t3code-cli 0.4.0 → 0.5.1

package/dist/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as runLast, $n as isNullish, $t as sync, A as Crypto, An as Service, At as flatMap, B as WatchBackend, Bn as isSome, Bt as map$2, C as decodeUnknownEffect, Cn as succeed$1, Ct as asVoid, D as optionalKey, Dn as fail$2, Dt as catch_, E as optional$3, En as map$3, Et as catchTags, F as TypeId$7, Fn as fromNullishOr, Ft as gen, G as fromIterable, Gn as Prototype, Gt as provideContext, H as callback$1, Hn as match, Ht as matchEffect, I as FileDescriptor, In as fromUndefinedOr, It as ignore, J as mkString, Jn as BaseProto, Jt as runFork, K as isStream, Kn as PipeInspectableProto, Kt as provideService, L as FileSystem, Ln as getOrElse, Lt as interrupt, M as fromReadable, Mn as getUnsafe, Mt as fnUntraced, N as fromWritable, Nn as make$13, Nt as forEach, O as tag, On as succeed$3, Ot as effectify, P as Path$1, Pn as flatMap$1, Pt as forkScoped, Q as runFold, Qn as isNotUndefined, Qt as suspend, R as FileTypeId, Rn as getOrUndefined, Rt as isEffect, S as decodeTo, Sn as isSuccess, St as as, T as is, Tn as sync$1, Tt as catchFilter, U as decodeText, Un as none, Ut as orDie, V as make$10, Vn as map$4, Vt as mapError, W as empty, Wn as some, Wt as provide$1, X as runCollect, Xn as hasProperty, Xt as serviceOption, Y as run$1, Yn as format, Yt as scoped, Z as runDrain, Zn as isNotNull, Zt as succeed, _ as Literals, _n as MinimumLogLevel, _t as nominal, a as latestAssistantMessage, an as uninterruptible, ar as pipeArguments, at as get, b as TaggedErrorClass, bn as isDone, bt as addFinalizer, c as Environment, cn as fail$1, ct as isSink, d as ArraySchema, dn as effect, dt as make$12, en as tapCause, er as isUndefined, et as splitLines, f as Boolean$2, fn as mergeAll, ft as offer, g as Literal, gn as sync$2, gt as systemError, h as Int, hn as succeed$2, ht as badArgument, i as ThreadSessionError, in as try_, ir as pipe, it as unwrap, j as make$9, jn as empty$1, jt as fn, k as toCodecStringTree, kn as Reference, kt as fail, l as T3Config, ln as hasInterruptsOnly, lt as endUnsafe, m as ErrorClass, mn as provideMerge, mt as BadArgument, nn as timeoutOrElse, nr as dual, nt as tap, o as threadStatus, on as void_, or as __commonJSMin, ot as make$11, p as Defect, pn as provide, pt as offerUnsafe, q as merge, qn as withFiber, qt as result, r as NodeEnvironmentLive, rn as tryPromise, rr as identity, rt as transduce, s as T3Application, sn as TaggedError, sr as __require, st as drain, t as AppLayer, tn as tapError, tr as constVoid, tt as succeed$4, u as T3Auth, un as squash, ut as failCauseUnsafe, v as String$1, vn as _await, vt as transform$1, w as fromJsonString, wn as ConsoleRef, wt as callback, x as Union, xn as makeUnsafe, xt as andThen, y as Struct, yn as doneUnsafe, yt as acquireRelease, z as Size, zn as isNone, zt as logError } from "./runtime-Cq64iuZr.js";
+import { $ as T3Config, $n as hasInterruptsOnly, $t as endUnsafe, An as map$2, Ar as isSome, At as WatchBackend, Bn as serviceOption, Br as hasProperty, Bt as runCollect, Cn as forEach, Cr as make$13, Ct as fromWritable, Dn as interrupt, Dr as getOrElse, Dt as FileSystem, En as ignore, Er as fromUndefinedOr, Et as FileDescriptor, Fn as provideContext, Fr as Prototype, Ft as fromIterable, Gn as tapError, Gr as constVoid, Gt as succeed$4, Hn as suspend, Hr as isNotUndefined, Ht as runFold, In as provideService, Ir as PipeInspectableProto, It as isStream, J as ThreadSessionError, Jn as try_, Jr as pipe, Jt as unwrap, Kn as timeoutOrElse, Kr as dual, Kt as tap, Ln as result, Lr as withFiber, Lt as merge, Mn as matchEffect, Mr as match, Mt as callback$1, Nn as orDie, Nr as none, Nt as decodeText, On as isEffect, Or as getOrUndefined, Ot as FileTypeId, Pn as provide$1, Pr as some, Pt as empty, Q as Environment, Qn as fail$1, Qt as isSink, Rn as runFork, Rr as BaseProto, Rt as mkString, Sn as fnUntraced, Sr as getUnsafe, St as fromReadable, Tn as gen, Tr as fromNullishOr, Tt as TypeId$7, Un as sync, Ur as isNullish, Ut as runLast, Vn as succeed, Vr as isNotNull, Vt as runDrain, Wn as tapCause, Wr as isUndefined, Wt as splitLines, X as threadStatus, Xn as void_, Xr as __commonJSMin, Xt as make$11, Y as latestAssistantMessage, Yn as uninterruptible, Yr as pipeArguments, Yt as get, Z as T3Application, Zn as TaggedError, Zr as __require, Zt as drain, _n as catch_, _r as fail$2, _t as optionalKey, an as badArgument, ar as succeed$2, at as Int, bn as flatMap, br as Service, bt as Crypto, cn as transform$1, cr as _await, ct as String$1, dn as andThen, dr as makeUnsafe, dt as Union, en as failCauseUnsafe, er as squash, et as T3Auth, fn as as, fr as isSuccess, ft as decodeTo, gn as catchTags, gr as map$3, gt as optional$3, hn as catchFilter, hr as sync$1, ht as is, in as BadArgument, ir as provideMerge, it as ErrorClass, jn as mapError, jr as map$4, jt as make$10, kn as logError, kr as isNone, kt as Size, ln as acquireRelease, lr as doneUnsafe, lt as Struct, mn as callback, mr as ConsoleRef, mt as fromJsonString, nn as offer, nr as mergeAll, nt as Boolean$2, on as systemError, or as sync$2, ot as Literal, pn as asVoid, pr as succeed$1, pt as decodeUnknownEffect, q as NodeEnvironmentLive, qn as tryPromise, qr as identity, qt as transduce, rn as offerUnsafe, rr as provide, rt as Defect, sn as nominal, sr as MinimumLogLevel, st as Literals, t as AppLayer, tn as make$12, tr as effect, tt as ArraySchema, un as addFinalizer, ur as isDone, ut as TaggedErrorClass, vn as effectify, vr as succeed$3, vt as tag, wn as forkScoped, wr as flatMap$1, wt as Path$1, xn as fn, xr as empty$1, xt as make$9, yn as fail, yr as Reference, yt as toCodecStringTree, zn as scoped, zr as format, zt as run$1 } from "./runtime-KQVRmRk-.js";
