tokenmaxx 0.0.0-alpha.0 → 0.0.3

package/dist/index.js

@@ -1,13 +1,17 @@
 #!/usr/bin/env bun
 // @bun
 var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, {
       get: all[name],
       enumerable: true,
       configurable: true,
-      set: (newValue) => all[name] = () => newValue
+      set: __exportSetter.bind(all, name)
     });
 };
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
@@ -11245,7 +11249,7 @@ function finalize(ctx, schema) {
     result.$schema = "http://json-schema.org/draft-07/schema#";
   } else if (ctx.target === "draft-04") {
     result.$schema = "http://json-schema.org/draft-04/schema#";
-  } else if (ctx.target === "openapi-3.0") {} else {}
+  } else if (ctx.target === "openapi-3.0") {}
   if (ctx.external?.uri) {
     const id = ctx.external.registry.get(schema)?.id;
     if (!id)
@@ -11506,7 +11510,7 @@ var formatMap, stringProcessor = (schema, ctx, _json, _params) => {
     if (val === undefined) {
       if (ctx.unrepresentable === "throw") {
         throw new Error("Literal `undefined` cannot be represented in JSON Schema");
-      } else {}
+      }
     } else if (typeof val === "bigint") {
       if (ctx.unrepresentable === "throw") {
         throw new Error("BigInt literals cannot be represented in JSON Schema");
@@ -12213,21 +12217,21 @@ __export(exports_core2, {
   $ZodAny: () => $ZodAny
 });
 var init_core2 = __esm(() => {
+  init_util();
+  init_regexes();
+  init_locales();
+  init_json_schema_processors();
+  init_json_schema_generator();
+  init_json_schema();
   init_core();
   init_parse();
   init_errors();
   init_schemas();
   init_checks();
   init_versions();
-  init_util();
-  init_regexes();
-  init_locales();
   init_registries();
   init_api();
   init_to_json_schema();
-  init_json_schema_processors();
-  init_json_schema_generator();
-  init_json_schema();
 });
 
 // node_modules/zod/v4/classic/checks.js
@@ -14614,11 +14618,6 @@ __export(exports_external, {
 });
 var init_external = __esm(() => {
   init_core2();
-  init_schemas2();
-  init_checks2();
-  init_errors2();
-  init_parse2();
-  init_compat();
   init_core2();
   init_en();
   init_core2();
@@ -14628,6 +14627,11 @@ var init_external = __esm(() => {
   init_iso();
   init_iso();
   init_coerce();
+  init_schemas2();
+  init_checks2();
+  init_errors2();
+  init_parse2();
+  init_compat();
   config(en_default());
 });
 
@@ -14679,28 +14683,28 @@ var init_domain = __esm(() => {
     "disabled"
   ]);
   AccountFieldsSchema = exports_external.object({
+    createdAt: exports_external.iso.datetime(),
+    enabled: exports_external.boolean(),
+    externalAccountId: exports_external.string().trim().min(1).nullable(),
+    health: HealthStateSchema,
     id: exports_external.uuid(),
-    label: AccountEmailSchema,
     identity: AccountEmailSchema,
-    externalAccountId: exports_external.string().trim().min(1).nullable(),
+    label: AccountEmailSchema,
     plan: exports_external.string().trim().min(1).nullish(),
-    health: HealthStateSchema,
-    enabled: exports_external.boolean(),
-    createdAt: exports_external.iso.datetime(),
     updatedAt: exports_external.iso.datetime()
   });
   AccountSchema = exports_external.discriminatedUnion("provider", [
     AccountFieldsSchema.extend({
-      provider: exports_external.literal("openai"),
       externalUserId: exports_external.string().trim().min(1).nullable().default(null),
-      secretReference: exports_external.string().trim().min(1),
-      profilePath: exports_external.null()
+      profilePath: exports_external.null(),
+      provider: exports_external.literal("openai"),
+      secretReference: exports_external.string().trim().min(1)
     }).strict(),
     AccountFieldsSchema.extend({
-      provider: exports_external.literal("anthropic"),
       externalUserId: exports_external.null().default(null),
-      secretReference: exports_external.null(),
-      profilePath: exports_external.string().trim().min(1)
+      profilePath: exports_external.string().trim().min(1),
+      provider: exports_external.literal("anthropic"),
+      secretReference: exports_external.null()
     }).strict()
   ]).refine((account) => account.label === account.identity, {
     message: "Account label must equal its authenticated email identity",
@@ -14708,16 +14712,16 @@ var init_domain = __esm(() => {
   });
   UsageWindowSchema = exports_external.object({
     id: exports_external.string().trim().min(1),
+    kind: exports_external.enum(["hard", "soft", "spend"]),
     label: exports_external.string().trim().min(1),
-    usedPercent: exports_external.number().min(0).max(100),
     resetAt: exports_external.iso.datetime().nullable(),
-    kind: exports_external.enum(["hard", "soft", "spend"])
+    usedPercent: exports_external.number().min(0).max(100)
   }).strict();
   UsageSnapshotFieldsSchema = exports_external.object({
     accountId: exports_external.uuid(),
+    hardLimitReached: exports_external.boolean(),
     observedAt: exports_external.iso.datetime(),
-    windows: exports_external.array(UsageWindowSchema),
-    hardLimitReached: exports_external.boolean()
+    windows: exports_external.array(UsageWindowSchema)
   });
   UsageSnapshotSchema = exports_external.discriminatedUnion("provider", [
     UsageSnapshotFieldsSchema.extend({
@@ -14731,23 +14735,23 @@ var init_domain = __esm(() => {
   ]);
   AuthorizationStateSchema = exports_external.enum(["notConfirmed", "confirmed"]);
   AutomationPolicySchema = exports_external.object({
-    provider: ProviderIdSchema,
+    authorization: AuthorizationStateSchema.default("notConfirmed"),
     enabled: exports_external.boolean(),
-    thresholdPercent: exports_external.number().min(1).max(100).default(95),
     hysteresisPercent: exports_external.number().min(0).max(25).default(5),
-    minimumDwellMilliseconds: exports_external.number().int().min(0).default(300000),
     maximumSnapshotAgeMilliseconds: exports_external.number().int().positive().default(120000),
-    authorization: AuthorizationStateSchema.default("notConfirmed")
+    minimumDwellMilliseconds: exports_external.number().int().min(0).default(300000),
+    provider: ProviderIdSchema,
+    thresholdPercent: exports_external.number().min(1).max(100).default(95)
   }).strict().refine((policy) => policy.hysteresisPercent < policy.thresholdPercent, {
     message: "hysteresisPercent must be lower than thresholdPercent",
     path: ["hysteresisPercent"]
   });
   ProviderStateSchema = exports_external.object({
-    provider: ProviderIdSchema,
     activeAccountId: exports_external.uuid().nullable(),
     generation: exports_external.number().int().nonnegative(),
-    switchedAt: exports_external.iso.datetime().nullable(),
-    policy: AutomationPolicySchema
+    policy: AutomationPolicySchema,
+    provider: ProviderIdSchema,
+    switchedAt: exports_external.iso.datetime().nullable()
   }).strict().refine((state) => state.provider === state.policy.provider, {
     message: "Provider state and automation policy must target the same provider",
     path: ["policy", "provider"]
@@ -14763,28 +14767,28 @@ var init_domain = __esm(() => {
     "failed"
   ]);
   SwitchRecordSchema = exports_external.object({
+    createdAt: exports_external.iso.datetime(),
+    generation: exports_external.number().int().positive(),
     id: exports_external.uuid(),
+    message: exports_external.string().nullable(),
+    phase: SwitchPhaseSchema,
     provider: ProviderIdSchema,
+    reason: exports_external.string().trim().min(1),
     sourceAccountId: exports_external.uuid().nullable(),
     targetAccountId: exports_external.uuid(),
-    phase: SwitchPhaseSchema,
-    reason: exports_external.string().trim().min(1),
-    generation: exports_external.number().int().positive(),
-    message: exports_external.string().nullable(),
-    createdAt: exports_external.iso.datetime(),
     updatedAt: exports_external.iso.datetime()
   }).strict();
   DashboardSnapshotSchema = exports_external.object({
     accounts: exports_external.array(AccountSchema),
-    usage: exports_external.array(UsageSnapshotSchema),
     providers: exports_external.array(ProviderStateSchema),
-    sampledAt: exports_external.iso.datetime()
+    sampledAt: exports_external.iso.datetime(),
+    usage: exports_external.array(UsageSnapshotSchema)
   }).strict();
   UsageHistoryPointSchema = exports_external.object({ at: exports_external.number().int().nonnegative(), usedPercent: exports_external.number().min(0).max(100) }).strict();
   UsageHistorySchema = exports_external.object({
-    windowId: exports_external.string().min(1),
     label: exports_external.string().min(1),
-    points: exports_external.array(UsageHistoryPointSchema)
+    points: exports_external.array(UsageHistoryPointSchema),
+    windowId: exports_external.string().min(1)
   }).strict();
   TIMEFRAMES = [
     { key: "1h", label: "1h", ms: 3600000 },
@@ -14794,30 +14798,30 @@ var init_domain = __esm(() => {
     { key: "31d", label: "31d", ms: 31 * 24 * 3600000 }
   ];
   TokenEventSchema = exports_external.object({
-    at: exports_external.number().int().nonnegative(),
-    provider: ProviderIdSchema,
     accountId: exports_external.uuid().nullable(),
-    model: exports_external.string().min(1).nullable(),
+    at: exports_external.number().int().nonnegative(),
     inputTokens: exports_external.number().int().nonnegative(),
-    outputTokens: exports_external.number().int().nonnegative()
+    model: exports_external.string().min(1).nullable(),
+    outputTokens: exports_external.number().int().nonnegative(),
+    provider: ProviderIdSchema
   }).strict();
-  TokenProviderTotalSchema = exports_external.object({ tokens: exports_external.number().nonnegative(), costUsd: exports_external.number().nonnegative() }).strict();
+  TokenProviderTotalSchema = exports_external.object({ costUsd: exports_external.number().nonnegative(), tokens: exports_external.number().nonnegative() }).strict();
   TokenTimeframeSchema = exports_external.object({
-    key: exports_external.string(),
-    buckets: exports_external.array(exports_external.number().nonnegative()),
     bucketMs: exports_external.number().positive(),
-    totalTokens: exports_external.number().nonnegative(),
-    totalInput: exports_external.number().nonnegative(),
-    totalOutput: exports_external.number().nonnegative(),
+    buckets: exports_external.array(exports_external.number().nonnegative()),
+    byProvider: exports_external.object({ anthropic: TokenProviderTotalSchema, openai: TokenProviderTotalSchema }).strict(),
     costUsd: exports_external.number().nonnegative(),
+    key: exports_external.string(),
     peakPerHour: exports_external.number().nonnegative(),
     topModel: exports_external.string().nullable(),
-    byProvider: exports_external.object({ openai: TokenProviderTotalSchema, anthropic: TokenProviderTotalSchema }).strict()
+    totalInput: exports_external.number().nonnegative(),
+    totalOutput: exports_external.number().nonnegative(),
+    totalTokens: exports_external.number().nonnegative()
   }).strict();
   TokenAnalyticsSchema = exports_external.object({ timeframes: exports_external.array(TokenTimeframeSchema) }).strict();
   AnalyticsSnapshotSchema = exports_external.object({
-    snapshot: DashboardSnapshotSchema,
     history: exports_external.array(exports_external.object({ accountId: exports_external.uuid(), windows: exports_external.array(UsageHistorySchema) }).strict()),
+    snapshot: DashboardSnapshotSchema,
     tokens: TokenAnalyticsSchema.nullish()
   }).strict();
 });
@@ -14832,7 +14836,7 @@ function writeResponse(socket, response) {
 async function dispatch(manager, method, params) {
   switch (method) {
     case "manager/ping":
-      return { ready: true, processId: process.pid };
+      return { processId: process.pid, ready: true };
     case "dashboard/read":
       return manager.dashboard();
     case "usage/refresh":
@@ -14888,16 +14892,16 @@ async function startManagerServer(input) {
             decoded = JSON.parse(line);
           } catch {
             writeResponse(socket, {
-              id: 0,
-              error: { code: "INVALID_JSON", message: "Request is not valid JSON" }
