wherdr 1.3.1 → 1.3.3

package/.output/server/chunks/nitro/nitro.mjs

@@ -19,10 +19,14 @@ import webpush from 'web-push';
 import os from 'node:os';
 import { spawn, execFile } from 'node:child_process';
 import net from 'node:net';
-import readline from 'node:readline';
 import fs$1 from 'node:fs/promises';
-import { fileURLToPath } from 'node:url';
+import readline from 'node:readline';
+import dns from 'node:dns';
+import { promisify } from 'node:util';
+import QRCode from 'qrcode-terminal/vendor/QRCode/index.js';
+import QRErrorCorrectLevel from 'qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel.js';
 import { verifyAuthenticationResponse, generateAuthenticationOptions, verifyRegistrationResponse, generateRegistrationOptions } from '@simplewebauthn/server';
+import { fileURLToPath } from 'node:url';
 
 crypto.webcrypto?.subtle || {};
 const randomUUID = () => {
@@ -5892,12 +5896,12 @@ function createRouter$1(options = {}) {
   }
   return {
     ctx,
-    lookup: (path) => lookup(ctx, normalizeTrailingSlash(path)),
+    lookup: (path) => lookup$1(ctx, normalizeTrailingSlash(path)),
     insert: (path, data) => insert(ctx, normalizeTrailingSlash(path), data),
     remove: (path) => remove(ctx, normalizeTrailingSlash(path))
   };
 }
-function lookup(ctx, path) {
+function lookup$1(ctx, path) {
   const staticPathNode = ctx.staticRoutesMap[path];
   if (staticPathNode) {
     return staticPathNode.data;
@@ -8286,7 +8290,7 @@ function createStorage(options = {}) {
     }
     context.watching = true;
     for (const mountpoint in context.mounts) {
-      context.unwatch[mountpoint] = await watch(
+      context.unwatch[mountpoint] = await watch$1(
         context.mounts[mountpoint],
         onChange,
         mountpoint
@@ -8582,7 +8586,7 @@ function createStorage(options = {}) {
       }
       context.mounts[base] = driver;
       if (context.watching) {
-        Promise.resolve(watch(driver, onChange, base)).then((unwatcher) => {
+        Promise.resolve(watch$1(driver, onChange, base)).then((unwatcher) => {
           context.unwatch[base] = unwatcher;
         }).catch(console.error);
       }
@@ -8629,7 +8633,7 @@ function createStorage(options = {}) {
   };
   return storage;
 }
-function watch(driver, onChange, base) {
+function watch$1(driver, onChange, base) {
   return driver.watch ? driver.watch((event, key) => onChange(event, base + key)) : () => {
   };
 }
@@ -8642,83 +8646,87 @@ async function dispose(driver) {
 const _assets = {
   ["scripts:build-nerd-font.py"]: {
     import: () => import('../raw/build-nerd-font.mjs').then(r => r.default || r),
-    meta: {"type":"text/plain; charset=utf-8","etag":"\"13aa-ys9YUI0kyQcBWrUDXjdBVLF8Z3E\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"text/plain; charset=utf-8","etag":"\"13aa-ys9YUI0kyQcBWrUDXjdBVLF8Z3E\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["scripts:build-terminal-font.py"]: {
     import: () => import('../raw/build-terminal-font.mjs').then(r => r.default || r),
-    meta: {"type":"text/plain; charset=utf-8","etag":"\"cf5-BDqHg2xDFu+6dg84HBWtyBtrEoU\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"text/plain; charset=utf-8","etag":"\"cf5-BDqHg2xDFu+6dg84HBWtyBtrEoU\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["scripts:bump-homebrew.sh"]: {
     import: () => import('../raw/bump-homebrew.mjs').then(r => r.default || r),
-    meta: {"type":"application/x-sh","etag":"\"61b-suAgb/6azMZO/UmEjog8x0wZsQA\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"application/x-sh","etag":"\"8b5-n/EiMEIUoHPuQl2XTJU0tSNn7FY\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["scripts:check-leaks.mjs"]: {
     import: () => import('../raw/check-leaks.mjs').then(r => r.default || r),
-    meta: {"type":"text/javascript; charset=utf-8","etag":"\"35b3-41HZueHfw7xuicx4q83qwdTEpbc\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"text/javascript; charset=utf-8","etag":"\"35b3-41HZueHfw7xuicx4q83qwdTEpbc\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["scripts:dev.wherdr.open.plist"]: {
     import: () => import('../raw/dev.wherdr.open.mjs').then(r => r.default || r),
-    meta: {"type":"text/plain; charset=utf-8","etag":"\"1de-12VO2xq63mciP26rEzRh3cGfEkI\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"text/plain; charset=utf-8","etag":"\"1de-12VO2xq63mciP26rEzRh3cGfEkI\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["scripts:docker-entrypoint.sh"]: {
     import: () => import('../raw/docker-entrypoint.mjs').then(r => r.default || r),
-    meta: {"type":"application/x-sh","etag":"\"3f3-8om3/mMriIIJYO+YcdXNJsv8tkI\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"application/x-sh","etag":"\"3f3-8om3/mMriIIJYO+YcdXNJsv8tkI\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["scripts:herdr-plugin.sh"]: {
     import: () => import('../raw/herdr-plugin.mjs').then(r => r.default || r),
-    meta: {"type":"application/x-sh","etag":"\"89ea-WMEExeYOqeXl5Lacbu/zP6mb8fY\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"application/x-sh","etag":"\"9b85-YfAcqPKGuMgKmGSVqEIuA91sAE4\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["scripts:install-claude-statusline.sh"]: {
     import: () => import('../raw/install-claude-statusline.mjs').then(r => r.default || r),
-    meta: {"type":"application/x-sh","etag":"\"db6-p7KGlvbZ+Qjt+JiT5yVtU4w3kfg\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"application/x-sh","etag":"\"db6-p7KGlvbZ+Qjt+JiT5yVtU4w3kfg\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["scripts:install-host-open.sh"]: {
     import: () => import('../raw/install-host-open.mjs').then(r => r.default || r),
-    meta: {"type":"application/x-sh","etag":"\"103a-/zplHeQSS471/Vz3quwajHmzFQs\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"application/x-sh","etag":"\"103a-/zplHeQSS471/Vz3quwajHmzFQs\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["scripts:pack-output.mjs"]: {
     import: () => import('../raw/pack-output.mjs').then(r => r.default || r),
-    meta: {"type":"text/javascript; charset=utf-8","etag":"\"54b-eU4eNNIxIecG1kwaLdtiTYODSSI\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"text/javascript; charset=utf-8","etag":"\"54b-eU4eNNIxIecG1kwaLdtiTYODSSI\"","mtime":"2026-10-12T02:42:41.115Z"}
+  },
+  ["scripts:release-ready.mjs"]: {
+    import: () => import('../raw/release-ready.mjs').then(r => r.default || r),
+    meta: {"type":"text/javascript; charset=utf-8","etag":"\"a44-ceu/5BQO5TUWzE/HNW2C/LvdCqw\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["scripts:reveal.sh"]: {
     import: () => import('../raw/reveal.mjs').then(r => r.default || r),
-    meta: {"type":"application/x-sh","etag":"\"72e-h/LTEU7exXdiR3GKqhj71UOwAqQ\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"application/x-sh","etag":"\"72e-h/LTEU7exXdiR3GKqhj71UOwAqQ\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["scripts:wherdr-open.sh"]: {
     import: () => import('../raw/wherdr-open.mjs').then(r => r.default || r),
-    meta: {"type":"application/x-sh","etag":"\"b5b-U5OyQk3hziU9KiUyB/1FT5TkOxk\"","mtime":"2026-10-08T11:43:41.732Z"}
+    meta: {"type":"application/x-sh","etag":"\"b5b-U5OyQk3hziU9KiUyB/1FT5TkOxk\"","mtime":"2026-10-12T02:42:41.115Z"}
   },
   ["server:branding:favicon.ico"]: {
     import: () => import('../raw/favicon.mjs').then(r => r.default || r),
-    meta: {"type":"image/vnd.microsoft.icon","etag":"\"3aee-Oem7XTWv+9HEwv9u/3K5QcIjS3E\"","mtime":"2026-10-08T11:43:41.734Z"}
+    meta: {"type":"image/vnd.microsoft.icon","etag":"\"3aee-Oem7XTWv+9HEwv9u/3K5QcIjS3E\"","mtime":"2026-10-12T02:42:41.120Z"}
   },
   ["server:branding:icons:apple-touch-icon.png"]: {
     import: () => import('../raw/apple-touch-icon.mjs').then(r => r.default || r),
-    meta: {"type":"image/png","etag":"\"1f8-AVRrBnAhalXrGkFPGdvl0fM7DH8\"","mtime":"2026-10-08T11:43:41.734Z"}
+    meta: {"type":"image/png","etag":"\"1f8-AVRrBnAhalXrGkFPGdvl0fM7DH8\"","mtime":"2026-10-12T02:42:41.120Z"}
   },
   ["server:branding:icons:favicon-32.png"]: {
     import: () => import('../raw/favicon-32.mjs').then(r => r.default || r),
-    meta: {"type":"image/png","etag":"\"a3-hAEc+Ymq1aYS3kFLyZK/H18Pge8\"","mtime":"2026-10-08T11:43:41.734Z"}
+    meta: {"type":"image/png","etag":"\"a3-hAEc+Ymq1aYS3kFLyZK/H18Pge8\"","mtime":"2026-10-12T02:42:41.120Z"}
   },
   ["server:branding:icons:icon-192.png"]: {
     import: () => import('../raw/icon-192.mjs').then(r => r.default || r),
-    meta: {"type":"image/png","etag":"\"222-kioUoPaSCUaRhKKWw0PRtFbAhxk\"","mtime":"2026-10-08T11:43:41.734Z"}
+    meta: {"type":"image/png","etag":"\"222-kioUoPaSCUaRhKKWw0PRtFbAhxk\"","mtime":"2026-10-12T02:42:41.120Z"}
   },
   ["server:branding:icons:icon-512-maskable.png"]: {
     import: () => import('../raw/icon-512-maskable.mjs').then(r => r.default || r),
-    meta: {"type":"image/png","etag":"\"84b-mCXgbBkXk7sqOhmJ8hjp80SN3Qk\"","mtime":"2026-10-08T11:43:41.734Z"}
+    meta: {"type":"image/png","etag":"\"84b-mCXgbBkXk7sqOhmJ8hjp80SN3Qk\"","mtime":"2026-10-12T02:42:41.120Z"}
   },
   ["server:branding:icons:icon-512.png"]: {
     import: () => import('../raw/icon-512.mjs').then(r => r.default || r),
-    meta: {"type":"image/png","etag":"\"8fc-ZwRMqAqQZeLLx4iNTZxs09C4Q1I\"","mtime":"2026-10-08T11:43:41.734Z"}
+    meta: {"type":"image/png","etag":"\"8fc-ZwRMqAqQZeLLx4iNTZxs09C4Q1I\"","mtime":"2026-10-12T02:42:41.120Z"}
   },
   ["server:branding:icons:icon-maskable.svg"]: {
     import: () => import('../raw/icon-maskable.mjs').then(r => r.default || r),
-    meta: {"type":"image/svg+xml","etag":"\"4a1-7XtnuN5ZOwiwIjpgpj+/Rg9LssY\"","mtime":"2026-10-08T11:43:41.734Z"}
+    meta: {"type":"image/svg+xml","etag":"\"4a1-7XtnuN5ZOwiwIjpgpj+/Rg9LssY\"","mtime":"2026-10-12T02:42:41.120Z"}
   },
   ["server:branding:icons:icon.svg"]: {
     import: () => import('../raw/icon.mjs').then(r => r.default || r),
-    meta: {"type":"image/svg+xml","etag":"\"49c-O1XxkWwKTf6VBoC0i4TEPdGPsCw\"","mtime":"2026-10-08T11:43:41.734Z"}
+    meta: {"type":"image/svg+xml","etag":"\"49c-O1XxkWwKTf6VBoC0i4TEPdGPsCw\"","mtime":"2026-10-12T02:42:41.120Z"}
   }
 };
 
@@ -9621,7 +9629,7 @@ function _expandFromEnv(value) {
 const _inlineRuntimeConfig = {
   "app": {
     "baseURL": "/",
-    "buildId": "6466b0ab-7935-460c-abdf-2ea632dae6d0",
+    "buildId": "c735b6c0-1bd0-47d7-a208-d310f0a06287",
     "buildAssetsDir": "/_nuxt/",
     "cdnURL": ""
   },
@@ -10197,6 +10205,7 @@ const HERDR_CHILD_ENV = Object.fromEntries(
 const AGENT_KINDS = (env.AGENT_KINDS || "pi,claude,codex,gemini,cursor,devin,agy,cline,omp,mastracode,opencode,copilot,kimi,kiro,droid,amp,grok,hermes,kilo,qodercli,qwen,letta,maki,muse").split(",").map((s) => s.trim()).filter(Boolean);
 const APP_URL_FILE = path$1.join(DATA_DIR, "app-url.json");
 const ENV_APP_URL = /^https:\/\//i.test(env.APP_URL || "") ? env.APP_URL : "";
+const BOOT_APP_URL = env.APP_URL || "";
 function savedAppUrl() {
   var _a;
   try {
@@ -10209,8 +10218,13 @@ function savedAppUrl() {
 if (!ENV_APP_URL && savedAppUrl()) env.APP_URL = savedAppUrl();
 const appUrl = () => env.APP_URL || "mailto:herdr-web@localhost";
 const HOST_LABEL = (env.HOST_LABEL || os.hostname()).trim().slice(0, 40);
+function machineLabel(tailnetName2, fallback = HOST_LABEL, containerName = IN_DOCKER && !(env.HOST_LABEL || "").trim()) {
+  const short = (tailnetName2 || "").split(".")[0].trim().slice(0, 40);
+  return containerName && short ? short : fallback;
+}
 const PASSKEY_USER = (env.PASSKEY_USER || "wherdr").trim().slice(0, 64);
 const POLL_MS = Number(env.POLL_MS || 1e3);
+const TAILNET_REFRESH_MS = Number(env.TAILNET_REFRESH_MS || 3e4);
 const NOTIFY_SETTLE_MS = Number(env.NOTIFY_SETTLE_MS || 4e3);
 const UPLOAD_DIR = env.UPLOAD_DIR || path$1.join(HOME, ".cache/herdr-web/uploads");
 const UPLOAD_TTL_MS = 7 * 864e5;
@@ -10542,20 +10556,20 @@ function herdrSock(path, method, params = {}, timeoutMs = 15e3) {
     sock.on("close", () => finish(new HerdrError("closed", "Herdr connection closed without a response")));
   });
 }
-async function agentPrompt(target, text) {
+async function agentPrompt(target2, text) {
   try {
-    await herdr("agent.prompt", { target, text });
+    await herdr("agent.prompt", { target: target2, text });
   } catch (e) {
     if (!(e instanceof HerdrError) || e.code !== "agent_not_ready") throw e;
     try {
-      await herdr("agent.get", { target });
+      await herdr("agent.get", { target: target2 });
     } catch {
       throw e;
     }
-    await herdr("agent.prompt", { target, text });
+    await herdr("agent.prompt", { target: target2, text });
   }
 }
-const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const sleep$1 = (ms) => new Promise((r) => setTimeout(r, ms));
 
 var __defProp$5 = Object.defineProperty;
 var __defNormalProp$5 = (obj, key, value) => key in obj ? __defProp$5(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
@@ -10707,7 +10721,7 @@ class SessionGate {
   stats() {
     return { execs: this.execs, streams: this.streams, queued: this.waiting.length, peak: this.peak, refusals: this.refusals };
   }
-  // A long-lived session (terminal, mirror) opens; call the result when it closes.
+  // A long-lived session (terminal) opens; call the result when it closes.
   openStream() {
     this.streams++;
     this.track();
@@ -12835,6 +12849,61 @@ async function ompCommandTemplates(fs, home) {
   return out;
 }
 
+const PASTE_MIN_LINES = 12;
+const PASTE_MIN_CHARS = 1500;
+const lineCount = (s) => s ? s.split("\n").length : 0;
+const isLongPaste = (s) => {
+  const t = s.trim();
+  return lineCount(t) > PASTE_MIN_LINES || t.length > PASTE_MIN_CHARS;
+};
+const BLOCK = /<pasted_content(?:\s[^>]*)?>\n?([\s\S]*?)\n?<\/pasted_content(?:\s[^>]*)?>/g;
+function pastedBlocks(raw) {
+  if (!raw.includes("<pasted_content")) return [];
+  if (!raw.replace(BLOCK, "").replace(/\[Image #\d+[^\]]*\]/g, "").trim()) return [];
+  return [...raw.matchAll(BLOCK)].map((m) => m[1].trim()).filter(isLongPaste);
+}
+const QUEUED_CHARS = 4e3;
+const cutShort = (text) => text.endsWith("\u2026") || text.length === QUEUED_CHARS;
+function cut(text, block, open) {
+  const body = open ? text.replace(/…$/, "") : null;
+  let at = text.indexOf(block);
+  let end = at + block.length;
+  let part = block;
+  if (at < 0) {
+    if (body === null) return null;
+    at = body.indexOf(block.slice(0, 200));
+    if (at < 0 || !block.startsWith(body.slice(at))) return null;
+    part = body.slice(at).trimEnd();
+    if (!isLongPaste(part)) return null;
+    end = text.length;
+  }
+  const short = body !== null && end >= body.trimEnd().length;
+  if (short) end = text.length;
+  return { rest: (text.slice(0, at).replace(/\s+$/, "") + "\n" + text.slice(end).replace(/^\s+/, "")).trim(), part, short };
+}
+function splitPasted(text, listed = [], known = [], whole = false) {
+  let rest = text;
+  const pastes = [];
+  const longKnown = known.filter(isLongPaste).sort((a, b) => b.length - a.length);
+  let open = cutShort(text);
+  const take = (block) => {
+    const r = cut(rest, block, open);
+    if (r === null) return;
+    rest = r.rest;
+    if (r.short) open = false;
+    const sent = whole && r.short ? longKnown.filter((k) => k.startsWith(r.part)) : [];
+    pastes.push(sent.length === 1 ? sent[0] : r.part);
+  };
+  for (const b of listed) {
+    if (longKnown.some((k) => k !== b && b.includes(k))) continue;
+    take(b);
+  }
+  for (const k of longKnown) take(k);
+  if (!pastes.length) return { text, pastes };
+  pastes.sort((a, b) => text.indexOf(a.slice(0, 200)) - text.indexOf(b.slice(0, 200)));
+  return { text: rest, pastes };
+}
+
 const WINDOW_BYTES = 2 * 1024 * 1024;
 const MAX_READ_BYTES = 24 * 1024 * 1024;
 const PAGE_ITEMS = 120;
@@ -12853,6 +12922,10 @@ function humanText(t) {
   if (u !== s) return u;
   return isNoise(s) ? null : s;
 }
+const pastedOf = (...parts) => {
+  const b = parts.flatMap(pastedBlocks).map((s) => clip(s));
+  return b.length ? { pasted: b } : {};
+};
 const normMsg = (t) => stripImageTags(t).replace(/\s+/g, " ").trim().toLowerCase();
 function sameMsg(queued, said) {
   const q = normMsg(queued).slice(0, 60);
@@ -13030,10 +13103,11 @@ function parseClaude(lines, home = "") {
     const ts = d.timestamp || null;
     if (d.type === "attachment" && d.attachment && d.attachment.type === "queued_command" && d.attachment.commandMode === "prompt" && (d.attachment.origin || {}).kind === "human") {
       const parts = Array.isArray(d.attachment.prompt) ? d.attachment.prompt : [{ type: "text", text: String(d.attachment.prompt || "") }];
-      const text = stripImageTags(unwrapPasted(parts.filter((p) => p.type === "text").map((p) => p.text).join("\n")));
+      const texts = parts.filter((p) => p.type === "text").map((p) => String(p.text || ""));
+      const text = stripImageTags(unwrapPasted(texts.join("\n")));
       const images = parts.filter((p) => p.type === "image").length;
       if (text || images) {
-        items.push({ role: "user", text: clip(text), images, ref: images ? ref : void 0, ts: d.attachment.timestamp || ts });
+        items.push({ role: "user", text: clip(text), images, ref: images ? ref : void 0, ts: d.attachment.timestamp || ts, ...pastedOf(...texts) });
         pendingCmd = null;
         said(text, d.attachment.timestamp || ts, images);
       }
@@ -13084,7 +13158,7 @@ function parseClaude(lines, home = "") {
         } else {
           const text2 = humanText(content);
           if (text2) {
-            items.push({ role: "user", text: clip(text2), ts });
+            items.push({ role: "user", text: clip(text2), ts, ...pastedOf(content) });
             pendingCmd = null;
             said(text2, ts);
             noteSaid(d);
@@ -13094,6 +13168,7 @@ function parseClaude(lines, home = "") {
       }
       if (!Array.isArray(content)) continue;
       let text = "";
+      const raw = [];
       let images = 0;
       let toolImages = content.filter((p) => p && p.type === "image").length;
       for (const part of content) {
@@ -13111,12 +13186,13 @@ function parseClaude(lines, home = "") {
           if (special(String(part.text || ""), ts)) continue;
           const t = humanText(part.text);
           if (t === null) continue;
+          raw.push(String(part.text || ""));
           if (/^\[Request interrupted/.test(t)) items.push({ role: "system", text: "Interrupted", ts });
           else text += (text ? "\n" : "") + unwrapPasted(t.replace(/\[Image #\d+\]\s*/g, ""));
         } else if (part.type === "image") images++;
       }
       if (text.trim() || images) {
-        items.push({ role: "user", text: clip(text.trim()), images, ref: images ? ref : void 0, ts });
+        items.push({ role: "user", text: clip(text.trim()), images, ref: images ? ref : void 0, ts, ...pastedOf(...raw) });
         pendingCmd = null;
         said(text, ts, images);
         noteSaid(d);
@@ -13651,7 +13727,7 @@ function createTranscripts({ home, herdr: herdr2, fs = localFs }) {
     return { start, items, queue: queue || [] };
   }
   async function tail(file, kind, size, from) {
-    const key = `${file}|${from}`;
+    const key = `${file}|${kind}|${from}`;
     const c = parseCache.get(key);
     if (c && c.size === size) return c.r;
     let r;
@@ -13688,15 +13764,16 @@ function createTranscripts({ home, herdr: herdr2, fs = localFs }) {
     }
     const fileId = path$1.basename(loc.file);
     const base = { available: true, file: fileId, session: loc.session, guessed: Boolean(loc.guessed) };
-    if (pane.agent === "omp") await refreshOmpTemplates();
+    const kind = transcriptKind(loc.file) || pane.agent;
+    if (kind === "omp") await refreshOmpTemplates();
     if (opts.before !== null && opts.before !== void 0) {
-      const r2 = await readBackwards(loc.file, Math.min(opts.before, st.size), pane.agent);
+      const r2 = await readBackwards(loc.file, Math.min(opts.before, st.size), kind);
       return { ...base, older: true, items: r2.items, start: r2.start };
     }
     const from = opts.from === void 0 ? null : opts.from;
     const token = `${fileId}:${st.size}:${from}`;
     if (opts.since && opts.since === token) return { ...base, unchanged: true, token };
-    const r = await tail(loc.file, pane.agent, st.size, from);
+    const r = await tail(loc.file, kind, st.size, from);
     return { ...base, token, items: r.items, start: r.start, queue: r.queue || [] };
   }
   async function preview(pane) {
@@ -13964,14 +14041,25 @@ var __defNormalProp$3 = (obj, key, value) => key in obj ? __defProp$3(obj, key,
 var __publicField$3 = (obj, key, value) => __defNormalProp$3(obj, typeof key !== "symbol" ? key + "" : key, value);
 const fsp$3 = fs.promises;
 const LOCAL_LABEL_FILE = path$1.join(DATA_DIR, "machine-label.txt");
-function readLocalLabel() {
+function renamedLabel() {
   try {
-    return fs.readFileSync(LOCAL_LABEL_FILE, "utf8").trim().slice(0, 40) || HOST_LABEL;
+    return fs.readFileSync(LOCAL_LABEL_FILE, "utf8").trim().slice(0, 40);
   } catch {
-    return HOST_LABEL;
+    return "";
   }
 }
 const localMachineLabel = () => localMachine.label;
+let tailnetLabel = "";
+function adoptTailnetName(name) {
+  const label = machineLabel(name);
+  if (label === HOST_LABEL || label === tailnetLabel) return;
+  tailnetLabel = label;
+  if (renamedLabel() || localMachine.label === label) return;
+  localMachine.label = label;
+  for (const other of sessions.values()) if (!(other instanceof RemoteMachine)) other.label = label;
+  log(`machine name: ${label} (from Tailscale)`);
+  changed();
+}
 function localOs() {
   const p = os.platform();
   return p === "darwin" ? "Darwin" : p === "linux" ? "Linux" : p;
@@ -13979,7 +14067,7 @@ function localOs() {
 const localMachine = {
   key: LOCAL,
   profileId: null,
-  label: readLocalLabel(),
+  label: renamedLabel() || HOST_LABEL,
   local: true,
   target: null,
   session: HERDR_SESSION || "default",
@@ -14015,7 +14103,7 @@ function localMachineId() {
   }
   return selfId;
 }
-const selfNames = () => [HOST_LABEL, os.hostname(), ...SELF_HOSTS].filter(Boolean);
+const selfNames = () => [HOST_LABEL, os.hostname(), tailnetLabel, ...SELF_HOSTS].filter(Boolean);
 class SkipMachine extends Error {
 }
 const PROBE_SCRIPT = `echo "home=$HOME"
@@ -14168,7 +14256,7 @@ ${cmd}`;
       child.stdin.end(opts.input || void 0);
     });
   }
-  // Long-lived session (terminal, mirror): counted in the budget, never queued.
+  // Long-lived session (terminal): counted in the budget, never queued.
   spawnHerdr(args) {
     const sess = this.session && this.session !== "default" ? ["--session", this.session] : [];
     const cmd = `exec ${[this.bin || "herdr", ...sess, ...args].map(shq).join(" ")}`;
@@ -14657,16 +14745,6 @@ function splitPath(id) {
 }
 const PANE_DIRECTIONS = ["left", "right", "up", "down"];
 
-function mirrorSize(o) {
-  var _a, _b;
-  const clamp = (v, lo, hi) => Math.min(hi, Math.max(lo, Math.round(v)));
-  const longest = Math.max(0, ...String(o.text || "").split("\n").map((l) => [...l.replace(/\s+$/, "")].length));
-  return {
-    cols: clamp(Math.max(longest, ((_a = o.rect) == null ? void 0 : _a.width) || 0, 20), 20, 300),
-    rows: clamp(o.rows || ((_b = o.rect) == null ? void 0 : _b.height) || 24, 5, 200)
-  };
-}
-
 const SLUG$1 = /^[a-z0-9][a-z0-9._-]*$/i;
 const validProject = (v) => typeof v === "string" && SLUG$1.test(v.trim()) ? v.trim() : void 0;
 function projectToken(tokens) {
@@ -14689,6 +14767,16 @@ function projectOf(p) {
 function isCoordinator(p) {
   return Boolean(p.agent && projectOf(p) && !isProjectThread(p));
 }
+function pickCoordinator(panes, slug, machine) {
+  const key = slug.toLowerCase();
+  const rank = (p) => (0) + (norm$4(p.cwd).toLowerCase().endsWith(`/.herdr-projects/${key}`) ? 0 : 1);
+  let best = null;
+  for (const p of panes) {
+    if (!isCoordinator(p) || projectOf(p).toLowerCase() !== key) continue;
+    if (!best || rank(p) < rank(best)) best = p;
+  }
+  return best;
+}
 
 function cleanLabel(label) {
   return (label != null ? label : "").replace(/[\u200B-\u200D\u2060\uFEFF]/g, "").replace(/[\u2800\s]+/g, " ").trim();
@@ -14833,7 +14921,7 @@ function foregroundCommand(info) {
 const SCREEN_MS$1 = 3e3;
 function keepReading(c, rev, strict, watch, now) {
   if (!c || c.rev !== rev || c.strict !== strict) return false;
-  const live = watch || !strict || Boolean(c.choices || c.screen || c.menu);
+  const live = watch || !strict && !c.usageLimit || Boolean(c.choices || c.screen || c.menu || c.interaction === "terminal");
   return !(live && now - c.at >= SCREEN_MS$1);
 }
 
@@ -15202,6 +15290,65 @@ function clickMovesOnly(menu) {
   return Boolean(enter && !/^(?:select|confirm|choose|open|resume|continue)$/i.test(enter.label.trim()));
 }
 
