@dam-agents/cli 0.2.17 → 0.2.18-rc2

package/dist/bin.js

@@ -26748,319 +26748,170 @@ var liveEventSchema = external_exports.discriminatedUnion("topic", [
     experimentId: external_exports.string().min(1),
     agentId: external_exports.string().min(1)
   }),
+  external_exports.object({
+    topic: external_exports.literal("attention"),
+    agentId: external_exports.string().min(1)
+  }),
   external_exports.object({
     topic: external_exports.literal("artifacts"),
     artifactId: external_exports.string().min(1).optional(),
     agentId: external_exports.string().min(1).optional()
   })
 ]);
-var podSessionsNoticeSchema = external_exports.discriminatedUnion("topic", [
-  external_exports.object({ topic: external_exports.literal("sync") }),
-  external_exports.object({ topic: external_exports.literal("sessions"), agentId: external_exports.string().min(1) })
-]);
 
-// ../api-server-api/src/modules/skills/schemas.ts
-var skillSourcePathSchema = external_exports.string().transform((p2) => p2.trim().replace(/^\/+|\/+$/g, "")).refine((p2) => !p2.split("/").includes(".."), "path must not contain '..'");
-var skillSourceSchema = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  gitUrl: external_exports.string(),
-  path: external_exports.string().optional(),
-  system: external_exports.boolean().optional(),
-  fromTemplate: external_exports.object({ templateId: external_exports.string(), templateName: external_exports.string() }).optional(),
-  canPublish: external_exports.boolean().optional()
-});
-var skillPublishResultSchema = external_exports.object({
-  prUrl: external_exports.string().url(),
-  branch: external_exports.string()
-});
-var skillSchema = external_exports.object({
-  source: external_exports.string(),
-  name: external_exports.string(),
-  description: external_exports.string(),
-  version: external_exports.string(),
-  contentHash: external_exports.string(),
-  dir: external_exports.string().optional()
-});
-var skillListResultSchema = external_exports.object({
-  skills: external_exports.array(skillSchema),
-  scannedAt: external_exports.string().datetime(),
-  visibility: external_exports.enum(["public", "private"]).optional()
-});
-var scanFailureCodes = [
-  "needs_github_connection",
-  "needs_sandbox",
-  "repo_unreachable",
-  "agent_unreachable",
-  "source_path_not_found",
-  "source_path_empty",
-  "other"
-];
-var scanFailureSchema = external_exports.object({
-  code: external_exports.enum(scanFailureCodes),
-  title: external_exports.string(),
-  detail: external_exports.string()
-});
-var skillRefSchema = external_exports.object({
-  source: external_exports.string(),
-  name: external_exports.string(),
-  version: external_exports.string(),
-  contentHash: external_exports.string().optional(),
-  path: external_exports.string().optional()
-});
-var localSkillSchema = external_exports.object({
-  name: external_exports.string(),
-  description: external_exports.string(),
-  skillPath: external_exports.string(),
-  origin: external_exports.enum(["system", "system-modified", "user"]).optional(),
-  contentHash: external_exports.string().optional()
-});
-var skillPublishRecordSchema = external_exports.object({
-  skillName: external_exports.string(),
-  sourceId: external_exports.string(),
-  sourceName: external_exports.string(),
-  sourceGitUrl: external_exports.string(),
-  prUrl: external_exports.string(),
-  publishedAt: external_exports.string(),
-  prState: external_exports.enum(["draft", "open", "merged", "closed"]).nullable(),
-  prStateCheckedAt: external_exports.string().nullable()
-});
-var skillStateOutputSchema = external_exports.object({
-  installed: external_exports.array(skillRefSchema),
-  standalone: external_exports.array(localSkillSchema),
-  instancePublishes: external_exports.array(skillPublishRecordSchema),
-  standaloneSnapshot: external_exports.object({ capturedAt: external_exports.string().datetime() }).optional()
-});
-var skillListSourcesInputSchema = external_exports.object({ agentId: external_exports.string().min(1).optional() }).optional();
-var skillCreateSourceInputSchema = external_exports.object({
-  name: external_exports.string().min(1).max(128),
-  gitUrl: external_exports.string().url(),
-  path: skillSourcePathSchema.optional()
-});
-var skillDeleteSourceInputSchema = external_exports.object({
-  id: external_exports.string().min(1)
-});
-var skillRefreshSourceInputSchema = external_exports.object({
-  id: external_exports.string().min(1)
-});
-var skillListInputSchema = external_exports.object({
-  sourceId: external_exports.string().min(1),
-  agentId: external_exports.string().min(1).optional()
-});
-var skillGetContentInputSchema = external_exports.object({
-  sourceId: external_exports.string().min(1),
-  name: external_exports.string().min(1),
-  agentId: external_exports.string().min(1).optional()
-});
-var skillContentSchema = external_exports.object({
-  content: external_exports.string(),
-  dir: external_exports.string().optional()
-});
-var skillInstallInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1),
-  source: external_exports.string().url(),
-  name: external_exports.string().min(1),
-  version: external_exports.string().min(1),
-  contentHash: external_exports.string().optional()
-});
-var skillUninstallInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1),
-  source: external_exports.string().url(),
-  name: external_exports.string().min(1)
-});
-var skillSetEntrySchema = external_exports.object({
-  source: external_exports.string().url(),
-  name: external_exports.string().min(1)
-});
-var skillSetNameSchema = resourceNameSchema("my-skill-set");
-var skillSetSchema = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  skills: external_exports.array(skillSetEntrySchema),
-  createdAt: external_exports.string()
-});
-var skillSetCreateInputSchema = external_exports.object({
-  name: skillSetNameSchema,
-  skills: external_exports.array(skillSetEntrySchema).min(1).max(500)
-});
-var skillSetDeleteInputSchema = external_exports.object({ id: external_exports.string().min(1) });
-var skillSetApplyInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1),
-  setIds: external_exports.array(external_exports.string().min(1)).min(1).max(50)
-});
-var skillSetSkipReasonSchema = external_exports.enum([
-  "source-not-connected",
-  "source-unreadable",
-  "not-in-source"
-]);
-var skillSetApplyResultSchema = external_exports.object({
-  installed: external_exports.array(skillRefSchema),
-  added: external_exports.number().int().nonnegative(),
-  skipped: external_exports.array(
-    skillSetEntrySchema.extend({ reason: skillSetSkipReasonSchema })
-  )
-});
-var MAX_SKILL_BATCH_ENTRIES = 500;
-var skillApplyBatchInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1),
-  install: external_exports.array(
-    external_exports.object({
-      source: external_exports.string().url(),
-      name: external_exports.string().min(1),
-      version: external_exports.string().min(1),
-      contentHash: external_exports.string().optional()
-    })
-  ).max(MAX_SKILL_BATCH_ENTRIES).default([]),
-  uninstall: external_exports.array(
-    external_exports.object({
-      source: external_exports.string().url(),
-      name: external_exports.string().min(1)
-    })
-  ).max(MAX_SKILL_BATCH_ENTRIES).default([])
-}).refine(
-  (v2) => v2.install.length + v2.uninstall.length <= MAX_SKILL_BATCH_ENTRIES,
-  {
-    message: `one batch carries at most ${MAX_SKILL_BATCH_ENTRIES} skills, install and uninstall combined`
+// ../api-server-api/src/modules/connections/providers.ts
+var DEFAULT_ENV_PLACEHOLDER = "dummy-placeholder";
+var IBM_LITELLM_HOST = "ete-litellm.ai-models.vpc.res.ibm.com";
+var IBM_LITELLM_BASE_URL = `https://${IBM_LITELLM_HOST}`;
+function ibmLitellmEnvMappings() {
+  return [
+    { envName: "ANTHROPIC_AUTH_TOKEN", placeholder: "sk-dummy" },
+    { envName: "ANTHROPIC_BASE_URL", placeholder: IBM_LITELLM_BASE_URL },
+    { envName: "CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS", placeholder: "1" },
+    { envName: "OPENAI_PROXY_URL", placeholder: IBM_LITELLM_BASE_URL },
+    { envName: "OPENAI_PROXY_MODEL", placeholder: "aws/claude-opus-4-8" },
+    { envName: "OPENAI_PROXY_CONTEXT_WINDOW", placeholder: "200000" },
+    { envName: "OPENAI_PROXY_MAX_TOKENS", placeholder: "8192" },
+    { envName: "OPENAI_API_KEY", placeholder: DEFAULT_ENV_PLACEHOLDER },
+    { envName: "OPENAI_BASE_URL", placeholder: IBM_LITELLM_BASE_URL },
+    { envName: "OPENAI_MODEL", placeholder: "gpt-5.5" },
+    { envName: "BOB_GATEWAY_URL", placeholder: IBM_LITELLM_BASE_URL },
+    { envName: "BOBSHELL_API_KEY", placeholder: DEFAULT_ENV_PLACEHOLDER }
+  ];
+}
+function openaiEnvMappings() {
+  return [
+    { envName: "OPENAI_API_KEY", placeholder: DEFAULT_ENV_PLACEHOLDER },
+    { envName: "OPENAI_BASE_URL", placeholder: "https://api.openai.com/v1" }
+  ];
+}
+var BOB_HOST = "api.us-east.bob.ibm.com";
+var BOB_BASE_URL = `https://${BOB_HOST}`;
+var BOB_PLACEHOLDER = "dummy-placeholder";
+function bobEnvMappings(pins = {}) {
+  const out = [
+    { envName: "BOBSHELL_API_KEY", placeholder: BOB_PLACEHOLDER },
+    { envName: "BOB_DEFAULT_GATEWAY_URL", placeholder: BOB_BASE_URL }
+  ];
+  const push = (envName, value) => {
+    const trimmed = value?.trim();
+    if (trimmed) out.push({ envName, placeholder: trimmed });
+  };
+  push("BOB_SHELL_MODEL", pins.model);
+  push("BOB_INSTANCE_ID", pins.agentId);
+  push("BOB_TEAM_ID", pins.teamId);
+  push("BOB_MAX_COINS", pins.maxCost);
+  push("BOB_CHAT_MODE", pins.chatMode);
+  return out;
+}
+var PROVIDERS = {
+  anthropic: {
+    id: "anthropic",
+    displayName: "Anthropic",
+    hostPattern: "api.anthropic.com",
+    modes: [
+      {
+        key: "oauth",
+        label: "OAuth Token",
+        templateId: "anthropic-oauth",
+        tokenPrefix: "sk-ant-oat",
+        defaultEnvMappings: [
+          {
+            envName: "CLAUDE_CODE_OAUTH_TOKEN",
+            placeholder: DEFAULT_ENV_PLACEHOLDER
+          }
+        ]
+      },
+      {
+        key: "api-key",
+        label: "API Key",
+        templateId: "anthropic",
+        tokenPrefix: "sk-ant-api",
+        isDefault: true,
+        defaultEnvMappings: [
+          {
+            envName: "ANTHROPIC_API_KEY",
+            placeholder: DEFAULT_ENV_PLACEHOLDER
+          }
+        ],
+        injection: { headerName: "x-api-key", valueFormat: "{value}" }
+      }
+    ]
+  },
+  "ibm-litellm": {
+    id: "ibm-litellm",
+    displayName: "IBM LiteLLM ETE Proxy",
+    hostPattern: IBM_LITELLM_HOST,
+    modes: [
+      {
+        key: "api-key",
+        label: "API Token",
+        templateId: "ibm-litellm",
+        defaultEnvMappings: ibmLitellmEnvMappings()
+      }
+    ]
+  },
+  openai: {
+    id: "openai",
+    displayName: "OpenAI",
+    hostPattern: "api.openai.com",
+    pathPattern: "/v1/*",
+    modes: [
+      {
+        key: "api-key",
+        label: "API Key",
+        templateId: "openai",
+        defaultEnvMappings: openaiEnvMappings()
+      }
+    ]
+  },
+  bob: {
+    id: "bob",
+    displayName: "Bob Shell",
+    hostPattern: BOB_HOST,
+    modes: [
+      {
+        key: "api-key",
+        label: "API Key",
+        templateId: "bob",
+        defaultEnvMappings: bobEnvMappings(),
+        injection: {
+          headerName: "Authorization",
+          valueFormat: "Apikey {value}"
+        },
+        extraInjections: [
+          { headerName: "X-Bobshell-Internal", queryParamName: "key" }
+        ]
+      }
+    ]
   }
+};
+var PROVIDER_PRESET_TYPES = Object.keys(
+  PROVIDERS
 );
-var skillListLocalInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1)
-});
-var skillStateInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1)
-});
-var skillDeleteLocalInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1),
-  name: external_exports.string().min(1)
-});
-var skillReadLocalInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1),
-  name: external_exports.string().min(1)
-});
-var skillLocalFilesSchema = external_exports.object({
-  dir: external_exports.string(),
-  files: external_exports.array(
-    external_exports.object({
-      relPath: external_exports.string(),
-      content: external_exports.string(),
-      base64: external_exports.literal(true).optional()
-    })
+function isProviderPresetType(type) {
+  return type in PROVIDERS;
+}
+var TEMPLATE_TO_PROVIDER = new Map(
+  PROVIDER_PRESET_TYPES.flatMap(
+    (type) => PROVIDERS[type].modes.map(
+      (mode) => [mode.templateId, type]
+    )
   )
-});
-var skillPublishInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1),
-  sourceId: external_exports.string().min(1),
-  name: external_exports.string().min(1),
-  title: external_exports.string().optional(),
-  body: external_exports.string().optional()
-});
-var skillCreateLocalInputSchema = external_exports.object({
-  agentId: external_exports.string().min(1),
-  skills: external_exports.array(
-    external_exports.object({
-      name: external_exports.string().min(1).max(128),
-      content: external_exports.string().max(2 * 1024 * 1024)
-    })
-  ).min(1).max(50)
-}).refine(
-  (v2) => v2.skills.reduce((n, s) => n + s.content.length, 0) <= 5 * 1024 * 1024,
-  "batch exceeds 5 MB"
 );
-
-// ../api-server-api/src/modules/templates/schemas.ts
-var templateGetInputSchema = external_exports.object({
-  id: external_exports.string().min(1)
-});
-var mountSchema = external_exports.object({
-  path: external_exports.string(),
-  persist: external_exports.boolean(),
-  size: external_exports.string().optional()
-});
-var resourcesSchema = external_exports.object({
-  requests: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-  limits: external_exports.record(external_exports.string(), external_exports.string()).optional()
-});
-var envVarConfigMapSchema = external_exports.object({
-  name: external_exports.string(),
-  value: external_exports.string()
-});
-var skillSourceSeedSchema = external_exports.object({
-  name: external_exports.string(),
-  gitUrl: external_exports.string(),
-  path: skillSourcePathSchema.optional()
-});
-var templateCategorySchema = external_exports.enum(["harness", "preconfigured"]).default("harness");
-var harnessFamilySchema = external_exports.enum([
-  "claude-code",
-  "codex",
-  "pi",
-  "bob"
-]);
-var templateSpecSchema = external_exports.object({
-  version: external_exports.string(),
-  image: external_exports.string(),
-  name: external_exports.string().optional(),
-  description: external_exports.string().optional(),
-  category: templateCategorySchema,
-  harness: harnessFamilySchema.optional(),
-  tags: external_exports.array(external_exports.string()).optional(),
-  docsUrl: external_exports.string().optional(),
-  releaseNotesUrl: external_exports.string().optional(),
-  setupNote: external_exports.object({ title: external_exports.string(), body: external_exports.string() }).optional(),
-  experimental: external_exports.boolean().optional(),
-  mounts: external_exports.array(mountSchema).optional(),
-  init: external_exports.string().optional(),
-  env: external_exports.array(envVarConfigMapSchema).optional(),
-  resources: resourcesSchema.optional(),
-  imagePullPolicy: external_exports.string().optional(),
-  imagePullSecretRef: external_exports.string().optional(),
-  hibernationTimeout: external_exports.string().optional(),
-  storageSize: external_exports.string().optional(),
-  storageClass: external_exports.string().optional(),
-  backend: external_exports.object({
-    type: external_exports.enum(["container", "vm"]),
-    vm: external_exports.object({}).passthrough().optional()
-  }).optional(),
-  runtimeClassName: external_exports.string().optional(),
-  nodeSelector: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-  skillSources: external_exports.array(skillSourceSeedSchema).optional()
-}).passthrough();
-
-// ../api-server-api/src/modules/repos/schemas.ts
-var repoSchema = external_exports.object({
-  id: external_exports.string().min(1),
-  name: external_exports.string().min(1),
-  url: external_exports.url(),
-  ref: external_exports.string().min(1).optional(),
-  description: external_exports.string().optional(),
-  compatibleTemplates: external_exports.array(external_exports.string()).default([])
-});
-
-// ../api-server-api/src/modules/invocations/schemas.ts
-var DEFAULT_INVOCATION_TTL_MS = 60 * 60 * 1e3;
-var MIN_INVOCATION_TTL_MS = 60 * 1e3;
-var MAX_INVOCATION_TTL_MS = 6 * 60 * 60 * 1e3;
-var spawnInvocationRequestSchema = external_exports.object({
-  image: external_exports.string().min(1).optional(),
-  templateId: external_exports.string().min(1).optional(),
-  connections: external_exports.array(external_exports.string().min(1)).optional(),
-  prompt: external_exports.string().min(1),
-  schema: external_exports.unknown(),
-  ttlMs: external_exports.number().int().min(MIN_INVOCATION_TTL_MS).max(MAX_INVOCATION_TTL_MS).optional(),
-  memory: external_exports.string().regex(/^\d+(Mi|Gi)$/, "memory must look like '512Mi' or '4Gi'").optional(),
-  cpu: external_exports.string().regex(/^\d+(\.\d+)?m?$/, "cpu must look like '2', '0.5' or '500m'").optional(),
-  experimentSpanId: external_exports.string().min(1).max(300).optional()
-}).refine((d2) => d2.image !== void 0 || d2.templateId !== void 0, {
-  message: "either image or templateId is required"
-});
-var spawnInvocationResponseSchema = external_exports.object({
-  id: external_exports.string().min(1)
-});
-var invocationViewSchema = external_exports.object({
-  status: external_exports.enum(["running", "done", "failed"]),
-  result: external_exports.unknown(),
-  errorReason: external_exports.string().optional()
-});
+var PROVIDER_TEMPLATE_IDS = new Set(
+  TEMPLATE_TO_PROVIDER.keys()
+);
+function providerTypeForTemplateId(templateId) {
+  return TEMPLATE_TO_PROVIDER.get(templateId) ?? null;
+}
+function templateIdForProvider(type, value) {
+  const modes = PROVIDERS[type].modes;
+  const matched = modes.find(
+    (mode) => mode.tokenPrefix !== void 0 && value.startsWith(mode.tokenPrefix)
+  );
+  return (matched ?? modes.find((mode) => mode.isDefault) ?? modes[0]).templateId;
+}
 
 // ../agent-runtime-api/src/modules/files/schemas.ts
 var pathSchema = external_exports.string().min(1);
@@ -27117,6 +26968,7 @@ var podSessionSchema = external_exports.object({
   title: external_exports.string().nullable(),
   scheduleId: external_exports.string().nullable(),
   experimentId: external_exports.string().nullable(),
+  initialization: external_exports.boolean().optional(),
   threadTs: external_exports.string().nullable(),
   seenAt: external_exports.string().nullable(),
   runStartedAt: external_exports.string().nullable(),
@@ -27142,14 +26994,14 @@ var sessionDirectoryReportSchema = external_exports.object({
 });
 
 // ../agent-runtime-api/src/modules/skills/schemas.ts
-var skillInstallInputSchema2 = external_exports.object({
+var skillInstallInputSchema = external_exports.object({
   sourceUrl: external_exports.string().min(1),
   name: external_exports.string().min(1),
   version: external_exports.string().min(1),
   skillPaths: external_exports.array(external_exports.string().min(1)).min(1),
   path: external_exports.string().optional()
 });
-var skillUninstallInputSchema2 = external_exports.object({
+var skillUninstallInputSchema = external_exports.object({
   name: external_exports.string().min(1),
   skillPaths: external_exports.array(external_exports.string().min(1)).min(1)
 });
@@ -27157,7 +27009,7 @@ var skillScanInputSchema = external_exports.object({
   source: external_exports.string().min(1),
   path: external_exports.string().optional()
 });
-var skillPublishInputSchema2 = external_exports.object({
+var skillPublishInputSchema = external_exports.object({
   name: external_exports.string().min(1),
   owner: external_exports.string().min(1),
   repo: external_exports.string().min(1),
@@ -27165,10 +27017,10 @@ var skillPublishInputSchema2 = external_exports.object({
   body: external_exports.string(),
   path: external_exports.string().optional()
 });
-var skillListLocalInputSchema2 = external_exports.object({
+var skillListLocalInputSchema = external_exports.object({
   hashNames: external_exports.array(external_exports.string()).optional()
 });
-var skillReadLocalInputSchema2 = external_exports.object({
+var skillReadLocalInputSchema = external_exports.object({
   name: external_exports.string().min(1)
 });
 var skillReadPullRequestInputSchema = external_exports.object({
@@ -27181,7 +27033,7 @@ var skillReadSkillFileInputSchema = external_exports.object({
   version: external_exports.string().min(1),
   dir: external_exports.string().min(1)
 });
-var skillDeleteLocalInputSchema2 = external_exports.object({
+var skillDeleteLocalInputSchema = external_exports.object({
   name: external_exports.string().min(1)
 });
 var skillWriteLocalInputSchema = external_exports.object({
@@ -27196,6 +27048,97 @@ var skillWriteLocalInputSchema = external_exports.object({
 // ../agent-runtime-api/src/modules/skills/source-roots.ts
 var STAGED_SKILLS_DIR = "/usr/local/share/dam-skills";
 
