commonswarm 0.1.49 → 0.1.51

package/cswarm.cjs

@@ -44,7 +44,7 @@ var __toESM = (mod, isNodeMode, target2) => (target2 = mod != null ? __create(__
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// node_modules/tslib/tslib.es6.mjs
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/tslib/tslib.es6.mjs
 var tslib_es6_exports = {};
 __export(tslib_es6_exports, {
   __addDisposableResource: () => __addDisposableResource,
@@ -483,7 +483,7 @@ function __rewriteRelativeImportExtension(path, preserveJsx) {
 }
 var extendStatics, __assign, __createBinding, __setModuleDefault, ownKeys, _SuppressedError, tslib_es6_default;
 var init_tslib_es6 = __esm({
-  "node_modules/tslib/tslib.es6.mjs"() {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/tslib/tslib.es6.mjs"() {
     extendStatics = function(d, b2) {
       extendStatics = Object.setPrototypeOf || { __proto__: [] } instanceof Array && function(d2, b3) {
         d2.__proto__ = b3;
@@ -569,9 +569,9 @@ var init_tslib_es6 = __esm({
   }
 });
 
-// node_modules/@supabase/functions-js/dist/main/helper.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/functions-js/dist/main/helper.js
 var require_helper = __commonJS({
-  "node_modules/@supabase/functions-js/dist/main/helper.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/functions-js/dist/main/helper.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.resolveFetch = void 0;
@@ -585,9 +585,9 @@ var require_helper = __commonJS({
   }
 });
 
-// node_modules/@supabase/functions-js/dist/main/types.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/functions-js/dist/main/types.js
 var require_types = __commonJS({
-  "node_modules/@supabase/functions-js/dist/main/types.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/functions-js/dist/main/types.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.FunctionRegion = exports2.FunctionsHttpError = exports2.FunctionsRelayError = exports2.FunctionsFetchError = exports2.FunctionsError = void 0;
@@ -645,9 +645,9 @@ var require_types = __commonJS({
   }
 });
 
-// node_modules/@supabase/functions-js/dist/main/FunctionsClient.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/functions-js/dist/main/FunctionsClient.js
 var require_FunctionsClient = __commonJS({
-  "node_modules/@supabase/functions-js/dist/main/FunctionsClient.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/functions-js/dist/main/FunctionsClient.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.FunctionsClient = void 0;
@@ -931,9 +931,9 @@ var require_FunctionsClient = __commonJS({
   }
 });
 
-// node_modules/@supabase/functions-js/dist/main/index.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/functions-js/dist/main/index.js
 var require_main = __commonJS({
-  "node_modules/@supabase/functions-js/dist/main/index.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/functions-js/dist/main/index.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.FunctionRegion = exports2.FunctionsRelayError = exports2.FunctionsHttpError = exports2.FunctionsFetchError = exports2.FunctionsError = exports2.FunctionsClient = void 0;
@@ -960,9 +960,9 @@ var require_main = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js
 var require_websocket_factory = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.WebSocketFactory = void 0;
@@ -1071,9 +1071,9 @@ Suggested solution: ${env.workaround}`;
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/lib/version.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/version.js
 var require_version = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/lib/version.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/version.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.version = void 0;
@@ -1081,9 +1081,9 @@ var require_version = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/lib/constants.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/constants.js
 var require_constants = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/lib/constants.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/constants.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.CONNECTION_STATE = exports2.TRANSPORTS = exports2.CHANNEL_EVENTS = exports2.CHANNEL_STATES = exports2.SOCKET_STATES = exports2.MAX_PUSH_BUFFER_SIZE = exports2.WS_CLOSE_NORMAL = exports2.DEFAULT_TIMEOUT = exports2.VERSION = exports2.DEFAULT_VSN = exports2.VSN_2_0_0 = exports2.VSN_1_0_0 = exports2.DEFAULT_VERSION = void 0;
@@ -1129,9 +1129,9 @@ var require_constants = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/lib/serializer.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/serializer.js
 var require_serializer = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/lib/serializer.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/serializer.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     var Serializer = class {
@@ -1283,9 +1283,9 @@ var require_serializer = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/lib/transformers.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/transformers.js
 var require_transformers = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/lib/transformers.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/transformers.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.httpEndpointURL = exports2.toTimestampString = exports2.toArray = exports2.toJson = exports2.toNumber = exports2.toBoolean = exports2.convertCell = exports2.convertColumn = exports2.convertChangeData = exports2.PostgresTypes = void 0;
@@ -1462,9 +1462,9 @@ var require_transformers = __commonJS({
   }
 });
 
-// node_modules/@supabase/phoenix/priv/static/phoenix.cjs.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/phoenix/priv/static/phoenix.cjs.js
 var require_phoenix_cjs = __commonJS({
-  "node_modules/@supabase/phoenix/priv/static/phoenix.cjs.js"(exports2, module2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/phoenix/priv/static/phoenix.cjs.js"(exports2, module2) {
     "use strict";
     var __defProp2 = Object.defineProperty;
     var __getOwnPropDesc2 = Object.getOwnPropertyDescriptor;
@@ -3314,9 +3314,9 @@ var require_phoenix_cjs = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js
 var require_presenceAdapter = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     var phoenix_1 = require_phoenix_cjs();
@@ -3412,9 +3412,9 @@ var require_presenceAdapter = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js
 var require_RealtimePresence = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.REALTIME_PRESENCE_LISTEN_EVENTS = void 0;
@@ -3456,9 +3456,9 @@ var require_RealtimePresence = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js
 var require_normalizeChannelError = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.normalizeChannelError = normalizeChannelError;
@@ -3482,9 +3482,9 @@ var require_normalizeChannelError = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js
 var require_channelAdapter = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     var constants_1 = require_constants();
@@ -3589,9 +3589,9 @@ var require_channelAdapter = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/RealtimePostgresFilterBuilder.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/RealtimePostgresFilterBuilder.js
 var require_RealtimePostgresFilterBuilder = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/RealtimePostgresFilterBuilder.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/RealtimePostgresFilterBuilder.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.postgresChangesFilter = exports2.RealtimePostgresFilterBuilder = void 0;
@@ -3713,9 +3713,9 @@ var require_RealtimePostgresFilterBuilder = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js
 var require_RealtimeChannel = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.REALTIME_CHANNEL_STATES = exports2.REALTIME_SUBSCRIBE_STATES = exports2.REALTIME_LISTEN_TYPES = exports2.REALTIME_POSTGRES_CHANGES_LISTEN_EVENT = exports2.postgresChangesFilter = exports2.RealtimePostgresFilterBuilder = void 0;
@@ -4444,9 +4444,9 @@ var require_RealtimeChannel = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js
 var require_socketAdapter = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     var phoenix_1 = require_phoenix_cjs();
@@ -4562,9 +4562,9 @@ var require_socketAdapter = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js
 var require_RealtimeClient = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
@@ -5216,9 +5216,9 @@ var require_RealtimeClient = __commonJS({
   }
 });
 
-// node_modules/@supabase/realtime-js/dist/main/index.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/index.js
 var require_main2 = __commonJS({
-  "node_modules/@supabase/realtime-js/dist/main/index.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/realtime-js/dist/main/index.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.WebSocketFactory = exports2.REALTIME_CHANNEL_STATES = exports2.REALTIME_SUBSCRIBE_STATES = exports2.REALTIME_PRESENCE_LISTEN_EVENTS = exports2.REALTIME_POSTGRES_CHANGES_LISTEN_EVENT = exports2.REALTIME_LISTEN_TYPES = exports2.postgresChangesFilter = exports2.RealtimePostgresFilterBuilder = exports2.RealtimeClient = exports2.RealtimeChannel = exports2.RealtimePresence = void 0;
@@ -5255,9 +5255,9 @@ var require_main2 = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/version.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/version.js
 var require_version2 = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/version.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/version.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.version = void 0;
@@ -5265,9 +5265,9 @@ var require_version2 = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/constants.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/constants.js
 var require_constants2 = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/constants.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/constants.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.JWKS_TTL = exports2.BASE64URL_REGEX = exports2.API_VERSIONS = exports2.API_VERSION_HEADER_NAME = exports2.NETWORK_FAILURE = exports2.DEFAULT_HEADERS = exports2.AUDIENCE = exports2.STORAGE_KEY = exports2.GOTRUE_URL = exports2.REFRESH_FAILURE_COOLDOWN_MS = exports2.EXPIRY_MARGIN_MS = exports2.AUTO_REFRESH_TICK_THRESHOLD = exports2.AUTO_REFRESH_TICK_DURATION_MS = void 0;
@@ -5297,9 +5297,9 @@ var require_constants2 = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/errors.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/errors.js
 var require_errors = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/errors.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/errors.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.AuthInvalidJwtError = exports2.AuthWeakPasswordError = exports2.AuthRefreshDiscardedError = exports2.AuthRetryableFetchError = exports2.AuthPKCECodeVerifierMissingError = exports2.AuthPKCEGrantCodeExchangeError = exports2.AuthImplicitGrantRedirectError = exports2.AuthInvalidCredentialsError = exports2.AuthInvalidTokenResponseError = exports2.AuthSessionMissingError = exports2.CustomAuthError = exports2.AuthUnknownError = exports2.AuthApiError = exports2.AuthError = void 0;
@@ -5455,9 +5455,9 @@ var require_errors = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/base64url.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/base64url.js
 var require_base64url = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/base64url.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/base64url.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.byteToBase64URL = byteToBase64URL;
@@ -5645,9 +5645,9 @@ var require_base64url = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/helpers.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/helpers.js
 var require_helpers = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/helpers.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/helpers.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.Deferred = exports2.removeItemAsync = exports2.getItemAsync = exports2.setItemAsync = exports2.looksLikeFetchResponse = exports2.resolveFetch = exports2.supportsLocalStorage = exports2.isBrowser = void 0;
@@ -5967,9 +5967,9 @@ var require_helpers = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/fetch.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/fetch.js
 var require_fetch = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/fetch.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/fetch.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.handleError = handleError2;
@@ -6151,9 +6151,9 @@ var require_fetch = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/types.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/types.js
 var require_types2 = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/types.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/types.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.SIGN_OUT_SCOPES = void 0;
@@ -6161,9 +6161,9 @@ var require_types2 = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js
 var require_GoTrueAdminApi = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
@@ -7247,9 +7247,9 @@ var require_GoTrueAdminApi = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/local-storage.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/local-storage.js
 var require_local_storage = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/local-storage.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/local-storage.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.memoryLocalStorageAdapter = memoryLocalStorageAdapter;
@@ -7269,9 +7269,9 @@ var require_local_storage = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/locks.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/locks.js
 var require_locks = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/locks.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/locks.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.ProcessLockAcquireTimeoutError = exports2.NavigatorLockAcquireTimeoutError = exports2.LockAcquireTimeoutError = exports2.internals = void 0;
@@ -7447,9 +7447,9 @@ var require_locks = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/polyfills.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/polyfills.js
 var require_polyfills = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/polyfills.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/polyfills.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.polyfillGlobalThis = polyfillGlobalThis;
@@ -7474,9 +7474,9 @@ var require_polyfills = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js
 var require_ethereum = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.getAddress = getAddress;
@@ -7552,9 +7552,9 @@ ${suffix}`;
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js
 var require_webauthn_errors = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.WebAuthnUnknownError = exports2.WebAuthnError = void 0;
@@ -7743,9 +7743,9 @@ var require_webauthn_errors = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/lib/webauthn.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/webauthn.js
 var require_webauthn = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/lib/webauthn.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/lib/webauthn.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.WebAuthnApi = exports2.DEFAULT_REQUEST_OPTIONS = exports2.DEFAULT_CREATION_OPTIONS = exports2.webAuthnAbortService = exports2.WebAuthnAbortService = exports2.identifyAuthenticationError = exports2.identifyRegistrationError = exports2.isWebAuthnError = exports2.WebAuthnError = void 0;
@@ -8302,9 +8302,9 @@ var require_webauthn = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/GoTrueClient.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/GoTrueClient.js
 var require_GoTrueClient = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/GoTrueClient.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/GoTrueClient.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
@@ -13442,9 +13442,9 @@ var require_GoTrueClient = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js
 var require_AuthAdminApi = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
@@ -13454,9 +13454,9 @@ var require_AuthAdminApi = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/AuthClient.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/AuthClient.js
 var require_AuthClient = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/AuthClient.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/AuthClient.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
@@ -13466,9 +13466,9 @@ var require_AuthClient = __commonJS({
   }
 });
 
-// node_modules/@supabase/auth-js/dist/main/index.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/index.js
 var require_main3 = __commonJS({
-  "node_modules/@supabase/auth-js/dist/main/index.js"(exports2) {
+  "../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/auth-js/dist/main/index.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.processLock = exports2.lockInternals = exports2.NavigatorLockAcquireTimeoutError = exports2.navigatorLock = exports2.AuthClient = exports2.AuthAdminApi = exports2.GoTrueClient = exports2.GoTrueAdminApi = void 0;
@@ -13535,7 +13535,7 @@ var import_node_crypto2 = require("node:crypto");
 var import_node_http = require("node:http");
 var import_node_child_process = require("node:child_process");
 
-// node_modules/@supabase/supabase-js/dist/index.mjs
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/supabase-js/dist/index.mjs
 var dist_exports = {};
 __export(dist_exports, {
   FunctionRegion: () => import_functions_js.FunctionRegion,
@@ -13550,7 +13550,7 @@ __export(dist_exports, {
 });
 var import_functions_js = __toESM(require_main(), 1);
 
-// node_modules/@supabase/postgrest-js/dist/index.mjs
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/postgrest-js/dist/index.mjs
 var DEFAULT_MAX_RETRIES = 3;
 var getRetryDelay = (attemptIndex) => Math.min(1e3 * 2 ** attemptIndex, 3e4);
 var RETRYABLE_STATUS_CODES = [520, 503];
@@ -17328,10 +17328,10 @@ var PostgrestClient = class PostgrestClient2 {
   }
 };
 
-// node_modules/@supabase/supabase-js/dist/index.mjs
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/supabase-js/dist/index.mjs
 var import_realtime_js = __toESM(require_main2(), 1);
 
-// node_modules/iceberg-js/dist/index.mjs
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/iceberg-js/dist/index.mjs
 var IcebergError = class extends Error {
   constructor(message, opts) {
     super(message);
@@ -17864,7 +17864,7 @@ var IcebergRestCatalog = class {
   }
 };
 
-// node_modules/@supabase/storage-js/dist/index.mjs
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/storage-js/dist/index.mjs
 function _typeof2(o) {
   "@babel/helpers - typeof";
   return _typeof2 = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(o$1) {
@@ -20656,7 +20656,7 @@ var StorageClient = class extends StorageBucketApi {
   }
 };
 
-// node_modules/@supabase/supabase-js/dist/index.mjs
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/@supabase/supabase-js/dist/index.mjs
 var import_auth_js = __toESM(require_main3(), 1);
 __reExport(dist_exports, __toESM(require_main2(), 1));
 __reExport(dist_exports, __toESM(require_main3(), 1));
@@ -21470,6 +21470,14 @@ var MemoryStorage = class {
     this.values.delete(key2);
   }
 };
+var HumanSessionError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+  }
+  code;
+  name = "HumanSessionError";
+};
 function base64Url(bytes) {
   return bytes.toString("base64url");
 }
@@ -21848,7 +21856,12 @@ async function refreshedCredential(target2, store2) {
   return await store2.withLock(async () => {
     for (let attempt = 0; attempt < 2; attempt += 1) {
       const before = await store2.read();
-      if (!before) throw new Error("not logged in; run cswarm login");
+      if (!before) {
+        throw new HumanSessionError(
+          "human_session_missing",
+          "not logged in; run cswarm login"
+        );
+      }
       const memory = new MemoryStorage();
       const client = authClient(target2, memory);
       const refreshed = await client.auth.refreshSession({
@@ -21857,7 +21870,10 @@ async function refreshedCredential(target2, store2) {
       if (refreshed.error) {
         const afterFailure = await store2.read();
         if (afterFailure && afterFailure.generation !== before.generation) continue;
-        throw new Error("could not refresh your session; run cswarm login to sign in again");
+        throw new HumanSessionError(
+          "human_session_refresh_failed",
+          "could not refresh your session; run cswarm login to sign in again"
+        );
       }
       const session = requireSession(refreshed.data.session);
       const current = await store2.read();
@@ -24045,11 +24061,11 @@ async function resolveCloudTarget(options) {
 // src/cloud/seed.ts
 var import_node_crypto7 = require("node:crypto");
 
-// node_modules/postgres/src/index.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/index.js
 var import_os = __toESM(require("os"), 1);
 var import_fs = __toESM(require("fs"), 1);
 
-// node_modules/postgres/src/query.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/query.js
 var originCache = /* @__PURE__ */ new Map();
 var originStackCache = /* @__PURE__ */ new Map();
 var originError = /* @__PURE__ */ Symbol("OriginError");
@@ -24186,7 +24202,7 @@ function cachedError(xs) {
   return originCache.get(xs);
 }
 
-// node_modules/postgres/src/errors.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/errors.js
 var PostgresError = class extends Error {
   constructor(x) {
     super(x.message);
@@ -24236,7 +24252,7 @@ function notSupported(x) {
   return error;
 }
 
-// node_modules/postgres/src/types.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/types.js
 var types = {
   string: {
     to: 25,
@@ -24522,14 +24538,14 @@ fromKebab.column = { to: fromKebab };
 var kebab = { ...toKebab };
 kebab.column.to = fromKebab;
 
-// node_modules/postgres/src/connection.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/connection.js
 var import_net = __toESM(require("net"), 1);
 var import_tls = __toESM(require("tls"), 1);
 var import_crypto = __toESM(require("crypto"), 1);
 var import_stream = __toESM(require("stream"), 1);
 var import_perf_hooks = require("perf_hooks");
 
-// node_modules/postgres/src/result.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/result.js
 var Result = class extends Array {
   constructor() {
     super();
@@ -24546,7 +24562,7 @@ var Result = class extends Array {
   }
 };
 
-// node_modules/postgres/src/queue.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/queue.js
 var queue_default = Queue;
 function Queue(initial = []) {
   let xs = initial.slice();
@@ -24573,7 +24589,7 @@ function Queue(initial = []) {
   };
 }
 
-// node_modules/postgres/src/bytes.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/bytes.js
 var size = 256;
 var buffer = Buffer.allocUnsafe(size);
 var messages = "BCcDdEFfHPpQSX".split("").reduce((acc, x) => {
@@ -24646,7 +24662,7 @@ function reset() {
   return b;
 }
 
-// node_modules/postgres/src/connection.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/connection.js
 var connection_default = Connection;
 var uid = 1;
 var Sync = bytes_default().S().end();
@@ -25486,7 +25502,7 @@ function timer(fn, seconds) {
   }
 }
 
-// node_modules/postgres/src/subscribe.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/subscribe.js
 var noop2 = () => {
 };
 function Subscribe(postgres2, options) {
@@ -25698,7 +25714,7 @@ function parseEvent(x) {
   return (command2 || "*") + (path ? ":" + (path.indexOf(".") === -1 ? "public." + path : path) : "") + (key2 ? "=" + key2 : "");
 }
 
-// node_modules/postgres/src/large.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/large.js
 var import_stream2 = __toESM(require("stream"), 1);
 function largeObject(sql, oid, mode3 = 131072 | 262144) {
   return new Promise(async (resolve3, reject) => {
@@ -25764,7 +25780,7 @@ function largeObject(sql, oid, mode3 = 131072 | 262144) {
   });
 }
 
