github-router 0.3.293 → 0.3.297

package/dist/{auth-BwUHopJz.js → auth-CluG5e-l.js}

@@ -1,5 +1,5 @@
-import { i as ensurePaths, t as PATHS } from "./paths-BH4J7slC.js";
-import { A as state, r as setupGitHubToken } from "./token-8drORhXg.js";
+import { i as ensurePaths, t as PATHS } from "./paths-Ci485qSJ.js";
+import { A as state, r as setupGitHubToken } from "./token-BtJhjXXu.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 //#region src/auth.ts
@@ -41,4 +41,4 @@ const auth = defineCommand({
 //#endregion
 export { auth };
 
-//# sourceMappingURL=auth-BwUHopJz.js.map
+//# sourceMappingURL=auth-CluG5e-l.js.map

package/dist/{auth-BwUHopJz.js.map → auth-CluG5e-l.js.map}

@@ -1 +1 @@
-{"version":3,"file":"auth-BwUHopJz.js","names":[],"sources":["../src/auth.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport { PATHS, ensurePaths } from \"./lib/paths\"\nimport { state } from \"./lib/state\"\nimport { setupGitHubToken } from \"./lib/token\"\n\ninterface RunAuthOptions {\n  verbose: boolean\n  showToken: boolean\n}\n\nexport async function runAuth(options: RunAuthOptions): Promise<void> {\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  await setupGitHubToken({ force: true })\n  consola.success(\"GitHub token written to\", PATHS.GITHUB_TOKEN_PATH)\n}\n\nexport const auth = defineCommand({\n  meta: {\n    name: \"auth\",\n    description: \"Run GitHub auth flow without running the server\",\n  },\n  args: {\n    verbose: {\n      alias: \"v\",\n      type: \"boolean\",\n      default: false,\n      description: \"Enable verbose logging\",\n    },\n    \"show-token\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Show GitHub token on auth\",\n    },\n  },\n  run({ args }) {\n    return runAuth({\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n"],"mappings":";;;;;AAcA,eAAsB,QAAQ,SAAwC;CACpE,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,iBAAiB,EAAE,OAAO,KAAK,CAAC;CACtC,QAAQ,QAAQ,2BAA2B,MAAM,iBAAiB;AACpE;AAEA,MAAa,OAAO,cAAc;CAChC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,SAAS;GACP,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,cAAc;GACZ,MAAM;GACN,SAAS;GACT,aAAa;EACf;CACF;CACA,IAAI,EAAE,QAAQ;EACZ,OAAO,QAAQ;GACb,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC"}
+{"version":3,"file":"auth-CluG5e-l.js","names":[],"sources":["../src/auth.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport { PATHS, ensurePaths } from \"./lib/paths\"\nimport { state } from \"./lib/state\"\nimport { setupGitHubToken } from \"./lib/token\"\n\ninterface RunAuthOptions {\n  verbose: boolean\n  showToken: boolean\n}\n\nexport async function runAuth(options: RunAuthOptions): Promise<void> {\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  await setupGitHubToken({ force: true })\n  consola.success(\"GitHub token written to\", PATHS.GITHUB_TOKEN_PATH)\n}\n\nexport const auth = defineCommand({\n  meta: {\n    name: \"auth\",\n    description: \"Run GitHub auth flow without running the server\",\n  },\n  args: {\n    verbose: {\n      alias: \"v\",\n      type: \"boolean\",\n      default: false,\n      description: \"Enable verbose logging\",\n    },\n    \"show-token\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Show GitHub token on auth\",\n    },\n  },\n  run({ args }) {\n    return runAuth({\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n"],"mappings":";;;;;AAcA,eAAsB,QAAQ,SAAwC;CACpE,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,iBAAiB,EAAE,OAAO,KAAK,CAAC;CACtC,QAAQ,QAAQ,2BAA2B,MAAM,iBAAiB;AACpE;AAEA,MAAa,OAAO,cAAc;CAChC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,SAAS;GACP,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,cAAc;GACZ,MAAM;GACN,SAAS;GACT,aAAa;EACf;CACF;CACA,IAAI,EAAE,QAAQ;EACZ,OAAO,QAAQ;GACb,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC"}

package/dist/browser-ext/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "name": "github-router browser bridge",
   "short_name": "gh-router-browser",
-  "version": "0.3.293",
+  "version": "0.3.297",
   "description": "Bridge between Claude (via github-router /mcp) and the browser. Implements tab control, navigation, clicks, form fill, downloads, screenshots, devtools eval. Blocks navigation to chrome://settings.",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJElxuBlonBS3TVW9FJN0mGTtShB3L1hoaYf6k39SOr1ogGYmF90EjRxy1i21k9wQQjPf26bcBu/9X67KrQjQV0uB38CaNukgiSeoLjfptN811u+PJHx6BP+jx3Qa6/3VenNPxHC8WEU0GXql8QSjIHEyCwKb6fMASXOK94JyB5Ywov2x8mt/+9ncqBBBMVzf6r5Sagy4PL1XnryLsuADD/vOEkPet8wXgH/Oj7v5tTsQQZ7U1JT51PoDs2BFnXc5v3TkVgZwd32k3ONh+nkDw1Hof+4zwUGOyJE6eMrlYzRlKM4Qxdf9JpavQvqfieAbTRWcyKeclnHeoIfE7cDBQIDAQAB",
   "background": {

package/dist/{check-usage-BTda5753.js → check-usage-iOzfnKJe.js}

@@ -1,6 +1,6 @@
-import { i as ensurePaths } from "./paths-BH4J7slC.js";
-import { r as setupGitHubToken } from "./token-8drORhXg.js";
-import { t as getCopilotUsage } from "./get-copilot-usage-CRrf1ZSC.js";
+import { i as ensurePaths } from "./paths-Ci485qSJ.js";
+import { r as setupGitHubToken } from "./token-BtJhjXXu.js";
+import { t as getCopilotUsage } from "./get-copilot-usage-B7Z4XVWj.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 //#region src/check-usage.ts
@@ -40,4 +40,4 @@ const checkUsage = defineCommand({
 //#endregion
 export { checkUsage };
 
-//# sourceMappingURL=check-usage-BTda5753.js.map
+//# sourceMappingURL=check-usage-iOzfnKJe.js.map

package/dist/{check-usage-BTda5753.js.map → check-usage-iOzfnKJe.js.map}

@@ -1 +1 @@