+// ../agent-runtime-api/src/modules/skills/git-url.ts
+var BROWSE_MARKERS = ["tree", "blob"];
+var DEFAULT_PORTS = ["80", "443"];
+var GITHUB_HOST = "github.com";
+function normalizeGitUrl(input) {
+  const trimmed = input.trim();
+  if (trimmed.length === 0) return null;
+  const url2 = parseUrl(
+    /^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`
+  );
+  if (!url2) return null;
+  if (url2.protocol !== "https:" && url2.protocol !== "http:") return null;
+  url2.protocol = "https:";
+  url2.search = "";
+  url2.hash = "";
+  url2.username = "";
+  url2.password = "";
+  if (DEFAULT_PORTS.includes(url2.port)) url2.port = "";
+  if (url2.hostname === `www.${GITHUB_HOST}`) url2.hostname = GITHUB_HOST;
+  if (url2.hostname.length === 0) return null;
+  const isGithub = url2.hostname === GITHUB_HOST;
+  const segments = url2.pathname.split("/").filter((s) => s.length > 0);
+  const browsed = splitBrowseUrl(segments);
+  const repoSegments = stripRepoSuffix(
+    isGithub ? browsed.repoSegments.slice(0, 2).map((s) => s.toLowerCase()) : browsed.repoSegments
+  );
+  if (repoSegments.length < 2) return null;
+  url2.pathname = `/${repoSegments.join("/")}`;
+  const path2 = browsed.path && decodePath(browsed.path);
+  return {
+    gitUrl: url2.toString().replace(/\/$/, ""),
+    ...path2 ? { path: path2 } : {},
+    ...browsed.ref !== void 0 ? { ref: browsed.ref } : {}
+  };
+}
+function canonicalSourceLocation(gitUrl, path2) {
+  const normalized = normalizeGitUrl(gitUrl);
+  if (!normalized) return null;
+  const resolved = path2?.trim() || normalized.path;
+  return {
+    gitUrl: normalized.gitUrl,
+    ...resolved ? { path: resolved } : {}
+  };
+}
+function parseUrl(candidate) {
+  try {
+    return new URL(candidate);
+  } catch {
+    return null;
+  }
+}
+function decodePath(path2) {
+  const decoded = [];
+  for (const segment of path2.split("/")) {
+    let value;
+    try {
+      value = decodeURIComponent(segment);
+    } catch {
+      return null;
+    }
+    if (value === "" || value === "." || value === "..") return null;
+    if (value.includes("/") || value.includes("\\") || value.includes("\0")) {
+      return null;
+    }
+    decoded.push(value);
+  }
+  return decoded.join("/");
+}
+function splitBrowseUrl(segments) {
+  const marker = segments.findIndex(
+    (s, i) => i >= 2 && BROWSE_MARKERS.includes(s)
+  );
+  if (marker === -1 || marker + 1 >= segments.length) {
+    return { repoSegments: segments };
+  }
+  const before = segments.slice(0, marker);
+  const rest = segments.slice(marker + 2);
+  const dir = segments[marker] === "blob" ? rest.slice(0, -1) : rest;
+  return {
+    repoSegments: before[before.length - 1] === "-" ? before.slice(0, -1) : before,
+    ...dir.length > 0 ? { path: dir.join("/") } : {},
+    ref: segments[marker + 1]
+  };
+}
+function stripRepoSuffix(segments) {
+  if (segments.length === 0) return segments;
+  const last = segments[segments.length - 1].replace(/\.git$/, "");
+  if (last.length === 0) return segments.slice(0, -1);
+  return [...segments.slice(0, -1), last];
+}
+
 // ../agent-runtime-api/src/modules/workspace/paths.ts
 var AGENT_HOME_DIR = "/home/agent";
 var AGENT_WORK_DIR = `${AGENT_HOME_DIR}/work`;
@@ -27238,6 +27181,7 @@ var eventKind = external_exports.enum([
   "workspace-seed",
   "workspace-command",
   "experiment-execute",
+  "initialization",
   "harness-config"
 ]);
 var mergeMode = external_exports.enum([
@@ -27259,10 +27203,20 @@ var egressAllowContribution = external_exports.object({
   port: egressPort,
   pathPattern: external_exports.string().optional()
 });
+var anchoredPathSegments = /^\/(?:[A-Za-z0-9._~-]+\/)*$/;
+var anchoredPath = external_exports.string().regex(anchoredPathSegments).refine(
+  (p2) => p2.split("/").every((seg) => seg !== "." && seg !== ".."),
+  "path segments must not be relative"
+);
+var pathRewrite = external_exports.object({
+  prefix: anchoredPath,
+  replacement: anchoredPath
+});
 var egressInjectContribution = external_exports.object({
   kind: external_exports.literal("egress-inject"),
   host: external_exports.string().min(1),
   pathPattern: external_exports.string().optional(),
+  pathRewrites: external_exports.array(pathRewrite).min(1).max(8).optional(),
   headerName: external_exports.string().min(1),
   valueFormat: external_exports.string().min(1),
   encoding: external_exports.literal("basic-x-access-token").optional(),
@@ -27304,7 +27258,10 @@ var triggerEventPayload = external_exports.object({
   scheduleId: external_exports.string().min(1),
   task: external_exports.string().min(1),
   sessionMode: external_exports.enum(["continuous", "fresh"]).optional(),
-  mcpServers: external_exports.array(external_exports.unknown()).optional()
+  mcpServers: external_exports.array(external_exports.unknown()).optional(),
+  precheck: external_exports.string().min(1).optional(),
+  fireAt: external_exports.string().datetime({ offset: true }).optional(),
+  lastRunAt: external_exports.string().datetime({ offset: true }).optional()
 });
 var triggerEvent = external_exports.object({
   id: external_exports.string().min(1),
@@ -27313,6 +27270,12 @@ var triggerEvent = external_exports.object({
   expiresAt: external_exports.string().datetime({ offset: true }),
   payload: triggerEventPayload
 });
+var eventOutcome = external_exports.enum(["ok", "declined", "failed"]);
+var eventReportInput = external_exports.object({
+  eventId: external_exports.string().min(1),
+  outcome: eventOutcome,
+  detail: external_exports.string().max(2e3).optional()
+});
 var scheduleResetEventPayload = external_exports.object({
   scheduleId: external_exports.string().min(1)
 });
@@ -27325,7 +27288,10 @@ var scheduleResetEvent = external_exports.object({
 });
 var workspaceSeedEventPayload = external_exports.object({
   url: external_exports.string().min(1),
-  ref: external_exports.string().min(1).optional()
+  ref: external_exports.string().min(1).optional(),
+  commit: external_exports.string().min(1).optional(),
+  branch: external_exports.string().min(1).optional(),
+  into: external_exports.enum(["work", "home"]).optional()
 });
 var workspaceSeedEvent = external_exports.object({
   id: external_exports.string().min(1),
@@ -27355,118 +27321,447 @@ var experimentExecuteEvent = external_exports.object({
   expiresAt: external_exports.string().datetime({ offset: true }),
   payload: experimentExecuteEventPayload
 });
-var harnessConfigEventPayload = external_exports.object({
-  model: external_exports.string().min(1).optional(),
-  mode: external_exports.string().min(1).optional(),
-  configOptions: external_exports.record(external_exports.string().min(1), external_exports.string()).optional(),
-  unset: external_exports.array(external_exports.string().min(1)).optional()
+var initializationEventPayload = external_exports.object({
+  task: external_exports.string().min(1)
+});
+var initializationEvent = external_exports.object({
+  id: external_exports.string().min(1),
+  kind: external_exports.literal("initialization"),
+  version: external_exports.number().int().nonnegative(),
+  expiresAt: external_exports.string().datetime({ offset: true }),
+  payload: initializationEventPayload
+});
+var harnessConfigEventPayload = external_exports.object({
+  model: external_exports.string().min(1).optional(),
+  mode: external_exports.string().min(1).optional(),
+  configOptions: external_exports.record(external_exports.string().min(1), external_exports.string()).optional(),
+  unset: external_exports.array(external_exports.string().min(1)).optional()
+});
+var harnessConfigEvent = external_exports.object({
+  id: external_exports.string().min(1),
+  kind: external_exports.literal("harness-config"),
+  version: external_exports.number().int().nonnegative(),
+  expiresAt: external_exports.string().datetime({ offset: true }),
+  payload: harnessConfigEventPayload
+});
+var event = external_exports.discriminatedUnion("kind", [
+  triggerEvent,
+  scheduleResetEvent,
+  workspaceSeedEvent,
+  workspaceCommandEvent,
+  experimentExecuteEvent,
+  initializationEvent,
+  harnessConfigEvent
+]);
+var harnessConfigChoice = external_exports.object({
+  value: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  description: external_exports.string().optional()
+});
+var harnessConfigOptionGroup = external_exports.object({
+  id: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  description: external_exports.string().optional(),
+  category: external_exports.string().min(1),
+  choices: external_exports.array(harnessConfigChoice)
+});
+var harnessConfigCatalog = external_exports.object({
+  options: external_exports.array(harnessConfigOptionGroup),
+  modelConstraints: external_exports.record(external_exports.string().min(1), external_exports.record(external_exports.string().min(1), external_exports.array(external_exports.string()))).optional()
+});
+var harnessConfigCurrent = external_exports.object({
+  model: external_exports.string().nullable(),
+  mode: external_exports.string().nullable(),
+  configOptions: external_exports.record(external_exports.string().min(1), external_exports.string()),
+  availableModels: external_exports.array(harnessConfigChoice).nullable().optional()
+});
+var capabilities = external_exports.object({
+  contributions: external_exports.array(contributionKind),
+  events: external_exports.array(eventKind),
+  harnessConfig: external_exports.boolean().optional(),
+  harnessConfigCatalog: harnessConfigCatalog.optional(),
+  kbPublish: external_exports.number().int().optional(),
+  liveUpdates: external_exports.boolean().optional()
+});
+var runtimeFeatureFlags = external_exports.looseObject({
+  liveUpdates: external_exports.boolean().optional().catch(void 0)
+});
+var stateSlice = external_exports.object({
+  contributions: external_exports.array(contribution),
+  hash: external_exports.string().min(1)
+});
+var applyStateInput = external_exports.object({
+  version: external_exports.number().int().positive(),
+  state: stateSlice,
+  events: external_exports.array(event)
+});
+var driverFailure = external_exports.object({
+  kind: contributionKind,
+  message: external_exports.string().min(1)
+});
+var applyStateResult = external_exports.discriminatedUnion("status", [
+  external_exports.object({
+    status: external_exports.literal("ok"),
+    appliedVersion: external_exports.number().int().nonnegative(),
+    appliedHash: external_exports.string().min(1).nullable(),
+    failures: external_exports.array(driverFailure).default([]),
+    settledEvents: external_exports.array(external_exports.string()).default([]),
+    harnessConfigCurrent: harnessConfigCurrent.optional()
+  }),
+  external_exports.object({
+    status: external_exports.literal("stale"),
+    appliedVersion: external_exports.number().int().nonnegative(),
+    settledEvents: external_exports.array(external_exports.string()).default([]),
+    harnessConfigCurrent: harnessConfigCurrent.optional()
+  })
+]);
+var helloInput = external_exports.object({
+  lastAppliedVersion: external_exports.number().int().nonnegative().optional(),
+  lastAppliedHash: external_exports.string().optional(),
+  protocolVersion: external_exports.literal("v1"),
+  agentRuntimeVersion: external_exports.string(),
+  capabilities,
+  harnessConfigCurrent: harnessConfigCurrent.optional()
+});
+var helloResult = external_exports.object({
+  version: external_exports.number().int().positive().optional(),
+  state: stateSlice.optional(),
+  events: external_exports.array(event)
+});
+
+// ../agent-runtime-api/src/modules/kb-snapshot/caps.ts
+var PER_FILE_MAX_BYTES = 2 * 1024 * 1024;
+var TOTAL_MAX_BYTES = 200 * 1024 * 1024;
+var kbPublishCapsSchema = external_exports.object({
+  perFileMaxBytes: external_exports.number().int().positive(),
+  totalMaxBytes: external_exports.number().int().positive(),
+  maxFiles: external_exports.number().int().positive(),
+  maxWalkDepth: external_exports.number().int().positive()
+});
+
+// ../agent-runtime-api/src/modules/kb-publish/schemas.ts
+var kbPublishSyncInputSchema = external_exports.object({
+  roots: external_exports.array(external_exports.string().min(1)).max(16).nullable(),
+  caps: kbPublishCapsSchema,
+  flush: external_exports.boolean()
+});
+
+// ../api-server-api/src/modules/skills/schemas.ts
+var skillSourcePathSchema = external_exports.string().transform((p2) => p2.trim().replace(/^\/+|\/+$/g, "")).refine((p2) => !p2.split("/").includes(".."), "path must not contain '..'");
+var skillSourceSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  gitUrl: external_exports.string(),
+  path: external_exports.string().optional(),
+  system: external_exports.boolean().optional(),
+  fromTemplate: external_exports.object({ templateId: external_exports.string(), templateName: external_exports.string() }).optional(),
+  canPublish: external_exports.boolean().optional()
+});
+var skillPublishResultSchema = external_exports.object({
+  prUrl: external_exports.string().url(),
+  branch: external_exports.string()
+});
+var skillSchema = external_exports.object({
+  source: external_exports.string(),
+  name: external_exports.string(),
+  description: external_exports.string(),
+  version: external_exports.string(),
+  contentHash: external_exports.string(),
+  dir: external_exports.string().optional()
+});
+var skillListResultSchema = external_exports.object({
+  skills: external_exports.array(skillSchema),
+  scannedAt: external_exports.string().datetime(),
+  visibility: external_exports.enum(["public", "private"]).optional()
+});
+var scanFailureCodes = [
+  "needs_github_connection",
+  "needs_sandbox",
+  "repo_unreachable",
+  "agent_unreachable",
+  "source_path_not_found",
+  "source_path_empty",
+  "other"
+];
+var scanFailureSchema = external_exports.object({
+  code: external_exports.enum(scanFailureCodes),
+  title: external_exports.string(),
+  detail: external_exports.string()
+});
+var skillRefSchema = external_exports.object({
+  source: external_exports.string(),
+  name: external_exports.string(),
+  version: external_exports.string(),
+  contentHash: external_exports.string().optional(),
+  path: external_exports.string().optional()
+});
+var localSkillSchema = external_exports.object({
+  name: external_exports.string(),
+  description: external_exports.string(),
+  skillPath: external_exports.string(),
+  origin: external_exports.enum(["system", "system-modified", "user"]).optional(),
+  contentHash: external_exports.string().optional()
+});
+var skillPublishRecordSchema = external_exports.object({
+  skillName: external_exports.string(),
+  sourceId: external_exports.string(),
+  sourceName: external_exports.string(),
+  sourceGitUrl: external_exports.string(),
+  prUrl: external_exports.string(),
+  publishedAt: external_exports.string(),
+  prState: external_exports.enum(["draft", "open", "merged", "closed"]).nullable(),
+  prStateCheckedAt: external_exports.string().nullable()
+});
+var skillStateOutputSchema = external_exports.object({
+  installed: external_exports.array(skillRefSchema),
+  standalone: external_exports.array(localSkillSchema),
+  instancePublishes: external_exports.array(skillPublishRecordSchema),
+  standaloneSnapshot: external_exports.object({ capturedAt: external_exports.string().datetime() }).optional()
+});
+var skillListSourcesInputSchema = external_exports.object({ agentId: external_exports.string().min(1).optional() }).optional();
+var INVALID_GIT_URL_MESSAGE = "Enter a repository URL such as https://github.com/owner/repo";
+var skillCreateSourceFieldsSchema = external_exports.object({
+  name: external_exports.string().min(1).max(128),
+  gitUrl: external_exports.string(),
+  path: skillSourcePathSchema.optional()
+});
+var skillCreateSourceInputSchema = skillCreateSourceFieldsSchema.transform((input, ctx) => {
+  const location = canonicalSourceLocation(input.gitUrl, input.path);
+  if (!location) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["gitUrl"],
+      message: INVALID_GIT_URL_MESSAGE
+    });
+    return external_exports.NEVER;
+  }
+  return { name: input.name, ...location };
+});
+var skillDeleteSourceInputSchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var skillRefreshSourceInputSchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var skillListInputSchema = external_exports.object({
+  sourceId: external_exports.string().min(1),
+  agentId: external_exports.string().min(1).optional()
+});
+var skillGetContentInputSchema = external_exports.object({
+  sourceId: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  agentId: external_exports.string().min(1).optional()
+});
+var skillContentSchema = external_exports.object({
+  content: external_exports.string(),
+  dir: external_exports.string().optional()
+});
+var skillInstallInputSchema2 = external_exports.object({
+  agentId: external_exports.string().min(1),
+  source: external_exports.string().url(),
+  name: external_exports.string().min(1),
+  version: external_exports.string().min(1),
+  contentHash: external_exports.string().optional()
+});
+var skillUninstallInputSchema2 = external_exports.object({
+  agentId: external_exports.string().min(1),
+  source: external_exports.string().url(),
+  name: external_exports.string().min(1)
+});
+var skillSetEntrySchema = external_exports.object({
+  source: external_exports.string().url(),
+  name: external_exports.string().min(1)
+});
+var skillSetNameSchema = resourceNameSchema("my-skill-set");
+var skillSetSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  skills: external_exports.array(skillSetEntrySchema),
+  createdAt: external_exports.string()
 });
-var harnessConfigEvent = external_exports.object({
-  id: external_exports.string().min(1),
-  kind: external_exports.literal("harness-config"),
-  version: external_exports.number().int().nonnegative(),
-  expiresAt: external_exports.string().datetime({ offset: true }),
-  payload: harnessConfigEventPayload
+var skillSetCreateInputSchema = external_exports.object({
+  name: skillSetNameSchema,
+  skills: external_exports.array(skillSetEntrySchema).min(1).max(500)
 });
-var event = external_exports.discriminatedUnion("kind", [
-  triggerEvent,
-  scheduleResetEvent,
-  workspaceSeedEvent,
-  workspaceCommandEvent,
-  experimentExecuteEvent,
-  harnessConfigEvent
+var skillSetDeleteInputSchema = external_exports.object({ id: external_exports.string().min(1) });
+var skillSetApplyInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1),
+  setIds: external_exports.array(external_exports.string().min(1)).min(1).max(50)
+});
+var skillSetSkipReasonSchema = external_exports.enum([
+  "source-not-connected",
+  "source-unreadable",
+  "not-in-source"
 ]);
-var harnessConfigChoice = external_exports.object({
-  value: external_exports.string().min(1),
-  name: external_exports.string().min(1),
-  description: external_exports.string().optional()
+var skillSetApplyResultSchema = external_exports.object({
+  installed: external_exports.array(skillRefSchema),
+  added: external_exports.number().int().nonnegative(),
+  skipped: external_exports.array(
+    skillSetEntrySchema.extend({ reason: skillSetSkipReasonSchema })
+  )
 });
-var harnessConfigOptionGroup = external_exports.object({
-  id: external_exports.string().min(1),
-  name: external_exports.string().min(1),
-  description: external_exports.string().optional(),
-  category: external_exports.string().min(1),
-  choices: external_exports.array(harnessConfigChoice)
+var MAX_SKILL_BATCH_ENTRIES = 500;
+var skillApplyBatchInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1),
+  install: external_exports.array(
+    external_exports.object({
+      source: external_exports.string().url(),
+      name: external_exports.string().min(1),
+      version: external_exports.string().min(1),
+      contentHash: external_exports.string().optional()
+    })
+  ).max(MAX_SKILL_BATCH_ENTRIES).default([]),
+  uninstall: external_exports.array(
+    external_exports.object({
+      source: external_exports.string().url(),
+      name: external_exports.string().min(1)
+    })
+  ).max(MAX_SKILL_BATCH_ENTRIES).default([])
+}).refine(
+  (v2) => v2.install.length + v2.uninstall.length <= MAX_SKILL_BATCH_ENTRIES,
+  {
+    message: `one batch carries at most ${MAX_SKILL_BATCH_ENTRIES} skills, install and uninstall combined`
+  }
+);
+var skillListLocalInputSchema2 = external_exports.object({
+  agentId: external_exports.string().min(1)
 });
-var harnessConfigCatalog = external_exports.object({
-  options: external_exports.array(harnessConfigOptionGroup),
-  modelConstraints: external_exports.record(external_exports.string().min(1), external_exports.record(external_exports.string().min(1), external_exports.array(external_exports.string()))).optional()
+var skillStateInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1)
 });
-var harnessConfigCurrent = external_exports.object({
-  model: external_exports.string().nullable(),
-  mode: external_exports.string().nullable(),
-  configOptions: external_exports.record(external_exports.string().min(1), external_exports.string()),
-  availableModels: external_exports.array(harnessConfigChoice).nullable().optional()
+var skillDeleteLocalInputSchema2 = external_exports.object({
+  agentId: external_exports.string().min(1),
+  name: external_exports.string().min(1)
 });
-var capabilities = external_exports.object({
-  contributions: external_exports.array(contributionKind),
-  events: external_exports.array(eventKind),
-  harnessConfig: external_exports.boolean().optional(),
-  harnessConfigCatalog: harnessConfigCatalog.optional(),
-  kbPublish: external_exports.number().int().optional(),
-  liveUpdates: external_exports.boolean().optional()
+var skillReadLocalInputSchema2 = external_exports.object({
+  agentId: external_exports.string().min(1),
+  name: external_exports.string().min(1)
 });
-var runtimeFeatureFlags = external_exports.looseObject({
-  liveUpdates: external_exports.boolean().optional().catch(void 0)
+var skillLocalFilesSchema = external_exports.object({
+  dir: external_exports.string(),
+  files: external_exports.array(
+    external_exports.object({
+      relPath: external_exports.string(),
+      content: external_exports.string(),
+      base64: external_exports.literal(true).optional()
+    })
+  )
 });
-var stateSlice = external_exports.object({
-  contributions: external_exports.array(contribution),
-  hash: external_exports.string().min(1)
+var skillPublishInputSchema2 = external_exports.object({
+  agentId: external_exports.string().min(1),
+  sourceId: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  title: external_exports.string().optional(),
+  body: external_exports.string().optional()
 });
-var applyStateInput = external_exports.object({
-  version: external_exports.number().int().positive(),
-  state: stateSlice,
-  events: external_exports.array(event)
+var skillCreateLocalInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1),
+  skills: external_exports.array(
+    external_exports.object({
+      name: external_exports.string().min(1).max(128),
+      content: external_exports.string().max(2 * 1024 * 1024)
+    })
+  ).min(1).max(50)
+}).refine(
+  (v2) => v2.skills.reduce((n, s) => n + s.content.length, 0) <= 5 * 1024 * 1024,
+  "batch exceeds 5 MB"
+);
+
+// ../api-server-api/src/modules/templates/schemas.ts
+var templateGetInputSchema = external_exports.object({
+  id: external_exports.string().min(1)
 });
-var driverFailure = external_exports.object({
-  kind: contributionKind,
-  message: external_exports.string().min(1)
+var mountSchema = external_exports.object({
+  path: external_exports.string(),
+  persist: external_exports.boolean(),
+  size: external_exports.string().optional()
 });
-var applyStateResult = external_exports.discriminatedUnion("status", [
-  external_exports.object({
-    status: external_exports.literal("ok"),
-    appliedVersion: external_exports.number().int().nonnegative(),
-    appliedHash: external_exports.string().min(1).nullable(),
-    failures: external_exports.array(driverFailure).default([]),
-    settledEvents: external_exports.array(external_exports.string()).default([]),
-    harnessConfigCurrent: harnessConfigCurrent.optional()
-  }),
-  external_exports.object({
-    status: external_exports.literal("stale"),
-    appliedVersion: external_exports.number().int().nonnegative(),
-    settledEvents: external_exports.array(external_exports.string()).default([]),
-    harnessConfigCurrent: harnessConfigCurrent.optional()
-  })
-]);
-var helloInput = external_exports.object({
-  lastAppliedVersion: external_exports.number().int().nonnegative().optional(),
-  lastAppliedHash: external_exports.string().optional(),
-  protocolVersion: external_exports.literal("v1"),
-  agentRuntimeVersion: external_exports.string(),
-  capabilities,
-  harnessConfigCurrent: harnessConfigCurrent.optional()
+var resourcesSchema = external_exports.object({
+  requests: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  limits: external_exports.record(external_exports.string(), external_exports.string()).optional()
 });
-var helloResult = external_exports.object({
-  version: external_exports.number().int().positive().optional(),
-  state: stateSlice.optional(),
-  events: external_exports.array(event)
+var envVarConfigMapSchema = external_exports.object({
+  name: external_exports.string(),
+  value: external_exports.string()
+});
+var skillSourceSeedSchema = external_exports.object({
+  name: external_exports.string(),
+  gitUrl: external_exports.string(),
+  path: skillSourcePathSchema.optional()
 });
+var templateCategorySchema = external_exports.enum(["harness"]).default("harness");
+var harnessFamilySchema = external_exports.enum([
+  "claude-code",
+  "codex",
+  "pi",
+  "bob"
+]);
+var templateSpecSchema = external_exports.object({
+  version: external_exports.string(),
+  image: external_exports.string(),
+  name: external_exports.string().optional(),
+  description: external_exports.string().optional(),
+  category: templateCategorySchema,
+  harness: harnessFamilySchema.optional(),
+  providers: external_exports.array(
+    external_exports.custom(
+      (v2) => typeof v2 === "string" && isProviderPresetType(v2),
+      "unknown provider type"
+    )
+  ).optional(),
+  tags: external_exports.array(external_exports.string()).optional(),
+  docsUrl: external_exports.string().optional(),
+  releaseNotesUrl: external_exports.string().optional(),
+  setupNote: external_exports.object({ title: external_exports.string(), body: external_exports.string() }).optional(),
+  experimental: external_exports.boolean().optional(),
+  mounts: external_exports.array(mountSchema).optional(),
+  init: external_exports.string().optional(),
+  env: external_exports.array(envVarConfigMapSchema).optional(),
+  resources: resourcesSchema.optional(),
+  imagePullPolicy: external_exports.string().optional(),
+  imagePullSecretRef: external_exports.string().optional(),
+  hibernationTimeout: external_exports.string().optional(),
+  storageSize: external_exports.string().optional(),
+  storageClass: external_exports.string().optional(),
+  runtimeClassName: external_exports.string().optional(),
+  nodeSelector: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  skillSources: external_exports.array(skillSourceSeedSchema).optional()
+}).passthrough();
 
