ryco-cli 0.1.30 → 0.1.31

package/dist/{GrokDriver-jy8JIvYY.cjs → GrokDriver-BQ6G_7ZZ.cjs}

@@ -1,13 +1,12 @@
 #!/usr/bin/env node
 
 const require_rolldown_runtime = require("./rolldown-runtime-HbSU0i7K.cjs");
-const require_Metrics = require("./Metrics-C0LSU8s7.cjs");
-const require_src = require("./src-CARHuYkT.cjs");
-const require_git = require("./git-xIkXFy_l.cjs");
+const require_Metrics = require("./Metrics-DjRPLE98.cjs");
+const require_src = require("./src-FmeCeBJ9.cjs");
 const require_bin = require("./bin.cjs");
-const require_AcpAdapter = require("./AcpAdapter-DjP0IHpH.cjs");
+const require_AcpAdapter = require("./AcpAdapter-ByUp9-wk.cjs");
 const require_ProviderDriver = require("./ProviderDriver--rNeAi3B.cjs");
-const require_makeManagedServerProvider = require("./makeManagedServerProvider-CF776SAO.cjs");
+const require_makeManagedServerProvider = require("./makeManagedServerProvider-B5tP7tvg.cjs");
 let effect_Cause = require("effect/Cause");
 effect_Cause = require_rolldown_runtime.__toESM(effect_Cause, 1);
 let effect_Effect = require("effect/Effect");
@@ -156,7 +155,7 @@ const makeGrokTextGeneration = effect_Effect.fn("makeGrokTextGeneration")(functi
 			return {
 				subject: require_bin.sanitizeCommitSubject(generated.subject),
 				body: generated.body.trim(),
-				..."branch" in generated && typeof generated.branch === "string" ? { branch: require_git.sanitizeFeatureBranchName(generated.branch) } : {}
+				..."branch" in generated && typeof generated.branch === "string" ? { branch: require_bin.sanitizeFeatureBranchName(generated.branch) } : {}
 			};
 		}),
 		generatePrContent: effect_Effect.fn("GrokTextGeneration.generatePrContent")(function* (input) {
@@ -191,7 +190,7 @@ const makeGrokTextGeneration = effect_Effect.fn("makeGrokTextGeneration")(functi
 				outputSchemaJson: outputSchema,
 				modelSelection: input.modelSelection
 			});
-			return { branch: require_git.sanitizeBranchFragment(generated.branch) };
+			return { branch: require_bin.sanitizeBranchFragment(generated.branch) };
 		}),
 		generateThreadTitle: effect_Effect.fn("GrokTextGeneration.generateThreadTitle")(function* (input) {
 			const { prompt, outputSchema } = require_bin.buildThreadTitlePrompt({

package/dist/{GrokDriver-Bvq1jP3S.mjs → GrokDriver-Buvas9-q.mjs}

@@ -1,12 +1,11 @@
 #!/usr/bin/env node
 
-import { Gt as normalizeModelSlug, It as createModelCapabilities, X as ServerSettingsService } from "./Metrics-CnmjpbWk.mjs";
-import { Dr as TextGenerationError, Qr as GrokSettings, Zo as ProviderDriverKind } from "./src-CtsgPPhb.mjs";
-import { m as sanitizeFeatureBranchName, p as sanitizeBranchFragment } from "./git-9xWsJYIH.mjs";
-import { $ as makeManualOnlyProviderMaintenanceCapabilities, At as spawnAndCollect, Cr as sanitizePrTitle, Ct as buildServerProvider, Et as isCommandMissingCause, Ht as ProviderDriverError, Ot as parseGenericCliVersion, Q as enrichProviderSnapshotWithVersionAdvisory, Sr as sanitizeCommitSubject, W as AcpSessionRuntime, br as extractJsonObject, dr as validateRankInboxThreadsResult, fr as buildBranchNamePrompt, gr as buildPrContentPrompt, hr as buildIssueContentTitlePrompt, it as resolveProviderMaintenanceCapabilitiesEffect, k as ProviderEventLoggers, kt as providerModelsFromSettings, mr as buildIssueContentPolishPrompt, mt as mergeProviderInstanceEnvironment, nt as makeStaticProviderMaintenanceResolver, pr as buildCommitMessagePrompt, vr as buildThreadPriorityPrompt, wr as sanitizeThreadTitle, yr as buildThreadTitlePrompt } from "./bin.mjs";