+              error: { code: "INVALID_JSON", message: "Request is not valid JSON" },
+              id: 0
             });
             return;
           }
           const parsed = RpcRequestSchema.safeParse(decoded);
           if (!parsed.success) {
             writeResponse(socket, {
-              id: 0,
-              error: { code: "INVALID_REQUEST", message: exports_external.prettifyError(parsed.error) }
+              error: { code: "INVALID_REQUEST", message: exports_external.prettifyError(parsed.error) },
+              id: 0
             });
             return;
           }
@@ -14911,11 +14915,11 @@ async function startManagerServer(input) {
             writeResponse(socket, { id: parsed.data.id, result });
           } catch (error51) {
             writeResponse(socket, {
-              id: parsed.data.id,
               error: {
                 code: error51 instanceof ApplicationError ? error51.code : "INTERNAL_ERROR",
                 message: errorMessage(error51)
-              }
+              },
+              id: parsed.data.id
             });
           }
         })();
@@ -14975,59 +14979,59 @@ async function managerRequest(input) {
 }
 async function managerAvailable(socketPath) {
   return managerRequest({
-    socketPath,
     method: "manager/ping",
-    schema: exports_external.object({ ready: exports_external.literal(true), processId: exports_external.number().int().positive() }),
+    schema: exports_external.object({ processId: exports_external.number().int().positive(), ready: exports_external.literal(true) }),
+    socketPath,
     timeoutMilliseconds: 500
   }).then(() => true).catch(() => false);
 }
 function readDashboard(socketPath) {
   return managerRequest({
-    socketPath,
     method: "dashboard/read",
     schema: DashboardSnapshotSchema,
+    socketPath,
     timeoutMilliseconds: 15000
   });
 }
 function readAnalytics(socketPath) {
   return managerRequest({
-    socketPath,
     method: "dashboard/analytics",
     schema: AnalyticsSnapshotSchema,
+    socketPath,
     timeoutMilliseconds: 15000
   });
 }
 function refreshUsage(socketPath) {
   return managerRequest({
-    socketPath,
     method: "usage/refresh",
     schema: DashboardSnapshotSchema,
+    socketPath,
     timeoutMilliseconds: 60000
   });
 }
 function requestSwitch(socketPath, provider, targetAccountId) {
   return managerRequest({
-    socketPath,
     method: "provider/switch",
-    params: { provider, targetAccountId, reason: "manual" },
+    params: { provider, reason: "manual", targetAccountId },
     schema: DashboardSnapshotSchema,
+    socketPath,
     timeoutMilliseconds: 30000
   });
 }
 function readProxyPort(socketPath) {
   return managerRequest({
-    socketPath,
     method: "proxy/port",
     schema: exports_external.object({ port: exports_external.number().int().positive() }),
+    socketPath,
     timeoutMilliseconds: 15000
   }).then((result) => result.port);
 }
 function requestPolicy(socketPath, input) {
   return managerRequest({
-    socketPath,
     method: "policy/set",
     params: input,
     schema: exports_external.unknown(),
+    socketPath,
     timeoutMilliseconds: 15000
   }).then(() => {
     return;
@@ -15035,10 +15039,10 @@ function requestPolicy(socketPath, input) {
 }
 function requestAccountSave(socketPath, account, removePrevious) {
   return managerRequest({
-    socketPath,
     method: "account/save",
     params: { account, removePrevious },
     schema: exports_external.object({ saved: exports_external.literal(true) }),
+    socketPath,
     timeoutMilliseconds: 15000
   }).then(() => {
     return;
@@ -15055,26 +15059,26 @@ var init_ipc = __esm(() => {
     params: exports_external.unknown().optional()
   }).strict();
   RpcResponseSchema = exports_external.object({
+    error: exports_external.object({ code: exports_external.string(), message: exports_external.string() }).strict().optional(),
     id: exports_external.literal(1),
-    result: exports_external.unknown().optional(),
-    error: exports_external.object({ code: exports_external.string(), message: exports_external.string() }).strict().optional()
+    result: exports_external.unknown().optional()
   }).strict().refine((response) => response.result === undefined !== (response.error === undefined), {
     message: "Manager response must contain exactly one result or error"
   });
   SwitchParamsSchema = exports_external.object({
     provider: ProviderIdSchema,
-    targetAccountId: exports_external.uuid(),
-    reason: exports_external.string().min(1).optional()
+    reason: exports_external.string().min(1).optional(),
+    targetAccountId: exports_external.uuid()
   }).strict();
   PolicyParamsSchema = exports_external.object({
-    provider: ProviderIdSchema,
+    authorizationConfirmed: exports_external.boolean().optional(),
     enabled: exports_external.boolean(),
-    thresholdPercent: exports_external.number().min(1).max(100).optional(),
-    authorizationConfirmed: exports_external.boolean().optional()
+    provider: ProviderIdSchema,
+    thresholdPercent: exports_external.number().min(1).max(100).optional()
   }).strict();
   ReplaceCredentialParamsSchema = exports_external.object({
     account: AccountSchema,
-    removePrevious: exports_external.object({ secretReference: exports_external.string().nullable(), profilePath: exports_external.string().nullable() }).strict()
+    removePrevious: exports_external.object({ profilePath: exports_external.string().nullable(), secretReference: exports_external.string().nullable() }).strict()
   }).strict();
 });
 
@@ -15247,17 +15251,17 @@ function healthBadge(theme, account) {
     case "refreshing":
       return null;
     case "loginExpiring":
-      return { text: "\u26A0 expiring", color: theme.warn };
+      return { color: theme.warn, text: "\u26A0 expiring" };
     case "scopeMissing":
-      return { text: "\u26A0 scope", color: theme.warn };
+      return { color: theme.warn, text: "\u26A0 scope" };
     case "reauthenticationRequired":
-      return { text: "\u26A0 login", color: theme.bad };
+      return { color: theme.bad, text: "\u26A0 login" };
     case "temporarilyUnreachable":
-      return { text: "\xB7 offline", color: theme.warn };
+      return { color: theme.warn, text: "\xB7 offline" };
     case "usageRateLimited":
-      return { text: "\xB7 limited", color: theme.warn };
+      return { color: theme.warn, text: "\xB7 limited" };
     case "disabled":
-      return { text: "\xB7 off", color: theme.dim };
+      return { color: theme.dim, text: "\xB7 off" };
   }
 }
 function shortWindow(label) {
@@ -15315,30 +15319,30 @@ var darkTheme, lightTheme, themes, brailleDots;
 var init_format = __esm(() => {
   init_domain();
   darkTheme = {
-    fg: "#e6e6e6",
-    dim: "#8b93a1",
-    faint: "#4b515c",
     accent: "#5ab0ff",
+    bad: "#ff5f6e",
     bg: "#0b0d10",
-    panel: "#0f1216",
-    selected: "#1b2330",
     border: "#2a3038",
+    dim: "#8b93a1",
+    faint: "#4b515c",
+    fg: "#e6e6e6",
     good: "#3ad07a",
-    warn: "#f0a83a",
-    bad: "#ff5f6e"
+    panel: "#0f1216",
+    selected: "#1b2330",
+    warn: "#f0a83a"
   };
   lightTheme = {
-    fg: "#1c2430",
-    dim: "#5a6472",
-    faint: "#aab2bd",
     accent: "#0b62d6",
+    bad: "#d23b48",
     bg: "#fbfcfe",
-    panel: "#f2f4f8",
-    selected: "#e3e9f2",
     border: "#c7cedb",
+    dim: "#5a6472",
+    faint: "#aab2bd",
+    fg: "#1c2430",
     good: "#1f9d57",
-    warn: "#b9770f",
-    bad: "#d23b48"
+    panel: "#f2f4f8",
+    selected: "#e3e9f2",
+    warn: "#b9770f"
   };
   themes = { dark: darkTheme, light: lightTheme };
   brailleDots = [
@@ -15370,19 +15374,19 @@ function buildTokens(scale) {
     const bucketMs = timeframe.ms / 120;
     const peakBucket = buckets.reduce((max, value) => Math.max(max, value), 0);
     return {
-      key: timeframe.key,
-      buckets,
       bucketMs,
-      totalTokens,
-      totalInput,
-      totalOutput: totalTokens - totalInput,
+      buckets,
+      byProvider: {
+        anthropic: { costUsd: claudeCost, tokens: claudeTokens },
+        openai: { costUsd: codexCost, tokens: codexTokens }
+      },
       costUsd: codexCost + claudeCost,
+      key: timeframe.key,
       peakPerHour: Math.round(peakBucket * (3600000 / bucketMs)),
       topModel: totalTokens === 0 ? null : "claude-opus-4-8",
-      byProvider: {
-        openai: { tokens: codexTokens, costUsd: codexCost },
-        anthropic: { tokens: claudeTokens, costUsd: claudeCost }
-      }
+      totalInput,
+      totalOutput: totalTokens - totalInput,
+      totalTokens
     };
   });
   return { timeframes };
@@ -15404,10 +15408,10 @@ function valueAt(spec, at, now) {
 function toWindow2(spec, now) {
   return {
     id: spec.id,
+    kind: "hard",
     label: spec.label,
-    usedPercent: Math.round(valueAt(spec, now, now)),
     resetAt: new Date(now + (1 - spec.nowFrac) * spec.period).toISOString(),
-    kind: "hard"
+    usedPercent: Math.round(valueAt(spec, now, now))
   };
 }
 function toHistory(spec, now) {
@@ -15420,76 +15424,76 @@ function toHistory(spec, now) {
   for (let at = fine;at <= now; at += 10 * MINUTE) {
     points.push({ at, usedPercent: Math.round(valueAt(spec, at, now)) });
   }
-  return { windowId: spec.id, label: spec.label, points };
+  return { label: spec.label, points, windowId: spec.id };
 }
 function account(seed, now) {
   const base = {
+    createdAt: new Date(now - 34 * DAY).toISOString(),
+    enabled: true,
+    externalAccountId: `acct_${seed.n.toString().padStart(4, "0")}`,
+    health: seed.health ?? "ready",
     id: uuid3(seed.n),
-    label: seed.email,
     identity: seed.email,
-    externalAccountId: `acct_${seed.n.toString().padStart(4, "0")}`,
+    label: seed.email,
     plan: seed.plan,
-    health: seed.health ?? "ready",
-    enabled: true,
-    createdAt: new Date(now - 34 * DAY).toISOString(),
     updatedAt: new Date(now - 40 * MINUTE).toISOString()
   };
   return seed.provider === "openai" ? {
     ...base,
-    provider: "openai",
     externalUserId: `user_${seed.n}`,
-    secretReference: `codex:${base.externalAccountId}`,
-    profilePath: null
+    profilePath: null,
+    provider: "openai",
+    secretReference: `codex:${base.externalAccountId}`
   } : {
     ...base,
-    provider: "anthropic",
     externalUserId: null,
-    secretReference: null,
-    profilePath: `/tmp/tokenmaxx/claude/${seed.n}`
+    profilePath: `/tmp/tokenmaxx/claude/${seed.n}`,
+    provider: "anthropic",
+    secretReference: null
   };
 }
 function usage(seed, now) {
   const windows = (seed.windows ?? []).map((spec) => toWindow2(spec, now));
   const base = {
     accountId: uuid3(seed.n),
+    hardLimitReached: windows.some((window) => window.usedPercent >= 100),
     observedAt: new Date(now - 40 * MINUTE).toISOString(),
-    windows,
-    hardLimitReached: windows.some((window) => window.usedPercent >= 100)
+    windows
   };
   return seed.provider === "openai" ? { ...base, provider: "openai", source: "codexUsageEndpoint" } : { ...base, provider: "anthropic", source: "claudeUsageEndpoint" };
 }
 function policy(provider, enabled, thresholdPercent = 95) {
   return {
-    provider,
+    authorization: enabled ? "confirmed" : "notConfirmed",
     enabled,
-    thresholdPercent,
     hysteresisPercent: 5,
-    minimumDwellMilliseconds: 300000,
     maximumSnapshotAgeMilliseconds: 120000,
-    authorization: enabled ? "confirmed" : "notConfirmed"
+    minimumDwellMilliseconds: 300000,
+    provider,
+    thresholdPercent
   };
 }
 function providerState(seed, now) {
   return {
-    provider: seed.provider,
     activeAccountId: seed.activeN === null ? null : uuid3(seed.activeN),
     generation: seed.generation,
-    switchedAt: seed.switchedMinutesAgo === null ? null : new Date(now - seed.switchedMinutesAgo * MINUTE).toISOString(),
-    policy: policy(seed.provider, seed.auto, seed.threshold)
+    policy: policy(seed.provider, seed.auto, seed.threshold),
+    provider: seed.provider,
+    switchedAt: seed.switchedMinutesAgo === null ? null : new Date(now - seed.switchedMinutesAgo * MINUTE).toISOString()
   };
 }
 function assemble(now, accounts, providers, tokenScale = 1) {
   return AnalyticsSnapshotSchema.parse({