+function parseUsageLimit(text, agent) {
+  var _a, _b;
+  if (agent !== "claude") return null;
+  const lines = text.replace(/\x1b\[[0-9;?]*[ -/]*[@-~]|\r/g, "").split("\n");
+  const field = lines.findLastIndex((l, i) => /^\s*❯(?:\s|$)/.test(l) && /^\s*─{3,}/.test(lines[i - 1] || ""));
+  if (field < 0) return null;
+  const rule = lines.findIndex((l, i) => i > field && /^\s*─{3,}/.test(l));
+  if (rule < 0) return null;
+  const tail = lines.slice(rule + 1);
+  if (tail.length > 10 || tail.some((l) => /[╭┌]─|\benter to (?:select|confirm)\b|^\s*[❯›]\s*\d+\./i.test(l))) return null;
+  const footer = tail.join("\n");
+  const limit = footer.match(/^\s*(?:⚠\s*)?Usage limit reached(?:\s*·\s*limit resets ([^\n]+))?\s*$/m);
+  if (!limit) return null;
+  const resume = footer.match(/^\s*Continuing automatically (.+?)\s*·\s*esc to cancel\b/im);
+  return {
+    resets: ((_a = limit[1]) == null ? void 0 : _a.trim()) || ((_b = resume == null ? void 0 : resume[1]) == null ? void 0 : _b.trim()) || null,
+    automatic: Boolean(resume),
+    credits: /\/usage-credits to continue now\b/.test(footer),
+    resetLink: /Use your limit reset to reset it now: clau\.de\/reset\b/.test(lines.slice(Math.max(0, field - 16), field).join("\n"))
+  };
+}
+
+function terminalException(text) {
+  var _a;
+  const lines = text.trimEnd().split("\n");
+  const at = lines.findLastIndex((l) => /^\s*(?:Agent Command Center|Usage)\s*$/.test(l));
+  if (at < 0) return false;
+  const body = lines.slice(at + 1).filter((l) => l.trim());
+  const legend = (_a = body.pop()) == null ? void 0 : _a.trim();
+  if (lines[at].trim() === "Agent Command Center") {
+    return legend === "Use arrows to navigate, Enter to open, Escape to return." && body.some((l) => /^\s*›\s+\S/.test(l)) && body.every((l) => /^(?:›\s+)?\S.* {2,}\S/.test(l.trim()));
+  }
+  return legend === "enter open \xB7 esc back" && body.length === 2 && /^[ \t›]*1\. View analytics {2,}Usage history[ \t]*$/.test(body[0]) && /^[ \t›]*2\. Redeem reset {2,}Check availability[ \t]*$/.test(body[1]);
+}
+function usesTerminalException(o) {
+  return o.agent === "codex" && o.status !== "unknown" && o.status !== "working" && terminalException(o.text);
+}
+function confirmedInput(text) {
+  const lines = text.trimEnd().split("\n");
+  const at = lines.findLastIndex((l) => /^\s*[❯›](?:\s|$)/.test(l) || /^!(?:\s|$)/.test(l) || /^╰─(?:\s|$)/.test(l));
+  if (at < 0) return false;
+  const line = lines[at];
+  const below = lines.slice(at + 1).join("\n");
+  if (/\b(?:enter|esc|escape)\s+(?:to\s+)?(?:select|open|back|cancel|confirm|close)\b/i.test(below)) return false;
+  if (/^\s*[❯›]\s+\d{1,2}\.\s/.test(line)) return false;
+  if (/^╰─(?:\s|$)/.test(line)) return true;
+  if (/^\s*›(?:\s|$)/.test(line)) return /for shortcuts|context left|\b(?:gpt-[\w.-]+|o[1-9](?:-[\w.-]+)?)\b.*·/i.test(below);
+  return /^\s*─{3,}/.test(lines[at - 1] || "");
+}
+function classifyScreen(o) {
+  if (o.status === "working") return "working";
+  if (usesTerminalException(o)) return "terminal";
+  if (o.status !== "unknown" && parseUsageLimit(o.text, o.agent)) return "native";
+  if (o.choices || o.menu || o.screen || o.settings) return "native";
+  if (o.status === "unknown" || !hasTranscript(o.agent) || !o.text.trim()) return "unknown";
+  if (confirmedInput(o.text)) return "input";
+  return "terminal";
+}
+
 const GLYPHS = "\xB7\u2722\u2733\u2736\u273B\u273D\u273A\u2739\u2737\u2738*\u2217";
 const LINE_RE = new RegExp(`^([${GLYPHS}])\\s+(\\p{L}[\\p{L}'\u2019\\-]*(?: \\p{L}[\\p{L}'\u2019\\-]*){0,3})(?:\u2026|\\.\\.\\.)(?:\\s+\\((.*)\\))?\\s*$`, "u");
 const RULE_RE$1 = /^\s*[─━]{8,}\s*$/;
@@ -15434,20 +15581,28 @@ function checkQueue(list, status, now, menu = true) {
   }
   return changed;
 }
+function giveBackHeld(list) {
+  for (const q of list || []) if (q.held) {
+    q.failed = true;
+    q.back = true;
+  }
+}
+const leftForGood = (p, before) => !p.agent && !p.leaving && Boolean(before == null ? void 0 : before.leaving);
 const publicEntry = (q) => ({
   id: q.id,
   text: q.text,
   at: q.at,
   ...q.held && !q.failed ? { state: "held" } : {},
   ...q.failed ? { state: "failed" } : {},
-  ...(q.held || q.failed) && q.busy ? { reason: "busy" } : q.failed && q.noInput ? { reason: "no_input" } : {}
+  ...(q.held || q.failed) && q.busy ? { reason: "busy" } : q.failed && q.noInput ? { reason: "no_input" } : {},
+  ...q.back ? { back: true } : {}
 });
 function loadQueued(raw, now) {
   if (!raw || typeof raw !== "object") return [];
   const out = [];
   for (const [pane, list] of Object.entries(raw)) {
     if (!Array.isArray(list)) continue;
-    const ok = list.filter((q) => Boolean(q) && typeof q.id === "string" && typeof q.text === "string" && typeof q.at === "number" && now - q.at < QUEUED_TTL_MS).map((q) => ({ id: q.id, text: q.text, at: q.at, ...q.held ? { held: true } : {}, ...q.failed ? { failed: true } : {}, ...q.busy ? { busy: true } : {} }));
+    const ok = list.filter((q) => Boolean(q) && typeof q.id === "string" && typeof q.text === "string" && typeof q.at === "number" && now - q.at < QUEUED_TTL_MS).map((q) => ({ id: q.id, text: q.text, at: q.at, ...q.held ? { held: true } : {}, ...q.failed ? { failed: true } : {}, ...q.busy ? { busy: true } : {}, ...q.back ? { back: true } : {} }));
     if (ok.length) out.push([pane, ok]);
   }
   return out;
@@ -15760,6 +15915,114 @@ async function interruptAgent(d, p) {
   return res;
 }
 
+const PASTES_MAX = 100;
+const PASTES_MAX_CHARS = 2e6;
+const PASTES_TTL_MS = 30 * 864e5;
+const live = (p, now) => now - p.at < PASTES_TTL_MS;
+const PER_MESSAGE = 20;
+function pastesAt(text, ranges) {
+  if (!Array.isArray(ranges)) return [];
+  const out = [];
+  for (const r of ranges.slice(0, PER_MESSAGE)) {
+    if (!Array.isArray(r)) continue;
+    const [at, len] = r;
+    if (typeof at !== "number" || typeof len !== "number" || !Number.isInteger(at) || !Number.isInteger(len)) continue;
+    if (at < 0 || len <= 0 || at + len > text.length) continue;
+    const b = text.slice(at, at + len).trim();
+    if (isLongPaste(b) && !out.includes(b)) out.push(b);
+  }
+  return out;
+}
+function addPastes(list, blocks, now) {
+  if (!blocks.length) return list;
+  let total = 0;
+  return [...blocks.map((text) => ({ text, at: now })), ...list.filter((p) => !blocks.includes(p.text) && live(p, now))].slice(0, PASTES_MAX).filter((p) => {
+    total += p.text.length;
+    return total <= PASTES_MAX_CHARS;
+  });
+}
+function loadPastes(raw, now) {
+  if (!Array.isArray(raw)) return [];
+  const out = [];
+  let total = 0;
+  for (const r of raw) {
+    const p = typeof r === "string" ? { text: r, at: now } : r;
+    if (!p || typeof p.text !== "string" || typeof p.at !== "number" || !Number.isFinite(p.at)) continue;
+    if (!isLongPaste(p.text) || !live(p, now) || out.some((o) => o.text === p.text)) continue;
+    if (out.length >= PASTES_MAX || (total += p.text.length) > PASTES_MAX_CHARS) break;
+    out.push({ text: p.text, at: Math.min(p.at, now) });
+  }
+  return out;
+}
+function pastedIn(list, text, listed = []) {
+  if (!list.length || !isLongPaste(text)) return listed;
+  const known = list.filter((b) => !listed.includes(b)).sort((a, b) => b.length - a.length);
+  return splitPasted(text, listed, known).pastes;
+}
+function withPasted(items, list) {
+  if (!list.length) return items;
+  return items.map((i) => {
+    if (i.role !== "user") return i;
+    const pasted = pastedIn(list, i.text, i.pasted);
+    return pasted.length && pasted !== i.pasted ? { ...i, pasted } : i;
+  });
+}
+function withQueuedPasted(q, list) {
+  const pasted = pastedIn(list, q.text);
+  return pasted.length ? { ...q, pasted } : q;
+}
+const PASTES_FILE = path$1.join(DATA_DIR, "pastes.json");
+let kept = null;
+let saved = null;
+let texts = null;
+function pastes() {
+  if (kept) return kept;
+  kept = [];
+  saved = kept;
+  try {
+    const raw = fs.readFileSync(PASTES_FILE, "utf8");
+    kept = loadPastes(JSON.parse(raw), Date.now());
+    saved = JSON.stringify(kept) + "\n" === raw ? kept : null;
+  } catch {
+  }
+  return kept;
+}
+function keptTexts() {
+  const list = pastes();
+  if ((texts == null ? void 0 : texts.of) !== list) texts = { of: list, list: list.map((p) => p.text) };
+  return texts.list;
+}
+let writing = Promise.resolve();
+function save() {
+  writing = writing.then(async () => {
+    const list = kept;
+    if (!list || list === saved) return;
+    const temp = `${PASTES_FILE}.${randomUUID$1()}.tmp`;
+    try {
+      await fs$1.mkdir(DATA_DIR, { recursive: true });
+      await fs$1.writeFile(temp, JSON.stringify(list) + "\n", { mode: 384 });
+      await fs$1.rename(temp, PASTES_FILE);
+      saved = list;
+    } catch {
+      await fs$1.rm(temp, { force: true }).catch(() => {
+      });
+    }
+  });
+}
+function keepPastes(text, ranges) {
+  const next = addPastes(pastes(), pastesAt(text, ranges), Date.now());
+  if (next === kept) return;
+  kept = next;
+  save();
+}
+function purgePastes(now = Date.now()) {
+  const list = pastes();
+  if (list.some((p) => !live(p, now))) kept = list.filter((p) => live(p, now));
+  if (kept !== saved) save();
+}
+const chatPasted = (items) => withPasted(items, keptTexts());
+const queuedPasted = (q) => withQueuedPasted(q, keptTexts());
+
 const DEFAULTS = { freeWaitMs: 2e3, quietMs: 400, showWaitMs: 4e3, submitWaitMs: 4e3, pollMs: 50 };
 const RECORD_MS = 600;
 const MAX_ATTEMPTS = 3;
@@ -16171,7 +16434,7 @@ async function createAgent(body) {
       created = await hx("worktree.create", params, 3e4);
     } catch (e) {
       if (e.code !== "not_git_worktree") throw e;
-      await sleep(1e3);
+      await sleep$1(1e3);
       created = await hx("worktree.create", params, 3e4);
     }
   } else if (!target) {
@@ -16196,7 +16459,7 @@ async function createAgent(body) {
   const pathSetup = 'export PATH="$HOME/.local/bin:$HOME/.kimi-code/bin:$HOME/.bun/bin:/opt/homebrew/bin:/usr/local/bin:$PATH"';
   await herdr("pane.send_input", { pane_id: paneId, text: pathSetup });
   await herdr("pane.send_input", { pane_id: paneId, keys: ["enter"] });
-  await sleep(400);
+  await sleep$1(400);
   let lastErr = null;
   for (let i = 0; i < 16; i++) {
     try {
@@ -16211,7 +16474,7 @@ async function createAgent(body) {
         break;
       }
       if (lastErr.code === "timeout" || lastErr.code === "unreachable" || /name/i.test(lastErr.code)) break;
-      await sleep(500);
+      await sleep$1(500);
     }
   }
   if (lastErr) {
@@ -16297,7 +16560,7 @@ async function closePanel(paneId) {
     if (!panelOpen(r.read && r.read.text, p.agent)) return sent;
     await herdr("pane.send_input", { pane_id: paneId, keys: ["esc"] });
     sent = true;
-    await sleep(400);
+    await sleep$1(400);
   }
   return sent;
 }
@@ -16336,10 +16599,184 @@ async function readUpload(name) {
   return { type: ext === "jpg" ? "image/jpeg" : `image/${ext}`, body: await fsp$2.readFile(path$1.join(UPLOAD_DIR, name)) };
 }
 
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+function createPaneSizes(deps) {
+  const entries = /* @__PURE__ */ new Map();
+  const log = deps.log || (() => {
+  });
+  function save() {
+    if (!deps.save) return;
+    const out = {};
+    for (const [pane, e] of entries) if (e.original) out[pane] = e.original;
+    deps.save(out);
+  }
+  function drop(pane, e) {
+    if (entries.get(pane) !== e) return;
+    entries.delete(pane);
+    save();
+  }
+  function keepReason(e, now) {
+    const o = e.original;
+    if (!now) return "pane gone";
+    if (o.terminal && now.terminal && o.terminal !== now.terminal) return "another terminal";
+    if (now.rows === o.rows && now.cols === o.cols) return "already at its size";
+    const set = e.set;
+    if (set && (now.rows !== set.rows || now.exact && now.cols !== set.cols)) return `resized by another client to ${now.cols}x${now.rows}`;
+    return null;
+  }
+  async function restore(pane, e) {
+    var _a;
+    const o = e.original;
+    const why = keepReason(e, await deps.read(pane).catch(() => null));
+    if (why) return log(`term ${pane} size kept (${why})`);
+    for (let attempt = 0; attempt < 2; attempt++) {
+      if (attempt) await sleep((_a = deps.retryMs) != null ? _a : 1500);
+      if (e.clients > 0) return;
+      if (await deps.resize(pane, o.cols, o.rows).catch(() => false)) return;
+    }
+    log(`term ${pane} could not get its ${o.cols}x${o.rows} back`);
+  }
+  function schedule(pane, e, ms) {
+    clearTimeout(e.timer);
+    e.timer = setTimeout(() => {
+      e.timer = void 0;
+      e.restoring = restore(pane, e).catch(() => {
+      }).finally(() => {
+        e.restoring = null;
+        if (e.clients === 0 && !e.timer) drop(pane, e);
+      });
+    }, ms);
+  }
+  async function hold(pane) {
+    let e = entries.get(pane);
+    if (e) {
+      clearTimeout(e.timer);
+      e.timer = void 0;
+      e.clients++;
+    } else {
+      const fresh = { original: null, ready: Promise.resolve(), clients: 1, set: null, restoring: null };
+      fresh.ready = deps.read(pane).catch(() => null).then((size) => {
+        fresh.original = size;
+        if (size) save();
+      });
+      entries.set(pane, fresh);
+      e = fresh;
+    }
+    const entry = e;
+    await entry.ready;
+    if (entry.restoring) await entry.restoring;
+    let released = false;
+    return {
+      resized(cols, rows) {
+        if (!released) entry.set = { cols, rows };
+      },
+      release(clean) {
+        if (released) return;
+        released = true;
+        if (--entry.clients > 0) return;
+        if (!entry.original) return drop(pane, entry);
+        schedule(pane, entry, clean ? deps.closeMs : deps.graceMs);
+      }
+    };
+  }
+  function adopt(sizes) {
+    for (const [pane, size] of Object.entries(sizes)) {
+      if (entries.has(pane)) continue;
+      const e = { original: size, ready: Promise.resolve(), clients: 0, set: null, restoring: null };
+      entries.set(pane, e);
+      schedule(pane, e, deps.graceMs);
+    }
+  }
+  function stop() {
+    for (const e of entries.values()) clearTimeout(e.timer);
+  }
+  return { hold, adopt, stop, held: () => [...entries.keys()] };
+}
+function parseSttySize(out) {
+  const m = /^\s*(\d{1,4})\s+(\d{1,4})\s*$/.exec(out);
+  if (!m) return null;
+  const rows = Number(m[1]);
+  const cols = Number(m[2]);
+  return rows > 0 && cols > 0 ? { cols, rows } : null;
+}
+function cleanSavedSizes(raw, isPane) {
+  const out = {};
+  if (!raw || typeof raw !== "object") return out;
+  for (const [pane, v] of Object.entries(raw)) {
+    const s = v;
+    if (!isPane(pane) || !s || !Number.isInteger(s.cols) || !Number.isInteger(s.rows)) continue;
+    if (s.cols < 10 || s.cols > 400 || s.rows < 5 || s.rows > 200) continue;
+    out[pane] = { cols: s.cols, rows: s.rows, exact: s.exact === true, ...typeof s.terminal === "string" ? { terminal: s.terminal } : {} };
+  }
+  return out;
+}
+
 const clampInt = (v, lo, hi, dflt) => {
   const n = parseInt(String(v), 10);
   return Number.isFinite(n) ? Math.min(hi, Math.max(lo, n)) : dflt;
 };
+const TTY_SIZE_SCRIPT = 't=$(ps -o tty= -p "$1" 2>/dev/null | tr -d " "); [ -n "$t" ] && [ -c "/dev/$t" ] && stty size < "/dev/$t"';
+function ttySize(pane, pid) {
+  const machine = machineOfPane(pane);
+  if (!machine) return Promise.resolve("");
+  if (machine.exec) return machine.exec(TTY_SIZE_SCRIPT, [String(pid)], { timeoutMs: 4e3 }).then((r) => r.code === 0 ? r.stdout.toString("utf8") : "", () => "");
+  if (IN_DOCKER) return Promise.resolve("");
+  return new Promise((resolve) => execFile("sh", ["-c", TTY_SIZE_SCRIPT, "sh", String(pid)], { timeout: 2e3 }, (err, stdout) => resolve(err ? "" : String(stdout))));
+}
+async function readPaneSize(pane) {
+  var _a, _b, _c, _d, _e, _f, _g, _h;
+  const p = (_a = await herdr("pane.get", { pane_id: pane }, 3e3).catch(() => null)) == null ? void 0 : _a.pane;
+  if (!p) return null;
+  const terminal = typeof p.terminal_id === "string" ? { terminal: p.terminal_id } : {};
+  const rows = Number((_b = p.scroll) == null ? void 0 : _b.viewport_rows) || 0;
+  const pid = Number((_d = (_c = await herdr("pane.process_info", { pane_id: pane }, 3e3).catch(() => null)) == null ? void 0 : _c.process_info) == null ? void 0 : _d.shell_pid);
+  if (Number.isInteger(pid) && pid > 1) {
+    const tty = parseSttySize(await ttySize(pane, pid));
+    if (tty && (!rows || tty.rows === rows)) return { ...tty, exact: true, ...terminal };
+  }
+  const local = splitId(pane).local;
+  const rect = (_h = (_g = (_f = (_e = await herdr("pane.layout", { pane_id: pane }, 3e3).catch(() => null)) == null ? void 0 : _e.layout) == null ? void 0 : _f.panes) == null ? void 0 : _g.find((x) => x.pane_id === local)) == null ? void 0 : _h.rect;
+  const cols = Number(rect == null ? void 0 : rect.width) || 0;
+  if (!rows || !cols) return null;
+  return { cols, rows, exact: false, ...terminal };
+}
+const sizesFile = () => path$1.join(DATA_DIR, "term-sizes.json");
+const delay = (name, dflt) => {
+  const n = Number(process.env[name]);
+  return Number.isFinite(n) && n >= 0 ? n : dflt;
+};
+let sizes = null;
+const paneSizes = () => sizes || (sizes = createPaneSizes({
+  read: readPaneSize,
+  resize: (pane, cols, rows) => resizePane(pane, cols, rows),
+  // Longer than the 1.5 s left to a closed control session to go away.
+  closeMs: delay("WHERDR_TERM_CLOSE_MS", 2e3),
+  graceMs: delay("WHERDR_TERM_GRACE_MS", 3e4),
+  save(held) {
+    const file = sizesFile();
+    try {
+      if (!Object.keys(held).length) return fs.rmSync(file, { force: true });
+      fs.mkdirSync(DATA_DIR, { recursive: true });
+      fs.writeFileSync(`${file}.tmp`, JSON.stringify(held) + "\n", { mode: 384 });
+      fs.renameSync(`${file}.tmp`, file);
+    } catch (e) {
+      log(`term sizes: ${e.message}`);
+    }
+  },
+  log
+}));
+function startPaneSizes() {
+  let saved = null;
+  try {
+    saved = JSON.parse(fs.readFileSync(sizesFile(), "utf8"));
+  } catch {
+    return;
+  }
+  paneSizes().adopt(cleanSavedSizes(saved, (id) => PANE_RE.test(id)));
+}
+function stopPaneSizes() {
+  sizes == null ? void 0 : sizes.stop();
+}
 function openTerm(ws, url) {
   const pane = url.searchParams.get("pane") || "";
   if (!PANE_RE.test(pane)) {
@@ -16356,30 +16793,53 @@ function openTerm(ws, url) {
   const rows = clampInt(url.searchParams.get("rows"), 5, 200, 24);
   const args = ["terminal", "session", "control", splitId(pane).local, "--cols", String(cols), "--rows", String(rows)];
   if (url.searchParams.get("takeover") === "1") args.push("--takeover");
-  const child = machine.spawnHerdr(args);
   const sess = { pane, visible: true };
   termSessions.add(sess);
-  log(`term ${pane} opened ${cols}x${rows}${args.includes("--takeover") ? " (takeover)" : ""}${machine.local ? "" : ` on ${machine.label}`}`);
-  readline.createInterface({ input: child.stdout }).on("line", (line) => {
-    if (ws.isOpen()) ws.send(line);
-  });
-  readline.createInterface({ input: child.stderr }).on("line", (line) => {
-    log(`term ${pane} stderr: ${line}`);
-    if (ws.isOpen()) ws.send(JSON.stringify({ type: "herdr.stderr", message: line }));
-  });
-  child.on("error", (e) => {
-    if (ws.isOpen()) ws.send(JSON.stringify({ type: "terminal.closed", reason: `herdr: ${e.message}` }));
-    ws.close(4500, "herdr error");
-  });
-  child.on("exit", (code) => {
-    termSessions.delete(sess);
-    if (ws.isOpen()) ws.close(4e3, `herdr exit ${code}`);
-  });
-  child.stdin.on("error", () => {
-  });
+  let child = null;
+  let hold = null;
+  let closed = false;
+  let size = { cols, rows };
+  let attached = false;
+  const early = [];
   const toChild = (obj) => {
-    if (child.stdin.writable) child.stdin.write(JSON.stringify(obj) + "\n");
+    if (!child) {
+      if (early.length < 64) early.push(obj);
+    } else if (child.stdin.writable) {
+      child.stdin.write(JSON.stringify(obj) + "\n");
+    }
   };
+  function start() {
+    const c = machine.spawnHerdr(args);
+    child = c;
+    log(`term ${pane} opened ${cols}x${rows}${args.includes("--takeover") ? " (takeover)" : ""}${machine.local ? "" : ` on ${machine.label}`}`);
+    readline.createInterface({ input: c.stdout }).on("line", (line) => {
+      if (!attached && line.includes('"terminal.frame"')) {
+        attached = true;
+        hold == null ? void 0 : hold.resized(size.cols, size.rows);
+      }
+      if (ws.isOpen()) ws.send(line);
+    });
+    readline.createInterface({ input: c.stderr }).on("line", (line) => {
+      log(`term ${pane} stderr: ${line}`);
+      if (ws.isOpen()) ws.send(JSON.stringify({ type: "herdr.stderr", message: line }));
+    });
+    c.on("error", (e) => {
+      if (ws.isOpen()) ws.send(JSON.stringify({ type: "terminal.closed", reason: `herdr: ${e.message}` }));
+      ws.close(4500, "herdr error");
+    });
+    c.on("exit", (code) => {
+      termSessions.delete(sess);
+      if (ws.isOpen()) ws.close(4e3, `herdr exit ${code}`);
+    });
+    c.stdin.on("error", () => {
+    });
+    for (const m of early.splice(0)) toChild(m);
+  }
+  paneSizes().hold(pane).then((h) => {
+    if (closed) return h.release(true);
+    hold = h;
+    start();
+  });
   return {
     onMessage(raw) {
       let m;
@@ -16393,9 +16853,12 @@ function openTerm(ws, url) {
           if (typeof m.text === "string" && m.text.length <= 65536) toChild({ type: "terminal.input", text: m.text });
           else if (typeof m.bytes === "string" && m.bytes.length <= 9e4) toChild({ type: "terminal.input", bytes: m.bytes });
           break;
-        case "terminal.resize":
-          toChild({ type: "terminal.resize", cols: clampInt(m.cols, 10, 400, cols), rows: clampInt(m.rows, 5, 200, rows) });
+        case "terminal.resize": {
+          size = { cols: clampInt(m.cols, 10, 400, cols), rows: clampInt(m.rows, 5, 200, rows) };
+          if (attached) hold == null ? void 0 : hold.resized(size.cols, size.rows);
+          toChild({ type: "terminal.resize", ...size });
           break;
+        }
         case "terminal.scroll":
           if (m.direction === "up" || m.direction === "down") {
             toChild({ type: "terminal.scroll", direction: m.direction, lines: clampInt(m.lines, 1, 500, 3) });
@@ -16419,13 +16882,18 @@ function openTerm(ws, url) {
           break;
       }
     },
-    onClose() {
+    onClose(clean = false) {
+      closed = true;
       termSessions.delete(sess);
-      toChild({ type: "terminal.release" });
-      child.stdin.end();
-      setTimeout(() => {
-        if (child.exitCode === null) child.kill("SIGTERM");
-      }, 1500);
+      const c = child;
+      if (c) {
+        toChild({ type: "terminal.release" });
+        c.stdin.end();
+        setTimeout(() => {
+          if (c.exitCode === null) c.kill("SIGTERM");
+        }, 1500);
+      }
+      hold == null ? void 0 : hold.release(clean && sess.visible);
     }
   };
 }
@@ -16560,7 +17028,8 @@ const listKey = (paneId, agent) => {
   var _a;
   return `${((_a = machineOfPane(paneId)) == null ? void 0 : _a.key) || ""}|${agent}`;
 };
-const busy = /* @__PURE__ */ new Set();
+const busy$1 = /* @__PURE__ */ new Set();
+const modelControlBusy = (paneId) => busy$1.has(paneId);
 async function withPane(paneId, fn) {
   const p = findPane(paneId);
   if (!p) throw new HerdrError("bad_pane", "Pane not found");
@@ -16568,12 +17037,12 @@ async function withPane(paneId, fn) {
   if (!READY.has(p.status || "")) {
     throw new HerdrError("busy", p.status === "blocked" ? "The agent is waiting for an answer \u2014 reply first." : "The agent is working \u2014 change the model once it\u2019s done.");
   }
-  if (busy.has(paneId)) throw new HerdrError("busy", "Model change already in progress");
-  busy.add(paneId);
+  if (busy$1.has(paneId)) throw new HerdrError("busy", "Model change already in progress");
+  busy$1.add(paneId);
   try {
     return await fn(p);
   } finally {
-    busy.delete(paneId);
+    busy$1.delete(paneId);
   }
 }
 const screen = async (paneId) => {
@@ -16586,14 +17055,14 @@ async function waitMenu(paneId, ok, timeoutMs = 6e3) {
     const m = parseModelMenu(await screen(paneId));
     if (m && ok(m)) return m;
     if (Date.now() > until) return null;
-    await sleep(250);
+    await sleep$1(250);
   }
 }
 async function closeMenu(paneId) {
   for (let i = 0; i < 3; i++) {
     if (!parseModelMenu(await screen(paneId))) return;
     await herdr("pane.send_input", { pane_id: paneId, keys: ["esc"] });
-    await sleep(400);
+    await sleep$1(400);
   }
 }
 async function openMenu(p) {
@@ -16621,7 +17090,7 @@ async function readAllOptions(paneId, first) {
   for (let i = 0; i < 8 && m.scrollDown; i++) {
     const last = m.options[m.options.length - 1].n;
     await herdr("pane.send_input", { pane_id: paneId, keys: moveKeys(m.cursor, last + 1) });
-    await sleep(350);
+    await sleep$1(350);
     const next = await waitMenu(paneId, (x) => x.kind === "model", 2e3);
     if (!next || next.cursor <= last) break;
     const before = all.size;
@@ -16703,7 +17172,7 @@ async function setModel(paneId, wanted) {
         const confirm = p.agent === "claude" ? switchConfirmKeys(text, confirmAs) : null;
         if (confirm) await herdr("pane.send_input", { pane_id: p.id, keys: confirm });
         clear = confirm || parseModelMenu(text) ? 0 : clear + 1;
-        await sleep(confirm ? 400 : 250);
+        await sleep$1(confirm ? 400 : 250);
       }
       if (clear < 2) throw new HerdrError("stale", "The /model menu changed \u2014 try again.");
       const info = { id: null, label: confirmAs, effort, at: new Date(started).toISOString() };
@@ -16726,14 +17195,14 @@ async function waitOmpSelector(paneId, ok, timeoutMs = 6e3) {
     const s = await ompSelector(paneId).catch(() => null);
     if (s && ok(s)) return s;
     if (Date.now() > until) return null;
-    await sleep(250);
+    await sleep$1(250);
   }
 }
 async function closeOmpSelector(paneId) {
   for (let i = 0; i < 3; i++) {
     if (!await ompSelector(paneId).catch(() => null)) return;
     await herdr("pane.send_input", { pane_id: paneId, keys: ["esc"] });
-    await sleep(400);
+    await sleep$1(400);
   }
 }
 const OMP_SELECTOR_COLS = 160;
@@ -16773,7 +17242,7 @@ async function waitOmpModel(p, id, since) {
     const info = await transcripts.model(p).catch(() => null);
     if (info && info.id === id && info.at && Date.parse(info.at) >= since - 1500) return true;
     if (Date.now() > until) return false;
-    await sleep(300);
+    await sleep$1(300);
   }
 }
 async function ompSetModel(paneId, wanted) {
@@ -16797,7 +17266,7 @@ async function ompSetModel(paneId, wanted) {
         }
         for (const ch of typed) {
           await herdr("pane.send_input", { pane_id: p.id, keys: [ch === " " ? "space" : ch] });
-          await sleep(80);
+          await sleep$1(80);
         }
         s = await waitOmpSelector(p.id, (x) => x.search.length > 0, 3e3) || s;
         at = rank(s);
@@ -16808,7 +17277,7 @@ async function ompSetModel(paneId, wanted) {
         const delta = at - s.cursor;
         if (delta === 0) break;
         await herdr("pane.send_input", { pane_id: p.id, keys: [delta > 0 ? "down" : "up"] });
-        await sleep(120);
+        await sleep$1(120);
         if (n === 79) throw new HerdrError("stale", "The model selector did not follow \u2014 nothing was changed.");
       }
       s = (_b = (_a = await waitOmpSelector(p.id, (x) => x.cursor === at && x.options[at].label === id, 3e3)) != null ? _a : await ompSelector(p.id)) != null ? _b : s;
@@ -16867,7 +17336,7 @@ async function waitSlider(paneId, ok, timeoutMs) {
     const s = parseClaudeEffortScreen(await screen(paneId).catch(() => ""));
     if (s && ok(s)) return s;
     if (Date.now() > until) return null;
-    await sleep(250);
+    await sleep$1(250);
   }
 }
 async function sliderGone(paneId, timeoutMs = 3e3) {
@@ -16875,7 +17344,7 @@ async function sliderGone(paneId, timeoutMs = 3e3) {
   let clear = 0;
   while (clear < 2 && Date.now() < until) {
     clear = parseClaudeEffortScreen(await screen(paneId).catch(() => "")) ? 0 : clear + 1;
-    if (clear < 2) await sleep(250);
+    if (clear < 2) await sleep$1(250);
   }
   return clear >= 2;
 }
@@ -16884,7 +17353,7 @@ async function closeEffortSlider(paneId) {
     if (!parseClaudeEffortScreen(await screen(paneId).catch(() => ""))) return;
     await herdr("pane.send_input", { pane_id: paneId, keys: ["esc"] }).catch(() => {
     });
-    await sleep(400);
+    await sleep$1(400);
   }
 }
 async function openEffortSlider(p) {
@@ -16918,7 +17387,7 @@ async function waitOmpEffort(p, model, prev, shown, sinceAt, hasTranscript) {
       if (now && prev === "auto" && shown !== "auto" && Date.now() - pressed > OMP_REDRAW_MS) return { level: now, at: sinceAt, shown: now };
     }
     if (Date.now() - pressed > 3e3) return null;
-    await sleep(200);
+    await sleep$1(200);
   }
 }
 async function ompCycleTo(p, before, level) {
@@ -17031,7 +17500,7 @@ async function setEffort(paneId, level) {
         let clear = 0;
         while (clear < 2 && Date.now() < until) {
           clear = parseModelMenu(await screen(p.id)) ? 0 : clear + 1;
-          await sleep(250);
+          await sleep$1(250);
         }
         if (clear < 2) throw new HerdrError("stale", "The /model menu changed \u2014 try again.");
       } catch (e) {
@@ -17064,16 +17533,26 @@ function compareVersions(a, b) {
   for (let i = 0; i < 3; i++) if (x[i] !== y[i]) return x[i] - y[i];
   return 0;
 }
+const MODES = ["docker", "docker-build", "npm", "npm-global", "brew", "plugin"];
 function installMode(env) {
-  return env === "docker" || env === "docker-build" || env === "npm" || env === "brew" ? env : "native";
+  var _a;
+  return (_a = MODES.find((m) => m === env)) != null ? _a : "native";
 }
-function updateCommand(mode) {
+function updateCommand(mode, repo) {
   if (mode === "docker") return "docker compose pull && docker compose up -d";
   if (mode === "docker-build") return "git pull && docker compose -f docker-compose.yml -f docker-compose.build.yml up -d --build";
   if (mode === "npm") return "npx wherdr@latest";
-  if (mode === "brew") return "brew upgrade wherdr";
+  if (mode === "npm-global") return "npm install -g wherdr@latest && wherdr restart";
+  if (mode === "brew") return "brew upgrade wherdr && brew services restart wherdr";
+  if (mode === "plugin") return `herdr plugin install ${repo} --yes`;
   return "git pull && npm ci && npm run build";
 }
+function oneTapMode(mode) {
+  return mode === "plugin" || mode === "npm-global" || mode === "brew";
+}
+function updateRunning(job, now) {
+  return !!job && !["done", "rolled-back", "failed"].includes(job.state) && now - job.updatedAt < 10 * 6e4;
+}
 