-import { i as currentAcpModelIdFromSessionSetup, n as makeXAiPromptCompletionRuntime, r as applyAcpModelSelection, t as makeAcpAdapter } from "./AcpAdapter-CKWzfB3Q.mjs";
+import { Qt as normalizeModelSlug, Ut as createModelCapabilities, X as ServerSettingsService } from "./Metrics-C3vLS9rz.mjs";
+import { Di as GrokSettings, Ks as ProviderDriverKind, ei as TextGenerationError } from "./src-VTj60bUm.mjs";
+import { A as ProviderEventLoggers, At as isCommandMissingCause, Ci as sanitizeFeatureBranchName, Dt as buildServerProvider, G as AcpSessionRuntime, Kt as ProviderDriverError, Mt as parseGenericCliVersion, Nt as providerModelsFromSettings, Pt as spawnAndCollect, Si as sanitizeBranchFragment, _t as mergeProviderInstanceEnvironment, at as enrichProviderSnapshotWithVersionAdvisory, bi as sanitizeThreadTitle, ci as buildBranchNamePrompt, di as buildIssueContentTitlePrompt, dt as resolveProviderMaintenanceCapabilitiesEffect, fi as buildPrContentPrompt, gi as extractJsonObject, hi as buildThreadTitlePrompt, li as buildCommitMessagePrompt, lt as makeStaticProviderMaintenanceResolver, mi as buildThreadPriorityPrompt, ot as makeManualOnlyProviderMaintenanceCapabilities, si as validateRankInboxThreadsResult, ui as buildIssueContentPolishPrompt, vi as sanitizeCommitSubject, yi as sanitizePrTitle } from "./bin.mjs";
+import { i as currentAcpModelIdFromSessionSetup, n as makeXAiPromptCompletionRuntime, r as applyAcpModelSelection, t as makeAcpAdapter } from "./AcpAdapter-CY_ANTKu.mjs";
 import { t as defaultProviderContinuationIdentity } from "./ProviderDriver-kCV60GKk.mjs";
-import { t as makeManagedServerProvider } from "./makeManagedServerProvider-B90UKjnv.mjs";
+import { t as makeManagedServerProvider } from "./makeManagedServerProvider-B65ipCxM.mjs";
 import * as Cause from "effect/Cause";
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";

package/dist/{Metrics-CnmjpbWk.mjs → Metrics-C3vLS9rz.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { Bs as NodeE2eeAdmissionPolicy, Ko as DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER, Qo as ProviderInstanceId, Xr as DEFAULT_SERVER_SETTINGS, Yo as MODEL_SLUG_ALIASES_BY_PROVIDER, Zo as ProviderDriverKind, ei as ServerSettings, es as isProviderDriverKind, oi as StorageError, qo as DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER, ti as ServerSettingsError } from "./src-CtsgPPhb.mjs";
+import { Ai as ServerSettingsError, Bs as DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER, Ic as NodeE2eeAdmissionPolicy, Ks as ProviderDriverKind, Li as StorageError, Ti as DEFAULT_SERVER_SETTINGS, Us as MODEL_SLUG_ALIASES_BY_PROVIDER, Vs as DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER, Ys as isProviderDriverKind, do as PROJECT_RELOCATION_PENDING_MESSAGE, ki as ServerSettings, qs as ProviderInstanceId } from "./src-VTj60bUm.mjs";
 import { r as fromLenientJson } from "./schemaJson-CaG1bOvo.mjs";
 import { n as runProcess } from "./processRunner-DnndFd2A.mjs";
 import { Cache, Cause, Context, Data, DateTime, Deferred, Duration, Effect, Equal, Exit, FileSystem, Layer, Metric, Path, Predicate, PubSub, Ref, Schema, SchemaIssue, Scope, Semaphore, Stream } from "effect";
@@ -2668,6 +2668,21 @@ function createModelSelection(instanceId, model, options) {
 		options: selections
 	} : base;
 }
+function canonicalOptionKeys(options) {
+	return (options ?? []).map((option) => JSON.stringify([option.id, option.value])).toSorted((left, right) => left < right ? -1 : left > right ? 1 : 0);
+}
+/**
+* Semantic equality of two model selections: same instance and model, and the
+* same options regardless of their order (absent options equal an empty list).
