@brainbase-labs/cli 0.42.0 → 0.43.0

package/dist/index.js

@@ -35182,7 +35182,7 @@ var require_dist2 = __commonJS((exports, module) => {
 });
 
 // src/index.ts
-var import_picocolors69 = __toESM(require_picocolors(), 1);
+var import_picocolors71 = __toESM(require_picocolors(), 1);
 import process14 from "node:process";
 import fs91 from "node:fs";
 
@@ -36059,7 +36059,7 @@ function padStart(s, n) {
 // package.json
 var package_default = {
   name: "@brainbase-labs/cli",
-  version: "0.42.0",
+  version: "0.43.0",
   description: "Pack, share, and install agent templates across harnesses (Claude Code, Codex, ...).",
   type: "module",
   bin: {
@@ -55614,6 +55614,12 @@ var api = {
   listOrgs() {
     return request("/orgs");
   },
+  listOrgMembersPage(orgId, cursor2) {
+    const query = new URLSearchParams({ limit: "200" });
+    if (cursor2)
+      query.set("cursor", cursor2);
+    return request(`/orgs/${encodeURIComponent(orgId)}/members?${query.toString()}`);
+  },
   listTeams(orgId) {
     return request(`/orgs/${encodeURIComponent(orgId)}/teams`);
   },
@@ -82128,7 +82134,7 @@ var REASON_HINTS = {
   build_already_live: "That build is already live.",
   nothing_live: "Nothing is live yet, so there is nothing to roll back from.",
   release_already_live: "That release is already live.",
-  audience_empty: "Nobody can open it yet. Set the audience with `brainbase interface access <id> --everyone` or `--people <ids>`.",
+  audience_empty: "Nobody can open it yet. Set the audience with `brainbase interface access <id> --everyone` or `--people <emails>`.",
   slug_unavailable: "Pick another address."
 };
 function usesPat() {
@@ -82356,6 +82362,14 @@ var interfacesApi = {
   },
   getOperation(operationId, signal) {
     return read(`/operations/${encodeURIComponent(operationId)}`, signal);
+  },
+  startPreview(taskId, interfaceId) {
+    return write(`/tasks/${encodeURIComponent(taskId)}/interface-preview`, "POST", {
+      interface_id: interfaceId
+    });
+  },
+  probePreview(machineId, port, signal) {
+    return read(`/machines/${encodeURIComponent(machineId)}/preview/probe?port=${encodeURIComponent(String(port))}`, signal);
   }
 };
 function isTransientReadError(error2) {
@@ -84004,7 +84018,7 @@ function printHelp5() {
 }
 
 // src/cli/interface.ts
-var import_picocolors67 = __toESM(require_picocolors(), 1);
+var import_picocolors68 = __toESM(require_picocolors(), 1);
 
 // src/cli/interface-build.ts
 var import_picocolors63 = __toESM(require_picocolors(), 1);
@@ -84449,6 +84463,57 @@ var buildCommands = { build };
 // src/cli/interface-lifecycle.ts
 var import_picocolors65 = __toESM(require_picocolors(), 1);
 
+// src/core/org-members.ts
+async function listAllOrgMembers(orgId) {
+  const members = [];
+  let cursor2;
+  for (;; ) {
+    let page;
+    try {
+      page = await api.listOrgMembersPage(orgId, cursor2);
+    } catch (error2) {
+      if (error2 instanceof ApiError && error2.status === 404) {
+        throw new Error("This Brainbase server cannot list organization members, so people can only be named by user id.");
+      }
+      throw error2;
+    }
+    members.push(...page.members);
+    if (!page.next_cursor)
+      return members;
+    if (page.next_cursor === cursor2) {
+      throw new Error("Could not read the member list: the page cursor stopped advancing.");
+    }
+    cursor2 = page.next_cursor;
+  }
+}
+function isEmail(entry) {
+  return entry.includes("@");
+}
+function resolveEmails(entries, members, flag) {
+  const ids = entries.map((entry) => {
+    if (!isEmail(entry))
+      return entry;
+    const wanted = entry.toLowerCase();
+    const matches2 = members.filter((member) => member.email?.toLowerCase() === wanted);
+    if (matches2.length === 1)
+      return matches2[0].id;
+    if (matches2.length === 0) {
+      throw new Error(`${flag}: nobody you can see in this organization has the email ${entry}. ` + "`brainbase member ls` lists the people you can share with.");
+    }
+    throw new Error(`${flag}: more than one member has the email ${entry} (${matches2.map((m3) => m3.id).join(", ")}). Pass the user id instead.`);
+  });
+  return [...new Set(ids)];
+}
+function personLabel(id, members) {
+  const member = members?.get(id);
+  if (!member?.email)
+    return id;
+  return member.name ? `${member.email} (${member.name})` : member.email;
+}
+function membersById(members) {
+  return new Map(members.map((member) => [member.id, member]));
+}
+
 // src/cli/interface-read.ts
 var import_picocolors64 = __toESM(require_picocolors(), 1);
 function interfaceState(row) {
@@ -84639,7 +84704,7 @@ function sessionUserId() {
 function parseIds(raw, flag) {
   const ids = [...new Set(raw.split(",").map((id) => id.trim()).filter(Boolean))];
   if (ids.length === 0)
-    throw new Error(`${flag} takes user ids separated by commas, or \`me\`.`);
+    throw new Error(`${flag} takes emails or user ids separated by commas, or \`me\`.`);
   return ids;
 }
 function withMe(ids, self) {
@@ -84657,6 +84722,30 @@ function resolveMeForAccess(ids, flag) {
 function grantIds(access) {
   return access.grants.map((grant) => grant.subject_id);
 }
+async function resolvePeople(entries, orgId, flag) {
+  if (!entries.some(isEmail))
+    return { ids: entries, members: null };
+  const members = await listAllOrgMembers(await orgId());
+  return { ids: resolveEmails(entries, members, flag), members: membersById(members) };
+}
+async function membersForDisplay(orgId, known) {
+  if (known)
+    return known;
+  try {
+    return membersById(await listAllOrgMembers(orgId));
+  } catch {
+    return null;
+  }
+}
+function peopleJson(access, members) {
+  return grantIds(access).map((id) => {
+    const member = members?.get(id);
+    return { id, email: member?.email ?? null, name: member?.name ?? null };
+  });
+}
+function namesOf(ids, members) {
+  return ids.map((id) => safe(personLabel(id, members))).join(", ");
+}
 function exactlyOne(parsed, flags) {
   const given = flags.filter(([key2]) => parsed.options[key2] !== undefined && parsed.options[key2] !== false);
   if (given.length > 1) {
@@ -84664,15 +84753,15 @@ function exactlyOne(parsed, flags) {
   }
   return given[0]?.[0] ?? null;
 }
-function peopleLine(access) {
+function peopleLine(access, members) {
   const ids = grantIds(access);
-  return ids.length ? ids.map(safe).join(", ") : import_picocolors65.default.dim("nobody named");
+  return ids.length ? namesOf(ids, members) : import_picocolors65.default.dim("nobody named");
 }
-function printAccess(row, access) {
+function printAccess(row, access, members) {
   console.log([
     "",
     field("audience", audienceLabel(access)),
-    field("people", peopleLine(access)),
+    field("people", peopleLine(access, members)),
     field("threads", threadsLabel(row.share_agent_threads)),
     ""
   ].join(`
@@ -84706,6 +84795,12 @@ async function create3(ctx) {
     const self = sessionUserId();
     if (audience && self)
       audience.ids = withMe(audience.ids, self);
+    let members = null;
+    if (audience) {
+      const resolved = await resolvePeople(audience.ids, async () => (await api.getAgent(agentId)).org_id, "--people");
+      audience.ids = resolved.ids;
+      members = resolved.members;
+    }
     const replayKey = stringOption(parsed, "idempotencyKey")?.trim();
     const created = await interfacesApi.create({ agentId, name, slug: stringOption(parsed, "address")?.trim() || undefined }, { idempotencyKey: replayKey || newIdempotencyKey() });
     let access = null;
@@ -84739,10 +84834,13 @@ async function create3(ctx) {
         accessError = error2;
       }
     }
+    if (access?.audience_mode === "users")
+      members = await membersForDisplay(created.team_id, members);
     if (json) {
       printJson({
         interface: created,
         access,
+        ...access ? { people: peopleJson(access, members) } : {},
         ...note ? { note } : {},
         ...accessError ? { error: errorShape(accessError) } : {}
       });
@@ -84763,10 +84861,10 @@ async function create3(ctx) {
     if (access) {
       out.push(field("audience", audienceLabel(access)));
       if (access.audience_mode === "users")
-        out.push(field("people", peopleLine(access)));
+        out.push(field("people", peopleLine(access, members)));
     }
     if (!audience) {
-      out.push("", `  Nobody can open it until you choose who can: \`brainbase interface access ${id} --everyone\` or \`--people <ids>\`.`);
+      out.push("", `  Nobody can open it until you choose who can: \`brainbase interface access ${id} --everyone\` or \`--people <emails>\`.`);
     }
     if (created.share_agent_threads) {
       out.push(`  ${import_picocolors65.default.dim(`To show viewers only their own conversations: \`brainbase interface threads ${id} --private\`.`)}`);
@@ -84781,7 +84879,7 @@ async function create3(ctx) {
     } else if (accessError && isUnanswered(accessError)) {
       fail(`Created ${id}, but the answer to setting who can open it was lost, so whether it was saved could not be confirmed. ` + `Check with \`brainbase interface access ${id}\`.`);
     } else if (accessError) {
-      fail(`Created ${id}, but setting who can open it failed, so nobody can open it yet: ${safe(errorShape(accessError).message)} ` + `Set it with \`brainbase interface access ${id} --everyone\` or \`--people <ids>\`.`);
+      fail(`Created ${id}, but setting who can open it failed, so nobody can open it yet: ${safe(errorShape(accessError).message)} ` + `Set it with \`brainbase interface access ${id} --everyone\` or \`--people <emails>\`.`);
     }
   });
 }
@@ -84800,27 +84898,36 @@ async function access(ctx) {
       { key: "remove", names: ["--remove"], kind: "value" }
     ]);
     json = booleanOption(parsed, "json");
-    const [id] = expectPositionals(parsed, ["id"], "brainbase interface access <id> [--everyone | --people <ids> | --add <ids> | --remove <ids>]");
+    const [id] = expectPositionals(parsed, ["id"], "brainbase interface access <id> [--everyone | --people <emails> | --add <emails> | --remove <emails>]");
     const change = exactlyOne(parsed, [
       ["everyone", "--everyone"],
       ["people", "--people"],
       ["add", "--add"],
       ["remove", "--remove"]
     ]);
-    const ids = change && change !== "everyone" ? resolveMeForAccess(parseIds(stringOption(parsed, change) ?? "", `--${change}`), `--${change}`) : [];
+    const entries = change && change !== "everyone" ? resolveMeForAccess(parseIds(stringOption(parsed, change) ?? "", `--${change}`), `--${change}`) : [];
     if (!change) {
       const [row2, current2] = await Promise.all([interfacesApi.get(id), interfacesApi.getAccess(id)]);
