lody 0.105.0 → 0.106.0

package/dist/index.js

@@ -6,13 +6,13 @@ import fs__default$1, { createReadStream, existsSync, realpathSync, statSync, cr
 import * as readline$1 from "node:readline";
 import readline__default, { createInterface } from "node:readline";
 import require$$5$3, { AsyncLocalStorage, AsyncResource } from "node:async_hooks";
-import { g as getLodyDataDir, r as resolvePlatformKind, a as requireMs, b as getLogger, f as formatSafeLogFields, L as LODY_LOG_DIR, c as rootLogger, t as toShared, d as LOCAL_USER_ID_PREFIX, e as LOCAL_WORKSPACE_ID_PREFIX, h as formatErrorMessage, i as getInstallationProfile, j as registerLoroSyncErrorFormatter, l as listDailyLogFiles, k as readDailyLogFile, m as formatErrorWithCauses, n as truncateLogText, w as withSpawn, p as platformLayer, o as LodyDataDirUnavailableError, q as ensureLodyDataDir, C as CloudflaredError, u as routeLoggerToStderr, v as createHybridLogger, x as readLatestLogTail, y as createFileLogger } from "./chunks/cloudflared-native-CT-eRa_M.js";
+import { g as getLodyDataDir, r as resolvePlatformKind, a as requireMs, b as getLogger, f as formatSafeLogFields, L as LODY_LOG_DIR, c as rootLogger, t as toShared, d as LOCAL_USER_ID_PREFIX, e as LOCAL_WORKSPACE_ID_PREFIX, h as formatErrorMessage, i as getInstallationProfile, j as registerLoroSyncErrorFormatter, l as listDailyLogFiles, k as readDailyLogFile, m as formatErrorWithCauses, n as truncateLogText, w as withSpawn, p as platformLayer, o as LodyDataDirUnavailableError, q as ensureLodyDataDir, C as CloudflaredError, u as routeLoggerToStderr, v as createHybridLogger, x as readLatestLogTail, y as createFileLogger } from "./chunks/cloudflared-native-CJVH1-0P.js";
 import * as fs from "fs";
 import fs__default, { promises, readFileSync, writeFileSync, mkdirSync as mkdirSync$1, lstatSync as lstatSync$1, unlinkSync, realpathSync as realpathSync$1, statSync as statSync$1, accessSync as accessSync$1, constants as constants$8, existsSync as existsSync$1 } from "fs";
 import * as crypto$4 from "crypto";
 import crypto__default, { randomUUID as randomUUID$1, createHash as createHash$1, randomBytes as randomBytes$4, webcrypto, createHmac, createSign, createCipheriv, createDecipheriv, timingSafeEqual as timingSafeEqual$1 } from "crypto";
 import { j as _coercedNumber, Z as ZodNumber, o as object, s as string$4, l as literal, d as discriminatedUnion, _ as _enum, a as array$1, n as number$3, b as boolean$1, r as record$5, c as unknown$1, p as preprocess$1, u as union$1, g as _null, k as custom, m as ZodObject, q as ZodLiteral, v as json, w as ZodError, x as safeParse, y as ZodOptional, z as ZodNullable, A as ZodPipe, B as ZodUnion, C as ZodArray, D as ZodNever, E as ZodDiscriminatedUnion, F as _instanceof, G as uuid, N as NEVER, H as lazy, h as looseObject, e as intersection, I as optional$2, J as datetime, f as url, K as any, L as toJSONSchema, M as date, O as email, P as xor, Q as never$2 } from "./chunks/schemas-Bue2bhN8.js";
-import { T as Tuple, y as dual, z as assignProperty, A as none, B as some, D as identity$2, E as hash$1, F as symbol, G as pipe$2, H as isNone, I as equals, J as symbol$1, K as optimize, N as NodeInspectSymbol, L as toJson, O as format$2, P as pipeArguments, Q as hasProperty, R as string$5, S as backEdges, U as combine$1, V as BaseProto, W as seconds, X as PipeInspectableProto, Y as isString$1, Z as structure, _ as redact$1, $ as symbolRedactable, a0 as get$2, a1 as Reference, a2 as strictEqual, a3 as fromIterable$1, a4 as array$2, a5 as make$c, a6 as makeEquivalence$2, a7 as memoize, a8 as succeed$1, a9 as isReadonlyArrayNonEmpty, aa as map$2, ab as formatPath, ac as isFailReason, ad as Prototype, ae as Class, af as resolveConcurrency, ag as fail, ah as effectIsExit, ai as die$1, aj as iterateConcurrent, ak as fnUntracedEager, al as flatMap$1, am as exit$1, an as flatMapEager, ao as void_, ap as args$1, aq as fail$1, ar as append, as as iterateEager, at as failCause, au as map$3, av as memoizeIdempotent, aw as isFunction$2, ax as isPropertyKey, ay as isNotNullish, az as empty$7, aA as isArrayNonEmpty, aB as formatPropertyKey, aC as suspend, aD as isObjectKeyword, aE as catchCause, aF as succeed$2, aG as isUnknown, aH as isNumber$1, aI as isBoolean, aJ as mapEager, aK as failCauseSync, aL as isSuccess, aM as runSyncExit, aN as die$2, aO as succeed$3, aP as fail$2, aQ as mapError, aR as TaggedError, aS as setStackTraceLimit, aT as getStackTraceLimit, aU as Service, aV as try_, aW as badArgument, aX as unwrap$1, aY as map$4, aZ as forEach, a_ as fnUntraced, a$ as unwrap$2, b0 as fromPull, b1 as done, b2 as match$1, b3 as of$1, b4 as catchTag, b5 as as, b6 as forkUnsafe, b7 as runIn, b8 as makeUnsafe, b as runPromise, b9 as runPromiseWith, ba as runPromiseExit, bb as runPromiseExitWith, bc as runSync$1, bd as runSyncWith, be as runSyncExitWith, bf as runCallback, bg as runCallbackWith, bh as runFork, bi as runForkWith, bj as withFiber, bk as scopeRemoveFinalizerUnsafe, bl as close, bm as tap$1, bn as buildWithMemoMap, bo as sync, bp as flatten, bq as await_, br as makeMemoMapUnsafe, bs as provideContext, bt as gen, bu as forEach$1, bv as ensuring, bw as isFailure, bx as failCause$1, by as combine$2, bz as callback, bA as void_$1, bB as fail$3, bC as raceFirst, bD as interruptible, d as sleep$5, bE as andThen, bF as make$d, bG as make$e, bH as hasInterruptsOnly, bI as hasDies, bJ as uninterruptibleMask, bK as forkIn, bL as join, bM as timeout$1, bN as uninterruptible, bO as die$3, bP as done$1, bQ as _await, bR as makeUnsafe$1, bS as isDoneUnsafe, bT as addFinalizer, bU as tapCause, i as effect, bV as isInterruptReason, bW as isDieReason, bX as isCause, bY as isTimeoutError, bZ as provide$1, b_ as pretty, b$ as catch_, c0 as currentTimeMillis, c1 as sync$1, o as getDefaultExportFromCjs, c2 as makeUnsafe$2, c3 as modify$1, c4 as set$4, c5 as getUnsafe, c6 as fork, c7 as scope, c8 as make$f, c9 as get$3, ca as make$g, cb as interrupt, cc as ProcessReleaseFailed, cd as squash, ce as timeoutOrElse, cf as asVoid, cg as provideMerge, q as merge$3, g as processLayer, ch as ChildProcessSpawner, ci as toMillis, cj as CommandTimedOut, ck as runCommandOk, cl as READ_ONLY_ABANDON_POLICY, cm as provideService, cn as findErrorOption, co as isSome, cp as CommandFailed, cq as SpawnFailed, cr as errnoCode, v as succeed$4, cs as squashProcessFailure, ct as try_$1, cu as fromNullishOr, cv as getOrUndefined, cw as isSuccess$1, cx as Class$1, cy as fromReadableStream, cz as fail$4, cA as tryPromise, cB as cached, cC as constFalse, cD as isFailure$1, cE as DisablePropagation, cF as matchCauseEffect, cG as hasInterrupts, cH as useSpan, cI as withParentSpan, cJ as TracerTimingEnabled, cK as Clock, cL as constTrue, cM as onInterrupt, cN as suspend$1, cO as ensuring$1, cP as interrupt$1, cQ as fail$5, cR as mapError$1, cS as never$1, cT as yieldNow, cU as doneUnsafe, cV as forkDetach, cW as orDie, p as promise, cX as empty$8, cY as logDebug, e as provide$2, cZ as provide$3, c_ as Scope, c$ as context, d0 as timeoutOption, d1 as TimeoutError$3, d2 as forever, d3 as unbounded, d4 as offerUnsafe, d5 as take$1, n as commonjsGlobal, m as getAugmentedNamespace, d6 as fromReasons, s as startProcessLegacy, d7 as systemError, d8 as serviceOption, d9 as acquireRelease, da as flatMap$2, db as getOrElse, dc as effectify, dd as callback$1, de as matchEffect, df as offer, dg as failCauseUnsafe, dh as endUnsafe, di as mergeAll$1, dj as NodeProcess, x as nodeProcessLive, dk as probePid, dl as update, dm as acquireUseRelease, dn as toStepWithMetadata, dp as forever$1, dq as modifyDelay, dr as getAndUpdate, ds as match$2, dt as make$h, du as shutdown, dv as makeDieReason, dw as makeUnsafe$3, r as runCommandTextLegacy, dx as all$1, f as runCommand$1, dy as result, dz as isPidAliveSyncLegacy, t as terminateChildTreeLegacy, dA as scoped, dB as ProcessCleanupFailed, dC as runPromiseSquashedLegacy, dD as fn, dE as tap$2, dF as map$5, dG as filter$1, dH as runHead, dI as getOrThrow, dJ as tapError, dK as spawn, dL as terminateTree, dM as succeed$5, dN as exists$1, dO as logWarning, dP as spawnProcess, dQ as TerminationFailed, dR as makeProcessRunnerLegacy, dS as unwrapSpawnFailure, a as runCommandTextSyncLegacy, dT as addFinalizer$1, dU as repeat$1, dV as spaced, dW as delay$4, dX as min$1, dY as exponential, dZ as minutes, d_ as jittered, d$ as while_, e0 as retry$2, e1 as takeBetween, e2 as forkScoped, e3 as unwrap$3, e4 as dropping, e5 as makeUnsafe$4, e6 as CommandOutputTooLarge, e7 as isEffect, e8 as take$2, e9 as release$1, ea as withPermits, eb as posixGroupTree, ec as waitUntilGone, ed as Effect, ee as childProcessTree, ef as hasExited, eg as isDone } from "./chunks/process-22-gqNSA.js";
