ryco-cli 0.1.22 → 0.1.24

package/dist/bin.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { $ as AgentControlExternalCapabilitiesResult, $a as ProviderInstanceId, $i as ThreadMessageSentPayload, $n as UsageReadError, $o as CheckpointRef, $r as OrchestrationActorKind, $t as AgentControlMcpReadDeviceStateResult, A as AGENT_CONTROL_EXTERNAL_MCP_TOOL_NAMES, Aa as WORK_ITEM_DETAIL_COMMENT_BODY_MAX_BYTES, Ai as PROVIDER_SEND_TURN_MAX_FILE_BYTES, An as AtlassianCapability, Ao as RELAY_AUTHENTICATION_DEADLINE_MS, Ar as CHAT_ATTACHMENT_READ_CHUNK_BYTES, At as AgentControlMcpOrchestrationEventsResult, B as AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_DEFAULT, Bi as ProjectionPendingApprovalStatus, Bn as McpInventoryTool, Bo as RelayEffectiveRole, Br as ContextHandoffActivityPayload, Bt as AgentControlMcpProposeDeviceOpenUrlInput, C as AGENT_CONTROL_AUTOMATION_MIN_INTERVAL_MS, Ca as WorktreeSourceControlStateUpdatedPayload$1, Ci as OrchestrationStopBackgroundTaskError, Cn as DEVICE_SWIPE_DURATION_MAX_MS, Co as NATIVE_E2EE_MAX_GRANT_KEYS, Cr as ProviderRespondToUserInputInput, Ct as AgentControlMcpListDevicesResult, D as AGENT_CONTROL_ERROR_CODES, Da as WorktreeId, Di as OrchestrationThreadHistoryError, Dn as ThreadPriorityBatchSnapshot, Do as HubEnrollmentStartResult, Dr as ProviderStopBackgroundTaskInput, Dt as AgentControlMcpListThreadsResult, E as AGENT_CONTROL_DEVICE_ACTION_KINDS, Ea as Worktree, Ei as OrchestrationThreadHistoryCursor, En as DeviceUdid, Eo as HubEnrollmentCeremonyDetail, Er as ProviderSteerTurnInput, Et as AgentControlMcpListThreadsInput, F as AGENT_CONTROL_MCP_OPERATIONAL_RANGE_MAX_MS, Fa as SourceControlRepositoryError, Fi as ProjectDeletedPayload$1, Fn as GitCommandError, Fo as RELAY_MAX_RETRY_AFTER_MS, Fr as CONTEXT_HANDOFF_MAX_INPUT_CHARS, Ft as AgentControlMcpProposeDeviceBootInput, G as AgentControlActionKind, Ga as ThreadPriorityFingerprint, Gi as ThreadActivityAppendedPayload$1, Gn as McpServer, Go as AuthCreatePairingCredentialInput, Gr as ContextHandoffMode, Gt as AgentControlMcpProposeProjectUpdateInput, H as AGENT_CONTROL_RISK_TAGS, Ha as VcsUnsupportedOperationError, Hi as ProviderInteractionMode, Hn as McpOauthLoginResult, Ho as RelayProtocolVersion, Hr as ContextHandoffDigest, Ht as AgentControlMcpProposeDeviceShutdownInput, I as AGENT_CONTROL_MCP_OPERATIONAL_RETENTION_MS, Ii as ProjectMetaUpdatedPayload$1, In as GitManagerError, Io as RELAY_MAX_RPC_MESSAGE_BYTES, Ir as CONTEXT_HANDOFF_WS_METHODS, It as AgentControlMcpProposeDeviceDetachInput, J as AgentControlAutomationDefinition, Ja as DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER, Ji as ThreadCreatedPayload$1, Jn as McpServerWritableConfig, Jo as AuthRpcError, Jr as DEFAULT_PROVIDER_INTERACTION_MODE, Jt as AgentControlMcpReadAutomationInput, K as AgentControlActionPlan, Ki as ThreadArchivedPayload$1, Kn as McpServerConfig, Ko as AuthRevokeClientSessionInput, Kr as DEFAULT_AGENT_TOKEN_MODE, Kt as AgentControlMcpProposeSettingsChangeInput, L as AGENT_CONTROL_MCP_READ_THREAD_TEXT_BUDGET_CHARS, La as VcsDriverKind, Li as ProjectMetadataDir, Ln as TextGenerationError, Lo as RELAY_SUPPORTED_VERSION_RANGE, Lr as ChatAttachment, Lt as AgentControlMcpProposeDeviceInputInput, M as AGENT_CONTROL_EXTERNAL_PROPOSAL_TTL_MS, Ma as WorkItemProviderKind, Mi as PROVIDER_SEND_TURN_MAX_INPUT_CHARS, Mn as AtlassianConnectionKind, Mo as RELAY_MAX_CONTROL_FRAME_BYTES, Mr as CONTEXT_HANDOFF_ERROR_MAX_CHARS, Mt as AgentControlMcpProposeAutomationCreateInput, N as AGENT_CONTROL_MCP_AUTOMATION_LIST_PROMPT_MAX_CHARS, Ni as ProjectAvatarSetPayload$1, Nn as AtlassianConnectionStatus, Nr as CONTEXT_HANDOFF_INSPECTION_CHUNK_MAX_BYTES, Nt as AgentControlMcpProposeAutomationUpdateInput, O as AGENT_CONTROL_EXTERNAL_CREDENTIAL_AUDIENCE, Oa as ThreadGoal, Oi as OrchestrationWorktreeShell, On as ThreadPriorityCandidateRanking, Oo as HubIdentitySummary, Or as ProviderStopSessionInput, Ot as AgentControlMcpMutationResult, P as AGENT_CONTROL_MCP_MESSAGE_TEXT_MAX_CHARS, Pa as SourceControlProviderError, Pi as ProjectCreatedPayload$1, Pn as AtlassianProduct, Po as RELAY_MAX_DATA_FRAME_BYTES, Pt as AgentControlMcpProposeDeviceAttachInput, Q as AgentControlCapability, Qa as ProviderDriverKind, Qi as ThreadInteractionModeSetPayload$1, Qn as OpinionatedPluginError, Qo as AuthSessionId, Qr as ORCHESTRATION_WS_METHODS, Qt as AgentControlMcpReadDeviceStateInput, R as AGENT_CONTROL_MCP_TOOLS, Ri as ProjectScript, Rn as McpInventoryResource, Ro as RelayCapability, Rr as ChatAttachmentReadError, Rt as AgentControlMcpProposeDeviceInstallInput, S as AGENT_CONTROL_AUTOMATION_MAX_HORIZON_MS, Sa as WorktreeRestoredPayload$1, Si as OrchestrationShellSnapshot, Sn as DEVICE_FRAME_MAGIC, So as HubDeviceGrantClaims, Sr as ProviderRespondToRequestInput, St as AgentControlMcpListDevicesInput, T as AGENT_CONTROL_CAPABILITIES, Ta as StatusBucket, Ti as OrchestrationThreadActivityTone, Tn as DeviceRpcError, To as HubConnectorStatus, Tr as ProviderSessionStartInput, Tt as AgentControlMcpListProjectsResult, U as AGENT_CONTROL_TERMINAL_PROPOSAL_STATUSES, Ua as ThreadPriorityBatchId, Ui as ProviderSessionRuntimeStatus, Un as McpProviderCapabilities, Uo as AuthBootstrapInput, Ur as ContextHandoffEndpointSnapshot, Ut as AgentControlMcpProposeProjectCreateInput, V as AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_MAX, Vn as McpListServersResult, Vo as RelayFrame, Vr as ContextHandoffAppliedBudget, Vt as AgentControlMcpProposeDeviceRecordingInput, W as AGENT_CONTROL_WS_METHODS, Wa as ThreadPriorityCandidateId, Wi as RuntimeMode, Wn as McpProviderSupport, Wo as AuthClientMetadataDeviceType, Wr as ContextHandoffInspectionError, Wt as AgentControlMcpProposeProjectRemoveInput, X as AgentControlAutomationRun, Xa as MODEL_SLUG_ALIASES_BY_PROVIDER, Xi as ThreadGoalClearedPayload$1, Xn as McpWorkspace, Xo as AtlassianConnectionId, Xr as ModelContextWindowMetadata, Xt as AgentControlMcpReadControlRequestInput, Y as AgentControlAutomationId, Ya as DEFAULT_MODEL, Yi as ThreadDeletedPayload$1, Yn as McpSettingsError, Yo as ApprovalRequestId, Yr as FileAttachmentCreateUploadUrlError, Yt as AgentControlMcpReadAutomationResult, Z as AgentControlAutomationRunId, Za as ModelCapabilities, Zi as ThreadGoalUpdatedPayload$1, Zn as McpWorkspaceId, Zo as AtlassianResourceId, Zr as ModelSelection, Zt as AgentControlMcpReadDeviceContentInput, _ as ProjectReadFileError, _a as WorktreeArchivedPayload$1, _i as OrchestrationProposedPlanId, _n as AgentControlRequestId, _r as THREAD_JUMP_KEYBINDING_COMMANDS, _s as TurnId, _t as AgentControlMcpInterruptThreadInput, a as ComputerUseBridgeConfig, aa as ThreadSessionSetPayload$1, ai as OrchestrationDispatchCommandError, an as AgentControlMcpUpdateThreadInput, ao as TerminalNotRunningError, ar as CursorSettings, as as MessageId, at as AgentControlExternalTaskId, b as ProjectWriteFileError, ba as WorktreeManualPositionSetPayload$1, bi as OrchestrationSession, bn as AgentControlRpcError, bo as LocalIntroductionCompleteRequest, br as isToolLifecycleItemType, bt as AgentControlMcpListAutomationsInput, c as WS_METHODS, ca as ThreadSnoozedPayload, ci as OrchestrationEventType, cn as AgentControlOperationId, co as EDITORS, cr as OpenCodeSettings, cs as ProjectId, ct as AgentControlIntegrationId, d as WsRpcGroup, da as ThreadTurnDiffCompletedPayload$1, di as OrchestrationGetTaskOutputError, dn as AgentControlPlanDigest, do as DESKTOP_NATIVE_NODE_CLAIM_DESCRIPTOR_PATH, dr as ThreadEnvMode, dt as AgentControlMcpControlRequestResult, ea as ThreadMetaUpdatedPayload$1, ei as OrchestrationAggregateKind, en as AgentControlMcpReadThreadInput, eo as defaultInstanceIdForDriver, er as ServerProvider, es as CommandId, et as AgentControlExternalCreateTaskInput, f as FilesystemBrowseError, fa as ThreadTurnInterruptRequestedPayload$1, fi as OrchestrationGetTurnDiffError, fn as AgentControlPrincipal, fo as DESKTOP_NATIVE_NODE_CLAIM_MAX_BODY_BYTES, fr as KeybindingRule, fs as RuntimeSessionId, ft as AgentControlMcpCreateThreadsInput, g as ProjectReadFileBinaryError, ga as TurnDispatchMode, gi as OrchestrationMessageRole, gn as AgentControlProposalStatus, go