github-router 0.3.292 → 0.3.295

package/dist/{auth-BwUHopJz.js → auth-CluG5e-l.js}

@@ -1,5 +1,5 @@
-import { i as ensurePaths, t as PATHS } from "./paths-BH4J7slC.js";
-import { A as state, r as setupGitHubToken } from "./token-8drORhXg.js";
+import { i as ensurePaths, t as PATHS } from "./paths-Ci485qSJ.js";
+import { A as state, r as setupGitHubToken } from "./token-BtJhjXXu.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 //#region src/auth.ts
@@ -41,4 +41,4 @@ const auth = defineCommand({
 //#endregion
 export { auth };
 
-//# sourceMappingURL=auth-BwUHopJz.js.map
+//# sourceMappingURL=auth-CluG5e-l.js.map

package/dist/{auth-BwUHopJz.js.map → auth-CluG5e-l.js.map}

@@ -1 +1 @@
-{"version":3,"file":"auth-BwUHopJz.js","names":[],"sources":["../src/auth.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport { PATHS, ensurePaths } from \"./lib/paths\"\nimport { state } from \"./lib/state\"\nimport { setupGitHubToken } from \"./lib/token\"\n\ninterface RunAuthOptions {\n  verbose: boolean\n  showToken: boolean\n}\n\nexport async function runAuth(options: RunAuthOptions): Promise<void> {\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  await setupGitHubToken({ force: true })\n  consola.success(\"GitHub token written to\", PATHS.GITHUB_TOKEN_PATH)\n}\n\nexport const auth = defineCommand({\n  meta: {\n    name: \"auth\",\n    description: \"Run GitHub auth flow without running the server\",\n  },\n  args: {\n    verbose: {\n      alias: \"v\",\n      type: \"boolean\",\n      default: false,\n      description: \"Enable verbose logging\",\n    },\n    \"show-token\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Show GitHub token on auth\",\n    },\n  },\n  run({ args }) {\n    return runAuth({\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n"],"mappings":";;;;;AAcA,eAAsB,QAAQ,SAAwC;CACpE,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,iBAAiB,EAAE,OAAO,KAAK,CAAC;CACtC,QAAQ,QAAQ,2BAA2B,MAAM,iBAAiB;AACpE;AAEA,MAAa,OAAO,cAAc;CAChC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,SAAS;GACP,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,cAAc;GACZ,MAAM;GACN,SAAS;GACT,aAAa;EACf;CACF;CACA,IAAI,EAAE,QAAQ;EACZ,OAAO,QAAQ;GACb,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC"}
+{"version":3,"file":"auth-CluG5e-l.js","names":[],"sources":["../src/auth.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport { PATHS, ensurePaths } from \"./lib/paths\"\nimport { state } from \"./lib/state\"\nimport { setupGitHubToken } from \"./lib/token\"\n\ninterface RunAuthOptions {\n  verbose: boolean\n  showToken: boolean\n}\n\nexport async function runAuth(options: RunAuthOptions): Promise<void> {\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  await setupGitHubToken({ force: true })\n  consola.success(\"GitHub token written to\", PATHS.GITHUB_TOKEN_PATH)\n}\n\nexport const auth = defineCommand({\n  meta: {\n    name: \"auth\",\n    description: \"Run GitHub auth flow without running the server\",\n  },\n  args: {\n    verbose: {\n      alias: \"v\",\n      type: \"boolean\",\n      default: false,\n      description: \"Enable verbose logging\",\n    },\n    \"show-token\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Show GitHub token on auth\",\n    },\n  },\n  run({ args }) {\n    return runAuth({\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n"],"mappings":";;;;;AAcA,eAAsB,QAAQ,SAAwC;CACpE,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,iBAAiB,EAAE,OAAO,KAAK,CAAC;CACtC,QAAQ,QAAQ,2BAA2B,MAAM,iBAAiB;AACpE;AAEA,MAAa,OAAO,cAAc;CAChC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,SAAS;GACP,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,cAAc;GACZ,MAAM;GACN,SAAS;GACT,aAAa;EACf;CACF;CACA,IAAI,EAAE,QAAQ;EACZ,OAAO,QAAQ;GACb,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC"}

package/dist/browser-ext/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "name": "github-router browser bridge",
   "short_name": "gh-router-browser",
-  "version": "0.3.292",
+  "version": "0.3.295",
   "description": "Bridge between Claude (via github-router /mcp) and the browser. Implements tab control, navigation, clicks, form fill, downloads, screenshots, devtools eval. Blocks navigation to chrome://settings.",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJElxuBlonBS3TVW9FJN0mGTtShB3L1hoaYf6k39SOr1ogGYmF90EjRxy1i21k9wQQjPf26bcBu/9X67KrQjQV0uB38CaNukgiSeoLjfptN811u+PJHx6BP+jx3Qa6/3VenNPxHC8WEU0GXql8QSjIHEyCwKb6fMASXOK94JyB5Ywov2x8mt/+9ncqBBBMVzf6r5Sagy4PL1XnryLsuADD/vOEkPet8wXgH/Oj7v5tTsQQZ7U1JT51PoDs2BFnXc5v3TkVgZwd32k3ONh+nkDw1Hof+4zwUGOyJE6eMrlYzRlKM4Qxdf9JpavQvqfieAbTRWcyKeclnHeoIfE7cDBQIDAQAB",