+* Key order never matters, so a selection round-tripped through JSON and schema
+* decode equals the hydrated one.
+*/
+function sameModelSelection(left, right) {
+	if (left.instanceId !== right.instanceId || left.model !== right.model) return false;
+	const leftOptions = canonicalOptionKeys(left.options);
+	const rightOptions = canonicalOptionKeys(right.options);
+	return leftOptions.length === rightOptions.length && leftOptions.every((key, index) => rightOptions[index] === key);
+}
 /**
 * Context handoff is a provider-instance boundary. Model and option changes
 * within one configured instance remain on that provider's normal turn path.
@@ -2799,6 +2814,15 @@ function applyServerSettingsPatch(current, patch) {
 			projectStorageRetention: Object.fromEntries(policies)
 		};
 	}
+	if (patch.projectLifecycleSuggestions !== void 0) {
+		const policies = new Map(Object.entries(current.projectLifecycleSuggestions));
+		for (const [projectId, policy] of Object.entries(patch.projectLifecycleSuggestions)) if (policy === null) policies.delete(projectId);
+		else policies.set(projectId, policy);
+		next = {
+			...next,
+			projectLifecycleSuggestions: Object.fromEntries(policies)
+		};
+	}
 	const nextWithReplacements = patch.providerInstances !== void 0 ? {
 		...next,
 		providerInstances: patch.providerInstances
@@ -2928,6 +2952,10 @@ function resolveNodeE2eePolicyConfig(raw) {
 function resolveManagedWorktreesRoot(config) {
 	return config.workspaceAccessRoot === void 0 ? config.worktreesDir : path.join(config.workspaceAccessRoot, ".ryco", "worktrees");
 }
+/** The chats root used when the `chatsRoot` setting is empty. */
+function resolveManagedChatsRoot(config) {
+	return config.workspaceAccessRoot === void 0 ? config.chatsDir : path.join(config.workspaceAccessRoot, ".ryco", "chats");
+}
 const deriveServerPaths = Effect.fn(function* (baseDir, devUrl) {
 	const { join } = yield* Path.Path;
 	const stateDir = join(baseDir, devUrl !== void 0 ? "dev" : "userdata");
@@ -2943,6 +2971,7 @@ const deriveServerPaths = Effect.fn(function* (baseDir, devUrl) {
 		settingsPath: join(stateDir, "settings.json"),
 		providerStatusCacheDir,
 		worktreesDir: join(baseDir, "worktrees"),
+		chatsDir: join(baseDir, "chats"),
 		attachmentsDir,
 		logsDir,
 		serverLogPath: join(logsDir, "server.log"),
@@ -3450,6 +3479,11 @@ async function removeVerifiedWorktree(repository, candidate, cleanup) {
 //#region src/storage/lifecycle.ts
 const storageLifecycleLock = Semaphore.makeUnsafe(1);
 const creations = /* @__PURE__ */ new Map();
+let activityVersion = 0;
+const noteStorageActivity = () => {
+	activityVersion++;
+};
+const storageActivityVersion = () => activityVersion;
 const overlaps = (a, b, platform = process.platform) => {
 	if (platform === "darwin" || platform === "win32") {
 		a = a.toLowerCase();
@@ -3458,6 +3492,12 @@ const overlaps = (a, b, platform = process.platform) => {
 	const boundary = (root) => root.endsWith(path.sep) ? root : root + path.sep;
 	return a === b || a.startsWith(boundary(b)) || b.startsWith(boundary(a));
 };
+/** `candidate` is `root` or below it. */
+const contains = (root, candidate, platform) => {
+	const a = platform === "darwin" || platform === "win32" ? root.toLowerCase() : root;
