claude-use 11.60.0 → 11.60.2

package/dist/cli.cjs

@@ -318,10 +318,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path72) {
-  if (!path72)
+function getElementAtPath(obj, path70) {
+  if (!path70)
     return obj;
-  return path72.reduce((acc, key) => acc?.[key], obj);
+  return path70.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -580,11 +580,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path72, issues) {
+function prefixIssues(path70, issues) {
   return issues.map((iss) => {
     var _a4;
     (_a4 = iss).path ?? (_a4.path = []);
-    iss.path.unshift(path72);
+    iss.path.unshift(path70);
     return iss;
   });
 }
@@ -1105,16 +1105,16 @@ function flattenError(error63, mapper = (issue2) => issue2.message) {
 }
 function formatError(error63, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error64, path72 = []) => {
+  const processError = (error64, path70 = []) => {
     for (const issue2 of error64.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path72, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path70, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path70, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path70, ...issue2.path]);
       } else {
-        const fullpath = [...path72, ...issue2.path];
+        const fullpath = [...path70, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -1153,17 +1153,17 @@ function formatError(error63, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error63, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error64, path72 = []) => {
+  const processError = (error64, path70 = []) => {
     var _a4;
     for (const issue2 of error64.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path72, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path70, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path70, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path70, ...issue2.path]);
       } else {
-        const fullpath = [...path72, ...issue2.path];
+        const fullpath = [...path70, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -1202,8 +1202,8 @@ function treeifyError(error63, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path72 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path72) {
+  const path70 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path70) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -19199,13 +19199,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path72 = ref.slice(1).split("/").filter(Boolean);
-  if (path72.length === 0) {
+  const path70 = ref.slice(1).split("/").filter(Boolean);
+  if (path70.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path72[0] === defsKey) {
-    const key = path72[1] === void 0 ? void 0 : decodeJSONPointerSegment(path72[1]);
+  if (path70[0] === defsKey) {
+    const key = path70[1] === void 0 ? void 0 : decodeJSONPointerSegment(path70[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -23712,42 +23712,42 @@ var require_defaults = __commonJS({
 var require_env_paths = __commonJS({
   "node_modules/.pnpm/env-paths@2.2.1/node_modules/env-paths/index.js"(exports2, module2) {
     "use strict";
-    var path72 = require("path");
+    var path70 = require("path");
     var os14 = require("os");
     var homedir = os14.homedir();
     var tmpdir = os14.tmpdir();
     var { env } = process;
     var macos = (name) => {
-      const library = path72.join(homedir, "Library");
+      const library = path70.join(homedir, "Library");
       return {
-        data: path72.join(library, "Application Support", name),
-        config: path72.join(library, "Preferences", name),
-        cache: path72.join(library, "Caches", name),
-        log: path72.join(library, "Logs", name),
-        temp: path72.join(tmpdir, name)
+        data: path70.join(library, "Application Support", name),
+        config: path70.join(library, "Preferences", name),
+        cache: path70.join(library, "Caches", name),
+        log: path70.join(library, "Logs", name),
+        temp: path70.join(tmpdir, name)
       };
     };
     var windows = (name) => {
-      const appData = env.APPDATA || path72.join(homedir, "AppData", "Roaming");
-      const localAppData = env.LOCALAPPDATA || path72.join(homedir, "AppData", "Local");
+      const appData = env.APPDATA || path70.join(homedir, "AppData", "Roaming");
+      const localAppData = env.LOCALAPPDATA || path70.join(homedir, "AppData", "Local");
       return {
         // Data/config/cache/log are invented by me as Windows isn't opinionated about this
-        data: path72.join(localAppData, name, "Data"),
-        config: path72.join(appData, name, "Config"),
-        cache: path72.join(localAppData, name, "Cache"),
-        log: path72.join(localAppData, name, "Log"),
-        temp: path72.join(tmpdir, name)
+        data: path70.join(localAppData, name, "Data"),
+        config: path70.join(appData, name, "Config"),
+        cache: path70.join(localAppData, name, "Cache"),
+        log: path70.join(localAppData, name, "Log"),
+        temp: path70.join(tmpdir, name)
       };
     };
     var linux = (name) => {
-      const username = path72.basename(homedir);
+      const username = path70.basename(homedir);
       return {
-        data: path72.join(env.XDG_DATA_HOME || path72.join(homedir, ".local", "share"), name),
-        config: path72.join(env.XDG_CONFIG_HOME || path72.join(homedir, ".config"), name),
-        cache: path72.join(env.XDG_CACHE_HOME || path72.join(homedir, ".cache"), name),
+        data: path70.join(env.XDG_DATA_HOME || path70.join(homedir, ".local", "share"), name),
+        config: path70.join(env.XDG_CONFIG_HOME || path70.join(homedir, ".config"), name),
+        cache: path70.join(env.XDG_CACHE_HOME || path70.join(homedir, ".cache"), name),
         // https://wiki.debian.org/XDGBaseDirectorySpecification#state
-        log: path72.join(env.XDG_STATE_HOME || path72.join(homedir, ".local", "state"), name),
-        temp: path72.join(tmpdir, username, name)
+        log: path70.join(env.XDG_STATE_HOME || path70.join(homedir, ".local", "state"), name),
+        temp: path70.join(tmpdir, username, name)
       };
     };
     var envPaths = (name, options) => {
@@ -23815,11 +23815,11 @@ var require_util = __commonJS({
       return result;
     }
     exports2.emplace = emplace;
-    function getPropertyByPath(source, path72) {
-      if (typeof path72 === "string" && Object.prototype.hasOwnProperty.call(source, path72)) {
-        return source[path72];
+    function getPropertyByPath(source, path70) {
+      if (typeof path70 === "string" && Object.prototype.hasOwnProperty.call(source, path70)) {
+        return source[path70];
       }
-      const parsedPath = typeof path72 === "string" ? path72.split(".") : path72;
+      const parsedPath = typeof path70 === "string" ? path70.split(".") : path70;
       return parsedPath.reduce((previous, key) => {
         if (previous === void 0) {
           return previous;
@@ -23842,9 +23842,9 @@ var require_util = __commonJS({
       return Object.fromEntries(Object.entries(options).filter(([, value2]) => value2 !== void 0));
     }
     exports2.removeUndefinedValuesFromObject = removeUndefinedValuesFromObject;
-    async function isDirectory(path72) {
+    async function isDirectory(path70) {
       try {
-        const stat = await fs_1.promises.stat(path72);
+        const stat = await fs_1.promises.stat(path70);
         return stat.isDirectory();
       } catch (e14) {
         if (e14.code === "ENOENT") {
@@ -23854,9 +23854,9 @@ var require_util = __commonJS({
       }
     }
     exports2.isDirectory = isDirectory;
-    function isDirectorySync(path72) {
+    function isDirectorySync(path70) {
       try {
-        const stat = fs_1.default.statSync(path72);
+        const stat = fs_1.default.statSync(path70);
         return stat.isDirectory();
       } catch (e14) {
         if (e14.code === "ENOENT") {
@@ -23954,7 +23954,7 @@ var require_ExplorerBase = __commonJS({
           const idx = importStack.indexOf(fullPath);
           if (idx !== -1) {
             throw new Error(`Circular import detected:
-${[...importStack, fullPath].map((path72, i10) => `${i10 + 1}. ${path72}`).join("\n")} (same as ${idx + 1}.)`);
+${[...importStack, fullPath].map((path70, i10) => `${i10 + 1}. ${path70}`).join("\n")} (same as ${idx + 1}.)`);
           }
         }
       }
@@ -24142,9 +24142,9 @@ var require_Explorer = __commonJS({
           throw error63;
         }
       }
-      async #fileExists(path72) {
+      async #fileExists(path70) {
         try {
-          await promises_1.default.stat(path72);
+          await promises_1.default.stat(path70);
           return true;
         } catch (e14) {
           return false;
@@ -24304,9 +24304,9 @@ var require_ExplorerSync = __commonJS({
           throw error63;
         }
       }
-      #fileExists(path72) {
+      #fileExists(path70) {
         try {
-          fs_1.default.statSync(path72);
+          fs_1.default.statSync(path70);
           return true;
         } catch (e14) {
           return false;
@@ -24430,7 +24430,7 @@ var require_dist = __commonJS({
       };
     }
     function getResolvedSearchPlaces(moduleName, toolDefinedSearchPlaces, userConfiguredOptions) {
-      const userConfiguredSearchPlaces = userConfiguredOptions.searchPlaces?.map((path72) => path72.replace("{name}", moduleName));
+      const userConfiguredSearchPlaces = userConfiguredOptions.searchPlaces?.map((path70) => path70.replace("{name}", moduleName));
       if (userConfiguredOptions.mergeSearchPlaces) {
         return [...userConfiguredSearchPlaces ?? [], ...toolDefinedSearchPlaces];
       }
@@ -24560,7 +24560,7 @@ function parseIgnoringUnrecognisedKeys(schema, raw) {
   return second.success ? { success: true, data: second.data, ignored } : { success: false, issues: second.error.issues };
 }
 function describeIgnoredKeys(filePath, ignored) {
-  const places = ignored.map(({ path: path72, keys }) => `${path72.length === 0 ? "" : `${path72.map(String).join(".")}.`}${keys.join(", ")}`);
+  const places = ignored.map(({ path: path70, keys }) => `${path70.length === 0 ? "" : `${path70.map(String).join(".")}.`}${keys.join(", ")}`);
   return `${filePath} has settings this version of agent-shim does not know and ignores: ${places.join("; ")}. A newer release may read them.`;
 }
 function noteIgnoredKeys(filePath, ignored) {
@@ -24582,9 +24582,9 @@ function restoreIgnoredKeys(filePath, value2) {
     return value2;
   }
   const restored = structuredClone(value2);
-  for (const { path: path72, values } of ignored) {
+  for (const { path: path70, values } of ignored) {
     let holder = restored;
-    for (const step2 of path72) {
+    for (const step2 of path70) {
       holder = isRecord(holder) ? holder[step2] : void 0;
     }
     if (isRecord(holder)) {
@@ -25054,6 +25054,72 @@ var init_proxyBypass = __esm({
   }
 });
 
+// src/config/names.ts
+function isFileName(name) {
+  return FILE_NAME.test(name);
+}
+function isStoredName(name) {
+  return name.length > 0 && Buffer.byteLength(name) <= MAX_NAME_BYTES && name !== "." && name !== ".." && !/[/\\]/u.test(name) && !name.includes("\0");
+}
+function requireNewProviderName(name) {
+  if (!isFileName(name)) {
+    throw new InvalidProviderNameError(name, FILE_NAME_RULE);
+  }
+}
+function profileFilePath(directory, name, source) {
+  if (!isStoredName(name)) {
+    throw new UnsafeNameError(name, "configuration profile", STORED_NAME_RULE, source);
+  }
+  return import_node_path4.default.join(directory, `${name}.json`);
+}
+function providerFilePath(directory, name, source) {
+  if (!isStoredName(name)) {
+    throw new InvalidProviderNameError(name, STORED_NAME_RULE, source);
+  }
+  return import_node_path4.default.join(directory, `${name}.json`);
+}
+var import_node_path4, FILESYSTEM_COMPONENT_BYTES, MAX_PID_DIGITS, UUID_CHARS, ATOMIC_WRITE_OVERHEAD_BYTES, FARM_SWAP_OVERHEAD_BYTES, MAX_NAME_BYTES, FILE_NAME_PATTERN, FILE_NAME, FILE_NAME_RULE, STORED_NAME_RULE, FileNameSchema, StoredNameSchema, UnsafeNameError, InvalidProviderNameError;
+var init_names = __esm({
+  "src/config/names.ts"() {
+    "use strict";
+    import_node_path4 = __toESM(require("node:path"), 1);
+    init_zod();
+    init_cliError();
+    FILESYSTEM_COMPONENT_BYTES = 255;
+    MAX_PID_DIGITS = 10;
+    UUID_CHARS = 36;
+    ATOMIC_WRITE_OVERHEAD_BYTES = ".".length + ".json".length + ".".length + MAX_PID_DIGITS + ".".length + UUID_CHARS + ".tmp".length;
+    FARM_SWAP_OVERHEAD_BYTES = ".".length + ".previous.".length + MAX_PID_DIGITS + ".".length + UUID_CHARS;
+    MAX_NAME_BYTES = FILESYSTEM_COMPONENT_BYTES - Math.max(ATOMIC_WRITE_OVERHEAD_BYTES, FARM_SWAP_OVERHEAD_BYTES);
+    FILE_NAME_PATTERN = `[A-Za-z0-9][A-Za-z0-9._@-]{0,${String(MAX_NAME_BYTES - 1)}}`;
+    FILE_NAME = new RegExp(`^${FILE_NAME_PATTERN}$`);
+    FILE_NAME_RULE = `must start with a letter or digit, contain only letters, digits, dots, dashes, underscores and at signs, and be at most ${String(MAX_NAME_BYTES)} bytes`;
+    STORED_NAME_RULE = `must be non-empty, at most ${String(MAX_NAME_BYTES)} bytes, not "." or "..", and contain no path separator or NUL`;
+    FileNameSchema = external_exports.string().min(1).regex(FILE_NAME, FILE_NAME_RULE);
+    StoredNameSchema = external_exports.string().min(1).max(MAX_NAME_BYTES).refine(isStoredName, STORED_NAME_RULE);
+    UnsafeNameError = class extends CliError {
+      constructor(attemptedName, kind, rule = STORED_NAME_RULE, source) {
+        super(`${source === void 0 ? "" : `${source}: `}${JSON.stringify(attemptedName)} is not a valid ${kind} name: a name ${rule}.`);
+        this.attemptedName = attemptedName;
+        this.kind = kind;
+        this.rule = rule;
+        this.source = source;
+        this.name = "UnsafeNameError";
+      }
+      attemptedName;
+      kind;
+      rule;
+      source;
+    };
+    InvalidProviderNameError = class extends UnsafeNameError {
+      constructor(attemptedName, rule = STORED_NAME_RULE, source) {
+        super(attemptedName, "provider", rule, source);
+        this.name = "InvalidProviderNameError";
+      }
+    };
+  }
+});
+
 // node_modules/.pnpm/ansi-regex@6.3.0/node_modules/ansi-regex/index.js
 function ansiRegex({ onlyFirst = false } = {}) {
   const ST = "(?:\\u0007|\\u001B\\u005C|\\u009C)";
@@ -27626,13 +27692,14 @@ function isTimeZone(name) {
     return false;
   }
 }
-var import_node_path4, CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, ANTIGRAVITY_MODES, CLAUDE_TIERS, ANTIGRAVITY_EFFORTS, ANTIGRAVITY_DEFAULT_MODE, ANTIGRAVITY_DEFAULT_MODEL, ANTIGRAVITY_DEFAULT_TIER_MODELS, ANTIGRAVITY_DEFAULT_EFFORT, AntigravityModelTargetSchema, AntigravityProviderConfigSchema, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_LOGIN, CODEX_DEFAULT_MODEL, CODEX_DEFAULT_TIER_MODELS, CODEX_DEFAULT_EFFORT, CodexProviderConfigSchema, ProviderRouteSchema, PickerModelSchema, PickerModelsSchema, ProviderCatalogueSchema, HttpProviderSchema, CodexProviderSchema, RouterProviderSchema, AntigravityProviderSchema, ProviderSchema, SELECTION_MODES, VirtualModelSchema, ModelPricesSchema, FamilySettingsSchema, ModelsConfigSchema, ModelsLayerSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, WHOLE_PERCENT_MAX, CompactAtUtilisationSchema, PoolSchema, WEEKDAYS, AnchorSchema, JOB_WINDOWS, JobTriggerSchema, JobTargetSchema, JobSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FRONTDOOR_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
+var import_node_path5, CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, ANTIGRAVITY_MODES, CLAUDE_TIERS, ANTIGRAVITY_EFFORTS, ANTIGRAVITY_DEFAULT_MODE, ANTIGRAVITY_DEFAULT_MODEL, ANTIGRAVITY_DEFAULT_TIER_MODELS, ANTIGRAVITY_DEFAULT_EFFORT, AntigravityModelTargetSchema, AntigravityProviderConfigSchema, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_LOGIN, CODEX_DEFAULT_MODEL, CODEX_DEFAULT_TIER_MODELS, CODEX_DEFAULT_EFFORT, CodexProviderConfigSchema, ProviderRouteSchema, PickerModelSchema, PickerModelsSchema, ProviderCatalogueSchema, HttpProviderSchema, CodexProviderSchema, RouterProviderSchema, AntigravityProviderSchema, ProviderSchema, SELECTION_MODES, VirtualModelSchema, ModelPricesSchema, FamilySettingsSchema, ModelsConfigSchema, ModelsLayerSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, WHOLE_PERCENT_MAX, CompactAtUtilisationSchema, PoolSchema, WEEKDAYS, AnchorSchema, JOB_WINDOWS, JobTriggerSchema, JobTargetSchema, JobSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FRONTDOOR_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
 var init_schema = __esm({
   "src/config/schema.ts"() {
     "use strict";
     init_proxyBypass();
+    init_names();
     init_statusline();
-    import_node_path4 = __toESM(require("node:path"), 1);
+    import_node_path5 = __toESM(require("node:path"), 1);
     init_zod();
     init_dist2();
     init_versionDiscovery();
@@ -27664,7 +27731,7 @@ var init_schema = __esm({
     LaunchSchema = external_exports.strictObject({
       skipPermissions: external_exports.boolean().optional(),
       remoteControl: external_exports.boolean().optional(),
-      provider: external_exports.string().min(1).optional(),
+      provider: StoredNameSchema.optional(),
       headroom: external_exports.boolean().optional(),
       trackUsage: external_exports.boolean().optional(),
       /** The exact Claude Code version to run, as it is named in Claude Code's versions directory (`2.1.220`). A pin that is not installed fails the launch; it never falls back to the highest version. */
@@ -27703,7 +27770,7 @@ var init_schema = __esm({
     };
     EnvCredentialSourceSchema = external_exports.strictObject({ env: external_exports.string().min(1) });
     FileCredentialSourceSchema = external_exports.strictObject({
-      file: external_exports.string().min(1).refine((filePath) => filePath.startsWith("~/") || import_node_path4.default.isAbsolute(filePath), {
+      file: external_exports.string().min(1).refine((filePath) => filePath.startsWith("~/") || import_node_path5.default.isAbsolute(filePath), {
         message: "a credential file must be an absolute or ~-rooted path, since a launch can start in any directory"
       })
     });
@@ -27816,7 +27883,7 @@ var init_schema = __esm({
       /** The condition, the same `when` union a configuration cascade entry takes: the object form or a trilean predicate tree over the request facts the door resolves (`request.model` and kin). */
       when: WhenSchema,
       /** The provider a matching request is sent to, by the name a provider file carries. */
-      provider: external_exports.string().min(1),
+      provider: StoredNameSchema,
       /** The model name to rewrite the request to before it reaches the target, for a provider that expects another form (OpenRouter's `anthropic/claude-...` for instance). A route that rewrites reads the whole body, the one copy the rewrite needs. */
       model: external_exports.string().min(1).optional()
     });
@@ -27933,7 +28000,7 @@ var init_schema = __esm({
     ConfigProfileSchema = external_exports.strictObject({
       $schema: external_exports.string().optional(),
       description: external_exports.string().optional(),
-      extends: external_exports.array(external_exports.string().min(1)).optional(),
+      extends: external_exports.array(StoredNameSchema).optional(),
       categories: CategoryMapSchema.optional(),
       entries: EntriesSchema.optional(),
       launch: LaunchSchema.optional(),
@@ -27941,9 +28008,8 @@ var init_schema = __esm({
     });
     POOL_SELECTOR_PREFIX = "pool:";
     POOL_NAME_PATTERN = "[A-Za-z0-9][A-Za-z0-9._-]*";
-    IDENTITY_NAME_PATTERN = "[A-Za-z0-9][A-Za-z0-9._@-]*";
     PoolNameSchema = external_exports.string().min(1).regex(new RegExp(`^${POOL_NAME_PATTERN}$`));
-    SELECTOR_RE = new RegExp(`^(${POOL_SELECTOR_PREFIX}${POOL_NAME_PATTERN}|${IDENTITY_NAME_PATTERN})$`);
+    SELECTOR_RE = new RegExp(`^(${POOL_SELECTOR_PREFIX}${POOL_NAME_PATTERN}|${FILE_NAME_PATTERN})$`);
     IdentitySelectorSchema = external_exports.string().min(1).regex(SELECTOR_RE);
     PoolMemberSchema = external_exports.union([external_exports.string().min(1).regex(SELECTOR_RE), external_exports.strictObject({ identity: external_exports.string().min(1).regex(SELECTOR_RE), when: WhenSchema })]);
     POOL_PREFERENCES = ["score", "listed"];
@@ -27981,7 +28047,7 @@ var init_schema = __esm({
     });
     DirectoryRuleSchema = ConfigProfileSchema.omit({ description: true }).extend({
       path: external_exports.string().min(1),
-      configProfile: external_exports.string().min(1).optional(),
+      configProfile: StoredNameSchema.optional(),
       identity: IdentitySelectorSchema.optional(),
       when: WhenSchema.optional()
     });
@@ -27990,7 +28056,10 @@ var init_schema = __esm({
       rules: external_exports.array(DirectoryRuleSchema)
     });
     PortableConfigSchema = ConfigProfileSchema.omit({ description: true }).extend({
-      configProfile: external_exports.string().min(1).optional(),
+      // A committed file is the one place a name arrives from someone other than the person: it may only name a profile or provider by the shape new ones are given, which cannot name a path, where the person's own files may also name one stored under an older, looser rule.
+      extends: external_exports.array(FileNameSchema).optional(),
+      launch: LaunchSchema.extend({ provider: FileNameSchema.optional() }).optional(),
+      configProfile: FileNameSchema.optional(),
       identity: IdentitySelectorSchema.optional(),
       when: WhenSchema.optional()
     });
@@ -28039,7 +28108,7 @@ var init_schema = __esm({
     });
     GlobalConfigSchema = external_exports.strictObject({
       $schema: external_exports.string().optional(),
-      defaultConfigProfile: external_exports.string().min(1).optional(),
+      defaultConfigProfile: StoredNameSchema.optional(),
       walkUpLimit: external_exports.string().min(1).optional(),
       categories: CategoryMapSchema.optional(),
       entries: EntriesSchema.optional(),
@@ -28053,8 +28122,8 @@ var init_schema = __esm({
     });
     IdentitySchema = external_exports.strictObject({
       $schema: external_exports.string().optional(),
-      name: external_exports.string().min(1).regex(/^[A-Za-z0-9][A-Za-z0-9._@-]*$/),
-      defaultConfigProfile: external_exports.string().min(1).optional(),
+      name: FileNameSchema,
+      defaultConfigProfile: StoredNameSchema.optional(),
       allowAmbientCredential: external_exports.boolean().default(false),
       credential: CredentialSchema.optional(),
       /** When this identity's five-hour window should be open: the front door opens one at each anchor if none is. Absent, nothing is opened on a schedule. */
@@ -28105,7 +28174,7 @@ function readFrontDoorState(fs30, stateFile) {
   }
 }
 function writeFrontDoorState(fs30, stateFile, state) {
-  fs30.mkdirp(import_node_path5.default.dirname(stateFile));
+  fs30.mkdirp(import_node_path6.default.dirname(stateFile));
   fs30.writeFilePrivate(stateFile, `${JSON.stringify(state, null, 2)}
 `);
 }
@@ -28118,18 +28187,18 @@ function frontDoorOrigin(state) {
 }
 function writeFrontDoorDirectRecord(fs30, recordsDir, record2) {
   fs30.mkdirp(recordsDir);
-  fs30.writeFilePrivate(import_node_path5.default.join(recordsDir, `${String(record2.pid)}.json`), `${JSON.stringify({ directPort: record2.directPort })}
+  fs30.writeFilePrivate(import_node_path6.default.join(recordsDir, `${String(record2.pid)}.json`), `${JSON.stringify({ directPort: record2.directPort })}
 `);
 }
 function removeFrontDoorDirectRecord(fs30, recordsDir, pid) {
-  fs30.removeRecursive(import_node_path5.default.join(recordsDir, `${String(pid)}.json`));
+  fs30.removeRecursive(import_node_path6.default.join(recordsDir, `${String(pid)}.json`));
 }
 function markFrontDoorDraining(fs30, markersDir, pid) {
   fs30.mkdirp(markersDir);
-  fs30.writeFilePrivate(import_node_path5.default.join(markersDir, String(pid)), "\n");
+  fs30.writeFilePrivate(import_node_path6.default.join(markersDir, String(pid)), "\n");
 }
 function unmarkFrontDoorDraining(fs30, markersDir, pid) {
-  fs30.removeRecursive(import_node_path5.default.join(markersDir, String(pid)));
+  fs30.removeRecursive(import_node_path6.default.join(markersDir, String(pid)));
 }
 function listDrainingFrontDoors(fs30, markersDir, isRunning) {
   return fs30.readdir(markersDir).flatMap((file2) => /^[1-9]\d*$/.test(file2) && Number.isSafeInteger(Number(file2)) ? [Number(file2)] : []).filter(isRunning).sort((a10, b) => a10 - b);
@@ -28146,7 +28215,7 @@ function readDirectRecordEntry(fs30, recordsDir, file2) {
   }
   let raw;
   try {
-    raw = fs30.readFileUtf8(import_node_path5.default.join(recordsDir, file2));
+    raw = fs30.readFileUtf8(import_node_path6.default.join(recordsDir, file2));
   } catch {
     return void 0;
   }
@@ -28171,7 +28240,7 @@ function pruneMalformedFrontDoorDirectFiles(fs30, recordsDir, isRunning) {
     const writer = RECORD_TEMPORARY_FILE.exec(file2)?.[1];
     const stale = writer !== void 0 && !isRunning(Number(writer));
     if (stale || readDirectRecordEntry(fs30, recordsDir, file2)?.malformed === true) {
-      fs30.removeRecursive(import_node_path5.default.join(recordsDir, file2));
+      fs30.removeRecursive(import_node_path6.default.join(recordsDir, file2));
     }
   }
 }
@@ -28190,7 +28259,7 @@ function recordOf(details) {
 }
 function writeFrontDoorSession(fs30, sessionsDir, session) {
   fs30.mkdirPrivate(sessionsDir);
-  fs30.writeFilePrivate(import_node_path5.default.join(sessionsDir, `${String(session.pid)}.json`), `${JSON.stringify(session, null, 2)}
+  fs30.writeFilePrivate(import_node_path6.default.join(sessionsDir, `${String(session.pid)}.json`), `${JSON.stringify(session, null, 2)}
 `);
 }
 function listFrontDoorSessions(fs30, sessionsDir) {
@@ -28200,7 +28269,7 @@ function listFrontDoorSessions(fs30, sessionsDir) {
       continue;
     }
     try {
-      const parsed = FrontDoorSessionSchema.safeParse(JSON.parse(fs30.readFileUtf8(import_node_path5.default.join(sessionsDir, name)) ?? ""));
+      const parsed = FrontDoorSessionSchema.safeParse(JSON.parse(fs30.readFileUtf8(import_node_path6.default.join(sessionsDir, name)) ?? ""));
       if (parsed.success) {
         sessions.push({ pid: parsed.data.pid, startedAt: parsed.data.startedAt, ...parsed.data.supervisorPid === void 0 ? {} : { supervisorPid: parsed.data.supervisorPid } });
       }
@@ -28211,7 +28280,7 @@ function listFrontDoorSessions(fs30, sessionsDir) {
   return sessions.sort((a10, b) => a10.pid - b.pid);
 }
 function removeFrontDoorSession(fs30, sessionsDir, pid) {
-  fs30.removeRecursive(import_node_path5.default.join(sessionsDir, `${String(pid)}.json`));
+  fs30.removeRecursive(import_node_path6.default.join(sessionsDir, `${String(pid)}.json`));
 }
 function pruneDeadFrontDoorSessions(fs30, sessionsDir, isRunning) {
   const removed = [];
@@ -28230,7 +28299,7 @@ function liveSessionTokens(fs30, sessionsDir) {
       continue;
     }
     try {
-      const parsed = FrontDoorSessionSchema.safeParse(JSON.parse(fs30.readFileUtf8(import_node_path5.default.join(sessionsDir, name)) ?? ""));
+      const parsed = FrontDoorSessionSchema.safeParse(JSON.parse(fs30.readFileUtf8(import_node_path6.default.join(sessionsDir, name)) ?? ""));
       if (parsed.success) {
         tokens.add(parsed.data.token);
       }
@@ -28246,7 +28315,7 @@ function readFrontDoorSessionModels(fs30, sessionsDir, sessionId) {
       continue;
     }
     try {
-      const parsed = FrontDoorSessionSchema.safeParse(JSON.parse(fs30.readFileUtf8(import_node_path5.default.join(sessionsDir, name)) ?? ""));
+      const parsed = FrontDoorSessionSchema.safeParse(JSON.parse(fs30.readFileUtf8(import_node_path6.default.join(sessionsDir, name)) ?? ""));
       if (parsed.success && parsed.data.sessionId === sessionId) {
         return parsed.data.models;
       }
@@ -28256,11 +28325,11 @@ function readFrontDoorSessionModels(fs30, sessionsDir, sessionId) {
   }
   return void 0;
 }
-var import_node_path5, FRONT_DOOR_PROTOCOL, FrontDoorSessionSchema, FrontDoorStateSchema, MAX_TCP_PORT, FrontDoorDirectRecordSchema, RECORD_TEMPORARY_FILE;
+var import_node_path6, FRONT_DOOR_PROTOCOL, FrontDoorSessionSchema, FrontDoorStateSchema, MAX_TCP_PORT, FrontDoorDirectRecordSchema, RECORD_TEMPORARY_FILE;
 var init_state = __esm({
   "src/frontdoor/state.ts"() {
     "use strict";
-    import_node_path5 = __toESM(require("node:path"), 1);
+    import_node_path6 = __toESM(require("node:path"), 1);
     init_zod();
     init_schema();
     FRONT_DOOR_PROTOCOL = 5;
@@ -28317,7 +28386,7 @@ function readHeadroomState(fs30, stateFile) {
   }
 }
 function writeHeadroomState(fs30, stateFile, state) {
-  fs30.mkdirp(import_node_path6.default.dirname(stateFile));
+  fs30.mkdirp(import_node_path7.default.dirname(stateFile));
   fs30.writeFilePrivate(stateFile, `${JSON.stringify(state, null, 2)}
 `);
 }
@@ -28379,15 +28448,15 @@ function parseAllowlistFile(content) {
   return content.replace(/^\uFEFF/, "").replace(ALLOWLIST_FILE_COMMENT, "").split(ALLOWLIST_FILE_SEPARATORS).map((entry) => entry.replace(ALLOWLIST_SURROUNDING_WHITESPACE, "")).filter((entry) => entry !== "" && !ALLOWLIST_ENTRY_WHITESPACE.test(entry) && (entry.includes("://") ? isAdmissibleUrl(entry) : isBareHost(entry)));
 }
 function writeAllowlistFile(fs30, allowlistFile, allowlist) {
-  fs30.mkdirPrivate(import_node_path6.default.dirname(allowlistFile));
+  fs30.mkdirPrivate(import_node_path7.default.dirname(allowlistFile));
   fs30.writeFilePrivate(allowlistFile, formatAllowlistFile(allowlist));
 }
 function pruneStaleAllowlistTemporaries(fs30, allowlistFile, isRunning) {
-  const prefix = `${import_node_path6.default.basename(allowlistFile)}.`;
-  for (const name of fs30.readdir(import_node_path6.default.dirname(allowlistFile))) {
+  const prefix = `${import_node_path7.default.basename(allowlistFile)}.`;
+  for (const name of fs30.readdir(import_node_path7.default.dirname(allowlistFile))) {
     const writer = name.startsWith(prefix) ? /^([1-9]\d*)\.tmp$/.exec(name.slice(prefix.length))?.[1] : void 0;
     if (writer !== void 0 && !isRunning(Number(writer))) {
-      fs30.removeRecursive(import_node_path6.default.join(import_node_path6.default.dirname(allowlistFile), name));
+      fs30.removeRecursive(import_node_path7.default.join(import_node_path7.default.dirname(allowlistFile), name));
     }
   }
 }
@@ -28398,7 +28467,7 @@ function readAllProviders(fs30, providersDir) {
       continue;
     }
     try {
-      const parsed = parseJson(fs30.readFileUtf8(import_node_path6.default.join(providersDir, name)), ProviderSchema);
+      const parsed = parseJson(fs30.readFileUtf8(import_node_path7.default.join(providersDir, name)), ProviderSchema);
       if (parsed !== void 0) {
         result.push({ name: name.slice(0, -".json".length), provider: parsed });
       }
@@ -28410,11 +28479,11 @@ function readAllProviders(fs30, providersDir) {
 }
 function writeSession(fs30, sessionsDir, session) {
   fs30.mkdirp(sessionsDir);
-  fs30.writeFileUtf8(import_node_path6.default.join(sessionsDir, `${String(session.pid)}.json`), `${JSON.stringify(session, null, 2)}
+  fs30.writeFileUtf8(import_node_path7.default.join(sessionsDir, `${String(session.pid)}.json`), `${JSON.stringify(session, null, 2)}
 `);
 }
 function removeSession(fs30, sessionsDir, pid) {
-  fs30.removeRecursive(import_node_path6.default.join(sessionsDir, `${String(pid)}.json`));
+  fs30.removeRecursive(import_node_path7.default.join(sessionsDir, `${String(pid)}.json`));
 }
 function listSessions(fs30, sessionsDir) {
   const sessions = [];
@@ -28423,7 +28492,7 @@ function listSessions(fs30, sessionsDir) {
       continue;
     }
     try {
-      const parsed = parseJson(fs30.readFileUtf8(import_node_path6.default.join(sessionsDir, name)), HeadroomSessionSchema);
+      const parsed = parseJson(fs30.readFileUtf8(import_node_path7.default.join(sessionsDir, name)), HeadroomSessionSchema);
       if (parsed !== void 0) {
         sessions.push(parsed);
       }
@@ -28453,12 +28522,12 @@ function readStartLock(fs30, lockFile) {
     return void 0;
   }
 }
-var import_node_crypto2, import_node_path6, HeadroomStateSchema, HeadroomSessionSchema, HeadroomLockSchema, HEADROOM_ALLOWLIST_FILE_FLAG, ALLOWLIST_LINE_BREAKS, ALLOWLIST_WHITESPACE, ALLOWLIST_FILE_SEPARATORS, ALLOWLIST_FILE_COMMENT, ALLOWLIST_ENTRY_WHITESPACE, ALLOWLIST_SURROUNDING_WHITESPACE, ALLOWLIST_SAFE_SCHEMES;
+var import_node_crypto2, import_node_path7, HeadroomStateSchema, HeadroomSessionSchema, HeadroomLockSchema, HEADROOM_ALLOWLIST_FILE_FLAG, ALLOWLIST_LINE_BREAKS, ALLOWLIST_WHITESPACE, ALLOWLIST_FILE_SEPARATORS, ALLOWLIST_FILE_COMMENT, ALLOWLIST_ENTRY_WHITESPACE, ALLOWLIST_SURROUNDING_WHITESPACE, ALLOWLIST_SAFE_SCHEMES;
 var init_state2 = __esm({
   "src/headroom/state.ts"() {
     "use strict";
     import_node_crypto2 = require("node:crypto");
-    import_node_path6 = __toESM(require("node:path"), 1);
+    import_node_path7 = __toESM(require("node:path"), 1);
     init_zod();
     init_schema();
     HeadroomStateSchema = external_exports.strictObject({
@@ -28737,10 +28806,10 @@ function redactBody(chunk2) {
   }
 }
 function captureFromEnv(env, logsDir) {
-  return env[CAPTURE_ENV] === "1" ? createFileCapture(path7.join(logsDir, "frontdoor-capture.jsonl")) : void 0;
+  return env[CAPTURE_ENV] === "1" ? createFileCapture(path8.join(logsDir, "frontdoor-capture.jsonl")) : void 0;
 }
 function createFileCapture(file2, now = () => /* @__PURE__ */ new Date()) {
-  fs3.mkdirSync(path7.dirname(file2), { recursive: true });
+  fs3.mkdirSync(path8.dirname(file2), { recursive: true });
   let nextId = 0;
   const append = (record2) => {
     fs3.appendFileSync(file2, `${JSON.stringify({ ts: now().toISOString(), ...record2 })}
@@ -28827,12 +28896,12 @@ function createFileCapture(file2, now = () => /* @__PURE__ */ new Date()) {
     }
   };
 }
-var fs3, path7, SECRET_HEADER_NAME, SECRET_JSON_KEY, SECRET_BODY_PATTERNS, CHUNK_LOG_CAP_BYTES, STREAM_LOG_CAP_BYTES, CAPTURE_FILE_MODE, CAPTURE_ENV;
+var fs3, path8, SECRET_HEADER_NAME, SECRET_JSON_KEY, SECRET_BODY_PATTERNS, CHUNK_LOG_CAP_BYTES, STREAM_LOG_CAP_BYTES, CAPTURE_FILE_MODE, CAPTURE_ENV;
 var init_capture = __esm({
   "src/frontdoor/capture.ts"() {
     "use strict";
     fs3 = __toESM(require("node:fs"), 1);
-    path7 = __toESM(require("node:path"), 1);
+    path8 = __toESM(require("node:path"), 1);
     SECRET_HEADER_NAME = /authorization|cookie|token|secret|credential|api[-_]key/i;
     SECRET_JSON_KEY = /token|secret|password|credential|authorization|api[-_]key/i;
     SECRET_BODY_PATTERNS = [
@@ -28849,7 +28918,7 @@ var init_capture = __esm({
 
