@brainbase-labs/cli 0.39.0 → 0.40.0

package/dist/index.js

@@ -24570,7 +24570,7 @@ var require_permessage_deflate = __commonJS((exports, module) => {
     acceptAsServer(offers) {
       const opts = this._options;
       const accepted = offers.find((params) => {
-        if (opts.serverNoContextTakeover === false && params.server_no_context_takeover || params.server_max_window_bits && (opts.serverMaxWindowBits === false || typeof opts.serverMaxWindowBits === "number" && opts.serverMaxWindowBits > params.server_max_window_bits) || typeof opts.clientMaxWindowBits === "number" && !params.client_max_window_bits) {
+        if (opts.serverNoContextTakeover === false && params.server_no_context_takeover || params.server_max_window_bits && (opts.serverMaxWindowBits === false || typeof opts.serverMaxWindowBits === "number" && opts.serverMaxWindowBits > params.server_max_window_bits) || typeof opts.clientMaxWindowBits === "number" && (typeof params.client_max_window_bits === "number" ? opts.clientMaxWindowBits > params.client_max_window_bits : !params.client_max_window_bits)) {
           return false;
         }
         return true;
@@ -24977,6 +24977,8 @@ var require_receiver = __commonJS((exports, module) => {
       this._binaryType = options.binaryType || BINARY_TYPES[0];
       this._extensions = options.extensions || {};
       this._isServer = !!options.isServer;
+      this._maxBufferedChunks = options.maxBufferedChunks | 0;
+      this._maxFragments = options.maxFragments | 0;
       this._maxPayload = options.maxPayload | 0;
       this._skipUTF8Validation = !!options.skipUTF8Validation;
       this[kWebSocket] = undefined;
@@ -24991,6 +24993,7 @@ var require_receiver = __commonJS((exports, module) => {
       this._opcode = 0;
       this._totalPayloadLength = 0;
       this._messageLength = 0;
+      this._numFragments = 0;
       this._fragments = [];
       this._errored = false;
       this._loop = false;
@@ -24999,6 +25002,10 @@ var require_receiver = __commonJS((exports, module) => {
     _write(chunk2, encoding, cb) {
       if (this._opcode === 8 && this._state == GET_INFO)
         return cb();
+      if (this._maxBufferedChunks > 0 && this._buffers.length >= this._maxBufferedChunks) {
+        cb(this.createError(RangeError, "Too many buffered chunks", false, 1008, "WS_ERR_TOO_MANY_BUFFERED_PARTS"));
+        return;
+      }
       this._bufferedBytes += chunk2.length;
       this._buffers.push(chunk2);
       this.startLoop(cb);
@@ -25196,6 +25203,11 @@ var require_receiver = __commonJS((exports, module) => {
         this.controlMessage(data, cb);
         return;
       }
+      if (this._maxFragments > 0 && ++this._numFragments > this._maxFragments) {
+        const error = this.createError(RangeError, "Too many message fragments", false, 1008, "WS_ERR_TOO_MANY_BUFFERED_PARTS");
+        cb(error);
+        return;
+      }
       if (this._compressed) {
         this._state = INFLATING;
         this.decompress(data, cb);
@@ -25236,6 +25248,7 @@ var require_receiver = __commonJS((exports, module) => {
       this._totalPayloadLength = 0;
       this._messageLength = 0;
       this._fragmented = 0;
+      this._numFragments = 0;
       this._fragments = [];
       if (this._opcode === 2) {
         let data;
@@ -25334,6 +25347,9 @@ var require_receiver = __commonJS((exports, module) => {
 var require_sender = __commonJS((exports, module) => {
   var { Duplex } = __require("stream");
   var { randomFillSync } = __require("crypto");
+  var {
+    types: { isUint8Array }
+  } = __require("util");
   var PerMessageDeflate = require_permessage_deflate();
   var { EMPTY_BUFFER, kWebSocket, NOOP } = require_constants2();
   var { isBlob, isValidStatusCode } = require_validation();
@@ -25453,8 +25469,10 @@ var require_sender = __commonJS((exports, module) => {
         buf.writeUInt16BE(code, 0);
         if (typeof data === "string") {
           buf.write(data, 2);
-        } else {
+        } else if (isUint8Array(data)) {
           buf.set(data, 2);
+        } else {
+          throw new TypeError("Second argument must be a string or a Uint8Array");
         }
       }
       const options = {
@@ -26057,11 +26075,23 @@ var require_websocket = __commonJS((exports, module) => {
         this._isServer = false;
         this._redirects = 0;
         if (protocols === undefined) {
-          protocols = [];
+          if (!options || options.protocols === undefined) {
+            protocols = [];
+          } else if (Array.isArray(options.protocols)) {
+            protocols = options.protocols;
+          } else {
+            protocols = [options.protocols];
+          }
         } else if (!Array.isArray(protocols)) {
           if (typeof protocols === "object" && protocols !== null) {
             options = protocols;
-            protocols = [];
+            if (options.protocols === undefined) {
+              protocols = [];
+            } else if (Array.isArray(options.protocols)) {
+              protocols = options.protocols;
+            } else {
+              protocols = [options.protocols];
+            }
           } else {
             protocols = [protocols];
           }
@@ -26121,6 +26151,8 @@ var require_websocket = __commonJS((exports, module) => {
         binaryType: this.binaryType,
         extensions: this._extensions,
         isServer: this._isServer,
+        maxBufferedChunks: options.maxBufferedChunks,
+        maxFragments: options.maxFragments,
         maxPayload: options.maxPayload,
         skipUTF8Validation: options.skipUTF8Validation
       });
@@ -26178,7 +26210,6 @@ var require_websocket = __commonJS((exports, module) => {
         }
         return;
       }
-      this._readyState = WebSocket.CLOSING;
       this._sender.close(code, data, !this._isServer, (err) => {
         if (err)
           return;
@@ -26187,6 +26218,7 @@ var require_websocket = __commonJS((exports, module) => {
           this._socket.end();
         }
       });
+      this._readyState = WebSocket.CLOSING;
       setCloseTimer(this);
     }
     pause() {
@@ -26363,6 +26395,8 @@ var require_websocket = __commonJS((exports, module) => {
       autoPong: true,
       closeTimeout: CLOSE_TIMEOUT,
       protocolVersion: protocolVersions[1],
+      maxBufferedChunks: 256 * 1024,
+      maxFragments: 16 * 1024,
       maxPayload: 100 * 1024 * 1024,
       skipUTF8Validation: false,
       perMessageDeflate: true,
@@ -26372,6 +26406,7 @@ var require_websocket = __commonJS((exports, module) => {
       socketPath: undefined,
       hostname: undefined,
       protocol: undefined,
+      protocols: undefined,
       timeout: undefined,
       method: "GET",
       host: undefined,
@@ -26601,6 +26636,8 @@ var require_websocket = __commonJS((exports, module) => {
       websocket.setSocket(socket, head3, {
         allowSynchronousEvents: opts.allowSynchronousEvents,
         generateMask: opts.generateMask,
+        maxBufferedChunks: opts.maxBufferedChunks,
+        maxFragments: opts.maxFragments,
         maxPayload: opts.maxPayload,
         skipUTF8Validation: opts.skipUTF8Validation
       });
@@ -26936,6 +26973,8 @@ var require_websocket_server = __commonJS((exports, module) => {
       options = {
         allowSynchronousEvents: true,
         autoPong: true,
+        maxBufferedChunks: 256 * 1024,
+        maxFragments: 16 * 1024,
         maxPayload: 100 * 1024 * 1024,
         skipUTF8Validation: false,
         perMessageDeflate: false,
@@ -27162,6 +27201,8 @@ var require_websocket_server = __commonJS((exports, module) => {
       socket.removeListener("error", socketOnError);
       ws.setSocket(socket, head3, {
         allowSynchronousEvents: this.options.allowSynchronousEvents,
+        maxBufferedChunks: this.options.maxBufferedChunks,
+        maxFragments: this.options.maxFragments,
         maxPayload: this.options.maxPayload,
         skipUTF8Validation: this.options.skipUTF8Validation
       });
@@ -36018,7 +36059,7 @@ function padStart(s, n) {
 // package.json
 var package_default = {
   name: "@brainbase-labs/cli",
-  version: "0.39.0",
+  version: "0.40.0",
