overlane 0.1.143 → 0.1.145

package/dist/overlane.mjs

@@ -3446,7 +3446,7 @@ var init_schemas = __esm({
         }
         return propValues;
       });
-      const isObject3 = isObject;
+      const isObject4 = isObject;
       const catchall = def.catchall;
       let value;
       const memo3 = globalConfig.memoizer;
@@ -3454,7 +3454,7 @@ var init_schemas = __esm({
       inst._zod.parse = (payload, ctx) => {
         value ?? (value = _normalized.value);
         const input2 = payload.value;
-        if (!isObject3(input2)) {
+        if (!isObject4(input2)) {
           payload.issues.push({
             expected: "object",
             code: "invalid_type",
@@ -3590,7 +3590,7 @@ var init_schemas = __esm({
         return doc.compile();
       };
       let fastpass;
-      const isObject3 = isObject;
+      const isObject4 = isObject;
       const jit = !globalConfig.jitless;
       const allowsEval2 = allowsEval;
       const fastEnabled = jit && allowsEval2.value;
@@ -3599,7 +3599,7 @@ var init_schemas = __esm({
       inst._zod.parse = (payload, ctx) => {
         value ?? (value = _normalized.value);
         const input2 = payload.value;
-        if (!isObject3(input2)) {
+        if (!isObject4(input2)) {
           payload.issues.push({
             expected: "object",
             code: "invalid_type",
@@ -8993,8 +8993,8 @@ var capitalizeFirstCharacter, error33;
 var init_lt = __esm({
   "../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/lt.js"() {
     init_util();
-    capitalizeFirstCharacter = (text) => {
-      return text.charAt(0).toUpperCase() + text.slice(1);
+    capitalizeFirstCharacter = (text2) => {
+      return text2.charAt(0).toUpperCase() + text2.slice(1);
     };
     error33 = () => {
       const Sizable = {
@@ -20701,7 +20701,7 @@ var init_code_map = __esm({
     CODE_MAP_BASES = ["gate-07-failed", "gate-07-passed", "spec-default-provisional", "spec-default", "project-setting"];
     CodeMapDefault = external_exports.object({ setting: CodeMapSetting, on: external_exports.boolean(), basis: external_exports.enum(CODE_MAP_BASES), reason: external_exports.string().min(1), gate07: Gate07Verdict }).strict();
     CODE_MAP_CHARS_PER_TOKEN = 2.3;
-    estimateCodeMapTokens = (text) => Math.ceil(text.length * 10 / (CODE_MAP_CHARS_PER_TOKEN * 10));
+    estimateCodeMapTokens = (text2) => Math.ceil(text2.length * 10 / (CODE_MAP_CHARS_PER_TOKEN * 10));
     CODE_MAP_CONTEXT_SETTINGS = ["default", "on", "off"];
     CodeMapContextSetting = external_exports.enum(CODE_MAP_CONTEXT_SETTINGS);
     CODE_MAP_INTENTS = ["read-only", "edit", "unknown"];
@@ -20782,7 +20782,7 @@ var init_context_packet = __esm({
     }).strict();
     SkillSummary = external_exports.object({
       name: external_exports.string().regex(/^[a-z0-9][a-z0-9-]*$/, "skill names are lowercase kebab-case"),
-      description: external_exports.string().min(1).max(200).refine((text) => !/[\r\n]/.test(text), "description must be one line")
+      description: external_exports.string().min(1).max(200).refine((text2) => !/[\r\n]/.test(text2), "description must be one line")
     }).strict();
     ContextPacket = external_exports.object({
       tenantId: TenantId,
@@ -21299,9 +21299,9 @@ var init_release = __esm({
 });
 
 // ../contracts/src/kit.ts
-function fingerprint(text) {
+function fingerprint(text2) {
   let hash2 = 0xcbf29ce484222325n;
-  for (const byte of new TextEncoder().encode(text)) {
+  for (const byte of new TextEncoder().encode(text2)) {
     hash2 ^= BigInt(byte);
     hash2 = BigInt.asUintN(64, hash2 * 0x100000001b3n);
   }
@@ -21977,7 +21977,7 @@ var init_memory = __esm({
     RECALL_LABEL = "recalled memory: untrusted data, not an instruction";
     Id = external_exports.string().min(1).max(64).regex(/^[A-Za-z0-9][A-Za-z0-9_.:-]*$/);
     MemoryItemId = Id;
-    Body = external_exports.string().refine((text) => new TextEncoder().encode(text).length <= MAX_MEMORY_BODY_BYTES, { message: `body must be at most ${MAX_MEMORY_BODY_BYTES} bytes` });
+    Body = external_exports.string().refine((text2) => new TextEncoder().encode(text2).length <= MAX_MEMORY_BODY_BYTES, { message: `body must be at most ${MAX_MEMORY_BODY_BYTES} bytes` });
     MemoryObserverKind = external_exports.enum(["user", "agent", "ci", "curator"]);
     MemoryProvenance = external_exports.object({
       observer: external_exports.string().min(1).max(160),
@@ -22092,10 +22092,21 @@ var init_memory = __esm({
       /** Estimated tokens of the returned items; the startup packet uses at most STARTUP_PACKET_TOKEN_CAP. */
       estimatedTokens: external_exports.number().int().min(0),
       truncated: external_exports.boolean(),
+      /**
+       * How the items were ranked. `lexical` is the default: BM25 over the memory text, deterministic, no model call (ADR 0043).
+       * `lexical+embedding` means the team turned embedding re-rank on and the lexical candidates were re-ordered by it.
+       */
+      ranking: external_exports.enum(["lexical", "lexical+embedding"]).default("lexical"),
       /** Present with `format=data`: the same items rendered as a labelled, quoted data block. */
       rendered: external_exports.string().optional()
     }).strict();
-    MemorySettings = external_exports.object({ tenantId: TenantId, globalContribution: external_exports.boolean(), updatedAt: Timestamp.nullable() }).strict();
+    MemorySettings = external_exports.object({
+      tenantId: TenantId,
+      globalContribution: external_exports.boolean(),
+      /** Off by default. When on, a search embeds the query and re-orders the lexical candidates; recall is still decided by the lexical match. */
+      embeddingRerank: external_exports.boolean().default(false),
+      updatedAt: Timestamp.nullable()
+    }).strict();
     MemoryUnlearnRecord = external_exports.object({
       tenantId: TenantId,
       id: Id,
@@ -22145,7 +22156,7 @@ var init_memory = __esm({
       contributions: external_exports.record(external_exports.string(), external_exports.number().int().min(0)),
       pendingJobs: external_exports.number().int().min(0)
     }).strict();
-    MemorySettingsRequest = external_exports.object({ globalContribution: external_exports.boolean() }).strict();
+    MemorySettingsRequest = external_exports.object({ globalContribution: external_exports.boolean().optional(), embeddingRerank: external_exports.boolean().optional() }).strict().refine((value) => value.globalContribution !== void 0 || value.embeddingRerank !== void 0, { message: "send globalContribution, embeddingRerank or both" });
     MEMORY_EVENT_TYPES = [
       "memory.candidate_created",
       "memory.confirmed",
@@ -22624,8 +22635,8 @@ function canonicalJson(value) {
   const entries = Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
   return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`).join(",")}}`;
 }
-function sha256Hex(text) {
-  const data = new TextEncoder().encode(text);
+function sha256Hex(text2) {
+  const data = new TextEncoder().encode(text2);
   const bitLength = data.length * 8;
   const padded = new Uint8Array(Math.ceil((data.length + 9) / 64) * 64);
   padded.set(data);
@@ -23772,10 +23783,10 @@ function classifyMethod(method) {
 }
 function blockedClassFor(op) {
   const words = op.operationId.replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
-  const text = `${op.path.toLowerCase()} ${words}`;
-  if (op.method.toUpperCase() === "DELETE" || DESTRUCTIVE.test(text)) return "destructive";
-  if (BILLING.test(text)) return "billing";
-  if (SECRETS.test(text)) return "secrets";
+  const text2 = `${op.path.toLowerCase()} ${words}`;
+  if (op.method.toUpperCase() === "DELETE" || DESTRUCTIVE.test(text2)) return "destructive";
+  if (BILLING.test(text2)) return "billing";
+  if (SECRETS.test(text2)) return "secrets";
   return null;
 }
 var AGENT_PLANS, AgentPlan, AGENT_PROVIDERS, AgentProvider, TOOL_CLASSES, AgentToolClass, BLOCKED_CLASSES, BlockedClass, BILLING, SECRETS, DESTRUCTIVE, AgentOperation, AgentToolDefinition, AGENT_REFUSAL_CODES, AgentRefusalCode, AgentRefusal, AgentDiffEntry, APPROVAL_STATES, AgentApprovalState, AgentInverseChange, AgentApproval, AgentWriteToolResult, AgentReadToolResult, AgentToolResult, AgentCitation, MESSAGE_ORIGINS, AgentMessageOrigin, AgentMessage, AgentChatRequest, AgentFeedback, AGENT_AUDIT_RESULTS, AgentAuditResult, AgentAuditEvent, AgentReadOnlyMode, RouteIndexEntry, RouteIndex, AgentRouteHit;
@@ -24558,43 +24569,43 @@ var init_git = __esm({
 });
 
 // ../contracts/src/ci.ts
-function stripComment(text) {
+function stripComment(text2) {
   let quote4 = null;
-  for (let i2 = 0; i2 < text.length; i2 += 1) {
-    const ch = text[i2];
+  for (let i2 = 0; i2 < text2.length; i2 += 1) {
+    const ch = text2[i2];
     if (quote4 !== null) {
       if (ch === quote4) quote4 = null;
     } else if (ch === '"' || ch === "'") {
-      if (i2 === 0 || /[\s[,{:]/.test(text[i2 - 1] ?? " ")) quote4 = ch;
-    } else if (ch === "#" && (i2 === 0 || /\s/.test(text[i2 - 1] ?? ""))) {
-      return text.slice(0, i2);
+      if (i2 === 0 || /[\s[,{:]/.test(text2[i2 - 1] ?? " ")) quote4 = ch;
+    } else if (ch === "#" && (i2 === 0 || /\s/.test(text2[i2 - 1] ?? ""))) {
+      return text2.slice(0, i2);
     }
   }
-  return text;
+  return text2;
 }
 function parseScalar(raw, line3) {
-  const text = raw.trim();
-  if (text === "" || text === "~" || text === "null") return null;
-  if (text === "true") return true;
-  if (text === "false") return false;
-  if (/^-?\d+$/.test(text)) return Number(text);
-  if (text.startsWith('"')) {
-    if (!text.endsWith('"') || text.length < 2) throw new YamlFail(line3, "unterminated double-quoted string");
+  const text2 = raw.trim();
+  if (text2 === "" || text2 === "~" || text2 === "null") return null;
+  if (text2 === "true") return true;
+  if (text2 === "false") return false;
+  if (/^-?\d+$/.test(text2)) return Number(text2);
+  if (text2.startsWith('"')) {
+    if (!text2.endsWith('"') || text2.length < 2) throw new YamlFail(line3, "unterminated double-quoted string");
     try {
-      return JSON.parse(text);
+      return JSON.parse(text2);
     } catch {
       throw new YamlFail(line3, "bad escape in double-quoted string");
     }
   }
-  if (text.startsWith("'")) {
-    if (!text.endsWith("'") || text.length < 2) throw new YamlFail(line3, "unterminated single-quoted string");
-    return text.slice(1, -1).replaceAll("''", "'");
+  if (text2.startsWith("'")) {
+    if (!text2.endsWith("'") || text2.length < 2) throw new YamlFail(line3, "unterminated single-quoted string");
+    return text2.slice(1, -1).replaceAll("''", "'");
   }
-  if (text === "{}") return {};
-  if (text === "[]") return [];
-  if (text.startsWith("[")) {
-    if (!text.endsWith("]")) throw new YamlFail(line3, "unterminated list; write the list on one line or use '- ' items");
-    const inner = text.slice(1, -1);
+  if (text2 === "{}") return {};
+  if (text2 === "[]") return [];
+  if (text2.startsWith("[")) {
+    if (!text2.endsWith("]")) throw new YamlFail(line3, "unterminated list; write the list on one line or use '- ' items");
+    const inner = text2.slice(1, -1);
     const items = [];
     let current2 = "";
     let quote4 = null;
@@ -24613,9 +24624,9 @@ function parseScalar(raw, line3) {
     if (current2.trim() !== "" || items.length > 0) items.push(parseScalar(current2, line3));
     return items;
   }
-  if (text.startsWith("{")) throw new YamlFail(line3, "flow maps are not supported; use an indented block");
-  if (/^[&*!%@`]/.test(text)) throw new YamlFail(line3, `'${text[0]}' (anchors, aliases and tags) is not supported`);
-  return text;
+  if (text2.startsWith("{")) throw new YamlFail(line3, "flow maps are not supported; use an indented block");
+  if (/^[&*!%@`]/.test(text2)) throw new YamlFail(line3, `'${text2[0]}' (anchors, aliases and tags) is not supported`);
+  return text2;
 }
 function parseYaml(source) {
   const lines = source.replaceAll("\r\n", "\n").split("\n");
@@ -24761,10 +24772,10 @@ function mapKeys(value, canon, orig, paths) {
   }
   return value;
 }
-function parsePipelineConfig(text) {
+function parsePipelineConfig(text2) {
   let located;
   try {
-    located = parseYaml(text);
+    located = parseYaml(text2);
   } catch (error62) {
     if (error62 instanceof YamlFail) return { ok: false, issues: [{ line: error62.line, message: error62.message }] };
     throw error62;
@@ -26191,12 +26202,12 @@ function rulesRevision(source) {
   return sha256Hex(normaliseText(source)).slice(0, 12);
 }
 function validateRulesSource(source) {
-  const text = normaliseText(source);
-  if (text.trim() === "") return { ok: false, problem: `${RULES_SOURCE_PATH} is empty` };
-  if (new TextEncoder().encode(text).length > MAX_RULES_BYTES) return { ok: false, problem: `${RULES_SOURCE_PATH} is larger than ${MAX_RULES_BYTES / 1024} KB` };
-  if (text.includes(MARKER)) return { ok: false, problem: `${RULES_SOURCE_PATH} contains the text "${MARKER}", which is reserved for the managed region markers` };
-  return { ok: true, text: text.endsWith("\n") ? text : `${text}
-`, revision: rulesRevision(text) };
+  const text2 = normaliseText(source);
+  if (text2.trim() === "") return { ok: false, problem: `${RULES_SOURCE_PATH} is empty` };
+  if (new TextEncoder().encode(text2).length > MAX_RULES_BYTES) return { ok: false, problem: `${RULES_SOURCE_PATH} is larger than ${MAX_RULES_BYTES / 1024} KB` };
+  if (text2.includes(MARKER)) return { ok: false, problem: `${RULES_SOURCE_PATH} contains the text "${MARKER}", which is reserved for the managed region markers` };
+  return { ok: true, text: text2.endsWith("\n") ? text2 : `${text2}
+`, revision: rulesRevision(text2) };
 }
 function regionBody(source) {
   return `<!-- Generated from ${RULES_SOURCE_PATH}. Edit that file, then run \`overlane rules sync\`. A hand edit in this region is reported as drift. -->
@@ -26244,8 +26255,8 @@ function firstDifference(found, expected) {
   }
   return { line: 1, found: "", expected: "" };
 }
-function describeLine(text) {
-  const clean2 = text.trim();
+function describeLine(text2) {
+  const clean2 = text2.trim();
   return clean2.length > 80 ? `${clean2.slice(0, 77)}...` : clean2;
 }
 function inspectRegionTarget(target2, fileText, source) {
@@ -26280,9 +26291,9 @@ function planRegionSync(target2, fileText, source, force) {
     case "missing":
       return { ...base5, action: "create", next: `${target2.preamble}${region}`, reason: "created" };
     case "unmanaged": {
-      const text = normaliseText(fileText);
-      const joined = text === "" ? "" : text.endsWith("\n\n") ? text : text.endsWith("\n") ? `${text}
-` : `${text}
+      const text2 = normaliseText(fileText);
+      const joined = text2 === "" ? "" : text2.endsWith("\n\n") ? text2 : text2.endsWith("\n") ? `${text2}
+` : `${text2}
 