+      const members2 = current2.grants.length ? await membersForDisplay(row2.team_id, null) : null;
       if (json) {
-        printJson({ id: row2.id, ...current2, share_agent_threads: row2.share_agent_threads });
+        printJson({
+          id: row2.id,
+          ...current2,
+          people: peopleJson(current2, members2),
+          share_agent_threads: row2.share_agent_threads
+        });
         return;
       }
-      printAccess(row2, current2);
+      printAccess(row2, current2, members2);
       return;
     }
     const [row, current] = await Promise.all([
       interfacesApi.get(id),
       change === "add" || change === "remove" ? interfacesApi.getAccess(id) : null
     ]);
+    const resolved = await resolvePeople(entries, async () => row.team_id, `--${change}`);
+    const ids = resolved.ids;
+    let members = resolved.members;
     const label = safe(row.name);
     let summary;
     switch (change) {
@@ -84828,13 +84935,13 @@ async function access(ctx) {
         summary = `Everyone in the organisation will be able to open ${label}.`;
         break;
       case "people":
-        summary = `Only these people will be able to open ${label}: ${ids.map(safe).join(", ")}.`;
+        summary = `Only these people will be able to open ${label}: ${namesOf(ids, members)}.`;
         break;
       case "add":
-        summary = `${ids.map(safe).join(", ")} will be able to open ${label}.`;
+        summary = `${namesOf(ids, members)} will be able to open ${label}.`;
         break;
       case "remove":
-        summary = `${ids.map(safe).join(", ")} will no longer be able to open ${label}.`;
+        summary = `${namesOf(ids, members)} will no longer be able to open ${label}.`;
         break;
       default: {
         const unreachable = change;
@@ -84869,11 +84976,13 @@ async function access(ctx) {
         saved = await interfacesApi.setAccess(id, "users", fresh.filter((subject) => !ids.includes(subject)));
       }
     }
+    if (saved.grants.length)
+      members = await membersForDisplay(row.team_id, members);
     if (json) {
-      printJson(saved);
+      printJson({ ...saved, people: peopleJson(saved, members) });
       return;
     }
-    printAccess(row, saved);
+    printAccess(row, saved, members);
   });
 }
 async function threads(ctx) {
@@ -85064,14 +85173,145 @@ var lifecycleCommands = {
   unarchive
 };
 
-// src/cli/interface-release.ts
+// src/cli/interface-preview.ts
 var import_picocolors66 = __toESM(require_picocolors(), 1);
+function warn(line) {
+  console.error(import_picocolors66.default.yellow(line));
+}
+var PREVIEW_TIMEOUT_SECONDS = 300;
+var PROBE_INTERVAL_MS = 2000;
+async function pickConversation(row, named) {
+  if (named)
+    return { taskId: named, why: "the conversation you named" };
+  const running = row.running_generation?.thread_id;
+  if (running)
+    return { taskId: running, why: "the build conversation running now" };
+  const tasks = await masApi.listTasks({ metadata: { [INTERFACE_THREAD_METADATA_KEY]: row.id }, limit: 200 });
+  const newest = [...tasks].sort((a3, b4) => Date.parse(b4.created_at) - Date.parse(a3.created_at))[0];
+  if (!newest) {
+    throw new Error(`No build conversation has been opened for ${safe(row.name)} yet, so there is nothing to preview. ` + `Start one with \`brainbase interface build ${safe(row.id)} "<what to build>"\`.`);
+  }
+  return { taskId: newest.id, why: "the most recent build conversation" };
+}
+function previewAddress(started, row) {
+  if (started.preview_url !== undefined)
+    return started.preview_url;
+  const live = row.live_release?.url;
+  if (!live)
+    return null;
+  const host = new URL(live).hostname;
+  const prefix = `${started.slug}.`;
+  return host.startsWith(prefix) ? `https://${started.slug}-preview.${host.slice(prefix.length)}` : null;
+}
+function missingAddress(started) {
+  return started.preview_url === null ? "none: this Brainbase server has no public domain for interfaces" : "unknown: this Brainbase server does not report it, and nothing is live to work it out from";
+}
+async function waitUntilServing(started, options) {
+  const now2 = options.deps.now ?? Date.now;
+  const interval = options.deps.pollIntervalMs ?? PROBE_INTERVAL_MS;
+  const deadline = now2() + options.timeoutMs;
+  const stop = interruption(options.deps);
+  try {
+    for (;; ) {
+      if (stop.signal.aborted)
+        return "interrupted";
+      const left = deadline - now2();
+      if (left <= 0)
+        return "timeout";
+      const probeStop = new AbortController;
+      const onStop = () => probeStop.abort(stop.signal.reason);
+      stop.signal.addEventListener("abort", onStop, { once: true });
+      const timer = setTimeout(() => probeStop.abort(), left);
+      try {
+        const probe = await interfacesApi.probePreview(started.machine_id, started.port, probeStop.signal);
+        if (probe.serving)
+          return "serving";
+      } catch (error2) {
+        if (stop.signal.aborted)
+          return "interrupted";
+        if (probeStop.signal.aborted)
+          return "timeout";
+        if (!isTransientReadError(error2))
+          throw error2;
+      } finally {
+        clearTimeout(timer);
+        stop.signal.removeEventListener("abort", onStop);
+      }
+      const remaining = deadline - now2();
+      if (remaining <= 0)
+        return "timeout";
+      if (await pause(Math.min(interval, remaining), stop.signal))
+        return "interrupted";
+    }
+  } finally {
+    stop.dispose();
+  }
+}
+function showing(started, taskId) {
+  return started.source === "working_copy" ? `the working copy of conversation ${safe(taskId)}, unsaved edits included` : `the last saved version${started.commit ? ` (${safe(started.commit)})` : ""}`;
+}
+async function preview(ctx) {
+  let json = wantsJson(ctx.args);
+  await runReportingErrors(() => json, async () => {
+    const parsed = parseArgv(ctx.args, [
+      JSON_FLAG,
+      TIMEOUT_FLAG,
+      NO_WAIT_FLAG,
+      { key: "task", names: ["--task"], kind: "value" }
+    ]);
+    json = booleanOption(parsed, "json");
+    const [id] = expectPositionals(parsed, ["id"], "brainbase interface preview <id> [--task <task id>]");
+    const waitMs = timeoutMs2(stringOption(parsed, "timeout"), PREVIEW_TIMEOUT_SECONDS);
+    const noWait = booleanOption(parsed, "noWait");
+    const say = progress(json);
+    const row = await interfacesApi.get(id);
+    const { taskId, why } = await pickConversation(row, stringOption(parsed, "task")?.trim() || undefined);
+    say(import_picocolors66.default.dim(`  Previewing ${why}, ${safe(taskId)}.`));
+    const started = await interfacesApi.startPreview(taskId, row.id);
+    const address2 = previewAddress(started, row);
+    let outcome = started.state === "serving" ? "serving" : "not_waited";
+    if (outcome !== "serving" && !noWait) {
+      say(import_picocolors66.default.dim("  Starting the dev server in the sandbox…"));
+      outcome = await waitUntilServing(started, { timeoutMs: waitMs, deps: ctx.deps });
+    }
+    if (json) {
+      printJson({ task_id: taskId, ...started, preview_url: address2, serving: outcome === "serving" });
+    } else {
+      const out = [
+        "",
+        `  ${outcome === "serving" ? import_picocolors66.default.green("Preview ready") : import_picocolors66.default.yellow("Preview starting")} ${import_picocolors66.default.bold(safe(started.name))}`,
+        "",
+        field("address", address2 ? safe(address2) : import_picocolors66.default.dim(missingAddress(started))),
+        field("showing", showing(started, taskId)),
+        "",
+        `  ${import_picocolors66.default.dim("Opens for people who can edit the agent, after signing in. Nothing is published.")}`,
+        ""
+      ];
+      console.log(out.join(`
+`));
+      if (started.restored) {
+        warn("The conversation's working copy was no longer in the sandbox, so its last saved version is shown and edits that were never saved are gone.");
+      }
+    }
+    if (outcome === "timeout") {
+      if (!json)
+        warn(`Still starting after ${Math.round(waitMs / 1000)}s. It may come up shortly: open the address, or run this again.`);
+      process.exitCode = 1;
+    } else if (outcome === "interrupted") {
+      process.exitCode = SIGINT_EXIT_CODE;
+    }
+  });
+}
+var previewCommands = { preview };
+
+// src/cli/interface-release.ts
+var import_picocolors67 = __toESM(require_picocolors(), 1);
 var PUBLISH_TIMEOUT_SECONDS = 300;
 var REBUILD_USAGE = "brainbase interface rebuild <id> [--version <version id>]";
 var PUBLISH_USAGE = "brainbase interface publish <id> [--build <build id>]";
 var ROLLBACK_USAGE = "brainbase interface rollback <id> --release <release id>";
-function warn(line) {
-  console.error(import_picocolors66.default.yellow(line));
+function warn2(line) {
+  console.error(import_picocolors67.default.yellow(line));
 }
 function text3(value) {
   return typeof value === "string" && value.trim() ? value : null;
@@ -85088,8 +85328,8 @@ async function follow(operationId, what, options) {
       intervalMs: options.deps.pollIntervalMs,
       signal: stop.signal,
       now: options.deps.now,
-      onStatus: (operation) => say(import_picocolors66.default.dim(`  ${what} ${operation.status}`)),
-      onStall: () => warn(`The ${what} looks stalled: its worker stopped checking in. Still waiting, in case another worker picks it up.`)
+      onStatus: (operation) => say(import_picocolors67.default.dim(`  ${what} ${operation.status}`)),
+      onStall: () => warn2(`The ${what} looks stalled: its worker stopped checking in. Still waiting, in case another worker picks it up.`)
     });
     if (outcome.kind === "settled") {
       const operation = outcome.operation;
@@ -85107,12 +85347,12 @@ function reportUnsuccessful(result2, what, options) {
   if (options.json) {
     printJson({ outcome: result2.outcome, operation_id: result2.operationId, operation: result2.operation });
   } else if (result2.outcome === "failed") {
-    console.error(import_picocolors66.default.red(`The ${what} failed (operation ${id}):`));
+    console.error(import_picocolors67.default.red(`The ${what} failed (operation ${id}):`));
     console.error(safeBlock(result2.operation?.error ?? "Brainbase gave no reason."));
   } else if (result2.outcome === "timeout") {
-    warn(`Stopped waiting after ${Math.round(options.timeoutMs / 1000)}s. The ${what} keeps running on the server (operation ${id}).`);
+    warn2(`Stopped waiting after ${Math.round(options.timeoutMs / 1000)}s. The ${what} keeps running on the server (operation ${id}).`);
   } else {
