ryco-cli 0.1.23 → 0.1.25

package/dist/bin.cjs

@@ -2,9 +2,9 @@
 
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_rolldown_runtime = require("./rolldown-runtime-LGfotAqq.cjs");
-const require_collectUint8StreamText = require("./collectUint8StreamText-DStwNTTK.cjs");
+const require_collectUint8StreamText = require("./collectUint8StreamText-whblCEfg.cjs");
 const require_Metrics = require("./Metrics-Bcb9vCAe.cjs");
-const require_SourceControlProviderDiscoveryCatalog = require("./SourceControlProviderDiscoveryCatalog-DreaAH1H.cjs");
+const require_SourceControlProviderDiscoveryCatalog = require("./SourceControlProviderDiscoveryCatalog-Dm_lhrhv.cjs");
 const require_sourceControl = require("./sourceControl-B0D1Op29.cjs");
 let _effect_platform_node_NodeRuntime = require("@effect/platform-node/NodeRuntime");
 _effect_platform_node_NodeRuntime = require_rolldown_runtime.__toESM(_effect_platform_node_NodeRuntime, 1);
@@ -1408,6 +1408,7 @@ function logPathHydrationWarning(message, error) {
 	console.warn(`[server] ${message}`, error instanceof Error ? error.message : error ?? "");
 }
 function fixPath(options = {}) {
+	if (options.inheritedFromDesktop) return;
 	const platform = options.platform ?? process.platform;
 	const env = options.env ?? process.env;
 	const logWarning = options.logWarning ?? logPathHydrationWarning;
@@ -2494,9 +2495,14 @@ const INLINE_ATTACHMENT_EXTENSIONS = /* @__PURE__ */ new Set([
 	".webp"
 ]);
 const STATIC_CONTENT_TYPES = {
+	".avif": "image/avif",
+	".bmp": "image/bmp",
 	".css": "text/css; charset=utf-8",
 	".html": "text/html; charset=utf-8",
+	".gif": "image/gif",
 	".ico": "image/x-icon",
+	".jpeg": "image/jpeg",
+	".jpg": "image/jpeg",
 	".js": "text/javascript; charset=utf-8",
 	".json": "application/json; charset=utf-8",
 	".map": "application/json; charset=utf-8",
@@ -2504,7 +2510,8 @@ const STATIC_CONTENT_TYPES = {
 	".svg": "image/svg+xml; charset=utf-8",
 	".txt": "text/plain; charset=utf-8",
 	".wasm": "application/wasm",
-	".webmanifest": "application/manifest+json; charset=utf-8"
+	".webmanifest": "application/manifest+json; charset=utf-8",
+	".webp": "image/webp"
 };
 const browserApiCorsLayer = effect_unstable_http.HttpRouter.cors({
 	allowedMethods: [
@@ -2823,16 +2830,17 @@ const projectFaviconRouteLayer = effect_unstable_http.HttpRouter.add("GET", "/ap
 	if (effect.Option.isNone(url)) return effect_unstable_http.HttpServerResponse.text("Bad Request", { status: 400 });
 	const projectCwd = url.value.searchParams.get("cwd");
 	if (!projectCwd) return effect_unstable_http.HttpServerResponse.text("Missing cwd parameter", { status: 400 });
-	const faviconFilePath = yield* (yield* ProjectFaviconResolver).resolvePath(projectCwd);
-	if (!faviconFilePath) return effect_unstable_http.HttpServerResponse.text(FALLBACK_PROJECT_FAVICON_SVG, {
+	const favicon = yield* (yield* ProjectFaviconResolver).readIcon(projectCwd);
+	if (!favicon) return effect_unstable_http.HttpServerResponse.text(FALLBACK_PROJECT_FAVICON_SVG, {
 		status: 200,
 		contentType: "image/svg+xml",
 		headers: inlineImageResponseHeaders("fallback.svg")
 	});
-	return yield* effect_unstable_http.HttpServerResponse.file(faviconFilePath, {
+	return effect_unstable_http.HttpServerResponse.uint8Array(favicon.bytes, {
 		status: 200,
-		headers: inlineImageResponseHeaders(faviconFilePath)
-	}).pipe(effect.Effect.catch(() => effect.Effect.succeed(effect_unstable_http.HttpServerResponse.text("Internal Server Error", { status: 500 }))));
+		contentType: resolveStaticContentType(favicon.path, yield* effect.Path.Path),
+		headers: inlineImageResponseHeaders(favicon.path)
+	});
 }).pipe(effect.Effect.catchTag("AuthError", respondToAuthError)));
 const AvatarFormSchema = effect_Schema.Struct({ avatar: effect_unstable_http.Multipart.SingleFileSchema });
 const PROJECT_ID_PATTERN = /^[A-Za-z0-9_-]+$/;
@@ -6569,8 +6577,35 @@ const repairProjectionThreadSubagentNestingColumns = effect_Effect.fn("repairPro
 const repairContextHandoffRuntimeSessions = effect_Effect.fn("repairContextHandoffRuntimeSessions")(function* () {
 	yield* _042_ContextHandoffRuntimeSessions_default;
 });
+const repairProjectionThreadSummaryState = effect_Effect.gen(function* () {
+	const sql = yield* effect_unstable_sql_SqlClient.SqlClient;
+	yield* sql`
+    CREATE TABLE IF NOT EXISTS ryco_compatibility_repairs (
+      repair_key TEXT PRIMARY KEY
+    )
+  `;
+	yield* sql.withTransaction(effect_Effect.gen(function* () {
+		const completed = yield* sql`
+      SELECT repair_key FROM ryco_compatibility_repairs
+      WHERE repair_key = 'projection-thread-summary-v1'
+    `;
+		const objects = yield* sql`
+      SELECT name FROM sqlite_master WHERE name IN (
+        'projection_thread_user_input_requests',
+        'idx_projection_thread_user_input_requests_thread_pending',
+        'idx_projection_thread_proposed_plans_thread_turn_updated'
+      )
+    `;
+		if (completed.length > 0 && objects.length === 3) return;
+		yield* _044_ProjectionThreadSummaryState_default;
+		yield* sql`
+      INSERT OR IGNORE INTO ryco_compatibility_repairs (repair_key)
+      VALUES ('projection-thread-summary-v1')
+    `;
+	}));
+});
 const repairProjectionThreadReadModelMigrations = effect_Effect.fn("repairProjectionThreadReadModelMigrations")(function* (toMigrationInclusive) {
-	if (toMigrationInclusive >= 44) yield* _044_ProjectionThreadSummaryState_default;
+	if (toMigrationInclusive >= 44) yield* repairProjectionThreadSummaryState;
 	if (toMigrationInclusive >= 45) yield* _045_ProjectionThreadHistoryPaginationIndexes_default;
 	if (toMigrationInclusive >= 46) yield* _046_ProjectionThreadMessageDispatchMode_default;
 	if (toMigrationInclusive >= 47) yield* _047_ProjectionThreadsGoal_default;
@@ -13500,26 +13535,26 @@ const make$13 = effect.Effect.fn("makeSourceControlProviderRegistry")(function*
 	const azureDevOpsCli = yield* AzureDevOpsCli;
 	const fileSystem = yield* effect.FileSystem.FileSystem;
 	const github = yield* makeLazyProvider("github", effect.Effect.tryPromise({
-		try: () => Promise.resolve().then(() => require("./GitHubSourceControlProvider-8hsv_kCE.cjs")),
+		try: () => Promise.resolve().then(() => require("./GitHubSourceControlProvider-CItCpOcC.cjs")),
 		catch: (cause) => providerLoadError("github", cause)
 	}).pipe(effect.Effect.flatMap((module) => module.make()), effect.Effect.provideService(GitHubCli, githubCli), effect.Effect.provideService(effect.FileSystem.FileSystem, fileSystem)));
 	const gitlab = yield* makeLazyProvider("gitlab", effect.Effect.tryPromise({
-		try: () => Promise.resolve().then(() => require("./GitLabSourceControlProvider-B0ZbF9Zx.cjs")),
+		try: () => Promise.resolve().then(() => require("./GitLabSourceControlProvider-CMce22nU.cjs")),
 		catch: (cause) => providerLoadError("gitlab", cause)