-{"version":3,"file":"check-usage-BTda5753.js","names":[],"sources":["../src/check-usage.ts"],"sourcesContent":["import { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport { ensurePaths } from \"./lib/paths\"\nimport { setupGitHubToken } from \"./lib/token\"\nimport {\n  getCopilotUsage,\n  type QuotaDetail,\n} from \"./services/github/get-copilot-usage\"\n\nexport const checkUsage = defineCommand({\n  meta: {\n    name: \"check-usage\",\n    description: \"Show current GitHub Copilot usage/quota information\",\n  },\n  async run() {\n    await ensurePaths()\n    await setupGitHubToken()\n    try {\n      const usage = await getCopilotUsage()\n      const premium = usage.quota_snapshots.premium_interactions\n      const premiumTotal = premium.entitlement\n      const premiumUsed = premiumTotal - premium.remaining\n      const premiumPercentUsed =\n        premiumTotal > 0 ? (premiumUsed / premiumTotal) * 100 : 0\n      const premiumPercentRemaining = premium.percent_remaining\n\n      // Helper to summarize a quota snapshot\n      function summarizeQuota(name: string, snap: QuotaDetail | undefined) {\n        if (!snap) return `${name}: N/A`\n        const total = snap.entitlement\n        const used = total - snap.remaining\n        const percentUsed = total > 0 ? (used / total) * 100 : 0\n        const percentRemaining = snap.percent_remaining\n        return `${name}: ${used}/${total} used (${percentUsed.toFixed(1)}% used, ${percentRemaining.toFixed(1)}% remaining)`\n      }\n\n      const premiumLine = `Premium: ${premiumUsed}/${premiumTotal} used (${premiumPercentUsed.toFixed(1)}% used, ${premiumPercentRemaining.toFixed(1)}% remaining)`\n      const chatLine = summarizeQuota(\"Chat\", usage.quota_snapshots.chat)\n      const completionsLine = summarizeQuota(\n        \"Completions\",\n        usage.quota_snapshots.completions,\n      )\n\n      consola.box(\n        `Copilot Usage (plan: ${usage.copilot_plan})\\n`\n          + `Quota resets: ${usage.quota_reset_date}\\n`\n          + `\\nQuotas:\\n`\n          + `  ${premiumLine}\\n`\n          + `  ${chatLine}\\n`\n          + `  ${completionsLine}`,\n      )\n    } catch (err) {\n      consola.error(\"Failed to fetch Copilot usage:\", err)\n      process.exit(1)\n    }\n  },\n})\n"],"mappings":";;;;;;AAUA,MAAa,aAAa,cAAc;CACtC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM,MAAM;EACV,MAAM,YAAY;EAClB,MAAM,iBAAiB;EACvB,IAAI;GACF,MAAM,QAAQ,MAAM,gBAAgB;GACpC,MAAM,UAAU,MAAM,gBAAgB;GACtC,MAAM,eAAe,QAAQ;GAC7B,MAAM,cAAc,eAAe,QAAQ;GAC3C,MAAM,qBACJ,eAAe,IAAK,cAAc,eAAgB,MAAM;GAC1D,MAAM,0BAA0B,QAAQ;GAGxC,SAAS,eAAe,MAAc,MAA+B;IACnE,IAAI,CAAC,MAAM,OAAO,GAAG,KAAK;IAC1B,MAAM,QAAQ,KAAK;IACnB,MAAM,OAAO,QAAQ,KAAK;IAC1B,MAAM,cAAc,QAAQ,IAAK,OAAO,QAAS,MAAM;IACvD,MAAM,mBAAmB,KAAK;IAC9B,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG,MAAM,SAAS,YAAY,QAAQ,CAAC,EAAE,UAAU,iBAAiB,QAAQ,CAAC,EAAE;GACzG;GAEA,MAAM,cAAc,YAAY,YAAY,GAAG,aAAa,SAAS,mBAAmB,QAAQ,CAAC,EAAE,UAAU,wBAAwB,QAAQ,CAAC,EAAE;GAChJ,MAAM,WAAW,eAAe,QAAQ,MAAM,gBAAgB,IAAI;GAClE,MAAM,kBAAkB,eACtB,eACA,MAAM,gBAAgB,WACxB;GAEA,QAAQ,IACN,wBAAwB,MAAM,aAAa,mBACtB,MAAM,iBAAiB,iBAEnC,YAAY,MACZ,SAAS,MACT,iBACX;EACF,SAAS,KAAK;GACZ,QAAQ,MAAM,kCAAkC,GAAG;GACnD,QAAQ,KAAK,CAAC;EAChB;CACF;AACF,CAAC"}
+{"version":3,"file":"check-usage-iOzfnKJe.js","names":[],"sources":["../src/check-usage.ts"],"sourcesContent":["import { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport { ensurePaths } from \"./lib/paths\"\nimport { setupGitHubToken } from \"./lib/token\"\nimport {\n  getCopilotUsage,\n  type QuotaDetail,\n} from \"./services/github/get-copilot-usage\"\n\nexport const checkUsage = defineCommand({\n  meta: {\n    name: \"check-usage\",\n    description: \"Show current GitHub Copilot usage/quota information\",\n  },\n  async run() {\n    await ensurePaths()\n    await setupGitHubToken()\n    try {\n      const usage = await getCopilotUsage()\n      const premium = usage.quota_snapshots.premium_interactions\n      const premiumTotal = premium.entitlement\n      const premiumUsed = premiumTotal - premium.remaining\n      const premiumPercentUsed =\n        premiumTotal > 0 ? (premiumUsed / premiumTotal) * 100 : 0\n      const premiumPercentRemaining = premium.percent_remaining\n\n      // Helper to summarize a quota snapshot\n      function summarizeQuota(name: string, snap: QuotaDetail | undefined) {\n        if (!snap) return `${name}: N/A`\n        const total = snap.entitlement\n        const used = total - snap.remaining\n        const percentUsed = total > 0 ? (used / total) * 100 : 0\n        const percentRemaining = snap.percent_remaining\n        return `${name}: ${used}/${total} used (${percentUsed.toFixed(1)}% used, ${percentRemaining.toFixed(1)}% remaining)`\n      }\n\n      const premiumLine = `Premium: ${premiumUsed}/${premiumTotal} used (${premiumPercentUsed.toFixed(1)}% used, ${premiumPercentRemaining.toFixed(1)}% remaining)`\n      const chatLine = summarizeQuota(\"Chat\", usage.quota_snapshots.chat)\n      const completionsLine = summarizeQuota(\n        \"Completions\",\n        usage.quota_snapshots.completions,\n      )\n\n      consola.box(\n        `Copilot Usage (plan: ${usage.copilot_plan})\\n`\n          + `Quota resets: ${usage.quota_reset_date}\\n`\n          + `\\nQuotas:\\n`\n          + `  ${premiumLine}\\n`\n          + `  ${chatLine}\\n`\n          + `  ${completionsLine}`,\n      )\n    } catch (err) {\n      consola.error(\"Failed to fetch Copilot usage:\", err)\n      process.exit(1)\n    }\n  },\n})\n"],"mappings":";;;;;;AAUA,MAAa,aAAa,cAAc;CACtC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM,MAAM;EACV,MAAM,YAAY;EAClB,MAAM,iBAAiB;EACvB,IAAI;GACF,MAAM,QAAQ,MAAM,gBAAgB;GACpC,MAAM,UAAU,MAAM,gBAAgB;GACtC,MAAM,eAAe,QAAQ;GAC7B,MAAM,cAAc,eAAe,QAAQ;GAC3C,MAAM,qBACJ,eAAe,IAAK,cAAc,eAAgB,MAAM;GAC1D,MAAM,0BAA0B,QAAQ;GAGxC,SAAS,eAAe,MAAc,MAA+B;IACnE,IAAI,CAAC,MAAM,OAAO,GAAG,KAAK;IAC1B,MAAM,QAAQ,KAAK;IACnB,MAAM,OAAO,QAAQ,KAAK;IAC1B,MAAM,cAAc,QAAQ,IAAK,OAAO,QAAS,MAAM;IACvD,MAAM,mBAAmB,KAAK;IAC9B,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG,MAAM,SAAS,YAAY,QAAQ,CAAC,EAAE,UAAU,iBAAiB,QAAQ,CAAC,EAAE;GACzG;GAEA,MAAM,cAAc,YAAY,YAAY,GAAG,aAAa,SAAS,mBAAmB,QAAQ,CAAC,EAAE,UAAU,wBAAwB,QAAQ,CAAC,EAAE;GAChJ,MAAM,WAAW,eAAe,QAAQ,MAAM,gBAAgB,IAAI;GAClE,MAAM,kBAAkB,eACtB,eACA,MAAM,gBAAgB,WACxB;GAEA,QAAQ,IACN,wBAAwB,MAAM,aAAa,mBACtB,MAAM,iBAAiB,iBAEnC,YAAY,MACZ,SAAS,MACT,iBACX;EACF,SAAS,KAAK;GACZ,QAAQ,MAAM,kCAAkC,GAAG;GACnD,QAAQ,KAAK,CAAC;EAChB;CACF;AACF,CAAC"}