-// ../agent-runtime-api/src/modules/kb-snapshot/caps.ts
-var PER_FILE_MAX_BYTES = 2 * 1024 * 1024;
-var TOTAL_MAX_BYTES = 200 * 1024 * 1024;
-var kbPublishCapsSchema = external_exports.object({
-  perFileMaxBytes: external_exports.number().int().positive(),
-  totalMaxBytes: external_exports.number().int().positive(),
-  maxFiles: external_exports.number().int().positive(),
-  maxWalkDepth: external_exports.number().int().positive()
+// ../api-server-api/src/modules/repos/schemas.ts
+var repoSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  url: external_exports.url(),
+  ref: external_exports.string().min(1).optional(),
+  description: external_exports.string().optional(),
+  compatibleTemplates: external_exports.array(external_exports.string()).default([])
 });
 
-// ../agent-runtime-api/src/modules/kb-publish/schemas.ts
-var kbPublishSyncInputSchema = external_exports.object({
-  roots: external_exports.array(external_exports.string().min(1)).max(16).nullable(),
-  caps: kbPublishCapsSchema,
-  flush: external_exports.boolean()
+// ../api-server-api/src/modules/invocations/schemas.ts
+var DEFAULT_INVOCATION_TTL_MS = 60 * 60 * 1e3;
+var MIN_INVOCATION_TTL_MS = 60 * 1e3;
+var MAX_INVOCATION_TTL_MS = 6 * 60 * 60 * 1e3;
+var spawnInvocationRequestSchema = external_exports.object({
+  image: external_exports.string().min(1).optional(),
+  templateId: external_exports.string().min(1).optional(),
+  connections: external_exports.array(external_exports.string().min(1)).optional(),
+  prompt: external_exports.string().min(1),
+  schema: external_exports.unknown(),
+  ttlMs: external_exports.number().int().min(MIN_INVOCATION_TTL_MS).max(MAX_INVOCATION_TTL_MS).optional(),
+  memory: external_exports.string().regex(/^\d+(Mi|Gi)$/, "memory must look like '512Mi' or '4Gi'").optional(),
+  cpu: external_exports.string().regex(/^\d+(\.\d+)?m?$/, "cpu must look like '2', '0.5' or '500m'").optional(),
+  experimentSpanId: external_exports.string().min(1).max(300).optional()
+}).refine((d2) => d2.image !== void 0 || d2.templateId !== void 0, {
+  message: "either image or templateId is required"
+});
+var spawnInvocationResponseSchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var invocationViewSchema = external_exports.object({
+  status: external_exports.enum(["running", "done", "failed"]),
+  result: external_exports.unknown(),
+  errorReason: external_exports.string().optional()
 });
 
 // ../api-server-api/src/modules/harness-config/schemas.ts
@@ -27558,6 +27853,13 @@ var agentSizeSchema = external_exports.object({
   cpu: cpuQuantitySchema.optional(),
   memory: memoryQuantitySchema.optional()
 });
+var storageQuantitySchema = external_exports.string().regex(/^\d+(Mi|Gi)$/, "storage must look like '512Mi' or '10Gi'").refine((v2) => toMemoryMi(v2) >= 1024, {
+  message: "storage must be at least 1Gi"
+});
+var agentRetryWorkspaceInputSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  kind: external_exports.enum(["workspace-seed", "workspace-command"])
+});
 var agentUpgradeInputSchema = idSchema.extend({
   expectedToImage: external_exports.string().min(1).optional()
 });
@@ -27565,10 +27867,13 @@ var agentDisconnectSlackInputSchema = idSchema.extend({
   slackChannelId: external_exports.string().min(1).optional()
 });
 var agentKindSchema = external_exports.enum(["knowledge-base", "experiment"]);
+var AGENT_ID_RE = /^agent-[0-9a-f]{16}$/;
+var agentNameSchema = external_exports.string().min(1).refine((n) => !AGENT_ID_RE.test(n), {
+  message: "agent name cannot have the shape of an agent ID"
+});
 var agentCreateInputSchema = external_exports.object({
-  name: external_exports.string().min(1).refine((n) => !n.startsWith("agent-"), {
-    message: "agent name cannot start with 'agent-' (reserved for IDs)"
-  }),
+  kbShareRoots: external_exports.array(external_exports.string().min(1)).min(1).max(20).optional(),
+  name: agentNameSchema,
   templateId: external_exports.string().optional(),
   image: external_exports.string().optional(),
   description: external_exports.string().optional(),
@@ -27581,9 +27886,18 @@ var agentCreateInputSchema = external_exports.object({
   }).optional(),
   egressPreset: egressPresetSchema.optional(),
   hibernationTimeoutMin: external_exports.number().int().min(0).optional(),
-  gitRepo: external_exports.object({ url: external_exports.url(), ref: external_exports.string().min(1).optional() }).optional(),
+  gitRepo: external_exports.object({
+    url: external_exports.url(),
+    ref: external_exports.string().min(1).optional(),
+    commit: external_exports.string().min(1).optional(),
+    branch: external_exports.string().min(1).optional(),
+    into: external_exports.enum(["work", "home"]).optional()
+  }).optional(),
   connectionIds: external_exports.array(external_exports.string()).optional(),
+  providerConnectionId: external_exports.string().min(1).optional(),
   size: agentSizeSchema.optional(),
+  vm: external_exports.boolean().optional(),
+  storage: storageQuantitySchema.optional(),
   sweepable: external_exports.boolean().optional(),
   lifetimeMs: external_exports.number().int().min(0).optional()
 }).refine((d2) => d2.templateId !== void 0 || d2.image !== void 0, {
@@ -27614,6 +27928,9 @@ var agentBindTelegramChatInputSchema = external_exports.object({
   agentId: external_exports.string().min(1),
   flowId: external_exports.string().min(1)
 });
+var agentPeekBindFlowInputSchema = external_exports.object({
+  flowId: external_exports.string().min(1)
+});
 var agentBindSlackChannelInputSchema = external_exports.object({
   agentId: external_exports.string().min(1),
   flowId: external_exports.string().min(1)
@@ -27635,12 +27952,15 @@ var scheduleListInputSchema = external_exports.object({
 var scheduleGetInputSchema = external_exports.object({
   id: external_exports.string().min(1)
 });
+var PRECHECK_MAX_LENGTH = 8e3;
+var precheckSchema = external_exports.string().trim().min(1).max(PRECHECK_MAX_LENGTH);
 var scheduleCreateCronInputSchema = external_exports.object({
   name: external_exports.string().min(1),
   agentId: external_exports.string().min(1),
   cron: external_exports.string().min(1),
   task: external_exports.string().min(1),
-  sessionMode: scheduleSessionModeSchema.optional()
+  sessionMode: scheduleSessionModeSchema.optional(),
+  precheck: precheckSchema.optional()
 });
 var scheduleCreateRRuleInputSchema = external_exports.object({
   name: external_exports.string().min(1),
@@ -27649,7 +27969,8 @@ var scheduleCreateRRuleInputSchema = external_exports.object({
   timezone: external_exports.string().min(1),
   quietHours: external_exports.array(quietWindowSchema).optional(),
   task: external_exports.string().min(1),
-  sessionMode: scheduleSessionModeSchema.optional()
+  sessionMode: scheduleSessionModeSchema.optional(),
+  precheck: precheckSchema.optional()
 });
 var scheduleUpdateRRuleInputSchema = external_exports.object({
   id: external_exports.string().min(1),
@@ -27658,7 +27979,8 @@ var scheduleUpdateRRuleInputSchema = external_exports.object({
   timezone: external_exports.string().min(1),
   quietHours: external_exports.array(quietWindowSchema),
   task: external_exports.string().min(1),
-  sessionMode: scheduleSessionModeSchema.optional()
+  sessionMode: scheduleSessionModeSchema.optional(),
+  precheck: precheckSchema.nullable().optional()
 });
 var scheduleDeleteInputSchema = external_exports.object({
   id: external_exports.string().min(1)
@@ -27680,6 +28002,7 @@ var scheduleSpecCronSchema = external_exports.object({
   type: external_exports.literal("cron"),
   cron: external_exports.string(),
   task: external_exports.string().optional(),
+  precheck: precheckSchema.optional(),
   enabled: external_exports.boolean(),
   sessionMode: scheduleSessionModeSchema.optional(),
   createdBy: scheduleCreatorSchema
@@ -27691,6 +28014,7 @@ var scheduleSpecRRuleSchema = external_exports.object({
   timezone: external_exports.string(),
   quietHours: external_exports.array(quietWindowConfigMapSchema).optional(),
   task: external_exports.string().optional(),
+  precheck: precheckSchema.optional(),
   enabled: external_exports.boolean(),
   sessionMode: scheduleSessionModeSchema.optional(),
   createdBy: scheduleCreatorSchema
@@ -27702,8 +28026,17 @@ var scheduleSpecSchema = external_exports.discriminatedUnion("type", [
 var scheduleStatusSchema = external_exports.object({
   lastRun: external_exports.string().optional(),
   nextRun: external_exports.string().optional(),
-  lastResult: external_exports.string().optional()
-});
+  lastResult: external_exports.string().optional(),
+  lastDeclinedAt: external_exports.string().optional(),
+  declinedCount: external_exports.number().int().nonnegative().optional(),
+  lastPrecheckError: external_exports.string().optional(),
+  precheckFailedCount: external_exports.number().int().nonnegative().optional()
+});
+var precheckVerdictSchema = external_exports.enum([
+  "allowed",
+  "declined",
+  "precheck-failed"
+]);
 
 // ../api-server-api/src/modules/experiments/schemas.ts
 var SCRIPT_CONTENT_MAX_BYTES = 256 * 1024;
@@ -27797,9 +28130,7 @@ var experimentIdInputSchema = external_exports.object({
   id: external_exports.string().min(1)
 });
 var experimentSandboxCreateInputSchema = external_exports.object({
-  name: external_exports.string().min(1).refine((n) => !n.startsWith("agent-"), {
-    message: "agent name cannot start with 'agent-' (reserved for IDs)"
-  }),
+  name: agentNameSchema,
   templateId: external_exports.string().optional(),
   image: external_exports.string().optional(),
   description: external_exports.string().optional(),
@@ -27810,21 +28141,160 @@ var experimentSandboxCreateInputSchema = external_exports.object({
   message: "Either templateId or image is required"
 });
 
-// ../api-server-api/src/modules/knowledge-bases/schemas.ts
-var knowledgeBaseTemplateIdSchema = external_exports.enum(["llm-wiki", "plain-wiki"]);
-var knowledgeBaseCreateInputSchema = external_exports.object({
-  name: external_exports.string().min(1).refine((n) => !n.startsWith("agent-"), {
-    message: "agent name cannot start with 'agent-' (reserved for IDs)"
-  }),
-  templateId: external_exports.string().optional(),
-  image: external_exports.string().optional(),
-  description: external_exports.string().optional(),
-  connectionIds: external_exports.array(external_exports.string()).optional(),
-  egressPreset: egressPresetSchema.optional(),
-  size: agentSizeSchema.optional(),
-  kbTemplateId: knowledgeBaseTemplateIdSchema.default("llm-wiki")
-}).refine((d2) => d2.templateId !== void 0 || d2.image !== void 0, {
-  message: "Either templateId or image is required"
+// ../api-server-api/src/modules/starter-kits/schemas.ts
+var starterKitIdSchema = external_exports.string().min(1).regex(/^[a-z0-9][a-z0-9-]*$/, "lowercase letters, digits and dashes");
+var starterKitCatalogNameSchema = starterKitIdSchema;
+var starterKitCategorySchema = external_exports.enum([
+  "knowledge",
+  "software",
+  "productivity",
+  "research"
+]);
+var starterKitConnectionRequirementSchema = external_exports.object({
+  accepts: external_exports.array(external_exports.string().min(1)).min(1),
+  required: external_exports.boolean().default(false),
+  note: external_exports.string().optional()
+});
+var starterKitChannelSchema = external_exports.object({
+  type: external_exports.enum(["slack", "telegram"]),
+  note: external_exports.string().optional()
+});
+var scheduleCommon = {
+  name: external_exports.string().min(1),
+  task: external_exports.string().min(1),
+  enabled: external_exports.boolean().default(true),
+  sessionMode: external_exports.enum(["continuous", "fresh"]).optional(),
+  precheck: precheckSchema.optional()
+};
+var starterKitCronScheduleSchema = external_exports.object({
+  ...scheduleCommon,
+  cron: external_exports.string().min(1)
+});
+var starterKitRRuleScheduleSchema = external_exports.object({
+  ...scheduleCommon,
+  rrule: external_exports.string().min(1),
+  timezone: external_exports.string().min(1)
+});
+var starterKitScheduleSchema = external_exports.union([
+  starterKitCronScheduleSchema,
+  starterKitRRuleScheduleSchema
+]);
+var starterKitExternalSkillSchema = external_exports.object({
+  source: external_exports.url(),
+  name: external_exports.string().min(1)
+});
+var starterKitBundledSkillsSchema = external_exports.object({
+  path: external_exports.string().min(1)
+});
+var resolvedSkillSchema = external_exports.object({
+  name: external_exports.string().min(1),
+  description: external_exports.string()
+});
+var starterKitEnvVarSchema = external_exports.object({
+  name: external_exports.string().min(1),
+  value: external_exports.string()
+});
+var providerListSchema = external_exports.array(
+  external_exports.custom(
+    (v2) => typeof v2 === "string" && isProviderPresetType(v2),
+    "unknown provider type"
+  )
+);
+var starterKitImageSchema = external_exports.object({
+  ref: external_exports.string().min(1),
+  harness: harnessFamilySchema.optional(),
+  providers: providerListSchema.optional()
+});
+var starterKitKnowledgeBaseSchema = external_exports.object({
+  shareRoots: external_exports.array(external_exports.string().min(1)).min(1).max(20)
+});
+var starterKitInstallSchema = external_exports.object({
+  command: external_exports.string().min(1)
+});
+var starterKitResourcesSchema = agentSizeSchema.extend({
+  storage: storageQuantitySchema.optional(),
+  note: external_exports.string().min(1).optional()
+});
+var harnessCommandNameSchema = external_exports.string().regex(/^[a-z0-9][a-z0-9:_-]*$/, "a command name without the leading slash");
+var starterKitSchema = external_exports.object({
+  schemaVersion: external_exports.literal("v1"),
+  id: starterKitIdSchema,
+  name: external_exports.string().min(1),
+  description: external_exports.string().min(1),
+  tagline: external_exports.string().min(1).optional(),
+  category: starterKitCategorySchema,
+  icon: external_exports.string().min(1).optional(),
+  video: external_exports.url().optional(),
+  docsUrl: external_exports.url().optional(),
+  image: starterKitImageSchema.optional(),
+  resources: starterKitResourcesSchema.optional(),
+  knowledgeBase: starterKitKnowledgeBaseSchema.optional(),
+  install: starterKitInstallSchema.optional(),
+  harnesses: external_exports.array(harnessFamilySchema).min(1).optional(),
+  providers: providerListSchema.min(1).optional(),
+  seed: external_exports.object({
+    url: external_exports.url().optional(),
+    self: external_exports.literal(true).optional(),
+    ref: external_exports.string().min(1).optional(),
+    commit: external_exports.string().regex(/^[0-9a-f]{40}$/i).optional(),
+    into: external_exports.enum(["work", "home"]).default("work")
+  }).meta({
+    oneOf: [{ required: ["url"] }, { required: ["self"] }]
+  }).refine((seed) => (seed.url ? 1 : 0) + (seed.self ? 1 : 0) === 1, {
+    message: "a seed names exactly one of `url` (another repository) or `self: true` (the repository this kit is read from)"
+  }).optional(),
+  onboarding: external_exports.union([
+    external_exports.literal(false),
+    external_exports.object({ prompt: external_exports.string().min(1) }),
+    external_exports.object({ command: harnessCommandNameSchema })
+  ]).optional(),
+  connections: external_exports.array(starterKitConnectionRequirementSchema).default([]),
+  channels: external_exports.array(starterKitChannelSchema).default([]),
+  schedules: external_exports.array(starterKitScheduleSchema).default([]),
+  skills: external_exports.array(starterKitExternalSkillSchema).default([]),
+  bundledSkills: starterKitBundledSkillsSchema.optional(),
+  env: external_exports.array(starterKitEnvVarSchema).default([]),
+  hibernationTimeoutMin: external_exports.number().int().min(0).optional()
+});
+var onboardingStepSchema = external_exports.object({
+  id: external_exports.string().min(1).max(64),
+  label: external_exports.string().min(1).max(120),
+  done: external_exports.boolean()
+});
+var starterKitCatalogEntrySchema = external_exports.object({
+  path: external_exports.string().min(1).default("."),
+  url: external_exports.url().optional(),
+  ref: external_exports.string().min(1).optional()
+});
+var starterKitCatalogSchema = external_exports.object({
+  kits: external_exports.array(starterKitCatalogEntrySchema)
+});
+var starterKitGetInputSchema = external_exports.object({
+  catalog: starterKitCatalogNameSchema,
+  id: starterKitIdSchema
+});
+var starterKitScheduleTimingSchema = external_exports.union([
+  external_exports.object({ cron: external_exports.string().min(1) }),
+  external_exports.object({ rrule: external_exports.string().min(1), timezone: external_exports.string().min(1) })
+]);
+var starterKitScheduleOverrideSchema = external_exports.object({
+  name: external_exports.string().min(1),
+  timing: starterKitScheduleTimingSchema.optional(),
+  sessionMode: external_exports.enum(["continuous", "fresh"]).optional(),
+  enabled: external_exports.boolean().optional(),
+  quietHours: external_exports.array(quietWindowSchema).optional(),
+  precheck: precheckSchema.nullable().optional()
+});
+var starterKitApplyInputSchema = external_exports.object({
+  catalog: starterKitCatalogNameSchema,
+  kitId: starterKitIdSchema,
+  name: agentNameSchema,
+  templateId: external_exports.string().min(1).optional(),
+  connectionIds: external_exports.array(external_exports.string().min(1)).default([]),
+  slackChannelId: external_exports.string().min(1).optional(),
+  skipSchedules: external_exports.array(external_exports.string().min(1)).default([]),
+  scheduleOverrides: external_exports.array(starterKitScheduleOverrideSchema).default([]),
+  skipSeed: external_exports.boolean().optional()
 });
 