 	}).pipe(effect.Effect.flatMap((module) => module.make()), effect.Effect.provideService(GitLabCli, gitlabCli)));
 	const bitbucket = yield* makeLazyProvider("bitbucket", effect.Effect.tryPromise({
-		try: () => Promise.resolve().then(() => require("./BitbucketSourceControlProvider-BzhsQwH-.cjs")),
+		try: () => Promise.resolve().then(() => require("./BitbucketSourceControlProvider-CD8IvXQK.cjs")),
 		catch: (cause) => providerLoadError("bitbucket", cause)
 	}).pipe(effect.Effect.flatMap((module) => module.make()), effect.Effect.provideService(BitbucketApi, bitbucketApi)), {
 		searchRepositories: true,
 		cloneAuthentication: true
 	});
 	const forgejo = yield* makeLazyProvider("forgejo", effect.Effect.tryPromise({
-		try: () => Promise.resolve().then(() => require("./ForgejoSourceControlProvider-Dh6DOoc8.cjs")),
+		try: () => Promise.resolve().then(() => require("./ForgejoSourceControlProvider-JgiyrMqp.cjs")),
 		catch: (cause) => providerLoadError("forgejo", cause)
 	}).pipe(effect.Effect.flatMap((module) => module.make()), effect.Effect.provideService(ForgejoApi, forgejoApi)));
 	const azureDevOps = yield* makeLazyProvider("azure-devops", effect.Effect.tryPromise({
-		try: () => Promise.resolve().then(() => require("./AzureDevOpsSourceControlProvider-CrvgKNf2.cjs")),
+		try: () => Promise.resolve().then(() => require("./AzureDevOpsSourceControlProvider-COmd21c-.cjs")),
 		catch: (cause) => providerLoadError("azure-devops", cause)
 	}).pipe(effect.Effect.flatMap((module) => module.make()), effect.Effect.provideService(AzureDevOpsCli, azureDevOpsCli)));
 	const bitbucketDiscovery = require_SourceControlProviderDiscoveryCatalog.makeBitbucketDiscovery(bitbucketApi);
@@ -34008,7 +34043,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.CodexSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.CodexSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./CodexDriver-CR0S17Lb.cjs")),
+			try: () => Promise.resolve().then(() => require("./CodexDriver-BzR8gA8w.cjs")),
 			catch: (cause) => driverImportError(codexDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ CodexDriver }) => CodexDriver.create(input)))
 	},
@@ -34022,7 +34057,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.ClaudeSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.ClaudeSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./ClaudeDriver-B7mbf51W.cjs")),
+			try: () => Promise.resolve().then(() => require("./ClaudeDriver-Dry5uJfX.cjs")),
 			catch: (cause) => driverImportError(claudeDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ ClaudeDriver }) => ClaudeDriver.create(input)))
 	},
@@ -34036,7 +34071,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.CopilotSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.CopilotSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./CopilotDriver-IBd27Ji2.cjs")),
+			try: () => Promise.resolve().then(() => require("./CopilotDriver-rLcA8PSN.cjs")),
 			catch: (cause) => driverImportError(copilotDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ CopilotDriver }) => CopilotDriver.create(input)))
 	},
@@ -34050,7 +34085,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.CursorSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.CursorSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./CursorDriver-C4Enoe9N.cjs")),
+			try: () => Promise.resolve().then(() => require("./CursorDriver-C3s-8s9F.cjs")),
 			catch: (cause) => driverImportError(cursorDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ CursorDriver }) => CursorDriver.create(input)))
 	},
@@ -34064,7 +34099,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.GrokSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.GrokSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./GrokDriver-RyyFeh_q.cjs")),
+			try: () => Promise.resolve().then(() => require("./GrokDriver-D0jraOC_.cjs")),
 			catch: (cause) => driverImportError(grokDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ GrokDriver }) => GrokDriver.create(input)))
 	},
@@ -34078,7 +34113,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: require_collectUint8StreamText.OpenCodeSettings,
 		defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.OpenCodeSettings)({}),
 		create: (input) => effect.Effect.tryPromise({
-			try: () => Promise.resolve().then(() => require("./OpenCodeDriver-CDcvPT9v.cjs")),
+			try: () => Promise.resolve().then(() => require("./OpenCodeDriver-DxGpgtDS.cjs")),
 			catch: (cause) => driverImportError(openCodeDriverKind, input, cause)
 		}).pipe(effect.Effect.flatMap(({ OpenCodeDriver }) => OpenCodeDriver.create(input)))
 	}
@@ -34793,7 +34828,7 @@ const scopedSafeTeardown = (label) => (effect$28) => effect.Effect.gen(function*
 });
 //#endregion
 //#region package.json
-var version$1 = "0.1.23";
+var version$1 = "0.1.25";
 //#endregion
 //#region src/provider/Layers/CodexProvider.ts
 const PROVIDER_PROBE_TIMEOUT_MS = 8e3;
@@ -43378,6 +43413,36 @@ function resolveWorktreeCheckoutPath(input) {
 	return resolveAppManagedWorktreeCheckoutPath(input.appWorktreesRoot, input.projectId, input.branchName);
 }
 //#endregion
+//#region src/persistence/Services/ProjectionProjects.ts
+/**
+* ProjectionProjectRepository - Projection repository interface for projects.
+*
+* Owns persistence operations for project rows in the orchestration projection
+* read model.
+*
+* @module ProjectionProjectRepository
+*/
+const ProjectionProject = effect.Schema.Struct({
+	projectId: require_collectUint8StreamText.ProjectId,
+	title: effect.Schema.String,
+	workspaceRoot: effect.Schema.String,
+	projectMetadataDir: require_collectUint8StreamText.ProjectMetadataDir,
+	defaultModelSelection: effect.Schema.NullOr(require_collectUint8StreamText.ModelSelection),
+	customSystemPrompt: effect.Schema.optional(effect.Schema.NullOr(effect.Schema.String)),
+	customAvatarContentHash: effect.Schema.NullOr(effect.Schema.String),
+	preferredRemoteName: effect.Schema.NullOr(effect.Schema.String),
+	scripts: effect.Schema.Array(require_collectUint8StreamText.ProjectScript),
+	createdAt: require_collectUint8StreamText.IsoDateTime,
+	updatedAt: require_collectUint8StreamText.IsoDateTime,
+	deletedAt: effect.Schema.NullOr(require_collectUint8StreamText.IsoDateTime)
+});
+const GetProjectionProjectInput = effect.Schema.Struct({ projectId: require_collectUint8StreamText.ProjectId });
+const DeleteProjectionProjectInput = effect.Schema.Struct({ projectId: require_collectUint8StreamText.ProjectId });
+/**
+* ProjectionProjectRepository - Service tag for project projection persistence.
+*/
+var ProjectionProjectRepository = class extends effect.Context.Service()("ryco/persistence/Services/ProjectionProjects/ProjectionProjectRepository") {};
+//#endregion
 //#region src/persistence/Services/ProjectionWorktrees.ts
 /**
 * ProjectionWorktreeRepository - Projection repository interface for worktrees.
