claudish 14.5.2 → 14.7.0

package/dist/index.js

@@ -114,6 +114,7 @@ var init_launch_env = __esm(() => {
     "CLAUDISH_PANE_CWD",
     "CLAUDISH_HOOK_INBOX",
     "CLAUDISH_HOOK_SESSION",
+    "CLAUDISH_PARENT_SESSION",
     "CLAUDISH_BIN"
   ];
 });
@@ -166,6 +167,7 @@ var init_config = __esm(() => {
     CLAUDISH_PANE_CHILD: "CLAUDISH_PANE_CHILD",
     CLAUDISH_PANE_ENV: "CLAUDISH_PANE_ENV",
     CLAUDISH_PANE_CWD: "CLAUDISH_PANE_CWD",
+    CLAUDISH_PARENT_SESSION: "CLAUDISH_PARENT_SESSION",
     CLAUDISH_PANE_ROOT: "CLAUDISH_PANE_ROOT"
   };
 });
@@ -216,7 +218,8 @@ function applyPaneEnvSnapshot(env) {
     ENV.CLAUDISH_PANE_CHILD,
     ENV.CLAUDISH_PANE_CWD,
     HOOK_INBOX_VAR,
-    HOOK_SESSION_VAR
+    HOOK_SESSION_VAR,
+    ENV.CLAUDISH_PARENT_SESSION
   ]);
   for (const key of Object.keys(env)) {
     if (Object.hasOwn(snapshot, key) || keep.has(key) || isPaneShellManagedKey(key))
@@ -298,7 +301,8 @@ var init_child_env = __esm(() => {
     ENV.CLAUDISH_PANE_ENV,
     ENV.CLAUDISH_PANE_CWD,
     HOOK_INBOX_VAR,
-    HOOK_SESSION_VAR
+    HOOK_SESSION_VAR,
+    ENV.CLAUDISH_PARENT_SESSION
   ];
   PANE_SHELL_MANAGED_KEYS = [
     "COLUMNS",
@@ -4266,6 +4270,67 @@ var init_zod = __esm(() => {
   init_external();
 });
 
+// src/auth/accounts/account-label.ts
+function cleanPlan(plan) {
+  const cleaned = (plan ?? "").toLowerCase().replace(/[^a-z0-9]/g, "").slice(0, PLAN_MAX);
+  return cleaned || undefined;
+}
+function labelTaken(taken, label) {
+  const wanted = label.toLowerCase();
+  for (const existing of taken)
+    if (existing.toLowerCase() === wanted)
+      return true;
+  return false;
+}
+function emailMatches(rowEmail, selector) {
+  return rowEmail !== undefined && rowEmail.toLowerCase() === selector.toLowerCase();
+}
+function shellWord(label) {
+  if (/^[\w@+.-]+$/.test(label))
+    return label;
+  return `'${label.replace(/'/g, `'\\''`)}'`;
+}
+function baseOf(input) {
+  const fromEmail = (input.email ?? "").trim().toLowerCase().replace(/[^a-z0-9_@+.-]/g, "_").replace(/^\W+/, "");
+  if (fromEmail)
+    return fromEmail.slice(0, ACCOUNT_LABEL_MAX);
+  return (input.chatgptAccountId ?? "").toLowerCase().replace(/[^a-z0-9_-]/g, "").replace(/^\W+/, "").slice(0, 8);
+}
+function fit(base, suffix) {
+  return base.slice(0, ACCOUNT_LABEL_MAX - suffix.length).replace(/[.\-+@]+$/, "") + suffix;
+}
+function deriveAccountLabel(input) {
+  const base = baseOf(input);
+  if (!base)
+    throw new Error("The login carries no email or account id; pass --label.");
+  const taken = new Set;
+  for (const label of input.taken)
+    taken.add(label.toLowerCase());
+  const plan = cleanPlan(input.plan);
+  const planSuffix = plan ? `-${plan}` : "";
+  function* candidates() {
+    yield fit(base, "");
+    if (plan)
+      yield fit(base, planSuffix);
+    for (let n = 2;n <= NUMBER_MAX; n++)
+      yield fit(base, `${planSuffix}-${n}`);
+  }
+  for (const candidate of candidates()) {
+    if (taken.has(candidate.toLowerCase()))
+      continue;
+    if (!ACCOUNT_LABEL_PATTERN.test(candidate)) {
+      throw new Error(`The derived label "${candidate}" is not valid; pass --label.`);
+    }
+    return candidate;
+  }
+  throw new Error("Could not derive an unused label; pass --label.");
+}
+var ACCOUNT_LABEL_MAX = 64, ACCOUNT_LABEL_PATTERN, ACCOUNT_LABEL_RULE, PLAN_MAX = 16, NUMBER_MAX = 999;
+var init_account_label = __esm(() => {
+  ACCOUNT_LABEL_PATTERN = /^\w[\w@+. -]{0,63}$/;
+  ACCOUNT_LABEL_RULE = "An account label starts with a letter, digit or underscore and has at most 64 letters, " + "digits, spaces, and the characters _ @ + . -";
+});
+
 // src/auth/quota/codex-window-slots.ts
 var CODEX_WINDOW_SLOTS;
 var init_codex_window_slots = __esm(() => {
@@ -4326,6 +4391,7 @@ function requireWireApiForTransport(transport, wire, ctx) {
 var CustomEndpointAuthSchemeSchema, WireValueSchema, WirePointerSchema, WireAssignmentSchema, CustomEndpointWireSchema, CustomEndpointSimpleSchema, CustomEndpointComplexSchema, CustomEndpointSchema, PredefinedEndpointsConfigSchema, AccountIdentitySchema, AccountStoreKindSchema, SubscriptionAccountSchema, CodexWindowSlotSchema, SubscriptionAccountsEntrySchema, SubscriptionAccountsSchema;
 var init_config_schema = __esm(() => {
   init_zod();
+  init_account_label();
   init_codex_window_slots();
   CustomEndpointAuthSchemeSchema = _enum(["bearer", "x-api-key", "none"]);
   WireValueSchema = union([string2(), number2(), boolean2()]);
@@ -4392,7 +4458,7 @@ var init_config_schema = __esm(() => {
   AccountStoreKindSchema = _enum(["keychain", "file", "legacy-codex-file"]);
   SubscriptionAccountSchema = object({
     id: string2().regex(/^[a-z0-9]{12}$/, "account ids are generated, 12 lowercase alphanumerics"),
-    label: string2().regex(/^[\w][\w .-]{0,31}$/, "labels are 1-32 word characters, . - or space"),
+    label: string2().regex(ACCOUNT_LABEL_PATTERN, ACCOUNT_LABEL_RULE),
     identity: AccountIdentitySchema.optional(),
     store: AccountStoreKindSchema,
     enabled: boolean2().optional(),
@@ -4586,12 +4652,12 @@ function isAccountProvider(value) {
 function sameAccount(a, b) {
   return a.provider === b.provider && a.id === b.id;
 }
-var ACCOUNT_PROVIDERS, DEFAULT_SWITCH_AT = 0.9, ACCOUNT_ID_PATTERN, LEGACY_CODEX_ACCOUNT_ID = "legacy-codex", ACCOUNT_LABEL_PATTERN;
+var ACCOUNT_PROVIDERS, DEFAULT_SWITCH_AT = 0.9, ACCOUNT_ID_PATTERN, LEGACY_CODEX_ACCOUNT_ID = "legacy-codex";
 var init_types = __esm(() => {
   init_errors3();
+  init_account_label();
   ACCOUNT_PROVIDERS = ["native-anthropic", "openai-codex"];
   ACCOUNT_ID_PATTERN = /^[a-z0-9]{12}$/;
-  ACCOUNT_LABEL_PATTERN = /^[\w][\w .-]{0,31}$/;
 });
 
 // src/auth/accounts/config-validation.ts
@@ -5332,7 +5398,7 @@ var init_onepassword_config = __esm(() => {
 });
 
 // src/version.ts
-var VERSION = "14.5.2";
+var VERSION = "14.7.0";
 
 // src/redact.ts
 function isPlaceholder(value) {
@@ -15976,7 +16042,7 @@ var init_minimax_model_dialect = __esm(() => {
 });
 
 // src/auth/accounts/allowance-report-schema.ts
-var ALLOWANCE_REPORT_SCHEMA = "claudish.allowance.v1", iso, fraction, finite, nonNegative, quantilesOf = (t) => object({ p10: t, p25: t, p50: t, p75: t, p90: t }), alertLevel, strategyName, evidence, unit, provenance, semantics, gapKind, exactness, accountSchema, remedySchema, alertSchema, trajectorySchema, sessionSchema, allowanceReportSchema, allowanceStatusAnswerSchema;
+var ALLOWANCE_REPORT_SCHEMA = "claudish.allowance.v1", iso, fraction, finite, nonNegative, quantilesOf = (t) => object({ p10: t, p25: t, p50: t, p75: t, p90: t }), alertLevel, strategyName, evidence, unit, provenance, semantics, gapKind, exactness, accountSchema, remedySchema, alertSchema, historyPoint, trajectorySchema, sessionSchema, allowanceReportSchema, ALLOWANCE_REPORT_SECTIONS, partialReport, allowanceStatusAnswerSchema;
 var init_allowance_report_schema = __esm(() => {
   init_zod();
   iso = exports_iso.datetime({ offset: true });
@@ -16006,7 +16072,10 @@ var init_allowance_report_schema = __esm(() => {
       semantics
     })),
     lambda: union([literal(0), literal(1)]).nullable(),
-    calibration: object({ beta: string2(), kappa: string2().nullable() })
+    calibration: object({ beta: string2(), kappa: string2().nullable() }),
+    active: boolean2().optional(),
+    order: number2().int().min(0).optional(),
+    lostAtReset: object({ at: iso, p10: fraction, p50: fraction, p90: fraction }).nullable().optional()
   });
   remedySchema = object({
     kind: _enum(["cut", "pause", "not-addressable"]),
@@ -16027,19 +16096,29 @@ var init_allowance_report_schema = __esm(() => {
     binding: array(object({ account: string2(), window: string2() })),
     remedy: remedySchema
   });
+  historyPoint = object({
+    at: iso,
+    remaining: finite,
+    provenance: _enum(["observed", "reset-inferred"])
+  });
   trajectorySchema = object({
-    history: array(object({
-      at: iso,
-      remaining: finite,
-      provenance: _enum(["observed", "reset-inferred"])
-    })),
+    history: array(historyPoint),
+    historyByAccount: array(object({ accountId: string2(), history: array(historyPoint) })).optional(),
     forecast: array(object({ at: iso, p10: finite, p50: finite, p90: finite, pBlocked: fraction })),
     resets: array(object({ at: iso, account: string2(), window: string2(), projected: boolean2() })),
     blocked: array(object({ from: iso, to: iso, kind: gapKind, probability: fraction })),
+    switches: array(object({
+      accountId: string2(),
+      soonest: iso,
+      usual: iso,
+      latest: iso,
+      probability: fraction
+    })).optional(),
     spark48: string2().regex(/^[\u2581\u2582\u2583\u2584\u2585\u2586\u2587\u2588\u2592\u2593\u250A ]*$/u)
   });
   sessionSchema = object({
     session: union([string2().max(8), literal("unattributed")]),