-// node_modules/postgres/src/index.js
+// ../../../../../../../Users/yulanbot/Developer/Ridge.io/cloud-swarm/node_modules/postgres/src/index.js
 Object.assign(Postgres, {
   PostgresError,
   toPascal,
@@ -26463,6 +26479,149 @@ async function agentCredentialStore(options) {
   };
 }
 
+// src/cloud/agent-credential-input.ts
+var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var AGENT_TOKEN_RE3 = /^swm_agt_[A-Za-z0-9_-]{43}$/;
+var AGENT_CREDENTIAL_MESSAGE = "Agent credential minted. It is bound to this task and run so the agent's work stays scoped and attributable.";
+var AGENT_CREDENTIAL_MESSAGE_D088 = "Agent credential minted. It is bound to this run, so the agent's work is attributable to it.";
+var ACCEPTED_AGENT_CREDENTIAL_MESSAGES = [
+  AGENT_CREDENTIAL_MESSAGE,
+  AGENT_CREDENTIAL_MESSAGE_D088
+];
+var AgentCredentialInputError = class extends Error {
+  constructor(code, message) {
+    super(`[${code}] ${message}`);
+    this.code = code;
+  }
+  code;
+  name = "AgentCredentialInputError";
+};
+var AGENT_CREDENTIAL_REQUIRED_FIELDS = [
+  "message",
+  "status",
+  "principal_id",
+  "token_id",
+  "run_id",
+  "agent_token"
+];
+var AGENT_CREDENTIAL_OPTIONAL_FIELDS = ["expires_at"];
+var ALLOWED_ARTIFACT_KEYS = /* @__PURE__ */ new Set([
+  ...AGENT_CREDENTIAL_REQUIRED_FIELDS,
+  ...AGENT_CREDENTIAL_OPTIONAL_FIELDS
+]);
+function sourceName(source) {
+  return source.kind === "file" ? `agent credential file ${source.path}` : "agent credential input from stdin";
+}
+function nextStep(source) {
+  return source.kind === "file" ? `Next step: copy the minted JSON line again and replace ${source.path}.` : "Next step: copy the minted JSON line again and send that line to stdin.";
+}
+function credentialInputError(code, source, found) {
+  return new AgentCredentialInputError(
+    code,
+    `${sourceName(source)} ${found}. It must be the JSON line CommonSwarm minted, copied unchanged: ${AGENT_CREDENTIAL_REQUIRED_FIELDS.join(", ")} (${AGENT_CREDENTIAL_OPTIONAL_FIELDS.join(", ")} is optional). ${nextStep(source)}`
+  );
+}
+function jsonKind(value) {
+  if (value === null) return "JSON null";
+  if (Array.isArray(value)) return "a JSON array";
+  return `a JSON ${typeof value}`;
+}
+function parseAgentCredentialInput(value, source) {
+  if (AGENT_TOKEN_RE3.test(value)) {
+    return {
+      token: value,
+      principalId: null,
+      tokenId: null,
+      runId: null,
+      expiresAt: null,
+      durable: false
+    };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    throw credentialInputError(
+      "agent_credential_invalid_json",
+      source,
+      "contains text that is not valid JSON"
+    );
+  }
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw credentialInputError(
+      "agent_credential_not_object",
+      source,
+      `contains ${jsonKind(parsed)} instead of a JSON object`
+    );
+  }
+  const artifact = parsed;
+  if (!Object.hasOwn(artifact, "agent_token")) {
+    throw credentialInputError(
+      "agent_credential_missing_agent_token",
+      source,
+      'is missing "agent_token"'
+    );
+  }
+  if (typeof artifact.agent_token !== "string" || !AGENT_TOKEN_RE3.test(artifact.agent_token)) {
+    const found = typeof artifact.agent_token === "string" ? 'has "agent_token" as a string that is not a swm_agt_ credential' : `has "agent_token" as ${jsonKind(artifact.agent_token)}`;
+    throw credentialInputError(
+      "agent_credential_invalid_agent_token",
+      source,
+      found
+    );
+  }
+  const actualKeys = Object.keys(artifact);
+  const missingKeys = AGENT_CREDENTIAL_REQUIRED_FIELDS.filter(
+    (key2) => !Object.hasOwn(artifact, key2)
+  );
+  const unknownCount = actualKeys.filter(
+    (key2) => !ALLOWED_ARTIFACT_KEYS.has(key2)
+  ).length;
+  const invalidKeys = [];
+  if (Object.hasOwn(artifact, "message") && !ACCEPTED_AGENT_CREDENTIAL_MESSAGES.includes(artifact.message)) {
+    invalidKeys.push("message");
+  }
+  if (Object.hasOwn(artifact, "status") && artifact.status !== "accepted") {
+    invalidKeys.push("status");
+  }
+  for (const key2 of ["principal_id", "token_id", "run_id"]) {
+    if (Object.hasOwn(artifact, key2) && (typeof artifact[key2] !== "string" || !UUID_RE4.test(artifact[key2]))) {
+      invalidKeys.push(key2);
+    }
+  }
+  if (artifact.expires_at !== void 0) {
+    if (typeof artifact.expires_at !== "string" || Number.isNaN(Date.parse(artifact.expires_at))) {
+      invalidKeys.push("expires_at");
+    }
+  }
+  if (missingKeys.length > 0 || unknownCount > 0 || invalidKeys.length > 0) {
+    const faults = [];
+    if (unknownCount > 0) {
+      faults.push(`has ${unknownCount} unrecognized ${unknownCount === 1 ? "field" : "fields"}`);
+    }
+    if (missingKeys.length > 0) {
+      faults.push(`is missing required ${missingKeys.length === 1 ? "field" : "fields"} ${missingKeys.map((key2) => `"${key2}"`).join(", ")}`);
+    }
+    if (invalidKeys.length > 0) {
+      faults.push(`has invalid ${invalidKeys.length === 1 ? "field" : "fields"} ${invalidKeys.map((key2) => `"${key2}"`).join(", ")}`);
+    }
+    throw credentialInputError(
+      "agent_credential_fields_invalid",
+      source,
+      faults.join(" and ")
+    );
+  }
+  const expiresAt = artifact.expires_at === void 0 ? null : Date.parse(artifact.expires_at);
+  return {
+    token: artifact.agent_token,
+    principalId: artifact.principal_id.toLowerCase(),
+    tokenId: artifact.token_id.toLowerCase(),
+    runId: artifact.run_id.toLowerCase(),
+    expiresAt,
+    durable: true
+  };
+}
+
 // src/cloud/renewal.ts
 var import_node_crypto9 = require("node:crypto");
 var AGENT_TOKEN_DEFAULT_TTL_MS2 = 60 * 60 * 1e3;
@@ -26485,8 +26644,8 @@ var RENEWAL_LEAD_FLOOR_MS = 5 * 6e4;
 var RENEWAL_LEAD_CEILING_MS = 15 * 6e4;
 var RENEWAL_PENDING_RECOVERY_MS = 60 * 6e4;
 var RENEW_TIMEOUT_MS = 3e4;
-var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-var AGENT_TOKEN_RE3 = /^swm_agt_[A-Za-z0-9_-]{43}$/;
+var UUID_RE5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var AGENT_TOKEN_RE4 = /^swm_agt_[A-Za-z0-9_-]{43}$/;
 function renewalDueAt(issuedAt, expiresAt) {
   const lifetime = Math.max(0, expiresAt - issuedAt);
   const lead = Math.min(
@@ -26644,7 +26803,7 @@ async function requestSuccessor(options) {
   } catch {
     body = {};
   }
-  const principalId = typeof body.principal_id === "string" && UUID_RE4.test(body.principal_id) ? body.principal_id.toLowerCase() : null;
+  const principalId = typeof body.principal_id === "string" && UUID_RE5.test(body.principal_id) ? body.principal_id.toLowerCase() : null;
   if (response.status === 400 || response.status === 404) {
     throw new RenewalUnsupported(
       "this deployment does not offer credential renewal yet, so a credential here still has to be re-issued by hand when it expires"
@@ -26732,7 +26891,7 @@ async function requestSuccessor(options) {
   if (!token) {
     return null;
   }
-  if (!AGENT_TOKEN_RE3.test(token)) {
+  if (!AGENT_TOKEN_RE4.test(token)) {
     throw new RenewalRefused(
       response.status,
       "malformed_successor",
@@ -26741,7 +26900,7 @@ async function requestSuccessor(options) {
   }
   const tokenId = typeof body.token_id === "string" ? body.token_id : "";
   const runId = typeof body.run_id === "string" ? body.run_id : "";
-  if (!UUID_RE4.test(tokenId) || !UUID_RE4.test(runId) || principalId === null) {
+  if (!UUID_RE5.test(tokenId) || !UUID_RE5.test(runId) || principalId === null) {
     throw new RenewalRefused(
       response.status,
       "incomplete_successor",
@@ -27250,7 +27409,7 @@ var MAX_LINK_PAYLOAD_BYTES = 8 * 1024;
 var MAX_LABEL_INPUT_LENGTH = 1024;
 var CONTROL_GLOBAL_RE = /[\u0000-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/g;
 var ANSI_ESCAPE_GLOBAL_RE = /\u001b\[[0-?]*[ -/]*[@-~]/g;
-var UUID_RE5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE6 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var STRICT_BASE64URL_RE = /^[A-Za-z0-9_-]+$/;
 var RAW_BASE64_PAYLOAD_CANDIDATE_RE = /^[A-Za-z0-9+/_=-]+$/;
 var CURRENT_INVITE_SCHEME = "cswarm://accept/";
@@ -27301,7 +27460,7 @@ function validatedPayload(value) {
     throw new Error("invite link target is malformed");
   }
   cloudTarget(value.url, value.anon_key);
-  if (typeof value.workspace_id !== "string" || !UUID_RE5.test(value.workspace_id)) {
+  if (typeof value.workspace_id !== "string" || !UUID_RE6.test(value.workspace_id)) {
     throw new Error("invite link workspace_id must be a UUID");
   }
   if (typeof value.invitation_token !== "string") {
@@ -27311,7 +27470,7 @@ function validatedPayload(value) {
   if (typeof value.workspace_name !== "string" || typeof value.inviter_display_name !== "string" || value.workspace_name.length > MAX_LABEL_INPUT_LENGTH || value.inviter_display_name.length > MAX_LABEL_INPUT_LENGTH) {
     throw new Error("invite link display labels are malformed");
   }
-  if (value.inviter_user_id !== void 0 && (typeof value.inviter_user_id !== "string" || !UUID_RE5.test(value.inviter_user_id))) {
+  if (value.inviter_user_id !== void 0 && (typeof value.inviter_user_id !== "string" || !UUID_RE6.test(value.inviter_user_id))) {
     throw new Error("invite link inviter_user_id must be a UUID");
   }
   return value;
@@ -27969,7 +28128,7 @@ function renderCapabilityRevoke(capabilityId, revokedAt) {
 }
 
 // src/cloud/renewal-grants.ts
-var UUID_RE6 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE7 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function nullableString(value, field) {
   if (value === null) return null;
   if (typeof value !== "string") {
@@ -27985,7 +28144,7 @@ function nullableTimestamp(value, field) {
   return text;
 }
 function uuid3(value, field) {
-  if (typeof value !== "string" || !UUID_RE6.test(value)) {
+  if (typeof value !== "string" || !UUID_RE7.test(value)) {
     throw new Error(`renewal grant read returned malformed ${field}`);
   }
   return value.toLowerCase();
@@ -28076,7 +28235,7 @@ function describeRenewalGrant(grant) {
 }
 
 // src/cloud/workspaces.ts
-var UUID_RE7 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE8 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var ROLES = /* @__PURE__ */ new Set(["owner", "admin", "member"]);
 var MemberSelectionError = class extends Error {
   constructor(code, message, matches = []) {
@@ -28089,7 +28248,7 @@ var MemberSelectionError = class extends Error {
   matches;
 };
 function resolveWorkspaceMember(selector, members) {
-  if (UUID_RE7.test(selector)) {
+  if (UUID_RE8.test(selector)) {
     const selected = members.find(
       (member) => member.user_id === selector.toLowerCase()
     );
@@ -28188,7 +28347,7 @@ var WorkspaceAmbiguousNameError = class extends WorkspaceCliError {
   }
 };
 function checkedUuid(value, field) {
-  if (typeof value !== "string" || !UUID_RE7.test(value)) {
+  if (typeof value !== "string" || !UUID_RE8.test(value)) {
     throw new Error(`workspace read returned a malformed ${field}`);
   }
   return value.toLowerCase();
@@ -28507,13 +28666,13 @@ async function updateWorkspaceDefaultAfterClose(store2, userId, closedWorkspaceI
 }
 function workspaceOverride(explicit, environmental) {
   if (explicit !== void 0) {
-    if (!UUID_RE7.test(explicit)) {
+    if (!UUID_RE8.test(explicit)) {
       throw new Error("--workspace-id must be a UUID");
     }
     return explicit.toLowerCase();
   }
   if (environmental) {
-    if (!UUID_RE7.test(environmental)) {
+    if (!UUID_RE8.test(environmental)) {
       throw new Error("SWARM_CLOUD_WORKSPACE_ID must be a UUID");
     }
     return environmental.toLowerCase();
@@ -28573,7 +28732,7 @@ async function selectWorkspace(selector, workspaces, store2, userId) {
 function resolveWorkspaceSelector(selector, workspaces) {
   const sorted = sortWorkspaces(workspaces);
   let selected;
-  if (UUID_RE7.test(selector)) {
+  if (UUID_RE8.test(selector)) {
     const normalized = selector.toLowerCase();
     selected = sorted.find(
       (workspace) => workspace.workspace_id === normalized
@@ -28723,7 +28882,7 @@ function describeServerError(prefix, envelope) {
 
 // src/cloud/attachments.ts
 var SIGNAL_ATTACHMENT_MAX = 8;
-var UUID_RE8 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE9 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function parseSignalAttachments(value, options = {}) {
   if (options.enabled === false || value === void 0) return [];
   if (!Array.isArray(value) || value.length > SIGNAL_ATTACHMENT_MAX) {
@@ -28736,7 +28895,7 @@ function parseSignalAttachments(value, options = {}) {
       throw new Error("signal read returned a malformed attachment");
     }
     const row = valueAtPosition;
-    if (typeof row.file_id !== "string" || !UUID_RE8.test(row.file_id) || typeof row.version_n !== "number" || !Number.isSafeInteger(row.version_n) || row.version_n < 1 || typeof row.name !== "string" || row.name.length < 1 || row.name.length > 255 || typeof row.content_type !== "string" || row.content_type.length < 1 || typeof row.size_bytes !== "number" || !Number.isSafeInteger(row.size_bytes) || row.size_bytes < 0) {
+    if (typeof row.file_id !== "string" || !UUID_RE9.test(row.file_id) || typeof row.version_n !== "number" || !Number.isSafeInteger(row.version_n) || row.version_n < 1 || typeof row.name !== "string" || row.name.length < 1 || row.name.length > 255 || typeof row.content_type !== "string" || row.content_type.length < 1 || typeof row.size_bytes !== "number" || !Number.isSafeInteger(row.size_bytes) || row.size_bytes < 0) {
       throw new Error("signal read returned malformed attachment metadata");
     }
     const fileId = row.file_id.toLowerCase();
@@ -28756,7 +28915,7 @@ function parseSignalAttachments(value, options = {}) {
   return attachments;
 }
 function attachmentRetrievalCommand(workspaceId2, attachment) {
-  if (!UUID_RE8.test(workspaceId2) || !UUID_RE8.test(attachment.file_id)) {
+  if (!UUID_RE9.test(workspaceId2) || !UUID_RE9.test(attachment.file_id)) {
     throw new Error("attachment retrieval command needs UUID identifiers");
   }
   if (!Number.isSafeInteger(attachment.version_n) || attachment.version_n < 1) {
@@ -28772,7 +28931,7 @@ function formatAttachmentSize(bytes) {
 }
 
 // src/cloud/signals.ts
-var UUID_RE9 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE10 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var SIGNAL_KINDS = /* @__PURE__ */ new Set(["working-on", "note", "ask"]);
 var SIGNAL_BODY_DISPLAY_MAX = 8e3;
 var SIGNAL_ABOUT_DISPLAY_MAX = 500;
@@ -28843,7 +29002,7 @@ function plainMalformedError(message) {
   return error;
 }
 function checkedUuid2(value, field) {
-  if (typeof value !== "string" || !UUID_RE9.test(value)) {
+  if (typeof value !== "string" || !UUID_RE10.test(value)) {
     throw new Error(`signal read returned a malformed ${field}`);
   }
   return value.toLowerCase();
@@ -29474,7 +29633,7 @@ async function readAgentSignalDirectory(target2, token, workspaceId2, fetcherOrO
 }
 function resolveSignalRecipient(selector, directory) {
   const resolved = Array.isArray(directory) ? { members: directory, agents: [] } : directory;
-  if (UUID_RE9.test(selector)) {
+  if (UUID_RE10.test(selector)) {
     const normalized = selector.toLowerCase();
     const member = resolved.members.find((row) => row.user_id === normalized);
     const agent = resolved.agents.find(
@@ -29560,10 +29719,10 @@ async function pollForSignals(options) {
   return { signals: [], timedOut: true };
 }
 function normalizedSignalQuery(query) {
-  if (!UUID_RE9.test(query.workspaceId)) {
+  if (!UUID_RE10.test(query.workspaceId)) {
     throw new Error("--workspace-id must be a UUID");
   }
-  if (query.in_reply_to !== void 0 && !UUID_RE9.test(query.in_reply_to)) {
+  if (query.in_reply_to !== void 0 && !UUID_RE10.test(query.in_reply_to)) {
     throw new Error("in_reply_to must be a signal UUID");
   }
   const after = checkedAfter(query.after);
@@ -30081,7 +30240,7 @@ async function runInboxFollow(options) {
 // src/cloud/arrival-watch.ts
 var import_node_os4 = require("node:os");
 var import_node_path4 = require("node:path");
-var UUID_RE10 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE11 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var CURSOR_MAX_BYTES = 4 * 1024;
 var ARRIVAL_SNIPPET_MAX = 180;
 var ARRIVAL_WATCH_POLL_MS = 25e3;
@@ -30149,7 +30308,7 @@ function parseCursor(raw, workspaceId2, principalId) {
   }
   const row = value;
   const cursor = row.cursor;
-  if (row.version !== 1 || row.workspace_id !== workspaceId2.toLowerCase() || row.principal_id !== principalId.toLowerCase() || !(cursor === null || typeof cursor === "object" && !Array.isArray(cursor) && typeof cursor.created_at === "string" && Number.isFinite(Date.parse(cursor.created_at)) && typeof cursor.id === "string" && UUID_RE10.test(cursor.id))) {
+  if (row.version !== 1 || row.workspace_id !== workspaceId2.toLowerCase() || row.principal_id !== principalId.toLowerCase() || !(cursor === null || typeof cursor === "object" && !Array.isArray(cursor) && typeof cursor.created_at === "string" && Number.isFinite(Date.parse(cursor.created_at)) && typeof cursor.id === "string" && UUID_RE11.test(cursor.id))) {
     throw new Error("stored arrival cursor is malformed");
   }
   if (cursor === null) return null;
@@ -30161,7 +30320,7 @@ function parseCursor(raw, workspaceId2, principalId) {
 function fileArrivalCursorStore(options) {
   const workspaceId2 = options.workspaceId.toLowerCase();
   const principalId = options.principalId.toLowerCase();
-  if (!UUID_RE10.test(workspaceId2) || !UUID_RE10.test(principalId)) {
+  if (!UUID_RE11.test(workspaceId2) || !UUID_RE11.test(principalId)) {
     throw new Error("arrival cursor identity must use workspace and principal UUIDs");
   }
   const location2 = arrivalCursorPath(
@@ -30343,7 +30502,7 @@ async function runArrivalWatch(options) {
 }
 
