claude-use 11.22.0 → 11.23.0

package/dist/cli.cjs

@@ -318,10 +318,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path63) {
-  if (!path63)
+function getElementAtPath(obj, path64) {
+  if (!path64)
     return obj;
-  return path63.reduce((acc, key) => acc?.[key], obj);
+  return path64.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -580,11 +580,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path63, issues) {
+function prefixIssues(path64, issues) {
   return issues.map((iss) => {
     var _a4;
     (_a4 = iss).path ?? (_a4.path = []);
-    iss.path.unshift(path63);
+    iss.path.unshift(path64);
     return iss;
   });
 }
@@ -1105,16 +1105,16 @@ function flattenError(error63, mapper = (issue2) => issue2.message) {
 }
 function formatError(error63, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error64, path63 = []) => {
+  const processError = (error64, path64 = []) => {
     for (const issue2 of error64.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path63, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path64, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path63, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path64, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path63, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path64, ...issue2.path]);
       } else {
-        const fullpath = [...path63, ...issue2.path];
+        const fullpath = [...path64, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -1153,17 +1153,17 @@ function formatError(error63, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error63, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error64, path63 = []) => {
+  const processError = (error64, path64 = []) => {
     var _a4;
     for (const issue2 of error64.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path63, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path64, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path63, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path64, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path63, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path64, ...issue2.path]);
       } else {
-        const fullpath = [...path63, ...issue2.path];
+        const fullpath = [...path64, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -1202,8 +1202,8 @@ function treeifyError(error63, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path63 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path63) {
+  const path64 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path64) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -19199,13 +19199,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path63 = ref.slice(1).split("/").filter(Boolean);
-  if (path63.length === 0) {
+  const path64 = ref.slice(1).split("/").filter(Boolean);
+  if (path64.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path63[0] === defsKey) {
-    const key = path63[1] === void 0 ? void 0 : decodeJSONPointerSegment(path63[1]);
+  if (path64[0] === defsKey) {
+    const key = path64[1] === void 0 ? void 0 : decodeJSONPointerSegment(path64[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -23712,42 +23712,42 @@ var require_defaults = __commonJS({
 var require_env_paths = __commonJS({
   "node_modules/.pnpm/env-paths@2.2.1/node_modules/env-paths/index.js"(exports2, module2) {
     "use strict";
-    var path63 = require("path");
+    var path64 = require("path");
     var os13 = require("os");
     var homedir = os13.homedir();
     var tmpdir = os13.tmpdir();
     var { env } = process;
     var macos = (name) => {
-      const library = path63.join(homedir, "Library");
+      const library = path64.join(homedir, "Library");
       return {
-        data: path63.join(library, "Application Support", name),
-        config: path63.join(library, "Preferences", name),
-        cache: path63.join(library, "Caches", name),
-        log: path63.join(library, "Logs", name),
-        temp: path63.join(tmpdir, name)
+        data: path64.join(library, "Application Support", name),
+        config: path64.join(library, "Preferences", name),
+        cache: path64.join(library, "Caches", name),
+        log: path64.join(library, "Logs", name),
+        temp: path64.join(tmpdir, name)
       };
     };
     var windows = (name) => {
-      const appData = env.APPDATA || path63.join(homedir, "AppData", "Roaming");
-      const localAppData = env.LOCALAPPDATA || path63.join(homedir, "AppData", "Local");
+      const appData = env.APPDATA || path64.join(homedir, "AppData", "Roaming");
+      const localAppData = env.LOCALAPPDATA || path64.join(homedir, "AppData", "Local");
       return {
         // Data/config/cache/log are invented by me as Windows isn't opinionated about this
-        data: path63.join(localAppData, name, "Data"),
-        config: path63.join(appData, name, "Config"),
-        cache: path63.join(localAppData, name, "Cache"),
-        log: path63.join(localAppData, name, "Log"),
-        temp: path63.join(tmpdir, name)
+        data: path64.join(localAppData, name, "Data"),
+        config: path64.join(appData, name, "Config"),
+        cache: path64.join(localAppData, name, "Cache"),
+        log: path64.join(localAppData, name, "Log"),
+        temp: path64.join(tmpdir, name)
       };
     };
     var linux = (name) => {
-      const username = path63.basename(homedir);
+      const username = path64.basename(homedir);
       return {
-        data: path63.join(env.XDG_DATA_HOME || path63.join(homedir, ".local", "share"), name),
-        config: path63.join(env.XDG_CONFIG_HOME || path63.join(homedir, ".config"), name),
-        cache: path63.join(env.XDG_CACHE_HOME || path63.join(homedir, ".cache"), name),
+        data: path64.join(env.XDG_DATA_HOME || path64.join(homedir, ".local", "share"), name),
+        config: path64.join(env.XDG_CONFIG_HOME || path64.join(homedir, ".config"), name),
+        cache: path64.join(env.XDG_CACHE_HOME || path64.join(homedir, ".cache"), name),
         // https://wiki.debian.org/XDGBaseDirectorySpecification#state
-        log: path63.join(env.XDG_STATE_HOME || path63.join(homedir, ".local", "state"), name),
-        temp: path63.join(tmpdir, username, name)
+        log: path64.join(env.XDG_STATE_HOME || path64.join(homedir, ".local", "state"), name),
+        temp: path64.join(tmpdir, username, name)
       };
     };
     var envPaths = (name, options) => {
@@ -23815,11 +23815,11 @@ var require_util = __commonJS({
       return result;
     }
     exports2.emplace = emplace;
-    function getPropertyByPath(source, path63) {
-      if (typeof path63 === "string" && Object.prototype.hasOwnProperty.call(source, path63)) {
-        return source[path63];
+    function getPropertyByPath(source, path64) {
+      if (typeof path64 === "string" && Object.prototype.hasOwnProperty.call(source, path64)) {
+        return source[path64];
       }
-      const parsedPath = typeof path63 === "string" ? path63.split(".") : path63;
+      const parsedPath = typeof path64 === "string" ? path64.split(".") : path64;
       return parsedPath.reduce((previous, key) => {
         if (previous === void 0) {
           return previous;
@@ -23842,9 +23842,9 @@ var require_util = __commonJS({
       return Object.fromEntries(Object.entries(options).filter(([, value2]) => value2 !== void 0));
     }
     exports2.removeUndefinedValuesFromObject = removeUndefinedValuesFromObject;
-    async function isDirectory(path63) {
+    async function isDirectory(path64) {
       try {
-        const stat = await fs_1.promises.stat(path63);
+        const stat = await fs_1.promises.stat(path64);
         return stat.isDirectory();
       } catch (e14) {
         if (e14.code === "ENOENT") {
@@ -23854,9 +23854,9 @@ var require_util = __commonJS({
       }
     }
     exports2.isDirectory = isDirectory;
-    function isDirectorySync(path63) {
+    function isDirectorySync(path64) {
       try {
-        const stat = fs_1.default.statSync(path63);
+        const stat = fs_1.default.statSync(path64);
         return stat.isDirectory();
       } catch (e14) {
         if (e14.code === "ENOENT") {
@@ -23954,7 +23954,7 @@ var require_ExplorerBase = __commonJS({
           const idx = importStack.indexOf(fullPath);
           if (idx !== -1) {
             throw new Error(`Circular import detected:
-${[...importStack, fullPath].map((path63, i10) => `${i10 + 1}. ${path63}`).join("\n")} (same as ${idx + 1}.)`);
+${[...importStack, fullPath].map((path64, i10) => `${i10 + 1}. ${path64}`).join("\n")} (same as ${idx + 1}.)`);
           }
         }
       }
@@ -24142,9 +24142,9 @@ var require_Explorer = __commonJS({
           throw error63;
         }
       }
-      async #fileExists(path63) {
+      async #fileExists(path64) {
         try {
-          await promises_1.default.stat(path63);
+          await promises_1.default.stat(path64);
           return true;
         } catch (e14) {
           return false;
@@ -24304,9 +24304,9 @@ var require_ExplorerSync = __commonJS({
           throw error63;
         }
       }
-      #fileExists(path63) {
+      #fileExists(path64) {
         try {
-          fs_1.default.statSync(path63);
+          fs_1.default.statSync(path64);
           return true;
         } catch (e14) {
           return false;
@@ -24430,7 +24430,7 @@ var require_dist = __commonJS({
       };
     }
     function getResolvedSearchPlaces(moduleName, toolDefinedSearchPlaces, userConfiguredOptions) {
-      const userConfiguredSearchPlaces = userConfiguredOptions.searchPlaces?.map((path63) => path63.replace("{name}", moduleName));
+      const userConfiguredSearchPlaces = userConfiguredOptions.searchPlaces?.map((path64) => path64.replace("{name}", moduleName));
       if (userConfiguredOptions.mergeSearchPlaces) {
         return [...userConfiguredSearchPlaces ?? [], ...toolDefinedSearchPlaces];
       }
@@ -24560,7 +24560,7 @@ function parseIgnoringUnrecognisedKeys(schema, raw) {
   return second.success ? { success: true, data: second.data, ignored } : { success: false, issues: second.error.issues };
 }
 function describeIgnoredKeys(filePath, ignored) {
-  const places = ignored.map(({ path: path63, keys }) => `${path63.length === 0 ? "" : `${path63.map(String).join(".")}.`}${keys.join(", ")}`);
+  const places = ignored.map(({ path: path64, keys }) => `${path64.length === 0 ? "" : `${path64.map(String).join(".")}.`}${keys.join(", ")}`);
   return `${filePath} has settings this version of agent-shim does not know and ignores: ${places.join("; ")}. A newer release may read them.`;
 }
 function noteIgnoredKeys(filePath, ignored) {
@@ -24582,9 +24582,9 @@ function restoreIgnoredKeys(filePath, value2) {
     return value2;
   }
   const restored = structuredClone(value2);
-  for (const { path: path63, values } of ignored) {
+  for (const { path: path64, values } of ignored) {
     let holder = restored;
-    for (const step2 of path63) {
+    for (const step2 of path64) {
       holder = isRecord(holder) ? holder[step2] : void 0;
     }
     if (isRecord(holder)) {
@@ -29770,8 +29770,8 @@ var require_utils = __commonJS({
       }
       return output2;
     };
-    exports2.basename = (path63, { windows } = {}) => {
-      const segs = path63.split(windows ? /[\\/]/ : "/");
+    exports2.basename = (path64, { windows } = {}) => {
+      const segs = path64.split(windows ? /[\\/]/ : "/");
       const last = segs[segs.length - 1];
       if (last === "") {
         return segs[segs.length - 2];
@@ -34181,7 +34181,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.22.0",
+      version: "11.23.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -34454,11 +34454,11 @@ function identifyRequest(headers) {
 function directOrigin2(port) {
   return `http://127.0.0.1:${String(port)}`;
 }
-function parseProviderPath(path63) {
-  if (!path63.startsWith(PROVIDER_PATH_PREFIX)) {
+function parseProviderPath(path64) {
+  if (!path64.startsWith(PROVIDER_PATH_PREFIX)) {
     return void 0;
   }
-  const tail = path63.slice(PROVIDER_PATH_PREFIX.length);
+  const tail = path64.slice(PROVIDER_PATH_PREFIX.length);
   const slash = tail.indexOf("/");
   if (slash <= 0) {
     return void 0;
@@ -34785,12 +34785,12 @@ function decoderFor(encoding) {
       return void 0;
   }
 }
-function destinationOf(path63, sessionProvider) {
-  const scoped = parseProviderPath(path63);
+function destinationOf(path64, sessionProvider) {
+  const scoped = parseProviderPath(path64);
   if (scoped !== void 0) {
     return { provider: scoped.provider, endpoint: scoped.rest };
   }
-  return { provider: sessionProvider ?? ANTHROPIC_PROVIDER, endpoint: path63 };
+  return { provider: sessionProvider ?? ANTHROPIC_PROVIDER, endpoint: path64 };
 }
 function buildRecord(event, context) {
   const { scan } = context;
@@ -36070,6 +36070,49 @@ var init_providersStore = __esm({
   }
 });
 
+// src/usage/signIn.ts
+function claudeCodeKeychainService(configDir) {
+  return `${KEYCHAIN_SERVICE_PREFIX}-${(0, import_node_crypto6.createHash)("sha256").update(configDir).digest("hex").slice(0, KEYCHAIN_SERVICE_HASH_DIGITS)}`;
+}
+function keychainHasItem(run, configDir) {
+  return run.run("security", ["find-generic-password", "-s", claudeCodeKeychainService(configDir)]).status === 0;
+}
+function decideSignIn(facts) {
+  if (facts.hasCredentialBlock) {
+    return { state: "token", detail: "supplies its own credential through a credential block, so a stored login is not what a launch uses" };
+  }
+  if (facts.keychainItem === true) {
+    return { state: "signed-in", detail: "a login is stored in the macOS Keychain" };
+  }
+  if (facts.credentialsFile) {
+    return { state: "signed-in", detail: `a login is stored in ${CREDENTIALS_FILE}` };
+  }
+  return { state: "signed-out", detail: facts.platform === "darwin" ? `no Keychain item and no ${CREDENTIALS_FILE}` : `no ${CREDENTIALS_FILE}` };
+}
+function credentialsFilePath(farmRoot) {
+  return import_node_path30.default.join(farmRoot, CREDENTIALS_FILE);
+}
+function identitySignIn(fs25, probe, identity) {
+  const probing = !identity.hasCredentialBlock;
+  return decideSignIn({
+    hasCredentialBlock: identity.hasCredentialBlock,
+    keychainItem: probing && probe.platform === "darwin" && probe.run !== void 0 ? keychainHasItem(probe.run, identity.farmRoot) : void 0,
+    credentialsFile: probing && fs25.lstat(credentialsFilePath(identity.farmRoot)) !== void 0,
+    platform: probe.platform
+  });
+}
+var import_node_crypto6, import_node_path30, CREDENTIALS_FILE, KEYCHAIN_SERVICE_PREFIX, KEYCHAIN_SERVICE_HASH_DIGITS;
+var init_signIn = __esm({
+  "src/usage/signIn.ts"() {
+    "use strict";
+    import_node_crypto6 = require("node:crypto");
+    import_node_path30 = __toESM(require("node:path"), 1);
+    CREDENTIALS_FILE = ".credentials.json";
+    KEYCHAIN_SERVICE_PREFIX = "Claude Code-credentials";
+    KEYCHAIN_SERVICE_HASH_DIGITS = 8;
+  }
+});
+
 // src/cli/envBool.ts
 function parseEnvBool(variable, value2) {
   if (value2 === void 0 || value2 === "") {
@@ -37298,14 +37341,14 @@ var require_util2 = __commonJS({
         }
         const port = url2.port != null ? url2.port : url2.protocol === "https:" ? 443 : 80;
         let origin = url2.origin != null ? url2.origin : `${url2.protocol || ""}//${url2.hostname || ""}:${port}`;
-        let path63 = url2.path != null ? url2.path : `${url2.pathname || ""}${url2.search || ""}`;
+        let path64 = url2.path != null ? url2.path : `${url2.pathname || ""}${url2.search || ""}`;
         if (origin[origin.length - 1] === "/") {
           origin = origin.slice(0, origin.length - 1);
         }
-        if (path63 && path63[0] !== "/") {
-          path63 = `/${path63}`;
+        if (path64 && path64[0] !== "/") {
+          path64 = `/${path64}`;
         }
-        return new URL(`${origin}${path63}`);
+        return new URL(`${origin}${path64}`);
       }
       if (!isHttpOrHttpsPrefixed(url2.origin || url2.protocol)) {
         throw new InvalidArgumentError2("Invalid URL protocol: the URL must start with `http:` or `https:`.");
@@ -38126,9 +38169,9 @@ var require_diagnostics = __commonJS({
         "undici:client:sendHeaders",
         (evt) => {
           const {
-            request: { method, path: path63, origin }
+            request: { method, path: path64, origin }
           } = evt;
-          debugLog("sending request to %s %s%s", method, origin, path63);
+          debugLog("sending request to %s %s%s", method, origin, path64);
         }
       );
     }
@@ -38146,14 +38189,14 @@ var require_diagnostics = __commonJS({
         "undici:request:headers",
         (evt) => {
           const {
-            request: { method, path: path63, origin },
+            request: { method, path: path64, origin },
             response: { statusCode }
           } = evt;
           debugLog(
             "received response to %s %s%s - HTTP %d",
             method,
             origin,
-            path63,
+            path64,
             statusCode
           );
         }
@@ -38162,23 +38205,23 @@ var require_diagnostics = __commonJS({
         "undici:request:trailers",
         (evt) => {
           const {
-            request: { method, path: path63, origin }
+            request: { method, path: path64, origin }
           } = evt;
-          debugLog("trailers received from %s %s%s", method, origin, path63);
+          debugLog("trailers received from %s %s%s", method, origin, path64);
         }
       );
       diagnosticsChannel.subscribe(
         "undici:request:error",
         (evt) => {
           const {
-            request: { method, path: path63, origin },
+            request: { method, path: path64, origin },
             error: error63
           } = evt;
           debugLog(
             "request to %s %s%s errored - %s",
             method,
             origin,
-            path63,
+            path64,
             error63.message
           );
         }
@@ -38293,7 +38336,7 @@ var require_request = __commonJS({
     var kHandler = /* @__PURE__ */ Symbol("handler");
     var Request2 = class {
       constructor(origin, {
-        path: path63,
+        path: path64,
         method,
         body,
         headers,
@@ -38310,11 +38353,11 @@ var require_request = __commonJS({
         maxRedirections,
         typeOfService
       }, handler) {
-        if (typeof path63 !== "string") {
+        if (typeof path64 !== "string") {
           throw new InvalidArgumentError2("path must be a string");
-        } else if (path63[0] !== "/" && !(path63.startsWith("http://") || path63.startsWith("https://")) && method !== "CONNECT") {
+        } else if (path64[0] !== "/" && !(path64.startsWith("http://") || path64.startsWith("https://")) && method !== "CONNECT") {
           throw new InvalidArgumentError2("path must be an absolute URL or start with a slash");
-        } else if (invalidPathRegex.test(path63)) {
+        } else if (invalidPathRegex.test(path64)) {
           throw new InvalidArgumentError2("invalid request path");
         }
         if (typeof method !== "string") {
@@ -38389,7 +38432,7 @@ var require_request = __commonJS({
         this.completed = false;
         this.aborted = false;
         this.upgrade = upgrade || null;
-        this.path = query ? serializePathWithQuery(path63, query) : path63;
+        this.path = query ? serializePathWithQuery(path64, query) : path64;
         this.origin = origin;
         this.protocol = getProtocolFromUrlString(origin);
         this.idempotent = idempotent == null ? method === "HEAD" || method === "GET" : idempotent;
@@ -43571,7 +43614,7 @@ var require_client_h1 = __commonJS({
       return method !== "GET" && method !== "HEAD" && method !== "OPTIONS" && method !== "TRACE" && method !== "CONNECT";
     }
     function writeH1(client, request7) {
-      const { method, path: path63, host, upgrade, blocking, reset } = request7;
+      const { method, path: path64, host, upgrade, blocking, reset } = request7;
       let { body, headers, contentLength } = request7;
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH" || method === "QUERY" || method === "PROPFIND" || method === "PROPPATCH";
       if (util2.isFormDataLike(body)) {
@@ -43649,7 +43692,7 @@ var require_client_h1 = __commonJS({
       if (socket.setTypeOfService) {
         socket.setTypeOfService(request7.typeOfService);
       }
-      let header = `${method} ${path63} HTTP/1.1\r
+      let header = `${method} ${path64} HTTP/1.1\r
 `;
       if (typeof host === "string") {
         header += `host: ${host}\r
@@ -44328,7 +44371,7 @@ var require_client_h2 = __commonJS({
       const headersTimeout = request7.headersTimeout ?? client[kHeadersTimeout];
       const bodyTimeout = request7.bodyTimeout ?? client[kBodyTimeout];
       const session = client[kHTTP2Session];
-      const { method, path: path63, host, upgrade, expectContinue, signal, protocol, headers: reqHeaders } = request7;
+      const { method, path: path64, host, upgrade, expectContinue, signal, protocol, headers: reqHeaders } = request7;
       let { body } = request7;
       if (upgrade != null && upgrade !== "websocket") {
         util2.errorRequest(client, request7, new InvalidArgumentError2(`Custom upgrade "${upgrade}" not supported over HTTP/2`));
@@ -44397,7 +44440,7 @@ var require_client_h2 = __commonJS({
           }
           headers[HTTP2_HEADER_METHOD] = "CONNECT";
           headers[HTTP2_HEADER_PROTOCOL] = "websocket";
-          headers[HTTP2_HEADER_PATH] = path63;
+          headers[HTTP2_HEADER_PATH] = path64;
           if (protocol === "ws:" || protocol === "wss:") {
             headers[HTTP2_HEADER_SCHEME] = protocol === "ws:" ? "http" : "https";
           } else {
@@ -44439,7 +44482,7 @@ var require_client_h2 = __commonJS({
         stream.setTimeout(headersTimeout);
         return true;
       }
-      headers[HTTP2_HEADER_PATH] = path63;
+      headers[HTTP2_HEADER_PATH] = path64;
       headers[HTTP2_HEADER_SCHEME] = protocol === "http:" ? "http" : "https";
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH";
       if (body && typeof body.read === "function") {
@@ -46791,10 +46834,10 @@ var require_proxy_agent = __commonJS({
         };
         const {
           origin,
-          path: path63 = "/",
+          path: path64 = "/",
           headers = {}
         } = opts;
-        opts.path = origin + path63;
+        opts.path = origin + path64;
         if (!("host" in headers) && !("Host" in headers)) {
           const { host } = new URL(origin);
           headers.host = host;
@@ -48903,20 +48946,20 @@ var require_mock_utils = __commonJS({
       }
       return normalizedQp;
     }
-    function safeUrl(path63) {
-      if (typeof path63 !== "string") {
-        return path63;
+    function safeUrl(path64) {
+      if (typeof path64 !== "string") {
+        return path64;
       }
-      const pathSegments = path63.split("?", 3);
+      const pathSegments = path64.split("?", 3);
       if (pathSegments.length !== 2) {
-        return path63;
+        return path64;
       }
       const qp2 = new URLSearchParams(pathSegments.pop());
       qp2.sort();
       return [...pathSegments, qp2.toString()].join("?");
     }
-    function matchKey(mockDispatch2, { path: path63, method, body, headers }) {
-      const pathMatch = matchValue(mockDispatch2.path, path63);
+    function matchKey(mockDispatch2, { path: path64, method, body, headers }) {
+      const pathMatch = matchValue(mockDispatch2.path, path64);
       const methodMatch = matchValue(mockDispatch2.method, method);
       const bodyMatch = typeof mockDispatch2.body !== "undefined" ? matchValue(mockDispatch2.body, body) : true;
       const headersMatch = matchHeaders(mockDispatch2, headers);
@@ -48941,8 +48984,8 @@ var require_mock_utils = __commonJS({
       const basePath = key.query ? serializePathWithQuery(key.path, key.query) : key.path;
       const resolvedPath = typeof basePath === "string" ? safeUrl(basePath) : basePath;
       const resolvedPathWithoutTrailingSlash = removeTrailingSlash(resolvedPath);
-      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path63, ignoreTrailingSlash }) => {
-        return ignoreTrailingSlash ? matchValue(removeTrailingSlash(safeUrl(path63)), resolvedPathWithoutTrailingSlash) : matchValue(safeUrl(path63), resolvedPath);
+      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path64, ignoreTrailingSlash }) => {
+        return ignoreTrailingSlash ? matchValue(removeTrailingSlash(safeUrl(path64)), resolvedPathWithoutTrailingSlash) : matchValue(safeUrl(path64), resolvedPath);
       });
       if (matchedMockDispatches.length === 0) {
         throw new MockNotMatchedError(`Mock dispatch not matched for path '${resolvedPath}'`);
@@ -48981,19 +49024,19 @@ var require_mock_utils = __commonJS({
         mockDispatches.splice(index, 1);
       }
     }
-    function removeTrailingSlash(path63) {
-      while (path63.endsWith("/")) {
-        path63 = path63.slice(0, -1);
+    function removeTrailingSlash(path64) {
+      while (path64.endsWith("/")) {
+        path64 = path64.slice(0, -1);
       }
-      if (path63.length === 0) {
-        path63 = "/";
+      if (path64.length === 0) {
+        path64 = "/";
       }
-      return path63;
+      return path64;
     }
     function buildKey(opts) {
-      const { path: path63, method, body, headers, query } = opts;
+      const { path: path64, method, body, headers, query } = opts;
       return {
-        path: path63,
+        path: path64,
         method,
         body,
         headers,
@@ -49683,10 +49726,10 @@ var require_pending_interceptors_formatter = __commonJS({
       }
       format(pendingInterceptors) {
         const withPrettyHeaders = pendingInterceptors.map(
-          ({ method, path: path63, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
+          ({ method, path: path64, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
             Method: method,
             Origin: origin,
-            Path: path63,
+            Path: path64,
             "Status code": statusCode,
             Persistent: persist ? PERSISTENT : NOT_PERSISTENT,
             Invocations: timesInvoked,
@@ -49768,9 +49811,9 @@ var require_mock_agent = __commonJS({
         const acceptNonStandardSearchParameters = this[kMockAgentAcceptsNonStandardSearchParameters];
         const dispatchOpts = { ...opts };
         if (acceptNonStandardSearchParameters && dispatchOpts.path) {
-          const [path63, searchParams] = dispatchOpts.path.split("?");
+          const [path64, searchParams] = dispatchOpts.path.split("?");
           const normalizedSearchParams = normalizeSearchParams(searchParams, acceptNonStandardSearchParameters);
-          dispatchOpts.path = `${path63}?${normalizedSearchParams}`;
+          dispatchOpts.path = `${path64}?${normalizedSearchParams}`;
         }
         return this[kAgent].dispatch(dispatchOpts, handler);
       }
@@ -50171,12 +50214,12 @@ var require_snapshot_recorder = __commonJS({
        * @return {Promise<void>} - Resolves when snapshots are loaded
        */
       async loadSnapshots(filePath) {
-        const path63 = filePath || this.#snapshotPath;
-        if (!path63) {
+        const path64 = filePath || this.#snapshotPath;
+        if (!path64) {
           throw new InvalidArgumentError2("Snapshot path is required");
         }
         try {
-          const data = await readFile(resolve2(path63), "utf8");
+          const data = await readFile(resolve2(path64), "utf8");
           const parsed = JSON.parse(data);
           if (Array.isArray(parsed)) {
             this.#snapshots.clear();
@@ -50190,7 +50233,7 @@ var require_snapshot_recorder = __commonJS({
           if (error63.code === "ENOENT") {
             this.#snapshots.clear();
           } else {
-            throw new UndiciError(`Failed to load snapshots from ${path63}`, { cause: error63 });
+            throw new UndiciError(`Failed to load snapshots from ${path64}`, { cause: error63 });
           }
         }
       }
@@ -50201,11 +50244,11 @@ var require_snapshot_recorder = __commonJS({
        * @returns {Promise<void>} - Resolves when snapshots are saved
        */
       async saveSnapshots(filePath) {
-        const path63 = filePath || this.#snapshotPath;
-        if (!path63) {
+        const path64 = filePath || this.#snapshotPath;
+        if (!path64) {
           throw new InvalidArgumentError2("Snapshot path is required");
         }
-        const resolvedPath = resolve2(path63);
+        const resolvedPath = resolve2(path64);
         await mkdir(dirname3(resolvedPath), { recursive: true });
         const data = Array.from(this.#snapshots.entries()).map(([hash2, snapshot]) => ({
           hash: hash2,
@@ -50837,15 +50880,15 @@ var require_redirect_handler = __commonJS({
           return;
         }
         const { origin, pathname, search } = util2.parseURL(new URL(this.location, this.opts.origin && new URL(this.opts.path, this.opts.origin)));
-        const path63 = search ? `${pathname}${search}` : pathname;
-        const redirectUrlString = `${origin}${path63}`;
+        const path64 = search ? `${pathname}${search}` : pathname;
+        const redirectUrlString = `${origin}${path64}`;
         for (const historyUrl of this.history) {
           if (historyUrl.toString() === redirectUrlString) {
             throw new InvalidArgumentError2(`Redirect loop detected. Cannot redirect to ${origin}. This typically happens when using a Client or Pool with cross-origin redirects. Use an Agent for cross-origin redirects.`);
           }
         }
         this.opts.headers = cleanRequestHeaders(this.opts.headers, statusCode === 303, this.opts.origin !== origin);
-        this.opts.path = path63;
+        this.opts.path = path64;
         this.opts.origin = origin;
         this.opts.query = null;
       }
@@ -52605,10 +52648,10 @@ var require_cache_handler = __commonJS({
       }
       return locationUrl.pathname + locationUrl.search;
     }
-    function deleteCachedUri(store, cacheKey, path63) {
+    function deleteCachedUri(store, cacheKey, path64) {
       deleteCachedValue(store, {
         ...cacheKey,
-        path: path63
+        path: path64
       });
       for (let i10 = 0; i10 < util2.safeHTTPMethods.length; i10++) {
         const method = util2.safeHTTPMethods[i10];
@@ -52616,7 +52659,7 @@ var require_cache_handler = __commonJS({
           deleteCachedValue(store, {
             ...cacheKey,
             method,
-            path: path63
+            path: path64
           });
         }
       }
@@ -52627,9 +52670,9 @@ var require_cache_handler = __commonJS({
       }
       const values = Array.isArray(headerValue2) ? headerValue2 : [headerValue2];
       for (let i10 = 0; i10 < values.length; i10++) {
-        const path63 = getSameOriginPath(cacheKey, values[i10]);
-        if (path63 !== void 0) {
-          deleteCachedUri(store, cacheKey, path63);
+        const path64 = getSameOriginPath(cacheKey, values[i10]);
+        if (path64 !== void 0) {
+          deleteCachedUri(store, cacheKey, path64);
         }
       }
     }
@@ -57629,11 +57672,11 @@ var require_fetch = __commonJS({
       function dispatch({ body }) {
         const url2 = requestCurrentURL(request7);
         const agent = fetchParams.controller.dispatcher;
-        const path63 = url2.pathname + url2.search;
+        const path64 = url2.pathname + url2.search;
         const hasTrailingQuestionMark = url2.search.length === 0 && url2.href[url2.href.length - url2.hash.length - 1] === "?";
         return new Promise((resolve2, reject) => agent.dispatch(
           {
-            path: hasTrailingQuestionMark ? `${path63}?` : path63,
+            path: hasTrailingQuestionMark ? `${path64}?` : path64,
             origin: url2.origin,
             method: request7.method,
             body: agent.isMockActive ? request7.body && (request7.body.source || request7.body.stream) : body,
@@ -58580,9 +58623,9 @@ var require_util5 = __commonJS({
         }
       }
     }
-    function validateCookiePath(path63) {
-      for (let i10 = 0; i10 < path63.length; ++i10) {
-        const code = path63.charCodeAt(i10);
+    function validateCookiePath(path64) {
+      for (let i10 = 0; i10 < path64.length; ++i10) {
+        const code = path64.charCodeAt(i10);
         if (code < 32 || // exclude CTLs (0-31)
         code > 126 || // exclude DEL and non-ascii
         code === 59) {
@@ -61930,11 +61973,11 @@ var require_undici = __commonJS({
           if (typeof opts.path !== "string") {
             throw new InvalidArgumentError2("invalid opts.path");
           }
-          let path63 = opts.path;
+          let path64 = opts.path;
           if (!opts.path.startsWith("/")) {
-            path63 = `/${path63}`;
+            path64 = `/${path64}`;
           }
-          url2 = new URL(util2.parseOrigin(url2).origin + path63);
+          url2 = new URL(util2.parseOrigin(url2).origin + path64);
         } else {
           if (!opts) {
             opts = typeof url2 === "object" ? url2 : {};
@@ -62084,7 +62127,7 @@ function ensureFrontDoor(params) {
     if (supervisorPid !== void 0 && !distrusted.has(supervisorPid) && ports.isRunning(supervisorPid)) {
       if (state?.port !== void 0 && state.connectPort !== void 0) {
         if (supervisorPid === params.launcherPid && params.replace !== true && ports.isFrontDoorSupervisor(supervisorPid)) {
-          const token = (0, import_node_crypto10.randomUUID)();
+          const token = (0, import_node_crypto11.randomUUID)();
           writeFrontDoorSession(ports.fs, paths.frontdoorSessionsDir, { pid: params.launcherPid, startedAt: ports.now(), token, supervisorPid });
           return { port: state.port, connectPort: state.connectPort, token };
         }
@@ -62098,7 +62141,7 @@ function ensureFrontDoor(params) {
           continue;
         }
         if (verdict.ok) {
-          const token = (0, import_node_crypto10.randomUUID)();
+          const token = (0, import_node_crypto11.randomUUID)();
           writeFrontDoorSession(ports.fs, paths.frontdoorSessionsDir, { pid: params.launcherPid, startedAt: ports.now(), token, supervisorPid });
           return { port: state.port, connectPort: state.connectPort, token };
         }
@@ -62168,11 +62211,11 @@ function restartFrontDoor(params) {
   }
   return { action: "restarted", previousPid, pid };
 }
-var import_node_crypto10, FRONTDOOR_START_TIMEOUT_MS, FRONTDOOR_LAUNCHER_POLL_MS, FRONTDOOR_PROBE_ATTEMPTS, FRONTDOOR_EXIT_GRACE_MS, FrontDoorStartError;
+var import_node_crypto11, FRONTDOOR_START_TIMEOUT_MS, FRONTDOOR_LAUNCHER_POLL_MS, FRONTDOOR_PROBE_ATTEMPTS, FRONTDOOR_EXIT_GRACE_MS, FrontDoorStartError;
 var init_ensure2 = __esm({
   "src/frontdoor/ensure.ts"() {
     "use strict";
-    import_node_crypto10 = require("node:crypto");
+    import_node_crypto11 = require("node:crypto");
     init_cliError();
     init_state2();
     init_state();
@@ -62306,7 +62349,7 @@ var init_selfIdentity = __esm({
 // src/frontdoor/trust.ts
 function resolveTrustBundle(params) {
   const { caCertFile, bundlesDir, variable, inherited, fs: fs25 } = params;
-  if (inherited === void 0 || inherited === "" || import_node_path35.default.resolve(inherited) === import_node_path35.default.resolve(caCertFile)) {
+  if (inherited === void 0 || inherited === "" || import_node_path36.default.resolve(inherited) === import_node_path36.default.resolve(caCertFile)) {
     return { path: caCertFile };
   }
   const caPem = fs25.readFileUtf8(caCertFile);
@@ -62324,19 +62367,19 @@ function resolveTrustBundle(params) {
   }
   const combined = `${inheritedPem.trimEnd()}
 ${caPem}`;
-  const bundle = import_node_path35.default.join(bundlesDir, `${(0, import_node_crypto11.createHash)("sha256").update(combined).digest("hex").slice(0, BUNDLE_NAME_HEX_DIGITS)}.pem`);
+  const bundle = import_node_path36.default.join(bundlesDir, `${(0, import_node_crypto12.createHash)("sha256").update(combined).digest("hex").slice(0, BUNDLE_NAME_HEX_DIGITS)}.pem`);
   if (!fs25.exists(bundle)) {
     fs25.mkdirp(bundlesDir);
     fs25.writeFileAtomic(bundle, combined);
   }
   return { path: bundle };
 }
-var import_node_crypto11, import_node_path35, BUNDLE_NAME_HEX_DIGITS;
+var import_node_crypto12, import_node_path36, BUNDLE_NAME_HEX_DIGITS;
 var init_trust = __esm({
   "src/frontdoor/trust.ts"() {
     "use strict";
-    import_node_crypto11 = require("node:crypto");
-    import_node_path35 = __toESM(require("node:path"), 1);
+    import_node_crypto12 = require("node:crypto");
+    import_node_path36 = __toESM(require("node:path"), 1);
     BUNDLE_NAME_HEX_DIGITS = 16;
   }
 });
@@ -62528,19 +62571,19 @@ async function downloadAndInstall(ports, asset, target) {
   const tempDir = ports.fs.mkdtemp();
   try {
     const assetUrl = `${DOWNLOAD_BASE_URL}/${asset}`;
-    ports.fs.writeFileBytes(import_node_path36.default.join(tempDir, asset), await mustDownload(ports.http, assetUrl));
-    ports.fs.writeFileUtf8(import_node_path36.default.join(tempDir, `${asset}.sha256`), Buffer.from(await mustDownload(ports.http, `${assetUrl}.sha256`)).toString("utf8"));
-    const downloaded = ports.fs.readFileBytes(import_node_path36.default.join(tempDir, asset));
-    const sidecar = ports.fs.readFileUtf8(import_node_path36.default.join(tempDir, `${asset}.sha256`));
+    ports.fs.writeFileBytes(import_node_path37.default.join(tempDir, asset), await mustDownload(ports.http, assetUrl));
+    ports.fs.writeFileUtf8(import_node_path37.default.join(tempDir, `${asset}.sha256`), Buffer.from(await mustDownload(ports.http, `${assetUrl}.sha256`)).toString("utf8"));
+    const downloaded = ports.fs.readFileBytes(import_node_path37.default.join(tempDir, asset));
+    const sidecar = ports.fs.readFileUtf8(import_node_path37.default.join(tempDir, `${asset}.sha256`));
     if (downloaded === void 0 || sidecar === void 0) {
       throw new UpdateDownloadError(`the downloaded files for ${asset} are missing from ${tempDir}`);
     }
     const expected = expectedSha256(sidecar);
-    const actual = (0, import_node_crypto12.createHash)("sha256").update(downloaded).digest("hex");
+    const actual = (0, import_node_crypto13.createHash)("sha256").update(downloaded).digest("hex");
     if (expected === void 0 || expected !== actual) {
       throw new UpdateDownloadError(`checksum mismatch for ${asset} (expected ${expected ?? "(none)"}, got ${actual})`);
     }
-    const tempBinary = import_node_path36.default.join(import_node_path36.default.dirname(target), `.${import_node_path36.default.basename(target)}.${String(process.pid)}.${(0, import_node_crypto12.randomUUID)()}.tmp`);
+    const tempBinary = import_node_path37.default.join(import_node_path37.default.dirname(target), `.${import_node_path37.default.basename(target)}.${String(process.pid)}.${(0, import_node_crypto13.randomUUID)()}.tmp`);
     ports.fs.writeFileBytes(tempBinary, downloaded);
     try {
       ports.fs.chmod(tempBinary, EXECUTABLE_MODE);
@@ -62587,12 +62630,12 @@ async function runSelfUpdate(ports, options) {
   }
   return { current: options.currentVersion, latest, action: "updated" };
 }
-var import_node_crypto12, import_node_path36, LATEST_RELEASE_URL, DOWNLOAD_BASE_URL, MACOS_X64_NOTE, BREW_PREFIXES, EXECUTABLE_MODE, UpdateChannelError, UpdateConflictError, UpdateDownloadError;
+var import_node_crypto13, import_node_path37, LATEST_RELEASE_URL, DOWNLOAD_BASE_URL, MACOS_X64_NOTE, BREW_PREFIXES, EXECUTABLE_MODE, UpdateChannelError, UpdateConflictError, UpdateDownloadError;
 var init_update = __esm({
   "src/update/update.ts"() {
     "use strict";
-    import_node_crypto12 = require("node:crypto");
-    import_node_path36 = __toESM(require("node:path"), 1);
+    import_node_crypto13 = require("node:crypto");
+    import_node_path37 = __toESM(require("node:path"), 1);
     init_cliError();
     LATEST_RELEASE_URL = "https://github.com/ExaDev/agent-shim/releases/latest";
     DOWNLOAD_BASE_URL = "https://github.com/ExaDev/agent-shim/releases/latest/download";
@@ -62763,13 +62806,13 @@ function agentShimCliPath(distDir = typeof __AGENT_SHIM_DIST_DIR__ === "string"
   if (distDir === void 0) {
     throw new OwnCliPathUnknownError();
   }
-  return import_node_path38.default.join(distDir, OWN_CLI_FILE_NAME);
+  return import_node_path39.default.join(distDir, OWN_CLI_FILE_NAME);
 }
-var import_node_path38, OWN_CLI_FILE_NAME, OwnCliPathUnknownError;
+var import_node_path39, OWN_CLI_FILE_NAME, OwnCliPathUnknownError;
 var init_ownCli = __esm({
   "src/ownCli.ts"() {
     "use strict";
-    import_node_path38 = __toESM(require("node:path"), 1);
+    import_node_path39 = __toESM(require("node:path"), 1);
     init_cliError();
     OWN_CLI_FILE_NAME = "cli.cjs";
     OwnCliPathUnknownError = class extends CliError {
@@ -63080,22 +63123,22 @@ function capabilityFromProxyAuthorization(value2) {
   return password === "" ? void 0 : password;
 }
 function digest(token) {
-  return (0, import_node_crypto13.createHash)("sha256").update(token, "utf8").digest();
+  return (0, import_node_crypto14.createHash)("sha256").update(token, "utf8").digest();
 }
 function isLiveCapability(presented, live) {
   const presentedDigest = digest(presented);
   let matched = false;
   for (const token of live) {
-    const equal = (0, import_node_crypto13.timingSafeEqual)(presentedDigest, digest(token));
+    const equal = (0, import_node_crypto14.timingSafeEqual)(presentedDigest, digest(token));
     matched = equal || matched;
   }
   return matched;
 }
-var import_node_crypto13, CONNECT_PROXY_USER, CONNECT_PROXY_REALM, BASIC_SCHEME;
+var import_node_crypto14, CONNECT_PROXY_USER, CONNECT_PROXY_REALM, BASIC_SCHEME;
 var init_capability = __esm({
   "src/frontdoor/capability.ts"() {
     "use strict";
-    import_node_crypto13 = require("node:crypto");
+    import_node_crypto14 = require("node:crypto");
     CONNECT_PROXY_USER = "agent-shim";
     CONNECT_PROXY_REALM = "agent-shim front door";
     BASIC_SCHEME = "basic";
@@ -63133,7 +63176,7 @@ function buildEnv(params) {
   const parentCustomHeaders = params.baseEnv.ANTHROPIC_CUSTOM_HEADERS;
   let providerCustomHeaders;
   if (!params.configDirEscapeHatch && params.resolvedIdentityName !== void 0) {
-    env.CLAUDE_CONFIG_DIR = import_node_path39.default.join(params.identitiesDir, params.resolvedIdentityName);
+    env.CLAUDE_CONFIG_DIR = import_node_path40.default.join(params.identitiesDir, params.resolvedIdentityName);
   }
   if (params.provider !== void 0) {
     const providerEnv = params.provider.definition.env ?? {};
@@ -63145,7 +63188,7 @@ function buildEnv(params) {
     }
   }
   if (params.provider !== void 0) {
-    env.ANTHROPIC_AUTH_TOKEN = void 0;
+    env.ANTHROPIC_AUTH_TOKEN = params.remoteControl ? void 0 : PROVIDER_SESSION_PLACEHOLDER;
     env.ANTHROPIC_API_KEY = void 0;
     env.CLAUDE_CODE_OAUTH_TOKEN = void 0;
   } else if (params.identityCredential !== void 0) {
@@ -63177,17 +63220,18 @@ function buildEnv(params) {
   }
   return env;
 }
-var import_node_path39, LOOPBACK_HOSTS;
+var import_node_path40, LOOPBACK_HOSTS, PROVIDER_SESSION_PLACEHOLDER;
 var init_flags = __esm({
   "src/launcher/flags.ts"() {
     "use strict";
-    import_node_path39 = __toESM(require("node:path"), 1);
+    import_node_path40 = __toESM(require("node:path"), 1);
     init_envBool();
     init_credential();
     init_headers();
     init_capability();
     init_route();
     LOOPBACK_HOSTS = ["127.0.0.1", "localhost", "::1"];
+    PROVIDER_SESSION_PLACEHOLDER = "agent-shim-provider-session";
   }
 });
 
