rnxsim 0.1.431 → 0.1.433

package/dist-lib/skills.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.431 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.433 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;
@@ -21683,6 +21683,197 @@ var init_metro_production_bundle = __esm({
   }
 });
 
+// src/auth/shared-session.ts
+function sharedDesktopAuthAccounts(user) {
+  return [
+    ...user?.personalAccountId ? [{ id: user.personalAccountId, name: "Personal" }] : [],
+    ...(user?.teams ?? []).map((team) => ({ id: team.id, name: team.name }))
+  ];
+}
+function getBaseDir() {
+  const explicit = process.env[SESSION_FILE_ENV];
+  if (explicit?.trim()) {
+    return (0, import_node_path14.dirname)((0, import_node_path14.resolve)(explicit));
+  }
+  return electronUserDataDir();
+}
+function getSharedDesktopAuthFilePath() {
+  const explicit = process.env[SESSION_FILE_ENV];
+  if (explicit?.trim()) return (0, import_node_path14.resolve)(explicit);
+  return (0, import_node_path14.join)(getBaseDir(), "desktop-auth.json");
+}
+function normalizeUser(input) {
+  if (!input || typeof input !== "object") return null;
+  const value = input;
+  if (typeof value.id !== "string" || !value.id.trim()) return null;
+  return {
+    id: value.id.trim(),
+    name: typeof value.name === "string" ? value.name : void 0,
+    email: typeof value.email === "string" ? value.email : void 0,
+    image: typeof value.image === "string" ? value.image : void 0,
+    githubUsername: typeof value.githubUsername === "string" ? value.githubUsername : void 0,
+    personalAccountId: typeof value.personalAccountId === "string" && value.personalAccountId.trim() ? value.personalAccountId.trim() : void 0,
+    isAdmin: value.isAdmin === true,
+    teams: Array.isArray(value.teams) ? value.teams.map((team) => {
+      if (!team || typeof team !== "object") return null;
+      const t = team;
+      if (typeof t.id !== "string" || typeof t.name !== "string") return null;
+      return {
+        id: t.id,
+        name: t.name,
+        role: t.role === "owner" ? "owner" : "member",
+        githubOrg: typeof t.githubOrg === "string" ? t.githubOrg : null
+      };
+    }).filter((team) => !!team) : void 0
+  };
+}
+function normalizeSession(input) {
+  if (!input || typeof input !== "object") return null;
+  const value = input;
+  if (value.version !== SESSION_VERSION) return null;
+  if (typeof value.token !== "string" || !value.token.trim()) return null;
+  const origin = typeof value.origin === "string" && value.origin.trim() ? value.origin.trim() : DEFAULT_ORIGIN;
+  const source = value.source === "cli" || value.source === "electron" || value.source === "browser" || value.source === "unknown" ? value.source : "unknown";
+  const updatedAt = typeof value.updatedAt === "string" && value.updatedAt ? value.updatedAt : (/* @__PURE__ */ new Date()).toISOString();
+  const validatedAt = typeof value.validatedAt === "string" && value.validatedAt ? value.validatedAt : void 0;
+  const accountId = typeof value.accountId === "string" && value.accountId.trim() ? value.accountId.trim() : void 0;
+  return {
+    version: SESSION_VERSION,
+    token: value.token.trim(),
+    user: normalizeUser(value.user),
+    origin,
+    source,
+    updatedAt,
+    validatedAt,
+    accountId
+  };
+}
+function readSharedDesktopAuthSession() {
+  const filepath = getSharedDesktopAuthFilePath();
+  if (!(0, import_node_fs13.existsSync)(filepath)) return null;
+  try {
+    const parsed = JSON.parse((0, import_node_fs13.readFileSync)(filepath, "utf8"));
+    const normalized = normalizeSession(parsed);
+    if (!normalized) {
+      (0, import_node_fs13.rmSync)(filepath, { force: true });
+      return null;
+    }
+    return normalized;
+  } catch {
+    (0, import_node_fs13.rmSync)(filepath, { force: true });
+    return null;
+  }
+}
+var import_node_fs13, import_node_path14, SESSION_VERSION, SESSION_FILE_ENV, DEFAULT_ORIGIN;
+var init_shared_session = __esm({
+  "src/auth/shared-session.ts"() {
+    "use strict";
+    import_node_fs13 = require("node:fs");
+    import_node_path14 = require("node:path");
+    init_home_paths();
+    SESSION_VERSION = 1;
+    SESSION_FILE_ENV = "SOOTSIM_SHARED_AUTH_FILE";
+    DEFAULT_ORIGIN = "https://contrast.dev";
+  }
+});
+
+// cli/run-rnx.ts
+function rethrowIfExit(error) {
+  if (error instanceof RnxExit) throw error;
+}
+function rnxExit(code) {
+  throw new RnxExit(code);
+}
+var import_node_async_hooks, RnxExit, sinks;
+var init_run_rnx = __esm({
+  "cli/run-rnx.ts"() {
+    "use strict";
+    import_node_async_hooks = require("node:async_hooks");
+    RnxExit = class extends Error {
+      code;
+      constructor(code) {
+        super(`rnx exited with code ${code}`);
+        this.name = "RnxExit";
+        this.code = code;
+      }
+    };
+    sinks = new import_node_async_hooks.AsyncLocalStorage();
+  }
+});
+
+// cli/auth.ts
+function looksLikeGitHubToken(token) {
+  return Boolean(
+    token && token.length >= 20 && GITHUB_TOKEN_PREFIXES.some((prefix) => token.startsWith(prefix))
+  );
+}
+function resolveGitHubActionsAuth() {
+  const contrastRunnerToken = process.env.CONTRAST_INSTALLATION_TOKEN?.trim();
+  const githubActionsToken = process.env.GITHUB_TOKEN?.trim();
+  const token = contrastRunnerToken || githubActionsToken;
+  if (!looksLikeGitHubToken(token)) return null;
+  const repoSlug = (process.env.CONTRAST_REPO || process.env.GITHUB_REPOSITORY || "").trim();
+  if (!repoSlug) return null;
+  const [owner, repo] = repoSlug.includes("/") ? repoSlug.split("/", 2) : [null, null];
+  const repositoryId = (process.env.CONTRAST_REPO_ID || process.env.GITHUB_REPOSITORY_ID || "").trim();
+  const installationId = (process.env.CONTRAST_INSTALLATION_ID || process.env.GITHUB_APP_INSTALLATION_ID || "").trim();
+  return {
+    kind: "github",
+    token,
+    repoId: repoSlug,
+    repositoryId: repositoryId || null,
+    owner: owner || null,
+    repo: repo || null,
+    installationId: installationId || null,
+    source: contrastRunnerToken ? "contrast-runner" : "github-actions"
+  };
+}
+function isCliApiKeySecret(secret) {
+  return secret.startsWith("sk_rnx_");
+}
+function readApiKeyFromEnv() {
+  const envName = "RNX_API_KEY";
+  const secret = process.env[envName]?.trim();
+  return secret && isCliApiKeySecret(secret) ? { secret, envName } : null;
+}
+function resolveCliAuth() {
+  const envKey = readApiKeyFromEnv();
+  if (envKey) {
+    return {
+      kind: "api-key",
+      secret: envKey.secret,
+      source: "env",
+      envName: envKey.envName
+    };
+  }
+  const githubAuth = resolveGitHubActionsAuth();
+  if (githubAuth) return githubAuth;
+  const session = readSharedDesktopAuthSession();
+  if (session?.token) {
+    const accounts = sharedDesktopAuthAccounts(session.user);
+    return {
+      kind: "session",
+      token: session.token,
+      origin: session.origin,
+      accountId: session.accountId ?? (accounts.length === 1 ? accounts[0]?.id ?? null : null)
+    };
+  }
+  return null;
+}
+function authHeaderValue(auth) {