+    parent: union([string2().max(8), _null3()]).optional(),
     account: string2(),
     window: string2(),
     share: fraction,
@@ -16081,11 +16160,41 @@ var init_allowance_report_schema = __esm(() => {
     trajectory: trajectorySchema,
     sessions: array(sessionSchema)
   });
+  ALLOWANCE_REPORT_SECTIONS = [
+    "accounts",
+    "alerts",
+    "burn",
+    "combined",
+    "sessions",
+    "trajectory"
+  ];
+  partialReport = allowanceReportSchema.partial({
+    accounts: true,
+    alerts: true,
+    burn: true,
+    combined: true,
+    sessions: true,
+    trajectory: true
+  });
   allowanceStatusAnswerSchema = object({
     contract_version: literal(1),
     capabilities: array(string2()),
-    allowance: allowanceReportSchema.nullable(),
+    sections: array(_enum(ALLOWANCE_REPORT_SECTIONS)).min(1).optional(),
+    allowance: partialReport.nullable(),
     reason: string2().optional()
+  }).superRefine((answer, ctx) => {
+    if (answer.allowance === null)
+      return;
+    const wanted = answer.sections ?? ALLOWANCE_REPORT_SECTIONS;
+    for (const section of wanted) {
+      if (answer.allowance[section] === undefined) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["allowance", section],
+          message: `section ${section} is missing`
+        });
+      }
+    }
   });
 });
 
@@ -16537,7 +16646,7 @@ function cuOf(tokens, cfg) {
   const uncached = Math.max(0, tokens.input - tokens.cacheRead - tokens.cacheWrite);
   return uncached + w.cacheRead * tokens.cacheRead + w.cacheWrite * tokens.cacheWrite + w.output * tokens.output;
 }
-var PROVIDER_COST_PRIORS, MINUTE_MS2 = 60000, HOUR_MS2, DEFAULT_ALLOWANCE_CONFIG, LOOKAHEAD_TRAJ_PATHS = 40;
+var PROVIDER_COST_PRIORS, MINUTE_MS2 = 60000, HOUR_MS2, DEFAULT_ALLOWANCE_CONFIG, LOOKAHEAD_TRAJ_PATHS = 40, MIN_PATH_SHARE = 0.1, PACE_MAX_MULT = 64, PACE_BISECT_STEPS = 4;
 var init_constants = __esm(() => {
   PROVIDER_COST_PRIORS = {
     "openai-codex": { cacheRead: 0.1, cacheWrite: 1, output: 4 },
@@ -17030,7 +17139,7 @@ function fold(s, e, cfg, seen) {
         insertServed(account, e.at, cu);
         addDemand(s, hourOf(e.at), cu, 1);
         if (e.session !== null)
-          addSession(s, e.session, e.at, e.account, cu, e.tokens, e.model, 1);
+          addSession(s, e.session, e.at, e.account, cu, e.tokens, e.model, 1, e.parent ?? null);
       }
       if (e.outcome === "ok")
         closeCensor(s, e.at);
@@ -17079,13 +17188,13 @@ function fold(s, e, cfg, seen) {
       if (cu > 0) {
         insertServed(account, mid, cu);
         if (e.session !== null)
-          addSession(s, e.session, mid, e.account, cu, e.tokens, e.model, e.n);
+          addSession(s, e.session, mid, e.account, cu, e.tokens, e.model, e.n, e.parent ?? null);
       }
       const bucket = addDemand(s, e.hour, cu, e.n);
       bucket.censoredMinutes = Math.min(60, Math.max(bucket.censoredMinutes, e.censoredMinutes));
-      if (e.first !== null)
+      if (e.first !== null && e.n > 1)
         applySnapshot(account, e.hour, e.first, cfg);
-      if (e.last !== null && e.n > 1)
+      if (e.last !== null)
         applySnapshot(account, e.hour + HOUR_MS4 - 1, e.last, cfg);
       touch(s, e.hour + HOUR_MS4 - 1);
       return;
@@ -17163,7 +17272,7 @@ function sealCensor(s, from, to) {
     bucket.censoredMinutes = Math.min(60, Math.max(bucket.censoredMinutes, overlap / MINUTE_MS4));
   }
 }
-function addSession(s, session, at, account, cu, tokens, model, n) {
+function addSession(s, session, at, account, cu, tokens, model, n, parent) {
   let track = s.sessions[session];
   if (!track) {
     track = {
@@ -17188,6 +17297,8 @@ function addSession(s, session, at, account, cu, tokens, model, n) {
   track.tokens.cacheWrite += tokens.cacheWrite;
   track.tokens.output += tokens.output;
   track.models[model] = (track.models[model] ?? 0) + n;
+  if (parent !== null && (track.parent ?? null) === null)
+    track.parent = parent;
 }
 function applySnapshot(account, at, readings, cfg) {
   const current = account.lastCompleteAt === null || at >= account.lastCompleteAt;
@@ -19159,18 +19270,88 @@ function pauseGrid(horizonMs) {
     out.push(hours * HOUR_MS11);
   return out.filter((p) => p <= Math.max(horizonMs, HOUR_MS11));
 }
-function* remedyScan(ctx, rateLong, cfg) {
-  const zero = ctx.factors.map(() => 0);
-  const externalStarts = gapsOn(ctx, zero, cfg).filter((g) => g.kind === "7d" && g.lengthMs >= REMEDY_MIN_GAP_MS).map((g) => g.start);
-  yield;
+function* cutScan(ctx, rate, cfg) {
   let cut = null;
   for (const phi of CUT_GRID) {
-    const gs = gapsOn(ctx, ctx.factors.map((f) => phi * rateLong * f), cfg);
+    const gs = gapsOn(ctx, ctx.factors.map((f) => phi * rate * f), cfg);
     yield;
     if (hasGap(gs))
       break;
     cut = phi;
   }
+  return cut;
+}
+function refillThroughput(ctx) {
+  let total = 0;
+  for (const v of ctx.views.filter(isRead)) {
+    const g = v.windows.find((w) => w.key === v.governing);
+    if (!g || g.lengthMinutes === null || g.lengthMinutes <= 0)
+      continue;
+    const beta = ctx.unit === "cu" ? v.beta[g.key]?.value : undefined;
+    const capacity = beta !== undefined && beta > 0 ? 1 / beta : 1;
+    total += capacity / (g.lengthMinutes / 60);
+  }
+  return total;
+}
+function* paceScan(ctx, ev, rates, cfg) {
+  const rhoL = Number.isFinite(rates.long) && rates.long > 0 ? rates.long : 0;
+  if (rhoL > 0 && hasGap(ev.long)) {
+    const cut = yield* cutScan(ctx, rhoL, cfg);
+    return { rate: cut === null ? 0 : cut * rhoL, basis: "cut-scan" };
+  }
+  const anchor = Math.max(rhoL, refillThroughput(ctx));
+  if (!(anchor > 0) || !Number.isFinite(anchor))
+    return null;
+  const clean = (rho) => !hasGap(gapsOn(ctx, ctx.factors.map((f) => rho * f), cfg));
+  if (anchor > rhoL) {
+    const ok = clean(anchor);
+    yield;
+    if (!ok)
+      return { rate: yield* bisect(rhoL, anchor, clean), basis: "bisect" };
+  }
+  const up = yield* bracketUp(anchor, clean);
+  if (up.hi === null)
+    return { rate: up.lo, basis: "capped" };
+  return { rate: yield* bisect(up.lo, up.hi, clean), basis: "bracket" };
+}
+function* bracketUp(anchor, clean) {
+  let lo = anchor;
+  for (let mult = 2;mult <= PACE_MAX_MULT; mult *= 2) {
+    const ok = clean(mult * anchor);
+    yield;
+    if (!ok)
+      return { lo, hi: mult * anchor };
+    lo = mult * anchor;
+  }
+  return { lo, hi: null };
+}
+function* bisect(lo, hi, clean) {
+  let low = lo;
+  let high = hi;
+  for (let i = 0;i < PACE_BISECT_STEPS; i++) {
+    const mid = (low + high) / 2;
+    const ok = clean(mid);
+    yield;
+    if (ok)
+      low = mid;
+    else
+      high = mid;
+  }
+  return low;
+}
+function paceInCuPerHour(pace, burnLong) {
+  if (pace.phi !== null && Number.isFinite(burnLong) && burnLong > 0) {
+    return Math.max(0, pace.phi * burnLong);
+  }
+  if (pace.unit === "cu")
+    return Math.max(0, pace.rate);
+  return null;
+}
+function* remedyScan(ctx, rateLong, cfg) {
+  const zero = ctx.factors.map(() => 0);
+  const externalStarts = gapsOn(ctx, zero, cfg).filter((g) => g.kind === "7d" && g.lengthMs >= REMEDY_MIN_GAP_MS).map((g) => g.start);
+  yield;
+  const cut = yield* cutScan(ctx, rateLong, cfg);
   let pauseMs = null;
   const h0 = hourStart(ctx.now);
   for (const p of pauseGrid(ctx.horizonMs)) {
@@ -19211,6 +19392,25 @@ function remedyText(r, gapStart, formatTime) {
 function rateBin(n) {
   return Number.isFinite(n) && n > 0 ? String(Math.round(8 * Math.log2(n))) : "0";
 }
+function* paceFor(ctx, ev, rates, inputsKey, cfg, opts) {
+  if (!opts.pace || opts.payload === false)
+    return null;
+  const key = fnvHex([inputsKey, "pace"].join("|"));
+  if (opts.paceReuse?.key === key)
+    return opts.paceReuse;
+  const found = yield* paceScan(ctx, ev, rates, cfg);
+  if (found === null)
+    return null;
+  const simLong = rates.long;
+  return {
+    key,
+    rate: found.rate,
+    simLong,
+    phi: Number.isFinite(simLong) && simLong > 0 ? found.rate / simLong : null,
+    unit: ctx.unit,
+    basis: found.basis
+  };
+}
 function* alertsSliced(s, now, prior, cal, cfg, fc, opts = {}) {
   const base = prior ?? initialAlertMemory();
   if (evidenceOf(s, now) === "none") {
@@ -19219,7 +19419,8 @@ function* alertsSliced(s, now, prior, cal, cfg, fc, opts = {}) {
       active: [],
       transitions: [],
       blockedNow: false,
-      status: "insufficient-evidence"
+      status: "insufficient-evidence",
+      pace: null
     };
   }
   const ctx = gapContext(s, now, cal, cfg);
@@ -19256,7 +19457,8 @@ function* alertsSliced(s, now, prior, cal, cfg, fc, opts = {}) {
   const active = [];
   const raised = ["critical", "warn"].filter((l) => memory[l].raised);
   if (raised.length === 0 || opts.payload === false) {