-    snapshot: {
-      accounts: accounts.map((seed) => account(seed, now)),
-      usage: accounts.map((seed) => usage(seed, now)),
-      providers: providers.map((seed) => providerState(seed, now)),
-      sampledAt: new Date(now - 40 * MINUTE).toISOString()
-    },
     history: accounts.map((seed) => ({
       accountId: uuid3(seed.n),
       windows: (seed.windows ?? []).map((spec) => toHistory(spec, now))
     })),
+    snapshot: {
+      accounts: accounts.map((seed) => account(seed, now)),
+      providers: providers.map((seed) => providerState(seed, now)),
+      sampledAt: new Date(now - 40 * MINUTE).toISOString(),
+      usage: accounts.map((seed) => usage(seed, now))
+    },
     tokens: buildTokens(tokenScale)
   });
 }
@@ -15501,139 +15505,139 @@ function buildScenario(name, now = FIXTURE_NOW) {
   return builder(now);
 }
 var MINUTE = 60000, HOUR = 3600000, DAY, FIXTURE_NOW, fiveHour = (peak, nowFrac, seed) => ({
+  fillFrac: 0.92,
   id: "five-hour",
   label: "5 hour",
-  period: 5 * HOUR,
-  peak,
   nowFrac,
-  fillFrac: 0.92,
-  wobble: 4,
-  seed
+  peak,
+  period: 5 * HOUR,
+  seed,
+  wobble: 4
 }), weekly = (peak, nowFrac, seed) => ({
+  fillFrac: 1,
   id: "weekly",
   label: "7 day \xB7 all models",
-  period: 7 * DAY,
-  peak,
   nowFrac,
-  fillFrac: 1,
-  wobble: 2,
-  seed
+  peak,
+  period: 7 * DAY,
+  seed,
+  wobble: 2
 }), fable = (peak, nowFrac, seed) => ({
+  fillFrac: 1,
   id: "weekly_scoped:fable",
   label: "7 day \xB7 Fable",
-  period: 7 * DAY,
-  peak,
   nowFrac,
-  fillFrac: 1,
-  wobble: 3,
-  seed
+  peak,
+  period: 7 * DAY,
+  seed,
+  wobble: 3
 }), claudeSession = (peak, nowFrac, seed) => ({
   ...fiveHour(peak, nowFrac, seed),
   label: "5h session"
 }), cruising = (now) => assemble(now, [
   {
-    n: 1,
-    provider: "openai",
     email: "dexter@rubriclabs.com",
+    n: 1,
     plan: "pro",
+    provider: "openai",
     windows: [fiveHour(58, 0.62, 11), weekly(44, 0.63, 21)]
   },
   {
-    n: 2,
-    provider: "openai",
     email: "ship@rubriclabs.com",
+    n: 2,
     plan: "pro",
+    provider: "openai",
     windows: [fiveHour(21, 0.3, 12), weekly(33, 0.61, 22)]
   },
   {
-    n: 3,
-    provider: "anthropic",
     email: "dexter@rubriclabs.com",
+    n: 3,
     plan: "claude_max_20x",
+    provider: "anthropic",
     windows: [claudeSession(47, 0.55, 31), weekly(29, 0.5, 41), fable(38, 0.44, 51)]
   },
   {
-    n: 4,
-    provider: "anthropic",
     email: "research@rubriclabs.com",
+    n: 4,
     plan: "claude_max_5x",
+    provider: "anthropic",
     windows: [claudeSession(18, 0.24, 32), weekly(22, 0.4, 42), fable(12, 0.2, 52)]
   }
 ], [
-  { provider: "openai", activeN: 1, generation: 4, switchedMinutesAgo: 96, auto: true },
-  { provider: "anthropic", activeN: 3, generation: 2, switchedMinutesAgo: 210, auto: true }
+  { activeN: 1, auto: true, generation: 4, provider: "openai", switchedMinutesAgo: 96 },
+  { activeN: 3, auto: true, generation: 2, provider: "anthropic", switchedMinutesAgo: 210 }
 ]), oneHot = (now) => assemble(now, [
   {
-    n: 1,
-    provider: "openai",
     email: "dexter@rubriclabs.com",
+    n: 1,
     plan: "pro",
+    provider: "openai",
     windows: [fiveHour(99, 0.87, 11), weekly(72, 0.7, 21)]
   },
   {
-    n: 2,
-    provider: "openai",
     email: "ship@rubriclabs.com",
+    n: 2,
     plan: "pro",
+    provider: "openai",
     windows: [fiveHour(23, 0.28, 12), weekly(41, 0.6, 22)]
   },
   {
-    n: 3,
-    provider: "anthropic",
     email: "dexter@rubriclabs.com",
+    n: 3,
     plan: "claude_max_20x",
+    provider: "anthropic",
     windows: [claudeSession(63, 0.6, 31), weekly(48, 0.62, 41), fable(97, 0.9, 51)]
   },
   {
-    n: 4,
-    provider: "anthropic",
     email: "research@rubriclabs.com",
+    n: 4,
     plan: "claude_max_5x",
+    provider: "anthropic",
     windows: [claudeSession(31, 0.35, 32), weekly(27, 0.45, 42), fable(19, 0.3, 52)]
   }
 ], [
-  { provider: "openai", activeN: 1, generation: 7, switchedMinutesAgo: 288, auto: true },
-  { provider: "anthropic", activeN: 3, generation: 3, switchedMinutesAgo: 420, auto: true }
+  { activeN: 1, auto: true, generation: 7, provider: "openai", switchedMinutesAgo: 288 },
+  { activeN: 3, auto: true, generation: 3, provider: "anthropic", switchedMinutesAgo: 420 }
 ]), rotated = (now) => assemble(now, [
   {
-    n: 2,
-    provider: "openai",
     email: "ship@rubriclabs.com",
+    n: 2,
     plan: "pro",
+    provider: "openai",
     windows: [fiveHour(19, 0.22, 12), weekly(38, 0.58, 22)]
   },
   {
-    n: 1,
-    provider: "openai",
     email: "dexter@rubriclabs.com",
+    n: 1,
     plan: "pro",
+    provider: "openai",
     windows: [fiveHour(96, 0.95, 11), weekly(74, 0.72, 21)]
   },
   {
-    n: 3,
-    provider: "anthropic",
     email: "dexter@rubriclabs.com",
+    n: 3,
     plan: "claude_max_20x",
+    provider: "anthropic",
     windows: [claudeSession(44, 0.5, 31), weekly(46, 0.6, 41), fable(52, 0.55, 51)]
   },
   {
-    n: 4,
-    provider: "anthropic",
     email: "research@rubriclabs.com",
+    n: 4,
     plan: "claude_max_5x",
+    provider: "anthropic",
     windows: [claudeSession(16, 0.2, 32), weekly(24, 0.42, 42), fable(14, 0.24, 52)]
   }
 ], [
-  { provider: "openai", activeN: 2, generation: 8, switchedMinutesAgo: 2, auto: true },
-  { provider: "anthropic", activeN: 3, generation: 3, switchedMinutesAgo: 420, auto: true }
+  { activeN: 2, auto: true, generation: 8, provider: "openai", switchedMinutesAgo: 2 },
+  { activeN: 3, auto: true, generation: 3, provider: "anthropic", switchedMinutesAgo: 420 }
 ]), onboarding = (now) => assemble(now, [], [
-  { provider: "openai", activeN: null, generation: 0, switchedMinutesAgo: null, auto: false },
+  { activeN: null, auto: false, generation: 0, provider: "openai", switchedMinutesAgo: null },
   {
-    provider: "anthropic",
     activeN: null,
+    auto: false,
     generation: 0,
-    switchedMinutesAgo: null,
-    auto: false
+    provider: "anthropic",
+    switchedMinutesAgo: null
   }
 ], 0), scenarios, SCENARIO_NAMES;
 var init_fixtures = __esm(() => {
@@ -15642,7 +15646,7 @@ var init_fixtures = __esm(() => {
   init_format();
   DAY = 24 * HOUR;
   FIXTURE_NOW = Date.parse("2026-07-15T16:42:00.000Z");
-  scenarios = { cruising, oneHot, rotated, onboarding };
+  scenarios = { cruising, onboarding, oneHot, rotated };
   SCENARIO_NAMES = Object.keys(scenarios);
 });
 
@@ -15677,7 +15681,7 @@ function orderedRows(snapshot) {
       return active !== 0 ? active : left.label.localeCompare(right.label);
     });
     for (const account2 of accounts) {
-      rows.push({ provider, accountId: account2.id });
+      rows.push({ accountId: account2.id, provider });
     }
   }
   return rows;
@@ -15689,9 +15693,9 @@ function accountLine(ctx, account2, windows, isActive, isSelected) {
   const children = [
     Text({ content: ` ${marker} `, fg: rgb(markerColor) }),
     Text({
+      attributes: isActive ? 1 : 0,
       content: pad2(account2.label, labelWidth - 2),
-      fg: rgb(isActive || isSelected ? ctx.theme.fg : ctx.theme.dim),
-      attributes: isActive ? 1 : 0
+      fg: rgb(isActive || isSelected ? ctx.theme.fg : ctx.theme.dim)
     }),
     Text({ content: badge === null ? "  " : " *", fg: rgb(badge?.color ?? ctx.theme.dim) })
   ];
@@ -15705,31 +15709,31 @@ function accountLine(ctx, account2, windows, isActive, isSelected) {
     }));
   }
   return Box({
+    backgroundColor: isSelected ? rgb(ctx.theme.selected) : rgb(ctx.theme.bg),
     flexDirection: "row",
-    width: "100%",
-    backgroundColor: isSelected ? rgb(ctx.theme.selected) : rgb(ctx.theme.bg)
+    width: "100%"
   }, ...children);
 }
 function accountDetail(ctx, account2, windows) {
   const indent = " ".repeat(5);
   const plan = planLabel(account2.plan);
   const lines = [
-    Box({ flexDirection: "row", backgroundColor: rgb(ctx.theme.selected) }, Text({ content: `${indent}${providerShort[account2.provider]}`, fg: rgb(ctx.theme.dim) }), Text({
+    Box({ backgroundColor: rgb(ctx.theme.selected), flexDirection: "row" }, Text({ content: `${indent}${providerShort[account2.provider]}`, fg: rgb(ctx.theme.dim) }), Text({
+      attributes: plan === null ? 0 : 1,
       content: plan === null ? "  \xB7  plan \u2014" : `  \xB7  ${plan}`,
-      fg: rgb(plan === null ? ctx.theme.dim : ctx.theme.accent),
-      attributes: plan === null ? 0 : 1
+      fg: rgb(plan === null ? ctx.theme.dim : ctx.theme.accent)
     }))
   ];
   const hard = hardWindows(windows);
   if (hard.length === 0) {
-    lines.push(Box({ flexDirection: "row", backgroundColor: rgb(ctx.theme.selected) }, Text({
+    lines.push(Box({ backgroundColor: rgb(ctx.theme.selected), flexDirection: "row" }, Text({
       content: `${indent}${account2.health === "ready" ? "waiting for usage\u2026" : "usage unavailable"}`,
       fg: rgb(ctx.theme.dim)
     })));
   }
   for (const window of hard) {
     const reset = resetCountdown(window.resetAt, ctx.now);
-    lines.push(Box({ flexDirection: "row", backgroundColor: rgb(ctx.theme.selected) }, Text({ content: `${indent}${pad2(window.label, 16)} `, fg: rgb(ctx.theme.dim) }), Text({
+    lines.push(Box({ backgroundColor: rgb(ctx.theme.selected), flexDirection: "row" }, Text({ content: `${indent}${pad2(window.label, 16)} `, fg: rgb(ctx.theme.dim) }), Text({
       content: `${meter(window.usedPercent, 8)} ${percentLabel(window.usedPercent)}`,
       fg: rgb(pressureColor(ctx.theme, window.usedPercent))
     }), Text({
@@ -15739,12 +15743,12 @@ function accountDetail(ctx, account2, windows) {
   }
   const shortId = account2.externalAccountId?.slice(0, 8) ?? "\u2014";
   const added = account2.createdAt.slice(0, 10);
-  lines.push(Box({ flexDirection: "row", backgroundColor: rgb(ctx.theme.selected) }, Text({ content: `${indent}account ${shortId}  \xB7  added ${added}`, fg: rgb(ctx.theme.faint) })));
+  lines.push(Box({ backgroundColor: rgb(ctx.theme.selected), flexDirection: "row" }, Text({ content: `${indent}account ${shortId}  \xB7  added ${added}`, fg: rgb(ctx.theme.faint) })));
   return lines;
 }
 function providerPanel(ctx, snapshot, provider, rows, selected, expanded) {
   const state = snapshot.providers.find((s) => s.provider === provider);
-  const providerRows = rows.map((row, index) => ({ row, index })).filter((entry) => entry.row.provider === provider);
+  const providerRows = rows.map((row, index) => ({ index, row })).filter((entry) => entry.row.provider === provider);
   const lines = providerRows.length === 0 ? [
     Box({ flexDirection: "row", width: "100%" }, Text({
       content: `   no accounts \u2014 tokenmaxx login ${providerCli[provider]}`,
@@ -15762,14 +15766,14 @@ function providerPanel(ctx, snapshot, provider, rows, selected, expanded) {
   });
   const auto = state?.policy.enabled ? `\u27F3 auto ${state.policy.thresholdPercent}%` : "auto off";
   return Box({
-    flexDirection: "column",
-    width: "100%",
-    flexShrink: 0,
     border: true,
-    borderStyle: "rounded",
     borderColor: rgb(ctx.theme.border),
+    borderStyle: "rounded",
+    flexDirection: "column",
+    flexShrink: 0,
     title: ` ${providerTitles[provider]}   ${auto} `,
-    titleColor: rgb(state?.policy.enabled ? ctx.theme.good : ctx.theme.dim)
+    titleColor: rgb(state?.policy.enabled ? ctx.theme.good : ctx.theme.dim),
+    width: "100%"
   }, ...lines);
 }
 function legend(ctx, snapshot) {
@@ -15785,10 +15789,10 @@ function legend(ctx, snapshot) {
 }
 function pill(ctx, label, active) {
   return Text({
-    content: ` ${label} `,
-    fg: rgb(active ? ctx.theme.bg : ctx.theme.dim),
+    attributes: active ? 1 : 0,
     bg: rgb(active ? ctx.theme.accent : ctx.theme.bg),
-    attributes: active ? 1 : 0
+    content: ` ${label} `,
+    fg: rgb(active ? ctx.theme.bg : ctx.theme.dim)
   });
 }
 function tabBar(ctx, tab) {
@@ -15799,7 +15803,7 @@ function timeframeBar(ctx, timeframe) {
     ...index === 0 ? [] : [Text({ content: " ", fg: rgb(ctx.theme.faint) })],
     pill(ctx, option.label, option.key === timeframe.key)
   ]);
-  return Box({ flexDirection: "row", width: "100%", paddingLeft: 1 }, Text({ content: "range  ", fg: rgb(ctx.theme.dim) }), ...cells);
