@brainbase-labs/cli 0.55.0 → 0.57.0

package/dist/index.js

@@ -35182,7 +35182,7 @@ var require_dist2 = __commonJS((exports, module) => {
 });
 
 // src/index.ts
-var import_picocolors81 = __toESM(require_picocolors(), 1);
+var import_picocolors84 = __toESM(require_picocolors(), 1);
 import process14 from "node:process";
 import fs96 from "node:fs";
 
@@ -36091,7 +36091,7 @@ function padStart(s, n) {
 // package.json
 var package_default = {
   name: "@brainbase-labs/cli",
-  version: "0.55.0",
+  version: "0.57.0",
   description: "Pack, share, and install agent templates across harnesses (Claude Code, Codex, ...).",
   type: "module",
   bin: {
@@ -55200,6 +55200,9 @@ function masControlPlaneBaseUrl(session) {
   const controlPlane = process.env.BRAINBASE_CONTROL_PLANE_URL?.trim();
   return normalizeControlPlaneUrl(controlPlane || session?.control_plane_url);
 }
+function masEndpointUrl(pathname, session) {
+  return `${masControlPlaneBaseUrl(session)}${pathname}`;
+}
 function apiBase(session) {
   const suffix = usesLegacyControlPlane() ? "/api/cli" : "/v2/cli";
   return `${controlPlaneBaseUrl(session)}${suffix}`;
@@ -55737,6 +55740,23 @@ var masApi = {
   createDesign(agentId, input) {
     return masResourceRequest(`/agents/${encodeURIComponent(agentId)}/designs`, { method: "POST", body: JSON.stringify(input) });
   },
+  createOrchestrationFromAgent(input) {
+    return masResourceRequest("/orchestrations", {
+      method: "POST",
+      body: JSON.stringify({
+        group_id: input.group_id,
+        name: input.name,
+        description: input.description,
+        members: [input.agent_id]
+      })
+    });
+  },
+  async getAgentSummary(agentId) {
+    const body = await masReadRequest(`/agents/${encodeURIComponent(agentId)}`);
+    const { name } = masNamedRecord(body, "agent", "title");
+    const description = body.description;
+    return { name, description: typeof description === "string" ? description : "" };
+  },
   async deleteDesign(agentId, designId) {
     await masResourceRequest(`/agents/${encodeURIComponent(agentId)}/designs/${encodeURIComponent(designId)}`, { method: "DELETE" });
   },
@@ -55972,6 +55992,13 @@ var api = {
   getOrchestration(orchId) {
     return request(`/orchestrations/${encodeURIComponent(orchId)}`);
   },
+  fireOrchestrationTrigger(orchId, triggerId, payload, idempotencyKey) {
+    return masResourceRequest(`/orchestrations/${encodeURIComponent(orchId)}/triggers/${encodeURIComponent(triggerId)}/fire`, {
+      method: "POST",
+      headers: idempotencyKey ? { "Idempotency-Key": idempotencyKey } : {},
+      body: JSON.stringify(payload)
+    });
+  },
   getOrchestrationManifest(orchId) {
     return request(`/orchestrations/${encodeURIComponent(orchId)}/manifest`);
   },
@@ -82464,6 +82491,7 @@ var OrchestrationSyncStateSchema = exports_external.object({
   members: exports_external.array(SyncedMemberSchema),
   edges: exports_external.array(SyncedEdgeSchema),
   triggers: exports_external.array(SyncedScheduleTriggerSchema).optional(),
+  webhook_triggers: exports_external.array(SyncedScheduleTriggerSchema).optional(),
   decisions: exports_external.array(SyncedDecisionSchema).optional(),
   meta: SyncedOrchestrationMetaSchema.optional()
 });
@@ -82849,7 +82877,7 @@ function printHelp3() {
 }
 
 // src/cli/orchestration.ts
-var import_picocolors59 = __toESM(require_picocolors(), 1);
+var import_picocolors62 = __toESM(require_picocolors(), 1);
 
 // src/cli/orchestration-pull.ts
 import path98 from "node:path";
@@ -82896,16 +82924,29 @@ var ScheduleTriggerSchema = exports_external.object({
   config: exports_external.record(exports_external.unknown()).optional(),
   to: exports_external.array(TriggerEdgeSchema).default([])
 });
+var WebhookTriggerSchema = exports_external.object({
+  type: exports_external.literal("webhook"),
+  node_id: exports_external.string().regex(UUID_RE, "must be a UUID"),
+  is_active: exports_external.boolean().optional(),
+  public: exports_external.boolean().optional(),
+  config: exports_external.record(exports_external.unknown()).optional(),
+  to: exports_external.array(TriggerEdgeSchema).default([])
+});
+var WRITABLE_TRIGGER_TYPES = new Set(["schedule", "webhook"]);
 var ReadOnlyTriggerSchema = exports_external.object({
-  type: exports_external.string().refine((value2) => value2 !== "schedule", {
-    message: "schedule triggers must use a UUID node_id"
+  type: exports_external.string().refine((value2) => !WRITABLE_TRIGGER_TYPES.has(value2), {
+    message: "schedule and webhook triggers must use a UUID node_id"
   }),
   node_id: exports_external.string().min(1),
   is_active: exports_external.boolean().optional(),
   config: exports_external.record(exports_external.unknown()).optional(),
   to: exports_external.array(TriggerEdgeSchema).default([])
 });
-var TriggerSchema = exports_external.union([ScheduleTriggerSchema, ReadOnlyTriggerSchema]);
+var TriggerSchema = exports_external.union([
+  ScheduleTriggerSchema,
+  WebhookTriggerSchema,
+  ReadOnlyTriggerSchema
+]);
 var DECISION_MODELS = [
   "jev",
   "kev-4b",
@@ -82982,8 +83023,8 @@ function writeOrchManifest(cwd2, manifest) {
   doc2.commentBefore = ` brainbase-orchestration.yaml — declarative orchestration manifest.
 ` + ` Committed to source control. Edit by hand, then
 ` + " `brainbase orchestration push`. Member agents live under ./agents/." + `
- Schedule triggers are writable. App/Pipedream triggers are preserved
-` + " as read-only context and ignored by `orchestration push`.";
+ Schedule and webhook triggers are writable. App/Pipedream triggers are
+` + " preserved as read-only context and ignored by `orchestration push`.";
   fs83.writeFileSync(orchManifestPath(cwd2), String(doc2), "utf8");
 }
 function memberDir(cwd2, slug) {
@@ -83376,6 +83417,88 @@ function syncedScheduleTriggers(triggers) {
     hash: scheduleTriggerHash(t)
   }));
 }
+var WEBHOOK_TRIGGER = "webhook-trigger";
+function webhookPublicFromConfig(config2) {
+  const value2 = config2?.public_url;
+  return value2 === undefined || value2 === true;
+}
+function webhookTriggerHash(t) {
+  const canonical = {
+    is_active: t.is_active,
+    public: t.public,
+    targets: t.targets.map((e2) => ({
+      agent: e2.agent,
+      description: e2.description,
+      payload_schema: e2.payload_schema
+    })).sort((a3, b4) => stableJson(a3) < stableJson(b4) ? -1 : 1)
+  };
+  return crypto6.createHash("sha256").update(stableJson(canonical)).digest("hex");
+}
+function webhookTriggerLabel(t) {
+  const access = t.public ? "public URL" : "members only";
+  const state = t.is_active ? "active" : "inactive";
+  const targets = t.targets.length ? ` -> ${t.targets.map((e2) => e2.agent).join(", ")}` : "";
+  return `webhook ${t.node_id} (${access}, ${state})${targets}`;
+}
+function cloudWebhookTriggers(cloud, slugForAgent) {
+  return (cloud.triggers ?? []).filter((t) => t.trigger_type === "webhook").map((t) => ({
+    node_id: canonicalUuid2(t.node_id),
+    is_active: t.is_active ?? false,
+    public: typeof t.public === "boolean" ? t.public : webhookPublicFromConfig(t.config),
+    targets: t.edges.map((e2) => ({
+      agent: slugForAgent(e2.to_agent_id, e2.to_slug ?? e2.to_agent_id),
+      description: e2.description ?? "",
+      payload_schema: e2.payload_schema ?? {}
+    })),
+    ...t.id ? { id: t.id } : {},
+    ...t.fire_path ? { fire_path: t.fire_path } : {}
+  }));
+}
+function manifestWebhookTriggers(manifest) {
+  return (manifest?.triggers ?? []).filter((t) => t.type === "webhook").map((t) => ({
+    node_id: canonicalUuid2(t.node_id),
+    is_active: t.is_active ?? false,
+    public: "public" in t && typeof t.public === "boolean" ? t.public : t.config ? webhookPublicFromConfig(t.config) : false,
+    targets: t.to.map((e2) => ({
+      agent: e2.agent,
+      description: e2.description ?? "",
+      payload_schema: e2.payload_schema ?? {}
+    }))
+  }));
+}
+function decideWebhookTriggerReconcile(input) {
+  const rows = threeWayDiff({
+    local: input.local.map((t) => ({
+      type: WEBHOOK_TRIGGER,
+      slug: t.node_id,
+      hash: webhookTriggerHash(t)
+    })),
+    lock: (input.baseline ?? []).map((t) => ({
+      type: WEBHOOK_TRIGGER,
+      slug: canonicalUuid2(t.node_id),
+      hash: t.hash,
+      installedPaths: []
+    })),
+    cloud: input.cloud.map((t) => ({
+      type: WEBHOOK_TRIGGER,
+      slug: t.node_id,
+      hash: webhookTriggerHash(t),
+      files: []
+    }))
+  });
+  return decideCollectionReconcile({
+    rows,
+    type: WEBHOOK_TRIGGER,
+    claims: input.local.length > 0,
+    force: input.force
+  });
+}
+function syncedWebhookTriggers(triggers) {
+  return triggers.map((t) => ({
+    node_id: t.node_id,
+    hash: webhookTriggerHash(t)
+  }));
+}
 var DECISION = "decision";
 function manifestDecisions(manifest, slugToAgentId) {
   const target = (t) => {
@@ -83570,11 +83693,15 @@ function syncedOrchestrationMeta(cloud) {
 function triggersForManifest(triggers, slugFor) {
   return triggers.map((trigger) => {
     const schedule = trigger.trigger_type === "schedule";
-    const config2 = schedule ? scheduleTriggerConfigForManifest(trigger.config) : trigger.config;
+    const webhook = trigger.trigger_type === "webhook";
+    const config2 = schedule ? scheduleTriggerConfigForManifest(trigger.config) : webhook ? undefined : trigger.config;
     return {
       type: trigger.trigger_type,
       node_id: trigger.node_id,
       is_active: trigger.is_active,
+      ...webhook ? {
+        public: typeof trigger.public === "boolean" ? trigger.public : webhookPublicFromConfig(trigger.config)
+      } : {},
       ...config2 && Object.keys(config2).length ? { config: config2 } : {},
       to: trigger.edges.map((edge) => ({
         agent: slugFor(edge.to_agent_id),
@@ -83790,6 +83917,7 @@ async function runOrchestrationPull(cwd2, args) {
       payload_schema: e2.payload_schema ?? {}
     })),
     triggers: syncedScheduleTriggers(cloudScheduleTriggers(cloud, (agentId, fallback) => slugFor(agentId) || fallback)),
+    webhook_triggers: syncedWebhookTriggers(cloudWebhookTriggers(cloud, (agentId, fallback) => slugFor(agentId) || fallback)),
     ...decisionBaseline ? { decisions: decisionBaseline } : {},
     meta: syncedOrchestrationMeta(cloud)
   });
@@ -83909,12 +84037,25 @@ function buildOrchestrationGraphPayload(manifest, slugToAgentId) {
     }
   }
   const scheduleTriggers = (manifest.triggers ?? []).filter((t) => t.type === "schedule");
+  const webhookTriggers = manifestWebhookTriggers(manifest);
   const seenTriggerNodeIds = new Set;
+  for (const t of webhookTriggers) {
+    const nodeId = canonicalUuid2(t.node_id);
+    if (seenTriggerNodeIds.has(nodeId)) {
+      throw new Error(`Webhook trigger ${t.node_id} is duplicated.`);
+    }
+    seenTriggerNodeIds.add(nodeId);
+    for (const e2 of t.targets) {
+      if (!memberSlugs.has(e2.agent)) {
+        throw new Error(`Trigger ${t.node_id} points to "${e2.agent}", which isn't in members.`);
+      }
+    }
+  }
   for (const t of scheduleTriggers) {
-    if (seenTriggerNodeIds.has(t.node_id)) {
+    if (seenTriggerNodeIds.has(canonicalUuid2(t.node_id))) {
       throw new Error(`Schedule trigger ${t.node_id} is duplicated.`);
     }
-    seenTriggerNodeIds.add(t.node_id);
+    seenTriggerNodeIds.add(canonicalUuid2(t.node_id));
     const config2 = normalizeScheduleTriggerConfig(t.config);
     const cron = config2.cron_expression;
     if (typeof cron !== "string" || !cron.trim()) {
@@ -83952,6 +84093,17 @@ function buildOrchestrationGraphPayload(manifest, slugToAgentId) {
         description: e2.description ?? "",
         payload_schema: e2.payload_schema ?? {}
       }))
+    })),
+    webhookTriggers: webhookTriggers.map((t) => ({
+      node_id: t.node_id,
+      type: "webhook",
+      is_active: t.is_active,
+      public: t.public,
+      edges: t.targets.map((e2) => ({
+        to_agent_id: slugToAgentId.get(e2.agent),
+        description: e2.description,
+        payload_schema: e2.payload_schema
+      }))
     }))
   };
 }
@@ -84098,6 +84250,20 @@ async function runOrchestrationPush(cwd2, args) {
     const t = triggerByNode.get(nodeId);
     return t ? scheduleTriggerLabel(t) : nodeId;
   };
+  const localWebhooks = manifestWebhookTriggers(manifest);
+  const cloudWebhooks = cloudWebhookTriggers(cloud, slugForAgent);
+  const webhookDecision = decideWebhookTriggerReconcile({
+    local: localWebhooks,
+    cloud: cloudWebhooks,
+    baseline: lock?.webhook_triggers,
+    force: !!args.force
+  });
+  const webhookByNode = new Map([...cloudWebhooks, ...localWebhooks].map((t) => [t.node_id, t]));
+  const webhookLabelFor = (nodeId) => {
+    const t = webhookByNode.get(nodeId);
+    return t ? webhookTriggerLabel(t) : nodeId;
+  };
+  const blockedWebhooks = webhookDecision.kind === "blocked" ? webhookDecision : null;
   const metaDecisions = decideOrchestrationMeta({
     manifest,
     cloud,
@@ -84122,7 +84288,7 @@ async function runOrchestrationPush(cwd2, args) {
     return d3 ? decisionLabel(d3) : id;
   };
   const blockedDecisions = decisionPlan?.kind === "blocked" ? decisionPlan : null;
-  if (blockedTriggers || blockedDecisions || metaConflicts.length > 0) {
+  if (blockedTriggers || blockedWebhooks || blockedDecisions || metaConflicts.length > 0) {
     const pullTargets = [];
     const forceEffects = [];
     if (blockedTriggers) {
@@ -84141,6 +84307,22 @@ async function runOrchestrationPush(cwd2, args) {
       pullTargets.push(`${total} schedule trigger${total === 1 ? "" : "s"}`);
       forceEffects.push("make your local schedule triggers authoritative (deleting the cloud ones above)");
     }
+    if (blockedWebhooks) {
+      const { unseen, cloudModified, staleArchives } = blockedWebhooks;
+      f2.error(unseen.length > 0 ? "Cannot push: the cloud has webhook triggers this folder has never seen." : "Cannot push: webhook triggers changed both locally and in the cloud.");
+      for (const nodeId of unseen) {
+        console.error(`  ${import_picocolors53.default.red("!")} ${import_picocolors53.default.bold(webhookLabelFor(nodeId))} ${import_picocolors53.default.dim("(only in the cloud — pushing would delete it and its URL)")}`);
+      }
+      for (const nodeId of cloudModified) {
+        console.error(`  ${import_picocolors53.default.red("!")} ${import_picocolors53.default.bold(webhookLabelFor(nodeId))} ${import_picocolors53.default.dim("(edited in the cloud — pushing would overwrite that edit)")}`);
+      }
+      for (const nodeId of staleArchives) {
+        console.error(`  ${import_picocolors53.default.red("!")} ${import_picocolors53.default.bold(webhookLabelFor(nodeId))} ${import_picocolors53.default.dim("(deleted here, edited in the cloud since — pushing would delete that edit)")}`);
+      }
+      const total = unseen.length + cloudModified.length + staleArchives.length;
+      pullTargets.push(`${total} webhook trigger${total === 1 ? "" : "s"}`);
+      forceEffects.push("make your local webhook triggers authoritative (deleting or overwriting the cloud ones above)");
+    }
     if (blockedDecisions) {
       const { unseen, cloudModified, staleArchives } = blockedDecisions;
       f2.error(unseen.length > 0 ? "Cannot push: the cloud has decisions this folder has never seen." : "Cannot push: decisions changed both locally and in the cloud.");
@@ -84189,6 +84371,13 @@ async function runOrchestrationPush(cwd2, args) {
     f2.warn(`${cloudTriggers.length} cloud schedule trigger${cloudTriggers.length === 1 ? "" : "s"} ${cloudTriggers.length === 1 ? "is" : "are"} not in ${import_picocolors53.default.bold(ORCH_MANIFEST_FILE)} and will be left untouched. Run ${import_picocolors53.default.cyan("brainbase orchestration pull")} to manage ${cloudTriggers.length === 1 ? "it" : "them"} from here.`);
   }
   const triggerDeletes = triggerDecision.kind === "reconcile" ? triggerDecision.archives : [];
+  const webhookDeletes = webhookDecision.kind === "reconcile" ? webhookDecision.archives : [];
+  const sendWebhooks = webhookDecision.kind === "reconcile" && (localWebhooks.length > 0 || webhookDeletes.length > 0);
+  if (webhookDecision.kind === "skip") {
+    const left = webhookDecision.unseen.length + webhookDecision.cloudModified.length;
+    f2.warn(`${left} cloud webhook trigger${left === 1 ? "" : "s"} ${left === 1 ? "is" : "are"} not in ${import_picocolors53.default.bold(ORCH_MANIFEST_FILE)} and will be left untouched. Run ${import_picocolors53.default.cyan("brainbase orchestration pull")} to manage ${left === 1 ? "it" : "them"} from here.`);
+  }
+  const triggerCount = graph.triggers.length + (sendWebhooks ? graph.webhookTriggers.length : 0);
   const decisionDeletes = decisionPlan?.kind === "reconcile" ? decisionPlan.archives : [];
   const sendDecisions = decisionPlan?.kind === "reconcile" && (localDecisions.length > 0 || decisionDeletes.length > 0);
   if (!cloudDecisionList && localDecisions.length > 0) {
@@ -84212,7 +84401,7 @@ async function runOrchestrationPush(cwd2, args) {
   }
   const plan = [""];
   plan.push(`  ${import_picocolors53.default.bold(link2.name)} ${import_picocolors53.default.dim(`(${link2.orchestration_id})`)}`);
-  plan.push(`  ${import_picocolors53.default.dim(`${manifest.members.length} member${manifest.members.length === 1 ? "" : "s"}, ${manifest.edges.length} edge${manifest.edges.length === 1 ? "" : "s"}, ${graph.triggers.length} trigger${graph.triggers.length === 1 ? "" : "s"}${sendDecisions ? `, ${decisionsPayload.length} decision${decisionsPayload.length === 1 ? "" : "s"}` : ""}`)}`);
+  plan.push(`  ${import_picocolors53.default.dim(`${manifest.members.length} member${manifest.members.length === 1 ? "" : "s"}, ${manifest.edges.length} edge${manifest.edges.length === 1 ? "" : "s"}, ${triggerCount} trigger${triggerCount === 1 ? "" : "s"}${sendDecisions ? `, ${decisionsPayload.length} decision${decisionsPayload.length === 1 ? "" : "s"}` : ""}`)}`);
   plan.push("");
   if (!args.graphOnly) {
     plan.push(`  ${import_picocolors53.default.dim("per-member agent push:")}`);
@@ -84228,6 +84417,13 @@ async function runOrchestrationPush(cwd2, args) {
     }
     plan.push("");
   }
+  if (webhookDeletes.length) {
+    plan.push(`  ${import_picocolors53.default.bold("webhook triggers this push will delete")} ${import_picocolors53.default.dim(`(${webhookDeletes.length})`)}`);
+    for (const nodeId of webhookDeletes) {
+      plan.push(`    ${import_picocolors53.default.yellow("⨯")} ${webhookLabelFor(nodeId)}`);
+    }
+    plan.push("");
+  }
   if (decisionDeletes.length) {
     plan.push(`  ${import_picocolors53.default.bold("decisions this push will delete")} ${import_picocolors53.default.dim(`(${decisionDeletes.length})`)}`);
     for (const id of decisionDeletes) {
@@ -84255,6 +84451,7 @@ async function runOrchestrationPush(cwd2, args) {
   if (!autoProceed(args.yes)) {
     const deletions = [
       ...triggerDeletes.length ? [`${triggerDeletes.length} schedule trigger${triggerDeletes.length === 1 ? "" : "s"}`] : [],
+      ...webhookDeletes.length ? [`${webhookDeletes.length} webhook trigger${webhookDeletes.length === 1 ? "" : "s"}`] : [],
       ...decisionDeletes.length ? [`${decisionDeletes.length} decision${decisionDeletes.length === 1 ? "" : "s"}`] : []
     ];
     const ok = await se({
@@ -84304,7 +84501,8 @@ async function runOrchestrationPush(cwd2, args) {
       ...metaField("credit_limit"),
       members: graph.memberIds,
       edges: graph.edges,
-      triggers: graph.triggers,
+      triggers: sendWebhooks ? [...graph.triggers, ...graph.webhookTriggers] : graph.triggers,
+      ...sendWebhooks ? { replace_webhook_triggers: true } : {},
       ...sendDecisions ? { decisions: decisionsPayload } : {},
       ...lock?.revision != null ? { base_revision: lock.revision } : {}
     });
@@ -84327,6 +84525,7 @@ async function runOrchestrationPush(cwd2, args) {
         payload_schema: e2.payload_schema ?? {}
       })),
       triggers: triggerDecision.kind === "skip" ? lock?.triggers ?? [] : syncedScheduleTriggers(cloudScheduleTriggers(updated, slugForAgent)),
+      webhook_triggers: webhookDecision.kind === "skip" ? lock?.webhook_triggers ?? [] : syncedWebhookTriggers(cloudWebhookTriggers(updated, slugForAgent)),
       ...settledDecisions ? { decisions: syncedDecisions(settledDecisions) } : lock?.decisions ? { decisions: lock.decisions } : {},
       meta: nextOrchestrationMeta({
         applied: updated,
@@ -84359,13 +84558,44 @@ function handleApiError6(err) {
 }
 