 // src/cloud/delivery-receipts.ts
-var UUID_RE11 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE12 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var DeliveryReceiptReadError = class extends Error {
   constructor(code, message, status = null) {
     super(message);
@@ -30362,7 +30521,7 @@ var ACK_OUTCOMES = /* @__PURE__ */ new Set([
   "failed_terminal"
 ]);
 function uuid4(value, field) {
-  if (typeof value !== "string" || !UUID_RE11.test(value)) {
+  if (typeof value !== "string" || !UUID_RE12.test(value)) {
     throw new DeliveryReceiptReadError(
       "protocol",
       `delivery receipt returned a malformed ${field}`
@@ -30919,161 +31078,753 @@ function signalReceiptJsonPayload(report, nowMs = Date.now()) {
   };
 }
 
-// src/cloud/agent-signal-receipts.ts
-var AGENT_SEEN_BATCH_MAX = 50;
-var AGENT_SEEN_TIMEOUT_MS = 5e3;
-var AgentSeenReportError = class extends Error {
-  constructor(code, message, status = null) {
+// src/cloud/delivery.ts
+var UUID_RE13 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var RFC3339_TIMESTAMP_RE = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.\d+)?(?:Z|([+-]\d{2}):(\d{2}))$/i;
+var DELIVERY_KINDS = /* @__PURE__ */ new Set(["ask", "note"]);
+var SENDER_OWNER_RELATIONS2 = /* @__PURE__ */ new Set([
+  "same_owner",
+  "cross_owner",
+  "unknown"
+]);
+var DELIVERY_ACK_OUTCOMES = /* @__PURE__ */ new Set([
+  "replied",
+  "observed",
+  "queued",
+  "expired",
+  "failed_terminal"
+]);
+var DELIVERY_HANDLED_OUTCOMES = new Set(
+  [...DELIVERY_ACK_OUTCOMES].filter(
+    (outcome) => outcome === "replied" || outcome === "observed"
+  )
+);
+var DELIVERY_PROVIDER_PROVEN_OUTCOMES = new Set(
+  [...DELIVERY_ACK_OUTCOMES].filter((outcome) => outcome === "replied")
+);
+function orList(values2) {
+  return values2.length <= 1 ? values2.join("") : `${values2.slice(0, -1).join(", ")}, or ${values2[values2.length - 1]}`;
+}
+var DELIVERY_REQUEST_TIMEOUT_MS = 3e4;
+var COMMAND_ID_VALIDATOR_RE = /^[A-Za-z0-9_-]{8,72}$/;
+var FAILED_TERMINAL_CODES_SET = /* @__PURE__ */ new Set([
+  "provider_refused",
+  "local_effect_failed",
+  "host_session_failed",
+  "credential_unavailable"
+]);
+var SERVER_ERROR_CODES_SET = /* @__PURE__ */ new Set([
+  "unauthenticated",
+  "fresh_auth_required",
+  "invalid_request",
+  "payload_too_large",
+  "forbidden",
+  "delivery_unavailable",
+  "delivery_ack_conflict",
+  "command_id_conflict",
+  "rate_limited",
+  "upgrade_required",
+  "temporarily_unavailable",
+  "internal_error"
+]);
+var DELIVERY_FAILED_TERMINAL_CODES = Object.freeze([
+  "provider_refused",
+  "local_effect_failed",
+  "host_session_failed",
+  "credential_unavailable"
+]);
+var DELIVERY_SERVER_ERROR_CODES = Object.freeze([
+  "unauthenticated",
+  "fresh_auth_required",
+  "invalid_request",
+  "payload_too_large",
+  "forbidden",
+  "delivery_unavailable",
+  "delivery_ack_conflict",
+  "command_id_conflict",
+  "rate_limited",
+  "upgrade_required",
+  "temporarily_unavailable",
+  "internal_error"
+]);
+var DELIVERY_UNKNOWN_ERROR_CODE = "unknown_error";
+function observationCommandId(signalId) {
+  checkedUuidRequest(signalId, "signalId");
+  return `observe_${signalId.toLowerCase().replaceAll("-", "")}`;
+}
+var DeliveryTransportError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "DeliveryTransportError";
+  }
+};
+var DeliveryHttpError = class extends Error {
+  constructor(status, code, message, retryAfterMs = null) {
     super(message);
-    this.code = code;
     this.status = status;
-    this.name = "AgentSeenReportError";
+    this.code = code;
+    this.retryAfterMs = retryAfterMs;
+    this.name = "DeliveryHttpError";
   }
-  code;
   status;
+  code;
+  retryAfterMs;
 };
-function renderedBroadcastIds(rows3) {
-  return [...new Set(rows3.filter(
-    (row) => row.to === null && row.to_agent === null
-  ).map((row) => row.id))];
+var DeliveryProtocolError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "DeliveryProtocolError";
+  }
+};
+function checkedUuid3(value, field) {
+  if (typeof value !== "string" || !UUID_RE13.test(value)) {
+    throw new DeliveryProtocolError(
+      `delivery response returned a malformed ${field}`
+    );
+  }
+  return value.toLowerCase();
 }
-function agentSeenBatches(ids) {
-  const unique = [...new Set(ids)];
-  const batches = [];
-  for (let offset = 0; offset < unique.length; offset += AGENT_SEEN_BATCH_MAX) {
-    batches.push(unique.slice(offset, offset + AGENT_SEEN_BATCH_MAX));
+function isLeapYear(year) {
+  return year % 4 === 0 && year % 100 !== 0 || year % 400 === 0;
+}
+function daysInMonth(year, month) {
+  switch (month) {
+    case 1:
+    case 3:
+    case 5:
+    case 7:
+    case 8:
+    case 10:
+    case 12:
+      return 31;
+    case 4:
+    case 6:
+    case 9:
+    case 11:
+      return 30;
+    case 2:
+      return isLeapYear(year) ? 29 : 28;
+    default:
+      return 0;
   }
-  return batches;
 }
-async function postAgentSeenBatch(target2, token, workspaceId2, signalIds, fetcher) {
-  const controller = new AbortController();
-  const timer2 = setTimeout(() => controller.abort(), AGENT_SEEN_TIMEOUT_MS);
-  let response;
-  try {
-    response = await fetcher(commandEndpoint(target2), {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${token}`,
-        apikey: target2.anonKey,
-        "content-type": "application/json"
-      },
-      body: JSON.stringify({
-        command_id: newCommandId(),
-        client_version: CLIENT_PROTOCOL_VERSION,
-        workspace_id: workspaceId2,
-        stream: { kind: "workspace" },
-        command: { kind: "signals_seen", signal_ids: signalIds }
-      }),
-      signal: controller.signal
-    });
-  } catch {
-    throw new AgentSeenReportError(
-      "transport",
-      "agent seen report did not reach the command service"
+function checkedRfc3339Timestamp(value, field) {
+  if (typeof value !== "string") {
+    throw new DeliveryProtocolError(
+      `delivery response returned a malformed ${field}`
     );
-  } finally {
-    clearTimeout(timer2);
   }
-  if (!response.ok) {
-    throw new AgentSeenReportError(
-      "http",
-      `agent seen report was refused with HTTP ${response.status}`,
-      response.status
+  const match = RFC3339_TIMESTAMP_RE.exec(value);
+  if (!match) {
+    throw new DeliveryProtocolError(
+      `delivery response returned a malformed ${field}`
     );
   }
-  let body;
-  try {
-    body = await response.json();
-  } catch {
-    throw new AgentSeenReportError(
-      "protocol",
-      "agent seen report returned malformed JSON",
-      response.status
+  const year = parseInt(match[1], 10);
+  const month = parseInt(match[2], 10);
+  const day = parseInt(match[3], 10);
+  const hour = parseInt(match[4], 10);
+  const minute = parseInt(match[5], 10);
+  const second = parseInt(match[6], 10);
+  if (month < 1 || month > 12 || day < 1 || day > daysInMonth(year, month) || hour < 0 || hour > 23 || minute < 0 || minute > 59 || second < 0 || second > 59) {
+    throw new DeliveryProtocolError(
+      `delivery response returned a malformed ${field}`
     );
   }
-  if (!body || typeof body !== "object" || Array.isArray(body) || body.ok !== true) {
-    throw new AgentSeenReportError(
-      "protocol",
-      "agent seen report returned a malformed acknowledgement",
-      response.status
+  if (match[7] !== void 0 && match[8] !== void 0) {
+    const offsetHour = Math.abs(parseInt(match[7], 10));
+    const offsetMin = parseInt(match[8], 10);
+    if (offsetHour > 23 || offsetMin < 0 || offsetMin > 59) {
+      throw new DeliveryProtocolError(
+        `delivery response returned a malformed ${field}`
+      );
+    }
+  }
+  if (!Number.isFinite(Date.parse(value))) {
+    throw new DeliveryProtocolError(
+      `delivery response returned a malformed ${field}`
     );
   }
+  return value;
 }
-async function reportRenderedBroadcasts(target2, token, workspaceId2, signalIds, fetcher = fetch) {
-  const batches = agentSeenBatches(signalIds);
-  const failures = [];
-  let reported = 0;
-  for (const batch of batches) {
-    try {
-      await postAgentSeenBatch(target2, token, workspaceId2, batch, fetcher);
-      reported += batch.length;
-    } catch (error) {
-      failures.push(
-        error instanceof AgentSeenReportError ? error.code : "transport"
+function checkedLiveLease(leasedUntil, now) {
+  if (Date.parse(leasedUntil) <= now()) {
+    throw new DeliveryProtocolError(
+      "delivery claim response returned an already expired lease"
+    );
+  }
+}
+function checkedRelation(value) {
+  if (typeof value !== "string" || !SENDER_OWNER_RELATIONS2.has(value)) {
+    throw new DeliveryProtocolError(
+      "delivery response returned a malformed sender_owner_relation"
+    );
+  }
+  return value;
+}
+function checkedNonNegativeCount(value, field) {
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) {
+    throw new DeliveryProtocolError(
+      `delivery response returned a malformed ${field}`
+    );
+  }
+  return value;
+}
+function checkedClaimCapabilities(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new DeliveryProtocolError(
+      "delivery claim response is missing delivery capabilities"
+    );
+  }
+  const row = value;
+  for (const marker of ["delivery_claim", "delivery_ack", "sender_owner_relation"]) {
+    if (row[marker] !== 1) {
+      throw new DeliveryProtocolError(
+        `delivery claim response is missing the ${marker} capability`
       );
     }
   }
-  return { attempted: new Set(signalIds).size, reported, failures };
+  return { deliveryClaim: true, deliveryAck: true, senderOwnerRelation: true };
 }
-
-// src/host/opencode.ts
-var import_node_child_process3 = require("node:child_process");
-var import_node_crypto12 = require("node:crypto");
-
-// src/host/credential-redaction.ts
-var EXOTIC_SEPARATORS = "\\u00a0\\u1680\\u2000-\\u200d\\u2028\\u2029\\u202a-\\u202e\\u2060\\u2066-\\u2069\\u202f\\u205f\\u3000\\ufeff";
-var SEPARATOR_CLASS_SOURCE = "\\t\\n\\x0b\\f\\r " + EXOTIC_SEPARATORS;
-var ANSI_ESCAPE_GLOBAL_RE2 = new RegExp("\\u001b\\[[0-?]*[ -\\/]*[@-~]", "g");
-var CONTROL_AND_SEPARATOR_STRIP_RE = new RegExp(
-  "[\\u0000-\\u0008\\u000b-\\u001f\\u007f-\\u009f" + EXOTIC_SEPARATORS + "]",
-  "g"
-);
-var CREDENTIAL_PREFIX_RE = new RegExp(
-  `swm_(?:agt|inv|cap)_[^${SEPARATOR_CLASS_SOURCE}]*`,
-  "gi"
-);
-function redactCredentialText(value) {
-  return value.replace(ANSI_ESCAPE_GLOBAL_RE2, "").replace(CONTROL_AND_SEPARATOR_STRIP_RE, "").replace(CREDENTIAL_PREFIX_RE, "[redacted-credential]");
+function checkedOptionalUuidArray(value, field) {
+  if (value === void 0) return;
+  if (!Array.isArray(value) || value.some((item) => typeof item !== "string" || !UUID_RE13.test(item))) {
+    throw new DeliveryProtocolError(
+      `delivery response returned a malformed ${field}`
+    );
+  }
 }
-
-// src/host/stderr-tail.ts
-var RING_CAPACITY_BYTES = 4096;
-var TAIL_MAX_CHARS = 2048;
-var STDERR_EXIT_GRACE_MS = 100;
-var STDERR_READABLE_END_GRACE_MS = STDERR_EXIT_GRACE_MS + 50;
-function sanitizeStderrTail(raw) {
-  return redactCredentialText(raw).slice(-TAIL_MAX_CHARS).trim();
+function checkedOptionalArray(value, field) {
+  if (value === void 0) return;
+  if (!Array.isArray(value)) {
+    throw new DeliveryProtocolError(
+      `delivery response returned a malformed ${field}`
+    );
+  }
 }
-function attachStderrTailRing(stderr) {
-  const chunks = [];
-  let total = 0;
-  let evicted = false;
-  stderr.on("data", (chunk) => {
-    const buffer2 = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
-    chunks.push(buffer2);
-    total += buffer2.length;
-    while (total > RING_CAPACITY_BYTES && chunks.length > 0) {
-      evicted = true;
-      const head2 = chunks[0];
-      const excess = total - RING_CAPACITY_BYTES;
-      if (head2.length <= excess) {
-        chunks.shift();
-        total -= head2.length;
-      } else {
-        chunks[0] = head2.subarray(excess);
-        total -= excess;
-      }
+function parseDeliveryRow(value, expected, index, now) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new DeliveryProtocolError(
+      "delivery claim response returned a malformed delivery row"
+    );
+  }
+  const row = value;
+  let signal;
+  try {
+    signal = parseSignalRecord(row.signal);
+  } catch {
+    throw new DeliveryProtocolError(
+      `delivery claim response returned a malformed signal at ${index}`
+    );
+  }
+  if (signal.workspace_id !== expected.workspaceId) {
+    throw new DeliveryProtocolError(
+      "delivery claim response returned a signal for another workspace"
+    );
+  }
+  if (signal.to_agent !== expected.principalId) {
+    throw new DeliveryProtocolError(
+      "delivery claim response returned a signal addressed to another agent"
+    );
+  }
+  if (!DELIVERY_KINDS.has(signal.kind)) {
+    throw new DeliveryProtocolError(
+      "delivery claim response returned a non-direct signal kind"
+    );
+  }
+  const senderOwnerRelation = checkedRelation(row.sender_owner_relation);
+  const leaseId = checkedUuid3(row.lease_id, "lease_id");
+  const leasedUntil = checkedRfc3339Timestamp(row.leased_until, "leased_until");
+  checkedLiveLease(leasedUntil, now);
+  signal.sender_owner_relation = senderOwnerRelation;
+  return { signal, leaseId, leasedUntil, senderOwnerRelation };
+}
+function parseClaimSuccess(body, expected, now) {
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    throw new DeliveryProtocolError("delivery claim response was not an object");
+  }
+  const row = body;
+  if (row.status !== "accepted" || row.ok !== true) {
+    throw new DeliveryProtocolError(
+      "delivery claim response did not report accepted ok"
+    );
+  }
+  const capabilities = checkedClaimCapabilities(row.capabilities);
+  checkedOptionalUuidArray(row.event_ids, "event_ids");
+  checkedOptionalArray(row.events, "events");
+  if (!Array.isArray(row.deliveries)) {
+    throw new DeliveryProtocolError(
+      "delivery claim response is missing its deliveries array"
+    );
+  }
+  const deliveries = row.deliveries.map(
+    (item, index) => parseDeliveryRow(item, expected, index, now)
+  );
+  const signalIds = /* @__PURE__ */ new Set();
+  const leaseIds = /* @__PURE__ */ new Set();
+  for (const delivery of deliveries) {
+    if (signalIds.has(delivery.signal.id)) {
+      throw new DeliveryProtocolError(
+        "delivery claim response repeats a signal id"
+      );
     }
-  });
-  stderr.resume();
-  return {
-    read() {
-      let text = Buffer.concat(chunks).toString("utf8");
-      if (evicted) {
-        const newline = text.indexOf("\n");
-        text = newline === -1 ? "" : text.slice(newline + 1);
-      }
-      return sanitizeStderrTail(text);
+    signalIds.add(delivery.signal.id);
+    if (leaseIds.has(delivery.leaseId)) {
+      throw new DeliveryProtocolError(
+        "delivery claim response repeats a lease id"
+      );
+    }
+    leaseIds.add(delivery.leaseId);
+  }
+  if (deliveries.length > 1) {
+    throw new DeliveryProtocolError(
+      "delivery claim response returned more than one delivery"
+    );
+  }
+  const pendingDeliveryCount = checkedNonNegativeCount(
+    row.pending_delivery_count,
+    "pending_delivery_count"
+  );
+  const terminalDeliveryFailureCount = checkedNonNegativeCount(
+    row.terminal_delivery_failure_count,
+    "terminal_delivery_failure_count"
+  );
+  if (deliveries.length > pendingDeliveryCount) {
+    throw new DeliveryProtocolError(
+      "delivery claim response returned more deliveries than its pending count"
+    );
+  }
+  return {
+    capabilities,
+    deliveries,
+    pendingDeliveryCount,
+    terminalDeliveryFailureCount
+  };
+}
+function parseAckSuccess(body, expected) {
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    throw new DeliveryProtocolError(
+      "delivery acknowledgement response was not an object"
+    );
+  }
+  const row = body;
+  if (row.status !== "accepted" || row.ok !== true) {
+    throw new DeliveryProtocolError(
+      "delivery acknowledgement response did not report accepted ok"
+    );
+  }
+  checkedOptionalUuidArray(row.event_ids, "event_ids");
+  checkedOptionalArray(row.events, "events");
+  if (row.signal_id !== expected.signalId) {
+    throw new DeliveryProtocolError(
+      "delivery acknowledgement response echoed a different signal id"
+    );
+  }
+  if (row.outcome !== expected.outcome) {
+    throw new DeliveryProtocolError(
+      "delivery acknowledgement response echoed a different outcome"
+    );
+  }
+}
+function checkedCommandId(value) {
+  if (typeof value !== "string" || !COMMAND_ID_VALIDATOR_RE.test(value)) {
+    throw new Error(
+      "a delivery command id must be 8..72 characters of [A-Za-z0-9_-]"
+    );
+  }
+  return value;
+}
+function checkedUuidRequest(value, field) {
+  if (!UUID_RE13.test(value)) {
+    throw new Error(`${field} must be a UUID for an agent delivery command`);
+  }
+}
+function assertAckRequest(request) {
+  checkedCommandId(request.commandId);
+  assertAgentToken(request.credential);
+  checkedUuidRequest(request.workspaceId, "workspaceId");
+  checkedUuidRequest(request.signalId, "signalId");
+  checkedUuidRequest(request.leaseId, "leaseId");
+  checkedUuidRequest(request.listenerInstanceId, "listenerInstanceId");
+  if (!DELIVERY_ACK_OUTCOMES.has(request.outcome)) {
+    throw new Error(
+      `a delivery outcome must be ${orList([...DELIVERY_ACK_OUTCOMES])}`
+    );
+  }
+  if (request.outcome === "failed_terminal") {
+    if (typeof request.lastErrorCode !== "string" || !FAILED_TERMINAL_CODES_SET.has(request.lastErrorCode)) {
+      throw new Error(
+        `a failed_terminal acknowledgement requires one of ${orList([...FAILED_TERMINAL_CODES_SET])}`
+      );
+    }
+  } else if (request.lastErrorCode !== null) {
+    throw new Error(
+      "a non-failed acknowledgement must send lastErrorCode null"
+    );
+  }
+}
+function boundedDeliveryErrorCode(body) {
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    return DELIVERY_UNKNOWN_ERROR_CODE;
+  }
+  const error = body.error;
+  if (typeof error === "string" && SERVER_ERROR_CODES_SET.has(error)) {
+    return error;
+  }
+  return DELIVERY_UNKNOWN_ERROR_CODE;
+}
+function refusal(response, text) {
+  let code = DELIVERY_UNKNOWN_ERROR_CODE;
+  try {
+    code = boundedDeliveryErrorCode(JSON.parse(text));
+  } catch {
+  }
+  const retryAfterMs = parseRetryAfterMs(response.headers.get("retry-after"));
+  return new DeliveryHttpError(
+    response.status,
+    code,
+    `delivery command failed (HTTP ${response.status}): ${code}`,
+    retryAfterMs
+  );
+}
+function successBody(response, text, verb) {
+  try {
+    return JSON.parse(text);
+  } catch {
+    throw new DeliveryProtocolError(
+      `${verb} response was not JSON (HTTP ${response.status})`
+    );
+  }
+}
+var DeliveryCommandClient = class {
+  constructor(target2, fetcher = fetch, options = {}) {
+    this.target = target2;
+    this.fetcher = fetcher;
+    this.deadlineMs = options.deadlineMs ?? DELIVERY_REQUEST_TIMEOUT_MS;
+    this.now = options.now ?? Date.now;
+    this.clearTimeoutFn = options.clearTimeout ?? ((timer2) => clearTimeout(timer2));
+    this.createAbortControllerFn = options.createAbortController ?? (() => new AbortController());
+  }
+  target;
+  fetcher;
+  deadlineMs;
+  now;
+  clearTimeoutFn;
+  createAbortControllerFn;
+  async post(request, command2, verb) {
+    if (this.deadlineMs <= 0) {
+      throw new DeliveryTransportError(`${verb} request timed out`);
+    }
+    const deadlineController = this.createAbortControllerFn();
+    let timedOut = false;
+    const signal = deadlineController.signal;
+    let onAbort = () => {
+    };
+    const aborted = new Promise((resolve3) => {
+      onAbort = () => resolve3("timeout");
+      if (signal.aborted) {
+        onAbort();
+      } else {
+        signal.addEventListener("abort", onAbort, { once: true });
+      }
+    });
+    const timer2 = setTimeout(() => {
+      timedOut = true;
+      deadlineController.abort();
+    }, this.deadlineMs);
+    try {
+      if (signal.aborted) {
+        throw new DeliveryTransportError(`${verb} request timed out`);
+      }
+      const read = (async () => {
+        let response;
+        try {
+          response = await this.fetcher(commandEndpoint(this.target), {
+            method: "POST",
+            headers: {
+              authorization: `Bearer ${request.credential}`,
+              apikey: this.target.anonKey,
+              "content-type": "application/json"
+            },
+            body: JSON.stringify({
+              command_id: request.commandId,
+              client_version: CLIENT_PROTOCOL_VERSION,
+              workspace_id: request.workspaceId.toLowerCase(),
+              stream: { kind: "workspace" },
+              command: command2
+            }),
+            signal
+          });
+        } catch (error) {
+          if (signal.aborted || timedOut || error?.name === "AbortError") {
+            return "timeout";
+          }
+          throw new DeliveryTransportError(
+            `${verb} request failed before a response`
+          );
+        }
+        if (signal.aborted || timedOut) return "timeout";
+        let text;
+        try {
+          text = await response.text();
+        } catch {
+          if (signal.aborted || timedOut) return "timeout";
+          throw new DeliveryTransportError(
+            `${verb} response body was interrupted`
+          );
+        }
+        if (signal.aborted || timedOut) return "timeout";
+        return { response, text };
+      })();
+      const raced = await Promise.race([read, aborted]);
+      if (raced === "timeout") {
+        throw new DeliveryTransportError(`${verb} request timed out`);
+      }
+      return raced;
+    } finally {
+      this.clearTimeoutFn(timer2);
+      signal.removeEventListener("abort", onAbort);
+    }
+  }
+  /** Claim the caller's own single unacked direct-signal delivery row. */
+  async claimAgentInbox(request) {
+    checkedCommandId(request.commandId);
+    assertAgentToken(request.credential);
+    checkedUuidRequest(request.workspaceId, "workspaceId");
+    checkedUuidRequest(request.listenerInstanceId, "listenerInstanceId");
+    checkedUuidRequest(request.expectedPrincipalId, "expectedPrincipalId");
+    const { response, text } = await this.post(request, {
+      kind: "claim_agent_inbox",
+      listener_instance_id: request.listenerInstanceId.toLowerCase(),
+      limit: 1
+    }, "delivery claim");
+    if (!response.ok) throw refusal(response, text);
+    const parsed = parseClaimSuccess(
+      successBody(response, text, "delivery claim"),
+      {
+        workspaceId: request.workspaceId.toLowerCase(),
+        principalId: request.expectedPrincipalId.toLowerCase()
+      },
+      this.now
+    );
+    return {
+      httpStatus: response.status,
+      capabilities: parsed.capabilities,
+      deliveries: parsed.deliveries,
+      pendingDeliveryCount: parsed.pendingDeliveryCount,
+      terminalDeliveryFailureCount: parsed.terminalDeliveryFailureCount
+    };
+  }
+  /** Acknowledge one leased delivery with an exact terminal outcome. */
+  async ackAgentDelivery(request) {
+    assertAckRequest(request);
+    const { response, text } = await this.post(request, {
+      kind: "ack_agent_delivery",
+      signal_id: request.signalId.toLowerCase(),
+      lease_id: request.leaseId.toLowerCase(),
+      listener_instance_id: request.listenerInstanceId.toLowerCase(),
+      outcome: request.outcome,
+      last_error_code: request.lastErrorCode
+    }, "delivery acknowledgement");
+    if (!response.ok) throw refusal(response, text);
+    parseAckSuccess(
+      successBody(response, text, "delivery acknowledgement"),
+      {
+        signalId: request.signalId.toLowerCase(),
+        outcome: request.outcome
+      }
+    );
+    return {
+      httpStatus: response.status,
+      signalId: request.signalId.toLowerCase(),
+      outcome: request.outcome
+    };
+  }
+  /** Mark a queued delivery observed only after the interactive hook surfaced it. */
+  async observeQueuedAgentDelivery(request) {
+    checkedCommandId(request.commandId);
+    assertAgentToken(request.credential);
+    checkedUuidRequest(request.workspaceId, "workspaceId");
+    checkedUuidRequest(request.signalId, "signalId");
+    const { response, text } = await this.post(request, {
+      kind: "ack_agent_delivery",
+      signal_id: request.signalId.toLowerCase(),
+      lease_id: null,
+      listener_instance_id: null,
+      outcome: "observed",
+      last_error_code: null
+    }, "delivery observation");
+    if (!response.ok) throw refusal(response, text);
+    parseAckSuccess(
+      successBody(response, text, "delivery observation"),
+      {
+        signalId: request.signalId.toLowerCase(),
+        outcome: "observed"
+      }
+    );
+    return {
+      httpStatus: response.status,
+      signalId: request.signalId.toLowerCase(),
+      outcome: "observed"
+    };
+  }
+};
+
+// src/cloud/agent-signal-receipts.ts
+var AGENT_SEEN_BATCH_MAX = 50;
+var AGENT_SEEN_TIMEOUT_MS = 5e3;
+var AgentSeenReportError = class extends Error {
+  constructor(code, message, status = null) {
+    super(message);
+    this.code = code;
+    this.status = status;
+    this.name = "AgentSeenReportError";
+  }
+  code;
+  status;
+};
+function renderedBroadcastIds(rows3) {
+  return [...new Set(rows3.filter(
+    (row) => row.to === null && row.to_agent === null
+  ).map((row) => row.id))];
+}
+function agentSeenBatches(ids) {
+  const unique = [...new Set(ids)];
+  const batches = [];
+  for (let offset = 0; offset < unique.length; offset += AGENT_SEEN_BATCH_MAX) {
+    batches.push(unique.slice(offset, offset + AGENT_SEEN_BATCH_MAX));
+  }
+  return batches;
+}
+async function postAgentSeenBatch(target2, token, workspaceId2, signalIds, fetcher) {
+  const controller = new AbortController();
+  const timer2 = setTimeout(() => controller.abort(), AGENT_SEEN_TIMEOUT_MS);
+  let response;
+  try {
+    response = await fetcher(commandEndpoint(target2), {
+      method: "POST",
+      headers: {
+        authorization: `Bearer ${token}`,
+        apikey: target2.anonKey,
+        "content-type": "application/json"
+      },
+      body: JSON.stringify({
+        command_id: newCommandId(),
+        client_version: CLIENT_PROTOCOL_VERSION,
+        workspace_id: workspaceId2,
+        stream: { kind: "workspace" },
+        command: { kind: "signals_seen", signal_ids: signalIds }
+      }),
+      signal: controller.signal
+    });
+  } catch {
+    throw new AgentSeenReportError(
+      "transport",
+      "agent seen report did not reach the command service"
+    );
+  } finally {
+    clearTimeout(timer2);
+  }
+  if (!response.ok) {
+    throw new AgentSeenReportError(
+      "http",
+      `agent seen report was refused with HTTP ${response.status}`,
+      response.status
+    );
+  }
+  let body;
+  try {
+    body = await response.json();
+  } catch {
+    throw new AgentSeenReportError(
+      "protocol",
+      "agent seen report returned malformed JSON",
+      response.status
+    );
+  }
+  if (!body || typeof body !== "object" || Array.isArray(body) || body.ok !== true) {
+    throw new AgentSeenReportError(
+      "protocol",
+      "agent seen report returned a malformed acknowledgement",
+      response.status
+    );
+  }
+}
+async function reportRenderedBroadcasts(target2, token, workspaceId2, signalIds, fetcher = fetch) {
+  const batches = agentSeenBatches(signalIds);
+  const failures = [];
+  let reported = 0;
+  for (const batch of batches) {
+    try {
+      await postAgentSeenBatch(target2, token, workspaceId2, batch, fetcher);
+      reported += batch.length;
+    } catch (error) {
+      failures.push(
+        error instanceof AgentSeenReportError ? error.code : "transport"
+      );
+    }
+  }
+  return { attempted: new Set(signalIds).size, reported, failures };
+}
+
+// src/host/opencode.ts
+var import_node_child_process3 = require("node:child_process");
+var import_node_crypto12 = require("node:crypto");
+
+// src/host/credential-redaction.ts
+var EXOTIC_SEPARATORS = "\\u00a0\\u1680\\u2000-\\u200d\\u2028\\u2029\\u202a-\\u202e\\u2060\\u2066-\\u2069\\u202f\\u205f\\u3000\\ufeff";
+var SEPARATOR_CLASS_SOURCE = "\\t\\n\\x0b\\f\\r " + EXOTIC_SEPARATORS;
+var ANSI_ESCAPE_GLOBAL_RE2 = new RegExp("\\u001b\\[[0-?]*[ -\\/]*[@-~]", "g");
+var CONTROL_AND_SEPARATOR_STRIP_RE = new RegExp(
+  "[\\u0000-\\u0008\\u000b-\\u001f\\u007f-\\u009f" + EXOTIC_SEPARATORS + "]",
+  "g"
+);
+var CREDENTIAL_PREFIX_RE = new RegExp(
+  `swm_(?:agt|inv|cap)_[^${SEPARATOR_CLASS_SOURCE}]*`,
+  "gi"
+);
+function redactCredentialText(value) {
+  return value.replace(ANSI_ESCAPE_GLOBAL_RE2, "").replace(CONTROL_AND_SEPARATOR_STRIP_RE, "").replace(CREDENTIAL_PREFIX_RE, "[redacted-credential]");
+}
+
+// src/host/stderr-tail.ts
+var RING_CAPACITY_BYTES = 4096;
+var TAIL_MAX_CHARS = 2048;
+var STDERR_EXIT_GRACE_MS = 100;
+var STDERR_READABLE_END_GRACE_MS = STDERR_EXIT_GRACE_MS + 50;
+function sanitizeStderrTail(raw) {
+  return redactCredentialText(raw).slice(-TAIL_MAX_CHARS).trim();
+}
+function attachStderrTailRing(stderr) {
+  const chunks = [];
+  let total = 0;
+  let evicted = false;
+  stderr.on("data", (chunk) => {
+    const buffer2 = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+    chunks.push(buffer2);
+    total += buffer2.length;
+    while (total > RING_CAPACITY_BYTES && chunks.length > 0) {
+      evicted = true;
+      const head2 = chunks[0];
+      const excess = total - RING_CAPACITY_BYTES;
+      if (head2.length <= excess) {
+        chunks.shift();
+        total -= head2.length;
+      } else {
+        chunks[0] = head2.subarray(excess);
+        total -= excess;
+      }
+    }
+  });
+  stderr.resume();
+  return {
+    read() {
+      let text = Buffer.concat(chunks).toString("utf8");
+      if (evicted) {
+        const newline = text.indexOf("\n");
+        text = newline === -1 ? "" : text.slice(newline + 1);
+      }
+      return sanitizeStderrTail(text);
     }
   };
 }
@@ -33739,7 +34490,7 @@ async function resolveBudgetAndPrompt(session, prompt, budget) {
 }
 