-    warn(`Stopped waiting. The ${what} keeps running on the server (operation ${id}).`);
+    warn2(`Stopped waiting. The ${what} keeps running on the server (operation ${id}).`);
   }
   process.exitCode = result2.outcome === "interrupted" ? SIGINT_EXIT_CODE : 1;
   return true;
@@ -85166,7 +85406,7 @@ async function rebuild(ctx) {
       if (json)
         printJson({ outcome: "started", operation_id: operationId, operation });
       else
-        console.log(import_picocolors66.default.dim(`  Follow it with \`brainbase interface builds ${safe(id)}\`.`));
+        console.log(import_picocolors67.default.dim(`  Follow it with \`brainbase interface builds ${safe(id)}\`.`));
       return;
     }
     const result2 = await follow(operationId, "build", { json, timeoutMs: waitMs, deps: ctx.deps });
@@ -85178,8 +85418,8 @@ async function rebuild(ctx) {
     }
     const buildId = safe(result2.operation?.build_id ?? "");
     const version2 = safe(result2.operation?.source_version_id ?? "");
-    console.log(import_picocolors66.default.green(`✓ Build ${buildId} succeeded${version2 ? ` (version ${version2})` : ""}.`));
-    console.log(import_picocolors66.default.dim(`  Publish it with \`brainbase interface publish ${safe(id)} --build ${buildId}\`.`));
+    console.log(import_picocolors67.default.green(`✓ Build ${buildId} succeeded${version2 ? ` (version ${version2})` : ""}.`));
+    console.log(import_picocolors67.default.dim(`  Publish it with \`brainbase interface publish ${safe(id)} --build ${buildId}\`.`));
   });
 }
 function liveBuildOf(row, releases) {
@@ -85237,7 +85477,7 @@ function describeBuild(buildId, builds) {
   const build2 = builds.find((candidate) => candidate.id === buildId);
   if (!build2)
     return `build ${safe(buildId)}`;
-  return `build ${safe(build2.id)} ${import_picocolors66.default.dim(`(version ${safe(build2.source_version_id)}, built ${ago(build2.created_at)})`)}`;
+  return `build ${safe(build2.id)} ${import_picocolors67.default.dim(`(version ${safe(build2.source_version_id)}, built ${ago(build2.created_at)})`)}`;
 }
 function reportAlreadyLive(json, buildId, releaseId, url2) {
   if (json) {
@@ -85282,7 +85522,7 @@ async function publish(ctx) {
     } else {
       const picked = await pickBuild(id, row, builds, releases, liveBuildId);
       if (picked.warning)
-        warn(picked.warning);
+        warn2(picked.warning);
       buildId = picked.build.id;
     }
     if (buildId === liveBuildId) {
@@ -85291,8 +85531,8 @@ async function publish(ctx) {
     }
     if (!json) {
       console.log("");
-      console.log(`  ${import_picocolors66.default.dim("Live now".padEnd(14))}${liveBuildId ? `${describeBuild(liveBuildId, builds)} at ${safe(row.live_release?.url)}` : row.live_release ? `release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}` : import_picocolors66.default.dim("nothing")}`);
-      console.log(`  ${import_picocolors66.default.dim("Will publish".padEnd(14))}${describeBuild(buildId, builds)}`);
+      console.log(`  ${import_picocolors67.default.dim("Live now".padEnd(14))}${liveBuildId ? `${describeBuild(liveBuildId, builds)} at ${safe(row.live_release?.url)}` : row.live_release ? `release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}` : import_picocolors67.default.dim("nothing")}`);
+      console.log(`  ${import_picocolors67.default.dim("Will publish".padEnd(14))}${describeBuild(buildId, builds)}`);
       console.log("");
     }
     const proceed = await confirmChange({
@@ -85324,7 +85564,7 @@ async function publish(ctx) {
         return;
       }
       if (error2.reason === "audience_empty") {
-        throw reword(error2, `Nobody can open this interface yet, so it was not published. Choose who can with \`brainbase interface access ${safe(id)} --everyone\` or \`--people <user ids>\`, then publish again.`);
+        throw reword(error2, `Nobody can open this interface yet, so it was not published. Choose who can with \`brainbase interface access ${safe(id)} --everyone\` or \`--people <emails>\`, then publish again.`);
       }
       if (error2.reason !== "operation_in_flight")
         throw error2;
@@ -85335,7 +85575,7 @@ async function publish(ctx) {
       if (json)
         printJson({ outcome: "started", operation_id: operationId, operation });
       else
-        console.log(import_picocolors66.default.dim(`  Check it with \`brainbase interface get ${safe(id)}\`.`));
+        console.log(import_picocolors67.default.dim(`  Check it with \`brainbase interface get ${safe(id)}\`.`));
       return;
     }
     const result2 = await follow(operationId, "publish", { json, timeoutMs: waitMs, deps: ctx.deps });
@@ -85352,11 +85592,11 @@ async function publish(ctx) {
       printJson({ outcome: "succeeded", operation_id: operationId, operation: result2.operation, url: url2 });
       return;
     }
-    console.log(import_picocolors66.default.green(`✓ Build ${safe(buildId)} is live.`));
+    console.log(import_picocolors67.default.green(`✓ Build ${safe(buildId)} is live.`));
     if (url2)
       console.log(`  ${safe(url2)}`);
     if (urlUnread) {
-      console.log(import_picocolors66.default.dim(`  Its address could not be read just now; see it with \`brainbase interface open ${safe(id)}\`.`));
+      console.log(import_picocolors67.default.dim(`  Its address could not be read just now; see it with \`brainbase interface open ${safe(id)}\`.`));
     }
   });
 }
@@ -85392,8 +85632,8 @@ async function rollback(ctx) {
     }
     if (!json) {
       console.log("");
-      console.log(`  ${import_picocolors66.default.dim("Live now".padEnd(20))}release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}`);
-      console.log(`  ${import_picocolors66.default.dim("Will be live again".padEnd(20))}release ${safe(releaseId)}`);
+      console.log(`  ${import_picocolors67.default.dim("Live now".padEnd(20))}release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}`);
+      console.log(`  ${import_picocolors67.default.dim("Will be live again".padEnd(20))}release ${safe(releaseId)}`);
       console.log("");
     }
     const proceed = await confirmChange({
@@ -85426,7 +85666,7 @@ async function rollback(ctx) {
       printJson(release);
       return;
     }
-    console.log(import_picocolors66.default.green(`✓ Release ${safe(release.id)} is live again (build ${safe(release.build_id)}).`));
+    console.log(import_picocolors67.default.green(`✓ Release ${safe(release.id)} is live again (build ${safe(release.build_id)}).`));
     console.log(`  ${safe(release.url)}`);
   });
 }
@@ -85437,7 +85677,8 @@ var COMMANDS = {
   ...readCommands,
   ...lifecycleCommands,
   ...releaseCommands,
-  ...buildCommands
+  ...buildCommands,
+  ...previewCommands
 };
 var ALIASES = { list: "ls", show: "get" };
 async function runInterface(cwd2, sub, args, deps = {}) {
@@ -85460,22 +85701,22 @@ async function runInterface(cwd2, sub, args, deps = {}) {
   await command({ cwd: cwd2, args, deps });
 }
 function line(command, args, description) {
-  return `  ${import_picocolors67.default.cyan(command)}${args ? ` ${import_picocolors67.default.dim(args)}` : ""}
-      ${import_picocolors67.default.dim(description)}`;
+  return `  ${import_picocolors68.default.cyan(command)}${args ? ` ${import_picocolors68.default.dim(args)}` : ""}
+      ${import_picocolors68.default.dim(description)}`;
 }
 function printHelp6() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors67.default.bold("brainbase interface")} ${import_picocolors67.default.dim("<sub> [options]")}`);
-  out.push(`  ${import_picocolors67.default.dim("Dashboards for an agent: build them in a conversation, publish them, choose who can open them.")}`);
+  out.push(`  ${import_picocolors68.default.bold("brainbase interface")} ${import_picocolors68.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors68.default.dim("Dashboards for an agent: build them in a conversation, publish them, choose who can open them.")}`);
   out.push("");
   out.push(line("ls", "[--agent <id>] [--archived | --only-archived]", "list interfaces you can see"));
   out.push(line("get", "<id>", "one interface: address, audience, live release, draft, running build conversation"));
   out.push(line("open", "<id>", "print the live address"));
   out.push(line("versions | builds | releases", "<id>", "history, newest first"));
   out.push("");
-  out.push(line("create", "[--agent <id>] --name <name> [--address <slug>] [--everyone | --people <ids>]", "create an interface on an agent"));
-  out.push(line("access", "<id> [--everyone | --people <ids> | --add <ids> | --remove <ids>]", "show or set who can open it"));
+  out.push(line("create", "[--agent <id>] --name <name> [--address <slug>] [--everyone | --people <emails>]", "create an interface on an agent"));
+  out.push(line("access", "<id> [--everyone | --people <emails> | --add <emails> | --remove <emails>]", "show or set who can open it"));
   out.push(line("threads", "<id> [--shared | --private]", "show or set whether viewers see every conversation on the agent"));
   out.push(line("rename", "<id> <name>", "change the name"));
   out.push(line("address", "<id> <slug>", "change the address (viewers sign in again)"));
@@ -85485,15 +85726,97 @@ function printHelp6() {
   out.push(line("rebuild", "<id> [--version <id>]", "build the draft version again, or a named one"));
   out.push(line("publish", "<id> [--build <id>]", "make a build live (default: the newest succeeded build)"));
   out.push(line("rollback", "<id> --release <id>", "make an earlier release live again"));
+  out.push(line("preview", "<id> [--task <id>] [--no-wait]", "serve the unpublished draft from its build conversation and print the preview address"));
+  out.push("");
+  out.push(`  ${import_picocolors68.default.dim("--json")}                   machine-readable output; never prompts`);
+  out.push(`  ${import_picocolors68.default.dim("--yes, -y")}                skip confirmation (required without a terminal)`);
+  out.push(`  ${import_picocolors68.default.dim("--no-wait")}                for rebuild and publish: return the operation at once; for preview: do not wait for the dev server`);
+  out.push(`  ${import_picocolors68.default.dim("--timeout <seconds>")}      for build, rebuild, publish and preview: how long to wait (builds 900, publish and preview 300)`);
+  out.push(`  ${import_picocolors68.default.dim("--idempotency-key <key>")}  replay a create, build, rebuild, publish or rollback whose answer was lost`);
+  out.push("");
+  out.push(`  ${import_picocolors68.default.dim("People are emails (see `brainbase member ls`), user ids, or `me`. Audience members also need access to the agent.")}`);