 // src/headroom/socket.ts
 function headroomSocketPath(paths, supervisorPid) {
-  return import_node_path7.default.join(paths.headroomSocketDir, `${String(supervisorPid)}${HEADROOM_SOCKET_SUFFIX}`);
+  return import_node_path8.default.join(paths.headroomSocketDir, `${String(supervisorPid)}${HEADROOM_SOCKET_SUFFIX}`);
 }
 function platformRefusal(platform) {
   return PLATFORMS_WITHOUT_UNIX_SOCKETS.includes(platform) ? `headroom routing needs a unix domain socket, which headroom cannot serve on ${platform}; agent-shim never falls back to a TCP port for this hop` : void 0;
@@ -28878,7 +28947,7 @@ function verifyHeadroomSocket(socketPath, ports) {
     return { refused: unsupported };
   }
   const uid = ports.currentUid();
-  const directory = import_node_path7.default.dirname(socketPath);
+  const directory = import_node_path8.default.dirname(socketPath);
   const refusal2 = ownerOnlyRefusal("socket directory", directory, ports.lstat(directory), "dir", uid) ?? ownerOnlyRefusal("socket", socketPath, ports.lstat(socketPath), "socket", uid);
   return refusal2 === void 0 ? { socketPath } : { refused: refusal2 };
 }
@@ -28892,20 +28961,20 @@ function pathDirectories(target, ports) {
       continue;
     }
     if (name === "..") {
-      current = import_node_path7.default.dirname(current);
+      current = import_node_path8.default.dirname(current);
       continue;
     }
     if (!directories.includes(current)) {
       directories.push(current);
     }
-    const entry = import_node_path7.default.join(current, name);
+    const entry = import_node_path8.default.join(current, name);
     if (pending.length > 0 && ports.lstat(entry)?.kind === "symlink") {
       hops += 1;
       if (hops > MAX_SYMLINK_HOPS) {
         return `the symlinks on the allowlist file's path go more than ${String(MAX_SYMLINK_HOPS)} deep`;
       }
       const linkTarget = ports.readlink(entry);
-      if (import_node_path7.default.isAbsolute(linkTarget)) {
+      if (import_node_path8.default.isAbsolute(linkTarget)) {
         current = "/";
       }
       pending.push(...linkTarget.split("/").reverse());
@@ -28938,7 +29007,7 @@ function verifyAllowlistFile(allowlistFile, ports) {
     return { message: directories, repairable: false };
   }
   const socketDirectory = directories.at(-1);
-  const headroomDirectory = socketDirectory === void 0 ? void 0 : import_node_path7.default.dirname(socketDirectory);
+  const headroomDirectory = socketDirectory === void 0 ? void 0 : import_node_path8.default.dirname(socketDirectory);
   for (const directory of directories) {
     const stat = ports.lstat(directory);
     if (directory === socketDirectory) {
@@ -28988,16 +29057,16 @@ function pruneStaleHeadroomSockets(fs30, paths, isRunning) {
     if (pid === void 0 || isRunning(Number.parseInt(pid, 10))) {
       continue;
     }
-    fs30.removeRecursive(import_node_path7.default.join(paths.headroomSocketDir, name));
+    fs30.removeRecursive(import_node_path8.default.join(paths.headroomSocketDir, name));
     removed.push(name);
   }
   return removed;
 }
-var import_node_path7, GROUP_OR_OTHER_BITS, OCTAL_RADIX, MODE_DIGITS, HEADROOM_SOCKET_SUFFIX, HEADROOM_SOCKET_NAME, UNIX_SOCKET_PATH_MAX_BYTES, PLATFORMS_WITHOUT_UNIX_SOCKETS, KIND_NAMES, MAX_SYMLINK_HOPS, ROOT_UID, GROUP_OR_OTHER_WRITE_BITS, STICKY_BIT, MOVE_ROOT_REMEDY;
+var import_node_path8, GROUP_OR_OTHER_BITS, OCTAL_RADIX, MODE_DIGITS, HEADROOM_SOCKET_SUFFIX, HEADROOM_SOCKET_NAME, UNIX_SOCKET_PATH_MAX_BYTES, PLATFORMS_WITHOUT_UNIX_SOCKETS, KIND_NAMES, MAX_SYMLINK_HOPS, ROOT_UID, GROUP_OR_OTHER_WRITE_BITS, STICKY_BIT, MOVE_ROOT_REMEDY;
 var init_socket = __esm({
   "src/headroom/socket.ts"() {
     "use strict";
-    import_node_path7 = __toESM(require("node:path"), 1);
+    import_node_path8 = __toESM(require("node:path"), 1);
     GROUP_OR_OTHER_BITS = 63;
     OCTAL_RADIX = 8;
     MODE_DIGITS = 4;
@@ -29184,7 +29253,7 @@ async function runSupervisor(initialConfig, ports, options = {}) {
     ports.log(`agent-shim headroom supervisor: repairing the allowlist file: ${problem.message}`);
     try {
       fs30.mkdirPrivate(paths.headroomDir);
-      fs30.mkdirPrivate(import_node_path8.default.dirname(paths.headroomAllowlistFile));
+      fs30.mkdirPrivate(import_node_path9.default.dirname(paths.headroomAllowlistFile));
       writeAllowlistFile(fs30, paths.headroomAllowlistFile, allowlist);
     } catch (error63) {
       return `could not write the headroom allowlist file ${paths.headroomAllowlistFile}: ${error63 instanceof Error ? error63.message : String(error63)}`;
@@ -29406,11 +29475,11 @@ function lastLines(output2) {
   const lines = redactText(output2).split("\n").map((line) => line.trim()).filter((line) => line !== "").map((line) => line.length > DAEMON_EXIT_LOG_LINE_CHARS ? `${line.slice(0, DAEMON_EXIT_LOG_LINE_CHARS)}...` : line);
   return lines.length === 0 ? "(the daemon wrote nothing)" : lines.slice(-DAEMON_EXIT_LOG_LINES).join(" | ");
 }
-var import_node_path8, HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, HEADROOM_POLL_MS, MS_PER_MINUTE, STOP_POLL_MS, TERM_GRACE_MS, KILL_GRACE_MS, HEADROOM_SUPERVISOR_STILL_RUNNING;
+var import_node_path9, HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, HEADROOM_POLL_MS, MS_PER_MINUTE, STOP_POLL_MS, TERM_GRACE_MS, KILL_GRACE_MS, HEADROOM_SUPERVISOR_STILL_RUNNING;
 var init_supervisor = __esm({
   "src/headroom/supervisor.ts"() {
     "use strict";
-    import_node_path8 = __toESM(require("node:path"), 1);
+    import_node_path9 = __toESM(require("node:path"), 1);
     init_schema();
     init_state();
     init_settings();
@@ -29617,7 +29686,7 @@ async function realRunAsync(command, args) {
   });
 }
 function expandHome(filePath) {
-  return filePath.startsWith("~/") ? import_node_path9.default.join(import_node_os2.default.homedir(), filePath.slice(1)) : filePath;
+  return filePath.startsWith("~/") ? import_node_path10.default.join(import_node_os2.default.homedir(), filePath.slice(1)) : filePath;
 }
 function hasDesktopSession() {
   if (process.platform === "darwin") {
@@ -29720,7 +29789,7 @@ function spawnDaemonThroughScript(script) {
   return (paths, subcommand, logPath) => spawnDetachedDaemon({ command: process.execPath, args: [script, subcommand] }, paths, subcommand, logPath);
 }
 function spawnDetachedDaemon(invocation, paths, subcommand, logPath) {
-  import_node_fs3.default.mkdirSync(import_node_path9.default.dirname(logPath), { recursive: true });
+  import_node_fs3.default.mkdirSync(import_node_path10.default.dirname(logPath), { recursive: true });
   const logFd = import_node_fs3.default.openSync(logPath, "a");
   try {
     const child = (0, import_node_child_process3.spawn)(invocation.command, invocation.args, detachedDaemonSpawnOptions(logFd, { ...process.env, AGENT_SHIM_HOME: paths.root }));
@@ -29774,7 +29843,7 @@ function listVersionsDir(dir) {
     throw error63;
   }
   return entries.filter((entry) => entry.isFile()).map((entry) => {
-    const fullPath = import_node_path9.default.join(dir, entry.name);
+    const fullPath = import_node_path10.default.join(dir, entry.name);
     const stat = import_node_fs3.default.statSync(fullPath);
     return {
       name: entry.name,
@@ -29788,7 +29857,7 @@ function windowsPathExtensions(pathext) {
   return (pathext ?? WINDOWS_DEFAULT_PATHEXT).split(";").map((ext) => ext.trim()).filter((ext) => ext.length > 0);
 }
 function resolveExecutableCandidate(dir, name, env) {
-  const candidate = import_node_path9.default.join(dir, name);
+  const candidate = import_node_path10.default.join(dir, name);
   if (env.platform === "win32") {
     const extensions = windowsPathExtensions(env.pathext);
     const alreadyHasRecognisedExtension = extensions.some((ext) => candidate.toLowerCase().endsWith(ext.toLowerCase()));
@@ -29837,13 +29906,13 @@ function resolveOwnExecutablePath(env) {
   if (env.argv1 !== void 0 && !env.argv1.includes("/") && !env.argv1.includes("\\")) {
     return searchPathForExecutable(env.pathDirs, env.argv1, env.findExecutableInDir) ?? env.execPath;
   }
-  const candidate = env.argv1 === void 0 ? env.execPath : import_node_path9.default.resolve(env.cwd, env.argv1);
-  const candidateDir = import_node_path9.default.dirname(candidate);
-  const candidateDirOnPath = env.pathDirs.some((dir) => import_node_path9.default.resolve(dir) === candidateDir);
+  const candidate = env.argv1 === void 0 ? env.execPath : import_node_path10.default.resolve(env.cwd, env.argv1);
+  const candidateDir = import_node_path10.default.dirname(candidate);
+  const candidateDirOnPath = env.pathDirs.some((dir) => import_node_path10.default.resolve(dir) === candidateDir);
   if (candidateDirOnPath) {
     return candidate;
   }
-  const viaPath = searchPathForExecutable(env.pathDirs, import_node_path9.default.basename(candidate), env.findExecutableInDir);
+  const viaPath = searchPathForExecutable(env.pathDirs, import_node_path10.default.basename(candidate), env.findExecutableInDir);
   return viaPath ?? candidate;
 }
 function realOwnExecutablePath() {
@@ -29851,7 +29920,7 @@ function realOwnExecutablePath() {
     argv1: process.argv[1],
     execPath: process.execPath,
     cwd: process.cwd(),
-    pathDirs: (process.env.PATH ?? "").split(import_node_path9.default.delimiter).filter((dir) => dir !== ""),
+    pathDirs: (process.env.PATH ?? "").split(import_node_path10.default.delimiter).filter((dir) => dir !== ""),
     findExecutableInDir
   });
 }
@@ -29864,7 +29933,7 @@ function realContentSourcePath() {
 function realResolveClaudeBinary(isOwnBinary) {
   return (request7) => discoverClaudeBinary({
     listVersionsDir,
-    pathDirs: (process.env.PATH ?? "").split(import_node_path9.default.delimiter).filter((dir) => dir !== ""),
+    pathDirs: (process.env.PATH ?? "").split(import_node_path10.default.delimiter).filter((dir) => dir !== ""),
     findExecutableInDir,
     isOwnBinary,
     ...request7?.version === void 0 ? {} : { version: request7.version }
@@ -29873,7 +29942,7 @@ function realResolveClaudeBinary(isOwnBinary) {
 function realInstalledClaudeVersions() {
   return installedVersions(listVersionsDir(defaultVersionsDir()));
 }
-var import_node_child_process3, import_node_crypto4, import_node_fs3, import_node_os2, import_node_path9, import_node_sea, realFsPort, OWNER_ONLY_DIR_MODE, OWNER_ONLY_FILE_MODE, PERMISSION_BITS, realFarmFs, INT32_BYTE_LENGTH, KEY_POLL_MS, CTRL_C_BYTE, realHoldPort, LINE_FEED, UTF8_CONTINUATION_MASK, UTF8_CONTINUATION_BITS, PS_TIMEOUT_MS, realRunPort, MACOS_GUI_SESSION_MANAGER, realCredentialPort, realAsyncCredentialPort, SOCKET_PERMISSION_BITS, realHeadroomSocketTrust, realSpawnPort, realProcPort, realLogPort, EXECUTE_BITS_MASK, WINDOWS_DEFAULT_PATHEXT;
+var import_node_child_process3, import_node_crypto4, import_node_fs3, import_node_os2, import_node_path10, import_node_sea, realFsPort, OWNER_ONLY_DIR_MODE, OWNER_ONLY_FILE_MODE, PERMISSION_BITS, realFarmFs, INT32_BYTE_LENGTH, KEY_POLL_MS, CTRL_C_BYTE, realHoldPort, LINE_FEED, UTF8_CONTINUATION_MASK, UTF8_CONTINUATION_BITS, PS_TIMEOUT_MS, realRunPort, MACOS_GUI_SESSION_MANAGER, realCredentialPort, realAsyncCredentialPort, SOCKET_PERMISSION_BITS, realHeadroomSocketTrust, realSpawnPort, realProcPort, realLogPort, EXECUTE_BITS_MASK, WINDOWS_DEFAULT_PATHEXT;
 var init_realPorts = __esm({
   "src/realPorts.ts"() {
     "use strict";
@@ -29883,7 +29952,7 @@ var init_realPorts = __esm({
     import_node_crypto4 = require("node:crypto");
     import_node_fs3 = __toESM(require("node:fs"), 1);
     import_node_os2 = __toESM(require("node:os"), 1);
-    import_node_path9 = __toESM(require("node:path"), 1);
+    import_node_path10 = __toESM(require("node:path"), 1);
     import_node_sea = require("node:sea");
     init_load();
     init_versionDiscovery();
@@ -30157,10 +30226,10 @@ function isInvokedAsClaude(invokedName) {
 }
 function resolveOwnBinaryCheck(paths, contentSourcePath) {
   const state = readJson(paths.claudeShimFile, ClaudeShimStateSchema);
-  const recordedTarget = state === void 0 ? void 0 : import_node_path10.default.resolve(state.targetPath);
+  const recordedTarget = state === void 0 ? void 0 : import_node_path11.default.resolve(state.targetPath);
   let ownStat;
   return (candidate) => {
-    if (recordedTarget !== void 0 && import_node_path10.default.resolve(candidate) === recordedTarget) {
+    if (recordedTarget !== void 0 && import_node_path11.default.resolve(candidate) === recordedTarget) {
       return true;
     }
     ownStat ??= statOrUndefined(contentSourcePath);
@@ -30170,7 +30239,7 @@ function resolveOwnBinaryCheck(paths, contentSourcePath) {
   };
 }
 function resolveClaudeTargetPath(ownExecutablePath, dir) {
-  return import_node_path10.default.join(dir ?? import_node_path10.default.dirname(ownExecutablePath), claudeTargetFilename(ownExecutablePath));
+  return import_node_path11.default.join(dir ?? import_node_path11.default.dirname(ownExecutablePath), claudeTargetFilename(ownExecutablePath));
 }
 function isEnoent3(error63) {
   return typeof error63 === "object" && error63 !== null && "code" in error63 && error63.code === "ENOENT";
@@ -30204,13 +30273,13 @@ function enableClaudeShim(params, linkFs = nodeLinkFs) {
     throw new UnsupportedShimSourceError(realContentPath);
   }
   const targetPath = resolveClaudeTargetPath(params.ownExecutablePath, params.dir);
-  import_node_fs4.default.mkdirSync(import_node_path10.default.dirname(targetPath), { recursive: true });
+  import_node_fs4.default.mkdirSync(import_node_path11.default.dirname(targetPath), { recursive: true });
   const existing = lstatOrUndefined(targetPath);
   if (existing !== void 0) {
     const ownStat = import_node_fs4.default.statSync(realContentPath);
     const state = readJson(params.paths.claudeShimFile, ClaudeShimStateSchema);
     const sameInode = existing.dev === ownStat.dev && existing.ino === ownStat.ino;
-    const markerMatches = state !== void 0 && import_node_path10.default.resolve(state.targetPath) === targetPath;
+    const markerMatches = state !== void 0 && import_node_path11.default.resolve(state.targetPath) === targetPath;
     if (!sameInode && !markerMatches && !params.force) {
       throw new ForeignClaudeEntryError(targetPath, "enable");
     }
@@ -30235,7 +30304,7 @@ function enableClaudeShim(params, linkFs = nodeLinkFs) {
 function disableClaudeShim(params) {
   const realContentPath = import_node_fs4.default.realpathSync(params.contentSourcePath);
   const state = readJson(params.paths.claudeShimFile, ClaudeShimStateSchema);
-  const targetPath = params.dir !== void 0 ? import_node_path10.default.join(params.dir, claudeTargetFilename(params.ownExecutablePath)) : state?.targetPath ?? resolveClaudeTargetPath(params.ownExecutablePath);
+  const targetPath = params.dir !== void 0 ? import_node_path11.default.join(params.dir, claudeTargetFilename(params.ownExecutablePath)) : state?.targetPath ?? resolveClaudeTargetPath(params.ownExecutablePath);
   const existing = lstatOrUndefined(targetPath);
   if (existing === void 0) {
     if (state !== void 0) {
@@ -30245,7 +30314,7 @@ function disableClaudeShim(params) {
   }
   const ownStat = import_node_fs4.default.statSync(realContentPath);
   const sameInode = existing.dev === ownStat.dev && existing.ino === ownStat.ino;
-  const markerMatches = state !== void 0 && import_node_path10.default.resolve(state.targetPath) === targetPath;
+  const markerMatches = state !== void 0 && import_node_path11.default.resolve(state.targetPath) === targetPath;
   if (!sameInode && !markerMatches && !params.force) {
     throw new ForeignClaudeEntryError(targetPath, "disable");
   }
@@ -30254,15 +30323,15 @@ function disableClaudeShim(params) {
   return { action: "disabled", targetPath };
 }
 function findPathShadow(params) {
-  const resolvedTargetDir = import_node_path10.default.resolve(params.targetDir);
+  const resolvedTargetDir = import_node_path11.default.resolve(params.targetDir);
   for (const dir of params.pathDirs) {
     const found = params.findExecutableInDir(dir, params.targetFilename);
     if (found === void 0) {
       continue;
     }
-    return import_node_path10.default.resolve(dir) === resolvedTargetDir ? { status: "ok" } : { status: "shadowed", by: found };
+    return import_node_path11.default.resolve(dir) === resolvedTargetDir ? { status: "ok" } : { status: "shadowed", by: found };
   }
-  return params.pathDirs.some((dir) => import_node_path10.default.resolve(dir) === resolvedTargetDir) ? { status: "ok" } : { status: "not-on-path" };
+  return params.pathDirs.some((dir) => import_node_path11.default.resolve(dir) === resolvedTargetDir) ? { status: "ok" } : { status: "not-on-path" };
 }
 function registerShimCommand(program2, deps) {
   const { paths } = deps;
@@ -30280,21 +30349,21 @@ function registerShimCommand(program2, deps) {
       ownExecutablePath,
       contentSourcePath,
       platform: process.platform,
-      ...options.dir === void 0 ? {} : { dir: import_node_path10.default.resolve(options.dir) },
+      ...options.dir === void 0 ? {} : { dir: import_node_path11.default.resolve(options.dir) },
       force: options.force ?? false
     });
     console.log(`${result.action === "enabled" ? "Installed" : "Reinstalled"} \`claude\` at ${result.targetPath} (${result.method}).`);
     const shadow = findPathShadow({
-      pathDirs: (process.env.PATH ?? "").split(import_node_path10.default.delimiter).filter((dir) => dir !== ""),
-      targetDir: import_node_path10.default.dirname(result.targetPath),
-      targetFilename: import_node_path10.default.basename(result.targetPath),
+      pathDirs: (process.env.PATH ?? "").split(import_node_path11.default.delimiter).filter((dir) => dir !== ""),
+      targetDir: import_node_path11.default.dirname(result.targetPath),
+      targetFilename: import_node_path11.default.basename(result.targetPath),
       findExecutableInDir
     });
     if (shadow.status === "not-on-path") {
-      console.warn(`warning: ${import_node_path10.default.dirname(result.targetPath)} is not on PATH \u2014 add it, or use \`agent-shim run\` instead.`);
+      console.warn(`warning: ${import_node_path11.default.dirname(result.targetPath)} is not on PATH \u2014 add it, or use \`agent-shim run\` instead.`);
     } else if (shadow.status === "shadowed") {
       console.warn(
-        `warning: 'claude' on PATH currently resolves to ${shadow.by}, not ${result.targetPath}. Put ${import_node_path10.default.dirname(result.targetPath)} ahead of it on PATH.`
+        `warning: 'claude' on PATH currently resolves to ${shadow.by}, not ${result.targetPath}. Put ${import_node_path11.default.dirname(result.targetPath)} ahead of it on PATH.`
       );
     }
   });
@@ -30306,7 +30375,7 @@ function registerShimCommand(program2, deps) {
       paths,
       ownExecutablePath,
       contentSourcePath,
-      ...options.dir === void 0 ? {} : { dir: import_node_path10.default.resolve(options.dir) },
+      ...options.dir === void 0 ? {} : { dir: import_node_path11.default.resolve(options.dir) },
       force: options.force ?? false
     });
     console.log(
@@ -30315,12 +30384,12 @@ function registerShimCommand(program2, deps) {
   });
   withExamples(disable, ["agent-shim shim disable"]);
 }
-var import_node_fs4, import_node_path10, EXECUTABLE_FILE_MODE, ClaudeShimStateSchema, ForeignClaudeEntryError, UnsupportedShimSourceError, nodeLinkFs;
+var import_node_fs4, import_node_path11, EXECUTABLE_FILE_MODE, ClaudeShimStateSchema, ForeignClaudeEntryError, UnsupportedShimSourceError, nodeLinkFs;
 var init_claudeShim = __esm({
   "src/claudeShim.ts"() {
     "use strict";
     import_node_fs4 = __toESM(require("node:fs"), 1);
-    import_node_path10 = __toESM(require("node:path"), 1);
+    import_node_path11 = __toESM(require("node:path"), 1);
     init_zod();
     init_commandDeps();
     init_store();
@@ -30718,8 +30787,8 @@ var require_utils = __commonJS({
       }
       return output2;
     };
-    exports2.basename = (path72, { windows } = {}) => {
-      const segs = path72.split(windows ? /[\\/]/ : "/");
+    exports2.basename = (path70, { windows } = {}) => {
+      const segs = path70.split(windows ? /[\\/]/ : "/");
       const last = segs[segs.length - 1];
       if (last === "") {
         return segs[segs.length - 2];
@@ -32402,6 +32471,9 @@ function isNonEmpty(value2) {
   return value2 !== void 0 && value2 !== "";
 }
 function selected(selector, source) {
+  if (!IdentitySelectorSchema.safeParse(selector).success) {
+    throw new UnsafeNameError(selector, "identity", `${FILE_NAME_RULE}, or be pool:<name> for a pool`, IDENTITY_SOURCE_LABELS[source]);
+  }
   const pool = poolNameOf(selector);
   return pool === void 0 ? { name: selector, source, configDirEscapeHatch: false } : { pool, source, configDirEscapeHatch: false };
 }
@@ -32443,14 +32515,18 @@ function decideConfigProfile(params) {
   return { source: "none" };
 }
 function loadIdentity(identitiesDir, name, fs30) {
-  return loadConfigFile(import_node_path11.default.join(identitiesDir, name, "identity.json"), IdentitySchema, fs30.readConfigFile);
+  if (!isFileName(name)) {
+    throw new UnsafeNameError(name, "identity", FILE_NAME_RULE);
+  }
+  return loadConfigFile(import_node_path12.default.join(identitiesDir, name, "identity.json"), IdentitySchema, fs30.readConfigFile);
 }
-var import_node_path11, IDENTITY_DECISION_SOURCES, CONFIG_PROFILE_DECISION_SOURCES;
+var import_node_path12, IDENTITY_DECISION_SOURCES, IDENTITY_SOURCE_LABELS, CONFIG_PROFILE_DECISION_SOURCES;
 var init_identity = __esm({
   "src/launcher/identity.ts"() {
     "use strict";
-    import_node_path11 = __toESM(require("node:path"), 1);
+    import_node_path12 = __toESM(require("node:path"), 1);
     init_load();
+    init_names();
     init_schema();
     IDENTITY_DECISION_SOURCES = [
       /** `CLAUDE_CONFIG_DIR` was already set: identity resolution is skipped entirely and the real binary uses whatever it already points to. */
@@ -32466,6 +32542,14 @@ var init_identity = __esm({
       /** Nothing resolved an identity at all — a bare launch with no active identity. */
       "none"
     ];
+    IDENTITY_SOURCE_LABELS = {
+      "config-dir-escape-hatch": "CLAUDE_CONFIG_DIR",
+      argv: "the identity named on the command line",
+      env: "AGENT_SHIM_IDENTITY",
+      "directory-pin": "a directory rule",
+      "active-identity-file": "the active-identity file",
+      none: "nothing"
+    };
     CONFIG_PROFILE_DECISION_SOURCES = [
       /** An explicit `--config-profile` CLI flag. */
       "cli-flag",
@@ -32484,9 +32568,9 @@ var init_identity = __esm({
 });
 
 // src/statusline/keys.ts
-function valueAt(source, path72) {
+function valueAt(source, path70) {
   let current = source;
-  for (const part of path72) {
+  for (const part of path70) {
     if (!isPlainObject2(current)) {
       return void 0;
     }
@@ -32494,10 +32578,10 @@ function valueAt(source, path72) {
   }
   return current;
 }
-function keyOf(path72, declared) {
+function keyOf(path70, declared) {
   const optional2 = declared instanceof external_exports.ZodOptional;
   const leaf = optional2 ? declared.unwrap() : declared;
-  const common = { path: path72.join("."), description: declared.description ?? "", defaultValue: valueAt(STATUSLINE_DEFAULTS, path72), optional: optional2 };
+  const common = { path: path70.join("."), description: declared.description ?? "", defaultValue: valueAt(STATUSLINE_DEFAULTS, path70), optional: optional2 };
   if (leaf instanceof external_exports.ZodNumber) {
     return { ...common, kind: "integer", choices: [] };
   }
@@ -32516,7 +32600,7 @@ function keyOf(path72, declared) {
   if (leaf instanceof external_exports.ZodArray && leaf.element instanceof external_exports.ZodEnum) {
     return { ...common, kind: "list", choices: Object.values(leaf.element.enum).map(String) };
   }
-  throw new TypeError(`statusline setting ${path72.join(".")} has a kind the key listing does not describe`);
+  throw new TypeError(`statusline setting ${path70.join(".")} has a kind the key listing does not describe`);
 }
 function walk(shape, prefix) {
   return Object.entries(shape).flatMap(([name, schema]) => schema instanceof external_exports.ZodObject ? walk(schema.shape, [...prefix, name]) : [keyOf([...prefix, name], schema)]);
@@ -32540,10 +32624,10 @@ var init_keys = __esm({
 });
 
 // src/statusline/change.ts
-function keyNamed(path72) {
-  const found = statuslineKeys().find((key) => key.path === path72);
+function keyNamed(path70) {
+  const found = statuslineKeys().find((key) => key.path === path70);
   if (found === void 0) {
-    throw new UsageError(`"${path72}" is not a statusline setting; \`agent-shim statusline keys\` lists them.`);
+    throw new UsageError(`"${path70}" is not a statusline setting; \`agent-shim statusline keys\` lists them.`);
   }
   return found;
 }
@@ -32552,38 +32636,38 @@ function parseStatuslineAssignment(text5) {
   if (split < 1) {
     throw new UsageError(`"${text5}" is not <setting>=<value>.`);
   }
-  const path72 = text5.slice(0, split);
+  const path70 = text5.slice(0, split);
   const raw = text5.slice(split + 1);
-  const key = keyNamed(path72);
+  const key = keyNamed(path70);
   if (key.optional && raw === UNSET_WORD) {
-    return { path: path72, value: null };
+    return { path: path70, value: null };
   }
   switch (key.kind) {
     case "integer": {
       const number6 = Number(raw);
       if (raw.trim() === "" || !Number.isFinite(number6)) {
-        throw new UsageError(`${path72}: "${raw}" is not a number.`);
+        throw new UsageError(`${path70}: "${raw}" is not a number.`);
       }
-      return { path: path72, value: number6 };
+      return { path: path70, value: number6 };
     }
     case "boolean":
       if (raw !== "true" && raw !== "false") {
-        throw new UsageError(`${path72}: "${raw}" is not true or false.`);
+        throw new UsageError(`${path70}: "${raw}" is not true or false.`);
       }
-      return { path: path72, value: raw === "true" };
+      return { path: path70, value: raw === "true" };
     case "text":
     case "choice":
-      return { path: path72, value: raw };
+      return { path: path70, value: raw };
     case "colour":
-      return { path: path72, value: /^\d+$/.test(raw) ? Number(raw) : raw };
+      return { path: path70, value: /^\d+$/.test(raw) ? Number(raw) : raw };
     case "list":
-      return { path: path72, value: raw === "" ? [] : raw.split(",") };
+      return { path: path70, value: raw === "" ? [] : raw.split(",") };
     default:
       return key.kind;
   }
 }
-function setAt(target, path72, value2) {
-  const [head, ...rest] = path72;
+function setAt(target, path70, value2) {
+  const [head, ...rest] = path70;
   if (head === void 0) {
     return;
   }
@@ -32596,8 +32680,8 @@ function setAt(target, path72, value2) {
   target[head] = next;
   setAt(next, rest, value2);
 }
-function removeAt(target, path72) {
-  const [head, ...rest] = path72;
+function removeAt(target, path70) {
+  const [head, ...rest] = path70;
   if (head === void 0) {
     return;
   }
@@ -32615,13 +32699,13 @@ function removeAt(target, path72) {
 }
 function applyStatuslineChange(existing, change) {
   const draft = structuredClone(existing ?? {});
-  for (const [path72, value2] of Object.entries(change.set ?? {})) {
-    keyNamed(path72);
-    setAt(draft, path72.split("."), value2);
+  for (const [path70, value2] of Object.entries(change.set ?? {})) {
+    keyNamed(path70);
+    setAt(draft, path70.split("."), value2);
   }
-  for (const path72 of change.unset ?? []) {
-    keyNamed(path72);
-    removeAt(draft, path72.split("."));
+  for (const path70 of change.unset ?? []) {
+    keyNamed(path70);
+    removeAt(draft, path70.split("."));
   }
   const result = StatuslineSchema.safeParse(draft);
   if (!result.success) {
@@ -32642,7 +32726,7 @@ var init_change = __esm({
 
 // src/configProfilesStore.ts
 function profileJsonPath(paths, name) {
-  return import_node_path12.default.join(paths.configProfilesDir, `${name}.json`);
+  return profileFilePath(paths.configProfilesDir, name);
 }
 function profileExists(paths, name) {
   return import_node_fs5.default.existsSync(profileJsonPath(paths, name));
@@ -32656,6 +32740,9 @@ function readProfile(paths, name) {
   return readJson(profileJsonPath(paths, name), ConfigProfileSchema);
 }
 function createProfile(paths, name, extendsList, description) {
+  if (!isFileName(name)) {
+    throw new UnsafeNameError(name, "configuration profile", FILE_NAME_RULE);
+  }
   if (profileExists(paths, name)) {
     throw new ProfileAlreadyExistsError(name);
   }
@@ -32670,13 +32757,20 @@ function createProfile(paths, name, extendsList, description) {
   writeJsonAtomic(filePath, parsed.data);
   return parsed.data;
 }
-function listProfiles(paths) {
+function reportUnusableProfileName(name, message) {
+  console.error(`agent-shim: config-profiles/${name}.json is skipped: ${message}`);
+}
+function listProfiles(paths, onUnusable = reportUnusableProfileName) {
   if (!import_node_fs5.default.existsSync(paths.configProfilesDir)) {
     return [];
   }
   const names = import_node_fs5.default.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort();
   const result = [];
   for (const name of names) {
+    if (!isStoredName(name)) {
+      onUnusable(name, `its name ${JSON.stringify(name)} is not usable, so the file is ignored. Rename or remove it.`);
+      continue;
+    }
     const profile = readProfile(paths, name);
     if (profile !== void 0) {
       result.push({ name, profile });
@@ -32796,17 +32890,17 @@ function applyProfileChange(paths, name, change) {
   }
   return touched;
 }
-var import_node_fs5, import_node_path12, ProfileNotFoundError, ProfileAlreadyExistsError, InvalidCategoryNameError;
+var import_node_fs5, ProfileNotFoundError, ProfileAlreadyExistsError, InvalidCategoryNameError;
 var init_configProfilesStore = __esm({
   "src/configProfilesStore.ts"() {
     "use strict";
     import_node_fs5 = __toESM(require("node:fs"), 1);
-    import_node_path12 = __toESM(require("node:path"), 1);
     init_store();
     init_schema();
     init_cliError();
     init_change();
     init_load();
+    init_names();
     ProfileNotFoundError = class extends CliError {
       constructor(profileName) {
         super(`No configuration profile named "${profileName}". Run \`agent-shim profile add ${profileName}\` first.`);
@@ -33141,7 +33235,7 @@ function loadCascadeInput(params) {
   const globalConfig2 = loadConfigFile(params.paths.globalConfigFile, GlobalConfigSchema, params.read);
   const directoryRules = loadConfigFile(params.paths.directoryRulesFile, DirectoryRulesSchema, params.read);
   const loadProfile = (name) => {
-    const filepath = import_node_path17.default.join(params.paths.configProfilesDir, `${name}.json`);
+    const filepath = profileFilePath(params.paths.configProfilesDir, name);
     const loaded = loadConfigFile(filepath, ConfigProfileSchema, params.read);
     if (loaded === void 0) {
       return void 0;
@@ -33214,6 +33308,7 @@ var init_cascade = __esm({
     init_pathNorm();
     init_walk();
     init_legacy();
+    init_names();
     PORTABLE_CONFIG_FILENAME = ".agent-shim.json";
     PORTABLE_LOCAL_CONFIG_FILENAME = ".agent-shim.local.json";
   }
@@ -36100,11 +36195,11 @@ function identifyRequest(headers) {
 function directOrigin2(port) {
   return `http://127.0.0.1:${String(port)}`;
 }
-function parseProviderPath(path72) {
-  if (!path72.startsWith(PROVIDER_PATH_PREFIX)) {
+function parseProviderPath(path70) {
+  if (!path70.startsWith(PROVIDER_PATH_PREFIX)) {
     return void 0;
   }
-  const tail = path72.slice(PROVIDER_PATH_PREFIX.length);
+  const tail = path70.slice(PROVIDER_PATH_PREFIX.length);
   const slash = tail.indexOf("/");
   if (slash <= 0) {
     return void 0;
@@ -36378,8 +36473,8 @@ function parseConnectTarget(authority) {
   }
   return { host, port };
 }
-function servedByPipeline(path72) {
-  return path72?.startsWith(ROUTED_PATH_PREFIX) === true;
+function servedByPipeline(path70) {
+  return path70?.startsWith(ROUTED_PATH_PREFIX) === true;
 }
 function forwardableHeaders(headers) {
   const connectionTokens = new Set(
@@ -36857,7 +36952,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.60.0",
+      version: "11.60.2",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -37380,12 +37475,12 @@ function decoderFor(encoding) {
       return void 0;
   }
 }
-function destinationOf(path72, sessionProvider) {
-  const scoped = parseProviderPath(path72);
+function destinationOf(path70, sessionProvider) {
+  const scoped = parseProviderPath(path70);
   if (scoped !== void 0) {
     return { provider: scoped.provider, endpoint: scoped.rest };
   }
-  return { provider: sessionProvider ?? ANTHROPIC_PROVIDER, endpoint: path72 };
+  return { provider: sessionProvider ?? ANTHROPIC_PROVIDER, endpoint: path70 };
 }
 function modelChoiceOf(event, servedModel, provider) {
   if (event.modelChoice !== void 0) return event.modelChoice;
@@ -38734,13 +38829,11 @@ var init_families = __esm({
 });
 