+  return auth.kind === "api-key" ? `Bearer ${auth.secret}` : `Bearer ${auth.token}`;
+}
+var GITHUB_TOKEN_PREFIXES, CHOOSE_ACCOUNT_HINT;
+var init_auth = __esm({
+  "cli/auth.ts"() {
+    "use strict";
+    init_shared_session();
+    init_run_rnx();
+    GITHUB_TOKEN_PREFIXES = ["ghs_", "ghp_", "gho_", "ghu_", "github_pat_"];
+    CHOOSE_ACCOUNT_HINT = "this sign-in belongs to several accounts; run `rnx login --account <name>` to choose the one to bill";
+  }
+});
+
 // cli/cloud-session.ts
 function isRecord3(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
@@ -21692,13 +21883,13 @@ function normalizeCloudOrigin(source) {
   try {
     parsed = new URL(source);
   } catch {
-    throw new Error(`invalid RNX Cloud origin: ${source}`);
+    throw new Error(`invalid remote simulator origin: ${source}`);
   }
   if (parsed.protocol !== "https:" && parsed.protocol !== "http:" || parsed.username || parsed.password || parsed.pathname !== "/" || parsed.search || parsed.hash) {
-    throw new Error(`RNX Cloud origin must be an HTTP(S) origin: ${source}`);
+    throw new Error(`remote simulator origin must be an HTTP(S) origin: ${source}`);
   }
   if (parsed.protocol === "http:" && !isLoopbackHost(parsed.hostname)) {
-    throw new Error(`RNX Cloud origin requires HTTPS outside loopback: ${source}`);
+    throw new Error(`remote simulator origin requires HTTPS outside loopback: ${source}`);
   }
   return parsed.origin;
 }
@@ -21768,23 +21959,37 @@ var init_cloud_session = __esm({
   }
 });
 
+// cli/commands/detect.ts
+var init_detect = __esm({
+  "cli/commands/detect.ts"() {
+    "use strict";
+  }
+});
+
 // cli/cloud-client.ts
 function isRecord4(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-function responseError(status, text) {
-  if (text) {
-    try {
-      const parsed = JSON.parse(text);
-      const error = isRecord4(parsed) ? parsed.error : null;
-      if (isRecord4(error) && typeof error.message === "string") {
-        return new Error(`RNX Cloud request failed (${status}): ${error.message}`);
-      }
-    } catch {
-    }
+function failureSentence(text) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return null;
+  }
+  if (!isRecord4(parsed)) return null;
+  if (isRecord4(parsed.error) && typeof parsed.error.message === "string") {
+    return parsed.error.message;
   }
+  if (typeof parsed.message === "string") return parsed.message;
+  if (typeof parsed.error === "string") return parsed.error;
+  return null;
+}
+function responseError(status, text) {
+  const parsed = text ? failureSentence(text) : null;
+  const sentence = parsed && ACCOUNT_CHOICE_REFUSALS.has(parsed) ? CHOOSE_ACCOUNT_HINT : parsed;
   return new Error(
-    `RNX Cloud request failed (${status})${text.trim() ? `: ${text.trim()}` : ""}`
+    `remote simulator request failed (${status})${sentence ? `: ${sentence}` : text.trim() ? `: ${text.trim()}` : ""}`
   );
 }
 function resolveCloudSessionForParsed(parsed) {
@@ -21792,7 +21997,7 @@ function resolveCloudSessionForParsed(parsed) {
   if (!session) return null;
   if (parsed.simIdSource === "flag" && parsed.simId !== session.simId) {
     throw new Error(
-      `this shell is connected to RNX Cloud simulator ${session.simId}; ${parsed.simId ? `--sim ${parsed.simId}` : "the requested simulator"} is not available in this shell`
+      `this shell is connected to remote simulator ${session.simId}; ${parsed.simId ? `--sim ${parsed.simId}` : "the requested simulator"} is not available in this shell`
     );
   }
   return session;
@@ -21803,13 +22008,15 @@ function cloudCommand(command) {
     if (key !== "id" && key !== "simId") clean[key] = value;
   }
   if (isRnxCloudCommandType(command.type)) return clean;
-  throw new Error(`RNX Cloud does not support bridge command type ${command.type}`);
+  throw new Error(
+    `a remote simulator does not support bridge command type ${command.type}`
+  );
 }
 function createCloudBridgeForParsed(parsed) {
   const session = resolveCloudSessionForParsed(parsed);
   return session ? new CloudBridge(session) : null;
 }
-var import_node_crypto5, DEFAULT_RNX_CLOUD_ORIGIN, CloudBridge;
+var import_node_crypto5, DEFAULT_RNX_CLOUD_ORIGIN, MAX_RNX_CLOUD_BUNDLE_BYTES, WARN_ARTIFACT_BYTES, ACCOUNT_CHOICE_REFUSALS, CloudBridge;
 var init_cloud_client = __esm({
   "cli/cloud-client.ts"() {
     "use strict";
@@ -21819,8 +22026,16 @@ var init_cloud_client = __esm({
     init_cloud_contract();
     init_metro_production_bundle();
     init_public_brand();
+    init_auth();
     init_cloud_session();
+    init_detect();
     DEFAULT_RNX_CLOUD_ORIGIN = rnxPublicBrand.origin;
+    MAX_RNX_CLOUD_BUNDLE_BYTES = RNX_CLOUD_MAX_ARTIFACT_BYTES;
+    WARN_ARTIFACT_BYTES = Math.floor(MAX_RNX_CLOUD_BUNDLE_BYTES * 0.8);
+    ACCOUNT_CHOICE_REFUSALS = /* @__PURE__ */ new Set([
+      "accountId is required",
+      "you do not have access to this account"
+    ]);
     CloudBridge = class {
       constructor(session) {
         this.session = session;
@@ -21848,7 +22063,7 @@ var init_cloud_client = __esm({
           );
         } catch (error) {
           throw new Error(
-            `could not reach RNX Cloud at ${this.session.apiOrigin}: ${error instanceof Error ? error.message : String(error)}`
+            `could not reach the remote simulator at ${this.session.apiOrigin}: ${error instanceof Error ? error.message : String(error)}`
           );
         }
         const text = await response.text();
@@ -21857,30 +22072,34 @@ var init_cloud_client = __esm({
         try {
           parsed = JSON.parse(text);
         } catch {
-          throw new Error("RNX Cloud command returned unreadable JSON");
+          throw new Error("remote simulator command returned unreadable JSON");
         }
         if (!isRecord4(parsed) || parsed.id !== body.id) {
-          throw new Error("RNX Cloud command returned an invalid command receipt");
+          throw new Error("remote simulator command returned an invalid command receipt");
         }
         if (typeof parsed.error === "string" && parsed.error) throw new Error(parsed.error);
         if (!Object.hasOwn(parsed, "result")) {
-          throw new Error("RNX Cloud command receipt has no result");
+          throw new Error("remote simulator command receipt has no result");
         }
         return parsed.result;
       }
       listSims() {
-        return Promise.reject(new Error("RNX Cloud does not expose a local simulator list"));
-      }
-      focusSim() {
         return Promise.reject(
-          new Error("RNX Cloud simulators have no browser window to focus")
+          new Error("a remote simulator does not expose a local simulator list")
         );
       }
+      focusSim() {
+        return Promise.reject(new Error("remote simulators have no browser window to focus"));
+      }
       closeSim() {
-        return Promise.reject(new Error("RNX Cloud close uses the simulator DELETE route"));
+        return Promise.reject(
+          new Error("remote simulator close uses the simulator DELETE route")
+        );
       }
       claim() {