+	const b = platform === "darwin" || platform === "win32" ? candidate.toLowerCase() : candidate;
+	return a === b || b.startsWith(a.endsWith(path.sep) ? a : a + path.sep);
+};
 const removingPaths = (row) => {
 	let identity;
 	try {
@@ -3488,6 +3528,7 @@ async function canonicalStoragePath(candidate) {
 function acquireWorktreeCreationLease(sql, candidate) {
 	return storageLifecycleLock.withPermit(Effect.gen(function* () {
 		const canonical = yield* Effect.tryPromise(() => canonicalStoragePath(candidate));
+		if (yield* isWorktreeRelocationBlocked(sql, canonical)) return yield* new StorageError({ detail: "Checkout relocation is pending or this is a retired checkout path. Reload the workspace." });
 		const pending = yield* sql`SELECT path, identity_json FROM storage_owned_entries WHERE state = 'removing' LIMIT 257`;
 		if (pending.length > 256) return yield* new StorageError({ detail: "Too many interrupted cleanups to establish safe creation admission. Inspect pending cleanup records." });
 		if (pending.some((row) => removingPaths(row).some((root) => overlaps(root, canonical)))) return yield* new StorageError({ detail: "Checkout cleanup is pending. Creation cannot replace an in-flight removal." });
@@ -3496,6 +3537,7 @@ function acquireWorktreeCreationLease(sql, candidate) {
 			const remaining = (creations.get(canonical) ?? 1) - 1;
 			if (remaining > 0) creations.set(canonical, remaining);
 			else creations.delete(canonical);
+			noteStorageActivity();
 		});
 	}));
 }
@@ -3503,12 +3545,14 @@ function acquireWorktreeCreationLease(sql, candidate) {
 function acquireStoragePathUseLease(sql, candidate) {
 	return storageLifecycleLock.withPermit(Effect.gen(function* () {
 		const canonical = yield* Effect.tryPromise(() => canonicalStoragePath(candidate));
-		if (yield* isStoragePathBlocked(sql, canonical)) return yield* new StorageError({ detail: "Checkout cleanup is pending or complete. Restore/recreate it before provider recovery." });
+		const blocker = yield* storagePathBlocker(sql, canonical);
+		if (blocker !== null) return yield* new StorageError({ detail: blocker === "project-relocation" ? PROJECT_RELOCATION_PENDING_MESSAGE : "Checkout cleanup is pending or complete. Restore/recreate it before provider recovery." });
 		creations.set(canonical, (creations.get(canonical) ?? 0) + 1);
 		return Effect.sync(() => {
 			const remaining = (creations.get(canonical) ?? 1) - 1;
 			if (remaining > 0) creations.set(canonical, remaining);
 			else creations.delete(canonical);
+			noteStorageActivity();
 		});
 	}));
 }
@@ -3536,8 +3580,22 @@ function recordCreatedWorktree(sql, repository, candidate) {
       WHERE storage_owned_entries.state != 'removing' RETURNING id`).length !== 1) return yield* new StorageError({ detail: "Ownership capture refused to replace a pending cleanup. The creation outcome remains protected." });
 	});
 }
-/** Persistent tombstones prevent restart/resume from granting authority to a removed checkout. */
-function isStoragePathBlocked(sql, candidate, platform = process.platform) {
+/**
+* Storage admission for a path: refused while a chat's folder moves or checkout lifecycle work
+* fences it. Persistent tombstones prevent restart/resume from granting authority to a removed
+* checkout.