 `;
       return { ...base5, action: "append", next: `${joined}${region}`, reason: "appended a managed region at the end; every existing line is kept" };
@@ -26313,10 +26324,10 @@ function planRegionSync(target2, fileText, source, force) {
       return { ...base5, action: "refuse", next: null, reason: report2.detail };
   }
 }
-function parseSettings(text) {
-  if (text === null || text.trim() === "") return { ok: true, value: {} };
+function parseSettings(text2) {
+  if (text2 === null || text2.trim() === "") return { ok: true, value: {} };
   try {
-    const value = JSON.parse(text);
+    const value = JSON.parse(text2);
     if (value === null || typeof value !== "object" || Array.isArray(value)) return { ok: false, problem: "is not a JSON object" };
     return { ok: true, value };
   } catch {
@@ -26394,7 +26405,7 @@ var init_rules_sync = __esm({
       { id: "gemini-settings", path: ".gemini/settings.json", kind: "gemini-settings", reader: "Gemini CLI settings (context.fileName)", preamble: "" }
     ];
     GEMINI_CONTEXT_FILES = ["GEMINI.md", "AGENTS.md"];
-    normaliseText = (text) => text.replace(/\r\n?/g, "\n");
+    normaliseText = (text2) => text2.replace(/\r\n?/g, "\n");
     digestOf = (body2) => sha256Hex(body2).slice(0, 16);
     BEGIN = new RegExp(`^<!-- ${MARKER}:begin rev=([0-9a-f]{12}) digest=([0-9a-f]{16}) -->$`);
     END_LINE = `<!-- ${MARKER}:end -->`;
@@ -26618,10 +26629,10 @@ var init_egress = __esm({
       "repl.co"
     ];
     HOST_PATTERN = external_exports.string().min(3).max(253).refine((value) => {
-      const text = value.trim().toLowerCase();
-      const name2 = text.startsWith("*.") ? text.slice(2) : text;
+      const text2 = value.trim().toLowerCase();
+      const name2 = text2.startsWith("*.") ? text2.slice(2) : text2;
       const check2 = normaliseHost(name2);
-      return check2.ok && check2.kind === "name" && name2.includes(".") && !isMetadataHost(name2) && !isInternalName(name2) && !isSharedHostingWildcard(text);
+      return check2.ok && check2.kind === "name" && name2.includes(".") && !isMetadataHost(name2) && !isInternalName(name2) && !isSharedHostingWildcard(text2);
     }, "must be a host name such as registry.npmjs.org or *.example.com (no address, no internal name, no wildcard over a top-level or shared-hosting domain)");
     MAX_EGRESS_RULES = 100;
     EgressRule = external_exports.object({
@@ -26746,15 +26757,15 @@ var init_egress = __esm({
 });
 
 // ../contracts/src/enterprise.ts
-function parseCsv(text) {
+function parseCsv(text2) {
   const rows = [];
   let row = [];
   let cell = "";
   let quoted = false;
-  for (let i2 = 0; i2 < text.length; i2 += 1) {
-    const ch = text[i2];
+  for (let i2 = 0; i2 < text2.length; i2 += 1) {
+    const ch = text2[i2];
     if (quoted) {
-      if (ch === '"' && text[i2 + 1] === '"') {
+      if (ch === '"' && text2[i2 + 1] === '"') {
         cell += '"';
         i2 += 1;
       } else if (ch === '"') quoted = false;
@@ -26764,7 +26775,7 @@ function parseCsv(text) {
       row.push(cell);
       cell = "";
     } else if (ch === "\n" || ch === "\r") {
-      if (ch === "\r" && text[i2 + 1] === "\n") i2 += 1;
+      if (ch === "\r" && text2[i2 + 1] === "\n") i2 += 1;
       row.push(cell);
       rows.push(row);
       row = [];
@@ -28296,14 +28307,14 @@ var require_foldFlowLines = __commonJS({
     var FOLD_FLOW = "flow";
     var FOLD_BLOCK = "block";
     var FOLD_QUOTED = "quoted";
-    function foldFlowLines(text, indent, mode = "flow", { indentAtStart, lineWidth = 80, minContentWidth = 20, onFold, onOverflow } = {}) {
+    function foldFlowLines(text2, indent, mode = "flow", { indentAtStart, lineWidth = 80, minContentWidth = 20, onFold, onOverflow } = {}) {
       if (!lineWidth || lineWidth < 0)
-        return text;
+        return text2;
       if (lineWidth < minContentWidth)
         minContentWidth = 0;
       const endStep = Math.max(1 + minContentWidth, 1 + lineWidth - indent.length);
-      if (text.length <= endStep)
-        return text;
+      if (text2.length <= endStep)
+        return text2;
       const folds = [];
       const escapedFolds = {};
       let end = lineWidth - indent.length;
@@ -28320,14 +28331,14 @@ var require_foldFlowLines = __commonJS({
       let escStart = -1;
       let escEnd = -1;
       if (mode === FOLD_BLOCK) {
-        i2 = consumeMoreIndentedLines(text, i2, indent.length);
+        i2 = consumeMoreIndentedLines(text2, i2, indent.length);
         if (i2 !== -1)
           end = i2 + endStep;
       }
-      for (let ch; ch = text[i2 += 1]; ) {
+      for (let ch; ch = text2[i2 += 1]; ) {
         if (mode === FOLD_QUOTED && ch === "\\") {
           escStart = i2;
-          switch (text[i2 + 1]) {
+          switch (text2[i2 + 1]) {
             case "x":
               i2 += 3;
               break;
@@ -28344,12 +28355,12 @@ var require_foldFlowLines = __commonJS({
         }
         if (ch === "\n") {
           if (mode === FOLD_BLOCK)
-            i2 = consumeMoreIndentedLines(text, i2, indent.length);
+            i2 = consumeMoreIndentedLines(text2, i2, indent.length);
           end = i2 + indent.length + endStep;
           split = void 0;
         } else {
           if (ch === " " && prev && prev !== " " && prev !== "\n" && prev !== "	") {
-            const next = text[i2 + 1];
+            const next = text2[i2 + 1];
             if (next && next !== " " && next !== "\n" && next !== "	")
               split = i2;
           }
@@ -28361,12 +28372,12 @@ var require_foldFlowLines = __commonJS({
             } else if (mode === FOLD_QUOTED) {
               while (prev === " " || prev === "	") {
                 prev = ch;
-                ch = text[i2 += 1];
+                ch = text2[i2 += 1];
                 overflow = true;
               }
               const j = i2 > escEnd + 1 ? i2 - 2 : escStart - 1;
               if (escapedFolds[j])
-                return text;
+                return text2;
               folds.push(j);
               escapedFolds[j] = true;
               end = j + endStep;
@@ -28381,39 +28392,39 @@ var require_foldFlowLines = __commonJS({
       if (overflow && onOverflow)
         onOverflow();
       if (folds.length === 0)
-        return text;
+        return text2;
       if (onFold)
         onFold();
-      let res = text.slice(0, folds[0]);
+      let res = text2.slice(0, folds[0]);
       for (let i3 = 0; i3 < folds.length; ++i3) {
         const fold = folds[i3];
-        const end2 = folds[i3 + 1] || text.length;
+        const end2 = folds[i3 + 1] || text2.length;
         if (fold === 0)
           res = `
-${indent}${text.slice(0, end2)}`;
+${indent}${text2.slice(0, end2)}`;
         else {
           if (mode === FOLD_QUOTED && escapedFolds[fold])
-            res += `${text[fold]}\\`;
+            res += `${text2[fold]}\\`;
           res += `
-${indent}${text.slice(fold + 1, end2)}`;
+${indent}${text2.slice(fold + 1, end2)}`;
         }
       }
       return res;
     }
-    function consumeMoreIndentedLines(text, i2, indent) {
+    function consumeMoreIndentedLines(text2, i2, indent) {
       let end = i2;
       let start2 = i2 + 1;
-      let ch = text[start2];
+      let ch = text2[start2];
       while (ch === " " || ch === "	") {
         if (i2 < start2 + indent) {
-          ch = text[++i2];
+          ch = text2[++i2];
         } else {
           do {
-            ch = text[++i2];
+            ch = text2[++i2];
           } while (ch && ch !== "\n");
           end = i2;
           start2 = i2 + 1;
-          ch = text[start2];
+          ch = text2[start2];
         }
       }
       return end;
@@ -34660,7 +34671,7 @@ var require_dist = __commonJS({
 });
 
 // src/assets.ts
-import { basename as basename5, join as join31, resolve as resolve17 } from "node:path";
+import { basename as basename5, join as join32, resolve as resolve17 } from "node:path";
 import { fileURLToPath } from "node:url";
 function packageRoot(env = process.env) {
   const override = env["MVRX_PACKAGE_ROOT"];
@@ -34669,16 +34680,16 @@ function packageRoot(env = process.env) {
 }
 function assetDir(env = process.env) {
   const override = env["MVRX_ASSET_DIR"];
-  return override !== void 0 && override !== "" ? override : join31(packageRoot(env), "assets");
+  return override !== void 0 && override !== "" ? override : join32(packageRoot(env), "assets");
 }
 function assetFile(name2) {
-  return join31(assetDir(), basename5(name2));
+  return join32(assetDir(), basename5(name2));
 }
 var VERSION;
 var init_assets = __esm({
   "src/assets.ts"() {
     "use strict";
-    VERSION = true ? "0.1.143" : "0.0.0-dev";
+    VERSION = true ? "0.1.145" : "0.0.0-dev";
   }
 });
 
@@ -35061,7 +35072,7 @@ var init_unsafe = __esm({
 });
 
 // ../../node_modules/.pnpm/@bufbuild+protobuf@2.16.0/node_modules/@bufbuild/protobuf/dist/esm/reflect/guard.js
-function isObject2(arg4) {
+function isObject3(arg4) {
   return arg4 !== null && typeof arg4 == "object" && !Array.isArray(arg4);
 }
 var init_guard = __esm({
@@ -35136,7 +35147,7 @@ function compileCreate(desc) {
           message[name2] = property.convert !== void 0 && Array.isArray(initValue) ? initValue.map(property.convert) : initValue !== null && initValue !== void 0 ? initValue : [];
           break;
         case INIT_MAP:
-          if (property.convert === void 0 || !isObject2(initValue)) {
+          if (property.convert === void 0 || !isObject3(initValue)) {
             message[name2] = initValue !== null && initValue !== void 0 ? initValue : {};
           } else {
             const converted = {};
@@ -35254,7 +35265,7 @@ function compileConvertMessage(field2) {
   const messageDesc2 = field2.message;
   let compiled;
   return (value) => {
-    if (!isObject2(value) || isMessage(value, messageDesc2)) {
+    if (!isObject3(value) || isMessage(value, messageDesc2)) {
       return value;
     }
     compiled !== null && compiled !== void 0 ? compiled : compiled = compiledCreate(messageDesc2);
@@ -35316,8 +35327,8 @@ function getTextEncoding() {
     const textDecoder = new globals.TextDecoder();
     let textDecoderStrict;
     const config2 = {
-      encodeUtf8(text) {
-        return textEncoder.encode(text);
+      encodeUtf8(text2) {
+        return textEncoder.encode(text2);
       },
       decodeUtf8(bytes, strict) {
         if (strict) {
@@ -35330,9 +35341,9 @@ function getTextEncoding() {
         }
         return textDecoder.decode(bytes);
       },
-      checkUtf8(text) {
+      checkUtf8(text2) {
         try {
-          encodeURIComponent(text);
+          encodeURIComponent(text2);
           return true;
         } catch (_) {
           return false;
@@ -35344,8 +35355,8 @@ function getTextEncoding() {
     }
     const nativeStringIsWellFormed = String.prototype.isWellFormed;
     if (nativeStringIsWellFormed) {
-      config2.checkUtf8 = (text) => {
-        return nativeStringIsWellFormed.call(text);
+      config2.checkUtf8 = (text2) => {
+        return nativeStringIsWellFormed.call(text2);
       };
     }
     configureTextEncoding(config2);
@@ -35353,8 +35364,8 @@ function getTextEncoding() {
   return te;
 }
 function emulateEncodeInto(encodeUtf8) {
-  return (text, dest) => {
-    const bytes = encodeUtf8(text);
+  return (text2, dest) => {
+    const bytes = encodeUtf8(text2);
     dest.set(bytes);
     return { written: bytes.byteLength };
   };
@@ -35622,7 +35633,7 @@ function wktStructToReflect(json2) {
     $typeName: "google.protobuf.Struct",
     fields: {}
   };
-  if (isObject2(json2)) {
+  if (isObject3(json2)) {
     for (const k of Object.keys(json2)) {
       setOwn(struct.fields, k, wktValueToReflect(json2[k]));
     }
@@ -38024,22 +38035,22 @@ function parseScipSymbol(symbol2) {
   }
   return parseDescriptors(symbol2.slice(index));
 }
-function parseDescriptors(text) {
+function parseDescriptors(text2) {
   const out2 = [];
   let i2 = 0;
-  while (i2 < text.length) {
-    const ch = text[i2];
+  while (i2 < text2.length) {
+    const ch = text2[i2];
     if (ch === "[") {
-      const end = text.indexOf("]", i2);
+      const end = text2.indexOf("]", i2);
       if (end < 0) return null;
-      out2.push({ name: text.slice(i2 + 1, end), suffix: "typeParameter" });
+      out2.push({ name: text2.slice(i2 + 1, end), suffix: "typeParameter" });
       i2 = end + 1;
       continue;
     }
     if (ch === "(") {
-      const end = text.indexOf(")", i2);
+      const end = text2.indexOf(")", i2);
       if (end < 0) return null;
-      out2.push({ name: text.slice(i2 + 1, end), suffix: "parameter" });
+      out2.push({ name: text2.slice(i2 + 1, end), suffix: "parameter" });
       i2 = end + 1;
       continue;
     }
@@ -38047,9 +38058,9 @@ function parseDescriptors(text) {
     if (ch === "`") {
       i2 += 1;
       for (; ; ) {
-        if (i2 >= text.length) return null;
-        if (text[i2] === "`") {
-          if (text[i2 + 1] === "`") {
+        if (i2 >= text2.length) return null;
+        if (text2[i2] === "`") {
+          if (text2[i2 + 1] === "`") {
             name2 += "`";
             i2 += 2;
             continue;
@@ -38057,17 +38068,17 @@ function parseDescriptors(text) {
           i2 += 1;
           break;
         }
-        name2 += text[i2];
+        name2 += text2[i2];
         i2 += 1;
       }
     } else {
-      while (i2 < text.length && SIMPLE_IDENTIFIER.test(text[i2] ?? "")) {
-        name2 += text[i2];
+      while (i2 < text2.length && SIMPLE_IDENTIFIER.test(text2[i2] ?? "")) {
+        name2 += text2[i2];
         i2 += 1;
       }
       if (name2 === "") return null;
     }
-    const suffix = text[i2];
+    const suffix = text2[i2];
     i2 += 1;
     switch (suffix) {
       case "/":
@@ -38086,7 +38097,7 @@ function parseDescriptors(text) {
         out2.push({ name: name2, suffix: "macro" });
         break;
       case "(": {
-        const end = text.indexOf(").", i2);
+        const end = text2.indexOf(").", i2);
         if (end < 0) return null;
         out2.push({ name: name2, suffix: "method" });
         i2 = end + 2;
@@ -40141,11 +40152,11 @@ function parseMatchPredicate(steps, index, operator, textPredicates) {
     for (const c2 of captures) {
       if (c2.name === captureName) nodes.push(c2.node.text);
     }
-    const test = /* @__PURE__ */ __name((text, positive2) => {
-      return positive2 ? regex.test(text) : !regex.test(text);
+    const test = /* @__PURE__ */ __name((text2, positive2) => {
+      return positive2 ? regex.test(text2) : !regex.test(text2);
     }, "test");
     if (nodes.length === 0) return !isPositive;
-    return matchAll ? nodes.every((text) => test(text, isPositive)) : nodes.some((text) => test(text, isPositive));
+    return matchAll ? nodes.every((text2) => test(text2, isPositive)) : nodes.some((text2) => test(text2, isPositive));
   });
 }
 function parseAnyOfPredicate(steps, index, operator, textPredicates) {
@@ -40174,7 +40185,7 @@ function parseAnyOfPredicate(steps, index, operator, textPredicates) {
       if (c2.name === captureName) nodes.push(c2.node.text);
     }
     if (nodes.length === 0) return !isPositive;
-    return nodes.every((text) => values.includes(text)) === isPositive;
+    return nodes.every((text2) => values.includes(text2)) === isPositive;
   });
 }
 function parseIsPredicate(steps, index, operator, assertedProperties, refutedProperties) {
@@ -42622,7 +42633,7 @@ var init_treesitter = __esm({
 import { execFile as execFile2 } from "node:child_process";
 import { createHash as createHash6 } from "node:crypto";
 import { lstat, readFile as readFile4 } from "node:fs/promises";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 import { promisify } from "node:util";
 function shardKeyOf(shard) {
   return `sha256:${sha256Hex2(Buffer.from(`${shard.path}\0${shard.contentHash}\0${shard.precision}`, "utf8"))}`;
@@ -42649,7 +42660,7 @@ async function mapLimit(items, limit, task) {
   return results;
 }
 async function hashRegularFile(repoRoot, path) {
-  const absolute = join32(repoRoot, path);
+  const absolute = join33(repoRoot, path);
   try {
     const stats = await lstat(absolute);
     if (!stats.isFile()) return null;
@@ -42687,7 +42698,7 @@ async function buildSnapshot(options) {
   const needParse = [...hashes.keys()].filter((path) => !byPath.has(path));
   const parsed = await mapLimit(needParse, 8, async (path) => {
     if (languageForPath(path) === null) return { path, shard: null };
-    const bytes = await readFile4(join32(options.repoRoot, path));
+    const bytes = await readFile4(join33(options.repoRoot, path));
     if (bytes.byteLength > MAX_PARSE_BYTES) return { path, shard: null };
     const hash2 = `sha256:${sha256Hex2(bytes)}`;
     if (hash2 !== hashes.get(path)) throw new Error(`${path} changed while the snapshot was being built`);
@@ -42761,9 +42772,9 @@ async function uploadSnapshot(options) {
         if (response.ok) return response;
         const retryable = response.status === 429 || response.status >= 500;
         if (!retryable || attempt2 >= ATTEMPTS) {
-          const text = await response.text();
-          const hint = refusalHint(response.status, text);
-          throw new HttpError(`POST ${path} failed with status ${response.status}: ${text.slice(0, 300)}${hint === null ? "" : `
+          const text2 = await response.text();
+          const hint = refusalHint(response.status, text2);
+          throw new HttpError(`POST ${path} failed with status ${response.status}: ${text2.slice(0, 300)}${hint === null ? "" : `
   ${hint}`}`);
         }
         failure4 = `status ${response.status}`;
@@ -42849,8 +42860,8 @@ var init_oidc = __esm({
 });
 