-        return Promise.reject(new Error("RNX Cloud claim uses the simulator claim route"));
+        return Promise.reject(
+          new Error("remote simulator claim uses the simulator claim route")
+        );
       }
       close() {
       }
@@ -22049,31 +22268,31 @@ var init_parent_pid = __esm({
 
 // cli/secure-file.ts
 function writeSecureJsonAtomic(filepath, value) {
-  (0, import_node_fs13.mkdirSync)((0, import_node_path14.dirname)(filepath), { recursive: true });
+  (0, import_node_fs14.mkdirSync)((0, import_node_path15.dirname)(filepath), { recursive: true });
   const temporary = `${filepath}.tmp-${process.pid}-${(0, import_node_crypto6.randomUUID)()}`;
   let descriptor = null;
   try {
-    descriptor = (0, import_node_fs13.openSync)(temporary, "wx", 384);
-    (0, import_node_fs13.fchmodSync)(descriptor, 384);
-    (0, import_node_fs13.writeFileSync)(descriptor, `${JSON.stringify(value, null, 2)}
+    descriptor = (0, import_node_fs14.openSync)(temporary, "wx", 384);
+    (0, import_node_fs14.fchmodSync)(descriptor, 384);
+    (0, import_node_fs14.writeFileSync)(descriptor, `${JSON.stringify(value, null, 2)}
 `);
-    (0, import_node_fs13.fsyncSync)(descriptor);
-    (0, import_node_fs13.closeSync)(descriptor);
+    (0, import_node_fs14.fsyncSync)(descriptor);
+    (0, import_node_fs14.closeSync)(descriptor);
     descriptor = null;
-    (0, import_node_fs13.renameSync)(temporary, filepath);
+    (0, import_node_fs14.renameSync)(temporary, filepath);
   } catch (error) {
-    if (descriptor !== null) (0, import_node_fs13.closeSync)(descriptor);
-    (0, import_node_fs13.rmSync)(temporary, { force: true });
+    if (descriptor !== null) (0, import_node_fs14.closeSync)(descriptor);
+    (0, import_node_fs14.rmSync)(temporary, { force: true });
     throw error;
   }
 }
-var import_node_crypto6, import_node_fs13, import_node_path14;
+var import_node_crypto6, import_node_fs14, import_node_path15;
 var init_secure_file = __esm({
   "cli/secure-file.ts"() {
     "use strict";
     import_node_crypto6 = require("node:crypto");
-    import_node_fs13 = require("node:fs");
-    import_node_path14 = require("node:path");
+    import_node_fs14 = require("node:fs");
+    import_node_path15 = require("node:path");
   }
 });
 
@@ -22220,6 +22439,7 @@ var init_current_sim = __esm({
 // cli/ws-bridge.ts
 var ws_bridge_exports = {};
 __export(ws_bridge_exports, {
+  BRIDGE_VALUE_FLAGS: () => BRIDGE_VALUE_FLAGS,
   BridgeSimLockedError: () => BridgeSimLockedError,
   RNX_PLACEMENT_ENV: () => RNX_PLACEMENT_ENV,
   bridgePortForShellBaseUrl: () => bridgePortForShellBaseUrl,
@@ -22232,6 +22452,7 @@ __export(ws_bridge_exports, {
   evalInBridge: () => evalInBridge,
   parseBridgeCliArgs: () => parseBridgeCliArgs,
   printBridgeWorldNotice: () => printBridgeWorldNotice,
+  resolveBridgePortForPin: () => resolveBridgePortForPin,
   resolveBridgeWorld: () => resolveBridgeWorld,
   resolveDefaultBridgePort: () => resolveDefaultBridgePort,
   resolvePlacement: () => resolvePlacement,
@@ -22247,17 +22468,17 @@ function liveDevBridgeLockfiles() {
   return readDevBridgeLockfiles().filter((lockfile) => isDevBridgeLockfileFresh(lockfile));
 }
 function checkoutRoot(cwd) {
-  let current = import_node_path15.default.resolve(cwd);
+  let current = import_node_path16.default.resolve(cwd);
   while (true) {
-    if (import_node_fs14.default.existsSync(import_node_path15.default.join(current, ".git"))) return current;
-    const parent = import_node_path15.default.dirname(current);
+    if (import_node_fs15.default.existsSync(import_node_path16.default.join(current, ".git"))) return current;
+    const parent = import_node_path16.default.dirname(current);
     if (parent === current) return null;
     current = parent;
   }
 }
 function pathContains(parent, child) {
-  const relative = import_node_path15.default.relative(parent, child);
-  return relative === "" || relative !== ".." && !relative.startsWith(`..${import_node_path15.default.sep}`) && !import_node_path15.default.isAbsolute(relative);
+  const relative = import_node_path16.default.relative(parent, child);
+  return relative === "" || relative !== ".." && !relative.startsWith(`..${import_node_path16.default.sep}`) && !import_node_path16.default.isAbsolute(relative);
 }
 function resolveDefaultDevBridgeLockfile() {
   const lockfiles = liveDevBridgeLockfiles();
@@ -22360,6 +22581,21 @@ function bridgePortForShellBaseUrl(baseUrl) {
   }
   return null;
 }
+function resolveBridgePortForPin(pin) {
+  const served = bridgePortForShellBaseUrl(pin.baseUrl);
+  if (served === null) {
+    if (pin.explicitPort) return { port: pin.wsPort };
+    return {
+      error: `no live rnx world serves ${pin.baseUrl} \u2014 start that shell first, or name its bridge with --port <port>`
+    };
+  }
+  if (pin.explicitPort && pin.wsPort !== served) {
+    return {
+      error: `--base-url ${pin.baseUrl} belongs to bridge port ${served}, but --port ${pin.wsPort} names another world`
+    };
+  }
+  return { port: served };
+}
 function resolveDefaultBridgePort() {
   return resolveBridgeWorld().bridgePort;
 }
@@ -22380,57 +22616,33 @@ function describeSimIdSource(source) {
 }
 function parseBridgeCliArgs(args, opts = {}) {
   const flagIndices = /* @__PURE__ */ new Set();
-  let wsPort = opts.port ?? resolveDefaultBridgePort();
-  let explicitPort = opts.port !== void 0;
-  let commandTimeoutMs = opts.commandTimeoutMs ?? 15e3;
-  let simId;
-  let simIdSource = "none";
+  const state = {
+    wsPort: opts.port ?? resolveDefaultBridgePort(),
+    explicitPort: opts.port !== void 0,
+    commandTimeoutMs: opts.commandTimeoutMs ?? 15e3,
+    simId: void 0,
+    simIdSource: "none"
+  };
   const stripBooleanFlags = new Set(opts.stripBooleanFlags ?? []);
   const stripValueFlags = new Set(opts.stripValueFlags ?? []);
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
-    if (arg === "--port" || arg === "-p") {
-      flagIndices.add(i);
-      explicitPort = true;
-      if (i + 1 < args.length) {
-        flagIndices.add(i + 1);
-        wsPort = Number(args[i + 1]);
-      }
-      i++;
-      continue;
-    }
-    if (arg.startsWith("--port=")) {
-      flagIndices.add(i);
-      explicitPort = true;
-      wsPort = Number(arg.slice("--port=".length));
-      continue;
-    }
-    if (arg === "--timeout") {
-      flagIndices.add(i);
-      if (i + 1 < args.length) {
-        flagIndices.add(i + 1);
-        commandTimeoutMs = Number(args[i + 1]);
-      }
-      i++;
-      continue;
-    }
-    if (arg === "--sim" || arg === "--session" || arg === "--tab") {
+    const valueFlag = BRIDGE_VALUE_FLAGS_TABLE.find(
+      (flag) => flag.names.some((name2) => arg === name2 || arg.startsWith(`${name2}=`))
+    );
+    if (valueFlag) {
       flagIndices.add(i);
-      if (i + 1 < args.length) {
-        flagIndices.add(i + 1);
-        simId = args[i + 1]?.trim() || void 0;
-        simIdSource = "flag";
+      const inline = valueFlag.names.find((name2) => arg.startsWith(`${name2}=`));
+      if (inline) {
+        valueFlag.apply(state, arg.slice(inline.length + 1));
+        continue;