 // src/listener/engine.ts
-var UUID_RE12 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE14 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var TERMINAL_STATES = /* @__PURE__ */ new Set(["done", "expired", "failed"]);
 var REPLY_MAX_CODE_UNITS = 2e3;
 var TRUNCATION_SUFFIX = "\n[Reply truncated by CommonSwarm]";
@@ -33747,7 +34498,7 @@ var UNSAFE_CONTROLS_RE = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f\u
 var LISTENER_MAX_PROMPT_ATTEMPTS = 3;
 var LISTENER_MAX_POST_ATTEMPTS = 5;
 function listenerReplyCommandId(signalId, effectOrdinal = 0) {
-  if (!UUID_RE12.test(signalId)) {
+  if (!UUID_RE14.test(signalId)) {
     throw new Error("listener signal id must be a UUID");
   }
   if (!Number.isSafeInteger(effectOrdinal) || effectOrdinal < 0) {
@@ -34240,7 +34991,7 @@ var import_node_crypto13 = require("node:crypto");
 var import_node_os6 = require("node:os");
 var import_node_path9 = require("node:path");
 var import_node_util = require("node:util");
-var UUID_RE13 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE15 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var COMMAND_ID_RE2 = /^[A-Za-z0-9_-]{8,72}$/;
 var MAX_EFFECT_BYTES = 1024 * 1024;
 var STATES = /* @__PURE__ */ new Set([
@@ -34290,7 +35041,7 @@ function defaultListenerStateDirectory() {
   return process.env.XDG_STATE_HOME ? (0, import_node_path9.join)(process.env.XDG_STATE_HOME, "cswarm", "listeners") : (0, import_node_path9.join)((0, import_node_os6.homedir)(), ".cswarm", "listeners");
 }
 function listenerInstanceKey(input) {
-  if (!UUID_RE13.test(input.workspaceId) || !UUID_RE13.test(input.principalId)) {
+  if (!UUID_RE15.test(input.workspaceId) || !UUID_RE15.test(input.principalId)) {
     throw new Error("listener workspace and principal ids must be UUIDs");
   }
   if (!input.profileId || input.profileId.includes("\0")) {
@@ -34323,7 +35074,7 @@ function parseListenerEffectRecord(raw, expectedId) {
   }
   const row = value;
   rejectSensitiveKeys(row);
-  if (typeof row.version !== "number" || row.version !== 1 && row.version !== 2 || typeof row.signalId !== "string" || row.signalId.toLowerCase() !== expectedId || !UUID_RE13.test(row.signalId)) {
+  if (typeof row.version !== "number" || row.version !== 1 && row.version !== 2 || typeof row.signalId !== "string" || row.signalId.toLowerCase() !== expectedId || !UUID_RE15.test(row.signalId)) {
     throw new Error("stored listener effect is malformed");
   }
   if (row.version === 1) {
@@ -34338,7 +35089,7 @@ function upcastV1Ask(row) {
   if (row.effectOrdinal !== 0 || typeof row.commandId !== "string" || !COMMAND_ID_RE2.test(row.commandId) || typeof row.askBody !== "string" || row.askBody.length < 1 || typeof row.askUntil !== "string" || !Number.isFinite(Date.parse(row.askUntil)) || typeof row.senderOwnerRelation !== "string" || !RELATIONS.has(row.senderOwnerRelation) || typeof row.state !== "string" || !STATES.has(row.state) || !integer(row.promptAttempts) || !integer(row.postAttempts) || !nullableString2(row.replyBody, 2e3) || typeof row.replyTruncated !== "boolean" || !nullableString2(row.replySignalId, 64) || !nullableString2(row.failureCode, 96) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt))) {
     throw new Error("stored listener effect is malformed");
   }
-  if (row.replySignalId !== null && !UUID_RE13.test(row.replySignalId)) {
+  if (row.replySignalId !== null && !UUID_RE15.test(row.replySignalId)) {
     throw new Error("stored listener effect is malformed");
   }
   return {
@@ -34377,7 +35128,7 @@ function parseV2Record(row) {
     if (typeof row.commandId !== "string" || !COMMAND_ID_RE2.test(row.commandId) || row.state === "observed") {
       throw new Error("stored listener effect is malformed");
     }
-    if (row.replySignalId !== null && !UUID_RE13.test(row.replySignalId)) {
+    if (row.replySignalId !== null && !UUID_RE15.test(row.replySignalId)) {
       throw new Error("stored listener effect is malformed");
     }
   }
@@ -34401,7 +35152,7 @@ function parseV2Record(row) {
   };
 }
 function newObservedNoteRecord(input) {
-  if (!UUID_RE13.test(input.signalId)) {
+  if (!UUID_RE15.test(input.signalId)) {
     throw new Error("listener note signal id must be a UUID");
   }
   if (input.body.length < 1) {
@@ -34535,7 +35286,7 @@ var FileListenerEffectStore = class {
     );
   }
   checkedId(signalId) {
-    if (!UUID_RE13.test(signalId)) {
+    if (!UUID_RE15.test(signalId)) {
       throw new Error("listener signal id must be a UUID");
     }
     return signalId.toLowerCase();
@@ -35767,590 +36518,9 @@ var CodexListenerModel = class {
 // src/listener/runtime.ts
 var import_node_crypto18 = require("node:crypto");
 