+  out.push(`  ${import_picocolors68.default.dim("Exit codes: 0 done, 1 refused or failed, 130 interrupted (the server keeps working).")}`);
+  out.push("");
+  console.log(out.join(`
+`));
+}
+
+// src/cli/member.ts
+var import_picocolors69 = __toESM(require_picocolors(), 1);
+async function runMember(sub, args, opts) {
+  if (args.some((arg) => arg === "--help" || arg === "-h")) {
+    printHelp7();
+    return;
+  }
+  switch (sub) {
+    case "ls":
+    case "list":
+      if (args.length > 0) {
+        console.error(`Unexpected argument: ${args[0]}
+`);
+        printHelp7();
+        process.exit(1);
+      }
+      await runMemberList(opts);
+      return;
+    case undefined:
+    case "help":
+    case "-h":
+    case "--help":
+      printHelp7();
+      return;
+    default:
+      console.error(`Unknown member subcommand: ${sub}
+`);
+      printHelp7();
+      process.exit(1);
+  }
+}
+async function runMemberList(opts) {
+  const org = await resolveOrg(opts.orgId, { allowPrompt: !opts.json, announce: !opts.json });
+  const members = await listAllOrgMembers(org.id);
+  if (opts.json) {
+    console.log(JSON.stringify({ org, members }, null, 2));
+    return;
+  }
+  banner(`member ls — ${sanitizeLabel(org.name)}`);
+  console.log(formatMemberList(members));
+}
+function formatMemberList(members) {
+  if (members.length === 0)
+    return `
+  ${import_picocolors69.default.dim("Nobody here you can see.")}
+`;
+  const sorted = [...members].sort((a3, b4) => (a3.email ?? a3.id).localeCompare(b4.email ?? b4.id));
+  const rows = sorted.map((member) => ({
+    email: sanitizeLabel(member.email ?? "(no sign-in account)"),
+    name: sanitizeLabel(member.name ?? ""),
+    role: sanitizeLabel(member.role),
+    teams: member.teams.map((team) => sanitizeLabel(team.name)).join(", ")
+  }));
+  const emailWidth = Math.max(...rows.map((row) => row.email.length));
+  const nameWidth = Math.max(...rows.map((row) => row.name.length));
+  const roleWidth = Math.max(...rows.map((row) => row.role.length));
+  const lines = [""];
+  for (const row of rows) {
+    lines.push(`  ${row.email.padEnd(emailWidth)}  ${row.name.padEnd(nameWidth)}  ${import_picocolors69.default.dim(row.role.padEnd(roleWidth))}  ${import_picocolors69.default.dim(row.teams)}`.trimEnd());
+  }
+  lines.push("", `  ${import_picocolors69.default.dim("share a dashboard with one of them:")} ${import_picocolors69.default.cyan("brainbase interface access <id> --add <email>")}`, "");
+  return lines.join(`
+`);
+}
+function printHelp7() {
+  const out = [];
+  out.push("");
+  out.push(`  ${import_picocolors69.default.bold("brainbase member")} ${import_picocolors69.default.dim("<sub> [options]")}`);
+  out.push("");
+  out.push(`  ${import_picocolors69.default.cyan("ls")}   ${import_picocolors69.default.dim("the people in an organization you can see, with their emails, roles and teams")}`);
   out.push("");
-  out.push(`  ${import_picocolors67.default.dim("--json")}                   machine-readable output; never prompts`);
-  out.push(`  ${import_picocolors67.default.dim("--yes, -y")}                skip confirmation (required without a terminal)`);
-  out.push(`  ${import_picocolors67.default.dim("--no-wait")}                for rebuild and publish: return the operation at once`);
-  out.push(`  ${import_picocolors67.default.dim("--timeout <seconds>")}      for build, rebuild and publish: how long to wait (builds 900, publish 300)`);
-  out.push(`  ${import_picocolors67.default.dim("--idempotency-key <key>")}  replay a create, build, rebuild, publish or rollback whose answer was lost`);
+  out.push(`  ${import_picocolors69.default.dim("--org <id-or-slug>")}  ${import_picocolors69.default.dim("which organization (picked automatically when you are in one)")}`);
+  out.push(`  ${import_picocolors69.default.dim("--json")}              ${import_picocolors69.default.dim("machine-readable output")}`);
   out.push("");
-  out.push(`  ${import_picocolors67.default.dim("People are user ids, or `me`. Audience members also need access to the agent.")}`);
-  out.push(`  ${import_picocolors67.default.dim("Exit codes: 0 done, 1 refused or failed, 130 interrupted (the server keeps working).")}`);
+  out.push(`  ${import_picocolors69.default.dim("Owners and admins see everyone. Anyone else sees the owners, the admins, themselves")}`);
+  out.push(`  ${import_picocolors69.default.dim("and the people who share a team with them, as in the web app.")}`);
   out.push("");
   console.log(out.join(`
 `));
@@ -88586,7 +88909,7 @@ async function runBenchmarkPhase(specPathInput, resultPathInput, expectedPhase,
 }
 
 // src/cli/benchmark-control.ts
-var import_picocolors68 = __toESM(require_picocolors(), 1);
+var import_picocolors70 = __toESM(require_picocolors(), 1);
 import fs89 from "node:fs";
 import path101 from "node:path";
 
@@ -91600,20 +91923,20 @@ async function emitCursorPages(output, fetchPage, options) {
 function commandHelp() {
   return [
     "",
-    `  ${import_picocolors68.default.bold("brainbase benchmark")} ${import_picocolors68.default.dim("<command> [options]")}`,
+    `  ${import_picocolors70.default.bold("brainbase benchmark")} ${import_picocolors70.default.dim("<command> [options]")}`,
     "",
-    `  ${import_picocolors68.default.cyan("init | list | show | create | validate | pull | push")}`,
-    `  ${import_picocolors68.default.cyan("publish | revisions | import | export | archive | restore")}`,
-    `  ${import_picocolors68.default.cyan("run plan|start|watch|list|show|cancel|resume")}`,
-    `  ${import_picocolors68.default.cyan("results | diagnoses | attempt | artifacts | export-results")}`,
-    `  ${import_picocolors68.default.cyan("history | baseline show|set|clear")}`,
+    `  ${import_picocolors70.default.cyan("init | list | show | create | validate | pull | push")}`,
+    `  ${import_picocolors70.default.cyan("publish | revisions | import | export | archive | restore")}`,
+    `  ${import_picocolors70.default.cyan("run plan|start|watch|list|show|cancel|resume")}`,
+    `  ${import_picocolors70.default.cyan("results | diagnoses | attempt | artifacts | export-results")}`,
+    `  ${import_picocolors70.default.cyan("history | baseline show|set|clear")}`,
     "",
-    `  ${import_picocolors68.default.dim("Use --agent to override brainbase.agent.yaml, and --json or --jsonl for automation.")}`,
+    `  ${import_picocolors70.default.dim("Use --agent to override brainbase.agent.yaml, and --json or --jsonl for automation.")}`,
     "",
-    `  ${import_picocolors68.default.bold("benchmark runtime (machine-only)")}`,
-    `  ${import_picocolors68.default.cyan("hydrate")} ${import_picocolors68.default.dim("--spec <path> --result <path> --json")}`,
-    `  ${import_picocolors68.default.cyan("evaluate")} ${import_picocolors68.default.dim("--spec <path> --result <path> --json")}`,
-    `  ${import_picocolors68.default.cyan("capabilities")} ${import_picocolors68.default.dim("--json")}`,
+    `  ${import_picocolors70.default.bold("benchmark runtime (machine-only)")}`,
+    `  ${import_picocolors70.default.cyan("hydrate")} ${import_picocolors70.default.dim("--spec <path> --result <path> --json")}`,
+    `  ${import_picocolors70.default.cyan("evaluate")} ${import_picocolors70.default.dim("--spec <path> --result <path> --json")}`,
+    `  ${import_picocolors70.default.cyan("capabilities")} ${import_picocolors70.default.dim("--json")}`,
     ""
   ].join(`
 `);
@@ -91860,17 +92183,17 @@ async function runImport(cwd2, argv, deps) {
     const primary = optionalNonblank(options.parsed, "primaryEvaluator");
     if (primary)
       request2.primary_evaluator_key = primary;
-    const preview = await client.previewHuggingFaceImport(request2);
+    const preview2 = await client.previewHuggingFaceImport(request2);
     if (bool(options.parsed, "preview")) {
-      output.result(preview);
+      output.result(preview2);
       return;
     }
-    const provenance = requireObject(preview.provenance ?? {}, "preview provenance");
+    const provenance = requireObject(preview2.provenance ?? {}, "preview provenance");
     const materialize = {
       ...request2,
       expected_commit: stringField(provenance, "commit"),
-      expected_materialization_digest: stringField(preview, "materialization_digest"),
-      expected_content_digest: stringField(preview, "content_digest")
+      expected_materialization_digest: stringField(preview2, "materialization_digest"),
+      expected_content_digest: stringField(preview2, "content_digest")
     };
     output.result(json(await client.materializeHuggingFaceImport(materialize, {
       idempotencyKey: idempotencyKey(options)
@@ -93032,181 +93355,182 @@ var SUBCOMMAND_OWNED_FLAGS = {
 function help() {
   const out = [];
   out.push("");
-  out.push(`  ${brandTint("◆")}  ${import_picocolors69.default.bold("brainbase")}  ${import_picocolors69.default.dim(`v${VERSION}`)}`);
-  out.push(`     ${import_picocolors69.default.dim("connect your local agent to the brainbase platform")}`);
+  out.push(`  ${brandTint("◆")}  ${import_picocolors71.default.bold("brainbase")}  ${import_picocolors71.default.dim(`v${VERSION}`)}`);
+  out.push(`     ${import_picocolors71.default.dim("connect your local agent to the brainbase platform")}`);
   out.push("");
   out.push(divider("USAGE"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("brainbase")} ${import_picocolors69.default.dim("<command> [options]")}`);
+  out.push(`  ${import_picocolors71.default.bold("brainbase")} ${import_picocolors71.default.dim("<command> [options]")}`);
   out.push("");
   out.push(divider("AUTH"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("login")}     ${import_picocolors69.default.dim("  open the web app and connect this device")}`);
-  out.push(`  ${import_picocolors69.default.cyan("logout")}    ${import_picocolors69.default.dim("  clear the local session")}`);
-  out.push(`  ${import_picocolors69.default.cyan("whoami")} ${import_picocolors69.default.dim("[--json]")} ${import_picocolors69.default.dim(" show which credential is in use and what it covers")}`);
+  out.push(`  ${import_picocolors71.default.cyan("login")}     ${import_picocolors71.default.dim("  open the web app and connect this device")}`);
+  out.push(`  ${import_picocolors71.default.cyan("logout")}    ${import_picocolors71.default.dim("  clear the local session")}`);
+  out.push(`  ${import_picocolors71.default.cyan("whoami")} ${import_picocolors71.default.dim("[--json]")} ${import_picocolors71.default.dim(" show which credential is in use and what it covers")}`);
   out.push("");
   out.push(divider("DISCOVERY"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("team list")}                  ${import_picocolors69.default.dim("show the teams you can create agents in")}`);