       }
+      const value = i + 1 < args.length ? args[i + 1] : void 0;
+      if (value !== void 0) flagIndices.add(i + 1);
+      valueFlag.apply(state, value);
       i++;
       continue;
     }
-    const simEq = arg.startsWith("--sim=") ? arg.slice("--sim=".length) : arg.startsWith("--session=") ? arg.slice("--session=".length) : arg.startsWith("--tab=") ? arg.slice("--tab=".length) : void 0;
-    if (simEq !== void 0) {
-      flagIndices.add(i);
-      simId = simEq.trim() || void 0;
-      simIdSource = "flag";
-      continue;
-    }
     if (stripBooleanFlags.has(arg)) {
       flagIndices.add(i);
       continue;
@@ -22443,20 +22655,20 @@ function parseBridgeCliArgs(args, opts = {}) {
       i++;
     }
   }
-  if (!simId) {
+  if (!state.simId) {
     const savedSim = readCurrentSim();
     if (savedSim) {
-      simId = savedSim.simId.trim() || void 0;
-      simIdSource = "saved";
+      state.simId = savedSim.simId.trim() || void 0;
+      state.simIdSource = "saved";
     }
   }
   return {
     positional: args.filter((_, i) => !flagIndices.has(i)),
-    wsPort,
-    explicitPort,
-    simId,
-    simIdSource,
-    commandTimeoutMs
+    wsPort: state.wsPort,
+    explicitPort: state.explicitPort,
+    simId: state.simId,
+    simIdSource: state.simIdSource,
+    commandTimeoutMs: state.commandTimeoutMs
   };
 }
 function createBridge(wsPort, opts = {}) {
@@ -22690,12 +22902,12 @@ async function callInBridge(bridge, path20, ...args) {
 async function callInBridgeWrite(bridge, path20, ...args) {
   return bridge.send({ type: "call", path: path20, args, acquireLock: true });
 }
-var import_node_fs14, import_node_path15, import_ws2, RNX_PLACEMENT_ENV, resolvedWorld, BridgeSimLockedError;
+var import_node_fs15, import_node_path16, import_ws2, RNX_PLACEMENT_ENV, resolvedWorld, BridgeSimLockedError, BRIDGE_VALUE_FLAGS_TABLE, BRIDGE_VALUE_FLAGS;
 var init_ws_bridge = __esm({
   "cli/ws-bridge.ts"() {
     "use strict";
-    import_node_fs14 = __toESM(require("node:fs"), 1);
-    import_node_path15 = __toESM(require("node:path"), 1);
+    import_node_fs15 = __toESM(require("node:fs"), 1);
+    import_node_path16 = __toESM(require("node:path"), 1);
     import_ws2 = require("ws");
     init_bridge_constants();
     init_cli_constants();
@@ -22712,6 +22924,39 @@ var init_ws_bridge = __esm({
         this.lock = lock;
       }
     };
+    BRIDGE_VALUE_FLAGS_TABLE = [
+      {
+        names: ["--port", "-p"],
+        // naming the flag pins the world even when the value is missing or junk,
+        // so a later --base-url cannot quietly retarget the run to another shell.
+        apply: (state, value) => {
+          state.explicitPort = true;
+          if (value !== void 0) state.wsPort = Number(value);
+        }
+      },
+      {
+        names: ["--timeout"],
+        apply: (state, value) => {
+          if (value !== void 0) state.commandTimeoutMs = Number(value);
+        }
+      },
+      {
+        // `--sim` is the canonical target flag; `--session` / `--tab` are
+        // documented aliases (CLAUDE.md, the rnx agent skills, and engine docs all
+        // say `--session <id>`). without these aliases an agent following the docs
+        // would have `--session ef` silently ignored and get the *currently
+        // pinned* sim's tree instead — wrong-app data with no error.
+        names: ["--sim", "--session", "--tab"],
+        apply: (state, value) => {
+          if (value === void 0) return;
+          state.simId = value.trim() || void 0;
+          state.simIdSource = "flag";
+        }
+      }
+    ];
+    BRIDGE_VALUE_FLAGS = BRIDGE_VALUE_FLAGS_TABLE.flatMap(
+      (flag) => [...flag.names]
+    );
   }
 });
 
@@ -23060,9 +23305,9 @@ var init_profiles = __esm({
 // cli/app-project.ts
 function firstNamedFile(dir, names) {
   for (const name2 of names) {
-    const candidate = import_node_path16.default.join(dir, name2);
+    const candidate = import_node_path17.default.join(dir, name2);
     try {
-      if (import_node_fs15.default.statSync(candidate).isFile()) return candidate;
+      if (import_node_fs16.default.statSync(candidate).isFile()) return candidate;
     } catch {
     }
   }
@@ -23075,24 +23320,24 @@ function findRNXAppConfig(dir) {
   return firstNamedFile(dir, RNX_APP_CONFIG_NAMES);
 }
 function resolveAppProject(projectRoot) {
-  const appDir = import_node_path16.default.resolve(projectRoot);
+  const appDir = import_node_path17.default.resolve(projectRoot);
   try {
-    if (!import_node_fs15.default.statSync(appDir).isDirectory()) return null;
+    if (!import_node_fs16.default.statSync(appDir).isDirectory()) return null;
   } catch {
     return null;
   }
   const configPath = findRNXAppConfig(appDir);
-  if (!configPath && !findExpoAppConfig(appDir) && !import_node_fs15.default.existsSync(import_node_path16.default.join(appDir, "package.json"))) {
+  if (!configPath && !findExpoAppConfig(appDir) && !import_node_fs16.default.existsSync(import_node_path17.default.join(appDir, "package.json"))) {
     return null;
   }
   return { appDir, configPath };
 }
-var import_node_fs15, import_node_path16, EXPO_APP_CONFIG_NAMES, RNX_APP_CONFIG_NAMES;
+var import_node_fs16, import_node_path17, EXPO_APP_CONFIG_NAMES, RNX_APP_CONFIG_NAMES;
 var init_app_project = __esm({
   "cli/app-project.ts"() {
     "use strict";
-    import_node_fs15 = __toESM(require("node:fs"), 1);
-    import_node_path16 = __toESM(require("node:path"), 1);
+    import_node_fs16 = __toESM(require("node:fs"), 1);
+    import_node_path17 = __toESM(require("node:path"), 1);
     EXPO_APP_CONFIG_NAMES = [
       "app.config.js",
       "app.config.ts",
@@ -23121,13 +23366,13 @@ function isRNXConfig(value) {
 }
 function resolveConfigReplacementFiles(config, configPath) {
   if (!config.modules) return config;
-  const configDir = import_node_path17.default.dirname(configPath);
+  const configDir = import_node_path18.default.dirname(configPath);
   return {
     ...config,
     modules: Object.fromEntries(
       Object.entries(config.modules).map(([name2, resolution]) => [
         name2,
-        resolution && typeof resolution === "object" && "file" in resolution ? { ...resolution, file: import_node_path17.default.resolve(configDir, resolution.file) } : resolution
+        resolution && typeof resolution === "object" && "file" in resolution ? { ...resolution, file: import_node_path18.default.resolve(configDir, resolution.file) } : resolution
       ])
     )
   };
@@ -23157,12 +23402,12 @@ async function resolveRNXAppConfig(startDir = process.cwd()) {
   const project = resolveAppProject(startDir);
   return { project, config: await loadRNXAppConfig(project) };
 }
-var import_node_module, import_node_path17, import_jiti, require2;
+var import_node_module, import_node_path18, import_jiti, require2;
 var init_app_config = __esm({
   "cli/app-config.ts"() {
     "use strict";
     import_node_module = require("node:module");
-    import_node_path17 = __toESM(require("node:path"), 1);
+    import_node_path18 = __toESM(require("node:path"), 1);
     init_src();