as LOCAL_INTRODUCTION_COMPLETE_PATH, gr as ResolvedKeybindingRule, gs as TrimmedNonEmptyString, gt as AgentControlMcpInstallationId, h as ProjectListEntriesError, ha as ThreadUnsnoozedPayload, hi as OrchestrationMessage, hn as AgentControlProposalId, ho as DesktopNativeNodeClaimSignRequest, hr as MODEL_PICKER_JUMP_KEYBINDING_COMMANDS, hs as ThreadId, ht as AgentControlMcpInstallation, i as fromLenientJson, ia as ThreadRuntimeModeSetPayload$1, ii as OrchestrationCommandReceiptStatus, in as AgentControlMcpSettingsSummaryResult, io as TerminalHistoryError, ir as CopilotSettings, is as IsoDateTime, it as AgentControlExternalRpcError, j as AGENT_CONTROL_EXTERNAL_PAIRING_CODE_TTL_MS, ja as WorkItemProviderError, ji as PROVIDER_SEND_TURN_MAX_IMAGE_BYTES, jn as AtlassianConnectionError, jo as RELAY_FRAME_TYPES, jr as CONTEXT_HANDOFF_ACTIVITY_KIND, jt as AgentControlMcpProposeAutomationCancelInput, k as AGENT_CONTROL_EXTERNAL_MCP_TOOLS, ka as WORK_ITEM_DETAIL_BODY_MAX_BYTES, ki as PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES, kn as ThreadPriorityRpcError, ko as HubGrantVerificationKeyId, kr as AgentTokenMode, kt as AgentControlMcpOperationalReadInput, l as WsDeviceRpcGroup, la as ThreadStatusBucketOverriddenPayload$1, li as OrchestrationGetFullThreadDiffError, ln as AgentControlOperationState, lo as OpenError, lr as ServerSettings, lt as AgentControlMcpCapabilitiesResult, ma as ThreadUnsettledPayload$1, mi as OrchestrationGetWorkflowScriptError, mn as AgentControlProposal, mo as DesktopNativeNodeClaimCommitRequest, mr as KeybindingsConfigError, mt as AgentControlMcpDiagnosticsSummaryResult, n as decodeJsonResult, na as ThreadProposedPlanUpsertedPayload$1, ni as OrchestrationCheckpointStatus, nn as AgentControlMcpRecentActivityResult, nr as ClaudeSettings, ns as EnvironmentId, nt as AgentControlExternalOverviewResult, o as ComputerUseRequest, oa as ThreadSettledPayload$1, oi as OrchestrationEvent, on as AgentControlMcpWaitForControlRequestInput, oo as TerminalSessionLookupError, or as DEFAULT_SERVER_SETTINGS, os as NonNegativeInt, ot as AgentControlExternalTaskIdInput, p as PROJECT_READ_FILE_BINARY_MAX_BYTES, pa as ThreadUnarchivedPayload$1, pi as OrchestrationGetTurnDiffResult, pn as AgentControlPromptSummary, po as DESKTOP_NATIVE_NODE_CLAIM_SIGN_PATH, pr as KeybindingsConfig, pt as AgentControlMcpDiagnosticsSummaryInput, q as AgentControlAutomation, qa as DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER, qi as ThreadAttachedToWorktreePayload$1, qn as McpServerName, qo as AuthRevokePairingLinkInput, qr as DEFAULT_PROJECT_METADATA_DIR, qt as AgentControlMcpProviderRuntimeEventsResult, r as formatSchemaError, ra as ThreadRevertedPayload$1, ri as OrchestrationCheckpointSummary, rn as AgentControlMcpSendMessageInput, ro as TerminalCwdError, rr as CodexSettings, rs as EventId, rt as AgentControlExternalProjectScope, s as ComputerUseResult, sa as ThreadSettlementOverride, si as OrchestrationEventMetadata, sn as AgentControlOperation, so as TerminalSubscriptionResyncError, sr as GrokSettings, ss as PositiveInt, st as AgentControlExternalWaitForTaskInput, t as collectUint8StreamText, ta as ThreadPriorityProjectedRanking, ti as OrchestrationCheckpointFile, tn as AgentControlMcpReadThreadResult, to as isProviderDriverKind, tr as ServerProviderUpdateError, ts as ContextHandoffId, tt as AgentControlExternalIntegration, u as WsHostedRpcGroup, ua as ThreadTokenModeSetPayload$1, ui as OrchestrationGetSnapshotError, un as AgentControlOperationStatus, uo as DESKTOP_NATIVE_NODE_CLAIM_COMMIT_PATH, ur as ServerSettingsError, ut as AgentControlMcpContextResult, v as ProjectSearchEntriesError, va as WorktreeCreatedPayload$1, vi as OrchestrationReadModel, vn as AgentControlResultEnvelope, vo as LOCAL_INTRODUCTION_DESCRIPTOR_PATH, vr as RuntimeSubagentStatus, vt as AgentControlMcpListAutomationRunsInput, w as AGENT_CONTROL_AUTOMATION_PROPOSAL_TTL_MS, wa as PullRequestState, wi as OrchestrationThread, wn as DEVICE_WS_METHODS, wo as NodeE2eeAdmissionPolicy, wr as ProviderSendTurnInput, wt as AgentControlMcpListProjectsInput, x as AGENT_CONTROL_ACTION_CAPABILITIES, xa as WorktreeMetaUpdatedPayload$1, xi as OrchestrationSessionStatus, xn as DEVICE_CAPABILITY_LABELS, xo as HUB_DEVICE_GRANT_MAX_BYTES, xr as ProviderInterruptTurnInput, xt as AgentControlMcpListAutomationsResult, y as ProjectStageFileReferenceError, ya as WorktreeDeletedPayload$1, yi as OrchestrationReplayEventsError, yn as AgentControlRiskTag, yo as LOCAL_INTRODUCTION_MAX_BODY_BYTES, yr as ToolLifecycleItemType, yt as AgentControlMcpListAutomationRunsResult, z as AGENT_CONTROL_MCP_TOOL_NAMES, za as VcsProcessExitError, zi as ProjectionPendingApprovalDecision, zn as McpInventoryResourceTemplate, zo as RelayChannelId, zr as ClientOrchestrationCommand, zt as AgentControlMcpProposeDeviceLaunchInput } from "./collectUint8StreamText-C_VNyArd.mjs";
-import { $ as normalizeGitRemoteUrl, A as runtimeQueueBlockedDuration, B as startupCommandGateQueueHighWater, C as providerStartupQueueHighWater, Ct as decode, D as providerTurnsTotal, E as providerTurnMetricAttributes, Et as Type, F as runtimeQueueHighWater, G as LocalDiagnosticsMetrics, H as terminalRestartsTotal, I as runtimeQueueOverflowsTotal, J as buildTemporaryWorktreeBranchName, K as LocalDiagnosticsMetricsLive, L as runtimeQueueRecoveriesTotal, M as runtimeQueueDepth, N as runtimeQueueDequeuesTotal, O as rpcRequestDuration, P as runtimeQueueEnqueuesTotal, Q as mergeGitStatusParts, R as startupCommandGateEnqueuesTotal, S as providerStartupQueueDepth, St as Tokeniser, T as providerTurnDuration, Tt as rfc8949EncodeOptions, U as terminalSessionsTotal, V as startupCommandGateQueueWaitDuration, W as withMetrics, X as detectSourceControlProviderFromGitRemoteUrl, Y as dedupeRemoteBranchesWithLocalMatches, Z as isTemporaryWorktreeBranch, _ as providerRuntimeEventsTotal, _t as encodeNodeKeyRotationTranscript, a as contextHandoffsTotal, at as DEFAULT_PORT, b as providerStaleStopTimeoutsTotal, bt as formatNodePublicKeyFingerprint, c as increment, ct as deriveServerPaths, d as orchestrationCommandAckDuration, dt as resolveManagedWorktreesRoot, et as resolveAutoFeatureBranchName, f as orchestrationCommandDuration, ft as resolveNodeE2eePolicyConfig, g as providerMetricAttributes, gt as encodeNodeAuthenticationTranscript, h as providerEventLogRecordsDroppedTotal, ht as encodeNativeNodeClaimTranscript, i as contextHandoffPreparationDuration, it as outcomeFromExit, j as runtimeQueueCoalescedTotal, k as rpcRequestsTotal, l as metricAttributes, lt as ensureServerDirectories, m as orchestrationEventsProcessedTotal, mt as canonicalizeHubOrigin, n as contextHandoffContextEntriesTotal, nt as sanitizeFeatureBranchName, o as gitCommandDuration, ot as RuntimeMode$1, p as orchestrationCommandsTotal, pt as resolveStaticDir, q as WORKTREE_BRANCH_PREFIX, r as contextHandoffDispatchDuration, rt as compactTraceAttributes, s as gitCommandsTotal, st as ServerConfig, t as contextHandoffContextBytesTotal, tt as sanitizeBranchFragment, u as metricNames, ut as resolveHubConnectorConfig, v as providerRuntimeStaleEventsTotal, vt as equalNodeIdentityBytes, w as providerStartupQueueWaitDuration, wt as encode, x as providerStartupAdmissionTotal, xt as normalizeHubNodeName, y as providerSessionsTotal, yt as fingerprintNodePublicKey, z as startupCommandGateQueueDepth } from "./Metrics-BP9YjxZB.mjs";
