ryco-cli 0.1.29 → 0.1.31

package/dist/{Metrics-BjqGlIP4.mjs → Metrics-C3vLS9rz.mjs}

@@ -1,776 +1,641 @@
 #!/usr/bin/env node
 
-import { Ko as DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER, Qo as ProviderInstanceId, Xr as DEFAULT_SERVER_SETTINGS, Yo as MODEL_SLUG_ALIASES_BY_PROVIDER, Zo as ProviderDriverKind, ei as ServerSettings, es as isProviderDriverKind, oi as StorageError, qo as DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER, ti as ServerSettingsError } from "./src-7E1M4gTQ.mjs";
+import { Ai as ServerSettingsError, Bs as DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER, Ic as NodeE2eeAdmissionPolicy, Ks as ProviderDriverKind, Li as StorageError, Ti as DEFAULT_SERVER_SETTINGS, Us as MODEL_SLUG_ALIASES_BY_PROVIDER, Vs as DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER, Ys as isProviderDriverKind, do as PROJECT_RELOCATION_PENDING_MESSAGE, ki as ServerSettings, qs as ProviderInstanceId } from "./src-VTj60bUm.mjs";
 import { r as fromLenientJson } from "./schemaJson-CaG1bOvo.mjs";
 import { n as runProcess } from "./processRunner-DnndFd2A.mjs";
 import { Cache, Cause, Context, Data, DateTime, Deferred, Duration, Effect, Equal, Exit, FileSystem, Layer, Metric, Path, Predicate, PubSub, Ref, Schema, SchemaIssue, Scope, Semaphore, Stream } from "effect";
-import * as P from "effect/Predicate";
 import path, { join } from "node:path";
 import * as Crypto from "node:crypto";
 import { createHash, timingSafeEqual } from "node:crypto";
+import * as P from "effect/Predicate";
 import { constants } from "node:fs";
 import { homedir } from "node:os";
 import fs$1, { access, lstat, realpath } from "node:fs/promises";
 import * as Semaphore$1 from "effect/Semaphore";
 import "effect/PlatformError";
 import { dual } from "effect/Function";
-//#region ../../packages/shared/src/Struct.ts
-function deepMerge(current, patch) {
-	if (!P.isObject(current) || !P.isObject(patch)) return patch;
-	const next = { ...current };
-	for (const [key, value] of Object.entries(patch)) {
-		if (value === void 0) continue;
-		const existing = next[key];
-		next[key] = P.isObject(existing) && P.isObject(value) ? deepMerge(existing, value) : value;
-	}
-	return next;
-}
-//#endregion
-//#region ../../packages/shared/src/model.ts
-const DEFAULT_PROVIDER_DRIVER_KIND = ProviderDriverKind.make("codex");
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/is.js
+const objectTypeNames = [
+	"Object",
+	"RegExp",
+	"Date",
+	"Error",
+	"Map",
+	"Set",
+	"WeakMap",
+	"WeakSet",
+	"ArrayBuffer",
+	"SharedArrayBuffer",
+	"DataView",
+	"Promise",
+	"URL",
+	"HTMLElement",
+	"Int8Array",
+	"Uint8ClampedArray",
+	"Int16Array",
+	"Uint16Array",
+	"Int32Array",
+	"Uint32Array",
+	"Float32Array",
+	"Float64Array",
+	"BigInt64Array",
+	"BigUint64Array",
+	"Tagged"
+];
 /**
-* Resolve the human-readable model title used by picker surfaces and durable
-* handoff presentation. Provider catalogs are authoritative when they carry a
-* friendly name; the routing slug remains the deterministic final fallback.
+* @param {any} value
+* @returns {string}
 */
-function getModelDisplayName(model, options) {
-	const shortName = trimOrNull(model.shortName);
-	const name = trimOrNull(model.name);
-	const slug = trimOrNull(model.slug) ?? model.slug;
-	return options?.preferShortName ? shortName ?? name ?? slug : name ?? shortName ?? slug;
-}
-/** Compose the optional sub-provider prefix exactly as the picker trigger does. */
-function getModelDisplayLabel(model, options) {
-	const title = getModelDisplayName(model, options);
-	const subProvider = trimOrNull(model.subProvider);
-	return subProvider ? `${subProvider} · ${title}` : title;
-}
-function createModelCapabilities(input) {
-	return { optionDescriptors: input.optionDescriptors.map(cloneDescriptor) };
-}
-function getRawSelectionValueById(selections, id) {
-	return (selections?.find((candidate) => candidate.id === id))?.value;
-}
-function getProviderOptionSelectionValue(selections, id) {
-	return getRawSelectionValueById(selections, id);
-}
-function getProviderOptionStringSelectionValue(selections, id) {
-	const value = getProviderOptionSelectionValue(selections, id);
-	return typeof value === "string" ? value : void 0;
-}
-function getProviderOptionBooleanSelectionValue(selections, id) {
-	const value = getProviderOptionSelectionValue(selections, id);
-	return typeof value === "boolean" ? value : void 0;
-}
-function getModelSelectionStringOptionValue(modelSelection, id) {
-	return getProviderOptionStringSelectionValue(modelSelection?.options, id);
-}
-function getModelSelectionBooleanOptionValue(modelSelection, id) {
-	return getProviderOptionBooleanSelectionValue(modelSelection?.options, id);
-}
-function resolveDescriptorChoiceValue(descriptor, raw) {
-	const trimmed = trimOrNull(raw);
-	if (!trimmed) return descriptor.currentValue ?? descriptor.options.find((option) => option.isDefault)?.id;
-	if (descriptor.options.length === 0) return trimmed;
-	if (descriptor.promptInjectedValues?.includes(trimmed) && descriptor.options.some((option) => option.id === trimmed)) return descriptor.options.find((option) => option.isDefault)?.id;
-	if (descriptor.options.some((option) => option.id === trimmed)) return trimmed;
-	return descriptor.currentValue ?? descriptor.options.find((option) => option.isDefault)?.id;
-}
-function cloneDescriptor(descriptor) {
-	return descriptor.type === "select" ? {
-		...descriptor,
-		options: [...descriptor.options],
-		...descriptor.promptInjectedValues ? { promptInjectedValues: [...descriptor.promptInjectedValues] } : {}
-	} : { ...descriptor };
+function is(value) {
+	if (value === null) return "null";
+	if (value === void 0) return "undefined";
+	if (value === true || value === false) return "boolean";
+	const typeOf = typeof value;
+	if (typeOf === "string" || typeOf === "number" || typeOf === "bigint" || typeOf === "symbol") return typeOf;
+	if (typeOf === "function") return "Function";
+	if (Array.isArray(value)) return "Array";
+	if (value instanceof Uint8Array) return "Uint8Array";
+	if (value.constructor === Object) return "Object";
+	const objectType = getObjectType(value);
+	if (objectType) return objectType;
+	return "Object";
 }
-function cloneSelection(selection) {
-	return { ...selection };
+/**
+* @param {any} value
+* @returns {string|undefined}
+*/
+function getObjectType(value) {
+	const objectTypeName = Object.prototype.toString.call(value).slice(8, -1);
+	if (objectTypeNames.includes(objectTypeName)) return objectTypeName;
 }
-function withDescriptorCurrentValue(descriptor, rawCurrentValue) {
-	if (descriptor.type === "boolean") {
-		if (typeof rawCurrentValue === "boolean") return {
-			...descriptor,
-			currentValue: rawCurrentValue
-		};
-		return descriptor;
+//#endregion
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/token.js
+var Type = class {
+	/**
+	* @param {number} major
+	* @param {string} name
+	* @param {boolean} terminal
+	*/
+	constructor(major, name, terminal) {
+		this.major = major;
+		this.majorEncoded = major << 5;
+		this.name = name;
+		this.terminal = terminal;
 	}
-	const currentValue = typeof rawCurrentValue === "string" ? resolveDescriptorChoiceValue(descriptor, rawCurrentValue) : resolveDescriptorChoiceValue(descriptor, descriptor.currentValue);
-	if (!currentValue) {
-		const { currentValue: _unusedCurrentValue, ...rest } = descriptor;
-		return rest;
+	toString() {
+		return `Type[${this.major}].${this.name}`;
 	}
-	return {
-		...descriptor,
-		currentValue
-	};
-}
-function getProviderOptionDescriptors(input) {
-	const { caps, selections } = input;
-	return (caps.optionDescriptors ?? []).map(cloneDescriptor).map((descriptor) => withDescriptorCurrentValue(descriptor, getRawSelectionValueById(selections, descriptor.id) ?? descriptor.currentValue));
-}
-function getProviderOptionCurrentValue(descriptor) {
-	if (!descriptor) return;
-	if (descriptor.type === "boolean") return descriptor.currentValue;
-	if (descriptor.currentValue) return descriptor.currentValue;
-	return descriptor.options.find((option) => option.isDefault)?.id;
-}
-function normalizeModelSlug(model, provider = DEFAULT_PROVIDER_DRIVER_KIND) {
-	if (typeof model !== "string") return null;
-	const trimmed = model.trim();
-	if (!trimmed) return null;
-	const aliases = MODEL_SLUG_ALIASES_BY_PROVIDER[provider] ?? {};
-	const aliased = Object.prototype.hasOwnProperty.call(aliases, trimmed) ? aliases[trimmed] : void 0;
-	return typeof aliased === "string" ? aliased : trimmed;
-}
-/** Trim a string, returning null for empty/missing values. */
-function trimOrNull(value) {
-	if (typeof value !== "string") return null;
-	return value.trim() || null;
-}
-function cloneSelections(selections) {
-	return selections.map(cloneSelection);
-}
-function createModelSelection(instanceId, model, options) {
-	const selections = options ? cloneSelections(options) : [];
-	const base = {
-		instanceId,
-		model
-	};
-	return selections.length > 0 ? {
-		...base,
-		options: selections
-	} : base;
-}
+	/**
+	* @param {Type} typ
+	* @returns {number}
+	*/
+	compare(typ) {
+		return this.major < typ.major ? -1 : this.major > typ.major ? 1 : 0;
+	}
+	/**
+	* Check equality between two Type instances. Safe to use across different
+	* copies of the Type class (e.g., when bundlers duplicate the module).
+	* (major, name) uniquely identifies a Type; terminal is implied by these.
+	* @param {Type} a
+	* @param {Type} b
+	* @returns {boolean}
+	*/
+	static equals(a, b) {
+		return a === b || a.major === b.major && a.name === b.name;
+	}
+};
+Type.uint = new Type(0, "uint", true);
+Type.negint = new Type(1, "negint", true);
+Type.bytes = new Type(2, "bytes", true);
+Type.string = new Type(3, "string", true);
+Type.array = new Type(4, "array", false);
+Type.map = new Type(5, "map", false);
+Type.tag = new Type(6, "tag", false);
+Type.float = new Type(7, "float", true);
+Type.false = new Type(7, "false", true);
+Type.true = new Type(7, "true", true);
+Type.null = new Type(7, "null", true);
+Type.undefined = new Type(7, "undefined", true);
+Type.break = new Type(7, "break", true);
+var Token = class {
+	/**
+	* @param {Type} type
+	* @param {any} [value]
+	* @param {number} [encodedLength]
+	*/
+	constructor(type, value, encodedLength) {
+		this.type = type;
+		this.value = value;
+		this.encodedLength = encodedLength;
+		/** @type {Uint8Array|undefined} */
+		this.encodedBytes = void 0;
+		/** @type {Uint8Array|undefined} */
+		this.byteValue = void 0;
+	}
+	toString() {
+		return `Token[${this.type}].${this.value}`;
+	}
+};
+//#endregion
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/byte-utils.js
+const useBuffer = globalThis.process && !globalThis.process.browser && globalThis.Buffer && typeof globalThis.Buffer.isBuffer === "function";
+const textEncoder$1 = new TextEncoder();
 /**
-* Context handoff is a provider-instance boundary. Model and option changes
-* within one configured instance remain on that provider's normal turn path.
+* @typedef {import('../interface.js').ByteView} ByteView
+* @typedef {import('../interface.js').AllocatedByteView} AllocatedByteView
 */
-function modelSelectionRequiresContextHandoff(input) {
-	return input.canonicalSelection.instanceId !== input.targetSelection.instanceId;
+/**
+* @param {Uint8Array} buf
+* @returns {boolean}
+*/
+function isBuffer(buf) {
+	return useBuffer && globalThis.Buffer.isBuffer(buf);
 }
 /**
-* Returns the effort value if it is a prompt-injected value according to
-* any select descriptor in the given capabilities, or null otherwise.
-*
-* Unlike a single `find`, this checks every descriptor so that the
-* correct descriptor's `promptInjectedValues` list is consulted even when
-* multiple select descriptors exist.
+* @param {ByteView|number[]} buf
+* @returns {ByteView}
 */
-function resolvePromptInjectedEffort(caps, rawEffort) {
-	const trimmed = trimOrNull(rawEffort);
-	if (!trimmed) return null;
-	const descriptors = getProviderOptionDescriptors({ caps });
-	for (const descriptor of descriptors) if (descriptor.type === "select" && descriptor.promptInjectedValues?.includes(trimmed)) return trimmed;
-	return null;
-}
-function applyClaudePromptEffortPrefix(text, effort) {
-	const trimmed = text.trim();
-	if (!trimmed) return trimmed;
-	if (effort !== "ultrathink") return trimmed;
-	if (trimmed.startsWith("Ultrathink:")) return trimmed;
-	return `Ultrathink:\n${trimmed}`;
-}
-//#endregion
-//#region ../../packages/shared/src/serverSettings.ts
-const ServerSettingsJson$1 = fromLenientJson(ServerSettings);
-function normalizePersistedServerSettingString(value) {
-	const trimmed = value?.trim();
-	return trimmed && trimmed.length > 0 ? trimmed : void 0;
-}
-function extractPersistedServerObservabilitySettings(input) {
-	return {
-		otlpTracesUrl: normalizePersistedServerSettingString(input.observability?.otlpTracesUrl),
-		otlpMetricsUrl: normalizePersistedServerSettingString(input.observability?.otlpMetricsUrl)
-	};
+function asU8A(buf) {
+	if (!(buf instanceof Uint8Array)) return Uint8Array.from(buf);
+	return isBuffer(buf) ? new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength) : buf;
 }
-function parsePersistedServerObservabilitySettings(raw) {
-	try {
-		return extractPersistedServerObservabilitySettings(Schema.decodeUnknownSync(ServerSettingsJson$1)(raw));
-	} catch {
-		return {
-			otlpTracesUrl: void 0,
-			otlpMetricsUrl: void 0
-		};
+const FROM_STRING_THRESHOLD_BUFFER = 24;
+const FROM_STRING_THRESHOLD_TEXTENCODER = 200;
+const fromString = useBuffer ? (string) => {
+	return string.length >= FROM_STRING_THRESHOLD_BUFFER ? globalThis.Buffer.from(string) : utf8ToBytes(string);
+} : 
+/**
+* @param {string} string
+*/
+(string) => {
+	return string.length >= FROM_STRING_THRESHOLD_TEXTENCODER ? textEncoder$1.encode(string) : utf8ToBytes(string);
+};
+/**
+* Buffer variant not fast enough for what we need
+* @param {number[]} arr
+* @returns {AllocatedByteView}
+*/
+const fromArray = (arr) => {
+	return Uint8Array.from(arr);
+};
+const slice = useBuffer ? (bytes, start, end) => {
+	if (isBuffer(bytes)) return new Uint8Array(bytes.subarray(start, end));
+	return bytes.slice(start, end);
+} : 
+/**
+* @param {Uint8Array} bytes
+* @param {number} start
+* @param {number} end
+*/
+(bytes, start, end) => {
+	return bytes.slice(start, end);
+};
+const concat = useBuffer ? (chunks, length) => {
+	chunks = chunks.map((c) => c instanceof Uint8Array ? c : globalThis.Buffer.from(c));
+	return asU8A(globalThis.Buffer.concat(chunks, length));
+} : 
+/**
+* @param {ByteView[]} chunks
+* @param {number} length
+* @returns {AllocatedByteView}
+*/
+(chunks, length) => {
+	const out = new Uint8Array(length);
+	let off = 0;
+	for (let b of chunks) {
+		if (off + b.length > out.length) b = b.subarray(0, out.length - off);
+		out.set(b, off);
+		off += b.length;
 	}
-}
-function shouldReplaceTextGenerationModelSelection(patch) {
-	return Boolean(patch && (patch.instanceId !== void 0 || patch.model !== void 0));
-}
-function mergeModelSelectionOptionsById(input) {
-	if (input.patch === void 0) return input.current ? [...input.current] : void 0;
-	if (input.patch.length === 0) return;
-	const merged = new Map((input.current ?? []).map((selection) => [selection.id, selection.value]));
-	for (const selection of input.patch) merged.set(selection.id, selection.value);
-	return [...merged.entries()].map(([id, value]) => ({
-		id,
-		value
-	}));
+	return out;
+};
+const alloc = useBuffer ? (size) => {
+	return globalThis.Buffer.allocUnsafe(size);
+} : 
+/**
+* @param {number} size
+* @returns {AllocatedByteView}
+*/
+(size) => {
+	return new Uint8Array(size);
+};
+/**
+* @param {Uint8Array} b1
+* @param {Uint8Array} b2
+* @returns {number}
+*/
+function compare(b1, b2) {
+	if (isBuffer(b1) && isBuffer(b2)) return b1.compare(b2);
+	for (let i = 0; i < b1.length; i++) {
+		if (b1[i] === b2[i]) continue;
+		return b1[i] < b2[i] ? -1 : 1;
+	}
+	return 0;
 }
 /**
-* Applies a server settings patch while treating textGenerationModelSelection as
-* replace-on-provider/model updates. This prevents stale nested options from
-* surviving a reset patch that intentionally omits options.
