var error58;
 var init_vi = __esm({
-  "node_modules/zod/v4/locales/vi.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/vi.js"() {
     init_util();
     error58 = () => {
       const Sizable = {
@@ -12336,7 +12336,7 @@ var init_vi = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/zh-CN.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/zh-CN.js
 function zh_CN_default() {
   return {
     localeError: error59()
@@ -12344,7 +12344,7 @@ function zh_CN_default() {
 }
 var error59;
 var init_zh_CN = __esm({
-  "node_modules/zod/v4/locales/zh-CN.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/zh-CN.js"() {
     init_util();
     error59 = () => {
       const Sizable = {
@@ -12457,7 +12457,7 @@ var init_zh_CN = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/zh-TW.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/zh-TW.js
 function zh_TW_default() {
   return {
     localeError: error60()
@@ -12465,7 +12465,7 @@ function zh_TW_default() {
 }
 var error60;
 var init_zh_TW = __esm({
-  "node_modules/zod/v4/locales/zh-TW.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/zh-TW.js"() {
     init_util();
     error60 = () => {
       const Sizable = {
@@ -12576,7 +12576,7 @@ var init_zh_TW = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/yo.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/yo.js
 function yo_default() {
   return {
     localeError: error61()
@@ -12584,7 +12584,7 @@ function yo_default() {
 }
 var error61;
 var init_yo = __esm({
-  "node_modules/zod/v4/locales/yo.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/yo.js"() {
     init_util();
     error61 = () => {
       const Sizable = {
@@ -12695,7 +12695,7 @@ var init_yo = __esm({
   }
 });
 
-// node_modules/zod/v4/locales/index.js
+// ../../opt/toolchain/node_modules/zod/v4/locales/index.js
 var locales_exports = {};
 __export(locales_exports, {
   ar: () => ar_default,
@@ -12763,7 +12763,7 @@ __export(locales_exports, {
   zhTW: () => zh_TW_default
 });
 var init_locales = __esm({
-  "node_modules/zod/v4/locales/index.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/locales/index.js"() {
     init_ar();
     init_az();
     init_be();
@@ -12830,13 +12830,13 @@ var init_locales = __esm({
   }
 });
 
-// node_modules/zod/v4/core/registries.js
+// ../../opt/toolchain/node_modules/zod/v4/core/registries.js
 function registry() {
   return new $ZodRegistry();
 }
 var _a2, $output, $input, $ZodRegistry, globalRegistry;
 var init_registries = __esm({
-  "node_modules/zod/v4/core/registries.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/registries.js"() {
     $output = /* @__PURE__ */ Symbol("ZodOutput");
     $input = /* @__PURE__ */ Symbol("ZodInput");
     $ZodRegistry = class {
@@ -12884,7 +12884,7 @@ var init_registries = __esm({
   }
 });
 
-// node_modules/zod/v4/core/compile.js
+// ../../opt/toolchain/node_modules/zod/v4/core/compile.js
 function compileValidator(schema, parser) {
   try {
     return compileFn(schema, { assertOnly: true });
@@ -14446,7 +14446,7 @@ function generateTransformCheck(doc, ctx, schema, accessor) {
 }
 var INVALID, FALLBACK_FLAG, ZodCompileAsyncError, ZodCompileUnsupportedError, WHEN_DEFAULTED_CHECKS, PATTERN_IS_COMPLETE;
 var init_compile = __esm({
-  "node_modules/zod/v4/core/compile.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/compile.js"() {
     init_core();
     init_doc();
     init_memoizer();
@@ -14505,7 +14505,7 @@ var init_compile = __esm({
   }
 });
 
-// node_modules/zod/v4/core/api.js
+// ../../opt/toolchain/node_modules/zod/v4/core/api.js
 function snapshotChecks(def) {
   if (def.checks)
     def.checks = [...def.checks];
@@ -15558,7 +15558,7 @@ function _stringFormat(Class2, format, fnOrRegex, _params = {}) {
 }
 var TimePrecision;
 var init_api = __esm({
-  "node_modules/zod/v4/core/api.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/api.js"() {
     init_checks();
     init_registries();
     init_schemas();
@@ -15573,7 +15573,7 @@ var init_api = __esm({
   }
 });
 
-// node_modules/zod/v4/core/to-json-schema.js
+// ../../opt/toolchain/node_modules/zod/v4/core/to-json-schema.js
 function assignProps(target, ...sources) {
   for (const source of sources) {
     for (const key of Reflect.ownKeys(source)) {
@@ -16089,7 +16089,7 @@ function isTransforming(_schema, _ctx) {
 }
 var FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod;
 var init_to_json_schema = __esm({
-  "node_modules/zod/v4/core/to-json-schema.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/to-json-schema.js"() {
     init_registries();
     init_util();
     FOLDABLE_KEYS = /* @__PURE__ */ new Set(["type", "properties", "required", "additionalProperties"]);
@@ -16110,7 +16110,7 @@ var init_to_json_schema = __esm({
   }
 });
 
-// node_modules/zod/v4/core/json-schema-processors.js
+// ../../opt/toolchain/node_modules/zod/v4/core/json-schema-processors.js
 function aggregateChecks(schema) {
   const agg = {};
   const def = schema._zod.def;
@@ -16260,7 +16260,7 @@ function toJSONSchema(input2, params) {
 }
 var narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors;
 var init_json_schema_processors = __esm({
-  "node_modules/zod/v4/core/json-schema-processors.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/json-schema-processors.js"() {
     init_regexes();
     init_schemas();
     init_to_json_schema();
@@ -16867,10 +16867,10 @@ var init_json_schema_processors = __esm({
   }
 });
 
-// node_modules/zod/v4/core/json-schema-generator.js
+// ../../opt/toolchain/node_modules/zod/v4/core/json-schema-generator.js
 var JSONSchemaGenerator;
 var init_json_schema_generator = __esm({
-  "node_modules/zod/v4/core/json-schema-generator.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/json-schema-generator.js"() {
     init_json_schema_processors();
     init_to_json_schema();
     JSONSchemaGenerator = class {
@@ -16952,14 +16952,14 @@ var init_json_schema_generator = __esm({
   }
 });
 
-// node_modules/zod/v4/core/json-schema.js
+// ../../opt/toolchain/node_modules/zod/v4/core/json-schema.js
 var json_schema_exports = {};
 var init_json_schema = __esm({
-  "node_modules/zod/v4/core/json-schema.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/json-schema.js"() {
   }
 });
 
-// node_modules/zod/v4/core/index.js
+// ../../opt/toolchain/node_modules/zod/v4/core/index.js
 var core_exports2 = {};
 __export(core_exports2, {
   $ZodAny: () => $ZodAny,
@@ -17276,7 +17276,7 @@ __export(core_exports2, {
   withParser: () => withParser
 });
 var init_core2 = __esm({
-  "node_modules/zod/v4/core/index.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/index.js"() {
     init_core();
     init_parse();
     init_errors();
@@ -17299,7 +17299,7 @@ var init_core2 = __esm({
   }
 });
 
-// node_modules/zod/v4/classic/checks.js
+// ../../opt/toolchain/node_modules/zod/v4/classic/checks.js
 var checks_exports2 = {};
 __export(checks_exports2, {
   endsWith: () => _endsWith,
@@ -17334,12 +17334,12 @@ __export(checks_exports2, {
   uppercase: () => _uppercase
 });
 var init_checks2 = __esm({
-  "node_modules/zod/v4/classic/checks.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/classic/checks.js"() {
     init_core2();
   }
 });
 
-// node_modules/zod/v4/classic/errors.js
+// ../../opt/toolchain/node_modules/zod/v4/classic/errors.js
 function _lazyMethod(proto, key, make) {
   Object.defineProperty(proto, key, {
     configurable: true,
@@ -17356,7 +17356,7 @@ function _lazyMethod(proto, key, make) {
 }
 var _installedErrorProtos, initializer2, ZodError, ZodRealError;
 var init_errors2 = __esm({
-  "node_modules/zod/v4/classic/errors.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/classic/errors.js"() {
     init_core2();
     init_core2();
     init_util();
@@ -17393,10 +17393,10 @@ var init_errors2 = __esm({
   }
 });
 
-// node_modules/zod/v4/classic/parse.js
+// ../../opt/toolchain/node_modules/zod/v4/classic/parse.js
 var parse2, parseAsync2, safeParse2, safeParseAsync2, encode2, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2;
 var init_parse2 = __esm({
-  "node_modules/zod/v4/classic/parse.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/classic/parse.js"() {
     init_core2();
     init_errors2();
     init_core2();
@@ -17415,7 +17415,7 @@ var init_parse2 = __esm({
   }
 });
 
-// node_modules/zod/v4/classic/schemas.js
+// ../../opt/toolchain/node_modules/zod/v4/classic/schemas.js
 var schemas_exports2 = {};
 __export(schemas_exports2, {
   ZodAny: () => ZodAny,
@@ -18089,7 +18089,7 @@ function preprocess(fn, schema) {
 }
 var ZodType, _ZodString, ZodString, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodMAC, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodCreditCard, ZodIBAN, ZodJWT, ZodCustomStringFormat, ZodNumber, ZodNumberFormat, ZodBoolean, ZodBigInt, ZodBigIntFormat, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodDate, ZodArray, ZodObject, ZodUnion, ZodXor, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodEnum, ZodLiteral, ZodFile, ZodTransform, ZodOptional, ZodExactOptional, ZodNullable, ZodDefault, ZodPrefault, ZodNonOptional, ZodSuccess, ZodCatch, ZodNaN, ZodPipe, ZodCodec, ZodPreprocess, ZodReadonly, ZodTemplateLiteral, ZodLazy, ZodPromise, ZodFunction, ZodCustom, describe2, meta2, ZodInstanceOf, stringbool;
 var init_schemas2 = __esm({
-  "node_modules/zod/v4/classic/schemas.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/classic/schemas.js"() {
     init_core2();
     init_core2();
     init_json_schema_processors();
@@ -19072,7 +19072,7 @@ var init_schemas2 = __esm({
   }
 });
 
