@brainbase-labs/cli 0.52.0 → 0.54.0

package/dist/index.js

@@ -35182,7 +35182,7 @@ var require_dist2 = __commonJS((exports, module) => {
 });
 
 // src/index.ts
-var import_picocolors80 = __toESM(require_picocolors(), 1);
+var import_picocolors81 = __toESM(require_picocolors(), 1);
 import process14 from "node:process";
 import fs94 from "node:fs";
 
@@ -36091,7 +36091,7 @@ function padStart(s, n) {
 // package.json
 var package_default = {
   name: "@brainbase-labs/cli",
-  version: "0.52.0",
+  version: "0.54.0",
   description: "Pack, share, and install agent templates across harnesses (Claude Code, Codex, ...).",
   type: "module",
   bin: {
@@ -67885,8 +67885,13 @@ function automationErrorEnvelope(command, error) {
   };
 }
 
-// src/core/interfaces-api.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+// src/ui/terminal-safe.ts
+function sanitizeLabel(s3) {
+  return s3.replace(/\u001b\][\s\S]*?(?:\u0007|\u001b\\|$)/g, "").replace(/\u001b\[[\u0030-\u003f]*[\u0020-\u002f]*[\u0040-\u007e]?/g, "").replace(/\u001b[\s\S]?/g, "").replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029]/g, "");
+}
+function sanitizeLines(s3) {
+  return s3.split(/\r\n|[\n\r\u2028\u2029]/).map(sanitizeLabel);
+}
 
 // src/core/fastapi-detail.ts
 function record(value) {
@@ -67896,19 +67901,22 @@ function fastApiDetails(body) {
   const detail = record(body)?.detail;
   return Array.isArray(detail) ? detail.filter((entry) => !!record(entry)) : [];
 }
+function fastApiValidationMessage(body) {
+  const parts = fastApiDetails(body).map((entry) => {
+    const msg = typeof entry.msg === "string" ? sanitizeLabel(entry.msg.trim()) : "";
+    if (!msg)
+      return null;
+    const loc = Array.isArray(entry.loc) ? sanitizeLabel(entry.loc.filter((part) => part !== "body").map(String).join(".")) : "";
+    return loc ? `${loc}: ${msg}` : msg;
+  }).filter((part) => !!part);
+  return parts.length ? parts.join("; ") : null;
+}
 function rejectsBodyField(body, field) {
   return fastApiDetails(body).some((entry) => entry.type === "extra_forbidden" && Array.isArray(entry.loc) && entry.loc[0] === "body" && entry.loc[1] === field);
 }
 
-// src/ui/terminal-safe.ts
-function sanitizeLabel(s3) {
-  return s3.replace(/\u001b\][\s\S]*?(?:\u0007|\u001b\\|$)/g, "").replace(/\u001b\[[\u0030-\u003f]*[\u0020-\u002f]*[\u0040-\u007e]?/g, "").replace(/\u001b[\s\S]?/g, "").replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029]/g, "");
-}
-function sanitizeLines(s3) {
-  return s3.split(/\r\n|[\n\r\u2028\u2029]/).map(sanitizeLabel);
-}
-
 // src/core/interfaces-api.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
 function isSettled(status) {
   return status === "succeeded" || status === "failed";
 }
@@ -68022,17 +68030,7 @@ function clean(value) {
 `);
 }
 function fieldMessages(fields) {
-  if (!Array.isArray(fields))
-    return null;
-  const parts = fields.map((entry) => {
-    const item = record2(entry);
-    if (!item)
-      return null;
-    const loc = Array.isArray(item.loc) ? sanitizeLabel(item.loc.filter((part) => part !== "body").map(String).join(".")) : "";
-    const msg = text2(item.msg);
-    return msg ? loc ? `${loc}: ${sanitizeLabel(msg)}` : sanitizeLabel(msg) : null;
-  }).filter((part) => !!part);
-  return parts.length ? parts.join("; ") : null;
+  return fastApiValidationMessage({ detail: fields });
 }
 function toInterfaceError(error, options = {}) {
   if (error instanceof InterfaceApiError || !(error instanceof ApiError))
@@ -68082,9 +68080,8 @@ function toInterfaceError(error, options = {}) {
       break;
     }
     default:
-      if (status === 422 && fastApiDetails(body).length) {
-        message = fieldMessages(record2(body)?.detail) ?? serverMessage;
-      }
+      if (status === 422)
+        message = fastApiValidationMessage(body) ?? serverMessage;
   }
   const rawInterfaceId = text2(details?.interface_id);
   const interfaceId = rawInterfaceId ? sanitizeLabel(rawInterfaceId) : null;
@@ -68450,6 +68447,7 @@ var REASONS = {
   "versioning is paused": "versioning_paused",
   "restore already in progress": "restore_in_progress"
 };
+var PIN_CONFLICTS = new Set(["pin_changed", "not_pinned"]);
 function sentence(value) {
   const trimmed = value.trim();
   const capital = trimmed.charAt(0).toUpperCase() + trimmed.slice(1);
@@ -68474,7 +68472,9 @@ function toVersionsError(error, agentId) {
   const detail = record2(body?.detail);
   const serverText = text2(body?.detail) ?? text2(detail?.message) ?? text2(body?.error);
   const said = clean(serverText ?? error.message);
-  const reason = serverText ? REASONS[serverText.toLowerCase()] ?? null : null;
+  const detailCode = text2(detail?.code);
+  const pinReason = status === 409 && detailCode && PIN_CONFLICTS.has(detailCode) ? detailCode : null;
+  const reason = pinReason ?? (serverText ? REASONS[serverText.toLowerCase()] ?? null : null);
   const details = {
     status,
     retry_after: retrySeconds(error.retryAfter),
@@ -68510,7 +68510,7 @@ function toVersionsError(error, agentId) {
       break;
     case 409:
       code = "conflict";
-      message = reason === "versioning_paused" ? "Versioning is paused on Brainbase, so nothing was changed. Try again later." : reason === "restore_in_progress" ? "A restore of this agent is already running. Wait for it to finish, then check `brainbase agent versions list`." : sentence(said);
+      message = reason === "versioning_paused" ? "Versioning is paused on Brainbase, so nothing was changed. Try again later." : reason === "restore_in_progress" ? "A restore of this agent is already running. Wait for it to finish, then check `brainbase agent versions list`." : reason === "pin_changed" ? `Someone changed this agent's pin after it was read, so nothing was changed. Run \`brainbase agent versions list --agent ${sanitizeLabel(agentId)}\` to see the pin now, then try again.` : reason === "not_pinned" ? "The agent is not pinned, so there was nothing to unpin." : sentence(said);
       break;
     case 502:
       if (details.sections?.some((section) => section.error !== null)) {
@@ -68638,11 +68638,21 @@ var agentVersionsApi = {
       throw new AgentVersionsError("No answer came back from the restore in time, so whether it happened is unknown. " + `Run \`brainbase agent versions list --agent ${sanitizeLabel(agentId)}\` and look for a new rollback version before trying again.`, "outcome_unknown", null, NO_DETAILS);
     }
   },
-  pin(agentId, versionId) {
-    return write2(agentId, pinPath(agentId), "PUT", { version_id: versionId });
+  async pin(agentId, versionId, currentPinId) {
+    try {
+      return await write2(agentId, pinPath(agentId), "PUT", {
+        version_id: versionId,
+        expected_version_id: currentPinId
+      });
+    } catch (error) {
+      if (!(error instanceof ApiError && error.status === 422 && rejectsBodyField(error.body, "expected_version_id"))) {
+        throw error;
+      }
+      return write2(agentId, pinPath(agentId), "PUT", { version_id: versionId });
+    }
   },
-  unpin(agentId) {
-    return write2(agentId, pinPath(agentId), "DELETE");
+  unpin(agentId, pinnedVersionId) {
+    return write2(agentId, `${pinPath(agentId)}${masListQuery({ expected_version_id: pinnedVersionId })}`, "DELETE");
   }
 };
 
@@ -81814,6 +81824,7 @@ function renderLines(lines, indent) {
 var import_picocolors46 = __toESM(require_picocolors(), 1);
 var PIN_NOTE = "New tasks will run this version's instructions, entrypoint, installed skills, tools, playbooks, harness and default model. " + "Secrets, credentials, machine settings, permission rules, connections and skill contents always stay current. " + "Tasks already running keep the version they started with.";
 var UNPIN_NOTE = "New tasks will run the agent's current configuration again. Tasks already running keep the version they started with.";
+var NOT_PINNED_NOTE = "This agent is not pinned, so nothing changed.";
 var PULL_NOTE = "This folder is now behind the cloud. Run `brainbase agent pull` to bring it up to date.";
 function pinnedNote(pin) {
   return `This agent is pinned to ${pinName(pin)}, so new tasks keep running that version, not the restored configuration, until you run \`brainbase agent versions unpin\`.`;
@@ -81995,18 +82006,18 @@ async function pin(ctx) {
     const agentId = resolveAgentId(ctx.cwd, parsed);
     const action = `Pinning agent ${sanitizeLabel(agentId)} to ${sanitizeLabel(ref)}`;
     requireConsentPossible(yes, json3, action, ctx.deps);
-    const { version: version2, capturePending } = await agentVersionsApi.resolve(agentId, ref);
+    const { version: version2, pin: current, capturePending } = await agentVersionsApi.resolve(agentId, ref);
     const accepted = await confirmChange({
       yes,
       json: json3,
       action,
-      consequence: PIN_NOTE,
+      consequence: current ? `${PIN_NOTE} It is pinned to ${pinName(current)} now.` : PIN_NOTE,
       question: `Pin the agent to ${versionName(version2)}?`,
       deps: ctx.deps
     });
     if (!accepted)
       return;
-    const result2 = await agentVersionsApi.pin(agentId, version2.id);
+    const result2 = await agentVersionsApi.pin(agentId, version2.id, current?.version_id ?? null);
     const notes = [...pendingNotes(capturePending), PIN_NOTE];
     if (json3) {
       printJson({ ...result2, notes });
@@ -82018,6 +82029,24 @@ async function pin(ctx) {
     printNotes(notes);
   });
 }
+function printNotPinned(json3) {
+  if (json3) {
+    printJson({ pinned_version_id: null, pinned_at: null, pinned_by: null, changed: false, notes: [NOT_PINNED_NOTE] });
+    return;
+  }
+  console.log(`
+  ${NOT_PINNED_NOTE}
+`);
+}
+async function unpinIfStill(agentId, versionId) {
+  try {
+    return await agentVersionsApi.unpin(agentId, versionId);
+  } catch (error2) {
+    if (error2 instanceof AgentVersionsError && error2.reason === "not_pinned")
+      return null;
+    throw error2;
+  }
+}
 async function unpin(ctx) {
   let json3 = wantsJson(ctx.args);
   await runReportingErrors(() => json3, async () => {
@@ -82028,24 +82057,33 @@ async function unpin(ctx) {
     const agentId = resolveAgentId(ctx.cwd, parsed);
     const action = `Unpinning agent ${sanitizeLabel(agentId)}`;
     requireConsentPossible(yes, json3, action, ctx.deps);
+    const { pin: current } = await agentVersionsApi.latest(agentId);
+    if (!current) {
+      printNotPinned(json3);
+      return;
+    }
     const accepted = await confirmChange({
       yes,
       json: json3,
       action,
       consequence: UNPIN_NOTE,
-      question: "Unpin the agent?",
+      question: `Unpin the agent from ${pinName(current)}?`,
       deps: ctx.deps
     });
     if (!accepted)
       return;
-    const result2 = await agentVersionsApi.unpin(agentId);
+    const result2 = await unpinIfStill(agentId, current.version_id);
+    if (!result2) {
+      printNotPinned(json3);
+      return;
+    }
     const notes = [UNPIN_NOTE];
     if (json3) {
-      printJson({ ...result2, notes });
+      printJson({ ...result2, changed: true, notes });
       return;
     }
     console.log(`
-  ${import_picocolors46.default.green("✓")} Unpinned
+  ${import_picocolors46.default.green("✓")} Unpinned from ${pinName(current)}
 `);
     printNotes(notes);
   });
@@ -85723,7 +85761,324 @@ function printTokenHelp() {
 }
 
 // src/cli/integrations.ts
+var import_picocolors63 = __toESM(require_picocolors(), 1);
+
+// src/cli/integration-context.ts
 var import_picocolors62 = __toESM(require_picocolors(), 1);
+
+// src/core/integration-contexts-api.ts
+var REQUEST_TIMEOUT_MS2 = 30000;
+var TOKEN_REFUSED_MESSAGE = "Integration contexts can only be created or ended with your own `brainbase login` session, and BRAINBASE_TOKEN is set. " + "Personal access tokens and task keys cannot create or end them. Unset BRAINBASE_TOKEN and run `brainbase login`.";
+async function resolveHumanSession() {
+  if (process.env.BRAINBASE_TOKEN?.trim()) {
+    throw new ApiError(TOKEN_REFUSED_MESSAGE, 401);
+  }
+  const session = await ensureFreshSession();
+  if (session)
+    return session;
+  const stored = readToken() ? ` The PAT saved in ${TOKEN_FILE} cannot create or end integration contexts.` : "";
+  const problem = readAuth() ? "Your login session has expired and could not be renewed." : "Not logged in.";
+  throw new ApiError(`${problem} Run \`brainbase login\`.${stored}`, 401);
+}
+async function contextRequest(pathname, body, operation) {
+  const session = await resolveHumanSession();
+  const base2 = masControlPlaneBaseUrl(session);
+  const send = async (refreshed) => {
+    const current = refreshed ?? session;
+    try {
+      return await fetch(`${masControlPlaneBaseUrl(current)}/v2${pathname}`, {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${current.access_token}`,
+          Accept: "application/json",
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify(body),
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS2)
+      });
+    } catch (err) {
+      throw new ApiError(`Network error: ${err.message}`);
+    }
+  };
+  const res = await sendWithAuthRetry(session, send);
+  let text3;
+  try {
+    text3 = await res.text();
+  } catch (err) {
+    throw new ApiError(`Network error while reading the response: ${err.message}`);
+  }
+  let parsed = text3;
+  try {
+    parsed = text3 ? JSON.parse(text3) : null;
+  } catch {}
+  if (!res.ok) {
+    throw new ApiError(contextErrorMessage(res.status, parsed, operation, base2), res.status, parsed);
+  }
+  return parsed;
+}
+function nonEmptyString(value2) {
+  return typeof value2 === "string" && value2.length > 0;
+}
+function absentOrString(value2) {
+  return value2 === undefined || typeof value2 === "string";
+}
+function isCreatedContext(value2) {
+  const body = record(value2);
+  return !!body && nonEmptyString(body.context_id) && nonEmptyString(body.renewal_handle) && absentOrString(body.renewal_expires_at) && absentOrString(body.max_expires_at);
+}
+function isEndedContext(value2) {
+  return typeof record(value2)?.state === "string";
+}
+function contextErrorMessage(status, body, operation, base2) {
+  const detail = record(body)?.detail;
+  if (status === 404) {
+    if (detail === "Not Found") {
+      return `Standalone integration contexts are not enabled on this Brainbase deployment (${hostOf(base2)}).`;
+    }
+    if (detail === "agent not found" && operation.kind === "create") {
+      return `Agent ${operation.agentId} was not found, or you cannot manage it. Creating an integration context needs management rights on the agent.`;
+    }
+    if (detail === "integration context not found" && operation.kind === "end") {
+      return `Integration context ${operation.contextId} was not found, or you cannot manage its agent.`;
+    }
+  }
+  if (status === 403 && record(detail)?.code === "human_credential_required") {
+    return "Brainbase refused this credential: integration contexts can only be created or ended with your own `brainbase login` session. Run `brainbase login` and try again.";
+  }
+  if (status === 401) {
+    return `Brainbase did not accept your login session (${sanitizeLabel(masApiErrorMessage(body, status))}). Run \`brainbase login\` to sign in again.`;
+  }
+  if (status === 422) {
+    const fields = fastApiValidationMessage(body);
+    if (fields)
+      return `Brainbase rejected the request: ${fields}`;
+  }
+  return sanitizeLabel(masApiErrorMessage(body, status));
+}
+function hostOf(base2) {
+  try {
+    return new URL(base2).host;
+  } catch {
+    return sanitizeLabel(base2);
+  }
+}
+var integrationContextsApi = {
+  async create(input) {
+    const created = await contextRequest("/integration-contexts", input, {
+      kind: "create",
+      agentId: input.agent_id
+    });
+    if (!isCreatedContext(created)) {
+      throw new ApiError("Brainbase answered without a context id and renewal handle.");
+    }
+    return created;
+  },
+  async end(contextId, reason) {
+    const ended = await contextRequest(`/integration-contexts/${encodeURIComponent(contextId)}/end`, { reason }, { kind: "end", contextId });
+    if (!isEndedContext(ended)) {
+      throw new ApiError("Brainbase answered without the context state.");
+    }
+    return ended;
+  }
+};
+
+// src/cli/integration-context.ts
+var MIN_LIFETIME_S = 60;
+var MAX_LIFETIME_S = 30 * 24 * 60 * 60;
+var DEFAULT_LIFETIME_S = 7 * 24 * 60 * 60;
+var DEFAULT_END_REASON = "ended with brainbase integrations context end";
+var MAX_REASON_LENGTH2 = 200;
+var APPLICATION_PATTERN = /^[a-z0-9][a-z0-9._:/-]{0,119}$/;
+var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var UNIT_SECONDS = { "": 1, s: 1, m: 60, h: 3600, d: 86400 };
+var CONTEXT_USAGE = `Usage: brainbase integrations context <create|end> [--json]
+
+  create [--agent <id>] --application <name> [--max-lifetime <dur>]
+      Let a program outside Brainbase (the Brainbase SDK) use the agent's
+      integrations on your behalf. Prints a renewal handle once: store it in
+      that program's secret store. It rotates on every renewal, so the program
+      must keep the newest one.
+      --agent         the agent's id; defaults to the agent this folder is linked to
+      --application   names the program: up to 120 of a-z 0-9 . _ : / -,
+                      starting with a letter or digit (e.g. billing-sync)
+      --max-lifetime  when the context ends at the latest: 60s to 30d, as
+                      seconds or <n>s, <n>m, <n>h, <n>d. Default 7d.
+
+  end <context-id> [--reason <text>]
+      End a context now. Its renewal handle and access grants stop working.
+      --reason        recorded with the context, 1-200 characters
+                      (default "${DEFAULT_END_REASON}")
+
+Both need your own \`brainbase login\` session and management rights on the
+agent. BRAINBASE_TOKEN and the PAT saved by \`brainbase token create\` are refused.
+`;
+async function runIntegrationContext(cwd2, argv, options) {
+  const { write: write3, fail: fail3 } = options;
+  const [action, ...rest2] = argv;
+  const parsed = parseContextArgs(rest2, "--application", "--max-lifetime", "--reason");
+  if (action === "help" || action === "--help" || action === "-h" || "help" in parsed) {
+    write3(CONTEXT_USAGE);
+    return 0;
+  }
+  if (action !== "create" && action !== "end") {
+    const problem = action ? `Unknown integrations context subcommand: ${sanitizeLabel(action)}.` : "Missing integrations context subcommand.";
+    return fail3(`${problem} ${CONTEXT_USAGE.split(`
+`)[0]}`);
+  }
+  if ("error" in parsed)
+    return fail3(parsed.error);
+  const { values: values2, positionals } = parsed;
+  if (action === "create") {
+    if (positionals.length > 0)
+      return fail3(`Unexpected argument: ${sanitizeLabel(positionals[0])}. ${CREATE_USAGE}`);
+    if (values2.has("--reason"))
+      return fail3(`--reason is for \`context end\`. ${CREATE_USAGE}`);
+    const target = cloudTargetAgent(cwd2, options);
+    if (!target)
+      return fail3(NO_AGENT_MESSAGE);
+    if ("error" in target)
+      return fail3(target.error);
+    if (!UUID_PATTERN.test(target.agentId)) {
+      return fail3(`${sanitizeLabel(target.agentId)} is not an agent id. --agent takes the agent's UUID, as \`brainbase agent list\` shows it.`);
+    }
+    const agentId = target.agentId.toLowerCase();
+    const application = values2.get("--application");
+    if (application === undefined)
+      return fail3(`--application is required. ${CREATE_USAGE}`);
+    if (!APPLICATION_PATTERN.test(application)) {
+      return fail3(`--application must be 1-120 characters of lowercase letters, digits and . _ : / -, starting with a letter or digit (e.g. billing-sync); got "${sanitizeLabel(application)}".`);
+    }
+    const rawLifetime = values2.get("--max-lifetime");
+    const lifetime = rawLifetime === undefined ? DEFAULT_LIFETIME_S : parseMaxLifetime(rawLifetime);
+    if (typeof lifetime !== "number")
+      return fail3(lifetime.error);
+    let created;
+    try {
+      created = await integrationContextsApi.create({
+        agent_id: agentId,
+        application,
+        max_lifetime_s: lifetime
+      });
+    } catch (err) {
+      return fail3(`brainbase integrations context create failed: ${message(err)}`);
+    }
+    if (options.json) {
+      write3(JSON.stringify(created) + `
+`);
+      return 0;
+    }
+    write3(renderCreated(created, agentId, application));
+    return 0;
+  }
+  if (values2.has("--application") || values2.has("--max-lifetime")) {
+    return fail3(`--application and --max-lifetime are for \`context create\`. ${END_USAGE}`);
+  }
+  if (positionals.length !== 1)
+    return fail3(END_USAGE);
+  const contextId = positionals[0];
+  if (!UUID_PATTERN.test(contextId)) {
+    return fail3(`${sanitizeLabel(contextId)} is not a context id. Pass the context_id \`context create\` printed.`);
+  }
+  const reason = (values2.get("--reason") ?? DEFAULT_END_REASON).trim();
+  const reasonLength = [...reason].length;
+  if (reasonLength < 1 || reasonLength > MAX_REASON_LENGTH2) {
+    return fail3(`--reason must be 1-${MAX_REASON_LENGTH2} characters; got ${reasonLength}.`);
+  }
+  let ended;
+  try {
+    ended = await integrationContextsApi.end(contextId.toLowerCase(), reason);
+  } catch (err) {
+    return fail3(`brainbase integrations context end failed: ${message(err)}`);
+  }
+  const id = contextId.toLowerCase();
+  if (options.json) {
+    write3(JSON.stringify({ context_id: id, ...ended }) + `
+`);
+    return 0;
+  }
+  const state = sanitizeLabel(ended.state);
+  write3(state === "ended" ? `${import_picocolors62.default.green("✓")} Ended integration context ${id}. Its renewal handle and access grants no longer work.
+` : `Integration context ${id} is ${state}. Its renewal handle and access grants no longer work.
+`);
+  return 0;
+}
+var CREATE_USAGE = "Usage: brainbase integrations context create [--agent <id>] --application <name> [--max-lifetime <dur>]";
+var END_USAGE = "Usage: brainbase integrations context end <context-id> [--reason <text>]";
+function parseContextArgs(rest2, ...valueFlags) {
+  for (let i = 0;i < rest2.length; i++) {
+    if (valueFlags.includes(rest2[i]))
+      i++;
+    else if (rest2[i] === "--help" || rest2[i] === "-h")
+      return { help: true };
+  }
+  const values2 = new Map;
+  const positionals = [];
+  for (let i = 0;i < rest2.length; i++) {
+    const arg = rest2[i];
+    const eq = arg.indexOf("=");
+    const name = arg.startsWith("--") && eq > 0 ? arg.slice(0, eq) : arg;
+    if (valueFlags.includes(name)) {
+      let value2;
+      if (name !== arg) {
+        value2 = arg.slice(eq + 1);
+      } else {
+        value2 = rest2[i + 1];
+        if (value2 === undefined || name !== "--reason" && value2.startsWith("-")) {
+          return { error: `${name} needs a value.` };
+        }
+        i++;
+      }
+      if (values2.has(name))
+        return { error: `${name} was given more than once.` };
+      values2.set(name, value2);
+      continue;
+    }
+    if (arg.startsWith("-")) {
+      return { error: `Unknown option for brainbase integrations context: ${sanitizeLabel(arg)}` };
+    }
+    positionals.push(arg);
+  }
+  return { values: values2, positionals };
+}
+function parseMaxLifetime(raw) {
+  const match = /^(\d+)([smhd]?)$/i.exec(raw.trim());
+  if (!match) {
+    return { error: `--max-lifetime takes seconds or a duration such as 90m, 12h or 7d; got "${sanitizeLabel(raw)}".` };
+  }
+  const seconds = Number(match[1]) * UNIT_SECONDS[match[2].toLowerCase()];
+  if (!Number.isSafeInteger(seconds) || seconds < MIN_LIFETIME_S || seconds > MAX_LIFETIME_S) {
+    return {
+      error: `--max-lifetime must be between 60s and 30d (${MAX_LIFETIME_S} seconds); got "${sanitizeLabel(raw)}".`
+    };
+  }
+  return seconds;
+}
+function renderCreated(created, agentId, application) {
+  const id = sanitizeLabel(created.context_id);
+  const lines = [
+    `${import_picocolors62.default.green("✓")} Created integration context ${id}`,
+    `  ${import_picocolors62.default.dim(`agent ${agentId} · application ${application}`)}`,
+    "",
+    "  Renewal handle:",
+    "",
+    `    ${sanitizeLabel(created.renewal_handle)}`,
+    "",
+    import_picocolors62.default.yellow("  Store it now in the SDK program's secret store: it is shown only this once, and it rotates on every renewal, so the program must save the newest handle each time."),
+    "",
+    `  Handle expires  ${sanitizeLabel(created.renewal_expires_at ?? "unknown")}`,
+    `  Context ends    ${sanitizeLabel(created.max_expires_at ?? "unknown")}  ${import_picocolors62.default.dim("(its maximum lifetime)")}`,
+    "",
+    import_picocolors62.default.dim(`  End it sooner with \`brainbase integrations context end ${id}\`.`),
+    ""
+  ];
+  return lines.join(`
+`);
+}
+function message(err) {
+  return sanitizeLabel(err?.message ?? String(err));
+}
+
+// src/cli/integrations.ts
 var EFFECTS = ["allow", "ask", "deny"];
 var USAGE = `Usage: brainbase integrations <command> [--agent <id>] [--json]
 