package/dist/{claude-BoAd_L2W.js → claude-DMMfvfns.js}

@@ -1,26 +1,42 @@
-import { Ct as resolveGeminiReviewModel, Dt as scribeModel, E as toolbeltEnabled, Et as scoutModel, Ft as registerLaunch, It as unregisterLaunch, Jt as colbertDegradedWarning, Kt as provisionBrowserAssets, Ot as standInToolEnabled, Qt as warmTreeSitterPool, St as nativeSubagentModel, T as buildToolbeltAwareness, Tt as reviewerModel, Yt as provisionAndIndexColbert, _t as fastScoutModel, at as FAST_REVIEWER_EFFORT, bt as generalPurposeFastModel, ct as artifactToolsEnabled, dt as browserCompoundToolsEnabled, ft as browserToolsEnabled, gn as resolveLeadSlugArg, gt as fastReviewerModel, hn as pickClaudeDefault, ht as fastPlannerModel, it as FAST_PLANNER_EFFORT, kt as workerToolsEnabled, lt as brainstormModel, mn as isBudgetClaudeLead, mt as fastOracleModel, nn as shouldUseInsecureTls, o as buildPeerAwarenessSnippet, ot as FAST_SCOUT_EFFORT, pt as fastImplementerModel, r as agentNamesForToolAllowlist, s as buildPeerAwarenessSummary, sn as DEFAULT_CLAUDE_MODEL_FALLBACKS, st as agentToolsEnabled, ut as browseAgentEnabled, vt as fleetToolsEnabled, w as availableToolCommands, wt as reviewerFastModel, xt as implementerFastModel, yt as geminiAvailable } from "./peer-mcp-personas-DhI7ZPSx.js";
-import { o as removeOwnClaudeConfigMirror, r as ensureClaudeConfigMirror, t as PATHS, u as writeArtifactCredsToMirror } from "./paths-BH4J7slC.js";
-import { A as state, d as resolveModel } from "./token-8drORhXg.js";
+import { $t as unregisterLaunch, At as standInToolEnabled, Bt as formatFastPrerequisiteFailure, Ct as implementerFastModel, Dt as reviewerModel, E as toolbeltEnabled, Et as reviewerFastModel, Ht as resolveLaunchProfile, Mn as pickClaudeDefault, Nn as resolveLeadSlugArg, Nt as LUNA_DRIVER_ALIAS_ID, Ot as scoutModel, Qt as registerLaunch, St as generalPurposeFastModel, T as buildToolbeltAwareness, Tt as resolveGeminiReviewModel, Vt as profileDescriptor, Wt as validateFastProfilePrerequisites, _t as fastPlannerModel, at as FAST_PLANNER_EFFORT, bt as fleetToolsEnabled, ct as agentToolsEnabled, dn as colbertDegradedWarning, dt as browseAgentEnabled, fn as provisionAndIndexColbert, ft as browserCompoundToolsEnabled, gt as fastOracleModel, hn as warmTreeSitterPool, ht as fastImplementerModel, it as FAST_IMPLEMENTER_EFFORT, jn as isBudgetClaudeLead, jt as workerToolsEnabled, kt as scribeModel, ln as provisionBrowserAssets, lt as artifactToolsEnabled, mt as fastCriticModel, o as buildPeerAwarenessSnippet, ot as FAST_REVIEWER_EFFORT, pt as browserToolsEnabled, r as agentNamesForToolAllowlist, rt as FAST_CRITIC_EFFORT, s as buildPeerAwarenessSummary, st as FAST_SCOUT_EFFORT, ut as brainstormModel, vt as fastReviewerModel, w as availableToolCommands, wn as DEFAULT_CLAUDE_MODEL_FALLBACKS, wt as nativeSubagentModel, xt as geminiAvailable, yn as shouldUseInsecureTls, yt as fastScoutModel } from "./peer-mcp-personas-ce6_YMnX.js";
+import { o as removeOwnClaudeConfigMirror, r as ensureClaudeConfigMirror, t as PATHS, u as writeArtifactCredsToMirror } from "./paths-Ci485qSJ.js";
+import { A as state, d as resolveModel } from "./token-BtJhjXXu.js";
 import { r as parseBoolEnv } from "./exec-y8C_MU8A.js";
-import { _ as validateFastProfilePrerequisites, a as sharedServerArgs, b as updateClaude, c as stopKeepAwake, d as LUNA_DRIVER_ALIAS_ID, g as resolveLaunchProfile, h as profileDescriptor, i as setupAndServe, l as listModelsForEndpoint, m as formatFastPrerequisiteFailure, o as LAUNCH_SECRET_HEADER, r as parseSharedArgs, s as startKeepAwake, t as getClaudeCodeEnvVars, u as enableFileLogging, v as runSelfUpdate, y as checkClaudeVersion } from "./server-setup-DbvbW5Ve.js";
-import { n as hookLauncherDegradedWarning, r as resolveSelfInvocation } from "./self-invocation-DhO1Z8iD.js";
-import { i as launchChild, r as getCodexVersion, t as provisionToolbelt } from "./provision-CZJ4EWls.js";
-import { i as captureLaunchBaseline, l as stopGateDisabled, n as buildSessionBindHookCommand, r as buildStopHookCommand, s as injectStopHookIntoSettingsFile, t as buildArtifactOpenHookCommand, u as stopGateId } from "./stop-gate-hook-BiBp5aGm.js";
-import { t as liveExec } from "./orchestration-pzbrKkgD.js";
-import { c as repoRoot, d as trustRepo, l as stopGateEnabledForRepo, s as repoFingerprint, t as fileBaselineStore } from "./stop-gate-policy-BGd6b5hR.js";
-import { l as guardToolMatcher, n as activeDispatchModes, r as buildWorkerGuardHookCommand } from "./worker-dispatch-D5fGroNr.js";
-import { _ as injectPeerMcpIntoMirror, a as appendPeerAwarenessToMirroredClaudeMd, b as workersKeyOf, c as prependArtifactPanelDirectiveToMirroredClaudeMd, i as OPERATING_DEFAULTS_DIGEST, l as prependOperatingDefaultsToMirroredClaudeMd, m as planModeAllowRules, n as INJECTED_SKILLS, o as appendToolbeltAwarenessToMirroredClaudeMd, p as injectAllowRules, r as writeInjectedSkill, s as buildOperatingDefaultsDirective, t as injectAttributionSuppressionIntoSettingsFile, u as prependStyleDirectiveToMirroredClaudeMd, v as resolveCodexCliBackend, x as writePeerMcpRuntimeFiles, y as resolveGroupKeysFromMirror } from "./attribution-settings-Dx8TBPE8.js";