 // src/providersStore.ts
-function requireValidProviderName(name) {
-  if (!PROVIDER_NAME_RE.test(name)) {
-    throw new InvalidProviderNameError(name);
-  }
-}
 function providerJsonPath(paths, name) {
-  return import_node_path30.default.join(paths.providersDir, `${name}.json`);
+  return providerFilePath(paths.providersDir, name);
+}
+function providerFileDefined(lstat, providersDir, name) {
+  return isStoredName(name) && lstat(providerFilePath(providersDir, name)) !== void 0;
 }
 function providerExists(paths, name) {
   return import_node_fs11.default.existsSync(providerJsonPath(paths, name));
@@ -38801,7 +38894,7 @@ function readProvider(paths, name) {
   return parseProviderFile(filePath, raw);
 }
 function loadProvider(providersDir, name, port) {
-  const filePath = import_node_path30.default.join(providersDir, `${name}.json`);
+  const filePath = providerFilePath(providersDir, name);
   const raw = port.readConfigFile(filePath);
   return raw === void 0 ? void 0 : parseProviderFile(filePath, raw);
 }
@@ -38819,7 +38912,7 @@ function listProviders(paths, onInvalid = reportInvalidProvider) {
     try {
       provider = readProvider(paths, name);
     } catch (error63) {
-      if (!(error63 instanceof ConfigValidationError || error63 instanceof LegacyProviderFileError)) {
+      if (!(error63 instanceof ConfigValidationError || error63 instanceof LegacyProviderFileError || error63 instanceof UnsafeNameError)) {
         throw error63;
       }
       onInvalid(name, error63.message);
@@ -38859,7 +38952,7 @@ function addProvider(paths, name, input2) {
   if (providerExists(paths, name)) {
     throw new ProviderAlreadyExistsError(name);
   }
-  requireValidProviderName(name);
+  requireNewProviderName(name);
   const kind = input2.kind ?? "http";
   if (kind === "codex" && input2.baseUrl !== void 0) {
     throw new ProviderKindMismatchError("A codex provider has no base URL: the launcher points its sessions at the front-door daemon. Drop --base-url.");
@@ -39083,12 +39176,11 @@ function resolveRoutedProviderCredentials(params) {
   }
   return { ok: true, checked: [...providerNames].sort() };
 }
-var import_node_fs11, import_node_path30, ProviderNotFoundError, ProviderAlreadyExistsError, InvalidProviderNameError, PROVIDER_NAME_RE, LEGACY_PROVIDER_FIELDS, LEGACY_ENV_CREDENTIAL_KEYS, LEGACY_LITERAL_PLACEHOLDER, LegacyProviderFileError, ProviderKindMismatchError;
+var import_node_fs11, ProviderNotFoundError, ProviderAlreadyExistsError, LEGACY_PROVIDER_FIELDS, LEGACY_ENV_CREDENTIAL_KEYS, LEGACY_LITERAL_PLACEHOLDER, LegacyProviderFileError, ProviderKindMismatchError;
 var init_providersStore = __esm({
   "src/providersStore.ts"() {
     "use strict";
     import_node_fs11 = __toESM(require("node:fs"), 1);
-    import_node_path30 = __toESM(require("node:path"), 1);
     init_load();
     init_store();
     init_unrecognisedKeys();
@@ -39098,6 +39190,7 @@ var init_providersStore = __esm({
     init_credential();
     init_walk();
     init_families();
+    init_names();
     ProviderNotFoundError = class extends CliError {
       constructor(name) {
         super(`No provider named "${name}". Run \`agent-shim provider add ${name}\` first.`);
@@ -39114,17 +39207,6 @@ var init_providersStore = __esm({
       }
       providerName;
     };
-    InvalidProviderNameError = class extends CliError {
-      constructor(attemptedName) {
-        super(
-          `"${attemptedName}" is not a valid provider name. Provider names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
-        );
-        this.attemptedName = attemptedName;
-        this.name = "InvalidProviderNameError";
-      }
-      attemptedName;
-    };
-    PROVIDER_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._@-]*$/;
     LEGACY_PROVIDER_FIELDS = ["tokenEnv", "tokenCommand", "authScheme"];
     LEGACY_ENV_CREDENTIAL_KEYS = Object.values(CREDENTIAL_TARGET_VARS);
     LEGACY_LITERAL_PLACEHOLDER = "<the value of env.ANTHROPIC_AUTH_TOKEN>";
@@ -39170,7 +39252,7 @@ function decideSignIn(facts) {
   return { state: "signed-out", detail: facts.platform === "darwin" ? `no Keychain item and no ${CREDENTIALS_FILE}` : `no ${CREDENTIALS_FILE}` };
 }
 function credentialsFilePath(farmRoot) {
-  return import_node_path31.default.join(farmRoot, CREDENTIALS_FILE);
+  return import_node_path30.default.join(farmRoot, CREDENTIALS_FILE);
 }
 function identitySignIn(fs30, probe, identity) {
   const probing = !identity.hasCredentialBlock;
@@ -39181,12 +39263,12 @@ function identitySignIn(fs30, probe, identity) {
     platform: probe.platform
   });
 }
-var import_node_crypto9, import_node_path31, CREDENTIALS_FILE, KEYCHAIN_SERVICE_PREFIX, KEYCHAIN_SERVICE_HASH_DIGITS;
+var import_node_crypto9, import_node_path30, CREDENTIALS_FILE, KEYCHAIN_SERVICE_PREFIX, KEYCHAIN_SERVICE_HASH_DIGITS;
 var init_signIn = __esm({
   "src/usage/signIn.ts"() {
     "use strict";
     import_node_crypto9 = require("node:crypto");
-    import_node_path31 = __toESM(require("node:path"), 1);
+    import_node_path30 = __toESM(require("node:path"), 1);
     CREDENTIALS_FILE = ".credentials.json";
     KEYCHAIN_SERVICE_PREFIX = "Claude Code-credentials";
     KEYCHAIN_SERVICE_HASH_DIGITS = 8;
@@ -40421,14 +40503,14 @@ var require_util2 = __commonJS({
         }
         const port = url2.port != null ? url2.port : url2.protocol === "https:" ? 443 : 80;
         let origin = url2.origin != null ? url2.origin : `${url2.protocol || ""}//${url2.hostname || ""}:${port}`;
-        let path72 = url2.path != null ? url2.path : `${url2.pathname || ""}${url2.search || ""}`;
+        let path70 = url2.path != null ? url2.path : `${url2.pathname || ""}${url2.search || ""}`;
         if (origin[origin.length - 1] === "/") {
           origin = origin.slice(0, origin.length - 1);
         }
-        if (path72 && path72[0] !== "/") {
-          path72 = `/${path72}`;
+        if (path70 && path70[0] !== "/") {
+          path70 = `/${path70}`;
         }
-        return new URL(`${origin}${path72}`);
+        return new URL(`${origin}${path70}`);
       }
       if (!isHttpOrHttpsPrefixed(url2.origin || url2.protocol)) {
         throw new InvalidArgumentError2("Invalid URL protocol: the URL must start with `http:` or `https:`.");
@@ -41249,9 +41331,9 @@ var require_diagnostics = __commonJS({
         "undici:client:sendHeaders",
         (evt) => {
           const {
-            request: { method, path: path72, origin }
+            request: { method, path: path70, origin }
           } = evt;
-          debugLog("sending request to %s %s%s", method, origin, path72);
+          debugLog("sending request to %s %s%s", method, origin, path70);
         }
       );
     }
@@ -41269,14 +41351,14 @@ var require_diagnostics = __commonJS({
         "undici:request:headers",
         (evt) => {
           const {
-            request: { method, path: path72, origin },
+            request: { method, path: path70, origin },
             response: { statusCode }
           } = evt;
           debugLog(
             "received response to %s %s%s - HTTP %d",
             method,
             origin,
-            path72,
+            path70,
             statusCode
           );
         }
@@ -41285,23 +41367,23 @@ var require_diagnostics = __commonJS({
         "undici:request:trailers",
         (evt) => {
           const {
-            request: { method, path: path72, origin }
+            request: { method, path: path70, origin }
           } = evt;
-          debugLog("trailers received from %s %s%s", method, origin, path72);
+          debugLog("trailers received from %s %s%s", method, origin, path70);
         }
       );
       diagnosticsChannel.subscribe(
         "undici:request:error",
         (evt) => {
           const {
-            request: { method, path: path72, origin },
+            request: { method, path: path70, origin },
             error: error63
           } = evt;
           debugLog(
             "request to %s %s%s errored - %s",
             method,
             origin,
-            path72,
+            path70,
             error63.message
           );
         }
@@ -41416,7 +41498,7 @@ var require_request = __commonJS({
     var kHandler = /* @__PURE__ */ Symbol("handler");
     var Request2 = class {
       constructor(origin, {
-        path: path72,
+        path: path70,
         method,
         body,
         headers,
@@ -41433,11 +41515,11 @@ var require_request = __commonJS({
         maxRedirections,
         typeOfService
       }, handler) {
-        if (typeof path72 !== "string") {
+        if (typeof path70 !== "string") {
           throw new InvalidArgumentError2("path must be a string");
-        } else if (path72[0] !== "/" && !(path72.startsWith("http://") || path72.startsWith("https://")) && method !== "CONNECT") {
+        } else if (path70[0] !== "/" && !(path70.startsWith("http://") || path70.startsWith("https://")) && method !== "CONNECT") {
           throw new InvalidArgumentError2("path must be an absolute URL or start with a slash");
-        } else if (invalidPathRegex.test(path72)) {
+        } else if (invalidPathRegex.test(path70)) {
           throw new InvalidArgumentError2("invalid request path");
         }
         if (typeof method !== "string") {
@@ -41512,7 +41594,7 @@ var require_request = __commonJS({
         this.completed = false;
         this.aborted = false;
         this.upgrade = upgrade || null;
-        this.path = query ? serializePathWithQuery(path72, query) : path72;
+        this.path = query ? serializePathWithQuery(path70, query) : path70;
         this.origin = origin;
         this.protocol = getProtocolFromUrlString(origin);
         this.idempotent = idempotent == null ? method === "HEAD" || method === "GET" : idempotent;
@@ -46694,7 +46776,7 @@ var require_client_h1 = __commonJS({
       return method !== "GET" && method !== "HEAD" && method !== "OPTIONS" && method !== "TRACE" && method !== "CONNECT";
     }
     function writeH1(client, request7) {
-      const { method, path: path72, host, upgrade, blocking, reset } = request7;
+      const { method, path: path70, host, upgrade, blocking, reset } = request7;
       let { body, headers, contentLength } = request7;
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH" || method === "QUERY" || method === "PROPFIND" || method === "PROPPATCH";
       if (util2.isFormDataLike(body)) {
@@ -46772,7 +46854,7 @@ var require_client_h1 = __commonJS({
       if (socket.setTypeOfService) {
         socket.setTypeOfService(request7.typeOfService);
       }
-      let header = `${method} ${path72} HTTP/1.1\r
+      let header = `${method} ${path70} HTTP/1.1\r
 `;
       if (typeof host === "string") {
         header += `host: ${host}\r
@@ -47451,7 +47533,7 @@ var require_client_h2 = __commonJS({
       const headersTimeout = request7.headersTimeout ?? client[kHeadersTimeout];
       const bodyTimeout = request7.bodyTimeout ?? client[kBodyTimeout];
       const session = client[kHTTP2Session];
-      const { method, path: path72, host, upgrade, expectContinue, signal, protocol, headers: reqHeaders } = request7;
+      const { method, path: path70, host, upgrade, expectContinue, signal, protocol, headers: reqHeaders } = request7;
       let { body } = request7;
       if (upgrade != null && upgrade !== "websocket") {
         util2.errorRequest(client, request7, new InvalidArgumentError2(`Custom upgrade "${upgrade}" not supported over HTTP/2`));
@@ -47520,7 +47602,7 @@ var require_client_h2 = __commonJS({
           }
           headers[HTTP2_HEADER_METHOD] = "CONNECT";
           headers[HTTP2_HEADER_PROTOCOL] = "websocket";
-          headers[HTTP2_HEADER_PATH] = path72;
+          headers[HTTP2_HEADER_PATH] = path70;
           if (protocol === "ws:" || protocol === "wss:") {
             headers[HTTP2_HEADER_SCHEME] = protocol === "ws:" ? "http" : "https";
           } else {
@@ -47562,7 +47644,7 @@ var require_client_h2 = __commonJS({
         stream.setTimeout(headersTimeout);
         return true;
       }
-      headers[HTTP2_HEADER_PATH] = path72;
+      headers[HTTP2_HEADER_PATH] = path70;
       headers[HTTP2_HEADER_SCHEME] = protocol === "http:" ? "http" : "https";
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH";
       if (body && typeof body.read === "function") {
@@ -49914,10 +49996,10 @@ var require_proxy_agent = __commonJS({
         };
         const {
           origin,
-          path: path72 = "/",
+          path: path70 = "/",
           headers = {}
         } = opts;
-        opts.path = origin + path72;
+        opts.path = origin + path70;
         if (!("host" in headers) && !("Host" in headers)) {
           const { host } = new URL(origin);
           headers.host = host;
@@ -52026,20 +52108,20 @@ var require_mock_utils = __commonJS({
       }
       return normalizedQp;
     }
-    function safeUrl(path72) {
-      if (typeof path72 !== "string") {
-        return path72;
+    function safeUrl(path70) {
+      if (typeof path70 !== "string") {
+        return path70;
       }
-      const pathSegments = path72.split("?", 3);
+      const pathSegments = path70.split("?", 3);
       if (pathSegments.length !== 2) {
-        return path72;
+        return path70;
       }
       const qp2 = new URLSearchParams(pathSegments.pop());
       qp2.sort();
       return [...pathSegments, qp2.toString()].join("?");
     }
-    function matchKey(mockDispatch2, { path: path72, method, body, headers }) {
-      const pathMatch = matchValue(mockDispatch2.path, path72);
+    function matchKey(mockDispatch2, { path: path70, method, body, headers }) {
+      const pathMatch = matchValue(mockDispatch2.path, path70);
       const methodMatch = matchValue(mockDispatch2.method, method);
       const bodyMatch = typeof mockDispatch2.body !== "undefined" ? matchValue(mockDispatch2.body, body) : true;
       const headersMatch = matchHeaders(mockDispatch2, headers);
@@ -52064,8 +52146,8 @@ var require_mock_utils = __commonJS({
       const basePath = key.query ? serializePathWithQuery(key.path, key.query) : key.path;
       const resolvedPath = typeof basePath === "string" ? safeUrl(basePath) : basePath;
       const resolvedPathWithoutTrailingSlash = removeTrailingSlash(resolvedPath);
-      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path72, ignoreTrailingSlash }) => {
-        return ignoreTrailingSlash ? matchValue(removeTrailingSlash(safeUrl(path72)), resolvedPathWithoutTrailingSlash) : matchValue(safeUrl(path72), resolvedPath);
+      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path70, ignoreTrailingSlash }) => {
+        return ignoreTrailingSlash ? matchValue(removeTrailingSlash(safeUrl(path70)), resolvedPathWithoutTrailingSlash) : matchValue(safeUrl(path70), resolvedPath);
       });
       if (matchedMockDispatches.length === 0) {
         throw new MockNotMatchedError(`Mock dispatch not matched for path '${resolvedPath}'`);
@@ -52104,19 +52186,19 @@ var require_mock_utils = __commonJS({
         mockDispatches.splice(index, 1);
       }
     }
-    function removeTrailingSlash(path72) {
-      while (path72.endsWith("/")) {
-        path72 = path72.slice(0, -1);
+    function removeTrailingSlash(path70) {
+      while (path70.endsWith("/")) {
+        path70 = path70.slice(0, -1);
       }
-      if (path72.length === 0) {
-        path72 = "/";
+      if (path70.length === 0) {
+        path70 = "/";
       }
-      return path72;
+      return path70;
     }
     function buildKey(opts) {
-      const { path: path72, method, body, headers, query } = opts;
+      const { path: path70, method, body, headers, query } = opts;
       return {
-        path: path72,
+        path: path70,
         method,
         body,
         headers,
@@ -52806,10 +52888,10 @@ var require_pending_interceptors_formatter = __commonJS({
       }
       format(pendingInterceptors) {
         const withPrettyHeaders = pendingInterceptors.map(
-          ({ method, path: path72, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
+          ({ method, path: path70, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
             Method: method,
             Origin: origin,
-            Path: path72,
+            Path: path70,
             "Status code": statusCode,
             Persistent: persist ? PERSISTENT : NOT_PERSISTENT,
             Invocations: timesInvoked,
@@ -52891,9 +52973,9 @@ var require_mock_agent = __commonJS({
         const acceptNonStandardSearchParameters = this[kMockAgentAcceptsNonStandardSearchParameters];
         const dispatchOpts = { ...opts };
         if (acceptNonStandardSearchParameters && dispatchOpts.path) {
-          const [path72, searchParams] = dispatchOpts.path.split("?");
+          const [path70, searchParams] = dispatchOpts.path.split("?");
           const normalizedSearchParams = normalizeSearchParams(searchParams, acceptNonStandardSearchParameters);
-          dispatchOpts.path = `${path72}?${normalizedSearchParams}`;
+          dispatchOpts.path = `${path70}?${normalizedSearchParams}`;
         }
         return this[kAgent].dispatch(dispatchOpts, handler);
       }
@@ -53294,12 +53376,12 @@ var require_snapshot_recorder = __commonJS({
        * @return {Promise<void>} - Resolves when snapshots are loaded
        */
       async loadSnapshots(filePath) {
-        const path72 = filePath || this.#snapshotPath;
-        if (!path72) {
+        const path70 = filePath || this.#snapshotPath;
+        if (!path70) {
           throw new InvalidArgumentError2("Snapshot path is required");
         }
         try {
-          const data = await readFile(resolve2(path72), "utf8");
+          const data = await readFile(resolve2(path70), "utf8");
           const parsed = JSON.parse(data);
           if (Array.isArray(parsed)) {
             this.#snapshots.clear();
@@ -53313,7 +53395,7 @@ var require_snapshot_recorder = __commonJS({
           if (error63.code === "ENOENT") {
             this.#snapshots.clear();
           } else {
-            throw new UndiciError(`Failed to load snapshots from ${path72}`, { cause: error63 });
+            throw new UndiciError(`Failed to load snapshots from ${path70}`, { cause: error63 });
           }
         }
       }
@@ -53324,11 +53406,11 @@ var require_snapshot_recorder = __commonJS({
        * @returns {Promise<void>} - Resolves when snapshots are saved
        */
       async saveSnapshots(filePath) {
-        const path72 = filePath || this.#snapshotPath;
-        if (!path72) {
+        const path70 = filePath || this.#snapshotPath;
+        if (!path70) {
           throw new InvalidArgumentError2("Snapshot path is required");
         }
-        const resolvedPath = resolve2(path72);
+        const resolvedPath = resolve2(path70);
         await mkdir(dirname3(resolvedPath), { recursive: true });
         const data = Array.from(this.#snapshots.entries()).map(([hash2, snapshot]) => ({
           hash: hash2,
@@ -53960,15 +54042,15 @@ var require_redirect_handler = __commonJS({
           return;
         }
         const { origin, pathname, search } = util2.parseURL(new URL(this.location, this.opts.origin && new URL(this.opts.path, this.opts.origin)));
-        const path72 = search ? `${pathname}${search}` : pathname;
-        const redirectUrlString = `${origin}${path72}`;
+        const path70 = search ? `${pathname}${search}` : pathname;
+        const redirectUrlString = `${origin}${path70}`;
         for (const historyUrl of this.history) {
           if (historyUrl.toString() === redirectUrlString) {
             throw new InvalidArgumentError2(`Redirect loop detected. Cannot redirect to ${origin}. This typically happens when using a Client or Pool with cross-origin redirects. Use an Agent for cross-origin redirects.`);
           }
         }
         this.opts.headers = cleanRequestHeaders(this.opts.headers, statusCode === 303, this.opts.origin !== origin);
-        this.opts.path = path72;
+        this.opts.path = path70;
         this.opts.origin = origin;
         this.opts.query = null;
       }
@@ -55728,10 +55810,10 @@ var require_cache_handler = __commonJS({
       }
       return locationUrl.pathname + locationUrl.search;
     }
-    function deleteCachedUri(store, cacheKey, path72) {
+    function deleteCachedUri(store, cacheKey, path70) {
       deleteCachedValue(store, {
         ...cacheKey,
-        path: path72
+        path: path70
       });
       for (let i10 = 0; i10 < util2.safeHTTPMethods.length; i10++) {
         const method = util2.safeHTTPMethods[i10];
@@ -55739,7 +55821,7 @@ var require_cache_handler = __commonJS({
           deleteCachedValue(store, {
             ...cacheKey,
             method,
-            path: path72
+            path: path70
           });
         }
       }
@@ -55750,9 +55832,9 @@ var require_cache_handler = __commonJS({
       }
       const values = Array.isArray(headerValue2) ? headerValue2 : [headerValue2];
       for (let i10 = 0; i10 < values.length; i10++) {
-        const path72 = getSameOriginPath(cacheKey, values[i10]);
-        if (path72 !== void 0) {
-          deleteCachedUri(store, cacheKey, path72);
+        const path70 = getSameOriginPath(cacheKey, values[i10]);
+        if (path70 !== void 0) {
+          deleteCachedUri(store, cacheKey, path70);
         }
       }
     }
@@ -60752,11 +60834,11 @@ var require_fetch = __commonJS({
       function dispatch({ body }) {
         const url2 = requestCurrentURL(request7);
         const agent = fetchParams.controller.dispatcher;
-        const path72 = url2.pathname + url2.search;
+        const path70 = url2.pathname + url2.search;
         const hasTrailingQuestionMark = url2.search.length === 0 && url2.href[url2.href.length - url2.hash.length - 1] === "?";
         return new Promise((resolve2, reject) => agent.dispatch(
           {
-            path: hasTrailingQuestionMark ? `${path72}?` : path72,
+            path: hasTrailingQuestionMark ? `${path70}?` : path70,
             origin: url2.origin,
             method: request7.method,
             body: agent.isMockActive ? request7.body && (request7.body.source || request7.body.stream) : body,
@@ -61703,9 +61785,9 @@ var require_util5 = __commonJS({
         }
       }
     }
-    function validateCookiePath(path72) {
-      for (let i10 = 0; i10 < path72.length; ++i10) {
-        const code = path72.charCodeAt(i10);
+    function validateCookiePath(path70) {
+      for (let i10 = 0; i10 < path70.length; ++i10) {
+        const code = path70.charCodeAt(i10);
         if (code < 32 || // exclude CTLs (0-31)
         code > 126 || // exclude DEL and non-ascii
         code === 59) {
@@ -65053,11 +65135,11 @@ var require_undici = __commonJS({
           if (typeof opts.path !== "string") {
             throw new InvalidArgumentError2("invalid opts.path");
           }
-          let path72 = opts.path;
+          let path70 = opts.path;
           if (!opts.path.startsWith("/")) {
-            path72 = `/${path72}`;
+            path70 = `/${path70}`;
           }
-          url2 = new URL(util2.parseOrigin(url2).origin + path72);
+          url2 = new URL(util2.parseOrigin(url2).origin + path70);
         } else {
           if (!opts) {
             opts = typeof url2 === "object" ? url2 : {};
@@ -65496,7 +65578,7 @@ var init_selfIdentity = __esm({
 // src/frontdoor/trust.ts
 function resolveTrustBundle(params) {
   const { caCertFile, bundlesDir, variable, inherited, fs: fs30 } = params;
-  if (inherited === void 0 || inherited === "" || import_node_path38.default.resolve(inherited) === import_node_path38.default.resolve(caCertFile)) {
+  if (inherited === void 0 || inherited === "" || import_node_path37.default.resolve(inherited) === import_node_path37.default.resolve(caCertFile)) {
     return { path: caCertFile };
   }
   const caPem = fs30.readFileUtf8(caCertFile);
@@ -65514,19 +65596,19 @@ function resolveTrustBundle(params) {
   }
   const combined = `${inheritedPem.trimEnd()}
 ${caPem}`;
-  const bundle = import_node_path38.default.join(bundlesDir, `${(0, import_node_crypto15.createHash)("sha256").update(combined).digest("hex").slice(0, BUNDLE_NAME_HEX_DIGITS)}.pem`);
+  const bundle = import_node_path37.default.join(bundlesDir, `${(0, import_node_crypto15.createHash)("sha256").update(combined).digest("hex").slice(0, BUNDLE_NAME_HEX_DIGITS)}.pem`);
   if (!fs30.exists(bundle)) {
     fs30.mkdirp(bundlesDir);
     fs30.writeFileAtomic(bundle, combined);
   }
   return { path: bundle };
 }
-var import_node_crypto15, import_node_path38, BUNDLE_NAME_HEX_DIGITS;
+var import_node_crypto15, import_node_path37, BUNDLE_NAME_HEX_DIGITS;
 var init_trust = __esm({
   "src/frontdoor/trust.ts"() {
     "use strict";
     import_node_crypto15 = require("node:crypto");
-    import_node_path38 = __toESM(require("node:path"), 1);
+    import_node_path37 = __toESM(require("node:path"), 1);
     BUNDLE_NAME_HEX_DIGITS = 16;
   }
 });
@@ -65729,10 +65811,10 @@ async function downloadAndInstall(ports, asset, target) {
   const tempDir = ports.fs.mkdtemp();
   try {
     const assetUrl = `${DOWNLOAD_BASE_URL}/${asset}`;
-    ports.fs.writeFileBytes(import_node_path39.default.join(tempDir, asset), await mustDownload(ports.http, assetUrl));
-    ports.fs.writeFileUtf8(import_node_path39.default.join(tempDir, `${asset}.sha256`), Buffer.from(await mustDownload(ports.http, `${assetUrl}.sha256`)).toString("utf8"));
-    const downloaded = ports.fs.readFileBytes(import_node_path39.default.join(tempDir, asset));
-    const sidecar = ports.fs.readFileUtf8(import_node_path39.default.join(tempDir, `${asset}.sha256`));
+    ports.fs.writeFileBytes(import_node_path38.default.join(tempDir, asset), await mustDownload(ports.http, assetUrl));
+    ports.fs.writeFileUtf8(import_node_path38.default.join(tempDir, `${asset}.sha256`), Buffer.from(await mustDownload(ports.http, `${assetUrl}.sha256`)).toString("utf8"));
+    const downloaded = ports.fs.readFileBytes(import_node_path38.default.join(tempDir, asset));
+    const sidecar = ports.fs.readFileUtf8(import_node_path38.default.join(tempDir, `${asset}.sha256`));
     if (downloaded === void 0 || sidecar === void 0) {
       throw new UpdateDownloadError(`the downloaded files for ${asset} are missing from ${tempDir}`);
     }
@@ -65741,7 +65823,7 @@ async function downloadAndInstall(ports, asset, target) {
     if (expected === void 0 || expected !== actual) {
       throw new UpdateDownloadError(`checksum mismatch for ${asset} (expected ${expected ?? "(none)"}, got ${actual})`);
     }
-    const tempBinary = import_node_path39.default.join(import_node_path39.default.dirname(target), `.${import_node_path39.default.basename(target)}.${String(process.pid)}.${(0, import_node_crypto16.randomUUID)()}.tmp`);
+    const tempBinary = import_node_path38.default.join(import_node_path38.default.dirname(target), `.${import_node_path38.default.basename(target)}.${String(process.pid)}.${(0, import_node_crypto16.randomUUID)()}.tmp`);
     ports.fs.writeFileBytes(tempBinary, downloaded);
     try {
       ports.fs.chmod(tempBinary, EXECUTABLE_MODE);
@@ -65788,12 +65870,12 @@ async function runSelfUpdate(ports, options) {
   }
   return { current: options.currentVersion, latest, action: "updated" };
 }
-var import_node_crypto16, import_node_path39, LATEST_RELEASE_URL, DOWNLOAD_BASE_URL, MACOS_X64_NOTE, BREW_PREFIXES, EXECUTABLE_MODE, UpdateChannelError, UpdateConflictError, UpdateDownloadError;
+var import_node_crypto16, import_node_path38, LATEST_RELEASE_URL, DOWNLOAD_BASE_URL, MACOS_X64_NOTE, BREW_PREFIXES, EXECUTABLE_MODE, UpdateChannelError, UpdateConflictError, UpdateDownloadError;
 var init_update = __esm({
   "src/update/update.ts"() {
     "use strict";
     import_node_crypto16 = require("node:crypto");
-    import_node_path39 = __toESM(require("node:path"), 1);
+    import_node_path38 = __toESM(require("node:path"), 1);
     init_cliError();
     LATEST_RELEASE_URL = "https://github.com/ExaDev/agent-shim/releases/latest";
     DOWNLOAD_BASE_URL = "https://github.com/ExaDev/agent-shim/releases/latest/download";
@@ -65964,13 +66046,13 @@ function agentShimCliPath(distDir = typeof __AGENT_SHIM_DIST_DIR__ === "string"
   if (distDir === void 0) {
     throw new OwnCliPathUnknownError();
   }
-  return import_node_path41.default.join(distDir, OWN_CLI_FILE_NAME);
+  return import_node_path40.default.join(distDir, OWN_CLI_FILE_NAME);
 }
-var import_node_path41, OWN_CLI_FILE_NAME, OwnCliPathUnknownError;
+var import_node_path40, OWN_CLI_FILE_NAME, OwnCliPathUnknownError;
 var init_ownCli = __esm({
   "src/ownCli.ts"() {
     "use strict";
-    import_node_path41 = __toESM(require("node:path"), 1);
+    import_node_path40 = __toESM(require("node:path"), 1);
     init_cliError();
     OWN_CLI_FILE_NAME = "cli.cjs";
     OwnCliPathUnknownError = class extends CliError {
@@ -66355,7 +66437,7 @@ function buildEnv(params) {
   const parentCustomHeaders = params.baseEnv.ANTHROPIC_CUSTOM_HEADERS;
   let providerCustomHeaders;
   if (!params.configDirEscapeHatch && params.resolvedIdentityName !== void 0) {
-    env.CLAUDE_CONFIG_DIR = import_node_path42.default.join(params.identitiesDir, params.resolvedIdentityName);
+    env.CLAUDE_CONFIG_DIR = import_node_path41.default.join(params.identitiesDir, params.resolvedIdentityName);
   }
   if (params.provider !== void 0) {
     const providerEnv = params.provider.definition.kind !== void 0 && params.provider.definition.kind !== "http" ? {} : params.provider.definition.env ?? {};
@@ -66409,11 +66491,11 @@ function buildEnv(params) {
   }
   return env;
 }
-var import_node_path42, LOOPBACK_HOSTS, PROVIDER_SESSION_PLACEHOLDER;
+var import_node_path41, LOOPBACK_HOSTS, PROVIDER_SESSION_PLACEHOLDER;
 var init_flags = __esm({
   "src/launcher/flags.ts"() {
     "use strict";
-    import_node_path42 = __toESM(require("node:path"), 1);
+    import_node_path41 = __toESM(require("node:path"), 1);
     init_envBool();
     init_cliError();
     init_conditions();
@@ -66505,7 +66587,7 @@ function newestTranscript(fs30, projectDir) {
     if (!name.endsWith(".jsonl")) {
       continue;
     }
-    const candidate = import_node_path43.default.join(projectDir, name);
+    const candidate = import_node_path42.default.join(projectDir, name);
     const stat = fs30.lstat(candidate);
     if (stat?.kind === "file" && stat.mtimeMs > newestMs) {
       newestMs = stat.mtimeMs;
@@ -66515,24 +66597,24 @@ function newestTranscript(fs30, projectDir) {
   return newest;
 }
 function latestConversationId(fs30, params) {
-  const file2 = newestTranscript(fs30, import_node_path43.default.join(params.claudeHome, "projects", projectDirNameOf(params.cwd)));
-  return file2 === void 0 ? void 0 : import_node_path43.default.basename(file2, ".jsonl");
+  const file2 = newestTranscript(fs30, import_node_path42.default.join(params.claudeHome, "projects", projectDirNameOf(params.cwd)));
+  return file2 === void 0 ? void 0 : import_node_path42.default.basename(file2, ".jsonl");
 }
 function resumedContextTokens(fs30, params) {
   const target = resumeTargetOf(params.passthrough);
   if (target === void 0) {
     return void 0;
   }
-  const projectDir = import_node_path43.default.join(params.claudeHome, "projects", projectDirNameOf(params.cwd));
-  const file2 = target.kind === "id" ? import_node_path43.default.join(projectDir, `${target.id}.jsonl`) : newestTranscript(fs30, projectDir);
+  const projectDir = import_node_path42.default.join(params.claudeHome, "projects", projectDirNameOf(params.cwd));
+  const file2 = target.kind === "id" ? import_node_path42.default.join(projectDir, `${target.id}.jsonl`) : newestTranscript(fs30, projectDir);
   const text5 = file2 === void 0 ? void 0 : fs30.readFileUtf8(file2);
   return text5 === void 0 ? void 0 : contextTokensOfTranscript(text5);
 }
-var import_node_path43;
+var import_node_path42;
 var init_resumeContext = __esm({
   "src/usage/resumeContext.ts"() {
     "use strict";
-    import_node_path43 = __toESM(require("node:path"), 1);
+    import_node_path42 = __toESM(require("node:path"), 1);
   }
 });
 
@@ -67931,7 +68013,7 @@ var init_translate2 = __esm({
 
 // src/providerCatalogue.ts
 function catalogueCachePath(paths, name) {
-  return import_node_path44.default.join(paths.catalogueDir, `${name}.json`);
+  return providerFilePath(paths.catalogueDir, name);
 }
 function parseCatalogueCache(text5) {
   if (text5 === void 0) {
@@ -68007,13 +68089,13 @@ async function fetchCatalogue(params) {
   }
   throw new CatalogueFetchError(`no catalogue from ${outcomes.join("; ")}`);
 }
-var import_node_path44, import_picomatch3, DEFAULT_CANDIDATE_URLS, MS_PER_SECOND9, SECONDS_PER_HOUR3, HOURS_PER_DAY4, MS_PER_HOUR3, HOURS_BETWEEN_RETRIES, HTTP_OK, HTTP_MULTIPLE_CHOICES, CATALOGUE_MAX_AGE_MS, CATALOGUE_RETRY_MS, CATALOGUE_REQUEST_SECONDS, CATALOGUE_REQUEST_TIMEOUT_MS, CATALOGUE_REFRESH_TIMEOUT_MS, CatalogueModelSchema, CatalogueCacheSchema, CatalogueFetchError;
+var import_picomatch3, DEFAULT_CANDIDATE_URLS, MS_PER_SECOND9, SECONDS_PER_HOUR3, HOURS_PER_DAY4, MS_PER_HOUR3, HOURS_BETWEEN_RETRIES, HTTP_OK, HTTP_MULTIPLE_CHOICES, CATALOGUE_MAX_AGE_MS, CATALOGUE_RETRY_MS, CATALOGUE_REQUEST_SECONDS, CATALOGUE_REQUEST_TIMEOUT_MS, CATALOGUE_REFRESH_TIMEOUT_MS, CatalogueModelSchema, CatalogueCacheSchema, CatalogueFetchError;
 var init_providerCatalogue = __esm({
   "src/providerCatalogue.ts"() {
     "use strict";
-    import_node_path44 = __toESM(require("node:path"), 1);
     import_picomatch3 = __toESM(require_picomatch2(), 1);
     init_zod();
+    init_names();
     DEFAULT_CANDIDATE_URLS = 2;
     MS_PER_SECOND9 = 1e3;
     SECONDS_PER_HOUR3 = 3600;
@@ -68662,7 +68744,7 @@ function decideLaunch(params, readOnly) {
     identityDefaultConfigProfile: loadedIdentity?.config.defaultConfigProfile,
     globalDefaultConfigProfile: params.globalDefaultConfigProfile
   });
-  if (configProfileDecision.name !== void 0 && params.allowMissingConfigProfile !== true && fs30.readConfigFile(import_node_path45.default.join(paths.configProfilesDir, `${configProfileDecision.name}.json`)) === void 0) {
+  if (configProfileDecision.name !== void 0 && params.allowMissingConfigProfile !== true && fs30.readConfigFile(profileFilePath(paths.configProfilesDir, configProfileDecision.name, `the configuration profile selected via ${configProfileDecision.source}`)) === void 0) {
     log.error(
       `agent-shim: no configuration profile named "${configProfileDecision.name}" (selected via ${configProfileDecision.source}). Run \`agent-shim profile add ${configProfileDecision.name}\` first.`
     );
@@ -68789,7 +68871,7 @@ function decideLaunch(params, readOnly) {
     extraFlags: splitExtraFlags(env.CLAUDE_EXTRA_FLAGS),
     passthrough: withLauncherSettings(params.supervised === void 0 ? parsedArgv.rest : withSupervision(parsedArgv.rest, params.supervised), launcherSettings)
   });
-  const configDir = configDirEscapeHatchApplies || identityDecision.name === void 0 ? env.CLAUDE_CONFIG_DIR : import_node_path45.default.join(paths.identitiesDir, identityDecision.name);
+  const configDir = configDirEscapeHatchApplies || identityDecision.name === void 0 ? env.CLAUDE_CONFIG_DIR : import_node_path43.default.join(paths.identitiesDir, identityDecision.name);
   const decision = {
     identitySource: identityDecision.source,
     configDirEscapeHatch: identityDecision.configDirEscapeHatch,
@@ -68842,7 +68924,7 @@ function prepareLaunch(params) {
   let warnings = [];
   const updateCheck = runLaunchUpdateCheck({
     mode: params.updateMode ?? "off",
-    checkPath: import_node_path45.default.join(paths.root, "update.check"),
+    checkPath: import_node_path43.default.join(paths.root, "update.check"),
     currentVersion: package_default.version,
     port: params.update
   });
@@ -68989,13 +69071,13 @@ function runLaunchPlan(plan, spawn9) {
 function runLauncher(params) {
   params.proc.exit(runLaunchPlan(prepareLaunch(params), params.spawn));
 }
-var import_node_crypto20, import_node_util6, import_node_path45;
+var import_node_crypto20, import_node_util6, import_node_path43;
 var init_launcher = __esm({
   "src/launcher.ts"() {
     "use strict";
     import_node_crypto20 = require("node:crypto");
     import_node_util6 = require("node:util");
-    import_node_path45 = __toESM(require("node:path"), 1);
+    import_node_path43 = __toESM(require("node:path"), 1);
     init_package();
     init_envBool();
     init_argv();
@@ -69029,6 +69111,7 @@ var init_launcher = __esm({
     init_claudeVersion();
     init_launchHook();
     init_targets();
+    init_names();
   }
 });
 