+import { $ as AgentControlExternalCapabilitiesResult, $a as ProviderInstanceId, $i as ThreadMessageSentPayload, $n as UsageReadError, $o as CheckpointRef, $r as OrchestrationActorKind, $t as AgentControlMcpReadDeviceStateResult, A as AGENT_CONTROL_EXTERNAL_MCP_TOOL_NAMES, Aa as WORK_ITEM_DETAIL_COMMENT_BODY_MAX_BYTES, Ai as PROVIDER_SEND_TURN_MAX_FILE_BYTES, An as AtlassianCapability, Ao as RELAY_AUTHENTICATION_DEADLINE_MS, Ar as CHAT_ATTACHMENT_READ_CHUNK_BYTES, At as AgentControlMcpOrchestrationEventsResult, B as AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_DEFAULT, Bi as ProjectionPendingApprovalStatus, Bn as McpInventoryTool, Bo as RelayEffectiveRole, Br as ContextHandoffActivityPayload, Bt as AgentControlMcpProposeDeviceOpenUrlInput, C as AGENT_CONTROL_AUTOMATION_MIN_INTERVAL_MS, Ca as WorktreeSourceControlStateUpdatedPayload$1, Ci as OrchestrationStopBackgroundTaskError, Cn as DEVICE_SWIPE_DURATION_MAX_MS, Co as NATIVE_E2EE_MAX_GRANT_KEYS, Cr as ProviderRespondToUserInputInput, Ct as AgentControlMcpListDevicesResult, D as AGENT_CONTROL_ERROR_CODES, Da as WorktreeId, Di as OrchestrationThreadHistoryError, Dn as ThreadPriorityBatchSnapshot, Do as HubEnrollmentStartResult, Dr as ProviderStopBackgroundTaskInput, Dt as AgentControlMcpListThreadsResult, E as AGENT_CONTROL_DEVICE_ACTION_KINDS, Ea as Worktree, Ei as OrchestrationThreadHistoryCursor, En as DeviceUdid, Eo as HubEnrollmentCeremonyDetail, Er as ProviderSteerTurnInput, Et as AgentControlMcpListThreadsInput, F as AGENT_CONTROL_MCP_OPERATIONAL_RANGE_MAX_MS, Fa as SourceControlRepositoryError, Fi as ProjectDeletedPayload$1, Fn as GitCommandError, Fo as RELAY_MAX_RETRY_AFTER_MS, Fr as CONTEXT_HANDOFF_MAX_INPUT_CHARS, Ft as AgentControlMcpProposeDeviceBootInput, G as AgentControlActionKind, Ga as ThreadPriorityFingerprint, Gi as ThreadActivityAppendedPayload$1, Gn as McpServer, Go as AuthCreatePairingCredentialInput, Gr as ContextHandoffMode, Gt as AgentControlMcpProposeProjectUpdateInput, H as AGENT_CONTROL_RISK_TAGS, Ha as VcsUnsupportedOperationError, Hi as ProviderInteractionMode, Hn as McpOauthLoginResult, Ho as RelayProtocolVersion, Hr as ContextHandoffDigest, Ht as AgentControlMcpProposeDeviceShutdownInput, I as AGENT_CONTROL_MCP_OPERATIONAL_RETENTION_MS, Ii as ProjectMetaUpdatedPayload$1, In as GitManagerError, Io as RELAY_MAX_RPC_MESSAGE_BYTES, Ir as CONTEXT_HANDOFF_WS_METHODS, It as AgentControlMcpProposeDeviceDetachInput, J as AgentControlAutomationDefinition, Ja as DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER, Ji as ThreadCreatedPayload$1, Jn as McpServerWritableConfig, Jo as AuthRpcError, Jr as DEFAULT_PROVIDER_INTERACTION_MODE, Jt as AgentControlMcpReadAutomationInput, K as AgentControlActionPlan, Ki as ThreadArchivedPayload$1, Kn as McpServerConfig, Ko as AuthRevokeClientSessionInput, Kr as DEFAULT_AGENT_TOKEN_MODE, Kt as AgentControlMcpProposeSettingsChangeInput, L as AGENT_CONTROL_MCP_READ_THREAD_TEXT_BUDGET_CHARS, La as VcsDriverKind, Li as ProjectMetadataDir, Ln as TextGenerationError, Lo as RELAY_SUPPORTED_VERSION_RANGE, Lr as ChatAttachment, Lt as AgentControlMcpProposeDeviceInputInput, M as AGENT_CONTROL_EXTERNAL_PROPOSAL_TTL_MS, Ma as WorkItemProviderKind, Mi as PROVIDER_SEND_TURN_MAX_INPUT_CHARS, Mn as AtlassianConnectionKind, Mo as RELAY_MAX_CONTROL_FRAME_BYTES, Mr as CONTEXT_HANDOFF_ERROR_MAX_CHARS, Mt as AgentControlMcpProposeAutomationCreateInput, N as AGENT_CONTROL_MCP_AUTOMATION_LIST_PROMPT_MAX_CHARS, Ni as ProjectAvatarSetPayload$1, Nn as AtlassianConnectionStatus, Nr as CONTEXT_HANDOFF_INSPECTION_CHUNK_MAX_BYTES, Nt as AgentControlMcpProposeAutomationUpdateInput, O as AGENT_CONTROL_EXTERNAL_CREDENTIAL_AUDIENCE, Oa as ThreadGoal, Oi as OrchestrationWorktreeShell, On as ThreadPriorityCandidateRanking, Oo as HubIdentitySummary, Or as ProviderStopSessionInput, Ot as AgentControlMcpMutationResult, P as AGENT_CONTROL_MCP_MESSAGE_TEXT_MAX_CHARS, Pa as SourceControlProviderError, Pi as ProjectCreatedPayload$1, Pn as AtlassianProduct, Po as RELAY_MAX_DATA_FRAME_BYTES, Pt as AgentControlMcpProposeDeviceAttachInput, Q as AgentControlCapability, Qa as ProviderDriverKind, Qi as ThreadInteractionModeSetPayload$1, Qn as OpinionatedPluginError, Qo as AuthSessionId, Qr as ORCHESTRATION_WS_METHODS, Qt as AgentControlMcpReadDeviceStateInput, R as AGENT_CONTROL_MCP_TOOLS, Ri as ProjectScript, Rn as McpInventoryResource, Ro as RelayCapability, Rr as ChatAttachmentReadError, Rt as AgentControlMcpProposeDeviceInstallInput, S as AGENT_CONTROL_AUTOMATION_MAX_HORIZON_MS, Sa as WorktreeRestoredPayload$1, Si as OrchestrationShellSnapshot, Sn as DEVICE_FRAME_MAGIC, So as HubDeviceGrantClaims, Sr as ProviderRespondToRequestInput, St as AgentControlMcpListDevicesInput, T as AGENT_CONTROL_CAPABILITIES, Ta as StatusBucket, Ti as OrchestrationThreadActivityTone, Tn as DeviceRpcError, To as HubConnectorStatus, Tr as ProviderSessionStartInput, Tt as AgentControlMcpListProjectsResult, U as AGENT_CONTROL_TERMINAL_PROPOSAL_STATUSES, Ua as ThreadPriorityBatchId, Ui as ProviderSessionRuntimeStatus, Un as McpProviderCapabilities, Uo as AuthBootstrapInput, Ur as ContextHandoffEndpointSnapshot, Ut as AgentControlMcpProposeProjectCreateInput, V as AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_MAX, Vn as McpListServersResult, Vo as RelayFrame, Vr as ContextHandoffAppliedBudget, Vt as AgentControlMcpProposeDeviceRecordingInput, W as AGENT_CONTROL_WS_METHODS, Wa as ThreadPriorityCandidateId, Wi as RuntimeMode, Wn as McpProviderSupport, Wo as AuthClientMetadataDeviceType, Wr as ContextHandoffInspectionError, Wt as AgentControlMcpProposeProjectRemoveInput, X as AgentControlAutomationRun, Xa as MODEL_SLUG_ALIASES_BY_PROVIDER, Xi as ThreadGoalClearedPayload$1, Xn as McpWorkspace, Xo as AtlassianConnectionId, Xr as ModelContextWindowMetadata, Xt as AgentControlMcpReadControlRequestInput, Y as AgentControlAutomationId, Ya as DEFAULT_MODEL, Yi as ThreadDeletedPayload$1, Yn as McpSettingsError, Yo as ApprovalRequestId, Yr as FileAttachmentCreateUploadUrlError, Yt as AgentControlMcpReadAutomationResult, Z as AgentControlAutomationRunId, Za as ModelCapabilities, Zi as ThreadGoalUpdatedPayload$1, Zn as McpWorkspaceId, Zo as AtlassianResourceId, Zr as ModelSelection, Zt as AgentControlMcpReadDeviceContentInput, _ as ProjectReadFileError, _a as WorktreeArchivedPayload$1, _i as OrchestrationProposedPlanId, _n as AgentControlRequestId, _o as LOCAL_INTRODUCTION_CONTROL_HEADER, _r as THREAD_JUMP_KEYBINDING_COMMANDS, _s as TurnId, _t as AgentControlMcpInterruptThreadInput, a as ComputerUseBridgeConfig, aa as ThreadSessionSetPayload$1, ai as OrchestrationDispatchCommandError, an as AgentControlMcpUpdateThreadInput, ao as TerminalNotRunningError, ar as CursorSettings, as as MessageId, at as AgentControlExternalTaskId, b as ProjectWriteFileError, ba as WorktreeManualPositionSetPayload$1, bi as OrchestrationSession, bn as AgentControlRpcError, bo as LocalIntroductionCompleteRequest, br as isToolLifecycleItemType, bt as AgentControlMcpListAutomationsInput, c as WS_METHODS, ca as ThreadSnoozedPayload, ci as OrchestrationEventType, cn as AgentControlOperationId, co as EDITORS, cr as OpenCodeSettings, cs as ProjectId, ct as AgentControlIntegrationId, d as WsRpcGroup, da as ThreadTurnDiffCompletedPayload$1, di as OrchestrationGetTaskOutputError, dn as AgentControlPlanDigest, do as DESKTOP_NATIVE_NODE_CLAIM_DESCRIPTOR_PATH, dr as ThreadEnvMode, dt as AgentControlMcpControlRequestResult, ea as ThreadMetaUpdatedPayload$1, ei as OrchestrationAggregateKind, en as AgentControlMcpReadThreadInput, eo as defaultInstanceIdForDriver, er as ServerProvider, es as CommandId, et as AgentControlExternalCreateTaskInput, f as FilesystemBrowseError, fa as ThreadTurnInterruptRequestedPayload$1, fi as OrchestrationGetTurnDiffError, fn as AgentControlPrincipal, fo as DESKTOP_NATIVE_NODE_CLAIM_MAX_BODY_BYTES, fr as KeybindingRule, fs as RuntimeSessionId, ft as AgentControlMcpCreateThreadsInput, g as ProjectReadFileBinaryError, ga as TurnDispatchMode, gi as OrchestrationMessageRole, gn as AgentControlProposalStatus, go as LOCAL_INTRODUCTION_COMPLETE_PATH, gr as ResolvedKeybindingRule, gs as TrimmedNonEmptyString, gt as AgentControlMcpInstallationId, h as ProjectListEntriesError, ha as ThreadUnsnoozedPayload, hi as OrchestrationMessage, hn as AgentControlProposalId, ho as DesktopNativeNodeClaimSignRequest, hr as MODEL_PICKER_JUMP_KEYBINDING_COMMANDS, hs as ThreadId, ht as AgentControlMcpInstallation, i as fromLenientJson, ia as ThreadRuntimeModeSetPayload$1, ii as OrchestrationCommandReceiptStatus, in as AgentControlMcpSettingsSummaryResult, io as TerminalHistoryError, ir as CopilotSettings, is as IsoDateTime, it as AgentControlExternalRpcError, j as AGENT_CONTROL_EXTERNAL_PAIRING_CODE_TTL_MS, ja as WorkItemProviderError, ji as PROVIDER_SEND_TURN_MAX_IMAGE_BYTES, jn as AtlassianConnectionError, jo as