 // ../api-server-api/src/modules/kb-shares/schemas.ts
@@ -27853,6 +28323,14 @@ var kbSharePublishStateSchema = external_exports.enum([
   "failed"
 ]);
 
+// ../api-server-api/src/modules/artifact-library/prompt.ts
+var ARTIFACT_PROMPT_TYPE = "artifact.prompt";
+var ARTIFACT_PROMPT_MAX_LENGTH = 16384;
+var artifactPromptSchema = external_exports.object({
+  type: external_exports.literal(ARTIFACT_PROMPT_TYPE),
+  prompt: external_exports.string().trim().min(1).max(ARTIFACT_PROMPT_MAX_LENGTH)
+});
+
 // ../api-server-api/src/modules/artifact-library/schemas.ts
 var artifactKindSchema = external_exports.enum([
   "html",
@@ -27870,6 +28348,7 @@ var artifactVisibilitySchema = external_exports.enum([
 var artifactCreateVisibilitySchema = external_exports.enum(["private", "public"]);
 var VIEWER_ALLOWLIST_MAX = 50;
 var viewerEmailSchema = external_exports.string().trim().toLowerCase().pipe(external_exports.email().max(254));
+var artifactVersionAuthorSchema = external_exports.enum(["user", "agent"]);
 var ARTIFACT_TITLE_MAX_LENGTH = 300;
 var titleSchema = external_exports.string().trim().min(1, "title is required").max(ARTIFACT_TITLE_MAX_LENGTH);
 var fileNameSchema = external_exports.string().trim().min(1).max(255);
@@ -27889,6 +28368,7 @@ var contentOrUploadRef = {
   content: external_exports.string().max(INLINE_CONTENT_MAX_BYTES).optional(),
   uploadRef: external_exports.string().min(1).max(1024).optional()
 };
+var sourcePathSchema = external_exports.string().trim().min(1).max(1024);
 var artifactCreateInputSchema = external_exports.object({
   title: titleSchema,
   ...contentOrUploadRef,
@@ -27897,7 +28377,10 @@ var artifactCreateInputSchema = external_exports.object({
   contentType: external_exports.string().trim().min(1).max(200).optional(),
   folderId: external_exports.string().min(1).optional(),
   visibility: artifactCreateVisibilitySchema.optional(),
-  expiresInHours: expiresInHoursSchema.nullish()
+  interactive: external_exports.boolean().optional(),
+  expiresInHours: expiresInHoursSchema.nullish(),
+  sourcePath: sourcePathSchema.optional(),
+  agentId: external_exports.string().min(1).optional()
 }).refine((v2) => v2.content == null !== (v2.uploadRef == null), {
   message: "provide exactly one of content or uploadRef",
   path: ["content"]
@@ -27908,7 +28391,9 @@ var artifactUpdateInputSchema = external_exports.object({
   folderId: external_exports.string().min(1).nullish(),
   ...contentOrUploadRef,
   fileName: fileNameSchema.optional(),
-  contentType: external_exports.string().trim().min(1).max(200).optional()
+  contentType: external_exports.string().trim().min(1).max(200).optional(),
+  sourcePath: sourcePathSchema.optional(),
+  expectedVersion: external_exports.number().int().positive().optional()
 }).refine((v2) => !(v2.content != null && v2.uploadRef != null), {
   message: "provide at most one of content or uploadRef",
   path: ["content"]
@@ -27956,7 +28441,9 @@ var artifactTouchListInputSchema = external_exports.object({
 var featureIdSchema = external_exports.enum([
   "advanced-connections",
   "vm-sandboxes",
-  "session-costs"
+  "session-costs",
+  "interactive-artifacts",
+  "agent-telemetry"
 ]);
 var featureSetFlagInputSchema = external_exports.object({
   feature: featureIdSchema,
@@ -31006,153 +31493,6 @@ function parseHHMM(s) {
   return h2 * 60 + mi;
 }
 
-// ../api-server-api/src/modules/connections/providers.ts
-var DEFAULT_ENV_PLACEHOLDER = "dummy-placeholder";
-var IBM_LITELLM_HOST = "ete-litellm.ai-models.vpc.res.ibm.com";
-var IBM_LITELLM_BASE_URL = `https://${IBM_LITELLM_HOST}`;
-function ibmLitellmEnvMappings() {
-  return [
-    { envName: "ANTHROPIC_AUTH_TOKEN", placeholder: "sk-dummy" },
-    { envName: "ANTHROPIC_BASE_URL", placeholder: IBM_LITELLM_BASE_URL },
-    { envName: "CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS", placeholder: "1" },
-    { envName: "OPENAI_PROXY_URL", placeholder: IBM_LITELLM_BASE_URL },
-    { envName: "OPENAI_PROXY_MODEL", placeholder: "aws/claude-opus-4-8" },
-    { envName: "OPENAI_PROXY_CONTEXT_WINDOW", placeholder: "200000" },
-    { envName: "OPENAI_PROXY_MAX_TOKENS", placeholder: "8192" },
-    { envName: "OPENAI_API_KEY", placeholder: DEFAULT_ENV_PLACEHOLDER },
-    { envName: "OPENAI_BASE_URL", placeholder: IBM_LITELLM_BASE_URL },
-    { envName: "OPENAI_MODEL", placeholder: "gpt-5.5" }
-  ];
-}
-function openaiEnvMappings() {
-  return [
-    { envName: "OPENAI_API_KEY", placeholder: DEFAULT_ENV_PLACEHOLDER },
-    { envName: "OPENAI_BASE_URL", placeholder: "https://api.openai.com/v1" }
-  ];
-}
-var BOB_HOST = "api.us-east.bob.ibm.com";
-var BOB_PLACEHOLDER = "dummy-placeholder";
-function bobEnvMappings(pins = {}) {
-  const out = [
-    { envName: "BOBSHELL_API_KEY", placeholder: BOB_PLACEHOLDER }
-  ];
-  const push = (envName, value) => {
-    const trimmed = value?.trim();
-    if (trimmed) out.push({ envName, placeholder: trimmed });
-  };
-  push("BOB_SHELL_MODEL", pins.model);
-  push("BOB_INSTANCE_ID", pins.agentId);
-  push("BOB_TEAM_ID", pins.teamId);
-  push("BOB_MAX_COINS", pins.maxCost);
-  push("BOB_CHAT_MODE", pins.chatMode);
-  return out;
-}
-var PROVIDERS = {
-  anthropic: {
-    id: "anthropic",
-    displayName: "Anthropic",
-    hostPattern: "api.anthropic.com",
-    modes: [
-      {
-        key: "oauth",
-        label: "OAuth Token",
-        templateId: "anthropic-oauth",
-        tokenPrefix: "sk-ant-oat",
-        defaultEnvMappings: [
-          {
-            envName: "CLAUDE_CODE_OAUTH_TOKEN",
-            placeholder: DEFAULT_ENV_PLACEHOLDER
-          }
-        ]
-      },
-      {
-        key: "api-key",
-        label: "API Key",
-        templateId: "anthropic",
-        tokenPrefix: "sk-ant-api",
-        isDefault: true,
-        defaultEnvMappings: [
-          {
-            envName: "ANTHROPIC_API_KEY",
-            placeholder: DEFAULT_ENV_PLACEHOLDER
-          }
-        ],
-        injection: { headerName: "x-api-key", valueFormat: "{value}" }
-      }
-    ]
-  },
-  "ibm-litellm": {
-    id: "ibm-litellm",
-    displayName: "IBM LiteLLM ETE Proxy",
-    hostPattern: IBM_LITELLM_HOST,
-    modes: [
-      {
-        key: "api-key",
-        label: "API Token",
-        templateId: "ibm-litellm",
-        defaultEnvMappings: ibmLitellmEnvMappings()
-      }
-    ]
-  },
-  openai: {
-    id: "openai",
-    displayName: "OpenAI",
-    hostPattern: "api.openai.com",
-    pathPattern: "/v1/*",
-    modes: [
-      {
-        key: "api-key",
-        label: "API Key",
-        templateId: "openai",
-        defaultEnvMappings: openaiEnvMappings()
-      }
-    ]
-  },
-  bob: {
-    id: "bob",
-    displayName: "Bob Shell",
-    hostPattern: BOB_HOST,
-    modes: [
-      {
-        key: "api-key",
-        label: "API Key",
-        templateId: "bob",
-        defaultEnvMappings: bobEnvMappings(),
-        injection: {
-          headerName: "Authorization",
-          valueFormat: "Apikey {value}"
-        },
-        extraInjections: [
-          { headerName: "X-Bobshell-Internal", queryParamName: "key" }
-        ]
-      }
-    ]
-  }
-};
-var PROVIDER_PRESET_TYPES = Object.keys(
-  PROVIDERS
-);
-var TEMPLATE_TO_PROVIDER = new Map(
-  PROVIDER_PRESET_TYPES.flatMap(
-    (type) => PROVIDERS[type].modes.map(
-      (mode) => [mode.templateId, type]
-    )
-  )
-);
-var PROVIDER_TEMPLATE_IDS = new Set(
-  TEMPLATE_TO_PROVIDER.keys()
-);
-function providerTypeForTemplateId(templateId) {
-  return TEMPLATE_TO_PROVIDER.get(templateId) ?? null;
-}
-function templateIdForProvider(type, value) {
-  const modes = PROVIDERS[type].modes;
-  const matched = modes.find(
-    (mode) => mode.tokenPrefix !== void 0 && value.startsWith(mode.tokenPrefix)
-  );
-  return (matched ?? modes.find((mode) => mode.isDefault) ?? modes[0]).templateId;
-}
-
 // ../api-server-api/src/modules/case-studies/constants.ts
 var CASE_STUDY_CONTENT_MAX_CHARS = 262144;
 var CASE_STUDY_SKILL_NAME = "agent-case-study";
@@ -31194,8 +31534,10 @@ var caseStudyInspectionFilterSchema = external_exports.object({
 var METRICS_MAX_SINCE_HOURS = 720;
 var METRICS_MAX_LIMIT = 1e3;
 var METRICS_DEFAULT_LIMIT = 100;
-var USAGE_SUMMARY_MAX_DAYS = 30;
-var USAGE_SUMMARY_DEFAULT_DAYS = 7;
+var AGENT_TELEMETRY_MAX_DAYS = 30;
+var AGENT_TELEMETRY_DEFAULT_DAYS = 7;
+var AGENT_TELEMETRY_MAX_LIMIT = 200;
+var AGENT_TELEMETRY_DEFAULT_LIMIT = 50;
 
 // ../api-server-api/src/modules/metrics/schemas.ts
 var metricsOverviewInputSchema = external_exports.object({
@@ -31204,9 +31546,22 @@ var metricsOverviewInputSchema = external_exports.object({
   sinceHours: external_exports.coerce.number().int().positive().max(METRICS_MAX_SINCE_HOURS).optional(),
   limit: external_exports.coerce.number().int().positive().max(METRICS_MAX_LIMIT).default(METRICS_DEFAULT_LIMIT)
 });
-var usageSummaryInputSchema = external_exports.object({
-  days: external_exports.number().int().min(1).max(USAGE_SUMMARY_MAX_DAYS).default(USAGE_SUMMARY_DEFAULT_DAYS).describe(
-    `Window length in days, counted back from now (default ${USAGE_SUMMARY_DEFAULT_DAYS}, max ${USAGE_SUMMARY_MAX_DAYS}).`
+var agentTelemetryShape = {
+  days: external_exports.number().int().min(1).max(AGENT_TELEMETRY_MAX_DAYS).default(AGENT_TELEMETRY_DEFAULT_DAYS).describe(
+    `Window length in days, counted back from now (default ${AGENT_TELEMETRY_DEFAULT_DAYS}, max ${AGENT_TELEMETRY_MAX_DAYS}).`
+  ),
+  sessionId: external_exports.string().min(1).optional().describe(
+    "Narrow to a single session, including any harness run that session spawned. Omit to cover every session in the window."
+  ),
+  limit: external_exports.number().int().positive().max(AGENT_TELEMETRY_MAX_LIMIT).default(AGENT_TELEMETRY_DEFAULT_LIMIT).describe(
+    `Most rows to return, newest first (default ${AGENT_TELEMETRY_DEFAULT_LIMIT}, max ${AGENT_TELEMETRY_MAX_LIMIT}). Bounds the row list only; a result's own totalsCover states what its totals span.`
+  )
+};
+var agentTelemetryInputSchema = external_exports.object(agentTelemetryShape);
+var agentMetricsInputSchema = external_exports.object({
+  ...agentTelemetryShape,
+  granularity: external_exports.enum(["summary", "session", "call"]).default("summary").describe(
+    "Detail level. 'summary': window totals and the per-model split. 'session': adds a row per session \u2014 calls, model time, tokens, cost, first/last activity. 'call': adds a row per LLM call \u2014 model, request latency, tokens, context size, cost."
   )
 });
 var metricsSpendInputSchema = external_exports.object({
@@ -31365,11 +31720,16 @@ var templateInput = external_exports.object({
   patternHint: external_exports.string().optional(),
   enumValues: external_exports.array(external_exports.string()).optional()
 });
+var connectionFamilyView = external_exports.object({
+  id: external_exports.string(),
+  title: external_exports.string()
+});
 var connectionTemplateView = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
   category: connectionCategory,
   isCustom: external_exports.boolean(),
+  family: connectionFamilyView.optional(),
   description: external_exports.string().optional(),
   iconSlug: external_exports.string().optional(),
   authKind,
@@ -31521,6 +31881,16 @@ var SessionMode = /* @__PURE__ */ ((SessionMode2) => {
 })(SessionMode || {});
 var sessionModeSchema = external_exports.enum(SessionMode);
 
+// ../api-server-api/src/modules/attention/schemas.ts
+var attentionDismissInputSchema = external_exports.object({
+  items: external_exports.array(
+    external_exports.object({
+      kind: external_exports.enum(["session", "approval"]),
+      id: external_exports.string().trim().min(1).max(512)
+    })
+  ).min(1).max(200)
+});
+
 // ../api-server-api/src/modules/terminal/protocol.ts
 var OP_INPUT = 0;
 var OP_OUTPUT = 1;
@@ -31680,6 +32050,11 @@ var platformTurnEndedNotificationSchema = external_exports.object({
   method: external_exports.literal("platform/turnEnded"),
   params: platformTurnEndedParamsSchema
 });
+var platformFrameMetaSchema = external_exports.object({
+  at: external_exports.string().datetime({ offset: true }).optional(),
+  replayFor: external_exports.string().min(1).optional(),
+  telemetryPromptId: external_exports.string().min(1).optional()
+});
 var platformClippedReplayMetaSchema = external_exports.object({
   older: external_exports.string().min(1).optional()
 });
@@ -31734,8 +32109,21 @@ var platformRunResultSchema = external_exports.object({
 var platformRunResultResponseSchema = external_exports.discriminatedUnion("status", [
   external_exports.object({ status: external_exports.literal("done"), result: platformRunResultSchema }),
   external_exports.object({ status: external_exports.literal("pending") }),
+  external_exports.object({ status: external_exports.literal("interrupted") }),
   external_exports.object({ status: external_exports.literal("none") })
 ]);
+var platformRunStartsMetaSchema = external_exports.array(
+  external_exports.string().datetime({ offset: true })
+);
+var platformRunStartedParamsSchema = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  at: external_exports.string().datetime({ offset: true })
+});
+var platformRunStartedNotificationSchema = external_exports.object({
+  jsonrpc: external_exports.literal("2.0"),
+  method: external_exports.literal("platform/runStarted"),
+  params: platformRunStartedParamsSchema
+});
 var platformPromptStartedParamsSchema = external_exports.object({
   sessionId: external_exports.string().min(1),
   promptId: external_exports.string().min(1)
@@ -31809,7 +32197,8 @@ var termsLatestAcceptanceSchema = external_exports.object({
 var entryPointChoiceSchema = external_exports.enum([
   "sandbox",
   "experiment",
-  "knowledge-base"
+  "knowledge-base",
+  "starter-kit"
 ]);
 var entryPointChosenInputSchema = external_exports.object({
   choice: entryPointChoiceSchema
@@ -31889,9 +32278,23 @@ var slackFireCommandInputSchema = external_exports.object({
   channelId: external_exports.string().min(1)
 }).strict();
 var slackFireCommandResultSchema = external_exports.object({ ack: external_exports.string() }).strict();
+var slackConnectWorkspaceInputSchema = external_exports.object({
+  teamId: external_exports.string().min(1),
+  teamName: external_exports.string().optional(),
+  botToken: external_exports.string().min(1),
+  channels: external_exports.array(
+    external_exports.object({
+      id: external_exports.string().min(1),
+      name: external_exports.string().min(1),
+      botIsMember: external_exports.boolean()
+    }).strict()
+  )
+}).strict();
+var slackConnectWorkspaceResultSchema = external_exports.object({ ok: external_exports.literal(true), secretPath: external_exports.string() }).strict();
 var slackOutboundRecordSchema = external_exports.discriminatedUnion("kind", [
   external_exports.object({
     kind: external_exports.literal("message"),
+    teamId: external_exports.string(),
     channel: external_exports.string(),
     text: external_exports.string(),
     threadTs: external_exports.string().optional(),
@@ -31899,6 +32302,7 @@ var slackOutboundRecordSchema = external_exports.discriminatedUnion("kind", [
   }).strict(),
   external_exports.object({
     kind: external_exports.literal("ephemeral"),
+    teamId: external_exports.string(),
     channel: external_exports.string(),
     user: external_exports.string(),
     text: external_exports.string(),
@@ -31906,18 +32310,21 @@ var slackOutboundRecordSchema = external_exports.discriminatedUnion("kind", [
   }).strict(),
   external_exports.object({
     kind: external_exports.literal("reaction"),
+    teamId: external_exports.string(),
     channel: external_exports.string(),
     ts: external_exports.string(),
     name: external_exports.string()
   }).strict(),
   external_exports.object({
     kind: external_exports.literal("upload"),
+    teamId: external_exports.string(),
     channelId: external_exports.string(),
     filename: external_exports.string(),
     threadTs: external_exports.string().optional()
   }).strict(),
   external_exports.object({
     kind: external_exports.literal("stream_start"),
+    teamId: external_exports.string(),
     channel: external_exports.string(),
     threadTs: external_exports.string(),
     ts: external_exports.string(),
@@ -31927,18 +32334,21 @@ var slackOutboundRecordSchema = external_exports.discriminatedUnion("kind", [
   }).strict(),
   external_exports.object({
     kind: external_exports.literal("stream_append"),
+    teamId: external_exports.string(),
     channel: external_exports.string(),
     ts: external_exports.string(),
     text: external_exports.string()
   }).strict(),
   external_exports.object({
     kind: external_exports.literal("stream_stop"),
+    teamId: external_exports.string(),
     channel: external_exports.string(),
     ts: external_exports.string(),
     text: external_exports.string().optional()
   }).strict(),
   external_exports.object({
     kind: external_exports.literal("status"),
+    teamId: external_exports.string(),
     channel: external_exports.string(),
     threadTs: external_exports.string(),
     status: external_exports.string()
@@ -32010,6 +32420,62 @@ var kbPublishCompleteInputSchema = external_exports.object({
   })
 });
 
+// ../api-server-api/src/modules/telemetry/constants.ts
+var TELEMETRY_MAX_SINCE_HOURS = 720;
+var TELEMETRY_DEFAULT_SINCE_HOURS = 24;
+var TELEMETRY_MAX_TURNS = 500;
+var TELEMETRY_DEFAULT_TURNS = 100;
+var TELEMETRY_MAX_SPANS = 2e3;
+var TELEMETRY_DEFAULT_SPANS = 1e3;
+var TELEMETRY_MAX_LOGS = 2e3;
+var TELEMETRY_DEFAULT_LOGS = 1e3;
+var TELEMETRY_MAX_LOG_ROWS = 1e3;
+var TELEMETRY_DEFAULT_LOG_ROWS = 200;
+var TELEMETRY_MAX_TRACE_HOURS = 6;
+
+// ../api-server-api/src/modules/telemetry/schemas.ts
+var traceId = external_exports.string().min(1).max(64).regex(/^[0-9a-fA-F]+$/, { message: "traceId must be hexadecimal" });
+var sinceHours = external_exports.coerce.number().int().positive().max(TELEMETRY_MAX_SINCE_HOURS).default(TELEMETRY_DEFAULT_SINCE_HOURS);
+var telemetryTurnsInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1),
+  sessionId: external_exports.string().min(1),
+  sinceHours,
+  limit: external_exports.coerce.number().int().positive().max(TELEMETRY_MAX_TURNS).default(TELEMETRY_DEFAULT_TURNS),
+  spanLimit: external_exports.coerce.number().int().positive().max(TELEMETRY_MAX_SPANS).default(TELEMETRY_DEFAULT_SPANS),
+  logLimit: external_exports.coerce.number().int().positive().max(TELEMETRY_MAX_LOGS).default(TELEMETRY_DEFAULT_LOGS)
+});
+var telemetryTurnInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1),
+  sessionId: external_exports.string().min(1),
+  promptId: external_exports.string().min(1).max(200).optional(),
+  from: external_exports.string().datetime(),
+  to: external_exports.string().datetime(),
+  spanLimit: external_exports.coerce.number().int().positive().max(TELEMETRY_MAX_SPANS).default(TELEMETRY_DEFAULT_SPANS),
+  logLimit: external_exports.coerce.number().int().positive().max(TELEMETRY_MAX_LOGS).default(TELEMETRY_DEFAULT_LOGS)
+}).refine(
+  (q2) => Date.parse(q2.to) - Date.parse(q2.from) <= TELEMETRY_MAX_TRACE_HOURS * 36e5,
+  {
+    message: `a turn window may not exceed ${TELEMETRY_MAX_TRACE_HOURS} hours`,
+    path: ["to"]
+  }
+);
+var telemetryLogsInputSchema = external_exports.object({
+  agentId: external_exports.string().min(1).optional(),
+  sessionId: external_exports.string().min(1).optional(),
+  traceId: traceId.optional(),
+  event: external_exports.string().min(1).max(200).optional(),
+  contains: external_exports.string().min(1).max(200).optional(),
+  sinceHours,
+  limit: external_exports.coerce.number().int().positive().max(TELEMETRY_MAX_LOG_ROWS).default(TELEMETRY_DEFAULT_LOG_ROWS)
+});
+var telemetryExportSignalSchema = external_exports.enum(["spans", "logs"]);
+var telemetryExportQuerySchema = external_exports.object({
+  agentId: external_exports.string().min(1).optional(),
+  sessionId: external_exports.string().min(1).optional(),
+  signal: telemetryExportSignalSchema.default("logs"),
+  sinceHours
+});
+
 // src/result.ts
 var ok2 = (value) => ({ ok: true, value });
 var err2 = (error51) => ({ ok: false, error: error51 });
@@ -32042,6 +32508,129 @@ async function trpcCall(fn) {
   }
 }
 