@@ -85735,6 +86090,12 @@ var USAGE = `Usage: brainbase integrations <command> [--agent <id>] [--json]
   disconnect <app>              delete the app's connected account [--account <id>] [--yes]
   remove <app>                  uninstall an app that needs no account
   allow|ask|deny <app>[.<action>]  set the permission for an app or one action
+  context create --application <name> [--max-lifetime <dur>]
+                                let a program outside Brainbase (the SDK) use the agent's
+                                integrations; prints a renewal handle once. Lifetime 60s-30d, default 7d
+  context end <context-id> [--reason <text>]
+                                end a standalone integration context now
+                                (\`brainbase integrations context --help\` for details)
 `;
 var POLL_INTERVAL_MS2 = 2000;
 var MAX_CONSECUTIVE_POLL_FAILURES2 = 5;
@@ -85744,12 +86105,12 @@ async function runIntegrations(cwd2, sub, argv, options) {
   const write3 = options.write ?? ((s3) => process.stdout.write(s3));
   const writeErr = options.writeErr ?? ((s3) => process.stderr.write(s3));
   const api4 = { ...integrationsApi, ...options.api };
-  const fail3 = (message) => {
+  const fail3 = (message2) => {
     if (options.json)
-      write3(JSON.stringify({ error: message }) + `
+      write3(JSON.stringify({ error: message2 }) + `
 `);
     else
-      writeErr(message + `
+      writeErr(message2 + `
 `);
     return 1;
   };
@@ -85758,6 +86119,15 @@ async function runIntegrations(cwd2, sub, argv, options) {
 ` : human);
     return 0;
   };
+  if (sub === "context") {
+    return await runIntegrationContext(cwd2, argv, {
+      json: options.json,
+      agentId: options.agentId,
+      resolveAgentId: options.resolveAgentId,
+      write: write3,
+      fail: fail3
+    });
+  }
   const isHelpFlag = (s3) => s3 === "--help" || s3 === "-h";
   if (sub === "help" || isHelpFlag(sub) || argv.some(isHelpFlag)) {
     write3(USAGE);
@@ -85783,7 +86153,7 @@ ${USAGE}`);
       const apps = await api4.searchApps(arg);
       return out({ apps }, renderSearch(apps));
     } catch (err) {
-      return fail3(`brainbase integrations search failed: ${message(err)}`);
+      return fail3(`brainbase integrations search failed: ${message2(err)}`);
     }
   }
   const target = cloudTargetAgent(cwd2, options);
@@ -85810,7 +86180,7 @@ ${USAGE}`);
         return await setEffect(agentId, sub, arg);
     }
   } catch (err) {
-    return fail3(`brainbase integrations ${sub} failed: ${message(err)}`);
+    return fail3(`brainbase integrations ${sub} failed: ${message2(err)}`);
   }
   async function list3(agentId2) {
     const [accounts, noAuthApps, permissions] = await Promise.all([
@@ -85863,7 +86233,7 @@ ${USAGE}`);
     if (needsAccount(app))
       return await connect2(agentId2, slug, app);
     const added = await api4.addNoAuthApp(agentId2, slug);
-    return out({ app: added.appSlug, name: added.name, needs_account: false, added: true }, `${import_picocolors62.default.green("✓")} Added ${import_picocolors62.default.bold(label2(added.name))}. It needs no account; your agent can use it on its next turn.
+    return out({ app: added.appSlug, name: added.name, needs_account: false, added: true }, `${import_picocolors63.default.green("✓")} Added ${import_picocolors63.default.bold(label2(added.name))}. It needs no account; your agent can use it on its next turn.
 `);
   }
   async function connect2(agentId2, slug, known2) {
@@ -85883,20 +86253,20 @@ ${USAGE}`);
       return 0;
     }
     const interactive = options.interactive ?? isInteractive();
-    write3(`Open this link to connect ${import_picocolors62.default.bold(name)}:
+    write3(`Open this link to connect ${import_picocolors63.default.bold(name)}:
 
-  ${import_picocolors62.default.cyan(url2)}
+  ${import_picocolors63.default.cyan(url2)}
 
 `);
-    write3(import_picocolors62.default.dim(`Anyone with this link can connect an account to this agent until it expires, so do not share it.
+    write3(import_picocolors63.default.dim(`Anyone with this link can connect an account to this agent until it expires, so do not share it.
 `));
     if (!options.noOpen && interactive) {
-      write3(import_picocolors62.default.dim(`Opening your browser…
+      write3(import_picocolors63.default.dim(`Opening your browser…
 `));
       (options.openUrl ?? openInBrowser)(url2);
     }
     if (options.noWait) {
-      write3(import_picocolors62.default.dim("Not waiting. Run `brainbase integrations list` to see when it is connected.\n"));
+      write3(import_picocolors63.default.dim("Not waiting. Run `brainbase integrations list` to see when it is connected.\n"));
       return 0;
     }
     const controller = new AbortController;
@@ -85929,7 +86299,7 @@ ${USAGE}`);
       if (spinner2)
         spinner2.stop(text3, ok ? 0 : 2);
       else if (ok)
-        write3(`${import_picocolors62.default.green("✔")} ${text3}
+        write3(`${import_picocolors63.default.green("✔")} ${text3}
 `);
       else
         writeErr(`${text3}
@@ -85969,11 +86339,11 @@ ${USAGE}`);
     const confirm = options.confirmDisconnect ?? promptForDisconnect;
     const accountLabel = account.name ? `${label2(account.name)} (${account.id})` : account.id;
     if (!await confirm(`Disconnect ${label2(slug)} account ${accountLabel}? Everyone using this agent loses it.`, options.yes)) {
-      return out({ app: slug, account_id: account.id, disconnected: false, outcome: "declined" }, `  ${import_picocolors62.default.dim("Left alone.")}
+      return out({ app: slug, account_id: account.id, disconnected: false, outcome: "declined" }, `  ${import_picocolors63.default.dim("Left alone.")}
 `);
     }
     await api4.deleteAccount(agentId2, account.id);
-    return out({ app: slug, account_id: account.id, disconnected: true }, `${import_picocolors62.default.green("✓")} Disconnected ${import_picocolors62.default.bold(label2(slug))} account ${accountLabel}.
+    return out({ app: slug, account_id: account.id, disconnected: true }, `${import_picocolors63.default.green("✓")} Disconnected ${import_picocolors63.default.bold(label2(slug))} account ${accountLabel}.
 `);
   }
   async function remove2(agentId2, slug) {
@@ -85986,7 +86356,7 @@ ${USAGE}`);
       return fail3(`${label2(slug)} is not installed on this agent.`);
     }
     await api4.removeNoAuthApp(agentId2, slug);
-    return out({ app: slug, removed: true }, `${import_picocolors62.default.green("✓")} Removed ${import_picocolors62.default.bold(label2(slug))}.
+    return out({ app: slug, removed: true }, `${import_picocolors63.default.green("✓")} Removed ${import_picocolors63.default.bold(label2(slug))}.
 `);
   }
   async function setEffect(agentId2, effect, raw) {
@@ -85999,7 +86369,7 @@ ${USAGE}`);
     const capability = pattern(appSlug(app), action);
     await api4.setPermission(agentId2, capability, effect);
     const scope = action ? `${label2(action)} on ${label2(app)}` : `every ${label2(app)} action without its own rule`;
-    return out({ capability_pattern: capability, effect }, `${import_picocolors62.default.green("✓")} ${capability} → ${import_picocolors62.default.bold(effect)}  ${import_picocolors62.default.dim(`(${scope})`)}
+    return out({ capability_pattern: capability, effect }, `${import_picocolors63.default.green("✓")} ${capability} → ${import_picocolors63.default.bold(effect)}  ${import_picocolors63.default.dim(`(${scope})`)}
 `);
   }
 }
@@ -86009,7 +86379,7 @@ function appSlug(raw) {
 function label2(s3) {
   return sanitizeLabel(s3);
 }
-function message(err) {
+function message2(err) {
   return sanitizeLabel(err?.message ?? String(err));
 }
 function needsAccount(app) {
@@ -86052,27 +86422,27 @@ async function promptForDisconnect(question, yes) {
   return ensureNotCancelled(answer);
 }
 var EFFECT_COLOR = {
-  allow: import_picocolors62.default.green,
-  ask: import_picocolors62.default.yellow,
-  deny: import_picocolors62.default.red
+  allow: import_picocolors63.default.green,
+  ask: import_picocolors63.default.yellow,
+  deny: import_picocolors63.default.red
 };
 function effectLabel(effect, width = 0) {
-  return (EFFECT_COLOR[effect] ?? import_picocolors62.default.dim)(sanitizeLabel(effect).padEnd(width));
+  return (EFFECT_COLOR[effect] ?? import_picocolors63.default.dim)(sanitizeLabel(effect).padEnd(width));
 }
 function renderList(rows, permissions) {
   const lines = [""];
   if (!permissions.permissionsAvailable) {
-    lines.push(import_picocolors62.default.yellow("  Integrations only work on Kafka agents for now; this agent cannot use them."), "");
+    lines.push(import_picocolors63.default.yellow("  Integrations only work on Kafka agents for now; this agent cannot use them."), "");
   }
   if (rows.length === 0) {
-    lines.push(import_picocolors62.default.dim("  No integrations on this agent."));
-    lines.push(import_picocolors62.default.dim("  Find one with `brainbase integrations search <query>`, then `brainbase integrations add <app>`."), "");
+    lines.push(import_picocolors63.default.dim("  No integrations on this agent."));
+    lines.push(import_picocolors63.default.dim("  Find one with `brainbase integrations search <query>`, then `brainbase integrations add <app>`."), "");
     return lines.join(`
 `);
   }
   for (const row of rows) {
     const healthy = row.accounts.every((a3) => a3.healthy);
-    const mark = healthy ? import_picocolors62.default.green("✓") : import_picocolors62.default.yellow("!");
+    const mark = healthy ? import_picocolors63.default.green("✓") : import_picocolors63.default.yellow("!");
     const bits = [sanitizeLabel(row.name)];
     if (!row.needs_account)
       bits.push("no account needed");
@@ -86080,35 +86450,35 @@ function renderList(rows, permissions) {
       bits.push(`account ${account.name ? sanitizeLabel(account.name) : account.id}${account.healthy ? "" : " (needs reconnecting)"}`);
     }
     const effect = row.effect ?? permissions.defaultEffect;
-    lines.push(`  ${mark} ${import_picocolors62.default.bold(sanitizeLabel(row.app))}  ${import_picocolors62.default.dim(bits.join(" · "))}  ${effectLabel(effect)}${row.effect ? "" : import_picocolors62.default.dim(" (default)")}`);
+    lines.push(`  ${mark} ${import_picocolors63.default.bold(sanitizeLabel(row.app))}  ${import_picocolors63.default.dim(bits.join(" · "))}  ${effectLabel(effect)}${row.effect ? "" : import_picocolors63.default.dim(" (default)")}`);
   }
-  lines.push("", import_picocolors62.default.dim("  Run `brainbase integrations actions <app>` to see and set per-action permissions."), "");
+  lines.push("", import_picocolors63.default.dim("  Run `brainbase integrations actions <app>` to see and set per-action permissions."), "");
   return lines.join(`
 `);
 }
 function renderSearch(apps) {
   if (apps.length === 0)
-    return import_picocolors62.default.dim("No apps match.") + `
+    return import_picocolors63.default.dim("No apps match.") + `
 `;
   const lines = [""];
   for (const app of apps) {
-    const hint = needsAccount(app) ? "" : import_picocolors62.default.dim("  no account needed");
-    lines.push(`  ${import_picocolors62.default.bold(sanitizeLabel(app.nameSlug))}  ${sanitizeLabel(app.name)}${hint}`);
+    const hint = needsAccount(app) ? "" : import_picocolors63.default.dim("  no account needed");
+    lines.push(`  ${import_picocolors63.default.bold(sanitizeLabel(app.nameSlug))}  ${sanitizeLabel(app.name)}${hint}`);
   }
-  lines.push("", import_picocolors62.default.dim("  Add one with `brainbase integrations add <app>`."), "");
+  lines.push("", import_picocolors63.default.dim("  Add one with `brainbase integrations add <app>`."), "");
   return lines.join(`
 `);
 }
 function renderActions(slug, rows) {
   if (rows.length === 0)
-    return import_picocolors62.default.dim(`No actions found for ${sanitizeLabel(slug)}.`) + `
+    return import_picocolors63.default.dim(`No actions found for ${sanitizeLabel(slug)}.`) + `
 `;
   const lines = [""];
   for (const row of rows) {
-    const source = import_picocolors62.default.dim((row.source === "action" ? "" : `(${row.source})`).padEnd(9));
-    lines.push(`  ${effectLabel(row.effect, 5)} ${source} ${import_picocolors62.default.bold(sanitizeLabel(row.key))}  ${import_picocolors62.default.dim(sanitizeLabel(row.name))}`);
+    const source = import_picocolors63.default.dim((row.source === "action" ? "" : `(${row.source})`).padEnd(9));
+    lines.push(`  ${effectLabel(row.effect, 5)} ${source} ${import_picocolors63.default.bold(sanitizeLabel(row.key))}  ${import_picocolors63.default.dim(sanitizeLabel(row.name))}`);
   }
-  lines.push("", import_picocolors62.default.dim(`  Change one with \`brainbase integrations allow|ask|deny ${sanitizeLabel(slug)}.<action>\`, or the whole app with \`… ${sanitizeLabel(slug)}\`.`), "");
+  lines.push("", import_picocolors63.default.dim(`  Change one with \`brainbase integrations allow|ask|deny ${sanitizeLabel(slug)}.<action>\`, or the whole app with \`… ${sanitizeLabel(slug)}\`.`), "");
   return lines.join(`
 `);
 }
@@ -86172,14 +86542,14 @@ async function waitForAccount(agentId, slug, before2, options) {
 }
 
 // src/cli/task.ts
-var import_picocolors68 = __toESM(require_picocolors(), 1);
+var import_picocolors69 = __toESM(require_picocolors(), 1);
 
 // src/cli/task-create.ts
-var import_picocolors64 = __toESM(require_picocolors(), 1);
+var import_picocolors65 = __toESM(require_picocolors(), 1);
 import { randomUUID as randomUUID4 } from "node:crypto";
 
 // src/cli/task-update.ts
-var import_picocolors63 = __toESM(require_picocolors(), 1);
+var import_picocolors64 = __toESM(require_picocolors(), 1);
 var TASK_UPDATE_USAGE = "brainbase task update <task-id> [--title <text> | --clear-title] [--metadata key=value]... [--unset-metadata <key>]... [--clear-metadata] [--model <id> | --clear-model] [--json]";
 var TITLE_MAX = 200;
 var MODEL_UNSUPPORTED = "This control plane does not support changing a task's model yet.";
@@ -86318,25 +86688,25 @@ function applyLabelEdit(current, edit) {
 }
 function format(task) {
   const lines = [""];
-  const title = task.title?.trim() ? sanitizeLabel(task.title) : import_picocolors63.default.dim("(untitled)");
-  lines.push(`  ${import_picocolors63.default.green("updated")}  ${import_picocolors63.default.bold(title)}`);
+  const title = task.title?.trim() ? sanitizeLabel(task.title) : import_picocolors64.default.dim("(untitled)");
+  lines.push(`  ${import_picocolors64.default.green("updated")}  ${import_picocolors64.default.bold(title)}`);
   lines.push("");
-  lines.push(`  ${import_picocolors63.default.dim("task")}     ${sanitizeLabel(task.id)}`);
+  lines.push(`  ${import_picocolors64.default.dim("task")}     ${sanitizeLabel(task.id)}`);
   if (task.model !== undefined) {
-    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors63.default.dim("agent default");
-    lines.push(`  ${import_picocolors63.default.dim("model")}    ${model}`);
+    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors64.default.dim("agent default");
+    lines.push(`  ${import_picocolors64.default.dim("model")}    ${model}`);
   }
   const metadata = Object.entries(task.metadata ?? {});
   lines.push("");
-  lines.push(`  ${import_picocolors63.default.bold(import_picocolors63.default.dim("METADATA"))}`);
+  lines.push(`  ${import_picocolors64.default.bold(import_picocolors64.default.dim("METADATA"))}`);
   if (metadata.length === 0) {
-    lines.push(`  ${import_picocolors63.default.dim("none")}`);
+    lines.push(`  ${import_picocolors64.default.dim("none")}`);
   }
   for (const [key2, value2] of metadata) {
-    lines.push(`  ${import_picocolors63.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(value2)}`);
+    lines.push(`  ${import_picocolors64.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(value2)}`);
   }
   lines.push("");
-  lines.push(`  ${import_picocolors63.default.dim("read it with")} ${import_picocolors63.default.cyan(`brainbase task get ${sanitizeLabel(task.id)}`)}`, "");
+  lines.push(`  ${import_picocolors64.default.dim("read it with")} ${import_picocolors64.default.cyan(`brainbase task get ${sanitizeLabel(task.id)}`)}`, "");
   return lines.join(`
 `);
 }
@@ -86382,13 +86752,13 @@ async function resolveAgentId2(cwd2, agentId, interfaceId, readLocalManifest) {
   return manifest.id;
 }
 function isPublishScopeError(error2) {
-  const message2 = error2 instanceof Error ? error2.message : String(error2);
+  const message3 = error2 instanceof Error ? error2.message : String(error2);
   const body = error2 && typeof error2 === "object" && "body" in error2 ? JSON.stringify(error2.body) : "";
-  return /PAT lacks required scope:\s*publish/i.test(`${message2} ${body}`);
+  return /PAT lacks required scope:\s*publish/i.test(`${message3} ${body}`);
 }
 async function runTaskCreate(cwd2, options, dependencies = {}) {
   const idempotencyKey = (dependencies.randomUUID ?? randomUUID4)();
-  const message2 = requiredValue(options.message, "--message");
+  const message3 = requiredValue(options.message, "--message");
   const interfaceId = optionalValue(options.interfaceId, "--interface");
   const agentId = await resolveAgentId2(cwd2, options.agentId, interfaceId, dependencies.readManifest ?? readManifest);
   const title = optionalValue(options.title, "--title");
@@ -86398,7 +86768,7 @@ async function runTaskCreate(cwd2, options, dependencies = {}) {
   const version2 = versionRef ? (await agentVersionsApi.resolve(agentId, versionRef)).version : undefined;
   const input = {
     agent_id: agentId,
-    initial_messages: [{ role: "user", content: message2 }],
+    initial_messages: [{ role: "user", content: message3 }],
     auto_run: true,
     ...title ? { title } : {},
     ...model ? { default_model: model } : {},
@@ -86474,24 +86844,24 @@ async function waitForCreatedTask(created, options, dependencies, version2) {
       return;
     }
     if (outcome.kind === "timeout") {
-      console.log(import_picocolors64.default.yellow(`Timed out after ${options.timeoutSeconds}s with the task still ${status}.`));
+      console.log(import_picocolors65.default.yellow(`Timed out after ${options.timeoutSeconds}s with the task still ${status}.`));
       return;
     }
     if (outcome.kind === "interrupted") {
-      console.log(import_picocolors64.default.yellow("Interrupted. The task is still running."));
+      console.log(import_picocolors65.default.yellow("Interrupted. The task is still running."));
       return;
     }
-    console.log(code === 0 ? import_picocolors64.default.green("Task completed.") : import_picocolors64.default.red(`Task finished as ${status}.`));
+    console.log(code === 0 ? import_picocolors65.default.green("Task completed.") : import_picocolors65.default.red(`Task finished as ${status}.`));
   } finally {
     process.removeListener("SIGINT", onSigint);
   }
 }
 