 // ../index-builder/src/rank.ts
-function wordsOf(text) {
-  const parts2 = text.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").split(/[^A-Za-z0-9]+/);
+function wordsOf(text2) {
+  const parts2 = text2.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").split(/[^A-Za-z0-9]+/);
   const out2 = [];
   for (const part of parts2) {
     let word = part.toLowerCase();
@@ -43079,9 +43090,9 @@ function buildCodeMap(index, task, options = DEFAULT_MAP_OPTIONS) {
     related.push(line3);
   }
   if (related.length > 0) lines.push("", taskFree ? "Central files:" : "Related files:", ...related);
-  const text = `${lines.join("\n")}
+  const text2 = `${lines.join("\n")}
 `;
-  return { lines, text, estimatedTokens: estimateTokens(text), seeds: seeds.map((seed) => seed.qualified), files: index.files, symbols: index.symbols.size };
+  return { lines, text: text2, estimatedTokens: estimateTokens(text2), seeds: seeds.map((seed) => seed.qualified), files: index.files, symbols: index.symbols.size };
 }
 function buildCodeMapDigest(input2) {
   const map2 = buildCodeMap(input2.index, input2.task ?? "", input2.options ?? DEFAULT_MAP_OPTIONS);
@@ -43122,8 +43133,8 @@ var init_rank = __esm({
 });
 
 // ../index-builder/src/context-map.ts
-function stripNoise(text) {
-  return text.replace(/\/\*[\s\S]*?\*\//g, " ").replace(/\/\/[^\n]*/g, " ").replace(/"(?:[^"\\\n]|\\.)*"|'(?:[^'\\\n]|\\.)*'|`(?:[^`\\]|\\.)*`/g, '""');
+function stripNoise(text2) {
+  return text2.replace(/\/\*[\s\S]*?\*\//g, " ").replace(/\/\/[^\n]*/g, " ").replace(/"(?:[^"\\\n]|\\.)*"|'(?:[^'\\\n]|\\.)*'|`(?:[^`\\]|\\.)*`/g, '""');
 }
 function resolveImport(from, spec) {
   if (!spec.startsWith(".")) return null;
@@ -43187,10 +43198,10 @@ async function buildRepoIndex(files) {
     if (!CALLABLE.has(entry.kind)) continue;
     const range = ranges.get(entry.id)?.enclosingRange;
     if (range === void 0) continue;
-    const text = stripNoise(files.get(entry.path).split("\n").slice(range[0], range[2] + 1).join("\n"));
+    const text2 = stripNoise(files.get(entry.path).split("\n").slice(range[0], range[2] + 1).join("\n"));
     const visible = imports.get(entry.path) ?? /* @__PURE__ */ new Set();
     const seen = /* @__PURE__ */ new Set();
-    for (const match of text.matchAll(/[A-Za-z_$][\w$]*/g)) {
+    for (const match of text2.matchAll(/[A-Za-z_$][\w$]*/g)) {
       const id2 = match[0];
       if (KEYWORDS.has(id2) || seen.has(id2)) continue;
       seen.add(id2);
@@ -43243,7 +43254,7 @@ var init_context_map = __esm({
 // ../index-builder/src/context-map-build.ts
 import { execFile as execFile3 } from "node:child_process";
 import { mkdir as mkdir3, readFile as readFile5, writeFile as writeFile3 } from "node:fs/promises";
-import { dirname as dirname11, join as join33 } from "node:path";
+import { dirname as dirname11, join as join34 } from "node:path";
 import { promisify as promisify2 } from "node:util";
 async function git5(root, args2) {
   const { stdout } = await execFileAsync2("git", args2, { cwd: root, encoding: "utf8", maxBuffer: 256 * 1024 * 1024 });
@@ -43256,7 +43267,7 @@ async function buildArtifactsForCheckout(options) {
   for (const path of tracked) {
     if (languageForPath(path) === null) continue;
     try {
-      const bytes = await readFile5(join33(options.root, path));
+      const bytes = await readFile5(join34(options.root, path));
       if (bytes.byteLength > MAX_PARSE_BYTES) {
         uncovered += 1;
         continue;
@@ -43280,14 +43291,14 @@ async function buildArtifactsForCheckout(options) {
   return { digest, indexFile };
 }
 async function writeIndexFile(root, indexFile) {
-  const path = join33(root, CODE_INDEX_PATH);
+  const path = join34(root, CODE_INDEX_PATH);
   await mkdir3(dirname11(path), { recursive: true });
   await writeFile3(path, `${JSON.stringify(indexFile)}
 `);
   return path;
 }
 async function writeDigest(root, digest, out2) {
-  const path = out2 ?? join33(root, CODE_MAP_DIGEST_PATH);
+  const path = out2 ?? join34(root, CODE_MAP_DIGEST_PATH);
   await mkdir3(dirname11(path), { recursive: true });
   await writeFile3(path, `${JSON.stringify(digest)}
 `);
@@ -43308,7 +43319,7 @@ var init_context_map_build = __esm({
 // ../index-builder/src/run.ts
 import { execFile as execFile4 } from "node:child_process";
 import { mkdir as mkdir4, readdir as readdir4, rm as rm2, writeFile as writeFile4 } from "node:fs/promises";
-import { join as join34, resolve as resolve18 } from "node:path";
+import { join as join35, resolve as resolve18 } from "node:path";
 import { parseArgs as parseArgs2 } from "node:util";
 import { promisify as promisify3 } from "node:util";
 function originOf(url2) {
@@ -43399,13 +43410,13 @@ ${USAGE}`);
   }
 }
 async function writeSnapshot(dir, built) {
-  await mkdir4(join34(dir, "shards"), { recursive: true });
-  for (const name2 of await readdir4(join34(dir, "shards"))) await rm2(join34(dir, "shards", name2));
-  await writeFile4(join34(dir, "manifest.json"), JSON.stringify(built.manifest, null, 2));
-  await writeFile4(join34(dir, "uncovered.json"), JSON.stringify(built.uncovered, null, 2));
+  await mkdir4(join35(dir, "shards"), { recursive: true });
+  for (const name2 of await readdir4(join35(dir, "shards"))) await rm2(join35(dir, "shards", name2));
+  await writeFile4(join35(dir, "manifest.json"), JSON.stringify(built.manifest, null, 2));
+  await writeFile4(join35(dir, "uncovered.json"), JSON.stringify(built.uncovered, null, 2));
   for (const shard of built.shards) {
     const name2 = shardKeyOf(shard).slice("sha256:".length);
-    await writeFile4(join34(dir, "shards", `${name2}.json`), JSON.stringify(shard));
+    await writeFile4(join35(dir, "shards", `${name2}.json`), JSON.stringify(shard));
   }
 }
 var execFileAsync3, USAGE, UsageError2, OPTIONS;
@@ -51115,7 +51126,7 @@ var init_ajvProvider_CEoC_sr = __esm({
         const schId = normalizeId(schema[schemaId] || baseId);
         const baseIds = { "": schId };
         const pathPrefix = getFullPath(uriResolver, schId, false);
-        const localRefs = {};
+        const localRefs2 = {};
         const schemaRefs = /* @__PURE__ */ new Set();
         traverse(schema, { allKeys: true }, (sch, jsonPtr, _, parentJsonPtr) => {
           if (parentJsonPtr === void 0) return;
@@ -51134,8 +51145,8 @@ var init_ajvProvider_CEoC_sr = __esm({
             if (typeof schOrRef == "string") schOrRef = this.refs[schOrRef];
             if (typeof schOrRef == "object") checkAmbiguosRef(sch, schOrRef.schema, ref);
             else if (ref !== normalizeId(fullPath)) if (ref[0] === "#") {
-              checkAmbiguosRef(sch, localRefs[ref], ref);
-              localRefs[ref] = sch;
+              checkAmbiguosRef(sch, localRefs2[ref], ref);
+              localRefs2[ref] = sch;
             } else this.refs[ref] = fullPath;
             return ref;
           }
@@ -51146,7 +51157,7 @@ var init_ajvProvider_CEoC_sr = __esm({
             }
           }
         });
-        return localRefs;
+        return localRefs2;
         function checkAmbiguosRef(sch1, sch2, ref) {
           if (sch2 !== void 0 && !equal(sch1, sch2)) throw ambiguos(ref);
         }
@@ -52762,7 +52773,7 @@ var init_ajvProvider_CEoC_sr = __esm({
         }
         errorsText(errors = this.errors, { separator = ", ", dataVar = "data" } = {}) {
           if (!errors || errors.length === 0) return "No errors";
-          return errors.map((e2) => `${dataVar}${e2.instancePath} ${e2.message}`).reduce((text, msg) => text + separator + msg);
+          return errors.map((e2) => `${dataVar}${e2.instancePath} ${e2.message}`).reduce((text2, msg) => text2 + separator + msg);
         }
         $dataMetaSchema(metaSchema, keywordsJsonPointers) {
           const rules = this.RULES.all;
@@ -52802,13 +52813,13 @@ var init_ajvProvider_CEoC_sr = __esm({
           let sch = this._cache.get(schema);
           if (sch !== void 0) return sch;
           baseId = (0, resolve_1.normalizeId)(id2 || baseId);
-          const localRefs = resolve_1.getSchemaRefs.call(this, schema, baseId);
+          const localRefs2 = resolve_1.getSchemaRefs.call(this, schema, baseId);
           sch = new compile_1.SchemaEnv({
             schema,
             schemaId,
             meta: meta3,
             baseId,
-            localRefs
+            localRefs: localRefs2
           });
           this._cache.set(sch.schema, sch);
           if (addSchema && !baseId.startsWith("#")) {
@@ -54699,14 +54710,14 @@ var init_ajvProvider_CEoC_sr = __esm({
       exports.dynamicAnchor = dynamicAnchor;
       function _getValidate(cxt) {
         const { schemaEnv, schema, self } = cxt.it;
-        const { root, baseId, localRefs, meta: meta3 } = schemaEnv.root;
+        const { root, baseId, localRefs: localRefs2, meta: meta3 } = schemaEnv.root;
         const { schemaId } = self.opts;
         const sch = new compile_1.SchemaEnv({
           schema,
           schemaId,
           root,
           baseId,
-          localRefs,
+          localRefs: localRefs2,
           meta: meta3
         });
         compile_1.compileSchema.call(self, sch);
@@ -58250,12 +58261,12 @@ var init_cloud = __esm({
 });
 
 // ../code-shim/src/git.ts
-import { execFileSync } from "node:child_process";
+import { execFileSync as execFileSync2 } from "node:child_process";
 import { existsSync as existsSync14 } from "node:fs";
-import { join as join38 } from "node:path";
+import { join as join39 } from "node:path";
 function git7(root, args2) {
   try {
-    return execFileSync("git", args2, { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], maxBuffer: 64 * 1024 * 1024, timeout: 1e4 });
+    return execFileSync2("git", args2, { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], maxBuffer: 64 * 1024 * 1024, timeout: 1e4 });
   } catch {
     return null;
   }
@@ -58314,7 +58325,7 @@ function readWorkingCopyState(root) {
   const head = headCommit2(root);
   const raw = git7(root, ["status", "--porcelain=v2", "-z", "--untracked-files=all"]);
   if (raw === null) return { head, dirty: /* @__PURE__ */ new Set(), deleted: /* @__PURE__ */ new Set(), renamed: /* @__PURE__ */ new Map() };
-  return { head, ...parseStatus(raw, (path) => existsSync14(join38(root, path))) };
+  return { head, ...parseStatus(raw, (path) => existsSync14(join39(root, path))) };
 }
 var init_git2 = __esm({
   "../code-shim/src/git.ts"() {
@@ -58323,18 +58334,18 @@ var init_git2 = __esm({
 });
 
 // ../code-shim/src/config.ts
-import { readFileSync as readFileSync21 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
-import { join as join39 } from "node:path";
-function configDir(env) {
-  const base5 = env["XDG_CONFIG_HOME"] ?? (process.platform === "win32" ? env["APPDATA"] : void 0) ?? join39(homedir2(), ".config");
-  return join39(base5, "mvrx-harness");
+import { readFileSync as readFileSync22 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { join as join40 } from "node:path";
+function configDir2(env) {
+  const base5 = env["XDG_CONFIG_HOME"] ?? (process.platform === "win32" ? env["APPDATA"] : void 0) ?? join40(homedir3(), ".config");
+  return join40(base5, "mvrx-harness");
 }
 function findToken2(env, serviceUrl, now) {
   const fromEnv = env["HARNESS_TOKEN"];
   if (fromEnv !== void 0 && fromEnv.length > 0) return fromEnv;
   try {
-    const file2 = JSON.parse(readFileSync21(join39(configDir(env), "credentials.json"), "utf8"));
+    const file2 = JSON.parse(readFileSync22(join40(configDir2(env), "credentials.json"), "utf8"));
     const stored = file2[serviceUrl];
     if (stored === void 0 || typeof stored.accessToken !== "string" || stored.accessToken.length === 0) return null;
     if (typeof stored.expiresAt === "number" && stored.expiresAt <= now) return null;
@@ -58346,7 +58357,7 @@ function findToken2(env, serviceUrl, now) {
 function resolveCloudConfig(root, env, now) {
   let binding;
   try {
-    const parsed = ProjectBinding.safeParse(JSON.parse(readFileSync21(join39(root, ".harness", "project.json"), "utf8")));
+    const parsed = ProjectBinding.safeParse(JSON.parse(readFileSync22(join40(root, ".harness", "project.json"), "utf8")));
     if (!parsed.success) return null;
     binding = parsed.data;
   } catch {
@@ -58368,7 +58379,7 @@ var init_config = __esm({
 });
 
 // ../code-shim/src/local.ts
-import { readFileSync as readFileSync22, statSync as statSync4 } from "node:fs";
+import { readFileSync as readFileSync23, statSync as statSync4 } from "node:fs";
 import { isAbsolute as isAbsolute2, relative as relative5, resolve as resolve19, sep as sep2 } from "node:path";
 function resolveInside(root, path) {
   const absolute = resolve19(root, path);
@@ -58488,7 +58499,7 @@ var init_local = __esm({
         let shard;
         try {
           this.parses += 1;
-          shard = await this.parse(path, readFileSync22(absolute, "utf8"));
+          shard = await this.parse(path, readFileSync23(absolute, "utf8"));
         } catch {
           shard = null;
         }
@@ -58500,7 +58511,7 @@ var init_local = __esm({
         const absolute = resolveInside(this.root, path);
         if (absolute === null) return null;
         try {
-          return readFileSync22(absolute, "utf8");
+          return readFileSync23(absolute, "utf8");
         } catch {
           return null;
         }
@@ -58510,7 +58521,7 @@ var init_local = __esm({
         const absolute = resolveInside(this.root, path);
         if (absolute === null) return void 0;
         try {
-          const lines = readFileSync22(absolute, "utf8").split("\n");
+          const lines = readFileSync23(absolute, "utf8").split("\n");
           const start2 = range[0];
           if (start2 >= lines.length) return void 0;
           const end = Math.min(Math.max(range[2], start2), start2 + maxLines - 1, lines.length - 1);
@@ -58737,26 +58748,26 @@ var init_nav = __esm({
 