@@ -44674,6 +44739,7 @@ const RPC_ACCESS_POLICY = {
 	[require_collectUint8StreamText.WS_METHODS.projectsList]: "viewer",
 	[require_collectUint8StreamText.WS_METHODS.projectsListEntries]: "operator",
 	[require_collectUint8StreamText.WS_METHODS.projectsReadFile]: "operator",
+	[require_collectUint8StreamText.WS_METHODS.projectsReadIcon]: "viewer",
 	[require_collectUint8StreamText.WS_METHODS.projectsReadFileBinary]: "operator",
 	[require_collectUint8StreamText.WS_METHODS.projectsRemove]: "operator",
 	[require_collectUint8StreamText.WS_METHODS.projectsSearchEntries]: "operator",
@@ -46589,6 +46655,9 @@ const makeWsRpcContext = (principal) => effect.Effect.gen(function* () {
 		openCodeMcp
 	]);
 	const startup = yield* ServerRuntimeStartup;
+	const projectionProjects = yield* effect.Effect.serviceOption(ProjectionProjectRepository);
+	const projectFaviconResolver = yield* effect.Effect.serviceOption(ProjectFaviconResolver);
+	const projectAvatarStore = yield* effect.Effect.serviceOption(ProjectAvatarStore);
 	const workspaceEntries = yield* WorkspaceEntries;
 	const workspaceFileSystem = yield* WorkspaceFileSystem;
 	const workspaceAccessPolicy = yield* WorkspaceAccessPolicy;
@@ -46964,6 +47033,9 @@ const makeWsRpcContext = (principal) => effect.Effect.gen(function* () {
 		lifecycleEvents,
 		serverSettings,
 		mcpRegistry,
+		projectionProjects,
+		projectFaviconResolver,
+		projectAvatarStore,
 		workspaceEntries,
 		workspaceFileSystem,
 		sourceControlDiscovery,
@@ -48111,10 +48183,51 @@ const makeTerminalHandlers = (ctx) => {
 	});
 };
 //#endregion
+//#region src/project/readProjectIcon.ts
+const iconTypes = {
+	".png": "image/png",
+	".jpg": "image/jpeg",
+	".jpeg": "image/jpeg",
+	".webp": "image/webp",
+	".svg": "image/svg+xml",
+	".ico": "image/x-icon"
+};
+/** Resolve only the registered project's artwork; callers cannot supply filesystem paths. */
+function readProjectIcon(project, services) {
+	return effect.Effect.gen(function* () {
+		if (project.customAvatarContentHash && services.avatar) {
+			const avatar = yield* services.avatar.read(project.id);
+			if (avatar && avatar.bytes.length <= 524288) return {
+				mimeType: "image/png",
+				dataBase64: avatar.bytes.toString("base64")
+			};
+		}
+		const icon = services.favicon ? yield* services.favicon.readIcon(project.workspaceRoot) : null;
+		if (!icon || icon.bytes.length > 524288) return null;
+		const mimeType = iconTypes[(0, node_path.extname)(icon.path).toLowerCase()];
+		return mimeType ? {
+			mimeType,
+			dataBase64: Buffer.from(icon.bytes).toString("base64")
+		} : null;
+	});
+}
+//#endregion
 //#region src/ws/projectRpc.ts
 const makeProjectHandlers = (ctx) => {
 	const { ownerEffect, workspaceEntries, workspaceFileSystem, open } = ctx;
 	return defineWsHandlers({
+		[require_collectUint8StreamText.WS_METHODS.projectsReadIcon]: (input) => ctx.withAccess("viewer", require_collectUint8StreamText.WS_METHODS.projectsReadIcon, effect.Effect.gen(function* () {
+			if (effect.Option.isNone(ctx.projectionProjects)) return null;
+			const project = yield* ctx.projectionProjects.value.getById(input).pipe(effect.Effect.mapError(() => new require_collectUint8StreamText.ProjectReadIconError({ message: "Could not load project artwork." })));
+			if (effect.Option.isNone(project) || project.value.deletedAt !== null) return null;
+			return yield* readProjectIcon({
+				...project.value,
+				id: project.value.projectId
+			}, {
+				favicon: effect.Option.getOrNull(ctx.projectFaviconResolver),
+				avatar: effect.Option.getOrNull(ctx.projectAvatarStore)
+			});
+		})),
 		[require_collectUint8StreamText.WS_METHODS.projectsSearchEntries]: (input) => observeRpcEffect(require_collectUint8StreamText.WS_METHODS.projectsSearchEntries, ownerEffect(require_collectUint8StreamText.WS_METHODS.projectsSearchEntries, workspaceEntries.search(input).pipe(effect.Effect.mapError((cause) => new require_collectUint8StreamText.ProjectSearchEntriesError({
 			message: `Failed to search workspace entries: ${cause.detail}`,
 			cause
@@ -49264,7 +49377,7 @@ async function readResourceTelemetryHistory(input) {
 //#endregion
 //#region src/diagnostics/ProcessDiagnostics.ts
 const QUERY_TIMEOUT_MS = 3e3;
-const MAX_OUTPUT_BYTES = 4194304;
+const MAX_OUTPUT_BYTES$1 = 4194304;
 const MAX_PROCESSES = 2e4;
 /** Parse fixed numeric columns; never capture command-line arguments. */
 function parseProcessTable(output) {
@@ -49345,7 +49458,7 @@ async function queryProcessTable(fresh = false) {
 		(0, node_child_process.execFile)("/bin/ps", ["-axo", "pid=,ppid=,lstart=,pcpu=,rss=,stat=,etime=,comm="], {
 			encoding: "utf8",
 			timeout: QUERY_TIMEOUT_MS,
-			maxBuffer: MAX_OUTPUT_BYTES,
+			maxBuffer: MAX_OUTPUT_BYTES$1,
 			env: {
 				...process.env,
 				LC_ALL: "C"
@@ -69823,7 +69936,7 @@ function makeNodeNativeClaimService(options) {
 				claim: input.claim,
 				requireCurrent: true
 			});
-			if (input.result.status !== "claimed" || input.result.node.environmentId !== input.claim.environmentId || input.result.node.fingerprint !== input.claim.nodeFingerprint || input.result.node.label !== expectedLabel || input.result.node.effectiveRole !== "owner") return claimError("native_node_claim_conflict");
+			if (input.result.status !== "claimed" || input.result.node.environmentId !== input.claim.environmentId || input.result.node.fingerprint !== input.claim.nodeFingerprint || input.result.node.label !== expectedLabel && !(validated.descriptor.state === "active" && input.result.disposition === "reconnected") || input.result.node.effectiveRole !== "owner") return claimError("native_node_claim_conflict");
 			const active = {
 				hubOrigin: validated.descriptor.hubOrigin,
 				nodeId: input.result.node.id,
@@ -73603,6 +73716,8 @@ var RelayConnectionSession = class {
 	#frameDeliveryActive = false;
 	#settled = false;
 	#closed = false;
+	#authenticationStarted = false;
+	#rejectAuthentication;
 	#listeners;
 	constructor(options) {
 		this.#identity = options.identity;
@@ -73618,8 +73733,21 @@ var RelayConnectionSession = class {
 	get ready() {
 		return this.#ready;
 	}
-	async authenticate() {
-		if (this.#socket !== void 0) throw new RelayConnectionError("internal_error");
+	authenticate() {
+		if (this.#authenticationStarted || this.#closed) return Promise.reject(new RelayConnectionError("internal_error"));
+		this.#authenticationStarted = true;
+		return new Promise((resolve, reject) => {
+			this.#rejectAuthentication = reject;
+			this.#authenticate().then((ready) => {
+				this.#rejectAuthentication = void 0;
+				resolve(ready);
+			}, (error) => {
+				this.#rejectAuthentication = void 0;
+				reject(error);
+			});
+		});
+	}
+	async #authenticate() {
 		let auth;
 		try {
 			auth = await this.#identity.createRelayAuthenticationFrame(this.#hubOrigin, {
@@ -73668,6 +73796,7 @@ var RelayConnectionSession = class {
 			};
 			const onOpen = () => {
 				if (this.#closed) return;
+				if (this.#timer !== void 0) this.#scheduler.clearTimeout(this.#timer);
 				try {
 					socket.send(authBytes);
 				} catch {
@@ -73741,6 +73870,7 @@ var RelayConnectionSession = class {
 			socket.addEventListener("message", onMessage);
 			socket.addEventListener("error", onError);
 			socket.addEventListener("close", onClose);
+			this.#timer = this.#scheduler.setTimeout(() => fail(new RelayConnectionError("network")), require_collectUint8StreamText.RELAY_AUTHENTICATION_DEADLINE_MS);
 		});
 	}
 	/**
@@ -73772,6 +73902,11 @@ var RelayConnectionSession = class {
 	close() {
 		if (this.#closed) return;
 		this.#closed = true;
+		if (!this.#settled) {
+			this.#settled = true;
+			this.#rejectAuthentication?.(new RelayConnectionError("network"));
+		}
+		this.#rejectAuthentication = void 0;
 		for (const frame of this.#pendingPostReadyFrames) clearRelayFrameBytes(frame);
 		this.#pendingPostReadyFrames = [];
 		this.#clearPendingAuthentication();
@@ -89730,83 +89865,173 @@ const ProviderRegistryLive = effect.Layer.effect(ProviderRegistry, effect.Effect
 	};
 }));
 //#endregion
-//#region src/project/Layers/ProjectFaviconResolver.ts
-const FAVICON_CANDIDATES = [
-	"favicon.svg",
-	"favicon.ico",
-	"favicon.png",
-	"public/favicon.svg",
-	"public/favicon.ico",
-	"public/favicon.png",
-	"app/favicon.ico",
-	"app/favicon.png",
-	"app/icon.svg",
-	"app/icon.png",
-	"app/icon.ico",
-	"src/favicon.ico",
-	"src/favicon.svg",
-	"src/app/favicon.ico",
-	"src/app/icon.svg",
-	"src/app/icon.png",
-	"assets/icon.svg",
-	"assets/icon.png",
-	"assets/logo.svg",
-	"assets/logo.png",
-	".idea/icon.svg"
-];
-const ICON_SOURCE_FILES = [
-	"index.html",
-	"public/index.html",
-	"app/routes/__root.tsx",
-	"src/routes/__root.tsx",
-	"app/root.tsx",
-	"src/root.tsx",
-	"src/index.html"
-];
-const LINK_ICON_HTML_RE = /<link\b(?=[^>]*\brel=["'](?:icon|shortcut icon)["'])(?=[^>]*\bhref=["']([^"'?]+))[^>]*>/i;
-const LINK_ICON_OBJ_RE = /(?=[^}]*\brel\s*:\s*["'](?:icon|shortcut icon)["'])(?=[^}]*\bhref\s*:\s*["']([^"'?]+))[^}]*/i;
-function extractIconHref(source) {
-	const htmlMatch = source.match(LINK_ICON_HTML_RE);
-	if (htmlMatch?.[1]) return htmlMatch[1];
-	const objMatch = source.match(LINK_ICON_OBJ_RE);
-	if (objMatch?.[1]) return objMatch[1];
-	return null;
-}
-const makeProjectFaviconResolver = effect.Effect.gen(function* () {
-	const fileSystem = yield* effect.FileSystem.FileSystem;
-	const path = yield* effect.Path.Path;
-	const resolveIconHref = (projectCwd, href) => {
-		const clean = href.replace(/^\//, "");
-		return [path.join(projectCwd, "public", clean), path.join(projectCwd, clean)];
-	};
-	const isPathWithinProject = (projectCwd, candidatePath) => {
-		const relative = path.relative(path.resolve(projectCwd), path.resolve(candidatePath));
-		return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
-	};
-	const findExistingFile = effect.Effect.fn("ProjectFaviconResolver.findExistingFile")(function* (projectCwd, candidates) {
+//#region src/project/projectFaviconWorker.ts
+/**
+* Serialized into a short-lived Node/Bun child. Keep this function self-contained:
+* opening a cloud-backed file can block in the kernel even after an async read
+* is cancelled. A separate process keeps optional icons out of the node's shared
+* filesystem/DNS worker pool, and lets the parent terminate a stalled read.