+* @param {string} str
+* @returns {number[]}
 */
-function applyServerSettingsPatch(current, patch) {
-	const selectionPatch = patch.textGenerationModelSelection;
-	for (const [field, value] of Object.entries(patch.expectedNodePreferences ?? {})) if (!Equal.equals(current[field] ?? null, value)) throw new Error("Node preferences changed elsewhere. Reload before saving.");
-	for (const [projectId, expected] of Object.entries(patch.expectedProjectPreferences ?? {})) {
-		const currentPreferences = current.projectPreferences[projectId] ?? {};
-		for (const [field, value] of Object.entries(expected)) {
-			const actual = field === "initialModelSelection" && !Object.hasOwn(currentPreferences, field) ? "absent" : currentPreferences[field] ?? null;
-			if (!Equal.equals(actual, value)) throw new Error("Project preferences changed elsewhere. Reload before saving.");
+function utf8ToBytes(str) {
+	const out = [];
+	let p = 0;
+	for (let i = 0; i < str.length; i++) {
+		let c = str.charCodeAt(i);
+		if (c < 128) out[p++] = c;
+		else if (c < 2048) {
+			out[p++] = c >> 6 | 192;
+			out[p++] = c & 63 | 128;
+		} else if ((c & 64512) === 55296 && i + 1 < str.length && (str.charCodeAt(i + 1) & 64512) === 56320) {
+			c = 65536 + ((c & 1023) << 10) + (str.charCodeAt(++i) & 1023);
+			out[p++] = c >> 18 | 240;
+			out[p++] = c >> 12 & 63 | 128;
+			out[p++] = c >> 6 & 63 | 128;
+			out[p++] = c & 63 | 128;
+		} else {
+			if (c >= 55296 && c <= 57343) c = 65533;
+			out[p++] = c >> 12 | 224;
+			out[p++] = c >> 6 & 63 | 128;
+			out[p++] = c & 63 | 128;
 		}
 	}
-	const { expectedProjectPreferences: _expected, expectedNodePreferences: _expectedNode, projectPreferences: _projects, ...persistedPatch } = patch;
-	let next = deepMerge(current, persistedPatch);
-	if (patch.initialModelSelection !== void 0) next = {
-		...next,
-		initialModelSelection: patch.initialModelSelection
-	};
-	if (patch.projectPreferences !== void 0) {
-		const projects = new Map(Object.entries(current.projectPreferences));
-		for (const [projectId, preferencesPatch] of Object.entries(patch.projectPreferences)) {
-			if (preferencesPatch === null) {
-				projects.delete(projectId);
-				continue;
-			}
-			const preferences = { ...projects.get(projectId) };
-			for (const [field, value] of Object.entries(preferencesPatch)) if (value === null && field !== "initialModelSelection") delete preferences[field];
-			else Object.assign(preferences, { [field]: value });
-			if (Object.keys(preferences).length) projects.set(projectId, preferences);
-			else projects.delete(projectId);
+	return out;
+}
+//#endregion
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/bl.js
+/**
+* Bl is a list of byte chunks, similar to https://github.com/rvagg/bl but for
+* writing rather than reading.
+* A Bl object accepts set() operations for individual bytes and copyTo() for
+* inserting byte arrays. These write operations don't automatically increment
+* the internal cursor so its "length" won't be changed. Instead, increment()
+* must be called to extend its length to cover the inserted data.
+* The toBytes() call will convert all internal memory to a single Uint8Array of
+* the correct length, truncating any data that is stored but hasn't been
+* included by an increment().
+* get() can retrieve a single byte.
+* All operations (except toBytes()) take an "offset" argument that will perform
+* the write at the offset _from the current cursor_. For most operations this
+* will be `0` to write at the current cursor position but it can be ahead of
+* the current cursor. Negative offsets probably work but are untested.
+*/
+/**
+* @typedef {import('../interface.js').ByteView} ByteView
+* @typedef {import('../interface.js').AllocatedByteView} AllocatedByteView
+*/
+const defaultChunkSize = 256;
+var Bl = class {
+	/**
+	* @param {number} [chunkSize]
+	*/
+	constructor(chunkSize = defaultChunkSize) {
+		this.chunkSize = chunkSize;
+		/** @type {number} */
+		this.cursor = 0;
+		/** @type {number} */
+		this.maxCursor = -1;
+		/** @type {(ByteView|number[])[]} */
+		this.chunks = [];
+		/** @type {ByteView|number[]|null} */
+		this._initReuseChunk = null;
+	}
+	reset() {
+		this.cursor = 0;
+		this.maxCursor = -1;
+		if (this.chunks.length) this.chunks = [];
+		if (this._initReuseChunk !== null) {
+			this.chunks.push(this._initReuseChunk);
+			this.maxCursor = this._initReuseChunk.length - 1;
 		}
-		next = {
-			...next,
-			projectPreferences: Object.fromEntries(projects)
-		};
 	}
-	if (patch.projectWorktreeSubmodules !== void 0) {
-		const modes = new Map(Object.entries(current.projectWorktreeSubmodules));
-		for (const [projectId, mode] of Object.entries(patch.projectWorktreeSubmodules)) if (mode === null) modes.delete(projectId);
-		else modes.set(projectId, mode);
-		next = {
-			...next,
-			projectWorktreeSubmodules: Object.fromEntries(modes)
-		};
+	/**
+	* @param {number} byte
+	*/
+	pushByte(byte) {
+		let topChunk = this.chunks[this.chunks.length - 1];
+		if (this.cursor > this.maxCursor) {
+			topChunk = alloc(this.chunkSize);
+			this.chunks.push(topChunk);
+			this.maxCursor += topChunk.length;
+			if (this._initReuseChunk === null) this._initReuseChunk = topChunk;
+		}
+		const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
+		topChunk[chunkPos] = byte;
+		this.cursor++;
 	}
-	if (patch.projectWorktreeRoots !== void 0) {
-		const roots = new Map(Object.entries(current.projectWorktreeRoots));
-		for (const [projectId, root] of Object.entries(patch.projectWorktreeRoots)) if (root === null || root === "") roots.delete(projectId);
-		else roots.set(projectId, root);
-		next = {
-			...next,
-			projectWorktreeRoots: Object.fromEntries(roots)
-		};
+	/**
+	* @param {ByteView|number[]} bytes
+	*/
+	push(bytes) {
+		let topChunk = this.chunks[this.chunks.length - 1];
+		if (this.cursor + bytes.length <= this.maxCursor + 1) {
+			const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
+			topChunk.set(bytes, chunkPos);
+		} else {
+			if (topChunk) {
+				const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
+				if (chunkPos < topChunk.length) {
+					this.chunks[this.chunks.length - 1] = topChunk.subarray(0, chunkPos);
+					this.maxCursor = this.cursor - 1;
+				}
+			}
+			if (bytes.length < 64 && bytes.length < this.chunkSize) {
+				topChunk = alloc(this.chunkSize);
+				this.chunks.push(topChunk);
+				this.maxCursor += topChunk.length;
+				if (this._initReuseChunk === null) this._initReuseChunk = topChunk;
+				topChunk.set(bytes, 0);
+			} else {
+				this.chunks.push(bytes);
+				this.maxCursor += bytes.length;
+			}
+		}
+		this.cursor += bytes.length;
 	}
-	if (patch.projectStorageRetention !== void 0) {
-		const policies = new Map(Object.entries(current.projectStorageRetention));
-		for (const [projectId, policy] of Object.entries(patch.projectStorageRetention)) if (policy === null) policies.delete(projectId);
-		else policies.set(projectId, policy);
-		next = {
-			...next,
-			projectStorageRetention: Object.fromEntries(policies)
-		};
+	/**
+	* @param {boolean} [reset]
+	* @returns {AllocatedByteView}
+	*/
+	toBytes(reset = false) {
+		let byts;
+		if (this.chunks.length === 1) {
+			const chunk = this.chunks[0];
+			if (reset && this.cursor > chunk.length / 2) {
+				byts = this.cursor === chunk.length ? chunk : chunk.subarray(0, this.cursor);
+				this._initReuseChunk = null;
+				this.chunks = [];
+			} else byts = slice(chunk, 0, this.cursor);
+		} else byts = concat(this.chunks, this.cursor);
+		if (reset) this.reset();
+		return byts;
 	}
-	const nextWithReplacements = patch.providerInstances !== void 0 ? {
-		...next,
-		providerInstances: patch.providerInstances
-	} : next;
-	if (!selectionPatch) return nextWithReplacements;
-	const instanceId = selectionPatch.instanceId ?? current.textGenerationModelSelection.instanceId;
-	const model = selectionPatch.model ?? current.textGenerationModelSelection.model;
-	const options = shouldReplaceTextGenerationModelSelection(selectionPatch) ? selectionPatch.options : mergeModelSelectionOptionsById({
-		current: current.textGenerationModelSelection.options,
-		patch: selectionPatch.options
-	});
-	return {
-		...nextWithReplacements,
-		textGenerationModelSelection: createModelSelection(instanceId, model, options)
-	};
-}
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/is.js
-const objectTypeNames = [
-	"Object",
-	"RegExp",
-	"Date",
-	"Error",
-	"Map",
-	"Set",
-	"WeakMap",
-	"WeakSet",
-	"ArrayBuffer",
-	"SharedArrayBuffer",
-	"DataView",
-	"Promise",
-	"URL",
-	"HTMLElement",
-	"Int8Array",
-	"Uint8ClampedArray",
-	"Int16Array",
-	"Uint16Array",
-	"Int32Array",
-	"Uint32Array",
-	"Float32Array",
-	"Float64Array",
-	"BigInt64Array",
-	"BigUint64Array",
-	"Tagged"
-];
-/**
-* @param {any} value
-* @returns {string}
-*/
-function is(value) {
-	if (value === null) return "null";
-	if (value === void 0) return "undefined";
-	if (value === true || value === false) return "boolean";
-	const typeOf = typeof value;
-	if (typeOf === "string" || typeOf === "number" || typeOf === "bigint" || typeOf === "symbol") return typeOf;
-	if (typeOf === "function") return "Function";
-	if (Array.isArray(value)) return "Array";
-	if (value instanceof Uint8Array) return "Uint8Array";
-	if (value.constructor === Object) return "Object";
-	const objectType = getObjectType(value);
-	if (objectType) return objectType;
-	return "Object";
-}
+};
 /**
-* @param {any} value
-* @returns {string|undefined}
+* U8Bl is a buffer list that writes directly to a user-provided Uint8Array.
+* It provides the same interface as Bl but writes to a fixed destination.
+* @template {ArrayBufferLike} T
 */
-function getObjectType(value) {
-	const objectTypeName = Object.prototype.toString.call(value).slice(8, -1);
-	if (objectTypeNames.includes(objectTypeName)) return objectTypeName;
-}
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/token.js
-var Type = class {
+var U8Bl = class {
 	/**
-	* @param {number} major
-	* @param {string} name
-	* @param {boolean} terminal
+	* @param {Uint8Array<T>} dest
 	*/
-	constructor(major, name, terminal) {
-		this.major = major;
-		this.majorEncoded = major << 5;
-		this.name = name;
-		this.terminal = terminal;
+	constructor(dest) {
+		this.dest = dest;
+		/** @type {number} */
+		this.cursor = 0;
+		/** @type {Array<Uint8Array<T>>} */
+		this.chunks = [dest];
 	}
-	toString() {
-		return `Type[${this.major}].${this.name}`;
+	reset() {
+		this.cursor = 0;
 	}
 	/**
-	* @param {Type} typ
-	* @returns {number}
+	* @param {number} byte
 	*/
-	compare(typ) {
-		return this.major < typ.major ? -1 : this.major > typ.major ? 1 : 0;
+	pushByte(byte) {
+		if (this.cursor >= this.dest.length) throw new Error("write out of bounds, destination buffer is too small");
+		this.dest[this.cursor++] = byte;
 	}
 	/**
-	* Check equality between two Type instances. Safe to use across different
-	* copies of the Type class (e.g., when bundlers duplicate the module).
-	* (major, name) uniquely identifies a Type; terminal is implied by these.