 const CODEX_RELEASE_NOTES = "https://github.com/openai/codex/releases/latest";
 const CODEX_STANDALONE_COMMAND = `sh -c 'curl -fsSL https://chatgpt.com/codex/install.sh | CODEX_NON_INTERACTIVE=1 sh'`;
@@ -17860,6 +18339,494 @@ async function installClaudeStatusline(m) {
   return last(r.stdout.toString("utf8"));
 }
 
+const CLAUDE = {
+  keep: {
+    "--model": 1,
+    "--effort": 1,
+    "--permission-mode": 1,
+    "--fallback-model": 1,
+    "--agent": 1,
+    "--agents": 1,
+    "--settings": 1,
+    "--setting-sources": 1,
+    "--system-prompt": 1,
+    "--append-system-prompt": 1,
+    "--autocompact": 1,
+    "-n": 1,
+    "--name": 1,
+    "--debug-file": 1,
+    "--add-dir": "*",
+    "--mcp-config": "*",
+    "--plugin-dir": "*",
+    "--allowedTools": "*",
+    "--allowed-tools": "*",
+    "--disallowedTools": "*",
+    "--disallowed-tools": "*",
+    "--tools": "*",
+    "--betas": "*",
+    "--dangerously-skip-permissions": 0,
+    "--allow-dangerously-skip-permissions": 0,
+    "--verbose": 0,
+    "--ide": 0,
+    "--chrome": 0,
+    "--no-chrome": 0,
+    "--strict-mcp-config": 0,
+    "--bare": 0,
+    "--brief": 0,
+    "--disable-slash-commands": 0,
+    "--safe-mode": 0,
+    "--restricted": 0
+  },
+  // Conversation choice, one-off launch or already done (worktree created).
+  drop: {
+    "-c": 0,
+    "--continue": 0,
+    "-r": "?",
+    "--resume": "?",
+    "--session-id": 1,
+    "--fork-session": 0,
+    "-w": "?",
+    "--worktree": "?",
+    "--tmux": 0,
+    "--from-pr": "?",
+    "--teleport": "?",
+    "-p": 0,
+    "--print": 0,
+    "--bg": 0,
+    "--background": 0,
+    "--remote-control": "?",
+    "--cloud": "?",
+    "--file": "*",
+    "-d": "?",
+    "--debug": "?"
+  }
+};
+const CODEX = {
+  keep: {
+    "-c": 1,
+    "--config": 1,
+    "--enable": 1,
+    "--disable": 1,
+    "-m": 1,
+    "--model": 1,
+    "--local-provider": 1,
+    "-p": 1,
+    "--profile": 1,
+    "-s": 1,
+    "--sandbox": 1,
+    "-C": 1,
+    "--cd": 1,
+    "--add-dir": 1,
+    "-a": 1,
+    "--ask-for-approval": 1,
+    "--remote": 1,
+    "--remote-auth-token-env": 1,
+    "--oss": 0,
+    "--search": 0,
+    "--no-alt-screen": 0,
+    "--no-daemon": 0,
+    "--full-auto": 0,
+    "--dangerously-bypass-approvals-and-sandbox": 0,
+    "--yolo": 0,
+    "--approve-for-me": 0,
+    "--strict-config": 0,
+    "--dangerously-bypass-hook-trust": 0
+  },
+  drop: { "--last": 0, "--all": 0, "--include-non-interactive": 0, "-i": "*", "--image": "*", "--worktree": 0 }
+};
+const OMP = {
+  keep: {
+    "--model": 1,
+    "--smol": 1,
+    "--slow": 1,
+    "--plan": 1,
+    "--prewalk-into": 1,
+    "--plan-yolo-into": 1,
+    "--provider": 1,
+    "--system-prompt": 1,
+    "--system-prompt-template": 1,
+    "--append-system-prompt": 1,
+    "--profile": 1,
+    "--cwd": 1,
+    "--config": 1,
+    "--add-dir": 1,
+    "--session-dir": 1,
+    "--models": 1,
+    "--tools": 1,
+    "--thinking": 1,
+    "--service-tier": 1,
+    "--hook": 1,
+    "-e": 1,
+    "--extension": 1,
+    "--skills": 1,
+    "--approval-mode": 1,
+    "--plugin-dir": 1,
+    "--allow-home": 0,
+    "--prewalk": 0,
+    "--no-prewalk": 0,
+    "--no-tools": 0,
+    "--no-lsp": 0,
+    "--no-pty": 0,
+    "--hide-thinking": 0,
+    "--advisor": 0,
+    "--external-thinking": 0,
+    "--no-extensions": 0,
+    "--no-skills": 0,
+    "--no-rules": 0,
+    "--no-title": 0,
+    "--auto-approve": 0
+  },
+  // Conversation choice, one-off launch; the API key is never replayed
+  // (it would show in the confirmation).
+  drop: {
+    "-c": 0,
+    "--continue": 0,
+    "-r": "?",
+    "--resume": "?",
+    "-p": 0,
+    "--print": 0,
+    "--plan-yolo": 0,
+    "--from-claude": 0,
+    "--from-codex": 0,
+    "--no-session": 0,
+    "--export": 1,
+    "--mode": 1,
+    "--max-time": 1,
+    "--alias": 1,
+    "--api-key": 1,
+    "--no-ui": 0,
+    "--print-thoughts": 0
+  }
+};
+const SILENT = /* @__PURE__ */ new Set(["-c", "--continue", "-r", "--resume", "--session-id", "--fork-session", "--last", "--all"]);
+const SPECS = { claude: CLAUDE, codex: CODEX, omp: OMP };
+const RESTARTABLE = new Set(Object.keys(SPECS));
+const base$1 = (s) => s.replace(/^.*\//, "").replace(/\.(c?js|mjs)$/, "");
+function launchOptions(kind, argv) {
+  const spec = SPECS[kind];
+  const kept = [];
+  const dropped = [];
+  if (!spec) return { kept, dropped };
+  let i = argv.findIndex((a) => base$1(a) === kind);
+  i = i < 0 ? 1 : i + 1;
+  for (; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--") break;
+    if (!a.startsWith("-") || a === "-") continue;
+    const eq = a.indexOf("=");
+    const flag = eq > 0 ? a.slice(0, eq) : a;
+    const keep = flag in spec.keep;
+    const arity = keep ? spec.keep[flag] : spec.drop[flag];
+    const out = [a];
+    if (keep) kept.push(out);
+    else if (!SILENT.has(flag)) dropped.push(out);
+    if (arity === void 0) {
+      if (eq < 0 && argv[i + 1] !== void 0 && !argv[i + 1].startsWith("-")) out.push(argv[++i]);
+      continue;
+    }
+    if (eq > 0 || arity === 0) continue;
+    if (arity === 1) {
+      if (argv[i + 1] !== void 0) out.push(argv[++i]);
+      continue;
+    }
+    while (argv[i + 1] !== void 0 && !argv[i + 1].startsWith("-")) {
+      out.push(argv[++i]);
+      if (arity === "?") break;
+    }
+  }
+  return { kept, dropped };
+}
+const EFFORTS = /* @__PURE__ */ new Set(["low", "medium", "high", "xhigh", "max"]);
+function planRestart(o) {
+  const opts = o.argv ? launchOptions(o.kind, o.argv) : { kept: [], dropped: [] };
+  const mode = o.session ? "resume" : o.hadSession ? "fresh" : "continue";
+  let groups = opts.kept;
+  const without = (...flags) => {
+    groups = groups.filter((g) => !flags.includes(g[0].split("=")[0]));
+  };
+  if (o.kind === "omp" && mode === "resume") without("--model", "--thinking");
+  if (o.kind === "claude") {
+    const cur = o.current || {};
+    if (mode === "resume") without("--model");
+    const effort = String(cur.effort || "").toLowerCase();
+    if (EFFORTS.has(effort)) {
+      without("--effort");
+      groups.push(["--effort", effort]);
+    }
+    if (cur.permissionMode) {
+      without("--permission-mode");
+      if (cur.permissionMode !== "default") groups.push(["--permission-mode", cur.permissionMode]);
+    }
+  }
+  const kept = groups.flat();
+  const dropped = opts.dropped.flat();
+  let args;
+  if (o.kind === "codex") {
+    args = mode === "fresh" ? kept : ["resume", ...kept, mode === "resume" ? o.session : "--last"];
+  } else {
+    args = mode === "resume" ? [...kept, "--resume", o.session] : mode === "continue" ? [...kept, "--continue"] : kept;
+  }
+  return { args, mode, kept, dropped, unknownArgs: !o.argv };
+}
+const FOOTER_MODES = [
+  [/\bplan mode on\b/i, "plan"],
+  [/\baccept edits on\b/i, "acceptEdits"],
+  [/\bauto mode on\b/i, "auto"],
+  [/\bbypass permissions on\b/i, "bypassPermissions"],
+  [/\bdon'?t ask (?:mode )?on\b/i, "dontAsk"]
+];
+function claudeFooterMode(text) {
+  const lines = String(text || "").split("\n");
+  let rule = -1;
+  for (let i = lines.length - 1; i >= 0 && rule < 0; i--) if (/^\s*─{20,}\s*$/.test(lines[i])) rule = i;
+  if (rule < 1 || !lines.slice(Math.max(0, rule - 6), rule).some((l) => /^\s*❯/.test(l))) return null;
+  for (const l of lines.slice(rule + 1)) {
+    for (const [re, mode] of FOOTER_MODES) if (re.test(l)) return mode;
+  }
+  return "default";
+}
+
+function updateShellSignature(text) {
+  const lines = text.replace(/\r/g, "").trimEnd().split("\n");
+  const end = lines.findLastIndex((l) => /^\s*(?:🎉\s*)?Update ran successfully! Please restart Codex\.\s*$/.test(l));
+  if (end < 0 || !lines.slice(Math.max(0, end - 4), end).some((l) => /^\s*Codex CLI \S+ installed successfully\.\s*$/.test(l))) return null;
+  const tail = lines.slice(end + 1).filter((l) => l.trim());
+  if (!tail.length || tail.length > 2) return null;
+  const last = tail.at(-1);
+  if (!/^\s*(?:[\w@./~:-]+(?: [\w@./~:-]+){0,2} )?[$%#❯]\s*$/.test(last)) return null;
+  if (tail.length === 2 && (!/^\s*[\w./~:-]+ on [\w./:-]+\s*$/.test(tail[0]) || !/^\s*❯\s*$/.test(last))) return null;
+  return tail.join("\n");
+}
+function updateChoices(launch) {
+  return launch.conversation === "empty" && launch.argv && !launch.argv.some((a) => a === "resume" || a === "fork") ? ["restart"] : ["resume", "fresh"];
+}
+const UPDATE_LABELS = {
+  restart: "Restart Codex",
+  resume: "Resume conversation",
+  fresh: "Start fresh"
+};
+function updatePrompt(launch) {
+  return {
+    kind: "self-update",
+    question: "Codex updated itself and stopped",
+    cursor: -1,
+    options: updateChoices(launch).map((c) => ({ label: UPDATE_LABELS[c], hint: c === "resume" && !launch.session ? "Choose a conversation in Codex" : null }))
+  };
+}
+function updateRestartPlan(launch, choice) {
+  const kept = launch.argv ? launchOptions("codex", launch.argv).kept.flat() : [];
+  let args = choice === "resume" ? ["resume", ...kept, ...launch.session ? [launch.session] : []] : kept;
+  if (choice === "restart" && launch.argv) {
+    const i = launch.argv.findIndex((a) => /(?:^|\/)codex(?:\.[cm]?js)?$/.test(a));
+    if (i >= 0) args = launch.argv.slice(i + 1);
+  }
+  return { args, mode: choice === "resume" ? "resume" : "fresh", kept, dropped: [], unknownArgs: !launch.argv };
+}
+
+const base = (s) => s.replace(/^.*\//, "").replace(/\.(c?js|mjs)$/, "");
+async function paneForeground(d, paneId, kind) {
+  const r = await d.call("pane.process_info", { pane_id: paneId }, 4e3);
+  const info = r && r.process_info || {};
+  const procs = info.foreground_processes || [];
+  const agent = procs.find((p) => p.name === kind || (p.argv || []).some((a) => base(a) === kind)) || null;
+  const atShell = !agent && Boolean(info.shell_pid) && info.foreground_process_group_id === info.shell_pid;
+  const sh = procs.find((p) => info.shell_pid && p.pid === info.shell_pid);
+  const shell = { pid: Number(info.shell_pid) || null, name: sh ? String(sh.name || (sh.argv || [])[0] || "") || null : null };
+  return { agent, atShell, shell, argv: agent && Array.isArray(agent.argv) ? agent.argv.map(String) : null };
+}
+async function waitFor(d, ms, test) {
+  const end = d.now() + ms;
+  while (d.now() < end) {
+    await d.sleep(500);
+    try {
+      if (await test()) return true;
+    } catch {
+    }
+  }
+  return false;
+}
+const waitShell = (d, paneId, kind, ms) => waitFor(d, ms, async () => (await paneForeground(d, paneId, kind)).atShell);
+const busy = async (d, paneId) => {
+  const r = await d.call("pane.get", { pane_id: paneId }, 4e3);
+  const s = r && r.pane && r.pane.agent_status;
+  return s === "working" || s === "blocked";
+};
+async function stopAgent(d, p) {
+  const kind = p.agent;
+  const key = (k) => d.call("pane.send_input", { pane_id: p.id, keys: [k] });
+  if (p.status === "working" || p.status === "blocked") {
+    for (let i = 0; i < 2; i++) {
+      await key("esc");
+      if (await waitFor(d, 3e3, async () => !await busy(d, p.id))) break;
+    }
+  }
+  await d.call("pane.send_input", { pane_id: p.id, text: "/exit" });
+  await d.sleep(300);
+  await key("enter");
+  if (await waitShell(d, p.id, kind, 8e3)) return "exit";
+  await key("ctrl+c");
+  await d.sleep(400);
+  await key("ctrl+c");
+  if (await waitShell(d, p.id, kind, 6e3)) return "ctrl-c";
+  throw new HerdrError("restart_stop", "the agent did not stop");
+}
+async function startAgent(d, p, plan) {
+  const name = p.name || `${p.agent}-${crypto.randomBytes(2).toString("hex")}`;
+  let last = null;
+  for (let i = 0; i < 6; i++) {
+    try {
+      await d.call("agent.start", { name, kind: p.agent, pane_id: p.id, timeout_ms: 6e4, ...plan.args.length ? { args: plan.args } : {} }, 75e3);
+      return;
+    } catch (e) {
+      last = e;
+      if (last.code === "agent_not_ready") return;
+      if (last.code === "timeout" || last.code === "unreachable") break;
+      await d.sleep(500);
+    }
+  }
+  throw last || new HerdrError("restart_start", "the agent did not restart");
+}
+
+const AT_SAVE_MS = 60 * 1e3;
+const OUTAGE_MS = 15e3;
+function createSelfUpdates(d, saved = []) {
+  const records = new Map(saved);
+  const restored = new Set(records.keys());
+  const stable = () => JSON.stringify([...records].map(([id, r]) => [id, { ...r, at: 0 }]));
+  const times = () => [...records.values()].map((r) => r.at).join();
+  let written = stable();
+  let writtenTimes = times();
+  let writtenAt = d.now();
+  const persist = () => {
+    var _a;
+    const s = stable();
+    if (s === written && (d.now() - writtenAt < AT_SAVE_MS || times() === writtenTimes)) return;
+    written = s;
+    writtenTimes = times();
+    writtenAt = d.now();
+    (_a = d.save) == null ? void 0 : _a.call(d, [...records]);
+  };
+  const read = async (id) => {
+    var _a, _b;
+    return String(((_b = (_a = await d.call("pane.read", { pane_id: id, source: "recent_unwrapped", lines: 80 }, 4e3)) == null ? void 0 : _a.read) == null ? void 0 : _b.text) || "");
+  };
+  return {
+    get: (id) => records.get(id),
+    clear(id) {
+      records.delete(id);
+      persist();
+    },
+    // Service stopping: keep the exact time Codex was last seen alive, so a
+    // quick restart still tells a short outage from a long one.
+    flush() {
+      var _a;
+      if (records.size) (_a = d.save) == null ? void 0 : _a.call(d, [...records], true);
+    },
+    prune(ids, belongs) {
+      let changed = false;
+      for (const id of records.keys()) if (belongs(id) && !ids.has(id)) {
+        records.delete(id);
+        changed = true;
+      }
+      if (changed) persist();
+    },
+    async observe(p, owned) {
+      var _a, _b, _c, _d;
+      if (owned) return false;
+      let last = records.get(p.id);
+      if (p.agent === "codex") {
+        const fg = await paneForeground(d, p.id, "codex");
+        if (!fg.agent) return false;
+        restored.delete(p.id);
+        const pid = Number(fg.agent.pid);
+        if (last && last.pid === pid && !last.gone && d.now() - last.at < 5e3 && p.agentSession === last.pane.agentSession && p.cwd === last.pane.cwd && p.bornAt === last.pane.bornAt) {
+          last.argv = fg.argv || last.argv;
+          persist();
+          return false;
+        }
+        if (!last || last.pid !== pid || last.gone) {
+          last = { pid, pane: { ...p }, at: d.now(), argv: fg.argv, session: null, conversation: "unknown" };
+          records.set(p.id, last);
+        }
+        last.at = d.now();
+        last.argv = fg.argv || last.argv;
+        last.pane = { id: p.id, workspace: p.workspace, agent: p.agent, agentSession: p.agentSession, bornAt: p.bornAt, cwd: p.cwd, name: p.name, title: p.title };
+        const screen = await read(p.id);
+        const chat = await d.chat(p).catch(() => null);
+        if (chat && (chat.guessed || chat.session && chat.session !== last.session)) {
+          if (chat.session !== last.session) last.conversation = "unknown";
+          last.session = null;
+        }
+        if ((chat == null ? void 0 : chat.available) && !chat.guessed && chat.session) {
+          if (last.session && last.session !== chat.session) last.conversation = "unknown";
+          last.session = chat.session;
+        }
+        if ((_a = chat == null ? void 0 : chat.items) == null ? void 0 : _a.some((i) => i.role === "user" || i.role === "assistant")) {
+          last.conversation = "existing";
+          if (!chat.guessed && chat.session) last.session = chat.session;
+        } else if (chat && last.conversation !== "existing") {
+          const startup = /(?:✨\s*)?Update available!|^Updating Codex via /m.test(screen);
+          const witnessedBirth = Boolean(p.bornAt) && !((_b = fg.argv) == null ? void 0 : _b.some((a) => a === "resume" || a === "fork"));
+          if (chat.available && !chat.guessed && !chat.start && !((_c = chat.items) == null ? void 0 : _c.length) || !p.agentSession && !chat.available && (startup || witnessedBirth)) last.conversation = "empty";
+        }
+        last.oldOutput = Boolean(updateShellSignature(screen));
+        persist();
+        return false;
+      }
+      if (!last) return false;
+      if (p.agent) {
+        records.delete(p.id);
+        persist();
+        return false;
+      }
+      if (!last.gone) {
+        if (d.now() - last.at > OUTAGE_MS + (restored.has(p.id) ? AT_SAVE_MS : 0)) last.checked = true;
+        last.gone = d.now();
+        persist();
+      }
+      if (!last.checked) {
+        if (d.now() - last.gone < 3e3) {
+          p.leaving = true;
+          return false;
+        }
+        last.checked = true;
+        if (d.now() - last.gone < 15e3 && !last.oldOutput && (await paneForeground(d, p.id, "codex")).atShell) {
+          last.signature = updateShellSignature(await read(p.id)) || void 0;
+          if (last.signature) {
+            const chat = await d.chat(last.pane).catch(() => null);
+            if (!chat || chat.guessed || !chat.available && last.session) {
+              if (last.conversation === "empty") last.conversation = "unknown";
+            }
+            if (chat && (chat.guessed || chat.session && chat.session !== last.session)) last.session = null;
+            if ((chat == null ? void 0 : chat.available) && !chat.guessed && chat.session) last.session = chat.session;
+            if ((_d = chat == null ? void 0 : chat.items) == null ? void 0 : _d.some((i) => i.role === "user" || i.role === "assistant")) {
+              last.conversation = "existing";
+              if (!chat.guessed && chat.session) last.session = chat.session;
+              else if (chat.session !== last.session) last.session = null;
+            }
+          }
+        }
+        persist();
+      }
+      if (!last.signature) return false;
+      p.agent = "codex";
+      p.name = last.pane.name;
+      p.title = last.pane.title;
+      p.agentSession = last.session;
+      p.bornAt = last.pane.bornAt;
+      p.status = "blocked";
+      p.stopped = { reason: "update" };
+      p.prompt = updatePrompt(last);
+      return true;
+    },
+    async check(id) {
+      const last = records.get(id);
+      if (!(last == null ? void 0 : last.signature) || !(await paneForeground(d, id, "codex")).atShell) return null;
+      return updateShellSignature(await read(id)) === last.signature ? last : null;
+    }
+  };
+}
+
 var _a, _b;
 const fsp$1 = fs.promises;
 function trFor(p) {
@@ -17909,17 +18876,22 @@ function watchScreen(paneId, ms = 6e4) {
 const choicesCache = /* @__PURE__ */ new Map();
 const askChecks = /* @__PURE__ */ new Map();
 async function choicesFor(p, rev, strict, watch = false) {
+  if (modelControlBusy(p.id)) {
+    choicesCache.delete(p.id);
+    return { choices: null, screen: null, menu: null, interaction: "managed" };
+  }
   const c = choicesCache.get(p.id);
   const watched = (screenWatch.get(p.id) || 0) > Date.now();
   if (!watched) screenWatch.delete(p.id);
-  if (c && keepReading(c, rev, strict, watch || watched, Date.now())) return c;
+  if (c && !(p.status === "unknown" && c.interaction === "terminal") && keepReading(c, rev, strict, watch || watched, Date.now())) return c;
   let out;
   try {
     const r = await herdr("pane.read", { pane_id: p.id, source: "detection" }, 4e3);
     const text = r.read && r.read.text;
     const framed = String(text || "").split("\n").some((l) => TOP.test(l));
-    let choices = p.agent === "omp" ? parseOmpPrompt(text) : parseChoices(text, { strict });
-    const menu = p.agent !== "omp" && framed && (strict || !choices || !parseChoices(text, { strict: true })) ? await readMenu(p.id) : null;
+    const usageLimit = p.status === "unknown" ? null : parseUsageLimit(String(text || ""), p.agent);
+    let choices = usageLimit ? null : p.agent === "omp" ? parseOmpPrompt(text) : parseChoices(text, { strict });
+    const menu = !usageLimit && p.agent !== "omp" && framed && (strict || !choices || !parseChoices(text, { strict: true })) ? await readMenu(p.id) : null;
     if (menu) choices = null;
     if (choices && p.agent === "omp" && !choices.detail) choices = await withOmpTab(p.id, completeOmpAsk(choices, await transcripts.pendingAsk(p).catch(() => [])));
     if (choices && p.agent === "claude") {
@@ -17928,7 +18900,9 @@ async function choicesFor(p, rev, strict, watch = false) {
       choices = completeClaudeAsk(choices, await transcripts.pendingClaudeQuestions(p).catch(() => []), checks);
     } else if (!choices) askChecks.delete(p.id);
     const settings = p.agent === "claude" && settingsTabs(text) !== null;
-    out = { choices, screen: menu || settings ? null : parseWaitScreen(text, { choices: Boolean(choices) }), menu };
+    const screen = menu || settings ? null : parseWaitScreen(text, { choices: Boolean(choices) });
+    const interaction = classifyScreen({ text: String(text || ""), agent: p.agent, choices, menu, screen, settings, status: p.status });
+    out = interaction === "terminal" ? { choices: null, screen: null, menu: null, interaction } : { choices, screen: usageLimit ? null : screen, menu, interaction, ...usageLimit ? { usageLimit } : {} };
     noteScreen(p.id, p.agent, text);
     if (choices && (choices.detail || isPermissionQuestion(choices.question))) {
       const named = p.agent === "omp" && choices.detail && choices.detail.tool !== "tool" ? choices.detail.tool : null;
@@ -17938,7 +18912,7 @@ async function choicesFor(p, rev, strict, watch = false) {
       if (p.agent === "omp" && !choices.question && tr) choices.question = `Allow tool: ${tr.tool}`;
     }
   } catch {
-    out = { choices: c ? c.choices : null, screen: c ? c.screen : null, menu: c ? c.menu : null };
+    out = { choices: c ? c.choices : null, screen: c ? c.screen : null, menu: c ? c.menu : null, interaction: (c == null ? void 0 : c.interaction) || "unknown", ...(c == null ? void 0 : c.usageLimit) ? { usageLimit: c.usageLimit } : {} };
   }
   choicesCache.set(p.id, { rev, strict, at: Date.now(), ...out });
   return out;
@@ -18089,7 +19063,7 @@ function addQueued(paneId, text, opts = {}) {
   };
   queued.set(paneId, [...list, e]);
   sent.set(paneId, addSent(sent.get(paneId) || [], e.text, e.at));
-  return publicEntry(e);
+  return queuedPasted(publicEntry(e));
 }
 const sent = /* @__PURE__ */ new Map();
 const sentText = (paneId, entry, taken = []) => {
@@ -18112,7 +19086,11 @@ const restarting = (paneId) => {
 const GUARD_STATES = /* @__PURE__ */ new Set(["idle", "done", "working"]);
 function sendPrompt(p, text) {
   return withPaneLock(p.id, async () => {
-    if (p.agent !== "claude" || !GUARD_STATES.has(p.status || "") || isSlashCommand(text)) return agentPrompt(p.id, text);
+    const now = findPane(p.id);
+    if ((now == null ? void 0 : now.stopped) || (now == null ? void 0 : now.leaving)) {
+      throw new HerdrError(isSlashCommand(text) ? "stale" : "no_input", "Restart Codex before sending a command.");
+    }
+    if (p.agent !== "claude" || !GUARD_STATES.has(p.status || "") || isSlashCommand(text) && !p.usageLimit) return agentPrompt(p.id, text);
     const keep = (texts) => {
       for (const t of texts || []) {
         addQueued(p.id, t, { held: true });
@@ -18131,7 +19109,7 @@ function sendPrompt(p, text) {
         keys: async (keys) => {
           await herdr("pane.send_input", { pane_id: p.id, keys });
         },
-        sleep,
+        sleep: sleep$1,
         sentSince: async (since) => {
           const r2 = await transcripts.chat(p, {});
           return (r2.items || []).filter((i) => i.role === "user" && i.ts && Date.parse(i.ts) >= since - 1e3).map((i) => i.text);
@@ -18149,7 +19127,7 @@ const isBusyError = (e) => e instanceof HerdrError && (e.code === "input_busy" |
 const deliverBusy = /* @__PURE__ */ new Set();
 function deliverHeld(p) {
   const q = nextHeld(queued.get(p.id) || []);
-  if (!q || deliverBusy.has(p.id) || !p.agent || !INPUT_STATES.has(p.status || "") || restarting(p.id)) return;
+  if (!q || deliverBusy.has(p.id) || !p.agent || p.stopped || !INPUT_STATES.has(p.status || "") || restarting(p.id)) return;
   deliverBusy.add(p.id);
   herdr("pane.read", { pane_id: p.id, source: "detection" }, 4e3).then(async (r) => {
     if (!inputVisible(r.read && r.read.text) || !q.held || q.failed) return;
@@ -18200,13 +19178,13 @@ function takeBackFromClaude(p) {
       await herdr("pane.send_input", { pane_id: p.id, keys });
     },
     chat: async () => (await transcripts.chat(p, { fresh: true })).items || [],
-    sleep,
+    sleep: sleep$1,
     pending: () => (queued.get(p.id) || []).map((q) => q.text)
   }).catch(() => null);
 }
 async function cancelTurn(p, text) {
   if (!unansweredTurn((await transcripts.chat(p, { fresh: true })).items || [], text)) return null;
-  const r = await interruptAgent({ call: (m, params, t) => herdr(m, params, t), sleep, now: Date.now }, p);
+  const r = await interruptAgent({ call: (m, params, t) => herdr(m, params, t), sleep: sleep$1, now: Date.now }, p);
   if (!r.stopped) return null;
   const item = await takeBackFromClaude(p);
   if (!item) return null;
@@ -18220,13 +19198,14 @@ function retryQueued(paneId, id) {
   q.failed = false;
   q.held = true;
   q.at = Date.now();
+  delete q.back;
   delete q.busy;
   delete q.readySince;
   delete q.turnSeen;
   delete q.stuckSince;
   delete q.noInput;
   setTimeout(poll, 50);
-  return publicEntry(q);
+  return queuedPasted(publicEntry(q));
 }
 const reconcileBusy = /* @__PURE__ */ new Set();
 function reconcileQueued(p) {
@@ -18242,11 +19221,11 @@ function reconcileQueued(p) {
 }
 const unqueueBusy = /* @__PURE__ */ new Set();
 async function deliveryDone(paneId) {
-  for (let i = 0; i < 60 && deliverBusy.has(paneId); i++) await sleep(100);
+  for (let i = 0; i < 60 && deliverBusy.has(paneId); i++) await sleep$1(100);
 }
 async function cancelQueued(paneId, text, id) {
   const p = findPane(paneId);
-  if (!p || !p.agent) throw new HerdrError("not_found", "agent not found");
+  if (!p) throw new HerdrError("not_found", "agent not found");
   let mine = findQueued(queued.get(p.id) || [], text, id);
   if (mine && (mine.held || mine.failed) && deliverBusy.has(p.id)) {
     await deliveryDone(p.id);
@@ -18262,6 +19241,7 @@ async function cancelQueued(paneId, text, id) {
     setTimeout(poll, 50);
     return { text: mine.text };
   }
+  if (!p.agent) throw new HerdrError("not_found", "agent not found");
   const pend = pendingPrompts.get(p.id);
   if (pend && !pendingBusy.has(p.id) && sameMsg(msgText(pend.text), msgText(text))) {
     pendingPrompts.delete(p.id);
@@ -18288,7 +19268,7 @@ async function cancelQueued(paneId, text, id) {
         return { queue: r2.queue || [], items: r2.items || [] };
       },
       prompt: (t) => agentPrompt(p.id, t),
-      sleep,
+      sleep: sleep$1,
       original: (e) => {
         var _a2, _b2;
         return !e.text && e.images ? ((_a2 = ownPhotos.shift()) == null ? void 0 : _a2.text) || fromHistory(e) : ((_b2 = own.find((q) => q !== mine && sameMsg(e.text, msgText(q.text)))) == null ? void 0 : _b2.text) || fromHistory(e) || e.text;
@@ -18320,6 +19300,41 @@ const pendingBusy = /* @__PURE__ */ new Set();
 const READY = /* @__PURE__ */ new Set(["done", "idle"]);
 const TURN = /* @__PURE__ */ new Set(["working", "blocked"]);
 const restarts = /* @__PURE__ */ new Map();
+const LAST_AGENTS_FILE = path$1.join(DATA_DIR, "last-agents.json");
+let lastAgentsWrite = Promise.resolve();
+const selfUpdates = createSelfUpdates({
+  call: herdr,
+  sleep: sleep$1,
+  now: Date.now,
+  chat: (p) => transcripts.chat(p, { fresh: true }),
+  // Only called when a record changed (see agentSelfUpdate.ts).
+  save: (records, sync) => {
+    const s = JSON.stringify(records) + "\n";
+    if (sync) {
+      try {
+        fs.mkdirSync(DATA_DIR, { recursive: true });
+        fs.writeFileSync(LAST_AGENTS_FILE, s, { mode: 384 });
+      } catch {
+      }
+      return;
+    }
+    lastAgentsWrite = lastAgentsWrite.then(async () => {
+      await fsp$1.mkdir(DATA_DIR, { recursive: true });
+      await fsp$1.writeFile(LAST_AGENTS_FILE, s, { mode: 384 });
+    }).catch(() => {
+    });
+  }
+}, (() => {
+  try {
+    return JSON.parse(fs.readFileSync(LAST_AGENTS_FILE, "utf8"));
+  } catch {
+    return [];
+  }
+})());
+function dismissStopped(paneId) {
+  selfUpdates.clear(paneId);
+  giveBackHeld(queued.get(paneId));
+}
 function flushPending(p) {
   const pend = pendingPrompts.get(p.id);
   if (!pend || pendingBusy.has(p.id)) return;
@@ -18421,6 +19436,7 @@ async function enrich(next, snap, machine) {
   const firstSnapshot = !seenMachines.has(machine);
   const prevStatus = new Map((((_a2 = mstates.get(machine)) == null ? void 0 : _a2.panes) || []).map((p) => [p.id, p.status || void 0]));
   const live = new Set(next.panes.map((p) => p.id));
+  selfUpdates.prune(live, (id) => machineOf(id) === machine);
   for (const id of commands.keys()) if (machineOf(id) === machine && !live.has(id)) commands.delete(id);
   for (const p of next.panes) {
     const b = agentBorn.get(p.id);
@@ -18445,7 +19461,14 @@ async function enrich(next, snap, machine) {
   seenMachines.add(machine);
   (_b2 = getMachine(machine)) == null ? void 0 : _b2.transcripts.observe(next.panes);
   const revs = new Map((snap.panes || []).map((p) => [joinId(machine, p.pane_id), p.revision]));
-  for (const p of next.panes) {
+  const exited = await Promise.all(next.panes.map((p) => selfUpdates.observe(p, restarts.has(p.id)).catch(() => false)));
+  for (const [i, p] of next.panes.entries()) {
+    if (exited[i]) {
+      p.interaction = "managed";
+      if (queued.has(p.id)) p.queued = queued.get(p.id).map((q) => queuedPasted(publicEntry(q)));
+      continue;
+    }
+    if (leftForGood(p, findPane(p.id))) giveBackHeld(queued.get(p.id));
     if (pendingPrompts.has(p.id)) {
       p.pendingPrompt = true;
       flushPending(p);
@@ -18460,13 +19483,13 @@ async function enrich(next, snap, machine) {
         else queued.delete(p.id);
       }
       const list = queued.get(p.id);
-      const menu = Boolean(before && (before.menu || before.prompt || before.screen)) || restarting(p.id);
+      const menu = Boolean(before && (before.menu || before.prompt || before.screen || before.interaction === "terminal")) || restarting(p.id);
       if (list && TURN.has(p.status || "")) {
         for (const q of list) if (!q.held && !q.failed) q.turnSeen = true;
       }
       if (list && checkQueue(list, (before == null ? void 0 : before.ompShell) ? "working" : p.status, Date.now(), menu)) log(`message not sent on ${p.id}`);
       if (list) deliverHeld(p);
-      if (list && list.length) p.queued = list.map(publicEntry);
+      if (list && list.length) p.queued = list.map((q) => queuedPasted(publicEntry(q)));
     }
     const rs = restarts.get(p.id);
     if (rs && rs.phase === "failed" && (p.agent && rs.stopped || Date.now() - rs.at > 6e5)) restarts.delete(p.id);
@@ -18484,10 +19507,16 @@ async function enrich(next, snap, machine) {
     if (p.status !== "working") {
       const young = !p.agentSession || p.bornAt && Date.now() - p.bornAt < 12e4;
       const c = await choicesFor(p, revs.get(p.id), p.status !== "blocked", Boolean(young));
+      p.interaction = c.interaction;
+      if (c.usageLimit) {
+        p.usageLimit = c.usageLimit;
+        p.status = "idle";
+      }
       if (c.choices) p.prompt = c.choices;
       if (c.screen) p.screen = c.screen;
       if (c.menu) p.menu = c.menu;
     } else {
+      p.interaction = "working";
       choicesCache.delete(p.id);
       askChecks.delete(p.id);
     }
@@ -18672,14 +19701,17 @@ const localMachineOf = (ms) => ms.find((m) => m.local);
 function stopPolling() {
   stopped = true;
   if (pollTimer) clearTimeout(pollTimer);
+  selfUpdates.flush();
 }
 const notifyTimers = /* @__PURE__ */ new Map();
 function watchTransitions(prev, next) {
+  var _a2;
   const before = new Map(prev.panes.map((p) => [p.id, p.status]));
   for (const p of next.panes) {
     const was = before.get(p.id);
-    if (!p.agent || was === p.status) continue;
-    if (was === "working" && (p.status === "blocked" || READY.has(p.status || ""))) {
+    const updated = p.stopped && !((_a2 = prev.panes.find((x) => x.id === p.id)) == null ? void 0 : _a2.stopped);
+    if (!p.agent || was === p.status && !updated) continue;
+    if (updated || was === "working" && (p.status === "blocked" || READY.has(p.status || ""))) {
       clearTimeout(notifyTimers.get(p.id));
       const target = p.status;
       notifyTimers.set(p.id, setTimeout(() => {
@@ -19170,1059 +20202,1598 @@ function stopNotices() {
   listeners.clear();
 }
 