   description: "Pack, share, and install agent templates across harnesses (Claude Code, Codex, ...).",
   type: "module",
   bin: {
@@ -36065,7 +36106,7 @@ var package_default = {
     ink: "^5.1.0",
     picocolors: "^1.0.0",
     react: "^18.3.1",
-    "smol-toml": "^1.6.1",
+    "smol-toml": "^1.9.1",
     tar: "^7.5.22",
     yaml: "^2.8.4",
     zod: "^3.23.8"
@@ -42338,11 +42379,11 @@ import fs14 from "node:fs";
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 function getLineColFromPtr(string, ptr) {
-  let lines = string.slice(0, ptr).split(/\r\n|\n|\r/g);
+  let lines = string.slice(0, ptr).split(/\r?\n/);
   return [lines.length, lines.pop().length + 1];
 }
 function makeCodeBlock(string, line, column) {
-  let lines = string.split(/\r\n|\n|\r/g);
+  let lines = string.split(/\r?\n/);
   let codeblock = "";
   let numberLen = (Math.log10(line + 1) | 0) + 1;
   for (let i = line - 1;i <= line + 1; i++) {
@@ -42377,9 +42418,12 @@ ${codeblock}`, options);
     this.column = column;
     this.codeblock = codeblock;
   }
+  static x(message, ctx, ptr) {
+    throw new TomlError(message, { toml: ctx.s, ptr: ptr ?? ctx.p });
+  }
 }
 
-// node_modules/smol-toml/dist/util.js
+// node_modules/smol-toml/dist/primitive.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -42407,89 +42451,96 @@ ${codeblock}`, options);
  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
-function isEscaped(str, ptr) {
-  let i = 0;
-  while (str[ptr - ++i] === "\\")
-    ;
-  return --i && i % 2;
-}
-function indexOfNewline(str, start = 0, end = str.length) {
-  let idx = str.indexOf(`
-`, start);
-  if (str[idx - 1] === "\r")
-    idx--;
-  return idx <= end ? idx : -1;
-}
-function skipComment(str, ptr) {
-  for (let i = ptr;i < str.length; i++) {
-    let c2 = str[i];
-    if (c2 === `
-`)
-      return i;
-    if (c2 === "\r" && str[i + 1] === `
-`)
-      return i + 1;
-    if (c2 < " " && c2 !== "\t" || c2 === "") {
-      throw new TomlError("control characters are not allowed in comments", {
-        toml: str,
-        ptr
-      });
-    }
-  }
-  return str.length;
-}
-function skipVoid(str, ptr, banNewLines, banComments) {
-  let c2;
-  while (true) {
-    while ((c2 = str[ptr]) === " " || c2 === "\t" || !banNewLines && (c2 === `
-` || c2 === "\r" && str[ptr + 1] === `
-`))
-      ptr++;
-    if (banComments || c2 !== "#")
-      break;
-    ptr = skipComment(str, ptr);
-  }
-  return ptr;
-}
-function skipUntil(str, ptr, sep, end, banNewLines = false) {
-  if (!end) {
-    ptr = indexOfNewline(str, ptr);
-    return ptr < 0 ? str.length : ptr;
-  }
-  for (let i = ptr;i < str.length; i++) {
-    let c2 = str[i];
-    if (c2 === "#") {
-      i = indexOfNewline(str, i);
-    } else if (c2 === sep) {
-      return i + 1;
-    } else if (c2 === end || banNewLines && (c2 === `
-` || c2 === "\r" && str[i + 1] === `
-`)) {
-      return i;
-    }
+function parseString(ctx) {
+  let startPtr = ctx.p;
+  let c2 = ctx.s.charCodeAt(ctx.p++);
+  let first = c2;
+  let isLiteral = c2 === 39;
+  let isMultiline = c2 === ctx.s.charCodeAt(ctx.p) && c2 === ctx.s.charCodeAt(ctx.p + 1);
+  if (isMultiline) {
+    if ((c2 = ctx.s.charCodeAt(ctx.p += 2)) === 10)
+      ctx.p++;
+    else if (c2 === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10)
+      ctx.p += 2;
   }
-  throw new TomlError("cannot find end of structure", {
-    toml: str,
-    ptr
-  });
-}
-function getStringEnd(str, seek) {
-  let first = str[seek];
-  let target = first === str[seek + 1] && str[seek + 1] === str[seek + 2] ? str.slice(seek, seek + 3) : first;
-  seek += target.length - 1;
-  do
-    seek = str.indexOf(target, ++seek);
-  while (seek > -1 && first !== "'" && isEscaped(str, seek));
-  if (seek > -1) {
-    seek += target.length;
-    if (target.length > 1) {
-      if (str[seek] === first)
-        seek++;
-      if (str[seek] === first)
-        seek++;
+  let parsed = "";
+  let sliceStart = ctx.p;
+  let state = 0;
+  for (;ctx.p < ctx.s.length; ctx.p++) {
+    c2 = ctx.s.charCodeAt(ctx.p);
+    if (isMultiline && (c2 === 10 || c2 === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10)) {
+      state = state && 3;
+    } else if (c2 < 32 && c2 !== 9 || c2 === 127) {
+      TomlError.x("control characters are not allowed in strings", ctx);
+    } else if ((!state || state === 3) && c2 === first && (!isMultiline || ctx.s.charCodeAt(ctx.p + 1) === first && ctx.s.charCodeAt(ctx.p + 2) === first)) {
+      if (isMultiline) {
+        if (ctx.s.charCodeAt(ctx.p + 3) === first)
+          ctx.p++;
+        if (ctx.s.charCodeAt(ctx.p + 3) === first)
+          ctx.p++;
+      }
+      if (!state) {
+        let s = ctx.s.slice(sliceStart, ctx.p);
+        parsed = parsed ? parsed + s : s;
+      }
+      ctx.p += isMultiline ? 3 : 1;
+      return parsed;
+    } else if (!state) {
+      if (!isLiteral && c2 === 92) {
+        parsed += ctx.s.slice(sliceStart, sliceStart = ctx.p);
+        state = 1;
+      }
+    } else if (state === 1) {
+      if (c2 === 120 || c2 === 117 || c2 === 85) {
+        let errPtr = ctx.p++ - 1;
+        let value = 0;
+        let len = c2 === 120 ? 2 : c2 === 117 ? 4 : 8;
+        for (let j2 = 0;j2 < len; j2++, ctx.p++) {
+          let hex = ctx.s.charCodeAt(ctx.p);
+          let digit = hex >= 48 && hex <= 57 ? hex - 48 : hex >= 65 && hex <= 70 ? hex - 65 + 10 : hex >= 97 && hex <= 102 ? hex - 97 + 10 : -1;
+          if (digit < 0)
+            TomlError.x("invalid non-hex character in unicode escape", ctx);
+          value = value << 4 | digit;
+        }
+        if (value < 0 || value > 1114111 || value >= 55296 && value <= 57343) {
+          TomlError.x("invalid unicode escape", ctx, errPtr);
+        }
+        parsed += String.fromCodePoint(value);
+        sliceStart = ctx.p--;
+        state = 0;
+      } else if (isMultiline && (c2 === 32 || c2 === 9)) {
+        state = 2;
+      } else {
+        if (c2 === 98)
+          parsed += "\b";
+        else if (c2 === 116)
+          parsed += "\t";
+        else if (c2 === 110)
+          parsed += `
+`;
+        else if (c2 === 102)
+          parsed += "\f";
+        else if (c2 === 114)
+          parsed += "\r";
+        else if (c2 === 101)
+          parsed += "\x1B";
+        else if (c2 === 34)
+          parsed += '"';
+        else if (c2 === 92)
+          parsed += "\\";
+        else
+          TomlError.x("unrecognised escape sequence", ctx);
+        sliceStart = ctx.p + 1;
+        state = 0;
+      }
+    } else if (c2 !== 32 && c2 !== 9) {
+      if (state === 2)
+        TomlError.x("invalid escape: only line-ending whitespace may be escaped", ctx, sliceStart);
+      state = !isLiteral && c2 === 92 ? 1 : 0;
+      sliceStart = ctx.p;
     }
   }
-  return seek;
+  TomlError.x("unfinished string", ctx, startPtr);
 }
 
 // node_modules/smol-toml/dist/date.js
@@ -42520,35 +42571,58 @@ function getStringEnd(str, seek) {
  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
-var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
+var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[Tt ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|z|[-+]\d{2}:\d{2})?$/i;
 
 class TomlDate extends Date {
   #hasDate = false;
   #hasTime = false;
   #offset = null;
-  constructor(date) {
+  constructor(date, fasttype, unsafeDelim) {
     let hasDate = true;
     let hasTime = true;
     let offset = "Z";
+    let c2;
     if (typeof date === "string") {
-      let match = date.match(DATE_TIME_RE);
-      if (match) {
-        if (!match[1]) {
-          hasDate = false;
-          date = `0000-01-01T${date}`;
-        }
-        hasTime = !!match[2];
-        hasTime && date[10] === " " && (date = date.replace(" ", "T"));
-        if (match[2] && +match[2] > 23) {
-          date = "";
+      if (fasttype)
+        prep: {
+          if (fasttype < 3) {
+            if (+date.slice(11, 13) > 23) {
+              date = "";
+              break prep;
+            }
+            if (fasttype === 2) {
+              offset = null;
+              date += "Z";
+            } else if ((c2 = date.charCodeAt(date.length - 1)) !== 90 && c2 !== 122) {
+              offset = date.slice(date.length - 6);