+*/
+function projectFaviconWorkerMain() {
+	const fs = process.getBuiltinModule("node:fs");
+	const path = process.getBuiltinModule("node:path");
+	const iconLimit = 524288;
+	const sourceLimit = 262144;
+	const candidates = [
+		"favicon.svg",
+		"favicon.ico",
+		"favicon.png",
+		"public/favicon.svg",
+		"public/favicon.ico",
+		"public/favicon.png",
+		"app/favicon.ico",
+		"app/favicon.png",
+		"app/icon.svg",
+		"app/icon.png",
+		"app/icon.ico",
+		"src/favicon.ico",
+		"src/favicon.svg",
+		"src/app/favicon.ico",
+		"src/app/icon.svg",
+		"src/app/icon.png",
+		"assets/icon.svg",
+		"assets/icon.png",
+		"assets/logo.svg",
+		"assets/logo.png",
+		".idea/icon.svg"
+	];
+	const sources = [
+		"index.html",
+		"public/index.html",
+		"app/routes/__root.tsx",
+		"src/routes/__root.tsx",
+		"app/root.tsx",
+		"src/root.tsx",
+		"src/index.html"
+	];
+	try {
+		const root = fs.realpathSync(process.argv[1]);
+		const read = (relative, limit) => {
+			let fd;
+			try {
+				const filename = fs.realpathSync(path.resolve(root, relative));
+				const within = path.relative(root, filename);
+				if (within === ".." || within.startsWith(`..${path.sep}`) || path.isAbsolute(within)) return null;
+				fd = fs.openSync(filename, fs.constants.O_RDONLY | fs.constants.O_NONBLOCK);
+				const stats = fs.fstatSync(fd);
+				if (!stats.isFile() || stats.size > limit) return null;
+				const bytes = Buffer.alloc(limit + 1);
+				let length = 0;
+				while (length < bytes.length) {
+					const count = fs.readSync(fd, bytes, length, bytes.length - length, null);
+					if (count === 0) break;
+					length += count;
+				}
+				return length > limit ? null : {
+					path: filename,
+					bytes: bytes.subarray(0, length)
+				};
+			} catch {
+				return null;
+			} finally {
+				if (fd !== void 0) fs.closeSync(fd);
+			}
+		};
+		const send = (icon) => {
+			process.stdout.write(JSON.stringify({
+				path: icon.path,
+				base64: icon.bytes.toString("base64")
+			}));
+		};
 		for (const candidate of candidates) {
-			if (!isPathWithinProject(projectCwd, candidate)) continue;
-			if ((yield* fileSystem.stat(candidate).pipe(effect.Effect.catch(() => effect.Effect.succeed(null))))?.type === "File") return candidate;
+			const icon = read(candidate, iconLimit);
+			if (icon) {
+				send(icon);
+				return;
+			}
 		}
-		return null;
-	});
-	return { resolvePath: effect.Effect.fn("ProjectFaviconResolver.resolvePath")(function* (cwd) {
-		for (const candidate of FAVICON_CANDIDATES) {
-			const resolved = path.join(cwd, candidate);
-			const existing = yield* findExistingFile(cwd, [resolved]);
-			if (existing) return existing;
-		}
-		for (const sourceFile of ICON_SOURCE_FILES) {
-			const sourcePath = path.join(cwd, sourceFile);
-			const source = yield* fileSystem.readFileString(sourcePath).pipe(effect.Effect.catch(() => effect.Effect.succeed(null)));
-			if (!source) continue;
-			const href = extractIconHref(source);
+		for (const source of sources) {
+			const text = read(source, sourceLimit)?.bytes.toString("utf8");
+			if (!text) continue;
+			const href = text.match(/<link\b(?=[^>]*\brel=["'](?:icon|shortcut icon)["'])(?=[^>]*\bhref=["']([^"'?]+))[^>]*>/i)?.[1] ?? text.match(/(?=[^}]*\brel\s*:\s*["'](?:icon|shortcut icon)["'])(?=[^}]*\bhref\s*:\s*["']([^"'?]+))[^}]*/i)?.[1];
 			if (!href) continue;
-			const existing = yield* findExistingFile(cwd, resolveIconHref(cwd, href));
-			if (existing) return existing;
+			const clean = href.replace(/^\//, "");
+			for (const candidate of [path.join("public", clean), clean]) {
+				const icon = read(candidate, iconLimit);
+				if (icon) {
+					send(icon);
+					return;
+				}
+			}
 		}
-		return null;
-	}) };
+	} catch {}
+	process.stdout.write("null");
+}
+const MAX_OUTPUT_BYTES = 786432;
+const WORKER_SCRIPT = `(${projectFaviconWorkerMain.toString()})()`;
+function readProjectFavicon(cwd, options = {}) {
+	return new Promise((resolve) => {
+		if (options.signal?.aborted) {
+			resolve(null);
+			return;
+		}
+		let child;
+		const abort = () => {
+			child?.kill("SIGKILL");
+		};
+		const cleanup = () => options.signal?.removeEventListener("abort", abort);
+		options.signal?.addEventListener("abort", abort, { once: true });
+		try {
+			child = (options.execFile ?? node_child_process.execFile)(process.execPath, [
+				"--eval",
+				WORKER_SCRIPT,
+				"--",
+				cwd
+			], {
+				env: {
+					...process.env,
+					ELECTRON_RUN_AS_NODE: "1",
+					NODE_OPTIONS: void 0,
+					NODE_PATH: void 0
+				},
+				encoding: "utf8",
+				timeout: options.timeoutMs ?? 1500,
+				killSignal: "SIGKILL",
+				maxBuffer: MAX_OUTPUT_BYTES,
+				windowsHide: true
+			}, (error, stdout) => {
+				cleanup();
+				if (error) {
+					resolve(null);
+					return;
+				}
+				try {
+					const result = JSON.parse(stdout);
+					if (typeof result !== "object" || result === null || !("path" in result) || !("base64" in result) || typeof result.path !== "string" || typeof result.base64 !== "string") {
+						resolve(null);
+						return;
+					}
+					const bytes = Buffer.from(result.base64, "base64");
+					resolve(bytes.length <= 524288 ? {
+						path: result.path,
+						bytes
+					} : null);
+				} catch {
+					resolve(null);
+				}
+			});
+			if (options.signal?.aborted) abort();
+		} catch {
+			cleanup();
+			resolve(null);
+		}
+	});
+}
+//#endregion
+//#region src/project/Layers/ProjectFaviconResolver.ts
+const makeProjectFaviconResolver = effect.Effect.gen(function* () {
+	const workers = yield* effect_Semaphore.make(2);
+	return { readIcon: (cwd) => workers.withPermit(effect.Effect.promise((signal) => readProjectFavicon(cwd, { signal }))).pipe(effect.Effect.timeout("5 seconds"), effect.Effect.catch(() => effect.Effect.succeed(null))) };
 });
 const ProjectFaviconResolverLive = effect.Layer.effect(ProjectFaviconResolver, makeProjectFaviconResolver);
 //#endregion
@@ -89874,22 +90099,25 @@ function buildRepositoryIdentity(input) {
 const DEFAULT_REPOSITORY_IDENTITY_CACHE_CAPACITY = 512;
 const DEFAULT_POSITIVE_CACHE_TTL = effect.Duration.minutes(1);
 const DEFAULT_NEGATIVE_CACHE_TTL = effect.Duration.minutes(1);
+const GIT_IDENTITY_PROBE_TIMEOUT_MS = 1e3;
 async function resolveRepositoryIdentityCacheKey(cwd) {
-	let cacheKey = cwd;
 	try {
 		const topLevelResult = await runProcess("git", [
 			"-C",
 			cwd,
 			"rev-parse",
 			"--show-toplevel"
-		], { allowNonZeroExit: true });
-		if (topLevelResult.code !== 0) return cacheKey;
+		], {
+			allowNonZeroExit: true,
+			timeoutMs: GIT_IDENTITY_PROBE_TIMEOUT_MS
+		});
+		if (topLevelResult.timedOut || topLevelResult.code !== 0) return null;
 		const candidate = topLevelResult.stdout.trim();
-		if (candidate.length > 0) cacheKey = candidate;
+		if (candidate.length > 0) return candidate;
 	} catch {
-		return cacheKey;
+		return null;
 	}
-	return cacheKey;
+	return null;
 }
 async function resolveRepositoryIdentityFromCacheKey(cacheKey) {
 	try {