+  return Box({ flexDirection: "row", paddingLeft: 1, width: "100%" }, Text({ content: "range  ", fg: rgb(ctx.theme.dim) }), ...cells);
 }
 function throughputCard(ctx, tokens, timeframe, height, width) {
   const body = [];
@@ -15822,10 +15826,10 @@ function throughputCard(ctx, tokens, timeframe, height, width) {
       fg: rgb(ctx.theme.faint)
     }), Text({ content: "now", fg: rgb(ctx.theme.faint) })));
     body.push(Box({ flexDirection: "row", paddingLeft: 1 }, Text({ content: "\u03A3 ", fg: rgb(ctx.theme.dim) }), Text({
+      attributes: 1,
       content: `${compactNumber(tokens.totalTokens)} tokens`,
-      fg: rgb(ctx.theme.fg),
-      attributes: 1
-    }), Text({ content: "   \u2248 ", fg: rgb(ctx.theme.dim) }), Text({ content: compactUsd(tokens.costUsd), fg: rgb(ctx.theme.good), attributes: 1 }), Text({ content: "   peak ", fg: rgb(ctx.theme.dim) }), Text({ content: `${compactNumber(tokens.peakPerHour)}/h`, fg: rgb(ctx.theme.accent) }), Text({
+      fg: rgb(ctx.theme.fg)
+    }), Text({ content: "   \u2248 ", fg: rgb(ctx.theme.dim) }), Text({ attributes: 1, content: compactUsd(tokens.costUsd), fg: rgb(ctx.theme.good) }), Text({ content: "   peak ", fg: rgb(ctx.theme.dim) }), Text({ content: `${compactNumber(tokens.peakPerHour)}/h`, fg: rgb(ctx.theme.accent) }), Text({
       content: tokens.topModel === null ? "" : `   top ${tokens.topModel}`,
       fg: rgb(ctx.theme.faint)
     })));
@@ -15841,14 +15845,14 @@ function throughputCard(ctx, tokens, timeframe, height, width) {
     })));
   }
   return Box({
-    flexDirection: "column",
-    width: "100%",
-    flexGrow: 1,
     border: true,
-    borderStyle: "rounded",
     borderColor: rgb(ctx.theme.border),
+    borderStyle: "rounded",
+    flexDirection: "column",
+    flexGrow: 1,
     title: " Token throughput \xB7 all accounts \xB7 both providers ",
-    titleColor: rgb(ctx.theme.dim)
+    titleColor: rgb(ctx.theme.dim),
+    width: "100%"
   }, ...body);
 }
 function analyticsBody(ctx, analytics, timeframe) {
@@ -15874,26 +15878,26 @@ function view(ctx, analytics, rows, state) {
   const refreshed = freshestMillis === 0 ? "\u2014" : `${relativeAge(freshestMillis, ctx.now)} ago`;
   const timeframe = TIMEFRAMES[state.timeframeIndex] ?? fallbackTimeframe;
   const footer = state.tab === "accounts" ? "\u2191\u2193 select \xB7 space details \xB7 \u23CE switch \xB7 a auto \xB7 tab analytics \xB7 r refresh" : "\u2190\u2192 range \xB7 tab accounts \xB7 r refresh";
-  const header = Box({ flexDirection: "row" }, Text({ content: "tokenmaxx", fg: rgb(ctx.theme.accent), attributes: 1 }), Text({ content: `  ${clock}`, fg: rgb(ctx.theme.dim) }), Text({ content: `   \u21BB ${refreshed}  \xB7  active 60s / idle 5m`, fg: rgb(ctx.theme.faint) }), ...state.note === "" ? [] : [Text({ content: `   ${state.note}`, fg: rgb(ctx.theme.warn) })]);
+  const header = Box({ flexDirection: "row" }, Text({ attributes: 1, content: "tokenmaxx", fg: rgb(ctx.theme.accent) }), Text({ content: `  ${clock}`, fg: rgb(ctx.theme.dim) }), Text({ content: `   \u21BB ${refreshed}  \xB7  active 60s / idle 5m`, fg: rgb(ctx.theme.faint) }), ...state.note === "" ? [] : [Text({ content: `   ${state.note}`, fg: rgb(ctx.theme.warn) })]);
   const children = [header];
   if (!state.installed) {
-    children.push(Box({ width: "100%", backgroundColor: rgb(ctx.theme.warn) }, Text({
-      content: " native routing is off \u2014 run  tokenmaxx install  to route codex & claude",
-      fg: rgb(ctx.theme.bg),
+    children.push(Box({ backgroundColor: rgb(ctx.theme.warn), width: "100%" }, Text({
+      attributes: 1,
       bg: rgb(ctx.theme.warn),
-      attributes: 1
+      content: " native routing is off \u2014 run  tokenmaxx install  to route codex & claude",
+      fg: rgb(ctx.theme.bg)
     })));
   }
   children.push(tabBar(ctx, state.tab));
   children.push(...state.tab === "accounts" ? accountsBody(ctx, analytics.snapshot, rows, state.selected, state.expanded) : analyticsBody(ctx, analytics, timeframe));
   children.push(Text({ content: footer, fg: rgb(ctx.theme.dim) }));
   return Box({
+    backgroundColor: rgb(ctx.theme.bg),
     flexDirection: "column",
-    width: "100%",
+    gap: 1,
     height: "100%",
     padding: 1,
-    gap: 1,
-    backgroundColor: rgb(ctx.theme.bg)
+    width: "100%"
   }, ...children);
 }
 async function runTuiDashboard(socketPath, options) {
@@ -15905,12 +15909,12 @@ async function runTuiDashboard(socketPath, options) {
   let analytics = options.fixture ?? await readAnalytics(socketPath);
   let rows = orderedRows(analytics.snapshot);
   const state = {
-    tab: "accounts",
-    selected: 0,
     expanded: false,
-    timeframeIndex: 2,
     installed: options.installed,
-    note: ""
+    note: "",
+    selected: 0,
+    tab: "accounts",
+    timeframeIndex: 2
   };
   let busy = false;
   const clampSelection = () => {
@@ -15920,7 +15924,7 @@ async function runTuiDashboard(socketPath, options) {
     clampSelection();
     let next;
     try {
-      next = view({ theme: currentTheme(), now: options.now ?? Date.now() }, analytics, rows, state);
+      next = view({ now: options.now ?? Date.now(), theme: currentTheme() }, analytics, rows, state);
     } catch {
       return;
     }
@@ -15979,10 +15983,10 @@ async function runTuiDashboard(socketPath, options) {
     const enable = !(providerState2?.policy.enabled ?? false);
     withBusy(`auto-rotate ${providerCli[row.provider]} ${enable ? "on" : "off"}\u2026`, async () => {
       await requestPolicy(socketPath, {
-        provider: row.provider,
+        authorizationConfirmed: enable,
         enabled: enable,
-        thresholdPercent: 95,
-        authorizationConfirmed: enable
+        provider: row.provider,
+        thresholdPercent: 95
       });
       analytics = await readAnalytics(socketPath);
     });
@@ -16050,11 +16054,11 @@ var init_dashboard = __esm(() => {
   init_format();
   colorCache = new Map;
   providerTitles = {
-    openai: "OpenAI \xB7 Codex",
-    anthropic: "Anthropic \xB7 Claude Code"
+    anthropic: "Anthropic \xB7 Claude Code",
+    openai: "OpenAI \xB7 Codex"
   };
-  providerShort = { openai: "Codex", anthropic: "Claude Code" };
-  providerCli = { openai: "codex", anthropic: "claude" };
+  providerShort = { anthropic: "Claude Code", openai: "Codex" };
+  providerCli = { anthropic: "claude", openai: "codex" };
   providerOrder = ["openai", "anthropic"];
   fallbackTimeframe = TIMEFRAMES[2];
 });
@@ -16078,13 +16082,13 @@ import { chmod, mkdir } from "fs/promises";
 import { homedir } from "os";
 import { join, resolve } from "path";
 var ApplicationPathsSchema = exports_external.object({
-  root: exports_external.string().min(1),
+  claudeProfiles: exports_external.string().min(1),
   database: exports_external.string().min(1),
-  runtime: exports_external.string().min(1),
-  managerSocket: exports_external.string().min(1),
   managerLock: exports_external.string().min(1),
-  claudeProfiles: exports_external.string().min(1),
-  proxyPort: exports_external.number().int().positive()
+  managerSocket: exports_external.string().min(1),
+  proxyPort: exports_external.number().int().positive(),
+  root: exports_external.string().min(1),
+  runtime: exports_external.string().min(1)
 });
 var defaultProxyPort = 8459;
 function applicationPaths(environment = process.env) {
@@ -16092,18 +16096,18 @@ function applicationPaths(environment = process.env) {
   const runtime = join(root, "runtime");
   const proxyPort = Number(environment.TOKENMAXX_PROXY_PORT ?? environment.TOKMAX_PROXY_PORT ?? defaultProxyPort);
   return ApplicationPathsSchema.parse({
-    root,
+    claudeProfiles: join(root, "profiles", "claude"),
     database: join(root, "state.sqlite"),
-    runtime,
-    managerSocket: join(runtime, "manager.sock"),
     managerLock: join(runtime, "manager.lock"),
-    claudeProfiles: join(root, "profiles", "claude"),
-    proxyPort: Number.isFinite(proxyPort) ? proxyPort : defaultProxyPort
+    managerSocket: join(runtime, "manager.sock"),
+    proxyPort: Number.isFinite(proxyPort) ? proxyPort : defaultProxyPort,
+    root,
+    runtime
   });
 }
 async function ensureApplicationPaths(paths) {
   const directories = [paths.root, paths.runtime, paths.claudeProfiles];
-  await Promise.all(directories.map((directory) => mkdir(directory, { recursive: true, mode: 448 })));
+  await Promise.all(directories.map((directory) => mkdir(directory, { mode: 448, recursive: true })));
   await Promise.all(directories.map((directory) => chmod(directory, 448)));
 }
 function proxyBaseUrl(paths, provider) {
@@ -16200,8 +16204,8 @@ async function installClaudeConfig(paths) {
   }
   settings.env = {
     ...settings.env,
-    ANTHROPIC_BASE_URL: proxyBaseUrl(paths, "anthropic"),
-    ANTHROPIC_AUTH_TOKEN: dummyAuthToken
+    ANTHROPIC_AUTH_TOKEN: dummyAuthToken,
+    ANTHROPIC_BASE_URL: proxyBaseUrl(paths, "anthropic")
   };
   await mkdir2(dirname(path), { recursive: true });
   await writeFile(path, `${JSON.stringify(settings, null, 2)}
@@ -16247,9 +16251,9 @@ init_zod();
 init_errors3();
 import { open, readFile as readFile2, rm } from "fs/promises";
 var DaemonLockSchema = exports_external.object({
+  createdAt: exports_external.iso.datetime(),
   ownerId: exports_external.uuid(),
-  processId: exports_external.number().int().positive(),
-  createdAt: exports_external.iso.datetime()
+  processId: exports_external.number().int().positive()
 }).strict();
 function isAlreadyExists(error51) {
   return error51 instanceof Error && "code" in error51 && Reflect.get(error51, "code") === "EEXIST";
@@ -16271,9 +16275,9 @@ async function readLock(lockPath) {
 }
 async function ownedLock(lockPath, fileHandle) {
   const owner = DaemonLockSchema.parse({
+    createdAt: new Date().toISOString(),
     ownerId: crypto.randomUUID(),
-    processId: process.pid,
-    createdAt: new Date().toISOString()
+    processId: process.pid
   });
   await fileHandle.writeFile(JSON.stringify(owner), "utf8");
   await fileHandle.sync();
@@ -16334,12 +16338,12 @@ import { userInfo } from "os";
 import { join as join3, normalize, resolve as resolve2 } from "path";
 var ClaudeOauthSchema = exports_external.object({
   accessToken: exports_external.string().min(1),
-  refreshToken: exports_external.string().min(1),
   expiresAt: exports_external.number().nonnegative(),
+  rateLimitTier: exports_external.string().optional(),
+  refreshToken: exports_external.string().min(1),
   refreshTokenExpiresAt: exports_external.number().nonnegative().optional(),
   scopes: exports_external.union([exports_external.array(exports_external.string()), exports_external.string()]).optional(),
-  subscriptionType: exports_external.string().optional(),
-  rateLimitTier: exports_external.string().optional()
+  subscriptionType: exports_external.string().optional()
 }).passthrough();
 function claudePlanTier(credential) {
   const tier = credential.rateLimitTier?.trim();
@@ -16351,18 +16355,18 @@ function claudePlanTier(credential) {
 }
 var ClaudeCredentialPayloadSchema = exports_external.object({ claudeAiOauth: ClaudeOauthSchema }).passthrough();
 var ClaudeAuthStatusSchema = exports_external.object({
-  loggedIn: exports_external.boolean(),
   authMethod: exports_external.string().optional(),
   email: exports_external.string().email().optional(),
+  loggedIn: exports_external.boolean(),
   subscriptionType: exports_external.string().optional()
 }).passthrough();
 var ClaudeProfileSchema = exports_external.object({
   account: exports_external.object({
-    uuid: exports_external.string().min(1),
-    email_address: exports_external.string().email().optional()
+    email_address: exports_external.string().email().optional(),
+    uuid: exports_external.string().min(1)
   }).passthrough().optional(),
-  uuid: exports_external.string().min(1).optional(),
-  email_address: exports_external.string().email().optional()
+  email_address: exports_external.string().email().optional(),
+  uuid: exports_external.string().min(1).optional()
 }).passthrough();
 function currentUser() {
   return process.env.USER ?? userInfo().username;
@@ -16387,20 +16391,12 @@ function decodeSecurityOutput(output) {
 }
 function defaultClaudeCommandRunner() {
   return {