-    return { memory, active, transitions, blockedNow, status: "ok" };
+    const pace = yield* paceFor(ctx, ev, rates, inputsKey, cfg, opts);
+    return { memory, active, transitions, blockedNow, status: "ok", pace };
   }
   const seed = seedOf(s, now, cfg);
   const key = fnvHex([inputsKey, seed, raised.join(","), alertPaths(cfg)].join("|"));
@@ -19298,9 +19500,10 @@ function* alertsSliced(s, now, prior, cal, cfg, fc, opts = {}) {
       remedy: r
     });
   }
-  return { memory, active, transitions, blockedNow, status: "ok", payload };
+  const pace = active.length === 0 ? yield* paceFor(ctx, ev, rates, inputsKey, cfg, opts) : null;
+  return { memory, active, transitions, blockedNow, status: "ok", payload, pace };
 }
-var HOUR_MS11 = 3600000, REMEDY_MIN_GAP_MS, CUT_GRID, MIN_PATH_SHARE = 0.1, EPISODE_BUCKET_MS;
+var HOUR_MS11 = 3600000, REMEDY_MIN_GAP_MS, CUT_GRID, EPISODE_BUCKET_MS;
 var init_alerts = __esm(() => {
   init_capacity();
   init_constants();
@@ -19551,6 +19754,7 @@ function contributions(s, q, cfg) {
     const share = calibrated ? observed > 0 ? r.fraction / observed : 0 : totalCu > 0 ? r.cu / totalCu : 0;
     return {
       session: r.session,
+      parent: track?.parent ?? null,
       account: r.accounts.size === 1 && single ? single.account : account,
       window: r.window,
       usedFraction: calibrated && single ? r.fraction : null,
@@ -19569,6 +19773,7 @@ function contributions(s, q, cfg) {
   const lasts = spent.map((x) => x.lastAt).filter((t) => t !== null);
   out.push({
     session: "unattributed",
+    parent: null,
     account,
     window: window2,
     usedFraction: calibrated && single ? unattributed : null,
@@ -19644,7 +19849,7 @@ function deliverableIn(view, unit) {
   const beta = view.governing === null ? undefined : view.beta[view.governing];
   return isStrong(beta) && beta.value > 0 ? d / beta.value : d;
 }
-function historyOf(s, views, now, unit) {
+function historyFrom(views, now) {
   let from = now - WEEK_MS4;
   for (const v of views) {
     const g = v.windows.find((w) => w.key === v.governing);
@@ -19652,23 +19857,38 @@ function historyOf(s, views, now, unit) {
       continue;
     from = Math.min(from, g.resetAt - g.lengthMinutes * MINUTE_MS10);
   }
+  return from;
+}
+function historyAt(s, views, t, unit, byAccount) {
+  let remaining = 0;
+  let any = false;
+  let inferred = false;
+  for (const v of views) {
+    const at = viewAt(s, v, t);
+    if (!at)
+      continue;
+    any = true;
+    inferred ||= at.inferred;
+    const own = deliverableIn(at.view, unit);
+    remaining += own;
+    byAccount[v.account]?.push({ at: t, remaining: own, provenance: provenanceOf(at.inferred) });
+  }
+  return any ? { at: t, remaining, provenance: provenanceOf(inferred) } : null;
+}
+function historyOf(s, views, now, unit) {
+  const from = historyFrom(views, now);
   const out = [];
+  const byAccount = {};
+  for (const v of views)
+    byAccount[v.account] = [];
   for (let t = now;t >= from; t -= HOUR_MS14) {
-    let remaining = 0;
-    let any = false;
-    let inferred = false;
-    for (const v of views) {
-      const at = viewAt(s, v, t);
-      if (!at)
-        continue;
-      any = true;
-      inferred ||= at.inferred;
-      remaining += deliverableIn(at.view, unit);
-    }
-    if (any)
-      out.push({ at: t, remaining, provenance: inferred ? "reset-inferred" : "observed" });
+    const point = historyAt(s, views, t, unit, byAccount);
+    if (point)
+      out.push(point);
   }
-  return out.reverse();
+  for (const list of Object.values(byAccount))
+    list.reverse();
+  return { history: out.reverse(), byAccount };
 }
 function resetsOf(views, now, end) {
   const out = [];
@@ -19717,13 +19937,81 @@ function blockedRuns(results, forecast) {
   }
   return out;
 }
+function firstTakeovers(r, from, now, end) {
+  const taken = new Map;
+  let prev = from;
+  for (const d of r.decisions) {
+    if (d.account === null || d.cu <= 0 || d.account === prev)
+      continue;
+    const switched = prev !== null;
+    prev = d.account;
+    if (!switched)
+      continue;
+    const t = Math.max(now, r.start + d.k * HOUR_MS14);
+    if (t > end)
+      break;
+    if (!taken.has(d.account))
+      taken.set(d.account, t);
+  }
+  return taken;
+}
+function switchesOf2(results, views, poolActive, now, end) {
+  const order = new Map(views.map((v, i) => [v.account, i]));
+  const from = poolActive !== null && order.has(poolActive) ? poolActive : null;
+  const times = new Map;
+  for (const r of results) {
+    for (const [account, t] of firstTakeovers(r, from, now, end)) {
+      const list = times.get(account) ?? [];
+      list.push(t);
+      times.set(account, list);
+    }
+  }
+  const paths = Math.max(1, results.length);
+  const out = [];
+  for (const [account, list] of times) {
+    const probability = list.length / paths;
+    if (probability < MIN_PATH_SHARE)
+      continue;
+    out.push({ account, q: quantilesOf2(list), probability: Math.min(1, probability) });
+  }
+  return out.sort((a, b) => a.q.p50 - b.q.p50 || (order.get(a.account) ?? 0) - (order.get(b.account) ?? 0));
+}
+function lostAtResetOf(results, views) {
+  const out = {};
+  const paths = Math.max(1, results.length);
+  for (const v of views) {
+    const g = v.windows.find((w) => w.key === v.governing);
+    if (!g || g.remaining === null || g.resetAt === null || g.semantics === "sliding")
+      continue;
+    const values = [];
+    for (const r of results) {
+      const left = r.leftoverAtReset[v.account];
+      if (left !== null && left !== undefined && Number.isFinite(left)) {
+        values.push(Math.min(1, Math.max(0, left)));
+      }
+    }
+    if (values.length === 0 || values.length < MIN_PATH_SHARE * paths)
+      continue;
+    out[v.account] = { at: g.resetAt, q: quantilesOf2(values) };
+  }
+  return out;
+}
 function trajectory(s, now, horizonMs, cal, cfg) {
   const all = accountViews(s, now, cfg).filter(isRead);
   const unit = strongBetas(all) ? "cu" : "account-fraction";
-  const history = historyOf(s, all, now, unit);
+  const { history, byAccount: historyByAccount } = historyOf(s, all, now, unit);
   const end = now + Math.max(0, horizonMs);
   const resets = resetsOf(all, now, end);
-  const empty = { unit, history, forecast: [], resets, blocked: [] };
+  const empty = {
+    unit,
+    history,
+    forecast: [],
+    resets,
+    blocked: [],
+    switches: [],
+    lostAtReset: {},
+    historyByAccount
+  };
   if (evidenceOf(s, now) === "none" || all.length === 0)
     return empty;
   const views = unit === "cu" ? all : all.map(inFractions);
@@ -19761,7 +20049,16 @@ function trajectory(s, now, horizonMs, cal, cfg) {
     }
     forecast.push({ at, q: quantilesOf2(values), pBlocked: blocked / paths });
   }
-  return { unit, history, forecast, resets, blocked: blockedRuns(results, forecast) };
+  return {
+    unit,
+    history,
+    forecast,
+    resets,
+    blocked: blockedRuns(results, forecast),
+    switches: switchesOf2(results, views, s.poolActive ?? null, now, end),
+    lostAtReset: lostAtResetOf(results, views),
+    historyByAccount
+  };
 }
 function sparkline(t, cells) {
   const n = Math.max(0, Math.floor(cells));
@@ -19824,7 +20121,7 @@ function sparkline(t, cells) {
     return LEVELS[Math.max(0, level)] ?? " ";
   }).join("");
 }
-var MINUTE_MS10 = 60000, HOUR_MS14 = 3600000, WEEK_MS4, BLOCKED_SHARE = 0.5, WIDE_BAND = 0.15, LEVELS;
+var MINUTE_MS10 = 60000, HOUR_MS14 = 3600000, WEEK_MS4, BLOCKED_SHARE = 0.5, WIDE_BAND = 0.15, LEVELS, provenanceOf = (inferred) => inferred ? "reset-inferred" : "observed";
 var init_trajectory = __esm(() => {
   init_alerts();
   init_calibrate();
@@ -19970,6 +20267,9 @@ function buildResponseRow(input) {
     finalInTok: count(input.finalInput),
     windows: readingsOf(input.provider, input.usage)
   };
+  const parent = input.parent;
+  if (parent && SESSION_PATTERN.test(parent) && parent !== row.session)
+    row.parent = parent;
   return responseRowSchema.safeParse(row).success ? row : null;
 }
 function buildNoEligibleRow(provider, at) {
@@ -20023,7 +20323,8 @@ function toEvent(row) {
         tokens: tokensOf(row),
         finalInput: row.finalInTok,
         windows: row.windows,
-        outcome: row.outcome
+        outcome: row.outcome,
+        parent: row.parent ?? null
       };
     case "no-eligible":
       return row.until === undefined ? { kind: "no-eligible", at: row.at } : {
@@ -20044,7 +20345,8 @@ function toEvent(row) {
         tokens: { ...row.tokens },
         first: row.first,
         last: row.last,
-        censoredMinutes: row.censoredMinutes
+        censoredMinutes: row.censoredMinutes,
+        parent: row.parent ?? null
       };
   }
 }
@@ -20127,7 +20429,8 @@ var init_ledger_row = __esm(() => {