   "background": {

package/dist/{check-usage-BTda5753.js → check-usage-iOzfnKJe.js}

@@ -1,6 +1,6 @@
-import { i as ensurePaths } from "./paths-BH4J7slC.js";
-import { r as setupGitHubToken } from "./token-8drORhXg.js";
-import { t as getCopilotUsage } from "./get-copilot-usage-CRrf1ZSC.js";
+import { i as ensurePaths } from "./paths-Ci485qSJ.js";
+import { r as setupGitHubToken } from "./token-BtJhjXXu.js";
+import { t as getCopilotUsage } from "./get-copilot-usage-B7Z4XVWj.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 //#region src/check-usage.ts
@@ -40,4 +40,4 @@ const checkUsage = defineCommand({
 //#endregion
 export { checkUsage };
 
-//# sourceMappingURL=check-usage-BTda5753.js.map
+//# sourceMappingURL=check-usage-iOzfnKJe.js.map

package/dist/{check-usage-BTda5753.js.map → check-usage-iOzfnKJe.js.map}

@@ -1 +1 @@
-{"version":3,"file":"check-usage-BTda5753.js","names":[],"sources":["../src/check-usage.ts"],"sourcesContent":["import { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport { ensurePaths } from \"./lib/paths\"\nimport { setupGitHubToken } from \"./lib/token\"\nimport {\n  getCopilotUsage,\n  type QuotaDetail,\n} from \"./services/github/get-copilot-usage\"\n\nexport const checkUsage = defineCommand({\n  meta: {\n    name: \"check-usage\",\n    description: \"Show current GitHub Copilot usage/quota information\",\n  },\n  async run() {\n    await ensurePaths()\n    await setupGitHubToken()\n    try {\n      const usage = await getCopilotUsage()\n      const premium = usage.quota_snapshots.premium_interactions\n      const premiumTotal = premium.entitlement\n      const premiumUsed = premiumTotal - premium.remaining\n      const premiumPercentUsed =\n        premiumTotal > 0 ? (premiumUsed / premiumTotal) * 100 : 0\n      const premiumPercentRemaining = premium.percent_remaining\n\n      // Helper to summarize a quota snapshot\n      function summarizeQuota(name: string, snap: QuotaDetail | undefined) {\n        if (!snap) return `${name}: N/A`\n        const total = snap.entitlement\n        const used = total - snap.remaining\n        const percentUsed = total > 0 ? (used / total) * 100 : 0\n        const percentRemaining = snap.percent_remaining\n        return `${name}: ${used}/${total} used (${percentUsed.toFixed(1)}% used, ${percentRemaining.toFixed(1)}% remaining)`\n      }\n\n      const premiumLine = `Premium: ${premiumUsed}/${premiumTotal} used (${premiumPercentUsed.toFixed(1)}% used, ${premiumPercentRemaining.toFixed(1)}% remaining)`\n      const chatLine = summarizeQuota(\"Chat\", usage.quota_snapshots.chat)\n      const completionsLine = summarizeQuota(\n        \"Completions\",\n        usage.quota_snapshots.completions,\n      )\n\n      consola.box(\n        `Copilot Usage (plan: ${usage.copilot_plan})\\n`\n          + `Quota resets: ${usage.quota_reset_date}\\n`\n          + `\\nQuotas:\\n`\n          + `  ${premiumLine}\\n`\n          + `  ${chatLine}\\n`\n          + `  ${completionsLine}`,\n      )\n    } catch (err) {\n      consola.error(\"Failed to fetch Copilot usage:\", err)\n      process.exit(1)\n    }\n  },\n})\n"],"mappings":";;;;;;AAUA,MAAa,aAAa,cAAc;CACtC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM,MAAM;EACV,MAAM,YAAY;EAClB,MAAM,iBAAiB;EACvB,IAAI;GACF,MAAM,QAAQ,MAAM,gBAAgB;GACpC,MAAM,UAAU,MAAM,gBAAgB;GACtC,MAAM,eAAe,QAAQ;GAC7B,MAAM,cAAc,eAAe,QAAQ;GAC3C,MAAM,qBACJ,eAAe,IAAK,cAAc,eAAgB,MAAM;GAC1D,MAAM,0BAA0B,QAAQ;GAGxC,SAAS,eAAe,MAAc,MAA+B;IACnE,IAAI,CAAC,MAAM,OAAO,GAAG,KAAK;IAC1B,MAAM,QAAQ,KAAK;IACnB,MAAM,OAAO,QAAQ,KAAK;IAC1B,MAAM,cAAc,QAAQ,IAAK,OAAO,QAAS,MAAM;IACvD,MAAM,mBAAmB,KAAK;IAC9B,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG,MAAM,SAAS,YAAY,QAAQ,CAAC,EAAE,UAAU,iBAAiB,QAAQ,CAAC,EAAE;GACzG;GAEA,MAAM,cAAc,YAAY,YAAY,GAAG,aAAa,SAAS,mBAAmB,QAAQ,CAAC,EAAE,UAAU,wBAAwB,QAAQ,CAAC,EAAE;GAChJ,MAAM,WAAW,eAAe,QAAQ,MAAM,gBAAgB,IAAI;GAClE,MAAM,kBAAkB,eACtB,eACA,MAAM,gBAAgB,WACxB;GAEA,QAAQ,IACN,wBAAwB,MAAM,aAAa,mBACtB,MAAM,iBAAiB,iBAEnC,YAAY,MACZ,SAAS,MACT,iBACX;EACF,SAAS,KAAK;GACZ,QAAQ,MAAM,kCAAkC,GAAG;GACnD,QAAQ,KAAK,CAAC;EAChB;CACF;AACF,CAAC"}