-  out.push(`  ${import_picocolors69.default.cyan("agent list")}                 ${import_picocolors69.default.dim("show a team's agents and their ids")}`);
+  out.push(`  ${import_picocolors71.default.cyan("team list")}                  ${import_picocolors71.default.dim("show the teams you can create agents in")}`);
+  out.push(`  ${import_picocolors71.default.cyan("member ls")}                  ${import_picocolors71.default.dim("show the people in an organization, with the emails interface access takes")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent list")}                 ${import_picocolors71.default.dim("show a team's agents and their ids")}`);
   out.push("");
   out.push(divider("LINKED AGENT"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("agent init")}                 ${import_picocolors69.default.dim("write a starter brainbase.agent.yaml here — offline, no login needed")}`);
-  out.push(`  ${import_picocolors69.default.cyan("agent create")}               ${import_picocolors69.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent")}`);
-  out.push(`  ${import_picocolors69.default.cyan("agent pull")} ${import_picocolors69.default.dim("[<id>]")}          ${import_picocolors69.default.dim("bring cloud changes into this folder (--force to override; --run-entrypoint to also execute the agent entrypoint; --link to link first)")}`);
-  out.push(`  ${import_picocolors69.default.cyan("agent push")}                 ${import_picocolors69.default.dim("send local changes to the cloud (--force to overwrite cloud-side conflicts with local)")}`);
-  out.push(`  ${import_picocolors69.default.cyan("agent delete")} ${import_picocolors69.default.dim("<id>")}          ${import_picocolors69.default.dim("permanently delete a cloud agent and every task it has run")}`);
-  out.push(`  ${import_picocolors69.default.cyan("agent unpack")}               ${import_picocolors69.default.dim("install the claimed agent into a harness layout")}`);
-  out.push(`  ${import_picocolors69.default.cyan("link")}                       ${import_picocolors69.default.dim("attach this folder to an existing agent")}`);
-  out.push(`  ${import_picocolors69.default.cyan("agent status")}               ${import_picocolors69.default.dim("show what would pull and what would push")}`);
-  out.push(`  ${import_picocolors69.default.cyan("agent connections")}          ${import_picocolors69.default.dim("show which integrations this agent is wired to (--json for CI)")}`);
-  out.push(`  ${import_picocolors69.default.cyan("agent connect")} ${import_picocolors69.default.dim("<name>")}       ${import_picocolors69.default.dim("connect slack or meeting from the terminal")}`);
-  out.push(`  ${import_picocolors69.default.cyan("agent disconnect")} ${import_picocolors69.default.dim("<name>")}    ${import_picocolors69.default.dim("revoke a slack or meeting install")}`);
-  out.push(`  ${import_picocolors69.default.cyan("agent env")}                  ${import_picocolors69.default.dim("print export lines for `eval $(brainbase agent env)`")}`);
-  out.push(`  ${import_picocolors69.default.cyan("run")} ${import_picocolors69.default.dim("<cmd> [args...]")}         ${import_picocolors69.default.dim("run <cmd> with secrets.env loaded into env")}`);
-  out.push(`  ${import_picocolors69.default.cyan("status")}                     ${import_picocolors69.default.dim("show what this folder is linked to")}`);
-  out.push(`  ${import_picocolors69.default.cyan("unlink")}                     ${import_picocolors69.default.dim("disconnect this folder")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent init")}                 ${import_picocolors71.default.dim("write a starter brainbase.agent.yaml here — offline, no login needed")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent create")}               ${import_picocolors71.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent pull")} ${import_picocolors71.default.dim("[<id>]")}          ${import_picocolors71.default.dim("bring cloud changes into this folder (--force to override; --run-entrypoint to also execute the agent entrypoint; --link to link first)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent push")}                 ${import_picocolors71.default.dim("send local changes to the cloud (--force to overwrite cloud-side conflicts with local)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent delete")} ${import_picocolors71.default.dim("<id>")}          ${import_picocolors71.default.dim("permanently delete a cloud agent and every task it has run")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent unpack")}               ${import_picocolors71.default.dim("install the claimed agent into a harness layout")}`);
+  out.push(`  ${import_picocolors71.default.cyan("link")}                       ${import_picocolors71.default.dim("attach this folder to an existing agent")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent status")}               ${import_picocolors71.default.dim("show what would pull and what would push")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent connections")}          ${import_picocolors71.default.dim("show which integrations this agent is wired to (--json for CI)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent connect")} ${import_picocolors71.default.dim("<name>")}       ${import_picocolors71.default.dim("connect slack or meeting from the terminal")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent disconnect")} ${import_picocolors71.default.dim("<name>")}    ${import_picocolors71.default.dim("revoke a slack or meeting install")}`);
+  out.push(`  ${import_picocolors71.default.cyan("agent env")}                  ${import_picocolors71.default.dim("print export lines for `eval $(brainbase agent env)`")}`);
+  out.push(`  ${import_picocolors71.default.cyan("run")} ${import_picocolors71.default.dim("<cmd> [args...]")}         ${import_picocolors71.default.dim("run <cmd> with secrets.env loaded into env")}`);
+  out.push(`  ${import_picocolors71.default.cyan("status")}                     ${import_picocolors71.default.dim("show what this folder is linked to")}`);
+  out.push(`  ${import_picocolors71.default.cyan("unlink")}                     ${import_picocolors71.default.dim("disconnect this folder")}`);
   out.push("");
   out.push(divider("TASKS"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("task create")} ${import_picocolors69.default.dim("--message <text>")}   ${import_picocolors69.default.dim("create a managed task and start its first run (--wait to block on it; --interface <id> for a build conversation)")}`);
-  out.push(`  ${import_picocolors69.default.cyan("task list")}                       ${import_picocolors69.default.dim("recent tasks you can reach (--interface <id> for its build conversations)")}`);
-  out.push(`  ${import_picocolors69.default.cyan("task get")} ${import_picocolors69.default.dim("<task-id>")}              ${import_picocolors69.default.dim("one task: status, agent, machine, eval verdicts")}`);
-  out.push(`  ${import_picocolors69.default.cyan("task logs")} ${import_picocolors69.default.dim("<task-id> [--follow]")}  ${import_picocolors69.default.dim("one line per event in the task's transcript, or tail it live")}`);
-  out.push(`  ${import_picocolors69.default.cyan("task send")} ${import_picocolors69.default.dim("<task-id> <message>")}  ${import_picocolors69.default.dim("send a follow-up during execution, or queue it for the next turn")}`);
-  out.push(`  ${import_picocolors69.default.cyan("task stop")} ${import_picocolors69.default.dim("<task-id>")}             ${import_picocolors69.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
-  out.push(`  ${import_picocolors69.default.cyan("task delete")} ${import_picocolors69.default.dim("<task-id>")}           ${import_picocolors69.default.dim("permanently delete a stopped task and tear down its sandbox")}`);
+  out.push(`  ${import_picocolors71.default.cyan("task create")} ${import_picocolors71.default.dim("--message <text>")}   ${import_picocolors71.default.dim("create a managed task and start its first run (--wait to block on it; --interface <id> for a build conversation)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("task list")}                       ${import_picocolors71.default.dim("recent tasks you can reach (--interface <id> for its build conversations)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("task get")} ${import_picocolors71.default.dim("<task-id>")}              ${import_picocolors71.default.dim("one task: status, agent, machine, eval verdicts")}`);
+  out.push(`  ${import_picocolors71.default.cyan("task logs")} ${import_picocolors71.default.dim("<task-id> [--follow]")}  ${import_picocolors71.default.dim("one line per event in the task's transcript, or tail it live")}`);
+  out.push(`  ${import_picocolors71.default.cyan("task send")} ${import_picocolors71.default.dim("<task-id> <message>")}  ${import_picocolors71.default.dim("send a follow-up during execution, or queue it for the next turn")}`);
+  out.push(`  ${import_picocolors71.default.cyan("task stop")} ${import_picocolors71.default.dim("<task-id>")}             ${import_picocolors71.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
+  out.push(`  ${import_picocolors71.default.cyan("task delete")} ${import_picocolors71.default.dim("<task-id>")}           ${import_picocolors71.default.dim("permanently delete a stopped task and tear down its sandbox")}`);
   out.push("");
   out.push(divider("INTERFACES"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("interface ls")}                    ${import_picocolors69.default.dim("dashboards you can see (--agent to narrow)")}`);
-  out.push(`  ${import_picocolors69.default.cyan("interface create")} ${import_picocolors69.default.dim("--name <n>")}     ${import_picocolors69.default.dim("create one on an agent, with who can open it")}`);
-  out.push(`  ${import_picocolors69.default.cyan("interface build")} ${import_picocolors69.default.dim('<id> "<ask>"')}    ${import_picocolors69.default.dim("describe a change; the agent builds it while you watch")}`);
-  out.push(`  ${import_picocolors69.default.cyan("interface publish")} ${import_picocolors69.default.dim("<id>")}          ${import_picocolors69.default.dim("make the newest succeeded build live")}`);
-  out.push(`  ${import_picocolors69.default.cyan("interface rollback")} ${import_picocolors69.default.dim("<id>")}         ${import_picocolors69.default.dim("make an earlier release live again (--release <id>)")}`);