     cacheWriteTok: tokenCount,
     outTok: tokenCount,
     finalInTok: tokenCount,
-    windows: array(windowReadingSchema).max(16).nullable()
+    windows: array(windowReadingSchema).max(16).nullable(),
+    parent: string2().regex(SESSION_PATTERN).nullable().optional()
   });
   noEligibleRowSchema = object({
     v: literal(LEDGER_ROW_VERSION),
@@ -20156,7 +20459,8 @@ var init_ledger_row = __esm(() => {
     tokens: tokenCountsSchema,
     first: array(windowReadingSchema).max(16).nullable(),
     last: array(windowReadingSchema).max(16).nullable(),
-    censoredMinutes: number2().finite().min(0).max(60)
+    censoredMinutes: number2().finite().min(0).max(60),
+    parent: string2().regex(SESSION_PATTERN).nullable().optional()
   });
   ledgerRowSchema = discriminatedUnion("kind", [
     responseRowSchema,
@@ -20674,6 +20978,7 @@ function* rollupDaySteps(day, rows, openAtStart) {
       }
     }
     const hh = String(new Date(hour).getUTCHours()).padStart(2, "0");
+    const parent = group.find((r) => r.parent)?.parent ?? null;
     const rollup = {
       v: LEDGER_ROW_VERSION,
       kind: "rollup",
@@ -20692,7 +20997,8 @@ function* rollupDaySteps(day, rows, openAtStart) {
       },
       first: first.size > 0 ? [...first.values()] : null,
       last: last.size > 0 ? [...last.values()] : null,
-      censoredMinutes: censored.get(head.provider)?.get(hour) ?? 0
+      censoredMinutes: censored.get(head.provider)?.get(hour) ?? 0,
+      ...parent ? { parent } : {}
     };
     lines.push(JSON.stringify(rollup));
   }
@@ -21796,6 +22102,12 @@ function readAlertsFile(env) {
     return emptyAlertsFile();
   }
 }
+function delegatingSession(env) {
+  const value = env[ENV.CLAUDISH_PARENT_SESSION];
+  if (!value || !isPaneChild(env))
+    return null;
+  return SESSION_PATTERN.test(value) ? value : null;
+}
 
 class AllowanceService {
   env;
@@ -21808,9 +22120,12 @@ class AllowanceService {
   nextFlight = 0;
   threads = new Map;
   models = new Map;
+  reportStateStore = null;
+  parentSession;
   constructor(env = process.env, clock = Date.now) {
     this.env = env;
     this.clock = clock;
+    this.parentSession = delegatingSession(env);
   }
   record(attempt) {
     try {
@@ -21828,7 +22143,8 @@ class AllowanceService {
         outcome: attempt.outcome,
         tokens: attempt.tokens,
         finalInput: attempt.finalInput,
-        usage: attempt.usage
+        usage: attempt.usage,
+        parent: this.parentSession
       });
       if (!row) {
         this.warnOnce("a usage row failed its guards and was not written");
@@ -22008,9 +22324,21 @@ class AllowanceService {
       cal: m.cal,
       fc: m.fc,
       alerts: m.lastAlerts,
-      labels
+      labels,
+      poolActive: this.activeNow(provider, s)
     });
   }
+  activeNow(provider, s) {
+    try {
+      this.reportStateStore ??= new StateStore({ path: statePath(this.env) });
+      const read = this.reportStateStore.read();
+      if (read.kind === "failed")
+        return s.poolActive ?? null;
+      return read.state.providers[provider]?.active ?? null;
+    } catch {
+      return s.poolActive ?? null;
+    }
+  }
   modelFor(provider) {
     let m = this.models.get(provider);
     if (!m) {
@@ -22041,7 +22369,8 @@ class AllowanceService {
         sinks: new Set,
         label: undefined,
         payload: null,
-        lastAlerts: { active: [], blockedNow: false, status: "insufficient-evidence" }
+        pace: null,
+        lastAlerts: { active: [], blockedNow: false, status: "insufficient-evidence", pace: null }
       };
       this.models.set(provider, m);
     }
@@ -22234,14 +22563,21 @@ class AllowanceService {
     let won = [];
     let landed = null;
     for (let attempt = 0;attempt < ALERTS_CAS_ATTEMPTS && landed === null; attempt++) {
-      const result = await runSliced(alertsSliced(state, now, peek, m.cal, m.cfg, fc, { reuse: m.payload }));
+      const result = await runSliced(alertsSliced(state, now, peek, m.cal, m.cfg, fc, {
+        reuse: m.payload,
+        pace: !announce,
+        paceReuse: m.pace
+      }));
       if (result.payload)
         m.payload = result.payload;
+      if (result.pace)
+        m.pace = result.pace;
       if (!announce) {
         m.lastAlerts = {
           active: result.active,
           blockedNow: result.blockedNow,
-          status: result.status
+          status: result.status,
+          pace: result.pace
         };
         return [];
       }
@@ -22292,7 +22628,12 @@ class AllowanceService {
       log(`[allowance] ${provider}: the alert memory kept moving; step skipped`);
       return [];
     }
-    m.lastAlerts = { active: landed.active, blockedNow: landed.blockedNow, status: landed.status };
+    m.lastAlerts = {
+      active: landed.active,
+      blockedNow: landed.blockedNow,
+      status: landed.status,
+      pace: null
+    };
     const active = landed.active;
     const status = landed.status;
     const accounts = accountViews(m.state, now, m.cfg).length;
@@ -22428,19 +22769,27 @@ function poolRemaining(views) {
   }
   return { remainingNow: now.value, capacity, unit: now.unit };
 }
+function sustainableOf(top, pace, burnLong) {
+  const long = Number.isFinite(burnLong) ? Math.max(0, burnLong) : 0;
+  if (top)
+    return top.remedy.kind === "cut" ? top.remedy.cutToFraction * long : 0;
+  return pace ? paceInCuPerHour(pace, long) : null;
+}
 function buildReport(input) {
   const { s, now, cfg, cal, fc } = input;
   const horizonMs = Math.min(168 * HOUR_MS16, Math.max(HOUR_MS16, input.horizonMs));
   const evidence = evidenceOf(s, now);
   const none = evidence === "none";
   const views = accountViews(s, now, cfg);
-  const traj = trajectory(s, now, horizonMs, cal, cfg);
+  const poolActive = input.poolActive !== undefined ? input.poolActive : s.poolActive ?? null;
+  const traj = trajectory({ ...s, poolActive }, now, horizonMs, cal, cfg);
   const unit = fc?.unit ?? traj.unit;
   const burn = none ? { long: 0, short: 0 } : burnRates(s, now, cal, cfg);
   const ledgerHours = ledgerDays(s, now) * 24;
   const label = (id) => input.labels.get(id) ?? id;
   const pool = poolRemaining(views);
   const top = input.alerts.active[0];
+  const status = none ? "insufficient-evidence" : input.alerts.status;
   const fmt = (at) => formatLocalTime(at);
   const report = {
     schema: ALLOWANCE_REPORT_SCHEMA,
@@ -22456,6 +22805,7 @@ function buildReport(input) {
     accounts: views.map((v) => {
       const g = v.governing === null ? undefined : v.beta[v.governing];
       const k = v.binding === null || v.binding === v.governing ? undefined : v.kappa[v.binding];
+      const lost = traj.lostAtReset[v.account];
       return {
         label: label(v.account),
         id: v.account,
@@ -22471,7 +22821,15 @@ function buildReport(input) {
           semantics: w.semantics
         })),
         lambda: null,
-        calibration: { beta: g?.quality ?? "prior", kappa: k?.quality ?? null }
+        calibration: { beta: g?.quality ?? "prior", kappa: k?.quality ?? null },
+        active: poolActive !== null && v.account === poolActive,
+        order: v.order,
+        lostAtReset: lost ? {
+          at: iso2(lost.at),
+          p10: Math.min(1, Math.max(0, lost.q.p10)),
+          p50: Math.min(1, Math.max(0, lost.q.p50)),
+          p90: Math.min(1, Math.max(0, lost.q.p90))
+        } : null
       };
     }),
     combined: {
@@ -22481,7 +22839,7 @@ function buildReport(input) {
     burn: {
       long: ledgerHours < cfg.BURN_LONG_HL_H ? null : burn.long,
       short: ledgerHours < cfg.BURN_SHORT_HL_H ? null : burn.short,
-      sustainable: top ? top.burn.sustainable : null,
+      sustainable: status === "ok" ? sustainableOf(top, input.alerts.pace ?? null, burn.long) : null,
       unit: "cu/h"
     },
     alerts: none ? [] : input.alerts.active.map((a) => {
@@ -22517,7 +22875,7 @@ function buildReport(input) {
       };
     }),
     blockedNow: none ? false : input.alerts.blockedNow,
-    status: none ? "insufficient-evidence" : input.alerts.status,
+    status,
     trajectory: {
       history: traj.history.map((h) => ({
         at: iso2(h.at),
@@ -22543,6 +22901,17 @@ function buildReport(input) {
         kind: b.kind,
         probability: b.probability
       })),
+      historyByAccount: none ? [] : views.filter((v) => traj.historyByAccount[v.account] !== undefined).map((v) => ({
+        accountId: v.account,
+        history: (traj.historyByAccount[v.account] ?? []).filter((h) => h.at >= now - 24 * HOUR_MS16).map((h) => ({ at: iso2(h.at), remaining: h.remaining, provenance: h.provenance }))
+      })),
+      switches: traj.switches.map((sw) => ({
+        accountId: sw.account,
+        soonest: iso2(sw.q.p10),
+        usual: iso2(sw.q.p50),
+        latest: iso2(sw.q.p90),