+// src/modules/connection/services/connection-service.ts
+function createConnectionService(deps) {
+  const readIds = async (agentId) => {
+    const res = await deps.trpc.connections.getAgentConnections.query({
+      agentId
+    });
+    return res.connections.map((c2) => c2.connectionId);
+  };
+  return {
+    async list() {
+      return trpcCall(() => deps.trpc.connections.list.query());
+    },
+    async listTemplates() {
+      return trpcCall(() => deps.trpc.connections.listTemplates.query());
+    },
+    async createConnection(input) {
+      return trpcCall(() => deps.trpc.connections.create.mutate(input));
+    },
+    async update(id, value) {
+      return trpcCall(async () => {
+        await deps.trpc.connections.update.mutate({ id, value });
+      });
+    },
+    async startOAuth(connectionId) {
+      return trpcCall(
+        () => deps.trpc.connections.startOAuth.mutate({ connectionId })
+      );
+    },
+    async discoverMcp(url2) {
+      return trpcCall(() => deps.trpc.connections.discoverMcp.mutate({ url: url2 }));
+    },
+    async probeClusterCa(host) {
+      return trpcCall(
+        () => deps.trpc.connections.probeClusterCa.mutate({ host })
+      );
+    },
+    async getConnection(id) {
+      return trpcCall(() => deps.trpc.connections.get.query({ id }));
+    },
+    async agentConnectionIds(agentId) {
+      return trpcCall(() => readIds(agentId));
+    },
+    async grant(agentId, add) {
+      return trpcCall(async () => {
+        const current = await readIds(agentId);
+        const next = Array.from(/* @__PURE__ */ new Set([...current, ...add]));
+        await deps.trpc.connections.setAgentConnections.mutate({
+          agentId,
+          connectionIds: next
+        });
+        return next;
+      });
+    },
+    async revoke(agentId, remove) {
+      return trpcCall(async () => {
+        const drop = new Set(remove);
+        const current = await readIds(agentId);
+        const next = current.filter((id) => !drop.has(id));
+        await deps.trpc.connections.setAgentConnections.mutate({
+          agentId,
+          connectionIds: next
+        });
+        return next;
+      });
+    },
+    async disconnect(id) {
+      return trpcCall(async () => {
+        await deps.trpc.connections.delete.mutate({ id });
+      });
+    }
+  };
+}
+
+// src/modules/connection/domain/config-inputs.ts
+function configInputsOf(template) {
+  return template.inputs.filter((i) => i.configInput);
+}
+function validateConfigInputValue(input, value) {
+  const trimmed = value.trim();
+  if (trimmed === "") return void 0;
+  const label = input.label ?? input.name;
+  if (input.enumValues && !input.enumValues.includes(trimmed)) {
+    const opts = input.enumValues.map((v2) => `\`${v2}\``).join(", ");
+    return `${label}: must be one of ${opts}`;
+  }
+  if (input.pattern && !new RegExp(`^(?:${input.pattern})$`).test(trimmed)) {
+    const expected = input.patternHint ?? `value matching ${input.pattern}`;
+    return `${label}: expected ${expected}`;
+  }
+  return void 0;
+}
+function resolveConfigInputFlags(template, rawFlags) {
+  const byName2 = new Map(configInputsOf(template).map((i) => [i.name, i]));
+  const out = {};
+  for (const raw of rawFlags) {
+    const eq = raw.indexOf("=");
+    if (eq < 0) return err2({ kind: "missing-equals", input: raw });
+    const key = raw.slice(0, eq);
+    const value = raw.slice(eq + 1).trim();
+    const input = byName2.get(key);
+    if (!input) {
+      return err2({ kind: "unknown-key", key, validKeys: [...byName2.keys()] });
+    }
+    if (value === "") {
+      delete out[key];
+      continue;
+    }
+    const message = validateConfigInputValue(input, value);
+    if (message) return err2({ kind: "invalid-value", key, message });
+    out[key] = value;
+  }
+  return ok2(out);
+}
+
+// src/modules/connection/domain/connection-ref.ts
+var CONNECTION_ID_PREFIX = "conn-";
+function resolveConnectionRef(connections, ref) {
+  if (ref.startsWith(CONNECTION_ID_PREFIX)) {
+    return connections.find((c2) => c2.id === ref) ?? null;
+  }
+  return connections.find((c2) => c2.name === ref) ?? null;
+}
+
 // src/modules/shared/format-zod-error.ts
 function formatZodError(err3) {
   return err3.issues.map((issue2) => {
@@ -32276,7 +32865,6 @@ function printTrpcError(e2, host) {
 }
 
 // src/modules/agent/commands/create-helpers.ts
-var RESERVED_AGENT_PREFIX = "agent-";
 function parseEnvFlag(values) {
   const map3 = /* @__PURE__ */ new Map();
   const duplicates = /* @__PURE__ */ new Set();
@@ -32296,7 +32884,7 @@ function parseEnvFlag(values) {
 }
 function validateAgentName(name) {
   if (name.length === 0) return err2("empty");
-  if (name.startsWith(RESERVED_AGENT_PREFIX)) return err2("reserved-prefix");
+  if (AGENT_ID_RE.test(name)) return err2("id-shape");
   return ok2(void 0);
 }
 
@@ -32319,13 +32907,19 @@ var EXIT_SIGINT = 130;
 // src/modules/agent/commands/create.ts
 var DEFAULT_TIMEOUT_SECONDS = 120;
 function buildCreateCommand(deps) {
-  return new Command("create").description("Create a new Agent from a template on the active host").argument("<name>", "Agent name (1+ chars, must not start with `agent-`)").option(
+  return new Command("create").description("Create a new Agent from a template on the active host").argument(
+    "<name>",
+    "Agent name (1+ chars; not `agent-` plus 16 hex characters, the shape of an ID)"
+  ).option(
     "--server <url>",
     "override the configured server URL for this call"
   ).option(
     "--template <id>",
     "template id (required; see `dam template list`)"
   ).option("--description <text>", "free-form description").option(
+    "--provider <id-or-name>",
+    "model-provider connection id or unique name (required; see `dam connection list`)"
+  ).option(
     "--env <KEY=VAL>",
     "env var, repeatable",
     (val, prev) => [...prev, val],
@@ -32338,9 +32932,9 @@ function buildCreateCommand(deps) {
     [
       "",
       "Examples:",
-      "  dam agent create my-agent --template claude-code",
-      "  dam agent create my-agent --template claude-code --wait",
-      '  dam agent create my-agent --template pi-agent --env OPENAI_API_KEY=sk-\u2026 --description "Coding helper"',
+      "  dam agent create my-agent --template claude-code --provider conn-123",
+      '  dam agent create my-agent --template claude-code --provider "My provider" --wait',
+      '  dam agent create my-agent --template pi-agent --provider conn-123 --description "Coding helper"',
       ""
     ].join("\n")
   ).action(
@@ -32352,9 +32946,9 @@ function buildCreateCommand(deps) {
 async function runCreate(name, opts, deps) {
   const nameCheck = validateAgentName(name);
   if (!nameCheck.ok) {
-    if (nameCheck.error === "reserved-prefix") {
+    if (nameCheck.error === "id-shape") {
       process.stderr.write(
-        `error: agent name \`${name}\` cannot start with \`agent-\` (reserved for IDs)
+        `error: agent name \`${name}\` has the shape of an agent ID (\`agent-\` and 16 hex characters)
 `
       );
     } else {
@@ -32369,6 +32963,12 @@ async function runCreate(name, opts, deps) {
     process.exit(EXIT_INVALID_INPUT);
   }
   const template = opts.template;
+  if (!opts.provider) {
+    process.stderr.write(
+      "error: `--provider <id-or-name>` is required; run `dam connection list` to choose a model provider, or `dam agent create-interactive` to add one\n"
+    );
+    process.exit(EXIT_INVALID_INPUT);
+  }
   const envResult = parseEnvFlag(opts.env ?? []);
   if (!envResult.ok) {
     if (envResult.error.kind === "missing-equals") {
@@ -32411,8 +33011,8 @@ async function runCreate(name, opts, deps) {
     printServiceError(tmplResult.error, host);
     process.exit(EXIT_RUNTIME_FAILURE);
   }
-  const match = tmplResult.value.find((t) => t.id === template);
-  if (!match) {
+  const selectedTemplate = tmplResult.value.find((t) => t.id === template);
+  if (!selectedTemplate) {
     process.stderr.write(
       `error: unknown template \`${template}\`; available: ${tmplResult.value.map((t) => t.id).join(", ") || "(none)"}
 `
@@ -32420,11 +33020,36 @@ async function runCreate(name, opts, deps) {
     process.exit(EXIT_INVALID_INPUT);
   }
   const trpc = deps.createTrpcClient(host);
+  let providerConnectionId = opts.provider;
+  if (!providerConnectionId.startsWith(CONNECTION_ID_PREFIX)) {
+    const connections = await trpcCall(() => trpc.connections.list.query());
+    if (!connections.ok) {
+      printServiceError(connections.error, host);
+      process.stderr.write(
+        "hint: provider name lookup requires credentials:read; pass --provider <connection-id> to create with agents:manage alone\n"
+      );
+      process.exit(EXIT_RUNTIME_FAILURE);
+    }
+    const matches = connections.value.filter(
+      (connection2) => PROVIDER_TEMPLATE_IDS.has(connection2.templateId) && connection2.name === opts.provider
+    );
+    if (matches.length !== 1) {
+      process.stderr.write(
+        matches.length === 0 ? `error: no model-provider connection matches '${opts.provider}'; run \`dam connection list\` to choose a provider, or \`dam agent create-interactive\` to add one
+` : `error: multiple model-provider connections are named '${opts.provider}'; pass a connection id from \`dam connection list\`
+`
+      );
+      process.exit(EXIT_INVALID_INPUT);
+    }
+    providerConnectionId = matches[0].id;
+  }
   const createInput = await parseOrExit(
     agentCreateInputSchema,
     {
       name,
       templateId: template,
+      connectionIds: [providerConnectionId],
+      providerConnectionId,
       description: opts.description,
       env: env.length > 0 ? env : void 0
     },
@@ -32434,6 +33059,13 @@ async function runCreate(name, opts, deps) {
   try {
     agent = await trpc.agents.create.mutate(createInput);
   } catch (e2) {
+    if (e2?.data?.code === "BAD_REQUEST") {
+      process.stderr.write(
+        `error: failed to create agent: ${errorReason(e2)}
+`
+      );
+      process.exit(EXIT_INVALID_INPUT);
+    }
     if (e2?.data?.code === "NOT_FOUND") {
       process.stderr.write(
         `error: template \`${template}\` was deleted while creating; retry
@@ -33460,158 +34092,44 @@ ${a}
 };
 var jt = `${e("gray", $)}  `;
 var Re = (t) => new ht({ validate: t.validate, placeholder: t.placeholder, defaultValue: t.defaultValue, initialValue: t.initialValue, output: t.output, signal: t.signal, input: t.input, render() {
-  const r = t?.withGuide ?? h.withGuide, s = `${`${r ? `${e("gray", $)}
-` : ""}${M(this.state)}  `}${t.message}
-`, i = t.placeholder ? e("inverse", t.placeholder[0]) + e("dim", t.placeholder.slice(1)) : e(["inverse", "hidden"], "_"), u = this.userInput ? this.userInputWithCursor : i, n = this.value ?? "";
-  switch (this.state) {
-    case "error": {
-      const o = this.error ? `  ${e("yellow", this.error)}` : "", c2 = r ? `${e("yellow", $)}  ` : "", a = r ? e("yellow", E2) : "";
-      return `${s.trim()}
-${c2}${u}
-${a}${o}
-`;
-    }
-    case "submit": {
-      const o = n ? `  ${e("dim", n)}` : "", c2 = r ? e("gray", $) : "";
-      return `${s}${c2}${o}`;
-    }
-    case "cancel": {
-      const o = n ? `  ${e(["strikethrough", "dim"], n)}` : "", c2 = r ? e("gray", $) : "";
-      return `${s}${c2}${o}${n.trim() ? `
-${c2}` : ""}`;
-    }
-    default: {
-      const o = r ? `${e("cyan", $)}  ` : "", c2 = r ? e("cyan", E2) : "";
-      return `${s}${o}${u}
-${c2}
-`;
-    }
-  }
-} }).prompt();
-
-// src/modules/shared/prompt-secret.ts
-function promptSecret(message) {
-  return Ce({
-    message,
-    validate(v2) {
-      if (!v2 || v2.trim() === "") return "Required";
-      return void 0;
-    }
-  });
-}
-
-// src/modules/connection/services/connection-service.ts
-function createConnectionService(deps) {
-  const readIds = async (agentId) => {
-    const res = await deps.trpc.connections.getAgentConnections.query({
-      agentId
-    });
-    return res.connections.map((c2) => c2.connectionId);
-  };
-  return {
-    async list() {
-      return trpcCall(() => deps.trpc.connections.list.query());
-    },
-    async listTemplates() {
-      return trpcCall(() => deps.trpc.connections.listTemplates.query());
-    },
-    async createConnection(input) {
-      return trpcCall(() => deps.trpc.connections.create.mutate(input));
-    },
-    async update(id, value) {
-      return trpcCall(async () => {
-        await deps.trpc.connections.update.mutate({ id, value });
-      });
-    },
-    async startOAuth(connectionId) {
-      return trpcCall(
-        () => deps.trpc.connections.startOAuth.mutate({ connectionId })
-      );
-    },
-    async discoverMcp(url2) {
-      return trpcCall(() => deps.trpc.connections.discoverMcp.mutate({ url: url2 }));
-    },
-    async probeClusterCa(host) {
-      return trpcCall(
-        () => deps.trpc.connections.probeClusterCa.mutate({ host })
-      );
-    },
-    async getConnection(id) {
-      return trpcCall(() => deps.trpc.connections.get.query({ id }));
-    },
-    async agentConnectionIds(agentId) {
-      return trpcCall(() => readIds(agentId));
-    },
-    async grant(agentId, add) {
-      return trpcCall(async () => {
-        const current = await readIds(agentId);
-        const next = Array.from(/* @__PURE__ */ new Set([...current, ...add]));
-        await deps.trpc.connections.setAgentConnections.mutate({
-          agentId,
-          connectionIds: next
-        });
-        return next;
-      });
-    },
-    async revoke(agentId, remove) {
-      return trpcCall(async () => {
-        const drop = new Set(remove);
-        const current = await readIds(agentId);
-        const next = current.filter((id) => !drop.has(id));
-        await deps.trpc.connections.setAgentConnections.mutate({
-          agentId,
-          connectionIds: next
-        });
-        return next;
-      });
-    },
-    async disconnect(id) {
-      return trpcCall(async () => {
-        await deps.trpc.connections.delete.mutate({ id });
-      });
+  const r = t?.withGuide ?? h.withGuide, s = `${`${r ? `${e("gray", $)}
+` : ""}${M(this.state)}  `}${t.message}
+`, i = t.placeholder ? e("inverse", t.placeholder[0]) + e("dim", t.placeholder.slice(1)) : e(["inverse", "hidden"], "_"), u = this.userInput ? this.userInputWithCursor : i, n = this.value ?? "";
+  switch (this.state) {
+    case "error": {
+      const o = this.error ? `  ${e("yellow", this.error)}` : "", c2 = r ? `${e("yellow", $)}  ` : "", a = r ? e("yellow", E2) : "";
+      return `${s.trim()}
+${c2}${u}
+${a}${o}
+`;
     }
-  };
-}
-
-// src/modules/connection/domain/config-inputs.ts
-function configInputsOf(template) {
-  return template.inputs.filter((i) => i.configInput);
-}
-function validateConfigInputValue(input, value) {
-  const trimmed = value.trim();
-  if (trimmed === "") return void 0;
-  const label = input.label ?? input.name;
-  if (input.enumValues && !input.enumValues.includes(trimmed)) {
-    const opts = input.enumValues.map((v2) => `\`${v2}\``).join(", ");
-    return `${label}: must be one of ${opts}`;
-  }
-  if (input.pattern && !new RegExp(`^(?:${input.pattern})$`).test(trimmed)) {
-    const expected = input.patternHint ?? `value matching ${input.pattern}`;
-    return `${label}: expected ${expected}`;
-  }
-  return void 0;
-}
-function resolveConfigInputFlags(template, rawFlags) {
-  const byName2 = new Map(configInputsOf(template).map((i) => [i.name, i]));
-  const out = {};
-  for (const raw of rawFlags) {
-    const eq = raw.indexOf("=");
-    if (eq < 0) return err2({ kind: "missing-equals", input: raw });
-    const key = raw.slice(0, eq);
-    const value = raw.slice(eq + 1).trim();
-    const input = byName2.get(key);
-    if (!input) {
-      return err2({ kind: "unknown-key", key, validKeys: [...byName2.keys()] });
+    case "submit": {
+      const o = n ? `  ${e("dim", n)}` : "", c2 = r ? e("gray", $) : "";
+      return `${s}${c2}${o}`;
     }
-    if (value === "") {
-      delete out[key];
-      continue;
+    case "cancel": {
+      const o = n ? `  ${e(["strikethrough", "dim"], n)}` : "", c2 = r ? e("gray", $) : "";
+      return `${s}${c2}${o}${n.trim() ? `
+${c2}` : ""}`;
+    }
+    default: {
+      const o = r ? `${e("cyan", $)}  ` : "", c2 = r ? e("cyan", E2) : "";
+      return `${s}${o}${u}
+${c2}
+`;
     }
-    const message = validateConfigInputValue(input, value);
-    if (message) return err2({ kind: "invalid-value", key, message });
-    out[key] = value;
   }
-  return ok2(out);
+} }).prompt();
+
+// src/modules/shared/prompt-secret.ts
+function promptSecret(message) {
+  return Ce({
+    message,
+    validate(v2) {
+      if (!v2 || v2.trim() === "") return "Required";
+      return void 0;
+    }
+  });
 }
 
 // src/modules/agent/commands/create-interactive.ts
@@ -33700,8 +34218,8 @@ async function runCreate2(opts, deps) {
     validate(value) {
       const check2 = validateAgentName(value ?? "");
       if (check2.ok) return void 0;
-      if (check2.error === "reserved-prefix") {
-        return "name cannot start with `agent-` (reserved for IDs)";
+      if (check2.error === "id-shape") {
+        return "name cannot have the shape of an agent ID (`agent-` and 16 hex characters)";
       }
       return "name cannot be empty";
     }
@@ -34146,11 +34664,10 @@ function errorReason2(e2) {
 }
 
 // src/modules/agent/services/agent-resolver.ts
-var AGENT_ID_PREFIX = "agent-";
 function createAgentResolver(deps) {
   return {
     async resolve(ref) {
-      if (ref.startsWith(AGENT_ID_PREFIX)) {
+      if (AGENT_ID_RE.test(ref)) {
         const got = await deps.agentService.get(ref);
         if (!got.ok) return got;
         if (got.value === null)
@@ -34254,7 +34771,7 @@ function buildDeleteCommand(deps) {
     "emit { deleted, id, name } or { cancelled: true } as JSON"
   ).addHelpText(
     "after",
-    "\nExamples:\n  dam agent delete my-agent\n  dam agent delete agent-abc123 --yes\n"
+    "\nExamples:\n  dam agent delete my-agent\n  dam agent delete agent-3f9c2b7e41d08a65 --yes\n"
   ).action(
     async (ref, opts) => {
       await runDelete(ref, opts, deps);
@@ -34336,7 +34853,7 @@ function buildGetCommand(deps) {
     "override the configured server URL for this call"
   ).option("--json", "emit raw JSON instead of the default vertical layout").addHelpText(
     "after",
-    "\nExamples:\n  dam agent get my-agent\n  dam agent get agent-abc123 --json\n"
+    "\nExamples:\n  dam agent get my-agent\n  dam agent get agent-3f9c2b7e41d08a65 --json\n"
   ).action(async (ref, opts) => {
     const host = await resolveActiveHost(deps, {
       flag: opts.server ? { server: opts.server } : void 0,
@@ -34449,7 +34966,7 @@ function buildListCommand(deps) {
     }
     if (result.value.length === 0) {
       process.stderr.write(
-        "No agents.\nhint: create one with `dam agent create <name> --template <id>`\n"
+        "No agents.\nhint: create one with `dam agent create <name> --template <id> --provider <connection-id>`\n"
       );
       process.exit(EXIT_SUCCESS);
     }
@@ -35473,126 +35990,7 @@ import {
 } from "fs/promises";
 import { dirname } from "path";
 