@@ -69036,7 +69119,7 @@ var init_launcher = __esm({
 function keyOf2(command, args) {
   return JSON.stringify([command, args]);
 }
-async function resolveWithAsyncRuns(decide, runAsync2) {
+async function recordRuns(decide, runAsync2) {
   const answers = /* @__PURE__ */ new Map();
   const replay = {
     run: (command, args) => {
@@ -69049,7 +69132,8 @@ async function resolveWithAsyncRuns(decide, runAsync2) {
   };
   for (; ; ) {
     try {
-      return decide(replay);
+      decide(replay);
+      return replay;
     } catch (error63) {
       if (!(error63 instanceof RunNeededError)) {
         throw error63;
@@ -69058,6 +69142,16 @@ async function resolveWithAsyncRuns(decide, runAsync2) {
     }
   }
 }
+async function resolveWithAsyncRuns(decide, runAsync2) {
+  let result;
+  await recordRuns((run) => {
+    result = { value: decide(run) };
+  }, runAsync2);
+  if (result === void 0) {
+    throw new Error("the decision finished without a result");
+  }
+  return result.value;
+}
 var RunNeededError;
 var init_replayRun = __esm({
   "src/replayRun.ts"() {
@@ -69129,7 +69223,7 @@ function realPrepareLaunchParams(paths, options) {
     frontdoor: realFrontDoorPort(paths, options.spawnDaemon),
     credentials: { ...realCredentialPort, cache: realCredentialCacheEnv(paths) },
     hold: realHoldPort,
-    hasStoredLogin: (identity) => identitySignIn(realFarmFs, { platform: process.platform, run: options.run ?? realRunPort }, { farmRoot: import_node_path46.default.join(paths.identitiesDir, identity), hasCredentialBlock: false }).state !== "signed-out",
+    hasStoredLogin: (identity) => identitySignIn(realFarmFs, { platform: process.platform, run: options.run ?? realRunPort }, { farmRoot: import_node_path44.default.join(paths.identitiesDir, identity), hasCredentialBlock: false }).state !== "signed-out",
     ...farm.directoryIdentity === void 0 ? {} : { directoryPinnedIdentity: farm.directoryIdentity },
     ...farm.directoryConfigProfile === void 0 ? {} : { directoryRuleConfigProfile: farm.directoryConfigProfile },
     ...farm.globalDefaultConfigProfile === void 0 ? {} : { globalDefaultConfigProfile: farm.globalDefaultConfigProfile },
@@ -69170,12 +69264,12 @@ function resolveClaudeLaunch(options, run = realRunPort) {
 async function resolveClaudeLaunchAsync(options, runAsync2 = realRunAsync) {
   return await resolveWithAsyncRuns((run) => resolveClaudeLaunch(options, run), runAsync2);
 }
-var import_node_os9, import_node_path46, import_node_crypto21, LaunchRefusedError;
+var import_node_os9, import_node_path44, import_node_crypto21, LaunchRefusedError;
 var init_launchWiring = __esm({
   "src/launchWiring.ts"() {
     "use strict";
     import_node_os9 = __toESM(require("node:os"), 1);
-    import_node_path46 = __toESM(require("node:path"), 1);
+    import_node_path44 = __toESM(require("node:path"), 1);
     import_node_crypto21 = require("node:crypto");
     init_cliError();
     init_claudeShim();
@@ -69211,11 +69305,14 @@ function identityLaunchArgv(identity, flags) {
 }
 async function withIdentityClaude(params, identity, flags, use2) {
   const refusals = [];
+  const env = Object.fromEntries(Object.entries(process.env).filter(([name]) => name !== CONFIG_DIR_VARIABLE));
+  const argv = [...identityLaunchArgv(identity, flags)];
+  const run = await recordRuns((replay) => resolveClaudeLaunch({ argv, cwd: params.cwd, env: definedEnvironment(env), paths: params.paths }, replay), params.runAsync ?? realRunAsync);
   const plan = prepareLaunch(
     realPrepareLaunchParams(params.paths, {
       proc: {
-        env: Object.fromEntries(Object.entries(process.env).filter(([name]) => name !== CONFIG_DIR_VARIABLE)),
-        argv: [...identityLaunchArgv(identity, flags)],
+        env,
+        argv,
         exit: (code) => {
           throw new LaunchRefusedError(refusals.join("\n") || `the launch was refused (exit ${String(code)})`, code);
         }
@@ -69229,7 +69326,8 @@ async function withIdentityClaude(params, identity, flags, use2) {
         }
       },
       spawnDaemon: params.spawnDaemon,
-      farm: buildFarmRuntime(params.paths, params.cwd)
+      run,
+      farm: buildFarmRuntime(params.paths, params.cwd, run)
     })
   );
   const abort = new AbortController();
@@ -69249,6 +69347,8 @@ var init_identityClaude = __esm({
     "use strict";
     init_launchWiring();
     init_launcher();
+    init_realPorts();
+    init_replayRun();
     CONFIG_DIR_VARIABLE = "CLAUDE_CONFIG_DIR";
     IDENTITY_ONLY_FLAG = "--no-provider";
   }
@@ -83828,7 +83928,7 @@ async function jGe(e14, t10, n10, r10) {
   if (d.length === 0) return [];
   return iv(Buffer.from(gZ(d)), { limit: r10.limit, offset: r10.offset }, l, c10);
 }
-var import_node_module, import_crypto, import_crypto2, import_path, import_node_fs17, import_node_process4, import_fs, import_os, import_path2, yy, import_fs2, import_promises, import_path3, import_readline, import_promises2, import_path4, import_os2, import_path5, Se, import_promises3, xe, import_promises4, import_fs3, import_promises5, import_os3, import_path6, import_promises6, import_os4, import_node_path47, import_node_os10, import_node_process5, import_path7, import_events, import_fs4, import_promises7, import_path8, import_child_process, import_util9, import_child_process2, import_fs5, import_path9, import_path10, import_crypto3, import_fs6, import_path11, import_promises8, import_path12, import_path13, import_promises9, import_path14, import_path15, import_fs7, import_promises10, import_path16, import_crypto4, import_path17, import_async_hooks, import_fs8, import_promises11, import_crypto5, import_fs9, import_promises12, import_path18, import_promises13, import_path19, import_crypto6, import_path20, import_path21, import_path22, import_path23, import_promises14, import_fs10, import_promises15, import_path24, import_util10, import_path25, import_os5, import_path26, import_path27, import_path28, import_path29, import_path30, import_net, import_os6, import_child_process3, import_fs11, import_child_process4, import_crypto7, import_promises16, import_module, import_os7, import_path31, import_url, import_events2, import_child_process5, import_fs12, import_readline2, import_string_decoder, import_fs13, import_promises17, import_os8, import_path32, import_crypto8, import_os9, import_fs14, import_path33, import_crypto9, import_fs15, import_promises18, import_path34, IZ, DZ, v_, LZ, OT, NZ, UZ, kT, X, FZ, dr, HZ, jZ, BZ, ot, st, ed, Kv, Te, Me, Oo, nd, hF, Xv, Qv, rd, LF, or, WF, ZF, sA, XF, od, sd, hg, id, Sg, Oz, fA, $z, Wz, Zz, s$, a$, d$, f$, g$, _$, E$, v$, T$, O$, I$, L$, wg, z$, j$, G$, V$, yA, SA, rH, lH, uH, _H, EH, EA, RH, TH, kH, DH, NH, zH, jH, GH, VH, ZH, JH, ej, nj, ij, cj, uj, CA, bj, Aj, wj, PT, KZ, GZ, VGe, VZ, MT, wr, jo, JZ, XZ, NT, UT, FT, zT, Bo, $T, HT, jT, BT, a4, sp, l4, c4, vt, u4, Nt, KT, d4, p4, uc, GT, m4, g4, WT, _4, y4, VT, Dn, Et, b4, C4, v4, A4, ra, x4, ip, qT, ZT, w4, O4, ro, P4, I4, D4, L4, M4, N4, U4, YT, JT, Sn, H4, Ko, j4, oo, XT, QT, G4, W4, V4, ew, Z4, Y4, tw, X4, nw, R_, rw, ow, Go, sw, iw, aw, lw, ei, aY, cw, Or, cY, uw, dw, lp, pw, cp, mY, gY, up, _Y, aa, fw, la, EY, bY, CY, vY, AY, RY, xY, TY, wY, OY, kY, PY, IY, mw, x_, gw, ca, MY, et, dp, hw, pp, zY, $Y, _w, HY, ua, yw, wt, KY, T_, Sw, WY, VY, qY, so, mp, Ew, vw, bw, YY, Cw, JY, XY, kr, QY, e9, Wo, n9, da, o9, s9, i9, a9, l9, c9, u9, d9, p9, f9, m9, g9, h9, _9, y9, S9, E9, b9, C9, v9, A9, R9, x9, T9, Qe, Aw, pa, hp, Rw, dc, k9, w_, P9, Pr, xw, I9, fa, D9, L9, _p, N9, ma, yp, z9, Tw, $9, H9, ww, Vo, Ir, pc, W9, V9, q9, Ow, Y9, Sp, J9, Ep, X9, qo, Q9, bp, kw, eJ, Pw, Iw, Dw, Lw, tJ, nJ, rJ, oJ, sJ, ti, io, iJ, Mw, Nw, Cp, aJ, Uw, Fw, ga, pr, uJ, Fe, $w, O_, k_, I_, ha, Bw, D_, qw, Vw, N_, U_, yJ, _a3, Yo, Zw, bJ, Rp, Yw, vJ, AJ, Jw, xp, Xw, Tp, Qw, kJ, ya, IJ, DJ, Sa, MJ, fc, NJ, eO, FJ, zJ, $J, tO, Ea, jJ, nO, rO, sO, iO, Vn, GJ, Ln, Jo, aO, lO, cO, wp, XJ, QJ, uO, ba, dO, pO, fO, Dr, ao, mO, Ca, gO, z_, $_, H_, j_, B_, K_, G_, W_, V_, q_, Z_, _O, Y_, J_, yO, X_, c3, Q_, ey, ty, ny, ry, oy, sy, iy, ay, ly, cy, we, SO, en, d3, Pp, vO, g3, gy, wO, S3, BO, KO, Ip, Dp, v3, GO, WO, F9e, IO, A3, hy, x3, NO, I3, Ay, Ry, D3, xy, L3, bc, xa, Ty, wy, Oy, ky, XO, Py, Iy, Dy, Ly, My, Ny, Uy, Fy, zy, nk, rk, d3e, p3e, f3e, m3e, g3e, U3, jp, jy, ik, By, Ky, lk, $3, uk, ck, G3, W3, V3, it, Y3, J3, hk, tXe, Q3, kt, We, gX, Ta, SX, mr, Yp, Jp, eS, nS, yXe, IX, DX, rS, ka, oS, Ok, kk, HX, jX, ef, bXe, Uk, Mr, wc, Fk, Pa, OXe, kXe, iS, PXe, IXe, DXe, GX, YX, JX, XX, QX, e6, t6, Yk, n6, r6, o6, s6, i6, a6, l6, c6, Vk, uS, lf, dS, Qk, eP, uf, os10, qXe, ZXe, h6, tP, df, _6, y6, S6, E6, b6, Jn, gr, nP, rP, Dc, pS, oP, gS, lP, C6, mS, lS, sP, w6, O6, dP, k6, YXe, JXe, P6, I6, pf, L6, fP, XXe, QXe, M6, SS, z6, $6, j6, bP, CP, G6, Lc, si, Z6, ES, bS, X6, Q6, e5, t5, n5, u5, r5, o5, s5, i5, a5, l5, c5, u52, d5, p5, f5, m5, g5, h5, _5, y5, S5, E5, b5, C5, v5, A5, R5, x5, T5, w5, O5, k5, P5, I5, D5, L5, M5, N5, U5, F5, z5, $5, H5, j5, B5, K5, G5, W5, V5, q5, Z5, Y5, J5, X5, Q5, e8, t8, n8, r8, o8, s8, i8, a8, l8, c8, u8, d8, CS, p8, f8, m8, g8, h8, _8, y8, S8, E8, b8, C8, v8, A8, R8, x8, T8, w8, O8, k8, P8, I8, D8, L8, M8, N8, U8, F8, z8, $8, H8, j8, B8, K8, G8, W8, V8, q8, Z8, Y8, J8, X8, Q8, e7, t7, n7, r7, o7, s7, i7, a7, l7, c7, u7, d7, p7, f7, m7, g7, h7, _7, y7, S7, E7, b7, C7, TP, v7, L6e, RP, A7, x7, kP, ff, U6e, F6e, Ua, z6e, $6e, H6e, j6e, PP, IP, vS, DP, w7, LP, O7, k7, P7, AS, RS, xS, I7, MP, NP, D7, G6e, L7, W6e, M7, N7, UP, V6e, U7, F7, z7, $7, H7, j7, B7, q6e, is, wS, Fa, K7, G7, W7, i5e, X7, Q7, HP, $P, BP, tQ, WP, VP, JP, _Q, QP, eI, xQ, Uc, DS, $a, wQ, OQ, kQ, PQ, IQ, DQ, LQ, MQ, NQ, UQ, FQ, zQ, $Q, HQ, jQ, BQ, KQ, GQ, WQ, VQ, qQ, ZQ, YQ, JQ, XQ, QQ, eee, tee, nee, ree, oee, see, iee, aee, lee, cee, uee, dee, pee, fee, mee, gee, hee, _ee, yee, See, Eee, bee, Cee, vee, Aee, Ree, xee, Tee, wee, Oee, kee, Pee, Iee, Dee, Lee, Mee, Nee, Uee, Fee, zee, $ee, Hee, jee, Bee, Kee, Gee, Wee, Vee, qee, Zee, Yee, Jee, Xee, Qee, ete, tte, nte, rte, ote, ste, ite, ate, lte, cte, ute, dte, pte, fte, mte, gte, hte, _te, yte, Ste, Ete, bte, Cte, vte, Ate, Rte, xte, Tte, wte, Ote, kte, Pte, Ite, Dte, Lte, Mte, Nte, Ute, Fte, zte, $te, Hte, jte, Bte, Kte, Gte, Wte, Vte, qte, Zte, Yte, Jte, Xte, Qte, ene, tne, nne, rne, one, sne, ine, ane, lne, cne, une, dne, pne, fne, mne, gne, hne, _ne, yne, Sne, Ene, bne, Cne, vne, Ane, Rne, xne, Tne, wne, One, kne, Pne, Ine, Dne, Lne, Mne, Nne, Une, Fne, zne, $ne, Hne, jne, Bne, Kne, Gne, Wne, Vne, qne, Zne, Yne, Jne, Xne, Qne, ere, tre, nre, rre, ore, sre, ire, are, lre, cre, ure, dre, pre, fre, mre, gre, hre, _re, yre, Sre, Ere, bre, Cre, vre, Are, Rre, xre, Tre, wre, Ore, kre, Pre, Ire, Dre, Lre, Mre, Nre, Ure, Fre, zre, $re, Hre, jre, Bre, Kre, Gre, Wre, Vre, qre, Zre, Yre, Jre, Xre, Qre, eoe, toe, noe, roe, ooe, soe, ioe, aoe, loe, coe, uoe, doe, poe, foe, moe, goe, hoe, _oe, yoe, Soe, Eoe, boe, Coe, voe, Aoe, Roe, xoe, Toe, woe, Ooe, koe, Poe, Ioe, Doe, Loe, Moe, Noe, Uoe, Foe, zoe, $oe, Hoe, joe, Boe, Koe, Goe, Woe, Voe, qoe, Zoe, Yoe, Joe, Xoe, Qoe, ese, tse, nse, rse, ose, sse, ise, ase, lse, cse, use, dse, pse, fse, mse, gse, hse, _se, yse, Sse, Ese, LS, bse, Cse, vse, Ase, Rse, xse, Tse, wse, Ose, kse, Pse, Ise, Dse, Lse, Mse, Nse, Use, Fse, zse, $se, Hse, jse, Bse, Kse, Gse, Wse, Vse, qse, Zse, Yse, Jse, Xse, Qse, eie, tie, nie, rie, oie, sie, iie, aie, lie, cie, uie, die, pie, fie, mie, gie, hie, _ie, yie, Sie, Eie, bie, Cie, vie, Aie, Rie, xie, Tie, wie, Oie, kie, Pie, Iie, Die, Lie, Mie, Nie, Uie, Fie, zie, $ie, Hie, jie, Bie, Kie, Gie, Wie, Vie, qie, Zie, Yie, Jie, Xie, Qie, eae, tae, nae, rae, oae, sae, iae, aae, lae, cae, uae, dae, pae, fae, mae, gae, hae, _ae, yae, Sae, Eae, bae, Cae, vae, Aae, Rae, xae, Tae, wae, Oae, kae, Pae, Iae, Dae, Lae, Mae, Nae, Uae, Fae, zae, $ae, Hae, jae, Bae, Kae, Gae, Wae, Vae, qae, Zae, Yae, Jae, Xae, Qae, ele, tle, nle, rle, ole, sle, ile, ale, lle, cle, ule, dle, ple, fle, mle, gle, hle, _le, yle, Sle, Ele, ble, Cle, vle, Ale, Rle, xle, Tle, wle, Ole, kle, Ple, Ile, Dle, Lle, Mle, Nle, Ule, Fle, zle, $le, Hle, jle, Ble, Kle, Gle, Wle, Vle, qle, Zle, Yle, Jle, MS, Xle, Qle, ece, tce, nce, rce, oce, sce, ice, ace, lce, cce, uce, dce, pce, fce, mce, gce, hce, _ce, yce, Sce, Ece, bce, Cce, vce, Ace, Rce, xce, Tce, wce, Oce, kce, Pce, Ice, Dce, Lce, Mce, Nce, Uce, Fce, zce, $ce, Hce, jce, Bce, Kce, Gce, Wce, Vce, qce, Zce, Yce, Jce, Xce, Qce, eue, tue, nue, rue, oue, sue, iue, aue, lue, cue, uue, due, pue, fue, mue, gue, hue, _ue, yue, Sue, Eue, bue, Cue, vue, Aue, Rue, xue, Tue, wue, Oue, kue, Pue, Iue, Due, Lue, Mue, Nue, Uue, Fue, zue, $ue, Hue, jue, Bue, Kue, Gue, Wue, Vue, que, Zue, Yue, Jue, Xue, Que, ede, tde, nde, rde, ode, sde, ide, ade, lde, cde, ude, dde, pde, fde, mde, gde, hde, _de, yde, Sde, Ede, bde, Cde, vde, Ade, Rde, xde, Tde, wde, Ode, kde, Pde, Ide, Dde, Lde, Mde, Nde, Ude, Fde, zde, $de, Hde, jde, Bde, Kde, Gde, Wde, Vde, qde, Zde, Yde, Jde, Xde, Qde, epe, tpe, npe, rpe, ope, spe, ipe, ape, lpe, cpe, upe, dpe, ppe, fpe, mpe, gpe, hpe, _pe, ype, Spe, Epe, bpe, Cpe, vpe, Ape, Rpe, xpe, Tpe, wpe, Ope, kpe, Ppe, Ipe, Dpe, Lpe, Mpe, Npe, Upe, Fpe, zpe, $pe, Hpe, jpe, Bpe, Kpe, Gpe, Wpe, Vpe, qpe, Zpe, Ype, Jpe, Xpe, Qpe, efe, tfe, nfe, rfe, ofe, sfe, ife, afe, lfe, cfe, ufe, dfe, pfe, ffe, mfe, gfe, hfe, _fe, yfe, Sfe, Efe, bfe, Cfe, vfe, Afe, Rfe, xfe, Tfe, wfe, Ofe, kfe, Pfe, Ife, Dfe, Lfe, Mfe, Nfe, Ufe, Ffe, zfe, $fe, Hfe, jfe, Bfe, Kfe, Gfe, Wfe, Vfe, qfe, Zfe, Yfe, Jfe, Xfe, Qfe, eme, tme, nme, rme, ome, sme, ime, ame, lme, cme, ume, dme, pme, fme, mme, gme, hme, _me, yme, Sme, Eme, bme, Cme, vme, Ame, Rme, xme, Tme, wme, Ome, kme, Pme, Ime, Dme, Lme, Mme, Nme, Ume, Fme, zme, $me, Hme, jme, Bme, Kme, Gme, Wme, Vme, qme, Zme, Yme, Jme, NS, Xme, Qme, ege, tge, nge, rge, oge, sge, ige, age, lge, cge, uge, dge, pge, fge, mge, gge, hge, _ge, yge, Sge, Ege, bge, Cge, vge, Age, Rge, xge, Tge, wge, Oge, kge, Pge, Ige, Dge, Lge, Mge, Nge, Uge, Fge, zge, $ge, Hge, US, jge, Bge, Kge, Gge, Wge, Vge, qge, Zge, Yge, Jge, Xge, Qge, ehe, the, nhe, rhe, ohe, she, ihe, ahe, lhe, che, uhe, dhe, phe, fhe, mhe, ghe, hhe, _he, yhe, She, Ehe, bhe, Che, vhe, Ahe, Rhe, xhe, The, whe, Ohe, khe, Phe, Ihe, Dhe, Lhe, Mhe, Nhe, FS, rI, oI, Uhe, Fhe, zhe, $he, Hhe, jhe, Bhe, Khe, Ghe, Whe, Vhe, qhe, Zhe, Yhe, Jhe, Xhe, Qhe, e_e, t_e, n_e, r_e, o_e, s_e, i_e, a_e, l_e, c_e, u_e, d_e, p_e, f_e, m_e, g_e, h_e, __e, y_e, S_e, E_e, b_e, C_e, v_e, A_e, R_e, x_e, T_e, w_e, O_e, k_e, P_e, I_e, D_e, L_e, M_e, N_e, U_e, F_e, z_e, $_e, H_e, j_e, B_e, K_e, G_e, W_e, V_e, q_e, Z_e, Y_e, J_e, Q_e, Xn, eye, F8e, tye, z8e, nye, iI, rye, oye, lI, cye, uye, dye, _ye, on, vye, Aye, dI, C7e, v7e, ho, kI, PI, Dye, Sf, Lye, jc, Mye, Nye, LI, NI, Fye, VS, zye, $ye, x7e, zI, YS, KI, GI, VI, Hye, qS, ls, Kye, Gye, oD, nE, sD, So, Yc, vn, Zye, oE, sE, iD, aD, wf, Jc, Xc, kf, Qc, Pf, eu, fi, tu, mi, lD, cD, uD, dD, pD, fD, mD, gD, hD, _D, yD, SD, ED, bD, vD, AD, cE, RD, Xye, TD, wD, OD, kD, PD, uE, ID, DD, LD, MD, FD, If, nu, zD, $D, HD, jD, BD, zt, dE, Df, pE, fE, KD, GD, WD, VD, qD, ru, ZD, YD, JD, XD, QD, eL, tL, mE, yr, He, rL, ou, Je, yE, SE, EE, fL, mL, tSe, bE, CE, vE, AE, RE, xE, TE, wE, gL, hL, _L, yL, OE, sSe, kE, PE, IE, DE, LE, ME, NE, Nf, UE, FE, zE, $E, HE, jE, BE, cSe, gE, KE, vL, Uf, GE, WE, VE, qE, ZE, YE, Ff, JE, XE, QE, eb, tb, nb, zf, AL, rb, ob, sb, TL, ab, RL, xL, $f, Hf, dSe, fSe, OL, kL, Sr, FL, ML, zL, lu, hSe, iC, aC, lC, HL, jL, cC, uC, BL, dC, KL, pC, GL, fC, mC, WL, VL, qL, ZL, gC, YL, hC, JL, XL, _C, yC, SC, EC, QL, sC, bC, CC, vC, AC, RC, xC, TC, wC, OC, tM, qf, kC, $L, rM, ASe, Fn, oM, sM, iM, aM, lM, cM, uM, dM, pM, fM, mM, gM, Be, SM, LC, ct, MC, EM, bM, CM, pEe, fEe, Yf, mEe, gEe, hEe, _Ee, yEe, SEe, EEe, bEe, CEe, vEe, AEe, REe, xEe, TEe, wEe, OEe, NC, kEe, vM, PEe, IEe, DEe, LEe, MEe, fu, AM, NEe, UEe, IC, DC, FEe, zEe, qa, TM, HEe, jEe, KEe, wM, em, mu, qEe, ZEe, JEe, OM, Qn, kM, LM, nbe, rbe, abe, lbe, cbe, rm, pbe, At, hbe, BC, BM, Zet, WM, VM, qM, ZM, Cbe, vbe, YM, Abe, Rbe, JM, xbe, Tbe, QM, Ibe, eN, Lbe, nN, Mbe, Nbe, sm, rN, iN, Fbe, aN, $be, jbe, Kbe, Gbe, yu, lN, uN, dN, Xbe, KM, Qbe, eCe, tCe, oCe, iCe, _N, yN, wN, Ytt, ON, OCe, DCe, LN, $Ce, HCe, Cu, BCe, MN, VCe, QCe, ive, uve, VN, pve, fve, _rt, gve, Sve, nv, tv, GN, tU, Fve, Hve, iU, tAe, sAe, iAe, aAe, cAe, Ie, bU, Q, vo, F, zn, fAe, ms, mAe, _m, nn, he, Xa, an, lv, cv, Si, wu, se, br, CU, Oe, gAe, hAe, _Ae, yAe, SAe, EAe, bAe, CAe, vAe, uv, AAe, RAe, xAe, TAe, wAe, OAe, vU, kAe, Ro, el, tl, ym, ku, Sm, Pu, Iu, Em, Ei, xo, bm, Fr, ft, Du, Ao, pv, Lu, To, Cm, vm, nl, Ou, Mu, Nu, bi, Uu, rl, $r, zr, gs, Fu, zu, Am, fv, Rm, $u, wot, H, Oot, kot, Pot, Iot, Dot, Lot, Mot, Not, Uot, Fot, zot, $ot, Hot, jot, xU, Bot, Kot, Got, Wot, Vot, qot, Zot, Yot, Jot, Xot, Qot, est, tst, nst, rst, ost, sst, ist, ast, FAe, zAe, gv, OU, Ss, km, Mt, kU, PU, kst, HAe, jAe, hv, $n, Hu, IU, Yt, tr, nr, Jt, Pm, DU, _v, LU, MU, yv, ju, le, Sv, NU, Pst, Ist, Im, BAe, Dm, KAe, Bu, ol, UU, GAe, WAe, VAe, qAe, ZAe, YAe, Ev, JAe, XAe, bv, Lm, QAe, eRe, Mm, tRe, Ku, Gu, nRe, Wu, sl, rRe, Vu, Nm, Um, Fm, Dst, zm, $m, Hm, FU, zU, $U, Cv, HU, qu, il, jU, oRe, jm, sRe, Bm, iRe, vv, aRe, Km, lRe, cRe, uRe, dRe, pRe, fRe, mRe, gRe, hRe, _Re, Gm, yRe, SRe, Wm, Av, Rv, xv, ERe, bRe, CRe, Tv, vRe, ARe, RRe, xRe, TRe, BU, Vm, wRe, qm, Lst, ORe, al, kRe, Mst, Zu, PRe, wv, IRe, DRe, LRe, MRe, NRe, URe, FRe, Om, zRe, $Re, HRe, Yu, Ov, jRe, BRe, KRe, GRe, WRe, VRe, qRe, ZRe, YRe, JRe, XRe, QRe, exe, txe, nxe, rxe, oxe, sxe, ll, ixe, axe, lxe, Zm, cxe, uxe, dxe, kv, pxe, Nst, Ust, Fst, zst, $st, Hst, ae, WU, qU, VU, ZU, YU, Ym, e0, fxe, mxe, Dv, Cr, gxe, Ju, d0, h0, _0, v0, A0, Sxe, Exe, Mv, Cxe, Fv, Oj, kj, PA, IA, DA, Lj, Dj, aLe, NA, FA, uLe, dd, fLe, Po, SLe, ELe, zA, bLe, xLe, TLe, wLe, OLe, kLe, $j, qj, ILe, DLe, LLe, MLe, Ce, NLe, Wg, Oi, VA, Do, Jj, Xj, Qj, eB, tB, nB, qA, ZA, jA, Bj, jLe, BLe, GLe, rB, BA, Gg, GA, WA, VLe, qLe, Kj, Hs, sB, QLe, YA, iB, uB, eMe, dB, pB, fB, mB, tMe, XA, aB, QA, gB, hB, _B, yB, jn, lMe, SB, dMe, bB, mMe, fd, RB, hMe, Rr, TB, SMe, EMe, Pl, wB, Vg, AMe, Il, RMe, xMe, qg, OB, wMe, OMe, kB, eo, Dl, Zg, DB, NMe, FB, WMe, VMe, $B, HB, jB, BB, Ml, GB, nR, WB, Jg, KB, eNe, Bs, VB, gd, Nl, Xg, tNe, YB, qB, Pi, rK, iK, pNe, hd, _d, to, yd, nh, uK, aK, _Ne, lK, cK, Sd, Ul, rh, oh, dK, CNe, pK, sh, fK, RNe, xNe, TNe, mK, wNe, ONe, ih, Ed, lr, gK, hK, yK, SK, EK, ah, bK, FNe, CK, zNe, $Ne, HNe, vK, BNe, lh, AK, RK, xK, VNe, dn, TK, wK, OK, kK, PK, QNe, eUe, IK, DK, rUe, LK, MK, NK, UK, iUe, aUe, lUe, cUe, uUe, dUe, pUe, fUe, mUe, gUe, hUe, _Ue, yUe, SUe, EUe, bUe, CUe, vUe, AUe, FK, xUe, zK, $K, wUe, HK, OUe, jK, BK, PUe, KK, IUe, DUe, LUe, GK, MUe, NUe, UUe, FUe, WK, zUe, $Ue, HUe, VK, jUe, BUe, KUe, GUe, WUe, VUe, qUe, ZUe, YUe, JUe, XUe, QUe, e0e, t0e, n0e, r0e, Xe, qK, ZK, YK, JK, a0e, l0e, uh, XK, QK, e1, n1, r1, dh, m0e, g0e, h0e, _0e, bd, o1, S0e, Fl, s1, b0e, i1, Di, a1, l1, c1, u1, d1, p1, f1, P0e, I0e, m1, D0e, g1, h1, _1, vyt, U0e, y1, Ayt, iR, F0e, z0e, $0e, Gs, zl, fh, E1, b1, H0e, j0e, B0e, K0e, mh, $l, gh, Ws, aR, hh, _h, G0e, W0e, lR, R1, x1, V0e, uR, k1, P1, I1, D1, L1, Y0e, dR, J0e, Fyt, pR, X0e, fR, mR, Q0e, zyt, eFe, gR, hR, _R, $yt, M1, yR, N1, U1, tFe, nFe, rFe, oFe, iFe, Mi, cFe, $1, Wyt, Vyt, H1, j1, B1, K1, uFe, G1, W1, V1, q1, dFe, pFe, SR, fFe, eSt, tSt, mFe, jl, Vs, gFe, Y1, hFe, _Fe, X1, Q1, eG, yFe, SFe, tG, EFe, bFe, CFe, vFe, bR, CR, RFe, xFe, vR, TFe, Eh, nSt, Cd, wFe, OFe, aSt, rG, PFe, IFe, _St, oG, sG, bSt, CSt, HFe, jFe, $St, BFe, KFe, HSt, JSt, XSt, lG, OR, VFe, YFe, uG, eze, nze, gG, vd, vh, kR, zi, sze, yG, ize, yEt, Ad, $i, bG, Kn, AEt, REt, xEt, aze, AG, wG, $R, dze, $G, pze, fze, mze, gze, hze, BR, HG, jG, fbt, yze, Sze, Eze, Gn, ji, kG, PG, NR, UR, KR, GG, Cze, vze, Rze, GR, xze, Tze, xh, WR, Oze, kze, mbt, Pze, Ize, Dze, Lze, Mze, Nze, qG, Uze, Fze, zze, $ze, ZG, Hze, IG, jze, Bze, YG, Kze, Gze, DG, Wze, Vze, JG, qze, Zze, Yze, Jze, QG, Xze, Qze, e$e, t$e, r$e, o$e, s$e, i$e, a$e, eW, nW, c$e, m$e, xd, VR, gbt, hbt, _bt, h$e, qR, Th, MR, aW, _$e, S$e, lW, E$e, b$e, C$e, v$e, A$e, x$e, w$e, O$e, k$e, P$e, I$e, N$e, ybt, FR, Sbt, U$e, MG, Td, Ebt, bbt, uW, z$e, $$e, H$e, Cbt, j$e, B$e, vbt, Abt, K$e, Rbt, Oh, kh, G$e, YR, Ph, W$e, Ih, Mbt, Nbt, Ubt, Dh, V$e, Z$e, tx, EW, Id, Fh, X$e, xCt, Q$e, eHe, ix, ax, lx, cx, zh, $h, MW, tHe, nHe, aHe, uHe, dHe, Zs, pHe, CW, vW, AW, Nh, UW, fHe, mHe, gHe, hHe, _He, yHe, SHe, EHe, pn, dx, nx, Mh, Bi, AHe, TCt, xHe, Pd, RW, THe, xW, wHe, OHe, Hh, kHe, TW, fx, Bh, Ki, KW, Gl, PHe, Kh, kW, Wl, NHe, Ld, UHe, tV, rV, jHe, XHe, cvt, tje, fV, mV, sje, aje, _V, yV, pje, zvt, $vt, gje, yje, Sje, Kvt, Gvt, eAt, RV, Eje, bje, mAt, Cje, gAt, xV, wV, OV, Js, Lje, FV, Yh, Jh, Md, Tx, zV, $V, HV, Xh, jV, cr, KV, Mo, Fje, zje, yRt, jje, Gje, Vje, sBe, YV, e22, o_, gBe, t2, s_, kx, o2, LBe, UBe, $x, Vi, R2, KBe, GBe, Dx, ZBe, k2, n_, l2, sKe, lKe, z2, bKe, RKe, ec, W2, H2, xKe, wKe, PKe, IKe, $Ke, X2, HKe, jKe, BKe, KKe, VKe, eTt, qKe, tTt, nTt, ZKe, rTt, YKe, oTt, JKe, Wx, XKe, iTt, eq, tq, QKe, nq, rq, e1e, t1e, oq, sq, n1e, r1e, aTt, lTt, c1e, Zx, cq, u1e, uq, a_, d1e, Xx, nc, S1e, c_, mq, gq, Qx, hq, _q, E1e, Sq, u_, rc, d_, b1e, bq, Uo, Cq, vq, A1e, Yd, Jd, R1e, x1e, Aq, gn, T1e, w1e, O1e, Xs, k1e, P1e, xq, Pwt, I1e, Oq, kq, Pq, D1e, L1e, Iq, M1e, N1e, nT, U1e, p_, rT, Dq, oT, iT, F1e, Uq, aT, jq, K1e, Gq, yOt, sGe, cGe, uGe, yGe;
+var import_node_module, import_crypto, import_crypto2, import_path, import_node_fs17, import_node_process4, import_fs, import_os, import_path2, yy, import_fs2, import_promises, import_path3, import_readline, import_promises2, import_path4, import_os2, import_path5, Se, import_promises3, xe, import_promises4, import_fs3, import_promises5, import_os3, import_path6, import_promises6, import_os4, import_node_path45, import_node_os10, import_node_process5, import_path7, import_events, import_fs4, import_promises7, import_path8, import_child_process, import_util9, import_child_process2, import_fs5, import_path9, import_path10, import_crypto3, import_fs6, import_path11, import_promises8, import_path12, import_path13, import_promises9, import_path14, import_path15, import_fs7, import_promises10, import_path16, import_crypto4, import_path17, import_async_hooks, import_fs8, import_promises11, import_crypto5, import_fs9, import_promises12, import_path18, import_promises13, import_path19, import_crypto6, import_path20, import_path21, import_path22, import_path23, import_promises14, import_fs10, import_promises15, import_path24, import_util10, import_path25, import_os5, import_path26, import_path27, import_path28, import_path29, import_path30, import_net, import_os6, import_child_process3, import_fs11, import_child_process4, import_crypto7, import_promises16, import_module, import_os7, import_path31, import_url, import_events2, import_child_process5, import_fs12, import_readline2, import_string_decoder, import_fs13, import_promises17, import_os8, import_path32, import_crypto8, import_os9, import_fs14, import_path33, import_crypto9, import_fs15, import_promises18, import_path34, IZ, DZ, v_, LZ, OT, NZ, UZ, kT, X, FZ, dr, HZ, jZ, BZ, ot, st, ed, Kv, Te, Me, Oo, nd, hF, Xv, Qv, rd, LF, or, WF, ZF, sA, XF, od, sd, hg, id, Sg, Oz, fA, $z, Wz, Zz, s$, a$, d$, f$, g$, _$, E$, v$, T$, O$, I$, L$, wg, z$, j$, G$, V$, yA, SA, rH, lH, uH, _H, EH, EA, RH, TH, kH, DH, NH, zH, jH, GH, VH, ZH, JH, ej, nj, ij, cj, uj, CA, bj, Aj, wj, PT, KZ, GZ, VGe, VZ, MT, wr, jo, JZ, XZ, NT, UT, FT, zT, Bo, $T, HT, jT, BT, a4, sp, l4, c4, vt, u4, Nt, KT, d4, p4, uc, GT, m4, g4, WT, _4, y4, VT, Dn, Et, b4, C4, v4, A4, ra, x4, ip, qT, ZT, w4, O4, ro, P4, I4, D4, L4, M4, N4, U4, YT, JT, Sn, H4, Ko, j4, oo, XT, QT, G4, W4, V4, ew, Z4, Y4, tw, X4, nw, R_, rw, ow, Go, sw, iw, aw, lw, ei, aY, cw, Or, cY, uw, dw, lp, pw, cp, mY, gY, up, _Y, aa, fw, la, EY, bY, CY, vY, AY, RY, xY, TY, wY, OY, kY, PY, IY, mw, x_, gw, ca, MY, et, dp, hw, pp, zY, $Y, _w, HY, ua, yw, wt, KY, T_, Sw, WY, VY, qY, so, mp, Ew, vw, bw, YY, Cw, JY, XY, kr, QY, e9, Wo, n9, da, o9, s9, i9, a9, l9, c9, u9, d9, p9, f9, m9, g9, h9, _9, y9, S9, E9, b9, C9, v9, A9, R9, x9, T9, Qe, Aw, pa, hp, Rw, dc, k9, w_, P9, Pr, xw, I9, fa, D9, L9, _p, N9, ma, yp, z9, Tw, $9, H9, ww, Vo, Ir, pc, W9, V9, q9, Ow, Y9, Sp, J9, Ep, X9, qo, Q9, bp, kw, eJ, Pw, Iw, Dw, Lw, tJ, nJ, rJ, oJ, sJ, ti, io, iJ, Mw, Nw, Cp, aJ, Uw, Fw, ga, pr, uJ, Fe, $w, O_, k_, I_, ha, Bw, D_, qw, Vw, N_, U_, yJ, _a3, Yo, Zw, bJ, Rp, Yw, vJ, AJ, Jw, xp, Xw, Tp, Qw, kJ, ya, IJ, DJ, Sa, MJ, fc, NJ, eO, FJ, zJ, $J, tO, Ea, jJ, nO, rO, sO, iO, Vn, GJ, Ln, Jo, aO, lO, cO, wp, XJ, QJ, uO, ba, dO, pO, fO, Dr, ao, mO, Ca, gO, z_, $_, H_, j_, B_, K_, G_, W_, V_, q_, Z_, _O, Y_, J_, yO, X_, c3, Q_, ey, ty, ny, ry, oy, sy, iy, ay, ly, cy, we, SO, en, d3, Pp, vO, g3, gy, wO, S3, BO, KO, Ip, Dp, v3, GO, WO, F9e, IO, A3, hy, x3, NO, I3, Ay, Ry, D3, xy, L3, bc, xa, Ty, wy, Oy, ky, XO, Py, Iy, Dy, Ly, My, Ny, Uy, Fy, zy, nk, rk, d3e, p3e, f3e, m3e, g3e, U3, jp, jy, ik, By, Ky, lk, $3, uk, ck, G3, W3, V3, it, Y3, J3, hk, tXe, Q3, kt, We, gX, Ta, SX, mr, Yp, Jp, eS, nS, yXe, IX, DX, rS, ka, oS, Ok, kk, HX, jX, ef, bXe, Uk, Mr, wc, Fk, Pa, OXe, kXe, iS, PXe, IXe, DXe, GX, YX, JX, XX, QX, e6, t6, Yk, n6, r6, o6, s6, i6, a6, l6, c6, Vk, uS, lf, dS, Qk, eP, uf, os10, qXe, ZXe, h6, tP, df, _6, y6, S6, E6, b6, Jn, gr, nP, rP, Dc, pS, oP, gS, lP, C6, mS, lS, sP, w6, O6, dP, k6, YXe, JXe, P6, I6, pf, L6, fP, XXe, QXe, M6, SS, z6, $6, j6, bP, CP, G6, Lc, si, Z6, ES, bS, X6, Q6, e5, t5, n5, u5, r5, o5, s5, i5, a5, l5, c5, u52, d5, p5, f5, m5, g5, h5, _5, y5, S5, E5, b5, C5, v5, A5, R5, x5, T5, w5, O5, k5, P5, I5, D5, L5, M5, N5, U5, F5, z5, $5, H5, j5, B5, K5, G5, W5, V5, q5, Z5, Y5, J5, X5, Q5, e8, t8, n8, r8, o8, s8, i8, a8, l8, c8, u8, d8, CS, p8, f8, m8, g8, h8, _8, y8, S8, E8, b8, C8, v8, A8, R8, x8, T8, w8, O8, k8, P8, I8, D8, L8, M8, N8, U8, F8, z8, $8, H8, j8, B8, K8, G8, W8, V8, q8, Z8, Y8, J8, X8, Q8, e7, t7, n7, r7, o7, s7, i7, a7, l7, c7, u7, d7, p7, f7, m7, g7, h7, _7, y7, S7, E7, b7, C7, TP, v7, L6e, RP, A7, x7, kP, ff, U6e, F6e, Ua, z6e, $6e, H6e, j6e, PP, IP, vS, DP, w7, LP, O7, k7, P7, AS, RS, xS, I7, MP, NP, D7, G6e, L7, W6e, M7, N7, UP, V6e, U7, F7, z7, $7, H7, j7, B7, q6e, is, wS, Fa, K7, G7, W7, i5e, X7, Q7, HP, $P, BP, tQ, WP, VP, JP, _Q, QP, eI, xQ, Uc, DS, $a, wQ, OQ, kQ, PQ, IQ, DQ, LQ, MQ, NQ, UQ, FQ, zQ, $Q, HQ, jQ, BQ, KQ, GQ, WQ, VQ, qQ, ZQ, YQ, JQ, XQ, QQ, eee, tee, nee, ree, oee, see, iee, aee, lee, cee, uee, dee, pee, fee, mee, gee, hee, _ee, yee, See, Eee, bee, Cee, vee, Aee, Ree, xee, Tee, wee, Oee, kee, Pee, Iee, Dee, Lee, Mee, Nee, Uee, Fee, zee, $ee, Hee, jee, Bee, Kee, Gee, Wee, Vee, qee, Zee, Yee, Jee, Xee, Qee, ete, tte, nte, rte, ote, ste, ite, ate, lte, cte, ute, dte, pte, fte, mte, gte, hte, _te, yte, Ste, Ete, bte, Cte, vte, Ate, Rte, xte, Tte, wte, Ote, kte, Pte, Ite, Dte, Lte, Mte, Nte, Ute, Fte, zte, $te, Hte, jte, Bte, Kte, Gte, Wte, Vte, qte, Zte, Yte, Jte, Xte, Qte, ene, tne, nne, rne, one, sne, ine, ane, lne, cne, une, dne, pne, fne, mne, gne, hne, _ne, yne, Sne, Ene, bne, Cne, vne, Ane, Rne, xne, Tne, wne, One, kne, Pne, Ine, Dne, Lne, Mne, Nne, Une, Fne, zne, $ne, Hne, jne, Bne, Kne, Gne, Wne, Vne, qne, Zne, Yne, Jne, Xne, Qne, ere, tre, nre, rre, ore, sre, ire, are, lre, cre, ure, dre, pre, fre, mre, gre, hre, _re, yre, Sre, Ere, bre, Cre, vre, Are, Rre, xre, Tre, wre, Ore, kre, Pre, Ire, Dre, Lre, Mre, Nre, Ure, Fre, zre, $re, Hre, jre, Bre, Kre, Gre, Wre, Vre, qre, Zre, Yre, Jre, Xre, Qre, eoe, toe, noe, roe, ooe, soe, ioe, aoe, loe, coe, uoe, doe, poe, foe, moe, goe, hoe, _oe, yoe, Soe, Eoe, boe, Coe, voe, Aoe, Roe, xoe, Toe, woe, Ooe, koe, Poe, Ioe, Doe, Loe, Moe, Noe, Uoe, Foe, zoe, $oe, Hoe, joe, Boe, Koe, Goe, Woe, Voe, qoe, Zoe, Yoe, Joe, Xoe, Qoe, ese, tse, nse, rse, ose, sse, ise, ase, lse, cse, use, dse, pse, fse, mse, gse, hse, _se, yse, Sse, Ese, LS, bse, Cse, vse, Ase, Rse, xse, Tse, wse, Ose, kse, Pse, Ise, Dse, Lse, Mse, Nse, Use, Fse, zse, $se, Hse, jse, Bse, Kse, Gse, Wse, Vse, qse, Zse, Yse, Jse, Xse, Qse, eie, tie, nie, rie, oie, sie, iie, aie, lie, cie, uie, die, pie, fie, mie, gie, hie, _ie, yie, Sie, Eie, bie, Cie, vie, Aie, Rie, xie, Tie, wie, Oie, kie, Pie, Iie, Die, Lie, Mie, Nie, Uie, Fie, zie, $ie, Hie, jie, Bie, Kie, Gie, Wie, Vie, qie, Zie, Yie, Jie, Xie, Qie, eae, tae, nae, rae, oae, sae, iae, aae, lae, cae, uae, dae, pae, fae, mae, gae, hae, _ae, yae, Sae, Eae, bae, Cae, vae, Aae, Rae, xae, Tae, wae, Oae, kae, Pae, Iae, Dae, Lae, Mae, Nae, Uae, Fae, zae, $ae, Hae, jae, Bae, Kae, Gae, Wae, Vae, qae, Zae, Yae, Jae, Xae, Qae, ele, tle, nle, rle, ole, sle, ile, ale, lle, cle, ule, dle, ple, fle, mle, gle, hle, _le, yle, Sle, Ele, ble, Cle, vle, Ale, Rle, xle, Tle, wle, Ole, kle, Ple, Ile, Dle, Lle, Mle, Nle, Ule, Fle, zle, $le, Hle, jle, Ble, Kle, Gle, Wle, Vle, qle, Zle, Yle, Jle, MS, Xle, Qle, ece, tce, nce, rce, oce, sce, ice, ace, lce, cce, uce, dce, pce, fce, mce, gce, hce, _ce, yce, Sce, Ece, bce, Cce, vce, Ace, Rce, xce, Tce, wce, Oce, kce, Pce, Ice, Dce, Lce, Mce, Nce, Uce, Fce, zce, $ce, Hce, jce, Bce, Kce, Gce, Wce, Vce, qce, Zce, Yce, Jce, Xce, Qce, eue, tue, nue, rue, oue, sue, iue, aue, lue, cue, uue, due, pue, fue, mue, gue, hue, _ue, yue, Sue, Eue, bue, Cue, vue, Aue, Rue, xue, Tue, wue, Oue, kue, Pue, Iue, Due, Lue, Mue, Nue, Uue, Fue, zue, $ue, Hue, jue, Bue, Kue, Gue, Wue, Vue, que, Zue, Yue, Jue, Xue, Que, ede, tde, nde, rde, ode, sde, ide, ade, lde, cde, ude, dde, pde, fde, mde, gde, hde, _de, yde, Sde, Ede, bde, Cde, vde, Ade, Rde, xde, Tde, wde, Ode, kde, Pde, Ide, Dde, Lde, Mde, Nde, Ude, Fde, zde, $de, Hde, jde, Bde, Kde, Gde, Wde, Vde, qde, Zde, Yde, Jde, Xde, Qde, epe, tpe, npe, rpe, ope, spe, ipe, ape, lpe, cpe, upe, dpe, ppe, fpe, mpe, gpe, hpe, _pe, ype, Spe, Epe, bpe, Cpe, vpe, Ape, Rpe, xpe, Tpe, wpe, Ope, kpe, Ppe, Ipe, Dpe, Lpe, Mpe, Npe, Upe, Fpe, zpe, $pe, Hpe, jpe, Bpe, Kpe, Gpe, Wpe, Vpe, qpe, Zpe, Ype, Jpe, Xpe, Qpe, efe, tfe, nfe, rfe, ofe, sfe, ife, afe, lfe, cfe, ufe, dfe, pfe, ffe, mfe, gfe, hfe, _fe, yfe, Sfe, Efe, bfe, Cfe, vfe, Afe, Rfe, xfe, Tfe, wfe, Ofe, kfe, Pfe, Ife, Dfe, Lfe, Mfe, Nfe, Ufe, Ffe, zfe, $fe, Hfe, jfe, Bfe, Kfe, Gfe, Wfe, Vfe, qfe, Zfe, Yfe, Jfe, Xfe, Qfe, eme, tme, nme, rme, ome, sme, ime, ame, lme, cme, ume, dme, pme, fme, mme, gme, hme, _me, yme, Sme, Eme, bme, Cme, vme, Ame, Rme, xme, Tme, wme, Ome, kme, Pme, Ime, Dme, Lme, Mme, Nme, Ume, Fme, zme, $me, Hme, jme, Bme, Kme, Gme, Wme, Vme, qme, Zme, Yme, Jme, NS, Xme, Qme, ege, tge, nge, rge, oge, sge, ige, age, lge, cge, uge, dge, pge, fge, mge, gge, hge, _ge, yge, Sge, Ege, bge, Cge, vge, Age, Rge, xge, Tge, wge, Oge, kge, Pge, Ige, Dge, Lge, Mge, Nge, Uge, Fge, zge, $ge, Hge, US, jge, Bge, Kge, Gge, Wge, Vge, qge, Zge, Yge, Jge, Xge, Qge, ehe, the, nhe, rhe, ohe, she, ihe, ahe, lhe, che, uhe, dhe, phe, fhe, mhe, ghe, hhe, _he, yhe, She, Ehe, bhe, Che, vhe, Ahe, Rhe, xhe, The, whe, Ohe, khe, Phe, Ihe, Dhe, Lhe, Mhe, Nhe, FS, rI, oI, Uhe, Fhe, zhe, $he, Hhe, jhe, Bhe, Khe, Ghe, Whe, Vhe, qhe, Zhe, Yhe, Jhe, Xhe, Qhe, e_e, t_e, n_e, r_e, o_e, s_e, i_e, a_e, l_e, c_e, u_e, d_e, p_e, f_e, m_e, g_e, h_e, __e, y_e, S_e, E_e, b_e, C_e, v_e, A_e, R_e, x_e, T_e, w_e, O_e, k_e, P_e, I_e, D_e, L_e, M_e, N_e, U_e, F_e, z_e, $_e, H_e, j_e, B_e, K_e, G_e, W_e, V_e, q_e, Z_e, Y_e, J_e, Q_e, Xn, eye, F8e, tye, z8e, nye, iI, rye, oye, lI, cye, uye, dye, _ye, on, vye, Aye, dI, C7e, v7e, ho, kI, PI, Dye, Sf, Lye, jc, Mye, Nye, LI, NI, Fye, VS, zye, $ye, x7e, zI, YS, KI, GI, VI, Hye, qS, ls, Kye, Gye, oD, nE, sD, So, Yc, vn, Zye, oE, sE, iD, aD, wf, Jc, Xc, kf, Qc, Pf, eu, fi, tu, mi, lD, cD, uD, dD, pD, fD, mD, gD, hD, _D, yD, SD, ED, bD, vD, AD, cE, RD, Xye, TD, wD, OD, kD, PD, uE, ID, DD, LD, MD, FD, If, nu, zD, $D, HD, jD, BD, zt, dE, Df, pE, fE, KD, GD, WD, VD, qD, ru, ZD, YD, JD, XD, QD, eL, tL, mE, yr, He, rL, ou, Je, yE, SE, EE, fL, mL, tSe, bE, CE, vE, AE, RE, xE, TE, wE, gL, hL, _L, yL, OE, sSe, kE, PE, IE, DE, LE, ME, NE, Nf, UE, FE, zE, $E, HE, jE, BE, cSe, gE, KE, vL, Uf, GE, WE, VE, qE, ZE, YE, Ff, JE, XE, QE, eb, tb, nb, zf, AL, rb, ob, sb, TL, ab, RL, xL, $f, Hf, dSe, fSe, OL, kL, Sr, FL, ML, zL, lu, hSe, iC, aC, lC, HL, jL, cC, uC, BL, dC, KL, pC, GL, fC, mC, WL, VL, qL, ZL, gC, YL, hC, JL, XL, _C, yC, SC, EC, QL, sC, bC, CC, vC, AC, RC, xC, TC, wC, OC, tM, qf, kC, $L, rM, ASe, Fn, oM, sM, iM, aM, lM, cM, uM, dM, pM, fM, mM, gM, Be, SM, LC, ct, MC, EM, bM, CM, pEe, fEe, Yf, mEe, gEe, hEe, _Ee, yEe, SEe, EEe, bEe, CEe, vEe, AEe, REe, xEe, TEe, wEe, OEe, NC, kEe, vM, PEe, IEe, DEe, LEe, MEe, fu, AM, NEe, UEe, IC, DC, FEe, zEe, qa, TM, HEe, jEe, KEe, wM, em, mu, qEe, ZEe, JEe, OM, Qn, kM, LM, nbe, rbe, abe, lbe, cbe, rm, pbe, At, hbe, BC, BM, Zet, WM, VM, qM, ZM, Cbe, vbe, YM, Abe, Rbe, JM, xbe, Tbe, QM, Ibe, eN, Lbe, nN, Mbe, Nbe, sm, rN, iN, Fbe, aN, $be, jbe, Kbe, Gbe, yu, lN, uN, dN, Xbe, KM, Qbe, eCe, tCe, oCe, iCe, _N, yN, wN, Ytt, ON, OCe, DCe, LN, $Ce, HCe, Cu, BCe, MN, VCe, QCe, ive, uve, VN, pve, fve, _rt, gve, Sve, nv, tv, GN, tU, Fve, Hve, iU, tAe, sAe, iAe, aAe, cAe, Ie, bU, Q, vo, F, zn, fAe, ms, mAe, _m, nn, he, Xa, an, lv, cv, Si, wu, se, br, CU, Oe, gAe, hAe, _Ae, yAe, SAe, EAe, bAe, CAe, vAe, uv, AAe, RAe, xAe, TAe, wAe, OAe, vU, kAe, Ro, el, tl, ym, ku, Sm, Pu, Iu, Em, Ei, xo, bm, Fr, ft, Du, Ao, pv, Lu, To, Cm, vm, nl, Ou, Mu, Nu, bi, Uu, rl, $r, zr, gs, Fu, zu, Am, fv, Rm, $u, wot, H, Oot, kot, Pot, Iot, Dot, Lot, Mot, Not, Uot, Fot, zot, $ot, Hot, jot, xU, Bot, Kot, Got, Wot, Vot, qot, Zot, Yot, Jot, Xot, Qot, est, tst, nst, rst, ost, sst, ist, ast, FAe, zAe, gv, OU, Ss, km, Mt, kU, PU, kst, HAe, jAe, hv, $n, Hu, IU, Yt, tr, nr, Jt, Pm, DU, _v, LU, MU, yv, ju, le, Sv, NU, Pst, Ist, Im, BAe, Dm, KAe, Bu, ol, UU, GAe, WAe, VAe, qAe, ZAe, YAe, Ev, JAe, XAe, bv, Lm, QAe, eRe, Mm, tRe, Ku, Gu, nRe, Wu, sl, rRe, Vu, Nm, Um, Fm, Dst, zm, $m, Hm, FU, zU, $U, Cv, HU, qu, il, jU, oRe, jm, sRe, Bm, iRe, vv, aRe, Km, lRe, cRe, uRe, dRe, pRe, fRe, mRe, gRe, hRe, _Re, Gm, yRe, SRe, Wm, Av, Rv, xv, ERe, bRe, CRe, Tv, vRe, ARe, RRe, xRe, TRe, BU, Vm, wRe, qm, Lst, ORe, al, kRe, Mst, Zu, PRe, wv, IRe, DRe, LRe, MRe, NRe, URe, FRe, Om, zRe, $Re, HRe, Yu, Ov, jRe, BRe, KRe, GRe, WRe, VRe, qRe, ZRe, YRe, JRe, XRe, QRe, exe, txe, nxe, rxe, oxe, sxe, ll, ixe, axe, lxe, Zm, cxe, uxe, dxe, kv, pxe, Nst, Ust, Fst, zst, $st, Hst, ae, WU, qU, VU, ZU, YU, Ym, e0, fxe, mxe, Dv, Cr, gxe, Ju, d0, h0, _0, v0, A0, Sxe, Exe, Mv, Cxe, Fv, Oj, kj, PA, IA, DA, Lj, Dj, aLe, NA, FA, uLe, dd, fLe, Po, SLe, ELe, zA, bLe, xLe, TLe, wLe, OLe, kLe, $j, qj, ILe, DLe, LLe, MLe, Ce, NLe, Wg, Oi, VA, Do, Jj, Xj, Qj, eB, tB, nB, qA, ZA, jA, Bj, jLe, BLe, GLe, rB, BA, Gg, GA, WA, VLe, qLe, Kj, Hs, sB, QLe, YA, iB, uB, eMe, dB, pB, fB, mB, tMe, XA, aB, QA, gB, hB, _B, yB, jn, lMe, SB, dMe, bB, mMe, fd, RB, hMe, Rr, TB, SMe, EMe, Pl, wB, Vg, AMe, Il, RMe, xMe, qg, OB, wMe, OMe, kB, eo, Dl, Zg, DB, NMe, FB, WMe, VMe, $B, HB, jB, BB, Ml, GB, nR, WB, Jg, KB, eNe, Bs, VB, gd, Nl, Xg, tNe, YB, qB, Pi, rK, iK, pNe, hd, _d, to, yd, nh, uK, aK, _Ne, lK, cK, Sd, Ul, rh, oh, dK, CNe, pK, sh, fK, RNe, xNe, TNe, mK, wNe, ONe, ih, Ed, lr, gK, hK, yK, SK, EK, ah, bK, FNe, CK, zNe, $Ne, HNe, vK, BNe, lh, AK, RK, xK, VNe, dn, TK, wK, OK, kK, PK, QNe, eUe, IK, DK, rUe, LK, MK, NK, UK, iUe, aUe, lUe, cUe, uUe, dUe, pUe, fUe, mUe, gUe, hUe, _Ue, yUe, SUe, EUe, bUe, CUe, vUe, AUe, FK, xUe, zK, $K, wUe, HK, OUe, jK, BK, PUe, KK, IUe, DUe, LUe, GK, MUe, NUe, UUe, FUe, WK, zUe, $Ue, HUe, VK, jUe, BUe, KUe, GUe, WUe, VUe, qUe, ZUe, YUe, JUe, XUe, QUe, e0e, t0e, n0e, r0e, Xe, qK, ZK, YK, JK, a0e, l0e, uh, XK, QK, e1, n1, r1, dh, m0e, g0e, h0e, _0e, bd, o1, S0e, Fl, s1, b0e, i1, Di, a1, l1, c1, u1, d1, p1, f1, P0e, I0e, m1, D0e, g1, h1, _1, vyt, U0e, y1, Ayt, iR, F0e, z0e, $0e, Gs, zl, fh, E1, b1, H0e, j0e, B0e, K0e, mh, $l, gh, Ws, aR, hh, _h, G0e, W0e, lR, R1, x1, V0e, uR, k1, P1, I1, D1, L1, Y0e, dR, J0e, Fyt, pR, X0e, fR, mR, Q0e, zyt, eFe, gR, hR, _R, $yt, M1, yR, N1, U1, tFe, nFe, rFe, oFe, iFe, Mi, cFe, $1, Wyt, Vyt, H1, j1, B1, K1, uFe, G1, W1, V1, q1, dFe, pFe, SR, fFe, eSt, tSt, mFe, jl, Vs, gFe, Y1, hFe, _Fe, X1, Q1, eG, yFe, SFe, tG, EFe, bFe, CFe, vFe, bR, CR, RFe, xFe, vR, TFe, Eh, nSt, Cd, wFe, OFe, aSt, rG, PFe, IFe, _St, oG, sG, bSt, CSt, HFe, jFe, $St, BFe, KFe, HSt, JSt, XSt, lG, OR, VFe, YFe, uG, eze, nze, gG, vd, vh, kR, zi, sze, yG, ize, yEt, Ad, $i, bG, Kn, AEt, REt, xEt, aze, AG, wG, $R, dze, $G, pze, fze, mze, gze, hze, BR, HG, jG, fbt, yze, Sze, Eze, Gn, ji, kG, PG, NR, UR, KR, GG, Cze, vze, Rze, GR, xze, Tze, xh, WR, Oze, kze, mbt, Pze, Ize, Dze, Lze, Mze, Nze, qG, Uze, Fze, zze, $ze, ZG, Hze, IG, jze, Bze, YG, Kze, Gze, DG, Wze, Vze, JG, qze, Zze, Yze, Jze, QG, Xze, Qze, e$e, t$e, r$e, o$e, s$e, i$e, a$e, eW, nW, c$e, m$e, xd, VR, gbt, hbt, _bt, h$e, qR, Th, MR, aW, _$e, S$e, lW, E$e, b$e, C$e, v$e, A$e, x$e, w$e, O$e, k$e, P$e, I$e, N$e, ybt, FR, Sbt, U$e, MG, Td, Ebt, bbt, uW, z$e, $$e, H$e, Cbt, j$e, B$e, vbt, Abt, K$e, Rbt, Oh, kh, G$e, YR, Ph, W$e, Ih, Mbt, Nbt, Ubt, Dh, V$e, Z$e, tx, EW, Id, Fh, X$e, xCt, Q$e, eHe, ix, ax, lx, cx, zh, $h, MW, tHe, nHe, aHe, uHe, dHe, Zs, pHe, CW, vW, AW, Nh, UW, fHe, mHe, gHe, hHe, _He, yHe, SHe, EHe, pn, dx, nx, Mh, Bi, AHe, TCt, xHe, Pd, RW, THe, xW, wHe, OHe, Hh, kHe, TW, fx, Bh, Ki, KW, Gl, PHe, Kh, kW, Wl, NHe, Ld, UHe, tV, rV, jHe, XHe, cvt, tje, fV, mV, sje, aje, _V, yV, pje, zvt, $vt, gje, yje, Sje, Kvt, Gvt, eAt, RV, Eje, bje, mAt, Cje, gAt, xV, wV, OV, Js, Lje, FV, Yh, Jh, Md, Tx, zV, $V, HV, Xh, jV, cr, KV, Mo, Fje, zje, yRt, jje, Gje, Vje, sBe, YV, e22, o_, gBe, t2, s_, kx, o2, LBe, UBe, $x, Vi, R2, KBe, GBe, Dx, ZBe, k2, n_, l2, sKe, lKe, z2, bKe, RKe, ec, W2, H2, xKe, wKe, PKe, IKe, $Ke, X2, HKe, jKe, BKe, KKe, VKe, eTt, qKe, tTt, nTt, ZKe, rTt, YKe, oTt, JKe, Wx, XKe, iTt, eq, tq, QKe, nq, rq, e1e, t1e, oq, sq, n1e, r1e, aTt, lTt, c1e, Zx, cq, u1e, uq, a_, d1e, Xx, nc, S1e, c_, mq, gq, Qx, hq, _q, E1e, Sq, u_, rc, d_, b1e, bq, Uo, Cq, vq, A1e, Yd, Jd, R1e, x1e, Aq, gn, T1e, w1e, O1e, Xs, k1e, P1e, xq, Pwt, I1e, Oq, kq, Pq, D1e, L1e, Iq, M1e, N1e, nT, U1e, p_, rT, Dq, oT, iT, F1e, Uq, aT, jq, K1e, Gq, yOt, sGe, cGe, uGe, yGe;
 var init_sdk = __esm({
   "node_modules/.pnpm/@anthropic-ai+claude-agent-sdk@0.3.292_@anthropic-ai+sdk@0.131.0_zod@4.6.5__@modelconte_9caa915130557974815a7ac66b010e49/node_modules/@anthropic-ai/claude-agent-sdk/sdk.mjs"() {
     import_node_module = require("node:module");
@@ -83859,7 +83959,7 @@ var init_sdk = __esm({
     import_path6 = require("path");
     import_promises6 = require("fs/promises");
     import_os4 = require("os");
-    import_node_path47 = __toESM(require("node:path"), 1);
+    import_node_path45 = __toESM(require("node:path"), 1);
     import_node_os10 = __toESM(require("node:os"), 1);
     import_node_process5 = __toESM(require("node:process"), 1);
     import_path7 = require("path");
@@ -92310,16 +92410,16 @@ var init_sdk = __esm({
     wS = import_node_os10.default.tmpdir();
     ({ env: Fa } = import_node_process5.default);
     K7 = (e14) => {
-      let t10 = import_node_path47.default.join(is, "Library");
-      return { data: import_node_path47.default.join(t10, "Application Support", e14), config: import_node_path47.default.join(t10, "Preferences", e14), cache: import_node_path47.default.join(t10, "Caches", e14), log: import_node_path47.default.join(t10, "Logs", e14), temp: import_node_path47.default.join(wS, e14) };
+      let t10 = import_node_path45.default.join(is, "Library");
+      return { data: import_node_path45.default.join(t10, "Application Support", e14), config: import_node_path45.default.join(t10, "Preferences", e14), cache: import_node_path45.default.join(t10, "Caches", e14), log: import_node_path45.default.join(t10, "Logs", e14), temp: import_node_path45.default.join(wS, e14) };
     };
     G7 = (e14) => {
-      let t10 = Fa.APPDATA || import_node_path47.default.join(is, "AppData", "Roaming"), n10 = Fa.LOCALAPPDATA || import_node_path47.default.join(is, "AppData", "Local");
-      return { data: import_node_path47.default.join(n10, e14, "Data"), config: import_node_path47.default.join(t10, e14, "Config"), cache: import_node_path47.default.join(n10, e14, "Cache"), log: import_node_path47.default.join(n10, e14, "Log"), temp: import_node_path47.default.join(wS, e14) };
+      let t10 = Fa.APPDATA || import_node_path45.default.join(is, "AppData", "Roaming"), n10 = Fa.LOCALAPPDATA || import_node_path45.default.join(is, "AppData", "Local");
+      return { data: import_node_path45.default.join(n10, e14, "Data"), config: import_node_path45.default.join(t10, e14, "Config"), cache: import_node_path45.default.join(n10, e14, "Cache"), log: import_node_path45.default.join(n10, e14, "Log"), temp: import_node_path45.default.join(wS, e14) };
     };
     W7 = (e14) => {
-      let t10 = import_node_path47.default.basename(is);
-      return { data: import_node_path47.default.join(Fa.XDG_DATA_HOME || import_node_path47.default.join(is, ".local", "share"), e14), config: import_node_path47.default.join(Fa.XDG_CONFIG_HOME || import_node_path47.default.join(is, ".config"), e14), cache: import_node_path47.default.join(Fa.XDG_CACHE_HOME || import_node_path47.default.join(is, ".cache"), e14), log: import_node_path47.default.join(Fa.XDG_STATE_HOME || import_node_path47.default.join(is, ".local", "state"), e14), temp: import_node_path47.default.join(wS, t10, e14) };
+      let t10 = import_node_path45.default.basename(is);
+      return { data: import_node_path45.default.join(Fa.XDG_DATA_HOME || import_node_path45.default.join(is, ".local", "share"), e14), config: import_node_path45.default.join(Fa.XDG_CONFIG_HOME || import_node_path45.default.join(is, ".config"), e14), cache: import_node_path45.default.join(Fa.XDG_CACHE_HOME || import_node_path45.default.join(is, ".cache"), e14), log: import_node_path45.default.join(Fa.XDG_STATE_HOME || import_node_path45.default.join(is, ".local", "state"), e14), temp: import_node_path45.default.join(wS, t10, e14) };
     };
     i5e = OS("claude-cli");
     X7 = 100;
@@ -106372,8 +106472,8 @@ var require_utils3 = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path72) {
-      let input2 = path72;
+    function removeDotSegments(path70) {
+      let input2 = path70;
       const output2 = [];
       let nextSlash = -1;
       let len = 0;
@@ -106782,8 +106882,8 @@ var require_schemes = __commonJS({
       }
       if (wsComponent.resourceName) {
         const queryIndex = wsComponent.resourceName.indexOf("?");
-        const path72 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
-        wsComponent.path = path72 && path72 !== "/" ? path72 : void 0;
+        const path70 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path70 && path70 !== "/" ? path70 : void 0;
         wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
@@ -110310,7 +110410,7 @@ var require_dist2 = __commonJS({
 });
 