+*/
+function isStoragePathBlocked(sql, candidate, platform = process.platform, ignoredRelocationId) {
+	return storagePathBlocker(sql, candidate, platform, ignoredRelocationId).pipe(Effect.map((blocker) => blocker !== null));
+}
+/** {@link isStoragePathBlocked}, with the reason, so admission can tell a retryable move apart. */
+function storagePathBlocker(sql, candidate, platform = process.platform, ignoredRelocationId) {
+	return Effect.gen(function* () {
+		if (yield* isProjectRelocationBlocked(sql, candidate, platform)) return "project-relocation";
+		return (yield* isCheckoutPathBlocked(sql, candidate, platform, ignoredRelocationId)) ? "checkout" : null;
+	});
+}
+function isCheckoutPathBlocked(sql, candidate, platform, ignoredRelocationId) {
 	const ancestors = [];
 	let current = path.resolve(candidate);
 	for (;;) {
@@ -3548,11 +3606,42 @@ function isStoragePathBlocked(sql, candidate, platform = process.platform) {
 	}
 	const matching = platform === "darwin" || platform === "win32" ? sql`path COLLATE NOCASE IN ${sql.in(ancestors)}` : sql.in("path", ancestors);
 	return Effect.gen(function* () {
+		if (yield* isWorktreeRelocationBlocked(sql, candidate, platform, ignoredRelocationId)) return true;
 		if ((yield* sql`SELECT path FROM storage_owned_entries WHERE state IN ('removing', 'removed') AND ${matching} LIMIT 1`).length) return true;
 		const pending = yield* sql`SELECT path, identity_json FROM storage_owned_entries WHERE state = 'removing' LIMIT 257`;
 		return pending.length > 256 || pending.some((row) => removingPaths(row).some((root) => overlaps(root, path.resolve(candidate), platform)));
 	});
 }
+/** Active moves fence both paths; completed moves permanently fence the old path. */
+function isWorktreeRelocationBlocked(sql, candidate, platform = process.platform, ignoredRelocationId) {
+	return Effect.gen(function* () {
+		if (!(yield* sql`SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'managed_worktree_relocations'`).length) return false;
+		const rows = yield* sql`
+      SELECT source_path, destination_path, state FROM managed_worktree_relocations
+      WHERE state IN ('moving', 'moved', 'attention', 'complete')
+        AND worktree_id != ${ignoredRelocationId ?? ""}`;
+		const resolved = path.resolve(candidate);
+		return rows.some((row) => row.state === "complete" ? contains(row.source_path, resolved, platform) : overlaps(row.source_path, resolved, platform) || overlaps(row.destination_path, resolved, platform));
+	});
+}
+/**
+* An unsettled chat promotion (`project_relocations` row `pending` or `moved`, see
+* `project/chatPromotion.ts`) fences everything at or below both of its paths, so no turn, provider
+* session or terminal starts in a folder that is moving. Promotion writes the row before it stops
+* sessions and closes terminals. Unlike a checkout move, ancestors stay usable: a project that
+* merely contains the chats folder is unrelated, and a write into a moving copy fails its
+* verification. Settled moves lift the fence; the project then points at its new root.
+*/
+function isProjectRelocationBlocked(sql, candidate, platform = process.platform) {
+	return Effect.gen(function* () {
+		if (!(yield* sql`SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'project_relocations'`).length) return false;
+		const rows = yield* sql`
+      SELECT source_path, destination_path FROM project_relocations
+      WHERE state IN ('pending', 'moved')`;
+		const resolved = path.resolve(candidate);
+		return rows.some((row) => contains(row.source_path, resolved, platform) || contains(row.destination_path, resolved, platform));
+	});
+}
 //#endregion
 //#region src/atomicWrite.ts
 const writeFileStringAtomically = (input) => Effect.scoped(Effect.gen(function* () {
@@ -3663,7 +3752,11 @@ function expandHomePath(value) {
 }
 //#endregion
 //#region src/project/worktreeRoot.ts
-var WorktreeRootError = class extends Schema.TaggedError()("WorktreeRootError", { detail: Schema.String }) {
+var WorktreeRootError = class extends Schema.TaggedError()("WorktreeRootError", {
+	detail: Schema.String,
+	/** `restricted`: the workspace access policy rejected it; `unusable`: the path itself is. */
+	reason: Schema.optional(Schema.Literals(["unusable", "restricted"]))
+}) {
 	get message() {
 		return this.detail;
 	}
@@ -3693,6 +3786,8 @@ async function resolveWorktreePath(candidate) {
 		ancestor = parent;
 	}
 }
+/** The canonical nearest existing ancestor; probes that need a real cwd run there. */
+const resolveExistingAncestor = async (candidate) => (await resolveWorktreePath(candidate)).existingAncestor;
 /** One identity for existing and missing worktree paths; no writable-access requirement.
 * Shared by destination locks, journal lookup and Git-registration comparisons.
 */
@@ -3703,23 +3798,37 @@ async function canonicalizeWorktreeDirectory(candidate) {
 	await access(resolved.existingAncestor, constants.W_OK | constants.X_OK);
 	return resolved.canonicalPath;
 }
-const validateWorktreeRoot = (value, policy) => Effect.gen(function* () {
+/**
+* Validate a node-local root setting (worktree root, chats folder). `label` names the setting in
+* user-facing errors.