@@ -63266,7 +63310,7 @@ function newestTranscript(fs25, projectDir) {
     if (!name.endsWith(".jsonl")) {
       continue;
     }
-    const candidate = import_node_path40.default.join(projectDir, name);
+    const candidate = import_node_path41.default.join(projectDir, name);
     const stat = fs25.lstat(candidate);
     if (stat?.kind === "file" && stat.mtimeMs > newestMs) {
       newestMs = stat.mtimeMs;
@@ -63276,24 +63320,24 @@ function newestTranscript(fs25, projectDir) {
   return newest;
 }
 function latestConversationId(fs25, params) {
-  const file2 = newestTranscript(fs25, import_node_path40.default.join(params.claudeHome, "projects", projectDirNameOf(params.cwd)));
-  return file2 === void 0 ? void 0 : import_node_path40.default.basename(file2, ".jsonl");
+  const file2 = newestTranscript(fs25, import_node_path41.default.join(params.claudeHome, "projects", projectDirNameOf(params.cwd)));
+  return file2 === void 0 ? void 0 : import_node_path41.default.basename(file2, ".jsonl");
 }
 function resumedContextTokens(fs25, params) {
   const target = resumeTargetOf(params.passthrough);
   if (target === void 0) {
     return void 0;
   }
-  const projectDir = import_node_path40.default.join(params.claudeHome, "projects", projectDirNameOf(params.cwd));
-  const file2 = target.kind === "id" ? import_node_path40.default.join(projectDir, `${target.id}.jsonl`) : newestTranscript(fs25, projectDir);
+  const projectDir = import_node_path41.default.join(params.claudeHome, "projects", projectDirNameOf(params.cwd));
+  const file2 = target.kind === "id" ? import_node_path41.default.join(projectDir, `${target.id}.jsonl`) : newestTranscript(fs25, projectDir);
   const text2 = file2 === void 0 ? void 0 : fs25.readFileUtf8(file2);
   return text2 === void 0 ? void 0 : contextTokensOfTranscript(text2);
 }
-var import_node_path40;
+var import_node_path41;
 var init_resumeContext = __esm({
   "src/usage/resumeContext.ts"() {
     "use strict";
-    import_node_path40 = __toESM(require("node:path"), 1);
+    import_node_path41 = __toESM(require("node:path"), 1);
   }
 });
 