RELAY_FRAME_TYPES, jr as CONTEXT_HANDOFF_ACTIVITY_KIND, jt as AgentControlMcpProposeAutomationCancelInput, k as AGENT_CONTROL_EXTERNAL_MCP_TOOLS, ka as WORK_ITEM_DETAIL_BODY_MAX_BYTES, ki as PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES, kn as ThreadPriorityRpcError, ko as HubGrantVerificationKeyId, kr as AgentTokenMode, kt as AgentControlMcpOperationalReadInput, l as WsDeviceRpcGroup, la as ThreadStatusBucketOverriddenPayload$1, li as OrchestrationGetFullThreadDiffError, ln as AgentControlOperationState, lo as OpenError, lr as ServerSettings, lt as AgentControlMcpCapabilitiesResult, ma as ThreadUnsettledPayload$1, mi as OrchestrationGetWorkflowScriptError, mn as AgentControlProposal, mo as DesktopNativeNodeClaimCommitRequest, mr as KeybindingsConfigError, mt as AgentControlMcpDiagnosticsSummaryResult, n as decodeJsonResult, na as ThreadProposedPlanUpsertedPayload$1, ni as OrchestrationCheckpointStatus, nn as AgentControlMcpRecentActivityResult, nr as ClaudeSettings, ns as EnvironmentId, nt as AgentControlExternalOverviewResult, o as ComputerUseRequest, oa as ThreadSettledPayload$1, oi as OrchestrationEvent, on as AgentControlMcpWaitForControlRequestInput, oo as TerminalSessionLookupError, or as DEFAULT_SERVER_SETTINGS, os as NonNegativeInt, ot as AgentControlExternalTaskIdInput, p as PROJECT_READ_FILE_BINARY_MAX_BYTES, pa as ThreadUnarchivedPayload$1, pi as OrchestrationGetTurnDiffResult, pn as AgentControlPromptSummary, po as DESKTOP_NATIVE_NODE_CLAIM_SIGN_PATH, pr as KeybindingsConfig, pt as AgentControlMcpDiagnosticsSummaryInput, q as AgentControlAutomation, qa as DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER, qi as ThreadAttachedToWorktreePayload$1, qn as McpServerName, qo as AuthRevokePairingLinkInput, qr as DEFAULT_PROJECT_METADATA_DIR, qt as AgentControlMcpProviderRuntimeEventsResult, r as formatSchemaError, ra as ThreadRevertedPayload$1, ri as OrchestrationCheckpointSummary, rn as AgentControlMcpSendMessageInput, ro as TerminalCwdError, rr as CodexSettings, rs as EventId, rt as AgentControlExternalProjectScope, s as ComputerUseResult, sa as ThreadSettlementOverride, si as OrchestrationEventMetadata, sn as AgentControlOperation, so as TerminalSubscriptionResyncError, sr as GrokSettings, ss as PositiveInt, st as AgentControlExternalWaitForTaskInput, t as collectUint8StreamText, ta as ThreadPriorityProjectedRanking, ti as OrchestrationCheckpointFile, tn as AgentControlMcpReadThreadResult, to as isProviderDriverKind, tr as ServerProviderUpdateError, ts as ContextHandoffId, tt as AgentControlExternalIntegration, u as WsHostedRpcGroup, ua as ThreadTokenModeSetPayload$1, ui as OrchestrationGetSnapshotError, un as AgentControlOperationStatus, uo as DESKTOP_NATIVE_NODE_CLAIM_COMMIT_PATH, ur as ServerSettingsError, ut as AgentControlMcpContextResult, v as ProjectSearchEntriesError, va as WorktreeCreatedPayload$1, vi as OrchestrationReadModel, vn as AgentControlResultEnvelope, vo as LOCAL_INTRODUCTION_DESCRIPTOR_PATH, vr as RuntimeSubagentStatus, vt as AgentControlMcpListAutomationRunsInput, w as AGENT_CONTROL_AUTOMATION_PROPOSAL_TTL_MS, wa as PullRequestState, wi as OrchestrationThread, wn as DEVICE_WS_METHODS, wo as NodeE2eeAdmissionPolicy, wr as ProviderSendTurnInput, wt as AgentControlMcpListProjectsInput, x as AGENT_CONTROL_ACTION_CAPABILITIES, xa as WorktreeMetaUpdatedPayload$1, xi as OrchestrationSessionStatus, xn as DEVICE_CAPABILITY_LABELS, xo as HUB_DEVICE_GRANT_MAX_BYTES, xr as ProviderInterruptTurnInput, xt as AgentControlMcpListAutomationsResult, y as ProjectStageFileReferenceError, ya as WorktreeDeletedPayload$1, yi as OrchestrationReplayEventsError, yn as AgentControlRiskTag, yo as LOCAL_INTRODUCTION_MAX_BODY_BYTES, yr as ToolLifecycleItemType, yt as AgentControlMcpListAutomationRunsResult, z as AGENT_CONTROL_MCP_TOOL_NAMES, za as VcsProcessExitError, zi as ProjectionPendingApprovalDecision, zn as McpInventoryResourceTemplate, zo as RelayChannelId, zr as ClientOrchestrationCommand, zt as AgentControlMcpProposeDeviceLaunchInput } from "./collectUint8StreamText-C_VNyArd.mjs";
+import { $ as normalizeGitRemoteUrl, A as runtimeQueueBlockedDuration, B as startupCommandGateQueueHighWater, C as providerStartupQueueHighWater, Ct as decode, D as providerTurnsTotal, E as providerTurnMetricAttributes, Et as Type, F as runtimeQueueHighWater, G as LocalDiagnosticsMetrics, H as terminalRestartsTotal, I as runtimeQueueOverflowsTotal, J as buildTemporaryWorktreeBranchName, K as LocalDiagnosticsMetricsLive, L as runtimeQueueRecoveriesTotal, M as runtimeQueueDepth, N as runtimeQueueDequeuesTotal, O as rpcRequestDuration, P as runtimeQueueEnqueuesTotal, Q as mergeGitStatusParts, R as startupCommandGateEnqueuesTotal, S as providerStartupQueueDepth, St as Tokeniser, T as providerTurnDuration, Tt as rfc8949EncodeOptions, U as terminalSessionsTotal, V as startupCommandGateQueueWaitDuration, W as withMetrics, X as detectSourceControlProviderFromGitRemoteUrl, Y as dedupeRemoteBranchesWithLocalMatches, Z as isTemporaryWorktreeBranch, _ as providerRuntimeEventsTotal, _t as encodeNodeKeyRotationTranscript, a as contextHandoffsTotal, at as DEFAULT_PORT, b as providerStaleStopTimeoutsTotal, bt as formatNodePublicKeyFingerprint, c as increment, ct as deriveServerPaths, d as orchestrationCommandAckDuration, dt as resolveManagedWorktreesRoot, et as resolveAutoFeatureBranchName, f as orchestrationCommandDuration, ft as resolveNodeE2eePolicyConfig, g as providerMetricAttributes, gt as encodeNodeAuthenticationTranscript, h as providerEventLogRecordsDroppedTotal, ht as encodeNativeNodeClaimTranscript, i as contextHandoffPreparationDuration, it as outcomeFromExit, j as runtimeQueueCoalescedTotal, k as rpcRequestsTotal, l as metricAttributes, lt as ensureServerDirectories, m as orchestrationEventsProcessedTotal, mt as canonicalizeHubOrigin, n as contextHandoffContextEntriesTotal, nt as sanitizeFeatureBranchName, o as gitCommandDuration, ot as RuntimeMode$1, p as orchestrationCommandsTotal, pt as resolveStaticDir, q as WORKTREE_BRANCH_PREFIX, r as contextHandoffDispatchDuration, rt as compactTraceAttributes, s as gitCommandsTotal, st as ServerConfig, t as contextHandoffContextBytesTotal, tt as sanitizeBranchFragment, u as metricNames, ut as resolveHubConnectorConfig, v as providerRuntimeStaleEventsTotal, vt as equalNodeIdentityBytes, w as providerStartupQueueWaitDuration, wt as encode, x as providerStartupAdmissionTotal, xt as normalizeHubNodeName, y as providerSessionsTotal, yt as fingerprintNodePublicKey, z as startupCommandGateQueueDepth } from "./Metrics-a1h4iBQi.mjs";
 import { a as makeForgejoDiscovery, c as sourceBranch, d as firstNonEmptyLine, f as probeSourceControlProvider, h as layer$21, i as makeBitbucketDiscovery, m as VcsProcess, n as githubDiscovery, o as SourceControlProvider, p as refineUnknownRemoteProvider, r as gitlabDiscovery, s as parseSourceControlOwnerRef, t as azureDevOpsDiscovery, u as detailFromCause } from "./SourceControlProviderDiscoveryCatalog-B37RHe2u.mjs";
 import { n as detectSourceControlProviderFromRemoteUrl, r as getChangeRequestTerminologyForKind } from "./sourceControl-BiEBxN01.mjs";
 import * as NodeRuntime from "@effect/platform-node/NodeRuntime";
@@ -14,7 +14,7 @@ import { Socket, createServer } from "node:net";
 import { Array as Array$1, Cache, Cause, Clock, Config, Console, Context, Data, DateTime, Deferred, Duration, Effect, Encoding, Equal, Exit, Fiber, FileSystem, Layer, Logger, Metric, Option, Order, Path, Predicate, PubSub, Queue, Redacted, Ref, References, Result, Schedule, Schema, SchemaGetter, SchemaIssue, SchemaTransformation, Scope, Semaphore, Stream, Struct, SubscriptionRef, SynchronizedRef, Tracer, TxQueue, TxRef } from "effect";
 import * as Schema$1 from "effect/Schema";
 import * as P from "effect/Predicate";
-import { FetchHttpClient, HttpBody, HttpClient, HttpClientRequest, HttpClientResponse, HttpRouter, HttpServer, HttpServerRequest, HttpServerResponse, Multipart } from "effect/unstable/http";
+import { FetchHttpClient, Headers, HttpBody, HttpClient, HttpClientRequest, HttpClientResponse, HttpRouter, HttpServer, HttpServerRequest, HttpServerResponse, Multipart } from "effect/unstable/http";