-// ../../node_modules/.pnpm/smol-toml@1.6.1/node_modules/smol-toml/dist/error.js
-function getLineColFromPtr(string4, ptr) {
-  let lines = string4.slice(0, ptr).split(/\r\n|\n|\r/g);
-  return [lines.length, lines.pop().length + 1];
-}
-function makeCodeBlock(string4, line, column) {
-  let lines = string4.split(/\r\n|\n|\r/g);
-  let codeblock = "";
-  let numberLen = (Math.log10(line + 1) | 0) + 1;
-  for (let i = line - 1; i <= line + 1; i++) {
-    let l = lines[i - 1];
-    if (!l)
-      continue;
-    codeblock += i.toString().padEnd(numberLen, " ");
-    codeblock += ":  ";
-    codeblock += l;
-    codeblock += "\n";
-    if (i === line) {
-      codeblock += " ".repeat(numberLen + column + 2);
-      codeblock += "^\n";
-    }
-  }
-  return codeblock;
-}
-var TomlError = class extends Error {
-  line;
-  column;
-  codeblock;
-  constructor(message, options) {
-    const [line, column] = getLineColFromPtr(options.toml, options.ptr);
-    const codeblock = makeCodeBlock(options.toml, line, column);
-    super(`Invalid TOML document: ${message}
-
-${codeblock}`, options);
-    this.line = line;
-    this.column = column;
-    this.codeblock = codeblock;
-  }
-};
-
-// ../../node_modules/.pnpm/smol-toml@1.6.1/node_modules/smol-toml/dist/util.js
-function isEscaped(str, ptr) {
-  let i = 0;
-  while (str[ptr - ++i] === "\\")
-    ;
-  return --i && i % 2;
-}
-function indexOfNewline(str, start = 0, end = str.length) {
-  let idx = str.indexOf("\n", start);
-  if (str[idx - 1] === "\r")
-    idx--;
-  return idx <= end ? idx : -1;
-}
-function skipComment(str, ptr) {
-  for (let i = ptr; i < str.length; i++) {
-    let c2 = str[i];
-    if (c2 === "\n")
-      return i;
-    if (c2 === "\r" && str[i + 1] === "\n")
-      return i + 1;
-    if (c2 < " " && c2 !== "	" || c2 === "\x7F") {
-      throw new TomlError("control characters are not allowed in comments", {
-        toml: str,
-        ptr
-      });
-    }
-  }
-  return str.length;
-}
-function skipVoid(str, ptr, banNewLines, banComments) {
-  let c2;
-  while (1) {
-    while ((c2 = str[ptr]) === " " || c2 === "	" || !banNewLines && (c2 === "\n" || c2 === "\r" && str[ptr + 1] === "\n"))
-      ptr++;
-    if (banComments || c2 !== "#")
-      break;
-    ptr = skipComment(str, ptr);
-  }
-  return ptr;
-}
-function skipUntil(str, ptr, sep, end, banNewLines = false) {
-  if (!end) {
-    ptr = indexOfNewline(str, ptr);
-    return ptr < 0 ? str.length : ptr;
-  }
-  for (let i = ptr; i < str.length; i++) {
-    let c2 = str[i];
-    if (c2 === "#") {
-      i = indexOfNewline(str, i);
-    } else if (c2 === sep) {
-      return i + 1;
-    } else if (c2 === end || banNewLines && (c2 === "\n" || c2 === "\r" && str[i + 1] === "\n")) {
-      return i;
-    }
-  }
-  throw new TomlError("cannot find end of structure", {
-    toml: str,
-    ptr
-  });
-}
-function getStringEnd(str, seek) {
-  let first = str[seek];
-  let target = first === str[seek + 1] && str[seek + 1] === str[seek + 2] ? str.slice(seek, seek + 3) : first;
-  seek += target.length - 1;
-  do
-    seek = str.indexOf(target, ++seek);
-  while (seek > -1 && first !== "'" && isEscaped(str, seek));
-  if (seek > -1) {
-    seek += target.length;
-    if (target.length > 1) {
-      if (str[seek] === first)
-        seek++;
-      if (str[seek] === first)
-        seek++;
-    }
-  }
-  return seek;
-}
-
-// ../../node_modules/.pnpm/smol-toml@1.6.1/node_modules/smol-toml/dist/date.js
+// ../../node_modules/.pnpm/smol-toml@1.8.0/node_modules/smol-toml/dist/date.js
 var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
 var TomlDate = class _TomlDate extends Date {
   #hasDate = false;
@@ -35684,99 +36082,224 @@ var TomlDate = class _TomlDate extends Date {
   }
 };
 
-// ../../node_modules/.pnpm/smol-toml@1.6.1/node_modules/smol-toml/dist/primitive.js
+// ../../node_modules/.pnpm/smol-toml@1.8.0/node_modules/smol-toml/dist/error.js
+function getLineColFromPtr(string4, ptr) {
+  let lines = string4.slice(0, ptr).split(/\r\n|\n|\r/g);
+  return [lines.length, lines.pop().length + 1];
+}
+function makeCodeBlock(string4, line, column) {
+  let lines = string4.split(/\r\n|\n|\r/g);
+  let codeblock = "";
+  let numberLen = (Math.log10(line + 1) | 0) + 1;
+  for (let i = line - 1; i <= line + 1; i++) {
+    let l = lines[i - 1];
+    if (!l)
+      continue;
+    codeblock += i.toString().padEnd(numberLen, " ");
+    codeblock += ":  ";
+    codeblock += l;
+    codeblock += "\n";
+    if (i === line) {
+      codeblock += " ".repeat(numberLen + column + 2);
+      codeblock += "^\n";
+    }
+  }
+  return codeblock;
+}
+var TomlError = class extends Error {
+  line;
+  column;
+  codeblock;
+  constructor(message, options) {
+    const [line, column] = getLineColFromPtr(options.toml, options.ptr);
+    const codeblock = makeCodeBlock(options.toml, line, column);
+    super(`Invalid TOML document: ${message}
+
+${codeblock}`, options);
+    this.line = line;
+    this.column = column;
+    this.codeblock = codeblock;
+  }
+};
+
+// ../../node_modules/.pnpm/smol-toml@1.8.0/node_modules/smol-toml/dist/util.js
+function indexOfNewline(str, start = 0) {
+  let idx = str.indexOf("\n", start);
+  if (str.charCodeAt(idx - 1) === 13)
+    idx--;
+  return idx;
+}
+function skipComment(ctx) {
+  for (; ctx.p < ctx.s.length; ctx.p++) {
+    let c2 = ctx.s.charCodeAt(ctx.p);
+    if (c2 === 10)
+      break;
+    if (c2 === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10) {
+      ctx.p++;
+      break;
+    }
+    if (c2 < 32 && c2 !== 9 || c2 === 127) {
+      throw new TomlError("control characters are not allowed in comments", {
+        toml: ctx.s,
+        ptr: ctx.p
+      });
+    }
+  }
+}
+function skipVoid(ctx, banNewLines, banComments) {
+  let c2;
+  while (1) {
+    while ((c2 = ctx.s.charCodeAt(ctx.p)) === 32 || c2 === 9 || !banNewLines && (c2 === 10 || c2 === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10))
+      ctx.p++;
+    if (banComments || c2 !== 35)
+      break;
+    skipComment(ctx);
+  }
+}
+function skipUntil(ctx, sep, end) {
+  let ptr = ctx.p;
+  if (!end) {
+    ptr = indexOfNewline(ctx.s, ptr);
+    ctx.p = ptr < 0 ? ctx.s.length : ptr;
+    return;
+  }
+  for (; ctx.p < ctx.s.length; ctx.p++) {
+    let c2 = ctx.s.charCodeAt(ctx.p);
+    if (c2 === 35) {
+      skipComment(ctx);
+    } else if (c2 === end || c2 === sep) {
+      return;
+    }
+  }
+  throw new TomlError("cannot find end of structure", {
+    toml: ctx.s,
+    ptr
+  });
+}
+
+// ../../node_modules/.pnpm/smol-toml@1.8.0/node_modules/smol-toml/dist/primitive.js
 var INT_REGEX = /^((0x[0-9a-fA-F](_?[0-9a-fA-F])*)|(([+-]|0[ob])?\d(_?\d)*))$/;
 var FLOAT_REGEX = /^[+-]?\d(_?\d)*(\.\d(_?\d)*)?([eE][+-]?\d(_?\d)*)?$/;
 var LEADING_ZERO = /^[+-]?0[0-9_]/;
-var ESCAPE_REGEX = /^[0-9a-f]{2,8}$/i;
-var ESC_MAP = {
-  b: "\b",
-  t: "	",
-  n: "\n",
-  f: "\f",
-  r: "\r",
-  e: "\x1B",
-  '"': '"',
-  "\\": "\\"
-};
-function parseString2(str, ptr = 0, endPtr = str.length) {
-  let isLiteral = str[ptr] === "'";
-  let isMultiline = str[ptr++] === str[ptr] && str[ptr] === str[ptr + 1];
+function parseString2(ctx) {
+  let start = ctx.p;
+  let c2 = ctx.s.charCodeAt(ctx.p++);
+  let first = c2;
+  let isLiteral = c2 === 39;
+  let isMultiline = c2 === ctx.s.charCodeAt(ctx.p) && c2 === ctx.s.charCodeAt(ctx.p + 1);
   if (isMultiline) {
-    endPtr -= 2;
-    if (str[ptr += 2] === "\r")
-      ptr++;
-    if (str[ptr] === "\n")
-      ptr++;
-  }
-  let tmp = 0;
-  let isEscape;
+    if ((c2 = ctx.s.charCodeAt(ctx.p += 2)) === 10)
+      ctx.p++;
+    else if (c2 === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10)
+      ctx.p += 2;
+  }
   let parsed = "";
-  let sliceStart = ptr;
-  while (ptr < endPtr - 1) {
-    let c2 = str[ptr++];
-    if (c2 === "\n" || c2 === "\r" && str[ptr] === "\n") {
-      if (!isMultiline) {
-        throw new TomlError("newlines are not allowed in strings", {
-          toml: str,
-          ptr: ptr - 1
-        });
-      }
-    } else if (c2 < " " && c2 !== "	" || c2 === "\x7F") {
+  let sliceStart = ctx.p;
+  let state = 0;
+  for (; ctx.p < ctx.s.length; ctx.p++) {
+    c2 = ctx.s.charCodeAt(ctx.p);
+    if (isMultiline && (c2 === 10 || c2 === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10)) {
+      state = state && 3;
+    } else if (c2 < 32 && c2 !== 9 || c2 === 127) {
       throw new TomlError("control characters are not allowed in strings", {
-        toml: str,
-        ptr: ptr - 1
+        toml: ctx.s,
+        ptr: ctx.p
       });
-    }
-    if (isEscape) {
-      isEscape = false;
-      if (c2 === "x" || c2 === "u" || c2 === "U") {
-        let code = str.slice(ptr, ptr += c2 === "x" ? 2 : c2 === "u" ? 4 : 8);
-        if (!ESCAPE_REGEX.test(code)) {
-          throw new TomlError("invalid unicode escape", {
-            toml: str,
-            ptr: tmp
-          });
-        }
-        try {
-          parsed += String.fromCodePoint(parseInt(code, 16));
-        } catch {
-          throw new TomlError("invalid unicode escape", {
-            toml: str,
-            ptr: tmp
-          });
-        }
-      } else if (isMultiline && (c2 === "\n" || c2 === " " || c2 === "	" || c2 === "\r")) {
-        ptr = skipVoid(str, ptr - 1, true);
-        if (str[ptr] !== "\n" && str[ptr] !== "\r") {
-          throw new TomlError("invalid escape: only line-ending whitespace may be escaped", {
-            toml: str,
-            ptr: tmp
-          });
-        }
-        ptr = skipVoid(str, ptr);
-      } else if (c2 in ESC_MAP) {
-        parsed += ESC_MAP[c2];
+    } else if ((!state || state === 3) && c2 === first && (!isMultiline || ctx.s.charCodeAt(ctx.p + 1) === first && ctx.s.charCodeAt(ctx.p + 2) === first)) {
+      if (isMultiline) {
+        if (ctx.s.charCodeAt(ctx.p + 3) === first)
+          ctx.p++;
+        if (ctx.s.charCodeAt(ctx.p + 3) === first)
+          ctx.p++;
+      }
+      if (!state)
+        parsed += ctx.s.slice(sliceStart, ctx.p);
+      ctx.p += isMultiline ? 3 : 1;
+      return parsed;
+    } else if (!state) {
+      if (!isLiteral && c2 === 92) {
+        parsed += ctx.s.slice(sliceStart, sliceStart = ctx.p);
+        state = 1;
+      }
+    } else if (state === 1) {
+      if (c2 === 120 || c2 === 117 || c2 === 85) {
+        let value = 0;
+        let len = c2 === 120 ? 2 : c2 === 117 ? 4 : 8;
+        for (let j3 = 0; j3 < len; j3++, ctx.p++) {
+          let hex3 = ctx.s.charCodeAt(ctx.p + 1);
+          let digit = (
+            /* 0-9 */
+            hex3 >= 48 && hex3 <= 57 ? hex3 - 48 : (
+              /* A-F */
+              hex3 >= 65 && hex3 <= 70 ? hex3 - 65 + 10 : (
+                /* a-f */
+                hex3 >= 97 && hex3 <= 102 ? hex3 - 97 + 10 : -1
+              )
+            )
+          );
+          if (digit < 0)
+            throw new TomlError("invalid non-hex character in unicode escape", { toml: ctx.s, ptr: ctx.p + 1 });
+          value = value << 4 | digit;
+        }
+        if (value < 0 || value > 1114111 || value >= 55296 && value <= 57343) {
+          throw new TomlError("invalid unicode escape", { toml: ctx.s, ptr: ctx.p });
+        }
+        parsed += String.fromCodePoint(value);
+        sliceStart = ctx.p + 1;
+        state = 0;
+      } else if (c2 === 32 || c2 === 9) {
+        state = 2;
       } else {
-        throw new TomlError("unrecognized escape sequence", {
-          toml: str,
-          ptr: tmp
+        if (c2 === 98)
+          parsed += "\b";
+        else if (c2 === 116)
+          parsed += "	";
+        else if (c2 === 110)
+          parsed += "\n";
+        else if (c2 === 102)
+          parsed += "\f";
+        else if (c2 === 114)
+          parsed += "\r";
+        else if (c2 === 101)
+          parsed += "\x1B";
+        else if (c2 === 34)
+          parsed += '"';
+        else if (c2 === 92)
+          parsed += "\\";
+        else
+          throw new TomlError("unrecognized escape sequence", { toml: ctx.s, ptr: ctx.p });
+        sliceStart = ctx.p + 1;
+        state = 0;
+      }
+    } else if (c2 !== 32 && c2 !== 9) {
+      if (state === 2) {
+        throw new TomlError("invalid escape: only line-ending whitespace may be escaped", {
+          toml: ctx.s,
+          ptr: sliceStart
         });
       }
-      sliceStart = ptr;
-    } else if (!isLiteral && c2 === "\\") {
-      tmp = ptr - 1;
-      isEscape = true;
-      parsed += str.slice(sliceStart, tmp);
+      state = !isLiteral && c2 === 92 ? 1 : 0;
+      sliceStart = ctx.p;
     }
   }
-  return parsed + str.slice(sliceStart, endPtr - 1);
+  throw new TomlError("unfinished string", { toml: ctx.s, ptr: start });
 }
-function parseValue(value, toml, ptr, integersAsBigInt) {
-  if (value === "true")
-    return true;
-  if (value === "false")
-    return false;
+function sliceAndTrimEndOf(ctx, start, end) {
+  let value = ctx.s.slice(start, end);
+  let commentIdx = value.indexOf("#");
+  if (commentIdx > 0) {
+    skipComment({ s: value, p: commentIdx, d: 0 });
+    value = value.slice(0, commentIdx);
+  }
+  return value.trimEnd();
+}
+function parseValue(ctx, integersAsBigInt, end) {
+  let ptr = ctx.p;
+  let err3 = { toml: ctx.s, ptr };
+  skipUntil(ctx, 44, end);
+  let value = sliceAndTrimEndOf(ctx, ptr, ctx.p);
+  if (!value)
+    throw new TomlError("incomplete declaration: value expected", err3);
   if (value === "-inf")
     return -Infinity;
   if (value === "inf" || value === "+inf")
@@ -35788,257 +36311,204 @@ function parseValue(value, toml, ptr, integersAsBigInt) {
   let isInt = INT_REGEX.test(value);
   if (isInt || FLOAT_REGEX.test(value)) {
     if (LEADING_ZERO.test(value)) {
-      throw new TomlError("leading zeroes are not allowed", {
-        toml,
-        ptr
-      });
+      throw new TomlError("leading zeroes are not allowed", err3);
     }
     value = value.replace(/_/g, "");
     let numeric = +value;
     if (isNaN(numeric)) {
-      throw new TomlError("invalid number", {
-        toml,
-        ptr
-      });
+      throw new TomlError("invalid number", err3);
     }
     if (isInt) {
       if ((isInt = !Number.isSafeInteger(numeric)) && !integersAsBigInt) {
-        throw new TomlError("integer value cannot be represented losslessly", {
-          toml,
-          ptr
-        });
+        throw new TomlError("integer value cannot be represented losslessly", err3);
       }
       if (isInt || integersAsBigInt === true)
-        numeric = BigInt(value);
-    }
-    return numeric;
-  }
-  const date5 = new TomlDate(value);
-  if (!date5.isValid()) {
-    throw new TomlError("invalid value", {
-      toml,
-      ptr
-    });
-  }
-  return date5;
-}
-
-// ../../node_modules/.pnpm/smol-toml@1.6.1/node_modules/smol-toml/dist/extract.js
-function sliceAndTrimEndOf(str, startPtr, endPtr) {
-  let value = str.slice(startPtr, endPtr);
-  let commentIdx = value.indexOf("#");
-  if (commentIdx > -1) {
-    skipComment(str, commentIdx);
-    value = value.slice(0, commentIdx);
-  }
-  return [value.trimEnd(), commentIdx];
-}
-function extractValue(str, ptr, end, depth, integersAsBigInt) {
-  if (depth === 0) {
-    throw new TomlError("document contains excessively nested structures. aborting.", {
-      toml: str,
-      ptr
-    });
-  }
-  let c2 = str[ptr];
-  if (c2 === "[" || c2 === "{") {
-    let [value, endPtr2] = c2 === "[" ? parseArray(str, ptr, depth, integersAsBigInt) : parseInlineTable(str, ptr, depth, integersAsBigInt);
-    if (end) {
-      endPtr2 = skipVoid(str, endPtr2);
-      if (str[endPtr2] === ",")
-        endPtr2++;
-      else if (str[endPtr2] !== end) {
-        throw new TomlError("expected comma or end of structure", {
-          toml: str,
-          ptr: endPtr2
-        });
-      }
+        numeric = BigInt(value);
     }
-    return [value, endPtr2];
+    return numeric;
   }
-  let endPtr;
-  if (c2 === '"' || c2 === "'") {
-    endPtr = getStringEnd(str, ptr);
-    let parsed = parseString2(str, ptr, endPtr);
-    if (end) {
-      endPtr = skipVoid(str, endPtr);
-      if (str[endPtr] && str[endPtr] !== "," && str[endPtr] !== end && str[endPtr] !== "\n" && str[endPtr] !== "\r") {
-        throw new TomlError("unexpected character encountered", {
-          toml: str,
-          ptr: endPtr
-        });
-      }
-      endPtr += +(str[endPtr] === ",");
+  const date5 = new TomlDate(value);
+  if (!date5.isValid())
+    throw new TomlError("invalid value", err3);
+  return date5;
+}
+
+// ../../node_modules/.pnpm/smol-toml@1.8.0/node_modules/smol-toml/dist/extract.js
+function extractValue(ctx, end, integersAsBigInt) {
+  let ptr = ctx.p;
+  let c2 = ctx.s.charCodeAt(ptr);
+  if (c2 === 91 || c2 === 123) {
+    if (!ctx.d--) {
+      throw new TomlError("document contains excessively nested structures. aborting.", {
+        toml: ctx.s,
+        ptr
+      });
     }
-    return [parsed, endPtr];
+    let value = c2 === 91 ? parseArray(ctx, integersAsBigInt) : parseInlineTable(ctx, integersAsBigInt);
+    ctx.d++;
+    return value;
   }
-  endPtr = skipUntil(str, ptr, ",", end);
-  let slice = sliceAndTrimEndOf(str, ptr, endPtr - +(str[endPtr - 1] === ","));
-  if (!slice[0]) {
-    throw new TomlError("incomplete key-value declaration: no value specified", {
-      toml: str,
-      ptr
-    });
+  if (c2 === 34 || c2 === 39) {
+    return parseString2(ctx);
+  }
+  if (c2 === 116) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 114 || ctx.s.charCodeAt(++ctx.p) !== 117 || ctx.s.charCodeAt(++ctx.p) !== 101)
+      throw new TomlError("invalid value", { toml: ctx.s, ptr });
+    ctx.p++;
+    return true;
   }
-  if (end && slice[1] > -1) {
-    endPtr = skipVoid(str, ptr + slice[1]);
-    endPtr += +(str[endPtr] === ",");
+  if (c2 === 102) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 97 || ctx.s.charCodeAt(++ctx.p) !== 108 || ctx.s.charCodeAt(++ctx.p) !== 115 || ctx.s.charCodeAt(++ctx.p) !== 101)
+      throw new TomlError("invalid value", { toml: ctx.s, ptr });
+    ctx.p++;
+    return false;
   }
-  return [
-    parseValue(slice[0], str, ptr, integersAsBigInt),
-    endPtr
-  ];
+  return parseValue(ctx, integersAsBigInt, end);
 }
 