 // src/cli/task-get.ts
-var import_picocolors66 = __toESM(require_picocolors(), 1);
+var import_picocolors67 = __toESM(require_picocolors(), 1);
 
 // src/cli/task-list.ts
-var import_picocolors65 = __toESM(require_picocolors(), 1);
+var import_picocolors66 = __toESM(require_picocolors(), 1);
 
 // src/core/agent-names.ts
 async function agentNames(ids) {
@@ -86556,29 +86926,29 @@ function labelFilter(options) {
 function formatTaskList(tasks, names, agentId, interfaceId, labelFiltered = false) {
   const lines = [""];
   if (tasks.length === 0 && labelFiltered) {
-    lines.push(`  ${import_picocolors65.default.dim("No tasks carry every label given with --metadata.")}`, "");
+    lines.push(`  ${import_picocolors66.default.dim("No tasks carry every label given with --metadata.")}`, "");
     return lines.join(`
 `);
   }
   if (tasks.length === 0 && interfaceId) {
     const id = sanitizeLabel(interfaceId);
-    lines.push(`  ${import_picocolors65.default.dim(`No build conversations for interface ${id}.`)}`, "", `  ${import_picocolors65.default.dim("start one with")} ${import_picocolors65.default.cyan(`brainbase interface build ${id} "..."`)}`, "");
+    lines.push(`  ${import_picocolors66.default.dim(`No build conversations for interface ${id}.`)}`, "", `  ${import_picocolors66.default.dim("start one with")} ${import_picocolors66.default.cyan(`brainbase interface build ${id} "..."`)}`, "");
     return lines.join(`
 `);
   }
   if (tasks.length === 0) {
-    lines.push(`  ${import_picocolors65.default.dim(agentId ? `No tasks for agent ${agentId}.` : "No tasks yet.")}`, "", `  ${import_picocolors65.default.dim("start one with")} ${import_picocolors65.default.cyan('brainbase task create --message "..."')}`, "");
+    lines.push(`  ${import_picocolors66.default.dim(agentId ? `No tasks for agent ${agentId}.` : "No tasks yet.")}`, "", `  ${import_picocolors66.default.dim("start one with")} ${import_picocolors66.default.cyan('brainbase task create --message "..."')}`, "");
     return lines.join(`
 `);
   }
   for (const task of tasks) {
-    const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors65.default.dim("(untitled)");
-    lines.push(`  ${statusLabel(task.status)}  ${import_picocolors65.default.bold(title)}`);
-    lines.push(`    ${import_picocolors65.default.dim(sanitizeLabel(task.id))}`);
-    lines.push(`    ${import_picocolors65.default.dim(`agent ${agentLabel(task.agent_id, names)} · created ${sanitizeLabel(task.created_at)}`)}`);
+    const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors66.default.dim("(untitled)");
+    lines.push(`  ${statusLabel(task.status)}  ${import_picocolors66.default.bold(title)}`);
+    lines.push(`    ${import_picocolors66.default.dim(sanitizeLabel(task.id))}`);
+    lines.push(`    ${import_picocolors66.default.dim(`agent ${agentLabel(task.agent_id, names)} · created ${sanitizeLabel(task.created_at)}`)}`);
     lines.push("");
   }
-  lines.push(`  ${import_picocolors65.default.dim("inspect one with")} ${import_picocolors65.default.cyan("brainbase task get <id>")}`, "");
+  lines.push(`  ${import_picocolors66.default.dim("inspect one with")} ${import_picocolors66.default.cyan("brainbase task get <id>")}`, "");
   return lines.join(`
 `);
 }
@@ -86586,16 +86956,16 @@ function statusLabel(status) {
   const padded = sanitizeLabel(status).padEnd(14);
   switch (status) {
     case "success":
-      return import_picocolors65.default.green(padded);
+      return import_picocolors66.default.green(padded);
     case "fail":
-      return import_picocolors65.default.red(padded);
+      return import_picocolors66.default.red(padded);
     case "need_more_info":
-      return import_picocolors65.default.yellow(padded);
+      return import_picocolors66.default.yellow(padded);
     case "running":
     case "initializing":
-      return import_picocolors65.default.cyan(padded);
+      return import_picocolors66.default.cyan(padded);
     default:
-      return import_picocolors65.default.dim(padded);
+      return import_picocolors66.default.dim(padded);
   }
 }
 
@@ -86629,60 +86999,60 @@ async function readEvalRuns(task) {
 }
 function format2(task, evals, names) {
   const lines = [""];
-  const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors66.default.dim("(untitled)");
+  const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors67.default.dim("(untitled)");
   const id = sanitizeLabel(task.id);
-  lines.push(`  ${statusLabel(task.status)}  ${import_picocolors66.default.bold(title)}`);
+  lines.push(`  ${statusLabel(task.status)}  ${import_picocolors67.default.bold(title)}`);
   lines.push("");
-  lines.push(`  ${import_picocolors66.default.dim("task")}     ${id}`);
-  lines.push(`  ${import_picocolors66.default.dim("agent")}    ${agentLabel(task.agent_id, names)}`);
+  lines.push(`  ${import_picocolors67.default.dim("task")}     ${id}`);
+  lines.push(`  ${import_picocolors67.default.dim("agent")}    ${agentLabel(task.agent_id, names)}`);
   if (task.model !== undefined) {
-    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors66.default.dim("agent default");
-    lines.push(`  ${import_picocolors66.default.dim("model")}    ${model}`);
+    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors67.default.dim("agent default");
+    lines.push(`  ${import_picocolors67.default.dim("model")}    ${model}`);
   }
-  lines.push(`  ${import_picocolors66.default.dim("created")}  ${sanitizeLabel(task.created_at)}`);
+  lines.push(`  ${import_picocolors67.default.dim("created")}  ${sanitizeLabel(task.created_at)}`);
   if (task.parent_task_id) {
-    lines.push(`  ${import_picocolors66.default.dim("parent")}   ${sanitizeLabel(task.parent_task_id)}`);
+    lines.push(`  ${import_picocolors67.default.dim("parent")}   ${sanitizeLabel(task.parent_task_id)}`);
   }
   if (task.machine_id) {
     const size2 = task.machine_size ? ` (size ${sanitizeLabel(task.machine_size)})` : "";
-    lines.push(`  ${import_picocolors66.default.dim("machine")}  ${sanitizeLabel(task.machine_id)}${size2}`);
+    lines.push(`  ${import_picocolors67.default.dim("machine")}  ${sanitizeLabel(task.machine_id)}${size2}`);
   }
   if (task.sandbox_id)
-    lines.push(`  ${import_picocolors66.default.dim("sandbox")}  ${sanitizeLabel(task.sandbox_id)}`);
+    lines.push(`  ${import_picocolors67.default.dim("sandbox")}  ${sanitizeLabel(task.sandbox_id)}`);
   const [failure, ...failureRest] = sanitizeLines(failureSummary(task) ?? "").filter((line2) => line2.trim());
   if (failure) {
     const label3 = "  failure  ";
     lines.push("");
-    lines.push(`  ${import_picocolors66.default.red("failure")}  ${failure}`);
+    lines.push(`  ${import_picocolors67.default.red("failure")}  ${failure}`);
     for (const line2 of failureRest)
       lines.push(`${" ".repeat(label3.length)}${line2}`);
   }
   const metadata = Object.entries(task.metadata ?? {});
   if (metadata.length > 0) {
     lines.push("");
-    lines.push(`  ${import_picocolors66.default.bold(import_picocolors66.default.dim("METADATA"))}`);
+    lines.push(`  ${import_picocolors67.default.bold(import_picocolors67.default.dim("METADATA"))}`);
     for (const [key2, value2] of metadata) {
-      lines.push(`  ${import_picocolors66.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(String(value2))}`);
+      lines.push(`  ${import_picocolors67.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(String(value2))}`);
     }
   }
   lines.push("");
-  lines.push(`  ${import_picocolors66.default.bold(import_picocolors66.default.dim("EVAL VERDICTS"))}`);
+  lines.push(`  ${import_picocolors67.default.bold(import_picocolors67.default.dim("EVAL VERDICTS"))}`);
   if (evals.unavailable) {
-    lines.push(`  ${import_picocolors66.default.dim(sanitizeLabel(evals.unavailable))}`);
+    lines.push(`  ${import_picocolors67.default.dim(sanitizeLabel(evals.unavailable))}`);
   } else if (evals.runs.length === 0) {
-    lines.push(`  ${import_picocolors66.default.dim("none")}`);
+    lines.push(`  ${import_picocolors67.default.dim("none")}`);
   } else {
     for (const run of evals.runs) {
-      const verdict = run.passed === true ? import_picocolors66.default.green("pass") : run.passed === false ? import_picocolors66.default.red("fail") : import_picocolors66.default.dim(sanitizeLabel(run.status));
+      const verdict = run.passed === true ? import_picocolors67.default.green("pass") : run.passed === false ? import_picocolors67.default.red("fail") : import_picocolors67.default.dim(sanitizeLabel(run.status));
       lines.push(`  ${verdict}  ${sanitizeLabel(run.eval_slug ?? run.eval_id)}`);
       for (const line2 of sanitizeLines(run.reasoning ?? "")) {
         if (line2.trim())
-          lines.push(`    ${import_picocolors66.default.dim(line2)}`);
+          lines.push(`    ${import_picocolors67.default.dim(line2)}`);
       }
     }
   }
   lines.push("");
-  lines.push(`  ${import_picocolors66.default.dim("read its transcript with")} ${import_picocolors66.default.cyan(`brainbase task logs ${id}`)}`, "");
+  lines.push(`  ${import_picocolors67.default.dim("read its transcript with")} ${import_picocolors67.default.cyan(`brainbase task logs ${id}`)}`, "");
   return lines.join(`
 `);
 }
@@ -86699,7 +87069,7 @@ function failureSummary(task) {
 }
 
 // src/cli/task-logs.ts
-var import_picocolors67 = __toESM(require_picocolors(), 1);
+var import_picocolors68 = __toESM(require_picocolors(), 1);
 
 // src/core/task-events.ts
 var DEFAULT_RETRY_BUDGET_MS = 60000;
@@ -86775,12 +87145,12 @@ function followTaskEvents(options) {
       onOpen?.();
     });
     source.addEventListener("error", (event) => {
-      const { message: message2, code } = event;
+      const { message: message3, code } = event;
       if (source.readyState === source.CLOSED) {
-        finish(streamError(message2, code));
+        finish(streamError(message3, code));
         return;
       }
-      lastReason = message2?.trim() || "connection lost";
+      lastReason = message3?.trim() || "connection lost";
       onReconnect?.(lastReason);
       if (downTimer === undefined) {
         downTimer = setTimeout(() => {
@@ -86800,8 +87170,8 @@ function parseFrameData(raw) {
     return raw;
   }
 }
-function streamError(message2, code) {
-  const detail = message2?.trim() || "the log stream closed";
+function streamError(message3, code) {
+  const detail = message3?.trim() || "the log stream closed";
   switch (code) {
     case 401:
       return new ApiError(`Not authorized to read this task's events: ${detail}`, 401);
@@ -86982,14 +87352,14 @@ async function runTaskLogs(taskId, options = {}, dependencies = {}) {
     console.log(renderEvent(event, messages));
   }
   if (ordered.length === 0) {
-    console.log(import_picocolors67.default.dim("No events for this task yet."));
+    console.log(import_picocolors68.default.dim("No events for this task yet."));
   }
 }
 async function followTranscript(taskId, options, dependencies) {
   const backfill = options.limit === undefined ? "" : `?backfill=${options.limit}`;
   const { url: url2, resolveBearer } = await masStreamTarget(`/tasks/${encodeURIComponent(taskId)}/events/stream${backfill}`);
   if (!options.json) {
-    console.log(import_picocolors67.default.dim(`Following task ${taskId} — Ctrl-C to stop.`));
+    console.log(import_picocolors68.default.dim(`Following task ${taskId} — Ctrl-C to stop.`));
   }
   const setExitCode = dependencies.setExitCode ?? ((code) => process.exitCode = code);
   const controller = new AbortController;
@@ -87031,13 +87401,13 @@ async function followTranscript(taskId, options, dependencies) {
         } else if (options.json) {
           console.log(JSON.stringify(frame));
         } else {
-          console.log(import_picocolors67.default.dim(frame.type));
+          console.log(import_picocolors68.default.dim(frame.type));
         }
       },
       onOpen: () => settle.noteFrame(),
       onReconnect: (reason) => {
         settle.noteDisconnected();
-        console.error(import_picocolors67.default.dim(`reconnecting — ${reason}`));
+        console.error(import_picocolors68.default.dim(`reconnecting — ${reason}`));
       }
     });
     if (interruptCode !== undefined)
@@ -87193,8 +87563,8 @@ function errorCode(error2) {
   const code = detail.code;
   return typeof code === "string" ? code : undefined;
 }
-function jsonError(error2, message2, status, code) {
-  return { ...errorShape(error2), message: message2, status, ...code ? { code } : {} };
+function jsonError(error2, message3, status, code) {
+  return { ...errorShape(error2), message: message3, status, ...code ? { code } : {} };
 }
 function stopRetryCommand(taskId, generation) {
   const argument = /^[A-Za-z0-9_-]+$/.test(taskId) ? taskId : `'${sanitizeLabel(taskId).replaceAll("'", "'\\''")}'`;
@@ -87244,8 +87614,8 @@ function onInterrupt(handler) {
       process.off(name, listener);
   };
 }
-async function runTaskSend(taskId, message2, options = {}) {
-  if (!message2.trim())
+async function runTaskSend(taskId, message3, options = {}) {
+  if (!message3.trim())
     throw new Error("The follow-up message must not be blank.");
   const inputId = options.inputId?.trim().toLowerCase() ?? randomUUID5();
   if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(inputId)) {
@@ -87264,7 +87634,7 @@ async function runTaskSend(taskId, message2, options = {}) {
     attempted = true;
     result2 = await masApi.sendTaskInput(taskId, {
       input_id: inputId,
-      messages: [{ role: "user", content: message2 }],
+      messages: [{ role: "user", content: message3 }],
       expected_generation: expectedGeneration
     });
   } catch (error2) {
@@ -87343,17 +87713,17 @@ async function runTaskStop(taskId, options = {}) {
 ${retry}
 Omit --generation only for a deliberately new Stop.`;
     }
-    const message2 = `${detail}${guidance}`;
+    const message3 = `${detail}${guidance}`;
     if (options.json) {
       console.log(JSON.stringify({
         task_id: taskId,
         expected_generation: expectedGeneration,
-        error: jsonError(error2, message2, status, code)
+        error: jsonError(error2, message3, status, code)
       }));
       process.exitCode = 1;
       return;
     }
-    throw new ApiError(message2, status, error2 instanceof ApiError ? error2.body : undefined);
+    throw new ApiError(message3, status, error2 instanceof ApiError ? error2.body : undefined);
   }
   if (options.json) {
     console.log(JSON.stringify({ ...task, expected_generation: expectedGeneration }, null, 2));
@@ -87715,78 +88085,78 @@ ${didYouMean(sub, ["create", "list", "get", "logs", "send", "stop", "update", "d
 function printHelp5() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors68.default.bold("brainbase task")} ${import_picocolors68.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors69.default.bold("brainbase task")} ${import_picocolors69.default.dim("<sub> [options]")}`);
   out.push("");
-  out.push(`  ${import_picocolors68.default.cyan("create")} ${import_picocolors68.default.dim("--message <text>")}   ${import_picocolors68.default.dim("create a task and start its first run")}`);
-  out.push(`  ${import_picocolors68.default.cyan("list | ls")}                ${import_picocolors68.default.dim("recent tasks you can reach (--json for scripts)")}`);
-  out.push(`  ${import_picocolors68.default.cyan("get")} ${import_picocolors68.default.dim("<task-id>")}            ${import_picocolors68.default.dim("one task: status, agent, machine, eval verdicts")}`);
-  out.push(`  ${import_picocolors68.default.cyan("logs")} ${import_picocolors68.default.dim("<task-id> [--follow]")} ${import_picocolors68.default.dim("one line per event in the task's transcript, or tail it live")}`);
-  out.push(`  ${import_picocolors68.default.cyan("send")} ${import_picocolors68.default.dim("<task-id> <message>")} ${import_picocolors68.default.dim("send a follow-up, including while the agent is running")}`);
-  out.push(`  ${import_picocolors68.default.cyan("stop")} ${import_picocolors68.default.dim("<task-id>")}           ${import_picocolors68.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
-  out.push(`  ${import_picocolors68.default.cyan("update")} ${import_picocolors68.default.dim("<task-id>")}         ${import_picocolors68.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
-  out.push(`  ${import_picocolors68.default.cyan("delete")} ${import_picocolors68.default.dim("<task-id>")}         ${import_picocolors68.default.dim("permanently delete a stopped task and tear down its sandbox (--yes to skip the prompt)")}`);
+  out.push(`  ${import_picocolors69.default.cyan("create")} ${import_picocolors69.default.dim("--message <text>")}   ${import_picocolors69.default.dim("create a task and start its first run")}`);
+  out.push(`  ${import_picocolors69.default.cyan("list | ls")}                ${import_picocolors69.default.dim("recent tasks you can reach (--json for scripts)")}`);
+  out.push(`  ${import_picocolors69.default.cyan("get")} ${import_picocolors69.default.dim("<task-id>")}            ${import_picocolors69.default.dim("one task: status, agent, machine, eval verdicts")}`);
+  out.push(`  ${import_picocolors69.default.cyan("logs")} ${import_picocolors69.default.dim("<task-id> [--follow]")} ${import_picocolors69.default.dim("one line per event in the task's transcript, or tail it live")}`);
+  out.push(`  ${import_picocolors69.default.cyan("send")} ${import_picocolors69.default.dim("<task-id> <message>")} ${import_picocolors69.default.dim("send a follow-up, including while the agent is running")}`);
+  out.push(`  ${import_picocolors69.default.cyan("stop")} ${import_picocolors69.default.dim("<task-id>")}           ${import_picocolors69.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
+  out.push(`  ${import_picocolors69.default.cyan("update")} ${import_picocolors69.default.dim("<task-id>")}         ${import_picocolors69.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
+  out.push(`  ${import_picocolors69.default.cyan("delete")} ${import_picocolors69.default.dim("<task-id>")}         ${import_picocolors69.default.dim("permanently delete a stopped task and tear down its sandbox (--yes to skip the prompt)")}`);
   out.push("");
-  out.push(`  ${import_picocolors68.default.bold("create flags")}`);
-  out.push(`  ${import_picocolors68.default.dim("--message <text>")}   required first user message`);
-  out.push(`  ${import_picocolors68.default.dim("--agent <id>")}       override the claimed agent in brainbase.agent.yaml`);
-  out.push(`  ${import_picocolors68.default.dim("--interface <id>")}   open it as a build conversation for this interface (agent defaults to the interface's)`);
-  out.push(`  ${import_picocolors68.default.dim("--title <text>")}     optional task title`);
-  out.push(`  ${import_picocolors68.default.dim("--model <id>")}       optional model override`);
-  out.push(`  ${import_picocolors68.default.dim("--version <v>")}      run a saved version of the agent: 12, v12 or a version id (\`agent versions list\`)`);
-  out.push(`  ${import_picocolors68.default.dim("--metadata key=value")} label the task (repeatable)`);
-  out.push(`  ${import_picocolors68.default.dim("--wait")}             block until the task finishes; exit 1 unless it succeeded`);
-  out.push(`  ${import_picocolors68.default.dim("--timeout <secs>")}   give up waiting after <secs> and exit 1 (needs --wait)`);
+  out.push(`  ${import_picocolors69.default.bold("create flags")}`);
+  out.push(`  ${import_picocolors69.default.dim("--message <text>")}   required first user message`);
+  out.push(`  ${import_picocolors69.default.dim("--agent <id>")}       override the claimed agent in brainbase.agent.yaml`);
+  out.push(`  ${import_picocolors69.default.dim("--interface <id>")}   open it as a build conversation for this interface (agent defaults to the interface's)`);
+  out.push(`  ${import_picocolors69.default.dim("--title <text>")}     optional task title`);
+  out.push(`  ${import_picocolors69.default.dim("--model <id>")}       optional model override`);
+  out.push(`  ${import_picocolors69.default.dim("--version <v>")}      run a saved version of the agent: 12, v12 or a version id (\`agent versions list\`)`);
+  out.push(`  ${import_picocolors69.default.dim("--metadata key=value")} label the task (repeatable)`);
+  out.push(`  ${import_picocolors69.default.dim("--wait")}             block until the task finishes; exit 1 unless it succeeded`);
+  out.push(`  ${import_picocolors69.default.dim("--timeout <secs>")}   give up waiting after <secs> and exit 1 (needs --wait)`);
   out.push("");
-  out.push(`  ${import_picocolors68.default.bold("list flags")}`);
-  out.push(`  ${import_picocolors68.default.dim("--agent <id>")}       only this agent's tasks`);
-  out.push(`  ${import_picocolors68.default.dim("--interface <id>")}   only this interface's build conversations (hidden from a plain list)`);
-  out.push(`  ${import_picocolors68.default.dim("--metadata key=value")} only tasks carrying this label (repeatable; all must match)`);
-  out.push(`  ${import_picocolors68.default.dim("--limit <n>")}        cap the page (1-200, server default 50)`);
+  out.push(`  ${import_picocolors69.default.bold("list flags")}`);
+  out.push(`  ${import_picocolors69.default.dim("--agent <id>")}       only this agent's tasks`);
+  out.push(`  ${import_picocolors69.default.dim("--interface <id>")}   only this interface's build conversations (hidden from a plain list)`);
+  out.push(`  ${import_picocolors69.default.dim("--metadata key=value")} only tasks carrying this label (repeatable; all must match)`);
+  out.push(`  ${import_picocolors69.default.dim("--limit <n>")}        cap the page (1-200, server default 50)`);
   out.push("");
-  out.push(`  ${import_picocolors68.default.bold("logs flags")}`);
-  out.push(`  ${import_picocolors68.default.dim("--limit <n>")}        stop after <n> events instead of the whole transcript; with --follow, the first page size`);
-  out.push(`  ${import_picocolors68.default.dim("--follow, -f")}       stay attached and print events as they land, until the task finishes and any queued follow-ups have run`);
+  out.push(`  ${import_picocolors69.default.bold("logs flags")}`);
+  out.push(`  ${import_picocolors69.default.dim("--limit <n>")}        stop after <n> events instead of the whole transcript; with --follow, the first page size`);
+  out.push(`  ${import_picocolors69.default.dim("--follow, -f")}       stay attached and print events as they land, until the task finishes and any queued follow-ups have run`);
   out.push("");
-  out.push(`  ${import_picocolors68.default.bold("update flags")}`);
-  out.push(`  ${import_picocolors68.default.dim("--title <text>")}          new title`);
-  out.push(`  ${import_picocolors68.default.dim("--clear-title")}           remove the title; automatic titling may name the task again on a later turn`);
-  out.push(`  ${import_picocolors68.default.dim("--metadata key=value")}    set one label, keeping the others (repeatable)`);
-  out.push(`  ${import_picocolors68.default.dim("--unset-metadata <key>")}  remove one label (repeatable)`);
-  out.push(`  ${import_picocolors68.default.dim("                         the server applies label edits in one step, so concurrent edits from other clients are kept")}`);
-  out.push(`  ${import_picocolors68.default.dim("--clear-metadata")}        remove every label; with --metadata, the labels become exactly those given`);
-  out.push(`  ${import_picocolors68.default.dim("--model <id>")}            switch the model the task's next turn runs on (the running turn keeps its model)`);
-  out.push(`  ${import_picocolors68.default.dim("--clear-model")}           go back to the agent's default model from the next turn`);
+  out.push(`  ${import_picocolors69.default.bold("update flags")}`);
+  out.push(`  ${import_picocolors69.default.dim("--title <text>")}          new title`);
+  out.push(`  ${import_picocolors69.default.dim("--clear-title")}           remove the title; automatic titling may name the task again on a later turn`);
+  out.push(`  ${import_picocolors69.default.dim("--metadata key=value")}    set one label, keeping the others (repeatable)`);
+  out.push(`  ${import_picocolors69.default.dim("--unset-metadata <key>")}  remove one label (repeatable)`);
+  out.push(`  ${import_picocolors69.default.dim("                         the server applies label edits in one step, so concurrent edits from other clients are kept")}`);
+  out.push(`  ${import_picocolors69.default.dim("--clear-metadata")}        remove every label; with --metadata, the labels become exactly those given`);
+  out.push(`  ${import_picocolors69.default.dim("--model <id>")}            switch the model the task's next turn runs on (the running turn keeps its model)`);
+  out.push(`  ${import_picocolors69.default.dim("--clear-model")}           go back to the agent's default model from the next turn`);
   out.push("");
-  out.push(`  ${import_picocolors68.default.bold("send flags")}`);
-  out.push(`  ${import_picocolors68.default.dim("--input-id <uuid>")}  recover the same request using its original ID and identical message`);
-  out.push(`  ${import_picocolors68.default.dim("                    omit it to send a new follow-up; an unconfirmed receipt is never automatically replayed")}`);
-  out.push(`  ${import_picocolors68.default.dim("                    admission disabled/recovery unavailable means no input was admitted; retry the same ID after recovery")}`);
+  out.push(`  ${import_picocolors69.default.bold("send flags")}`);
+  out.push(`  ${import_picocolors69.default.dim("--input-id <uuid>")}  recover the same request using its original ID and identical message`);
+  out.push(`  ${import_picocolors69.default.dim("                    omit it to send a new follow-up; an unconfirmed receipt is never automatically replayed")}`);
+  out.push(`  ${import_picocolors69.default.dim("                    admission disabled/recovery unavailable means no input was admitted; retry the same ID after recovery")}`);
   out.push("");
-  out.push(`  ${import_picocolors68.default.bold("send and stop flags")}`);
-  out.push(`  ${import_picocolors68.default.dim("--generation <n>")}   retain the printed generation when retrying; defaults to a fresh snapshot for a new operation`);
-  out.push(`  ${import_picocolors68.default.dim("                    Stop errors may follow queued-input cancellation; retry the printed command to avoid stopping newer work")}`);
+  out.push(`  ${import_picocolors69.default.bold("send and stop flags")}`);
+  out.push(`  ${import_picocolors69.default.dim("--generation <n>")}   retain the printed generation when retrying; defaults to a fresh snapshot for a new operation`);
+  out.push(`  ${import_picocolors69.default.dim("                    Stop errors may follow queued-input cancellation; retry the printed command to avoid stopping newer work")}`);
   out.push("");
-  out.push(`  ${import_picocolors68.default.bold("every subcommand")}`);
-  out.push(`  ${import_picocolors68.default.dim("--json")}             machine-readable output — create prints task_id, agent_id and status (with --version, also agent_version_id and version_number); list, get, logs, send, stop and update print the raw records; delete prints id and deleted`);
-  out.push(`  ${import_picocolors68.default.dim("                    send and stop include expected_generation for safe retries; send also reports idempotency_replayed when present")}`);
-  out.push(`  ${import_picocolors68.default.dim("                    logs --follow --json prints one record per line, since a live stream has no end to close on")}`);
+  out.push(`  ${import_picocolors69.default.bold("every subcommand")}`);
+  out.push(`  ${import_picocolors69.default.dim("--json")}             machine-readable output — create prints task_id, agent_id and status (with --version, also agent_version_id and version_number); list, get, logs, send, stop and update print the raw records; delete prints id and deleted`);
+  out.push(`  ${import_picocolors69.default.dim("                    send and stop include expected_generation for safe retries; send also reports idempotency_replayed when present")}`);
+  out.push(`  ${import_picocolors69.default.dim("                    logs --follow --json prints one record per line, since a live stream has no end to close on")}`);
   out.push("");
-  out.push(`  ${import_picocolors68.default.dim("Exit codes with --wait:")} ${import_picocolors68.default.dim("0 succeeded · 1 failed, needs input, or timed out · 130 interrupted")}`);
-  out.push(`  ${import_picocolors68.default.dim("Exit codes with --follow:")} ${import_picocolors68.default.dim("0 task reached a terminal state · 1 stream refused, or unreachable for 60s · 130 interrupted (Ctrl-C) · 143 terminated")}`);
-  out.push(`  ${import_picocolors68.default.dim("Exit codes with send:")} ${import_picocolors68.default.dim("0 queued, dispatching, submitted or completed · 1 unconfirmed, cancelled, failed or request error")}`);
-  out.push(`  ${import_picocolors68.default.dim("Ctrl-C while waiting or following logs detaches; use task stop to cancel remote work.")}`);
+  out.push(`  ${import_picocolors69.default.dim("Exit codes with --wait:")} ${import_picocolors69.default.dim("0 succeeded · 1 failed, needs input, or timed out · 130 interrupted")}`);
+  out.push(`  ${import_picocolors69.default.dim("Exit codes with --follow:")} ${import_picocolors69.default.dim("0 task reached a terminal state · 1 stream refused, or unreachable for 60s · 130 interrupted (Ctrl-C) · 143 terminated")}`);
+  out.push(`  ${import_picocolors69.default.dim("Exit codes with send:")} ${import_picocolors69.default.dim("0 queued, dispatching, submitted or completed · 1 unconfirmed, cancelled, failed or request error")}`);
+  out.push(`  ${import_picocolors69.default.dim("Ctrl-C while waiting or following logs detaches; use task stop to cancel remote work.")}`);
   out.push("");
-  out.push(`  ${import_picocolors68.default.dim("Flag-like values:")} use ${import_picocolors68.default.cyan("--flag=value")} or ${import_picocolors68.default.cyan("--flag -- <value>")}`);
+  out.push(`  ${import_picocolors69.default.dim("Flag-like values:")} use ${import_picocolors69.default.cyan("--flag=value")} or ${import_picocolors69.default.cyan("--flag -- <value>")}`);
   out.push("");
   console.log(out.join(`
 `));
 }
 