+        probability: Math.min(1, Math.max(0, sw.probability))
+      })),
       spark48: sparkline({
         ...traj,
         history: traj.history.filter((h) => h.at >= now - 24 * HOUR_MS16),
@@ -22551,6 +22920,7 @@ function buildReport(input) {
     },
     sessions: none ? [] : contributions(s, { now, window: "binding" }, cfg).map((c) => ({
       session: c.session === "unattributed" ? "unattributed" : c.session.slice(0, 8),
+      parent: c.parent === null ? null : c.parent.slice(0, 8),
       account: c.account === "all" ? "all" : label(c.account),
       window: c.window,
       share: Math.min(1, Math.max(0, c.share)),
@@ -22620,7 +22990,9 @@ function getAllowanceService() {
 }
 var THREAD_MAP_MAX = 512, THREAD_IDLE_MS, HOUR_MS16 = 3600000, DAY_MS6, LOAD_HISTORY_MS, LOAD_RAW_MS, LOAD_DEFER_MS = 1000, REFRESH_MIN_MS = 60000, SERVED_RECENTLY_MS, ALERTS_LOCK_WAIT_MS = 200, ALERTS_LOCK_STALE_MS = 1e4, ALERTS_CAS_ATTEMPTS = 3, IN_FLIGHT_MAX_MS, PENDING_MAX = 4096, LOAD_RETRY_MIN_MS = 60000, LOAD_RETRY_MAX_MS, ANNOUNCED_MAX = 256, CALENDAR_FUTURE_MS, DECLINE = () => null, iso2 = (at) => new Date(at).toISOString(), instance, safeRankerWarned = false;
 var init_allowance_service = __esm(() => {
+  init_config();
   init_logger();
+  init_child_env();
   init_allowance_report_schema();
   init_alerts();
   init_capacity();
@@ -24516,7 +24888,7 @@ function vendorName(provider) {
 }
 function loginCommandFor(ref) {
   const vendor = ref.provider === "openai-codex" ? "codex" : "claude";
-  return `claudish account login ${vendor} ${ref.label}`;
+  return `claudish account login ${vendor} ${shellWord(ref.label)}`;
 }
 function rethrowSelectionFailure(err) {
   if (classifyConnectionError(err) || isAccountsError(err))
@@ -24927,6 +25299,7 @@ var LEASE_FAILURE_DEPRIORITIZE_MS = 60000, AccountChangedDuringLeaseError, pools
 var init_pool = __esm(() => {
   init_connection_error();
   init_logger();
+  init_account_label();
   init_allowance_service();
   init_exchange();
   init_paths();
@@ -43758,7 +44131,7 @@ function assertLegacyCodexLogoutPermitted(configPath = activeConfigFile()) {
     const rows = codexEntry(raw)?.accounts ?? [];
     if (rows.length > 0) {
       const legacy = rows.find((row) => row.store === "legacy-codex-file");
-      throw new Error(legacy ? `The legacy Codex login is account ${legacy.label}. Remove it with ` + `\`claudish account remove codex ${legacy.label} --delete-file\`.` : "Codex accounts are managed by `claudish account`; remove one with " + "`claudish account remove codex <label>`.");
+      throw new Error(legacy ? `The legacy Codex login is account ${legacy.label}. Remove it with ` + `\`claudish account remove codex ${shellWord(legacy.label)} --delete-file\`.` : "Codex accounts are managed by `claudish account`; remove one with " + "`claudish account remove codex <label>`.");
     }
     return { config: raw, result: undefined };
   });
@@ -43783,10 +44156,23 @@ async function saveLegacyCodexLogin(write, opts = {}) {
     }
   }
 }
-function display(identity) {
+function display(identity, label) {
   const raw = identity.email || identity.chatgptAccountId || "identity unavailable";
-  const shown = [...raw].filter((ch) => ch.charCodeAt(0) > 31 && ch !== "\x7F").join("");
-  return identity.plan ? `${shown}, ${identity.plan}` : shown;
+  const shown = [...raw].filter((ch) => {
+    const code = ch.charCodeAt(0);
+    return code > 31 && !(code >= 127 && code <= 159);
+  }).join("");
+  const text = identity.email && label.toLowerCase() === identity.email.toLowerCase() ? "" : shown;
+  if (!identity.plan)
+    return text;
+  return text ? `${text}, ${identity.plan}` : identity.plan;
+}
+function note(identity, label) {
+  const text = display(identity, label);
+  return text ? ` (${text})` : "";
+}
+function named(row) {
+  return row.legacy ? `${row.label} (legacy login)` : `${row.label} (id ${row.id})`;
 }
 function stableIdentity(identity) {
   const stable = identity.chatgptAccountId?.trim();
@@ -43796,8 +44182,16 @@ function stableIdentity(identity) {
   return stable;
 }
 function validLabel(label) {
-  if (!ACCOUNT_LABEL_PATTERN.test(label)) {
-    throw new Error("An account label starts with a letter, digit or underscore and has at most 32 letters, " + "digits, spaces, dots, underscores or hyphens.");
+  if (!ACCOUNT_LABEL_PATTERN.test(label))
+    throw new Error(ACCOUNT_LABEL_RULE);
+}
+function validSelector(selector) {
+  const control = [...selector].some((ch) => {
+    const code = ch.charCodeAt(0);
+    return code <= 31 || code >= 127 && code <= 159;
+  });
+  if (selector.length < 1 || selector.length > 254 || control) {
+    throw new Error("An account selector is a label or an email: 1 to 254 characters, no control characters.");
   }
 }
 function asRecord(row) {
@@ -43848,16 +44242,41 @@ class CodexAccountManagement {
       result: read(codexEntry(raw) ?? { generation: 0, accounts: [] })
     }));
   }
-  resolve(entry, target) {
+  rowsOf(entry) {
     const rows = entry.accounts.map(asRecord);
     const legacy = this.synthesizedLegacy(entry);
     if (legacy)
       rows.push(legacy);
+    return rows;
+  }
+  resolve(entry, target) {
+    const rows = this.rowsOf(entry);
     const matches = rows.filter((row) => (target.id === undefined || row.id === target.id) && (target.label === undefined || row.label === target.label));
     if (matches.length === 1)
       return matches[0];
     throw new Error(matches.length > 1 ? "Ambiguous Codex account; name it with --id <generated-id>." : "No such Codex account; run `claudish account list`.");
   }
+  select(entry, target) {
+    const rows = this.rowsOf(entry).filter((row) => target.id === undefined || row.id === target.id);
+    const { selector } = target;
+    if (selector === undefined) {
+      if (rows.length === 1)
+        return rows[0];
+      throw new Error("No such Codex account; run `claudish account list`.");
+    }
+    const exact = rows.filter((row) => row.label === selector);
+    if (exact.length === 1)
+      return exact[0];
+    if (exact.length > 1) {
+      throw new Error("Ambiguous Codex account; name it with --id <generated-id>.");
+    }
+    const byEmail = rows.filter((row) => emailMatches(row.identity.email, selector));
+    if (byEmail.length === 1)
+      return byEmail[0];
+    if (byEmail.length === 0)
+      throw new Error("No such Codex account; run `claudish account list`.");
+    throw new Error(`More than one Codex account has the email ${selector}: ${byEmail.map(named).join(", ")}. ` + "Name one by label, or pass --id <generated-id>." + (byEmail.some((row) => row.legacy) ? " The legacy login has no --id; name it by its label." : ""));
+  }
   newId(entry, reserved) {
     for (let attempt = 0;attempt < 16; attempt++) {
       const id = this.deps.newId?.() ?? randomBytes8(6).toString("hex");
@@ -43869,21 +44288,39 @@ class CodexAccountManagement {
     throw new Error("Could not generate an unused account id.");
   }
   refuseDuplicate(entry, identity, label, except) {
+    const rows = this.rowsOf(entry);
+    for (const row of rows) {
+      if (row.id !== except && row.label === label) {
+        throw new Error(`A Codex account labelled ${label} already exists.`);
+      }
+    }
+    this.refuseIdentity(rows, identity, except);
+  }
+  refuseIdentity(rows, identity, except) {
     const stable = stableIdentity(identity);
-    const rows = entry.accounts.map(asRecord);
-    const legacy = this.synthesizedLegacy(entry);
-    if (legacy)
-      rows.push(legacy);
     for (const row of rows) {
       if (row.id === except)
         continue;
-      if (row.label === label)
-        throw new Error(`A Codex account labelled ${label} already exists.`);
       if (row.identity.chatgptAccountId === stable) {
         throw new Error(`This Codex identity is already registered as ${row.label}.`);
       }
     }
   }
+  chooseLabel(rows, identity, explicit) {
+    const taken = rows.map((row) => row.label);
+    if (explicit !== undefined) {
+      if (labelTaken(taken, explicit)) {
+        throw new Error(`A Codex account labelled ${explicit} already exists.`);
+      }
+      return explicit;
+    }
+    return deriveAccountLabel({
+      email: identity.email,
+      plan: identity.plan,
+      chatgptAccountId: identity.chatgptAccountId,
+      taken
+    });
+  }
   store(kind) {
     return this.deps.store?.(kind) ?? storeFor(kind, this.env);
   }
@@ -43936,30 +44373,35 @@ class CodexAccountManagement {
     };
   }
   async run(command) {
-    if (command.label !== undefined)
-      validLabel(command.label);
-    if (command.verb === "add")
+    if (command.verb === "add") {
+      if (command.label !== undefined)
+        validLabel(command.label);
       return this.add(command.label);