+            }
+            if (unsafeDelim)
+              date = date.slice(0, 10) + "T" + date.slice(11);
+          } else if (fasttype === 4) {
+            date = +date.slice(0, 2) > 23 ? "" : `0000-01-01T${date}Z`;
+          }
+          hasDate = fasttype !== 4;
+          hasTime = fasttype !== 3;
+        }
+      else {
+        let match = date.match(DATE_TIME_RE);
+        if (match) {
+          if (!match[1]) {
+            hasDate = false;
+            date = `0000-01-01T${date}`;
+          }
+          hasTime = !!match[2];
+          hasTime && date[10] === " " && (date = date.replace(" ", "T"));
+          if (match[2] && +match[2] > 23) {
+            date = "";
+          } else {
+            offset = match[3] || null;
+            if (!offset && hasTime)
+              date += "Z";
+          }
         } else {
-          offset = match[3] || null;
-          date = date.toUpperCase();
-          if (!offset && hasTime)
-            date += "Z";
+          date = "";
         }
-      } else {
-        date = "";
       }
     }
     super(date);
@@ -42581,7 +42655,7 @@ class TomlDate extends Date {
       return iso.slice(11, 23);
     if (this.#offset === null)
       return iso.slice(0, -1);
-    if (this.#offset === "Z")
+    if (this.#offset === "Z" || this.#offset === "z")
       return iso;
     let offset = +this.#offset.slice(1, 3) * 60 + +this.#offset.slice(4, 6);
     offset = this.#offset[0] === "-" ? offset : -offset;
@@ -42612,7 +42686,7 @@ class TomlDate extends Date {
   }
 }
 
-// node_modules/smol-toml/dist/primitive.js
+// node_modules/smol-toml/dist/extract.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -42640,151 +42714,213 @@ class TomlDate extends Date {
  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
-var INT_REGEX = /^((0x[0-9a-fA-F](_?[0-9a-fA-F])*)|(([+-]|0[ob])?\d(_?\d)*))$/;
-var FLOAT_REGEX = /^[+-]?\d(_?\d)*(\.\d(_?\d)*)?([eE][+-]?\d(_?\d)*)?$/;
-var LEADING_ZERO = /^[+-]?0[0-9_]/;
-var ESCAPE_REGEX = /^[0-9a-f]{2,8}$/i;
-var ESC_MAP = {
-  b: "\b",
-  t: "\t",
-  n: `
-`,
-  f: "\f",
-  r: "\r",
-  e: "\x1B",
-  '"': '"',
-  "\\": "\\"
-};
-function parseString(str, ptr = 0, endPtr = str.length) {
-  let isLiteral = str[ptr] === "'";
-  let isMultiline = str[ptr++] === str[ptr] && str[ptr] === str[ptr + 1];
-  if (isMultiline) {
-    endPtr -= 2;
-    if (str[ptr += 2] === "\r")
-      ptr++;
-    if (str[ptr] === `
-`)
-      ptr++;
+function isDigit(char, base = 10) {
+  return base === 16 ? char > 47 && char < 58 || char > 64 && char < 71 || char > 96 && char < 103 : char > 47 && char < 48 + base;
+}
+function isEndOfValue(char, delim) {
+  return char === 32 || char === 9 || char === 10 || char === 13 || delim && (char === delim || char === 44) || char === 35;
+}
+function extractValue(ctx, end) {
+  let errPtr = ctx.p;
+  let c2 = ctx.s.charCodeAt(ctx.p);
+  if (c2 === 91 || c2 === 123) {
+    ctx.d-- || TomlError.x("document contains excessively nested structures. aborting.", ctx);
+    let value = c2 === 91 ? parseArray(ctx) : parseInlineTable(ctx);
+    ctx.d++;
+    return value;
   }
-  let tmp = 0;
-  let isEscape;
-  let parsed = "";
-  let sliceStart = ptr;
-  while (ptr < endPtr - 1) {
-    let c2 = str[ptr++];
-    if (c2 === `
-` || c2 === "\r" && str[ptr] === `
-`) {
-      if (!isMultiline) {
-        throw new TomlError("newlines are not allowed in strings", {
-          toml: str,
-          ptr: ptr - 1
-        });
-      }
-    } else if (c2 < " " && c2 !== "\t" || c2 === "") {
-      throw new TomlError("control characters are not allowed in strings", {
-        toml: str,
-        ptr: ptr - 1
-      });
+  if (c2 === 34 || c2 === 39) {
+    return parseString(ctx);
+  }
+  if (c2 === 116) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 114 || ctx.s.charCodeAt(++ctx.p) !== 117 || ctx.s.charCodeAt(++ctx.p) !== 101)
+      TomlError.x("invalid value", ctx, errPtr);
+    return ctx.p++, true;
+  }
+  if (c2 === 102) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 97 || ctx.s.charCodeAt(++ctx.p) !== 108 || ctx.s.charCodeAt(++ctx.p) !== 115 || ctx.s.charCodeAt(++ctx.p) !== 101)
+      TomlError.x("invalid value", ctx, errPtr);
+    return ctx.p++, false;
+  }
+  if (c2 === 43 || c2 === 45) {
+    return parseNumber(ctx, ctx.p, ctx.s.charCodeAt(++ctx.p), 44 - c2, end);
+  }
+  if (ctx.s.charCodeAt(ctx.p + 4) === 45 && ctx.s.charCodeAt(ctx.p + 7) === 45) {
+    return parseDate(ctx, c2, end);
+  }
+  if (ctx.s.charCodeAt(ctx.p + 2) === 58) {
+    return parseTime(ctx, c2, end);
+  }
+  return parseNumber(ctx, ctx.p, c2, 0, end);
+}
+function parseNumber(ctx, startPtr, startChr, sign, endChr) {
+  let c2 = startChr;
+  let state = 0;
+  let hasUnderscores = false;
+  if (c2 === 105) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 110 || ctx.s.charCodeAt(++ctx.p) !== 102)
+      TomlError.x("invalid value", ctx, startPtr);
+    return ctx.p++, (sign || 1) / 0;
+  }
+  if (c2 === 110) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 97 || ctx.s.charCodeAt(++ctx.p) !== 110)
+      TomlError.x("invalid value", ctx, startPtr);
+    return ctx.p++, NaN;
+  }
+  if (c2 === 48) {
+    if (++ctx.p >= ctx.s.length || isEndOfValue(c2 = ctx.s.charCodeAt(ctx.p), endChr))
+      return ctx.bi === true ? 0n : 0;
+    if (!sign) {
+      if (c2 === 120)
+        return parseIntegerBaseN(ctx, startPtr, 16, endChr);
+      else if (c2 === 98)
+        return parseIntegerBaseN(ctx, startPtr, 2, endChr);
+      else if (c2 === 111)
+        return parseIntegerBaseN(ctx, startPtr, 8, endChr);
+    }
+    if (c2 === 46)
+      state = 2;
+    else if (c2 === 101 || c2 === 69)
+      state = 4;
+    else
+      TomlError.x("illegal leading zero", ctx, startPtr);
+  } else if (!isDigit(c2))
+    TomlError.x("invalid value", ctx, startPtr);
+  while (++ctx.p < ctx.s.length && (c2 = ctx.s.charCodeAt(ctx.p), !isEndOfValue(c2, endChr))) {
+    if (!state)
+      state = 1;
+    if (c2 === 95) {
+      if (!(state & 1))
+        TomlError.x("illegal underscore", ctx);
+      state += 11;
+      hasUnderscores = true;
+    } else if (state === 1 && c2 === 46)
+      state = 2;
+    else if ((state === 1 || state === 3) && (c2 === 101 || c2 === 69))
+      state = 4;
+    else if (state === 4 && (c2 === 43 || c2 === 45)) {
+      state = 6;
+    } else if (!isDigit(c2))
+      TomlError.x(`illegal character in numeric literal`, ctx);
+    else if (state > 9)
+      state -= 11;
+    else if (!(state & 1))
+      state++;
+  }
+  if (!state) {
+    let val = (startChr - 48) * (sign || 1);
+    return ctx.bi === true ? BigInt(val) : val;
+  }
+  if (!(state & 1))
+    TomlError.x("unfinished numeric value", ctx, startPtr);
+  let str = ctx.s.slice(startPtr, ctx.p);
+  if (hasUnderscores)
+    str = str.replaceAll("_", "");
+  return state > 1 ? parseFloat(str) : parseInteger(ctx, str, 10, startPtr);
+}
+function parseIntegerBaseN(ctx, startPtr, base, endChr) {
+  let c2, underscore = 1;
+  while (++ctx.p < ctx.s.length && (c2 = ctx.s.charCodeAt(ctx.p), !isEndOfValue(c2, endChr))) {
+    if (c2 === 95) {
+      if (underscore & 1)
+        TomlError.x("illegal underscore", ctx);
+      underscore = 3;
+    } else if (!isDigit(c2, base))
+      TomlError.x(`illegal character in numeric literal`, ctx);
+    else if (underscore & 1)
+      underscore--;
+  }
+  if (underscore & 1)
+    TomlError.x("unfinished numeric value", ctx);
+  let str = ctx.s.slice(startPtr + 2, ctx.p);
+  if (underscore)
+    str = str.replaceAll("_", "");
+  return parseInteger(ctx, str, base, startPtr);
+}
+function parseInteger(ctx, str, base, startPtr) {
+  if (ctx.bi !== true)
+    int: {
+      let val = parseInt(str, base);
+      if (!Number.isSafeInteger(val)) {
+        if (ctx.bi)
+          break int;
+        TomlError.x("integer value cannot be represented losslessly", ctx, startPtr);
+      }
+      return val;
+    }
+  return base === 10 ? BigInt(str) : BigInt((base === 2 ? "0b" : base === 8 ? "0o" : "0x") + str);
+}
+function parseDate(ctx, c2, endChr) {
+  let startPtr = ctx.p++, unsafeSeparator;