 // src/cli.ts
-var import_node_path71 = __toESM(require("node:path"), 1);
+var import_node_path69 = __toESM(require("node:path"), 1);
 
 // node_modules/.pnpm/commander@15.0.0/node_modules/commander/lib/error.js
 var CommanderError = class extends Error {
@@ -113423,9 +113523,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} [path]
    * @return {(string|null|Command)}
    */
-  executableDir(path72) {
-    if (path72 === void 0) return this._executableDir;
-    this._executableDir = path72;
+  executableDir(path70) {
+    if (path70 === void 0) return this._executableDir;
+    this._executableDir = path70;
     return this;
   }
   /**
@@ -114901,19 +115001,19 @@ function writePools(paths, pools) {
   applyPatch(paths.globalConfigFile, GlobalConfigSchema, { pools }, { defaults: {} });
 }
 function poolCycleOf(pools, name) {
-  const walk3 = (current, path72) => {
+  const walk3 = (current, path70) => {
     for (const entry of pools[current]?.identities ?? []) {
       const nested = poolNameOf(poolMemberIdentity(entry));
       if (nested === void 0) {
         continue;
       }
       if (nested === name) {
-        return [...path72, nested];
+        return [...path70, nested];
       }
-      if (path72.includes(nested)) {
+      if (path70.includes(nested)) {
         continue;
       }
-      const found = walk3(nested, [...path72, nested]);
+      const found = walk3(nested, [...path70, nested]);
       if (found !== void 0) {
         return found;
       }
@@ -115269,6 +115369,7 @@ init_realPorts();
 init_pipeline();
 init_walkPolicy();
 init_walk();
+init_names();
 var NoConfigProfileResolvedError = class extends CliError {
   constructor(identityName, cwd) {
     super(
@@ -115541,13 +115642,12 @@ var CATEGORY_LABELS = {
   knowledge: "knowledge",
   settings: "settings"
 };
-var PROFILE_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._@-]*$/;
 function validateProfileName(value2, existingNames) {
   if (value2.length === 0) {
     return "A name is required.";
   }
-  if (!PROFILE_NAME_RE.test(value2)) {
-    return "Names must start with a letter or digit, and contain only letters, digits, dots, dashes, underscores, and at signs.";
+  if (!isFileName(value2)) {
+    return `Names ${FILE_NAME_RULE}.`;
   }
   if (existingNames?.includes(value2) ?? false) {
     return `A configuration profile named "${value2}" already exists.`;
@@ -116114,7 +116214,7 @@ function statuslineChangeOf(options) {
     return void 0;
   }
   const assignments = (options.statusline ?? []).map(parseStatuslineAssignment);
-  return { set: Object.fromEntries(assignments.map(({ path: path72, value: value2 }) => [path72, value2])), unset: options.unsetStatusline ?? [] };
+  return { set: Object.fromEntries(assignments.map(({ path: path70, value: value2 }) => [path70, value2])), unset: options.unsetStatusline ?? [] };
 }
 function registerProfileCommand(program2, deps) {
   const { paths } = deps;
@@ -116542,7 +116642,7 @@ init_paths();
 init_package();
 
 // src/check.ts
-var import_node_path33 = __toESM(require("node:path"), 1);
+var import_node_path32 = __toESM(require("node:path"), 1);
 init_commandDeps();
 
 // src/checkReport.ts
@@ -116642,7 +116742,7 @@ init_realCredentialCache();
 init_providersStore();
 init_signIn();
 init_realPorts();
-var import_node_path32 = __toESM(require("node:path"), 1);
+var import_node_path31 = __toESM(require("node:path"), 1);
 init_zod();
 init_envBool();
 init_load();
@@ -116984,10 +117084,10 @@ function collectCheckReport(params) {
   }).input;
   const providerName = cascadeProviderName(cascade);
   const provider = providerName === void 0 ? void 0 : loadCheckProvider(paths, providerName);
-  const farmRoot = identityDecision.name === void 0 ? void 0 : import_node_path32.default.join(paths.identitiesDir, identityDecision.name);
+  const farmRoot = identityDecision.name === void 0 ? void 0 : import_node_path31.default.join(paths.identitiesDir, identityDecision.name);
   const settingsFiles = {
-    "settings.json": realFsPort.readFileUtf8(import_node_path32.default.join(claudeHome, "settings.json")),
-    "settings.local.json": realFsPort.readFileUtf8(import_node_path32.default.join(claudeHome, "settings.local.json"))
+    "settings.json": realFsPort.readFileUtf8(import_node_path31.default.join(claudeHome, "settings.json")),
+    "settings.local.json": realFsPort.readFileUtf8(import_node_path31.default.join(claudeHome, "settings.local.json"))
   };
   const report = runCheck({
     cwd,
@@ -117023,7 +117123,7 @@ function registerCheckCommand(program2, deps) {
   const command = program2.command("check [path]").description(
     "Show what a launch in a directory would share or hide and why, plus credential and settings diagnostics. Never touches the farm or spawns claude."
   ).option("--identity <name>", "Identity to check (defaults to the identity a launch there would resolve).").option("--json", "Print the report as JSON.").option("--strict", "Exit 1 when the report carries any warning, not only on errors.").action((pathArg, options) => {
-    const cwd = pathArg === void 0 ? process.cwd() : import_node_path33.default.resolve(pathArg);
+    const cwd = pathArg === void 0 ? process.cwd() : import_node_path32.default.resolve(pathArg);
     const report = collectCheckReport({ paths, cwd, ...options.identity === void 0 ? {} : { identity: options.identity }, env: process.env });
     if (options.json === true) {
       printJson(checkReportToJson(report));
@@ -117043,7 +117143,7 @@ function registerCheckCommand(program2, deps) {
 var import_node_crypto13 = require("node:crypto");
 var import_node_fs12 = __toESM(require("node:fs"), 1);
 var import_node_os6 = __toESM(require("node:os"), 1);
-var import_node_path34 = __toESM(require("node:path"), 1);
+var import_node_path33 = __toESM(require("node:path"), 1);
 init_commandDeps();
 init_state();
 init_schema();
@@ -117712,10 +117812,10 @@ async function callCodex(ports, request7, sessionId, signal) {
 // src/codex/commands.ts
 function codexHome(env, home) {
   const fromEnv = env.CODEX_HOME;
-  return fromEnv !== void 0 && fromEnv !== "" ? fromEnv : import_node_path34.default.join(home, ".codex");
+  return fromEnv !== void 0 && fromEnv !== "" ? fromEnv : import_node_path33.default.join(home, ".codex");
 }
 function codexUsageSnapshotPath() {
-  return import_node_path34.default.join(resolveClaudeHome(), "codex-quota.json");
+  return import_node_path33.default.join(resolveClaudeHome(), "codex-quota.json");
 }
 function isEnoent5(error63) {
   return typeof error63 === "object" && error63 !== null && "code" in error63 && error63.code === "ENOENT";
@@ -117733,7 +117833,7 @@ var realCodexAuthFs = {
     }
   },
   writePrivate: (filePath, contents) => {
-    import_node_fs12.default.mkdirSync(import_node_path34.default.dirname(filePath), { recursive: true });
+    import_node_fs12.default.mkdirSync(import_node_path33.default.dirname(filePath), { recursive: true });
     import_node_fs12.default.writeFileSync(filePath, contents, { encoding: "utf8", mode: PRIVATE_FILE_MODE });
     import_node_fs12.default.chmodSync(filePath, PRIVATE_FILE_MODE);
   },
@@ -117745,7 +117845,7 @@ function writeUsageSnapshot(log, snapshot) {
   const target = codexUsageSnapshotPath();
   const temp = `${target}.${String(process.pid)}.tmp`;
   try {
-    import_node_fs12.default.mkdirSync(import_node_path34.default.dirname(target), { recursive: true });
+    import_node_fs12.default.mkdirSync(import_node_path33.default.dirname(target), { recursive: true });
     import_node_fs12.default.writeFileSync(temp, `${JSON.stringify(snapshot, null, 2)}
 `);
     import_node_fs12.default.renameSync(temp, target);
@@ -117757,7 +117857,7 @@ function createCodexRoutePorts(log, signInFile, options) {
   const agent = createUpstreamAgent();
   const upstreamFetch = createUpstreamFetch(agent);
   const tempSuffix = `${String(process.pid)}.${(0, import_node_crypto13.randomUUID)()}`;
-  const auth = createCodexAuthStore(import_node_path34.default.join(codexHome(process.env, import_node_os6.default.homedir()), "auth.json"), {
+  const auth = createCodexAuthStore(import_node_path33.default.join(codexHome(process.env, import_node_os6.default.homedir()), "auth.json"), {
     fs: realCodexAuthFs,
     fetch: upstreamFetch,
     now: () => /* @__PURE__ */ new Date(),
@@ -117905,7 +118005,7 @@ function registerCodexCommand(program2, deps) {
 
 // src/frontdoor/commands.ts
 var import_node_crypto25 = require("node:crypto");
-var import_node_path54 = __toESM(require("node:path"), 1);
+var import_node_path52 = __toESM(require("node:path"), 1);
 var import_node_fs21 = __toESM(require("node:fs"), 1);
 init_commandDeps();
 init_configProfilesStore();
@@ -117927,11 +118027,11 @@ var realSessionFs = {
 };
 
 // src/agents/sessions.ts
-var import_node_path36 = __toESM(require("node:path"), 1);
+var import_node_path35 = __toESM(require("node:path"), 1);
 init_cliError();
 
 // src/agents/read.ts
-var import_node_path35 = __toESM(require("node:path"), 1);
+var import_node_path34 = __toESM(require("node:path"), 1);
 init_zod();
 
