ryco-cli 0.1.14 → 0.1.16

package/dist/{SourceControlProviderDiscoveryCatalog-Bj_sZfmB.cjs → SourceControlProviderDiscoveryCatalog-CPO3a9_U.cjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-const require_collectUint8StreamText = require("./collectUint8StreamText-B9B7bGv9.cjs");
+const require_collectUint8StreamText = require("./collectUint8StreamText-Dsbmrw73.cjs");
 let effect = require("effect");
 let effect_unstable_process = require("effect/unstable/process");
 //#region src/vcs/VcsProcess.ts

package/dist/{SourceControlProviderDiscoveryCatalog-C6Fn7rZE.mjs → SourceControlProviderDiscoveryCatalog-hXWNwRMn.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { Aa as VcsProcessTimeoutError, Da as VcsOutputDecodeError, Oa as VcsProcessExitError, ka as VcsProcessSpawnError, t as collectUint8StreamText } from "./collectUint8StreamText-RzKEq2NY.mjs";
+import { Aa as VcsProcessTimeoutError, Da as VcsOutputDecodeError, Oa as VcsProcessExitError, ka as VcsProcessSpawnError, t as collectUint8StreamText } from "./collectUint8StreamText-oFvWyN3_.mjs";
 import { Context, Duration, Effect, Layer, Option, Schema, Sink, Stream } from "effect";
 import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
 //#region src/vcs/VcsProcess.ts

package/dist/bin.cjs

@@ -2,9 +2,9 @@
 
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_rolldown_runtime = require("./rolldown-runtime-LGfotAqq.cjs");
-const require_collectUint8StreamText = require("./collectUint8StreamText-B9B7bGv9.cjs");
+const require_collectUint8StreamText = require("./collectUint8StreamText-Dsbmrw73.cjs");
 const require_Metrics = require("./Metrics-DIjMQ5pa.cjs");
-const require_SourceControlProviderDiscoveryCatalog = require("./SourceControlProviderDiscoveryCatalog-Bj_sZfmB.cjs");
+const require_SourceControlProviderDiscoveryCatalog = require("./SourceControlProviderDiscoveryCatalog-CPO3a9_U.cjs");
 const require_sourceControl = require("./sourceControl-B0D1Op29.cjs");
 let _effect_platform_node_NodeRuntime = require("@effect/platform-node/NodeRuntime");
 _effect_platform_node_NodeRuntime = require_rolldown_runtime.__toESM(_effect_platform_node_NodeRuntime, 1);
@@ -2054,7 +2054,7 @@ const authClientsRevokeOthersRouteLayer = effect_unstable_http.HttpRouter.add("P
 var ServerEnvironment = class extends effect.Context.Service()("ryco/environment/Services/ServerEnvironment") {};
 //#endregion
 //#region src/http.ts
-const PROJECT_FAVICON_CACHE_CONTROL = "public, max-age=3600";
+const PROJECT_FAVICON_CACHE_CONTROL = "private, max-age=3600";
 const PROJECT_AVATAR_MAX_BYTES = 2097152;
 const PROJECT_AVATAR_CACHE_CONTROL = "private, max-age=0, must-revalidate";
 const STATIC_INDEX_CACHE_CONTROL = "no-cache";
@@ -2068,6 +2068,19 @@ const LOOPBACK_HOSTNAMES = /* @__PURE__ */ new Set([
 	"::1",
 	"localhost"
 ]);
+const SVG_CONTENT_SECURITY_POLICY = "default-src 'none'; style-src 'unsafe-inline'; sandbox";
+const DOWNLOAD_CONTENT_SECURITY_POLICY = "default-src 'none'; sandbox";
+const INLINE_ATTACHMENT_EXTENSIONS = /* @__PURE__ */ new Set([
+	".avif",
+	".bmp",
+	".gif",
+	".ico",
+	".jpeg",
+	".jpg",
+	".png",
+	".svg",
+	".webp"
+]);
 const STATIC_CONTENT_TYPES = {
 	".css": "text/css; charset=utf-8",
 	".html": "text/html; charset=utf-8",
@@ -2112,6 +2125,33 @@ function resolveStaticCacheControl(staticRelativePath) {
 	const basename = normalized.split("/").at(-1) ?? normalized;
 	return /(?:^|[-.])[a-zA-Z0-9_-]{8,}\.[a-zA-Z0-9]+$/u.test(basename) ? STATIC_IMMUTABLE_CACHE_CONTROL : STATIC_INDEX_CACHE_CONTROL;
 }
+/** Build a download disposition with a safe ASCII fallback and UTF-8 filename. */
+function downloadContentDisposition(fileName) {
+	if (fileName === void 0) return "attachment";
+	const sanitized = fileName.toWellFormed().replace(/[\u0000-\u001f"\\]/g, "_");
+	const asciiFallback = sanitized.replace(/[^\u0020-\u007e]/g, "_");
+	const extendedName = encodeURIComponent(sanitized).replace(/['()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+	return `attachment; filename="${asciiFallback}"${asciiFallback === sanitized ? "" : `; filename*=UTF-8''${extendedName}`}`;