 import * as NodeChildProcess from "node:child_process";
 import * as NodeCrypto from "node:crypto";
 import * as NFS from "node:fs";
@@ -17584,6 +17584,7 @@ const pairCommand = make("pair", {
 	const output = yield* T3Output;
 	const resolvedFormat = resolveOutputFormat(format, environment, "json");
 	const result = yield* auth.pair(url);
+	yield* auth.writeConfig(result);
 	if (resolvedFormat === "json") yield* output.printJson(result);
 	else yield* output.printInfo(formatAuthPaired(result));
 })).pipe(withDescription("pair with t3code server"));
@@ -17606,6 +17607,7 @@ const localCommand = make("local", {
 		...isSome(baseDir) ? { baseDir: baseDir.value } : {},
 		...isSome(origin) ? { origin: origin.value } : {}
 	});
+	yield* auth.writeConfig(result);
 	if (resolvedFormat === "json") yield* output.printJson(formatAuthLocalJson(result));
 	else yield* output.printInfo(formatAuthLocalHuman(result));
 })).pipe(withDescription("authenticate with local t3code installation"));
@@ -18147,7 +18149,7 @@ var T3Version = class extends Service()("t3cli/T3Version") {};
 //#endregion
 //#region src/version/layer.ts
 const PackageJsonSchema = fromJsonString(Struct({ version: String$1 }));
-const T3VersionBundledLive = sync$2(T3Version, () => ({ version: "0.4.0" }));
+const T3VersionBundledLive = sync$2(T3Version, () => ({ version: "0.5.1" }));
 effect(T3Version, gen(function* () {
 	const packageJson = yield* (yield* FileSystem).readFileString(fileURLToPath(new URL("../../package.json", import.meta.url)));
 	return { version: (yield* decodeUnknownEffect(PackageJsonSchema)(packageJson)).version };

package/dist/index.js

@@ -1,2 +1,12 @@
-import { n as AuthAppLayer, r as NodeEnvironmentLive, s as T3Application, t as AppLayer } from "./runtime-Cq64iuZr.js";
-export { AppLayer, AuthAppLayer, NodeEnvironmentLive, T3Application };
+import { $ as T3Config, A as T3LocalAuthTokenLive, B as AuthLocalSigningError, C as makeT3AuthPairing, D as T3LocalAuthLive, E as T3LocalAuth, F as makeT3LocalAuthOrigin, G as layerWebSocketConstructor, H as AuthTransportError, I as AuthConfigError, K as layerUndici, L as AuthLocalDatabaseError, M as SqlClientFactory, N as T3LocalAuthOrigin, O as makeT3LocalAuth, P as T3LocalAuthOriginLive, Q as Environment, R as AuthLocalError, S as T3AuthPairingLive, T as T3AuthTransportLive, U as ConfigError, V as AuthPairingUrlError, W as UrlError, Z as T3Application, _ as makeT3CodeConnectionProvider, a as T3AuthTransportLayer, b as makeT3Auth, c as T3LocalAuthTokenLayer, d as makeNodeSqliteClient, et as T3Auth, f as T3RpcLive, g as T3CodeConnectionProviderLive, h as T3CodeConnectionProvider, i as T3AuthPairingLayer, j as makeT3LocalAuthToken, k as T3LocalAuthToken, l as NodeSqlClientFactoryLive, m as makeT3Config, n as AuthAppLayer, nr as mergeAll, o as T3LocalAuthLayer, p as T3ConfigLive, q as NodeEnvironmentLive, r as T3AuthLayer, rr as provide, s as T3LocalAuthOriginLayer, t as AppLayer, u as NodeSqliteClientLive, v as T3CodeConnectionError, w as parsePairingUrl, x as T3AuthPairing, y as T3AuthLive, z as AuthLocalSecretError } from "./runtime-KQVRmRk-.js";
+//#region src/connection/layer.ts
+function makeT3CodeRpcLayer() {
+	return T3RpcLive.pipe(provide(T3AuthTransportLive));
+}
+const T3CodeRpcLayer = makeT3CodeRpcLayer();
+//#endregion
+//#region src/connection/node.ts
+const NodeConnectionPlatformLayer = mergeAll(layerUndici, layerWebSocketConstructor);
+const T3CodeNodeRpcLayer = T3CodeRpcLayer.pipe(provide(NodeConnectionPlatformLayer));
+//#endregion
+export { AppLayer, AuthAppLayer, AuthConfigError, AuthLocalDatabaseError, AuthLocalError, AuthLocalSecretError, AuthLocalSigningError, AuthPairingUrlError, AuthTransportError, ConfigError, Environment, NodeEnvironmentLive, NodeSqlClientFactoryLive, NodeSqliteClientLive, SqlClientFactory, T3Application, T3Auth, T3AuthLayer, T3AuthLive, T3AuthPairing, T3AuthPairingLayer, T3AuthPairingLive, T3AuthTransportLayer, T3CodeConnectionError, T3CodeConnectionProvider, T3CodeConnectionProviderLive, T3CodeNodeRpcLayer, T3CodeRpcLayer, T3Config, T3ConfigLive, T3LocalAuth, T3LocalAuthLayer, T3LocalAuthLive, T3LocalAuthOrigin, T3LocalAuthOriginLayer, T3LocalAuthOriginLive, T3LocalAuthToken, T3LocalAuthTokenLayer, T3LocalAuthTokenLive, UrlError, makeNodeSqliteClient, makeT3Auth, makeT3AuthPairing, makeT3CodeConnectionProvider, makeT3CodeRpcLayer, makeT3Config, makeT3LocalAuth, makeT3LocalAuthOrigin, makeT3LocalAuthToken, parsePairingUrl };

package/dist/{runtime-Cq64iuZr.js → runtime-KQVRmRk-.js}

@@ -65511,6 +65511,120 @@ var AuthLocalError = class extends TaggedErrorClass()("AuthLocalError", {
 	]))
 }) {};
 //#endregion
+//#region src/config/url.ts
+function normalizeHttpBaseUrl(value) {