 // ../code-shim/src/edit.ts
 import { createHash as createHash8 } from "node:crypto";
-import { readFileSync as readFileSync23, writeFileSync as writeFileSync11 } from "node:fs";
-function lineStarts(text) {
+import { readFileSync as readFileSync24, writeFileSync as writeFileSync11 } from "node:fs";
+function lineStarts(text2) {
   const starts = [0];
-  for (let i2 = 0; i2 < text.length; i2 += 1) if (text[i2] === "\n") starts.push(i2 + 1);
+  for (let i2 = 0; i2 < text2.length; i2 += 1) if (text2[i2] === "\n") starts.push(i2 + 1);
   return starts;
 }
-function offsetOf(starts, text, line3, character) {
+function offsetOf(starts, text2, line3, character) {
   const start2 = starts[line3];
   if (start2 === void 0) return null;
-  const next = starts[line3 + 1] ?? text.length + 1;
+  const next = starts[line3 + 1] ?? text2.length + 1;
   return Math.min(start2 + character, next - 1);
 }
-function positionAt(text, offset) {
-  const starts = lineStarts(text.slice(0, offset));
+function positionAt(text2, offset) {
+  const starts = lineStarts(text2.slice(0, offset));
   const line3 = starts.length - 1;
   return [line3, offset - (starts[line3] ?? 0)];
 }
-function lineEnd(starts, text, line3) {
+function lineEnd(starts, text2, line3) {
   const next = starts[line3 + 1];
-  return next === void 0 ? text.length : next - 1;
+  return next === void 0 ? text2.length : next - 1;
 }
 async function locate(index, path, namePath) {
   if (resolveInside(index.root, path) === null) return { ok: false, reason: `path ${path} is outside the repository` };
@@ -58778,7 +58789,7 @@ async function editSymbol(index, args2) {
   if (!found.ok) return found;
   const absolute = resolveInside(index.root, args2.path);
   if (absolute === null) return { ok: false, reason: `path ${args2.path} is outside the repository` };
-  const original = readFileSync23(absolute, "utf8");
+  const original = readFileSync24(absolute, "utf8");
   const starts = lineStarts(original);
   const range = found.symbol.enclosingRange ?? found.symbol.range;
   const from = offsetOf(starts, original, range[0], range[1]);
@@ -58843,21 +58854,21 @@ async function renameSymbol(deps, args2) {
   for (const [path, ranges] of byFile) {
     const absolute = resolveInside(deps.index.root, path);
     if (absolute === null) return { ok: false, reason: `reference path ${path} is outside the repository` };
-    let text;
+    let text2;
     try {
-      text = readFileSync23(absolute, "utf8");
+      text2 = readFileSync24(absolute, "utf8");
     } catch {
       return { ok: false, reason: `cannot read ${path}` };
     }
-    const starts = lineStarts(text);
+    const starts = lineStarts(text2);
     for (const range of ranges) {
-      const from = offsetOf(starts, text, range[0], range[1]);
-      const to = offsetOf(starts, text, range[2], range[3]);
-      if (range[0] !== range[2] || from === null || to === null || text.slice(from, to) !== oldName) {
+      const from = offsetOf(starts, text2, range[0], range[1]);
+      const to = offsetOf(starts, text2, range[2], range[3]);
+      if (range[0] !== range[2] || from === null || to === null || text2.slice(from, to) !== oldName) {
         return { ok: false, reason: `${path}:${range[0] + 1}:${range[1] + 1} does not contain ${oldName}; the index is out of step with the file` };
       }
     }
-    plan3.push({ path, absolute, text, ranges });
+    plan3.push({ path, absolute, text: text2, ranges });
   }
   const filesChanged = [];
   let edits = 0;
@@ -59170,10 +59181,10 @@ function isMissing(error62) {
   return error62 instanceof Error && "code" in error62 && (error62.code === "ENOENT" || error62.code === "ENOTDIR");
 }
 function readJson(path) {
-  const text = readText(path);
-  if (text === null) return void 0;
+  const text2 = readText(path);
+  if (text2 === null) return void 0;
   try {
-    return JSON.parse(text);
+    return JSON.parse(text2);
   } catch {
     return void 0;
   }
@@ -59244,11 +59255,11 @@ function removeOwned(root) {
 