 import * as NodePath from "node:path";
 import path, { basename, dirname, extname, join } from "node:path";
 import * as Crypto from "node:crypto";
@@ -2467,9 +2467,14 @@ const INLINE_ATTACHMENT_EXTENSIONS = /* @__PURE__ */ new Set([
 	".webp"
 ]);
 const STATIC_CONTENT_TYPES = {
+	".avif": "image/avif",
+	".bmp": "image/bmp",
 	".css": "text/css; charset=utf-8",
 	".html": "text/html; charset=utf-8",
+	".gif": "image/gif",
 	".ico": "image/x-icon",
+	".jpeg": "image/jpeg",
+	".jpg": "image/jpeg",
 	".js": "text/javascript; charset=utf-8",
 	".json": "application/json; charset=utf-8",
 	".map": "application/json; charset=utf-8",
@@ -2477,7 +2482,8 @@ const STATIC_CONTENT_TYPES = {
 	".svg": "image/svg+xml; charset=utf-8",
 	".txt": "text/plain; charset=utf-8",
 	".wasm": "application/wasm",
-	".webmanifest": "application/manifest+json; charset=utf-8"
+	".webmanifest": "application/manifest+json; charset=utf-8",
+	".webp": "image/webp"
 };
 const browserApiCorsLayer = HttpRouter.cors({
 	allowedMethods: [
@@ -2796,16 +2802,17 @@ const projectFaviconRouteLayer = HttpRouter.add("GET", "/api/project-favicon", E
 	if (Option.isNone(url)) return HttpServerResponse.text("Bad Request", { status: 400 });
 	const projectCwd = url.value.searchParams.get("cwd");
 	if (!projectCwd) return HttpServerResponse.text("Missing cwd parameter", { status: 400 });
-	const faviconFilePath = yield* (yield* ProjectFaviconResolver).resolvePath(projectCwd);
-	if (!faviconFilePath) return HttpServerResponse.text(FALLBACK_PROJECT_FAVICON_SVG, {
+	const favicon = yield* (yield* ProjectFaviconResolver).readIcon(projectCwd);
+	if (!favicon) return HttpServerResponse.text(FALLBACK_PROJECT_FAVICON_SVG, {
 		status: 200,
 		contentType: "image/svg+xml",
 		headers: inlineImageResponseHeaders("fallback.svg")
 	});
-	return yield* HttpServerResponse.file(faviconFilePath, {
+	return HttpServerResponse.uint8Array(favicon.bytes, {
 		status: 200,
-		headers: inlineImageResponseHeaders(faviconFilePath)
-	}).pipe(Effect.catch(() => Effect.succeed(HttpServerResponse.text("Internal Server Error", { status: 500 }))));
+		contentType: resolveStaticContentType(favicon.path, yield* Path.Path),
+		headers: inlineImageResponseHeaders(favicon.path)
+	});
 }).pipe(Effect.catchTag("AuthError", respondToAuthError)));
 const AvatarFormSchema = Schema$1.Struct({ avatar: Multipart.SingleFileSchema });
 const PROJECT_ID_PATTERN = /^[A-Za-z0-9_-]+$/;
@@ -33981,7 +33988,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: CodexSettings,
 		defaultConfig: () => Schema.decodeSync(CodexSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./CodexDriver-D4z5-wUD.mjs"),
+			try: () => import("./CodexDriver-DnnqkGoY.mjs"),
 			catch: (cause) => driverImportError(codexDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ CodexDriver }) => CodexDriver.create(input)))
 	},
@@ -33995,7 +34002,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: ClaudeSettings,
 		defaultConfig: () => Schema.decodeSync(ClaudeSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./ClaudeDriver-D65SPdHR.mjs"),
+			try: () => import("./ClaudeDriver-C4yu7Jit.mjs"),
 			catch: (cause) => driverImportError(claudeDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ ClaudeDriver }) => ClaudeDriver.create(input)))
 	},
@@ -34009,7 +34016,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: CopilotSettings,
 		defaultConfig: () => Schema.decodeSync(CopilotSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./CopilotDriver-ZvvsAIkd.mjs"),
+			try: () => import("./CopilotDriver-GxKLX5pL.mjs"),
 			catch: (cause) => driverImportError(copilotDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ CopilotDriver }) => CopilotDriver.create(input)))
 	},
@@ -34023,7 +34030,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: CursorSettings,
 		defaultConfig: () => Schema.decodeSync(CursorSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./CursorDriver-B1QSBzuH.mjs"),
+			try: () => import("./CursorDriver-CNo9Uzo8.mjs"),
 			catch: (cause) => driverImportError(cursorDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ CursorDriver }) => CursorDriver.create(input)))
 	},
@@ -34037,7 +34044,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: GrokSettings,
 		defaultConfig: () => Schema.decodeSync(GrokSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./GrokDriver-DgQe3pKz.mjs"),
+			try: () => import("./GrokDriver-DSPEmiwq.mjs"),
 			catch: (cause) => driverImportError(grokDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ GrokDriver }) => GrokDriver.create(input)))
 	},
@@ -34051,7 +34058,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: OpenCodeSettings,
 		defaultConfig: () => Schema.decodeSync(OpenCodeSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./OpenCodeDriver-DNUlF8M-.mjs"),
+			try: () => import("./OpenCodeDriver-0q44rSQX.mjs"),
 			catch: (cause) => driverImportError(openCodeDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ OpenCodeDriver }) => OpenCodeDriver.create(input)))
 	}
@@ -34766,7 +34773,7 @@ const scopedSafeTeardown = (label) => (effect) => Effect.gen(function* () {
 });
 //#endregion
 //#region package.json
-var version$1 = "0.1.22";
+var version$1 = "0.1.24";
 //#endregion
 //#region src/provider/Layers/CodexProvider.ts
 const PROVIDER_PROBE_TIMEOUT_MS = 8e3;
@@ -40584,8 +40591,8 @@ var QrSegment = class QrSegment {
 	static makeAlphanumeric(text) {
 		if (!QrSegment.isAlphanumeric(text)) throw new RangeError("String contains unencodable characters in alphanumeric mode");
 		let bb = [];
-		let i;
-		for (i = 0; i + 2 <= text.length; i += 2) {
+		let i = 0;
+		for (; i + 2 <= text.length; i += 2) {
 			let temp = QrSegment.ALPHANUMERIC_CHARSET.indexOf(text.charAt(i)) * 45;
 			temp += QrSegment.ALPHANUMERIC_CHARSET.indexOf(text.charAt(i + 1));
 			appendBits(temp, 11, bb);
@@ -41896,7 +41903,8 @@ const COMMIT_TIMEOUT_MS = 6e5;
 const MAX_PROGRESS_TEXT_LENGTH = 500;
 const SHORT_SHA_LENGTH = 7;
 const TOAST_DESCRIPTION_MAX = 72;
-const STATUS_RESULT_CACHE_TTL = Duration.seconds(1);
+const LOCAL_STATUS_RESULT_CACHE_TTL = Duration.seconds(5);
+const REMOTE_STATUS_RESULT_CACHE_TTL = Duration.seconds(30);
 const STATUS_RESULT_CACHE_CAPACITY = 2048;
 function isNotGitRepositoryError(error) {
 	return error.message.toLowerCase().includes("not a git repository");
@@ -42271,7 +42279,7 @@ const makeGitManager = Effect.fn("makeGitManager")(function* () {
 	});
 	const localStatusResultCache = yield* Cache.makeWith(readLocalStatus, {
 		capacity: STATUS_RESULT_CACHE_CAPACITY,
-		timeToLive: (exit) => Exit.isSuccess(exit) ? STATUS_RESULT_CACHE_TTL : Duration.zero
+		timeToLive: (exit) => Exit.isSuccess(exit) ? LOCAL_STATUS_RESULT_CACHE_TTL : Duration.zero
 	});
 	const invalidateLocalStatusResultCache = (cwd) => normalizeStatusCacheKey(cwd).pipe(Effect.flatMap((cacheKey) => Cache.invalidate(localStatusResultCache, cacheKey)));
 	const probeBranchPublished = Effect.fn("probeBranchPublished")(function* (cwd, branch, upstreamRef) {
@@ -42318,7 +42326,7 @@ const makeGitManager = Effect.fn("makeGitManager")(function* () {
 	});
 	const remoteStatusResultCache = yield* Cache.makeWith(readRemoteStatus, {
 		capacity: STATUS_RESULT_CACHE_CAPACITY,
-		timeToLive: (exit) => Exit.isSuccess(exit) ? STATUS_RESULT_CACHE_TTL : Duration.zero
+		timeToLive: (exit) => Exit.isSuccess(exit) ? REMOTE_STATUS_RESULT_CACHE_TTL : Duration.zero
 	});
 	const invalidateRemoteStatusResultCache = (cwd) => normalizeStatusCacheKey(cwd).pipe(Effect.flatMap((cacheKey) => Cache.invalidate(remoteStatusResultCache, cacheKey)));
 	const readConfigValueNullable = (cwd, key) => gitCore.readConfigValue(cwd, key).pipe(Effect.catch(() => Effect.succeed(null)));
@@ -42642,7 +42650,8 @@ const makeGitManager = Effect.fn("makeGitManager")(function* () {
 		return yield* Cache.get(remoteStatusResultCache, cacheKey);
 	});
 	const status = Effect.fn("status")(function* (input) {
-		const [local, remote] = yield* Effect.all([localStatus(input), remoteStatus(input)]);
+		const cacheKey = yield* normalizeStatusCacheKey(input.cwd);