@@ -89898,8 +90126,11 @@ async function resolveRepositoryIdentityFromCacheKey(cacheKey) {
 			cacheKey,
 			"remote",
 			"-v"
-		], { allowNonZeroExit: true });
-		if (remoteResult.code !== 0) return null;
+		], {
+			allowNonZeroExit: true,
+			timeoutMs: GIT_IDENTITY_PROBE_TIMEOUT_MS
+		});
+		if (remoteResult.timedOut || remoteResult.code !== 0) return null;
 		const allRemotes = parseRemoteFetchUrls(remoteResult.stdout);
 		const remote = pickPrimaryRemote(allRemotes);
 		return remote ? buildRepositoryIdentity({
@@ -89912,6 +90143,13 @@ async function resolveRepositoryIdentityFromCacheKey(cacheKey) {
 	}
 }
 const makeRepositoryIdentityResolver = effect.Effect.fn("makeRepositoryIdentityResolver")(function* (options = {}) {
+	const workspaceRootCache = yield* effect.Cache.makeWith((cwd) => effect.Effect.promise(() => resolveRepositoryIdentityCacheKey(cwd)), {
+		capacity: options.cacheCapacity ?? DEFAULT_REPOSITORY_IDENTITY_CACHE_CAPACITY,
+		timeToLive: effect.Exit.match({
+			onSuccess: (value) => value === null ? options.negativeCacheTtl ?? DEFAULT_NEGATIVE_CACHE_TTL : options.positiveCacheTtl ?? DEFAULT_POSITIVE_CACHE_TTL,
+			onFailure: () => effect.Duration.zero
+		})
+	});
 	const repositoryIdentityCache = yield* effect.Cache.makeWith((cacheKey) => effect.Effect.promise(() => resolveRepositoryIdentityFromCacheKey(cacheKey)), {
 		capacity: options.cacheCapacity ?? DEFAULT_REPOSITORY_IDENTITY_CACHE_CAPACITY,
 		timeToLive: effect.Exit.match({
@@ -89920,7 +90158,8 @@ const makeRepositoryIdentityResolver = effect.Effect.fn("makeRepositoryIdentityR
 		})
 	});
 	return { resolve: effect.Effect.fn("RepositoryIdentityResolver.resolve")(function* (cwd) {
-		const cacheKey = yield* effect.Effect.promise(() => resolveRepositoryIdentityCacheKey(cwd));
+		const cacheKey = yield* effect.Cache.get(workspaceRootCache, cwd);
+		if (cacheKey === null) return null;
 		return yield* effect.Cache.get(repositoryIdentityCache, cacheKey);
 	}) };
 });
@@ -92052,6 +92291,23 @@ const makeTraceSink = effect.Effect.fn("makeTraceSink")(function* (options) {
 	};
 });
 //#endregion
+//#region src/observability/HttpHeaderRedaction.ts
+/** Capture policy before HTTP tracing defers span completion outside its request context. */
+function makeHttpHeaderRedactor(names) {
+	const redactedNames = [
+		...names,
+		require_collectUint8StreamText.LOCAL_INTRODUCTION_CONTROL_HEADER,
+		"dpop",
+		"dpop-nonce"
+	];
+	return (key, value) => {
+		const match = /^http\.(?:request|response)\.header\.(.+)$/iu.exec(key);
+		if (!match) return value;
+		const name = match[1].toLowerCase();
+		return String(effect_unstable_http.Headers.redact(effect_unstable_http.Headers.fromInput({ [name]: String(value) }), redactedNames)[name]);
+	};
+}
+//#endregion
 //#region src/observability/LocalFileTracer.ts
 var LocalFileSpan = class {
 	_tag = "Span";
@@ -92068,9 +92324,11 @@ var LocalFileSpan = class {
 	events;
 	delegate;
 	push;
-	constructor(options, delegate, push) {
+	redactAttribute;
+	constructor(options, delegate, push, redactAttribute) {
 		this.delegate = delegate;
 		this.push = push;
+		this.redactAttribute = redactAttribute;
 		this.name = delegate.name;
 		this.spanId = delegate.spanId;
 		this.traceId = delegate.traceId;
@@ -92097,8 +92355,9 @@ var LocalFileSpan = class {
 		if (this.sampled) this.push(spanToTraceRecord(this));
 	}
 	attribute(key, value) {
-		this.attributes.set(key, value);
-		this.delegate.attribute(key, value);
+		const redacted = this.redactAttribute(key, value);
+		this.attributes.set(key, redacted);
+		this.delegate.attribute(key, redacted);
 	}
 	event(name, startTime, attributes) {
 		const nextAttributes = attributes ?? {};
@@ -92115,6 +92374,7 @@ var LocalFileSpan = class {
 	}
 };
 const makeLocalFileTracer = effect.Effect.fn("makeLocalFileTracer")(function* (options) {
+	const redactAttribute = makeHttpHeaderRedactor(yield* effect.Effect.service(effect_unstable_http.Headers.CurrentRedactedNames));
 	const sink = options.sink ?? (yield* makeTraceSink({
 		filePath: options.filePath,
 		maxBytes: options.maxBytes,
@@ -92124,7 +92384,7 @@ const makeLocalFileTracer = effect.Effect.fn("makeLocalFileTracer")(function* (o
 	const delegate = options.delegate ?? effect.Tracer.make({ span: (spanOptions) => new effect.Tracer.NativeSpan(spanOptions) });
 	return effect.Tracer.make({
 		span(spanOptions) {
-			return new LocalFileSpan(spanOptions, delegate.span(spanOptions), sink.push);
+			return new LocalFileSpan(spanOptions, delegate.span(spanOptions), sink.push, redactAttribute);
 		},
 		...delegate.context ? { context: delegate.context } : {}
 	});
@@ -92240,6 +92500,20 @@ const resolveServerEnvironmentLabel = effect.Effect.fn("resolveServerEnvironment
 	return normalizeLabel(input.cwdBaseName) ?? "Ryco environment";
 });
 //#endregion
+//#region ../../packages/shared/src/environmentIcon.ts
+/** Reuse existing platform/name metadata; icon selection must never probe permissions or delay startup. */
+function inferEnvironmentMachineKind(platform, label = "") {
+	const name = label.toLowerCase().replaceAll(/[\s_-]+/g, "");
+	if (/macmini|minipc/.test(name)) return "mini-pc";
+	if (/macstudio|workstation/.test(name)) return "workstation";
+	if (/macbook|notebook|laptop/.test(name)) return "laptop";
+	if (/imac|macpro|desktop/.test(name)) return "desktop";
+	if (platform === "windows" || platform === "win32") return "windows";
+	if (platform === "linux") return "linux";
+	if (platform === "darwin") return "desktop";
+	return "server";
+}
+//#endregion
 //#region src/environment/Layers/ServerEnvironment.ts
 function platformOs() {
 	switch (process.platform) {
@@ -92275,18 +92549,22 @@ const makeServerEnvironment = effect.Effect.fn("makeServerEnvironment")(function
 	});
 	const environmentId = require_collectUint8StreamText.EnvironmentId.make(environmentIdRaw);
 	const cwdBaseName = path.basename(serverConfig.cwd).trim();
+	const label = yield* resolveServerEnvironmentLabel({ cwdBaseName });
 	const descriptor = {
 		environmentId,
-		label: yield* resolveServerEnvironmentLabel({ cwdBaseName }),
+		label,
 		platform: {
 			os: platformOs(),
-			arch: platformArch()
+			arch: platformArch(),
+			machine: inferEnvironmentMachineKind(platformOs(), label)
 		},
 		serverVersion: version$1,
 		capabilities: {
 			repositoryIdentity: true,
 			threadSettlement: true,
 			threadSnooze: true,
+			projectIcons: true,
+			environmentIcon: true,
 			threadPriorityRanking: true,
 			fileAttachments: { maxUploadBytes: require_collectUint8StreamText.PROVIDER_SEND_TURN_MAX_FILE_BYTES }
 		}
@@ -94028,6 +94306,121 @@ const makeProjectAtlassianLinkRepository = effect.Effect.gen(function* () {
 });
 const ProjectAtlassianLinkRepositoryLive = effect.Layer.effect(ProjectAtlassianLinkRepository, makeProjectAtlassianLinkRepository);
 //#endregion
+//#region src/persistence/Layers/ProjectionProjects.ts
+const ProjectionProjectDbRow = ProjectionProject.mapFields(effect.Struct.assign({