-    async interactive(command, environment) {
-      return Bun.spawn([...command], {
-        env: { ...process.env, ...environment },
-        stdin: "inherit",
-        stdout: "inherit",
-        stderr: "inherit"
-      }).exited;
-    },
     async captured(command, environment) {
       const processHandle = Bun.spawn([...command], {
         env: { ...process.env, ...environment },
+        stderr: "pipe",
         stdin: "ignore",
-        stdout: "pipe",
-        stderr: "pipe"
+        stdout: "pipe"
       });
       const timeout = setTimeout(() => processHandle.kill("SIGTERM"), 30000);
       const [exitCode, stdout, stderr] = await Promise.all([
@@ -16409,7 +16405,15 @@ function defaultClaudeCommandRunner() {
         new Response(processHandle.stderr).text()
       ]);
       clearTimeout(timeout);
-      return { exitCode, stdout, stderr };
+      return { exitCode, stderr, stdout };
+    },
+    async interactive(command, environment) {
+      return Bun.spawn([...command], {
+        env: { ...process.env, ...environment },
+        stderr: "inherit",
+        stdin: "inherit",
+        stdout: "inherit"
+      }).exited;
     }
   };
 }
@@ -16480,7 +16484,7 @@ async function registerClaudeAccount(input) {
   const id = crypto.randomUUID();
   const profilePath = canonicalClaudeProfilePath(join3(input.paths.claudeProfiles, id));
   const runner = input.runner ?? defaultClaudeCommandRunner();
-  await mkdir3(profilePath, { recursive: true, mode: 448 });
+  await mkdir3(profilePath, { mode: 448, recursive: true });
   let registered = false;
   try {
     const command = ["claude", "auth", "login", "--claudeai"];
@@ -16510,18 +16514,18 @@ async function registerClaudeAccount(input) {
     }
     const now = new Date().toISOString();
     const account = {
-      id,
-      provider: "anthropic",
-      label: email3.data,
-      identity: email3.data,
+      createdAt: now,
+      enabled: true,
       externalAccountId: profile.accountId,
       externalUserId: null,
+      health: credential.expiresAt <= Date.now() ? "refreshDue" : "ready",
+      id,
+      identity: email3.data,
+      label: email3.data,
       plan: claudePlanTier(credential),
-      secretReference: null,
       profilePath,
-      health: credential.expiresAt <= Date.now() ? "refreshDue" : "ready",
-      enabled: true,
-      createdAt: now,
+      provider: "anthropic",
+      secretReference: null,
       updatedAt: now
     };
     registered = true;
@@ -16535,7 +16539,7 @@ async function registerClaudeAccount(input) {
 async function removeClaudeProfile(profilePath, runner = defaultClaudeCommandRunner()) {
   const service = claudeKeychainService(profilePath);
   const result = await runner.captured(["security", "delete-generic-password", "-a", currentUser(), "-s", service], {});
-  await rm3(profilePath, { recursive: true, force: true });
+  await rm3(profilePath, { force: true, recursive: true });
   if (result.exitCode !== 0 && result.exitCode !== 44) {
     throw new ApplicationError("KEYCHAIN_DELETE_FAILED", result.stderr.trim() || `Could not remove Claude Keychain service ${service}`);
   }
@@ -16556,17 +16560,17 @@ async function refreshClaudeProfile(input) {
   const credential = await reader.read(input.profilePath);
   await projectClaudeCredential({
     credential,
-    targetProfilePath: input.profilePath,
-    runner
+    runner,
+    targetProfilePath: input.profilePath
   });
   return reader.read(input.profilePath);
 }
 async function projectClaudeCredential(input) {
   const runner = input.runner ?? defaultClaudeCommandRunner();
   const result = await runner.captured(["claude", "auth", "login", "--claudeai"], {
-    CLAUDE_CONFIG_DIR: input.targetProfilePath,
     CLAUDE_CODE_OAUTH_REFRESH_TOKEN: input.credential.refreshToken,
-    CLAUDE_CODE_OAUTH_SCOPES: serializedScopes(input.credential.scopes)
+    CLAUDE_CODE_OAUTH_SCOPES: serializedScopes(input.credential.scopes),
+    CLAUDE_CONFIG_DIR: input.targetProfilePath
   });
   if (result.exitCode !== 0) {
     throw new ApplicationError("REAUTHENTICATION_REQUIRED", result.stderr.trim() || `Claude profile refresh exited with ${result.exitCode}`);
@@ -16590,35 +16594,35 @@ function requireProvider(account, provider) {
 init_zod();
 init_errors3();
 var UsageWindowSchema2 = exports_external.object({
-  utilization: exports_external.number().min(0),
-  resets_at: exports_external.union([exports_external.string(), exports_external.number()]).nullish(),
   limit_dollars: exports_external.number().nonnegative().nullish(),
+  remaining_dollars: exports_external.number().nonnegative().nullish(),
+  resets_at: exports_external.union([exports_external.string(), exports_external.number()]).nullish(),
   used_dollars: exports_external.number().nonnegative().nullish(),
-  remaining_dollars: exports_external.number().nonnegative().nullish()
+  utilization: exports_external.number().min(0)
 }).passthrough();
 var LimitScopeSchema = exports_external.object({
-  model: exports_external.object({ id: exports_external.string().nullish(), display_name: exports_external.string().nullish() }).passthrough().nullish(),
+  model: exports_external.object({ display_name: exports_external.string().nullish(), id: exports_external.string().nullish() }).passthrough().nullish(),
   surface: exports_external.union([
     exports_external.string(),
-    exports_external.object({ id: exports_external.string().nullish(), display_name: exports_external.string().nullish() }).passthrough()
+    exports_external.object({ display_name: exports_external.string().nullish(), id: exports_external.string().nullish() }).passthrough()
   ]).nullish()
 }).passthrough();
 var LimitSchema = exports_external.object({
-  kind: exports_external.string().min(1),
   group: exports_external.string().nullish(),
+  is_active: exports_external.boolean().nullish(),
+  kind: exports_external.string().min(1),
   percent: exports_external.number().min(0),
-  severity: exports_external.string().nullish(),
   resets_at: exports_external.union([exports_external.string(), exports_external.number()]).nullish(),
   scope: LimitScopeSchema.nullish(),
-  is_active: exports_external.boolean().nullish()
+  severity: exports_external.string().nullish()
 }).passthrough();
 var ClaudeUsageResponseSchema = exports_external.object({
-  limits: exports_external.array(LimitSchema).nullish(),
   five_hour: UsageWindowSchema2.nullish(),
+  limits: exports_external.array(LimitSchema).nullish(),
   seven_day: UsageWindowSchema2.nullish(),
+  seven_day_oauth_apps: UsageWindowSchema2.nullish(),
   seven_day_opus: UsageWindowSchema2.nullish(),
-  seven_day_sonnet: UsageWindowSchema2.nullish(),
-  seven_day_oauth_apps: UsageWindowSchema2.nullish()
+  seven_day_sonnet: UsageWindowSchema2.nullish()
 }).passthrough();
 function resetTimestamp(value) {
   if (value == null) {
@@ -16634,10 +16638,10 @@ function normalizePercent(utilization) {
 function normalizeWindow(id, label, source) {
   return {
     id,
+    kind: id.includes("oauth_apps") || id.includes("extra_usage") || source.limit_dollars != null ? "spend" : "hard",
     label,
-    usedPercent: normalizePercent(source.utilization),
     resetAt: resetTimestamp(source.resets_at),
-    kind: id.includes("oauth_apps") || id.includes("extra_usage") || source.limit_dollars != null ? "spend" : "hard"
+    usedPercent: normalizePercent(source.utilization)
   };
 }
 function limitScopeName(limit) {
@@ -16655,10 +16659,10 @@ function limitWindow(limit) {
   const fallbackLabel = limit.kind.split("_").filter((part) => part.length > 0).map((part) => `${part[0]?.toUpperCase() ?? ""}${part.slice(1)}`).join(" ");
   return {
     id: scopeName === null ? limit.kind : `${limit.kind}:${scopeName.toLowerCase()}`,
+    kind: "hard",
     label: labels[limit.kind] ?? (scopeName === null ? fallbackLabel : `${fallbackLabel} \xB7 ${scopeName}`),
-    usedPercent: Math.min(100, limit.percent),
     resetAt: resetTimestamp(limit.resets_at),
-    kind: "hard"
+    usedPercent: Math.min(100, limit.percent)
   };
 }
 var exhaustedSeverities = new Set(["exceeded", "blocked", "at_limit"]);
@@ -16666,8 +16670,8 @@ async function fetchClaudeUsage(input) {
   const response = await (input.fetchImplementation ?? fetch)("https://api.anthropic.com/api/oauth/usage", {
     headers: {
       Authorization: `Bearer ${input.accessToken}`,
-      "Content-Type": "application/json",
-      "anthropic-beta": "oauth-2025-04-20"
+      "anthropic-beta": "oauth-2025-04-20",
+      "Content-Type": "application/json"
     },
     signal: AbortSignal.timeout(1e4)
   });
@@ -16710,11 +16714,11 @@ async function fetchClaudeUsage(input) {
   }
   return {
     accountId: input.accountId,
-    provider: "anthropic",
+    hardLimitReached: windows.some((window) => window.kind === "hard" && window.usedPercent >= 100) || limits.some((limit) => limit.severity != null && exhaustedSeverities.has(limit.severity.toLowerCase())),
     observedAt: new Date().toISOString(),
+    provider: "anthropic",
     source: "claudeUsageEndpoint",
-    windows,
-    hardLimitReached: windows.some((window) => window.kind === "hard" && window.usedPercent >= 100) || limits.some((limit) => limit.severity != null && exhaustedSeverities.has(limit.severity.toLowerCase()))
+    windows
   };
 }
 
@@ -16757,7 +16761,7 @@ class AnthropicProviderAdapter {
     const reader = defaultClaudeCredentialReader();
     let credential = await reader.read(profilePath);
     if (credential.expiresAt <= this.#dependencies.now().getTime() + 300000) {
-      credential = await refreshClaudeProfile({ profilePath, credentialReader: reader });
+      credential = await refreshClaudeProfile({ credentialReader: reader, profilePath });
     }
     if (!scopesPermitUsage(credential.scopes)) {
       throw new ApplicationError("SCOPE_MISSING", "Claude credential does not include the user:profile scope required for usage");
@@ -16778,23 +16782,23 @@ class AnthropicProviderAdapter {
       if (!(error51 instanceof ApplicationError) || error51.code !== "REAUTHENTICATION_REQUIRED") {
         throw error51;
       }
-      credential = await refreshClaudeProfile({ profilePath, credentialReader: reader });
+      credential = await refreshClaudeProfile({ credentialReader: reader, profilePath });
       return verifyIdentity();
     });
     assertIdentity(anthropicAccount, profile.accountId);
     const usage = await fetchClaudeUsage({
-      accountId: anthropicAccount.id,
       accessToken: credential.accessToken,
+      accountId: anthropicAccount.id,
       fetchImplementation: this.#dependencies.fetchImplementation
     }).catch(async (error51) => {
       if (!(error51 instanceof ApplicationError) || error51.code !== "ACCESS_TOKEN_REJECTED") {
         throw error51;
       }
-      credential = await refreshClaudeProfile({ profilePath, credentialReader: reader });
+      credential = await refreshClaudeProfile({ credentialReader: reader, profilePath });
       profile = await verifyIdentity();
       return fetchClaudeUsage({
-        accountId: anthropicAccount.id,
         accessToken: credential.accessToken,
+        accountId: anthropicAccount.id,
         fetchImplementation: this.#dependencies.fetchImplementation
       });
     });
@@ -16803,10 +16807,10 @@ class AnthropicProviderAdapter {
     return {
       account: {
         ...anthropicAccount,
-        plan: claudePlanTier(credential) ?? anthropicAccount.plan ?? null,
-        label: email3.success ? email3.data : anthropicAccount.label,
-        identity: email3.success ? email3.data : anthropicAccount.identity,
         health: health(credential.refreshTokenExpiresAt, this.#dependencies.now()),
+        identity: email3.success ? email3.data : anthropicAccount.identity,
+        label: email3.success ? email3.data : anthropicAccount.label,
+        plan: claudePlanTier(credential) ?? anthropicAccount.plan ?? null,
         updatedAt: this.#dependencies.now().toISOString()
       },
       usage
@@ -16828,33 +16832,33 @@ import { join as join4 } from "path";
 var openAiClientId = "app_EMoamEEZ73f0CkXaXp7hrann";
 var refreshEndpoint = "https://auth.openai.com/oauth/token";
 var CodexTokensSchema = exports_external.object({