@@ -63688,7 +63732,7 @@ function decideLaunch(params, readOnly) {
     identityDefaultConfigProfile: loadedIdentity?.config.defaultConfigProfile,
     globalDefaultConfigProfile: params.globalDefaultConfigProfile
   });
-  if (configProfileDecision.name !== void 0 && params.allowMissingConfigProfile !== true && fs25.readConfigFile(import_node_path41.default.join(paths.configProfilesDir, `${configProfileDecision.name}.json`)) === void 0) {
+  if (configProfileDecision.name !== void 0 && params.allowMissingConfigProfile !== true && fs25.readConfigFile(import_node_path42.default.join(paths.configProfilesDir, `${configProfileDecision.name}.json`)) === void 0) {
     log.error(
       `agent-shim: no configuration profile named "${configProfileDecision.name}" (selected via ${configProfileDecision.source}). Run \`agent-shim profile add ${configProfileDecision.name}\` first.`
     );
@@ -63783,7 +63827,7 @@ function decideLaunch(params, readOnly) {
   }
   const pinnedVersion = resolveClaudeVersion({ env, ...parsedArgv.claudeVersion === void 0 ? {} : { flag: parsedArgv.claudeVersion }, ...cascadeLaunch?.claudeVersion === void 0 ? {} : { cascade: cascadeLaunch.claudeVersion } });
   const discovered = params.resolveClaudeBinary(pinnedVersion === void 0 ? void 0 : { version: pinnedVersion.version });
-  const flags = resolveLaunchFlags({
+  const requestedFlags = resolveLaunchFlags({
     env,
     ...cascadeLaunch === void 0 ? {} : { cascade: cascadeLaunch },
     flags: {
@@ -63793,12 +63837,17 @@ function decideLaunch(params, readOnly) {
       ...parsedArgv.trackUsage === void 0 ? {} : { trackUsage: parsedArgv.trackUsage }
     }
   });
+  const loginlessProvider = requestedFlags.remoteControl && selectedProvider !== void 0 && farmIdentity !== void 0 && params.hasStoredLogin?.(farmIdentity) === false ? { identity: farmIdentity, provider: selectedProvider.name } : void 0;
+  if (loginlessProvider !== void 0 && !readOnly) {
+    log.info(`agent-shim: identity ${loginlessProvider.identity} has no stored login, so Remote Control, which needs one, is off for this launch; provider ${loginlessProvider.provider} runs without it`);
+  }
+  const flags = loginlessProvider === void 0 ? requestedFlags : { ...requestedFlags, remoteControl: false };
   const args = buildArgv({
     toolFlags: buildFlagArgs(flags),
     extraFlags: splitExtraFlags(env.CLAUDE_EXTRA_FLAGS),
     passthrough: params.supervised === void 0 ? parsedArgv.rest : withSupervision(parsedArgv.rest, params.supervised)
   });
-  const configDir = configDirEscapeHatchApplies || identityDecision.name === void 0 ? env.CLAUDE_CONFIG_DIR : import_node_path41.default.join(paths.identitiesDir, identityDecision.name);
+  const configDir = configDirEscapeHatchApplies || identityDecision.name === void 0 ? env.CLAUDE_CONFIG_DIR : import_node_path42.default.join(paths.identitiesDir, identityDecision.name);
   const decision = {
     identitySource: identityDecision.source,
     configDirEscapeHatch: identityDecision.configDirEscapeHatch,
@@ -63839,7 +63888,7 @@ function prepareLaunch(params) {
   );
   const updateCheck = runLaunchUpdateCheck({
     mode: params.updateMode ?? "off",
-    checkPath: import_node_path41.default.join(paths.root, "update.check"),
+    checkPath: import_node_path42.default.join(paths.root, "update.check"),
     currentVersion: package_default.version,
     port: params.update
   });
@@ -63908,7 +63957,7 @@ function prepareLaunch(params) {
     log.info(`agent-shim: routing through the front door on 127.0.0.1:${String(frontDoor.port)}${resolvedProvider === void 0 ? ` (OAuth via the door's CONNECT surface on 127.0.0.1:${String(frontDoor.connectPort)}, usage recorded)` : ` (provider ${resolvedProvider.name})`}`);
   }
   const frontDoorRelease = frontDoor === void 0 ? void 0 : frontDoorPort?.release;
-  const sessionId = params.supervised?.sessionId ?? (0, import_node_crypto14.randomUUID)();
+  const sessionId = params.supervised?.sessionId ?? (0, import_node_crypto15.randomUUID)();
   const finalEnv = buildEnv({
     baseEnv: env,
     configDirEscapeHatch: configDirEscapeHatchApplies,
@@ -63918,7 +63967,8 @@ function prepareLaunch(params) {
     ...identityCredential === void 0 ? {} : { identityCredential },
     ...frontDoor === void 0 ? {} : { frontdoor: frontDoor },
     ...headroom === void 0 ? {} : { headroom },
-    sessionId
+    sessionId,
+    remoteControl: resolvedFlags.remoteControl
   });
   const releases = [...headroom === void 0 || headroomPort === void 0 ? [] : [headroomPort.release], ...frontDoorRelease === void 0 ? [] : [frontDoorRelease]];
   const release = () => {
@@ -63940,7 +63990,8 @@ function resolveLaunch(params) {
     ...decided.provider === void 0 ? {} : { provider: decided.provider },
     ...frontDoor ? { frontdoor: { port: 0, connectPort: 0, trustBundlePath: "", sessionToken: "" } } : {},
     ...decided.flags.headroom ? { headroom: { socketPath: "", projectId: "" } } : {},
-    sessionId: ""
+    sessionId: "",
+    remoteControl: decided.flags.remoteControl
   });
   const credentialNames = decided.identityCredentialBlock === void 0 ? [] : Object.keys(credentialVariables(decided.identityCredentialBlock.target ?? "bearer", ""));
   const environment = [.../* @__PURE__ */ new Set([...Object.keys(built).filter((name) => built[name] !== env[name]), ...credentialNames])].sort();
@@ -63971,12 +64022,12 @@ function runLaunchPlan(plan, spawn8) {
 function runLauncher(params) {
   params.proc.exit(runLaunchPlan(prepareLaunch(params), params.spawn));
 }
-var import_node_crypto14, import_node_path41;
+var import_node_crypto15, import_node_path42;
 var init_launcher = __esm({
   "src/launcher.ts"() {
     "use strict";
-    import_node_crypto14 = require("node:crypto");
-    import_node_path41 = __toESM(require("node:path"), 1);
+    import_node_crypto15 = require("node:crypto");
+    import_node_path42 = __toESM(require("node:path"), 1);
     init_package();
     init_envBool();
     init_argv();
@@ -64031,7 +64082,7 @@ function buildFarmRuntime(paths, cwd) {
         ...cliOverride === void 0 ? {} : { cliOverride }
       }).input,
       now: () => Date.now(),
-      uniqueSuffix: `${String(process.pid)}.${(0, import_node_crypto15.randomUUID)()}`,
+      uniqueSuffix: `${String(process.pid)}.${(0, import_node_crypto16.randomUUID)()}`,
       // Zombie-aware on purpose: a previous launcher that crashed out of a resync without releasing the lock may sit unreaped, still answering signal 0 as alive, and must read as a dead holder so this launch takes the lock over instead of timing out.
       lock: { pid: process.pid, isRunning: realIsProcessRunning, sleep: realSleepSync }
     },
@@ -64057,6 +64108,7 @@ function realPrepareLaunchParams(paths, options) {
     headroom: realHeadroomPort(paths, { spawnDaemon: options.spawnDaemon, cwd: farm.runtime.cwd }),
     frontdoor: realFrontDoorPort(paths, options.spawnDaemon),
     credentials: { ...realCredentialPort, cache: realCredentialCacheEnv(paths) },
+    hasStoredLogin: (identity) => identitySignIn(realFarmFs, { platform: process.platform, run: realRunPort }, { farmRoot: import_node_path43.default.join(paths.identitiesDir, identity), hasCredentialBlock: false }).state !== "signed-out",
     ...farm.directoryIdentity === void 0 ? {} : { directoryPinnedIdentity: farm.directoryIdentity },
     ...farm.directoryConfigProfile === void 0 ? {} : { directoryRuleConfigProfile: farm.directoryConfigProfile },
     ...farm.globalDefaultConfigProfile === void 0 ? {} : { globalDefaultConfigProfile: farm.globalDefaultConfigProfile },
@@ -64093,12 +64145,13 @@ function resolveClaudeLaunch(options) {
   };
   return { resolution: resolveLaunch(realPrepareLaunchParams(paths, { proc, log, spawnDaemon, farm: buildFarmRuntime(paths, options.cwd) })), warnings };
 }
-var import_node_os9, import_node_crypto15, LaunchRefusedError;
+var import_node_os9, import_node_path43, import_node_crypto16, LaunchRefusedError;
 var init_launchWiring = __esm({
   "src/launchWiring.ts"() {
     "use strict";
     import_node_os9 = __toESM(require("node:os"), 1);
-    import_node_crypto15 = require("node:crypto");
+    import_node_path43 = __toESM(require("node:path"), 1);
+    import_node_crypto16 = require("node:crypto");
     init_cliError();
     init_claudeShim();
     init_classify();
@@ -64110,6 +64163,7 @@ var init_launchWiring = __esm({
     init_launchHook();
     init_cascade();
     init_paths();
+    init_signIn();
     init_realPorts();
     LaunchRefusedError = class extends CliError {
       exitCode;
@@ -64211,7 +64265,7 @@ function buildCloudRequestBody(params) {
   if (isCcpaEndpoint(base)) {
     return JSON.stringify({
       project: params.config.cloud.projectId ?? CCPA_DEFAULT_PROJECT_ID,
-      requestId: `agent/${(0, import_node_crypto16.randomUUID)()}/${String(Date.now())}/1`,
+      requestId: `agent/${(0, import_node_crypto17.randomUUID)()}/${String(Date.now())}/1`,
       request: params.request,
       model: params.model,
       userAgent: "antigravity"
@@ -64271,11 +64325,11 @@ async function* callCloudAntigravity(params, fetchFn = fetch) {
     }
   }
 }
-var import_node_crypto16, CCPA_ENDPOINT, CCPA_DEFAULT_PROJECT_ID, CCPA_USER_AGENT, AntigravityUpstreamError;
+var import_node_crypto17, CCPA_ENDPOINT, CCPA_DEFAULT_PROJECT_ID, CCPA_USER_AGENT, AntigravityUpstreamError;
 var init_cloudUpstream = __esm({
   "src/antigravity/cloudUpstream.ts"() {
     "use strict";
-    import_node_crypto16 = require("node:crypto");
+    import_node_crypto17 = require("node:crypto");
     CCPA_ENDPOINT = "https://daily-cloudcode-pa.googleapis.com";
     CCPA_DEFAULT_PROJECT_ID = "aicode-consumers";
     CCPA_USER_AGENT = "antigravity/cli/1.3.5 (aidev_client; os_type=darwin; arch=arm64; cl=998863838; auth_method=consumer)";
@@ -78866,7 +78920,7 @@ async function jGe(e14, t10, n10, r10) {
   if (d.length === 0) return [];
   return iv(Buffer.from(gZ(d)), { limit: r10.limit, offset: r10.offset }, l, c10);
 }
-var import_node_module, import_crypto, import_crypto2, import_path, import_node_fs15, import_node_process4, import_fs, import_os, import_path2, yy, import_fs2, import_promises, import_path3, import_readline, import_promises2, import_path4, import_os2, import_path5, Se, import_promises3, xe, import_promises4, import_fs3, import_promises5, import_os3, import_path6, import_promises6, import_os4, import_node_path42, import_node_os10, import_node_process5, import_path7, import_events, import_fs4, import_promises7, import_path8, import_child_process, import_util9, import_child_process2, import_fs5, import_path9, import_path10, import_crypto3, import_fs6, import_path11, import_promises8, import_path12, import_path13, import_promises9, import_path14, import_path15, import_fs7, import_promises10, import_path16, import_crypto4, import_path17, import_async_hooks, import_fs8, import_promises11, import_crypto5, import_fs9, import_promises12, import_path18, import_promises13, import_path19, import_crypto6, import_path20, import_path21, import_path22, import_path23, import_promises14, import_fs10, import_promises15, import_path24, import_util10, import_path25, import_os5, import_path26, import_path27, import_path28, import_path29, import_path30, import_net, import_os6, import_child_process3, import_fs11, import_child_process4, import_crypto7, import_promises16, import_module, import_os7, import_path31, import_url, import_events2, import_child_process5, import_fs12, import_readline2, import_string_decoder, import_fs13, import_promises17, import_os8, import_path32, import_crypto8, import_os9, import_fs14, import_path33, import_crypto9, import_fs15, import_promises18, import_path34, IZ, DZ, v_, LZ, OT, NZ, UZ, kT, X, FZ, dr, HZ, jZ, BZ, ot, st, ed, Kv, Te, Me, Oo, nd, hF, Xv, Qv, rd, LF, or, WF, ZF, sA, XF, od, sd, hg, id, Sg, Oz, fA, $z, Wz, Zz, s$, a$, d$, f$, g$, _$, E$, v$, T$, O$, I$, L$, wg, z$, j$, G$, V$, yA, SA, rH, lH, uH, _H, EH, EA, RH, TH, kH, DH, NH, zH, jH, GH, VH, ZH, JH, ej, nj, ij, cj, uj, CA, bj, Aj, wj, PT, KZ, GZ, VGe, VZ, MT, wr, jo, JZ, XZ, NT, UT, FT, zT, Bo, $T, HT, jT, BT, a4, sp, l4, c4, vt, u4, Nt, KT, d4, p4, uc, GT, m4, g4, WT, _4, y4, VT, Dn, Et, b4, C4, v4, A4, ra, x4, ip, qT, ZT, w4, O4, ro, P4, I4, D4, L4, M4, N4, U4, YT, JT, Sn, H4, Ko, j4, oo, XT, QT, G4, W4, V4, ew, Z4, Y4, tw, X4, nw, R_, rw, ow, Go, sw, iw, aw, lw, ei, aY, cw, Or, cY, uw, dw, lp, pw, cp, mY, gY, up, _Y, aa, fw, la, EY, bY, CY, vY, AY, RY, xY, TY, wY, OY, kY, PY, IY, mw, x_, gw, ca, MY, et, dp, hw, pp, zY, $Y, _w, HY, ua, yw, wt, KY, T_, Sw, WY, VY, qY, so, mp, Ew, vw, bw, YY, Cw, JY, XY, kr, QY, e9, Wo, n9, da, o9, s9, i9, a9, l9, c9, u9, d9, p9, f9, m9, g9, h9, _9, y9, S9, E9, b9, C9, v9, A9, R9, x9, T9, Qe, Aw, pa, hp, Rw, dc, k9, w_, P9, Pr, xw, I9, fa, D9, L9, _p, N9, ma, yp, z9, Tw, $9, H9, ww, Vo, Ir, pc, W9, V9, q9, Ow, Y9, Sp, J9, Ep, X9, qo, Q9, bp, kw, eJ, Pw, Iw, Dw, Lw, tJ, nJ, rJ, oJ, sJ, ti, io, iJ, Mw, Nw, Cp, aJ, Uw, Fw, ga, pr, uJ, Fe, $w, O_, k_, I_, ha, Bw, D_, qw, Vw, N_, U_, yJ, _a3, Yo, Zw, bJ, Rp, Yw, vJ, AJ, Jw, xp, Xw, Tp, Qw, kJ, ya, IJ, DJ, Sa, MJ, fc, NJ, eO, FJ, zJ, $J, tO, Ea, jJ, nO, rO, sO, iO, Vn, GJ, Ln, Jo, aO, lO, cO, wp, XJ, QJ, uO, ba, dO, pO, fO, Dr, ao, mO, Ca, gO, z_, $_, H_, j_, B_, K_, G_, W_, V_, q_, Z_, _O, Y_, J_, yO, X_, c3, Q_, ey, ty, ny, ry, oy, sy, iy, ay, ly, cy, we, SO, en, d3, Pp, vO, g3, gy, wO, S3, BO, KO, Ip, Dp, v3, GO, WO, F9e, IO, A3, hy, x3, NO, I3, Ay, Ry, D3, xy, L3, bc, xa, Ty, wy, Oy, ky, XO, Py, Iy, Dy, Ly, My, Ny, Uy, Fy, zy, nk, rk, d3e, p3e, f3e, m3e, g3e, U3, jp, jy, ik, By, Ky, lk, $3, uk, ck, G3, W3, V3, it, Y3, J3, hk, tXe, Q3, kt, We, gX, Ta, SX, mr, Yp, Jp, eS, nS, yXe, IX, DX, rS, ka, oS, Ok, kk, HX, jX, ef, bXe, Uk, Mr, wc, Fk, Pa, OXe, kXe, iS, PXe, IXe, DXe, GX, YX, JX, XX, QX, e6, t6, Yk, n6, r6, o6, s6, i6, a6, l6, c6, Vk, uS, lf, dS, Qk, eP, uf, os10, qXe, ZXe, h6, tP, df, _6, y6, S6, E6, b6, Jn, gr, nP, rP, Dc, pS, oP, gS, lP, C6, mS, lS, sP, w6, O6, dP, k6, YXe, JXe, P6, I6, pf, L6, fP, XXe, QXe, M6, SS, z6, $6, j6, bP, CP, G6, Lc, si, Z6, ES, bS, X6, Q6, e5, t5, n5, u5, r5, o5, s5, i5, a5, l5, c5, u52, d5, p5, f5, m5, g5, h5, _5, y5, S5, E5, b5, C5, v5, A5, R5, x5, T5, w5, O5, k5, P5, I5, D5, L5, M5, N5, U5, F5, z5, $5, H5, j5, B5, K5, G5, W5, V5, q5, Z5, Y5, J5, X5, Q5, e8, t8, n8, r8, o8, s8, i8, a8, l8, c8, u8, d8, CS, p8, f8, m8, g8, h8, _8, y8, S8, E8, b8, C8, v8, A8, R8, x8, T8, w8, O8, k8, P8, I8, D8, L8, M8, N8, U8, F8, z8, $8, H8, j8, B8, K8, G8, W8, V8, q8, Z8, Y8, J8, X8, Q8, e7, t7, n7, r7, o7, s7, i7, a7, l7, c7, u7, d7, p7, f7, m7, g7, h7, _7, y7, S7, E7, b7, C7, TP, v7, L6e, RP, A7, x7, kP, ff, U6e, F6e, Ua, z6e, $6e, H6e, j6e, PP, IP, vS, DP, w7, LP, O7, k7, P7, AS, RS, xS, I7, MP, NP, D7, G6e, L7, W6e, M7, N7, UP, V6e, U7, F7, z7, $7, H7, j7, B7, q6e, is, wS, Fa, K7, G7, W7, i5e, X7, Q7, HP, $P, BP, tQ, WP, VP, JP, _Q, QP, eI, xQ, Uc, DS, $a, wQ, OQ, kQ, PQ, IQ, DQ, LQ, MQ, NQ, UQ, FQ, zQ, $Q, HQ, jQ, BQ, KQ, GQ, WQ, VQ, qQ, ZQ, YQ, JQ, XQ, QQ, eee, tee, nee, ree, oee, see, iee, aee, lee, cee, uee, dee, pee, fee, mee, gee, hee, _ee, yee, See, Eee, bee, Cee, vee, Aee, Ree, xee, Tee, wee, Oee, kee, Pee, Iee, Dee, Lee, Mee, Nee, Uee, Fee, zee, $ee, Hee, jee, Bee, Kee, Gee, Wee, Vee, qee, Zee, Yee, Jee, Xee, Qee, ete, tte, nte, rte, ote, ste, ite, ate, lte, cte, ute, dte, pte, fte, mte, gte, hte, _te, yte, Ste, Ete, bte, Cte, vte, Ate, Rte, xte, Tte, wte, Ote, kte, Pte, Ite, Dte, Lte, Mte, Nte, Ute, Fte, zte, $te, Hte, jte, Bte, Kte, Gte, Wte, Vte, qte, Zte, Yte, Jte, Xte, Qte, ene, tne, nne, rne, one, sne, ine, ane, lne, cne, une, dne, pne, fne, mne, gne, hne, _ne, yne, Sne, Ene, bne, Cne, vne, Ane, Rne, xne, Tne, wne, One, kne, Pne, Ine, Dne, Lne, Mne, Nne, Une, Fne, zne, $ne, Hne, jne, Bne, Kne, Gne, Wne, Vne, qne, Zne, Yne, Jne, Xne, Qne, ere, tre, nre, rre, ore, sre, ire, are, lre, cre, ure, dre, pre, fre, mre, gre, hre, _re, yre, Sre, Ere, bre, Cre, vre, Are, Rre, xre, Tre, wre, Ore, kre, Pre, Ire, Dre, Lre, Mre, Nre, Ure, Fre, zre, $re, Hre, jre, Bre, Kre, Gre, Wre, Vre, qre, Zre, Yre, Jre, Xre, Qre, eoe, toe, noe, roe, ooe, soe, ioe, aoe, loe, coe, uoe, doe, poe, foe, moe, goe, hoe, _oe, yoe, Soe, Eoe, boe, Coe, voe, Aoe, Roe, xoe, Toe, woe, Ooe, koe, Poe, Ioe, Doe, Loe, Moe, Noe, Uoe, Foe, zoe, $oe, Hoe, joe, Boe, Koe, Goe, Woe, Voe, qoe, Zoe, Yoe, Joe, Xoe, Qoe, ese, tse, nse, rse, ose, sse, ise, ase, lse, cse, use, dse, pse, fse, mse, gse, hse, _se, yse, Sse, Ese, LS, bse, Cse, vse, Ase, Rse, xse, Tse, wse, Ose, kse, Pse, Ise, Dse, Lse, Mse, Nse, Use, Fse, zse, $se, Hse, jse, Bse, Kse, Gse, Wse, Vse, qse, Zse, Yse, Jse, Xse, Qse, eie, tie, nie, rie, oie, sie, iie, aie, lie, cie, uie, die, pie, fie, mie, gie, hie, _ie, yie, Sie, Eie, bie, Cie, vie, Aie, Rie, xie, Tie, wie, Oie, kie, Pie, Iie, Die, Lie, Mie, Nie, Uie, Fie, zie, $ie, Hie, jie, Bie, Kie, Gie, Wie, Vie, qie, Zie, Yie, Jie, Xie, Qie, eae, tae, nae, rae, oae, sae, iae, aae, lae, cae, uae, dae, pae, fae, mae, gae, hae, _ae, yae, Sae, Eae, bae, Cae, vae, Aae, Rae, xae, Tae, wae, Oae, kae, Pae, Iae, Dae, Lae, Mae, Nae, Uae, Fae, zae, $ae, Hae, jae, Bae, Kae, Gae, Wae, Vae, qae, Zae, Yae, Jae, Xae, Qae, ele, tle, nle, rle, ole, sle, ile, ale, lle, cle, ule, dle, ple, fle, mle, gle, hle, _le, yle, Sle, Ele, ble, Cle, vle, Ale, Rle, xle, Tle, wle, Ole, kle, Ple, Ile, Dle, Lle, Mle, Nle, Ule, Fle, zle, $le, Hle, jle, Ble, Kle, Gle, Wle, Vle, qle, Zle, Yle, Jle, MS, Xle, Qle, ece, tce, nce, rce, oce, sce, ice, ace, lce, cce, uce, dce, pce, fce, mce, gce, hce, _ce, yce, Sce, Ece, bce, Cce, vce, Ace, Rce, xce, Tce, wce, Oce, kce, Pce, Ice, Dce, Lce, Mce, Nce, Uce, Fce, zce, $ce, Hce, jce, Bce, Kce, Gce, Wce, Vce, qce, Zce, Yce, Jce, Xce, Qce, eue, tue, nue, rue, oue, sue, iue, aue, lue, cue, uue, due, pue, fue, mue, gue, hue, _ue, yue, Sue, Eue, bue, Cue, vue, Aue, Rue, xue, Tue, wue, Oue, kue, Pue, Iue, Due, Lue, Mue, Nue, Uue, Fue, zue, $ue, Hue, jue, Bue, Kue, Gue, Wue, Vue, que, Zue, Yue, Jue, Xue, Que, ede, tde, nde, rde, ode, sde, ide, ade, lde, cde, ude, dde, pde, fde, mde, gde, hde, _de, yde, Sde, Ede, bde, Cde, vde, Ade, Rde, xde, Tde, wde, Ode, kde, Pde, Ide, Dde, Lde, Mde, Nde, Ude, Fde, zde, $de, Hde, jde, Bde, Kde, Gde, Wde, Vde, qde, Zde, Yde, Jde, Xde, Qde, epe, tpe, npe, rpe, ope, spe, ipe, ape, lpe, cpe, upe, dpe, ppe, fpe, mpe, gpe, hpe, _pe, ype, Spe, Epe, bpe, Cpe, vpe, Ape, Rpe, xpe, Tpe, wpe, Ope, kpe, Ppe, Ipe, Dpe, Lpe, Mpe, Npe, Upe, Fpe, zpe, $pe, Hpe, jpe, Bpe, Kpe, Gpe, Wpe, Vpe, qpe, Zpe, Ype, Jpe, Xpe, Qpe, efe, tfe, nfe, rfe, ofe, sfe, ife, afe, lfe, cfe, ufe, dfe, pfe, ffe, mfe, gfe, hfe, _fe, yfe, Sfe, Efe, bfe, Cfe, vfe, Afe, Rfe, xfe, Tfe, wfe, Ofe, kfe, Pfe, Ife, Dfe, Lfe, Mfe, Nfe, Ufe, Ffe, zfe, $fe, Hfe, jfe, Bfe, Kfe, Gfe, Wfe, Vfe, qfe, Zfe, Yfe, Jfe, Xfe, Qfe, eme, tme, nme, rme, ome, sme, ime, ame, lme, cme, ume, dme, pme, fme, mme, gme, hme, _me, yme, Sme, Eme, bme, Cme, vme, Ame, Rme, xme, Tme, wme, Ome, kme, Pme, Ime, Dme, Lme, Mme, Nme, Ume, Fme, zme, $me, Hme, jme, Bme, Kme, Gme, Wme, Vme, qme, Zme, Yme, Jme, NS, Xme, Qme, ege, tge, nge, rge, oge, sge, ige, age, lge, cge, uge, dge, pge, fge, mge, gge, hge, _ge, yge, Sge, Ege, bge, Cge, vge, Age, Rge, xge, Tge, wge, Oge, kge, Pge, Ige, Dge, Lge, Mge, Nge, Uge, Fge, zge, $ge, Hge, US, jge, Bge, Kge, Gge, Wge, Vge, qge, Zge, Yge, Jge, Xge, Qge, ehe, the, nhe, rhe, ohe, she, ihe, ahe, lhe, che, uhe, dhe, phe, fhe, mhe, ghe, hhe, _he, yhe, She, Ehe, bhe, Che, vhe, Ahe, Rhe, xhe, The, whe, Ohe, khe, Phe, Ihe, Dhe, Lhe, Mhe, Nhe, FS, rI, oI, Uhe, Fhe, zhe, $he, Hhe, jhe, Bhe, Khe, Ghe, Whe, Vhe, qhe, Zhe, Yhe, Jhe, Xhe, Qhe, e_e, t_e, n_e, r_e, o_e, s_e, i_e, a_e, l_e, c_e, u_e, d_e, p_e, f_e, m_e, g_e, h_e, __e, y_e, S_e, E_e, b_e, C_e, v_e, A_e, R_e, x_e, T_e, w_e, O_e, k_e, P_e, I_e, D_e, L_e, M_e, N_e, U_e, F_e, z_e, $_e, H_e, j_e, B_e, K_e, G_e, W_e, V_e, q_e, Z_e, Y_e, J_e, Q_e, Xn, eye, F8e, tye, z8e, nye, iI, rye, oye, lI, cye, uye, dye, _ye, on, vye, Aye, dI, C7e, v7e, ho, kI, PI, Dye, Sf, Lye, jc, Mye, Nye, LI, NI, Fye, VS, zye, $ye, x7e, zI, YS, KI, GI, VI, Hye, qS, ls, Kye, Gye, oD, nE, sD, So, Yc, vn, Zye, oE, sE, iD, aD, wf, Jc, Xc, kf, Qc, Pf, eu, fi, tu, mi, lD, cD, uD, dD, pD, fD, mD, gD, hD, _D, yD, SD, ED, bD, vD, AD, cE, RD, Xye, TD, wD, OD, kD, PD, uE, ID, DD, LD, MD, FD, If, nu, zD, $D, HD, jD, BD, zt, dE, Df, pE, fE, KD, GD, WD, VD, qD, ru, ZD, YD, JD, XD, QD, eL, tL, mE, yr, He, rL, ou, Je, yE, SE, EE, fL, mL, tSe, bE, CE, vE, AE, RE, xE, TE, wE, gL, hL, _L, yL, OE, sSe, kE, PE, IE, DE, LE, ME, NE, Nf, UE, FE, zE, $E, HE, jE, BE, cSe, gE, KE, vL, Uf, GE, WE, VE, qE, ZE, YE, Ff, JE, XE, QE, eb, tb, nb, zf, AL, rb, ob, sb, TL, ab, RL, xL, $f, Hf, dSe, fSe, OL, kL, Sr, FL, ML, zL, lu, hSe, iC, aC, lC, HL, jL, cC, uC, BL, dC, KL, pC, GL, fC, mC, WL, VL, qL, ZL, gC, YL, hC, JL, XL, _C, yC, SC, EC, QL, sC, bC, CC, vC, AC, RC, xC, TC, wC, OC, tM, qf, kC, $L, rM, ASe, Fn, oM, sM, iM, aM, lM, cM, uM, dM, pM, fM, mM, gM, Be, SM, LC, ct, MC, EM, bM, CM, pEe, fEe, Yf, mEe, gEe, hEe, _Ee, yEe, SEe, EEe, bEe, CEe, vEe, AEe, REe, xEe, TEe, wEe, OEe, NC, kEe, vM, PEe, IEe, DEe, LEe, MEe, fu, AM, NEe, UEe, IC, DC, FEe, zEe, qa, TM, HEe, jEe, KEe, wM, em, mu, qEe, ZEe, JEe, OM, Qn, kM, LM, nbe, rbe, abe, lbe, cbe, rm, pbe, At, hbe, BC, BM, Zet, WM, VM, qM, ZM, Cbe, vbe, YM, Abe, Rbe, JM, xbe, Tbe, QM, Ibe, eN, Lbe, nN, Mbe, Nbe, sm, rN, iN, Fbe, aN, $be, jbe, Kbe, Gbe, yu, lN, uN, dN, Xbe, KM, Qbe, eCe, tCe, oCe, iCe, _N, yN, wN, Ytt, ON, OCe, DCe, LN, $Ce, HCe, Cu, BCe, MN, VCe, QCe, ive, uve, VN, pve, fve, _rt, gve, Sve, nv, tv, GN, tU, Fve, Hve, iU, tAe, sAe, iAe, aAe, cAe, Ie, bU, Q, vo, F, zn, fAe, ms, mAe, _m, nn, he, Xa, an, lv, cv, Si, wu, se, br, CU, Oe, gAe, hAe, _Ae, yAe, SAe, EAe, bAe, CAe, vAe, uv, AAe, RAe, xAe, TAe, wAe, OAe, vU, kAe, Ro, el, tl, ym, ku, Sm, Pu, Iu, Em, Ei, xo, bm, Fr, ft, Du, Ao, pv, Lu, To, Cm, vm, nl, Ou, Mu, Nu, bi, Uu, rl, $r, zr, gs, Fu, zu, Am, fv, Rm, $u, wot, H, Oot, kot, Pot, Iot, Dot, Lot, Mot, Not, Uot, Fot, zot, $ot, Hot, jot, xU, Bot, Kot, Got, Wot, Vot, qot, Zot, Yot, Jot, Xot, Qot, est, tst, nst, rst, ost, sst, ist, ast, FAe, zAe, gv, OU, Ss, km, Mt, kU, PU, kst, HAe, jAe, hv, $n, Hu, IU, Yt, tr, nr, Jt, Pm, DU, _v, LU, MU, yv, ju, le, Sv, NU, Pst, Ist, Im, BAe, Dm, KAe, Bu, ol, UU, GAe, WAe, VAe, qAe, ZAe, YAe, Ev, JAe, XAe, bv, Lm, QAe, eRe, Mm, tRe, Ku, Gu, nRe, Wu, sl, rRe, Vu, Nm, Um, Fm, Dst, zm, $m, Hm, FU, zU, $U, Cv, HU, qu, il, jU, oRe, jm, sRe, Bm, iRe, vv, aRe, Km, lRe, cRe, uRe, dRe, pRe, fRe, mRe, gRe, hRe, _Re, Gm, yRe, SRe, Wm, Av, Rv, xv, ERe, bRe, CRe, Tv, vRe, ARe, RRe, xRe, TRe, BU, Vm, wRe, qm, Lst, ORe, al, kRe, Mst, Zu, PRe, wv, IRe, DRe, LRe, MRe, NRe, URe, FRe, Om, zRe, $Re, HRe, Yu, Ov, jRe, BRe, KRe, GRe, WRe, VRe, qRe, ZRe, YRe, JRe, XRe, QRe, exe, txe, nxe, rxe, oxe, sxe, ll, ixe, axe, lxe, Zm, cxe, uxe, dxe, kv, pxe, Nst, Ust, Fst, zst, $st, Hst, ae, WU, qU, VU, ZU, YU, Ym, e0, fxe, mxe, Dv, Cr, gxe, Ju, d0, h0, _0, v0, A0, Sxe, Exe, Mv, Cxe, Fv, Oj, kj, PA, IA, DA, Lj, Dj, aLe, NA, FA, uLe, dd, fLe, Po, SLe, ELe, zA, bLe, xLe, TLe, wLe, OLe, kLe, $j, qj, ILe, DLe, LLe, MLe, Ce, NLe, Wg, Oi, VA, Do, Jj, Xj, Qj, eB, tB, nB, qA, ZA, jA, Bj, jLe, BLe, GLe, rB, BA, Gg, GA, WA, VLe, qLe, Kj, Hs, sB, QLe, YA, iB, uB, eMe, dB, pB, fB, mB, tMe, XA, aB, QA, gB, hB, _B, yB, jn, lMe, SB, dMe, bB, mMe, fd, RB, hMe, Rr, TB, SMe, EMe, Pl, wB, Vg, AMe, Il, RMe, xMe, qg, OB, wMe, OMe, kB, eo, Dl, Zg, DB, NMe, FB, WMe, VMe, $B, HB, jB, BB, Ml, GB, nR, WB, Jg, KB, eNe, Bs, VB, gd, Nl, Xg, tNe, YB, qB, Pi, rK, iK, pNe, hd, _d, to, yd, nh, uK, aK, _Ne, lK, cK, Sd, Ul, rh, oh, dK, CNe, pK, sh, fK, RNe, xNe, TNe, mK, wNe, ONe, ih, Ed, lr, gK, hK, yK, SK, EK, ah, bK, FNe, CK, zNe, $Ne, HNe, vK, BNe, lh, AK, RK, xK, VNe, dn, TK, wK, OK, kK, PK, QNe, eUe, IK, DK, rUe, LK, MK, NK, UK, iUe, aUe, lUe, cUe, uUe, dUe, pUe, fUe, mUe, gUe, hUe, _Ue, yUe, SUe, EUe, bUe, CUe, vUe, AUe, FK, xUe, zK, $K, wUe, HK, OUe, jK, BK, PUe, KK, IUe, DUe, LUe, GK, MUe, NUe, UUe, FUe, WK, zUe, $Ue, HUe, VK, jUe, BUe, KUe, GUe, WUe, VUe, qUe, ZUe, YUe, JUe, XUe, QUe, e0e, t0e, n0e, r0e, Xe, qK, ZK, YK, JK, a0e, l0e, uh, XK, QK, e1, n1, r1, dh, m0e, g0e, h0e, _0e, bd, o1, S0e, Fl, s1, b0e, i1, Di, a1, l1, c1, u1, d1, p1, f1, P0e, I0e, m1, D0e, g1, h1, _1, vyt, U0e, y1, Ayt, iR, F0e, z0e, $0e, Gs, zl, fh, E1, b1, H0e, j0e, B0e, K0e, mh, $l, gh, Ws, aR, hh, _h, G0e, W0e, lR, R1, x1, V0e, uR, k1, P1, I1, D1, L1, Y0e, dR, J0e, Fyt, pR, X0e, fR, mR, Q0e, zyt, eFe, gR, hR, _R, $yt, M1, yR, N1, U1, tFe, nFe, rFe, oFe, iFe, Mi, cFe, $1, Wyt, Vyt, H1, j1, B1, K1, uFe, G1, W1, V1, q1, dFe, pFe, SR, fFe, eSt, tSt, mFe, jl, Vs, gFe, Y1, hFe, _Fe, X1, Q1, eG, yFe, SFe, tG, EFe, bFe, CFe, vFe, bR, CR, RFe, xFe, vR, TFe, Eh, nSt, Cd, wFe, OFe, aSt, rG, PFe, IFe, _St, oG, sG, bSt, CSt, HFe, jFe, $St, BFe, KFe, HSt, JSt, XSt, lG, OR, VFe, YFe, uG, eze, nze, gG, vd, vh, kR, zi, sze, yG, ize, yEt, Ad, $i, bG, Kn, AEt, REt, xEt, aze, AG, wG, $R, dze, $G, pze, fze, mze, gze, hze, BR, HG, jG, fbt, yze, Sze, Eze, Gn, ji, kG, PG, NR, UR, KR, GG, Cze, vze, Rze, GR, xze, Tze, xh, WR, Oze, kze, mbt, Pze, Ize, Dze, Lze, Mze, Nze, qG, Uze, Fze, zze, $ze, ZG, Hze, IG, jze, Bze, YG, Kze, Gze, DG, Wze, Vze, JG, qze, Zze, Yze, Jze, QG, Xze, Qze, e$e, t$e, r$e, o$e, s$e, i$e, a$e, eW, nW, c$e, m$e, xd, VR, gbt, hbt, _bt, h$e, qR, Th, MR, aW, _$e, S$e, lW, E$e, b$e, C$e, v$e, A$e, x$e, w$e, O$e, k$e, P$e, I$e, N$e, ybt, FR, Sbt, U$e, MG, Td, Ebt, bbt, uW, z$e, $$e, H$e, Cbt, j$e, B$e, vbt, Abt, K$e, Rbt, Oh, kh, G$e, YR, Ph, W$e, Ih, Mbt, Nbt, Ubt, Dh, V$e, Z$e, tx, EW, Id, Fh, X$e, xCt, Q$e, eHe, ix, ax, lx, cx, zh, $h, MW, tHe, nHe, aHe, uHe, dHe, Zs, pHe, CW, vW, AW, Nh, UW, fHe, mHe, gHe, hHe, _He, yHe, SHe, EHe, pn, dx, nx, Mh, Bi, AHe, TCt, xHe, Pd, RW, THe, xW, wHe, OHe, Hh, kHe, TW, fx, Bh, Ki, KW, Gl, PHe, Kh, kW, Wl, NHe, Ld, UHe, tV, rV, jHe, XHe, cvt, tje, fV, mV, sje, aje, _V, yV, pje, zvt, $vt, gje, yje, Sje, Kvt, Gvt, eAt, RV, Eje, bje, mAt, Cje, gAt, xV, wV, OV, Js, Lje, FV, Yh, Jh, Md, Tx, zV, $V, HV, Xh, jV, cr, KV, Mo, Fje, zje, yRt, jje, Gje, Vje, sBe, YV, e22, o_, gBe, t2, s_, kx, o2, LBe, UBe, $x, Vi, R2, KBe, GBe, Dx, ZBe, k2, n_, l2, sKe, lKe, z2, bKe, RKe, ec, W2, H2, xKe, wKe, PKe, IKe, $Ke, X2, HKe, jKe, BKe, KKe, VKe, eTt, qKe, tTt, nTt, ZKe, rTt, YKe, oTt, JKe, Wx, XKe, iTt, eq, tq, QKe, nq, rq, e1e, t1e, oq, sq, n1e, r1e, aTt, lTt, c1e, Zx, cq, u1e, uq, a_, d1e, Xx, nc, S1e, c_, mq, gq, Qx, hq, _q, E1e, Sq, u_, rc, d_, b1e, bq, Uo, Cq, vq, A1e, Yd, Jd, R1e, x1e, Aq, gn, T1e, w1e, O1e, Xs, k1e, P1e, xq, Pwt, I1e, Oq, kq, Pq, D1e, L1e, Iq, M1e, N1e, nT, U1e, p_, rT, Dq, oT, iT, F1e, Uq, aT, jq, K1e, Gq, yOt, sGe, cGe, uGe, yGe;
+var import_node_module, import_crypto, import_crypto2, import_path, import_node_fs15, import_node_process4, import_fs, import_os, import_path2, yy, import_fs2, import_promises, import_path3, import_readline, import_promises2, import_path4, import_os2, import_path5, Se, import_promises3, xe, import_promises4, import_fs3, import_promises5, import_os3, import_path6, import_promises6, import_os4, import_node_path44, import_node_os10, import_node_process5, import_path7, import_events, import_fs4, import_promises7, import_path8, import_child_process, import_util9, import_child_process2, import_fs5, import_path9, import_path10, import_crypto3, import_fs6, import_path11, import_promises8, import_path12, import_path13, import_promises9, import_path14, import_path15, import_fs7, import_promises10, import_path16, import_crypto4, import_path17, import_async_hooks, import_fs8, import_promises11, import_crypto5, import_fs9, import_promises12, import_path18, import_promises13, import_path19, import_crypto6, import_path20, import_path21, import_path22, import_path23, import_promises14, import_fs10, import_promises15, import_path24, import_util10, import_path25, import_os5, import_path26, import_path27, import_path28, import_path29, import_path30, import_net, import_os6, import_child_process3, import_fs11, import_child_process4, import_crypto7, import_promises16, import_module, import_os7, import_path31, import_url, import_events2, import_child_process5, import_fs12, import_readline2, import_string_decoder, import_fs13, import_promises17, import_os8, import_path32, import_crypto8, import_os9, import_fs14, import_path33, import_crypto9, import_fs15, import_promises18, import_path34, IZ, DZ, v_, LZ, OT, NZ, UZ, kT, X, FZ, dr, HZ, jZ, BZ, ot, st, ed, Kv, Te, Me, Oo, nd, hF, Xv, Qv, rd, LF, or, WF, ZF, sA, XF, od, sd, hg, id, Sg, Oz, fA, $z, Wz, Zz, s$, a$, d$, f$, g$, _$, E$, v$, T$, O$, I$, L$, wg, z$, j$, G$, V$, yA, SA, rH, lH, uH, _H, EH, EA, RH, TH, kH, DH, NH, zH, jH, GH, VH, ZH, JH, ej, nj, ij, cj, uj, CA, bj, Aj, wj, PT, KZ, GZ, VGe, VZ, MT, wr, jo, JZ, XZ, NT, UT, FT, zT, Bo, $T, HT, jT, BT, a4, sp, l4, c4, vt, u4, Nt, KT, d4, p4, uc, GT, m4, g4, WT, _4, y4, VT, Dn, Et, b4, C4, v4, A4, ra, x4, ip, qT, ZT, w4, O4, ro, P4, I4, D4, L4, M4, N4, U4, YT, JT, Sn, H4, Ko, j4, oo, XT, QT, G4, W4, V4, ew, Z4, Y4, tw, X4, nw, R_, rw, ow, Go, sw, iw, aw, lw, ei, aY, cw, Or, cY, uw, dw, lp, pw, cp, mY, gY, up, _Y, aa, fw, la, EY, bY, CY, vY, AY, RY, xY, TY, wY, OY, kY, PY, IY, mw, x_, gw, ca, MY, et, dp, hw, pp, zY, $Y, _w, HY, ua, yw, wt, KY, T_, Sw, WY, VY, qY, so, mp, Ew, vw, bw, YY, Cw, JY, XY, kr, QY, e9, Wo, n9, da, o9, s9, i9, a9, l9, c9, u9, d9, p9, f9, m9, g9, h9, _9, y9, S9, E9, b9, C9, v9, A9, R9, x9, T9, Qe, Aw, pa, hp, Rw, dc, k9, w_, P9, Pr, xw, I9, fa, D9, L9, _p, N9, ma, yp, z9, Tw, $9, H9, ww, Vo, Ir, pc, W9, V9, q9, Ow, Y9, Sp, J9, Ep, X9, qo, Q9, bp, kw, eJ, Pw, Iw, Dw, Lw, tJ, nJ, rJ, oJ, sJ, ti, io, iJ, Mw, Nw, Cp, aJ, Uw, Fw, ga, pr, uJ, Fe, $w, O_, k_, I_, ha, Bw, D_, qw, Vw, N_, U_, yJ, _a3, Yo, Zw, bJ, Rp, Yw, vJ, AJ, Jw, xp, Xw, Tp, Qw, kJ, ya, IJ, DJ, Sa, MJ, fc, NJ, eO, FJ, zJ, $J, tO, Ea, jJ, nO, rO, sO, iO, Vn, GJ, Ln, Jo, aO, lO, cO, wp, XJ, QJ, uO, ba, dO, pO, fO, Dr, ao, mO, Ca, gO, z_, $_, H_, j_, B_, K_, G_, W_, V_, q_, Z_, _O, Y_, J_, yO, X_, c3, Q_, ey, ty, ny, ry, oy, sy, iy, ay, ly, cy, we, SO, en, d3, Pp, vO, g3, gy, wO, S3, BO, KO, Ip, Dp, v3, GO, WO, F9e, IO, A3, hy, x3, NO, I3, Ay, Ry, D3, xy, L3, bc, xa, Ty, wy, Oy, ky, XO, Py, Iy, Dy, Ly, My, Ny, Uy, Fy, zy, nk, rk, d3e, p3e, f3e, m3e, g3e, U3, jp, jy, ik, By, Ky, lk, $3, uk, ck, G3, W3, V3, it, Y3, J3, hk, tXe, Q3, kt, We, gX, Ta, SX, mr, Yp, Jp, eS, nS, yXe, IX, DX, rS, ka, oS, Ok, kk, HX, jX, ef, bXe, Uk, Mr, wc, Fk, Pa, OXe, kXe, iS, PXe, IXe, DXe, GX, YX, JX, XX, QX, e6, t6, Yk, n6, r6, o6, s6, i6, a6, l6, c6, Vk, uS, lf, dS, Qk, eP, uf, os10, qXe, ZXe, h6, tP, df, _6, y6, S6, E6, b6, Jn, gr, nP, rP, Dc, pS, oP, gS, lP, C6, mS, lS, sP, w6, O6, dP, k6, YXe, JXe, P6, I6, pf, L6, fP, XXe, QXe, M6, SS, z6, $6, j6, bP, CP, G6, Lc, si, Z6, ES, bS, X6, Q6, e5, t5, n5, u5, r5, o5, s5, i5, a5, l5, c5, u52, d5, p5, f5, m5, g5, h5, _5, y5, S5, E5, b5, C5, v5, A5, R5, x5, T5, w5, O5, k5, P5, I5, D5, L5, M5, N5, U5, F5, z5, $5, H5, j5, B5, K5, G5, W5, V5, q5, Z5, Y5, J5, X5, Q5, e8, t8, n8, r8, o8, s8, i8, a8, l8, c8, u8, d8, CS, p8, f8, m8, g8, h8, _8, y8, S8, E8, b8, C8, v8, A8, R8, x8, T8, w8, O8, k8, P8, I8, D8, L8, M8, N8, U8, F8, z8, $8, H8, j8, B8, K8, G8, W8, V8, q8, Z8, Y8, J8, X8, Q8, e7, t7, n7, r7, o7, s7, i7, a7, l7, c7, u7, d7, p7, f7, m7, g7, h7, _7, y7, S7, E7, b7, C7, TP, v7, L6e, RP, A7, x7, kP, ff, U6e, F6e, Ua, z6e, $6e, H6e, j6e, PP, IP, vS, DP, w7, LP, O7, k7, P7, AS, RS, xS, I7, MP, NP, D7, G6e, L7, W6e, M7, N7, UP, V6e, U7, F7, z7, $7, H7, j7, B7, q6e, is, wS, Fa, K7, G7, W7, i5e, X7, Q7, HP, $P, BP, tQ, WP, VP, JP, _Q, QP, eI, xQ, Uc, DS, $a, wQ, OQ, kQ, PQ, IQ, DQ, LQ, MQ, NQ, UQ, FQ, zQ, $Q, HQ, jQ, BQ, KQ, GQ, WQ, VQ, qQ, ZQ, YQ, JQ, XQ, QQ, eee, tee, nee, ree, oee, see, iee, aee, lee, cee, uee, dee, pee, fee, mee, gee, hee, _ee, yee, See, Eee, bee, Cee, vee, Aee, Ree, xee, Tee, wee, Oee, kee, Pee, Iee, Dee, Lee, Mee, Nee, Uee, Fee, zee, $ee, Hee, jee, Bee, Kee, Gee, Wee, Vee, qee, Zee, Yee, Jee, Xee, Qee, ete, tte, nte, rte, ote, ste, ite, ate, lte, cte, ute, dte, pte, fte, mte, gte, hte, _te, yte, Ste, Ete, bte, Cte, vte, Ate, Rte, xte, Tte, wte, Ote, kte, Pte, Ite, Dte, Lte, Mte, Nte, Ute, Fte, zte, $te, Hte, jte, Bte, Kte, Gte, Wte, Vte, qte, Zte, Yte, Jte, Xte, Qte, ene, tne, nne, rne, one, sne, ine, ane, lne, cne, une, dne, pne, fne, mne, gne, hne, _ne, yne, Sne, Ene, bne, Cne, vne, Ane, Rne, xne, Tne, wne, One, kne, Pne, Ine, Dne, Lne, Mne, Nne, Une, Fne, zne, $ne, Hne, jne, Bne, Kne, Gne, Wne, Vne, qne, Zne, Yne, Jne, Xne, Qne, ere, tre, nre, rre, ore, sre, ire, are, lre, cre, ure, dre, pre, fre, mre, gre, hre, _re, yre, Sre, Ere, bre, Cre, vre, Are, Rre, xre, Tre, wre, Ore, kre, Pre, Ire, Dre, Lre, Mre, Nre, Ure, Fre, zre, $re, Hre, jre, Bre, Kre, Gre, Wre, Vre, qre, Zre, Yre, Jre, Xre, Qre, eoe, toe, noe, roe, ooe, soe, ioe, aoe, loe, coe, uoe, doe, poe, foe, moe, goe, hoe, _oe, yoe, Soe, Eoe, boe, Coe, voe, Aoe, Roe, xoe, Toe, woe, Ooe, koe, Poe, Ioe, Doe, Loe, Moe, Noe, Uoe, Foe, zoe, $oe, Hoe, joe, Boe, Koe, Goe, Woe, Voe, qoe, Zoe, Yoe, Joe, Xoe, Qoe, ese, tse, nse, rse, ose, sse, ise, ase, lse, cse, use, dse, pse, fse, mse, gse, hse, _se, yse, Sse, Ese, LS, bse, Cse, vse, Ase, Rse, xse, Tse, wse, Ose, kse, Pse, Ise, Dse, Lse, Mse, Nse, Use, Fse, zse, $se, Hse, jse, Bse, Kse, Gse, Wse, Vse, qse, Zse, Yse, Jse, Xse, Qse, eie, tie, nie, rie, oie, sie, iie, aie, lie, cie, uie, die, pie, fie, mie, gie, hie, _ie, yie, Sie, Eie, bie, Cie, vie, Aie, Rie, xie, Tie, wie, Oie, kie, Pie, Iie, Die, Lie, Mie, Nie, Uie, Fie, zie, $ie, Hie, jie, Bie, Kie, Gie, Wie, Vie, qie, Zie, Yie, Jie, Xie, Qie, eae, tae, nae, rae, oae, sae, iae, aae, lae, cae, uae, dae, pae, fae, mae, gae, hae, _ae, yae, Sae, Eae, bae, Cae, vae, Aae, Rae, xae, Tae, wae, Oae, kae, Pae, Iae, Dae, Lae, Mae, Nae, Uae, Fae, zae, $ae, Hae, jae, Bae, Kae, Gae, Wae, Vae, qae, Zae, Yae, Jae, Xae, Qae, ele, tle, nle, rle, ole, sle, ile, ale, lle, cle, ule, dle, ple, fle, mle, gle, hle, _le, yle, Sle, Ele, ble, Cle, vle, Ale, Rle, xle, Tle, wle, Ole, kle, Ple, Ile, Dle, Lle, Mle, Nle, Ule, Fle, zle, $le, Hle, jle, Ble, Kle, Gle, Wle, Vle, qle, Zle, Yle, Jle, MS, Xle, Qle, ece, tce, nce, rce, oce, sce, ice, ace, lce, cce, uce, dce, pce, fce, mce, gce, hce, _ce, yce, Sce, Ece, bce, Cce, vce, Ace, Rce, xce, Tce, wce, Oce, kce, Pce, Ice, Dce, Lce, Mce, Nce, Uce, Fce, zce, $ce, Hce, jce, Bce, Kce, Gce, Wce, Vce, qce, Zce, Yce, Jce, Xce, Qce, eue, tue, nue, rue, oue, sue, iue, aue, lue, cue, uue, due, pue, fue, mue, gue, hue, _ue, yue, Sue, Eue, bue, Cue, vue, Aue, Rue, xue, Tue, wue, Oue, kue, Pue, Iue, Due, Lue, Mue, Nue, Uue, Fue, zue, $ue, Hue, jue, Bue, Kue, Gue, Wue, Vue, que, Zue, Yue, Jue, Xue, Que, ede, tde, nde, rde, ode, sde, ide, ade, lde, cde, ude, dde, pde, fde, mde, gde, hde, _de, yde, Sde, Ede, bde, Cde, vde, Ade, Rde, xde, Tde, wde, Ode, kde, Pde, Ide, Dde, Lde, Mde, Nde, Ude, Fde, zde, $de, Hde, jde, Bde, Kde, Gde, Wde, Vde, qde, Zde, Yde, Jde, Xde, Qde, epe, tpe, npe, rpe, ope, spe, ipe, ape, lpe, cpe, upe, dpe, ppe, fpe, mpe, gpe, hpe, _pe, ype, Spe, Epe, bpe, Cpe, vpe, Ape, Rpe, xpe, Tpe, wpe, Ope, kpe, Ppe, Ipe, Dpe, Lpe, Mpe, Npe, Upe, Fpe, zpe, $pe, Hpe, jpe, Bpe, Kpe, Gpe, Wpe, Vpe, qpe, Zpe, Ype, Jpe, Xpe, Qpe, efe, tfe, nfe, rfe, ofe, sfe, ife, afe, lfe, cfe, ufe, dfe, pfe, ffe, mfe, gfe, hfe, _fe, yfe, Sfe, Efe, bfe, Cfe, vfe, Afe, Rfe, xfe, Tfe, wfe, Ofe, kfe, Pfe, Ife, Dfe, Lfe, Mfe, Nfe, Ufe, Ffe, zfe, $fe, Hfe, jfe, Bfe, Kfe, Gfe, Wfe, Vfe, qfe, Zfe, Yfe, Jfe, Xfe, Qfe, eme, tme, nme, rme, ome, sme, ime, ame, lme, cme, ume, dme, pme, fme, mme, gme, hme, _me, yme, Sme, Eme, bme, Cme, vme, Ame, Rme, xme, Tme, wme, Ome, kme, Pme, Ime, Dme, Lme, Mme, Nme, Ume, Fme, zme, $me, Hme, jme, Bme, Kme, Gme, Wme, Vme, qme, Zme, Yme, Jme, NS, Xme, Qme, ege, tge, nge, rge, oge, sge, ige, age, lge, cge, uge, dge, pge, fge, mge, gge, hge, _ge, yge, Sge, Ege, bge, Cge, vge, Age, Rge, xge, Tge, wge, Oge, kge, Pge, Ige, Dge, Lge, Mge, Nge, Uge, Fge, zge, $ge, Hge, US, jge, Bge, Kge, Gge, Wge, Vge, qge, Zge, Yge, Jge, Xge, Qge, ehe, the, nhe, rhe, ohe, she, ihe, ahe, lhe, che, uhe, dhe, phe, fhe, mhe, ghe, hhe, _he, yhe, She, Ehe, bhe, Che, vhe, Ahe, Rhe, xhe, The, whe, Ohe, khe, Phe, Ihe, Dhe, Lhe, Mhe, Nhe, FS, rI, oI, Uhe, Fhe, zhe, $he, Hhe, jhe, Bhe, Khe, Ghe, Whe, Vhe, qhe, Zhe, Yhe, Jhe, Xhe, Qhe, e_e, t_e, n_e, r_e, o_e, s_e, i_e, a_e, l_e, c_e, u_e, d_e, p_e, f_e, m_e, g_e, h_e, __e, y_e, S_e, E_e, b_e, C_e, v_e, A_e, R_e, x_e, T_e, w_e, O_e, k_e, P_e, I_e, D_e, L_e, M_e, N_e, U_e, F_e, z_e, $_e, H_e, j_e, B_e, K_e, G_e, W_e, V_e, q_e, Z_e, Y_e, J_e, Q_e, Xn, eye, F8e, tye, z8e, nye, iI, rye, oye, lI, cye, uye, dye, _ye, on, vye, Aye, dI, C7e, v7e, ho, kI, PI, Dye, Sf, Lye, jc, Mye, Nye, LI, NI, Fye, VS, zye, $ye, x7e, zI, YS, KI, GI, VI, Hye, qS, ls, Kye, Gye, oD, nE, sD, So, Yc, vn, Zye, oE, sE, iD, aD, wf, Jc, Xc, kf, Qc, Pf, eu, fi, tu, mi, lD, cD, uD, dD, pD, fD, mD, gD, hD, _D, yD, SD, ED, bD, vD, AD, cE, RD, Xye, TD, wD, OD, kD, PD, uE, ID, DD, LD, MD, FD, If, nu, zD, $D, HD, jD, BD, zt, dE, Df, pE, fE, KD, GD, WD, VD, qD, ru, ZD, YD, JD, XD, QD, eL, tL, mE, yr, He, rL, ou, Je, yE, SE, EE, fL, mL, tSe, bE, CE, vE, AE, RE, xE, TE, wE, gL, hL, _L, yL, OE, sSe, kE, PE, IE, DE, LE, ME, NE, Nf, UE, FE, zE, $E, HE, jE, BE, cSe, gE, KE, vL, Uf, GE, WE, VE, qE, ZE, YE, Ff, JE, XE, QE, eb, tb, nb, zf, AL, rb, ob, sb, TL, ab, RL, xL, $f, Hf, dSe, fSe, OL, kL, Sr, FL, ML, zL, lu, hSe, iC, aC, lC, HL, jL, cC, uC, BL, dC, KL, pC, GL, fC, mC, WL, VL, qL, ZL, gC, YL, hC, JL, XL, _C, yC, SC, EC, QL, sC, bC, CC, vC, AC, RC, xC, TC, wC, OC, tM, qf, kC, $L, rM, ASe, Fn, oM, sM, iM, aM, lM, cM, uM, dM, pM, fM, mM, gM, Be, SM, LC, ct, MC, EM, bM, CM, pEe, fEe, Yf, mEe, gEe, hEe, _Ee, yEe, SEe, EEe, bEe, CEe, vEe, AEe, REe, xEe, TEe, wEe, OEe, NC, kEe, vM, PEe, IEe, DEe, LEe, MEe, fu, AM, NEe, UEe, IC, DC, FEe, zEe, qa, TM, HEe, jEe, KEe, wM, em, mu, qEe, ZEe, JEe, OM, Qn, kM, LM, nbe, rbe, abe, lbe, cbe, rm, pbe, At, hbe, BC, BM, Zet, WM, VM, qM, ZM, Cbe, vbe, YM, Abe, Rbe, JM, xbe, Tbe, QM, Ibe, eN, Lbe, nN, Mbe, Nbe, sm, rN, iN, Fbe, aN, $be, jbe, Kbe, Gbe, yu, lN, uN, dN, Xbe, KM, Qbe, eCe, tCe, oCe, iCe, _N, yN, wN, Ytt, ON, OCe, DCe, LN, $Ce, HCe, Cu, BCe, MN, VCe, QCe, ive, uve, VN, pve, fve, _rt, gve, Sve, nv, tv, GN, tU, Fve, Hve, iU, tAe, sAe, iAe, aAe, cAe, Ie, bU, Q, vo, F, zn, fAe, ms, mAe, _m, nn, he, Xa, an, lv, cv, Si, wu, se, br, CU, Oe, gAe, hAe, _Ae, yAe, SAe, EAe, bAe, CAe, vAe, uv, AAe, RAe, xAe, TAe, wAe, OAe, vU, kAe, Ro, el, tl, ym, ku, Sm, Pu, Iu, Em, Ei, xo, bm, Fr, ft, Du, Ao, pv, Lu, To, Cm, vm, nl, Ou, Mu, Nu, bi, Uu, rl, $r, zr, gs, Fu, zu, Am, fv, Rm, $u, wot, H, Oot, kot, Pot, Iot, Dot, Lot, Mot, Not, Uot, Fot, zot, $ot, Hot, jot, xU, Bot, Kot, Got, Wot, Vot, qot, Zot, Yot, Jot, Xot, Qot, est, tst, nst, rst, ost, sst, ist, ast, FAe, zAe, gv, OU, Ss, km, Mt, kU, PU, kst, HAe, jAe, hv, $n, Hu, IU, Yt, tr, nr, Jt, Pm, DU, _v, LU, MU, yv, ju, le, Sv, NU, Pst, Ist, Im, BAe, Dm, KAe, Bu, ol, UU, GAe, WAe, VAe, qAe, ZAe, YAe, Ev, JAe, XAe, bv, Lm, QAe, eRe, Mm, tRe, Ku, Gu, nRe, Wu, sl, rRe, Vu, Nm, Um, Fm, Dst, zm, $m, Hm, FU, zU, $U, Cv, HU, qu, il, jU, oRe, jm, sRe, Bm, iRe, vv, aRe, Km, lRe, cRe, uRe, dRe, pRe, fRe, mRe, gRe, hRe, _Re, Gm, yRe, SRe, Wm, Av, Rv, xv, ERe, bRe, CRe, Tv, vRe, ARe, RRe, xRe, TRe, BU, Vm, wRe, qm, Lst, ORe, al, kRe, Mst, Zu, PRe, wv, IRe, DRe, LRe, MRe, NRe, URe, FRe, Om, zRe, $Re, HRe, Yu, Ov, jRe, BRe, KRe, GRe, WRe, VRe, qRe, ZRe, YRe, JRe, XRe, QRe, exe, txe, nxe, rxe, oxe, sxe, ll, ixe, axe, lxe, Zm, cxe, uxe, dxe, kv, pxe, Nst, Ust, Fst, zst, $st, Hst, ae, WU, qU, VU, ZU, YU, Ym, e0, fxe, mxe, Dv, Cr, gxe, Ju, d0, h0, _0, v0, A0, Sxe, Exe, Mv, Cxe, Fv, Oj, kj, PA, IA, DA, Lj, Dj, aLe, NA, FA, uLe, dd, fLe, Po, SLe, ELe, zA, bLe, xLe, TLe, wLe, OLe, kLe, $j, qj, ILe, DLe, LLe, MLe, Ce, NLe, Wg, Oi, VA, Do, Jj, Xj, Qj, eB, tB, nB, qA, ZA, jA, Bj, jLe, BLe, GLe, rB, BA, Gg, GA, WA, VLe, qLe, Kj, Hs, sB, QLe, YA, iB, uB, eMe, dB, pB, fB, mB, tMe, XA, aB, QA, gB, hB, _B, yB, jn, lMe, SB, dMe, bB, mMe, fd, RB, hMe, Rr, TB, SMe, EMe, Pl, wB, Vg, AMe, Il, RMe, xMe, qg, OB, wMe, OMe, kB, eo, Dl, Zg, DB, NMe, FB, WMe, VMe, $B, HB, jB, BB, Ml, GB, nR, WB, Jg, KB, eNe, Bs, VB, gd, Nl, Xg, tNe, YB, qB, Pi, rK, iK, pNe, hd, _d, to, yd, nh, uK, aK, _Ne, lK, cK, Sd, Ul, rh, oh, dK, CNe, pK, sh, fK, RNe, xNe, TNe, mK, wNe, ONe, ih, Ed, lr, gK, hK, yK, SK, EK, ah, bK, FNe, CK, zNe, $Ne, HNe, vK, BNe, lh, AK, RK, xK, VNe, dn, TK, wK, OK, kK, PK, QNe, eUe, IK, DK, rUe, LK, MK, NK, UK, iUe, aUe, lUe, cUe, uUe, dUe, pUe, fUe, mUe, gUe, hUe, _Ue, yUe, SUe, EUe, bUe, CUe, vUe, AUe, FK, xUe, zK, $K, wUe, HK, OUe, jK, BK, PUe, KK, IUe, DUe, LUe, GK, MUe, NUe, UUe, FUe, WK, zUe, $Ue, HUe, VK, jUe, BUe, KUe, GUe, WUe, VUe, qUe, ZUe, YUe, JUe, XUe, QUe, e0e, t0e, n0e, r0e, Xe, qK, ZK, YK, JK, a0e, l0e, uh, XK, QK, e1, n1, r1, dh, m0e, g0e, h0e, _0e, bd, o1, S0e, Fl, s1, b0e, i1, Di, a1, l1, c1, u1, d1, p1, f1, P0e, I0e, m1, D0e, g1, h1, _1, vyt, U0e, y1, Ayt, iR, F0e, z0e, $0e, Gs, zl, fh, E1, b1, H0e, j0e, B0e, K0e, mh, $l, gh, Ws, aR, hh, _h, G0e, W0e, lR, R1, x1, V0e, uR, k1, P1, I1, D1, L1, Y0e, dR, J0e, Fyt, pR, X0e, fR, mR, Q0e, zyt, eFe, gR, hR, _R, $yt, M1, yR, N1, U1, tFe, nFe, rFe, oFe, iFe, Mi, cFe, $1, Wyt, Vyt, H1, j1, B1, K1, uFe, G1, W1, V1, q1, dFe, pFe, SR, fFe, eSt, tSt, mFe, jl, Vs, gFe, Y1, hFe, _Fe, X1, Q1, eG, yFe, SFe, tG, EFe, bFe, CFe, vFe, bR, CR, RFe, xFe, vR, TFe, Eh, nSt, Cd, wFe, OFe, aSt, rG, PFe, IFe, _St, oG, sG, bSt, CSt, HFe, jFe, $St, BFe, KFe, HSt, JSt, XSt, lG, OR, VFe, YFe, uG, eze, nze, gG, vd, vh, kR, zi, sze, yG, ize, yEt, Ad, $i, bG, Kn, AEt, REt, xEt, aze, AG, wG, $R, dze, $G, pze, fze, mze, gze, hze, BR, HG, jG, fbt, yze, Sze, Eze, Gn, ji, kG, PG, NR, UR, KR, GG, Cze, vze, Rze, GR, xze, Tze, xh, WR, Oze, kze, mbt, Pze, Ize, Dze, Lze, Mze, Nze, qG, Uze, Fze, zze, $ze, ZG, Hze, IG, jze, Bze, YG, Kze, Gze, DG, Wze, Vze, JG, qze, Zze, Yze, Jze, QG, Xze, Qze, e$e, t$e, r$e, o$e, s$e, i$e, a$e, eW, nW, c$e, m$e, xd, VR, gbt, hbt, _bt, h$e, qR, Th, MR, aW, _$e, S$e, lW, E$e, b$e, C$e, v$e, A$e, x$e, w$e, O$e, k$e, P$e, I$e, N$e, ybt, FR, Sbt, U$e, MG, Td, Ebt, bbt, uW, z$e, $$e, H$e, Cbt, j$e, B$e, vbt, Abt, K$e, Rbt, Oh, kh, G$e, YR, Ph, W$e, Ih, Mbt, Nbt, Ubt, Dh, V$e, Z$e, tx, EW, Id, Fh, X$e, xCt, Q$e, eHe, ix, ax, lx, cx, zh, $h, MW, tHe, nHe, aHe, uHe, dHe, Zs, pHe, CW, vW, AW, Nh, UW, fHe, mHe, gHe, hHe, _He, yHe, SHe, EHe, pn, dx, nx, Mh, Bi, AHe, TCt, xHe, Pd, RW, THe, xW, wHe, OHe, Hh, kHe, TW, fx, Bh, Ki, KW, Gl, PHe, Kh, kW, Wl, NHe, Ld, UHe, tV, rV, jHe, XHe, cvt, tje, fV, mV, sje, aje, _V, yV, pje, zvt, $vt, gje, yje, Sje, Kvt, Gvt, eAt, RV, Eje, bje, mAt, Cje, gAt, xV, wV, OV, Js, Lje, FV, Yh, Jh, Md, Tx, zV, $V, HV, Xh, jV, cr, KV, Mo, Fje, zje, yRt, jje, Gje, Vje, sBe, YV, e22, o_, gBe, t2, s_, kx, o2, LBe, UBe, $x, Vi, R2, KBe, GBe, Dx, ZBe, k2, n_, l2, sKe, lKe, z2, bKe, RKe, ec, W2, H2, xKe, wKe, PKe, IKe, $Ke, X2, HKe, jKe, BKe, KKe, VKe, eTt, qKe, tTt, nTt, ZKe, rTt, YKe, oTt, JKe, Wx, XKe, iTt, eq, tq, QKe, nq, rq, e1e, t1e, oq, sq, n1e, r1e, aTt, lTt, c1e, Zx, cq, u1e, uq, a_, d1e, Xx, nc, S1e, c_, mq, gq, Qx, hq, _q, E1e, Sq, u_, rc, d_, b1e, bq, Uo, Cq, vq, A1e, Yd, Jd, R1e, x1e, Aq, gn, T1e, w1e, O1e, Xs, k1e, P1e, xq, Pwt, I1e, Oq, kq, Pq, D1e, L1e, Iq, M1e, N1e, nT, U1e, p_, rT, Dq, oT, iT, F1e, Uq, aT, jq, K1e, Gq, yOt, sGe, cGe, uGe, yGe;
 var init_sdk = __esm({
   "node_modules/.pnpm/@anthropic-ai+claude-agent-sdk@0.3.292_@anthropic-ai+sdk@0.131.0_zod@4.6.5__@modelconte_9caa915130557974815a7ac66b010e49/node_modules/@anthropic-ai/claude-agent-sdk/sdk.mjs"() {
     import_node_module = require("node:module");
@@ -78897,7 +78951,7 @@ var init_sdk = __esm({
     import_path6 = require("path");
     import_promises6 = require("fs/promises");
     import_os4 = require("os");
-    import_node_path42 = __toESM(require("node:path"), 1);
+    import_node_path44 = __toESM(require("node:path"), 1);
     import_node_os10 = __toESM(require("node:os"), 1);
     import_node_process5 = __toESM(require("node:process"), 1);
     import_path7 = require("path");
@@ -87348,16 +87402,16 @@ var init_sdk = __esm({
     wS = import_node_os10.default.tmpdir();
     ({ env: Fa } = import_node_process5.default);
     K7 = (e14) => {
-      let t10 = import_node_path42.default.join(is, "Library");
-      return { data: import_node_path42.default.join(t10, "Application Support", e14), config: import_node_path42.default.join(t10, "Preferences", e14), cache: import_node_path42.default.join(t10, "Caches", e14), log: import_node_path42.default.join(t10, "Logs", e14), temp: import_node_path42.default.join(wS, e14) };
+      let t10 = import_node_path44.default.join(is, "Library");
+      return { data: import_node_path44.default.join(t10, "Application Support", e14), config: import_node_path44.default.join(t10, "Preferences", e14), cache: import_node_path44.default.join(t10, "Caches", e14), log: import_node_path44.default.join(t10, "Logs", e14), temp: import_node_path44.default.join(wS, e14) };
     };
     G7 = (e14) => {
-      let t10 = Fa.APPDATA || import_node_path42.default.join(is, "AppData", "Roaming"), n10 = Fa.LOCALAPPDATA || import_node_path42.default.join(is, "AppData", "Local");
-      return { data: import_node_path42.default.join(n10, e14, "Data"), config: import_node_path42.default.join(t10, e14, "Config"), cache: import_node_path42.default.join(n10, e14, "Cache"), log: import_node_path42.default.join(n10, e14, "Log"), temp: import_node_path42.default.join(wS, e14) };
+      let t10 = Fa.APPDATA || import_node_path44.default.join(is, "AppData", "Roaming"), n10 = Fa.LOCALAPPDATA || import_node_path44.default.join(is, "AppData", "Local");
+      return { data: import_node_path44.default.join(n10, e14, "Data"), config: import_node_path44.default.join(t10, e14, "Config"), cache: import_node_path44.default.join(n10, e14, "Cache"), log: import_node_path44.default.join(n10, e14, "Log"), temp: import_node_path44.default.join(wS, e14) };
     };
     W7 = (e14) => {
-      let t10 = import_node_path42.default.basename(is);
-      return { data: import_node_path42.default.join(Fa.XDG_DATA_HOME || import_node_path42.default.join(is, ".local", "share"), e14), config: import_node_path42.default.join(Fa.XDG_CONFIG_HOME || import_node_path42.default.join(is, ".config"), e14), cache: import_node_path42.default.join(Fa.XDG_CACHE_HOME || import_node_path42.default.join(is, ".cache"), e14), log: import_node_path42.default.join(Fa.XDG_STATE_HOME || import_node_path42.default.join(is, ".local", "state"), e14), temp: import_node_path42.default.join(wS, t10, e14) };
+      let t10 = import_node_path44.default.basename(is);
+      return { data: import_node_path44.default.join(Fa.XDG_DATA_HOME || import_node_path44.default.join(is, ".local", "share"), e14), config: import_node_path44.default.join(Fa.XDG_CONFIG_HOME || import_node_path44.default.join(is, ".config"), e14), cache: import_node_path44.default.join(Fa.XDG_CACHE_HOME || import_node_path44.default.join(is, ".cache"), e14), log: import_node_path44.default.join(Fa.XDG_STATE_HOME || import_node_path44.default.join(is, ".local", "state"), e14), temp: import_node_path44.default.join(wS, t10, e14) };
     };
     i5e = OS("claude-cli");
     X7 = 100;
@@ -101410,8 +101464,8 @@ var require_utils3 = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path63) {
-      let input2 = path63;
+    function removeDotSegments(path64) {
+      let input2 = path64;
       const output2 = [];
       let nextSlash = -1;
       let len = 0;
@@ -101820,8 +101874,8 @@ var require_schemes = __commonJS({
       }
       if (wsComponent.resourceName) {
         const queryIndex = wsComponent.resourceName.indexOf("?");
-        const path63 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
-        wsComponent.path = path63 && path63 !== "/" ? path63 : void 0;
+        const path64 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path64 && path64 !== "/" ? path64 : void 0;
         wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
@@ -105348,7 +105402,7 @@ var require_dist2 = __commonJS({
 });
 