 // src/agents/schema.ts
@@ -118050,15 +118150,15 @@ function parseEntry2(project, entry) {
 }
 function listSessions2(fs30, configDir) {
   const found = [];
-  for (const project of fs30.readdir(import_node_path35.default.join(configDir, PROJECTS_DIR))) {
-    const projectDir = import_node_path35.default.join(configDir, PROJECTS_DIR, project);
+  for (const project of fs30.readdir(import_node_path34.default.join(configDir, PROJECTS_DIR))) {
+    const projectDir = import_node_path34.default.join(configDir, PROJECTS_DIR, project);
     const entries = /* @__PURE__ */ new Set();
     for (const name of fs30.readdir(projectDir)) {
       if (name.endsWith(TRANSCRIPT_SUFFIX)) {
         entries.add(name.slice(0, -TRANSCRIPT_SUFFIX.length));
         continue;
       }
-      const children = fs30.readdir(import_node_path35.default.join(projectDir, name));
+      const children = fs30.readdir(import_node_path34.default.join(projectDir, name));
       if (children.includes(SUBAGENTS_DIR) || children.includes(WORKFLOWS_DIR)) {
         entries.add(name);
       }
@@ -118078,8 +118178,8 @@ function locateAgents(fs30, configDir, relativeDir, workflowRunId, report) {
     const id2 = name.slice(AGENT_FILE_PREFIX.length, -META_SUFFIX.length);
     located.push({
       id: id2,
-      metaPath: import_node_path35.default.join(relativeDir, name),
-      transcriptPath: import_node_path35.default.join(relativeDir, `${AGENT_FILE_PREFIX}${id2}${TRANSCRIPT_SUFFIX}`),
+      metaPath: import_node_path34.default.join(relativeDir, name),
+      transcriptPath: import_node_path34.default.join(relativeDir, `${AGENT_FILE_PREFIX}${id2}${TRANSCRIPT_SUFFIX}`),
       workflowRunId
     });
   }
@@ -118122,7 +118222,7 @@ function describeFailure(error63) {
 }
 function readFileOrReport(fs30, configDir, relative, report) {
   try {
-    return fs30.readFileUtf8(import_node_path35.default.join(configDir, relative));
+    return fs30.readFileUtf8(import_node_path34.default.join(configDir, relative));
   } catch (error63) {
     report({ path: relative, reason: `could not be read: ${describeFailure(error63)}` });
     return void 0;
@@ -118130,7 +118230,7 @@ function readFileOrReport(fs30, configDir, relative, report) {
 }
 function listDirOrReport(fs30, configDir, relative, report) {
   try {
-    return fs30.readdir(import_node_path35.default.join(configDir, relative));
+    return fs30.readdir(import_node_path34.default.join(configDir, relative));
   } catch (error63) {
     report({ path: relative, reason: `could not be listed: ${describeFailure(error63)}` });
     return [];
@@ -118154,18 +118254,18 @@ var WorkflowRunFileSchema = external_exports.object({
   summary: external_exports.string().optional()
 });
 function summariseSession(fs30, configDir, ref) {
-  const sessionRelative = import_node_path35.default.join(PROJECTS_DIR, ref.project, ref.entry);
-  const subagentsRelative = import_node_path35.default.join(sessionRelative, SUBAGENTS_DIR);
-  const workflowsUnderSubagents = import_node_path35.default.join(subagentsRelative, WORKFLOWS_DIR);
+  const sessionRelative = import_node_path34.default.join(PROJECTS_DIR, ref.project, ref.entry);
+  const subagentsRelative = import_node_path34.default.join(sessionRelative, SUBAGENTS_DIR);
+  const workflowsUnderSubagents = import_node_path34.default.join(subagentsRelative, WORKFLOWS_DIR);
   const isMeta = (name) => name.startsWith(AGENT_FILE_PREFIX) && name.endsWith(META_SUFFIX);
-  let agentCount = fs30.readdir(import_node_path35.default.join(configDir, subagentsRelative)).filter(isMeta).length;
-  for (const runDir of fs30.readdir(import_node_path35.default.join(configDir, workflowsUnderSubagents))) {
+  let agentCount = fs30.readdir(import_node_path34.default.join(configDir, subagentsRelative)).filter(isMeta).length;
+  for (const runDir of fs30.readdir(import_node_path34.default.join(configDir, workflowsUnderSubagents))) {
     if (runDir.startsWith(WORKFLOW_RUN_PREFIX)) {
-      agentCount += fs30.readdir(import_node_path35.default.join(configDir, workflowsUnderSubagents, runDir)).filter(isMeta).length;
+      agentCount += fs30.readdir(import_node_path34.default.join(configDir, workflowsUnderSubagents, runDir)).filter(isMeta).length;
     }
   }
-  const workflowRunCount = fs30.readdir(import_node_path35.default.join(configDir, sessionRelative, WORKFLOWS_DIR)).filter((name) => name.startsWith(WORKFLOW_RUN_PREFIX) && name.endsWith(JSON_SUFFIX)).length;
-  const transcript = fs30.lstat(import_node_path35.default.join(configDir, PROJECTS_DIR, ref.project, `${ref.entry}${TRANSCRIPT_SUFFIX}`));
+  const workflowRunCount = fs30.readdir(import_node_path34.default.join(configDir, sessionRelative, WORKFLOWS_DIR)).filter((name) => name.startsWith(WORKFLOW_RUN_PREFIX) && name.endsWith(JSON_SUFFIX)).length;
+  const transcript = fs30.lstat(import_node_path34.default.join(configDir, PROJECTS_DIR, ref.project, `${ref.entry}${TRANSCRIPT_SUFFIX}`));
   return { ...ref, agentCount, workflowRunCount, ...transcript === void 0 ? {} : { updatedAt: new Date(transcript.mtimeMs).toISOString() } };
 }
 function readSessionAgentTree(fs30, configDir, ref, options = {}) {
@@ -118173,13 +118273,13 @@ function readSessionAgentTree(fs30, configDir, ref, options = {}) {
   const report = (problem) => {
     problems.push(problem);
   };
-  const sessionRelative = import_node_path35.default.join(PROJECTS_DIR, ref.project, ref.entry);
-  const subagentsRelative = import_node_path35.default.join(sessionRelative, SUBAGENTS_DIR);
-  const workflowsUnderSubagents = import_node_path35.default.join(subagentsRelative, WORKFLOWS_DIR);
+  const sessionRelative = import_node_path34.default.join(PROJECTS_DIR, ref.project, ref.entry);
+  const subagentsRelative = import_node_path34.default.join(sessionRelative, SUBAGENTS_DIR);
+  const workflowsUnderSubagents = import_node_path34.default.join(subagentsRelative, WORKFLOWS_DIR);
   const located = locateAgents(fs30, configDir, subagentsRelative, void 0, report);
   for (const runDir of listDirOrReport(fs30, configDir, workflowsUnderSubagents, report)) {
     if (runDir.startsWith(WORKFLOW_RUN_PREFIX)) {
-      located.push(...locateAgents(fs30, configDir, import_node_path35.default.join(workflowsUnderSubagents, runDir), runDir, report));
+      located.push(...locateAgents(fs30, configDir, import_node_path34.default.join(workflowsUnderSubagents, runDir), runDir, report));
     }
   }
   const agents = /* @__PURE__ */ new Map();
@@ -118220,7 +118320,7 @@ function readSessionAgentTree(fs30, configDir, ref, options = {}) {
     superseded: ref.superseded,
     agents: roots.sort().map(build),
     tasks: readTasks(fs30, configDir, ownTaskLists(ref.sessionId), [.../* @__PURE__ */ new Set([...teamNames, ...options.taskListIds ?? []])].filter((id2) => !ownTaskLists(ref.sessionId).includes(id2)), report),
-    workflowRuns: readWorkflowRuns(fs30, configDir, import_node_path35.default.join(sessionRelative, WORKFLOWS_DIR), report),
+    workflowRuns: readWorkflowRuns(fs30, configDir, import_node_path34.default.join(sessionRelative, WORKFLOWS_DIR), report),
     problems
   };
 }
@@ -118285,12 +118385,12 @@ function ownTaskLists(sessionId) {
 function readTasks(fs30, configDir, ownLists, sharedLists, report) {
   const tasks = [];
   [...ownLists, ...sharedLists].forEach((scope, index) => {
-    const relativeDir = import_node_path35.default.join(TASKS_DIR, scope);
+    const relativeDir = import_node_path34.default.join(TASKS_DIR, scope);
     for (const name of [...listDirOrReport(fs30, configDir, relativeDir, report)].sort()) {
       if (name.startsWith(".") || !name.endsWith(JSON_SUFFIX)) {
         continue;
       }
-      const relative = import_node_path35.default.join(relativeDir, name);
+      const relative = import_node_path34.default.join(relativeDir, name);
       const text5 = readFileOrReport(fs30, configDir, relative, report);
       const parsed = TaskFileSchema.safeParse(text5 === void 0 ? void 0 : parseJson3(text5));
       if (parsed.success) {
@@ -118308,7 +118408,7 @@ function readWorkflowRuns(fs30, configDir, relativeDir, report) {
     if (!name.startsWith(WORKFLOW_RUN_PREFIX) || !name.endsWith(JSON_SUFFIX)) {
       continue;
     }
-    const relative = import_node_path35.default.join(relativeDir, name);
+    const relative = import_node_path34.default.join(relativeDir, name);
     const text5 = readFileOrReport(fs30, configDir, relative, report);
     const parsed = WorkflowRunFileSchema.safeParse(text5 === void 0 ? void 0 : parseJson3(text5));
     if (!parsed.success) {
@@ -118331,13 +118431,13 @@ var SessionLookupError = class extends CliError {
   }
 };
 function identityConfigDir(identitiesDir, identity) {
-  return import_node_path36.default.join(identitiesDir, identity);
+  return import_node_path35.default.join(identitiesDir, identity);
 }
 function historyStores(fs30, identitiesDir, identities) {
   const byRealPath = /* @__PURE__ */ new Map();
   for (const identity of identities) {
     const configDir = identityConfigDir(identitiesDir, identity);
-    const real = fs30.realpath(import_node_path36.default.join(configDir, "projects"));
+    const real = fs30.realpath(import_node_path35.default.join(configDir, "projects"));
     if (real === void 0) {
       continue;
     }
@@ -118399,7 +118499,7 @@ function showSession(fs30, identitiesDir, identities, query, onlyIdentity) {
 init_realPorts();
 
 // src/supervise/registry.ts
-var import_node_path37 = __toESM(require("node:path"), 1);
+var import_node_path36 = __toESM(require("node:path"), 1);
 init_zod();
 var SupervisedSessionSchema = external_exports.strictObject({
   /** The launcher's process id, which is what tells a live entry from one a crashed launcher left behind. */
@@ -118424,19 +118524,19 @@ var SessionStateSchema = external_exports.strictObject({
   at: external_exports.iso.datetime()
 });
 function superviseDirOf(paths, pool) {
-  return import_node_path37.default.join(paths.superviseDir, pool);
+  return import_node_path36.default.join(paths.superviseDir, pool);
 }
 function sessionsDirOf(paths, pool) {
-  return import_node_path37.default.join(superviseDirOf(paths, pool), "sessions");
+  return import_node_path36.default.join(superviseDirOf(paths, pool), "sessions");
 }
 function sessionFileOf(paths, pool, sessionId) {
-  return import_node_path37.default.join(sessionsDirOf(paths, pool), `${sessionId}.json`);
+  return import_node_path36.default.join(sessionsDirOf(paths, pool), `${sessionId}.json`);
 }
 function stateDirOf(paths, pool) {
-  return import_node_path37.default.join(superviseDirOf(paths, pool), "state");
+  return import_node_path36.default.join(superviseDirOf(paths, pool), "state");
 }
 function sessionStatePath(paths, pool, sessionId) {
-  return import_node_path37.default.join(stateDirOf(paths, pool), `${sessionId}.json`);
+  return import_node_path36.default.join(stateDirOf(paths, pool), `${sessionId}.json`);
 }
 function writeSessionState(fs30, paths, pool, sessionId, state) {
   fs30.mkdirPrivate(stateDirOf(paths, pool));
@@ -118467,7 +118567,7 @@ function unregisterSupervised(fs30, paths, pool, sessionId) {
 function liveSupervised(fs30, paths, pool, isRunning) {
   const live = [];
   for (const name of fs30.readdir(sessionsDirOf(paths, pool))) {
-    const file2 = import_node_path37.default.join(sessionsDirOf(paths, pool), name);
+    const file2 = import_node_path36.default.join(sessionsDirOf(paths, pool), name);
     const raw = fs30.readFileUtf8(file2);
     if (raw === void 0) {
       continue;
@@ -118513,11 +118613,11 @@ var ModelMoveRequestSchema = external_exports.strictObject({
 });
 function writeModelMove(fs30, paths, request7) {
   fs30.mkdirPrivate(paths.modelMovesDir);
-  fs30.writeFilePrivate(import_node_path37.default.join(paths.modelMovesDir, `${request7.sessionId}.json`), `${JSON.stringify(ModelMoveRequestSchema.parse(request7))}
+  fs30.writeFilePrivate(import_node_path36.default.join(paths.modelMovesDir, `${request7.sessionId}.json`), `${JSON.stringify(ModelMoveRequestSchema.parse(request7))}
 `);
 }
 function readModelMove(fs30, paths, sessionId) {
-  const raw = fs30.readFileUtf8(import_node_path37.default.join(paths.modelMovesDir, `${sessionId}.json`));
+  const raw = fs30.readFileUtf8(import_node_path36.default.join(paths.modelMovesDir, `${sessionId}.json`));
   if (raw === void 0) {
     return void 0;
   }
@@ -118528,7 +118628,7 @@ function readModelMove(fs30, paths, sessionId) {
   }
 }
 function removeModelMove(fs30, paths, sessionId) {
-  fs30.removeRecursive(import_node_path37.default.join(paths.modelMovesDir, `${sessionId}.json`));
+  fs30.removeRecursive(import_node_path36.default.join(paths.modelMovesDir, `${sessionId}.json`));
 }
 function supervisedSessionOf(fs30, paths, sessionId, isRunning) {
   for (const pool of fs30.readdir(paths.superviseDir)) {
@@ -118610,7 +118710,7 @@ function createTargetObservationStore(fs30, paths) {
 // src/update/commands.ts
 var import_node_fs16 = __toESM(require("node:fs"), 1);
 var import_node_os7 = __toESM(require("node:os"), 1);
-var import_node_path40 = __toESM(require("node:path"), 1);
+var import_node_path39 = __toESM(require("node:path"), 1);
 init_package();
 init_commandDeps();
 init_configProfilesStore();
@@ -118714,7 +118814,7 @@ var realUpdatePorts = {
     chmod: (filePath, mode) => {
       import_node_fs16.default.chmodSync(filePath, mode);
     },
-    mkdtemp: () => import_node_fs16.default.mkdtempSync(import_node_path40.default.join(import_node_os7.default.tmpdir(), "agent-shim-update-")),
+    mkdtemp: () => import_node_fs16.default.mkdtempSync(import_node_path39.default.join(import_node_os7.default.tmpdir(), "agent-shim-update-")),
     rmRecursive: (targetPath) => {
       import_node_fs16.default.rmSync(targetPath, { recursive: true, force: true });
     }
@@ -118735,7 +118835,7 @@ function selfUpdateOptions(paths, checkOnly) {
     platform: process.platform,
     arch: process.arch,
     executablePath: realOwnExecutablePath(),
-    lockPath: import_node_path40.default.join(paths.root, "update.lock"),
+    lockPath: import_node_path39.default.join(paths.root, "update.lock"),
     checkOnly,
     pid: process.pid
   };
@@ -119005,7 +119105,7 @@ function createRealWindowOpener(params) {
 init_conditions();
 
 // src/usage/handledStamps.ts
-var import_node_path48 = __toESM(require("node:path"), 1);
+var import_node_path46 = __toESM(require("node:path"), 1);
 init_zod();
 var STAMPS_SCHEMA_VERSION = 1;
 var StampsFileSchema = external_exports.strictObject({
@@ -119028,7 +119128,7 @@ function readHandled(fs30, file2) {
 }
 function writeHandled(fs30, file2, handled) {
   const next = { schemaVersion: STAMPS_SCHEMA_VERSION, handled: Object.fromEntries(Object.entries(handled).map(([key, at2]) => [key, new Date(at2).toISOString()])) };
-  fs30.mkdirPrivate(import_node_path48.default.dirname(file2));
+  fs30.mkdirPrivate(import_node_path46.default.dirname(file2));
   fs30.writeFilePrivate(file2, `${JSON.stringify(next, null, 2)}
 `);
 }
@@ -119781,11 +119881,11 @@ function createRcSessionTracker(deps) {
   };
   const observeExchange = (request7) => {
     const method = (request7.method ?? "").toUpperCase();
-    const path72 = new URL(request7.url ?? "/", "http://127.0.0.1").pathname;
-    if (!path72.startsWith(RC_SESSIONS_PATH_PREFIX)) {
+    const path70 = new URL(request7.url ?? "/", "http://127.0.0.1").pathname;
+    if (!path70.startsWith(RC_SESSIONS_PATH_PREFIX)) {
       return void 0;
     }
-    const tail = path72.slice(RC_SESSIONS_PATH_PREFIX.length);
+    const tail = path70.slice(RC_SESSIONS_PATH_PREFIX.length);
     const facts = {
       oauthAuthorization: oauthAuthorizationOf(request7.headers),
       anthropicVersion: singleHeader(request7.headers, "anthropic-version"),
@@ -120154,8 +120254,8 @@ var RC_READ_FILE_ENCODINGS = ["utf-8", "base64"];
 function isRcReadFileEncoding(value2) {
   return RC_READ_FILE_ENCODINGS.some((encoding) => encoding === value2);
 }
-function buildRcReadFilePayload(requestId, path72, options) {
-  return buildRcControlRequestPayload(requestId, { subtype: "read_file", path: path72, ...options?.maxBytes === void 0 ? {} : { max_bytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } });
+function buildRcReadFilePayload(requestId, path70, options) {
+  return buildRcControlRequestPayload(requestId, { subtype: "read_file", path: path70, ...options?.maxBytes === void 0 ? {} : { max_bytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } });
 }
 function buildRcFileSuggestionsPayload(requestId, query) {
   return buildRcControlRequestPayload(requestId, { subtype: "file_suggestions", query });
@@ -120257,15 +120357,15 @@ async function getRcSessionContextUsage(deps, sessionId, detail) {
   const result = await deliverRcClientPayload(deps, sessionId, buildRcGetContextUsagePayload(requestId, detail), `request the context usage of session ${sessionId}`);
   return result.ok ? { ...result, requestId } : result;
 }
-async function readRcSessionFile(deps, sessionId, path72, options) {
-  if (path72 === "") {
+async function readRcSessionFile(deps, sessionId, path70, options) {
+  if (path70 === "") {
     return { ok: false, message: "a read-file write needs a non-empty path: the SDK's own field names the file the worker resolves against the session's cwd, and an empty string names none" };
   }
   if (options?.maxBytes !== void 0 && (!Number.isInteger(options.maxBytes) || options.maxBytes <= 0)) {
     return { ok: false, message: "a read-file write's max-bytes is a positive whole number of bytes: the SDK's own field caps the read, and a zero or negative cap reads nothing" };
   }
   const requestId = deps.newUuid();
-  const result = await deliverRcClientPayload(deps, sessionId, buildRcReadFilePayload(requestId, path72, options), `read ${path72} from session ${sessionId}`);
+  const result = await deliverRcClientPayload(deps, sessionId, buildRcReadFilePayload(requestId, path70, options), `read ${path70} from session ${sessionId}`);
   return result.ok ? { ...result, requestId } : result;
 }
 async function suggestRcSessionFiles(deps, sessionId, query) {
@@ -120436,11 +120536,11 @@ function createRcControlHandler(deps) {
       path: "read-file",
       read: (body) => {
         const session = bodyString(body, "session");
-        const path72 = bodyString(body, "path");
+        const path70 = bodyString(body, "path");
         const maxBytes = "maxBytes" in body ? bodyPositiveInteger(body, "maxBytes") : void 0;
         const encoding = "encoding" in body && isRcReadFileEncoding(body.encoding) ? body.encoding : void 0;
-        const refused2 = session === void 0 || path72 === void 0 || "maxBytes" in body && maxBytes === void 0 || "encoding" in body && encoding === void 0;
-        return refused2 ? { error: `the read-file body must be JSON naming a non-empty session id and path, maxBytes only as a positive whole number or absent, and an encoding the SDK's own type permits (${RC_READ_FILE_ENCODINGS.join(", ")}) or none` } : { session, run: async () => await deps.readFile(session, path72, { ...maxBytes === void 0 ? {} : { maxBytes }, ...encoding === void 0 ? {} : { encoding } }) };
+        const refused2 = session === void 0 || path70 === void 0 || "maxBytes" in body && maxBytes === void 0 || "encoding" in body && encoding === void 0;
+        return refused2 ? { error: `the read-file body must be JSON naming a non-empty session id and path, maxBytes only as a positive whole number or absent, and an encoding the SDK's own type permits (${RC_READ_FILE_ENCODINGS.join(", ")}) or none` } : { session, run: async () => await deps.readFile(session, path70, { ...maxBytes === void 0 ? {} : { maxBytes }, ...encoding === void 0 ? {} : { encoding } }) };
       }
     },
     {
@@ -120750,9 +120850,9 @@ function requestIdOfBody(body) {
 }
 function frontDoorRcControl(transport, token) {
   const headers = { authorization: `Bearer ${token}` };
-  const listAnswerOf = async (path72, what) => {
+  const listAnswerOf = async (path70, what) => {
     try {
-      return await transport.request({ method: "GET", path: path72, headers });
+      return await transport.request({ method: "GET", path: path70, headers });
     } catch (error63) {
       throw new Error(`${what}: could not reach the front door's control listener: ${error63 instanceof Error ? error63.message : String(error63)}`, { cause: error63 });
     }
@@ -120824,10 +120924,10 @@ function frontDoorRcControl(transport, token) {
     }
     return pending;
   };
-  const writeOf = async (path72, body, describeFailure2) => {
+  const writeOf = async (path70, body, describeFailure2) => {
     let answer;
     try {
-      answer = await transport.request({ method: "POST", path: path72, headers: { ...headers, "content-type": "application/json" }, body });
+      answer = await transport.request({ method: "POST", path: path70, headers: { ...headers, "content-type": "application/json" }, body });
     } catch (error63) {
       return { ok: false, message: `could not reach the front door's control listener: ${error63 instanceof Error ? error63.message : String(error63)}` };
     }
@@ -120858,10 +120958,10 @@ function frontDoorRcControl(transport, token) {
     endSession: async (sessionId, reason) => await writeOf(`${CONTROL_PATH_PREFIX}/end-session`, JSON.stringify({ session: sessionId, ...reason === void 0 ? {} : { reason } }), (status, message) => `ending ${sessionId} failed (HTTP ${String(status)}): ${message}`),
     getUsage: async (sessionId, skipBehaviors) => await writeOf(`${CONTROL_PATH_PREFIX}/get-usage`, JSON.stringify({ session: sessionId, ...skipBehaviors === void 0 ? {} : { skipBehaviors } }), (status, message) => `requesting the usage of ${sessionId} failed (HTTP ${String(status)}): ${message}`),
     getContextUsage: async (sessionId, detail) => await writeOf(`${CONTROL_PATH_PREFIX}/get-context-usage`, JSON.stringify({ session: sessionId, ...detail === void 0 ? {} : { detail } }), (status, message) => `requesting the context usage of ${sessionId} failed (HTTP ${String(status)}): ${message}`),
-    readFile: async (sessionId, path72, options) => await writeOf(
+    readFile: async (sessionId, path70, options) => await writeOf(
       `${CONTROL_PATH_PREFIX}/read-file`,
-      JSON.stringify({ session: sessionId, path: path72, ...options?.maxBytes === void 0 ? {} : { maxBytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } }),
-      (status, message) => `reading ${path72} from ${sessionId} failed (HTTP ${String(status)}): ${message}`
+      JSON.stringify({ session: sessionId, path: path70, ...options?.maxBytes === void 0 ? {} : { maxBytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } }),
+      (status, message) => `reading ${path70} from ${sessionId} failed (HTTP ${String(status)}): ${message}`
     ),
     fileSuggestions: async (sessionId, query) => await writeOf(`${CONTROL_PATH_PREFIX}/file-suggestions`, JSON.stringify({ session: sessionId, query }), (status, message) => `requesting file suggestions from ${sessionId} failed (HTTP ${String(status)}): ${message}`),
     keepAlive: async (sessionId) => await writeOf(`${CONTROL_PATH_PREFIX}/keep-alive`, JSON.stringify({ session: sessionId }), (status, message) => `keeping ${sessionId} alive failed (HTTP ${String(status)}): ${message}`),
@@ -121174,12 +121274,12 @@ function tlsFacts(options) {
 }
 function realRcEventDial(target = { host: CONNECT_INTERCEPT_HOST, port: HTTPS_PORT }) {
   const agent = new ExemptTlsAgent();
-  const post = async (path72, headers, body) => await new Promise((resolve2, reject) => {
+  const post = async (path70, headers, body) => await new Promise((resolve2, reject) => {
     const options = {
       host: target.host,
       port: target.port,
       method: "POST",
-      path: path72,
+      path: path70,
       // The Host header names the host whose API this is, not the address dialled: a redirected test dials a loopback stand-in while still speaking to the API host by name, exactly as the forwarded paths present their SNI.
       headers: { ...headers, host: target.servername ?? target.host, "content-length": String(Buffer.byteLength(body, "utf8")) },
       agent
@@ -121244,12 +121344,12 @@ function lateRcStreamDial(resolve2) {
 }
 function realRcStreamDial(target = { host: CONNECT_INTERCEPT_HOST, port: HTTPS_PORT }) {
   const agent = new ExemptTlsAgent();
-  const request7 = async (method, path72, headers, body, signal) => await new Promise((resolve2, reject) => {
+  const request7 = async (method, path70, headers, body, signal) => await new Promise((resolve2, reject) => {
     const options = {
       host: target.host,
       port: target.port,
       method,
-      path: path72,
+      path: path70,
       // The Host header names the host whose API this is, not the address dialled: a redirected test dials a loopback stand-in while still speaking to the API host by name, exactly as the forwarded paths present their SNI.
       headers: { ...headers, host: target.servername ?? target.host, ...body === void 0 ? {} : { "content-length": String(Buffer.byteLength(body, "utf8")) } },
       agent,
@@ -121291,9 +121391,9 @@ function realRcStreamDial(target = { host: CONNECT_INTERCEPT_HOST, port: HTTPS_P
       return { status, body: await readAll(response) };
     },
     openStream: async (sessionId, headers, resume, signal) => {
-      const path72 = resume === void 0 ? `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream` : `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream?from_sequence_num=${String(resume.fromSequenceNum)}`;
+      const path70 = resume === void 0 ? `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream` : `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream?from_sequence_num=${String(resume.fromSequenceNum)}`;
       const streamHeaders = resume === void 0 ? headers : { ...headers, "last-event-id": String(resume.fromSequenceNum) };
-      const { status, response } = await request7("GET", path72, streamHeaders, void 0, signal);
+      const { status, response } = await request7("GET", path70, streamHeaders, void 0, signal);
       if (!isSuccessful2(status)) {
         await readAll(response);
         return { status, chunks: NO_CHUNKS };
@@ -121510,10 +121610,11 @@ function realConnectEffects(ports = DOOR_SOURCE_PORTS) {
 