+import { T as Tuple, y as dual, z as assignProperty, A as none, B as some, D as identity$2, E as hash$1, F as symbol, G as pipe$2, H as isNone, I as equals, J as symbol$1, K as optimize, N as NodeInspectSymbol, L as toJson, O as format$2, P as pipeArguments, Q as hasProperty, R as string$5, S as backEdges, U as combine$1, V as BaseProto, W as seconds, X as PipeInspectableProto, Y as isString$1, Z as structure, _ as redact$1, $ as symbolRedactable, a0 as get$2, a1 as Reference, a2 as strictEqual, a3 as fromIterable$1, a4 as array$2, a5 as make$c, a6 as makeEquivalence$2, a7 as memoize, a8 as succeed$1, a9 as isReadonlyArrayNonEmpty, aa as map$2, ab as formatPath, ac as isFailReason, ad as Prototype, ae as Class, af as resolveConcurrency, ag as fail, ah as effectIsExit, ai as die$1, aj as iterateConcurrent, ak as fnUntracedEager, al as flatMap$1, am as exit$1, an as flatMapEager, ao as void_, ap as args$1, aq as fail$1, ar as append, as as iterateEager, at as failCause, au as map$3, av as memoizeIdempotent, aw as isFunction$2, ax as isPropertyKey, ay as isNotNullish, az as empty$7, aA as isArrayNonEmpty, aB as formatPropertyKey, aC as suspend, aD as isObjectKeyword, aE as catchCause, aF as succeed$2, aG as isUnknown, aH as isNumber$1, aI as isBoolean, aJ as mapEager, aK as failCauseSync, aL as isSuccess, aM as runSyncExit, aN as die$2, aO as succeed$3, aP as fail$2, aQ as mapError, aR as TaggedError, aS as setStackTraceLimit, aT as getStackTraceLimit, aU as Service, aV as try_, aW as badArgument, aX as unwrap$1, aY as map$4, aZ as forEach, a_ as fnUntraced, a$ as unwrap$2, b0 as fromPull, b1 as done, b2 as match$1, b3 as of$1, b4 as catchTag, b5 as as, b6 as forkUnsafe, b7 as runIn, b8 as makeUnsafe, b as runPromise, b9 as runPromiseWith, ba as runPromiseExit, bb as runPromiseExitWith, bc as runSync$1, bd as runSyncWith, be as runSyncExitWith, bf as runCallback, bg as runCallbackWith, bh as runFork, bi as runForkWith, bj as withFiber, bk as scopeRemoveFinalizerUnsafe, bl as close, bm as tap$1, bn as buildWithMemoMap, bo as sync, bp as flatten, bq as await_, br as makeMemoMapUnsafe, bs as provideContext, bt as gen, bu as forEach$1, bv as ensuring, bw as isFailure, bx as failCause$1, by as combine$2, bz as callback, bA as void_$1, bB as fail$3, bC as raceFirst, bD as interruptible, d as sleep$5, bE as andThen, bF as make$d, bG as make$e, bH as hasInterruptsOnly, bI as hasDies, bJ as uninterruptibleMask, bK as forkIn, bL as join, bM as timeout$1, bN as uninterruptible, bO as die$3, bP as done$1, bQ as _await, bR as makeUnsafe$1, bS as isDoneUnsafe, bT as addFinalizer, bU as tapCause, i as effect, bV as isInterruptReason, bW as isDieReason, bX as isCause, bY as isTimeoutError, bZ as provide$1, b_ as pretty, b$ as catch_, c0 as currentTimeMillis, c1 as sync$1, o as getDefaultExportFromCjs, c2 as makeUnsafe$2, c3 as modify$1, c4 as set$4, c5 as getUnsafe, c6 as fork, c7 as scope, c8 as make$f, c9 as get$3, ca as make$g, cb as interrupt, cc as ProcessReleaseFailed, cd as squash, ce as timeoutOrElse, cf as asVoid, cg as provideMerge, q as merge$3, g as processLayer, ch as ChildProcessSpawner, ci as toMillis, cj as CommandTimedOut, ck as runCommandOk, cl as READ_ONLY_ABANDON_POLICY, cm as provideService, cn as findErrorOption, co as isSome, cp as CommandFailed, cq as SpawnFailed, cr as errnoCode, v as succeed$4, cs as squashProcessFailure, ct as try_$1, cu as fromNullishOr, cv as getOrUndefined, cw as isSuccess$1, cx as Class$1, cy as fromReadableStream, cz as fail$4, cA as tryPromise, cB as cached, cC as constFalse, cD as isFailure$1, cE as DisablePropagation, cF as matchCauseEffect, cG as hasInterrupts, cH as useSpan, cI as withParentSpan, cJ as TracerTimingEnabled, cK as Clock, cL as constTrue, cM as onInterrupt, cN as suspend$1, cO as ensuring$1, cP as interrupt$1, cQ as fail$5, cR as mapError$1, cS as never$1, cT as yieldNow, cU as doneUnsafe, cV as forkDetach, cW as orDie, p as promise, cX as empty$8, cY as logDebug, e as provide$2, cZ as provide$3, c_ as Scope, c$ as context, d0 as timeoutOption, d1 as TimeoutError$3, d2 as forever, d3 as unbounded, d4 as offerUnsafe, d5 as take$1, n as commonjsGlobal, m as getAugmentedNamespace, d6 as fromReasons, s as startProcessLegacy, d7 as systemError, d8 as serviceOption, d9 as acquireRelease, da as flatMap$2, db as getOrElse, dc as effectify, dd as callback$1, de as matchEffect, df as offer, dg as failCauseUnsafe, dh as endUnsafe, di as mergeAll$1, dj as NodeProcess, x as nodeProcessLive, dk as probePid, dl as update, dm as acquireUseRelease, dn as toStepWithMetadata, dp as forever$1, dq as modifyDelay, dr as getAndUpdate, ds as match$2, dt as make$h, du as shutdown, dv as makeDieReason, dw as makeUnsafe$3, r as runCommandTextLegacy, dx as all$1, f as runCommand$1, dy as result, dz as isPidAliveSyncLegacy, t as terminateChildTreeLegacy, dA as scoped, dB as ProcessCleanupFailed, dC as runPromiseSquashedLegacy, dD as fn, dE as tap$2, dF as map$5, dG as filter$1, dH as runHead, dI as getOrThrow, dJ as tapError, dK as spawn, dL as terminateTree, dM as succeed$5, dN as exists$1, dO as logWarning, dP as spawnProcess, dQ as TerminationFailed, dR as makeProcessRunnerLegacy, dS as unwrapSpawnFailure, a as runCommandTextSyncLegacy, dT as addFinalizer$1, dU as repeat$1, dV as spaced, dW as delay$4, dX as min$1, dY as exponential, dZ as minutes, d_ as jittered, d$ as while_, e0 as retry$2, e1 as takeBetween, e2 as forkScoped, e3 as unwrap$3, e4 as dropping, e5 as makeUnsafe$4, e6 as CommandOutputTooLarge, e7 as isEffect, e8 as take$2, e9 as release$1, ea as withPermits, eb as posixGroupTree, ec as waitUntilGone, ed as Effect, ee as childProcessTree, ef as hasExited, eg as isDone } from "./chunks/process-DZ2dHvHL.js";
 import require$$0$3, { once, EventEmitter as EventEmitter$1 } from "node:events";
 import NodeChildProcess, { execFileSync } from "node:child_process";
 import * as path from "node:path";
@@ -63,7 +63,7 @@ import * as fs$3 from "node:fs/promises";
 import fs__default$3, { realpath, mkdir as mkdir$1, writeFile as writeFile$1, rename as rename$1, rm, symlink as symlink$1, mkdtemp, chmod as chmod$1, readFile as readFile$1, readdir, stat as stat$2, lstat, unlink, open as open$1, opendir, link as link$1 } from "node:fs/promises";
 import { a as parseWorkspaceWatchChildMessage, C as CODE_COLLAB_IGNORED_DIRECTORY_NAMES } from "./chunks/workspace-watch-path-policy-BRzhvEkG.js";
 import { StringDecoder } from "node:string_decoder";