+}
+function userAssetResponseHeaders(filePath, path) {
+	const extension = path.extname(filePath).toLowerCase();
+	return {
+		"Cache-Control": "private, max-age=3600",
+		"X-Content-Type-Options": "nosniff",
+		...!INLINE_ATTACHMENT_EXTENSIONS.has(extension) ? {
+			"Content-Disposition": downloadContentDisposition(path.basename(filePath)),
+			"Content-Security-Policy": DOWNLOAD_CONTENT_SECURITY_POLICY,
+			"Content-Type": "application/octet-stream"
+		} : extension === ".svg" ? { "Content-Security-Policy": SVG_CONTENT_SECURITY_POLICY } : {}
+	};
+}
+function inlineImageResponseHeaders(filePath) {
+	return {
+		"Cache-Control": PROJECT_FAVICON_CACHE_CONTROL,
+		"X-Content-Type-Options": "nosniff",
+		...filePath.toLowerCase().endsWith(".svg") ? { "Content-Security-Policy": SVG_CONTENT_SECURITY_POLICY } : {}
+	};
+}
 function resolveStaticContentType(filePath, path) {
 	return STATIC_CONTENT_TYPES[path.extname(filePath).toLowerCase()] ?? "application/octet-stream";
 }
@@ -2174,11 +2214,13 @@ const attachmentsRouteLayer = effect_unstable_http.HttpRouter.add("GET", `${ATTA
 		relativePath: normalizedRelativePath
 	});
 	if (!filePath) return effect_unstable_http.HttpServerResponse.text(isIdLookup ? "Not Found" : "Invalid attachment path", { status: isIdLookup ? 404 : 400 });
-	const fileInfo = yield* (yield* effect.FileSystem.FileSystem).stat(filePath).pipe(effect.Effect.catch(() => effect.Effect.succeed(null)));
+	const fileSystem = yield* effect.FileSystem.FileSystem;
+	const path = yield* effect.Path.Path;
+	const fileInfo = yield* fileSystem.stat(filePath).pipe(effect.Effect.catch(() => effect.Effect.succeed(null)));
 	if (!fileInfo || fileInfo.type !== "File") return effect_unstable_http.HttpServerResponse.text("Not Found", { status: 404 });
 	return yield* effect_unstable_http.HttpServerResponse.file(filePath, {
 		status: 200,
-		headers: { "Cache-Control": "public, max-age=31536000, immutable" }
+		headers: userAssetResponseHeaders(filePath, path)
 	}).pipe(effect.Effect.catch(() => effect.Effect.succeed(effect_unstable_http.HttpServerResponse.text("Internal Server Error", { status: 500 }))));
 }).pipe(effect.Effect.catchTag("AuthError", respondToAuthError)));
 const projectFaviconRouteLayer = effect_unstable_http.HttpRouter.add("GET", "/api/project-favicon", effect.Effect.gen(function* () {
@@ -2192,11 +2234,11 @@ const projectFaviconRouteLayer = effect_unstable_http.HttpRouter.add("GET", "/ap
 	if (!faviconFilePath) return effect_unstable_http.HttpServerResponse.text(FALLBACK_PROJECT_FAVICON_SVG, {
 		status: 200,
 		contentType: "image/svg+xml",
-		headers: { "Cache-Control": PROJECT_FAVICON_CACHE_CONTROL }
+		headers: inlineImageResponseHeaders("fallback.svg")
 	});
 	return yield* effect_unstable_http.HttpServerResponse.file(faviconFilePath, {
 		status: 200,
-		headers: { "Cache-Control": PROJECT_FAVICON_CACHE_CONTROL }
+		headers: inlineImageResponseHeaders(faviconFilePath)
 	}).pipe(effect.Effect.catch(() => effect.Effect.succeed(effect_unstable_http.HttpServerResponse.text("Internal Server Error", { status: 500 }))));
 }).pipe(effect.Effect.catchTag("AuthError", respondToAuthError)));
 const AvatarFormSchema = effect_Schema.Struct({ avatar: effect_unstable_http.Multipart.SingleFileSchema });
@@ -12810,26 +12852,26 @@ const make$12 = effect.Effect.fn("makeSourceControlProviderRegistry")(function*
 	const azureDevOpsCli = yield* AzureDevOpsCli;
 	const fileSystem = yield* effect.FileSystem.FileSystem;
 	const github = yield* makeLazyProvider("github", effect.Effect.tryPromise({
-		try: () => Promise.resolve().then(() => require("./GitHubSourceControlProvider-3ofb6HsF.cjs")),
+		try: () => Promise.resolve().then(() => require("./GitHubSourceControlProvider-CrYNFu8S.cjs")),
 		catch: (cause) => providerLoadError("github", cause)
 	}).pipe(effect.Effect.flatMap((module) => module.make()), effect.Effect.provideService(GitHubCli, githubCli), effect.Effect.provideService(effect.FileSystem.FileSystem, fileSystem)));
 	const gitlab = yield* makeLazyProvider("gitlab", effect.Effect.tryPromise({
