npm - @lazehq/cli - Versions diffs - 0.1.1 → 0.1.3 - Mend

@lazehq/cli 0.1.1 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/laze.mjs CHANGED Viewed

@@ -1,14 +1,328 @@
 #!/usr/bin/env node
 var __defProp = Object.defineProperty;
 var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
+  for (var name2 in all)
+    __defProp(target, name2, { get: all[name2], enumerable: true });
 };
 // src/main.ts
-import { spawn as spawn2 } from "node:child_process";
 import { stdin } from "node:process";
+// ../../packages/secret-guard/src/detector/secret-detector.ts
+var REDACTION_MARKER = "[SECRET]";
+function charClasses(value) {
+  let lower = 0;
+  let upper = 0;
+  let digit = 0;
+  for (let index = 0; index < value.length; index++) {
+    const code = value.charCodeAt(index);
+    if (code >= 97 && code <= 122) lower++;
+    else if (code >= 65 && code <= 90) upper++;
+    else if (code >= 48 && code <= 57) digit++;
+  }
+  return { lower, upper, digit };
+}
+function shannonEntropyBits(value) {
+  const sample = value.slice(0, 256).split("");
+  if (sample.length === 0) return 0;
+  const counts = /* @__PURE__ */ new Map();
+  for (const char of sample) counts.set(char, (counts.get(char) ?? 0) + 1);
+  let entropy = 0;
+  for (const count2 of counts.values()) {
+    const p = count2 / sample.length;
+    entropy -= p * Math.log2(p);
+  }
+  return entropy;
+}
+var SHAPED_MIN_BODY = 26;
+var SHAPED_MAX_BODY = 120;
+function isKeyShapedBody(body) {
+  if (body.length < SHAPED_MIN_BODY || body.length > SHAPED_MAX_BODY) return false;
+  const c = charClasses(body);
+  if (c.lower < 2 || c.upper < 2 || c.digit < 2) return false;
+  return shannonEntropyBits(body) >= 3.9;
+}
+var DIGEST_PREFIXES = new Set(
+  "sha1 sha224 sha256 sha384 sha512 sha3 md4 md5 blake2b blake2s blake3 crc32 xxh3 xxh64 base32 base58 base64 hex uuid urn cid etag hash digest checksum integrity".split(
+    " "
+  )
+);
+var HEX_BODY_CREDENTIAL_SEGMENTS = ["live", "test", "prod", "sk", "pk", "key", "secret", "token"];
+var IDENTIFIER_PREFIXES = new Set(
+  "commit sha sha1 sha256 md5 hash digest trace span id uuid rev blob tree etag checksum".split(
+    " "
+  )
+);
+var RECORD_ID_PREFIXES = new Set(
+  "project provider card eval monitor scenario ses sess session thread conv span trace run msg task job step node team org user call req resp chatcmpl toolu asst file batch evt acct cus sub".split(
+    " "
+  )
+);
+var PUBLIC_KEY_PREFIXES = /* @__PURE__ */ new Set(["phc"]);
+function isNonCredentialPrefix(prefix) {
+  const lower = prefix.toLowerCase();
+  return DIGEST_PREFIXES.has(lower) || IDENTIFIER_PREFIXES.has(lower) || RECORD_ID_PREFIXES.has(lower) || PUBLIC_KEY_PREFIXES.has(lower);
+}
+var PLACEHOLDER_VALUE = /^(?:x+|\*+|\.+|-+|_+|0+|(?:your|my|our|insert|replace|example|sample|dummy|fake|placeholder|changeme|redacted|removed|hidden|none|null|nil|undefined|todo|tbd|fixme)[a-z0-9_\- ]*)$/i;
+var ENV_REFERENCE = /^(?:\$[A-Za-z_][A-Za-z0-9_]*|[A-Z][A-Z0-9]*(?:_[A-Z0-9]+)+)$/;
+var CODE_EXPRESSION = /^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)+$/;
+var PATH_LIKE = /^[~.]{0,2}\/|\/[^/\s]*\.[a-z]{1,5}$/;
+var URL_LIKE = /^[a-z][a-z0-9+.-]*:\/\//i;
+var VERSION_LIKE = /^v?\d+(?:[._-]\d+)+/;
+var HEX = /^[0-9a-f]{32,}$/i;
+var BASE32 = /^[A-Z2-7]{32,}={0,6}$/;
+var STRICT_INTRODUCTION = /[:=]\s*["'`]?$/;
+var NOT_A_CREDENTIAL = [PLACEHOLDER_VALUE, ENV_REFERENCE, CODE_EXPRESSION, PATH_LIKE, URL_LIKE];
+function isCredentialValue(value) {
+  if (value.length < 16) return false;
+  const looksLikeSomethingElse = NOT_A_CREDENTIAL.some((shape) => shape.test(value));
+  if (looksLikeSomethingElse) return false;
+  if (value.includes(REDACTION_MARKER)) return false;
+  return shannonEntropyBits(value) >= 2.9;
+}
+function isKeyMaterial(value) {
+  if (value.length < 20 || !isCredentialValue(value) || VERSION_LIKE.test(value)) return false;
+  if (shannonEntropyBits(value) < 3.4) return false;
+  if (HEX.test(value) || BASE32.test(value)) return true;
+  const c = charClasses(value);
+  return c.digit >= 2 && (c.lower >= 2 || c.upper >= 2);
+}
+function isBasicAuthPayload(value) {
+  if (value.endsWith("=")) return true;
+  const c = charClasses(value);
+  return c.digit > 0 || c.lower > 0 && c.upper > 0;
+}
+var CREDENTIAL_QUALIFIERS = "master|encryption|signing|private|access|api|auth|secret|refresh|session|bearer|verification|webhook|client|service|personal|root|admin";
+var CREDENTIAL_KEYWORD = `(?:x[_.\\- ]?)?(?:(?:${CREDENTIAL_QUALIFIERS})[_.\\- ]?(?:api[_.\\- ]?)?key|(?:${CREDENTIAL_QUALIFIERS})?[_.\\- ]?(?:api[_.\\- ]?)?(?:token|secret|password|passwd|pwd|credentials?|authorization|cookie))`;
+var TOKEN_START = "(?<![A-Za-z0-9_-])";
+var TOKEN_END = "(?![A-Za-z0-9_-])";
+var VENDOR_KEY_PATTERNS = [
+  String.raw`(?:sk|ik|pat|vk)-lw-[A-Za-z0-9_-]{3,}`,
+  String.raw`gl(?:pat|rt|dt|soat|ptt|cbt|imt|agent|ffct)-[A-Za-z0-9_-]{20,}`,
+  String.raw`npm_[A-Za-z0-9]{36}`,
+  String.raw`GOCSPX-[A-Za-z0-9_-]{20,}`,
+  String.raw`mb_[A-Za-z0-9+/=]{40,}`,
+  String.raw`dckr_pat_[A-Za-z0-9_-]{20,}`,
+  String.raw`shp(?:at|ss|ca|pa)_[0-9a-fA-F]{32}`,
+  String.raw`SG\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}`,
+  String.raw`hf_[A-Za-z0-9]{30,}`,
+  String.raw`gsk_[A-Za-z0-9]{40,}`,
+  String.raw`pplx-[A-Za-z0-9]{30,}`,
+  String.raw`nvapi-[A-Za-z0-9_-]{40,}`,
+  String.raw`r8_[A-Za-z0-9]{30,}`,
+  String.raw`xai-[A-Za-z0-9]{40,}`,
+  String.raw`ntn_[A-Za-z0-9]{30,}`,
+  String.raw`secret_[A-Za-z0-9]{40,}`,
+  String.raw`dop_v1_[0-9a-f]{64}`,
+  String.raw`figd_[A-Za-z0-9_-]{30,}`,
+  String.raw`ATATT[A-Za-z0-9_=-]{100,}`,
+  String.raw`sq0(?:atp|csp)-[A-Za-z0-9_-]{20,}`,
+  String.raw`EAAG[A-Za-z0-9]{60,}`,
+  String.raw`key-[0-9a-f]{32}`,
+  String.raw`re_[A-Za-z0-9_-]{20,}`,
+  String.raw`phx_[A-Za-z0-9]{30,}`,
+  String.raw`lin_api_[A-Za-z0-9]{30,}`,
+  String.raw`sl\.[A-Za-z0-9_-]{60,}`,
+  String.raw`ya29\.[A-Za-z0-9_-]{20,}`,
+  String.raw`sbp_[0-9a-f]{40,}`,
+  String.raw`sntry(?:s|u)_[A-Za-z0-9_.-]{30,}`,
+  String.raw`fw_[A-Za-z0-9]{20,}`,
+  String.raw`gl(?:c|sa)_[A-Za-z0-9]{30,}`,
+  String.raw`NRAK-[A-Za-z0-9]{20,}`,
+  String.raw`PMAK-[A-Za-z0-9]{20,}-[A-Za-z0-9]{20,}`,
+  String.raw`dp\.(?:pt|st|ct|sa)\.[A-Za-z0-9_-]{20,}`,
+  String.raw`pat[A-Za-z0-9]{14}\.[0-9a-f]{64}`,
+  String.raw`[0-9]{8,10}:AA[A-Za-z0-9_-]{33}`
+];
+function rx(pattern, flags = "") {
+  return new RegExp(pattern, `gd${flags}`);
+}
+function groupOf(match, index) {
+  return match[index] ?? "";
+}
+var RULES = [
+  {
+    id: "pem_private_key",
+    regex: rx(
+      String.raw`-----BEGIN (?:RSA |EC |DSA |OPENSSH |PGP |ENCRYPTED )?PRIVATE KEY(?: BLOCK)?-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH |PGP |ENCRYPTED )?PRIVATE KEY(?: BLOCK)?-----`
+    )
+  },
+  { id: "putty_private_key", regex: rx(String.raw`PuTTY-User-Key-File-\d+:[\s\S]*?(?:\n\s*\n|$)`) },
+  {
+    id: "kubeconfig_client_credentials",
+    regex: rx(String.raw`\b(client-(?:key|certificate)-data:\s*)[A-Za-z0-9+/=]{40,}`),
+    value: { kind: "after", group: 1 }
+  },
+  {
+    id: "aws_access_key_id",
+    regex: rx(String.raw`\b(?:AKIA|ASIA|AGPA|AIDA|AROA|ANPA|ANVA)[0-9A-Z]{16}\b`)
+  },
+  {
+    id: "github_token",
+    regex: rx(String.raw`\b(?:gh[posru]_[A-Za-z0-9]{36,}|github_pat_[A-Za-z0-9_]{60,})\b`)
+  },
+  { id: "provider_api_key", regex: rx(String.raw`\bsk-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])`) },
+  { id: "stripe_secret_key", regex: rx(String.raw`\b[rs]k_(?:live|test)_[A-Za-z0-9]{16,}\b`) },
+  { id: "slack_token", regex: rx(String.raw`\bxox[abposr]-[A-Za-z0-9-]{10,}\b`) },
+  { id: "google_api_key", regex: rx(String.raw`\bAIza[0-9A-Za-z_-]{35}\b`) },
+  {
+    id: "vendor_api_key",
+    regex: rx(`${TOKEN_START}(?:${VENDOR_KEY_PATTERNS.join("|")})${TOKEN_END}`)
+  },
+  {
+    id: "jwt",
+    regex: rx(String.raw`\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b`)
+  },
+  {
+    id: "url_credentials",
+    regex: rx(String.raw`(?<=[a-z][a-z0-9+.-]{0,30})(:\/\/[^\s:@/]+:)([^\s:@/]+)(@)`, "i"),
+    value: { kind: "group", group: 2 },
+    precededBy: /[a-z][a-z0-9+.-]{0,30}$/i
+  },
+  {
+    id: "bearer_token",
+    regex: rx(String.raw`\b(Bearer\s+)[A-Za-z0-9._~+/-]{10,}=*`, "i"),
+    value: { kind: "after", group: 1 }
+  },
+  {
+    id: "authorization_scheme_token",
+    regex: rx(
+      String.raw`\b(Authorization:\s*(?:Token|SSWS|GenieKey|Splunk|OAuth)\s+)[A-Za-z0-9._~+/-]{10,}=*`,
+      "i"
+    ),
+    value: { kind: "after", group: 1 }
+  },
+  {
+    id: "basic_auth_credentials",
+    regex: rx(String.raw`\b(Basic\s+)([A-Za-z0-9+/]{16,}={0,2})(?![A-Za-z0-9+/=])`),
+    value: { kind: "after", group: 1 },
+    accept: (match) => isBasicAuthPayload(groupOf(match, 2))
+  },
+  {
+    id: "prefixed_hex_api_key",
+    regex: rx(
+      `${TOKEN_START}([A-Za-z][A-Za-z0-9]{1,11})_(?:${HEX_BODY_CREDENTIAL_SEGMENTS.join("|")})_([0-9a-f]{24,128})${TOKEN_END}`,
+      "i"
+    ),