-  id_token: exports_external.string().min(1),
   access_token: exports_external.string().min(1),
-  refresh_token: exports_external.string().min(1),
-  account_id: exports_external.string().min(1).optional()
+  account_id: exports_external.string().min(1).optional(),
+  id_token: exports_external.string().min(1),
+  refresh_token: exports_external.string().min(1)
 }).passthrough();
 var CodexAuthSchema = exports_external.object({
   auth_mode: exports_external.string().optional(),
-  tokens: CodexTokensSchema,
-  last_refresh: exports_external.string().optional()
+  last_refresh: exports_external.string().optional(),
+  tokens: CodexTokensSchema
 }).passthrough();
 var JwtClaimsSchema = exports_external.object({
-  exp: exports_external.number().optional(),
-  sub: exports_external.string().optional(),
-  email: exports_external.string().email().optional(),
   chatgpt_account_id: exports_external.string().optional(),
   chatgpt_user_id: exports_external.string().optional(),
+  email: exports_external.string().email().optional(),
+  exp: exports_external.number().optional(),
   "https://api.openai.com/auth": exports_external.object({
     chatgpt_account_id: exports_external.string().optional(),
-    chatgpt_user_id: exports_external.string().optional(),
     chatgpt_plan_type: exports_external.string().optional(),
+    chatgpt_user_id: exports_external.string().optional(),
     user_id: exports_external.string().optional()
-  }).passthrough().optional()
+  }).passthrough().optional(),
+  sub: exports_external.string().optional()
 }).passthrough();
 var RefreshResponseSchema = exports_external.object({
   access_token: exports_external.string().min(1),
-  refresh_token: exports_external.string().min(1).optional(),
-  id_token: exports_external.string().min(1).optional()
+  id_token: exports_external.string().min(1).optional(),
+  refresh_token: exports_external.string().min(1).optional()
 }).passthrough();
 var refreshLocks = new Map;
 function base64UrlJson(segment) {
@@ -16885,27 +16889,27 @@ function codexIdentity(auth) {
   }
   const expiresAt = accessClaims.exp === undefined ? null : new Date(accessClaims.exp * 1000).toISOString();
   return {
+    accessExpiresAt: expiresAt,
     accountId,
-    userId: claims.chatgpt_user_id ?? namespaced?.chatgpt_user_id ?? namespaced?.user_id ?? claims.sub ?? null,
     email: claims.email ?? accessClaims.email ?? null,
     plan: namespaced?.chatgpt_plan_type ?? null,
-    accessExpiresAt: expiresAt
+    userId: claims.chatgpt_user_id ?? namespaced?.chatgpt_user_id ?? namespaced?.user_id ?? claims.sub ?? null
   };
 }
 function defaultCodexLoginDependencies() {
   return {
+    createTemporaryDirectory: (prefix) => mkdtemp(join4(tmpdir(), prefix)),
+    read: (path) => readFile4(path, "utf8"),
+    remove: (path) => rm4(path, { force: true, recursive: true }),
     async run(command, environment) {
       const child = Bun.spawn([...command], {
         env: { ...process.env, ...environment },
+        stderr: "inherit",
         stdin: "inherit",
-        stdout: "inherit",
-        stderr: "inherit"
+        stdout: "inherit"
       });
       return child.exited;
-    },
-    createTemporaryDirectory: (prefix) => mkdtemp(join4(tmpdir(), prefix)),
-    read: (path) => readFile4(path, "utf8"),
-    remove: (path) => rm4(path, { recursive: true, force: true })
+    }
   };
 }
 async function registerCodexAccount(input) {
@@ -16930,18 +16934,18 @@ async function registerCodexAccount(input) {
     await input.vault.write(secretReference, JSON.stringify(auth));
     const now = new Date().toISOString();
     return {
-      id,
-      provider: "openai",
-      label: email3.data,
-      identity: email3.data,
+      createdAt: now,
+      enabled: true,
       externalAccountId: identity.accountId,
       externalUserId: identity.userId,
+      health: "ready",
+      id,
+      identity: email3.data,
+      label: email3.data,
       plan: identity.plan,
-      secretReference,
       profilePath: null,
-      health: "ready",
-      enabled: true,
-      createdAt: now,
+      provider: "openai",
+      secretReference,
       updatedAt: now
     };
   } finally {
@@ -16977,13 +16981,13 @@ async function refreshCodexCredential(input) {
   return exclusive(input.reference, async () => {
     const current = await readCodexCredential(input.vault, input.reference);
     const response = await (input.fetchImplementation ?? fetch)(refreshEndpoint, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
         client_id: openAiClientId,
         grant_type: "refresh_token",
         refresh_token: current.tokens.refresh_token
       }),
+      headers: { "Content-Type": "application/json" },
+      method: "POST",
       signal: AbortSignal.timeout(7000)
     });
     if (response.status === 400 || response.status === 401) {
@@ -16995,13 +16999,13 @@ async function refreshCodexCredential(input) {
     const refreshed = RefreshResponseSchema.parse(await response.json());
     const updated = CodexAuthSchema.parse({
       ...current,
+      last_refresh: new Date().toISOString(),
       tokens: {
         ...current.tokens,
         access_token: refreshed.access_token,
-        refresh_token: refreshed.refresh_token ?? current.tokens.refresh_token,
-        id_token: refreshed.id_token ?? current.tokens.id_token
-      },
-      last_refresh: new Date().toISOString()
+        id_token: refreshed.id_token ?? current.tokens.id_token,
+        refresh_token: refreshed.refresh_token ?? current.tokens.refresh_token
+      }
     });
     const priorIdentity = codexIdentity(current);
     const updatedIdentity = codexIdentity(updated);
@@ -17019,9 +17023,9 @@ init_errors3();
 var usageEndpoint = "https://chatgpt.com/backend-api/wham/usage";
 var sampleCount = 3;
 var WindowSchema = exports_external.object({
-  used_percent: exports_external.number().min(0).max(100),
   limit_window_seconds: exports_external.number().nonnegative().optional(),
-  reset_at: exports_external.number().nonnegative().optional()
+  reset_at: exports_external.number().nonnegative().optional(),
+  used_percent: exports_external.number().min(0).max(100)
 }).passthrough();
 var LimitDetailsSchema = exports_external.object({
   allowed: exports_external.boolean().optional(),
@@ -17035,8 +17039,8 @@ var AdditionalLimitSchema = exports_external.object({
   rate_limit: LimitDetailsSchema.nullish()
 }).passthrough();
 var UsageResponseSchema = exports_external.object({
-  rate_limit: LimitDetailsSchema.nullish(),
   additional_rate_limits: exports_external.array(AdditionalLimitSchema).nullish(),
+  rate_limit: LimitDetailsSchema.nullish(),
   rate_limit_reached_type: exports_external.unknown().nullish()
 }).passthrough();
 function durationLabel(seconds, fallback) {
@@ -17057,10 +17061,10 @@ function toWindow(id, scope, fallback, window) {
   const duration3 = durationLabel(window.limit_window_seconds, fallback);
   return {
     id,
+    kind: "hard",
     label: scope === "Codex" ? duration3 : `${scope} \xB7 ${duration3}`,
-    usedPercent: window.used_percent,
     resetAt: window.reset_at === undefined ? null : new Date(window.reset_at * 1000).toISOString(),
-    kind: "hard"
+    usedPercent: window.used_percent
   };
 }
 function appendLimitWindows(windows, prefix, label, details) {
@@ -17100,11 +17104,11 @@ function normalizeResponse(accountId, body) {
   }
   return {
     accountId,
-    provider: "openai",
+    hardLimitReached: body.rate_limit?.limit_reached === true || body.rate_limit?.allowed === false || body.rate_limit_reached_type != null || (body.additional_rate_limits ?? []).some((additional) => additional.rate_limit?.limit_reached === true || additional.rate_limit?.allowed === false),
     observedAt: new Date().toISOString(),
+    provider: "openai",
     source: "codexUsageEndpoint",
-    windows,
-    hardLimitReached: body.rate_limit?.limit_reached === true || body.rate_limit?.allowed === false || body.rate_limit_reached_type != null || (body.additional_rate_limits ?? []).some((additional) => additional.rate_limit?.limit_reached === true || additional.rate_limit?.allowed === false)
+    windows
   };
 }
 function conservativeSnapshot(accountId, bodies) {
@@ -17124,9 +17128,9 @@ function conservativeSnapshot(accountId, bodies) {
   }
   return {
     ...head,
+    hardLimitReached: snapshots.some((snapshot) => snapshot.hardLimitReached),
     observedAt: new Date().toISOString(),
-    windows: [...windows.values()],
-    hardLimitReached: snapshots.some((snapshot) => snapshot.hardLimitReached)
+    windows: [...windows.values()]
   };
 }
 async function fetchUsageResponse(input) {
@@ -17152,7 +17156,7 @@ async function fetchUsageResponse(input) {
 async function fetchCodexUsage(input) {
   const identity = codexIdentity(input.credential);
   const fetchImplementation = input.fetchImplementation ?? fetch;
-  const bodies = await Promise.all(Array.from({ length: sampleCount }, () => fetchUsageResponse({ identity, credential: input.credential, fetchImplementation })));
+  const bodies = await Promise.all(Array.from({ length: sampleCount }, () => fetchUsageResponse({ credential: input.credential, fetchImplementation, identity })));
   return conservativeSnapshot(input.accountId, bodies);
 }
 
@@ -17187,9 +17191,9 @@ class OpenAiProviderAdapter {
         throw error51;
       }
       credential = await refreshCodexCredential({
+        fetchImplementation: this.#dependencies.fetchImplementation,
         reference: openAiAccount.secretReference,
-        vault: this.#vault,
-        fetchImplementation: this.#dependencies.fetchImplementation
+        vault: this.#vault
       });
       identity = codexIdentity(credential);
       return fetchCodexUsage({
@@ -17204,10 +17208,10 @@ class OpenAiProviderAdapter {
         ...openAiAccount,
         externalAccountId: identity.accountId,
         externalUserId: identity.userId,
-        plan: identity.plan ?? openAiAccount.plan ?? null,
-        label: email3.success ? email3.data : openAiAccount.label,
-        identity: email3.success ? email3.data : openAiAccount.identity,
         health: "ready",
+        identity: email3.success ? email3.data : openAiAccount.identity,
+        label: email3.success ? email3.data : openAiAccount.label,
+        plan: identity.plan ?? openAiAccount.plan ?? null,
         updatedAt: this.#dependencies.now().toISOString()
       },
       usage
@@ -17255,6 +17259,18 @@ function createUsageObserver(provider, contentType, onUsage) {
     }
   };
   return {
+    finish() {
+      if (!isSse && jsonBuffer.length > 0) {
+        consume(jsonBuffer);
+      }
+      if (saw && input + output > 0) {
+        onUsage({
+          inputTokens: input,
+          model: model && model.length > 0 ? model : null,
+          outputTokens: output
+        });
+      }
+    },
     push(chunk) {
       const text = decoder.decode(chunk, { stream: true });
       if (isSse) {
@@ -17276,32 +17292,20 @@ function createUsageObserver(provider, contentType, onUsage) {
       } else if (jsonBuffer.length < maxJson) {
         jsonBuffer += text;
       }
-    },
-    finish() {
-      if (!isSse && jsonBuffer.length > 0) {
-        consume(jsonBuffer);
-      }
-      if (saw && input + output > 0) {
-        onUsage({
-          model: model && model.length > 0 ? model : null,
-          inputTokens: input,
-          outputTokens: output
-        });
-      }
     }
   };
 }
 function observeStream(body, observer) {
   return body.pipeThrough(new TransformStream({
-    transform(chunk, controller) {
-      controller.enqueue(chunk);
+    flush() {
       try {
-        observer.push(chunk);
+        observer.finish();
       } catch {}
     },
-    flush() {
+    transform(chunk, controller) {
+      controller.enqueue(chunk);
       try {
-        observer.finish();
+        observer.push(chunk);
       } catch {}
     }
   }));
@@ -17347,9 +17351,9 @@ function passThrough(response) {
     headers.delete(header);
   }
   return new Response(response.body, {
+    headers,
     status: response.status,
-    statusText: response.statusText,
-    headers
+    statusText: response.statusText
   });
 }