 // src/doctorReport.ts
 init_claudeShim();
+init_names();
 init_store();
 init_realPorts();
 var import_node_fs20 = __toESM(require("node:fs"), 1);
-var import_node_path49 = __toESM(require("node:path"), 1);
+var import_node_path47 = __toESM(require("node:path"), 1);
 init_signIn();
 init_load();
 init_unrecognisedKeys();
@@ -121844,7 +121945,7 @@ function tcpPortEraRecord(raw) {
   return (has("port") || has("lastPort")) && !has("socketPath");
 }
 function pushPathResolution(push, resolution) {
-  const ownDir = import_node_path49.default.dirname(resolution.ownExecutablePath);
+  const ownDir = import_node_path47.default.dirname(resolution.ownExecutablePath);
   switch (resolution.agentShim.status) {
     case "ok":
       push("path-resolution", "pass", `\`agent-shim\` on PATH resolves to this running executable, ${resolution.ownExecutablePath}.`, "agent-shim");
@@ -121907,6 +122008,22 @@ function signInProblem(signIn) {
     return error63 instanceof Error ? error63.message : String(error63);
   }
 }
+function pushNameFinding(push, section, kind, entry) {
+  if (isFileName(entry.name)) {
+    return true;
+  }
+  if (!isStoredName(entry.name)) {
+    push(section, "fail", `${entry.path} cannot be used as a ${kind}: its name is ${JSON.stringify(entry.name)}, and a name ${FILE_NAME_RULE}. Rename or remove the file.`, entry.name);
+    return false;
+  }
+  push(
+    section,
+    "warn",
+    `The ${kind} ${JSON.stringify(entry.name)} is stored under a name that does not fit the shape names are given now (a name ${FILE_NAME_RULE}). It still works from your own configuration, but a project file cannot name it. Rename ${entry.path} to a name that fits, and change what names it.`,
+    entry.name
+  );
+  return true;
+}
 function pushProvider(push, entry, cacheEnv, signIn) {
   if (entry.raw === void 0) {
     push("provider", "fail", `${entry.path} is missing.`, entry.name);
@@ -121948,14 +122065,14 @@ function pushProvider(push, entry, cacheEnv, signIn) {
 }
 function pushLegacyName(push, params) {
   const legacyVariables = Object.keys(params.env).filter((name) => name.startsWith(LEGACY_ENV_PREFIX) && params.env[name] !== void 0).sort();
-  if (legacyVariables.length === 0 && import_node_path49.default.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
+  if (legacyVariables.length === 0 && import_node_path47.default.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
     push("legacy-name", "pass", "Nothing here still uses the former `claude-use` name.");
     return;
   }
   for (const name of legacyVariables) {
     push("legacy-name", "warn", `${name} is the former name of ${name.replace(LEGACY_ENV_PREFIX, ENV_PREFIX)}. Rename it; the old name still works but is only a fallback.`, name);
   }
-  if (import_node_path49.default.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
+  if (import_node_path47.default.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
     push(
       "legacy-name",
       "warn",
@@ -122017,6 +122134,9 @@ function runDoctor(params) {
   pushLegacyName(push, params);
   const profileSources = /* @__PURE__ */ new Map();
   for (const entry of params.configProfiles) {
+    if (!pushNameFinding(push, "config-profile", "configuration profile", entry)) {
+      continue;
+    }
     const validated2 = validate3(ConfigProfileSchema, entry, "config-profile", entry.name);
     if (!validated2.ok) {
       push("config-profile", "fail", validated2.message, entry.name);
@@ -122112,6 +122232,9 @@ function runDoctor(params) {
     return poolName === void 0 ? validIdentityNames.has(selector) : poolName in pools;
   };
   for (const entry of params.providers) {
+    if (!pushNameFinding(push, "provider", "provider", entry)) {
+      continue;
+    }
     pushProvider(push, entry, params.credentialCache, params.chatgptSignIn);
   }
   const providerNames = new Set(params.providers.map((entry) => entry.name));
@@ -122358,18 +122481,18 @@ function collectDoctorReport(params) {
   const { paths } = params;
   const identityNames = import_node_fs20.default.existsSync(paths.identitiesDir) ? import_node_fs20.default.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort() : [];
   const identities = identityNames.map((name) => {
-    const farmRoot = import_node_path49.default.join(paths.identitiesDir, name);
-    const identityPath = import_node_path49.default.join(farmRoot, "identity.json");
+    const farmRoot = import_node_path47.default.join(paths.identitiesDir, name);
+    const identityPath = import_node_path47.default.join(farmRoot, "identity.json");
     return { name, path: identityPath, raw: realFsPort.readFileUtf8(identityPath), farmRoot, credentialsFilePresent: import_node_fs20.default.existsSync(credentialsFilePath(farmRoot)) };
   });
   const profileNames = import_node_fs20.default.existsSync(paths.configProfilesDir) ? import_node_fs20.default.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const configProfiles = profileNames.map((name) => {
-    const profilePath = import_node_path49.default.join(paths.configProfilesDir, `${name}.json`);
+    const profilePath = import_node_path47.default.join(paths.configProfilesDir, `${name}.json`);
     return { name, path: profilePath, raw: realFsPort.readFileUtf8(profilePath) };
   });
   const providerNames = import_node_fs20.default.existsSync(paths.providersDir) ? import_node_fs20.default.readdirSync(paths.providersDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const providers = providerNames.map((name) => {
-    const providerPath = import_node_path49.default.join(paths.providersDir, `${name}.json`);
+    const providerPath = import_node_path47.default.join(paths.providersDir, `${name}.json`);
     return { name, path: providerPath, raw: realFsPort.readFileUtf8(providerPath) };
   });
   const ownExecutablePath = realOwnExecutablePath();
@@ -122381,12 +122504,12 @@ function collectDoctorReport(params) {
     binaryDiscovery = { ok: false, message: error63 instanceof Error ? error63.message : String(error63) };
   }
   const shimState = readJson(paths.claudeShimFile, ClaudeShimStateSchema);
-  const pathDirs = (params.env.PATH ?? "").split(import_node_path49.default.delimiter).filter((dir) => dir !== "");
+  const pathDirs = (params.env.PATH ?? "").split(import_node_path47.default.delimiter).filter((dir) => dir !== "");
   const claudeShimShadow = shimState === void 0 ? void 0 : refinePathShadow(
     findPathShadow({
       pathDirs,
-      targetDir: import_node_path49.default.dirname(shimState.targetPath),
-      targetFilename: import_node_path49.default.basename(shimState.targetPath),
+      targetDir: import_node_path47.default.dirname(shimState.targetPath),
+      targetFilename: import_node_path47.default.basename(shimState.targetPath),
       findExecutableInDir
     }),
     shimState.targetPath,
@@ -122422,7 +122545,7 @@ function collectDoctorReport(params) {
       agentShim: refinePathShadow(
         findPathShadow({
           pathDirs,
-          targetDir: import_node_path49.default.dirname(ownExecutablePath),
+          targetDir: import_node_path47.default.dirname(ownExecutablePath),
           targetFilename: commandFilename(ownExecutablePath, "agent-shim"),
           findExecutableInDir
         }),
@@ -122694,11 +122817,11 @@ function tryOrUndefined(fn2) {
     return void 0;
   }
 }
-function pathToHttpPath(path72) {
-  return `/${path72.map(safeEncodeURIComponent).join("/")}`;
+function pathToHttpPath(path70) {
+  return `/${path70.map(safeEncodeURIComponent).join("/")}`;
 }
-function normalizeHttpPath(path72) {
-  const paths = path72.split("/");
+function normalizeHttpPath(path70) {
+  const paths = path70.split("/");
   if (paths.at(0) === "") {
     paths.shift();
   }
@@ -122883,9 +123006,9 @@ function isPlainObject3(value2) {
 function getOwn(object3, key) {
   return Object.hasOwn(object3, key) ? object3[key] : void 0;
 }
-function get(object3, path72) {
+function get(object3, path70) {
   let current = object3;
-  for (const key of path72) {
+  for (const key of path70) {
     if (!isTypescriptObject(current)) {
       return void 0;
     }
@@ -124108,7 +124231,7 @@ function resolveClientRest(rest) {
     // rest[1] can be undefined if all fields of FriendlyClientOptions are optional
   ];
 }
-function createORPCClient(link, { path: path72 = [], ...options } = {}) {
+function createORPCClient(link, { path: path70 = [], ...options } = {}) {
   const procedureClient = (...rest) => {
     const [input2, callOptions] = resolveClientRest(rest);
     const interceptors = [
@@ -124117,7 +124240,7 @@ function createORPCClient(link, { path: path72 = [], ...options } = {}) {
     ];
     return intercept(
       interceptors,
-      { ...callOptions, input: input2, path: path72 },
+      { ...callOptions, input: input2, path: path70 },
       ({ path: path210, input: input22, ...callOptions2 }) => link.call(path210, input22, callOptions2)
     );
   };
@@ -124131,7 +124254,7 @@ function createORPCClient(link, { path: path72 = [], ...options } = {}) {
       if (client === void 0) {
         client = createORPCClient(link, {
           ...options,
-          path: [...path72, key],
+          path: [...path70, key],
           scoped: options.scoped?.[key]
         });
         cache.set(key, client);
@@ -124153,24 +124276,24 @@ var BracketNotationSerializer = class {
     this.internalSerialize(data, "", true, result);
     return result;
   }
-  internalSerialize(data, path72, isRoot, result) {
+  internalSerialize(data, path70, isRoot, result) {
     if (Array.isArray(data)) {
       data.forEach((item, i10) => {
-        this.internalSerialize(item, isRoot ? i10.toString() : `${path72}[${i10}]`, false, result);
+        this.internalSerialize(item, isRoot ? i10.toString() : `${path70}[${i10}]`, false, result);
       });
     } else if (isPlainObject3(data)) {
       for (const key of Object.keys(data)) {
-        this.internalSerialize(data[key], isRoot ? key : `${path72}[${key}]`, false, result);
+        this.internalSerialize(data[key], isRoot ? key : `${path70}[${key}]`, false, result);
       }
     } else {
-      result.push([path72, data]);
+      result.push([path70, data]);
     }
   }
   deserialize(serialized) {
     const arrayPushStyles = /* @__PURE__ */ new WeakSet();
     const root = new NullProtoObj();
-    for (const [path72, value2] of serialized) {
-      const segments = this.parsePath(path72);
+    for (const [path70, value2] of serialized) {
+      const segments = this.parsePath(path70);
       let currentRef = root;
       let nextSegment = segments[0];
       for (let i10 = 1; i10 < segments.length; i10++) {
@@ -124221,13 +124344,13 @@ var BracketNotationSerializer = class {
     }
     return result;
   }
-  parsePath(path72) {
+  parsePath(path70) {
     const segments = [];
     let inBrackets = false;
     let currentSegment = "";
-    for (let i10 = 0; i10 < path72.length; i10++) {
-      const char = path72[i10];
-      const nextChar = path72[i10 + 1];
+    for (let i10 = 0; i10 < path70.length; i10++) {
+      const char = path70[i10];
+      const nextChar = path70[i10 + 1];
       if (inBrackets && char === "]" && (nextChar === void 0 || nextChar === "[")) {
         if (nextChar === void 0) {
           inBrackets = false;
@@ -124243,7 +124366,7 @@ var BracketNotationSerializer = class {
         currentSegment += char;
       }
     }
-    return inBrackets || segments.length === 0 ? [path72] : segments;
+    return inBrackets || segments.length === 0 ? [path70] : segments;
   }
 };
 var INTEGER_PATTERN = /^0$|^[1-9]\d*$/;
@@ -124816,11 +124939,11 @@ var OpenAPISerializer = class {
       return json2;
     }
     const form = new FormData();
-    for (const [path72, value22] of this.bracketNotation.serialize(json2)) {
+    for (const [path70, value22] of this.bracketNotation.serialize(json2)) {
       if (value22 instanceof Blob) {
-        form.append(path72, value22);
+        form.append(path70, value22);
       } else if (value22 !== void 0 && value22 !== null) {
-        form.append(path72, String(value22));
+        form.append(path70, String(value22));
       }
     }
     return form;
@@ -124858,30 +124981,30 @@ function isBodylessMethod(method) {
   return method === "GET" || method === "HEAD";
 }
 var PARAMETER_NAME_REGEX = /^[\w-]+$/;
-function getDynamicPathParams(path72) {
-  if (!path72.includes("{")) {
+function getDynamicPathParams(path70) {
+  if (!path70.includes("{")) {
     return void 0;
   }
-  const len = path72.length;
+  const len = path70.length;
   let params;
   let index = 1;
   while (index < len) {
     const segmentStart = index;
-    const slashPos = path72.indexOf("/", index);
+    const slashPos = path70.indexOf("/", index);
     const segmentEnd = slashPos === -1 ? len : slashPos;
-    if (segmentEnd > segmentStart && path72.charCodeAt(segmentStart) === 123 && path72.charCodeAt(segmentEnd - 1) === 125) {
+    if (segmentEnd > segmentStart && path70.charCodeAt(segmentStart) === 123 && path70.charCodeAt(segmentEnd - 1) === 125) {
       let parameterStart = segmentStart + 1;
       let allowsSlash = false;
-      const operator = path72.charCodeAt(parameterStart);
+      const operator = path70.charCodeAt(parameterStart);
       if (operator === 43) {
         allowsSlash = true;
         parameterStart++;
       }
-      const parameterName = path72.slice(parameterStart, segmentEnd - 1);
+      const parameterName = path70.slice(parameterStart, segmentEnd - 1);
       if (PARAMETER_NAME_REGEX.test(parameterName)) {
         params ??= [];
         params.push({
-          segment: path72.slice(segmentStart, segmentEnd),
+          segment: path70.slice(segmentStart, segmentEnd),
           startIndex: segmentStart,
           parameterName,
           allowsSlash
@@ -124924,8 +125047,8 @@ openapi.method = (method) => ({
   ...openapi({ method }),
   name: "~openapi/method"
 });
-openapi.path = (path72) => ({
-  ...openapi({ path: path72 }),
+openapi.path = (path70) => ({
+  ...openapi({ path: path70 }),
   name: "~openapi/path"
 });
 openapi.spec = (spec) => ({
@@ -125786,22 +125909,22 @@ function visitJsonSchemaRefs(value2, visit2, schemaLevel = true, seen = /* @__PU
     }
   }
 }
-function mapJsonSchemaRefs(value2, map2, schemaLevel = true, path72 = []) {
+function mapJsonSchemaRefs(value2, map2, schemaLevel = true, path70 = []) {
   if (!value2 || typeof value2 !== "object") {
     return value2;
   }
   if (Array.isArray(value2)) {
-    return value2.map((item, index) => mapJsonSchemaRefs(item, map2, schemaLevel, [...path72, index]));
+    return value2.map((item, index) => mapJsonSchemaRefs(item, map2, schemaLevel, [...path70, index]));
   }
   const result = {};
   for (const key of Object.keys(value2)) {
     const val = value2[key];
     if (key === "$ref" && typeof val === "string") {
-      setOwn(result, key, map2(val, [...path72, key]));
+      setOwn(result, key, map2(val, [...path70, key]));
     } else if (!schemaLevel) {
-      setOwn(result, key, mapJsonSchemaRefs(val, map2, true, [...path72, key]));
+      setOwn(result, key, mapJsonSchemaRefs(val, map2, true, [...path70, key]));
     } else if (JSON_SCHEMA_LOGIC_KEYWORDS.has(key) || JSON_SCHEMA_RECORD_KEYWORDS.has(key)) {
-      setOwn(result, key, mapJsonSchemaRefs(val, map2, !JSON_SCHEMA_RECORD_KEYWORDS.has(key), [...path72, key]));
+      setOwn(result, key, mapJsonSchemaRefs(val, map2, !JSON_SCHEMA_RECORD_KEYWORDS.has(key), [...path70, key]));
     } else {
       setOwn(result, key, val);
     }
@@ -126331,7 +126454,7 @@ function unlazy(maybeLazy) {
 function createProcedureClient(lazyableProcedure, ...rest) {
   const options = resolveMaybeOptionalOptions(rest);
   return async (...[input2, callerOptions]) => {
-    const path72 = toArray(options.path);
+    const path70 = toArray(options.path);
     const { default: procedure } = await unlazy(lazyableProcedure);
     const clientContext = callerOptions?.context ?? {};
     const context = await value(options.context, clientContext) ?? {};
@@ -126344,7 +126467,7 @@ function createProcedureClient(lazyableProcedure, ...rest) {
     };
     try {
       const output2 = await runWithSpan("call_procedure", (span) => {
-        span?.setAttribute("procedure.path", path72);
+        span?.setAttribute("procedure.path", path70);
         return intercept(
           options.interceptors,
           {
@@ -126352,7 +126475,7 @@ function createProcedureClient(lazyableProcedure, ...rest) {
             // input can be optional if it is undefinable
             input: input2,
             errors,
-            path: path72,
+            path: path70,
             procedure,
             signal: callerOptions?.signal,
             lastEventId: callerOptions?.lastEventId
@@ -126603,10 +126726,10 @@ function augmentRouter(router, options) {
   }
   return enhanced;
 }
-function getRouter(router, path72) {
+function getRouter(router, path70) {
   let current = router;
-  for (let i10 = 0; i10 < path72.length; i10++) {
-    const segment = path72[i10];
+  for (let i10 = 0; i10 < path70.length; i10++) {
+    const segment = path70[i10];
     if (!isTypescriptObject(current)) {
       return void 0;
     }
@@ -126618,7 +126741,7 @@ function getRouter(router, path72) {
       continue;
     }
     const lazied = current;
-    const rest = path72.slice(i10);
+    const rest = path70.slice(i10);
     return new Lazy({
       ...lazied["~orpc"],
       async loader() {
@@ -126633,40 +126756,40 @@ function getRouter(router, path72) {
   }
   return current;
 }
-function walkProcedureContractsSync(router, callback, path72 = []) {
+function walkProcedureContractsSync(router, callback, path70 = []) {
   const lazyResults = [];
-  walkProcedureContractsSyncInternal(router, callback, path72.slice(), lazyResults);
+  walkProcedureContractsSyncInternal(router, callback, path70.slice(), lazyResults);
   return lazyResults;
 }
-function walkProcedureContractsSyncInternal(router, callback, path72, lazyResults) {
+function walkProcedureContractsSyncInternal(router, callback, path70, lazyResults) {
   const hiddenContract = getHiddenRouterContract(router);
   if (hiddenContract !== void 0) {
     router = hiddenContract;
   }
   if (router instanceof ProcedureContract) {
-    callback(router, path72.slice());
+    callback(router, path70.slice());
     return;
   }
   if (!isTypescriptObject(router)) {
     return;
   }
   for (const [key, value2] of Object.entries(router)) {
-    path72.push(key);
+    path70.push(key);
     if (value2 instanceof Lazy) {
-      lazyResults.push({ router: value2, path: path72.slice() });
+      lazyResults.push({ router: value2, path: path70.slice() });
     } else {
-      walkProcedureContractsSyncInternal(value2, callback, path72, lazyResults);
+      walkProcedureContractsSyncInternal(value2, callback, path70, lazyResults);
     }
-    path72.pop();
+    path70.pop();
   }
 }
-async function walkProcedureContractsAsync(router, callback, path72 = []) {
+async function walkProcedureContractsAsync(router, callback, path70 = []) {
   const hiddenContract = getHiddenRouterContract(router);
   if (hiddenContract !== void 0) {
     router = hiddenContract;
   }
   if (router instanceof ProcedureContract) {
-    await callback(router, path72);
+    await callback(router, path70);
     return;
   }
   if (!isTypescriptObject(router)) {
@@ -126675,9 +126798,9 @@ async function walkProcedureContractsAsync(router, callback, path72 = []) {
   for (const [key, value2] of Object.entries(router)) {
     if (value2 instanceof Lazy) {
       const { default: router2 } = await unlazy(value2);
-      await walkProcedureContractsAsync(router2, callback, [...path72, key]);
+      await walkProcedureContractsAsync(router2, callback, [...path70, key]);
     } else {
-      await walkProcedureContractsAsync(value2, callback, [...path72, key]);
+      await walkProcedureContractsAsync(value2, callback, [...path70, key]);
     }
   }
 }
@@ -127163,18 +127286,18 @@ function rewriteComponentSchemaRefs(schema, renameMap) {
 }
 var OpenAPIGeneratorError = class extends TypeError {
 };
-function toOpenAPIPath(path72, dynamicPathParams) {
+function toOpenAPIPath(path70, dynamicPathParams) {
   if (!dynamicPathParams?.length) {
-    return path72;
+    return path70;
   }
   let normalized = "";
   let currentIndex = 0;
   for (const param of dynamicPathParams) {
-    normalized += path72.slice(currentIndex, param.startIndex);
+    normalized += path70.slice(currentIndex, param.startIndex);
     normalized += `{${param.parameterName}}`;
     currentIndex = param.startIndex + param.segment.length;
   }
-  normalized += path72.slice(currentIndex);
+  normalized += path70.slice(currentIndex);
   return normalized;
 }
 function buildRequest(ctx, operation, def, meta3, dynamicPathParams) {
@@ -127608,8 +127731,8 @@ var OpenAPIGenerator = class {
       customErrorResponseBodySchema: options.customErrorResponseBodySchema
     };
     const errors = [];
-    await walkProcedureContractsAsync(router, (contract, path72) => {
-      if (value(options.filter, contract, path72) === false) {
+    await walkProcedureContractsAsync(router, (contract, path70) => {
+      if (value(options.filter, contract, path70) === false) {
         return;
       }
       try {
@@ -127621,7 +127744,7 @@ var OpenAPIGenerator = class {
             `QUERY operations require OpenAPI 3.2, but version "${version2}" was requested.`
           );
         }
-        const postPath = meta3?.path ?? pathToHttpPath(path72);
+        const postPath = meta3?.path ?? pathToHttpPath(path70);
         const httpPath = meta3?.prefix ? mergeHttpPath(meta3.prefix, postPath) : postPath;
         const dynamicPathParams = getDynamicPathParams(httpPath);
         const openApiPath = toOpenAPIPath(httpPath, dynamicPathParams);
@@ -127630,7 +127753,7 @@ var OpenAPIGenerator = class {
           operation = meta3.spec;
         } else {
           operation = {
-            operationId: meta3?.operationId ?? path72.join("."),
+            operationId: meta3?.operationId ?? path70.join("."),
             summary: meta3?.summary,
             description: meta3?.description,
             deprecated: meta3?.deprecated,
@@ -127650,7 +127773,7 @@ var OpenAPIGenerator = class {
         if (!(e14 instanceof OpenAPIGeneratorError)) {
           throw e14;
         }
-        errors.push(`Procedure at ${path72.join(".") || "(root)"}: ${e14.message}`);
+        errors.push(`Procedure at ${path70.join(".") || "(root)"}: ${e14.message}`);
       }
     });
     if (errors.length) {
@@ -127958,7 +128081,7 @@ var ResetRowSchema = external_exports.strictObject({
 var ResetScheduleSchema = external_exports.strictObject({ resets: external_exports.readonly(external_exports.array(ResetRowSchema)) });
 
 // src/frontdoor/controlSchemas.ts
-var import_node_path50 = __toESM(require("node:path"), 1);
+var import_node_path48 = __toESM(require("node:path"), 1);
 init_zod();
 init_schema2();
 
@@ -128172,11 +128295,11 @@ var FrontDoorSessionsOutputSchema = external_exports.strictObject({ sessions: ex
 var CheckRunInputSchema = external_exports.strictObject({
   path: external_exports.string().min(1),
   identity: external_exports.string().min(1).optional()
-}).refine((input2) => import_node_path50.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+}).refine((input2) => import_node_path48.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var PoolPickInputSchema = external_exports.strictObject({
   pool: external_exports.string().min(1),
   path: external_exports.string().min(1)
-}).refine((input2) => import_node_path50.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+}).refine((input2) => import_node_path48.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var DoctorFindingSchema = external_exports.strictObject({
   section: external_exports.enum(DOCTOR_SECTIONS),
   subject: external_exports.string().optional(),
@@ -128497,16 +128620,16 @@ var StandardLink = class {
   /**
    * @throws ORPCError, transport-level errors (network failures, timeouts, etc.)
    */
-  call(path72, input2, options) {
-    return runWithSpan(`${ORPC_NAME}.${path72.join("/")}`, (span) => {
+  call(path70, input2, options) {
+    return runWithSpan(`${ORPC_NAME}.${path70.join("/")}`, (span) => {
       span?.setAttribute("rpc.system", ORPC_NAME);
-      span?.setAttribute("rpc.method", path72.join("."));
+      span?.setAttribute("rpc.method", path70.join("."));
       if (getTracer() && isAsyncIteratorObject(input2)) {
         input2 = override(input2, traceAsyncIterator("consume_async_iterator_object_input", input2));
       } else if (getTracer() && input2 instanceof ReadableStream) {
         input2 = override(input2, traceReadableStream("consume_octet_stream_input", input2));
       }
-      return intercept(this.interceptors, { ...options, path: path72, input: input2 }, async ({ path: path210, input: input22, ...options2 }) => {
+      return intercept(this.interceptors, { ...options, path: path70, input: input2 }, async ({ path: path210, input: input22, ...options2 }) => {
         const tracer = getTracer();
         const activeSpan = tracer?.getActiveSpan() ?? span;
         let request7 = await runWithSpan(
@@ -128563,18 +128686,18 @@ var RPCLinkCodec = class {
     this.headers = options.headers ?? {};
     this.serializer = options.serializer ?? new RPCSerializer();
   }
-  async encodeInput(input2, path72, options) {
-    let headers = toResolvedStandardHeaders(await value(this.headers, options, path72, input2));
+  async encodeInput(input2, path70, options) {
+    let headers = toResolvedStandardHeaders(await value(this.headers, options, path70, input2));
     if (options.lastEventId !== void 0) {
       headers = mergeStandardHeaders(headers, { "last-event-id": options.lastEventId });
     }
-    const expectedMethod = await value(this.expectedMethod, options, path72, input2);
-    const baseUrl = await value(this.baseUrl, options, path72, input2);
+    const expectedMethod = await value(this.expectedMethod, options, path70, input2);
+    const baseUrl = await value(this.baseUrl, options, path70, input2);
     const [pathname, search, hash2] = parseStandardUrl(baseUrl);
-    const newPathname = `${pathname.replace(END_SLASH_REGEX, "")}${pathToHttpPath(path72)}`;
+    const newPathname = `${pathname.replace(END_SLASH_REGEX, "")}${pathToHttpPath(path70)}`;
     const serialized = this.serializer.serialize(input2);
     if (expectedMethod === "GET" && !(serialized instanceof Blob) && !(serialized instanceof ReadableStream) && !(serialized instanceof FormData) && !isAsyncIteratorObject(serialized)) {
-      const maxUrlLength = await value(this.maxUrlLength, options, path72, input2);
+      const maxUrlLength = await value(this.maxUrlLength, options, path70, input2);
       const mergedSearch = new URLSearchParams(search);
       mergedSearch.append("data", stringifyJSON(serialized) ?? "");
       const url22 = `${newPathname}?${mergedSearch}${hash2 ?? ""}`;
@@ -128659,8 +128782,8 @@ var FetchLinkTransport = class {
     this.fetch = options.fetch ?? ((url2, init) => globalThis.fetch(url2, init));
     this.toFetchRequestOptions = options.toFetchRequest;
   }
-  async send(standardRequest, path72, options) {
-    let origin = await value(this.origin, options, path72);
+  async send(standardRequest, path70, options) {
+    let origin = await value(this.origin, options, path70);
     if (origin?.endsWith("/")) {
       origin = origin.slice(0, -1);
     }
@@ -128680,7 +128803,7 @@ var FetchLinkTransport = class {
       }
     }
     const fetch3 = this.fetch;
-    const response = await fetch3(url2, init, options, path72);
+    const response = await fetch3(url2, init, options, path70);
     const standardResponse = toStandardLazyResponse(response);
     return standardResponse;
   }
@@ -129071,14 +129194,14 @@ var StandardHandler = class {
           span?.setAttribute("url.path", request22.url);
           return { matched: false };
         }
-        const { path: path72, procedure, decodeInput } = matchedOrNot;
-        span?.updateName(`${ORPC_NAME}.${path72.join("/")}`);
+        const { path: path70, procedure, decodeInput } = matchedOrNot;
+        span?.updateName(`${ORPC_NAME}.${path70.join("/")}`);
         span?.setAttribute("rpc.system", ORPC_NAME);
-        span?.setAttribute("rpc.method", path72.join("."));
+        span?.setAttribute("rpc.method", path70.join("."));
         try {
           const response = await intercept(
             this.interceptors,
-            { context: context2, prefix: prefix2, request: request22, path: path72, procedure, decodeInput },
+            { context: context2, prefix: prefix2, request: request22, path: path70, procedure, decodeInput },
             async ({ context: context3, prefix: prefix3, request: request32, path: path210, procedure: procedure2, decodeInput: decodeInput2 }) => {
               step2 = "decode_input";
               let input2 = await runWithSpan("decode_input", decodeInput2);
@@ -129112,7 +129235,7 @@ var StandardHandler = class {
             message: `Malformed request. Ensure the request body is properly formatted and the 'Content-Type' header is set correctly.`,
             cause: e14
           }) : toORPCError(e14);
-          const response = await this.codec.encodeError(error63, procedure, path72, { context: context2, prefix: prefix2 });
+          const response = await this.codec.encodeError(error63, procedure, path70, { context: context2, prefix: prefix2 });
           return { matched: true, response };
         }
       }
@@ -129218,7 +129341,7 @@ var RPCMatcher = class {
     this.rootRouter = router;
     this.index(router);
   }
-  index(router, path72 = []) {
+  index(router, path70 = []) {
     const lazyResults = walkProcedureContractsSync(router, (procedure, procedurePath) => {
       if (!value(this.filter, procedure, procedurePath)) {
         return;
@@ -129229,7 +129352,7 @@ var RPCMatcher = class {
         // contract-first entries have no implementation yet, resolveProcedure fills it in on demand
         procedure: procedure instanceof Procedure ? procedure : void 0
       });
-    }, path72);
+    }, path70);
     for (const result of lazyResults) {
       this.pendingLazyRouters.set(pathToHttpPath(result.path), result);
     }
@@ -129361,10 +129484,10 @@ var RPCHandlerCodec = class {
       }
     };
   }
-  encodeOutput(output2, procedure, path72, options) {
+  encodeOutput(output2, procedure, path70, options) {
     return {
       headers: {},
-      status: value(this.outputStatus, output2, procedure, path72, options) ?? DEFAULT_SUCCESS_STATUS,
+      status: value(this.outputStatus, output2, procedure, path70, options) ?? DEFAULT_SUCCESS_STATUS,
       body: this.serializer.serialize(output2)
     };
   }
@@ -129418,39 +129541,39 @@ function createRouter() {
     static: new NullProtoObj2()
   };
 }
-function scanFirstGroup(path72) {
+function scanFirstGroup(path70) {
   let i10 = 0;
   let depth = 0;
-  for (; i10 < path72.length; i10++) {
-    const c10 = path72.charCodeAt(i10);
+  for (; i10 < path70.length; i10++) {
+    const c10 = path70.charCodeAt(i10);
     if (c10 === 92) i10++;
     else if (c10 === 40) depth++;
     else if (c10 === 41 && depth > 0) depth--;
     else if (c10 === 123 && depth === 0) break;
   }
-  if (i10 >= path72.length) return;
+  if (i10 >= path70.length) return;
   let j10 = i10 + 1;
   depth = 0;
-  for (; j10 < path72.length; j10++) {
-    const c10 = path72.charCodeAt(j10);
+  for (; j10 < path70.length; j10++) {
+    const c10 = path70.charCodeAt(j10);
     if (c10 === 92) j10++;
     else if (c10 === 40) depth++;
     else if (c10 === 41 && depth > 0) depth--;
     else if (c10 === 125 && depth === 0) break;
   }
-  if (j10 >= path72.length) return;
-  const mod = path72[j10 + 1];
+  if (j10 >= path70.length) return;
+  const mod = path70[j10 + 1];
   const hasMod = mod === "?" || mod === "+" || mod === "*";
   return [
-    path72.slice(0, i10),
-    path72.slice(i10 + 1, j10),
-    path72.slice(j10 + (hasMod ? 2 : 1)),
+    path70.slice(0, i10),
+    path70.slice(i10 + 1, j10),
+    path70.slice(j10 + (hasMod ? 2 : 1)),
     hasMod ? mod : void 0
   ];
 }
-function expandGroupDelimiters(path72) {
-  if (!path72.includes("{")) return;
-  const group = scanFirstGroup(path72);
+function expandGroupDelimiters(path70) {
+  if (!path70.includes("{")) return;
+  const group = scanFirstGroup(path70);
   if (!group) return;
   const [pre2, body, suf, mod] = group;
   if (!mod) return [pre2 + body + suf];
@@ -129520,9 +129643,9 @@ function replaceSegmentWildcards(segment, unnamedStart, toGroupKey = toUnnamedGr
   }
   return [replaced, nextIndex];
 }
-function encodeEscapes(path72) {
-  if (!path72.includes("\\")) return path72;
-  return path72.replace(/\\([:(){}])/g, (_, c10) => "\uFFFD" + "ABCDE"[":(){}".indexOf(c10)]);
+function encodeEscapes(path70) {
+  if (!path70.includes("\\")) return path70;
+  return path70.replace(/\\([:(){}])/g, (_, c10) => "\uFFFD" + "ABCDE"[":(){}".indexOf(c10)]);
 }
 function segmentKey(segment) {
   if (segment.startsWith("**")) return 2;
@@ -129551,22 +129674,22 @@ function expandModifiers(segments) {
     return m10[2] === "+" ? [wc2] : [wc2, without];
   }
 }
-function normalizePath(path72) {
-  if (!path72.includes("/.")) return path72;
+function normalizePath(path70) {
+  if (!path70.includes("/.")) return path70;
   const r10 = [];
-  for (const s of path72.split("/")) if (s === ".") continue;
+  for (const s of path70.split("/")) if (s === ".") continue;
   else if (s === ".." && r10.length > 1) r10.pop();
   else r10.push(s);
   return r10.join("/") || "/";
 }
-function splitPath(path72) {
-  const s = path72.split("/");
+function splitPath(path70) {
+  const s = path70.split("/");
   s.shift();
   if (s[s.length - 1] === "") s.pop();
   return s;
 }
-function splitRoute(path72) {
-  const s = splitPath(path72);
+function splitRoute(path70) {
+  const s = splitPath(path70);
   while (s[s.length - 1] === "") s.pop();
   return s;
 }
@@ -129582,16 +129705,16 @@ function getMatchParams(segments, paramsMap) {
   }
   return params;
 }
-function addRoute(ctx, method = "", path72, data) {
+function addRoute(ctx, method = "", path70, data) {
   method = method.toUpperCase();
-  if (path72.charCodeAt(0) !== 47) path72 = `/${path72}`;
-  const groupExpanded = expandGroupDelimiters(path72);
+  if (path70.charCodeAt(0) !== 47) path70 = `/${path70}`;
+  const groupExpanded = expandGroupDelimiters(path70);
   if (groupExpanded) {
     for (const expandedPath of groupExpanded) addRoute(ctx, method, expandedPath, data);
     return;
   }
-  path72 = encodeEscapes(path72);
-  const segments = splitRoute(path72);
+  path70 = encodeEscapes(path70);
+  const segments = splitRoute(path70);
   const expanded = expandModifiers(segments);
   if (expanded) {
     for (const p of expanded) addRoute(ctx, method, p, data);
@@ -129682,15 +129805,15 @@ function getParamRegexp(segment, unnamedStart = 0) {
   const regex2 = _s2.replace(/:([\w-]+)(?:\(([^)]*)\))?/g, (_, id2, p) => `(?<${toGroupName(id2)}>${p || "[^/]+"})`).replace(/\((?![?<])/g, () => `(?<${toUnnamedGroupKey(_i2++)}>`).replace(/\uFFFE(.)/g, (_, c10) => /[.*+?^${}()|[\]\\]/.test(c10) ? `\\${c10}` : c10);
   return [new RegExp(`^${regex2}$`), _i2];
 }
-function findRoute(ctx, method = "", path72, opts) {
-  if (opts?.normalize) path72 = normalizePath(path72);
-  if (path72.charCodeAt(path72.length - 1) === 47) path72 = path72.slice(0, -1);
-  const staticNode = ctx.static[path72];
+function findRoute(ctx, method = "", path70, opts) {
+  if (opts?.normalize) path70 = normalizePath(path70);
+  if (path70.charCodeAt(path70.length - 1) === 47) path70 = path70.slice(0, -1);
+  const staticNode = ctx.static[path70];
   if (staticNode && staticNode.methods) {
     const staticMatch = staticNode.methods[method] || staticNode.methods[""];
     if (staticMatch !== void 0) return staticMatch[0];
   }
-  const segments = splitPath(path72);
+  const segments = splitPath(path70);
   const match = _lookupTree(ctx.root, method, segments, 0);
   if (match === void 0) return;
   if (opts?.params === false) return match;
@@ -129890,7 +130013,7 @@ var OpenAPIMatcher = class {
     this.rootRouter = router;
     this.index(router);
   }
-  index(router, path72 = []) {
+  index(router, path70 = []) {
     const lazyResults = walkProcedureContractsSync(router, (contract, path210) => {
       if (!value(this.filter, contract, path210)) {
         return;
@@ -129905,7 +130028,7 @@ var OpenAPIMatcher = class {
         contract,
         procedure: contract instanceof Procedure ? contract : void 0
       });
-    }, path72);
+    }, path70);
     for (const result of lazyResults) {
       const prefix = getOpenAPIMeta(result.router)?.prefix;
       this.pendingLazyRouters.add({
@@ -129992,20 +130115,20 @@ var OpenAPIMatcher = class {
     return entry.procedure;
   }
 };
-function toRou3Pattern(path72) {
-  const params = getDynamicPathParams(path72);
+function toRou3Pattern(path70) {
+  const params = getDynamicPathParams(path70);
   if (!params?.length) {
-    return path72;
+    return path70;
   }
   for (let i10 = params.length - 1; i10 >= 0; i10--) {
     const param = params[i10];
     const pattern = param.allowsSlash ? `**:${param.parameterName}` : `:${param.parameterName}`;
-    path72 = path72.slice(0, param.startIndex) + pattern + path72.slice(param.startIndex + param.segment.length);
+    path70 = path70.slice(0, param.startIndex) + pattern + path70.slice(param.startIndex + param.segment.length);
   }
-  return path72;
+  return path70;
 }
-function toRou3PrefixMatcher(path72) {
-  const pattern = toRou3Pattern(path72);
+function toRou3PrefixMatcher(path70) {
+  const pattern = toRou3Pattern(path70);
   return routeToRegExp(pattern === "/" ? "/**" : `${pattern}/**`);
 }
 function decodeParams(params) {
@@ -130084,7 +130207,7 @@ var OpenAPIHandlerCodecCore = class {
   /**
    * @throws {TypeError} If `outputStructure` is "detailed" and the output doesn't match the expected structure.
    */
-  encodeOutput(output2, procedure, path72) {
+  encodeOutput(output2, procedure, path70) {
     const meta3 = getOpenAPIMeta(procedure);
     const successStatus = meta3?.successStatus ?? DEFAULT_SUCCESS_STATUS;
     const outputStructure = meta3?.outputStructure ?? DEFAULT_OPENAPI_OUTPUT_STRUCTURE;
@@ -130097,7 +130220,7 @@ var OpenAPIHandlerCodecCore = class {
     }
     if (!isValidDetailedOutput(output2)) {
       throw new TypeError(`
-        Invalid "detailed" output structure returned by procedure (${path72.join(".")}):
+        Invalid "detailed" output structure returned by procedure (${path70.join(".")}):
         \u2022 Expected an object with optional properties:
           - status (number <400)
           - headers (object)
@@ -130665,7 +130788,7 @@ function profileValue(name, paths) {
 function createConfigApiRouter(deps) {
   const authed = doorApiAuth(deps.expectedToken);
   const { paths } = deps;
-  const route = (path72, summary) => authed.meta(openapi({ method: "POST", path: path72, summary, tags: [CONFIG_API_TAG] }));
+  const route = (path70, summary) => authed.meta(openapi({ method: "POST", path: path70, summary, tags: [CONFIG_API_TAG] }));
   return {
     config: {
       identity: {
@@ -131024,7 +131147,7 @@ function createLifecycleApiRouter(deps) {
 init_cliError();
 
 // src/frontdoor/launchSchemas.ts
-var import_node_path51 = __toESM(require("node:path"), 1);
+var import_node_path49 = __toESM(require("node:path"), 1);
 init_zod();
 init_statusline();
 init_claudeVersion();
@@ -131035,7 +131158,7 @@ var LaunchResolveInputSchema = external_exports.strictObject({
   argv: external_exports.readonly(external_exports.array(external_exports.string())).optional(),
   /** The launch's inherited environment. Absent means an empty one: the door's own environment is never a substitute for the caller's, so a caller that wants `AGENT_SHIM_*` switches or a `CLAUDE_CONFIG_DIR` considered names them here. Values are read, never reported. */
   env: external_exports.record(external_exports.string(), external_exports.string()).optional()
-}).refine((input2) => import_node_path51.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+}).refine((input2) => import_node_path49.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var LaunchPoolDecisionSchema = external_exports.strictObject({
   name: external_exports.string(),
   reasons: external_exports.readonly(external_exports.array(external_exports.string())),
@@ -132086,6 +132209,7 @@ async function serveRouted(incoming, deps) {
 
 // src/frontdoor/providerRoute.ts
 init_load();
+init_names();
 init_schema();
 init_translate2();
 init_translate();
@@ -132692,8 +132816,8 @@ function createCodexRouteMount(ports, upstreamBase, provider) {
         request7.body.resume();
         return;
       }
-      const path72 = new URL(request7.url, "http://127.0.0.1").pathname;
-      const translated = { method: request7.method, path: path72, body, signal: request7.signal };
+      const path70 = new URL(request7.url, "http://127.0.0.1").pathname;
+      const translated = { method: request7.method, path: path70, body, signal: request7.signal };
       const routed = await route(translated);
       if (request7.signal.aborted) {
         return;
@@ -133314,8 +133438,8 @@ function createAntigravityRouteMount(ports, upstreamBase, provider) {
         request7.body.resume();
         return;
       }
-      const path72 = new URL(request7.url, "http://127.0.0.1").pathname;
-      const translated = { method: request7.method, path: path72, body, signal: request7.signal };
+      const path70 = new URL(request7.url, "http://127.0.0.1").pathname;
+      const translated = { method: request7.method, path: path70, body, signal: request7.signal };
       const routed = await route(translated);
       if (request7.signal.aborted) {
         return;
@@ -133356,7 +133480,7 @@ function createPassthroughRoute(name, target) {
     headroomUpstream: target.headroomUpstream,
     serve: async (request7, response) => {
       const incoming = new URL(request7.url, "http://127.0.0.1");
-      const path72 = target.stripPrefix !== void 0 && incoming.pathname.startsWith(target.stripPrefix) ? incoming.pathname.slice(target.stripPrefix.length) : incoming.pathname;
+      const path70 = target.stripPrefix !== void 0 && incoming.pathname.startsWith(target.stripPrefix) ? incoming.pathname.slice(target.stripPrefix.length) : incoming.pathname;
       const headers = forwardableHeaders(request7.headers);
       delete headers.host;
       await new Promise((resolve2) => {
@@ -133364,7 +133488,7 @@ function createPassthroughRoute(name, target) {
           host: base.hostname,
           port: base.port === "" ? void 0 : Number(base.port),
           method: request7.method,
-          path: `${basePath}${path72}${incoming.search}`,
+          path: `${basePath}${path70}${incoming.search}`,
           headers,
           agent
         };
@@ -133536,13 +133660,13 @@ async function scanRequestHead(request7, wholeBody = false) {
 }
 
 // src/frontdoor/providerRoute.ts
-var isRcSelfHostPath = (path72) => path72 === "/v1/code/sessions" || path72.startsWith("/v1/code/sessions/") || path72 === "/v1/sessions" || path72.startsWith("/v1/sessions/");
+var isRcSelfHostPath = (path70) => path70 === "/v1/code/sessions" || path70.startsWith("/v1/code/sessions/") || path70 === "/v1/sessions" || path70.startsWith("/v1/sessions/");
 function scopeSessionProviderPath(request7) {
   if (request7.session.provider === void 0) {
     return request7;
   }
-  const path72 = new URL(request7.url, "http://127.0.0.1").pathname;
-  if (!path72.startsWith("/v1/") || isRcSelfHostPath(path72)) {
+  const path70 = new URL(request7.url, "http://127.0.0.1").pathname;
+  if (!path70.startsWith("/v1/") || isRcSelfHostPath(path70)) {
     return request7;
   }
   return { ...request7, url: `${PROVIDER_PATH_PREFIX}${encodeURIComponent(request7.session.provider)}${request7.url}` };
@@ -133602,7 +133726,7 @@ function resolveAccountTarget(model, models) {
     const ref = model.slice("acct:".length);
     const [identity, ...rest] = ref.split("/");
     const named = rest.join("/");
-    return identity === void 0 || named === "" ? void 0 : { identity, model: named };
+    return identity === void 0 || !isFileName(identity) || named === "" ? void 0 : { identity, model: named };
   }
   const virtual = models?.virtual?.[model];
   const first = virtual?.members.find((member) => member.startsWith("acct:"));
@@ -133666,19 +133790,22 @@ function createProviderRouteResolver(deps) {
     return route;
   };
   const resolve2 = (request7) => {
-    const path72 = new URL(request7.url, "http://127.0.0.1").pathname;
-    const scoped = parseProviderPath(path72);
+    const path70 = new URL(request7.url, "http://127.0.0.1").pathname;
+    const scoped = parseProviderPath(path70);
     if (scoped === void 0) {
-      if (deps.rcSelfHostRoute !== void 0 && isRcSelfHostPath(path72)) {
+      if (deps.rcSelfHostRoute !== void 0 && isRcSelfHostPath(path70)) {
         return { ok: true, route: deps.rcSelfHostRoute };
       }
-      return path72.startsWith("/v1/") ? { ok: true, route: oauthRoute } : { ok: false, status: HTTP_STATUS.notFound, message: `no such endpoint: ${path72}` };
+      return path70.startsWith("/v1/") ? { ok: true, route: oauthRoute } : { ok: false, status: HTTP_STATUS.notFound, message: `no such endpoint: ${path70}` };
     }
     const { provider } = scoped;
     let definition;
     try {
       definition = loadProvider(deps.providersDir, provider, deps.fs);
     } catch (error63) {
+      if (error63 instanceof InvalidProviderNameError) {
+        return { ok: false, status: HTTP_STATUS.notFound, message: `no provider named ${JSON.stringify(provider)}` };
+      }
       if (error63 instanceof ConfigValidationError || error63 instanceof LegacyProviderFileError) {
         return { ok: false, status: HTTP_STATUS.internalServerError, message: `provider ${provider} is invalid: ${error63 instanceof Error ? error63.message : String(error63)}` };
       }
@@ -133764,8 +133891,8 @@ function createProviderRouteResolver(deps) {
     let modelChoice;
     const visited = /* @__PURE__ */ new Set();
     for (; ; ) {
-      const path72 = new URL(current.url, "http://127.0.0.1").pathname;
-      const scoped = parseProviderPath(path72);
+      const path70 = new URL(current.url, "http://127.0.0.1").pathname;
+      const scoped = parseProviderPath(path70);
       const providerName = scoped?.provider ?? current.session.provider;
       if (providerName !== void 0 && visited.has(providerName)) {
         return { ok: false, status: HTTP_STATUS.internalServerError, message: `provider routing cycle: ${[...visited, providerName].join(" -> ")}` };
@@ -133780,7 +133907,7 @@ function createProviderRouteResolver(deps) {
       } catch {
         routes = void 0;
       }
-      const resolvesNames = !nameResolved && !isRcSelfHostPath(path72);
+      const resolvesNames = !nameResolved && !isRcSelfHostPath(path70);
       if (resolvesNames) {
         const scan2 = await scanRequestHead(current, true);
         if (scan2.replayed === void 0) {
@@ -133819,7 +133946,7 @@ function createProviderRouteResolver(deps) {
           }
           if (routed.provider !== providerName) {
             const scopedPrefix = providerName === void 0 ? void 0 : `${PROVIDER_PATH_PREFIX}${encodeURIComponent(providerName)}`;
-            const rest2 = scopedPrefix !== void 0 && path72.startsWith(scopedPrefix) ? path72.slice(scopedPrefix.length) : path72;
+            const rest2 = scopedPrefix !== void 0 && path70.startsWith(scopedPrefix) ? path70.slice(scopedPrefix.length) : path70;
             const query2 = current.url.includes("?") ? current.url.slice(current.url.indexOf("?")) : "";
             const carried = replay;
             current = { ...current, url: `${PROVIDER_PATH_PREFIX}${encodeURIComponent(routed.provider)}${rest2}${query2}`, body: carried.body, headers: carried.headers };
@@ -133873,7 +134000,7 @@ function createProviderRouteResolver(deps) {
         const headers = Object.fromEntries(Object.entries(replay.headers).filter(([name]) => name.toLowerCase() !== "content-length"));
         replay = { ...replay, headers, body: import_node_stream3.Readable.from([Buffer.from(rewritten, "utf8")]) };
       }
-      const rest = scoped === void 0 ? path72 : path72.slice(`${PROVIDER_PATH_PREFIX}${encodeURIComponent(scoped.provider)}`.length);
+      const rest = scoped === void 0 ? path70 : path70.slice(`${PROVIDER_PATH_PREFIX}${encodeURIComponent(scoped.provider)}`.length);
       const query = current.url.includes("?") ? current.url.slice(current.url.indexOf("?")) : "";
       current = { ...current, url: `${PROVIDER_PATH_PREFIX}${encodeURIComponent(matched.provider)}${rest}${query}`, body: replay.body, headers: replay.headers };
     }
@@ -133981,7 +134108,7 @@ function createRcLiveUsage(deps) {
 }
 