 // src/cli.ts
-var import_node_path62 = __toESM(require("node:path"), 1);
+var import_node_path63 = __toESM(require("node:path"), 1);
 
 // node_modules/.pnpm/commander@15.0.0/node_modules/commander/lib/error.js
 var CommanderError = class extends Error {
@@ -108461,9 +108515,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} [path]
    * @return {(string|null|Command)}
    */
-  executableDir(path63) {
-    if (path63 === void 0) return this._executableDir;
-    this._executableDir = path63;
+  executableDir(path64) {
+    if (path64 === void 0) return this._executableDir;
+    this._executableDir = path64;
     return this;
   }
   /**
@@ -110112,19 +110166,19 @@ function writePools(paths, pools) {
   applyPatch(paths.globalConfigFile, GlobalConfigSchema, { pools }, { defaults: {} });
 }
 function poolCycleOf(pools, name) {
-  const walk2 = (current, path63) => {
+  const walk2 = (current, path64) => {
     for (const entry of pools[current]?.identities ?? []) {
       const nested = poolNameOf(poolMemberIdentity(entry));
       if (nested === void 0) {
         continue;
       }
       if (nested === name) {
-        return [...path63, nested];
+        return [...path64, nested];
       }
-      if (path63.includes(nested)) {
+      if (path64.includes(nested)) {
         continue;
       }
-      const found = walk2(nested, [...path63, nested]);
+      const found = walk2(nested, [...path64, nested]);
       if (found !== void 0) {
         return found;
       }
@@ -111735,7 +111789,7 @@ init_paths();
 init_package();
 
 // src/check.ts
-var import_node_path31 = __toESM(require("node:path"), 1);
+var import_node_path32 = __toESM(require("node:path"), 1);
 init_commandDeps();
 