     import_jiti = require("jiti");
     init_public_brand();
@@ -23230,13 +23475,13 @@ function discoverNativeLinkedAppFonts(opts) {
       scannedFontDirectories++;
       let entries;
       try {
-        entries = import_node_fs16.default.readdirSync(current.dir, { withFileTypes: true });
+        entries = import_node_fs17.default.readdirSync(current.dir, { withFileTypes: true });
       } catch {
         continue;
       }
       for (const entry of entries) {
         if (entry.isSymbolicLink()) continue;
-        const fullPath = import_node_path18.default.join(current.dir, entry.name);
+        const fullPath = import_node_path19.default.join(current.dir, entry.name);
         if (entry.isDirectory()) {
           if (current.depth < 4 && pending.length < 64 && !entry.name.startsWith(".")) {
             pending.push({ dir: fullPath, depth: current.depth + 1 });
@@ -23244,15 +23489,15 @@ function discoverNativeLinkedAppFonts(opts) {
           continue;
         }
         if (!entry.isFile() || !/\.(ttf|otf|woff|woff2)$/i.test(entry.name)) continue;
-        const relative = import_node_path18.default.relative(root, fullPath).split(import_node_path18.default.sep).join("/");
-        fontPaths.push(import_node_path18.default.posix.join(metroPathPrefix, relative));
+        const relative = import_node_path19.default.relative(root, fullPath).split(import_node_path19.default.sep).join("/");
+        fontPaths.push(import_node_path19.default.posix.join(metroPathPrefix, relative));
         if (fontPaths.length >= 256) break;
       }
     }
   };
   try {
     const packageJson = JSON.parse(
-      import_node_fs16.default.readFileSync(import_node_path18.default.join(selectedAppDir, "package.json"), "utf8")
+      import_node_fs17.default.readFileSync(import_node_path19.default.join(selectedAppDir, "package.json"), "utf8")
     );
     const dependencyNames = /* @__PURE__ */ new Set();
     for (const field of ["dependencies", "devDependencies", "optionalDependencies"]) {
@@ -23267,24 +23512,24 @@ function discoverNativeLinkedAppFonts(opts) {
       const config = Reflect.get(packageJson, "reactNativeVectorIcons");
       const configuredFontDir = config && typeof config === "object" ? Reflect.get(config, "fontDir") : null;
       const configuredDir = typeof configuredFontDir === "string" ? configuredFontDir : "rnvi-fonts";
-      const root = import_node_path18.default.resolve(selectedAppDir, configuredDir);
-      const relativeRoot = import_node_path18.default.relative(selectedAppDir, root);
-      if (!relativeRoot.startsWith("..") && !import_node_path18.default.isAbsolute(relativeRoot)) {
-        collectFontFiles(root, relativeRoot.split(import_node_path18.default.sep).join("/"));
+      const root = import_node_path19.default.resolve(selectedAppDir, configuredDir);
+      const relativeRoot = import_node_path19.default.relative(selectedAppDir, root);
+      if (!relativeRoot.startsWith("..") && !import_node_path19.default.isAbsolute(relativeRoot)) {
+        collectFontFiles(root, relativeRoot.split(import_node_path19.default.sep).join("/"));
       }
-      const vectorIconRequire = (0, import_node_module2.createRequire)(import_node_path18.default.join(selectedAppDir, "package.json"));
+      const vectorIconRequire = (0, import_node_module2.createRequire)(import_node_path19.default.join(selectedAppDir, "package.json"));
       for (const dependencyName of vectorIconDependencies) {
         try {
           const entryPath = vectorIconRequire.resolve(dependencyName);
-          const dependencyPath = dependencyName.split("/").join(import_node_path18.default.sep);
-          const marker = `${import_node_path18.default.sep}node_modules${import_node_path18.default.sep}${dependencyPath}${import_node_path18.default.sep}`;
+          const dependencyPath = dependencyName.split("/").join(import_node_path19.default.sep);
+          const marker = `${import_node_path19.default.sep}node_modules${import_node_path19.default.sep}${dependencyPath}${import_node_path19.default.sep}`;
           const markerIndex = entryPath.lastIndexOf(marker);
           if (markerIndex === -1) continue;
           const packageRoot = entryPath.slice(0, markerIndex + marker.length - 1);
           const fontsDir = dependencyName === "react-native-vector-icons" ? "Fonts" : "fonts";
           collectFontFiles(
-            import_node_path18.default.join(packageRoot, fontsDir),
-            import_node_path18.default.posix.join("node_modules", dependencyName, fontsDir)
+            import_node_path19.default.join(packageRoot, fontsDir),
+            import_node_path19.default.posix.join("node_modules", dependencyName, fontsDir)
           );
         } catch {
         }
@@ -23293,37 +23538,37 @@ function discoverNativeLinkedAppFonts(opts) {
   } catch {
   }
   try {
-    const configPath = import_node_path18.default.join(selectedAppDir, "react-native.config.js");
-    if (import_node_fs16.default.statSync(configPath).isFile()) {
-      const appConfigRequire = (0, import_node_module2.createRequire)(import_node_path18.default.join(selectedAppDir, "package.json"));
+    const configPath = import_node_path19.default.join(selectedAppDir, "react-native.config.js");
+    if (import_node_fs17.default.statSync(configPath).isFile()) {
+      const appConfigRequire = (0, import_node_module2.createRequire)(import_node_path19.default.join(selectedAppDir, "package.json"));
       const rnConfig = appConfigRequire(configPath);
       const assets = rnConfig && typeof rnConfig === "object" ? Reflect.get(rnConfig, "assets") : null;
       if (Array.isArray(assets)) {
         for (const assetDir of assets) {
           if (typeof assetDir !== "string") continue;
-          const root = import_node_path18.default.resolve(selectedAppDir, assetDir);
-          const relativeRoot = import_node_path18.default.relative(selectedAppDir, root);
-          if (relativeRoot.startsWith("..") || import_node_path18.default.isAbsolute(relativeRoot)) continue;
-          collectFontFiles(root, relativeRoot.split(import_node_path18.default.sep).join("/"));
+          const root = import_node_path19.default.resolve(selectedAppDir, assetDir);
+          const relativeRoot = import_node_path19.default.relative(selectedAppDir, root);
+          if (relativeRoot.startsWith("..") || import_node_path19.default.isAbsolute(relativeRoot)) continue;
+          collectFontFiles(root, relativeRoot.split(import_node_path19.default.sep).join("/"));
         }
       }
     }
   } catch {
   }
   if (platform === "ios") {
-    const iosDir = import_node_path18.default.join(selectedAppDir, "ios");
+    const iosDir = import_node_path19.default.join(selectedAppDir, "ios");
     try {
-      const targetDirs = import_node_fs16.default.readdirSync(iosDir, { withFileTypes: true }).filter(
+      const targetDirs = import_node_fs17.default.readdirSync(iosDir, { withFileTypes: true }).filter(
         (entry) => entry.isDirectory() && !entry.isSymbolicLink() && entry.name !== "Pods" && entry.name !== "build" && !entry.name.startsWith(".")