 // src/cli/orchestration-status.ts
+var import_picocolors55 = __toESM(require_picocolors(), 1);
+
+// src/core/orchestration-webhooks.ts
 var import_picocolors54 = __toESM(require_picocolors(), 1);
+function webhookEndpointUrl(firePath) {
+  return masEndpointUrl(firePath, readAuth());
+}
+function webhookEndpointLines(triggers, indent = "  ") {
+  return triggers.flatMap((t) => [
+    `${indent}${webhookTriggerLabel(t)}`,
+    t.fire_path ? `${indent}  ${import_picocolors54.default.dim("POST")} ${webhookEndpointUrl(t.fire_path)}` : `${indent}  ${import_picocolors54.default.dim("member endpoint shows once the control plane is updated")}`
+  ]);
+}
+function resolveWebhookTrigger(cloud, ref) {
+  const want = canonicalUuid2(ref.trim());
+  const webhooks = cloudWebhookTriggers(cloud, (_id, fallback) => fallback);
+  const match = webhooks.find((t) => canonicalUuid2(t.node_id) === want || t.id && canonicalUuid2(t.id) === want);
+  if (!match) {
+    const other = (cloud.triggers ?? []).find((t) => canonicalUuid2(t.node_id) === want || t.id && canonicalUuid2(t.id) === want);
+    if (other) {
+      throw new Error(`Trigger ${ref} is a ${other.trigger_type} trigger; only webhook triggers fire this way.`);
+    }
+    const known = webhooks.map((t) => t.node_id);
+    throw new Error(known.length ? `No webhook trigger ${ref} in this orchestration. Its webhook triggers: ${known.join(", ")}.` : `No webhook trigger ${ref}: this orchestration has none.`);
+  }
+  if (!match.id) {
+    throw new Error("This control plane does not return trigger ids yet, so the CLI cannot fire a trigger. Update the server, or use the web app.");
+  }
+  return match;
+}
+
+// src/cli/orchestration-status.ts
 async function runOrchestrationStatus(cwd2) {
   banner("orchestration status — what changed locally, remotely, both");
   const link2 = readOrchLink(cwd2);
   if (!link2) {
     failWarn("This folder is not linked to any orchestration.");
-    f2.info(`Run ${import_picocolors54.default.cyan("brainbase orchestration pull <id>")} first.`);
+    f2.info(`Run ${import_picocolors55.default.cyan("brainbase orchestration pull <id>")} first.`);
     return;
   }
   const localManifest = hasOrchManifest(cwd2) ? readOrchManifest(cwd2) : null;
@@ -84388,8 +84618,8 @@ async function runOrchestrationStatus(cwd2) {
   }
   const lines = [];
   lines.push("");
-  lines.push(`  ${import_picocolors54.default.bold(link2.name)} ${import_picocolors54.default.dim(`(${link2.orchestration_id})`)}`);
-  lines.push(`  ${import_picocolors54.default.dim("revision")}  cloud ${cloud.revision}${lock ? ` · lock ${lock.revision}` : " · never pulled"}`);
+  lines.push(`  ${import_picocolors55.default.bold(link2.name)} ${import_picocolors55.default.dim(`(${link2.orchestration_id})`)}`);
+  lines.push(`  ${import_picocolors55.default.dim("revision")}  cloud ${cloud.revision}${lock ? ` · lock ${lock.revision}` : " · never pulled"}`);
   lines.push("");
   const localSlugByAgentId = new Map;
   for (const m3 of localManifest?.members ?? []) {
@@ -84403,12 +84633,12 @@ async function runOrchestrationStatus(cwd2) {
   const membersAdded = [...localMemberSet].filter((s3) => !cloudMemberSet.has(s3));
   const membersRemoved = [...cloudMemberSet].filter((s3) => !localMemberSet.has(s3));
   if (membersAdded.length || membersRemoved.length) {
-    lines.push(`  ${import_picocolors54.default.bold("members")}`);
+    lines.push(`  ${import_picocolors55.default.bold("members")}`);
     for (const slug of membersAdded) {
-      lines.push(`    ${import_picocolors54.default.yellow("→ push")}  added in yaml: ${import_picocolors54.default.bold(slug)}`);
+      lines.push(`    ${import_picocolors55.default.yellow("→ push")}  added in yaml: ${import_picocolors55.default.bold(slug)}`);
     }
     for (const slug of membersRemoved) {
-      lines.push(`    ${import_picocolors54.default.cyan("← pull")}  added on cloud: ${import_picocolors54.default.bold(slug)}`);
+      lines.push(`    ${import_picocolors55.default.cyan("← pull")}  added on cloud: ${import_picocolors55.default.bold(slug)}`);
     }
     lines.push("");
   }
@@ -84423,11 +84653,11 @@ async function runOrchestrationStatus(cwd2) {
   const edgesAdded = [...localEdges.keys()].filter((k3) => !cloudEdges.has(k3));
   const edgesRemoved = [...cloudEdges.keys()].filter((k3) => !localEdges.has(k3));
   if (edgesAdded.length || edgesRemoved.length) {
-    lines.push(`  ${import_picocolors54.default.bold("edges")}`);
+    lines.push(`  ${import_picocolors55.default.bold("edges")}`);
     for (const k3 of edgesAdded)
-      lines.push(`    ${import_picocolors54.default.yellow("→ push")}  added in yaml: ${k3}`);
+      lines.push(`    ${import_picocolors55.default.yellow("→ push")}  added in yaml: ${k3}`);
     for (const k3 of edgesRemoved)
-      lines.push(`    ${import_picocolors54.default.cyan("← pull")}  added on cloud: ${k3}`);
+      lines.push(`    ${import_picocolors55.default.cyan("← pull")}  added on cloud: ${k3}`);
     lines.push("");
   }
   const metaDecisions = decideOrchestrationMeta({
@@ -84437,17 +84667,17 @@ async function runOrchestrationStatus(cwd2) {
     force: false
   });
   if (metaDecisions.length) {
-    lines.push(`  ${import_picocolors54.default.bold("orchestration metadata")}`);
+    lines.push(`  ${import_picocolors55.default.bold("orchestration metadata")}`);
     for (const m3 of metaDecisions) {
       if (m3.kind === "push") {
-        lines.push(`    ${import_picocolors54.default.yellow("→ push")}  ${import_picocolors54.default.bold(m3.field)}: cloud ${import_picocolors54.default.dim(`"${m3.cloud}"`)} → local ${import_picocolors54.default.dim(`"${m3.local}"`)}`);
+        lines.push(`    ${import_picocolors55.default.yellow("→ push")}  ${import_picocolors55.default.bold(m3.field)}: cloud ${import_picocolors55.default.dim(`"${m3.cloud}"`)} → local ${import_picocolors55.default.dim(`"${m3.local}"`)}`);
       } else if (m3.kind === "keep") {
-        lines.push(`    ${import_picocolors54.default.cyan("← pull")}  ${import_picocolors54.default.bold(m3.field)}: changed in the cloud to ${import_picocolors54.default.dim(`"${m3.cloud}"`)}; push leaves it alone ${import_picocolors54.default.dim(`(yaml still has "${m3.local}")`)}`);
+        lines.push(`    ${import_picocolors55.default.cyan("← pull")}  ${import_picocolors55.default.bold(m3.field)}: changed in the cloud to ${import_picocolors55.default.dim(`"${m3.cloud}"`)}; push leaves it alone ${import_picocolors55.default.dim(`(yaml still has "${m3.local}")`)}`);
       } else {
-        lines.push(`    ${import_picocolors54.default.red("! conflict")}  ${import_picocolors54.default.bold(m3.field)}: local ${import_picocolors54.default.dim(`"${m3.local}"`)} vs cloud ${import_picocolors54.default.dim(`"${m3.cloud}"`)} — push refuses until you pull or ${import_picocolors54.default.cyan("--force")}`);
+        lines.push(`    ${import_picocolors55.default.red("! conflict")}  ${import_picocolors55.default.bold(m3.field)}: local ${import_picocolors55.default.dim(`"${m3.local}"`)} vs cloud ${import_picocolors55.default.dim(`"${m3.cloud}"`)} — push refuses until you pull or ${import_picocolors55.default.cyan("--force")}`);
       }
     }
-    lines.push(`    ${import_picocolors54.default.dim("fields the manifest omits, and fields only the cloud changed, are left alone")}`);
+    lines.push(`    ${import_picocolors55.default.dim("fields the manifest omits, and fields only the cloud changed, are left alone")}`);
     lines.push("");
   }
   const cloudTriggers = cloudScheduleTriggers(cloud, slugForAgent);
@@ -84472,32 +84702,81 @@ async function runOrchestrationStatus(cwd2) {
   const triggersToPull = cloudTriggers.filter((t) => !localNodes.has(t.node_id));
   const triggerDeletes = triggerPlan.kind === "reconcile" ? triggerPlan.archives : [];
   if (triggersToPush.length || triggersToPull.length) {
-    lines.push(`  ${import_picocolors54.default.bold("schedule triggers")}`);
+    lines.push(`  ${import_picocolors55.default.bold("schedule triggers")}`);
     for (const t of triggersToPush) {
-      lines.push(`    ${import_picocolors54.default.yellow("→ push")}  added/changed in yaml: ${scheduleTriggerLabel(t)}`);
+      lines.push(`    ${import_picocolors55.default.yellow("→ push")}  added/changed in yaml: ${scheduleTriggerLabel(t)}`);
     }
     for (const t of triggersToPull) {
       const doomed = triggerDeletes.includes(t.node_id);
-      lines.push(doomed ? `    ${import_picocolors54.default.red("⨯ push deletes")}  ${scheduleTriggerLabel(t)}` : `    ${import_picocolors54.default.cyan("← pull")}  only on cloud: ${scheduleTriggerLabel(t)}`);
+      lines.push(doomed ? `    ${import_picocolors55.default.red("⨯ push deletes")}  ${scheduleTriggerLabel(t)}` : `    ${import_picocolors55.default.cyan("← pull")}  only on cloud: ${scheduleTriggerLabel(t)}`);
     }
     lines.push("");
   }
   if (triggerPlan.kind === "blocked") {
-    lines.push(`  ${import_picocolors54.default.bold(import_picocolors54.default.red("schedule triggers: push blocked"))}`);
+    lines.push(`  ${import_picocolors55.default.bold(import_picocolors55.default.red("schedule triggers: push blocked"))}`);
     for (const nodeId of triggerPlan.unseen) {
-      lines.push(`    ${import_picocolors54.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors54.default.dim("— only in the cloud; pushing would delete it")}`);
+      lines.push(`    ${import_picocolors55.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors55.default.dim("— only in the cloud; pushing would delete it")}`);
     }
     for (const nodeId of triggerPlan.cloudModified) {
-      lines.push(`    ${import_picocolors54.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors54.default.dim("— edited in the cloud; pushing would overwrite that edit")}`);
+      lines.push(`    ${import_picocolors55.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors55.default.dim("— edited in the cloud; pushing would overwrite that edit")}`);
     }
     for (const nodeId of triggerPlan.staleArchives) {
-      lines.push(`    ${import_picocolors54.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors54.default.dim("— deleted here, edited in the cloud since; pushing would delete that edit")}`);
+      lines.push(`    ${import_picocolors55.default.red("!")} ${triggerLabel(nodeId)} ${import_picocolors55.default.dim("— deleted here, edited in the cloud since; pushing would delete that edit")}`);
     }
-    lines.push(`    ${import_picocolors54.default.dim("run")} ${import_picocolors54.default.cyan("brainbase orchestration pull")} ${import_picocolors54.default.dim("first")}`);
+    lines.push(`    ${import_picocolors55.default.dim("run")} ${import_picocolors55.default.cyan("brainbase orchestration pull")} ${import_picocolors55.default.dim("first")}`);
     lines.push("");
   } else if (triggerPlan.kind === "skip") {
     const left = untouchedRows(triggerPlan);
-    lines.push(`  ${import_picocolors54.default.dim(`${left.length} cloud schedule trigger${left.length === 1 ? "" : "s"} not managed by this manifest — push leaves ${left.length === 1 ? "it" : "them"} untouched`)}`);
+    lines.push(`  ${import_picocolors55.default.dim(`${left.length} cloud schedule trigger${left.length === 1 ? "" : "s"} not managed by this manifest — push leaves ${left.length === 1 ? "it" : "them"} untouched`)}`);
+    lines.push("");
+  }
+  const cloudWebhooks = cloudWebhookTriggers(cloud, slugForAgent);
+  const localWebhooks = manifestWebhookTriggers(localManifest);
+  const webhookPlan = decideWebhookTriggerReconcile({
+    local: localWebhooks,
+    cloud: cloudWebhooks,
+    baseline: lock?.webhook_triggers,
+    force: false
+  });
+  const webhookByNode = new Map([...cloudWebhooks, ...localWebhooks].map((t) => [t.node_id, t]));
+  const webhookLabel = (nodeId) => {
+    const t = webhookByNode.get(nodeId);
+    return t ? webhookTriggerLabel(t) : nodeId;
+  };
+  const localWebhookNodes = new Set(localWebhooks.map((t) => t.node_id));
+  const cloudWebhookByNode = new Map(cloudWebhooks.map((t) => [t.node_id, t]));
+  const webhooksToPush = localWebhooks.filter((t) => {
+    const remote = cloudWebhookByNode.get(t.node_id);
+    return !remote || webhookTriggerHash(remote) !== webhookTriggerHash(t);
+  });
+  const webhooksToPull = cloudWebhooks.filter((t) => !localWebhookNodes.has(t.node_id));
+  const webhookDeletes = webhookPlan.kind === "reconcile" ? webhookPlan.archives : [];
+  if (webhooksToPush.length || webhooksToPull.length) {
+    lines.push(`  ${import_picocolors55.default.bold("webhook triggers")}`);
+    for (const t of webhooksToPush) {
+      lines.push(`    ${import_picocolors55.default.yellow("→ push")}  added/changed in yaml: ${webhookTriggerLabel(t)}`);
+    }
+    for (const t of webhooksToPull) {
+      lines.push(webhookDeletes.includes(t.node_id) ? `    ${import_picocolors55.default.red("⨯ push deletes")}  ${webhookTriggerLabel(t)}` : `    ${import_picocolors55.default.cyan("← pull")}  only on cloud: ${webhookTriggerLabel(t)}`);
+    }
+    lines.push("");
+  }
+  if (webhookPlan.kind === "blocked") {
+    lines.push(`  ${import_picocolors55.default.bold(import_picocolors55.default.red("webhook triggers: push blocked"))}`);
+    for (const nodeId of webhookPlan.unseen) {
+      lines.push(`    ${import_picocolors55.default.red("!")} ${webhookLabel(nodeId)} ${import_picocolors55.default.dim("— only in the cloud; pushing would delete it")}`);
+    }
+    for (const nodeId of webhookPlan.cloudModified) {
+      lines.push(`    ${import_picocolors55.default.red("!")} ${webhookLabel(nodeId)} ${import_picocolors55.default.dim("— edited in the cloud; pushing would overwrite that edit")}`);
+    }
+    for (const nodeId of webhookPlan.staleArchives) {
+      lines.push(`    ${import_picocolors55.default.red("!")} ${webhookLabel(nodeId)} ${import_picocolors55.default.dim("— deleted here, edited in the cloud since; pushing would delete that edit")}`);
+    }
+    lines.push(`    ${import_picocolors55.default.dim("run")} ${import_picocolors55.default.cyan("brainbase orchestration pull")} ${import_picocolors55.default.dim("first")}`);
+    lines.push("");
+  } else if (webhookPlan.kind === "skip") {
+    const left = untouchedRows(webhookPlan);
+    lines.push(`  ${import_picocolors55.default.dim(`${left.length} cloud webhook trigger${left.length === 1 ? "" : "s"} not managed by this manifest — push leaves ${left.length === 1 ? "it" : "them"} untouched`)}`);
     lines.push("");
   }
   const localDecisions = manifestDecisions(localManifest, new Map([...localSlugByAgentId].map(([agentId, slug]) => [slug, agentId])));
@@ -84506,7 +84785,7 @@ async function runOrchestrationStatus(cwd2) {
   let decisionsToPull = [];
   if (!cloudDecisionList) {
     if (localDecisions.length) {
-      lines.push(`  ${import_picocolors54.default.dim(`${localDecisions.length} decision${localDecisions.length === 1 ? "" : "s"} in yaml, but the cloud does not show decision nodes to this account — push leaves ${localDecisions.length === 1 ? "it" : "them"} alone`)}`);
+      lines.push(`  ${import_picocolors55.default.dim(`${localDecisions.length} decision${localDecisions.length === 1 ? "" : "s"} in yaml, but the cloud does not show decision nodes to this account — push leaves ${localDecisions.length === 1 ? "it" : "them"} alone`)}`);
       lines.push("");
     }
   } else {
@@ -84530,31 +84809,31 @@ async function runOrchestrationStatus(cwd2) {
     decisionsToPull = cloudDecisionList.filter((d3) => !localIds.has(d3.id));
     const decisionDeletes = decisionPlan.kind === "reconcile" ? decisionPlan.archives : [];
     if (decisionsToPush.length || decisionsToPull.length) {
-      lines.push(`  ${import_picocolors54.default.bold("decisions")}`);
+      lines.push(`  ${import_picocolors55.default.bold("decisions")}`);
       for (const d3 of decisionsToPush) {
-        lines.push(`    ${import_picocolors54.default.yellow("→ push")}  added/changed in yaml: ${decisionLabel(d3)}`);
+        lines.push(`    ${import_picocolors55.default.yellow("→ push")}  added/changed in yaml: ${decisionLabel(d3)}`);
       }
       for (const d3 of decisionsToPull) {
-        lines.push(decisionDeletes.includes(d3.id) ? `    ${import_picocolors54.default.red("⨯ push deletes")}  ${decisionLabel(d3)}` : `    ${import_picocolors54.default.cyan("← pull")}  only on cloud: ${decisionLabel(d3)}`);
+        lines.push(decisionDeletes.includes(d3.id) ? `    ${import_picocolors55.default.red("⨯ push deletes")}  ${decisionLabel(d3)}` : `    ${import_picocolors55.default.cyan("← pull")}  only on cloud: ${decisionLabel(d3)}`);
       }
       lines.push("");
     }
     if (decisionPlan.kind === "blocked") {
-      lines.push(`  ${import_picocolors54.default.bold(import_picocolors54.default.red("decisions: push blocked"))}`);
+      lines.push(`  ${import_picocolors55.default.bold(import_picocolors55.default.red("decisions: push blocked"))}`);
       for (const id of decisionPlan.unseen) {
-        lines.push(`    ${import_picocolors54.default.red("!")} ${label2(id)} ${import_picocolors54.default.dim("— only in the cloud; pushing would delete it")}`);
+        lines.push(`    ${import_picocolors55.default.red("!")} ${label2(id)} ${import_picocolors55.default.dim("— only in the cloud; pushing would delete it")}`);
       }
       for (const id of decisionPlan.cloudModified) {
-        lines.push(`    ${import_picocolors54.default.red("!")} ${label2(id)} ${import_picocolors54.default.dim("— edited in the cloud; pushing would overwrite that edit")}`);
+        lines.push(`    ${import_picocolors55.default.red("!")} ${label2(id)} ${import_picocolors55.default.dim("— edited in the cloud; pushing would overwrite that edit")}`);
       }
       for (const id of decisionPlan.staleArchives) {
-        lines.push(`    ${import_picocolors54.default.red("!")} ${label2(id)} ${import_picocolors54.default.dim("— deleted here, edited in the cloud since; pushing would delete that edit")}`);
+        lines.push(`    ${import_picocolors55.default.red("!")} ${label2(id)} ${import_picocolors55.default.dim("— deleted here, edited in the cloud since; pushing would delete that edit")}`);
       }
-      lines.push(`    ${import_picocolors54.default.dim("run")} ${import_picocolors54.default.cyan("brainbase orchestration pull")} ${import_picocolors54.default.dim("first")}`);
+      lines.push(`    ${import_picocolors55.default.dim("run")} ${import_picocolors55.default.cyan("brainbase orchestration pull")} ${import_picocolors55.default.dim("first")}`);
       lines.push("");
     } else if (decisionPlan.kind === "skip") {
       const left = untouchedRows(decisionPlan);
-      lines.push(`  ${import_picocolors54.default.dim(`${left.length} cloud decision${left.length === 1 ? "" : "s"} not managed by this manifest — push leaves ${left.length === 1 ? "it" : "them"} untouched`)}`);
+      lines.push(`  ${import_picocolors55.default.dim(`${left.length} cloud decision${left.length === 1 ? "" : "s"} not managed by this manifest — push leaves ${left.length === 1 ? "it" : "them"} untouched`)}`);
       lines.push("");
     }
   }
@@ -84578,27 +84857,35 @@ async function runOrchestrationStatus(cwd2) {
     }
   }
   if (memberDrift.length) {
-    lines.push(`  ${import_picocolors54.default.bold("member content drift")}`);
+    lines.push(`  ${import_picocolors55.default.bold("member content drift")}`);
     for (const d3 of memberDrift) {
-      lines.push(`    ${import_picocolors54.default.cyan("?")} ${import_picocolors54.default.bold(d3.slug)}  ${import_picocolors54.default.dim("— " + d3.reason)}`);
+      lines.push(`    ${import_picocolors55.default.cyan("?")} ${import_picocolors55.default.bold(d3.slug)}  ${import_picocolors55.default.dim("— " + d3.reason)}`);
     }
-    lines.push(`    ${import_picocolors54.default.dim("cd into each member folder and run")} ${import_picocolors54.default.cyan("brainbase agent status")}`);
+    lines.push(`    ${import_picocolors55.default.dim("cd into each member folder and run")} ${import_picocolors55.default.cyan("brainbase agent status")}`);
     lines.push("");
   }
   const revisionDrift = lock?.revision != null && cloud.revision !== lock.revision;
   if (revisionDrift) {
-    lines.push(`  ${import_picocolors54.default.bold("cloud revision")}`);
-    lines.push(`    ${import_picocolors54.default.cyan("← pull")}  cloud changed since last pull: ${import_picocolors54.default.dim(`lock ${lock.revision} → cloud ${cloud.revision}`)}`);
+    lines.push(`  ${import_picocolors55.default.bold("cloud revision")}`);
+    lines.push(`    ${import_picocolors55.default.cyan("← pull")}  cloud changed since last pull: ${import_picocolors55.default.dim(`lock ${lock.revision} → cloud ${cloud.revision}`)}`);
     lines.push("");
   }
-  if (!membersAdded.length && !membersRemoved.length && !edgesAdded.length && !edgesRemoved.length && !triggersToPush.length && !triggersToPull.length && !decisionsToPush.length && !decisionsToPull.length && !metaDecisions.length && !memberDrift.length && !revisionDrift) {
-    lines.push(`  ${import_picocolors54.default.green("✓")} everything is in sync`);
+  const endpointLines = [];
+  if (cloudWebhooks.length) {
+    endpointLines.push(`  ${import_picocolors55.default.bold("webhook endpoints")} ${import_picocolors55.default.dim("— fire with your credentials, or")} ${import_picocolors55.default.cyan("brainbase orchestration trigger fire <node_id>")}`);
+    endpointLines.push(...webhookEndpointLines(cloudWebhooks, "    "));
+    endpointLines.push("");
+  }
+  if (!membersAdded.length && !membersRemoved.length && !edgesAdded.length && !edgesRemoved.length && !triggersToPush.length && !triggersToPull.length && !webhooksToPush.length && !webhooksToPull.length && !decisionsToPush.length && !decisionsToPull.length && !metaDecisions.length && !memberDrift.length && !revisionDrift) {
+    lines.push(`  ${import_picocolors55.default.green("✓")} everything is in sync`);
     lines.push("");
+    lines.push(...endpointLines);
     console.log(lines.join(`
 `));
     return;
   }
-  lines.push(`  ${import_picocolors54.default.dim("run")} ${import_picocolors54.default.cyan("brainbase orchestration pull")} ${import_picocolors54.default.dim("to apply cloud changes,")} ${import_picocolors54.default.cyan("brainbase orchestration push")} ${import_picocolors54.default.dim("to send yours")}`);
+  lines.push(...endpointLines);
+  lines.push(`  ${import_picocolors55.default.dim("run")} ${import_picocolors55.default.cyan("brainbase orchestration pull")} ${import_picocolors55.default.dim("to apply cloud changes,")} ${import_picocolors55.default.cyan("brainbase orchestration push")} ${import_picocolors55.default.dim("to send yours")}`);
   lines.push("");
   console.log(lines.join(`
 `));
@@ -84613,7 +84900,7 @@ function stableJson2(value2) {
 }
 
 // src/cli/orchestration-list.ts
-var import_picocolors55 = __toESM(require_picocolors(), 1);
+var import_picocolors56 = __toESM(require_picocolors(), 1);
 async function runOrchestrationList(args) {
   const json3 = args.json === true;
   if (!json3)
@@ -84644,13 +84931,13 @@ async function runOrchestrationList(args) {
   }
   const lines = [""];
   for (const o2 of items) {
-    lines.push(`  ${import_picocolors55.default.bold(o2.name)}  ${import_picocolors55.default.dim(o2.id)}`);
+    lines.push(`  ${import_picocolors56.default.bold(o2.name)}  ${import_picocolors56.default.dim(o2.id)}`);
     if (o2.description)
-      lines.push(`    ${import_picocolors55.default.dim(o2.description)}`);
-    lines.push(`    ${import_picocolors55.default.dim(`${o2.member_count} member${o2.member_count === 1 ? "" : "s"} · ${o2.edge_count} edge${o2.edge_count === 1 ? "" : "s"}`)}`);
+      lines.push(`    ${import_picocolors56.default.dim(o2.description)}`);
+    lines.push(`    ${import_picocolors56.default.dim(`${o2.member_count} member${o2.member_count === 1 ? "" : "s"} · ${o2.edge_count} edge${o2.edge_count === 1 ? "" : "s"}`)}`);
     lines.push("");
   }
-  lines.push(`  ${import_picocolors55.default.dim("pull one with")} ${import_picocolors55.default.cyan("brainbase orchestration pull <id>")}`);
+  lines.push(`  ${import_picocolors56.default.dim("pull one with")} ${import_picocolors56.default.cyan("brainbase orchestration pull <id>")}`);
   lines.push("");
   console.log(lines.join(`
 `));
@@ -84658,7 +84945,7 @@ async function runOrchestrationList(args) {
 
 // src/cli/orchestration-add-agent.ts
 import fs86 from "node:fs";
-var import_picocolors56 = __toESM(require_picocolors(), 1);
+var import_picocolors57 = __toESM(require_picocolors(), 1);
 
 // src/core/orchestration-add.ts
 function resolveOrgIdForGroup(groupId, orgsWithTeams) {
@@ -84723,7 +85010,7 @@ async function runOrchestrationAddAgent(cwd2, args) {
   const link2 = readOrchLink(cwd2);
   if (!link2 || !hasOrchManifest(cwd2)) {
     failWarn("This folder is not a linked orchestration.");
-    f2.info(`Run ${import_picocolors56.default.cyan("brainbase orchestration pull <id>")} first.`);
+    f2.info(`Run ${import_picocolors57.default.cyan("brainbase orchestration pull <id>")} first.`);
     return;
   }
   let manifest;
@@ -84749,7 +85036,7 @@ async function runOrchestrationAddAgent(cwd2, args) {
     while (manifest.members.some((m3) => m3.slug === candidate) || fs86.existsSync(memberDir(cwd2, candidate))) {
       candidate = `${slug}-${++n}`;
     }
-    f2.info(`Slug ${import_picocolors56.default.bold(slug)} is taken — using ${import_picocolors56.default.bold(candidate)}.`);
+    f2.info(`Slug ${import_picocolors57.default.bold(slug)} is taken — using ${import_picocolors57.default.bold(candidate)}.`);
     slug = candidate;
   }
   let payloadSchema;
@@ -84773,7 +85060,7 @@ async function runOrchestrationAddAgent(cwd2, args) {
       const resolved = resolveOrgIdForGroup(link2.group_id, orgsWithTeams);
       if (!resolved) {
         sp.stop("Failed.");
-        fail(`Could not find an org that owns group ${import_picocolors56.default.bold(link2.group_id)}. ` + `Pass ${import_picocolors56.default.cyan("--org <id>")} explicitly.`);
+        fail(`Could not find an org that owns group ${import_picocolors57.default.bold(link2.group_id)}. ` + `Pass ${import_picocolors57.default.cyan("--org <id>")} explicitly.`);
         return;
       }
       orgId = resolved;
@@ -84790,14 +85077,14 @@ async function runOrchestrationAddAgent(cwd2, args) {
   if (from.length === 0 && to2.length === 0 && isInteractive() && manifest.members.length > 0) {
     const memberOptions = manifest.members.map((m3) => ({ value: m3.slug, label: m3.slug }));
     const pickedFrom = await ae({
-      message: `Connect ${import_picocolors56.default.bold(slug)} FROM which member(s)? — edges INTO ${slug} (space to select, enter to skip)`,
+      message: `Connect ${import_picocolors57.default.bold(slug)} FROM which member(s)? — edges INTO ${slug} (space to select, enter to skip)`,
       options: memberOptions,
       required: false
     });
     if (Array.isArray(pickedFrom))
       from = pickedFrom;
     const pickedTo = await ae({
-      message: `Connect ${import_picocolors56.default.bold(slug)} TO which member(s)? — edges OUT of ${slug} (space to select, enter to skip)`,
+      message: `Connect ${import_picocolors57.default.bold(slug)} TO which member(s)? — edges OUT of ${slug} (space to select, enter to skip)`,
       options: memberOptions,
       required: false
     });
@@ -84836,23 +85123,23 @@ async function runOrchestrationAddAgent(cwd2, args) {
   }
   writeOrchManifest(cwd2, updated);
   if (args.noPush) {
-    f2.info(`Manifest updated. Run ${import_picocolors56.default.cyan("brainbase orchestration push")} to apply.`);
+    f2.info(`Manifest updated. Run ${import_picocolors57.default.cyan("brainbase orchestration push")} to apply.`);
     return;
   }
   await runOrchestrationPush(cwd2, { yes: true, graphOnly: true });
 }
 
 // src/cli/orchestration-create.ts
-var import_picocolors57 = __toESM(require_picocolors(), 1);
+var import_picocolors58 = __toESM(require_picocolors(), 1);
 async function runOrchestrationCreate(cwd2, args) {
   banner("orchestration create — claim a brainbase-orchestration.yaml");
   if (readOrchLink(cwd2)) {
     failWarn("This folder is already linked to an orchestration.");
-    f2.info(`Run ${import_picocolors57.default.cyan("brainbase orchestration push")} to update it.`);
+    f2.info(`Run ${import_picocolors58.default.cyan("brainbase orchestration push")} to update it.`);
     return;
   }
   if (!hasOrchManifest(cwd2)) {
-    failWarn(`No ${import_picocolors57.default.bold(ORCH_MANIFEST_FILE)} here.`);
+    failWarn(`No ${import_picocolors58.default.bold(ORCH_MANIFEST_FILE)} here.`);
     f2.info(`Create one, or pull an existing orchestration first.`);
     return;
   }
@@ -84885,10 +85172,10 @@ async function runOrchestrationCreate(cwd2, args) {
   });
   const plan = [
     "",
-    `  ${import_picocolors57.default.bold(manifest.orchestration.name)}`,
-    `  ${import_picocolors57.default.dim("org")}      ${import_picocolors57.default.bold(target.org.name)}`,
-    `  ${import_picocolors57.default.dim("team")}     ${import_picocolors57.default.bold(target.team.name)}`,
-    `  ${import_picocolors57.default.dim("graph")}    ${manifest.members.length} member${manifest.members.length === 1 ? "" : "s"}, ${manifest.edges.length} edge${manifest.edges.length === 1 ? "" : "s"}, ${graph.triggers.length} trigger${graph.triggers.length === 1 ? "" : "s"}`,
+    `  ${import_picocolors58.default.bold(manifest.orchestration.name)}`,
+    `  ${import_picocolors58.default.dim("org")}      ${import_picocolors58.default.bold(target.org.name)}`,
+    `  ${import_picocolors58.default.dim("team")}     ${import_picocolors58.default.bold(target.team.name)}`,
+    `  ${import_picocolors58.default.dim("graph")}    ${manifest.members.length} member${manifest.members.length === 1 ? "" : "s"}, ${manifest.edges.length} edge${manifest.edges.length === 1 ? "" : "s"}, ${graph.triggers.length + graph.webhookTriggers.length} trigger${graph.triggers.length + graph.webhookTriggers.length === 1 ? "" : "s"}`,
     ""
   ];
   console.log(plan.join(`
@@ -84916,9 +85203,11 @@ async function runOrchestrationCreate(cwd2, args) {
       credit_limit: manifest.orchestration.credit_limit,
       members: graph.memberIds,
       edges: graph.edges,
-      triggers: graph.triggers
+      triggers: [...graph.triggers, ...graph.webhookTriggers]
     });
-    sp.stop(`Created ${import_picocolors57.default.bold(created.name)}.`);
+    sp.stop(`Created ${import_picocolors58.default.bold(created.name)}.`);
+    const slugForAgent = (agentId, fallback) => manifest.members.find((m3) => slugToAgentId.get(m3.slug) === agentId)?.slug ?? fallback;
+    const webhooks = cloudWebhookTriggers(created, slugForAgent);
     writeOrchLink(cwd2, {
       schemaVersion: 1,
       orchestration_id: created.id,
@@ -84944,11 +85233,12 @@ async function runOrchestrationCreate(cwd2, args) {
         to_slug: e2.to_slug ?? e2.to_agent_id,
         description: e2.description ?? "",
         payload_schema: e2.payload_schema ?? {}
-      }))
+      })),
+      webhook_triggers: syncedWebhookTriggers(webhooks)
     });
     const decisionCount = manifest.decisions?.length ?? 0;
     if (decisionCount) {
-      f2.info(`Run ${import_picocolors57.default.cyan("brainbase orchestration push")} to add the ${decisionCount} decision${decisionCount === 1 ? "" : "s"} in this manifest.`);
+      f2.info(`Run ${import_picocolors58.default.cyan("brainbase orchestration push")} to add the ${decisionCount} decision${decisionCount === 1 ? "" : "s"} in this manifest.`);
     }
     $e(`Created ${created.name} at revision ${created.revision}.`);
   } catch (err) {
@@ -84971,8 +85261,98 @@ function handleApiError7(err) {
   }
 }
 
+// src/cli/orchestration-from-agent.ts
+var import_picocolors59 = __toESM(require_picocolors(), 1);
+var MEMBERSHIP_CONFLICT_CODE = "orchestration_membership_conflict";
+var MAX_NAME_LENGTH = 200;
+async function runOrchestrationFromAgent(cwd2, args) {
+  const json3 = args.json === true;
+  if (args.agentId !== undefined && !args.agentId.trim()) {
+    fail3(json3, "The agent id is empty.", `Pass an agent id, or omit it to use the agent linked here.`);
+    return;
+  }
+  const link2 = readLink(cwd2);
+  const agentId = args.agentId?.trim() || link2?.agent_id;
+  if (!agentId) {
+    fail3(json3, "No agent given and this folder is not linked to one.", `Pass an agent id: ${import_picocolors59.default.cyan("brainbase orchestration from-agent <agent-id>")}`);
+    return;
+  }
+  const fromLink = args.agentId === undefined && link2 !== null;
+  if (!json3)
+    banner("orchestration from-agent — turn an agent into an orchestration");
+  let created;
+  try {
+    const teamId = args.teamId ?? (fromLink ? link2.team_id : (await resolveOrgAndTeam({
+      orgId: args.orgId,
+      allowPrompt: !json3,
+      announce: !json3
+    })).team.id);
+    const agent = await masApi.getAgentSummary(agentId);
+    const sp = json3 ? null : spinner();
+    sp?.start("Creating orchestration…");
+    try {
+      created = await masApi.createOrchestrationFromAgent({
+        agent_id: agentId,
+        group_id: teamId,
+        name: args.name ?? (agent.name.trim().slice(0, MAX_NAME_LENGTH) || "Orchestration"),
+        description: args.description ?? agent.description
+      });
+    } catch (err) {
+      sp?.stop("Failed.");
+      throw err;
+    }
+    sp?.stop(`Created ${import_picocolors59.default.bold(sanitizeLabel(created.name))}.`);
+  } catch (err) {
+    if (err instanceof ApiError) {
+      fail3(json3, err.message, hint(err), { status: err.status ?? null });
+      return;
+    }
+    if (json3 && err instanceof Error) {
+      fail3(json3, err.message, undefined, { status: null });
+      return;
+    }
+    throw err;
+  }
+  if (json3) {
+    console.log(JSON.stringify(created, null, 2));
+    return;
+  }
+  console.log([
+    "",
+    `  ${import_picocolors59.default.green("✓")} ${import_picocolors59.default.bold(sanitizeLabel(created.name))}  ${import_picocolors59.default.dim(sanitizeLabel(created.id))}`,
+    `    ${import_picocolors59.default.dim("only member:")} ${sanitizeLabel(agentId)}`,
+    "",
+    `  ${import_picocolors59.default.dim("work on its graph with")} ${import_picocolors59.default.cyan(`brainbase orchestration pull ${sanitizeLabel(created.id)}`)}`,
+    ""
+  ].join(`
+`));
+}
+function hint(err) {
+  if (err.status === 409) {
+    const code = err.body?.detail?.code;
+    if (code === MEMBERSHIP_CONFLICT_CODE) {
+      return "An agent belongs to one orchestration at a time. Remove it from that one first.";
+    }
+    return `Pick another name with ${import_picocolors59.default.cyan("--name <name>")}.`;
+  }
+  if (err.status === 400 || err.status === 403) {
+    return `The agent must be in the team you create it in. Pick one with ${import_picocolors59.default.cyan("--team <id>")}.`;
+  }
+  return;
+}
+function fail3(json3, message, help, extra = {}) {
+  if (json3)
+    console.log(JSON.stringify({ error: message, ...extra }, null, 2));
+  else {
+    f2.error(sanitizeLabel(message));
+    if (help)
+      f2.info(help);
+  }
+  process.exitCode = 1;
+}
+
 // src/cli/orchestration-init.ts
-var import_picocolors58 = __toESM(require_picocolors(), 1);
+var import_picocolors60 = __toESM(require_picocolors(), 1);
 