-	* @param {Type} a
-	* @param {Type} b
-	* @returns {boolean}
+	* @param {ByteView|number[]} bytes
 	*/
-	static equals(a, b) {
-		return a === b || a.major === b.major && a.name === b.name;
+	push(bytes) {
+		if (this.cursor + bytes.length > this.dest.length) throw new Error("write out of bounds, destination buffer is too small");
+		this.dest.set(bytes, this.cursor);
+		this.cursor += bytes.length;
 	}
-};
-Type.uint = new Type(0, "uint", true);
-Type.negint = new Type(1, "negint", true);
-Type.bytes = new Type(2, "bytes", true);
-Type.string = new Type(3, "string", true);
-Type.array = new Type(4, "array", false);
-Type.map = new Type(5, "map", false);
-Type.tag = new Type(6, "tag", false);
-Type.float = new Type(7, "float", true);
-Type.false = new Type(7, "false", true);
-Type.true = new Type(7, "true", true);
-Type.null = new Type(7, "null", true);
-Type.undefined = new Type(7, "undefined", true);
-Type.break = new Type(7, "break", true);
-var Token = class {
 	/**
-	* @param {Type} type
-	* @param {any} [value]
-	* @param {number} [encodedLength]
+	* @param {boolean} [reset]
+	* @returns {Uint8Array<T>}
 	*/
-	constructor(type, value, encodedLength) {
-		this.type = type;
-		this.value = value;
-		this.encodedLength = encodedLength;
-		/** @type {Uint8Array|undefined} */
-		this.encodedBytes = void 0;
-		/** @type {Uint8Array|undefined} */
-		this.byteValue = void 0;
-	}
-	toString() {
-		return `Token[${this.type}].${this.value}`;
+	toBytes(reset = false) {
+		const byts = this.dest.subarray(0, this.cursor);
+		if (reset) this.reset();
+		return byts;
 	}
 };
 //#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/byte-utils.js
-const useBuffer = globalThis.process && !globalThis.process.browser && globalThis.Buffer && typeof globalThis.Buffer.isBuffer === "function";
-const textEncoder$1 = new TextEncoder();
-/**
-* @typedef {import('../interface.js').ByteView} ByteView
-* @typedef {import('../interface.js').AllocatedByteView} AllocatedByteView
-*/
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/common.js
+const decodeErrPrefix = "CBOR decode error:";
+const encodeErrPrefix = "CBOR encode error:";
+const uintMinorPrefixBytes = [];
+uintMinorPrefixBytes[23] = 1;
+uintMinorPrefixBytes[24] = 2;
+uintMinorPrefixBytes[25] = 3;
+uintMinorPrefixBytes[26] = 5;
+uintMinorPrefixBytes[27] = 9;
 /**
-* @param {Uint8Array} buf
-* @returns {boolean}
+* @param {Uint8Array} data
+* @param {number} pos
+* @param {number} need
 */
-function isBuffer(buf) {
-	return useBuffer && globalThis.Buffer.isBuffer(buf);
+function assertEnoughData(data, pos, need) {
+	if (data.length - pos < need) throw new Error(`${decodeErrPrefix} not enough data for type`);
 }
+//#endregion
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/0uint.js
+const uintBoundaries = [
+	24,
+	256,
+	65536,
+	4294967296,
+	BigInt("18446744073709551616")
+];
 /**
-* @param {ByteView|number[]} buf
-* @returns {ByteView}
+* @typedef {import('../interface.js').ByteWriter} ByteWriter
+* @typedef {import('../interface.js').DecodeOptions} DecodeOptions
 */
-function asU8A(buf) {
-	if (!(buf instanceof Uint8Array)) return Uint8Array.from(buf);
-	return isBuffer(buf) ? new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength) : buf;
-}
-const FROM_STRING_THRESHOLD_BUFFER = 24;
-const FROM_STRING_THRESHOLD_TEXTENCODER = 200;
-const fromString = useBuffer ? (string) => {
-	return string.length >= FROM_STRING_THRESHOLD_BUFFER ? globalThis.Buffer.from(string) : utf8ToBytes(string);
-} : 
 /**
-* @param {string} string
+* @param {Uint8Array} data
+* @param {number} offset
+* @param {DecodeOptions} options
+* @returns {number}
 */
-(string) => {
-	return string.length >= FROM_STRING_THRESHOLD_TEXTENCODER ? textEncoder$1.encode(string) : utf8ToBytes(string);
-};
+function readUint8(data, offset, options) {
+	assertEnoughData(data, offset, 1);
+	const value = data[offset];
+	if (options.strict === true && value < uintBoundaries[0]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
+	return value;
+}
 /**
-* Buffer variant not fast enough for what we need
-* @param {number[]} arr
-* @returns {AllocatedByteView}
+* @param {Uint8Array} data
+* @param {number} offset
+* @param {DecodeOptions} options
+* @returns {number}
 */
-const fromArray = (arr) => {
-	return Uint8Array.from(arr);
-};
-const slice = useBuffer ? (bytes, start, end) => {
-	if (isBuffer(bytes)) return new Uint8Array(bytes.subarray(start, end));
-	return bytes.slice(start, end);
-} : 
+function readUint16(data, offset, options) {
+	assertEnoughData(data, offset, 2);
+	const value = data[offset] << 8 | data[offset + 1];
+	if (options.strict === true && value < uintBoundaries[1]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
+	return value;
+}
 /**
-* @param {Uint8Array} bytes
-* @param {number} start
-* @param {number} end
+* @param {Uint8Array} data
+* @param {number} offset
+* @param {DecodeOptions} options
+* @returns {number}
 */
-(bytes, start, end) => {
-	return bytes.slice(start, end);
-};
-const concat = useBuffer ? (chunks, length) => {
-	chunks = chunks.map((c) => c instanceof Uint8Array ? c : globalThis.Buffer.from(c));
-	return asU8A(globalThis.Buffer.concat(chunks, length));
-} : 
+function readUint32(data, offset, options) {
+	assertEnoughData(data, offset, 4);
+	const value = data[offset] * 16777216 + (data[offset + 1] << 16) + (data[offset + 2] << 8) + data[offset + 3];
+	if (options.strict === true && value < uintBoundaries[2]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
+	return value;
+}
 /**
-* @param {ByteView[]} chunks
-* @param {number} length
-* @returns {AllocatedByteView}
+* @param {Uint8Array} data
+* @param {number} offset
+* @param {DecodeOptions} options
+* @returns {number|bigint}
 */
-(chunks, length) => {
-	const out = new Uint8Array(length);
-	let off = 0;
-	for (let b of chunks) {
-		if (off + b.length > out.length) b = b.subarray(0, out.length - off);
-		out.set(b, off);
-		off += b.length;
-	}
-	return out;
-};
-const alloc = useBuffer ? (size) => {
-	return globalThis.Buffer.allocUnsafe(size);
-} : 
+function readUint64(data, offset, options) {
+	assertEnoughData(data, offset, 8);
+	const hi = data[offset] * 16777216 + (data[offset + 1] << 16) + (data[offset + 2] << 8) + data[offset + 3];
+	const lo = data[offset + 4] * 16777216 + (data[offset + 5] << 16) + (data[offset + 6] << 8) + data[offset + 7];
+	const value = (BigInt(hi) << BigInt(32)) + BigInt(lo);
+	if (options.strict === true && value < uintBoundaries[3]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
+	if (value <= Number.MAX_SAFE_INTEGER) return Number(value);
+	if (options.allowBigInt === true) return value;
+	throw new Error(`${decodeErrPrefix} integers outside of the safe integer range are not supported`);
+}
 /**
-* @param {number} size
-* @returns {AllocatedByteView}
+* @param {Uint8Array} data
+* @param {number} pos
+* @param {number} _minor
+* @param {DecodeOptions} options
+* @returns {Token}
 */
-(size) => {
-	return new Uint8Array(size);
-};
+function decodeUint8(data, pos, _minor, options) {
+	return new Token(Type.uint, readUint8(data, pos + 1, options), 2);
+}
 /**
-* @param {Uint8Array} b1
-* @param {Uint8Array} b2
-* @returns {number}
+* @param {Uint8Array} data
+* @param {number} pos
+* @param {number} _minor
+* @param {DecodeOptions} options
+* @returns {Token}
 */
-function compare(b1, b2) {
-	if (isBuffer(b1) && isBuffer(b2)) return b1.compare(b2);
-	for (let i = 0; i < b1.length; i++) {
-		if (b1[i] === b2[i]) continue;
-		return b1[i] < b2[i] ? -1 : 1;
-	}
-	return 0;
+function decodeUint16(data, pos, _minor, options) {
+	return new Token(Type.uint, readUint16(data, pos + 1, options), 3);
 }
 /**
-* @param {string} str
-* @returns {number[]}
+* @param {Uint8Array} data
+* @param {number} pos
+* @param {number} _minor
+* @param {DecodeOptions} options
+* @returns {Token}
 */
-function utf8ToBytes(str) {
-	const out = [];
-	let p = 0;
-	for (let i = 0; i < str.length; i++) {
-		let c = str.charCodeAt(i);
-		if (c < 128) out[p++] = c;
-		else if (c < 2048) {
-			out[p++] = c >> 6 | 192;
-			out[p++] = c & 63 | 128;
-		} else if ((c & 64512) === 55296 && i + 1 < str.length && (str.charCodeAt(i + 1) & 64512) === 56320) {
-			c = 65536 + ((c & 1023) << 10) + (str.charCodeAt(++i) & 1023);
-			out[p++] = c >> 18 | 240;
-			out[p++] = c >> 12 & 63 | 128;
-			out[p++] = c >> 6 & 63 | 128;
-			out[p++] = c & 63 | 128;
-		} else {
-			if (c >= 55296 && c <= 57343) c = 65533;
-			out[p++] = c >> 12 | 224;
-			out[p++] = c >> 6 & 63 | 128;
-			out[p++] = c & 63 | 128;
-		}
-	}
-	return out;
+function decodeUint32(data, pos, _minor, options) {
+	return new Token(Type.uint, readUint32(data, pos + 1, options), 5);
 }
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/bl.js
 /**
-* Bl is a list of byte chunks, similar to https://github.com/rvagg/bl but for
-* writing rather than reading.
-* A Bl object accepts set() operations for individual bytes and copyTo() for
-* inserting byte arrays. These write operations don't automatically increment
-* the internal cursor so its "length" won't be changed. Instead, increment()
-* must be called to extend its length to cover the inserted data.
-* The toBytes() call will convert all internal memory to a single Uint8Array of
-* the correct length, truncating any data that is stored but hasn't been
-* included by an increment().
-* get() can retrieve a single byte.
-* All operations (except toBytes()) take an "offset" argument that will perform
-* the write at the offset _from the current cursor_. For most operations this
-* will be `0` to write at the current cursor position but it can be ahead of
-* the current cursor. Negative offsets probably work but are untested.
+* @param {Uint8Array} data
+* @param {number} pos
+* @param {number} _minor
+* @param {DecodeOptions} options
+* @returns {Token}
 */
+function decodeUint64(data, pos, _minor, options) {
+	return new Token(Type.uint, readUint64(data, pos + 1, options), 9);
+}
 /**
-* @typedef {import('../interface.js').ByteView} ByteView
-* @typedef {import('../interface.js').AllocatedByteView} AllocatedByteView
+* @param {ByteWriter} writer
+* @param {Token} token
 */
-const defaultChunkSize = 256;
-var Bl = class {
-	/**
-	* @param {number} [chunkSize]
-	*/
-	constructor(chunkSize = defaultChunkSize) {
-		this.chunkSize = chunkSize;
-		/** @type {number} */
-		this.cursor = 0;
-		/** @type {number} */
-		this.maxCursor = -1;
-		/** @type {(ByteView|number[])[]} */
-		this.chunks = [];
-		/** @type {ByteView|number[]|null} */
-		this._initReuseChunk = null;
+function encodeUint(writer, token) {
+	return encodeUintValue(writer, 0, token.value);
+}
+/**
+* @param {ByteWriter} writer
+* @param {number} major
+* @param {number|bigint} uint
+*/
+function encodeUintValue(writer, major, uint) {
+	if (uint < uintBoundaries[0]) {
+		const nuint = Number(uint);
+		writer.pushByte(major | nuint);
+	} else if (uint < uintBoundaries[1]) {
+		const nuint = Number(uint);
+		writer.push([major | 24, nuint]);
+	} else if (uint < uintBoundaries[2]) {
+		const nuint = Number(uint);
+		writer.push([
+			major | 25,
+			nuint >>> 8,
+			nuint & 255
+		]);
+	} else if (uint < uintBoundaries[3]) {
+		const nuint = Number(uint);
+		writer.push([
+			major | 26,
+			nuint >>> 24 & 255,
+			nuint >>> 16 & 255,
+			nuint >>> 8 & 255,
+			nuint & 255
+		]);
+	} else {
+		const buint = BigInt(uint);
+		if (buint < uintBoundaries[4]) {
+			const set = [
+				major | 27,
+				0,
+				0,
+				0,
+				0,
+				0,
+				0,
+				0
+			];
+			let lo = Number(buint & BigInt(4294967295));
+			let hi = Number(buint >> BigInt(32) & BigInt(4294967295));
+			set[8] = lo & 255;
+			lo = lo >> 8;
+			set[7] = lo & 255;
+			lo = lo >> 8;
+			set[6] = lo & 255;
+			lo = lo >> 8;
+			set[5] = lo & 255;
+			set[4] = hi & 255;
+			hi = hi >> 8;
+			set[3] = hi & 255;
+			hi = hi >> 8;
+			set[2] = hi & 255;
+			hi = hi >> 8;
+			set[1] = hi & 255;
+			writer.push(set);
+		} else throw new Error(`${decodeErrPrefix} encountered BigInt larger than allowable range`);
 	}
-	reset() {
-		this.cursor = 0;
-		this.maxCursor = -1;
-		if (this.chunks.length) this.chunks = [];
-		if (this._initReuseChunk !== null) {
-			this.chunks.push(this._initReuseChunk);
-			this.maxCursor = this._initReuseChunk.length - 1;
-		}
-	}
-	/**
-	* @param {number} byte
-	*/
-	pushByte(byte) {
-		let topChunk = this.chunks[this.chunks.length - 1];
-		if (this.cursor > this.maxCursor) {
-			topChunk = alloc(this.chunkSize);
-			this.chunks.push(topChunk);
-			this.maxCursor += topChunk.length;
-			if (this._initReuseChunk === null) this._initReuseChunk = topChunk;
-		}
-		const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
-		topChunk[chunkPos] = byte;
-		this.cursor++;
-	}
-	/**
-	* @param {ByteView|number[]} bytes
-	*/
-	push(bytes) {
-		let topChunk = this.chunks[this.chunks.length - 1];
-		if (this.cursor + bytes.length <= this.maxCursor + 1) {
-			const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
-			topChunk.set(bytes, chunkPos);
-		} else {
-			if (topChunk) {
-				const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
-				if (chunkPos < topChunk.length) {
-					this.chunks[this.chunks.length - 1] = topChunk.subarray(0, chunkPos);
-					this.maxCursor = this.cursor - 1;
-				}
-			}
-			if (bytes.length < 64 && bytes.length < this.chunkSize) {
-				topChunk = alloc(this.chunkSize);
-				this.chunks.push(topChunk);
-				this.maxCursor += topChunk.length;
-				if (this._initReuseChunk === null) this._initReuseChunk = topChunk;
-				topChunk.set(bytes, 0);
-			} else {
-				this.chunks.push(bytes);
-				this.maxCursor += bytes.length;
-			}
-		}
-		this.cursor += bytes.length;
-	}
-	/**
-	* @param {boolean} [reset]
-	* @returns {AllocatedByteView}
-	*/
-	toBytes(reset = false) {
-		let byts;
-		if (this.chunks.length === 1) {
-			const chunk = this.chunks[0];
-			if (reset && this.cursor > chunk.length / 2) {
-				byts = this.cursor === chunk.length ? chunk : chunk.subarray(0, this.cursor);
-				this._initReuseChunk = null;
-				this.chunks = [];
-			} else byts = slice(chunk, 0, this.cursor);
-		} else byts = concat(this.chunks, this.cursor);
-		if (reset) this.reset();
-		return byts;
-	}
-};
-/**
-* U8Bl is a buffer list that writes directly to a user-provided Uint8Array.
-* It provides the same interface as Bl but writes to a fixed destination.