+*/
+const validateWorktreeRoot = (value, policy, label = "Worktree root") => Effect.gen(function* () {
 	const trimmed = value.trim();
 	const expanded = expandHomePath(trimmed);
-	if (!trimmed || /[\x00-\x1f\x7f]/.test(trimmed) || !path.isAbsolute(expanded) || process.platform === "win32" && !/^(?:[A-Za-z]:[\\/]|\\\\[^\\]+\\[^\\]+)/.test(expanded)) return yield* new WorktreeRootError({ detail: "Worktree root must be an absolute directory on this node or start with ~/." });
-	const operation = "worktree root";
+	if (!trimmed || /[\x00-\x1f\x7f]/.test(trimmed) || !path.isAbsolute(expanded) || process.platform === "win32" && !/^(?:[A-Za-z]:[\\/]|\\\\[^\\]+\\[^\\]+)/.test(expanded)) return yield* new WorktreeRootError({
+		detail: `${label} must be an absolute directory on this node or start with ~/.`,
+		reason: "unusable"
+	});
+	const operation = label.toLowerCase();
+	const restricted = (cause) => new WorktreeRootError({
+		detail: cause.message,
+		reason: "restricted"
+	});
 	const authorized = yield* policy.assertPath({
 		path: path.normalize(expanded),
 		operation
-	}).pipe(Effect.mapError((cause) => new WorktreeRootError({ detail: cause.message })));
+	}).pipe(Effect.mapError(restricted));
 	const canonical = yield* Effect.tryPromise({
 		try: () => canonicalizeWorktreeDirectory(authorized),
-		catch: () => new WorktreeRootError({ detail: "Worktree root must resolve to a writable directory (or have a writable existing parent), without broken symlinks." })
+		catch: () => new WorktreeRootError({
+			detail: `${label} must resolve to a writable directory (or have a writable existing parent), without broken symlinks.`,
+			reason: "unusable"
+		})
 	});
 	return yield* policy.assertPath({
 		path: canonical,
 		operation
-	}).pipe(Effect.mapError((cause) => new WorktreeRootError({ detail: cause.message })));
+	}).pipe(Effect.mapError(restricted));
 });
 /** Storage selection only: this never grants access to the selected directory's contents. */
 const selectConfiguredWorktreeRoot = (input) => (input.projectId && Object.hasOwn(input.settings.projectWorktreeRoots, input.projectId) ? input.settings.projectWorktreeRoots[input.projectId] : null) || input.settings.worktreeRoot || resolveManagedWorktreesRoot(input.config);
@@ -4089,12 +4198,13 @@ const makeServerSettings = Effect.gen(function* () {
 		updateSettings: (patch) => writeSemaphore.withPermits(1)(Effect.gen(function* () {
 			const current = yield* getSettingsFromCache;
 			const normalizedPatch = { ...patch };
-			const validateRoot = (root) => validateWorktreeRoot(root, worktreeAccessPolicy).pipe(Effect.mapError((cause) => new ServerSettingsError({
+			const validateRoot = (root, label) => validateWorktreeRoot(root, worktreeAccessPolicy, label).pipe(Effect.mapError((cause) => new ServerSettingsError({
 				settingsPath,
 				detail: cause.message,
 				cause
 			})));
 			if (patch.worktreeRoot) normalizedPatch.worktreeRoot = yield* validateRoot(patch.worktreeRoot);
+			if (patch.chatsRoot) normalizedPatch.chatsRoot = yield* validateRoot(patch.chatsRoot, "Chats folder");
 			if (patch.projectWorktreeRoots !== void 0) {
 				const roots = [];
 				for (const [id, root] of Object.entries(patch.projectWorktreeRoots)) roots.push([id, root ? yield* validateRoot(root) : null]);
@@ -4417,4 +4527,4 @@ const providerTurnMetricAttributes = (input) => {
 	});
 };
 //#endregion