-import { C as CodeCollabV2FileIndexRequestSchema, d as CodeCollabV2OpenTextRequestSchema, e as CodeCollabV2RefreshTextRequestSchema, f as CodeCollabV2SaveTextRequestSchema, g as CodeCollabV2OpenCurrentDiffRequestSchema, h as CodeCollabV2OpenAllChangesDiffRequestSchema, k as CodeCollabV2OpenTurnDiffRequestSchema, l as CodeCollabV2InitDirectoryRequestSchema, m as CodeCollabV2FileIndexSnapshotSchema, n as CodeCollabV2OpenTextOkSchema, o as CodeCollabV2RefreshTextResponseSchema, q as CodeCollabV2SaveTextResponseSchema, r as CodeCollabV2OpenCurrentDiffResponseSchema, t as CodeCollabV2OpenAllChangesDiffResponseSchema, u as CodeCollabV2OpenTurnDiffResponseSchema, v as CodeCollabV2InitDirectoryOkSchema, w as CodeCollabV2LspUnsupportedSchema, x as CodeCollabV2ErrorSchema, y as CodeCollabV2RpcContentEnvelopeSchema, z as deriveCodeCollabV2ContentKeyId, A as CodeCollabV2ErrorCodeSchema, B as CodeCollabV2RpcResponseSchema, D as deriveCodeCollabV2ContentKeyBytes, E as readCodeCollabFileIndexSignalFromFlock, F as writeCodeCollabFileIndexSignalToFlock, G as writeCodeCollabFileIndexToFlock, H as gitDiffBaseRefCandidates, b as buildCodeCollabFileIndexState, I as CODE_COLLAB_V2_TEXT_LIMITS, J as CODE_COLLAB_V2_ALL_CHANGES_DIFF_LIMITS, K as resolveAllChangesDiffBase, c as computeAllChanges, L as codeCollabFileIndexStatesEqual, s as scanGitDirectoryEntries, a as closeDirectoryQuietly } from "./chunks/directory-handle-BNSLkXDU.js";
+import { C as CodeCollabV2FileIndexRequestSchema, d as CodeCollabV2OpenTextRequestSchema, e as CodeCollabV2RefreshTextRequestSchema, f as CodeCollabV2SaveTextRequestSchema, g as CodeCollabV2OpenCurrentDiffRequestSchema, h as CodeCollabV2OpenAllChangesDiffRequestSchema, k as CodeCollabV2OpenTurnDiffRequestSchema, l as CodeCollabV2InitDirectoryRequestSchema, m as CodeCollabV2FileIndexSnapshotSchema, n as CodeCollabV2OpenTextOkSchema, o as CodeCollabV2RefreshTextResponseSchema, q as CodeCollabV2SaveTextResponseSchema, r as CodeCollabV2OpenCurrentDiffResponseSchema, t as CodeCollabV2OpenAllChangesDiffResponseSchema, u as CodeCollabV2OpenTurnDiffResponseSchema, v as CodeCollabV2InitDirectoryOkSchema, w as CodeCollabV2LspUnsupportedSchema, x as CodeCollabV2ErrorSchema, y as CodeCollabV2RpcContentEnvelopeSchema, z as deriveCodeCollabV2ContentKeyId, A as CodeCollabV2ErrorCodeSchema, B as CodeCollabV2RpcResponseSchema, D as deriveCodeCollabV2ContentKeyBytes, E as readCodeCollabFileIndexSignalFromFlock, F as writeCodeCollabFileIndexSignalToFlock, G as writeCodeCollabFileIndexToFlock, H as gitDiffBaseRefCandidates, b as buildCodeCollabFileIndexState, I as CODE_COLLAB_V2_TEXT_LIMITS, J as CODE_COLLAB_V2_ALL_CHANGES_DIFF_LIMITS, K as resolveAllChangesDiffBase, c as computeAllChanges, L as codeCollabFileIndexStatesEqual, s as scanGitDirectoryEntries, a as closeDirectoryQuietly } from "./chunks/directory-handle-DssOMLsI.js";
 import { performance as performance$1 } from "perf_hooks";
 import require$$0$e, { EventEmitter as EventEmitter$2 } from "events";
 import require$$0$d, { Transform as Transform$1, Readable as Readable$1 } from "stream";
@@ -81,8 +81,8 @@ import { setTimeout as setTimeout$1 } from "timers/promises";
 import * as timers$2 from "node:timers/promises";
 import { setTimeout as setTimeout$2 } from "node:timers/promises";
 import { RoostHostError, RoostNativeClient } from "@loro-dev/roost-node";
-import { c as computeLineCounts, a as countTextLines } from "./chunks/diff-line-counts-Cr-lqn_D.js";
-import { r as runDiffWorkerTask } from "./chunks/diff-worker-task-BuDrFtkp.js";
+import { c as computeLineCounts, a as countTextLines } from "./chunks/diff-line-counts-D6bAVmNB.js";
+import { r as runDiffWorkerTask } from "./chunks/diff-worker-task-rnxgvZHM.js";
 import { createRequire as createRequire$1 } from "node:module";
 import v8 from "node:v8";
 import require$$0$f from "child_process";
@@ -4315,7 +4315,7 @@ class PostHog extends PostHogBackendClient {
 }
 const name$3 = "lody";
 const name$2 = "@lody/cli-cloud";
-const version$g = "0.105.0";
+const version$g = "0.106.0";
 const type = "module";
 const scripts = { "dev": "node dev.mjs", "dev:staging": "LODY_ENV=staging NODE_ENV=production node dev.mjs", "build": "node build.mjs", "prepare:publish": "node prepare-publish.js", "test": "node --test pnpm-runner.test.mjs vite-config.test.mjs nightly-npm.test.mjs" };
 const devDependencies = { "dotenv": "^16.6.1", "vite": "^7.0.0", "vite-plugin-wasm": "catalog:" };
@@ -116452,6 +116452,94 @@ const redactUrlAuth = (raw2) => {
     return raw2;
   }
 };
+const GITHUB_TOKEN_CLOUD_TIMEOUT_MS = 15e3;
+const GITHUB_BROKER_TOKEN_TIMEOUT_MS = GITHUB_TOKEN_CLOUD_TIMEOUT_MS + 5e3;
+const githubCredentialRuntime = String.raw`
+const credentialError = (code, details = {}) => Object.assign(new Error(code), { code, ...details });
+const errorCode = error => {
+  if (error?.name === 'TimeoutError' || error?.name === 'AbortError') return 'timeout';
+  const code = [error?.code, error?.cause?.code].find(value => typeof value === 'string' && /^[A-Za-z0-9_]{1,64}$/.test(value));
+  return typeof code === 'string' && /^[A-Za-z0-9_]{1,64}$/.test(code) ? code : 'unexpected_error';
+};
+const diagnostic = (source, stage, error) => {
+  const detail = { source, stage, code: errorCode(error) };
+  if (Number.isInteger(error?.status)) detail.status = error.status;
+  if (typeof error?.requestId === 'string' && /^[a-f0-9-]{1,64}$/.test(error.requestId)) detail.requestId = error.requestId;
+  console.error('[Lody GitHub] ' + JSON.stringify(detail));
+  return detail;
+};
+// This file is authored by the host, never inferred from a child's token/env.
+// A pinned context token names an immutable snapshot for host-side clone/fetch.
+const readCredentialContext = (fs, statePath, env) => {
+  const file = env.LODY_GIT_CRED_CONTEXT_FILE || (env.LODY_GIT_CRED_CONTEXT_TOKEN && statePath + '.contexts/' + env.LODY_GIT_CRED_CONTEXT_TOKEN + '.json');
+  if (!file) throw credentialError('context_missing');
+  let context;
+  try { context = JSON.parse(fs.readFileSync(file, 'utf8')); }
+  catch (cause) { throw credentialError('context_unreadable', { cause }); }
+  if (context?.version !== 1 || typeof context.contextToken !== 'string' || !context.contextToken || typeof context.allowLocalAuth !== 'boolean') throw credentialError('context_invalid');
+  return context;
+};
+const readCredentialPolicy = () => {
+  const context = getContext();
+  return { allowLocalAuth: context.allowLocalAuth, personalEnabled: true };
+};
+const readManagedCandidate = async (repoFullName, source) => {
+  const response = await requestBroker('/github-token', {
+    repoFullName, source, contextToken: getContext().contextToken,
+  }, ${GITHUB_BROKER_TOKEN_TIMEOUT_MS});
+  if (!response) throw credentialError('broker_unavailable');
+  let body;
+  try { body = await response.json(); }
+  catch (cause) { throw credentialError(errorCode(cause) === 'timeout' ? 'timeout' : 'invalid_response', { cause, status: response.status }); }
+  if (!response.ok) throw credentialError(typeof body.error === 'string' && /^[A-Za-z0-9_]{1,64}$/.test(body.error) ? body.error : 'broker_http_error', { status: response.status, requestId: body.requestId });
+  if (body.available === false) throw credentialError(typeof body.reason === 'string' && /^[a-z_]{1,64}$/.test(body.reason) ? body.reason : 'credential_unavailable');
+  if (typeof body.token !== 'string' || !body.token || /[\r\n]/.test(body.token) || body.tokenSource !== source) throw credentialError('invalid_credential_response');
+  return { token: body.token };
+};
+// One acquisition per source. Consumers can continue after a provably safe
+// failure of the actual operation; never restart this iterator to retry a source.