-const fsp = fs.promises;
-const REFUSED = {
-  archive: "Archives cannot be read by the agent: extract the files first",
-  video: "Videos cannot be read by the agent",
-  audio: "Audio files cannot be read by the agent",
-  office: "Office documents cannot be read by the agent: export to PDF or text first",
-  executable: "Programs and binary files cannot be read by the agent",
-  binary: "Binary files cannot be read by the agent",
-  pdf: "This agent cannot read PDFs: only Claude Code can",
-  too_large: "File too large for the agent",
-  empty: "Empty file"
+// The phone address: wherdr published on the tailnet by `tailscale serve`
+// (private, only your devices). Reads Tailscale's state, publishes and
+// unpublishes wherdr's port, and checks that the address really answers.
+// Used by the server (Settings › Phone, server/utils/phone.ts) and by
+// `wherdr phone` / `wherdr panel`. No dependency on the rest of bin/lib nor
+// on packages: the server bundles this file.
+
+const exec = promisify(execFile);
+
+const LINKS = {
+  download: 'https://tailscale.com/download',
+  https: 'https://login.tailscale.com/admin/dns',
+  operator: 'https://tailscale.com/kb/1242/tailscale-serve',
 };
-async function saveAttachment(data, originalName, paneId) {
-  const pane = findPane(paneId);
-  const m = machineOfPane(paneId);
-  if (!pane || !m) throw new HerdrError("bad_pane", "Pane not found");
-  const check = checkAttachment(pane.agent, { name: originalName, type: "", size: data.length }, data.subarray(0, SNIFF_BYTES));
-  if (check.ok && check.kind === "image") throw new HerdrError("unsupported", "Images go through the photo upload");
-  if (!check.ok) throw new HerdrError(check.reason === "too_large" ? "too_large" : "unsupported", REFUSED[check.reason]);
-  const stored = storedAttachmentName(originalName, /* @__PURE__ */ new Date(), crypto.randomBytes(3).toString("hex"));
-  if (!isStoredAttachmentName(stored)) throw new HerdrError("bad_name", "Invalid file name");
-  let file;
-  if (m instanceof RemoteMachine) {
-    if (m.status !== "online") throw new HerdrError("unreachable", fmt("{machine} is unreachable", { machine: m.label }));
-    file = await m.putUpload(stored, data, "file");
-  } else {
-    file = path$1.join(ATTACH_DIR, stored);
-    if (path$1.dirname(file) !== path$1.resolve(ATTACH_DIR)) throw new HerdrError("bad_name", "Invalid file name");
-    await fsp.mkdir(ATTACH_DIR, { recursive: true, mode: 448 });
-    await fsp.writeFile(file, data, { mode: 384, flag: "wx" });
+
+// The tailscale CLI: the macOS app's binary, Homebrew, system folders, then the PATH.
+function tailscaleBin(env = process.env, exists = existsSync) {
+  const dirs = ['/Applications/Tailscale.app/Contents/MacOS/Tailscale', '/opt/homebrew/bin/tailscale', '/usr/local/bin/tailscale', '/usr/bin/tailscale'];
+  for (const dir of (env.PATH || '').split(path$1.delimiter)) if (dir) dirs.push(path$1.join(dir, 'tailscale'));
+  return dirs.find(p => exists(p)) || null
+}
+
+// Tailscale's own socket on Linux. Its local API answers the same JSON as the
+// CLI: a Docker container has no `tailscale` command, but docker-compose.yml
+// mounts this folder, so wherdr reads the state there. Anyone may read; the
+// API also accepts changes from Tailscale's operator, but wherdr only ever
+// sends GET requests to it (localApi below).
+const TAILSCALED_SOCKET = '/var/run/tailscale/tailscaled.sock';
+function tailscaledSocket(env = process.env, exists = existsSync) {
+  const file = env.WHERDR_TAILSCALED_SOCKET || TAILSCALED_SOCKET;
+  return exists(file) ? file : null
+}
+
+// GET on Tailscale's local API → the body, '' on any failure.
+function localApi(socketPath, route, timeoutMs = 4000) {
+  const { promise, resolve } = Promise.withResolvers();
+  const req = http.get({ socketPath, path: `/localapi/v0/${route}`, headers: { host: 'local-tailscaled.sock' }, timeout: timeoutMs }, (res) => {
+    let text = '';
+    res.setEncoding('utf8');
+    res.on('data', (c) => { if (text.length < 1 << 20) text += c; });
+    res.on('end', () => resolve(res.statusCode === 200 ? text : ''));
+    res.on('error', () => resolve(''));
+  });
+  req.on('timeout', () => req.destroy());
+  req.on('error', () => resolve(''));
+  return promise
+}
+
+// `tailscale status --json` → { name, connected, https }: this machine's
+// tailnet name (machine.tailnet.ts.net) or null, whether Tailscale is up,
+// and whether the tailnet issues HTTPS certificates.
+function tailnetStatus(statusJson) {
+  let s = null;
+  try { s = JSON.parse(statusJson); } catch {}
+  const dns = s?.Self?.DNSName;
+  return {
+    name: typeof dns === 'string' && dns ? dns.replace(/\.$/, '') : null,
+    connected: s?.BackendState === 'Running',
+    https: Array.isArray(s?.CertDomains) && s.CertDomains.length > 0,
+  }
+}
+
+// The HTTPS entries of a serve configuration that proxy to wherdr's local
+// port on this machine's own name: [{ hostPort, httpsPort, funnel }], or null
+// when the configuration could not be read (Tailscale stopped, not JSON).
+// Background entries (`--bg`) and those of a `tailscale serve` still running
+// in a terminal (Foreground) both count. `funnel`: also open to the Internet.
+function wherdrEntries(name, port, serveJson) {
+  let config = null;
+  try { config = JSON.parse(serveJson); } catch {}
+  if (!name || !config || typeof config !== 'object' || Array.isArray(config)) return null
+  const target = new RegExp(`^(https?://)?(127\\.0\\.0\\.1|localhost):${port}/?$`);
+  const out = [];
+  for (const part of [config, ...Object.values(config.Foreground || {})]) {
+    for (const [hostPort, entry] of Object.entries(part?.Web || {})) {
+      const colon = hostPort.lastIndexOf(':');
+      if (hostPort.slice(0, colon).toLowerCase() !== name.toLowerCase()) continue
+      if (!Object.values(entry?.Handlers || {}).some(h => target.test(h?.Proxy || ''))) continue
+      out.push({ hostPort, httpsPort: hostPort.slice(colon + 1), funnel: Boolean(part.AllowFunnel?.[hostPort]) });
+    }
   }
-  log(`file received ${stored} (${Math.round(data.length / 1024)} KB, ${check.kind})${m instanceof RemoteMachine ? ` -> ${m.label}` : ""}`);
-  return { path: file, name: stored, kind: check.kind, size: data.length, ref: attachmentRef(pane.agent, check.kind, file) };
+  return out
 }
-async function cleanAttachments() {
+
+const addressOf = (name, httpsPort) => `https://${name}${httpsPort === '443' ? '' : `:${httpsPort}`}/`;
+
+// Phone address: the `tailscale serve` entry whose proxy targets wherdr's
+// local port (served on any HTTPS port), else the address publishing would
+// give (same port) with served: false. Null without a tailnet name.
+function phoneAddress(name, port, serveJson) {
+  if (!name) return null
+  const entries = wherdrEntries(name, port, serveJson) || [];
+  const hit = entries.find(e => !e.funnel) || entries[0];
+  if (hit) return { url: addressOf(name, hit.httpsPort), served: true, httpsPort: hit.httpsPort, ...(hit.funnel ? { funnel: true } : {}) }
+  return { url: `https://${name}:${port}/`, served: false, httpsPort: String(port) }
+}
+
+// The addresses wherdr adopts by itself (server/utils/phone.ts): what
+// `tailscale serve` publishes for its port on this machine's name, read from
+// Tailscale, which only the owner of the machine configures. null: unknown
+// (nothing is changed then); []: nothing is published. An address that
+// `tailscale funnel` also opens to the Internet is never adopted.
+function servedAddresses(name, port, serveJson) {
+  const entries = wherdrEntries(name, port, serveJson);
+  return entries && entries.filter(e => !e.funnel).map(e => addressOf(name, e.httpsPort))
+}
+
+// HTTPS ports already published by `tailscale serve` (for anything).
+function servedPorts(serveJson) {
   try {
-    for (const n of await fsp.readdir(ATTACH_DIR)) {
-      const f = path$1.join(ATTACH_DIR, n);
-      const st = await fsp.lstat(f);
-      if (st.isFile() && Date.now() - st.mtimeMs > UPLOAD_TTL_MS) await fsp.unlink(f);
-    }
+    const web = JSON.parse(serveJson || '{}')?.Web || {};
+    return Object.keys(web).map(k => k.slice(k.lastIndexOf(':') + 1))
+  } catch { return [] }
+}
+
+// The command that publishes wherdr's port, as typed by hand (Docker mode).
+// `httpsPort`: the tailnet port, wherdr's own by default.
+const publishCommand = (port, httpsPort = port) => `tailscale serve --bg --https=${httpsPort} http://127.0.0.1:${port}`;
+const publishArgs = port => ['serve', '--bg', `--https=${port}`, `http://127.0.0.1:${port}`];
+const unpublishArgs = httpsPort => ['serve', `--https=${httpsPort}`, 'off'];
+
+// A tailnet address typed by hand: https://machine.tailnet.ts.net[:port]/ → its
+// normalized form, or null.
+function tailnetUrl(text) {
+  try {
+    const u = new URL(String(text || '').trim());
+    if (u.protocol !== 'https:' || !/^[a-z0-9-]+(\.[a-z0-9-]+)*\.ts\.net$/i.test(u.hostname) || u.username || u.password) return null
+    return `https://${u.host.toLowerCase()}/`
+  } catch { return null }
+}
+
+// A failed `tailscale serve` → { code, link } for the known causes, else null.
+// code: 'operator' (Linux: the user may not change Tailscale's settings),
+// 'https' (no HTTPS certificates on the tailnet), 'offline' (not connected).
+function serveError(output) {
+  const text = String(output || '');
+  const link = /https:\/\/login\.tailscale\.com\/\S+/.exec(text)?.[0];
+  if (/access denied|permission denied|--operator|not permitted/i.test(text)) return { code: 'operator', link: LINKS.operator }
+  if (/https?\b.*(not enabled|disabled)|serve.*not enabled|enable https|certificates?.*(not enabled|disabled)|\/f\/serve/i.test(text)) return { code: 'https', link: link || LINKS.https }
+  if (/needslogin|not logged in|logged out|tailscale is stopped|is tailscale running|not running|failed to connect to local tailscale/i.test(text)) return { code: 'offline', link: LINKS.download }
+  return null
+}
+
+// Tailscale's state for wherdr's port: { installed, bin, socket, connected,
+// https, name, phone, taken, served }. Read with the CLI, or without one
+// (Docker) from Tailscale's socket.
+async function inspect(port, bin = tailscaleBin(), socket = bin ? null : tailscaledSocket()) {
+  if (!bin && !socket) return { installed: false }
+  const run = args => exec(bin, args, { encoding: 'utf8', timeout: 8000 }).then(r => r.stdout, () => '');
+  const status = tailnetStatus(bin ? await run(['status', '--json']) : await localApi(socket, 'status?peers=false'));
+  const serve = !status.name ? '' : bin ? await run(['serve', 'status', '--json']) : await localApi(socket, 'serve-config');
+  const phone = phoneAddress(status.name, port, serve);
+  // Publishing on wherdr's port would replace whatever else is served there.
+  const taken = Boolean(phone && !phone.served && servedPorts(serve).includes(String(port)));
+  return { installed: true, bin, socket, ...status, phone, taken, served: servedAddresses(status.name, port, serve) }
+}
+
+// The tailnet's DNS suffix (tailnet.ts.net) from /etc/resolv.conf's search
+// line: a Docker container copies it from the host when MagicDNS is on.
+function tailnetDomain(resolvConf) {
+  for (const line of String(resolvConf || '').split('\n')) {
+    const m = /^\s*search\s+(.+)$/.exec(line);
+    const hit = m?.[1].split(/\s+/).find(d => /^[a-z0-9-]+\.ts\.net$/i.test(d));
+    if (hit) return hit.toLowerCase()
+  }
+  return null
+}
+
+// Tailscale's DNS (MagicDNS): a Docker container does not use it, but reaches it.
+const MAGIC_DNS = '100.100.100.100';
+
+// The system's lookup, then MagicDNS for *.ts.net names.
+function lookup(host, opts, cb) {
+  dns.lookup(host, opts, (err, address, family) => {
+    if (!err || !/\.ts\.net$/i.test(host)) return cb(err, address, family)
+    const resolver = new dns.Resolver({ timeout: 3000, tries: 1 });
+    resolver.setServers([MAGIC_DNS]);
+    resolver.resolve4(host, (e2, list) => {
+      if (e2 || !list?.length) return cb(err)
+      if (opts?.all) cb(null, list.map(a => ({ address: a, family: 4 })));
+      else cb(null, list[0], 4);
+    });
+  });
+}
+
+// Why a request failed: 'dns' (name not found), 'refused', 'timeout', 'cert'
+// (invalid certificate), 'tls' (no HTTPS on that port), or 'network'.
+function failureCause(err) {
+  const code = String(err?.code || '');
+  const msg = String(err?.message || '');
+  if (code === 'ENOTFOUND' || code === 'EAI_AGAIN' || code === 'EAI_NONAME') return 'dns'
+  if (code === 'ECONNREFUSED') return 'refused'
+  if (code === 'ETIMEDOUT' || msg === 'timeout') return 'timeout'
+  if (/CERT|SELF_SIGNED|UNABLE_TO_VERIFY|ALTNAME/.test(code)) return 'cert'
+  if (code === 'EPROTO' || /wrong version number|ssl3_get_record|packet length/i.test(msg)) return 'tls'
+  return 'network'
+}
+
+// GET of `route` on the address → { status, text }, or { cause } when it failed.
+function fetchText(url, route, timeoutMs) {
+  const { promise, resolve } = Promise.withResolvers();
+  let u;
+  try { u = new URL(route, url); } catch { return Promise.resolve({ cause: 'network' }) }
+  // Accept JSON: a refused host then answers { code: 'host' }, not the HTML page.
+  const req = https.get(u, { lookup, timeout: timeoutMs, headers: { accept: 'application/json' } }, (res) => {
+    let text = '';
+    res.setEncoding('utf8');
+    res.on('data', (c) => { if (text.length < 65536) text += c; });
+    res.on('end', () => resolve({ status: res.statusCode || 0, text }));
+    res.on('error', e => resolve({ cause: failureCause(e) }));
+  });
+  req.on('timeout', () => req.destroy(new Error('timeout')));
+  req.on('error', e => resolve({ cause: failureCause(e) }));
+  return promise
+}
+
+// What an answer of /api/health means: 'ok' (wherdr, and it accepts this
+// address), 'host' (wherdr's host check refused it), or null: not a wherdr
+// that has this route (versions up to 1.3.1, or another program).
+function healthReach(status, text) {
+  if (status >= 200 && status < 300 && /"name"\s*:\s*"wherdr"/.test(text)) return 'ok'
+  if (status === 403 && /"code"\s*:\s*"host"/.test(text)) return 'host'
+  return null
+}
+
+// reachable() with the details: { reach, cause?, status? }: `cause` when
+// unreachable (failureCause), `status` the HTTP code when something answered.
+// /api/health is asked first: it goes through wherdr's host check, which the
+// static manifest does not (it answers for any host name). The manifest only
+// recognizes an older wherdr without that route.
+async function probe(url, timeoutMs = 8000) {
+  const health = await fetchText(url, 'api/health', timeoutMs);
+  if (health.cause) return { reach: 'unreachable', cause: health.cause }
+  const reach = healthReach(health.status, health.text);
+  if (reach) return { reach, status: health.status }
+  const manifest = await fetchText(url, 'manifest.webmanifest', timeoutMs);
+  if (manifest.cause) return { reach: 'unreachable', cause: manifest.cause }
+  const ok = manifest.status >= 200 && manifest.status < 300 && manifest.text.includes('wherdr');
+  return { reach: ok ? 'ok' : 'other', status: ok ? manifest.status : health.status }
+}
+
+// Runs `tailscale <args>` without a terminal → { code, output }. On a tailnet
+// without HTTPS, `tailscale serve` prints a link and waits: the timeout ends it.
+function runTailscale(bin, args, timeoutMs = 30_000) {
+  return exec(bin, args, { encoding: 'utf8', timeout: timeoutMs }).then(
+    r => ({ code: 0, output: `${r.stdout}${r.stderr}` }),
+    e => ({ code: typeof e.code === 'number' ? e.code : -1, output: `${e.stdout || ''}${e.stderr || ''}${e.message || ''}` }),
+  )
+}
+
+const PHONE_GRACE_MS = 9e4;
+const TRANSIENT = { timeout: true, tls: true, refused: true, cert: true, network: true };
+function phoneReach(probe, since, now = Date.now()) {
+  if (probe.reach !== "unreachable") return probe.reach;
+  return probe.cause && TRANSIENT[probe.cause] && now - since < PHONE_GRACE_MS ? "pending" : "unreachable";
+}
+
+function qrSvg(text) {
+  const qr = new QRCode(-1, QRErrorCorrectLevel.M);
+  qr.addData(text);
+  qr.make();
+  const n = qr.getModuleCount();
+  let d = "";
+  for (let r = 0; r < n; r++) {
+    for (let col = 0; col < n; col++) if (qr.isDark(r, col)) d += `M${col + 2} ${r + 2}h1v1h-1z`;
+  }
+  return { size: n + 4, path: d };
+}
+
+function hostname(value) {
+  try {
+    if (!value || /[\s/@?#]/.test(value)) return null;
+    const url = new URL(`http://${value}`);
+    if (url.username || url.password || url.pathname !== "/" || url.search || url.hash) return null;
+    return url.hostname.replace(/^\[|\]$/g, "").toLowerCase().replace(/\.$/, "");
   } catch {
+    return null;
   }
 }
-
-const _mZt23IdRC2vLuqDtWT6mb7m9BgHXq3U5QrnQ7Z5Hc4c = defineNitroPlugin((nitroApp) => {
-  initVapid();
-  startMachines();
-  startPolling();
-  startThreadLimits();
-  startNotices();
-  cleanUploads();
-  cleanAttachments();
-  const purge = setInterval(() => {
-    cleanUploads();
-    cleanAttachments();
-  }, 6 * 3600 * 1e3);
-  log(`herdr-web \u2014 socket ${HERDR_SOCK}${HERDR_SESSION ? ` (session ${HERDR_SESSION})` : ""}`);
-  nitroApp.hooks.hook("close", () => {
-    stopPolling();
-    stopNotices();
-    stopMachines();
-    clearInterval(purge);
+let servedHosts = [];
+function setServedHosts(urls) {
+  servedHosts = urls.flatMap((url) => {
+    try {
+      return [new URL(url).hostname.toLowerCase()];
+    } catch {
+      return [];
+    }
   });
-});
+}
+function allowedHosts(appUrl2 = process.env.APP_URL || "", extra = process.env.HERDR_WEB_ALLOWED_HOSTS || "", interfaces = os.networkInterfaces(), served = servedHosts) {
+  const names = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1", os.hostname().toLowerCase(), ...served]);
+  try {
+    if (appUrl2) names.add(new URL(appUrl2).hostname.toLowerCase().replace(/^\[|\]$/g, ""));
+  } catch {
+  }
+  for (const addresses of Object.values(interfaces)) {
+    for (const address of addresses || []) names.add(address.address.toLowerCase().replace(/%.+$/, ""));
+  }
+  for (const item of extra.split(",")) {
+    const name = hostname(item.trim());
+    if (name) names.add(name);
+  }
+  return names;
+}
+function hostAllowed(host, names = allowedHosts()) {
+  const name = hostname(host || "");
+  return Boolean(name && names.has(name));
+}
+function hostRefusalIsHtml(path, accept) {
+  return !path.startsWith("/api/") && /\btext\/html\b/i.test(Array.isArray(accept) ? accept.join(",") : accept || "");
+}
+const CLI_DEFAULT_PORT = "7683";
+function phoneFixCommand(install = process.env.WHERDR_INSTALL || "", port = process.env.NITRO_PORT || process.env.PORT || "") {
+  if (install === "docker" || install === "docker-build" || install === "plugin") return "curl -fsSL https://wherdr.dev/install | sh";
+  const command = install === "brew" || install === "npm-global" ? "wherdr phone" : "npx wherdr phone";
+  return /^\d+$/.test(port) && port !== CLI_DEFAULT_PORT ? `${command} --port ${port}` : command;
+}
+function tailnetName(host) {
+  return /\.ts\.net$/.test(hostname(host || "") || "");
+}
+function hostRefusedPage(install, host, port) {
+  var _a;
+  const kind = (_a = process.env.WHERDR_INSTALL) != null ? _a : "";
+  const command = phoneFixCommand(kind, port);
+  const docker = kind === "docker" || kind === "docker-build";
+  const where = docker ? "in the container's environment" : "in <code>~/wherdr/wherdr.env</code>";
+  const whereFr = docker ? "dans l\u2019environnement du conteneur" : "dans <code>~/wherdr/wherdr.env</code>";
+  const other = !tailnetName(host);
+  const serve = other ? "If you reach wherdr through <code>tailscale serve</code>, wherdr enables that address by itself." : "wherdr enables by itself the address <code>tailscale serve</code> publishes for it.";
+  const serveFr = other ? "Si tu passes par <code>tailscale serve</code>, wherdr active cette adresse tout seul." : "wherdr active tout seul l\u2019adresse que <code>tailscale serve</code> publie pour lui.";
+  return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover">
+<meta name="robots" content="noindex"><title>wherdr \xB7 address not enabled</title>
+<style>
+:root{color-scheme:dark}*{box-sizing:border-box}
+body{margin:0;min-height:100vh;display:grid;place-items:center;background:#0d0f12;color:#e8eaed;font:15px/1.5 Inter,system-ui,-apple-system,sans-serif;padding:24px max(16px,env(safe-area-inset-right)) 24px max(16px,env(safe-area-inset-left))}
+main{max-width:480px;border:1px solid #3a3f47;padding:24px}
+.tag{font:11px/1 "JetBrains Mono",ui-monospace,monospace;letter-spacing:.08em;text-transform:uppercase;color:#9aa0a8;margin:0 0 16px}
+h1{font:600 20px/1.25 Archivo,system-ui,sans-serif;margin:0 0 8px}
+p{margin:0 0 12px}pre+p{margin-top:16px}p:last-child{margin-bottom:0}hr{border:0;border-top:1px solid #3a3f47;margin:20px 0}
+code{font:13px/1.45 "JetBrains Mono",ui-monospace,monospace;overflow-wrap:anywhere}
+pre{margin:0;padding:10px 12px;border:1px solid #3a3f47;background:#15181d;white-space:pre-wrap;overflow-wrap:anywhere;user-select:all;-webkit-user-select:all}
+</style></head><body><main>
+<p class="tag">wherdr \xB7 403</p>
+<h1>This address isn't enabled yet.</h1>
+<p>${serve} On the machine that runs wherdr, run this, then reload:</p>
+<pre><code>${command}</code></pre>${other ? `
+<p>For any other private name or IP address, add it to <code>HERDR_WEB_ALLOWED_HOSTS</code> (comma-separated) ${where}, then restart wherdr.</p>` : ""}
+<hr>
+<h1 lang="fr">Cette adresse n\u2019est pas encore activ\xE9e.</h1>
+<p lang="fr">${serveFr} Sur la machine qui fait tourner wherdr, lance ceci, puis recharge :</p>
+<pre><code>${command}</code></pre>${other ? `
+<p lang="fr">Pour tout autre nom priv\xE9 ou adresse IP, ajoute-le \xE0 <code>HERDR_WEB_ALLOWED_HOSTS</code> (s\xE9par\xE9s par des virgules) ${whereFr}, puis red\xE9marre wherdr.</p>` : ""}
+</main></body></html>
+`;
+}
+function crossSiteRequest(headers) {
+  const site = headers["sec-fetch-site"];
+  return typeof site === "string" && site !== "same-origin" && site !== "none";
+}
 