       ).slice(0, 64);
-      const plistPaths = [import_node_path18.default.join(iosDir, "Info.plist")];
+      const plistPaths = [import_node_path19.default.join(iosDir, "Info.plist")];
       for (const entry of targetDirs) {
-        plistPaths.push(import_node_path18.default.join(iosDir, entry.name, "Info.plist"));
+        plistPaths.push(import_node_path19.default.join(iosDir, entry.name, "Info.plist"));
       }
       for (const plistPath of plistPaths) {
         let parsed;
         try {
-          parsed = parsePlistSource(import_node_fs16.default.readFileSync(plistPath, "utf8"));
+          parsed = parsePlistSource(import_node_fs17.default.readFileSync(plistPath, "utf8"));
         } catch {
           continue;
         }
@@ -23333,21 +23578,21 @@ function discoverNativeLinkedAppFonts(opts) {
         for (const declaredFont of declaredFonts) {
           if (typeof declaredFont !== "string") continue;
           const candidates = [
-            import_node_path18.default.resolve(import_node_path18.default.dirname(plistPath), declaredFont),
-            import_node_path18.default.resolve(iosDir, declaredFont)
+            import_node_path19.default.resolve(import_node_path19.default.dirname(plistPath), declaredFont),
+            import_node_path19.default.resolve(iosDir, declaredFont)
           ];
           const fontPath = candidates.find((candidate) => {
-            const relative = import_node_path18.default.relative(selectedAppDir, candidate);
-            if (relative.startsWith("..") || import_node_path18.default.isAbsolute(relative)) return false;
+            const relative = import_node_path19.default.relative(selectedAppDir, candidate);
+            if (relative.startsWith("..") || import_node_path19.default.isAbsolute(relative)) return false;
             try {
-              return import_node_fs16.default.statSync(candidate).isFile();
+              return import_node_fs17.default.statSync(candidate).isFile();
             } catch {
               return false;
             }
           });
           if (!fontPath) continue;
           fontPaths.push(
-            import_node_path18.default.relative(selectedAppDir, fontPath).split(import_node_path18.default.sep).join("/")
+            import_node_path19.default.relative(selectedAppDir, fontPath).split(import_node_path19.default.sep).join("/")
           );
         }
       }
@@ -23386,13 +23631,13 @@ async function resolveMetroProjectRoot(bundleUrl, opts) {
 function encodeAppFontsWire(specs) {
   return specs.map((spec) => `${encodeURIComponent(spec.url)}::${encodeURIComponent(spec.family)}`).join(",");
 }
-var import_node_fs16, import_node_module2, import_node_path18, import_config_plugin_fonts, require3;
+var import_node_fs17, import_node_module2, import_node_path19, import_config_plugin_fonts, require3;
 var init_app_fonts = __esm({
   "cli/app-fonts.ts"() {
     "use strict";
-    import_node_fs16 = __toESM(require("node:fs"), 1);
+    import_node_fs17 = __toESM(require("node:fs"), 1);
     import_node_module2 = require("node:module");
-    import_node_path18 = __toESM(require("node:path"), 1);
+    import_node_path19 = __toESM(require("node:path"), 1);
     import_config_plugin_fonts = require("sootsim-engine/engine/config-plugin-fonts");
     init_dev_server_scanner();
     init_plist();
@@ -24488,7 +24733,7 @@ function resolvePlaywright() {
         try {
           const modulePath = requireFromRoot.resolve(spec);
           const packageJsonPath = requireFromRoot.resolve(`${spec}/package.json`);
-          const parsed = JSON.parse((0, import_node_fs17.readFileSync)(packageJsonPath, "utf8"));
+          const parsed = JSON.parse((0, import_node_fs18.readFileSync)(packageJsonPath, "utf8"));
           if (!isRecord5(parsed) || typeof parsed.version !== "string") continue;
           const bin = parsed.bin;
           let binPath = null;
@@ -24500,8 +24745,8 @@ function resolvePlaywright() {
             binPath = typeof named === "string" ? named : typeof first === "string" ? first : null;
           }
           if (!binPath) continue;
-          const cliPath = (0, import_node_path19.join)((0, import_node_path19.dirname)(packageJsonPath), binPath);
-          if (!(0, import_node_fs17.existsSync)(cliPath)) continue;
+          const cliPath = (0, import_node_path20.join)((0, import_node_path20.dirname)(packageJsonPath), binPath);
+          if (!(0, import_node_fs18.existsSync)(cliPath)) continue;
           return {
             spec,
             modulePath,
@@ -24545,7 +24790,7 @@ function probeBrowser(resolved, env) {
     return {
       ok: true,
       executablePath: parsed.executablePath,
-      exists: parsed.exists && (0, import_node_fs17.existsSync)(parsed.executablePath)
+      exists: parsed.exists && (0, import_node_fs18.existsSync)(parsed.executablePath)
     };
   } catch (error) {
     return {
@@ -24596,14 +24841,14 @@ ${detail}` : ""}`
   }
   return { ok: true, executablePath: after.executablePath, installed: true };
 }
-var import_node_child_process6, import_node_fs17, import_node_module4, import_node_path19;
+var import_node_child_process6, import_node_fs18, import_node_module4, import_node_path20;
 var init_playwright_provisioning = __esm({
   "cli/drivers/playwright-provisioning.ts"() {
     "use strict";
     import_node_child_process6 = require("node:child_process");
-    import_node_fs17 = require("node:fs");
+    import_node_fs18 = require("node:fs");
     import_node_module4 = require("node:module");
-    import_node_path19 = require("node:path");
+    import_node_path20 = require("node:path");
     init_internal_child();
     init_self_invocation();
   }
@@ -24784,30 +25029,6 @@ var init_open_url2 = __esm({
   }
 });
 
-// cli/run-rnx.ts
-function rethrowIfExit(error) {
-  if (error instanceof RnxExit) throw error;
-}
-function rnxExit(code) {
-  throw new RnxExit(code);
-}
-var import_node_async_hooks, RnxExit, sinks;
-var init_run_rnx = __esm({
-  "cli/run-rnx.ts"() {
-    "use strict";
-    import_node_async_hooks = require("node:async_hooks");
-    RnxExit = class extends Error {
-      code;
-      constructor(code) {
-        super(`rnx exited with code ${code}`);
-        this.name = "RnxExit";
-        this.code = code;
-      }
-    };
-    sinks = new import_node_async_hooks.AsyncLocalStorage();
-  }
-});
-
 // cli/commands/inspect/env.ts
 function isAgentEnv(env = process.env) {
   if (env.RNX_AGENT === "0") return false;
@@ -25289,7 +25510,7 @@ function assertExplicitBridgeLock(preferredPort, explicitPort, lock) {
 }
 async function ensureRuntimeForOpen() {
   const active = readActiveRuntime();