+{"version":3,"file":"check-usage-iOzfnKJe.js","names":[],"sources":["../src/check-usage.ts"],"sourcesContent":["import { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport { ensurePaths } from \"./lib/paths\"\nimport { setupGitHubToken } from \"./lib/token\"\nimport {\n  getCopilotUsage,\n  type QuotaDetail,\n} from \"./services/github/get-copilot-usage\"\n\nexport const checkUsage = defineCommand({\n  meta: {\n    name: \"check-usage\",\n    description: \"Show current GitHub Copilot usage/quota information\",\n  },\n  async run() {\n    await ensurePaths()\n    await setupGitHubToken()\n    try {\n      const usage = await getCopilotUsage()\n      const premium = usage.quota_snapshots.premium_interactions\n      const premiumTotal = premium.entitlement\n      const premiumUsed = premiumTotal - premium.remaining\n      const premiumPercentUsed =\n        premiumTotal > 0 ? (premiumUsed / premiumTotal) * 100 : 0\n      const premiumPercentRemaining = premium.percent_remaining\n\n      // Helper to summarize a quota snapshot\n      function summarizeQuota(name: string, snap: QuotaDetail | undefined) {\n        if (!snap) return `${name}: N/A`\n        const total = snap.entitlement\n        const used = total - snap.remaining\n        const percentUsed = total > 0 ? (used / total) * 100 : 0\n        const percentRemaining = snap.percent_remaining\n        return `${name}: ${used}/${total} used (${percentUsed.toFixed(1)}% used, ${percentRemaining.toFixed(1)}% remaining)`\n      }\n\n      const premiumLine = `Premium: ${premiumUsed}/${premiumTotal} used (${premiumPercentUsed.toFixed(1)}% used, ${premiumPercentRemaining.toFixed(1)}% remaining)`\n      const chatLine = summarizeQuota(\"Chat\", usage.quota_snapshots.chat)\n      const completionsLine = summarizeQuota(\n        \"Completions\",\n        usage.quota_snapshots.completions,\n      )\n\n      consola.box(\n        `Copilot Usage (plan: ${usage.copilot_plan})\\n`\n          + `Quota resets: ${usage.quota_reset_date}\\n`\n          + `\\nQuotas:\\n`\n          + `  ${premiumLine}\\n`\n          + `  ${chatLine}\\n`\n          + `  ${completionsLine}`,\n      )\n    } catch (err) {\n      consola.error(\"Failed to fetch Copilot usage:\", err)\n      process.exit(1)\n    }\n  },\n})\n"],"mappings":";;;;;;AAUA,MAAa,aAAa,cAAc;CACtC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM,MAAM;EACV,MAAM,YAAY;EAClB,MAAM,iBAAiB;EACvB,IAAI;GACF,MAAM,QAAQ,MAAM,gBAAgB;GACpC,MAAM,UAAU,MAAM,gBAAgB;GACtC,MAAM,eAAe,QAAQ;GAC7B,MAAM,cAAc,eAAe,QAAQ;GAC3C,MAAM,qBACJ,eAAe,IAAK,cAAc,eAAgB,MAAM;GAC1D,MAAM,0BAA0B,QAAQ;GAGxC,SAAS,eAAe,MAAc,MAA+B;IACnE,IAAI,CAAC,MAAM,OAAO,GAAG,KAAK;IAC1B,MAAM,QAAQ,KAAK;IACnB,MAAM,OAAO,QAAQ,KAAK;IAC1B,MAAM,cAAc,QAAQ,IAAK,OAAO,QAAS,MAAM;IACvD,MAAM,mBAAmB,KAAK;IAC9B,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG,MAAM,SAAS,YAAY,QAAQ,CAAC,EAAE,UAAU,iBAAiB,QAAQ,CAAC,EAAE;GACzG;GAEA,MAAM,cAAc,YAAY,YAAY,GAAG,aAAa,SAAS,mBAAmB,QAAQ,CAAC,EAAE,UAAU,wBAAwB,QAAQ,CAAC,EAAE;GAChJ,MAAM,WAAW,eAAe,QAAQ,MAAM,gBAAgB,IAAI;GAClE,MAAM,kBAAkB,eACtB,eACA,MAAM,gBAAgB,WACxB;GAEA,QAAQ,IACN,wBAAwB,MAAM,aAAa,mBACtB,MAAM,iBAAiB,iBAEnC,YAAY,MACZ,SAAS,MACT,iBACX;EACF,SAAS,KAAK;GACZ,QAAQ,MAAM,kCAAkC,GAAG;GACnD,QAAQ,KAAK,CAAC;EAChB;CACF;AACF,CAAC"}

package/dist/{claude-_DYGKCw8.js → claude-DNmxk-Rm.js}

@@ -1,26 +1,41 @@
-import { Ct as reviewerFastModel, Dt as standInToolEnabled, E as toolbeltEnabled, Et as scribeModel, Ft as unregisterLaunch, Gt as provisionBrowserAssets, Jt as provisionAndIndexColbert, Ot as workerToolsEnabled, Pt as registerLaunch, St as resolveGeminiReviewModel, T as buildToolbeltAwareness, Tt as scoutModel, Zt as warmTreeSitterPool, _t as fleetToolsEnabled, at as FAST_SCOUT_EFFORT, bt as implementerFastModel, ct as brainstormModel, dt as browserToolsEnabled, ft as fastImplementerModel, gt as fastScoutModel, hn as resolveLeadSlugArg, ht as fastReviewerModel, it as FAST_REVIEWER_EFFORT, lt as browseAgentEnabled, mn as pickClaudeDefault, mt as fastPlannerModel, o as buildPeerAwarenessSnippet, on as DEFAULT_CLAUDE_MODEL_FALLBACKS, ot as agentToolsEnabled, pn as isBudgetClaudeLead, pt as fastOracleModel, qt as colbertDegradedWarning, r as agentNamesForToolAllowlist, rt as FAST_PLANNER_EFFORT, s as buildPeerAwarenessSummary, st as artifactToolsEnabled, tn as shouldUseInsecureTls, ut as browserCompoundToolsEnabled, vt as geminiAvailable, w as availableToolCommands, wt as reviewerModel, xt as nativeSubagentModel, yt as generalPurposeFastModel } from "./peer-mcp-personas-CHbl6MwM.js";