+  if (!isDigit(c2) || !isDigit(ctx.s.charCodeAt(ctx.p++)) || !isDigit(ctx.s.charCodeAt(ctx.p++)) || !isDigit(ctx.s.charCodeAt(ctx.p++))) {
+    return parseNumber(ctx, ctx.p = startPtr, c2, 0, endChr);
+  }
+  ctx.p += 5;
+  if (!isDigit(ctx.s.charCodeAt(ctx.p++)))
+    TomlError.x("invalid date-time: date part is malformed", ctx, startPtr);
+  if (ctx.p >= ctx.s.length || ((c2 = ctx.s.charCodeAt(ctx.p)) !== 32 || (unsafeSeparator = true, !isDigit(ctx.s.charCodeAt(ctx.p + 1)))) && c2 !== 84 && c2 !== 116) {
+    let t2 = ctx.s.slice(startPtr, ctx.p);
+    return readDate(ctx, t2, 3, false, startPtr);
+  }
+  if (ctx.s.charCodeAt(ctx.p += 3) !== 58)
+    TomlError.x("invalid date-time: time part is malformed", ctx, startPtr);
+  if (ctx.s.charCodeAt(ctx.p += 3) === 58)
+    ctx.p += 3;
+  if (ctx.s.charCodeAt(ctx.p) === 46)
+    while (isDigit(ctx.s.charCodeAt(++ctx.p)))
+      ;
+  if (c2 = ctx.s.charCodeAt(ctx.p)) {
+    if (c2 === 90 || c2 === 122) {
+      let t2 = ctx.s.slice(startPtr, ++ctx.p);
+      return readDate(ctx, t2, 1, unsafeSeparator, startPtr, "[+00:00]");
     }
-    if (isEscape) {
-      isEscape = false;
-      if (c2 === "x" || c2 === "u" || c2 === "U") {
-        let code = str.slice(ptr, ptr += c2 === "x" ? 2 : c2 === "u" ? 4 : 8);
-        if (!ESCAPE_REGEX.test(code)) {
-          throw new TomlError("invalid unicode escape", {
-            toml: str,
-            ptr: tmp
-          });
-        }
-        try {
-          parsed += String.fromCodePoint(parseInt(code, 16));
-        } catch {
-          throw new TomlError("invalid unicode escape", {
-            toml: str,
-            ptr: tmp
-          });
-        }
-      } else if (isMultiline && (c2 === `
-` || c2 === " " || c2 === "\t" || c2 === "\r")) {
-        ptr = skipVoid(str, ptr - 1, true);
-        if (str[ptr] !== `
-` && str[ptr] !== "\r") {
-          throw new TomlError("invalid escape: only line-ending whitespace may be escaped", {
-            toml: str,
-            ptr: tmp
-          });
-        }
-        ptr = skipVoid(str, ptr);
-      } else if (c2 in ESC_MAP) {
-        parsed += ESC_MAP[c2];
-      } else {
-        throw new TomlError("unrecognized escape sequence", {
-          toml: str,
-          ptr: tmp
-        });
-      }
-      sliceStart = ptr;
-    } else if (!isLiteral && c2 === "\\") {
-      tmp = ptr - 1;
-      isEscape = true;
-      parsed += str.slice(sliceStart, tmp);
+    if (c2 === 43 || c2 === 45) {
+      let t2 = ctx.s.slice(startPtr, ctx.p += 6);
+      return readDate(ctx, t2, 1, unsafeSeparator, startPtr, !ctx.ld && "[" + ctx.s.slice(ctx.p - 6, ctx.p) + "]");
     }
   }
-  return parsed + str.slice(sliceStart, endPtr - 1);
+  let t = ctx.s.slice(startPtr, ctx.p);
+  return readDate(ctx, t, 2, unsafeSeparator, startPtr);
 }
-function parseValue(value, toml, ptr, integersAsBigInt) {
-  if (value === "true")
-    return true;
-  if (value === "false")
-    return false;
-  if (value === "-inf")
-    return -Infinity;
-  if (value === "inf" || value === "+inf")
-    return Infinity;
-  if (value === "nan" || value === "+nan" || value === "-nan")
-    return NaN;
-  if (value === "-0")
-    return integersAsBigInt ? 0n : 0;
-  let isInt = INT_REGEX.test(value);
-  if (isInt || FLOAT_REGEX.test(value)) {
-    if (LEADING_ZERO.test(value)) {
-      throw new TomlError("leading zeroes are not allowed", {
-        toml,
-        ptr
-      });
-    }
-    value = value.replace(/_/g, "");
-    let numeric = +value;
-    if (isNaN(numeric)) {
-      throw new TomlError("invalid number", {
-        toml,
-        ptr
-      });
-    }
-    if (isInt) {
-      if ((isInt = !Number.isSafeInteger(numeric)) && !integersAsBigInt) {
-        throw new TomlError("integer value cannot be represented losslessly", {
-          toml,
-          ptr
-        });
-      }
-      if (isInt || integersAsBigInt === true)
-        numeric = BigInt(value);
-    }
-    return numeric;
+function parseTime(ctx, c2, endChr) {
+  let start = ctx.p;
+  if (!isDigit(c2) || !isDigit(ctx.s.charCodeAt(++ctx.p))) {
+    return parseNumber(ctx, --ctx.p, c2, 0, endChr);
   }
-  const date = new TomlDate(value);
-  if (!date.isValid()) {
-    throw new TomlError("invalid value", {
-      toml,
-      ptr
-    });
+  if (ctx.s.charCodeAt(ctx.p += 4) === 58)
+    ctx.p += 3;
+  if (ctx.s.charCodeAt(ctx.p) === 46)
+    while (isDigit(ctx.s.charCodeAt(++ctx.p)))
+      ;
+  let t = ctx.s.slice(start, ctx.p);
+  return readDate(ctx, t, 4, false, start);
+}
+function readDate(ctx, str, type, unsafeDelim, errPtr, temporalSuffix) {
+  if (ctx.ld) {
+    let date = new TomlDate(str, type, unsafeDelim);
+    if (!date.isValid())
+      TomlError.x("invalid date", ctx, errPtr);
+    return date;
+  }
+  try {
+    if (temporalSuffix)
+      str += temporalSuffix;
+    switch (type) {
+      case 1:
+        return Temporal.ZonedDateTime.from(str);
+      case 2:
+        return Temporal.PlainDateTime.from(str);
+      case 3:
+        return Temporal.PlainDate.from(str);
+      case 4:
+        return Temporal.PlainTime.from(str);
+    }
+  } catch (e2) {
+    TomlError.x(e2 instanceof Error ? e2.message : "" + e2, ctx, errPtr);
   }
-  return date;
 }
 
-// node_modules/smol-toml/dist/extract.js
+// node_modules/smol-toml/dist/util.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -42812,71 +42948,29 @@ function parseValue(value, toml, ptr, integersAsBigInt) {
  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
-function sliceAndTrimEndOf(str, startPtr, endPtr) {
-  let value = str.slice(startPtr, endPtr);
-  let commentIdx = value.indexOf("#");
-  if (commentIdx > -1) {
-    skipComment(str, commentIdx);
-    value = value.slice(0, commentIdx);
-  }
-  return [value.trimEnd(), commentIdx];
-}
-function extractValue(str, ptr, end, depth, integersAsBigInt) {
-  if (depth === 0) {
-    throw new TomlError("document contains excessively nested structures. aborting.", {
-      toml: str,
-      ptr
-    });
-  }
-  let c2 = str[ptr];
-  if (c2 === "[" || c2 === "{") {
-    let [value, endPtr2] = c2 === "[" ? parseArray(str, ptr, depth, integersAsBigInt) : parseInlineTable(str, ptr, depth, integersAsBigInt);
-    if (end) {
-      endPtr2 = skipVoid(str, endPtr2);
-      if (str[endPtr2] === ",")
-        endPtr2++;
-      else if (str[endPtr2] !== end) {
-        throw new TomlError("expected comma or end of structure", {
-          toml: str,
-          ptr: endPtr2
-        });
-      }
+function skipComment(ctx) {
+  for (;ctx.p < ctx.s.length; ctx.p++) {
+    let c2 = ctx.s.charCodeAt(ctx.p);
+    if (c2 === 10)
+      break;
+    if (c2 === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10) {
+      ctx.p++;
+      break;
     }
-    return [value, endPtr2];
-  }
-  let endPtr;
-  if (c2 === '"' || c2 === "'") {
-    endPtr = getStringEnd(str, ptr);
-    let parsed = parseString(str, ptr, endPtr);
-    if (end) {
-      endPtr = skipVoid(str, endPtr);
-      if (str[endPtr] && str[endPtr] !== "," && str[endPtr] !== end && str[endPtr] !== `
-` && str[endPtr] !== "\r") {
-        throw new TomlError("unexpected character encountered", {
-          toml: str,
-          ptr: endPtr
-        });
-      }
-      endPtr += +(str[endPtr] === ",");
+    if (c2 < 32 && c2 !== 9 || c2 === 127) {
+      TomlError.x("control characters are not allowed in comments", ctx);
     }
-    return [parsed, endPtr];
-  }
-  endPtr = skipUntil(str, ptr, ",", end);
-  let slice = sliceAndTrimEndOf(str, ptr, endPtr - +(str[endPtr - 1] === ","));
-  if (!slice[0]) {
-    throw new TomlError("incomplete key-value declaration: no value specified", {
-      toml: str,
-      ptr
-    });
   }
-  if (end && slice[1] > -1) {
-    endPtr = skipVoid(str, ptr + slice[1]);
-    endPtr += +(str[endPtr] === ",");
+}
+function skipVoid(ctx, banNewLines, banComments) {
+  let c2;
+  while (ctx.p < ctx.s.length) {
+    while (ctx.p < ctx.s.length && ((c2 = ctx.s.charCodeAt(ctx.p)) === 32 || c2 === 9 || !banNewLines && (c2 === 10 || c2 === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10)))
+      ctx.p++;
+    if (banComments || c2 !== 35)
+      break;
+    skipComment(ctx);
   }
-  return [
-    parseValue(slice[0], str, ptr, integersAsBigInt),