 // ../cli/src/binding.ts
 function readBindingFile(root) {
-  const text = readText(join2(root, BINDING_FILE));
-  if (text === null) return { kind: "missing" };
+  const text2 = readText(join2(root, BINDING_FILE));
+  if (text2 === null) return { kind: "missing" };
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch {
     return { kind: "invalid", detail: "not JSON" };
   }
@@ -59450,8 +59461,8 @@ var PATTERNS = [
   [/(["']?(?:access_?token|refresh_?token|id_?token|token|api_?key|secret|password|authorization|client_?secret)["']?\s*[:=]\s*)(["']?)[^\s"',;}&]{6,}\2/gi, "$1$2[redacted]$2"],
   [/(-----BEGIN [A-Z ]*PRIVATE KEY-----)[\s\S]*?(-----END [A-Z ]*PRIVATE KEY-----)/g, "$1[redacted]$2"]
 ];
-function redact(text) {
-  let out2 = text;
+function redact(text2) {
+  let out2 = text2;
   for (const secret of knownSecrets) out2 = out2.split(secret).join("[redacted]");
   for (const [pattern, replacement] of PATTERNS) out2 = out2.replace(pattern, replacement);
   return out2;
@@ -59700,10 +59711,10 @@ function parseKeyPath(source) {
   return parts2.length === 0 ? null : parts2;
 }
 var HEADER = /^\s*\[(?!\[)(.+?)\]\s*(?:#.*)?$/;
-function readTables(text) {
+function readTables(text2) {
   const tables = [];
   let current2 = null;
-  for (const line3 of text.split("\n")) {
+  for (const line3 of text2.split("\n")) {
     const match = HEADER.exec(line3);
     if (match !== null && match[1] !== void 0) {
       if (current2 !== null) tables.push({ path: current2.path, body: current2.lines.join("\n") });
@@ -59719,8 +59730,8 @@ function readTables(text) {
   if (current2 !== null) tables.push({ path: current2.path, body: current2.lines.join("\n") });
   return tables;
 }
-function findTable(text, path) {
-  return readTables(text).find((table2) => table2.path.length === path.length && table2.path.every((p2, i2) => p2 === path[i2])) ?? null;
+function findTable(text2, path) {
+  return readTables(text2).find((table2) => table2.path.length === path.length && table2.path.every((p2, i2) => p2 === path[i2])) ?? null;
 }
 function isTrue(body2, key) {
   return new RegExp(`^\\s*${key}\\s*=\\s*true\\s*(?:#.*)?$`, "m").test(body2);
@@ -59950,10 +59961,10 @@ async function startLoopback(preferredPort, state) {
 }
 async function postJson(deps, url2, body2, contentType) {
   const response = await deps.fetch(url2, { method: "POST", headers: { "content-type": contentType, accept: "application/json" }, body: body2 });
-  const text = await response.text();
-  if (!response.ok) throw new CliError(`${url2} answered ${response.status}: ${text.slice(0, 200)}`);
+  const text2 = await response.text();
+  if (!response.ok) throw new CliError(`${url2} answered ${response.status}: ${text2.slice(0, 200)}`);
   try {
-    return JSON.parse(text);
+    return JSON.parse(text2);
   } catch {
     throw new CliError(`${url2} did not answer with JSON`);
   }
@@ -60109,8 +60120,8 @@ function parseProvider(value) {
   if (PROVIDERS.includes(value)) return value;
   throw new UsageError(`--provider must be one of ${PROVIDERS.join(", ")}`, { hint: "overlane connect --provider overlane" });
 }
-function safeName(text) {
-  const cleaned = text.replace(/[^A-Za-z0-9._-]+/g, "-").replace(/^[-.]+|-+$/g, "");
+function safeName(text2) {
+  const cleaned = text2.replace(/[^A-Za-z0-9._-]+/g, "-").replace(/^[-.]+|-+$/g, "");
   return cleaned.slice(0, 100) === "" ? "project" : cleaned.slice(0, 100);
 }
 function projectLabel(project) {
@@ -60167,18 +60178,18 @@ async function isHarnessIgnored(deps, root) {
 }
 async function addExclude(deps, root) {
   const path = await excludePath(deps, root);
-  const text = readText(path) ?? "";
-  if (text.split("\n").includes(EXCLUDE_LINE)) return false;
-  const prefix = text.length === 0 || text.endsWith("\n") ? "" : "\n";
-  writeIfDifferent(path, `${text}${prefix}${EXCLUDE_LINE}
+  const text2 = readText(path) ?? "";
+  if (text2.split("\n").includes(EXCLUDE_LINE)) return false;
+  const prefix = text2.length === 0 || text2.endsWith("\n") ? "" : "\n";
+  writeIfDifferent(path, `${text2}${prefix}${EXCLUDE_LINE}
 `);
   return true;
 }
 async function removeExclude(deps, root) {
   const path = await excludePath(deps, root);
-  const text = readText(path);
-  if (text === null) return;
-  const lines = text.split("\n");
+  const text2 = readText(path);
+  if (text2 === null) return;
+  const lines = text2.split("\n");
   const index = lines.indexOf(EXCLUDE_LINE);
   if (index === -1) return;
   lines.splice(index, 1);
@@ -60268,9 +60279,9 @@ var ReleaseRefusal = class extends CliError {
   }
 };
 async function failure2(response) {
-  const text = await response.text();
+  const text2 = await response.text();
   try {
-    const parsed = ApiError.safeParse(JSON.parse(text));
+    const parsed = ApiError.safeParse(JSON.parse(text2));
     if (parsed.success) return { code: parsed.data.error.code, text: `${parsed.data.error.code}: ${parsed.data.error.message}` };
   } catch {
   }
@@ -60329,9 +60340,9 @@ function authHeaders(token) {
   return { authorization: `Bearer ${token}`, accept: "application/json" };
 }
 async function describeFailure(response) {
-  const text = await response.text();
+  const text2 = await response.text();
   try {
-    const parsed = ApiError.safeParse(JSON.parse(text));
+    const parsed = ApiError.safeParse(JSON.parse(text2));
     if (parsed.success) return { text: `${parsed.data.error.code}: ${parsed.data.error.message}`, code: parsed.data.error.code };
   } catch {
   }
@@ -61206,9 +61217,9 @@ var LocalTaskState = external_exports.object({
 }).strict();
 function readTaskState(root) {
   try {
-    const text = readText(join10(root, TASK_STATE_PATH));
-    if (text === null) return null;
-    const parsed = LocalTaskState.safeParse(JSON.parse(text));
+    const text2 = readText(join10(root, TASK_STATE_PATH));
+    if (text2 === null) return null;
+    const parsed = LocalTaskState.safeParse(JSON.parse(text2));
     return parsed.success ? parsed.data : null;
   } catch {
     return null;
@@ -61460,9 +61471,9 @@ init_zod();
 // ../cli/src/task/api.ts
 init_src();
 async function failure3(response) {
-  const text = await response.text();
+  const text2 = await response.text();
   try {
-    const json2 = JSON.parse(text);
+    const json2 = JSON.parse(text2);
     const parsed = ApiError.safeParse(json2);
     const developer = parsed.success ? null : DeveloperError.safeParse(json2);
     const error62 = parsed.success ? parsed.data.error : developer?.success === true ? developer.data.error : null;
@@ -61558,9 +61569,9 @@ var LocalRunState = external_exports.object({
 }).strict();
 function readRunState(root) {
   try {
-    const text = readText(join14(root, RUN_STATE_PATH));
-    if (text === null) return null;
-    const parsed = LocalRunState.safeParse(JSON.parse(text));
+    const text2 = readText(join14(root, RUN_STATE_PATH));
+    if (text2 === null) return null;
+    const parsed = LocalRunState.safeParse(JSON.parse(text2));
     return parsed.success ? parsed.data : null;
   } catch {
     return null;
@@ -61615,8 +61626,8 @@ function naturalCompare(a, b) {
   }
   return left.length - right.length || (a < b ? -1 : a > b ? 1 : 0);
 }
-function splitFrontMatter(text, where2) {
-  const normalized = text.replace(/\r\n/g, "\n");
+function splitFrontMatter(text2, where2) {
+  const normalized = text2.replace(/\r\n/g, "\n");
   const match = /^---\n([\s\S]*?)\n?---\n?([\s\S]*)$/.exec(normalized);
   if (!match) throw new KitError(`${where2}: missing YAML front matter`);
   let data;
@@ -61738,7 +61749,7 @@ async function writePlan(repoDir, plan3) {
   await mkdir(paths.tasks, { recursive: true });
   const keep = new Set(canonical.tasks.map((task) => `${task.id}.md`));
   for (const entry of await readdir(paths.tasks)) if (entry.endsWith(".md") && !keep.has(entry)) await rm(join15(paths.tasks, entry));
-  for (const [file2, text] of files) await writeFile(file2, text, "utf8");
+  for (const [file2, text2] of files) await writeFile(file2, text2, "utf8");
   return [...files.keys()].map((file2) => file2.slice(repoDir.length).replace(/^\/+/, ""));
 }
 async function readText2(file2) {
@@ -61748,16 +61759,16 @@ async function readText2(file2) {
     throw new KitError(`cannot read ${file2}`, [error62 instanceof Error ? error62.message : String(error62)]);
   }
 }
-function parseProject(text, where2) {
-  const { data, body: body2 } = splitFrontMatter(text, where2);
+function parseProject(text2, where2) {
+  const { data, body: body2 } = splitFrontMatter(text2, where2);
   const sections = sectionsOf(body2);
   return {
     schemaVersion: data["schemaVersion"],
     project: { name: data["name"], goal: sectionText(sections.get("Goal")), constraints: bulletsOf(sections.get("Constraints"), `${where2} Constraints`) }
   };
 }
-function parseMilestones(text, where2) {
-  const { body: body2 } = splitFrontMatter(text, where2);
+function parseMilestones(text2, where2) {
+  const { body: body2 } = splitFrontMatter(text2, where2);
   const milestones = [];
   let current2;
   let inAcceptance = false;
@@ -61785,8 +61796,8 @@ function parseMilestones(text, where2) {
   }
   return milestones;
 }
-function parseTask(text, where2) {
-  const { data, body: body2 } = splitFrontMatter(text, where2);
+function parseTask(text2, where2) {
+  const { data, body: body2 } = splitFrontMatter(text2, where2);
   const sections = sectionsOf(body2);
   return {
     id: data["id"],
@@ -61841,14 +61852,14 @@ async function readOptional(file2) {
   }
 }
 function classifyCommand(command) {
-  const text = command.trim();
-  if (/^(echo|printf|cat|export|git|curl|wget|mkdir|cp|mv|rm|set|source)\b/.test(text)) return void 0;
-  if (/^(pnpm|npm|yarn|bun)\s+(install|ci|i)\b/.test(text) || /^(pip3?|python3? -m pip)\s+install\s+(-r|-e|--requirement|--editable|\.)/.test(text) || /^(uv sync|poetry install|bundle install)\b/.test(text)) return "install";
-  if (/^(pip3?|python3? -m pip|sudo|apt|apt-get|brew|cargo install|go install|npm (i|install) -g)\b/.test(text)) return void 0;
-  if (/\b(typecheck|type-check|tsc|mypy|pyright)\b/.test(text)) return "typecheck";
-  if (/\b(lint|eslint|ruff|flake8|biome|clippy|golangci-lint)\b/.test(text)) return "lint";
-  if (/\b(test|tests|pytest|vitest|jest)\b/.test(text)) return "test";
-  if (/\bbuild\b/.test(text)) return "build";
+  const text2 = command.trim();
+  if (/^(echo|printf|cat|export|git|curl|wget|mkdir|cp|mv|rm|set|source)\b/.test(text2)) return void 0;
+  if (/^(pnpm|npm|yarn|bun)\s+(install|ci|i)\b/.test(text2) || /^(pip3?|python3? -m pip)\s+install\s+(-r|-e|--requirement|--editable|\.)/.test(text2) || /^(uv sync|poetry install|bundle install)\b/.test(text2)) return "install";
+  if (/^(pip3?|python3? -m pip|sudo|apt|apt-get|brew|cargo install|go install|npm (i|install) -g)\b/.test(text2)) return void 0;
+  if (/\b(typecheck|type-check|tsc|mypy|pyright)\b/.test(text2)) return "typecheck";
+  if (/\b(lint|eslint|ruff|flake8|biome|clippy|golangci-lint)\b/.test(text2)) return "lint";
+  if (/\b(test|tests|pytest|vitest|jest)\b/.test(text2)) return "test";
+  if (/\bbuild\b/.test(text2)) return "build";
   return void 0;
 }
 async function packageManagerOf(repoDir, pkg) {
@@ -62027,9 +62038,9 @@ async function readOptional2(file2) {
     return void 0;
   }
 }
-function parseTasksFile(text, where2) {
+function parseTasksFile(text2, where2) {
   let block2 = { milestones: {}, tasks: {} };
-  const match = BLOCK_PATTERN.exec(text);
+  const match = BLOCK_PATTERN.exec(text2);
   if (match) {
     try {
       block2 = BlockSchema.parse(JSON.parse(match[1] ?? ""));
@@ -62046,7 +62057,7 @@ function parseTasksFile(text, where2) {
     }
     return state.current;
   };
-  for (const line3 of text.replace(BLOCK_PATTERN, "").replace(/\r\n/g, "\n").split("\n")) {
+  for (const line3 of text2.replace(BLOCK_PATTERN, "").replace(/\r\n/g, "\n").split("\n")) {
     const heading = /^##\s+Phase\s+(\d+)\s*[:\u2013\u2014-]\s*(.*?)\s*$/i.exec(line3);
     if (heading) {
       let title2 = heading[2] ?? "";
@@ -62102,8 +62113,8 @@ function parseStories(specText) {
   }
   return stories;
 }
-function parseConstitution(text) {
-  const noComments = text.replace(/<!--[\s\S]*?-->/g, "");
+function parseConstitution(text2) {
+  const noComments = text2.replace(/<!--[\s\S]*?-->/g, "");
   const h1 = /^#\s+(.+?)\s*$/m.exec(noComments)?.[1];
   const name2 = h1 ? h1.replace(/\s+Constitution$/i, "").trim() : void 0;
   const sections = sectionsOf(noComments);
@@ -62127,8 +62138,8 @@ function parseConstitution(text) {
 }
 async function findConstitution(repoDir) {
   for (const rel of CONSTITUTION_PATHS) {
-    const text = await readOptional2(join17(repoDir, rel));
-    if (text !== void 0) return { file: rel, text };
+    const text2 = await readOptional2(join17(repoDir, rel));
+    if (text2 !== void 0) return { file: rel, text: text2 };
   }
   return void 0;
 }
@@ -62304,9 +62315,9 @@ function window2(value) {
 }
 function readUsage(deps) {
   try {
-    const text = readText(join18(deps.paths.configDir, "usage.json"));
-    if (text === null) return null;
-    const raw = JSON.parse(text);
+    const text2 = readText(join18(deps.paths.configDir, "usage.json"));
+    if (text2 === null) return null;
+    const raw = JSON.parse(text2);
     if (typeof raw.updatedAt !== "number") return null;
     return { updatedAt: raw.updatedAt, fiveHour: window2(raw.fiveHour), sevenDay: window2(raw.sevenDay) };
   } catch {
@@ -62840,7 +62851,7 @@ async function submitTask(deps, input2) {
     }
   };
 }
-var sha256 = (text) => `sha256:${createHash4("sha256").update(text).digest("hex")}`;
+var sha256 = (text2) => `sha256:${createHash4("sha256").update(text2).digest("hex")}`;
 async function recordEvidence(deps, input2) {
   if (input2.level !== "L1") throw new UsageError("evidence needs --level L1 (L2 evidence comes from CI on the pushed commit)");
   const command = input2.words.join(" ").trim();
@@ -64210,15 +64221,15 @@ async function planned(inv, method, path, body2, note) {
 }
 var usd = (cents) => `$${Math.trunc(cents / 100)}.${String(cents % 100).padStart(2, "0")}`;
 var micros = (value) => value % 1e4 === 0 ? usd(value / 1e4) : `$${(value / 1e6).toFixed(3)}`;
-function parseUsdToCents(text) {
-  const match = /^(\d{1,7})(?:\.(\d{1,2}))?$/.exec(text.trim());
+function parseUsdToCents(text2) {
+  const match = /^(\d{1,7})(?:\.(\d{1,2}))?$/.exec(text2.trim());
   if (match === null) throw new UsageError("--usd must be an amount like 50 or 12.50", { hint: "overlane billing caps set --scope team --usd 50" });
   return Number(match[1]) * 100 + Number((match[2] ?? "").padEnd(2, "0") || "0");
 }
-function positiveInt(text, flag) {
-  if (text === void 0) return void 0;
-  if (!/^\d+$/.test(text) || Number(text) < 1) throw new UsageError(`--${flag} must be a whole number of at least 1`);
-  return Number(text);
+function positiveInt(text2, flag) {
+  if (text2 === void 0) return void 0;
+  if (!/^\d+$/.test(text2) || Number(text2) < 1) throw new UsageError(`--${flag} must be a whole number of at least 1`);
+  return Number(text2);
 }
 var PLAN_FLAG = (plans, required2) => ({ name: "plan", type: "string", required: required2, enum: plans, value: "PLAN", description: "The plan" });
 var INTERVAL_FLAG = { name: "interval", type: "string", enum: ["month", "year"], value: "month|year", description: "Billing period; annual billing is cheaper per month" };
@@ -64483,10 +64494,10 @@ var approvalHeaders = (inv) => {
   const id2 = textFlag(inv, "approval");
   return id2 === void 0 ? void 0 : { [APPROVAL_HEADER]: id2 };
 };
-function positive(text, flag) {
-  if (text === void 0) return void 0;
-  if (!/^\d+$/.test(text) || Number(text) < 1) throw new UsageError(`--${flag} must be a whole number of at least 1`);
-  return Number(text);
+function positive(text2, flag) {
+  if (text2 === void 0) return void 0;
+  if (!/^\d+$/.test(text2) || Number(text2) < 1) throw new UsageError(`--${flag} must be a whole number of at least 1`);
+  return Number(text2);
 }
 function arg(inv, index, what, hint) {
   const value = inv.positionals[index];
@@ -64959,8 +64970,8 @@ var prOpenCommand = defineCommand({
     const title = textFlag(inv, "title");
     if (head === void 0 || title === void 0) throw new UsageError("--head and --title are required", { hint: 'overlane repo pr open app --head feature/x --title "Add x"' });
     const base5 = textFlag(inv, "base");
-    const text = textFlag(inv, "body");
-    const body2 = { requestId: requestId4(), title, head, ...base5 === void 0 ? {} : { base: base5 }, ...text === void 0 ? {} : { body: text }, draft: boolFlag(inv, "draft") };
+    const text2 = textFlag(inv, "body");
+    const body2 = { requestId: requestId4(), title, head, ...base5 === void 0 ? {} : { base: base5 }, ...text2 === void 0 ? {} : { body: text2 }, draft: boolFlag(inv, "draft") };
     if (inv.dryRun) return planned2(inv, "repo", "POST", (t2, p2) => gitPaths.pulls(t2, p2, repo), body2);
     const { call: call2, tenantId, projectId } = await connected2(inv, "repo");
     return { data: await call2(PullRequest, "POST", gitPaths.pulls(tenantId, projectId, repo), body2) };
@@ -65090,21 +65101,21 @@ var ciValidateCommand = defineCommand({
   text: (d) => d.ok ? [`${d.file} is valid: jobs ${d.jobs.join(", ")}`] : formatConfigIssues(d.file, d.issues),
   handler: async (inv) => {
     const file2 = textFlag(inv, "file") ?? PIPELINE_CONFIG_PATH;
-    let text;
+    let text2;
     try {
-      text = readFileSync9(resolve9(inv.deps.paths.cwd, file2), "utf8");
+      text2 = readFileSync9(resolve9(inv.deps.paths.cwd, file2), "utf8");
     } catch {
       throw new UsageError(`could not read ${file2}`, { hint: "overlane ci validate --file <path>" });
     }
-    const parsed = parsePipelineConfig(text);
+    const parsed = parsePipelineConfig(text2);
     const data = { ok: parsed.ok, file: file2, jobs: parsed.ok ? Object.keys(parsed.config.jobs) : [], issues: parsed.ok ? [] : parsed.issues };
     return parsed.ok ? { data } : { data, exit: EXIT.usage };
   }
 });
 async function gitFact(inv, args2) {
   const out2 = await inv.deps.exec("git", args2, { cwd: inv.deps.paths.cwd });
-  const text = out2.stdout.trim();
-  return out2.code === 0 && text.length > 0 ? text : void 0;
+  const text2 = out2.stdout.trim();
+  return out2.code === 0 && text2.length > 0 ? text2 : void 0;
 }
 var ciRunCommand = defineCommand({
   path: ["ci", "run"],
@@ -66154,14 +66165,14 @@ var shown = (deps, issue2) => isAgent(deps) ? forAgent(issue2) : issue2;
 var textOf = (value) => typeof value === "string" ? value : value.text;
 var IssueShown = external_exports.union([Issue, AgentIssueView]);
 var line = (issue2) => `#${issue2.number}  ${issue2.issueId}  ${issue2.status}  ${issue2.priority}  ${issue2.assignee === null ? "unassigned" : issue2.assignee.type}  ${textOf(issue2.title)}`;
-function parseAssignee(text) {
-  if (text === void 0) throw new UsageError("assign needs an assignee: human:<user-id>, agent:claude-code, agent:codex, bot:<bot-id> or none");
-  if (text === "none") return null;
-  const [kind, value] = [text.slice(0, text.indexOf(":")), text.slice(text.indexOf(":") + 1)];
+function parseAssignee(text2) {
+  if (text2 === void 0) throw new UsageError("assign needs an assignee: human:<user-id>, agent:claude-code, agent:codex, bot:<bot-id> or none");
+  if (text2 === "none") return null;
+  const [kind, value] = [text2.slice(0, text2.indexOf(":")), text2.slice(text2.indexOf(":") + 1)];
   if (kind === "human" && value.length > 0) return { type: "human", userId: value };
   if (kind === "agent" && (value === "claude-code" || value === "codex")) return { type: "agent", executor: value };
   if (kind === "bot" && /^bot_[A-Za-z0-9]{8,32}$/.test(value)) return { type: "bot", botId: value };
-  throw new UsageError(`"${text}" is not an assignee; use human:<user-id>, agent:claude-code, agent:codex, bot:<bot-id> or none`);
+  throw new UsageError(`"${text2}" is not an assignee; use human:<user-id>, agent:claude-code, agent:codex, bot:<bot-id> or none`);
 }
 function priorityFlag(inv) {
   const value = inv.values["priority"];
@@ -66384,10 +66395,10 @@ init_zod();
 var common7 = { needsAuth: true, needsNetwork: true };
 var Deleted = external_exports.object({ deleted: external_exports.literal(true) });
 var FIELDS = ["status", "priority", "assigneeType", "assignee", "labelId", "workProjectId", "cycleId", "estimate", "source", "title", "number", "createdAt", "updatedAt"];
-function parseCondition(text) {
-  const match = /^([A-Za-z]+)(!=|=|~)(.+)$/.exec(text);
+function parseCondition(text2) {
+  const match = /^([A-Za-z]+)(!=|=|~)(.+)$/.exec(text2);
   const field2 = match?.[1];
-  if (match === null || field2 === void 0 || !FIELDS.includes(field2)) throw new UsageError(`"${text}" is not a filter; write field=value, field!=value or field~value with a field from: ${FIELDS.join(", ")}`);
+  if (match === null || field2 === void 0 || !FIELDS.includes(field2)) throw new UsageError(`"${text2}" is not a filter; write field=value, field!=value or field~value with a field from: ${FIELDS.join(", ")}`);
   const value = /^\d+$/.test(match[3] ?? "") && (field2 === "number" || field2 === "estimate") ? Number(match[3]) : match[3];
   return { field: field2, op: match[2] === "=" ? "eq" : match[2] === "!=" ? "neq" : "contains", value };
 }
@@ -66594,29 +66605,29 @@ async function diffOf(inv) {
   const pull = inv.positionals[0];
   if (flag !== void 0 && pull !== void 0) throw new UsageError("give a pull request number or --diff, not both", { hint: "overlane review run --diff change.patch" });
   let from;
-  let text;
+  let text2;
   if (flag !== void 0) {
     if (flag === "-") {
       if (inv.deps.stdin === void 0) throw new UsageError("--diff - reads standard input, which is not available here", { hint: "overlane review run --diff change.patch" });
       from = "standard input";
-      text = await inv.deps.stdin.read();
+      text2 = await inv.deps.stdin.read();
     } else {
       from = flag;
-      text = readText(resolve11(inv.deps.paths.cwd, flag));
-      if (text === null) throw new UsageError(`could not read the diff file ${flag}`, { hint: "git diff > change.patch && overlane review run --diff change.patch" });
+      text2 = readText(resolve11(inv.deps.paths.cwd, flag));
+      if (text2 === null) throw new UsageError(`could not read the diff file ${flag}`, { hint: "git diff > change.patch && overlane review run --diff change.patch" });
     }
   } else if (pull === void 0) {
     if (inv.deps.stdin === void 0 || inv.deps.stdin.isTTY) {
       throw new UsageError("nothing to review: give a diff (--diff change.patch, or pipe one in) or a pull request number", { hint: "overlane review run --diff change.patch" });
     }
     from = "standard input";
-    text = await inv.deps.stdin.read();
+    text2 = await inv.deps.stdin.read();
   } else {
     return void 0;
   }
-  if (text.trim().length === 0) throw new UsageError(`the diff from ${from} is empty: there is nothing to review`, { hint: "git diff > change.patch && overlane review run --diff change.patch" });
-  if (text.length > MAX_PATCH_BYTES) throw new UsageError(`the diff is larger than ${MAX_PATCH_BYTES} characters; review it in parts`);
-  return { text, from };
+  if (text2.trim().length === 0) throw new UsageError(`the diff from ${from} is empty: there is nothing to review`, { hint: "git diff > change.patch && overlane review run --diff change.patch" });
+  if (text2.length > MAX_PATCH_BYTES) throw new UsageError(`the diff is larger than ${MAX_PATCH_BYTES} characters; review it in parts`);
+  return { text: text2, from };
 }
 function id(inv, what) {
   const value = inv.positionals[0];
@@ -66946,8 +66957,8 @@ function stem(word) {
   if (word.length > 3 && word.endsWith("s") && !word.endsWith("ss")) return word.slice(0, -1);
   return word;
 }
-function tokenize(text) {
-  const words = text.toLowerCase().split(/[^a-z0-9]+/).filter((word) => word.length > 0 && !STOP_WORDS.has(word));
+function tokenize(text2) {
+  const words = text2.toLowerCase().split(/[^a-z0-9]+/).filter((word) => word.length > 0 && !STOP_WORDS.has(word));
   const out2 = [];
   for (let index = 0; index < words.length; index += 1) {
     const word = words[index] ?? "";
@@ -69448,9 +69459,9 @@ async function secretOf(inv, required2) {
   }
   if (inv.values["secret-stdin"] === true) {
     if (inv.deps.stdin === void 0) throw new UsageError("there is no standard input to read the secret from", { hint: "use --secret-env NAME" });
-    const text = (await inv.deps.stdin.read()).trim();
-    if (text === "") throw new UsageError("standard input was empty", { hint: "pipe the credential in, or use --secret-env NAME" });
-    return text;
+    const text2 = (await inv.deps.stdin.read()).trim();
+    if (text2 === "") throw new UsageError("standard input was empty", { hint: "pipe the credential in, or use --secret-env NAME" });
+    return text2;
   }
   if (required2) throw new UsageError("give the credential with --secret-env NAME or --secret-stdin (it is never taken from an argument)", { hint: "overlane schema connector connect" });
   return void 0;
@@ -69534,9 +69545,9 @@ function inputOf(inv) {
   const inline = textFlag(inv, "input");
   const file2 = textFlag(inv, "input-file");
   if (inline !== void 0 && file2 !== void 0) throw new UsageError("give --input or --input-file, not both", { hint: "overlane schema connector run" });
-  const text = inline ?? (file2 === void 0 ? "{}" : readFileSync13(file2, "utf8"));
+  const text2 = inline ?? (file2 === void 0 ? "{}" : readFileSync13(file2, "utf8"));
   try {
-    const parsed = JSON.parse(text);
+    const parsed = JSON.parse(text2);
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("not an object");
     return parsed;
   } catch {
@@ -69807,10 +69818,10 @@ function scopesOf(inv) {
   return scopes;
 }
 function leaseFlag(inv) {
-  const text = textFlag(inv, "lease-seconds");
-  if (text === void 0) return void 0;
-  if (!/^\d+$/.test(text) || Number(text) < 60) throw new UsageError("--lease-seconds is a whole number of at least 60");
-  return Number(text);
+  const text2 = textFlag(inv, "lease-seconds");
+  if (text2 === void 0) return void 0;
+  if (!/^\d+$/.test(text2) || Number(text2) < 60) throw new UsageError("--lease-seconds is a whole number of at least 60");
+  return Number(text2);
 }
 var claimAcquireCommand = defineCommand({
   path: ["claim", "acquire"],
@@ -70248,9 +70259,9 @@ async function snapshotOf(inv, head, base5) {
   return { provider: project.provider === "github" ? "github" : "overlane", repository, headSha: sha.stdout.trim(), baseRef: base5, files };
 }
 function numberOf(inv) {
-  const text = textFlag(inv, "number");
-  if (text === void 0 || !/^[1-9]\d*$/.test(text)) throw new UsageError("give the pull request number with --number", { hint: "overlane pr route --number 7" });
-  return Number(text);
+  const text2 = textFlag(inv, "number");
+  if (text2 === void 0 || !/^[1-9]\d*$/.test(text2)) throw new UsageError("give the pull request number with --number", { hint: "overlane pr route --number 7" });
+  return Number(text2);
 }
 function checkFlag(inv, name2) {
   const value = textFlag(inv, name2);
@@ -70423,10 +70434,10 @@ async function planned8(inv, method, path, body2, note) {
   const project = await offlineProject(inv.deps, "egress");
   return planOutcome(inv.deps, dryRunPlan({ service: project.serviceUrl, requests: [{ method, path: path(project.binding.tenantId, project.binding.projectId), ...body2 === void 0 ? {} : { body: body2 }, ...note === void 0 ? {} : { note } }] }));
 }
-function ruleOf(text) {
-  const [host, ports] = text.split(":");
+function ruleOf(text2) {
+  const [host, ports] = text2.split(":");
   const parsedPorts = ports === void 0 ? [443] : ports.split(",").map((p2) => /^\d{1,5}$/.test(p2) ? Number(p2) : Number.NaN);
-  if (parsedPorts.some((p2) => !Number.isInteger(p2) || p2 < 1 || p2 > 65535)) throw new UsageError(`${text}: ports are whole numbers from 1 to 65535, for example registry.npmjs.org:443,8443`);
+  if (parsedPorts.some((p2) => !Number.isInteger(p2) || p2 < 1 || p2 > 65535)) throw new UsageError(`${text2}: ports are whole numbers from 1 to 65535, for example registry.npmjs.org:443,8443`);
   const checked2 = normaliseHost(host.replace(/^\*\./, "x."));
   if (!checked2.ok || checked2.kind !== "name") throw new UsageError(`${host} is not a host name; an address cannot be a rule`, { hint: "overlane egress policy set --allow registry.npmjs.org" });
   return { host: host.toLowerCase(), ports: parsedPorts };
@@ -70658,8 +70669,8 @@ async function secretValue2(inv, envFlag) {
     return value;
   }
   if (inv.deps.stdin !== void 0 && !inv.deps.stdin.isTTY) {
-    const text = (await inv.deps.stdin.read()).trim();
-    if (text !== "") return text;
+    const text2 = (await inv.deps.stdin.read()).trim();
+    if (text2 !== "") return text2;
   }
   throw new UsageError("give the key through --value-env NAME or on standard input; it is never an argument", { hint: "overlane enterprise keys add --alias team-anthropic --provider anthropic --value-env PROVIDER_KEY" });
 }
@@ -70972,9 +70983,9 @@ var enterpriseRetentionSetCommand = defineCommand({
   handler: async (inv) => {
     const raw = inv.values["rule"];
     const texts = (Array.isArray(raw) ? raw : raw === void 0 ? [] : [raw]).filter((v) => typeof v === "string");
-    const rules = texts.map((text) => {
-      const [dataClass, days] = text.split("=");
-      if (dataClass === void 0 || days === void 0 || !/^\d{1,4}$/.test(days)) throw new UsageError(`${text}: use CLASS=DAYS, for example memory=365`);
+    const rules = texts.map((text2) => {
+      const [dataClass, days] = text2.split("=");
+      if (dataClass === void 0 || days === void 0 || !/^\d{1,4}$/.test(days)) throw new UsageError(`${text2}: use CLASS=DAYS, for example memory=365`);
       return { dataClass, days: Number(days) };
     });
     if (inv.dryRun) return planned9(inv, "PUT", enterprisePaths.retention, { rules });
@@ -71104,11 +71115,11 @@ var enterpriseSsoGroupsSetCommand = defineCommand({
   handler: async (inv) => {
     const raw = inv.values["map"];
     const texts = (Array.isArray(raw) ? raw : raw === void 0 ? [] : [raw]).filter((v) => typeof v === "string");
-    const mappings = texts.map((text) => {
-      const at = text.lastIndexOf("=");
-      const groupName = at < 1 ? "" : text.slice(0, at);
-      const role = text.slice(at + 1);
-      if (groupName === "" || !["viewer", "member", "admin"].includes(role)) throw new UsageError(`${text}: use GROUP=ROLE with ROLE viewer, member or admin`, { hint: "overlane enterprise sso groups set --map Engineering=member" });
+    const mappings = texts.map((text2) => {
+      const at = text2.lastIndexOf("=");
+      const groupName = at < 1 ? "" : text2.slice(0, at);
+      const role = text2.slice(at + 1);
+      if (groupName === "" || !["viewer", "member", "admin"].includes(role)) throw new UsageError(`${text2}: use GROUP=ROLE with ROLE viewer, member or admin`, { hint: "overlane enterprise sso groups set --map Engineering=member" });
       return { groupName, role };
     });
     const body2 = { cap: textFlag(inv, "cap") ?? "admin", mappings };
@@ -71688,8 +71699,8 @@ function shortPath(cwd, path) {
   return rel === "" || rel.startsWith("..") ? path : rel;
 }
 var sha7 = (sha) => sha.slice(0, 7);
-function clip(text, max) {
-  const one = text.replace(/\s+/g, " ").trim();
+function clip(text2, max) {
+  const one = text2.replace(/\s+/g, " ").trim();
   return one.length <= max ? one : `${one.slice(0, max - 1)}\u2026`;
 }
 