-const plugins = [
-  _9as7ch5sSe9R7BrbrDE2GGZpuA6oP9uMAcL7iRtRgrw,
-_mZt23IdRC2vLuqDtWT6mb7m9BgHXq3U5QrnQ7Z5Hc4c
-];
+const MAX_SESSION_DAYS = [1, 7, 30, 90, 365];
+const DEFAULT_MAX_SESSION_DAYS = 7;
+const DAY_MS = 24 * 3600 * 1e3;
+function isMaxSessionDays(v) {
+  return MAX_SESSION_DAYS.includes(v);
+}
 
-const assets = {
-  "/manifest-en.webmanifest": {
-    "type": "application/manifest+json",
-    "etag": "\"260-q1JnCK0/ecdKwgeTve6N4I6/mWI\"",
-    "mtime": "2026-10-08T11:44:03.930Z",
-    "size": 608,
-    "path": "../public/manifest-en.webmanifest"
-  },
-  "/manifest.webmanifest": {
-    "type": "application/manifest+json",
-    "etag": "\"26e-ykoYuj4V8la457yChW3oQTur8RU\"",
-    "mtime": "2026-10-08T11:44:03.930Z",
-    "size": 622,
-    "path": "../public/manifest.webmanifest"
-  },
-  "/sw.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"1b1d-uKe7we3azu1ltb6U6uThnVqkUn4\"",
-    "mtime": "2026-10-08T11:44:04.183Z",
-    "size": 6941,
-    "path": "../public/sw.js"
-  },
-  "/_nuxt/AgentView.C4YOwvZG.css": {
-    "type": "text/css; charset=utf-8",
-    "etag": "\"15c8-yoJUdtWy2mP7U+kxJ717a6Bzxgg\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 5576,
-    "path": "../public/_nuxt/AgentView.C4YOwvZG.css"
-  },
-  "/_nuxt/B6qBWHWB.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"13f-jMtJt8dAqnEh2SAOR1babBORdK4\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 319,
-    "path": "../public/_nuxt/B6qBWHWB.js"
-  },
-  "/_nuxt/BDNMzG2s.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"54-MasMfSk/A98C3Gn9uIOxtFxkWNw\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 84,
-    "path": "../public/_nuxt/BDNMzG2s.js"
-  },
-  "/_nuxt/Bd17z0YL.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"1615-CPDn06/EO3pj6KudXz5uMZ0FkhI\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 5653,
-    "path": "../public/_nuxt/Bd17z0YL.js"
-  },
-  "/_nuxt/BpQH8Ho1.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"e3-flLwB9P4XX6B82smMHA/xJ0MHtI\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 227,
-    "path": "../public/_nuxt/BpQH8Ho1.js"
-  },
-  "/_nuxt/BMIe8p_3.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"1f34c-xbnpB4ou/Yo+mnIWUPmKT1dw6kg\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 127820,
-    "path": "../public/_nuxt/BMIe8p_3.js"
-  },
-  "/_nuxt/C12eXl5z.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"3743-LHJuwpFjgipbDnhMaCyj/9CAzuY\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 14147,
-    "path": "../public/_nuxt/C12eXl5z.js"
-  },
-  "/_nuxt/C2T9fQ4f.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"238-ULCQ+lAhpp4nPDbIDScqd3xGFLs\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 568,
-    "path": "../public/_nuxt/C2T9fQ4f.js"
-  },
-  "/_nuxt/CWwyK2XK.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"7e5e-4BG2J9cvS3sx6WQ360LFqNaThyA\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 32350,
-    "path": "../public/_nuxt/CWwyK2XK.js"
-  },
-  "/_nuxt/BrAeJIZR.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"46cdd-poAuGC5qlfraU64uRa+Yc2AkKhw\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 290013,
-    "path": "../public/_nuxt/BrAeJIZR.js"
-  },
-  "/_nuxt/CXG-cOdh.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"d4e-hM6T4bjr/qfJVvSNRqFH3ePHBQY\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 3406,
-    "path": "../public/_nuxt/CXG-cOdh.js"
-  },
-  "/_nuxt/CYxHnMNH.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"16ad4-A0W9NTd4vhWgkMxHSgPh07/MudQ\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 92884,
-    "path": "../public/_nuxt/CYxHnMNH.js"
-  },
-  "/_nuxt/Ci8N4mWR.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"2426-fCrTYUyhtdHnTmu6ZJeEttvxVMo\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 9254,
-    "path": "../public/_nuxt/Ci8N4mWR.js"
-  },
-  "/_nuxt/CctS2Xn6.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"16078-Cz/Wvlpwr6os4SjIEqnTr9/8LlU\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 90232,
-    "path": "../public/_nuxt/CctS2Xn6.js"
-  },
-  "/_nuxt/DLLQgP0d.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"ed-o6vDEpQGmmIRAyMcrFDkG+VrA/Y\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 237,
-    "path": "../public/_nuxt/DLLQgP0d.js"
-  },
-  "/_nuxt/CiYar6hg.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"16f07-We6JfDwPvSXrF5YZ4079o5Xc8i8\"",
-    "mtime": "2026-10-08T11:44:03.918Z",
-    "size": 93959,
-    "path": "../public/_nuxt/CiYar6hg.js"
-  },
-  "/_nuxt/SiL1FJ5s.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"176ad-/hlyeMkW67OV1A4G2nhIsYJX+vE\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 95917,
-    "path": "../public/_nuxt/SiL1FJ5s.js"
-  },
-  "/_nuxt/Dwh-l2rQ.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"3919e-zK0jGmVhIk455555qPCvrLTDhXs\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 233886,
-    "path": "../public/_nuxt/Dwh-l2rQ.js"
-  },
-  "/_nuxt/archivo-latin-ext-wght-normal.C4zznr8T.woff2": {
-    "type": "font/woff2",
-    "etag": "\"7f60-cwHN4xD2RhU0GVBfKzpzYZ7Al6U\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 32608,
-    "path": "../public/_nuxt/archivo-latin-ext-wght-normal.C4zznr8T.woff2"
-  },
-  "/_nuxt/archivo-latin-wght-normal.E0tuGl4L.woff2": {
-    "type": "font/woff2",
-    "etag": "\"8870-ZUSfFgU3jYpWYbszVY1rxpynehc\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 34928,
-    "path": "../public/_nuxt/archivo-latin-wght-normal.E0tuGl4L.woff2"
-  },
-  "/_nuxt/archivo-vietnamese-wght-normal.XAtsl5Q_.woff2": {
-    "type": "font/woff2",
-    "etag": "\"33b8-4zjQHgOy7y9EDRZs7TDAFDM4Ams\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 13240,
-    "path": "../public/_nuxt/archivo-vietnamese-wght-normal.XAtsl5Q_.woff2"
-  },
-  "/_nuxt/WLQjK8uJ.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"9b3fe-Mhwqc5w8lJiuRM/0t8kIRoh6evE\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 635902,
-    "path": "../public/_nuxt/WLQjK8uJ.js"
-  },
-  "/_nuxt/bLP7Jj-b.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"eab-MDKLGS0aoyNdipefSjbM7x6w6Y8\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 3755,
-    "path": "../public/_nuxt/bLP7Jj-b.js"
-  },
-  "/_nuxt/error-404.Bb87HomL.css": {
-    "type": "text/css; charset=utf-8",
-    "etag": "\"97d-4h9VfBznldxjqagfMldh1hDncR0\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 2429,
-    "path": "../public/_nuxt/error-404.Bb87HomL.css"
-  },
-  "/_nuxt/error-500.Bwd7zAaE.css": {
-    "type": "text/css; charset=utf-8",
-    "etag": "\"772-nqXXACYtFiPK+D42BNu4uEECARA\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 1906,
-    "path": "../public/_nuxt/error-500.Bwd7zAaE.css"
-  },
-  "/_nuxt/inter-cyrillic-ext-wght-normal.BOeWTOD4.woff2": {
-    "type": "font/woff2",
-    "etag": "\"6568-cF1iUGbboMFZ8TfnP5HiMgl9II0\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 25960,
-    "path": "../public/_nuxt/inter-cyrillic-ext-wght-normal.BOeWTOD4.woff2"
-  },
-  "/_nuxt/inter-cyrillic-wght-normal.DqGufNeO.woff2": {
-    "type": "font/woff2",
-    "etag": "\"493c-n3Oy9D6jvzfMjpClqox+Zo7ERQQ\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 18748,
-    "path": "../public/_nuxt/inter-cyrillic-wght-normal.DqGufNeO.woff2"
-  },
-  "/_nuxt/inter-greek-ext-wght-normal.DlzME5K_.woff2": {
-    "type": "font/woff2",
-    "etag": "\"2be0-BP5iTzJeB8nLqYAgKpWNi5o1Zm8\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 11232,
-    "path": "../public/_nuxt/inter-greek-ext-wght-normal.DlzME5K_.woff2"
-  },
-  "/_nuxt/inter-greek-wght-normal.CkhJZR-_.woff2": {
-    "type": "font/woff2",
-    "etag": "\"4a34-xor/hj4YNqI52zFecXnUbzQ4Xs4\"",
-    "mtime": "2026-10-08T11:44:03.920Z",
-    "size": 18996,
-    "path": "../public/_nuxt/inter-greek-wght-normal.CkhJZR-_.woff2"
-  },
-  "/_nuxt/inter-latin-ext-wght-normal.DO1Apj_S.woff2": {
-    "type": "font/woff2",
-    "etag": "\"14c4c-zz61D7IQFMB9QxHvTAOk/Vh4ibQ\"",
-    "mtime": "2026-10-08T11:44:03.920Z",
-    "size": 85068,
-    "path": "../public/_nuxt/inter-latin-ext-wght-normal.DO1Apj_S.woff2"
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, key + "" , value);
+const SESSION_MS = 12 * 3600 * 1e3;
+const RENEW_MS = 10 * 60 * 1e3;
+const CHALLENGE_MS = 5 * 60 * 1e3;
+const AUTH_COOKIE = "hw_session";
+const CHALLENGE_COOKIE = "hw_challenge";
+class AuthError extends Error {
+  constructor(code, message) {
+    super(message);
+    __publicField(this, "code");
+    this.code = code;
+  }
+}
+function createAuth({ dataDir, log: log2 = () => {
+}, passkeyUser = "herdr" }) {
+  const FILE = path$1.join(dataDir, "auth.json");
+  let db = { secret: null, generation: 0, credentials: [] };
+  try {
+    db = { ...db, ...JSON.parse(fs.readFileSync(FILE, "utf8")) };
+  } catch {
+  }
+  const save = () => {
+    fs.mkdirSync(dataDir, { recursive: true });
+    fs.writeFileSync(FILE, JSON.stringify(db, null, 2) + "\n", { mode: 384 });
+  };
+  if (!db.secret) {
+    db.secret = crypto.randomBytes(32).toString("hex");
+    save();
+  }
+  const bootstrapToken = crypto.randomBytes(24).toString("base64url");
+  if (!db.credentials.length) log2(`First passkey: bootstrap token ${bootstrapToken}`);
+  const enabled = () => db.credentials.length > 0;
+  const sign = (v) => crypto.createHmac("sha256", db.secret).update(v).digest("base64url");
+  const safeEq = (a, b) => {
+    const x = Buffer.from(String(a));
+    const y = Buffer.from(String(b));
+    return x.length === y.length && crypto.timingSafeEqual(x, y);
+  };
+  const readCookie = (req) => {
+    const c = String(req.headers.cookie || "").split(/;\s*/).find((s) => s.startsWith(`${AUTH_COOKIE}=`));
+    if (!c) return null;
+    try {
+      return decodeURIComponent(c.slice(AUTH_COOKIE.length + 1));
+    } catch {
+      return null;
+    }
+  };
+  const challengeClient = (req) => {
+    const c = String(req.headers.cookie || "").split(/;\s*/).find((s) => s.startsWith(`${CHALLENGE_COOKIE}=`));
+    return (c == null ? void 0 : c.slice(CHALLENGE_COOKIE.length + 1)) || null;
+  };
+  const checkBootstrap = (body) => {
+    if (!enabled() && !safeEq(String((body == null ? void 0 : body.bootstrapToken) || ""), bootstrapToken)) {
+      throw new AuthError("bootstrap", "Invalid bootstrap token (see the server logs)");
+    }
+  };
+  const maxSessionMs = () => {
+    var _a;
+    return ((_a = db.maxSessionDays) != null ? _a : DEFAULT_MAX_SESSION_DAYS) * DAY_MS;
+  };
+  function session(req, now = Date.now()) {
+    const v = readCookie(req);
+    if (!v) return null;
+    const parts = v.split(".");
+    if (parts.length !== 3 && parts.length !== 4) return null;
+    const mac = parts.pop();
+    if (!mac || parts[1] !== String(db.generation) || !safeEq(mac, sign(parts.join(".")))) return null;
+    const exp = Number(parts[0]);
+    const since = parts.length === 3 ? Number(parts[2]) : exp - SESSION_MS;
+    if (!(exp >= now) || !Number.isFinite(since)) return null;
+    if (now > since + maxSessionMs() + SESSION_MS) return null;
+    return { exp, since };
+  }
+  function isUnlocked(req) {
+    return !enabled() || session(req) !== null;
+  }
+  const secure = (req) => req.headers["x-forwarded-proto"] === "https" || String(req.headers.origin || "").startsWith("https://") ? "; Secure" : "";
+  function sessionCookie(req, now = Date.now(), since = now) {
+    const exp = now + SESSION_MS;
+    const payload = `${exp}.${db.generation}.${since}`;
+    return `${AUTH_COOKIE}=${payload}.${sign(payload)}; Path=/; HttpOnly; SameSite=Strict; Max-Age=${SESSION_MS / 1e3}${secure(req)}`;
+  }
+  const clearCookie = (req) => `${AUTH_COOKIE}=; Path=/; HttpOnly; SameSite=Strict; Max-Age=0${secure(req)}`;
+  function renew(req, now = Date.now()) {
+    if (!enabled()) return null;
+    const s = session(req, now);
+    if (s === null || s.exp - now > SESSION_MS - RENEW_MS) return null;
+    return { cookie: sessionCookie(req, now, s.since), expiresAt: now + SESSION_MS };
+  }
+  function relying(req) {
+    const origin = String(req.headers.origin || "");
+    const { hostname } = new URL(origin);
+    return { origin, rpID: hostname };
+  }
+  const challenges = /* @__PURE__ */ new Map();
+  const challengeKey = (kind, client) => `${kind}:${client}`;
+  const issueChallenge = (req, kind, value) => {
+    const client = crypto.randomBytes(24).toString("base64url");
+    for (const [key, challenge] of challenges) if (challenge.exp < Date.now()) challenges.delete(key);
+    challenges.set(challengeKey(kind, client), { value, exp: Date.now() + CHALLENGE_MS });
+    return `${CHALLENGE_COOKIE}=${client}; Path=/api/auth/; HttpOnly; SameSite=Strict; Max-Age=${CHALLENGE_MS / 1e3}${secure(req)}`;
+  };
+  const takeChallenge = (req, kind) => {
+    const client = challengeClient(req);
+    const key = challengeKey(kind, client || "");
+    const c = challenges.get(key);
+    challenges.delete(key);
+    if (!c || c.exp < Date.now()) throw new AuthError("challenge", "Challenge expired, try again");
+    return c.value;
+  };
+  async function registerOptions(req, body = {}) {
+    if (enabled() && !isUnlocked(req)) throw new AuthError("locked", "Unlock first");
+    checkBootstrap(body);
+    const { rpID } = relying(req);
+    const opts = await generateRegistrationOptions({
+      rpName: "wherdr",
+      rpID,
+      userName: passkeyUser,
+      userDisplayName: passkeyUser,
+      attestationType: "none",
+      excludeCredentials: db.credentials.map((c) => ({ id: c.id, transports: c.transports })),
+      authenticatorSelection: { residentKey: "preferred", userVerification: "required" }
+    });
+    return { ...opts, __cookie: issueChallenge(req, "reg", opts.challenge) };
+  }
+  async function registerVerify(req, body) {
+    if (enabled() && !isUnlocked(req)) throw new AuthError("locked", "Unlock first");
+    checkBootstrap(body);
+    const { origin, rpID } = relying(req);
+    const v = await verifyRegistrationResponse({
+      response: body.response,
+      expectedChallenge: takeChallenge(req, "reg"),
+      expectedOrigin: origin,
+      expectedRPID: rpID,
+      requireUserVerification: true
+    });
+    if (!v.verified || !v.registrationInfo) throw new AuthError("rejected", "Key rejected");
+    const { credential } = v.registrationInfo;
+    db.credentials.push({
+      id: credential.id,
+      publicKey: Buffer.from(credential.publicKey).toString("base64url"),
+      counter: credential.counter,
+      transports: credential.transports || [],
+      name: String(body.name || "Device").slice(0, 40),
+      createdAt: (/* @__PURE__ */ new Date()).toISOString()
+    });
+    save();
+    log2(`lock: key registered (${db.credentials.length})`);
+    return { ok: true, __cookie: sessionCookie(req) };
+  }
+  async function loginOptions(req) {
+    const { rpID } = relying(req);
+    const opts = await generateAuthenticationOptions({
+      rpID,
+      userVerification: "required",
+      allowCredentials: db.credentials.map((c) => ({ id: c.id, transports: c.transports }))
+    });
+    return { ...opts, __cookie: issueChallenge(req, "auth", opts.challenge) };
+  }
+  async function loginVerify(req, body) {
+    const { origin, rpID } = relying(req);
+    const cred = db.credentials.find((c) => c.id === (body.response && body.response.id));
+    if (!cred) throw new AuthError("unknown_key", "Key unknown on this server");
+    const v = await verifyAuthenticationResponse({
+      response: body.response,
+      expectedChallenge: takeChallenge(req, "auth"),
+      expectedOrigin: origin,
+      expectedRPID: rpID,
+      requireUserVerification: true,
+      credential: { id: cred.id, publicKey: Buffer.from(cred.publicKey, "base64url"), counter: cred.counter, transports: cred.transports }
+    });
+    if (!v.verified) throw new AuthError("rejected", "Unlock rejected");
+    cred.counter = v.authenticationInfo.newCounter;
+    cred.lastUsed = (/* @__PURE__ */ new Date()).toISOString();
+    save();
+    return { ok: true, __cookie: sessionCookie(req) };
+  }
+  function disable(req) {
+    if (!isUnlocked(req)) throw new AuthError("locked", "Unlock first");
+    db.credentials = [];
+    db.generation += 1;
+    save();
+    log2("lock disabled");
+    return { ok: true, __cookie: clearCookie(req) };
+  }
+  function lockAll(req) {
+    if (!enabled() || !isUnlocked(req)) throw new AuthError("locked", "Unlock first");
+    db.generation += 1;
+    save();
+    log2("lock: all devices locked");
+    return { ok: true, __cookie: clearCookie(req) };
+  }
+  function setMaxSession(req, days) {
+    if (!enabled() || !isUnlocked(req)) throw new AuthError("locked", "Unlock first");
+    if (!isMaxSessionDays(days)) throw new AuthError("invalid", "Invalid duration");
+    db.maxSessionDays = days;
+    save();
+    return { ok: true, maxSessionDays: days };
+  }
+  function status(req, { resume = false, now = Date.now() } = {}) {
+    var _a, _b;
+    const devices = db.credentials.map((c) => ({ name: c.name, createdAt: c.createdAt, lastUsed: c.lastUsed || null }));
+    if (!enabled()) return { enabled: false, unlocked: true, devices };
+    const s = session(req, now);
+    const deadline = s ? s.since + maxSessionMs() : 0;
+    if (!s || resume && now >= deadline) {
+      return { enabled: true, unlocked: false, expiresAt: null, now, devices, ...s ? { __cookie: clearCookie(req) } : {} };
+    }
+    const renewed = renew(req, now);
+    return {
+      enabled: true,
+      unlocked: true,
+      expiresAt: (_a = renewed == null ? void 0 : renewed.expiresAt) != null ? _a : s.exp,
+      deadline,
+      now,
+      maxSessionDays: (_b = db.maxSessionDays) != null ? _b : DEFAULT_MAX_SESSION_DAYS,
+      devices,
+      ...renewed ? { __cookie: renewed.cookie } : {}
+    };
+  }
+  return {
+    isUnlocked,
+    status,
+    renew,
+    registerOptions,
+    registerVerify,
+    loginOptions,
+    loginVerify,
+    disable,
+    lockAll,
+    setMaxSession,
+    lock: (req) => ({ ok: true, __cookie: clearCookie(req) }),
+    // For tests.
+    _sessionCookie: sessionCookie,
+    _db: () => db,
+    _bootstrapToken: () => bootstrapToken,
+    _takeChallenge: takeChallenge
+  };
+}
+
+const auth = createAuth({ dataDir: DATA_DIR, log, passkeyUser: PASSKEY_USER });
+const reqOf = (event) => ({ headers: getRequestHeaders(event) });
+function sameOrigin(headers) {
+  const o = headers.origin;
+  if (!o) return false;
+  try {
+    return new URL(o).host === headers.host;
+  } catch {
+    return false;
+  }
+}
+const BODY_MAX = 256 * 1024;
+function sendError(event, status, body) {
+  setResponseStatus(event, status);
+  setResponseHeader(event, "cache-control", "no-store");
+  return body;
+}
+function defineApi(fn, opts = {}) {
+  return defineEventHandler(async (event) => {
+    const url = getRequestURL(event);
+    try {
+      let body = {};
+      if (event.method === "POST") {
+        const headers = getRequestHeaders(event);
+        const ctype = String(headers["content-type"] || "");
+        const typeOk = opts.raw ? opts.raw.test(ctype) : ctype.startsWith("application/json");
+        if (!sameOrigin(headers) || !typeOk) return sendError(event, 403, { error: "Origin refused" });
+        const max = opts.raw ? opts.max || 20 * 1024 * 1024 : BODY_MAX;
+        const tooLarge = opts.raw ? opts.tooLarge || "Image too large (20 MB max)" : "Request too large";
+        if (Number(headers["content-length"] || 0) > max) throw new HerdrError("too_large", tooLarge);
+        const raw = await readRawBody(event, false);
+        if (raw && raw.length > max) throw new HerdrError("too_large", tooLarge);
+        if (opts.raw) body = { data: raw || Buffer.alloc(0), ctype };
+        else {
+          try {
+            body = raw && raw.length ? JSON.parse(raw.toString("utf8")) : {};
+          } catch {
+            throw new HerdrError("bad_json", "Invalid JSON");
+          }
+        }
+      }
+      const out = await fn(event, body);
+      setResponseHeader(event, "cache-control", "no-store");
+      if (out && typeof out === "object" && "__cookie" in out) {
+        const o = out;
+        setResponseHeader(event, "set-cookie", String(o.__cookie));
+        delete o.__cookie;
+      }
+      return out;
+    } catch (e) {
+      const err = e;
+      const known = e instanceof HerdrError || url.pathname.startsWith("/api/auth/") && Boolean(err.code);
+      const code = known ? err.code : "internal";
+      if (!known) log("error", event.method, url.pathname, e);
+      const status = err.code === "unreachable" ? 503 : err.code === "locked" ? 401 : 400;
+      return sendError(event, status, { error: err.message, code });
+    }
+  });
+}
+function sendImage(event, img) {
+  setResponseHeader(event, "content-type", img.type);
+  setResponseHeader(event, "cache-control", "private, max-age=86400");
+  setResponseHeader(event, "x-content-type-options", "nosniff");
+  setResponseHeader(event, "content-security-policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox");
+  return img.body;
+}
+
+const PORT = String(process.env.NITRO_PORT || process.env.PORT || 3e3);
+const LOOPBACK = { "localhost": true, "127.0.0.1": true, "::1": true };
+function phoneAccess(event) {
+  const req = reqOf(event);
+  const lock = auth.status(req);
+  if (lock.enabled && lock.unlocked) return true;
+  const headers = getRequestHeaders(event);
+  let host = "";
+  try {
+    host = new URL(`http://${headers.host || ""}`).hostname.replace(/^\[|\]$/g, "").toLowerCase();
+  } catch {
+    return false;
+  }
+  const proxied = Object.keys(headers).some((k) => k === "x-forwarded-for" || k === "forwarded" || k.startsWith("tailscale-"));
+  const peer = (event.node.req.socket.remoteAddress || "").replace(/^::ffff:/, "");
+  const localPeer = /^127\./.test(peer) || peer === "::1" || IN_DOCKER && peer === dockerGateway();
+  return Boolean(LOOPBACK[host]) && !proxied && localPeer;
+}
+function dockerGateway() {
+  try {
+    const row = fs.readFileSync("/proc/net/route", "utf8").split("\n").map((l) => l.trim().split(/\s+/)).find((f) => f[1] === "00000000");
+    const hex = row == null ? void 0 : row[2];
+    return hex ? [3, 2, 1, 0].map((i) => String(Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16))).join(".") : "";
+  } catch {
+    return "";
+  }
+}
+let adopted = (() => {
+  var _a;
+  try {
+    return ((_a = JSON.parse(fs.readFileSync(APP_URL_FILE, "utf8"))) == null ? void 0 : _a.source) === "serve";
+  } catch {
+    return false;
+  }
+})();
+function saveAppUrl(url, fromServe = false) {
+  if (process.env.APP_URL === url && (adopted || !fromServe)) return;
+  fs.mkdirSync(DATA_DIR, { recursive: true });
+  fs.writeFileSync(APP_URL_FILE, `${JSON.stringify(fromServe ? { url, source: "serve" } : { url }, null, 2)}
+`);
+  adopted = fromServe;
+  if (process.env.APP_URL === url) return;
+  process.env.APP_URL = url;
+  initVapid();
+  log(`APP_URL set to the phone address ${url}`);
+}
+function forgetAppUrl() {
+  fs.rmSync(APP_URL_FILE, { force: true });
+  const was = process.env.APP_URL;
+  if (BOOT_APP_URL) process.env.APP_URL = BOOT_APP_URL;
+  else delete process.env.APP_URL;
+  initVapid();
+  log(`phone address ${was} is no longer published by tailscale serve: forgotten`);
+}
+function applyServed(served) {
+  if (!served) return;
+  setServedHosts(served);
+  if (ENV_APP_URL) return;
+  const current = process.env.APP_URL || "";
+  if (served.length) saveAppUrl(served.includes(current) ? current : served[0], true);
+  else if (adopted) {
+    if (current !== BOOT_APP_URL) forgetAppUrl();
+    adopted = false;
+  }
+}
+const nameListeners = [];
+function onTailnetName(f) {
+  nameListeners.push(f);
+}
+function tellName(name) {
+  if (name) for (const f of nameListeners) f(name);
+}
+let adoptedAt = 0;
+let adopting = null;
+function adoptServed(maxAgeMs = 0) {
+  if (adopting) return adopting;
+  if (maxAgeMs && Date.now() - adoptedAt < maxAgeMs) return Promise.resolve();
+  const bin = tailscaleBin();
+  adopting = inspect(PORT, bin, bin ? null : tailscaledSocket()).then((net) => {
+    applyServed(net.served);
+    tellName(net.name);
+  }, (e) => {
+    log(`tailscale serve could not be read: ${(e == null ? void 0 : e.message) || e}`);
+  }).finally(() => {
+    adoptedAt = Date.now();
+    adopting = null;
+  });
+  return adopting;
+}
+let watch = null;
+function startTailnetWatch() {
+  void adoptServed();
+  watch = setInterval(() => {
+    void adoptServed();
+  }, TAILNET_REFRESH_MS);
+}
+function stopTailnetWatch() {
+  if (watch) clearInterval(watch);
+  watch = null;
+}
+let typed = "";
+const waitSince = /* @__PURE__ */ new Map();
+async function phoneStatus() {
+  var _a, _b, _c, _d, _e, _f, _g;
+  const bin = tailscaleBin();
+  const socket = bin ? null : tailscaledSocket();
+  const out = {
+    mode: bin ? "native" : IN_DOCKER ? "docker" : "missing",
+    platform: process.platform,
+    port: PORT,
+    connected: false,
+    https: false,
+    url: null,
+    served: false,
+    funnel: false,
+    taken: false,
+    suggested: null,
+    command: publishCommand(PORT),
+    reach: null,
+    reachCause: null,
+    reachStatus: null,
+    checkedAt: null,
+    appUrl: "",
+    appUrlFromEnv: Boolean(ENV_APP_URL),
+    qr: null
+  };
+  if (bin || socket) {
+    const net = await inspect(PORT, bin, socket);
+    applyServed(net.served);
+    tellName(net.name);
+    out.connected = Boolean(net.connected && net.name);
+    out.https = Boolean(net.https);
+    out.served = Boolean((_a = net.phone) == null ? void 0 : _a.served);
+    out.funnel = Boolean((_b = net.phone) == null ? void 0 : _b.funnel);
+    out.taken = Boolean(net.taken);
+    out.suggested = (_d = (_c = net.phone) == null ? void 0 : _c.url) != null ? _d : null;
+    out.url = out.served ? net.phone.url : null;
+  }
+  if (out.mode === "docker") {
+    if (!out.suggested) {
+      let resolv = "";
+      try {
+        resolv = fs.readFileSync("/etc/resolv.conf", "utf8");
+      } catch {
+      }
+      const domain = tailnetDomain(resolv);
+      const machine = (process.env.HOST_LABEL || "").trim().toLowerCase().replace(/[^a-z0-9-]/g, "-");
+      out.suggested = domain && machine ? `https://${machine}.${domain}:${PORT}/` : null;
+    }
+    if (!out.url) out.url = typed || tailnetUrl(process.env.APP_URL);
+    const httpsPort = httpsPortOf(out.url || out.suggested);
+    if (httpsPort) out.command = publishCommand(PORT, httpsPort);
+  }
+  if (out.url) {
+    let p = await probe(out.url, 5e3);
+    if (!out.served && (p.reach === "ok" || p.reach === "host") && !ENV_APP_URL) {
+      saveAppUrl(out.url);
+      if (p.reach === "host") p = await probe(out.url, 5e3);
+    }
+    const since = (_e = waitSince.get(out.url)) != null ? _e : Date.now();
+    if (p.reach === "ok") waitSince.delete(out.url);
+    else waitSince.set(out.url, since);
+    out.reach = phoneReach(p, since);
+    out.reachCause = (_f = p.cause) != null ? _f : null;
+    out.reachStatus = (_g = p.status) != null ? _g : null;
+    out.checkedAt = Date.now();
+  }
+  out.appUrl = process.env.APP_URL || "";
+  if (out.reach === "ok" && out.url) out.qr = qrSvg(out.url);
+  return out;
+}
+function httpsPortOf(url) {
+  try {
+    return url ? new URL(url).port : "";
+  } catch {
+    return "";
+  }
+}
+const fail = async (error, more = {}) => ({ ok: false, error, ...more, status: await phoneStatus() });
+async function phoneAction(body) {
+  var _a;
+  if (body.action === "address") {
+    const url = tailnetUrl(body.url);
+    if (!url) return fail("address");
+    typed = url;
+    return { ok: true, status: await phoneStatus() };
+  }
+  if (body.action !== "publish" && body.action !== "unpublish") return fail("failed", { detail: "Unknown action" });
+  const bin = tailscaleBin();
+  if (!bin) return fail("offline", { link: "https://tailscale.com/download" });
+  const net = await inspect(PORT, bin);
+  if (!net.connected || !net.phone) return fail("offline", { link: "https://tailscale.com/download" });
+  let args;
+  if (body.action === "publish") {
+    if (net.phone.served) return { ok: true, status: await phoneStatus() };
+    if (net.taken) return fail("taken");
+    args = publishArgs(PORT);
+  } else {
+    if (!net.phone.served) return { ok: true, status: await phoneStatus() };
+    args = unpublishArgs(net.phone.httpsPort);
+  }
+  const r = await runTailscale(bin, args);
+  waitSince.clear();
+  log(`tailscale ${args.join(" ")} \u2192 ${r.code}`);
+  if (r.code !== 0) {
+    const known = serveError(r.output);
+    return fail((_a = known == null ? void 0 : known.code) != null ? _a : "failed", { link: known == null ? void 0 : known.link, detail: r.output.trim().slice(-600) });
+  }
+  return { ok: true, status: await phoneStatus() };
+}
+
+const fsp = fs.promises;
+const REFUSED = {
+  archive: "Archives cannot be read by the agent: extract the files first",
+  video: "Videos cannot be read by the agent",
+  audio: "Audio files cannot be read by the agent",
+  office: "Office documents cannot be read by the agent: export to PDF or text first",
+  executable: "Programs and binary files cannot be read by the agent",
+  binary: "Binary files cannot be read by the agent",
+  pdf: "This agent cannot read PDFs: only Claude Code can",
+  too_large: "File too large for the agent",
+  empty: "Empty file"
+};
+async function saveAttachment(data, originalName, paneId) {
+  const pane = findPane(paneId);
+  const m = machineOfPane(paneId);
+  if (!pane || !m) throw new HerdrError("bad_pane", "Pane not found");
+  const check = checkAttachment(pane.agent, { name: originalName, type: "", size: data.length }, data.subarray(0, SNIFF_BYTES));
+  if (check.ok && check.kind === "image") throw new HerdrError("unsupported", "Images go through the photo upload");
+  if (!check.ok) throw new HerdrError(check.reason === "too_large" ? "too_large" : "unsupported", REFUSED[check.reason]);
+  const stored = storedAttachmentName(originalName, /* @__PURE__ */ new Date(), crypto.randomBytes(3).toString("hex"));
+  if (!isStoredAttachmentName(stored)) throw new HerdrError("bad_name", "Invalid file name");
+  let file;
+  if (m instanceof RemoteMachine) {
+    if (m.status !== "online") throw new HerdrError("unreachable", fmt("{machine} is unreachable", { machine: m.label }));
+    file = await m.putUpload(stored, data, "file");
+  } else {
+    file = path$1.join(ATTACH_DIR, stored);
+    if (path$1.dirname(file) !== path$1.resolve(ATTACH_DIR)) throw new HerdrError("bad_name", "Invalid file name");
+    await fsp.mkdir(ATTACH_DIR, { recursive: true, mode: 448 });
+    await fsp.writeFile(file, data, { mode: 384, flag: "wx" });
+  }
+  log(`file received ${stored} (${Math.round(data.length / 1024)} KB, ${check.kind})${m instanceof RemoteMachine ? ` -> ${m.label}` : ""}`);
+  return { path: file, name: stored, kind: check.kind, size: data.length, ref: attachmentRef(pane.agent, check.kind, file) };
+}
+async function cleanAttachments() {
+  try {
+    for (const n of await fsp.readdir(ATTACH_DIR)) {
+      const f = path$1.join(ATTACH_DIR, n);
+      const st = await fsp.lstat(f);
+      if (st.isFile() && Date.now() - st.mtimeMs > UPLOAD_TTL_MS) await fsp.unlink(f);
+    }
+  } catch {
+  }
+}
+
+const _mZt23IdRC2vLuqDtWT6mb7m9BgHXq3U5QrnQ7Z5Hc4c = defineNitroPlugin((nitroApp) => {
+  initVapid();
+  startMachines();
+  startPolling();
+  startThreadLimits();
+  startNotices();
+  startPaneSizes();
+  onTailnetName(adoptTailnetName);
+  startTailnetWatch();
+  cleanUploads();
+  cleanAttachments();
+  purgePastes();
+  const purge = setInterval(() => {
+    cleanUploads();
+    cleanAttachments();
+    purgePastes();
+  }, 6 * 3600 * 1e3);
+  log(`herdr-web \u2014 socket ${HERDR_SOCK}${HERDR_SESSION ? ` (session ${HERDR_SESSION})` : ""}`);
+  nitroApp.hooks.hook("close", () => {
+    stopPolling();
+    stopNotices();
+    stopPaneSizes();
+    stopTailnetWatch();
+    stopMachines();
+    clearInterval(purge);
+  });
+});
+
+const plugins = [
+  _9as7ch5sSe9R7BrbrDE2GGZpuA6oP9uMAcL7iRtRgrw,
+_mZt23IdRC2vLuqDtWT6mb7m9BgHXq3U5QrnQ7Z5Hc4c
+];
+
+const assets = {
+  "/manifest-en.webmanifest": {
+    "type": "application/manifest+json",
+    "etag": "\"260-q1JnCK0/ecdKwgeTve6N4I6/mWI\"",
+    "mtime": "2026-10-12T02:43:06.055Z",
+    "size": 608,
+    "path": "../public/manifest-en.webmanifest"
   },
-  "/_nuxt/inter-latin-wght-normal.Dx4kXJAl.woff2": {
+  "/manifest.webmanifest": {
+    "type": "application/manifest+json",
+    "etag": "\"26e-ykoYuj4V8la457yChW3oQTur8RU\"",
+    "mtime": "2026-10-12T02:43:06.055Z",
+    "size": 622,
+    "path": "../public/manifest.webmanifest"
+  },
+  "/sw.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"1b75-QHSGlFHPf7wCrgMEz9tF99j/HQQ\"",
+    "mtime": "2026-10-12T02:43:06.452Z",
+    "size": 7029,
+    "path": "../public/sw.js"
+  },
+  "/_nuxt/AgentView.DzFWBd2A.css": {
+    "type": "text/css; charset=utf-8",
+    "etag": "\"16c2-oz6EmjJDgIf6r38fC9pJHsZoJww\"",
+    "mtime": "2026-10-12T02:43:06.045Z",
+    "size": 5826,
+    "path": "../public/_nuxt/AgentView.DzFWBd2A.css"
+  },
+  "/_nuxt/B4Yk2tB1.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"1176f-Op3w8R2G8EFcEwxudNsoKLq8Fl8\"",
+    "mtime": "2026-10-12T02:43:06.045Z",
+    "size": 71535,
+    "path": "../public/_nuxt/B4Yk2tB1.js"
+  },
+  "/_nuxt/BBw_0a4M.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"17b75-3R2VJP1Oq7OKRMe/1iHRMGe6l3o\"",
+    "mtime": "2026-10-12T02:43:06.045Z",
+    "size": 97141,
+    "path": "../public/_nuxt/BBw_0a4M.js"
+  },
+  "/_nuxt/BSy6OCIY.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"13f-1QDhbXhMYI+YPIbMXZLiVqG81SU\"",
+    "mtime": "2026-10-12T02:43:06.045Z",
+    "size": 319,
+    "path": "../public/_nuxt/BSy6OCIY.js"
+  },
+  "/_nuxt/BX5PM2JQ.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"2905-uwamdHajAQRD2qCUB0gaMXs5+Hs\"",
+    "mtime": "2026-10-12T02:43:06.045Z",
+    "size": 10501,
+    "path": "../public/_nuxt/BX5PM2JQ.js"
+  },
+  "/_nuxt/Bd17z0YL.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"1615-CPDn06/EO3pj6KudXz5uMZ0FkhI\"",
+    "mtime": "2026-10-12T02:43:06.045Z",
+    "size": 5653,
+    "path": "../public/_nuxt/Bd17z0YL.js"
+  },
+  "/_nuxt/BgPDnf2S.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"14010-9tQrbfc74ogfocj+ZMU5WrK9qEM\"",
+    "mtime": "2026-10-12T02:43:06.045Z",
+    "size": 81936,
+    "path": "../public/_nuxt/BgPDnf2S.js"
+  },
+  "/_nuxt/BkOxQzbS.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"91a1-Cc5iImaS93KRPJgLU4sZS6Cewjk\"",
+    "mtime": "2026-10-12T02:43:06.045Z",
+    "size": 37281,
+    "path": "../public/_nuxt/BkOxQzbS.js"
+  },
+  "/_nuxt/CP8o925U.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"238-L5f/T9nwmMze/S7MlkAtOw2Agko\"",
+    "mtime": "2026-10-12T02:43:06.045Z",
+    "size": 568,
+    "path": "../public/_nuxt/CP8o925U.js"
+  },
+  "/_nuxt/CWwyK2XK.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"7e5e-4BG2J9cvS3sx6WQ360LFqNaThyA\"",
+    "mtime": "2026-10-12T02:43:06.045Z",
+    "size": 32350,
+    "path": "../public/_nuxt/CWwyK2XK.js"
+  },
+  "/_nuxt/CkbmecwS.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"f35-4fKoqAhIJbV/rJjyeg24lmHsFBg\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 3893,