 // src/cli/machine.ts
-var import_picocolors71 = __toESM(require_picocolors(), 1);
+var import_picocolors72 = __toESM(require_picocolors(), 1);
 
 // src/cli/machine-list.ts
-var import_picocolors69 = __toESM(require_picocolors(), 1);
+var import_picocolors70 = __toESM(require_picocolors(), 1);
 async function runMachineList(args = {}) {
   if (!args.json)
     banner("machine list — sandboxes you can reach");
@@ -87804,7 +88174,7 @@ async function runMachineList(args = {}) {
 function formatMachineList(machines, includedDead, names = new Map) {
   const lines = [""];
   if (machines.length === 0) {
-    lines.push(`  ${import_picocolors69.default.dim(includedDead ? "No machines." : "No live machines. Pass --all to include torn-down ones.")}`, "");
+    lines.push(`  ${import_picocolors70.default.dim(includedDead ? "No machines." : "No live machines. Pass --all to include torn-down ones.")}`, "");
     return lines.join(`
 `);
   }
@@ -87824,7 +88194,7 @@ function formatMachineList(machines, includedDead, names = new Map) {
   const statusWidth = width((row) => row.status);
   const sizeWidth = width((row) => row.size);
   const agentWidth = width((row) => row.agent);
-  lines.push(`  ${import_picocolors69.default.dim([
+  lines.push(`  ${import_picocolors70.default.dim([
     header.id.padEnd(idWidth),
     header.kind.padEnd(kindWidth),
     header.status.padEnd(statusWidth),
@@ -87840,21 +88210,21 @@ function formatMachineList(machines, includedDead, names = new Map) {
       row.dead ? status : statusTint(row.status, status),
       row.size.padEnd(sizeWidth),
       row.agent.padEnd(agentWidth),
-      import_picocolors69.default.dim(row.age)
+      import_picocolors70.default.dim(row.age)
     ].join("  ");
-    lines.push(`  ${row.dead ? import_picocolors69.default.dim(cells) : cells}`);
+    lines.push(`  ${row.dead ? import_picocolors70.default.dim(cells) : cells}`);
   }
-  lines.push("", `  ${import_picocolors69.default.dim("tear one down with")} ${import_picocolors69.default.cyan("brainbase machine rm <id>")}`, "");
+  lines.push("", `  ${import_picocolors70.default.dim("tear one down with")} ${import_picocolors70.default.cyan("brainbase machine rm <id>")}`, "");
   return lines.join(`
 `);
 }
 function statusTint(status, padded) {
   switch (status) {
     case "running":
-      return import_picocolors69.default.green(padded);
+      return import_picocolors70.default.green(padded);
     case "stopped":
     case "starting":
-      return import_picocolors69.default.yellow(padded);
+      return import_picocolors70.default.yellow(padded);
     default:
       return padded;
   }
@@ -87877,7 +88247,7 @@ function age(createdAt) {
 }
 
 // src/cli/machine-rm.ts
-var import_picocolors70 = __toESM(require_picocolors(), 1);
+var import_picocolors71 = __toESM(require_picocolors(), 1);
 async function runMachineRm(args, dependencies = {}) {
   const setExitCode = dependencies.setExitCode ?? ((code) => process.exitCode = code);
   const machineId = args.machineId?.trim();
@@ -87891,7 +88261,7 @@ async function runMachineRm(args, dependencies = {}) {
     if (args.json) {
       console.log(JSON.stringify({ id: machineId, torn_down: false, outcome: "declined" }, null, 2));
     } else {
-      console.log(`  ${import_picocolors70.default.dim("Left alone.")}`);
+      console.log(`  ${import_picocolors71.default.dim("Left alone.")}`);
     }
     return;
   }
@@ -87909,7 +88279,7 @@ async function promptForTeardown(args) {
     return true;
   if (!args.json) {
     console.log(`
-  ${import_picocolors70.default.red("This destroys the sandbox.")} ${import_picocolors70.default.dim("Anything not committed out of it is lost. The machine row is kept for cost history.")}
+  ${import_picocolors71.default.red("This destroys the sandbox.")} ${import_picocolors71.default.dim("Anything not committed out of it is lost. The machine row is kept for cost history.")}
 `);
   }
   const answer = await se({
@@ -87921,9 +88291,9 @@ async function promptForTeardown(args) {
 function formatMachineRm(machine) {
   const lines = [""];
   if (machine.destroyed_at) {
-    lines.push(`  ${import_picocolors70.default.green("✓")} ${machine.kind} sandbox ${machine.id} is torn down.`, `  ${import_picocolors70.default.dim(`destroyed_at ${machine.destroyed_at}`)}`);
+    lines.push(`  ${import_picocolors71.default.green("✓")} ${machine.kind} sandbox ${machine.id} is torn down.`, `  ${import_picocolors71.default.dim(`destroyed_at ${machine.destroyed_at}`)}`);
   } else {
-    lines.push(`  ${import_picocolors70.default.yellow("!")} ${machine.id} came back without a teardown timestamp (status ${machine.status}).`, `  ${import_picocolors70.default.dim("Re-check with `brainbase machine ls --all` before assuming it stopped billing.")}`);
+    lines.push(`  ${import_picocolors71.default.yellow("!")} ${machine.id} came back without a teardown timestamp (status ${machine.status}).`, `  ${import_picocolors71.default.dim("Re-check with `brainbase machine ls --all` before assuming it stopped billing.")}`);
   }
   lines.push("");
   return lines.join(`
@@ -87964,25 +88334,25 @@ ${didYouMean(sub, ["ls", "rm"], "brainbase machine")}`);
 function printHelp6() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors71.default.bold("brainbase machine")} ${import_picocolors71.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors72.default.bold("brainbase machine")} ${import_picocolors72.default.dim("<sub> [options]")}`);
   out.push("");
-  out.push(`  ${import_picocolors71.default.cyan("ls")}          ${import_picocolors71.default.dim("list your sandboxes — live ones only unless --all")}`);
-  out.push(`  ${import_picocolors71.default.cyan("rm")} ${import_picocolors71.default.dim("<id>")}    ${import_picocolors71.default.dim("tear a sandbox down (terminal; the row is kept for cost history)")}`);
+  out.push(`  ${import_picocolors72.default.cyan("ls")}          ${import_picocolors72.default.dim("list your sandboxes — live ones only unless --all")}`);
+  out.push(`  ${import_picocolors72.default.cyan("rm")} ${import_picocolors72.default.dim("<id>")}    ${import_picocolors72.default.dim("tear a sandbox down (terminal; the row is kept for cost history)")}`);
   out.push("");
-  out.push(`  ${import_picocolors71.default.dim("--all")}     ${import_picocolors71.default.dim("for ls: include machines already torn down")}`);
-  out.push(`  ${import_picocolors71.default.dim("--limit <n>")} ${import_picocolors71.default.dim("for ls: how many to fetch (1-200, default 50)")}`);
-  out.push(`  ${import_picocolors71.default.dim("--yes, -y")} ${import_picocolors71.default.dim("for rm: skip the confirmation")}`);
-  out.push(`  ${import_picocolors71.default.dim("--json")}    ${import_picocolors71.default.dim("machine-readable output")}`);
+  out.push(`  ${import_picocolors72.default.dim("--all")}     ${import_picocolors72.default.dim("for ls: include machines already torn down")}`);
+  out.push(`  ${import_picocolors72.default.dim("--limit <n>")} ${import_picocolors72.default.dim("for ls: how many to fetch (1-200, default 50)")}`);
+  out.push(`  ${import_picocolors72.default.dim("--yes, -y")} ${import_picocolors72.default.dim("for rm: skip the confirmation")}`);
+  out.push(`  ${import_picocolors72.default.dim("--json")}    ${import_picocolors72.default.dim("machine-readable output")}`);
   out.push("");
   console.log(out.join(`
 `));
 }
 
 // src/cli/interface.ts
-var import_picocolors77 = __toESM(require_picocolors(), 1);
+var import_picocolors78 = __toESM(require_picocolors(), 1);
 