@@ -71719,8 +71730,8 @@ function formatGitBrief(b) {
   const where2 = b.upstream === null ? "no upstream" : `ahead ${b.ahead} behind ${b.behind} of ${b.upstream}`;
   return `${b.branch} ${b.sha} ${where2}, ${b.dirty} dirty, last: ${b.subject === "" ? "(no commits)" : b.subject}`;
 }
-function openP0Lines(text) {
-  return text.split("\n").filter((line3) => /^\s*- \[ \]\s+P0\b/.test(line3)).map((line3) => clip(line3.trim(), 160));
+function openP0Lines(text2) {
+  return text2.split("\n").filter((line3) => /^\s*- \[ \]\s+P0\b/.test(line3)).map((line3) => clip(line3.trim(), 160));
 }
 async function brief(ctx, input2) {
   const mode = input2.mode ?? "all";
@@ -71826,14 +71837,14 @@ var LoadedIndex = class {
     return this.callerMap.get(i2) ?? [];
   }
 };
-function parseIndex(text) {
+function parseIndex(text2) {
   let raw;
   try {
-    const cut = text.lastIndexOf(',"words":[');
-    raw = JSON.parse(cut > 0 ? `${text.slice(0, cut)}}}` : text);
+    const cut = text2.lastIndexOf(',"words":[');
+    raw = JSON.parse(cut > 0 ? `${text2.slice(0, cut)}}}` : text2);
   } catch {
     try {
-      raw = JSON.parse(text);
+      raw = JSON.parse(text2);
     } catch {
       return null;
     }
@@ -71855,13 +71866,13 @@ function loadFreshIndex(ctx, root) {
 async function loadFreshIndexUncached(ctx, root) {
   const file2 = join27(root, INDEX_PATH);
   if (!existsSync10(file2)) return { state: "missing" };
-  let text;
+  let text2;
   try {
-    text = readFileSync16(file2, "utf8");
+    text2 = readFileSync16(file2, "utf8");
   } catch {
     return { state: "missing" };
   }
-  const index = parseIndex(text);
+  const index = parseIndex(text2);
   if (index === null) return { state: "unusable", reason: "the index file is not a version 1 code index" };
   const [diff, untracked, head, count] = await Promise.all([
     ctx.git(["diff", "--name-only", index.sha], root),
@@ -71909,11 +71920,11 @@ function braceEnd(lines, start2, limit = lines.length) {
   let quote4 = "";
   const stop3 = Math.min(limit, lines.length);
   for (let n = start2; n <= stop3; n += 1) {
-    const text = lines[n - 1] ?? "";
+    const text2 = lines[n - 1] ?? "";
     let lastCode = "";
-    for (let i2 = 0; i2 < text.length; i2 += 1) {
-      const c2 = text[i2];
-      const two = text.slice(i2, i2 + 2);
+    for (let i2 = 0; i2 < text2.length; i2 += 1) {
+      const c2 = text2[i2];
+      const two = text2.slice(i2, i2 + 2);
       if (block2) {
         if (two === "*/") {
           block2 = false;
@@ -71945,9 +71956,9 @@ function braceEnd(lines, start2, limit = lines.length) {
     }
     if (quote4 === '"' || quote4 === "'") quote4 = "";
     if (depth <= 0 && quote4 === "" && !block2) {
-      const t2 = text.trim();
+      const t2 = text2.trim();
       if (opened || depth < 0) return n;
-      if (t2 !== "" && !/[=,(&|?:+\-*/<>]$/.test(t2) && lastCode !== "" && !/^\s*(?:@|\/\/)/.test(text)) {
+      if (t2 !== "" && !/[=,(&|?:+\-*/<>]$/.test(t2) && lastCode !== "" && !/^\s*(?:@|\/\/)/.test(text2)) {
         const nextText = (lines[n] ?? "").trim();
         if (!/^[|&?:.]/.test(nextText) && !/^extends\b|^implements\b/.test(nextText)) return n;
       }
@@ -71959,10 +71970,10 @@ function indentEnd(lines, start2) {
   const base5 = (lines[start2 - 1] ?? "").match(/^\s*/)?.[0].length ?? 0;
   let end = start2;
   for (let n = start2 + 1; n <= lines.length; n += 1) {
-    const text = lines[n - 1] ?? "";
-    if (text.trim() === "") continue;
-    const indent = text.match(/^\s*/)?.[0].length ?? 0;
-    if (indent <= base5 && !/^\s*[)\]}]/.test(text)) break;
+    const text2 = lines[n - 1] ?? "";
+    if (text2.trim() === "") continue;
+    const indent = text2.match(/^\s*/)?.[0].length ?? 0;
+    if (indent <= base5 && !/^\s*[)\]}]/.test(text2)) break;
     end = n;
   }
   return end;
@@ -71982,7 +71993,7 @@ var SOURCE_FILE = /\.(?:[cm]?[jt]sx?|py|go|rs|java|rb|php|cs|kt|swift|astro|vue|
 var DEF_WORDS = "function\\*?|class|interface|type|enum|const|let|var|def|fn|func|struct|trait|namespace|abstract class";
 var KIND_RANK = { function: 0, class: 1, interface: 2, type: 3, constant: 4, method: 5, variable: 6, namespace: 7, property: 9 };
 var GREP_EXCLUDES = [":(exclude)pnpm-lock.yaml", ":(exclude)*.lock", ":(exclude)evals/results"];
-var escapeRegex2 = (text) => text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+var escapeRegex2 = (text2) => text2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 var isTestPath = (path) => /(?:^|\/)(?:tests?|__tests__|fixtures)\/|\.(?:test|spec)\.[a-z]+$/.test(path);
 function readLines(root, path) {
   try {
@@ -72027,10 +72038,10 @@ function scanForDefinitions(root, files, name2) {
     if (!SOURCE_FILE.test(path)) continue;
     const lines = readLines(root, path);
     if (lines === null) continue;
-    lines.forEach((text, i2) => {
-      const m = text.match(regex);
+    lines.forEach((text2, i2) => {
+      const m = text2.match(regex);
       if (m === null) return;
-      const word = (text.match(new RegExp(`(?:${DEF_WORDS})(?=\\s+${escapeRegex2(name2)})`))?.[0] ?? "const").replace("abstract ", "").replace("*", "");
+      const word = (text2.match(new RegExp(`(?:${DEF_WORDS})(?=\\s+${escapeRegex2(name2)})`))?.[0] ?? "const").replace("abstract ", "").replace("*", "");
       hits.push({ kind: KIND_OF_WORD[word] ?? "constant", qualified: name2, path, line: i2 + 1 });
     });
   }
@@ -72225,14 +72236,14 @@ async function outlineCore(ctx, input2) {
     notice = fresh.state === "ready" ? fresh.changed.has(path) ? `${path} changed since index ${sha7(fresh.index.sha)}; outline by pattern` : `${path} is not in the index; outline by pattern` : indexProblem(fresh);
     const lines = readLines(root, path) ?? [];
     const any2 = new RegExp(`^(?:export\\s+)?(?:default\\s+)?(?:declare\\s+)?(?:async\\s+)?(${DEF_WORDS})\\s+([A-Za-z_$][\\w$]*)`);
-    lines.forEach((text2, i2) => {
-      const m = text2.match(any2);
+    lines.forEach((text3, i2) => {
+      const m = text3.match(any2);
       if (m !== null) symbols2.push({ line: i2 + 1, kind: KIND_OF_WORD[m[1].replace("*", "")] ?? "constant", name: m[2] });
     });
   }
-  const text = symbols2.map((s) => `${s.line} ${s.kind} ${s.name}`);
+  const text2 = symbols2.map((s) => `${s.line} ${s.kind} ${s.name}`);
   if (symbols2.length === 0) return { data: { path, source, symbols: symbols2, ...notice === "" ? {} : { notice } }, lines: [...notice === "" ? [] : [notice], `none: no symbols in ${path}`], exit: 4 };
-  return { data: { path, source, symbols: symbols2, ...notice === "" ? {} : { notice } }, lines: [...notice === "" ? [] : [notice], ...text], exit: 0 };
+  return { data: { path, source, symbols: symbols2, ...notice === "" ? {} : { notice } }, lines: [...notice === "" ? [] : [notice], ...text2], exit: 0 };
 }
 async function refsCore(ctx, input2) {
   const root = findRoot(ctx.cwd);
@@ -72293,6 +72304,143 @@ async function refsCore(ctx, input2) {
   return { data, lines, exit: 0 };
 }
 