+    "path": "../public/_nuxt/CkbmecwS.js"
+  },
+  "/_nuxt/Ci8N4mWR.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"2426-fCrTYUyhtdHnTmu6ZJeEttvxVMo\"",
+    "mtime": "2026-10-12T02:43:06.045Z",
+    "size": 9254,
+    "path": "../public/_nuxt/Ci8N4mWR.js"
+  },
+  "/_nuxt/Cr3SrGky.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"e91-L57+rnkmURnrnbQ2ojMRXvZSac4\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 3729,
+    "path": "../public/_nuxt/Cr3SrGky.js"
+  },
+  "/_nuxt/DT8qZ0Wv.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"d34-pCkp/XrEPhSiS8s2YPYsI/DZ69I\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 3380,
+    "path": "../public/_nuxt/DT8qZ0Wv.js"
+  },
+  "/_nuxt/DAg9fiVh.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"1b244-sPLH9gYhaVJ89ISuFCDsYuNF9Vs\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 111172,
+    "path": "../public/_nuxt/DAg9fiVh.js"
+  },
+  "/_nuxt/DaaJIRB3.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"dd3-CbFoaT3rUHg6B+v1747rxTekQNQ\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 3539,
+    "path": "../public/_nuxt/DaaJIRB3.js"
+  },
+  "/_nuxt/DcJi16XA.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"10a-fvmuAmno7y+Lve3V9/nvXuQHotk\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 266,
+    "path": "../public/_nuxt/DcJi16XA.js"
+  },
+  "/_nuxt/SiL1FJ5s.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"176ad-/hlyeMkW67OV1A4G2nhIsYJX+vE\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 95917,
+    "path": "../public/_nuxt/SiL1FJ5s.js"
+  },
+  "/_nuxt/VpjCgSXu.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"5b489-LoKHy0L+KBvwlf0JAvODFbMFL2o\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 373897,
+    "path": "../public/_nuxt/VpjCgSXu.js"
+  },
+  "/_nuxt/archivo-latin-ext-wght-normal.C4zznr8T.woff2": {
     "type": "font/woff2",
-    "etag": "\"bc80-8R1ym7Ck2DUNLqPQ/AYs9u8tUpg\"",
-    "mtime": "2026-10-08T11:44:03.920Z",
-    "size": 48256,
-    "path": "../public/_nuxt/inter-latin-wght-normal.Dx4kXJAl.woff2"
+    "etag": "\"7f60-cwHN4xD2RhU0GVBfKzpzYZ7Al6U\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 32608,
+    "path": "../public/_nuxt/archivo-latin-ext-wght-normal.C4zznr8T.woff2"
+  },
+  "/_nuxt/archivo-latin-wght-normal.E0tuGl4L.woff2": {
+    "type": "font/woff2",
+    "etag": "\"8870-ZUSfFgU3jYpWYbszVY1rxpynehc\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 34928,
+    "path": "../public/_nuxt/archivo-latin-wght-normal.E0tuGl4L.woff2"
+  },
+  "/_nuxt/CKhgznq4.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"a7330-Q9O7D5hd37aKtqvr2vkiACwyZzM\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 684848,
+    "path": "../public/_nuxt/CKhgznq4.js"
+  },
+  "/_nuxt/archivo-vietnamese-wght-normal.XAtsl5Q_.woff2": {
+    "type": "font/woff2",
+    "etag": "\"33b8-4zjQHgOy7y9EDRZs7TDAFDM4Ams\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 13240,
+    "path": "../public/_nuxt/archivo-vietnamese-wght-normal.XAtsl5Q_.woff2"
+  },
+  "/_nuxt/dPxB2L94.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"471ad-4Pu+hTmytPNTQQ7hdBgH0D/hZVE\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 291245,
+    "path": "../public/_nuxt/dPxB2L94.js"
+  },
+  "/_nuxt/error-500.Bwd7zAaE.css": {
+    "type": "text/css; charset=utf-8",
+    "etag": "\"772-nqXXACYtFiPK+D42BNu4uEECARA\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 1906,
+    "path": "../public/_nuxt/error-500.Bwd7zAaE.css"
+  },
+  "/_nuxt/error-404.Bb87HomL.css": {
+    "type": "text/css; charset=utf-8",
+    "etag": "\"97d-4h9VfBznldxjqagfMldh1hDncR0\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 2429,
+    "path": "../public/_nuxt/error-404.Bb87HomL.css"
+  },
+  "/_nuxt/hePW80VL.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"2cc-fA8td6k29UVF6JoPfhOPkceTK1M\"",
+    "mtime": "2026-10-12T02:43:06.047Z",
+    "size": 716,
+    "path": "../public/_nuxt/hePW80VL.js"
+  },
+  "/_nuxt/inter-cyrillic-ext-wght-normal.BOeWTOD4.woff2": {
+    "type": "font/woff2",
+    "etag": "\"6568-cF1iUGbboMFZ8TfnP5HiMgl9II0\"",
+    "mtime": "2026-10-12T02:43:06.047Z",
+    "size": 25960,
+    "path": "../public/_nuxt/inter-cyrillic-ext-wght-normal.BOeWTOD4.woff2"
+  },
+  "/_nuxt/inter-cyrillic-wght-normal.DqGufNeO.woff2": {
+    "type": "font/woff2",
+    "etag": "\"493c-n3Oy9D6jvzfMjpClqox+Zo7ERQQ\"",
+    "mtime": "2026-10-12T02:43:06.047Z",
+    "size": 18748,
+    "path": "../public/_nuxt/inter-cyrillic-wght-normal.DqGufNeO.woff2"
+  },
+  "/_nuxt/inter-greek-ext-wght-normal.DlzME5K_.woff2": {
+    "type": "font/woff2",
+    "etag": "\"2be0-BP5iTzJeB8nLqYAgKpWNi5o1Zm8\"",
+    "mtime": "2026-10-12T02:43:06.047Z",
+    "size": 11232,
+    "path": "../public/_nuxt/inter-greek-ext-wght-normal.DlzME5K_.woff2"
+  },
+  "/_nuxt/inter-greek-wght-normal.CkhJZR-_.woff2": {
+    "type": "font/woff2",
+    "etag": "\"4a34-xor/hj4YNqI52zFecXnUbzQ4Xs4\"",
+    "mtime": "2026-10-12T02:43:06.047Z",
+    "size": 18996,
+    "path": "../public/_nuxt/inter-greek-wght-normal.CkhJZR-_.woff2"
+  },
+  "/_nuxt/inter-latin-ext-wght-normal.DO1Apj_S.woff2": {
+    "type": "font/woff2",
+    "etag": "\"14c4c-zz61D7IQFMB9QxHvTAOk/Vh4ibQ\"",
+    "mtime": "2026-10-12T02:43:06.047Z",
+    "size": 85068,
+    "path": "../public/_nuxt/inter-latin-ext-wght-normal.DO1Apj_S.woff2"
   },
   "/_nuxt/inter-vietnamese-wght-normal.CBcvBZtf.woff2": {
     "type": "font/woff2",
     "etag": "\"280c-nBythjoDQ0+5wVAendJ6wU7Xz2M\"",
-    "mtime": "2026-10-08T11:44:03.920Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 10252,
     "path": "../public/_nuxt/inter-vietnamese-wght-normal.CBcvBZtf.woff2"
   },
+  "/_nuxt/inter-latin-wght-normal.Dx4kXJAl.woff2": {
+    "type": "font/woff2",
+    "etag": "\"bc80-8R1ym7Ck2DUNLqPQ/AYs9u8tUpg\"",
+    "mtime": "2026-10-12T02:43:06.047Z",
+    "size": 48256,
+    "path": "../public/_nuxt/inter-latin-wght-normal.Dx4kXJAl.woff2"
+  },
   "/_nuxt/jetbrains-mono-cyrillic-wght-normal.D73BlboJ.woff2": {
     "type": "font/woff2",
     "etag": "\"2f4c-WiAGfn140d4QND3ayQWaCHF8rbE\"",
-    "mtime": "2026-10-08T11:44:03.920Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 12108,
     "path": "../public/_nuxt/jetbrains-mono-cyrillic-wght-normal.D73BlboJ.woff2"
   },
+  "/_nuxt/entry.CGWKmYU3.css": {
+    "type": "text/css; charset=utf-8",
+    "etag": "\"68db2-q6wQXFOalVzn1yh9EoP09Ru8lNs\"",
+    "mtime": "2026-10-12T02:43:06.046Z",
+    "size": 429490,
+    "path": "../public/_nuxt/entry.CGWKmYU3.css"
+  },
   "/_nuxt/jetbrains-mono-greek-wght-normal.Bw9x6K1M.woff2": {
     "type": "font/woff2",
     "etag": "\"232c-Dnz9DhH4c266e6TziU1pxRkV6FY\"",
-    "mtime": "2026-10-08T11:44:03.920Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 9004,
     "path": "../public/_nuxt/jetbrains-mono-greek-wght-normal.Bw9x6K1M.woff2"
   },
   "/_nuxt/jetbrains-mono-latin-ext-wght-normal.DBQx-q_a.woff2": {
     "type": "font/woff2",
     "etag": "\"3b5c-HLF7Wvs2Z1IA1cPRs6jnor8OUQ4\"",
-    "mtime": "2026-10-08T11:44:03.927Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 15196,
     "path": "../public/_nuxt/jetbrains-mono-latin-ext-wght-normal.DBQx-q_a.woff2"
   },
   "/_nuxt/jetbrains-mono-latin-wght-normal.B9CIFXIH.woff2": {
     "type": "font/woff2",
     "etag": "\"9dd4-5yd+cUUhzrXxdMyYebUeD0qml1M\"",
-    "mtime": "2026-10-08T11:44:03.927Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 40404,
     "path": "../public/_nuxt/jetbrains-mono-latin-wght-normal.B9CIFXIH.woff2"
   },
   "/_nuxt/jetbrains-mono-vietnamese-wght-normal.Bt-aOZkq.woff2": {
     "type": "font/woff2",
     "etag": "\"1d50-/Re0MyD6BV8h81wBPVijGZH5GBs\"",
-    "mtime": "2026-10-08T11:44:03.927Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 7504,
     "path": "../public/_nuxt/jetbrains-mono-vietnamese-wght-normal.Bt-aOZkq.woff2"
   },
-  "/_nuxt/whFLy_Ne.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"10fef-Fe8e6U4rNb//7sdPdQau3Trl7fU\"",
-    "mtime": "2026-10-08T11:44:03.927Z",
-    "size": 69615,
-    "path": "../public/_nuxt/whFLy_Ne.js"
-  },
-  "/_nuxt/entry.cKR16VqG.css": {
-    "type": "text/css; charset=utf-8",
-    "etag": "\"5f50e-lGjGgrLDJlABD7dGL+/Cu4UfQi8\"",
-    "mtime": "2026-10-08T11:44:03.919Z",
-    "size": 390414,
-    "path": "../public/_nuxt/entry.cKR16VqG.css"
+  "/_nuxt/wherdr-nerd-awesome.DQ3_iAfa.woff2": {
+    "type": "font/woff2",
+    "etag": "\"30178-02mpQKEDb74Ec8LtlhKceB1vHO8\"",
+    "mtime": "2026-10-12T02:43:06.047Z",
+    "size": 196984,
+    "path": "../public/_nuxt/wherdr-nerd-awesome.DQ3_iAfa.woff2"
   },
   "/_nuxt/wherdr-nerd-codicons.CtEsfSAf.woff2": {
     "type": "font/woff2",
     "etag": "\"d9b0-kmO/x6KCTFRlVipOvl+5XcArGUw\"",
-    "mtime": "2026-10-08T11:44:03.927Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 55728,
     "path": "../public/_nuxt/wherdr-nerd-codicons.CtEsfSAf.woff2"
   },
-  "/_nuxt/wherdr-nerd-awesome.DQ3_iAfa.woff2": {
-    "type": "font/woff2",
-    "etag": "\"30178-02mpQKEDb74Ec8LtlhKceB1vHO8\"",
-    "mtime": "2026-10-08T11:44:03.927Z",
-    "size": 196984,
-    "path": "../public/_nuxt/wherdr-nerd-awesome.DQ3_iAfa.woff2"
-  },
   "/_nuxt/wherdr-nerd-extension.Dai_ky39.woff2": {
     "type": "font/woff2",
     "etag": "\"f76c-CjERGtjtOrkpSXy7JyZNl1CAu0U\"",
-    "mtime": "2026-10-08T11:44:03.927Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 63340,
     "path": "../public/_nuxt/wherdr-nerd-extension.Dai_ky39.woff2"
   },
   "/_nuxt/wherdr-nerd-devicons.ZMSFX1sW.woff2": {
     "type": "font/woff2",
     "etag": "\"30f78-2RuGTMLnbTBdhlI9ExApyiUeD8c\"",
-    "mtime": "2026-10-08T11:44:03.927Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 200568,
     "path": "../public/_nuxt/wherdr-nerd-devicons.ZMSFX1sW.woff2"
   },
+  "/_nuxt/wherdr-nerd-material-1.BdvqkCqW.woff2": {
+    "type": "font/woff2",
+    "etag": "\"1e130-1GKpbVoJoRf3AxaKTZS8FjxkOd4\"",
+    "mtime": "2026-10-12T02:43:06.047Z",
+    "size": 123184,
+    "path": "../public/_nuxt/wherdr-nerd-material-1.BdvqkCqW.woff2"
+  },
   "/_nuxt/wherdr-nerd-material-2.C_flbBWO.woff2": {
     "type": "font/woff2",
     "etag": "\"1f95c-q6dAP964z2dgEvWzAYjTAzBtzBc\"",
-    "mtime": "2026-10-08T11:44:03.928Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 129372,
     "path": "../public/_nuxt/wherdr-nerd-material-2.C_flbBWO.woff2"
   },
-  "/_nuxt/wherdr-nerd-material-3.8xz7iX-Y.woff2": {
-    "type": "font/woff2",
-    "etag": "\"2248c-3GBJ1KjkT+xYPhza9V/DKaILa7Y\"",
-    "mtime": "2026-10-08T11:44:03.928Z",
-    "size": 140428,
-    "path": "../public/_nuxt/wherdr-nerd-material-3.8xz7iX-Y.woff2"
-  },
-  "/_nuxt/wherdr-nerd-material-1.BdvqkCqW.woff2": {
-    "type": "font/woff2",
-    "etag": "\"1e130-1GKpbVoJoRf3AxaKTZS8FjxkOd4\"",
-    "mtime": "2026-10-08T11:44:03.927Z",
-    "size": 123184,
-    "path": "../public/_nuxt/wherdr-nerd-material-1.BdvqkCqW.woff2"
+  "/_nuxt/wherdr-nerd-material-3.8xz7iX-Y.woff2": {
+    "type": "font/woff2",
+    "etag": "\"2248c-3GBJ1KjkT+xYPhza9V/DKaILa7Y\"",
+    "mtime": "2026-10-12T02:43:06.047Z",
+    "size": 140428,
+    "path": "../public/_nuxt/wherdr-nerd-material-3.8xz7iX-Y.woff2"
   },
   "/_nuxt/wherdr-nerd-material-4.CO_PudDR.woff2": {
     "type": "font/woff2",
     "etag": "\"1fa80-YcJvpFD/M3vTC4y6SMmp7s8a9gw\"",
-    "mtime": "2026-10-08T11:44:03.928Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 129664,
     "path": "../public/_nuxt/wherdr-nerd-material-4.CO_PudDR.woff2"
   },
-  "/_nuxt/wherdr-nerd-powerline.B_kAMxXr.woff2": {
-    "type": "font/woff2",
-    "etag": "\"1bc0-iXm39wQwNbm2VjpVBOn72grfku0\"",
-    "mtime": "2026-10-08T11:44:03.928Z",
-    "size": 7104,
-    "path": "../public/_nuxt/wherdr-nerd-powerline.B_kAMxXr.woff2"
-  },
   "/_nuxt/wherdr-nerd-octicons.Hl4VEx8m.woff2": {
     "type": "font/woff2",
     "etag": "\"f890-FkAsW3iqENK+lU5UlSze0yqnE2s\"",
-    "mtime": "2026-10-08T11:44:03.928Z",
+    "mtime": "2026-10-12T02:43:06.047Z",
     "size": 63632,
     "path": "../public/_nuxt/wherdr-nerd-octicons.Hl4VEx8m.woff2"
   },
+  "/_nuxt/wherdr-nerd-powerline.B_kAMxXr.woff2": {
+    "type": "font/woff2",
+    "etag": "\"1bc0-iXm39wQwNbm2VjpVBOn72grfku0\"",
+    "mtime": "2026-10-12T02:43:06.047Z",
+    "size": 7104,
+    "path": "../public/_nuxt/wherdr-nerd-powerline.B_kAMxXr.woff2"
+  },
   "/_nuxt/wherdr-symbols.C1LsPKmg.woff2": {
     "type": "font/woff2",
     "etag": "\"1304-Lwyr1XiDl3FK38nmS/6Pk9wfiWc\"",
-    "mtime": "2026-10-08T11:44:03.928Z",
+    "mtime": "2026-10-12T02:43:06.048Z",
     "size": 4868,
     "path": "../public/_nuxt/wherdr-symbols.C1LsPKmg.woff2"
   },
   "/_nuxt/yzABg5xl.js": {
     "type": "text/javascript; charset=utf-8",
     "etag": "\"1c49-W7I7waHyF8BfftITNIl1xCbNFQw\"",
-    "mtime": "2026-10-08T11:44:03.928Z",
+    "mtime": "2026-10-12T02:43:06.048Z",
     "size": 7241,
     "path": "../public/_nuxt/yzABg5xl.js"
   },
-  "/_nuxt/builds/latest.json": {
-    "type": "application/json",
-    "etag": "\"47-InxxMr1b0NpxElCQDYMExsdTFyM\"",
-    "mtime": "2026-10-08T11:44:03.903Z",
-    "size": 71,
-    "path": "../public/_nuxt/builds/latest.json"
+  "/_nuxt/xYX85SPI.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"374e-AaaIqO4sGKcceUeLatrSWJTAfAU\"",
+    "mtime": "2026-10-12T02:43:06.048Z",
+    "size": 14158,
+    "path": "../public/_nuxt/xYX85SPI.js"
   },
-  "/_nuxt/builds/meta/6466b0ab-7935-460c-abdf-2ea632dae6d0.json": {
+  "/_nuxt/builds/meta/c735b6c0-1bd0-47d7-a208-d310f0a06287.json": {
     "type": "application/json",
-    "etag": "\"58-DWte5uFWPeAlfWNx7Bc31+0PHIM\"",
-    "mtime": "2026-10-08T11:44:03.899Z",
+    "etag": "\"58-d/XzFsF7fGOYu7cBbS83s+45DOk\"",
+    "mtime": "2026-10-12T02:43:06.021Z",
     "size": 88,
-    "path": "../public/_nuxt/builds/meta/6466b0ab-7935-460c-abdf-2ea632dae6d0.json"
-  }
-};
-
-const _DRIVE_LETTER_START_RE = /^[A-Za-z]:\//;
-function normalizeWindowsPath(input = "") {
-  if (!input) {
-    return input;
-  }
-  return input.replace(/\\/g, "/").replace(_DRIVE_LETTER_START_RE, (r) => r.toUpperCase());
-}
-const _IS_ABSOLUTE_RE = /^[/\\](?![/\\])|^[/\\]{2}(?!\.)|^[A-Za-z]:[/\\]/;
-const _DRIVE_LETTER_RE = /^[A-Za-z]:$/;
-const _ROOT_FOLDER_RE = /^\/([A-Za-z]:)?$/;
-function cwd() {
-  if (typeof process !== "undefined" && typeof process.cwd === "function") {
-    return process.cwd().replace(/\\/g, "/");
-  }
-  return "/";
-}
-const resolve = function(...arguments_) {
-  arguments_ = arguments_.map((argument) => normalizeWindowsPath(argument));
-  let resolvedPath = "";
-  let resolvedAbsolute = false;
-  for (let index = arguments_.length - 1; index >= -1 && !resolvedAbsolute; index--) {
-    const path = index >= 0 ? arguments_[index] : cwd();
-    if (!path || path.length === 0) {
-      continue;
-    }
-    resolvedPath = `${path}/${resolvedPath}`;
-    resolvedAbsolute = isAbsolute(path);
-  }
-  resolvedPath = normalizeString(resolvedPath, !resolvedAbsolute);
-  if (resolvedAbsolute && !isAbsolute(resolvedPath)) {
-    return `/${resolvedPath}`;
-  }
-  return resolvedPath.length > 0 ? resolvedPath : ".";
-};
-function normalizeString(path, allowAboveRoot) {
-  let res = "";
-  let lastSegmentLength = 0;
-  let lastSlash = -1;
-  let dots = 0;
-  let char = null;
-  for (let index = 0; index <= path.length; ++index) {
-    if (index < path.length) {
-      char = path[index];
-    } else if (char === "/") {
-      break;
-    } else {
-      char = "/";
-    }
-    if (char === "/") {
-      if (lastSlash === index - 1 || dots === 1) ; else if (dots === 2) {
-        if (res.length < 2 || lastSegmentLength !== 2 || res[res.length - 1] !== "." || res[res.length - 2] !== ".") {
-          if (res.length > 2) {
-            const lastSlashIndex = res.lastIndexOf("/");
-            if (lastSlashIndex === -1) {
-              res = "";
-              lastSegmentLength = 0;
-            } else {
-              res = res.slice(0, lastSlashIndex);
-              lastSegmentLength = res.length - 1 - res.lastIndexOf("/");
-            }
-            lastSlash = index;
-            dots = 0;
-            continue;
-          } else if (res.length > 0) {
-            res = "";
-            lastSegmentLength = 0;
-            lastSlash = index;
-            dots = 0;
-            continue;
-          }
-        }
-        if (allowAboveRoot) {
-          res += res.length > 0 ? "/.." : "..";
-          lastSegmentLength = 2;
-        }
-      } else {
-        if (res.length > 0) {
-          res += `/${path.slice(lastSlash + 1, index)}`;
-        } else {
-          res = path.slice(lastSlash + 1, index);
-        }
-        lastSegmentLength = index - lastSlash - 1;
-      }
-      lastSlash = index;
-      dots = 0;
-    } else if (char === "." && dots !== -1) {
-      ++dots;
-    } else {
-      dots = -1;
-    }
-  }
-  return res;
-}
-const isAbsolute = function(p) {
-  return _IS_ABSOLUTE_RE.test(p);
-};
-const relative = function(from, to) {
-  const _from = resolve(from).replace(_ROOT_FOLDER_RE, "$1").split("/");
-  const _to = resolve(to).replace(_ROOT_FOLDER_RE, "$1").split("/");
-  if (_to[0][1] === ":" && _from[0][1] === ":" && _from[0] !== _to[0]) {
-    return _to.join("/");
-  }
-  const _fromCopy = [..._from];
-  for (const segment of _fromCopy) {
-    if (_to[0] !== segment) {
-      break;
-    }
-    _from.shift();
-    _to.shift();
-  }
-  return [..._from.map(() => ".."), ..._to].join("/");
-};
-const dirname = function(p) {
-  const segments = normalizeWindowsPath(p).replace(/\/$/, "").split("/").slice(0, -1);
-  if (segments.length === 1 && _DRIVE_LETTER_RE.test(segments[0])) {
-    segments[0] += "/";
-  }
-  return segments.join("/") || (isAbsolute(p) ? "/" : ".");
-};
-
-function readAsset (id) {
-  const serverDir = dirname(fileURLToPath(globalThis._importMeta_.url));
-  return promises.readFile(resolve(serverDir, assets[id].path))
-}
-
-const publicAssetBases = {"/_nuxt/builds/meta/":{"maxAge":31536000},"/_nuxt/builds/":{"maxAge":1},"/_nuxt/":{"maxAge":31536000}};
-
-function isPublicAssetURL(id = '') {
-  if (assets[id]) {
-    return true
-  }
-  for (const base in publicAssetBases) {
-    if (id.startsWith(base)) { return true }
-  }
-  return false
-}
-
-function getAsset (id) {
-  return assets[id]
-}
-
-const METHODS = /* @__PURE__ */ new Set(["HEAD", "GET"]);
-const EncodingMap = { gzip: ".gz", br: ".br" };
-const _uN03ln = eventHandler((event) => {
-  if (event.method && !METHODS.has(event.method)) {
-    return;
-  }
-  let id = decodePath(
-    withLeadingSlash(withoutTrailingSlash(parseURL(event.path).pathname))
-  );
-  let asset;
-  const encodingHeader = String(
-    getRequestHeader(event, "accept-encoding") || ""
-  );
-  const encodings = [
-    ...encodingHeader.split(",").map((e) => EncodingMap[e.trim()]).filter(Boolean).sort(),
-    ""
-  ];
-  for (const encoding of encodings) {
-    for (const _id of [id + encoding, joinURL(id, "index.html" + encoding)]) {
-      const _asset = getAsset(_id);
-      if (_asset) {
-        asset = _asset;
-        id = _id;
-        break;
-      }
-    }
-  }
-  if (!asset) {
-    if (isPublicAssetURL(id)) {
-      removeResponseHeader(event, "Cache-Control");
-      throw createError$1({ statusCode: 404 });
-    }
-    return;
-  }
-  if (asset.encoding !== void 0) {
-    appendResponseHeader(event, "Vary", "Accept-Encoding");
-  }
-  const ifNotMatch = getRequestHeader(event, "if-none-match") === asset.etag;
-  if (ifNotMatch) {
-    setResponseStatus(event, 304, "Not Modified");
-    return "";
-  }
-  const ifModifiedSinceH = getRequestHeader(event, "if-modified-since");
-  const mtimeDate = new Date(asset.mtime);
-  if (ifModifiedSinceH && asset.mtime && new Date(ifModifiedSinceH) >= mtimeDate) {
-    setResponseStatus(event, 304, "Not Modified");
-    return "";
-  }
-  if (asset.type && !getResponseHeader(event, "Content-Type")) {
-    setResponseHeader(event, "Content-Type", asset.type);
-  }
-  if (asset.etag && !getResponseHeader(event, "ETag")) {
-    setResponseHeader(event, "ETag", asset.etag);
-  }
-  if (asset.mtime && !getResponseHeader(event, "Last-Modified")) {
-    setResponseHeader(event, "Last-Modified", mtimeDate.toUTCString());
-  }
-  if (asset.encoding && !getResponseHeader(event, "Content-Encoding")) {
-    setResponseHeader(event, "Content-Encoding", asset.encoding);
-  }
-  if (asset.size > 0 && !getResponseHeader(event, "Content-Length")) {
-    setResponseHeader(event, "Content-Length", asset.size);
-  }
-  return readAsset(id);
-});
-
-const MAX_SESSION_DAYS = [1, 7, 30, 90, 365];
-const DEFAULT_MAX_SESSION_DAYS = 7;
-const DAY_MS = 24 * 3600 * 1e3;
-function isMaxSessionDays(v) {
-  return MAX_SESSION_DAYS.includes(v);
-}
-
-var __defProp = Object.defineProperty;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, key + "" , value);
-const SESSION_MS = 12 * 3600 * 1e3;
-const RENEW_MS = 10 * 60 * 1e3;
-const CHALLENGE_MS = 5 * 60 * 1e3;
-const AUTH_COOKIE = "hw_session";
-const CHALLENGE_COOKIE = "hw_challenge";
-class AuthError extends Error {
-  constructor(code, message) {
-    super(message);
-    __publicField(this, "code");
-    this.code = code;
+    "path": "../public/_nuxt/builds/meta/c735b6c0-1bd0-47d7-a208-d310f0a06287.json"
+  },
+  "/_nuxt/builds/latest.json": {
+    "type": "application/json",
+    "etag": "\"47-tXRY9adXBmru9/K9a4qadfDPmmc\"",
+    "mtime": "2026-10-12T02:43:06.026Z",
+    "size": 71,
+    "path": "../public/_nuxt/builds/latest.json"
   }
-}
-function createAuth({ dataDir, log: log2 = () => {
-}, passkeyUser = "herdr" }) {
-  const FILE = path$1.join(dataDir, "auth.json");
-  let db = { secret: null, generation: 0, credentials: [] };
-  try {
-    db = { ...db, ...JSON.parse(fs.readFileSync(FILE, "utf8")) };
-  } catch {
+};
+
+const _DRIVE_LETTER_START_RE = /^[A-Za-z]:\//;
+function normalizeWindowsPath(input = "") {
+  if (!input) {
+    return input;
   }
-  const save = () => {
-    fs.mkdirSync(dataDir, { recursive: true });
-    fs.writeFileSync(FILE, JSON.stringify(db, null, 2) + "\n", { mode: 384 });
-  };
-  if (!db.secret) {
-    db.secret = crypto.randomBytes(32).toString("hex");
-    save();
+  return input.replace(/\\/g, "/").replace(_DRIVE_LETTER_START_RE, (r) => r.toUpperCase());
+}
+const _IS_ABSOLUTE_RE = /^[/\\](?![/\\])|^[/\\]{2}(?!\.)|^[A-Za-z]:[/\\]/;
+const _DRIVE_LETTER_RE = /^[A-Za-z]:$/;
+const _ROOT_FOLDER_RE = /^\/([A-Za-z]:)?$/;
+function cwd() {
+  if (typeof process !== "undefined" && typeof process.cwd === "function") {
+    return process.cwd().replace(/\\/g, "/");
   }
-  const bootstrapToken = crypto.randomBytes(24).toString("base64url");
-  if (!db.credentials.length) log2(`First passkey: bootstrap token ${bootstrapToken}`);
-  const enabled = () => db.credentials.length > 0;
-  const sign = (v) => crypto.createHmac("sha256", db.secret).update(v).digest("base64url");
-  const safeEq = (a, b) => {
-    const x = Buffer.from(String(a));
-    const y = Buffer.from(String(b));
-    return x.length === y.length && crypto.timingSafeEqual(x, y);
-  };
-  const readCookie = (req) => {
-    const c = String(req.headers.cookie || "").split(/;\s*/).find((s) => s.startsWith(`${AUTH_COOKIE}=`));
-    if (!c) return null;
-    try {
-      return decodeURIComponent(c.slice(AUTH_COOKIE.length + 1));
-    } catch {
-      return null;
-    }
-  };
-  const challengeClient = (req) => {
-    const c = String(req.headers.cookie || "").split(/;\s*/).find((s) => s.startsWith(`${CHALLENGE_COOKIE}=`));
-    return (c == null ? void 0 : c.slice(CHALLENGE_COOKIE.length + 1)) || null;
-  };
-  const checkBootstrap = (body) => {
-    if (!enabled() && !safeEq(String((body == null ? void 0 : body.bootstrapToken) || ""), bootstrapToken)) {
-      throw new AuthError("bootstrap", "Invalid bootstrap token (see the server logs)");
+  return "/";
+}
+const resolve = function(...arguments_) {
+  arguments_ = arguments_.map((argument) => normalizeWindowsPath(argument));
+  let resolvedPath = "";
+  let resolvedAbsolute = false;
+  for (let index = arguments_.length - 1; index >= -1 && !resolvedAbsolute; index--) {
+    const path = index >= 0 ? arguments_[index] : cwd();
+    if (!path || path.length === 0) {
+      continue;
     }
-  };
-  const maxSessionMs = () => {
-    var _a;
-    return ((_a = db.maxSessionDays) != null ? _a : DEFAULT_MAX_SESSION_DAYS) * DAY_MS;
-  };
-  function session(req, now = Date.now()) {
-    const v = readCookie(req);
-    if (!v) return null;
-    const parts = v.split(".");
-    if (parts.length !== 3 && parts.length !== 4) return null;
-    const mac = parts.pop();
-    if (!mac || parts[1] !== String(db.generation) || !safeEq(mac, sign(parts.join(".")))) return null;
-    const exp = Number(parts[0]);
-    const since = parts.length === 3 ? Number(parts[2]) : exp - SESSION_MS;
-    if (!(exp >= now) || !Number.isFinite(since)) return null;
-    if (now > since + maxSessionMs() + SESSION_MS) return null;
-    return { exp, since };
-  }
-  function isUnlocked(req) {
-    return !enabled() || session(req) !== null;
-  }
-  const secure = (req) => req.headers["x-forwarded-proto"] === "https" || String(req.headers.origin || "").startsWith("https://") ? "; Secure" : "";
-  function sessionCookie(req, now = Date.now(), since = now) {
-    const exp = now + SESSION_MS;
-    const payload = `${exp}.${db.generation}.${since}`;
-    return `${AUTH_COOKIE}=${payload}.${sign(payload)}; Path=/; HttpOnly; SameSite=Strict; Max-Age=${SESSION_MS / 1e3}${secure(req)}`;
-  }
-  const clearCookie = (req) => `${AUTH_COOKIE}=; Path=/; HttpOnly; SameSite=Strict; Max-Age=0${secure(req)}`;
-  function renew(req, now = Date.now()) {
-    if (!enabled()) return null;
-    const s = session(req, now);
-    if (s === null || s.exp - now > SESSION_MS - RENEW_MS) return null;
-    return { cookie: sessionCookie(req, now, s.since), expiresAt: now + SESSION_MS };
-  }
-  function relying(req) {
-    const origin = String(req.headers.origin || "");
-    const { hostname } = new URL(origin);
-    return { origin, rpID: hostname };
-  }
-  const challenges = /* @__PURE__ */ new Map();
-  const challengeKey = (kind, client) => `${kind}:${client}`;
-  const issueChallenge = (req, kind, value) => {
-    const client = crypto.randomBytes(24).toString("base64url");
-    for (const [key, challenge] of challenges) if (challenge.exp < Date.now()) challenges.delete(key);
-    challenges.set(challengeKey(kind, client), { value, exp: Date.now() + CHALLENGE_MS });
-    return `${CHALLENGE_COOKIE}=${client}; Path=/api/auth/; HttpOnly; SameSite=Strict; Max-Age=${CHALLENGE_MS / 1e3}${secure(req)}`;
-  };
-  const takeChallenge = (req, kind) => {
-    const client = challengeClient(req);
-    const key = challengeKey(kind, client || "");
-    const c = challenges.get(key);
-    challenges.delete(key);
-    if (!c || c.exp < Date.now()) throw new AuthError("challenge", "Challenge expired, try again");
-    return c.value;
-  };
-  async function registerOptions(req, body = {}) {
-    if (enabled() && !isUnlocked(req)) throw new AuthError("locked", "Unlock first");
-    checkBootstrap(body);
-    const { rpID } = relying(req);
-    const opts = await generateRegistrationOptions({
-      rpName: "wherdr",
-      rpID,
-      userName: passkeyUser,
-      userDisplayName: passkeyUser,
-      attestationType: "none",
-      excludeCredentials: db.credentials.map((c) => ({ id: c.id, transports: c.transports })),
-      authenticatorSelection: { residentKey: "preferred", userVerification: "required" }
-    });
-    return { ...opts, __cookie: issueChallenge(req, "reg", opts.challenge) };
-  }
-  async function registerVerify(req, body) {
-    if (enabled() && !isUnlocked(req)) throw new AuthError("locked", "Unlock first");
-    checkBootstrap(body);
-    const { origin, rpID } = relying(req);
-    const v = await verifyRegistrationResponse({
-      response: body.response,
-      expectedChallenge: takeChallenge(req, "reg"),
-      expectedOrigin: origin,
-      expectedRPID: rpID,
-      requireUserVerification: true
-    });
-    if (!v.verified || !v.registrationInfo) throw new AuthError("rejected", "Key rejected");
-    const { credential } = v.registrationInfo;
-    db.credentials.push({
-      id: credential.id,
-      publicKey: Buffer.from(credential.publicKey).toString("base64url"),
-      counter: credential.counter,
-      transports: credential.transports || [],
-      name: String(body.name || "Device").slice(0, 40),
-      createdAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
-    save();
-    log2(`lock: key registered (${db.credentials.length})`);
-    return { ok: true, __cookie: sessionCookie(req) };
-  }
-  async function loginOptions(req) {
-    const { rpID } = relying(req);
-    const opts = await generateAuthenticationOptions({
-      rpID,
-      userVerification: "required",
-      allowCredentials: db.credentials.map((c) => ({ id: c.id, transports: c.transports }))
-    });
-    return { ...opts, __cookie: issueChallenge(req, "auth", opts.challenge) };
-  }
-  async function loginVerify(req, body) {
-    const { origin, rpID } = relying(req);
-    const cred = db.credentials.find((c) => c.id === (body.response && body.response.id));
-    if (!cred) throw new AuthError("unknown_key", "Key unknown on this server");
-    const v = await verifyAuthenticationResponse({
-      response: body.response,
-      expectedChallenge: takeChallenge(req, "auth"),
-      expectedOrigin: origin,
-      expectedRPID: rpID,
-      requireUserVerification: true,
-      credential: { id: cred.id, publicKey: Buffer.from(cred.publicKey, "base64url"), counter: cred.counter, transports: cred.transports }
-    });
-    if (!v.verified) throw new AuthError("rejected", "Unlock rejected");
-    cred.counter = v.authenticationInfo.newCounter;
-    cred.lastUsed = (/* @__PURE__ */ new Date()).toISOString();
-    save();
-    return { ok: true, __cookie: sessionCookie(req) };
+    resolvedPath = `${path}/${resolvedPath}`;
+    resolvedAbsolute = isAbsolute(path);
   }
-  function disable(req) {
-    if (!isUnlocked(req)) throw new AuthError("locked", "Unlock first");
-    db.credentials = [];
-    db.generation += 1;
-    save();
-    log2("lock disabled");
-    return { ok: true, __cookie: clearCookie(req) };
+  resolvedPath = normalizeString(resolvedPath, !resolvedAbsolute);
+  if (resolvedAbsolute && !isAbsolute(resolvedPath)) {
+    return `/${resolvedPath}`;
   }
-  function lockAll(req) {
-    if (!enabled() || !isUnlocked(req)) throw new AuthError("locked", "Unlock first");
-    db.generation += 1;
-    save();
-    log2("lock: all devices locked");
-    return { ok: true, __cookie: clearCookie(req) };
+  return resolvedPath.length > 0 ? resolvedPath : ".";
+};
+function normalizeString(path, allowAboveRoot) {
+  let res = "";
+  let lastSegmentLength = 0;
+  let lastSlash = -1;
+  let dots = 0;
+  let char = null;
+  for (let index = 0; index <= path.length; ++index) {
+    if (index < path.length) {
+      char = path[index];
+    } else if (char === "/") {
+      break;
+    } else {
+      char = "/";
+    }
+    if (char === "/") {
+      if (lastSlash === index - 1 || dots === 1) ; else if (dots === 2) {
+        if (res.length < 2 || lastSegmentLength !== 2 || res[res.length - 1] !== "." || res[res.length - 2] !== ".") {
+          if (res.length > 2) {
+            const lastSlashIndex = res.lastIndexOf("/");
+            if (lastSlashIndex === -1) {
+              res = "";
+              lastSegmentLength = 0;
+            } else {
+              res = res.slice(0, lastSlashIndex);
+              lastSegmentLength = res.length - 1 - res.lastIndexOf("/");
+            }
+            lastSlash = index;
+            dots = 0;
+            continue;
+          } else if (res.length > 0) {
+            res = "";
+            lastSegmentLength = 0;
+            lastSlash = index;
+            dots = 0;
+            continue;
+          }
+        }
+        if (allowAboveRoot) {
+          res += res.length > 0 ? "/.." : "..";
+          lastSegmentLength = 2;
+        }
+      } else {
+        if (res.length > 0) {
+          res += `/${path.slice(lastSlash + 1, index)}`;
+        } else {
+          res = path.slice(lastSlash + 1, index);
+        }
+        lastSegmentLength = index - lastSlash - 1;
+      }
+      lastSlash = index;
+      dots = 0;
+    } else if (char === "." && dots !== -1) {
+      ++dots;
+    } else {
+      dots = -1;
+    }
   }
-  function setMaxSession(req, days) {
-    if (!enabled() || !isUnlocked(req)) throw new AuthError("locked", "Unlock first");
-    if (!isMaxSessionDays(days)) throw new AuthError("invalid", "Invalid duration");
-    db.maxSessionDays = days;
-    save();
-    return { ok: true, maxSessionDays: days };
+  return res;
+}
+const isAbsolute = function(p) {
+  return _IS_ABSOLUTE_RE.test(p);
+};
+const relative = function(from, to) {
+  const _from = resolve(from).replace(_ROOT_FOLDER_RE, "$1").split("/");
+  const _to = resolve(to).replace(_ROOT_FOLDER_RE, "$1").split("/");
+  if (_to[0][1] === ":" && _from[0][1] === ":" && _from[0] !== _to[0]) {
+    return _to.join("/");
   }
-  function status(req, { resume = false, now = Date.now() } = {}) {
-    var _a, _b;
-    const devices = db.credentials.map((c) => ({ name: c.name, createdAt: c.createdAt, lastUsed: c.lastUsed || null }));
-    if (!enabled()) return { enabled: false, unlocked: true, devices };
-    const s = session(req, now);
-    const deadline = s ? s.since + maxSessionMs() : 0;
-    if (!s || resume && now >= deadline) {
-      return { enabled: true, unlocked: false, expiresAt: null, now, devices, ...s ? { __cookie: clearCookie(req) } : {} };
+  const _fromCopy = [..._from];
+  for (const segment of _fromCopy) {
+    if (_to[0] !== segment) {
+      break;
     }
-    const renewed = renew(req, now);
-    return {
-      enabled: true,
-      unlocked: true,
-      expiresAt: (_a = renewed == null ? void 0 : renewed.expiresAt) != null ? _a : s.exp,
-      deadline,
-      now,
-      maxSessionDays: (_b = db.maxSessionDays) != null ? _b : DEFAULT_MAX_SESSION_DAYS,
-      devices,
-      ...renewed ? { __cookie: renewed.cookie } : {}
-    };
+    _from.shift();
+    _to.shift();
   }
-  return {
-    isUnlocked,
-    status,
-    renew,
-    registerOptions,
-    registerVerify,
-    loginOptions,
-    loginVerify,
-    disable,
-    lockAll,
-    setMaxSession,
-    lock: (req) => ({ ok: true, __cookie: clearCookie(req) }),
-    // For tests.
-    _sessionCookie: sessionCookie,
-    _db: () => db,
-    _bootstrapToken: () => bootstrapToken,
-    _takeChallenge: takeChallenge
-  };
+  return [..._from.map(() => ".."), ..._to].join("/");
+};
+const dirname = function(p) {
+  const segments = normalizeWindowsPath(p).replace(/\/$/, "").split("/").slice(0, -1);
+  if (segments.length === 1 && _DRIVE_LETTER_RE.test(segments[0])) {
+    segments[0] += "/";
+  }
+  return segments.join("/") || (isAbsolute(p) ? "/" : ".");
+};
+
+function readAsset (id) {
+  const serverDir = dirname(fileURLToPath(globalThis._importMeta_.url));
+  return promises.readFile(resolve(serverDir, assets[id].path))
 }
 