-// src/cloud/delivery.ts
-var UUID_RE14 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-var RFC3339_TIMESTAMP_RE = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.\d+)?(?:Z|([+-]\d{2}):(\d{2}))$/i;
-var DELIVERY_KINDS = /* @__PURE__ */ new Set(["ask", "note"]);
-var SENDER_OWNER_RELATIONS2 = /* @__PURE__ */ new Set([
-  "same_owner",
-  "cross_owner",
-  "unknown"
-]);
-var DELIVERY_ACK_OUTCOMES = /* @__PURE__ */ new Set([
-  "replied",
-  "observed",
-  "queued",
-  "expired",
-  "failed_terminal"
-]);
-var DELIVERY_REQUEST_TIMEOUT_MS = 3e4;
-var COMMAND_ID_VALIDATOR_RE = /^[A-Za-z0-9_-]{8,72}$/;
-var FAILED_TERMINAL_CODES_SET = /* @__PURE__ */ new Set([
-  "provider_refused",
-  "local_effect_failed",
-  "host_session_failed",
-  "credential_unavailable"
-]);
-var SERVER_ERROR_CODES_SET = /* @__PURE__ */ new Set([
-  "unauthenticated",
-  "fresh_auth_required",
-  "invalid_request",
-  "payload_too_large",
-  "forbidden",
-  "delivery_unavailable",
-  "delivery_ack_conflict",
-  "command_id_conflict",
-  "rate_limited",
-  "upgrade_required",
-  "temporarily_unavailable",
-  "internal_error"
-]);
-var DELIVERY_FAILED_TERMINAL_CODES = Object.freeze([
-  "provider_refused",
-  "local_effect_failed",
-  "host_session_failed",
-  "credential_unavailable"
-]);
-var DELIVERY_SERVER_ERROR_CODES = Object.freeze([
-  "unauthenticated",
-  "fresh_auth_required",
-  "invalid_request",
-  "payload_too_large",
-  "forbidden",
-  "delivery_unavailable",
-  "delivery_ack_conflict",
-  "command_id_conflict",
-  "rate_limited",
-  "upgrade_required",
-  "temporarily_unavailable",
-  "internal_error"
-]);
-var DELIVERY_UNKNOWN_ERROR_CODE = "unknown_error";
-function observationCommandId(signalId) {
-  checkedUuidRequest(signalId, "signalId");
-  return `observe_${signalId.toLowerCase().replaceAll("-", "")}`;
-}
-var DeliveryTransportError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "DeliveryTransportError";
-  }
-};
-var DeliveryHttpError = class extends Error {
-  constructor(status, code, message, retryAfterMs = null) {
-    super(message);
-    this.status = status;
-    this.code = code;
-    this.retryAfterMs = retryAfterMs;
-    this.name = "DeliveryHttpError";
-  }
-  status;
-  code;
-  retryAfterMs;
-};
-var DeliveryProtocolError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "DeliveryProtocolError";
-  }
-};
-function checkedUuid3(value, field) {
-  if (typeof value !== "string" || !UUID_RE14.test(value)) {
-    throw new DeliveryProtocolError(
-      `delivery response returned a malformed ${field}`
-    );
-  }
-  return value.toLowerCase();
-}
-function isLeapYear(year) {
-  return year % 4 === 0 && year % 100 !== 0 || year % 400 === 0;
-}
-function daysInMonth(year, month) {
-  switch (month) {
-    case 1:
-    case 3:
-    case 5:
-    case 7:
-    case 8:
-    case 10:
-    case 12:
-      return 31;
-    case 4:
-    case 6:
-    case 9:
-    case 11:
-      return 30;
-    case 2:
-      return isLeapYear(year) ? 29 : 28;
-    default:
-      return 0;
-  }
-}
-function checkedRfc3339Timestamp(value, field) {
-  if (typeof value !== "string") {
-    throw new DeliveryProtocolError(
-      `delivery response returned a malformed ${field}`
-    );
-  }
-  const match = RFC3339_TIMESTAMP_RE.exec(value);
-  if (!match) {
-    throw new DeliveryProtocolError(
-      `delivery response returned a malformed ${field}`
-    );
-  }
-  const year = parseInt(match[1], 10);
-  const month = parseInt(match[2], 10);
-  const day = parseInt(match[3], 10);
-  const hour = parseInt(match[4], 10);
-  const minute = parseInt(match[5], 10);
-  const second = parseInt(match[6], 10);
-  if (month < 1 || month > 12 || day < 1 || day > daysInMonth(year, month) || hour < 0 || hour > 23 || minute < 0 || minute > 59 || second < 0 || second > 59) {
-    throw new DeliveryProtocolError(
-      `delivery response returned a malformed ${field}`
-    );
-  }
-  if (match[7] !== void 0 && match[8] !== void 0) {
-    const offsetHour = Math.abs(parseInt(match[7], 10));
-    const offsetMin = parseInt(match[8], 10);
-    if (offsetHour > 23 || offsetMin < 0 || offsetMin > 59) {
-      throw new DeliveryProtocolError(
-        `delivery response returned a malformed ${field}`
-      );
-    }
-  }
-  if (!Number.isFinite(Date.parse(value))) {
-    throw new DeliveryProtocolError(
-      `delivery response returned a malformed ${field}`
-    );
-  }
-  return value;
-}
-function checkedLiveLease(leasedUntil, now) {
-  if (Date.parse(leasedUntil) <= now()) {
-    throw new DeliveryProtocolError(
-      "delivery claim response returned an already expired lease"
-    );
-  }
-}
-function checkedRelation(value) {
-  if (typeof value !== "string" || !SENDER_OWNER_RELATIONS2.has(value)) {
-    throw new DeliveryProtocolError(
-      "delivery response returned a malformed sender_owner_relation"
-    );
-  }
-  return value;
-}
-function checkedNonNegativeCount(value, field) {
-  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) {
-    throw new DeliveryProtocolError(
-      `delivery response returned a malformed ${field}`
-    );
-  }
-  return value;
-}
-function checkedClaimCapabilities(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new DeliveryProtocolError(
-      "delivery claim response is missing delivery capabilities"
-    );
-  }
-  const row = value;
-  for (const marker of ["delivery_claim", "delivery_ack", "sender_owner_relation"]) {
-    if (row[marker] !== 1) {
-      throw new DeliveryProtocolError(
-        `delivery claim response is missing the ${marker} capability`
-      );
-    }
-  }
-  return { deliveryClaim: true, deliveryAck: true, senderOwnerRelation: true };
-}
-function checkedOptionalUuidArray(value, field) {
-  if (value === void 0) return;
-  if (!Array.isArray(value) || value.some((item) => typeof item !== "string" || !UUID_RE14.test(item))) {
-    throw new DeliveryProtocolError(
-      `delivery response returned a malformed ${field}`
-    );
-  }
-}
-function checkedOptionalArray(value, field) {
-  if (value === void 0) return;
-  if (!Array.isArray(value)) {
-    throw new DeliveryProtocolError(
-      `delivery response returned a malformed ${field}`
-    );
-  }
-}
-function parseDeliveryRow(value, expected, index, now) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new DeliveryProtocolError(
-      "delivery claim response returned a malformed delivery row"
-    );
-  }
-  const row = value;
-  let signal;
-  try {
-    signal = parseSignalRecord(row.signal);
-  } catch {
-    throw new DeliveryProtocolError(
-      `delivery claim response returned a malformed signal at ${index}`
-    );
-  }
-  if (signal.workspace_id !== expected.workspaceId) {
-    throw new DeliveryProtocolError(
-      "delivery claim response returned a signal for another workspace"
-    );
-  }
-  if (signal.to_agent !== expected.principalId) {
-    throw new DeliveryProtocolError(
-      "delivery claim response returned a signal addressed to another agent"
-    );
-  }
-  if (!DELIVERY_KINDS.has(signal.kind)) {
-    throw new DeliveryProtocolError(
-      "delivery claim response returned a non-direct signal kind"
-    );
-  }
-  const senderOwnerRelation = checkedRelation(row.sender_owner_relation);
-  const leaseId = checkedUuid3(row.lease_id, "lease_id");
-  const leasedUntil = checkedRfc3339Timestamp(row.leased_until, "leased_until");
-  checkedLiveLease(leasedUntil, now);
-  signal.sender_owner_relation = senderOwnerRelation;
-  return { signal, leaseId, leasedUntil, senderOwnerRelation };
-}
-function parseClaimSuccess(body, expected, now) {
-  if (!body || typeof body !== "object" || Array.isArray(body)) {
-    throw new DeliveryProtocolError("delivery claim response was not an object");
-  }
-  const row = body;
-  if (row.status !== "accepted" || row.ok !== true) {
-    throw new DeliveryProtocolError(
-      "delivery claim response did not report accepted ok"
-    );
-  }
-  const capabilities = checkedClaimCapabilities(row.capabilities);
-  checkedOptionalUuidArray(row.event_ids, "event_ids");
-  checkedOptionalArray(row.events, "events");
-  if (!Array.isArray(row.deliveries)) {
-    throw new DeliveryProtocolError(
-      "delivery claim response is missing its deliveries array"
-    );
-  }
-  const deliveries = row.deliveries.map(
-    (item, index) => parseDeliveryRow(item, expected, index, now)
-  );
-  const signalIds = /* @__PURE__ */ new Set();
-  const leaseIds = /* @__PURE__ */ new Set();
-  for (const delivery of deliveries) {
-    if (signalIds.has(delivery.signal.id)) {
-      throw new DeliveryProtocolError(
-        "delivery claim response repeats a signal id"
-      );
-    }
-    signalIds.add(delivery.signal.id);
-    if (leaseIds.has(delivery.leaseId)) {
-      throw new DeliveryProtocolError(
-        "delivery claim response repeats a lease id"
-      );
-    }
-    leaseIds.add(delivery.leaseId);
-  }
-  if (deliveries.length > 1) {
-    throw new DeliveryProtocolError(
-      "delivery claim response returned more than one delivery"
-    );
-  }
-  const pendingDeliveryCount = checkedNonNegativeCount(
-    row.pending_delivery_count,
-    "pending_delivery_count"
-  );
-  const terminalDeliveryFailureCount = checkedNonNegativeCount(
-    row.terminal_delivery_failure_count,
-    "terminal_delivery_failure_count"
-  );
-  if (deliveries.length > pendingDeliveryCount) {
-    throw new DeliveryProtocolError(
-      "delivery claim response returned more deliveries than its pending count"
-    );
-  }
-  return {
-    capabilities,
-    deliveries,
-    pendingDeliveryCount,
-    terminalDeliveryFailureCount
-  };
-}
-function parseAckSuccess(body, expected) {
-  if (!body || typeof body !== "object" || Array.isArray(body)) {
-    throw new DeliveryProtocolError(
-      "delivery acknowledgement response was not an object"
-    );
-  }
-  const row = body;
-  if (row.status !== "accepted" || row.ok !== true) {
-    throw new DeliveryProtocolError(
-      "delivery acknowledgement response did not report accepted ok"
-    );
-  }
-  checkedOptionalUuidArray(row.event_ids, "event_ids");
-  checkedOptionalArray(row.events, "events");
-  if (row.signal_id !== expected.signalId) {
-    throw new DeliveryProtocolError(
-      "delivery acknowledgement response echoed a different signal id"
-    );
-  }
-  if (row.outcome !== expected.outcome) {
-    throw new DeliveryProtocolError(
-      "delivery acknowledgement response echoed a different outcome"
-    );
-  }
-}
-function checkedCommandId(value) {
-  if (typeof value !== "string" || !COMMAND_ID_VALIDATOR_RE.test(value)) {
-    throw new Error(
-      "a delivery command id must be 8..72 characters of [A-Za-z0-9_-]"
-    );
-  }
-  return value;
-}
-function checkedUuidRequest(value, field) {
-  if (!UUID_RE14.test(value)) {
-    throw new Error(`${field} must be a UUID for an agent delivery command`);
-  }
-}
-function assertAckRequest(request) {
-  checkedCommandId(request.commandId);
-  assertAgentToken(request.credential);
-  checkedUuidRequest(request.workspaceId, "workspaceId");
-  checkedUuidRequest(request.signalId, "signalId");
-  checkedUuidRequest(request.leaseId, "leaseId");
-  checkedUuidRequest(request.listenerInstanceId, "listenerInstanceId");
-  if (!DELIVERY_ACK_OUTCOMES.has(request.outcome)) {
-    throw new Error(
-      "a delivery outcome must be replied, observed, queued, expired, or failed_terminal"
-    );
-  }
-  if (request.outcome === "failed_terminal") {
-    if (typeof request.lastErrorCode !== "string" || !FAILED_TERMINAL_CODES_SET.has(request.lastErrorCode)) {
-      throw new Error(
-        "a failed_terminal acknowledgement requires one of provider_refused, local_effect_failed, host_session_failed, credential_unavailable"
-      );
-    }
-  } else if (request.lastErrorCode !== null) {
-    throw new Error(
-      "a non-failed acknowledgement must send lastErrorCode null"
-    );
-  }
-}
-function boundedDeliveryErrorCode(body) {
-  if (!body || typeof body !== "object" || Array.isArray(body)) {
-    return DELIVERY_UNKNOWN_ERROR_CODE;
-  }
-  const error = body.error;
-  if (typeof error === "string" && SERVER_ERROR_CODES_SET.has(error)) {
-    return error;
-  }
-  return DELIVERY_UNKNOWN_ERROR_CODE;
-}
-function refusal(response, text) {
-  let code = DELIVERY_UNKNOWN_ERROR_CODE;
-  try {
-    code = boundedDeliveryErrorCode(JSON.parse(text));
-  } catch {
-  }
-  const retryAfterMs = parseRetryAfterMs(response.headers.get("retry-after"));
-  return new DeliveryHttpError(
-    response.status,
-    code,
-    `delivery command failed (HTTP ${response.status}): ${code}`,
-    retryAfterMs
-  );
-}
-function successBody(response, text, verb) {
-  try {
-    return JSON.parse(text);
-  } catch {
-    throw new DeliveryProtocolError(
-      `${verb} response was not JSON (HTTP ${response.status})`
-    );
-  }
-}
-var DeliveryCommandClient = class {
-  constructor(target2, fetcher = fetch, options = {}) {
-    this.target = target2;
-    this.fetcher = fetcher;
-    this.deadlineMs = options.deadlineMs ?? DELIVERY_REQUEST_TIMEOUT_MS;
-    this.now = options.now ?? Date.now;
-    this.clearTimeoutFn = options.clearTimeout ?? ((timer2) => clearTimeout(timer2));
-    this.createAbortControllerFn = options.createAbortController ?? (() => new AbortController());
-  }
-  target;
-  fetcher;
-  deadlineMs;
-  now;
-  clearTimeoutFn;
-  createAbortControllerFn;
-  async post(request, command2, verb) {
-    if (this.deadlineMs <= 0) {
-      throw new DeliveryTransportError(`${verb} request timed out`);
-    }
-    const deadlineController = this.createAbortControllerFn();
-    let timedOut = false;
-    const signal = deadlineController.signal;
-    let onAbort = () => {
-    };
-    const aborted = new Promise((resolve3) => {
-      onAbort = () => resolve3("timeout");
-      if (signal.aborted) {
-        onAbort();
-      } else {
-        signal.addEventListener("abort", onAbort, { once: true });
-      }
-    });
-    const timer2 = setTimeout(() => {
-      timedOut = true;
-      deadlineController.abort();
-    }, this.deadlineMs);
-    try {
-      if (signal.aborted) {
-        throw new DeliveryTransportError(`${verb} request timed out`);
-      }
-      const read = (async () => {
-        let response;
-        try {
-          response = await this.fetcher(commandEndpoint(this.target), {
-            method: "POST",
-            headers: {
-              authorization: `Bearer ${request.credential}`,
-              apikey: this.target.anonKey,
-              "content-type": "application/json"
-            },
-            body: JSON.stringify({
-              command_id: request.commandId,
-              client_version: CLIENT_PROTOCOL_VERSION,
-              workspace_id: request.workspaceId.toLowerCase(),
-              stream: { kind: "workspace" },
-              command: command2
-            }),
-            signal
-          });
-        } catch (error) {
-          if (signal.aborted || timedOut || error?.name === "AbortError") {
-            return "timeout";
-          }
-          throw new DeliveryTransportError(
-            `${verb} request failed before a response`
-          );
-        }
-        if (signal.aborted || timedOut) return "timeout";
-        let text;
-        try {
-          text = await response.text();
-        } catch {
-          if (signal.aborted || timedOut) return "timeout";
-          throw new DeliveryTransportError(
-            `${verb} response body was interrupted`
-          );
-        }
-        if (signal.aborted || timedOut) return "timeout";
-        return { response, text };
-      })();
-      const raced = await Promise.race([read, aborted]);
-      if (raced === "timeout") {
-        throw new DeliveryTransportError(`${verb} request timed out`);
-      }
-      return raced;
-    } finally {
-      this.clearTimeoutFn(timer2);
-      signal.removeEventListener("abort", onAbort);
-    }
-  }
-  /** Claim the caller's own single unacked direct-signal delivery row. */
-  async claimAgentInbox(request) {
-    checkedCommandId(request.commandId);
-    assertAgentToken(request.credential);
-    checkedUuidRequest(request.workspaceId, "workspaceId");
-    checkedUuidRequest(request.listenerInstanceId, "listenerInstanceId");
-    checkedUuidRequest(request.expectedPrincipalId, "expectedPrincipalId");
-    const { response, text } = await this.post(request, {
-      kind: "claim_agent_inbox",
-      listener_instance_id: request.listenerInstanceId.toLowerCase(),
-      limit: 1
-    }, "delivery claim");
-    if (!response.ok) throw refusal(response, text);
-    const parsed = parseClaimSuccess(
-      successBody(response, text, "delivery claim"),
-      {
-        workspaceId: request.workspaceId.toLowerCase(),
-        principalId: request.expectedPrincipalId.toLowerCase()
-      },
-      this.now
-    );
-    return {
-      httpStatus: response.status,
-      capabilities: parsed.capabilities,
-      deliveries: parsed.deliveries,
-      pendingDeliveryCount: parsed.pendingDeliveryCount,
-      terminalDeliveryFailureCount: parsed.terminalDeliveryFailureCount
-    };
-  }
-  /** Acknowledge one leased delivery with an exact terminal outcome. */
-  async ackAgentDelivery(request) {
-    assertAckRequest(request);
-    const { response, text } = await this.post(request, {
-      kind: "ack_agent_delivery",
-      signal_id: request.signalId.toLowerCase(),
-      lease_id: request.leaseId.toLowerCase(),
-      listener_instance_id: request.listenerInstanceId.toLowerCase(),
-      outcome: request.outcome,
-      last_error_code: request.lastErrorCode
-    }, "delivery acknowledgement");
-    if (!response.ok) throw refusal(response, text);
-    parseAckSuccess(
-      successBody(response, text, "delivery acknowledgement"),
-      {
-        signalId: request.signalId.toLowerCase(),
-        outcome: request.outcome
-      }
-    );
-    return {
-      httpStatus: response.status,
-      signalId: request.signalId.toLowerCase(),
-      outcome: request.outcome
-    };
-  }
-  /** Mark a queued delivery observed only after the interactive hook surfaced it. */
-  async observeQueuedAgentDelivery(request) {
-    checkedCommandId(request.commandId);
-    assertAgentToken(request.credential);
-    checkedUuidRequest(request.workspaceId, "workspaceId");
-    checkedUuidRequest(request.signalId, "signalId");
-    const { response, text } = await this.post(request, {
-      kind: "ack_agent_delivery",
-      signal_id: request.signalId.toLowerCase(),
-      lease_id: null,
-      listener_instance_id: null,
-      outcome: "observed",
-      last_error_code: null
-    }, "delivery observation");
-    if (!response.ok) throw refusal(response, text);
-    parseAckSuccess(
-      successBody(response, text, "delivery observation"),
-      {
-        signalId: request.signalId.toLowerCase(),
-        outcome: "observed"
-      }
-    );
-    return {
-      httpStatus: response.status,
-      signalId: request.signalId.toLowerCase(),
-      outcome: "observed"
-    };
-  }
-};
-
 // src/listener/main-routing.ts
 var import_node_path15 = require("node:path");
-var UUID_RE15 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE16 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var MAX_QUEUE_BYTES = 1024 * 1024;
 var QUEUE_FILE = "pending-for-main.json";
 var QUEUE_LOCK = "pending-for-main";
@@ -36407,7 +36577,7 @@ function parseEntry(value, rejectUnknownKeys) {
   if (rejectUnknownKeys && Object.keys(row).some((key2) => !ENTRY_KEYS.has(key2))) {
     throw new Error("stored pending-for-main entry is malformed");
   }
-  if (typeof row.signalId !== "string" || !UUID_RE15.test(row.signalId) || typeof row.workspaceId !== "string" || !UUID_RE15.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE15.test(row.principalId) || typeof row.fromId !== "string" || !UUID_RE15.test(row.fromId) || row.fromKind !== "user" && row.fromKind !== "agent" || !(row.kind === void 0 || row.kind === "ask" || row.kind === "note") || !(row.senderName === null || typeof row.senderName === "string" && row.senderName.length <= 200) || typeof row.body !== "string" || row.body.length < 1 || !(row.attachmentCount === void 0 || typeof row.attachmentCount === "number" && Number.isSafeInteger(row.attachmentCount) && row.attachmentCount >= 1 && row.attachmentCount <= 8) || !checkedTimestamp2(row.createdAt) || !checkedTimestamp2(row.queuedAt) || !(row.observationPending === void 0 || row.observationPending === true)) {
+  if (typeof row.signalId !== "string" || !UUID_RE16.test(row.signalId) || typeof row.workspaceId !== "string" || !UUID_RE16.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE16.test(row.principalId) || typeof row.fromId !== "string" || !UUID_RE16.test(row.fromId) || row.fromKind !== "user" && row.fromKind !== "agent" || !(row.kind === void 0 || row.kind === "ask" || row.kind === "note") || !(row.senderName === null || typeof row.senderName === "string" && row.senderName.length <= 200) || typeof row.body !== "string" || row.body.length < 1 || !(row.attachmentCount === void 0 || typeof row.attachmentCount === "number" && Number.isSafeInteger(row.attachmentCount) && row.attachmentCount >= 1 && row.attachmentCount <= 8) || !checkedTimestamp2(row.createdAt) || !checkedTimestamp2(row.queuedAt) || !(row.observationPending === void 0 || row.observationPending === true)) {
     throw new Error("stored pending-for-main entry is malformed");
   }
   return {
@@ -36547,7 +36717,7 @@ var LISTENER_PROMPT_START_MINIMUM_MS = SIGNAL_READ_TIMEOUT_MS + ACP_DEFAULT_REQU
 var LISTENER_DELIVERY_RETRY_INITIAL_MS = 500;
 var LISTENER_DELIVERY_RETRY_MAX_MS = 3e4;
 var LISTENER_HOST_PORTS_PROBE_MS = 6e4;
-var UUID_RE16 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE17 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var ListenerCapabilityError = class extends Error {
   code;
   constructor(code, message) {
@@ -36825,7 +36995,7 @@ async function runListenerRuntime(options) {
       new Error("listener instance id and delivery journal must be configured together")
     );
   }
-  if (hasInstanceId && !UUID_RE16.test(options.listenerInstanceId)) {
+  if (hasInstanceId && !UUID_RE17.test(options.listenerInstanceId)) {
     return await closeBeforeStart(
       options.model,
       new Error("listener instance id must be a UUID")
@@ -37937,13 +38107,14 @@ var import_node_crypto19 = require("node:crypto");
 var import_node_net = require("node:net");
 var import_promises9 = require("node:fs/promises");
 var import_node_path16 = require("node:path");
-var UUID_RE17 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE18 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var SEMVER_RE2 = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-(?:0|[1-9]\d*|[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|[A-Za-z-][0-9A-Za-z-]*))*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
 var MAX_STATUS_BYTES = 32 * 1024;
 var MAX_CONTROL_BYTES = 8 * 1024;
 var CONTROL_TIMEOUT_MS = 2e3;
 var START_LOCK_WAIT_MS = 2e3;
 var START_LOCK_STALE_MS = 1e4;
+var LISTENER_DELIVERY_FAILING_THRESHOLD = 3;
 var ListenerAlreadyRunningError = class extends Error {
   constructor() {
     super("a listener is already running for this agent principal");
@@ -38006,6 +38177,9 @@ var STATUS_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "lastTerminalDeliveryFailureAt",
   "lastClaimAt",
   "lastAckAt",
+  "lastAckOutcome",
+  "consecutiveAckFailureCount",
+  "lastAckSignalId",
   "routeMode",
   "deferOverChars",
   "pendingForMainCount",
@@ -38045,8 +38219,11 @@ var STATUS_DELIVERY_KEYS = [
   "lastTerminalDeliveryFailureCount",
   "lastTerminalDeliveryFailureAt",
   "lastClaimAt",
-  "lastAckAt"
+  "lastAckAt",
+  "lastAckOutcome",
+  "consecutiveAckFailureCount"
 ];
+var deliveryOutcomes = DELIVERY_ACK_OUTCOMES;
 function parseStatus(raw, rejectUnknownKeys = false) {
   let value;
   try {
@@ -38066,11 +38243,11 @@ function parseStatus(raw, rejectUnknownKeys = false) {
       throw new Error("stored listener status is malformed");
     }
   }
-  const nullableUuid3 = (candidate) => candidate === null || typeof candidate === "string" && UUID_RE17.test(candidate);
+  const nullableUuid3 = (candidate) => candidate === null || typeof candidate === "string" && UUID_RE18.test(candidate);
   const nullableCount = (candidate) => candidate === null || typeof candidate === "number" && Number.isSafeInteger(candidate) && candidate >= 0;
   const nullableTimestamp3 = (candidate) => candidate === null || typeof candidate === "string" && Number.isFinite(Date.parse(candidate));
   const readHealth = row.readHealth === void 0 ? void 0 : parseListenerReadHealth(row.readHealth, rejectUnknownKeys);
-  if (row.version !== 1 || typeof row.instanceId !== "string" || !UUID_RE17.test(row.instanceId) || row.provider !== "grok" && row.provider !== "opencode" && row.provider !== "claude" && row.provider !== "codex" || typeof row.profileId !== "string" || typeof row.workspaceId !== "string" || !UUID_RE17.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE17.test(row.principalId) || !Number.isSafeInteger(row.pid) || row.pid < 1 || typeof row.state !== "string" || !["starting", "ready", "stopping", "stopped", "failed"].includes(row.state) || typeof row.startedAt !== "string" || !Number.isFinite(Date.parse(row.startedAt)) || !(row.readyAt === null || typeof row.readyAt === "string" && Number.isFinite(Date.parse(row.readyAt))) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt)) || !(row.stoppedAt === null || typeof row.stoppedAt === "string" && Number.isFinite(Date.parse(row.stoppedAt))) || !nullableUuid3(row.lastSignalId) || !(row.lastErrorCode === null || typeof row.lastErrorCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorCode)) || !(row.lastErrorDetail === void 0 || row.lastErrorDetail === null || typeof row.lastErrorDetail === "string" && row.lastErrorDetail.length > 0 && row.lastErrorDetail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastErrorDetail)) || !(row.lastErrorReasonCode === void 0 || row.lastErrorReasonCode === null || typeof row.lastErrorReasonCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorReasonCode)) || !(row.providerExecutable === void 0 || row.providerExecutable === null || typeof row.providerExecutable === "string" && (0, import_node_path16.isAbsolute)(row.providerExecutable)) || !(row.providerVersion === void 0 || row.providerVersion === null || typeof row.providerVersion === "string" && SEMVER_RE2.test(row.providerVersion)) || !(row.providerLastMeasuredVersion === void 0 || row.providerLastMeasuredVersion === null || typeof row.providerLastMeasuredVersion === "string" && SEMVER_RE2.test(row.providerLastMeasuredVersion)) || !(row.providerBundledAgentSdkVersion === void 0 || row.providerBundledAgentSdkVersion === null || typeof row.providerBundledAgentSdkVersion === "string" && SEMVER_RE2.test(row.providerBundledAgentSdkVersion)) || !(row.providerBundledClaudeCodeVersion === void 0 || row.providerBundledClaudeCodeVersion === null || typeof row.providerBundledClaudeCodeVersion === "string" && SEMVER_RE2.test(row.providerBundledClaudeCodeVersion)) || !(row.providerMinimumRequiredVersion === void 0 || row.providerMinimumRequiredVersion === null || typeof row.providerMinimumRequiredVersion === "string" && SEMVER_RE2.test(row.providerMinimumRequiredVersion)) || !(row.cswarmVersion === void 0 || row.cswarmVersion === null || typeof row.cswarmVersion === "string" && SEMVER_RE2.test(row.cswarmVersion)) || (row.providerVersion === null || row.providerVersion === void 0) !== (row.providerLastMeasuredVersion === null || row.providerLastMeasuredVersion === void 0) || !(row.lastWorkerStderrTail === void 0 || row.lastWorkerStderrTail === null || typeof row.lastWorkerStderrTail === "string" && row.lastWorkerStderrTail.length > 0 && row.lastWorkerStderrTail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastWorkerStderrTail)) || typeof row.logPath !== "string" || !(0, import_node_path16.isAbsolute)(row.logPath) || !(row.deliveryMode === void 0 || row.deliveryMode === null || typeof row.deliveryMode === "string" && STATUS_DELIVERY_MODES.has(row.deliveryMode)) || !(row.pendingDeliveryCount === void 0 || nullableCount(row.pendingDeliveryCount)) || !(row.lastTerminalDeliveryFailureCount === void 0 || nullableCount(row.lastTerminalDeliveryFailureCount)) || !(row.lastTerminalDeliveryFailureAt === void 0 || nullableTimestamp3(row.lastTerminalDeliveryFailureAt)) || !(row.lastClaimAt === void 0 || nullableTimestamp3(row.lastClaimAt)) || !(row.lastAckAt === void 0 || nullableTimestamp3(row.lastAckAt)) || !(row.routeMode === void 0 || row.routeMode === "worker" || row.routeMode === "main" || row.routeMode === "split") || !(row.deferOverChars === void 0 || row.deferOverChars === null || typeof row.deferOverChars === "number" && Number.isSafeInteger(row.deferOverChars) && row.deferOverChars >= 1 && row.deferOverChars <= 1e4) || !(row.pendingForMainCount === void 0 || typeof row.pendingForMainCount === "number" && Number.isSafeInteger(row.pendingForMainCount) && row.pendingForMainCount >= 0) || !(row.droppedForMainCount === void 0 || typeof row.droppedForMainCount === "number" && Number.isSafeInteger(row.droppedForMainCount) && row.droppedForMainCount >= 0) || readHealth === null || !(row.connectionsOpened === void 0 || typeof row.connectionsOpened === "number" && Number.isSafeInteger(row.connectionsOpened) && row.connectionsOpened >= 0) || !(row.connectionReuseRatio === void 0 || typeof row.connectionReuseRatio === "number" && Number.isFinite(row.connectionReuseRatio) && row.connectionReuseRatio >= 0) || !(row.activityPublishFailures === void 0 || typeof row.activityPublishFailures === "number" && Number.isSafeInteger(row.activityPublishFailures) && row.activityPublishFailures >= 0) || !(row.activityLastErrorCode === void 0 || row.activityLastErrorCode === null || typeof row.activityLastErrorCode === "string" && STATUS_ACTIVITY_ERROR_CODES.has(
+  if (row.version !== 1 || typeof row.instanceId !== "string" || !UUID_RE18.test(row.instanceId) || row.provider !== "grok" && row.provider !== "opencode" && row.provider !== "claude" && row.provider !== "codex" || typeof row.profileId !== "string" || typeof row.workspaceId !== "string" || !UUID_RE18.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE18.test(row.principalId) || !Number.isSafeInteger(row.pid) || row.pid < 1 || typeof row.state !== "string" || !["starting", "ready", "stopping", "stopped", "failed"].includes(row.state) || typeof row.startedAt !== "string" || !Number.isFinite(Date.parse(row.startedAt)) || !(row.readyAt === null || typeof row.readyAt === "string" && Number.isFinite(Date.parse(row.readyAt))) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt)) || !(row.stoppedAt === null || typeof row.stoppedAt === "string" && Number.isFinite(Date.parse(row.stoppedAt))) || !nullableUuid3(row.lastSignalId) || !(row.lastErrorCode === null || typeof row.lastErrorCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorCode)) || !(row.lastErrorDetail === void 0 || row.lastErrorDetail === null || typeof row.lastErrorDetail === "string" && row.lastErrorDetail.length > 0 && row.lastErrorDetail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastErrorDetail)) || !(row.lastErrorReasonCode === void 0 || row.lastErrorReasonCode === null || typeof row.lastErrorReasonCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorReasonCode)) || !(row.providerExecutable === void 0 || row.providerExecutable === null || typeof row.providerExecutable === "string" && (0, import_node_path16.isAbsolute)(row.providerExecutable)) || !(row.providerVersion === void 0 || row.providerVersion === null || typeof row.providerVersion === "string" && SEMVER_RE2.test(row.providerVersion)) || !(row.providerLastMeasuredVersion === void 0 || row.providerLastMeasuredVersion === null || typeof row.providerLastMeasuredVersion === "string" && SEMVER_RE2.test(row.providerLastMeasuredVersion)) || !(row.providerBundledAgentSdkVersion === void 0 || row.providerBundledAgentSdkVersion === null || typeof row.providerBundledAgentSdkVersion === "string" && SEMVER_RE2.test(row.providerBundledAgentSdkVersion)) || !(row.providerBundledClaudeCodeVersion === void 0 || row.providerBundledClaudeCodeVersion === null || typeof row.providerBundledClaudeCodeVersion === "string" && SEMVER_RE2.test(row.providerBundledClaudeCodeVersion)) || !(row.providerMinimumRequiredVersion === void 0 || row.providerMinimumRequiredVersion === null || typeof row.providerMinimumRequiredVersion === "string" && SEMVER_RE2.test(row.providerMinimumRequiredVersion)) || !(row.cswarmVersion === void 0 || row.cswarmVersion === null || typeof row.cswarmVersion === "string" && SEMVER_RE2.test(row.cswarmVersion)) || (row.providerVersion === null || row.providerVersion === void 0) !== (row.providerLastMeasuredVersion === null || row.providerLastMeasuredVersion === void 0) || !(row.lastWorkerStderrTail === void 0 || row.lastWorkerStderrTail === null || typeof row.lastWorkerStderrTail === "string" && row.lastWorkerStderrTail.length > 0 && row.lastWorkerStderrTail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastWorkerStderrTail)) || typeof row.logPath !== "string" || !(0, import_node_path16.isAbsolute)(row.logPath) || !(row.deliveryMode === void 0 || row.deliveryMode === null || typeof row.deliveryMode === "string" && STATUS_DELIVERY_MODES.has(row.deliveryMode)) || !(row.pendingDeliveryCount === void 0 || nullableCount(row.pendingDeliveryCount)) || !(row.lastTerminalDeliveryFailureCount === void 0 || nullableCount(row.lastTerminalDeliveryFailureCount)) || !(row.lastTerminalDeliveryFailureAt === void 0 || nullableTimestamp3(row.lastTerminalDeliveryFailureAt)) || !(row.lastClaimAt === void 0 || nullableTimestamp3(row.lastClaimAt)) || !(row.lastAckAt === void 0 || nullableTimestamp3(row.lastAckAt)) || !(row.lastAckOutcome === void 0 || row.lastAckOutcome === null || typeof row.lastAckOutcome === "string" && deliveryOutcomes.has(row.lastAckOutcome)) || !(row.consecutiveAckFailureCount === void 0 || nullableCount(row.consecutiveAckFailureCount)) || !(row.lastAckSignalId === void 0 || row.lastAckSignalId === null || typeof row.lastAckSignalId === "string" && UUID_RE18.test(row.lastAckSignalId)) || !(row.routeMode === void 0 || row.routeMode === "worker" || row.routeMode === "main" || row.routeMode === "split") || !(row.deferOverChars === void 0 || row.deferOverChars === null || typeof row.deferOverChars === "number" && Number.isSafeInteger(row.deferOverChars) && row.deferOverChars >= 1 && row.deferOverChars <= 1e4) || !(row.pendingForMainCount === void 0 || typeof row.pendingForMainCount === "number" && Number.isSafeInteger(row.pendingForMainCount) && row.pendingForMainCount >= 0) || !(row.droppedForMainCount === void 0 || typeof row.droppedForMainCount === "number" && Number.isSafeInteger(row.droppedForMainCount) && row.droppedForMainCount >= 0) || readHealth === null || !(row.connectionsOpened === void 0 || typeof row.connectionsOpened === "number" && Number.isSafeInteger(row.connectionsOpened) && row.connectionsOpened >= 0) || !(row.connectionReuseRatio === void 0 || typeof row.connectionReuseRatio === "number" && Number.isFinite(row.connectionReuseRatio) && row.connectionReuseRatio >= 0) || !(row.activityPublishFailures === void 0 || typeof row.activityPublishFailures === "number" && Number.isSafeInteger(row.activityPublishFailures) && row.activityPublishFailures >= 0) || !(row.activityLastErrorCode === void 0 || row.activityLastErrorCode === null || typeof row.activityLastErrorCode === "string" && STATUS_ACTIVITY_ERROR_CODES.has(
     row.activityLastErrorCode
   ))) {
     throw new Error("stored listener status is malformed");
@@ -38091,6 +38268,11 @@ function parseStatus(raw, rejectUnknownKeys = false) {
     lastTerminalDeliveryFailureAt: row.lastTerminalDeliveryFailureAt ?? null,
     lastClaimAt: row.lastClaimAt ?? null,
     lastAckAt: row.lastAckAt ?? null,
+    lastAckOutcome: row.lastAckOutcome ?? null,
+    consecutiveAckFailureCount: row.consecutiveAckFailureCount ?? null,
+    // Optional key: present only when the file carried it, so a status written
+    // without it round-trips byte-for-byte (the routeMode pattern).
+    ...row.lastAckSignalId === void 0 ? {} : { lastAckSignalId: row.lastAckSignalId ?? null },
     lastErrorDetail: row.lastErrorDetail ?? null,
     lastWorkerStderrTail: row.lastWorkerStderrTail ?? null,
     providerVersion: row.providerVersion ?? null,
@@ -38170,13 +38352,6 @@ async function appendListenerEvent(paths, event) {
     "dropped_count"
   ]);
   const deliveryModes = /* @__PURE__ */ new Set(["durable_claim", "cursor_fallback"]);
-  const deliveryOutcomes = /* @__PURE__ */ new Set([
-    "replied",
-    "observed",
-    "queued",
-    "expired",
-    "failed_terminal"
-  ]);
   const routeModes = /* @__PURE__ */ new Set(["worker", "main", "split"]);
   const routeDecisions = /* @__PURE__ */ new Set(["worker", "main"]);
   for (const [key2, value] of Object.entries(event)) {
@@ -38488,7 +38663,7 @@ async function queryListenerControl(paths, command2, timeoutMs = CONTROL_TIMEOUT
 