 // src/cli/interface-build.ts
-var import_picocolors72 = __toESM(require_picocolors(), 1);
+var import_picocolors73 = __toESM(require_picocolors(), 1);
 var USAGE2 = 'brainbase interface build <id> "<request>" [--timeout <seconds>] [--idempotency-key <key>] [--json]';
 var SETTLE_TIMEOUT_MS = 120000;
 async function reportingErrors(json3, work) {
@@ -88009,8 +88379,8 @@ function heldBy(row, ownTaskId) {
   const taskId = held.thread_id;
   if (ownTaskId !== undefined && taskId === ownTaskId)
     return null;
-  const message2 = taskId ? `Another build conversation (${safe(taskId)}) is working on this interface. Follow it with \`brainbase task logs ${safe(taskId)} --follow\`, or wait for it to finish and run this again.` : `A build conversation is working on this interface (operation ${safe(held.operation_id)}). Wait for it to finish and run this again.`;
-  return cliRefusal("conflict", "generation_running", message2, {
+  const message3 = taskId ? `Another build conversation (${safe(taskId)}) is working on this interface. Follow it with \`brainbase task logs ${safe(taskId)} --follow\`, or wait for it to finish and run this again.` : `A build conversation is working on this interface (operation ${safe(held.operation_id)}). Wait for it to finish and run this again.`;
+  return cliRefusal("conflict", "generation_running", message3, {
     operation_id: held.operation_id,
     task_id: taskId
   });
@@ -88081,28 +88451,28 @@ function buildExitCode(outcome) {
 function reportBuild(say, interfaceId, outcome, timeoutSeconds) {
   switch (outcome.kind) {
     case "built":
-      say(`  ${import_picocolors72.default.dim("build")}    ${safe(outcome.build.id)} ${import_picocolors72.default.green("succeeded")}`);
+      say(`  ${import_picocolors73.default.dim("build")}    ${safe(outcome.build.id)} ${import_picocolors73.default.green("succeeded")}`);
       say("");
-      say(`  ${import_picocolors72.default.dim("Next:")} ${import_picocolors72.default.cyan(`brainbase interface publish ${safe(interfaceId)}`)}`);
+      say(`  ${import_picocolors73.default.dim("Next:")} ${import_picocolors73.default.cyan(`brainbase interface publish ${safe(interfaceId)}`)}`);
       return;
     case "failed": {
       const reason = outcome.build?.error_summary ?? outcome.operation?.error ?? outcome.operation?.reason ?? null;
-      say(`  ${import_picocolors72.default.dim("build")}    ${outcome.build ? safe(outcome.build.id) : import_picocolors72.default.dim("none")} ${import_picocolors72.default.red("failed")}`);
+      say(`  ${import_picocolors73.default.dim("build")}    ${outcome.build ? safe(outcome.build.id) : import_picocolors73.default.dim("none")} ${import_picocolors73.default.red("failed")}`);
       if (reason)
         say(`  ${safeBlock(reason).split(`
 `).join(`
   `)}`);
-      say(`  ${import_picocolors72.default.dim("Try again with")} ${import_picocolors72.default.cyan(`brainbase interface rebuild ${safe(interfaceId)}`)}`);
+      say(`  ${import_picocolors73.default.dim("Try again with")} ${import_picocolors73.default.cyan(`brainbase interface rebuild ${safe(interfaceId)}`)}`);
       return;
     }
     case "busy":
-      say(`  ${import_picocolors72.default.yellow(safe(outcome.message))}`);
+      say(`  ${import_picocolors73.default.yellow(safe(outcome.message))}`);
       return;
     case "timeout":
-      say(`  ${import_picocolors72.default.yellow(`Still building after ${timeoutSeconds}s.`)} ${import_picocolors72.default.dim(`It keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
+      say(`  ${import_picocolors73.default.yellow(`Still building after ${timeoutSeconds}s.`)} ${import_picocolors73.default.dim(`It keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
       return;
     case "interrupted":
-      say(`  ${import_picocolors72.default.yellow("Stopped waiting.")} ${import_picocolors72.default.dim(`The build keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
+      say(`  ${import_picocolors73.default.yellow("Stopped waiting.")} ${import_picocolors73.default.dim(`The build keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
       return;
     default: {
       const unreachable = outcome;
@@ -88149,8 +88519,8 @@ async function build(ctx) {
         throw held;
     }
     const reattach = `brainbase task logs ${safe(taskId)} --follow`;
-    say(`  ${import_picocolors72.default.dim("Build conversation")} ${import_picocolors72.default.bold(safe(taskId))} ${import_picocolors72.default.dim(`on ${safe(before2.name)}`)}`);
-    say(`  ${import_picocolors72.default.dim(`If this stops early, reattach with \`${reattach}\`.`)}`);
+    say(`  ${import_picocolors73.default.dim("Build conversation")} ${import_picocolors73.default.bold(safe(taskId))} ${import_picocolors73.default.dim(`on ${safe(before2.name)}`)}`);
+    say(`  ${import_picocolors73.default.dim(`If this stops early, reattach with \`${reattach}\`.`)}`);
     const finish = (result2, exitCode) => {
       if (json3)
         console.log(JSON.stringify({ type: "result", task_id: taskId, ...result2 }));
@@ -88167,13 +88537,13 @@ async function build(ctx) {
       });
     } catch (error2) {
       say("");
-      say(`  ${import_picocolors72.default.red(`Lost the conversation's event stream: ${safe(error2.message)}`)}`);
-      say(`  ${import_picocolors72.default.dim(`Conversation ${safe(taskId)} may still be running. Reattach with`)} ${import_picocolors72.default.cyan(reattach)}`);
+      say(`  ${import_picocolors73.default.red(`Lost the conversation's event stream: ${safe(error2.message)}`)}`);
+      say(`  ${import_picocolors73.default.dim(`Conversation ${safe(taskId)} may still be running. Reattach with`)} ${import_picocolors73.default.cyan(reattach)}`);
       finish({ version_id: null, build_id: null, status: "stream_lost", task_status: null }, 1);
       return;
     }
     if (followExit !== undefined) {
-      say(`  ${import_picocolors72.default.yellow("Stopped following.")} ${import_picocolors72.default.dim(`The conversation keeps running. Reattach with \`${reattach}\`.`)}`);
+      say(`  ${import_picocolors73.default.yellow("Stopped following.")} ${import_picocolors73.default.dim(`The conversation keeps running. Reattach with \`${reattach}\`.`)}`);
       finish({ version_id: null, build_id: null, status: "interrupted", task_status: null }, followExit);
       return;
     }
@@ -88188,7 +88558,7 @@ async function build(ctx) {
       if (settled.kind !== "terminal") {
         const interrupted = settled.kind === "interrupted";
         const status2 = settled.task?.status ?? null;
-        say(`  ${import_picocolors72.default.yellow(interrupted ? "Stopped." : `The conversation is still ${safe(status2 ?? "running")}.`)} ${import_picocolors72.default.dim(`Check it with \`brainbase task get ${safe(taskId)}\`.`)}`);
+        say(`  ${import_picocolors73.default.yellow(interrupted ? "Stopped." : `The conversation is still ${safe(status2 ?? "running")}.`)} ${import_picocolors73.default.dim(`Check it with \`brainbase task get ${safe(taskId)}\`.`)}`);
         finish({ version_id: null, build_id: null, status: interrupted ? "interrupted" : "task_unsettled", task_status: status2 }, interrupted ? SIGINT_EXIT_CODE : 1);
         return;
       }
@@ -88208,36 +88578,36 @@ async function build(ctx) {
       }
       const codes = [exitCodeForTaskStatus(task.status)];
       say("");
-      say(`  ${import_picocolors72.default.dim("conversation")} ${safe(taskId)} ${import_picocolors72.default.dim("ended")} ${safe(task.status)}`);
+      say(`  ${import_picocolors73.default.dim("conversation")} ${safe(taskId)} ${import_picocolors73.default.dim("ended")} ${safe(task.status)}`);
       if (mine?.status === "failed") {
         codes.push(1);
         const why = [mine.reason, mine.error].filter(Boolean).map((part) => safe(part)).join(": ");
-        say(`  ${import_picocolors72.default.red(`This conversation's build work failed${why ? ` (${why})` : ""}.`)}`);
+        say(`  ${import_picocolors73.default.red(`This conversation's build work failed${why ? ` (${why})` : ""}.`)}`);
       } else if (task.status !== "success" && task.status !== "need_more_info") {
-        say(`  ${import_picocolors72.default.red(`The conversation finished as ${safe(task.status)}.`)} ${import_picocolors72.default.dim(`See \`brainbase task logs ${safe(taskId)}\`.`)}`);
+        say(`  ${import_picocolors73.default.red(`The conversation finished as ${safe(task.status)}.`)} ${import_picocolors73.default.dim(`See \`brainbase task logs ${safe(taskId)}\`.`)}`);
       }
       if (task.status === "need_more_info") {
         const question = await lastAgentMessage(taskId);
         say("");
         if (question) {
-          say(`  ${import_picocolors72.default.bold("The agent asks:")}`);
+          say(`  ${import_picocolors73.default.bold("The agent asks:")}`);
           say(`  ${safeBlock(question).split(`
 `).join(`
   `)}`);
         } else {
-          say(`  ${import_picocolors72.default.bold("The agent needs more from you before it can go on.")}`);
+          say(`  ${import_picocolors73.default.bold("The agent needs more from you before it can go on.")}`);
         }
         say("");
-        say(`  ${import_picocolors72.default.dim("Reply with")} ${import_picocolors72.default.cyan(`brainbase task send ${safe(taskId)} "<reply>"`)}`);
-        say(`  ${import_picocolors72.default.dim("then follow it with")} ${import_picocolors72.default.cyan(reattach)}`);
+        say(`  ${import_picocolors73.default.dim("Reply with")} ${import_picocolors73.default.cyan(`brainbase task send ${safe(taskId)} "<reply>"`)}`);
+        say(`  ${import_picocolors73.default.dim("then follow it with")} ${import_picocolors73.default.cyan(reattach)}`);
       }
       let status;
       let buildId = null;
       if (versionId) {
         say("");
-        say(`  ${import_picocolors72.default.dim("version")}  ${safe(versionId)}`);
+        say(`  ${import_picocolors73.default.dim("version")}  ${safe(versionId)}`);
         if (!json3)
-          say(`  ${import_picocolors72.default.dim("Waiting for its build...")}`);
+          say(`  ${import_picocolors73.default.dim("Waiting for its build...")}`);
         const buildKey = `${key2}-build`;
         let outcome;
         try {
@@ -88247,7 +88617,7 @@ async function build(ctx) {
             signal: stop.signal,
             now: deps.now,
             idempotencyKey: buildKey,
-            onStall: () => say(`  ${import_picocolors72.default.yellow("The build looks stalled; still waiting in case another worker picks it up.")}`)
+            onStall: () => say(`  ${import_picocolors73.default.yellow("The build looks stalled; still waiting in case another worker picks it up.")}`)
           });
         } catch (error2) {
           if (error2 instanceof LostResponseError) {
@@ -88263,9 +88633,9 @@ async function build(ctx) {
         status = noVersionStatus(mine?.status === "failed", task.status);
         if (status === "no_version") {
           codes.push(1);
-          say(`  ${import_picocolors72.default.red("The conversation finished without committing a version, so there is nothing to build.")}`);
+          say(`  ${import_picocolors73.default.red("The conversation finished without committing a version, so there is nothing to build.")}`);
         } else if (task.status !== "need_more_info") {
-          say(`  ${import_picocolors72.default.dim("This conversation produced no version, so there is nothing to build.")}`);
+          say(`  ${import_picocolors73.default.dim("This conversation produced no version, so there is nothing to build.")}`);
         }
       }
       if (!json3)
@@ -88280,7 +88650,7 @@ async function build(ctx) {
 var buildCommands = { build };
 
 // src/cli/interface-lifecycle.ts
-var import_picocolors74 = __toESM(require_picocolors(), 1);
+var import_picocolors75 = __toESM(require_picocolors(), 1);
 
 // src/core/org-members.ts
 async function listAllOrgMembers(orgId) {
@@ -88334,7 +88704,7 @@ function membersById(members) {
 }
 
 // src/cli/interface-read.ts
-var import_picocolors73 = __toESM(require_picocolors(), 1);
+var import_picocolors74 = __toESM(require_picocolors(), 1);
 function interfaceState(row) {
   if (row.archived_at)
     return "archived";
@@ -88356,11 +88726,11 @@ function threadsLabel(shared) {
 function stateTint(state) {
   switch (state) {
     case "live":
-      return import_picocolors73.default.green;
+      return import_picocolors74.default.green;
     case "building":
-      return import_picocolors73.default.yellow;
+      return import_picocolors74.default.yellow;
     case "archived":
-      return import_picocolors73.default.dim;
+      return import_picocolors74.default.dim;
     case "draft":
       return (cell) => cell;
     default: {
@@ -88393,7 +88763,7 @@ async function list3(ctx) {
     if (shown.length === 0) {
       const empty = onlyArchived ? "No archived interfaces." : includeArchived ? "No interfaces. Create one with `brainbase interface create`." : await emptyWithoutArchived(agentId);
       console.log(`
-  ${import_picocolors73.default.dim(empty)}
+  ${import_picocolors74.default.dim(empty)}
 `);
       return;
     }
@@ -88406,7 +88776,7 @@ async function list3(ctx) {
       audienceWord(row),
       ago(row.last_edited_at ?? row.created_at, now2)
     ]);
-    console.log(["", ...table(cells, [null, import_picocolors73.default.bold, null, null, null, import_picocolors73.default.dim]), ""].join(`
+    console.log(["", ...table(cells, [null, import_picocolors74.default.bold, null, null, null, import_picocolors74.default.dim]), ""].join(`
 `));
   });
 }
@@ -88440,13 +88810,13 @@ async function get2(ctx) {
     out.push(field("id", safe(row.id)));
     out.push(field("agent", agentLabel(safe(row.agent_id), await agentNames([row.agent_id]))));
     out.push(field("state", stateTint(state)(state)));
-    out.push(field("address", row.live_release ? safe(row.live_release.url) : `${safe(row.slug)} ${import_picocolors73.default.dim("(nothing live yet)")}`));
+    out.push(field("address", row.live_release ? safe(row.live_release.url) : `${safe(row.slug)} ${import_picocolors74.default.dim("(nothing live yet)")}`));
     out.push(field("audience", audienceLabel(row)));
     out.push(field("threads", threadsLabel(row.share_agent_threads)));
-    out.push(field("live", row.live_release ? `${safe(row.live_release.id)} ${import_picocolors73.default.dim(`published ${ago(row.live_release.published_at)}`)}` : import_picocolors73.default.dim("none")));
-    out.push(field("draft", row.draft_version_id ? safe(row.draft_version_id) : import_picocolors73.default.dim("none yet")));
+    out.push(field("live", row.live_release ? `${safe(row.live_release.id)} ${import_picocolors74.default.dim(`published ${ago(row.live_release.published_at)}`)}` : import_picocolors74.default.dim("none")));
+    out.push(field("draft", row.draft_version_id ? safe(row.draft_version_id) : import_picocolors74.default.dim("none yet")));
     if (row.running_generation) {
-      out.push(field("building", `conversation ${safe(row.running_generation.thread_id ?? "")} ${import_picocolors73.default.dim(`(follow it with \`brainbase task logs ${safe(row.running_generation.thread_id ?? "")} --follow\`)`)}`));
+      out.push(field("building", `conversation ${safe(row.running_generation.thread_id ?? "")} ${import_picocolors74.default.dim(`(follow it with \`brainbase task logs ${safe(row.running_generation.thread_id ?? "")} --follow\`)`)}`));
     }
     if (row.archived_at)
       out.push(field("archived", ago(row.archived_at)));
@@ -88475,7 +88845,7 @@ async function open(ctx) {
     }
     console.log(safe(url2));
     if (new URL(url2).hostname.endsWith("vercel.app")) {
-      console.error(import_picocolors73.default.yellow("This is the raw Vercel deployment address, which sits behind Vercel protection and will not open for viewers. The control plane has no public interfaces domain configured."));
+      console.error(import_picocolors74.default.yellow("This is the raw Vercel deployment address, which sits behind Vercel protection and will not open for viewers. The control plane has no public interfaces domain configured."));
     }
   });
 }
@@ -88513,7 +88883,7 @@ async function history(ctx, name) {
     banner(`interface ${name} — ${safe(id)}`);
     if (rows.length === 0) {
       console.log(`
-  ${import_picocolors73.default.dim(`No ${name} yet.`)}
+  ${import_picocolors74.default.dim(`No ${name} yet.`)}
 `);
       return;
     }
@@ -88590,7 +88960,7 @@ function exactlyOne(parsed, flags) {
 }
 function peopleLine(access, members) {
   const ids = grantIds(access);
-  return ids.length ? namesOf(ids, members) : import_picocolors74.default.dim("nobody named");
+  return ids.length ? namesOf(ids, members) : import_picocolors75.default.dim("nobody named");
 }
 function printAccess(row, access, members) {
   console.log([
@@ -88651,8 +89021,8 @@ async function create3(ctx) {
         }
       } catch (error2) {
         readFailed = true;
-        const message2 = `Created ${created.id}, but its audience could not be read, so it was not changed. ` + `Check it with \`brainbase interface access ${created.id}\`. (${error2.message})`;
-        accessError = error2 instanceof InterfaceApiError ? new InterfaceApiError(message2, error2.code, error2.reason, error2.details, error2.status, error2.body) : new Error(message2);
+        const message3 = `Created ${created.id}, but its audience could not be read, so it was not changed. ` + `Check it with \`brainbase interface access ${created.id}\`. (${error2.message})`;
+        accessError = error2 instanceof InterfaceApiError ? new InterfaceApiError(message3, error2.code, error2.reason, error2.details, error2.status, error2.body) : new Error(message3);
       }
     }
     if (audience && !note && !readFailed) {
@@ -88686,11 +89056,11 @@ async function create3(ctx) {
     const id = safe(created.id);
     const out = [
       "",
-      `  ${import_picocolors74.default.green("Created")} ${import_picocolors74.default.bold(safe(created.name))}`,
+      `  ${import_picocolors75.default.green("Created")} ${import_picocolors75.default.bold(safe(created.name))}`,
       "",
       field("id", id),
       field("agent", safe(created.agent_id)),
-      field("address", `${safe(created.slug)} ${import_picocolors74.default.dim("(nothing live yet)")}`),
+      field("address", `${safe(created.slug)} ${import_picocolors75.default.dim("(nothing live yet)")}`),
       field("threads", threadsLabel(created.share_agent_threads))
     ];
     if (access) {
@@ -88702,11 +89072,11 @@ async function create3(ctx) {
       out.push("", `  Nobody can open it until you choose who can: \`brainbase interface access ${id} --everyone\` or \`--people <emails>\`.`);
     }
     if (created.share_agent_threads) {
-      out.push(`  ${import_picocolors74.default.dim(`To show viewers only their own conversations: \`brainbase interface threads ${id} --private\`.`)}`);
+      out.push(`  ${import_picocolors75.default.dim(`To show viewers only their own conversations: \`brainbase interface threads ${id} --private\`.`)}`);
     }
     if (note)
       out.push("", `  ${safe(note)}`);
-    out.push("", `  ${import_picocolors74.default.dim(`Next: \`brainbase interface build ${id} "<what to build>"\``)}`, "");
+    out.push("", `  ${import_picocolors75.default.dim(`Next: \`brainbase interface build ${id} "<what to build>"\``)}`, "");
     console.log(out.join(`
 `));
     if (readFailed) {
@@ -88842,7 +89212,7 @@ async function threads(ctx) {
         printJson({ id: row.id, share_agent_threads: row.share_agent_threads });
         return;
       }
-      const already = wanted === null ? "" : ` ${import_picocolors74.default.dim("(already set; nothing changed)")}`;
+      const already = wanted === null ? "" : ` ${import_picocolors75.default.dim("(already set; nothing changed)")}`;
       console.log(`
 ${field("threads", `${threadsLabel(row.share_agent_threads)}${already}`)}
 `);
@@ -88881,7 +89251,7 @@ async function rename(ctx) {
       return;
     }
     console.log(`
-  Renamed ${safe(updated.id)} to ${import_picocolors74.default.bold(safe(updated.name))}.
+  Renamed ${safe(updated.id)} to ${import_picocolors75.default.bold(safe(updated.name))}.
 `);
   });
 }
@@ -88917,7 +89287,7 @@ async function address(ctx) {
     }
     const where = updated.live_release ? safe(updated.live_release.url) : safe(updated.slug);
     console.log(`
-  ${safe(updated.name)} is now at ${import_picocolors74.default.bold(where)}.
+  ${safe(updated.name)} is now at ${import_picocolors75.default.bold(where)}.
 `);
   });
 }
@@ -89009,9 +89379,9 @@ var lifecycleCommands = {
 };
 
 // src/cli/interface-preview.ts
-var import_picocolors75 = __toESM(require_picocolors(), 1);
+var import_picocolors76 = __toESM(require_picocolors(), 1);
 function warn(line2) {
-  console.error(import_picocolors75.default.yellow(line2));
+  console.error(import_picocolors76.default.yellow(line2));
 }
 var PREVIEW_TIMEOUT_SECONDS = 300;
 var PROBE_INTERVAL_MS = 2000;
@@ -89101,12 +89471,12 @@ async function preview(ctx) {
     const say = progress(json3);
     const row = await interfacesApi.get(id);
     const { taskId, why } = await pickConversation(row, stringOption(parsed, "task")?.trim() || undefined);
-    say(import_picocolors75.default.dim(`  Previewing ${why}, ${safe(taskId)}.`));
+    say(import_picocolors76.default.dim(`  Previewing ${why}, ${safe(taskId)}.`));
     const started = await interfacesApi.startPreview(taskId, row.id);
     const address2 = previewAddress(started, row);
     let outcome = started.state === "serving" ? "serving" : "not_waited";
     if (outcome !== "serving" && !noWait) {
-      say(import_picocolors75.default.dim("  Starting the dev server in the sandbox…"));
+      say(import_picocolors76.default.dim("  Starting the dev server in the sandbox…"));
       outcome = await waitUntilServing(started, { timeoutMs: waitMs, deps: ctx.deps });
     }
     if (json3) {
@@ -89114,12 +89484,12 @@ async function preview(ctx) {
     } else {
       const out = [
         "",
-        `  ${outcome === "serving" ? import_picocolors75.default.green("Preview ready") : import_picocolors75.default.yellow("Preview starting")} ${import_picocolors75.default.bold(safe(started.name))}`,
+        `  ${outcome === "serving" ? import_picocolors76.default.green("Preview ready") : import_picocolors76.default.yellow("Preview starting")} ${import_picocolors76.default.bold(safe(started.name))}`,
         "",
-        field("address", address2 ? safe(address2) : import_picocolors75.default.dim(missingAddress(started))),
+        field("address", address2 ? safe(address2) : import_picocolors76.default.dim(missingAddress(started))),
         field("showing", showing(started, taskId)),
         "",
-        `  ${import_picocolors75.default.dim("Opens for people who can edit the agent, after signing in. Nothing is published.")}`,
+        `  ${import_picocolors76.default.dim("Opens for people who can edit the agent, after signing in. Nothing is published.")}`,
         ""
       ];
       console.log(out.join(`
@@ -89140,19 +89510,19 @@ async function preview(ctx) {
 var previewCommands = { preview };
 