-* @template {ArrayBufferLike} T
-*/
-var U8Bl = class {
-	/**
-	* @param {Uint8Array<T>} dest
-	*/
-	constructor(dest) {
-		this.dest = dest;
-		/** @type {number} */
-		this.cursor = 0;
-		/** @type {Array<Uint8Array<T>>} */
-		this.chunks = [dest];
-	}
-	reset() {
-		this.cursor = 0;
-	}
-	/**
-	* @param {number} byte
-	*/
-	pushByte(byte) {
-		if (this.cursor >= this.dest.length) throw new Error("write out of bounds, destination buffer is too small");
-		this.dest[this.cursor++] = byte;
-	}
-	/**
-	* @param {ByteView|number[]} bytes
-	*/
-	push(bytes) {
-		if (this.cursor + bytes.length > this.dest.length) throw new Error("write out of bounds, destination buffer is too small");
-		this.dest.set(bytes, this.cursor);
-		this.cursor += bytes.length;
-	}
-	/**
-	* @param {boolean} [reset]
-	* @returns {Uint8Array<T>}
-	*/
-	toBytes(reset = false) {
-		const byts = this.dest.subarray(0, this.cursor);
-		if (reset) this.reset();
-		return byts;
-	}
-};
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/common.js
-const decodeErrPrefix = "CBOR decode error:";
-const encodeErrPrefix = "CBOR encode error:";
-const uintMinorPrefixBytes = [];
-uintMinorPrefixBytes[23] = 1;
-uintMinorPrefixBytes[24] = 2;
-uintMinorPrefixBytes[25] = 3;
-uintMinorPrefixBytes[26] = 5;
-uintMinorPrefixBytes[27] = 9;
-/**
-* @param {Uint8Array} data
-* @param {number} pos
-* @param {number} need
-*/
-function assertEnoughData(data, pos, need) {
-	if (data.length - pos < need) throw new Error(`${decodeErrPrefix} not enough data for type`);
 }
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/0uint.js
-const uintBoundaries = [
-	24,
-	256,
-	65536,
-	4294967296,
-	BigInt("18446744073709551616")
-];
-/**
-* @typedef {import('../interface.js').ByteWriter} ByteWriter
-* @typedef {import('../interface.js').DecodeOptions} DecodeOptions
-*/
 /**
-* @param {Uint8Array} data
-* @param {number} offset
-* @param {DecodeOptions} options
+* @param {Token} token
 * @returns {number}
 */
-function readUint8(data, offset, options) {
-	assertEnoughData(data, offset, 1);
-	const value = data[offset];
-	if (options.strict === true && value < uintBoundaries[0]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
-	return value;
-}
+encodeUint.encodedSize = function encodedSize(token) {
+	return encodeUintValue.encodedSize(token.value);
+};
 /**
-* @param {Uint8Array} data
-* @param {number} offset
-* @param {DecodeOptions} options
+* @param {number} uint
 * @returns {number}
 */
-function readUint16(data, offset, options) {
-	assertEnoughData(data, offset, 2);
-	const value = data[offset] << 8 | data[offset + 1];
-	if (options.strict === true && value < uintBoundaries[1]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
-	return value;
-}
+encodeUintValue.encodedSize = function encodedSize(uint) {
+	if (uint < uintBoundaries[0]) return 1;
+	if (uint < uintBoundaries[1]) return 2;
+	if (uint < uintBoundaries[2]) return 3;
+	if (uint < uintBoundaries[3]) return 5;
+	return 9;
+};
 /**
-* @param {Uint8Array} data
-* @param {number} offset
-* @param {DecodeOptions} options
+* @param {Token} tok1
+* @param {Token} tok2
 * @returns {number}
 */
-function readUint32(data, offset, options) {
-	assertEnoughData(data, offset, 4);
-	const value = data[offset] * 16777216 + (data[offset + 1] << 16) + (data[offset + 2] << 8) + data[offset + 3];
-	if (options.strict === true && value < uintBoundaries[2]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
-	return value;
-}
+encodeUint.compareTokens = function compareTokens(tok1, tok2) {
+	return tok1.value < tok2.value ? -1 : tok1.value > tok2.value ? 1 : 0;
+};
+//#endregion
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/1negint.js
 /**
-* @param {Uint8Array} data
-* @param {number} offset
-* @param {DecodeOptions} options
-* @returns {number|bigint}
+* @typedef {import('../interface.js').ByteWriter} ByteWriter
+* @typedef {import('../interface.js').DecodeOptions} DecodeOptions
 */
-function readUint64(data, offset, options) {
-	assertEnoughData(data, offset, 8);
-	const hi = data[offset] * 16777216 + (data[offset + 1] << 16) + (data[offset + 2] << 8) + data[offset + 3];
-	const lo = data[offset + 4] * 16777216 + (data[offset + 5] << 16) + (data[offset + 6] << 8) + data[offset + 7];
-	const value = (BigInt(hi) << BigInt(32)) + BigInt(lo);
-	if (options.strict === true && value < uintBoundaries[3]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
-	if (value <= Number.MAX_SAFE_INTEGER) return Number(value);
-	if (options.allowBigInt === true) return value;
-	throw new Error(`${decodeErrPrefix} integers outside of the safe integer range are not supported`);
-}
 /**
 * @param {Uint8Array} data
 * @param {number} pos
@@ -778,8 +643,8 @@ function readUint64(data, offset, options) {
 * @param {DecodeOptions} options
 * @returns {Token}
 */
-function decodeUint8(data, pos, _minor, options) {
-	return new Token(Type.uint, readUint8(data, pos + 1, options), 2);
+function decodeNegint8(data, pos, _minor, options) {
+	return new Token(Type.negint, -1 - readUint8(data, pos + 1, options), 2);
 }
 /**
 * @param {Uint8Array} data
@@ -788,8 +653,8 @@ function decodeUint8(data, pos, _minor, options) {
 * @param {DecodeOptions} options
 * @returns {Token}
 */
-function decodeUint16(data, pos, _minor, options) {
-	return new Token(Type.uint, readUint16(data, pos + 1, options), 3);
+function decodeNegint16(data, pos, _minor, options) {
+	return new Token(Type.negint, -1 - readUint16(data, pos + 1, options), 3);
 }
 /**
 * @param {Uint8Array} data
@@ -798,9 +663,11 @@ function decodeUint16(data, pos, _minor, options) {
 * @param {DecodeOptions} options
 * @returns {Token}
 */
-function decodeUint32(data, pos, _minor, options) {
-	return new Token(Type.uint, readUint32(data, pos + 1, options), 5);
+function decodeNegint32(data, pos, _minor, options) {
+	return new Token(Type.negint, -1 - readUint32(data, pos + 1, options), 5);
 }
+const neg1b$1 = BigInt(-1);
+const pos1b$1 = BigInt(1);
 /**
 * @param {Uint8Array} data
 * @param {number} pos
@@ -808,169 +675,27 @@ function decodeUint32(data, pos, _minor, options) {
 * @param {DecodeOptions} options
 * @returns {Token}
 */
-function decodeUint64(data, pos, _minor, options) {
-	return new Token(Type.uint, readUint64(data, pos + 1, options), 9);
+function decodeNegint64(data, pos, _minor, options) {
+	const int = readUint64(data, pos + 1, options);
+	if (typeof int !== "bigint") {
+		const value = -1 - int;
+		if (value >= Number.MIN_SAFE_INTEGER) return new Token(Type.negint, value, 9);
+	}
+	if (options.allowBigInt !== true) throw new Error(`${decodeErrPrefix} integers outside of the safe integer range are not supported`);
+	return new Token(Type.negint, neg1b$1 - BigInt(int), 9);
 }
 /**
 * @param {ByteWriter} writer
 * @param {Token} token
 */
-function encodeUint(writer, token) {
-	return encodeUintValue(writer, 0, token.value);
+function encodeNegint(writer, token) {
+	const negint = token.value;
+	const unsigned = typeof negint === "bigint" ? negint * neg1b$1 - pos1b$1 : negint * -1 - 1;
+	encodeUintValue(writer, token.type.majorEncoded, unsigned);
 }
 /**
-* @param {ByteWriter} writer
-* @param {number} major
-* @param {number|bigint} uint
-*/
-function encodeUintValue(writer, major, uint) {
-	if (uint < uintBoundaries[0]) {
-		const nuint = Number(uint);
-		writer.pushByte(major | nuint);
-	} else if (uint < uintBoundaries[1]) {
-		const nuint = Number(uint);
-		writer.push([major | 24, nuint]);
-	} else if (uint < uintBoundaries[2]) {
-		const nuint = Number(uint);
-		writer.push([
-			major | 25,
-			nuint >>> 8,
-			nuint & 255
-		]);
-	} else if (uint < uintBoundaries[3]) {
-		const nuint = Number(uint);
-		writer.push([
-			major | 26,
-			nuint >>> 24 & 255,
-			nuint >>> 16 & 255,
-			nuint >>> 8 & 255,
-			nuint & 255
-		]);
-	} else {
-		const buint = BigInt(uint);
-		if (buint < uintBoundaries[4]) {
-			const set = [
-				major | 27,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0
-			];
-			let lo = Number(buint & BigInt(4294967295));
-			let hi = Number(buint >> BigInt(32) & BigInt(4294967295));
-			set[8] = lo & 255;
-			lo = lo >> 8;
-			set[7] = lo & 255;
-			lo = lo >> 8;
-			set[6] = lo & 255;
-			lo = lo >> 8;
-			set[5] = lo & 255;
-			set[4] = hi & 255;
-			hi = hi >> 8;
-			set[3] = hi & 255;
-			hi = hi >> 8;
-			set[2] = hi & 255;
-			hi = hi >> 8;
-			set[1] = hi & 255;
-			writer.push(set);
-		} else throw new Error(`${decodeErrPrefix} encountered BigInt larger than allowable range`);
-	}
-}
-/**
-* @param {Token} token
-* @returns {number}
-*/
-encodeUint.encodedSize = function encodedSize(token) {
-	return encodeUintValue.encodedSize(token.value);
-};
-/**
-* @param {number} uint
-* @returns {number}
-*/
-encodeUintValue.encodedSize = function encodedSize(uint) {
-	if (uint < uintBoundaries[0]) return 1;
-	if (uint < uintBoundaries[1]) return 2;
-	if (uint < uintBoundaries[2]) return 3;
-	if (uint < uintBoundaries[3]) return 5;
-	return 9;
-};
-/**
-* @param {Token} tok1
-* @param {Token} tok2
-* @returns {number}
-*/
-encodeUint.compareTokens = function compareTokens(tok1, tok2) {
-	return tok1.value < tok2.value ? -1 : tok1.value > tok2.value ? 1 : 0;
-};
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/1negint.js
-/**
-* @typedef {import('../interface.js').ByteWriter} ByteWriter
-* @typedef {import('../interface.js').DecodeOptions} DecodeOptions
-*/
-/**
-* @param {Uint8Array} data
-* @param {number} pos
-* @param {number} _minor
-* @param {DecodeOptions} options
-* @returns {Token}
-*/
-function decodeNegint8(data, pos, _minor, options) {
-	return new Token(Type.negint, -1 - readUint8(data, pos + 1, options), 2);
-}
-/**
-* @param {Uint8Array} data
-* @param {number} pos
-* @param {number} _minor
-* @param {DecodeOptions} options
-* @returns {Token}
-*/
-function decodeNegint16(data, pos, _minor, options) {
-	return new Token(Type.negint, -1 - readUint16(data, pos + 1, options), 3);
-}
-/**
-* @param {Uint8Array} data
-* @param {number} pos
-* @param {number} _minor
-* @param {DecodeOptions} options
-* @returns {Token}
-*/
-function decodeNegint32(data, pos, _minor, options) {
-	return new Token(Type.negint, -1 - readUint32(data, pos + 1, options), 5);
-}
-const neg1b$1 = BigInt(-1);
-const pos1b$1 = BigInt(1);
-/**
-* @param {Uint8Array} data
-* @param {number} pos
-* @param {number} _minor
-* @param {DecodeOptions} options
-* @returns {Token}
-*/
-function decodeNegint64(data, pos, _minor, options) {
-	const int = readUint64(data, pos + 1, options);
-	if (typeof int !== "bigint") {
-		const value = -1 - int;
-		if (value >= Number.MIN_SAFE_INTEGER) return new Token(Type.negint, value, 9);
-	}
-	if (options.allowBigInt !== true) throw new Error(`${decodeErrPrefix} integers outside of the safe integer range are not supported`);
-	return new Token(Type.negint, neg1b$1 - BigInt(int), 9);
-}
-/**
-* @param {ByteWriter} writer
-* @param {Token} token
-*/
-function encodeNegint(writer, token) {
-	const negint = token.value;
-	const unsigned = typeof negint === "bigint" ? negint * neg1b$1 - pos1b$1 : negint * -1 - 1;
-	encodeUintValue(writer, token.type.majorEncoded, unsigned);
-}
-/**
-* @param {Token} token
-* @returns {number}
+* @param {Token} token
+* @returns {number}
 */
 encodeNegint.encodedSize = function encodedSize(token) {
 	const negint = token.value;
@@ -2495,325 +2220,624 @@ function tokenToMap(token, tokeniser, options) {
 	}
 	return useMaps ? m : obj;
 }
-/**
-* Generator that yields [key, value] entries from a CBOR map token.
-* Used by tag decoders that need to preserve key types (e.g., Tag 259 Map).
-* @param {Token} token - The map token
-* @param {DecodeTokenizer} tokeniser
-* @param {DecodeOptions} options
-* @returns {Generator<[any, any], void, unknown>}
-*/
-function* tokenToMapEntries(token, tokeniser, options) {
-	for (let i = 0; i < token.value; i++) {
-		const key = tokensToObject(tokeniser, options);
-		if (key === BREAK) {
-			if (token.value === Infinity) break;
-			throw new Error(`${decodeErrPrefix} got unexpected break to lengthed map`);
-		}
-		if (key === DONE) throw new Error(`${decodeErrPrefix} found map but not enough entries (got ${i} [no key], expected ${token.value})`);
-		const value = tokensToObject(tokeniser, options);
-		if (value === DONE) throw new Error(`${decodeErrPrefix} found map but not enough entries (got ${i} [no value], expected ${token.value})`);
-		yield [key, value];
-	}
+/**
+* Generator that yields [key, value] entries from a CBOR map token.
+* Used by tag decoders that need to preserve key types (e.g., Tag 259 Map).
+* @param {Token} token - The map token
+* @param {DecodeTokenizer} tokeniser
+* @param {DecodeOptions} options
+* @returns {Generator<[any, any], void, unknown>}
+*/
+function* tokenToMapEntries(token, tokeniser, options) {
+	for (let i = 0; i < token.value; i++) {
+		const key = tokensToObject(tokeniser, options);
+		if (key === BREAK) {
+			if (token.value === Infinity) break;
+			throw new Error(`${decodeErrPrefix} got unexpected break to lengthed map`);
+		}
+		if (key === DONE) throw new Error(`${decodeErrPrefix} found map but not enough entries (got ${i} [no key], expected ${token.value})`);
+		const value = tokensToObject(tokeniser, options);
+		if (value === DONE) throw new Error(`${decodeErrPrefix} found map but not enough entries (got ${i} [no value], expected ${token.value})`);
+		yield [key, value];
+	}
+}
+/**
+* Creates a TagDecodeControl object for tag decoders.
+* @param {DecodeTokenizer} tokeniser
+* @param {DecodeOptions} options
+* @returns {TagDecodeControl}
+*/
+function createTagDecodeControl(tokeniser, options) {
+	/** @type {TagDecodeControl & {_called: boolean}} */
+	const decode = function() {
+		if (decode._called) throw new Error(`${decodeErrPrefix} tag decode() may only be called once`);
+		decode._called = true;
+		const value = tokensToObject(tokeniser, options);
+		if (value === DONE) throw new Error(`${decodeErrPrefix} tag content missing`);
+		if (value === BREAK) throw new Error(`${decodeErrPrefix} got unexpected break in tag content`);
+		return value;
+	};
+	decode.entries = function() {
+		if (decode._called) throw new Error(`${decodeErrPrefix} tag decode() may only be called once`);
+		decode._called = true;
+		const token = tokeniser.next();
+		if (!Type.equals(token.type, Type.map)) throw new Error(`${decodeErrPrefix} entries() requires map content, got ${token.type.name}`);
+		const entries = [];
+		for (const entry of tokenToMapEntries(token, tokeniser, options)) entries.push(entry);
+		return entries;
+	};
+	decode._called = false;
+	return decode;
+}
+/**
+* @param {DecodeTokenizer} tokeniser
+* @param {DecodeOptions} options
+* @returns {any|typeof BREAK|typeof DONE}
+*/
+function tokensToObject(tokeniser, options) {
+	if (tokeniser.done()) return DONE;
+	const token = tokeniser.next();
+	if (Type.equals(token.type, Type.break)) return BREAK;
+	if (token.type.terminal) return token.value;
+	if (Type.equals(token.type, Type.array)) return tokenToArray(token, tokeniser, options);
+	if (Type.equals(token.type, Type.map)) return tokenToMap(token, tokeniser, options);
+	if (Type.equals(token.type, Type.tag)) {
+		if (options.tags && typeof options.tags[token.value] === "function") {
+			const decodeControl = createTagDecodeControl(tokeniser, options);
+			const result = options.tags[token.value](decodeControl);
+			if (!decodeControl._called) throw new Error(`${decodeErrPrefix} tag decoder must call decode() or entries()`);
+			return result;
+		}
+		throw new Error(`${decodeErrPrefix} tag not supported (${token.value})`);
+	}
+	throw new Error("unsupported");
+}
+/**
+* @param {Uint8Array} data
+* @param {DecodeOptions} [options]
+* @returns {[any, Uint8Array]}
+*/
+function decodeFirst(data, options) {
+	if (!(data instanceof Uint8Array)) throw new Error(`${decodeErrPrefix} data to decode must be a Uint8Array`);
+	options = Object.assign({}, defaultDecodeOptions, options);
+	const u8aData = asU8A(data);
+	const tokeniser = options.tokenizer || new Tokeniser(u8aData, options);
+	const decoded = tokensToObject(tokeniser, options);
+	if (decoded === DONE) throw new Error(`${decodeErrPrefix} did not find any content to decode`);
+	if (decoded === BREAK) throw new Error(`${decodeErrPrefix} got unexpected break`);
+	return [decoded, data.subarray(tokeniser.pos())];
+}
+/**
+* @param {Uint8Array} data
+* @param {DecodeOptions} [options]
+* @returns {any}
+*/
+function decode(data, options) {
+	const [decoded, remainder] = decodeFirst(data, options);
+	if (remainder.length > 0) throw new Error(`${decodeErrPrefix} too many terminals, data makes no sense`);
+	return decoded;
+}
+Object.defineProperty(class Tagged {
+	/**
+	* @param {number} tag - CBOR tag number, a non-negative integer
+	* @param {any} value - The value to be tagged; encoded recursively
+	*/
+	constructor(tag, value) {
+		if (typeof tag !== "number" || !Number.isInteger(tag) || tag < 0) throw new TypeError("Tagged: tag must be a non-negative integer");
+		this.tag = tag;
+		this.value = value;
+	}
+	/**
+	* Build a tag decoder for use in `decode()`'s `tags` option that returns the
+	* decoded content wrapped in a `Tagged` instance, preserving the tag number
+	* for the caller to inspect.