-		try: () => Promise.resolve().then(() => require("./GitLabSourceControlProvider-DkupZH5G.cjs")),
+		try: () => Promise.resolve().then(() => require("./GitLabSourceControlProvider-jbX5M34A.cjs")),
 		catch: (cause) => providerLoadError("gitlab", cause)
 	}).pipe(effect.Effect.flatMap((module) => module.make()), effect.Effect.provideService(GitLabCli, gitlabCli)));
 	const bitbucket = yield* makeLazyProvider("bitbucket", effect.Effect.tryPromise({
-		try: () => Promise.resolve().then(() => require("./BitbucketSourceControlProvider-BWzNM0jW.cjs")),
+		try: () => Promise.resolve().then(() => require("./BitbucketSourceControlProvider-3VHGKSl1.cjs")),
 		catch: (cause) => providerLoadError("bitbucket", cause)
 	}).pipe(effect.Effect.flatMap((module) => module.make()), effect.Effect.provideService(BitbucketApi, bitbucketApi)), {
 		searchRepositories: true,
 		cloneAuthentication: true
 	});
 	const forgejo = yield* makeLazyProvider("forgejo", effect.Effect.tryPromise({
-		try: () => Promise.resolve().then(() => require("./ForgejoSourceControlProvider-szJ-dvsD.cjs")),
+		try: () => Promise.resolve().then(() => require("./ForgejoSourceControlProvider-CJLksvL_.cjs")),
 		catch: (cause) => providerLoadError("forgejo", cause)
 	}).pipe(effect.Effect.flatMap((module) => module.make()), effect.Effect.provideService(ForgejoApi, forgejoApi)));
 	const azureDevOps = yield* makeLazyProvider("azure-devops", effect.Effect.tryPromise({
-		try: () => Promise.resolve().then(() => require("./AzureDevOpsSourceControlProvider-BtezW57t.cjs")),
+		try: () => Promise.resolve().then(() => require("./AzureDevOpsSourceControlProvider-Dyu8KQ_S.cjs")),
 		catch: (cause) => providerLoadError("azure-devops", cause)
 	}).pipe(effect.Effect.flatMap((module) => module.make()), effect.Effect.provideService(AzureDevOpsCli, azureDevOpsCli)));
 	const bitbucketDiscovery = require_SourceControlProviderDiscoveryCatalog.makeBitbucketDiscovery(bitbucketApi);
@@ -31484,7 +31526,10 @@ const makeCodexAppServerPatchedProtocol = effect_Effect.fn("makeCodexAppServerPa
 	const incomingRequests = yield* options.onRequest ? effect_Queue.sliding(PROTOCOL_QUEUE_CAPACITY) : effect_Queue.bounded(PROTOCOL_QUEUE_CAPACITY);
 	const pending = yield* effect_Ref.make(/* @__PURE__ */ new Map());
 	const nextRequestId = yield* effect_Ref.make(1);
-	const remainder = yield* effect_Ref.make("");
+	const remainder = {
+		fragments: [],
+		byteLength: 0
+	};
 	const terminationHandled = yield* effect_Ref.make(false);
 	const logProtocol = (event) => {
 		if (event.direction === "incoming" && !options.logIncoming) return effect_Effect.void;
@@ -31583,19 +31628,39 @@ const makeCodexAppServerPatchedProtocol = effect_Effect.fn("makeCodexAppServerPa
 			}
 		})), effect_Effect.flatMap(routeMessage));
 	};
-	yield* options.stdio.stdin.pipe(effect_Stream.decodeText(), effect_Stream.runForEach((chunk) => effect_Ref.modify(remainder, (current) => {
-		const lines = (current + chunk).split("\n");
-		const nextRemainder = lines.pop() ?? "";
-		return [{
-			lines: lines.map((line) => line.replace(/\r$/, "")),
-			remainderBytes: new TextEncoder().encode(nextRemainder).byteLength
-		}, nextRemainder];
-	}).pipe(effect_Effect.flatMap(({ lines, remainderBytes }) => remainderBytes > PROTOCOL_MAX_FRAME_BYTES ? effect_Effect.fail(new CodexAppServerProtocolOverloadedError({
-		queue: "incoming-frame-bytes",
-		capacity: PROTOCOL_MAX_FRAME_BYTES
-	})) : effect_Effect.forEach(lines, handleLine, { discard: true })))), effect_Effect.matchEffect({
+	yield* options.stdio.stdin.pipe(effect_Stream.decodeText(), effect_Stream.runForEach((chunk) => effect_Effect.gen(function* () {
+		const lines = [];
+		let start = 0;
+		for (let newline = chunk.indexOf("\n"); newline !== -1; newline = chunk.indexOf("\n", start)) {
+			const fragment = chunk.slice(start, newline);
+			if (remainder.byteLength + new TextEncoder().encode(fragment).byteLength > PROTOCOL_MAX_FRAME_BYTES) return yield* effect_Effect.fail(new CodexAppServerProtocolOverloadedError({
+				queue: "incoming-frame-bytes",
+				capacity: PROTOCOL_MAX_FRAME_BYTES