-  if (active && import_node_fs18.default.existsSync(runtimeDir(active))) return;
+  if (active && import_node_fs19.default.existsSync(runtimeDir(active))) return;
   console.error("  installing rnx engine runtime...");
   const { runRuntime: runRuntime2 } = await Promise.resolve().then(() => (init_runtime(), runtime_exports));
   await runRuntime2(["install"], {});
@@ -25436,10 +25657,10 @@ async function buildResolvedBundleOpenUrl(target, baseUrl, opts = {}) {
 }
 function normalizeReplacementPath(filePath) {
   if (filePath.startsWith("~/")) {
-    return import_node_path20.default.join(import_node_os3.default.homedir(), filePath.slice(2));
+    return import_node_path21.default.join(import_node_os3.default.homedir(), filePath.slice(2));
   }
-  if (import_node_path20.default.isAbsolute(filePath)) return filePath;
-  return import_node_path20.default.resolve(process.cwd(), filePath);
+  if (import_node_path21.default.isAbsolute(filePath)) return filePath;
+  return import_node_path21.default.resolve(process.cwd(), filePath);
 }
 function parseOpenRuntimeConfig(args) {
   const modules = {};
@@ -25458,7 +25679,7 @@ function parseOpenRuntimeConfig(args) {
       }
       const moduleName = raw.slice(0, eqIndex).trim();
       const filePath = normalizeReplacementPath(raw.slice(eqIndex + 1).trim());
-      if (!import_node_fs18.default.existsSync(filePath)) {
+      if (!import_node_fs19.default.existsSync(filePath)) {
         console.error(`  rnx open: replacement file not found: ${filePath}`);
         rnxExit(1);
       }
@@ -25489,7 +25710,7 @@ async function resolveAppProjectForBundleUrl(bundleUrl) {
   return advertisedRoot ? resolveAppProject(advertisedRoot) : null;
 }
 async function ensureConfiguredRuntime(version) {
-  if (import_node_fs18.default.existsSync(import_node_path20.default.join(runtimeDir(version), "index.html"))) return;
+  if (import_node_fs19.default.existsSync(import_node_path21.default.join(runtimeDir(version), "index.html"))) return;
   console.error(`  installing configured engine runtime ${version}...`);
   const result = await rnxRuntime.install({
     version,
@@ -25631,9 +25852,10 @@ async function buildShellUrl(target, baseUrl = resolveDefaultShellBaseUrl(), opt
   const resolved = await resolveShellUrl(target, baseUrl, opts);
   const project = opts.project ?? await resolveAppProjectForBundleUrl(bundleUrlOf(resolved));
   const stamped = await stampAppSplash(await stampAppFonts(resolved, project), project);
-  if (!opts.device) return stamped;
+  if (!opts.device && !opts.proof) return stamped;
   const url = new URL(stamped);
-  url.searchParams.set("device", opts.device);
+  if (opts.device) url.searchParams.set("device", opts.device);
+  if (opts.proof) url.searchParams.set("proof", "1");
   return url.toString();
 }
 function deriveCurrentSimBaseUrl(sim, fallback) {
@@ -25860,7 +26082,7 @@ function playwrightHostPidForSim(sim) {
 function signalDriverLaunchConnected(result) {
   if (!result.connectAckFile) return false;
   try {
-    import_node_fs18.default.writeFileSync(
+    import_node_fs19.default.writeFileSync(
       result.connectAckFile,
       `${JSON.stringify({ connectedAt: Date.now(), pid: result.pid ?? null })}
 `,
@@ -25874,19 +26096,19 @@ function signalDriverLaunchConnected(result) {
 function printDriverDiagnosticLogTail(result) {
   if (!result.diagnosticLogPath) return;
   try {
-    const detail = import_node_fs18.default.readFileSync(result.diagnosticLogPath, "utf8").trim();
+    const detail = import_node_fs19.default.readFileSync(result.diagnosticLogPath, "utf8").trim();
     if (!detail) {
-      console.error(`  ${import_node_path20.default.basename(result.diagnosticLogPath)} was empty`);
+      console.error(`  ${import_node_path21.default.basename(result.diagnosticLogPath)} was empty`);
       return;
     }
     const shown = detail.length > 4e3 ? `\u2026
 ${detail.slice(-4e3)}` : detail;
-    console.error(`  ${import_node_path20.default.basename(result.diagnosticLogPath)}:`);
+    console.error(`  ${import_node_path21.default.basename(result.diagnosticLogPath)}:`);
     console.error(shown);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `  failed to read ${import_node_path20.default.basename(result.diagnosticLogPath)}: ${message}`
+      `  failed to read ${import_node_path21.default.basename(result.diagnosticLogPath)}: ${message}`
     );
   }
 }
@@ -26120,7 +26342,8 @@ async function runOpenCommand(args, opts = {}) {
       "--hot",
       "--no-hmr",
       "--no-describe",
-      "--quiet"
+      "--quiet",
+      "--proof"
     ],
     stripValueFlags: [
       "--base-url",
@@ -26208,9 +26431,18 @@ async function runOpenCommand(args, opts = {}) {
     await ensureConfiguredRuntime(configuredRuntimeVersion);
   }
   const explicitBaseUrl = args.find((_, i) => args[i - 1] === "--base-url");
-  if (explicitBaseUrl && !parsed.explicitPort) {
-    const matched = bridgePortForShellBaseUrl(explicitBaseUrl);
-    if (matched) parsed.wsPort = matched;
+  if (explicitBaseUrl) {
+    const pinned = resolveBridgePortForPin({
+      baseUrl: explicitBaseUrl,
+      wsPort: parsed.wsPort,
+      explicitPort: parsed.explicitPort
+    });
+    if (pinned.error !== void 0) {
+      console.error(`  error: ${pinned.error}`);
+      rnxExit(1);
+    } else {
+      parsed.wsPort = pinned.port;
+    }
   }
   parsed.wsPort = await ensureBridgeForOpen(parsed.wsPort, parsed.explicitPort);
   const requestedDriverId = args.find((_, i) => args[i - 1] === "--driver") || "";
@@ -26249,7 +26481,8 @@ async function runOpenCommand(args, opts = {}) {
     hot: hotMode,
     device: deviceArg,
     resolvedBundle,
-    project
+    project,
+    proof: args.includes("--proof")
   };
   const selectedShellBaseUrl = configuredRuntimeVersion ? `http://localhost:${parsed.wsPort}/` : explicitBaseUrl || resolveShellBaseUrlForBridgePort(parsed.wsPort);
   const baseUrl = applyRuntimeGenerationOrigin(
@@ -26384,9 +26617,12 @@ async function runOpenCommand(args, opts = {}) {
   const result = await driver.launch({
     url: openUrl2,
     // the shell serves the sim page but its WS bridge may have drifted off
-    // the shell-port-implied default. inject the resolved bridge port so the
-    // page does not reconnect to a stale world.
-    bridgePort: bridgePortForShellBaseUrl(baseUrl) ?? parsed.wsPort,
+    // the shell-port-implied default. inject the bridge this command settled
+    // on so the page does not reconnect to a stale world. re-deriving it from
+    // the shell URL could name a third port, since a bridge with no lockfile
+    // resolves back to the default shell URL and that shell may belong to a
+    // live world of its own.