-// node_modules/zod/v4/classic/compat.js
+// ../../opt/toolchain/node_modules/zod/v4/classic/compat.js
 function setErrorMap(map2) {
   config({
     customError: map2
@@ -19083,7 +19083,7 @@ function getErrorMap() {
 }
 var ZodIssueCode, ZodFirstPartyTypeKind;
 var init_compat = __esm({
-  "node_modules/zod/v4/classic/compat.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/classic/compat.js"() {
     init_core2();
     ZodIssueCode = {
       invalid_type: "invalid_type",
@@ -19103,7 +19103,7 @@ var init_compat = __esm({
   }
 });
 
-// node_modules/zod/v4/classic/iso.js
+// ../../opt/toolchain/node_modules/zod/v4/classic/iso.js
 var iso_exports = {};
 __export(iso_exports, {
   ZodISODate: () => ZodISODate,
@@ -19128,14 +19128,14 @@ function duration2(params) {
   return _isoDuration(ZodISODuration, params);
 }
 var init_iso = __esm({
-  "node_modules/zod/v4/classic/iso.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/classic/iso.js"() {
     init_core2();
     init_schemas2();
     init_schemas2();
   }
 });
 
-// node_modules/zod/v4/classic/from-json-schema.js
+// ../../opt/toolchain/node_modules/zod/v4/classic/from-json-schema.js
 function detectVersion(schema, defaultTarget) {
   const $schema = schema.$schema;
   if ($schema === "https://json-schema.org/draft/2020-12/schema") {
@@ -19766,7 +19766,7 @@ function fromJSONSchema(schema, params) {
 }
 var z, RECOGNIZED_KEYS, SCHEMA_KEYWORDS, SCHEMA_MAP_KEYWORDS, fullTime;
 var init_from_json_schema = __esm({
-  "node_modules/zod/v4/classic/from-json-schema.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/classic/from-json-schema.js"() {
     init_registries();
     init_util();
     init_checks2();
@@ -19878,7 +19878,7 @@ var init_from_json_schema = __esm({
   }
 });
 
-// node_modules/zod/v4/core/visit.js
+// ../../opt/toolchain/node_modules/zod/v4/core/visit.js
 function visit(schema, fnOrHandlers) {
   const fn = typeof fnOrHandlers === "function" ? fnOrHandlers : (node2, rewritten) => {
     const h = fnOrHandlers[node2._zod.def.type];
@@ -20033,14 +20033,14 @@ function visit(schema, fnOrHandlers) {
 }
 var RESOLVING;
 var init_visit = __esm({
-  "node_modules/zod/v4/core/visit.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/core/visit.js"() {
     init_schemas();
     init_util();
     RESOLVING = Symbol("z.visit/resolving");
   }
 });
 
-// node_modules/zod/v4/classic/deep-partial.js
+// ../../opt/toolchain/node_modules/zod/v4/classic/deep-partial.js
 function deepPartial(schema) {
   return visit(schema, {
     object: (s) => s.partial(),
@@ -20052,13 +20052,13 @@ function deepPartial(schema) {
   });
 }
 var init_deep_partial = __esm({
-  "node_modules/zod/v4/classic/deep-partial.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/classic/deep-partial.js"() {
     init_visit();
     init_schemas2();
   }
 });
 
-// node_modules/zod/v4/classic/in-out.js
+// ../../opt/toolchain/node_modules/zod/v4/classic/in-out.js
 function withChecks(side, checks) {
   if (!checks?.length)
     return side;
@@ -20088,14 +20088,14 @@ function output(schema) {
   });
 }
 var init_in_out = __esm({
-  "node_modules/zod/v4/classic/in-out.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/classic/in-out.js"() {
     init_util();
     init_visit();
     init_schemas2();
   }
 });
 
-// node_modules/zod/v4/classic/coerce.js
+// ../../opt/toolchain/node_modules/zod/v4/classic/coerce.js
 var coerce_exports = {};
 __export(coerce_exports, {
   bigint: () => bigint3,
@@ -20120,13 +20120,13 @@ function date4(params) {
   return _coercedDate(ZodDate, params);
 }
 var init_coerce = __esm({
-  "node_modules/zod/v4/classic/coerce.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/classic/coerce.js"() {
     init_core2();
     init_schemas2();
   }
 });
 
-// node_modules/zod/v4/classic/external.js
+// ../../opt/toolchain/node_modules/zod/v4/classic/external.js
 var external_exports = {};
 __export(external_exports, {
   $brand: () => $brand,
@@ -20389,7 +20389,7 @@ __export(external_exports, {
   xor: () => xor
 });
 var init_external = __esm({
-  "node_modules/zod/v4/classic/external.js"() {
+  "../../opt/toolchain/node_modules/zod/v4/classic/external.js"() {
     init_core2();
     init_schemas2();
     init_checks2();
@@ -20408,9 +20408,9 @@ var init_external = __esm({
   }
 });
 
-// node_modules/zod/index.js
+// ../../opt/toolchain/node_modules/zod/index.js
 var init_zod = __esm({
-  "node_modules/zod/index.js"() {
+  "../../opt/toolchain/node_modules/zod/index.js"() {
     init_external();
     init_external();
   }
@@ -20716,7 +20716,7 @@ var init_redaction = __esm({
     SECRET_PATTERNS = [
       /\bsk-[A-Za-z0-9_-]{16,}\b/g,
       /\b(?:ghp|gho|github_pat)_[A-Za-z0-9_]{20,}\b/g,
-      /\b(?:tgk|tgs|art_v1)_[A-Za-z0-9_-]{20,}(?:\?expires=\d+)?/g,
+      /\b(?:tgk|tgs|brk|bag|art_v1)_[A-Za-z0-9_-]{20,}(?:\?expires=\d+)?/g,
       /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g,
       /\bAIza[A-Za-z0-9_-]{35}\b/g,
       /(?:Bearer\s+)[A-Za-z0-9._~+/-]{16,}=*/gi,
@@ -20762,6 +20762,30 @@ var init_context = __esm({
   }
 });
 