+	return parseUrl$1(value).pipe(flatMap$2((url) => succeed$2(normalizeBaseUrl$1(url))));
+}
+function toHttpEndpointUrl(httpBaseUrl, pathname) {
+	return parseUrl$1(httpBaseUrl).pipe(flatMap$2((url) => succeed$2(withPathname(url, pathname).toString())));
+}
+function toWebSocketEndpointUrl(httpBaseUrl, pathname) {
+	return parseUrl$1(httpBaseUrl).pipe(flatMap$2((url) => {
+		if (url.protocol === "http:") return succeed$2(withPathname(url, pathname, "ws:").toString());
+		if (url.protocol === "https:") return succeed$2(withPathname(url, pathname, "wss:").toString());
+		return fail$2(new UrlError({
+			message: `unsupported server url protocol: ${url.protocol}`,
+			protocol: url.protocol
+		}));
+	}));
+}
+function parseUrl$1(value) {
+	return fromResult(fromString(value)).pipe(catchTags$1({ IllegalArgumentError: (error) => fail$2(new UrlError({
+		message: "invalid url",
+		cause: error
+	})) }));
+}
+function normalizeBaseUrl$1(url) {
+	return mutate(url, (current) => {
+		current.hash = "";
+		current.search = "";
+		current.pathname = normalizePathname(current.pathname);
+	}).toString().replace(/\/$/, "");
+}
+function withPathname(url, pathname, protocol) {
+	return mutate(url, (current) => {
+		if (protocol !== void 0) current.protocol = protocol;
+		current.pathname = appendPathname(current.pathname, pathname);
+		current.search = "";
+		current.hash = "";
+	});
+}
+function normalizePathname(pathname) {
+	return pathname === "/" ? "" : pathname.replace(/\/+$/u, "");
+}
+function appendPathname(basePathname, pathname) {
+	return `${normalizePathname(basePathname)}${pathname.startsWith("/") ? pathname : `/${pathname}`}`;
+}
+//#endregion
+//#region src/auth/local-base-dir.ts
+function resolveLocalBaseDir(input) {
+	const envBaseDir = input.environment.env["T3CODE_HOME"];
+	const raw = input.baseDir ?? envBaseDir;
+	if (raw === void 0 || raw.length === 0) return input.path.join(input.environment.homeDir, ".t3");
+	if (raw === "~") return input.environment.homeDir;
+	if (raw.startsWith("~/") || raw.startsWith("~\\")) return input.path.join(input.environment.homeDir, raw.slice(2));
+	return input.path.resolve(input.environment.cwd, raw);
+}
+//#endregion
+//#region src/auth/schema.ts
+const AuthAccessTokenResultSchema = Struct({
+	access_token: String$1,
+	issued_token_type: String$1,
+	token_type: Literal("Bearer"),
+	expires_in: Number$1,
+	scope: String$1
+});
+const AuthSessionStateSchema = Struct({
+	authenticated: Boolean$1,
+	role: optionalKey(Literals(["owner", "client"])),
+	sessionMethod: optionalKey(String$1),
+	expiresAt: optionalKey(String$1)
+});
+const AuthWebSocketTicketResultSchema = Struct({
+	ticket: String$1,
+	expiresAt: String$1
+});
+const AuthLocalRuntimeStateSchema = Struct({
+	version: Literal(1),
+	origin: String$1
+});
+const decodeAuthAccessTokenResult = decodeUnknownEffect(AuthAccessTokenResultSchema);
+const decodeAuthSessionState = decodeUnknownEffect(AuthSessionStateSchema);
+const decodeAuthWebSocketTicketResult = decodeUnknownEffect(AuthWebSocketTicketResultSchema);
+decodeUnknownEffect(AuthLocalRuntimeStateSchema);
+const decodeAuthLocalRuntimeStateFromJson = decodeUnknownEffect(fromJsonString(AuthLocalRuntimeStateSchema));
+//#endregion
+//#region src/auth/local-origin.ts
+var T3LocalAuthOrigin = class extends Service$1()("t3cli/T3LocalAuthOrigin") {};
+const makeT3LocalAuthOrigin = fn("makeT3LocalAuthOrigin")(function* () {
+	const fs = yield* FileSystem;
+	const path = yield* Path;
+	const environment = yield* Environment;
+	return { resolve: fn("T3LocalAuthOriginLive.resolve")(function* (input) {
+		const baseDir = resolveLocalBaseDir({
+			baseDir: input?.baseDir,
+			environment,
+			path
+		});
+		if (input?.origin !== void 0) return yield* normalizeLocalOrigin(input.origin);
+		const runtimeStatePath = path.join(baseDir, "userdata", "server-runtime.json");
+		return yield* normalizeLocalOrigin((yield* decodeAuthLocalRuntimeStateFromJson(yield* fs.readFileString(runtimeStatePath).pipe(mapError$2((error) => new AuthLocalError({
+			message: `local runtime state not found: ${runtimeStatePath}. Make sure T3 Code is running with Network access enabled, or pass --origin manually.`,
+			cause: error
+		})))).pipe(mapError$2((error) => new AuthLocalError({
+			message: "local runtime state has invalid shape",
+			cause: error
+		})))).origin);
+	}) };
+});
+const T3LocalAuthOriginLive = effect(T3LocalAuthOrigin, makeT3LocalAuthOrigin());
+function normalizeLocalOrigin(origin) {
+	return normalizeHttpBaseUrl(origin).pipe(mapError$2((error) => new AuthLocalError({
+		message: error.message,
+		cause: error
+	})));
+}
+//#endregion
 //#region node_modules/.pnpm/effect@4.0.0-beta.78/node_modules/effect/dist/unstable/reactivity/Reactivity.js
 /**
 * The `Reactivity` module provides process-local invalidation for connecting
@@ -66488,112 +66602,17 @@ const makeWithTransaction = (options) => (effect) => {
 */
 const TransactionConnection = (clientId) => Service$1(`effect/sql/SqlClient/TransactionConnection/${clientId}`);
 //#endregion
-//#region src/config/url.ts
-function normalizeHttpBaseUrl(value) {
-	return parseUrl$1(value).pipe(flatMap$2((url) => succeed$2(normalizeBaseUrl$1(url))));
-}
-function toHttpEndpointUrl(httpBaseUrl, pathname) {