+    accept: (match) => !IDENTIFIER_PREFIXES.has(groupOf(match, 1).toLowerCase()),
+    precondition: (text2) => text2.includes("_")
+  },
+  {
+    id: "shaped_api_key",
+    regex: rx(
+      `${TOKEN_START}([A-Za-z][A-Za-z0-9]{1,11})[_-]([A-Za-z0-9_+/-]{${SHAPED_MIN_BODY},})${TOKEN_END}`
+    ),
+    accept: (match) => !isNonCredentialPrefix(groupOf(match, 1)) && isKeyShapedBody(groupOf(match, 2)),
+    precondition: (text2) => text2.includes("_") || text2.includes("-")
+  },
+  {
+    id: "sensitive_assignment",
+    regex: rx(
+      String.raw`((?:^|[\W_])(?:${CREDENTIAL_KEYWORD})(?:\s+[A-Za-z]{1,8}){0,2}["'` + "`" + String.raw`]?(?:\s*[:=]{1,2}\s*|[ \t?-]+)["'` + "`" + String.raw`]?)([^\s"'` + "`" + String.raw`,;<>(){}\[\]\\]{16,})`,
+      "i"
+    ),
+    value: { kind: "group", group: 2 },
+    accept: (match) => {
+      const introduction = groupOf(match, 1);
+      const value = groupOf(match, 2);
+      return STRICT_INTRODUCTION.test(introduction) ? isCredentialValue(value) : isKeyMaterial(value);
+    }
+  }
+];
+var SECRET_RULE_IDS = RULES.map((rule) => rule.id);
+// ../../packages/secret-guard/src/redaction/redactor.ts
+var REDACTED = "****";
+var MIN_REDACTED_LENGTH = 4;
+function redactionVariants({ values }) {
+  const variants = /* @__PURE__ */ new Set();
+  for (const value of values) {
+    if (value.length < MIN_REDACTED_LENGTH) continue;
+    variants.add(value);
+    variants.add(Buffer.from(value, "utf8").toString("base64"));
+    variants.add(encodeURIComponent(value));
+  }
+  return [...variants].toSorted((a, b) => b.length - a.length);
+}
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function createRedactor({ values }) {
+  const variants = redactionVariants({ values });
+  if (variants.length === 0) return { push: (chunk) => chunk, flush: () => "" };
+  const pattern = new RegExp(variants.map(escapeRegExp).join("|"), "g");
+  const hold = Math.max(...variants.map((variant) => variant.length)) - 1;
+  let carry = "";
+  const scan = (text2, limit) => {
+    let out = "";
+    let at = 0;
+    pattern.lastIndex = 0;
+    for (const match of text2.matchAll(pattern)) {
+      if (match.index >= limit) break;
+      if (match.index < at) continue;
+      out += text2.slice(at, match.index) + REDACTED;
+      at = match.index + match[0].length;
+    }
+    const emitUntil = Math.max(at, limit);
+    carry = text2.slice(emitUntil);
+    return out + text2.slice(at, emitUntil);
+  };
+  return {
+    push(chunk) {
+      const text2 = carry + chunk;
+      return scan(text2, Math.max(0, text2.length - hold));
+    },
+    flush() {
+      const text2 = carry;
+      const out = scan(text2, text2.length);
+      carry = "";
+      return out;
+    }
+  };
+}
+// ../../packages/secret-guard/src/run/run-redacted.ts
+import { spawn } from "node:child_process";
+import { StringDecoder } from "node:string_decoder";
+function runRedacted({
+  command,
+  env,
+  baseEnv,
+  stdout,
+  stderr,
+  cwd
+}) {
+  const values = Object.values(env);
+  return new Promise((resolve6, reject) => {
+    const [file2, ...args] = command;
+    const child = spawn(file2, args, {
+      env: { ...baseEnv, ...env },
+      stdio: ["inherit", "pipe", "pipe"],
+      ...cwd ? { cwd } : {}
+    });
+    const pipe2 = (stream, sink) => {
+      const decoder = new StringDecoder("utf8");
+      const redactor = createRedactor({ values });
+      stream.on("data", (chunk) => sink.write(redactor.push(decoder.write(chunk))));
+      return new Promise(
+        (done) => stream.on("end", () => {
+          sink.write(redactor.push(decoder.end()) + redactor.flush());
+          done();
+        })
+      );
+    };
+    const drained = Promise.all([pipe2(child.stdout, stdout), pipe2(child.stderr, stderr)]);
+    child.on("error", reject);
+    child.on("close", (code, signal) => {
+      void drained.then(() => resolve6(code ?? (signal ? 128 + signalNumber(signal) : 1)));
+    });
+  });
+}
+function signalNumber(signal) {
+  const numbers = { SIGINT: 2, SIGKILL: 9, SIGTERM: 15 };
+  return numbers[signal] ?? 1;
+}
 // ../../node_modules/.pnpm/temporal-polyfill@1.0.4/node_modules/temporal-polyfill/chunks/root.js
 var NativeTemporal = globalThis.Temporal;
@@ -18,7 +332,7 @@ var expectedFinite = (entityName, num) => `Non-finite ${entityName}: ${num}`;
 var forbiddenBigIntToNumber = (entityName) => `Cannot convert bigint to ${entityName}`;
 var invalidObject = "Invalid object";
 var numberOutOfRange = (entityName, val, min, max) => invalidEntity(entityName, val) + `; must be between ${min}-${max}`;
-var invalidEntity = (fieldName, val) => `Invalid ${fieldName}: ${val}`;
+var invalidEntity = (fieldName3, val) => `Invalid ${fieldName3}: ${val}`;
 // ../../node_modules/.pnpm/temporal-utils@1.0.2/node_modules/temporal-utils/dist/utils.js
 var nanoInMicro = 1e3;
@@ -69,10 +383,10 @@ function requireObjectLike(arg) {
 // ../../node_modules/.pnpm/temporal-polyfill@1.0.4/node_modules/temporal-polyfill/chunks/internal.js
 var invalidEntity2 = invalidEntity;
-var missingField = (fieldName) => `Missing ${fieldName}`;
+var missingField = (fieldName3) => `Missing ${fieldName3}`;
 var noValidFields = (validFields) => "No valid fields: " + validFields.join();
 var invalidBag = "Invalid bag";
-var invalidChoice = (fieldName, val, choiceMap) => invalidEntity(fieldName, val) + "; must be " + Object.keys(choiceMap).join();
+var invalidChoice = (fieldName3, val, choiceMap) => invalidEntity(fieldName3, val) + "; must be " + Object.keys(choiceMap).join();
 var forbiddenValueOf = "Cannot use valueOf";
 var invalidCallingContext = "Invalid calling context";
 var missingYear = (allowEra) => "Missing year" + (allowEra ? "/era/eraYear" : "");
@@ -111,8 +425,8 @@ function memoize(generator, MapClass = Map) {
     return map2.set(key, val), val;
   };
 }
-var createNameDescriptors = (name) => createPropDescriptors({
-  name
+var createNameDescriptors = (name2) => createPropDescriptors({
+  name: name2
 }, 1);
 var createPropDescriptors = (propVals, readonly2) => mapProps((value) => ({
   value,
@@ -324,8 +638,8 @@ var maxValues = {
 };
 function constrainTimeFields(timeFields, overflow) {
   const constrainedFields = {};
-  for (const fieldName of timeFieldNamesAsc) {
-    constrainedFields[fieldName] = clampEntity(fieldName, timeFields[fieldName], 0, maxValues[fieldName] || 999, overflow);
+  for (const fieldName3 of timeFieldNamesAsc) {
+    constrainedFields[fieldName3] = clampEntity(fieldName3, timeFields[fieldName3], 0, maxValues[fieldName3] || 999, overflow);
   }
   return constrainedFields;
 }
@@ -1479,15 +1793,15 @@ function negateDuration(slots) {
 }
 function negateDurationFields(fields) {
   const res = {};
-  for (const fieldName of durationFieldNamesAsc) {
-    res[fieldName] = -1 * fields[fieldName] || 0;
+  for (const fieldName3 of durationFieldNamesAsc) {
+    res[fieldName3] = -1 * fields[fieldName3] || 0;
   }
   return res;
 }
 function computeDurationSign(fields, fieldNames = durationFieldNamesAsc) {
   let sign = 0;
-  for (const fieldName of fieldNames) {
-    const fieldSign = Math.sign(fields[fieldName]);
+  for (const fieldName3 of fieldNames) {
+    const fieldSign = Math.sign(fields[fieldName3]);
     fieldSign && (sign && sign !== fieldSign && throwRangeError("Cannot mix duration signs"), sign = fieldSign);
   }
   return sign;
@@ -1675,14 +1989,14 @@ var zonedDateTimeFieldRefiners = {
 function readAndRefineBagFields(bag, validFieldNames, fieldRefiners, requiredFieldNames, disallowEmpty = !requiredFieldNames) {
   const res = {};
   let anyMatching = 0;
-  for (const fieldName of validFieldNames) {
-    let fieldVal = bag[fieldName];
+  for (const fieldName3 of validFieldNames) {
+    let fieldVal = bag[fieldName3];
     if (void 0 !== fieldVal) {
       anyMatching = 1;
-      const refiner = fieldRefiners[fieldName];
-      refiner && (fieldVal = refiner(fieldVal, fieldName)), res[fieldName] = fieldVal;
+      const refiner = fieldRefiners[fieldName3];
+      refiner && (fieldVal = refiner(fieldVal, fieldName3)), res[fieldName3] = fieldVal;
     } else {
-      requiredFieldNames && requiredFieldNames.includes(fieldName) && throwTypeError(missingField(fieldName));
+      requiredFieldNames && requiredFieldNames.includes(fieldName3) && throwTypeError(missingField(fieldName3));
     }
   }
   return disallowEmpty && !anyMatching && throwTypeError(noValidFields(validFieldNames)), res;
@@ -2392,8 +2706,8 @@ function organizeAnnotationParts(s) {
   const calendarIds = [];
   return s.replace(annotationRegExp, (whole, criticalStr, mainStr) => {
     const isCritical = Boolean(criticalStr);
-    const [val, name] = mainStr.split("=").reverse();
-    return name ? "u-ca" === name ? (calendarIds.push(val.toLowerCase()), calendarIsCritical || (calendarIsCritical = isCritical)) : (isCritical || /[A-Z]/.test(name)) && throwRangeError(invalidSubstring(whole)) : (timeZoneId && throwRangeError(invalidSubstring(whole)), timeZoneId = val), "";