+async function* githubCredentials(repo, policy, localCandidate, anonymous = false) {
+  const failures = [];
+  for (const source of ['personal', 'local', 'app', ...(anonymous ? ['anonymous'] : [])]) {
+    if (source === 'personal' && policy.personalEnabled === false) continue;
+    if (source === 'local' && !policy.allowLocalAuth) continue;
+    try {
+      const candidate = source === 'anonymous' ? { token: null } : source === 'local' ? await localCandidate() : await readManagedCandidate(repo, source);
+      if (!candidate) throw credentialError('credential_missing');
+      yield { ...candidate, source };
+    } catch (error) {
+      failures.push(diagnostic(source, 'acquire', error));
+    }
+  }
+  throw credentialError('credentials_exhausted', { failures });
+}
+const selectGitHubCredential = async (repo, policy, localCandidate, requireWrite, anonymousCandidate, verify = async () => true) => {
+  const failures = [];
+  try {
+    for await (const candidate of githubCredentials(repo, policy, localCandidate, !requireWrite && !!anonymousCandidate)) {
+      try {
+        if (candidate.source === 'anonymous' && !await anonymousCandidate()) throw credentialError('anonymous_unavailable');
+        if (!await verify(candidate)) throw credentialError('access_denied');
+        console.error('[Lody GitHub] ' + JSON.stringify({ source: candidate.source, stage: 'selected', repo }));
+        return candidate;
+      } catch (error) { failures.push(diagnostic(candidate.source, 'access', error)); }
+    }
+  } catch (error) {
+    if (error.code === 'credentials_exhausted') error.failures.push(...failures);
+    throw error;
+  }
+};
+`;
+const withRequestDeadline = (timeoutMs, fetchImpl = fetch) => (input2, init2) => {
+  const deadline = new AbortController();
+  const timer2 = setTimeout(
+    () => deadline.abort(new DOMException("GitHub token request timed out", "TimeoutError")),
+    timeoutMs
+  );
+  timer2.unref?.();
+  const signal = init2?.signal ? AbortSignal.any([init2.signal, deadline.signal]) : deadline.signal;
+  return fetchImpl(input2, { ...init2, signal });
+};
 const GitHubTokenSuccessSchema = object({
   success: literal(true),
   token: string$4(),
@@ -116555,7 +116643,7 @@ class GitHubTokenManager {
     this.logger = options2.logger ?? getLogger("github-token");
     this.client = new ConvexHttpClient(options2.serverUrl, {
       logger: false,
-      fetch: (input2, init2) => fetch(input2, { ...init2, signal: AbortSignal.timeout(2500) })
+      fetch: withRequestDeadline(GITHUB_TOKEN_CLOUD_TIMEOUT_MS)
     });
     this.cliToken = options2.cliToken;
     this.workspaceId = options2.workspaceId;
@@ -138086,82 +138174,6 @@ const clearGitHubTokenEnv = (env2) => {
     if (GITHUB_CREDENTIAL_ENV_KEYS.includes(key2.toUpperCase())) delete env2[key2];
   }
 };
-const githubCredentialRuntime = String.raw`
-const credentialError = (code, details = {}) => Object.assign(new Error(code), { code, ...details });
-const errorCode = error => {
-  if (error?.name === 'TimeoutError' || error?.name === 'AbortError') return 'timeout';
-  const code = [error?.code, error?.cause?.code].find(value => typeof value === 'string' && /^[A-Za-z0-9_]{1,64}$/.test(value));
-  return typeof code === 'string' && /^[A-Za-z0-9_]{1,64}$/.test(code) ? code : 'unexpected_error';
-};
-const diagnostic = (source, stage, error) => {
-  const detail = { source, stage, code: errorCode(error) };
-  if (Number.isInteger(error?.status)) detail.status = error.status;
-  if (typeof error?.requestId === 'string' && /^[a-f0-9-]{1,64}$/.test(error.requestId)) detail.requestId = error.requestId;
-  console.error('[Lody GitHub] ' + JSON.stringify(detail));
-  return detail;
-};
-// This file is authored by the host, never inferred from a child's token/env.
-// A pinned context token names an immutable snapshot for host-side clone/fetch.
-const readCredentialContext = (fs, statePath, env) => {
-  const file = env.LODY_GIT_CRED_CONTEXT_FILE || (env.LODY_GIT_CRED_CONTEXT_TOKEN && statePath + '.contexts/' + env.LODY_GIT_CRED_CONTEXT_TOKEN + '.json');
-  if (!file) throw credentialError('context_missing');
-  let context;
-  try { context = JSON.parse(fs.readFileSync(file, 'utf8')); }
-  catch (cause) { throw credentialError('context_unreadable', { cause }); }
-  if (context?.version !== 1 || typeof context.contextToken !== 'string' || !context.contextToken || typeof context.allowLocalAuth !== 'boolean') throw credentialError('context_invalid');
-  return context;
-};
-const readCredentialPolicy = () => {
-  const context = getContext();
-  return { allowLocalAuth: context.allowLocalAuth, personalEnabled: true };
-};
-const readManagedCandidate = async (repoFullName, source) => {
-  const response = await requestBroker('/github-token', {
-    repoFullName, source, contextToken: getContext().contextToken,
-  }, 3000);
-  if (!response) throw credentialError('broker_unavailable');
-  let body;
-  try { body = await response.json(); }
-  catch (cause) { throw credentialError(errorCode(cause) === 'timeout' ? 'timeout' : 'invalid_response', { cause, status: response.status }); }
-  if (!response.ok) throw credentialError(typeof body.error === 'string' && /^[A-Za-z0-9_]{1,64}$/.test(body.error) ? body.error : 'broker_http_error', { status: response.status, requestId: body.requestId });
-  if (body.available === false) throw credentialError(typeof body.reason === 'string' && /^[a-z_]{1,64}$/.test(body.reason) ? body.reason : 'credential_unavailable');
-  if (typeof body.token !== 'string' || !body.token || /[\r\n]/.test(body.token) || body.tokenSource !== source) throw credentialError('invalid_credential_response');
-  return { token: body.token };
-};
-// One acquisition per source. Consumers can continue after a provably safe
-// failure of the actual operation; never restart this iterator to retry a source.
-async function* githubCredentials(repo, policy, localCandidate, anonymous = false) {
-  const failures = [];
-  for (const source of ['personal', 'local', 'app', ...(anonymous ? ['anonymous'] : [])]) {
-    if (source === 'personal' && policy.personalEnabled === false) continue;
-    if (source === 'local' && !policy.allowLocalAuth) continue;
-    try {
-      const candidate = source === 'anonymous' ? { token: null } : source === 'local' ? await localCandidate() : await readManagedCandidate(repo, source);
-      if (!candidate) throw credentialError('credential_missing');
-      yield { ...candidate, source };
-    } catch (error) {
-      failures.push(diagnostic(source, 'acquire', error));
-    }
-  }
-  throw credentialError('credentials_exhausted', { failures });
-}
-const selectGitHubCredential = async (repo, policy, localCandidate, requireWrite, anonymousCandidate, verify = async () => true) => {
-  const failures = [];
-  try {
-    for await (const candidate of githubCredentials(repo, policy, localCandidate, !requireWrite && !!anonymousCandidate)) {
-      try {
-        if (candidate.source === 'anonymous' && !await anonymousCandidate()) throw credentialError('anonymous_unavailable');
-        if (!await verify(candidate)) throw credentialError('access_denied');
-        console.error('[Lody GitHub] ' + JSON.stringify({ source: candidate.source, stage: 'selected', repo }));
-        return candidate;
-      } catch (error) { failures.push(diagnostic(candidate.source, 'access', error)); }
-    }
-  } catch (error) {
-    if (error.code === 'credentials_exhausted') error.failures.push(...failures);
-    throw error;
-  }
-};
-`;
 const ghPrCreateScript = String.raw`
 const createPrViaRest = async (ghCommand, target, parsed, env) => {
   const values = parsed.values;
@@ -138387,7 +138399,7 @@ const main = async () => {
       if (token) return { token };
       throw credentialError('unsupported_local_header');
     }
-    const fill = spawnSync(REAL_GIT, ['credential', 'fill'], { env: { ...env, LODY_GIT_LOCAL_DELEGATE: '1' }, input: 'protocol=https\nhost=github.com\npath=' + repo + '.git\n\n', encoding: 'utf8', timeout: 3000 });
+    const fill = spawnSync(REAL_GIT, ['credential', 'fill'], { env: { ...env, LODY_GIT_LOCAL_DELEGATE: '1' }, input: 'protocol=https\nhost=github.com\npath=' + repo + '.git\n\n', encoding: 'utf8', timeout: 10_000 });
     if (fill.error) throw fill.error;
     const token = /^password=(.*)$/m.exec(fill.stdout || '')?.[1];
     if (token) return { token };
@@ -138398,14 +138410,14 @@ const main = async () => {
     const env = candidate.ssh ? nativeEnv() : authenticatedEnv(httpsUrl, candidate.token);
     if (candidate.ssh) {
       const configured = spawnSync(REAL_GIT, ['config', '--get', 'core.sshCommand'], { env, encoding: 'utf8' });
-      env.GIT_SSH_COMMAND = (env.GIT_SSH_COMMAND || configured.stdout?.trim() || (env.GIT_SSH ? quote(env.GIT_SSH) : 'ssh')) + sshPort + ' -oBatchMode=yes -oConnectTimeout=3';
+      env.GIT_SSH_COMMAND = (env.GIT_SSH_COMMAND || configured.stdout?.trim() || (env.GIT_SSH ? quote(env.GIT_SSH) : 'ssh')) + sshPort + ' -oBatchMode=yes -oConnectTimeout=10';
     }
     // Native upload/receive-pack advertisement has no write effects. It lets
     // denied credentials fall through without replaying an uncertain push.