+	defaultModelSelection: effect.Schema.NullOr(effect.Schema.fromJsonString(require_collectUint8StreamText.ModelSelection)),
+	scripts: effect.Schema.fromJsonString(effect.Schema.Array(require_collectUint8StreamText.ProjectScript))
+}));
+const makeProjectionProjectRepository = effect.Effect.gen(function* () {
+	const sql = yield* effect_unstable_sql_SqlClient.SqlClient;
+	const upsertProjectionProjectRow = effect_unstable_sql_SqlSchema.void({
+		Request: ProjectionProject,
+		execute: (row) => sql`
+        INSERT INTO projection_projects (
+          project_id,
+          title,
+          workspace_root,
+          project_metadata_dir,
+          default_model_selection_json,
+          custom_system_prompt,
+          custom_avatar_content_hash,
+          preferred_remote_name,
+          scripts_json,
+          created_at,
+          updated_at,
+          deleted_at
+        )
+        VALUES (
+          ${row.projectId},
+          ${row.title},
+          ${row.workspaceRoot},
+          ${row.projectMetadataDir},
+          ${row.defaultModelSelection !== null ? JSON.stringify(row.defaultModelSelection) : null},
+          ${row.customSystemPrompt ?? null},
+          ${row.customAvatarContentHash ?? null},
+          ${row.preferredRemoteName ?? null},
+          ${JSON.stringify(row.scripts)},
+          ${row.createdAt},
+          ${row.updatedAt},
+          ${row.deletedAt}
+        )
+        ON CONFLICT (project_id)
+        DO UPDATE SET
+          title = excluded.title,
+          workspace_root = excluded.workspace_root,
+          project_metadata_dir = excluded.project_metadata_dir,
+          default_model_selection_json = excluded.default_model_selection_json,
+          custom_system_prompt = excluded.custom_system_prompt,
+          custom_avatar_content_hash = excluded.custom_avatar_content_hash,
+          preferred_remote_name = excluded.preferred_remote_name,
+          scripts_json = excluded.scripts_json,
+          created_at = excluded.created_at,
+          updated_at = excluded.updated_at,
+          deleted_at = excluded.deleted_at
+      `
+	});
+	const getProjectionProjectRow = effect_unstable_sql_SqlSchema.findOneOption({
+		Request: GetProjectionProjectInput,
+		Result: ProjectionProjectDbRow,
+		execute: ({ projectId }) => sql`
+        SELECT
+          project_id AS "projectId",
+          title,
+          workspace_root AS "workspaceRoot",
+          project_metadata_dir AS "projectMetadataDir",
+          default_model_selection_json AS "defaultModelSelection",
+          custom_system_prompt AS "customSystemPrompt",
+          custom_avatar_content_hash AS "customAvatarContentHash",
+          preferred_remote_name AS "preferredRemoteName",
+          scripts_json AS "scripts",
+          created_at AS "createdAt",
+          updated_at AS "updatedAt",
+          deleted_at AS "deletedAt"
+        FROM projection_projects
+        WHERE project_id = ${projectId}
+      `
+	});
+	const listProjectionProjectRows = effect_unstable_sql_SqlSchema.findAll({
+		Request: effect.Schema.Void,
+		Result: ProjectionProjectDbRow,
+		execute: () => sql`
+        SELECT
+          project_id AS "projectId",
+          title,
+          workspace_root AS "workspaceRoot",
+          project_metadata_dir AS "projectMetadataDir",
+          default_model_selection_json AS "defaultModelSelection",
+          custom_system_prompt AS "customSystemPrompt",
+          custom_avatar_content_hash AS "customAvatarContentHash",
+          preferred_remote_name AS "preferredRemoteName",
+          scripts_json AS "scripts",
+          created_at AS "createdAt",
+          updated_at AS "updatedAt",
+          deleted_at AS "deletedAt"
+        FROM projection_projects
+        ORDER BY created_at ASC, project_id ASC
+      `
+	});
+	const deleteProjectionProjectRow = effect_unstable_sql_SqlSchema.void({
+		Request: DeleteProjectionProjectInput,
+		execute: ({ projectId }) => sql`
+        DELETE FROM projection_projects
+        WHERE project_id = ${projectId}
+      `
+	});
+	const upsert = (row) => upsertProjectionProjectRow(row).pipe(effect.Effect.mapError(toPersistenceSqlError("ProjectionProjectRepository.upsert:query")));
+	const getById = (input) => getProjectionProjectRow(input).pipe(effect.Effect.mapError(toPersistenceSqlError("ProjectionProjectRepository.getById:query")));
+	const listAll = () => listProjectionProjectRows().pipe(effect.Effect.mapError(toPersistenceSqlError("ProjectionProjectRepository.listAll:query")));
+	const deleteById = (input) => deleteProjectionProjectRow(input).pipe(effect.Effect.mapError(toPersistenceSqlError("ProjectionProjectRepository.deleteById:query")));
+	return {
+		upsert,
+		getById,
+		listAll,
+		deleteById
+	};
+});
+const ProjectionProjectRepositoryLive = effect.Layer.effect(ProjectionProjectRepository, makeProjectionProjectRepository);
+//#endregion
 //#region src/persistence/Layers/ProjectionWorktrees.ts
 const ProjectionWorktreeDbRowSchema$1 = ProjectionWorktree.mapFields(effect.Struct.assign({ prIsDraft: effect.Schema.NullOr(effect.Schema.Number) }));
 function toProjectionWorktree(row) {
@@ -106951,36 +107344,6 @@ const DeleteProjectionPendingApprovalInput = effect.Schema.Struct({ requestId: r
 */
 var ProjectionPendingApprovalRepository = class extends effect.Context.Service()("ryco/persistence/Services/ProjectionPendingApprovals/ProjectionPendingApprovalRepository") {};
 //#endregion
-//#region src/persistence/Services/ProjectionProjects.ts
-/**
-* ProjectionProjectRepository - Projection repository interface for projects.
-*
-* Owns persistence operations for project rows in the orchestration projection
-* read model.
-*
-* @module ProjectionProjectRepository
-*/
-const ProjectionProject = effect.Schema.Struct({
-	projectId: require_collectUint8StreamText.ProjectId,
-	title: effect.Schema.String,
-	workspaceRoot: effect.Schema.String,
-	projectMetadataDir: require_collectUint8StreamText.ProjectMetadataDir,
-	defaultModelSelection: effect.Schema.NullOr(require_collectUint8StreamText.ModelSelection),
-	customSystemPrompt: effect.Schema.optional(effect.Schema.NullOr(effect.Schema.String)),
-	customAvatarContentHash: effect.Schema.NullOr(effect.Schema.String),
-	preferredRemoteName: effect.Schema.NullOr(effect.Schema.String),
-	scripts: effect.Schema.Array(require_collectUint8StreamText.ProjectScript),
-	createdAt: require_collectUint8StreamText.IsoDateTime,
-	updatedAt: require_collectUint8StreamText.IsoDateTime,
-	deletedAt: effect.Schema.NullOr(require_collectUint8StreamText.IsoDateTime)
-});
-const GetProjectionProjectInput = effect.Schema.Struct({ projectId: require_collectUint8StreamText.ProjectId });
-const DeleteProjectionProjectInput = effect.Schema.Struct({ projectId: require_collectUint8StreamText.ProjectId });
-/**
-* ProjectionProjectRepository - Service tag for project projection persistence.