+			}));
+			remainder.fragments.push(fragment);
+			lines.push(remainder.fragments.join("").replace(/\r$/, ""));
+			remainder.fragments.length = 0;
+			remainder.byteLength = 0;
+			start = newline + 1;
+		}
+		if (start < chunk.length) {
+			const fragment = chunk.slice(start);
+			remainder.byteLength += new TextEncoder().encode(fragment).byteLength;
+			if (remainder.byteLength > PROTOCOL_MAX_FRAME_BYTES) return yield* effect_Effect.fail(new CodexAppServerProtocolOverloadedError({
+				queue: "incoming-frame-bytes",
+				capacity: PROTOCOL_MAX_FRAME_BYTES
+			}));
+			remainder.fragments.push(fragment);
+		}
+		yield* effect_Effect.forEach(lines, handleLine, { discard: true });
+	})), effect_Effect.matchEffect({
 		onFailure: (error) => handleTermination(() => effect_Effect.succeed(normalizeProtocolError(error, "Codex App Server input stream failed"))),
-		onSuccess: () => effect_Ref.get(remainder).pipe(effect_Effect.flatMap((line) => line.trim().length === 0 ? effect_Effect.void : handleLine(line)), effect_Effect.matchEffect({
+		onSuccess: () => effect_Effect.sync(() => {
+			const line = remainder.fragments.join("");
+			remainder.fragments.length = 0;
+			remainder.byteLength = 0;
+			return line;
+		}).pipe(effect_Effect.flatMap((line) => line.trim().length === 0 ? effect_Effect.void : handleLine(line)), effect_Effect.matchEffect({
 			onFailure: (error) => handleTermination(() => effect_Effect.succeed(error)),
 			onSuccess: () => handleTermination(() => options.terminationError ?? effect_Effect.succeed(new CodexAppServerTransportError({
 				detail: "Codex App Server input stream ended",
@@ -33260,7 +33325,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.CodexSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.CodexSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./CodexDriver-CFxwJNXx.cjs")),
+			try: () => Promise.resolve().then(() => require("./CodexDriver-3TZPgrGk.cjs")),
 			catch: (cause) => driverImportError(codexDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ CodexDriver }) => CodexDriver.create(input)))
 	},
@@ -33274,7 +33339,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.ClaudeSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.ClaudeSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./ClaudeDriver-BTvdJvam.cjs")),
+			try: () => Promise.resolve().then(() => require("./ClaudeDriver-CBCy0_WX.cjs")),
 			catch: (cause) => driverImportError(claudeDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ ClaudeDriver }) => ClaudeDriver.create(input)))
 	},
@@ -33288,7 +33353,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.CopilotSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.CopilotSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./CopilotDriver-B8J_ovCX.cjs")),
+			try: () => Promise.resolve().then(() => require("./CopilotDriver-C7a8IhyK.cjs")),
 			catch: (cause) => driverImportError(copilotDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ CopilotDriver }) => CopilotDriver.create(input)))
 	},
@@ -33302,7 +33367,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.CursorSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.CursorSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./CursorDriver-zlKHPy1_.cjs")),
+			try: () => Promise.resolve().then(() => require("./CursorDriver-uNsDetA3.cjs")),
 			catch: (cause) => driverImportError(cursorDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ CursorDriver }) => CursorDriver.create(input)))
 	},
@@ -33316,7 +33381,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.GrokSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.GrokSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./GrokDriver-CTUNclwp.cjs")),
+			try: () => Promise.resolve().then(() => require("./GrokDriver-BJ00ZiYg.cjs")),
 			catch: (cause) => driverImportError(grokDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ GrokDriver }) => GrokDriver.create(input)))
 	},
@@ -33330,7 +33395,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.OpenCodeSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.OpenCodeSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./OpenCodeDriver-pXM8bSct.cjs")),