-import { o as removeOwnClaudeConfigMirror, r as ensureClaudeConfigMirror, t as PATHS, u as writeArtifactCredsToMirror } from "./paths-BH4J7slC.js";
-import { A as state, d as resolveModel } from "./token-8drORhXg.js";
+import { An as isBudgetClaudeLead, At as workerToolsEnabled, Bt as profileDescriptor, Cn as DEFAULT_CLAUDE_MODEL_FALLBACKS, Ct as nativeSubagentModel, Dt as scoutModel, E as toolbeltEnabled, Et as reviewerModel, Mn as resolveLeadSlugArg, Mt as LUNA_DRIVER_ALIAS_ID, Ot as scribeModel, Qt as unregisterLaunch, St as implementerFastModel, T as buildToolbeltAwareness, Tt as reviewerFastModel, Ut as validateFastProfilePrerequisites, Vt as resolveLaunchProfile, Zt as registerLaunch, _t as fastReviewerModel, at as FAST_REVIEWER_EFFORT, bt as geminiAvailable, cn as provisionBrowserAssets, ct as artifactToolsEnabled, dn as provisionAndIndexColbert, dt as browserCompoundToolsEnabled, ft as browserToolsEnabled, gt as fastPlannerModel, ht as fastOracleModel, it as FAST_PLANNER_EFFORT, jn as pickClaudeDefault, kt as standInToolEnabled, lt as brainstormModel, mn as warmTreeSitterPool, mt as fastImplementerModel, o as buildPeerAwarenessSnippet, ot as FAST_SCOUT_EFFORT, pt as fastCriticModel, r as agentNamesForToolAllowlist, rt as FAST_CRITIC_EFFORT, s as buildPeerAwarenessSummary, st as agentToolsEnabled, un as colbertDegradedWarning, ut as browseAgentEnabled, vn as shouldUseInsecureTls, vt as fastScoutModel, w as availableToolCommands, wt as resolveGeminiReviewModel, xt as generalPurposeFastModel, yt as fleetToolsEnabled, zt as formatFastPrerequisiteFailure } from "./peer-mcp-personas-BwNtC8jt.js";
+import { o as removeOwnClaudeConfigMirror, r as ensureClaudeConfigMirror, t as PATHS, u as writeArtifactCredsToMirror } from "./paths-Ci485qSJ.js";
+import { A as state, d as resolveModel } from "./token-BtJhjXXu.js";
 import { r as parseBoolEnv } from "./exec-y8C_MU8A.js";
-import { _ as validateFastProfilePrerequisites, a as sharedServerArgs, b as updateClaude, c as stopKeepAwake, d as LUNA_DRIVER_ALIAS_ID, g as resolveLaunchProfile, h as profileDescriptor, i as setupAndServe, l as listModelsForEndpoint, m as formatFastPrerequisiteFailure, o as LAUNCH_SECRET_HEADER, r as parseSharedArgs, s as startKeepAwake, t as getClaudeCodeEnvVars, u as enableFileLogging, v as runSelfUpdate, y as checkClaudeVersion } from "./server-setup-CqlaZukJ.js";
-import { n as hookLauncherDegradedWarning, r as resolveSelfInvocation } from "./self-invocation-DhO1Z8iD.js";
-import { i as launchChild, r as getCodexVersion, t as provisionToolbelt } from "./provision-BYFd9nPK.js";
-import { i as captureLaunchBaseline, l as stopGateDisabled, n as buildSessionBindHookCommand, r as buildStopHookCommand, s as injectStopHookIntoSettingsFile, t as buildArtifactOpenHookCommand, u as stopGateId } from "./stop-gate-hook-BiBp5aGm.js";
-import { t as liveExec } from "./orchestration-pzbrKkgD.js";
-import { c as repoRoot, d as trustRepo, l as stopGateEnabledForRepo, s as repoFingerprint, t as fileBaselineStore } from "./stop-gate-policy-BGd6b5hR.js";
-import { l as guardToolMatcher, n as activeDispatchModes, r as buildWorkerGuardHookCommand } from "./worker-dispatch-D5fGroNr.js";
-import { _ as injectPeerMcpIntoMirror, a as appendPeerAwarenessToMirroredClaudeMd, b as workersKeyOf, c as prependArtifactPanelDirectiveToMirroredClaudeMd, i as OPERATING_DEFAULTS_DIGEST, l as prependOperatingDefaultsToMirroredClaudeMd, m as planModeAllowRules, n as INJECTED_SKILLS, o as appendToolbeltAwarenessToMirroredClaudeMd, p as injectAllowRules, r as writeInjectedSkill, s as buildOperatingDefaultsDirective, t as injectAttributionSuppressionIntoSettingsFile, u as prependStyleDirectiveToMirroredClaudeMd, v as resolveCodexCliBackend, x as writePeerMcpRuntimeFiles, y as resolveGroupKeysFromMirror } from "./attribution-settings-CpLUCi8R.js";
+import { a as sharedServerArgs, c as stopKeepAwake, d as runSelfUpdate, f as checkClaudeVersion, i as setupAndServe, l as listModelsForEndpoint, o as LAUNCH_SECRET_HEADER, p as updateClaude, r as parseSharedArgs, s as startKeepAwake, t as getClaudeCodeEnvVars, u as enableFileLogging } from "./server-setup-DsGJnJ_O.js";
+import { n as hookLauncherDegradedWarning, r as resolveSelfInvocation } from "./self-invocation-DAB_od0C.js";
+import { i as launchChild, r as getCodexVersion, t as provisionToolbelt } from "./provision-DeNqzvSM.js";