-*/
-var ProjectionProjectRepository = class extends effect.Context.Service()("ryco/persistence/Services/ProjectionProjects/ProjectionProjectRepository") {};
-//#endregion
 //#region src/persistence/Services/ProjectionState.ts
 /**
 * ProjectionStateRepository - Projection repository interface for projector cursors.
@@ -107267,121 +107630,6 @@ const makeProjectionPendingApprovalRepository = effect.Effect.gen(function* () {
 });
 const ProjectionPendingApprovalRepositoryLive = effect.Layer.effect(ProjectionPendingApprovalRepository, makeProjectionPendingApprovalRepository);
 //#endregion
-//#region src/persistence/Layers/ProjectionProjects.ts
-const ProjectionProjectDbRow = ProjectionProject.mapFields(effect.Struct.assign({
-	defaultModelSelection: effect.Schema.NullOr(effect.Schema.fromJsonString(require_collectUint8StreamText.ModelSelection)),
-	scripts: effect.Schema.fromJsonString(effect.Schema.Array(require_collectUint8StreamText.ProjectScript))
-}));
-const makeProjectionProjectRepository = effect.Effect.gen(function* () {
-	const sql = yield* effect_unstable_sql_SqlClient.SqlClient;
-	const upsertProjectionProjectRow = effect_unstable_sql_SqlSchema.void({
-		Request: ProjectionProject,
-		execute: (row) => sql`
-        INSERT INTO projection_projects (
-          project_id,
-          title,
-          workspace_root,
-          project_metadata_dir,
-          default_model_selection_json,
-          custom_system_prompt,
-          custom_avatar_content_hash,
-          preferred_remote_name,
-          scripts_json,
-          created_at,
-          updated_at,
-          deleted_at
-        )
-        VALUES (
-          ${row.projectId},
-          ${row.title},
-          ${row.workspaceRoot},
-          ${row.projectMetadataDir},
-          ${row.defaultModelSelection !== null ? JSON.stringify(row.defaultModelSelection) : null},
-          ${row.customSystemPrompt ?? null},
-          ${row.customAvatarContentHash ?? null},
-          ${row.preferredRemoteName ?? null},
-          ${JSON.stringify(row.scripts)},
-          ${row.createdAt},
-          ${row.updatedAt},
-          ${row.deletedAt}
-        )
-        ON CONFLICT (project_id)
-        DO UPDATE SET
-          title = excluded.title,
-          workspace_root = excluded.workspace_root,
-          project_metadata_dir = excluded.project_metadata_dir,
-          default_model_selection_json = excluded.default_model_selection_json,
-          custom_system_prompt = excluded.custom_system_prompt,
-          custom_avatar_content_hash = excluded.custom_avatar_content_hash,
-          preferred_remote_name = excluded.preferred_remote_name,
-          scripts_json = excluded.scripts_json,
-          created_at = excluded.created_at,
-          updated_at = excluded.updated_at,
-          deleted_at = excluded.deleted_at
-      `
-	});
-	const getProjectionProjectRow = effect_unstable_sql_SqlSchema.findOneOption({
-		Request: GetProjectionProjectInput,
-		Result: ProjectionProjectDbRow,
-		execute: ({ projectId }) => sql`
-        SELECT
-          project_id AS "projectId",
-          title,
-          workspace_root AS "workspaceRoot",
-          project_metadata_dir AS "projectMetadataDir",
-          default_model_selection_json AS "defaultModelSelection",
-          custom_system_prompt AS "customSystemPrompt",
-          custom_avatar_content_hash AS "customAvatarContentHash",
-          preferred_remote_name AS "preferredRemoteName",
-          scripts_json AS "scripts",
-          created_at AS "createdAt",
-          updated_at AS "updatedAt",
-          deleted_at AS "deletedAt"
-        FROM projection_projects
-        WHERE project_id = ${projectId}
-      `
-	});
-	const listProjectionProjectRows = effect_unstable_sql_SqlSchema.findAll({
-		Request: effect.Schema.Void,
-		Result: ProjectionProjectDbRow,
-		execute: () => sql`
-        SELECT
-          project_id AS "projectId",
-          title,
-          workspace_root AS "workspaceRoot",
-          project_metadata_dir AS "projectMetadataDir",
-          default_model_selection_json AS "defaultModelSelection",
-          custom_system_prompt AS "customSystemPrompt",
-          custom_avatar_content_hash AS "customAvatarContentHash",
-          preferred_remote_name AS "preferredRemoteName",
-          scripts_json AS "scripts",
-          created_at AS "createdAt",
-          updated_at AS "updatedAt",
-          deleted_at AS "deletedAt"
-        FROM projection_projects
-        ORDER BY created_at ASC, project_id ASC
-      `
-	});
-	const deleteProjectionProjectRow = effect_unstable_sql_SqlSchema.void({
-		Request: DeleteProjectionProjectInput,
-		execute: ({ projectId }) => sql`
-        DELETE FROM projection_projects
-        WHERE project_id = ${projectId}
-      `
-	});
-	const upsert = (row) => upsertProjectionProjectRow(row).pipe(effect.Effect.mapError(toPersistenceSqlError("ProjectionProjectRepository.upsert:query")));
-	const getById = (input) => getProjectionProjectRow(input).pipe(effect.Effect.mapError(toPersistenceSqlError("ProjectionProjectRepository.getById:query")));
-	const listAll = () => listProjectionProjectRows().pipe(effect.Effect.mapError(toPersistenceSqlError("ProjectionProjectRepository.listAll:query")));
-	const deleteById = (input) => deleteProjectionProjectRow(input).pipe(effect.Effect.mapError(toPersistenceSqlError("ProjectionProjectRepository.deleteById:query")));
-	return {
-		upsert,
-		getById,
-		listAll,
-		deleteById
-	};
-});
-const ProjectionProjectRepositoryLive = effect.Layer.effect(ProjectionProjectRepository, makeProjectionProjectRepository);
-//#endregion
 //#region src/persistence/Layers/ProjectionState.ts
 const MinLastAppliedSequenceRowSchema = effect.Schema.Struct({ minLastAppliedSequence: effect.Schema.NullOr(require_collectUint8StreamText.NonNegativeInt) });
 const makeProjectionStateRepository = effect.Effect.gen(function* () {
@@ -109854,7 +110102,14 @@ const makeProjectionSnapshotQuery = effect.Effect.gen(function* () {
 	const resolveRepositoryIdentitiesForProjects = effect.Effect.fn("ProjectionSnapshotQuery.resolveRepositoryIdentitiesForProjects")(function* (projectRows, options) {
 		const filteredProjectRows = options?.includeDeleted === true ? projectRows : projectRows.filter((row) => row.deletedAt === null);
 		const uniqueWorkspaceRoots = [...new Set(filteredProjectRows.map((row) => row.workspaceRoot))];
-		const repositoryIdentityByWorkspaceRoot = new Map(yield* effect.Effect.forEach(uniqueWorkspaceRoots, (workspaceRoot) => repositoryIdentityResolver.resolve(workspaceRoot).pipe(effect.Effect.map((identity) => [workspaceRoot, identity])), { concurrency: repositoryIdentityResolutionConcurrency }));
+		const repositoryIdentityByWorkspaceRoot = /* @__PURE__ */ new Map();
+		const resolveIdentities = effect.Effect.forEach(uniqueWorkspaceRoots, (workspaceRoot) => repositoryIdentityResolver.resolve(workspaceRoot).pipe(effect.Effect.tap((identity) => effect.Effect.sync(() => {
+			repositoryIdentityByWorkspaceRoot.set(workspaceRoot, identity);
+		}))), {
+			concurrency: repositoryIdentityResolutionConcurrency,
+			discard: true
+		});