+			try: () => Promise.resolve().then(() => require("./OpenCodeDriver-BTxd2Q3Q.cjs")),
 			catch: (cause) => driverImportError(openCodeDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ OpenCodeDriver }) => OpenCodeDriver.create(input)))
 	}
@@ -34045,7 +34110,7 @@ const scopedSafeTeardown = (label) => (effect$28) => effect.Effect.gen(function*
 });
 //#endregion
 //#region package.json
-var version$1 = "0.1.14";
+var version$1 = "0.1.16";
 //#endregion
 //#region src/provider/Layers/CodexProvider.ts
 const PROVIDER_PROBE_TIMEOUT_MS = 8e3;
@@ -41428,17 +41493,40 @@ const makeGitManager = effect.Effect.fn("makeGitManager")(function* () {
 		timeToLive: (exit) => effect.Exit.isSuccess(exit) ? STATUS_RESULT_CACHE_TTL : effect.Duration.zero
 	});
 	const invalidateLocalStatusResultCache = (cwd) => normalizeStatusCacheKey(cwd).pipe(effect.Effect.flatMap((cacheKey) => effect.Cache.invalidate(localStatusResultCache, cacheKey)));
+	const probeBranchPublished = effect.Effect.fn("probeBranchPublished")(function* (cwd, branch, upstreamRef) {
+		if (upstreamRef !== null) return true;
+		return yield* effect.Effect.gen(function* () {
+			const remotes = (yield* gitCore.execute({
+				operation: "GitManager.probeBranchPublished.remotes",
+				cwd,
+				args: ["remote"]
+			})).stdout.split("\n").map((remote) => remote.trim()).filter((remote) => remote.length > 0);
+			if (remotes.length === 0) return null;
+			const refsResult = yield* gitCore.execute({
+				operation: "GitManager.probeBranchPublished.remoteRefs",
+				cwd,
+				args: [
+					"for-each-ref",
+					"--format=%(refname:short)",
+					"refs/remotes"
+				]
+			});
+			const remoteRefs = new Set(refsResult.stdout.split("\n").map((ref) => ref.trim()).filter((ref) => ref.length > 0));
+			return remotes.some((remote) => remoteRefs.has(`${remote}/${branch}`));
+		}).pipe(effect.Effect.catch(() => effect.Effect.succeed(null)));
+	});
 	const readRemoteStatus = effect.Effect.fn("readRemoteStatus")(function* (cwd) {
 		const details = yield* gitCore.statusDetails(cwd).pipe(effect.Effect.catchIf(isNotGitRepositoryError, () => effect.Effect.succeed(null)));
 		if (details === null || !details.isRepo) return null;
-		const pr = details.branch !== null ? yield* findLatestPr(cwd, {
+		const shouldQueryPullRequests = details.branch === null ? false : (yield* probeBranchPublished(cwd, details.branch, details.upstreamRef)) ?? true;
+		const pr = details.branch !== null && shouldQueryPullRequests ? yield* findLatestPr(cwd, {
 			branch: details.branch,
 			upstreamRef: details.upstreamRef
 		}).pipe(effect.Effect.map((latest) => {
 			if (!latest) return null;
 			if (details.isDefaultBranch && latest.state !== "open") return null;
 			return toStatusPr(latest);
-		}), effect.Effect.catch(() => effect.Effect.succeed(null))) : null;
+		})) : null;
 		return {
 			hasUpstream: details.hasUpstream,
 			aheadCount: details.aheadCount,
@@ -77113,6 +77201,7 @@ const ProviderSessionReaperLive = makeProviderSessionReaperLive();
 const OPENCODE_SERVER_READY_PREFIX = "opencode server listening";
 const DEFAULT_OPENCODE_SERVER_TIMEOUT_MS = 5e3;
 const DEFAULT_HOSTNAME = "127.0.0.1";
+const MINIMUM_OPENCODE_VERSION = "1.14.19";
 const OPENCODE_RUNTIME_ERROR_TAG = "OpenCodeRuntimeError";
 var OpenCodeRuntimeError = class extends effect.Data.TaggedError(OPENCODE_RUNTIME_ERROR_TAG) {
 	static is = (u) => effect.Predicate.isTagged(u, OPENCODE_RUNTIME_ERROR_TAG);
@@ -77138,6 +77227,22 @@ const runOpenCodeSdk = (operation, fn) => effect.Effect.tryPromise({
 		cause
 	})
 }).pipe(effect.Effect.withSpan(`opencode.${operation}`));
+const verifyOpenCodeServerVersion = (client) => runOpenCodeSdk("global.health", (signal) => client.global.health({ signal })).pipe(effect.Effect.timeoutOption("5 seconds"), effect.Effect.flatMap((result) => {
+	if (effect.Option.isNone(result)) return effect.Effect.fail(new OpenCodeRuntimeError({
+		operation: "global.health",
+		detail: "Timed out while checking the OpenCode server version."