-export { makeWorkspaceAccessPolicy as $, formatNodePublicKeyFingerprint as $t, runtimeQueueBlockedDuration as A, resolveHubConnectorConfig as At, startupCommandGateQueueHighWater as B, getProviderOptionBooleanSelectionValue as Bt, providerStartupQueueHighWater as C, acquireStorageSettingsLease as Ct, providerTurnsTotal as D, ServerConfig as Dt, providerTurnMetricAttributes as E, RuntimeMode as Et, runtimeQueueHighWater as F, applyClaudePromptEffortPrefix as Ft, LocalDiagnosticsMetrics as G, normalizeModelSlug as Gt, terminalRestartsTotal as H, getProviderOptionDescriptors as Ht, runtimeQueueOverflowsTotal as I, createModelCapabilities as It, outcomeFromExit as J, encodeNativeNodeClaimTranscript as Jt, LocalDiagnosticsMetricsLive as K, resolvePromptInjectedEffort as Kt, runtimeQueueRecoveriesTotal as L, getModelDisplayLabel as Lt, runtimeQueueDepth as M, resolveNodeE2eePolicyConfig as Mt, runtimeQueueDequeuesTotal as N, resolveStaticDir as Nt, rpcRequestDuration as O, deriveServerPaths as Ot, runtimeQueueEnqueuesTotal as P, parsePersistedServerObservabilitySettings as Pt, WorkspaceAccessPolicyLive as Q, fingerprintNodePublicKey as Qt, startupCommandGateEnqueuesTotal as R, getModelSelectionBooleanOptionValue as Rt, providerStartupQueueDepth as S, mintStorageCleanupClaim as St, providerTurnDuration as T, DEFAULT_PORT as Tt, terminalSessionsTotal as U, getProviderOptionStringSelectionValue as Ut, startupCommandGateQueueWaitDuration as V, getProviderOptionCurrentValue as Vt, withMetrics as W, modelSelectionRequiresContextHandoff as Wt, ServerSettingsService as X, encodeNodeKeyRotationTranscript as Xt, ServerSettingsLive as Y, encodeNodeAuthenticationTranscript as Yt, redactServerSettingsForClient as Z, equalNodeIdentityBytes as Zt, providerRuntimeEventsTotal as _, assertCleanWorktree as _t, contextHandoffsTotal as a, Type as an, expandHomePath as at, providerStaleStopTimeoutsTotal as b, removeQuarantinedTemporaryDirectory as bt, increment as c, writeFileStringAtomically as ct, orchestrationCommandAckDuration as d, canonicalStoragePath as dt, normalizeHubNodeName as en, WorkspaceAccessPolicy as et, orchestrationCommandDuration as f, hasWorktreeCreationLease as ft, providerMetricAttributes as g, assertCanonicalPath as gt, providerEventLogRecordsDroppedTotal as h, storageLifecycleLock as ht, contextHandoffPreparationDuration as i, rfc8949EncodeOptions as in, validateWorktreeRoot as it, runtimeQueueCoalescedTotal as j, resolveManagedWorktreesRoot as jt, rpcRequestsTotal as k, ensureServerDirectories as kt, metricAttributes as l, acquireStoragePathUseLease as lt, orchestrationEventsProcessedTotal as m, recordCreatedWorktree as mt, contextHandoffContextEntriesTotal as n, decode as nn, resolveConfiguredWorktreeRoot as nt, gitCommandDuration as o, ServerSecretStoreLive as ot, orchestrationCommandsTotal as p, isStoragePathBlocked as pt, compactTraceAttributes as q, canonicalizeHubOrigin as qt, contextHandoffDispatchDuration as r, encode as rn, selectConfiguredWorktreeRoot as rt, gitCommandsTotal as s, ServerSecretStore as st, contextHandoffContextBytesTotal as t, Tokeniser as tn, canonicalizeWorktreePath as tt, metricNames as u, acquireWorktreeCreationLease as ut, providerRuntimeStaleEventsTotal as v, captureWorktreeIdentity as vt, providerStartupQueueWaitDuration as w, hasStorageSettingsUpdateLease as wt, providerStartupAdmissionTotal as x, removeVerifiedWorktree as xt, providerSessionsTotal as y, measureDirectory as yt, startupCommandGateQueueDepth as z, getModelSelectionStringOptionValue as zt };