+    }
+    if (command.verb === "rename")
+      validLabel(command.newLabel);
     if (command.id !== undefined && !ACCOUNT_ID_PATTERN.test(command.id)) {
       throw new Error("--id takes a generated account id, as `claudish account list --json` shows.");
     }
-    if (command.label === undefined && command.id === undefined) {
-      throw new Error("Name the Codex account by label, or with --id <generated-id>.");
+    if (command.selector === undefined && command.id === undefined) {
+      throw new Error("Name the Codex account by label or email, or with --id <generated-id>.");
     }
-    const target = this.inspect((entry) => this.resolve(entry, command));
+    if (command.selector !== undefined)
+      validSelector(command.selector);
+    const target = this.inspect((entry) => this.select(entry, command));
     if (command.verb === "login")
       return this.login(target);
+    if (command.verb === "rename")
+      return this.rename(target, command.newLabel);
     if (command.verb === "remove")
       return this.remove(target, command);
     return this.setEnabled(target, command.verb === "enable");
   }
   async add(requestedLabel) {
-    const label = requestedLabel ?? await (this.deps.label ?? (() => dist_default3({ message: "Codex account label:" })))();
-    validLabel(label);
     const initial = this.inspect((entry) => {
       const legacy = this.synthesizedLegacy(entry);
-      if (entry.accounts.some((row) => row.label === label) || legacy?.label === label) {
-        throw new Error(`A Codex account labelled ${label} already exists.`);
+      if (requestedLabel !== undefined && labelTaken(this.rowsOf(entry).map((r) => r.label), requestedLabel)) {
+        throw new Error(`A Codex account labelled ${requestedLabel} already exists.`);
       }
       if (legacy && !legacy.identity.chatgptAccountId) {
         throw new Error("The legacy Codex login records no account id, so enrolling it cannot be checked for duplicates. Run `claudish login codex` once to refresh it, then retry.");
@@ -43971,26 +44413,29 @@ class CodexAccountManagement {
     }
     const acceptedAt = new Date(this.now()).toISOString();
     if (initial.legacy) {
-      this.print(`This add also enrolls your working legacy login as ${initial.legacy.label} (${display(initial.legacy.identity)}), store legacy-codex-file. Its credential file stays where it is and is not copied.`);
+      this.print(`This add also enrolls your working legacy login as ${initial.legacy.label}${note(initial.legacy.identity, initial.legacy.label)}, store legacy-codex-file. Its credential file stays where it is and is not copied.`);
     }
     const store = this.deps.newStore?.() ?? defaultAccountStore(this.env);
-    this.print(`New Codex account ${label}; store: ${store.kind}.` + (store.kind === "file" ? " Warning: its tokens are kept in plaintext files readable only by you (0600)." : ""));
+    this.print(`New Codex account${requestedLabel === undefined ? "" : ` ${requestedLabel}`}; store: ${store.kind}.` + (store.kind === "file" ? " Warning: its tokens are kept in plaintext files readable only by you (0600)." : ""));
     const result = await (this.deps.pkce ?? loginCodexPkce)();
     stableIdentity(result.identity);
     const row = {
       id: initial.id,
-      label,
+      label: "",
       identity: result.identity,
       store: store.kind,
       enabled: true,
       addedAt: new Date(this.now()).toISOString()
     };
     const record = asRecord(row);
+    let finalLabel = "";
     await this.gate(record, async (holds) => {
       this.inspect((entry) => {
         if (entry.accounts.some((a) => a.id === row.id))
           throw new Error("The generated account id is taken; retry the add.");
-        this.refuseDuplicate(entry, result.identity, label);
+        const rows = this.rowsOf(entry);
+        this.refuseIdentity(rows, result.identity);
+        this.chooseLabel(rows, result.identity, requestedLabel);
       });
       if (await store.read(record, { uncached: true })) {
         throw new Error("A token item already exists for the generated account id; retry the add.");
@@ -44003,8 +44448,10 @@ class CodexAccountManagement {
           this.fence(holds);
           if (entry.accounts.some((a) => a.id === row.id))
             throw new Error("The generated account id is taken; retry the add.");
-          this.refuseDuplicate(entry, result.identity, label);
-          const legacy = this.synthesizedLegacy(entry);
+          const rows = this.rowsOf(entry);
+          this.refuseIdentity(rows, result.identity);
+          const label = this.chooseLabel(rows, result.identity, requestedLabel);
+          const legacy = rows.find((r) => r.legacy);
           if (legacy) {
             if (legacy.identity.chatgptAccountId !== initial.legacy?.identity.chatgptAccountId) {
               throw new Error("The legacy Codex login changed during the add; retry to confirm its enrollment.");
@@ -44018,15 +44465,18 @@ class CodexAccountManagement {
               addedAt: legacy.addedAt
             });
           }
-          entry.accounts.push(row);
+          entry.accounts.push({ ...row, label });
           entry.noticeAcceptedAt ??= acceptedAt;
+          finalLabel = label;
         });
       } catch (error) {
         await this.cleanupUnpublished(store, record, error);
       }
     });
     await this.invalidate();
-    return [`Added Codex account ${label} (${display(result.identity)}); store: ${store.kind}.`];
+    return [
+      `Added Codex account ${finalLabel}${note(result.identity, finalLabel)}; store: ${store.kind}.`
+    ];
   }
   async cleanupUnpublished(store, record, error) {
     let published;
@@ -44052,9 +44502,9 @@ class CodexAccountManagement {
       else
         await (await Promise.resolve().then(() => (init_codex_oauth(), exports_codex_oauth))).CodexOAuth.getInstance().login();
       await this.invalidate();
-      return [`Codex account ${target.label}: login saved.`];
+      return [`Codex account ${named(target)}: login saved.`];
     }
-    this.print(`Logging in Codex account ${target.label}; store: ${target.store}.`);
+    this.print(`Logging in Codex account ${named(target)}; store: ${target.store}.`);
     const result = await (this.deps.pkce ?? loginCodexPkce)();
     const stable = stableIdentity(result.identity);
     if (target.identity.chatgptAccountId && stable !== target.identity.chatgptAccountId) {
@@ -44081,12 +44531,12 @@ class CodexAccountManagement {
     });
     await this.invalidate();
     return [
-      `Codex account ${target.label} (${display(result.identity)}): login saved; store: ${target.store}. A recorded needs-login mark clears on the account's next use.`
+      `Codex account ${named(target)}${note(result.identity, target.label)}: login saved; store: ${target.store}. A recorded needs-login mark clears on the account's next use.`
     ];
   }
   async setEnabled(target, enabled) {
     if (target.legacy) {
-      this.print(`This enrolls your legacy login ${target.label} (${display(target.identity)}) as a configured account, store legacy-codex-file; its credential file stays where it is.`);
+      this.print(`This enrolls your legacy login ${named(target)}${note(target.identity, target.label)} as a configured account, store legacy-codex-file; its credential file stays where it is.`);
     }
     let changed = false;
     let poolDisabled = false;
@@ -44115,7 +44565,7 @@ class CodexAccountManagement {
     if (changed)
       await this.invalidate();
     const lines = [
-      `Codex account ${target.label} ${changed ? "" : "is already "}${enabled ? "enabled" : "disabled"}.`
+      `Codex account ${named(target)} ${changed ? "" : "is already "}${enabled ? "enabled" : "disabled"}.`
     ];
     if (!enabled) {
       lines.push("Configured Codex accounts still reserve the subscription: with no enabled account, Codex requests fail visibly instead of using OPENAI_CODEX_API_KEY.");
@@ -44125,6 +44575,52 @@ class CodexAccountManagement {
     }
     return lines;
   }
+  async rename(target, newLabel) {
+    if (target.legacy) {
+      if (target.label === newLabel) {
+        return [`Codex account ${named(target)} is already labelled ${newLabel}.`];
+      }
+      if (!target.identity.chatgptAccountId) {
+        throw new Error("The legacy Codex login records no account id, so enrolling it cannot be checked for duplicates. Run `claudish login codex` once to refresh it, then retry.");
+      }
+    }
+    let changed = false;
+    await this.gate(target, async (holds) => {
+      changed = mutateAccountsConfig(this.configPath(), PROVIDER, (entry) => {
+        this.fence(holds);
+        const current = this.resolve(entry, target.legacy ? { label: target.label } : { id: target.id });