+// src/core/agent-identity.ts
+function matchesAgentBranch(branch, patterns) {
+  if (!branchSchema.safeParse(branch).success) return false;
+  return patterns.some(
+    (pattern) => pattern === "*" || (pattern.endsWith("*") ? branch.startsWith(pattern.slice(0, -1)) : branch === pattern)
+  );
+}
+var AGENT_CAPABILITIES;
+var init_agent_identity = __esm({
+  "src/core/agent-identity.ts"() {
+    "use strict";
+    init_schemas3();
+    AGENT_CAPABILITIES = [
+      "git:read",
+      "git:write",
+      "git:review",
+      "git:merge",
+      "git:check",
+      "execution:read",
+      "execution:write"
+    ];
+  }
+});
+
 // src/sdk/client.ts
 var TraceGitError, TraceGitClient, TraceExecution;
 var init_client = __esm({
@@ -20770,6 +20794,7 @@ var init_client = __esm({
     init_crypto();
     init_context();
     init_schemas3();
+    init_agent_identity();
     TraceGitError = class extends Error {
       constructor(code, message, status, details) {
         super(message);
@@ -20783,6 +20808,8 @@ var init_client = __esm({
       url;
       apiKey;
       transport;
+      authenticatedAgent;
+      pendingIdentity;
       constructor(options) {
         const url2 = new URL(options.url);
         if (url2.username || url2.password || url2.search || url2.hash || url2.protocol !== "https:" && !(url2.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url2.hostname)))
@@ -20793,6 +20820,100 @@ var init_client = __esm({
         this.apiKey = options.apiKey;
         this.transport = options.fetch ?? globalThis.fetch.bind(globalThis);
       }
+      get isAgentCredential() {
+        return this.apiKey.startsWith("bag_") || this.authenticatedAgent !== void 0;
+      }
+      rememberIdentity(principal) {
+        if (principal.source !== "agent") {
+          if (this.isAgentCredential)
+            throw new TraceGitError(
+              "agent_identity_required",
+              "Use an authenticated agent credential.",
+              403
+            );
+          return;
+        }
+        const identity2 = principal.agent;
+        if (!identity2 || principal.id !== identity2.agentId || principal.role !== "operator" || !idSchema.safeParse(principal.workspaceId).success || !idSchema.safeParse(identity2.agentId).success || !idSchema.safeParse(identity2.projectId).success || !idSchema.safeParse(identity2.credentialId).success || !Number.isSafeInteger(identity2.generation) || identity2.generation < 1 || !Array.isArray(identity2.capabilities) || identity2.capabilities.some((value) => !AGENT_CAPABILITIES.includes(value)) || !Array.isArray(identity2.writeBranches) || identity2.writeBranches.some((value) => typeof value !== "string"))
+          throw new TraceGitError(
+            "invalid_agent_identity",
+            "The service returned an invalid agent identity.",
+            502
+          );
+        if (this.authenticatedAgent && (this.authenticatedAgent.agentId !== identity2.agentId || this.authenticatedAgent.projectId !== identity2.projectId || this.authenticatedAgent.credentialId !== identity2.credentialId))
+          throw new TraceGitError(
+            "invalid_agent_identity",
+            "The credential identity changed unexpectedly.",
+            502
+          );
+        this.authenticatedAgent = {
+          ...identity2,
+          capabilities: [...identity2.capabilities],
+          writeBranches: [...identity2.writeBranches]
+        };
+      }
+      /** Resolves machine authority once; every Worker operation still rechecks live authority. */
+      async assignedAgent() {
+        if (!this.authenticatedAgent && this.isAgentCredential) {
+          this.pendingIdentity ??= this.agentIdentity().then((session) => session.principal.agent).catch((error62) => {
+            this.pendingIdentity = void 0;
+            throw error62;
+          });
+          await this.pendingIdentity;
+        }
+        return this.authenticatedAgent ? {
+          ...this.authenticatedAgent,
+          capabilities: [...this.authenticatedAgent.capabilities],
+          writeBranches: [...this.authenticatedAgent.writeBranches]
+        } : void 0;
+      }
+      async assertExecutionAgent(agentId) {
+        const identity2 = await this.assignedAgent();
+        if (identity2 && identity2.agentId !== agentId)
+          throw new TraceGitError(
+            "agent_execution_scope",
+            "Use the authenticated agent identity for execution evidence.",
+            403
+          );
+        if (identity2 && !identity2.capabilities.includes("execution:write"))
+          throw new TraceGitError(
+            "agent_capability_required",
+            "Execution writes are outside the agent grant.",
+            403
+          );
+      }
+      assertAdministration() {
+        if (this.isAgentCredential)
+          throw new TraceGitError(
+            "agent_administration_forbidden",
+            "Agent credentials cannot provision identities or administer service grants.",
+            403
+          );
+      }
+      async authorizeProject(projectId, capability, branch) {
+        idSchema.parse(projectId);
+        const identity2 = await this.assignedAgent();
+        if (!identity2) return;
+        if (projectId !== identity2.projectId)
+          throw new TraceGitError(
+            "agent_project_scope",
+            "The credential is assigned to another project.",
+            403
+          );
+        if (capability && !identity2.capabilities.includes(capability))
+          throw new TraceGitError(
+            "agent_capability_required",
+            "The operation is outside the agent grant.",
+            403,
+            { capability }
+          );
+        if (branch !== void 0 && !matchesAgentBranch(branch, identity2.writeBranches))
+          throw new TraceGitError(
+            "agent_branch_scope",
+            "The branch is outside the agent write grant.",
+            403
+          );
+      }
       async raw(path, init = {}) {
         if (!path.startsWith("/") || path.startsWith("//"))
           throw new Error("Expected an API-relative path");
@@ -20835,10 +20956,13 @@ var init_client = __esm({
           }
         }
       }
-      createAgent(options) {
+      async createAgent(options) {
+        this.assertAdministration();
         return this.request("/agents", "POST", { ...options, id: options.id ?? newId("agt") }, true);
       }
       async createRun(options) {
+        await this.authorizeProject(options.projectId, "execution:write", options.branch ?? "main");
+        await this.assertExecutionAgent(options.rootAgentId);
         const run = await this.request(
           "/runs",
           "POST",
@@ -20847,16 +20971,131 @@ var init_client = __esm({
         );
         return new TraceExecution(this, run.id, options.rootAgentId);
       }
+      async createAgentRun(options) {
+        const identity2 = await this.assignedAgent();
+        if (!identity2)
+          throw new TraceGitError(
+            "agent_identity_required",
+            "Use an agent credential to start an assigned execution.",
+            403
+          );
+        return this.createRun({
+          ...options,
+          projectId: identity2.projectId,
+          rootAgentId: identity2.agentId
+        });
+      }
       execution(runId, agentId) {
         return new TraceExecution(this, runId, agentId);
       }
-      events(events) {
+      async events(events) {
+        const identity2 = await this.assignedAgent();
+        if (identity2 && events.some((event) => event.agentId !== identity2.agentId))
+          throw new TraceGitError(
+            "agent_execution_scope",
+            "Events must use the authenticated agent identity.",
+            403
+          );
+        if (identity2 && !identity2.capabilities.includes("execution:write"))
+          throw new TraceGitError(
+            "agent_capability_required",
+            "Execution writes are outside the agent grant.",
+            403
+          );
         return this.request("/events", "POST", { events }, true);
       }
-      me() {
-        return this.request("/me");
+      async me() {
+        const result = await this.request("/me");
+        this.rememberIdentity(result.principal);
+        if (result.principal.source === "agent" && result.workspace.id !== result.principal.workspaceId)
+          throw new TraceGitError(
+            "invalid_agent_identity",
+            "The agent workspace metadata is inconsistent.",
+            502
+          );
+        return result;
+      }
+      async agentIdentity() {
+        const result = await this.request("/agent/me");
+        if (result.principal.source !== "agent" || result.protocol !== "branchora.agents.v1" || result.headless !== true)
+          throw new TraceGitError(
+            "invalid_agent_identity",
+            "The service did not return the headless agent protocol.",
+            502
+          );
+        this.rememberIdentity(result.principal);
+        return result;
+      }
+      async repositoryAutomation(projectId) {
+        await this.authorizeProject(projectId, "git:read");
+        return this.request(`/projects/${encodeURIComponent(projectId)}/automation`);
+      }
+      async configureAgentRepository(projectId, expectedVersion = 0) {
+        this.assertAdministration();
+        idSchema.parse(projectId);
+        return this.request(
+          `/projects/${encodeURIComponent(projectId)}/automation`,
+          "PUT",
+          { mode: "agents-only", expectedVersion }
+        );
+      }
+      async listAgentAccess(projectId) {
+        this.assertAdministration();
+        idSchema.parse(projectId);
+        return this.request(`/projects/${encodeURIComponent(projectId)}/agent-access`);
+      }
+      async grantAgentAccess(projectId, agentId, options) {
+        this.assertAdministration();
+        idSchema.parse(projectId);
+        idSchema.parse(agentId);
+        return this.request(
+          `/projects/${encodeURIComponent(projectId)}/agent-access/${encodeURIComponent(agentId)}`,
+          "PUT",
+          { ...options, expectedGeneration: options.expectedGeneration ?? 0 }
+        );
+      }
+      async issueAgentCredential(projectId, agentId, name, expiresInHours = 24) {
+        this.assertAdministration();
+        idSchema.parse(projectId);
+        idSchema.parse(agentId);
+        return this.request(`/projects/${encodeURIComponent(projectId)}/agent-credentials`, "POST", {
+          agentId,
+          name,
+          expiresInHours
+        });
+      }
+      async listAgentCredentials(projectId) {
+        this.assertAdministration();
+        idSchema.parse(projectId);
+        return this.request(`/projects/${encodeURIComponent(projectId)}/agent-credentials`);
+      }
+      async revokeAgentAccess(projectId, agentId) {
+        this.assertAdministration();
+        idSchema.parse(projectId);
+        idSchema.parse(agentId);
+        return this.request(
+          `/projects/${encodeURIComponent(projectId)}/agent-access/${encodeURIComponent(agentId)}`,
+          "DELETE"
+        );
+      }
+      async revokeAgentCredential(projectId, credentialId) {
+        this.assertAdministration();
+        idSchema.parse(projectId);
+        idSchema.parse(credentialId);
+        return this.request(
+          `/projects/${encodeURIComponent(projectId)}/agent-credentials/${encodeURIComponent(credentialId)}`,
+          "DELETE"
+        );
       }
       providerHeaders(runId, agentId, requestId = newId("req")) {
+        if (this.isAgentCredential && !this.authenticatedAgent)
+          throw new Error("Resolve agentIdentity() before creating provider headers.");
+        if (this.authenticatedAgent && agentId !== this.authenticatedAgent.agentId)
+          throw new TraceGitError(
+            "agent_execution_scope",
+            "Provider headers must use the authenticated agent identity.",
+            403
+          );
         return {
           "x-tracegit-key": this.apiKey,
           "x-tracegit-run-id": runId,
@@ -20865,11 +21104,103 @@ var init_client = __esm({
         };
       }
       gitTransport(projectId) {
+        idSchema.parse(projectId);
+        if (this.isAgentCredential && !this.authenticatedAgent)
+          throw new Error("Resolve agentIdentity() before creating a Git transport.");
+        if (this.authenticatedAgent && projectId !== this.authenticatedAgent.projectId)
+          throw new TraceGitError(
+            "agent_project_scope",
+            "Git transport must use the assigned project.",
+            403
+          );
         return {
-          remote: `${this.url}/git/${projectId}`,
+          remote: `${this.url}/git/${encodeURIComponent(projectId)}`,
           headers: { Authorization: `Bearer ${this.apiKey}` }
         };
       }
+      async repositoryRefs(projectId) {
+        await this.authorizeProject(projectId, "git:read");
+        return this.request(`/projects/${encodeURIComponent(projectId)}/refs`);
+      }
+      async readRepositoryFile(projectId, path, ref) {
+        await this.authorizeProject(projectId, "git:read");
+        pathSchema.parse(path);
+        const query = new URLSearchParams({ path, ...ref === void 0 ? {} : { ref } });
+        return this.request(`/projects/${encodeURIComponent(projectId)}/file?${query}`);
+      }
+      async compareRepository(projectId, base, head) {
+        await this.authorizeProject(projectId, "git:read");
+        const query = new URLSearchParams({ base, head });
+        return this.request(`/projects/${encodeURIComponent(projectId)}/compare?${query}`);
+      }
+      async createBranch(projectId, branch, from, operationId = newId("git")) {
+        branchSchema.parse(branch);
+        await this.authorizeProject(projectId, "git:write", branch);
+        return this.request(
+          `/projects/${encodeURIComponent(projectId)}/branches`,
+          "POST",
+          { operationId, branch, from },
+          true
+        );
+      }
+      async commitFiles(projectId, options) {
+        branchSchema.parse(options.branch);
+        if (options.expectedHead !== null) shaSchema.parse(options.expectedHead);
+        for (const file2 of options.files) pathSchema.parse(file2.path);
+        await this.authorizeProject(projectId, "git:write", options.branch);
+        return this.request(
+          `/projects/${encodeURIComponent(projectId)}/changes`,
+          "POST",
+          { ...options, operationId: options.operationId ?? newId("git") },
+          true
+        );
+      }
+      async listPullRequests(projectId) {
+        await this.authorizeProject(projectId, "git:read");
+        return this.request(`/projects/${encodeURIComponent(projectId)}/pulls`);
+      }
+      async pullRequest(projectId, pullId) {
+        await this.authorizeProject(projectId, "git:read");
+        idSchema.parse(pullId);
+        return this.request(
+          `/projects/${encodeURIComponent(projectId)}/pulls/${encodeURIComponent(pullId)}`
+        );
+      }
+      async openPullRequest(projectId, options) {
+        branchSchema.parse(options.sourceBranch);
+        branchSchema.parse(options.targetBranch);
+        await this.authorizeProject(projectId, "git:write", options.sourceBranch);
+        return this.request(`/projects/${encodeURIComponent(projectId)}/pulls`, "POST", options);
+      }
+      async reviewPullRequest(projectId, pullId, options) {
+        await this.authorizeProject(projectId, "git:review");
+        idSchema.parse(pullId);
+        shaSchema.parse(options.headSha);
+        return this.request(
+          `/projects/${encodeURIComponent(projectId)}/pulls/${encodeURIComponent(pullId)}/reviews`,
+          "POST",
+          options
+        );
+      }
+      async recordCommitCheck(projectId, options) {
+        await this.authorizeProject(projectId, "git:check");
+        shaSchema.parse(options.commitSha);
+        return this.request(`/projects/${encodeURIComponent(projectId)}/checks`, "POST", options);
+      }
+      async mergePullRequest(projectId, pullId, expectedVersion, operationId = newId("git")) {
+        await this.authorizeProject(projectId, "git:merge");
+        idSchema.parse(pullId);
+        return this.request(
+          `/projects/${encodeURIComponent(projectId)}/pulls/${encodeURIComponent(pullId)}/merge`,
+          "POST",
+          { expectedVersion, operationId },
+          true
+        );
+      }
+      publishRun(runId) {
+        idSchema.parse(runId);
+        return this.request(`/runs/${encodeURIComponent(runId)}/publish`, "POST", {});
+      }
       createWallet(options) {
         return this.request(
           "/wallets",
@@ -20996,6 +21327,7 @@ var init_client = __esm({
         this.blocks = [...blocks];
       }
       async decision(options) {
+        await this.client.assertExecutionAgent(this.agentId);
         const result = await this.client.request(
           `/runs/${this.runId}/decisions`,
           "POST",
@@ -21011,6 +21343,7 @@ var init_client = __esm({
         return result;
       }
       async instructions(content, source = "sdk-declared") {
+        await this.client.assertExecutionAgent(this.agentId);
         return this.client.request(
           `/runs/${this.runId}/instructions`,
           "POST",
@@ -21026,6 +21359,7 @@ var init_client = __esm({
         );
       }
       async delegate(options) {
+        await this.client.assertExecutionAgent(this.agentId);
         const agent = await this.client.createAgent(options);
         await this.client.request(
           `/runs/${this.runId}/agents`,
@@ -21040,6 +21374,7 @@ var init_client = __esm({
         return new _TraceExecution(this.client, this.runId, agent.id);
       }
       async generate(options) {
+        await this.client.assertExecutionAgent(this.agentId);
         const shared = await buildSharedContext(this.blocks);
         const messages = [
           ...options.system ? [{ role: "system", content: options.system }] : [],
@@ -21094,6 +21429,7 @@ var init_client = __esm({
         });
       }
       async complete(status, reason) {
+        await this.client.assertExecutionAgent(this.agentId);
         const detail = await this.client.request(`/runs/${this.runId}`);
         await this.client.request(`/runs/${this.runId}`, "PATCH", {
           status,
@@ -21113,6 +21449,7 @@ var init_client = __esm({
       /** Fetch adapter for provider SDKs. Every call goes through the economic gate. */
       instrumentedFetch(provider, providerKey, context = []) {
         return async (input2, init) => {
+          await this.client.assertExecutionAgent(this.agentId);
           const request = new Request(input2, init);
           if (request.method !== "POST")
             throw new Error("Instrumented provider transport only accepts inference POST requests.");
@@ -22158,7 +22495,7 @@ var init_catalog = __esm({
 