+	*
+	* @param {number} tag - The CBOR tag number this decoder will be registered for
+	* @returns {TaggedTagDecoder}
+	*
+	* @example
+	* import { decode, Tagged } from 'cborg'
+	* const value = decode(bytes, { tags: { 16: Tagged.decoder(16) } })
+	* // value instanceof Tagged; value.tag === 16
+	*/
+	static decoder(tag) {
+		return (decode) => new Tagged(tag, decode());
+	}
+	/**
+	* Build a `tags` option for `decode()` that wraps each listed tag number in
+	* a `Tagged` instance, preserving those tags through decode without
+	* registering a dedicated decoder per tag.
+	*
+	* @param {...number} tagNumbers - One or more CBOR tag numbers to preserve
+	* @returns {{[tagNumber: number]: TaggedTagDecoder}}
+	*
+	* @example
+	* import { decode, Tagged } from 'cborg'
+	* const value = decode(bytes, { tags: Tagged.preserve(16, 96) })
+	*/
+	static preserve(...tagNumbers) {
+		/** @type {{[tagNumber: number]: TaggedTagDecoder}} */
+		const tags = {};
+		for (const tag of tagNumbers) tags[tag] = Tagged.decoder(tag);
+		return tags;
+	}
+}.prototype, Symbol.toStringTag, { value: "Tagged" });
+//#endregion
+//#region ../../packages/shared/src/nodeIdentity.ts
+const NODE_AUTH_TRANSCRIPT_DOMAIN = "ryco.node-auth.proof.v1";
+const NODE_KEY_FINGERPRINT_DOMAIN = "ryco.node-key.v1";
+const NODE_KEY_ROTATION_TRANSCRIPT_DOMAIN = "ryco.node-key-rotation.proof.v1";
+const NATIVE_NODE_CLAIM_TRANSCRIPT_DOMAIN = "ryco.native-node-claim.proof.v1";
+var NodeIdentityValidationError = class extends Error {
+	code = "invalid_node_identity_input";
+	constructor() {
+		super("Node identity input is invalid.");
+		this.name = "NodeIdentityValidationError";
+	}
+};
+const ID_SUFFIX = "[A-Za-z0-9_-]{22}";
+const NODE_ID = new RegExp(`^node_${ID_SUFFIX}$`);
+const NODE_KEY_ID = new RegExp(`^nkey_${ID_SUFFIX}$`);
+const ROTATION_REQUEST_ID = new RegExp(`^nrot_${ID_SUFFIX}$`);
+const PUBLIC_ID_SUFFIX = "[A-Za-z0-9_-]{22,43}";
+const ACCOUNT_ID = new RegExp(`^acct_${PUBLIC_ID_SUFFIX}$`);
+const SPACE_ID = new RegExp(`^space_${PUBLIC_ID_SUFFIX}$`);
+const SESSION_ID = new RegExp(`^sess_${PUBLIC_ID_SUFFIX}$`);
+const NATIVE_NODE_CLAIM_ID = new RegExp(`^nclaim_${PUBLIC_ID_SUFFIX}$`);
+const DESKTOP_INSTALLATION_ID = new RegExp(`^install_${PUBLIC_ID_SUFFIX}$`);
+const ENVIRONMENT_ID = /^env_[A-Za-z0-9_-]{22}$/;
+const LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
+	"localhost",
+	"127.0.0.1",
+	"[::1]"
+]);
+function invalid() {
+	throw new NodeIdentityValidationError();
+}
+function assertUnsignedSafeInteger(value) {
+	if (!Number.isSafeInteger(value) || value < 0) invalid();
+}
+function assertProtocolVersion(value) {
+	if (!Number.isSafeInteger(value) || value < 0 || value > 65535) invalid();
+}
+function assertIdentifier(value, pattern) {
+	if (!pattern.test(value)) invalid();
+}
+function copyBytes(value, expectedLengths) {
+	if (!(value instanceof Uint8Array) || !expectedLengths.includes(value.byteLength)) invalid();
+	return Uint8Array.from(value);
+}
+function canonicalizeHubOrigin(value) {
+	if (typeof value !== "string" || value.length === 0 || value.length > 512) invalid();
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		return invalid();
+	}
+	const isLoopbackHttp = url.protocol === "http:" && LOOPBACK_HOSTS.has(url.hostname);
+	if (url.protocol !== "https:" && !isLoopbackHttp || url.username !== "" || url.password !== "" || url.pathname !== "/" || url.search !== "" || url.hash !== "" || value !== url.origin) invalid();
+	return url.origin;
+}
+function normalizeHubNodeName(value) {
+	if (typeof value !== "string") invalid();
+	const normalized = value.trim();
+	if (normalized.length === 0 || normalized.length > 100) invalid();
+	return normalized;
+}
+function validateNodePublicKey(descriptor) {
+	if (descriptor.algorithm === "ed25519") return {
+		algorithm: descriptor.algorithm,
+		publicKey: copyBytes(descriptor.publicKey, [32])
+	};
+	if (descriptor.algorithm === "p256") {
+		const publicKey = copyBytes(descriptor.publicKey, [33, 65]);
+		const prefix = publicKey[0];
+		if (publicKey.byteLength === 33 && prefix !== 2 && prefix !== 3 || publicKey.byteLength === 65 && prefix !== 4) invalid();
+		return {
+			algorithm: descriptor.algorithm,
+			publicKey
+		};
+	}
+	return invalid();
+}
+function fingerprintNodePublicKey(descriptor) {
+	const key = validateNodePublicKey(descriptor);
+	const canonical = encode([
+		NODE_KEY_FINGERPRINT_DOMAIN,
+		key.algorithm,
+		key.publicKey
+	], rfc8949EncodeOptions);
+	return Uint8Array.from(createHash("sha256").update(canonical).digest());
+}
+function formatNodePublicKeyFingerprint(fingerprint) {
+	const bytes = copyBytes(fingerprint, [32]);
+	return `SHA256:${Buffer.from(bytes).toString("base64url")}`;
+}
+function encodeNodeAuthenticationTranscript(input) {
+	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
+	assertProtocolVersion(input.protocolMajor);
+	assertProtocolVersion(input.protocolMinor);
+	assertIdentifier(input.nodeId, NODE_ID);
+	assertIdentifier(input.activeKeyId, NODE_KEY_ID);
+	assertUnsignedSafeInteger(input.challengeExpiresAt);
+	const challenge = copyBytes(input.challenge, [32]);
+	return Uint8Array.from(encode([
+		NODE_AUTH_TRANSCRIPT_DOMAIN,
+		hubOrigin,
+		input.protocolMajor,
+		input.protocolMinor,
+		input.nodeId,
+		input.activeKeyId,
+		input.challengeExpiresAt,
+		challenge
+	], rfc8949EncodeOptions));
+}
+function encodeNodeKeyRotationTranscript(input) {
+	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
+	assertProtocolVersion(input.protocolMajor);
+	assertProtocolVersion(input.protocolMinor);
+	assertIdentifier(input.rotationRequestId, ROTATION_REQUEST_ID);
+	assertIdentifier(input.nodeId, NODE_ID);
+	assertIdentifier(input.oldActiveKeyId, NODE_KEY_ID);
+	assertIdentifier(input.newKeyId, NODE_KEY_ID);
+	assertUnsignedSafeInteger(input.challengeExpiresAt);
+	const newKey = validateNodePublicKey(input.newKey);
+	const fingerprint = fingerprintNodePublicKey(newKey);
+	const challenge = copyBytes(input.challenge, [32]);
+	return Uint8Array.from(encode([
+		NODE_KEY_ROTATION_TRANSCRIPT_DOMAIN,
+		hubOrigin,
+		input.protocolMajor,
+		input.protocolMinor,
+		input.rotationRequestId,
+		input.nodeId,
+		input.oldActiveKeyId,
+		input.newKeyId,
+		newKey.algorithm,
+		newKey.publicKey,
+		fingerprint,
+		input.challengeExpiresAt,
+		challenge
+	], rfc8949EncodeOptions));
+}
+function encodeNativeNodeClaimTranscript(input) {
+	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
+	assertProtocolVersion(input.protocolVersion);
+	assertProtocolVersion(input.transcriptVersion);
+	assertIdentifier(input.claimId, NATIVE_NODE_CLAIM_ID);
+	assertIdentifier(input.accountId, ACCOUNT_ID);
+	assertIdentifier(input.spaceId, SPACE_ID);
+	assertIdentifier(input.sessionId, SESSION_ID);
+	const dpopKeyThumbprint = copyBytes(input.dpopKeyThumbprint, [32]);
+	assertIdentifier(input.installationId, DESKTOP_INSTALLATION_ID);
+	assertIdentifier(input.environmentId, ENVIRONMENT_ID);
+	const nodeKey = validateNodePublicKey(input.nodeKey);
+	const nodeFingerprint = fingerprintNodePublicKey(nodeKey);
+	assertUnsignedSafeInteger(input.claimExpiresAt);
+	const challenge = copyBytes(input.challenge, [32]);
+	return Uint8Array.from(encode([
+		NATIVE_NODE_CLAIM_TRANSCRIPT_DOMAIN,
+		hubOrigin,
+		input.protocolVersion,
+		input.transcriptVersion,
+		input.claimId,
+		input.accountId,
+		input.spaceId,
+		input.sessionId,
+		dpopKeyThumbprint,
+		input.installationId,
+		input.environmentId,
+		nodeKey.algorithm,
+		nodeKey.publicKey,
+		nodeFingerprint,
+		input.claimExpiresAt,
+		challenge
+	], rfc8949EncodeOptions));
+}
+function equalNodeIdentityBytes(left, right) {
+	if (!(left instanceof Uint8Array) || !(right instanceof Uint8Array)) return false;
+	if (left.byteLength !== right.byteLength) return false;
+	return timingSafeEqual(left, right);
+}
+//#endregion
+//#region ../../packages/shared/src/Struct.ts
+function deepMerge(current, patch) {
+	if (!P.isObject(current) || !P.isObject(patch)) return patch;
+	const next = { ...current };
+	for (const [key, value] of Object.entries(patch)) {
+		if (value === void 0) continue;
+		const existing = next[key];
+		next[key] = P.isObject(existing) && P.isObject(value) ? deepMerge(existing, value) : value;
+	}
+	return next;
+}
+//#endregion
+//#region ../../packages/shared/src/model.ts
+const DEFAULT_PROVIDER_DRIVER_KIND = ProviderDriverKind.make("codex");
+/**
+* Resolve the human-readable model title used by picker surfaces and durable
+* handoff presentation. Provider catalogs are authoritative when they carry a
+* friendly name; the routing slug remains the deterministic final fallback.
+*/
+function getModelDisplayName(model, options) {
+	const shortName = trimOrNull(model.shortName);
+	const name = trimOrNull(model.name);
+	const slug = trimOrNull(model.slug) ?? model.slug;
+	return options?.preferShortName ? shortName ?? name ?? slug : name ?? shortName ?? slug;
+}
+/** Compose the optional sub-provider prefix exactly as the picker trigger does. */
+function getModelDisplayLabel(model, options) {
+	const title = getModelDisplayName(model, options);
+	const subProvider = trimOrNull(model.subProvider);
+	return subProvider ? `${subProvider} · ${title}` : title;
+}
+function createModelCapabilities(input) {
+	return { optionDescriptors: input.optionDescriptors.map(cloneDescriptor) };
+}
+function getRawSelectionValueById(selections, id) {
+	return (selections?.find((candidate) => candidate.id === id))?.value;
+}
+function getProviderOptionSelectionValue(selections, id) {
+	return getRawSelectionValueById(selections, id);
+}
+function getProviderOptionStringSelectionValue(selections, id) {
+	const value = getProviderOptionSelectionValue(selections, id);
+	return typeof value === "string" ? value : void 0;
+}
+function getProviderOptionBooleanSelectionValue(selections, id) {
+	const value = getProviderOptionSelectionValue(selections, id);
+	return typeof value === "boolean" ? value : void 0;
+}
+function getModelSelectionStringOptionValue(modelSelection, id) {
+	return getProviderOptionStringSelectionValue(modelSelection?.options, id);
+}
+function getModelSelectionBooleanOptionValue(modelSelection, id) {
+	return getProviderOptionBooleanSelectionValue(modelSelection?.options, id);
+}
+function resolveDescriptorChoiceValue(descriptor, raw) {
+	const trimmed = trimOrNull(raw);
+	if (!trimmed) return descriptor.currentValue ?? descriptor.options.find((option) => option.isDefault)?.id;
+	if (descriptor.options.length === 0) return trimmed;
+	if (descriptor.promptInjectedValues?.includes(trimmed) && descriptor.options.some((option) => option.id === trimmed)) return descriptor.options.find((option) => option.isDefault)?.id;
+	if (descriptor.options.some((option) => option.id === trimmed)) return trimmed;
+	return descriptor.currentValue ?? descriptor.options.find((option) => option.isDefault)?.id;
+}
+function cloneDescriptor(descriptor) {
+	return descriptor.type === "select" ? {
+		...descriptor,
+		options: [...descriptor.options],
+		...descriptor.promptInjectedValues ? { promptInjectedValues: [...descriptor.promptInjectedValues] } : {}
+	} : { ...descriptor };
+}
+function cloneSelection(selection) {
+	return { ...selection };
 }
-/**
-* Creates a TagDecodeControl object for tag decoders.