+        sameTarget(current, target);
+        if (current.label === newLabel)
+          return;
+        const others = this.rowsOf(entry).filter((row) => row.id !== current.id).map((row) => row.label);
+        if (labelTaken(others, newLabel)) {
+          throw new Error(`A Codex account labelled ${newLabel} already exists.`);
+        }
+        if (current.legacy) {
+          entry.accounts.push({
+            id: this.newId(entry),
+            label: newLabel,
+            identity: current.identity,
+            store: "legacy-codex-file",
+            enabled: true,
+            addedAt: current.addedAt
+          });
+          return;
+        }
+        const row = entry.accounts.find((a) => a.id === target.id);
+        if (row)
+          row.label = newLabel;
+      });
+    });
+    if (changed)
+      await this.invalidate();
+    if (changed && target.legacy) {
+      this.print(`This enrolled your legacy login ${named(target)}${note(target.identity, target.label)} as a configured account, store legacy-codex-file; its credential file stays where it is.`);
+    }
+    return [
+      changed ? `Renamed Codex account ${named(target)} to ${newLabel}.` : `Codex account ${named(target)} is already labelled ${newLabel}.`
+    ];
+  }
   async remove(target, command) {
     const legacyFile = target.store === "legacy-codex-file";
     if (legacyFile && !command.deleteFile) {
@@ -44133,7 +44629,7 @@ class CodexAccountManagement {
     if (!legacyFile && command.deleteFile) {
       throw new Error(`--delete-file applies only to the legacy Codex login, not ${target.label}.`);
     }
-    if (!command.yes && !await this.ask(`Remove Codex account ${target.label} (${display(target.identity)})${legacyFile ? " and delete its legacy credential file" : ""}? Requests already in flight cannot be recalled.`)) {
+    if (!command.yes && !await this.ask(`Remove Codex account ${named(target)}${note(target.identity, target.label)}${legacyFile ? " and delete its legacy credential file" : ""}? Requests already in flight cannot be recalled.`)) {
       return ["Cancelled; no account was removed."];
     }
     const warnings = [];
@@ -44175,7 +44671,7 @@ class CodexAccountManagement {
       key: "OPENAI_CODEX_API_KEY if one is configured, otherwise none"
     }[next];
     return [
-      `Removed Codex account ${target.label} (${display(target.identity)}). Next Codex credential for new requests: ${nextText}.`,
+      `Removed Codex account ${named(target)}${note(target.identity, target.label)}. Next Codex credential for new requests: ${nextText}.`,
       ...next === "key" ? ["Warning: new Codex requests may now use OPENAI_CODEX_API_KEY, billed per token."] : [],
       ...warnings
     ];
@@ -44189,6 +44685,7 @@ var init_management = __esm(() => {
   init_dist12();
   init_profile_config();
   init_codex_pkce();
+  init_account_label();
   init_config_lock();
   init_file_lock();
   init_paths();
@@ -89664,10 +90161,12 @@ ${h("SUBCOMMANDS")}
   ${bold("Subscription accounts:")}
     ${green("claudish account list")}                 Configured subscription accounts, per claudish provider
     ${green("claudish account status")} ${yellow("[--json]")}       Usage per window, thresholds and blockers
-    ${green("claudish account add codex")} ${yellow("[--label <label>]")}     Log in a Codex account you own and add it
+    ${green("claudish account add codex")} ${yellow("[--label <label>]")}     Log in a Codex account you own and add it ${dim("(label defaults to the login's email)")}
     ${green("claudish account login codex")} ${yellow("<label>")}         Log the same Codex identity in again
     ${green("claudish account enable|disable codex")} ${yellow("<label>")} Include or skip it in selection
+    ${green("claudish account rename codex")} ${yellow("<label> <new-label>")}  Give an account a new label
     ${green("claudish account remove codex")} ${yellow("<label> [--yes] [--delete-file]")}
+    ${dim("A <label> may also be the account's email.")}
     ${dim("--id <generated-id> may replace or confirm a label. Removing the legacy login (default)")}
     ${dim("requires --delete-file. New accounts use the macOS Keychain, or protected plaintext files")}
     ${dim("where there is none. No token input or export; Claude account mutations are not available.")}
@@ -90715,6 +91214,7 @@ function buildPaneEnv(input) {
     env.CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC = "1";
   if (input.parentEnv.CLAUDE_CODE_NATIVE_CURSOR === undefined)
     env.CLAUDE_CODE_NATIVE_CURSOR = "1";
+  delete env[ENV.CLAUDISH_PARENT_SESSION];
   Object.assign(env, input.slotEnv);
   if (input.configFile !== null)
     env.CLAUDISH_CONFIG = input.configFile;
@@ -97791,7 +98291,8 @@ async function startModelsIn(flight, sessionPath, opts) {
             kind: "team",
             id: `${runId}:${e.id}`,
             role: kind === "judge" ? "judge" : "slot"
-          })
+          }),
+          ...opts.parentClaudeSessionId ? { [ENV.CLAUDISH_PARENT_SESSION]: opts.parentClaudeSessionId } : {}
         },
         shape: "one-shot",
         initialPrompt: inputContent,
@@ -98018,6 +98519,7 @@ async function judgeResponses(sessionPath, opts = {}) {
   await runModels(judgePath, {
     claudeFlags: opts.claudeFlags,
     kind: "judge",
+    ...opts.parentClaudeSessionId ? { parentClaudeSessionId: opts.parentClaudeSessionId } : {},
     ...opts.parentEnv ? { parentEnv: opts.parentEnv } : {},
     ...opts.paneTimings ? { paneTimings: opts.paneTimings } : {}
   });
@@ -98837,7 +99339,8 @@ class SessionManager {
         [ENV.CLAUDISH_TOKEN_FILE]: entry.tokenFile,
         [UPSTREAM_ERROR_LOG_ENV]: entry.upstreamErrorLogPath,
         ...entry.inboxPath ? { [HOOK_INBOX_ENV]: entry.inboxPath } : {},
-        [HOOK_SESSION_ENV]: JSON.stringify({ kind: "channel", id: info.sessionId, role: null })
+        [HOOK_SESSION_ENV]: JSON.stringify({ kind: "channel", id: info.sessionId, role: null }),
+        ...info.parentClaudeSessionId ? { [ENV.CLAUDISH_PARENT_SESSION]: info.parentClaudeSessionId } : {}
       },
       shape: info.shape,
       ...opts.prompt ? { initialPrompt: opts.prompt } : {},
@@ -100665,9 +101168,32 @@ async function allowanceStatus(horizonMs) {
     return { ...meta, allowance: null, reason: `the allowance report failed: ${message}` };
   }
 }
+function allowanceSectionsArg(value) {
+  if (value === undefined)
+    return;
+  const known = ALLOWANCE_REPORT_SECTIONS;
+  if (!Array.isArray(value) || value.length === 0)
+    throw new ContractErrorException("invalid_args", `'sections' must be a non-empty array of ${known.join(", ")}`);
+  for (const name of value) {
+    if (typeof name !== "string" || !known.includes(name))
+      throw new ContractErrorException("invalid_args", `'sections' has an unknown section ${JSON.stringify(name)}; known: ${known.join(", ")}`);
+  }
+  return [...new Set(value)].sort();
+}
+function allowanceSections(answer, sections) {
+  if (sections === undefined || answer.allowance === null)
+    return answer;
+  const dropped = new Set(ALLOWANCE_REPORT_SECTIONS.filter((section) => !sections.includes(section)));
+  const allowance = Object.fromEntries(Object.entries(answer.allowance).filter(([key]) => !dropped.has(key)));
+  const { contract_version, capabilities, ...rest } = answer;
+  return { contract_version, capabilities, sections, ...rest, allowance };
+}
 function contractAnswer(value) {
   return { content: [{ type: "text", text: JSON.stringify(value, null, 2) }] };
 }
+function compactAnswer(value) {
+  return { content: [{ type: "text", text: JSON.stringify(value) }] };
+}
 function contractErrorAnswer(e) {
   const err = e instanceof ContractErrorException ? e : new ContractErrorException("invalid_args", e instanceof Error ? e.message : String(e));
   return {
@@ -101254,11 +101780,15 @@ This searched OpenRouter's listing only. Subscription wire ids and catalog alias
           models?.[givenModels?.indexOf(m) ?? -1] ?? m,
           level
         ])) : undefined;
+        const runsModels = mode === "run" || mode === "run-and-judge";
+        const runsJudges = mode === "judge" || mode === "run-and-judge";
+        const parentClaudeSessionId = runsModels || runsJudges ? await parentSessionForCall({ hostPid: sessionManager.hostPid }) : undefined;
         const runOpts = {
           requirePattern,
           minOutputBytes,
           claudeFlags: childFlags,
           efforts,
+          parentClaudeSessionId,
           onProgress: (u) => {
             ctx.reportProgress(`team: ${u.phase}`);
           }
@@ -101269,8 +101799,6 @@ This searched OpenRouter's listing only. Subscription wire ids and catalog alias
           const existing = join56(resolved, "input.md");
           return existsSync39(existing) ? readFileSync45(existing, "utf-8") : undefined;