 // src/cli/provider-adapters.ts
 import { createHash, createHmac, createPrivateKey, sign } from "node:crypto";
-import { open as open2 } from "node:fs/promises";
+import { open as open3 } from "node:fs/promises";
 function secret(value, label) {
   if (!value || value.length > 32768 || /[\x00-\x20\x7f]/.test(value))
     throw new ProviderAdapterError(
@@ -22311,7 +22648,7 @@ function createGoogleServiceAccountAssertion(account, now = /* @__PURE__ */ new
   return `${input2}.${sign("RSA-SHA256", Buffer.from(input2), key).toString("base64url")}`;
 }
 async function readGoogleCredentials(path) {
-  const handle = await open2(path, "r").catch(() => {
+  const handle = await open3(path, "r").catch(() => {
     throw new ProviderAdapterError(
       "google_credentials_unreadable",
       "GOOGLE_APPLICATION_CREDENTIALS could not be opened."
@@ -23854,6 +24191,24 @@ import { promisify } from "node:util";
 import { mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";
 import { resolve, relative, sep } from "node:path";
 var execute = promisify(execFile);
+function gitTransportEnvironment(transport) {
+  const remote = new URL(transport.remote);
+  if (remote.username || remote.password || remote.search || remote.hash || remote.protocol !== "https:" && !(remote.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(remote.hostname)))
+    throw new Error("Expected a credential-free HTTPS or loopback Git remote.");
+  const authorization = new Headers(transport.headers).get("authorization");
+  if (!authorization || /[\r\n\0]/.test(authorization))
+    throw new Error("The Git transport requires a valid authorization header.");
+  return {
+    GIT_CONFIG_COUNT: "3",
+    GIT_CONFIG_KEY_0: `http.${transport.remote.replace(/\/$/, "")}/.extraHeader`,
+    GIT_CONFIG_VALUE_0: `Authorization: ${authorization}`,
+    GIT_CONFIG_KEY_1: "http.followRedirects",
+    GIT_CONFIG_VALUE_1: "false",
+    GIT_CONFIG_KEY_2: "credential.helper",
+    GIT_CONFIG_VALUE_2: "",
+    GIT_TERMINAL_PROMPT: "0"
+  };
+}
 var GitRepository = class _GitRepository {
   constructor(root) {
     this.root = root;
@@ -24014,21 +24369,18 @@ Run: ${runId}
     };
   }
   async push(remote, token, ref) {
-    if (!remote.startsWith("https://") || new URL(remote).username || new URL(remote).password)
-      throw new Error("Expected a credential-free HTTPS remote");
     if (!/^(refs\/tracegit\/checkpoints\/|refs\/heads\/|tracegit\/recovery\/|[a-zA-Z0-9])/.test(
       ref
     ) || ref.startsWith("-") || ref.includes(".."))
       throw new Error("Invalid push ref");
     await this.git(["push", remote, ref], {
-      env: {
-        GIT_CONFIG_COUNT: "1",
-        GIT_CONFIG_KEY_0: "http.extraHeader",
-        GIT_CONFIG_VALUE_0: `Authorization: Bearer ${token}`,
-        GIT_TERMINAL_PROMPT: "0"
-      }
+      env: gitTransportEnvironment({ remote, headers: { Authorization: `Bearer ${token}` } })
     });
   }
+  async authenticatedTransport(operation, transport, ref) {
+    branchSchema.parse(ref);
+    await this.git([operation, transport.remote, ref], { env: gitTransportEnvironment(transport) });
+  }
   async installBudgetHook(cliPath, tsxPath) {
     const hookPath = resolve(
       this.root,
@@ -24062,8 +24414,9 @@ import { resolve as resolve3 } from "node:path";
 