 // src/frontdoor/rcSelfHostMint.ts
-var import_node_path52 = __toESM(require("node:path"), 1);
+var import_node_path50 = __toESM(require("node:path"), 1);
 init_account();
 
 // src/frontdoor/rcSelfHostLocal.ts
@@ -134111,7 +134238,7 @@ function readJsonObject(fs30, file2) {
   return isRecord16(parsed) ? parsed : void 0;
 }
 function readRcSelfHostRecord(fs30, frontdoorDir) {
-  const parsed = readJsonObject(fs30, import_node_path52.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
+  const parsed = readJsonObject(fs30, import_node_path50.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
   if (parsed === void 0) {
     return void 0;
   }
@@ -134125,11 +134252,11 @@ function mintRcSelfHostCredential(deps) {
   if (!isIdentityName(deps.identity)) {
     throw new Error(`"${deps.identity}" is not a valid identity name.`);
   }
-  const identityDir = import_node_path52.default.join(deps.identitiesDir, deps.identity);
-  const credentialsFile = import_node_path52.default.join(identityDir, CREDENTIALS_FILE2);
-  const claudeJsonFile = import_node_path52.default.join(identityDir, CLAUDE_JSON2);
-  const recordDir = import_node_path52.default.join(deps.frontdoorDir, RC_SELF_HOST_RECORD_DIR);
-  const recordFile = import_node_path52.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
+  const identityDir = import_node_path50.default.join(deps.identitiesDir, deps.identity);
+  const credentialsFile = import_node_path50.default.join(identityDir, CREDENTIALS_FILE2);
+  const claudeJsonFile = import_node_path50.default.join(identityDir, CLAUDE_JSON2);
+  const recordDir = import_node_path50.default.join(deps.frontdoorDir, RC_SELF_HOST_RECORD_DIR);
+  const recordFile = import_node_path50.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
   const previousRecord = readRcSelfHostRecord(deps.fs, deps.frontdoorDir);
   const existingCredentials = readJsonObject(deps.fs, credentialsFile);
   const existingOauth = isRecord16(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
@@ -134145,7 +134272,7 @@ function mintRcSelfHostCredential(deps) {
   const organizationUuid = deps.newUuid();
   const accountUuid = deps.newUuid();
   const mintedAt = new Date(deps.now()).toISOString();
-  deps.fs.mkdirPrivate(import_node_path52.default.dirname(credentialsFile));
+  deps.fs.mkdirPrivate(import_node_path50.default.dirname(credentialsFile));
   deps.fs.writeFilePrivate(credentialsFile, `${JSON.stringify({ ...existingCredentials, claudeAiOauth: { accessToken, refreshToken, expiresAt: null, scopes: [...RC_SELF_HOST_SCOPE_LIST], subscriptionType: SELF_HOST_SUBSCRIPTION_TYPE, rateLimitTier: null } }, null, 2)}
 `);
   const claudeJson = readJsonObject(deps.fs, claudeJsonFile) ?? {};
@@ -134532,7 +134659,7 @@ function registerRcCommand(frontdoor, paths) {
 }
 
 // src/frontdoor/rcCredentialStore.ts
-var import_node_path53 = __toESM(require("node:path"), 1);
+var import_node_path51 = __toESM(require("node:path"), 1);
 function isSafeSessionId(sessionId) {
   return /^[A-Za-z0-9_-]+$/.test(sessionId);
 }
@@ -134558,7 +134685,7 @@ function sequenceNumOfJson(value2) {
 }
 function createRcCredentialStore(fs30, dir) {
   fs30.mkdirPrivate(dir);
-  const fileFor = (sessionId) => import_node_path53.default.join(dir, `${sessionId}.json`);
+  const fileFor = (sessionId) => import_node_path51.default.join(dir, `${sessionId}.json`);
   const readParsed = (sessionId) => {
     const raw = fs30.readFileUtf8(fileFor(sessionId));
     if (raw === void 0) {
@@ -137213,7 +137340,7 @@ function realFrontDoorSupervisorPorts(paths, respawnGeneration, retire, trackTun
     log
   });
   const canonicalProvider = createProviderCanonicaliser({
-    defined: (name) => realFarmFs.lstat(import_node_path54.default.join(paths.providersDir, `${name}.json`)) !== void 0,
+    defined: (name) => providerFileDefined((file2) => realFarmFs.lstat(file2), paths.providersDir, name),
     aliases: () => loadProviderAliases(paths.providerAliasesFile, realFsPort),
     log
   });
@@ -137361,7 +137488,7 @@ function realFrontDoorSupervisorPorts(paths, respawnGeneration, retire, trackTun
       const leafFor = createLeafCache(loadCa(), () => /* @__PURE__ */ new Date());
       const capture = captureFromEnv(process.env, paths.logsDir);
       if (capture !== void 0) {
-        log(`capture enabled, recording CONNECT targets and piped exchanges to ${import_node_path54.default.join(paths.logsDir, "frontdoor-capture.jsonl")}`);
+        log(`capture enabled, recording CONNECT targets and piped exchanges to ${import_node_path52.default.join(paths.logsDir, "frontdoor-capture.jsonl")}`);
       }
       if (rcSelfHostSurface !== void 0) {
         log("self-hosted Remote Control surface on: the door serves the CCR session family itself, and its own client-half dials its own transparent surface");
@@ -137449,7 +137576,7 @@ function realFrontDoorSupervisorPorts(paths, respawnGeneration, retire, trackTun
       cooldownStepMs: DOOR_STALL_BOUND_MS,
       cooldownCapMs: DOOR_RESPAWN_COOLDOWN_CAP_MS,
       startLockFile: paths.frontdoorLockFile,
-      ...process.platform === "darwin" ? { nativeSample: { command: MACOS_SAMPLER, args: ["{pid}", "{seconds}", "-file", "{file}"], directory: import_node_path54.default.join(import_node_path54.default.dirname(paths.frontdoorLogPath), "stall-samples"), seconds: Math.max(1, Math.ceil(DOOR_WATCHDOG_CHECK_MS / MS_PER_SECOND16)), keep: DOOR_RESPAWN_MAX_GENERATIONS + 1 } } : {}
+      ...process.platform === "darwin" ? { nativeSample: { command: MACOS_SAMPLER, args: ["{pid}", "{seconds}", "-file", "{file}"], directory: import_node_path52.default.join(import_node_path52.default.dirname(paths.frontdoorLogPath), "stall-samples"), seconds: Math.max(1, Math.ceil(DOOR_WATCHDOG_CHECK_MS / MS_PER_SECOND16)), keep: DOOR_RESPAWN_MAX_GENERATIONS + 1 } } : {}
     }),
     // The launch lifecycle publisher over the same backbone the typed API serves: the tick's registry facts go in here, and the door's own register, prune and end moments come out as source-tagged events.
     observeLaunchRegistry: createLaunchEventPublisher(doorEvents, () => Date.now()).observe,
@@ -137546,7 +137673,7 @@ function registerFrontDoorCommand(program2, deps) {
 // src/statusline/commands.ts
 var import_node_child_process8 = require("node:child_process");
 var import_node_os13 = __toESM(require("node:os"), 1);
-var import_node_path62 = __toESM(require("node:path"), 1);
+var import_node_path60 = __toESM(require("node:path"), 1);
 init_commandDeps();
 init_statusline();
 init_providersStore();
@@ -137555,13 +137682,13 @@ init_account();
 init_read();
 
 // src/statusline/client.ts
-var import_node_path55 = __toESM(require("node:path"), 1);
+var import_node_path53 = __toESM(require("node:path"), 1);
 function isAntigravityPayload(payload) {
   return typeof payload === "object" && payload !== null && "product" in payload && payload.product === "antigravity";
 }
 var ANTIGRAVITY_SETTINGS_SEGMENTS = [".gemini", "antigravity-cli", "settings.json"];
 function antigravityStacksWithDefault(fs30, homeDir) {
-  const raw = fs30.readFileUtf8(import_node_path55.default.join(homeDir, ...ANTIGRAVITY_SETTINGS_SEGMENTS));
+  const raw = fs30.readFileUtf8(import_node_path53.default.join(homeDir, ...ANTIGRAVITY_SETTINGS_SEGMENTS));
   if (raw === void 0) {
     return false;
   }
@@ -137991,7 +138118,7 @@ function viewOf(payload) {
 init_blockingSpawn();
 var import_node_fs22 = __toESM(require("node:fs"), 1);
 var import_node_os12 = __toESM(require("node:os"), 1);
-var import_node_path56 = __toESM(require("node:path"), 1);
+var import_node_path54 = __toESM(require("node:path"), 1);
 
 // src/statusline/memoryUse.ts
 var BYTES_PER_KIBIBYTE = 1024;
@@ -138120,9 +138247,9 @@ function realStatuslinePorts(env, stateDirectory) {
       }
     },
     writeText: (target, text5) => {
-      const temporary = import_node_path56.default.join(import_node_path56.default.dirname(target), `.${import_node_path56.default.basename(target)}.${String(process.pid)}.tmp`);
+      const temporary = import_node_path54.default.join(import_node_path54.default.dirname(target), `.${import_node_path54.default.basename(target)}.${String(process.pid)}.tmp`);
       try {
-        import_node_fs22.default.mkdirSync(import_node_path56.default.dirname(target), { recursive: true, mode: STATE_DIRECTORY_MODE });
+        import_node_fs22.default.mkdirSync(import_node_path54.default.dirname(target), { recursive: true, mode: STATE_DIRECTORY_MODE });
         import_node_fs22.default.writeFileSync(temporary, text5, { mode: STATE_FILE_MODE });
         import_node_fs22.default.renameSync(temporary, target);
       } catch {
@@ -138377,7 +138504,7 @@ function effortSegment({ payload, settings: settings2 }) {
 }
 
 // src/statusline/dailyLedger.ts
-var import_node_path57 = __toESM(require("node:path"), 1);
+var import_node_path55 = __toESM(require("node:path"), 1);
 init_zod();
 init_schema2();
 var DAILY_LEDGER_DIRECTORY = "daily-cost";
@@ -138421,19 +138548,19 @@ function advance(existing, carried, cost, nowMs) {
   return { entry: existing, changed: false };
 }
 function recordDailySpend(ports, nowMs, sessionId, cost) {
-  const root = import_node_path57.default.join(ports.stateDirectory, DAILY_LEDGER_DIRECTORY);
+  const root = import_node_path55.default.join(ports.stateDirectory, DAILY_LEDGER_DIRECTORY);
   const today = localDay(nowMs);
   const days = (ports.listDirectory(root) ?? []).filter((name) => DAY_NAME.test(name));
   const previous = days.filter((day) => day < today).sort().at(-1);
   for (const day of days) {
     if (day < today && day !== previous) {
-      ports.removePath(import_node_path57.default.join(root, day));
+      ports.removePath(import_node_path55.default.join(root, day));
     }
   }
-  const todayDirectory = import_node_path57.default.join(root, today);
+  const todayDirectory = import_node_path55.default.join(root, today);
   if (sessionId !== void 0 && cost !== void 0 && CLIENT_SESSION_ID_PATTERN.test(sessionId)) {
-    const file2 = import_node_path57.default.join(todayDirectory, `${sessionId}.json`);
-    const carried = previous === void 0 ? void 0 : parseEntry3(ports.readText(import_node_path57.default.join(root, previous, `${sessionId}.json`)));
+    const file2 = import_node_path55.default.join(todayDirectory, `${sessionId}.json`);
+    const carried = previous === void 0 ? void 0 : parseEntry3(ports.readText(import_node_path55.default.join(root, previous, `${sessionId}.json`)));
     const next = advance(parseEntry3(ports.readText(file2)), carried, cost, nowMs);
     if (next?.changed === true) {
       ports.writeText(file2, `${JSON.stringify(next.entry)}
@@ -138441,7 +138568,7 @@ function recordDailySpend(ports, nowMs, sessionId, cost) {
     }
   }
   const entries = (ports.listDirectory(todayDirectory) ?? []).filter((name) => ENTRY_FILE.test(name)).flatMap((name) => {
-    const entry = parseEntry3(ports.readText(import_node_path57.default.join(todayDirectory, name)));
+    const entry = parseEntry3(ports.readText(import_node_path55.default.join(todayDirectory, name)));
     return entry === void 0 ? [] : [entry];
   });
   return entries.length === 0 ? void 0 : entries.reduce((sum2, entry) => sum2 + (entry.totalUsd - entry.baselineUsd), 0);
@@ -138705,7 +138832,7 @@ function modelSegment(context) {
 }
 
 // src/statusline/elements/header/outputStyle.ts
-var import_node_path58 = __toESM(require("node:path"), 1);
+var import_node_path56 = __toESM(require("node:path"), 1);
 init_zod();
 var SettingsFileSchema = external_exports.looseObject({ outputStyle: external_exports.string().optional().catch(void 0) });
 function outputStyleIn(file2, readText2) {
@@ -138725,12 +138852,12 @@ function outputStyleIn(file2, readText2) {
 }
 function outputStyleSegment({ payload, ports }) {
   const pinned = ports.env.CLAUDE_CONFIG_DIR;
-  const configDirectory = pinned === void 0 || pinned === "" ? import_node_path58.default.join(ports.homeDirectory, ".claude") : pinned;
+  const configDirectory = pinned === void 0 || pinned === "" ? import_node_path56.default.join(ports.homeDirectory, ".claude") : pinned;
   const projectDirectory = payload.cwd ?? payload.workspace?.current_dir;
   const files = [
-    import_node_path58.default.join(configDirectory, "settings.json"),
-    import_node_path58.default.join(configDirectory, "settings.local.json"),
-    ...projectDirectory === void 0 ? [] : [import_node_path58.default.join(projectDirectory, ".claude", "settings.json"), import_node_path58.default.join(projectDirectory, ".claude", "settings.local.json")]
+    import_node_path56.default.join(configDirectory, "settings.json"),
+    import_node_path56.default.join(configDirectory, "settings.local.json"),
+    ...projectDirectory === void 0 ? [] : [import_node_path56.default.join(projectDirectory, ".claude", "settings.json"), import_node_path56.default.join(projectDirectory, ".claude", "settings.local.json")]
   ];
   const style = files.map((file2) => outputStyleIn(file2, ports.readText)).findLast((name) => name !== void 0);
   return style === void 0 ? void 0 : `style: ${style}`;
@@ -138820,13 +138947,13 @@ init_zod();
 
 // src/statusline/cacheFile.ts
 var import_node_crypto26 = require("node:crypto");
-var import_node_path59 = __toESM(require("node:path"), 1);
+var import_node_path57 = __toESM(require("node:path"), 1);
 var SESSION_CACHE_DIRECTORY = "session";
 function cacheDirectory(ports) {
-  return import_node_path59.default.join(ports.stateDirectory, SESSION_CACHE_DIRECTORY);
+  return import_node_path57.default.join(ports.stateDirectory, SESSION_CACHE_DIRECTORY);
 }
 function cacheFileFor(ports, kind, transcriptPath) {
-  return import_node_path59.default.join(cacheDirectory(ports), `${kind}-${(0, import_node_crypto26.createHash)("sha256").update(transcriptPath).digest("hex")}.json`);
+  return import_node_path57.default.join(cacheDirectory(ports), `${kind}-${(0, import_node_crypto26.createHash)("sha256").update(transcriptPath).digest("hex")}.json`);
 }
 var RETENTION_DAYS = 30;
 var HOURS_PER_DAY10 = 24;
@@ -138841,7 +138968,7 @@ function pruneCache(ports, cutoffMs) {
     return;
   }
   for (const name of names) {
-    const file2 = import_node_path59.default.join(directory, name);
+    const file2 = import_node_path57.default.join(directory, name);
     const modifiedAtMs = ports.modifiedAtMs(file2);
     if (modifiedAtMs !== void 0 && modifiedAtMs < cutoffMs) {
       ports.removePath(file2);
@@ -138996,15 +139123,15 @@ function parseNumstat(output2) {
     if (addedText === void 0 || deletedText === void 0 || pathText === void 0) {
       continue;
     }
-    const path72 = pathText === "" ? fields[index + 2] : pathText;
+    const path70 = pathText === "" ? fields[index + 2] : pathText;
     if (pathText === "") {
       index += 2;
     }
     const lines = { added: Number(addedText), deleted: Number(deletedText) };
-    if (path72 !== void 0 && Number.isInteger(lines.added) && Number.isInteger(lines.deleted)) {
+    if (path70 !== void 0 && Number.isInteger(lines.added) && Number.isInteger(lines.deleted)) {
       added += lines.added;
       deleted += lines.deleted;
-      byPath.set(path72, lines);
+      byPath.set(path70, lines);
     }
   }
   return { total: { added, deleted }, byPath };
@@ -139059,7 +139186,7 @@ function readGitStatus(ports, cwd, query) {
 }
 
 // src/statusline/vcs/jj.ts
-var import_node_path60 = __toESM(require("node:path"), 1);
+var import_node_path58 = __toESM(require("node:path"), 1);
 var JJ2 = "jj";
 var MAX_WALK_DEPTH = 64;
 var MAX_LABEL_CODE_POINTS = 64;
@@ -139072,13 +139199,13 @@ function isJjRepository(ports, cwd) {
     return false;
   }
   for (let depth = 0; depth < MAX_WALK_DEPTH; depth += 1) {
-    if (ports.entryKind(import_node_path60.default.join(directory, ".jj")) === "directory") {
+    if (ports.entryKind(import_node_path58.default.join(directory, ".jj")) === "directory") {
       return true;
     }
-    if (ports.entryKind(import_node_path60.default.join(directory, ".git")) !== void 0) {
+    if (ports.entryKind(import_node_path58.default.join(directory, ".git")) !== void 0) {
       return false;
     }
-    const parent = import_node_path60.default.dirname(directory);
+    const parent = import_node_path58.default.dirname(directory);
     if (parent === directory) {
       return false;
     }
@@ -139354,7 +139481,7 @@ function gitFilesRow(context) {
 }
 
 // src/statusline/configCounts.ts
-var import_node_path61 = __toESM(require("node:path"), 1);
+var import_node_path59 = __toESM(require("node:path"), 1);
 init_zod();
 var nameList = external_exports.array(external_exports.unknown()).catch([]).transform((items) => items.filter((item) => typeof item === "string"));
 var ConfigFileSchema = external_exports.looseObject({
@@ -139428,7 +139555,7 @@ function countRules(ports, root) {
         break;
       }
       entries += 1;
-      const entry = import_node_path61.default.join(real, name);
+      const entry = import_node_path59.default.join(real, name);
       const kind = followedKind(ports, entry);
       if (kind === "directory") {
         count2 += walk3(entry);
@@ -139445,33 +139572,33 @@ function countRules(ports, root) {
   return walk3(root);
 }
 function sameLocation(ports, left, right) {
-  return (ports.realPath(left) ?? import_node_path61.default.resolve(left)) === (ports.realPath(right) ?? import_node_path61.default.resolve(right));
+  return (ports.realPath(left) ?? import_node_path59.default.resolve(left)) === (ports.realPath(right) ?? import_node_path59.default.resolve(right));
 }
 function configDirectoryOf(ports) {
   const pinned = ports.env.CLAUDE_CONFIG_DIR;
-  return pinned === void 0 || pinned === "" ? import_node_path61.default.join(ports.homeDirectory, ".claude") : pinned;
+  return pinned === void 0 || pinned === "" ? import_node_path59.default.join(ports.homeDirectory, ".claude") : pinned;
 }
 function countConfiguration(ports, projectDirectory) {
   const userDirectory = configDirectoryOf(ports);
-  const userSettings = readConfigFile(ports, import_node_path61.default.join(userDirectory, "settings.json"));
-  const globalFile = ports.env.CLAUDE_CONFIG_DIR === void 0 || ports.env.CLAUDE_CONFIG_DIR === "" ? import_node_path61.default.join(ports.homeDirectory, ".claude.json") : import_node_path61.default.join(userDirectory, ".claude.json");
+  const userSettings = readConfigFile(ports, import_node_path59.default.join(userDirectory, "settings.json"));
+  const globalFile = ports.env.CLAUDE_CONFIG_DIR === void 0 || ports.env.CLAUDE_CONFIG_DIR === "" ? import_node_path59.default.join(ports.homeDirectory, ".claude.json") : import_node_path59.default.join(userDirectory, ".claude.json");
   const global2 = readConfigFile(ports, globalFile);
   const userServers = /* @__PURE__ */ new Set([...namesOf(userSettings), ...namesOf(global2)]);
   removeNames(userServers, global2?.disabledMcpServers);
   const projectServers = /* @__PURE__ */ new Set();
-  let claudeMd = isFile(ports, import_node_path61.default.join(userDirectory, "CLAUDE.md")) ? 1 : 0;
-  let rules = countRules(ports, import_node_path61.default.join(userDirectory, "rules"));
+  let claudeMd = isFile(ports, import_node_path59.default.join(userDirectory, "CLAUDE.md")) ? 1 : 0;
+  let rules = countRules(ports, import_node_path59.default.join(userDirectory, "rules"));
   let hookEvents = hookEventsOf(userSettings);
   if (projectDirectory !== void 0) {
-    const projectClaude = import_node_path61.default.join(projectDirectory, ".claude");
+    const projectClaude = import_node_path59.default.join(projectDirectory, ".claude");
     const projectIsUser = sameLocation(ports, projectClaude, userDirectory);
-    const claudeMdFiles = [import_node_path61.default.join(projectDirectory, "CLAUDE.md"), import_node_path61.default.join(projectDirectory, "CLAUDE.local.md"), import_node_path61.default.join(projectClaude, "CLAUDE.local.md"), ...projectIsUser ? [] : [import_node_path61.default.join(projectClaude, "CLAUDE.md")]];
+    const claudeMdFiles = [import_node_path59.default.join(projectDirectory, "CLAUDE.md"), import_node_path59.default.join(projectDirectory, "CLAUDE.local.md"), import_node_path59.default.join(projectClaude, "CLAUDE.local.md"), ...projectIsUser ? [] : [import_node_path59.default.join(projectClaude, "CLAUDE.md")]];
     claudeMd += claudeMdFiles.filter((file2) => isFile(ports, file2)).length;
-    const mcpJson = namesOf(readConfigFile(ports, import_node_path61.default.join(projectDirectory, ".mcp.json")));
+    const mcpJson = namesOf(readConfigFile(ports, import_node_path59.default.join(projectDirectory, ".mcp.json")));
     if (!projectIsUser) {
-      rules += countRules(ports, import_node_path61.default.join(projectClaude, "rules"));
-      const settings2 = readConfigFile(ports, import_node_path61.default.join(projectClaude, "settings.json"));
-      const local = readConfigFile(ports, import_node_path61.default.join(projectClaude, "settings.local.json"));
+      rules += countRules(ports, import_node_path59.default.join(projectClaude, "rules"));
+      const settings2 = readConfigFile(ports, import_node_path59.default.join(projectClaude, "settings.json"));
+      const local = readConfigFile(ports, import_node_path59.default.join(projectClaude, "settings.local.json"));
       hookEvents += hookEventsOf(settings2) + hookEventsOf(local);
       for (const name of [...namesOf(settings2), ...namesOf(local)]) {
         projectServers.add(name);
@@ -140357,7 +140484,7 @@ function registerStatuslineCommand(program2, deps) {
       } else {
         const configDir = process.env.CLAUDE_CONFIG_DIR;
         try {
-          account = readAccountMetadataFile(realFarmFs, configDir === void 0 || configDir === "" ? import_node_path62.default.join(import_node_os13.default.homedir(), ".claude.json") : import_node_path62.default.join(configDir, ".claude.json"));
+          account = readAccountMetadataFile(realFarmFs, configDir === void 0 || configDir === "" ? import_node_path60.default.join(import_node_os13.default.homedir(), ".claude.json") : import_node_path60.default.join(configDir, ".claude.json"));
         } catch {
           account = void 0;
         }
@@ -142458,8 +142585,8 @@ function getErrorMap2() {
 
 // node_modules/.pnpm/zod@4.6.5/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path72, errorMaps, issueData } = params;
-  const fullPath = [...path72, ...issueData.path || []];
+  const { data, path: path70, errorMaps, issueData } = params;
+  const fullPath = [...path70, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -142574,11 +142701,11 @@ var errorUtil;
 
 // node_modules/.pnpm/zod@4.6.5/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value2, path72, key) {
+  constructor(parent, value2, path70, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value2;
-    this._path = path72;
+    this._path = path70;
     this._key = key;
   }
   get path() {
@@ -146141,11 +146268,11 @@ function normalizeObjectSchema(schema) {
   }
   return void 0;
 }
-function getDotPath(path72) {
-  if (path72.length === 0) {
+function getDotPath(path70) {
+  if (path70.length === 0) {
     return "object root";
   }
-  return path72.reduce((acc, seg, index) => {
+  return path70.reduce((acc, seg, index) => {
     if (index === 0) {
       return String(seg);
     }
@@ -150188,7 +150315,7 @@ async function serveMcp(mcp, transport, options = {}) {
 
 // src/mcp/permissions.ts
 var import_node_fs23 = __toESM(require("node:fs"), 1);
-var import_node_path63 = __toESM(require("node:path"), 1);
+var import_node_path61 = __toESM(require("node:path"), 1);
 init_zod();
 init_store();
 var StoredMcpPermissionsSchema = external_exports.strictObject({
@@ -150210,10 +150337,10 @@ function effectiveMcpPermissions(flags, stored) {
   return { writes: flags.writes || stored.writes, remoteControl: flags.remoteControl || stored.remoteControl, history: flags.history || stored.history };
 }
 function watchMcpPermissions(paths, onChange) {
-  const directory = import_node_path63.default.dirname(paths.mcpPermissionsFile);
+  const directory = import_node_path61.default.dirname(paths.mcpPermissionsFile);
   import_node_fs23.default.mkdirSync(directory, { recursive: true });
   const watcher = import_node_fs23.default.watch(directory, (_event, filename) => {
-    if (filename === null || filename === import_node_path63.default.basename(paths.mcpPermissionsFile)) {
+    if (filename === null || filename === import_node_path61.default.basename(paths.mcpPermissionsFile)) {
       onChange();
     }
   });
@@ -150526,16 +150653,16 @@ init_credentialCache();
 
 // src/identityToken.ts
 var import_node_fs24 = __toESM(require("node:fs"), 1);
-var import_node_path64 = __toESM(require("node:path"), 1);
+var import_node_path62 = __toESM(require("node:path"), 1);
 init_cliError();
 var TOKEN_FILE_MODE = 384;
 var TOKEN_DIR_MODE = 448;
 var OAUTH_TOKEN_RE = /^sk-ant-oat\d+-[A-Za-z0-9_-]+$/;
 function identityTokenDir(paths) {
-  return import_node_path64.default.join(paths.root, "credentials");
+  return import_node_path62.default.join(paths.root, "credentials");
 }
 function identityTokenPath(paths, identityName) {
-  return import_node_path64.default.join(identityTokenDir(paths), `${identityName}.token`);
+  return import_node_path62.default.join(identityTokenDir(paths), `${identityName}.token`);
 }
 function storeIdentityToken(paths, identityName, raw) {
   const token = raw.trim();
@@ -150546,7 +150673,7 @@ function storeIdentityToken(paths, identityName, raw) {
   import_node_fs24.default.mkdirSync(dir, { recursive: true, mode: TOKEN_DIR_MODE });
   import_node_fs24.default.chmodSync(dir, TOKEN_DIR_MODE);
   const target = identityTokenPath(paths, identityName);
-  const temp = import_node_path64.default.join(dir, `.${identityName}.${String(process.pid)}.tmp`);
+  const temp = import_node_path62.default.join(dir, `.${identityName}.${String(process.pid)}.tmp`);
   import_node_fs24.default.writeFileSync(temp, `${token}
 `, { mode: TOKEN_FILE_MODE });
   import_node_fs24.default.renameSync(temp, target);
@@ -150718,7 +150845,7 @@ function registerDoctorCommand(program2, deps) {
 // src/headroom/commands.ts
 var import_node_fs25 = __toESM(require("node:fs"), 1);
 var import_node_http5 = __toESM(require("node:http"), 1);
-var import_node_path65 = __toESM(require("node:path"), 1);
+var import_node_path63 = __toESM(require("node:path"), 1);
 var import_node_child_process9 = require("node:child_process");
 init_commandDeps();
 init_configProfilesStore();
@@ -150909,12 +151036,12 @@ function readInstalledHeadroomCommit() {
   if (toolDir.status !== 0) {
     return void 0;
   }
-  const libDir = import_node_path65.default.join(toolDir.stdout.trim(), HEADROOM_TOOL_NAME, "lib");
+  const libDir = import_node_path63.default.join(toolDir.stdout.trim(), HEADROOM_TOOL_NAME, "lib");
   for (const python of realFarmFs.readdir(libDir)) {
-    const sitePackages = import_node_path65.default.join(libDir, python, "site-packages");
+    const sitePackages = import_node_path63.default.join(libDir, python, "site-packages");
     for (const entry of realFarmFs.readdir(sitePackages)) {
       if (entry.startsWith("headroom_ai-") && entry.endsWith(".dist-info")) {
-        const directUrl = realFarmFs.readFileUtf8(import_node_path65.default.join(sitePackages, entry, "direct_url.json"));
+        const directUrl = realFarmFs.readFileUtf8(import_node_path63.default.join(sitePackages, entry, "direct_url.json"));
         return directUrl === void 0 ? void 0 : parseInstalledCommit(directUrl);
       }
     }
@@ -151170,7 +151297,7 @@ async function refreshCatalogueForReal(paths, name, env) {
 init_realPorts();
 
 // src/usage/realJobRunner.ts
-var import_node_path66 = __toESM(require("node:path"), 1);
+var import_node_path64 = __toESM(require("node:path"), 1);
 init_conditions();
 init_identityClaude();
 var JOB_LAUNCH_FLAGS = ["--no-headroom", "--no-remote-control", "--track-usage"];
@@ -151183,7 +151310,7 @@ ${outcome.trimEnd()}
 }
 function createRealJobRunner(params) {
   return async (name, identity, job) => {
-    const logFile = import_node_path66.default.join(params.paths.jobLogsDir, `${name}.log`);
+    const logFile = import_node_path64.default.join(params.paths.jobLogsDir, `${name}.log`);
     const append = (outcome) => {
       params.fs.mkdirPrivate(params.paths.jobLogsDir);
       params.fs.appendFilePrivate(logFile, logEntry(name, identity, params.now(), outcome));
@@ -151240,7 +151367,7 @@ function registerHeadlessCommands(program2, deps) {
 }
 
 // src/jobs.ts
-var import_node_path67 = __toESM(require("node:path"), 1);
+var import_node_path65 = __toESM(require("node:path"), 1);
 init_commandDeps();
 init_cliError();
 init_schema();
@@ -151265,7 +151392,7 @@ function jobOf(options) {
     target: options.identity === void 0 ? { pool: options.pool ?? "" } : { identity: options.identity },
     trigger: options.at === void 0 ? { beforeReset: options.beforeReset ?? "fiveHour", lead: options.lead ?? "" } : { at: options.at },
     prompt: options.prompt,
-    cwd: import_node_path67.default.resolve(options.cwd ?? process.cwd()),
+    cwd: import_node_path65.default.resolve(options.cwd ?? process.cwd()),
     timeout: options.timeout,
     ...options.model === void 0 ? {} : { model: options.model },
     ...options.allowedTool === void 0 ? {} : { allowedTools: options.allowedTool }
@@ -151338,7 +151465,7 @@ function registerJobCommand(program2, deps) {
         console.log(`Allowed tools: ${entry.allowedTools.join(", ")}`);
       }
       console.log(`Prompt: ${entry.prompt}`);
-      console.log(`Results: ${import_node_path67.default.join(paths.jobLogsDir, `${name}.log`)}`);
+      console.log(`Results: ${import_node_path65.default.join(paths.jobLogsDir, `${name}.log`)}`);
     }),
     ["agent-shim job show digest"]
   );
@@ -151361,7 +151488,7 @@ function registerJobCommand(program2, deps) {
         throw new UsageError(`No member of the job's pool can be picked right now.`);
       }
       await createRealJobRunner({ paths, spawnDaemon: spawnDetachedSupervisor, fs: realFarmFs, now: () => /* @__PURE__ */ new Date() })(name, identity, entry);
-      console.log(`Ran job "${name}" as ${identity}; the result is in ${import_node_path67.default.join(paths.jobLogsDir, `${name}.log`)}.`);
+      console.log(`Ran job "${name}" as ${identity}; the result is in ${import_node_path65.default.join(paths.jobLogsDir, `${name}.log`)}.`);
     }),
     ["agent-shim job run digest"]
   );
@@ -151525,7 +151652,7 @@ init_providerAliases();
 
 // src/providerRename.ts
 var import_node_fs26 = __toESM(require("node:fs"), 1);
-var import_node_path68 = __toESM(require("node:path"), 1);
+var import_node_path66 = __toESM(require("node:path"), 1);
 init_schema();
 init_store();
 init_load();
@@ -151535,6 +151662,7 @@ init_credentialCache();
 init_providerCatalogue();
 init_schema2();
 init_read();
+init_names();
 init_providerAliases();
 init_providersStore();
 function renameRef(ref, from, to2) {
@@ -151580,7 +151708,7 @@ function renameProvider(paths, from, to2, ports) {
   if (from === to2) {
     throw new UsageError(`"${from}" is already the provider's name.`);
   }
-  requireValidProviderName(to2);
+  requireNewProviderName(to2);
   if (!providerExists(paths, from)) {
     throw new ProviderNotFoundError(from);
   }
@@ -151642,7 +151770,7 @@ function rewriteReferences(paths, from, to2) {
     const launch = renamedLaunch(profile.launch, from, to2);
     const models = profile.models === void 0 ? void 0 : renamedModels(profile.models, from, to2);
     if (launch !== void 0 || models !== void 0) {
-      applyPatch(import_node_path68.default.join(paths.configProfilesDir, `${name}.json`), ConfigProfileSchema, { ...launch === void 0 ? {} : { launch }, ...models === void 0 ? {} : { models } });
+      applyPatch(import_node_path66.default.join(paths.configProfilesDir, `${name}.json`), ConfigProfileSchema, { ...launch === void 0 ? {} : { launch }, ...models === void 0 ? {} : { models } });
       rewritten.push(`profile ${name}`);
     }
   }
@@ -152469,7 +152597,7 @@ function registerSessionCommands(program2, deps) {
 }
 
 // src/usage/commands.ts
-var import_node_path69 = __toESM(require("node:path"), 1);
+var import_node_path67 = __toESM(require("node:path"), 1);
 init_commandDeps();
 init_realPorts();
 init_account();
@@ -152608,7 +152736,7 @@ function collectAccounts(fs30, paths, identity, probe) {
   return names.map((name) => ({
     identity: name,
     account: readAccountMetadata(fs30, paths.identitiesDir, name),
-    signIn: identitySignIn(fs30, probe, { farmRoot: import_node_path69.default.join(paths.identitiesDir, name), hasCredentialBlock: readIdentity(paths, name)?.credential !== void 0 }),
+    signIn: identitySignIn(fs30, probe, { farmRoot: import_node_path67.default.join(paths.identitiesDir, name), hasCredentialBlock: readIdentity(paths, name)?.credential !== void 0 }),
     usage: readUsageSnapshot(fs30, paths.usageSnapshotsDir, name)
   }));
 }
@@ -153015,7 +153143,7 @@ function quotaHitOf(fs30, paths, identity, sessionId, sinceMs, nowMs) {
 }
 
 // src/supervise/move.ts
-var import_node_path70 = __toESM(require("node:path"), 1);
+var import_node_path68 = __toESM(require("node:path"), 1);
 init_lock();
 init_poolPick();
 init_read();
@@ -153061,7 +153189,7 @@ function createMover(deps) {
       if (resolution.identity === request7.from) {
         return { kind: "stay", reason: `no other member of pool "${pool}" can take it` };
       }
-      const transcript = import_node_path70.default.join(paths.identitiesDir, resolution.identity, "projects", projectDirNameOf(deps.cwd), `${request7.sessionId}.jsonl`);
+      const transcript = import_node_path68.default.join(paths.identitiesDir, resolution.identity, "projects", projectDirNameOf(deps.cwd), `${request7.sessionId}.jsonl`);
       if (farmFs.lstat(transcript)?.kind !== "file") {
         return { kind: "stay", reason: `${resolution.identity} does not share this conversation's history, so it could not resume it` };
       }
@@ -153095,13 +153223,13 @@ function createIdentityMover(deps) {
       throw error63;
     }
     try {
-      if (farmFs.readFileUtf8(import_node_path70.default.join(paths.identitiesDir, request7.to, "identity.json")) === void 0) {
+      if (farmFs.readFileUtf8(import_node_path68.default.join(paths.identitiesDir, request7.to, "identity.json")) === void 0) {
         return { kind: "stay", reason: `no identity "${request7.to}"` };
       }
       if (request7.to === request7.from) {
         return { kind: "stay", reason: `the model already runs under this session's identity` };
       }
-      const transcript = import_node_path70.default.join(paths.identitiesDir, request7.to, "projects", projectDirNameOf(deps.cwd), `${request7.sessionId}.jsonl`);
+      const transcript = import_node_path68.default.join(paths.identitiesDir, request7.to, "projects", projectDirNameOf(deps.cwd), `${request7.sessionId}.jsonl`);
       if (farmFs.lstat(transcript)?.kind !== "file") {
         return { kind: "stay", reason: `${request7.to} does not share this conversation's history, so it could not resume it` };
       }
@@ -153680,7 +153808,7 @@ async function runClaude(argvOverride) {
 // src/cli.ts
 async function main() {
   aliasLegacyEnv(process.env);
-  const invokedName = import_node_path71.default.basename(process.argv[1] ?? "agent-shim");
+  const invokedName = import_node_path69.default.basename(process.argv[1] ?? "agent-shim");
   if (isInvokedAsClaude(invokedName)) {
     await runClaude();
     return;