 // src/core/orchestration-scaffold.ts
 var import_yaml6 = __toESM(require_dist(), 1);
@@ -85007,6 +85387,13 @@ var FULL_TEMPLATE_EXAMPLES = {
       is_active: false,
       config: { cron_expression: "0 9 * * 1" },
       to: [{ agent: "triage" }]
+    },
+    {
+      type: "webhook",
+      node_id: "00000000-0000-4000-8000-000000000001",
+      is_active: false,
+      public: false,
+      to: [{ agent: "triage" }]
     }
   ]
 };
@@ -85061,6 +85448,10 @@ edges: []
 ${commented({ edges: ex.edges })}
 
 # Schedule triggers start members on a cron (standard 5-field syntax).
+# Webhook triggers start them when something outside Brainbase POSTs to them.
+# A webhook's \`public\` switches its secret URL: off (the default), only
+# members fire it, with \`brainbase orchestration trigger fire <node_id>\`;
+# on, anyone holding the URL (shown in the web app) can.
 # \`node_id\` is a UUID you generate once and keep, so pushes update the
 # same trigger instead of creating another.
 ${commented({ triggers: ex.triggers })}
@@ -85091,7 +85482,7 @@ async function runOrchestrationInit(cwd2, args = {}) {
       path: target,
       created: false,
       reason: "conflicting-flags",
-      message: `Pass either ${import_picocolors58.default.cyan("--minimal")} or ${import_picocolors58.default.cyan("--full")}, not both.`
+      message: `Pass either ${import_picocolors60.default.cyan("--minimal")} or ${import_picocolors60.default.cyan("--full")}, not both.`
     });
   }
   if (readOrchLink(cwd2)) {
@@ -85099,7 +85490,7 @@ async function runOrchestrationInit(cwd2, args = {}) {
       path: target,
       created: false,
       reason: "linked",
-      message: `This folder is linked to an orchestration. Edit ${import_picocolors58.default.bold(ORCH_MANIFEST_FILE)} and run ${import_picocolors58.default.cyan("brainbase orchestration push")}, or init in a new folder.`
+      message: `This folder is linked to an orchestration. Edit ${import_picocolors60.default.bold(ORCH_MANIFEST_FILE)} and run ${import_picocolors60.default.cyan("brainbase orchestration push")}, or init in a new folder.`
     });
   }
   const existed = hasOrchManifest(cwd2);
@@ -85108,7 +85499,7 @@ async function runOrchestrationInit(cwd2, args = {}) {
       path: target,
       created: false,
       reason: "manifest-exists",
-      message: `${import_picocolors58.default.bold(ORCH_MANIFEST_FILE)} already exists here. Edit it, or pass ${import_picocolors58.default.cyan("--force")} to overwrite it.`
+      message: `${import_picocolors60.default.bold(ORCH_MANIFEST_FILE)} already exists here. Edit it, or pass ${import_picocolors60.default.cyan("--force")} to overwrite it.`
     });
   }
   const name = resolveScaffoldName(cwd2, args.name, FALLBACK_NAME2);
@@ -85118,7 +85509,7 @@ async function runOrchestrationInit(cwd2, args = {}) {
   try {
     writeOrchestrationScaffold(cwd2, { name }, { full: args.full });
   } catch (err) {
-    console.error(import_picocolors58.default.red(`Failed to write ${ORCH_MANIFEST_FILE}: ${err.message}`));
+    console.error(import_picocolors60.default.red(`Failed to write ${ORCH_MANIFEST_FILE}: ${err.message}`));
     process.exitCode = 1;
     return;
   }
@@ -85126,10 +85517,10 @@ async function runOrchestrationInit(cwd2, args = {}) {
     emit2({ path: target, created: true, name, template: template2 });
     return;
   }
-  f2.success(`Wrote ${import_picocolors58.default.bold(ORCH_MANIFEST_FILE)}${existed ? " (overwritten)" : ""}.`);
+  f2.success(`Wrote ${import_picocolors60.default.bold(ORCH_MANIFEST_FILE)}${existed ? " (overwritten)" : ""}.`);
   console.log();
-  console.log(tip(`Edit it, then run ${import_picocolors58.default.cyan("brainbase orchestration create")} ${import_picocolors58.default.dim("— creates the orchestration and links this folder.")}`));
-  console.log(tip(`Then ${import_picocolors58.default.cyan("brainbase orchestration add-agent <name>")} ${import_picocolors58.default.dim("— creates a member agent and wires it into the graph.")}`));
+  console.log(tip(`Edit it, then run ${import_picocolors60.default.cyan("brainbase orchestration create")} ${import_picocolors60.default.dim("— creates the orchestration and links this folder.")}`));
+  console.log(tip(`Then ${import_picocolors60.default.cyan("brainbase orchestration add-agent <name>")} ${import_picocolors60.default.dim("— creates a member agent and wires it into the graph.")}`));
   console.log();
 }
 function emit2(result2) {
@@ -85143,13 +85534,127 @@ function refuse2(json3, outcome) {
     return;
   }
   console.error(`
-  ${import_picocolors58.default.red(message)}
+  ${import_picocolors60.default.red(message)}
 `);
 }
 
+// src/cli/orchestration-trigger.ts
+var import_picocolors61 = __toESM(require_picocolors(), 1);
+var OPTIONS = [
+  { key: "data", names: ["--data", "-d"], kind: "value" },
+  { key: "idempotencyKey", names: ["--idempotency-key"], kind: "value" },
+  { key: "orchestration", names: ["--orchestration"], kind: "value" }
+];
+async function runOrchestrationTrigger(cwd2, args, opts) {
+  const [sub, ...rest2] = args;
+  if (sub !== "fire") {
+    if (sub !== undefined && sub !== "help") {
+      console.error(`Unknown orchestration trigger subcommand: ${sub}`);
+      process.exitCode = 1;
+    }
+    printTriggerHelp();
+    return;
+  }
+  let parsed;
+  try {
+    parsed = parseArgv(rest2, OPTIONS);
+  } catch (err) {
+    if (!(err instanceof ArgvParseError))
+      throw err;
+    return refuse3(err.message, opts);
+  }
+  const [ref, ...extra] = parsed.positionals;
+  if (!ref || extra.length > 0) {
+    return refuse3("Usage: brainbase orchestration trigger fire <trigger> [--data JSON] [--idempotency-key K]", opts);
+  }
+  let payload = {};
+  const data = stringOption(parsed, "data");
+  if (data !== undefined) {
+    try {
+      payload = JSON.parse(data);
+    } catch (err) {
+      return refuse3(`--data is not valid JSON: ${err.message}`, opts);
+    }
+  }
+  const idempotencyKey = stringOption(parsed, "idempotencyKey");
+  if (idempotencyKey !== undefined && !idempotencyKey.trim()) {
+    return refuse3("--idempotency-key cannot be empty.", opts);
+  }
+  const orchestrationId = stringOption(parsed, "orchestration") ?? readOrchLink(cwd2)?.orchestration_id;
+  if (!orchestrationId) {
+    return refuse3(`This folder is not linked to an orchestration. Run it where ${ORCH_MANIFEST_FILE} lives, or pass --orchestration <id>.`, opts);
+  }
+  try {
+    const trigger = resolveWebhookTrigger(await api.getOrchestration(orchestrationId), ref);
+    const fire = await api.fireOrchestrationTrigger(orchestrationId, trigger.id, payload, idempotencyKey);
+    reportFire(fire, webhookTriggerLabel(trigger), opts);
+  } catch (err) {
+    return refuse3(errorMessage2(err), opts);
+  }
+}
+function reportFire(fire, label2, opts) {
+  const failed = !fire.duplicate && !!fire.dispatch_error;
+  if (failed)
+    process.exitCode = 1;
+  if (opts.json) {
+    console.log(JSON.stringify(fire, null, 2));
+    return;
+  }
+  const started = fire.dispatched_agent_ids?.length ?? 0;
+  const tasks = `${started} task${started === 1 ? "" : "s"}`;
+  if (fire.duplicate) {
+    f2.info(`Already fired with this idempotency key (fire ${fire.fire_id}); nothing new started.`);
+  } else if (failed) {
+    fail(started > 0 ? `Fired ${label2} — started ${tasks}, then failed: ${fire.dispatch_error} (fire ${fire.fire_id})` : `Fired ${label2}, but nothing started: ${fire.dispatch_error} (fire ${fire.fire_id})`);
+  } else {
+    f2.success(`Fired ${label2} — started ${tasks} (fire ${fire.fire_id}).`);
+  }
+}
+function refuse3(message, opts) {
+  process.exitCode = 1;
+  if (opts.json) {
+    console.log(JSON.stringify({ error: message }, null, 2));
+  } else {
+    f2.error(message);
+  }
+}
+function errorMessage2(err) {
+  if (!(err instanceof ApiError))
+    return err.message;
+  if (err.status === 401)
+    return "Your session is invalid. Run `brainbase login` and try again.";
+  if (err.status === 403) {
+    return `${err.message} Firing a trigger needs a login or an API key with publish scope.`;
+  }
+  if (err.status === 404)
+    return `${err.message} (or you do not have access to this orchestration).`;
+  return err.message;
+}
+function printTriggerHelp() {
+  console.log([
+    "",
+    `  ${import_picocolors61.default.bold("brainbase orchestration trigger fire")} ${import_picocolors61.default.dim("<trigger> [options]")}`,
+    "",
+    `  ${import_picocolors61.default.dim("Fire a webhook trigger with your credentials, whether or not its URL is public. Starts real, billable runs.")}`,
+    `  ${import_picocolors61.default.dim("<trigger> is its node_id from")} ${ORCH_MANIFEST_FILE}${import_picocolors61.default.dim(", or its trigger id.")}`,
+    "",
+    `  ${import_picocolors61.default.bold("Flags")}`,
+    `    ${import_picocolors61.default.dim("--data <json>")}            the payload (default {})`,
+    `    ${import_picocolors61.default.dim("--idempotency-key <k>")}    a retry with the same key fires once`,
+    `    ${import_picocolors61.default.dim("--orchestration <id>")}     the orchestration, when this folder is not linked to one`,
+    `    ${import_picocolors61.default.dim("--json")}                   print the fire as JSON`,
+    ""
+  ].join(`
+`));
+}
+
 // src/cli/orchestration.ts
 async function runOrchestration(cwd2, sub, args, opts) {
   if (args.some((arg) => arg === "--help" || arg === "-h")) {
+    if (sub === "trigger" || sub === "triggers") {
+      await runOrchestrationTrigger(cwd2, ["help"], { json: opts.json });
+      return;
+    }
     printHelp4();
     return;
   }
@@ -85170,6 +85675,16 @@ async function runOrchestration(cwd2, sub, args, opts) {
         teamId: opts.teamId
       });
       return;
+    case "from-agent":
+      await runOrchestrationFromAgent(cwd2, {
+        agentId: args[0],
+        orgId: opts.orgId,
+        teamId: opts.teamId,
+        name: opts.name,
+        description: opts.description,
+        json: opts.json
+      });
+      return;
     case "pull":
       await runOrchestrationPull(cwd2, {
         orchestrationId: args[0],
@@ -85187,6 +85702,10 @@ async function runOrchestration(cwd2, sub, args, opts) {
     case "status":
       await runOrchestrationStatus(cwd2);
       return;
+    case "trigger":
+    case "triggers":
+      await runOrchestrationTrigger(cwd2, args, { json: opts.json });
+      return;
     case "list":
     case "ls":
       await runOrchestrationList({ orgId: opts.orgId, teamId: opts.teamId, json: opts.json });
@@ -85216,7 +85735,7 @@ async function runOrchestration(cwd2, sub, args, opts) {
       return;
     default:
       console.error(`Unknown orchestration subcommand: ${sub}
-${didYouMean(sub, ["create", "pull", "push", "status", "list", "delete", "add-agent"], "brainbase orchestration")}`);
+${didYouMean(sub, ["create", "from-agent", "pull", "push", "status", "list", "delete", "add-agent", "trigger"], "brainbase orchestration")}`);
       printHelp4();
       process.exit(1);
   }
@@ -85224,25 +85743,28 @@ ${didYouMean(sub, ["create", "pull", "push", "status", "list", "delete", "add-ag
 function printHelp4() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors59.default.bold("brainbase orchestration")} ${import_picocolors59.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors62.default.bold("brainbase orchestration")} ${import_picocolors62.default.dim("<sub> [options]")}`);
   out.push("");
-  out.push(`  ${import_picocolors59.default.cyan("init")}             ${import_picocolors59.default.dim("write a starter brainbase-orchestration.yaml here — offline, no login (--full for a commented template, --force to overwrite)")}`);
-  out.push(`  ${import_picocolors59.default.cyan("create")}           ${import_picocolors59.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
-  out.push(`  ${import_picocolors59.default.cyan("pull")} ${import_picocolors59.default.dim("<id>")}      ${import_picocolors59.default.dim("fetch orchestration + every member agent into this folder")}`);
-  out.push(`  ${import_picocolors59.default.cyan("push")}             ${import_picocolors59.default.dim("push each member, then update the orchestration graph")}`);
-  out.push(`  ${import_picocolors59.default.cyan("add-agent")} ${import_picocolors59.default.dim("<name>")}    ${import_picocolors59.default.dim("create a member agent, wire edges (--from/--to), and push")}`);
-  out.push(`  ${import_picocolors59.default.cyan("status")}           ${import_picocolors59.default.dim("show what would push and what would pull")}`);
-  out.push(`  ${import_picocolors59.default.cyan("list")}             ${import_picocolors59.default.dim("list orchestrations under a team")}`);
-  out.push(`  ${import_picocolors59.default.cyan("delete")} ${import_picocolors59.default.dim("<id>")}      ${import_picocolors59.default.dim("permanently delete an orchestration graph — member agents are kept")}`);
+  out.push(`  ${import_picocolors62.default.cyan("init")}             ${import_picocolors62.default.dim("write a starter brainbase-orchestration.yaml here — offline, no login (--full for a commented template, --force to overwrite)")}`);
+  out.push(`  ${import_picocolors62.default.cyan("create")}           ${import_picocolors62.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
+  out.push(`  ${import_picocolors62.default.cyan("from-agent")} ${import_picocolors62.default.dim("[agent-id]")} ${import_picocolors62.default.dim("turn an existing agent (default: this folder's) into an orchestration")}`);
+  out.push(`  ${import_picocolors62.default.cyan("pull")} ${import_picocolors62.default.dim("<id>")}      ${import_picocolors62.default.dim("fetch orchestration + every member agent into this folder")}`);
+  out.push(`  ${import_picocolors62.default.cyan("push")}             ${import_picocolors62.default.dim("push each member, then update the orchestration graph")}`);
+  out.push(`  ${import_picocolors62.default.cyan("add-agent")} ${import_picocolors62.default.dim("<name>")}    ${import_picocolors62.default.dim("create a member agent, wire edges (--from/--to), and push")}`);
+  out.push(`  ${import_picocolors62.default.cyan("status")}           ${import_picocolors62.default.dim("show what would push and what would pull")}`);
+  out.push(`  ${import_picocolors62.default.cyan("trigger fire")} ${import_picocolors62.default.dim("<t>")}  ${import_picocolors62.default.dim("fire a webhook trigger with your credentials (--data JSON, --idempotency-key K)")}`);
+  out.push(`  ${import_picocolors62.default.cyan("list")}             ${import_picocolors62.default.dim("list orchestrations under a team")}`);
+  out.push(`  ${import_picocolors62.default.cyan("delete")} ${import_picocolors62.default.dim("<id>")}      ${import_picocolors62.default.dim("permanently delete an orchestration graph — member agents are kept")}`);
   out.push("");
-  out.push(`  ${import_picocolors59.default.bold("Flags")}`);
-  out.push(`    ${import_picocolors59.default.dim("--yes, -y")}        skip confirmations (required for delete without a terminal)`);
-  out.push(`    ${import_picocolors59.default.dim("--json")}           for init, list and delete: machine-readable result`);
-  out.push(`    ${import_picocolors59.default.dim("--name <name>")}    for init: orchestration name (default: this folder's name)`);
-  out.push(`    ${import_picocolors59.default.dim("--harness <id>")}   harness for newly-created member folders (default claude-code)`);
-  out.push(`    ${import_picocolors59.default.dim("--graph-only")}     for push: only update members + edges, skip per-member push`, `    ${import_picocolors59.default.dim("--force")}         for push: settle every conflict in your file's favour — deletes cloud schedule`, `                        triggers this folder has never seen, and overwrites cloud-side edits to`, `                        name, description, icon, icon_color and credit_limit`);
-  out.push(`    ${import_picocolors59.default.dim("--org <id>")}       for create/list: org id or slug (CLI vocab — DB teams.id)`);
-  out.push(`    ${import_picocolors59.default.dim("--team <id>")}      for create/list: team id (CLI vocab — DB groups.id)`);
+  out.push(`  ${import_picocolors62.default.bold("Flags")}`);
+  out.push(`    ${import_picocolors62.default.dim("--yes, -y")}        skip confirmations (required for delete without a terminal)`);
+  out.push(`    ${import_picocolors62.default.dim("--json")}           for init, from-agent, list and delete: machine-readable result`);
+  out.push(`    ${import_picocolors62.default.dim("--name <name>")}    for init: orchestration name (default: this folder's name); for from-agent: default the agent's`);
+  out.push(`    ${import_picocolors62.default.dim("--description <text>")} for from-agent: orchestration description (default: the agent's)`);
+  out.push(`    ${import_picocolors62.default.dim("--harness <id>")}   harness for newly-created member folders (default claude-code)`);
+  out.push(`    ${import_picocolors62.default.dim("--graph-only")}     for push: only update members + edges, skip per-member push`, `    ${import_picocolors62.default.dim("--force")}         for push: settle every conflict in your file's favour — deletes cloud schedule`, `                        and webhook triggers this folder has never seen, and overwrites cloud-side edits to`, `                        name, description, icon, icon_color and credit_limit`);
+  out.push(`    ${import_picocolors62.default.dim("--org <id>")}       for create/list/from-agent: org id or slug (CLI vocab — DB teams.id)`);
+  out.push(`    ${import_picocolors62.default.dim("--team <id>")}      for create/list/from-agent: team id (CLI vocab — DB groups.id)`);
   out.push("");
   console.log(out.join(`
 `));
@@ -85287,11 +85809,11 @@ async function runRun(cwd2, args) {
 }
 
 // src/cli/publish.ts
-var import_picocolors60 = __toESM(require_picocolors(), 1);
+var import_picocolors63 = __toESM(require_picocolors(), 1);
 function runPublish() {
   banner("publish — moved");
-  f2.error(`${import_picocolors60.default.bold("brainbase publish")} does not exist.`);
-  f2.info(`Use ${import_picocolors60.default.cyan("brainbase agent push")} to send your local changes to the cloud.`);
+  f2.error(`${import_picocolors63.default.bold("brainbase publish")} does not exist.`);
+  f2.info(`Use ${import_picocolors63.default.cyan("brainbase agent push")} to send your local changes to the cloud.`);
   process.exit(1);
 }
 
@@ -85582,7 +86104,7 @@ async function runStatus(cwd2) {
 }
 
 // src/cli/token.ts
-var import_picocolors61 = __toESM(require_picocolors(), 1);
+var import_picocolors64 = __toESM(require_picocolors(), 1);
 
 // src/ui/ink/TokenCards.tsx
 var jsx_dev_runtime17 = __toESM(require_jsx_dev_runtime(), 1);
@@ -85830,7 +86352,7 @@ async function showTokenListCard(props) {
 
 // src/cli/token.ts
 var DEFAULT_SCOPES = ["read", "publish"];
-var MAX_NAME_LENGTH = 128;
+var MAX_NAME_LENGTH2 = 128;
 var ALLOWED_SCOPES = ["read", "publish", "admin"];
 function isAllowedScope(value2) {
   return ALLOWED_SCOPES.includes(value2);
@@ -85973,8 +86495,8 @@ async function runTokenRename(args) {
     const candidate = value2.trim();
     if (!candidate)
       return "Required.";
-    if (candidate.length > MAX_NAME_LENGTH) {
-      return `Too long — keep the label to ${MAX_NAME_LENGTH} characters or fewer.`;
+    if (candidate.length > MAX_NAME_LENGTH2) {
+      return `Too long — keep the label to ${MAX_NAME_LENGTH2} characters or fewer.`;
     }
     const clash = takenBy.get(candidate.toLowerCase());
     if (clash) {
@@ -85999,7 +86521,7 @@ async function runTokenRename(args) {
     }
   }
   if (name === target.name.trim()) {
-    console.log(`${sym.ok} ${import_picocolors61.default.bold(target.name.trim())} already has that label; nothing to do.`);
+    console.log(`${sym.ok} ${import_picocolors64.default.bold(target.name.trim())} already has that label; nothing to do.`);
     return;
   }
   try {
@@ -86007,7 +86529,7 @@ async function runTokenRename(args) {
   } catch (error2) {
     throw withLoginHint(error2);
   }
-  console.log(`${sym.ok} Renamed ${import_picocolors61.default.dim(target.name)} → ${import_picocolors61.default.bold(name)}`);
+  console.log(`${sym.ok} Renamed ${import_picocolors64.default.dim(target.name)} → ${import_picocolors64.default.bold(name)}`);
 }
 async function runTokenRevoke(args) {
   if (!args.id) {
@@ -86025,7 +86547,7 @@ async function runTokenRevoke(args) {
     throw new Error(`No token with id ${args.id}. Run \`brainbase token list\` to see yours.`);
   }
   if (target.revoked_at) {
-    reconcileDeadToken(target, `${import_picocolors61.default.bold(target.name)} is already revoked.`);
+    reconcileDeadToken(target, `${import_picocolors64.default.bold(target.name)} is already revoked.`);
     return;
   }
   const stored = readToken();
@@ -86035,7 +86557,7 @@ async function runTokenRevoke(args) {
     flagHint: "Pass --yes to revoke it without a prompt."
   })) {
     const ok = await se({
-      message: isLocalToken ? `Revoke ${import_picocolors61.default.bold(target.name)} (${args.id})? This is the token this CLI is using, so it will stop working here too.` : `Revoke ${import_picocolors61.default.bold(target.name)} (${args.id})? CIs and machines using it will stop working.`,
+      message: isLocalToken ? `Revoke ${import_picocolors64.default.bold(target.name)} (${args.id})? This is the token this CLI is using, so it will stop working here too.` : `Revoke ${import_picocolors64.default.bold(target.name)} (${args.id})? CIs and machines using it will stop working.`,
       initialValue: false
     });
     if (!ensureNotCancelled(ok))
@@ -86046,14 +86568,14 @@ async function runTokenRevoke(args) {
   } catch (error2) {
     if (error2 instanceof ApiError && error2.status === 404) {
       if (isExpired2(target)) {
-        reconcileDeadToken(target, `${import_picocolors61.default.bold(target.name)} had already expired.`);
+        reconcileDeadToken(target, `${import_picocolors64.default.bold(target.name)} had already expired.`);
         return;
       }
       throw new Error(`The server reported no active token with id ${args.id}, but it listed one a moment ago. ` + "The local token has been left alone, since that key may still work. " + "If this server predates `DELETE /v1/registry/cli-tokens/{id}`, revoke from the web app instead.");
     }
     throw withLoginHint(error2);
   }
-  reconcileDeadToken(target, `Revoked ${import_picocolors61.default.bold(target.name)}.`);
+  reconcileDeadToken(target, `Revoked ${import_picocolors64.default.bold(target.name)}.`);
 }
 function reconcileDeadToken(target, headline) {
   let outcome;
@@ -86087,7 +86609,7 @@ function reportLocalToken(headline, outcome) {
 }
 async function runTokenClear() {
   if (!readToken()) {
-    console.log(import_picocolors61.default.dim("No local token stored."));
+    console.log(import_picocolors64.default.dim("No local token stored."));
     return;
   }
   clearToken();
@@ -86187,31 +86709,31 @@ async function runToken(sub, rest2, args) {
 function printTokenHelp() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors61.default.bold("brainbase token")} ${import_picocolors61.default.dim("<command>")}`);
+  out.push(`  ${import_picocolors64.default.bold("brainbase token")} ${import_picocolors64.default.dim("<command>")}`);
   out.push("");
-  out.push(`  ${import_picocolors61.default.cyan("create")}                        ${import_picocolors61.default.dim("issue a new long-lived CLI key (PAT)")}`);
-  out.push(`  ${import_picocolors61.default.cyan("list")}                          ${import_picocolors61.default.dim("show your tokens")}`);
-  out.push(`  ${import_picocolors61.default.cyan("rename")} ${import_picocolors61.default.dim("<id>")}                  ${import_picocolors61.default.dim("relabel a token by id")}`);
-  out.push(`  ${import_picocolors61.default.cyan("revoke")} ${import_picocolors61.default.dim("<id>")}                  ${import_picocolors61.default.dim("revoke a token by id")}`);
-  out.push(`  ${import_picocolors61.default.cyan("clear")}                         ${import_picocolors61.default.dim("forget the local token (does not revoke)")}`);
+  out.push(`  ${import_picocolors64.default.cyan("create")}                        ${import_picocolors64.default.dim("issue a new long-lived CLI key (PAT)")}`);
+  out.push(`  ${import_picocolors64.default.cyan("list")}                          ${import_picocolors64.default.dim("show your tokens")}`);
+  out.push(`  ${import_picocolors64.default.cyan("rename")} ${import_picocolors64.default.dim("<id>")}                  ${import_picocolors64.default.dim("relabel a token by id")}`);
+  out.push(`  ${import_picocolors64.default.cyan("revoke")} ${import_picocolors64.default.dim("<id>")}                  ${import_picocolors64.default.dim("revoke a token by id")}`);
+  out.push(`  ${import_picocolors64.default.cyan("clear")}                         ${import_picocolors64.default.dim("forget the local token (does not revoke)")}`);
   out.push("");
-  out.push(`  ${import_picocolors61.default.bold("create flags")}`);
-  out.push(`  ${import_picocolors61.default.cyan("--name, -n")} ${import_picocolors61.default.dim("<label>")}        ${import_picocolors61.default.dim("token label (prompted if omitted)")}`);
-  out.push(`  ${import_picocolors61.default.cyan("--scopes")} ${import_picocolors61.default.dim("<list>")}           ${import_picocolors61.default.dim("comma-separated; allowed: read, publish, admin")}`);
-  out.push(`                                ${import_picocolors61.default.dim("default: read,publish")}`);
+  out.push(`  ${import_picocolors64.default.bold("create flags")}`);
+  out.push(`  ${import_picocolors64.default.cyan("--name, -n")} ${import_picocolors64.default.dim("<label>")}        ${import_picocolors64.default.dim("token label (prompted if omitted)")}`);
+  out.push(`  ${import_picocolors64.default.cyan("--scopes")} ${import_picocolors64.default.dim("<list>")}           ${import_picocolors64.default.dim("comma-separated; allowed: read, publish, admin")}`);
+  out.push(`                                ${import_picocolors64.default.dim("default: read,publish")}`);
   out.push("");
-  out.push(`  ${import_picocolors61.default.bold("rename flags")}`);
-  out.push(`  ${import_picocolors61.default.cyan("--name, -n")} ${import_picocolors61.default.dim("<label>")}        ${import_picocolors61.default.dim("new label (prompted if omitted)")}`);
+  out.push(`  ${import_picocolors64.default.bold("rename flags")}`);
+  out.push(`  ${import_picocolors64.default.cyan("--name, -n")} ${import_picocolors64.default.dim("<label>")}        ${import_picocolors64.default.dim("new label (prompted if omitted)")}`);
   out.push("");
   console.log(out.join(`
 `));
 }
 
 // src/cli/integrations.ts
-var import_picocolors63 = __toESM(require_picocolors(), 1);
+var import_picocolors66 = __toESM(require_picocolors(), 1);
 
 // src/cli/integration-context.ts
-var import_picocolors62 = __toESM(require_picocolors(), 1);
+var import_picocolors65 = __toESM(require_picocolors(), 1);
 