+export { makeWorkspaceAccessPolicy as $, resolvePromptInjectedEffort as $t, runtimeQueueBlockedDuration as A, DEFAULT_HUB_CONNECTOR_CONFIG as At, startupCommandGateQueueHighWater as B, resolveStaticDir as Bt, providerStartupQueueHighWater as C, captureWorktreeIdentity as Ct, providerTurnsTotal as D, mintStorageCleanupClaim as Dt, providerTurnMetricAttributes as E, removeVerifiedWorktree as Et, runtimeQueueHighWater as F, ensureServerDirectories as Ft, LocalDiagnosticsMetrics as G, getModelSelectionBooleanOptionValue as Gt, terminalRestartsTotal as H, applyClaudePromptEffortPrefix as Ht, runtimeQueueOverflowsTotal as I, resolveHubConnectorConfig as It, outcomeFromExit as J, getProviderOptionCurrentValue as Jt, LocalDiagnosticsMetricsLive as K, getModelSelectionStringOptionValue as Kt, runtimeQueueRecoveriesTotal as L, resolveManagedChatsRoot as Lt, runtimeQueueDepth as M, RuntimeMode as Mt, runtimeQueueDequeuesTotal as N, ServerConfig as Nt, rpcRequestDuration as O, acquireStorageSettingsLease as Ot, runtimeQueueEnqueuesTotal as P, deriveServerPaths as Pt, WorkspaceAccessPolicyLive as Q, normalizeModelSlug as Qt, startupCommandGateEnqueuesTotal as R, resolveManagedWorktreesRoot as Rt, providerStartupQueueDepth as S, assertCleanWorktree as St, providerTurnDuration as T, removeQuarantinedTemporaryDirectory as Tt, terminalSessionsTotal as U, createModelCapabilities as Ut, startupCommandGateQueueWaitDuration as V, parsePersistedServerObservabilitySettings as Vt, withMetrics as W, getModelDisplayLabel as Wt, ServerSettingsService as X, getProviderOptionStringSelectionValue as Xt, ServerSettingsLive as Y, getProviderOptionDescriptors as Yt, redactServerSettingsForClient as Z, modelSelectionRequiresContextHandoff as Zt, providerRuntimeEventsTotal as _, recordCreatedWorktree as _t, contextHandoffsTotal as a, equalNodeIdentityBytes as an, validateWorktreeRoot as at, providerStaleStopTimeoutsTotal as b, storagePathBlocker as bt, increment as c, normalizeHubNodeName as cn, ServerSecretStore as ct, orchestrationCommandAckDuration as d, encode as dn, acquireWorktreeCreationLease as dt, sameModelSelection as en, WorkspaceAccessPolicy as et, orchestrationCommandDuration as f, rfc8949EncodeOptions as fn, canonicalStoragePath as ft, providerMetricAttributes as g, noteStorageActivity as gt, providerEventLogRecordsDroppedTotal as h, isWorktreeRelocationBlocked as ht, contextHandoffPreparationDuration as i, encodeNodeKeyRotationTranscript as in, selectConfiguredWorktreeRoot as it, runtimeQueueCoalescedTotal as j, DEFAULT_PORT as jt, rpcRequestsTotal as k, hasStorageSettingsUpdateLease as kt, metricAttributes as l, Tokeniser as ln, writeFileStringAtomically as lt, orchestrationEventsProcessedTotal as m, isStoragePathBlocked as mt, contextHandoffContextEntriesTotal as n, encodeNativeNodeClaimTranscript as nn, resolveConfiguredWorktreeRoot as nt, gitCommandDuration as o, fingerprintNodePublicKey as on, expandHomePath as ot, orchestrationCommandsTotal as p, Type as pn, hasWorktreeCreationLease as pt, compactTraceAttributes as q, getProviderOptionBooleanSelectionValue as qt, contextHandoffDispatchDuration as r, encodeNodeAuthenticationTranscript as rn, resolveExistingAncestor as rt, gitCommandsTotal as s, formatNodePublicKeyFingerprint as sn, ServerSecretStoreLive as st, contextHandoffContextBytesTotal as t, canonicalizeHubOrigin as tn, canonicalizeWorktreePath as tt, metricNames as u, decode as un, acquireStoragePathUseLease as ut, providerRuntimeStaleEventsTotal as v, storageActivityVersion as vt, providerStartupQueueWaitDuration as w, measureDirectory as wt, providerStartupAdmissionTotal as x, assertCanonicalPath as xt, providerSessionsTotal as y, storageLifecycleLock as yt, startupCommandGateQueueDepth as z, resolveNodeE2eePolicyConfig as zt };