         };
-        const runsModels = mode === "run" || mode === "run-and-judge";
-        const runsJudges = mode === "judge" || mode === "run-and-judge";
         const choice = modelChoiceStop([
           ...runsModels && givenModels && models ? givenModels.map((given, i) => ({ given, spec: models[i] })) : [],
           ...runsJudges && givenJudges && judges ? givenJudges.map((given, i) => ({ given, spec: judges[i] })) : []
@@ -101295,9 +101823,6 @@ This searched OpenRouter's listing only. Subscription wire ids and catalog alias
               requirePattern
             });
             setupSession(resolved, models, input);
-            const parentClaudeSessionId = await parentSessionForCall({
-              hostPid: sessionManager.hostPid
-            });
             const monitorRecord = sessionManager.recordTeamRun({
               teamPath: resolved,
               slots: models.length,
@@ -101350,7 +101875,11 @@ This searched OpenRouter's listing only. Subscription wire ids and catalog alias
             };
           }
           case "judge": {
-            const verdict = await judgeResponses(resolved, { judges, claudeFlags: childFlags });
+            const verdict = await judgeResponses(resolved, {
+              judges,
+              claudeFlags: childFlags,
+              parentClaudeSessionId
+            });
             const out = providerNote ? { ...verdict, provider_note: providerNote } : verdict;
             return { content: [{ type: "text", text: JSON.stringify(out, null, 2) }] };
           }
@@ -101368,7 +101897,11 @@ This searched OpenRouter's listing only. Subscription wire ids and catalog alias
             const handle = await startModels(resolved, runOpts);
             await handle.done;
             const run = teamRunRow(resolved, handle.runId);
-            const verdict = await judgeResponses(resolved, { judges, claudeFlags: childFlags });
+            const verdict = await judgeResponses(resolved, {
+              judges,
+              claudeFlags: childFlags,
+              parentClaudeSessionId
+            });
             return {
               content: [
                 {
@@ -101554,7 +102087,7 @@ Report manually at https://github.com/anthropics/claudish/issues${autoSendHint}`
   });
   tools.push({
     name: "allowance_status",
-    description: "Report the local Codex account pool's allowance: {contract_version, capabilities, allowance, reason?}. `allowance` is the claudish.allowance.v1 report of THIS machine's claudish sessions (accounts, remaining capacity, burn rate, projected gaps with remedies, trajectory, per-session shares), or null with a `reason` when there is no account pool. Read-only; it sends nothing to any vendor.",
+    description: 'Report the local Codex account pool\'s allowance: {contract_version, capabilities, allowance, reason?}. `allowance` is the claudish.allowance.v1 report of THIS machine\'s claudish sessions (accounts, remaining capacity, burn rate, projected gaps with remedies, trajectory, per-session shares), or null with a `reason` when there is no account pool. `sections` limits the report to those parts (accounts, combined, burn, alerts, trajectory, sessions) beside its header, and the answer then lists them in `sections`; a frequent poll should pass ["accounts","burn","alerts"]. Read-only; it sends nothing to any vendor.',
     inputSchema: {
       type: "object",
       properties: {
@@ -101566,6 +102099,15 @@ Report manually at https://github.com/anthropics/claudish/issues${autoSendHint}`
         horizon_hours: {
           type: "number",
           description: "Forecast horizon in hours, 1\u2013168 (default: 168)"
+        },
+        sections: {
+          type: "array",
+          items: {
+            type: "string",
+            enum: [...ALLOWANCE_REPORT_SECTIONS]
+          },
+          minItems: 1,
+          description: 'Report only these parts beside the header (default: all). Poll with ["accounts","burn","alerts"]; the trajectory and sessions are most of the bytes.'
         }
       }
     },
@@ -101578,7 +102120,8 @@ Report manually at https://github.com/anthropics/claudish/issues${autoSendHint}`
         const hours = args.horizon_hours ?? 168;
         if (typeof hours !== "number" || !Number.isFinite(hours) || hours < 1 || hours > 168)
           throw new ContractErrorException("invalid_args", "'horizon_hours' must be a number from 1 to 168");
-        return contractAnswer(await allowanceStatus(hours * 3600000));
+        const sections = allowanceSectionsArg(args.sections);
+        return compactAnswer(allowanceSections(await allowanceStatus(hours * 3600000), sections));
       } catch (e) {
         return contractErrorAnswer(e);
       }
@@ -102052,6 +102595,7 @@ var init_mcp_server = __esm(() => {
   init_types3();
   init_base_api_format();
   init_model_catalog();
+  init_allowance_report_schema();
   init_prehydrate();
   init_prompt_role();
   init_fs_atomic();
@@ -104220,7 +104764,7 @@ function renderRow2(row, pool, now) {
     lines.push(`      ${warn2(formatReset(row.blocker.resetAt, now, row.blocker.estimated === true))}`);
   }
   if (row.blocker?.kind === "needs-reauth") {
-    lines.push(`      ${bad2("needs login")}: run \`claudish account login ${vendorOf(row.ref.provider)} ${row.record.label}\``);
+    lines.push(`      ${bad2("needs login")}: run \`claudish account login ${vendorOf(row.ref.provider)} ${shellWord(row.record.label)}\``);
     if (row.state.needsReauth?.lastReason) {
       lines.push(`      ${dim4(row.state.needsReauth.lastReason)}`);
     }
@@ -104295,7 +104839,7 @@ ${strong2(vendorOf(report.provider))}`);
   if (!any) {
     console.log(`
 No subscription accounts are configured.`);
-    console.log(dim4("A Codex login (`claudish login codex`) is shown here as `default (legacy file)` " + "once it exists; add an account with `claudish account add codex --label <label>`."));
+    console.log(dim4("A Codex login (`claudish login codex`) is shown here as `default (legacy file)` " + "once it exists; add an account with `claudish account add codex`."));
   }
   console.log("");
 }
@@ -104378,12 +104922,24 @@ function parseAccountMutation(args) {
       throw usage2("account add codex takes no positional argument; use --label.");
     return { verb: v, label: values.get("--label") };
   }
+  if (v === "rename") {
+    const hasId = values.has("--id");
+    if (positional.length === 2 || positional.length === 1 && hasId) {
+      return {
+        verb: v,
+        selector: positional.length === 2 ? positional[0] : undefined,
+        id: values.get("--id"),
+        newLabel: positional[positional.length - 1]
+      };
+    }
+    throw usage2("account rename codex needs <label> <new-label>, or --id <generated-id> <new-label>.");
+  }
   if (positional.length > 1)
     throw usage2(`account ${v} codex names one account.`);
   if (positional.length === 0 && !values.has("--id")) {
     throw usage2(`account ${v} codex needs a label or --id <generated-id>.`);
   }
-  const target = { label: positional[0], id: values.get("--id") };
+  const target = { selector: positional[0], id: values.get("--id") };
   if (v === "remove") {
     return { verb: v, ...target, yes: flags.has("--yes"), deleteFile: flags.has("--delete-file") };
   }
@@ -104488,8 +105044,11 @@ var ACCOUNT_HELP = `Usage:
   claudish account forecast [--json] [--horizon <h|d>] [--provider codex]
   claudish account add codex [--label <label>]
   claudish account login|enable|disable codex <label> [--id <generated-id>]
+  claudish account rename codex <label> <new-label> [--id <generated-id>]
   claudish account remove codex <label> [--id <generated-id>] [--yes] [--delete-file]
 
+--label on add is optional and overrides the default, the login's email.
+A command that takes <label> also takes the account's email.
 --id <generated-id> may replace or confirm the label; labels are unique per claudish provider.
 Removing the legacy login (default, legacy-codex-file) requires --delete-file.
 New accounts use the macOS Keychain, or protected plaintext files where there is none.
@@ -104503,13 +105062,14 @@ The allowance trajectory, alerts and sessions of a claudish provider's account p
   --horizon <h|d>     how far ahead to project, 1h to 7d (default 7d)
   --provider codex    the claudish provider (openai-codex); the only one with a model today`;
 var init_account_command = __esm(() => {
+  init_account_label();
   init_policy2();
   init_pool();
   init_registry();
   init_state_store();
   init_types();
   init_ansi();
-  MUTATION_VERBS = ["add", "login", "enable", "disable", "remove"];
+  MUTATION_VERBS = ["add", "login", "enable", "disable", "remove", "rename"];
 });
 
 // src/auth/antigravity-oauth.ts