+    const [val, name2] = mainStr.split("=").reverse();
+    return name2 ? "u-ca" === name2 ? (calendarIds.push(val.toLowerCase()), calendarIsCritical || (calendarIsCritical = isCritical)) : (isCritical || /[A-Z]/.test(name2)) && throwRangeError(invalidSubstring(whole)) : (timeZoneId && throwRangeError(invalidSubstring(whole)), timeZoneId = val), "";
   }), calendarIds.length > 1 && calendarIsCritical && throwRangeError(invalidSubstring(s)), {
     timeZoneId,
     calendarId: calendarIds[0] || "iso8601"
@@ -2583,9 +2897,9 @@ function createOptionsTransformer(shapeFieldNames, invalidShapeFieldNames, ignor
     const otherFields = {};
     let hasInvalidGranularShapeFields = 0;
     let hasInvalidStyleFields = 0;
-    for (const name of Object.keys(options)) {
-      const value = options[name];
-      void 0 === value || ignoredFieldNameSet.has(name) || (shapeFieldNameSet.has(name) ? "dateStyle" === name ? dateStyle = value : "timeStyle" === name ? timeStyle = value : granularShapeFields[name] = value : "era" === name ? modifierFields[name] = value : invalidShapeFieldNameSet.has(name) ? "dateStyle" === name || "timeStyle" === name ? hasInvalidStyleFields = 1 : hasInvalidGranularShapeFields = 1 : otherFields[name] = value);
+    for (const name2 of Object.keys(options)) {
+      const value = options[name2];
+      void 0 === value || ignoredFieldNameSet.has(name2) || (shapeFieldNameSet.has(name2) ? "dateStyle" === name2 ? dateStyle = value : "timeStyle" === name2 ? timeStyle = value : granularShapeFields[name2] = value : "era" === name2 ? modifierFields[name2] = value : invalidShapeFieldNameSet.has(name2) ? "dateStyle" === name2 || "timeStyle" === name2 ? hasInvalidStyleFields = 1 : hasInvalidGranularShapeFields = 1 : otherFields[name2] = value);
     }
     const hasDateStyle = void 0 !== dateStyle;
     const hasTimeStyle = void 0 !== timeStyle;
@@ -3751,7 +4065,7 @@ function harnessOf({
 }) {
   if (env.CLAUDECODE === "1") return "claude-code";
   const names = Object.keys(env);
-  return names.some((name) => name.startsWith("CODEX_")) ? "codex" : "other";
+  return names.some((name2) => name2.startsWith("CODEX_")) ? "codex" : "other";
 }
 function cliEnvironment({
   env = process.env
@@ -3796,27 +4110,27 @@ var ConfigStore = class _ConfigStore {
     await rename(temporary, this.path);
   }
   async saveProfile({
-    name,
+    name: name2,
     profile,
     bindDirectory
   }) {
     const config2 = await this.read();
     await this.write({
-      current: bindDirectory ? config2.current ?? name : name,
-      profiles: { ...config2.profiles, [name]: profile },
-      bindings: bindDirectory ? { ...config2.bindings, [resolve(bindDirectory)]: name } : config2.bindings
+      current: bindDirectory ? config2.current ?? name2 : name2,
+      profiles: { ...config2.profiles, [name2]: profile },
+      bindings: bindDirectory ? { ...config2.bindings, [resolve(bindDirectory)]: name2 } : config2.bindings
     });
   }
-  async removeProfile({ name }) {
+  async removeProfile({ name: name2 }) {
     const config2 = await this.read();
-    if (!config2.profiles[name]) return false;
+    if (!config2.profiles[name2]) return false;
     const profiles = Object.fromEntries(
-      Object.entries(config2.profiles).filter(([key]) => key !== name)
+      Object.entries(config2.profiles).filter(([key]) => key !== name2)
     );
     const bindings = Object.fromEntries(
-      Object.entries(config2.bindings).filter(([, bound]) => bound !== name)
+      Object.entries(config2.bindings).filter(([, bound]) => bound !== name2)
     );
-    const current = config2.current === name ? Object.keys(profiles)[0] : config2.current;
+    const current = config2.current === name2 ? Object.keys(profiles)[0] : config2.current;
     await this.write({ current, profiles, bindings });
     return true;
   }
@@ -3828,9 +4142,9 @@ function chooseProfile({
   cwd
 }) {
   const bound = boundProfileOf({ bindings: config2.bindings, cwd });
-  const name = flag || environment || bound || config2.current;
-  const profile = name ? config2.profiles[name] : void 0;
-  return name && profile ? { name, profile } : { name: void 0, profile: void 0 };
+  const name2 = flag || environment || bound || config2.current;
+  const profile = name2 ? config2.profiles[name2] : void 0;
+  return name2 && profile ? { name: name2, profile } : { name: void 0, profile: void 0 };
 }
 function boundProfileOf({
   bindings,
@@ -3857,15 +4171,16 @@ var SWITCHES = /* @__PURE__ */ new Set([
   "once",
   "urgent",
   "reopen",
-  "ask-before-push"
+  "ask-before-push",
+  "dry-run"
 ]);
 function parseArgs({ argv }) {
   const words = [];
   const flags = {};
   const lists = {};
-  const remember = (name, value) => {
-    flags[name] = value;
-    lists[name] = [...lists[name] ?? [], value];
+  const remember = (name2, value) => {
+    flags[name2] = value;
+    lists[name2] = [...lists[name2] ?? [], value];
   };
   for (let index = 0; index < argv.length; index += 1) {
     const arg = argv[index] ?? "";
@@ -3874,12 +4189,12 @@ function parseArgs({ argv }) {
       words.push(arg);
       continue;
     }
-    const [name = "", inline] = arg.slice(2).split(/=(.*)/s, 2);
+    const [name2 = "", inline] = arg.slice(2).split(/=(.*)/s, 2);
     const next = argv[index + 1];
-    if (inline !== void 0) remember(name, inline);
-    else if (SWITCHES.has(name) || next === void 0 || next.startsWith("--")) flags[name] = true;
+    if (inline !== void 0) remember(name2, inline);
+    else if (SWITCHES.has(name2) || next === void 0 || next.startsWith("--")) flags[name2] = true;
     else {
-      remember(name, next);
+      remember(name2, next);
       index += 1;
     }
   }
@@ -3887,25 +4202,26 @@ function parseArgs({ argv }) {
 }
 function flagText({
   args,
-  name,
+  name: name2,
   fallback = ""
 }) {
-  const value = args.flags[name];
+  const value = args.flags[name2];
   return typeof value === "string" ? value : fallback;
 }
 // src/rules/cli-version.rules.ts
-var STAMPED = "0.1.1";
+var STAMPED = "0.1.3";
 function cliVersionOf({ stamped = STAMPED } = {}) {
   return stamped.startsWith("__") ? "dev" : stamped;
 }
 // src/services/agent-commands.service.ts
-import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join2 } from "node:path";
+import { mkdir as mkdir3, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
+import { join as join3 } from "node:path";
 // src/rules/cli-invocation.rules.ts
 var NPX_CACHE = /[\\/]_npx[\\/]/;
+var SANDBOX_CLI_PATH = "/opt/laze/laze.mjs";
 function lazeCommandOf({ program }) {
   const script = program.at(-1) ?? "";
   if (!NPX_CACHE.test(script)) return "laze";
@@ -3914,24 +4230,35 @@ function lazeCommandOf({ program }) {
 // src/rules/hook-settings.rules.ts
 var LAZE_HOOK_MARKER = "laze-cli-hook";
-function withStopHook({
-  settings,
+var TIMEOUTS = { Stop: 30, PreToolUse: 5 };
+function withHook({
+  hooks,
+  event,
   command
 }) {
-  const hooks = { ...settings.hooks };
-  const stop = Array.isArray(hooks.Stop) ? hooks.Stop : [];
-  const others = stop.filter(
+  const current = Array.isArray(hooks[event]) ? hooks[event] : [];
+  const others = current.filter(
     (entry) => !entry.hooks?.some((hook) => hook.command?.includes(LAZE_HOOK_MARKER))
   );
-  hooks.Stop = [...others, { hooks: [{ type: "command", command, timeout: 30 }] }];
+  hooks[event] = [...others, { hooks: [{ type: "command", command, timeout: TIMEOUTS[event] }] }];
+}
+function withLazeHooks({
+  settings,
+  stopCommand,
+  preToolCommand
+}) {
+  const hooks = { ...settings.hooks };
+  withHook({ hooks, event: "Stop", command: stopCommand });
+  withHook({ hooks, event: "PreToolUse", command: preToolCommand });
   return { ...settings, hooks };
 }
-function stopHookCommand({
+function hookCommand({
   program,
-  profile
+  profile,
+  hook
 }) {
   const quote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
-  const words = [...program, "hook", "stop", "--profile", profile].map(quote).join(" ");
+  const words = [...program, "hook", hook, "--profile", profile].map(quote).join(" ");
   return `${words} # ${LAZE_HOOK_MARKER}`;
 }
@@ -4023,19 +4350,16 @@ function readTranscript({ lines }) {
   return { contextTokens, contextWindow, compactions };
 }
-// src/services/cli-context.ts
-var CliUsageError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "CliUsageError";
-  }
-};
+// src/services/claude-turn.service.ts
+import { mkdir as mkdir2, readFile as readFile2, rm, writeFile as writeFile2 } from "node:fs/promises";
+import { dirname as dirname2, join as join2 } from "node:path";
 // src/services/laze-client.service.ts
+var CLI_VERSION_HEADER = "x-laze-cli-version";
 var LazeApiError = class extends Error {
-  constructor(status, code, message) {
+  constructor(status2, code, message) {
     super(message);
-    this.status = status;
+    this.status = status2;
     this.code = code;
     this.name = "LazeApiError";
   }