+    bridgePort: parsed.wsPort,
     headless: driverHeadless,
     profileId,
     ephemeralProfile,
@@ -26726,14 +26962,14 @@ async function runCloseCommand(args, opts = {}) {
     bridge.close();
   }
 }
-var import_node_child_process7, import_node_fs18, import_node_os3, import_node_path20, import_settings, import_ws4, DEFAULT_DRIVER_CONNECT_TIMEOUT_MS, DRIVER_CONNECT_INTERVAL_MS, DRIVER_CONNECT_HOST_GRACE_MS, OPEN_BRIDGE_SPAWN_TIMEOUT_MS, SHELL_APPS;
+var import_node_child_process7, import_node_fs19, import_node_os3, import_node_path21, import_settings, import_ws4, DEFAULT_DRIVER_CONNECT_TIMEOUT_MS, DRIVER_CONNECT_INTERVAL_MS, DRIVER_CONNECT_HOST_GRACE_MS, OPEN_BRIDGE_SPAWN_TIMEOUT_MS, SHELL_APPS;
 var init_control = __esm({
   "cli/commands/control.ts"() {
     "use strict";
     import_node_child_process7 = require("node:child_process");
-    import_node_fs18 = __toESM(require("node:fs"), 1);
+    import_node_fs19 = __toESM(require("node:fs"), 1);
     import_node_os3 = __toESM(require("node:os"), 1);
-    import_node_path20 = __toESM(require("node:path"), 1);
+    import_node_path21 = __toESM(require("node:path"), 1);
     import_settings = require("sootsim-engine/settings");
     import_ws4 = require("ws");
     init_dev_server_scanner();
@@ -27583,157 +27819,6 @@ var init_maestro_js = __esm({
   }
 });
 
-// src/auth/shared-session.ts
-function getBaseDir() {
-  const explicit = process.env[SESSION_FILE_ENV];
-  if (explicit?.trim()) {
-    return (0, import_node_path21.dirname)((0, import_node_path21.resolve)(explicit));
-  }
-  return electronUserDataDir();
-}
-function getSharedDesktopAuthFilePath() {
-  const explicit = process.env[SESSION_FILE_ENV];
-  if (explicit?.trim()) return (0, import_node_path21.resolve)(explicit);
-  return (0, import_node_path21.join)(getBaseDir(), "desktop-auth.json");
-}
-function normalizeUser(input) {
-  if (!input || typeof input !== "object") return null;
-  const value = input;
-  if (typeof value.id !== "string" || !value.id.trim()) return null;
-  return {
-    id: value.id.trim(),
-    name: typeof value.name === "string" ? value.name : void 0,
-    email: typeof value.email === "string" ? value.email : void 0,
-    image: typeof value.image === "string" ? value.image : void 0,
-    githubUsername: typeof value.githubUsername === "string" ? value.githubUsername : void 0,
-    isAdmin: value.isAdmin === true,
-    teams: Array.isArray(value.teams) ? value.teams.map((team) => {
-      if (!team || typeof team !== "object") return null;
-      const t = team;
-      if (typeof t.id !== "string" || typeof t.name !== "string") return null;
-      return {
-        id: t.id,
-        name: t.name,
-        role: t.role === "owner" ? "owner" : "member",
-        githubOrg: typeof t.githubOrg === "string" ? t.githubOrg : null
-      };
-    }).filter((team) => !!team) : void 0
-  };
-}
-function normalizeSession(input) {
-  if (!input || typeof input !== "object") return null;
-  const value = input;
-  if (value.version !== SESSION_VERSION) return null;
-  if (typeof value.token !== "string" || !value.token.trim()) return null;
-  const origin = typeof value.origin === "string" && value.origin.trim() ? value.origin.trim() : DEFAULT_ORIGIN;
-  const source = value.source === "cli" || value.source === "electron" || value.source === "browser" || value.source === "unknown" ? value.source : "unknown";
-  const updatedAt = typeof value.updatedAt === "string" && value.updatedAt ? value.updatedAt : (/* @__PURE__ */ new Date()).toISOString();
-  const validatedAt = typeof value.validatedAt === "string" && value.validatedAt ? value.validatedAt : void 0;
-  return {
-    version: SESSION_VERSION,
-    token: value.token.trim(),
-    user: normalizeUser(value.user),
-    origin,
-    source,
-    updatedAt,
-    validatedAt
-  };
-}
-function readSharedDesktopAuthSession() {
-  const filepath = getSharedDesktopAuthFilePath();
-  if (!(0, import_node_fs19.existsSync)(filepath)) return null;
-  try {
-    const parsed = JSON.parse((0, import_node_fs19.readFileSync)(filepath, "utf8"));
-    const normalized = normalizeSession(parsed);
-    if (!normalized) {
-      (0, import_node_fs19.rmSync)(filepath, { force: true });
-      return null;
-    }
-    return normalized;
-  } catch {
-    (0, import_node_fs19.rmSync)(filepath, { force: true });
-    return null;
-  }
-}
-var import_node_fs19, import_node_path21, SESSION_VERSION, SESSION_FILE_ENV, DEFAULT_ORIGIN;
-var init_shared_session = __esm({
-  "src/auth/shared-session.ts"() {
-    "use strict";
-    import_node_fs19 = require("node:fs");
-    import_node_path21 = require("node:path");
-    init_home_paths();
-    SESSION_VERSION = 1;
-    SESSION_FILE_ENV = "SOOTSIM_SHARED_AUTH_FILE";
-    DEFAULT_ORIGIN = "https://contrast.dev";
-  }
-});
-
-// cli/auth.ts
-function looksLikeGitHubToken(token) {
-  return Boolean(
-    token && token.length >= 20 && GITHUB_TOKEN_PREFIXES.some((prefix) => token.startsWith(prefix))
-  );
-}
-function resolveGitHubActionsAuth() {
-  const contrastRunnerToken = process.env.CONTRAST_INSTALLATION_TOKEN?.trim();
-  const githubActionsToken = process.env.GITHUB_TOKEN?.trim();
-  const token = contrastRunnerToken || githubActionsToken;
-  if (!looksLikeGitHubToken(token)) return null;
-  const repoSlug = (process.env.CONTRAST_REPO || process.env.GITHUB_REPOSITORY || "").trim();
-  if (!repoSlug) return null;
-  const [owner, repo] = repoSlug.includes("/") ? repoSlug.split("/", 2) : [null, null];
-  const repositoryId = (process.env.CONTRAST_REPO_ID || process.env.GITHUB_REPOSITORY_ID || "").trim();
-  const installationId = (process.env.CONTRAST_INSTALLATION_ID || process.env.GITHUB_APP_INSTALLATION_ID || "").trim();
-  return {
-    kind: "github",
-    token,
-    repoId: repoSlug,
-    repositoryId: repositoryId || null,
-    owner: owner || null,
-    repo: repo || null,
-    installationId: installationId || null,
-    source: contrastRunnerToken ? "contrast-runner" : "github-actions"
-  };
-}
-function isCliApiKeySecret(secret) {
-  return secret.startsWith("sk_rnx_");
-}
-function readApiKeyFromEnv() {
-  const envName = "RNX_API_KEY";
-  const secret = process.env[envName]?.trim();
-  return secret && isCliApiKeySecret(secret) ? { secret, envName } : null;
-}
-function resolveCliAuth() {
-  const envKey = readApiKeyFromEnv();
-  if (envKey) {
-    return {
-      kind: "api-key",
-      secret: envKey.secret,
-      source: "env",
-      envName: envKey.envName
-    };
-  }
-  const githubAuth = resolveGitHubActionsAuth();
-  if (githubAuth) return githubAuth;
-  const session = readSharedDesktopAuthSession();
-  if (session?.token) {
-    return { kind: "session", token: session.token, origin: session.origin };
-  }
-  return null;
-}
-function authHeaderValue(auth) {
-  return auth.kind === "api-key" ? `Bearer ${auth.secret}` : `Bearer ${auth.token}`;
-}
-var GITHUB_TOKEN_PREFIXES;
-var init_auth = __esm({
-  "cli/auth.ts"() {
-    "use strict";
-    init_shared_session();
-    init_run_rnx();
-    GITHUB_TOKEN_PREFIXES = ["ghs_", "ghp_", "gho_", "ghu_", "github_pat_"];
-  }
-});
-
 // cli/run-registry.ts
 var init_run_registry = __esm({
   "cli/run-registry.ts"() {