 // src/listener/supervisor.ts
 var import_node_crypto20 = require("node:crypto");
-var UUID_RE18 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE19 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var LISTENER_RESTART_MAX_ATTEMPTS = 5;
 var LISTENER_RESTART_INITIAL_MS = 1e3;
 var LISTENER_RESTART_MAX_MS = 6e4;
@@ -38586,6 +38761,7 @@ async function runListenerSupervisor(options) {
   const startedAt = iso2(now);
   const controller = new AbortController();
   const proposedInstanceId = (0, import_node_crypto20.randomUUID)();
+  const carried = await readListenerStatus(options.paths).catch(() => null);
   let status = {
     version: 1,
     instanceId: proposedInstanceId,
@@ -38601,7 +38777,7 @@ async function runListenerSupervisor(options) {
     readyAt: null,
     updatedAt: startedAt,
     stoppedAt: null,
-    lastSignalId: null,
+    lastSignalId: carried?.lastSignalId ?? null,
     lastErrorCode: null,
     lastErrorDetail: null,
     lastErrorReasonCode: null,
@@ -38617,7 +38793,14 @@ async function runListenerSupervisor(options) {
     lastTerminalDeliveryFailureCount: null,
     lastTerminalDeliveryFailureAt: null,
     lastClaimAt: null,
-    lastAckAt: null,
+    /* The ack record is carried WHOLE. Carrying the outcome and the run without
+       their timestamp and signal id rendered a screen whose own sentences
+       disagreed -- "the newest delivery acknowledgement was replied" above
+       "No signal has been handled yet." */
+    lastAckAt: carried?.lastAckAt ?? null,
+    lastAckOutcome: carried?.lastAckOutcome ?? null,
+    consecutiveAckFailureCount: carried?.consecutiveAckFailureCount ?? null,
+    lastAckSignalId: carried?.lastAckSignalId ?? null,
     routeMode: options.routeMode ?? "worker",
     deferOverChars: options.deferOverChars ?? null,
     pendingForMainCount: 0,
@@ -38672,7 +38855,7 @@ async function runListenerSupervisor(options) {
     // before the socket can answer, before any status/event persistence.
     initialize: prepare ? async () => {
       const selected = await prepare(proposedInstanceId);
-      if (!selected || typeof selected !== "object" || typeof selected.instanceId !== "string" || !UUID_RE18.test(selected.instanceId)) {
+      if (!selected || typeof selected !== "object" || typeof selected.instanceId !== "string" || !UUID_RE19.test(selected.instanceId)) {
         throw new Error("listener prepare returned an invalid instance id");
       }
       status = { ...status, instanceId: selected.instanceId };
@@ -38698,6 +38881,17 @@ async function runListenerSupervisor(options) {
       const versionNotice = options.getProviderVersionNotice?.() ?? null;
       transition("ready", {
         readyAt: event.ts,
+        // Deliberately does NOT clear consecutiveAckFailureCount. Reaching
+        // `ready` is not provider proof: the permission canary is its own
+        // prompt, and a provider can answer it and fail every real one --
+        // tests/listener-cli-process.test.ts builds such a child, whose
+        // `failPrompts` trips only non-canary prompts (that test does not
+        // restart it, so it does not by itself exercise this path). Clearing
+        // the run here while `lastAckOutcome` still held a stale `observed`
+        // put `HANDLED: yes` back on the incident screen after any restartable
+        // blip. Only a `replied` ack clears the run; the pin is in
+        // tests/listener-runtime.test.ts, which fires `ready` after the
+        // measured incident and asserts the run survives it.
         lastErrorCode: null,
         lastErrorDetail: null,
         lastErrorReasonCode: null,
@@ -38882,9 +39076,14 @@ async function runListenerSupervisor(options) {
       return;
     }
     if (event.type === "delivery_ack") {
+      const failed = event.outcome === "failed_terminal";
+      const providerProven = DELIVERY_PROVIDER_PROVEN_OUTCOMES.has(event.outcome);
       status = {
         ...status,
         lastAckAt: event.ts,
+        lastAckOutcome: event.outcome,
+        lastAckSignalId: event.signalId,
+        consecutiveAckFailureCount: failed ? (status.consecutiveAckFailureCount ?? 0) + 1 : providerProven ? 0 : status.consecutiveAckFailureCount,
         pendingDeliveryCount: null,
         lastSignalId: event.signalId,
         updatedAt: event.ts
@@ -39117,7 +39316,7 @@ async function waitForListenerReady(paths, options = {}) {
 // src/listener/delivery-journal.ts
 var import_node_path17 = require("node:path");
 var import_node_util2 = require("node:util");
-var UUID_RE19 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+var UUID_RE20 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 var COMMAND_ID_RE3 = /^[A-Za-z0-9_-]{8,72}$/;
 var SIGNAL_FINGERPRINT_RE = /^[0-9a-f]{64}$/;
 var MAX_JOURNAL_BYTES = 8192;
@@ -39212,7 +39411,7 @@ var ALLOWED_ERROR_CODES = /* @__PURE__ */ new Set([
   "credential_unavailable"
 ]);
 function claimCommandId(listenerInstanceId, claimOrdinal) {
-  if (!UUID_RE19.test(listenerInstanceId)) {
+  if (!UUID_RE20.test(listenerInstanceId)) {
     throw new Error("stored delivery journal is malformed");
   }
   if (!Number.isSafeInteger(claimOrdinal) || claimOrdinal < 0) {
@@ -39227,7 +39426,7 @@ function claimCommandId(listenerInstanceId, claimOrdinal) {
   return id;
 }
 function ackCommandId(leaseId) {
-  if (!UUID_RE19.test(leaseId)) {
+  if (!UUID_RE20.test(leaseId)) {
     throw new Error("stored delivery journal is malformed");
   }
   const cleanLease = leaseId.toLowerCase().replace(/-/g, "");
@@ -39310,19 +39509,19 @@ function parseJournalRecord(raw, expectedWorkspaceId, expectedPrincipalId, rejec
   if (row.version !== 1) {
     throw new Error("stored delivery journal is malformed");
   }
-  if (typeof row.workspaceId !== "string" || !UUID_RE19.test(row.workspaceId) || row.workspaceId !== row.workspaceId.toLowerCase()) {
+  if (typeof row.workspaceId !== "string" || !UUID_RE20.test(row.workspaceId) || row.workspaceId !== row.workspaceId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
   if (expectedWorkspaceId && row.workspaceId !== expectedWorkspaceId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
-  if (typeof row.principalId !== "string" || !UUID_RE19.test(row.principalId) || row.principalId !== row.principalId.toLowerCase()) {
+  if (typeof row.principalId !== "string" || !UUID_RE20.test(row.principalId) || row.principalId !== row.principalId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
   if (expectedPrincipalId && row.principalId !== expectedPrincipalId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
-  if (typeof row.listenerInstanceId !== "string" || !UUID_RE19.test(row.listenerInstanceId) || row.listenerInstanceId !== row.listenerInstanceId.toLowerCase()) {
+  if (typeof row.listenerInstanceId !== "string" || !UUID_RE20.test(row.listenerInstanceId) || row.listenerInstanceId !== row.listenerInstanceId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
   if (!Number.isSafeInteger(row.nextClaimOrdinal) || row.nextClaimOrdinal < 0) {
@@ -39396,10 +39595,10 @@ function parseJournalRecord(raw, expectedWorkspaceId, expectedPrincipalId, rejec
     if (active.claimLastAttemptAt === null) {
       throw new Error("stored delivery journal is malformed");
     }
-    if (typeof active.signalId !== "string" || !UUID_RE19.test(active.signalId) || active.signalId !== active.signalId.toLowerCase()) {
+    if (typeof active.signalId !== "string" || !UUID_RE20.test(active.signalId) || active.signalId !== active.signalId.toLowerCase()) {
       throw new Error("stored delivery journal is malformed");
     }
-    if (typeof active.leaseId !== "string" || !UUID_RE19.test(active.leaseId) || active.leaseId !== active.leaseId.toLowerCase()) {
+    if (typeof active.leaseId !== "string" || !UUID_RE20.test(active.leaseId) || active.leaseId !== active.leaseId.toLowerCase()) {
       throw new Error("stored delivery journal is malformed");
     }
     if (!isValidIsoTimestamp(active.leasedUntil) || Date.parse(active.leasedUntil) <= Date.parse(active.claimCreatedAt)) {
@@ -39491,7 +39690,7 @@ var FileListenerDeliveryJournal = class {
       ["profileId", "workspaceId", "principalId"],
       "delivery journal configuration rejected"
     );
-    if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE19.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE19.test(options.principalId)) {
+    if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE20.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE20.test(options.principalId)) {
       throw new Error("delivery journal configuration rejected");
     }
     if (options.stateDirectory !== void 0) {
@@ -39613,7 +39812,7 @@ var FileListenerDeliveryJournal = class {
       ["signalId", "leaseId", "leasedUntil"],
       "delivery journal mutation rejected"
     );
-    if (typeof input.signalId !== "string" || !UUID_RE19.test(input.signalId) || typeof input.leaseId !== "string" || !UUID_RE19.test(input.leaseId) || !isValidIsoTimestamp(input.leasedUntil) || input.signalFingerprint !== void 0 && (typeof input.signalFingerprint !== "string" || !SIGNAL_FINGERPRINT_RE.test(input.signalFingerprint))) {
+    if (typeof input.signalId !== "string" || !UUID_RE20.test(input.signalId) || typeof input.leaseId !== "string" || !UUID_RE20.test(input.leaseId) || !isValidIsoTimestamp(input.leasedUntil) || input.signalFingerprint !== void 0 && (typeof input.signalFingerprint !== "string" || !SIGNAL_FINGERPRINT_RE.test(input.signalFingerprint))) {
       throw new Error("delivery journal mutation rejected");
     }
     const canonicalSignalId = input.signalId.toLowerCase();
@@ -39745,7 +39944,7 @@ async function openListenerDeliveryJournal(options) {
     ["profileId", "workspaceId", "principalId", "proposedListenerInstanceId"],
     "delivery journal configuration rejected"
   );
-  if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE19.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE19.test(options.principalId) || typeof options.proposedListenerInstanceId !== "string" || !UUID_RE19.test(options.proposedListenerInstanceId)) {
+  if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE20.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE20.test(options.principalId) || typeof options.proposedListenerInstanceId !== "string" || !UUID_RE20.test(options.proposedListenerInstanceId)) {
     throw new Error("delivery journal configuration rejected");
   }
   if (options.stateDirectory !== void 0) {
@@ -39965,7 +40164,7 @@ var import_node_path20 = require("node:path");
 