 // src/cli/interface-release.ts
-var import_picocolors76 = __toESM(require_picocolors(), 1);
+var import_picocolors77 = __toESM(require_picocolors(), 1);
 var PUBLISH_TIMEOUT_SECONDS = 300;
 var REBUILD_USAGE = "brainbase interface rebuild <id> [--version <version id>] [--yes]";
 var PUBLISH_USAGE = "brainbase interface publish <id> [--build <build id>]";
 var ROLLBACK_USAGE = "brainbase interface rollback <id> --release <release id>";
 function warn2(line2) {
-  console.error(import_picocolors76.default.yellow(line2));
+  console.error(import_picocolors77.default.yellow(line2));
 }
 function text3(value2) {
   return typeof value2 === "string" && value2.trim() ? value2 : null;
 }
-function reword(error2, message2) {
-  return new InterfaceApiError(message2, error2.code, error2.reason, error2.details, error2.status, error2.body);
+function reword(error2, message3) {
+  return new InterfaceApiError(message3, error2.code, error2.reason, error2.details, error2.status, error2.body);
 }
 async function follow(operationId, what, options) {
   const stop = interruption(options.deps);
@@ -89163,7 +89533,7 @@ async function follow(operationId, what, options) {
       intervalMs: options.deps.pollIntervalMs,
       signal: stop.signal,
       now: options.deps.now,
-      onStatus: (operation) => say(import_picocolors76.default.dim(`  ${what} ${operation.status}`)),
+      onStatus: (operation) => say(import_picocolors77.default.dim(`  ${what} ${operation.status}`)),
       onStall: () => warn2(`The ${what} looks stalled: its worker stopped checking in. Still waiting, in case another worker picks it up.`)
     });
     if (outcome.kind === "settled") {
@@ -89182,7 +89552,7 @@ function reportUnsuccessful(result2, what, options) {
   if (options.json) {
     printJson({ outcome: result2.outcome, operation_id: result2.operationId, operation: result2.operation });
   } else if (result2.outcome === "failed") {
-    console.error(import_picocolors76.default.red(`The ${what} failed (operation ${id}):`));
+    console.error(import_picocolors77.default.red(`The ${what} failed (operation ${id}):`));
     console.error(safeBlock(result2.operation?.error ?? "Brainbase gave no reason."));
   } else if (result2.outcome === "timeout") {
     warn2(`Stopped waiting after ${Math.round(options.timeoutMs / 1000)}s. The ${what} keeps running on the server (operation ${id}).`);
@@ -89242,7 +89612,7 @@ async function rebuild(ctx) {
       if (json3)
         printJson({ outcome: "started", operation_id: operationId, operation });
       else
-        console.log(import_picocolors76.default.dim(`  Follow it with \`brainbase interface builds ${safe(id)}\`.`));
+        console.log(import_picocolors77.default.dim(`  Follow it with \`brainbase interface builds ${safe(id)}\`.`));
       return;
     }
     const result2 = await follow(operationId, "build", { json: json3, timeoutMs: waitMs, deps: ctx.deps });
@@ -89254,8 +89624,8 @@ async function rebuild(ctx) {
     }
     const buildId = safe(result2.operation?.build_id ?? "");
     const version2 = safe(result2.operation?.source_version_id ?? "");
-    console.log(import_picocolors76.default.green(`✓ Build ${buildId} succeeded${version2 ? ` (version ${version2})` : ""}.`));
-    console.log(import_picocolors76.default.dim(`  Publish it with \`brainbase interface publish ${safe(id)} --build ${buildId}\`.`));
+    console.log(import_picocolors77.default.green(`✓ Build ${buildId} succeeded${version2 ? ` (version ${version2})` : ""}.`));
+    console.log(import_picocolors77.default.dim(`  Publish it with \`brainbase interface publish ${safe(id)} --build ${buildId}\`.`));
   });
 }
 function liveBuildOf(row, releases) {
@@ -89313,7 +89683,7 @@ function describeBuild(buildId, builds) {
   const build2 = builds.find((candidate) => candidate.id === buildId);
   if (!build2)
     return `build ${safe(buildId)}`;
-  return `build ${safe(build2.id)} ${import_picocolors76.default.dim(`(version ${safe(build2.source_version_id)}, built ${ago(build2.created_at)})`)}`;
+  return `build ${safe(build2.id)} ${import_picocolors77.default.dim(`(version ${safe(build2.source_version_id)}, built ${ago(build2.created_at)})`)}`;
 }
 function reportAlreadyLive(json3, buildId, releaseId, url2) {
   if (json3) {
@@ -89367,8 +89737,8 @@ async function publish(ctx) {
     }
     if (!json3) {
       console.log("");
-      console.log(`  ${import_picocolors76.default.dim("Live now".padEnd(14))}${liveBuildId ? `${describeBuild(liveBuildId, builds)} at ${safe(row.live_release?.url)}` : row.live_release ? `release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}` : import_picocolors76.default.dim("nothing")}`);
-      console.log(`  ${import_picocolors76.default.dim("Will publish".padEnd(14))}${describeBuild(buildId, builds)}`);
+      console.log(`  ${import_picocolors77.default.dim("Live now".padEnd(14))}${liveBuildId ? `${describeBuild(liveBuildId, builds)} at ${safe(row.live_release?.url)}` : row.live_release ? `release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}` : import_picocolors77.default.dim("nothing")}`);
+      console.log(`  ${import_picocolors77.default.dim("Will publish".padEnd(14))}${describeBuild(buildId, builds)}`);
       console.log("");
     }
     const proceed = await confirmChange({
@@ -89411,7 +89781,7 @@ async function publish(ctx) {
       if (json3)
         printJson({ outcome: "started", operation_id: operationId, operation });
       else
-        console.log(import_picocolors76.default.dim(`  Check it with \`brainbase interface get ${safe(id)}\`.`));
+        console.log(import_picocolors77.default.dim(`  Check it with \`brainbase interface get ${safe(id)}\`.`));
       return;
     }
     const result2 = await follow(operationId, "publish", { json: json3, timeoutMs: waitMs, deps: ctx.deps });
@@ -89428,11 +89798,11 @@ async function publish(ctx) {
       printJson({ outcome: "succeeded", operation_id: operationId, operation: result2.operation, url: url2 });
       return;
     }
-    console.log(import_picocolors76.default.green(`✓ Build ${safe(buildId)} is live.`));
+    console.log(import_picocolors77.default.green(`✓ Build ${safe(buildId)} is live.`));
     if (url2)
       console.log(`  ${safe(url2)}`);
     if (urlUnread) {
-      console.log(import_picocolors76.default.dim(`  Its address could not be read just now; see it with \`brainbase interface open ${safe(id)}\`.`));
+      console.log(import_picocolors77.default.dim(`  Its address could not be read just now; see it with \`brainbase interface open ${safe(id)}\`.`));
     }
   });
 }
@@ -89468,8 +89838,8 @@ async function rollback(ctx) {
     }
     if (!json3) {
       console.log("");
-      console.log(`  ${import_picocolors76.default.dim("Live now".padEnd(16))}release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}`);
-      console.log(`  ${import_picocolors76.default.dim("Will republish".padEnd(16))}release ${safe(releaseId)} ${import_picocolors76.default.dim("as a new release, with a new id")}`);
+      console.log(`  ${import_picocolors77.default.dim("Live now".padEnd(16))}release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}`);
+      console.log(`  ${import_picocolors77.default.dim("Will republish".padEnd(16))}release ${safe(releaseId)} ${import_picocolors77.default.dim("as a new release, with a new id")}`);
       console.log("");
     }
     const proceed = await confirmChange({
@@ -89502,7 +89872,7 @@ async function rollback(ctx) {
       printJson(release);
       return;
     }
-    console.log(import_picocolors76.default.green(release.id === releaseId ? `✓ Release ${safe(releaseId)} is live (build ${safe(release.build_id)}).` : `✓ Republished release ${safe(releaseId)} as new release ${safe(release.id)} (build ${safe(release.build_id)}). It is live.`));
+    console.log(import_picocolors77.default.green(release.id === releaseId ? `✓ Release ${safe(releaseId)} is live (build ${safe(release.build_id)}).` : `✓ Republished release ${safe(releaseId)} as new release ${safe(release.id)} (build ${safe(release.build_id)}). It is live.`));
     console.log(`  ${safe(release.url)}`);
   });
 }
@@ -89537,14 +89907,14 @@ ${didYouMean(sub, Object.keys(COMMANDS2), "brainbase interface")}`);
   await command({ cwd: cwd2, args, deps });
 }
 function line2(command, args, description) {
-  return `  ${import_picocolors77.default.cyan(command)}${args ? ` ${import_picocolors77.default.dim(args)}` : ""}
-      ${import_picocolors77.default.dim(description)}`;
+  return `  ${import_picocolors78.default.cyan(command)}${args ? ` ${import_picocolors78.default.dim(args)}` : ""}
+      ${import_picocolors78.default.dim(description)}`;
 }
 function printHelp7() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors77.default.bold("brainbase interface")} ${import_picocolors77.default.dim("<sub> [options]")}`);
-  out.push(`  ${import_picocolors77.default.dim("Dashboards for an agent: build them in a conversation, publish them, choose who can open them.")}`);
+  out.push(`  ${import_picocolors78.default.bold("brainbase interface")} ${import_picocolors78.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors78.default.dim("Dashboards for an agent: build them in a conversation, publish them, choose who can open them.")}`);
   out.push("");
   out.push(line2("ls", "[--agent <id>] [--archived | --only-archived]", "list interfaces you can see"));
   out.push(line2("get", "<id>", "one interface: address, audience, live release, draft, running build conversation"));
@@ -89564,22 +89934,22 @@ function printHelp7() {
   out.push(line2("rollback", "<id> --release <id>", "republish an earlier release; it goes live under a new release id"));
   out.push(line2("preview", "<id> [--task <id>] [--no-wait]", "serve the unpublished draft from its build conversation and print the preview address"));
   out.push("");
-  out.push(`  ${import_picocolors77.default.dim("--json")}                   machine-readable output; never prompts`);
-  out.push(`  ${import_picocolors77.default.dim("--yes, -y")}                skip confirmation (required without a terminal)`);
-  out.push(`  ${import_picocolors77.default.dim("--no-wait")}                for rebuild and publish: return the operation at once; for preview: do not wait for the dev server`);
-  out.push(`  ${import_picocolors77.default.dim("--timeout <seconds>")}      for build, rebuild, publish and preview: how long to wait (builds 900, publish and preview 300)`);
-  out.push(`  ${import_picocolors77.default.dim("--idempotency-key <key>")}  replay a create, build, rebuild, publish or rollback whose answer was lost`);
+  out.push(`  ${import_picocolors78.default.dim("--json")}                   machine-readable output; never prompts`);
+  out.push(`  ${import_picocolors78.default.dim("--yes, -y")}                skip confirmation (required without a terminal)`);
+  out.push(`  ${import_picocolors78.default.dim("--no-wait")}                for rebuild and publish: return the operation at once; for preview: do not wait for the dev server`);
+  out.push(`  ${import_picocolors78.default.dim("--timeout <seconds>")}      for build, rebuild, publish and preview: how long to wait (builds 900, publish and preview 300)`);
+  out.push(`  ${import_picocolors78.default.dim("--idempotency-key <key>")}  replay a create, build, rebuild, publish or rollback whose answer was lost`);
   out.push("");
-  out.push(`  ${import_picocolors77.default.dim("People are emails (see `brainbase member ls`), user ids, or `me`. Audience members also need access to the agent.")}`);
-  out.push(`  ${import_picocolors77.default.dim("Audience: everyone (--everyone, `org` under --json) or chosen people (--people, `users` under --json).")}`);
-  out.push(`  ${import_picocolors77.default.dim("Exit codes: 0 done, 1 refused or failed, 130 interrupted (the server keeps working).")}`);
+  out.push(`  ${import_picocolors78.default.dim("People are emails (see `brainbase member ls`), user ids, or `me`. Audience members also need access to the agent.")}`);
+  out.push(`  ${import_picocolors78.default.dim("Audience: everyone (--everyone, `org` under --json) or chosen people (--people, `users` under --json).")}`);
+  out.push(`  ${import_picocolors78.default.dim("Exit codes: 0 done, 1 refused or failed, 130 interrupted (the server keeps working).")}`);
   out.push("");
   console.log(out.join(`
 `));
 }
 
 // src/cli/member.ts
-var import_picocolors78 = __toESM(require_picocolors(), 1);
+var import_picocolors79 = __toESM(require_picocolors(), 1);
 async function runMember(sub, args, opts) {
   if (args.some((arg) => arg === "--help" || arg === "-h")) {
     printHelp8();
@@ -89622,7 +89992,7 @@ async function runMemberList(opts) {
 function formatMemberList(members) {
   if (members.length === 0)
     return `
-  ${import_picocolors78.default.dim("Nobody here you can see.")}
+  ${import_picocolors79.default.dim("Nobody here you can see.")}
 `;
   const sorted = [...members].sort((a3, b4) => (a3.email ?? a3.id).localeCompare(b4.email ?? b4.id));
   const rows = sorted.map((member) => ({
@@ -89636,24 +90006,24 @@ function formatMemberList(members) {
   const roleWidth = Math.max(...rows.map((row) => row.role.length));
   const lines = [""];
   for (const row of rows) {
-    lines.push(`  ${row.email.padEnd(emailWidth)}  ${row.name.padEnd(nameWidth)}  ${import_picocolors78.default.dim(row.role.padEnd(roleWidth))}  ${import_picocolors78.default.dim(row.teams)}`.trimEnd());
+    lines.push(`  ${row.email.padEnd(emailWidth)}  ${row.name.padEnd(nameWidth)}  ${import_picocolors79.default.dim(row.role.padEnd(roleWidth))}  ${import_picocolors79.default.dim(row.teams)}`.trimEnd());
   }
-  lines.push("", `  ${import_picocolors78.default.dim("share a dashboard with one of them:")} ${import_picocolors78.default.cyan("brainbase interface access <id> --add <email>")}`, "");
+  lines.push("", `  ${import_picocolors79.default.dim("share a dashboard with one of them:")} ${import_picocolors79.default.cyan("brainbase interface access <id> --add <email>")}`, "");
   return lines.join(`
 `);
 }
 function printHelp8() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors78.default.bold("brainbase member")} ${import_picocolors78.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors79.default.bold("brainbase member")} ${import_picocolors79.default.dim("<sub> [options]")}`);
   out.push("");
-  out.push(`  ${import_picocolors78.default.cyan("ls")}   ${import_picocolors78.default.dim("the people in an organization you can see, with their emails, roles and teams")}`);
+  out.push(`  ${import_picocolors79.default.cyan("ls")}   ${import_picocolors79.default.dim("the people in an organization you can see, with their emails, roles and teams")}`);
   out.push("");
-  out.push(`  ${import_picocolors78.default.dim("--org <id-or-slug>")}  ${import_picocolors78.default.dim("which organization (picked automatically when you are in one)")}`);
-  out.push(`  ${import_picocolors78.default.dim("--json")}              ${import_picocolors78.default.dim("machine-readable output")}`);
+  out.push(`  ${import_picocolors79.default.dim("--org <id-or-slug>")}  ${import_picocolors79.default.dim("which organization (picked automatically when you are in one)")}`);
+  out.push(`  ${import_picocolors79.default.dim("--json")}              ${import_picocolors79.default.dim("machine-readable output")}`);
   out.push("");
-  out.push(`  ${import_picocolors78.default.dim("Owners and admins see everyone. Anyone else sees the owners, the admins, themselves")}`);
-  out.push(`  ${import_picocolors78.default.dim("and the people who share a team with them, as in the web app.")}`);
+  out.push(`  ${import_picocolors79.default.dim("Owners and admins see everyone. Anyone else sees the owners, the admins, themselves")}`);
+  out.push(`  ${import_picocolors79.default.dim("and the people who share a team with them, as in the web app.")}`);
   out.push("");
   console.log(out.join(`
 `));
@@ -90105,8 +90475,8 @@ var BENCHMARK_CAPABILITIES = {
 class BenchmarkPhaseError extends Error {
   code;
   details;
-  constructor(code, message2, details) {
-    super(message2);
+  constructor(code, message3, details) {
+    super(message3);
     this.code = code;
     this.details = details;
     this.name = "BenchmarkPhaseError";
@@ -90117,8 +90487,8 @@ class BenchmarkCommandExecutionError extends BenchmarkPhaseError {
   stdout;
   stderr;
   durationMs;
-  constructor(code, message2, stdout, stderr, durationMs) {
-    super(code, message2);
+  constructor(code, message3, stdout, stderr, durationMs) {
+    super(code, message3);
     this.stdout = stdout;
     this.stderr = stderr;
     this.durationMs = durationMs;
@@ -92746,7 +93116,7 @@ async function runBenchmarkPhase(specPathInput, resultPathInput, expectedPhase,
 }
 
 // src/cli/benchmark-control.ts
-var import_picocolors79 = __toESM(require_picocolors(), 1);
+var import_picocolors80 = __toESM(require_picocolors(), 1);
 import fs92 from "node:fs";
 import path103 from "node:path";
 