 // src/core/integration-contexts-api.ts
 var REQUEST_TIMEOUT_MS2 = 30000;
@@ -86360,7 +86882,7 @@ Both need your own \`brainbase login\` session and management rights on the
 agent. BRAINBASE_TOKEN and the PAT saved by \`brainbase token create\` are refused.
 `;
 async function runIntegrationContext(cwd2, argv, options) {
-  const { write: write3, fail: fail3 } = options;
+  const { write: write3, fail: fail4 } = options;
   const [action, ...rest2] = argv;
   const parsed = parseContextArgs(rest2, "--application", "--max-lifetime", "--reason");
   if (action === "help" || action === "--help" || action === "-h" || "help" in parsed) {
@@ -86369,36 +86891,36 @@ async function runIntegrationContext(cwd2, argv, options) {
   }
   if (action !== "create" && action !== "end") {
     const problem = action ? `Unknown integrations context subcommand: ${sanitizeLabel(action)}.` : "Missing integrations context subcommand.";
-    return fail3(`${problem} ${CONTEXT_USAGE.split(`
+    return fail4(`${problem} ${CONTEXT_USAGE.split(`
 `)[0]}`);
   }
   if ("error" in parsed)
-    return fail3(parsed.error);
+    return fail4(parsed.error);
   const { values: values2, positionals } = parsed;
   if (action === "create") {
     if (positionals.length > 0)
-      return fail3(`Unexpected argument: ${sanitizeLabel(positionals[0])}. ${CREATE_USAGE}`);
+      return fail4(`Unexpected argument: ${sanitizeLabel(positionals[0])}. ${CREATE_USAGE}`);
     if (values2.has("--reason"))
-      return fail3(`--reason is for \`context end\`. ${CREATE_USAGE}`);
+      return fail4(`--reason is for \`context end\`. ${CREATE_USAGE}`);
     const target = cloudTargetAgent(cwd2, options);
     if (!target)
-      return fail3(NO_AGENT_MESSAGE);
+      return fail4(NO_AGENT_MESSAGE);
     if ("error" in target)
-      return fail3(target.error);
+      return fail4(target.error);
     if (!UUID_PATTERN.test(target.agentId)) {
-      return fail3(`${sanitizeLabel(target.agentId)} is not an agent id. --agent takes the agent's UUID, as \`brainbase agent list\` shows it.`);
+      return fail4(`${sanitizeLabel(target.agentId)} is not an agent id. --agent takes the agent's UUID, as \`brainbase agent list\` shows it.`);
     }
     const agentId = target.agentId.toLowerCase();
     const application = values2.get("--application");
     if (application === undefined)
-      return fail3(`--application is required. ${CREATE_USAGE}`);
+      return fail4(`--application is required. ${CREATE_USAGE}`);
     if (!APPLICATION_PATTERN.test(application)) {
-      return fail3(`--application must be 1-120 characters of lowercase letters, digits and . _ : / -, starting with a letter or digit (e.g. billing-sync); got "${sanitizeLabel(application)}".`);
+      return fail4(`--application must be 1-120 characters of lowercase letters, digits and . _ : / -, starting with a letter or digit (e.g. billing-sync); got "${sanitizeLabel(application)}".`);
     }
     const rawLifetime = values2.get("--max-lifetime");
     const lifetime = rawLifetime === undefined ? DEFAULT_LIFETIME_S : parseMaxLifetime(rawLifetime);
     if (typeof lifetime !== "number")
-      return fail3(lifetime.error);
+      return fail4(lifetime.error);
     let created;
     try {
       created = await integrationContextsApi.create({
@@ -86407,7 +86929,7 @@ async function runIntegrationContext(cwd2, argv, options) {
         max_lifetime_s: lifetime
       });
     } catch (err) {
-      return fail3(`brainbase integrations context create failed: ${message(err)}`);
+      return fail4(`brainbase integrations context create failed: ${message(err)}`);
     }
     if (options.json) {
       write3(JSON.stringify(created) + `
@@ -86418,24 +86940,24 @@ async function runIntegrationContext(cwd2, argv, options) {
     return 0;
   }
   if (values2.has("--application") || values2.has("--max-lifetime")) {
-    return fail3(`--application and --max-lifetime are for \`context create\`. ${END_USAGE}`);
+    return fail4(`--application and --max-lifetime are for \`context create\`. ${END_USAGE}`);
   }
   if (positionals.length !== 1)
-    return fail3(END_USAGE);
+    return fail4(END_USAGE);
   const contextId = positionals[0];
   if (!UUID_PATTERN.test(contextId)) {
-    return fail3(`${sanitizeLabel(contextId)} is not a context id. Pass the context_id \`context create\` printed.`);
+    return fail4(`${sanitizeLabel(contextId)} is not a context id. Pass the context_id \`context create\` printed.`);
   }
   const reason = (values2.get("--reason") ?? DEFAULT_END_REASON).trim();
   const reasonLength = [...reason].length;
   if (reasonLength < 1 || reasonLength > MAX_REASON_LENGTH2) {
-    return fail3(`--reason must be 1-${MAX_REASON_LENGTH2} characters; got ${reasonLength}.`);
+    return fail4(`--reason must be 1-${MAX_REASON_LENGTH2} characters; got ${reasonLength}.`);
   }
   let ended;
   try {
     ended = await integrationContextsApi.end(contextId.toLowerCase(), reason);
   } catch (err) {
-    return fail3(`brainbase integrations context end failed: ${message(err)}`);
+    return fail4(`brainbase integrations context end failed: ${message(err)}`);
   }
   const id = contextId.toLowerCase();
   if (options.json) {
@@ -86444,7 +86966,7 @@ async function runIntegrationContext(cwd2, argv, options) {
     return 0;
   }
   const state = sanitizeLabel(ended.state);
-  write3(state === "ended" ? `${import_picocolors62.default.green("✓")} Ended integration context ${id}. Its renewal handle and access grants no longer work.
+  write3(state === "ended" ? `${import_picocolors65.default.green("✓")} Ended integration context ${id}. Its renewal handle and access grants no longer work.
 ` : `Integration context ${id} is ${state}. Its renewal handle and access grants no longer work.
 `);
   return 0;
@@ -86503,19 +87025,19 @@ function parseMaxLifetime(raw) {
 function renderCreated(created, agentId, application) {
   const id = sanitizeLabel(created.context_id);
   const lines = [
-    `${import_picocolors62.default.green("✓")} Created integration context ${id}`,
-    `  ${import_picocolors62.default.dim(`agent ${agentId} · application ${application}`)}`,
+    `${import_picocolors65.default.green("✓")} Created integration context ${id}`,
+    `  ${import_picocolors65.default.dim(`agent ${agentId} · application ${application}`)}`,
     "",
     "  Renewal handle:",
     "",
     `    ${sanitizeLabel(created.renewal_handle)}`,
     "",
-    import_picocolors62.default.yellow("  Store it now in the SDK program's secret store: it is shown only this once, and it rotates on every renewal, so the program must save the newest handle each time."),
+    import_picocolors65.default.yellow("  Store it now in the SDK program's secret store: it is shown only this once, and it rotates on every renewal, so the program must save the newest handle each time."),
     "",
     `  Handle expires  ${sanitizeLabel(created.renewal_expires_at ?? "unknown")}`,
-    `  Context ends    ${sanitizeLabel(created.max_expires_at ?? "unknown")}  ${import_picocolors62.default.dim("(its maximum lifetime)")}`,
+    `  Context ends    ${sanitizeLabel(created.max_expires_at ?? "unknown")}  ${import_picocolors65.default.dim("(its maximum lifetime)")}`,
     "",
-    import_picocolors62.default.dim(`  End it sooner with \`brainbase integrations context end ${id}\`.`),
+    import_picocolors65.default.dim(`  End it sooner with \`brainbase integrations context end ${id}\`.`),
     ""
   ];
   return lines.join(`
@@ -86552,7 +87074,7 @@ async function runIntegrations(cwd2, sub, argv, options) {
   const write3 = options.write ?? ((s3) => process.stdout.write(s3));
   const writeErr = options.writeErr ?? ((s3) => process.stderr.write(s3));
   const api4 = { ...integrationsApi, ...options.api };
-  const fail3 = (message2) => {
+  const fail4 = (message2) => {
     if (options.json)
       write3(JSON.stringify({ error: message2 }) + `
 `);
@@ -86572,7 +87094,7 @@ async function runIntegrations(cwd2, sub, argv, options) {
       agentId: options.agentId,
       resolveAgentId: options.resolveAgentId,
       write: write3,
-      fail: fail3
+      fail: fail4
     });
   }
   const isHelpFlag = (s3) => s3 === "--help" || s3 === "-h";
@@ -86585,7 +87107,7 @@ async function runIntegrations(cwd2, sub, argv, options) {
   if (!sub || !known.includes(sub) && !isEffect) {
     const problem = sub ? `Unknown integrations subcommand: ${sanitizeLabel(sub)}` : "Missing integrations subcommand.";
     if (options.json)
-      return fail3(`${problem} ${USAGE.split(`
+      return fail4(`${problem} ${USAGE.split(`
 `)[0]}`);
     writeErr(`${problem}
 ${USAGE}`);
@@ -86593,21 +87115,21 @@ ${USAGE}`);
   }
   const arg = sub === "search" ? argv.join(" ").trim() : argv[0];
   if (sub !== "list" && (!arg || arg.startsWith("-") || sub !== "search" && argv.length > 1)) {
-    return fail3(`Usage: brainbase integrations ${sub} <${sub === "search" ? "query" : isEffect ? "app>[.<action>" : "app"}>`);
+    return fail4(`Usage: brainbase integrations ${sub} <${sub === "search" ? "query" : isEffect ? "app>[.<action>" : "app"}>`);
   }
   if (sub === "search") {
     try {
       const apps = await api4.searchApps(arg);
       return out({ apps }, renderSearch(apps));
     } catch (err) {
-      return fail3(`brainbase integrations search failed: ${message2(err)}`);
+      return fail4(`brainbase integrations search failed: ${message2(err)}`);
     }
   }
   const target = cloudTargetAgent(cwd2, options);
   if (!target)
-    return fail3(NO_AGENT_MESSAGE);
+    return fail4(NO_AGENT_MESSAGE);
   if ("error" in target)
-    return fail3(target.error);
+    return fail4(target.error);
   const { agentId } = target;
   try {
     switch (sub) {
@@ -86627,7 +87149,7 @@ ${USAGE}`);
         return await setEffect(agentId, sub, arg);
     }
   } catch (err) {
-    return fail3(`brainbase integrations ${sub} failed: ${message2(err)}`);
+    return fail4(`brainbase integrations ${sub} failed: ${message2(err)}`);
   }
   async function list3(agentId2) {
     const [accounts, noAuthApps, permissions] = await Promise.all([
@@ -86680,40 +87202,40 @@ ${USAGE}`);
     if (needsAccount(app))
       return await connect2(agentId2, slug, app);
     const added = await api4.addNoAuthApp(agentId2, slug);
-    return out({ app: added.appSlug, name: added.name, needs_account: false, added: true }, `${import_picocolors63.default.green("✓")} Added ${import_picocolors63.default.bold(label2(added.name))}. It needs no account; your agent can use it on its next turn.
+    return out({ app: added.appSlug, name: added.name, needs_account: false, added: true }, `${import_picocolors66.default.green("✓")} Added ${import_picocolors66.default.bold(label2(added.name))}. It needs no account; your agent can use it on its next turn.
 `);
   }
   async function connect2(agentId2, slug, known2) {
     const app = known2 ?? await api4.getApp(slug);
     const name = label2(app.name || slug);
     if (!needsAccount(app)) {
-      return fail3(`${name} needs no account. Run brainbase integrations add ${label2(slug)} instead.`);
+      return fail4(`${name} needs no account. Run brainbase integrations add ${label2(slug)} instead.`);
     }
     const before2 = new Set((await api4.listAccounts(agentId2)).map((a3) => a3.id));
     const token = await api4.createConnectToken(agentId2);
     const url2 = connectUrl(token.connect_link_url, slug);
     if (!url2)
-      return fail3("The server returned an unusable connect link.");
+      return fail4("The server returned an unusable connect link.");
     if (options.json) {
       write3(JSON.stringify({ app: slug, url: url2, expires_at: token.expires_at ?? null }) + `
 `);
       return 0;
     }
     const interactive = options.interactive ?? isInteractive();
-    write3(`Open this link to connect ${import_picocolors63.default.bold(name)}:
+    write3(`Open this link to connect ${import_picocolors66.default.bold(name)}:
 
-  ${import_picocolors63.default.cyan(url2)}
+  ${import_picocolors66.default.cyan(url2)}
 
 `);
-    write3(import_picocolors63.default.dim(`Anyone with this link can connect an account to this agent until it expires, so do not share it.
+    write3(import_picocolors66.default.dim(`Anyone with this link can connect an account to this agent until it expires, so do not share it.
 `));
     if (!options.noOpen && interactive) {
-      write3(import_picocolors63.default.dim(`Opening your browser…
+      write3(import_picocolors66.default.dim(`Opening your browser…
 `));
       (options.openUrl ?? openInBrowser)(url2);
     }
     if (options.noWait) {
-      write3(import_picocolors63.default.dim("Not waiting. Run `brainbase integrations list` to see when it is connected.\n"));
+      write3(import_picocolors66.default.dim("Not waiting. Run `brainbase integrations list` to see when it is connected.\n"));
       return 0;
     }
     const controller = new AbortController;
@@ -86746,7 +87268,7 @@ ${USAGE}`);
       if (spinner2)
         spinner2.stop(text3, ok ? 0 : 2);
       else if (ok)
-        write3(`${import_picocolors63.default.green("✔")} ${text3}
+        write3(`${import_picocolors66.default.green("✔")} ${text3}
 `);
       else
         writeErr(`${text3}
@@ -86770,27 +87292,27 @@ ${USAGE}`);
   async function disconnect2(agentId2, slug) {
     const accounts = (await api4.listAccounts(agentId2)).filter((a3) => isCredentialed(a3) && a3.app?.nameSlug === slug);
     if (accounts.length === 0)
-      return fail3(`No connected ${label2(slug)} account on this agent.`);
+      return fail4(`No connected ${label2(slug)} account on this agent.`);
     let account = accounts[0];
     if (options.account !== undefined) {
       const chosen = accounts.find((a3) => a3.id === options.account);
       if (!chosen)
-        return fail3(`${label2(options.account)} is not a ${label2(slug)} account on this agent. Its accounts: ${describeAccounts(accounts)}.`);
+        return fail4(`${label2(options.account)} is not a ${label2(slug)} account on this agent. Its accounts: ${describeAccounts(accounts)}.`);
       account = chosen;
     } else if (accounts.length > 1) {
-      return fail3(`This agent has ${accounts.length} ${label2(slug)} accounts. Pick one with --account <id>: ${describeAccounts(accounts)}.`);
+      return fail4(`This agent has ${accounts.length} ${label2(slug)} accounts. Pick one with --account <id>: ${describeAccounts(accounts)}.`);
     }
     if (options.json && !options.yes) {
-      return fail3("`brainbase integrations disconnect --json` never prompts. Pass --yes to disconnect without one.");
+      return fail4("`brainbase integrations disconnect --json` never prompts. Pass --yes to disconnect without one.");
     }
     const confirm = options.confirmDisconnect ?? promptForDisconnect;
     const accountLabel = account.name ? `${label2(account.name)} (${account.id})` : account.id;
     if (!await confirm(`Disconnect ${label2(slug)} account ${accountLabel}? Everyone using this agent loses it.`, options.yes)) {
-      return out({ app: slug, account_id: account.id, disconnected: false, outcome: "declined" }, `  ${import_picocolors63.default.dim("Left alone.")}
+      return out({ app: slug, account_id: account.id, disconnected: false, outcome: "declined" }, `  ${import_picocolors66.default.dim("Left alone.")}
 `);
     }
     await api4.deleteAccount(agentId2, account.id);
-    return out({ app: slug, account_id: account.id, disconnected: true }, `${import_picocolors63.default.green("✓")} Disconnected ${import_picocolors63.default.bold(label2(slug))} account ${accountLabel}.
+    return out({ app: slug, account_id: account.id, disconnected: true }, `${import_picocolors66.default.green("✓")} Disconnected ${import_picocolors66.default.bold(label2(slug))} account ${accountLabel}.
 `);
   }
   async function remove2(agentId2, slug) {
@@ -86798,25 +87320,25 @@ ${USAGE}`);
     if (!installed.some((a3) => a3.appSlug === slug)) {
       const accounts = await api4.listAccounts(agentId2);
       if (accounts.some((a3) => isCredentialed(a3) && a3.app?.nameSlug === slug)) {
-        return fail3(`${label2(slug)} is connected with an account. Run brainbase integrations disconnect ${label2(slug)} instead.`);
+        return fail4(`${label2(slug)} is connected with an account. Run brainbase integrations disconnect ${label2(slug)} instead.`);
       }
-      return fail3(`${label2(slug)} is not installed on this agent.`);
+      return fail4(`${label2(slug)} is not installed on this agent.`);
     }
     await api4.removeNoAuthApp(agentId2, slug);
-    return out({ app: slug, removed: true }, `${import_picocolors63.default.green("✓")} Removed ${import_picocolors63.default.bold(label2(slug))}.
+    return out({ app: slug, removed: true }, `${import_picocolors66.default.green("✓")} Removed ${import_picocolors66.default.bold(label2(slug))}.
 `);
   }
   async function setEffect(agentId2, effect, raw) {
     const [app, action] = raw.split(/\.(.*)/s, 2);
     if (!app || action === "")
-      return fail3(`Usage: brainbase integrations ${effect} <app>[.<action>]`);
+      return fail4(`Usage: brainbase integrations ${effect} <app>[.<action>]`);
     if (!permissionToken(app) || action !== undefined && !permissionToken(action)) {
-      return fail3(`${label2(raw)} is not an app or action name. Use the key \`brainbase integrations actions <app>\` shows.`);
+      return fail4(`${label2(raw)} is not an app or action name. Use the key \`brainbase integrations actions <app>\` shows.`);
     }
     const capability = pattern(appSlug(app), action);
     await api4.setPermission(agentId2, capability, effect);
     const scope = action ? `${label2(action)} on ${label2(app)}` : `every ${label2(app)} action without its own rule`;
-    return out({ capability_pattern: capability, effect }, `${import_picocolors63.default.green("✓")} ${capability} → ${import_picocolors63.default.bold(effect)}  ${import_picocolors63.default.dim(`(${scope})`)}
+    return out({ capability_pattern: capability, effect }, `${import_picocolors66.default.green("✓")} ${capability} → ${import_picocolors66.default.bold(effect)}  ${import_picocolors66.default.dim(`(${scope})`)}
 `);
   }
 }
@@ -86869,27 +87391,27 @@ async function promptForDisconnect(question, yes) {
   return ensureNotCancelled(answer);
 }
 var EFFECT_COLOR = {
-  allow: import_picocolors63.default.green,
-  ask: import_picocolors63.default.yellow,
-  deny: import_picocolors63.default.red
+  allow: import_picocolors66.default.green,
+  ask: import_picocolors66.default.yellow,
+  deny: import_picocolors66.default.red
 };
 function effectLabel(effect, width = 0) {
-  return (EFFECT_COLOR[effect] ?? import_picocolors63.default.dim)(sanitizeLabel(effect).padEnd(width));
+  return (EFFECT_COLOR[effect] ?? import_picocolors66.default.dim)(sanitizeLabel(effect).padEnd(width));
 }
 function renderList(rows, permissions) {
   const lines = [""];
   if (!permissions.permissionsAvailable) {
-    lines.push(import_picocolors63.default.yellow("  Integrations only work on Kafka agents for now; this agent cannot use them."), "");
+    lines.push(import_picocolors66.default.yellow("  Integrations only work on Kafka agents for now; this agent cannot use them."), "");
   }
   if (rows.length === 0) {
-    lines.push(import_picocolors63.default.dim("  No integrations on this agent."));
-    lines.push(import_picocolors63.default.dim("  Find one with `brainbase integrations search <query>`, then `brainbase integrations add <app>`."), "");
+    lines.push(import_picocolors66.default.dim("  No integrations on this agent."));
+    lines.push(import_picocolors66.default.dim("  Find one with `brainbase integrations search <query>`, then `brainbase integrations add <app>`."), "");
     return lines.join(`
 `);
   }
   for (const row of rows) {
     const healthy = row.accounts.every((a3) => a3.healthy);
-    const mark = healthy ? import_picocolors63.default.green("✓") : import_picocolors63.default.yellow("!");
+    const mark = healthy ? import_picocolors66.default.green("✓") : import_picocolors66.default.yellow("!");
     const bits = [sanitizeLabel(row.name)];
     if (!row.needs_account)
       bits.push("no account needed");
@@ -86897,35 +87419,35 @@ function renderList(rows, permissions) {
       bits.push(`account ${account.name ? sanitizeLabel(account.name) : account.id}${account.healthy ? "" : " (needs reconnecting)"}`);
     }
     const effect = row.effect ?? permissions.defaultEffect;
-    lines.push(`  ${mark} ${import_picocolors63.default.bold(sanitizeLabel(row.app))}  ${import_picocolors63.default.dim(bits.join(" · "))}  ${effectLabel(effect)}${row.effect ? "" : import_picocolors63.default.dim(" (default)")}`);
+    lines.push(`  ${mark} ${import_picocolors66.default.bold(sanitizeLabel(row.app))}  ${import_picocolors66.default.dim(bits.join(" · "))}  ${effectLabel(effect)}${row.effect ? "" : import_picocolors66.default.dim(" (default)")}`);
   }
-  lines.push("", import_picocolors63.default.dim("  Run `brainbase integrations actions <app>` to see and set per-action permissions."), "");
+  lines.push("", import_picocolors66.default.dim("  Run `brainbase integrations actions <app>` to see and set per-action permissions."), "");
   return lines.join(`
 `);
 }
 function renderSearch(apps) {
   if (apps.length === 0)
-    return import_picocolors63.default.dim("No apps match.") + `
+    return import_picocolors66.default.dim("No apps match.") + `
 `;
   const lines = [""];
   for (const app of apps) {
-    const hint = needsAccount(app) ? "" : import_picocolors63.default.dim("  no account needed");
-    lines.push(`  ${import_picocolors63.default.bold(sanitizeLabel(app.nameSlug))}  ${sanitizeLabel(app.name)}${hint}`);
+    const hint2 = needsAccount(app) ? "" : import_picocolors66.default.dim("  no account needed");
+    lines.push(`  ${import_picocolors66.default.bold(sanitizeLabel(app.nameSlug))}  ${sanitizeLabel(app.name)}${hint2}`);
   }
-  lines.push("", import_picocolors63.default.dim("  Add one with `brainbase integrations add <app>`."), "");
+  lines.push("", import_picocolors66.default.dim("  Add one with `brainbase integrations add <app>`."), "");
   return lines.join(`
 `);
 }
 function renderActions(slug, rows) {
   if (rows.length === 0)
-    return import_picocolors63.default.dim(`No actions found for ${sanitizeLabel(slug)}.`) + `
+    return import_picocolors66.default.dim(`No actions found for ${sanitizeLabel(slug)}.`) + `
 `;
   const lines = [""];
   for (const row of rows) {
-    const source = import_picocolors63.default.dim((row.source === "action" ? "" : `(${row.source})`).padEnd(9));
-    lines.push(`  ${effectLabel(row.effect, 5)} ${source} ${import_picocolors63.default.bold(sanitizeLabel(row.key))}  ${import_picocolors63.default.dim(sanitizeLabel(row.name))}`);
+    const source = import_picocolors66.default.dim((row.source === "action" ? "" : `(${row.source})`).padEnd(9));
+    lines.push(`  ${effectLabel(row.effect, 5)} ${source} ${import_picocolors66.default.bold(sanitizeLabel(row.key))}  ${import_picocolors66.default.dim(sanitizeLabel(row.name))}`);
   }
-  lines.push("", import_picocolors63.default.dim(`  Change one with \`brainbase integrations allow|ask|deny ${sanitizeLabel(slug)}.<action>\`, or the whole app with \`… ${sanitizeLabel(slug)}\`.`), "");
+  lines.push("", import_picocolors66.default.dim(`  Change one with \`brainbase integrations allow|ask|deny ${sanitizeLabel(slug)}.<action>\`, or the whole app with \`… ${sanitizeLabel(slug)}\`.`), "");
   return lines.join(`
 `);
 }
@@ -86989,14 +87511,14 @@ async function waitForAccount(agentId, slug, before2, options) {
 }
 
 // src/cli/task.ts
-var import_picocolors69 = __toESM(require_picocolors(), 1);
+var import_picocolors72 = __toESM(require_picocolors(), 1);
 
 // src/cli/task-create.ts
-var import_picocolors65 = __toESM(require_picocolors(), 1);
+var import_picocolors68 = __toESM(require_picocolors(), 1);
 import { randomUUID as randomUUID4 } from "node:crypto";
 
 // src/cli/task-update.ts
-var import_picocolors64 = __toESM(require_picocolors(), 1);
+var import_picocolors67 = __toESM(require_picocolors(), 1);
 var TASK_UPDATE_USAGE = "brainbase task update <task-id> [--title <text> | --clear-title] [--metadata key=value]... [--unset-metadata <key>]... [--clear-metadata] [--model <id> | --clear-model] [--json]";
 var TITLE_MAX = 200;
 var MODEL_UNSUPPORTED = "This control plane does not support changing a task's model yet.";
@@ -87135,25 +87657,25 @@ function applyLabelEdit(current, edit) {
 }
 function format(task) {
   const lines = [""];
-  const title = task.title?.trim() ? sanitizeLabel(task.title) : import_picocolors64.default.dim("(untitled)");
-  lines.push(`  ${import_picocolors64.default.green("updated")}  ${import_picocolors64.default.bold(title)}`);
+  const title = task.title?.trim() ? sanitizeLabel(task.title) : import_picocolors67.default.dim("(untitled)");
+  lines.push(`  ${import_picocolors67.default.green("updated")}  ${import_picocolors67.default.bold(title)}`);
   lines.push("");
-  lines.push(`  ${import_picocolors64.default.dim("task")}     ${sanitizeLabel(task.id)}`);
+  lines.push(`  ${import_picocolors67.default.dim("task")}     ${sanitizeLabel(task.id)}`);
   if (task.model !== undefined) {
-    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors64.default.dim("agent default");
-    lines.push(`  ${import_picocolors64.default.dim("model")}    ${model}`);
+    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors67.default.dim("agent default");
+    lines.push(`  ${import_picocolors67.default.dim("model")}    ${model}`);
   }
   const metadata = Object.entries(task.metadata ?? {});
   lines.push("");
-  lines.push(`  ${import_picocolors64.default.bold(import_picocolors64.default.dim("METADATA"))}`);
+  lines.push(`  ${import_picocolors67.default.bold(import_picocolors67.default.dim("METADATA"))}`);
   if (metadata.length === 0) {
-    lines.push(`  ${import_picocolors64.default.dim("none")}`);
+    lines.push(`  ${import_picocolors67.default.dim("none")}`);
   }
   for (const [key2, value2] of metadata) {
-    lines.push(`  ${import_picocolors64.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(value2)}`);
+    lines.push(`  ${import_picocolors67.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(value2)}`);
   }
   lines.push("");
-  lines.push(`  ${import_picocolors64.default.dim("read it with")} ${import_picocolors64.default.cyan(`brainbase task get ${sanitizeLabel(task.id)}`)}`, "");
+  lines.push(`  ${import_picocolors67.default.dim("read it with")} ${import_picocolors67.default.cyan(`brainbase task get ${sanitizeLabel(task.id)}`)}`, "");
   return lines.join(`
 `);
 }
@@ -87291,24 +87813,24 @@ async function waitForCreatedTask(created, options, dependencies, version2) {
       return;
     }
     if (outcome.kind === "timeout") {
-      console.log(import_picocolors65.default.yellow(`Timed out after ${options.timeoutSeconds}s with the task still ${status}.`));
+      console.log(import_picocolors68.default.yellow(`Timed out after ${options.timeoutSeconds}s with the task still ${status}.`));
       return;
     }
     if (outcome.kind === "interrupted") {
-      console.log(import_picocolors65.default.yellow("Interrupted. The task is still running."));
+      console.log(import_picocolors68.default.yellow("Interrupted. The task is still running."));
       return;
     }
-    console.log(code === 0 ? import_picocolors65.default.green("Task completed.") : import_picocolors65.default.red(`Task finished as ${status}.`));
+    console.log(code === 0 ? import_picocolors68.default.green("Task completed.") : import_picocolors68.default.red(`Task finished as ${status}.`));
   } finally {
     process.removeListener("SIGINT", onSigint);
   }
 }
 
 // src/cli/task-get.ts
-var import_picocolors67 = __toESM(require_picocolors(), 1);
+var import_picocolors70 = __toESM(require_picocolors(), 1);
 
 // src/cli/task-list.ts
-var import_picocolors66 = __toESM(require_picocolors(), 1);
+var import_picocolors69 = __toESM(require_picocolors(), 1);
 