-    endPtr
-  ];
 }
 
 // node_modules/smol-toml/dist/struct.js
@@ -42907,153 +43001,112 @@ function extractValue(str, ptr, end, depth, integersAsBigInt) {
  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
-var KEY_PART_RE = /^[a-zA-Z0-9-_]+[ \t]*$/;
-function parseKey(str, ptr, end = "=") {
-  let dot = ptr - 1;
+function parseKey(ctx, end = 61) {
+  let startPtr;
+  let state = 0;
   let parsed = [];
-  let endPtr = str.indexOf(end, ptr);
-  if (endPtr < 0) {
-    throw new TomlError("incomplete key-value: cannot find end of key", {
-      toml: str,
-      ptr
-    });
-  }
+  let sliceStart;
+  let c2 = ctx.s.charCodeAt(startPtr = ctx.p);
   do {
-    let c2 = str[ptr = ++dot];
-    if (c2 !== " " && c2 !== "\t") {
-      if (c2 === '"' || c2 === "'") {
-        if (c2 === str[ptr + 1] && c2 === str[ptr + 2]) {
-          throw new TomlError("multiline strings are not allowed in keys", {
-            toml: str,
-            ptr
-          });
-        }
-        let eos = getStringEnd(str, ptr);
-        if (eos < 0) {
-          throw new TomlError("unfinished string encountered", {
-            toml: str,
-            ptr
-          });
-        }
-        dot = str.indexOf(".", eos);
-        let strEnd = str.slice(eos, dot < 0 || dot > endPtr ? endPtr : dot);
-        let newLine = indexOfNewline(strEnd);
-        if (newLine > -1) {
-          throw new TomlError("newlines are not allowed in keys", {
-            toml: str,
-            ptr: ptr + dot + newLine
-          });
-        }
-        if (strEnd.trimStart()) {
-          throw new TomlError("found extra tokens after the string part", {
-            toml: str,
-            ptr: eos
-          });
-        }
-        if (endPtr < eos) {
-          endPtr = str.indexOf(end, eos);
-          if (endPtr < 0) {
-            throw new TomlError("incomplete key-value: cannot find end of key", {
-              toml: str,
-              ptr
-            });
-          }
-        }
-        parsed.push(parseString(str, ptr, eos));
-      } else {
-        dot = str.indexOf(".", ptr);
-        let part = str.slice(ptr, dot < 0 || dot > endPtr ? endPtr : dot);
-        if (!KEY_PART_RE.test(part)) {
-          throw new TomlError("only letter, numbers, dashes and underscores are allowed in keys", {
-            toml: str,
-            ptr
-          });
-        }
-        parsed.push(part.trimEnd());
-      }
-    }
-  } while (dot + 1 && dot < endPtr);
-  return [parsed, skipVoid(str, endPtr + 1, true, true)];
-}
-function parseInlineTable(str, ptr, depth, integersAsBigInt) {
-  let res = {};
+    if (c2 === end) {
+      if (!state)
+        TomlError.x("unexpected end of key", ctx);
+      if (state === 1)
+        parsed.push(ctx.s.slice(sliceStart, ctx.p));
+      return ctx.p++, parsed;
+    } else if (c2 === 46) {
+      if (!state)
+        TomlError.x("illegal empty bare key", ctx);
+      if (state === 1)
+        parsed.push(ctx.s.slice(sliceStart, ctx.p));
+      state = 0;
+    } else if (!state && (c2 === 34 || c2 === 39)) {
+      if (c2 === ctx.s.charCodeAt(ctx.p + 1) && c2 === ctx.s.charCodeAt(ctx.p + 2))
+        TomlError.x("illegal quoted key: multiline strings are not allowed", ctx);
+      parsed.push(parseString(ctx));
+      state = 2;
+      ctx.p--;
+    } else if (c2 === 32 || c2 === 9) {
+      if (state === 1) {
+        parsed.push(ctx.s.slice(sliceStart, ctx.p));
+        state = 2;
+      }
+    } else if (state === 2 || c2 < 48 && c2 !== 45 || c2 > 57 && c2 < 65 || c2 > 90 && c2 < 97 && c2 !== 95 || c2 > 122) {
+      TomlError.x("illegal character in key", ctx);
+    } else if (!state) {
+      state = 1;
+      sliceStart = ctx.p;
+    }
+  } while (c2 = ctx.s.charCodeAt(++ctx.p));
+  TomlError.x("incomplete key-value: cannot find end of key", ctx, startPtr);
+}
+function parseInlineTable(ctx) {
+  let startPtr = ctx.p++;
+  let res = Object.create(null);
   let seen = new Set;
   let c2;
-  ptr++;
-  while ((c2 = str[ptr++]) !== "}" && c2) {
-    if (c2 === ",") {
-      throw new TomlError("expected value, found comma", {
-        toml: str,
-        ptr: ptr - 1
-      });
-    } else if (c2 === "#")
-      ptr = skipComment(str, ptr);
-    else if (c2 !== " " && c2 !== "\t" && c2 !== `
-` && c2 !== "\r") {
-      let k2;
-      let t = res;
-      let hasOwn = false;
-      let [key, keyEndPtr] = parseKey(str, ptr - 1);
-      for (let i = 0;i < key.length; i++) {
-        if (i)
-          t = hasOwn ? t[k2] : t[k2] = {};
-        k2 = key[i];
-        if ((hasOwn = Object.hasOwn(t, k2)) && (typeof t[k2] !== "object" || seen.has(t[k2]))) {
-          throw new TomlError("trying to redefine an already defined value", {
-            toml: str,
-            ptr
-          });
-        }
-        if (!hasOwn && k2 === "__proto__") {
-          Object.defineProperty(t, k2, { enumerable: true, configurable: true, writable: true });
-        }
+  while (ctx.p < ctx.s.length) {
+    skipVoid(ctx);
+    if ((c2 = ctx.s.charCodeAt(ctx.p)) === 125) {
+      ctx.p++;
+      return res;
+    }
+    let k2;
+    let t = res;
+    let hasOwn = false;
+    let errPtr = ctx.p;
+    let key = parseKey(ctx);
+    for (let i = 0;i < key.length; i++) {
+      if (i)
+        t = hasOwn ? t[k2] : t[k2] = Object.create(null);
+      k2 = key[i];
+      if ((hasOwn = Object.hasOwn(t, k2)) && (typeof t[k2] !== "object" || seen.has(t[k2]))) {
+        TomlError.x("trying to redefine an already defined value", ctx, errPtr);
+      }
+      let unsafe = k2 === "__proto__";
+      if (ctx.uk && (unsafe || k2 === "constructor")) {
+        t = ctx.uk !== 1 && TomlError.x("document contains an unsafe property", ctx, errPtr);
+        break;
       }
-      if (hasOwn) {
-        throw new TomlError("trying to redefine an already defined value", {
-          toml: str,
-          ptr
-        });
+      if (!hasOwn && unsafe) {
+        Object.defineProperty(t, k2, { enumerable: true, configurable: true, writable: true });
       }
-      let [value, valueEndPtr] = extractValue(str, keyEndPtr, "}", depth - 1, integersAsBigInt);
+    }
+    if (hasOwn) {
+      TomlError.x("trying to redefine an already defined value", ctx, errPtr);
+    }
+    skipVoid(ctx, true, true);
+    let value = extractValue(ctx, 125);
+    if (t && typeof (t[k2] = value) === "object")
       seen.add(value);
-      t[k2] = value;
-      ptr = valueEndPtr;
+    skipVoid(ctx);
+    if ((c2 = ctx.s.charCodeAt(ctx.p++)) === 125) {
+      return res;
     }
+    if (c2 !== 44)
+      TomlError.x("expected comma or end of structure", ctx, ctx.p - 1);
   }
-  if (!c2) {
-    throw new TomlError("unfinished table encountered", {
-      toml: str,
-      ptr
-    });
-  }
-  return [res, ptr];
+  TomlError.x("unfinished table", ctx, startPtr);
 }
-function parseArray(str, ptr, depth, integersAsBigInt) {
+function parseArray(ctx) {
+  let startPtr = ctx.p++;
   let res = [];
   let c2;
-  ptr++;
-  while ((c2 = str[ptr++]) !== "]" && c2) {
-    if (c2 === ",") {
-      throw new TomlError("expected value, found comma", {
-        toml: str,
-        ptr: ptr - 1
-      });
-    } else if (c2 === "#")
-      ptr = skipComment(str, ptr);
-    else if (c2 !== " " && c2 !== "\t" && c2 !== `
-` && c2 !== "\r") {
-      let e2 = extractValue(str, ptr - 1, "]", depth - 1, integersAsBigInt);
-      res.push(e2[0]);
-      ptr = e2[1];
+  while (ctx.p < ctx.s.length) {
+    skipVoid(ctx);
+    if ((c2 = ctx.s.charCodeAt(ctx.p)) === 93) {
+      ctx.p++;
+      return res;
     }
+    res.push(extractValue(ctx, 93));
+    skipVoid(ctx);
+    if ((c2 = ctx.s.charCodeAt(ctx.p++)) === 93) {
+      return res;
+    }
+    if (c2 !== 44)
+      TomlError.x("expected comma or end of structure", ctx, ctx.p - 1);
   }
-  if (!c2) {
-    throw new TomlError("unfinished array encountered", {
-      toml: str,
-      ptr
-    });
-  }
-  return [res, ptr];
+  TomlError.x("unfinished array", ctx, startPtr);
 }
 
 // node_modules/smol-toml/dist/parse.js
@@ -43084,7 +43137,7 @@ function parseArray(str, ptr, depth, integersAsBigInt) {
  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