@@ -4043,20 +4367,20 @@ var LazeApiError = class extends Error {
   code;
 };
 var LazeClient = class _LazeClient {
-  constructor(baseUrl, token, fetcher) {
-    this.baseUrl = baseUrl;
-    this.token = token;
-    this.fetcher = fetcher;
-  }
-  baseUrl;
-  token;
-  fetcher;
+  constructor(options) {
+    this.options = options;
+  }
+  options;
   static create({
     baseUrl,
     token,
     fetcher
   }) {
-    return new _LazeClient(baseUrl.replace(/\/+$/, ""), token, fetcher);
+    return new _LazeClient({ baseUrl: baseUrl.replace(/\/+$/, ""), token, fetcher, headers: {} });
+  }
+  /** The same client, sending these headers too on every call. */
+  withHeaders(headers) {
+    return new _LazeClient({ ...this.options, headers: { ...this.options.headers, ...headers } });
   }
   get(path) {
     return this.send({ method: "GET", path });
@@ -4069,29 +4393,41 @@ var LazeClient = class _LazeClient {
     path,
     body
   }) {
-    const headers = { accept: "application/json" };
+    const headers = {
+      ...this.options.headers,
+      accept: "application/json",
+      [CLI_VERSION_HEADER]: cliVersionOf()
+    };
     if (body !== void 0) headers["content-type"] = "application/json";
-    if (this.token) headers.authorization = `Bearer ${this.token}`;
-    const response = await this.fetcher(`${this.baseUrl}${path}`, {
+    if (this.options.token) headers.authorization = `Bearer ${this.options.token}`;
+    const response = await this.options.fetcher(`${this.options.baseUrl}${path}`, {
       method,
       headers,
       ...body !== void 0 ? { body: JSON.stringify(body) } : {}
     });
-    const text = await response.text();
-    const parsed = text ? JSON.parse(text) : void 0;
+    const text2 = await response.text();
+    const parsed = text2 ? JSON.parse(text2) : void 0;
     if (!response.ok) throw errorOf({ status: response.status, body: parsed });
     return parsed;
   }
 };
-function errorOf({ status, body }) {
+function errorOf({ status: status2, body }) {
   const record4 = typeof body === "object" && body !== null ? body : {};
   const nested = typeof record4.error === "object" && record4.error !== null ? record4.error : record4;
-  const fallback = typeof record4.error === "string" ? record4.error : `http_${status}`;
+  const fallback = typeof record4.error === "string" ? record4.error : `http_${status2}`;
   const code = typeof nested.code === "string" ? nested.code : fallback;
-  const message = typeof nested.message === "string" ? nested.message : `Laze answered ${status}`;
-  return new LazeApiError(status, code, message);
+  const message = typeof nested.message === "string" ? nested.message : `Laze answered ${status2}`;
+  return new LazeApiError(status2, code, message);
 }
+// src/services/cli-context.ts
+var CliUsageError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "CliUsageError";
+  }
+};
 // src/services/session.service.ts
 async function signedIn({
   context,
@@ -4122,6 +4458,85 @@ function serverUrlOf({ context, args }) {
   return flagText({ args, name: "url" }) || context.environment.url || "https://laze.langwatch.ai";
 }
+// src/services/claude-turn.service.ts
+var PRE_TOOL_TIMEOUT_MS = 3e3;
+function statePath({ context, agent }) {
+  const safe = agent.replace(/[^a-zA-Z0-9_-]/g, "_");
+  return join2(dirname2(context.environment.configPath), "turns", `${safe}.json`);
+}
+async function readState({ context, agent }) {
+  return readFile2(statePath({ context, agent }), "utf8").then(
+    (text2) => JSON.parse(text2),
+    () => void 0
+  );
+}
+function beat({
+  client,
+  state,
+  working
+}) {
+  const reported = working ? "working" : "idle";
+  return client.post("/api/agents/me/turn", {
+    channelId: state?.channelId ?? null,
+    threadRootId: state?.threadRootId ?? null,
+    state: state ? reported : null
+  });
+}
+async function turnStarted({
+  context,
+  client,
+  agent,
+  messages
+}) {
+  const last = messages.at(-1);
+  if (!last) return;
+  const state = { channelId: last.channelId, threadRootId: last.threadRootId ?? last.messageId };
+  const path = statePath({ context, agent });
+  await mkdir2(dirname2(path), { recursive: true, mode: 448 });
+  await writeFile2(path, JSON.stringify(state));
+  await beat({ client, state, working: true }).catch(() => void 0);
+}
+async function turnEnded({
+  context,
+  client,
+  agent
+}) {
+  const state = await readState({ context, agent });
+  if (!state) return;
+  await rm(statePath({ context, agent }), { force: true });
+  await beat({ client, state, working: false }).catch(() => void 0);
+}
+async function preToolHook({ context, args }) {
+  try {
+    await context.readStdin();
+    const { name: name2, profile } = await signedIn({ context, args });
+    const client = LazeClient.create({
+      baseUrl: profile.url,
+      token: profile.token,
+      fetcher: (input2, init) => context.fetcher(input2, { ...init, signal: AbortSignal.timeout(PRE_TOOL_TIMEOUT_MS) })
+    });
+    const state = await readState({ context, agent: name2 });
+    const answer3 = await beat({ client, state, working: true });
+    if (!answer3.stop) return;
+    await turnEnded({ context, client, agent: name2 });
+    const reason = `Stopped by ${answer3.stoppedBy ?? "someone"} in Laze.`;
+    context.out(
+      JSON.stringify({
+        continue: false,
+        stopReason: reason,
+        hookSpecificOutput: {
+          hookEventName: "PreToolUse",
+          permissionDecision: "deny",
+          permissionDecisionReason: reason
+        }
+      })
+    );
+  } catch (error62) {
+    context.err(`laze: the PreToolUse hook skipped: ${String(error62)}
+`);
+  }
+}
 // src/services/chat-commands.service.ts
 var REQUEST_WAIT_SECONDS = 50;
 async function listChannels({ context, args }) {
@@ -4130,9 +4545,9 @@ async function listChannels({ context, args }) {
   if (args.flags.json) return context.out(`${JSON.stringify(channels, null, 2)}
 `);
   for (const channel of channels) {
-    const name = channel.kind === "dm" || channel.kind === "group" ? "(direct)" : `#${channel.name}`;
+    const name2 = channel.kind === "dm" || channel.kind === "group" ? "(direct)" : `#${channel.name}`;
     const unread = channel.unread > 0 ? `	${channel.unread} unread` : "";
-    context.out(`${channel.id}	${name}${unread}
+    context.out(`${channel.id}	${name2}${unread}
 `);
   }
 }
@@ -4142,9 +4557,9 @@ async function textOf({
   from
 }) {
   const words = args.words.slice(from);
-  const text = (words.join(" ") === "-" ? await context.readStdin() : words.join(" ")).trim();
-  if (!text) throw new CliUsageError("Say something: the message text is missing.");
-  return text;
+  const text2 = (words.join(" ") === "-" ? await context.readStdin() : words.join(" ")).trim();
+  if (!text2) throw new CliUsageError("Say something: the message text is missing.");
+  return text2;
 }
 async function post({ context, args }) {
   const channel = args.words[1];
@@ -4194,9 +4609,12 @@ function waitSecondsOf({ args }) {
   return timeout > 0 ? timeout : Infinity;
 }
 async function inbox({ context, args }) {
-  const { client } = await signedIn({ context, args });
+  const { client, name: name2, profile } = await signedIn({ context, args });
   const waitSeconds = waitSecondsOf({ args });
   const messages = await receiveMessages({ context, client, waitSeconds });
+  if (profile.kind === "agent" && context.environment.harness === "claude-code") {
+    await turnStarted({ context, client, agent: name2, messages }).catch(() => void 0);
+  }
   if (args.flags.json) return context.out(`${JSON.stringify(messages, null, 2)}
 `);
   if (messages.length === 0) return context.out("No new messages.\n");
@@ -4236,23 +4654,24 @@ function harnessOf2({ context, args }) {
   if (named === "claude-code" || named === "codex" || named === "other") return named;
   return context.environment.harness;
 }
-function slugOf(name) {
-  return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "agent";
+function slugOf(name2) {
+  return name2.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "agent";
 }
 async function installStopHook({ context, profile }) {
-  const directory = join2(context.cwd, ".claude");
-  const path = join2(directory, "settings.local.json");
-  const current = await readFile2(path, "utf8").then(
-    (text) => JSON.parse(text),
+  const directory = join3(context.cwd, ".claude");
+  const path = join3(directory, "settings.local.json");
+  const current = await readFile3(path, "utf8").then(
+    (text2) => JSON.parse(text2),
     () => ({})
   );
-  const command = stopHookCommand({ program: context.program, profile });
-  await mkdir2(directory, { recursive: true });
-  await writeFile2(
-    path,
-    `${JSON.stringify(withStopHook({ settings: current, command }), null, 2)}
-`
-  );
+  const settings = withLazeHooks({
+    settings: current,
+    stopCommand: hookCommand({ program: context.program, profile, hook: "stop" }),