+import { i as captureLaunchBaseline, l as stopGateDisabled, n as buildSessionBindHookCommand, r as buildStopHookCommand, s as injectStopHookIntoSettingsFile, t as buildArtifactOpenHookCommand, u as stopGateId } from "./stop-gate-hook-DQnh_KfI.js";
+import { t as liveExec } from "./orchestration-BiGCEwbH.js";
+import { c as repoRoot, d as trustRepo, l as stopGateEnabledForRepo, s as repoFingerprint, t as fileBaselineStore } from "./stop-gate-policy-DMr3KVmw.js";
+import { l as guardToolMatcher, n as activeDispatchModes, r as buildWorkerGuardHookCommand } from "./worker-dispatch-BEHkTbnH.js";
+import { _ as injectPeerMcpIntoMirror, a as appendPeerAwarenessToMirroredClaudeMd, b as workersKeyOf, c as prependArtifactPanelDirectiveToMirroredClaudeMd, i as OPERATING_DEFAULTS_DIGEST, l as prependOperatingDefaultsToMirroredClaudeMd, m as planModeAllowRules, n as INJECTED_SKILLS, o as appendToolbeltAwarenessToMirroredClaudeMd, p as injectAllowRules, r as writeInjectedSkill, s as buildOperatingDefaultsDirective, t as injectAttributionSuppressionIntoSettingsFile, u as prependStyleDirectiveToMirroredClaudeMd, v as resolveCodexCliBackend, x as writePeerMcpRuntimeFiles, y as resolveGroupKeysFromMirror } from "./attribution-settings-pkIop1NU.js";
 import { r as hookMcpRuntimeFromEnv } from "./hook-mcp-client-DBvm9608.js";
-import { i as planReviewEnabled, t as buildPlanReviewHookCommand } from "./plan-review-hook-CfcanA7_.js";
-import { a as checksForDescriptor, i as writeDiscoveredGate, n as readDiscoveredGate, o as descriptorHash, r as sourcesHash, s as parseGateDescriptor, t as discoverGateCommands } from "./gate-discovery-Bjar5dgv.js";
-import { t as buildPromptSubmitHookCommand } from "./prompt-submit-hook-Bqf9ORgb.js";
-import { i as assertShapingInstalled, n as buildFirstMateGuardHookCommand, t as FIRST_MATE_GUARD_MATCHER } from "./internal-first-mate-guard-CVFFJriA.js";
+import { i as planReviewEnabled, t as buildPlanReviewHookCommand } from "./plan-review-hook-DuW0pSoM.js";
+import { a as checksForDescriptor, i as writeDiscoveredGate, n as readDiscoveredGate, o as descriptorHash, r as sourcesHash, s as parseGateDescriptor, t as discoverGateCommands } from "./gate-discovery-WcduofL4.js";
+import { t as buildPromptSubmitHookCommand } from "./prompt-submit-hook-IMl7ssfr.js";
+import { i as assertShapingInstalled, n as buildFirstMateGuardHookCommand, t as FIRST_MATE_GUARD_MATCHER } from "./internal-first-mate-guard-C9BV7J4U.js";
+import { r as FAST_DISPATCH_TOOL_MATCHER, t as buildFastDispatchGuardHookCommand } from "./internal-fast-dispatch-guard-Xyu17k9X.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 import path from "node:path";
 import { randomBytes } from "node:crypto";
 import { tmpdir } from "node:os";
 import process from "node:process";
+//#region src/lib/orchestration/fast-dispatch-hook.ts
+/** Sentinel preserved through claude.ts's optional codex-MCP catch. */
+var FastDispatchGuardInstallError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "FastDispatchGuardInstallError";
+	}
+};
+/** Assert fast launches never spawn without their native dispatch ACL. */
+function assertFastDispatchGuardInstalled(fastProfile, installationSucceeded) {
+	if (fastProfile && !installationSucceeded) throw new FastDispatchGuardInstallError("fast profile requires the native Task/Agent ACL hook, but it could not be installed; refusing to start an unguarded fast session.");
+}
+/** This module is intentionally stateless; callers own launch cleanup. */
+//#endregion
 //#region src/lib/injected-skills/artifact-review-skill.ts
 const ARTIFACT_REVIEW_SKILL = {
 	name: "gh-artifact-review",
@@ -94,6 +109,29 @@ To let the human act on the artifact (not just comment), emit declarative contro
 `
 };
 //#endregion
+//#region src/lib/fast-launch-cleanup.ts
+function createFastLaunchCleanup(deps) {
+	let cleanupPromise;
+	return () => {
+		if (cleanupPromise) return cleanupPromise;
+		cleanupPromise = (async () => {
+			try {
+				await deps.server?.close(true);
+			} catch {}
+			try {
+				await deps.stopKeepAwake();
+			} catch {}
+			if (deps.runtimeCleanup) try {
+				await deps.runtimeCleanup();
+			} catch {}
+			try {
+				await deps.removeMirror();
+			} catch {}
+		})();
+		return cleanupPromise;
+	};
+}
+//#endregion
 //#region src/claude.ts
 function isFirstMateSkillName(name) {
 	return name === "gh-first-mate" || name === "gh-first-mate-scaffold" || name === "gh-first-mate-operate" || name === "gh-first-mate-conduct";