-	return parseUrl$1(httpBaseUrl).pipe(flatMap$2((url) => succeed$2(withPathname(url, pathname).toString())));
-}
-function toWebSocketEndpointUrl(httpBaseUrl, pathname) {
-	return parseUrl$1(httpBaseUrl).pipe(flatMap$2((url) => {
-		if (url.protocol === "http:") return succeed$2(withPathname(url, pathname, "ws:").toString());
-		if (url.protocol === "https:") return succeed$2(withPathname(url, pathname, "wss:").toString());
-		return fail$2(new UrlError({
-			message: `unsupported server url protocol: ${url.protocol}`,
-			protocol: url.protocol
-		}));
-	}));
-}
-function parseUrl$1(value) {
-	return fromResult(fromString(value)).pipe(catchTags$1({ IllegalArgumentError: (error) => fail$2(new UrlError({
-		message: "invalid url",
-		cause: error
-	})) }));
-}
-function normalizeBaseUrl$1(url) {
-	return mutate(url, (current) => {
-		current.hash = "";
-		current.search = "";
-		current.pathname = normalizePathname(current.pathname);
-	}).toString().replace(/\/$/, "");
-}
-function withPathname(url, pathname, protocol) {
-	return mutate(url, (current) => {
-		if (protocol !== void 0) current.protocol = protocol;
-		current.pathname = appendPathname(current.pathname, pathname);
-		current.search = "";
-		current.hash = "";
-	});
-}
-function normalizePathname(pathname) {
-	return pathname === "/" ? "" : pathname.replace(/\/+$/u, "");
-}
-function appendPathname(basePathname, pathname) {
-	return `${normalizePathname(basePathname)}${pathname.startsWith("/") ? pathname : `/${pathname}`}`;
-}
-//#endregion
 //#region src/sql/service.ts
 var SqlClientFactory = class extends Service$1()("t3cli/SqlClientFactory") {};
 //#endregion
-//#region src/auth/schema.ts
-const AuthAccessTokenResultSchema = Struct({
-	access_token: String$1,
-	issued_token_type: String$1,
-	token_type: Literal("Bearer"),
-	expires_in: Number$1,
-	scope: String$1
-});
-const AuthSessionStateSchema = Struct({
-	authenticated: Boolean$1,
-	role: optionalKey(Literals(["owner", "client"])),
-	sessionMethod: optionalKey(String$1),
-	expiresAt: optionalKey(String$1)
-});
-const AuthWebSocketTicketResultSchema = Struct({
-	ticket: String$1,
-	expiresAt: String$1
-});
-const AuthLocalRuntimeStateSchema = Struct({
-	version: Literal(1),
-	origin: String$1
-});
-const decodeAuthAccessTokenResult = decodeUnknownEffect(AuthAccessTokenResultSchema);
-const decodeAuthSessionState = decodeUnknownEffect(AuthSessionStateSchema);
-const decodeAuthWebSocketTicketResult = decodeUnknownEffect(AuthWebSocketTicketResultSchema);
-decodeUnknownEffect(AuthLocalRuntimeStateSchema);
-const decodeAuthLocalRuntimeStateFromJson = decodeUnknownEffect(fromJsonString(AuthLocalRuntimeStateSchema));
-//#endregion
-//#region src/auth/local.ts
-var T3LocalAuth = class extends Service$1()("t3cli/T3LocalAuth") {};
-const T3LocalAuthLive = effect(T3LocalAuth, fn("makeT3LocalAuth")(function* () {
-	const config = yield* T3Config;
+//#region src/auth/local-token.ts
+var T3LocalAuthToken = class extends Service$1()("t3cli/T3LocalAuthToken") {};
+const makeT3LocalAuthToken = fn("makeT3LocalAuthToken")(function* () {
 	const fs = yield* FileSystem;
 	const path = yield* Path;
 	const environment = yield* Environment;
 	const crypto = yield* Crypto;
 	const sqlClientFactory = yield* SqlClientFactory;
-	function resolveLocalBaseDir(input) {
-		const envBaseDir = environment.env["T3CODE_HOME"];
-		const raw = input ?? envBaseDir;
-		if (raw === void 0 || raw.length === 0) return path.join(environment.homeDir, ".t3");
-		if (raw === "~") return environment.homeDir;
-		if (raw.startsWith("~/") || raw.startsWith("~\\")) return path.join(environment.homeDir, raw.slice(2));
-		return path.resolve(environment.cwd, raw);
-	}
-	function resolveLocalOrigin(input) {
-		return gen(function* () {
-			if (input.origin !== void 0) return yield* normalizeLocalOrigin(input.origin);
-			const runtimeStatePath = path.join(input.baseDir, "userdata", "server-runtime.json");
-			return yield* normalizeLocalOrigin((yield* decodeAuthLocalRuntimeStateFromJson(yield* fs.readFileString(runtimeStatePath).pipe(mapError$2((error) => new AuthLocalError({
-				message: `local runtime state not found: ${runtimeStatePath}. Make sure T3 Code is running with Network access enabled, or pass --origin manually.`,
-				cause: error
-			})))).pipe(mapError$2((error) => new AuthLocalError({
-				message: "local runtime state has invalid shape",
-				cause: error
-			})))).origin);
-		});
-	}
 	function readSigningSecret(secretPath) {
 		return fs.readFile(secretPath).pipe(map$3((bytes) => Uint8Array.from(bytes)), catchFilter$2(reason("PlatformError", "NotFound"), () => succeed$2(void 0)), mapError$2((error) => new AuthLocalSecretError({
 			message: `failed to read signing secret: ${secretPath}`,
@@ -66668,26 +66687,14 @@ const T3LocalAuthLive = effect(T3LocalAuth, fn("makeT3LocalAuth")(function* () {
 			expiresAt: formatIso(expiresAt)
 		};
 	});
-	function writeLocalConfig(input) {
-		return gen(function* () {
-			const existing = yield* config.readStored().pipe(catchTags$1({ ConfigError: (error) => fail$2(new AuthConfigError({
-				message: "auth config failed",
-				cause: error
-			})) }));
-			yield* config.writeStored({
-				...existing,