+	}));
+	const health = result.value.data;
+	if (!health?.healthy || typeof health.version !== "string" || health.version.length === 0) return effect.Effect.fail(new OpenCodeRuntimeError({
+		operation: "global.health",
+		detail: "OpenCode server health check returned an invalid response."
+	}));
+	if (compareCliVersions(health.version, "1.14.19") < 0) return effect.Effect.fail(new OpenCodeRuntimeError({
+		operation: "global.health",
+		detail: `OpenCode v${health.version} is too old. Upgrade to v${MINIMUM_OPENCODE_VERSION} or newer.`
+	}));
+	return effect.Effect.succeed(health.version);
+}));
 let openCodeSdkModulePromise;
 const loadOpenCodeSdkModule = () => effect.Effect.tryPromise({
 	try: async () => {
@@ -77155,6 +77260,11 @@ const loadOpenCodeSdkModule = () => effect.Effect.tryPromise({
 		cause
 	})
 }).pipe(effect.Effect.withSpan("opencode.sdk.load"));
+function resolveOpenCodeServerPassword(input) {
+	if (input.configuredPassword !== void 0) return input.configuredPassword;
+	if (input.external) return;
+	return input.environment === void 0 ? process.env.OPENCODE_SERVER_PASSWORD : input.environment.OPENCODE_SERVER_PASSWORD;
+}
 function parseServerUrlFromOutput(output) {
 	for (const line of output.split("\n")) {
 		if (!line.startsWith(OPENCODE_SERVER_READY_PREFIX)) continue;
@@ -77304,11 +77414,17 @@ const makeOpenCodeRuntime = effect.Effect.gen(function* () {
 			`--hostname=${hostname}`,
 			`--port=${port}`
 		];
+		const serverPassword = resolveOpenCodeServerPassword({
+			external: false,
+			...input.serverPassword !== void 0 ? { configuredPassword: input.serverPassword } : {},
+			...input.environment !== void 0 ? { environment: input.environment } : {}
+		});
 		const child = yield* spawner.spawn(effect_unstable_process.ChildProcess.make(input.binaryPath, args, {
 			detached: process.platform !== "win32",
 			shell: process.platform === "win32",
 			env: {
 				...input.environment ?? process.env,
+				...serverPassword !== void 0 ? { OPENCODE_SERVER_PASSWORD: serverPassword } : {},
 				OPENCODE_CONFIG_CONTENT: JSON.stringify({})
 			}
 		})).pipe(effect.Effect.provideService(effect.Scope.Scope, runtimeScope), effect.Effect.mapError((cause) => new OpenCodeRuntimeError({
@@ -77371,24 +77487,34 @@ const makeOpenCodeRuntime = effect.Effect.gen(function* () {
 		}
 		return {
 			url: readyOption.value,
+			...serverPassword !== void 0 ? { serverPassword } : {},
 			exitCode: child.exitCode.pipe(effect.Effect.map(Number), effect.Effect.orElseSucceed(() => 0))
 		};
 	});
 	const connectToOpenCodeServer = (input) => {
 		const serverUrl = input.serverUrl?.trim();
-		if (serverUrl) return effect.Effect.succeed({
-			url: serverUrl,
-			exitCode: null,
-			external: true
-		});
+		if (serverUrl) {
+			const serverPassword = resolveOpenCodeServerPassword({
+				external: true,
+				...input.serverPassword !== void 0 ? { configuredPassword: input.serverPassword } : {}
+			});
+			return effect.Effect.succeed({
+				url: serverUrl,
+				...serverPassword !== void 0 ? { serverPassword } : {},
+				exitCode: null,
+				external: true
+			});
+		}
 		return startOpenCodeServerProcess({
 			binaryPath: input.binaryPath,
+			...input.serverPassword !== void 0 ? { serverPassword: input.serverPassword } : {},
 			...input.environment !== void 0 ? { environment: input.environment } : {},
 			...input.port !== void 0 ? { port: input.port } : {},
 			...input.hostname !== void 0 ? { hostname: input.hostname } : {},
 			...input.timeoutMs !== void 0 ? { timeoutMs: input.timeoutMs } : {}
 		}).pipe(effect.Effect.map((server) => ({
 			url: server.url,
+			...server.serverPassword !== void 0 ? { serverPassword: server.serverPassword } : {},
 			exitCode: server.exitCode,
 			external: false
 		})));
@@ -77399,11 +77525,11 @@ const makeOpenCodeRuntime = effect.Effect.gen(function* () {
 		...input.serverPassword ? { headers: { Authorization: `Basic ${Buffer.from(`opencode:${input.serverPassword}`, "utf8").toString("base64")}` } } : {},
 		throwOnError: true
 	})));
-	const loadProviders = (client) => runOpenCodeSdk("provider.list", () => client.provider.list()).pipe(effect.Effect.filterMapOrFail((list) => list.data ? effect.Result.succeed(list.data) : effect.Result.fail(new OpenCodeRuntimeError({
+	const loadProviders = (client) => runOpenCodeSdk("provider.list", (signal) => client.provider.list({}, { signal })).pipe(effect.Effect.filterMapOrFail((list) => list.data ? effect.Result.succeed(list.data) : effect.Result.fail(new OpenCodeRuntimeError({
 		operation: "provider.list",
 		detail: "OpenCode provider list was empty."