-* @param {DecodeTokenizer} tokeniser
-* @param {DecodeOptions} options
-* @returns {TagDecodeControl}
-*/
-function createTagDecodeControl(tokeniser, options) {
-	/** @type {TagDecodeControl & {_called: boolean}} */
-	const decode = function() {
-		if (decode._called) throw new Error(`${decodeErrPrefix} tag decode() may only be called once`);
-		decode._called = true;
-		const value = tokensToObject(tokeniser, options);
-		if (value === DONE) throw new Error(`${decodeErrPrefix} tag content missing`);
-		if (value === BREAK) throw new Error(`${decodeErrPrefix} got unexpected break in tag content`);
-		return value;
+function withDescriptorCurrentValue(descriptor, rawCurrentValue) {
+	if (descriptor.type === "boolean") {
+		if (typeof rawCurrentValue === "boolean") return {
+			...descriptor,
+			currentValue: rawCurrentValue
+		};
+		return descriptor;
+	}
+	const currentValue = typeof rawCurrentValue === "string" ? resolveDescriptorChoiceValue(descriptor, rawCurrentValue) : resolveDescriptorChoiceValue(descriptor, descriptor.currentValue);
+	if (!currentValue) {
+		const { currentValue: _unusedCurrentValue, ...rest } = descriptor;
+		return rest;
+	}
+	return {
+		...descriptor,
+		currentValue
 	};
-	decode.entries = function() {
-		if (decode._called) throw new Error(`${decodeErrPrefix} tag decode() may only be called once`);
-		decode._called = true;
-		const token = tokeniser.next();
-		if (!Type.equals(token.type, Type.map)) throw new Error(`${decodeErrPrefix} entries() requires map content, got ${token.type.name}`);
-		const entries = [];
-		for (const entry of tokenToMapEntries(token, tokeniser, options)) entries.push(entry);
-		return entries;
+}
+function getProviderOptionDescriptors(input) {
+	const { caps, selections } = input;
+	return (caps.optionDescriptors ?? []).map(cloneDescriptor).map((descriptor) => withDescriptorCurrentValue(descriptor, getRawSelectionValueById(selections, descriptor.id) ?? descriptor.currentValue));
+}
+function getProviderOptionCurrentValue(descriptor) {
+	if (!descriptor) return;
+	if (descriptor.type === "boolean") return descriptor.currentValue;
+	if (descriptor.currentValue) return descriptor.currentValue;
+	return descriptor.options.find((option) => option.isDefault)?.id;
+}
+function normalizeModelSlug(model, provider = DEFAULT_PROVIDER_DRIVER_KIND) {
+	if (typeof model !== "string") return null;
+	const trimmed = model.trim();
+	if (!trimmed) return null;
+	const aliases = MODEL_SLUG_ALIASES_BY_PROVIDER[provider] ?? {};
+	const aliased = Object.prototype.hasOwnProperty.call(aliases, trimmed) ? aliases[trimmed] : void 0;
+	return typeof aliased === "string" ? aliased : trimmed;
+}
+/** Trim a string, returning null for empty/missing values. */
+function trimOrNull(value) {
+	if (typeof value !== "string") return null;
+	return value.trim() || null;
+}
+function cloneSelections(selections) {
+	return selections.map(cloneSelection);
+}
+function createModelSelection(instanceId, model, options) {
+	const selections = options ? cloneSelections(options) : [];
+	const base = {
+		instanceId,
+		model
 	};
-	decode._called = false;
-	return decode;
+	return selections.length > 0 ? {
+		...base,
+		options: selections
+	} : base;
+}
+function canonicalOptionKeys(options) {
+	return (options ?? []).map((option) => JSON.stringify([option.id, option.value])).toSorted((left, right) => left < right ? -1 : left > right ? 1 : 0);
 }
 /**
-* @param {DecodeTokenizer} tokeniser
-* @param {DecodeOptions} options
-* @returns {any|typeof BREAK|typeof DONE}
+* Semantic equality of two model selections: same instance and model, and the
+* same options regardless of their order (absent options equal an empty list).
+* Key order never matters, so a selection round-tripped through JSON and schema
+* decode equals the hydrated one.
 */
-function tokensToObject(tokeniser, options) {
-	if (tokeniser.done()) return DONE;
-	const token = tokeniser.next();
-	if (Type.equals(token.type, Type.break)) return BREAK;
-	if (token.type.terminal) return token.value;
-	if (Type.equals(token.type, Type.array)) return tokenToArray(token, tokeniser, options);
-	if (Type.equals(token.type, Type.map)) return tokenToMap(token, tokeniser, options);
-	if (Type.equals(token.type, Type.tag)) {
-		if (options.tags && typeof options.tags[token.value] === "function") {
-			const decodeControl = createTagDecodeControl(tokeniser, options);
-			const result = options.tags[token.value](decodeControl);
-			if (!decodeControl._called) throw new Error(`${decodeErrPrefix} tag decoder must call decode() or entries()`);
-			return result;
-		}
-		throw new Error(`${decodeErrPrefix} tag not supported (${token.value})`);
-	}
-	throw new Error("unsupported");
+function sameModelSelection(left, right) {
+	if (left.instanceId !== right.instanceId || left.model !== right.model) return false;
+	const leftOptions = canonicalOptionKeys(left.options);
+	const rightOptions = canonicalOptionKeys(right.options);
+	return leftOptions.length === rightOptions.length && leftOptions.every((key, index) => rightOptions[index] === key);
 }
 /**
-* @param {Uint8Array} data
-* @param {DecodeOptions} [options]
-* @returns {[any, Uint8Array]}
+* Context handoff is a provider-instance boundary. Model and option changes
+* within one configured instance remain on that provider's normal turn path.
 */
-function decodeFirst(data, options) {
-	if (!(data instanceof Uint8Array)) throw new Error(`${decodeErrPrefix} data to decode must be a Uint8Array`);
-	options = Object.assign({}, defaultDecodeOptions, options);
-	const u8aData = asU8A(data);
-	const tokeniser = options.tokenizer || new Tokeniser(u8aData, options);
-	const decoded = tokensToObject(tokeniser, options);
-	if (decoded === DONE) throw new Error(`${decodeErrPrefix} did not find any content to decode`);
-	if (decoded === BREAK) throw new Error(`${decodeErrPrefix} got unexpected break`);
-	return [decoded, data.subarray(tokeniser.pos())];
+function modelSelectionRequiresContextHandoff(input) {
+	return input.canonicalSelection.instanceId !== input.targetSelection.instanceId;
 }
 /**
-* @param {Uint8Array} data
-* @param {DecodeOptions} [options]
-* @returns {any}
+* Returns the effort value if it is a prompt-injected value according to
+* any select descriptor in the given capabilities, or null otherwise.
+*
+* Unlike a single `find`, this checks every descriptor so that the
+* correct descriptor's `promptInjectedValues` list is consulted even when
+* multiple select descriptors exist.
 */
-function decode(data, options) {
-	const [decoded, remainder] = decodeFirst(data, options);
-	if (remainder.length > 0) throw new Error(`${decodeErrPrefix} too many terminals, data makes no sense`);
-	return decoded;
-}
-Object.defineProperty(class Tagged {
-	/**
-	* @param {number} tag - CBOR tag number, a non-negative integer
-	* @param {any} value - The value to be tagged; encoded recursively
-	*/
-	constructor(tag, value) {
-		if (typeof tag !== "number" || !Number.isInteger(tag) || tag < 0) throw new TypeError("Tagged: tag must be a non-negative integer");
-		this.tag = tag;
-		this.value = value;
-	}
-	/**
-	* Build a tag decoder for use in `decode()`'s `tags` option that returns the
-	* decoded content wrapped in a `Tagged` instance, preserving the tag number
-	* for the caller to inspect.
-	*
-	* @param {number} tag - The CBOR tag number this decoder will be registered for
-	* @returns {TaggedTagDecoder}
-	*
-	* @example
-	* import { decode, Tagged } from 'cborg'
-	* const value = decode(bytes, { tags: { 16: Tagged.decoder(16) } })
-	* // value instanceof Tagged; value.tag === 16
-	*/
-	static decoder(tag) {
-		return (decode) => new Tagged(tag, decode());
-	}
-	/**
-	* Build a `tags` option for `decode()` that wraps each listed tag number in
-	* a `Tagged` instance, preserving those tags through decode without
-	* registering a dedicated decoder per tag.
-	*
-	* @param {...number} tagNumbers - One or more CBOR tag numbers to preserve
-	* @returns {{[tagNumber: number]: TaggedTagDecoder}}
-	*
-	* @example
-	* import { decode, Tagged } from 'cborg'
-	* const value = decode(bytes, { tags: Tagged.preserve(16, 96) })
-	*/
-	static preserve(...tagNumbers) {
-		/** @type {{[tagNumber: number]: TaggedTagDecoder}} */
-		const tags = {};
-		for (const tag of tagNumbers) tags[tag] = Tagged.decoder(tag);
-		return tags;
-	}
-}.prototype, Symbol.toStringTag, { value: "Tagged" });
-//#endregion
-//#region ../../packages/shared/src/nodeIdentity.ts
-const NODE_AUTH_TRANSCRIPT_DOMAIN = "ryco.node-auth.proof.v1";
-const NODE_KEY_FINGERPRINT_DOMAIN = "ryco.node-key.v1";
-const NODE_KEY_ROTATION_TRANSCRIPT_DOMAIN = "ryco.node-key-rotation.proof.v1";
-const NATIVE_NODE_CLAIM_TRANSCRIPT_DOMAIN = "ryco.native-node-claim.proof.v1";
-var NodeIdentityValidationError = class extends Error {
-	code = "invalid_node_identity_input";
-	constructor() {
-		super("Node identity input is invalid.");
-		this.name = "NodeIdentityValidationError";
-	}
-};
-const ID_SUFFIX = "[A-Za-z0-9_-]{22}";
-const NODE_ID = new RegExp(`^node_${ID_SUFFIX}$`);
-const NODE_KEY_ID = new RegExp(`^nkey_${ID_SUFFIX}$`);
-const ROTATION_REQUEST_ID = new RegExp(`^nrot_${ID_SUFFIX}$`);
-const PUBLIC_ID_SUFFIX = "[A-Za-z0-9_-]{22,43}";
-const ACCOUNT_ID = new RegExp(`^acct_${PUBLIC_ID_SUFFIX}$`);
-const SPACE_ID = new RegExp(`^space_${PUBLIC_ID_SUFFIX}$`);
-const SESSION_ID = new RegExp(`^sess_${PUBLIC_ID_SUFFIX}$`);
-const NATIVE_NODE_CLAIM_ID = new RegExp(`^nclaim_${PUBLIC_ID_SUFFIX}$`);
-const DESKTOP_INSTALLATION_ID = new RegExp(`^install_${PUBLIC_ID_SUFFIX}$`);
-const ENVIRONMENT_ID = /^env_[A-Za-z0-9_-]{22}$/;
-const LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
-	"localhost",
-	"127.0.0.1",
-	"[::1]"
-]);
-function invalid() {
-	throw new NodeIdentityValidationError();
-}
-function assertUnsignedSafeInteger(value) {
-	if (!Number.isSafeInteger(value) || value < 0) invalid();
+function resolvePromptInjectedEffort(caps, rawEffort) {
+	const trimmed = trimOrNull(rawEffort);
+	if (!trimmed) return null;
+	const descriptors = getProviderOptionDescriptors({ caps });
+	for (const descriptor of descriptors) if (descriptor.type === "select" && descriptor.promptInjectedValues?.includes(trimmed)) return trimmed;
+	return null;
 }
-function assertProtocolVersion(value) {
-	if (!Number.isSafeInteger(value) || value < 0 || value > 65535) invalid();
+function applyClaudePromptEffortPrefix(text, effort) {
+	const trimmed = text.trim();
+	if (!trimmed) return trimmed;
+	if (effort !== "ultrathink") return trimmed;
+	if (trimmed.startsWith("Ultrathink:")) return trimmed;
+	return `Ultrathink:\n${trimmed}`;
 }
-function assertIdentifier(value, pattern) {
-	if (!pattern.test(value)) invalid();
+//#endregion
+//#region ../../packages/shared/src/serverSettings.ts
+const ServerSettingsJson$1 = fromLenientJson(ServerSettings);
+function normalizePersistedServerSettingString(value) {
+	const trimmed = value?.trim();
+	return trimmed && trimmed.length > 0 ? trimmed : void 0;
 }
-function copyBytes(value, expectedLengths) {
-	if (!(value instanceof Uint8Array) || !expectedLengths.includes(value.byteLength)) invalid();
-	return Uint8Array.from(value);
+function extractPersistedServerObservabilitySettings(input) {
+	return {
+		otlpTracesUrl: normalizePersistedServerSettingString(input.observability?.otlpTracesUrl),
+		otlpMetricsUrl: normalizePersistedServerSettingString(input.observability?.otlpMetricsUrl)
+	};
 }
-function canonicalizeHubOrigin(value) {
-	if (typeof value !== "string" || value.length === 0 || value.length > 512) invalid();
-	let url;
+function parsePersistedServerObservabilitySettings(raw) {
 	try {
-		url = new URL(value);
+		return extractPersistedServerObservabilitySettings(Schema.decodeUnknownSync(ServerSettingsJson$1)(raw));
 	} catch {
-		return invalid();
-	}
-	const isLoopbackHttp = url.protocol === "http:" && LOOPBACK_HOSTS.has(url.hostname);
-	if (url.protocol !== "https:" && !isLoopbackHttp || url.username !== "" || url.password !== "" || url.pathname !== "/" || url.search !== "" || url.hash !== "" || value !== url.origin) invalid();
-	return url.origin;
-}
-function normalizeHubNodeName(value) {
-	if (typeof value !== "string") invalid();
-	const normalized = value.trim();
-	if (normalized.length === 0 || normalized.length > 100) invalid();
-	return normalized;
-}
-function validateNodePublicKey(descriptor) {
-	if (descriptor.algorithm === "ed25519") return {
-		algorithm: descriptor.algorithm,
-		publicKey: copyBytes(descriptor.publicKey, [32])
-	};
-	if (descriptor.algorithm === "p256") {
-		const publicKey = copyBytes(descriptor.publicKey, [33, 65]);
-		const prefix = publicKey[0];
-		if (publicKey.byteLength === 33 && prefix !== 2 && prefix !== 3 || publicKey.byteLength === 65 && prefix !== 4) invalid();
 		return {
-			algorithm: descriptor.algorithm,
-			publicKey
+			otlpTracesUrl: void 0,
+			otlpMetricsUrl: void 0
 		};
 	}
-	return invalid();
-}
-function fingerprintNodePublicKey(descriptor) {
-	const key = validateNodePublicKey(descriptor);
-	const canonical = encode([
-		NODE_KEY_FINGERPRINT_DOMAIN,
-		key.algorithm,
-		key.publicKey
-	], rfc8949EncodeOptions);
-	return Uint8Array.from(createHash("sha256").update(canonical).digest());
-}
-function formatNodePublicKeyFingerprint(fingerprint) {
-	const bytes = copyBytes(fingerprint, [32]);
-	return `SHA256:${Buffer.from(bytes).toString("base64url")}`;
-}
-function encodeNodeAuthenticationTranscript(input) {
-	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
-	assertProtocolVersion(input.protocolMajor);
-	assertProtocolVersion(input.protocolMinor);
-	assertIdentifier(input.nodeId, NODE_ID);
-	assertIdentifier(input.activeKeyId, NODE_KEY_ID);
-	assertUnsignedSafeInteger(input.challengeExpiresAt);
-	const challenge = copyBytes(input.challenge, [32]);
-	return Uint8Array.from(encode([
-		NODE_AUTH_TRANSCRIPT_DOMAIN,
-		hubOrigin,
-		input.protocolMajor,
-		input.protocolMinor,
-		input.nodeId,
-		input.activeKeyId,
-		input.challengeExpiresAt,
-		challenge
-	], rfc8949EncodeOptions));
 }
-function encodeNodeKeyRotationTranscript(input) {
-	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
-	assertProtocolVersion(input.protocolMajor);
-	assertProtocolVersion(input.protocolMinor);
-	assertIdentifier(input.rotationRequestId, ROTATION_REQUEST_ID);
-	assertIdentifier(input.nodeId, NODE_ID);
-	assertIdentifier(input.oldActiveKeyId, NODE_KEY_ID);
-	assertIdentifier(input.newKeyId, NODE_KEY_ID);
-	assertUnsignedSafeInteger(input.challengeExpiresAt);
-	const newKey = validateNodePublicKey(input.newKey);
-	const fingerprint = fingerprintNodePublicKey(newKey);
-	const challenge = copyBytes(input.challenge, [32]);
-	return Uint8Array.from(encode([
-		NODE_KEY_ROTATION_TRANSCRIPT_DOMAIN,
-		hubOrigin,
-		input.protocolMajor,
-		input.protocolMinor,
-		input.rotationRequestId,
-		input.nodeId,
-		input.oldActiveKeyId,
-		input.newKeyId,
-		newKey.algorithm,
-		newKey.publicKey,
-		fingerprint,
-		input.challengeExpiresAt,
-		challenge
-	], rfc8949EncodeOptions));
+function shouldReplaceTextGenerationModelSelection(patch) {
+	return Boolean(patch && (patch.instanceId !== void 0 || patch.model !== void 0));
 }
-function encodeNativeNodeClaimTranscript(input) {
-	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
-	assertProtocolVersion(input.protocolVersion);
-	assertProtocolVersion(input.transcriptVersion);
-	assertIdentifier(input.claimId, NATIVE_NODE_CLAIM_ID);
-	assertIdentifier(input.accountId, ACCOUNT_ID);
-	assertIdentifier(input.spaceId, SPACE_ID);
-	assertIdentifier(input.sessionId, SESSION_ID);
-	const dpopKeyThumbprint = copyBytes(input.dpopKeyThumbprint, [32]);
-	assertIdentifier(input.installationId, DESKTOP_INSTALLATION_ID);
-	assertIdentifier(input.environmentId, ENVIRONMENT_ID);
-	const nodeKey = validateNodePublicKey(input.nodeKey);
-	const nodeFingerprint = fingerprintNodePublicKey(nodeKey);
-	assertUnsignedSafeInteger(input.claimExpiresAt);
-	const challenge = copyBytes(input.challenge, [32]);
-	return Uint8Array.from(encode([
-		NATIVE_NODE_CLAIM_TRANSCRIPT_DOMAIN,
-		hubOrigin,
-		input.protocolVersion,
-		input.transcriptVersion,
-		input.claimId,
-		input.accountId,
-		input.spaceId,
-		input.sessionId,
-		dpopKeyThumbprint,
-		input.installationId,
-		input.environmentId,
-		nodeKey.algorithm,
-		nodeKey.publicKey,
-		nodeFingerprint,
-		input.claimExpiresAt,
-		challenge
-	], rfc8949EncodeOptions));
+function mergeModelSelectionOptionsById(input) {
+	if (input.patch === void 0) return input.current ? [...input.current] : void 0;
+	if (input.patch.length === 0) return;
+	const merged = new Map((input.current ?? []).map((selection) => [selection.id, selection.value]));
+	for (const selection of input.patch) merged.set(selection.id, selection.value);
+	return [...merged.entries()].map(([id, value]) => ({
+		id,
+		value
+	}));
 }
-function equalNodeIdentityBytes(left, right) {
-	if (!(left instanceof Uint8Array) || !(right instanceof Uint8Array)) return false;
-	if (left.byteLength !== right.byteLength) return false;
-	return timingSafeEqual(left, right);
+/**
+* Applies a server settings patch while treating textGenerationModelSelection as
+* replace-on-provider/model updates. This prevents stale nested options from
+* surviving a reset patch that intentionally omits options.