 // src/core/agent-names.ts
 async function agentNames(ids) {
@@ -87373,29 +87895,29 @@ function labelFilter(options) {
 function formatTaskList(tasks, names, agentId, interfaceId, labelFiltered = false) {
   const lines = [""];
   if (tasks.length === 0 && labelFiltered) {
-    lines.push(`  ${import_picocolors66.default.dim("No tasks carry every label given with --metadata.")}`, "");
+    lines.push(`  ${import_picocolors69.default.dim("No tasks carry every label given with --metadata.")}`, "");
     return lines.join(`
 `);
   }
   if (tasks.length === 0 && interfaceId) {
     const id = sanitizeLabel(interfaceId);
-    lines.push(`  ${import_picocolors66.default.dim(`No build conversations for interface ${id}.`)}`, "", `  ${import_picocolors66.default.dim("start one with")} ${import_picocolors66.default.cyan(`brainbase interface build ${id} "..."`)}`, "");
+    lines.push(`  ${import_picocolors69.default.dim(`No build conversations for interface ${id}.`)}`, "", `  ${import_picocolors69.default.dim("start one with")} ${import_picocolors69.default.cyan(`brainbase interface build ${id} "..."`)}`, "");
     return lines.join(`
 `);
   }
   if (tasks.length === 0) {
-    lines.push(`  ${import_picocolors66.default.dim(agentId ? `No tasks for agent ${agentId}.` : "No tasks yet.")}`, "", `  ${import_picocolors66.default.dim("start one with")} ${import_picocolors66.default.cyan('brainbase task create --message "..."')}`, "");
+    lines.push(`  ${import_picocolors69.default.dim(agentId ? `No tasks for agent ${agentId}.` : "No tasks yet.")}`, "", `  ${import_picocolors69.default.dim("start one with")} ${import_picocolors69.default.cyan('brainbase task create --message "..."')}`, "");
     return lines.join(`
 `);
   }
   for (const task of tasks) {
-    const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors66.default.dim("(untitled)");
-    lines.push(`  ${statusLabel(task.status)}  ${import_picocolors66.default.bold(title)}`);
-    lines.push(`    ${import_picocolors66.default.dim(sanitizeLabel(task.id))}`);
-    lines.push(`    ${import_picocolors66.default.dim(`agent ${agentLabel(task.agent_id, names)} · created ${sanitizeLabel(task.created_at)}`)}`);
+    const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors69.default.dim("(untitled)");
+    lines.push(`  ${statusLabel(task.status)}  ${import_picocolors69.default.bold(title)}`);
+    lines.push(`    ${import_picocolors69.default.dim(sanitizeLabel(task.id))}`);
+    lines.push(`    ${import_picocolors69.default.dim(`agent ${agentLabel(task.agent_id, names)} · created ${sanitizeLabel(task.created_at)}`)}`);
     lines.push("");
   }
-  lines.push(`  ${import_picocolors66.default.dim("inspect one with")} ${import_picocolors66.default.cyan("brainbase task get <id>")}`, "");
+  lines.push(`  ${import_picocolors69.default.dim("inspect one with")} ${import_picocolors69.default.cyan("brainbase task get <id>")}`, "");
   return lines.join(`
 `);
 }
@@ -87403,16 +87925,16 @@ function statusLabel(status) {
   const padded = sanitizeLabel(status).padEnd(14);
   switch (status) {
     case "success":
-      return import_picocolors66.default.green(padded);
+      return import_picocolors69.default.green(padded);
     case "fail":
-      return import_picocolors66.default.red(padded);
+      return import_picocolors69.default.red(padded);
     case "need_more_info":
-      return import_picocolors66.default.yellow(padded);
+      return import_picocolors69.default.yellow(padded);
     case "running":
     case "initializing":
-      return import_picocolors66.default.cyan(padded);
+      return import_picocolors69.default.cyan(padded);
     default:
-      return import_picocolors66.default.dim(padded);
+      return import_picocolors69.default.dim(padded);
   }
 }
 
@@ -87446,60 +87968,60 @@ async function readEvalRuns(task) {
 }
 function format2(task, evals, names) {
   const lines = [""];
-  const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors67.default.dim("(untitled)");
+  const title = sanitizeLabel(task.title ?? "").trim() || import_picocolors70.default.dim("(untitled)");
   const id = sanitizeLabel(task.id);
-  lines.push(`  ${statusLabel(task.status)}  ${import_picocolors67.default.bold(title)}`);
+  lines.push(`  ${statusLabel(task.status)}  ${import_picocolors70.default.bold(title)}`);
   lines.push("");
-  lines.push(`  ${import_picocolors67.default.dim("task")}     ${id}`);
-  lines.push(`  ${import_picocolors67.default.dim("agent")}    ${agentLabel(task.agent_id, names)}`);
+  lines.push(`  ${import_picocolors70.default.dim("task")}     ${id}`);
+  lines.push(`  ${import_picocolors70.default.dim("agent")}    ${agentLabel(task.agent_id, names)}`);
   if (task.model !== undefined) {
-    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors67.default.dim("agent default");
-    lines.push(`  ${import_picocolors67.default.dim("model")}    ${model}`);
+    const model = task.model?.trim() ? sanitizeLabel(task.model) : import_picocolors70.default.dim("agent default");
+    lines.push(`  ${import_picocolors70.default.dim("model")}    ${model}`);
   }
-  lines.push(`  ${import_picocolors67.default.dim("created")}  ${sanitizeLabel(task.created_at)}`);
+  lines.push(`  ${import_picocolors70.default.dim("created")}  ${sanitizeLabel(task.created_at)}`);
   if (task.parent_task_id) {
-    lines.push(`  ${import_picocolors67.default.dim("parent")}   ${sanitizeLabel(task.parent_task_id)}`);
+    lines.push(`  ${import_picocolors70.default.dim("parent")}   ${sanitizeLabel(task.parent_task_id)}`);
   }
   if (task.machine_id) {
     const size2 = task.machine_size ? ` (size ${sanitizeLabel(task.machine_size)})` : "";
-    lines.push(`  ${import_picocolors67.default.dim("machine")}  ${sanitizeLabel(task.machine_id)}${size2}`);
+    lines.push(`  ${import_picocolors70.default.dim("machine")}  ${sanitizeLabel(task.machine_id)}${size2}`);
   }
   if (task.sandbox_id)
-    lines.push(`  ${import_picocolors67.default.dim("sandbox")}  ${sanitizeLabel(task.sandbox_id)}`);
+    lines.push(`  ${import_picocolors70.default.dim("sandbox")}  ${sanitizeLabel(task.sandbox_id)}`);
   const [failure, ...failureRest] = sanitizeLines(failureSummary(task) ?? "").filter((line2) => line2.trim());
   if (failure) {
     const label3 = "  failure  ";
     lines.push("");
-    lines.push(`  ${import_picocolors67.default.red("failure")}  ${failure}`);
+    lines.push(`  ${import_picocolors70.default.red("failure")}  ${failure}`);
     for (const line2 of failureRest)
       lines.push(`${" ".repeat(label3.length)}${line2}`);
   }
   const metadata = Object.entries(task.metadata ?? {});
   if (metadata.length > 0) {
     lines.push("");
-    lines.push(`  ${import_picocolors67.default.bold(import_picocolors67.default.dim("METADATA"))}`);
+    lines.push(`  ${import_picocolors70.default.bold(import_picocolors70.default.dim("METADATA"))}`);
     for (const [key2, value2] of metadata) {
-      lines.push(`  ${import_picocolors67.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(String(value2))}`);
+      lines.push(`  ${import_picocolors70.default.dim(sanitizeLabel(key2))}  ${sanitizeLabel(String(value2))}`);
     }
   }
   lines.push("");
-  lines.push(`  ${import_picocolors67.default.bold(import_picocolors67.default.dim("EVAL VERDICTS"))}`);
+  lines.push(`  ${import_picocolors70.default.bold(import_picocolors70.default.dim("EVAL VERDICTS"))}`);
   if (evals.unavailable) {
-    lines.push(`  ${import_picocolors67.default.dim(sanitizeLabel(evals.unavailable))}`);
+    lines.push(`  ${import_picocolors70.default.dim(sanitizeLabel(evals.unavailable))}`);
   } else if (evals.runs.length === 0) {
-    lines.push(`  ${import_picocolors67.default.dim("none")}`);
+    lines.push(`  ${import_picocolors70.default.dim("none")}`);
   } else {
     for (const run of evals.runs) {
-      const verdict = run.passed === true ? import_picocolors67.default.green("pass") : run.passed === false ? import_picocolors67.default.red("fail") : import_picocolors67.default.dim(sanitizeLabel(run.status));
+      const verdict = run.passed === true ? import_picocolors70.default.green("pass") : run.passed === false ? import_picocolors70.default.red("fail") : import_picocolors70.default.dim(sanitizeLabel(run.status));
       lines.push(`  ${verdict}  ${sanitizeLabel(run.eval_slug ?? run.eval_id)}`);
       for (const line2 of sanitizeLines(run.reasoning ?? "")) {
         if (line2.trim())
-          lines.push(`    ${import_picocolors67.default.dim(line2)}`);
+          lines.push(`    ${import_picocolors70.default.dim(line2)}`);
       }
     }
   }
   lines.push("");
-  lines.push(`  ${import_picocolors67.default.dim("read its transcript with")} ${import_picocolors67.default.cyan(`brainbase task logs ${id}`)}`, "");
+  lines.push(`  ${import_picocolors70.default.dim("read its transcript with")} ${import_picocolors70.default.cyan(`brainbase task logs ${id}`)}`, "");
   return lines.join(`
 `);
 }
@@ -87516,7 +88038,7 @@ function failureSummary(task) {
 }
 
 // src/cli/task-logs.ts
-var import_picocolors68 = __toESM(require_picocolors(), 1);
+var import_picocolors71 = __toESM(require_picocolors(), 1);
 
 // src/core/task-events.ts
 var DEFAULT_RETRY_BUDGET_MS = 60000;
@@ -87799,14 +88321,14 @@ async function runTaskLogs(taskId, options = {}, dependencies = {}) {
     console.log(renderEvent(event, messages));
   }
   if (ordered.length === 0) {
-    console.log(import_picocolors68.default.dim("No events for this task yet."));
+    console.log(import_picocolors71.default.dim("No events for this task yet."));
   }
 }
 async function followTranscript(taskId, options, dependencies) {
   const backfill = options.limit === undefined ? "" : `?backfill=${options.limit}`;
   const { url: url2, resolveBearer } = await masStreamTarget(`/tasks/${encodeURIComponent(taskId)}/events/stream${backfill}`);
   if (!options.json) {
-    console.log(import_picocolors68.default.dim(`Following task ${taskId} — Ctrl-C to stop.`));
+    console.log(import_picocolors71.default.dim(`Following task ${taskId} — Ctrl-C to stop.`));
   }
   const setExitCode = dependencies.setExitCode ?? ((code) => process.exitCode = code);
   const controller = new AbortController;
@@ -87848,13 +88370,13 @@ async function followTranscript(taskId, options, dependencies) {
         } else if (options.json) {
           console.log(JSON.stringify(frame));
         } else {
-          console.log(import_picocolors68.default.dim(frame.type));
+          console.log(import_picocolors71.default.dim(frame.type));
         }
       },
       onOpen: () => settle.noteFrame(),
       onReconnect: (reason) => {
         settle.noteDisconnected();
-        console.error(import_picocolors68.default.dim(`reconnecting — ${reason}`));
+        console.error(import_picocolors71.default.dim(`reconnecting — ${reason}`));
       }
     });
     if (interruptCode !== undefined)
@@ -88532,78 +89054,78 @@ ${didYouMean(sub, ["create", "list", "get", "logs", "send", "stop", "update", "d
 function printHelp5() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("brainbase task")} ${import_picocolors69.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors72.default.bold("brainbase task")} ${import_picocolors72.default.dim("<sub> [options]")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.cyan("create")} ${import_picocolors69.default.dim("--message <text>")}   ${import_picocolors69.default.dim("create a task and start its first run")}`);
-  out.push(`  ${import_picocolors69.default.cyan("list | ls")}                ${import_picocolors69.default.dim("recent tasks you can reach (--json for scripts)")}`);
-  out.push(`  ${import_picocolors69.default.cyan("get")} ${import_picocolors69.default.dim("<task-id>")}            ${import_picocolors69.default.dim("one task: status, agent, machine, eval verdicts")}`);
-  out.push(`  ${import_picocolors69.default.cyan("logs")} ${import_picocolors69.default.dim("<task-id> [--follow]")} ${import_picocolors69.default.dim("one line per event in the task's transcript, or tail it live")}`);
-  out.push(`  ${import_picocolors69.default.cyan("send")} ${import_picocolors69.default.dim("<task-id> <message>")} ${import_picocolors69.default.dim("send a follow-up, including while the agent is running")}`);
-  out.push(`  ${import_picocolors69.default.cyan("stop")} ${import_picocolors69.default.dim("<task-id>")}           ${import_picocolors69.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
-  out.push(`  ${import_picocolors69.default.cyan("update")} ${import_picocolors69.default.dim("<task-id>")}         ${import_picocolors69.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
-  out.push(`  ${import_picocolors69.default.cyan("delete")} ${import_picocolors69.default.dim("<task-id>")}         ${import_picocolors69.default.dim("permanently delete a stopped task and tear down its sandbox (--yes to skip the prompt)")}`);
+  out.push(`  ${import_picocolors72.default.cyan("create")} ${import_picocolors72.default.dim("--message <text>")}   ${import_picocolors72.default.dim("create a task and start its first run")}`);
+  out.push(`  ${import_picocolors72.default.cyan("list | ls")}                ${import_picocolors72.default.dim("recent tasks you can reach (--json for scripts)")}`);
+  out.push(`  ${import_picocolors72.default.cyan("get")} ${import_picocolors72.default.dim("<task-id>")}            ${import_picocolors72.default.dim("one task: status, agent, machine, eval verdicts")}`);
+  out.push(`  ${import_picocolors72.default.cyan("logs")} ${import_picocolors72.default.dim("<task-id> [--follow]")} ${import_picocolors72.default.dim("one line per event in the task's transcript, or tail it live")}`);
+  out.push(`  ${import_picocolors72.default.cyan("send")} ${import_picocolors72.default.dim("<task-id> <message>")} ${import_picocolors72.default.dim("send a follow-up, including while the agent is running")}`);
+  out.push(`  ${import_picocolors72.default.cyan("stop")} ${import_picocolors72.default.dim("<task-id>")}           ${import_picocolors72.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
+  out.push(`  ${import_picocolors72.default.cyan("update")} ${import_picocolors72.default.dim("<task-id>")}         ${import_picocolors72.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
+  out.push(`  ${import_picocolors72.default.cyan("delete")} ${import_picocolors72.default.dim("<task-id>")}         ${import_picocolors72.default.dim("permanently delete a stopped task and tear down its sandbox (--yes to skip the prompt)")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("create flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--message <text>")}   required first user message`);
-  out.push(`  ${import_picocolors69.default.dim("--agent <id>")}       override the claimed agent in brainbase.agent.yaml`);
-  out.push(`  ${import_picocolors69.default.dim("--interface <id>")}   open it as a build conversation for this interface (agent defaults to the interface's)`);
-  out.push(`  ${import_picocolors69.default.dim("--title <text>")}     optional task title`);
-  out.push(`  ${import_picocolors69.default.dim("--model <id>")}       optional model override`);
-  out.push(`  ${import_picocolors69.default.dim("--version <v>")}      run a saved version of the agent: 12, v12 or a version id (\`agent versions list\`)`);
-  out.push(`  ${import_picocolors69.default.dim("--metadata key=value")} label the task (repeatable)`);
-  out.push(`  ${import_picocolors69.default.dim("--wait")}             block until the task finishes; exit 1 unless it succeeded`);
-  out.push(`  ${import_picocolors69.default.dim("--timeout <secs>")}   give up waiting after <secs> and exit 1 (needs --wait)`);
+  out.push(`  ${import_picocolors72.default.bold("create flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--message <text>")}   required first user message`);
+  out.push(`  ${import_picocolors72.default.dim("--agent <id>")}       override the claimed agent in brainbase.agent.yaml`);
+  out.push(`  ${import_picocolors72.default.dim("--interface <id>")}   open it as a build conversation for this interface (agent defaults to the interface's)`);
+  out.push(`  ${import_picocolors72.default.dim("--title <text>")}     optional task title`);
+  out.push(`  ${import_picocolors72.default.dim("--model <id>")}       optional model override`);
+  out.push(`  ${import_picocolors72.default.dim("--version <v>")}      run a saved version of the agent: 12, v12 or a version id (\`agent versions list\`)`);
+  out.push(`  ${import_picocolors72.default.dim("--metadata key=value")} label the task (repeatable)`);
+  out.push(`  ${import_picocolors72.default.dim("--wait")}             block until the task finishes; exit 1 unless it succeeded`);
+  out.push(`  ${import_picocolors72.default.dim("--timeout <secs>")}   give up waiting after <secs> and exit 1 (needs --wait)`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("list flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--agent <id>")}       only this agent's tasks`);
-  out.push(`  ${import_picocolors69.default.dim("--interface <id>")}   only this interface's build conversations (hidden from a plain list)`);
-  out.push(`  ${import_picocolors69.default.dim("--metadata key=value")} only tasks carrying this label (repeatable; all must match)`);
-  out.push(`  ${import_picocolors69.default.dim("--limit <n>")}        cap the page (1-200, server default 50)`);
+  out.push(`  ${import_picocolors72.default.bold("list flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--agent <id>")}       only this agent's tasks`);
+  out.push(`  ${import_picocolors72.default.dim("--interface <id>")}   only this interface's build conversations (hidden from a plain list)`);
+  out.push(`  ${import_picocolors72.default.dim("--metadata key=value")} only tasks carrying this label (repeatable; all must match)`);
+  out.push(`  ${import_picocolors72.default.dim("--limit <n>")}        cap the page (1-200, server default 50)`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("logs flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--limit <n>")}        stop after <n> events instead of the whole transcript; with --follow, the first page size`);
-  out.push(`  ${import_picocolors69.default.dim("--follow, -f")}       stay attached and print events as they land, until the task finishes and any queued follow-ups have run`);
+  out.push(`  ${import_picocolors72.default.bold("logs flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--limit <n>")}        stop after <n> events instead of the whole transcript; with --follow, the first page size`);
+  out.push(`  ${import_picocolors72.default.dim("--follow, -f")}       stay attached and print events as they land, until the task finishes and any queued follow-ups have run`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("update flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--title <text>")}          new title`);
-  out.push(`  ${import_picocolors69.default.dim("--clear-title")}           remove the title; automatic titling may name the task again on a later turn`);
-  out.push(`  ${import_picocolors69.default.dim("--metadata key=value")}    set one label, keeping the others (repeatable)`);
-  out.push(`  ${import_picocolors69.default.dim("--unset-metadata <key>")}  remove one label (repeatable)`);
-  out.push(`  ${import_picocolors69.default.dim("                         the server applies label edits in one step, so concurrent edits from other clients are kept")}`);
-  out.push(`  ${import_picocolors69.default.dim("--clear-metadata")}        remove every label; with --metadata, the labels become exactly those given`);
-  out.push(`  ${import_picocolors69.default.dim("--model <id>")}            switch the model the task's next turn runs on (the running turn keeps its model)`);
-  out.push(`  ${import_picocolors69.default.dim("--clear-model")}           go back to the agent's default model from the next turn`);
+  out.push(`  ${import_picocolors72.default.bold("update flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--title <text>")}          new title`);
+  out.push(`  ${import_picocolors72.default.dim("--clear-title")}           remove the title; automatic titling may name the task again on a later turn`);
+  out.push(`  ${import_picocolors72.default.dim("--metadata key=value")}    set one label, keeping the others (repeatable)`);
+  out.push(`  ${import_picocolors72.default.dim("--unset-metadata <key>")}  remove one label (repeatable)`);
+  out.push(`  ${import_picocolors72.default.dim("                         the server applies label edits in one step, so concurrent edits from other clients are kept")}`);
+  out.push(`  ${import_picocolors72.default.dim("--clear-metadata")}        remove every label; with --metadata, the labels become exactly those given`);
+  out.push(`  ${import_picocolors72.default.dim("--model <id>")}            switch the model the task's next turn runs on (the running turn keeps its model)`);
+  out.push(`  ${import_picocolors72.default.dim("--clear-model")}           go back to the agent's default model from the next turn`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("send flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--input-id <uuid>")}  recover the same request using its original ID and identical message`);
-  out.push(`  ${import_picocolors69.default.dim("                    omit it to send a new follow-up; an unconfirmed receipt is never automatically replayed")}`);
-  out.push(`  ${import_picocolors69.default.dim("                    admission disabled/recovery unavailable means no input was admitted; retry the same ID after recovery")}`);
+  out.push(`  ${import_picocolors72.default.bold("send flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--input-id <uuid>")}  recover the same request using its original ID and identical message`);
+  out.push(`  ${import_picocolors72.default.dim("                    omit it to send a new follow-up; an unconfirmed receipt is never automatically replayed")}`);
+  out.push(`  ${import_picocolors72.default.dim("                    admission disabled/recovery unavailable means no input was admitted; retry the same ID after recovery")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("send and stop flags")}`);
-  out.push(`  ${import_picocolors69.default.dim("--generation <n>")}   retain the printed generation when retrying; defaults to a fresh snapshot for a new operation`);
-  out.push(`  ${import_picocolors69.default.dim("                    Stop errors may follow queued-input cancellation; retry the printed command to avoid stopping newer work")}`);
+  out.push(`  ${import_picocolors72.default.bold("send and stop flags")}`);
+  out.push(`  ${import_picocolors72.default.dim("--generation <n>")}   retain the printed generation when retrying; defaults to a fresh snapshot for a new operation`);
+  out.push(`  ${import_picocolors72.default.dim("                    Stop errors may follow queued-input cancellation; retry the printed command to avoid stopping newer work")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.bold("every subcommand")}`);
-  out.push(`  ${import_picocolors69.default.dim("--json")}             machine-readable output — create prints task_id, agent_id and status (with --version, also agent_version_id and version_number); list, get, logs, send, stop and update print the raw records; delete prints id and deleted`);
-  out.push(`  ${import_picocolors69.default.dim("                    send and stop include expected_generation for safe retries; send also reports idempotency_replayed when present")}`);
-  out.push(`  ${import_picocolors69.default.dim("                    logs --follow --json prints one record per line, since a live stream has no end to close on")}`);
+  out.push(`  ${import_picocolors72.default.bold("every subcommand")}`);
+  out.push(`  ${import_picocolors72.default.dim("--json")}             machine-readable output — create prints task_id, agent_id and status (with --version, also agent_version_id and version_number); list, get, logs, send, stop and update print the raw records; delete prints id and deleted`);
+  out.push(`  ${import_picocolors72.default.dim("                    send and stop include expected_generation for safe retries; send also reports idempotency_replayed when present")}`);
+  out.push(`  ${import_picocolors72.default.dim("                    logs --follow --json prints one record per line, since a live stream has no end to close on")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.dim("Exit codes with --wait:")} ${import_picocolors69.default.dim("0 succeeded · 1 failed, needs input, or timed out · 130 interrupted")}`);
-  out.push(`  ${import_picocolors69.default.dim("Exit codes with --follow:")} ${import_picocolors69.default.dim("0 task reached a terminal state · 1 stream refused, or unreachable for 60s · 130 interrupted (Ctrl-C) · 143 terminated")}`);
-  out.push(`  ${import_picocolors69.default.dim("Exit codes with send:")} ${import_picocolors69.default.dim("0 queued, dispatching, submitted or completed · 1 unconfirmed, cancelled, failed or request error")}`);
-  out.push(`  ${import_picocolors69.default.dim("Ctrl-C while waiting or following logs detaches; use task stop to cancel remote work.")}`);
+  out.push(`  ${import_picocolors72.default.dim("Exit codes with --wait:")} ${import_picocolors72.default.dim("0 succeeded · 1 failed, needs input, or timed out · 130 interrupted")}`);
+  out.push(`  ${import_picocolors72.default.dim("Exit codes with --follow:")} ${import_picocolors72.default.dim("0 task reached a terminal state · 1 stream refused, or unreachable for 60s · 130 interrupted (Ctrl-C) · 143 terminated")}`);
+  out.push(`  ${import_picocolors72.default.dim("Exit codes with send:")} ${import_picocolors72.default.dim("0 queued, dispatching, submitted or completed · 1 unconfirmed, cancelled, failed or request error")}`);
+  out.push(`  ${import_picocolors72.default.dim("Ctrl-C while waiting or following logs detaches; use task stop to cancel remote work.")}`);
   out.push("");
-  out.push(`  ${import_picocolors69.default.dim("Flag-like values:")} use ${import_picocolors69.default.cyan("--flag=value")} or ${import_picocolors69.default.cyan("--flag -- <value>")}`);
+  out.push(`  ${import_picocolors72.default.dim("Flag-like values:")} use ${import_picocolors72.default.cyan("--flag=value")} or ${import_picocolors72.default.cyan("--flag -- <value>")}`);
   out.push("");
   console.log(out.join(`
 `));
 }
 
 // src/cli/machine.ts
-var import_picocolors72 = __toESM(require_picocolors(), 1);
+var import_picocolors75 = __toESM(require_picocolors(), 1);
 
 // src/cli/machine-list.ts
-var import_picocolors70 = __toESM(require_picocolors(), 1);
+var import_picocolors73 = __toESM(require_picocolors(), 1);
 async function runMachineList(args = {}) {
   if (!args.json)
     banner("machine list — sandboxes you can reach");
@@ -88621,7 +89143,7 @@ async function runMachineList(args = {}) {
 function formatMachineList(machines, includedDead, names = new Map) {
   const lines = [""];
   if (machines.length === 0) {
-    lines.push(`  ${import_picocolors70.default.dim(includedDead ? "No machines." : "No live machines. Pass --all to include torn-down ones.")}`, "");
+    lines.push(`  ${import_picocolors73.default.dim(includedDead ? "No machines." : "No live machines. Pass --all to include torn-down ones.")}`, "");
     return lines.join(`
 `);
   }
@@ -88641,7 +89163,7 @@ function formatMachineList(machines, includedDead, names = new Map) {
   const statusWidth = width((row) => row.status);
   const sizeWidth = width((row) => row.size);
   const agentWidth = width((row) => row.agent);
-  lines.push(`  ${import_picocolors70.default.dim([
+  lines.push(`  ${import_picocolors73.default.dim([
     header.id.padEnd(idWidth),
     header.kind.padEnd(kindWidth),
     header.status.padEnd(statusWidth),
@@ -88657,21 +89179,21 @@ function formatMachineList(machines, includedDead, names = new Map) {
       row.dead ? status : statusTint(row.status, status),
       row.size.padEnd(sizeWidth),
       row.agent.padEnd(agentWidth),
-      import_picocolors70.default.dim(row.age)
+      import_picocolors73.default.dim(row.age)
     ].join("  ");
-    lines.push(`  ${row.dead ? import_picocolors70.default.dim(cells) : cells}`);
+    lines.push(`  ${row.dead ? import_picocolors73.default.dim(cells) : cells}`);
   }
-  lines.push("", `  ${import_picocolors70.default.dim("tear one down with")} ${import_picocolors70.default.cyan("brainbase machine rm <id>")}`, "");
+  lines.push("", `  ${import_picocolors73.default.dim("tear one down with")} ${import_picocolors73.default.cyan("brainbase machine rm <id>")}`, "");
   return lines.join(`
 `);
 }
 function statusTint(status, padded) {
   switch (status) {
     case "running":
-      return import_picocolors70.default.green(padded);
+      return import_picocolors73.default.green(padded);
     case "stopped":
     case "starting":
-      return import_picocolors70.default.yellow(padded);
+      return import_picocolors73.default.yellow(padded);
     default:
       return padded;
   }
@@ -88694,7 +89216,7 @@ function age(createdAt) {
 }
 
 // src/cli/machine-rm.ts
-var import_picocolors71 = __toESM(require_picocolors(), 1);
+var import_picocolors74 = __toESM(require_picocolors(), 1);
 async function runMachineRm(args, dependencies = {}) {
   const setExitCode = dependencies.setExitCode ?? ((code) => process.exitCode = code);
   const machineId = args.machineId?.trim();
@@ -88708,7 +89230,7 @@ async function runMachineRm(args, dependencies = {}) {
     if (args.json) {
       console.log(JSON.stringify({ id: machineId, torn_down: false, outcome: "declined" }, null, 2));
     } else {
-      console.log(`  ${import_picocolors71.default.dim("Left alone.")}`);
+      console.log(`  ${import_picocolors74.default.dim("Left alone.")}`);
     }
     return;
   }
@@ -88726,7 +89248,7 @@ async function promptForTeardown(args) {
     return true;
   if (!args.json) {
     console.log(`
-  ${import_picocolors71.default.red("This destroys the sandbox.")} ${import_picocolors71.default.dim("Anything not committed out of it is lost. The machine row is kept for cost history.")}
+  ${import_picocolors74.default.red("This destroys the sandbox.")} ${import_picocolors74.default.dim("Anything not committed out of it is lost. The machine row is kept for cost history.")}
 `);
   }
   const answer = await se({
@@ -88738,9 +89260,9 @@ async function promptForTeardown(args) {
 function formatMachineRm(machine) {
   const lines = [""];
   if (machine.destroyed_at) {
-    lines.push(`  ${import_picocolors71.default.green("✓")} ${machine.kind} sandbox ${machine.id} is torn down.`, `  ${import_picocolors71.default.dim(`destroyed_at ${machine.destroyed_at}`)}`);
+    lines.push(`  ${import_picocolors74.default.green("✓")} ${machine.kind} sandbox ${machine.id} is torn down.`, `  ${import_picocolors74.default.dim(`destroyed_at ${machine.destroyed_at}`)}`);
   } else {
-    lines.push(`  ${import_picocolors71.default.yellow("!")} ${machine.id} came back without a teardown timestamp (status ${machine.status}).`, `  ${import_picocolors71.default.dim("Re-check with `brainbase machine ls --all` before assuming it stopped billing.")}`);
+    lines.push(`  ${import_picocolors74.default.yellow("!")} ${machine.id} came back without a teardown timestamp (status ${machine.status}).`, `  ${import_picocolors74.default.dim("Re-check with `brainbase machine ls --all` before assuming it stopped billing.")}`);
   }
   lines.push("");
   return lines.join(`
@@ -88781,25 +89303,25 @@ ${didYouMean(sub, ["ls", "rm"], "brainbase machine")}`);
 function printHelp6() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors72.default.bold("brainbase machine")} ${import_picocolors72.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors75.default.bold("brainbase machine")} ${import_picocolors75.default.dim("<sub> [options]")}`);
   out.push("");
-  out.push(`  ${import_picocolors72.default.cyan("ls")}          ${import_picocolors72.default.dim("list your sandboxes — live ones only unless --all")}`);
-  out.push(`  ${import_picocolors72.default.cyan("rm")} ${import_picocolors72.default.dim("<id>")}    ${import_picocolors72.default.dim("tear a sandbox down (terminal; the row is kept for cost history)")}`);
+  out.push(`  ${import_picocolors75.default.cyan("ls")}          ${import_picocolors75.default.dim("list your sandboxes — live ones only unless --all")}`);
+  out.push(`  ${import_picocolors75.default.cyan("rm")} ${import_picocolors75.default.dim("<id>")}    ${import_picocolors75.default.dim("tear a sandbox down (terminal; the row is kept for cost history)")}`);
   out.push("");
-  out.push(`  ${import_picocolors72.default.dim("--all")}     ${import_picocolors72.default.dim("for ls: include machines already torn down")}`);
-  out.push(`  ${import_picocolors72.default.dim("--limit <n>")} ${import_picocolors72.default.dim("for ls: how many to fetch (1-200, default 50)")}`);
-  out.push(`  ${import_picocolors72.default.dim("--yes, -y")} ${import_picocolors72.default.dim("for rm: skip the confirmation")}`);
-  out.push(`  ${import_picocolors72.default.dim("--json")}    ${import_picocolors72.default.dim("machine-readable output")}`);
+  out.push(`  ${import_picocolors75.default.dim("--all")}     ${import_picocolors75.default.dim("for ls: include machines already torn down")}`);
+  out.push(`  ${import_picocolors75.default.dim("--limit <n>")} ${import_picocolors75.default.dim("for ls: how many to fetch (1-200, default 50)")}`);
+  out.push(`  ${import_picocolors75.default.dim("--yes, -y")} ${import_picocolors75.default.dim("for rm: skip the confirmation")}`);
+  out.push(`  ${import_picocolors75.default.dim("--json")}    ${import_picocolors75.default.dim("machine-readable output")}`);
   out.push("");
   console.log(out.join(`
 `));
 }
 