+		const [local, remote] = yield* Effect.all([Cache.get(localStatusResultCache, cacheKey), Cache.get(remoteStatusResultCache, cacheKey)]);
 		return mergeGitStatusParts(local, remote);
 	});
 	const invalidateLocalStatus = Effect.fn("invalidateLocalStatus")(function* (cwd) {
@@ -42652,8 +42661,8 @@ const makeGitManager = Effect.fn("makeGitManager")(function* () {
 		yield* invalidateRemoteStatusResultCache(cwd);
 	});
 	const invalidateStatus = Effect.fn("invalidateStatus")(function* (cwd) {
-		yield* invalidateLocalStatusResultCache(cwd);
-		yield* invalidateRemoteStatusResultCache(cwd);
+		const cacheKey = yield* normalizeStatusCacheKey(cwd);
+		yield* Effect.all([Cache.invalidate(localStatusResultCache, cacheKey), Cache.invalidate(remoteStatusResultCache, cacheKey)]);
 	});
 	const resolvePullRequest = Effect.fn("resolvePullRequest")(function* (input) {
 		return { pullRequest: yield* (yield* sourceControlProvider(input.cwd)).getChangeRequest({
@@ -42991,10 +43000,15 @@ const DEFAULT_VCS_STATUS_REFRESH_INTERVAL = Duration.seconds(30);
 const VCS_STATUS_REFRESH_FAILURE_BASE_DELAY = Duration.seconds(30);
 const VCS_STATUS_REFRESH_FAILURE_MAX_DELAY = Duration.minutes(15);
 const MAX_REMOTE_REFRESH_CONSECUTIVE_FAILURES = 64;
+const LOCAL_STATUS_CACHE_TTL_MS = Duration.toMillis(Duration.seconds(5));
+const REMOTE_STATUS_CACHE_TTL_MS = Duration.toMillis(Duration.seconds(30));
 var VcsStatusBroadcaster = class extends Context.Service()("ryco/vcs/VcsStatusBroadcaster") {};
 function fingerprintStatusPart(status) {
 	return JSON.stringify(status);
 }
+function isCachedValueFresh(cached, nowMs, ttlMs) {
+	return nowMs - cached.cachedAtMs < ttlMs;
+}
 function normalizeCwd(cwd) {
 	try {
 		return realpathSync.native(cwd);
@@ -43014,11 +43028,57 @@ const layer$5 = Layer.effect(VcsStatusBroadcaster, Effect.gen(function* () {
 	const broadcasterScope = yield* Effect.acquireRelease(Scope.make(), (scope) => Scope.close(scope, Exit.void));
 	const cacheRef = yield* Ref.make(/* @__PURE__ */ new Map());
 	const pollersRef = yield* SynchronizedRef.make(/* @__PURE__ */ new Map());
+	const makeStatusSingleFlight = () => Effect.gen(function* () {
+		const flightsRef = yield* SynchronizedRef.make(/* @__PURE__ */ new Map());
+		let requestedVersion = 0;
+		const run = (cwd, kind, operation, retryVersion) => Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
+			const version = retryVersion ?? ++requestedVersion;
+			const candidate = yield* Deferred.make();
+			const selection = yield* SynchronizedRef.modify(flightsRef, (flights) => {
+				const current = flights.get(cwd);
+				if (current) {
+					if (kind === "refresh" && (current.kind === "load" || current.version < version)) return [{
+						_tag: "retryAfter",
+						deferred: current.deferred
+					}, flights];
+					return [{
+						_tag: "await",
+						deferred: current.deferred
+					}, flights];
+				}
+				const nextFlights = new Map(flights);
+				nextFlights.set(cwd, {
+					deferred: candidate,
+					kind,
+					version: requestedVersion
+				});
+				return [{
+					_tag: "owner",
+					deferred: candidate
+				}, nextFlights];
+			});
+			if (selection._tag === "retryAfter") {
+				yield* restore(Deferred.await(selection.deferred)).pipe(Effect.exit);
+				return yield* restore(run(cwd, kind, operation, version));
+			}
+			if (selection._tag === "owner") yield* operation.pipe(Effect.onExit((exit) => SynchronizedRef.update(flightsRef, (flights) => {
+				if (flights.get(cwd)?.deferred !== candidate) return flights;
+				const nextFlights = new Map(flights);
+				nextFlights.delete(cwd);
+				return nextFlights;
+			}).pipe(Effect.andThen(Deferred.done(candidate, exit)))), Effect.ignore, Effect.forkIn(broadcasterScope));
+			return yield* restore(Deferred.await(selection.deferred));
+		}));
+		return run;
+	});
+	const coalesceLocalStatus = yield* makeStatusSingleFlight();
+	const coalesceRemoteStatus = yield* makeStatusSingleFlight();
 	const getCachedStatus = Effect.fn("VcsStatusBroadcaster.getCachedStatus")(function* (cwd) {
 		return yield* Ref.get(cacheRef).pipe(Effect.map((cache) => cache.get(cwd) ?? null));
 	});
 	const updateCachedLocalStatus = Effect.fn("VcsStatusBroadcaster.updateCachedLocalStatus")(function* (cwd, local, options) {
 		const nextLocal = {
+			cachedAtMs: yield* Clock.currentTimeMillis,
 			fingerprint: fingerprintStatusPart(local),
 			value: local
 		};
@@ -43049,7 +43109,9 @@ const layer$5 = Layer.effect(VcsStatusBroadcaster, Effect.gen(function* () {
 		return local;
 	});
 	const updateCachedRemoteStatus = Effect.fn("VcsStatusBroadcaster.updateCachedRemoteStatus")(function* (cwd, remote, options) {
+		const cachedAtMs = yield* Clock.currentTimeMillis;
 		const nextRemote = {
+			cachedAtMs,
 			fingerprint: fingerprintStatusPart(remote),
 			value: remote
 		};
@@ -43062,13 +43124,14 @@ const layer$5 = Layer.effect(VcsStatusBroadcaster, Effect.gen(function* () {
 				...previous,
 				remote: nextRemote
 			};
+			const currentLocal = next.local && isCachedValueFresh(next.local, cachedAtMs, LOCAL_STATUS_CACHE_TTL_MS) ? next.local.value : null;
 			const nextCache = new Map(cache);
 			nextCache.set(cwd, next);
 			return [{
-				changed: previous.remote?.fingerprint !== nextRemote.fingerprint,
-				event: next.local ? {
+				changed: previous.remote?.fingerprint !== nextRemote.fingerprint || !previous.remote || !isCachedValueFresh(previous.remote, cachedAtMs, REMOTE_STATUS_CACHE_TTL_MS),
+				event: currentLocal ? {
 					_tag: "snapshot",
-					local: next.local.value,
+					local: currentLocal,
 					remote
 				} : {
 					_tag: "remoteUpdated",
@@ -43083,21 +43146,27 @@ const layer$5 = Layer.effect(VcsStatusBroadcaster, Effect.gen(function* () {
 		return remote;
 	});
 	const loadLocalStatus = Effect.fn("VcsStatusBroadcaster.loadLocalStatus")(function* (cwd) {
-		const local = yield* workflow.localStatus({ cwd });
-		return yield* updateCachedLocalStatus(cwd, local);
+		return yield* coalesceLocalStatus(cwd, "load", Effect.gen(function* () {
+			const local = yield* workflow.localStatus({ cwd });
+			return yield* updateCachedLocalStatus(cwd, local);
+		}));
 	});
 	const loadRemoteStatus = Effect.fn("VcsStatusBroadcaster.loadRemoteStatus")(function* (cwd) {
-		const remote = yield* workflow.remoteStatus({ cwd });
-		return yield* updateCachedRemoteStatus(cwd, remote);
+		return yield* coalesceRemoteStatus(cwd, "load", Effect.gen(function* () {
+			const remote = yield* workflow.remoteStatus({ cwd });
+			return yield* updateCachedRemoteStatus(cwd, remote);
+		}));
 	});
 	const getOrLoadLocalStatus = Effect.fn("VcsStatusBroadcaster.getOrLoadLocalStatus")(function* (cwd) {
 		const cached = yield* getCachedStatus(cwd);
-		if (cached?.local) return cached.local.value;
+		const nowMs = yield* Clock.currentTimeMillis;
+		if (cached?.local && isCachedValueFresh(cached.local, nowMs, LOCAL_STATUS_CACHE_TTL_MS)) return cached.local.value;
 		return yield* loadLocalStatus(cwd);
 	});
 	const getOrLoadRemoteStatus = Effect.fn("VcsStatusBroadcaster.getOrLoadRemoteStatus")(function* (cwd) {
 		const cached = yield* getCachedStatus(cwd);
-		if (cached?.remote) return cached.remote.value;
+		const nowMs = yield* Clock.currentTimeMillis;
+		if (cached?.remote && isCachedValueFresh(cached.remote, nowMs, REMOTE_STATUS_CACHE_TTL_MS)) return cached.remote.value;
 		return yield* loadRemoteStatus(cwd);
 	});
 	const getStatus = Effect.fn("VcsStatusBroadcaster.getStatus")(function* (input) {
@@ -43107,14 +43176,19 @@ const layer$5 = Layer.effect(VcsStatusBroadcaster, Effect.gen(function* () {
 	});
 	const refreshLocalStatus = Effect.fn("VcsStatusBroadcaster.refreshLocalStatus")(function* (rawCwd) {
 		const cwd = normalizeCwd(rawCwd);
-		yield* workflow.invalidateLocalStatus(cwd);
-		const local = yield* workflow.localStatus({ cwd });
-		return yield* updateCachedLocalStatus(cwd, local, { publish: true });
+		return yield* coalesceLocalStatus(cwd, "refresh", Effect.gen(function* () {
+			yield* workflow.invalidateLocalStatus(cwd);
+			const local = yield* workflow.localStatus({ cwd });
+			return yield* updateCachedLocalStatus(cwd, local, { publish: true });