 function createProxyHandler(options) {
@@ -17364,9 +17368,9 @@ function createProxyHandler(options) {
       }
       const body = request.method === "GET" || request.method === "HEAD" ? undefined : await request.arrayBuffer();
       const send = (injection2) => doFetch(`${injection2.baseUrl.replace(/\/$/, "")}${route.rest}${url2.search}`, {
-        method: request.method,
-        headers: forwardHeaders(request.headers, injection2),
         body,
+        headers: forwardHeaders(request.headers, injection2),
+        method: request.method,
         redirect: "manual",
         signal: request.signal
       });
@@ -17406,15 +17410,15 @@ function createProxyHandler(options) {
       if (options.record !== undefined && response.ok && forwarded.body !== null) {
         const observer = createUsageObserver(route.provider, response.headers.get("content-type") ?? "", (usage) => options.record?.({
           at: Date.now(),
-          provider: route.provider,
-          model: usage.model,
           inputTokens: usage.inputTokens,
-          outputTokens: usage.outputTokens
+          model: usage.model,
+          outputTokens: usage.outputTokens,
+          provider: route.provider
         }));
         return new Response(observeStream(forwarded.body, observer), {
+          headers: forwarded.headers,
           status: forwarded.status,
-          statusText: forwarded.statusText,
-          headers: forwarded.headers
+          statusText: forwarded.statusText
         });
       }
       return forwarded;
@@ -17424,10 +17428,10 @@ function createProxyHandler(options) {
 function startProxy(options) {
   const handler = createProxyHandler(options);
   const server = Bun.serve({
+    fetch: (request) => handler.handle(request),
     hostname: "127.0.0.1",
-    port: options.port ?? 0,
     idleTimeout: 0,
-    fetch: (request) => handler.handle(request)
+    port: options.port ?? 0
   });
   const port = server.port;
   if (port === undefined) {
@@ -17469,9 +17473,9 @@ function createRuntimeCredentialSource(dependencies) {
     const stale = expiry !== null && expiry - now() <= refreshMarginMilliseconds;
     if (forceRefresh || stale) {
       auth = await refreshCodexCredential({
+        fetchImplementation,
         reference: account.secretReference,
-        vault: dependencies.vault,
-        fetchImplementation
+        vault: dependencies.vault
       });
     }
     return {
@@ -17491,14 +17495,14 @@ function createRuntimeCredentialSource(dependencies) {
     const stale = credential.expiresAt - now() <= refreshMarginMilliseconds;
     if (forceRefresh || stale) {
       credential = await refreshClaudeProfile({
-        profilePath: account.profilePath,
-        credentialReader: reader
+        credentialReader: reader,
+        profilePath: account.profilePath
       });
     }
     return {
+      appendHeaders: { "anthropic-beta": "oauth-2025-04-20" },
       baseUrl: upstreamFor("anthropic"),
       headers: { authorization: `Bearer ${credential.accessToken}` },
-      appendHeaders: { "anthropic-beta": "oauth-2025-04-20" },
       stripHeaders: ["x-api-key"]
     };
   }
@@ -17515,10 +17519,10 @@ function createRuntimeCredentialSource(dependencies) {
     }
   }
   return {
-    resolve: (provider) => injectionFor(provider, false),
     refresh: async (provider) => {
       await injectionFor(provider, true);
-    }
+    },
+    resolve: (provider) => injectionFor(provider, false)
   };
 }
 
@@ -17527,15 +17531,14 @@ init_zod();
 init_domain();
 var RotationDecisionSchema = exports_external.discriminatedUnion("rotate", [
   exports_external.object({
+    reason: exports_external.enum(["threshold", "hardLimit"]),
     rotate: exports_external.literal(true),
     sourceAccountId: exports_external.uuid(),
-    targetAccountId: exports_external.uuid(),
     sourcePressure: exports_external.number().min(0).max(100),
-    targetPressure: exports_external.number().min(0).max(100),
-    reason: exports_external.enum(["threshold", "hardLimit"])
+    targetAccountId: exports_external.uuid(),
+    targetPressure: exports_external.number().min(0).max(100)
   }),
   exports_external.object({
-    rotate: exports_external.literal(false),
     reason: exports_external.enum([
       "disabled",
       "authorizationRequired",
@@ -17545,7 +17548,8 @@ var RotationDecisionSchema = exports_external.discriminatedUnion("rotate", [
       "belowThreshold",
       "minimumDwell",
       "noEligibleCandidate"
-    ])
+    ]),
+    rotate: exports_external.literal(false)
   })
 ]);
 function hardPressure(snapshot) {
@@ -17569,13 +17573,13 @@ function eligibleHealth(account) {
 function selectRotation(input) {
   const { policy } = input.state;
   if (!policy.enabled) {
-    return { rotate: false, reason: "disabled" };
+    return { reason: "disabled", rotate: false };
   }
   if (policy.authorization !== "confirmed") {
-    return { rotate: false, reason: "authorizationRequired" };
+    return { reason: "authorizationRequired", rotate: false };
   }
   if (input.state.activeAccountId === null) {
-    return { rotate: false, reason: "noActiveAccount" };
+    return { reason: "noActiveAccount", rotate: false };
   }
   const snapshotByAccount = new Map(input.usage.map((snapshot) => {
     const parsed = UsageSnapshotSchema.parse(snapshot);
@@ -17583,22 +17587,22 @@ function selectRotation(input) {
   }));
   const activeSnapshot = snapshotByAccount.get(input.state.activeAccountId);
   if (activeSnapshot === undefined) {
-    return { rotate: false, reason: "activeUsageUnknown" };
+    return { reason: "activeUsageUnknown", rotate: false };
   }
   if (!isFresh(activeSnapshot, input.now, policy.maximumSnapshotAgeMilliseconds)) {
-    return { rotate: false, reason: "activeUsageStale" };
+    return { reason: "activeUsageStale", rotate: false };
   }
   const activePressure = hardPressure(activeSnapshot);
   if (activePressure === null) {
-    return { rotate: false, reason: "activeUsageUnknown" };
+    return { reason: "activeUsageUnknown", rotate: false };
   }
   if (!activeSnapshot.hardLimitReached && activePressure < policy.thresholdPercent) {
-    return { rotate: false, reason: "belowThreshold" };
+    return { reason: "belowThreshold", rotate: false };
   }
   if (input.state.switchedAt !== null) {
     const dwell = input.now.getTime() - Date.parse(input.state.switchedAt);
     if (dwell < policy.minimumDwellMilliseconds) {
-      return { rotate: false, reason: "minimumDwell" };
+      return { reason: "minimumDwell", rotate: false };
     }
   }
   const targetCeiling = policy.thresholdPercent - policy.hysteresisPercent;
@@ -17615,15 +17619,15 @@ function selectRotation(input) {
   }).sort((left, right) => left.pressure - right.pressure || left.account.id.localeCompare(right.account.id));
   const target = candidates[0];
   if (target === undefined) {
-    return { rotate: false, reason: "noEligibleCandidate" };
+    return { reason: "noEligibleCandidate", rotate: false };
   }
   return {
+    reason: activeSnapshot.hardLimitReached ? "hardLimit" : "threshold",
     rotate: true,
     sourceAccountId: input.state.activeAccountId,
-    targetAccountId: target.account.id,
     sourcePressure: activePressure,
-    targetPressure: target.pressure,
-    reason: activeSnapshot.hardLimitReached ? "hardLimit" : "threshold"
+    targetAccountId: target.account.id,
+    targetPressure: target.pressure
   };
 }
 
@@ -17633,8 +17637,8 @@ function priceTokenTimeframe(aggregate) {
   let totalOutput = 0;
   let costTotal = 0;
   const byProvider = {
-    openai: { tokens: 0, costUsd: 0 },
-    anthropic: { tokens: 0, costUsd: 0 }
+    anthropic: { costUsd: 0, tokens: 0 },
+    openai: { costUsd: 0, tokens: 0 }
   };
   let top = null;
   for (const entry of aggregate.byModel) {
@@ -17652,16 +17656,16 @@ function priceTokenTimeframe(aggregate) {
   }
   const peakBucket = aggregate.buckets.reduce((max, value) => Math.max(max, value), 0);
   return {
-    key: aggregate.key,
-    buckets: aggregate.buckets,
     bucketMs: aggregate.bucketMs,
-    totalTokens: totalInput + totalOutput,
-    totalInput,
-    totalOutput,
+    buckets: aggregate.buckets,
+    byProvider,
     costUsd: costTotal,
+    key: aggregate.key,
     peakPerHour: peakBucket * (3600000 / aggregate.bucketMs),
     topModel: top?.model ?? null,
-    byProvider
+    totalInput,
+    totalOutput,
+    totalTokens: totalInput + totalOutput
   };
 }
 var defaultDependencies = {
@@ -17706,11 +17710,11 @@ class AccountManager {
     this.#vault = input.vault;
     this.#dependencies = { ...defaultDependencies, ...input.dependencies };
     this.#adapters = input.adapters ?? {
+      anthropic: new AnthropicProviderAdapter({ dependencies: this.#dependencies }),
       openai: new OpenAiProviderAdapter({
-        vault: input.vault,
-        dependencies: this.#dependencies
-      }),
-      anthropic: new AnthropicProviderAdapter({ dependencies: this.#dependencies })
+        dependencies: this.#dependencies,
+        vault: input.vault
+      })
     };
     if (this.#adapters.openai.provider !== "openai" || this.#adapters.anthropic.provider !== "anthropic") {
       throw new ApplicationError("PROVIDER_MISMATCH", "Injected provider adapters do not match their registry keys");
@@ -17722,12 +17726,11 @@ class AccountManager {
   async start() {
     this.#stopping = false;
     const source = createRuntimeCredentialSource({
+      fetchImplementation: this.#dependencies.fetchImplementation,
       store: { activeAccount: (provider) => this.activeAccount(provider) },
-      vault: this.#vault,
-      fetchImplementation: this.#dependencies.fetchImplementation
+      vault: this.#vault
     });
     this.#proxy = startProxy({
-      source,
       port: this.#paths.proxyPort,
       record: (event) => {
         try {
@@ -17736,7 +17739,8 @@ class AccountManager {
             accountId: this.activeAccount(event.provider)?.id ?? null
           });
         } catch {}
-      }
+      },
+      source
     });
     this.refreshAll().catch(() => {
       return;
@@ -17769,11 +17773,11 @@ class AccountManager {
     const snapshot = this.#store.dashboard();
     const nowMillis = this.#dependencies.now().getTime();
     return {
-      snapshot,
       history: snapshot.accounts.map((account) => ({
         accountId: account.id,
         windows: this.#store.usageHistory(account.id)
       })),
+      snapshot,
       tokens: {
         timeframes: this.#store.tokenAnalytics(nowMillis, TIMEFRAMES).map(priceTokenTimeframe)
       }
@@ -17801,10 +17805,10 @@ class AccountManager {
       if (state.activeAccountId === null) {
         this.commitActivation({
           provider: input.account.provider,
-          state,
+          reason: "first-account",
           sourceAccountId: null,
-          target: input.account,
-          reason: "first-account"
+          state,
+          target: input.account
         });
       }
     });
@@ -17813,9 +17817,9 @@ class AccountManager {
     const current = this.#store.findProviderState(input.provider).policy;
     const policy = AutomationPolicySchema.parse({
       ...current,
+      authorization: input.authorizationConfirmed ? "confirmed" : current.authorization,
       enabled: input.enabled,
-      thresholdPercent: input.thresholdPercent ?? current.thresholdPercent,
-      authorization: input.authorizationConfirmed ? "confirmed" : current.authorization
+      thresholdPercent: input.thresholdPercent ?? current.thresholdPercent
     });
     if (policy.enabled && policy.authorization !== "confirmed") {
       throw new ApplicationError("AUTHORIZATION_REQUIRED", "Automatic rotation requires explicit confirmation that your provider authorizes this use");
@@ -17854,10 +17858,10 @@ class AccountManager {
       }
       this.commitActivation({
         provider,
-        state,
+        reason,
         sourceAccountId: state.activeAccountId,
-        target,
-        reason
+        state,
+        target
       });
     });
   }
@@ -17907,9 +17911,9 @@ class AccountManager {
     const state = this.#store.findProviderState(provider);
     const decision = selectRotation({
       accounts: this.#store.listAccounts(provider),