-				url: input.url,
-				token: input.token
-			}).pipe(catchTags$1({ ConfigError: (error) => fail$2(new AuthConfigError({
-				message: "auth config failed",
-				cause: error
-			})) }));
-		});
-	}
-	return { local: fn("T3LocalAuthLive.local")(function* (input) {
+	return { create: fn("T3LocalAuthTokenLive.create")(function* (input) {
 		if (input.label.length === 0) return yield* fail$2(new AuthLocalError({ message: "local auth label cannot be empty" }));
 		if (input.subject.length === 0) return yield* fail$2(new AuthLocalError({ message: "local auth subject cannot be empty" }));
-		const baseDir = resolveLocalBaseDir(input.baseDir);
+		const baseDir = resolveLocalBaseDir({
+			baseDir: input.baseDir,
+			environment,
+			path
+		});
 		const session = yield* issueLocalDatabaseSession({
 			dbPath: path.join(baseDir, "userdata", "state.sqlite"),
 			secretsDir: path.join(baseDir, "userdata", "secrets"),
@@ -66698,23 +66705,16 @@ const T3LocalAuthLive = effect(T3LocalAuth, fn("makeT3LocalAuth")(function* () {
 			message: `local auth failed: ${error.message}`,
 			cause: error
 		})));
-		const url = yield* resolveLocalOrigin({
-			baseDir,
-			...input.origin !== void 0 ? { origin: input.origin } : {}
-		});
-		yield* writeLocalConfig({
-			url,
-			token: session.token
-		});
 		return {
-			url,
+			token: session.token,
 			role: session.role,
 			expiresAt: session.expiresAt,
 			source: "local",
 			baseDir
 		};
 	}) };
-})());
+});
+const T3LocalAuthTokenLive = effect(T3LocalAuthToken, makeT3LocalAuthToken());
 function insertAuthSession(input) {
 	return gen(function* () {
 		const sql = yield* SqlClient;
@@ -66758,12 +66758,6 @@ function insertAuthSession(input) {
     `;
 	});
 }
-function normalizeLocalOrigin(origin) {
-	return normalizeHttpBaseUrl(origin).pipe(mapError$2((error) => new AuthLocalError({
-		message: error.message,
-		cause: error
-	})));
-}
 const defaultSessionTtlMs = 720 * 60 * 60 * 1e3;
 const signingSecretName = "server-signing-key";
 const sha256BlockSize = 64;
@@ -66774,6 +66768,28 @@ function concatBytes(first, second) {
 	return bytes;
 }
 //#endregion
+//#region src/auth/local.ts
+var T3LocalAuth = class extends Service$1()("t3cli/T3LocalAuth") {};
+const makeT3LocalAuth = fn("makeT3LocalAuth")(function* () {
+	const origin = yield* T3LocalAuthOrigin;
+	const token = yield* T3LocalAuthToken;
+	return { local: fn("T3LocalAuthLive.local")(function* (input) {
+		const created = yield* token.create(input);
+		return {
+			url: yield* origin.resolve({
+				baseDir: created.baseDir,
+				...input.origin !== void 0 ? { origin: input.origin } : {}
+			}),
+			token: created.token,
+			role: created.role,
+			expiresAt: created.expiresAt,
+			source: "local",
+			baseDir: created.baseDir
+		};
+	}) };
+});
+const T3LocalAuthLive = effect(T3LocalAuth, makeT3LocalAuth());
+//#endregion
 //#region src/auth/transport.ts
 var T3AuthTransport = class extends Service$1()("t3cli/T3AuthTransport") {};
 const T3AuthTransportLive = effect(T3AuthTransport, fn("makeT3AuthTransport")(function* () {
@@ -66808,8 +66824,8 @@ const T3AuthTransportLive = effect(T3AuthTransport, fn("makeT3AuthTransport")(fu
 				sessionToken: result.access_token
 			};
 		}),
-		getSession: fn("AuthTransport.getSession")(function* (config) {
-			const request = get$1(yield* makeHttpEndpointUrl(config.url, "/api/auth/session")).pipe(authenticatedRequest(config));
+		getSession: fn("AuthTransport.getSession")(function* (connection) {
+			const request = get$1(yield* makeHttpEndpointUrl(connection.url, "/api/auth/session")).pipe(authenticatedRequest(connection));
 			return yield* (yield* client.execute(request).pipe(catchTags$1({ HttpClientError: (error) => fail$2(new AuthTransportError({
 				message: "auth request failed",
 				cause: HttpClientErrorSchema.fromHttpClientError(error)
@@ -66824,8 +66840,8 @@ const T3AuthTransportLive = effect(T3AuthTransport, fn("makeT3AuthTransport")(fu
 				}))
 			}));
 		}),
-		issueWebSocketTicket: fn("AuthTransport.issueWebSocketTicket")(function* (config) {
-			const request = post$1(yield* makeHttpEndpointUrl(config.url, "/api/auth/websocket-ticket")).pipe(authenticatedRequest(config));
+		issueWebSocketTicket: fn("AuthTransport.issueWebSocketTicket")(function* (connection) {
+			const request = post$1(yield* makeHttpEndpointUrl(connection.url, "/api/auth/websocket-ticket")).pipe(authenticatedRequest(connection));
 			return yield* (yield* client.execute(request).pipe(catchTags$1({ HttpClientError: (error) => fail$2(new AuthTransportError({
 				message: "auth request failed",
 				cause: HttpClientErrorSchema.fromHttpClientError(error)
@@ -66842,7 +66858,7 @@ const T3AuthTransportLive = effect(T3AuthTransport, fn("makeT3AuthTransport")(fu
 		})
 	};
 })());
-const authenticatedRequest = (config) => (request) => request.pipe(acceptJson, bearerToken(config.token));
+const authenticatedRequest = (connection) => (request) => request.pipe(acceptJson, bearerToken(connection.token));
 function makeHttpEndpointUrl(baseUrl, path) {
 	return toHttpEndpointUrl(baseUrl, path).pipe(catchTags$1({ UrlError: (error) => fail$2(new AuthTransportError({
 		message: "auth request failed",
@@ -66852,31 +66868,20 @@ function makeHttpEndpointUrl(baseUrl, path) {