+		}));
 	});
-	const refreshRemoteStatus = Effect.fn("VcsStatusBroadcaster.refreshRemoteStatus")(function* (cwd) {
-		yield* workflow.invalidateRemoteStatus(cwd);
-		const remote = yield* workflow.remoteStatus({ cwd });
-		return yield* updateCachedRemoteStatus(cwd, remote, { publish: true });
+	const refreshRemoteStatus = Effect.fn("VcsStatusBroadcaster.refreshRemoteStatus")(function* (rawCwd) {
+		const cwd = normalizeCwd(rawCwd);
+		return yield* coalesceRemoteStatus(cwd, "refresh", Effect.gen(function* () {
+			yield* workflow.invalidateRemoteStatus(cwd);
+			const remote = yield* workflow.remoteStatus({ cwd });
+			return yield* updateCachedRemoteStatus(cwd, remote, { publish: true });
+		}));
 	});
 	const refreshStatus = Effect.fn("VcsStatusBroadcaster.refreshStatus")(function* (rawCwd) {
 		const cwd = normalizeCwd(rawCwd);
@@ -43187,17 +43261,24 @@ const layer$5 = Layer.effect(VcsStatusBroadcaster, Effect.gen(function* () {
 		const cwd = normalizeCwd(input.cwd);
 		const subscription = yield* PubSub.subscribe(changesPubSub);
 		const initialLocal = yield* getOrLoadLocalStatus(cwd);
-		const initialRemote = (yield* getCachedStatus(cwd))?.remote?.value ?? null;
+		const cachedRemote = (yield* getCachedStatus(cwd))?.remote ?? null;
+		const nowMs = yield* Clock.currentTimeMillis;
+		const initialRemote = cachedRemote && isCachedValueFresh(cachedRemote, nowMs, REMOTE_STATUS_CACHE_TTL_MS) ? cachedRemote.value : null;
 		const automaticRemoteRefreshInterval = options?.automaticRemoteRefreshInterval ?? Effect.succeed(Duration.zero);
 		const initialRemoteRefreshInterval = yield* automaticRemoteRefreshInterval;
 		const retainedRemotePoller = !Duration.isZero(initialRemoteRefreshInterval);
-		if (retainedRemotePoller) yield* retainRemotePoller(cwd, automaticRemoteRefreshInterval);
-		const release = retainedRemotePoller ? releaseRemotePoller(cwd).pipe(Effect.ignore, Effect.asVoid) : Effect.void;
+		if (retainedRemotePoller) {
+			yield* Effect.acquireRelease(retainRemotePoller(cwd, automaticRemoteRefreshInterval), () => releaseRemotePoller(cwd).pipe(Effect.ignore, Effect.asVoid));
+			yield* options?.afterRemotePollerRetained ?? Effect.void;
+		}
 		return Stream.concat(Stream.make({
 			_tag: "snapshot",
 			local: initialLocal,
 			remote: initialRemote
-		}), Stream.fromSubscription(subscription).pipe(Stream.filter((event) => event.cwd === cwd), Stream.map((event) => event.event))).pipe(Stream.ensuring(release));
+		}), Stream.merge(retainedRemotePoller || initialRemote !== null ? Stream.empty : Stream.fromEffect(getOrLoadRemoteStatus(cwd)).pipe(Stream.map((remote) => ({
+			_tag: "remoteUpdated",
+			remote
+		})), Stream.catchCause(() => Stream.empty)), Stream.fromSubscription(subscription).pipe(Stream.filter((event) => event.cwd === cwd), Stream.map((event) => event.event))));
 	}));
 	return VcsStatusBroadcaster.of({
 		getStatus,
@@ -49163,7 +49244,7 @@ async function readResourceTelemetryHistory(input) {
 //#endregion
 //#region src/diagnostics/ProcessDiagnostics.ts
 const QUERY_TIMEOUT_MS = 3e3;
-const MAX_OUTPUT_BYTES = 4194304;
+const MAX_OUTPUT_BYTES$1 = 4194304;
 const MAX_PROCESSES = 2e4;
 /** Parse fixed numeric columns; never capture command-line arguments. */
 function parseProcessTable(output) {
@@ -49244,7 +49325,7 @@ async function queryProcessTable(fresh = false) {
 		execFile("/bin/ps", ["-axo", "pid=,ppid=,lstart=,pcpu=,rss=,stat=,etime=,comm="], {
 			encoding: "utf8",
 			timeout: QUERY_TIMEOUT_MS,
-			maxBuffer: MAX_OUTPUT_BYTES,
+			maxBuffer: MAX_OUTPUT_BYTES$1,
 			env: {
 				...process.env,
 				LC_ALL: "C"
@@ -73502,6 +73583,8 @@ var RelayConnectionSession = class {
 	#frameDeliveryActive = false;
 	#settled = false;
 	#closed = false;
+	#authenticationStarted = false;
+	#rejectAuthentication;
 	#listeners;
 	constructor(options) {
 		this.#identity = options.identity;
@@ -73517,8 +73600,21 @@ var RelayConnectionSession = class {
 	get ready() {
 		return this.#ready;
 	}
-	async authenticate() {
-		if (this.#socket !== void 0) throw new RelayConnectionError("internal_error");
+	authenticate() {
+		if (this.#authenticationStarted || this.#closed) return Promise.reject(new RelayConnectionError("internal_error"));
+		this.#authenticationStarted = true;
+		return new Promise((resolve, reject) => {
+			this.#rejectAuthentication = reject;
+			this.#authenticate().then((ready) => {
+				this.#rejectAuthentication = void 0;
+				resolve(ready);
+			}, (error) => {
+				this.#rejectAuthentication = void 0;
+				reject(error);
+			});
+		});
+	}
+	async #authenticate() {
 		let auth;
 		try {
 			auth = await this.#identity.createRelayAuthenticationFrame(this.#hubOrigin, {
@@ -73567,6 +73663,7 @@ var RelayConnectionSession = class {
 			};
 			const onOpen = () => {
 				if (this.#closed) return;
+				if (this.#timer !== void 0) this.#scheduler.clearTimeout(this.#timer);
 				try {
 					socket.send(authBytes);
 				} catch {
@@ -73640,6 +73737,7 @@ var RelayConnectionSession = class {
 			socket.addEventListener("message", onMessage);
 			socket.addEventListener("error", onError);
 			socket.addEventListener("close", onClose);
+			this.#timer = this.#scheduler.setTimeout(() => fail(new RelayConnectionError("network")), RELAY_AUTHENTICATION_DEADLINE_MS);
 		});
 	}
 	/**
@@ -73671,6 +73769,11 @@ var RelayConnectionSession = class {
 	close() {
 		if (this.#closed) return;
 		this.#closed = true;
+		if (!this.#settled) {
+			this.#settled = true;
+			this.#rejectAuthentication?.(new RelayConnectionError("network"));
+		}
+		this.#rejectAuthentication = void 0;
 		for (const frame of this.#pendingPostReadyFrames) clearRelayFrameBytes(frame);
 		this.#pendingPostReadyFrames = [];
 		this.#clearPendingAuthentication();
@@ -89629,83 +89732,173 @@ const ProviderRegistryLive = Layer.effect(ProviderRegistry, Effect.gen(function*
 	};
 }));
 //#endregion
-//#region src/project/Layers/ProjectFaviconResolver.ts
-const FAVICON_CANDIDATES = [
-	"favicon.svg",
-	"favicon.ico",
-	"favicon.png",
-	"public/favicon.svg",
-	"public/favicon.ico",
-	"public/favicon.png",
-	"app/favicon.ico",
-	"app/favicon.png",
-	"app/icon.svg",
-	"app/icon.png",
-	"app/icon.ico",
-	"src/favicon.ico",
-	"src/favicon.svg",
-	"src/app/favicon.ico",
-	"src/app/icon.svg",
-	"src/app/icon.png",
-	"assets/icon.svg",
-	"assets/icon.png",
-	"assets/logo.svg",
-	"assets/logo.png",
-	".idea/icon.svg"
-];
-const ICON_SOURCE_FILES = [
-	"index.html",
-	"public/index.html",
-	"app/routes/__root.tsx",
-	"src/routes/__root.tsx",
-	"app/root.tsx",
-	"src/root.tsx",
-	"src/index.html"
-];
-const LINK_ICON_HTML_RE = /<link\b(?=[^>]*\brel=["'](?:icon|shortcut icon)["'])(?=[^>]*\bhref=["']([^"'?]+))[^>]*>/i;
-const LINK_ICON_OBJ_RE = /(?=[^}]*\brel\s*:\s*["'](?:icon|shortcut icon)["'])(?=[^}]*\bhref\s*:\s*["']([^"'?]+))[^}]*/i;
-function extractIconHref(source) {
-	const htmlMatch = source.match(LINK_ICON_HTML_RE);
-	if (htmlMatch?.[1]) return htmlMatch[1];
-	const objMatch = source.match(LINK_ICON_OBJ_RE);
-	if (objMatch?.[1]) return objMatch[1];
-	return null;
-}
-const makeProjectFaviconResolver = Effect.gen(function* () {
-	const fileSystem = yield* FileSystem.FileSystem;
-	const path = yield* Path.Path;
-	const resolveIconHref = (projectCwd, href) => {
-		const clean = href.replace(/^\//, "");
-		return [path.join(projectCwd, "public", clean), path.join(projectCwd, clean)];
-	};
-	const isPathWithinProject = (projectCwd, candidatePath) => {
-		const relative = path.relative(path.resolve(projectCwd), path.resolve(candidatePath));
-		return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
-	};
-	const findExistingFile = Effect.fn("ProjectFaviconResolver.findExistingFile")(function* (projectCwd, candidates) {
+//#region src/project/projectFaviconWorker.ts
+/**
+* Serialized into a short-lived Node/Bun child. Keep this function self-contained:
+* opening a cloud-backed file can block in the kernel even after an async read
+* is cancelled. A separate process keeps optional icons out of the node's shared
+* filesystem/DNS worker pool, and lets the parent terminate a stalled read.