-function peekTable(key, table, meta, type) {
+function peekTable(ctx, key, table, meta, type) {
   let t = table;
   let m2 = meta;
   let k2;
@@ -43092,7 +43145,7 @@ function peekTable(key, table, meta, type) {
   let state;
   for (let i = 0;i < key.length; i++) {
     if (i) {
-      t = hasOwn ? t[k2] : t[k2] = {};
+      t = hasOwn ? t[k2] : t[k2] = Object.create(null);
       m2 = (state = m2[k2]).c;
       if (type === 0 && (state.t === 1 || state.t === 2)) {
         return null;
@@ -43108,7 +43161,10 @@ function peekTable(key, table, meta, type) {
       return null;
     }
     if (!hasOwn) {
-      if (k2 === "__proto__") {
+      let unsafe = k2 === "__proto__";
+      if (ctx.uk && (unsafe || k2 === "constructor"))
+        return false;
+      if (unsafe) {
         Object.defineProperty(t, k2, { enumerable: true, configurable: true, writable: true });
         Object.defineProperty(m2, k2, { enumerable: true, configurable: true, writable: true });
       }
@@ -43116,7 +43172,7 @@ function peekTable(key, table, meta, type) {
         t: i < key.length - 1 && type === 2 ? 3 : type,
         d: false,
         i: 0,
-        c: {}
+        c: Object.create(null)
       };
     }
   }
@@ -43129,70 +43185,78 @@ function peekTable(key, table, meta, type) {
       state.d = true;
       t[k2] = [];
     }
-    t[k2].push(t = {});
-    state.c[state.i++] = state = { t: 1, d: false, i: 0, c: {} };
+    t[k2].push(t = Object.create(null));
+    state.c[state.i++] = state = { t: 1, d: false, i: 0, c: Object.create(null) };
   }
   if (state.d) {
     return null;
   }
   state.d = true;
   if (type === 1) {
-    t = hasOwn ? t[k2] : t[k2] = {};
+    t = hasOwn ? t[k2] : t[k2] = Object.create(null);
   } else if (type === 0 && hasOwn) {
     return null;
   }
   return [k2, t, state.c];
 }
-function parse(toml, { maxDepth = 1000, integersAsBigInt } = {}) {
-  let res = {};
-  let meta = {};
+function validateTablePeek(ctx, peek, ptr) {
+  if (peek === null || ctx.uk === 2)
+    TomlError.x(peek === null ? "trying to redefine an already defined table or value" : "document contains an unsafe property", ctx, ptr);
+}
+function parse(toml, options = {}) {
+  let ctx = {
+    s: toml,
+    p: 0,
+    d: options.maxDepth ?? 1000,
+    bi: options.integersAsBigInt ?? false,
+    ld: options.useLegacyDate ?? true,
+    uk: options.unsafeKeyBehaviour === "throw" ? 2 : options.unsafeKeyBehaviour === "drop" ? 1 : 0
+  };
+  let res = Object.create(null);
+  let meta = Object.create(null);
+  let tmp;
+  let skipping = false;
   let tbl = res;
   let m2 = meta;
-  for (let ptr = skipVoid(toml, 0);ptr < toml.length; ) {
-    if (toml[ptr] === "[") {
-      let isTableArray = toml[++ptr] === "[";
-      let k2 = parseKey(toml, ptr += +isTableArray, "]");
+  if (toml.charCodeAt(0) === 65279)
+    ctx.p++;
+  skipVoid(ctx);
+  while (ctx.p < toml.length) {
+    if (toml.charCodeAt(ctx.p) === 91) {
+      let isTableArray = toml.charCodeAt(++ctx.p) === 91;
+      tmp = ctx.p += +isTableArray;
+      skipping = false;
+      let k2 = parseKey(ctx, 93);
       if (isTableArray) {
-        if (toml[k2[1] - 1] !== "]") {
-          throw new TomlError("expected end of table declaration", {
-            toml,
-            ptr: k2[1] - 1
-          });
+        if (toml.charCodeAt(ctx.p) !== 93) {
+          TomlError.x("expected end of table array declaration", ctx);
         }
-        k2[1]++;
+        ctx.p++;
       }
-      let p = peekTable(k2[0], res, meta, isTableArray ? 2 : 1);
+      let p = peekTable(ctx, k2, res, meta, isTableArray ? 2 : 1);
       if (!p) {
-        throw new TomlError("trying to redefine an already defined table or value", {
-          toml,
-          ptr
-        });
+        validateTablePeek(ctx, p, tmp);
+        skipping = true;
+      } else {
+        m2 = p[2];
+        tbl = p[1];
       }
-      m2 = p[2];
-      tbl = p[1];
-      ptr = k2[1];
     } else {
-      let k2 = parseKey(toml, ptr);
-      let p = peekTable(k2[0], tbl, m2, 0);
-      if (!p) {
-        throw new TomlError("trying to redefine an already defined table or value", {
-          toml,
-          ptr
-        });
-      }
-      let v2 = extractValue(toml, k2[1], undefined, maxDepth, integersAsBigInt);
-      p[1][p[0]] = v2[0];
-      ptr = v2[1];
-    }
-    ptr = skipVoid(toml, ptr, true);
-    if (toml[ptr] && toml[ptr] !== `
-` && toml[ptr] !== "\r") {
-      throw new TomlError("each key-value declaration must be followed by an end-of-line", {
-        toml,
-        ptr
-      });
-    }
-    ptr = skipVoid(toml, ptr);
+      tmp = ctx.p;
+      let k2 = parseKey(ctx);
+      let p = peekTable(ctx, k2, tbl, m2, 0);
+      if (!p && !skipping)
+        validateTablePeek(ctx, p, tmp);
+      skipVoid(ctx, true, true);
+      let v2 = extractValue(ctx, undefined);
+      if (p && !skipping)
+        p[1][p[0]] = v2;
+    }
+    skipVoid(ctx, true);
+    if (ctx.p < toml.length && (tmp = toml.charCodeAt(ctx.p)) !== 10 && (tmp !== 13 || toml.charCodeAt(ctx.p + 1) !== 10)) {
+      TomlError.x("each key-value declaration must be followed by an end-of-line", ctx);
+    }
+    skipVoid(ctx);
   }
   return res;
 }
@@ -43226,13 +43290,28 @@ function parse(toml, { maxDepth = 1000, integersAsBigInt } = {}) {
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 var BARE_KEY = /^[a-z0-9-_]+$/i;
+var HAS_WELLFORMED = !!"".isWellFormed;
 function extendedTypeOf(obj) {
   let type = typeof obj;
   if (type === "object") {
     if (Array.isArray(obj))
       return "array";
-    if (obj instanceof Date)
+    if (typeof obj.getUTCDate === "function" && obj instanceof Date)
       return "date";
+    if (globalThis.Temporal) {
+      if (obj.until) {
+        if (obj instanceof Temporal.ZonedDateTime)
+          return "temporal/tz+uc";
+        if (obj instanceof Temporal.PlainDateTime || obj instanceof Temporal.PlainDate)
+          return "temporal/uc";
+        if (obj instanceof Temporal.PlainTime || obj instanceof Temporal.Instant)
+          return "temporal";
+        if (obj instanceof Temporal.PlainYearMonth)
+          return "temporal/x";
+      } else if (obj.toPlainDate && obj instanceof Temporal.PlainMonthDay || obj.negated && obj instanceof Temporal.Duration) {
+        return "temporal/x";
+      }
+    }
   }
   return type;
 }
@@ -43243,44 +43322,67 @@ function isArrayOfTables(obj) {
   }
   return obj.length != 0;
 }
+function formatWellFormedStringUnchecked(s) {
+  return JSON.stringify(s).replaceAll("", "\\u007f");
+}
 function formatString(s) {
-  return JSON.stringify(s).replace(/\x7f/g, "\\u007f");
+  return formatWellFormedStringUnchecked(HAS_WELLFORMED ? s.toWellFormed() : s);
 }
-function stringifyValue(val, type, depth, numberAsFloat) {
+function formatKey(s) {
+  if (BARE_KEY.test(s))
+    return s;
+  if (HAS_WELLFORMED && !s.isWellFormed())
+    throw new RangeError("key contains illegal lone surrogates");
+  return formatWellFormedStringUnchecked(s);
+}
+function stringifyValue(val, type, depth, numberAsFloat, strictTemporal) {
   if (depth === 0) {
     throw new Error("Could not stringify the object: maximum object depth exceeded");
   }
-  if (type === "number") {
-    if (isNaN(val))
-      return "nan";
-    if (val === Infinity)
-      return "inf";
-    if (val === -Infinity)
-      return "-inf";
-    if (numberAsFloat && Number.isInteger(val))
-      return val.toFixed(1);
-    return val.toString();
-  }
-  if (type === "bigint" || type === "boolean") {
-    return val.toString();
-  }
-  if (type === "string") {
-    return formatString(val);
-  }
-  if (type === "date") {
-    if (isNaN(val.getTime())) {
-      throw new TypeError("cannot serialize invalid date");
-    }
-    return val.toISOString();
-  }
-  if (type === "object") {
-    return stringifyInlineTable(val, depth, numberAsFloat);
-  }
-  if (type === "array") {
-    return stringifyArray(val, depth, numberAsFloat);
+  switch (type) {
+    case "number":
+      if (isNaN(val))
+        return "nan";
+      if (val === Infinity)
+        return "inf";
+      if (val === -Infinity)
+        return "-inf";
+      if (Number.isInteger(val) && (numberAsFloat || !Number.isSafeInteger(val)))