@@ -92758,8 +93128,8 @@ var BENCHMARK_UPLOAD_MIN_BYTES_PER_SECOND = 256 * 1024;
 class BenchmarkClientUsageError extends Error {
   code = "invalid_arguments";
   retryable = false;
-  constructor(message2) {
-    super(message2);
+  constructor(message3) {
+    super(message3);
     this.name = "BenchmarkClientUsageError";
   }
 }
@@ -92768,8 +93138,8 @@ class BenchmarkApiError extends ApiError {
   code;
   requestId;
   retryable;
-  constructor(message2, status, body, code, requestId, retryable) {
-    super(message2, status, body);
+  constructor(message3, status, body, code, requestId, retryable) {
+    super(message3, status, body);
     this.code = code;
     this.requestId = requestId;
     this.name = "BenchmarkApiError";
@@ -95050,8 +95420,8 @@ function expectPositionals2(positionals, minimum, maximum, usage) {
     throw usageError(`Usage: ${usage}`);
   }
 }
-function usageError(message2) {
-  return Object.assign(new Error(message2), {
+function usageError(message3) {
+  return Object.assign(new Error(message3), {
     code: "invalid_arguments",
     retryable: false
   });
@@ -95760,20 +96130,20 @@ async function emitCursorPages(output, fetchPage, options) {
 function commandHelp() {
   return [
     "",
-    `  ${import_picocolors79.default.bold("brainbase benchmark")} ${import_picocolors79.default.dim("<command> [options]")}`,
+    `  ${import_picocolors80.default.bold("brainbase benchmark")} ${import_picocolors80.default.dim("<command> [options]")}`,
     "",
-    `  ${import_picocolors79.default.cyan("init | list | show | create | validate | pull | push")}`,
-    `  ${import_picocolors79.default.cyan("publish | revisions | import | export | archive | restore")}`,
-    `  ${import_picocolors79.default.cyan("run plan|start|watch|list|show|cancel|resume")}`,
-    `  ${import_picocolors79.default.cyan("results | diagnoses | attempt | artifacts | export-results")}`,
-    `  ${import_picocolors79.default.cyan("history | baseline show|set|clear")}`,
+    `  ${import_picocolors80.default.cyan("init | list | show | create | validate | pull | push")}`,
+    `  ${import_picocolors80.default.cyan("publish | revisions | import | export | archive | restore")}`,
+    `  ${import_picocolors80.default.cyan("run plan|start|watch|list|show|cancel|resume")}`,
+    `  ${import_picocolors80.default.cyan("results | diagnoses | attempt | artifacts | export-results")}`,
+    `  ${import_picocolors80.default.cyan("history | baseline show|set|clear")}`,
     "",
-    `  ${import_picocolors79.default.dim("Use --agent to override brainbase.agent.yaml, and --json or --jsonl for automation.")}`,
+    `  ${import_picocolors80.default.dim("Use --agent to override brainbase.agent.yaml, and --json or --jsonl for automation.")}`,
     "",
-    `  ${import_picocolors79.default.bold("benchmark runtime (machine-only)")}`,
-    `  ${import_picocolors79.default.cyan("hydrate")} ${import_picocolors79.default.dim("--spec <path> --result <path> --json")}`,
-    `  ${import_picocolors79.default.cyan("evaluate")} ${import_picocolors79.default.dim("--spec <path> --result <path> --json")}`,
-    `  ${import_picocolors79.default.cyan("capabilities")} ${import_picocolors79.default.dim("--json")}`,
+    `  ${import_picocolors80.default.bold("benchmark runtime (machine-only)")}`,
+    `  ${import_picocolors80.default.cyan("hydrate")} ${import_picocolors80.default.dim("--spec <path> --result <path> --json")}`,
+    `  ${import_picocolors80.default.cyan("evaluate")} ${import_picocolors80.default.dim("--spec <path> --result <path> --json")}`,
+    `  ${import_picocolors80.default.cyan("capabilities")} ${import_picocolors80.default.dim("--json")}`,
     ""
   ].join(`
 `);
@@ -96219,8 +96589,8 @@ async function runStart(cwd2, argv, deps) {
 }
 function pausedRunHint(runId, run, agentId) {
   const reason = run.paused_reason;
-  const message2 = reason && typeof reason === "object" && !Array.isArray(reason) ? reason.message : undefined;
-  const first = typeof message2 === "string" && message2.trim() ? `Run paused: ${message2.trim()}` : "Run paused.";
+  const message3 = reason && typeof reason === "object" && !Array.isArray(reason) ? reason.message : undefined;
+  const first = typeof message3 === "string" && message3.trim() ? `Run paused: ${message3.trim()}` : "Run paused.";
   const agent = agentId ? ` --agent ${agentId}` : "";
   return `${first}
 Resume with: brainbase benchmark run resume ${runId} --yes${agent}`;
@@ -96876,7 +97246,7 @@ function parsePhaseArgs(args) {
     throw new Error("--json is required for benchmark phase commands");
   return { spec, result: result2, json: true };
 }
-function argumentFailure(phase, message2) {
+function argumentFailure(phase, message3) {
   const timestamp = new Date().toISOString();
   return {
     schema_version: "1",
@@ -96894,11 +97264,11 @@ function argumentFailure(phase, message2) {
     outputs: [],
     error: {
       code: "invalid_arguments",
-      message: message2
+      message: message3
     }
   };
 }
-function phaseFailure(invocation, startedAt, started, code, message2) {
+function phaseFailure(invocation, startedAt, started, code, message3) {
   return {
     schema_version: "1",
     cli_version: VERSION,
@@ -96913,7 +97283,7 @@ function phaseFailure(invocation, startedAt, started, code, message2) {
     steps: [],
     inputs: [],
     outputs: [],
-    error: { code, message: message2 }
+    error: { code, message: message3 }
   };
 }
 function descendantPids2(parentPid) {
@@ -97241,208 +97611,213 @@ var SUBCOMMAND_OWNED_FLAGS = {
 function help() {
   const out = [];
   out.push("");
-  out.push(`  ${brandTint("◆")}  ${import_picocolors80.default.bold("brainbase")}  ${import_picocolors80.default.dim(`v${VERSION}`)}`);
-  out.push(`     ${import_picocolors80.default.dim("connect your local agent to the brainbase platform")}`);
+  out.push(`  ${brandTint("◆")}  ${import_picocolors81.default.bold("brainbase")}  ${import_picocolors81.default.dim(`v${VERSION}`)}`);
+  out.push(`     ${import_picocolors81.default.dim("connect your local agent to the brainbase platform")}`);
   out.push("");
   out.push(divider("USAGE"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.bold("brainbase")} ${import_picocolors80.default.dim("<command> [options]")}`);
+  out.push(`  ${import_picocolors81.default.bold("brainbase")} ${import_picocolors81.default.dim("<command> [options]")}`);
   out.push("");
   out.push(divider("AUTH"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("login")}     ${import_picocolors80.default.dim("  open the web app and connect this device")}`);
-  out.push(`  ${import_picocolors80.default.cyan("logout")}    ${import_picocolors80.default.dim("  clear the local session")}`);
-  out.push(`  ${import_picocolors80.default.cyan("whoami")} ${import_picocolors80.default.dim("[--json]")} ${import_picocolors80.default.dim(" show which credential is in use and what it covers")}`);
+  out.push(`  ${import_picocolors81.default.cyan("login")}     ${import_picocolors81.default.dim("  open the web app and connect this device")}`);
+  out.push(`  ${import_picocolors81.default.cyan("logout")}    ${import_picocolors81.default.dim("  clear the local session")}`);
+  out.push(`  ${import_picocolors81.default.cyan("whoami")} ${import_picocolors81.default.dim("[--json]")} ${import_picocolors81.default.dim(" show which credential is in use and what it covers")}`);
   out.push("");
   out.push(divider("DISCOVERY"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("team list")}                  ${import_picocolors80.default.dim("show the teams you can create agents in")}`);
-  out.push(`  ${import_picocolors80.default.cyan("member ls")}                  ${import_picocolors80.default.dim("show the people in an organization, with the emails interface access takes")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent list")}                 ${import_picocolors80.default.dim("show a team's agents and their ids")}`);
+  out.push(`  ${import_picocolors81.default.cyan("team list")}                  ${import_picocolors81.default.dim("show the teams you can create agents in")}`);
+  out.push(`  ${import_picocolors81.default.cyan("member ls")}                  ${import_picocolors81.default.dim("show the people in an organization, with the emails interface access takes")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent list")}                 ${import_picocolors81.default.dim("show a team's agents and their ids")}`);
   out.push("");
   out.push(divider("LINKED AGENT"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("agent init")}                 ${import_picocolors80.default.dim("write a starter brainbase.agent.yaml here — offline, no login needed")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent create")}               ${import_picocolors80.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent pull")} ${import_picocolors80.default.dim("[<id>]")}          ${import_picocolors80.default.dim("bring cloud changes into this folder (--force to override; --run-entrypoint to also execute the agent entrypoint; --link to link first)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent push")}                 ${import_picocolors80.default.dim("send local changes to the cloud (--force to overwrite cloud-side conflicts with local)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent delete")} ${import_picocolors80.default.dim("<id>")}          ${import_picocolors80.default.dim("permanently delete a cloud agent and every task it has run")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent unpack")}               ${import_picocolors80.default.dim("install the claimed agent into a harness layout")}`);
-  out.push(`  ${import_picocolors80.default.cyan("link")}                       ${import_picocolors80.default.dim("attach this folder to an existing agent")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent status")}               ${import_picocolors80.default.dim("show what would pull and what would push")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent connections")}          ${import_picocolors80.default.dim("show which integrations this agent is wired to (--json for CI)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent connect")} ${import_picocolors80.default.dim("<name>")}       ${import_picocolors80.default.dim("connect chat, slack, meeting, github, linear or phone")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent disconnect")} ${import_picocolors80.default.dim("<name>")}    ${import_picocolors80.default.dim("disable or disconnect an agent surface")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent surface")} ${import_picocolors80.default.dim("<name>")}       ${import_picocolors80.default.dim("status, settings and setup for all six surfaces (--help)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent versions")}             ${import_picocolors80.default.dim("saved versions: list, show, diff, label, restore, pin and unpin (`agent versions --help`)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent eval")} ${import_picocolors80.default.dim("<list|runs>")}     ${import_picocolors80.default.dim("read eval definitions and judge verdicts (`agent eval --help`)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("agent env")}                  ${import_picocolors80.default.dim("print export lines for `eval $(brainbase agent env)`")}`);
-  out.push(`  ${import_picocolors80.default.cyan("run")} ${import_picocolors80.default.dim("<cmd> [args...]")}         ${import_picocolors80.default.dim("run <cmd> with secrets.env loaded into env")}`);
-  out.push(`  ${import_picocolors80.default.cyan("status")}                     ${import_picocolors80.default.dim("show what this folder is linked to")}`);
-  out.push(`  ${import_picocolors80.default.cyan("unlink")}                     ${import_picocolors80.default.dim("disconnect this folder")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent init")}                 ${import_picocolors81.default.dim("write a starter brainbase.agent.yaml here — offline, no login needed")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent create")}               ${import_picocolors81.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent pull")} ${import_picocolors81.default.dim("[<id>]")}          ${import_picocolors81.default.dim("bring cloud changes into this folder (--force to override; --run-entrypoint to also execute the agent entrypoint; --link to link first)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent push")}                 ${import_picocolors81.default.dim("send local changes to the cloud (--force to overwrite cloud-side conflicts with local)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent delete")} ${import_picocolors81.default.dim("<id>")}          ${import_picocolors81.default.dim("permanently delete a cloud agent and every task it has run")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent unpack")}               ${import_picocolors81.default.dim("install the claimed agent into a harness layout")}`);
+  out.push(`  ${import_picocolors81.default.cyan("link")}                       ${import_picocolors81.default.dim("attach this folder to an existing agent")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent status")}               ${import_picocolors81.default.dim("show what would pull and what would push")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent connections")}          ${import_picocolors81.default.dim("show which integrations this agent is wired to (--json for CI)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent connect")} ${import_picocolors81.default.dim("<name>")}       ${import_picocolors81.default.dim("connect chat, slack, meeting, github, linear or phone")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent disconnect")} ${import_picocolors81.default.dim("<name>")}    ${import_picocolors81.default.dim("disable or disconnect an agent surface")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent surface")} ${import_picocolors81.default.dim("<name>")}       ${import_picocolors81.default.dim("status, settings and setup for all six surfaces (--help)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent versions")}             ${import_picocolors81.default.dim("saved versions: list, show, diff, label, restore, pin and unpin (`agent versions --help`)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent eval")} ${import_picocolors81.default.dim("<list|runs>")}     ${import_picocolors81.default.dim("read eval definitions and judge verdicts (`agent eval --help`)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("agent env")}                  ${import_picocolors81.default.dim("print export lines for `eval $(brainbase agent env)`")}`);
+  out.push(`  ${import_picocolors81.default.cyan("run")} ${import_picocolors81.default.dim("<cmd> [args...]")}         ${import_picocolors81.default.dim("run <cmd> with secrets.env loaded into env")}`);
+  out.push(`  ${import_picocolors81.default.cyan("status")}                     ${import_picocolors81.default.dim("show what this folder is linked to")}`);
+  out.push(`  ${import_picocolors81.default.cyan("unlink")}                     ${import_picocolors81.default.dim("disconnect this folder")}`);
   out.push("");
   out.push(divider("TASKS"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("task create")} ${import_picocolors80.default.dim("--message <text>")}   ${import_picocolors80.default.dim("create a managed task and start its first run (--wait to block on it; --interface <id> for a build conversation)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("task list")}                       ${import_picocolors80.default.dim("recent tasks you can reach (--metadata k=v to filter by label; --interface <id> for its build conversations)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("task get")} ${import_picocolors80.default.dim("<task-id>")}              ${import_picocolors80.default.dim("one task: status, agent, machine, eval verdicts")}`);
-  out.push(`  ${import_picocolors80.default.cyan("task logs")} ${import_picocolors80.default.dim("<task-id> [--follow]")}  ${import_picocolors80.default.dim("one line per event in the task's transcript, or tail it live")}`);
-  out.push(`  ${import_picocolors80.default.cyan("task send")} ${import_picocolors80.default.dim("<task-id> <message>")}  ${import_picocolors80.default.dim("send a follow-up during execution, or queue it for the next turn")}`);
-  out.push(`  ${import_picocolors80.default.cyan("task stop")} ${import_picocolors80.default.dim("<task-id>")}             ${import_picocolors80.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
-  out.push(`  ${import_picocolors80.default.cyan("task update")} ${import_picocolors80.default.dim("<task-id>")}           ${import_picocolors80.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
-  out.push(`  ${import_picocolors80.default.cyan("task delete")} ${import_picocolors80.default.dim("<task-id>")}           ${import_picocolors80.default.dim("permanently delete a stopped task and tear down its sandbox")}`);
+  out.push(`  ${import_picocolors81.default.cyan("task create")} ${import_picocolors81.default.dim("--message <text>")}   ${import_picocolors81.default.dim("create a managed task and start its first run (--wait to block on it; --interface <id> for a build conversation)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("task list")}                       ${import_picocolors81.default.dim("recent tasks you can reach (--metadata k=v to filter by label; --interface <id> for its build conversations)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("task get")} ${import_picocolors81.default.dim("<task-id>")}              ${import_picocolors81.default.dim("one task: status, agent, machine, eval verdicts")}`);
+  out.push(`  ${import_picocolors81.default.cyan("task logs")} ${import_picocolors81.default.dim("<task-id> [--follow]")}  ${import_picocolors81.default.dim("one line per event in the task's transcript, or tail it live")}`);
+  out.push(`  ${import_picocolors81.default.cyan("task send")} ${import_picocolors81.default.dim("<task-id> <message>")}  ${import_picocolors81.default.dim("send a follow-up during execution, or queue it for the next turn")}`);
+  out.push(`  ${import_picocolors81.default.cyan("task stop")} ${import_picocolors81.default.dim("<task-id>")}             ${import_picocolors81.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
+  out.push(`  ${import_picocolors81.default.cyan("task update")} ${import_picocolors81.default.dim("<task-id>")}           ${import_picocolors81.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
+  out.push(`  ${import_picocolors81.default.cyan("task delete")} ${import_picocolors81.default.dim("<task-id>")}           ${import_picocolors81.default.dim("permanently delete a stopped task and tear down its sandbox")}`);
   out.push("");
   out.push(divider("INTERFACES"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("interface ls")}                    ${import_picocolors80.default.dim("dashboards you can see (--agent to narrow)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("interface create")} ${import_picocolors80.default.dim("--name <n>")}     ${import_picocolors80.default.dim("create one on an agent, with who can open it")}`);
-  out.push(`  ${import_picocolors80.default.cyan("interface build")} ${import_picocolors80.default.dim('<id> "<ask>"')}    ${import_picocolors80.default.dim("describe a change; the agent builds it while you watch")}`);
-  out.push(`  ${import_picocolors80.default.cyan("interface publish")} ${import_picocolors80.default.dim("<id>")}          ${import_picocolors80.default.dim("make the newest succeeded build live")}`);
-  out.push(`  ${import_picocolors80.default.cyan("interface rollback")} ${import_picocolors80.default.dim("<id>")}         ${import_picocolors80.default.dim("republish an earlier release under a new id (--release <id>)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("interface access")} ${import_picocolors80.default.dim("<id>")}           ${import_picocolors80.default.dim("show or set who can open it")}`);
-  out.push(`  ${import_picocolors80.default.cyan("interface --help")}                ${import_picocolors80.default.dim("every interface subcommand")}`);
+  out.push(`  ${import_picocolors81.default.cyan("interface ls")}                    ${import_picocolors81.default.dim("dashboards you can see (--agent to narrow)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("interface create")} ${import_picocolors81.default.dim("--name <n>")}     ${import_picocolors81.default.dim("create one on an agent, with who can open it")}`);
+  out.push(`  ${import_picocolors81.default.cyan("interface build")} ${import_picocolors81.default.dim('<id> "<ask>"')}    ${import_picocolors81.default.dim("describe a change; the agent builds it while you watch")}`);
+  out.push(`  ${import_picocolors81.default.cyan("interface publish")} ${import_picocolors81.default.dim("<id>")}          ${import_picocolors81.default.dim("make the newest succeeded build live")}`);
+  out.push(`  ${import_picocolors81.default.cyan("interface rollback")} ${import_picocolors81.default.dim("<id>")}         ${import_picocolors81.default.dim("republish an earlier release under a new id (--release <id>)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("interface access")} ${import_picocolors81.default.dim("<id>")}           ${import_picocolors81.default.dim("show or set who can open it")}`);
+  out.push(`  ${import_picocolors81.default.cyan("interface --help")}                ${import_picocolors81.default.dim("every interface subcommand")}`);
   out.push("");
   out.push(divider("SANDBOXES"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("machine ls")} ${import_picocolors80.default.dim("[--all]")}            ${import_picocolors80.default.dim("list your sandboxes — live ones only unless --all")}`);
-  out.push(`  ${import_picocolors80.default.cyan("machine rm")} ${import_picocolors80.default.dim("<id>")}               ${import_picocolors80.default.dim("tear a sandbox down (it bills until you do)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("machine ls")} ${import_picocolors81.default.dim("[--all]")}            ${import_picocolors81.default.dim("list your sandboxes — live ones only unless --all")}`);
+  out.push(`  ${import_picocolors81.default.cyan("machine rm")} ${import_picocolors81.default.dim("<id>")}               ${import_picocolors81.default.dim("tear a sandbox down (it bills until you do)")}`);
   out.push("");
   out.push(divider("BENCHMARKS"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("benchmark list")}                    ${import_picocolors80.default.dim("list benchmarks for the linked agent")}`);
-  out.push(`  ${import_picocolors80.default.cyan("benchmark init")} ${import_picocolors80.default.dim("[directory]")}        ${import_picocolors80.default.dim("scaffold a local benchmark")}`);
-  out.push(`  ${import_picocolors80.default.cyan("benchmark create")} ${import_picocolors80.default.dim("[path|-]")}         ${import_picocolors80.default.dim("create a benchmark draft")}`);
-  out.push(`  ${import_picocolors80.default.cyan("benchmark run")} ${import_picocolors80.default.dim("<benchmark> --yes")}   ${import_picocolors80.default.dim("plan and start a benchmark run")}`);
-  out.push(`  ${import_picocolors80.default.cyan("benchmark results")} ${import_picocolors80.default.dim("<run>")}           ${import_picocolors80.default.dim("inspect normalized benchmark results")}`);
+  out.push(`  ${import_picocolors81.default.cyan("benchmark list")}                    ${import_picocolors81.default.dim("list benchmarks for the linked agent")}`);
+  out.push(`  ${import_picocolors81.default.cyan("benchmark init")} ${import_picocolors81.default.dim("[directory]")}        ${import_picocolors81.default.dim("scaffold a local benchmark")}`);
+  out.push(`  ${import_picocolors81.default.cyan("benchmark create")} ${import_picocolors81.default.dim("[path|-]")}         ${import_picocolors81.default.dim("create a benchmark draft")}`);
+  out.push(`  ${import_picocolors81.default.cyan("benchmark run")} ${import_picocolors81.default.dim("<benchmark> --yes")}   ${import_picocolors81.default.dim("plan and start a benchmark run")}`);
+  out.push(`  ${import_picocolors81.default.cyan("benchmark results")} ${import_picocolors81.default.dim("<run>")}           ${import_picocolors81.default.dim("inspect normalized benchmark results")}`);
   out.push("");
   out.push(divider("BENCHMARK RUNTIME"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("benchmark hydrate")} ${import_picocolors80.default.dim("--spec <path> --result <path> --json")}`);
-  out.push(`  ${import_picocolors80.default.cyan("benchmark evaluate")} ${import_picocolors80.default.dim("--spec <path> --result <path> --json")}`);
-  out.push(`  ${import_picocolors80.default.cyan("benchmark capabilities")} ${import_picocolors80.default.dim("--json")}`);
+  out.push(`  ${import_picocolors81.default.cyan("benchmark hydrate")} ${import_picocolors81.default.dim("--spec <path> --result <path> --json")}`);
+  out.push(`  ${import_picocolors81.default.cyan("benchmark evaluate")} ${import_picocolors81.default.dim("--spec <path> --result <path> --json")}`);
+  out.push(`  ${import_picocolors81.default.cyan("benchmark capabilities")} ${import_picocolors81.default.dim("--json")}`);
   out.push("");
   out.push(divider("ORCHESTRATIONS"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("orchestration init")}             ${import_picocolors80.default.dim("write a starter brainbase-orchestration.yaml here (offline, no login)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("orchestration create")}           ${import_picocolors80.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
-  out.push(`  ${import_picocolors80.default.cyan("orchestration list")}             ${import_picocolors80.default.dim("list orchestrations under a team")}`);
-  out.push(`  ${import_picocolors80.default.cyan("orchestration pull")} ${import_picocolors80.default.dim("<id>")}        ${import_picocolors80.default.dim("recursively fetch an orchestration + every member agent")}`);
-  out.push(`  ${import_picocolors80.default.cyan("orchestration push")}             ${import_picocolors80.default.dim("recursively push each member, then update the graph")}`);
-  out.push(`  ${import_picocolors80.default.cyan("orchestration status")}           ${import_picocolors80.default.dim("show what would push and what would pull")}`);
-  out.push(`  ${import_picocolors80.default.cyan("orchestration delete")} ${import_picocolors80.default.dim("<id>")}      ${import_picocolors80.default.dim("permanently delete an orchestration graph (member agents are kept)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("orchestration init")}             ${import_picocolors81.default.dim("write a starter brainbase-orchestration.yaml here (offline, no login)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("orchestration create")}           ${import_picocolors81.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
+  out.push(`  ${import_picocolors81.default.cyan("orchestration list")}             ${import_picocolors81.default.dim("list orchestrations under a team")}`);
+  out.push(`  ${import_picocolors81.default.cyan("orchestration pull")} ${import_picocolors81.default.dim("<id>")}        ${import_picocolors81.default.dim("recursively fetch an orchestration + every member agent")}`);
+  out.push(`  ${import_picocolors81.default.cyan("orchestration push")}             ${import_picocolors81.default.dim("recursively push each member, then update the graph")}`);
+  out.push(`  ${import_picocolors81.default.cyan("orchestration status")}           ${import_picocolors81.default.dim("show what would push and what would pull")}`);
+  out.push(`  ${import_picocolors81.default.cyan("orchestration delete")} ${import_picocolors81.default.dim("<id>")}      ${import_picocolors81.default.dim("permanently delete an orchestration graph (member agents are kept)")}`);
   out.push("");
   out.push(divider("TEMPLATES"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("template pack")}                       ${import_picocolors80.default.dim("bundle the current agent into a template")}`);
-  out.push(`  ${import_picocolors80.default.cyan("template publish")}                    ${import_picocolors80.default.dim("upload a template to the registry")}`);
-  out.push(`  ${import_picocolors80.default.cyan("template search")} ${import_picocolors80.default.dim("[query]")}             ${import_picocolors80.default.dim("search the registry")}`);
-  out.push(`  ${import_picocolors80.default.cyan("template info")}    ${import_picocolors80.default.dim("<creator/slug>")}     ${import_picocolors80.default.dim("show registry details for a template")}`);
-  out.push(`  ${import_picocolors80.default.cyan("template onboard")} ${import_picocolors80.default.dim("<creator/slug>")}     ${import_picocolors80.default.dim("install (or refresh) a template")}`);
-  out.push(`  ${import_picocolors80.default.cyan("template list")}                       ${import_picocolors80.default.dim("show installed templates")}`);
-  out.push(`  ${import_picocolors80.default.cyan("template remove")}  ${import_picocolors80.default.dim("<creator/slug>")}     ${import_picocolors80.default.dim("uninstall a template")}`);
+  out.push(`  ${import_picocolors81.default.cyan("template pack")}                       ${import_picocolors81.default.dim("bundle the current agent into a template")}`);
+  out.push(`  ${import_picocolors81.default.cyan("template publish")}                    ${import_picocolors81.default.dim("upload a template to the registry")}`);
+  out.push(`  ${import_picocolors81.default.cyan("template search")} ${import_picocolors81.default.dim("[query]")}             ${import_picocolors81.default.dim("search the registry")}`);