-  out.push(`  ${import_picocolors69.default.cyan("interface access")} ${import_picocolors69.default.dim("<id>")}           ${import_picocolors69.default.dim("show or set who can open it")}`);
-  out.push(`  ${import_picocolors69.default.cyan("interface --help")}                ${import_picocolors69.default.dim("every interface subcommand")}`);
+  out.push(`  ${import_picocolors71.default.cyan("interface ls")}                    ${import_picocolors71.default.dim("dashboards you can see (--agent to narrow)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("interface create")} ${import_picocolors71.default.dim("--name <n>")}     ${import_picocolors71.default.dim("create one on an agent, with who can open it")}`);
+  out.push(`  ${import_picocolors71.default.cyan("interface build")} ${import_picocolors71.default.dim('<id> "<ask>"')}    ${import_picocolors71.default.dim("describe a change; the agent builds it while you watch")}`);
+  out.push(`  ${import_picocolors71.default.cyan("interface publish")} ${import_picocolors71.default.dim("<id>")}          ${import_picocolors71.default.dim("make the newest succeeded build live")}`);
+  out.push(`  ${import_picocolors71.default.cyan("interface rollback")} ${import_picocolors71.default.dim("<id>")}         ${import_picocolors71.default.dim("make an earlier release live again (--release <id>)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("interface access")} ${import_picocolors71.default.dim("<id>")}           ${import_picocolors71.default.dim("show or set who can open it")}`);
+  out.push(`  ${import_picocolors71.default.cyan("interface --help")}                ${import_picocolors71.default.dim("every interface subcommand")}`);
   out.push("");
   out.push(divider("SANDBOXES"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("machine ls")} ${import_picocolors69.default.dim("[--all]")}            ${import_picocolors69.default.dim("list your sandboxes — live ones only unless --all")}`);
-  out.push(`  ${import_picocolors69.default.cyan("machine rm")} ${import_picocolors69.default.dim("<id>")}               ${import_picocolors69.default.dim("tear a sandbox down (it bills until you do)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("machine ls")} ${import_picocolors71.default.dim("[--all]")}            ${import_picocolors71.default.dim("list your sandboxes — live ones only unless --all")}`);
+  out.push(`  ${import_picocolors71.default.cyan("machine rm")} ${import_picocolors71.default.dim("<id>")}               ${import_picocolors71.default.dim("tear a sandbox down (it bills until you do)")}`);
   out.push("");
   out.push(divider("BENCHMARKS"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("benchmark list")}                    ${import_picocolors69.default.dim("list benchmarks for the linked agent")}`);
-  out.push(`  ${import_picocolors69.default.cyan("benchmark init")} ${import_picocolors69.default.dim("[directory]")}        ${import_picocolors69.default.dim("scaffold a local benchmark")}`);
-  out.push(`  ${import_picocolors69.default.cyan("benchmark create")} ${import_picocolors69.default.dim("[path|-]")}         ${import_picocolors69.default.dim("create a benchmark draft")}`);
-  out.push(`  ${import_picocolors69.default.cyan("benchmark run")} ${import_picocolors69.default.dim("<benchmark> --yes")}   ${import_picocolors69.default.dim("plan and start a benchmark run")}`);
-  out.push(`  ${import_picocolors69.default.cyan("benchmark results")} ${import_picocolors69.default.dim("<run>")}           ${import_picocolors69.default.dim("inspect normalized benchmark results")}`);
+  out.push(`  ${import_picocolors71.default.cyan("benchmark list")}                    ${import_picocolors71.default.dim("list benchmarks for the linked agent")}`);
+  out.push(`  ${import_picocolors71.default.cyan("benchmark init")} ${import_picocolors71.default.dim("[directory]")}        ${import_picocolors71.default.dim("scaffold a local benchmark")}`);
+  out.push(`  ${import_picocolors71.default.cyan("benchmark create")} ${import_picocolors71.default.dim("[path|-]")}         ${import_picocolors71.default.dim("create a benchmark draft")}`);
+  out.push(`  ${import_picocolors71.default.cyan("benchmark run")} ${import_picocolors71.default.dim("<benchmark> --yes")}   ${import_picocolors71.default.dim("plan and start a benchmark run")}`);
+  out.push(`  ${import_picocolors71.default.cyan("benchmark results")} ${import_picocolors71.default.dim("<run>")}           ${import_picocolors71.default.dim("inspect normalized benchmark results")}`);
   out.push("");
   out.push(divider("BENCHMARK RUNTIME"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("benchmark hydrate")} ${import_picocolors69.default.dim("--spec <path> --result <path> --json")}`);
-  out.push(`  ${import_picocolors69.default.cyan("benchmark evaluate")} ${import_picocolors69.default.dim("--spec <path> --result <path> --json")}`);
-  out.push(`  ${import_picocolors69.default.cyan("benchmark capabilities")} ${import_picocolors69.default.dim("--json")}`);
+  out.push(`  ${import_picocolors71.default.cyan("benchmark hydrate")} ${import_picocolors71.default.dim("--spec <path> --result <path> --json")}`);
+  out.push(`  ${import_picocolors71.default.cyan("benchmark evaluate")} ${import_picocolors71.default.dim("--spec <path> --result <path> --json")}`);
+  out.push(`  ${import_picocolors71.default.cyan("benchmark capabilities")} ${import_picocolors71.default.dim("--json")}`);
   out.push("");
   out.push(divider("ORCHESTRATIONS"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("orchestration create")}           ${import_picocolors69.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
-  out.push(`  ${import_picocolors69.default.cyan("orchestration list")}             ${import_picocolors69.default.dim("list orchestrations under a team")}`);
-  out.push(`  ${import_picocolors69.default.cyan("orchestration pull")} ${import_picocolors69.default.dim("<id>")}        ${import_picocolors69.default.dim("recursively fetch an orchestration + every member agent")}`);
-  out.push(`  ${import_picocolors69.default.cyan("orchestration push")}             ${import_picocolors69.default.dim("recursively push each member, then update the graph")}`);
-  out.push(`  ${import_picocolors69.default.cyan("orchestration status")}           ${import_picocolors69.default.dim("show what would push and what would pull")}`);
-  out.push(`  ${import_picocolors69.default.cyan("orchestration delete")} ${import_picocolors69.default.dim("<id>")}      ${import_picocolors69.default.dim("permanently delete an orchestration graph (member agents are kept)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("orchestration create")}           ${import_picocolors71.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
+  out.push(`  ${import_picocolors71.default.cyan("orchestration list")}             ${import_picocolors71.default.dim("list orchestrations under a team")}`);
+  out.push(`  ${import_picocolors71.default.cyan("orchestration pull")} ${import_picocolors71.default.dim("<id>")}        ${import_picocolors71.default.dim("recursively fetch an orchestration + every member agent")}`);
+  out.push(`  ${import_picocolors71.default.cyan("orchestration push")}             ${import_picocolors71.default.dim("recursively push each member, then update the graph")}`);
+  out.push(`  ${import_picocolors71.default.cyan("orchestration status")}           ${import_picocolors71.default.dim("show what would push and what would pull")}`);
+  out.push(`  ${import_picocolors71.default.cyan("orchestration delete")} ${import_picocolors71.default.dim("<id>")}      ${import_picocolors71.default.dim("permanently delete an orchestration graph (member agents are kept)")}`);
   out.push("");
   out.push(divider("TEMPLATES"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("template pack")}                       ${import_picocolors69.default.dim("bundle the current agent into a template")}`);
-  out.push(`  ${import_picocolors69.default.cyan("template publish")}                    ${import_picocolors69.default.dim("upload a template to the registry")}`);
-  out.push(`  ${import_picocolors69.default.cyan("template search")} ${import_picocolors69.default.dim("[query]")}             ${import_picocolors69.default.dim("search the registry")}`);
-  out.push(`  ${import_picocolors69.default.cyan("template info")}    ${import_picocolors69.default.dim("<creator/slug>")}     ${import_picocolors69.default.dim("show registry details for a template")}`);
-  out.push(`  ${import_picocolors69.default.cyan("template onboard")} ${import_picocolors69.default.dim("<creator/slug>")}     ${import_picocolors69.default.dim("install (or refresh) a template")}`);
-  out.push(`  ${import_picocolors69.default.cyan("template list")}                       ${import_picocolors69.default.dim("show installed templates")}`);
-  out.push(`  ${import_picocolors69.default.cyan("template remove")}  ${import_picocolors69.default.dim("<creator/slug>")}     ${import_picocolors69.default.dim("uninstall a template")}`);
+  out.push(`  ${import_picocolors71.default.cyan("template pack")}                       ${import_picocolors71.default.dim("bundle the current agent into a template")}`);
+  out.push(`  ${import_picocolors71.default.cyan("template publish")}                    ${import_picocolors71.default.dim("upload a template to the registry")}`);
+  out.push(`  ${import_picocolors71.default.cyan("template search")} ${import_picocolors71.default.dim("[query]")}             ${import_picocolors71.default.dim("search the registry")}`);
+  out.push(`  ${import_picocolors71.default.cyan("template info")}    ${import_picocolors71.default.dim("<creator/slug>")}     ${import_picocolors71.default.dim("show registry details for a template")}`);
+  out.push(`  ${import_picocolors71.default.cyan("template onboard")} ${import_picocolors71.default.dim("<creator/slug>")}     ${import_picocolors71.default.dim("install (or refresh) a template")}`);
+  out.push(`  ${import_picocolors71.default.cyan("template list")}                       ${import_picocolors71.default.dim("show installed templates")}`);
+  out.push(`  ${import_picocolors71.default.cyan("template remove")}  ${import_picocolors71.default.dim("<creator/slug>")}     ${import_picocolors71.default.dim("uninstall a template")}`);
   out.push("");
   out.push(divider("SKILLS"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("skill add")} ${import_picocolors69.default.dim("<source>")}                  ${import_picocolors69.default.dim("install a skill (github / git / brainbase)")}`);
-  out.push(`  ${import_picocolors69.default.cyan("skill list")}                            ${import_picocolors69.default.dim("show locally installed skills + their source")}`);