+        return val.toFixed(1);
+    case "bigint":
+    case "boolean":
+    case "temporal":
+      return val.toString();
+    case "string":
+      return formatString(val);
+    case "date":
+      if (isNaN(val.getTime()))
+        throw new TypeError("cannot serialize invalid date");
+      return val.toISOString();
+    case "object":
+      return stringifyInlineTable(val, depth, numberAsFloat, strictTemporal);
+    case "array":
+      return stringifyArray(val, depth, numberAsFloat, strictTemporal);
+    case "temporal/tz+uc":
+      if (strictTemporal) {
+        let tz = val.timeZoneId;
+        let tzc = tz.charCodeAt(0);
+        if (tzc !== 43 && tzc !== 45 && (tzc !== 85 && tzc !== 71 && tzc !== 90 && tzc !== 69 || tz !== "UTC" && tz !== "UCT" && tz !== "Universal" && tz !== "Zulu" && !tz.startsWith("GMT") && tz !== "Greenwich" && !tz.startsWith("Etc/"))) {
+          throw new TypeError("Temporal objects with an IANA timezone are not allowed in Temporal strict mode");
+        }
+      }
+    case "temporal/uc":
+      if (strictTemporal && val.calendarId !== "iso8601")
+        throw new TypeError("Temporal objects with a non-default calendar are not allowed in Temporal strict mode");
+      return val.toString({
+        calendarName: "never",
+        timeZoneName: "never"
+      });
+    case "temporal/x":
+      throw new TypeError("Unsupported " + val[Symbol.toStringTag]);
   }
 }
-function stringifyInlineTable(obj, depth, numberAsFloat) {
+function stringifyInlineTable(obj, depth, numberAsFloat, strictTemporal) {
   let keys = Object.keys(obj);
   if (keys.length === 0)
     return "{}";
@@ -43289,13 +43391,11 @@ function stringifyInlineTable(obj, depth, numberAsFloat) {
     let k2 = keys[i];
     if (i)
       res += ", ";
-    res += BARE_KEY.test(k2) ? k2 : formatString(k2);
-    res += " = ";
-    res += stringifyValue(obj[k2], extendedTypeOf(obj[k2]), depth - 1, numberAsFloat);
+    res += formatKey(k2) + " = " + stringifyValue(obj[k2], extendedTypeOf(obj[k2]), depth - 1, numberAsFloat, strictTemporal);
   }
   return res + " }";
 }
-function stringifyArray(array, depth, numberAsFloat) {
+function stringifyArray(array, depth, numberAsFloat, strictTemporal) {
   if (array.length === 0)
     return "[]";
   let res = "[ ";
@@ -43305,11 +43405,11 @@ function stringifyArray(array, depth, numberAsFloat) {
     if (array[i] === null || array[i] === undefined) {
       throw new TypeError("arrays cannot contain null or undefined values");
     }
-    res += stringifyValue(array[i], extendedTypeOf(array[i]), depth - 1, numberAsFloat);
+    res += stringifyValue(array[i], extendedTypeOf(array[i]), depth - 1, numberAsFloat, strictTemporal);
   }
   return res + " ]";
 }
-function stringifyArrayTable(array, key, depth, numberAsFloat) {
+function stringifyArrayTable(array, key, depth, numberAsFloat, strictTemporal) {
   if (depth === 0) {
     throw new Error("Could not stringify the object: maximum object depth exceeded");
   }
@@ -43318,11 +43418,11 @@ function stringifyArrayTable(array, key, depth, numberAsFloat) {
     res += `${res && `
 `}[[${key}]]
 `;
-    res += stringifyTable(0, array[i], key, depth, numberAsFloat);
+    res += stringifyTable(0, array[i], key, depth, numberAsFloat, strictTemporal);
   }
   return res;
 }
-function stringifyTable(tableKey, obj, prefix, depth, numberAsFloat) {
+function stringifyTable(tableKey, obj, prefix, depth, numberAsFloat, strictTemporal) {
   if (depth === 0) {
     throw new Error("Could not stringify the object: maximum object depth exceeded");
   }
@@ -43336,18 +43436,18 @@ function stringifyTable(tableKey, obj, prefix, depth, numberAsFloat) {
       if (type === "symbol" || type === "function") {
         throw new TypeError(`cannot serialize values of type '${type}'`);
       }
-      let key = BARE_KEY.test(k2) ? k2 : formatString(k2);
+      let key = formatKey(k2);
       if (type === "array" && isArrayOfTables(obj[k2])) {
         tables += (tables && `
-`) + stringifyArrayTable(obj[k2], prefix ? `${prefix}.${key}` : key, depth - 1, numberAsFloat);
+`) + stringifyArrayTable(obj[k2], prefix ? `${prefix}.${key}` : key, depth - 1, numberAsFloat, strictTemporal);
       } else if (type === "object") {
         let tblKey = prefix ? `${prefix}.${key}` : key;
         tables += (tables && `
-`) + stringifyTable(tblKey, obj[k2], tblKey, depth - 1, numberAsFloat);
+`) + stringifyTable(tblKey, obj[k2], tblKey, depth - 1, numberAsFloat, strictTemporal);
       } else {
         preamble += key;
         preamble += " = ";
-        preamble += stringifyValue(obj[k2], type, depth, numberAsFloat);
+        preamble += stringifyValue(obj[k2], type, depth, numberAsFloat, strictTemporal);
         preamble += `
 `;
       }
@@ -43359,11 +43459,11 @@ ${preamble}` : `[${tableKey}]`;
   return preamble && tables ? `${preamble}
 ${tables}` : preamble || tables;
 }
-function stringify(obj, { maxDepth = 1000, numbersAsFloat = false } = {}) {
+function stringify(obj, { maxDepth = 1000, numbersAsFloat = false, strictTemporal = false } = {}) {
   if (extendedTypeOf(obj) !== "object") {
     throw new TypeError("stringify can only be called with an object");
   }
-  let str = stringifyTable(0, obj, "", maxDepth, numbersAsFloat);
+  let str = stringifyTable(0, obj, "", maxDepth, numbersAsFloat, strictTemporal);
   if (str[str.length - 1] !== `
 `)
     return str + `
@@ -64130,6 +64230,20 @@ async function attachToExistingAgent(cwd2, agentId, args, existing) {
     handleApiError(err);
     process.exit(1);
   }
+  const link2 = await bindFetchedAgent(cwd2, agent, args, existing);
+  $e(`Linked to ${import_picocolors22.default.bold(agent.name)}.`);
+  await printLinkCard(link2);
+}
+async function linkFetchedAgent(cwd2, agentId, agent, args) {
+  const existing = readLink(cwd2);
+  if (existing && existing.agent_id === agentId) {
+    f2.info(`Already linked to ${import_picocolors22.default.bold(existing.name)} (${existing.slug}).`);
+    return;
+  }
+  await bindFetchedAgent(cwd2, agent, args, existing);
+  f2.success(`Linked to ${import_picocolors22.default.bold(agent.name)}.`);
+}
+async function bindFetchedAgent(cwd2, agent, args, existing) {
   const harness = normalizeHarnessId(agent.harness ?? "claude-code");
   if (!agent.harness) {
     f2.warn(`Agent does not have a harness set on the cloud. Defaulting to ${import_picocolors22.default.bold("claude-code")}.`);
@@ -64201,8 +64315,7 @@ async function attachToExistingAgent(cwd2, agentId, args, existing) {
     tracking
   };
   writeLink(cwd2, link2);
-  $e(`Linked to ${import_picocolors22.default.bold(agent.name)}.`);
-  await printLinkCard(link2);
+  return link2;
 }
 async function tearDownTracking(cwd2, link2) {
   if (!link2.tracking)
@@ -66175,23 +66288,28 @@ async function runAgentPull(cwd2, args) {
   if (!resolution)
     return;
   const { agentId, override } = resolution;
+  let { existingManifest, lock, localComponents } = readLocalPullState(cwd2, override);
   const sp = de();
   sp.start("Fetching agent…");
+  const agentRequest = inFlight(api.getAgent(agentId));
+  const manifestRequest = inFlight(api.getAgentManifest(agentId));
+  const secretsRequest = pullReachesSecrets(args, existingManifest, lock, localComponents) ? inFlight(api.getAgentSecrets(agentId)) : undefined;
   let cloudAgent;
   let cloud;
   try {
-    cloudAgent = await api.getAgent(agentId);
-    cloud = await api.getAgentManifest(agentId);
+    cloudAgent = await agentRequest;
+    cloud = await manifestRequest;
     sp.stop(`Cloud revision ${cloud.revision}.`);
   } catch (err) {
     sp.stop("Failed.");
     handleApiError2(err);
     return;
   }
+  if (args.link) {
+    await linkFetchedAgent(cwd2, agentId, cloudAgent, { noTracking: args.noTracking });
+    ({ existingManifest, lock, localComponents } = readLocalPullState(cwd2, override));
+  }
   const harness = normalizeHarnessId(cloudAgent.harness ?? "claude-code");
-  const existingManifest = !override && hasManifest(cwd2) ? safeReadManifest(cwd2) : null;
-  const lock = override ? null : readSyncState(cwd2);
-  const localComponents = existingManifest ? readLocalComponents(cwd2, existingManifest) : [];