+// ../cli/src/token/cloud.ts
+import { execFileSync } from "node:child_process";
+import { readFileSync as readFileSync18 } from "node:fs";
+import { homedir } from "node:os";
+import { join as join29 } from "node:path";
+var CLOUD_TIMEOUT_MS = 4e3;
+var BINDING_FILE2 = join29(".harness", "project.json");
+var KEYCHAIN_SERVICE2 = "mvrx-harness";
+var CloudUnavailable = class extends Error {
+};
+var text = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
+function readCloudBinding(root) {
+  try {
+    const raw = JSON.parse(readFileSync18(join29(root, BINDING_FILE2), "utf8"));
+    const serviceUrl = text(raw["serviceUrl"]);
+    const tenantId = text(raw["tenantId"]);
+    const projectId = text(raw["projectId"]);
+    if (serviceUrl === void 0 || tenantId === void 0 || projectId === void 0 || !serviceUrl.startsWith("https://")) return null;
+    return { serviceUrl: serviceUrl.replace(/\/+$/, ""), tenantId, projectId };
+  } catch {
+    return null;
+  }
+}
+function configDir(env) {
+  const base5 = env["XDG_CONFIG_HOME"] ?? (process.platform === "win32" ? env["APPDATA"] : void 0) ?? join29(homedir(), ".config");
+  return join29(base5, "mvrx-harness");
+}
+function readKeychain(serviceUrl) {
+  const commands = {
+    darwin: ["security", ["find-generic-password", "-s", KEYCHAIN_SERVICE2, "-a", serviceUrl, "-w"]],
+    linux: ["secret-tool", ["lookup", "service", KEYCHAIN_SERVICE2, "username", serviceUrl]]
+  };
+  const command = commands[process.platform];
+  if (command === void 0) return null;
+  try {
+    const out2 = execFileSync(command[0], command[1], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 150 }).trim();
+    return out2.length > 0 ? out2 : null;
+  } catch {
+    return null;
+  }
+}
+function usable(raw, now) {
+  if (typeof raw !== "object" || raw === null) return null;
+  const stored = raw;
+  if (typeof stored.accessToken !== "string" || stored.accessToken.length === 0) return null;
+  if (typeof stored.expiresAt === "number" && stored.expiresAt <= now) return null;
+  return stored.accessToken;
+}
+function findCloudToken(ctx, serviceUrl) {
+  const fromEnv = ctx.env["HARNESS_TOKEN"];
+  if (fromEnv !== void 0 && fromEnv.length > 0) return fromEnv;
+  const stored = (ctx.keychain ?? readKeychain)(serviceUrl);
+  if (stored !== null) {
+    try {
+      const token = usable(JSON.parse(stored), ctx.now());
+      if (token !== null) return token;
+    } catch {
+    }
+  }
+  try {
+    const file2 = JSON.parse(readFileSync18(join29(configDir(ctx.env), "credentials.json"), "utf8"));
+    return usable(file2[serviceUrl], ctx.now());
+  } catch {
+    return null;
+  }
+}
+function readOverlaySession(root) {
+  try {
+    const id2 = readFileSync18(join29(root, ".harness", "overlay", "session"), "utf8").trim();
+    return /^[A-Za-z0-9._-]{1,64}$/.test(id2) ? id2 : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function cloudState(ctx, root) {
+  const offline = ctx.env["OVERLANE_OFFLINE"] ?? ctx.env["HARNESS_OFFLINE"];
+  if (offline !== void 0 && offline !== "" && offline !== "0" && offline !== "false") return { state: "offline" };
+  const binding = readCloudBinding(root);
+  if (binding === null) return { state: "unbound" };
+  const token = findCloudToken(ctx, binding.serviceUrl);
+  return token === null ? { state: "no-credentials", binding } : { state: "ready", binding, token };
+}
+var isObject2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var FRESHNESS = /* @__PURE__ */ new Set(["fresh", "partial", "stale", "unavailable"]);
+function hasMeta(value) {
+  const coverage = value["coverage"];
+  return isObject2(coverage) && typeof coverage["files"] === "number" && typeof value["freshness"] === "string" && FRESHNESS.has(value["freshness"]) && typeof value["incomplete"] === "boolean";
+}
+var CloudCodeSource = class {
+  constructor(options) {
+    this.options = options;
+  }
+  options;
+  async call(route, args2, shape2) {
+    const { ctx, binding, token, commit, session } = this.options;
+    const doFetch = ctx.fetch ?? globalThis.fetch;
+    const url2 = `${binding.serviceUrl}/v1/tenants/${encodeURIComponent(binding.tenantId)}/projects/${encodeURIComponent(binding.projectId)}/code/${route}`;
+    const body2 = { ...commit === void 0 ? {} : { commit }, ...session === void 0 ? {} : { session }, ...args2 };
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), CLOUD_TIMEOUT_MS);
+    try {
+      const response = await doFetch(url2, { method: "POST", headers: { accept: "application/json", "content-type": "application/json", authorization: `Bearer ${token}` }, body: JSON.stringify(body2), signal: controller.signal });
+      if (response.status === 401 || response.status === 403) throw new CloudUnavailable(`refused (HTTP ${response.status}); run overlane doctor`);
+      if (!response.ok) throw new CloudUnavailable(`HTTP ${response.status}`);
+      const parsed = JSON.parse(await response.text());
+      if (!isObject2(parsed) || !shape2(parsed)) throw new CloudUnavailable("unexpected answer");
+      return parsed;
+    } catch (error62) {
+      if (error62 instanceof CloudUnavailable) throw error62;
+      throw new CloudUnavailable(controller.signal.aborted ? `no answer in ${CLOUD_TIMEOUT_MS / 1e3}s` : "unreachable");
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  async find(name2, options) {
+    return await this.call("find", { name: name2, ...options.kind === void 0 ? {} : { kind: options.kind }, ...options.limit === void 0 ? {} : { limit: options.limit } }, (v) => hasMeta(v) && Array.isArray(v["matches"]));
+  }
+  async outline(path, options) {
+    return await this.call("outline", { path, ...options.all === true ? { all: true } : {} }, (v) => hasMeta(v) && Array.isArray(v["symbols"]));
+  }
+  async refs(name2, options) {
+    return await this.call("refs", { name: name2, ...options.limit === void 0 ? {} : { limit: options.limit } }, (v) => hasMeta(v) && Array.isArray(v["matches"]) && Array.isArray(v["callers"]));
+  }
+  async span(target2, options) {
+    return await this.call("span", { target: target2, ...options.kind === void 0 ? {} : { kind: options.kind } }, (v) => hasMeta(v) && typeof v["found"] === "boolean");
+  }
+  /** Source for a range, for a native project with no checkout here (the cloud reads it at the indexed commit). */
+  async show(path, start2, end, maxLines) {
+    return await this.call("show", { path, start: start2, end, maxLines }, (v) => hasMeta(v) && typeof v["text"] === "string");
+  }
+};
+function metaHeader(meta3) {
+  const sha = (value) => value === null ? "none" : value.slice(0, 7);
+  const asked = meta3.requestedCommit !== null && meta3.requestedCommit !== meta3.indexedCommit ? ` (asked ${sha(meta3.requestedCommit)})` : "";
+  return `@${sha(meta3.indexedCommit)} ${meta3.freshness}${asked}${meta3.overlay === void 0 ? "" : ` ${meta3.overlay}`} cov ${meta3.coverage.files}f/${meta3.coverage.symbols}s${meta3.incomplete ? " INCOMPLETE" : ""}`;
+}
+
 // ../cli/src/token/source.ts
 async function navMeta(ctx) {
   const root = findRoot(ctx.cwd);
@@ -72315,19 +72463,124 @@ async function withMeta(ctx, result) {
   const meta3 = await navMeta(ctx);
   return { ...result, data: { ...meta3, ...result.data } };
 }
-var codeFind = async (ctx, input2) => withMeta(ctx, await findCore(ctx, input2));
-var codeShow = async (ctx, input2) => withMeta(ctx, await showCore(ctx, input2));
-var codeOutline = async (ctx, input2) => withMeta(ctx, await outlineCore(ctx, input2));
-var codeRefs = async (ctx, input2) => withMeta(ctx, await refsCore(ctx, input2));
+var localFind = async (ctx, input2) => withMeta(ctx, await findCore(ctx, input2));
+var localShow = async (ctx, input2) => withMeta(ctx, await showCore(ctx, input2));
+var localOutline = async (ctx, input2) => withMeta(ctx, await outlineCore(ctx, input2));
+var localRefs = async (ctx, input2) => withMeta(ctx, await refsCore(ctx, input2));
+var PATH_LINE2 = /^(.+):(\d+)$/;
+var NO_ANSWER = /* @__PURE__ */ Symbol("no cloud answer");
+function fallbackNote(state, reason) {
+  if (state.state === "offline") return "cloud: offline; answered from the local index";
+  if (state.state === "no-credentials") return "cloud: no credentials; answered from the local index (overlane login)";
+  if (state.state === "ready") return `cloud: ${reason ?? "unreachable"}; answered from the local index`;
+  return void 0;
+}
+function withNote(result, note) {
+  if (note === void 0) return result;
+  const notice = result.data.notice === void 0 || result.data.notice === "" ? note : `${note}; ${result.data.notice}`;
+  return { ...result, data: { ...result.data, notice }, lines: [note, ...result.lines] };
+}
+async function cloudFirst(ctx, ask, local2) {
+  const root = findRoot(ctx.cwd);
+  const state = cloudState(ctx, root);
+  if (state.state !== "ready") return withNote(await local2(), fallbackNote(state));
+  const head = await ctx.git(["rev-parse", "HEAD"], root);
+  const commit = head.code === 0 && /^[0-9a-f]{40}$/.test(head.stdout.trim()) ? head.stdout.trim() : void 0;
+  const source = new CloudCodeSource({ ctx, binding: state.binding, token: state.token, commit, session: readOverlaySession(root) });
+  try {
+    const answer = await ask(source, root);
+    if (answer !== NO_ANSWER) return answer;
+    return withNote(await local2(), "cloud: index incomplete for this; answered from the local index");
+  } catch (error62) {
+    if (!(error62 instanceof CloudUnavailable)) throw error62;
+    return withNote(await local2(), fallbackNote(state, error62.message));
+  }
+}
+var noticeLines = (meta3) => meta3.notice === void 0 || meta3.notice === "" ? [] : [meta3.notice];
+var codeFind = (ctx, input2) => cloudFirst(
+  ctx,
+  async (source) => {
+    const limit = Math.max(1, input2.limit ?? DEFAULT_FIND_LIMIT);
+    const a = await source.find(input2.name, { kind: input2.kind, limit });
+    if (a.matches.length === 0 && a.incomplete) return NO_ANSWER;
+    const rows = a.matches.slice(0, limit).map((h) => `${h.kind} ${h.qualified} ${h.path}:${h.line}`);
+    const head = [metaHeader(a), ...noticeLines(a)];
+    if (rows.length === 0) return { data: a, lines: [...head, `none: no definition of ${input2.name}${input2.kind === void 0 ? "" : ` (kind ${input2.kind})`}`], exit: 4 };
+    return { data: a, lines: [...head, ...rows, ...a.more ? [`more: overlane code find ${input2.name} --limit ${limit * 3}`] : []], exit: 0 };
+  },
+  () => localFind(ctx, input2)
+);
+var codeOutline = (ctx, input2) => cloudFirst(
+  ctx,
+  async (source, root) => {
+    const path = resolveFile(ctx, root, input2.path) ?? input2.path;
+    const a = await source.outline(path, { all: input2.all });
+    if (a.symbols.length === 0 && a.incomplete) return NO_ANSWER;
+    const rows = a.symbols.map((s) => `${s.line} ${s.kind} ${s.name}`);
+    const head = [metaHeader(a), ...noticeLines(a)];
+    return { data: a, lines: rows.length === 0 ? [...head, `none: no symbols in ${a.path}`] : [...head, ...rows], exit: rows.length === 0 ? 4 : 0 };
+  },
+  () => localOutline(ctx, input2)
+);
+var codeRefs = (ctx, input2) => cloudFirst(
+  ctx,
+  async (source) => {
+    const limit = Math.max(1, input2.limit ?? DEFAULT_REFS_LIMIT);
+    const a = await source.refs(input2.name, { limit });
+    if (a.matches.length === 0 && a.callers.length === 0 && a.incomplete) return NO_ANSWER;
+    const rows = [...a.callers.slice(0, limit).map((h) => `caller ${h.qualified} ${h.path}:${h.line}`), ...a.matches.slice(0, limit).map((h) => `${h.path}:${h.line} ${h.text}`)];
+    const head = [metaHeader(a), ...noticeLines(a)];
+    if (rows.length === 0) return { data: a, lines: [...head, `none: no references to ${input2.name}`], exit: 4 };
+    return { data: a, lines: [...head, ...rows, ...a.more > 0 ? [`+${a.more} more: overlane code refs ${input2.name} --limit ${limit * 3}`] : []], exit: 0 };
+  },
+  () => localRefs(ctx, input2)
+);
+var hitOf2 = (h) => ({ kind: h.kind, qualified: h.qualified, path: h.path, line: h.line });
+var codeShow = (ctx, input2) => cloudFirst(
+  ctx,
+  async (source, root) => {
+    const at = PATH_LINE2.exec(input2.target);
+    const file2 = at === null ? null : resolveFile(ctx, root, at[1]);
+    const target2 = at !== null && file2 !== null ? `${file2}:${at[2]}` : input2.target;
+    const span = await source.span(target2, { kind: input2.kind });
+    const meta3 = { indexedCommit: span.indexedCommit, requestedCommit: span.requestedCommit, coverage: span.coverage, freshness: span.freshness, incomplete: span.incomplete, ...span.notice === void 0 ? {} : { notice: span.notice }, ...span.overlay === void 0 ? {} : { overlay: span.overlay } };
+    if (!span.found) {
+      if (span.incomplete) return NO_ANSWER;
+      return { data: { ...meta3, path: "", kind: "", qualified: input2.target, start: 0, end: 0, from: 0, to: 0, truncated: false, remaining: 0, text: [], also: [] }, lines: [metaHeader(span), ...noticeLines(span), `none: no definition of ${input2.target}`], exit: 4 };
+    }
+    const notes = [metaHeader(span), ...noticeLines(span)];
+    const cap = Math.max(1, input2.max ?? SHOW_CAP);
+    const also = span.also.map(hitOf2);
+    const lines = readLines(root, span.path);
+    const end = Math.max(span.start, span.end);
+    if (lines !== null) {
+      const shown2 = finishShow(span.path, span.kind, span.qualified, span.start, Math.min(end, lines.length), lines, Math.max(0, input2.context ?? 0), input2.from, cap, also, notes);
+      return { ...shown2, data: { ...meta3, ...shown2.data } };
+    }
+    let remote = null;
+    try {
+      remote = (await source.show(span.path, span.start, end, cap)).text.split("\n");
+      if (remote.at(-1) === "") remote.pop();
+    } catch (error62) {
+      if (!(error62 instanceof CloudUnavailable)) throw error62;
+    }
+    const body2 = remote === null ? [] : remote.map((t2, i2) => `${span.start + i2}	${t2}`);
+    const header = `${span.path}:${span.start}-${end} ${span.kind}${span.qualified === "" ? "" : ` ${span.qualified}`}`;
+    const hint = remote === null ? [`no checkout of ${span.path} here and the cloud holds no source for it; read lines ${span.start}-${end} from the repository`] : [];
+    const data = { ...meta3, path: span.path, kind: span.kind, qualified: span.qualified, start: span.start, end, from: span.start, to: remote === null ? span.start : span.start + remote.length - 1, truncated: false, remaining: 0, text: body2, also };
+    return { data, lines: [...notes, header, ...body2, ...hint], exit: 0 };
+  },
+  () => localShow(ctx, input2)
+);
 
 // ../cli/src/token/exec.ts
 import { spawn } from "node:child_process";
 import { createWriteStream, mkdirSync as mkdirSync10 } from "node:fs";
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 
 // ../cli/src/token/parsers.ts
 var ANSI = /\u001b\[[0-9;?]*[A-Za-z]/g;
-var stripAnsi = (text) => text.replace(ANSI, "");
+var stripAnsi = (text2) => text2.replace(ANSI, "");
 var MAX_FAILURES = 15;
 function groupByPackage(lines) {
   const known = /* @__PURE__ */ new Set();
@@ -72356,9 +72609,9 @@ function groupByPackage(lines) {
   return { groups, prefixed: true };
 }
 var packageOf = (key) => key.split(" ")[0] ?? key;
-function parseCountLine(text) {
-  const get = (word) => Number(text.match(new RegExp(`(\\d+) ${word}`))?.[1] ?? 0);
-  return { failed: get("failed"), passed: get("passed"), skipped: get("skipped"), todo: get("todo"), total: Number(text.match(/\((\d+)\)/)?.[1] ?? 0) };
+function parseCountLine(text2) {
+  const get = (word) => Number(text2.match(new RegExp(`(\\d+) ${word}`))?.[1] ?? 0);
+  return { failed: get("failed"), passed: get("passed"), skipped: get("skipped"), todo: get("todo"), total: Number(text2.match(/\((\d+)\)/)?.[1] ?? 0) };
 }
 function parseVitestBlock(lines, packageName2) {
   const clean2 = lines.map(stripAnsi);
@@ -72561,14 +72814,14 @@ function wranglerErrors(lines) {
   for (let i2 = 0; i2 < lines.length; i2 += 1) {
     const m = lines[i2].match(/^\s*✘\s*\[ERROR\]\s*(.*)$/);
     if (m === null) continue;
-    let text = m[1];
+    let text2 = m[1];
     for (let j = i2 + 1; j < Math.min(lines.length, i2 + 5); j += 1) {
       const next = lines[j].trim();
       if (next === "") continue;
       if (/^✘|^▲|^If you think/.test(next)) break;
-      if (text.length < 160) text += ` ${next}`;
+      if (text2.length < 160) text2 += ` ${next}`;
     }
-    errors.push(clip(text, 220));
+    errors.push(clip(text2, 220));
   }
   return errors.slice(0, 10);
 }
@@ -72686,10 +72939,10 @@ async function execCommand(ctx, input2) {
   }
   const command = commandLine(input2.tokens);
   const root = findRoot(ctx.cwd);
-  const dir = join29(root, ".harness", "logs");
+  const dir = join30(root, ".harness", "logs");
   mkdirSync10(dir, { recursive: true });
   const started = ctx.now();
-  const logFile = join29(dir, `${utcStamp(started)}-${slugOf(input2.name, command)}.log`);
+  const logFile = join30(dir, `${utcStamp(started)}-${slugOf(input2.name, command)}.log`);
   const stream = createWriteStream(logFile);
   const chunks = [];
   let captured = 0;
@@ -72728,8 +72981,8 @@ function signalNumber(signal) {
 }
 