 // src/checkReport.ts
@@ -111833,8 +111887,9 @@ init_cascade();
 init_paths();
 init_realCredentialCache();
 init_providersStore();
+init_signIn();
 init_realPorts();
-var import_node_path30 = __toESM(require("node:path"), 1);
+var import_node_path31 = __toESM(require("node:path"), 1);
 init_zod();
 init_envBool();
 init_load();
@@ -111902,26 +111957,18 @@ function formatDecision(decision) {
   const eliminatedNote = decision.eliminated !== void 0 && decision.eliminated.length > 0 ? ` [${String(decision.eliminated.length)} more specific rule(s) eliminated by a failing when-condition]` : "";
   return `${decision.relPath}: ${status} \u2014 ${reason}${eliminatedNote}`;
 }
-function parseKeychainServiceName(stderr) {
-  const match = /"svce"<blob>="([^"]*)"/.exec(stderr);
-  return match?.[1];
-}
 function lookupKeychainService(run, farmRoot) {
-  const result = run.run("security", ["find-generic-password", "-a", farmRoot, "-g"]);
+  const serviceName = claudeCodeKeychainService(farmRoot);
+  const result = run.run("security", ["find-generic-password", "-s", serviceName]);
   if (result.status !== 0) {
     return {
       checked: true,
       found: false,
-      note: `No Keychain entry found for account "${farmRoot}" (security exited ${result.status === null ? "with no status" : String(result.status)}).`
+      serviceName,
+      note: `No Keychain entry found for service "${serviceName}" (security exited ${result.status === null ? "with no status" : String(result.status)}).`
     };
   }
-  const serviceName = parseKeychainServiceName(result.stderr);
-  return {
-    checked: true,
-    found: true,
-    ...serviceName === void 0 ? {} : { serviceName },
-    note: serviceName === void 0 ? `A Keychain entry was found for account "${farmRoot}" but its service name could not be parsed from security's output.` : `Keychain service name for this identity: "${serviceName}".`
-  };
+  return { checked: true, found: true, serviceName, note: `Keychain service name for this identity: "${serviceName}".` };
 }
 var SettingsSecretsShapeSchema = external_exports.looseObject({
   env: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
@@ -112183,10 +112230,10 @@ function collectCheckReport(params) {
   }).input;
   const providerName = cascadeProviderName(cascade);
   const provider = providerName === void 0 ? void 0 : loadCheckProvider(paths, providerName);
-  const farmRoot = identityDecision.name === void 0 ? void 0 : import_node_path30.default.join(paths.identitiesDir, identityDecision.name);
+  const farmRoot = identityDecision.name === void 0 ? void 0 : import_node_path31.default.join(paths.identitiesDir, identityDecision.name);
   const settingsFiles = {
-    "settings.json": realFsPort.readFileUtf8(import_node_path30.default.join(claudeHome, "settings.json")),
-    "settings.local.json": realFsPort.readFileUtf8(import_node_path30.default.join(claudeHome, "settings.local.json"))
+    "settings.json": realFsPort.readFileUtf8(import_node_path31.default.join(claudeHome, "settings.json")),
+    "settings.local.json": realFsPort.readFileUtf8(import_node_path31.default.join(claudeHome, "settings.local.json"))
   };
   const report = runCheck({
     cwd,
@@ -112222,7 +112269,7 @@ function registerCheckCommand(program2, deps) {
   const command = program2.command("check [path]").description(
     "Show what a launch in a directory would share or hide and why, plus credential and settings diagnostics. Never touches the farm or spawns claude."
   ).option("--identity <name>", "Identity to check (defaults to the identity a launch there would resolve).").option("--json", "Print the report as JSON.").option("--strict", "Exit 1 when the report carries any warning, not only on errors.").action((pathArg, options) => {
-    const cwd = pathArg === void 0 ? process.cwd() : import_node_path31.default.resolve(pathArg);
+    const cwd = pathArg === void 0 ? process.cwd() : import_node_path32.default.resolve(pathArg);
     const report = collectCheckReport({ paths, cwd, ...options.identity === void 0 ? {} : { identity: options.identity }, env: process.env });
     if (options.json === true) {
       printJson(checkReportToJson(report));
@@ -112239,10 +112286,10 @@ function registerCheckCommand(program2, deps) {
 }
 
 // src/codex/commands.ts
-var import_node_crypto9 = require("node:crypto");
+var import_node_crypto10 = require("node:crypto");
 var import_node_fs11 = __toESM(require("node:fs"), 1);
 var import_node_os6 = __toESM(require("node:os"), 1);
-var import_node_path32 = __toESM(require("node:path"), 1);
+var import_node_path33 = __toESM(require("node:path"), 1);
 init_commandDeps();
 init_state();
 init_schema();
@@ -112398,7 +112445,7 @@ function createCodexAuthStore(authPath, ports) {
 }
 
 // src/codex/siwc.ts
-var import_node_crypto6 = require("node:crypto");
+var import_node_crypto7 = require("node:crypto");
 init_zod();
 var SIWC_AUTHORIZE_URL = "https://auth.openai.com/api/accounts/authorize";
 var SIWC_TOKEN_URL = "https://auth.openai.com/api/accounts/oauth/token";
@@ -112432,7 +112479,7 @@ function base64Url(bytes) {
 }
 function newPkce(randomBytes5) {
   const verifier = base64Url(randomBytes5(SIWC_RANDOM_BYTES));
-  return { verifier, challenge: (0, import_node_crypto6.createHash)("sha256").update(verifier).digest("base64url") };
+  return { verifier, challenge: (0, import_node_crypto7.createHash)("sha256").update(verifier).digest("base64url") };
 }
 function newOpaqueValue(randomBytes5) {
   return base64Url(randomBytes5(SIWC_RANDOM_BYTES));
@@ -112560,7 +112607,7 @@ async function verifyIdToken(ports, idToken, expected) {
     throw new SiwcError("the issuer's key set has no key for the ID token's signature");
   }
   const signed = Buffer.from(`${headerSegment}.${payloadSegment}`);
-  if (!(0, import_node_crypto6.verify)("sha256", signed, (0, import_node_crypto6.createPublicKey)({ key: jwk, format: "jwk" }), Buffer.from(signatureSegment, "base64url"))) {
+  if (!(0, import_node_crypto7.verify)("sha256", signed, (0, import_node_crypto7.createPublicKey)({ key: jwk, format: "jwk" }), Buffer.from(signatureSegment, "base64url"))) {
     throw new SiwcError("the ID token's signature did not verify");
   }
   const claims = IdTokenClaimsSchema.parse(decodeSegment(payloadSegment));
@@ -112663,7 +112710,7 @@ async function runSiwcLogout(ports) {
 
 // src/codex/siwcPorts.ts
 var import_node_child_process4 = require("node:child_process");
-var import_node_crypto7 = require("node:crypto");
+var import_node_crypto8 = require("node:crypto");
 var import_node_http = __toESM(require("node:http"), 1);
 
 // src/codex/http.ts
@@ -112685,7 +112732,7 @@ var HTTP_STATUS = {
 
 // src/codex/siwcPorts.ts
 function realSiwcPorts(fetch3) {
-  return { fetch: fetch3, randomBytes: (size) => (0, import_node_crypto7.randomBytes)(size), now: () => /* @__PURE__ */ new Date() };
+  return { fetch: fetch3, randomBytes: (size) => (0, import_node_crypto8.randomBytes)(size), now: () => /* @__PURE__ */ new Date() };
 }
 var CALLBACK_PAGE = "<!doctype html><meta charset=utf-8><title>Signed in</title><p>You can close this tab and return to the terminal.</p>";
 async function listenForCallback(port, state) {
@@ -112834,7 +112881,7 @@ function createSiwcStore(filePath, ports) {
 }
 
 // src/codex/upstream.ts
-var import_node_crypto8 = require("node:crypto");
+var import_node_crypto9 = require("node:crypto");
 var CODEX_RESPONSES_URL = "https://chatgpt.com/backend-api/codex/responses";
 var CODEX_UPSTREAM_TIMEOUT_MS = 3e5;
 var CODEX_HEADERS_TIMEOUT_MS = 15e3;
@@ -112870,7 +112917,7 @@ function sessionIdFor(userId, randomId) {
   if (userId === void 0 || userId === "") {
     return randomId();
   }
-  const hex3 = (0, import_node_crypto8.createHash)("sha256").update(`agent-shim codex session
+  const hex3 = (0, import_node_crypto9.createHash)("sha256").update(`agent-shim codex session
 ${userId}`).digest("hex");
   let next = 0;
   return UUID_TEMPLATE.replace(/x/g, () => hex3.charAt(next++));
@@ -112911,10 +112958,10 @@ async function callCodex(ports, request7, sessionId, signal) {
 // src/codex/commands.ts
 function codexHome(env, home) {
   const fromEnv = env.CODEX_HOME;
-  return fromEnv !== void 0 && fromEnv !== "" ? fromEnv : import_node_path32.default.join(home, ".codex");
+  return fromEnv !== void 0 && fromEnv !== "" ? fromEnv : import_node_path33.default.join(home, ".codex");
 }
 function codexUsageSnapshotPath() {
-  return import_node_path32.default.join(resolveClaudeHome(), "codex-quota.json");
+  return import_node_path33.default.join(resolveClaudeHome(), "codex-quota.json");
 }
 function isEnoent4(error63) {
   return typeof error63 === "object" && error63 !== null && "code" in error63 && error63.code === "ENOENT";
@@ -112932,7 +112979,7 @@ var realCodexAuthFs = {
     }
   },
   writePrivate: (filePath, contents) => {
-    import_node_fs11.default.mkdirSync(import_node_path32.default.dirname(filePath), { recursive: true });
+    import_node_fs11.default.mkdirSync(import_node_path33.default.dirname(filePath), { recursive: true });
     import_node_fs11.default.writeFileSync(filePath, contents, { encoding: "utf8", mode: PRIVATE_FILE_MODE });
     import_node_fs11.default.chmodSync(filePath, PRIVATE_FILE_MODE);
   },
@@ -112944,7 +112991,7 @@ function writeUsageSnapshot(log, snapshot) {
   const target = codexUsageSnapshotPath();
   const temp = `${target}.${String(process.pid)}.tmp`;
   try {
-    import_node_fs11.default.mkdirSync(import_node_path32.default.dirname(target), { recursive: true });
+    import_node_fs11.default.mkdirSync(import_node_path33.default.dirname(target), { recursive: true });
     import_node_fs11.default.writeFileSync(temp, `${JSON.stringify(snapshot, null, 2)}
 `);
     import_node_fs11.default.renameSync(temp, target);
@@ -112955,8 +113002,8 @@ function writeUsageSnapshot(log, snapshot) {
 function createCodexRoutePorts(log, signInFile, options) {
   const agent = createUpstreamAgent();
   const upstreamFetch = createUpstreamFetch(agent);
-  const tempSuffix = `${String(process.pid)}.${(0, import_node_crypto9.randomUUID)()}`;
-  const auth = createCodexAuthStore(import_node_path32.default.join(codexHome(process.env, import_node_os6.default.homedir()), "auth.json"), {
+  const tempSuffix = `${String(process.pid)}.${(0, import_node_crypto10.randomUUID)()}`;
+  const auth = createCodexAuthStore(import_node_path33.default.join(codexHome(process.env, import_node_os6.default.homedir()), "auth.json"), {
     fs: realCodexAuthFs,
     fetch: upstreamFetch,
     now: () => /* @__PURE__ */ new Date(),
@@ -112965,8 +113012,8 @@ function createCodexRoutePorts(log, signInFile, options) {
   const signIn = createSiwcStore(signInFile, { fs: realCodexAuthFs, siwc: realSiwcPorts(upstreamFetch), tempSuffix });
   return {
     upstreams: {
-      "codex-cli": { fetch: upstreamFetch, auth, timers: realTimers, randomId: import_node_crypto9.randomUUID },
-      "chatgpt-sign-in": { fetch: upstreamFetch, auth: signIn.auth, timers: realTimers, randomId: import_node_crypto9.randomUUID, target: RESPONSES_API_TARGET }
+      "codex-cli": { fetch: upstreamFetch, auth, timers: realTimers, randomId: import_node_crypto10.randomUUID },
+      "chatgpt-sign-in": { fetch: upstreamFetch, auth: signIn.auth, timers: realTimers, randomId: import_node_crypto10.randomUUID, target: RESPONSES_API_TARGET }
     },
     ...options?.enableUsageSnapshot === true ? {
       writeUsageSnapshot: (snapshot) => {
@@ -113045,7 +113092,7 @@ async function runCodexLogout(paths) {
 }
 function realSiwcLoginPorts(paths) {
   const siwc = realSiwcPorts(createUpstreamFetch(createUpstreamAgent()));
-  const store = createSiwcStore(paths.chatgptSignInFile, { fs: realCodexAuthFs, siwc, tempSuffix: `${String(process.pid)}.${(0, import_node_crypto9.randomUUID)()}` });
+  const store = createSiwcStore(paths.chatgptSignInFile, { fs: realCodexAuthFs, siwc, tempSuffix: `${String(process.pid)}.${(0, import_node_crypto10.randomUUID)()}` });
   return {
     store,
     siwc,
@@ -113103,8 +113150,8 @@ function registerCodexCommand(program2, deps) {
 }
 
 // src/frontdoor/commands.ts
-var import_node_crypto24 = require("node:crypto");
-var import_node_path51 = __toESM(require("node:path"), 1);
+var import_node_crypto25 = require("node:crypto");
+var import_node_path52 = __toESM(require("node:path"), 1);
 var import_node_fs19 = __toESM(require("node:fs"), 1);
 init_commandDeps();
 init_schema();
@@ -113125,11 +113172,11 @@ var realSessionFs = {
 };
 
 // src/agents/sessions.ts
-var import_node_path34 = __toESM(require("node:path"), 1);
+var import_node_path35 = __toESM(require("node:path"), 1);
 init_cliError();
 
 // src/agents/read.ts
-var import_node_path33 = __toESM(require("node:path"), 1);
+var import_node_path34 = __toESM(require("node:path"), 1);
 init_zod();
 
 // src/agents/schema.ts
@@ -113248,15 +113295,15 @@ function parseEntry2(project, entry) {
 }
 function listSessions2(fs25, configDir) {
   const found = [];
-  for (const project of fs25.readdir(import_node_path33.default.join(configDir, PROJECTS_DIR))) {
-    const projectDir = import_node_path33.default.join(configDir, PROJECTS_DIR, project);
+  for (const project of fs25.readdir(import_node_path34.default.join(configDir, PROJECTS_DIR))) {
+    const projectDir = import_node_path34.default.join(configDir, PROJECTS_DIR, project);
     const entries = /* @__PURE__ */ new Set();
     for (const name of fs25.readdir(projectDir)) {
       if (name.endsWith(TRANSCRIPT_SUFFIX)) {
         entries.add(name.slice(0, -TRANSCRIPT_SUFFIX.length));
         continue;
       }
-      const children = fs25.readdir(import_node_path33.default.join(projectDir, name));
+      const children = fs25.readdir(import_node_path34.default.join(projectDir, name));
       if (children.includes(SUBAGENTS_DIR) || children.includes(WORKFLOWS_DIR)) {
         entries.add(name);
       }
@@ -113276,8 +113323,8 @@ function locateAgents(fs25, configDir, relativeDir, workflowRunId, report) {
     const id2 = name.slice(AGENT_FILE_PREFIX.length, -META_SUFFIX.length);
     located.push({
       id: id2,
-      metaPath: import_node_path33.default.join(relativeDir, name),
-      transcriptPath: import_node_path33.default.join(relativeDir, `${AGENT_FILE_PREFIX}${id2}${TRANSCRIPT_SUFFIX}`),
+      metaPath: import_node_path34.default.join(relativeDir, name),
+      transcriptPath: import_node_path34.default.join(relativeDir, `${AGENT_FILE_PREFIX}${id2}${TRANSCRIPT_SUFFIX}`),
       workflowRunId
     });
   }
@@ -113320,7 +113367,7 @@ function describeFailure(error63) {
 }
 function readFileOrReport(fs25, configDir, relative, report) {
   try {
-    return fs25.readFileUtf8(import_node_path33.default.join(configDir, relative));
+    return fs25.readFileUtf8(import_node_path34.default.join(configDir, relative));
   } catch (error63) {
     report({ path: relative, reason: `could not be read: ${describeFailure(error63)}` });
     return void 0;
@@ -113328,7 +113375,7 @@ function readFileOrReport(fs25, configDir, relative, report) {
 }
 function listDirOrReport(fs25, configDir, relative, report) {
   try {
-    return fs25.readdir(import_node_path33.default.join(configDir, relative));
+    return fs25.readdir(import_node_path34.default.join(configDir, relative));
   } catch (error63) {
     report({ path: relative, reason: `could not be listed: ${describeFailure(error63)}` });
     return [];
@@ -113352,18 +113399,18 @@ var WorkflowRunFileSchema = external_exports.object({
   summary: external_exports.string().optional()
 });
 function summariseSession(fs25, configDir, ref) {
-  const sessionRelative = import_node_path33.default.join(PROJECTS_DIR, ref.project, ref.entry);
-  const subagentsRelative = import_node_path33.default.join(sessionRelative, SUBAGENTS_DIR);
-  const workflowsUnderSubagents = import_node_path33.default.join(subagentsRelative, WORKFLOWS_DIR);
+  const sessionRelative = import_node_path34.default.join(PROJECTS_DIR, ref.project, ref.entry);
+  const subagentsRelative = import_node_path34.default.join(sessionRelative, SUBAGENTS_DIR);
+  const workflowsUnderSubagents = import_node_path34.default.join(subagentsRelative, WORKFLOWS_DIR);
   const isMeta = (name) => name.startsWith(AGENT_FILE_PREFIX) && name.endsWith(META_SUFFIX);
-  let agentCount = fs25.readdir(import_node_path33.default.join(configDir, subagentsRelative)).filter(isMeta).length;
-  for (const runDir of fs25.readdir(import_node_path33.default.join(configDir, workflowsUnderSubagents))) {
+  let agentCount = fs25.readdir(import_node_path34.default.join(configDir, subagentsRelative)).filter(isMeta).length;
+  for (const runDir of fs25.readdir(import_node_path34.default.join(configDir, workflowsUnderSubagents))) {
     if (runDir.startsWith(WORKFLOW_RUN_PREFIX)) {
-      agentCount += fs25.readdir(import_node_path33.default.join(configDir, workflowsUnderSubagents, runDir)).filter(isMeta).length;
+      agentCount += fs25.readdir(import_node_path34.default.join(configDir, workflowsUnderSubagents, runDir)).filter(isMeta).length;
     }
   }
-  const workflowRunCount = fs25.readdir(import_node_path33.default.join(configDir, sessionRelative, WORKFLOWS_DIR)).filter((name) => name.startsWith(WORKFLOW_RUN_PREFIX) && name.endsWith(JSON_SUFFIX)).length;
-  const transcript = fs25.lstat(import_node_path33.default.join(configDir, PROJECTS_DIR, ref.project, `${ref.entry}${TRANSCRIPT_SUFFIX}`));
+  const workflowRunCount = fs25.readdir(import_node_path34.default.join(configDir, sessionRelative, WORKFLOWS_DIR)).filter((name) => name.startsWith(WORKFLOW_RUN_PREFIX) && name.endsWith(JSON_SUFFIX)).length;
+  const transcript = fs25.lstat(import_node_path34.default.join(configDir, PROJECTS_DIR, ref.project, `${ref.entry}${TRANSCRIPT_SUFFIX}`));
   return { ...ref, agentCount, workflowRunCount, ...transcript === void 0 ? {} : { updatedAt: new Date(transcript.mtimeMs).toISOString() } };
 }
 function readSessionAgentTree(fs25, configDir, ref, options = {}) {
@@ -113371,13 +113418,13 @@ function readSessionAgentTree(fs25, configDir, ref, options = {}) {
   const report = (problem) => {
     problems.push(problem);
   };
-  const sessionRelative = import_node_path33.default.join(PROJECTS_DIR, ref.project, ref.entry);
-  const subagentsRelative = import_node_path33.default.join(sessionRelative, SUBAGENTS_DIR);
-  const workflowsUnderSubagents = import_node_path33.default.join(subagentsRelative, WORKFLOWS_DIR);
+  const sessionRelative = import_node_path34.default.join(PROJECTS_DIR, ref.project, ref.entry);
+  const subagentsRelative = import_node_path34.default.join(sessionRelative, SUBAGENTS_DIR);
+  const workflowsUnderSubagents = import_node_path34.default.join(subagentsRelative, WORKFLOWS_DIR);
   const located = locateAgents(fs25, configDir, subagentsRelative, void 0, report);
   for (const runDir of listDirOrReport(fs25, configDir, workflowsUnderSubagents, report)) {
     if (runDir.startsWith(WORKFLOW_RUN_PREFIX)) {
-      located.push(...locateAgents(fs25, configDir, import_node_path33.default.join(workflowsUnderSubagents, runDir), runDir, report));
+      located.push(...locateAgents(fs25, configDir, import_node_path34.default.join(workflowsUnderSubagents, runDir), runDir, report));
     }
   }
   const agents = /* @__PURE__ */ new Map();
@@ -113418,7 +113465,7 @@ function readSessionAgentTree(fs25, configDir, ref, options = {}) {
     superseded: ref.superseded,
     agents: roots.sort().map(build),
     tasks: readTasks(fs25, configDir, ownTaskLists(ref.sessionId), [.../* @__PURE__ */ new Set([...teamNames, ...options.taskListIds ?? []])].filter((id2) => !ownTaskLists(ref.sessionId).includes(id2)), report),
-    workflowRuns: readWorkflowRuns(fs25, configDir, import_node_path33.default.join(sessionRelative, WORKFLOWS_DIR), report),
+    workflowRuns: readWorkflowRuns(fs25, configDir, import_node_path34.default.join(sessionRelative, WORKFLOWS_DIR), report),
     problems
   };
 }
@@ -113483,12 +113530,12 @@ function ownTaskLists(sessionId) {
 function readTasks(fs25, configDir, ownLists, sharedLists, report) {
   const tasks = [];
   [...ownLists, ...sharedLists].forEach((scope, index) => {
-    const relativeDir = import_node_path33.default.join(TASKS_DIR, scope);
+    const relativeDir = import_node_path34.default.join(TASKS_DIR, scope);
     for (const name of [...listDirOrReport(fs25, configDir, relativeDir, report)].sort()) {
       if (name.startsWith(".") || !name.endsWith(JSON_SUFFIX)) {
         continue;
       }
-      const relative = import_node_path33.default.join(relativeDir, name);
+      const relative = import_node_path34.default.join(relativeDir, name);
       const text2 = readFileOrReport(fs25, configDir, relative, report);
       const parsed = TaskFileSchema.safeParse(text2 === void 0 ? void 0 : parseJson3(text2));
       if (parsed.success) {
@@ -113506,7 +113553,7 @@ function readWorkflowRuns(fs25, configDir, relativeDir, report) {
     if (!name.startsWith(WORKFLOW_RUN_PREFIX) || !name.endsWith(JSON_SUFFIX)) {
       continue;
     }
-    const relative = import_node_path33.default.join(relativeDir, name);
+    const relative = import_node_path34.default.join(relativeDir, name);
     const text2 = readFileOrReport(fs25, configDir, relative, report);
     const parsed = WorkflowRunFileSchema.safeParse(text2 === void 0 ? void 0 : parseJson3(text2));
     if (!parsed.success) {
@@ -113529,13 +113576,13 @@ var SessionLookupError = class extends CliError {
   }
 };
 function identityConfigDir(identitiesDir, identity) {
-  return import_node_path34.default.join(identitiesDir, identity);
+  return import_node_path35.default.join(identitiesDir, identity);
 }
 function historyStores(fs25, identitiesDir, identities) {
   const byRealPath = /* @__PURE__ */ new Map();
   for (const identity of identities) {
     const configDir = identityConfigDir(identitiesDir, identity);
-    const real = fs25.realpath(import_node_path34.default.join(configDir, "projects"));
+    const real = fs25.realpath(import_node_path35.default.join(configDir, "projects"));
     if (real === void 0) {
       continue;
     }
@@ -113599,7 +113646,7 @@ init_realPorts();
 // src/update/commands.ts
 var import_node_fs14 = __toESM(require("node:fs"), 1);
 var import_node_os7 = __toESM(require("node:os"), 1);
-var import_node_path37 = __toESM(require("node:path"), 1);
+var import_node_path38 = __toESM(require("node:path"), 1);
 init_package();
 init_commandDeps();
 init_store();
@@ -113702,7 +113749,7 @@ var realUpdatePorts = {
     chmod: (filePath, mode) => {
       import_node_fs14.default.chmodSync(filePath, mode);
     },
-    mkdtemp: () => import_node_fs14.default.mkdtempSync(import_node_path37.default.join(import_node_os7.default.tmpdir(), "agent-shim-update-")),
+    mkdtemp: () => import_node_fs14.default.mkdtempSync(import_node_path38.default.join(import_node_os7.default.tmpdir(), "agent-shim-update-")),
     rmRecursive: (targetPath) => {
       import_node_fs14.default.rmSync(targetPath, { recursive: true, force: true });
     }
@@ -113723,7 +113770,7 @@ function selfUpdateOptions(paths, checkOnly) {
     platform: process.platform,
     arch: process.arch,
     executablePath: realOwnExecutablePath(),
-    lockPath: import_node_path37.default.join(paths.root, "update.lock"),
+    lockPath: import_node_path38.default.join(paths.root, "update.lock"),
     checkOnly,
     pid: process.pid
   };
@@ -113955,7 +114002,7 @@ function createRealWindowOpener(params) {
 init_conditions();
 
 // src/usage/handledStamps.ts
-var import_node_path43 = __toESM(require("node:path"), 1);
+var import_node_path45 = __toESM(require("node:path"), 1);
 init_zod();
 var STAMPS_SCHEMA_VERSION = 1;
 var StampsFileSchema = external_exports.strictObject({
@@ -113978,7 +114025,7 @@ function readHandled(fs25, file2) {
 }
 function writeHandled(fs25, file2, handled) {
   const next = { schemaVersion: STAMPS_SCHEMA_VERSION, handled: Object.fromEntries(Object.entries(handled).map(([key, at2]) => [key, new Date(at2).toISOString()])) };
-  fs25.mkdirPrivate(import_node_path43.default.dirname(file2));
+  fs25.mkdirPrivate(import_node_path45.default.dirname(file2));
   fs25.writeFilePrivate(file2, `${JSON.stringify(next, null, 2)}
 `);
 }
@@ -114386,11 +114433,11 @@ init_capability();
 init_capture();
 
 // src/frontdoor/connect.ts
-var import_node_crypto18 = require("node:crypto");
+var import_node_crypto19 = require("node:crypto");
 var fs17 = __toESM(require("node:fs"), 1);
 
 // src/frontdoor/x509.ts
-var import_node_crypto17 = require("node:crypto");
+var import_node_crypto18 = require("node:crypto");
 var import_node_net = __toESM(require("node:net"), 1);
 var TAG_BOOLEAN = 1;
 var TAG_INTEGER = 2;
@@ -114542,7 +114589,7 @@ function ipBytes(address) {
   return bytes;
 }
 function keyIdentifier(publicKey) {
-  return (0, import_node_crypto17.createHash)("sha1").update(publicKey.export({ type: "pkcs1", format: "der" })).digest();
+  return (0, import_node_crypto18.createHash)("sha1").update(publicKey.export({ type: "pkcs1", format: "der" })).digest();
 }
 function readElement(buffer2, offset) {
   const tag = buffer2[offset];
@@ -114588,7 +114635,7 @@ ${body.join("\n")}
 `;
 }
 function randomSerial() {
-  const bytes = (0, import_node_crypto17.randomBytes)(SERIAL_NUMBER_BYTES);
+  const bytes = (0, import_node_crypto18.randomBytes)(SERIAL_NUMBER_BYTES);
   bytes[0] = (bytes[0] ?? 0) & BASE_128_PAYLOAD_MASK | HIGH_BIT >> 1;
   return bytes;
 }
@@ -114603,7 +114650,7 @@ function assemble(spec) {
     spec.subjectPublicKey.export({ type: "spki", format: "der" }),
     tlv(TAG_EXTENSIONS, sequence(...spec.extensions))
   );
-  const signature = (0, import_node_crypto17.sign)("sha256", tbs, spec.signingKey);
+  const signature = (0, import_node_crypto18.sign)("sha256", tbs, spec.signingKey);
   return sequence(tbs, SIGNATURE_ALGORITHM, wholeBitString(signature));
 }
 function subjectKeyIdentifierExtension(publicKey) {
@@ -114613,7 +114660,7 @@ function basicConstraintsExtension(isCa) {
   return extension(OID_BASIC_CONSTRAINTS, true, sequence(...isCa ? [boolean4(true)] : []));
 }
 function rsaKeyPair() {
-  return (0, import_node_crypto17.generateKeyPairSync)("rsa", { modulusLength: RSA_MODULUS_BITS });
+  return (0, import_node_crypto18.generateKeyPairSync)("rsa", { modulusLength: RSA_MODULUS_BITS });
 }
 function keyPem(privateKey) {
   return privateKey.export({ type: "pkcs8", format: "pem" });
@@ -114637,8 +114684,8 @@ function issueLeafCertificate(ca2, names, notBefore, notAfter) {
   if (commonName === void 0) {
     throw new Error("a leaf certificate needs at least one name");
   }
-  const caCertificate = new import_node_crypto17.X509Certificate(ca2.certPem);
-  const caPrivateKey = (0, import_node_crypto17.createPrivateKey)(ca2.keyPem);
+  const caCertificate = new import_node_crypto18.X509Certificate(ca2.certPem);
+  const caPrivateKey = (0, import_node_crypto18.createPrivateKey)(ca2.keyPem);
   const { publicKey, privateKey } = rsaKeyPair();
   const generalNames = names.map((name) => import_node_net.default.isIP(name) === 0 ? tlv(TAG_GENERAL_NAME_DNS, Buffer.from(name, "ascii")) : tlv(TAG_GENERAL_NAME_IP, ipBytes(name)));
   const der = assemble({
@@ -114718,14 +114765,14 @@ init_state();
 