 // src/cli/interface.ts
-var import_picocolors78 = __toESM(require_picocolors(), 1);
+var import_picocolors81 = __toESM(require_picocolors(), 1);
 
 // src/cli/interface-build.ts
-var import_picocolors73 = __toESM(require_picocolors(), 1);
+var import_picocolors76 = __toESM(require_picocolors(), 1);
 var USAGE2 = 'brainbase interface build <id> "<request>" [--timeout <seconds>] [--idempotency-key <key>] [--json]';
 var SETTLE_TIMEOUT_MS = 120000;
 async function reportingErrors(json3, work) {
@@ -88898,28 +89420,28 @@ function buildExitCode(outcome) {
 function reportBuild(say, interfaceId, outcome, timeoutSeconds) {
   switch (outcome.kind) {
     case "built":
-      say(`  ${import_picocolors73.default.dim("build")}    ${safe(outcome.build.id)} ${import_picocolors73.default.green("succeeded")}`);
+      say(`  ${import_picocolors76.default.dim("build")}    ${safe(outcome.build.id)} ${import_picocolors76.default.green("succeeded")}`);
       say("");
-      say(`  ${import_picocolors73.default.dim("Next:")} ${import_picocolors73.default.cyan(`brainbase interface publish ${safe(interfaceId)}`)}`);
+      say(`  ${import_picocolors76.default.dim("Next:")} ${import_picocolors76.default.cyan(`brainbase interface publish ${safe(interfaceId)}`)}`);
       return;
     case "failed": {
       const reason = outcome.build?.error_summary ?? outcome.operation?.error ?? outcome.operation?.reason ?? null;
-      say(`  ${import_picocolors73.default.dim("build")}    ${outcome.build ? safe(outcome.build.id) : import_picocolors73.default.dim("none")} ${import_picocolors73.default.red("failed")}`);
+      say(`  ${import_picocolors76.default.dim("build")}    ${outcome.build ? safe(outcome.build.id) : import_picocolors76.default.dim("none")} ${import_picocolors76.default.red("failed")}`);
       if (reason)
         say(`  ${safeBlock(reason).split(`
 `).join(`
   `)}`);
-      say(`  ${import_picocolors73.default.dim("Try again with")} ${import_picocolors73.default.cyan(`brainbase interface rebuild ${safe(interfaceId)}`)}`);
+      say(`  ${import_picocolors76.default.dim("Try again with")} ${import_picocolors76.default.cyan(`brainbase interface rebuild ${safe(interfaceId)}`)}`);
       return;
     }
     case "busy":
-      say(`  ${import_picocolors73.default.yellow(safe(outcome.message))}`);
+      say(`  ${import_picocolors76.default.yellow(safe(outcome.message))}`);
       return;
     case "timeout":
-      say(`  ${import_picocolors73.default.yellow(`Still building after ${timeoutSeconds}s.`)} ${import_picocolors73.default.dim(`It keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
+      say(`  ${import_picocolors76.default.yellow(`Still building after ${timeoutSeconds}s.`)} ${import_picocolors76.default.dim(`It keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
       return;
     case "interrupted":
-      say(`  ${import_picocolors73.default.yellow("Stopped waiting.")} ${import_picocolors73.default.dim(`The build keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
+      say(`  ${import_picocolors76.default.yellow("Stopped waiting.")} ${import_picocolors76.default.dim(`The build keeps going; check \`brainbase interface builds ${safe(interfaceId)}\`.`)}`);
       return;
     default: {
       const unreachable = outcome;
@@ -88966,8 +89488,8 @@ async function build(ctx) {
         throw held;
     }
     const reattach = `brainbase task logs ${safe(taskId)} --follow`;
-    say(`  ${import_picocolors73.default.dim("Build conversation")} ${import_picocolors73.default.bold(safe(taskId))} ${import_picocolors73.default.dim(`on ${safe(before2.name)}`)}`);
-    say(`  ${import_picocolors73.default.dim(`If this stops early, reattach with \`${reattach}\`.`)}`);
+    say(`  ${import_picocolors76.default.dim("Build conversation")} ${import_picocolors76.default.bold(safe(taskId))} ${import_picocolors76.default.dim(`on ${safe(before2.name)}`)}`);
+    say(`  ${import_picocolors76.default.dim(`If this stops early, reattach with \`${reattach}\`.`)}`);
     const finish = (result2, exitCode) => {
       if (json3)
         console.log(JSON.stringify({ type: "result", task_id: taskId, ...result2 }));
@@ -88984,13 +89506,13 @@ async function build(ctx) {
       });
     } catch (error2) {
       say("");
-      say(`  ${import_picocolors73.default.red(`Lost the conversation's event stream: ${safe(error2.message)}`)}`);
-      say(`  ${import_picocolors73.default.dim(`Conversation ${safe(taskId)} may still be running. Reattach with`)} ${import_picocolors73.default.cyan(reattach)}`);
+      say(`  ${import_picocolors76.default.red(`Lost the conversation's event stream: ${safe(error2.message)}`)}`);
+      say(`  ${import_picocolors76.default.dim(`Conversation ${safe(taskId)} may still be running. Reattach with`)} ${import_picocolors76.default.cyan(reattach)}`);
       finish({ version_id: null, build_id: null, status: "stream_lost", task_status: null }, 1);
       return;
     }
     if (followExit !== undefined) {
-      say(`  ${import_picocolors73.default.yellow("Stopped following.")} ${import_picocolors73.default.dim(`The conversation keeps running. Reattach with \`${reattach}\`.`)}`);
+      say(`  ${import_picocolors76.default.yellow("Stopped following.")} ${import_picocolors76.default.dim(`The conversation keeps running. Reattach with \`${reattach}\`.`)}`);
       finish({ version_id: null, build_id: null, status: "interrupted", task_status: null }, followExit);
       return;
     }
@@ -89005,7 +89527,7 @@ async function build(ctx) {
       if (settled.kind !== "terminal") {
         const interrupted = settled.kind === "interrupted";
         const status2 = settled.task?.status ?? null;
-        say(`  ${import_picocolors73.default.yellow(interrupted ? "Stopped." : `The conversation is still ${safe(status2 ?? "running")}.`)} ${import_picocolors73.default.dim(`Check it with \`brainbase task get ${safe(taskId)}\`.`)}`);
+        say(`  ${import_picocolors76.default.yellow(interrupted ? "Stopped." : `The conversation is still ${safe(status2 ?? "running")}.`)} ${import_picocolors76.default.dim(`Check it with \`brainbase task get ${safe(taskId)}\`.`)}`);
         finish({ version_id: null, build_id: null, status: interrupted ? "interrupted" : "task_unsettled", task_status: status2 }, interrupted ? SIGINT_EXIT_CODE : 1);
         return;
       }
@@ -89025,36 +89547,36 @@ async function build(ctx) {
       }
       const codes = [exitCodeForTaskStatus(task.status)];
       say("");
-      say(`  ${import_picocolors73.default.dim("conversation")} ${safe(taskId)} ${import_picocolors73.default.dim("ended")} ${safe(task.status)}`);
+      say(`  ${import_picocolors76.default.dim("conversation")} ${safe(taskId)} ${import_picocolors76.default.dim("ended")} ${safe(task.status)}`);
       if (mine?.status === "failed") {
         codes.push(1);
         const why = [mine.reason, mine.error].filter(Boolean).map((part) => safe(part)).join(": ");
-        say(`  ${import_picocolors73.default.red(`This conversation's build work failed${why ? ` (${why})` : ""}.`)}`);
+        say(`  ${import_picocolors76.default.red(`This conversation's build work failed${why ? ` (${why})` : ""}.`)}`);
       } else if (task.status !== "success" && task.status !== "need_more_info") {
-        say(`  ${import_picocolors73.default.red(`The conversation finished as ${safe(task.status)}.`)} ${import_picocolors73.default.dim(`See \`brainbase task logs ${safe(taskId)}\`.`)}`);
+        say(`  ${import_picocolors76.default.red(`The conversation finished as ${safe(task.status)}.`)} ${import_picocolors76.default.dim(`See \`brainbase task logs ${safe(taskId)}\`.`)}`);
       }
       if (task.status === "need_more_info") {
         const question = await lastAgentMessage(taskId);
         say("");
         if (question) {
-          say(`  ${import_picocolors73.default.bold("The agent asks:")}`);
+          say(`  ${import_picocolors76.default.bold("The agent asks:")}`);
           say(`  ${safeBlock(question).split(`
 `).join(`
   `)}`);
         } else {
-          say(`  ${import_picocolors73.default.bold("The agent needs more from you before it can go on.")}`);
+          say(`  ${import_picocolors76.default.bold("The agent needs more from you before it can go on.")}`);
         }
         say("");
-        say(`  ${import_picocolors73.default.dim("Reply with")} ${import_picocolors73.default.cyan(`brainbase task send ${safe(taskId)} "<reply>"`)}`);
-        say(`  ${import_picocolors73.default.dim("then follow it with")} ${import_picocolors73.default.cyan(reattach)}`);
+        say(`  ${import_picocolors76.default.dim("Reply with")} ${import_picocolors76.default.cyan(`brainbase task send ${safe(taskId)} "<reply>"`)}`);
+        say(`  ${import_picocolors76.default.dim("then follow it with")} ${import_picocolors76.default.cyan(reattach)}`);
       }
       let status;
       let buildId = null;
       if (versionId) {
         say("");
-        say(`  ${import_picocolors73.default.dim("version")}  ${safe(versionId)}`);
+        say(`  ${import_picocolors76.default.dim("version")}  ${safe(versionId)}`);
         if (!json3)
-          say(`  ${import_picocolors73.default.dim("Waiting for its build...")}`);
+          say(`  ${import_picocolors76.default.dim("Waiting for its build...")}`);
         const buildKey = `${key2}-build`;
         let outcome;
         try {
@@ -89064,7 +89586,7 @@ async function build(ctx) {
             signal: stop.signal,
             now: deps.now,
             idempotencyKey: buildKey,
-            onStall: () => say(`  ${import_picocolors73.default.yellow("The build looks stalled; still waiting in case another worker picks it up.")}`)
+            onStall: () => say(`  ${import_picocolors76.default.yellow("The build looks stalled; still waiting in case another worker picks it up.")}`)
           });
         } catch (error2) {
           if (error2 instanceof LostResponseError) {
@@ -89080,9 +89602,9 @@ async function build(ctx) {
         status = noVersionStatus(mine?.status === "failed", task.status);
         if (status === "no_version") {
           codes.push(1);
-          say(`  ${import_picocolors73.default.red("The conversation finished without committing a version, so there is nothing to build.")}`);
+          say(`  ${import_picocolors76.default.red("The conversation finished without committing a version, so there is nothing to build.")}`);
         } else if (task.status !== "need_more_info") {
-          say(`  ${import_picocolors73.default.dim("This conversation produced no version, so there is nothing to build.")}`);
+          say(`  ${import_picocolors76.default.dim("This conversation produced no version, so there is nothing to build.")}`);
         }
       }
       if (!json3)
@@ -89097,7 +89619,7 @@ async function build(ctx) {
 var buildCommands = { build };
 
 // src/cli/interface-lifecycle.ts
-var import_picocolors75 = __toESM(require_picocolors(), 1);
+var import_picocolors78 = __toESM(require_picocolors(), 1);
 
 // src/core/org-members.ts
 async function listAllOrgMembers(orgId) {
@@ -89151,7 +89673,7 @@ function membersById(members) {
 }
 
 // src/cli/interface-read.ts
-var import_picocolors74 = __toESM(require_picocolors(), 1);
+var import_picocolors77 = __toESM(require_picocolors(), 1);
 function interfaceState(row) {
   if (row.archived_at)
     return "archived";
@@ -89173,11 +89695,11 @@ function threadsLabel(shared) {
 function stateTint(state) {
   switch (state) {
     case "live":
-      return import_picocolors74.default.green;
+      return import_picocolors77.default.green;
     case "building":
-      return import_picocolors74.default.yellow;
+      return import_picocolors77.default.yellow;
     case "archived":
-      return import_picocolors74.default.dim;
+      return import_picocolors77.default.dim;
     case "draft":
       return (cell) => cell;
     default: {
@@ -89210,7 +89732,7 @@ async function list3(ctx) {
     if (shown.length === 0) {
       const empty = onlyArchived ? "No archived interfaces." : includeArchived ? "No interfaces. Create one with `brainbase interface create`." : await emptyWithoutArchived(agentId);
       console.log(`
-  ${import_picocolors74.default.dim(empty)}
+  ${import_picocolors77.default.dim(empty)}
 `);
       return;
     }
@@ -89223,7 +89745,7 @@ async function list3(ctx) {
       audienceWord(row),
       ago(row.last_edited_at ?? row.created_at, now2)
     ]);
-    console.log(["", ...table(cells, [null, import_picocolors74.default.bold, null, null, null, import_picocolors74.default.dim]), ""].join(`
+    console.log(["", ...table(cells, [null, import_picocolors77.default.bold, null, null, null, import_picocolors77.default.dim]), ""].join(`
 `));
   });
 }
@@ -89257,13 +89779,13 @@ async function get2(ctx) {
     out.push(field("id", safe(row.id)));
     out.push(field("agent", agentLabel(safe(row.agent_id), await agentNames([row.agent_id]))));
     out.push(field("state", stateTint(state)(state)));
-    out.push(field("address", row.live_release ? safe(row.live_release.url) : `${safe(row.slug)} ${import_picocolors74.default.dim("(nothing live yet)")}`));
+    out.push(field("address", row.live_release ? safe(row.live_release.url) : `${safe(row.slug)} ${import_picocolors77.default.dim("(nothing live yet)")}`));
     out.push(field("audience", audienceLabel(row)));
     out.push(field("threads", threadsLabel(row.share_agent_threads)));
-    out.push(field("live", row.live_release ? `${safe(row.live_release.id)} ${import_picocolors74.default.dim(`published ${ago(row.live_release.published_at)}`)}` : import_picocolors74.default.dim("none")));
-    out.push(field("draft", row.draft_version_id ? safe(row.draft_version_id) : import_picocolors74.default.dim("none yet")));
+    out.push(field("live", row.live_release ? `${safe(row.live_release.id)} ${import_picocolors77.default.dim(`published ${ago(row.live_release.published_at)}`)}` : import_picocolors77.default.dim("none")));
+    out.push(field("draft", row.draft_version_id ? safe(row.draft_version_id) : import_picocolors77.default.dim("none yet")));
     if (row.running_generation) {
-      out.push(field("building", `conversation ${safe(row.running_generation.thread_id ?? "")} ${import_picocolors74.default.dim(`(follow it with \`brainbase task logs ${safe(row.running_generation.thread_id ?? "")} --follow\`)`)}`));
+      out.push(field("building", `conversation ${safe(row.running_generation.thread_id ?? "")} ${import_picocolors77.default.dim(`(follow it with \`brainbase task logs ${safe(row.running_generation.thread_id ?? "")} --follow\`)`)}`));
     }
     if (row.archived_at)
       out.push(field("archived", ago(row.archived_at)));
@@ -89292,7 +89814,7 @@ async function open(ctx) {
     }
     console.log(safe(url2));
     if (new URL(url2).hostname.endsWith("vercel.app")) {
-      console.error(import_picocolors74.default.yellow("This is the raw Vercel deployment address, which sits behind Vercel protection and will not open for viewers. The control plane has no public interfaces domain configured."));
+      console.error(import_picocolors77.default.yellow("This is the raw Vercel deployment address, which sits behind Vercel protection and will not open for viewers. The control plane has no public interfaces domain configured."));
     }
   });
 }
@@ -89330,7 +89852,7 @@ async function history(ctx, name) {
     banner(`interface ${name} — ${safe(id)}`);
     if (rows.length === 0) {
       console.log(`
-  ${import_picocolors74.default.dim(`No ${name} yet.`)}
+  ${import_picocolors77.default.dim(`No ${name} yet.`)}
 `);
       return;
     }
@@ -89407,7 +89929,7 @@ function exactlyOne(parsed, flags) {
 }
 function peopleLine(access, members) {
   const ids = grantIds(access);
-  return ids.length ? namesOf(ids, members) : import_picocolors75.default.dim("nobody named");
+  return ids.length ? namesOf(ids, members) : import_picocolors78.default.dim("nobody named");
 }
 function printAccess(row, access, members) {
   console.log([
@@ -89503,11 +90025,11 @@ async function create3(ctx) {
     const id = safe(created.id);
     const out = [
       "",
-      `  ${import_picocolors75.default.green("Created")} ${import_picocolors75.default.bold(safe(created.name))}`,
+      `  ${import_picocolors78.default.green("Created")} ${import_picocolors78.default.bold(safe(created.name))}`,
       "",
       field("id", id),
       field("agent", safe(created.agent_id)),
-      field("address", `${safe(created.slug)} ${import_picocolors75.default.dim("(nothing live yet)")}`),
+      field("address", `${safe(created.slug)} ${import_picocolors78.default.dim("(nothing live yet)")}`),
       field("threads", threadsLabel(created.share_agent_threads))
     ];
     if (access) {
@@ -89519,11 +90041,11 @@ async function create3(ctx) {
       out.push("", `  Nobody can open it until you choose who can: \`brainbase interface access ${id} --everyone\` or \`--people <emails>\`.`);
     }
     if (created.share_agent_threads) {
-      out.push(`  ${import_picocolors75.default.dim(`To show viewers only their own conversations: \`brainbase interface threads ${id} --private\`.`)}`);
+      out.push(`  ${import_picocolors78.default.dim(`To show viewers only their own conversations: \`brainbase interface threads ${id} --private\`.`)}`);
     }
     if (note)
       out.push("", `  ${safe(note)}`);
-    out.push("", `  ${import_picocolors75.default.dim(`Next: \`brainbase interface build ${id} "<what to build>"\``)}`, "");
+    out.push("", `  ${import_picocolors78.default.dim(`Next: \`brainbase interface build ${id} "<what to build>"\``)}`, "");
     console.log(out.join(`
 `));
     if (readFailed) {
@@ -89659,7 +90181,7 @@ async function threads(ctx) {
         printJson({ id: row.id, share_agent_threads: row.share_agent_threads });
         return;
       }
-      const already = wanted === null ? "" : ` ${import_picocolors75.default.dim("(already set; nothing changed)")}`;
+      const already = wanted === null ? "" : ` ${import_picocolors78.default.dim("(already set; nothing changed)")}`;
       console.log(`
 ${field("threads", `${threadsLabel(row.share_agent_threads)}${already}`)}
 `);
@@ -89698,7 +90220,7 @@ async function rename(ctx) {
       return;
     }
     console.log(`
-  Renamed ${safe(updated.id)} to ${import_picocolors75.default.bold(safe(updated.name))}.
+  Renamed ${safe(updated.id)} to ${import_picocolors78.default.bold(safe(updated.name))}.
 `);
   });
 }
@@ -89734,7 +90256,7 @@ async function address(ctx) {
     }
     const where = updated.live_release ? safe(updated.live_release.url) : safe(updated.slug);
     console.log(`
-  ${safe(updated.name)} is now at ${import_picocolors75.default.bold(where)}.
+  ${safe(updated.name)} is now at ${import_picocolors78.default.bold(where)}.
 `);
   });
 }
@@ -89826,9 +90348,9 @@ var lifecycleCommands = {
 };
 
 // src/cli/interface-preview.ts
-var import_picocolors76 = __toESM(require_picocolors(), 1);
+var import_picocolors79 = __toESM(require_picocolors(), 1);
 function warn(line2) {
-  console.error(import_picocolors76.default.yellow(line2));
+  console.error(import_picocolors79.default.yellow(line2));
 }
 var PREVIEW_TIMEOUT_SECONDS = 300;
 var PROBE_INTERVAL_MS = 2000;
@@ -89918,12 +90440,12 @@ async function preview(ctx) {
     const say = progress(json3);
     const row = await interfacesApi.get(id);
     const { taskId, why } = await pickConversation(row, stringOption(parsed, "task")?.trim() || undefined);
-    say(import_picocolors76.default.dim(`  Previewing ${why}, ${safe(taskId)}.`));
+    say(import_picocolors79.default.dim(`  Previewing ${why}, ${safe(taskId)}.`));
     const started = await interfacesApi.startPreview(taskId, row.id);
     const address2 = previewAddress(started, row);
     let outcome = started.state === "serving" ? "serving" : "not_waited";
     if (outcome !== "serving" && !noWait) {
-      say(import_picocolors76.default.dim("  Starting the dev server in the sandbox…"));
+      say(import_picocolors79.default.dim("  Starting the dev server in the sandbox…"));
       outcome = await waitUntilServing(started, { timeoutMs: waitMs, deps: ctx.deps });
     }
     if (json3) {
@@ -89931,12 +90453,12 @@ async function preview(ctx) {
     } else {
       const out = [
         "",
-        `  ${outcome === "serving" ? import_picocolors76.default.green("Preview ready") : import_picocolors76.default.yellow("Preview starting")} ${import_picocolors76.default.bold(safe(started.name))}`,
+        `  ${outcome === "serving" ? import_picocolors79.default.green("Preview ready") : import_picocolors79.default.yellow("Preview starting")} ${import_picocolors79.default.bold(safe(started.name))}`,
         "",
-        field("address", address2 ? safe(address2) : import_picocolors76.default.dim(missingAddress(started))),
+        field("address", address2 ? safe(address2) : import_picocolors79.default.dim(missingAddress(started))),
         field("showing", showing(started, taskId)),
         "",
-        `  ${import_picocolors76.default.dim("Opens for people who can edit the agent, after signing in. Nothing is published.")}`,
+        `  ${import_picocolors79.default.dim("Opens for people who can edit the agent, after signing in. Nothing is published.")}`,
         ""
       ];
       console.log(out.join(`
@@ -89957,13 +90479,13 @@ async function preview(ctx) {
 var previewCommands = { preview };
 
 // src/cli/interface-release.ts
-var import_picocolors77 = __toESM(require_picocolors(), 1);
+var import_picocolors80 = __toESM(require_picocolors(), 1);
 var PUBLISH_TIMEOUT_SECONDS = 300;
 var REBUILD_USAGE = "brainbase interface rebuild <id> [--version <version id>] [--yes]";
 var PUBLISH_USAGE = "brainbase interface publish <id> [--build <build id>]";
 var ROLLBACK_USAGE = "brainbase interface rollback <id> --release <release id>";
 function warn2(line2) {
-  console.error(import_picocolors77.default.yellow(line2));
+  console.error(import_picocolors80.default.yellow(line2));
 }
 function text3(value2) {
   return typeof value2 === "string" && value2.trim() ? value2 : null;
@@ -89980,7 +90502,7 @@ async function follow(operationId, what, options) {
       intervalMs: options.deps.pollIntervalMs,
       signal: stop.signal,
       now: options.deps.now,
-      onStatus: (operation) => say(import_picocolors77.default.dim(`  ${what} ${operation.status}`)),
+      onStatus: (operation) => say(import_picocolors80.default.dim(`  ${what} ${operation.status}`)),
       onStall: () => warn2(`The ${what} looks stalled: its worker stopped checking in. Still waiting, in case another worker picks it up.`)
     });
     if (outcome.kind === "settled") {
@@ -89999,7 +90521,7 @@ function reportUnsuccessful(result2, what, options) {
   if (options.json) {
     printJson({ outcome: result2.outcome, operation_id: result2.operationId, operation: result2.operation });
   } else if (result2.outcome === "failed") {
-    console.error(import_picocolors77.default.red(`The ${what} failed (operation ${id}):`));
+    console.error(import_picocolors80.default.red(`The ${what} failed (operation ${id}):`));
     console.error(safeBlock(result2.operation?.error ?? "Brainbase gave no reason."));
   } else if (result2.outcome === "timeout") {
     warn2(`Stopped waiting after ${Math.round(options.timeoutMs / 1000)}s. The ${what} keeps running on the server (operation ${id}).`);
@@ -90059,7 +90581,7 @@ async function rebuild(ctx) {
       if (json3)
         printJson({ outcome: "started", operation_id: operationId, operation });
       else
-        console.log(import_picocolors77.default.dim(`  Follow it with \`brainbase interface builds ${safe(id)}\`.`));
+        console.log(import_picocolors80.default.dim(`  Follow it with \`brainbase interface builds ${safe(id)}\`.`));
       return;
     }
     const result2 = await follow(operationId, "build", { json: json3, timeoutMs: waitMs, deps: ctx.deps });
@@ -90071,8 +90593,8 @@ async function rebuild(ctx) {
     }
     const buildId = safe(result2.operation?.build_id ?? "");
     const version2 = safe(result2.operation?.source_version_id ?? "");
-    console.log(import_picocolors77.default.green(`✓ Build ${buildId} succeeded${version2 ? ` (version ${version2})` : ""}.`));
-    console.log(import_picocolors77.default.dim(`  Publish it with \`brainbase interface publish ${safe(id)} --build ${buildId}\`.`));
+    console.log(import_picocolors80.default.green(`✓ Build ${buildId} succeeded${version2 ? ` (version ${version2})` : ""}.`));
+    console.log(import_picocolors80.default.dim(`  Publish it with \`brainbase interface publish ${safe(id)} --build ${buildId}\`.`));
   });
 }
 function liveBuildOf(row, releases) {
@@ -90130,7 +90652,7 @@ function describeBuild(buildId, builds) {
   const build2 = builds.find((candidate) => candidate.id === buildId);
   if (!build2)
     return `build ${safe(buildId)}`;
-  return `build ${safe(build2.id)} ${import_picocolors77.default.dim(`(version ${safe(build2.source_version_id)}, built ${ago(build2.created_at)})`)}`;
+  return `build ${safe(build2.id)} ${import_picocolors80.default.dim(`(version ${safe(build2.source_version_id)}, built ${ago(build2.created_at)})`)}`;
 }
 function reportAlreadyLive(json3, buildId, releaseId, url2) {
   if (json3) {
@@ -90184,8 +90706,8 @@ async function publish(ctx) {
     }
     if (!json3) {
       console.log("");
-      console.log(`  ${import_picocolors77.default.dim("Live now".padEnd(14))}${liveBuildId ? `${describeBuild(liveBuildId, builds)} at ${safe(row.live_release?.url)}` : row.live_release ? `release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}` : import_picocolors77.default.dim("nothing")}`);
-      console.log(`  ${import_picocolors77.default.dim("Will publish".padEnd(14))}${describeBuild(buildId, builds)}`);
+      console.log(`  ${import_picocolors80.default.dim("Live now".padEnd(14))}${liveBuildId ? `${describeBuild(liveBuildId, builds)} at ${safe(row.live_release?.url)}` : row.live_release ? `release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}` : import_picocolors80.default.dim("nothing")}`);
+      console.log(`  ${import_picocolors80.default.dim("Will publish".padEnd(14))}${describeBuild(buildId, builds)}`);
       console.log("");
     }
     const proceed = await confirmChange({
@@ -90228,7 +90750,7 @@ async function publish(ctx) {
       if (json3)
         printJson({ outcome: "started", operation_id: operationId, operation });
       else
-        console.log(import_picocolors77.default.dim(`  Check it with \`brainbase interface get ${safe(id)}\`.`));
+        console.log(import_picocolors80.default.dim(`  Check it with \`brainbase interface get ${safe(id)}\`.`));
       return;
     }
     const result2 = await follow(operationId, "publish", { json: json3, timeoutMs: waitMs, deps: ctx.deps });
@@ -90245,11 +90767,11 @@ async function publish(ctx) {
       printJson({ outcome: "succeeded", operation_id: operationId, operation: result2.operation, url: url2 });
       return;
     }
-    console.log(import_picocolors77.default.green(`✓ Build ${safe(buildId)} is live.`));
+    console.log(import_picocolors80.default.green(`✓ Build ${safe(buildId)} is live.`));
     if (url2)
       console.log(`  ${safe(url2)}`);
     if (urlUnread) {
-      console.log(import_picocolors77.default.dim(`  Its address could not be read just now; see it with \`brainbase interface open ${safe(id)}\`.`));
+      console.log(import_picocolors80.default.dim(`  Its address could not be read just now; see it with \`brainbase interface open ${safe(id)}\`.`));
     }
   });
 }
@@ -90285,8 +90807,8 @@ async function rollback(ctx) {
     }
     if (!json3) {
       console.log("");
-      console.log(`  ${import_picocolors77.default.dim("Live now".padEnd(16))}release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}`);
-      console.log(`  ${import_picocolors77.default.dim("Will republish".padEnd(16))}release ${safe(releaseId)} ${import_picocolors77.default.dim("as a new release, with a new id")}`);
+      console.log(`  ${import_picocolors80.default.dim("Live now".padEnd(16))}release ${safe(row.live_release.id)} at ${safe(row.live_release.url)}`);
+      console.log(`  ${import_picocolors80.default.dim("Will republish".padEnd(16))}release ${safe(releaseId)} ${import_picocolors80.default.dim("as a new release, with a new id")}`);
       console.log("");
     }
     const proceed = await confirmChange({
@@ -90319,7 +90841,7 @@ async function rollback(ctx) {
       printJson(release);
       return;
     }
-    console.log(import_picocolors77.default.green(release.id === releaseId ? `✓ Release ${safe(releaseId)} is live (build ${safe(release.build_id)}).` : `✓ Republished release ${safe(releaseId)} as new release ${safe(release.id)} (build ${safe(release.build_id)}). It is live.`));
+    console.log(import_picocolors80.default.green(release.id === releaseId ? `✓ Release ${safe(releaseId)} is live (build ${safe(release.build_id)}).` : `✓ Republished release ${safe(releaseId)} as new release ${safe(release.id)} (build ${safe(release.build_id)}). It is live.`));
     console.log(`  ${safe(release.url)}`);
   });
 }
@@ -90354,14 +90876,14 @@ ${didYouMean(sub, Object.keys(COMMANDS2), "brainbase interface")}`);
   await command({ cwd: cwd2, args, deps });
 }
 function line2(command, args, description) {
-  return `  ${import_picocolors78.default.cyan(command)}${args ? ` ${import_picocolors78.default.dim(args)}` : ""}
-      ${import_picocolors78.default.dim(description)}`;
+  return `  ${import_picocolors81.default.cyan(command)}${args ? ` ${import_picocolors81.default.dim(args)}` : ""}
+      ${import_picocolors81.default.dim(description)}`;
 }
 function printHelp7() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors78.default.bold("brainbase interface")} ${import_picocolors78.default.dim("<sub> [options]")}`);
-  out.push(`  ${import_picocolors78.default.dim("Dashboards for an agent: build them in a conversation, publish them, choose who can open them.")}`);
+  out.push(`  ${import_picocolors81.default.bold("brainbase interface")} ${import_picocolors81.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors81.default.dim("Dashboards for an agent: build them in a conversation, publish them, choose who can open them.")}`);
   out.push("");
   out.push(line2("ls", "[--agent <id>] [--archived | --only-archived]", "list interfaces you can see"));
   out.push(line2("get", "<id>", "one interface: address, audience, live release, draft, running build conversation"));
@@ -90381,22 +90903,22 @@ function printHelp7() {
   out.push(line2("rollback", "<id> --release <id>", "republish an earlier release; it goes live under a new release id"));
   out.push(line2("preview", "<id> [--task <id>] [--no-wait]", "serve the unpublished draft from its build conversation and print the preview address"));
   out.push("");
-  out.push(`  ${import_picocolors78.default.dim("--json")}                   machine-readable output; never prompts`);
-  out.push(`  ${import_picocolors78.default.dim("--yes, -y")}                skip confirmation (required without a terminal)`);
-  out.push(`  ${import_picocolors78.default.dim("--no-wait")}                for rebuild and publish: return the operation at once; for preview: do not wait for the dev server`);
-  out.push(`  ${import_picocolors78.default.dim("--timeout <seconds>")}      for build, rebuild, publish and preview: how long to wait (builds 900, publish and preview 300)`);
-  out.push(`  ${import_picocolors78.default.dim("--idempotency-key <key>")}  replay a create, build, rebuild, publish or rollback whose answer was lost`);
+  out.push(`  ${import_picocolors81.default.dim("--json")}                   machine-readable output; never prompts`);
+  out.push(`  ${import_picocolors81.default.dim("--yes, -y")}                skip confirmation (required without a terminal)`);
+  out.push(`  ${import_picocolors81.default.dim("--no-wait")}                for rebuild and publish: return the operation at once; for preview: do not wait for the dev server`);
+  out.push(`  ${import_picocolors81.default.dim("--timeout <seconds>")}      for build, rebuild, publish and preview: how long to wait (builds 900, publish and preview 300)`);
+  out.push(`  ${import_picocolors81.default.dim("--idempotency-key <key>")}  replay a create, build, rebuild, publish or rollback whose answer was lost`);
   out.push("");
-  out.push(`  ${import_picocolors78.default.dim("People are emails (see `brainbase member ls`), user ids, or `me`. Audience members also need access to the agent.")}`);
-  out.push(`  ${import_picocolors78.default.dim("Audience: everyone (--everyone, `org` under --json) or chosen people (--people, `users` under --json).")}`);
-  out.push(`  ${import_picocolors78.default.dim("Exit codes: 0 done, 1 refused or failed, 130 interrupted (the server keeps working).")}`);
+  out.push(`  ${import_picocolors81.default.dim("People are emails (see `brainbase member ls`), user ids, or `me`. Audience members also need access to the agent.")}`);
+  out.push(`  ${import_picocolors81.default.dim("Audience: everyone (--everyone, `org` under --json) or chosen people (--people, `users` under --json).")}`);
+  out.push(`  ${import_picocolors81.default.dim("Exit codes: 0 done, 1 refused or failed, 130 interrupted (the server keeps working).")}`);
   out.push("");
   console.log(out.join(`
 `));
 }
 