 // src/cli/credentials.ts
 init_client();
+init_schemas3();
 import { homedir } from "node:os";
-import { mkdir as mkdir2, readFile as readFile2, rename, writeFile as writeFile2 } from "node:fs/promises";
+import { mkdir as mkdir2, open as open2, readFile as readFile2, rename, unlink as unlink2, writeFile as writeFile2 } from "node:fs/promises";
 import { resolve as resolve2 } from "node:path";
 function globalConfigDirectory() {
   return process.env.BRANCHORA_CONFIG_DIR ?? resolve2(process.env.XDG_CONFIG_HOME ?? resolve2(homedir(), ".config"), "branchora");
@@ -24071,12 +24424,12 @@ function globalConfigDirectory() {
 function originKey(url2) {
   return new TraceGitClient({ url: url2, apiKey: "" }).url;
 }
-async function store() {
+async function store(directory = globalConfigDirectory()) {
   try {
     const value = JSON.parse(
-      await readFile2(resolve2(globalConfigDirectory(), "credentials.json"), "utf8")
+      await readFile2(resolve2(directory, "credentials.json"), "utf8")
     );
-    if (value.version !== 1 || !value.profiles || typeof value.profiles !== "object")
+    if (value.version !== 1 || !value.profiles || typeof value.profiles !== "object" || Array.isArray(value.profiles) || value.activeProfiles !== void 0 && (!value.activeProfiles || typeof value.activeProfiles !== "object" || Array.isArray(value.activeProfiles)))
       throw new Error("Unsupported Branchora credential store. Sign in again.");
     return value;
   } catch (error62) {
@@ -24084,22 +24437,76 @@ async function store() {
     return { version: 1, profiles: {} };
   }
 }
-async function readCredential(url2) {
-  const value = (await store()).profiles[originKey(url2)];
-  return value && typeof value.token === "string" ? value : null;
+function profileKey(url2, identity2) {
+  const base = originKey(url2);
+  if (!identity2) return base;
+  idSchema.parse(identity2.agentId);
+  idSchema.parse(identity2.projectId);
+  return `${base}#agent=${encodeURIComponent(identity2.agentId)}&project=${encodeURIComponent(identity2.projectId)}`;
+}
+function credentialAt(value, url2, identity2) {
+  const credential = value.profiles[profileKey(url2, identity2)];
+  if (!credential || credential.url !== originKey(url2) || typeof credential.token !== "string" || !credential.token || credential.token.length > 200 || /[\r\n\0]/.test(credential.token) || credential.agentId !== identity2?.agentId || credential.projectId !== identity2?.projectId || credential.token.startsWith("bag_") !== (identity2 !== void 0))
+    return null;
+  return credential;
+}
+async function readCredential(url2, identity2) {
+  return credentialAt(await store(), url2, identity2);
 }
-async function saveCredential(url2, token, workspaceId) {
-  const key = originKey(url2);
+async function readInputToken(tokenFile) {
+  const token = tokenFile !== void 0 ? (await readFile2(tokenFile, "utf8")).trim() : process.env.BRANCHORA_API_KEY ?? process.env.TRACEGIT_API_KEY;
+  if (token !== void 0 && (!token || token.length > 200 || /[\r\n\0]/.test(token)))
+    throw new Error("Invalid Branchora credential.");
+  return token;
+}
+async function saveCredential(url2, token, workspaceId, identity2, options = {}) {
+  const key = profileKey(url2, identity2);
   if (!token || token.length > 200 || /[\r\n\0]/.test(token))
     throw new Error("Invalid Branchora credential.");
-  const value = await store();
-  value.profiles[key] = { url: key, token, workspaceId, savedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  if (token.startsWith("bag_") && !identity2)
+    throw new Error("An agent credential must be stored with its assigned project and agent.");
+  if (identity2 && !token.startsWith("bag_"))
+    throw new Error("Store human credentials in the human profile.");
   const directory = globalConfigDirectory();
   await mkdir2(directory, { recursive: true, mode: 448 });
   const target = resolve2(directory, "credentials.json");
   const temporary = `${target}.${crypto.randomUUID()}.tmp`;
-  await writeFile2(temporary, JSON.stringify(value, null, 2), { mode: 384, flag: "wx" });
-  await rename(temporary, target);
+  const lockPath = `${target}.lock`;
+  const deadline = Date.now() + 5e3;
+  let lock;
+  for (; ; ) {
+    try {
+      lock = await open2(lockPath, "wx", 384);
+      break;
+    } catch (error62) {
+      if (error62.code !== "EEXIST") throw error62;
+      if (Date.now() >= deadline)
+        throw new Error("The Branchora credential store is busy. Retry the login.");
+      await new Promise((resolve7) => setTimeout(resolve7, 50));
+    }
+  }
+  try {
+    const value = await store(directory);
+    value.profiles[key] = {
+      url: originKey(url2),
+      token,
+      workspaceId,
+      ...identity2,
+      savedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    if (options.activate) {
+      value.activeProfiles ??= {};
+      value.activeProfiles[originKey(url2)] = key;
+    }
+    await writeFile2(temporary, JSON.stringify(value, null, 2), { mode: 384, flag: "wx" });
+    await rename(temporary, target);
+  } finally {
+    await lock.close();
+    await unlink2(lockPath);
+    await unlink2(temporary).catch((error62) => {
+      if (error62.code !== "ENOENT") throw error62;
+    });
+  }
 }
 
 // src/cli/config.ts
@@ -24109,6 +24516,7 @@ var projectConfigSchema = external_exports.object({
   projectId: external_exports.string(),
   agentId: external_exports.string(),
   integrationId: external_exports.string(),
+  credentialSource: external_exports.enum(["human", "agent"]).optional(),
   runId: external_exports.string().optional(),
   budgetMode: external_exports.enum(["enforce", "observe"]).default("observe"),
   maxOutputTokens: external_exports.number().int().positive().max(1e7).optional(),
@@ -24126,35 +24534,54 @@ async function projectConfigPath(root) {
   }
 }
 async function loadConfig(root) {
-  const config2 = projectConfigSchema.parse(
-    JSON.parse(await readFile3(await projectConfigPath(root), "utf8"))
-  );
-  let apiKey = process.env.BRANCHORA_API_KEY ?? process.env.TRACEGIT_API_KEY ?? (await readCredential(config2.url))?.token;
-  if (!apiKey) {
+  let config2 = await readProjectConfig(root);
+  const identity2 = { agentId: config2.agentId, projectId: config2.projectId };
+  let apiKey = await readInputToken();
+  if (!apiKey && config2.credentialSource !== "human")
+    apiKey = (await readCredential(config2.url, identity2))?.token;
+  if (!apiKey && config2.credentialSource !== "agent")
+    apiKey = (await readCredential(config2.url))?.token;
+  let legacyCredential = false;
+  if (!apiKey && config2.credentialSource !== "agent") {
     try {
       const credentials = JSON.parse(
         await readFile3(resolve3(root, ".tracegit", "credentials.json"), "utf8")
       );
-      apiKey = credentials.token ?? (config2.url.includes("localhost") || config2.url.includes("127.0.0.1") ? credentials.local?.token : credentials.production?.token);
-      if (apiKey) await saveCredential(config2.url, apiKey, config2.workspaceId);
+      apiKey = credentials.token ?? (["localhost", "127.0.0.1", "[::1]"].includes(new URL(config2.url).hostname) ? credentials.local?.token : credentials.production?.token);
+      legacyCredential = !!apiKey;
     } catch (error62) {
       if (error62.code !== "ENOENT") throw error62;
     }
   }
   if (!apiKey) throw new Error("Run branchora login or set BRANCHORA_API_KEY.");
-  return { config: config2, client: new TraceGitClient({ url: config2.url, apiKey }) };
+  const client = new TraceGitClient({ url: config2.url, apiKey });
+  if (client.isAgentCredential || config2.credentialSource === "agent") {
+    const session = await client.agentIdentity();
+    if (session.principal.workspaceId !== config2.workspaceId || session.principal.agent.projectId !== config2.projectId || session.principal.agent.agentId !== config2.agentId)
+      throw new Error(
+        "The agent credential does not match this repository connection. Run branchora init with the assigned identity."
+      );
+    config2 = { ...config2, credentialSource: "agent" };
+  }
+  if (legacyCredential)
+    await saveCredential(
+      config2.url,
+      apiKey,
+      config2.workspaceId,
+      config2.credentialSource === "agent" ? identity2 : void 0
+    );
+  return { config: config2, client };
+}
+async function readProjectConfig(root) {
+  return projectConfigSchema.parse(
+    JSON.parse(await readFile3(await projectConfigPath(root), "utf8"))
+  );
 }
 
 // src/integrations/opencode.ts
 init_redaction();
 init_crypto();
 
-// src/integrations/opencode-export.ts
-init_crypto();
-import { execFile as execFile2 } from "node:child_process";
-import { promisify as promisify2 } from "node:util";
-import { resolve as resolve5 } from "node:path";
-
 // src/core/types.ts
 var USD_NANOS = 1e9;
 
@@ -24164,6 +24591,13 @@ function usdToNanos(usd) {
   return Math.round(usd * USD_NANOS);
 }
 