+    preToolCommand: hookCommand({ program: context.program, profile, hook: "pre-tool" })
+  });
+  await mkdir3(directory, { recursive: true });
+  await writeFile3(path, `${JSON.stringify(settings, null, 2)}
+`);
   return path;
 }
 function nextStepsFor({
@@ -4283,9 +4702,9 @@ async function linkAgent({ context, args }) {
   const harness = harnessOf2({ context, args });
   const client = LazeClient.create({ baseUrl: url2, fetcher: context.fetcher });
   const linked = await client.post("/api/agents/links/redeem", { token, harness });
-  const name = flagText({ args, name: "profile" }) || `agent-${slugOf(linked.agent.name)}`;
+  const name2 = flagText({ args, name: "profile" }) || `agent-${slugOf(linked.agent.name)}`;
   await context.store.saveProfile({
-    name,
+    name: name2,
     bindDirectory: context.cwd,
     profile: {
       url: url2,
@@ -4296,13 +4715,13 @@ async function linkAgent({ context, args }) {
       agentId: linked.agent.id
     }
   });
-  const hookPath = harness === "claude-code" && !args.flags["no-hook"] ? await installStopHook({ context, profile: name }) : void 0;
+  const hookPath = harness === "claude-code" && !args.flags["no-hook"] ? await installStopHook({ context, profile: name2 }) : void 0;
   context.out(
     [
-      `Linked as ${linked.agent.name} (${linked.agent.id}), profile "${name}" for ${context.cwd}.`,
-      ...hookPath ? [`Added the Laze Stop hook to ${hookPath}.`] : [],
+      `Linked as ${linked.agent.name} (${linked.agent.id}), profile "${name2}" for ${context.cwd}.`,
+      ...hookPath ? [`Added the Laze hooks to ${hookPath}.`] : [],
       "",
-      nextStepsFor({ harness, profile: name, laze: lazeCommandOf({ program: context.program }) }),
+      nextStepsFor({ harness, profile: name2, laze: lazeCommandOf({ program: context.program }) }),
       ""
     ].join("\n")
   );
@@ -4312,7 +4731,7 @@ async function reportTranscript({
   input: input2
 }) {
   if (!input2.transcript_path || !input2.session_id) return;
-  const lines = (await readFile2(input2.transcript_path, "utf8")).split("\n");
+  const lines = (await readFile3(input2.transcript_path, "utf8")).split("\n");
   const context = readTranscript({ lines });
   await client.post("/api/agents/me/activity", {
     sessionId: input2.session_id,
@@ -4324,14 +4743,15 @@ async function reportTranscript({
 async function handOver({ context, args }) {
   const raw = await context.readStdin();
   const input2 = raw.trim() ? JSON.parse(raw) : {};
-  const { client } = await signedIn({ context, args });
+  const { client, name: agent } = await signedIn({ context, args });
   await reportTranscript({ client, input: input2 }).catch(
     (error62) => context.err(`laze: could not report context: ${String(error62)}
 `)
   );
   if (input2.stop_hook_active) return;
   const messages = await receiveMessages({ context, client, waitSeconds: 0 });
-  if (messages.length === 0) return;
+  if (messages.length === 0) return turnEnded({ context, client, agent });
+  await turnStarted({ context, client, agent, messages });
   context.out(
     JSON.stringify({
       hookSpecificOutput: { hookEventName: "Stop", additionalContext: hookContextOf({ messages }) }
@@ -4348,8 +4768,8 @@ async function stopHook({ context, args }) {
 }
 // src/services/app-commands.service.ts
-import { mkdir as mkdir3, readdir, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
-import { join as join3, relative, resolve as resolve2, sep } from "node:path";
+import { mkdir as mkdir4, readdir, readFile as readFile4, writeFile as writeFile4 } from "node:fs/promises";
+import { join as join4, relative, resolve as resolve2, sep } from "node:path";
 // ../../packages/module/src/feature-names.generated.ts
 var FEATURE_NAMES = [
@@ -4362,18 +4782,21 @@ var FEATURE_NAMES = [
   "authz",
   "billing",
   "chat",
+  "compute",
   "connector",
   "entitlement",
   "feature-flag",
   "feed",
-  "marketing",
   "files",
+  "marketing",
   "memory",
   "model-gateway",
   "notification",
+  "openclaw",
   "role",
   "schedule",
   "skill",
+  "slack",
   "vault",
   "wiki",
   "workspace",
@@ -4415,50 +4838,50 @@ function isFeatureName(feature) {
 // ../../packages/module/src/module-api-token.ts
 var FeatureApiIdentity = class {
-  constructor(name) {
-    this.name = name;
+  constructor(name2) {
+    this.name = name2;
   }
   name;
 };
 var ModuleApiToken = class _ModuleApiToken extends FeatureApiIdentity {
-  constructor(name) {
-    super(name);
+  constructor(name2) {
+    super(name2);
   }
-  static create(name) {
-    publicNamespaceFromUnknown(name);
-    const token = new _ModuleApiToken(name);
+  static create(name2) {
+    publicNamespaceFromUnknown(name2);
+    const token = new _ModuleApiToken(name2);
     Object.freeze(token);
     return token;
   }
 };
-function moduleApi(name) {
-  if (name === void 0) {
+function moduleApi(name2) {
+  if (name2 === void 0) {
     return (id) => ModuleApiToken.create(id);
   }
-  return ModuleApiToken.create(name);
+  return ModuleApiToken.create(name2);
 }
 // ../../packages/module/src/contract/trpc-contract.ts
 function contractBuilder(namespace, members2) {
-  const member = (name, kind, read = {}) => ({
+  const member = (name2, kind, read = {}) => ({
     withInput: (input2) => {
-      assertUndeclared(namespace, name, members2);
+      assertUndeclared(namespace, name2, members2);
       const cached2 = {
         ...read.invalidatedBy ? { invalidatedBy: read.invalidatedBy } : {},
         ...read.fromProjection ? { fromProjection: read.fromProjection } : {},
         ...read.revision === void 0 ? {} : { revision: read.revision }
       };
-      const declared = { ...members2, [name]: { kind, input: input2, output: void 0, ...cached2 } };
+      const declared = { ...members2, [name2]: { kind, input: input2, output: void 0, ...cached2 } };
       return {
         ...contractBuilder(namespace, declared),
-        withOutput: (output2) => contractBuilder(namespace, { ...members2, [name]: { kind, input: input2, output: output2, ...cached2 } })
+        withOutput: (output2) => contractBuilder(namespace, { ...members2, [name2]: { kind, input: input2, output: output2, ...cached2 } })
       };
     }
   });
   return {
-    query: (name, options) => member(name, "query", options),
-    mutation: (name) => member(name, "mutation"),
-    subscription: (name) => member(name, "subscription"),
+    query: (name2, options) => member(name2, "query", options),
+    mutation: (name2) => member(name2, "mutation"),
+    subscription: (name2) => member(name2, "subscription"),
     build: () => {
       assertQueriesAnswer(namespace, members2);
       const built = { namespace, members: Object.freeze({ ...members2 }) };
@@ -4466,15 +4889,15 @@ function contractBuilder(namespace, members2) {
     }
   };
 }
-function assertUndeclared(namespace, name, members2) {
-  if (name in members2) {
-    throw new Error(`tRPC contract "${namespace}" declares procedure "${name}" twice`);
+function assertUndeclared(namespace, name2, members2) {
+  if (name2 in members2) {
+    throw new Error(`tRPC contract "${namespace}" declares procedure "${name2}" twice`);
   }
 }
 function assertQueriesAnswer(namespace, members2) {
-  for (const [name, member] of Object.entries(members2)) {
+  for (const [name2, member] of Object.entries(members2)) {
     if (member.kind === "query" && member.output === void 0) {
-      throw new Error(`tRPC contract "${namespace}" declares query "${name}" without withOutput`);
+      throw new Error(`tRPC contract "${namespace}" declares query "${name2}" without withOutput`);
     }
   }
 }
@@ -5600,12 +6023,12 @@ function merge(a, b) {
   });
   return clone(a, def);
 }
-function partial(Class2, schema, mask, name = "partial") {
+function partial(Class2, schema, mask, name2 = "partial") {
   const currDef = schema._zod.def;
   const checks = currDef.checks;
   const hasChecks = checks && checks.length > 0;
   if (hasChecks) {
-    throw new Error(`.${name}() cannot be used on object schemas containing refinements`);
+    throw new Error(`.${name2}() cannot be used on object schemas containing refinements`);
   }
   const selected = mask ? new Set(maskedKeys(schema, mask)) : void 0;
   const newShape = {};
@@ -5933,7 +6356,7 @@ function newError(Definition) {
   return new Definition();
 }
 // @__NO_SIDE_EFFECTS__
-function $constructor(name, initializer3, proto, params) {
+function $constructor(name2, initializer3, proto, params) {
   const zodProto = {};
   function Internals(def) {
     this.def = def;
@@ -5951,10 +6374,10 @@ function $constructor(name, initializer3, proto, params) {
       } finally {
         _zodDesc.value = void 0;
       }
-    } else if (inst._zod.traits.has(name)) {
+    } else if (inst._zod.traits.has(name2)) {
       return;
     }
-    inst._zod.traits.add(name);
+    inst._zod.traits.add(name2);
     initializer3(inst, def);
     if (initialized) {