-// ../../node_modules/.pnpm/smol-toml@1.6.1/node_modules/smol-toml/dist/struct.js
+// ../../node_modules/.pnpm/smol-toml@1.8.0/node_modules/smol-toml/dist/struct.js
 var KEY_PART_RE = /^[a-zA-Z0-9-_]+[ \t]*$/;
-function parseKey(str, ptr, end = "=") {
-  let dot = ptr - 1;
+function parseKey(ctx, end = "=") {
+  let start = ctx.p;
+  let dot = start - 1;
   let parsed = [];
-  let endPtr = str.indexOf(end, ptr);
+  let endPtr = ctx.s.indexOf(end, start);
   if (endPtr < 0) {
     throw new TomlError("incomplete key-value: cannot find end of key", {
-      toml: str,
-      ptr
+      toml: ctx.s,
+      ptr: start
     });
   }
   do {
-    let c2 = str[ptr = ++dot];
-    if (c2 !== " " && c2 !== "	") {
-      if (c2 === '"' || c2 === "'") {
-        if (c2 === str[ptr + 1] && c2 === str[ptr + 2]) {
+    let c2 = ctx.s.charCodeAt(ctx.p = ++dot);
+    if (c2 !== 32 && c2 !== 9) {
+      if (c2 === 34 || c2 === 39) {
+        if (c2 === ctx.s.charCodeAt(ctx.p + 1) && c2 === ctx.s.charCodeAt(ctx.p + 2)) {
           throw new TomlError("multiline strings are not allowed in keys", {
-            toml: str,
-            ptr
+            toml: ctx.s,
+            ptr: ctx.p
           });
         }
-        let eos = getStringEnd(str, ptr);
-        if (eos < 0) {
-          throw new TomlError("unfinished string encountered", {
-            toml: str,
-            ptr
-          });
-        }
-        dot = str.indexOf(".", eos);
-        let strEnd = str.slice(eos, dot < 0 || dot > endPtr ? endPtr : dot);
+        let part = parseString2(ctx);
+        dot = ctx.s.indexOf(".", ctx.p);
+        let strEnd = ctx.s.slice(ctx.p, dot < 0 || dot > endPtr ? endPtr : dot);
         let newLine = indexOfNewline(strEnd);
         if (newLine > -1) {
           throw new TomlError("newlines are not allowed in keys", {
-            toml: str,
-            ptr: ptr + dot + newLine
+            toml: ctx.s,
+            ptr: newLine
           });
         }
         if (strEnd.trimStart()) {
           throw new TomlError("found extra tokens after the string part", {
-            toml: str,
-            ptr: eos
+            toml: ctx.s,
+            ptr: ctx.p
           });
         }
-        if (endPtr < eos) {
-          endPtr = str.indexOf(end, eos);
+        if (endPtr < ctx.p) {
+          endPtr = ctx.s.indexOf(end, ctx.p);
           if (endPtr < 0) {
             throw new TomlError("incomplete key-value: cannot find end of key", {
-              toml: str,
-              ptr
+              toml: ctx.s,
+              ptr: start
             });
           }
         }
-        parsed.push(parseString2(str, ptr, eos));
+        parsed.push(part);
       } else {
-        dot = str.indexOf(".", ptr);
-        let part = str.slice(ptr, dot < 0 || dot > endPtr ? endPtr : dot);
+        dot = ctx.s.indexOf(".", ctx.p);
+        let part = ctx.s.slice(ctx.p, dot < 0 || dot > endPtr ? endPtr : dot);
         if (!KEY_PART_RE.test(part)) {
           throw new TomlError("only letter, numbers, dashes and underscores are allowed in keys", {
-            toml: str,
-            ptr
+            toml: ctx.s,
+            ptr: ctx.p
           });
         }
         parsed.push(part.trimEnd());
       }
     }
   } while (dot + 1 && dot < endPtr);
-  return [parsed, skipVoid(str, endPtr + 1, true, true)];
+  ctx.p = endPtr + 1;
+  skipVoid(ctx, true, true);
+  return parsed;
 }
-function parseInlineTable(str, ptr, depth, integersAsBigInt) {
+function parseInlineTable(ctx, integersAsBigInt) {
   let res = {};
   let seen = /* @__PURE__ */ new Set();
   let c2;
-  ptr++;
-  while ((c2 = str[ptr++]) !== "}" && c2) {
-    if (c2 === ",") {
-      throw new TomlError("expected value, found comma", {
-        toml: str,
-        ptr: ptr - 1
-      });
-    } else if (c2 === "#")
-      ptr = skipComment(str, ptr);
-    else if (c2 !== " " && c2 !== "	" && c2 !== "\n" && c2 !== "\r") {
-      let k2;
-      let t = res;
-      let hasOwn = false;
-      let [key, keyEndPtr] = parseKey(str, ptr - 1);
-      for (let i = 0; i < key.length; i++) {
-        if (i)
-          t = hasOwn ? t[k2] : t[k2] = {};
-        k2 = key[i];
-        if ((hasOwn = Object.hasOwn(t, k2)) && (typeof t[k2] !== "object" || seen.has(t[k2]))) {
-          throw new TomlError("trying to redefine an already defined value", {
-            toml: str,
-            ptr
-          });
-        }
-        if (!hasOwn && k2 === "__proto__") {
-          Object.defineProperty(t, k2, { enumerable: true, configurable: true, writable: true });
-        }
-      }
-      if (hasOwn) {
+  ctx.p++;
+  while (ctx.p < ctx.s.length) {
+    skipVoid(ctx);
+    if ((c2 = ctx.s.charCodeAt(ctx.p)) === 125) {
+      ctx.p++;
+      return res;
+    }
+    let k2;
+    let t = res;
+    let hasOwn = false;
+    let p2 = ctx.p;
+    let key = parseKey(ctx);
+    for (let i = 0; i < key.length; i++) {
+      if (i)
+        t = hasOwn ? t[k2] : t[k2] = {};
+      k2 = key[i];
+      if ((hasOwn = Object.hasOwn(t, k2)) && (typeof t[k2] !== "object" || seen.has(t[k2]))) {
         throw new TomlError("trying to redefine an already defined value", {
-          toml: str,
-          ptr
+          toml: ctx.s,
+          ptr: p2
         });
       }
-      let [value, valueEndPtr] = extractValue(str, keyEndPtr, "}", depth - 1, integersAsBigInt);
-      seen.add(value);
-      t[k2] = value;
-      ptr = valueEndPtr;
+      if (!hasOwn && k2 === "__proto__") {
+        Object.defineProperty(t, k2, { enumerable: true, configurable: true, writable: true });
+      }
+    }
+    if (hasOwn) {
+      throw new TomlError("trying to redefine an already defined value", {
+        toml: ctx.s,
+        ptr: ctx.p
+      });
+    }
+    let value = extractValue(ctx, 125, integersAsBigInt);
+    seen.add(t[k2] = value);
+    skipVoid(ctx);
+    if ((c2 = ctx.s.charCodeAt(ctx.p++)) === 125) {
+      return res;
+    }
+    if (c2 !== 44) {
+      throw new TomlError("expected comma or end of structure", { toml: ctx.s, ptr: ctx.p - 1 });
     }
   }
-  if (!c2) {
-    throw new TomlError("unfinished table encountered", {
-      toml: str,
-      ptr
-    });
-  }
-  return [res, ptr];
+  throw new TomlError("unfinished table encountered", {
+    toml: ctx.s,
+    ptr: ctx.p
+  });
 }
-function parseArray(str, ptr, depth, integersAsBigInt) {
+function parseArray(ctx, integersAsBigInt) {
   let res = [];
   let c2;
-  ptr++;
-  while ((c2 = str[ptr++]) !== "]" && c2) {
-    if (c2 === ",") {
-      throw new TomlError("expected value, found comma", {
-        toml: str,
-        ptr: ptr - 1
-      });
-    } else if (c2 === "#")
-      ptr = skipComment(str, ptr);
-    else if (c2 !== " " && c2 !== "	" && c2 !== "\n" && c2 !== "\r") {
-      let e2 = extractValue(str, ptr - 1, "]", depth - 1, integersAsBigInt);
-      res.push(e2[0]);
-      ptr = e2[1];
-    }
-  }
-  if (!c2) {
-    throw new TomlError("unfinished array encountered", {
-      toml: str,
-      ptr
-    });
+  ctx.p++;
+  while (ctx.p < ctx.s.length) {
+    skipVoid(ctx);
+    if ((c2 = ctx.s.charCodeAt(ctx.p)) === 93) {
+      ctx.p++;
+      return res;
+    }
+    res.push(extractValue(ctx, 93, integersAsBigInt));
+    skipVoid(ctx);
+    if ((c2 = ctx.s.charCodeAt(ctx.p++)) === 93) {
+      return res;
+    }
+    if (c2 !== 44) {
+      throw new TomlError("expected comma or end of structure", { toml: ctx.s, ptr: ctx.p - 1 });
+    }
   }
-  return [res, ptr];
+  throw new TomlError("unfinished array encountered", {
+    toml: ctx.s,
+    ptr: ctx.p
+  });
 }
 
-// ../../node_modules/.pnpm/smol-toml@1.6.1/node_modules/smol-toml/dist/parse.js
+// ../../node_modules/.pnpm/smol-toml@1.8.0/node_modules/smol-toml/dist/parse.js
 function peekTable(key, table, meta3, type) {
   let t = table;
   let m = meta3;
@@ -36099,25 +36569,29 @@ function peekTable(key, table, meta3, type) {
   return [k2, t, state.c];
 }
 function parse3(toml, { maxDepth = 1e3, integersAsBigInt } = {}) {
+  let ctx = { s: toml, p: 0, d: maxDepth };
   let res = {};
   let meta3 = {};
+  let tmp;
   let tbl = res;
   let m = meta3;
-  for (let ptr = skipVoid(toml, 0); ptr < toml.length; ) {
-    if (toml[ptr] === "[") {
-      let isTableArray = toml[++ptr] === "[";
-      let k2 = parseKey(toml, ptr += +isTableArray, "]");
+  skipVoid(ctx);
+  while (ctx.p < toml.length) {
+    if (toml.charCodeAt(ctx.p) === 91) {
+      let isTableArray = toml.charCodeAt(++ctx.p) === 91;
+      tmp = ctx.p += +isTableArray;
+      let k2 = parseKey(ctx, "]");
       if (isTableArray) {
-        if (toml[k2[1] - 1] !== "]") {
+        if (toml.charCodeAt(ctx.p - 1) !== 93) {
           throw new TomlError("expected end of table declaration", {
             toml,
-            ptr: k2[1] - 1
+            ptr: ctx.p - 1
           });
         }
-        k2[1]++;
+        ctx.p++;
       }
       let p2 = peekTable(
-        k2[0],
+        k2,
         res,
         meta3,
         isTableArray ? 2 : 1
@@ -36126,16 +36600,16 @@ function parse3(toml, { maxDepth = 1e3, integersAsBigInt } = {}) {
       if (!p2) {
         throw new TomlError("trying to redefine an already defined table or value", {
           toml,
-          ptr
+          ptr: tmp
         });
       }
       m = p2[2];
       tbl = p2[1];
-      ptr = k2[1];
     } else {
-      let k2 = parseKey(toml, ptr);
+      tmp = ctx.p;
+      let k2 = parseKey(ctx);
       let p2 = peekTable(
-        k2[0],
+        k2,
         tbl,
         m,
         0
@@ -36144,34 +36618,36 @@ function parse3(toml, { maxDepth = 1e3, integersAsBigInt } = {}) {
       if (!p2) {
         throw new TomlError("trying to redefine an already defined table or value", {
           toml,
-          ptr
+          ptr: tmp
         });
       }
-      let v2 = extractValue(toml, k2[1], void 0, maxDepth, integersAsBigInt);
-      p2[1][p2[0]] = v2[0];
-      ptr = v2[1];
+      p2[1][p2[0]] = extractValue(ctx, void 0, integersAsBigInt);
     }
-    ptr = skipVoid(toml, ptr, true);
-    if (toml[ptr] && toml[ptr] !== "\n" && toml[ptr] !== "\r") {
+    skipVoid(ctx, true);
+    if (ctx.p < toml.length && (tmp = toml.charCodeAt(ctx.p)) !== 10 && tmp !== 13) {
       throw new TomlError("each key-value declaration must be followed by an end-of-line", {
         toml,
-        ptr
+        ptr: ctx.p
       });
     }
-    ptr = skipVoid(toml, ptr);
+    skipVoid(ctx);
   }
   return res;
 }
 
-// ../../node_modules/.pnpm/smol-toml@1.6.1/node_modules/smol-toml/dist/stringify.js
+// ../../node_modules/.pnpm/smol-toml@1.8.0/node_modules/smol-toml/dist/stringify.js
 var BARE_KEY = /^[a-z0-9-_]+$/i;
 function extendedTypeOf(obj) {
   let type = typeof obj;
   if (type === "object") {
     if (Array.isArray(obj))
       return "array";
-    if (obj instanceof Date)
+    if (typeof obj?.getUTCDate === "function" && obj instanceof Date)
       return "date";
+    if (globalThis.Temporal && // check for the 'since' property as an early bailout that avoids running all 5 instanceof checks
+    typeof obj?.since === "function" && (obj instanceof Temporal.Instant || obj instanceof Temporal.PlainDate || obj instanceof Temporal.PlainDateTime || obj instanceof Temporal.PlainTime || obj instanceof Temporal.ZonedDateTime)) {
+      return "temporal";
+    }
   }
   return type;
 }
@@ -36185,38 +36661,42 @@ function isArrayOfTables(obj) {
 function formatString(s) {
   return JSON.stringify(s).replace(/\x7f/g, "\\u007f");
 }
+function stringifyTemporal(temporal) {
+  return temporal.toString({
+    calendarName: "never",
+    timeZoneName: "never"
+  });
+}
 function stringifyValue(val, type, depth, numberAsFloat) {
   if (depth === 0) {
     throw new Error("Could not stringify the object: maximum object depth exceeded");
   }
-  if (type === "number") {
-    if (isNaN(val))
-      return "nan";
-    if (val === Infinity)
-      return "inf";
-    if (val === -Infinity)
-      return "-inf";
-    if (numberAsFloat && Number.isInteger(val))
-      return val.toFixed(1);
-    return val.toString();
-  }
-  if (type === "bigint" || type === "boolean") {
-    return val.toString();
-  }
-  if (type === "string") {
-    return formatString(val);
-  }
-  if (type === "date") {
-    if (isNaN(val.getTime())) {
-      throw new TypeError("cannot serialize invalid date");
-    }
-    return val.toISOString();
-  }
-  if (type === "object") {
-    return stringifyInlineTable(val, depth, numberAsFloat);
-  }
-  if (type === "array") {
-    return stringifyArray(val, depth, numberAsFloat);
+  switch (type) {
+    // @ts-expect-error -- intentional fallthrough case
+    case "number":
+      if (isNaN(val))
+        return "nan";
+      if (val === Infinity)
+        return "inf";
+      if (val === -Infinity)
+        return "-inf";
+      if (Number.isInteger(val) && (numberAsFloat || !Number.isSafeInteger(val)))
+        return val.toFixed(1);
+    case "bigint":
+    case "boolean":
+      return val.toString();
+    case "string":
+      return formatString(val);
+    case "date":
+      if (isNaN(val.getTime()))
+        throw new TypeError("cannot serialize invalid date");
+      return val.toISOString();
+    case "object":
+      return stringifyInlineTable(val, depth, numberAsFloat);
+    case "array":
+      return stringifyArray(val, depth, numberAsFloat);
+    case "temporal":
+      return stringifyTemporal(val);
   }
 }
 function stringifyInlineTable(obj, depth, numberAsFloat) {
@@ -40414,6 +40894,13 @@ function createRunService(deps) {
     const parsed = platformRunResultResponseSchema.safeParse(res.result);
     return parsed.success ? parsed.data : null;
   }
+  function interruptedRun(sessionId) {
+    return err2({
+      kind: "run-failed",
+      reason: "the run was interrupted and will not finish \u2014 the agent went down mid-run; run it again",
+      sessionId
+    });
+  }
   async function reconnectAndFinish(opts) {
     const { ctx, sessionId, promptId, deadlineAt } = opts;
     let backoffStep = 0;
@@ -40451,6 +40938,8 @@ function createRunService(deps) {
           const record2 = await fetchRunResult(conn, sessionId);
           if (record2?.status === "done" && matchesPrompt(record2.result, promptId))
             return finish(record2.result);
+          if (record2?.status === "interrupted")
+            return interruptedRun(sessionId);
           const event2 = await waiter.next(deadlineAt, conn.closed);
           if (event2 === "timed-out")
             return ok2({ kind: "timed-out", sessionId });
@@ -40641,6 +41130,7 @@ function createRunService(deps) {
             });
           if (record2.status === "done")
             return ok2({ kind: "done", result: record2.result });
+          if (record2.status === "interrupted") return interruptedRun(sessionId);
           if (record2.status === "none" && !input.wait)
             return ok2({ kind: "none", sessionId });
           if (!input.wait) return ok2({ kind: "pending", sessionId });
@@ -41485,7 +41975,7 @@ function createProcessEnvReader() {
 
 // src/modules/cli/infrastructure/package-version.ts
 function readPackageVersion() {
-  return true ? "0.2.17" : DEV_VERSION;
+  return true ? "0.2.18-rc2" : DEV_VERSION;
 }
 
 // src/modules/cli/infrastructure/version-probe.ts
@@ -42207,15 +42697,6 @@ function formatPresetNote(inputs) {
 `;
 }
 
-// src/modules/connection/domain/connection-ref.ts
-var CONNECTION_ID_PREFIX = "conn-";
-function resolveConnectionRef(connections, ref) {
-  if (ref.startsWith(CONNECTION_ID_PREFIX)) {
-    return connections.find((c2) => c2.id === ref) ?? null;
-  }
-  return connections.find((c2) => c2.name === ref) ?? null;
-}
-
 // src/modules/connection/commands/disconnect.ts
 function buildDisconnectCommand(deps) {
   return new Command("disconnect").description("Remove a team connection (deletes the stored credential)").argument(
@@ -43077,7 +43558,7 @@ function buildListCommand5(deps) {
     "override the configured server URL for this call"
   ).option("--json", "emit raw JSON instead of the default table").addHelpText(
     "after",
-    "\nExamples:\n  dam network list my-agent\n  dam network list agent-abc123 --json\n"
+    "\nExamples:\n  dam network list my-agent\n  dam network list agent-3f9c2b7e41d08a65 --json\n"
   ).action(async (ref, opts) => {
     const host = await resolveActiveHost(deps, {
       flag: opts.server ? { server: opts.server } : void 0,
@@ -43593,13 +44074,40 @@ function printTrpcReadError(e2, path2, host) {
 }
 
 // src/modules/file/commands/list.ts
+var entrySuffix = { file: "", dir: "/" };
+var MAX_DIRECTORY_BATCH_SIZE = 500;
+var MAX_ENCODED_DIRECTORY_INPUT_LENGTH = 7e3;
+var DirectoryPathTooLongError = class extends Error {
+};
+function* directoryBatches(frontier) {
+  let paths = [];
+  const emptyInputLength = encodeURIComponent(
+    JSON.stringify({ 0: { paths: [] } })
+  ).length;
+  let encodedInputLength = emptyInputLength;
+  for (const path2 of frontier) {
+    const pathLength = encodeURIComponent(JSON.stringify(path2)).length;
+    if (emptyInputLength + pathLength > MAX_ENCODED_DIRECTORY_INPUT_LENGTH) {
+      throw new DirectoryPathTooLongError(
+        `cannot list \`${path2}\`: directory path exceeds the request URL size limit`
+      );
+    }
+    const separatorLength = paths.length > 0 ? 3 : 0;
+    if (paths.length > 0 && (paths.length === MAX_DIRECTORY_BATCH_SIZE || encodedInputLength + separatorLength + pathLength > MAX_ENCODED_DIRECTORY_INPUT_LENGTH)) {
+      yield paths;
+      paths = [];
+      encodedInputLength = emptyInputLength;
+    }
+    encodedInputLength += (paths.length > 0 ? 3 : 0) + pathLength;
+    paths.push(path2);
+  }
+  if (paths.length > 0) yield paths;
+}
 function buildFileListCommand(deps) {
-  return new Command("list").description(
-    "List immediate children of a directory in an Agent's workspace"
-  ).argument("<ref>", "Agent Ref \u2014 name or 'agent-\u2026' ID").argument(
+  return new Command("list").description("List a directory in an Agent's workspace").argument("<ref>", "Agent Ref \u2014 name or 'agent-\u2026' ID").argument(
     "[remote-path]",
     "directory to list (workspace-relative; defaults to root)"
-  ).option("--server <url>", "override the configured server URL").option("--json", "emit entries as JSON (files and directories)").action(
+  ).option("--server <url>", "override the configured server URL").option("-R, --recursive", "list all nested files and directories").option("--json", "emit entries as JSON").action(
     async (ref, remotePath, opts) => {
       const flag = opts.server ? { server: opts.server } : void 0;
       const host = await resolveActiveHost(deps, {
@@ -43623,30 +44131,46 @@ function buildFileListCommand(deps) {
         tokenProvider: deps.tokenProvider
       });
       const dir = (remotePath ?? "").replace(/\/+$/, "");
-      let entries;
+      const entries = [];
       try {
-        const { results } = await trpc.files.listDirs.query({
-          paths: [dir]
-        });
-        const res = results[0];
-        if (!res || !res.ok) {
-          const reason = res?.error ?? "not-found";
-          process.stderr.write(
-            `error: cannot list \`${dir || "/"}\`: ${reason}
+        let frontier = [dir];
+        while (frontier.length > 0) {
+          const nextFrontier = [];
+          for (const paths of directoryBatches(frontier)) {
+            const { results } = await trpc.files.listDirs.query({ paths });
+            for (const [index, current] of paths.entries()) {
+              const res = results[index];
+              if (!res || !res.ok) {
+                const reason = res?.error ?? "not-found";
+                process.stderr.write(
+                  `error: cannot list \`${current || "/"}\`: ${reason}
 `
-          );
-          process.exit(EXIT_RUNTIME_FAILURE);
+                );
+                process.exit(EXIT_RUNTIME_FAILURE);
+              }
+              for (const entry of res.entries) {
+                const path2 = current ? `${current}/${entry.name}` : entry.name;
+                entries.push({ path: path2, type: entry.type });
+                if (opts.recursive && entry.type === "dir")
+                  nextFrontier.push(path2);
+              }
+            }
+          }
+          frontier = nextFrontier;
         }
-        entries = res.entries.map((e2) => ({
-          path: dir ? `${dir}/${e2.name}` : e2.name,
-          type: e2.type
-        }));
       } catch (e2) {
-        printTrpcError(e2, host);
+        if (e2 instanceof DirectoryPathTooLongError) {
+          process.stderr.write(`error: ${e2.message}
+`);
+        } else {
+          printTrpcError(e2, host);
+        }
         process.exit(EXIT_RUNTIME_FAILURE);
       }
+      if (opts.recursive)
+        entries.sort((a, b2) => a.path.localeCompare(b2.path));
       const out = opts.json ? `${JSON.stringify(entries)}
-` : entries.filter((e2) => e2.type === "file").map((e2) => `${e2.path}
+` : entries.map((e2) => `${e2.path}${entrySuffix[e2.type]}
 `).join("");
       return writeStdoutAndExit(out, EXIT_SUCCESS);
     }
@@ -44260,6 +44784,9 @@ function buildCreateCommand3(deps) {
       "--session-mode <mode>",
       "session strategy each tick (default: fresh)"
     ).choices(["fresh", "continuous"])
+  ).option(
+    "--precheck <command>",
+    "shell command run in the workspace before each fire; exit 0 runs, exit 1 skips this occurrence, any other exit means the check broke and the task runs anyway"
   ).option(
     "--server <url>",
     "override the configured server URL for this call"
@@ -44313,7 +44840,8 @@ function buildCreateCommand3(deps) {
       timezone,
       quietHours,
       task: opts.task,
-      ...opts.sessionMode ? { sessionMode: opts.sessionMode } : {}
+      ...opts.sessionMode ? { sessionMode: opts.sessionMode } : {},
+      ...opts.precheck ? { precheck: opts.precheck } : {}
     });
     if (!result.ok) {
       if (result.error.kind === "invalid-input") {
@@ -44471,6 +44999,7 @@ function renderSchedule(view) {
   } else {
     lines.push(`Cron:        ${view.cron ?? ""}`);
   }
+  if (view.precheck) lines.push(`Precheck:    ${view.precheck}`);
   lines.push(`Session:     ${view.sessionMode ?? "fresh"}`);
   lines.push(`Enabled:     ${view.enabled}`);
   lines.push(`Created by:  ${view.createdBy}`);
@@ -44479,6 +45008,18 @@ function renderSchedule(view) {
   if (view.status?.lastResult) {
     lines.push(`Last result: ${view.status.lastResult}`);
   }
+  if (view.precheck && view.status?.declinedCount) {
+    const when = view.status.lastDeclinedAt ? `, last ${view.status.lastDeclinedAt}` : "";
+    lines.push(
+      `Declined:    ${view.status.declinedCount} since the last run${when}`
+    );
+  }
+  if (view.precheck && view.status?.lastPrecheckError) {
+    const inARow = (view.status.precheckFailedCount ?? 0) > 1 ? ` (${view.status.precheckFailedCount} times in a row)` : "";
+    lines.push(
+      `Precheck:    failed${inARow} \u2014 ${view.status.lastPrecheckError}`
+    );
+  }
   return `${lines.join("\n")}
 `;
 }
@@ -44527,7 +45068,7 @@ function buildListCommand6(deps) {
     "override the configured server URL for this call"
   ).option("--json", "emit raw JSON instead of the default table").addHelpText(
     "after",
-    "\nExamples:\n  dam schedule list my-agent\n  dam schedule list agent-abc123 --json\n"
+    "\nExamples:\n  dam schedule list my-agent\n  dam schedule list agent-3f9c2b7e41d08a65 --json\n"
   ).action(async (ref, opts) => {
     const host = await resolveActiveHost(deps, {
       flag: opts.server ? { server: opts.server } : void 0,
@@ -44668,6 +45209,9 @@ function buildUpdateCommand3(deps) {
       ["fresh", "continuous"]
     )
   ).option(
+    "--precheck <command>",
+    "shell command run in the workspace before each fire; exit 0 runs, exit 1 skips this occurrence, any other exit means the check broke and the task runs anyway"
+  ).option("--precheck-none", "remove the schedule's precheck").option(
     "--server <url>",
     "override the configured server URL for this call"
   ).option("--json", "emit the updated schedule as JSON").addHelpText(
@@ -44676,10 +45220,10 @@ function buildUpdateCommand3(deps) {
   ).action(async (id, opts) => {
     const recurrenceGiven = opts.daily !== void 0 || opts.every !== void 0 || opts.rrule !== void 0;
     const quietGiven = opts.quietWindow.length > 0;
-    const anyFlag = opts.name !== void 0 || opts.task !== void 0 || opts.timezone !== void 0 || opts.sessionMode !== void 0 || opts.weekdays !== void 0 || recurrenceGiven || quietGiven;
+    const anyFlag = opts.name !== void 0 || opts.task !== void 0 || opts.timezone !== void 0 || opts.sessionMode !== void 0 || opts.weekdays !== void 0 || opts.precheck !== void 0 || opts.precheckNone === true || recurrenceGiven || quietGiven;
     if (!anyFlag) {
       process.stderr.write(
-        "error: nothing to update \u2014 pass at least one of --name, --task, --daily/--every/--rrule, --weekdays, --timezone, --quiet-window, --session-mode\n"
+        "error: nothing to update \u2014 pass at least one of --name, --task, --daily/--every/--rrule, --weekdays, --timezone, --quiet-window, --session-mode, --precheck, --precheck-none\n"
       );
       process.exit(EXIT_INVALID_INPUT);
     }
@@ -44764,7 +45308,8 @@ function buildUpdateCommand3(deps) {
       timezone: opts.timezone ?? view.timezone ?? detectTimezone(),
       quietHours,
       task: opts.task ?? view.task ?? "",
-      ...sessionMode ? { sessionMode } : {}
+      ...sessionMode ? { sessionMode } : {},
+      precheck: opts.precheckNone ? null : opts.precheck ?? view.precheck
     });
     if (!result.ok) {
       if (result.error.kind === "schedule-not-found") {
@@ -44895,10 +45440,13 @@ function composeScheduleModule(opts) {
 