+// src/integrations/opencode-export.ts
+init_crypto();
+import { execFile as execFile2 } from "node:child_process";
+import { promisify as promisify2 } from "node:util";
+import { resolve as resolve5 } from "node:path";
+init_agent_identity();
+
 // src/integrations/context-capture.ts
 init_crypto();
 init_schemas3();
@@ -24275,6 +24709,59 @@ function supportedProvider(value) {
 async function openCodeAgentId(config2, info) {
   return `agt_oc_${(await sha256(`${config2.workspaceId}:${config2.projectId}:${info.providerID}:${info.modelID}:${info.agent ?? info.mode ?? "build"}`)).slice(0, 40)}`;
 }
+function openCodeSessionScope(config2, sessionId, agentId) {
+  return `${config2.workspaceId}:${config2.projectId}:${agentId ? `${agentId}:` : ""}${sessionId}`;
+}
+async function openCodeMachineEvents(config2, exported, agentId) {
+  const scope = openCodeSessionScope(config2, exported.info.id, agentId);
+  const runId = `run_oc_${(await sha256(scope)).slice(0, 40)}`;
+  const events = [];
+  for (const message of exported.messages) {
+    const text = message.info.role === "user" ? visibleText(message.parts) : "";
+    if (text) {
+      const created = message.info.time?.created ?? exported.info.time?.created;
+      events.push({
+        id: `evt_oc_${(await sha256(`${scope}:${message.info.id}:prompt`)).slice(0, 40)}`,
+        runId,
+        agentId,
+        kind: "plan",
+        name: "Prompt del usuario",
+        ...created === void 0 ? {} : { timestamp: new Date(created).toISOString() },
+        payload: {
+          prompt: text.slice(0, 1e5),
+          source: "user-message",
+          externalMessageId: message.info.id
+        }
+      });
+    }
+    for (const part of message.parts) {
+      if (part.type !== "tool" || !part.state?.time?.end || !part.tool) continue;
+      const ended = part.state.time.end;
+      events.push({
+        id: `evt_oc_${(await sha256(`${scope}:${part.id ?? part.callID}`)).slice(0, 40)}`,
+        runId,
+        agentId,
+        kind: part.state.status === "error" ? "error" : "tool.end",
+        name: part.tool,
+        timestamp: new Date(ended).toISOString(),
+        durationMs: Math.max(0, ended - (part.state.time.start ?? ended)),
+        payload: {
+          tool: part.tool,
+          status: part.state.status,
+          title: part.state.title,
+          arguments: toolArguments(part.state.input),
+          source: "opencode-tool-metadata",
+          externalPartId: part.id,
+          outputCaptured: false,
+          provider: message.info.providerID,
+          model: message.info.modelID,
+          opencodeAgent: message.info.agent ?? message.info.mode
+        }
+      });
+    }
+  }
+  return events;
+}
 async function syncOpenCodeExport(client, config2, repo, exported, options = {}) {
   const normalizePath = (path) => {
     const normalized = resolve5(path).replaceAll("\\", "/");
@@ -24282,32 +24769,45 @@ async function syncOpenCodeExport(client, config2, repo, exported, options = {})
   };
   if (normalizePath(exported.info.directory) !== normalizePath(repo.root))
     throw new Error("Session directory does not match the connected repository");
+  const authority = client.isAgentCredential || config2.credentialSource === "agent" ? await client.agentIdentity() : void 0;
+  const machine = authority?.principal.agent;
+  if (machine) {
+    if (machine.projectId !== config2.projectId)
+      throw new Error("The imported project does not match the authenticated agent repository.");
+    if (authority?.principal.workspaceId !== config2.workspaceId)
+      throw new Error("The imported workspace does not match the authenticated agent identity.");
+    if (machine.agentId !== config2.agentId)
+      throw new Error("The imported agent does not match the authenticated identity.");
+    await client.assertExecutionAgent(machine.agentId);
+  }
   const complete = exported.messages.filter(
     (message) => message.info.role === "assistant" && message.info.time?.completed && message.info.tokens && message.info.providerID && message.info.modelID
   );
   if (!complete.length)
     return { sessionId: exported.info.id, imported: 0, duplicates: 0, pending: true };
   const rootMessage = complete[0].info;
-  const rootAgentId = await openCodeAgentId(config2, rootMessage);
+  const rootAgentId = machine?.agentId ?? await openCodeAgentId(config2, rootMessage);
   const agentIds = /* @__PURE__ */ new Set();
   for (const { info } of complete) {
-    const id = await openCodeAgentId(config2, info);
+    const id = machine?.agentId ?? await openCodeAgentId(config2, info);
     if (agentIds.has(id)) continue;
-    await client.createAgent({
-      id,
-      name: `OpenCode \xB7 ${info.agent ?? info.mode ?? "build"} \xB7 ${info.modelID}`,
-      provider: supportedProvider(info.providerID),
-      model: info.modelID,
-      description: "Agente observado en una sesi\xF3n real de OpenCode.",
-      config: {
-        originalProviderId: info.providerID,
-        telemetry: "opencode-observer",
-        budgetEnforced: false
-      }
-    });
+    if (!machine)
+      await client.createAgent({
+        id,
+        name: `OpenCode \xB7 ${info.agent ?? info.mode ?? "build"} \xB7 ${info.modelID}`,
+        provider: supportedProvider(info.providerID),
+        model: info.modelID,
+        description: "Agente observado en una sesi\xF3n real de OpenCode.",
+        config: {
+          originalProviderId: info.providerID,
+          telemetry: "opencode-observer",
+          budgetEnforced: false
+        }
+      });
     agentIds.add(id);
   }
-  const runId = `run_oc_${(await sha256(`${config2.workspaceId}:${config2.projectId}:${exported.info.id}`)).slice(0, 40)}`;
+  const sessionScope = openCodeSessionScope(config2, exported.info.id, machine?.agentId);
+  const runId = `run_oc_${(await sha256(sessionScope)).slice(0, 40)}`;
   const prompt = exported.messages.filter((message) => message.info.role === "user").map((message) => visibleText(message.parts)).filter(Boolean)[0] ?? exported.info.title;
   let existingRun = null;
   try {
@@ -24315,6 +24815,14 @@ async function syncOpenCodeExport(client, config2, repo, exported, options = {})
   } catch (error62) {
     if (!(error62 instanceof Error) || !("status" in error62) || error62.status !== 404) throw error62;
   }
+  if (machine && existingRun) {
+    if (existingRun.run.project_id !== machine.projectId || existingRun.run.root_agent_id !== machine.agentId || existingRun.run.workspace_id !== void 0 && existingRun.run.workspace_id !== config2.workspaceId)
+      throw new Error("The existing OpenCode execution belongs to another project or agent.");
+    if (existingRun.agents && !existingRun.agents.some((agent) => agent.agent_id === machine.agentId))
+      throw new Error("The authenticated agent is not a participant in this OpenCode execution.");
+    if (!matchesAgentBranch(existingRun.run.branch, machine.writeBranches))
+      throw new Error("The OpenCode execution branch is outside the agent write grant.");
+  }
   if (!existingRun)
     await client.createRun({
       id: runId,
@@ -24323,37 +24831,49 @@ async function syncOpenCodeExport(client, config2, repo, exported, options = {})
       title: exported.info.title,
       prompt: prompt.slice(0, 5e5),
       branch: await repo.branch(),
-      recordType: "connected",
+      recordType: machine ? config2.recordType ?? "connected" : "connected",
       externalSessionId: exported.info.id,
       tags: ["opencode", "application-reported", "budget-observation"]
     });
-  for (const id of agentIds)
-    if (id !== rootAgentId)
-      await client.request(
-        `/runs/${runId}/agents`,
-        "POST",
-        { agentId: id, parentAgentId: rootAgentId },
-        true
-      );
+  if (!machine) {
+    for (const id of agentIds)
+      if (id !== rootAgentId)
+        await client.request(
+          `/runs/${runId}/agents`,
+          "POST",
+          { agentId: id, parentAgentId: rootAgentId },
+          true
+        );
+  }
   const existing = /* @__PURE__ */ new Set();
   const existingContext = /* @__PURE__ */ new Map();
+  const controlledPrompts = /* @__PURE__ */ new Set();
   for (let offset = 0; ; offset += 200) {
     const response = await client.raw(
       `/requests?runId=${runId}&source=all&limit=200&offset=${offset}`
     );
     const page = await response.json();
-    for (const request of page.data)
-      if (request.external_message_id) {
+    for (const request of page.data) {
+      if (machine && request.agent_id === machine.agentId && request.budget_enforced && ["inflight", "unknown", "settled"].includes(request.status ?? "")) {
+        const native = JSON.parse(request.pricing_json ?? "{}").transport?.native;
+        if (native?.sessionId === exported.info.id && typeof native.promptId === "string")
+          controlledPrompts.add(native.promptId);
+      }
+      if (request.external_message_id && (!machine || request.agent_id === machine.agentId)) {
         existing.add(request.external_message_id);
         existingContext.set(request.external_message_id, request);
       }
+    }
     if (!page.pagination.hasMore || !page.data.length) break;
   }
   let imported = 0, duplicates = 0, enriched = 0;
+  const observedMessages = complete.filter(
+    (message) => !controlledPrompts.has(message.info.parentID ?? "")
+  );
   const byMessage = /* @__PURE__ */ new Map();
   const observations = [];
-  for (const message of complete) {
-    const info = message.info, agentId = await openCodeAgentId(config2, info);
+  for (const message of observedMessages) {
+    const info = message.info, agentId = machine?.agentId ?? await openCodeAgentId(config2, info);
     byMessage.set(info.id, agentId);
     if (existing.has(info.id)) {
       const previous = existingContext.get(info.id);
@@ -24367,12 +24887,12 @@ async function syncOpenCodeExport(client, config2, repo, exported, options = {})
         );
         enriched++;
         if (enriched % 10 === 0)
-          options.onProgress?.({ imported, duplicates, total: complete.length, enriched });
+          options.onProgress?.({ imported, duplicates, total: observedMessages.length, enriched });
       }
       duplicates++;
       continue;
     }
-    const requestId = `req_oc_${(await sha256(`${config2.workspaceId}:${config2.projectId}:${exported.info.id}:${info.id}`)).slice(0, 40)}`;
+    const requestId = `req_oc_${(await sha256(`${sessionScope}:${info.id}`)).slice(0, 40)}`;
     observations.push({
       requestId,
       runId,
@@ -24396,10 +24916,10 @@ async function syncOpenCodeExport(client, config2, repo, exported, options = {})
     const batch = observations.slice(index, index + 10);
     await client.request("/observations/opencode/batch", "POST", { observations: batch }, true);
     imported += batch.length;
-    options.onProgress?.({ imported, duplicates, total: complete.length });
+    options.onProgress?.({ imported, duplicates, total: observedMessages.length });
   }
-  const events = [];