 	})), (result) => result));
-	const loadAgents = (client) => runOpenCodeSdk("app.agents", () => client.app.agents()).pipe(effect.Effect.map((result) => result.data ?? []));
+	const loadAgents = (client) => runOpenCodeSdk("app.agents", (signal) => client.app.agents({}, { signal })).pipe(effect.Effect.map((result) => result.data ?? []));
 	const loadOpenCodeInventory = (client) => effect.Effect.all([loadProviders(client), loadAgents(client)], { concurrency: "unbounded" }).pipe(effect.Effect.map(([providerList, agents]) => ({
 		providerList,
 		agents
@@ -82021,7 +82147,10 @@ const make$2 = effect.Effect.gen(function* () {
 				message: input.messageText,
 				...attachments.length > 0 ? { attachments } : {},
 				modelSelection
-			});
+			}).pipe(effect.Effect.retry({
+				times: 2,
+				schedule: effect.Schedule.exponential("2 seconds")
+			}));
 			if (!generated) return;
 			const thread = yield* resolveThread(input.threadId);
 			if (!thread) return;
@@ -85955,7 +86084,7 @@ function normalizeSpanStatus(record) {
 function spanFailureMessage(record) {
 	if (record.type === "effect-span") {
 		const exit = record.exit;
-		if (exit && exit._tag !== "Success") return truncateMessage(exit.cause);
+		if (exit?._tag === "Failure") return truncateMessage(exit.cause);
 		return;
 	}
 	if (record.type === "otlp-span" && record.status?.message) return truncateMessage(record.status.message);
@@ -98314,6 +98443,11 @@ const ReadFromSequenceRequestSchema = effect.Schema.Struct({
 	sequenceExclusive: require_collectUint8StreamText.NonNegativeInt,
 	limit: effect.Schema.Number
 });
+const ReadThroughSequenceRequestSchema = effect.Schema.Struct({
+	sequenceExclusive: require_collectUint8StreamText.NonNegativeInt,
+	sequenceInclusive: require_collectUint8StreamText.NonNegativeInt,
+	limit: effect.Schema.Number
+});
 const DEFAULT_READ_FROM_SEQUENCE_LIMIT = 1e3;
 const READ_PAGE_SIZE = 500;
 function inferActorKind(event) {
@@ -98406,6 +98540,34 @@ const makeEventStore = effect.Effect.gen(function* () {
         LIMIT ${request.limit}
       `
 	});
+	const readEventRowsThroughSequence = effect_unstable_sql_SqlSchema.findAll({
+		Request: ReadThroughSequenceRequestSchema,
+		Result: OrchestrationEventPersistedRowSchema,
+		execute: (request) => sql`
+        SELECT
+          sequence,
+          event_id AS "eventId",
+          event_type AS "type",
+          aggregate_kind AS "aggregateKind",
+          stream_id AS "aggregateId",
+          occurred_at AS "occurredAt",
+          command_id AS "commandId",
+          causation_event_id AS "causationEventId",
+          correlation_id AS "correlationId",
+          payload_json AS "payload",
+          metadata_json AS "metadata"
+        FROM orchestration_events
+        WHERE sequence > ${request.sequenceExclusive}
+          AND sequence <= ${request.sequenceInclusive}
+        ORDER BY sequence ASC
+        LIMIT ${request.limit}
+      `
+	});
+	const readLatestSequence = effect_unstable_sql_SqlSchema.findOne({
+		Request: effect.Schema.Void,
+		Result: effect.Schema.Struct({ sequence: effect.Schema.NullOr(require_collectUint8StreamText.NonNegativeInt) }),
+		execute: () => sql`SELECT MAX(sequence) AS "sequence" FROM orchestration_events`
+	});
 	const readRecentEventRows = effect_unstable_sql_SqlSchema.findAll({
 		Request: effect.Schema.Struct({
 			since: require_collectUint8StreamText.IsoDateTime,
@@ -98465,6 +98627,22 @@ const makeEventStore = effect.Effect.gen(function* () {
 		}));
 		return readPage(sequenceExclusive, normalizedLimit);
 	};
+	const readThroughSequence = (sequenceExclusive, sequenceInclusive) => {
+		const normalizedStart = Math.max(0, Math.floor(sequenceExclusive));