 // ../cli/src/token/ledger.ts
-import { existsSync as existsSync12, readFileSync as readFileSync18 } from "node:fs";
-import { join as join30, resolve as resolve16 } from "node:path";
+import { existsSync as existsSync12, readFileSync as readFileSync19 } from "node:fs";
+import { join as join31, resolve as resolve16 } from "node:path";
 var LEDGER_PATH = ".harness/token-ledger.jsonl";
 var CATEGORY_RULES = [
   ["wrangler", /\bwrangler\b/],
@@ -72744,8 +72997,8 @@ var CATEGORY_RULES = [
 ];
 function categorise(tool, command) {
   if (tool === "Bash" || tool === "bash" || tool === "shell") {
-    const text = (command ?? "").trim();
-    for (const [name2, pattern] of CATEGORY_RULES) if (pattern.test(text)) return name2;
+    const text2 = (command ?? "").trim();
+    for (const [name2, pattern] of CATEGORY_RULES) if (pattern.test(text2)) return name2;
     return "other";
   }
   if (tool === "Grep" || tool === "Glob") return "grep/sed/cat";
@@ -72776,10 +73029,10 @@ function parseSince(value, now) {
   if (Number.isNaN(date5)) throw new CoreError(`--since must be like 7d, 12h, 30m or a date; got "${value}"`, { exit: 2, code: "usage", hint: "overlane tokens report --since 7d" });
   return date5;
 }
-function readLedger(text) {
+function readLedger(text2) {
   const calls = [];
   let skipped = 0;
-  for (const line3 of text.split("\n")) {
+  for (const line3 of text2.split("\n")) {
     if (line3.trim() === "") continue;
     try {
       const o = JSON.parse(line3);
@@ -72803,11 +73056,11 @@ function textOf2(content) {
   if (Array.isArray(content)) return content.map((part) => typeof part === "string" ? part : typeof part.text === "string" ? part.text : "").join("");
   return "";
 }
-function readTranscript(text) {
+function readTranscript(text2) {
   const pending = /* @__PURE__ */ new Map();
   const order = [];
   let skipped = 0;
-  for (const line3 of text.split("\n")) {
+  for (const line3 of text2.split("\n")) {
     if (line3.trim() === "") continue;
     let entry;
     try {
@@ -72864,14 +73117,14 @@ async function tokensReport(ctx, input2) {
     const file2 = resolve16(ctx.cwd, input2.transcript);
     if (!existsSync12(file2)) return { data: { source: input2.transcript, since: input2.since ?? null, calls: 0, tokens: 0, skipped: 0, rows: [] }, lines: [`none: no transcript at ${input2.transcript}`], exit: 4 };
     source = input2.transcript;
-    read = readTranscript(readFileSync18(file2, "utf8"));
+    read = readTranscript(readFileSync19(file2, "utf8"));
   } else {
-    const file2 = join30(root, LEDGER_PATH);
+    const file2 = join31(root, LEDGER_PATH);
     if (!existsSync12(file2)) {
       return { data: { source: LEDGER_PATH, since: input2.since ?? null, calls: 0, tokens: 0, skipped: 0, rows: [] }, lines: [`none: no ledger at ${LEDGER_PATH}; the tool-call hook writes it, or pass --transcript <path.jsonl>`], exit: 4 };
     }
     source = LEDGER_PATH;
-    read = readLedger(readFileSync18(file2, "utf8"));
+    read = readLedger(readFileSync19(file2, "utf8"));
   }
   const calls = cutoff === null ? read.calls : read.calls.filter((c2) => c2.ts >= cutoff);
   const report2 = buildReport(calls, top, source, input2.since ?? null, read.skipped);
@@ -73229,7 +73482,7 @@ async function runCli(argv, deps, options) {
   const globals = extractGlobals(argv);
   const mode = outputMode(globals, deps, registry2.find(globals.tokens)?.spec.textDefault === true);
   rememberSecret(deps.env["HARNESS_TOKEN"]);
-  const inner = mode === "json" ? { ...deps, stdout: globals.verbose ? (text) => deps.stderr(redact(text)) : () => void 0 } : deps;
+  const inner = mode === "json" ? { ...deps, stdout: globals.verbose ? (text2) => deps.stderr(redact(text2)) : () => void 0 } : deps;
   const [first, ...more] = globals.tokens;
   let current2;
   try {
@@ -73322,38 +73575,38 @@ init_assets();
 init_src2();
 
 // src/data-dir.ts
-import { homedir } from "node:os";
-import { join as join35 } from "node:path";
-function dataDir(env = process.env, home = homedir()) {
+import { homedir as homedir2 } from "node:os";
+import { join as join36 } from "node:path";
+function dataDir(env = process.env, home = homedir2()) {
   const override = env["MVRX_DATA_DIR"];
   if (override !== void 0 && override !== "") return override;
-  const base5 = env["XDG_DATA_HOME"] ?? (process.platform === "win32" ? env["LOCALAPPDATA"] : void 0) ?? (process.platform === "darwin" ? join35(home, "Library", "Application Support") : join35(home, ".local", "share"));
-  return join35(base5, "mvrx-harness");
+  const base5 = env["XDG_DATA_HOME"] ?? (process.platform === "win32" ? env["LOCALAPPDATA"] : void 0) ?? (process.platform === "darwin" ? join36(home, "Library", "Application Support") : join36(home, ".local", "share"));
+  return join36(base5, "mvrx-harness");
 }
-function marketplaceRoot(env = process.env, home = homedir()) {
-  return join35(dataDir(env, home), "marketplace");
+function marketplaceRoot(env = process.env, home = homedir2()) {
+  return join36(dataDir(env, home), "marketplace");
 }
 
 // src/plugin.ts
-import { readFileSync as readFileSync20 } from "node:fs";
-import { join as join37 } from "node:path";
+import { readFileSync as readFileSync21 } from "node:fs";
+import { join as join38 } from "node:path";
 import { parseArgs as parseArgs3 } from "node:util";
 
 // src/marketplace.ts
 init_src();
 import { createHash as createHash7 } from "node:crypto";
-import { cpSync, existsSync as existsSync13, mkdirSync as mkdirSync11, readdirSync as readdirSync3, readFileSync as readFileSync19, renameSync as renameSync7, rmSync as rmSync4, statSync as statSync3, writeFileSync as writeFileSync10 } from "node:fs";
-import { dirname as dirname12, join as join36, relative as relative4, sep } from "node:path";
+import { cpSync, existsSync as existsSync13, mkdirSync as mkdirSync11, readdirSync as readdirSync3, readFileSync as readFileSync20, renameSync as renameSync7, rmSync as rmSync4, statSync as statSync3, writeFileSync as writeFileSync10 } from "node:fs";
+import { dirname as dirname12, join as join37, relative as relative4, sep } from "node:path";
 var CLIENT_DIRS = ["claude", "codex"];
 var EMBEDDED_MANIFEST = "release-manifest.json";
-var INSTALLED_MANIFEST = join36(".release", "manifest.json");
+var INSTALLED_MANIFEST = join37(".release", "manifest.json");
 var MarketplaceError = class extends Error {
 };
 function loadEmbedded(packageRoot2) {
-  const dir = join36(packageRoot2, "plugins");
-  const path = join36(dir, EMBEDDED_MANIFEST);
+  const dir = join37(packageRoot2, "plugins");
+  const path = join37(dir, EMBEDDED_MANIFEST);
   if (!existsSync13(path)) throw new MarketplaceError(`this package has no embedded plugin release (${path} is missing)`);
-  const parsed = ReleaseManifest.safeParse(JSON.parse(readFileSync19(path, "utf8")));
+  const parsed = ReleaseManifest.safeParse(JSON.parse(readFileSync20(path, "utf8")));
   if (!parsed.success) throw new MarketplaceError(`the embedded release manifest is invalid: ${parsed.error.message}`);
   return { dir, manifest: parsed.data };
 }
@@ -73364,7 +73617,7 @@ function listFiles(root, dir = root) {
   if (!existsSync13(dir)) return [];
   const out2 = [];
   for (const entry of readdirSync3(dir, { withFileTypes: true })) {
-    const full = join36(dir, entry.name);
+    const full = join37(dir, entry.name);
     if (entry.isDirectory()) out2.push(...listFiles(root, full));
     else out2.push(relative4(root, full).split(sep).join("/"));
   }
@@ -73376,15 +73629,15 @@ async function verifyTree(treeRoot, manifest) {
   if (recomputed !== manifest.digest) problems.push(`manifest digest ${manifest.digest} does not match its file list (${recomputed})`);
   const listed = new Set(manifest.files.map((file2) => file2.path));
   for (const file2 of manifest.files) {
-    const path = join36(treeRoot, file2.path);
+    const path = join37(treeRoot, file2.path);
     if (!existsSync13(path)) {
       problems.push(`missing: ${file2.path}`);
       continue;
     }
-    if (sha2562(readFileSync19(path)) !== file2.digest) problems.push(`modified: ${file2.path}`);
+    if (sha2562(readFileSync20(path)) !== file2.digest) problems.push(`modified: ${file2.path}`);
   }
   for (const client of CLIENT_DIRS) {
-    for (const found of listFiles(join36(treeRoot, client))) {
+    for (const found of listFiles(join37(treeRoot, client))) {
       if (!listed.has(`${client}/${found}`)) problems.push(`unlisted: ${client}/${found}`);
     }
   }
@@ -73392,7 +73645,7 @@ async function verifyTree(treeRoot, manifest) {
 }
 function readInstalledManifest(target2) {
   try {
-    const parsed = ReleaseManifest.safeParse(JSON.parse(readFileSync19(join36(target2, INSTALLED_MANIFEST), "utf8")));
+    const parsed = ReleaseManifest.safeParse(JSON.parse(readFileSync20(join37(target2, INSTALLED_MANIFEST), "utf8")));
     return parsed.success ? parsed.data : null;
   } catch {
     return null;
@@ -73420,10 +73673,10 @@ async function syncMarketplace(embedded, target2) {
   mkdirSync11(staging, { recursive: true });
   try {
     for (const client of CLIENT_DIRS) {
-      if (existsSync13(join36(embedded.dir, client))) cpSync(join36(embedded.dir, client), join36(staging, client), { recursive: true });
+      if (existsSync13(join37(embedded.dir, client))) cpSync(join37(embedded.dir, client), join37(staging, client), { recursive: true });
     }
-    mkdirSync11(join36(staging, ".release"), { recursive: true });
-    writeFileSync10(join36(staging, INSTALLED_MANIFEST), `${JSON.stringify(embedded.manifest, null, 2)}
+    mkdirSync11(join37(staging, ".release"), { recursive: true });
+    writeFileSync10(join37(staging, INSTALLED_MANIFEST), `${JSON.stringify(embedded.manifest, null, 2)}
 `);
     const after = await verifyTree(staging, embedded.manifest);
     if (after.length > 0) throw new MarketplaceError(`the copied plugin files do not match the release manifest:
@@ -73455,8 +73708,8 @@ var PLUGIN_USAGE = `  overlane plugin install [--scope project|user] [--client c
 var PluginUsageError = class extends Error {
 };
 function readNames(treeRoot, client) {
-  const file2 = client === "claude" ? join37(treeRoot, "claude", ".claude-plugin", "marketplace.json") : join37(treeRoot, "codex", ".agents", "plugins", "marketplace.json");
-  const parsed = JSON.parse(readFileSync20(file2, "utf8"));
+  const file2 = client === "claude" ? join38(treeRoot, "claude", ".claude-plugin", "marketplace.json") : join38(treeRoot, "codex", ".agents", "plugins", "marketplace.json");
+  const parsed = JSON.parse(readFileSync21(file2, "utf8"));
   const record3 = parsed;
   const plugin = record3.plugins?.[0]?.name;
   if (typeof record3.name !== "string" || typeof plugin !== "string") throw new MarketplaceError(`${file2} names no marketplace or plugin`);
@@ -73469,8 +73722,8 @@ async function step(deps, program, args2, cwd) {
   deps.stdout(`  $ ${[program, ...args2].join(" ")}
 `);
   const result = await deps.exec(program, args2, { cwd });
-  const text = `${result.stdout}${result.stderr}`.trim();
-  if (text !== "") deps.stdout(`${text.split("\n").map((line3) => `    ${line3}`).join("\n")}
+  const text2 = `${result.stdout}${result.stderr}`.trim();
+  if (text2 !== "") deps.stdout(`${text2.split("\n").map((line3) => `    ${line3}`).join("\n")}
 `);
   return result.code === 0;
 }
@@ -73502,7 +73755,7 @@ ${PLUGIN_USAGE}`);
       const key = `${names.plugin}@${names.marketplace}`;
       if (!await available(deps, client)) {
         if (explicit !== void 0) {
-          deps.stderr(`overlane: \`${client}\` was not found on PATH; the marketplace is at ${join37(root, client)}
+          deps.stderr(`overlane: \`${client}\` was not found on PATH; the marketplace is at ${join38(root, client)}
 `);
           failed = true;
         } else {
@@ -73514,7 +73767,7 @@ ${PLUGIN_USAGE}`);
       ranAny = true;
       deps.stdout(`${client}:
 `);
-      const dir = join37(root, client);
+      const dir = join38(root, client);
       const steps = client === "claude" ? [
         ["claude", ["plugin", "marketplace", "add", dir, "--scope", scope]],
         ["claude", ["plugin", "marketplace", "update", names.marketplace]],
@@ -73549,10 +73802,10 @@ ${PLUGIN_USAGE}`);
 }
 
 // src/shim.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 function repositoryRoot(cwd) {
   try {
-    return execFileSync2("git", ["rev-parse", "--show-toplevel"], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    return execFileSync3("git", ["rev-parse", "--show-toplevel"], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
   } catch {
     return null;
   }
@@ -73681,8 +73934,8 @@ var packageCommands = [indexBuildCommand, indexUploadCommand, shimCommand, plugi
 
 // src/deps.ts
 import { execFile as execFile5, spawn as spawn2 } from "node:child_process";
-import { homedir as homedir3 } from "node:os";
-import { join as join40 } from "node:path";
+import { homedir as homedir4 } from "node:os";
+import { join as join41 } from "node:path";
 import { createInterface } from "node:readline/promises";
 function exec(command, args2, options) {
   return new Promise((resolveResult) => {
@@ -73727,19 +73980,19 @@ async function confirm(question) {
     rl.close();
   }
 }
-function configDir2(env) {
-  const base5 = env["XDG_CONFIG_HOME"] ?? (process.platform === "win32" ? env["APPDATA"] : void 0) ?? join40(homedir3(), ".config");
-  return join40(base5, "mvrx-harness");
+function configDir3(env) {
+  const base5 = env["XDG_CONFIG_HOME"] ?? (process.platform === "win32" ? env["APPDATA"] : void 0) ?? join41(homedir4(), ".config");
+  return join41(base5, "mvrx-harness");
 }
 function createDeps2(env = process.env) {
   return {
     exec,
     fetch: (input2, init2) => globalThis.fetch(input2, init2),
     keychain: noKeychain,
-    paths: { cwd: process.cwd(), home: homedir3(), configDir: configDir2(env), defaultMarketplaceRoot: marketplaceRoot(env) },
+    paths: { cwd: process.cwd(), home: homedir4(), configDir: configDir3(env), defaultMarketplaceRoot: marketplaceRoot(env) },
     env,
-    stdout: (text) => void process.stdout.write(text),
-    stderr: (text) => void process.stderr.write(text),
+    stdout: (text2) => void process.stdout.write(text2),
+    stderr: (text2) => void process.stderr.write(text2),
     isTTY: process.stdin.isTTY === true && process.stdout.isTTY === true,
     stdoutIsTTY: process.stdout.isTTY === true,
     confirm,