 // src/frontdoor/supervisor.ts
 init_processRole();
-var import_node_path44 = __toESM(require("node:path"), 1);
+var import_node_path46 = __toESM(require("node:path"), 1);
 init_state();
 function watchedInstallEntry(resolvedOwnExecutablePath, siblingExists) {
-  const parsed = import_node_path44.default.parse(resolvedOwnExecutablePath);
+  const parsed = import_node_path46.default.parse(resolvedOwnExecutablePath);
   if (parsed.name === "agent-shim") {
     return resolvedOwnExecutablePath;
   }
-  const sibling = import_node_path44.default.join(parsed.dir, `agent-shim${parsed.ext}`);
+  const sibling = import_node_path46.default.join(parsed.dir, `agent-shim${parsed.ext}`);
   return siblingExists(sibling) ? sibling : resolvedOwnExecutablePath;
 }
 var AWAIT_PID_POLL_MS = 50;
@@ -114933,8 +114980,8 @@ function parseConnectTarget(authority) {
   }
   return { host, port };
 }
-function servedByPipeline(path63) {
-  return path63?.startsWith(ROUTED_PATH_PREFIX) === true;
+function servedByPipeline(path64) {
+  return path64?.startsWith(ROUTED_PATH_PREFIX) === true;
 }
 var HOP_BY_HOP_HEADERS = /* @__PURE__ */ new Set([
   "connection",
@@ -114994,8 +115041,8 @@ function ensureCa(store, generate) {
 }
 function caParses(ca2) {
   try {
-    new import_node_crypto18.X509Certificate(ca2.certPem);
-    (0, import_node_crypto18.createPrivateKey)(ca2.keyPem);
+    new import_node_crypto19.X509Certificate(ca2.certPem);
+    (0, import_node_crypto19.createPrivateKey)(ca2.keyPem);
     return true;
   } catch {
     return false;
@@ -115619,11 +115666,11 @@ function createRcSessionTracker(deps) {
   };
   const observeExchange = (request7) => {
     const method = (request7.method ?? "").toUpperCase();
-    const path63 = new URL(request7.url ?? "/", "http://127.0.0.1").pathname;
-    if (!path63.startsWith(RC_SESSIONS_PATH_PREFIX)) {
+    const path64 = new URL(request7.url ?? "/", "http://127.0.0.1").pathname;
+    if (!path64.startsWith(RC_SESSIONS_PATH_PREFIX)) {
       return void 0;
     }
-    const tail = path63.slice(RC_SESSIONS_PATH_PREFIX.length);
+    const tail = path64.slice(RC_SESSIONS_PATH_PREFIX.length);
     const facts = {
       oauthAuthorization: oauthAuthorizationOf(request7.headers),
       anthropicVersion: singleHeader(request7.headers, "anthropic-version"),
@@ -115992,8 +116039,8 @@ var RC_READ_FILE_ENCODINGS = ["utf-8", "base64"];
 function isRcReadFileEncoding(value2) {
   return RC_READ_FILE_ENCODINGS.some((encoding) => encoding === value2);
 }
-function buildRcReadFilePayload(requestId, path63, options) {
-  return buildRcControlRequestPayload(requestId, { subtype: "read_file", path: path63, ...options?.maxBytes === void 0 ? {} : { max_bytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } });
+function buildRcReadFilePayload(requestId, path64, options) {
+  return buildRcControlRequestPayload(requestId, { subtype: "read_file", path: path64, ...options?.maxBytes === void 0 ? {} : { max_bytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } });
 }
 function buildRcFileSuggestionsPayload(requestId, query) {
   return buildRcControlRequestPayload(requestId, { subtype: "file_suggestions", query });
@@ -116095,15 +116142,15 @@ async function getRcSessionContextUsage(deps, sessionId, detail) {
   const result = await deliverRcClientPayload(deps, sessionId, buildRcGetContextUsagePayload(requestId, detail), `request the context usage of session ${sessionId}`);
   return result.ok ? { ...result, requestId } : result;
 }
-async function readRcSessionFile(deps, sessionId, path63, options) {
-  if (path63 === "") {
+async function readRcSessionFile(deps, sessionId, path64, options) {
+  if (path64 === "") {
     return { ok: false, message: "a read-file write needs a non-empty path: the SDK's own field names the file the worker resolves against the session's cwd, and an empty string names none" };
   }
   if (options?.maxBytes !== void 0 && (!Number.isInteger(options.maxBytes) || options.maxBytes <= 0)) {
     return { ok: false, message: "a read-file write's max-bytes is a positive whole number of bytes: the SDK's own field caps the read, and a zero or negative cap reads nothing" };
   }
   const requestId = deps.newUuid();
-  const result = await deliverRcClientPayload(deps, sessionId, buildRcReadFilePayload(requestId, path63, options), `read ${path63} from session ${sessionId}`);
+  const result = await deliverRcClientPayload(deps, sessionId, buildRcReadFilePayload(requestId, path64, options), `read ${path64} from session ${sessionId}`);
   return result.ok ? { ...result, requestId } : result;
 }
 async function suggestRcSessionFiles(deps, sessionId, query) {
@@ -116274,11 +116321,11 @@ function createRcControlHandler(deps) {
       path: "read-file",
       read: (body) => {
         const session = bodyString(body, "session");
-        const path63 = bodyString(body, "path");
+        const path64 = bodyString(body, "path");
         const maxBytes = "maxBytes" in body ? bodyPositiveInteger(body, "maxBytes") : void 0;
         const encoding = "encoding" in body && isRcReadFileEncoding(body.encoding) ? body.encoding : void 0;
-        const refused2 = session === void 0 || path63 === void 0 || "maxBytes" in body && maxBytes === void 0 || "encoding" in body && encoding === void 0;
-        return refused2 ? { error: `the read-file body must be JSON naming a non-empty session id and path, maxBytes only as a positive whole number or absent, and an encoding the SDK's own type permits (${RC_READ_FILE_ENCODINGS.join(", ")}) or none` } : { session, run: async () => await deps.readFile(session, path63, { ...maxBytes === void 0 ? {} : { maxBytes }, ...encoding === void 0 ? {} : { encoding } }) };
+        const refused2 = session === void 0 || path64 === void 0 || "maxBytes" in body && maxBytes === void 0 || "encoding" in body && encoding === void 0;
+        return refused2 ? { error: `the read-file body must be JSON naming a non-empty session id and path, maxBytes only as a positive whole number or absent, and an encoding the SDK's own type permits (${RC_READ_FILE_ENCODINGS.join(", ")}) or none` } : { session, run: async () => await deps.readFile(session, path64, { ...maxBytes === void 0 ? {} : { maxBytes }, ...encoding === void 0 ? {} : { encoding } }) };
       }
     },
     {
@@ -116588,9 +116635,9 @@ function requestIdOfBody(body) {
 }
 function frontDoorRcControl(transport, token) {
   const headers = { authorization: `Bearer ${token}` };
-  const listAnswerOf = async (path63, what) => {
+  const listAnswerOf = async (path64, what) => {
     try {
-      return await transport.request({ method: "GET", path: path63, headers });
+      return await transport.request({ method: "GET", path: path64, headers });
     } catch (error63) {
       throw new Error(`${what}: could not reach the front door's control listener: ${error63 instanceof Error ? error63.message : String(error63)}`, { cause: error63 });
     }
@@ -116662,10 +116709,10 @@ function frontDoorRcControl(transport, token) {
     }
     return pending;
   };
-  const writeOf = async (path63, body, describeFailure2) => {
+  const writeOf = async (path64, body, describeFailure2) => {
     let answer;
     try {
-      answer = await transport.request({ method: "POST", path: path63, headers: { ...headers, "content-type": "application/json" }, body });
+      answer = await transport.request({ method: "POST", path: path64, headers: { ...headers, "content-type": "application/json" }, body });
     } catch (error63) {
       return { ok: false, message: `could not reach the front door's control listener: ${error63 instanceof Error ? error63.message : String(error63)}` };
     }
@@ -116696,10 +116743,10 @@ function frontDoorRcControl(transport, token) {
     endSession: async (sessionId, reason) => await writeOf(`${CONTROL_PATH_PREFIX}/end-session`, JSON.stringify({ session: sessionId, ...reason === void 0 ? {} : { reason } }), (status, message) => `ending ${sessionId} failed (HTTP ${String(status)}): ${message}`),
     getUsage: async (sessionId, skipBehaviors) => await writeOf(`${CONTROL_PATH_PREFIX}/get-usage`, JSON.stringify({ session: sessionId, ...skipBehaviors === void 0 ? {} : { skipBehaviors } }), (status, message) => `requesting the usage of ${sessionId} failed (HTTP ${String(status)}): ${message}`),
     getContextUsage: async (sessionId, detail) => await writeOf(`${CONTROL_PATH_PREFIX}/get-context-usage`, JSON.stringify({ session: sessionId, ...detail === void 0 ? {} : { detail } }), (status, message) => `requesting the context usage of ${sessionId} failed (HTTP ${String(status)}): ${message}`),
-    readFile: async (sessionId, path63, options) => await writeOf(
+    readFile: async (sessionId, path64, options) => await writeOf(
       `${CONTROL_PATH_PREFIX}/read-file`,
-      JSON.stringify({ session: sessionId, path: path63, ...options?.maxBytes === void 0 ? {} : { maxBytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } }),
-      (status, message) => `reading ${path63} from ${sessionId} failed (HTTP ${String(status)}): ${message}`
+      JSON.stringify({ session: sessionId, path: path64, ...options?.maxBytes === void 0 ? {} : { maxBytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } }),
+      (status, message) => `reading ${path64} from ${sessionId} failed (HTTP ${String(status)}): ${message}`
     ),
     fileSuggestions: async (sessionId, query) => await writeOf(`${CONTROL_PATH_PREFIX}/file-suggestions`, JSON.stringify({ session: sessionId, query }), (status, message) => `requesting file suggestions from ${sessionId} failed (HTTP ${String(status)}): ${message}`),
     keepAlive: async (sessionId) => await writeOf(`${CONTROL_PATH_PREFIX}/keep-alive`, JSON.stringify({ session: sessionId }), (status, message) => `keeping ${sessionId} alive failed (HTTP ${String(status)}): ${message}`),
@@ -116993,12 +117040,12 @@ function tlsFacts(options) {
 }
 function realRcEventDial(target = { host: CONNECT_INTERCEPT_HOST, port: HTTPS_PORT }) {
   const agent = new ExemptTlsAgent();
-  const post = async (path63, headers, body) => await new Promise((resolve2, reject) => {
+  const post = async (path64, headers, body) => await new Promise((resolve2, reject) => {
     const options = {
       host: target.host,
       port: target.port,
       method: "POST",
-      path: path63,
+      path: path64,
       // The Host header names the host whose API this is, not the address dialled: a redirected test dials a loopback stand-in while still speaking to the API host by name, exactly as the forwarded paths present their SNI.
       headers: { ...headers, host: target.servername ?? target.host, "content-length": String(Buffer.byteLength(body, "utf8")) },
       agent
@@ -117063,12 +117110,12 @@ function lateRcStreamDial(resolve2) {
 }
 function realRcStreamDial(target = { host: CONNECT_INTERCEPT_HOST, port: HTTPS_PORT }) {
   const agent = new ExemptTlsAgent();
-  const request7 = async (method, path63, headers, body, signal) => await new Promise((resolve2, reject) => {
+  const request7 = async (method, path64, headers, body, signal) => await new Promise((resolve2, reject) => {
     const options = {
       host: target.host,
       port: target.port,
       method,
-      path: path63,
+      path: path64,
       // The Host header names the host whose API this is, not the address dialled: a redirected test dials a loopback stand-in while still speaking to the API host by name, exactly as the forwarded paths present their SNI.
       headers: { ...headers, host: target.servername ?? target.host, ...body === void 0 ? {} : { "content-length": String(Buffer.byteLength(body, "utf8")) } },
       agent,
@@ -117110,9 +117157,9 @@ function realRcStreamDial(target = { host: CONNECT_INTERCEPT_HOST, port: HTTPS_P
       return { status, body: await readAll(response) };
     },
     openStream: async (sessionId, headers, resume, signal) => {
-      const path63 = resume === void 0 ? `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream` : `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream?from_sequence_num=${String(resume.fromSequenceNum)}`;
+      const path64 = resume === void 0 ? `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream` : `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream?from_sequence_num=${String(resume.fromSequenceNum)}`;
       const streamHeaders = resume === void 0 ? headers : { ...headers, "last-event-id": String(resume.fromSequenceNum) };
-      const { status, response } = await request7("GET", path63, streamHeaders, void 0, signal);
+      const { status, response } = await request7("GET", path64, streamHeaders, void 0, signal);
       if (!isSuccessful2(status)) {
         await readAll(response);
         return { status, chunks: NO_CHUNKS };
@@ -117328,40 +117375,8 @@ init_claudeShim();
 init_store();
 init_realPorts();
 var import_node_fs18 = __toESM(require("node:fs"), 1);
-var import_node_path46 = __toESM(require("node:path"), 1);
-
-// src/usage/signIn.ts
-var import_node_path45 = __toESM(require("node:path"), 1);
-var CREDENTIALS_FILE = ".credentials.json";
-function keychainHasItem(run, account) {
-  return run.run("security", ["find-generic-password", "-a", account]).status === 0;
-}
-function decideSignIn(facts) {
-  if (facts.hasCredentialBlock) {
-    return { state: "token", detail: "supplies its own credential through a credential block, so a stored login is not what a launch uses" };
-  }
-  if (facts.keychainItem === true) {
-    return { state: "signed-in", detail: "a login is stored in the macOS Keychain" };
-  }
-  if (facts.credentialsFile) {
-    return { state: "signed-in", detail: `a login is stored in ${CREDENTIALS_FILE}` };
-  }
-  return { state: "signed-out", detail: facts.platform === "darwin" ? `no Keychain item and no ${CREDENTIALS_FILE}` : `no ${CREDENTIALS_FILE}` };
-}
-function credentialsFilePath(farmRoot) {
-  return import_node_path45.default.join(farmRoot, CREDENTIALS_FILE);
-}
-function identitySignIn(fs25, probe, identity) {
-  const probing = !identity.hasCredentialBlock;
-  return decideSignIn({
-    hasCredentialBlock: identity.hasCredentialBlock,
-    keychainItem: probing && probe.platform === "darwin" && probe.run !== void 0 ? keychainHasItem(probe.run, identity.farmRoot) : void 0,
-    credentialsFile: probing && fs25.lstat(credentialsFilePath(identity.farmRoot)) !== void 0,
-    platform: probe.platform
-  });
-}
-
-// src/doctorReport.ts
+var import_node_path47 = __toESM(require("node:path"), 1);
+init_signIn();
 init_load();
 init_unrecognisedKeys();
 init_schema();
@@ -117591,7 +117606,7 @@ function tcpPortEraRecord(raw) {
   return (has("port") || has("lastPort")) && !has("socketPath");
 }
 function pushPathResolution(push, resolution) {
-  const ownDir = import_node_path46.default.dirname(resolution.ownExecutablePath);
+  const ownDir = import_node_path47.default.dirname(resolution.ownExecutablePath);
   switch (resolution.agentShim.status) {
     case "ok":
       push("path-resolution", "pass", `\`agent-shim\` on PATH resolves to this running executable, ${resolution.ownExecutablePath}.`, "agent-shim");
@@ -117693,14 +117708,14 @@ function pushProvider(push, entry, cacheEnv, signIn) {
 }
 function pushLegacyName(push, params) {
   const legacyVariables = Object.keys(params.env).filter((name) => name.startsWith(LEGACY_ENV_PREFIX) && params.env[name] !== void 0).sort();
-  if (legacyVariables.length === 0 && import_node_path46.default.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
+  if (legacyVariables.length === 0 && import_node_path47.default.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
     push("legacy-name", "pass", "Nothing here still uses the former `claude-use` name.");
     return;
   }
   for (const name of legacyVariables) {
     push("legacy-name", "warn", `${name} is the former name of ${name.replace(LEGACY_ENV_PREFIX, ENV_PREFIX)}. Rename it; the old name still works but is only a fallback.`, name);
   }
-  if (import_node_path46.default.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
+  if (import_node_path47.default.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
     push(
       "legacy-name",
       "warn",
@@ -118084,18 +118099,18 @@ function collectDoctorReport(params) {
   const { paths } = params;
   const identityNames = import_node_fs18.default.existsSync(paths.identitiesDir) ? import_node_fs18.default.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort() : [];
   const identities = identityNames.map((name) => {
-    const farmRoot = import_node_path46.default.join(paths.identitiesDir, name);
-    const identityPath = import_node_path46.default.join(farmRoot, "identity.json");
+    const farmRoot = import_node_path47.default.join(paths.identitiesDir, name);
+    const identityPath = import_node_path47.default.join(farmRoot, "identity.json");
     return { name, path: identityPath, raw: realFsPort.readFileUtf8(identityPath), farmRoot, credentialsFilePresent: import_node_fs18.default.existsSync(credentialsFilePath(farmRoot)) };
   });
   const profileNames = import_node_fs18.default.existsSync(paths.configProfilesDir) ? import_node_fs18.default.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const configProfiles = profileNames.map((name) => {
-    const profilePath = import_node_path46.default.join(paths.configProfilesDir, `${name}.json`);
+    const profilePath = import_node_path47.default.join(paths.configProfilesDir, `${name}.json`);
     return { name, path: profilePath, raw: realFsPort.readFileUtf8(profilePath) };
   });
   const providerNames = import_node_fs18.default.existsSync(paths.providersDir) ? import_node_fs18.default.readdirSync(paths.providersDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const providers = providerNames.map((name) => {
-    const providerPath = import_node_path46.default.join(paths.providersDir, `${name}.json`);
+    const providerPath = import_node_path47.default.join(paths.providersDir, `${name}.json`);
     return { name, path: providerPath, raw: realFsPort.readFileUtf8(providerPath) };
   });
   const ownExecutablePath = realOwnExecutablePath();
@@ -118107,12 +118122,12 @@ function collectDoctorReport(params) {
     binaryDiscovery = { ok: false, message: error63 instanceof Error ? error63.message : String(error63) };
   }
   const shimState = readJson(paths.claudeShimFile, ClaudeShimStateSchema);
-  const pathDirs = (params.env.PATH ?? "").split(import_node_path46.default.delimiter).filter((dir) => dir !== "");
+  const pathDirs = (params.env.PATH ?? "").split(import_node_path47.default.delimiter).filter((dir) => dir !== "");
   const claudeShimShadow = shimState === void 0 ? void 0 : refinePathShadow(
     findPathShadow({
       pathDirs,
-      targetDir: import_node_path46.default.dirname(shimState.targetPath),
-      targetFilename: import_node_path46.default.basename(shimState.targetPath),
+      targetDir: import_node_path47.default.dirname(shimState.targetPath),
+      targetFilename: import_node_path47.default.basename(shimState.targetPath),
       findExecutableInDir
     }),
     shimState.targetPath,
@@ -118145,7 +118160,7 @@ function collectDoctorReport(params) {
       agentShim: refinePathShadow(
         findPathShadow({
           pathDirs,
-          targetDir: import_node_path46.default.dirname(ownExecutablePath),
+          targetDir: import_node_path47.default.dirname(ownExecutablePath),
           targetFilename: commandFilename(ownExecutablePath, "agent-shim"),
           findExecutableInDir
         }),
@@ -118417,11 +118432,11 @@ function tryOrUndefined(fn2) {
     return void 0;
   }
 }
-function pathToHttpPath(path63) {
-  return `/${path63.map(safeEncodeURIComponent).join("/")}`;
+function pathToHttpPath(path64) {
+  return `/${path64.map(safeEncodeURIComponent).join("/")}`;
 }
-function normalizeHttpPath(path63) {
-  const paths = path63.split("/");
+function normalizeHttpPath(path64) {
+  const paths = path64.split("/");
   if (paths.at(0) === "") {
     paths.shift();
   }
@@ -118606,9 +118621,9 @@ function isPlainObject2(value2) {
 function getOwn(object3, key) {
   return Object.hasOwn(object3, key) ? object3[key] : void 0;
 }
-function get(object3, path63) {
+function get(object3, path64) {
   let current = object3;
-  for (const key of path63) {
+  for (const key of path64) {
     if (!isTypescriptObject(current)) {
       return void 0;
     }
@@ -119831,7 +119846,7 @@ function resolveClientRest(rest) {
     // rest[1] can be undefined if all fields of FriendlyClientOptions are optional
   ];
 }
-function createORPCClient(link, { path: path63 = [], ...options } = {}) {
+function createORPCClient(link, { path: path64 = [], ...options } = {}) {
   const procedureClient = (...rest) => {
     const [input2, callOptions] = resolveClientRest(rest);
     const interceptors = [
@@ -119840,7 +119855,7 @@ function createORPCClient(link, { path: path63 = [], ...options } = {}) {
     ];
     return intercept(
       interceptors,
-      { ...callOptions, input: input2, path: path63 },
+      { ...callOptions, input: input2, path: path64 },
       ({ path: path210, input: input22, ...callOptions2 }) => link.call(path210, input22, callOptions2)
     );
   };
@@ -119854,7 +119869,7 @@ function createORPCClient(link, { path: path63 = [], ...options } = {}) {
       if (client === void 0) {
         client = createORPCClient(link, {
           ...options,
-          path: [...path63, key],
+          path: [...path64, key],
           scoped: options.scoped?.[key]
         });
         cache.set(key, client);
@@ -119876,24 +119891,24 @@ var BracketNotationSerializer = class {
     this.internalSerialize(data, "", true, result);
     return result;
   }
-  internalSerialize(data, path63, isRoot, result) {
+  internalSerialize(data, path64, isRoot, result) {
     if (Array.isArray(data)) {
       data.forEach((item, i10) => {
-        this.internalSerialize(item, isRoot ? i10.toString() : `${path63}[${i10}]`, false, result);
+        this.internalSerialize(item, isRoot ? i10.toString() : `${path64}[${i10}]`, false, result);
       });
     } else if (isPlainObject2(data)) {
       for (const key of Object.keys(data)) {
-        this.internalSerialize(data[key], isRoot ? key : `${path63}[${key}]`, false, result);
+        this.internalSerialize(data[key], isRoot ? key : `${path64}[${key}]`, false, result);
       }
     } else {
-      result.push([path63, data]);
+      result.push([path64, data]);
     }
   }
   deserialize(serialized) {
     const arrayPushStyles = /* @__PURE__ */ new WeakSet();
     const root = new NullProtoObj();
-    for (const [path63, value2] of serialized) {
-      const segments = this.parsePath(path63);
+    for (const [path64, value2] of serialized) {
+      const segments = this.parsePath(path64);
       let currentRef = root;
       let nextSegment = segments[0];
       for (let i10 = 1; i10 < segments.length; i10++) {
@@ -119944,13 +119959,13 @@ var BracketNotationSerializer = class {
     }
     return result;
   }
-  parsePath(path63) {
+  parsePath(path64) {
     const segments = [];
     let inBrackets = false;
     let currentSegment = "";
-    for (let i10 = 0; i10 < path63.length; i10++) {
-      const char = path63[i10];
-      const nextChar = path63[i10 + 1];
+    for (let i10 = 0; i10 < path64.length; i10++) {
+      const char = path64[i10];
+      const nextChar = path64[i10 + 1];
       if (inBrackets && char === "]" && (nextChar === void 0 || nextChar === "[")) {
         if (nextChar === void 0) {
           inBrackets = false;
@@ -119966,7 +119981,7 @@ var BracketNotationSerializer = class {
         currentSegment += char;
       }
     }
-    return inBrackets || segments.length === 0 ? [path63] : segments;
+    return inBrackets || segments.length === 0 ? [path64] : segments;
   }
 };
 var INTEGER_PATTERN = /^0$|^[1-9]\d*$/;
@@ -120539,11 +120554,11 @@ var OpenAPISerializer = class {
       return json2;
     }
     const form = new FormData();
-    for (const [path63, value22] of this.bracketNotation.serialize(json2)) {
+    for (const [path64, value22] of this.bracketNotation.serialize(json2)) {
       if (value22 instanceof Blob) {
-        form.append(path63, value22);
+        form.append(path64, value22);
       } else if (value22 !== void 0 && value22 !== null) {
-        form.append(path63, String(value22));
+        form.append(path64, String(value22));
       }
     }
     return form;
@@ -120581,30 +120596,30 @@ function isBodylessMethod(method) {
   return method === "GET" || method === "HEAD";
 }
 var PARAMETER_NAME_REGEX = /^[\w-]+$/;
-function getDynamicPathParams(path63) {
-  if (!path63.includes("{")) {
+function getDynamicPathParams(path64) {
+  if (!path64.includes("{")) {
     return void 0;
   }
-  const len = path63.length;
+  const len = path64.length;
   let params;
   let index = 1;
   while (index < len) {
     const segmentStart = index;
-    const slashPos = path63.indexOf("/", index);
+    const slashPos = path64.indexOf("/", index);
     const segmentEnd = slashPos === -1 ? len : slashPos;
-    if (segmentEnd > segmentStart && path63.charCodeAt(segmentStart) === 123 && path63.charCodeAt(segmentEnd - 1) === 125) {
+    if (segmentEnd > segmentStart && path64.charCodeAt(segmentStart) === 123 && path64.charCodeAt(segmentEnd - 1) === 125) {
       let parameterStart = segmentStart + 1;
       let allowsSlash = false;
-      const operator = path63.charCodeAt(parameterStart);
+      const operator = path64.charCodeAt(parameterStart);
       if (operator === 43) {
         allowsSlash = true;
         parameterStart++;
       }
-      const parameterName = path63.slice(parameterStart, segmentEnd - 1);
+      const parameterName = path64.slice(parameterStart, segmentEnd - 1);
       if (PARAMETER_NAME_REGEX.test(parameterName)) {
         params ??= [];
         params.push({
-          segment: path63.slice(segmentStart, segmentEnd),
+          segment: path64.slice(segmentStart, segmentEnd),
           startIndex: segmentStart,
           parameterName,
           allowsSlash
@@ -120647,8 +120662,8 @@ openapi.method = (method) => ({
   ...openapi({ method }),
   name: "~openapi/method"
 });
-openapi.path = (path63) => ({
-  ...openapi({ path: path63 }),
+openapi.path = (path64) => ({
+  ...openapi({ path: path64 }),
   name: "~openapi/path"
 });
 openapi.spec = (spec) => ({
@@ -121509,22 +121524,22 @@ function visitJsonSchemaRefs(value2, visit2, schemaLevel = true, seen = /* @__PU
     }
   }
 }
-function mapJsonSchemaRefs(value2, map2, schemaLevel = true, path63 = []) {
+function mapJsonSchemaRefs(value2, map2, schemaLevel = true, path64 = []) {
   if (!value2 || typeof value2 !== "object") {
     return value2;
   }
   if (Array.isArray(value2)) {
-    return value2.map((item, index) => mapJsonSchemaRefs(item, map2, schemaLevel, [...path63, index]));
+    return value2.map((item, index) => mapJsonSchemaRefs(item, map2, schemaLevel, [...path64, index]));
   }
   const result = {};
   for (const key of Object.keys(value2)) {
     const val = value2[key];
     if (key === "$ref" && typeof val === "string") {
-      setOwn(result, key, map2(val, [...path63, key]));
+      setOwn(result, key, map2(val, [...path64, key]));
     } else if (!schemaLevel) {
-      setOwn(result, key, mapJsonSchemaRefs(val, map2, true, [...path63, key]));
+      setOwn(result, key, mapJsonSchemaRefs(val, map2, true, [...path64, key]));
     } else if (JSON_SCHEMA_LOGIC_KEYWORDS.has(key) || JSON_SCHEMA_RECORD_KEYWORDS.has(key)) {
-      setOwn(result, key, mapJsonSchemaRefs(val, map2, !JSON_SCHEMA_RECORD_KEYWORDS.has(key), [...path63, key]));
+      setOwn(result, key, mapJsonSchemaRefs(val, map2, !JSON_SCHEMA_RECORD_KEYWORDS.has(key), [...path64, key]));
     } else {
       setOwn(result, key, val);
     }
@@ -122054,7 +122069,7 @@ function unlazy(maybeLazy) {
 function createProcedureClient(lazyableProcedure, ...rest) {
   const options = resolveMaybeOptionalOptions(rest);
   return async (...[input2, callerOptions]) => {
-    const path63 = toArray(options.path);
+    const path64 = toArray(options.path);
     const { default: procedure } = await unlazy(lazyableProcedure);
     const clientContext = callerOptions?.context ?? {};
     const context = await value(options.context, clientContext) ?? {};
@@ -122067,7 +122082,7 @@ function createProcedureClient(lazyableProcedure, ...rest) {
     };
     try {
       const output2 = await runWithSpan("call_procedure", (span) => {
-        span?.setAttribute("procedure.path", path63);
+        span?.setAttribute("procedure.path", path64);
         return intercept(
           options.interceptors,
           {
@@ -122075,7 +122090,7 @@ function createProcedureClient(lazyableProcedure, ...rest) {
             // input can be optional if it is undefinable
             input: input2,
             errors,
-            path: path63,
+            path: path64,
             procedure,
             signal: callerOptions?.signal,
             lastEventId: callerOptions?.lastEventId
@@ -122326,10 +122341,10 @@ function augmentRouter(router, options) {
   }
   return enhanced;
 }
-function getRouter(router, path63) {
+function getRouter(router, path64) {
   let current = router;
-  for (let i10 = 0; i10 < path63.length; i10++) {
-    const segment = path63[i10];
+  for (let i10 = 0; i10 < path64.length; i10++) {
+    const segment = path64[i10];
     if (!isTypescriptObject(current)) {
       return void 0;
     }
@@ -122341,7 +122356,7 @@ function getRouter(router, path63) {
       continue;
     }
     const lazied = current;
-    const rest = path63.slice(i10);
+    const rest = path64.slice(i10);
     return new Lazy({
       ...lazied["~orpc"],
       async loader() {
@@ -122356,40 +122371,40 @@ function getRouter(router, path63) {
   }
   return current;
 }
-function walkProcedureContractsSync(router, callback, path63 = []) {
+function walkProcedureContractsSync(router, callback, path64 = []) {
   const lazyResults = [];
-  walkProcedureContractsSyncInternal(router, callback, path63.slice(), lazyResults);
+  walkProcedureContractsSyncInternal(router, callback, path64.slice(), lazyResults);
   return lazyResults;
 }
-function walkProcedureContractsSyncInternal(router, callback, path63, lazyResults) {
+function walkProcedureContractsSyncInternal(router, callback, path64, lazyResults) {
   const hiddenContract = getHiddenRouterContract(router);
   if (hiddenContract !== void 0) {
     router = hiddenContract;
   }
   if (router instanceof ProcedureContract) {
-    callback(router, path63.slice());
+    callback(router, path64.slice());
     return;
   }
   if (!isTypescriptObject(router)) {
     return;
   }
   for (const [key, value2] of Object.entries(router)) {
-    path63.push(key);
+    path64.push(key);
     if (value2 instanceof Lazy) {
-      lazyResults.push({ router: value2, path: path63.slice() });
+      lazyResults.push({ router: value2, path: path64.slice() });
     } else {
-      walkProcedureContractsSyncInternal(value2, callback, path63, lazyResults);
+      walkProcedureContractsSyncInternal(value2, callback, path64, lazyResults);
     }
-    path63.pop();
+    path64.pop();
   }
 }
-async function walkProcedureContractsAsync(router, callback, path63 = []) {
+async function walkProcedureContractsAsync(router, callback, path64 = []) {
   const hiddenContract = getHiddenRouterContract(router);
   if (hiddenContract !== void 0) {
     router = hiddenContract;
   }
   if (router instanceof ProcedureContract) {
-    await callback(router, path63);
+    await callback(router, path64);
     return;
   }
   if (!isTypescriptObject(router)) {
@@ -122398,9 +122413,9 @@ async function walkProcedureContractsAsync(router, callback, path63 = []) {
   for (const [key, value2] of Object.entries(router)) {
     if (value2 instanceof Lazy) {
       const { default: router2 } = await unlazy(value2);
-      await walkProcedureContractsAsync(router2, callback, [...path63, key]);
+      await walkProcedureContractsAsync(router2, callback, [...path64, key]);
     } else {
-      await walkProcedureContractsAsync(value2, callback, [...path63, key]);
+      await walkProcedureContractsAsync(value2, callback, [...path64, key]);
     }
   }
 }
@@ -122886,18 +122901,18 @@ function rewriteComponentSchemaRefs(schema, renameMap) {
 }
 var OpenAPIGeneratorError = class extends TypeError {
 };
-function toOpenAPIPath(path63, dynamicPathParams) {
+function toOpenAPIPath(path64, dynamicPathParams) {
   if (!dynamicPathParams?.length) {
-    return path63;
+    return path64;
   }
   let normalized = "";
   let currentIndex = 0;
   for (const param of dynamicPathParams) {
-    normalized += path63.slice(currentIndex, param.startIndex);
+    normalized += path64.slice(currentIndex, param.startIndex);
     normalized += `{${param.parameterName}}`;
     currentIndex = param.startIndex + param.segment.length;
   }
-  normalized += path63.slice(currentIndex);
+  normalized += path64.slice(currentIndex);
   return normalized;
 }
 function buildRequest(ctx, operation, def, meta3, dynamicPathParams) {
@@ -123331,8 +123346,8 @@ var OpenAPIGenerator = class {
       customErrorResponseBodySchema: options.customErrorResponseBodySchema
     };
     const errors = [];
-    await walkProcedureContractsAsync(router, (contract, path63) => {
-      if (value(options.filter, contract, path63) === false) {
+    await walkProcedureContractsAsync(router, (contract, path64) => {
+      if (value(options.filter, contract, path64) === false) {
         return;
       }
       try {
@@ -123344,7 +123359,7 @@ var OpenAPIGenerator = class {
             `QUERY operations require OpenAPI 3.2, but version "${version2}" was requested.`
           );
         }
-        const postPath = meta3?.path ?? pathToHttpPath(path63);
+        const postPath = meta3?.path ?? pathToHttpPath(path64);
         const httpPath = meta3?.prefix ? mergeHttpPath(meta3.prefix, postPath) : postPath;
         const dynamicPathParams = getDynamicPathParams(httpPath);
         const openApiPath = toOpenAPIPath(httpPath, dynamicPathParams);
@@ -123353,7 +123368,7 @@ var OpenAPIGenerator = class {
           operation = meta3.spec;
         } else {
           operation = {
-            operationId: meta3?.operationId ?? path63.join("."),
+            operationId: meta3?.operationId ?? path64.join("."),
             summary: meta3?.summary,
             description: meta3?.description,
             deprecated: meta3?.deprecated,
@@ -123373,7 +123388,7 @@ var OpenAPIGenerator = class {
         if (!(e14 instanceof OpenAPIGeneratorError)) {
           throw e14;
         }
-        errors.push(`Procedure at ${path63.join(".") || "(root)"}: ${e14.message}`);
+        errors.push(`Procedure at ${path64.join(".") || "(root)"}: ${e14.message}`);
       }
     });
     if (errors.length) {
@@ -123681,7 +123696,7 @@ var ResetRowSchema = external_exports.strictObject({
 var ResetScheduleSchema = external_exports.strictObject({ resets: external_exports.readonly(external_exports.array(ResetRowSchema)) });
 