     const target = candidate.ssh ? (sshPort ? 'ssh://git@ssh.github.com:443/' : 'git@github.com:') + repo + '.git' : httpsUrl;
     const args = candidate.ssh ? ['ls-remote', ...(write ? ['--upload-pack=git-receive-pack'] : []), target] : ['remote-https', 'lody-advertisement', target];
     const result = spawnSync(REAL_GIT, args, {
-      env, input: candidate.ssh ? undefined : (write ? 'list for-push\n\n' : 'list\n\n'), encoding: 'utf8', timeout: 5000, maxBuffer: 1024 * 1024, stdio: ['pipe', 'ignore', 'pipe'],
+      env, input: candidate.ssh ? undefined : (write ? 'list for-push\n\n' : 'list\n\n'), encoding: 'utf8', timeout: 15_000, maxBuffer: 1024 * 1024, stdio: ['pipe', 'ignore', 'pipe'],
     });
     if (result.error) throw result.error;
     if (result.status !== 0) {
@@ -139144,7 +139156,7 @@ async function* ghEnvironments(ghCommand, args) {
     const token = env.GH_TOKEN || env.GITHUB_TOKEN;
     if (token) return { token };
     const result = await runGhCommand(ghCommand, ['auth', 'token', '--hostname', target.host], {
-      env, stdio: ['ignore', 'pipe', 'pipe'], timeout: 3000,
+      env, stdio: ['ignore', 'pipe', 'pipe'], timeout: 10_000,
     });
     if (result.error) throw result.error;
     if (result.status !== 0) throw credentialError('local_auth_missing');
@@ -145537,6 +145549,16 @@ const CatalogAccessSnapshotSchema = object({
   ownerUserId: string$4(),
   verifiedAt: string$4()
 });
+const MEMBER_ACCESS_SNAPSHOT_TTL_MS = 60 * 60 * 1e3;
+const CatalogMemberAccessSnapshotSchema = object({
+  requesterUserId: string$4(),
+  localProjectId: string$4().optional(),
+  // Optional only so an unbound entry parses (and never matches) instead of
+  // making the whole catalog corrupt.
+  ownerUserId: string$4().optional(),
+  machineId: string$4().optional(),
+  verifiedAt: string$4()
+});
 const CatalogWorkspaceSchema = object({
   workspaceId: string$4(),
   name: string$4(),
@@ -145548,7 +145570,8 @@ const CatalogWorkspaceSchema = object({
   machine: CatalogMachineSchema.extend({
     cachedAt: number$3()
   }).optional(),
-  accessSnapshot: CatalogAccessSnapshotSchema.optional()
+  accessSnapshot: CatalogAccessSnapshotSchema.optional(),
+  memberAccessSnapshots: array$1(CatalogMemberAccessSnapshotSchema).optional()
 });
 const CatalogSessionSchema = object({
   sessionId: string$4(),
@@ -145571,6 +145594,10 @@ class CatalogCorruptError extends TaggedError("CatalogCorruptError") {
 }
 class CatalogPermissionError extends TaggedError("CatalogPermissionError") {
 }
+function isMemberAccessSnapshotFresh(snapshot2, nowMs2) {
+  const ageMs = nowMs2 - Date.parse(snapshot2.verifiedAt);
+  return ageMs >= 0 && ageMs < MEMBER_ACCESS_SNAPSHOT_TTL_MS;
+}
 const emptyCatalog = () => ({
   version: CATALOG_VERSION,
   identity: null,
@@ -145721,6 +145748,7 @@ function makeLocalWorkspaceCatalog(options2 = {}) {
     cacheRemoteWorkspaces: (input2) => mutate((snapshot2) => {
       const now2 = getServerNow();
       const remoteIds = new Set(input2.workspaces.map((workspace) => workspace.id));
+      const keepMemberGrants = snapshot2.identity?.userId === input2.identity.userId && snapshot2.machine?.machineId === input2.machine.machineId;
       const previousById = new Map(
         snapshot2.workspaces.map((workspace) => [workspace.workspaceId, workspace])
       );
@@ -145737,7 +145765,8 @@ function makeLocalWorkspaceCatalog(options2 = {}) {
             ...input2.machine,
             cachedAt: now2
           },
-          ...previous2?.accessSnapshot ? { accessSnapshot: previous2.accessSnapshot } : {}
+          ...previous2?.accessSnapshot ? { accessSnapshot: previous2.accessSnapshot } : {},
+          ...keepMemberGrants && previous2?.memberAccessSnapshots ? { memberAccessSnapshots: previous2.memberAccessSnapshots } : {}
         };
       });
       const remoteMissing = snapshot2.workspaces.filter((workspace) => !remoteIds.has(workspace.workspaceId)).map((workspace) => ({
@@ -145765,6 +145794,32 @@ function makeLocalWorkspaceCatalog(options2 = {}) {
         return { ...workspace, accessSnapshot: input2.accessSnapshot };
       })
     })),
+    recordMemberAccessSnapshot: (input2) => mutate((snapshot2) => {
+      const nowMs2 = clock2();
+      return {
+        ...snapshot2,
+        workspaces: snapshot2.workspaces.map((workspace) => {
+          if (workspace.workspaceId !== input2.workspaceId) {
+            return workspace;
+          }
+          const others = (workspace.memberAccessSnapshots ?? []).filter(
+            (entry) => (entry.requesterUserId !== input2.requesterUserId || entry.localProjectId !== input2.localProjectId) && isMemberAccessSnapshotFresh(entry, nowMs2)
+          );
+          const next = input2.verifiedAt === null ? others : [
+            ...others,
+            {
+              requesterUserId: input2.requesterUserId,
+              ...input2.localProjectId ? { localProjectId: input2.localProjectId } : {},
+              ownerUserId: input2.ownerUserId,
+              machineId: input2.machineId,
+              verifiedAt: input2.verifiedAt
+            }
+          ].slice(-64);
+          const { memberAccessSnapshots: _previous, ...rest } = workspace;
+          return next.length > 0 ? { ...rest, memberAccessSnapshots: next } : rest;
+        })
+      };
+    }),
     upsertSession: (session2) => mutate((snapshot2) => {
       const now2 = getServerNow();
       const nextSession = { ...session2, cachedAt: now2 };
@@ -221442,13 +221497,15 @@ const defaultSandboxDeps = () => ({
   configureExecutionProcess: async (pid, logger2) => {
     await applyExecutionProcessResourceProfile(pid, logger2);
   },
-  killPid: (pid, signal) => nodeProcessLive.kill(pid, signal ?? "SIGTERM")
+  killPid: (pid, signal) => nodeProcessLive.kill(pid, signal ?? "SIGTERM"),
+  listProcessGroup: nodeProcessLive.listProcessGroup
 });
 const toNodeProcess = (deps) => ({
   platform: deps.platform,
   spawn: deps.spawnProcess,
   spawnSync: nodeProcessLive.spawnSync,
-  kill: (pid, signal) => deps.killPid(pid, signal)
+  kill: (pid, signal) => deps.killPid(pid, signal),
+  ...deps.listProcessGroup ? { listProcessGroup: deps.listProcessGroup } : {}
 });
 const configureProcessBestEffort = (deps, logger2, prefix = "") => (pid) => tryPromise({
   try: () => deps.configureExecutionProcess(pid, logger2),
@@ -221463,6 +221520,8 @@ const configureProcessBestEffort = (deps, logger2, prefix = "") => (pid) => tryP
 function createSessionSandboxFactory(options2) {
   const deps = {
     ...defaultSandboxDeps(),
+    // A substituted process table must not be judged by the host's.
+    ...options2.deps?.killPid ? { listProcessGroup: void 0 } : {},
     ...options2.deps ?? {}
   };
   const facade = { logger: options2.logger, nodeProcess: toNodeProcess(deps) };
@@ -222127,15 +222186,11 @@ class Session2 extends EventEmitter {
     const failures = [];
     for (const outcome of await Promise.allSettled([
       activeProcess?.terminate(termination.force),
-      agentProcess?.terminate(termination.force)
+      agentProcess?.terminate(termination.force),
+      this.sandbox.terminate(termination.force)
     ])) {
       if (outcome.status === "rejected") failures.push(outcome.reason);
     }
-    try {
-      await this.sandbox.terminate(termination.force);
-    } catch (error2) {
-      failures.push(error2);
-    }
     await terminalsDisposed;
     for (const failure2 of failures) {
       this.logger.error(
@@ -225875,7 +225930,7 @@ async function applyTitleConfigOptions(options2) {
     );
   }
 }
-const extractTitleChunkFromNotification = (notification, agentType) => {
+const extractTitleChunkFromNotification = (notification) => {
   const update2 = notification.update;
   if (update2.sessionUpdate !== "agent_message_chunk") {
     return null;
@@ -225885,12 +225940,6 @@ const extractTitleChunkFromNotification = (notification, agentType) => {
     return null;
   }
   const phase = parseLodyMessagePhase(update2._meta);
-  if (agentType === "codex") {
-    if (phase !== "final_answer") {
-      return null;
-    }
-    return content2.text;
-  }
   if (phase !== void 0 && phase !== "final_answer") {
     return null;
   }
@@ -225990,6 +226039,7 @@ const generateTitleIsolated = async (options2) => {
   const sleep2 = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
   const tryGenerateWithArgs = async (extraArgs) => {
     let collectedText = "";
+    let unphasedText = "";
     const startupStartedAt = Date.now();
     options2.logger.debug(
       `[title-generator] Starting isolated title ACP agent (cliType=${options2.cliType} agentType=${options2.agentType})`
@@ -226008,9 +226058,13 @@ const generateTitleIsolated = async (options2) => {
       terminalManager: noopTerminalManager,
       terminalEnabled: false,
       onUpdateMessage: (msg) => {
-        const text2 = extractTitleChunkFromNotification(msg, options2.agentType);
+        const text2 = extractTitleChunkFromNotification(msg);
         if (text2) {
-          collectedText += text2;
+          if (parseLodyMessagePhase(msg.update._meta) === "final_answer") {
+            collectedText += text2;
+          } else {
+            unphasedText += text2;
+          }
         }
       },
       onRequestPermission: async (_requestId, _request) => ({ outcome: { outcome: "cancelled" } }),
@@ -226040,16 +226094,19 @@ const generateTitleIsolated = async (options2) => {
         }
       }
       collectedText = "";
+      unphasedText = "";
       options2.logger.debug(`[title-generator] Sending title prompt (acpSessionId=${acpSessionId})`);
       const response2 = await client2?.prompt(acpSessionId, prompt2);
       options2.logger.debug(
         `[title-generator] Title prompt returned (acpSessionId=${acpSessionId})`
       );
       const deadline = Date.now() + 1e4;
-      while (Date.now() < deadline && collectedText.trim() === "") {
+      while (Date.now() < deadline && collectedText.trim() === "" && unphasedText.trim() === "") {
         await sleep2(100);
       }
-      const fromStream = sanitizeGeneratedTitle(collectedText);
+      const fromStream = sanitizeGeneratedTitle(
+        collectedText.trim() ? collectedText : unphasedText
+      );
       if (fromStream) {
         return fromStream;
       }
@@ -229950,6 +230007,7 @@ class SessionExecutionService {
           }
           if (access2.outcome === "indeterminate") {
             outcome = "access-indeterminate";
+            ctx.runtime.withdrawInboxExecution = true;
             yield* self2.tryPromise(async () => await options2.onAccessIndeterminate(access2));
             return void 0;
           }
@@ -230417,6 +230475,23 @@ class SessionExecutionService {
     await options2.sessionDoc.setStatus(SessionStatusFactory.idle());
     this.captureStatusChanged(options2.sessionId, "idle", void 0, "turn_failed");
   }
+  /**
+   * Fail a still-pending user turn whose Inbox input already ended in an earlier
+   * execution. Lody never replays such an input, so the user resends instead.