-const auth = createAuth({ dataDir: DATA_DIR, log, passkeyUser: PASSKEY_USER });
-const reqOf = (event) => ({ headers: getRequestHeaders(event) });
-function sameOrigin(headers) {
-  const o = headers.origin;
-  if (!o) return false;
-  try {
-    return new URL(o).host === headers.host;
-  } catch {
-    return false;
+const publicAssetBases = {"/_nuxt/builds/meta/":{"maxAge":31536000},"/_nuxt/builds/":{"maxAge":1},"/_nuxt/":{"maxAge":31536000}};
+
+function isPublicAssetURL(id = '') {
+  if (assets[id]) {
+    return true
   }
+  for (const base in publicAssetBases) {
+    if (id.startsWith(base)) { return true }
+  }
+  return false
 }
-const BODY_MAX = 256 * 1024;
-function sendError(event, status, body) {
-  setResponseStatus(event, status);
-  setResponseHeader(event, "cache-control", "no-store");
-  return body;
+
+function getAsset (id) {
+  return assets[id]
 }
-function defineApi(fn, opts = {}) {
-  return defineEventHandler(async (event) => {
-    const url = getRequestURL(event);
-    try {
-      let body = {};
-      if (event.method === "POST") {
-        const headers = getRequestHeaders(event);
-        const ctype = String(headers["content-type"] || "");
-        const typeOk = opts.raw ? opts.raw.test(ctype) : ctype.startsWith("application/json");
-        if (!sameOrigin(headers) || !typeOk) return sendError(event, 403, { error: "Origin refused" });
-        const max = opts.raw ? opts.max || 20 * 1024 * 1024 : BODY_MAX;
-        const tooLarge = opts.raw ? opts.tooLarge || "Image too large (20 MB max)" : "Request too large";
-        if (Number(headers["content-length"] || 0) > max) throw new HerdrError("too_large", tooLarge);
-        const raw = await readRawBody(event, false);
-        if (raw && raw.length > max) throw new HerdrError("too_large", tooLarge);
-        if (opts.raw) body = { data: raw || Buffer.alloc(0), ctype };
-        else {
-          try {
-            body = raw && raw.length ? JSON.parse(raw.toString("utf8")) : {};
-          } catch {
-            throw new HerdrError("bad_json", "Invalid JSON");
-          }
-        }
-      }
-      const out = await fn(event, body);
-      setResponseHeader(event, "cache-control", "no-store");
-      if (out && typeof out === "object" && "__cookie" in out) {
-        const o = out;
-        setResponseHeader(event, "set-cookie", String(o.__cookie));
-        delete o.__cookie;
+
+const METHODS = /* @__PURE__ */ new Set(["HEAD", "GET"]);
+const EncodingMap = { gzip: ".gz", br: ".br" };
+const _uN03ln = eventHandler((event) => {
+  if (event.method && !METHODS.has(event.method)) {
+    return;
+  }
+  let id = decodePath(
+    withLeadingSlash(withoutTrailingSlash(parseURL(event.path).pathname))
+  );
+  let asset;
+  const encodingHeader = String(
+    getRequestHeader(event, "accept-encoding") || ""
+  );
+  const encodings = [
+    ...encodingHeader.split(",").map((e) => EncodingMap[e.trim()]).filter(Boolean).sort(),
+    ""
+  ];
+  for (const encoding of encodings) {
+    for (const _id of [id + encoding, joinURL(id, "index.html" + encoding)]) {
+      const _asset = getAsset(_id);
+      if (_asset) {
+        asset = _asset;
+        id = _id;
+        break;
       }
-      return out;
-    } catch (e) {
-      const err = e;
-      const known = e instanceof HerdrError || url.pathname.startsWith("/api/auth/") && Boolean(err.code);
-      const code = known ? err.code : "internal";
-      if (!known) log("error", event.method, url.pathname, e);
-      const status = err.code === "unreachable" ? 503 : err.code === "locked" ? 401 : 400;
-      return sendError(event, status, { error: err.message, code });
     }
-  });
-}
-function sendImage(event, img) {
-  setResponseHeader(event, "content-type", img.type);
-  setResponseHeader(event, "cache-control", "private, max-age=86400");
-  setResponseHeader(event, "x-content-type-options", "nosniff");
-  setResponseHeader(event, "content-security-policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox");
-  return img.body;
-}
-
-function hostname(value) {
-  try {
-    if (!value || /[\s/@?#]/.test(value)) return null;
-    const url = new URL(`http://${value}`);
-    if (url.username || url.password || url.pathname !== "/" || url.search || url.hash) return null;
-    return url.hostname.replace(/^\[|\]$/g, "").toLowerCase().replace(/\.$/, "");
-  } catch {
-    return null;
   }
-}
-function allowedHosts(appUrl2 = process.env.APP_URL || "", extra = process.env.HERDR_WEB_ALLOWED_HOSTS || "", interfaces = os.networkInterfaces()) {
-  const names = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1", os.hostname().toLowerCase()]);
-  try {
-    if (appUrl2) names.add(new URL(appUrl2).hostname.toLowerCase().replace(/^\[|\]$/g, ""));
-  } catch {
+  if (!asset) {
+    if (isPublicAssetURL(id)) {
+      removeResponseHeader(event, "Cache-Control");
+      throw createError$1({ statusCode: 404 });
+    }
+    return;
   }
-  for (const addresses of Object.values(interfaces)) {
-    for (const address of addresses || []) names.add(address.address.toLowerCase().replace(/%.+$/, ""));
+  if (asset.encoding !== void 0) {
+    appendResponseHeader(event, "Vary", "Accept-Encoding");
   }
-  for (const item of extra.split(",")) {
-    const name = hostname(item.trim());
-    if (name) names.add(name);
+  const ifNotMatch = getRequestHeader(event, "if-none-match") === asset.etag;
+  if (ifNotMatch) {
+    setResponseStatus(event, 304, "Not Modified");
+    return "";
   }
-  return names;
-}
-function hostAllowed(host, names = allowedHosts()) {
-  const name = hostname(host || "");
-  return Boolean(name && names.has(name));
-}
-function hostRefusalIsHtml(path, accept) {
-  return !path.startsWith("/api/") && /\btext\/html\b/i.test(Array.isArray(accept) ? accept.join(",") : accept || "");
-}
-const HOST_REFUSED_PAGE = `<!doctype html>
-<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover">
-<meta name="robots" content="noindex"><title>wherdr \xB7 address not enabled</title>
-<style>
-:root{color-scheme:dark}*{box-sizing:border-box}
-body{margin:0;min-height:100vh;display:grid;place-items:center;background:#0d0f12;color:#e8eaed;font:15px/1.5 Inter,system-ui,-apple-system,sans-serif;padding:24px max(16px,env(safe-area-inset-right)) 24px max(16px,env(safe-area-inset-left))}
-main{max-width:440px;border:1px solid #3a3f47;padding:24px}
-.tag{font:11px/1 "JetBrains Mono",ui-monospace,monospace;letter-spacing:.08em;text-transform:uppercase;color:#9aa0a8;margin:0 0 16px}
-h1{font:600 20px/1.25 Archivo,system-ui,sans-serif;margin:0 0 8px}
-p{margin:0 0 8px}hr{border:0;border-top:1px solid #3a3f47;margin:20px 0}
-</style></head><body><main>
-<p class="tag">wherdr \xB7 403</p>
-<h1>This address isn't enabled yet.</h1>
-<p>On the computer, open wherdr \u2192 Settings \u203A Phone (or press Check), then reload.</p>
-<hr>
-<h1 lang="fr">Cette adresse n\u2019est pas encore activ\xE9e.</h1>
-<p lang="fr">Sur l\u2019ordinateur, ouvre wherdr \u2192 R\xE9glages \u203A T\xE9l\xE9phone (ou appuie sur V\xE9rifier), puis recharge.</p>
-</main></body></html>
-`;
-function crossSiteRequest(headers) {
-  const site = headers["sec-fetch-site"];
-  return typeof site === "string" && site !== "same-origin" && site !== "none";
-}
+  const ifModifiedSinceH = getRequestHeader(event, "if-modified-since");
+  const mtimeDate = new Date(asset.mtime);
+  if (ifModifiedSinceH && asset.mtime && new Date(ifModifiedSinceH) >= mtimeDate) {
+    setResponseStatus(event, 304, "Not Modified");
+    return "";
+  }
+  if (asset.type && !getResponseHeader(event, "Content-Type")) {
+    setResponseHeader(event, "Content-Type", asset.type);
+  }
+  if (asset.etag && !getResponseHeader(event, "ETag")) {
+    setResponseHeader(event, "ETag", asset.etag);
+  }
+  if (asset.mtime && !getResponseHeader(event, "Last-Modified")) {
+    setResponseHeader(event, "Last-Modified", mtimeDate.toUTCString());
+  }
+  if (asset.encoding && !getResponseHeader(event, "Content-Encoding")) {
+    setResponseHeader(event, "Content-Encoding", asset.encoding);
+  }
+  if (asset.size > 0 && !getResponseHeader(event, "Content-Length")) {
+    setResponseHeader(event, "Content-Length", asset.size);
+  }
+  return readAsset(id);
+});
 