       const own2 = Object.getPrototypeOf(inst);
@@ -5980,7 +6403,7 @@ function $constructor(name, initializer3, proto, params) {
   const Parent = params?.Parent ?? Object;
   class Definition extends Parent {
   }
-  Object.defineProperty(Definition, "name", { value: name });
+  Object.defineProperty(Definition, "name", { value: name2 });
   function _(def) {
     const inst = params?.Parent ? newError(Definition) : this;
     init(inst, def);
@@ -6001,10 +6424,10 @@ function $constructor(name, initializer3, proto, params) {
     value: (inst) => {
       if (params?.Parent && inst instanceof params.Parent)
         return true;
-      return inst?._zod?.traits?.has(name);
+      return inst?._zod?.traits?.has(name2);
     }
   });
-  Object.defineProperty(_, "name", { value: name });
+  Object.defineProperty(_, "name", { value: name2 });
   return _;
 }
 var $brand = /* @__PURE__ */ Symbol("zod_brand");
@@ -6014,8 +6437,8 @@ var $ZodAsyncError = class extends Error {
   }
 };
 var $ZodEncodeError = class extends Error {
-  constructor(name) {
-    super(`Encountered unidirectional transform during encode: ${name}`);
+  constructor(name2) {
+    super(`Encountered unidirectional transform during encode: ${name2}`);
     this.name = "ZodEncodeError";
   }
 };
@@ -13791,8 +14214,8 @@ function ko_default() {
 }
 // ../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/lt.js
-var capitalizeFirstCharacter = (text) => {
-  return text.charAt(0).toUpperCase() + text.slice(1);
+var capitalizeFirstCharacter = (text2) => {
+  return text2.charAt(0).toUpperCase() + text2.slice(1);
 };
 function getUnitTypeFromNumber(number4) {
   const abs = Math.abs(number4);
@@ -17514,13 +17937,13 @@ ${code}
   return fn;
 }
 function addConstant(ctx, value) {
-  for (const [name2, v] of ctx.constants) {
+  for (const [name3, v] of ctx.constants) {
     if (v === value)
-      return name2;
+      return name3;
   }
-  const name = `c${ctx.constantCounter++}`;
-  ctx.constants.set(name, value);
-  return name;
+  const name2 = `c${ctx.constantCounter++}`;
+  ctx.constants.set(name2, value);
+  return name2;
 }
 function addUserConstant(ctx, fn) {
   ctx.definite = false;
@@ -24152,10 +24575,10 @@ function date4(params) {
 // ../../packages/module/src/contract/ui-tokens.ts
 var UiTokenIdentity = class {
-  constructor(kind, owner, name) {
+  constructor(kind, owner, name2) {
     this.kind = kind;
     this.owner = owner;
-    this.name = name;
+    this.name = name2;
   }
   kind;
   owner;
@@ -24166,22 +24589,22 @@ var UiTokenIdentity = class {
   }
 };
 var UiToken = class _UiToken extends UiTokenIdentity {
-  constructor(kind, owner, name) {
-    super(kind, owner, name);
+  constructor(kind, owner, name2) {
+    super(kind, owner, name2);
   }
-  static create(kind, owner, name) {
-    const token = new _UiToken(kind, owner, name);
+  static create(kind, owner, name2) {
+    const token = new _UiToken(kind, owner, name2);
     Object.freeze(token);
     return token;
   }
 };
 function uiTokens(owner) {
   return {
-    component: (name) => UiToken.create("component", owner, name),
-    extension: (name) => UiToken.create("extension", owner, name),
-    operations: (name) => UiToken.create("operations", owner, name),
-    hooks: (name) => UiToken.create("hooks", owner, name),
-    drawer: (name) => UiToken.create("drawer", owner, name)
+    component: (name2) => UiToken.create("component", owner, name2),
+    extension: (name2) => UiToken.create("extension", owner, name2),
+    operations: (name2) => UiToken.create("operations", owner, name2),
+    hooks: (name2) => UiToken.create("hooks", owner, name2),
+    drawer: (name2) => UiToken.create("drawer", owner, name2)
   };
 }
@@ -24203,6 +24626,8 @@ var publishRequestSchemaDefinition = external_exports.object({
   visibility: appVisibilitySchema,
   status: external_exports.enum(["pending", "approved", "denied"]),
   requestedBy: appActorSchema,
+  /** The name of who asked, on an app's waiting publish; absent where it is not read. */
+  requestedByName: external_exports.string().nullable().optional(),
   decidedBy: appActorSchema.nullable(),
   createdAt: external_exports.iso.datetime(),
   decidedAt: external_exports.iso.datetime().nullable()
@@ -24226,6 +24651,8 @@ var appSchemaDefinition = external_exports.object({
   pendingPublish: publishRequestSchema.nullable(),
   /** The name of the person or agent who built it; absent when it can no longer be read. */
   ownerName: external_exports.string().nullable().optional(),
+  /** Set while the app is archived: it serves nothing and leaves the app list. */
+  archivedAt: external_exports.iso.datetime().nullable().optional(),
   createdAt: external_exports.iso.datetime(),
   updatedAt: external_exports.iso.datetime()
 });
@@ -24298,6 +24725,23 @@ var createAppInputSchemaDefinition = external_exports.object({
   visibility: appVisibilitySchema.default("internal")
 });
 var createAppInputSchema = createAppInputSchemaDefinition;
+var listAppsInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  /** True lists only archived apps; absent or false lists the others. */
+  archived: external_exports.boolean().optional()
+});
+var listAppsInputSchema = listAppsInputSchemaDefinition;
+var renameAppInputSchemaDefinition = external_exports.object({
+  ...appRefSchemaDefinition.shape,
+  name: external_exports.string().trim().min(1).max(80)
+});
+var renameAppInputSchema = renameAppInputSchemaDefinition;
+var deleteAppInputSchemaDefinition = external_exports.object({
+  ...appRefSchemaDefinition.shape,
+  /** The app's name, typed by the person to confirm. */
+  confirmName: external_exports.string().max(200)
+});
+var deleteAppInputSchema = deleteAppInputSchemaDefinition;
 var commitInputSchemaDefinition = external_exports.object({
   ...appRefSchemaDefinition.shape,
   /** The whole static build: files left out are gone from this version. */
@@ -24420,7 +24864,7 @@ var appViewerSchemaDefinition = external_exports.object({
 var AppApi = moduleApi()("app");
 // ../../modules/app/contract/src/app.trpc.ts
-var appTrpc = defineTrpcContract("app").query("list").withInput(external_exports.object({ workspaceId: external_exports.string().min(1) })).withOutput(external_exports.array(appSchema)).query("get").withInput(appRefSchema).withOutput(appSchema).query("versions").withInput(appRefSchema).withOutput(external_exports.array(appVersionSchema)).mutation("revert").withInput(revertInputSchema).withOutput(appVersionSchema).mutation("publish").withInput(publishInputSchema).withOutput(publishOutcomeSchema).query("collections").withInput(siteRefSchema).withOutput(external_exports.array(collectionSchema)).query("records").withInput(listRecordsInputSchema).withOutput(recordPageSchema).mutation("writeRecord").withInput(writeRecordInputSchema).withOutput(appRecordSchema).mutation("deleteRecord").withInput(deleteRecordInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).query("exportRecords").withInput(exportRecordsInputSchema).withOutput(recordExportSchema).mutation("decidePublish").withInput(decidePublishInputSchema).withOutput(publishOutcomeSchema).mutation("signInHandoff").withInput(signInHandoffInputSchema).withOutput(signInHandoffSchema).build();
+var appTrpc = defineTrpcContract("app").query("list").withInput(listAppsInputSchema).withOutput(external_exports.array(appSchema)).query("get").withInput(appRefSchema).withOutput(appSchema).mutation("create").withInput(createAppInputSchema).withOutput(appSchema).mutation("rename").withInput(renameAppInputSchema).withOutput(appSchema).mutation("archive").withInput(appRefSchema).withOutput(appSchema).mutation("unarchive").withInput(appRefSchema).withOutput(appSchema).mutation("delete").withInput(deleteAppInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).query("versions").withInput(appRefSchema).withOutput(external_exports.array(appVersionSchema)).mutation("revert").withInput(revertInputSchema).withOutput(appVersionSchema).mutation("publish").withInput(publishInputSchema).withOutput(publishOutcomeSchema).query("collections").withInput(siteRefSchema).withOutput(external_exports.array(collectionSchema)).query("records").withInput(listRecordsInputSchema).withOutput(recordPageSchema).mutation("writeRecord").withInput(writeRecordInputSchema).withOutput(appRecordSchema).mutation("deleteRecord").withInput(deleteRecordInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).query("exportRecords").withInput(exportRecordsInputSchema).withOutput(recordExportSchema).mutation("decidePublish").withInput(decidePublishInputSchema).withOutput(publishOutcomeSchema).mutation("signInHandoff").withInput(signInHandoffInputSchema).withOutput(signInHandoffSchema).build();
 // ../../modules/app/contract/src/app.rest.ts
 var byKey = { workspaceId: true };
@@ -25110,7 +25554,7 @@ function wrapSpanContext(spanContext) {
 var contextApi = ContextAPI.getInstance();
 var NoopTracer = class {
   // startSpan starts a noop span.