+import { a as sharedServerArgs, c as stopKeepAwake, d as runSelfUpdate, f as checkClaudeVersion, i as setupAndServe, l as listModelsForEndpoint, o as LAUNCH_SECRET_HEADER, p as updateClaude, r as parseSharedArgs, s as startKeepAwake, t as getClaudeCodeEnvVars, u as enableFileLogging } from "./server-setup-DhG3YZPj.js";
+import { t as FAST_PROFILE_ADVISOR_CLIENT_MODEL } from "./fast-profile-contract-K3P58nj3.js";
+import { n as hookLauncherDegradedWarning, r as resolveSelfInvocation } from "./self-invocation-DAB_od0C.js";
+import { i as launchChild, r as getCodexVersion, t as provisionToolbelt } from "./provision-BhCtm3md.js";
+import { i as captureLaunchBaseline, l as stopGateDisabled, n as buildSessionBindHookCommand, r as buildStopHookCommand, s as injectStopHookIntoSettingsFile, t as buildArtifactOpenHookCommand, u as stopGateId } from "./stop-gate-hook-DQnh_KfI.js";
+import { t as liveExec } from "./orchestration-BiGCEwbH.js";
+import { c as repoRoot, d as trustRepo, l as stopGateEnabledForRepo, s as repoFingerprint, t as fileBaselineStore } from "./stop-gate-policy-DMr3KVmw.js";
+import { l as guardToolMatcher, n as activeDispatchModes, r as buildWorkerGuardHookCommand } from "./worker-dispatch-BEHkTbnH.js";
+import { _ as injectPeerMcpIntoMirror, a as appendPeerAwarenessToMirroredClaudeMd, b as workersKeyOf, c as prependArtifactPanelDirectiveToMirroredClaudeMd, i as OPERATING_DEFAULTS_DIGEST, l as prependOperatingDefaultsToMirroredClaudeMd, m as planModeAllowRules, n as INJECTED_SKILLS, o as appendToolbeltAwarenessToMirroredClaudeMd, p as injectAllowRules, r as writeInjectedSkill, s as buildOperatingDefaultsDirective, t as injectAttributionSuppressionIntoSettingsFile, u as prependStyleDirectiveToMirroredClaudeMd, v as resolveCodexCliBackend, x as writePeerMcpRuntimeFiles, y as resolveGroupKeysFromMirror } from "./attribution-settings-B70GmZ68.js";
 import { r as hookMcpRuntimeFromEnv } from "./hook-mcp-client-DBvm9608.js";
-import { i as planReviewEnabled, t as buildPlanReviewHookCommand } from "./plan-review-hook-CfcanA7_.js";
-import { a as checksForDescriptor, i as writeDiscoveredGate, n as readDiscoveredGate, o as descriptorHash, r as sourcesHash, s as parseGateDescriptor, t as discoverGateCommands } from "./gate-discovery-C30rfnyo.js";
-import { t as buildPromptSubmitHookCommand } from "./prompt-submit-hook-Bqf9ORgb.js";
-import { i as assertShapingInstalled, n as buildFirstMateGuardHookCommand, t as FIRST_MATE_GUARD_MATCHER } from "./internal-first-mate-guard-CVFFJriA.js";
+import { i as planReviewEnabled, t as buildPlanReviewHookCommand } from "./plan-review-hook-DuW0pSoM.js";
+import { a as checksForDescriptor, i as writeDiscoveredGate, n as readDiscoveredGate, o as descriptorHash, r as sourcesHash, s as parseGateDescriptor, t as discoverGateCommands } from "./gate-discovery-G6PAG61j.js";
+import { t as buildPromptSubmitHookCommand } from "./prompt-submit-hook-IMl7ssfr.js";
+import { i as assertShapingInstalled, n as buildFirstMateGuardHookCommand, t as FIRST_MATE_GUARD_MATCHER } from "./internal-first-mate-guard-C9BV7J4U.js";
+import { r as FAST_DISPATCH_TOOL_MATCHER, t as buildFastDispatchGuardHookCommand } from "./internal-fast-dispatch-guard-Bkr_iGOu.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 import path from "node:path";
 import { randomBytes } from "node:crypto";
 import { tmpdir } from "node:os";
-import process from "node:process";
+import process$1 from "node:process";
+//#region src/lib/orchestration/fast-dispatch-hook.ts
+/** Sentinel preserved through claude.ts's optional codex-MCP catch. */
+var FastDispatchGuardInstallError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "FastDispatchGuardInstallError";
+	}
+};
+/** Assert fast launches never spawn without their native dispatch ACL. */
+function assertFastDispatchGuardInstalled(fastProfile, installationSucceeded) {
+	if (fastProfile && !installationSucceeded) throw new FastDispatchGuardInstallError("fast profile requires the native Task/Agent ACL hook, but it could not be installed; refusing to start an unguarded fast session.");
+}
+/** This module is intentionally stateless; callers own launch cleanup. */
+//#endregion
 //#region src/lib/injected-skills/artifact-review-skill.ts
 const ARTIFACT_REVIEW_SKILL = {
 	name: "gh-artifact-review",
@@ -94,6 +110,79 @@ To let the human act on the artifact (not just comment), emit declarative contro
 `
 };
 //#endregion
+//#region src/lib/fast-launch-cleanup.ts
+function createFastLaunchCleanup(deps) {
+	let cleanupPromise;
+	return () => {
+		if (cleanupPromise) return cleanupPromise;
+		cleanupPromise = (async () => {
+			try {
+				await deps.server?.close(true);
+			} catch {}
+			try {
+				await deps.stopKeepAwake();
+			} catch {}
+			if (deps.runtimeCleanup) try {
+				await deps.runtimeCleanup();
+			} catch {}
+			try {
+				await deps.removeMirror();
+			} catch {}
+		})();
+		return cleanupPromise;
+	};
+}
+//#endregion
+//#region src/lib/fast-advisor-client.ts
+const ADVISOR_FLAG = "--advisor";
+function featureEnvEnabled(value) {
+	if (value === void 0) return true;
+	return ![
+		"",
+		"0",
+		"false",
+		"no",
+		"off"
+	].includes(value.trim().toLowerCase());
+}
+/** Match Claude Code's hard-disable and experimental-enable opt-out semantics. */
+function fastAdvisorClientEnabled(env = process.env) {
+	if (env.CLAUDE_CODE_DISABLE_ADVISOR_TOOL) return false;
+	return featureEnvEnabled(env.CLAUDE_CODE_ENABLE_EXPERIMENTAL_ADVISOR_TOOL);
+}
+/**
+* Remove every caller-supplied Advisor option and insert the fixed fast value.