-  for (const message of exported.messages) {
+  const events = machine ? await openCodeMachineEvents(config2, exported, machine.agentId) : [];
+  for (const message of machine ? [] : exported.messages) {
     const actor = byMessage.get(message.info.id) ?? rootAgentId;
     if (message.info.role === "user") {
       const text = visibleText(message.parts);
@@ -24473,14 +24993,17 @@ async function syncOpenCodeExport(client, config2, repo, exported, options = {})
     }
   }
   let publication = null;
-  const project = await client.request(
-    `/projects/${config2.projectId}`
-  );
-  if (project.project.repository_name && (imported || enriched || pendingEvents.length || commitsLinked || !existingRun))
-    publication = await client.request(`/runs/${runId}/publish`, "POST", {}, true);
+  if (!machine || machine.capabilities.includes("git:read") && machine.capabilities.includes("git:write")) {
+    const project = await client.request(
+      `/projects/${config2.projectId}`
+    );
+    if (project.project.repository_name && (imported || enriched || pendingEvents.length || commitsLinked || !existingRun))
+      publication = machine ? await client.publishRun(runId) : await client.request(`/runs/${runId}/publish`, "POST", {}, true);
+  }
   await client.request("/integrations/heartbeat", "POST", {
-    id: `int_oc_${(await sha256(`${config2.workspaceId}:${config2.projectId}:${repo.root}`)).slice(0, 40)}`,
+    id: `int_oc_${(await sha256(openCodeSessionScope(config2, repo.root, machine?.agentId))).slice(0, 40)}`,
     projectId: config2.projectId,
+    ...machine ? { agentId: machine.agentId } : {},
     name: "OpenCode \xB7 captura real",
     version: "1.1.0",
     dirty: await repo.dirty(),
@@ -24497,6 +25020,7 @@ async function syncOpenCodeExport(client, config2, repo, exported, options = {})
         ...new Set(complete.map((message) => `${message.info.providerID}/${message.info.modelID}`))
       ],
       runId,
+      ...machine ? { agentId: machine.agentId } : {},
       lastImportAt: (/* @__PURE__ */ new Date()).toISOString(),
       completeMessages: complete.length,
       gitVersion: publication?.ledgerCommit
@@ -24505,15 +25029,17 @@ async function syncOpenCodeExport(client, config2, repo, exported, options = {})
   return {
     sessionId: exported.info.id,
     runId,
+    pending: false,
     imported,
     enriched,
     duplicates,
     completeMessages: complete.length,
+    ...machine ? { controlledMessages: complete.length - observedMessages.length } : {},
     publication,
     models: [
       ...new Set(complete.map((message) => `${message.info.providerID}/${message.info.modelID}`))
     ],
-    reportedCostNanos: complete.reduce(
+    reportedCostNanos: observedMessages.reduce(
       (sum, message) => sum + (message.info.cost ? usdToNanos(message.info.cost) : 0),
       0
     ),
@@ -24549,12 +25075,7 @@ async function createCheckpoint(repo, client, projectId, runId, name, agentState
   if (project.project.repository_name) {
     const transport = client.gitTransport(projectId);
     await repo.git(["push", transport.remote, snapshot.gitRef], {
-      env: {
-        GIT_CONFIG_COUNT: "1",
-        GIT_CONFIG_KEY_0: "http.extraHeader",
-        GIT_CONFIG_VALUE_0: `Authorization: ${transport.headers.Authorization}`,
-        GIT_TERMINAL_PROMPT: "0"
-      }
+      env: gitTransportEnvironment(transport)
     });
   }
   await client.request(
@@ -24604,11 +25125,27 @@ async function TraceGitPlugin(input2) {
   let connection;
   try {
     connection = await loadConfig(repo.root);
-  } catch {
+  } catch (error62) {
+    const settings = await readProjectConfig(repo.root).catch(() => void 0);
+    if (settings?.budgetMode === "enforce") throw explainTraceGitError(error62, settings.url);
     return {};
   }
   if (!input2.client?.session) return {};
   const { client, config: config2 } = connection, host = input2.client.session, enforceBudget = config2.budgetMode === "enforce";
+  const machine = await client.assignedAgent().catch(async (error62) => {
+    await reportError(error62);
+    if (enforceBudget) throw explainTraceGitError(error62, config2.url);
+    return null;
+  });
+  if (machine === null) return {};
+  if (machine && (machine.projectId !== config2.projectId || machine.agentId !== config2.agentId)) {
+    const error62 = new Error(
+      "The authenticated agent does not match the OpenCode repository connection."
+    );
+    await reportError(error62);
+    if (enforceBudget) throw explainTraceGitError(error62, config2.url);
+    return {};
+  }
   const sessionIds = /* @__PURE__ */ new Set(), timers = /* @__PURE__ */ new Map(), inflight = /* @__PURE__ */ new Map();
   let disposed = false;
   const inputBounds = /* @__PURE__ */ new Map(), systemBounds = /* @__PURE__ */ new Map(), checkpoints = /* @__PURE__ */ new Set();
@@ -24623,70 +25160,93 @@ async function TraceGitPlugin(input2) {
   );
   const toolSchemaBytes = /* @__PURE__ */ new Map();
   const latestMessages = /* @__PURE__ */ new Map(), outputBounds = /* @__PURE__ */ new Map();
-  async function ensureExecution(inputModel) {
-    sessionExecutions.delete(inputModel.sessionID);
-    const [session, messages] = await Promise.all([
-      host.get({ path: { id: inputModel.sessionID }, query: { directory: repo.root } }),
-      host.messages({ path: { id: inputModel.sessionID }, query: { directory: repo.root } })
-    ]);
-    if (!session.data || !messages.data)
-      throw new Error("Cannot initialize execution without session metadata");
-    latestMessages.set(inputModel.sessionID, messages.data);
-    const modelInfo = {
-      providerID: inputModel.model.providerID,
-      modelID: inputModel.model.id,
-      agent: inputModel.agent
-    };
-    const agentId = await openCodeAgentId(config2, modelInfo), runId = `run_oc_${(await sha256(`${config2.workspaceId}:${config2.projectId}:${inputModel.sessionID}`)).slice(0, 40)}`;
-    const first = messages.data.find(
+  async function sessionRunId(sessionId) {
+    const scope = openCodeSessionScope(config2, sessionId, machine?.agentId);
+    return `run_oc_${(await sha256(scope)).slice(0, 40)}`;
+  }
+  async function modelAgentId(info) {
+    return machine?.agentId ?? await openCodeAgentId(config2, info);
+  }
+  async function ensureSessionRun(session, messages, modelInfo) {
+    if (machine) {
+      const normalized = (path) => {
+        const value = resolve6(path).replaceAll("\\", "/");
+        return process.platform === "win32" ? value.toLowerCase() : value;
+      };
+      if (normalized(session.directory) !== normalized(repo.root))
+        throw new Error("Session directory does not match the connected repository");
+    }
+    const agentId = await modelAgentId(modelInfo), runId = await sessionRunId(session.id);
+    const first = messages.find(
       (message) => message.info.role === "assistant" && message.info.providerID && message.info.modelID
     )?.info;
-    const rootInfo = first ?? modelInfo, rootAgentId = await openCodeAgentId(config2, rootInfo);
-    const register = async (id, info) => client.createAgent({
-      id,
-      name: `OpenCode \xB7 ${info.agent ?? info.mode ?? "build"} \xB7 ${info.modelID}`,
-      provider: ["amazon-bedrock", "openai", "anthropic", "google", "workers-ai"].includes(
-        info.providerID ?? ""
-      ) ? info.providerID : "external",
-      model: info.modelID,
-      description: "Agente observado en una sesi\xF3n real de OpenCode.",
-      config: {
-        originalProviderId: info.providerID,
-        telemetry: "opencode-observer",
-        budgetEnforced: false
-      }
-    });
-    await register(rootAgentId, rootInfo);
-    await register(agentId, modelInfo);
+    const rootInfo = first ?? modelInfo, rootAgentId = await modelAgentId(rootInfo);
+    if (!machine) {
+      const register = async (id, info) => client.createAgent({
+        id,
+        name: `OpenCode \xB7 ${info.agent ?? info.mode ?? "build"} \xB7 ${info.modelID}`,
+        provider: ["amazon-bedrock", "openai", "anthropic", "google", "workers-ai"].includes(
+          info.providerID ?? ""
+        ) ? info.providerID : "external",
+        model: info.modelID,
+        description: "Agente observado en una sesi\xF3n real de OpenCode.",
+        config: {
+          originalProviderId: info.providerID,
+          telemetry: "opencode-observer",
+          budgetEnforced: false
+        }
+      });
+      await register(rootAgentId, rootInfo);
+      await register(agentId, modelInfo);
+    }
     let exists = false;
     try {
-      await client.request(`/runs/${runId}`);
+      const existing = await client.request(`/runs/${runId}`);
+      if (machine && (existing.run.project_id !== machine.projectId || existing.run.root_agent_id !== machine.agentId))
+        throw new Error("The OpenCode execution belongs to another agent identity.");
       exists = true;
     } catch (error62) {
       if (!error62 || typeof error62 !== "object" || !("status" in error62) || error62.status !== 404)
         throw error62;
     }
     if (!exists) {
-      const prompt = messages.data.filter((message) => message.info.role === "user").map((message) => visibleText(message.parts)).filter(Boolean)[0] ?? session.data.title;
+      const prompt = messages.filter((message) => message.info.role === "user").map((message) => visibleText(message.parts)).filter(Boolean)[0] ?? session.title;
       await client.createRun({
         id: runId,
         projectId: config2.projectId,
         rootAgentId,
-        title: session.data.title,
-        prompt,
+        title: session.title,
+        prompt: prompt.slice(0, 5e5),
         branch: await repo.branch(),
-        externalSessionId: inputModel.sessionID,
+        externalSessionId: session.id,
         recordType: config2.recordType ?? "connected",
         tags: ["opencode", "application-reported", "budget-observation"]
       });
     }
-    if (agentId !== rootAgentId)
+    if (!machine && agentId !== rootAgentId)
       await client.request(
         `/runs/${runId}/agents`,
         "POST",
         { agentId, parentAgentId: rootAgentId },
         true
       );
+    return { runId, agentId, exists };
+  }
+  async function ensureExecution(inputModel) {
+    sessionExecutions.delete(inputModel.sessionID);
+    const [session, messages] = await Promise.all([
+      host.get({ path: { id: inputModel.sessionID }, query: { directory: repo.root } }),
+      host.messages({ path: { id: inputModel.sessionID }, query: { directory: repo.root } })
+    ]);
+    if (!session.data || !messages.data)
+      throw new Error("Cannot initialize execution without session metadata");
+    latestMessages.set(inputModel.sessionID, messages.data);
+    const modelInfo = {
+      providerID: inputModel.model.providerID,
+      modelID: inputModel.model.id,
+      agent: inputModel.agent
+    };
+    const { runId, agentId } = await ensureSessionRun(session.data, messages.data, modelInfo);
     const taskKey = inputModel.message?.id ?? messages.data.findLast((message) => message.info.role === "user")?.info.id ?? inputModel.sessionID;