+   */
+  async retireEndedInboxInputTurn(sessionId, sessionDoc, userTurnId) {
+    const read2 = await (await createSessionBackend(sessionDoc)).readTurn(userTurnId);
+    if (read2.state === "ready" && (read2.turn.role !== "user" || ["handled", "failed", "canceled", "delivery_unknown"].includes(read2.turn.status ?? ""))) {
+      return;
+    }
+    await this.recordKnownChatFailure({
+      sessionId,
+      sessionDoc,
+      userTurnId,
+      reason: "turn_pre_prompt_failed",
+      message: "This message was not started because an earlier attempt to run it already ended. Lody does not replay messages automatically; send it again to retry."
+    });
+  }
   formatMemoryPressureFailureMessage(result2) {
     if (result2.pressureReason === "darwin_pressure_critical") {
       return "The machine is at critical memory pressure — macOS is reclaiming memory and terminating processes to keep up. The turn was not started; free memory and retry.";
@@ -230974,6 +231049,15 @@ class SessionExecutionService {
           "Inbox preparation and release failed"
         );
       }
+      if (!runtime.releaseFailure && userTurnId && inboxInput && !options2.inboxBatch && inbox.inputEnded(this.deps.workspaceId, sessionId, inboxInput.inputId)) {
+        await this.retireEndedInboxInputTurn(sessionId, sessionDoc, userTurnId).catch(
+          (retireCause) => this.deps.logger.warn(
+            `[${sessionId}] Failed to retire ended Inbox input ${userTurnId}: ${formatErrorMessage(retireCause)}`
+          )
+        );
+        span.end({ outcome: "inbox-input-ended" });
+        return "inbox-input-ended";
+      }
       span.end({ outcome: "inbox-prepare-failed" });
       throw cause;
     }
@@ -231394,7 +231478,13 @@ class SessionExecutionService {
       }
       span.end({ outcome, turnId });
     }
-    if (inboxInput) {
+    const withdrawn = inboxInput && runtime.withdrawInboxExecution && !runtime.promptStarted && !runtime.cancelRequested && !runtime.releaseFailure && await runtime.inboxOwner.withdraw().catch((cause) => {
+      this.deps.logger.warn(
+        `[${sessionId}] Inbox withdraw failed; releasing instead: ${formatErrorMessage(cause)}`
+      );
+      return false;
+    });
+    if (inboxInput && !withdrawn) {
       if (inboxBatch)
         await (await createSessionBackend(sessionDoc)).applyHistoryAction({
           kind: "operation-batch-status",
@@ -235416,11 +235506,14 @@ class SessionDispatchWatcher {
       });
       let executionAccessPromise = accessPromise;
       let ownerRecheckStarted = false;
+      this.recordMemberAccessVerdict(sessionId, requesterUserId, localProjectId, accessPromise);
       const localAccess = this.deps.accessPolicy && this.deps.currentUserId ? await runPromise(
         this.deps.accessPolicy.decide({
           workspaceId: this.deps.workspaceId,
           currentUserId: this.deps.currentUserId,
-          requesterUserId
+          requesterUserId,
+          machineId: this.deps.machineId,
+          ...localProjectId ? { localProjectId } : {}
         })
       ) : { outcome: "remote" };
       if (!isActive()) {
@@ -235544,6 +235637,31 @@ class SessionDispatchWatcher {
       );
     });
   }
+  /**
+   * Maintain the member optimistic-allow cache from a backend verdict for a
+   * requester who is not the machine owner. Only definitive verdicts write;
+   * fire-and-forget like the owner recheck, so it never affects dispatch.
+   */
+  recordMemberAccessVerdict(sessionId, requesterUserId, localProjectId, verdict) {
+    const record2 = this.deps.recordMemberAccessSnapshot;
+    if (!record2 || !this.deps.currentUserId || requesterUserId === this.deps.currentUserId) {
+      void verdict.catch(() => void 0);
+      return;
+    }
+    void (async () => {
+      const access2 = await verdict;
+      if (access2.outcome === "indeterminate") return;
+      await record2({
+        requesterUserId,
+        ...localProjectId ? { localProjectId } : {},
+        verdict: access2.outcome
+      });
+    })().catch((error2) => {
+      this.deps.logger.debug(
+        `[${sessionId}] Failed to record member access verdict: ${formatErrorMessage(error2)}`
+      );
+    });
+  }
   /**
    * Fork a background verify-with-retry for a transient access failure on `turnId`.
    *
@@ -235582,6 +235700,12 @@ class SessionDispatchWatcher {
     }).pipe(
       flatMap$1(
         () => sync(() => {
+          this.recordMemberAccessVerdict(
+            sessionId,
+            verifyArgs.requesterUserId,
+            verifyArgs.localProjectId,
+            Promise.resolve({ outcome: "allowed" })
+          );
           this.clearAccessFiberIf(sessionId, turnId);
           void this.enqueueSessionCheck(sessionId);
         })
@@ -235590,6 +235714,12 @@ class SessionDispatchWatcher {
         "AccessDenied",
         (denied) => promise(async () => {
           this.clearAccessFiberIf(sessionId, turnId);
+          this.recordMemberAccessVerdict(
+            sessionId,
+            verifyArgs.requesterUserId,
+            verifyArgs.localProjectId,
+            Promise.resolve({ outcome: "denied", reason: denied.reason })
+          );
           await this.markDispatchAccessDenied(sessionId, sessionDoc, turnId, denied.reason).catch(
             (error2) => {
               this.deps.logger.error(
@@ -238916,6 +239046,9 @@ class OperationInbox extends Service()("lody/orchestration/OperationInbox") {
           begin: fn("OperationInbox.begin")(function* (s2, id2) {
             return yield* withGate(s2, repo.begin(s2, id2, owner2));
           }),
+          withdraw: fn("OperationInbox.withdraw")(function* (i, id2) {
+            return yield* withGate(i, repo.withdraw(i, id2));
+          }),
           pause: fn("OperationInbox.pause")(function* (s2, id2, ids, cancelId) {
             return yield* withGate(
               s2,
@@ -239113,6 +239246,19 @@ const makeExecutionOwner = fnUntraced(function* (initial, id2, initialBatch) {
       return start2();
     }).pipe(tap$1(() => batch ? inbox.settle(batch, "submitted") : void_$1)),
     finish: (outcome, cause) => releaseGate.withPermit(finishWork(outcome, cause)),
+    /** Return an unsubmitted, resource-free execution's input to pending; false if ineligible. */
+    withdraw: releaseGate.withPermit(
+      gen(function* () {
+        if (firstFinish || phase !== "prepared" || resources.size > 0 || rawRequests.length > 0)
+          return false;
+        if (!(yield* inbox.withdraw(input2, id2))) return false;
+        firstFinish = void_;
+        phase = "released";
+        yield* detach;
+        yield* succeed$5(released, void 0);
+        return true;
+      }).pipe(uninterruptible)
+    ),
     awaitReleased: _await(released),
     detach,
     recover: (prepare, beforeRelease) => releaseGate.withPermit(recoverWork(prepare, beforeRelease).pipe(uninterruptible))
@@ -239136,6 +239282,7 @@ const makeInboxQueries = (sql) => {
   return {
     preferredHumanInput: (w2, s2) => io(() => sql.preferredHumanInput(w2, s2)),
     inputCancellationReason: (w2, s2, id2) => io(() => sql.inputCancellationReason(w2, s2, id2)),
+    inputEnded: (w2, s2, id2) => io(() => sql.inputEnded(w2, s2, id2)),
     inputCanceled: (w2, s2, id2) => io(() => sql.inputCanceled(w2, s2, id2)),
     inputKind: (s2, id2) => io(() => sql.inputKind(s2, id2)),
     pauseTarget: (w2, s2, id2) => io(() => sql.pauseTarget(w2, s2, id2))
@@ -239161,6 +239308,7 @@ const inboxRepositoryLayer = (sql, ownedConnection = false) => {
     canSubmit: (s2, id2, o) => io(() => sql.canSubmit(s2, id2, o)),
     accept: (i) => io(() => sql.accept(i)),
     begin: (s2, id2, owner2) => io(() => sql.begin(s2, id2, owner2)),
+    withdraw: (i, id2) => io(() => sql.withdraw(i, id2)),
     pause: (s2, id2, ids, cancelId) => io(() => sql.pause(s2, id2, ids, cancelId)),
     release: (e) => io(() => sql.release(e)),
     prepare: (i, o, id2) => io(() => sql.prepare(i, o, id2)),
@@ -239505,6 +239653,7 @@ const operationInboxLegacy = (options2) => {
   return {
     preferredHumanInput: (w2, s2) => runSync$1(queries.preferredHumanInput(w2, s2)),
     inputCancellationReason: (w2, s2, id2) => runSync$1(queries.inputCancellationReason(w2, s2, id2)),
+    inputEnded: (w2, s2, id2) => runSync$1(queries.inputEnded(w2, s2, id2)),
     inputCanceled: (w2, s2, id2) => runSync$1(queries.inputCanceled(w2, s2, id2)),
     inputKind: (s2, id2) => runSync$1(queries.inputKind(s2, id2)),
     pauseTarget: (w2, s2, id2) => runSync$1(queries.pauseTarget(w2, s2, id2)),
@@ -239531,6 +239680,7 @@ const operationInboxLegacy = (options2) => {
         steer: (start2) => runtime.runPromise(owner2.steer(start2)),
         submit: (start2) => runtime.runPromise(owner2.submit(start2)),
         finish: (outcome, cause) => runtime.runPromise(owner2.finish(outcome, cause)),
+        withdraw: () => runtime.runPromise(owner2.withdraw),
         detach: () => runtime.runSync(owner2.detach),
         retain: (resource) => runtime.runSync(owner2.retain(resource)),
         recover: (prepare, beforeRelease) => runtime.runPromise(
@@ -240038,6 +240188,13 @@ class InboxSqlite {
     ).get(workspaceId, sessionId, inputId);
     return row2?.cancellation_reason === "user_stop" ? "user_stop" : void 0;
   }
+  /** True once an input finished or was canceled; `begin` never admits it again. */
+  inputEnded(workspaceId, sessionId, inputId) {
+    const row2 = this.db.prepare(
+      "SELECT canceled,finished FROM inbox_inputs WHERE workspace_id=? AND session_id=? AND input_id=?"