   const rows = threeWayDiff({
     local: localComponents,
     lock: lock?.components ?? [],
@@ -66345,7 +66463,7 @@ async function runAgentPull(cwd2, args) {
   const skippedMcpSlugs = new Set;
   const justInstalledFingerprints = new Map;
   try {
-    const availableSecrets = await pullSecrets(cwd2, agentId);
+    const availableSecrets = await pullSecrets(cwd2, agentId, secretsRequest);
     if (installComponents.length > 0 || builtinInstall.length > 0) {
       const installSpinner = de();
       installSpinner.start("Applying updates…");
@@ -66516,6 +66634,19 @@ function resolveTargetAgentId(cwd2, args) {
   }
   return null;
 }
+function readLocalPullState(cwd2, override) {
+  const existingManifest = !override && hasManifest(cwd2) ? safeReadManifest(cwd2) : null;
+  const lock = override ? null : readSyncState(cwd2);
+  const localComponents = existingManifest ? readLocalComponents(cwd2, existingManifest) : [];
+  return { existingManifest, lock, localComponents };
+}
+function pullReachesSecrets(args, existingManifest, lock, localComponents) {
+  return autoProceed(args.yes) && lock === null && localComponents.length === 0 && existingManifest?.machine_kind === undefined && existingManifest?.default_model === undefined;
+}
+function inFlight(request2) {
+  request2.catch(() => {});
+  return request2;
+}
 function safeReadManifest(cwd2) {
   try {
     return readManifest(cwd2);
@@ -66835,13 +66966,13 @@ async function runEntrypointIfPresent(cwd2, manifest, execute) {
     f2.warn(`Entrypoint exited ${exitCode} — continuing. Log at ${import_picocolors26.default.dim(path88.relative(cwd2, logPath))}.`);
   }
 }
-async function pullSecrets(cwd2, agentId) {
+async function pullSecrets(cwd2, agentId, prefetched) {
   const localSecrets = readLocalSecrets(cwd2);
   let cloudSecrets;
   const sp = de();
   sp.start("Fetching secrets…");
   try {
-    const res = await api.getAgentSecrets(agentId);
+    const res = await (prefetched ?? api.getAgentSecrets(agentId));
     cloudSecrets = res.secrets;
     sp.stop(Object.keys(cloudSecrets).length === 0 ? "No secrets on cloud." : `Got ${Object.keys(cloudSecrets).length} secret${Object.keys(cloudSecrets).length === 1 ? "" : "s"}.`);
   } catch (err) {
@@ -69708,7 +69839,9 @@ async function runAgent(cwd2, sub, args, opts) {
         agentIdArg: args[0],
         force: opts.force,
         runEntrypoint: opts.runEntrypoint,
-        acp: opts.acp
+        acp: opts.acp,
+        link: opts.link,
+        noTracking: opts.noTracking
       });
       return;
     case "push":
@@ -69774,7 +69907,7 @@ function printHelp() {
   out.push(`  ${import_picocolors39.default.cyan("list")}               ${import_picocolors39.default.dim("show the agents in a team, with the ids `brainbase link` takes (--json for scripts)")}`);
   out.push(`  ${import_picocolors39.default.cyan("init")}               ${import_picocolors39.default.dim("write a starter brainbase.agent.yaml here — offline, no login (--full for a commented template, --force to overwrite)")}`);
   out.push(`  ${import_picocolors39.default.cyan("create")}             ${import_picocolors39.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent (scaffolds one if the folder has none)")}`);
-  out.push(`  ${import_picocolors39.default.cyan("pull")} ${import_picocolors39.default.dim("[<id>]")}      ${import_picocolors39.default.dim("apply cloud changes into this folder — pass <id> to switch (--force to override); --run-entrypoint to also execute the agent entrypoint")}`);
+  out.push(`  ${import_picocolors39.default.cyan("pull")} ${import_picocolors39.default.dim("[<id>]")}      ${import_picocolors39.default.dim("apply cloud changes into this folder — pass <id> to switch (--force to override); --run-entrypoint to also execute the agent entrypoint; --link to first link this folder like `brainbase link --agent <id> --yes` (--no-tracking applies)")}`);
   out.push(`  ${import_picocolors39.default.cyan("push")}               ${import_picocolors39.default.dim("send local changes to the cloud — instructions, playbooks, skills, MCPs, evals, entrypoint (--force to overwrite cloud-side conflicts with local)")}`);
   out.push(`  ${import_picocolors39.default.cyan("unpack")}             ${import_picocolors39.default.dim("install the claimed agent into a harness layout (--harness to override)")}`);
   out.push(`  ${import_picocolors39.default.cyan("status")}             ${import_picocolors39.default.dim("show what would push, what would pull, and which manifest blocks are ignored (--json for scripts)")}`);
@@ -90444,7 +90577,7 @@ function help() {
   out.push("");
   out.push(`  ${import_picocolors61.default.cyan("agent init")}                 ${import_picocolors61.default.dim("write a starter brainbase.agent.yaml here — offline, no login needed")}`);
   out.push(`  ${import_picocolors61.default.cyan("agent create")}               ${import_picocolors61.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent")}`);
-  out.push(`  ${import_picocolors61.default.cyan("agent pull")} ${import_picocolors61.default.dim("[<id>]")}          ${import_picocolors61.default.dim("bring cloud changes into this folder (--force to override; --run-entrypoint to also execute the agent entrypoint)")}`);
+  out.push(`  ${import_picocolors61.default.cyan("agent pull")} ${import_picocolors61.default.dim("[<id>]")}          ${import_picocolors61.default.dim("bring cloud changes into this folder (--force to override; --run-entrypoint to also execute the agent entrypoint; --link to link first)")}`);
   out.push(`  ${import_picocolors61.default.cyan("agent push")}                 ${import_picocolors61.default.dim("send local changes to the cloud (--force to overwrite cloud-side conflicts with local)")}`);
   out.push(`  ${import_picocolors61.default.cyan("agent unpack")}               ${import_picocolors61.default.dim("install the claimed agent into a harness layout")}`);
   out.push(`  ${import_picocolors61.default.cyan("link")}                       ${import_picocolors61.default.dim("attach this folder to an existing agent")}`);
@@ -90542,7 +90675,8 @@ function help() {
   out.push(`  ${import_picocolors61.default.dim("--org <id-or-slug>")} pick the organization (team/agent list, agent create, orchestration create/list)`);
   out.push(`  ${import_picocolors61.default.dim("--team <id>")}        pick the team, same commands (works without --org)`);
   out.push(`  ${import_picocolors61.default.dim("--json")}             machine-readable output for supported commands`);
-  out.push(`  ${import_picocolors61.default.dim("--no-tracking")}      for link: skip routing LLM traffic through brainbase`);
+  out.push(`  ${import_picocolors61.default.dim("--no-tracking")}      for link / agent pull --link: skip routing LLM traffic through brainbase`);
+  out.push(`  ${import_picocolors61.default.dim("--link")}             for agent pull: link this folder to the agent first, as \`brainbase link --agent <id> --yes\` would, in one process`);
   out.push(`  ${import_picocolors61.default.dim("--track")}            for agent create: enable tracking non-interactively (off without a TTY)`);
   out.push(`  ${import_picocolors61.default.dim("--shell <sh|fish>")}  for agent env: pick output format (auto-detected from $SHELL)`);
   out.push(`  ${import_picocolors61.default.dim("--bot-token <t>")}    for agent connect slack (or BRAINBASE_SLACK_BOT_TOKEN, or stdin)`);
@@ -90800,6 +90934,7 @@ async function main() {
   const noPushFlag = hasFlag2(sharedArgs, "--no-push");
   const jsonFlag = hasFlag2(sharedArgs, "--json");
   const acpFlag = hasFlag2(sharedArgs, "--acp");
+  const linkFlag = hasFlag2(sharedArgs, "--link");
   const botTokenFlag = getFlag(sharedArgs, "--bot-token");
   const signingSecretFlag = getFlag(sharedArgs, "--signing-secret");
   const appIdFlag = getFlag(sharedArgs, "--app-id");
@@ -90897,6 +91032,7 @@ async function main() {
           force: forceFlag,
           runEntrypoint: runEntrypointFlag,
           acp: acpFlag,
+          link: linkFlag,
           botToken: botTokenFlag,
           signingSecret: signingSecretFlag,
           appId: appIdFlag,