+		yield* options?.timeoutMs === void 0 ? resolveIdentities : resolveIdentities.pipe(effect.Effect.timeoutOption(options.timeoutMs));
 		return new Map(filteredProjectRows.map((row) => [row.projectId, repositoryIdentityByWorkspaceRoot.get(row.workspaceRoot) ?? null]));
 	});
 	const listProjectRows = effect_unstable_sql_SqlSchema.findAll({
@@ -111244,7 +111499,7 @@ const makeProjectionSnapshotQuery = effect.Effect.gen(function* () {
 			if (row.completedAt !== null) updatedAt = maxIso(updatedAt, row.completedAt);
 		}
 		for (const row of stateRows) updatedAt = maxIso(updatedAt, row.updatedAt);
-		const repositoryIdentities = yield* resolveRepositoryIdentitiesForProjects(projectRows);
+		const repositoryIdentities = yield* resolveRepositoryIdentitiesForProjects(projectRows, { timeoutMs: 1e3 });
 		const latestTurnByThread = new Map(latestTurnRows.map((row) => [row.threadId, mapLatestTurn(row)]));
 		const sessionByThread = new Map(sessionRows.map((row) => [row.threadId, mapSessionRow(row)]));
 		const activeProjectIds = new Set(projectRows.filter((row) => row.deletedAt === null).map((row) => row.projectId));
@@ -111932,7 +112187,7 @@ const WorkspaceLayerLive = effect.Layer.mergeAll(WorkspaceAccessPolicyLive, Work
 const AuthLayerLive = ServerAuthLive.pipe(effect.Layer.provideMerge(PersistenceLayerLive), effect.Layer.provide(ServerSecretStoreLive));
 const AtlassianLayerLive = effect.Layer.mergeAll(layer$18, layer$2).pipe(effect.Layer.provideMerge(AtlassianConnectionRepositoryLive), effect.Layer.provideMerge(AtlassianResourceRepositoryLive), effect.Layer.provideMerge(ProjectAtlassianLinkRepositoryLive), effect.Layer.provideMerge(PersistenceLayerLive), effect.Layer.provide(ServerSecretStoreLive));
 const ProviderRuntimeLayerLive = ProviderSessionReaperLive.pipe(effect.Layer.provideMerge(ProviderLayerLive), effect.Layer.provideMerge(OrchestrationLayerLive));
-const RuntimeCoreBaseDependenciesLive = RuntimeFeatureLayerLive.pipe(effect.Layer.provideMerge(CheckpointingLayerLive), effect.Layer.provideMerge(SourceControlProviderRegistryLayerLive), effect.Layer.provideMerge(GitLayerLive), effect.Layer.provideMerge(VcsLayerLive), effect.Layer.provideMerge(ProviderRuntimeLayerLive), effect.Layer.provideMerge(TerminalLayerLive), effect.Layer.provideMerge(AgentControlLayerLive), effect.Layer.provideMerge(PersistenceLayerLive), effect.Layer.provideMerge(ProjectionWorktreeRepositoryLive), effect.Layer.provideMerge(KeybindingsLive), effect.Layer.provideMerge(ProviderRegistryLive), effect.Layer.provideMerge(ProviderInstanceRegistryHydrationLive), effect.Layer.provideMerge(AgentControlSessionRegistryLayerLive), effect.Layer.provideMerge(ProviderEventLoggersLive), effect.Layer.provideMerge(layer$1), effect.Layer.provideMerge(OpenCodeRuntimeLive), effect.Layer.provideMerge(WorkspaceLayerLive), effect.Layer.provideMerge(ProjectFaviconResolverLive), effect.Layer.provideMerge(ProjectAvatarStoreLayerLive));
+const RuntimeCoreBaseDependenciesLive = RuntimeFeatureLayerLive.pipe(effect.Layer.provideMerge(CheckpointingLayerLive), effect.Layer.provideMerge(SourceControlProviderRegistryLayerLive), effect.Layer.provideMerge(GitLayerLive), effect.Layer.provideMerge(VcsLayerLive), effect.Layer.provideMerge(ProviderRuntimeLayerLive), effect.Layer.provideMerge(TerminalLayerLive), effect.Layer.provideMerge(AgentControlLayerLive), effect.Layer.provideMerge(PersistenceLayerLive), effect.Layer.provideMerge(ProjectionWorktreeRepositoryLive), effect.Layer.provideMerge(ProjectionProjectRepositoryLive), effect.Layer.provideMerge(KeybindingsLive), effect.Layer.provideMerge(ProviderRegistryLive), effect.Layer.provideMerge(ProviderInstanceRegistryHydrationLive), effect.Layer.provideMerge(AgentControlSessionRegistryLayerLive), effect.Layer.provideMerge(ProviderEventLoggersLive), effect.Layer.provideMerge(layer$1), effect.Layer.provideMerge(OpenCodeRuntimeLive), effect.Layer.provideMerge(WorkspaceLayerLive), effect.Layer.provideMerge(ProjectFaviconResolverLive), effect.Layer.provideMerge(ProjectAvatarStoreLayerLive));
 const RuntimeDependenciesLive = effect.Layer.mergeAll(RuntimeCoreBaseDependenciesLive, UsageServiceLive).pipe(effect.Layer.provideMerge(ServerSettingsLive)).pipe(effect.Layer.provideMerge(RepositoryIdentityResolverLive), effect.Layer.provideMerge(ServerEnvironmentLive), effect.Layer.provideMerge(AdvertisedEndpointRegistryLive), effect.Layer.provideMerge(AuthLayerLive), effect.Layer.provideMerge(AtlassianLayerLive)).pipe(effect.Layer.provideMerge(AnalyticsServiceLayerLive), effect.Layer.provideMerge(OpenLive), effect.Layer.provideMerge(ServerLifecycleEventsLive), effect.Layer.provideMerge(ChatAttachmentUploadsLive), effect.Layer.provide(NetService.layer));
 const RuntimeServicesLive = effect.Layer.mergeAll(ServerRuntimeStartupLive, AgentControlMcpServerLive.pipe(effect.Layer.provideMerge(AgentControlDiagnosticsServiceLive), effect.Layer.provideMerge(AgentControlActionValidatorLive), effect.Layer.provideMerge(AgentControlProjectPlansLive)), AgentControlExternalMcpServerLive.pipe(effect.Layer.provideMerge(AgentControlDiagnosticsServiceLive), effect.Layer.provideMerge(AgentControlActionValidatorLive), effect.Layer.provideMerge(AgentControlProjectPlansLive), effect.Layer.provideMerge(AgentControlExternalTaskServiceLive.pipe(effect.Layer.provideMerge(AgentControlActionValidatorLive), effect.Layer.provideMerge(AgentControlProjectPlansLive)))), AgentControlExecutionLive.pipe(effect.Layer.provideMerge(ServerRuntimeStartupLive), effect.Layer.provideMerge(AgentControlActionValidatorLive), effect.Layer.provideMerge(AgentControlProjectPlansLive), effect.Layer.provideMerge(OrchestrationCommandApplicationLive))).pipe(effect.Layer.provideMerge(RuntimeDependenciesLive), effect.Layer.provideMerge(DeviceServiceLive));
 const authRoutesLayer = effect.Layer.mergeAll(authBearerBootstrapRouteLayer, authBootstrapRouteLayer, authClientsRevokeOthersRouteLayer, authClientsRevokeRouteLayer, authClientsRouteLayer, authPairingLinksRevokeRouteLayer, authPairingLinksRouteLayer, authPairingCredentialRouteLayer, authSessionRouteLayer, authWebSocketTokenRouteLayer);
@@ -111940,7 +112195,7 @@ const projectAssetRoutesLayer = effect.Layer.mergeAll(projectFaviconRouteLayer,
 const makeRoutesLayer = effect.Layer.mergeAll(authRoutesLayer, attachmentsRouteLayer, attachmentUploadRouteLayer, orchestrationDispatchRouteLayer, orchestrationSnapshotRouteLayer, otlpTracesProxyRouteLayer, projectAssetRoutesLayer, serverEnvironmentRouteLayer, legacyServerEnvironmentRouteLayer, staticAndDevRouteLayer, websocketRpcRouteLayer, deviceWebsocketRpcRouteLayer, deviceFrameRouteLayer, hubConnectorRoutesLayer, desktopLocalIntroductionRoutesLayer, desktopNativeNodeClaimRoutesLayer).pipe(effect.Layer.provide(browserApiCorsLayer));
 const makeServerLayer = effect.Layer.unwrap(effect.Effect.gen(function* () {
 	const config = yield* require_Metrics.ServerConfig;
-	fixPath();
+	fixPath({ inheritedFromDesktop: config.mode === "desktop" });
 	const httpListeningLayer = effect.Layer.effectDiscard(effect.Effect.gen(function* () {
 		yield* effect_unstable_http.HttpServer.HttpServer;
 		yield* (yield* ServerRuntimeStartup).markHttpListening;