 // src/listener/brain-digest.ts
 var import_node_path19 = require("node:path");
-var UUID_RE20 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE21 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var TOPIC_RE = /^[a-z0-9][a-z0-9._-]*$/;
 var BRAIN_DIGEST_FILE = "brain-digest.json";
 var BRAIN_DIGEST_LOCK = "brain-digest";
@@ -39985,7 +40184,7 @@ function parseState(raw) {
   }
   const row = value;
   const topicVersions = row.topicVersions;
-  if (row.version !== 1 || typeof row.principalId !== "string" || !UUID_RE20.test(row.principalId) || !topicVersions || typeof topicVersions !== "object" || Array.isArray(topicVersions) || Object.keys(topicVersions).length > MAX_BRAIN_DIGEST_TOPICS) {
+  if (row.version !== 1 || typeof row.principalId !== "string" || !UUID_RE21.test(row.principalId) || !topicVersions || typeof topicVersions !== "object" || Array.isArray(topicVersions) || Object.keys(topicVersions).length > MAX_BRAIN_DIGEST_TOPICS) {
     throw new Error("stored brain digest state is malformed");
   }
   for (const [topic, version3] of Object.entries(topicVersions)) {
@@ -40028,7 +40227,7 @@ function renderBrainDigest(topicCount, topics) {
 var FileBrainDigestStore = class {
   constructor(instanceDirectory, principalId) {
     this.instanceDirectory = instanceDirectory;
-    if (!(0, import_node_path19.isAbsolute)(instanceDirectory) || !UUID_RE20.test(principalId)) {
+    if (!(0, import_node_path19.isAbsolute)(instanceDirectory) || !UUID_RE21.test(principalId)) {
       throw new Error("brain digest state needs an absolute listener directory and principal UUID");
     }
     this.principalId = principalId.toLowerCase();
@@ -40075,7 +40274,7 @@ var FileBrainDigestStore = class {
 };
 