-      usage: this.#store.listUsage(),
+      now: this.#dependencies.now(),
       state,
-      now: this.#dependencies.now()
+      usage: this.#store.listUsage()
     });
     if (decision.rotate) {
       await this.performSwitchForAutomation(provider, decision.targetAccountId, decision.reason);
@@ -17923,24 +17927,24 @@ class AccountManager {
     }
     this.commitActivation({
       provider,
-      state,
+      reason: `automatic:${reason}`,
       sourceAccountId: state.activeAccountId,
-      target,
-      reason: `automatic:${reason}`
+      state,
+      target
     });
   }
   commitActivation(input) {
     const now = this.#dependencies.now().toISOString();
     this.#store.commitSwitch(SwitchRecordSchema.parse({
+      createdAt: now,
+      generation: input.state.generation + 1,
       id: crypto.randomUUID(),
+      message: null,
+      phase: "committed",
       provider: input.provider,
+      reason: input.reason,
       sourceAccountId: input.sourceAccountId,
       targetAccountId: input.target.id,
-      phase: "committed",
-      reason: input.reason,
-      generation: input.state.generation + 1,
-      message: null,
-      createdAt: now,
       updatedAt: now
     }), {
       ...input.state,
@@ -17981,23 +17985,23 @@ class AccountManager {
 init_zod();
 var CommandResultSchema = exports_external.object({
   exitCode: exports_external.number().int(),
-  stdout: exports_external.string(),
-  stderr: exports_external.string()
+  stderr: exports_external.string(),
+  stdout: exports_external.string()
 });
 async function runCommand(command, options = {}) {
   const processHandle = Bun.spawn([...command], {
     cwd: options.cwd,
     env: { ...process.env, ...options.environment },
+    stderr: options.stderr ?? "pipe",
     stdin: options.stdin ?? "ignore",
-    stdout: options.stdout ?? "pipe",
-    stderr: options.stderr ?? "pipe"
+    stdout: options.stdout ?? "pipe"
   });
   const [exitCode, stdout, stderr] = await Promise.all([
     processHandle.exited,
     options.stdout === "inherit" ? Promise.resolve("") : new Response(processHandle.stdout).text(),
     options.stderr === "inherit" ? Promise.resolve("") : new Response(processHandle.stderr).text()
   ]);
-  return CommandResultSchema.parse({ exitCode, stdout, stderr });
+  return CommandResultSchema.parse({ exitCode, stderr, stdout });
 }
 
 // src/providers/codex/keychain.ts
@@ -18012,9 +18016,9 @@ function defaultKeychainCommandRunner() {
   return {
     async run(command, stdinText) {
       const processHandle = Bun.spawn([...command], {
+        stderr: "pipe",
         stdin: "pipe",
-        stdout: "pipe",
-        stderr: "pipe"
+        stdout: "pipe"
       });
       if (stdinText !== undefined) {
         processHandle.stdin.write(stdinText);
@@ -18025,7 +18029,7 @@ function defaultKeychainCommandRunner() {
         new Response(processHandle.stdout).text(),
         new Response(processHandle.stderr).text()
       ]);
-      return { exitCode, stdout, stderr };
+      return { exitCode, stderr, stdout };
     }
   };
 }
@@ -18120,6 +18124,11 @@ function createMacOsKeychainVault(service = defaultService, runner = defaultKeyc
       }
       return Buffer.from(chunks.join(""), "base64").toString("utf8");
     },
+    async remove(reference) {
+      requireSafeIdentifier("reference", reference);
+      await deleteItem(reference);
+      await deleteChunksFrom(reference, 0);
+    },
     async write(reference, value) {
       requireSafeIdentifier("reference", reference);
       const encoded = Buffer.from(value, "utf8").toString("base64");
@@ -18137,11 +18146,6 @@ function createMacOsKeychainVault(service = defaultService, runner = defaultKeyc
       }
       await writeItem(reference, Buffer.from(`${manifestPrefix}${chunkCount}`, "utf8").toString("base64"));
       await deleteChunksFrom(reference, chunkCount);
-    },
-    async remove(reference) {
-      requireSafeIdentifier("reference", reference);
-      await deleteItem(reference);
-      await deleteChunksFrom(reference, 0);
     }
   };
 }
@@ -18178,19 +18182,19 @@ function serialize(value) {
 }
 function initialProviderState(provider) {
   return ProviderStateSchema.parse({
-    provider,
     activeAccountId: null,
     generation: 0,
-    switchedAt: null,
     policy: {
-      provider,
+      authorization: "notConfirmed",
       enabled: false,
-      thresholdPercent: 95,
       hysteresisPercent: 5,
-      minimumDwellMilliseconds: 300000,
       maximumSnapshotAgeMilliseconds: 120000,
-      authorization: "notConfirmed"
-    }
+      minimumDwellMilliseconds: 300000,
+      provider,
+      thresholdPercent: 95
+    },
+    provider,
+    switchedAt: null
   });
 }
 function migrate(database) {
@@ -18375,9 +18379,9 @@ function createStateStore(databasePath) {
   }
   function usageHistory(accountId) {
     return database.query("SELECT window_id, label, points FROM usage_history WHERE account_id = ? ORDER BY window_id").all(accountId).map((row) => ({
-      windowId: row.window_id,
       label: row.label,
-      points: UsageHistoryPointSchema.array().parse(JSON.parse(row.points))
+      points: UsageHistoryPointSchema.array().parse(JSON.parse(row.points)),
+      windowId: row.window_id
     }));
   }
   function listProviderStates() {
@@ -18429,9 +18433,9 @@ function createStateStore(databasePath) {
   function dashboard() {
     return database.transaction(() => DashboardSnapshotSchema.parse({
       accounts: listAccounts(),
-      usage: listUsage(),
       providers: listProviderStates(),
-      sampledAt: new Date().toISOString()
+      sampledAt: new Date().toISOString(),
+      usage: listUsage()
     }))();
   }
   function recordTokenEvent(event) {
@@ -18451,46 +18455,46 @@ function createStateStore(databasePath) {
         buckets[index] = (buckets[index] ?? 0) + row.tokens;
       }
       const byModel = modelQuery.all(start, nowMillis).map((row) => ({
-        model: row.model ?? "unknown",
-        provider: row.provider,
         input: row.input,
-        output: row.output
+        model: row.model ?? "unknown",
+        output: row.output,
+        provider: row.provider
       }));
-      return { key, bucketMs, buckets, byModel };
+      return { bucketMs, buckets, byModel, key };
     });
   }
   return {
     close: () => database.close(),
-    recordTokenEvent,
-    tokenAnalytics,
-    listAccounts,
+    commitSwitch,
+    dashboard,
     findAccount,
-    saveAccount,
-    removeAccount,
-    listUsage,
+    findProviderState,
     findUsage,
-    saveUsage,
+    listAccounts,
     listProviderStates,
-    findProviderState,
-    saveProviderState,
-    saveAutomationPolicy,
     listSwitchRecords,
+    listUsage,
+    recordTokenEvent,
+    removeAccount,
+    saveAccount,
+    saveAutomationPolicy,
+    saveProviderState,
     saveSwitchRecord,
-    commitSwitch,
-    usageHistory,
-    dashboard
+    saveUsage,
+    tokenAnalytics,
+    usageHistory
   };
 }
 
 // src/ui.ts
 var ansi = {
-  reset: "\x1B[0m",
   bold: "\x1B[1m",
+  cyan: "\x1B[36m",
   dim: "\x1B[2m",
-  red: "\x1B[31m",
   green: "\x1B[32m",
-  yellow: "\x1B[33m",
-  cyan: "\x1B[36m"
+  red: "\x1B[31m",
+  reset: "\x1B[0m",
+  yellow: "\x1B[33m"
 };
 function createPainter(enabled) {
   return (value, ...codes) => enabled && codes.length > 0 ? `${codes.map((code) => ansi[code]).join("")}${value}${ansi.reset}` : value;
@@ -18784,8 +18788,8 @@ async function runDaemon(context) {
       });
       const server = await startManagerServer({
         manager,
-        socketPath: context.paths.managerSocket,
-        onStop: () => requestStop?.()
+        onStop: () => requestStop?.(),
+        socketPath: context.paths.managerSocket
       });
       const signalHandler = () => requestStop?.();
       process.once("SIGINT", signalHandler);
@@ -18803,7 +18807,7 @@ async function startDaemon(context) {
   if (await managerAvailable(context.paths.managerSocket)) {
     return;
   }
-  await mkdir4(context.paths.runtime, { recursive: true, mode: 448 });
+  await mkdir4(context.paths.runtime, { mode: 448, recursive: true });
   const entrypoint = process.argv[1];
   if (entrypoint === undefined) {
     throw new ApplicationError("ENTRYPOINT_MISSING", "Cannot locate the CLI entrypoint");
@@ -18839,9 +18843,9 @@ async function startDaemon(context) {
 }
 async function stopDaemon(context) {
   await managerRequest({
-    socketPath: context.paths.managerSocket,
     method: "manager/stop",
     schema: EmptyResultSchema,
+    socketPath: context.paths.managerSocket,
     timeoutMilliseconds: 1000
   });
   const deadline = Date.now() + 15000;
@@ -18881,14 +18885,14 @@ async function login(context, providerArgument) {
   const existing = context.store.listAccounts(provider).find((candidate) => candidate.externalAccountId !== null && candidate.externalAccountId === authenticated.externalAccountId);
   const account2 = existing === undefined ? authenticated : {
     ...authenticated,
-    id: existing.id,
+    createdAt: existing.createdAt,
     enabled: existing.enabled,
-    createdAt: existing.createdAt
+    id: existing.id
   };
   try {
     await requestAccountSave(context.paths.managerSocket, account2, {
-      secretReference: existing?.secretReference ?? null,
-      profilePath: existing?.profilePath ?? null
+      profilePath: existing?.profilePath ?? null,
+      secretReference: existing?.secretReference ?? null
     });
   } catch (error51) {
     await removeUnstoredAccount(authenticated);
@@ -18915,16 +18919,16 @@ function resolveAccount(store, provider, reference) {
   return account2;
 }
 var healthText = {
-  unchecked: "checking",
+  disabled: "disabled",
+  loginExpiring: "login expiring soon",
   ready: "ready",
+  reauthenticationRequired: "login required \u2014 tokenmaxx login",
   refreshDue: "refreshing",
   refreshing: "refreshing",
-  loginExpiring: "login expiring soon",
   scopeMissing: "missing a scope",
-  reauthenticationRequired: "login required \u2014 tokenmaxx login",
   temporarilyUnreachable: "provider unreachable",
-  usageRateLimited: "rate-limited",
-  disabled: "disabled"
+  unchecked: "checking",
+  usageRateLimited: "rate-limited"
 };
 function listAccounts(context) {
   const states = new Map(context.store.listProviderStates().map((state) => [state.provider, state]));
@@ -18985,15 +18989,15 @@ async function configureAutomation(context, arguments_) {
   let effectiveThreshold = thresholdPercent ?? 95;
   for (const provider of providers) {
     const state = await managerRequest({
-      socketPath: context.paths.managerSocket,
       method: "policy/set",
       params: {
-        provider,
+        authorizationConfirmed: mode === "on",
         enabled: mode === "on",
-        thresholdPercent,
-        authorizationConfirmed: mode === "on"
+        provider,
+        thresholdPercent
       },
-      schema: exports_external.object({ policy: exports_external.object({ thresholdPercent: exports_external.number() }) })
+      schema: exports_external.object({ policy: exports_external.object({ thresholdPercent: exports_external.number() }) }),
+      socketPath: context.paths.managerSocket
     });
     effectiveThreshold = state.policy.thresholdPercent;
   }
@@ -19081,8 +19085,8 @@ async function runCli(rawArguments) {
           ]);
           const now = process.env.TOKENMAXX_NOW ? Number(process.env.TOKENMAXX_NOW) : FIXTURE_NOW2;
           await runTuiDashboard2(context.paths.managerSocket, {
-            installed: process.env.TOKENMAXX_INSTALLED !== "false",
             fixture: buildScenario2(fixtureName, now),
+            installed: process.env.TOKENMAXX_INSTALLED !== "false",
             now
           });
           context.store.close();
@@ -19117,9 +19121,9 @@ async function runCli(rawArguments) {
       case "refresh":
         await ensureDaemon(context);
         await managerRequest({
-          socketPath: context.paths.managerSocket,
           method: "usage/refresh",
           schema: exports_external.unknown(),
+          socketPath: context.paths.managerSocket,
           timeoutMilliseconds: 60000
         });
         process.stdout.write(`Re-probed usage for every account.