+    ).get(workspaceId, sessionId, inputId);
+    return row2?.canceled === 1 || row2?.finished === 1;
+  }
   inputCanceled(workspaceId, sessionId, inputId) {
     const row2 = this.db.prepare(
       "SELECT canceled FROM inbox_inputs WHERE workspace_id=? AND session_id=? AND input_id=?"
@@ -240158,6 +240315,38 @@ class InboxSqlite {
       ).run(executionId, "inputId" in s2 ? s2.inputId : null, s2.workspaceId, s2.sessionId, s2.userId).changes === 1;
     });
   }
+  /**
+   * Undo `begin` for an execution that submitted nothing and acquired nothing,
+   * such as a turn whose machine access is still unverified. No release receipt is
+   * written and the input stays unfinished, so the same execution id may begin it
+   * again; prepared batch claims stay with the input.
+   */
+  withdraw(s2, executionId) {
+    return this.transaction(() => {
+      const current2 = this.state(s2);
+      if (current2.active_execution !== executionId || current2.active_input !== s2.inputId)
+        return false;
+      const used = this.db.prepare(
+        `SELECT 1 FROM inbox_releases WHERE workspace_id=? AND session_id=? AND execution_id=?
+           UNION ALL SELECT 1 FROM inbox_resources WHERE workspace_id=? AND session_id=? AND execution_id=?
+           UNION ALL SELECT 1 FROM inbox_batches WHERE workspace_id=? AND session_id=? AND input_id=? AND state NOT IN ('prepared','superseded')`
+      ).get(
+        s2.workspaceId,
+        s2.sessionId,
+        executionId,
+        s2.workspaceId,
+        s2.sessionId,
+        executionId,
+        s2.workspaceId,
+        s2.sessionId,
+        s2.inputId
+      );
+      if (used) return false;
+      return this.db.prepare(
+        "UPDATE inbox_sessions SET active_execution=NULL WHERE workspace_id=? AND session_id=? AND active_execution=?"
+      ).run(s2.workspaceId, s2.sessionId, executionId).changes === 1;
+    });
+  }
   release(event) {
     const prior = this.db.prepare(
       "SELECT outcome,user_id FROM inbox_releases WHERE workspace_id=? AND session_id=? AND execution_id=?"
@@ -249825,7 +250014,7 @@ const session = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.definePrope
   withBuiltinDefaultTurnMode
 }, Symbol.toStringTag, { value: "Module" }));
 const LOCAL_POLICY_DENY_REASON = "not_visible";
-function decideSessionAccessFromCatalog(snapshot2, input2) {
+function decideSessionAccessFromCatalog(snapshot2, input2, nowMs2) {
   const workspace = snapshot2.workspaces.find((item) => item.workspaceId === input2.workspaceId);
   if (!workspace) {
     return { outcome: "remote" };
@@ -249836,6 +250025,12 @@ function decideSessionAccessFromCatalog(snapshot2, input2) {
   if (workspace.state === "remote_missing") {
     return { outcome: "deny", reason: LOCAL_POLICY_DENY_REASON, source: "remote_missing" };
   }
+  if (input2.requesterUserId !== input2.currentUserId) {
+    const member2 = workspace.memberAccessSnapshots?.find(
+      (entry) => entry.requesterUserId === input2.requesterUserId && entry.localProjectId === input2.localProjectId && entry.ownerUserId === input2.currentUserId && input2.machineId !== void 0 && entry.machineId === input2.machineId
+    );
+    return member2 && isMemberAccessSnapshotFresh(member2, nowMs2) ? { outcome: "allow", source: "member-cached" } : { outcome: "remote" };
+  }
   const accessSnapshot = workspace.accessSnapshot;
   if (!accessSnapshot) {
     return { outcome: "remote" };
@@ -249843,15 +250038,12 @@ function decideSessionAccessFromCatalog(snapshot2, input2) {
   if (accessSnapshot.ownerUserId !== input2.currentUserId) {
     return { outcome: "remote" };
   }
-  if (input2.requesterUserId !== input2.currentUserId) {
-    return { outcome: "remote" };
-  }
   return { outcome: "allow", source: "owner-cached" };
 }
-function makeSessionAccessPolicy(catalog) {
+function makeSessionAccessPolicy(catalog, now2 = getServerNow) {
   return {
     decide: (input2) => catalog.read().pipe(
-      map$4((snapshot2) => decideSessionAccessFromCatalog(snapshot2, input2)),
+      map$4((snapshot2) => decideSessionAccessFromCatalog(snapshot2, input2, now2())),
       // Missing/corrupt catalogs already self-recover inside read(). Anything
       // that still fails (e.g. EACCES on ~/.lody) must not strand the turn in
       // a dispatch check that errors forever: degrade to the remote
@@ -256300,6 +256492,18 @@ class MessageHandler {
         }
         await this.recordWorkspaceAccessSnapshot(null);
       },
+      // Members get a TTL-bounded cached allow refreshed by every confirmed
+      // backend allow and cleared by a definitive deny.