+  out.push(`  ${import_picocolors81.default.cyan("template info")}    ${import_picocolors81.default.dim("<creator/slug>")}     ${import_picocolors81.default.dim("show registry details for a template")}`);
+  out.push(`  ${import_picocolors81.default.cyan("template onboard")} ${import_picocolors81.default.dim("<creator/slug>")}     ${import_picocolors81.default.dim("install (or refresh) a template")}`);
+  out.push(`  ${import_picocolors81.default.cyan("template list")}                       ${import_picocolors81.default.dim("show installed templates")}`);
+  out.push(`  ${import_picocolors81.default.cyan("template remove")}  ${import_picocolors81.default.dim("<creator/slug>")}     ${import_picocolors81.default.dim("uninstall a template")}`);
   out.push("");
   out.push(divider("SKILLS"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("skill add")} ${import_picocolors80.default.dim("<source>")}                  ${import_picocolors80.default.dim("install a skill (github / git / brainbase)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("skill list")}                            ${import_picocolors80.default.dim("show locally installed skills + their source")}`);
-  out.push(`  ${import_picocolors80.default.cyan("skill update")} ${import_picocolors80.default.dim("<slug>")}                  ${import_picocolors80.default.dim("re-fetch a skill from its recorded source")}`);
-  out.push(`  ${import_picocolors80.default.cyan("skill remove")} ${import_picocolors80.default.dim("<slug>")}                  ${import_picocolors80.default.dim("uninstall a skill")}`);
-  out.push(`  ${import_picocolors80.default.cyan("skill search")} ${import_picocolors80.default.dim("[query]")}                 ${import_picocolors80.default.dim("search the brainbase skill registry")}`);
-  out.push(`  ${import_picocolors80.default.cyan("skill info")} ${import_picocolors80.default.dim("<creator/slug>")}            ${import_picocolors80.default.dim("show registry details for a skill")}`);
-  out.push(`  ${import_picocolors80.default.cyan("skill publish")} ${import_picocolors80.default.dim("[dir]")}                  ${import_picocolors80.default.dim("publish a SKILL.md folder (defaults to .)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("skill add")} ${import_picocolors81.default.dim("<source>")}                  ${import_picocolors81.default.dim("install a skill (github / git / brainbase)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("skill list")}                            ${import_picocolors81.default.dim("show locally installed skills + their source")}`);
+  out.push(`  ${import_picocolors81.default.cyan("skill update")} ${import_picocolors81.default.dim("<slug>")}                  ${import_picocolors81.default.dim("re-fetch a skill from its recorded source")}`);
+  out.push(`  ${import_picocolors81.default.cyan("skill remove")} ${import_picocolors81.default.dim("<slug>")}                  ${import_picocolors81.default.dim("uninstall a skill")}`);
+  out.push(`  ${import_picocolors81.default.cyan("skill search")} ${import_picocolors81.default.dim("[query]")}                 ${import_picocolors81.default.dim("search the brainbase skill registry")}`);
+  out.push(`  ${import_picocolors81.default.cyan("skill info")} ${import_picocolors81.default.dim("<creator/slug>")}            ${import_picocolors81.default.dim("show registry details for a skill")}`);
+  out.push(`  ${import_picocolors81.default.cyan("skill publish")} ${import_picocolors81.default.dim("[dir]")}                  ${import_picocolors81.default.dim("publish a SKILL.md folder (defaults to .)")}`);
   out.push("");
   out.push(divider("CLI TOKENS"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("token create")}                        ${import_picocolors80.default.dim("issue a long-lived CLI key for CI / scripts")}`);
-  out.push(`  ${import_picocolors80.default.cyan("token list")}                          ${import_picocolors80.default.dim("show your tokens")}`);
-  out.push(`  ${import_picocolors80.default.cyan("token rename")} ${import_picocolors80.default.dim("<id>")}                  ${import_picocolors80.default.dim("relabel a token")}`);
-  out.push(`  ${import_picocolors80.default.cyan("token revoke")} ${import_picocolors80.default.dim("<id>")}                  ${import_picocolors80.default.dim("revoke a token")}`);
+  out.push(`  ${import_picocolors81.default.cyan("token create")}                        ${import_picocolors81.default.dim("issue a long-lived CLI key for CI / scripts")}`);
+  out.push(`  ${import_picocolors81.default.cyan("token list")}                          ${import_picocolors81.default.dim("show your tokens")}`);
+  out.push(`  ${import_picocolors81.default.cyan("token rename")} ${import_picocolors81.default.dim("<id>")}                  ${import_picocolors81.default.dim("relabel a token")}`);
+  out.push(`  ${import_picocolors81.default.cyan("token revoke")} ${import_picocolors81.default.dim("<id>")}                  ${import_picocolors81.default.dim("revoke a token")}`);
   out.push("");
   out.push(divider("MCP"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("mcp check")} ${import_picocolors80.default.dim("[--json]")}              ${import_picocolors80.default.dim("verify MCP server connectivity through the brainbase proxy (runs at sandbox bootstrap)")}`);
-  out.push(`  ${import_picocolors80.default.cyan("mcp list")} ${import_picocolors80.default.dim("[--json]")}               ${import_picocolors80.default.dim("show configured servers with OAuth state and expiry")}`);
-  out.push(`  ${import_picocolors80.default.cyan("mcp connect")} ${import_picocolors80.default.dim("<name>")}              ${import_picocolors80.default.dim("authorize an OAuth-backed server: prints a single-use link, opens it, waits for approval")}`);
+  out.push(`  ${import_picocolors81.default.cyan("mcp check")} ${import_picocolors81.default.dim("[--json]")}              ${import_picocolors81.default.dim("verify MCP server connectivity through the brainbase proxy (runs at sandbox bootstrap)")}`);
+  out.push(`  ${import_picocolors81.default.cyan("mcp list")} ${import_picocolors81.default.dim("[--json]")}               ${import_picocolors81.default.dim("show configured servers with OAuth state and expiry")}`);
+  out.push(`  ${import_picocolors81.default.cyan("mcp connect")} ${import_picocolors81.default.dim("<name>")}              ${import_picocolors81.default.dim("authorize an OAuth-backed server: prints a single-use link, opens it, waits for approval")}`);
   out.push("");
   out.push(divider("INTEGRATIONS"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.cyan("integrations list")}                 ${import_picocolors80.default.dim("show the agent's Pipedream apps, accounts and app-level permission")}`);
-  out.push(`  ${import_picocolors80.default.cyan("integrations search")} ${import_picocolors80.default.dim("<query>")}       ${import_picocolors80.default.dim("find apps in the Pipedream catalog")}`);
-  out.push(`  ${import_picocolors80.default.cyan("integrations actions")} ${import_picocolors80.default.dim("<app>")}        ${import_picocolors80.default.dim("list an app's actions and whether each is allowed")}`);
-  out.push(`  ${import_picocolors80.default.cyan("integrations add")} ${import_picocolors80.default.dim("<app>")}            ${import_picocolors80.default.dim("install an app; one that needs an account runs connect")}`);
-  out.push(`  ${import_picocolors80.default.cyan("integrations connect")} ${import_picocolors80.default.dim("<app>")}        ${import_picocolors80.default.dim("open Pipedream's connect page for the app and wait for the account")}`);
-  out.push(`  ${import_picocolors80.default.cyan("integrations disconnect")} ${import_picocolors80.default.dim("<app>")}     ${import_picocolors80.default.dim("delete the app's connected account")}`);
-  out.push(`  ${import_picocolors80.default.cyan("integrations remove")} ${import_picocolors80.default.dim("<app>")}         ${import_picocolors80.default.dim("uninstall an app that needs no account")}`);
-  out.push(`  ${import_picocolors80.default.cyan("integrations allow|ask|deny")} ${import_picocolors80.default.dim("<app>[.<action>]")} ${import_picocolors80.default.dim("set the permission for an app or one of its actions")}`);
+  out.push(`  ${import_picocolors81.default.cyan("integrations list")}                 ${import_picocolors81.default.dim("show the agent's Pipedream apps, accounts and app-level permission")}`);
+  out.push(`  ${import_picocolors81.default.cyan("integrations search")} ${import_picocolors81.default.dim("<query>")}       ${import_picocolors81.default.dim("find apps in the Pipedream catalog")}`);
+  out.push(`  ${import_picocolors81.default.cyan("integrations actions")} ${import_picocolors81.default.dim("<app>")}        ${import_picocolors81.default.dim("list an app's actions and whether each is allowed")}`);
+  out.push(`  ${import_picocolors81.default.cyan("integrations add")} ${import_picocolors81.default.dim("<app>")}            ${import_picocolors81.default.dim("install an app; one that needs an account runs connect")}`);
+  out.push(`  ${import_picocolors81.default.cyan("integrations connect")} ${import_picocolors81.default.dim("<app>")}        ${import_picocolors81.default.dim("open Pipedream's connect page for the app and wait for the account")}`);
+  out.push(`  ${import_picocolors81.default.cyan("integrations disconnect")} ${import_picocolors81.default.dim("<app>")}     ${import_picocolors81.default.dim("delete the app's connected account")}`);
+  out.push(`  ${import_picocolors81.default.cyan("integrations remove")} ${import_picocolors81.default.dim("<app>")}         ${import_picocolors81.default.dim("uninstall an app that needs no account")}`);
+  out.push(`  ${import_picocolors81.default.cyan("integrations allow|ask|deny")} ${import_picocolors81.default.dim("<app>[.<action>]")} ${import_picocolors81.default.dim("set the permission for an app or one of its actions")}`);
+  out.push(`  ${import_picocolors81.default.cyan("integrations context create")} ${import_picocolors81.default.dim("--application <name>")} ${import_picocolors81.default.dim("let a program outside Brainbase (the SDK) use the agent's integrations; prints a renewal handle once")}`);
+  out.push(`  ${import_picocolors81.default.cyan("integrations context end")} ${import_picocolors81.default.dim("<context-id>")}  ${import_picocolors81.default.dim("end a standalone integration context now")}`);
   out.push("");
   out.push(divider("FLAGS"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.dim("--harness <id>")}     force harness for onboard / sync (e.g. claude-code)`);
-  out.push(`  ${import_picocolors80.default.dim("--scope <s>")}        force scope: global | project`);
-  out.push(`  ${import_picocolors80.default.dim("--yes, -y")}          skip confirmations / auto-overwrite`);
+  out.push(`  ${import_picocolors81.default.dim("--harness <id>")}     force harness for onboard / sync (e.g. claude-code)`);
+  out.push(`  ${import_picocolors81.default.dim("--scope <s>")}        force scope: global | project`);
+  out.push(`  ${import_picocolors81.default.dim("--yes, -y")}          skip confirmations / auto-overwrite`);
   out.push(`  ${" ".repeat("--yes, -y".length)}          required for destructive commands with no terminal (pipes, CI)`);
-  out.push(`  ${import_picocolors80.default.dim("--agent <id>")}       for link/task create/mcp list/mcp connect/integrations: use this agent id explicitly instead of the linked folder's (task list: filter to it)`);
-  out.push(`  ${import_picocolors80.default.dim("--message <text>")}   for task create: required first user message`);
-  out.push(`  ${import_picocolors80.default.dim("--title <text>")}     for task create: optional task title; for task update: the new title`);
-  out.push(`  ${import_picocolors80.default.dim("--clear-title")}      for task update: remove the title (automatic titling may name it again later)`);
-  out.push(`  ${import_picocolors80.default.dim("--metadata k=v")}     for task create: label the task; for task list: only tasks with this label; for task update: set one label, keeping the others (all repeatable)`);
-  out.push(`  ${import_picocolors80.default.dim("--unset-metadata <k>")} for task update: remove one label (repeatable)`);
-  out.push(`  ${import_picocolors80.default.dim("--clear-metadata")}   for task update: remove every label; with --metadata, keep only those given`);
-  out.push(`  ${import_picocolors80.default.dim("--model <id>")}       for task create: optional model override; for task update: switch the model the task's next turn runs on (the running turn keeps its model)`);
-  out.push(`  ${import_picocolors80.default.dim("--clear-model")}      for task update: go back to the agent's default model from the next turn`);
-  out.push(`  ${import_picocolors80.default.dim("--version <v>")}      for task create: run a saved version of the agent (12, v12 or a version id)`);
-  out.push(`  ${import_picocolors80.default.dim("--wait")}             for task create: block until the task finishes; exit 1 unless it succeeded`);
-  out.push(`  ${import_picocolors80.default.dim("--timeout <secs>")}   for task create --wait: give up after <secs> and exit 1`);
-  out.push(`  ${import_picocolors80.default.dim("--limit <n>")}        for task list (1-200), task logs (events to print; with --follow, the first page size) and machine ls`);
-  out.push(`  ${import_picocolors80.default.dim("--follow, -f")}       for task logs: stay attached and print events as they land`);
-  out.push(`  ${import_picocolors80.default.dim("--org <id-or-slug>")} pick the organization (team/agent list, agent create, orchestration create/list)`);
-  out.push(`  ${import_picocolors80.default.dim("--team <id>")}        pick the team, same commands (works without --org)`);
-  out.push(`  ${import_picocolors80.default.dim("--all-teams")}        for agent list: every team in the org (the default with no terminal)`);
-  out.push(`  ${import_picocolors80.default.dim("--json")}             machine-readable output for supported commands`);
-  out.push(`  ${import_picocolors80.default.dim("--no-tracking")}      for link / agent pull --link: skip routing LLM traffic through brainbase`);
-  out.push(`  ${import_picocolors80.default.dim("--link")}             for agent pull: link this folder to the agent first, as \`brainbase link --agent <id> --yes\` would, in one process`);
-  out.push(`  ${import_picocolors80.default.dim("--track")}            for agent create: enable tracking non-interactively (off without a TTY)`);
-  out.push(`  ${import_picocolors80.default.dim("--shell <sh|fish>")}  for agent env: pick output format (auto-detected from $SHELL)`);
-  out.push(`  ${import_picocolors80.default.dim("--bot-token <t>")}    for agent connect slack (or BRAINBASE_SLACK_BOT_TOKEN, or stdin)`);
-  out.push(`  ${import_picocolors80.default.dim("--signing-secret <s>")} for agent connect slack (or BRAINBASE_SLACK_SIGNING_SECRET, or stdin)`);
-  out.push(`  ${import_picocolors80.default.dim("--bot-name <name>")}  for agent connect meeting: the bot's display name`);
-  out.push(`  ${import_picocolors80.default.dim("--app-id <id> / --app-name <name>")}  optional Slack app identity`);
-  out.push(`  ${import_picocolors80.default.dim("--bot-image-url <url>")}  optional meeting bot image`);
-  out.push(`  ${import_picocolors80.default.dim("--full")}             for agent/orchestration init: write a commented template covering every block`);
-  out.push(`  ${import_picocolors80.default.dim("--minimal")}          for agent init: write the starter manifest (the default)`);
-  out.push(`  ${import_picocolors80.default.dim("--all")}              for template list: include installs from other folders; for machine ls: include torn-down machines`);
-  out.push(`  ${import_picocolors80.default.dim("--web <url>")}        for login: web app URL (default https://app.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors80.default.dim("--no-open")}          for mcp/integrations connect: print the link without opening a browser (implied with no terminal)`);
-  out.push(`  ${import_picocolors80.default.dim("--no-wait")}          for mcp/integrations connect: print the link and exit instead of waiting`);
-  out.push(`  ${import_picocolors80.default.dim("--account <id>")}     for integrations disconnect: which account, when the app has more than one`);
+  out.push(`  ${import_picocolors81.default.dim("--agent <id>")}       for link/task create/mcp list/mcp connect/integrations: use this agent id explicitly instead of the linked folder's (task list: filter to it)`);
+  out.push(`  ${import_picocolors81.default.dim("--message <text>")}   for task create: required first user message`);
+  out.push(`  ${import_picocolors81.default.dim("--title <text>")}     for task create: optional task title; for task update: the new title`);
+  out.push(`  ${import_picocolors81.default.dim("--clear-title")}      for task update: remove the title (automatic titling may name it again later)`);
+  out.push(`  ${import_picocolors81.default.dim("--metadata k=v")}     for task create: label the task; for task list: only tasks with this label; for task update: set one label, keeping the others (all repeatable)`);
+  out.push(`  ${import_picocolors81.default.dim("--unset-metadata <k>")} for task update: remove one label (repeatable)`);
+  out.push(`  ${import_picocolors81.default.dim("--clear-metadata")}   for task update: remove every label; with --metadata, keep only those given`);
+  out.push(`  ${import_picocolors81.default.dim("--model <id>")}       for task create: optional model override; for task update: switch the model the task's next turn runs on (the running turn keeps its model)`);
+  out.push(`  ${import_picocolors81.default.dim("--clear-model")}      for task update: go back to the agent's default model from the next turn`);
+  out.push(`  ${import_picocolors81.default.dim("--version <v>")}      for task create: run a saved version of the agent (12, v12 or a version id)`);
+  out.push(`  ${import_picocolors81.default.dim("--wait")}             for task create: block until the task finishes; exit 1 unless it succeeded`);
+  out.push(`  ${import_picocolors81.default.dim("--timeout <secs>")}   for task create --wait: give up after <secs> and exit 1`);
+  out.push(`  ${import_picocolors81.default.dim("--limit <n>")}        for task list (1-200), task logs (events to print; with --follow, the first page size) and machine ls`);
+  out.push(`  ${import_picocolors81.default.dim("--follow, -f")}       for task logs: stay attached and print events as they land`);
+  out.push(`  ${import_picocolors81.default.dim("--org <id-or-slug>")} pick the organization (team/agent list, agent create, orchestration create/list)`);
+  out.push(`  ${import_picocolors81.default.dim("--team <id>")}        pick the team, same commands (works without --org)`);
+  out.push(`  ${import_picocolors81.default.dim("--all-teams")}        for agent list: every team in the org (the default with no terminal)`);
+  out.push(`  ${import_picocolors81.default.dim("--json")}             machine-readable output for supported commands`);
+  out.push(`  ${import_picocolors81.default.dim("--no-tracking")}      for link / agent pull --link: skip routing LLM traffic through brainbase`);
+  out.push(`  ${import_picocolors81.default.dim("--link")}             for agent pull: link this folder to the agent first, as \`brainbase link --agent <id> --yes\` would, in one process`);
+  out.push(`  ${import_picocolors81.default.dim("--track")}            for agent create: enable tracking non-interactively (off without a TTY)`);
+  out.push(`  ${import_picocolors81.default.dim("--shell <sh|fish>")}  for agent env: pick output format (auto-detected from $SHELL)`);
+  out.push(`  ${import_picocolors81.default.dim("--bot-token <t>")}    for agent connect slack (or BRAINBASE_SLACK_BOT_TOKEN, or stdin)`);
+  out.push(`  ${import_picocolors81.default.dim("--signing-secret <s>")} for agent connect slack (or BRAINBASE_SLACK_SIGNING_SECRET, or stdin)`);
+  out.push(`  ${import_picocolors81.default.dim("--bot-name <name>")}  for agent connect meeting: the bot's display name`);
+  out.push(`  ${import_picocolors81.default.dim("--app-id <id> / --app-name <name>")}  optional Slack app identity`);
+  out.push(`  ${import_picocolors81.default.dim("--bot-image-url <url>")}  optional meeting bot image`);
+  out.push(`  ${import_picocolors81.default.dim("--full")}             for agent/orchestration init: write a commented template covering every block`);
+  out.push(`  ${import_picocolors81.default.dim("--minimal")}          for agent init: write the starter manifest (the default)`);
+  out.push(`  ${import_picocolors81.default.dim("--all")}              for template list: include installs from other folders; for machine ls: include torn-down machines`);
+  out.push(`  ${import_picocolors81.default.dim("--web <url>")}        for login: web app URL (default https://app.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors81.default.dim("--no-open")}          for mcp/integrations connect: print the link without opening a browser (implied with no terminal)`);
+  out.push(`  ${import_picocolors81.default.dim("--no-wait")}          for mcp/integrations connect: print the link and exit instead of waiting`);
+  out.push(`  ${import_picocolors81.default.dim("--account <id>")}     for integrations disconnect: which account, when the app has more than one`);
+  out.push(`  ${import_picocolors81.default.dim("--application <name>")} for integrations context create: names the program the context is for`);
+  out.push(`  ${import_picocolors81.default.dim("--max-lifetime <dur>")} for integrations context create: when the context ends at the latest, 60s-30d (default 7d)`);
+  out.push(`  ${import_picocolors81.default.dim("--reason <text>")}    for integrations context end: recorded with the context`);
   out.push("");
   out.push(divider("ENV"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_HOME")}         override the local config dir (default ~/.brainbase)`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_DEBUG")}        print full stack traces on error (any value; unset to disable)`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_WEB_URL")}      override the web app URL used by login, console links and integrations`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_CONTROL_PLANE_URL")} override the MAS host (/v2/cli; task and interface commands use /v2/tasks and /v2/interfaces)`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_API_URL")}      legacy KLS host override (uses /api/cli; proxy/registry fallback)`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_PROXY_URL")}    override the model-proxy URL used by harness traffic (default https://api.v1.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_REGISTRY_URL")} override the registry API URL (default https://api.v1.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_TOKEN")}        long-lived CLI PAT; outranks the login session and the PAT saved in token.json`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_SKIP_AUTH")}    bypass the auth gate for development`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_NON_INTERACTIVE")} force non-interactive mode — skip/auto-default prompts (CI & agents)`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_RUN_ENTRYPOINT")} =1 → agent pull executes the agent entrypoint (sandbox boots; or pass --run-entrypoint)`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_HOME")}         override the local config dir (default ~/.brainbase)`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_DEBUG")}        print full stack traces on error (any value; unset to disable)`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_WEB_URL")}      override the web app URL used by login, console links and integrations`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_CONTROL_PLANE_URL")} override the MAS host (/v2/cli; task and interface commands use /v2/tasks and /v2/interfaces)`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_API_URL")}      legacy KLS host override (uses /api/cli; proxy/registry fallback)`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_PROXY_URL")}    override the model-proxy URL used by harness traffic (default https://api.v1.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_REGISTRY_URL")} override the registry API URL (default https://api.v1.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_TOKEN")}        long-lived CLI PAT; outranks the login session and the PAT saved in token.json`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_SKIP_AUTH")}    bypass the auth gate for development`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_NON_INTERACTIVE")} force non-interactive mode — skip/auto-default prompts (CI & agents)`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_RUN_ENTRYPOINT")} =1 → agent pull executes the agent entrypoint (sandbox boots; or pass --run-entrypoint)`);
   out.push("");
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_MEMORY_MCP_URL")}        override the built-in memory MCP host`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_BROWSER_MCP_URL")}       override the built-in browser MCP host`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_SLACK_MCP_URL")}         override the built-in Slack MCP host`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_MEETING_MCP_URL")}       override the built-in meeting MCP host`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_GITHUB_MCP_URL")}        override the built-in GitHub MCP host`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_LINEAR_MCP_URL")}        override the built-in Linear MCP host`);
-  out.push(`  ${import_picocolors80.default.dim("BRAINBASE_ORCHESTRATION_MCP_URL")} override the built-in orchestration MCP host`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_MEMORY_MCP_URL")}        override the built-in memory MCP host`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_BROWSER_MCP_URL")}       override the built-in browser MCP host`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_SLACK_MCP_URL")}         override the built-in Slack MCP host`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_MEETING_MCP_URL")}       override the built-in meeting MCP host`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_GITHUB_MCP_URL")}        override the built-in GitHub MCP host`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_LINEAR_MCP_URL")}        override the built-in Linear MCP host`);
+  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_ORCHESTRATION_MCP_URL")} override the built-in orchestration MCP host`);
   out.push("");
   out.push(divider("HARNESSES"));
   out.push("");
-  out.push(`  ${import_picocolors80.default.dim("•")} ${import_picocolors80.default.bold("claude-code")}  ${import_picocolors80.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
-  out.push(`  ${import_picocolors80.default.dim("•")} ${import_picocolors80.default.bold("codex")}        ${import_picocolors80.default.dim("skills, mcps, commands, playbooks, instructions, files")}`);
-  out.push(`  ${import_picocolors80.default.dim("•")} ${import_picocolors80.default.bold("kafka")}        ${import_picocolors80.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors81.default.dim("•")} ${import_picocolors81.default.bold("claude-code")}  ${import_picocolors81.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors81.default.dim("•")} ${import_picocolors81.default.bold("codex")}        ${import_picocolors81.default.dim("skills, mcps, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors81.default.dim("•")} ${import_picocolors81.default.bold("kafka")}        ${import_picocolors81.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
   out.push("");
   console.log(out.join(`
 `));
@@ -97476,7 +97851,10 @@ var VALUE_TAKING_FLAGS = new Set([
   "--bot-image-url",
   "--task-id",
   "--limit",
-  "--file"
+  "--file",
+  "--application",
+  "--max-lifetime",
+  "--reason"
 ]);
 function isValueOfPriorFlag2(args, index) {
   return index > 0 && VALUE_TAKING_FLAGS.has(args[index - 1]);
@@ -97597,10 +97975,10 @@ async function requireAuth(cmd) {
   if (storedPatFor(status.session))
     return;
   console.error("");
-  console.error(`  ${brandTint("◆")}  ${import_picocolors80.default.bold("brainbase")}`);
+  console.error(`  ${brandTint("◆")}  ${import_picocolors81.default.bold("brainbase")}`);
   console.error("");
-  console.error(`  ${import_picocolors80.default.red("✗")}  You need to sign in to use ${import_picocolors80.default.bold("brainbase " + cmd)}.`);
-  console.error(`     ${import_picocolors80.default.dim(noUsableCredentialMessage())}`);
+  console.error(`  ${import_picocolors81.default.red("✗")}  You need to sign in to use ${import_picocolors81.default.bold("brainbase " + cmd)}.`);
+  console.error(`     ${import_picocolors81.default.dim(noUsableCredentialMessage())}`);
   console.error("");
   process14.exit(1);
 }
@@ -97884,12 +98262,12 @@ ${didYouMean(cmd, COMMANDS3, "brainbase")}`);
         process14.exit(1);
     }
   } catch (err) {
-    const message2 = sanitizeLines(err.message).join(`
+    const message3 = sanitizeLines(err.message).join(`
 `);
-    console.error(import_picocolors80.default.red(`
-${message2}`));
+    console.error(import_picocolors81.default.red(`
+${message3}`));
     if (err instanceof ApiError && err.status === 401 && !err.message.includes("brainbase login")) {
-      console.error(`  Run ${import_picocolors80.default.cyan("brainbase login")} to connect this device.`);
+      console.error(`  Run ${import_picocolors81.default.cyan("brainbase login")} to connect this device.`);
     }
     if (process14.env.BRAINBASE_DEBUG)
       console.error(err.stack);