 // src/modules/skill/domain/source-ref.ts
 function resolveSourceRef(sources, ref) {
-  if (ref.includes("://")) {
-    return sources.find((s) => s.gitUrl === ref) ?? null;
-  }
-  return sources.find((s) => s.id === ref) ?? null;
+  const byId = sources.find((s) => s.id === ref);
+  if (byId) return byId;
+  const normalized = normalizeGitUrl(ref);
+  if (!normalized) return null;
+  return sources.find(
+    (s) => normalizeGitUrl(s.gitUrl)?.gitUrl === normalized.gitUrl
+  ) ?? null;
 }
 function sourceKind(s) {
   if (s.system) return "Platform";
@@ -45407,13 +45955,9 @@ function trimToUndefined(v2) {
 
 // src/modules/skill/domain/source-name.ts
 function deriveSourceName(gitUrl) {
-  let pathname;
-  try {
-    pathname = new URL(gitUrl).pathname;
-  } catch {
-    return "";
-  }
-  return pathname.replace(/^\//, "").replace(/\/$/, "").replace(/\.git$/, "");
+  const normalized = normalizeGitUrl(gitUrl);
+  if (!normalized) return "";
+  return new URL(normalized.gitUrl).pathname.replace(/^\//, "");
 }
 
 // src/modules/skill/commands/source-add.ts
@@ -45426,28 +45970,41 @@ function buildSourceAddCommand(deps) {
     "override the configured server URL for this call"
   ).option("--json", "emit the created SkillSource as JSON").addHelpText(
     "after",
-    "\nThe name defaults to the URL path (github.com/acme/skills \u2192 acme/skills);\npass --name to override. Adding a URL that a Platform or Agent source already\nuses shadows it \u2014 removing your source re-exposes the original.\n\nExamples:\n  dam skill source add https://github.com/anthropics/skills\n  dam skill source add https://github.com/acme/skills --name acme\n  dam skill source add https://github.com/acme/monorepo --path .claude/skills\n"
+    "\nThe URL may be written any usual way \u2014 with or without https://, with a\n.git suffix or a trailing slash, or copied from the address bar including\n/tree/<branch>/<dir>, whose directory becomes the source path.\n\nThe name defaults to the URL path (github.com/acme/skills \u2192 acme/skills);\npass --name to override. Adding a URL that a Platform or Agent source already\nuses shadows it \u2014 removing your source re-exposes the original.\n\nExamples:\n  dam skill source add https://github.com/anthropics/skills\n  dam skill source add https://github.com/acme/skills --name acme\n  dam skill source add https://github.com/acme/monorepo --path .claude/skills\n"
   ).action(
     async (gitUrl, opts) => {
       const json2 = opts.json ?? false;
-      try {
-        new URL(gitUrl);
-      } catch {
-        process.stderr.write(`error: '${gitUrl}' is not a valid URL
-`);
+      const normalized = normalizeGitUrl(gitUrl);
+      if (!normalized) {
+        process.stderr.write(
+          `error: '${gitUrl}' is not a repository URL \u2014 expected something like https://github.com/owner/repo
+`
+        );
         process.exit(EXIT_INVALID_INPUT);
       }
-      const name = await resolveName(gitUrl, opts.name, json2);
-      const nameCheck = skillCreateSourceInputSchema.shape.name.safeParse(name);
+      if (!json2 && normalized.ref !== void 0) {
+        process.stderr.write(
+          `note: branch '${normalized.ref}' in the URL is ignored \u2014 skills are read from the repository default branch
+`
+        );
+      }
+      if (!json2 && normalized.path !== void 0 && opts.path === void 0) {
+        process.stderr.write(
+          `note: scanning '${normalized.path}' from the URL; pass --path to override
+`
+        );
+      }
+      const name = await resolveName(normalized.gitUrl, opts.name, json2);
+      const nameCheck = skillCreateSourceFieldsSchema.shape.name.safeParse(name);
       if (!nameCheck.success) {
         const msg = nameCheck.error.issues[0]?.message ?? "invalid name";
         process.stderr.write(`error: ${msg}
 `);
         process.exit(EXIT_INVALID_INPUT);
       }
-      let path2;
+      let path2 = normalized.path;
       if (opts.path !== void 0) {
-        const pathCheck = skillCreateSourceInputSchema.shape.path.safeParse(
+        const pathCheck = skillCreateSourceFieldsSchema.shape.path.safeParse(
           opts.path
         );
         if (!pathCheck.success) {
@@ -45465,7 +46022,7 @@ function buildSourceAddCommand(deps) {
           belowFloor: EXIT_BELOW_FLOOR
         }
       });
-      const result = await deps.createSkillsService(host).addSource({ name, gitUrl, path: path2 });
+      const result = await deps.createSkillsService(host).addSource({ name, gitUrl: normalized.gitUrl, path: path2 });
       if (!result.ok) {
         if (result.error.kind === "source-exists") {
           process.stderr.write(
@@ -46522,7 +47079,7 @@ function buildMetricsCommand(deps) {
     "override the configured server URL for this call"
   ).option("--json", "emit raw JSON instead of the default report").addHelpText(
     "after",
-    "\nExamples:\n  dam metrics my-agent\n  dam metrics my-agent --session sess-abc123\n  dam metrics agent-abc123 --since 168 --json\n"
+    "\nExamples:\n  dam metrics my-agent\n  dam metrics my-agent --session sess-abc123\n  dam metrics agent-3f9c2b7e41d08a65 --since 168 --json\n"
   ).action(
     async (ref, opts) => {
       const host = await resolveActiveHost(deps, {
@@ -46549,12 +47106,12 @@ function buildMetricsCommand(deps) {
           sessions.value.filter((s) => s.title).map((s) => [s.sessionId, s.title])
         );
       };
-      const sinceHours = opts.since ? Number(opts.since) : void 0;
+      const sinceHours2 = opts.since ? Number(opts.since) : void 0;
       const [result, titles] = await Promise.all([
         deps.createMetricsService(host).overview({
           agentId: agent.id,
           sessionId: opts.session,
-          sinceHours,
+          sinceHours: sinceHours2,
           limit: opts.limit ? Number(opts.limit) : 100
         }),
         fetchTitles().catch(() => /* @__PURE__ */ new Map())
@@ -46570,14 +47127,14 @@ function buildMetricsCommand(deps) {
       }));
       const windowLabel = [
         opts.session && `session ${opts.session}`,
-        sinceHours !== void 0 && `last ${sinceHours}h`
+        sinceHours2 !== void 0 && `last ${sinceHours2}h`
       ].filter(Boolean).join(" \xB7 ") || "all time";
       if (opts.json) {
         return writeStdoutAndExit(
           `${JSON.stringify({
             agentId: agent.id,
             sessionId: opts.session,
-            sinceHours,
+            sinceHours: sinceHours2,
             tokenSpendByModel,
             runtimeBySession,
             contextPerCall
@@ -46713,6 +47270,251 @@ function composeMetricsModule(opts) {
   };
 }
 
+// src/modules/telemetry/commands/telemetry.ts
+var DEFAULT_SINCE_HOURS = TELEMETRY_DEFAULT_SINCE_HOURS;
+var EXPORT_SINCE_HOURS = TELEMETRY_MAX_SINCE_HOURS;
+var InvalidSinceError = class extends Error {
+};
+function sinceHoursOf(raw, fallback) {
+  if (raw === void 0) return fallback;
+  const hours = Number(raw);
+  if (!Number.isFinite(hours) || hours <= 0 || hours > TELEMETRY_MAX_SINCE_HOURS) {
+    throw new InvalidSinceError(
+      `--since must be a positive number of hours up to ${TELEMETRY_MAX_SINCE_HOURS}, got "${raw}"`
+    );
+  }
+  return hours;
+}
+var secs2 = (ms) => `${(ms / 1e3).toFixed(1)}s`;
+var usd = (n) => n > 0 && n < 0.01 ? "<$0.01" : `$${n.toFixed(2)}`;
+async function hostAndAgent(deps, ref, server) {
+  const host = await resolveActiveHost(deps, {
+    flag: server ? { server } : void 0,
+    exitCodes: {
+      runtimeFailure: EXIT_RUNTIME_FAILURE,
+      belowFloor: EXIT_BELOW_FLOOR
+    }
+  });
+  const resolved = await createAgentResolver({
+    agentService: deps.createAgentService(host)
+  }).resolve(ref);
+  if (!resolved.ok) {
+    printResolveError(resolved.error, host);
+    process.exit(exitCodeForResolveError(resolved.error));
+  }
+  return { host, agent: resolved.value };
+}
+function buildTelemetryCommand(deps) {
+  const telemetry = new Command("telemetry").description(
+    "Read an Agent's session telemetry \u2014 the turns it ran, and the records behind them"
+  );
+  telemetry.command("show", { isDefault: true }).description("List the turns a session ran, with their cost and shape").argument("<agent>", "Agent Ref \u2014 name or 'agent-\u2026' ID").requiredOption("--session <id>", "the session to read").option(
+    "--since <hours>",
+    `lookback window in hours (max ${TELEMETRY_MAX_SINCE_HOURS}; default ${DEFAULT_SINCE_HOURS})`
+  ).option(
+    "--server <url>",
+    "override the configured server URL for this call"
+  ).option("--json", "emit raw JSON instead of the default report").addHelpText(
+    "after",
+    "\nExamples:\n  dam telemetry my-agent --session sess-abc123\n  dam telemetry my-agent --session sess-abc123 --since 168 --json\n"
+  ).action(
+    async (ref, opts) => {
+      const { host, agent } = await hostAndAgent(deps, ref, opts.server);
+      let sinceHours2;
+      try {
+        sinceHours2 = sinceHoursOf(opts.since, DEFAULT_SINCE_HOURS);
+      } catch (err3) {
+        process.stderr.write(`${err3.message}
+`);
+        return process.exit(EXIT_INVALID_INPUT);
+      }
+      const result = await deps.createTelemetryService(host).turns({
+        agentId: agent.id,
+        sessionId: opts.session,
+        sinceHours: sinceHours2,
+        limit: 100,
+        spanLimit: 1e3,
+        logLimit: 1e3
+      });
+      if (!result.ok) {
+        printServiceError(result.error, host);
+        process.exit(EXIT_RUNTIME_FAILURE);
+      }
+      if (!result.value.available) {
+        process.stderr.write(`${result.value.reason}
+`);
+        process.exit(EXIT_RUNTIME_FAILURE);
+      }
+      const { turns } = result.value;
+      if (opts.json) {
+        return writeStdoutAndExit(
+          `${JSON.stringify({
+            agentId: agent.id,
+            sessionId: opts.session,
+            sinceHours: sinceHours2,
+            turns
+          })}
+`,
+          EXIT_SUCCESS
+        );
+      }
+      if (turns.length === 0) {
+        process.stderr.write(
+          `No telemetry for ${agent.name} in session ${opts.session} over the last ${sinceHours2}h.
+`
+        );
+        return process.exit(EXIT_SUCCESS);
+      }
+      return writeStdoutAndExit(
+        renderTable([
+          ["started", "duration", "calls", "spans", "records", "cost"],
+          ...turns.map((t) => [
+            t.startedAt,
+            secs2(t.durationMs),
+            String(t.calls),
+            String(t.spanCount),
+            String(t.recordCount),
+            t.costUsd > 0 ? usd(t.costUsd) : "\u2014"
+          ])
+        ]),
+        EXIT_SUCCESS
+      );
+    }
+  );
+  telemetry.command("export").description(
+    "Write a session's telemetry to stdout as newline-delimited JSON"
+  ).argument("<agent>", "Agent Ref \u2014 name or 'agent-\u2026' ID").option("--session <id>", "narrow to one session").option("--signal <signal>", "'logs' or 'spans' (default: logs)", "logs").option(
+    "--since <hours>",
+    `lookback window in hours (max ${TELEMETRY_MAX_SINCE_HOURS}; default ${EXPORT_SINCE_HOURS})`
+  ).option(
+    "--server <url>",
+    "override the configured server URL for this call"
+  ).addHelpText(
+    "after",
+    "\nExamples:\n  dam telemetry export my-agent --session sess-abc123 > telemetry.ndjson\n  dam telemetry export my-agent --signal spans | jq -s 'group_by(.name)'\n"
+  ).action(
+    async (ref, opts) => {
+      if (opts.signal !== "logs" && opts.signal !== "spans") {
+        process.stderr.write("--signal must be 'logs' or 'spans'\n");
+        return process.exit(EXIT_INVALID_INPUT);
+      }
+      const { host, agent } = await hostAndAgent(deps, ref, opts.server);
+      let sinceHours2;
+      try {
+        sinceHours2 = sinceHoursOf(opts.since, EXPORT_SINCE_HOURS);
+      } catch (err3) {
+        process.stderr.write(`${err3.message}
+`);
+        return process.exit(EXIT_INVALID_INPUT);
+      }
+      const outcome = await deps.createExportClient(host).run({
+        agentId: agent.id,
+        ...opts.session === void 0 ? {} : { sessionId: opts.session },
+        signal: opts.signal,
+        sinceHours: sinceHours2
+      });
+      if (outcome.kind === "failed") {
+        process.stderr.write(
+          `Export failed (${outcome.status}): ${outcome.reason}
+`
+        );
+        return process.exit(EXIT_RUNTIME_FAILURE);
+      }
+      if (outcome.truncated) {
+        process.stderr.write(
+          "Export hit the row cap \u2014 narrow --since or --session for the rest.\n"
+        );
+      }
+      return writeStdoutAndExit(outcome.body, EXIT_SUCCESS);
+    }
+  );
+  return telemetry;
+}
+
+// src/modules/telemetry/infrastructure/export-client.ts
+function exportPath(req) {
+  const params = new URLSearchParams({
+    agentId: req.agentId,
+    signal: req.signal,
+    sinceHours: String(req.sinceHours)
+  });
+  if (req.sessionId !== void 0) params.set("sessionId", req.sessionId);
+  return `/api/telemetry/export?${params.toString()}`;
+}
+function createExportClient(deps) {
+  const doFetch = deps.fetch ?? globalThis.fetch;
+  return {
+    async run(req) {
+      const token = await deps.getToken();
+      if (token === null) {
+        return { kind: "failed", status: 401, reason: "not logged in" };
+      }
+      const res = await doFetch(
+        new URL(exportPath(req), deps.host).toString(),
+        {
+          headers: { authorization: `Bearer ${token}` }
+        }
+      );
+      if (!res.ok) {
+        return {
+          kind: "failed",
+          status: res.status,
+          reason: await failureReason(res)
+        };
+      }
+      return {
+        kind: "ok",
+        body: await res.text(),
+        truncated: res.headers.get("x-platform-truncated") === "true"
+      };
+    }
+  };
+}
+async function failureReason(res) {
+  try {
+    const body = await res.json();
+    if (typeof body === "object" && body !== null && typeof body.error === "string") {
+      return body.error;
+    }
+  } catch {
+    return res.statusText;
+  }
+  return res.statusText;
+}
+
+// src/modules/telemetry/services/telemetry-service.ts
+function createTelemetryService(deps) {
+  return {
+    async turns(query) {
+      return trpcCall(() => deps.trpc.telemetry.turns.query(query));
+    }
+  };
+}
+
+// src/modules/telemetry/compose.ts
+function composeTelemetryModule(opts) {
+  return {
+    commands: [
+      buildTelemetryCommand({
+        compatService: opts.compatService,
+        configService: opts.configService,
+        tokenProvider: opts.tokenProvider,
+        createAgentService: opts.createAgentService,
+        createTelemetryService: (host) => createTelemetryService({
+          trpc: createTrpcClient({ host, tokenProvider: opts.tokenProvider })
+        }),
+        createExportClient: (host) => createExportClient({
+          host,
+          getToken: async () => {
+            const token = await opts.tokenProvider.getValidAccessToken(host);
+            return token.ok ? token.value : null;
+          }
+        })
+      })
+    ]
+  };
+}
+
 // src/modules/template/commands/list.ts
 var DESCRIPTION_MAX = 60;
 function buildListCommand8(deps) {
@@ -47147,6 +47949,12 @@ function compose(opts = {}) {
     compatService: cli.services.compatService,
     createAgentService: agent.exports.createService
   });
+  const telemetry = composeTelemetryModule({
+    tokenProvider: auth.exports.tokenProvider,
+    configService: cli.services.configService,
+    compatService: cli.services.compatService,
+    createAgentService: agent.exports.createService
+  });
   const terms = composeTermsModule({
     tokenProvider: auth.exports.tokenProvider,
     configService: cli.services.configService,
@@ -47169,6 +47977,7 @@ function compose(opts = {}) {
   for (const command of ssh.commands) program3.addCommand(command);
   for (const command of channel.commands) program3.addCommand(command);
   for (const command of metrics.commands) program3.addCommand(command);
+  for (const command of telemetry.commands) program3.addCommand(command);
   for (const command of terms.commands) program3.addCommand(command);
   return program3;
 }
@@ -47198,9 +48007,9 @@ try {
 @trpc/client/dist/httpBatchLink-CaWjh1oW.mjs:
   (* istanbul ignore if -- @preserve *)
 
+smol-toml/dist/date.js:
 smol-toml/dist/error.js:
 smol-toml/dist/util.js:
-smol-toml/dist/date.js:
 smol-toml/dist/primitive.js:
 smol-toml/dist/extract.js:
 smol-toml/dist/struct.js: