@brainbase-labs/cli 0.54.0 → 0.57.0

package/dist/index.js

@@ -35182,9 +35182,9 @@ var require_dist2 = __commonJS((exports, module) => {
 });
 
 // src/index.ts
-var import_picocolors81 = __toESM(require_picocolors(), 1);
+var import_picocolors84 = __toESM(require_picocolors(), 1);
 import process14 from "node:process";
-import fs94 from "node:fs";
+import fs96 from "node:fs";
 
 // src/cli/template.ts
 var import_picocolors12 = __toESM(require_picocolors(), 1);
@@ -36091,7 +36091,7 @@ function padStart(s, n) {
 // package.json
 var package_default = {
   name: "@brainbase-labs/cli",
-  version: "0.54.0",
+  version: "0.57.0",
   description: "Pack, share, and install agent templates across harnesses (Claude Code, Codex, ...).",
   type: "module",
   bin: {
@@ -55200,6 +55200,9 @@ function masControlPlaneBaseUrl(session) {
   const controlPlane = process.env.BRAINBASE_CONTROL_PLANE_URL?.trim();
   return normalizeControlPlaneUrl(controlPlane || session?.control_plane_url);
 }
+function masEndpointUrl(pathname, session) {
+  return `${masControlPlaneBaseUrl(session)}${pathname}`;
+}
 function apiBase(session) {
   const suffix = usesLegacyControlPlane() ? "/api/cli" : "/v2/cli";
   return `${controlPlaneBaseUrl(session)}${suffix}`;
@@ -55737,6 +55740,23 @@ var masApi = {
   createDesign(agentId, input) {
     return masResourceRequest(`/agents/${encodeURIComponent(agentId)}/designs`, { method: "POST", body: JSON.stringify(input) });
   },
+  createOrchestrationFromAgent(input) {
+    return masResourceRequest("/orchestrations", {
+      method: "POST",
+      body: JSON.stringify({
+        group_id: input.group_id,
+        name: input.name,
+        description: input.description,
+        members: [input.agent_id]
+      })
+    });
+  },
+  async getAgentSummary(agentId) {
+    const body = await masReadRequest(`/agents/${encodeURIComponent(agentId)}`);
+    const { name } = masNamedRecord(body, "agent", "title");
+    const description = body.description;
+    return { name, description: typeof description === "string" ? description : "" };
+  },
   async deleteDesign(agentId, designId) {
     await masResourceRequest(`/agents/${encodeURIComponent(agentId)}/designs/${encodeURIComponent(designId)}`, { method: "DELETE" });
   },
@@ -55972,6 +55992,13 @@ var api = {
   getOrchestration(orchId) {
     return request(`/orchestrations/${encodeURIComponent(orchId)}`);
   },
+  fireOrchestrationTrigger(orchId, triggerId, payload, idempotencyKey) {
+    return masResourceRequest(`/orchestrations/${encodeURIComponent(orchId)}/triggers/${encodeURIComponent(triggerId)}/fire`, {
+      method: "POST",
+      headers: idempotencyKey ? { "Idempotency-Key": idempotencyKey } : {},
+      body: JSON.stringify(payload)
+    });
+  },
   getOrchestrationManifest(orchId) {
     return request(`/orchestrations/${encodeURIComponent(orchId)}/manifest`);
   },
@@ -82445,6 +82472,10 @@ var SyncedScheduleTriggerSchema = exports_external.object({
   node_id: exports_external.string(),
   hash: exports_external.string()
 });
+var SyncedDecisionSchema = exports_external.object({
+  id: exports_external.string(),
+  hash: exports_external.string()
+});
 var SyncedOrchestrationMetaSchema = exports_external.object({
   name: exports_external.string().optional(),
   description: exports_external.string().optional(),
@@ -82460,6 +82491,8 @@ var OrchestrationSyncStateSchema = exports_external.object({
   members: exports_external.array(SyncedMemberSchema),
   edges: exports_external.array(SyncedEdgeSchema),
   triggers: exports_external.array(SyncedScheduleTriggerSchema).optional(),
+  webhook_triggers: exports_external.array(SyncedScheduleTriggerSchema).optional(),
+  decisions: exports_external.array(SyncedDecisionSchema).optional(),
   meta: SyncedOrchestrationMetaSchema.optional()
 });
 function orchLinkPath(cwd2) {
@@ -82844,7 +82877,7 @@ function printHelp3() {
 }
 
 // src/cli/orchestration.ts
-var import_picocolors59 = __toESM(require_picocolors(), 1);
+var import_picocolors62 = __toESM(require_picocolors(), 1);
 
 // src/cli/orchestration-pull.ts
 import path98 from "node:path";
@@ -82881,6 +82914,9 @@ var TriggerEdgeSchema = exports_external.object({
   payload_schema: exports_external.record(exports_external.unknown()).optional()
 });
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function canonicalUuid2(value2) {
+  return UUID_RE.test(value2) ? value2.toLowerCase() : value2;
+}
 var ScheduleTriggerSchema = exports_external.object({
   type: exports_external.literal("schedule"),
   node_id: exports_external.string().regex(UUID_RE, "must be a UUID"),
@@ -82888,22 +82924,75 @@ var ScheduleTriggerSchema = exports_external.object({
   config: exports_external.record(exports_external.unknown()).optional(),
   to: exports_external.array(TriggerEdgeSchema).default([])
 });
+var WebhookTriggerSchema = exports_external.object({
+  type: exports_external.literal("webhook"),
+  node_id: exports_external.string().regex(UUID_RE, "must be a UUID"),
+  is_active: exports_external.boolean().optional(),
+  public: exports_external.boolean().optional(),
+  config: exports_external.record(exports_external.unknown()).optional(),
+  to: exports_external.array(TriggerEdgeSchema).default([])
+});
+var WRITABLE_TRIGGER_TYPES = new Set(["schedule", "webhook"]);
 var ReadOnlyTriggerSchema = exports_external.object({
-  type: exports_external.string().refine((value2) => value2 !== "schedule", {
-    message: "schedule triggers must use a UUID node_id"
+  type: exports_external.string().refine((value2) => !WRITABLE_TRIGGER_TYPES.has(value2), {
+    message: "schedule and webhook triggers must use a UUID node_id"
   }),
   node_id: exports_external.string().min(1),
   is_active: exports_external.boolean().optional(),
   config: exports_external.record(exports_external.unknown()).optional(),
   to: exports_external.array(TriggerEdgeSchema).default([])
 });
-var TriggerSchema = exports_external.union([ScheduleTriggerSchema, ReadOnlyTriggerSchema]);
+var TriggerSchema = exports_external.union([
+  ScheduleTriggerSchema,
+  WebhookTriggerSchema,
+  ReadOnlyTriggerSchema
+]);
+var DECISION_MODELS = [
+  "jev",
+  "kev-4b",
+  "clef",
+  "clef-flash",
+  "gpt-6-luna"
+];
+var DEFAULT_DECISION_MODEL = "clef-flash";
+var DECISION_LIMITS = {
+  name: 200,
+  model: 100,
+  instructions: 4000,
+  answersMin: 2,
+  answersMax: 20,
+  answer: 200,
+  criterion: 1000
+};
+var DecisionTargetSchema = exports_external.object({
+  agent: exports_external.string().min(1).optional(),
+  decision: exports_external.string().regex(UUID_RE, "must be a UUID").optional(),
+  description: exports_external.string().optional()
+}).refine((t) => t.agent === undefined !== (t.decision === undefined), {
+  message: "set exactly one of agent or decision"
+});
+var DecisionAnswerSchema = exports_external.object({
+  answer: exports_external.string(),
+  criterion: exports_external.string().optional(),
+  to: exports_external.array(DecisionTargetSchema).default([])
+});
+var DecisionSchema = exports_external.object({
+  id: exports_external.string().regex(UUID_RE, "must be a UUID"),
+  name: exports_external.string(),
+  model: exports_external.string().optional(),
+  instructions: exports_external.string().optional(),
+  confidence_threshold: exports_external.number().min(0).max(1).nullable().optional(),
+  from: exports_external.array(exports_external.object({ trigger: exports_external.string().regex(UUID_RE, "must be a UUID") })).default([]),
+  answers: exports_external.array(DecisionAnswerSchema),
+  fallback: exports_external.array(DecisionTargetSchema).default([])
+});
 var OrchestrationManifestSchema = exports_external.object({
   schema: exports_external.literal(1),
   orchestration: OrchMetaSchema,
   members: exports_external.array(MemberSchema).default([]),
   edges: exports_external.array(EdgeSchema).default([]),
-  triggers: exports_external.array(TriggerSchema).optional()
+  triggers: exports_external.array(TriggerSchema).optional(),
+  decisions: exports_external.array(DecisionSchema).optional()
 });
 function orchManifestPath(cwd2) {
   return path96.join(cwd2, ORCH_MANIFEST_FILE);
@@ -82934,8 +83023,8 @@ function writeOrchManifest(cwd2, manifest) {
   doc2.commentBefore = ` brainbase-orchestration.yaml — declarative orchestration manifest.
 ` + ` Committed to source control. Edit by hand, then
 ` + " `brainbase orchestration push`. Member agents live under ./agents/." + `
- Schedule triggers are writable. App/Pipedream triggers are preserved
-` + " as read-only context and ignored by `orchestration push`.";
+ Schedule and webhook triggers are writable. App/Pipedream triggers are
+` + " preserved as read-only context and ignored by `orchestration push`.";
   fs83.writeFileSync(orchManifestPath(cwd2), String(doc2), "utf8");
 }
 function memberDir(cwd2, slug) {
@@ -83328,6 +83417,214 @@ function syncedScheduleTriggers(triggers) {
     hash: scheduleTriggerHash(t)
   }));
 }
+var WEBHOOK_TRIGGER = "webhook-trigger";
+function webhookPublicFromConfig(config2) {
+  const value2 = config2?.public_url;
+  return value2 === undefined || value2 === true;
+}
+function webhookTriggerHash(t) {
+  const canonical = {
+    is_active: t.is_active,
+    public: t.public,
+    targets: t.targets.map((e2) => ({
+      agent: e2.agent,
+      description: e2.description,
+      payload_schema: e2.payload_schema
+    })).sort((a3, b4) => stableJson(a3) < stableJson(b4) ? -1 : 1)
+  };
+  return crypto6.createHash("sha256").update(stableJson(canonical)).digest("hex");
+}
+function webhookTriggerLabel(t) {
+  const access = t.public ? "public URL" : "members only";
+  const state = t.is_active ? "active" : "inactive";
+  const targets = t.targets.length ? ` -> ${t.targets.map((e2) => e2.agent).join(", ")}` : "";
+  return `webhook ${t.node_id} (${access}, ${state})${targets}`;
+}
+function cloudWebhookTriggers(cloud, slugForAgent) {
+  return (cloud.triggers ?? []).filter((t) => t.trigger_type === "webhook").map((t) => ({
+    node_id: canonicalUuid2(t.node_id),
+    is_active: t.is_active ?? false,
+    public: typeof t.public === "boolean" ? t.public : webhookPublicFromConfig(t.config),
+    targets: t.edges.map((e2) => ({
+      agent: slugForAgent(e2.to_agent_id, e2.to_slug ?? e2.to_agent_id),
+      description: e2.description ?? "",
+      payload_schema: e2.payload_schema ?? {}
+    })),
+    ...t.id ? { id: t.id } : {},
+    ...t.fire_path ? { fire_path: t.fire_path } : {}
+  }));
+}
+function manifestWebhookTriggers(manifest) {
+  return (manifest?.triggers ?? []).filter((t) => t.type === "webhook").map((t) => ({
+    node_id: canonicalUuid2(t.node_id),
+    is_active: t.is_active ?? false,
+    public: "public" in t && typeof t.public === "boolean" ? t.public : t.config ? webhookPublicFromConfig(t.config) : false,
+    targets: t.to.map((e2) => ({
+      agent: e2.agent,
+      description: e2.description ?? "",
+      payload_schema: e2.payload_schema ?? {}
+    }))
+  }));
+}
+function decideWebhookTriggerReconcile(input) {
+  const rows = threeWayDiff({
+    local: input.local.map((t) => ({
+      type: WEBHOOK_TRIGGER,
+      slug: t.node_id,
+      hash: webhookTriggerHash(t)
+    })),
+    lock: (input.baseline ?? []).map((t) => ({
+      type: WEBHOOK_TRIGGER,
+      slug: canonicalUuid2(t.node_id),
+      hash: t.hash,
+      installedPaths: []
+    })),
+    cloud: input.cloud.map((t) => ({
+      type: WEBHOOK_TRIGGER,
+      slug: t.node_id,
+      hash: webhookTriggerHash(t),
+      files: []
+    }))
+  });
+  return decideCollectionReconcile({
+    rows,
+    type: WEBHOOK_TRIGGER,
+    claims: input.local.length > 0,
+    force: input.force
+  });
+}
+function syncedWebhookTriggers(triggers) {
+  return triggers.map((t) => ({
+    node_id: t.node_id,
+    hash: webhookTriggerHash(t)
+  }));
+}
+var DECISION = "decision";
+function manifestDecisions(manifest, slugToAgentId) {
+  const target = (t) => {
+    const agentId = t.agent !== undefined ? slugToAgentId?.get(t.agent) : undefined;
+    return {
+      ...t.agent !== undefined ? { agent: t.agent, ...agentId ? { agent_id: agentId } : {} } : { decision: canonicalUuid2(t.decision) },
+      description: t.description ?? ""
+    };
+  };
+  return (manifest?.decisions ?? []).map((d3) => ({
+    id: canonicalUuid2(d3.id),
+    name: d3.name.trim(),
+    model: (d3.model ?? DEFAULT_DECISION_MODEL).trim(),
+    instructions: d3.instructions ?? "",
+    confidence_threshold: d3.confidence_threshold ?? null,
+    triggers: d3.from.map((f4) => canonicalUuid2(f4.trigger)),
+    answers: d3.answers.map((a3) => ({
+      answer: a3.answer.trim(),
+      criterion: (a3.criterion ?? "").trim(),
+      to: a3.to.map(target)
+    })),
+    fallback: d3.fallback.map(target)
+  }));
+}
+function liveDecisionLinks(cloud) {
+  const agents = new Set(cloud.members.map((m3) => m3.agent_id));
+  const decisions = new Set((cloud.decisions ?? []).map((d3) => canonicalUuid2(d3.id)));
+  const triggers = new Set((cloud.triggers ?? []).map((t) => canonicalUuid2(t.node_id)));
+  return (d3) => {
+    const answers = new Set(d3.answers.map((a3) => a3.answer));
+    return {
+      routes: d3.routes.filter((r2) => (r2.is_fallback || r2.answer != null && answers.has(r2.answer)) && (r2.to_agent_id ? agents.has(r2.to_agent_id) : r2.to_decision_id != null && decisions.has(canonicalUuid2(r2.to_decision_id)))),
+      inputs: d3.inputs.filter((i) => triggers.has(canonicalUuid2(i.from_trigger_node_id)))
+    };
+  };
+}
+function cloudDecisions(cloud, slugForAgent) {
+  if (cloud.decisions == null)
+    return null;
+  const live = liveDecisionLinks(cloud);
+  return cloud.decisions.map((d3) => {
+    const { routes, inputs } = live(d3);
+    const target = (r2) => ({
+      ...r2.to_agent_id ? {
+        agent: slugForAgent(r2.to_agent_id, r2.to_slug ?? r2.to_agent_id),
+        agent_id: r2.to_agent_id
+      } : { decision: canonicalUuid2(r2.to_decision_id) },
+      description: r2.description ?? ""
+    });
+    return {
+      id: canonicalUuid2(d3.id),
+      name: d3.name.trim(),
+      model: d3.model.trim(),
+      instructions: d3.instructions ?? "",
+      confidence_threshold: d3.confidence_threshold ?? null,
+      triggers: inputs.map((i) => canonicalUuid2(i.from_trigger_node_id)),
+      answers: d3.answers.map((a3) => ({
+        answer: a3.answer.trim(),
+        criterion: (a3.criterion ?? "").trim(),
+        to: routes.filter((r2) => !r2.is_fallback && r2.answer === a3.answer).map(target)
+      })),
+      fallback: routes.filter((r2) => r2.is_fallback).map(target)
+    };
+  });
+}
+function deadDecisionLinks(cloud) {
+  const live = liveDecisionLinks(cloud);
+  const out = new Map;
+  for (const d3 of cloud.decisions ?? []) {
+    const { routes, inputs } = live(d3);
+    const dead = d3.routes.length - routes.length + d3.inputs.length - inputs.length;
+    if (dead > 0)
+      out.set(d3.id, dead);
+  }
+  return out;
+}
+function decisionHash(d3) {
+  const targets = (ts2) => ts2.map(({ agent, agent_id, ...rest2 }) => stableJson(agent_id !== undefined ? { agent_id, ...rest2 } : { agent, ...rest2 })).sort();
+  const canonical = {
+    name: d3.name,
+    model: d3.model,
+    instructions: d3.instructions,
+    confidence_threshold: d3.confidence_threshold,
+    triggers: [...d3.triggers].sort(),
+    answers: d3.answers.map((a3) => ({
+      answer: a3.answer,
+      criterion: a3.criterion,
+      to: targets(a3.to)
+    })),
+    fallback: targets(d3.fallback)
+  };
+  return crypto6.createHash("sha256").update(stableJson(canonical)).digest("hex");
+}
+function decisionLabel(d3) {
+  return `decision "${d3.name}" (${d3.id})`;
+}
+function decideDecisionReconcile(input) {
+  const rows = threeWayDiff({
+    local: input.local.map((d3) => ({
+      type: DECISION,
+      slug: d3.id,
+      hash: decisionHash(d3)
+    })),
+    lock: (input.baseline ?? []).map((d3) => ({
+      type: DECISION,
+      slug: d3.id,
+      hash: d3.hash,
+      installedPaths: []
+    })),
+    cloud: input.cloud.map((d3) => ({
+      type: DECISION,
+      slug: d3.id,
+      hash: decisionHash(d3),
+      files: []
+    }))
+  });
+  return decideCollectionReconcile({
+    rows,
+    type: DECISION,
+    claims: input.local.length > 0,
+    force: input.force
+  });
+}
+function syncedDecisions(decisions) {
+  return decisions.map((d3) => ({ id: d3.id, hash: decisionHash(d3) }));
+}
 var ORCH_META_FIELDS = [
   "name",
   "description",
@@ -83396,11 +83693,15 @@ function syncedOrchestrationMeta(cloud) {
 function triggersForManifest(triggers, slugFor) {
   return triggers.map((trigger) => {
     const schedule = trigger.trigger_type === "schedule";
-    const config2 = schedule ? scheduleTriggerConfigForManifest(trigger.config) : trigger.config;
+    const webhook = trigger.trigger_type === "webhook";
+    const config2 = schedule ? scheduleTriggerConfigForManifest(trigger.config) : webhook ? undefined : trigger.config;
     return {
       type: trigger.trigger_type,
       node_id: trigger.node_id,
       is_active: trigger.is_active,
+      ...webhook ? {
+        public: typeof trigger.public === "boolean" ? trigger.public : webhookPublicFromConfig(trigger.config)
+      } : {},
       ...config2 && Object.keys(config2).length ? { config: config2 } : {},
       to: trigger.edges.map((edge) => ({
         agent: slugFor(edge.to_agent_id),
@@ -83410,6 +83711,26 @@ function triggersForManifest(triggers, slugFor) {
     };
   });
 }
+function decisionsForManifest(decisions) {
+  const target = (t) => ({
+    ...t.agent !== undefined ? { agent: t.agent } : { decision: t.decision },
+    ...t.description ? { description: t.description } : {}
+  });
+  return decisions.map((d3) => ({
+    id: d3.id,
+    name: d3.name,
+    model: d3.model,
+    ...d3.instructions ? { instructions: d3.instructions } : {},
+    ...d3.confidence_threshold != null ? { confidence_threshold: d3.confidence_threshold } : {},
+    ...d3.triggers.length ? { from: d3.triggers.map((trigger) => ({ trigger })) } : {},
+    answers: d3.answers.map((a3) => ({
+      answer: a3.answer,
+      ...a3.criterion ? { criterion: a3.criterion } : {},
+      ...a3.to.length ? { to: a3.to.map(target) } : {}
+    })),
+    ...d3.fallback.length ? { fallback: d3.fallback.map(target) } : {}
+  }));
+}
 async function runOrchestrationPull(cwd2, args) {
   banner("orchestration pull — fetch orchestration + all member agents");
   let orchId = null;
@@ -83460,6 +83781,14 @@ async function runOrchestrationPull(cwd2, args) {
       planLines.push(`    ${import_picocolors52.default.cyan(from)} ${import_picocolors52.default.dim("→")} ${import_picocolors52.default.cyan(to2)}${desc}`);
     }
   }
+  const pulledDecisions = cloudDecisions(cloud, (agentId, fallback) => slugByAgent.get(agentId) ?? fallback);
+  if (pulledDecisions?.length) {
+    planLines.push("");
+    planLines.push(`  ${import_picocolors52.default.dim("decisions:")}`);
+    for (const d3 of pulledDecisions) {
+      planLines.push(`    ${import_picocolors52.default.cyan("◆")} ${import_picocolors52.default.bold(d3.name)} ${import_picocolors52.default.dim(`(${d3.model}, ${d3.answers.length} answers)`)}`);
+    }
+  }
   planLines.push("");
   console.log(planLines.join(`
 `));
@@ -83525,6 +83854,19 @@ async function runOrchestrationPull(cwd2, args) {
     }
   }
   const manifestTriggers = triggersForManifest(cloud.triggers ?? [], slugFor);
+  let manifestDecisions2 = pulledDecisions ? decisionsForManifest(pulledDecisions) : undefined;
+  let decisionBaseline = pulledDecisions ? syncedDecisions(pulledDecisions) : undefined;
+  if (!pulledDecisions) {
+    try {
+      manifestDecisions2 = readOrchManifest(cwd2)?.decisions;
+    } catch {}
+    const lock = readOrchSyncState(cwd2);
+    decisionBaseline = lock?.orchestration_id === cloud.id ? lock.decisions : undefined;
+  }
+  for (const [decisionId, count] of deadDecisionLinks(cloud)) {
+    const name = pulledDecisions?.find((d3) => d3.id === decisionId)?.name;
+    f2.warn(`Decision ${import_picocolors52.default.bold(name ?? decisionId)} has ${count} route${count === 1 ? "" : "s"} or input${count === 1 ? "" : "s"} that lead${count === 1 ? "s" : ""} nowhere: on an answer it no longer has, or to an agent, decision or trigger no longer in this orchestration. They never run and are not in ${import_picocolors52.default.bold("brainbase-orchestration.yaml")}; the next push of decisions removes them.`);
+  }
   const manifest = {
     schema: 1,
     orchestration: {
@@ -83548,7 +83890,8 @@ async function runOrchestrationPull(cwd2, args) {
       ...e2.payload_schema && Object.keys(e2.payload_schema).length ? { payload_schema: e2.payload_schema } : {},
       ...e2.settings && Object.keys(e2.settings).length ? { settings: e2.settings } : {}
     })),
-    ...manifestTriggers.length ? { triggers: manifestTriggers } : {}
+    ...manifestTriggers.length ? { triggers: manifestTriggers } : {},
+    ...manifestDecisions2?.length ? { decisions: manifestDecisions2 } : {}
   };
   writeOrchManifest(cwd2, manifest);
   writeOrchLink(cwd2, {
@@ -83574,6 +83917,8 @@ async function runOrchestrationPull(cwd2, args) {
       payload_schema: e2.payload_schema ?? {}
     })),
     triggers: syncedScheduleTriggers(cloudScheduleTriggers(cloud, (agentId, fallback) => slugFor(agentId) || fallback)),
+    webhook_triggers: syncedWebhookTriggers(cloudWebhookTriggers(cloud, (agentId, fallback) => slugFor(agentId) || fallback)),
+    ...decisionBaseline ? { decisions: decisionBaseline } : {},
     meta: syncedOrchestrationMeta(cloud)
   });
   if (missingMembers.length > 0) {
@@ -83601,6 +83946,83 @@ function handleApiError5(err) {
 var import_picocolors53 = __toESM(require_picocolors(), 1);
 
 // src/core/orchestration-outgoing.ts
+function charLength(value2) {
+  return Array.from(value2).length;
+}
+function validateDecisions(decisions, memberSlugs, triggerNodeIds) {
+  const ids = new Set;
+  for (const d3 of decisions) {
+    if (ids.has(d3.id))
+      throw new Error(`Decision ${d3.id} is duplicated.`);
+    ids.add(d3.id);
+  }
+  for (const d3 of decisions) {
+    const label2 = `Decision "${d3.name || d3.id}"`;
+    const fail3 = (message) => {
+      throw new Error(`${label2}: ${message}`);
+    };
+    if (!d3.name || charLength(d3.name) > DECISION_LIMITS.name) {
+      fail3(`name must be 1 to ${DECISION_LIMITS.name} characters.`);
+    }
+    if (!d3.model || charLength(d3.model) > DECISION_LIMITS.model) {
+      fail3(`model must be 1 to ${DECISION_LIMITS.model} characters.`);
+    }
+    if (charLength(d3.instructions) > DECISION_LIMITS.instructions) {
+      fail3(`instructions must be ${DECISION_LIMITS.instructions} characters or fewer.`);
+    }
+    const count = d3.answers.length;
+    if (count < DECISION_LIMITS.answersMin || count > DECISION_LIMITS.answersMax) {
+      fail3(`needs ${DECISION_LIMITS.answersMin} to ${DECISION_LIMITS.answersMax} answers (has ${count}).`);
+    }
+    const answers = new Set;
+    for (const a3 of d3.answers) {
+      if (!a3.answer || charLength(a3.answer) > DECISION_LIMITS.answer) {
+        fail3(`each answer must be 1 to ${DECISION_LIMITS.answer} characters.`);
+      }
+      if (answers.has(a3.answer))
+        fail3(`answer "${a3.answer}" appears twice.`);
+      answers.add(a3.answer);
+      if (charLength(a3.criterion) > DECISION_LIMITS.criterion) {
+        fail3(`the criterion for "${a3.answer}" must be ${DECISION_LIMITS.criterion} characters or fewer.`);
+      }
+    }
+    const fed = new Set;
+    for (const nodeId of d3.triggers) {
+      if (!triggerNodeIds.has(nodeId)) {
+        fail3(`from trigger ${nodeId}, which isn't in triggers.`);
+      }
+      if (fed.has(nodeId))
+        fail3(`trigger ${nodeId} is listed twice in from.`);
+      fed.add(nodeId);
+    }
+    const checkTargets = (targets, branch) => {
+      const seen = new Set;
+      for (const t of targets) {
+        if (t.agent !== undefined && !memberSlugs.has(t.agent)) {
+          fail3(`${branch} routes to "${t.agent}", which isn't in members.`);
+        }
+        if (t.decision !== undefined) {
+          if (t.decision === d3.id)
+            fail3(`${branch} routes to the decision itself.`);
+          if (!ids.has(t.decision)) {
+            fail3(`${branch} routes to decision ${t.decision}, which isn't in decisions.`);
+          }
+        }
+        const key2 = t.agent !== undefined ? `agent:${t.agent}` : `decision:${t.decision}`;
+        if (seen.has(key2))
+          fail3(`${branch} routes to ${key2.replace(":", " ")} twice.`);
+        seen.add(key2);
+      }
+    };
+    for (const a3 of d3.answers)
+      checkTargets(a3.to, `answer "${a3.answer}"`);
+    checkTargets(d3.fallback, "fallback");
+  }
+}
+function unknownDecisionModels(manifest) {
+  const known = new Set(DECISION_MODELS);
+  return manifestDecisions(manifest).filter((d3) => !known.has(d3.model)).map((d3) => ({ name: d3.name, model: d3.model }));
+}
 function buildOrchestrationGraphPayload(manifest, slugToAgentId) {
   const memberSlugs = new Set(manifest.members.map((m3) => m3.slug));
   for (const e2 of manifest.edges) {
@@ -83615,12 +84037,25 @@ function buildOrchestrationGraphPayload(manifest, slugToAgentId) {
     }
   }
   const scheduleTriggers = (manifest.triggers ?? []).filter((t) => t.type === "schedule");
+  const webhookTriggers = manifestWebhookTriggers(manifest);
   const seenTriggerNodeIds = new Set;
+  for (const t of webhookTriggers) {
+    const nodeId = canonicalUuid2(t.node_id);
+    if (seenTriggerNodeIds.has(nodeId)) {
+      throw new Error(`Webhook trigger ${t.node_id} is duplicated.`);
+    }
+    seenTriggerNodeIds.add(nodeId);
+    for (const e2 of t.targets) {
+      if (!memberSlugs.has(e2.agent)) {
+        throw new Error(`Trigger ${t.node_id} points to "${e2.agent}", which isn't in members.`);
+      }
+    }
+  }
   for (const t of scheduleTriggers) {
-    if (seenTriggerNodeIds.has(t.node_id)) {
+    if (seenTriggerNodeIds.has(canonicalUuid2(t.node_id))) {
       throw new Error(`Schedule trigger ${t.node_id} is duplicated.`);
     }
-    seenTriggerNodeIds.add(t.node_id);
+    seenTriggerNodeIds.add(canonicalUuid2(t.node_id));
     const config2 = normalizeScheduleTriggerConfig(t.config);
     const cron = config2.cron_expression;
     if (typeof cron !== "string" || !cron.trim()) {
@@ -83658,9 +84093,46 @@ function buildOrchestrationGraphPayload(manifest, slugToAgentId) {
         description: e2.description ?? "",
         payload_schema: e2.payload_schema ?? {}
       }))
+    })),
+    webhookTriggers: webhookTriggers.map((t) => ({
+      node_id: t.node_id,
+      type: "webhook",
+      is_active: t.is_active,
+      public: t.public,
+      edges: t.targets.map((e2) => ({
+        to_agent_id: slugToAgentId.get(e2.agent),
+        description: e2.description,
+        payload_schema: e2.payload_schema
+      }))
     }))
   };
 }
+function buildDecisionsPayload(manifest, slugToAgentId) {
+  const decisions = manifestDecisions(manifest, slugToAgentId);
+  validateDecisions(decisions, new Set(manifest.members.map((m3) => m3.slug)), new Set((manifest.triggers ?? []).map((t) => canonicalUuid2(t.node_id))));
+  return decisions.map((d3) => decisionPayload(d3, slugToAgentId));
+}
+function decisionPayload(d3, slugToAgentId) {
+  const route = (answer, t) => ({
+    answer,
+    is_fallback: answer === null,
+    ...t.agent !== undefined ? { to_agent_id: slugToAgentId.get(t.agent) } : { to_decision_id: t.decision },
+    description: t.description
+  });
+  return {
+    id: d3.id,
+    name: d3.name,
+    model: d3.model,
+    instructions: d3.instructions,
+    answers: d3.answers.map((a3) => ({ answer: a3.answer, criterion: a3.criterion })),
+    confidence_threshold: d3.confidence_threshold,
+    inputs: d3.triggers.map((nodeId) => ({ from_trigger_node_id: nodeId })),
+    routes: [
+      ...d3.answers.flatMap((a3) => a3.to.map((t) => route(a3.answer, t))),
+      ...d3.fallback.map((t) => route(null, t))
+    ]
+  };
+}
 
 // src/cli/orchestration-push.ts
 function joinList(items) {
@@ -83778,6 +84250,20 @@ async function runOrchestrationPush(cwd2, args) {
     const t = triggerByNode.get(nodeId);
     return t ? scheduleTriggerLabel(t) : nodeId;
   };
+  const localWebhooks = manifestWebhookTriggers(manifest);
+  const cloudWebhooks = cloudWebhookTriggers(cloud, slugForAgent);
+  const webhookDecision = decideWebhookTriggerReconcile({
+    local: localWebhooks,
+    cloud: cloudWebhooks,
+    baseline: lock?.webhook_triggers,
+    force: !!args.force
+  });
+  const webhookByNode = new Map([...cloudWebhooks, ...localWebhooks].map((t) => [t.node_id, t]));
+  const webhookLabelFor = (nodeId) => {
+    const t = webhookByNode.get(nodeId);
+    return t ? webhookTriggerLabel(t) : nodeId;
+  };
+  const blockedWebhooks = webhookDecision.kind === "blocked" ? webhookDecision : null;
   const metaDecisions = decideOrchestrationMeta({
     manifest,
     cloud,
@@ -83788,7 +84274,21 @@ async function runOrchestrationPush(cwd2, args) {
   const metaOverwrites = metaDecisions.filter((d3) => d3.kind === "push");
   const metaKept = metaDecisions.filter((d3) => d3.kind === "keep");
   const blockedTriggers = triggerDecision.kind === "blocked" ? triggerDecision : null;
-  if (blockedTriggers || metaConflicts.length > 0) {
+  const localDecisions = manifestDecisions(manifest, slugToAgentId);
+  const cloudDecisionList = cloudDecisions(cloud, slugForAgent);
+  const decisionPlan = cloudDecisionList ? decideDecisionReconcile({
+    local: localDecisions,
+    cloud: cloudDecisionList,
+    baseline: lock?.decisions,
+    force: !!args.force
+  }) : null;
+  const decisionById = new Map([...cloudDecisionList ?? [], ...localDecisions].map((d3) => [d3.id, d3]));
+  const decisionLabelFor = (id) => {
+    const d3 = decisionById.get(id);
+    return d3 ? decisionLabel(d3) : id;
+  };
+  const blockedDecisions = decisionPlan?.kind === "blocked" ? decisionPlan : null;
+  if (blockedTriggers || blockedWebhooks || blockedDecisions || metaConflicts.length > 0) {
     const pullTargets = [];
     const forceEffects = [];
     if (blockedTriggers) {
@@ -83807,6 +84307,38 @@ async function runOrchestrationPush(cwd2, args) {
       pullTargets.push(`${total} schedule trigger${total === 1 ? "" : "s"}`);
       forceEffects.push("make your local schedule triggers authoritative (deleting the cloud ones above)");
     }
+    if (blockedWebhooks) {
+      const { unseen, cloudModified, staleArchives } = blockedWebhooks;
+      f2.error(unseen.length > 0 ? "Cannot push: the cloud has webhook triggers this folder has never seen." : "Cannot push: webhook triggers changed both locally and in the cloud.");
+      for (const nodeId of unseen) {
+        console.error(`  ${import_picocolors53.default.red("!")} ${import_picocolors53.default.bold(webhookLabelFor(nodeId))} ${import_picocolors53.default.dim("(only in the cloud — pushing would delete it and its URL)")}`);
+      }
+      for (const nodeId of cloudModified) {
+        console.error(`  ${import_picocolors53.default.red("!")} ${import_picocolors53.default.bold(webhookLabelFor(nodeId))} ${import_picocolors53.default.dim("(edited in the cloud — pushing would overwrite that edit)")}`);
+      }
+      for (const nodeId of staleArchives) {
+        console.error(`  ${import_picocolors53.default.red("!")} ${import_picocolors53.default.bold(webhookLabelFor(nodeId))} ${import_picocolors53.default.dim("(deleted here, edited in the cloud since — pushing would delete that edit)")}`);
+      }
+      const total = unseen.length + cloudModified.length + staleArchives.length;
+      pullTargets.push(`${total} webhook trigger${total === 1 ? "" : "s"}`);
+      forceEffects.push("make your local webhook triggers authoritative (deleting or overwriting the cloud ones above)");
+    }
+    if (blockedDecisions) {
+      const { unseen, cloudModified, staleArchives } = blockedDecisions;
+      f2.error(unseen.length > 0 ? "Cannot push: the cloud has decisions this folder has never seen." : "Cannot push: decisions changed both locally and in the cloud.");
+      for (const id of unseen) {
+        console.error(`  ${import_picocolors53.default.red("!")} ${import_picocolors53.default.bold(decisionLabelFor(id))} ${import_picocolors53.default.dim("(only in the cloud — pushing would delete it)")}`);
+      }
+      for (const id of cloudModified) {
+        console.error(`  ${import_picocolors53.default.red("!")} ${import_picocolors53.default.bold(decisionLabelFor(id))} ${import_picocolors53.default.dim("(edited in the cloud — pushing would overwrite that edit)")}`);
+      }
+      for (const id of staleArchives) {
+        console.error(`  ${import_picocolors53.default.red("!")} ${import_picocolors53.default.bold(decisionLabelFor(id))} ${import_picocolors53.default.dim("(deleted here, edited in the cloud since — pushing would delete that edit)")}`);
+      }
+      const total = unseen.length + cloudModified.length + staleArchives.length;
+      pullTargets.push(`${total} decision${total === 1 ? "" : "s"}`);
+      forceEffects.push("make your local decisions authoritative (deleting or overwriting the cloud ones above)");
+    }
     if (metaConflicts.length > 0) {
       f2.error("Cannot push: orchestration metadata changed both locally and in the cloud.");
       for (const d3 of metaConflicts) {
@@ -83839,9 +84371,37 @@ async function runOrchestrationPush(cwd2, args) {
     f2.warn(`${cloudTriggers.length} cloud schedule trigger${cloudTriggers.length === 1 ? "" : "s"} ${cloudTriggers.length === 1 ? "is" : "are"} not in ${import_picocolors53.default.bold(ORCH_MANIFEST_FILE)} and will be left untouched. Run ${import_picocolors53.default.cyan("brainbase orchestration pull")} to manage ${cloudTriggers.length === 1 ? "it" : "them"} from here.`);
   }
   const triggerDeletes = triggerDecision.kind === "reconcile" ? triggerDecision.archives : [];
+  const webhookDeletes = webhookDecision.kind === "reconcile" ? webhookDecision.archives : [];
+  const sendWebhooks = webhookDecision.kind === "reconcile" && (localWebhooks.length > 0 || webhookDeletes.length > 0);
+  if (webhookDecision.kind === "skip") {
+    const left = webhookDecision.unseen.length + webhookDecision.cloudModified.length;
+    f2.warn(`${left} cloud webhook trigger${left === 1 ? "" : "s"} ${left === 1 ? "is" : "are"} not in ${import_picocolors53.default.bold(ORCH_MANIFEST_FILE)} and will be left untouched. Run ${import_picocolors53.default.cyan("brainbase orchestration pull")} to manage ${left === 1 ? "it" : "them"} from here.`);
+  }
+  const triggerCount = graph.triggers.length + (sendWebhooks ? graph.webhookTriggers.length : 0);
+  const decisionDeletes = decisionPlan?.kind === "reconcile" ? decisionPlan.archives : [];
+  const sendDecisions = decisionPlan?.kind === "reconcile" && (localDecisions.length > 0 || decisionDeletes.length > 0);
+  if (!cloudDecisionList && localDecisions.length > 0) {
+    f2.warn(`The cloud did not return decision nodes for this account, so the ${localDecisions.length} decision${localDecisions.length === 1 ? "" : "s"} in ${import_picocolors53.default.bold(ORCH_MANIFEST_FILE)} ${localDecisions.length === 1 ? "is" : "are"} left out of this push and the cloud's are left alone.`);
+  } else if (decisionPlan?.kind === "skip") {
+    const left = decisionPlan.unseen.length + decisionPlan.cloudModified.length;
+    f2.warn(`${left} cloud decision${left === 1 ? "" : "s"} ${left === 1 ? "is" : "are"} not in ${import_picocolors53.default.bold(ORCH_MANIFEST_FILE)} and will be left untouched. Run ${import_picocolors53.default.cyan("brainbase orchestration pull")} to manage ${left === 1 ? "it" : "them"} from here.`);
+  }
+  let decisionsPayload = [];
+  if (sendDecisions) {
+    try {
+      decisionsPayload = buildDecisionsPayload(manifest, slugToAgentId);
+    } catch (err) {
+      f2.error(err.message);
+      process.exitCode = 1;
+      return;
+    }
+    for (const { name, model } of unknownDecisionModels(manifest)) {
+      f2.warn(`Decision ${import_picocolors53.default.bold(name)} uses model ${import_picocolors53.default.bold(model)}, which is not one the canvas offers. It is pushed as written; if the gateway does not know it, the decision fails when its trigger fires.`);
+    }
+  }
   const plan = [""];
   plan.push(`  ${import_picocolors53.default.bold(link2.name)} ${import_picocolors53.default.dim(`(${link2.orchestration_id})`)}`);
-  plan.push(`  ${import_picocolors53.default.dim(`${manifest.members.length} member${manifest.members.length === 1 ? "" : "s"}, ${manifest.edges.length} edge${manifest.edges.length === 1 ? "" : "s"}, ${graph.triggers.length} trigger${graph.triggers.length === 1 ? "" : "s"}`)}`);
+  plan.push(`  ${import_picocolors53.default.dim(`${manifest.members.length} member${manifest.members.length === 1 ? "" : "s"}, ${manifest.edges.length} edge${manifest.edges.length === 1 ? "" : "s"}, ${triggerCount} trigger${triggerCount === 1 ? "" : "s"}${sendDecisions ? `, ${decisionsPayload.length} decision${decisionsPayload.length === 1 ? "" : "s"}` : ""}`)}`);
   plan.push("");
   if (!args.graphOnly) {
     plan.push(`  ${import_picocolors53.default.dim("per-member agent push:")}`);
@@ -83857,6 +84417,20 @@ async function runOrchestrationPush(cwd2, args) {
     }
     plan.push("");
   }
+  if (webhookDeletes.length) {
+    plan.push(`  ${import_picocolors53.default.bold("webhook triggers this push will delete")} ${import_picocolors53.default.dim(`(${webhookDeletes.length})`)}`);
+    for (const nodeId of webhookDeletes) {
+      plan.push(`    ${import_picocolors53.default.yellow("⨯")} ${webhookLabelFor(nodeId)}`);
+    }
+    plan.push("");
+  }
+  if (decisionDeletes.length) {
+    plan.push(`  ${import_picocolors53.default.bold("decisions this push will delete")} ${import_picocolors53.default.dim(`(${decisionDeletes.length})`)}`);
+    for (const id of decisionDeletes) {
+      plan.push(`    ${import_picocolors53.default.yellow("⨯")} ${decisionLabelFor(id)}`);
+    }
+    plan.push("");
+  }
   if (metaOverwrites.length) {
     plan.push(`  ${import_picocolors53.default.bold("orchestration metadata this push will overwrite")}`);
     for (const m3 of metaOverwrites) {
@@ -83875,9 +84449,14 @@ async function runOrchestrationPush(cwd2, args) {
   console.log(plan.join(`
 `));
   if (!autoProceed(args.yes)) {
+    const deletions = [
+      ...triggerDeletes.length ? [`${triggerDeletes.length} schedule trigger${triggerDeletes.length === 1 ? "" : "s"}`] : [],
+      ...webhookDeletes.length ? [`${webhookDeletes.length} webhook trigger${webhookDeletes.length === 1 ? "" : "s"}`] : [],
+      ...decisionDeletes.length ? [`${decisionDeletes.length} decision${decisionDeletes.length === 1 ? "" : "s"}`] : []
+    ];
     const ok = await se({
-      message: triggerDeletes.length ? `Push, deleting ${triggerDeletes.length} schedule trigger${triggerDeletes.length === 1 ? "" : "s"}?` : args.graphOnly ? "Push graph (members, edges + triggers) only?" : "Push each member, then update the graph?",
-      initialValue: triggerDeletes.length === 0
+      message: deletions.length ? `Push, deleting ${joinList(deletions)}?` : args.graphOnly ? "Push graph (members, edges + triggers) only?" : "Push each member, then update the graph?",
+      initialValue: deletions.length === 0
     });
     if (!ensureNotCancelled(ok)) {
       $e("Aborted.");
@@ -83922,10 +84501,13 @@ async function runOrchestrationPush(cwd2, args) {
       ...metaField("credit_limit"),
       members: graph.memberIds,
       edges: graph.edges,
-      triggers: graph.triggers,
+      triggers: sendWebhooks ? [...graph.triggers, ...graph.webhookTriggers] : graph.triggers,
+      ...sendWebhooks ? { replace_webhook_triggers: true } : {},
+      ...sendDecisions ? { decisions: decisionsPayload } : {},
       ...lock?.revision != null ? { base_revision: lock.revision } : {}
     });
     sp.stop(`Graph updated. New cloud revision ${updated.revision}.`);
+    const settledDecisions = sendDecisions ? cloudDecisions(updated, slugForAgent) : decisionPlan?.kind === "reconcile" ? cloudDecisionList : null;
     writeOrchSyncState(cwd2, {
       schemaVersion: 1,
       orchestration_id: updated.id,
@@ -83943,6 +84525,8 @@ async function runOrchestrationPush(cwd2, args) {
         payload_schema: e2.payload_schema ?? {}
       })),
       triggers: triggerDecision.kind === "skip" ? lock?.triggers ?? [] : syncedScheduleTriggers(cloudScheduleTriggers(updated, slugForAgent)),
+      webhook_triggers: webhookDecision.kind === "skip" ? lock?.webhook_triggers ?? [] : syncedWebhookTriggers(cloudWebhookTriggers(updated, slugForAgent)),
+      ...settledDecisions ? { decisions: syncedDecisions(settledDecisions) } : lock?.decisions ? { decisions: lock.decisions } : {},
       meta: nextOrchestrationMeta({
         applied: updated,
         decisions: metaDecisions,
@@ -83974,13 +84558,44 @@ function handleApiError6(err) {
 }
 
 // src/cli/orchestration-status.ts
+var import_picocolors55 = __toESM(require_picocolors(), 1);
+
+// src/core/orchestration-webhooks.ts
 var import_picocolors54 = __toESM(require_picocolors(), 1);
+function webhookEndpointUrl(firePath) {
+  return masEndpointUrl(firePath, readAuth());
+}
+function webhookEndpointLines(triggers, indent = "  ") {
+  return triggers.flatMap((t) => [
+    `${indent}${webhookTriggerLabel(t)}`,
+    t.fire_path ? `${indent}  ${import_picocolors54.default.dim("POST")} ${webhookEndpointUrl(t.fire_path)}` : `${indent}  ${import_picocolors54.default.dim("member endpoint shows once the control plane is updated")}`
+  ]);
+}
+function resolveWebhookTrigger(cloud, ref) {
+  const want = canonicalUuid2(ref.trim());
+  const webhooks = cloudWebhookTriggers(cloud, (_id, fallback) => fallback);
+  const match = webhooks.find((t) => canonicalUuid2(t.node_id) === want || t.id && canonicalUuid2(t.id) === want);
+  if (!match) {
+    const other = (cloud.triggers ?? []).find((t) => canonicalUuid2(t.node_id) === want || t.id && canonicalUuid2(t.id) === want);
+    if (other) {
+      throw new Error(`Trigger ${ref} is a ${other.trigger_type} trigger; only webhook triggers fire this way.`);
+    }
+    const known = webhooks.map((t) => t.node_id);
+    throw new Error(known.length ? `No webhook trigger ${ref} in this orchestration. Its webhook triggers: ${known.join(", ")}.` : `No webhook trigger ${ref}: this orchestration has none.`);
+  }
+  if (!match.id) {
+    throw new Error("This control plane does not return trigger ids yet, so the CLI cannot fire a trigger. Update the server, or use the web app.");
+  }
+  return match;
+}
+
+// src/cli/orchestration-status.ts
 async function runOrchestrationStatus(cwd2) {
   banner("orchestration status — what changed locally, remotely, both");
   const link2 = readOrchLink(cwd2);
   if (!link2) {
     failWarn("This folder is not linked to any orchestration.");
-    f2.info(`Run ${import_picocolors54.default.cyan("brainbase orchestration pull <id>")} first.`);
+    f2.info(`Run ${import_picocolors55.default.cyan("brainbase orchestration pull <id>")} first.`);
     return;
   }
   const localManifest = hasOrchManifest(cwd2) ? readOrchManifest(cwd2) : null;
@@ -84003,8 +84618,8 @@ async function runOrchestrationStatus(cwd2) {
   }
   const lines = [];
   lines.push("");
-  lines.push(`  ${import_picocolors54.default.bold(link2.name)} ${import_picocolors54.default.dim(`(${link2.orchestration_id})`)}`);
-  lines.push(`  ${import_picocolors54.default.dim("revision")}  cloud ${cloud.revision}${lock ? ` · lock ${lock.revision}` : " · never pulled"}`);
+  lines.push(`  ${import_picocolors55.default.bold(link2.name)} ${import_picocolors55.default.dim(`(${link2.orchestration_id})`)}`);
+  lines.push(`  ${import_picocolors55.default.dim("revision")}  cloud ${cloud.revision}${lock ? ` · lock ${lock.revision}` : " · never pulled"}`);
   lines.push("");
   const localSlugByAgentId = new Map;
   for (const m3 of localManifest?.members ?? []) {
@@ -84018,12 +84633,12 @@ async function runOrchestrationStatus(cwd2) {
   const membersAdded = [...localMemberSet].filter((s3) => !cloudMemberSet.has(s3));
   const membersRemoved = [...cloudMemberSet].filter((s3) => !localMemberSet.has(s3));
   if (membersAdded.length || membersRemoved.length) {
-    lines.push(`  ${import_picocolors54.default.bold("members")}`);
+    lines.push(`  ${import_picocolors55.default.bold("members")}`);
     for (const slug of membersAdded) {
-      lines.push(`    ${import_picocolors54.default.yellow("→ push")}  added in yaml: ${import_picocolors54.default.bold(slug)}`);
+      lines.push(`    ${import_picocolors55.default.yellow("→ push")}  added in yaml: ${import_picocolors55.default.bold(slug)}`);
     }
     for (const slug of membersRemoved) {
-      lines.push(`    ${import_picocolors54.default.cyan("← pull")}  added on cloud: ${import_picocolors54.default.bold(slug)}`);
+      lines.push(`    ${import_picocolors55.default.cyan("← pull")}  added on cloud: ${import_picocolors55.default.bold(slug)}`);
     }
     lines.push("");
   }
@@ -84038,11 +84653,11 @@ async function runOrchestrationStatus(cwd2) {
   const edgesAdded = [...localEdges.keys()].filter((k3) => !cloudEdges.has(k3));
   const edgesRemoved = [...cloudEdges.keys()].filter((k3) => !localEdges.has(k3));
   if (edgesAdded.length || edgesRemoved.length) {
-    lines.push(`  ${import_picocolors54.default.bold("edges")}`);
+    lines.push(`  ${import_picocolors55.default.bold("edges")}`);
     for (const k3 of edgesAdded)
-      lines.push(`    ${import_picocolors54.default.yellow("→ push")}  added in yaml: ${k3}`);
+      lines.push(`    ${import_picocolors55.default.yellow("→ push")}  added in yaml: ${k3}`);
     for (const k3 of edgesRemoved)
-      lines.push(`    ${import_picocolors54.default.cyan("← pull")}  added on cloud: ${k3}`);
+      lines.push(`    ${import_picocolors55.default.cyan("← pull")}  added on cloud: ${k3}`);
     lines.push("");
   }
   const metaDecisions = decideOrchestrationMeta({
@@ -84052,17 +84667,17 @@ async function runOrchestrationStatus(cwd2) {
     force: false
   });
   if (metaDecisions.length) {
-    lines.push(`  ${import_picocolors54.default.bold("orchestration metadata")}`);
+    lines.push(`  ${import_picocolors55.default.bold("orchestration metadata")}`);
     for (const m3 of metaDecisions) {
       if (m3.kind === "push") {
-        lines.push(`    ${import_picocolors54.default.yellow("→ push")}  ${import_picocolors54.default.bold(m3.field)}: cloud ${import_picocolors54.default.dim(`"${m3.cloud}"`)} → local ${import_picocolors54.default.dim(`"${m3.local}"`)}`);
+        lines.push(`    ${import_picocolors55.default.yellow("→ push")}  ${import_picocolors55.default.bold(m3.field)}: cloud ${import_picocolors55.default.dim(`"${m3.cloud}"`)} → local ${import_picocolors55.default.dim(`"${m3.local}"`)}`);
       } else if (m3.kind === "keep") {
-        lines.push(`    ${import_picocolors54.default.cyan("← pull")}  ${import_picocolors54.default.bold(m3.field)}: changed in the cloud to ${import_picocolors54.default.dim(`"${m3.cloud}"`)}; push leaves it alone ${import_picocolors54.default.dim(`(yaml still has "${m3.local}")`)}`);
+        lines.push(`    ${import_picocolors55.default.cyan("← pull")}  ${import_picocolors55.default.bold(m3.field)}: changed in the cloud to ${import_picocolors55.default.dim(`"${m3.cloud}"`)}; push leaves it alone ${import_picocolors55.default.dim(`(yaml still has "${m3.local}")`)}`);
       } else {
-        lines.push(`    ${import_picocolors54.default.red("! conflict")}  ${import_picocolors54.default.bold(m3.field)}: local ${import_picocolors54.default.dim(`"${m3.local}"`)} vs cloud ${import_picocolors54.default.dim(`"${m3.cloud}"`)} — push refuses until you pull or ${import_picocolors54.default.cyan("--force")}`);
+        lines.push(`    ${import_picocolors55.default.red("! conflict")}  ${import_picocolors55.default.bold(m3.field)}: local ${import_picocolors55.default.dim(`"${m3.local}"`)} vs cloud ${import_picocolors55.default.dim(`"${m3.cloud}"`)} — push refuses until you pull or ${import_picocolors55.default.cyan("--force")}`);
       }
     }
-    lines.push(`    ${import_picocolors54.default.dim("fields the manifest omits, and fields only the cloud changed, are left alone")}`);
+    lines.push(`    ${import_picocolors55.default.dim("fields the manifest omits, and fields only the cloud changed, are left alone")}`);
     lines.push("");
   }
   const cloudTriggers = cloudScheduleTriggers(cloud, slugForAgent);
@@ -84087,34 +84702,141 @@ async function runOrchestrationStatus(cwd2) {
   const triggersToPull = cloudTriggers.filter((t) => !localNodes.has(t.node_id));
   const triggerDeletes = triggerPlan.kind === "reconcile" ? triggerPlan.archives : [];
   if (triggersToPush.length || triggersToPull.length) {
-    lines.push(`  ${import_picocolors54.default.bold("schedule triggers")}`);
+    lines.push(`  ${import_picocolors55.default.bold("schedule triggers")}`);
     for (const t of triggersToPush) {
-      lines.push(`    ${import_picocolors54.default.yellow("→ push")}  added/changed in yaml: ${scheduleTriggerLabel(t)}`);
+      lines.push(`    ${import_picocolors55.default.yellow("→ push")}  added/changed in yaml: ${scheduleTriggerLabel(t)}`);
     }
     for (const t of triggersToPull) {
       const doomed = triggerDeletes.includes(t.node_id);
-      lines.push(doomed ? `    ${import_picocolors54.default.red("⨯ push deletes")}  ${scheduleTriggerLabel(t)}` : `    ${import_picocolors54.default.cyan("← pull")}  only on cloud: ${scheduleTriggerLabel(t)}`);
+      lines.push(doomed ? `    ${import_picocolors55.default.red("⨯ push deletes")}  ${scheduleTriggerLabel(t)}` : `    ${import_picocolors55.default.cyan("← pull")}  only on cloud: ${scheduleTriggerLabel(t)}`);
     }
     lines.push("");
   }
   if (triggerPlan.kind === "blocked") {
-    lines.push(`  ${import_picocolors54.default.bold(import_picocolors54.default.red("schedule triggers: push blocked"))}`);
+    lines.push(`  ${import_picocolors55.default.bold(import_picocolors55.default.red("schedule triggers: push blocked"))}`);
     for (const nodeId of triggerPlan.unseen) {
-      lines.push(`    ${import_picocolors54.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors54.default.dim("— only in the cloud; pushing would delete it")}`);
+      lines.push(`    ${import_picocolors55.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors55.default.dim("— only in the cloud; pushing would delete it")}`);
     }
     for (const nodeId of triggerPlan.cloudModified) {
-      lines.push(`    ${import_picocolors54.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors54.default.dim("— edited in the cloud; pushing would overwrite that edit")}`);
+      lines.push(`    ${import_picocolors55.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors55.default.dim("— edited in the cloud; pushing would overwrite that edit")}`);
     }
     for (const nodeId of triggerPlan.staleArchives) {
-      lines.push(`    ${import_picocolors54.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors54.default.dim("— deleted here, edited in the cloud since; pushing would delete that edit")}`);
+      lines.push(`    ${import_picocolors55.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors55.default.dim("— deleted here, edited in the cloud since; pushing would delete that edit")}`);
     }
-    lines.push(`    ${import_picocolors54.default.dim("run")} ${import_picocolors54.default.cyan("brainbase orchestration pull")} ${import_picocolors54.default.dim("first")}`);
+    lines.push(`    ${import_picocolors55.default.dim("run")} ${import_picocolors55.default.cyan("brainbase orchestration pull")} ${import_picocolors55.default.dim("first")}`);
     lines.push("");
   } else if (triggerPlan.kind === "skip") {
     const left = untouchedRows(triggerPlan);
-    lines.push(`  ${import_picocolors54.default.dim(`${left.length} cloud schedule trigger${left.length === 1 ? "" : "s"} not managed by this manifest — push leaves ${left.length === 1 ? "it" : "them"} untouched`)}`);
+    lines.push(`  ${import_picocolors55.default.dim(`${left.length} cloud schedule trigger${left.length === 1 ? "" : "s"} not managed by this manifest — push leaves ${left.length === 1 ? "it" : "them"} untouched`)}`);
+    lines.push("");
+  }
+  const cloudWebhooks = cloudWebhookTriggers(cloud, slugForAgent);
+  const localWebhooks = manifestWebhookTriggers(localManifest);
+  const webhookPlan = decideWebhookTriggerReconcile({
+    local: localWebhooks,
+    cloud: cloudWebhooks,
+    baseline: lock?.webhook_triggers,
+    force: false
+  });
+  const webhookByNode = new Map([...cloudWebhooks, ...localWebhooks].map((t) => [t.node_id, t]));
+  const webhookLabel = (nodeId) => {
+    const t = webhookByNode.get(nodeId);
+    return t ? webhookTriggerLabel(t) : nodeId;
+  };
+  const localWebhookNodes = new Set(localWebhooks.map((t) => t.node_id));
+  const cloudWebhookByNode = new Map(cloudWebhooks.map((t) => [t.node_id, t]));
+  const webhooksToPush = localWebhooks.filter((t) => {
+    const remote = cloudWebhookByNode.get(t.node_id);
+    return !remote || webhookTriggerHash(remote) !== webhookTriggerHash(t);
+  });
+  const webhooksToPull = cloudWebhooks.filter((t) => !localWebhookNodes.has(t.node_id));
+  const webhookDeletes = webhookPlan.kind === "reconcile" ? webhookPlan.archives : [];
+  if (webhooksToPush.length || webhooksToPull.length) {
+    lines.push(`  ${import_picocolors55.default.bold("webhook triggers")}`);
+    for (const t of webhooksToPush) {
+      lines.push(`    ${import_picocolors55.default.yellow("→ push")}  added/changed in yaml: ${webhookTriggerLabel(t)}`);
+    }
+    for (const t of webhooksToPull) {
+      lines.push(webhookDeletes.includes(t.node_id) ? `    ${import_picocolors55.default.red("⨯ push deletes")}  ${webhookTriggerLabel(t)}` : `    ${import_picocolors55.default.cyan("← pull")}  only on cloud: ${webhookTriggerLabel(t)}`);
+    }
+    lines.push("");
+  }
+  if (webhookPlan.kind === "blocked") {
+    lines.push(`  ${import_picocolors55.default.bold(import_picocolors55.default.red("webhook triggers: push blocked"))}`);
+    for (const nodeId of webhookPlan.unseen) {
+      lines.push(`    ${import_picocolors55.default.red("!")} ${webhookLabel(nodeId)} ${import_picocolors55.default.dim("— only in the cloud; pushing would delete it")}`);
+    }
+    for (const nodeId of webhookPlan.cloudModified) {
+      lines.push(`    ${import_picocolors55.default.red("!")} ${webhookLabel(nodeId)} ${import_picocolors55.default.dim("— edited in the cloud; pushing would overwrite that edit")}`);
+    }
+    for (const nodeId of webhookPlan.staleArchives) {
+      lines.push(`    ${import_picocolors55.default.red("!")} ${webhookLabel(nodeId)} ${import_picocolors55.default.dim("— deleted here, edited in the cloud since; pushing would delete that edit")}`);
+    }
+    lines.push(`    ${import_picocolors55.default.dim("run")} ${import_picocolors55.default.cyan("brainbase orchestration pull")} ${import_picocolors55.default.dim("first")}`);
+    lines.push("");
+  } else if (webhookPlan.kind === "skip") {
+    const left = untouchedRows(webhookPlan);
+    lines.push(`  ${import_picocolors55.default.dim(`${left.length} cloud webhook trigger${left.length === 1 ? "" : "s"} not managed by this manifest — push leaves ${left.length === 1 ? "it" : "them"} untouched`)}`);
     lines.push("");
   }
+  const localDecisions = manifestDecisions(localManifest, new Map([...localSlugByAgentId].map(([agentId, slug]) => [slug, agentId])));
+  const cloudDecisionList = cloudDecisions(cloud, slugForAgent);
+  let decisionsToPush = [];
+  let decisionsToPull = [];
+  if (!cloudDecisionList) {
+    if (localDecisions.length) {
+      lines.push(`  ${import_picocolors55.default.dim(`${localDecisions.length} decision${localDecisions.length === 1 ? "" : "s"} in yaml, but the cloud does not show decision nodes to this account — push leaves ${localDecisions.length === 1 ? "it" : "them"} alone`)}`);
+      lines.push("");
+    }
+  } else {
+    const decisionPlan = decideDecisionReconcile({
+      local: localDecisions,
+      cloud: cloudDecisionList,
+      baseline: lock?.decisions,
+      force: false
+    });
+    const byId = new Map([...cloudDecisionList, ...localDecisions].map((d3) => [d3.id, d3]));
+    const label2 = (id) => {
+      const d3 = byId.get(id);
+      return d3 ? decisionLabel(d3) : id;
+    };
+    const localIds = new Set(localDecisions.map((d3) => d3.id));
+    const cloudById = new Map(cloudDecisionList.map((d3) => [d3.id, d3]));
+    decisionsToPush = localDecisions.filter((d3) => {
+      const remote = cloudById.get(d3.id);
+      return !remote || decisionHash(remote) !== decisionHash(d3);
+    });
+    decisionsToPull = cloudDecisionList.filter((d3) => !localIds.has(d3.id));
+    const decisionDeletes = decisionPlan.kind === "reconcile" ? decisionPlan.archives : [];
+    if (decisionsToPush.length || decisionsToPull.length) {
+      lines.push(`  ${import_picocolors55.default.bold("decisions")}`);
+      for (const d3 of decisionsToPush) {
+        lines.push(`    ${import_picocolors55.default.yellow("→ push")}  added/changed in yaml: ${decisionLabel(d3)}`);
+      }
+      for (const d3 of decisionsToPull) {
+        lines.push(decisionDeletes.includes(d3.id) ? `    ${import_picocolors55.default.red("⨯ push deletes")}  ${decisionLabel(d3)}` : `    ${import_picocolors55.default.cyan("← pull")}  only on cloud: ${decisionLabel(d3)}`);
+      }
+      lines.push("");
+    }
+    if (decisionPlan.kind === "blocked") {
+      lines.push(`  ${import_picocolors55.default.bold(import_picocolors55.default.red("decisions: push blocked"))}`);
+      for (const id of decisionPlan.unseen) {
+        lines.push(`    ${import_picocolors55.default.red("!")} ${label2(id)} ${import_picocolors55.default.dim("— only in the cloud; pushing would delete it")}`);
+      }
+      for (const id of decisionPlan.cloudModified) {
+        lines.push(`    ${import_picocolors55.default.red("!")} ${label2(id)} ${import_picocolors55.default.dim("— edited in the cloud; pushing would overwrite that edit")}`);
+      }
+      for (const id of decisionPlan.staleArchives) {
+        lines.push(`    ${import_picocolors55.default.red("!")} ${label2(id)} ${import_picocolors55.default.dim("— deleted here, edited in the cloud since; pushing would delete that edit")}`);
+      }
+      lines.push(`    ${import_picocolors55.default.dim("run")} ${import_picocolors55.default.cyan("brainbase orchestration pull")} ${import_picocolors55.default.dim("first")}`);
+      lines.push("");
+    } else if (decisionPlan.kind === "skip") {
+      const left = untouchedRows(decisionPlan);
+      lines.push(`  ${import_picocolors55.default.dim(`${left.length} cloud decision${left.length === 1 ? "" : "s"} not managed by this manifest — push leaves ${left.length === 1 ? "it" : "them"} untouched`)}`);
+      lines.push("");
+    }
+  }
   const lockByAgentId = new Map((lock?.members ?? []).map((m3) => [m3.agent_id, m3]));
   const memberDrift = [];
   for (const m3 of cloud.members) {
@@ -84135,27 +84857,35 @@ async function runOrchestrationStatus(cwd2) {
     }
   }
   if (memberDrift.length) {
-    lines.push(`  ${import_picocolors54.default.bold("member content drift")}`);
+    lines.push(`  ${import_picocolors55.default.bold("member content drift")}`);
     for (const d3 of memberDrift) {
-      lines.push(`    ${import_picocolors54.default.cyan("?")} ${import_picocolors54.default.bold(d3.slug)}  ${import_picocolors54.default.dim("— " + d3.reason)}`);
+      lines.push(`    ${import_picocolors55.default.cyan("?")} ${import_picocolors55.default.bold(d3.slug)}  ${import_picocolors55.default.dim("— " + d3.reason)}`);
     }
-    lines.push(`    ${import_picocolors54.default.dim("cd into each member folder and run")} ${import_picocolors54.default.cyan("brainbase agent status")}`);
+    lines.push(`    ${import_picocolors55.default.dim("cd into each member folder and run")} ${import_picocolors55.default.cyan("brainbase agent status")}`);
     lines.push("");
   }
   const revisionDrift = lock?.revision != null && cloud.revision !== lock.revision;
   if (revisionDrift) {
-    lines.push(`  ${import_picocolors54.default.bold("cloud revision")}`);
-    lines.push(`    ${import_picocolors54.default.cyan("← pull")}  cloud changed since last pull: ${import_picocolors54.default.dim(`lock ${lock.revision} → cloud ${cloud.revision}`)}`);
+    lines.push(`  ${import_picocolors55.default.bold("cloud revision")}`);
+    lines.push(`    ${import_picocolors55.default.cyan("← pull")}  cloud changed since last pull: ${import_picocolors55.default.dim(`lock ${lock.revision} → cloud ${cloud.revision}`)}`);
     lines.push("");
   }
-  if (!membersAdded.length && !membersRemoved.length && !edgesAdded.length && !edgesRemoved.length && !triggersToPush.length && !triggersToPull.length && !metaDecisions.length && !memberDrift.length && !revisionDrift) {
-    lines.push(`  ${import_picocolors54.default.green("✓")} everything is in sync`);
+  const endpointLines = [];
+  if (cloudWebhooks.length) {
+    endpointLines.push(`  ${import_picocolors55.default.bold("webhook endpoints")} ${import_picocolors55.default.dim("— fire with your credentials, or")} ${import_picocolors55.default.cyan("brainbase orchestration trigger fire <node_id>")}`);
+    endpointLines.push(...webhookEndpointLines(cloudWebhooks, "    "));
+    endpointLines.push("");
+  }
+  if (!membersAdded.length && !membersRemoved.length && !edgesAdded.length && !edgesRemoved.length && !triggersToPush.length && !triggersToPull.length && !webhooksToPush.length && !webhooksToPull.length && !decisionsToPush.length && !decisionsToPull.length && !metaDecisions.length && !memberDrift.length && !revisionDrift) {
+    lines.push(`  ${import_picocolors55.default.green("✓")} everything is in sync`);
     lines.push("");
+    lines.push(...endpointLines);
     console.log(lines.join(`
 `));
     return;
   }
-  lines.push(`  ${import_picocolors54.default.dim("run")} ${import_picocolors54.default.cyan("brainbase orchestration pull")} ${import_picocolors54.default.dim("to apply cloud changes,")} ${import_picocolors54.default.cyan("brainbase orchestration push")} ${import_picocolors54.default.dim("to send yours")}`);
+  lines.push(...endpointLines);
+  lines.push(`  ${import_picocolors55.default.dim("run")} ${import_picocolors55.default.cyan("brainbase orchestration pull")} ${import_picocolors55.default.dim("to apply cloud changes,")} ${import_picocolors55.default.cyan("brainbase orchestration push")} ${import_picocolors55.default.dim("to send yours")}`);
   lines.push("");
   console.log(lines.join(`
 `));
@@ -84170,7 +84900,7 @@ function stableJson2(value2) {
 }
 
 // src/cli/orchestration-list.ts
-var import_picocolors55 = __toESM(require_picocolors(), 1);
+var import_picocolors56 = __toESM(require_picocolors(), 1);
 async function runOrchestrationList(args) {
   const json3 = args.json === true;
   if (!json3)
@@ -84201,13 +84931,13 @@ async function runOrchestrationList(args) {
   }
   const lines = [""];
   for (const o2 of items) {
-    lines.push(`  ${import_picocolors55.default.bold(o2.name)}  ${import_picocolors55.default.dim(o2.id)}`);
+    lines.push(`  ${import_picocolors56.default.bold(o2.name)}  ${import_picocolors56.default.dim(o2.id)}`);
     if (o2.description)
-      lines.push(`    ${import_picocolors55.default.dim(o2.description)}`);
-    lines.push(`    ${import_picocolors55.default.dim(`${o2.member_count} member${o2.member_count === 1 ? "" : "s"} · ${o2.edge_count} edge${o2.edge_count === 1 ? "" : "s"}`)}`);
+      lines.push(`    ${import_picocolors56.default.dim(o2.description)}`);
+    lines.push(`    ${import_picocolors56.default.dim(`${o2.member_count} member${o2.member_count === 1 ? "" : "s"} · ${o2.edge_count} edge${o2.edge_count === 1 ? "" : "s"}`)}`);
     lines.push("");
   }
-  lines.push(`  ${import_picocolors55.default.dim("pull one with")} ${import_picocolors55.default.cyan("brainbase orchestration pull <id>")}`);
+  lines.push(`  ${import_picocolors56.default.dim("pull one with")} ${import_picocolors56.default.cyan("brainbase orchestration pull <id>")}`);
   lines.push("");
   console.log(lines.join(`
 `));
@@ -84215,7 +84945,7 @@ async function runOrchestrationList(args) {
 
 // src/cli/orchestration-add-agent.ts
 import fs86 from "node:fs";
-var import_picocolors56 = __toESM(require_picocolors(), 1);
+var import_picocolors57 = __toESM(require_picocolors(), 1);
 
 // src/core/orchestration-add.ts
 function resolveOrgIdForGroup(groupId, orgsWithTeams) {
@@ -84280,7 +85010,7 @@ async function runOrchestrationAddAgent(cwd2, args) {
   const link2 = readOrchLink(cwd2);
   if (!link2 || !hasOrchManifest(cwd2)) {
     failWarn("This folder is not a linked orchestration.");
-    f2.info(`Run ${import_picocolors56.default.cyan("brainbase orchestration pull <id>")} first.`);
+    f2.info(`Run ${import_picocolors57.default.cyan("brainbase orchestration pull <id>")} first.`);
     return;
   }
   let manifest;
@@ -84306,7 +85036,7 @@ async function runOrchestrationAddAgent(cwd2, args) {
     while (manifest.members.some((m3) => m3.slug === candidate) || fs86.existsSync(memberDir(cwd2, candidate))) {
       candidate = `${slug}-${++n}`;
     }
-    f2.info(`Slug ${import_picocolors56.default.bold(slug)} is taken — using ${import_picocolors56.default.bold(candidate)}.`);
+    f2.info(`Slug ${import_picocolors57.default.bold(slug)} is taken — using ${import_picocolors57.default.bold(candidate)}.`);
     slug = candidate;
   }
   let payloadSchema;
@@ -84330,7 +85060,7 @@ async function runOrchestrationAddAgent(cwd2, args) {
       const resolved = resolveOrgIdForGroup(link2.group_id, orgsWithTeams);
       if (!resolved) {
         sp.stop("Failed.");
-        fail(`Could not find an org that owns group ${import_picocolors56.default.bold(link2.group_id)}. ` + `Pass ${import_picocolors56.default.cyan("--org <id>")} explicitly.`);
+        fail(`Could not find an org that owns group ${import_picocolors57.default.bold(link2.group_id)}. ` + `Pass ${import_picocolors57.default.cyan("--org <id>")} explicitly.`);
         return;
       }
       orgId = resolved;
@@ -84347,14 +85077,14 @@ async function runOrchestrationAddAgent(cwd2, args) {
   if (from.length === 0 && to2.length === 0 && isInteractive() && manifest.members.length > 0) {
     const memberOptions = manifest.members.map((m3) => ({ value: m3.slug, label: m3.slug }));
     const pickedFrom = await ae({
-      message: `Connect ${import_picocolors56.default.bold(slug)} FROM which member(s)? — edges INTO ${slug} (space to select, enter to skip)`,
+      message: `Connect ${import_picocolors57.default.bold(slug)} FROM which member(s)? — edges INTO ${slug} (space to select, enter to skip)`,
       options: memberOptions,
       required: false
     });
     if (Array.isArray(pickedFrom))
       from = pickedFrom;
     const pickedTo = await ae({
-      message: `Connect ${import_picocolors56.default.bold(slug)} TO which member(s)? — edges OUT of ${slug} (space to select, enter to skip)`,
+      message: `Connect ${import_picocolors57.default.bold(slug)} TO which member(s)? — edges OUT of ${slug} (space to select, enter to skip)`,
       options: memberOptions,
       required: false
     });
@@ -84393,23 +85123,23 @@ async function runOrchestrationAddAgent(cwd2, args) {
   }
   writeOrchManifest(cwd2, updated);
   if (args.noPush) {
-    f2.info(`Manifest updated. Run ${import_picocolors56.default.cyan("brainbase orchestration push")} to apply.`);
+    f2.info(`Manifest updated. Run ${import_picocolors57.default.cyan("brainbase orchestration push")} to apply.`);
     return;
   }
   await runOrchestrationPush(cwd2, { yes: true, graphOnly: true });
 }
 
 // src/cli/orchestration-create.ts
-var import_picocolors57 = __toESM(require_picocolors(), 1);
+var import_picocolors58 = __toESM(require_picocolors(), 1);
 async function runOrchestrationCreate(cwd2, args) {
   banner("orchestration create — claim a brainbase-orchestration.yaml");
   if (readOrchLink(cwd2)) {
     failWarn("This folder is already linked to an orchestration.");
-    f2.info(`Run ${import_picocolors57.default.cyan("brainbase orchestration push")} to update it.`);
+    f2.info(`Run ${import_picocolors58.default.cyan("brainbase orchestration push")} to update it.`);
     return;
   }
   if (!hasOrchManifest(cwd2)) {
-    failWarn(`No ${import_picocolors57.default.bold(ORCH_MANIFEST_FILE)} here.`);
+    failWarn(`No ${import_picocolors58.default.bold(ORCH_MANIFEST_FILE)} here.`);
     f2.info(`Create one, or pull an existing orchestration first.`);
     return;
   }
@@ -84442,10 +85172,10 @@ async function runOrchestrationCreate(cwd2, args) {
   });
   const plan = [
     "",
-    `  ${import_picocolors57.default.bold(manifest.orchestration.name)}`,
-    `  ${import_picocolors57.default.dim("org")}      ${import_picocolors57.default.bold(target.org.name)}`,
-    `  ${import_picocolors57.default.dim("team")}     ${import_picocolors57.default.bold(target.team.name)}`,
-    `  ${import_picocolors57.default.dim("graph")}    ${manifest.members.length} member${manifest.members.length === 1 ? "" : "s"}, ${manifest.edges.length} edge${manifest.edges.length === 1 ? "" : "s"}, ${graph.triggers.length} trigger${graph.triggers.length === 1 ? "" : "s"}`,
+    `  ${import_picocolors58.default.bold(manifest.orchestration.name)}`,
+    `  ${import_picocolors58.default.dim("org")}      ${import_picocolors58.default.bold(target.org.name)}`,
+    `  ${import_picocolors58.default.dim("team")}     ${import_picocolors58.default.bold(target.team.name)}`,
+    `  ${import_picocolors58.default.dim("graph")}    ${manifest.members.length} member${manifest.members.length === 1 ? "" : "s"}, ${manifest.edges.length} edge${manifest.edges.length === 1 ? "" : "s"}, ${graph.triggers.length + graph.webhookTriggers.length} trigger${graph.triggers.length + graph.webhookTriggers.length === 1 ? "" : "s"}`,
     ""
   ];
   console.log(plan.join(`
@@ -84473,9 +85203,11 @@ async function runOrchestrationCreate(cwd2, args) {
       credit_limit: manifest.orchestration.credit_limit,
       members: graph.memberIds,
       edges: graph.edges,
-      triggers: graph.triggers
+      triggers: [...graph.triggers, ...graph.webhookTriggers]
     });
-    sp.stop(`Created ${import_picocolors57.default.bold(created.name)}.`);
+    sp.stop(`Created ${import_picocolors58.default.bold(created.name)}.`);
+    const slugForAgent = (agentId, fallback) => manifest.members.find((m3) => slugToAgentId.get(m3.slug) === agentId)?.slug ?? fallback;
+    const webhooks = cloudWebhookTriggers(created, slugForAgent);
     writeOrchLink(cwd2, {
       schemaVersion: 1,
       orchestration_id: created.id,
@@ -84501,8 +85233,13 @@ async function runOrchestrationCreate(cwd2, args) {
         to_slug: e2.to_slug ?? e2.to_agent_id,
         description: e2.description ?? "",
         payload_schema: e2.payload_schema ?? {}
-      }))
+      })),
+      webhook_triggers: syncedWebhookTriggers(webhooks)
     });
+    const decisionCount = manifest.decisions?.length ?? 0;
+    if (decisionCount) {
+      f2.info(`Run ${import_picocolors58.default.cyan("brainbase orchestration push")} to add the ${decisionCount} decision${decisionCount === 1 ? "" : "s"} in this manifest.`);
+    }
     $e(`Created ${created.name} at revision ${created.revision}.`);
   } catch (err) {
     sp.stop("Failed.");
@@ -84524,8 +85261,98 @@ function handleApiError7(err) {
   }
 }
 
+// src/cli/orchestration-from-agent.ts
+var import_picocolors59 = __toESM(require_picocolors(), 1);
+var MEMBERSHIP_CONFLICT_CODE = "orchestration_membership_conflict";
+var MAX_NAME_LENGTH = 200;
+async function runOrchestrationFromAgent(cwd2, args) {
+  const json3 = args.json === true;
+  if (args.agentId !== undefined && !args.agentId.trim()) {
+    fail3(json3, "The agent id is empty.", `Pass an agent id, or omit it to use the agent linked here.`);
+    return;
+  }
+  const link2 = readLink(cwd2);
+  const agentId = args.agentId?.trim() || link2?.agent_id;
+  if (!agentId) {
+    fail3(json3, "No agent given and this folder is not linked to one.", `Pass an agent id: ${import_picocolors59.default.cyan("brainbase orchestration from-agent <agent-id>")}`);
+    return;
+  }
+  const fromLink = args.agentId === undefined && link2 !== null;
+  if (!json3)
+    banner("orchestration from-agent — turn an agent into an orchestration");
+  let created;
+  try {
+    const teamId = args.teamId ?? (fromLink ? link2.team_id : (await resolveOrgAndTeam({
+      orgId: args.orgId,
+      allowPrompt: !json3,
+      announce: !json3
+    })).team.id);
+    const agent = await masApi.getAgentSummary(agentId);
+    const sp = json3 ? null : spinner();
+    sp?.start("Creating orchestration…");
+    try {
+      created = await masApi.createOrchestrationFromAgent({
+        agent_id: agentId,
+        group_id: teamId,
+        name: args.name ?? (agent.name.trim().slice(0, MAX_NAME_LENGTH) || "Orchestration"),
+        description: args.description ?? agent.description
+      });
+    } catch (err) {
+      sp?.stop("Failed.");
+      throw err;
+    }
+    sp?.stop(`Created ${import_picocolors59.default.bold(sanitizeLabel(created.name))}.`);
+  } catch (err) {
+    if (err instanceof ApiError) {
+      fail3(json3, err.message, hint(err), { status: err.status ?? null });
+      return;
+    }
+    if (json3 && err instanceof Error) {
+      fail3(json3, err.message, undefined, { status: null });
+      return;
+    }
+    throw err;
+  }
+  if (json3) {
+    console.log(JSON.stringify(created, null, 2));
+    return;
+  }
+  console.log([
+    "",
+    `  ${import_picocolors59.default.green("✓")} ${import_picocolors59.default.bold(sanitizeLabel(created.name))}  ${import_picocolors59.default.dim(sanitizeLabel(created.id))}`,
+    `    ${import_picocolors59.default.dim("only member:")} ${sanitizeLabel(agentId)}`,
+    "",
+    `  ${import_picocolors59.default.dim("work on its graph with")} ${import_picocolors59.default.cyan(`brainbase orchestration pull ${sanitizeLabel(created.id)}`)}`,
+    ""
+  ].join(`
+`));
+}
+function hint(err) {
+  if (err.status === 409) {
+    const code = err.body?.detail?.code;
+    if (code === MEMBERSHIP_CONFLICT_CODE) {
+      return "An agent belongs to one orchestration at a time. Remove it from that one first.";
+    }
+    return `Pick another name with ${import_picocolors59.default.cyan("--name <name>")}.`;
+  }
+  if (err.status === 400 || err.status === 403) {
+    return `The agent must be in the team you create it in. Pick one with ${import_picocolors59.default.cyan("--team <id>")}.`;
+  }
+  return;
+}
+function fail3(json3, message, help, extra = {}) {
+  if (json3)
+    console.log(JSON.stringify({ error: message, ...extra }, null, 2));
+  else {
+    f2.error(sanitizeLabel(message));
+    if (help)
+      f2.info(help);
+  }
+  process.exitCode = 1;
+}
+
 // src/cli/orchestration-init.ts
-var import_picocolors58 = __toESM(require_picocolors(), 1);
+var import_picocolors60 = __toESM(require_picocolors(), 1);
 
 // src/core/orchestration-scaffold.ts
 var import_yaml6 = __toESM(require_dist(), 1);
@@ -84560,6 +85387,13 @@ var FULL_TEMPLATE_EXAMPLES = {
       is_active: false,
       config: { cron_expression: "0 9 * * 1" },
       to: [{ agent: "triage" }]
+    },
+    {
+      type: "webhook",
+      node_id: "00000000-0000-4000-8000-000000000001",
+      is_active: false,
+      public: false,
+      to: [{ agent: "triage" }]
     }
   ]
 };
@@ -84614,6 +85448,10 @@ edges: []
 ${commented({ edges: ex.edges })}
 
 # Schedule triggers start members on a cron (standard 5-field syntax).
+# Webhook triggers start them when something outside Brainbase POSTs to them.
+# A webhook's \`public\` switches its secret URL: off (the default), only
+# members fire it, with \`brainbase orchestration trigger fire <node_id>\`;
+# on, anyone holding the URL (shown in the web app) can.
 # \`node_id\` is a UUID you generate once and keep, so pushes update the
 # same trigger instead of creating another.
 ${commented({ triggers: ex.triggers })}
@@ -84644,7 +85482,7 @@ async function runOrchestrationInit(cwd2, args = {}) {
       path: target,
       created: false,
       reason: "conflicting-flags",
-      message: `Pass either ${import_picocolors58.default.cyan("--minimal")} or ${import_picocolors58.default.cyan("--full")}, not both.`
+      message: `Pass either ${import_picocolors60.default.cyan("--minimal")} or ${import_picocolors60.default.cyan("--full")}, not both.`
     });
   }
   if (readOrchLink(cwd2)) {
@@ -84652,7 +85490,7 @@ async function runOrchestrationInit(cwd2, args = {}) {
       path: target,
       created: false,
       reason: "linked",
-      message: `This folder is linked to an orchestration. Edit ${import_picocolors58.default.bold(ORCH_MANIFEST_FILE)} and run ${import_picocolors58.default.cyan("brainbase orchestration push")}, or init in a new folder.`
+      message: `This folder is linked to an orchestration. Edit ${import_picocolors60.default.bold(ORCH_MANIFEST_FILE)} and run ${import_picocolors60.default.cyan("brainbase orchestration push")}, or init in a new folder.`
     });
   }
   const existed = hasOrchManifest(cwd2);
@@ -84661,7 +85499,7 @@ async function runOrchestrationInit(cwd2, args = {}) {
       path: target,
       created: false,
       reason: "manifest-exists",
-      message: `${import_picocolors58.default.bold(ORCH_MANIFEST_FILE)} already exists here. Edit it, or pass ${import_picocolors58.default.cyan("--force")} to overwrite it.`
+      message: `${import_picocolors60.default.bold(ORCH_MANIFEST_FILE)} already exists here. Edit it, or pass ${import_picocolors60.default.cyan("--force")} to overwrite it.`
     });
   }
   const name = resolveScaffoldName(cwd2, args.name, FALLBACK_NAME2);
@@ -84671,7 +85509,7 @@ async function runOrchestrationInit(cwd2, args = {}) {
   try {
     writeOrchestrationScaffold(cwd2, { name }, { full: args.full });
   } catch (err) {
-    console.error(import_picocolors58.default.red(`Failed to write ${ORCH_MANIFEST_FILE}: ${err.message}`));
+    console.error(import_picocolors60.default.red(`Failed to write ${ORCH_MANIFEST_FILE}: ${err.message}`));
     process.exitCode = 1;
     return;
   }
@@ -84679,10 +85517,10 @@ async function runOrchestrationInit(cwd2, args = {}) {
     emit2({ path: target, created: true, name, template: template2 });
     return;
   }
-  f2.success(`Wrote ${import_picocolors58.default.bold(ORCH_MANIFEST_FILE)}${existed ? " (overwritten)" : ""}.`);
+  f2.success(`Wrote ${import_picocolors60.default.bold(ORCH_MANIFEST_FILE)}${existed ? " (overwritten)" : ""}.`);
   console.log();
-  console.log(tip(`Edit it, then run ${import_picocolors58.default.cyan("brainbase orchestration create")} ${import_picocolors58.default.dim("— creates the orchestration and links this folder.")}`));
-  console.log(tip(`Then ${import_picocolors58.default.cyan("brainbase orchestration add-agent <name>")} ${import_picocolors58.default.dim("— creates a member agent and wires it into the graph.")}`));
+  console.log(tip(`Edit it, then run ${import_picocolors60.default.cyan("brainbase orchestration create")} ${import_picocolors60.default.dim("— creates the orchestration and links this folder.")}`));
+  console.log(tip(`Then ${import_picocolors60.default.cyan("brainbase orchestration add-agent <name>")} ${import_picocolors60.default.dim("— creates a member agent and wires it into the graph.")}`));
   console.log();
 }
 function emit2(result2) {
@@ -84696,13 +85534,127 @@ function refuse2(json3, outcome) {
     return;
   }
   console.error(`
-  ${import_picocolors58.default.red(message)}
+  ${import_picocolors60.default.red(message)}
 `);
 }
 
+// src/cli/orchestration-trigger.ts
+var import_picocolors61 = __toESM(require_picocolors(), 1);
+var OPTIONS = [
+  { key: "data", names: ["--data", "-d"], kind: "value" },
+  { key: "idempotencyKey", names: ["--idempotency-key"], kind: "value" },
+  { key: "orchestration", names: ["--orchestration"], kind: "value" }
+];
+async function runOrchestrationTrigger(cwd2, args, opts) {
+  const [sub, ...rest2] = args;
+  if (sub !== "fire") {
+    if (sub !== undefined && sub !== "help") {
+      console.error(`Unknown orchestration trigger subcommand: ${sub}`);
+      process.exitCode = 1;
+    }
+    printTriggerHelp();
+    return;
+  }
+  let parsed;
+  try {
+    parsed = parseArgv(rest2, OPTIONS);
+  } catch (err) {
+    if (!(err instanceof ArgvParseError))
+      throw err;
+    return refuse3(err.message, opts);
+  }
+  const [ref, ...extra] = parsed.positionals;
+  if (!ref || extra.length > 0) {
+    return refuse3("Usage: brainbase orchestration trigger fire <trigger> [--data JSON] [--idempotency-key K]", opts);
+  }
+  let payload = {};
+  const data = stringOption(parsed, "data");
+  if (data !== undefined) {
+    try {
+      payload = JSON.parse(data);
+    } catch (err) {
+      return refuse3(`--data is not valid JSON: ${err.message}`, opts);
+    }
+  }
+  const idempotencyKey = stringOption(parsed, "idempotencyKey");
+  if (idempotencyKey !== undefined && !idempotencyKey.trim()) {
+    return refuse3("--idempotency-key cannot be empty.", opts);
+  }
+  const orchestrationId = stringOption(parsed, "orchestration") ?? readOrchLink(cwd2)?.orchestration_id;
+  if (!orchestrationId) {
+    return refuse3(`This folder is not linked to an orchestration. Run it where ${ORCH_MANIFEST_FILE} lives, or pass --orchestration <id>.`, opts);
+  }
+  try {
+    const trigger = resolveWebhookTrigger(await api.getOrchestration(orchestrationId), ref);
+    const fire = await api.fireOrchestrationTrigger(orchestrationId, trigger.id, payload, idempotencyKey);
+    reportFire(fire, webhookTriggerLabel(trigger), opts);
+  } catch (err) {
+    return refuse3(errorMessage2(err), opts);
+  }
+}
+function reportFire(fire, label2, opts) {
+  const failed = !fire.duplicate && !!fire.dispatch_error;
+  if (failed)
+    process.exitCode = 1;
+  if (opts.json) {
+    console.log(JSON.stringify(fire, null, 2));
+    return;
+  }
+  const started = fire.dispatched_agent_ids?.length ?? 0;
+  const tasks = `${started} task${started === 1 ? "" : "s"}`;
+  if (fire.duplicate) {
+    f2.info(`Already fired with this idempotency key (fire ${fire.fire_id}); nothing new started.`);
+  } else if (failed) {
+    fail(started > 0 ? `Fired ${label2} — started ${tasks}, then failed: ${fire.dispatch_error} (fire ${fire.fire_id})` : `Fired ${label2}, but nothing started: ${fire.dispatch_error} (fire ${fire.fire_id})`);
+  } else {
+    f2.success(`Fired ${label2} — started ${tasks} (fire ${fire.fire_id}).`);
+  }
+}
+function refuse3(message, opts) {
+  process.exitCode = 1;
+  if (opts.json) {
+    console.log(JSON.stringify({ error: message }, null, 2));
+  } else {
+    f2.error(message);
+  }
+}
+function errorMessage2(err) {
+  if (!(err instanceof ApiError))
+    return err.message;
+  if (err.status === 401)
+    return "Your session is invalid. Run `brainbase login` and try again.";
+  if (err.status === 403) {
+    return `${err.message} Firing a trigger needs a login or an API key with publish scope.`;
+  }
+  if (err.status === 404)
+    return `${err.message} (or you do not have access to this orchestration).`;
+  return err.message;
+}
+function printTriggerHelp() {
+  console.log([
+    "",
+    `  ${import_picocolors61.default.bold("brainbase orchestration trigger fire")} ${import_picocolors61.default.dim("<trigger> [options]")}`,
+    "",
+    `  ${import_picocolors61.default.dim("Fire a webhook trigger with your credentials, whether or not its URL is public. Starts real, billable runs.")}`,
+    `  ${import_picocolors61.default.dim("<trigger> is its node_id from")} ${ORCH_MANIFEST_FILE}${import_picocolors61.default.dim(", or its trigger id.")}`,
+    "",
+    `  ${import_picocolors61.default.bold("Flags")}`,
+    `    ${import_picocolors61.default.dim("--data <json>")}            the payload (default {})`,
+    `    ${import_picocolors61.default.dim("--idempotency-key <k>")}    a retry with the same key fires once`,
+    `    ${import_picocolors61.default.dim("--orchestration <id>")}     the orchestration, when this folder is not linked to one`,
+    `    ${import_picocolors61.default.dim("--json")}                   print the fire as JSON`,
+    ""
+  ].join(`
+`));
+}
+
 // src/cli/orchestration.ts
 async function runOrchestration(cwd2, sub, args, opts) {
   if (args.some((arg) => arg === "--help" || arg === "-h")) {
+    if (sub === "trigger" || sub === "triggers") {
+      await runOrchestrationTrigger(cwd2, ["help"], { json: opts.json });
+      return;
+    }
     printHelp4();
     return;
   }
@@ -84723,6 +85675,16 @@ async function runOrchestration(cwd2, sub, args, opts) {
         teamId: opts.teamId
       });
       return;
+    case "from-agent":
+      await runOrchestrationFromAgent(cwd2, {
+        agentId: args[0],
+        orgId: opts.orgId,
+        teamId: opts.teamId,
+        name: opts.name,
+        description: opts.description,
+        json: opts.json
+      });
+      return;
     case "pull":
       await runOrchestrationPull(cwd2, {
         orchestrationId: args[0],
@@ -84740,6 +85702,10 @@ async function runOrchestration(cwd2, sub, args, opts) {
     case "status":
       await runOrchestrationStatus(cwd2);
       return;
+    case "trigger":
+    case "triggers":
+      await runOrchestrationTrigger(cwd2, args, { json: opts.json });
+      return;
     case "list":
     case "ls":
       await runOrchestrationList({ orgId: opts.orgId, teamId: opts.teamId, json: opts.json });
@@ -84769,7 +85735,7 @@ async function runOrchestration(cwd2, sub, args, opts) {
       return;
     default:
       console.error(`Unknown orchestration subcommand: ${sub}
-${didYouMean(sub, ["create", "pull", "push", "status", "list", "delete", "add-agent"], "brainbase orchestration")}`);
+${didYouMean(sub, ["create", "from-agent", "pull", "push", "status", "list", "delete", "add-agent", "trigger"], "brainbase orchestration")}`);
       printHelp4();
       process.exit(1);
   }
@@ -84777,25 +85743,28 @@ ${didYouMean(sub, ["create", "pull", "push", "status", "list", "delete", "add-ag
 function printHelp4() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors59.default.bold("brainbase orchestration")} ${import_picocolors59.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors62.default.bold("brainbase orchestration")} ${import_picocolors62.default.dim("<sub> [options]")}`);
   out.push("");
-  out.push(`  ${import_picocolors59.default.cyan("init")}             ${import_picocolors59.default.dim("write a starter brainbase-orchestration.yaml here — offline, no login (--full for a commented template, --force to overwrite)")}`);
-  out.push(`  ${import_picocolors59.default.cyan("create")}           ${import_picocolors59.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
-  out.push(`  ${import_picocolors59.default.cyan("pull")} ${import_picocolors59.default.dim("<id>")}      ${import_picocolors59.default.dim("fetch orchestration + every member agent into this folder")}`);
-  out.push(`  ${import_picocolors59.default.cyan("push")}             ${import_picocolors59.default.dim("push each member, then update the orchestration graph")}`);
-  out.push(`  ${import_picocolors59.default.cyan("add-agent")} ${import_picocolors59.default.dim("<name>")}    ${import_picocolors59.default.dim("create a member agent, wire edges (--from/--to), and push")}`);
-  out.push(`  ${import_picocolors59.default.cyan("status")}           ${import_picocolors59.default.dim("show what would push and what would pull")}`);
-  out.push(`  ${import_picocolors59.default.cyan("list")}             ${import_picocolors59.default.dim("list orchestrations under a team")}`);
-  out.push(`  ${import_picocolors59.default.cyan("delete")} ${import_picocolors59.default.dim("<id>")}      ${import_picocolors59.default.dim("permanently delete an orchestration graph — member agents are kept")}`);
+  out.push(`  ${import_picocolors62.default.cyan("init")}             ${import_picocolors62.default.dim("write a starter brainbase-orchestration.yaml here — offline, no login (--full for a commented template, --force to overwrite)")}`);
+  out.push(`  ${import_picocolors62.default.cyan("create")}           ${import_picocolors62.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
+  out.push(`  ${import_picocolors62.default.cyan("from-agent")} ${import_picocolors62.default.dim("[agent-id]")} ${import_picocolors62.default.dim("turn an existing agent (default: this folder's) into an orchestration")}`);
+  out.push(`  ${import_picocolors62.default.cyan("pull")} ${import_picocolors62.default.dim("<id>")}      ${import_picocolors62.default.dim("fetch orchestration + every member agent into this folder")}`);
+  out.push(`  ${import_picocolors62.default.cyan("push")}             ${import_picocolors62.default.dim("push each member, then update the orchestration graph")}`);
+  out.push(`  ${import_picocolors62.default.cyan("add-agent")} ${import_picocolors62.default.dim("<name>")}    ${import_picocolors62.default.dim("create a member agent, wire edges (--from/--to), and push")}`);
+  out.push(`  ${import_picocolors62.default.cyan("status")}           ${import_picocolors62.default.dim("show what would push and what would pull")}`);
+  out.push(`  ${import_picocolors62.default.cyan("trigger fire")} ${import_picocolors62.default.dim("<t>")}  ${import_picocolors62.default.dim("fire a webhook trigger with your credentials (--data JSON, --idempotency-key K)")}`);
+  out.push(`  ${import_picocolors62.default.cyan("list")}             ${import_picocolors62.default.dim("list orchestrations under a team")}`);
+  out.push(`  ${import_picocolors62.default.cyan("delete")} ${import_picocolors62.default.dim("<id>")}      ${import_picocolors62.default.dim("permanently delete an orchestration graph — member agents are kept")}`);
   out.push("");
-  out.push(`  ${import_picocolors59.default.bold("Flags")}`);
-  out.push(`    ${import_picocolors59.default.dim("--yes, -y")}        skip confirmations (required for delete without a terminal)`);
-  out.push(`    ${import_picocolors59.default.dim("--json")}           for init, list and delete: machine-readable result`);
-  out.push(`    ${import_picocolors59.default.dim("--name <name>")}    for init: orchestration name (default: this folder's name)`);
-  out.push(`    ${import_picocolors59.default.dim("--harness <id>")}   harness for newly-created member folders (default claude-code)`);
-  out.push(`    ${import_picocolors59.default.dim("--graph-only")}     for push: only update members + edges, skip per-member push`, `    ${import_picocolors59.default.dim("--force")}         for push: settle every conflict in your file's favour — deletes cloud schedule`, `                        triggers this folder has never seen, and overwrites cloud-side edits to`, `                        name, description, icon, icon_color and credit_limit`);
-  out.push(`    ${import_picocolors59.default.dim("--org <id>")}       for create/list: org id or slug (CLI vocab — DB teams.id)`);
-  out.push(`    ${import_picocolors59.default.dim("--team <id>")}      for create/list: team id (CLI vocab — DB groups.id)`);
+  out.push(`  ${import_picocolors62.default.bold("Flags")}`);
+  out.push(`    ${import_picocolors62.default.dim("--yes, -y")}        skip confirmations (required for delete without a terminal)`);
+  out.push(`    ${import_picocolors62.default.dim("--json")}           for init, from-agent, list and delete: machine-readable result`);
+  out.push(`    ${import_picocolors62.default.dim("--name <name>")}    for init: orchestration name (default: this folder's name); for from-agent: default the agent's`);
+  out.push(`    ${import_picocolors62.default.dim("--description <text>")} for from-agent: orchestration description (default: the agent's)`);
+  out.push(`    ${import_picocolors62.default.dim("--harness <id>")}   harness for newly-created member folders (default claude-code)`);
+  out.push(`    ${import_picocolors62.default.dim("--graph-only")}     for push: only update members + edges, skip per-member push`, `    ${import_picocolors62.default.dim("--force")}         for push: settle every conflict in your file's favour — deletes cloud schedule`, `                        and webhook triggers this folder has never seen, and overwrites cloud-side edits to`, `                        name, description, icon, icon_color and credit_limit`);
+  out.push(`    ${import_picocolors62.default.dim("--org <id>")}       for create/list/from-agent: org id or slug (CLI vocab — DB teams.id)`);
+  out.push(`    ${import_picocolors62.default.dim("--team <id>")}      for create/list/from-agent: team id (CLI vocab — DB groups.id)`);
   out.push("");
   console.log(out.join(`
 `));
@@ -84840,11 +85809,11 @@ async function runRun(cwd2, args) {
 }
 
 // src/cli/publish.ts
-var import_picocolors60 = __toESM(require_picocolors(), 1);
+var import_picocolors63 = __toESM(require_picocolors(), 1);
 function runPublish() {
   banner("publish — moved");
-  f2.error(`${import_picocolors60.default.bold("brainbase publish")} does not exist.`);
-  f2.info(`Use ${import_picocolors60.default.cyan("brainbase agent push")} to send your local changes to the cloud.`);
+  f2.error(`${import_picocolors63.default.bold("brainbase publish")} does not exist.`);
+  f2.info(`Use ${import_picocolors63.default.cyan("brainbase agent push")} to send your local changes to the cloud.`);
   process.exit(1);
 }
 
@@ -85135,7 +86104,7 @@ async function runStatus(cwd2) {
 }
 
 // src/cli/token.ts
-var import_picocolors61 = __toESM(require_picocolors(), 1);
+var import_picocolors64 = __toESM(require_picocolors(), 1);
 
 // src/ui/ink/TokenCards.tsx
 var jsx_dev_runtime17 = __toESM(require_jsx_dev_runtime(), 1);
@@ -85383,7 +86352,7 @@ async function showTokenListCard(props) {
 
 // src/cli/token.ts
 var DEFAULT_SCOPES = ["read", "publish"];
-var MAX_NAME_LENGTH = 128;
+var MAX_NAME_LENGTH2 = 128;
 var ALLOWED_SCOPES = ["read", "publish", "admin"];
 function isAllowedScope(value2) {
   return ALLOWED_SCOPES.includes(value2);
@@ -85526,8 +86495,8 @@ async function runTokenRename(args) {
     const candidate = value2.trim();
     if (!candidate)
       return "Required.";
-    if (candidate.length > MAX_NAME_LENGTH) {
-      return `Too long — keep the label to ${MAX_NAME_LENGTH} characters or fewer.`;
+    if (candidate.length > MAX_NAME_LENGTH2) {
+      return `Too long — keep the label to ${MAX_NAME_LENGTH2} characters or fewer.`;
     }
     const clash = takenBy.get(candidate.toLowerCase());
     if (clash) {
@@ -85552,7 +86521,7 @@ async function runTokenRename(args) {
     }
   }
   if (name === target.name.trim()) {
-    console.log(`${sym.ok} ${import_picocolors61.default.bold(target.name.trim())} already has that label; nothing to do.`);
+    console.log(`${sym.ok} ${import_picocolors64.default.bold(target.name.trim())} already has that label; nothing to do.`);
     return;
   }
   try {
@@ -85560,7 +86529,7 @@ async function runTokenRename(args) {
   } catch (error2) {
     throw withLoginHint(error2);
   }
-  console.log(`${sym.ok} Renamed ${import_picocolors61.default.dim(target.name)} → ${import_picocolors61.default.bold(name)}`);
+  console.log(`${sym.ok} Renamed ${import_picocolors64.default.dim(target.name)} → ${import_picocolors64.default.bold(name)}`);
 }
 async function runTokenRevoke(args) {
   if (!args.id) {
@@ -85578,7 +86547,7 @@ async function runTokenRevoke(args) {
     throw new Error(`No token with id ${args.id}. Run \`brainbase token list\` to see yours.`);
   }
   if (target.revoked_at) {
-    reconcileDeadToken(target, `${import_picocolors61.default.bold(target.name)} is already revoked.`);
+    reconcileDeadToken(target, `${import_picocolors64.default.bold(target.name)} is already revoked.`);
     return;
   }
   const stored = readToken();
@@ -85588,7 +86557,7 @@ async function runTokenRevoke(args) {
     flagHint: "Pass --yes to revoke it without a prompt."
   })) {
     const ok = await se({
-      message: isLocalToken ? `Revoke ${import_picocolors61.default.bold(target.name)} (${args.id})? This is the token this CLI is using, so it will stop working here too.` : `Revoke ${import_picocolors61.default.bold(target.name)} (${args.id})? CIs and machines using it will stop working.`,
+      message: isLocalToken ? `Revoke ${import_picocolors64.default.bold(target.name)} (${args.id})? This is the token this CLI is using, so it will stop working here too.` : `Revoke ${import_picocolors64.default.bold(target.name)} (${args.id})? CIs and machines using it will stop working.`,
       initialValue: false
     });
     if (!ensureNotCancelled(ok))
@@ -85599,14 +86568,14 @@ async function runTokenRevoke(args) {
   } catch (error2) {
     if (error2 instanceof ApiError && error2.status === 404) {
       if (isExpired2(target)) {
-        reconcileDeadToken(target, `${import_picocolors61.default.bold(target.name)} had already expired.`);
+        reconcileDeadToken(target, `${import_picocolors64.default.bold(target.name)} had already expired.`);
         return;
       }
       throw new Error(`The server reported no active token with id ${args.id}, but it listed one a moment ago. ` + "The local token has been left alone, since that key may still work. " + "If this server predates `DELETE /v1/registry/cli-tokens/{id}`, revoke from the web app instead.");
     }
     throw withLoginHint(error2);
   }
-  reconcileDeadToken(target, `Revoked ${import_picocolors61.default.bold(target.name)}.`);
+  reconcileDeadToken(target, `Revoked ${import_picocolors64.default.bold(target.name)}.`);
 }
 function reconcileDeadToken(target, headline) {
   let outcome;
@@ -85640,7 +86609,7 @@ function reportLocalToken(headline, outcome) {
 }
 async function runTokenClear() {
   if (!readToken()) {
-    console.log(import_picocolors61.default.dim("No local token stored."));
+    console.log(import_picocolors64.default.dim("No local token stored."));
     return;
   }
   clearToken();
@@ -85740,31 +86709,31 @@ async function runToken(sub, rest2, args) {
 function printTokenHelp() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors61.default.bold("brainbase token")} ${import_picocolors61.default.dim("<command>")}`);
+  out.push(`  ${import_picocolors64.default.bold("brainbase token")} ${import_picocolors64.default.dim("<command>")}`);
   out.push("");
-  out.push(`  ${import_picocolors61.default.cyan("create")}                        ${import_picocolors61.default.dim("issue a new long-lived CLI key (PAT)")}`);
-  out.push(`  ${import_picocolors61.default.cyan("list")}                          ${import_picocolors61.default.dim("show your tokens")}`);
-  out.push(`  ${import_picocolors61.default.cyan("rename")} ${import_picocolors61.default.dim("<id>")}                  ${import_picocolors61.default.dim("relabel a token by id")}`);
-  out.push(`  ${import_picocolors61.default.cyan("revoke")} ${import_picocolors61.default.dim("<id>")}                  ${import_picocolors61.default.dim("revoke a token by id")}`);
-  out.push(`  ${import_picocolors61.default.cyan("clear")}                         ${import_picocolors61.default.dim("forget the local token (does not revoke)")}`);
+  out.push(`  ${import_picocolors64.default.cyan("create")}                        ${import_picocolors64.default.dim("issue a new long-lived CLI key (PAT)")}`);
+  out.push(`  ${import_picocolors64.default.cyan("list")}                          ${import_picocolors64.default.dim("show your tokens")}`);
+  out.push(`  ${import_picocolors64.default.cyan("rename")} ${import_picocolors64.default.dim("<id>")}                  ${import_picocolors64.default.dim("relabel a token by id")}`);
+  out.push(`  ${import_picocolors64.default.cyan("revoke")} ${import_picocolors64.default.dim("<id>")}                  ${import_picocolors64.default.dim("revoke a token by id")}`);
+  out.push(`  ${import_picocolors64.default.cyan("clear")}                         ${import_picocolors64.default.dim("forget the local token (does not revoke)")}`);
   out.push("");
-  out.push(`  ${import_picocolors61.default.bold("create flags")}`);
-  out.push(`  ${import_picocolors61.default.cyan("--name, -n")} ${import_picocolors61.default.dim("<label>")}        ${import_picocolors61.default.dim("token label (prompted if omitted)")}`);
-  out.push(`  ${import_picocolors61.default.cyan("--scopes")} ${import_picocolors61.default.dim("<list>")}           ${import_picocolors61.default.dim("comma-separated; allowed: read, publish, admin")}`);
-  out.push(`                                ${import_picocolors61.default.dim("default: read,publish")}`);
+  out.push(`  ${import_picocolors64.default.bold("create flags")}`);
+  out.push(`  ${import_picocolors64.default.cyan("--name, -n")} ${import_picocolors64.default.dim("<label>")}        ${import_picocolors64.default.dim("token label (prompted if omitted)")}`);
+  out.push(`  ${import_picocolors64.default.cyan("--scopes")} ${import_picocolors64.default.dim("<list>")}           ${import_picocolors64.default.dim("comma-separated; allowed: read, publish, admin")}`);
+  out.push(`                                ${import_picocolors64.default.dim("default: read,publish")}`);
   out.push("");
-  out.push(`  ${import_picocolors61.default.bold("rename flags")}`);
-  out.push(`  ${import_picocolors61.default.cyan("--name, -n")} ${import_picocolors61.default.dim("<label>")}        ${import_picocolors61.default.dim("new label (prompted if omitted)")}`);
+  out.push(`  ${import_picocolors64.default.bold("rename flags")}`);
+  out.push(`  ${import_picocolors64.default.cyan("--name, -n")} ${import_picocolors64.default.dim("<label>")}        ${import_picocolors64.default.dim("new label (prompted if omitted)")}`);
   out.push("");
   console.log(out.join(`
 `));
 }
 
 // src/cli/integrations.ts
-var import_picocolors63 = __toESM(require_picocolors(), 1);
+var import_picocolors66 = __toESM(require_picocolors(), 1);
 
 // src/cli/integration-context.ts
-var import_picocolors62 = __toESM(require_picocolors(), 1);
+var import_picocolors65 = __toESM(require_picocolors(), 1);
 
 // src/core/integration-contexts-api.ts
 var REQUEST_TIMEOUT_MS2 = 30000;
@@ -85913,7 +86882,7 @@ Both need your own \`brainbase login\` session and management rights on the
 agent. BRAINBASE_TOKEN and the PAT saved by \`brainbase token create\` are refused.
 `;
 async function runIntegrationContext(cwd2, argv, options) {
-  const { write: write3, fail: fail3 } = options;
+  const { write: write3, fail: fail4 } = options;
   const [action, ...rest2] = argv;
   const parsed = parseContextArgs(rest2, "--application", "--max-lifetime", "--reason");
   if (action === "help" || action === "--help" || action === "-h" || "help" in parsed) {
@@ -85922,36 +86891,36 @@ async function runIntegrationContext(cwd2, argv, options) {
   }
   if (action !== "create" && action !== "end") {
     const problem = action ? `Unknown integrations context subcommand: ${sanitizeLabel(action)}.` : "Missing integrations context subcommand.";
-    return fail3(`${problem} ${CONTEXT_USAGE.split(`
+    return fail4(`${problem} ${CONTEXT_USAGE.split(`
 `)[0]}`);
   }
   if ("error" in parsed)
-    return fail3(parsed.error);
+    return fail4(parsed.error);
   const { values: values2, positionals } = parsed;
   if (action === "create") {
     if (positionals.length > 0)
-      return fail3(`Unexpected argument: ${sanitizeLabel(positionals[0])}. ${CREATE_USAGE}`);
+      return fail4(`Unexpected argument: ${sanitizeLabel(positionals[0])}. ${CREATE_USAGE}`);
     if (values2.has("--reason"))
-      return fail3(`--reason is for \`context end\`. ${CREATE_USAGE}`);
+      return fail4(`--reason is for \`context end\`. ${CREATE_USAGE}`);
     const target = cloudTargetAgent(cwd2, options);
     if (!target)
-      return fail3(NO_AGENT_MESSAGE);
+      return fail4(NO_AGENT_MESSAGE);
     if ("error" in target)
-      return fail3(target.error);
+      return fail4(target.error);
     if (!UUID_PATTERN.test(target.agentId)) {
-      return fail3(`${sanitizeLabel(target.agentId)} is not an agent id. --agent takes the agent's UUID, as \`brainbase agent list\` shows it.`);
+      return fail4(`${sanitizeLabel(target.agentId)} is not an agent id. --agent takes the agent's UUID, as \`brainbase agent list\` shows it.`);
     }
     const agentId = target.agentId.toLowerCase();
     const application = values2.get("--application");
     if (application === undefined)
-      return fail3(`--application is required. ${CREATE_USAGE}`);
+      return fail4(`--application is required. ${CREATE_USAGE}`);
     if (!APPLICATION_PATTERN.test(application)) {
-      return fail3(`--application must be 1-120 characters of lowercase letters, digits and . _ : / -, starting with a letter or digit (e.g. billing-sync); got "${sanitizeLabel(application)}".`);
+      return fail4(`--application must be 1-120 characters of lowercase letters, digits and . _ : / -, starting with a letter or digit (e.g. billing-sync); got "${sanitizeLabel(application)}".`);
     }
     const rawLifetime = values2.get("--max-lifetime");
     const lifetime = rawLifetime === undefined ? DEFAULT_LIFETIME_S : parseMaxLifetime(rawLifetime);
     if (typeof lifetime !== "number")
-      return fail3(lifetime.error);
+      return fail4(lifetime.error);
     let created;
     try {
       created = await integrationContextsApi.create({
@@ -85960,7 +86929,7 @@ async function runIntegrationContext(cwd2, argv, options) {
         max_lifetime_s: lifetime
       });
     } catch (err) {
-      return fail3(`brainbase integrations context create failed: ${message(err)}`);
+      return fail4(`brainbase integrations context create failed: ${message(err)}`);
     }
     if (options.json) {
       write3(JSON.stringify(created) + `
@@ -85971,24 +86940,24 @@ async function runIntegrationContext(cwd2, argv, options) {
     return 0;
   }
   if (values2.has("--application") || values2.has("--max-lifetime")) {
-    return fail3(`--application and --max-lifetime are for \`context create\`. ${END_USAGE}`);
+    return fail4(`--application and --max-lifetime are for \`context create\`. ${END_USAGE}`);
   }
   if (positionals.length !== 1)
-    return fail3(END_USAGE);
+    return fail4(END_USAGE);
   const contextId = positionals[0];
   if (!UUID_PATTERN.test(contextId)) {
-    return fail3(`${sanitizeLabel(contextId)} is not a context id. Pass the context_id \`context create\` printed.`);
+    return fail4(`${sanitizeLabel(contextId)} is not a context id. Pass the context_id \`context create\` printed.`);
   }
   const reason = (values2.get("--reason") ?? DEFAULT_END_REASON).trim();
   const reasonLength = [...reason].length;
   if (reasonLength < 1 || reasonLength > MAX_REASON_LENGTH2) {
-    return fail3(`--reason must be 1-${MAX_REASON_LENGTH2} characters; got ${reasonLength}.`);
+    return fail4(`--reason must be 1-${MAX_REASON_LENGTH2} characters; got ${reasonLength}.`);
   }
   let ended;
   try {
     ended = await integrationContextsApi.end(contextId.toLowerCase(), reason);
   } catch (err) {
-    return fail3(`brainbase integrations context end failed: ${message(err)}`);
+    return fail4(`brainbase integrations context end failed: ${message(err)}`);
   }
   const id = contextId.toLowerCase();
   if (options.json) {
@@ -85997,7 +86966,7 @@ async function runIntegrationContext(cwd2, argv, options) {
     return 0;
   }
   const state = sanitizeLabel(ended.state);
-  write3(state === "ended" ? `${import_picocolors62.default.green("✓")} Ended integration context ${id}. Its renewal handle and access grants no longer work.
+  write3(state === "ended" ? `${import_picocolors65.default.green("✓")} Ended integration context ${id}. Its renewal handle and access grants no longer work.
 ` : `Integration context ${id} is ${state}. Its renewal handle and access grants no longer work.
 `);
   return 0;
@@ -86056,19 +87025,19 @@ function parseMaxLifetime(raw) {
 function renderCreated(created, agentId, application) {
   const id = sanitizeLabel(created.context_id);
   const lines = [
-    `${import_picocolors62.default.green("✓")} Created integration context ${id}`,
-    `  ${import_picocolors62.default.dim(`agent ${agentId} · application ${application}`)}`,
+    `${import_picocolors65.default.green("✓")} Created integration context ${id}`,
+    `  ${import_picocolors65.default.dim(`agent ${agentId} · application ${application}`)}`,
     "",
     "  Renewal handle:",
     "",
     `    ${sanitizeLabel(created.renewal_handle)}`,
     "",
-    import_picocolors62.default.yellow("  Store it now in the SDK program's secret store: it is shown only this once, and it rotates on every renewal, so the program must save the newest handle each time."),
+    import_picocolors65.default.yellow("  Store it now in the SDK program's secret store: it is shown only this once, and it rotates on every renewal, so the program must save the newest handle each time."),
     "",
     `  Handle expires  ${sanitizeLabel(created.renewal_expires_at ?? "unknown")}`,
-    `  Context ends    ${sanitizeLabel(created.max_expires_at ?? "unknown")}  ${import_picocolors62.default.dim("(its maximum lifetime)")}`,
+    `  Context ends    ${sanitizeLabel(created.max_expires_at ?? "unknown")}  ${import_picocolors65.default.dim("(its maximum lifetime)")}`,
     "",
-    import_picocolors62.default.dim(`  End it sooner with \`brainbase integrations context end ${id}\`.`),
+    import_picocolors65.default.dim(`  End it sooner with \`brainbase integrations context end ${id}\`.`),
     ""
   ];
   return lines.join(`
@@ -86105,7 +87074,7 @@ async function runIntegrations(cwd2, sub, argv, options) {
   const write3 = options.write ?? ((s3) => process.stdout.write(s3));
   const writeErr = options.writeErr ?? ((s3) => process.stderr.write(s3));
   const api4 = { ...integrationsApi, ...options.api };
-  const fail3 = (message2) => {
+  const fail4 = (message2) => {
     if (options.json)
       write3(JSON.stringify({ error: message2 }) + `
 `);
@@ -86125,7 +87094,7 @@ async function runIntegrations(cwd2, sub, argv, options) {
       agentId: options.agentId,
       resolveAgentId: options.resolveAgentId,
       write: write3,
-      fail: fail3
+      fail: fail4
     });
   }
   const isHelpFlag = (s3) => s3 === "--help" || s3 === "-h";
@@ -86138,7 +87107,7 @@ async function runIntegrations(cwd2, sub, argv, options) {
   if (!sub || !known.includes(sub) && !isEffect) {
     const problem = sub ? `Unknown integrations subcommand: ${sanitizeLabel(sub)}` : "Missing integrations subcommand.";
     if (options.json)
-      return fail3(`${problem} ${USAGE.split(`
+      return fail4(`${problem} ${USAGE.split(`
 `)[0]}`);
     writeErr(`${problem}
 ${USAGE}`);
@@ -86146,21 +87115,21 @@ ${USAGE}`);
   }
   const arg = sub === "search" ? argv.join(" ").trim() : argv[0];
   if (sub !== "list" && (!arg || arg.startsWith("-") || sub !== "search" && argv.length > 1)) {
-    return fail3(`Usage: brainbase integrations ${sub} <${sub === "search" ? "query" : isEffect ? "app>[.<action>" : "app"}>`);
+    return fail4(`Usage: brainbase integrations ${sub} <${sub === "search" ? "query" : isEffect ? "app>[.<action>" : "app"}>`);
   }
   if (sub === "search") {
     try {
       const apps = await api4.searchApps(arg);
       return out({ apps }, renderSearch(apps));
     } catch (err) {
-      return fail3(`brainbase integrations search failed: ${message2(err)}`);
+      return fail4(`brainbase integrations search failed: ${message2(err)}`);
     }
   }
   const target = cloudTargetAgent(cwd2, options);
   if (!target)
-    return fail3(NO_AGENT_MESSAGE);
+    return fail4(NO_AGENT_MESSAGE);
   if ("error" in target)
-    return fail3(target.error);
+    return fail4(target.error);
   const { agentId } = target;
   try {
     switch (sub) {
@@ -86180,7 +87149,7 @@ ${USAGE}`);
         return await setEffect(agentId, sub, arg);
     }
   } catch (err) {
-    return fail3(`brainbase integrations ${sub} failed: ${message2(err)}`);
+    return fail4(`brainbase integrations ${sub} failed: ${message2(err)}`);
   }
   async function list3(agentId2) {
     const [accounts, noAuthApps, permissions] = await Promise.all([
@@ -86233,40 +87202,40 @@ ${USAGE}`);
     if (needsAccount(app))
       return await connect2(agentId2, slug, app);
     const added = await api4.addNoAuthApp(agentId2, slug);
-    return out({ app: added.appSlug, name: added.name, needs_account: false, added: true }, `${import_picocolors63.default.green("✓")} Added ${import_picocolors63.default.bold(label2(added.name))}. It needs no account; your agent can use it on its next turn.
+    return out({ app: added.appSlug, name: added.name, needs_account: false, added: true }, `${import_picocolors66.default.green("✓")} Added ${import_picocolors66.default.bold(label2(added.name))}. It needs no account; your agent can use it on its next turn.
 `);
   }
   async function connect2(agentId2, slug, known2) {
     const app = known2 ?? await api4.getApp(slug);
     const name = label2(app.name || slug);
     if (!needsAccount(app)) {
-      return fail3(`${name} needs no account. Run brainbase integrations add ${label2(slug)} instead.`);
+      return fail4(`${name} needs no account. Run brainbase integrations add ${label2(slug)} instead.`);
     }
     const before2 = new Set((await api4.listAccounts(agentId2)).map((a3) => a3.id));
     const token = await api4.createConnectToken(agentId2);
     const url2 = connectUrl(token.connect_link_url, slug);
     if (!url2)
-      return fail3("The server returned an unusable connect link.");
+      return fail4("The server returned an unusable connect link.");
     if (options.json) {
       write3(JSON.stringify({ app: slug, url: url2, expires_at: token.expires_at ?? null }) + `
 `);
       return 0;
     }
     const interactive = options.interactive ?? isInteractive();
-    write3(`Open this link to connect ${import_picocolors63.default.bold(name)}:
+    write3(`Open this link to connect ${import_picocolors66.default.bold(name)}:
 
-  ${import_picocolors63.default.cyan(url2)}
+  ${import_picocolors66.default.cyan(url2)}
 
 `);
-    write3(import_picocolors63.default.dim(`Anyone with this link can connect an account to this agent until it expires, so do not share it.
+    write3(import_picocolors66.default.dim(`Anyone with this link can connect an account to this agent until it expires, so do not share it.
 `));
     if (!options.noOpen && interactive) {
-      write3(import_picocolors63.default.dim(`Opening your browser…
+      write3(import_picocolors66.default.dim(`Opening your browser…
 `));
       (options.openUrl ?? openInBrowser)(url2);
     }
     if (options.noWait) {
-      write3(import_picocolors63.default.dim("Not waiting. Run `brainbase integrations list` to see when it is connected.\n"));
+      write3(import_picocolors66.default.dim("Not waiting. Run `brainbase integrations list` to see when it is connected.\n"));
       return 0;
     }
     const controller = new AbortController;
@@ -86299,7 +87268,7 @@ ${USAGE}`);
       if (spinner2)
         spinner2.stop(text3, ok ? 0 : 2);
       else if (ok)
-        write3(`${import_picocolors63.default.green("✔")} ${text3}
+        write3(`${import_picocolors66.default.green("✔")} ${text3}
 `);
       else
         writeErr(`${text3}
@@ -86323,27 +87292,27 @@ ${USAGE}`);
   async function disconnect2(agentId2, slug) {
     const accounts = (await api4.listAccounts(agentId2)).filter((a3) => isCredentialed(a3) && a3.app?.nameSlug === slug);
     if (accounts.length === 0)
-      return fail3(`No connected ${label2(slug)} account on this agent.`);
+      return fail4(`No connected ${label2(slug)} account on this agent.`);
     let account = accounts[0];
     if (options.account !== undefined) {
       const chosen = accounts.find((a3) => a3.id === options.account);
       if (!chosen)
-        return fail3(`${label2(options.account)} is not a ${label2(slug)} account on this agent. Its accounts: ${describeAccounts(accounts)}.`);
+        return fail4(`${label2(options.account)} is not a ${label2(slug)} account on this agent. Its accounts: ${describeAccounts(accounts)}.`);
       account = chosen;
     } else if (accounts.length > 1) {
-      return fail3(`This agent has ${accounts.length} ${label2(slug)} accounts. Pick one with --account <id>: ${describeAccounts(accounts)}.`);
+      return fail4(`This agent has ${accounts.length} ${label2(slug)} accounts. Pick one with --account <id>: ${describeAccounts(accounts)}.`);
     }
     if (options.json && !options.yes) {
-      return fail3("`brainbase integrations disconnect --json` never prompts. Pass --yes to disconnect without one.");
+      return fail4("`brainbase integrations disconnect --json` never prompts. Pass --yes to disconnect without one.");
     }
     const confirm = options.confirmDisconnect ?? promptForDisconnect;
     const accountLabel = account.name ? `${label2(account.name)} (${account.id})` : account.id;
     if (!await confirm(`Disconnect ${label2(slug)} account ${accountLabel}? Everyone using this agent loses it.`, options.yes)) {
-      return out({ app: slug, account_id: account.id, disconnected: false, outcome: "declined" }, `  ${import_picocolors63.default.dim("Left alone.")}
+      return out({ app: slug, account_id: account.id, disconnected: false, outcome: "declined" }, `  ${import_picocolors66.default.dim("Left alone.")}
 `);
     }
     await api4.deleteAccount(agentId2, account.id);
-    return out({ app: slug, account_id: account.id, disconnected: true }, `${import_picocolors63.default.green("✓")} Disconnected ${import_picocolors63.default.bold(label2(slug))} account ${accountLabel}.
+    return out({ app: slug, account_id: account.id, disconnected: true }, `${import_picocolors66.default.green("✓")} Disconnected ${import_picocolors66.default.bold(label2(slug))} account ${accountLabel}.
 `);
   }
   async function remove2(agentId2, slug) {
@@ -86351,25 +87320,25 @@ ${USAGE}`);
     if (!installed.some((a3) => a3.appSlug === slug)) {
       const accounts = await api4.listAccounts(agentId2);
       if (accounts.some((a3) => isCredentialed(a3) && a3.app?.nameSlug === slug)) {
-        return fail3(`${label2(slug)} is connected with an account. Run brainbase integrations disconnect ${label2(slug)} instead.`);
+        return fail4(`${label2(slug)} is connected with an account. Run brainbase integrations disconnect ${label2(slug)} instead.`);
       }
-      return fail3(`${label2(slug)} is not installed on this agent.`);
+      return fail4(`${label2(slug)} is not installed on this agent.`);
     }
     await api4.removeNoAuthApp(agentId2, slug);
-    return out({ app: slug, removed: true }, `${import_picocolors63.default.green("✓")} Removed ${import_picocolors63.default.bold(label2(slug))}.
+    return out({ app: slug, removed: true }, `${import_picocolors66.default.green("✓")} Removed ${import_picocolors66.default.bold(label2(slug))}.
 `);
   }
   async function setEffect(agentId2, effect, raw) {
     const [app, action] = raw.split(/\.(.*)/s, 2);
     if (!app || action === "")
-      return fail3(`Usage: brainbase integrations ${effect} <app>[.<action>]`);
+      return fail4(`Usage: brainbase integrations ${effect} <app>[.<action>]`);
     if (!permissionToken(app) || action !== undefined && !permissionToken(action)) {
-      return fail3(`${label2(raw)} is not an app or action name. Use the key \`brainbase integrations actions <app>\` shows.`);
+      return fail4(`${label2(raw)} is not an app or action name. Use the key \`brainbase integrations actions <app>\` shows.`);
     }
     const capability = pattern(appSlug(app), action);
     await api4.setPermission(agentId2, capability, effect);
     const scope = action ? `${label2(action)} on ${label2(app)}` : `every ${label2(app)} action without its own rule`;
-    return out({ capability_pattern: capability, effect }, `${import_picocolors63.default.green("✓")} ${capability} → ${import_picocolors63.default.bold(effect)}  ${import_picocolors63.default.dim(`(${scope})`)}
+    return out({ capability_pattern: capability, effect }, `${import_picocolors66.default.green("✓")} ${capability} → ${import_picocolors66.default.bold(effect)}  ${import_picocolors66.default.dim(`(${scope})`)}
 `);
   }
 }
@@ -86422,27 +87391,27 @@ async function promptForDisconnect(question, yes) {
   return ensureNotCancelled(answer);
 }
 var EFFECT_COLOR = {
-  allow: import_picocolors63.default.green,
-  ask: import_picocolors63.default.yellow,
-  deny: import_picocolors63.default.red
+  allow: import_picocolors66.default.green,
+  ask: import_picocolors66.default.yellow,
+  deny: import_picocolors66.default.red
 };
 function effectLabel(effect, width = 0) {
-  return (EFFECT_COLOR[effect] ?? import_picocolors63.default.dim)(sanitizeLabel(effect).padEnd(width));
+  return (EFFECT_COLOR[effect] ?? import_picocolors66.default.dim)(sanitizeLabel(effect).padEnd(width));
 }
 function renderList(rows, permissions) {
   const lines = [""];
   if (!permissions.permissionsAvailable) {
-    lines.push(import_picocolors63.default.yellow("  Integrations only work on Kafka agents for now; this agent cannot use them."), "");
+    lines.push(import_picocolors66.default.yellow("  Integrations only work on Kafka agents for now; this agent cannot use them."), "");
   }
   if (rows.length === 0) {
-    lines.push(import_picocolors63.default.dim("  No integrations on this agent."));
-    lines.push(import_picocolors63.default.dim("  Find one with `brainbase integrations search <query>`, then `brainbase integrations add <app>`."), "");
+    lines.push(import_picocolors66.default.dim("  No integrations on this agent."));
+    lines.push(import_picocolors66.default.dim("  Find one with `brainbase integrations search <query>`, then `brainbase integrations add <app>`."), "");
     return lines.join(`
 `);
   }
   for (const row of rows) {
     const healthy = row.accounts.every((a3) => a3.healthy);
-    const mark = healthy ? import_picocolors63.default.green("✓") : import_picocolors63.default.yellow("!");
+    const mark = healthy ? import_picocolors66.default.green("✓") : import_picocolors66.default.yellow("!");
     const bits = [sanitizeLabel(row.name)];
     if (!row.needs_account)
       bits.push("no account needed");
@@ -86450,35 +87419,35 @@ function renderList(rows, permissions) {
       bits.push(`account ${account.name ? sanitizeLabel(account.name) : account.id}${account.healthy ? "" : " (needs reconnecting)"}`);
     }
     const effect = row.effect ?? permissions.defaultEffect;
-    lines.push(`  ${mark} ${import_picocolors63.default.bold(sanitizeLabel(row.app))}  ${import_picocolors63.default.dim(bits.join(" · "))}  ${effectLabel(effect)}${row.effect ? "" : import_picocolors63.default.dim(" (default)")}`);
+    lines.push(`  ${mark} ${import_picocolors66.default.bold(sanitizeLabel(row.app))}  ${import_picocolors66.default.dim(bits.join(" · "))}  ${effectLabel(effect)}${row.effect ? "" : import_picocolors66.default.dim(" (default)")}`);
   }
-  lines.push("", import_picocolors63.default.dim("  Run `brainbase integrations actions <app>` to see and set per-action permissions."), "");
+  lines.push("", import_picocolors66.default.dim("  Run `brainbase integrations actions <app>` to see and set per-action permissions."), "");
   return lines.join(`
 `);
 }
 function renderSearch(apps) {
   if (apps.length === 0)
-    return import_picocolors63.default.dim("No apps match.") + `
+    return import_picocolors66.default.dim("No apps match.") + `
 `;
   const lines = [""];
   for (const app of apps) {
-    const hint = needsAccount(app) ? "" : import_picocolors63.default.dim("  no account needed");
-    lines.push(`  ${import_picocolors63.default.bold(sanitizeLabel(app.nameSlug))}  ${sanitizeLabel(app.name)}${hint}`);
+    const hint2 = needsAccount(app) ? "" : import_picocolors66.default.dim("  no account needed");
+    lines.push(`  ${import_picocolors66.default.bold(sanitizeLabel(app.nameSlug))}  ${sanitizeLabel(app.name)}${hint2}`);
   }
-  lines.push("", import_picocolors63.default.dim("  Add one with `brainbase integrations add <app>`."), "");
+  lines.push("", import_picocolors66.default.dim("  Add one with `brainbase integrations add <app>`."), "");
   return lines.join(`
 `);
 }
 function renderActions(slug, rows) {
   if (rows.length === 0)
-    return import_picocolors63.default.dim(`No actions found for ${sanitizeLabel(slug)}.`) + `
+    return import_picocolors66.default.dim(`No actions found for ${sanitizeLabel(slug)}.`) + `
 `;
   const lines = [""];
   for (const row of rows) {
-    const source = import_picocolors63.default.dim((row.source === "action" ? "" : `(${row.source})`).padEnd(9));
-    lines.push(`  ${effectLabel(row.effect, 5)} ${source} ${import_picocolors63.default.bold(sanitizeLabel(row.key))}  ${import_picocolors63.default.dim(sanitizeLabel(row.name))}`);
+    const source = import_picocolors66.default.dim((row.source === "action" ? "" : `(${row.source})`).padEnd(9));
+    lines.push(`  ${effectLabel(row.effect, 5)} ${source} ${import_picocolors66.default.bold(sanitizeLabel(row.key))}  ${import_picocolors66.default.dim(sanitizeLabel(row.name))}`);
   }
-  lines.push("", import_picocolors63.default.dim(`  Change one with \`brainbase integrations allow|ask|deny ${sanitizeLabel(slug)}.<action>\`, or the whole app with \`… ${sanitizeLabel(slug)}\`.`), "");
+  lines.push("", import_picocolors66.default.dim(`  Change one with \`brainbase integrations allow|ask|deny ${sanitizeLabel(slug)}.<action>\`, or the whole app with \`… ${sanitizeLabel(slug)}\`.`), "");
   return lines.join(`
 `);
 }
@@ -86542,14 +87511,14 @@ async function waitForAccount(agentId, slug, before2, options) {
 }
 
 // src/cli/task.ts
-var import_picocolors69 = __toESM(require_picocolors(), 1);
+var import_picocolors72 = __toESM(require_picocolors(), 1);
 
 // src/cli/task-create.ts
-var import_picocolors65 = __toESM(require_picocolors(), 1);
+var import_picocolors68 = __toESM(require_picocolors(), 1);
 import { randomUUID as randomUUID4 } from "node:crypto";
 
 // src/cli/task-update.ts
-var import_picocolors64 = __toESM(require_picocolors(), 1);
+var import_picocolors67 = __toESM(require_picocolors(), 1);
 var TASK_UPDATE_USAGE = "brainbase task update <task-id> [--title <text> | --clear-title] [--metadata key=value]... [--unset-metadata <key>]... [--clear-metadata] [--model <id> | --clear-model] [--json]";
 var TITLE_MAX = 200;
 var MODEL_UNSUPPORTED = "This control plane does not support changing a task's model yet.";
@@ -86688,25 +87657,25 @@ function applyLabelEdit(current, edit) {
 }
 function format(task) {
   const lines = [""];
-  const title = task.title?.trim() ? sanitizeLabel(task.title) : import_picocolors64.default.dim("(untitled)");
-  lines.push(`  ${import_picocolors64.default.green("updated")}  ${import_picocolors64.default.bold(title)}`);
+  const title = task.title?.trim() ? sanitizeLabel(task.title) : import_picocolors67.default.dim("(untitled)");
+  lines.push(`  ${import_picocolors67.default.green("updated")}  ${import_picocolors67.default.bold(title)}`);
   lines.push("");
-  lines.push(`  ${import_picocolors64.default.dim("task")}     ${sanitizeLabel(task.id)}`);
+  lines.push(`  ${import_picocolors67.default.dim("task")}     ${sanitizeLabel(task.id)}`);
   if (task.model !== undefined) {
-    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors64.default.dim("agent default");
-    lines.push(`  ${import_picocolors64.default.dim("model")}    ${model}`);
+    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors67.default.dim("agent default");
+    lines.push(`  ${import_picocolors67.default.dim("model")}    ${model}`);
   }
   const metadata = Object.entries(task.metadata ?? {});
   lines.push("");
-  lines.push(`  ${import_picocolors64.default.bold(import_picocolors64.default.dim("METADATA"))}`);
+  lines.push(`  ${import_picocolors67.default.bold(import_picocolors67.default.dim("METADATA"))}`);
   if (metadata.length === 0) {
-    lines.push(`  ${import_picocolors64.default.dim("none")}`);
+    lines.push(`  ${import_picocolors67.default.dim("none")}`);
   }
   for (const [key2, value2] of metadata) {
-    lines.push(`  ${import_picocolors64.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(value2)}`);
+    lines.push(`  ${import_picocolors67.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(value2)}`);
   }
   lines.push("");
-  lines.push(`  ${import_picocolors64.default.dim("read it with")} ${import_picocolors64.default.cyan(`brainbase task get ${sanitizeLabel(task.id)}`)}`, "");
+  lines.push(`  ${import_picocolors67.default.dim("read it with")} ${import_picocolors67.default.cyan(`brainbase task get ${sanitizeLabel(task.id)}`)}`, "");
   return lines.join(`
 `);
 }
@@ -86844,24 +87813,24 @@ async function waitForCreatedTask(created, options, dependencies, version2) {
       return;
     }
     if (outcome.kind === "timeout") {
-      console.log(import_picocolors65.default.yellow(`Timed out after ${options.timeoutSeconds}s with the task still ${status}.`));
+      console.log(import_picocolors68.default.yellow(`Timed out after ${options.timeoutSeconds}s with the task still ${status}.`));
       return;
     }
     if (outcome.kind === "interrupted") {
-      console.log(import_picocolors65.default.yellow("Interrupted. The task is still running."));
+      console.log(import_picocolors68.default.yellow("Interrupted. The task is still running."));
       return;
     }
-    console.log(code === 0 ? import_picocolors65.default.green("Task completed.") : import_picocolors65.default.red(`Task finished as ${status}.`));
+    console.log(code === 0 ? import_picocolors68.default.green("Task completed.") : import_picocolors68.default.red(`Task finished as ${status}.`));
   } finally {
     process.removeListener("SIGINT", onSigint);
   }
 }
 
 // src/cli/task-get.ts
-var import_picocolors67 = __toESM(require_picocolors(), 1);
+var import_picocolors70 = __toESM(require_picocolors(), 1);
 
 // src/cli/task-list.ts
-var import_picocolors66 = __toESM(require_picocolors(), 1);
+var import_picocolors69 = __toESM(require_picocolors(), 1);
 
 // src/core/agent-names.ts
 async function agentNames(ids) {
@@ -86926,29 +87895,29 @@ function labelFilter(options) {
 function formatTaskList(tasks, names, agentId, interfaceId, labelFiltered = false) {
   const lines = [""];
   if (tasks.length === 0 && labelFiltered) {
-    lines.push(`  ${import_picocolors66.default.dim("No tasks carry every label given with --metadata.")}`, "");
+    lines.push(`  ${import_picocolors69.default.dim("No tasks carry every label given with --metadata.")}`, "");
     return lines.join(`
 `);
   }
   if (tasks.length === 0 && interfaceId) {
     const id = sanitizeLabel(interfaceId);
-    lines.push(`  ${import_picocolors66.default.dim(`No build conversations for interface ${id}.`)}`, "", `  ${import_picocolors66.default.dim("start one with")} ${import_picocolors66.default.cyan(`brainbase interface build ${id} "..."`)}`, "");
+    lines.push(`  ${import_picocolors69.default.dim(`No build conversations for interface ${id}.`)}`, "", `  ${import_picocolors69.default.dim("start one with")} ${import_picocolors69.default.cyan(`brainbase interface build ${id} "..."`)}`, "");
     return lines.join(`
 `);
   }
   if (tasks.length === 0) {
-    lines.push(`  ${import_picocolors66.default.dim(agentId ? `No tasks for agent ${agentId}.` : "No tasks yet.")}`, "", `  ${import_picocolors66.default.dim("start one with")} ${import_picocolors66.default.cyan('brainbase task create --message "..."')}`, "");
+    lines.push(`  ${import_picocolors69.default.dim(agentId ? `No tasks for agent ${agentId}.` : "No tasks yet.")}`, "", `  ${import_picocolors69.default.dim("start one with")} ${import_picocolors69.default.cyan('brainbase task create --message "..."')}`, "");
     return lines.join(`
 `);
   }
   for (const task of tasks) {
-    const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors66.default.dim("(untitled)");
-    lines.push(`  ${statusLabel(task.status)}  ${import_picocolors66.default.bold(title)}`);
-    lines.push(`    ${import_picocolors66.default.dim(sanitizeLabel(task.id))}`);
-    lines.push(`    ${import_picocolors66.default.dim(`agent ${agentLabel(task.agent_id, names)} · created ${sanitizeLabel(task.created_at)}`)}`);
+    const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors69.default.dim("(untitled)");
+    lines.push(`  ${statusLabel(task.status)}  ${import_picocolors69.default.bold(title)}`);
+    lines.push(`    ${import_picocolors69.default.dim(sanitizeLabel(task.id))}`);
+    lines.push(`    ${import_picocolors69.default.dim(`agent ${agentLabel(task.agent_id, names)} · created ${sanitizeLabel(task.created_at)}`)}`);
     lines.push("");
   }
-  lines.push(`  ${import_picocolors66.default.dim("inspect one with")} ${import_picocolors66.default.cyan("brainbase task get <id>")}`, "");
+  lines.push(`  ${import_picocolors69.default.dim("inspect one with")} ${import_picocolors69.default.cyan("brainbase task get <id>")}`, "");
   return lines.join(`
 `);
 }
@@ -86956,16 +87925,16 @@ function statusLabel(status) {
   const padded = sanitizeLabel(status).padEnd(14);
   switch (status) {
     case "success":
-      return import_picocolors66.default.green(padded);
+      return import_picocolors69.default.green(padded);
     case "fail":
-      return import_picocolors66.default.red(padded);
+      return import_picocolors69.default.red(padded);
     case "need_more_info":
-      return import_picocolors66.default.yellow(padded);
+      return import_picocolors69.default.yellow(padded);
     case "running":
     case "initializing":
-      return import_picocolors66.default.cyan(padded);
+      return import_picocolors69.default.cyan(padded);
     default:
-      return import_picocolors66.default.dim(padded);
+      return import_picocolors69.default.dim(padded);
   }
 }
 
@@ -86999,60 +87968,60 @@ async function readEvalRuns(task) {
 }
 function format2(task, evals, names) {
   const lines = [""];
-  const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors67.default.dim("(untitled)");
+  const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors70.default.dim("(untitled)");
   const id = sanitizeLabel(task.id);
-  lines.push(`  ${statusLabel(task.status)}  ${import_picocolors67.default.bold(title)}`);
+  lines.push(`  ${statusLabel(task.status)}  ${import_picocolors70.default.bold(title)}`);
   lines.push("");
-  lines.push(`  ${import_picocolors67.default.dim("task")}     ${id}`);
-  lines.push(`  ${import_picocolors67.default.dim("agent")}    ${agentLabel(task.agent_id, names)}`);
+  lines.push(`  ${import_picocolors70.default.dim("task")}     ${id}`);
+  lines.push(`  ${import_picocolors70.default.dim("agent")}    ${agentLabel(task.agent_id, names)}`);
   if (task.model !== undefined) {
-    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors67.default.dim("agent default");
-    lines.push(`  ${import_picocolors67.default.dim("model")}    ${model}`);
+    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors70.default.dim("agent default");
+    lines.push(`  ${import_picocolors70.default.dim("model")}    ${model}`);
   }
-  lines.push(`  ${import_picocolors67.default.dim("created")}  ${sanitizeLabel(task.created_at)}`);
+  lines.push(`  ${import_picocolors70.default.dim("created")}  ${sanitizeLabel(task.created_at)}`);
   if (task.parent_task_id) {
-    lines.push(`  ${import_picocolors67.default.dim("parent")}   ${sanitizeLabel(task.parent_task_id)}`);
+    lines.push(`  ${import_picocolors70.default.dim("parent")}   ${sanitizeLabel(task.parent_task_id)}`);
   }
   if (task.machine_id) {
     const size2 = task.machine_size ? ` (size ${sanitizeLabel(task.machine_size)})` : "";
-    lines.push(`  ${import_picocolors67.default.dim("machine")}  ${sanitizeLabel(task.machine_id)}${size2}`);
+    lines.push(`  ${import_picocolors70.default.dim("machine")}  ${sanitizeLabel(task.machine_id)}${size2}`);
   }
   if (task.sandbox_id)
-    lines.push(`  ${import_picocolors67.default.dim("sandbox")}  ${sanitizeLabel(task.sandbox_id)}`);
+    lines.push(`  ${import_picocolors70.default.dim("sandbox")}  ${sanitizeLabel(task.sandbox_id)}`);
   const [failure, ...failureRest] = sanitizeLines(failureSummary(task) ?? "").filter((line2) => line2.trim());
   if (failure) {
     const label3 = "  failure  ";
     lines.push("");
-    lines.push(`  ${import_picocolors67.default.red("failure")}  ${failure}`);
+    lines.push(`  ${import_picocolors70.default.red("failure")}  ${failure}`);
     for (const line2 of failureRest)
       lines.push(`${" ".repeat(label3.length)}${line2}`);
   }
   const metadata = Object.entries(task.metadata ?? {});
   if (metadata.length > 0) {
     lines.push("");
-    lines.push(`  ${import_picocolors67.default.bold(import_picocolors67.default.dim("METADATA"))}`);
+    lines.push(`  ${import_picocolors70.default.bold(import_picocolors70.default.dim("METADATA"))}`);
     for (const [key2, value2] of metadata) {
-      lines.push(`  ${import_picocolors67.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(String(value2))}`);
+      lines.push(`  ${import_picocolors70.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(String(value2))}`);
     }
   }
   lines.push("");
-  lines.push(`  ${import_picocolors67.default.bold(import_picocolors67.default.dim("EVAL VERDICTS"))}`);
+  lines.push(`  ${import_picocolors70.default.bold(import_picocolors70.default.dim("EVAL VERDICTS"))}`);
   if (evals.unavailable) {
-    lines.push(`  ${import_picocolors67.default.dim(sanitizeLabel(evals.unavailable))}`);
+    lines.push(`  ${import_picocolors70.default.dim(sanitizeLabel(evals.unavailable))}`);
   } else if (evals.runs.length === 0) {
-    lines.push(`  ${import_picocolors67.default.dim("none")}`);
+    lines.push(`  ${import_picocolors70.default.dim("none")}`);
   } else {
     for (const run of evals.runs) {
-      const verdict = run.passed === true ? import_picocolors67.default.green("pass") : run.passed === false ? import_picocolors67.default.red("fail") : import_picocolors67.default.dim(sanitizeLabel(run.status));
+      const verdict = run.passed === true ? import_picocolors70.default.green("pass") : run.passed === false ? import_picocolors70.default.red("fail") : import_picocolors70.default.dim(sanitizeLabel(run.status));
       lines.push(`  ${verdict}  ${sanitizeLabel(run.eval_slug ?? run.eval_id)}`);
       for (const line2 of sanitizeLines(run.reasoning ?? "")) {
         if (line2.trim())
-          lines.push(`    ${import_picocolors67.default.dim(line2)}`);
+          lines.push(`    ${import_picocolors70.default.dim(line2)}`);
       }
     }
   }
   lines.push("");
-  lines.push(`  ${import_picocolors67.default.dim("read its transcript with")} ${import_picocolors67.default.cyan(`brainbase task logs ${id}`)}`, "");
+  lines.push(`  ${import_picocolors70.default.dim("read its transcript with")} ${import_picocolors70.default.cyan(`brainbase task logs ${id}`)}`, "");
   return lines.join(`
 `);
 }
@@ -87069,7 +88038,7 @@ function failureSummary(task) {
 }
 
 // src/cli/task-logs.ts
-var import_picocolors68 = __toESM(require_picocolors(), 1);
+var import_picocolors71 = __toESM(require_picocolors(), 1);
 
 // src/core/task-events.ts
 var DEFAULT_RETRY_BUDGET_MS = 60000;
@@ -87352,14 +88321,14 @@ async function runTaskLogs(taskId, options = {}, dependencies = {}) {
     console.log(renderEvent(event, messages));
   }
   if (ordered.length === 0) {
-    console.log(import_picocolors68.default.dim("No events for this task yet."));
+    console.log(import_picocolors71.default.dim("No events for this task yet."));
   }
 }
 async function followTranscript(taskId, options, dependencies) {
   const backfill = options.limit === undefined ? "" : `?backfill=${options.limit}`;
   const { url: url2, resolveBearer } = await masStreamTarget(`/tasks/${encodeURIComponent(taskId)}/events/stream${backfill}`);
   if (!options.json) {
-    console.log(import_picocolors68.default.dim(`Following task ${taskId} — Ctrl-C to stop.`));
+    console.log(import_picocolors71.default.dim(`Following task ${taskId} — Ctrl-C to stop.`));
   }
   const setExitCode = dependencies.setExitCode ?? ((code) => process.exitCode = code);
   const controller = new AbortController;
@@ -87401,13 +88370,13 @@ async function followTranscript(taskId, options, dependencies) {
         } else if (options.json) {
           console.log(JSON.stringify(frame));
         } else {
-          console.log(import_picocolors68.default.dim(frame.type));
+          console.log(import_picocolors71.default.dim(frame.type));
         }
       },
       onOpen: () => settle.noteFrame(),
       onReconnect: (reason) => {
         settle.noteDisconnected();
-        console.error(import_picocolors68.default.dim(`reconnecting — ${reason}`));
+        console.error(import_picocolors71.default.dim(`reconnecting — ${reason}`));
       }
     });
     if (interruptCode !== undefined)
@@ -88085,78 +89054,78 @@ ${didYouMean(sub, ["create", "list", "get", "logs", "send", "stop", "update", "d
 function printHelp5() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("brainbase task")} ${import_picocolors69.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors72.default.bold("brainbase task")} ${import_picocolors72.default.dim("<sub> [options]")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("create")} ${import_picocolors69.default.dim("--message <text>")}   ${import_picocolors69.default.dim("create a task and start its first run")}`);
-  out.push(`  ${import_picocolors69.default.cyan("list | ls")}                ${import_picocolors69.default.dim("recent tasks you can reach (--json for scripts)")}`);
-  out.push(`  ${import_picocolors69.default.cyan("get")} ${import_picocolors69.default.dim("<task-id>")}            ${import_picocolors69.default.dim("one task: status, agent, machine, eval verdicts")}`);
-  out.push(`  ${import_picocolors69.default.cyan("logs")} ${import_picocolors69.default.dim("<task-id> [--follow]")} ${import_picocolors69.default.dim("one line per event in the task's transcript, or tail it live")}`);
-  out.push(`  ${import_picocolors69.default.cyan("send")} ${import_picocolors69.default.dim("<task-id> <message>")} ${import_picocolors69.default.dim("send a follow-up, including while the agent is running")}`);
-  out.push(`  ${import_picocolors69.default.cyan("stop")} ${import_picocolors69.default.dim("<task-id>")}           ${import_picocolors69.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
-  out.push(`  ${import_picocolors69.default.cyan("update")} ${import_picocolors69.default.dim("<task-id>")}         ${import_picocolors69.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
-  out.push(`  ${import_picocolors69.default.cyan("delete")} ${import_picocolors69.default.dim("<task-id>")}         ${import_picocolors69.default.dim("permanently delete a stopped task and tear down its sandbox (--yes to skip the prompt)")}`);
+  out.push(`  ${import_picocolors72.default.cyan("create")} ${import_picocolors72.default.dim("--message <text>")}   ${import_picocolors72.default.dim("create a task and start its first run")}`);
+  out.push(`  ${import_picocolors72.default.cyan("list | ls")}                ${import_picocolors72.default.dim("recent tasks you can reach (--json for scripts)")}`);
+  out.push(`  ${import_picocolors72.default.cyan("get")} ${import_picocolors72.default.dim("<task-id>")}            ${import_picocolors72.default.dim("one task: status, agent, machine, eval verdicts")}`);
+  out.push(`  ${import_picocolors72.default.cyan("logs")} ${import_picocolors72.default.dim("<task-id> [--follow]")} ${import_picocolors72.default.dim("one line per event in the task's transcript, or tail it live")}`);
+  out.push(`  ${import_picocolors72.default.cyan("send")} ${import_picocolors72.default.dim("<task-id> <message>")} ${import_picocolors72.default.dim("send a follow-up, including while the agent is running")}`);
+  out.push(`  ${import_picocolors72.default.cyan("stop")} ${import_picocolors72.default.dim("<task-id>")}           ${import_picocolors72.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
+  out.push(`  ${import_picocolors72.default.cyan("update")} ${import_picocolors72.default.dim("<task-id>")}         ${import_picocolors72.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
+  out.push(`  ${import_picocolors72.default.cyan("delete")} ${import_picocolors72.default.dim("<task-id>")}         ${import_picocolors72.default.dim("permanently delete a stopped task and tear down its sandbox (--yes to skip the prompt)")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("create flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--message <text>")}   required first user message`);
-  out.push(`  ${import_picocolors69.default.dim("--agent <id>")}       override the claimed agent in brainbase.agent.yaml`);
-  out.push(`  ${import_picocolors69.default.dim("--interface <id>")}   open it as a build conversation for this interface (agent defaults to the interface's)`);
-  out.push(`  ${import_picocolors69.default.dim("--title <text>")}     optional task title`);
-  out.push(`  ${import_picocolors69.default.dim("--model <id>")}       optional model override`);
-  out.push(`  ${import_picocolors69.default.dim("--version <v>")}      run a saved version of the agent: 12, v12 or a version id (\`agent versions list\`)`);
-  out.push(`  ${import_picocolors69.default.dim("--metadata key=value")} label the task (repeatable)`);
-  out.push(`  ${import_picocolors69.default.dim("--wait")}             block until the task finishes; exit 1 unless it succeeded`);
-  out.push(`  ${import_picocolors69.default.dim("--timeout <secs>")}   give up waiting after <secs> and exit 1 (needs --wait)`);
+  out.push(`  ${import_picocolors72.default.bold("create flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--message <text>")}   required first user message`);
+  out.push(`  ${import_picocolors72.default.dim("--agent <id>")}       override the claimed agent in brainbase.agent.yaml`);
+  out.push(`  ${import_picocolors72.default.dim("--interface <id>")}   open it as a build conversation for this interface (agent defaults to the interface's)`);
+  out.push(`  ${import_picocolors72.default.dim("--title <text>")}     optional task title`);
+  out.push(`  ${import_picocolors72.default.dim("--model <id>")}       optional model override`);
+  out.push(`  ${import_picocolors72.default.dim("--version <v>")}      run a saved version of the agent: 12, v12 or a version id (\`agent versions list\`)`);
+  out.push(`  ${import_picocolors72.default.dim("--metadata key=value")} label the task (repeatable)`);
+  out.push(`  ${import_picocolors72.default.dim("--wait")}             block until the task finishes; exit 1 unless it succeeded`);
+  out.push(`  ${import_picocolors72.default.dim("--timeout <secs>")}   give up waiting after <secs> and exit 1 (needs --wait)`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("list flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--agent <id>")}       only this agent's tasks`);
-  out.push(`  ${import_picocolors69.default.dim("--interface <id>")}   only this interface's build conversations (hidden from a plain list)`);
-  out.push(`  ${import_picocolors69.default.dim("--metadata key=value")} only tasks carrying this label (repeatable; all must match)`);
-  out.push(`  ${import_picocolors69.default.dim("--limit <n>")}        cap the page (1-200, server default 50)`);
+  out.push(`  ${import_picocolors72.default.bold("list flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--agent <id>")}       only this agent's tasks`);
+  out.push(`  ${import_picocolors72.default.dim("--interface <id>")}   only this interface's build conversations (hidden from a plain list)`);
+  out.push(`  ${import_picocolors72.default.dim("--metadata key=value")} only tasks carrying this label (repeatable; all must match)`);
+  out.push(`  ${import_picocolors72.default.dim("--limit <n>")}        cap the page (1-200, server default 50)`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("logs flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--limit <n>")}        stop after <n> events instead of the whole transcript; with --follow, the first page size`);
-  out.push(`  ${import_picocolors69.default.dim("--follow, -f")}       stay attached and print events as they land, until the task finishes and any queued follow-ups have run`);
+  out.push(`  ${import_picocolors72.default.bold("logs flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--limit <n>")}        stop after <n> events instead of the whole transcript; with --follow, the first page size`);
+  out.push(`  ${import_picocolors72.default.dim("--follow, -f")}       stay attached and print events as they land, until the task finishes and any queued follow-ups have run`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("update flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--title <text>")}          new title`);
-  out.push(`  ${import_picocolors69.default.dim("--clear-title")}           remove the title; automatic titling may name the task again on a later turn`);
-  out.push(`  ${import_picocolors69.default.dim("--metadata key=value")}    set one label, keeping the others (repeatable)`);
-  out.push(`  ${import_picocolors69.default.dim("--unset-metadata <key>")}  remove one label (repeatable)`);
-  out.push(`  ${import_picocolors69.default.dim("                         the server applies label edits in one step, so concurrent edits from other clients are kept")}`);
-  out.push(`  ${import_picocolors69.default.dim("--clear-metadata")}        remove every label; with --metadata, the labels become exactly those given`);
-  out.push(`  ${import_picocolors69.default.dim("--model <id>")}            switch the model the task's next turn runs on (the running turn keeps its model)`);
-  out.push(`  ${import_picocolors69.default.dim("--clear-model")}           go back to the agent's default model from the next turn`);
+  out.push(`  ${import_picocolors72.default.bold("update flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--title <text>")}          new title`);
+  out.push(`  ${import_picocolors72.default.dim("--clear-title")}           remove the title; automatic titling may name the task again on a later turn`);
+  out.push(`  ${import_picocolors72.default.dim("--metadata key=value")}    set one label, keeping the others (repeatable)`);
+  out.push(`  ${import_picocolors72.default.dim("--unset-metadata <key>")}  remove one label (repeatable)`);
+  out.push(`  ${import_picocolors72.default.dim("                         the server applies label edits in one step, so concurrent edits from other clients are kept")}`);
+  out.push(`  ${import_picocolors72.default.dim("--clear-metadata")}        remove every label; with --metadata, the labels become exactly those given`);
+  out.push(`  ${import_picocolors72.default.dim("--model <id>")}            switch the model the task's next turn runs on (the running turn keeps its model)`);
+  out.push(`  ${import_picocolors72.default.dim("--clear-model")}           go back to the agent's default model from the next turn`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("send flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--input-id <uuid>")}  recover the same request using its original ID and identical message`);
-  out.push(`  ${import_picocolors69.default.dim("                    omit it to send a new follow-up; an unconfirmed receipt is never automatically replayed")}`);
-  out.push(`  ${import_picocolors69.default.dim("                    admission disabled/recovery unavailable means no input was admitted; retry the same ID after recovery")}`);
+  out.push(`  ${import_picocolors72.default.bold("send flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--input-id <uuid>")}  recover the same request using its original ID and identical message`);
+  out.push(`  ${import_picocolors72.default.dim("                    omit it to send a new follow-up; an unconfirmed receipt is never automatically replayed")}`);
+  out.push(`  ${import_picocolors72.default.dim("                    admission disabled/recovery unavailable means no input was admitted; retry the same ID after recovery")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("send and stop flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--generation <n>")}   retain the printed generation when retrying; defaults to a fresh snapshot for a new operation`);
-  out.push(`  ${import_picocolors69.default.dim("                    Stop errors may follow queued-input cancellation; retry the printed command to avoid stopping newer work")}`);
+  out.push(`  ${import_picocolors72.default.bold("send and stop flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--generation <n>")}   retain the printed generation when retrying; defaults to a fresh snapshot for a new operation`);
+  out.push(`  ${import_picocolors72.default.dim("                    Stop errors may follow queued-input cancellation; retry the printed command to avoid stopping newer work")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("every subcommand")}`);
-  out.push(`  ${import_picocolors69.default.dim("--json")}             machine-readable output — create prints task_id, agent_id and status (with --version, also agent_version_id and version_number); list, get, logs, send, stop and update print the raw records; delete prints id and deleted`);
-  out.push(`  ${import_picocolors69.default.dim("                    send and stop include expected_generation for safe retries; send also reports idempotency_replayed when present")}`);
-  out.push(`  ${import_picocolors69.default.dim("                    logs --follow --json prints one record per line, since a live stream has no end to close on")}`);
+  out.push(`  ${import_picocolors72.default.bold("every subcommand")}`);
+  out.push(`  ${import_picocolors72.default.dim("--json")}             machine-readable output — create prints task_id, agent_id and status (with --version, also agent_version_id and version_number); list, get, logs, send, stop and update print the raw records; delete prints id and deleted`);
+  out.push(`  ${import_picocolors72.default.dim("                    send and stop include expected_generation for safe retries; send also reports idempotency_replayed when present")}`);
+  out.push(`  ${import_picocolors72.default.dim("                    logs --follow --json prints one record per line, since a live stream has no end to close on")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.dim("Exit codes with --wait:")} ${import_picocolors69.default.dim("0 succeeded · 1 failed, needs input, or timed out · 130 interrupted")}`);
-  out.push(`  ${import_picocolors69.default.dim("Exit codes with --follow:")} ${import_picocolors69.default.dim("0 task reached a terminal state · 1 stream refused, or unreachable for 60s · 130 interrupted (Ctrl-C) · 143 terminated")}`);
-  out.push(`  ${import_picocolors69.default.dim("Exit codes with send:")} ${import_picocolors69.default.dim("0 queued, dispatching, submitted or completed · 1 unconfirmed, cancelled, failed or request error")}`);
-  out.push(`  ${import_picocolors69.default.dim("Ctrl-C while waiting or following logs detaches; use task stop to cancel remote work.")}`);
+  out.push(`  ${import_picocolors72.default.dim("Exit codes with --wait:")} ${import_picocolors72.default.dim("0 succeeded · 1 failed, needs input, or timed out · 130 interrupted")}`);
+  out.push(`  ${import_picocolors72.default.dim("Exit codes with --follow:")} ${import_picocolors72.default.dim("0 task reached a terminal state · 1 stream refused, or unreachable for 60s · 130 interrupted (Ctrl-C) · 143 terminated")}`);
+  out.push(`  ${import_picocolors72.default.dim("Exit codes with send:")} ${import_picocolors72.default.dim("0 queued, dispatching, submitted or completed · 1 unconfirmed, cancelled, failed or request error")}`);
+  out.push(`  ${import_picocolors72.default.dim("Ctrl-C while waiting or following logs detaches; use task stop to cancel remote work.")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.dim("Flag-like values:")} use ${import_picocolors69.default.cyan("--flag=value")} or ${import_picocolors69.default.cyan("--flag -- <value>")}`);
+  out.push(`  ${import_picocolors72.default.dim("Flag-like values:")} use ${import_picocolors72.default.cyan("--flag=value")} or ${import_picocolors72.default.cyan("--flag -- <value>")}`);
   out.push("");
   console.log(out.join(`
 `));
 }
 
 // src/cli/machine.ts
-var import_picocolors72 = __toESM(require_picocolors(), 1);
+var import_picocolors75 = __toESM(require_picocolors(), 1);
 
 // src/cli/machine-list.ts
-var import_picocolors70 = __toESM(require_picocolors(), 1);
+var import_picocolors73 = __toESM(require_picocolors(), 1);
 async function runMachineList(args = {}) {
   if (!args.json)
     banner("machine list — sandboxes you can reach");
@@ -88174,7 +89143,7 @@ async function runMachineList(args = {}) {
 function formatMachineList(machines, includedDead, names = new Map) {
   const lines = [""];
   if (machines.length === 0) {
-    lines.push(`  ${import_picocolors70.default.dim(includedDead ? "No machines." : "No live machines. Pass --all to include torn-down ones.")}`, "");
+    lines.push(`  ${import_picocolors73.default.dim(includedDead ? "No machines." : "No live machines. Pass --all to include torn-down ones.")}`, "");
     return lines.join(`
 `);
   }
@@ -88194,7 +89163,7 @@ function formatMachineList(machines, includedDead, names = new Map) {
   const statusWidth = width((row) => row.status);
   const sizeWidth = width((row) => row.size);
   const agentWidth = width((row) => row.agent);
-  lines.push(`  ${import_picocolors70.default.dim([
+  lines.push(`  ${import_picocolors73.default.dim([
     header.id.padEnd(idWidth),
     header.kind.padEnd(kindWidth),
     header.status.padEnd(statusWidth),
@@ -88210,21 +89179,21 @@ function formatMachineList(machines, includedDead, names = new Map) {
       row.dead ? status : statusTint(row.status, status),
       row.size.padEnd(sizeWidth),
       row.agent.padEnd(agentWidth),
-      import_picocolors70.default.dim(row.age)
+      import_picocolors73.default.dim(row.age)
     ].join("  ");
-    lines.push(`  ${row.dead ? import_picocolors70.default.dim(cells) : cells}`);
+    lines.push(`  ${row.dead ? import_picocolors73.default.dim(cells) : cells}`);
   }
-  lines.push("", `  ${import_picocolors70.default.dim("tear one down with")} ${import_picocolors70.default.cyan("brainbase machine rm <id>")}`, "");
+  lines.push("", `  ${import_picocolors73.default.dim("tear one down with")} ${import_picocolors73.default.cyan("brainbase machine rm <id>")}`, "");
   return lines.join(`
 `);
 }
 function statusTint(status, padded) {
   switch (status) {
     case "running":
-      return import_picocolors70.default.green(padded);
+      return import_picocolors73.default.green(padded);
     case "stopped":
     case "starting":
-      return import_picocolors70.default.yellow(padded);
+      return import_picocolors73.default.yellow(padded);
     default:
       return padded;
   }
@@ -88247,7 +89216,7 @@ function age(createdAt) {
 }
 
 // src/cli/machine-rm.ts
-var import_picocolors71 = __toESM(require_picocolors(), 1);
+var import_picocolors74 = __toESM(require_picocolors(), 1);
 async function runMachineRm(args, dependencies = {}) {
   const setExitCode = dependencies.setExitCode ?? ((code) => process.exitCode = code);
   const machineId = args.machineId?.trim();
@@ -88261,7 +89230,7 @@ async function runMachineRm(args, dependencies = {}) {
     if (args.json) {
       console.log(JSON.stringify({ id: machineId, torn_down: false, outcome: "declined" }, null, 2));
     } else {
-      console.log(`  ${import_picocolors71.default.dim("Left alone.")}`);
+      console.log(`  ${import_picocolors74.default.dim("Left alone.")}`);
     }
     return;
   }
@@ -88279,7 +89248,7 @@ async function promptForTeardown(args) {
     return true;
   if (!args.json) {
     console.log(`
-  ${import_picocolors71.default.red("This destroys the sandbox.")} ${import_picocolors71.default.dim("Anything not committed out of it is lost. The machine row is kept for cost history.")}
+  ${import_picocolors74.default.red("This destroys the sandbox.")} ${import_picocolors74.default.dim("Anything not committed out of it is lost. The machine row is kept for cost history.")}
 `);
   }
   const answer = await se({
@@ -88291,9 +89260,9 @@ async function promptForTeardown(args) {
 function formatMachineRm(machine) {
   const lines = [""];
   if (machine.destroyed_at) {
-    lines.push(`  ${import_picocolors71.default.green("✓")} ${machine.kind} sandbox ${machine.id} is torn down.`, `  ${import_picocolors71.default.dim(`destroyed_at ${machine.destroyed_at}`)}`);
+    lines.push(`  ${import_picocolors74.default.green("✓")} ${machine.kind} sandbox ${machine.id} is torn down.`, `  ${import_picocolors74.default.dim(`destroyed_at ${machine.destroyed_at}`)}`);
   } else {
-    lines.push(`  ${import_picocolors71.default.yellow("!")} ${machine.id} came back without a teardown timestamp (status ${machine.status}).`, `  ${import_picocolors71.default.dim("Re-check with `brainbase machine ls --all` before assuming it stopped billing.")}`);
+    lines.push(`  ${import_picocolors74.default.yellow("!")} ${machine.id} came back without a teardown timestamp (status ${machine.status}).`, `  ${import_picocolors74.default.dim("Re-check with `brainbase machine ls --all` before assuming it stopped billing.")}`);
   }
   lines.push("");
   return lines.join(`
@@ -88334,25 +89303,25 @@ ${didYouMean(sub, ["ls", "rm"], "brainbase machine")}`);
 function printHelp6() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors72.default.bold("brainbase machine")} ${import_picocolors72.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors75.default.bold("brainbase machine")} ${import_picocolors75.default.dim("<sub> [options]")}`);
   out.push("");
-  out.push(`  ${import_picocolors72.default.cyan("ls")}          ${import_picocolors72.default.dim("list your sandboxes — live ones only unless --all")}`);
-  out.push(`  ${import_picocolors72.default.cyan("rm")} ${import_picocolors72.default.dim("<id>")}    ${import_picocolors72.default.dim("tear a sandbox down (terminal; the row is kept for cost history)")}`);
+  out.push(`  ${import_picocolors75.default.cyan("ls")}          ${import_picocolors75.default.dim("list your sandboxes — live ones only unless --all")}`);
+  out.push(`  ${import_picocolors75.default.cyan("rm")} ${import_picocolors75.default.dim("<id>")}    ${import_picocolors75.default.dim("tear a sandbox down (terminal; the row is kept for cost history)")}`);
   out.push("");
-  out.push(`  ${import_picocolors72.default.dim("--all")}     ${import_picocolors72.default.dim("for ls: include machines already torn down")}`);
-  out.push(`  ${import_picocolors72.default.dim("--limit <n>")} ${import_picocolors72.default.dim("for ls: how many to fetch (1-200, default 50)")}`);
-  out.push(`  ${import_picocolors72.default.dim("--yes, -y")} ${import_picocolors72.default.dim("for rm: skip the confirmation")}`);
-  out.push(`  ${import_picocolors72.default.dim("--json")}    ${import_picocolors72.default.dim("machine-readable output")}`);
+  out.push(`  ${import_picocolors75.default.dim("--all")}     ${import_picocolors75.default.dim("for ls: include machines already torn down")}`);
+  out.push(`  ${import_picocolors75.default.dim("--limit <n>")} ${import_picocolors75.default.dim("for ls: how many to fetch (1-200, default 50)")}`);
+  out.push(`  ${import_picocolors75.default.dim("--yes, -y")} ${import_picocolors75.default.dim("for rm: skip the confirmation")}`);
+  out.push(`  ${import_picocolors75.default.dim("--json")}    ${import_picocolors75.default.dim("machine-readable output")}`);
   out.push("");
   console.log(out.join(`
 `));
 }
 
 // src/cli/interface.ts
-var import_picocolors78 = __toESM(require_picocolors(), 1);
+var import_picocolors81 = __toESM(require_picocolors(), 1);
 
 // src/cli/interface-build.ts
-var import_picocolors73 = __toESM(require_picocolors(), 1);
+var import_picocolors76 = __toESM(require_picocolors(), 1);
 var USAGE2 = 'brainbase interface build <id> "<request>" [--timeout <seconds>] [--idempotency-key <key>] [--json]';
 var SETTLE_TIMEOUT_MS = 120000;
 async function reportingErrors(json3, work) {
@@ -88451,28 +89420,28 @@ function buildExitCode(outcome) {
 function reportBuild(say, interfaceId, outcome, timeoutSeconds) {
   switch (outcome.kind) {
     case "built":
-      say(`  ${import_picocolors73.default.dim("build")}    ${safe(outcome.build.id)} ${import_picocolors73.default.green("succeeded")}`);
+      say(`  ${import_picocolors76.default.dim("build")}    ${safe(outcome.build.id)} ${import_picocolors76.default.green("succeeded")}`);
       say("");
-      say(`  ${import_picocolors73.default.dim("Next:")} ${import_picocolors73.default.cyan(`brainbase interface publish ${safe(interfaceId)}`)}`);
+      say(`  ${import_picocolors76.default.dim("Next:")} ${import_picocolors76.default.cyan(`brainbase interface publish ${safe(interfaceId)}`)}`);
       return;
     case "failed": {
       const reason = outcome.build?.error_summary ?? outcome.operation?.error ?? outcome.operation?.reason ?? null;
-      say(`  ${import_picocolors73.default.dim("build")}    ${outcome.build ? safe(outcome.build.id) : import_picocolors73.default.dim("none")} ${import_picocolors73.default.red("failed")}`);
+      say(`  ${import_picocolors76.default.dim("build")}    ${outcome.build ? safe(outcome.build.id) : import_picocolors76.default.dim("none")} ${import_picocolors76.default.red("failed")}`);
       if (reason)
         say(`  ${safeBlock(reason).split(`
 `).join(`
   `)}`);
-      say(`  ${import_picocolors73.default.dim("Try again with")} ${import_picocolors73.default.cyan(`brainbase interface rebuild ${safe(interfaceId)}`)}`);
+      say(`  ${import_picocolors76.default.dim("Try again with")} ${import_picocolors76.default.cyan(`brainbase interface rebuild ${safe(interfaceId)}`)}`);
       return;
     }
     case "busy":
-      say(`  ${import_picocolors73.default.yellow(safe(outcome.message))}`);
+      say(`  ${import_picocolors76.default.yellow(safe(outcome.message))}`);
       return;
     case "timeout":
-      say(`  ${import_picocolors73.default.yellow(`Still building after ${timeoutSeconds}s.`)} ${import_picocolors73.default.dim(`It keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
+      say(`  ${import_picocolors76.default.yellow(`Still building after ${timeoutSeconds}s.`)} ${import_picocolors76.default.dim(`It keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
       return;
     case "interrupted":
-      say(`  ${import_picocolors73.default.yellow("Stopped waiting.")} ${import_picocolors73.default.dim(`The build keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
+      say(`  ${import_picocolors76.default.yellow("Stopped waiting.")} ${import_picocolors76.default.dim(`The build keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
       return;
     default: {
       const unreachable = outcome;
@@ -88519,8 +89488,8 @@ async function build(ctx) {
         throw held;
     }
     const reattach = `brainbase task logs ${safe(taskId)} --follow`;
-    say(`  ${import_picocolors73.default.dim("Build conversation")} ${import_picocolors73.default.bold(safe(taskId))} ${import_picocolors73.default.dim(`on ${safe(before2.name)}`)}`);
-    say(`  ${import_picocolors73.default.dim(`If this stops early, reattach with \`${reattach}\`.`)}`);
+    say(`  ${import_picocolors76.default.dim("Build conversation")} ${import_picocolors76.default.bold(safe(taskId))} ${import_picocolors76.default.dim(`on ${safe(before2.name)}`)}`);
+    say(`  ${import_picocolors76.default.dim(`If this stops early, reattach with \`${reattach}\`.`)}`);
     const finish = (result2, exitCode) => {
       if (json3)
         console.log(JSON.stringify({ type: "result", task_id: taskId, ...result2 }));
@@ -88537,13 +89506,13 @@ async function build(ctx) {
       });
     } catch (error2) {
       say("");
-      say(`  ${import_picocolors73.default.red(`Lost the conversation's event stream: ${safe(error2.message)}`)}`);
-      say(`  ${import_picocolors73.default.dim(`Conversation ${safe(taskId)} may still be running. Reattach with`)} ${import_picocolors73.default.cyan(reattach)}`);
+      say(`  ${import_picocolors76.default.red(`Lost the conversation's event stream: ${safe(error2.message)}`)}`);
+      say(`  ${import_picocolors76.default.dim(`Conversation ${safe(taskId)} may still be running. Reattach with`)} ${import_picocolors76.default.cyan(reattach)}`);
       finish({ version_id: null, build_id: null, status: "stream_lost", task_status: null }, 1);
       return;
     }
     if (followExit !== undefined) {
-      say(`  ${import_picocolors73.default.yellow("Stopped following.")} ${import_picocolors73.default.dim(`The conversation keeps running. Reattach with \`${reattach}\`.`)}`);
+      say(`  ${import_picocolors76.default.yellow("Stopped following.")} ${import_picocolors76.default.dim(`The conversation keeps running. Reattach with \`${reattach}\`.`)}`);
       finish({ version_id: null, build_id: null, status: "interrupted", task_status: null }, followExit);
       return;
     }
@@ -88558,7 +89527,7 @@ async function build(ctx) {
       if (settled.kind !== "terminal") {
         const interrupted = settled.kind === "interrupted";
         const status2 = settled.task?.status ?? null;
-        say(`  ${import_picocolors73.default.yellow(interrupted ? "Stopped." : `The conversation is still ${safe(status2 ?? "running")}.`)} ${import_picocolors73.default.dim(`Check it with \`brainbase task get ${safe(taskId)}\`.`)}`);
+        say(`  ${import_picocolors76.default.yellow(interrupted ? "Stopped." : `The conversation is still ${safe(status2 ?? "running")}.`)} ${import_picocolors76.default.dim(`Check it with \`brainbase task get ${safe(taskId)}\`.`)}`);
         finish({ version_id: null, build_id: null, status: interrupted ? "interrupted" : "task_unsettled", task_status: status2 }, interrupted ? SIGINT_EXIT_CODE : 1);
         return;
       }
@@ -88578,36 +89547,36 @@ async function build(ctx) {
       }
       const codes = [exitCodeForTaskStatus(task.status)];
       say("");
-      say(`  ${import_picocolors73.default.dim("conversation")} ${safe(taskId)} ${import_picocolors73.default.dim("ended")} ${safe(task.status)}`);
+      say(`  ${import_picocolors76.default.dim("conversation")} ${safe(taskId)} ${import_picocolors76.default.dim("ended")} ${safe(task.status)}`);
       if (mine?.status === "failed") {
         codes.push(1);
         const why = [mine.reason, mine.error].filter(Boolean).map((part) => safe(part)).join(": ");
-        say(`  ${import_picocolors73.default.red(`This conversation's build work failed${why ? ` (${why})` : ""}.`)}`);
+        say(`  ${import_picocolors76.default.red(`This conversation's build work failed${why ? ` (${why})` : ""}.`)}`);
       } else if (task.status !== "success" && task.status !== "need_more_info") {
-        say(`  ${import_picocolors73.default.red(`The conversation finished as ${safe(task.status)}.`)} ${import_picocolors73.default.dim(`See \`brainbase task logs ${safe(taskId)}\`.`)}`);
+        say(`  ${import_picocolors76.default.red(`The conversation finished as ${safe(task.status)}.`)} ${import_picocolors76.default.dim(`See \`brainbase task logs ${safe(taskId)}\`.`)}`);
       }
       if (task.status === "need_more_info") {
         const question = await lastAgentMessage(taskId);
         say("");
         if (question) {
-          say(`  ${import_picocolors73.default.bold("The agent asks:")}`);
+          say(`  ${import_picocolors76.default.bold("The agent asks:")}`);
           say(`  ${safeBlock(question).split(`
 `).join(`
   `)}`);
         } else {
-          say(`  ${import_picocolors73.default.bold("The agent needs more from you before it can go on.")}`);
+          say(`  ${import_picocolors76.default.bold("The agent needs more from you before it can go on.")}`);
         }
         say("");
-        say(`  ${import_picocolors73.default.dim("Reply with")} ${import_picocolors73.default.cyan(`brainbase task send ${safe(taskId)} "<reply>"`)}`);
-        say(`  ${import_picocolors73.default.dim("then follow it with")} ${import_picocolors73.default.cyan(reattach)}`);
+        say(`  ${import_picocolors76.default.dim("Reply with")} ${import_picocolors76.default.cyan(`brainbase task send ${safe(taskId)} "<reply>"`)}`);
+        say(`  ${import_picocolors76.default.dim("then follow it with")} ${import_picocolors76.default.cyan(reattach)}`);
       }
       let status;
       let buildId = null;
       if (versionId) {
         say("");
-        say(`  ${import_picocolors73.default.dim("version")}  ${safe(versionId)}`);
+        say(`  ${import_picocolors76.default.dim("version")}  ${safe(versionId)}`);
         if (!json3)
-          say(`  ${import_picocolors73.default.dim("Waiting for its build...")}`);
+          say(`  ${import_picocolors76.default.dim("Waiting for its build...")}`);
         const buildKey = `${key2}-build`;
         let outcome;
         try {
@@ -88617,7 +89586,7 @@ async function build(ctx) {
             signal: stop.signal,
             now: deps.now,
             idempotencyKey: buildKey,
-            onStall: () => say(`  ${import_picocolors73.default.yellow("The build looks stalled; still waiting in case another worker picks it up.")}`)
+            onStall: () => say(`  ${import_picocolors76.default.yellow("The build looks stalled; still waiting in case another worker picks it up.")}`)
           });
         } catch (error2) {
           if (error2 instanceof LostResponseError) {
@@ -88633,9 +89602,9 @@ async function build(ctx) {
         status = noVersionStatus(mine?.status === "failed", task.status);
         if (status === "no_version") {
           codes.push(1);
-          say(`  ${import_picocolors73.default.red("The conversation finished without committing a version, so there is nothing to build.")}`);
+          say(`  ${import_picocolors76.default.red("The conversation finished without committing a version, so there is nothing to build.")}`);
         } else if (task.status !== "need_more_info") {
-          say(`  ${import_picocolors73.default.dim("This conversation produced no version, so there is nothing to build.")}`);
+          say(`  ${import_picocolors76.default.dim("This conversation produced no version, so there is nothing to build.")}`);
         }
       }
       if (!json3)
@@ -88650,7 +89619,7 @@ async function build(ctx) {
 var buildCommands = { build };
 
 // src/cli/interface-lifecycle.ts
-var import_picocolors75 = __toESM(require_picocolors(), 1);
+var import_picocolors78 = __toESM(require_picocolors(), 1);
 
 // src/core/org-members.ts
 async function listAllOrgMembers(orgId) {
@@ -88704,7 +89673,7 @@ function membersById(members) {
 }
 
 // src/cli/interface-read.ts
-var import_picocolors74 = __toESM(require_picocolors(), 1);
+var import_picocolors77 = __toESM(require_picocolors(), 1);
 function interfaceState(row) {
   if (row.archived_at)
     return "archived";
@@ -88726,11 +89695,11 @@ function threadsLabel(shared) {
 function stateTint(state) {
   switch (state) {
     case "live":
-      return import_picocolors74.default.green;
+      return import_picocolors77.default.green;
     case "building":
-      return import_picocolors74.default.yellow;
+      return import_picocolors77.default.yellow;
     case "archived":
-      return import_picocolors74.default.dim;
+      return import_picocolors77.default.dim;
     case "draft":
       return (cell) => cell;
     default: {
@@ -88763,7 +89732,7 @@ async function list3(ctx) {
     if (shown.length === 0) {
       const empty = onlyArchived ? "No archived interfaces." : includeArchived ? "No interfaces. Create one with `brainbase interface create`." : await emptyWithoutArchived(agentId);
       console.log(`
-  ${import_picocolors74.default.dim(empty)}
+  ${import_picocolors77.default.dim(empty)}
 `);
       return;
     }
@@ -88776,7 +89745,7 @@ async function list3(ctx) {
       audienceWord(row),
       ago(row.last_edited_at ?? row.created_at, now2)
     ]);
-    console.log(["", ...table(cells, [null, import_picocolors74.default.bold, null, null, null, import_picocolors74.default.dim]), ""].join(`
+    console.log(["", ...table(cells, [null, import_picocolors77.default.bold, null, null, null, import_picocolors77.default.dim]), ""].join(`
 `));
   });
 }
@@ -88810,13 +89779,13 @@ async function get2(ctx) {
     out.push(field("id", safe(row.id)));
     out.push(field("agent", agentLabel(safe(row.agent_id), await agentNames([row.agent_id]))));
     out.push(field("state", stateTint(state)(state)));
-    out.push(field("address", row.live_release ? safe(row.live_release.url) : `${safe(row.slug)} ${import_picocolors74.default.dim("(nothing live yet)")}`));
+    out.push(field("address", row.live_release ? safe(row.live_release.url) : `${safe(row.slug)} ${import_picocolors77.default.dim("(nothing live yet)")}`));
     out.push(field("audience", audienceLabel(row)));
     out.push(field("threads", threadsLabel(row.share_agent_threads)));
-    out.push(field("live", row.live_release ? `${safe(row.live_release.id)} ${import_picocolors74.default.dim(`published ${ago(row.live_release.published_at)}`)}` : import_picocolors74.default.dim("none")));
-    out.push(field("draft", row.draft_version_id ? safe(row.draft_version_id) : import_picocolors74.default.dim("none yet")));
+    out.push(field("live", row.live_release ? `${safe(row.live_release.id)} ${import_picocolors77.default.dim(`published ${ago(row.live_release.published_at)}`)}` : import_picocolors77.default.dim("none")));
+    out.push(field("draft", row.draft_version_id ? safe(row.draft_version_id) : import_picocolors77.default.dim("none yet")));
     if (row.running_generation) {
-      out.push(field("building", `conversation ${safe(row.running_generation.thread_id ?? "")} ${import_picocolors74.default.dim(`(follow it with \`brainbase task logs ${safe(row.running_generation.thread_id ?? "")} --follow\`)`)}`));
+      out.push(field("building", `conversation ${safe(row.running_generation.thread_id ?? "")} ${import_picocolors77.default.dim(`(follow it with \`brainbase task logs ${safe(row.running_generation.thread_id ?? "")} --follow\`)`)}`));
     }
     if (row.archived_at)
       out.push(field("archived", ago(row.archived_at)));
@@ -88845,7 +89814,7 @@ async function open(ctx) {
     }
     console.log(safe(url2));
     if (new URL(url2).hostname.endsWith("vercel.app")) {
-      console.error(import_picocolors74.default.yellow("This is the raw Vercel deployment address, which sits behind Vercel protection and will not open for viewers. The control plane has no public interfaces domain configured."));
+      console.error(import_picocolors77.default.yellow("This is the raw Vercel deployment address, which sits behind Vercel protection and will not open for viewers. The control plane has no public interfaces domain configured."));
     }
   });
 }
@@ -88883,7 +89852,7 @@ async function history(ctx, name) {
     banner(`interface ${name} — ${safe(id)}`);
     if (rows.length === 0) {
       console.log(`
-  ${import_picocolors74.default.dim(`No ${name} yet.`)}
+  ${import_picocolors77.default.dim(`No ${name} yet.`)}
 `);
       return;
     }
@@ -88960,7 +89929,7 @@ function exactlyOne(parsed, flags) {
 }
 function peopleLine(access, members) {
   const ids = grantIds(access);
-  return ids.length ? namesOf(ids, members) : import_picocolors75.default.dim("nobody named");
+  return ids.length ? namesOf(ids, members) : import_picocolors78.default.dim("nobody named");
 }
 function printAccess(row, access, members) {
   console.log([
@@ -89056,11 +90025,11 @@ async function create3(ctx) {
     const id = safe(created.id);
     const out = [
       "",
-      `  ${import_picocolors75.default.green("Created")} ${import_picocolors75.default.bold(safe(created.name))}`,
+      `  ${import_picocolors78.default.green("Created")} ${import_picocolors78.default.bold(safe(created.name))}`,
       "",
       field("id", id),
       field("agent", safe(created.agent_id)),
-      field("address", `${safe(created.slug)} ${import_picocolors75.default.dim("(nothing live yet)")}`),
+      field("address", `${safe(created.slug)} ${import_picocolors78.default.dim("(nothing live yet)")}`),
       field("threads", threadsLabel(created.share_agent_threads))
     ];
     if (access) {
@@ -89072,11 +90041,11 @@ async function create3(ctx) {
       out.push("", `  Nobody can open it until you choose who can: \`brainbase interface access ${id} --everyone\` or \`--people <emails>\`.`);
     }
     if (created.share_agent_threads) {
-      out.push(`  ${import_picocolors75.default.dim(`To show viewers only their own conversations: \`brainbase interface threads ${id} --private\`.`)}`);
+      out.push(`  ${import_picocolors78.default.dim(`To show viewers only their own conversations: \`brainbase interface threads ${id} --private\`.`)}`);
     }
     if (note)
       out.push("", `  ${safe(note)}`);
-    out.push("", `  ${import_picocolors75.default.dim(`Next: \`brainbase interface build ${id} "<what to build>"\``)}`, "");
+    out.push("", `  ${import_picocolors78.default.dim(`Next: \`brainbase interface build ${id} "<what to build>"\``)}`, "");
     console.log(out.join(`
 `));
     if (readFailed) {
@@ -89212,7 +90181,7 @@ async function threads(ctx) {
         printJson({ id: row.id, share_agent_threads: row.share_agent_threads });
         return;
       }
-      const already = wanted === null ? "" : ` ${import_picocolors75.default.dim("(already set; nothing changed)")}`;
+      const already = wanted === null ? "" : ` ${import_picocolors78.default.dim("(already set; nothing changed)")}`;
       console.log(`
 ${field("threads", `${threadsLabel(row.share_agent_threads)}${already}`)}
 `);
@@ -89251,7 +90220,7 @@ async function rename(ctx) {
       return;
     }
     console.log(`
-  Renamed ${safe(updated.id)} to ${import_picocolors75.default.bold(safe(updated.name))}.
+  Renamed ${safe(updated.id)} to ${import_picocolors78.default.bold(safe(updated.name))}.
 `);
   });
 }
@@ -89287,7 +90256,7 @@ async function address(ctx) {
     }
     const where = updated.live_release ? safe(updated.live_release.url) : safe(updated.slug);
     console.log(`
-  ${safe(updated.name)} is now at ${import_picocolors75.default.bold(where)}.
+  ${safe(updated.name)} is now at ${import_picocolors78.default.bold(where)}.
 `);
   });
 }
@@ -89379,9 +90348,9 @@ var lifecycleCommands = {
 };
 
 // src/cli/interface-preview.ts
-var import_picocolors76 = __toESM(require_picocolors(), 1);
+var import_picocolors79 = __toESM(require_picocolors(), 1);
 function warn(line2) {
-  console.error(import_picocolors76.default.yellow(line2));
+  console.error(import_picocolors79.default.yellow(line2));
 }
 var PREVIEW_TIMEOUT_SECONDS = 300;
 var PROBE_INTERVAL_MS = 2000;
@@ -89471,12 +90440,12 @@ async function preview(ctx) {
     const say = progress(json3);
     const row = await interfacesApi.get(id);
     const { taskId, why } = await pickConversation(row, stringOption(parsed, "task")?.trim() || undefined);
-    say(import_picocolors76.default.dim(`  Previewing ${why}, ${safe(taskId)}.`));
+    say(import_picocolors79.default.dim(`  Previewing ${why}, ${safe(taskId)}.`));
     const started = await interfacesApi.startPreview(taskId, row.id);
     const address2 = previewAddress(started, row);
     let outcome = started.state === "serving" ? "serving" : "not_waited";
     if (outcome !== "serving" && !noWait) {
-      say(import_picocolors76.default.dim("  Starting the dev server in the sandbox…"));
+      say(import_picocolors79.default.dim("  Starting the dev server in the sandbox…"));
       outcome = await waitUntilServing(started, { timeoutMs: waitMs, deps: ctx.deps });
     }
     if (json3) {
@@ -89484,12 +90453,12 @@ async function preview(ctx) {
     } else {
       const out = [
         "",
-        `  ${outcome === "serving" ? import_picocolors76.default.green("Preview ready") : import_picocolors76.default.yellow("Preview starting")} ${import_picocolors76.default.bold(safe(started.name))}`,
+        `  ${outcome === "serving" ? import_picocolors79.default.green("Preview ready") : import_picocolors79.default.yellow("Preview starting")} ${import_picocolors79.default.bold(safe(started.name))}`,
         "",
-        field("address", address2 ? safe(address2) : import_picocolors76.default.dim(missingAddress(started))),
+        field("address", address2 ? safe(address2) : import_picocolors79.default.dim(missingAddress(started))),
         field("showing", showing(started, taskId)),
         "",
-        `  ${import_picocolors76.default.dim("Opens for people who can edit the agent, after signing in. Nothing is published.")}`,
+        `  ${import_picocolors79.default.dim("Opens for people who can edit the agent, after signing in. Nothing is published.")}`,
         ""
       ];
       console.log(out.join(`
@@ -89510,13 +90479,13 @@ async function preview(ctx) {
 var previewCommands = { preview };
 
 // src/cli/interface-release.ts
-var import_picocolors77 = __toESM(require_picocolors(), 1);
+var import_picocolors80 = __toESM(require_picocolors(), 1);
 var PUBLISH_TIMEOUT_SECONDS = 300;
 var REBUILD_USAGE = "brainbase interface rebuild <id> [--version <version id>] [--yes]";
 var PUBLISH_USAGE = "brainbase interface publish <id> [--build <build id>]";
 var ROLLBACK_USAGE = "brainbase interface rollback <id> --release <release id>";
 function warn2(line2) {
-  console.error(import_picocolors77.default.yellow(line2));
+  console.error(import_picocolors80.default.yellow(line2));
 }
 function text3(value2) {
   return typeof value2 === "string" && value2.trim() ? value2 : null;
@@ -89533,7 +90502,7 @@ async function follow(operationId, what, options) {
       intervalMs: options.deps.pollIntervalMs,
       signal: stop.signal,
       now: options.deps.now,
-      onStatus: (operation) => say(import_picocolors77.default.dim(`  ${what} ${operation.status}`)),
+      onStatus: (operation) => say(import_picocolors80.default.dim(`  ${what} ${operation.status}`)),
       onStall: () => warn2(`The ${what} looks stalled: its worker stopped checking in. Still waiting, in case another worker picks it up.`)
     });
     if (outcome.kind === "settled") {
@@ -89552,7 +90521,7 @@ function reportUnsuccessful(result2, what, options) {
   if (options.json) {
     printJson({ outcome: result2.outcome, operation_id: result2.operationId, operation: result2.operation });
   } else if (result2.outcome === "failed") {
-    console.error(import_picocolors77.default.red(`The ${what} failed (operation ${id}):`));
+    console.error(import_picocolors80.default.red(`The ${what} failed (operation ${id}):`));
     console.error(safeBlock(result2.operation?.error ?? "Brainbase gave no reason."));
   } else if (result2.outcome === "timeout") {
     warn2(`Stopped waiting after ${Math.round(options.timeoutMs / 1000)}s. The ${what} keeps running on the server (operation ${id}).`);
@@ -89612,7 +90581,7 @@ async function rebuild(ctx) {
       if (json3)
         printJson({ outcome: "started", operation_id: operationId, operation });
       else
-        console.log(import_picocolors77.default.dim(`  Follow it with \`brainbase interface builds ${safe(id)}\`.`));
+        console.log(import_picocolors80.default.dim(`  Follow it with \`brainbase interface builds ${safe(id)}\`.`));
       return;
     }
     const result2 = await follow(operationId, "build", { json: json3, timeoutMs: waitMs, deps: ctx.deps });
@@ -89624,8 +90593,8 @@ async function rebuild(ctx) {
     }
     const buildId = safe(result2.operation?.build_id ?? "");
     const version2 = safe(result2.operation?.source_version_id ?? "");
-    console.log(import_picocolors77.default.green(`✓ Build ${buildId} succeeded${version2 ? ` (version ${version2})` : ""}.`));
-    console.log(import_picocolors77.default.dim(`  Publish it with \`brainbase interface publish ${safe(id)} --build ${buildId}\`.`));
+    console.log(import_picocolors80.default.green(`✓ Build ${buildId} succeeded${version2 ? ` (version ${version2})` : ""}.`));
+    console.log(import_picocolors80.default.dim(`  Publish it with \`brainbase interface publish ${safe(id)} --build ${buildId}\`.`));
   });
 }
 function liveBuildOf(row, releases) {
@@ -89683,7 +90652,7 @@ function describeBuild(buildId, builds) {
   const build2 = builds.find((candidate) => candidate.id === buildId);
   if (!build2)
     return `build ${safe(buildId)}`;
-  return `build ${safe(build2.id)} ${import_picocolors77.default.dim(`(version ${safe(build2.source_version_id)}, built ${ago(build2.created_at)})`)}`;
+  return `build ${safe(build2.id)} ${import_picocolors80.default.dim(`(version ${safe(build2.source_version_id)}, built ${ago(build2.created_at)})`)}`;
 }
 function reportAlreadyLive(json3, buildId, releaseId, url2) {
   if (json3) {
@@ -89737,8 +90706,8 @@ async function publish(ctx) {
     }
     if (!json3) {
       console.log("");
-      console.log(`  ${import_picocolors77.default.dim("Live now".padEnd(14))}${liveBuildId ? `${describeBuild(liveBuildId, builds)} at ${safe(row.live_release?.url)}` : row.live_release ? `release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}` : import_picocolors77.default.dim("nothing")}`);
-      console.log(`  ${import_picocolors77.default.dim("Will publish".padEnd(14))}${describeBuild(buildId, builds)}`);
+      console.log(`  ${import_picocolors80.default.dim("Live now".padEnd(14))}${liveBuildId ? `${describeBuild(liveBuildId, builds)} at ${safe(row.live_release?.url)}` : row.live_release ? `release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}` : import_picocolors80.default.dim("nothing")}`);
+      console.log(`  ${import_picocolors80.default.dim("Will publish".padEnd(14))}${describeBuild(buildId, builds)}`);
       console.log("");
     }
     const proceed = await confirmChange({
@@ -89781,7 +90750,7 @@ async function publish(ctx) {
       if (json3)
         printJson({ outcome: "started", operation_id: operationId, operation });
       else
-        console.log(import_picocolors77.default.dim(`  Check it with \`brainbase interface get ${safe(id)}\`.`));
+        console.log(import_picocolors80.default.dim(`  Check it with \`brainbase interface get ${safe(id)}\`.`));
       return;
     }
     const result2 = await follow(operationId, "publish", { json: json3, timeoutMs: waitMs, deps: ctx.deps });
@@ -89798,11 +90767,11 @@ async function publish(ctx) {
       printJson({ outcome: "succeeded", operation_id: operationId, operation: result2.operation, url: url2 });
       return;
     }
-    console.log(import_picocolors77.default.green(`✓ Build ${safe(buildId)} is live.`));
+    console.log(import_picocolors80.default.green(`✓ Build ${safe(buildId)} is live.`));
     if (url2)
       console.log(`  ${safe(url2)}`);
     if (urlUnread) {
-      console.log(import_picocolors77.default.dim(`  Its address could not be read just now; see it with \`brainbase interface open ${safe(id)}\`.`));
+      console.log(import_picocolors80.default.dim(`  Its address could not be read just now; see it with \`brainbase interface open ${safe(id)}\`.`));
     }
   });
 }
@@ -89838,8 +90807,8 @@ async function rollback(ctx) {
     }
     if (!json3) {
       console.log("");
-      console.log(`  ${import_picocolors77.default.dim("Live now".padEnd(16))}release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}`);
-      console.log(`  ${import_picocolors77.default.dim("Will republish".padEnd(16))}release ${safe(releaseId)} ${import_picocolors77.default.dim("as a new release, with a new id")}`);
+      console.log(`  ${import_picocolors80.default.dim("Live now".padEnd(16))}release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}`);
+      console.log(`  ${import_picocolors80.default.dim("Will republish".padEnd(16))}release ${safe(releaseId)} ${import_picocolors80.default.dim("as a new release, with a new id")}`);
       console.log("");
     }
     const proceed = await confirmChange({
@@ -89872,7 +90841,7 @@ async function rollback(ctx) {
       printJson(release);
       return;
     }
-    console.log(import_picocolors77.default.green(release.id === releaseId ? `✓ Release ${safe(releaseId)} is live (build ${safe(release.build_id)}).` : `✓ Republished release ${safe(releaseId)} as new release ${safe(release.id)} (build ${safe(release.build_id)}). It is live.`));
+    console.log(import_picocolors80.default.green(release.id === releaseId ? `✓ Release ${safe(releaseId)} is live (build ${safe(release.build_id)}).` : `✓ Republished release ${safe(releaseId)} as new release ${safe(release.id)} (build ${safe(release.build_id)}). It is live.`));
     console.log(`  ${safe(release.url)}`);
   });
 }
@@ -89907,14 +90876,14 @@ ${didYouMean(sub, Object.keys(COMMANDS2), "brainbase interface")}`);
   await command({ cwd: cwd2, args, deps });
 }
 function line2(command, args, description) {
-  return `  ${import_picocolors78.default.cyan(command)}${args ? ` ${import_picocolors78.default.dim(args)}` : ""}
-      ${import_picocolors78.default.dim(description)}`;
+  return `  ${import_picocolors81.default.cyan(command)}${args ? ` ${import_picocolors81.default.dim(args)}` : ""}
+      ${import_picocolors81.default.dim(description)}`;
 }
 function printHelp7() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors78.default.bold("brainbase interface")} ${import_picocolors78.default.dim("<sub> [options]")}`);
-  out.push(`  ${import_picocolors78.default.dim("Dashboards for an agent: build them in a conversation, publish them, choose who can open them.")}`);
+  out.push(`  ${import_picocolors81.default.bold("brainbase interface")} ${import_picocolors81.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors81.default.dim("Dashboards for an agent: build them in a conversation, publish them, choose who can open them.")}`);
   out.push("");
   out.push(line2("ls", "[--agent <id>] [--archived | --only-archived]", "list interfaces you can see"));
   out.push(line2("get", "<id>", "one interface: address, audience, live release, draft, running build conversation"));
@@ -89934,22 +90903,22 @@ function printHelp7() {
   out.push(line2("rollback", "<id> --release <id>", "republish an earlier release; it goes live under a new release id"));
   out.push(line2("preview", "<id> [--task <id>] [--no-wait]", "serve the unpublished draft from its build conversation and print the preview address"));
   out.push("");
-  out.push(`  ${import_picocolors78.default.dim("--json")}                   machine-readable output; never prompts`);
-  out.push(`  ${import_picocolors78.default.dim("--yes, -y")}                skip confirmation (required without a terminal)`);
-  out.push(`  ${import_picocolors78.default.dim("--no-wait")}                for rebuild and publish: return the operation at once; for preview: do not wait for the dev server`);
-  out.push(`  ${import_picocolors78.default.dim("--timeout <seconds>")}      for build, rebuild, publish and preview: how long to wait (builds 900, publish and preview 300)`);
-  out.push(`  ${import_picocolors78.default.dim("--idempotency-key <key>")}  replay a create, build, rebuild, publish or rollback whose answer was lost`);
+  out.push(`  ${import_picocolors81.default.dim("--json")}                   machine-readable output; never prompts`);
+  out.push(`  ${import_picocolors81.default.dim("--yes, -y")}                skip confirmation (required without a terminal)`);
+  out.push(`  ${import_picocolors81.default.dim("--no-wait")}                for rebuild and publish: return the operation at once; for preview: do not wait for the dev server`);
+  out.push(`  ${import_picocolors81.default.dim("--timeout <seconds>")}      for build, rebuild, publish and preview: how long to wait (builds 900, publish and preview 300)`);
+  out.push(`  ${import_picocolors81.default.dim("--idempotency-key <key>")}  replay a create, build, rebuild, publish or rollback whose answer was lost`);
   out.push("");
-  out.push(`  ${import_picocolors78.default.dim("People are emails (see `brainbase member ls`), user ids, or `me`. Audience members also need access to the agent.")}`);
-  out.push(`  ${import_picocolors78.default.dim("Audience: everyone (--everyone, `org` under --json) or chosen people (--people, `users` under --json).")}`);
-  out.push(`  ${import_picocolors78.default.dim("Exit codes: 0 done, 1 refused or failed, 130 interrupted (the server keeps working).")}`);
+  out.push(`  ${import_picocolors81.default.dim("People are emails (see `brainbase member ls`), user ids, or `me`. Audience members also need access to the agent.")}`);
+  out.push(`  ${import_picocolors81.default.dim("Audience: everyone (--everyone, `org` under --json) or chosen people (--people, `users` under --json).")}`);
+  out.push(`  ${import_picocolors81.default.dim("Exit codes: 0 done, 1 refused or failed, 130 interrupted (the server keeps working).")}`);
   out.push("");
   console.log(out.join(`
 `));
 }
 
 // src/cli/member.ts
-var import_picocolors79 = __toESM(require_picocolors(), 1);
+var import_picocolors82 = __toESM(require_picocolors(), 1);
 async function runMember(sub, args, opts) {
   if (args.some((arg) => arg === "--help" || arg === "-h")) {
     printHelp8();
@@ -89992,7 +90961,7 @@ async function runMemberList(opts) {
 function formatMemberList(members) {
   if (members.length === 0)
     return `
-  ${import_picocolors79.default.dim("Nobody here you can see.")}
+  ${import_picocolors82.default.dim("Nobody here you can see.")}
 `;
   const sorted = [...members].sort((a3, b4) => (a3.email ?? a3.id).localeCompare(b4.email ?? b4.id));
   const rows = sorted.map((member) => ({
@@ -90006,24 +90975,24 @@ function formatMemberList(members) {
   const roleWidth = Math.max(...rows.map((row) => row.role.length));
   const lines = [""];
   for (const row of rows) {
-    lines.push(`  ${row.email.padEnd(emailWidth)}  ${row.name.padEnd(nameWidth)}  ${import_picocolors79.default.dim(row.role.padEnd(roleWidth))}  ${import_picocolors79.default.dim(row.teams)}`.trimEnd());
+    lines.push(`  ${row.email.padEnd(emailWidth)}  ${row.name.padEnd(nameWidth)}  ${import_picocolors82.default.dim(row.role.padEnd(roleWidth))}  ${import_picocolors82.default.dim(row.teams)}`.trimEnd());
   }
-  lines.push("", `  ${import_picocolors79.default.dim("share a dashboard with one of them:")} ${import_picocolors79.default.cyan("brainbase interface access <id> --add <email>")}`, "");
+  lines.push("", `  ${import_picocolors82.default.dim("share a dashboard with one of them:")} ${import_picocolors82.default.cyan("brainbase interface access <id> --add <email>")}`, "");
   return lines.join(`
 `);
 }
 function printHelp8() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors79.default.bold("brainbase member")} ${import_picocolors79.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors82.default.bold("brainbase member")} ${import_picocolors82.default.dim("<sub> [options]")}`);
   out.push("");
-  out.push(`  ${import_picocolors79.default.cyan("ls")}   ${import_picocolors79.default.dim("the people in an organization you can see, with their emails, roles and teams")}`);
+  out.push(`  ${import_picocolors82.default.cyan("ls")}   ${import_picocolors82.default.dim("the people in an organization you can see, with their emails, roles and teams")}`);
   out.push("");
-  out.push(`  ${import_picocolors79.default.dim("--org <id-or-slug>")}  ${import_picocolors79.default.dim("which organization (picked automatically when you are in one)")}`);
-  out.push(`  ${import_picocolors79.default.dim("--json")}              ${import_picocolors79.default.dim("machine-readable output")}`);
+  out.push(`  ${import_picocolors82.default.dim("--org <id-or-slug>")}  ${import_picocolors82.default.dim("which organization (picked automatically when you are in one)")}`);
+  out.push(`  ${import_picocolors82.default.dim("--json")}              ${import_picocolors82.default.dim("machine-readable output")}`);
   out.push("");
-  out.push(`  ${import_picocolors79.default.dim("Owners and admins see everyone. Anyone else sees the owners, the admins, themselves")}`);
-  out.push(`  ${import_picocolors79.default.dim("and the people who share a team with them, as in the web app.")}`);
+  out.push(`  ${import_picocolors82.default.dim("Owners and admins see everyone. Anyone else sees the owners, the admins, themselves")}`);
+  out.push(`  ${import_picocolors82.default.dim("and the people who share a team with them, as in the web app.")}`);
   out.push("");
   console.log(out.join(`
 `));
@@ -91734,7 +92703,7 @@ async function runCommand(command, root, spec, context, options = {}) {
         return error2;
       return new BenchmarkCommandExecutionError(error2.code, error2.message, sanitizedOutput(stdout), sanitizedOutput(stderr), error2.durationMs);
     };
-    const fail3 = (error2) => {
+    const fail4 = (error2) => {
       if (settled)
         return;
       settled = true;
@@ -91753,7 +92722,7 @@ async function runCommand(command, root, spec, context, options = {}) {
       captured += chunk2.length;
       context.remainingOutputBytes -= chunk2.length;
       if (captured > spec.budget.max_output_bytes || context.remainingOutputBytes < 0) {
-        fail3(new BenchmarkPhaseError("output_limit_exceeded", `command output exceeded budget: ${command.id}`));
+        fail4(new BenchmarkPhaseError("output_limit_exceeded", `command output exceeded budget: ${command.id}`));
         return;
       }
       target.push(chunk2);
@@ -91776,14 +92745,14 @@ async function runCommand(command, root, spec, context, options = {}) {
     child.stdout?.on("data", (chunk2) => capture(stdout, chunk2));
     child.stderr?.on("data", (chunk2) => capture(stderr, chunk2));
     child.on("error", (error2) => {
-      fail3(new BenchmarkCommandExecutionError("command_start_failed", `failed to start ${command.id}: ${error2.message}`, Buffer.concat(stdout), Buffer.concat(stderr), Date.now() - started));
+      fail4(new BenchmarkCommandExecutionError("command_start_failed", `failed to start ${command.id}: ${error2.message}`, Buffer.concat(stdout), Buffer.concat(stderr), Date.now() - started));
     });
     timer = setTimeout(() => {
       if (reachesPhaseDeadline) {
-        fail3(new BenchmarkPhaseError("phase_timeout", "phase budget expired"));
+        fail4(new BenchmarkPhaseError("phase_timeout", "phase budget expired"));
         return;
       }
-      fail3(new BenchmarkCommandExecutionError("command_timeout", `command timed out: ${command.id}`, Buffer.concat(stdout), Buffer.concat(stderr), Date.now() - started));
+      fail4(new BenchmarkCommandExecutionError("command_timeout", `command timed out: ${command.id}`, Buffer.concat(stdout), Buffer.concat(stderr), Date.now() - started));
     }, timeoutMs3);
     child.on("exit", (code, signal) => {
       if (settled)
@@ -93116,7 +94085,7 @@ async function runBenchmarkPhase(specPathInput, resultPathInput, expectedPhase,
 }
 
 // src/cli/benchmark-control.ts
-var import_picocolors80 = __toESM(require_picocolors(), 1);
+var import_picocolors83 = __toESM(require_picocolors(), 1);
 import fs92 from "node:fs";
 import path103 from "node:path";
 
@@ -96130,20 +97099,20 @@ async function emitCursorPages(output, fetchPage, options) {
 function commandHelp() {
   return [
     "",
-    `  ${import_picocolors80.default.bold("brainbase benchmark")} ${import_picocolors80.default.dim("<command> [options]")}`,
+    `  ${import_picocolors83.default.bold("brainbase benchmark")} ${import_picocolors83.default.dim("<command> [options]")}`,
     "",
-    `  ${import_picocolors80.default.cyan("init | list | show | create | validate | pull | push")}`,
-    `  ${import_picocolors80.default.cyan("publish | revisions | import | export | archive | restore")}`,
-    `  ${import_picocolors80.default.cyan("run plan|start|watch|list|show|cancel|resume")}`,
-    `  ${import_picocolors80.default.cyan("results | diagnoses | attempt | artifacts | export-results")}`,
-    `  ${import_picocolors80.default.cyan("history | baseline show|set|clear")}`,
+    `  ${import_picocolors83.default.cyan("init | list | show | create | validate | pull | push")}`,
+    `  ${import_picocolors83.default.cyan("publish | revisions | import | export | archive | restore")}`,
+    `  ${import_picocolors83.default.cyan("run plan|start|watch|list|show|cancel|resume")}`,
+    `  ${import_picocolors83.default.cyan("results | diagnoses | attempt | artifacts | export-results")}`,
+    `  ${import_picocolors83.default.cyan("history | baseline show|set|clear")}`,
     "",
-    `  ${import_picocolors80.default.dim("Use --agent to override brainbase.agent.yaml, and --json or --jsonl for automation.")}`,
+    `  ${import_picocolors83.default.dim("Use --agent to override brainbase.agent.yaml, and --json or --jsonl for automation.")}`,
     "",
-    `  ${import_picocolors80.default.bold("benchmark runtime (machine-only)")}`,
-    `  ${import_picocolors80.default.cyan("hydrate")} ${import_picocolors80.default.dim("--spec <path> --result <path> --json")}`,
-    `  ${import_picocolors80.default.cyan("evaluate")} ${import_picocolors80.default.dim("--spec <path> --result <path> --json")}`,
-    `  ${import_picocolors80.default.cyan("capabilities")} ${import_picocolors80.default.dim("--json")}`,
+    `  ${import_picocolors83.default.bold("benchmark runtime (machine-only)")}`,
+    `  ${import_picocolors83.default.cyan("hydrate")} ${import_picocolors83.default.dim("--spec <path> --result <path> --json")}`,
+    `  ${import_picocolors83.default.cyan("evaluate")} ${import_picocolors83.default.dim("--spec <path> --result <path> --json")}`,
+    `  ${import_picocolors83.default.cyan("capabilities")} ${import_picocolors83.default.dim("--json")}`,
     ""
   ].join(`
 `);
@@ -97544,6 +98513,806 @@ async function runBenchmark(sub, args, write3 = (value2) => process.stdout.write
   }
 }
 
+// src/cli/decide.ts
+import fs95 from "node:fs";
+import path107 from "node:path";
+
+// src/core/decide-api.ts
+import path105 from "node:path";
+function decideKeysFile() {
+  return path105.join(process.env.BRAINBASE_HOME ?? BRAINBASE_HOME, "decide-keys.json");
+}
+var ATTEMPTS = 3;
+var RETRY_STATUSES = new Set([429, 502, 503, 504]);
+var MAX_RETRY_DELAY_MS = 30000;
+var REQUEST_TIMEOUT_MS3 = 5 * 60000;
+
+class DecideHttpError extends Error {
+  status;
+  constructor(message3, status) {
+    super(message3);
+    this.status = status;
+    this.name = "DecideHttpError";
+  }
+}
+function cacheKey(base2, agentId) {
+  return `${base2}|${agentId}`;
+}
+async function resolveDecideCredential(cwd2, agentFlag) {
+  const base2 = proxyBaseUrl(authStatus().session ?? null);
+  const taskKey = process.env.BB_TASK_KEY?.trim();
+  if (taskKey)
+    return { key: taskKey, base: base2, source: "task_key" };
+  const agentId = agentFlag?.trim() || readLink(cwd2)?.agent_id;
+  if (!agentId) {
+    throw new DecideHttpError("No agent to bill. Run inside a linked folder, or pass --agent <id> (see `brainbase agent list`).", null);
+  }
+  const cached2 = readJsonOr(decideKeysFile(), {})[cacheKey(base2, agentId)];
+  if (cached2?.key)
+    return { key: cached2.key, base: base2, source: "agent_key", agentId };
+  return mintAgentKey(base2, agentId);
+}
+async function mintAgentKey(base2, agentId) {
+  const created = await api.createCliKey(agentId, { name: "brainbase decide" });
+  const cache3 = readJsonOr(decideKeysFile(), {});
+  cache3[cacheKey(base2, agentId)] = { key: created.key, key_id: created.id };
+  writeJsonAtomic(decideKeysFile(), cache3);
+  return { key: created.key, base: base2, source: "agent_key", agentId };
+}
+async function replaceAgentKey(credential) {
+  if (credential.source !== "agent_key" || !credential.agentId)
+    return credential;
+  const cache3 = readJsonOr(decideKeysFile(), {});
+  delete cache3[cacheKey(credential.base, credential.agentId)];
+  writeJsonAtomic(decideKeysFile(), cache3);
+  return mintAgentKey(credential.base, credential.agentId);
+}
+function retryDelayMs(attempt2, retryAfter) {
+  const seconds = retryAfter === null ? Number.NaN : Number(retryAfter);
+  const base2 = Number.isFinite(seconds) ? seconds * 1000 : 1000 * 2 ** attempt2;
+  return Math.min(Math.max(base2, 0), MAX_RETRY_DELAY_MS) + Math.random() * 500;
+}
+function errorMessage3(status, text4) {
+  try {
+    const body = JSON.parse(text4);
+    const message3 = body.error?.message ?? body.detail;
+    if (typeof message3 === "string" && message3)
+      return message3;
+  } catch {}
+  return `HTTP ${status}`;
+}
+async function postDecide(credential, body, options = {}) {
+  const sleep3 = options.sleep ?? ((ms2) => new Promise((resolve) => setTimeout(resolve, ms2)));
+  const payload = JSON.stringify(body);
+  let failure = new DecideHttpError("The decide request failed", null);
+  for (let attempt2 = 0;attempt2 < ATTEMPTS; attempt2 += 1) {
+    let retryAfter = null;
+    try {
+      const response = await fetch(`${credential.base}/v1/decide`, {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${credential.key}`,
+          "Content-Type": "application/json"
+        },
+        body: payload,
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS3)
+      });
+      const text4 = await response.text();
+      if (response.ok) {
+        try {
+          return JSON.parse(text4);
+        } catch {
+          throw new DecideHttpError("The server sent an unreadable response", response.status);
+        }
+      }
+      failure = new DecideHttpError(errorMessage3(response.status, text4), response.status);
+      if (!RETRY_STATUSES.has(response.status))
+        throw failure;
+      retryAfter = response.headers.get("retry-after");
+    } catch (error2) {
+      if (error2 instanceof DecideHttpError)
+        throw error2;
+      failure = new DecideHttpError(`Network error: ${error2.message}`, null);
+    }
+    if (attempt2 + 1 < ATTEMPTS)
+      await sleep3(retryDelayMs(attempt2, retryAfter));
+  }
+  throw failure;
+}
+
+// src/core/decide-items.ts
+import fs94 from "node:fs";
+import path106 from "node:path";
+
+class DecideInputError extends Error {
+  constructor(message3) {
+    super(message3);
+    this.name = "DecideInputError";
+  }
+}
+var GLOB_CHARS = /[*?[{]/;
+function fileId(cwd2, file) {
+  return path106.relative(cwd2, file).split(path106.sep).join("/") || path106.basename(file);
+}
+function isHidden2(name) {
+  return name.startsWith(".") || name === "node_modules";
+}
+function appendAll(into, from) {
+  for (const value2 of from)
+    into.push(value2);
+}
+function walk(dir, out = []) {
+  for (const entry of fs94.readdirSync(dir, { withFileTypes: true })) {
+    if (isHidden2(entry.name))
+      continue;
+    const full = path106.join(dir, entry.name);
+    if (entry.isDirectory())
+      walk(full, out);
+    else if (entry.isFile())
+      out.push(full);
+    else if (entry.isSymbolicLink()) {
+      try {
+        if (fs94.statSync(full).isFile())
+          out.push(full);
+      } catch {}
+    }
+  }
+  return out;
+}
+function walkSorted(dir) {
+  return walk(dir).sort();
+}
+function globToRegExp(pattern2) {
+  let source = "";
+  for (let i = 0;i < pattern2.length; i += 1) {
+    const char = pattern2[i];
+    if (char === "*") {
+      if (pattern2[i + 1] === "*") {
+        const slashFollows = pattern2[i + 2] === "/";
+        source += slashFollows ? "(?:.*/)?" : ".*";
+        i += slashFollows ? 2 : 1;
+      } else {
+        source += "[^/]*";
+      }
+    } else if (char === "?") {
+      source += "[^/]";
+    } else if (char === "{") {
+      const close = pattern2.indexOf("}", i);
+      if (close === -1) {
+        source += "\\{";
+        continue;
+      }
+      const choices = pattern2.slice(i + 1, close).split(",");
+      source += `(?:${choices.map((choice) => globToRegExp(choice).source.slice(1, -1)).join("|")})`;
+      i = close;
+    } else if (char === "[") {
+      const close = pattern2.indexOf("]", i + 1);
+      if (close === -1) {
+        source += "\\[";
+        continue;
+      }
+      let body = pattern2.slice(i + 1, close);
+      if (body.startsWith("!"))
+        body = `^${body.slice(1)}`;
+      source += `[${body.replace(/\\/g, "\\\\")}]`;
+      i = close;
+    } else {
+      source += char.replace(/[.+^$()|\\/]/g, "\\$&");
+    }
+  }
+  return new RegExp(`^${source}$`);
+}
+function expandGlob(cwd2, pattern2) {
+  const absolute = path106.isAbsolute(pattern2);
+  const segments = pattern2.split("/");
+  const fixed = [];
+  for (const segment of segments) {
+    if (GLOB_CHARS.test(segment))
+      break;
+    fixed.push(segment);
+  }
+  if (fixed.length === segments.length) {
+    return [path106.resolve(cwd2, pattern2)];
+  }
+  const root = path106.resolve(cwd2, fixed.join("/") || ".");
+  if (!fs94.existsSync(root) || !fs94.statSync(root).isDirectory())
+    return [];
+  const matcher = globToRegExp(absolute ? pattern2 : path106.posix.normalize(segments.join("/")));
+  return walkSorted(root).filter((file) => {
+    const candidate = absolute ? file.split(path106.sep).join("/") : fileId(cwd2, file);
+    return matcher.test(candidate);
+  });
+}
+function readFileItem(cwd2, file) {
+  const id = fileId(cwd2, file);
+  let bytes;
+  try {
+    bytes = fs94.readFileSync(file);
+  } catch (error2) {
+    return { id, error: `Could not read the file: ${error2.message}` };
+  }
+  if (bytes.includes(0))
+    return { id, error: "Not a text file" };
+  let text4;
+  try {
+    text4 = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+  } catch {
+    return { id, error: "Not UTF-8 text" };
+  }
+  if (!text4.trim())
+    return { id, error: "Empty file" };
+  return { id, text: text4 };
+}
+function fileItems(cwd2, paths, globs) {
+  const files = [];
+  for (const entry of paths) {
+    const full = path106.resolve(cwd2, entry);
+    let stat;
+    try {
+      stat = fs94.statSync(full);
+    } catch {
+      throw new DecideInputError(`No such file or directory: ${entry}`);
+    }
+    if (stat.isDirectory())
+      appendAll(files, walkSorted(full));
+    else
+      files.push(full);
+  }
+  for (const pattern2 of globs) {
+    const matched = expandGlob(cwd2, pattern2);
+    if (matched.length === 0 || !matched.some((file) => fs94.existsSync(file))) {
+      throw new DecideInputError(`No files match ${pattern2}`);
+    }
+    appendAll(files, matched);
+  }
+  return [...new Set(files)];
+}
+function readFileItems(cwd2, files) {
+  const set3 = { items: [], failures: [] };
+  for (const file of files) {
+    const item = readFileItem(cwd2, file);
+    if ("error" in item)
+      set3.failures.push(item);
+    else
+      set3.items.push(item);
+  }
+  return set3;
+}
+function isRecord2(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function rowItem(row, options, fallbackId) {
+  const idField = options.idField ?? "id";
+  const rawId = isRecord2(row) ? row[idField] : undefined;
+  let id = fallbackId;
+  if (rawId !== undefined && rawId !== null && rawId !== "")
+    id = String(rawId);
+  else if (options.idField)
+    return { id: fallbackId, error: `Missing ${options.idField}` };
+  if (options.textFields.length === 0)
+    return { id, json: row };
+  if (!isRecord2(row))
+    return { id, error: "Not an object, so --text-field has nothing to select" };
+  if (options.textFields.length === 1) {
+    const field2 = options.textFields[0];
+    const value2 = row[field2];
+    if (value2 === undefined || value2 === null || value2 === "")
+      return { id, error: `Empty ${field2}` };
+    return { id, text: typeof value2 === "string" ? value2 : JSON.stringify(value2) };
+  }
+  const missing = options.textFields.filter((field2) => row[field2] === undefined);
+  if (missing.length)
+    return { id, error: `Missing ${missing.join(", ")}` };
+  const picked = {};
+  for (const field2 of options.textFields)
+    picked[field2] = row[field2];
+  return { id, json: picked };
+}
+function sourceLabel(cwd2, file) {
+  return fileId(cwd2, path106.resolve(cwd2, file));
+}
+function readSource(cwd2, file) {
+  try {
+    return fs94.readFileSync(path106.resolve(cwd2, file), "utf8");
+  } catch (error2) {
+    throw new DecideInputError(`Could not read ${file}: ${error2.message}`);
+  }
+}
+function jsonlItems(cwd2, file, options) {
+  const set3 = { items: [], failures: [] };
+  const label3 = sourceLabel(cwd2, file);
+  readSource(cwd2, file).split(`
+`).forEach((line3, index) => {
+    if (!line3.trim())
+      return;
+    const fallbackId = `${label3}:${index + 1}`;
+    let row;
+    try {
+      row = JSON.parse(line3);
+    } catch {
+      set3.failures.push({ id: fallbackId, error: "Not valid JSON" });
+      return;
+    }
+    const item = rowItem(row, options, fallbackId);
+    if ("error" in item)
+      set3.failures.push(item);
+    else
+      set3.items.push(item);
+  });
+  return set3;
+}
+function parseCsv(text4) {
+  const rows = [];
+  let row = [];
+  let field2 = "";
+  let quoted = false;
+  for (let i = 0;i < text4.length; i += 1) {
+    const char = text4[i];
+    if (quoted) {
+      if (char === '"' && text4[i + 1] === '"') {
+        field2 += '"';
+        i += 1;
+      } else if (char === '"') {
+        quoted = false;
+      } else {
+        field2 += char;
+      }
+    } else if (char === '"' && field2 === "") {
+      quoted = true;
+    } else if (char === ",") {
+      row.push(field2);
+      field2 = "";
+    } else if (char === `
+` || char === "\r") {
+      if (char === "\r" && text4[i + 1] === `
+`)
+        i += 1;
+      row.push(field2);
+      rows.push(row);
+      row = [];
+      field2 = "";
+    } else {
+      field2 += char;
+    }
+  }
+  if (field2 !== "" || row.length > 0) {
+    row.push(field2);
+    rows.push(row);
+  }
+  return rows.filter((cells) => cells.some((cell) => cell !== ""));
+}
+function csvItems(cwd2, file, options) {
+  const set3 = { items: [], failures: [] };
+  const label3 = sourceLabel(cwd2, file);
+  const [header, ...rows] = parseCsv(readSource(cwd2, file).replace(/^/, ""));
+  if (!header)
+    return set3;
+  rows.forEach((cells, index) => {
+    const row = {};
+    header.forEach((name, column) => {
+      row[name] = cells[column] ?? "";
+    });
+    const item = rowItem(row, options, `${label3}:${index + 2}`);
+    if ("error" in item)
+      set3.failures.push(item);
+    else
+      set3.items.push(item);
+  });
+  return set3;
+}
+function readResults(file) {
+  const rows = new Map;
+  if (!fs94.existsSync(file))
+    return rows;
+  for (const line3 of fs94.readFileSync(file, "utf8").split(`
+`)) {
+    if (!line3.trim())
+      continue;
+    try {
+      const row = JSON.parse(line3);
+      if (row && typeof row.id === "string")
+        rows.set(row.id, row);
+    } catch {}
+  }
+  return rows;
+}
+function repairResultsTail(file) {
+  if (!fs94.existsSync(file))
+    return;
+  const text4 = fs94.readFileSync(file, "utf8");
+  if (!text4 || text4.endsWith(`
+`))
+    return;
+  const cut = text4.lastIndexOf(`
+`) + 1;
+  const tail2 = text4.slice(cut);
+  let complete = false;
+  try {
+    const row = JSON.parse(tail2);
+    complete = Boolean(row) && typeof row.id === "string";
+  } catch {
+    complete = false;
+  }
+  if (complete)
+    fs94.appendFileSync(file, `
+`);
+  else
+    fs94.truncateSync(file, Buffer.byteLength(text4.slice(0, cut)));
+}
+function parseWhere(value2) {
+  if (value2 === "failed")
+    return { kind: "failed" };
+  if (value2 === "uncertain")
+    return { kind: "uncertain" };
+  const split2 = value2.indexOf("=");
+  if (split2 > 0 && split2 < value2.length - 1) {
+    return { kind: "answer", question: value2.slice(0, split2), answer: value2.slice(split2 + 1) };
+  }
+  throw new DecideInputError(`--where takes failed, uncertain or <question>=<answer>, not ${value2}`);
+}
+function rowMatches(row, where) {
+  switch (where.kind) {
+    case "failed":
+      return row.error !== undefined;
+    case "uncertain":
+      return row.error === undefined && row.uncertain === true;
+    case "answer":
+      return row.error === undefined && row.answers?.[where.question]?.choice === where.answer;
+  }
+}
+
+// src/cli/decide.ts
+var DEFAULT_OUT = "decide-results.jsonl";
+var MAX_ITEMS_PER_REQUEST = 200;
+var MAX_REQUEST_BYTES = 6 * 1024 * 1024;
+var DEFAULT_CONCURRENCY = 4;
+var MAX_CONCURRENCY = 16;
+var SUMMARY_UNCERTAIN_IDS = 20;
+var SUMMARY_FAILED = 10;
+var STOP_STATUSES = new Set([401, 402, 403, 404]);
+var OPTIONS2 = [
+  { key: "questions", names: ["--questions", "-q"], kind: "value" },
+  { key: "items", names: ["--items"], kind: "value", multiple: true },
+  { key: "jsonl", names: ["--jsonl"], kind: "value", multiple: true },
+  { key: "csv", names: ["--csv"], kind: "value", multiple: true },
+  { key: "idField", names: ["--id-field"], kind: "value" },
+  { key: "textField", names: ["--text-field"], kind: "value", multiple: true },
+  { key: "model", names: ["--model"], kind: "value" },
+  { key: "minConfidence", names: ["--min-confidence"], kind: "value" },
+  { key: "out", names: ["--out", "-o"], kind: "value" },
+  { key: "resume", names: ["--resume"], kind: "boolean" },
+  { key: "overwrite", names: ["--overwrite"], kind: "boolean" },
+  { key: "selectFrom", names: ["--select-from"], kind: "value" },
+  { key: "where", names: ["--where"], kind: "value" },
+  { key: "agent", names: ["--agent"], kind: "value" },
+  { key: "concurrency", names: ["--concurrency"], kind: "value" },
+  { key: "help", names: ["--help", "-h"], kind: "boolean" }
+];
+var DECIDE_USAGE = `Usage: brainbase decide --questions <file.json> <sources...> [options]
+
+Answer the same decision-model questions over many items. Items are read on
+this machine and never pass through your agent's context.
+
+Sources (at least one):
+  <path>...                 files, or directories (every file under them)
+  --items <glob>            files matching a glob; quote it ('docs/**/*.md')
+  --jsonl <file>            one item per line
+  --csv <file>              one item per row; the first row names the fields
+  --id-field <name>         JSONL/CSV field holding each item's id
+                            (default: id when present, else file:line)
+  --text-field <name>       field to judge; repeat for several (a row
+                            missing any of them fails without being sent)
+                            (default: the whole row)
+
+Questions:
+  --questions, -q <file>    JSON object of System One questions, e.g.
+                            {"team": {"type": "choice", "instructions": "Which team?",
+                                      "criteria": {"billing": "...", "infra": "..."}}}
+  --model <slug>            jev, kev-4b, clef, clef-flash or gpt-6-luna
+                            (default: the server's default)
+  --min-confidence <0-1>    mark answers below this confidence as uncertain
+
+Results:
+  --out, -o <file>          one JSON line per item (default: ${DEFAULT_OUT})
+  --resume                  skip ids already answered in --out; append the rest
+  --overwrite               replace an existing --out
+  --select-from <file>      only items whose row in this earlier results file
+  --where <filter>            matches: failed, uncertain or <question>=<answer>
+
+Other:
+  --agent <id>              agent to bill outside a Brainbase task
+                            (default: this folder's linked agent)
+  --concurrency <n>         requests in flight, 1-${MAX_CONCURRENCY} (default: ${DEFAULT_CONCURRENCY})
+
+Prints one JSON summary on stdout. Exits 0 when every item was sent (check
+counts.failed), 1 when the run stopped early (rerun with --resume), 2 for a
+usage error.
+`;
+function usageError2(stderr, message3) {
+  stderr(`brainbase decide: ${message3}
+Run \`brainbase decide --help\` for usage.
+`);
+  return 2;
+}
+function readQuestions(cwd2, file) {
+  let parsed;
+  try {
+    parsed = JSON.parse(fs95.readFileSync(path107.resolve(cwd2, file), "utf8"));
+  } catch (error2) {
+    throw new DecideInputError(`Could not read questions from ${file}: ${error2.message}`);
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed) || !Object.keys(parsed).length) {
+    throw new DecideInputError(`${file} must hold a JSON object of questions`);
+  }
+  return parsed;
+}
+function mergeSets(sets) {
+  const merged = { items: [], failures: [] };
+  for (const set3 of sets) {
+    appendAll(merged.items, set3.items);
+    appendAll(merged.failures, set3.failures);
+  }
+  const seen = new Set;
+  for (const { id } of [...merged.items, ...merged.failures]) {
+    if (seen.has(id)) {
+      throw new DecideInputError(`Two items share the id ${JSON.stringify(id)}; pass --id-field naming a unique field`);
+    }
+    seen.add(id);
+  }
+  return merged;
+}
+function chunk2(items, failures) {
+  const chunks = [];
+  let current = [];
+  let bytes = 0;
+  for (const item of items) {
+    const size2 = Buffer.byteLength(JSON.stringify(item));
+    if (size2 > MAX_REQUEST_BYTES) {
+      failures.push({ id: item.id, error: "Larger than one request can carry (6 MB)" });
+      continue;
+    }
+    if (current.length === MAX_ITEMS_PER_REQUEST || bytes + size2 > MAX_REQUEST_BYTES) {
+      chunks.push(current);
+      current = [];
+      bytes = 0;
+    }
+    current.push(item);
+    bytes += size2;
+  }
+  if (current.length)
+    chunks.push(current);
+  return chunks;
+}
+
+class Tally {
+  done = 0;
+  uncertainIds = [];
+  failed = [];
+  answers = {};
+  credits = 0;
+  model = null;
+  addRow(row) {
+    if (row.error !== undefined) {
+      this.failed.push({ id: row.id, reason: row.error });
+      return;
+    }
+    this.done += 1;
+    if (row.uncertain)
+      this.uncertainIds.push(row.id);
+  }
+  addResponse(response) {
+    this.model ??= response.model;
+    this.credits += response.credits;
+    for (const [question, counts] of Object.entries(response.answers)) {
+      const into = this.answers[question] ??= {};
+      for (const [answer, count] of Object.entries(counts)) {
+        into[answer] = (into[answer] ?? 0) + count;
+      }
+    }
+  }
+}
+async function runDecide(cwd2, argv, deps = {}) {
+  const stdout = deps.stdout ?? ((text4) => void process.stdout.write(text4));
+  const stderr = deps.stderr ?? ((text4) => void process.stderr.write(text4));
+  const started = Date.now();
+  let parsed;
+  try {
+    parsed = parseArgv(argv, OPTIONS2);
+  } catch (error2) {
+    if (error2 instanceof ArgvParseError)
+      return usageError2(stderr, error2.message);
+    throw error2;
+  }
+  if (booleanOption(parsed, "help")) {
+    stdout(DECIDE_USAGE);
+    return 0;
+  }
+  const questionsFile = stringOption(parsed, "questions");
+  if (!questionsFile)
+    return usageError2(stderr, "--questions <file.json> is required");
+  const paths = parsed.positionals;
+  const globs = stringOptions(parsed, "items");
+  const jsonlFiles = stringOptions(parsed, "jsonl");
+  const csvFiles = stringOptions(parsed, "csv");
+  if (!paths.length && !globs.length && !jsonlFiles.length && !csvFiles.length) {
+    return usageError2(stderr, "name at least one source: paths, --items, --jsonl or --csv");
+  }
+  const minConfidenceRaw = stringOption(parsed, "minConfidence");
+  const minConfidence = minConfidenceRaw === undefined ? undefined : Number(minConfidenceRaw);
+  if (minConfidence !== undefined && !(minConfidence >= 0 && minConfidence <= 1)) {
+    return usageError2(stderr, "--min-confidence takes a number from 0 to 1");
+  }
+  const concurrencyRaw = stringOption(parsed, "concurrency");
+  const concurrency = concurrencyRaw === undefined ? DEFAULT_CONCURRENCY : Number(concurrencyRaw);
+  if (!Number.isInteger(concurrency) || concurrency < 1 || concurrency > MAX_CONCURRENCY) {
+    return usageError2(stderr, `--concurrency takes a whole number from 1 to ${MAX_CONCURRENCY}`);
+  }
+  const selectFrom = stringOption(parsed, "selectFrom");
+  const whereRaw = stringOption(parsed, "where");
+  if (Boolean(selectFrom) !== Boolean(whereRaw)) {
+    return usageError2(stderr, "--select-from and --where go together");
+  }
+  const resume = booleanOption(parsed, "resume");
+  const overwrite = booleanOption(parsed, "overwrite");
+  if (resume && overwrite)
+    return usageError2(stderr, "--resume and --overwrite cannot be combined");
+  const outArg = stringOption(parsed, "out") ?? DEFAULT_OUT;
+  const outPath = path107.resolve(cwd2, outArg);
+  let questions;
+  let set3;
+  let skipped = 0;
+  try {
+    questions = readQuestions(cwd2, questionsFile);
+    const rowOptions = {
+      idField: stringOption(parsed, "idField"),
+      textFields: stringOptions(parsed, "textField")
+    };
+    set3 = mergeSets([
+      readFileItems(cwd2, fileItems(cwd2, paths, globs)),
+      ...jsonlFiles.map((file) => jsonlItems(cwd2, file, rowOptions)),
+      ...csvFiles.map((file) => csvItems(cwd2, file, rowOptions))
+    ]);
+    if (selectFrom && whereRaw) {
+      const where = parseWhere(whereRaw);
+      const earlier = path107.resolve(cwd2, selectFrom);
+      if (!fs95.existsSync(earlier))
+        throw new DecideInputError(`No such results file: ${selectFrom}`);
+      const rows = readResults(earlier);
+      const keep = (id) => {
+        const row = rows.get(id);
+        return row !== undefined && rowMatches(row, where);
+      };
+      set3 = { items: set3.items.filter((item) => keep(item.id)), failures: set3.failures.filter((f4) => keep(f4.id)) };
+    }
+    const outHasRows = fs95.existsSync(outPath) && fs95.statSync(outPath).size > 0;
+    if (outHasRows && !resume && !overwrite) {
+      throw new DecideInputError(`${outArg} already has results; pass --resume to continue it or --overwrite to replace it`);
+    }
+    if (resume) {
+      const answered = new Set([...readResults(outPath).values()].filter((row) => row.error === undefined).map((row) => row.id));
+      const before2 = set3.items.length + set3.failures.length;
+      set3 = {
+        items: set3.items.filter((item) => !answered.has(item.id)),
+        failures: set3.failures.filter((failure) => !answered.has(failure.id))
+      };
+      skipped = before2 - set3.items.length - set3.failures.length;
+    }
+  } catch (error2) {
+    if (error2 instanceof DecideInputError)
+      return usageError2(stderr, error2.message);
+    throw error2;
+  }
+  fs95.mkdirSync(path107.dirname(outPath), { recursive: true });
+  if (resume)
+    repairResultsTail(outPath);
+  else
+    fs95.writeFileSync(outPath, "");
+  const append = (rows) => {
+    if (rows.length)
+      fs95.appendFileSync(outPath, rows.map((row) => JSON.stringify(row)).join(`
+`) + `
+`);
+  };
+  const tally = new Tally;
+  const localFailures = [...set3.failures];
+  const chunks = chunk2(set3.items, localFailures);
+  const localRows = localFailures.map((failure) => ({ id: failure.id, error: failure.error }));
+  append(localRows);
+  localRows.forEach((row) => tally.addRow(row));
+  const total = set3.items.length + set3.failures.length;
+  let stopError;
+  let unsent = 0;
+  let next = 0;
+  if (chunks.length) {
+    let credential;
+    try {
+      credential = await resolveDecideCredential(cwd2, stringOption(parsed, "agent"));
+    } catch (error2) {
+      stopError = error2.message;
+    }
+    if (credential) {
+      const modelFlag = stringOption(parsed, "model");
+      const body = (items) => ({
+        questions,
+        items,
+        ...modelFlag ? { model: modelFlag } : {},
+        ...minConfidence !== undefined ? { min_confidence: minConfidence } : {},
+        output: "full"
+      });
+      const progress2 = process.stderr.isTTY && !deps.stderr;
+      let answeredSoFar = localRows.length;
+      let replacement;
+      const send = async (items) => {
+        const used = credential;
+        try {
+          return await postDecide(used, body(items), deps);
+        } catch (error2) {
+          if (!(error2 instanceof DecideHttpError && error2.status === 401 && used.source === "agent_key")) {
+            throw error2;
+          }
+          replacement ??= replaceAgentKey(used).then((fresh2) => credential = fresh2);
+          const fresh = await replacement;
+          if (fresh.key === used.key)
+            throw error2;
+          return postDecide(fresh, body(items), deps);
+        }
+      };
+      const worker = async () => {
+        while (next < chunks.length && stopError === undefined) {
+          const items = chunks[next++];
+          let rows;
+          try {
+            const response = await send(items);
+            tally.addResponse(response);
+            rows = response.rows;
+          } catch (error2) {
+            const message3 = error2.message;
+            const refusal = error2 instanceof DecideHttpError;
+            if (!refusal || error2.status !== null && STOP_STATUSES.has(error2.status)) {
+              stopError ??= refusal && error2.status === 404 ? `/v1/decide is not available on ${credential.base} (${message3})` : message3;
+              unsent += items.length;
+              continue;
+            }
+            rows = items.map((item) => ({ id: item.id, error: `Request failed: ${message3}` }));
+          }
+          append(rows);
+          rows.forEach((row) => tally.addRow(row));
+          answeredSoFar += rows.length;
+          if (progress2)
+            process.stderr.write(`\rdecided ${answeredSoFar}/${total}`);
+        }
+      };
+      await Promise.all(Array.from({ length: Math.min(concurrency, chunks.length) }, worker));
+      if (progress2)
+        process.stderr.write(`
+`);
+    }
+    unsent += chunks.slice(next).reduce((count, items) => count + items.length, 0);
+  }
+  const summary = {
+    status: stopError === undefined ? "done" : "stopped",
+    model: tally.model ?? stringOption(parsed, "model") ?? null,
+    counts: {
+      total,
+      done: tally.done,
+      uncertain: tally.uncertainIds.length,
+      failed: tally.failed.length,
+      skipped,
+      unsent
+    },
+    answers: tally.answers,
+    uncertain_ids: tally.uncertainIds.slice(0, SUMMARY_UNCERTAIN_IDS),
+    failed: tally.failed.slice(0, SUMMARY_FAILED),
+    credits: tally.credits,
+    elapsed_ms: Date.now() - started,
+    out: path107.relative(cwd2, outPath) || outArg,
+    ...stopError !== undefined ? { error: `${stopError}. Answers so far are in ${outArg}; rerun with --resume to continue.` } : {}
+  };
+  stdout(JSON.stringify(summary, null, 2) + `
+`);
+  return stopError === undefined ? 0 : 1;
+}
+
 // src/ui/console-streams.ts
 import { format as format3 } from "node:util";
 function routeConsoleThroughStreams() {
@@ -97601,6 +99370,7 @@ var COMMANDS3 = [
   "status",
   "mcp",
   "integrations",
+  "decide",
   "run",
   "help",
   "version"
@@ -97611,213 +99381,218 @@ var SUBCOMMAND_OWNED_FLAGS = {
 function help() {
   const out = [];
   out.push("");
-  out.push(`  ${brandTint("◆")}  ${import_picocolors81.default.bold("brainbase")}  ${import_picocolors81.default.dim(`v${VERSION}`)}`);
-  out.push(`     ${import_picocolors81.default.dim("connect your local agent to the brainbase platform")}`);
+  out.push(`  ${brandTint("◆")}  ${import_picocolors84.default.bold("brainbase")}  ${import_picocolors84.default.dim(`v${VERSION}`)}`);
+  out.push(`     ${import_picocolors84.default.dim("connect your local agent to the brainbase platform")}`);
   out.push("");
   out.push(divider("USAGE"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.bold("brainbase")} ${import_picocolors81.default.dim("<command> [options]")}`);
+  out.push(`  ${import_picocolors84.default.bold("brainbase")} ${import_picocolors84.default.dim("<command> [options]")}`);
   out.push("");
   out.push(divider("AUTH"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("login")}     ${import_picocolors81.default.dim("  open the web app and connect this device")}`);
-  out.push(`  ${import_picocolors81.default.cyan("logout")}    ${import_picocolors81.default.dim("  clear the local session")}`);
-  out.push(`  ${import_picocolors81.default.cyan("whoami")} ${import_picocolors81.default.dim("[--json]")} ${import_picocolors81.default.dim(" show which credential is in use and what it covers")}`);
+  out.push(`  ${import_picocolors84.default.cyan("login")}     ${import_picocolors84.default.dim("  open the web app and connect this device")}`);
+  out.push(`  ${import_picocolors84.default.cyan("logout")}    ${import_picocolors84.default.dim("  clear the local session")}`);
+  out.push(`  ${import_picocolors84.default.cyan("whoami")} ${import_picocolors84.default.dim("[--json]")} ${import_picocolors84.default.dim(" show which credential is in use and what it covers")}`);
   out.push("");
   out.push(divider("DISCOVERY"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("team list")}                  ${import_picocolors81.default.dim("show the teams you can create agents in")}`);
-  out.push(`  ${import_picocolors81.default.cyan("member ls")}                  ${import_picocolors81.default.dim("show the people in an organization, with the emails interface access takes")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent list")}                 ${import_picocolors81.default.dim("show a team's agents and their ids")}`);
+  out.push(`  ${import_picocolors84.default.cyan("team list")}                  ${import_picocolors84.default.dim("show the teams you can create agents in")}`);
+  out.push(`  ${import_picocolors84.default.cyan("member ls")}                  ${import_picocolors84.default.dim("show the people in an organization, with the emails interface access takes")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent list")}                 ${import_picocolors84.default.dim("show a team's agents and their ids")}`);
   out.push("");
   out.push(divider("LINKED AGENT"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("agent init")}                 ${import_picocolors81.default.dim("write a starter brainbase.agent.yaml here — offline, no login needed")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent create")}               ${import_picocolors81.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent pull")} ${import_picocolors81.default.dim("[<id>]")}          ${import_picocolors81.default.dim("bring cloud changes into this folder (--force to override; --run-entrypoint to also execute the agent entrypoint; --link to link first)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent push")}                 ${import_picocolors81.default.dim("send local changes to the cloud (--force to overwrite cloud-side conflicts with local)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent delete")} ${import_picocolors81.default.dim("<id>")}          ${import_picocolors81.default.dim("permanently delete a cloud agent and every task it has run")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent unpack")}               ${import_picocolors81.default.dim("install the claimed agent into a harness layout")}`);
-  out.push(`  ${import_picocolors81.default.cyan("link")}                       ${import_picocolors81.default.dim("attach this folder to an existing agent")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent status")}               ${import_picocolors81.default.dim("show what would pull and what would push")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent connections")}          ${import_picocolors81.default.dim("show which integrations this agent is wired to (--json for CI)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent connect")} ${import_picocolors81.default.dim("<name>")}       ${import_picocolors81.default.dim("connect chat, slack, meeting, github, linear or phone")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent disconnect")} ${import_picocolors81.default.dim("<name>")}    ${import_picocolors81.default.dim("disable or disconnect an agent surface")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent surface")} ${import_picocolors81.default.dim("<name>")}       ${import_picocolors81.default.dim("status, settings and setup for all six surfaces (--help)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent versions")}             ${import_picocolors81.default.dim("saved versions: list, show, diff, label, restore, pin and unpin (`agent versions --help`)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent eval")} ${import_picocolors81.default.dim("<list|runs>")}     ${import_picocolors81.default.dim("read eval definitions and judge verdicts (`agent eval --help`)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent env")}                  ${import_picocolors81.default.dim("print export lines for `eval $(brainbase agent env)`")}`);
-  out.push(`  ${import_picocolors81.default.cyan("run")} ${import_picocolors81.default.dim("<cmd> [args...]")}         ${import_picocolors81.default.dim("run <cmd> with secrets.env loaded into env")}`);
-  out.push(`  ${import_picocolors81.default.cyan("status")}                     ${import_picocolors81.default.dim("show what this folder is linked to")}`);
-  out.push(`  ${import_picocolors81.default.cyan("unlink")}                     ${import_picocolors81.default.dim("disconnect this folder")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent init")}                 ${import_picocolors84.default.dim("write a starter brainbase.agent.yaml here — offline, no login needed")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent create")}               ${import_picocolors84.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent pull")} ${import_picocolors84.default.dim("[<id>]")}          ${import_picocolors84.default.dim("bring cloud changes into this folder (--force to override; --run-entrypoint to also execute the agent entrypoint; --link to link first)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent push")}                 ${import_picocolors84.default.dim("send local changes to the cloud (--force to overwrite cloud-side conflicts with local)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent delete")} ${import_picocolors84.default.dim("<id>")}          ${import_picocolors84.default.dim("permanently delete a cloud agent and every task it has run")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent unpack")}               ${import_picocolors84.default.dim("install the claimed agent into a harness layout")}`);
+  out.push(`  ${import_picocolors84.default.cyan("link")}                       ${import_picocolors84.default.dim("attach this folder to an existing agent")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent status")}               ${import_picocolors84.default.dim("show what would pull and what would push")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent connections")}          ${import_picocolors84.default.dim("show which integrations this agent is wired to (--json for CI)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent connect")} ${import_picocolors84.default.dim("<name>")}       ${import_picocolors84.default.dim("connect chat, slack, meeting, github, linear or phone")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent disconnect")} ${import_picocolors84.default.dim("<name>")}    ${import_picocolors84.default.dim("disable or disconnect an agent surface")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent surface")} ${import_picocolors84.default.dim("<name>")}       ${import_picocolors84.default.dim("status, settings and setup for all six surfaces (--help)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent versions")}             ${import_picocolors84.default.dim("saved versions: list, show, diff, label, restore, pin and unpin (`agent versions --help`)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent eval")} ${import_picocolors84.default.dim("<list|runs>")}     ${import_picocolors84.default.dim("read eval definitions and judge verdicts (`agent eval --help`)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent env")}                  ${import_picocolors84.default.dim("print export lines for `eval $(brainbase agent env)`")}`);
+  out.push(`  ${import_picocolors84.default.cyan("run")} ${import_picocolors84.default.dim("<cmd> [args...]")}         ${import_picocolors84.default.dim("run <cmd> with secrets.env loaded into env")}`);
+  out.push(`  ${import_picocolors84.default.cyan("status")}                     ${import_picocolors84.default.dim("show what this folder is linked to")}`);
+  out.push(`  ${import_picocolors84.default.cyan("unlink")}                     ${import_picocolors84.default.dim("disconnect this folder")}`);
   out.push("");
   out.push(divider("TASKS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("task create")} ${import_picocolors81.default.dim("--message <text>")}   ${import_picocolors81.default.dim("create a managed task and start its first run (--wait to block on it; --interface <id> for a build conversation)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task list")}                       ${import_picocolors81.default.dim("recent tasks you can reach (--metadata k=v to filter by label; --interface <id> for its build conversations)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task get")} ${import_picocolors81.default.dim("<task-id>")}              ${import_picocolors81.default.dim("one task: status, agent, machine, eval verdicts")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task logs")} ${import_picocolors81.default.dim("<task-id> [--follow]")}  ${import_picocolors81.default.dim("one line per event in the task's transcript, or tail it live")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task send")} ${import_picocolors81.default.dim("<task-id> <message>")}  ${import_picocolors81.default.dim("send a follow-up during execution, or queue it for the next turn")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task stop")} ${import_picocolors81.default.dim("<task-id>")}             ${import_picocolors81.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task update")} ${import_picocolors81.default.dim("<task-id>")}           ${import_picocolors81.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task delete")} ${import_picocolors81.default.dim("<task-id>")}           ${import_picocolors81.default.dim("permanently delete a stopped task and tear down its sandbox")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task create")} ${import_picocolors84.default.dim("--message <text>")}   ${import_picocolors84.default.dim("create a managed task and start its first run (--wait to block on it; --interface <id> for a build conversation)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task list")}                       ${import_picocolors84.default.dim("recent tasks you can reach (--metadata k=v to filter by label; --interface <id> for its build conversations)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task get")} ${import_picocolors84.default.dim("<task-id>")}              ${import_picocolors84.default.dim("one task: status, agent, machine, eval verdicts")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task logs")} ${import_picocolors84.default.dim("<task-id> [--follow]")}  ${import_picocolors84.default.dim("one line per event in the task's transcript, or tail it live")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task send")} ${import_picocolors84.default.dim("<task-id> <message>")}  ${import_picocolors84.default.dim("send a follow-up during execution, or queue it for the next turn")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task stop")} ${import_picocolors84.default.dim("<task-id>")}             ${import_picocolors84.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task update")} ${import_picocolors84.default.dim("<task-id>")}           ${import_picocolors84.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task delete")} ${import_picocolors84.default.dim("<task-id>")}           ${import_picocolors84.default.dim("permanently delete a stopped task and tear down its sandbox")}`);
   out.push("");
   out.push(divider("INTERFACES"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("interface ls")}                    ${import_picocolors81.default.dim("dashboards you can see (--agent to narrow)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface create")} ${import_picocolors81.default.dim("--name <n>")}     ${import_picocolors81.default.dim("create one on an agent, with who can open it")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface build")} ${import_picocolors81.default.dim('<id> "<ask>"')}    ${import_picocolors81.default.dim("describe a change; the agent builds it while you watch")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface publish")} ${import_picocolors81.default.dim("<id>")}          ${import_picocolors81.default.dim("make the newest succeeded build live")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface rollback")} ${import_picocolors81.default.dim("<id>")}         ${import_picocolors81.default.dim("republish an earlier release under a new id (--release <id>)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface access")} ${import_picocolors81.default.dim("<id>")}           ${import_picocolors81.default.dim("show or set who can open it")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface --help")}                ${import_picocolors81.default.dim("every interface subcommand")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface ls")}                    ${import_picocolors84.default.dim("dashboards you can see (--agent to narrow)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface create")} ${import_picocolors84.default.dim("--name <n>")}     ${import_picocolors84.default.dim("create one on an agent, with who can open it")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface build")} ${import_picocolors84.default.dim('<id> "<ask>"')}    ${import_picocolors84.default.dim("describe a change; the agent builds it while you watch")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface publish")} ${import_picocolors84.default.dim("<id>")}          ${import_picocolors84.default.dim("make the newest succeeded build live")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface rollback")} ${import_picocolors84.default.dim("<id>")}         ${import_picocolors84.default.dim("republish an earlier release under a new id (--release <id>)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface access")} ${import_picocolors84.default.dim("<id>")}           ${import_picocolors84.default.dim("show or set who can open it")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface --help")}                ${import_picocolors84.default.dim("every interface subcommand")}`);
   out.push("");
   out.push(divider("SANDBOXES"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("machine ls")} ${import_picocolors81.default.dim("[--all]")}            ${import_picocolors81.default.dim("list your sandboxes — live ones only unless --all")}`);
-  out.push(`  ${import_picocolors81.default.cyan("machine rm")} ${import_picocolors81.default.dim("<id>")}               ${import_picocolors81.default.dim("tear a sandbox down (it bills until you do)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("machine ls")} ${import_picocolors84.default.dim("[--all]")}            ${import_picocolors84.default.dim("list your sandboxes — live ones only unless --all")}`);
+  out.push(`  ${import_picocolors84.default.cyan("machine rm")} ${import_picocolors84.default.dim("<id>")}               ${import_picocolors84.default.dim("tear a sandbox down (it bills until you do)")}`);
   out.push("");
   out.push(divider("BENCHMARKS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("benchmark list")}                    ${import_picocolors81.default.dim("list benchmarks for the linked agent")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark init")} ${import_picocolors81.default.dim("[directory]")}        ${import_picocolors81.default.dim("scaffold a local benchmark")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark create")} ${import_picocolors81.default.dim("[path|-]")}         ${import_picocolors81.default.dim("create a benchmark draft")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark run")} ${import_picocolors81.default.dim("<benchmark> --yes")}   ${import_picocolors81.default.dim("plan and start a benchmark run")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark results")} ${import_picocolors81.default.dim("<run>")}           ${import_picocolors81.default.dim("inspect normalized benchmark results")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark list")}                    ${import_picocolors84.default.dim("list benchmarks for the linked agent")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark init")} ${import_picocolors84.default.dim("[directory]")}        ${import_picocolors84.default.dim("scaffold a local benchmark")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark create")} ${import_picocolors84.default.dim("[path|-]")}         ${import_picocolors84.default.dim("create a benchmark draft")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark run")} ${import_picocolors84.default.dim("<benchmark> --yes")}   ${import_picocolors84.default.dim("plan and start a benchmark run")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark results")} ${import_picocolors84.default.dim("<run>")}           ${import_picocolors84.default.dim("inspect normalized benchmark results")}`);
   out.push("");
   out.push(divider("BENCHMARK RUNTIME"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("benchmark hydrate")} ${import_picocolors81.default.dim("--spec <path> --result <path> --json")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark evaluate")} ${import_picocolors81.default.dim("--spec <path> --result <path> --json")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark capabilities")} ${import_picocolors81.default.dim("--json")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark hydrate")} ${import_picocolors84.default.dim("--spec <path> --result <path> --json")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark evaluate")} ${import_picocolors84.default.dim("--spec <path> --result <path> --json")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark capabilities")} ${import_picocolors84.default.dim("--json")}`);
   out.push("");
   out.push(divider("ORCHESTRATIONS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("orchestration init")}             ${import_picocolors81.default.dim("write a starter brainbase-orchestration.yaml here (offline, no login)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration create")}           ${import_picocolors81.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration list")}             ${import_picocolors81.default.dim("list orchestrations under a team")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration pull")} ${import_picocolors81.default.dim("<id>")}        ${import_picocolors81.default.dim("recursively fetch an orchestration + every member agent")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration push")}             ${import_picocolors81.default.dim("recursively push each member, then update the graph")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration status")}           ${import_picocolors81.default.dim("show what would push and what would pull")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration delete")} ${import_picocolors81.default.dim("<id>")}      ${import_picocolors81.default.dim("permanently delete an orchestration graph (member agents are kept)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration init")}             ${import_picocolors84.default.dim("write a starter brainbase-orchestration.yaml here (offline, no login)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration create")}           ${import_picocolors84.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration from-agent")}       ${import_picocolors84.default.dim("turn an existing agent into an orchestration")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration list")}             ${import_picocolors84.default.dim("list orchestrations under a team")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration pull")} ${import_picocolors84.default.dim("<id>")}        ${import_picocolors84.default.dim("recursively fetch an orchestration + every member agent")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration push")}             ${import_picocolors84.default.dim("recursively push each member, then update the graph")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration status")}           ${import_picocolors84.default.dim("show what would push and what would pull")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration delete")} ${import_picocolors84.default.dim("<id>")}      ${import_picocolors84.default.dim("permanently delete an orchestration graph (member agents are kept)")}`);
   out.push("");
   out.push(divider("TEMPLATES"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("template pack")}                       ${import_picocolors81.default.dim("bundle the current agent into a template")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template publish")}                    ${import_picocolors81.default.dim("upload a template to the registry")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template search")} ${import_picocolors81.default.dim("[query]")}             ${import_picocolors81.default.dim("search the registry")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template info")}    ${import_picocolors81.default.dim("<creator/slug>")}     ${import_picocolors81.default.dim("show registry details for a template")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template onboard")} ${import_picocolors81.default.dim("<creator/slug>")}     ${import_picocolors81.default.dim("install (or refresh) a template")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template list")}                       ${import_picocolors81.default.dim("show installed templates")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template remove")}  ${import_picocolors81.default.dim("<creator/slug>")}     ${import_picocolors81.default.dim("uninstall a template")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template pack")}                       ${import_picocolors84.default.dim("bundle the current agent into a template")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template publish")}                    ${import_picocolors84.default.dim("upload a template to the registry")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template search")} ${import_picocolors84.default.dim("[query]")}             ${import_picocolors84.default.dim("search the registry")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template info")}    ${import_picocolors84.default.dim("<creator/slug>")}     ${import_picocolors84.default.dim("show registry details for a template")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template onboard")} ${import_picocolors84.default.dim("<creator/slug>")}     ${import_picocolors84.default.dim("install (or refresh) a template")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template list")}                       ${import_picocolors84.default.dim("show installed templates")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template remove")}  ${import_picocolors84.default.dim("<creator/slug>")}     ${import_picocolors84.default.dim("uninstall a template")}`);
   out.push("");
   out.push(divider("SKILLS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("skill add")} ${import_picocolors81.default.dim("<source>")}                  ${import_picocolors81.default.dim("install a skill (github / git / brainbase)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill list")}                            ${import_picocolors81.default.dim("show locally installed skills + their source")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill update")} ${import_picocolors81.default.dim("<slug>")}                  ${import_picocolors81.default.dim("re-fetch a skill from its recorded source")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill remove")} ${import_picocolors81.default.dim("<slug>")}                  ${import_picocolors81.default.dim("uninstall a skill")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill search")} ${import_picocolors81.default.dim("[query]")}                 ${import_picocolors81.default.dim("search the brainbase skill registry")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill info")} ${import_picocolors81.default.dim("<creator/slug>")}            ${import_picocolors81.default.dim("show registry details for a skill")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill publish")} ${import_picocolors81.default.dim("[dir]")}                  ${import_picocolors81.default.dim("publish a SKILL.md folder (defaults to .)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill add")} ${import_picocolors84.default.dim("<source>")}                  ${import_picocolors84.default.dim("install a skill (github / git / brainbase)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill list")}                            ${import_picocolors84.default.dim("show locally installed skills + their source")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill update")} ${import_picocolors84.default.dim("<slug>")}                  ${import_picocolors84.default.dim("re-fetch a skill from its recorded source")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill remove")} ${import_picocolors84.default.dim("<slug>")}                  ${import_picocolors84.default.dim("uninstall a skill")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill search")} ${import_picocolors84.default.dim("[query]")}                 ${import_picocolors84.default.dim("search the brainbase skill registry")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill info")} ${import_picocolors84.default.dim("<creator/slug>")}            ${import_picocolors84.default.dim("show registry details for a skill")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill publish")} ${import_picocolors84.default.dim("[dir]")}                  ${import_picocolors84.default.dim("publish a SKILL.md folder (defaults to .)")}`);
   out.push("");
   out.push(divider("CLI TOKENS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("token create")}                        ${import_picocolors81.default.dim("issue a long-lived CLI key for CI / scripts")}`);
-  out.push(`  ${import_picocolors81.default.cyan("token list")}                          ${import_picocolors81.default.dim("show your tokens")}`);
-  out.push(`  ${import_picocolors81.default.cyan("token rename")} ${import_picocolors81.default.dim("<id>")}                  ${import_picocolors81.default.dim("relabel a token")}`);
-  out.push(`  ${import_picocolors81.default.cyan("token revoke")} ${import_picocolors81.default.dim("<id>")}                  ${import_picocolors81.default.dim("revoke a token")}`);
+  out.push(`  ${import_picocolors84.default.cyan("token create")}                        ${import_picocolors84.default.dim("issue a long-lived CLI key for CI / scripts")}`);
+  out.push(`  ${import_picocolors84.default.cyan("token list")}                          ${import_picocolors84.default.dim("show your tokens")}`);
+  out.push(`  ${import_picocolors84.default.cyan("token rename")} ${import_picocolors84.default.dim("<id>")}                  ${import_picocolors84.default.dim("relabel a token")}`);
+  out.push(`  ${import_picocolors84.default.cyan("token revoke")} ${import_picocolors84.default.dim("<id>")}                  ${import_picocolors84.default.dim("revoke a token")}`);
+  out.push("");
+  out.push(divider("DECISIONS"));
+  out.push("");
+  out.push(`  ${import_picocolors84.default.cyan("decide")} ${import_picocolors84.default.dim("-q <questions.json> <sources...>")}  ${import_picocolors84.default.dim("answer decision-model questions over many files or rows in a few requests (`decide --help`)")}`);
   out.push("");
   out.push(divider("MCP"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("mcp check")} ${import_picocolors81.default.dim("[--json]")}              ${import_picocolors81.default.dim("verify MCP server connectivity through the brainbase proxy (runs at sandbox bootstrap)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("mcp list")} ${import_picocolors81.default.dim("[--json]")}               ${import_picocolors81.default.dim("show configured servers with OAuth state and expiry")}`);
-  out.push(`  ${import_picocolors81.default.cyan("mcp connect")} ${import_picocolors81.default.dim("<name>")}              ${import_picocolors81.default.dim("authorize an OAuth-backed server: prints a single-use link, opens it, waits for approval")}`);
+  out.push(`  ${import_picocolors84.default.cyan("mcp check")} ${import_picocolors84.default.dim("[--json]")}              ${import_picocolors84.default.dim("verify MCP server connectivity through the brainbase proxy (runs at sandbox bootstrap)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("mcp list")} ${import_picocolors84.default.dim("[--json]")}               ${import_picocolors84.default.dim("show configured servers with OAuth state and expiry")}`);
+  out.push(`  ${import_picocolors84.default.cyan("mcp connect")} ${import_picocolors84.default.dim("<name>")}              ${import_picocolors84.default.dim("authorize an OAuth-backed server: prints a single-use link, opens it, waits for approval")}`);
   out.push("");
   out.push(divider("INTEGRATIONS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("integrations list")}                 ${import_picocolors81.default.dim("show the agent's Pipedream apps, accounts and app-level permission")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations search")} ${import_picocolors81.default.dim("<query>")}       ${import_picocolors81.default.dim("find apps in the Pipedream catalog")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations actions")} ${import_picocolors81.default.dim("<app>")}        ${import_picocolors81.default.dim("list an app's actions and whether each is allowed")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations add")} ${import_picocolors81.default.dim("<app>")}            ${import_picocolors81.default.dim("install an app; one that needs an account runs connect")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations connect")} ${import_picocolors81.default.dim("<app>")}        ${import_picocolors81.default.dim("open Pipedream's connect page for the app and wait for the account")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations disconnect")} ${import_picocolors81.default.dim("<app>")}     ${import_picocolors81.default.dim("delete the app's connected account")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations remove")} ${import_picocolors81.default.dim("<app>")}         ${import_picocolors81.default.dim("uninstall an app that needs no account")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations allow|ask|deny")} ${import_picocolors81.default.dim("<app>[.<action>]")} ${import_picocolors81.default.dim("set the permission for an app or one of its actions")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations context create")} ${import_picocolors81.default.dim("--application <name>")} ${import_picocolors81.default.dim("let a program outside Brainbase (the SDK) use the agent's integrations; prints a renewal handle once")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations context end")} ${import_picocolors81.default.dim("<context-id>")}  ${import_picocolors81.default.dim("end a standalone integration context now")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations list")}                 ${import_picocolors84.default.dim("show the agent's Pipedream apps, accounts and app-level permission")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations search")} ${import_picocolors84.default.dim("<query>")}       ${import_picocolors84.default.dim("find apps in the Pipedream catalog")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations actions")} ${import_picocolors84.default.dim("<app>")}        ${import_picocolors84.default.dim("list an app's actions and whether each is allowed")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations add")} ${import_picocolors84.default.dim("<app>")}            ${import_picocolors84.default.dim("install an app; one that needs an account runs connect")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations connect")} ${import_picocolors84.default.dim("<app>")}        ${import_picocolors84.default.dim("open Pipedream's connect page for the app and wait for the account")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations disconnect")} ${import_picocolors84.default.dim("<app>")}     ${import_picocolors84.default.dim("delete the app's connected account")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations remove")} ${import_picocolors84.default.dim("<app>")}         ${import_picocolors84.default.dim("uninstall an app that needs no account")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations allow|ask|deny")} ${import_picocolors84.default.dim("<app>[.<action>]")} ${import_picocolors84.default.dim("set the permission for an app or one of its actions")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations context create")} ${import_picocolors84.default.dim("--application <name>")} ${import_picocolors84.default.dim("let a program outside Brainbase (the SDK) use the agent's integrations; prints a renewal handle once")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations context end")} ${import_picocolors84.default.dim("<context-id>")}  ${import_picocolors84.default.dim("end a standalone integration context now")}`);
   out.push("");
   out.push(divider("FLAGS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.dim("--harness <id>")}     force harness for onboard / sync (e.g. claude-code)`);
-  out.push(`  ${import_picocolors81.default.dim("--scope <s>")}        force scope: global | project`);
-  out.push(`  ${import_picocolors81.default.dim("--yes, -y")}          skip confirmations / auto-overwrite`);
+  out.push(`  ${import_picocolors84.default.dim("--harness <id>")}     force harness for onboard / sync (e.g. claude-code)`);
+  out.push(`  ${import_picocolors84.default.dim("--scope <s>")}        force scope: global | project`);
+  out.push(`  ${import_picocolors84.default.dim("--yes, -y")}          skip confirmations / auto-overwrite`);
   out.push(`  ${" ".repeat("--yes, -y".length)}          required for destructive commands with no terminal (pipes, CI)`);
-  out.push(`  ${import_picocolors81.default.dim("--agent <id>")}       for link/task create/mcp list/mcp connect/integrations: use this agent id explicitly instead of the linked folder's (task list: filter to it)`);
-  out.push(`  ${import_picocolors81.default.dim("--message <text>")}   for task create: required first user message`);
-  out.push(`  ${import_picocolors81.default.dim("--title <text>")}     for task create: optional task title; for task update: the new title`);
-  out.push(`  ${import_picocolors81.default.dim("--clear-title")}      for task update: remove the title (automatic titling may name it again later)`);
-  out.push(`  ${import_picocolors81.default.dim("--metadata k=v")}     for task create: label the task; for task list: only tasks with this label; for task update: set one label, keeping the others (all repeatable)`);
-  out.push(`  ${import_picocolors81.default.dim("--unset-metadata <k>")} for task update: remove one label (repeatable)`);
-  out.push(`  ${import_picocolors81.default.dim("--clear-metadata")}   for task update: remove every label; with --metadata, keep only those given`);
-  out.push(`  ${import_picocolors81.default.dim("--model <id>")}       for task create: optional model override; for task update: switch the model the task's next turn runs on (the running turn keeps its model)`);
-  out.push(`  ${import_picocolors81.default.dim("--clear-model")}      for task update: go back to the agent's default model from the next turn`);
-  out.push(`  ${import_picocolors81.default.dim("--version <v>")}      for task create: run a saved version of the agent (12, v12 or a version id)`);
-  out.push(`  ${import_picocolors81.default.dim("--wait")}             for task create: block until the task finishes; exit 1 unless it succeeded`);
-  out.push(`  ${import_picocolors81.default.dim("--timeout <secs>")}   for task create --wait: give up after <secs> and exit 1`);
-  out.push(`  ${import_picocolors81.default.dim("--limit <n>")}        for task list (1-200), task logs (events to print; with --follow, the first page size) and machine ls`);
-  out.push(`  ${import_picocolors81.default.dim("--follow, -f")}       for task logs: stay attached and print events as they land`);
-  out.push(`  ${import_picocolors81.default.dim("--org <id-or-slug>")} pick the organization (team/agent list, agent create, orchestration create/list)`);
-  out.push(`  ${import_picocolors81.default.dim("--team <id>")}        pick the team, same commands (works without --org)`);
-  out.push(`  ${import_picocolors81.default.dim("--all-teams")}        for agent list: every team in the org (the default with no terminal)`);
-  out.push(`  ${import_picocolors81.default.dim("--json")}             machine-readable output for supported commands`);
-  out.push(`  ${import_picocolors81.default.dim("--no-tracking")}      for link / agent pull --link: skip routing LLM traffic through brainbase`);
-  out.push(`  ${import_picocolors81.default.dim("--link")}             for agent pull: link this folder to the agent first, as \`brainbase link --agent <id> --yes\` would, in one process`);
-  out.push(`  ${import_picocolors81.default.dim("--track")}            for agent create: enable tracking non-interactively (off without a TTY)`);
-  out.push(`  ${import_picocolors81.default.dim("--shell <sh|fish>")}  for agent env: pick output format (auto-detected from $SHELL)`);
-  out.push(`  ${import_picocolors81.default.dim("--bot-token <t>")}    for agent connect slack (or BRAINBASE_SLACK_BOT_TOKEN, or stdin)`);
-  out.push(`  ${import_picocolors81.default.dim("--signing-secret <s>")} for agent connect slack (or BRAINBASE_SLACK_SIGNING_SECRET, or stdin)`);
-  out.push(`  ${import_picocolors81.default.dim("--bot-name <name>")}  for agent connect meeting: the bot's display name`);
-  out.push(`  ${import_picocolors81.default.dim("--app-id <id> / --app-name <name>")}  optional Slack app identity`);
-  out.push(`  ${import_picocolors81.default.dim("--bot-image-url <url>")}  optional meeting bot image`);
-  out.push(`  ${import_picocolors81.default.dim("--full")}             for agent/orchestration init: write a commented template covering every block`);
-  out.push(`  ${import_picocolors81.default.dim("--minimal")}          for agent init: write the starter manifest (the default)`);
-  out.push(`  ${import_picocolors81.default.dim("--all")}              for template list: include installs from other folders; for machine ls: include torn-down machines`);
-  out.push(`  ${import_picocolors81.default.dim("--web <url>")}        for login: web app URL (default https://app.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors81.default.dim("--no-open")}          for mcp/integrations connect: print the link without opening a browser (implied with no terminal)`);
-  out.push(`  ${import_picocolors81.default.dim("--no-wait")}          for mcp/integrations connect: print the link and exit instead of waiting`);
-  out.push(`  ${import_picocolors81.default.dim("--account <id>")}     for integrations disconnect: which account, when the app has more than one`);
-  out.push(`  ${import_picocolors81.default.dim("--application <name>")} for integrations context create: names the program the context is for`);
-  out.push(`  ${import_picocolors81.default.dim("--max-lifetime <dur>")} for integrations context create: when the context ends at the latest, 60s-30d (default 7d)`);
-  out.push(`  ${import_picocolors81.default.dim("--reason <text>")}    for integrations context end: recorded with the context`);
+  out.push(`  ${import_picocolors84.default.dim("--agent <id>")}       for link/task create/mcp list/mcp connect/integrations: use this agent id explicitly instead of the linked folder's (task list: filter to it)`);
+  out.push(`  ${import_picocolors84.default.dim("--message <text>")}   for task create: required first user message`);
+  out.push(`  ${import_picocolors84.default.dim("--title <text>")}     for task create: optional task title; for task update: the new title`);
+  out.push(`  ${import_picocolors84.default.dim("--clear-title")}      for task update: remove the title (automatic titling may name it again later)`);
+  out.push(`  ${import_picocolors84.default.dim("--metadata k=v")}     for task create: label the task; for task list: only tasks with this label; for task update: set one label, keeping the others (all repeatable)`);
+  out.push(`  ${import_picocolors84.default.dim("--unset-metadata <k>")} for task update: remove one label (repeatable)`);
+  out.push(`  ${import_picocolors84.default.dim("--clear-metadata")}   for task update: remove every label; with --metadata, keep only those given`);
+  out.push(`  ${import_picocolors84.default.dim("--model <id>")}       for task create: optional model override; for task update: switch the model the task's next turn runs on (the running turn keeps its model)`);
+  out.push(`  ${import_picocolors84.default.dim("--clear-model")}      for task update: go back to the agent's default model from the next turn`);
+  out.push(`  ${import_picocolors84.default.dim("--version <v>")}      for task create: run a saved version of the agent (12, v12 or a version id)`);
+  out.push(`  ${import_picocolors84.default.dim("--wait")}             for task create: block until the task finishes; exit 1 unless it succeeded`);
+  out.push(`  ${import_picocolors84.default.dim("--timeout <secs>")}   for task create --wait: give up after <secs> and exit 1`);
+  out.push(`  ${import_picocolors84.default.dim("--limit <n>")}        for task list (1-200), task logs (events to print; with --follow, the first page size) and machine ls`);
+  out.push(`  ${import_picocolors84.default.dim("--follow, -f")}       for task logs: stay attached and print events as they land`);
+  out.push(`  ${import_picocolors84.default.dim("--org <id-or-slug>")} pick the organization (team/agent list, agent create, orchestration create/list)`);
+  out.push(`  ${import_picocolors84.default.dim("--team <id>")}        pick the team, same commands (works without --org)`);
+  out.push(`  ${import_picocolors84.default.dim("--all-teams")}        for agent list: every team in the org (the default with no terminal)`);
+  out.push(`  ${import_picocolors84.default.dim("--json")}             machine-readable output for supported commands`);
+  out.push(`  ${import_picocolors84.default.dim("--no-tracking")}      for link / agent pull --link: skip routing LLM traffic through brainbase`);
+  out.push(`  ${import_picocolors84.default.dim("--link")}             for agent pull: link this folder to the agent first, as \`brainbase link --agent <id> --yes\` would, in one process`);
+  out.push(`  ${import_picocolors84.default.dim("--track")}            for agent create: enable tracking non-interactively (off without a TTY)`);
+  out.push(`  ${import_picocolors84.default.dim("--shell <sh|fish>")}  for agent env: pick output format (auto-detected from $SHELL)`);
+  out.push(`  ${import_picocolors84.default.dim("--bot-token <t>")}    for agent connect slack (or BRAINBASE_SLACK_BOT_TOKEN, or stdin)`);
+  out.push(`  ${import_picocolors84.default.dim("--signing-secret <s>")} for agent connect slack (or BRAINBASE_SLACK_SIGNING_SECRET, or stdin)`);
+  out.push(`  ${import_picocolors84.default.dim("--bot-name <name>")}  for agent connect meeting: the bot's display name`);
+  out.push(`  ${import_picocolors84.default.dim("--app-id <id> / --app-name <name>")}  optional Slack app identity`);
+  out.push(`  ${import_picocolors84.default.dim("--bot-image-url <url>")}  optional meeting bot image`);
+  out.push(`  ${import_picocolors84.default.dim("--full")}             for agent/orchestration init: write a commented template covering every block`);
+  out.push(`  ${import_picocolors84.default.dim("--minimal")}          for agent init: write the starter manifest (the default)`);
+  out.push(`  ${import_picocolors84.default.dim("--all")}              for template list: include installs from other folders; for machine ls: include torn-down machines`);
+  out.push(`  ${import_picocolors84.default.dim("--web <url>")}        for login: web app URL (default https://app.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors84.default.dim("--no-open")}          for mcp/integrations connect: print the link without opening a browser (implied with no terminal)`);
+  out.push(`  ${import_picocolors84.default.dim("--no-wait")}          for mcp/integrations connect: print the link and exit instead of waiting`);
+  out.push(`  ${import_picocolors84.default.dim("--account <id>")}     for integrations disconnect: which account, when the app has more than one`);
+  out.push(`  ${import_picocolors84.default.dim("--application <name>")} for integrations context create: names the program the context is for`);
+  out.push(`  ${import_picocolors84.default.dim("--max-lifetime <dur>")} for integrations context create: when the context ends at the latest, 60s-30d (default 7d)`);
+  out.push(`  ${import_picocolors84.default.dim("--reason <text>")}    for integrations context end: recorded with the context`);
   out.push("");
   out.push(divider("ENV"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_HOME")}         override the local config dir (default ~/.brainbase)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_DEBUG")}        print full stack traces on error (any value; unset to disable)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_WEB_URL")}      override the web app URL used by login, console links and integrations`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_CONTROL_PLANE_URL")} override the MAS host (/v2/cli; task and interface commands use /v2/tasks and /v2/interfaces)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_API_URL")}      legacy KLS host override (uses /api/cli; proxy/registry fallback)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_PROXY_URL")}    override the model-proxy URL used by harness traffic (default https://api.v1.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_REGISTRY_URL")} override the registry API URL (default https://api.v1.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_TOKEN")}        long-lived CLI PAT; outranks the login session and the PAT saved in token.json`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_SKIP_AUTH")}    bypass the auth gate for development`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_NON_INTERACTIVE")} force non-interactive mode — skip/auto-default prompts (CI & agents)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_RUN_ENTRYPOINT")} =1 → agent pull executes the agent entrypoint (sandbox boots; or pass --run-entrypoint)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_HOME")}         override the local config dir (default ~/.brainbase)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_DEBUG")}        print full stack traces on error (any value; unset to disable)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_WEB_URL")}      override the web app URL used by login, console links and integrations`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_CONTROL_PLANE_URL")} override the MAS host (/v2/cli; task and interface commands use /v2/tasks and /v2/interfaces)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_API_URL")}      legacy KLS host override (uses /api/cli; proxy/registry fallback)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_PROXY_URL")}    override the model-proxy URL used by harness traffic (default https://api.v1.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_REGISTRY_URL")} override the registry API URL (default https://api.v1.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_TOKEN")}        long-lived CLI PAT; outranks the login session and the PAT saved in token.json`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_SKIP_AUTH")}    bypass the auth gate for development`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_NON_INTERACTIVE")} force non-interactive mode — skip/auto-default prompts (CI & agents)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_RUN_ENTRYPOINT")} =1 → agent pull executes the agent entrypoint (sandbox boots; or pass --run-entrypoint)`);
   out.push("");
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_MEMORY_MCP_URL")}        override the built-in memory MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_BROWSER_MCP_URL")}       override the built-in browser MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_SLACK_MCP_URL")}         override the built-in Slack MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_MEETING_MCP_URL")}       override the built-in meeting MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_GITHUB_MCP_URL")}        override the built-in GitHub MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_LINEAR_MCP_URL")}        override the built-in Linear MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_ORCHESTRATION_MCP_URL")} override the built-in orchestration MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_MEMORY_MCP_URL")}        override the built-in memory MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_BROWSER_MCP_URL")}       override the built-in browser MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_SLACK_MCP_URL")}         override the built-in Slack MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_MEETING_MCP_URL")}       override the built-in meeting MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_GITHUB_MCP_URL")}        override the built-in GitHub MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_LINEAR_MCP_URL")}        override the built-in Linear MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_ORCHESTRATION_MCP_URL")} override the built-in orchestration MCP host`);
   out.push("");
   out.push(divider("HARNESSES"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.dim("•")} ${import_picocolors81.default.bold("claude-code")}  ${import_picocolors81.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
-  out.push(`  ${import_picocolors81.default.dim("•")} ${import_picocolors81.default.bold("codex")}        ${import_picocolors81.default.dim("skills, mcps, commands, playbooks, instructions, files")}`);
-  out.push(`  ${import_picocolors81.default.dim("•")} ${import_picocolors81.default.bold("kafka")}        ${import_picocolors81.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors84.default.dim("•")} ${import_picocolors84.default.bold("claude-code")}  ${import_picocolors84.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors84.default.dim("•")} ${import_picocolors84.default.bold("codex")}        ${import_picocolors84.default.dim("skills, mcps, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors84.default.dim("•")} ${import_picocolors84.default.bold("kafka")}        ${import_picocolors84.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
   out.push("");
   console.log(out.join(`
 `));
@@ -97886,7 +99661,7 @@ function takeFlagOnce(args, names) {
     return best.joinedValue;
   }
   const v3 = args[best.index + 1];
-  if (v3 && !v3.startsWith("-")) {
+  if (v3 !== undefined && !v3.startsWith("-")) {
     args.splice(best.index, 2);
     return v3;
   }
@@ -97975,10 +99750,10 @@ async function requireAuth(cmd) {
   if (storedPatFor(status.session))
     return;
   console.error("");
-  console.error(`  ${brandTint("◆")}  ${import_picocolors81.default.bold("brainbase")}`);
+  console.error(`  ${brandTint("◆")}  ${import_picocolors84.default.bold("brainbase")}`);
   console.error("");
-  console.error(`  ${import_picocolors81.default.red("✗")}  You need to sign in to use ${import_picocolors81.default.bold("brainbase " + cmd)}.`);
-  console.error(`     ${import_picocolors81.default.dim(noUsableCredentialMessage())}`);
+  console.error(`  ${import_picocolors84.default.red("✗")}  You need to sign in to use ${import_picocolors84.default.bold("brainbase " + cmd)}.`);
+  console.error(`     ${import_picocolors84.default.dim(noUsableCredentialMessage())}`);
   console.error("");
   process14.exit(1);
 }
@@ -97988,7 +99763,7 @@ async function main() {
   const rawCwd = process14.cwd();
   const cwd2 = (() => {
     try {
-      return fs94.realpathSync(rawCwd);
+      return fs96.realpathSync(rawCwd);
     } catch {
       return rawCwd;
     }
@@ -98005,7 +99780,7 @@ async function main() {
     await runRun(cwd2, argv);
     return;
   }
-  const ownsArgs = new Set(["task", "benchmark", "interface", "interfaces"]);
+  const ownsArgs = new Set(["task", "benchmark", "interface", "interfaces", "decide"]);
   if (cmd === "agent")
     argv.splice(0, argv.length, ...routeAgentSurfaceArgs(argv));
   const sharedArgs = ownsArgs.has(cmd) || cmd === "agent" && ["versions", "surface", "connect", "disconnect", "connections"].includes(argv[0] ?? "") ? [] : argv;
@@ -98242,6 +100017,10 @@ async function main() {
         process14.exitCode = code;
         break;
       }
+      case "decide": {
+        process14.exitCode = await runDecide(cwd2, argv);
+        break;
+      }
       case "integration":
       case "integrations": {
         const sub = argv.shift();
@@ -98264,10 +100043,10 @@ ${didYouMean(cmd, COMMANDS3, "brainbase")}`);
   } catch (err) {
     const message3 = sanitizeLines(err.message).join(`
 `);
-    console.error(import_picocolors81.default.red(`
+    console.error(import_picocolors84.default.red(`
 ${message3}`));
     if (err instanceof ApiError && err.status === 401 && !err.message.includes("brainbase login")) {
-      console.error(`  Run ${import_picocolors81.default.cyan("brainbase login")} to connect this device.`);
+      console.error(`  Run ${import_picocolors84.default.cyan("brainbase login")} to connect this device.`);
     }
     if (process14.env.BRAINBASE_DEBUG)
       console.error(err.stack);