 //#endregion
 //#region src/auth/pairing.ts
 var T3AuthPairing = class extends Service$1()("t3cli/T3AuthPairing") {};
-const T3AuthPairingLive = effect(T3AuthPairing, fn("makeT3AuthPairing")(function* () {
-	const config = yield* T3Config;
+const makeT3AuthPairing = fn("makeT3AuthPairing")(function* () {
 	const transport = yield* T3AuthTransport;
 	return { pair: fn("T3AuthPairingLive.pair")(function* (pairingUrl) {
 		const parsed = yield* parsePairingUrl(pairingUrl);
 		const result = yield* transport.bootstrapBearer(parsed);
-		const existing = yield* config.readStored().pipe(catchTags$1({ ConfigError: (error) => fail$2(new AuthConfigError({
-			message: "auth config failed",
-			cause: error
-		})) }));
-		yield* config.writeStored({
-			...existing,
-			url: parsed.baseUrl,
-			token: result.sessionToken
-		}).pipe(catchTags$1({ ConfigError: (error) => fail$2(new AuthConfigError({
-			message: "auth config failed",
-			cause: error
-		})) }));
 		return {
 			url: parsed.baseUrl,
+			token: result.sessionToken,
 			role: result.role,
 			expiresAt: result.expiresAt
 		};
 	}) };
-})());
+});
+const T3AuthPairingLive = effect(T3AuthPairing, makeT3AuthPairing());
 function parsePairingUrl(value) {
 	return gen(function* () {
 		const url = yield* parseUrl(value);
@@ -66909,7 +66914,9 @@ function readPairingToken(url) {
 		return hashToken !== void 0 && hashToken.length > 0 ? hashToken : token !== void 0 && token.length > 0 ? token : "";
 	});
 }
-const T3AuthLive = effect(T3Auth, fn("makeT3Auth")(function* () {
+//#endregion
+//#region src/auth/layer.ts
+const makeT3Auth = fn("makeT3Auth")(function* () {
 	const config = yield* T3Config;
 	const transport = yield* T3AuthTransport;
 	const localAuth = yield* T3LocalAuth;
@@ -66940,14 +66947,47 @@ const T3AuthLive = effect(T3Auth, fn("makeT3Auth")(function* () {
 		}));
 		return yield* transport.issueWebSocketTicket(resolved);
 	});
+	const writeConfig = fn("T3AuthLive.writeConfig")(function* (input) {
+		const existing = yield* config.readStored().pipe(catchTags$1({ ConfigError: (error) => fail$2(new AuthConfigError({
+			message: "auth config failed",
+			cause: error
+		})) }));
+		yield* config.writeStored({
+			...existing,
+			url: input.url,
+			token: input.token
+		}).pipe(catchTags$1({ ConfigError: (error) => fail$2(new AuthConfigError({
+			message: "auth config failed",
+			cause: error
+		})) }));
+	});
 	return {
 		pair: pairing.pair,
 		local: localAuth.local,
+		writeConfig,
 		status,
 		issueWebSocketTicket
 	};
-})());
-const T3ConfigLive = effect(T3Config, fn("makeT3Config")(function* () {
+});
+const T3AuthLive = effect(T3Auth, makeT3Auth());
+//#endregion
+//#region src/connection/error.ts
+var T3CodeConnectionError = class extends TaggedErrorClass()("T3CodeConnectionError", {
+	message: String$1,
+	cause: optionalKey(Unknown)
+}) {};
+//#endregion
+//#region src/connection/service.ts
+var T3CodeConnectionProvider = class extends Service$1()("t3cli/T3CodeConnectionProvider") {};
+function makeT3CodeConnectionProvider(get) {
+	return { get };
+}
+function T3CodeConnectionProviderLive(connection) {
+	return succeed$3(T3CodeConnectionProvider, makeT3CodeConnectionProvider(succeed$2(connection)));
+}
+//#endregion
+//#region src/config/layer.ts
+const makeT3Config = fn("makeT3Config")(function* () {
 	const fs = yield* FileSystem;
 	const path = yield* Path;
 	const environment = yield* Environment;
@@ -66992,7 +67032,8 @@ const T3ConfigLive = effect(T3Config, fn("makeT3Config")(function* () {
 			};
 		})
 	};
-})());
+});
+const T3ConfigLive = effect(T3Config, makeT3Config());
 const StoredConfigSchema = Struct({
 	url: optionalKey(String$1),
 	token: optionalKey(String$1)
@@ -70270,11 +70311,8 @@ const RpcErrorCauseSchema = Union([
 	OrchestrationDispatchCommandError,
 	OrchestrationGetSnapshotError,
 	ServerSettingsError,
-	AuthConfigError,
-	AuthLocalError,
-	AuthPairingUrlError,
 	AuthTransportError,
-	ConfigError,
+	T3CodeConnectionError,
 	HttpClientErrorSchema,
 	UrlError,
 	instanceOf(SchemaError)
@@ -70877,17 +70915,18 @@ const makeClient = make$1(make$5(WsOrchestrationDispatchCommandRpc, WsOrchestrat
 })));
 const connectionRetrySchedule = exponential("100 millis").pipe(take$2(4));
 const makeT3RpcLayer = fn("makeT3RpcLayer")(function* () {
-	const config = yield* T3Config;
-	const auth = yield* T3Auth;
+	const connectionProvider = yield* T3CodeConnectionProvider;
+	const authTransport = yield* T3AuthTransport;
+	const webSocketConstructor = yield* WebSocketConstructor;
 	const parentScope = yield* Scope;
 	const connection = yield* make(none());
 	const openConnection = fn("T3RpcLive.openConnection")(function* () {
 		const scope = yield* fork(parentScope);
 		return yield* gen(function* () {
 			const protocol = yield* buildWithScope(makeProtocolLayer(yield* makeWsUrl({
-				auth,
-				config
-			})), scope);
+				authTransport,
+				connectionProvider
+			}), webSocketConstructor), scope);
 			return {
 				scope,
 				client: yield* makeClient.pipe(provide(protocol), provideService$1(Scope, scope))
@@ -70914,12 +70953,16 @@ const makeT3RpcLayer = fn("makeT3RpcLayer")(function* () {
 	};
 });