 // src/cli/member.ts
-var import_picocolors79 = __toESM(require_picocolors(), 1);
+var import_picocolors82 = __toESM(require_picocolors(), 1);
 async function runMember(sub, args, opts) {
   if (args.some((arg) => arg === "--help" || arg === "-h")) {
     printHelp8();
@@ -90439,7 +90961,7 @@ async function runMemberList(opts) {
 function formatMemberList(members) {
   if (members.length === 0)
     return `
-  ${import_picocolors79.default.dim("Nobody here you can see.")}
+  ${import_picocolors82.default.dim("Nobody here you can see.")}
 `;
   const sorted = [...members].sort((a3, b4) => (a3.email ?? a3.id).localeCompare(b4.email ?? b4.id));
   const rows = sorted.map((member) => ({
@@ -90453,24 +90975,24 @@ function formatMemberList(members) {
   const roleWidth = Math.max(...rows.map((row) => row.role.length));
   const lines = [""];
   for (const row of rows) {
-    lines.push(`  ${row.email.padEnd(emailWidth)}  ${row.name.padEnd(nameWidth)}  ${import_picocolors79.default.dim(row.role.padEnd(roleWidth))}  ${import_picocolors79.default.dim(row.teams)}`.trimEnd());
+    lines.push(`  ${row.email.padEnd(emailWidth)}  ${row.name.padEnd(nameWidth)}  ${import_picocolors82.default.dim(row.role.padEnd(roleWidth))}  ${import_picocolors82.default.dim(row.teams)}`.trimEnd());
   }
-  lines.push("", `  ${import_picocolors79.default.dim("share a dashboard with one of them:")} ${import_picocolors79.default.cyan("brainbase interface access <id> --add <email>")}`, "");
+  lines.push("", `  ${import_picocolors82.default.dim("share a dashboard with one of them:")} ${import_picocolors82.default.cyan("brainbase interface access <id> --add <email>")}`, "");
   return lines.join(`
 `);
 }
 function printHelp8() {
   const out = [];
   out.push("");
-  out.push(`  ${import_picocolors79.default.bold("brainbase member")} ${import_picocolors79.default.dim("<sub> [options]")}`);
+  out.push(`  ${import_picocolors82.default.bold("brainbase member")} ${import_picocolors82.default.dim("<sub> [options]")}`);
   out.push("");
-  out.push(`  ${import_picocolors79.default.cyan("ls")}   ${import_picocolors79.default.dim("the people in an organization you can see, with their emails, roles and teams")}`);
+  out.push(`  ${import_picocolors82.default.cyan("ls")}   ${import_picocolors82.default.dim("the people in an organization you can see, with their emails, roles and teams")}`);
   out.push("");
-  out.push(`  ${import_picocolors79.default.dim("--org <id-or-slug>")}  ${import_picocolors79.default.dim("which organization (picked automatically when you are in one)")}`);
-  out.push(`  ${import_picocolors79.default.dim("--json")}              ${import_picocolors79.default.dim("machine-readable output")}`);
+  out.push(`  ${import_picocolors82.default.dim("--org <id-or-slug>")}  ${import_picocolors82.default.dim("which organization (picked automatically when you are in one)")}`);
+  out.push(`  ${import_picocolors82.default.dim("--json")}              ${import_picocolors82.default.dim("machine-readable output")}`);
   out.push("");
-  out.push(`  ${import_picocolors79.default.dim("Owners and admins see everyone. Anyone else sees the owners, the admins, themselves")}`);
-  out.push(`  ${import_picocolors79.default.dim("and the people who share a team with them, as in the web app.")}`);
+  out.push(`  ${import_picocolors82.default.dim("Owners and admins see everyone. Anyone else sees the owners, the admins, themselves")}`);
+  out.push(`  ${import_picocolors82.default.dim("and the people who share a team with them, as in the web app.")}`);
   out.push("");
   console.log(out.join(`
 `));
@@ -92181,7 +92703,7 @@ async function runCommand(command, root, spec, context, options = {}) {
         return error2;
       return new BenchmarkCommandExecutionError(error2.code, error2.message, sanitizedOutput(stdout), sanitizedOutput(stderr), error2.durationMs);
     };
-    const fail3 = (error2) => {
+    const fail4 = (error2) => {
       if (settled)
         return;
       settled = true;
@@ -92200,7 +92722,7 @@ async function runCommand(command, root, spec, context, options = {}) {
       captured += chunk2.length;
       context.remainingOutputBytes -= chunk2.length;
       if (captured > spec.budget.max_output_bytes || context.remainingOutputBytes < 0) {
-        fail3(new BenchmarkPhaseError("output_limit_exceeded", `command output exceeded budget: ${command.id}`));
+        fail4(new BenchmarkPhaseError("output_limit_exceeded", `command output exceeded budget: ${command.id}`));
         return;
       }
       target.push(chunk2);
@@ -92223,14 +92745,14 @@ async function runCommand(command, root, spec, context, options = {}) {
     child.stdout?.on("data", (chunk2) => capture(stdout, chunk2));
     child.stderr?.on("data", (chunk2) => capture(stderr, chunk2));
     child.on("error", (error2) => {
-      fail3(new BenchmarkCommandExecutionError("command_start_failed", `failed to start ${command.id}: ${error2.message}`, Buffer.concat(stdout), Buffer.concat(stderr), Date.now() - started));
+      fail4(new BenchmarkCommandExecutionError("command_start_failed", `failed to start ${command.id}: ${error2.message}`, Buffer.concat(stdout), Buffer.concat(stderr), Date.now() - started));
     });
     timer = setTimeout(() => {
       if (reachesPhaseDeadline) {
-        fail3(new BenchmarkPhaseError("phase_timeout", "phase budget expired"));
+        fail4(new BenchmarkPhaseError("phase_timeout", "phase budget expired"));
         return;
       }
-      fail3(new BenchmarkCommandExecutionError("command_timeout", `command timed out: ${command.id}`, Buffer.concat(stdout), Buffer.concat(stderr), Date.now() - started));
+      fail4(new BenchmarkCommandExecutionError("command_timeout", `command timed out: ${command.id}`, Buffer.concat(stdout), Buffer.concat(stderr), Date.now() - started));
     }, timeoutMs3);
     child.on("exit", (code, signal) => {
       if (settled)
@@ -93563,7 +94085,7 @@ async function runBenchmarkPhase(specPathInput, resultPathInput, expectedPhase,
 }
 
 // src/cli/benchmark-control.ts
-var import_picocolors80 = __toESM(require_picocolors(), 1);
+var import_picocolors83 = __toESM(require_picocolors(), 1);
 import fs92 from "node:fs";
 import path103 from "node:path";
 