+*
+* This parser intentionally keeps scanning after `--`: that separator marks
+* github-router-to-Claude passthrough, not an exemption from the fixed profile.
+* The fixed option is inserted before the first separator so Claude Code parses
+* it as an option rather than positional input. A separate `--advisor` consumes
+* its next token only when it is a value rather than another option; malformed
+* missing-value forms are simply removed.
+*/
+function withFixedFastAdvisorArg(args, enabled = fastAdvisorClientEnabled()) {
+	const sanitized = [];
+	for (let index = 0; index < args.length; index++) {
+		const token = args[index];
+		if (token === ADVISOR_FLAG) {
+			const next = args[index + 1];
+			if (next !== void 0 && next !== "--" && !next.startsWith("-")) index++;
+			continue;
+		}
+		if (token.startsWith(`${ADVISOR_FLAG}=`)) continue;
+		sanitized.push(token);
+	}
+	if (!enabled) return sanitized;
+	const separator = sanitized.indexOf("--");
+	const fixed = [ADVISOR_FLAG, FAST_PROFILE_ADVISOR_CLIENT_MODEL];
+	if (separator < 0) return [...sanitized, ...fixed];
+	return [
+		...sanitized.slice(0, separator),
+		...fixed,
+		...sanitized.slice(separator)
+	];
+}
+//#endregion
 //#region src/claude.ts
 function isFirstMateSkillName(name) {
 	return name === "gh-first-mate" || name === "gh-first-mate-scaffold" || name === "gh-first-mate-operate" || name === "gh-first-mate-conduct";
@@ -208,12 +297,18 @@ const claude = defineCommand({
 	},
 	args: claudeArgs,
 	async run({ args, rawArgs }) {
-		const headlessProbeRequested = process.env.GH_ROUTER_ALLOW_HEADLESS_CLAUDE === "1" && rawArgs.includes("--print") && rawArgs.includes("--input-format") && rawArgs.includes("--output-format") && rawArgs.filter((arg) => arg === "stream-json").length >= 2;
-		if (!process.stdout.isTTY && !headlessProbeRequested) {
+		const headlessProbeRequested = process$1.env.GH_ROUTER_ALLOW_HEADLESS_CLAUDE === "1" && rawArgs.includes("--print") && rawArgs.includes("--input-format") && rawArgs.includes("--output-format") && rawArgs.filter((arg) => arg === "stream-json").length >= 2;
+		if (!process$1.stdout.isTTY && !headlessProbeRequested) {
 			consola.error("The claude subcommand requires a TTY (interactive terminal).");
-			process.exit(1);
+			process$1.exit(1);
 		}
 		const parsed = parseSharedArgs(args);
+		const requestedLaunchProfileId = resolveLaunchProfile(args.model);
+		const codexMcpEnabled = args["codex-mcp"] !== false;
+		if (requestedLaunchProfileId === "fast" && !codexMcpEnabled) {
+			process$1.stderr.write(`github-router claude -m fast requires codex MCP wiring for its native roster and dispatch ACL; remove --no-codex-mcp or choose a standard model.\n`);
+			process$1.exit(1);
+		}
 		if (args.stealth) {
 			parsed.extendedBetas = false;
 			consola.info("Stealth mode: VS Code-only beta filtering. Leverage features disabled.");
@@ -244,27 +339,55 @@ const claude = defineCommand({
 			serverUrl = result.serverUrl;
 		} catch (error) {
 			consola.error("Failed to start server:", error instanceof Error ? error.message : error);
-			process.exit(1);
+			process$1.exit(1);
 		}
 		runSelfUpdate({ selfUpdate: args["self-update"] !== false });
+		const cleanupPreMirrorFailure = createFastLaunchCleanup({
+			server,
+			stopKeepAwake,
+			removeMirror: removeOwnClaudeConfigMirror
+		});
 		try {
 			await ensureClaudeConfigMirror();
 		} catch (err) {
 			consola.error(`Failed to provision CLAUDE_CONFIG_DIR mirror: ${err instanceof Error ? err.message : String(err)}. Spawned Claude Code would not be able to authenticate.`);
-			process.exit(1);
+			await cleanupPreMirrorFailure();
+			process$1.exit(1);
 		}
 		enableFileLogging();
+		let fastRuntimeCleanup;
+		let fastLaunchId;
+		let fastCleanupPromise;
+		const disposeFastRuntime = async () => {
+			if (!fastRuntimeCleanup) return;
+			fastCleanupPromise ??= fastRuntimeCleanup();
+			await fastCleanupPromise;
+		};
+		const resetFastRuntimeOwnership = () => {
+			fastRuntimeCleanup = void 0;
+			fastLaunchId = void 0;
+		};
+		const cleanupFastLaunch = createFastLaunchCleanup({
+			server,
+			stopKeepAwake,
+			removeMirror: removeOwnClaudeConfigMirror,
+			runtimeCleanup: async () => {
+				if (fastRuntimeCleanup) await fastRuntimeCleanup();
+			}
+		});
+		const fastFatal = async (message) => {
+			consola.error(message);
+			process$1.stderr.write(`${message}\n`);
+			await cleanupFastLaunch();
+			process$1.exit(1);
+			throw new Error("process.exit returned unexpectedly");
+		};
 		const usingDefault = !args.model?.trim();
 		const requestedSlug = resolveLeadSlugArg(args.model);
 		const launchProfileId = resolveLaunchProfile(args.model);
 		if (launchProfileId === "fast") {
 			const prereqCheck = validateFastProfilePrerequisites(state.models);
-			if (!prereqCheck.ok) {
-				const message = formatFastPrerequisiteFailure(prereqCheck.missing);
-				consola.error(message);
-				process.stderr.write(`${message}\n`);
-				process.exit(1);
-			}
+			if (!prereqCheck.ok) await fastFatal(formatFastPrerequisiteFailure(prereqCheck.missing));
 		}
 		let chosenSlug = launchProfileId === "fast" ? requestedSlug.endsWith("[1m]") ? `${LUNA_DRIVER_ALIAS_ID}[1m]` : LUNA_DRIVER_ALIAS_ID : requestedSlug;
 		let resolvedSlug = launchProfileId === "fast" ? resolveModel(requestedSlug) : resolveModel(chosenSlug);
@@ -286,9 +409,10 @@ const claude = defineCommand({
 			consola.warn(`Model "${resolvedSlug}" not found. Available claude models: ${available.join(", ")}`);
 		}
 		const banner = chosenSlug === resolvedSlug ? chosenSlug : `${chosenSlug} → ${resolvedSlug}`;
-		process.stderr.write(`Server ready on ${serverUrl}, launching Claude Code (${banner})...\n`);
+		process$1.stderr.write(`Server ready on ${serverUrl}, launching Claude Code (${banner})...\n`);
 		const envVars = getClaudeCodeEnvVars(serverUrl, chosenSlug, launchProfileId);
-		const extraArgs = collectChildPassthroughArgs(rawArgs, claudeArgs);
+		let extraArgs = collectChildPassthroughArgs(rawArgs, claudeArgs);