 // src/frontdoor/controlSchemas.ts
-var import_node_path47 = __toESM(require("node:path"), 1);
+var import_node_path48 = __toESM(require("node:path"), 1);
 init_zod();
 init_schema2();
 
@@ -123893,11 +123908,11 @@ var FrontDoorSessionsOutputSchema = external_exports.strictObject({ sessions: ex
 var CheckRunInputSchema = external_exports.strictObject({
   path: external_exports.string().min(1),
   identity: external_exports.string().min(1).optional()
-}).refine((input2) => import_node_path47.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+}).refine((input2) => import_node_path48.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var PoolPickInputSchema = external_exports.strictObject({
   pool: external_exports.string().min(1),
   path: external_exports.string().min(1)
-}).refine((input2) => import_node_path47.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+}).refine((input2) => import_node_path48.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var DoctorFindingSchema = external_exports.strictObject({
   section: external_exports.enum(DOCTOR_SECTIONS),
   subject: external_exports.string().optional(),
@@ -124218,16 +124233,16 @@ var StandardLink = class {
   /**
    * @throws ORPCError, transport-level errors (network failures, timeouts, etc.)
    */
-  call(path63, input2, options) {
-    return runWithSpan(`${ORPC_NAME}.${path63.join("/")}`, (span) => {
+  call(path64, input2, options) {
+    return runWithSpan(`${ORPC_NAME}.${path64.join("/")}`, (span) => {
       span?.setAttribute("rpc.system", ORPC_NAME);
-      span?.setAttribute("rpc.method", path63.join("."));
+      span?.setAttribute("rpc.method", path64.join("."));
       if (getTracer() && isAsyncIteratorObject(input2)) {
         input2 = override(input2, traceAsyncIterator("consume_async_iterator_object_input", input2));
       } else if (getTracer() && input2 instanceof ReadableStream) {
         input2 = override(input2, traceReadableStream("consume_octet_stream_input", input2));
       }
-      return intercept(this.interceptors, { ...options, path: path63, input: input2 }, async ({ path: path210, input: input22, ...options2 }) => {
+      return intercept(this.interceptors, { ...options, path: path64, input: input2 }, async ({ path: path210, input: input22, ...options2 }) => {
         const tracer = getTracer();
         const activeSpan = tracer?.getActiveSpan() ?? span;
         let request7 = await runWithSpan(
@@ -124284,18 +124299,18 @@ var RPCLinkCodec = class {
     this.headers = options.headers ?? {};
     this.serializer = options.serializer ?? new RPCSerializer();
   }
-  async encodeInput(input2, path63, options) {
-    let headers = toResolvedStandardHeaders(await value(this.headers, options, path63, input2));
+  async encodeInput(input2, path64, options) {
+    let headers = toResolvedStandardHeaders(await value(this.headers, options, path64, input2));
     if (options.lastEventId !== void 0) {
       headers = mergeStandardHeaders(headers, { "last-event-id": options.lastEventId });
     }
-    const expectedMethod = await value(this.expectedMethod, options, path63, input2);
-    const baseUrl = await value(this.baseUrl, options, path63, input2);
+    const expectedMethod = await value(this.expectedMethod, options, path64, input2);
+    const baseUrl = await value(this.baseUrl, options, path64, input2);
     const [pathname, search, hash2] = parseStandardUrl(baseUrl);
-    const newPathname = `${pathname.replace(END_SLASH_REGEX, "")}${pathToHttpPath(path63)}`;
+    const newPathname = `${pathname.replace(END_SLASH_REGEX, "")}${pathToHttpPath(path64)}`;
     const serialized = this.serializer.serialize(input2);
     if (expectedMethod === "GET" && !(serialized instanceof Blob) && !(serialized instanceof ReadableStream) && !(serialized instanceof FormData) && !isAsyncIteratorObject(serialized)) {
-      const maxUrlLength = await value(this.maxUrlLength, options, path63, input2);
+      const maxUrlLength = await value(this.maxUrlLength, options, path64, input2);
       const mergedSearch = new URLSearchParams(search);
       mergedSearch.append("data", stringifyJSON(serialized) ?? "");
       const url22 = `${newPathname}?${mergedSearch}${hash2 ?? ""}`;
@@ -124380,8 +124395,8 @@ var FetchLinkTransport = class {
     this.fetch = options.fetch ?? ((url2, init) => globalThis.fetch(url2, init));
     this.toFetchRequestOptions = options.toFetchRequest;
   }
-  async send(standardRequest, path63, options) {
-    let origin = await value(this.origin, options, path63);
+  async send(standardRequest, path64, options) {
+    let origin = await value(this.origin, options, path64);
     if (origin?.endsWith("/")) {
       origin = origin.slice(0, -1);
     }
@@ -124401,7 +124416,7 @@ var FetchLinkTransport = class {
       }
     }
     const fetch3 = this.fetch;
-    const response = await fetch3(url2, init, options, path63);
+    const response = await fetch3(url2, init, options, path64);
     const standardResponse = toStandardLazyResponse(response);
     return standardResponse;
   }
@@ -124792,14 +124807,14 @@ var StandardHandler = class {
           span?.setAttribute("url.path", request22.url);
           return { matched: false };
         }
-        const { path: path63, procedure, decodeInput } = matchedOrNot;
-        span?.updateName(`${ORPC_NAME}.${path63.join("/")}`);
+        const { path: path64, procedure, decodeInput } = matchedOrNot;
+        span?.updateName(`${ORPC_NAME}.${path64.join("/")}`);
         span?.setAttribute("rpc.system", ORPC_NAME);
-        span?.setAttribute("rpc.method", path63.join("."));
+        span?.setAttribute("rpc.method", path64.join("."));
         try {
           const response = await intercept(
             this.interceptors,
-            { context: context2, prefix: prefix2, request: request22, path: path63, procedure, decodeInput },
+            { context: context2, prefix: prefix2, request: request22, path: path64, procedure, decodeInput },
             async ({ context: context3, prefix: prefix3, request: request32, path: path210, procedure: procedure2, decodeInput: decodeInput2 }) => {
               step2 = "decode_input";
               let input2 = await runWithSpan("decode_input", decodeInput2);
@@ -124833,7 +124848,7 @@ var StandardHandler = class {
             message: `Malformed request. Ensure the request body is properly formatted and the 'Content-Type' header is set correctly.`,
             cause: e14
           }) : toORPCError(e14);
-          const response = await this.codec.encodeError(error63, procedure, path63, { context: context2, prefix: prefix2 });
+          const response = await this.codec.encodeError(error63, procedure, path64, { context: context2, prefix: prefix2 });
           return { matched: true, response };
         }
       }
@@ -124939,7 +124954,7 @@ var RPCMatcher = class {
     this.rootRouter = router;
     this.index(router);
   }
-  index(router, path63 = []) {
+  index(router, path64 = []) {
     const lazyResults = walkProcedureContractsSync(router, (procedure, procedurePath) => {
       if (!value(this.filter, procedure, procedurePath)) {
         return;
@@ -124950,7 +124965,7 @@ var RPCMatcher = class {
         // contract-first entries have no implementation yet, resolveProcedure fills it in on demand
         procedure: procedure instanceof Procedure ? procedure : void 0
       });
-    }, path63);
+    }, path64);
     for (const result of lazyResults) {
       this.pendingLazyRouters.set(pathToHttpPath(result.path), result);
     }
@@ -125082,10 +125097,10 @@ var RPCHandlerCodec = class {
       }
     };
   }
-  encodeOutput(output2, procedure, path63, options) {
+  encodeOutput(output2, procedure, path64, options) {
     return {
       headers: {},
-      status: value(this.outputStatus, output2, procedure, path63, options) ?? DEFAULT_SUCCESS_STATUS,
+      status: value(this.outputStatus, output2, procedure, path64, options) ?? DEFAULT_SUCCESS_STATUS,
       body: this.serializer.serialize(output2)
     };
   }
@@ -125139,39 +125154,39 @@ function createRouter() {
     static: new NullProtoObj2()
   };
 }
-function scanFirstGroup(path63) {
+function scanFirstGroup(path64) {
   let i10 = 0;
   let depth = 0;
-  for (; i10 < path63.length; i10++) {
-    const c10 = path63.charCodeAt(i10);
+  for (; i10 < path64.length; i10++) {
+    const c10 = path64.charCodeAt(i10);
     if (c10 === 92) i10++;
     else if (c10 === 40) depth++;
     else if (c10 === 41 && depth > 0) depth--;
     else if (c10 === 123 && depth === 0) break;
   }
-  if (i10 >= path63.length) return;
+  if (i10 >= path64.length) return;
   let j10 = i10 + 1;
   depth = 0;
-  for (; j10 < path63.length; j10++) {
-    const c10 = path63.charCodeAt(j10);
+  for (; j10 < path64.length; j10++) {
+    const c10 = path64.charCodeAt(j10);
     if (c10 === 92) j10++;
     else if (c10 === 40) depth++;
     else if (c10 === 41 && depth > 0) depth--;
     else if (c10 === 125 && depth === 0) break;
   }
-  if (j10 >= path63.length) return;
-  const mod = path63[j10 + 1];
+  if (j10 >= path64.length) return;
+  const mod = path64[j10 + 1];
   const hasMod = mod === "?" || mod === "+" || mod === "*";
   return [
-    path63.slice(0, i10),
-    path63.slice(i10 + 1, j10),
-    path63.slice(j10 + (hasMod ? 2 : 1)),
+    path64.slice(0, i10),
+    path64.slice(i10 + 1, j10),
+    path64.slice(j10 + (hasMod ? 2 : 1)),
     hasMod ? mod : void 0
   ];
 }
-function expandGroupDelimiters(path63) {
-  if (!path63.includes("{")) return;
-  const group = scanFirstGroup(path63);
+function expandGroupDelimiters(path64) {
+  if (!path64.includes("{")) return;
+  const group = scanFirstGroup(path64);
   if (!group) return;
   const [pre2, body, suf, mod] = group;
   if (!mod) return [pre2 + body + suf];
@@ -125241,9 +125256,9 @@ function replaceSegmentWildcards(segment, unnamedStart, toGroupKey = toUnnamedGr
   }
   return [replaced, nextIndex];
 }
-function encodeEscapes(path63) {
-  if (!path63.includes("\\")) return path63;
-  return path63.replace(/\\([:(){}])/g, (_, c10) => "\uFFFD" + "ABCDE"[":(){}".indexOf(c10)]);
+function encodeEscapes(path64) {
+  if (!path64.includes("\\")) return path64;
+  return path64.replace(/\\([:(){}])/g, (_, c10) => "\uFFFD" + "ABCDE"[":(){}".indexOf(c10)]);
 }
 function segmentKey(segment) {
   if (segment.startsWith("**")) return 2;
@@ -125272,22 +125287,22 @@ function expandModifiers(segments) {
     return m10[2] === "+" ? [wc2] : [wc2, without];
   }
 }
-function normalizePath(path63) {
-  if (!path63.includes("/.")) return path63;
+function normalizePath(path64) {
+  if (!path64.includes("/.")) return path64;
   const r10 = [];
-  for (const s of path63.split("/")) if (s === ".") continue;
+  for (const s of path64.split("/")) if (s === ".") continue;
   else if (s === ".." && r10.length > 1) r10.pop();
   else r10.push(s);
   return r10.join("/") || "/";
 }
-function splitPath(path63) {
-  const s = path63.split("/");
+function splitPath(path64) {
+  const s = path64.split("/");
   s.shift();
   if (s[s.length - 1] === "") s.pop();
   return s;
 }
-function splitRoute(path63) {
-  const s = splitPath(path63);
+function splitRoute(path64) {
+  const s = splitPath(path64);
   while (s[s.length - 1] === "") s.pop();
   return s;
 }
@@ -125303,16 +125318,16 @@ function getMatchParams(segments, paramsMap) {
   }
   return params;
 }
-function addRoute(ctx, method = "", path63, data) {
+function addRoute(ctx, method = "", path64, data) {
   method = method.toUpperCase();
-  if (path63.charCodeAt(0) !== 47) path63 = `/${path63}`;
-  const groupExpanded = expandGroupDelimiters(path63);
+  if (path64.charCodeAt(0) !== 47) path64 = `/${path64}`;
+  const groupExpanded = expandGroupDelimiters(path64);
   if (groupExpanded) {
     for (const expandedPath of groupExpanded) addRoute(ctx, method, expandedPath, data);
     return;
   }
-  path63 = encodeEscapes(path63);
-  const segments = splitRoute(path63);
+  path64 = encodeEscapes(path64);
+  const segments = splitRoute(path64);
   const expanded = expandModifiers(segments);
   if (expanded) {
     for (const p of expanded) addRoute(ctx, method, p, data);
@@ -125403,15 +125418,15 @@ function getParamRegexp(segment, unnamedStart = 0) {
   const regex = _s2.replace(/:([\w-]+)(?:\(([^)]*)\))?/g, (_, id2, p) => `(?<${toGroupName(id2)}>${p || "[^/]+"})`).replace(/\((?![?<])/g, () => `(?<${toUnnamedGroupKey(_i2++)}>`).replace(/\uFFFE(.)/g, (_, c10) => /[.*+?^${}()|[\]\\]/.test(c10) ? `\\${c10}` : c10);
   return [new RegExp(`^${regex}$`), _i2];
 }
-function findRoute(ctx, method = "", path63, opts) {
-  if (opts?.normalize) path63 = normalizePath(path63);
-  if (path63.charCodeAt(path63.length - 1) === 47) path63 = path63.slice(0, -1);
-  const staticNode = ctx.static[path63];
+function findRoute(ctx, method = "", path64, opts) {
+  if (opts?.normalize) path64 = normalizePath(path64);
+  if (path64.charCodeAt(path64.length - 1) === 47) path64 = path64.slice(0, -1);
+  const staticNode = ctx.static[path64];
   if (staticNode && staticNode.methods) {
     const staticMatch = staticNode.methods[method] || staticNode.methods[""];
     if (staticMatch !== void 0) return staticMatch[0];
   }
-  const segments = splitPath(path63);
+  const segments = splitPath(path64);
   const match = _lookupTree(ctx.root, method, segments, 0);
   if (match === void 0) return;
   if (opts?.params === false) return match;
@@ -125611,7 +125626,7 @@ var OpenAPIMatcher = class {
     this.rootRouter = router;
     this.index(router);
   }
-  index(router, path63 = []) {
+  index(router, path64 = []) {
     const lazyResults = walkProcedureContractsSync(router, (contract, path210) => {
       if (!value(this.filter, contract, path210)) {
         return;
@@ -125626,7 +125641,7 @@ var OpenAPIMatcher = class {
         contract,
         procedure: contract instanceof Procedure ? contract : void 0
       });
-    }, path63);
+    }, path64);
     for (const result of lazyResults) {
       const prefix = getOpenAPIMeta(result.router)?.prefix;
       this.pendingLazyRouters.add({
@@ -125713,20 +125728,20 @@ var OpenAPIMatcher = class {
     return entry.procedure;
   }
 };
-function toRou3Pattern(path63) {
-  const params = getDynamicPathParams(path63);
+function toRou3Pattern(path64) {
+  const params = getDynamicPathParams(path64);
   if (!params?.length) {
-    return path63;
+    return path64;
   }
   for (let i10 = params.length - 1; i10 >= 0; i10--) {
     const param = params[i10];
     const pattern = param.allowsSlash ? `**:${param.parameterName}` : `:${param.parameterName}`;
-    path63 = path63.slice(0, param.startIndex) + pattern + path63.slice(param.startIndex + param.segment.length);
+    path64 = path64.slice(0, param.startIndex) + pattern + path64.slice(param.startIndex + param.segment.length);
   }
-  return path63;
+  return path64;
 }
-function toRou3PrefixMatcher(path63) {
-  const pattern = toRou3Pattern(path63);
+function toRou3PrefixMatcher(path64) {
+  const pattern = toRou3Pattern(path64);
   return routeToRegExp(pattern === "/" ? "/**" : `${pattern}/**`);
 }
 function decodeParams(params) {
@@ -125805,7 +125820,7 @@ var OpenAPIHandlerCodecCore = class {
   /**
    * @throws {TypeError} If `outputStructure` is "detailed" and the output doesn't match the expected structure.
    */
-  encodeOutput(output2, procedure, path63) {
+  encodeOutput(output2, procedure, path64) {
     const meta3 = getOpenAPIMeta(procedure);
     const successStatus = meta3?.successStatus ?? DEFAULT_SUCCESS_STATUS;
     const outputStructure = meta3?.outputStructure ?? DEFAULT_OPENAPI_OUTPUT_STRUCTURE;
@@ -125818,7 +125833,7 @@ var OpenAPIHandlerCodecCore = class {
     }
     if (!isValidDetailedOutput(output2)) {
       throw new TypeError(`
-        Invalid "detailed" output structure returned by procedure (${path63.join(".")}):
+        Invalid "detailed" output structure returned by procedure (${path64.join(".")}):
         \u2022 Expected an object with optional properties:
           - status (number <400)
           - headers (object)
@@ -126377,7 +126392,7 @@ function profileValue(name, paths) {
 function createConfigApiRouter(deps) {
   const authed = doorApiAuth(deps.expectedToken);
   const { paths } = deps;
-  const route = (path63, summary) => authed.meta(openapi({ method: "POST", path: path63, summary, tags: [CONFIG_API_TAG] }));
+  const route = (path64, summary) => authed.meta(openapi({ method: "POST", path: path64, summary, tags: [CONFIG_API_TAG] }));
   return {
     config: {
       identity: {
@@ -126731,7 +126746,7 @@ function createLifecycleApiRouter(deps) {
 init_cliError();
 
 // src/frontdoor/launchSchemas.ts
-var import_node_path48 = __toESM(require("node:path"), 1);
+var import_node_path49 = __toESM(require("node:path"), 1);
 init_zod();
 init_claudeVersion();
 init_identity();
@@ -126741,7 +126756,7 @@ var LaunchResolveInputSchema = external_exports.strictObject({
   argv: external_exports.readonly(external_exports.array(external_exports.string())).optional(),
   /** The launch's inherited environment. Absent means an empty one: the door's own environment is never a substitute for the caller's, so a caller that wants `AGENT_SHIM_*` switches or a `CLAUDE_CONFIG_DIR` considered names them here. Values are read, never reported. */
   env: external_exports.record(external_exports.string(), external_exports.string()).optional()
-}).refine((input2) => import_node_path48.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+}).refine((input2) => import_node_path49.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var LaunchPoolDecisionSchema = external_exports.strictObject({
   name: external_exports.string(),
   reasons: external_exports.readonly(external_exports.array(external_exports.string())),
@@ -127179,7 +127194,7 @@ var import_consumers = require("node:stream/consumers");
 init_route();
 
 // src/frontdoor/lineage.ts
-var import_node_crypto19 = require("node:crypto");
+var import_node_crypto20 = require("node:crypto");
 var CACHE_MARKER_KEY = '"cache_control"';
 var THREAD_MEMBER_KEYS = /* @__PURE__ */ new Set(['"model"', '"system"', '"tools"']);
 var MESSAGES_KEY = '"messages"';
@@ -127256,8 +127271,8 @@ function nextToken(body, from) {
   return SCALAR;
 }
 function walk(body, hashing, parentAfter) {
-  const thread = (0, import_node_crypto19.createHash)("sha256");
-  const messages = (0, import_node_crypto19.createHash)("sha256");
+  const thread = (0, import_node_crypto20.createHash)("sha256");
+  const messages = (0, import_node_crypto20.createHash)("sha256");
   let parentDigest;
   let elements = 0;
   let depth = 0;
@@ -127378,7 +127393,7 @@ function lineageOf(body) {
   }
   const parentAfter = counted.elements > MESSAGES_PER_TURN ? counted.elements - MESSAGES_PER_TURN : void 0;
   const hashed = walk(body, true, parentAfter);
-  const combine = (messagesDigest) => (0, import_node_crypto19.createHash)("sha256").update(hashed.threadDigest).update(messagesDigest).digest("hex");
+  const combine = (messagesDigest) => (0, import_node_crypto20.createHash)("sha256").update(hashed.threadDigest).update(messagesDigest).digest("hex");
   return { ownKey: combine(hashed.messagesDigest), parentKey: hashed.parentDigest === void 0 ? void 0 : combine(hashed.parentDigest) };
 }
 
@@ -127763,7 +127778,7 @@ init_load();
 init_schema();
 
 // src/codex/translate.ts
-var import_node_crypto20 = require("node:crypto");
+var import_node_crypto21 = require("node:crypto");
 init_schema();
 
 // src/codex/anthropic.ts
@@ -127878,7 +127893,7 @@ function shortToolName(name, names) {
   if (name.length <= CODEX_TOOL_NAME_LIMIT) {
     return name;
   }
-  const hash2 = (0, import_node_crypto20.createHash)("sha256").update(name).digest("hex").slice(0, TOOL_NAME_HASH_CHARS);
+  const hash2 = (0, import_node_crypto21.createHash)("sha256").update(name).digest("hex").slice(0, TOOL_NAME_HASH_CHARS);
   const shortened = `${name.slice(0, CODEX_TOOL_NAME_LIMIT - TOOL_NAME_HASH_CHARS - 1)}_${hash2}`;
   names.set(shortened, name);
   return shortened;
@@ -128003,7 +128018,7 @@ function translateRequest(body, config2) {
 }
 
 // src/antigravity/translate.ts
-var import_node_crypto21 = require("node:crypto");
+var import_node_crypto22 = require("node:crypto");
 
 // src/antigravity/quota.ts
 init_cloudUpstream();
@@ -128405,7 +128420,7 @@ function shortToolName2(name, names) {
   if (sanitized.length <= ANTIGRAVITY_TOOL_NAME_LIMIT) {
     result = sanitized;
   } else {
-    const hash2 = (0, import_node_crypto21.createHash)("sha256").update(name).digest("hex").slice(0, TOOL_NAME_HASH_CHARS2);
+    const hash2 = (0, import_node_crypto22.createHash)("sha256").update(name).digest("hex").slice(0, TOOL_NAME_HASH_CHARS2);
     const prefix = sanitized.slice(0, ANTIGRAVITY_TOOL_NAME_LIMIT - TOOL_NAME_HASH_CHARS2 - 1);
     result = `${prefix}_${hash2}`;
   }
@@ -129157,8 +129172,8 @@ function createCodexRouteMount(ports, upstreamBase, provider) {
         request7.body.resume();
         return;
       }
-      const path63 = new URL(request7.url, "http://127.0.0.1").pathname;
-      const translated = { method: request7.method, path: path63, body, signal: request7.signal };
+      const path64 = new URL(request7.url, "http://127.0.0.1").pathname;
+      const translated = { method: request7.method, path: path64, body, signal: request7.signal };
       const routed = await route(translated);
       if (request7.signal.aborted) {
         return;
@@ -129169,7 +129184,7 @@ function createCodexRouteMount(ports, upstreamBase, provider) {
 }
 
 // src/antigravity/route.ts
-var import_node_crypto22 = require("node:crypto");
+var import_node_crypto23 = require("node:crypto");
 init_route();
 
 // src/antigravity/relay.ts
@@ -129538,7 +129553,7 @@ function exhaustedMessage(exhaustion) {
   return `Antigravity ${window} limit reached; it resets at ${new Date(exhaustion.resetSec * MS_PER_SECOND10).toISOString()}.`;
 }
 function createAntigravityRoute(ports) {
-  const fallbackId = ports.fallbackId ?? (() => (0, import_node_crypto22.randomUUID)());
+  const fallbackId = ports.fallbackId ?? (() => (0, import_node_crypto23.randomUUID)());
   const lastRouted = /* @__PURE__ */ new Map();
   return async (request7) => {
     await Promise.resolve();
@@ -129772,8 +129787,8 @@ function createAntigravityRouteMount(ports, upstreamBase, provider) {
         request7.body.resume();
         return;
       }
-      const path63 = new URL(request7.url, "http://127.0.0.1").pathname;
-      const translated = { method: request7.method, path: path63, body, signal: request7.signal };
+      const path64 = new URL(request7.url, "http://127.0.0.1").pathname;
+      const translated = { method: request7.method, path: path64, body, signal: request7.signal };
       const routed = await route(translated);
       if (request7.signal.aborted) {
         return;
@@ -129807,7 +129822,7 @@ function createPassthroughRoute(name, target) {
     headroomUpstream: target.headroomUpstream,
     serve: async (request7, response) => {
       const incoming = new URL(request7.url, "http://127.0.0.1");
-      const path63 = target.stripPrefix !== void 0 && incoming.pathname.startsWith(target.stripPrefix) ? incoming.pathname.slice(target.stripPrefix.length) : incoming.pathname;
+      const path64 = target.stripPrefix !== void 0 && incoming.pathname.startsWith(target.stripPrefix) ? incoming.pathname.slice(target.stripPrefix.length) : incoming.pathname;
       const headers = forwardableHeaders(request7.headers);
       delete headers.host;
       await new Promise((resolve2) => {
@@ -129815,7 +129830,7 @@ function createPassthroughRoute(name, target) {
           host: base.hostname,
           port: base.port === "" ? void 0 : Number(base.port),
           method: request7.method,
-          path: `${basePath}${path63}${incoming.search}`,
+          path: `${basePath}${path64}${incoming.search}`,
           headers,
           agent
         };
@@ -129947,13 +129962,13 @@ async function scanRequestHead(request7, wholeBody = false) {
 }
 
 // src/frontdoor/providerRoute.ts
-var isRcSelfHostPath = (path63) => path63 === "/v1/code/sessions" || path63.startsWith("/v1/code/sessions/") || path63 === "/v1/sessions" || path63.startsWith("/v1/sessions/");
+var isRcSelfHostPath = (path64) => path64 === "/v1/code/sessions" || path64.startsWith("/v1/code/sessions/") || path64 === "/v1/sessions" || path64.startsWith("/v1/sessions/");
 function scopeSessionProviderPath(request7) {
   if (request7.session.provider === void 0) {
     return request7;
   }
-  const path63 = new URL(request7.url, "http://127.0.0.1").pathname;
-  if (!path63.startsWith("/v1/") || isRcSelfHostPath(path63)) {
+  const path64 = new URL(request7.url, "http://127.0.0.1").pathname;
+  if (!path64.startsWith("/v1/") || isRcSelfHostPath(path64)) {
     return request7;
   }
   return { ...request7, url: `${PROVIDER_PATH_PREFIX}${encodeURIComponent(request7.session.provider)}${request7.url}` };
@@ -129996,13 +130011,13 @@ function createProviderRouteResolver(deps) {
     return route;
   };
   const resolve2 = (request7) => {
-    const path63 = new URL(request7.url, "http://127.0.0.1").pathname;
-    const scoped = parseProviderPath(path63);
+    const path64 = new URL(request7.url, "http://127.0.0.1").pathname;
+    const scoped = parseProviderPath(path64);
     if (scoped === void 0) {
-      if (deps.rcSelfHostRoute !== void 0 && isRcSelfHostPath(path63)) {
+      if (deps.rcSelfHostRoute !== void 0 && isRcSelfHostPath(path64)) {
         return { ok: true, route: deps.rcSelfHostRoute };
       }
-      return path63.startsWith("/v1/") ? { ok: true, route: oauthRoute } : { ok: false, status: HTTP_STATUS.notFound, message: `no such endpoint: ${path63}` };
+      return path64.startsWith("/v1/") ? { ok: true, route: oauthRoute } : { ok: false, status: HTTP_STATUS.notFound, message: `no such endpoint: ${path64}` };
     }
     const { provider } = scoped;
     let definition;
@@ -130088,8 +130103,8 @@ function createProviderRouteResolver(deps) {
     let replay;
     const visited = /* @__PURE__ */ new Set();
     for (; ; ) {
-      const path63 = new URL(current.url, "http://127.0.0.1").pathname;
-      const scoped = parseProviderPath(path63);
+      const path64 = new URL(current.url, "http://127.0.0.1").pathname;
+      const scoped = parseProviderPath(path64);
       const providerName = scoped?.provider ?? current.session.provider;
       if (providerName !== void 0 && visited.has(providerName)) {
         return { ok: false, status: HTTP_STATUS.internalServerError, message: `provider routing cycle: ${[...visited, providerName].join(" -> ")}` };
@@ -130147,7 +130162,7 @@ function createProviderRouteResolver(deps) {
         const headers = Object.fromEntries(Object.entries(replay.headers).filter(([name]) => name.toLowerCase() !== "content-length"));
         replay = { ...replay, headers, body: import_node_stream3.Readable.from([Buffer.from(rewritten, "utf8")]) };
       }
-      const rest = scoped === void 0 ? path63 : path63.slice(`${PROVIDER_PATH_PREFIX}${encodeURIComponent(scoped.provider)}`.length);
+      const rest = scoped === void 0 ? path64 : path64.slice(`${PROVIDER_PATH_PREFIX}${encodeURIComponent(scoped.provider)}`.length);
       const query = current.url.includes("?") ? current.url.slice(current.url.indexOf("?")) : "";
       current = { ...current, url: `${PROVIDER_PATH_PREFIX}${encodeURIComponent(matched.provider)}${rest}${query}`, body: replay.body, headers: replay.headers };
     }
@@ -130180,7 +130195,7 @@ function attachingProviderCredential(route, deps) {
 init_realFrontDoorPort();
 