 const makeWsUrl = fn("makeWsUrl")(function* (input) {
-	const resolved = yield* input.config.resolve();
-	const wsTicket = yield* input.auth.issueWebSocketTicket();
-	return getOrThrow(toUrl(get$1(yield* toWebSocketEndpointUrl(resolved.url, "/ws")).pipe(setUrlParam("wsTicket", wsTicket.ticket)))).toString();
+	const connection = yield* input.connectionProvider.get;
+	const origin = yield* normalizeHttpBaseUrl(connection.origin.url);
+	const wsTicket = yield* input.authTransport.issueWebSocketTicket({
+		url: origin,
+		token: connection.auth.token
+	});
+	return getOrThrow(toUrl(get$1(yield* toWebSocketEndpointUrl(origin, "/ws")).pipe(setUrlParam("wsTicket", wsTicket.ticket)))).toString();
 });
-function makeProtocolLayer(url) {
-	const socketLayer = layerWebSocket(url).pipe(provide$2(layerWebSocketConstructor));
+function makeProtocolLayer(url, webSocketConstructor) {
+	const socketLayer = layerWebSocket(url).pipe(provide$2(succeed$3(WebSocketConstructor, webSocketConstructor)));
 	return layerProtocolSocket({ retryTransientErrors: true }).pipe(provide$2(socketLayer), provide$2(layerJson));
 }
 const T3RpcLive = effectContext(makeT3RpcLayer().pipe(map$3((rpc) => make$40(T3Rpc, rpc))));
@@ -71415,6 +71458,7 @@ const makeNodeSqliteClient = fn("makeNodeSqliteClient")(function* (config) {
 		transformRows
 	});
 });
+const NodeSqliteClientLive = (config) => effectContext(map$3(makeNodeSqliteClient(config), (client) => make$40(SqlClient, client))).pipe(provide$2(layer));
 const NodeSqlClientFactoryLive = succeed$3(SqlClientFactory, { sqliteClient: (config) => makeNodeSqliteClient(config).pipe(provide(layer)) });
 function toSqlInputValue(value) {
 	if (value === void 0 || value === null) return null;
@@ -71432,13 +71476,24 @@ function toSqlInputValue(value) {
 //#endregion
 //#region src/runtime.ts
 const T3AuthTransportLayer = T3AuthTransportLive.pipe(provide$2(layerUndici));
-const T3LocalAuthLayer = T3LocalAuthLive.pipe(provide$2(mergeAll$1(T3ConfigLive, NodeSqlClientFactoryLive)));
-const T3AuthPairingLayer = T3AuthPairingLive.pipe(provide$2(mergeAll$1(T3ConfigLive, T3AuthTransportLayer)));
+const T3LocalAuthOriginLayer = T3LocalAuthOriginLive;
+const T3LocalAuthTokenLayer = T3LocalAuthTokenLive.pipe(provide$2(NodeSqlClientFactoryLive));
+const T3LocalAuthLayer = T3LocalAuthLive.pipe(provide$2(mergeAll$1(T3LocalAuthOriginLayer, T3LocalAuthTokenLayer)));
+const T3AuthPairingLayer = T3AuthPairingLive.pipe(provide$2(T3AuthTransportLayer));
 const T3AuthLayer = T3AuthLive.pipe(provide$2(mergeAll$1(T3ConfigLive, T3AuthTransportLayer, T3LocalAuthLayer, T3AuthPairingLayer)));
-const T3RpcLayer = T3RpcLive.pipe(provide$2(mergeAll$1(T3ConfigLive, T3AuthLayer, layerWebSocketConstructor)));
+const T3ConfigConnectionProviderLayer = effect(T3CodeConnectionProvider, gen(function* () {
+	return makeT3CodeConnectionProvider((yield* T3Config).resolve().pipe(map$3((resolved) => ({
+		origin: { url: resolved.url },
+		auth: { token: resolved.token }
+	})), mapError$2((error) => new T3CodeConnectionError({
+		message: "failed to resolve T3 Code connection from CLI config",
+		cause: error
+	}))));
+})).pipe(provide$2(T3ConfigLive));
+const T3RpcLayer = T3RpcLive.pipe(provide$2(mergeAll$1(T3ConfigConnectionProviderLayer, T3AuthTransportLayer, layerWebSocketConstructor)));
 const T3OrchestrationLayer = T3OrchestrationLive.pipe(provide$2(T3RpcLayer));
 const T3ApplicationLayer = T3ApplicationLive.pipe(provide$2(T3OrchestrationLayer));
 const AuthAppLayer = mergeAll$1(T3ConfigLive, T3AuthLayer);
 const AppLayer = mergeAll$1(T3ConfigLive, T3AuthLayer, T3RpcLayer, T3OrchestrationLayer, T3ApplicationLayer);
 //#endregion
-export { runLast as $, isNullish as $n, sync as $t, Crypto as A, Service$1 as An, flatMap$2 as At, WatchBackend as B, isSome as Bn, map$3 as Bt, decodeUnknownEffect as C, succeed$4 as Cn, asVoid as Ct, optionalKey as D, fail$6 as Dn, catch_$1 as Dt, optional as E, map$5 as En, catchTags$1 as Et, TypeId$29 as F, fromNullishOr as Fn, gen as Ft, fromIterable$1 as G, Prototype as Gn, provideContext$2 as Gt, callback as H, match$3 as Hn, matchEffect as Ht, FileDescriptor as I, fromUndefinedOr as In, ignore$1 as It, mkString as J, BaseProto as Jn, runFork as Jt, isStream as K, PipeInspectableProto as Kn, provideService$1 as Kt, FileSystem as L, getOrElse$1 as Ln, interrupt$1 as Lt, fromReadable as M, getUnsafe$2 as Mn, fnUntraced as Mt, fromWritable as N, make$40 as Nn, forEach$1 as Nt, tag as O, succeed$6 as On, effectify as Ot, Path as P, flatMap$4 as Pn, forkScoped as Pt, runFold as Q, isNotUndefined as Qn, suspend$3 as Qt, FileTypeId as R, getOrUndefined as Rn, isEffect as Rt, decodeTo as S, isSuccess as Sn, as as St, is as T, sync$2 as Tn, catchFilter$2 as Tt, decodeText as U, none as Un, orDie as Ut, make$24 as V, map$7 as Vn, mapError$2 as Vt, empty$6 as W, some as Wn, provide as Wt, runCollect as X, hasProperty as Xn, serviceOption as Xt, run$1 as Y, format$1 as Yn, scoped$2 as Yt, runDrain as Z, isNotNull as Zn, succeed$2 as Zt, Literals as _, MinimumLogLevel as _n, nominal as _t, latestAssistantMessage as a, uninterruptible as an, pipeArguments as ar, get$2 as at, TaggedErrorClass as b, isDone$1 as bn, addFinalizer as bt, Environment as c, fail$3 as cn, __toESM as