+*/
+function applyServerSettingsPatch(current, patch) {
+	const selectionPatch = patch.textGenerationModelSelection;
+	for (const [field, value] of Object.entries(patch.expectedNodePreferences ?? {})) if (!Equal.equals(current[field] ?? null, value)) throw new Error("Node preferences changed elsewhere. Reload before saving.");
+	for (const [projectId, expected] of Object.entries(patch.expectedProjectPreferences ?? {})) {
+		const currentPreferences = current.projectPreferences[projectId] ?? {};
+		for (const [field, value] of Object.entries(expected)) {
+			const actual = field === "initialModelSelection" && !Object.hasOwn(currentPreferences, field) ? "absent" : currentPreferences[field] ?? null;
+			if (!Equal.equals(actual, value)) throw new Error("Project preferences changed elsewhere. Reload before saving.");
+		}
+	}
+	const { expectedProjectPreferences: _expected, expectedNodePreferences: _expectedNode, projectPreferences: _projects, ...persistedPatch } = patch;
+	let next = deepMerge(current, persistedPatch);
+	if (patch.initialModelSelection !== void 0) next = {
+		...next,
+		initialModelSelection: patch.initialModelSelection
+	};
+	if (patch.projectPreferences !== void 0) {
+		const projects = new Map(Object.entries(current.projectPreferences));
+		for (const [projectId, preferencesPatch] of Object.entries(patch.projectPreferences)) {
+			if (preferencesPatch === null) {
+				projects.delete(projectId);
+				continue;
+			}
+			const preferences = { ...projects.get(projectId) };
+			for (const [field, value] of Object.entries(preferencesPatch)) if (value === null && field !== "initialModelSelection") delete preferences[field];
+			else Object.assign(preferences, { [field]: value });
+			if (Object.keys(preferences).length) projects.set(projectId, preferences);
+			else projects.delete(projectId);
+		}
+		next = {
+			...next,
+			projectPreferences: Object.fromEntries(projects)
+		};
+	}
+	if (patch.projectWorktreeSubmodules !== void 0) {
+		const modes = new Map(Object.entries(current.projectWorktreeSubmodules));
+		for (const [projectId, mode] of Object.entries(patch.projectWorktreeSubmodules)) if (mode === null) modes.delete(projectId);
+		else modes.set(projectId, mode);
+		next = {
+			...next,
+			projectWorktreeSubmodules: Object.fromEntries(modes)
+		};
+	}
+	if (patch.projectWorktreeRoots !== void 0) {
+		const roots = new Map(Object.entries(current.projectWorktreeRoots));
+		for (const [projectId, root] of Object.entries(patch.projectWorktreeRoots)) if (root === null || root === "") roots.delete(projectId);
+		else roots.set(projectId, root);
+		next = {
+			...next,
+			projectWorktreeRoots: Object.fromEntries(roots)
+		};
+	}
+	if (patch.projectStorageRetention !== void 0) {
+		const policies = new Map(Object.entries(current.projectStorageRetention));
+		for (const [projectId, policy] of Object.entries(patch.projectStorageRetention)) if (policy === null) policies.delete(projectId);
+		else policies.set(projectId, policy);
+		next = {
+			...next,
+			projectStorageRetention: Object.fromEntries(policies)
+		};
+	}
+	if (patch.projectLifecycleSuggestions !== void 0) {
+		const policies = new Map(Object.entries(current.projectLifecycleSuggestions));
+		for (const [projectId, policy] of Object.entries(patch.projectLifecycleSuggestions)) if (policy === null) policies.delete(projectId);
+		else policies.set(projectId, policy);
+		next = {
+			...next,
+			projectLifecycleSuggestions: Object.fromEntries(policies)
+		};
+	}
+	const nextWithReplacements = patch.providerInstances !== void 0 ? {
+		...next,
+		providerInstances: patch.providerInstances
+	} : next;
+	if (!selectionPatch) return nextWithReplacements;
+	const instanceId = selectionPatch.instanceId ?? current.textGenerationModelSelection.instanceId;
+	const model = selectionPatch.model ?? current.textGenerationModelSelection.model;
+	const options = shouldReplaceTextGenerationModelSelection(selectionPatch) ? selectionPatch.options : mergeModelSelectionOptionsById({
+		current: current.textGenerationModelSelection.options,
+		patch: selectionPatch.options
+	});
+	return {
+		...nextWithReplacements,
+		textGenerationModelSelection: createModelSelection(instanceId, model, options)
+	};
 }
 //#endregion
 //#region src/config.ts
@@ -2890,6 +2914,7 @@ function resolveHubConnectorConfig(raw) {
 	};
 }
 const DEFAULT_NODE_E2EE_POLICY_CONFIG = {
+	mode: void 0,
 	requireE2EE: void 0,
 	requireApprovedClientE2EE: void 0,
 	configurationIssue: void 0
@@ -2916,15 +2941,21 @@ const parseTriStateBoolean = (value) => {
 function resolveNodeE2eePolicyConfig(raw) {
 	const requireE2EE = parseTriStateBoolean(raw.requireE2EE);
 	const requireApprovedClientE2EE = parseTriStateBoolean(raw.requireApprovedClientE2EE);
+	const mode = raw.mode === void 0 ? void 0 : Schema.is(NodeE2eeAdmissionPolicy)(raw.mode) ? raw.mode : null;
 	return {
+		mode: mode ?? void 0,
 		requireE2EE: typeof requireE2EE === "boolean" ? requireE2EE : void 0,
 		requireApprovedClientE2EE: typeof requireApprovedClientE2EE === "boolean" ? requireApprovedClientE2EE : void 0,
-		configurationIssue: requireE2EE === void 0 || requireApprovedClientE2EE === void 0 ? "configuration_invalid" : void 0
+		configurationIssue: requireE2EE === void 0 || requireApprovedClientE2EE === void 0 || mode === null ? "configuration_invalid" : void 0
 	};
 }
 function resolveManagedWorktreesRoot(config) {
 	return config.workspaceAccessRoot === void 0 ? config.worktreesDir : path.join(config.workspaceAccessRoot, ".ryco", "worktrees");
 }
+/** The chats root used when the `chatsRoot` setting is empty. */
+function resolveManagedChatsRoot(config) {
+	return config.workspaceAccessRoot === void 0 ? config.chatsDir : path.join(config.workspaceAccessRoot, ".ryco", "chats");
+}
 const deriveServerPaths = Effect.fn(function* (baseDir, devUrl) {
 	const { join } = yield* Path.Path;
 	const stateDir = join(baseDir, devUrl !== void 0 ? "dev" : "userdata");
@@ -2940,6 +2971,7 @@ const deriveServerPaths = Effect.fn(function* (baseDir, devUrl) {
 		settingsPath: join(stateDir, "settings.json"),
 		providerStatusCacheDir,
 		worktreesDir: join(baseDir, "worktrees"),
+		chatsDir: join(baseDir, "chats"),
 		attachmentsDir,
 		logsDir,
 		serverLogPath: join(logsDir, "server.log"),
@@ -3447,6 +3479,11 @@ async function removeVerifiedWorktree(repository, candidate, cleanup) {
 //#region src/storage/lifecycle.ts
 const storageLifecycleLock = Semaphore.makeUnsafe(1);
 const creations = /* @__PURE__ */ new Map();
+let activityVersion = 0;
+const noteStorageActivity = () => {
+	activityVersion++;
+};
+const storageActivityVersion = () => activityVersion;
 const overlaps = (a, b, platform = process.platform) => {
 	if (platform === "darwin" || platform === "win32") {
 		a = a.toLowerCase();
@@ -3455,6 +3492,12 @@ const overlaps = (a, b, platform = process.platform) => {
 	const boundary = (root) => root.endsWith(path.sep) ? root : root + path.sep;
 	return a === b || a.startsWith(boundary(b)) || b.startsWith(boundary(a));
 };
+/** `candidate` is `root` or below it. */
+const contains = (root, candidate, platform) => {
+	const a = platform === "darwin" || platform === "win32" ? root.toLowerCase() : root;
+	const b = platform === "darwin" || platform === "win32" ? candidate.toLowerCase() : candidate;
+	return a === b || b.startsWith(a.endsWith(path.sep) ? a : a + path.sep);
+};
 const removingPaths = (row) => {
 	let identity;
 	try {
@@ -3485,6 +3528,7 @@ async function canonicalStoragePath(candidate) {
 function acquireWorktreeCreationLease(sql, candidate) {
 	return storageLifecycleLock.withPermit(Effect.gen(function* () {
 		const canonical = yield* Effect.tryPromise(() => canonicalStoragePath(candidate));
+		if (yield* isWorktreeRelocationBlocked(sql, canonical)) return yield* new StorageError({ detail: "Checkout relocation is pending or this is a retired checkout path. Reload the workspace." });
 		const pending = yield* sql`SELECT path, identity_json FROM storage_owned_entries WHERE state = 'removing' LIMIT 257`;
 		if (pending.length > 256) return yield* new StorageError({ detail: "Too many interrupted cleanups to establish safe creation admission. Inspect pending cleanup records." });
 		if (pending.some((row) => removingPaths(row).some((root) => overlaps(root, canonical)))) return yield* new StorageError({ detail: "Checkout cleanup is pending. Creation cannot replace an in-flight removal." });
@@ -3493,6 +3537,7 @@ function acquireWorktreeCreationLease(sql, candidate) {
 			const remaining = (creations.get(canonical) ?? 1) - 1;
 			if (remaining > 0) creations.set(canonical, remaining);
 			else creations.delete(canonical);
+			noteStorageActivity();
 		});
 	}));
 }
@@ -3500,12 +3545,14 @@ function acquireWorktreeCreationLease(sql, candidate) {
 function acquireStoragePathUseLease(sql, candidate) {
 	return storageLifecycleLock.withPermit(Effect.gen(function* () {
 		const canonical = yield* Effect.tryPromise(() => canonicalStoragePath(candidate));
-		if (yield* isStoragePathBlocked(sql, canonical)) return yield* new StorageError({ detail: "Checkout cleanup is pending or complete. Restore/recreate it before provider recovery." });
+		const blocker = yield* storagePathBlocker(sql, canonical);
+		if (blocker !== null) return yield* new StorageError({ detail: blocker === "project-relocation" ? PROJECT_RELOCATION_PENDING_MESSAGE : "Checkout cleanup is pending or complete. Restore/recreate it before provider recovery." });
 		creations.set(canonical, (creations.get(canonical) ?? 0) + 1);
 		return Effect.sync(() => {
 			const remaining = (creations.get(canonical) ?? 1) - 1;
 			if (remaining > 0) creations.set(canonical, remaining);
 			else creations.delete(canonical);
+			noteStorageActivity();
 		});
 	}));
 }
@@ -3533,8 +3580,22 @@ function recordCreatedWorktree(sql, repository, candidate) {
       WHERE storage_owned_entries.state != 'removing' RETURNING id`).length !== 1) return yield* new StorageError({ detail: "Ownership capture refused to replace a pending cleanup. The creation outcome remains protected." });
 	});
 }
-/** Persistent tombstones prevent restart/resume from granting authority to a removed checkout. */
-function isStoragePathBlocked(sql, candidate, platform = process.platform) {
+/**
+* Storage admission for a path: refused while a chat's folder moves or checkout lifecycle work
+* fences it. Persistent tombstones prevent restart/resume from granting authority to a removed
+* checkout.
+*/
+function isStoragePathBlocked(sql, candidate, platform = process.platform, ignoredRelocationId) {
+	return storagePathBlocker(sql, candidate, platform, ignoredRelocationId).pipe(Effect.map((blocker) => blocker !== null));
+}
+/** {@link isStoragePathBlocked}, with the reason, so admission can tell a retryable move apart. */
+function storagePathBlocker(sql, candidate, platform = process.platform, ignoredRelocationId) {
+	return Effect.gen(function* () {
+		if (yield* isProjectRelocationBlocked(sql, candidate, platform)) return "project-relocation";
+		return (yield* isCheckoutPathBlocked(sql, candidate, platform, ignoredRelocationId)) ? "checkout" : null;
+	});
+}
+function isCheckoutPathBlocked(sql, candidate, platform, ignoredRelocationId) {
 	const ancestors = [];
 	let current = path.resolve(candidate);
 	for (;;) {
@@ -3545,11 +3606,42 @@ function isStoragePathBlocked(sql, candidate, platform = process.platform) {
 	}
 	const matching = platform === "darwin" || platform === "win32" ? sql`path COLLATE NOCASE IN ${sql.in(ancestors)}` : sql.in("path", ancestors);
 	return Effect.gen(function* () {
+		if (yield* isWorktreeRelocationBlocked(sql, candidate, platform, ignoredRelocationId)) return true;
 		if ((yield* sql`SELECT path FROM storage_owned_entries WHERE state IN ('removing', 'removed') AND ${matching} LIMIT 1`).length) return true;
 		const pending = yield* sql`SELECT path, identity_json FROM storage_owned_entries WHERE state = 'removing' LIMIT 257`;
 		return pending.length > 256 || pending.some((row) => removingPaths(row).some((root) => overlaps(root, path.resolve(candidate), platform)));
 	});
 }
+/** Active moves fence both paths; completed moves permanently fence the old path. */
+function isWorktreeRelocationBlocked(sql, candidate, platform = process.platform, ignoredRelocationId) {
+	return Effect.gen(function* () {
+		if (!(yield* sql`SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'managed_worktree_relocations'`).length) return false;
+		const rows = yield* sql`
+      SELECT source_path, destination_path, state FROM managed_worktree_relocations
+      WHERE state IN ('moving', 'moved', 'attention', 'complete')
+        AND worktree_id != ${ignoredRelocationId ?? ""}`;
+		const resolved = path.resolve(candidate);
+		return rows.some((row) => row.state === "complete" ? contains(row.source_path, resolved, platform) : overlaps(row.source_path, resolved, platform) || overlaps(row.destination_path, resolved, platform));
+	});
+}
+/**
+* An unsettled chat promotion (`project_relocations` row `pending` or `moved`, see
+* `project/chatPromotion.ts`) fences everything at or below both of its paths, so no turn, provider
+* session or terminal starts in a folder that is moving. Promotion writes the row before it stops
+* sessions and closes terminals. Unlike a checkout move, ancestors stay usable: a project that
+* merely contains the chats folder is unrelated, and a write into a moving copy fails its
+* verification. Settled moves lift the fence; the project then points at its new root.