-const needsUnlock = (p) => p.startsWith("/api/") && !p.startsWith("/api/auth/") || p.startsWith("/uploads/");
-const _M8hgLp = defineEventHandler((event) => {
+const HOST_RECHECK_MS = 3e3;
+const needsUnlock = (p) => p.startsWith("/api/") && !p.startsWith("/api/auth/") && p !== "/api/health" || p.startsWith("/uploads/");
+const _M8hgLp = defineEventHandler(async (event) => {
+  if (!hostAllowed(event.node.req.headers.host)) await adoptServed(HOST_RECHECK_MS);
   if (!hostAllowed(event.node.req.headers.host)) {
     if (hostRefusalIsHtml(event.path.split("?")[0], event.node.req.headers.accept)) {
       setResponseStatus(event, 403);
       setResponseHeader(event, "content-type", "text/html; charset=utf-8");
       setResponseHeader(event, "cache-control", "no-store");
-      return HOST_REFUSED_PAGE;
+      return hostRefusedPage(void 0, event.node.req.headers.host);
     }
     return sendError(event, 403, { error: "Host not allowed", code: "host" });
   }
@@ -20254,6 +21825,7 @@ const _lazy_4__oTm = () => import('../routes/api/auth/max-session.post.mjs');
 const _lazy_7O3TsZ = () => import('../routes/api/auth/register/options.post.mjs');
 const _lazy_fQByfS = () => import('../routes/api/auth/register/verify.post.mjs');
 const _lazy_jcfnWB = () => import('../routes/api/auth/status.get.mjs');
+const _lazy_DwN9dC = () => import('../routes/api/board.get.mjs');
 const _lazy_WhNb61 = () => import('../routes/api/changes.get.mjs');
 const _lazy_hdSKYJ = () => import('../routes/api/chat.get.mjs');
 const _lazy_WoSEa6 = () => import('../routes/api/chat/image.get.mjs');
@@ -20265,11 +21837,16 @@ const _lazy_GF2Rhb = () => import('../routes/api/codex-update.post.mjs');
 const _lazy_onTn85 = () => import('../routes/api/commands.get.mjs');
 const _lazy_XuUgLO = () => import('../routes/api/config.get.mjs');
 const _lazy_y_su18 = () => import('../routes/api/dirs.get.mjs');
+const _lazy_l7QdCS = () => import('../routes/api/dismiss-stopped.post.mjs');
 const _lazy_Z6oqjB = () => import('../routes/api/dismiss.post.mjs');
 const _lazy_2uy6Z9 = () => import('../routes/api/effort.post.mjs');
 const _lazy_7FhJOq = () => import('../routes/api/efforts.get.mjs');
 const _lazy_Wg_MPT = () => import('../routes/api/file.post.mjs');
+const _lazy_vy5jzJ = () => import('../routes/api/files.get.mjs');
+const _lazy_iD5EkU = () => import('../routes/api/files/download.get.mjs');
+const _lazy_TecKdl = () => import('../routes/api/files/read.get.mjs');
 const _lazy_kEWyNy = () => import('../routes/api/gitroot.get.mjs');
+const _lazy_1Vqvr9 = () => import('../routes/api/health.get.mjs');
 const _lazy_U4OEhz = () => import('../routes/api/input.post.mjs');
 const _lazy_PDyMr9 = () => import('../routes/api/interrupt.post.mjs');
 const _lazy_mtPGaX = () => import('../routes/api/isgit.get.mjs');
@@ -20293,8 +21870,15 @@ const _lazy_mhIdo4 = () => import('../routes/api/plugins/projects.get.mjs');
 const _lazy_zH9tge = () => import('../routes/api/plugins/projects.post.mjs');
 const _lazy_qE4HMW = () => import('../routes/api/plugins/thread-limits.get.mjs');
 const _lazy_ByJj04 = () => import('../routes/api/plugins/thread-limits.post.mjs');
+const _lazy_VZ7yeT = () => import('../routes/api/project/inbox.get.mjs');
+const _lazy_wq4Jn3 = () => import('../routes/api/project/inbox.post.mjs');
 const _lazy_WLg2Uu = () => import('../routes/api/index.get.mjs');
+const _lazy_LkLunk = () => import('../routes/api/project/memory.get.mjs');
 const _lazy_sQe2ZF = () => import('../routes/api/project/report.get.mjs');
+const _lazy_jP59VB = () => import('../routes/api/project/routines.get.mjs');
+const _lazy_do1380 = () => import('../routes/api/project/settings.get.mjs');
+const _lazy_6EuDYh = () => import('../routes/api/project/thread.get.mjs');
+const _lazy_qZGRKl = () => import('../routes/api/project/thread.post.mjs');
 const _lazy_wxPObX = () => import('../routes/api/prompt.post.mjs');
 const _lazy_gHqHgE = () => import('../routes/api/push/quiet.post.mjs');
 const _lazy_vXOoN7 = () => import('../routes/api/push/subscribe.post.mjs');
@@ -20316,6 +21900,8 @@ const _lazy_TqhtLZ = () => import('../routes/api/space.post.mjs');
 const _lazy_oeuOKk = () => import('../routes/api/state.get.mjs');
 const _lazy_ecbrXA = () => import('../routes/api/unqueue.post.mjs');
 const _lazy_AUmWqe = () => import('../routes/api/update.get.mjs');
+const _lazy_1DfWY6 = () => import('../routes/api/update.post.mjs');
+const _lazy_lxIhkr = () => import('../routes/api/update/status.get.mjs');
 const _lazy_5f22vB = () => import('../routes/api/upload.post.mjs');
 const _lazy_9iwHBL = () => import('../routes/api/worktrees.get.mjs');
 const _lazy_IA8rJi = () => import('../routes/api/worktrees/remove.post.mjs');
@@ -20324,7 +21910,6 @@ const _lazy_2a3aHZ = () => import('../routes/icons/_name_.get.mjs');
 const _lazy_MpH2Yl = () => import('../routes/uploads/_...name_.get.mjs');
 const _lazy_hSqSXW = () => import('../routes/ws/_..._.mjs');
 const _lazy_N9wZe_ = () => import('../routes/ws/events.mjs');
-const _lazy_CXgyQE = () => import('../routes/ws/mirror.mjs');
 const _lazy_Stovcz = () => import('../routes/ws/term.mjs');
 const _lazy_9gHabX = () => import('../routes/renderer.mjs');
 
@@ -20344,6 +21929,7 @@ const handlers = [
   { route: '/api/auth/register/options', handler: _lazy_7O3TsZ, lazy: true, middleware: false, method: "post" },
   { route: '/api/auth/register/verify', handler: _lazy_fQByfS, lazy: true, middleware: false, method: "post" },
   { route: '/api/auth/status', handler: _lazy_jcfnWB, lazy: true, middleware: false, method: "get" },
+  { route: '/api/board', handler: _lazy_DwN9dC, lazy: true, middleware: false, method: "get" },
   { route: '/api/changes', handler: _lazy_WhNb61, lazy: true, middleware: false, method: "get" },
   { route: '/api/chat', handler: _lazy_hdSKYJ, lazy: true, middleware: false, method: "get" },
   { route: '/api/chat/image', handler: _lazy_WoSEa6, lazy: true, middleware: false, method: "get" },
@@ -20355,11 +21941,16 @@ const handlers = [
   { route: '/api/commands', handler: _lazy_onTn85, lazy: true, middleware: false, method: "get" },
   { route: '/api/config', handler: _lazy_XuUgLO, lazy: true, middleware: false, method: "get" },
   { route: '/api/dirs', handler: _lazy_y_su18, lazy: true, middleware: false, method: "get" },
+  { route: '/api/dismiss-stopped', handler: _lazy_l7QdCS, lazy: true, middleware: false, method: "post" },
   { route: '/api/dismiss', handler: _lazy_Z6oqjB, lazy: true, middleware: false, method: "post" },
   { route: '/api/effort', handler: _lazy_2uy6Z9, lazy: true, middleware: false, method: "post" },
   { route: '/api/efforts', handler: _lazy_7FhJOq, lazy: true, middleware: false, method: "get" },
   { route: '/api/file', handler: _lazy_Wg_MPT, lazy: true, middleware: false, method: "post" },
+  { route: '/api/files', handler: _lazy_vy5jzJ, lazy: true, middleware: false, method: "get" },
+  { route: '/api/files/download', handler: _lazy_iD5EkU, lazy: true, middleware: false, method: "get" },
+  { route: '/api/files/read', handler: _lazy_TecKdl, lazy: true, middleware: false, method: "get" },
   { route: '/api/gitroot', handler: _lazy_kEWyNy, lazy: true, middleware: false, method: "get" },
+  { route: '/api/health', handler: _lazy_1Vqvr9, lazy: true, middleware: false, method: "get" },
   { route: '/api/input', handler: _lazy_U4OEhz, lazy: true, middleware: false, method: "post" },
   { route: '/api/interrupt', handler: _lazy_PDyMr9, lazy: true, middleware: false, method: "post" },
   { route: '/api/isgit', handler: _lazy_mtPGaX, lazy: true, middleware: false, method: "get" },
@@ -20383,8 +21974,15 @@ const handlers = [
   { route: '/api/plugins/projects', handler: _lazy_zH9tge, lazy: true, middleware: false, method: "post" },
   { route: '/api/plugins/thread-limits', handler: _lazy_qE4HMW, lazy: true, middleware: false, method: "get" },
   { route: '/api/plugins/thread-limits', handler: _lazy_ByJj04, lazy: true, middleware: false, method: "post" },
+  { route: '/api/project/inbox', handler: _lazy_VZ7yeT, lazy: true, middleware: false, method: "get" },
+  { route: '/api/project/inbox', handler: _lazy_wq4Jn3, lazy: true, middleware: false, method: "post" },
   { route: '/api/project', handler: _lazy_WLg2Uu, lazy: true, middleware: false, method: "get" },
+  { route: '/api/project/memory', handler: _lazy_LkLunk, lazy: true, middleware: false, method: "get" },
   { route: '/api/project/report', handler: _lazy_sQe2ZF, lazy: true, middleware: false, method: "get" },
+  { route: '/api/project/routines', handler: _lazy_jP59VB, lazy: true, middleware: false, method: "get" },
+  { route: '/api/project/settings', handler: _lazy_do1380, lazy: true, middleware: false, method: "get" },
+  { route: '/api/project/thread', handler: _lazy_6EuDYh, lazy: true, middleware: false, method: "get" },
+  { route: '/api/project/thread', handler: _lazy_qZGRKl, lazy: true, middleware: false, method: "post" },
   { route: '/api/prompt', handler: _lazy_wxPObX, lazy: true, middleware: false, method: "post" },
   { route: '/api/push/quiet', handler: _lazy_gHqHgE, lazy: true, middleware: false, method: "post" },
   { route: '/api/push/subscribe', handler: _lazy_vXOoN7, lazy: true, middleware: false, method: "post" },
@@ -20406,6 +22004,8 @@ const handlers = [
   { route: '/api/state', handler: _lazy_oeuOKk, lazy: true, middleware: false, method: "get" },
   { route: '/api/unqueue', handler: _lazy_ecbrXA, lazy: true, middleware: false, method: "post" },
   { route: '/api/update', handler: _lazy_AUmWqe, lazy: true, middleware: false, method: "get" },
+  { route: '/api/update', handler: _lazy_1DfWY6, lazy: true, middleware: false, method: "post" },
+  { route: '/api/update/status', handler: _lazy_lxIhkr, lazy: true, middleware: false, method: "get" },
   { route: '/api/upload', handler: _lazy_5f22vB, lazy: true, middleware: false, method: "post" },
   { route: '/api/worktrees', handler: _lazy_9iwHBL, lazy: true, middleware: false, method: "get" },
   { route: '/api/worktrees/remove', handler: _lazy_IA8rJi, lazy: true, middleware: false, method: "post" },
@@ -20414,7 +22014,6 @@ const handlers = [
   { route: '/uploads/**:name', handler: _lazy_MpH2Yl, lazy: true, middleware: false, method: "get" },
   { route: '/ws/**', handler: _lazy_hSqSXW, lazy: true, middleware: false, method: undefined },
   { route: '/ws/events', handler: _lazy_N9wZe_, lazy: true, middleware: false, method: undefined },
-  { route: '/ws/mirror', handler: _lazy_CXgyQE, lazy: true, middleware: false, method: undefined },
   { route: '/ws/term', handler: _lazy_Stovcz, lazy: true, middleware: false, method: undefined },
   { route: '/__nuxt_error', handler: _lazy_9gHabX, lazy: true, middleware: false, method: undefined },
   { route: '/__nuxt_island/**', handler: _SxA8c9, lazy: false, middleware: false, method: undefined },
@@ -20877,5 +22476,5 @@ setupGracefulShutdown(listener, nitroApp);
 }
 const nodeServer = {};
 
-export { recentDirsWithKinds as $, ATTACH_MAX as A, keysFor as B, parseChoices as C, parseOmpField as D, sameQuestion as E, sleep as F, getMachine as G, HerdrError as H, installClaudeStatusline as I, codexStatus as J, codexMenuOpen as K, terminalUpdateLine as L, MACHINE_KEY_RE as M, terminalUpdateDone as N, restarts as O, PANE_RE as P, log as Q, withPaneLock as R, builtinCommands as S, slashCommands as T, UPLOAD_DIR as U, HOME as V, localMachine as W, readSubs as X, vapidPublicKey as Y, pushReady as Z, machineConfigs as _, defineApi as a, quietActive as a$, installedAgentKinds as a0, IN_DOCKER as a1, HOST_OPEN_TARGET as a2, HOST_OPEN_KEY as a3, PANE_RE$1 as a4, splitId as a5, HOST_OPEN_USER as a6, listDirs as a7, closePanel as a8, setEffort as a9, initVapid as aA, herdrOn as aB, getState as aC, HERDR_CHILD_ENV as aD, HERDR_BIN as aE, currentMachineSlots as aF, paneBaseMachine as aG, projectOf as aH, isProjectThread as aI, limitMachineKeys as aJ, validLimit as aK, readThreadLimits as aL, writeThreadLimits as aM, closeTrailingMention as aN, restarting as aO, hasHeld as aP, INPUT_STATES as aQ, inputVisible as aR, shouldHold as aS, sendPrompt as aT, agentPrompt as aU, isBusyError as aV, HOLD_AGENTS as aW, pendingPrompts as aX, parseQuiet as aY, writeGlobalQuiet as aZ, writeSubs as a_, refreshModel as aa, listEfforts as ab, saveUpload as ac, underHome as ad, isSlashCommand as ae, addQueued as af, interruptAgent as ag, takeBackFromClaude as ah, takeBack as ai, isGitRepo as aj, projectFolderKinds as ak, baseMachines as al, DATA_DIR as am, renameMachine as an, readMenu as ao, searchKeys as ap, findEntry as aq, stepToward as ar, clickMovesOnly as as, setModel as at, listModels as au, TOP as av, HOST_LABEL as aw, getRequestHeaders as ax, ENV_APP_URL as ay, APP_URL_FILE as az, screenChoices as b, readGlobalQuiet as b0, validPushSubscription as b1, replaceSubscription as b2, pushSend as b3, readQuotas as b4, retryQueued as b5, parseWaitScreen as b6, settingsTabs as b7, tabsOfRow as b8, hasTranscript as b9, encodePath as bA, joinRelativeURL as bB, defineRenderHandler as bC, createError$1 as bD, destr as bE, getRouteRules as bF, relative as bG, joinURL as bH, getResponseStatusText as bI, getResponseStatus as bJ, useNitroApp as bK, nodeServer as bL, SEARCH_DEADLINE_MS as ba, SEARCH_MAX_RESULTS as bb, spaceTitle as bc, markSeen as bd, listSessions as be, openSession as bf, PANE_DIRECTIONS as bg, cancelQueued as bh, installMode as bi, updateCommand as bj, compareVersions as bk, allMachines as bl, recentDirs as bm, joinId as bn, useStorage as bo, setResponseHeader as bp, getRouterParam as bq, readUpload as br, defineWebSocketHandler as bs, eventClients as bt, getStateJson as bu, hostAllowed as bv, sameOrigin as bw, mirrorSize as bx, openTerm as by, useRuntimeConfig as bz, createAgent as c, defineEventHandler as d, watchScreen as e, findPane as f, choicesCache as g, herdr as h, getQuery as i, saveAttachment as j, auth as k, localMachineLabel as l, machineFor as m, machineOfPane as n, fmt as o, poll as p, transcripts as q, reqOf as r, sendError as s, takenBackOf as t, uploadNames as u, withoutTakenBack as v, withOmpTab as w, withSentText as x, currentModel as y, sendImage as z };
+export { sleep$1 as $, ATTACH_MAX as A, isProjectThread as B, uploadNames as C, machineOfPane as D, fmt as E, takenBackOf as F, transcripts as G, HerdrError as H, chatPasted as I, withoutTakenBack as J, withSentText as K, currentModel as L, sendImage as M, keysFor as N, parseChoices as O, PANE_RE as P, parseOmpField as Q, withPaneLock as R, selfUpdates as S, restarting as T, UPLOAD_DIR as U, updateChoices as V, UPDATE_LABELS as W, updateRestartPlan as X, restarts as Y, usesTerminalException as Z, sameQuestion as _, defineApi as a, validLimit as a$, MACHINE_KEY_RE as a0, getMachine as a1, installClaudeStatusline as a2, codexStatus as a3, paneForeground as a4, codexMenuOpen as a5, stopAgent as a6, terminalUpdateLine as a7, waitFor as a8, terminalUpdateDone as a9, listEfforts as aA, saveUpload as aB, setResponseHeader as aC, underHome as aD, isSlashCommand as aE, addQueued as aF, interruptAgent as aG, takeBackFromClaude as aH, takeBack as aI, isGitRepo as aJ, projectFolderKinds as aK, baseMachines as aL, DATA_DIR as aM, renameMachine as aN, readMenu as aO, searchKeys as aP, findEntry as aQ, stepToward as aR, clickMovesOnly as aS, setModel as aT, listModels as aU, TOP as aV, HOST_LABEL as aW, phoneAccess as aX, phoneStatus as aY, phoneAction as aZ, limitMachineKeys as a_, startAgent as aa, log as ab, RESTARTABLE as ac, claudeFooterMode as ad, planRestart as ae, builtinCommands as af, slashCommands as ag, HOME as ah, localMachine as ai, readSubs as aj, vapidPublicKey as ak, pushReady as al, machineConfigs as am, recentDirsWithKinds as an, installedAgentKinds as ao, IN_DOCKER as ap, HOST_OPEN_TARGET as aq, HOST_OPEN_KEY as ar, PANE_RE$1 as as, splitId as at, HOST_OPEN_USER as au, listDirs as av, dismissStopped as aw, closePanel as ax, setEffort as ay, refreshModel as az, screenChoices as b, getResponseStatusText as b$, readThreadLimits as b0, writeThreadLimits as b1, closeTrailingMention as b2, keepPastes as b3, hasHeld as b4, INPUT_STATES as b5, inputVisible as b6, shouldHold as b7, sendPrompt as b8, agentPrompt as b9, cancelQueued as bA, installMode as bB, oneTapMode as bC, updateCommand as bD, compareVersions as bE, updateRunning as bF, allMachines as bG, recentDirs as bH, joinId as bI, useStorage as bJ, getRouterParam as bK, readUpload as bL, defineWebSocketHandler as bM, eventClients as bN, getStateJson as bO, hostAllowed as bP, sameOrigin as bQ, openTerm as bR, useRuntimeConfig as bS, encodePath as bT, joinRelativeURL as bU, defineRenderHandler as bV, createError$1 as bW, destr as bX, getRouteRules as bY, relative as bZ, joinURL as b_, isBusyError as ba, HOLD_AGENTS as bb, pendingPrompts as bc, parseQuiet as bd, writeGlobalQuiet as be, writeSubs as bf, quietActive as bg, readGlobalQuiet as bh, validPushSubscription as bi, replaceSubscription as bj, pushSend as bk, readQuotas as bl, retryQueued as bm, parseWaitScreen as bn, settingsTabs as bo, tabsOfRow as bp, classifyScreen as bq, parseMenu as br, hasTranscript as bs, SEARCH_DEADLINE_MS as bt, SEARCH_MAX_RESULTS as bu, spaceTitle as bv, markSeen as bw, listSessions as bx, openSession as by, PANE_DIRECTIONS as bz, createAgent as c, getResponseStatus as c0, useNitroApp as c1, nodeServer as c2, defineEventHandler as d, watchScreen as e, findPane as f, choicesCache as g, herdr as h, getQuery as i, saveAttachment as j, auth as k, localMachineLabel as l, getState as m, projectOf as n, isCoordinator as o, poll as p, paneBaseMachine as q, reqOf as r, sendError as s, pickCoordinator as t, currentMachineSlots as u, machineFor as v, withOmpTab as w, herdrOn as x, HERDR_CHILD_ENV as y, HERDR_BIN as z };
 //# sourceMappingURL=nitro.mjs.map