-  startSpan(name, options, context = contextApi.active()) {
+  startSpan(name2, options, context = contextApi.active()) {
     const root = Boolean(options === null || options === void 0 ? void 0 : options.root);
     if (root) {
       return new NonRecordingSpan();
@@ -25122,7 +25566,7 @@ var NoopTracer = class {
       return new NonRecordingSpan();
     }
   }
-  startActiveSpan(name, arg2, arg3, arg4) {
+  startActiveSpan(name2, arg2, arg3, arg4) {
     let opts;
     let ctx;
     let fn;
@@ -25139,7 +25583,7 @@ var NoopTracer = class {
       fn = arg4;
     }
     const parentContext = ctx !== null && ctx !== void 0 ? ctx : contextApi.active();
-    const span = this.startSpan(name, opts, parentContext);
+    const span = this.startSpan(name2, opts, parentContext);
     const contextWithSpanSet = setSpan(parentContext, span);
     return contextApi.with(contextWithSpanSet, fn, void 0, span);
   }
@@ -25151,14 +25595,14 @@ function isSpanContext(spanContext) {
 // ../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/build/esm/trace/ProxyTracer.js
 var NOOP_TRACER = new NoopTracer();
 var ProxyTracer = class {
-  constructor(provider, name, version2, options) {
+  constructor(provider, name2, version2, options) {
     this._provider = provider;
-    this.name = name;
+    this.name = name2;
     this.version = version2;
     this.options = options;
   }
-  startSpan(name, options, context) {
-    return this._getTracer().startSpan(name, options, context);
+  startSpan(name2, options, context) {
+    return this._getTracer().startSpan(name2, options, context);
   }
   startActiveSpan(_name, _options, _context, _fn) {
     const tracer = this._getTracer();
@@ -25194,9 +25638,9 @@ var ProxyTracerProvider = class {
   /**
    * Get a {@link ProxyTracer}
    */
-  getTracer(name, version2, options) {
+  getTracer(name2, version2, options) {
     var _a3;
-    return (_a3 = this.getDelegateTracer(name, version2, options)) !== null && _a3 !== void 0 ? _a3 : new ProxyTracer(this, name, version2, options);
+    return (_a3 = this.getDelegateTracer(name2, version2, options)) !== null && _a3 !== void 0 ? _a3 : new ProxyTracer(this, name2, version2, options);
   }
   getDelegate() {
     var _a3;
@@ -25208,9 +25652,9 @@ var ProxyTracerProvider = class {
   setDelegate(delegate) {
     this._delegate = delegate;
   }
-  getDelegateTracer(name, version2, options) {
+  getDelegateTracer(name2, version2, options) {
     var _a3;
-    return (_a3 = this._delegate) === null || _a3 === void 0 ? void 0 : _a3.getTracer(name, version2, options);
+    return (_a3 = this._delegate) === null || _a3 === void 0 ? void 0 : _a3.getTracer(name2, version2, options);
   }
 };
@@ -25257,8 +25701,8 @@ var TraceAPI = class _TraceAPI {
   /**
    * Returns a tracer from the global tracer provider.
    */
-  getTracer(name, version2) {
-    return this.getTracerProvider().getTracer(name, version2);
+  getTracer(name2, version2) {
+    return this.getTracerProvider().getTracer(name2, version2);
   }
   /** Remove the global tracer provider */
   disable() {
@@ -26641,9 +27085,9 @@ function isSkippedPath({ path }) {
   return path.split("/").some((segment) => segment.startsWith(".") || segment === "node_modules");
 }
 function buildFileOf({ path, bytes }) {
-  const text = bytes.toString("utf8");
-  const isText = !text.includes("\0") && Buffer.from(text, "utf8").equals(bytes);
-  return isText ? { path, content: text, encoding: "utf8", bytes: bytes.length } : { path, content: bytes.toString("base64"), encoding: "base64", bytes: bytes.length };
+  const text2 = bytes.toString("utf8");
+  const isText = !text2.includes("\0") && Buffer.from(text2, "utf8").equals(bytes);
+  return isText ? { path, content: text2, encoding: "utf8", bytes: bytes.length } : { path, content: bytes.toString("base64"), encoding: "base64", bytes: bytes.length };
 }
 function versionLine({ version: version2 }) {
   const at = version2.createdAt.slice(0, 16).replace("T", " ");
@@ -27209,10 +27653,10 @@ var STARTER_TEMPLATES = {
 };
 function templateFiles({
   template,
-  name
+  name: name2
 }) {
   return {
-    "index.html": indexHtml({ title: name.replaceAll("&", "&amp;").replaceAll("<", "&lt;") }),
+    "index.html": indexHtml({ title: name2.replaceAll("&", "&amp;").replaceAll("<", "&lt;") }),
     "app.js": template.appJs,
     "laze.js": LAZE_CLIENT_JS,
     "laze-kit.css": LAZE_KIT_CSS
@@ -27235,9 +27679,9 @@ function folderOf({ context, word }) {
   return resolve2(context.cwd, word ?? ".");
 }
 async function readManifest(folder) {
-  const text = await readFile3(join3(folder, APP_MANIFEST_FILE), "utf8").catch(() => void 0);
-  if (text === void 0) return void 0;
-  const parsed = appManifestSchema.safeParse(JSON.parse(text));
+  const text2 = await readFile4(join4(folder, APP_MANIFEST_FILE), "utf8").catch(() => void 0);
+  if (text2 === void 0) return void 0;
+  const parsed = appManifestSchema.safeParse(JSON.parse(text2));
   if (!parsed.success) {
     throw new CliUsageError(`${APP_MANIFEST_FILE} is not valid: ${parsed.error.message}`);
   }
@@ -27266,15 +27710,15 @@ async function appIdOf({
 async function jsonFlag({
   context,
   args,
-  name
+  name: name2
 }) {
-  const raw = flagText({ args, name });
+  const raw = flagText({ args, name: name2 });
   if (!raw) return void 0;
-  const text = raw.startsWith("@") ? await readFile3(resolve2(context.cwd, raw.slice(1)), "utf8") : raw;
+  const text2 = raw.startsWith("@") ? await readFile4(resolve2(context.cwd, raw.slice(1)), "utf8") : raw;
   try {
-    return JSON.parse(text);
+    return JSON.parse(text2);
   } catch {
-    throw new CliUsageError(`--${name} must be JSON (or @file holding JSON)`);
+    throw new CliUsageError(`--${name2} must be JSON (or @file holding JSON)`);
   }
 }
 async function listFiles(folder) {
@@ -27283,7 +27727,7 @@ async function listFiles(folder) {
   while (pending.length > 0 && found.length <= MAX_FILES) {
     const current = pending.pop() ?? folder;
     for (const entry of await readdir(current, { withFileTypes: true })) {
-      const path = join3(current, entry.name);
+      const path = join4(current, entry.name);
       const rel = relative(folder, path).split(sep).join("/");
       if (isSkippedPath({ path: rel })) continue;
       if (entry.isDirectory()) pending.push(path);
@@ -27298,14 +27742,14 @@ function print({
   context,
   args,
   value,
-  text
+  text: text2
 }) {
   context.out(args.flags.json ? `${JSON.stringify(value, null, 2)}
-` : text);
+` : text2);
 }
 var appCreate = async ({ context, args }) => {
-  const name = args.words.slice(2).join(" ").trim();
-  if (!name) throw new CliUsageError(USAGE);
+  const name2 = args.words.slice(2).join(" ").trim();
+  if (!name2) throw new CliUsageError(USAGE);
   const templateName = flagText({ args, name: "template" });
   if (templateName && !APP_TEMPLATES.includes(templateName)) {
     throw new CliUsageError(
@@ -27318,23 +27762,23 @@ var appCreate = async ({ context, args }) => {
   const slug = flagText({ args, name: "slug" });
   const visibility = flagText({ args, name: "visibility" });
   const app2 = await client.post("/api/apps/create", {
-    name,
+    name: name2,
     ...slug ? { slug } : {},
     ...channel ? { channel } : {},
     ...visibility ? { visibility } : {}
   });
   const folder = resolve2(context.cwd, flagText({ args, name: "dir", fallback: app2.slug }));
-  await mkdir3(folder, { recursive: true });
-  const files = template ? templateFiles({ template, name }) : {};
+  await mkdir4(folder, { recursive: true });
+  const files = template ? templateFiles({ template, name: name2 }) : {};
   for (const [path, content] of Object.entries(files)) {
-    await writeFile3(join3(folder, path), content);
+    await writeFile4(join4(folder, path), content);
   }
   const manifest = {
     app: { id: app2.id, name: app2.name, slug: app2.slug },
     collections: template ? { ...template.collections } : {},
     seed: template ? { ...template.seed } : {}
   };
-  await writeFile3(join3(folder, APP_MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}
+  await writeFile4(join4(folder, APP_MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}
 `);
   print({
     context,
@@ -27365,7 +27809,7 @@ var appPush = async ({ context, args }) => {
     paths.map(
       async (path) => buildFileOf({
         path: relative(folder, path).split(sep).join("/"),
-        bytes: await readFile3(path)
+        bytes: await readFile4(path)
       })
     )
   );
@@ -27380,11 +27824,11 @@ var appPush = async ({ context, args }) => {
   if (files.length === 0) throw new CliUsageError(`No files to push in ${folder}`);
   const { client } = await signedIn({ context, args });
   const appId = await appIdOf({ client, args, folder });
-  for (const [name, collection] of Object.entries(manifest?.collections ?? {})) {
+  for (const [name2, collection] of Object.entries(manifest?.collections ?? {})) {
     await client.post("/api/apps/collections/define", {
       appId,
       site: "draft",
-      name,
+      name: name2,
       fields: collection.fields
     });
   }
@@ -27498,13 +27942,13 @@ var appCollections = async ({ context, args }) => {
   const { client } = await signedIn({ context, args });
   const appId = await appIdOf({ client, args, folder: folderOf({ context, word: void 0 }) });
   if (args.words[2] === "define") {
-    const name = args.words[3];
+    const name2 = args.words[3];
     const fields = await jsonFlag({ context, args, name: "fields" });
-    if (!name || !Array.isArray(fields)) throw new CliUsageError(USAGE);
+    if (!name2 || !Array.isArray(fields)) throw new CliUsageError(USAGE);
     const collection = await client.post("/api/apps/collections/define", {
       appId,
       site: siteOf(args, "draft"),
-      name,
+      name: name2,
       fields
     });
     return print({
@@ -27596,7 +28040,7 @@ var appExport = async ({ context, args }) => {
   const out = flagText({ args, name: "out" });
   if (!out) return context.out(exported.body);
   const target = resolve2(context.cwd, out);
-  await writeFile3(target, exported.body);
+  await writeFile4(target, exported.body);
   context.out(`Wrote ${exported.rows} records to ${relative(context.cwd, target)}
 `);
 };
@@ -27616,12 +28060,12 @@ var APP_COMMANDS = {
   export: appExport
 };
 async function app({ context, args }) {
-  const name = args.words[1] ?? "";
-  const command = Object.hasOwn(APP_COMMANDS, name) ? APP_COMMANDS[name] : void 0;
+  const name2 = args.words[1] ?? "";
+  const command = Object.hasOwn(APP_COMMANDS, name2) ? APP_COMMANDS[name2] : void 0;
   if (!command) {
     context.out(`${USAGE}
 `);
-    if (name) throw new CliUsageError(`laze app has no command ${name}`);
+    if (name2) throw new CliUsageError(`laze app has no command ${name2}`);
     return;
   }
   await command({ context, args });
@@ -27646,12 +28090,12 @@ async function profileOf({
 }
 async function login({ context, args }) {
   const url2 = serverUrlOf({ context, args });
-  const name = flagText({ args, name: "profile", fallback: "default" });
+  const name2 = flagText({ args, name: "profile", fallback: "default" });
   const given = flagText({ args, name: "token" });
   const token = given || await deviceToken({ context, url: url2, args });
   const profile = await profileOf({ context, url: url2, token });
-  await context.store.saveProfile({ name, profile });
-  context.out(`Signed in to ${url2} as ${profile.name} (profile "${name}").