-  out.push(`  ${import_picocolors69.default.cyan("skill update")} ${import_picocolors69.default.dim("<slug>")}                  ${import_picocolors69.default.dim("re-fetch a skill from its recorded source")}`);
-  out.push(`  ${import_picocolors69.default.cyan("skill remove")} ${import_picocolors69.default.dim("<slug>")}                  ${import_picocolors69.default.dim("uninstall a skill")}`);
-  out.push(`  ${import_picocolors69.default.cyan("skill search")} ${import_picocolors69.default.dim("[query]")}                 ${import_picocolors69.default.dim("search the brainbase skill registry")}`);
-  out.push(`  ${import_picocolors69.default.cyan("skill info")} ${import_picocolors69.default.dim("<creator/slug>")}            ${import_picocolors69.default.dim("show registry details for a skill")}`);
-  out.push(`  ${import_picocolors69.default.cyan("skill publish")} ${import_picocolors69.default.dim("[dir]")}                  ${import_picocolors69.default.dim("publish a SKILL.md folder (defaults to .)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("skill add")} ${import_picocolors71.default.dim("<source>")}                  ${import_picocolors71.default.dim("install a skill (github / git / brainbase)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("skill list")}                            ${import_picocolors71.default.dim("show locally installed skills + their source")}`);
+  out.push(`  ${import_picocolors71.default.cyan("skill update")} ${import_picocolors71.default.dim("<slug>")}                  ${import_picocolors71.default.dim("re-fetch a skill from its recorded source")}`);
+  out.push(`  ${import_picocolors71.default.cyan("skill remove")} ${import_picocolors71.default.dim("<slug>")}                  ${import_picocolors71.default.dim("uninstall a skill")}`);
+  out.push(`  ${import_picocolors71.default.cyan("skill search")} ${import_picocolors71.default.dim("[query]")}                 ${import_picocolors71.default.dim("search the brainbase skill registry")}`);
+  out.push(`  ${import_picocolors71.default.cyan("skill info")} ${import_picocolors71.default.dim("<creator/slug>")}            ${import_picocolors71.default.dim("show registry details for a skill")}`);
+  out.push(`  ${import_picocolors71.default.cyan("skill publish")} ${import_picocolors71.default.dim("[dir]")}                  ${import_picocolors71.default.dim("publish a SKILL.md folder (defaults to .)")}`);
   out.push("");
   out.push(divider("CLI TOKENS"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("token create")}                        ${import_picocolors69.default.dim("issue a long-lived CLI key for CI / scripts")}`);
-  out.push(`  ${import_picocolors69.default.cyan("token list")}                          ${import_picocolors69.default.dim("show your tokens")}`);
-  out.push(`  ${import_picocolors69.default.cyan("token rename")} ${import_picocolors69.default.dim("<id>")}                  ${import_picocolors69.default.dim("relabel a token")}`);
-  out.push(`  ${import_picocolors69.default.cyan("token revoke")} ${import_picocolors69.default.dim("<id>")}                  ${import_picocolors69.default.dim("revoke a token")}`);
+  out.push(`  ${import_picocolors71.default.cyan("token create")}                        ${import_picocolors71.default.dim("issue a long-lived CLI key for CI / scripts")}`);
+  out.push(`  ${import_picocolors71.default.cyan("token list")}                          ${import_picocolors71.default.dim("show your tokens")}`);
+  out.push(`  ${import_picocolors71.default.cyan("token rename")} ${import_picocolors71.default.dim("<id>")}                  ${import_picocolors71.default.dim("relabel a token")}`);
+  out.push(`  ${import_picocolors71.default.cyan("token revoke")} ${import_picocolors71.default.dim("<id>")}                  ${import_picocolors71.default.dim("revoke a token")}`);
   out.push("");
   out.push(divider("MCP"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("mcp check")} ${import_picocolors69.default.dim("[--json]")}              ${import_picocolors69.default.dim("verify MCP server connectivity through the brainbase proxy (runs at sandbox bootstrap)")}`);
-  out.push(`  ${import_picocolors69.default.cyan("mcp list")} ${import_picocolors69.default.dim("[--json]")}               ${import_picocolors69.default.dim("show configured servers with OAuth state and expiry")}`);
-  out.push(`  ${import_picocolors69.default.cyan("mcp connect")} ${import_picocolors69.default.dim("<name>")}              ${import_picocolors69.default.dim("authorize an OAuth-backed server: prints a single-use link, opens it, waits for approval")}`);
+  out.push(`  ${import_picocolors71.default.cyan("mcp check")} ${import_picocolors71.default.dim("[--json]")}              ${import_picocolors71.default.dim("verify MCP server connectivity through the brainbase proxy (runs at sandbox bootstrap)")}`);
+  out.push(`  ${import_picocolors71.default.cyan("mcp list")} ${import_picocolors71.default.dim("[--json]")}               ${import_picocolors71.default.dim("show configured servers with OAuth state and expiry")}`);
+  out.push(`  ${import_picocolors71.default.cyan("mcp connect")} ${import_picocolors71.default.dim("<name>")}              ${import_picocolors71.default.dim("authorize an OAuth-backed server: prints a single-use link, opens it, waits for approval")}`);
   out.push("");
   out.push(divider("FLAGS"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.dim("--harness <id>")}     force harness for onboard / sync (e.g. claude-code)`);
-  out.push(`  ${import_picocolors69.default.dim("--scope <s>")}        force scope: global | project`);
-  out.push(`  ${import_picocolors69.default.dim("--yes, -y")}          skip confirmations / auto-overwrite`);
+  out.push(`  ${import_picocolors71.default.dim("--harness <id>")}     force harness for onboard / sync (e.g. claude-code)`);
+  out.push(`  ${import_picocolors71.default.dim("--scope <s>")}        force scope: global | project`);
+  out.push(`  ${import_picocolors71.default.dim("--yes, -y")}          skip confirmations / auto-overwrite`);
   out.push(`  ${" ".repeat("--yes, -y".length)}          required for destructive commands with no terminal (pipes, CI)`);
-  out.push(`  ${import_picocolors69.default.dim("--agent <id>")}       for link/task create: use this agent id explicitly (task list: filter to it)`);
-  out.push(`  ${import_picocolors69.default.dim("--message <text>")}   for task create: required first user message`);
-  out.push(`  ${import_picocolors69.default.dim("--title <text>")}     for task create: optional task title`);
-  out.push(`  ${import_picocolors69.default.dim("--model <id>")}       for task create: optional model override`);
-  out.push(`  ${import_picocolors69.default.dim("--wait")}             for task create: block until the task finishes; exit 1 unless it succeeded`);
-  out.push(`  ${import_picocolors69.default.dim("--timeout <secs>")}   for task create --wait: give up after <secs> and exit 1`);
-  out.push(`  ${import_picocolors69.default.dim("--limit <n>")}        for task list (1-200), task logs (events to print; with --follow, the first page size) and machine ls`);
-  out.push(`  ${import_picocolors69.default.dim("--follow, -f")}       for task logs: stay attached and print events as they land`);
-  out.push(`  ${import_picocolors69.default.dim("--org <id-or-slug>")} pick the organization (team/agent list, agent create, orchestration create/list)`);
-  out.push(`  ${import_picocolors69.default.dim("--team <id>")}        pick the team, same commands (works without --org)`);
-  out.push(`  ${import_picocolors69.default.dim("--json")}             machine-readable output for supported commands`);
-  out.push(`  ${import_picocolors69.default.dim("--no-tracking")}      for link / agent pull --link: skip routing LLM traffic through brainbase`);
-  out.push(`  ${import_picocolors69.default.dim("--link")}             for agent pull: link this folder to the agent first, as \`brainbase link --agent <id> --yes\` would, in one process`);
-  out.push(`  ${import_picocolors69.default.dim("--track")}            for agent create: enable tracking non-interactively (off without a TTY)`);
-  out.push(`  ${import_picocolors69.default.dim("--shell <sh|fish>")}  for agent env: pick output format (auto-detected from $SHELL)`);
-  out.push(`  ${import_picocolors69.default.dim("--bot-token <t>")}    for agent connect slack (or BRAINBASE_SLACK_BOT_TOKEN, or stdin)`);
-  out.push(`  ${import_picocolors69.default.dim("--signing-secret <s>")} for agent connect slack (or BRAINBASE_SLACK_SIGNING_SECRET, or stdin)`);
-  out.push(`  ${import_picocolors69.default.dim("--bot-name <name>")}  for agent connect meeting: the bot's display name`);
-  out.push(`  ${import_picocolors69.default.dim("--full")}             for agent init: write a commented template covering every block`);
-  out.push(`  ${import_picocolors69.default.dim("--minimal")}          for agent init: write the starter manifest (the default)`);
-  out.push(`  ${import_picocolors69.default.dim("--all")}              for template list: include installs from other folders; for machine ls: include torn-down machines`);
-  out.push(`  ${import_picocolors69.default.dim("--web <url>")}        for login: web app URL (default https://app.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors69.default.dim("--no-open")}          for mcp connect: print the link without opening a browser (implied with no terminal)`);
-  out.push(`  ${import_picocolors69.default.dim("--no-wait")}          for mcp connect: print the link and exit instead of waiting for approval`);
+  out.push(`  ${import_picocolors71.default.dim("--agent <id>")}       for link/task create: use this agent id explicitly (task list: filter to it)`);
+  out.push(`  ${import_picocolors71.default.dim("--message <text>")}   for task create: required first user message`);
+  out.push(`  ${import_picocolors71.default.dim("--title <text>")}     for task create: optional task title`);
+  out.push(`  ${import_picocolors71.default.dim("--model <id>")}       for task create: optional model override`);
+  out.push(`  ${import_picocolors71.default.dim("--wait")}             for task create: block until the task finishes; exit 1 unless it succeeded`);
+  out.push(`  ${import_picocolors71.default.dim("--timeout <secs>")}   for task create --wait: give up after <secs> and exit 1`);
+  out.push(`  ${import_picocolors71.default.dim("--limit <n>")}        for task list (1-200), task logs (events to print; with --follow, the first page size) and machine ls`);