@@ -214,6 +252,12 @@ const claude = defineCommand({
 			process.exit(1);
 		}
 		const parsed = parseSharedArgs(args);
+		const requestedLaunchProfileId = resolveLaunchProfile(args.model);
+		const codexMcpEnabled = args["codex-mcp"] !== false;
+		if (requestedLaunchProfileId === "fast" && !codexMcpEnabled) {
+			process.stderr.write(`github-router claude -m fast requires codex MCP wiring for its native roster and dispatch ACL; remove --no-codex-mcp or choose a standard model.\n`);
+			process.exit(1);
+		}
 		if (args.stealth) {
 			parsed.extendedBetas = false;
 			consola.info("Stealth mode: VS Code-only beta filtering. Leverage features disabled.");
@@ -247,24 +291,52 @@ const claude = defineCommand({
 			process.exit(1);
 		}
 		runSelfUpdate({ selfUpdate: args["self-update"] !== false });
+		const cleanupPreMirrorFailure = createFastLaunchCleanup({
+			server,
+			stopKeepAwake,
+			removeMirror: removeOwnClaudeConfigMirror
+		});
 		try {
 			await ensureClaudeConfigMirror();
 		} catch (err) {
 			consola.error(`Failed to provision CLAUDE_CONFIG_DIR mirror: ${err instanceof Error ? err.message : String(err)}. Spawned Claude Code would not be able to authenticate.`);
+			await cleanupPreMirrorFailure();
 			process.exit(1);
 		}
 		enableFileLogging();
+		let fastRuntimeCleanup;
+		let fastLaunchId;
+		let fastCleanupPromise;
+		const disposeFastRuntime = async () => {
+			if (!fastRuntimeCleanup) return;
+			fastCleanupPromise ??= fastRuntimeCleanup();
+			await fastCleanupPromise;
+		};
+		const resetFastRuntimeOwnership = () => {
+			fastRuntimeCleanup = void 0;
+			fastLaunchId = void 0;
+		};
+		const cleanupFastLaunch = createFastLaunchCleanup({
+			server,
+			stopKeepAwake,
+			removeMirror: removeOwnClaudeConfigMirror,
+			runtimeCleanup: async () => {
+				if (fastRuntimeCleanup) await fastRuntimeCleanup();
+			}
+		});
+		const fastFatal = async (message) => {
+			consola.error(message);
+			process.stderr.write(`${message}\n`);
+			await cleanupFastLaunch();
+			process.exit(1);
+			throw new Error("process.exit returned unexpectedly");
+		};
 		const usingDefault = !args.model?.trim();
 		const requestedSlug = resolveLeadSlugArg(args.model);
 		const launchProfileId = resolveLaunchProfile(args.model);
 		if (launchProfileId === "fast") {
 			const prereqCheck = validateFastProfilePrerequisites(state.models);
-			if (!prereqCheck.ok) {
-				const message = formatFastPrerequisiteFailure(prereqCheck.missing);
-				consola.error(message);
-				process.stderr.write(`${message}\n`);
-				process.exit(1);
-			}
+			if (!prereqCheck.ok) await fastFatal(formatFastPrerequisiteFailure(prereqCheck.missing));
 		}
 		let chosenSlug = launchProfileId === "fast" ? requestedSlug.endsWith("[1m]") ? `${LUNA_DRIVER_ALIAS_ID}[1m]` : LUNA_DRIVER_ALIAS_ID : requestedSlug;
 		let resolvedSlug = launchProfileId === "fast" ? resolveModel(requestedSlug) : resolveModel(chosenSlug);
@@ -312,12 +384,13 @@ const claude = defineCommand({
 		let onShutdown = baseShutdown;
 		let peerAwarenessSnippet;
 		let peerAwarenessSummary;
-		let fastRuntimeWired = launchProfileId !== "fast";
+		let fastWiringComplete = launchProfileId !== "fast";
 		const nativeAgentModels = launchProfileId === "fast" ? {
 			scout: fastScoutModel(),
 			implementer: fastImplementerModel(),
 			reviewer: fastReviewerModel(),
-			planner: fastPlannerModel()
+			planner: fastPlannerModel(),
+			critic: fastCriticModel()
 		} : {
 			implementer: nativeSubagentModel(),
 			"implementer-fast": implementerFastModel(),
@@ -336,7 +409,6 @@ const claude = defineCommand({
 			budgetLead: isBudgetClaudeLead(chosenSlug),
 			profile: launchProfileId
 		};
-		const codexMcpEnabled = args["codex-mcp"] !== false;
 		const selfInvocation = await resolveSelfInvocation();
 		{
 			const warning = hookLauncherDegradedWarning(selfInvocation);
@@ -365,7 +437,7 @@ const claude = defineCommand({
 			if (!isFastProfile && fleetToolsEnabled()) enabledGroups.push("fleet");
 			if (!isFastProfile && agentToolsEnabled()) enabledGroups.push("first-mate");
 			const { keys: groupKeys, skipped: skippedGroups } = await resolveGroupKeysFromMirror(enabledGroups);
-			if (isFastProfile && fastOracleModel() == null) throw new Error("fast profile prerequisite drift: exact claude-opus-5 Oracle no longer resolves");
+			if (isFastProfile && (fastOracleModel() == null || fastCriticModel() == null)) throw new Error("fast profile prerequisite drift: exact Oracle or critic model no longer resolves");