+		const normalizedEnd = Math.max(0, Math.floor(sequenceInclusive));
+		if (normalizedEnd <= normalizedStart) return effect.Stream.empty;
+		const readPage = (cursor) => effect.Stream.fromEffect(readEventRowsThroughSequence({
+			sequenceExclusive: cursor,
+			sequenceInclusive: normalizedEnd,
+			limit: READ_PAGE_SIZE
+		}).pipe(effect.Effect.mapError(toPersistenceSqlOrDecodeError$2("OrchestrationEventStore.readThroughSequence:query", "OrchestrationEventStore.readThroughSequence:decodeRows")), effect.Effect.flatMap((rows) => effect.Effect.forEach(rows, (row) => decodeEvent(row).pipe(effect.Effect.mapError(toPersistenceDecodeError("OrchestrationEventStore.readThroughSequence:rowToEvent"))))))).pipe(effect.Stream.flatMap((events) => {
+			if (events.length === 0) return effect.Stream.empty;
+			const nextCursor = events[events.length - 1].sequence;
+			return effect.Stream.concat(effect.Stream.fromIterable(events), nextCursor < normalizedEnd ? readPage(nextCursor) : effect.Stream.empty);
+		}));
+		return readPage(normalizedStart);
+	};
+	const latestSequence = readLatestSequence(void 0).pipe(effect.Effect.map((row) => row.sequence ?? 0), effect.Effect.mapError(toPersistenceSqlOrDecodeError$2("OrchestrationEventStore.latestSequence:query", "OrchestrationEventStore.latestSequence:decodeRow")));
 	const readPage = (sequenceExclusive, limit) => {
 		const normalizedLimit = Math.max(0, Math.floor(limit));
 		const normalizedSequenceExclusive = Math.max(0, Math.floor(sequenceExclusive));
@@ -98492,6 +98670,8 @@ const makeEventStore = effect.Effect.gen(function* () {
 		readPage,
 		readRecent,
 		readFromSequence,
+		readThroughSequence,
+		latestSequence,
 		readAll: () => readFromSequence(0, Number.MAX_SAFE_INTEGER),
 		hasEventAfter
 	};
@@ -103381,7 +103561,8 @@ const makeOrchestrationProjectionPipeline = effect.Effect.fn("makeOrchestrationP
 		const lastAppliedByProjector = new Map(projectors.map((projector) => [projector.name, 0]));
 		for (const row of stateRows) if (lastAppliedByProjector.has(row.projector)) lastAppliedByProjector.set(row.projector, row.lastAppliedSequence);
 		const replayFromSequence = Math.min(...lastAppliedByProjector.values());
-		yield* effect.Stream.runForEach(eventStore.readFromSequence(replayFromSequence, Number.MAX_SAFE_INTEGER), (event) => effect.Effect.gen(function* () {
+		const replayThroughSequence = yield* eventStore.latestSequence;
+		yield* effect.Stream.runForEach(eventStore.readThroughSequence(replayFromSequence, replayThroughSequence), (event) => effect.Effect.gen(function* () {
 			const projectorsToAdvance = projectors.filter((projector) => event.sequence > (lastAppliedByProjector.get(projector.name) ?? 0));
 			if (projectorsToAdvance.length === 0) return;
 			const postCommit = yield* sql.withTransaction(applyProjectorsForEvent(event, projectorsToAdvance));
@@ -107316,6 +107497,7 @@ exports.GITHUB_PULL_REQUEST_LIST_JSON_FIELDS = GITHUB_PULL_REQUEST_LIST_JSON_FIE
 exports.GitHubCli = GitHubCli;
 exports.GitHubCliError = GitHubCliError;
 exports.GitLabCli = GitLabCli;
+exports.MINIMUM_OPENCODE_VERSION = MINIMUM_OPENCODE_VERSION;
 exports.OpenCodeRuntime = OpenCodeRuntime;
 exports.OpenCodeRuntimeError = OpenCodeRuntimeError;
 exports.ProviderAdapterProcessError = ProviderAdapterProcessError;
@@ -107455,4 +107637,5 @@ exports.toOpenCodeFileParts = toOpenCodeFileParts;
 exports.toOpenCodePermissionReply = toOpenCodePermissionReply;
 exports.toOpenCodeQuestionAnswers = toOpenCodeQuestionAnswers;
 exports.validateRankInboxThreadsResult = validateRankInboxThreadsResult;
+exports.verifyOpenCodeServerVersion = verifyOpenCodeServerVersion;
 exports.withoutStatusCheckRollupJsonField = withoutStatusCheckRollupJsonField;