+*/
+function isProjectRelocationBlocked(sql, candidate, platform = process.platform) {
+	return Effect.gen(function* () {
+		if (!(yield* sql`SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'project_relocations'`).length) return false;
+		const rows = yield* sql`
+      SELECT source_path, destination_path FROM project_relocations
+      WHERE state IN ('pending', 'moved')`;
+		const resolved = path.resolve(candidate);
+		return rows.some((row) => contains(row.source_path, resolved, platform) || contains(row.destination_path, resolved, platform));
+	});
+}
 //#endregion
 //#region src/atomicWrite.ts
 const writeFileStringAtomically = (input) => Effect.scoped(Effect.gen(function* () {
@@ -3660,7 +3752,11 @@ function expandHomePath(value) {
 }
 //#endregion
 //#region src/project/worktreeRoot.ts
-var WorktreeRootError = class extends Schema.TaggedError()("WorktreeRootError", { detail: Schema.String }) {
+var WorktreeRootError = class extends Schema.TaggedError()("WorktreeRootError", {
+	detail: Schema.String,
+	/** `restricted`: the workspace access policy rejected it; `unusable`: the path itself is. */
+	reason: Schema.optional(Schema.Literals(["unusable", "restricted"]))
+}) {
 	get message() {
 		return this.detail;
 	}
@@ -3690,6 +3786,8 @@ async function resolveWorktreePath(candidate) {
 		ancestor = parent;
 	}
 }
+/** The canonical nearest existing ancestor; probes that need a real cwd run there. */
+const resolveExistingAncestor = async (candidate) => (await resolveWorktreePath(candidate)).existingAncestor;
 /** One identity for existing and missing worktree paths; no writable-access requirement.
 * Shared by destination locks, journal lookup and Git-registration comparisons.
 */
@@ -3700,23 +3798,37 @@ async function canonicalizeWorktreeDirectory(candidate) {
 	await access(resolved.existingAncestor, constants.W_OK | constants.X_OK);
 	return resolved.canonicalPath;
 }
-const validateWorktreeRoot = (value, policy) => Effect.gen(function* () {
+/**
+* Validate a node-local root setting (worktree root, chats folder). `label` names the setting in
+* user-facing errors.
+*/
+const validateWorktreeRoot = (value, policy, label = "Worktree root") => Effect.gen(function* () {
 	const trimmed = value.trim();
 	const expanded = expandHomePath(trimmed);
-	if (!trimmed || /[\x00-\x1f\x7f]/.test(trimmed) || !path.isAbsolute(expanded) || process.platform === "win32" && !/^(?:[A-Za-z]:[\\/]|\\\\[^\\]+\\[^\\]+)/.test(expanded)) return yield* new WorktreeRootError({ detail: "Worktree root must be an absolute directory on this node or start with ~/." });
-	const operation = "worktree root";
+	if (!trimmed || /[\x00-\x1f\x7f]/.test(trimmed) || !path.isAbsolute(expanded) || process.platform === "win32" && !/^(?:[A-Za-z]:[\\/]|\\\\[^\\]+\\[^\\]+)/.test(expanded)) return yield* new WorktreeRootError({
+		detail: `${label} must be an absolute directory on this node or start with ~/.`,
+		reason: "unusable"
+	});
+	const operation = label.toLowerCase();
+	const restricted = (cause) => new WorktreeRootError({
+		detail: cause.message,
+		reason: "restricted"
+	});
 	const authorized = yield* policy.assertPath({
 		path: path.normalize(expanded),
 		operation
-	}).pipe(Effect.mapError((cause) => new WorktreeRootError({ detail: cause.message })));
+	}).pipe(Effect.mapError(restricted));
 	const canonical = yield* Effect.tryPromise({
 		try: () => canonicalizeWorktreeDirectory(authorized),
-		catch: () => new WorktreeRootError({ detail: "Worktree root must resolve to a writable directory (or have a writable existing parent), without broken symlinks." })
+		catch: () => new WorktreeRootError({
+			detail: `${label} must resolve to a writable directory (or have a writable existing parent), without broken symlinks.`,
+			reason: "unusable"
+		})
 	});
 	return yield* policy.assertPath({
 		path: canonical,
 		operation
-	}).pipe(Effect.mapError((cause) => new WorktreeRootError({ detail: cause.message })));
+	}).pipe(Effect.mapError(restricted));
 });
 /** Storage selection only: this never grants access to the selected directory's contents. */
 const selectConfiguredWorktreeRoot = (input) => (input.projectId && Object.hasOwn(input.settings.projectWorktreeRoots, input.projectId) ? input.settings.projectWorktreeRoots[input.projectId] : null) || input.settings.worktreeRoot || resolveManagedWorktreesRoot(input.config);
@@ -4086,12 +4198,13 @@ const makeServerSettings = Effect.gen(function* () {
 		updateSettings: (patch) => writeSemaphore.withPermits(1)(Effect.gen(function* () {
 			const current = yield* getSettingsFromCache;
 			const normalizedPatch = { ...patch };
-			const validateRoot = (root) => validateWorktreeRoot(root, worktreeAccessPolicy).pipe(Effect.mapError((cause) => new ServerSettingsError({
+			const validateRoot = (root, label) => validateWorktreeRoot(root, worktreeAccessPolicy, label).pipe(Effect.mapError((cause) => new ServerSettingsError({
 				settingsPath,
 				detail: cause.message,
 				cause
 			})));
 			if (patch.worktreeRoot) normalizedPatch.worktreeRoot = yield* validateRoot(patch.worktreeRoot);
+			if (patch.chatsRoot) normalizedPatch.chatsRoot = yield* validateRoot(patch.chatsRoot, "Chats folder");
 			if (patch.projectWorktreeRoots !== void 0) {
 				const roots = [];
 				for (const [id, root] of Object.entries(patch.projectWorktreeRoots)) roots.push([id, root ? yield* validateRoot(root) : null]);
@@ -4414,4 +4527,4 @@ const providerTurnMetricAttributes = (input) => {
 	});
 };
 //#endregion
-export { makeWorkspaceAccessPolicy as $, getProviderOptionBooleanSelectionValue as $t, runtimeQueueBlockedDuration as A, resolveHubConnectorConfig as At, startupCommandGateQueueHighWater as B, formatNodePublicKeyFingerprint as Bt, providerStartupQueueHighWater as C, acquireStorageSettingsLease as Ct, providerTurnsTotal as D, ServerConfig as Dt, providerTurnMetricAttributes as E, RuntimeMode as Et, runtimeQueueHighWater as F, encodeNativeNodeClaimTranscript as Ft, LocalDiagnosticsMetrics as G, rfc8949EncodeOptions as Gt, terminalRestartsTotal as H, Tokeniser as Ht, runtimeQueueOverflowsTotal as I, encodeNodeAuthenticationTranscript as It, outcomeFromExit as J, applyClaudePromptEffortPrefix as Jt, LocalDiagnosticsMetricsLive as K, Type as Kt, runtimeQueueRecoveriesTotal as L, encodeNodeKeyRotationTranscript as Lt, runtimeQueueDepth as M, resolveNodeE2eePolicyConfig as Mt, runtimeQueueDequeuesTotal as N, resolveStaticDir as Nt, rpcRequestDuration as O, deriveServerPaths as Ot, runtimeQueueEnqueuesTotal as P, canonicalizeHubOrigin as Pt, WorkspaceAccessPolicyLive as Q, getModelSelectionStringOptionValue as Qt, startupCommandGateEnqueuesTotal as R, equalNodeIdentityBytes as Rt, providerStartupQueueDepth as S, mintStorageCleanupClaim as St, providerTurnDuration as T, DEFAULT_PORT as Tt, terminalSessionsTotal as U, decode as Ut, startupCommandGateQueueWaitDuration as V, normalizeHubNodeName as Vt, withMetrics as W, encode as Wt, ServerSettingsService as X, getModelDisplayLabel as Xt, ServerSettingsLive as Y, createModelCapabilities as Yt, redactServerSettingsForClient as Z, getModelSelectionBooleanOptionValue as Zt, providerRuntimeEventsTotal as _, assertCleanWorktree as _t, contextHandoffsTotal as a, resolvePromptInjectedEffort as an, expandHomePath as at, providerStaleStopTimeoutsTotal as b, removeQuarantinedTemporaryDirectory as bt, increment as c, writeFileStringAtomically as ct, orchestrationCommandAckDuration as d, canonicalStoragePath as dt, getProviderOptionCurrentValue as en, WorkspaceAccessPolicy as et, orchestrationCommandDuration as f, hasWorktreeCreationLease as ft, providerMetricAttributes as g, assertCanonicalPath as gt, providerEventLogRecordsDroppedTotal as h, storageLifecycleLock as ht, contextHandoffPreparationDuration as i, normalizeModelSlug as in, validateWorktreeRoot as it, runtimeQueueCoalescedTotal as j, resolveManagedWorktreesRoot as jt, rpcRequestsTotal as k, ensureServerDirectories as kt, metricAttributes as l, acquireStoragePathUseLease as lt, orchestrationEventsProcessedTotal as m, recordCreatedWorktree as mt, contextHandoffContextEntriesTotal as n, getProviderOptionStringSelectionValue as nn, resolveConfiguredWorktreeRoot as nt, gitCommandDuration as o, ServerSecretStoreLive as ot, orchestrationCommandsTotal as p, isStoragePathBlocked as pt, compactTraceAttributes as q, parsePersistedServerObservabilitySettings as qt, contextHandoffDispatchDuration as r, modelSelectionRequiresContextHandoff as rn, selectConfiguredWorktreeRoot as rt, gitCommandsTotal as s, ServerSecretStore as st, contextHandoffContextBytesTotal as t, getProviderOptionDescriptors as tn, canonicalizeWorktreePath as tt, metricNames as u, acquireWorktreeCreationLease as ut, providerRuntimeStaleEventsTotal as v, captureWorktreeIdentity as vt, providerStartupQueueWaitDuration as w, hasStorageSettingsUpdateLease as wt, providerStartupAdmissionTotal as x, removeVerifiedWorktree as xt, providerSessionsTotal as y, measureDirectory as yt, startupCommandGateQueueDepth as z, fingerprintNodePublicKey as zt };
+export { makeWorkspaceAccessPolicy as $, resolvePromptInjectedEffort as $t, runtimeQueueBlockedDuration as A, DEFAULT_HUB_CONNECTOR_CONFIG as At, startupCommandGateQueueHighWater as B, resolveStaticDir as Bt, providerStartupQueueHighWater as C, captureWorktreeIdentity as Ct, providerTurnsTotal as D, mintStorageCleanupClaim as Dt, providerTurnMetricAttributes as E, removeVerifiedWorktree as Et, runtimeQueueHighWater as F, ensureServerDirectories as Ft, LocalDiagnosticsMetrics as G, getModelSelectionBooleanOptionValue as Gt, terminalRestartsTotal as H, applyClaudePromptEffortPrefix as Ht, runtimeQueueOverflowsTotal as I, resolveHubConnectorConfig as It, outcomeFromExit as J, getProviderOptionCurrentValue as Jt, LocalDiagnosticsMetricsLive as K, getModelSelectionStringOptionValue as Kt, runtimeQueueRecoveriesTotal as L, resolveManagedChatsRoot as Lt, runtimeQueueDepth as M, RuntimeMode as Mt, runtimeQueueDequeuesTotal as N, ServerConfig as Nt, rpcRequestDuration as O, acquireStorageSettingsLease as Ot, runtimeQueueEnqueuesTotal as P, deriveServerPaths as Pt, WorkspaceAccessPolicyLive as Q, normalizeModelSlug as Qt, startupCommandGateEnqueuesTotal as R, resolveManagedWorktreesRoot as Rt, providerStartupQueueDepth as S, assertCleanWorktree as St, providerTurnDuration as T, removeQuarantinedTemporaryDirectory as Tt, terminalSessionsTotal as U, createModelCapabilities as Ut, startupCommandGateQueueWaitDuration as V, parsePersistedServerObservabilitySettings as Vt, withMetrics as W, getModelDisplayLabel as Wt, ServerSettingsService as X, getProviderOptionStringSelectionValue as Xt, ServerSettingsLive as Y, getProviderOptionDescriptors as Yt, redactServerSettingsForClient as Z, modelSelectionRequiresContextHandoff as Zt, providerRuntimeEventsTotal as _, recordCreatedWorktree as _t, contextHandoffsTotal as a, equalNodeIdentityBytes as an, validateWorktreeRoot as at, providerStaleStopTimeoutsTotal as b, storagePathBlocker as bt, increment as c, normalizeHubNodeName as cn, ServerSecretStore as ct, orchestrationCommandAckDuration as d, encode as dn, acquireWorktreeCreationLease as dt, sameModelSelection as en, WorkspaceAccessPolicy as et, orchestrationCommandDuration as f, rfc8949EncodeOptions as fn, canonicalStoragePath as ft, providerMetricAttributes as g, noteStorageActivity as gt, providerEventLogRecordsDroppedTotal as h, isWorktreeRelocationBlocked as ht, contextHandoffPreparationDuration as i, encodeNodeKeyRotationTranscript as in, selectConfiguredWorktreeRoot as it, runtimeQueueCoalescedTotal as j, DEFAULT_PORT as jt, rpcRequestsTotal as k, hasStorageSettingsUpdateLease as kt, metricAttributes as l, Tokeniser as ln, writeFileStringAtomically as lt, orchestrationEventsProcessedTotal as m, isStoragePathBlocked as mt, contextHandoffContextEntriesTotal as n, encodeNativeNodeClaimTranscript as nn, resolveConfiguredWorktreeRoot as nt, gitCommandDuration as o, fingerprintNodePublicKey as on, expandHomePath as ot, orchestrationCommandsTotal as p, Type as pn, hasWorktreeCreationLease as pt, compactTraceAttributes as q, getProviderOptionBooleanSelectionValue as qt, contextHandoffDispatchDuration as r, encodeNodeAuthenticationTranscript as rn, resolveExistingAncestor as rt, gitCommandsTotal as s, formatNodePublicKeyFingerprint as sn, ServerSecretStoreLive as st, contextHandoffContextBytesTotal as t, canonicalizeHubOrigin as tn, canonicalizeWorktreePath as tt, metricNames as u, decode as un, acquireStoragePathUseLease as ut, providerRuntimeStaleEventsTotal as v, storageActivityVersion as vt, providerStartupQueueWaitDuration as w, measureDirectory as wt, providerStartupAdmissionTotal as x, assertCanonicalPath as xt, providerSessionsTotal as y, storageLifecycleLock as yt, startupCommandGateQueueDepth as z, resolveNodeE2eePolicyConfig as zt };