 			const runtime = await writePeerMcpRuntimeFiles(serverUrl, {
 				codexCli: backend === "cli",
 				selfInvocation,
@@ -388,13 +460,15 @@ const claude = defineCommand({
 				...isFastProfile ? {
 					fastProfile: true,
 					plannerModel: nativeAgentModels.planner,
+					criticModel: nativeAgentModels.critic,
 					scoutEffort: FAST_SCOUT_EFFORT,
 					implementerEffort: "max",
 					reviewerEffort: FAST_REVIEWER_EFFORT,
-					plannerEffort: FAST_PLANNER_EFFORT
+					plannerEffort: FAST_PLANNER_EFFORT,
+					criticEffort: FAST_CRITIC_EFFORT
 				} : {}
 			});
-			fastRuntimeWired = true;
+			if (isFastProfile) fastRuntimeCleanup = runtime.cleanup;
 			const launchSecret = randomBytes(32).toString("hex");
 			const launchEntry = registerLaunch({
 				profileId: launchProfileId,
@@ -403,27 +477,60 @@ const claude = defineCommand({
 				allowedGroups: fastDescriptor.allowedGroups,
 				allowedPersonas: fastDescriptor.personaAllowlist
 			});
+			if (isFastProfile) fastLaunchId = launchEntry.launchId;
 			envVars.ANTHROPIC_CUSTOM_HEADERS = envVars.ANTHROPIC_CUSTOM_HEADERS ? `${envVars.ANTHROPIC_CUSTOM_HEADERS}\n${LAUNCH_SECRET_HEADER}: ${launchSecret}` : `${LAUNCH_SECRET_HEADER}: ${launchSecret}`;
 			envVars.GH_ROUTER_HOOK_MCP_URL = serverUrl;
 			envVars.GH_ROUTER_HOOK_NONCE = runtime.nonce;
-			onShutdown = async () => {
+			onShutdown = isFastProfile ? async () => {
+				try {
+					unregisterLaunch(launchEntry.launchId);
+				} finally {
+					try {
+						await runtime.cleanup();
+					} finally {
+						resetFastRuntimeOwnership();
+						await baseShutdown();
+					}
+				}
+			} : async () => {
 				unregisterLaunch(launchEntry.launchId);
 				await runtime.cleanup();
 				await baseShutdown();
 			};
-			const injected = await injectPeerMcpIntoMirror(serverUrl, {
-				codexCli: backend === "cli",
-				selfInvocation,
-				geminiAvailable: geminiModelsAvailable,
-				groupKeys,
-				nonce: runtime.nonce
-			});
-			if (!injected.ok) {
+			let subagentVisibility;
+			let injected;
+			if (isFastProfile) {
 				extraArgs.push("--mcp-config", runtime.mcpConfigPath);
 				if (args["codex-mcp-only"] === true) extraArgs.push("--strict-mcp-config");
-			} else if (args["codex-mcp-only"] === true) consola.warn("--codex-mcp-only has no effect when peer MCP is wired via the mirrored .claude.json (the user's existing user-scope MCPs in the snapshot are still visible). Pass --no-codex-mcp to skip peer-MCP wiring entirely.");
+				subagentVisibility = "role-scoped (lead via --mcp-config; subagents via inline mcpServers)";
+			} else {
+				injected = await injectPeerMcpIntoMirror(serverUrl, {
+					codexCli: backend === "cli",
+					selfInvocation,
+					geminiAvailable: geminiModelsAvailable,
+					groupKeys,
+					nonce: runtime.nonce
+				});
+				if (!injected.ok) {
+					extraArgs.push("--mcp-config", runtime.mcpConfigPath);
+					if (args["codex-mcp-only"] === true) extraArgs.push("--strict-mcp-config");
+				} else if (args["codex-mcp-only"] === true) consola.warn("--codex-mcp-only has no effect when peer MCP is wired via the mirrored .claude.json (the user's existing user-scope MCPs in the snapshot are still visible). Pass --no-codex-mcp to skip peer-MCP wiring entirely.");
+				subagentVisibility = injected.ok ? `subagent-visible (mirrored mcpServers: [${injected.serversAdded.join(", ")}])` : `subagent-INVISIBLE (collision on user-side mcpServers: [${injected.conflictingServers.join(", ")}]; parent-only via --mcp-config)`;
+			}
+			if (isFastProfile) {
+				let fastGuardInstalled = false;
+				try {
+					const settingsPath = path.join(PATHS.CLAUDE_CONFIG_DIR, "settings.json");
+					const guardCommand = buildFastDispatchGuardHookCommand(selfInvocation);
+					await injectStopHookIntoSettingsFile(settingsPath, guardCommand, "PreToolUse", 10, FAST_DISPATCH_TOOL_MATCHER);
+					fastGuardInstalled = true;
+				} catch (err) {
+					consola.error(`Could not register the fast native dispatch ACL hook: ${String(err)}`);
+				}
+				assertFastDispatchGuardInstalled(true, fastGuardInstalled);
+				fastWiringComplete = true;
+			}
 			const personaNames = runtime.personas.map((p) => p.agentName).join(", ");
-			const subagentVisibility = injected.ok ? `subagent-visible (mirrored mcpServers: [${injected.serversAdded.join(", ")}])` : `subagent-INVISIBLE (collision on user-side mcpServers: [${injected.conflictingServers.join(", ")}]; parent-only via --mcp-config)`;
 			const skippedNote = skippedGroups.length > 0 ? ` WARNING: groups [${skippedGroups.join(", ")}] skipped — both the bare and \`gh-router-<group>\` keys collide with your own mcpServers; those tools are unavailable this session (rename the user-side server to re-enable).` : "";
 			process.stderr.write(`Peer MCP wired (backend=${backend}, personas=[${personaNames}], subagent .md files=${runtime.agentMdPaths.length}, ${subagentVisibility}).${skippedNote}\n`);
 			const sessionCwd = process.cwd();
@@ -443,14 +550,14 @@ const claude = defineCommand({
 			}
 			try {
 				const settingsPath = path.join(PATHS.CLAUDE_CONFIG_DIR, "settings.json");
-				const injectedServerKeys = injected.ok ? injected.serversAdded : [...Object.values(groupKeys).filter((k) => Boolean(k)), ...backend === "cli" ? ["codex-cli"] : []];
+				const injectedServerKeys = injected?.ok ? injected.serversAdded : [...Object.values(groupKeys).filter((k) => Boolean(k)), ...backend === "cli" ? ["codex-cli"] : []];
 				const res = await injectAllowRules(settingsPath, planModeAllowRules(injectedServerKeys));
 				if (res.added.length) consola.debug(`Auto-approved for plan mode: ${res.added.join(", ")}`);
 			} catch (err) {
 				consola.warn(`Could not auto-approve injected tools: ${String(err)}`);
 			}
 			if (workerSkillsActive) {
-				if (!injected.ok) consola.warn("Workers non-blocking guard NOT registered: subagent MCP injection fell back to parent-only (--mcp-config), so worker-* dispatchers cannot reach the workers server. Raw (blocking) worker tools remain usable on the main thread this session.");
+				if (!injected?.ok) consola.warn("Workers non-blocking guard NOT registered: subagent MCP injection fell back to parent-only (--mcp-config), so worker-* dispatchers cannot reach the workers server. Raw (blocking) worker tools remain usable on the main thread this session.");
 				else if (process.env.GH_ROUTER_DISABLE_WORKER_GUARD === "1") consola.info("Workers non-blocking guard disabled via GH_ROUTER_DISABLE_WORKER_GUARD=1 — raw mcp__workers__* is callable on the main thread (blocking); the worker-* background agents remain the steered, non-blocking default.");
 				else try {
 					const settingsPath = path.join(PATHS.CLAUDE_CONFIG_DIR, "settings.json");
@@ -625,6 +732,7 @@ const claude = defineCommand({
 				fleetAvailable: fleetToolsEnabled(),
 				agentToolsAvailable: agentToolsEnabled(),
 				...nativeAvailability,
+				profile: launchProfileId,
 				groupKeys
 			});
 			peerAwarenessSnippet = peerSnippet;
@@ -635,6 +743,7 @@ const claude = defineCommand({
 				fleetAvailable: fleetToolsEnabled(),
 				agentToolsAvailable: agentToolsEnabled(),
 				...nativeAvailability,
+				profile: launchProfileId,
 				nativeAgentModels,
 				groupKeys
 			});
@@ -649,13 +758,24 @@ const claude = defineCommand({
 				consola.warn(`Style-directive CLAUDE.md prepend failed: ${err instanceof Error ? err.message : String(err)}`);
 			}
 		} catch (err) {
+			if (launchProfileId === "fast") {
+				if (fastLaunchId) unregisterLaunch(fastLaunchId);
+				await disposeFastRuntime().catch(() => {});
+				await server.close(true).catch(() => {});
+				await baseShutdown().catch(() => {});
+				resetFastRuntimeOwnership();
+				const message = `Fast profile wiring failed; refusing to launch an unguarded session: ${err instanceof Error ? err.message : String(err)}`;
+				consola.error(message);
+				process.stderr.write(`${message}\n`);
+				process.exit(1);
+			}
 			consola.warn(`Peer MCP wiring failed (claude will launch without it): ${err instanceof Error ? err.message : String(err)}`);
 		}
 		extraArgs.push("--append-system-prompt", peerAwarenessSnippet && peerAwarenessSummary ? `${OPERATING_DEFAULTS_DIGEST}\n\n${peerAwarenessSummary}` : OPERATING_DEFAULTS_DIGEST);
 		try {
 			await prependOperatingDefaultsToMirroredClaudeMd(buildOperatingDefaultsDirective({
 				...nativeAvailability,
-				fastRuntimeAvailable: fastRuntimeWired
+				fastRuntimeAvailable: fastWiringComplete
 			}));
 		} catch (err) {
 			consola.warn(`Operating-defaults CLAUDE.md prepend failed: ${err instanceof Error ? err.message : String(err)}`);
@@ -677,4 +797,4 @@ const claude = defineCommand({
 //#endregion
 export { claude };
 
-//# sourceMappingURL=claude-_DYGKCw8.js.map
+//# sourceMappingURL=claude-DNmxk-Rm.js.map