+  out.push(`  ${import_picocolors71.default.dim("--follow, -f")}       for task logs: stay attached and print events as they land`);
+  out.push(`  ${import_picocolors71.default.dim("--org <id-or-slug>")} pick the organization (team/agent list, agent create, orchestration create/list)`);
+  out.push(`  ${import_picocolors71.default.dim("--team <id>")}        pick the team, same commands (works without --org)`);
+  out.push(`  ${import_picocolors71.default.dim("--json")}             machine-readable output for supported commands`);
+  out.push(`  ${import_picocolors71.default.dim("--no-tracking")}      for link / agent pull --link: skip routing LLM traffic through brainbase`);
+  out.push(`  ${import_picocolors71.default.dim("--link")}             for agent pull: link this folder to the agent first, as \`brainbase link --agent <id> --yes\` would, in one process`);
+  out.push(`  ${import_picocolors71.default.dim("--track")}            for agent create: enable tracking non-interactively (off without a TTY)`);
+  out.push(`  ${import_picocolors71.default.dim("--shell <sh|fish>")}  for agent env: pick output format (auto-detected from $SHELL)`);
+  out.push(`  ${import_picocolors71.default.dim("--bot-token <t>")}    for agent connect slack (or BRAINBASE_SLACK_BOT_TOKEN, or stdin)`);
+  out.push(`  ${import_picocolors71.default.dim("--signing-secret <s>")} for agent connect slack (or BRAINBASE_SLACK_SIGNING_SECRET, or stdin)`);
+  out.push(`  ${import_picocolors71.default.dim("--bot-name <name>")}  for agent connect meeting: the bot's display name`);
+  out.push(`  ${import_picocolors71.default.dim("--full")}             for agent init: write a commented template covering every block`);
+  out.push(`  ${import_picocolors71.default.dim("--minimal")}          for agent init: write the starter manifest (the default)`);
+  out.push(`  ${import_picocolors71.default.dim("--all")}              for template list: include installs from other folders; for machine ls: include torn-down machines`);
+  out.push(`  ${import_picocolors71.default.dim("--web <url>")}        for login: web app URL (default https://app.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors71.default.dim("--no-open")}          for mcp connect: print the link without opening a browser (implied with no terminal)`);
+  out.push(`  ${import_picocolors71.default.dim("--no-wait")}          for mcp connect: print the link and exit instead of waiting for approval`);
   out.push("");
   out.push(divider("ENV"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_HOME")}         override the local config dir (default ~/.brainbase)`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_DEBUG")}        print full stack traces on error (any value; unset to disable)`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_WEB_URL")}      override the web app URL used by login`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_CONTROL_PLANE_URL")} override the MAS host (/v2/cli; task and interface commands use /v2/tasks and /v2/interfaces)`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_API_URL")}      legacy KLS host override (uses /api/cli; proxy/registry fallback)`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_PROXY_URL")}    override the model-proxy URL used by harness traffic (default https://api.v1.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_REGISTRY_URL")} override the registry API URL (default https://api.v1.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_TOKEN")}        long-lived CLI PAT; the only PAT control-plane commands accept (token.json is not read there)`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_SKIP_AUTH")}    bypass the auth gate for development`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_NON_INTERACTIVE")} force non-interactive mode — skip/auto-default prompts (CI & agents)`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_RUN_ENTRYPOINT")} =1 → agent pull executes the agent entrypoint (sandbox boots; or pass --run-entrypoint)`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_HOME")}         override the local config dir (default ~/.brainbase)`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_DEBUG")}        print full stack traces on error (any value; unset to disable)`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_WEB_URL")}      override the web app URL used by login`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_CONTROL_PLANE_URL")} override the MAS host (/v2/cli; task and interface commands use /v2/tasks and /v2/interfaces)`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_API_URL")}      legacy KLS host override (uses /api/cli; proxy/registry fallback)`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_PROXY_URL")}    override the model-proxy URL used by harness traffic (default https://api.v1.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_REGISTRY_URL")} override the registry API URL (default https://api.v1.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_TOKEN")}        long-lived CLI PAT; the only PAT control-plane commands accept (token.json is not read there)`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_SKIP_AUTH")}    bypass the auth gate for development`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_NON_INTERACTIVE")} force non-interactive mode — skip/auto-default prompts (CI & agents)`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_RUN_ENTRYPOINT")} =1 → agent pull executes the agent entrypoint (sandbox boots; or pass --run-entrypoint)`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_MEMORY_MCP_URL")}        override the built-in memory MCP host`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_BROWSER_MCP_URL")}       override the built-in browser MCP host`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_SLACK_MCP_URL")}         override the built-in Slack MCP host`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_MEETING_MCP_URL")}       override the built-in meeting MCP host`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_GITHUB_MCP_URL")}        override the built-in GitHub MCP host`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_LINEAR_MCP_URL")}        override the built-in Linear MCP host`);
-  out.push(`  ${import_picocolors69.default.dim("BRAINBASE_ORCHESTRATION_MCP_URL")} override the built-in orchestration MCP host`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_MEMORY_MCP_URL")}        override the built-in memory MCP host`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_BROWSER_MCP_URL")}       override the built-in browser MCP host`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_SLACK_MCP_URL")}         override the built-in Slack MCP host`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_MEETING_MCP_URL")}       override the built-in meeting MCP host`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_GITHUB_MCP_URL")}        override the built-in GitHub MCP host`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_LINEAR_MCP_URL")}        override the built-in Linear MCP host`);
+  out.push(`  ${import_picocolors71.default.dim("BRAINBASE_ORCHESTRATION_MCP_URL")} override the built-in orchestration MCP host`);
   out.push("");
   out.push(divider("HARNESSES"));
   out.push("");
-  out.push(`  ${import_picocolors69.default.dim("•")} ${import_picocolors69.default.bold("claude-code")}  ${import_picocolors69.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
-  out.push(`  ${import_picocolors69.default.dim("•")} ${import_picocolors69.default.bold("codex")}        ${import_picocolors69.default.dim("skills, mcps, commands, playbooks, instructions, files")}`);
-  out.push(`  ${import_picocolors69.default.dim("•")} ${import_picocolors69.default.bold("kafka")}        ${import_picocolors69.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors71.default.dim("•")} ${import_picocolors71.default.bold("claude-code")}  ${import_picocolors71.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors71.default.dim("•")} ${import_picocolors71.default.bold("codex")}        ${import_picocolors71.default.dim("skills, mcps, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors71.default.dim("•")} ${import_picocolors71.default.bold("kafka")}        ${import_picocolors71.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
   out.push("");
   console.log(out.join(`
 `));
@@ -93360,13 +93684,13 @@ async function requireAuth(cmd) {
   if (STORED_PAT_COMMANDS.has(cmd) && readToken())
     return;
   console.error("");
-  console.error(`  ${brandTint("◆")}  ${import_picocolors69.default.bold("brainbase")}`);
+  console.error(`  ${brandTint("◆")}  ${import_picocolors71.default.bold("brainbase")}`);
   console.error("");
-  console.error(`  ${import_picocolors69.default.red("✗")}  You need to sign in to use ${import_picocolors69.default.bold("brainbase " + cmd)}.`);
+  console.error(`  ${import_picocolors71.default.red("✗")}  You need to sign in to use ${import_picocolors71.default.bold("brainbase " + cmd)}.`);
   if (status.reason)
-    console.error(`     ${import_picocolors69.default.dim(status.reason)}`);
+    console.error(`     ${import_picocolors71.default.dim(status.reason)}`);
   console.error("");
-  console.error(`     Run ${import_picocolors69.default.cyan("brainbase login")} to connect this device.`);
+  console.error(`     Run ${import_picocolors71.default.cyan("brainbase login")} to connect this device.`);
   console.error("");
   process14.exit(1);
 }
@@ -93547,6 +93871,12 @@ async function main() {
         await runTeam(sub, argv, { orgId: orgIdFlag, json: jsonFlag });
         break;
       }
+      case "member":
+      case "members": {
+        const sub = argv.shift();
+        await runMember(sub, argv, { orgId: orgIdFlag, json: jsonFlag });
+        break;
+      }
       case "task": {
         const sub = argv.shift();
         await runTask(cwd2, sub, argv);
@@ -93619,10 +93949,10 @@ async function main() {
         process14.exit(1);
     }
   } catch (err) {
-    console.error(import_picocolors69.default.red(`
+    console.error(import_picocolors71.default.red(`
 ${err.message}`));
     if (err instanceof ApiError && err.status === 401) {
-      console.error(`  Run ${import_picocolors69.default.cyan("brainbase login")} to connect this device.`);
+      console.error(`  Run ${import_picocolors71.default.cyan("brainbase login")} to connect this device.`);
     }
     if (process14.env.BRAINBASE_DEBUG)
       console.error(err.stack);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainbase-labs/cli",
-  "version": "0.42.0",
+  "version": "0.43.0",
   "description": "Pack, share, and install agent templates across harnesses (Claude Code, Codex, ...).",
   "type": "module",
   "bin": {