+      recordMemberAccessSnapshot: async ({ requesterUserId, localProjectId, verdict }) => await fileLocksLegacy.runPromise(
+        this.localWorkspaceCatalog.recordMemberAccessSnapshot({
+          workspaceId: this.workspaceId,
+          requesterUserId,
+          ...localProjectId ? { localProjectId } : {},
+          ownerUserId: this.userId,
+          machineId: this.machineId,
+          verifiedAt: verdict === "allowed" ? new Date(getServerNow()).toISOString() : null
+        })
+      ),
       recordChatFailure: async (sessionDoc, reason, message) => await this.recordChatFailure(sessionDoc, reason, message),
       onStartupBootstrapComplete: () => {
         void this.resetMachineDisconnectedSessionsToIdle().catch((error2) => {
@@ -260446,7 +260650,7 @@ class MessageHandler {
         const { sessionId, name: name2, arguments: args2 } = request2.params;
         if (request2.workspaceId !== this.workspaceId || request2.machineId !== this.machineId || request2.ownerSessionId !== sessionId)
           throw new Error("Session tool scope mismatch");
-        const { executeDaemonSessionTool } = await import("./chunks/daemon-session-tools-DtsKbbQ9.js");
+        const { executeDaemonSessionTool } = await import("./chunks/daemon-session-tools-Bgq2Cj2S.js");
         const sourceWorkdir = this.resolveSessionWorkspaceRoot(sessionId);
         if (!sourceWorkdir && args2 && typeof args2 === "object" && "attachments" in args2)
           throw new Error("Requester Session workspace is unavailable");
@@ -265106,6 +265310,7 @@ const LODY_GIT_CRED_CONTEXT_TOKEN_ENV = "LODY_GIT_CRED_CONTEXT_TOKEN";
 const LODY_GIT_CRED_CONTEXT_FILE_ENV = "LODY_GIT_CRED_CONTEXT_FILE";
 class GitCredentialContextError extends TaggedError("GitCredentialContextError") {
 }
+const SLOW_TOKEN_LOG_THRESHOLD_MS = 2e3;
 const createGitCredentialBrokerHandler = (options2) => {
   const handleRequest2 = async (req, res) => {
     const requestId = randomBytes$4(8).toString("hex");
@@ -265210,6 +265415,12 @@ const createGitCredentialBrokerHandler = (options2) => {
           typeof obj?.invalidatedPersonalToken === "string" ? obj.invalidatedPersonalToken : void 0
         );
         if (!isContextCurrent()) return;
+        const elapsedMs = Date.now() - startedAt;
+        if (elapsedMs >= SLOW_TOKEN_LOG_THRESHOLD_MS) {
+          options2.logger.debug(
+            `[git-cred-broker] ${JSON.stringify({ requestId, path: req.url, source: source2, code: "slow_ok", elapsedMs })}`
+          );
+        }
         res.writeHead(200, { "Content-Type": "application/json" });
         res.end(
           JSON.stringify(
@@ -265701,9 +265912,28 @@ function makePreparationControlLegacy(hardTtlMs, onExpired) {
   };
 }
 class SessionPreparationCleanupError extends Error {
-  constructor(cause) {
+  retry;
+  constructor(cause, retry2) {
     super(`Session preparation cleanup failed: ${formatErrorMessage(cause)}`, { cause });
     this.name = "SessionPreparationCleanupError";
+    this.retry = retry2;
+  }
+}
+class Retirement {
+  constructor(release2) {
+    this.release = release2;
+  }
+  attempt = null;
+  failed = false;
+  run() {
+    if (this.attempt && !this.failed) return this.attempt;
+    this.failed = false;
+    const attempt2 = Promise.resolve().then(this.release);
+    this.attempt = attempt2;
+    attempt2.catch(() => {
+      if (this.attempt === attempt2) this.failed = true;
+    });
+    return attempt2;
   }
 }
 class SessionPreparationService {
@@ -265720,7 +265950,7 @@ class SessionPreparationService {
     }
     if (current2 && current2.requesterUserId !== args2.requesterUserId) return "busy";
     let disposition = "accepted";
-    let predecessorCleanup = this.retiring.get(args2.sessionId) ?? null;
+    let predecessorCleanup = this.retirementOf(args2.sessionId);
     const requesterRecord = Array.from(this.records.values()).find(
       (record22) => record22.requesterUserId === args2.requesterUserId
     );
@@ -265798,7 +266028,7 @@ class SessionPreparationService {
   }
   discard(sessionId) {
     const record2 = this.records.get(sessionId);
-    if (!record2) return this.retiring.get(sessionId) ?? null;
+    if (!record2) return this.retirementOf(sessionId);
     return this.expire(record2, "expired");
   }
   peek(args2) {
@@ -265811,7 +266041,7 @@ class SessionPreparationService {
   claim(args2) {
     const record2 = this.records.get(args2.sessionId);
     if (!record2) {
-      return { status: "miss", cleanup: this.retiring.get(args2.sessionId) ?? null };
+      return { status: "miss", cleanup: this.retirementOf(args2.sessionId) };
     }
     if (record2.requesterUserId !== args2.requesterUserId || record2.claimKey !== args2.claimKey || !record2.resource) {
       return { status: "miss", cleanup: this.expire(record2, "expired") };
@@ -265839,7 +266069,7 @@ class SessionPreparationService {
     for (const record2 of records) {
       void this.expire(record2, "expired");
     }
-    await Promise.allSettled(Array.from(this.retiring.values()));
+    await Promise.allSettled(Array.from(this.retiring.values(), (retirement) => retirement.run()));
   }
   advance(record2, state2) {
     if (this.records.get(record2.sessionId) !== record2 || record2.state === "claimed") {
@@ -265859,28 +266089,32 @@ class SessionPreparationService {
     );
     void this.expire(record2, "failed");
   }
+  /** The session's pending retirement, retrying it first if its last attempt failed. */
+  retirementOf(sessionId) {
+    return this.retiring.get(sessionId)?.run() ?? null;
+  }
   expire(record2, state2) {
-    if (record2.retirementPromise) return record2.retirementPromise;
+    if (record2.retirement) return record2.retirement.run();
     if (this.records.get(record2.sessionId) === record2) {
       this.records.delete(record2.sessionId);
     }
     record2.state = state2;
     const controlClosed = record2.control.close();
     const predecessor = this.retiring.get(record2.sessionId);
-    const cleanup = Promise.all([
-      predecessor,
-      controlClosed,
-      Promise.resolve().then(() => this.waitForCleanup(record2))
-    ]).then(() => void 0).then(() => {
-      if (this.retiring.get(record2.sessionId) === cleanup) {
+    const retirement = new Retirement(async () => {
+      try {
+        await Promise.all([predecessor?.run(), controlClosed, this.waitForCleanup(record2)]);
+      } catch (error2) {
+        this.logger.debug(`Session preparation retirement failed: ${formatErrorMessage(error2)}`);
+        throw error2;
+      }
+      if (this.retiring.get(record2.sessionId) === retirement) {
         this.retiring.delete(record2.sessionId);
       }
     });
-    void cleanup.catch((error2) => {
-      this.logger.debug(`Session preparation retirement failed: ${formatErrorMessage(error2)}`);
-    });
-    record2.retirementPromise = cleanup;
-    this.retiring.set(record2.sessionId, cleanup);
+    record2.retirement = retirement;
+    this.retiring.set(record2.sessionId, retirement);
+    const cleanup = retirement.run();
     record2.abortController.abort();
     return cleanup;
   }
@@ -265888,17 +266122,26 @@ class SessionPreparationService {
     if (record2.cleanupPromise) return record2.cleanupPromise;
     const cleanup = Promise.resolve().then(() => resource.dispose());
     void cleanup.catch((error2) => {
+      if (record2.cleanupPromise === cleanup) record2.cleanupPromise = void 0;
       this.logger.debug(`Failed to dispose session preparation: ${formatErrorMessage(error2)}`);
     });
     record2.cleanupPromise = cleanup;
     return cleanup;
   }
   async waitForCleanup(record2) {
-    const resource = await record2.resourcePromise.catch((error2) => {
-      if (error2 instanceof SessionPreparationCleanupError) throw error2;
-      return void 0;
-    });
-    if (resource) await this.scheduleCleanup(record2, resource);
+    let resource;
+    try {
+      resource = await record2.resourcePromise;
+    } catch (error2) {
+      if (!(error2 instanceof SessionPreparationCleanupError)) return;
+      if (record2.rollbackFailure !== error2 || !error2.retry) {
+        record2.rollbackFailure = error2;
+        throw error2;
+      }
+      await error2.retry();
+      return;
+    }
+    await this.scheduleCleanup(record2, resource);
   }
 }
 const SPECULATIVE_WORKTREE_MARKER_VERSION = 1;
@@ -266744,6 +266987,7 @@ class SessionManager extends EventEmitter {
     let adoptionPromise = null;
     let started = false;
     let cleanupPromise = null;
+    let sandboxCleanupFailed = false;
     const initialized2 = createDeferred();
     const sessionStart = createDeferred();
     const workspaceReady = createDeferred();
@@ -266780,7 +267024,10 @@ class SessionManager extends EventEmitter {
             await session2.terminate(true);
           } else if (sandbox) {
             await sandbox.terminate(true);
-            await sandbox.cleanup();
+            const recover = sandboxCleanupFailed ? sandbox.recoverCleanup?.bind(sandbox) : void 0;
+            sandboxCleanupFailed = true;
+            await (recover ? recover() : sandbox.cleanup());
+            sandboxCleanupFailed = false;
           }
         } catch (error2) {
           await credentials.release();
@@ -266801,7 +267048,8 @@ class SessionManager extends EventEmitter {
           await rm(provisionalWorkdir, { recursive: true, force: true });
         }
       })().catch((error2) => {
-        throw new SessionPreparationCleanupError(error2);
+        cleanupPromise = null;
+        throw new SessionPreparationCleanupError(error2, cleanup);
       });
       return cleanupPromise;
     };
@@ -271971,7 +272219,7 @@ const createNodeServicesForLease = async (sessionDoc, lease) => {
       };
     }
   };
-  const { createRoostSessionData: createRoostSessionData2 } = await import("./chunks/index-CU8Ghgdl.js");
+  const { createRoostSessionData: createRoostSessionData2 } = await import("./chunks/index-a0nEYQPa.js");
   syncModelSummary = async () => {
     const read2 = latestModelTurnId ? await history.readTurn(latestModelTurnId) : { state: "missing" };
     const turn = read2.state === "ready" ? [read2.turn] : [];
@@ -306177,7 +306425,7 @@ async function runRender(file2, options2) {
     }
     data = parsed;
   } else {
-    const { resolveReviewBundle } = await import("./chunks/index-CtXoAGVz.js");
+    const { resolveReviewBundle } = await import("./chunks/index-DnWlNrUf.js");
     const { collectBundleDiagnostics, hasErrorDiagnostics, createReviewBundleSnapshot } = await import("./chunks/index-DG2Ikd5A.js");
     const bundle = await resolveReviewBundle({
       reviewFilePath: inputPath,
@@ -306196,7 +306444,7 @@ async function runRender(file2, options2) {
     data = createReviewBundleSnapshot(bundle);
   }
   const { injectReviewSnapshot } = await import("./chunks/index-BeRTvYK1.js");
-  const { resolveReviewViewerTemplate } = await import("./chunks/review-viewer-DS24MU0Q.js");
+  const { resolveReviewViewerTemplate } = await import("./chunks/review-viewer-Cm1OZZZc.js");
   const template = await resolveReviewViewerTemplate();
   const html = injectReviewSnapshot(template, data);
   const outputPath = options2.output ? path__default$1.resolve(options2.output) : defaultHtmlOutputPath(inputPath);