cr, isSink as ct, ArraySchema as d, effect as dn, make$27 as dt, tapCause as en, isUndefined as er, splitLines as et, Boolean$1 as f, mergeAll$1 as fn, offer as ft, Literal as g, sync$1 as gn, systemError as gt, Int as h, succeed$3 as hn, badArgument as ht, ThreadSessionError as i, try_ as in, pipe as ir, unwrap as it, make$23 as j, empty$11 as jn, fn as jt, toCodecStringTree as k, Reference as kn, fail$2 as kt, T3Config as l, hasInterruptsOnly as ln, endUnsafe as lt, ErrorClass as m, provideMerge as mn, BadArgument as mt, AuthAppLayer as n, timeoutOrElse as nn, dual as nr, tap as nt, threadStatus as o, void_$1 as on, __commonJSMin as or, make$25 as ot, Defect as p, provide$2 as pn, offerUnsafe as pt, merge$1 as q, withFiber$1 as qn, result as qt, NodeEnvironmentLive as r, tryPromise as rn, identity as rr, transduce as rt, T3Application as s, TaggedError as sn, __require as sr, drain as st, AppLayer as t, tapError$2 as tn, constVoid as tr, succeed as tt, T3Auth as u, squash as un, failCauseUnsafe as ut, String$1 as v, _await as vn, transform as vt, fromJsonString as w, ConsoleRef as wn, callback$1 as wt, Union as x, makeUnsafe$8 as xn, andThen as xt, Struct as y, doneUnsafe as yn, acquireRelease as yt, Size as z, isNone as zn, logError as zt };
+export { T3Config as $, hasInterruptsOnly as $n, endUnsafe as $t, T3LocalAuthTokenLive as A, map$3 as An, isSome as Ar, WatchBackend as At, AuthLocalSigningError as B, serviceOption as Bn, hasProperty as Br, runCollect as Bt, makeT3AuthPairing as C, forEach$1 as Cn, make$40 as Cr, fromWritable as Ct, T3LocalAuthLive as D, interrupt$1 as Dn, getOrElse$1 as Dr, FileSystem as Dt, T3LocalAuth as E, ignore$1 as En, fromUndefinedOr as Er, FileDescriptor as Et, makeT3LocalAuthOrigin as F, provideContext$2 as Fn, Prototype as Fr, fromIterable$1 as Ft, layerWebSocketConstructor as G, tapError$2 as Gn, constVoid as Gr, succeed as Gt, AuthTransportError as H, suspend$3 as Hn, isNotUndefined as Hr, runFold as Ht, AuthConfigError as I, provideService$1 as In, PipeInspectableProto as Ir, isStream as It, ThreadSessionError as J, try_ as Jn, pipe as Jr, unwrap as Jt, layerUndici as K, timeoutOrElse as Kn, dual as Kr, tap as Kt, AuthLocalDatabaseError as L, result as Ln, withFiber$1 as Lr, merge$1 as Lt, SqlClientFactory as M, matchEffect as Mn, match$3 as Mr, callback as Mt, T3LocalAuthOrigin as N, orDie as Nn, none as Nr, decodeText as Nt, makeT3LocalAuth as O, isEffect as On, getOrUndefined as Or, FileTypeId as Ot, T3LocalAuthOriginLive as P, provide as Pn, some as Pr, empty$6 as Pt, Environment as Q, fail$3 as Qn, __toESM as Qr, isSink as Qt, AuthLocalError as R, runFork as Rn, BaseProto as Rr, mkString as Rt, T3AuthPairingLive as S, fnUntraced as Sn, getUnsafe$2 as Sr, fromReadable as St, T3AuthTransportLive as T, gen as Tn, fromNullishOr as Tr, TypeId$29 as Tt, ConfigError as U, sync as Un, isNullish as Ur, runLast as Ut, AuthPairingUrlError as V, succeed$2 as Vn, isNotNull as Vr, runDrain as Vt, UrlError as W, tapCause as Wn, isUndefined as Wr, splitLines as Wt, threadStatus as X, void_$1 as Xn, __commonJSMin as Xr, make$25 as Xt, latestAssistantMessage as Y, uninterruptible as Yn, pipeArguments as Yr, get$2 as Yt, T3Application as Z, TaggedError as Zn, __require as Zr, drain as Zt, makeT3CodeConnectionProvider as _, catch_$1 as _n, fail$6 as _r, optionalKey as _t, T3AuthTransportLayer as a, badArgument as an, succeed$3 as ar, Int as at, makeT3Auth as b, flatMap$2 as bn, Service$1 as br, Crypto as bt, T3LocalAuthTokenLayer as c, transform as cn, _await as cr, String$1 as ct, makeNodeSqliteClient as d, andThen as dn, makeUnsafe$8 as dr, Union as dt, failCauseUnsafe as en, squash as er, T3Auth as et, T3RpcLive as f, as as fn, isSuccess as fr, decodeTo as ft, T3CodeConnectionProviderLive as g, catchTags$1 as gn, map$5 as gr, optional as gt, T3CodeConnectionProvider as h, catchFilter$2 as hn, sync$2 as hr, is as ht, T3AuthPairingLayer as i, BadArgument as in, provideMerge as ir, ErrorClass as it, makeT3LocalAuthToken as j, mapError$2 as jn, map$7 as jr, make$24 as jt, T3LocalAuthToken as k, logError as kn, isNone as kr, Size as kt, NodeSqlClientFactoryLive as l, acquireRelease as ln, doneUnsafe as lr, Struct as lt, makeT3Config as m, callback$1 as mn, ConsoleRef as mr, fromJsonString as mt, AuthAppLayer as n, offer as nn, mergeAll$1 as nr, Boolean$1 as nt, T3LocalAuthLayer as o, systemError as on, sync$1 as or, Literal as ot, T3ConfigLive as p, asVoid as pn, succeed$4 as pr, decodeUnknownEffect as pt, NodeEnvironmentLive as q, tryPromise as qn, identity as qr, transduce as qt, T3AuthLayer as r, offerUnsafe as rn, provide$2 as rr, Defect as rt, T3LocalAuthOriginLayer as s, nominal as sn, MinimumLogLevel as sr, Literals as st, AppLayer as t, make$27 as tn, effect as tr, ArraySchema as tt, NodeSqliteClientLive as u, addFinalizer as un, isDone$1 as ur, TaggedErrorClass as ut, T3CodeConnectionError as v, effectify as vn, succeed$6 as vr, tag as vt, parsePairingUrl as w, forkScoped as wn, flatMap$4 as wr, Path as wt, T3AuthPairing as x, fn as xn, empty$11 as xr, make$23 as xt, T3AuthLive as y, fail$2 as yn, Reference as yr, toCodecStringTree as yt, AuthLocalSecretError as z, scoped$2 as zn, format$1 as zr, run$1 as zt };