+		if (launchProfileId === "fast") extraArgs = withFixedFastAdvisorArg(extraArgs, fastAdvisorClientEnabled(process$1.env));
 		if (toolbeltEnabled()) {
 			provisionToolbelt().catch((err) => consola.debug("Toolbelt provisioning failed:", err));
 			const toolbeltLine = buildToolbeltAwareness(availableToolCommands());
@@ -300,7 +424,7 @@ const claude = defineCommand({
 		}
 		provisionAndIndexColbert();
 		colbertDegradedWarning(void 0, { logsToFile: true }).then((warning) => {
-			if (warning) process.stderr.write(`${warning}\n`);
+			if (warning) process$1.stderr.write(`${warning}\n`);
 		}).catch(() => {});
 		warmTreeSitterPool();
 		startKeepAwake();
@@ -312,12 +436,13 @@ const claude = defineCommand({
 		let onShutdown = baseShutdown;
 		let peerAwarenessSnippet;
 		let peerAwarenessSummary;
-		let fastRuntimeWired = launchProfileId !== "fast";
+		let fastWiringComplete = launchProfileId !== "fast";
 		const nativeAgentModels = launchProfileId === "fast" ? {
-			scout: fastScoutModel(),
+			Explore: fastScoutModel(),
 			implementer: fastImplementerModel(),
 			reviewer: fastReviewerModel(),
-			planner: fastPlannerModel()
+			planner: fastPlannerModel(),
+			critic: fastCriticModel()
 		} : {
 			implementer: nativeSubagentModel(),
 			"implementer-fast": implementerFastModel(),
@@ -329,23 +454,22 @@ const claude = defineCommand({
 			"general-purpose-fast": generalPurposeFastModel()
 		};
 		const nativeAvailability = {
-			scoutAvailable: nativeAgentModels.scout != null,
+			scoutAvailable: (launchProfileId === "fast" ? nativeAgentModels.Explore : nativeAgentModels.scout) != null,
 			implementerFastAvailable: nativeAgentModels["implementer-fast"] != null,
 			reviewerFastAvailable: nativeAgentModels["reviewer-fast"] != null,
 			generalPurposeFastAvailable: nativeAgentModels["general-purpose-fast"] != null,
 			budgetLead: isBudgetClaudeLead(chosenSlug),
 			profile: launchProfileId
 		};
-		const codexMcpEnabled = args["codex-mcp"] !== false;
 		const selfInvocation = await resolveSelfInvocation();
 		{
 			const warning = hookLauncherDegradedWarning(selfInvocation);
-			if (warning) process.stderr.write(`${warning}\n`);
+			if (warning) process$1.stderr.write(`${warning}\n`);
 		}
 		if (codexMcpEnabled) try {
 			const requestedCli = args["codex-cli"] ?? false;
 			const isFastProfile = launchProfileId === "fast";
-			if (isFastProfile && requestedCli) process.stderr.write("Fast profile uses its fixed HTTP MCP surface; ignoring --codex-cli.\n");
+			if (isFastProfile && requestedCli) process$1.stderr.write("Fast profile uses its fixed HTTP MCP surface; ignoring --codex-cli.\n");
 			const backend = isFastProfile ? "http" : resolveCodexCliBackend({
 				requested: requestedCli,
 				codexInfo: requestedCli ? getCodexVersion() : null
@@ -365,7 +489,7 @@ const claude = defineCommand({
 			if (!isFastProfile && fleetToolsEnabled()) enabledGroups.push("fleet");
 			if (!isFastProfile && agentToolsEnabled()) enabledGroups.push("first-mate");
 			const { keys: groupKeys, skipped: skippedGroups } = await resolveGroupKeysFromMirror(enabledGroups);
-			if (isFastProfile && fastOracleModel() == null) throw new Error("fast profile prerequisite drift: exact claude-opus-5 Oracle no longer resolves");
+			if (isFastProfile && (fastOracleModel() == null || fastCriticModel() == null)) throw new Error("fast profile prerequisite drift: exact Oracle or critic model no longer resolves");
 			const runtime = await writePeerMcpRuntimeFiles(serverUrl, {
 				codexCli: backend === "cli",
 				selfInvocation,
@@ -378,7 +502,7 @@ const claude = defineCommand({
 				reviewerModel: nativeAgentModels.reviewer,
 				reviewerFastModel: nativeAgentModels["reviewer-fast"],
 				brainstormModel: nativeAgentModels.brainstorm,
-				scoutModel: nativeAgentModels.scout,
+				scoutModel: isFastProfile ? nativeAgentModels.Explore : nativeAgentModels.scout,
 				scribeModel: nativeAgentModels.scribe,
 				implementerFastModel: nativeAgentModels["implementer-fast"],
 				generalPurposeFastModel: nativeAgentModels["general-purpose-fast"],
@@ -388,13 +512,15 @@ const claude = defineCommand({
 				...isFastProfile ? {
 					fastProfile: true,
 					plannerModel: nativeAgentModels.planner,
+					criticModel: nativeAgentModels.critic,
 					scoutEffort: FAST_SCOUT_EFFORT,
-					implementerEffort: "max",
+					implementerEffort: FAST_IMPLEMENTER_EFFORT,
 					reviewerEffort: FAST_REVIEWER_EFFORT,
-					plannerEffort: FAST_PLANNER_EFFORT
+					plannerEffort: FAST_PLANNER_EFFORT,
+					criticEffort: FAST_CRITIC_EFFORT
 				} : {}
 			});
-			fastRuntimeWired = true;
+			if (isFastProfile) fastRuntimeCleanup = runtime.cleanup;
 			const launchSecret = randomBytes(32).toString("hex");
 			const launchEntry = registerLaunch({
 				profileId: launchProfileId,
@@ -403,10 +529,22 @@ const claude = defineCommand({
 				allowedGroups: fastDescriptor.allowedGroups,
 				allowedPersonas: fastDescriptor.personaAllowlist
 			});
+			if (isFastProfile) fastLaunchId = launchEntry.launchId;
 			envVars.ANTHROPIC_CUSTOM_HEADERS = envVars.ANTHROPIC_CUSTOM_HEADERS ? `${envVars.ANTHROPIC_CUSTOM_HEADERS}\n${LAUNCH_SECRET_HEADER}: ${launchSecret}` : `${LAUNCH_SECRET_HEADER}: ${launchSecret}`;
 			envVars.GH_ROUTER_HOOK_MCP_URL = serverUrl;
 			envVars.GH_ROUTER_HOOK_NONCE = runtime.nonce;
-			onShutdown = async () => {
+			onShutdown = isFastProfile ? async () => {
+				try {
+					unregisterLaunch(launchEntry.launchId);
+				} finally {
+					try {
+						await runtime.cleanup();
+					} finally {
+						resetFastRuntimeOwnership();
+						await baseShutdown();
+					}
+				}
+			} : async () => {
 				unregisterLaunch(launchEntry.launchId);
 				await runtime.cleanup();
 				await baseShutdown();
@@ -431,10 +569,23 @@ const claude = defineCommand({
 				} else if (args["codex-mcp-only"] === true) consola.warn("--codex-mcp-only has no effect when peer MCP is wired via the mirrored .claude.json (the user's existing user-scope MCPs in the snapshot are still visible). Pass --no-codex-mcp to skip peer-MCP wiring entirely.");
 				subagentVisibility = injected.ok ? `subagent-visible (mirrored mcpServers: [${injected.serversAdded.join(", ")}])` : `subagent-INVISIBLE (collision on user-side mcpServers: [${injected.conflictingServers.join(", ")}]; parent-only via --mcp-config)`;
 			}
+			if (isFastProfile) {
+				let fastGuardInstalled = false;
+				try {
+					const settingsPath = path.join(PATHS.CLAUDE_CONFIG_DIR, "settings.json");
+					const guardCommand = buildFastDispatchGuardHookCommand(selfInvocation);
+					await injectStopHookIntoSettingsFile(settingsPath, guardCommand, "PreToolUse", 10, FAST_DISPATCH_TOOL_MATCHER);
+					fastGuardInstalled = true;
+				} catch (err) {
+					consola.error(`Could not register the fast native dispatch ACL hook: ${String(err)}`);
+				}
+				assertFastDispatchGuardInstalled(true, fastGuardInstalled);
+				fastWiringComplete = true;
+			}
 			const personaNames = runtime.personas.map((p) => p.agentName).join(", ");
 			const skippedNote = skippedGroups.length > 0 ? ` WARNING: groups [${skippedGroups.join(", ")}] skipped — both the bare and \`gh-router-<group>\` keys collide with your own mcpServers; those tools are unavailable this session (rename the user-side server to re-enable).` : "";
-			process.stderr.write(`Peer MCP wired (backend=${backend}, personas=[${personaNames}], subagent .md files=${runtime.agentMdPaths.length}, ${subagentVisibility}).${skippedNote}\n`);
-			const sessionCwd = process.cwd();
+			process$1.stderr.write(`Peer MCP wired (backend=${backend}, personas=[${personaNames}], subagent .md files=${runtime.agentMdPaths.length}, ${subagentVisibility}).${skippedNote}\n`);
+			const sessionCwd = process$1.cwd();
 			const workerSkillsActive = workerToolsEnabled() && !isFastProfile;
 			let skillsWritten = 0;
 			let skillsToWrite = [];
@@ -459,7 +610,7 @@ const claude = defineCommand({
 			}
 			if (workerSkillsActive) {
 				if (!injected?.ok) consola.warn("Workers non-blocking guard NOT registered: subagent MCP injection fell back to parent-only (--mcp-config), so worker-* dispatchers cannot reach the workers server. Raw (blocking) worker tools remain usable on the main thread this session.");
-				else if (process.env.GH_ROUTER_DISABLE_WORKER_GUARD === "1") consola.info("Workers non-blocking guard disabled via GH_ROUTER_DISABLE_WORKER_GUARD=1 — raw mcp__workers__* is callable on the main thread (blocking); the worker-* background agents remain the steered, non-blocking default.");
+				else if (process$1.env.GH_ROUTER_DISABLE_WORKER_GUARD === "1") consola.info("Workers non-blocking guard disabled via GH_ROUTER_DISABLE_WORKER_GUARD=1 — raw mcp__workers__* is callable on the main thread (blocking); the worker-* background agents remain the steered, non-blocking default.");
 				else try {
 					const settingsPath = path.join(PATHS.CLAUDE_CONFIG_DIR, "settings.json");
 					const workersKey = workersKeyOf(groupKeys);
@@ -472,7 +623,7 @@ const claude = defineCommand({
 				}
 				if (skillsWritten > 0) {
 					const skillNames = skillsToWrite.map((s) => `/${s.name}`).join(", ");
-					process.stderr.write(`Injected skills (${skillsWritten}/${skillsToWrite.length}): ${skillNames}.\n`);
+					process$1.stderr.write(`Injected skills (${skillsWritten}/${skillsToWrite.length}): ${skillNames}.\n`);
 				}
 			}
 			if (agentToolsEnabled()) {
@@ -486,9 +637,9 @@ const claude = defineCommand({
 					consola.error(`Could not register the operator worker/orchestrate guard hook: ${String(err)}`);
 				}
 				assertShapingInstalled(true, shapingInstalled);
-				if (!process.env.GH_ROUTER_FM_SCAFFOLD_REPOS?.trim()) consola.info("first-mate: scaffold_repo is disabled (it writes to real repositories). Set GH_ROUTER_FM_SCAFFOLD_REPOS to a comma-separated list of owner/name entries, or owner/* for a whole org, to enable it.");
+				if (!process$1.env.GH_ROUTER_FM_SCAFFOLD_REPOS?.trim()) consola.info("first-mate: scaffold_repo is disabled (it writes to real repositories). Set GH_ROUTER_FM_SCAFFOLD_REPOS to a comma-separated list of owner/name entries, or owner/* for a whole org, to enable it.");
 			}
-			const aiordieSidecar = (process.env.AIORDIE_CLAUDE_BIND ?? "").trim();
+			const aiordieSidecar = (process$1.env.AIORDIE_CLAUDE_BIND ?? "").trim();
 			if (aiordieSidecar.length > 0 && !aiordieSidecar.includes("\"")) try {
 				const settingsPath = path.join(PATHS.CLAUDE_CONFIG_DIR, "settings.json");
 				const command = buildSessionBindHookCommand(selfInvocation, aiordieSidecar);
@@ -505,7 +656,7 @@ const claude = defineCommand({
 					consola.warn(`Artifact-panel directive prepend failed: ${String(err)}`);
 				}
 				if (!isFastProfile) try {
-					await writeArtifactCredsToMirror(shouldUseInsecureTls(process.env.AIORDIE_BASE_URL ?? ""));
+					await writeArtifactCredsToMirror(shouldUseInsecureTls(process$1.env.AIORDIE_BASE_URL ?? ""));
 					const settingsPath = path.join(PATHS.CLAUDE_CONFIG_DIR, "settings.json");
 					const cmd = buildArtifactOpenHookCommand(selfInvocation);
 					await injectStopHookIntoSettingsFile(settingsPath, cmd, "PostToolUse", void 0, "ExitPlanMode");
@@ -522,13 +673,13 @@ const claude = defineCommand({
 			}
 			if (!isFastProfile && args["trust-gate"] === true) try {
 				const root = await trustRepo(sessionCwd);
-				process.stderr.write(`Structural gate trusted for this repo (${root}); it will run on launch here from now on.\n`);
+				process$1.stderr.write(`Structural gate trusted for this repo (${root}); it will run on launch here from now on.\n`);
 			} catch (err) {
 				consola.warn(`Could not record gate trust: ${String(err)}`);
 			}
 			const gateDisabled = isFastProfile || stopGateDisabled(args);
-			const forceEnabled = parseBoolEnv(process.env.GH_ROUTER_ENABLE_STOP_GATE) === true;
-			const includeTests = parseBoolEnv(process.env.GH_ROUTER_STOP_GATE_RUN_TESTS) === true;
+			const forceEnabled = parseBoolEnv(process$1.env.GH_ROUTER_ENABLE_STOP_GATE) === true;
+			const includeTests = parseBoolEnv(process$1.env.GH_ROUTER_STOP_GATE_RUN_TESTS) === true;
 			const gateRoot = await repoRoot(sessionCwd).catch(() => sessionCwd);
 			let descriptor = null;
 			let discovering = false;
@@ -543,7 +694,7 @@ const claude = defineCommand({
 						workdir: gateRoot,
 						evidence: cached.evidence
 					};
-					else if (!forceEnabled && workerToolsEnabled() && parseBoolEnv(process.env.GH_ROUTER_ENABLE_GATE_DISCOVERY) === true) discovering = true;
+					else if (!forceEnabled && workerToolsEnabled() && parseBoolEnv(process$1.env.GH_ROUTER_ENABLE_GATE_DISCOVERY) === true) discovering = true;
 				}
 			}
 			let gateEnabled = gateDisabled ? false : await stopGateEnabledForRepo(sessionCwd).catch(() => false);
@@ -587,17 +738,17 @@ const claude = defineCommand({
 						})().catch(() => {});
 					}
 					const tail = "A regression or a gate-weakening diff blocks stopping until fixed (per-prompt, max 2). Opt out with GH_ROUTER_DISABLE_STOP_GATE=1.\n";
-					if (armed.kind === "sealed") process.stderr.write((autoTrusted ? `Structural-gate Stop hook enabled by default for this repo (gate=${armed.gateId}; runs typecheck/test/lint at stop). ` : `Structural-gate Stop hook enabled (gate=${armed.gateId}). `) + tail);
+					if (armed.kind === "sealed") process$1.stderr.write((autoTrusted ? `Structural-gate Stop hook enabled by default for this repo (gate=${armed.gateId}; runs typecheck/test/lint at stop). ` : `Structural-gate Stop hook enabled (gate=${armed.gateId}). `) + tail);
 					else {
 						const ids = checksForDescriptor(armed).map((c) => c.id).join(", ");
 						const testNote = includeTests ? "Full test suite ON. " : "Full test suite off by default (enable with GH_ROUTER_STOP_GATE_RUN_TESTS=1). ";
-						process.stderr.write(`Structural-gate Stop hook armed for this ${armed.ecosystem} repo (checks: ${ids}; from ${armed.evidence.join(", ")}). ${testNote}${tail}`);
+						process$1.stderr.write(`Structural-gate Stop hook armed for this ${armed.ecosystem} repo (checks: ${ids}; from ${armed.evidence.join(", ")}). ${testNote}${tail}`);
 					}
 				} catch (err) {
 					consola.warn(`Could not register the structural-gate Stop hook: ${String(err)}`);
 				}
 			} else if (gateEnabled && discovering) {
-				process.stderr.write("Structural Stop-gate: no checks parsed for this repo — discovering check commands in the background (arms on the next launch). Disable with GH_ROUTER_ENABLE_GATE_DISCOVERY=0.\n");
+				process$1.stderr.write("Structural Stop-gate: no checks parsed for this repo — discovering check commands in the background (arms on the next launch). Disable with GH_ROUTER_ENABLE_GATE_DISCOVERY=0.\n");
 				(async () => {
 					try {
 						const disc = await discoverGateCommands(gateRoot, {
@@ -620,7 +771,7 @@ const claude = defineCommand({
 						}
 					} catch {}
 				})().catch(() => {});
-			} else if (!gateDisabled && !descriptor && !discovering) process.stderr.write("Structural Stop-gate not enabled: no checks found in this repo (looked at package.json scripts / CI workflows / Makefile / Cargo.toml / go.mod / pyproject). Force a sealed gate with GH_ROUTER_ENABLE_STOP_GATE=1" + (workerToolsEnabled() ? ", or let a model discover them with GH_ROUTER_ENABLE_GATE_DISCOVERY=1" : "") + ".\n");
+			} else if (!gateDisabled && !descriptor && !discovering) process$1.stderr.write("Structural Stop-gate not enabled: no checks found in this repo (looked at package.json scripts / CI workflows / Makefile / Cargo.toml / go.mod / pyproject). Force a sealed gate with GH_ROUTER_ENABLE_STOP_GATE=1" + (workerToolsEnabled() ? ", or let a model discover them with GH_ROUTER_ENABLE_GATE_DISCOVERY=1" : "") + ".\n");
 			const peerSnippet = buildPeerAwarenessSnippet({
 				codexCli: backend === "cli",
 				geminiAvailable: geminiModelsAvailable,
@@ -633,6 +784,7 @@ const claude = defineCommand({
 				fleetAvailable: fleetToolsEnabled(),
 				agentToolsAvailable: agentToolsEnabled(),
 				...nativeAvailability,
+				profile: launchProfileId,
 				groupKeys
 			});
 			peerAwarenessSnippet = peerSnippet;
@@ -643,6 +795,7 @@ const claude = defineCommand({
 				fleetAvailable: fleetToolsEnabled(),
 				agentToolsAvailable: agentToolsEnabled(),
 				...nativeAvailability,
+				profile: launchProfileId,
 				nativeAgentModels,
 				groupKeys
 			});
@@ -657,18 +810,29 @@ const claude = defineCommand({
 				consola.warn(`Style-directive CLAUDE.md prepend failed: ${err instanceof Error ? err.message : String(err)}`);
 			}
 		} catch (err) {
+			if (launchProfileId === "fast") {
+				if (fastLaunchId) unregisterLaunch(fastLaunchId);
+				await disposeFastRuntime().catch(() => {});
+				await server.close(true).catch(() => {});
+				await baseShutdown().catch(() => {});
+				resetFastRuntimeOwnership();
+				const message = `Fast profile wiring failed; refusing to launch an unguarded session: ${err instanceof Error ? err.message : String(err)}`;
+				consola.error(message);
+				process$1.stderr.write(`${message}\n`);
+				process$1.exit(1);
+			}
 			consola.warn(`Peer MCP wiring failed (claude will launch without it): ${err instanceof Error ? err.message : String(err)}`);
 		}
 		extraArgs.push("--append-system-prompt", peerAwarenessSnippet && peerAwarenessSummary ? `${OPERATING_DEFAULTS_DIGEST}\n\n${peerAwarenessSummary}` : OPERATING_DEFAULTS_DIGEST);
 		try {
 			await prependOperatingDefaultsToMirroredClaudeMd(buildOperatingDefaultsDirective({
 				...nativeAvailability,
-				fastRuntimeAvailable: fastRuntimeWired
+				fastRuntimeAvailable: fastWiringComplete
 			}));
 		} catch (err) {
 			consola.warn(`Operating-defaults CLAUDE.md prepend failed: ${err instanceof Error ? err.message : String(err)}`);
 		}
-		if (process.env.GH_ROUTER_DISABLE_NO_ATTRIBUTION !== "1") try {
+		if (process$1.env.GH_ROUTER_DISABLE_NO_ATTRIBUTION !== "1") try {
 			const settingsPath = path.join(PATHS.CLAUDE_CONFIG_DIR, "settings.json");
 			await injectAttributionSuppressionIntoSettingsFile(settingsPath);
 		} catch (err) {
@@ -685,4 +849,4 @@ const claude = defineCommand({
 //#endregion
 export { claude };
 
-//# sourceMappingURL=claude-BoAd_L2W.js.map
+//# sourceMappingURL=claude-DMMfvfns.js.map