 // src/listener/hook.ts
-var UUID_RE21 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE22 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var TOKEN_RE = /^swm_agt_[A-Za-z0-9_-]{43}$/;
 var INSTANCE_KEY_RE = /^[0-9a-f]{64}$/;
 var MAX_HOOK_CREDENTIAL_BYTES = 8 * 1024;
@@ -40127,7 +40326,7 @@ function parseListenerCredential(raw, rejectUnknownKeys = false) {
     throw new Error("stored listener hook credential is malformed");
   }
   const row = value;
-  if (!(rejectUnknownKeys ? exactKeys2(row, LISTENER_CREDENTIAL_KEYS) : hasRequiredKeys(row, LISTENER_CREDENTIAL_KEYS)) || row.version !== 1 || typeof row.profileId !== "string" || !/^[0-9a-f]{24}$/.test(row.profileId) || typeof row.targetUrl !== "string" || typeof row.anonKey !== "string" || row.anonKey.length < 1 || row.anonKey.length > 4096 || typeof row.workspaceId !== "string" || !UUID_RE21.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE21.test(row.principalId) || typeof row.credential !== "string" || !TOKEN_RE.test(row.credential) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt))) {
+  if (!(rejectUnknownKeys ? exactKeys2(row, LISTENER_CREDENTIAL_KEYS) : hasRequiredKeys(row, LISTENER_CREDENTIAL_KEYS)) || row.version !== 1 || typeof row.profileId !== "string" || !/^[0-9a-f]{24}$/.test(row.profileId) || typeof row.targetUrl !== "string" || typeof row.anonKey !== "string" || row.anonKey.length < 1 || row.anonKey.length > 4096 || typeof row.workspaceId !== "string" || !UUID_RE22.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE22.test(row.principalId) || typeof row.credential !== "string" || !TOKEN_RE.test(row.credential) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt))) {
     throw new Error("stored listener hook credential is malformed");
   }
   const target2 = cloudTarget(row.targetUrl, row.anonKey);
@@ -40185,7 +40384,7 @@ function parseSurface(raw, rejectUnknownKeys = false) {
     throw new Error("stored listener hook surface state is malformed");
   }
   const row = value;
-  if (rejectUnknownKeys && Object.keys(row).some((key2) => !HOOK_SURFACE_KEYS.has(key2)) || row.version !== 1 || !Array.isArray(row.surfacedSignalIds) || row.surfacedSignalIds.length > HOOK_SURFACED_IDS_MAX || row.surfacedSignalIds.some((id) => typeof id !== "string" || !UUID_RE21.test(id)) || !(row.reportedDroppedCount === void 0 || typeof row.reportedDroppedCount === "number" && Number.isSafeInteger(row.reportedDroppedCount) && row.reportedDroppedCount >= 0) || !(row.credentialFailureReported === void 0 || typeof row.credentialFailureReported === "boolean")) {
+  if (rejectUnknownKeys && Object.keys(row).some((key2) => !HOOK_SURFACE_KEYS.has(key2)) || row.version !== 1 || !Array.isArray(row.surfacedSignalIds) || row.surfacedSignalIds.length > HOOK_SURFACED_IDS_MAX || row.surfacedSignalIds.some((id) => typeof id !== "string" || !UUID_RE22.test(id)) || !(row.reportedDroppedCount === void 0 || typeof row.reportedDroppedCount === "number" && Number.isSafeInteger(row.reportedDroppedCount) && row.reportedDroppedCount >= 0) || !(row.credentialFailureReported === void 0 || typeof row.credentialFailureReported === "boolean")) {
     throw new Error("stored listener hook surface state is malformed");
   }
   const ids = row.surfacedSignalIds.map((id) => String(id).toLowerCase());
@@ -40216,7 +40415,7 @@ var FileHookSurfaceStore = class {
     const unseen = [];
     for (const item of items) {
       const signalId = item.signalId.toLowerCase();
-      if (!UUID_RE21.test(signalId) || seen.has(signalId)) continue;
+      if (!UUID_RE22.test(signalId) || seen.has(signalId)) continue;
       seen.add(signalId);
       unseen.push(item);
     }
@@ -40247,7 +40446,7 @@ var FileHookSurfaceStore = class {
       const unseen = [];
       for (const item of items) {
         const signalId = item.signalId.toLowerCase();
-        if (!UUID_RE21.test(signalId) || seen.has(signalId)) continue;
+        if (!UUID_RE22.test(signalId) || seen.has(signalId)) continue;
         seen.add(signalId);
         unseen.push(item);
       }
@@ -40270,7 +40469,7 @@ var FileHookSurfaceStore = class {
       const seen = new Set(state.surfacedSignalIds);
       for (const signalId of options.signalIds ?? []) {
         const checked = signalId.toLowerCase();
-        if (UUID_RE21.test(checked)) seen.add(checked);
+        if (UUID_RE22.test(checked)) seen.add(checked);
       }
       await writeSecureJsonFile(
         this.path,
@@ -40399,7 +40598,7 @@ async function discoverContexts(stateDirectory2, principalIds, isListenerLive =
     }
     selectedPrincipals = availablePrincipals;
   } else {
-    if (principalIds.some((principalId) => !UUID_RE21.test(principalId))) {
+    if (principalIds.some((principalId) => !UUID_RE22.test(principalId))) {
       return { contexts: [], requiresPrincipalScope: false };
     }
     selectedPrincipals = new Set(principalIds.map((principalId) => principalId.toLowerCase()));
@@ -41828,16 +42027,10 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "user",
   "write"
 ]);
-var UUID_RE22 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-var AGENT_CREDENTIAL_MESSAGE = "Agent credential minted. It is bound to this task and run so the agent's work stays scoped and attributable.";
-var AGENT_CREDENTIAL_MESSAGE_D088 = "Agent credential minted. It is bound to this run, so the agent's work is attributable to it.";
-var ACCEPTED_AGENT_CREDENTIAL_MESSAGES = [
-  AGENT_CREDENTIAL_MESSAGE,
-  AGENT_CREDENTIAL_MESSAGE_D088
-];
+var UUID_RE23 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function packageVersion() {
-  if ("0.1.49".length > 0) {
-    return "0.1.49";
+  if ("0.1.51".length > 0) {
+    return "0.1.51";
   }
   try {
     const value = JSON.parse(
@@ -42182,58 +42375,6 @@ function agentCredentialArtifact(input) {
     ...input.expiresAt === void 0 || input.expiresAt === null ? {} : { expires_at: new Date(input.expiresAt).toISOString() }
   };
 }
-function parsedAgentCredential(value) {
-  if (!value.startsWith("{")) {
-    assertAgentToken(value);
-    return {
-      token: value,
-      principalId: null,
-      tokenId: null,
-      runId: null,
-      expiresAt: null,
-      durable: false
-    };
-  }
-  const parsed = JSON.parse(value);
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-    throw new Error("agent credential JSON is malformed");
-  }
-  const artifact = parsed;
-  const requiredKeys = [
-    "agent_token",
-    "message",
-    "principal_id",
-    "run_id",
-    "status",
-    "token_id"
-  ];
-  const withExpiry = [...requiredKeys, "expires_at"].sort();
-  const actualKeys = Object.keys(artifact).sort();
-  const shape = actualKeys.length === requiredKeys.length ? requiredKeys : withExpiry;
-  if (actualKeys.length !== shape.length || !actualKeys.every((key2, index) => key2 === shape[index]) || !ACCEPTED_AGENT_CREDENTIAL_MESSAGES.includes(artifact.message) || artifact.status !== "accepted" || typeof artifact.principal_id !== "string" || !UUID_RE22.test(artifact.principal_id) || typeof artifact.token_id !== "string" || !UUID_RE22.test(artifact.token_id) || typeof artifact.run_id !== "string" || !UUID_RE22.test(artifact.run_id) || typeof artifact.agent_token !== "string") {
-    throw new Error("agent credential JSON is malformed");
-  }
-  let expiresAt = null;
-  if (artifact.expires_at !== void 0) {
-    if (typeof artifact.expires_at !== "string") {
-      throw new Error("agent credential JSON is malformed");
-    }
-    const parsedExpiry = Date.parse(artifact.expires_at);
-    if (Number.isNaN(parsedExpiry)) {
-      throw new Error("agent credential JSON is malformed");
-    }
-    expiresAt = parsedExpiry;
-  }
-  assertAgentToken(artifact.agent_token);
-  return {
-    token: artifact.agent_token,
-    principalId: artifact.principal_id.toLowerCase(),
-    tokenId: artifact.token_id.toLowerCase(),
-    runId: artifact.run_id.toLowerCase(),
-    expiresAt,
-    durable: true
-  };
-}
 async function stdinCredential() {
   if (process.stdin.isTTY) {
     throw new Error(
@@ -42248,7 +42389,7 @@ async function stdinCredential() {
     }
   }
   const credential = value.trim();
-  return parsedAgentCredential(credential);
+  return parseAgentCredentialInput(credential, { kind: "stdin" });
 }
 var AgentTokenFileError = class extends Error {
   constructor(code, message) {
@@ -42286,7 +42427,10 @@ async function agentCredential(args, options = {}) {
         `--agent-token-file does not exist: ${fromFile}`
       );
     }
-    return parsedAgentCredential(value.trim());
+    return parseAgentCredentialInput(value.trim(), {
+      kind: "file",
+      path: fromFile
+    });
   }
   if (fromStdin || options.implicitStdin === true) {
     return await stdinCredential();
@@ -42354,6 +42498,18 @@ async function humanCredential(args, cloud) {
     store: credentials
   };
 }
+async function dualAuthHumanCredential(args, cloud) {
+  try {
+    return await humanCredential(args, cloud);
+  } catch (error) {
+    if (!(error instanceof HumanSessionError)) throw error;
+    const personPath = error.code === "human_session_missing" ? "not signed in. If you are a person, run cswarm login." : "could not refresh your session. If you are a person, run cswarm login to sign in again.";
+    throw new HumanSessionError(
+      error.code,
+      `${personPath} If you are an agent, pass --agent-token-file <path to the credential CommonSwarm minted for you> (or --agent-token-stdin).`
+    );
+  }
+}
 function writeWorkspaceWarning(warning) {
   process.stderr.write(`cswarm: ${warning.message}
 `);
@@ -42493,7 +42649,7 @@ async function runNew(args) {
       project: {
         workspace_id: created,
         name,
-        stream_id: typeof response.stream_id === "string" && UUID_RE22.test(response.stream_id) ? response.stream_id : null
+        stream_id: typeof response.stream_id === "string" && UUID_RE23.test(response.stream_id) ? response.stream_id : null
       }
     });
     return;
@@ -43235,7 +43391,7 @@ async function runTokenRevoke(args) {
     2
   );
   const cloud = await target(args);
-  const human = await humanCredential(args, cloud);
+  const human = await dualAuthHumanCredential(args, cloud);
   const workspace = await workspaceId(args, cloud, human);
   const tokenId = args.required("token-id");
   const response = (await sendConnectWithPending(
@@ -43302,7 +43458,7 @@ async function runLinkNew(args) {
     2
   );
   const taskId = args.required("task-id");
-  if (!UUID_RE22.test(taskId)) {
+  if (!UUID_RE23.test(taskId)) {
     throw new Error("--task-id must be the work item's UUID");
   }
   const site = capabilitySiteOrigin(
@@ -43362,7 +43518,7 @@ async function runLinkRevoke(args) {
     2
   );
   const capabilityId = args.required("capability-id");
-  if (!UUID_RE22.test(capabilityId)) {
+  if (!UUID_RE23.test(capabilityId)) {
     throw new Error(
       "--capability-id must be the id printed when the link was created"
     );
@@ -43535,7 +43691,7 @@ async function commandWorkspaceAndCredential(args, cloud, options = {}) {
       session
     };
   }
-  const human = await humanCredential(args, cloud);
+  const human = await dualAuthHumanCredential(args, cloud);
   return {
     selectedWorkspace: await workspaceId(args, cloud, human, {
       validateOverride: options.validateHumanWorkspace ?? false
@@ -44037,7 +44193,7 @@ async function runReply(args) {
     "json"
   ], 3);
   const signalId = args.positionals[1];
-  if (signalId === void 0 || !UUID_RE22.test(signalId)) {
+  if (signalId === void 0 || !UUID_RE23.test(signalId)) {
     throw new Error("reply requires the signal UUID being answered");
   }
   const body = args.positionals[2];
@@ -44582,7 +44738,7 @@ async function runReceipt(args) {
     "json"
   ], 2);
   const signalId = args.positionals[1];
-  if (!UUID_RE22.test(signalId)) {
+  if (!UUID_RE23.test(signalId)) {
     throw new Error("signal-id must be a UUID");
   }
   if (!hasAgentCredential(args)) {
@@ -44742,7 +44898,7 @@ async function runInboxFollowCommand(args) {
   }
 }
 function listenerUuid(value, flag) {
-  if (!value || !UUID_RE22.test(value)) {
+  if (!value || !UUID_RE23.test(value)) {
     throw new Error(`--${flag} must be a UUID`);
   }
   return value.toLowerCase();
@@ -44911,7 +45067,9 @@ function listenerAttendanceState(status, evidence) {
   const connected = status.state === "ready";
   const attendanceState = routeMode === "worker" ? "not_required" : pending > 0 ? "unattended" : evidence.hookSurfaceAdvanced ? "attended" : "unproven";
   const attended = attendanceState === "attended" ? true : attendanceState === "unattended" ? false : null;
-  const handled = pending > 0 ? false : routeMode === "worker" && status.lastAckAt !== null ? true : null;
+  const lastAckOutcome = status.lastAckOutcome ?? null;
+  const deliveryFailing = (status.consecutiveAckFailureCount ?? 0) >= LISTENER_DELIVERY_FAILING_THRESHOLD;
+  const handled = pending > 0 ? false : routeMode !== "worker" || lastAckOutcome === null ? null : deliveryFailing ? false : DELIVERY_HANDLED_OUTCOMES.has(lastAckOutcome) ? true : lastAckOutcome === "failed_terminal" ? false : null;
   return {
     connected,
     attended,
@@ -44952,10 +45110,36 @@ function listenerLapseNotices(status, summary) {
   }
   if (summary.throughputLapseHours.length > 0) {
     const latest = summary.throughputLapseHours.at(-1);
+    const pending = status.pendingDeliveryCount;
+    const pendingClause = pending === null ? " No pending count was recorded." : ` Pending deliveries now: ${pending}.`;
+    const lapseRetries = summary.retryHours.find((hour) => hour.hourStart === latest.hourStart)?.retries ?? 0;
     notices.push({
       code: "listener_claim_throughput_lapse",
-      message: `Claim throughput fell below 0.50 for the full hour at ${latest.hourStart}: ${latest.claims}/${Math.round(latest.expectedClaims)} expected (${latest.ratio.toFixed(3)}).`,
-      nextStep: "This host is starving the listener \u2014 check load/memory pressure (sysctl kern.memorystatus_vm_pressure_level), or move the listener."
+      message: `Claim throughput fell below ${LISTENER_THROUGHPUT_LAPSE_RATIO.toFixed(2)} for the full hour at ${latest.hourStart}: ${latest.claims}/${Math.round(latest.expectedClaims)} expected (${latest.ratio.toFixed(3)}).${pendingClause}`,
+      nextStep: lapseRetries > 0 ? `Reads also failed in that hour: ${lapseRetries} ${lapseRetries === 1 ? "retry" : "retries"} recorded. Read those failures first; any notice above names the code. A retry does not say where the fault was \u2014 host_ports_exhausted is a retry AND a host fault.` : "No read retries were recorded in that hour, so the reads were not FAILING. That does not settle whether they were SLOW: a read that succeeds slowly records nothing here, and a claim retry sleeps in the claim loop without recording either. This notice measured nothing else about that hour, and nothing about the host \u2014 read any other notice above before looking further. Cheapest checks first: load average (uptime), process count, memory pressure (sysctl kern.memorystatus_vm_pressure_level, 1 is normal), sockets (netstat -an | grep -c TIME_WAIT)."
+    });
+  }
+  const consecutive = status.consecutiveAckFailureCount ?? 0;
+  if (consecutive >= LISTENER_DELIVERY_FAILING_THRESHOLD) {
+    notices.push({
+      code: "listener_delivery_failing",
+      message: (
+        // Do not assert "messages are not being answered": a notes-only listener
+        // acks `observed` and is fine. State only what the run records.
+        `The listener recorded ${consecutive} terminal delivery ${consecutive === 1 ? "failure" : "failures"} with no reply since. The newest acknowledgement was ${status.lastAckOutcome ?? "not recorded"} at ${status.lastAckAt ?? "an unknown time"}. The most recent listener error code is ${status.lastErrorCode ?? "not recorded"}.`
+      ),
+      nextStep: (
+        // `failed_terminal` covers a refusing-but-healthy provider, a dead host
+        // session, and a local post failure, and the run alone cannot tell them
+        // apart — so name the check, not a diagnosis. The command needs the
+        // credential on stdin, and the listener is still running here.
+        // `stop` takes --principal-id and needs no credential, so it must not
+        // read stdin: one pipe cannot feed both halves of a chained command.
+        // `listen stop` returns while the state is still `stopping` (D-074), and
+        // `listen start` refuses a listener that is stopping, so the two verbs
+        // race unless the confirm step sits between them.
+        `Read the failure codes in ${status.logPath}, then stop the listener with: cswarm listen stop --workspace-id ${status.workspaceId} --principal-id ${status.principalId}. Wait until it is no longer running -- state stopped or failed, not stopping -- confirming with: cswarm listen status --workspace-id ${status.workspaceId} --principal-id ${status.principalId}. Then restart it by piping the same agent credential into: ${listenerRestartCommand(status)}`
+      )
     });
   }
   return notices;
@@ -45053,6 +45237,9 @@ function listenerStatusJson(status, permissionMode, evidence = {
     lastTerminalDeliveryFailureAt: status.lastTerminalDeliveryFailureAt ?? null,
     lastClaimAt: status.lastClaimAt ?? null,
     lastAckAt: status.lastAckAt ?? null,
+    lastAckOutcome: status.lastAckOutcome ?? null,
+    consecutiveAckFailureCount: status.consecutiveAckFailureCount ?? null,
+    lastAckSignalId: status.lastAckSignalId ?? null,
     routeMode: status.routeMode ?? "worker",
     deferOverChars: status.deferOverChars ?? null,
     pendingForMainCount: status.pendingForMainCount ?? 0,
@@ -45078,6 +45265,7 @@ function renderListenerStatus(status, evidence = {
   hookSurfaceAdvanced: false
 }, nowMs = Date.now(), installed = null) {
   const routeMode = status.routeMode ?? "worker";
+  const deliveryFailureRun = status.consecutiveAckFailureCount ?? 0;
   const pendingForMainCount = status.pendingForMainCount ?? 0;
   const droppedForMainCount = status.droppedForMainCount ?? 0;
   const unattendedCount = `${pendingForMainCount} ${pendingForMainCount === 1 ? "message is" : "messages are"} unattended`;
@@ -45089,7 +45277,7 @@ function renderListenerStatus(status, evidence = {
     lapseNotices.length > 0 ? `Listener LAPSE for agent ${status.principalId}: ${lapseNotices.map((notice) => notice.code).join(", ")}.` : pendingForMainCount > 0 ? `Listener WARNING for agent ${status.principalId}: ${unattendedCount}.` : `Listener ${status.state} for agent ${status.principalId}.`,
     `CONNECTED: ${attendance.connected ? "yes" : "no"}. Transport state is ${status.state}.`,
     `ATTENDED: ${attendance.attendanceState === "attended" ? "yes. The session hook has surfaced messages on this host" : attendance.attendanceState === "unattended" ? "no. The main-session queue is not draining" : attendance.attendanceState === "not_required" ? "not required for the worker route" : "not yet proven on this host"}.`,
-    `HANDLED: ${attendance.handledState === "handled" ? "yes. A delivery acknowledgement is recorded" : attendance.handledState === "not_handled" ? "no. Queued messages have not reached the session hook" : "not yet measured"}.`,
+    `HANDLED: ${attendance.handledState === "handled" ? `yes. The newest delivery acknowledgement was ${status.lastAckOutcome}` : attendance.handledState === "not_handled" ? routeMode === "worker" ? deliveryFailureRun >= LISTENER_DELIVERY_FAILING_THRESHOLD ? `no. ${deliveryFailureRun} ${deliveryFailureRun === 1 ? "delivery has" : "deliveries have"} failed since the last reply; the newest delivery acknowledgement was ${status.lastAckOutcome ?? "not recorded"}${status.lastErrorCode ? ` (${status.lastErrorCode})` : ""}` : `no. The newest delivery acknowledgement was ${status.lastAckOutcome ?? "not recorded"}${status.lastErrorCode ? ` (${status.lastErrorCode})` : ""}` : "no. Queued messages have not reached the session hook" : "not yet measured"}.`,
     `Provider: ${status.provider}; process: ${status.pid}; started: ${status.startedAt}.`,
     `Provider executable: ${status.providerExecutable ?? "not measured"}.`,
     `Connections opened: ${status.connectionsOpened ?? "not measured"}.`,
@@ -45097,7 +45285,7 @@ function renderListenerStatus(status, evidence = {
     ...status.activityPublishFailures !== void 0 && status.activityPublishFailures > 0 ? [`Activity publish failures: ${status.activityPublishFailures}.`] : [],
     ...status.activityLastErrorCode ? [`Last activity publish error code: ${status.activityLastErrorCode}.`] : [],
     status.readyAt ? `Ready since: ${status.readyAt}.` : "Not ready yet.",
-    status.lastSignalId ? pendingForMainCount > 0 ? `Last claimed and queued signal: ${status.lastSignalId}. It is not handled yet.` : routeMode === "worker" ? `Last handled signal: ${status.lastSignalId}.` : `Last listener signal: ${status.lastSignalId}. Local status does not prove its final observed receipt.` : "No signal has been handled yet.",
+    status.lastSignalId ? pendingForMainCount > 0 ? `Last claimed and queued signal: ${status.lastSignalId}. It is not handled yet.` : routeMode === "worker" ? status.lastAckAt === null ? `Last listener signal: ${status.lastSignalId}. No delivery acknowledgement is recorded.` : status.lastAckOutcome === null ? `Last listener signal: ${status.lastSignalId}. An acknowledgement was recorded at ${status.lastAckAt}; its outcome was not recorded.` : !status.lastAckSignalId ? `Last listener signal: ${status.lastSignalId}. The newest acknowledgement was ${status.lastAckOutcome}; which signal it belonged to was not recorded.` : status.lastAckOutcome === "failed_terminal" ? `Last failed delivery signal: ${status.lastAckSignalId}.` : DELIVERY_HANDLED_OUTCOMES.has(status.lastAckOutcome) && deliveryFailureRun < LISTENER_DELIVERY_FAILING_THRESHOLD ? `Last handled signal: ${status.lastAckSignalId}.` : `Last acknowledged signal: ${status.lastAckSignalId}. Its outcome was ${status.lastAckOutcome}.` : `Last listener signal: ${status.lastSignalId}. Local status does not prove its final observed receipt.` : "No signal has been handled yet.",
     status.lastErrorCode ? `Last status code: ${status.lastErrorCode}.` : "No listener process error is recorded.",
     readHealth.currentEpisodeStartedAt === null ? "Current read retry episode: none." : `Current read retry episode: ${readHealth.currentEpisodeAttempts} attempt${readHealth.currentEpisodeAttempts === 1 ? "" : "s"} since ${readHealth.currentEpisodeStartedAt}; reason ${readHealth.currentReasonCode}${readHealth.currentHttpStatus === null ? "" : ` (HTTP ${readHealth.currentHttpStatus})`}${readHealth.currentErrorConstructor === null ? "" : ` (${readHealth.currentErrorConstructor})`}.`,
     `Read retry episodes in the last 24h: ${readSummary.episodesLast24h}; retries in the rolling hour: ${readSummary.retriesLastHour}.`,
@@ -45203,7 +45391,7 @@ function renderListenerStatus(status, evidence = {
   }
   if (status.lastTerminalDeliveryFailureCount !== null && status.lastTerminalDeliveryFailureCount > 0) {
     lines.push(
-      `The last claim reported ${status.lastTerminalDeliveryFailureCount} terminal delivery failures; they remain recorded, and the listener will keep receiving.`
+      `The last claim reported ${status.lastTerminalDeliveryFailureCount} ${status.lastTerminalDeliveryFailureCount === 1 ? "delivery the service gave up on because this listener never acknowledged it. It remains" : "deliveries the service gave up on because this listener never acknowledged them. They remain"} recorded, and the listener will keep receiving.`
     );
   }
   if (status.state === "stopping" || status.state === "starting") {
@@ -46405,7 +46593,7 @@ async function runHook(args) {
   if (command2 === "check") {
     args.assertShape(["cooldown", "principal-id"], 2);
     const rawPrincipalIds = args.all("principal-id");
-    if (rawPrincipalIds.some((principalId2) => !UUID_RE22.test(principalId2))) return;
+    if (rawPrincipalIds.some((principalId2) => !UUID_RE23.test(principalId2))) return;
     const principalIds = rawPrincipalIds.map((principalId2) => principalId2.toLowerCase());
     const rawCooldown = args.optional("cooldown");
     const cooldownSeconds = rawCooldown === void 0 ? void 0 : Number(rawCooldown);
@@ -46531,7 +46719,7 @@ async function fileRows(context) {
   );
 }
 async function resolveFileSelector(context, selector) {
-  if (UUID_RE22.test(selector)) return selector.toLowerCase();
+  if (UUID_RE23.test(selector)) return selector.toLowerCase();
   const rows3 = await fileRows(context);
   const match = rows3.find(
     (row) => row.name.toLowerCase() === selector.toLowerCase()