+*/
+function projectFaviconWorkerMain() {
+	const fs = process.getBuiltinModule("node:fs");
+	const path = process.getBuiltinModule("node:path");
+	const iconLimit = 524288;
+	const sourceLimit = 262144;
+	const candidates = [
+		"favicon.svg",
+		"favicon.ico",
+		"favicon.png",
+		"public/favicon.svg",
+		"public/favicon.ico",
+		"public/favicon.png",
+		"app/favicon.ico",
+		"app/favicon.png",
+		"app/icon.svg",
+		"app/icon.png",
+		"app/icon.ico",
+		"src/favicon.ico",
+		"src/favicon.svg",
+		"src/app/favicon.ico",
+		"src/app/icon.svg",
+		"src/app/icon.png",
+		"assets/icon.svg",
+		"assets/icon.png",
+		"assets/logo.svg",
+		"assets/logo.png",
+		".idea/icon.svg"
+	];
+	const sources = [
+		"index.html",
+		"public/index.html",
+		"app/routes/__root.tsx",
+		"src/routes/__root.tsx",
+		"app/root.tsx",
+		"src/root.tsx",
+		"src/index.html"
+	];
+	try {
+		const root = fs.realpathSync(process.argv[1]);
+		const read = (relative, limit) => {
+			let fd;
+			try {
+				const filename = fs.realpathSync(path.resolve(root, relative));
+				const within = path.relative(root, filename);
+				if (within === ".." || within.startsWith(`..${path.sep}`) || path.isAbsolute(within)) return null;
+				fd = fs.openSync(filename, fs.constants.O_RDONLY | fs.constants.O_NONBLOCK);
+				const stats = fs.fstatSync(fd);
+				if (!stats.isFile() || stats.size > limit) return null;
+				const bytes = Buffer.alloc(limit + 1);
+				let length = 0;
+				while (length < bytes.length) {
+					const count = fs.readSync(fd, bytes, length, bytes.length - length, null);
+					if (count === 0) break;
+					length += count;
+				}
+				return length > limit ? null : {
+					path: filename,
+					bytes: bytes.subarray(0, length)
+				};
+			} catch {
+				return null;
+			} finally {
+				if (fd !== void 0) fs.closeSync(fd);
+			}
+		};
+		const send = (icon) => {
+			process.stdout.write(JSON.stringify({
+				path: icon.path,
+				base64: icon.bytes.toString("base64")
+			}));
+		};
 		for (const candidate of candidates) {
-			if (!isPathWithinProject(projectCwd, candidate)) continue;
-			if ((yield* fileSystem.stat(candidate).pipe(Effect.catch(() => Effect.succeed(null))))?.type === "File") return candidate;
+			const icon = read(candidate, iconLimit);
+			if (icon) {
+				send(icon);
+				return;
+			}
 		}
-		return null;
-	});
-	return { resolvePath: Effect.fn("ProjectFaviconResolver.resolvePath")(function* (cwd) {
-		for (const candidate of FAVICON_CANDIDATES) {
-			const resolved = path.join(cwd, candidate);
-			const existing = yield* findExistingFile(cwd, [resolved]);
-			if (existing) return existing;
-		}
-		for (const sourceFile of ICON_SOURCE_FILES) {
-			const sourcePath = path.join(cwd, sourceFile);
-			const source = yield* fileSystem.readFileString(sourcePath).pipe(Effect.catch(() => Effect.succeed(null)));
-			if (!source) continue;
-			const href = extractIconHref(source);
+		for (const source of sources) {
+			const text = read(source, sourceLimit)?.bytes.toString("utf8");
+			if (!text) continue;
+			const href = text.match(/<link\b(?=[^>]*\brel=["'](?:icon|shortcut icon)["'])(?=[^>]*\bhref=["']([^"'?]+))[^>]*>/i)?.[1] ?? text.match(/(?=[^}]*\brel\s*:\s*["'](?:icon|shortcut icon)["'])(?=[^}]*\bhref\s*:\s*["']([^"'?]+))[^}]*/i)?.[1];
 			if (!href) continue;
-			const existing = yield* findExistingFile(cwd, resolveIconHref(cwd, href));
-			if (existing) return existing;
+			const clean = href.replace(/^\//, "");
+			for (const candidate of [path.join("public", clean), clean]) {
+				const icon = read(candidate, iconLimit);
+				if (icon) {
+					send(icon);
+					return;
+				}
+			}
 		}
-		return null;
-	}) };
+	} catch {}
+	process.stdout.write("null");
+}
+const MAX_OUTPUT_BYTES = 786432;
+const WORKER_SCRIPT = `(${projectFaviconWorkerMain.toString()})()`;
+function readProjectFavicon(cwd, options = {}) {
+	return new Promise((resolve) => {
+		if (options.signal?.aborted) {
+			resolve(null);
+			return;
+		}
+		let child;
+		const abort = () => {
+			child?.kill("SIGKILL");
+		};
+		const cleanup = () => options.signal?.removeEventListener("abort", abort);
+		options.signal?.addEventListener("abort", abort, { once: true });
+		try {
+			child = (options.execFile ?? execFile)(process.execPath, [
+				"--eval",
+				WORKER_SCRIPT,
+				"--",
+				cwd
+			], {
+				env: {
+					...process.env,
+					ELECTRON_RUN_AS_NODE: "1",
+					NODE_OPTIONS: void 0,
+					NODE_PATH: void 0
+				},
+				encoding: "utf8",
+				timeout: options.timeoutMs ?? 1500,
+				killSignal: "SIGKILL",
+				maxBuffer: MAX_OUTPUT_BYTES,
+				windowsHide: true
+			}, (error, stdout) => {
+				cleanup();
+				if (error) {
+					resolve(null);
+					return;
+				}
+				try {
+					const result = JSON.parse(stdout);
+					if (typeof result !== "object" || result === null || !("path" in result) || !("base64" in result) || typeof result.path !== "string" || typeof result.base64 !== "string") {
+						resolve(null);
+						return;
+					}
+					const bytes = Buffer.from(result.base64, "base64");
+					resolve(bytes.length <= 524288 ? {
+						path: result.path,
+						bytes
+					} : null);
+				} catch {
+					resolve(null);
+				}
+			});
+			if (options.signal?.aborted) abort();
+		} catch {
+			cleanup();
+			resolve(null);
+		}
+	});
+}
+//#endregion
+//#region src/project/Layers/ProjectFaviconResolver.ts
+const makeProjectFaviconResolver = Effect.gen(function* () {
+	const workers = yield* Semaphore$1.make(2);
+	return { readIcon: (cwd) => workers.withPermit(Effect.promise((signal) => readProjectFavicon(cwd, { signal }))).pipe(Effect.timeout("5 seconds"), Effect.catch(() => Effect.succeed(null))) };
 });
 const ProjectFaviconResolverLive = Layer.effect(ProjectFaviconResolver, makeProjectFaviconResolver);
 //#endregion
@@ -91951,6 +92144,23 @@ const makeTraceSink = Effect.fn("makeTraceSink")(function* (options) {
 	};
 });
 //#endregion
+//#region src/observability/HttpHeaderRedaction.ts
+/** Capture policy before HTTP tracing defers span completion outside its request context. */
+function makeHttpHeaderRedactor(names) {
+	const redactedNames = [
+		...names,
+		LOCAL_INTRODUCTION_CONTROL_HEADER,
+		"dpop",
+		"dpop-nonce"
+	];
+	return (key, value) => {
+		const match = /^http\.(?:request|response)\.header\.(.+)$/iu.exec(key);
+		if (!match) return value;
+		const name = match[1].toLowerCase();
+		return String(Headers.redact(Headers.fromInput({ [name]: String(value) }), redactedNames)[name]);
+	};
+}
+//#endregion
 //#region src/observability/LocalFileTracer.ts
 var LocalFileSpan = class {
 	_tag = "Span";
@@ -91967,9 +92177,11 @@ var LocalFileSpan = class {
 	events;
 	delegate;
 	push;
-	constructor(options, delegate, push) {
+	redactAttribute;
+	constructor(options, delegate, push, redactAttribute) {
 		this.delegate = delegate;
 		this.push = push;
+		this.redactAttribute = redactAttribute;
 		this.name = delegate.name;
 		this.spanId = delegate.spanId;
 		this.traceId = delegate.traceId;
@@ -91996,8 +92208,9 @@ var LocalFileSpan = class {
 		if (this.sampled) this.push(spanToTraceRecord(this));
 	}
 	attribute(key, value) {
-		this.attributes.set(key, value);
-		this.delegate.attribute(key, value);
+		const redacted = this.redactAttribute(key, value);
+		this.attributes.set(key, redacted);
+		this.delegate.attribute(key, redacted);
 	}
 	event(name, startTime, attributes) {
 		const nextAttributes = attributes ?? {};
@@ -92014,6 +92227,7 @@ var LocalFileSpan = class {
 	}
 };
 const makeLocalFileTracer = Effect.fn("makeLocalFileTracer")(function* (options) {
+	const redactAttribute = makeHttpHeaderRedactor(yield* Effect.service(Headers.CurrentRedactedNames));
 	const sink = options.sink ?? (yield* makeTraceSink({
 		filePath: options.filePath,
 		maxBytes: options.maxBytes,
@@ -92023,7 +92237,7 @@ const makeLocalFileTracer = Effect.fn("makeLocalFileTracer")(function* (options)
 	const delegate = options.delegate ?? Tracer.make({ span: (spanOptions) => new Tracer.NativeSpan(spanOptions) });
 	return Tracer.make({
 		span(spanOptions) {
-			return new LocalFileSpan(spanOptions, delegate.span(spanOptions), sink.push);
+			return new LocalFileSpan(spanOptions, delegate.span(spanOptions), sink.push, redactAttribute);
 		},
 		...delegate.context ? { context: delegate.context } : {}
 	});