 // src/frontdoor/rcCommands.ts
-var import_node_crypto23 = require("node:crypto");
+var import_node_crypto24 = require("node:crypto");
 init_commandDeps();
 init_cliError();
 init_realPorts();
@@ -130254,7 +130269,7 @@ function createRcLiveUsage(deps) {
 }
 
 // src/frontdoor/rcSelfHostMint.ts
-var import_node_path49 = __toESM(require("node:path"), 1);
+var import_node_path50 = __toESM(require("node:path"), 1);
 init_account();
 
 // src/frontdoor/rcSelfHostLocal.ts
@@ -130384,7 +130399,7 @@ function readJsonObject(fs25, file2) {
   return isRecord14(parsed) ? parsed : void 0;
 }
 function readRcSelfHostRecord(fs25, frontdoorDir) {
-  const parsed = readJsonObject(fs25, import_node_path49.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
+  const parsed = readJsonObject(fs25, import_node_path50.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
   if (parsed === void 0) {
     return void 0;
   }
@@ -130398,11 +130413,11 @@ function mintRcSelfHostCredential(deps) {
   if (!isIdentityName(deps.identity)) {
     throw new Error(`"${deps.identity}" is not a valid identity name.`);
   }
-  const identityDir = import_node_path49.default.join(deps.identitiesDir, deps.identity);
-  const credentialsFile = import_node_path49.default.join(identityDir, CREDENTIALS_FILE2);
-  const claudeJsonFile = import_node_path49.default.join(identityDir, CLAUDE_JSON2);
-  const recordDir = import_node_path49.default.join(deps.frontdoorDir, RC_SELF_HOST_RECORD_DIR);
-  const recordFile = import_node_path49.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
+  const identityDir = import_node_path50.default.join(deps.identitiesDir, deps.identity);
+  const credentialsFile = import_node_path50.default.join(identityDir, CREDENTIALS_FILE2);
+  const claudeJsonFile = import_node_path50.default.join(identityDir, CLAUDE_JSON2);
+  const recordDir = import_node_path50.default.join(deps.frontdoorDir, RC_SELF_HOST_RECORD_DIR);
+  const recordFile = import_node_path50.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
   const previousRecord = readRcSelfHostRecord(deps.fs, deps.frontdoorDir);
   const existingCredentials = readJsonObject(deps.fs, credentialsFile);
   const existingOauth = isRecord14(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
@@ -130418,7 +130433,7 @@ function mintRcSelfHostCredential(deps) {
   const organizationUuid = deps.newUuid();
   const accountUuid = deps.newUuid();
   const mintedAt = new Date(deps.now()).toISOString();
-  deps.fs.mkdirPrivate(import_node_path49.default.dirname(credentialsFile));
+  deps.fs.mkdirPrivate(import_node_path50.default.dirname(credentialsFile));
   deps.fs.writeFilePrivate(credentialsFile, `${JSON.stringify({ ...existingCredentials, claudeAiOauth: { accessToken, refreshToken, expiresAt: null, scopes: [...RC_SELF_HOST_SCOPE_LIST], subscriptionType: SELF_HOST_SUBSCRIPTION_TYPE, rateLimitTier: null } }, null, 2)}
 `);
   const claudeJson = readJsonObject(deps.fs, claudeJsonFile) ?? {};
@@ -130787,8 +130802,8 @@ function registerRcCommand(frontdoor, paths) {
         identitiesDir: paths.identitiesDir,
         frontdoorDir: paths.frontdoorDir,
         identity,
-        newUuid: import_node_crypto23.randomUUID,
-        randomToken: () => (0, import_node_crypto23.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
+        newUuid: import_node_crypto24.randomUUID,
+        randomToken: () => (0, import_node_crypto24.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
         force: options.force === true,
         now: () => Date.now()
       });
@@ -130805,7 +130820,7 @@ function registerRcCommand(frontdoor, paths) {
 }
 
 // src/frontdoor/rcCredentialStore.ts
-var import_node_path50 = __toESM(require("node:path"), 1);
+var import_node_path51 = __toESM(require("node:path"), 1);
 function isSafeSessionId(sessionId) {
   return /^[A-Za-z0-9_-]+$/.test(sessionId);
 }
@@ -130831,7 +130846,7 @@ function sequenceNumOfJson(value2) {
 }
 function createRcCredentialStore(fs25, dir) {
   fs25.mkdirPrivate(dir);
-  const fileFor = (sessionId) => import_node_path50.default.join(dir, `${sessionId}.json`);
+  const fileFor = (sessionId) => import_node_path51.default.join(dir, `${sessionId}.json`);
   const readParsed = (sessionId) => {
     const raw = fs25.readFileUtf8(fileFor(sessionId));
     if (raw === void 0) {
@@ -132918,7 +132933,7 @@ const { workerData, parentPort } = require("node:worker_threads");
 const fs = require("node:fs");
 const os = require("node:os");
 const inspector = require("node:inspector");
-const { shared, boundMs, checkEveryMs, stateFile, ownPid, action, logFile, respawn, respawnAfterServingMs, awaitPidEnv } = workerData;
+const { shared, boundMs, checkEveryMs, pauseWaitMs, stateFile, ownPid, action, logFile, respawn, respawnAfterServingMs, awaitPidEnv } = workerData;
 const startedAt = Date.now();
 const counter = new Int32Array(shared);
 let lastValue = Atomics.load(counter, 0);
@@ -133020,7 +133035,7 @@ const timer = setInterval(() => {
     const [oneMinute, fiveMinutes, fifteenMinutes] = os.loadavg();
     log("machine load at the stall: " + oneMinute.toFixed(1) + " (1m), " + fiveMinutes.toFixed(1) + " (5m), " + fifteenMinutes.toFixed(1) + " (15m) across " + String(os.cpus().length) + " cpus");
     spawnReplacement();
-    describeMainThread(checkEveryMs, action !== "kill-process").then((where) => {
+    describeMainThread(pauseWaitMs, action !== "kill-process").then((where) => {
       log(where);
       if (action === "kill-process") {
         process.kill(ownPid, "SIGKILL");
@@ -133043,7 +133058,7 @@ function startThreadWatchdog(params) {
   const counter = new Int32Array(shared);
   const worker = new import_node_worker_threads2.Worker(WATCHDOG_SOURCE, {
     eval: true,
-    workerData: { shared, boundMs: params.boundMs, checkEveryMs: params.checkEveryMs, stateFile: params.stateFile, ownPid: params.ownPid, action: params.action, logFile: params.logFile, respawn: params.respawn, respawnAfterServingMs: params.respawnAfterServingMs, awaitPidEnv: DOOR_AWAIT_PID_ENV }
+    workerData: { shared, boundMs: params.boundMs, checkEveryMs: params.checkEveryMs, pauseWaitMs: params.pauseWaitMs, stateFile: params.stateFile, ownPid: params.ownPid, action: params.action, logFile: params.logFile, respawn: params.respawn, respawnAfterServingMs: params.respawnAfterServingMs, awaitPidEnv: DOOR_AWAIT_PID_ENV }
   });
   worker.unref();
   worker.on("message", (message) => {
@@ -133220,8 +133235,8 @@ function realFrontDoorSupervisorPorts(paths) {
   };
   const rcSelfHostSurface = rcSelfHost ? createRcSelfHostSurface({
     now: () => Date.now(),
-    newUuid: import_node_crypto24.randomUUID,
-    randomToken: () => (0, import_node_crypto24.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
+    newUuid: import_node_crypto25.randomUUID,
+    randomToken: () => (0, import_node_crypto25.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
     credentialRecord: () => readRcSelfHostRecord(realFarmFs, paths.frontdoorDir),
     webFetch: realRcWebFetch({ allowPrivate: rcWebFetchAllowsPrivateFromEnv(process.env) }),
     log
@@ -133244,7 +133259,7 @@ function realFrontDoorSupervisorPorts(paths) {
     saveSequenceNum: rcCredentialStore.writeCursor,
     dial: rcSelfHost ? lateRcStreamDial(rcSelfHostDialTarget) : realRcStreamDial(),
     fanout: rcFanout,
-    newClientId: import_node_crypto24.randomUUID,
+    newClientId: import_node_crypto25.randomUUID,
     backoffMs: RC_STREAM_BACKOFF_MS,
     sleep: async (ms2) => {
       await new Promise((resolve2) => {
@@ -133256,7 +133271,7 @@ function realFrontDoorSupervisorPorts(paths) {
     }
   });
   const routingSnapshots = /* @__PURE__ */ new Map();
-  const rcControlToken = (0, import_node_crypto24.randomUUID)();
+  const rcControlToken = (0, import_node_crypto25.randomUUID)();
   const resolveRoute = rcObservingResolver(
     createProviderRouteResolver({
       fs: realFsPort,
@@ -133372,9 +133387,9 @@ function realFrontDoorSupervisorPorts(paths) {
     now: () => Date.now(),
     headroomSocket: () => headroomSocketTarget(realFarmFs, realHeadroomSocketTrust, paths),
     // The per-generation capability the direct listener demands: held only in this process's memory, so a loopback process that discovers the direct port still cannot use it.
-    hopSecret: (0, import_node_crypto24.randomUUID)(),
+    hopSecret: (0, import_node_crypto25.randomUUID)(),
     headroomDecision,
-    custody: createCredentialCustody(() => (0, import_node_crypto24.randomUUID)()),
+    custody: createCredentialCustody(() => (0, import_node_crypto25.randomUUID)()),
     log
   });
   const onListenerError = (name) => (error63) => {
@@ -133397,9 +133412,9 @@ function realFrontDoorSupervisorPorts(paths) {
     startProviderListener: async (preferredPort) => {
       const authority = loadCa();
       const rcDial = rcSelfHost ? lateRcEventDial(rcSelfHostDialTarget) : realRcEventDial();
-      const rcInject = async (sessionId, text2) => await injectRcUserMessage({ credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto24.randomUUID }, sessionId, text2);
+      const rcInject = async (sessionId, text2) => await injectRcUserMessage({ credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto25.randomUUID }, sessionId, text2);
       const rcAnswer = async (sessionId, requestId, decision) => await answerRcControlRequest({ credentialOf: rcTracker.credentialOf, pendingOf: (id2) => rcTracker.pendingOf(id2), completePending: rcTracker.completePending, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial }, sessionId, requestId, decision);
-      const rcControlRequestDeps = { credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto24.randomUUID };
+      const rcControlRequestDeps = { credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto25.randomUUID };
       const rcInterrupt = async (sessionId) => await interruptRcSession(rcControlRequestDeps, sessionId);
       const rcSetModel = async (sessionId, model) => await setRcSessionModel(rcControlRequestDeps, sessionId, model);
       const rcSetPermissionMode = async (sessionId, mode) => await setRcSessionPermissionMode(rcControlRequestDeps, sessionId, mode);
@@ -133498,14 +133513,14 @@ function realFrontDoorSupervisorPorts(paths) {
     },
     startConnectListener: async (preferredPort) => {
       const wantedTransparentPort = process.env.AGENT_SHIM_TRANSPARENT_SURFACE === void 0 ? void 0 : Number(process.env.AGENT_SHIM_TRANSPARENT_SURFACE);
-      const transparentCapability = wantedTransparentPort === void 0 || Number.isNaN(wantedTransparentPort) ? void 0 : (0, import_node_crypto24.randomUUID)();
+      const transparentCapability = wantedTransparentPort === void 0 || Number.isNaN(wantedTransparentPort) ? void 0 : (0, import_node_crypto25.randomUUID)();
       if (transparentCapability !== void 0) {
         writeFrontDoorSession(realFarmFs, paths.frontdoorSessionsDir, { pid: process.pid, startedAt: Date.now(), token: transparentCapability });
       }
       const leafFor = createLeafCache(loadCa(), () => /* @__PURE__ */ new Date());
       const capture = captureFromEnv(process.env, paths.logsDir);
       if (capture !== void 0) {
-        log(`capture enabled, recording CONNECT targets and piped exchanges to ${import_node_path51.default.join(paths.logsDir, "frontdoor-capture.jsonl")}`);
+        log(`capture enabled, recording CONNECT targets and piped exchanges to ${import_node_path52.default.join(paths.logsDir, "frontdoor-capture.jsonl")}`);
       }
       if (rcSelfHostSurface !== void 0) {
         log("self-hosted Remote Control surface on: the door serves the CCR session family itself, and its own client-half dials its own transparent surface");
@@ -133576,6 +133591,7 @@ function realFrontDoorSupervisorPorts(paths) {
       ownPid: process.pid,
       boundMs: DOOR_STALL_BOUND_MS,
       checkEveryMs: DOOR_WATCHDOG_CHECK_MS,
+      pauseWaitMs: DOOR_WATCHDOG_CHECK_MS,
       action: "kill-process",
       logFile: paths.frontdoorLogPath,
       respawn: respawnInvocation(paths),
@@ -133650,7 +133666,7 @@ function registerFrontDoorCommand(program2, deps) {
 // src/statusline/commands.ts
 var import_node_child_process7 = require("node:child_process");
 var import_node_os12 = __toESM(require("node:os"), 1);
-var import_node_path53 = __toESM(require("node:path"), 1);
+var import_node_path54 = __toESM(require("node:path"), 1);
 init_commandDeps();
 init_providersStore();
 init_realPorts();
@@ -133658,13 +133674,13 @@ init_account();
 init_read();
 
 // src/statusline/client.ts
-var import_node_path52 = __toESM(require("node:path"), 1);
+var import_node_path53 = __toESM(require("node:path"), 1);
 function isAntigravityPayload(payload) {
   return typeof payload === "object" && payload !== null && "product" in payload && payload.product === "antigravity";
 }
 var ANTIGRAVITY_SETTINGS_SEGMENTS = [".gemini", "antigravity-cli", "settings.json"];
 function antigravityStacksWithDefault(fs25, homeDir) {
-  const raw = fs25.readFileUtf8(import_node_path52.default.join(homeDir, ...ANTIGRAVITY_SETTINGS_SEGMENTS));
+  const raw = fs25.readFileUtf8(import_node_path53.default.join(homeDir, ...ANTIGRAVITY_SETTINGS_SEGMENTS));
   if (raw === void 0) {
     return false;
   }
@@ -134376,7 +134392,7 @@ function registerStatuslineCommand(program2, deps) {
       } else {
         const configDir = process.env.CLAUDE_CONFIG_DIR;
         try {
-          account = readAccountMetadataFile(realFarmFs, configDir === void 0 || configDir === "" ? import_node_path53.default.join(import_node_os12.default.homedir(), ".claude.json") : import_node_path53.default.join(configDir, ".claude.json"));
+          account = readAccountMetadataFile(realFarmFs, configDir === void 0 || configDir === "" ? import_node_path54.default.join(import_node_os12.default.homedir(), ".claude.json") : import_node_path54.default.join(configDir, ".claude.json"));
         } catch {
           account = void 0;
         }
@@ -136439,8 +136455,8 @@ function getErrorMap2() {
 
 // node_modules/.pnpm/zod@4.6.5/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path63, errorMaps, issueData } = params;
-  const fullPath = [...path63, ...issueData.path || []];
+  const { data, path: path64, errorMaps, issueData } = params;
+  const fullPath = [...path64, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -136555,11 +136571,11 @@ var errorUtil;
 
 // node_modules/.pnpm/zod@4.6.5/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value2, path63, key) {
+  constructor(parent, value2, path64, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value2;
-    this._path = path63;
+    this._path = path64;
     this._key = key;
   }
   get path() {
@@ -140122,11 +140138,11 @@ function normalizeObjectSchema(schema) {
   }
   return void 0;
 }
-function getDotPath(path63) {
-  if (path63.length === 0) {
+function getDotPath(path64) {
+  if (path64.length === 0) {
     return "object root";
   }
-  return path63.reduce((acc, seg, index) => {
+  return path64.reduce((acc, seg, index) => {
     if (index === 0) {
       return String(seg);
     }
@@ -144169,7 +144185,7 @@ async function serveMcp(mcp, transport, options = {}) {
 
 // src/mcp/permissions.ts
 var import_node_fs20 = __toESM(require("node:fs"), 1);
-var import_node_path54 = __toESM(require("node:path"), 1);
+var import_node_path55 = __toESM(require("node:path"), 1);
 init_zod();
 init_store();
 var StoredMcpPermissionsSchema = external_exports.strictObject({
@@ -144191,10 +144207,10 @@ function effectiveMcpPermissions(flags, stored) {
   return { writes: flags.writes || stored.writes, remoteControl: flags.remoteControl || stored.remoteControl, history: flags.history || stored.history };
 }
 function watchMcpPermissions(paths, onChange) {
-  const directory = import_node_path54.default.dirname(paths.mcpPermissionsFile);
+  const directory = import_node_path55.default.dirname(paths.mcpPermissionsFile);
   import_node_fs20.default.mkdirSync(directory, { recursive: true });
   const watcher = import_node_fs20.default.watch(directory, (_event, filename) => {
-    if (filename === null || filename === import_node_path54.default.basename(paths.mcpPermissionsFile)) {
+    if (filename === null || filename === import_node_path55.default.basename(paths.mcpPermissionsFile)) {
       onChange();
     }
   });
@@ -144507,16 +144523,16 @@ init_credentialCache();
 
 // src/identityToken.ts
 var import_node_fs21 = __toESM(require("node:fs"), 1);
-var import_node_path55 = __toESM(require("node:path"), 1);
+var import_node_path56 = __toESM(require("node:path"), 1);
 init_cliError();
 var TOKEN_FILE_MODE = 384;
 var TOKEN_DIR_MODE = 448;
 var OAUTH_TOKEN_RE = /^sk-ant-oat\d+-[A-Za-z0-9_-]+$/;
 function identityTokenDir(paths) {
-  return import_node_path55.default.join(paths.root, "credentials");
+  return import_node_path56.default.join(paths.root, "credentials");
 }
 function identityTokenPath(paths, identityName) {
-  return import_node_path55.default.join(identityTokenDir(paths), `${identityName}.token`);
+  return import_node_path56.default.join(identityTokenDir(paths), `${identityName}.token`);
 }
 function storeIdentityToken(paths, identityName, raw) {
   const token = raw.trim();
@@ -144527,7 +144543,7 @@ function storeIdentityToken(paths, identityName, raw) {
   import_node_fs21.default.mkdirSync(dir, { recursive: true, mode: TOKEN_DIR_MODE });
   import_node_fs21.default.chmodSync(dir, TOKEN_DIR_MODE);
   const target = identityTokenPath(paths, identityName);
-  const temp = import_node_path55.default.join(dir, `.${identityName}.${String(process.pid)}.tmp`);
+  const temp = import_node_path56.default.join(dir, `.${identityName}.${String(process.pid)}.tmp`);
   import_node_fs21.default.writeFileSync(temp, `${token}
 `, { mode: TOKEN_FILE_MODE });
   import_node_fs21.default.renameSync(temp, target);
@@ -144695,7 +144711,7 @@ function registerDoctorCommand(program2, deps) {
 // src/headroom/commands.ts
 var import_node_fs22 = __toESM(require("node:fs"), 1);
 var import_node_http5 = __toESM(require("node:http"), 1);
-var import_node_path56 = __toESM(require("node:path"), 1);
+var import_node_path57 = __toESM(require("node:path"), 1);
 var import_node_child_process9 = require("node:child_process");
 init_commandDeps();
 init_realFrontDoorPort();
@@ -144884,12 +144900,12 @@ function readInstalledHeadroomCommit() {
   if (toolDir.status !== 0) {
     return void 0;
   }
-  const libDir = import_node_path56.default.join(toolDir.stdout.trim(), HEADROOM_TOOL_NAME, "lib");
+  const libDir = import_node_path57.default.join(toolDir.stdout.trim(), HEADROOM_TOOL_NAME, "lib");
   for (const python of realFarmFs.readdir(libDir)) {
-    const sitePackages = import_node_path56.default.join(libDir, python, "site-packages");
+    const sitePackages = import_node_path57.default.join(libDir, python, "site-packages");
     for (const entry of realFarmFs.readdir(sitePackages)) {
       if (entry.startsWith("headroom_ai-") && entry.endsWith(".dist-info")) {
-        const directUrl = realFarmFs.readFileUtf8(import_node_path56.default.join(sitePackages, entry, "direct_url.json"));
+        const directUrl = realFarmFs.readFileUtf8(import_node_path57.default.join(sitePackages, entry, "direct_url.json"));
         return directUrl === void 0 ? void 0 : parseInstalledCommit(directUrl);
       }
     }
@@ -145041,7 +145057,7 @@ init_realPorts();
 init_resumeContext();
 
 // src/supervise/registry.ts
-var import_node_path57 = __toESM(require("node:path"), 1);
+var import_node_path58 = __toESM(require("node:path"), 1);
 init_zod();
 var SupervisedSessionSchema = external_exports.strictObject({
   /** The launcher's process id, which is what tells a live entry from one a crashed launcher left behind. */
@@ -145066,19 +145082,19 @@ var SessionStateSchema = external_exports.strictObject({
   at: external_exports.iso.datetime()
 });
 function superviseDirOf(paths, pool) {
-  return import_node_path57.default.join(paths.superviseDir, pool);
+  return import_node_path58.default.join(paths.superviseDir, pool);
 }
 function sessionsDirOf(paths, pool) {
-  return import_node_path57.default.join(superviseDirOf(paths, pool), "sessions");
+  return import_node_path58.default.join(superviseDirOf(paths, pool), "sessions");
 }
 function sessionFileOf(paths, pool, sessionId) {
-  return import_node_path57.default.join(sessionsDirOf(paths, pool), `${sessionId}.json`);
+  return import_node_path58.default.join(sessionsDirOf(paths, pool), `${sessionId}.json`);
 }
 function stateDirOf(paths, pool) {
-  return import_node_path57.default.join(superviseDirOf(paths, pool), "state");
+  return import_node_path58.default.join(superviseDirOf(paths, pool), "state");
 }
 function sessionStatePath(paths, pool, sessionId) {
-  return import_node_path57.default.join(stateDirOf(paths, pool), `${sessionId}.json`);
+  return import_node_path58.default.join(stateDirOf(paths, pool), `${sessionId}.json`);
 }
 function writeSessionState(fs25, paths, pool, sessionId, state) {
   fs25.mkdirPrivate(stateDirOf(paths, pool));
@@ -145109,7 +145125,7 @@ function unregisterSupervised(fs25, paths, pool, sessionId) {
 function liveSupervised(fs25, paths, pool, isRunning) {
   const live = [];
   for (const name of fs25.readdir(sessionsDirOf(paths, pool))) {
-    const file2 = import_node_path57.default.join(sessionsDirOf(paths, pool), name);
+    const file2 = import_node_path58.default.join(sessionsDirOf(paths, pool), name);
     const raw = fs25.readFileUtf8(file2);
     if (raw === void 0) {
       continue;
@@ -145204,7 +145220,7 @@ function registerSuperviseMarkCommand(program2, deps) {
 init_realPorts();
 
 // src/usage/realJobRunner.ts
-var import_node_path58 = __toESM(require("node:path"), 1);
+var import_node_path59 = __toESM(require("node:path"), 1);
 init_conditions();
 init_identityClaude();
 var JOB_LAUNCH_FLAGS = ["--no-headroom", "--no-remote-control", "--track-usage"];
@@ -145217,7 +145233,7 @@ ${outcome.trimEnd()}
 }
 function createRealJobRunner(params) {
   return async (name, identity, job) => {
-    const logFile = import_node_path58.default.join(params.paths.jobLogsDir, `${name}.log`);
+    const logFile = import_node_path59.default.join(params.paths.jobLogsDir, `${name}.log`);
     const append = (outcome) => {
       params.fs.mkdirPrivate(params.paths.jobLogsDir);
       params.fs.appendFilePrivate(logFile, logEntry(name, identity, params.now(), outcome));
@@ -145271,7 +145287,7 @@ function registerHeadlessCommands(program2, deps) {
 }
 
 // src/jobs.ts
-var import_node_path59 = __toESM(require("node:path"), 1);
+var import_node_path60 = __toESM(require("node:path"), 1);
 init_commandDeps();
 init_cliError();
 init_schema();
@@ -145296,7 +145312,7 @@ function jobOf(options) {
     target: options.identity === void 0 ? { pool: options.pool ?? "" } : { identity: options.identity },
     trigger: options.at === void 0 ? { beforeReset: options.beforeReset ?? "fiveHour", lead: options.lead ?? "" } : { at: options.at },
     prompt: options.prompt,
-    cwd: import_node_path59.default.resolve(options.cwd ?? process.cwd()),
+    cwd: import_node_path60.default.resolve(options.cwd ?? process.cwd()),
     timeout: options.timeout,
     ...options.model === void 0 ? {} : { model: options.model },
     ...options.allowedTool === void 0 ? {} : { allowedTools: options.allowedTool }
@@ -145369,7 +145385,7 @@ function registerJobCommand(program2, deps) {
         console.log(`Allowed tools: ${entry.allowedTools.join(", ")}`);
       }
       console.log(`Prompt: ${entry.prompt}`);
-      console.log(`Results: ${import_node_path59.default.join(paths.jobLogsDir, `${name}.log`)}`);
+      console.log(`Results: ${import_node_path60.default.join(paths.jobLogsDir, `${name}.log`)}`);
     }),
     ["agent-shim job show digest"]
   );
@@ -145392,7 +145408,7 @@ function registerJobCommand(program2, deps) {
         throw new UsageError(`No member of the job's pool can be picked right now.`);
       }
       await createRealJobRunner({ paths, spawnDaemon: spawnDetachedSupervisor, fs: realFarmFs, now: () => /* @__PURE__ */ new Date() })(name, identity, entry);
-      console.log(`Ran job "${name}" as ${identity}; the result is in ${import_node_path59.default.join(paths.jobLogsDir, `${name}.log`)}.`);
+      console.log(`Ran job "${name}" as ${identity}; the result is in ${import_node_path60.default.join(paths.jobLogsDir, `${name}.log`)}.`);
     }),
     ["agent-shim job run digest"]
   );
@@ -145939,10 +145955,11 @@ function registerSessionCommands(program2, deps) {
 }
 
 // src/usage/commands.ts
-var import_node_path60 = __toESM(require("node:path"), 1);
+var import_node_path61 = __toESM(require("node:path"), 1);
 init_commandDeps();
 init_realPorts();
 init_account();
+init_signIn();
 init_read();
 init_anthropicUsageRefresh();
 init_middleware();
@@ -146077,7 +146094,7 @@ function collectAccounts(fs25, paths, identity, probe) {
   return names.map((name) => ({
     identity: name,
     account: readAccountMetadata(fs25, paths.identitiesDir, name),
-    signIn: identitySignIn(fs25, probe, { farmRoot: import_node_path60.default.join(paths.identitiesDir, name), hasCredentialBlock: readIdentity(paths, name)?.credential !== void 0 }),
+    signIn: identitySignIn(fs25, probe, { farmRoot: import_node_path61.default.join(paths.identitiesDir, name), hasCredentialBlock: readIdentity(paths, name)?.credential !== void 0 }),
     usage: readUsageSnapshot(fs25, paths.usageSnapshotsDir, name)
   }));
 }
@@ -146313,7 +146330,7 @@ async function realRefresher(params) {
 }
 
 // src/supervise/launch.ts
-var import_node_crypto25 = require("node:crypto");
+var import_node_crypto26 = require("node:crypto");
 init_claudeSession();
 init_pool();
 init_realPorts();
@@ -146479,7 +146496,7 @@ function quotaHitOf(fs25, paths, identity, sessionId, sinceMs, nowMs) {
 }
 
 // src/supervise/move.ts
-var import_node_path61 = __toESM(require("node:path"), 1);
+var import_node_path62 = __toESM(require("node:path"), 1);
 init_lock();
 init_poolPick();
 init_read();
@@ -146525,7 +146542,7 @@ function createMover(deps) {
       if (resolution.identity === request7.from) {
         return { kind: "stay", reason: `no other member of pool "${pool}" can take it` };
       }
-      const transcript = import_node_path61.default.join(paths.identitiesDir, resolution.identity, "projects", projectDirNameOf(deps.cwd), `${request7.sessionId}.jsonl`);
+      const transcript = import_node_path62.default.join(paths.identitiesDir, resolution.identity, "projects", projectDirNameOf(deps.cwd), `${request7.sessionId}.jsonl`);
       if (farmFs.lstat(transcript)?.kind !== "file") {
         return { kind: "stay", reason: `${resolution.identity} does not share this conversation's history, so it could not resume it` };
       }
@@ -146844,7 +146861,7 @@ async function runSupervised(params) {
     log.warn(`agent-shim: pool "${pool}" resumes on a spent quota, which needs a POSIX terminal; this launch runs unsupervised`);
     return void 0;
   }
-  const first = initialConversationOf(params.passthrough, { newId: import_node_crypto25.randomUUID, latestId: () => latestConversationId(farm.fs, { claudeHome: farm.claudeHome, cwd: farm.cwd }) });
+  const first = initialConversationOf(params.passthrough, { newId: import_node_crypto26.randomUUID, latestId: () => latestConversationId(farm.fs, { claudeHome: farm.claudeHome, cwd: farm.cwd }) });
   if ("reason" in first) {
     log.warn(`agent-shim: pool "${pool}" resumes on a spent quota, but this launch runs unsupervised: ${first.reason}`);
     return void 0;
@@ -147056,7 +147073,7 @@ async function runClaude(argvOverride) {
 // src/cli.ts
 async function main() {
   aliasLegacyEnv(process.env);
-  const invokedName = import_node_path62.default.basename(process.argv[1] ?? "agent-shim");
+  const invokedName = import_node_path63.default.basename(process.argv[1] ?? "agent-shim");
   if (isInvokedAsClaude(invokedName)) {
     await runClaude();
     return;