@@ -96577,20 +97099,20 @@ async function emitCursorPages(output, fetchPage, options) {
 function commandHelp() {
   return [
     "",
-    `  ${import_picocolors80.default.bold("brainbase benchmark")} ${import_picocolors80.default.dim("<command> [options]")}`,
+    `  ${import_picocolors83.default.bold("brainbase benchmark")} ${import_picocolors83.default.dim("<command> [options]")}`,
     "",
-    `  ${import_picocolors80.default.cyan("init | list | show | create | validate | pull | push")}`,
-    `  ${import_picocolors80.default.cyan("publish | revisions | import | export | archive | restore")}`,
-    `  ${import_picocolors80.default.cyan("run plan|start|watch|list|show|cancel|resume")}`,
-    `  ${import_picocolors80.default.cyan("results | diagnoses | attempt | artifacts | export-results")}`,
-    `  ${import_picocolors80.default.cyan("history | baseline show|set|clear")}`,
+    `  ${import_picocolors83.default.cyan("init | list | show | create | validate | pull | push")}`,
+    `  ${import_picocolors83.default.cyan("publish | revisions | import | export | archive | restore")}`,
+    `  ${import_picocolors83.default.cyan("run plan|start|watch|list|show|cancel|resume")}`,
+    `  ${import_picocolors83.default.cyan("results | diagnoses | attempt | artifacts | export-results")}`,
+    `  ${import_picocolors83.default.cyan("history | baseline show|set|clear")}`,
     "",
-    `  ${import_picocolors80.default.dim("Use --agent to override brainbase.agent.yaml, and --json or --jsonl for automation.")}`,
+    `  ${import_picocolors83.default.dim("Use --agent to override brainbase.agent.yaml, and --json or --jsonl for automation.")}`,
     "",
-    `  ${import_picocolors80.default.bold("benchmark runtime (machine-only)")}`,
-    `  ${import_picocolors80.default.cyan("hydrate")} ${import_picocolors80.default.dim("--spec <path> --result <path> --json")}`,
-    `  ${import_picocolors80.default.cyan("evaluate")} ${import_picocolors80.default.dim("--spec <path> --result <path> --json")}`,
-    `  ${import_picocolors80.default.cyan("capabilities")} ${import_picocolors80.default.dim("--json")}`,
+    `  ${import_picocolors83.default.bold("benchmark runtime (machine-only)")}`,
+    `  ${import_picocolors83.default.cyan("hydrate")} ${import_picocolors83.default.dim("--spec <path> --result <path> --json")}`,
+    `  ${import_picocolors83.default.cyan("evaluate")} ${import_picocolors83.default.dim("--spec <path> --result <path> --json")}`,
+    `  ${import_picocolors83.default.cyan("capabilities")} ${import_picocolors83.default.dim("--json")}`,
     ""
   ].join(`
 `);
@@ -98050,7 +98572,7 @@ function retryDelayMs(attempt2, retryAfter) {
   const base2 = Number.isFinite(seconds) ? seconds * 1000 : 1000 * 2 ** attempt2;
   return Math.min(Math.max(base2, 0), MAX_RETRY_DELAY_MS) + Math.random() * 500;
 }
-function errorMessage2(status, text4) {
+function errorMessage3(status, text4) {
   try {
     const body = JSON.parse(text4);
     const message3 = body.error?.message ?? body.detail;
@@ -98083,7 +98605,7 @@ async function postDecide(credential, body, options = {}) {
           throw new DecideHttpError("The server sent an unreadable response", response.status);
         }
       }
-      failure = new DecideHttpError(errorMessage2(response.status, text4), response.status);
+      failure = new DecideHttpError(errorMessage3(response.status, text4), response.status);
       if (!RETRY_STATUSES.has(response.status))
         throw failure;
       retryAfter = response.headers.get("retry-after");
@@ -98448,7 +98970,7 @@ var MAX_CONCURRENCY = 16;
 var SUMMARY_UNCERTAIN_IDS = 20;
 var SUMMARY_FAILED = 10;
 var STOP_STATUSES = new Set([401, 402, 403, 404]);
-var OPTIONS = [
+var OPTIONS2 = [
   { key: "questions", names: ["--questions", "-q"], kind: "value" },
   { key: "items", names: ["--items"], kind: "value", multiple: true },
   { key: "jsonl", names: ["--jsonl"], kind: "value", multiple: true },
@@ -98595,7 +99117,7 @@ async function runDecide(cwd2, argv, deps = {}) {
   const started = Date.now();
   let parsed;
   try {
-    parsed = parseArgv(argv, OPTIONS);
+    parsed = parseArgv(argv, OPTIONS2);
   } catch (error2) {
     if (error2 instanceof ArgvParseError)
       return usageError2(stderr, error2.message);
@@ -98859,217 +99381,218 @@ var SUBCOMMAND_OWNED_FLAGS = {
 function help() {
   const out = [];
   out.push("");
-  out.push(`  ${brandTint("◆")}  ${import_picocolors81.default.bold("brainbase")}  ${import_picocolors81.default.dim(`v${VERSION}`)}`);
-  out.push(`     ${import_picocolors81.default.dim("connect your local agent to the brainbase platform")}`);
+  out.push(`  ${brandTint("◆")}  ${import_picocolors84.default.bold("brainbase")}  ${import_picocolors84.default.dim(`v${VERSION}`)}`);
+  out.push(`     ${import_picocolors84.default.dim("connect your local agent to the brainbase platform")}`);
   out.push("");
   out.push(divider("USAGE"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.bold("brainbase")} ${import_picocolors81.default.dim("<command> [options]")}`);
+  out.push(`  ${import_picocolors84.default.bold("brainbase")} ${import_picocolors84.default.dim("<command> [options]")}`);
   out.push("");
   out.push(divider("AUTH"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("login")}     ${import_picocolors81.default.dim("  open the web app and connect this device")}`);
-  out.push(`  ${import_picocolors81.default.cyan("logout")}    ${import_picocolors81.default.dim("  clear the local session")}`);
-  out.push(`  ${import_picocolors81.default.cyan("whoami")} ${import_picocolors81.default.dim("[--json]")} ${import_picocolors81.default.dim(" show which credential is in use and what it covers")}`);
+  out.push(`  ${import_picocolors84.default.cyan("login")}     ${import_picocolors84.default.dim("  open the web app and connect this device")}`);
+  out.push(`  ${import_picocolors84.default.cyan("logout")}    ${import_picocolors84.default.dim("  clear the local session")}`);
+  out.push(`  ${import_picocolors84.default.cyan("whoami")} ${import_picocolors84.default.dim("[--json]")} ${import_picocolors84.default.dim(" show which credential is in use and what it covers")}`);
   out.push("");
   out.push(divider("DISCOVERY"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("team list")}                  ${import_picocolors81.default.dim("show the teams you can create agents in")}`);
-  out.push(`  ${import_picocolors81.default.cyan("member ls")}                  ${import_picocolors81.default.dim("show the people in an organization, with the emails interface access takes")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent list")}                 ${import_picocolors81.default.dim("show a team's agents and their ids")}`);
+  out.push(`  ${import_picocolors84.default.cyan("team list")}                  ${import_picocolors84.default.dim("show the teams you can create agents in")}`);
+  out.push(`  ${import_picocolors84.default.cyan("member ls")}                  ${import_picocolors84.default.dim("show the people in an organization, with the emails interface access takes")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent list")}                 ${import_picocolors84.default.dim("show a team's agents and their ids")}`);
   out.push("");
   out.push(divider("LINKED AGENT"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("agent init")}                 ${import_picocolors81.default.dim("write a starter brainbase.agent.yaml here — offline, no login needed")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent create")}               ${import_picocolors81.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent pull")} ${import_picocolors81.default.dim("[<id>]")}          ${import_picocolors81.default.dim("bring cloud changes into this folder (--force to override; --run-entrypoint to also execute the agent entrypoint; --link to link first)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent push")}                 ${import_picocolors81.default.dim("send local changes to the cloud (--force to overwrite cloud-side conflicts with local)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent delete")} ${import_picocolors81.default.dim("<id>")}          ${import_picocolors81.default.dim("permanently delete a cloud agent and every task it has run")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent unpack")}               ${import_picocolors81.default.dim("install the claimed agent into a harness layout")}`);
-  out.push(`  ${import_picocolors81.default.cyan("link")}                       ${import_picocolors81.default.dim("attach this folder to an existing agent")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent status")}               ${import_picocolors81.default.dim("show what would pull and what would push")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent connections")}          ${import_picocolors81.default.dim("show which integrations this agent is wired to (--json for CI)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent connect")} ${import_picocolors81.default.dim("<name>")}       ${import_picocolors81.default.dim("connect chat, slack, meeting, github, linear or phone")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent disconnect")} ${import_picocolors81.default.dim("<name>")}    ${import_picocolors81.default.dim("disable or disconnect an agent surface")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent surface")} ${import_picocolors81.default.dim("<name>")}       ${import_picocolors81.default.dim("status, settings and setup for all six surfaces (--help)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent versions")}             ${import_picocolors81.default.dim("saved versions: list, show, diff, label, restore, pin and unpin (`agent versions --help`)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent eval")} ${import_picocolors81.default.dim("<list|runs>")}     ${import_picocolors81.default.dim("read eval definitions and judge verdicts (`agent eval --help`)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("agent env")}                  ${import_picocolors81.default.dim("print export lines for `eval $(brainbase agent env)`")}`);
-  out.push(`  ${import_picocolors81.default.cyan("run")} ${import_picocolors81.default.dim("<cmd> [args...]")}         ${import_picocolors81.default.dim("run <cmd> with secrets.env loaded into env")}`);
-  out.push(`  ${import_picocolors81.default.cyan("status")}                     ${import_picocolors81.default.dim("show what this folder is linked to")}`);
-  out.push(`  ${import_picocolors81.default.cyan("unlink")}                     ${import_picocolors81.default.dim("disconnect this folder")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent init")}                 ${import_picocolors84.default.dim("write a starter brainbase.agent.yaml here — offline, no login needed")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent create")}               ${import_picocolors84.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent pull")} ${import_picocolors84.default.dim("[<id>]")}          ${import_picocolors84.default.dim("bring cloud changes into this folder (--force to override; --run-entrypoint to also execute the agent entrypoint; --link to link first)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent push")}                 ${import_picocolors84.default.dim("send local changes to the cloud (--force to overwrite cloud-side conflicts with local)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent delete")} ${import_picocolors84.default.dim("<id>")}          ${import_picocolors84.default.dim("permanently delete a cloud agent and every task it has run")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent unpack")}               ${import_picocolors84.default.dim("install the claimed agent into a harness layout")}`);
+  out.push(`  ${import_picocolors84.default.cyan("link")}                       ${import_picocolors84.default.dim("attach this folder to an existing agent")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent status")}               ${import_picocolors84.default.dim("show what would pull and what would push")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent connections")}          ${import_picocolors84.default.dim("show which integrations this agent is wired to (--json for CI)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent connect")} ${import_picocolors84.default.dim("<name>")}       ${import_picocolors84.default.dim("connect chat, slack, meeting, github, linear or phone")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent disconnect")} ${import_picocolors84.default.dim("<name>")}    ${import_picocolors84.default.dim("disable or disconnect an agent surface")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent surface")} ${import_picocolors84.default.dim("<name>")}       ${import_picocolors84.default.dim("status, settings and setup for all six surfaces (--help)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent versions")}             ${import_picocolors84.default.dim("saved versions: list, show, diff, label, restore, pin and unpin (`agent versions --help`)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent eval")} ${import_picocolors84.default.dim("<list|runs>")}     ${import_picocolors84.default.dim("read eval definitions and judge verdicts (`agent eval --help`)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("agent env")}                  ${import_picocolors84.default.dim("print export lines for `eval $(brainbase agent env)`")}`);
+  out.push(`  ${import_picocolors84.default.cyan("run")} ${import_picocolors84.default.dim("<cmd> [args...]")}         ${import_picocolors84.default.dim("run <cmd> with secrets.env loaded into env")}`);
+  out.push(`  ${import_picocolors84.default.cyan("status")}                     ${import_picocolors84.default.dim("show what this folder is linked to")}`);
+  out.push(`  ${import_picocolors84.default.cyan("unlink")}                     ${import_picocolors84.default.dim("disconnect this folder")}`);
   out.push("");
   out.push(divider("TASKS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("task create")} ${import_picocolors81.default.dim("--message <text>")}   ${import_picocolors81.default.dim("create a managed task and start its first run (--wait to block on it; --interface <id> for a build conversation)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task list")}                       ${import_picocolors81.default.dim("recent tasks you can reach (--metadata k=v to filter by label; --interface <id> for its build conversations)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task get")} ${import_picocolors81.default.dim("<task-id>")}              ${import_picocolors81.default.dim("one task: status, agent, machine, eval verdicts")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task logs")} ${import_picocolors81.default.dim("<task-id> [--follow]")}  ${import_picocolors81.default.dim("one line per event in the task's transcript, or tail it live")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task send")} ${import_picocolors81.default.dim("<task-id> <message>")}  ${import_picocolors81.default.dim("send a follow-up during execution, or queue it for the next turn")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task stop")} ${import_picocolors81.default.dim("<task-id>")}             ${import_picocolors81.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task update")} ${import_picocolors81.default.dim("<task-id>")}           ${import_picocolors81.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
-  out.push(`  ${import_picocolors81.default.cyan("task delete")} ${import_picocolors81.default.dim("<task-id>")}           ${import_picocolors81.default.dim("permanently delete a stopped task and tear down its sandbox")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task create")} ${import_picocolors84.default.dim("--message <text>")}   ${import_picocolors84.default.dim("create a managed task and start its first run (--wait to block on it; --interface <id> for a build conversation)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task list")}                       ${import_picocolors84.default.dim("recent tasks you can reach (--metadata k=v to filter by label; --interface <id> for its build conversations)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task get")} ${import_picocolors84.default.dim("<task-id>")}              ${import_picocolors84.default.dim("one task: status, agent, machine, eval verdicts")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task logs")} ${import_picocolors84.default.dim("<task-id> [--follow]")}  ${import_picocolors84.default.dim("one line per event in the task's transcript, or tail it live")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task send")} ${import_picocolors84.default.dim("<task-id> <message>")}  ${import_picocolors84.default.dim("send a follow-up during execution, or queue it for the next turn")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task stop")} ${import_picocolors84.default.dim("<task-id>")}             ${import_picocolors84.default.dim("stop execution and cancel pending follow-ups, retaining their text")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task update")} ${import_picocolors84.default.dim("<task-id>")}           ${import_picocolors84.default.dim("rename a task, change its metadata labels, switch its model or reset it to the agent default, including while it runs")}`);
+  out.push(`  ${import_picocolors84.default.cyan("task delete")} ${import_picocolors84.default.dim("<task-id>")}           ${import_picocolors84.default.dim("permanently delete a stopped task and tear down its sandbox")}`);
   out.push("");
   out.push(divider("INTERFACES"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("interface ls")}                    ${import_picocolors81.default.dim("dashboards you can see (--agent to narrow)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface create")} ${import_picocolors81.default.dim("--name <n>")}     ${import_picocolors81.default.dim("create one on an agent, with who can open it")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface build")} ${import_picocolors81.default.dim('<id> "<ask>"')}    ${import_picocolors81.default.dim("describe a change; the agent builds it while you watch")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface publish")} ${import_picocolors81.default.dim("<id>")}          ${import_picocolors81.default.dim("make the newest succeeded build live")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface rollback")} ${import_picocolors81.default.dim("<id>")}         ${import_picocolors81.default.dim("republish an earlier release under a new id (--release <id>)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface access")} ${import_picocolors81.default.dim("<id>")}           ${import_picocolors81.default.dim("show or set who can open it")}`);
-  out.push(`  ${import_picocolors81.default.cyan("interface --help")}                ${import_picocolors81.default.dim("every interface subcommand")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface ls")}                    ${import_picocolors84.default.dim("dashboards you can see (--agent to narrow)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface create")} ${import_picocolors84.default.dim("--name <n>")}     ${import_picocolors84.default.dim("create one on an agent, with who can open it")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface build")} ${import_picocolors84.default.dim('<id> "<ask>"')}    ${import_picocolors84.default.dim("describe a change; the agent builds it while you watch")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface publish")} ${import_picocolors84.default.dim("<id>")}          ${import_picocolors84.default.dim("make the newest succeeded build live")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface rollback")} ${import_picocolors84.default.dim("<id>")}         ${import_picocolors84.default.dim("republish an earlier release under a new id (--release <id>)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface access")} ${import_picocolors84.default.dim("<id>")}           ${import_picocolors84.default.dim("show or set who can open it")}`);
+  out.push(`  ${import_picocolors84.default.cyan("interface --help")}                ${import_picocolors84.default.dim("every interface subcommand")}`);
   out.push("");
   out.push(divider("SANDBOXES"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("machine ls")} ${import_picocolors81.default.dim("[--all]")}            ${import_picocolors81.default.dim("list your sandboxes — live ones only unless --all")}`);
-  out.push(`  ${import_picocolors81.default.cyan("machine rm")} ${import_picocolors81.default.dim("<id>")}               ${import_picocolors81.default.dim("tear a sandbox down (it bills until you do)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("machine ls")} ${import_picocolors84.default.dim("[--all]")}            ${import_picocolors84.default.dim("list your sandboxes — live ones only unless --all")}`);
+  out.push(`  ${import_picocolors84.default.cyan("machine rm")} ${import_picocolors84.default.dim("<id>")}               ${import_picocolors84.default.dim("tear a sandbox down (it bills until you do)")}`);
   out.push("");
   out.push(divider("BENCHMARKS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("benchmark list")}                    ${import_picocolors81.default.dim("list benchmarks for the linked agent")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark init")} ${import_picocolors81.default.dim("[directory]")}        ${import_picocolors81.default.dim("scaffold a local benchmark")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark create")} ${import_picocolors81.default.dim("[path|-]")}         ${import_picocolors81.default.dim("create a benchmark draft")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark run")} ${import_picocolors81.default.dim("<benchmark> --yes")}   ${import_picocolors81.default.dim("plan and start a benchmark run")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark results")} ${import_picocolors81.default.dim("<run>")}           ${import_picocolors81.default.dim("inspect normalized benchmark results")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark list")}                    ${import_picocolors84.default.dim("list benchmarks for the linked agent")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark init")} ${import_picocolors84.default.dim("[directory]")}        ${import_picocolors84.default.dim("scaffold a local benchmark")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark create")} ${import_picocolors84.default.dim("[path|-]")}         ${import_picocolors84.default.dim("create a benchmark draft")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark run")} ${import_picocolors84.default.dim("<benchmark> --yes")}   ${import_picocolors84.default.dim("plan and start a benchmark run")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark results")} ${import_picocolors84.default.dim("<run>")}           ${import_picocolors84.default.dim("inspect normalized benchmark results")}`);
   out.push("");
   out.push(divider("BENCHMARK RUNTIME"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("benchmark hydrate")} ${import_picocolors81.default.dim("--spec <path> --result <path> --json")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark evaluate")} ${import_picocolors81.default.dim("--spec <path> --result <path> --json")}`);
-  out.push(`  ${import_picocolors81.default.cyan("benchmark capabilities")} ${import_picocolors81.default.dim("--json")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark hydrate")} ${import_picocolors84.default.dim("--spec <path> --result <path> --json")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark evaluate")} ${import_picocolors84.default.dim("--spec <path> --result <path> --json")}`);
+  out.push(`  ${import_picocolors84.default.cyan("benchmark capabilities")} ${import_picocolors84.default.dim("--json")}`);
   out.push("");
   out.push(divider("ORCHESTRATIONS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("orchestration init")}             ${import_picocolors81.default.dim("write a starter brainbase-orchestration.yaml here (offline, no login)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration create")}           ${import_picocolors81.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration list")}             ${import_picocolors81.default.dim("list orchestrations under a team")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration pull")} ${import_picocolors81.default.dim("<id>")}        ${import_picocolors81.default.dim("recursively fetch an orchestration + every member agent")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration push")}             ${import_picocolors81.default.dim("recursively push each member, then update the graph")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration status")}           ${import_picocolors81.default.dim("show what would push and what would pull")}`);
-  out.push(`  ${import_picocolors81.default.cyan("orchestration delete")} ${import_picocolors81.default.dim("<id>")}      ${import_picocolors81.default.dim("permanently delete an orchestration graph (member agents are kept)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration init")}             ${import_picocolors84.default.dim("write a starter brainbase-orchestration.yaml here (offline, no login)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration create")}           ${import_picocolors84.default.dim("claim a local orchestration manifest and create it in the cloud")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration from-agent")}       ${import_picocolors84.default.dim("turn an existing agent into an orchestration")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration list")}             ${import_picocolors84.default.dim("list orchestrations under a team")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration pull")} ${import_picocolors84.default.dim("<id>")}        ${import_picocolors84.default.dim("recursively fetch an orchestration + every member agent")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration push")}             ${import_picocolors84.default.dim("recursively push each member, then update the graph")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration status")}           ${import_picocolors84.default.dim("show what would push and what would pull")}`);
+  out.push(`  ${import_picocolors84.default.cyan("orchestration delete")} ${import_picocolors84.default.dim("<id>")}      ${import_picocolors84.default.dim("permanently delete an orchestration graph (member agents are kept)")}`);
   out.push("");
   out.push(divider("TEMPLATES"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("template pack")}                       ${import_picocolors81.default.dim("bundle the current agent into a template")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template publish")}                    ${import_picocolors81.default.dim("upload a template to the registry")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template search")} ${import_picocolors81.default.dim("[query]")}             ${import_picocolors81.default.dim("search the registry")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template info")}    ${import_picocolors81.default.dim("<creator/slug>")}     ${import_picocolors81.default.dim("show registry details for a template")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template onboard")} ${import_picocolors81.default.dim("<creator/slug>")}     ${import_picocolors81.default.dim("install (or refresh) a template")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template list")}                       ${import_picocolors81.default.dim("show installed templates")}`);
-  out.push(`  ${import_picocolors81.default.cyan("template remove")}  ${import_picocolors81.default.dim("<creator/slug>")}     ${import_picocolors81.default.dim("uninstall a template")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template pack")}                       ${import_picocolors84.default.dim("bundle the current agent into a template")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template publish")}                    ${import_picocolors84.default.dim("upload a template to the registry")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template search")} ${import_picocolors84.default.dim("[query]")}             ${import_picocolors84.default.dim("search the registry")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template info")}    ${import_picocolors84.default.dim("<creator/slug>")}     ${import_picocolors84.default.dim("show registry details for a template")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template onboard")} ${import_picocolors84.default.dim("<creator/slug>")}     ${import_picocolors84.default.dim("install (or refresh) a template")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template list")}                       ${import_picocolors84.default.dim("show installed templates")}`);
+  out.push(`  ${import_picocolors84.default.cyan("template remove")}  ${import_picocolors84.default.dim("<creator/slug>")}     ${import_picocolors84.default.dim("uninstall a template")}`);
   out.push("");
   out.push(divider("SKILLS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("skill add")} ${import_picocolors81.default.dim("<source>")}                  ${import_picocolors81.default.dim("install a skill (github / git / brainbase)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill list")}                            ${import_picocolors81.default.dim("show locally installed skills + their source")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill update")} ${import_picocolors81.default.dim("<slug>")}                  ${import_picocolors81.default.dim("re-fetch a skill from its recorded source")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill remove")} ${import_picocolors81.default.dim("<slug>")}                  ${import_picocolors81.default.dim("uninstall a skill")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill search")} ${import_picocolors81.default.dim("[query]")}                 ${import_picocolors81.default.dim("search the brainbase skill registry")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill info")} ${import_picocolors81.default.dim("<creator/slug>")}            ${import_picocolors81.default.dim("show registry details for a skill")}`);
-  out.push(`  ${import_picocolors81.default.cyan("skill publish")} ${import_picocolors81.default.dim("[dir]")}                  ${import_picocolors81.default.dim("publish a SKILL.md folder (defaults to .)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill add")} ${import_picocolors84.default.dim("<source>")}                  ${import_picocolors84.default.dim("install a skill (github / git / brainbase)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill list")}                            ${import_picocolors84.default.dim("show locally installed skills + their source")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill update")} ${import_picocolors84.default.dim("<slug>")}                  ${import_picocolors84.default.dim("re-fetch a skill from its recorded source")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill remove")} ${import_picocolors84.default.dim("<slug>")}                  ${import_picocolors84.default.dim("uninstall a skill")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill search")} ${import_picocolors84.default.dim("[query]")}                 ${import_picocolors84.default.dim("search the brainbase skill registry")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill info")} ${import_picocolors84.default.dim("<creator/slug>")}            ${import_picocolors84.default.dim("show registry details for a skill")}`);
+  out.push(`  ${import_picocolors84.default.cyan("skill publish")} ${import_picocolors84.default.dim("[dir]")}                  ${import_picocolors84.default.dim("publish a SKILL.md folder (defaults to .)")}`);
   out.push("");
   out.push(divider("CLI TOKENS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("token create")}                        ${import_picocolors81.default.dim("issue a long-lived CLI key for CI / scripts")}`);
-  out.push(`  ${import_picocolors81.default.cyan("token list")}                          ${import_picocolors81.default.dim("show your tokens")}`);
-  out.push(`  ${import_picocolors81.default.cyan("token rename")} ${import_picocolors81.default.dim("<id>")}                  ${import_picocolors81.default.dim("relabel a token")}`);
-  out.push(`  ${import_picocolors81.default.cyan("token revoke")} ${import_picocolors81.default.dim("<id>")}                  ${import_picocolors81.default.dim("revoke a token")}`);
+  out.push(`  ${import_picocolors84.default.cyan("token create")}                        ${import_picocolors84.default.dim("issue a long-lived CLI key for CI / scripts")}`);
+  out.push(`  ${import_picocolors84.default.cyan("token list")}                          ${import_picocolors84.default.dim("show your tokens")}`);
+  out.push(`  ${import_picocolors84.default.cyan("token rename")} ${import_picocolors84.default.dim("<id>")}                  ${import_picocolors84.default.dim("relabel a token")}`);
+  out.push(`  ${import_picocolors84.default.cyan("token revoke")} ${import_picocolors84.default.dim("<id>")}                  ${import_picocolors84.default.dim("revoke a token")}`);
   out.push("");
   out.push(divider("DECISIONS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("decide")} ${import_picocolors81.default.dim("-q <questions.json> <sources...>")}  ${import_picocolors81.default.dim("answer decision-model questions over many files or rows in a few requests (`decide --help`)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("decide")} ${import_picocolors84.default.dim("-q <questions.json> <sources...>")}  ${import_picocolors84.default.dim("answer decision-model questions over many files or rows in a few requests (`decide --help`)")}`);
   out.push("");
   out.push(divider("MCP"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("mcp check")} ${import_picocolors81.default.dim("[--json]")}              ${import_picocolors81.default.dim("verify MCP server connectivity through the brainbase proxy (runs at sandbox bootstrap)")}`);
-  out.push(`  ${import_picocolors81.default.cyan("mcp list")} ${import_picocolors81.default.dim("[--json]")}               ${import_picocolors81.default.dim("show configured servers with OAuth state and expiry")}`);
-  out.push(`  ${import_picocolors81.default.cyan("mcp connect")} ${import_picocolors81.default.dim("<name>")}              ${import_picocolors81.default.dim("authorize an OAuth-backed server: prints a single-use link, opens it, waits for approval")}`);
+  out.push(`  ${import_picocolors84.default.cyan("mcp check")} ${import_picocolors84.default.dim("[--json]")}              ${import_picocolors84.default.dim("verify MCP server connectivity through the brainbase proxy (runs at sandbox bootstrap)")}`);
+  out.push(`  ${import_picocolors84.default.cyan("mcp list")} ${import_picocolors84.default.dim("[--json]")}               ${import_picocolors84.default.dim("show configured servers with OAuth state and expiry")}`);
+  out.push(`  ${import_picocolors84.default.cyan("mcp connect")} ${import_picocolors84.default.dim("<name>")}              ${import_picocolors84.default.dim("authorize an OAuth-backed server: prints a single-use link, opens it, waits for approval")}`);
   out.push("");
   out.push(divider("INTEGRATIONS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.cyan("integrations list")}                 ${import_picocolors81.default.dim("show the agent's Pipedream apps, accounts and app-level permission")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations search")} ${import_picocolors81.default.dim("<query>")}       ${import_picocolors81.default.dim("find apps in the Pipedream catalog")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations actions")} ${import_picocolors81.default.dim("<app>")}        ${import_picocolors81.default.dim("list an app's actions and whether each is allowed")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations add")} ${import_picocolors81.default.dim("<app>")}            ${import_picocolors81.default.dim("install an app; one that needs an account runs connect")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations connect")} ${import_picocolors81.default.dim("<app>")}        ${import_picocolors81.default.dim("open Pipedream's connect page for the app and wait for the account")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations disconnect")} ${import_picocolors81.default.dim("<app>")}     ${import_picocolors81.default.dim("delete the app's connected account")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations remove")} ${import_picocolors81.default.dim("<app>")}         ${import_picocolors81.default.dim("uninstall an app that needs no account")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations allow|ask|deny")} ${import_picocolors81.default.dim("<app>[.<action>]")} ${import_picocolors81.default.dim("set the permission for an app or one of its actions")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations context create")} ${import_picocolors81.default.dim("--application <name>")} ${import_picocolors81.default.dim("let a program outside Brainbase (the SDK) use the agent's integrations; prints a renewal handle once")}`);
-  out.push(`  ${import_picocolors81.default.cyan("integrations context end")} ${import_picocolors81.default.dim("<context-id>")}  ${import_picocolors81.default.dim("end a standalone integration context now")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations list")}                 ${import_picocolors84.default.dim("show the agent's Pipedream apps, accounts and app-level permission")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations search")} ${import_picocolors84.default.dim("<query>")}       ${import_picocolors84.default.dim("find apps in the Pipedream catalog")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations actions")} ${import_picocolors84.default.dim("<app>")}        ${import_picocolors84.default.dim("list an app's actions and whether each is allowed")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations add")} ${import_picocolors84.default.dim("<app>")}            ${import_picocolors84.default.dim("install an app; one that needs an account runs connect")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations connect")} ${import_picocolors84.default.dim("<app>")}        ${import_picocolors84.default.dim("open Pipedream's connect page for the app and wait for the account")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations disconnect")} ${import_picocolors84.default.dim("<app>")}     ${import_picocolors84.default.dim("delete the app's connected account")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations remove")} ${import_picocolors84.default.dim("<app>")}         ${import_picocolors84.default.dim("uninstall an app that needs no account")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations allow|ask|deny")} ${import_picocolors84.default.dim("<app>[.<action>]")} ${import_picocolors84.default.dim("set the permission for an app or one of its actions")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations context create")} ${import_picocolors84.default.dim("--application <name>")} ${import_picocolors84.default.dim("let a program outside Brainbase (the SDK) use the agent's integrations; prints a renewal handle once")}`);
+  out.push(`  ${import_picocolors84.default.cyan("integrations context end")} ${import_picocolors84.default.dim("<context-id>")}  ${import_picocolors84.default.dim("end a standalone integration context now")}`);
   out.push("");
   out.push(divider("FLAGS"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.dim("--harness <id>")}     force harness for onboard / sync (e.g. claude-code)`);
-  out.push(`  ${import_picocolors81.default.dim("--scope <s>")}        force scope: global | project`);
-  out.push(`  ${import_picocolors81.default.dim("--yes, -y")}          skip confirmations / auto-overwrite`);
+  out.push(`  ${import_picocolors84.default.dim("--harness <id>")}     force harness for onboard / sync (e.g. claude-code)`);
+  out.push(`  ${import_picocolors84.default.dim("--scope <s>")}        force scope: global | project`);
+  out.push(`  ${import_picocolors84.default.dim("--yes, -y")}          skip confirmations / auto-overwrite`);
   out.push(`  ${" ".repeat("--yes, -y".length)}          required for destructive commands with no terminal (pipes, CI)`);
-  out.push(`  ${import_picocolors81.default.dim("--agent <id>")}       for link/task create/mcp list/mcp connect/integrations: use this agent id explicitly instead of the linked folder's (task list: filter to it)`);
-  out.push(`  ${import_picocolors81.default.dim("--message <text>")}   for task create: required first user message`);
-  out.push(`  ${import_picocolors81.default.dim("--title <text>")}     for task create: optional task title; for task update: the new title`);
-  out.push(`  ${import_picocolors81.default.dim("--clear-title")}      for task update: remove the title (automatic titling may name it again later)`);
-  out.push(`  ${import_picocolors81.default.dim("--metadata k=v")}     for task create: label the task; for task list: only tasks with this label; for task update: set one label, keeping the others (all repeatable)`);
-  out.push(`  ${import_picocolors81.default.dim("--unset-metadata <k>")} for task update: remove one label (repeatable)`);
-  out.push(`  ${import_picocolors81.default.dim("--clear-metadata")}   for task update: remove every label; with --metadata, keep only those given`);
-  out.push(`  ${import_picocolors81.default.dim("--model <id>")}       for task create: optional model override; for task update: switch the model the task's next turn runs on (the running turn keeps its model)`);
-  out.push(`  ${import_picocolors81.default.dim("--clear-model")}      for task update: go back to the agent's default model from the next turn`);
-  out.push(`  ${import_picocolors81.default.dim("--version <v>")}      for task create: run a saved version of the agent (12, v12 or a version id)`);
-  out.push(`  ${import_picocolors81.default.dim("--wait")}             for task create: block until the task finishes; exit 1 unless it succeeded`);
-  out.push(`  ${import_picocolors81.default.dim("--timeout <secs>")}   for task create --wait: give up after <secs> and exit 1`);
-  out.push(`  ${import_picocolors81.default.dim("--limit <n>")}        for task list (1-200), task logs (events to print; with --follow, the first page size) and machine ls`);
-  out.push(`  ${import_picocolors81.default.dim("--follow, -f")}       for task logs: stay attached and print events as they land`);
-  out.push(`  ${import_picocolors81.default.dim("--org <id-or-slug>")} pick the organization (team/agent list, agent create, orchestration create/list)`);
-  out.push(`  ${import_picocolors81.default.dim("--team <id>")}        pick the team, same commands (works without --org)`);
-  out.push(`  ${import_picocolors81.default.dim("--all-teams")}        for agent list: every team in the org (the default with no terminal)`);
-  out.push(`  ${import_picocolors81.default.dim("--json")}             machine-readable output for supported commands`);
-  out.push(`  ${import_picocolors81.default.dim("--no-tracking")}      for link / agent pull --link: skip routing LLM traffic through brainbase`);
-  out.push(`  ${import_picocolors81.default.dim("--link")}             for agent pull: link this folder to the agent first, as \`brainbase link --agent <id> --yes\` would, in one process`);
-  out.push(`  ${import_picocolors81.default.dim("--track")}            for agent create: enable tracking non-interactively (off without a TTY)`);
-  out.push(`  ${import_picocolors81.default.dim("--shell <sh|fish>")}  for agent env: pick output format (auto-detected from $SHELL)`);
-  out.push(`  ${import_picocolors81.default.dim("--bot-token <t>")}    for agent connect slack (or BRAINBASE_SLACK_BOT_TOKEN, or stdin)`);
-  out.push(`  ${import_picocolors81.default.dim("--signing-secret <s>")} for agent connect slack (or BRAINBASE_SLACK_SIGNING_SECRET, or stdin)`);
-  out.push(`  ${import_picocolors81.default.dim("--bot-name <name>")}  for agent connect meeting: the bot's display name`);
-  out.push(`  ${import_picocolors81.default.dim("--app-id <id> / --app-name <name>")}  optional Slack app identity`);
-  out.push(`  ${import_picocolors81.default.dim("--bot-image-url <url>")}  optional meeting bot image`);
-  out.push(`  ${import_picocolors81.default.dim("--full")}             for agent/orchestration init: write a commented template covering every block`);
-  out.push(`  ${import_picocolors81.default.dim("--minimal")}          for agent init: write the starter manifest (the default)`);
-  out.push(`  ${import_picocolors81.default.dim("--all")}              for template list: include installs from other folders; for machine ls: include torn-down machines`);
-  out.push(`  ${import_picocolors81.default.dim("--web <url>")}        for login: web app URL (default https://app.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors81.default.dim("--no-open")}          for mcp/integrations connect: print the link without opening a browser (implied with no terminal)`);
-  out.push(`  ${import_picocolors81.default.dim("--no-wait")}          for mcp/integrations connect: print the link and exit instead of waiting`);
-  out.push(`  ${import_picocolors81.default.dim("--account <id>")}     for integrations disconnect: which account, when the app has more than one`);
-  out.push(`  ${import_picocolors81.default.dim("--application <name>")} for integrations context create: names the program the context is for`);
-  out.push(`  ${import_picocolors81.default.dim("--max-lifetime <dur>")} for integrations context create: when the context ends at the latest, 60s-30d (default 7d)`);
-  out.push(`  ${import_picocolors81.default.dim("--reason <text>")}    for integrations context end: recorded with the context`);
+  out.push(`  ${import_picocolors84.default.dim("--agent <id>")}       for link/task create/mcp list/mcp connect/integrations: use this agent id explicitly instead of the linked folder's (task list: filter to it)`);
+  out.push(`  ${import_picocolors84.default.dim("--message <text>")}   for task create: required first user message`);
+  out.push(`  ${import_picocolors84.default.dim("--title <text>")}     for task create: optional task title; for task update: the new title`);
+  out.push(`  ${import_picocolors84.default.dim("--clear-title")}      for task update: remove the title (automatic titling may name it again later)`);
+  out.push(`  ${import_picocolors84.default.dim("--metadata k=v")}     for task create: label the task; for task list: only tasks with this label; for task update: set one label, keeping the others (all repeatable)`);
+  out.push(`  ${import_picocolors84.default.dim("--unset-metadata <k>")} for task update: remove one label (repeatable)`);
+  out.push(`  ${import_picocolors84.default.dim("--clear-metadata")}   for task update: remove every label; with --metadata, keep only those given`);
+  out.push(`  ${import_picocolors84.default.dim("--model <id>")}       for task create: optional model override; for task update: switch the model the task's next turn runs on (the running turn keeps its model)`);
+  out.push(`  ${import_picocolors84.default.dim("--clear-model")}      for task update: go back to the agent's default model from the next turn`);
+  out.push(`  ${import_picocolors84.default.dim("--version <v>")}      for task create: run a saved version of the agent (12, v12 or a version id)`);
+  out.push(`  ${import_picocolors84.default.dim("--wait")}             for task create: block until the task finishes; exit 1 unless it succeeded`);
+  out.push(`  ${import_picocolors84.default.dim("--timeout <secs>")}   for task create --wait: give up after <secs> and exit 1`);
+  out.push(`  ${import_picocolors84.default.dim("--limit <n>")}        for task list (1-200), task logs (events to print; with --follow, the first page size) and machine ls`);
+  out.push(`  ${import_picocolors84.default.dim("--follow, -f")}       for task logs: stay attached and print events as they land`);
+  out.push(`  ${import_picocolors84.default.dim("--org <id-or-slug>")} pick the organization (team/agent list, agent create, orchestration create/list)`);
+  out.push(`  ${import_picocolors84.default.dim("--team <id>")}        pick the team, same commands (works without --org)`);
+  out.push(`  ${import_picocolors84.default.dim("--all-teams")}        for agent list: every team in the org (the default with no terminal)`);
+  out.push(`  ${import_picocolors84.default.dim("--json")}             machine-readable output for supported commands`);
+  out.push(`  ${import_picocolors84.default.dim("--no-tracking")}      for link / agent pull --link: skip routing LLM traffic through brainbase`);
+  out.push(`  ${import_picocolors84.default.dim("--link")}             for agent pull: link this folder to the agent first, as \`brainbase link --agent <id> --yes\` would, in one process`);
+  out.push(`  ${import_picocolors84.default.dim("--track")}            for agent create: enable tracking non-interactively (off without a TTY)`);
+  out.push(`  ${import_picocolors84.default.dim("--shell <sh|fish>")}  for agent env: pick output format (auto-detected from $SHELL)`);
+  out.push(`  ${import_picocolors84.default.dim("--bot-token <t>")}    for agent connect slack (or BRAINBASE_SLACK_BOT_TOKEN, or stdin)`);
+  out.push(`  ${import_picocolors84.default.dim("--signing-secret <s>")} for agent connect slack (or BRAINBASE_SLACK_SIGNING_SECRET, or stdin)`);
+  out.push(`  ${import_picocolors84.default.dim("--bot-name <name>")}  for agent connect meeting: the bot's display name`);
+  out.push(`  ${import_picocolors84.default.dim("--app-id <id> / --app-name <name>")}  optional Slack app identity`);
+  out.push(`  ${import_picocolors84.default.dim("--bot-image-url <url>")}  optional meeting bot image`);
+  out.push(`  ${import_picocolors84.default.dim("--full")}             for agent/orchestration init: write a commented template covering every block`);
+  out.push(`  ${import_picocolors84.default.dim("--minimal")}          for agent init: write the starter manifest (the default)`);
+  out.push(`  ${import_picocolors84.default.dim("--all")}              for template list: include installs from other folders; for machine ls: include torn-down machines`);
+  out.push(`  ${import_picocolors84.default.dim("--web <url>")}        for login: web app URL (default https://app.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors84.default.dim("--no-open")}          for mcp/integrations connect: print the link without opening a browser (implied with no terminal)`);
+  out.push(`  ${import_picocolors84.default.dim("--no-wait")}          for mcp/integrations connect: print the link and exit instead of waiting`);
+  out.push(`  ${import_picocolors84.default.dim("--account <id>")}     for integrations disconnect: which account, when the app has more than one`);
+  out.push(`  ${import_picocolors84.default.dim("--application <name>")} for integrations context create: names the program the context is for`);
+  out.push(`  ${import_picocolors84.default.dim("--max-lifetime <dur>")} for integrations context create: when the context ends at the latest, 60s-30d (default 7d)`);
+  out.push(`  ${import_picocolors84.default.dim("--reason <text>")}    for integrations context end: recorded with the context`);
   out.push("");
   out.push(divider("ENV"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_HOME")}         override the local config dir (default ~/.brainbase)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_DEBUG")}        print full stack traces on error (any value; unset to disable)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_WEB_URL")}      override the web app URL used by login, console links and integrations`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_CONTROL_PLANE_URL")} override the MAS host (/v2/cli; task and interface commands use /v2/tasks and /v2/interfaces)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_API_URL")}      legacy KLS host override (uses /api/cli; proxy/registry fallback)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_PROXY_URL")}    override the model-proxy URL used by harness traffic (default https://api.v1.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_REGISTRY_URL")} override the registry API URL (default https://api.v1.brainbaselabs.com)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_TOKEN")}        long-lived CLI PAT; outranks the login session and the PAT saved in token.json`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_SKIP_AUTH")}    bypass the auth gate for development`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_NON_INTERACTIVE")} force non-interactive mode — skip/auto-default prompts (CI & agents)`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_RUN_ENTRYPOINT")} =1 → agent pull executes the agent entrypoint (sandbox boots; or pass --run-entrypoint)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_HOME")}         override the local config dir (default ~/.brainbase)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_DEBUG")}        print full stack traces on error (any value; unset to disable)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_WEB_URL")}      override the web app URL used by login, console links and integrations`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_CONTROL_PLANE_URL")} override the MAS host (/v2/cli; task and interface commands use /v2/tasks and /v2/interfaces)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_API_URL")}      legacy KLS host override (uses /api/cli; proxy/registry fallback)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_PROXY_URL")}    override the model-proxy URL used by harness traffic (default https://api.v1.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_REGISTRY_URL")} override the registry API URL (default https://api.v1.brainbaselabs.com)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_TOKEN")}        long-lived CLI PAT; outranks the login session and the PAT saved in token.json`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_SKIP_AUTH")}    bypass the auth gate for development`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_NON_INTERACTIVE")} force non-interactive mode — skip/auto-default prompts (CI & agents)`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_RUN_ENTRYPOINT")} =1 → agent pull executes the agent entrypoint (sandbox boots; or pass --run-entrypoint)`);
   out.push("");
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_MEMORY_MCP_URL")}        override the built-in memory MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_BROWSER_MCP_URL")}       override the built-in browser MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_SLACK_MCP_URL")}         override the built-in Slack MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_MEETING_MCP_URL")}       override the built-in meeting MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_GITHUB_MCP_URL")}        override the built-in GitHub MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_LINEAR_MCP_URL")}        override the built-in Linear MCP host`);
-  out.push(`  ${import_picocolors81.default.dim("BRAINBASE_ORCHESTRATION_MCP_URL")} override the built-in orchestration MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_MEMORY_MCP_URL")}        override the built-in memory MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_BROWSER_MCP_URL")}       override the built-in browser MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_SLACK_MCP_URL")}         override the built-in Slack MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_MEETING_MCP_URL")}       override the built-in meeting MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_GITHUB_MCP_URL")}        override the built-in GitHub MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_LINEAR_MCP_URL")}        override the built-in Linear MCP host`);
+  out.push(`  ${import_picocolors84.default.dim("BRAINBASE_ORCHESTRATION_MCP_URL")} override the built-in orchestration MCP host`);
   out.push("");
   out.push(divider("HARNESSES"));
   out.push("");
-  out.push(`  ${import_picocolors81.default.dim("•")} ${import_picocolors81.default.bold("claude-code")}  ${import_picocolors81.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
-  out.push(`  ${import_picocolors81.default.dim("•")} ${import_picocolors81.default.bold("codex")}        ${import_picocolors81.default.dim("skills, mcps, commands, playbooks, instructions, files")}`);
-  out.push(`  ${import_picocolors81.default.dim("•")} ${import_picocolors81.default.bold("kafka")}        ${import_picocolors81.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors84.default.dim("•")} ${import_picocolors84.default.bold("claude-code")}  ${import_picocolors84.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors84.default.dim("•")} ${import_picocolors84.default.bold("codex")}        ${import_picocolors84.default.dim("skills, mcps, commands, playbooks, instructions, files")}`);
+  out.push(`  ${import_picocolors84.default.dim("•")} ${import_picocolors84.default.bold("kafka")}        ${import_picocolors84.default.dim("skills, mcps, agents, commands, playbooks, instructions, files")}`);
   out.push("");
   console.log(out.join(`
 `));
@@ -99138,7 +99661,7 @@ function takeFlagOnce(args, names) {
     return best.joinedValue;
   }
   const v3 = args[best.index + 1];
-  if (v3 && !v3.startsWith("-")) {
+  if (v3 !== undefined && !v3.startsWith("-")) {
     args.splice(best.index, 2);
     return v3;
   }
@@ -99227,10 +99750,10 @@ async function requireAuth(cmd) {
   if (storedPatFor(status.session))
     return;
   console.error("");
-  console.error(`  ${brandTint("◆")}  ${import_picocolors81.default.bold("brainbase")}`);
+  console.error(`  ${brandTint("◆")}  ${import_picocolors84.default.bold("brainbase")}`);
   console.error("");
-  console.error(`  ${import_picocolors81.default.red("✗")}  You need to sign in to use ${import_picocolors81.default.bold("brainbase " + cmd)}.`);
-  console.error(`     ${import_picocolors81.default.dim(noUsableCredentialMessage())}`);
+  console.error(`  ${import_picocolors84.default.red("✗")}  You need to sign in to use ${import_picocolors84.default.bold("brainbase " + cmd)}.`);
+  console.error(`     ${import_picocolors84.default.dim(noUsableCredentialMessage())}`);
   console.error("");
   process14.exit(1);
 }
@@ -99520,10 +100043,10 @@ ${didYouMean(cmd, COMMANDS3, "brainbase")}`);
   } catch (err) {
     const message3 = sanitizeLines(err.message).join(`
 `);
-    console.error(import_picocolors81.default.red(`
+    console.error(import_picocolors84.default.red(`
 ${message3}`));
     if (err instanceof ApiError && err.status === 401 && !err.message.includes("brainbase login")) {
-      console.error(`  Run ${import_picocolors81.default.cyan("brainbase login")} to connect this device.`);
+      console.error(`  Run ${import_picocolors84.default.cyan("brainbase login")} to connect this device.`);
     }
     if (process14.env.BRAINBASE_DEBUG)
       console.error(err.stack);