     sessionExecutions.set(inputModel.sessionID, { runId, agentId, promptId: taskKey });
     const checkpointKey = `${inputModel.sessionID}:${taskKey}`;
@@ -24700,7 +25260,12 @@ async function TraceGitPlugin(input2) {
             config2.projectId,
             runId,
             "Before native model task",
-            { sessionId: inputModel.sessionID, agent: inputModel.agent, promptId: taskKey },
+            {
+              sessionId: inputModel.sessionID,
+              agent: inputModel.agent,
+              currentAgentId: agentId,
+              promptId: taskKey
+            },
             { budgetMode: enforceBudget ? "enforce" : "observe", model: inputModel.model.id },
             { id: `cp_native_${(await sha256(`${runId}:${taskKey}`)).slice(0, 36)}`, taskKey }
           );
@@ -24774,10 +25339,11 @@ async function TraceGitPlugin(input2) {
         for (const message of messages.data)
           if (transport.controlsPrompt(id, message.info.parentID) && message.info.parentID)
             controlledPrompts.add(message.info.parentID);
-        const runId = `run_oc_${(await sha256(`${config2.workspaceId}:${config2.projectId}:${id}`)).slice(0, 40)}`;
+        const runId = await sessionRunId(id);
         for (let offset = 0; ; offset += 200) {
           const page = await (await client.raw(`/requests?runId=${runId}&source=all&limit=200&offset=${offset}`)).json();
           for (const record5 of page.data) {
+            if (machine && record5.agent_id !== machine.agentId) continue;
             if (!record5.budget_enforced || !["inflight", "unknown", "settled"].includes(record5.status ?? ""))
               continue;
             const native = JSON.parse(record5.pricing_json ?? "{}").transport?.native;
@@ -24790,14 +25356,16 @@ async function TraceGitPlugin(input2) {
       const controlled = enforceBudget ? messages.data.filter(
         (message) => message.info.role === "assistant" && controlledPrompts.has(message.info.parentID ?? "")
       ) : [];
-      if (controlled.length) await synchronizeControlledEvidence(id, session.data, messages.data);
+      if (controlled.length && !machine)
+        await synchronizeControlledEvidence(id, session.data, messages.data);
       const controlledIds = new Set(controlled.map((value) => value.info.id));
-      const result = await syncOpenCodeExport(client, config2, repo, {
+      const exported = {
         info: session.data,
         // Provider counters/full tariffs are authoritative for these calls. Application costs
         // must not add a second observation or replace them with a UI-mode estimate.
         messages: controlled.length ? messages.data.filter((value) => !controlledIds.has(value.info.id)) : messages.data
-      });
+      };
+      const result = machine ? await synchronizeAgentExport(exported, messages.data, controlled.length > 0) : await syncOpenCodeExport(client, config2, repo, exported);
       await mkdir4(resolve6(repo.root, ".tracegit/reports"), { recursive: true });
       await writeFile4(
         resolve6(repo.root, ".tracegit/reports/opencode-plugin.json"),
@@ -24813,16 +25381,113 @@ async function TraceGitPlugin(input2) {
       inflight.delete(id);
     }
   }
+  async function synchronizeAgentExport(exported, allMessages, hasControlledMessages) {
+    if (!machine) throw new Error("Scoped OpenCode observation requires an agent credential.");
+    const complete = exported.messages.filter(
+      (message) => message.info.role === "assistant" && message.info.time?.completed && message.info.tokens && message.info.providerID && message.info.modelID
+    );
+    if (!complete.length && !hasControlledMessages)
+      return { sessionId: exported.info.id, imported: 0, duplicates: 0, pending: true };
+    const modelInfo = complete[0]?.info ?? allMessages.find((message) => message.info.role === "assistant")?.info ?? {};
+    const { runId, agentId, exists } = await ensureSessionRun(
+      exported.info,
+      allMessages,
+      modelInfo
+    );
+    const existing = /* @__PURE__ */ new Map();
+    for (let offset = 0; ; offset += 200) {
+      const page = await (await client.raw(`/requests?runId=${runId}&source=all&limit=200&offset=${offset}`)).json();
+      for (const request of page.data)
+        if (request.external_message_id && request.agent_id === machine.agentId)
+          existing.set(request.external_message_id, request);
+      if (!page.pagination.hasMore || !page.data.length) break;
+    }
+    let imported = 0, duplicates = 0, enriched = 0;
+    const observations = [];
+    const history = { info: exported.info, messages: allMessages };
+    for (const message of complete) {
+      const info = message.info;
+      const previous = existing.get(info.id);
+      if (previous) {
+        if (!previous.context_revision) {
+          const sources = await captureHistoricalContext(history, info, repo.root);
+          await client.request(
+            `/requests/${previous.id}/context`,
+            "POST",
+            { sources, expectedRevision: previous.context_revision ?? 0 },
+            true
+          );
+          enriched++;
+        }
+        duplicates++;
+        continue;
+      }
+      observations.push({
+        requestId: `req_oc_${(await sha256(`${openCodeSessionScope(config2, exported.info.id, machine.agentId)}:${info.id}`)).slice(0, 40)}`,
+        runId,
+        agentId,
+        provider: info.providerID,
+        model: info.modelID,
+        externalSessionId: exported.info.id,
+        externalMessageId: info.id,
+        parentMessageId: info.parentID,
+        createdAt: new Date(info.time.created).toISOString(),
+        completedAt: new Date(info.time.completed).toISOString(),
+        tokens: info.tokens,
+        reportedCostNanos: typeof info.cost === "number" && info.cost >= 0 ? usdToNanos(info.cost) : null,
+        outputSummary: visibleText(message.parts).slice(0, 1e5),
+        finish: info.finish,
+        connectorVersion: "OpenCode 1.x export",
+        contextSources: await captureHistoricalContext(history, info, repo.root)
+      });
+    }
+    for (let index = 0; index < observations.length; index += 10) {
+      const batch = observations.slice(index, index + 10);
+      await client.request("/observations/opencode/batch", "POST", { observations: batch }, true);
+      imported += batch.length;
+    }
+    const evidence = await synchronizeControlledEvidence(
+      exported.info.id,
+      exported.info,
+      allMessages
+    );
+    let publication = null;
+    if (machine.capabilities.includes("git:read") && machine.capabilities.includes("git:write")) {
+      const project = await client.request(
+        `/projects/${config2.projectId}`
+      );
+      if (project.project.repository_name && (imported || enriched || evidence.eventsInserted || evidence.commitsLinked || !exists))
+        publication = await client.publishRun(runId);
+    }
+    return {
+      sessionId: exported.info.id,
+      runId,
+      imported,
+      enriched,
+      duplicates,
+      completeMessages: complete.length,
+      publication,
+      models: [
+        ...new Set(complete.map((message) => `${message.info.providerID}/${message.info.modelID}`))
+      ],
+      reportedCostNanos: complete.reduce(
+        (sum, message) => sum + (message.info.cost ? usdToNanos(message.info.cost) : 0),
+        0
+      ),
+      reasoningTextCaptured: false
+    };
+  }
   async function synchronizeControlledEvidence(sessionId, session, messages) {
-    const runId = `run_oc_${(await sha256(`${config2.workspaceId}:${config2.projectId}:${sessionId}`)).slice(0, 40)}`;
-    const events = [];
-    for (const message of messages) {
+    const runId = await sessionRunId(sessionId);
+    const eventScope = `${config2.workspaceId}:${sessionId}`;
+    const events = machine ? await openCodeMachineEvents(config2, { info: session, messages }, machine.agentId) : [];
+    for (const message of machine ? [] : messages) {
       const execution = sessionExecutions.get(sessionId);
-      const agentId = message.info.role === "assistant" ? await openCodeAgentId(config2, message.info) : execution?.agentId;
+      const agentId = message.info.role === "assistant" ? await modelAgentId(message.info) : execution?.agentId;
       if (!agentId) continue;
       if (message.info.role === "user")
         events.push({
-          id: `evt_oc_${(await sha256(`${config2.workspaceId}:${sessionId}:${message.info.id}:prompt`)).slice(0, 40)}`,
+          id: `evt_oc_${(await sha256(`${eventScope}:${message.info.id}:prompt`)).slice(0, 40)}`,
           runId,
           agentId,
           kind: "plan",
@@ -24837,7 +25502,7 @@ async function TraceGitPlugin(input2) {
       for (const part of message.parts)
         if (part.type === "tool" && part.tool && part.state?.time?.end)
           events.push({
-            id: `evt_oc_${(await sha256(`${config2.workspaceId}:${sessionId}:${part.id ?? part.callID}`)).slice(0, 40)}`,
+            id: `evt_oc_${(await sha256(`${eventScope}:${part.id ?? part.callID}`)).slice(0, 40)}`,
             runId,
             agentId,
             kind: part.state.status === "error" ? "error" : "tool.end",
@@ -24874,33 +25539,50 @@ async function TraceGitPlugin(input2) {
       "--reverse",
       "--max-count=200"
     ])).split("\n").filter(Boolean);
+    let commitsLinked = 0;
     for (const sha of commits)
-      if (!linked.has(sha))
+      if (!linked.has(sha)) {
         await client.request(
           `/runs/${runId}/commits`,
           "POST",
           await repo.commitMetadata(sha),
           true
         );
+        commitsLinked++;
+      }
     await client.request(
       "/integrations/heartbeat",
       "POST",
       {
         id: config2.integrationId,
         projectId: config2.projectId,
-        name: "OpenCode \xB7 native serialized transport",
+        name: enforceBudget ? "OpenCode \xB7 native serialized transport" : "OpenCode \xB7 captura real",
+        dirty: await repo.dirty(),
         version: "1.2.0",
         capabilities: {
           usage: true,
           tools: true,
           prompts: true,
-          budgetEnforced: true,
-          mode: "serialized-native"
+          budgetEnforced: enforceBudget,
+          mode: enforceBudget ? "serialized-native" : "observer"
         },
-        metadata: { sessionId, runId }
+        ...machine ? { agentId: machine.agentId } : {},
+        metadata: {
+          sessionId,
+          runId,
+          ...machine ? {
+            agentId: machine.agentId,
+            models: [
+              ...new Set(
+                messages.filter((message) => message.info.role === "assistant").map((message) => `${message.info.providerID}/${message.info.modelID}`)
+              )
+            ]
+          } : {}
+        }
       },
       true
     );
+    return { eventsInserted: pending.length, commitsLinked };
   }
   function schedule(id) {
     if (disposed || !/^ses_[A-Za-z0-9]+$/.test(id)) return;