+  await context.store.saveProfile({ name: name2, profile });
+  context.out(`Signed in to ${url2} as ${profile.name} (profile "${name2}").
 `);
 }
 async function deviceToken({
@@ -27682,18 +28126,18 @@ async function deviceToken({
   throw new CliUsageError("The sign-in code expired: run `laze login` again.");
 }
 async function logout({ context, args }) {
-  const { name } = await signedIn({ context, args });
-  await context.store.removeProfile({ name });
-  context.out(`Signed out of profile "${name}". Its key stays valid until revoked in Laze.
+  const { name: name2 } = await signedIn({ context, args });
+  await context.store.removeProfile({ name: name2 });
+  context.out(`Signed out of profile "${name2}". Its key stays valid until revoked in Laze.
 `);
 }
 async function whoami({ context, args }) {
-  const { client, name, profile } = await signedIn({ context, args });
+  const { client, name: name2, profile } = await signedIn({ context, args });
   const me = await client.get("/api/agents/me");
   if (args.flags.json) return context.out(`${JSON.stringify(me, null, 2)}
 `);
   const who = me.kind === "agent" ? `agent ${me.name} (${me.id})` : `${me.name} (${me.id})`;
-  context.out(`${who} in workspace ${me.workspaceId} at ${profile.url}, profile "${name}"
+  context.out(`${who} in workspace ${me.workspaceId} at ${profile.url}, profile "${name2}"
 `);
 }
 async function workspaces({ context, args }) {
@@ -27701,20 +28145,172 @@ async function workspaces({ context, args }) {
   const entries = Object.entries(config2.profiles);
   if (entries.length === 0) return context.out("Not signed in: run `laze login` first.\n");
   const active = await signedIn({ context, args }).catch(() => void 0);
-  for (const [name, profile] of entries) {
-    const star = active?.name === name ? "*" : " ";
+  for (const [name2, profile] of entries) {
+    const star = active?.name === name2 ? "*" : " ";
     context.out(
-      `${star} ${name}	${profile.workspaceId}	${profile.kind} ${profile.name}	${profile.url}
+      `${star} ${name2}	${profile.workspaceId}	${profile.kind} ${profile.name}	${profile.url}
 `
     );
   }
 }
+// src/services/browser-commands.service.ts
+import { readFile as readFile5 } from "node:fs/promises";
+var PATHS = {
+  machines: "/api/compute/machines",
+  setup: "/api/compute/browser/setup",
+  cdp: "/api/compute/browser/cdp",
+  screen: "/api/compute/browser/screen",
+  sleep: "/api/compute/machines/sleep",
+  wake: "/api/compute/machines/wake",
+  delete: "/api/compute/machines/delete"
+};
+var USAGE2 = [
+  "Usage: laze browser setup <site> [--name <machine>]   a machine with Chrome a person signs in on",
+  "       laze browser cdp <machine>                     a CDP address for this turn (Playwright connectOverCDP)",
+  "       laze browser screen <machine> [--site <site>]  send the sign-in screen link again",
+  "       laze browser status [<machine>]                the machines, their state, sites and cost",
+  "       laze browser sleep|wake|delete <machine>"
+].join("\n");
+async function turnTokenOf({ context }) {
+  const env = context.environment.inherited;
+  const pinned = env.LAZE_TURN_TOKEN?.trim();
+  if (pinned) return pinned;
+  if (!env.LAZE_TURN_FILE) return "";
+  return readFile5(env.LAZE_TURN_FILE, "utf8").then(
+    (text2) => text2.trim(),
+    () => ""
+  );
+}
+async function computeClient({
+  context,
+  args
+}) {
+  const { client } = await signedIn({ context, args });
+  const turn = await turnTokenOf({ context });
+  return turn ? client.withHeaders({ "x-laze-turn": turn }) : client;
+}
+function siteLine(machine) {
+  return machine.sites.map((entry) => `${entry.site} (${entry.status.replaceAll("_", " ")})`).join(", ");
+}
+function statusLine(machine) {
+  const cost = `${machine.monthCostUsd.toFixed(2)} of ${machine.monthlyBudgetUsd} USD this month`;
+  const use = machine.inHumanUse ? ", a person has the screen" : "";
+  return `${machine.name}	${machine.state}${use}	${siteLine(machine) || "no sites"}	${cost}
+`;
+}
+function machineArg({ args }) {
+  const machine = args.words[2];
+  if (!machine) throw new CliUsageError(USAGE2);
+  return machine;
+}
+async function setup({ context, args }) {
+  const site = args.words[2];
+  if (!site) throw new CliUsageError(USAGE2);
+  const name2 = flagText({ args, name: "name" }) || void 0;
+  const client = await computeClient({ context, args });
+  const machine = await client.post(PATHS.setup, { site, ...name2 ? { name: name2 } : {} });
+  if (args.flags.json) return context.out(`${JSON.stringify(machine, null, 2)}
+`);
+  context.out(
+    `${machine.name} is ${machine.state} (${siteLine(machine)}).
+The screen link goes to your requester's DM once it is ready. Wait for their message that they signed in, then run \`laze browser cdp ${machine.name}\`.
+`
+  );
+}
+async function cdp({ context, args }) {
+  const client = await computeClient({ context, args });
+  const access = await client.post(PATHS.cdp, { machine: machineArg({ args }) });
+  if (args.flags.json) return context.out(`${JSON.stringify(access, null, 2)}
+`);
+  if (access.status === "waking")
+    return context.out(
+      `${access.machine} is waking up. Run this again in ${access.retryAfterSeconds} seconds.
+`
+    );
+  context.out(`${access.url}
+`);
+  context.err(`Valid until ${access.expiresAt}. Use it with chromium.connectOverCDP(url).
+`);
+}
+async function screen({ context, args }) {
+  const client = await computeClient({ context, args });
+  const site = flagText({ args, name: "site" }) || void 0;
+  const link = await client.post(PATHS.screen, {
+    machine: machineArg({ args }),
+    ...site ? { site } : {}
+  });
+  if (args.flags.json) return context.out(`${JSON.stringify(link, null, 2)}
+`);
+  context.out(
+    link.url ? `${link.url}
+` : `Sent a fresh screen link for ${link.machine.name} to your requester's DM.
+`
+  );
+}
+async function status({ context, args }) {
+  const client = await computeClient({ context, args });
+  const wanted = args.words[2];
+  const machines = (await client.get(PATHS.machines)).filter(
+    (machine) => !wanted || machine.name === wanted
+  );
+  if (args.flags.json) return context.out(`${JSON.stringify(machines, null, 2)}
+`);
+  if (machines.length === 0)
+    return context.out(
+      wanted ? `No machine named ${wanted}.
+` : "No machines. `laze browser setup <site>` makes one.\n"
+    );
+  for (const machine of machines) context.out(statusLine(machine));
+}
+async function change({
+  context,
+  args,
+  path
+}) {
+  const client = await computeClient({ context, args });
+  const machine = await client.post(path, { machine: machineArg({ args }) });
+  if (args.flags.json) return context.out(`${JSON.stringify(machine, null, 2)}
+`);
+  context.out(statusLine(machine));
+}
+async function browser({ context, args }) {
+  const command = args.words[1];
+  if (command === "setup") return setup({ context, args });
+  if (command === "cdp") return cdp({ context, args });
+  if (command === "screen") return screen({ context, args });
+  if (command === "status") return status({ context, args });
+  if (command === "sleep" || command === "wake" || command === "delete")
+    return change({ context, args, path: PATHS[command] });
+  throw new CliUsageError(USAGE2);
+}
 // src/services/codex-adopt.service.ts
-import { spawn } from "node:child_process";
+import { spawn as spawn2 } from "node:child_process";
 import { readdir as readdir2, stat } from "node:fs/promises";
-import { join as join4 } from "node:path";
+import { join as join5 } from "node:path";
 import { createInterface } from "node:readline";
+// src/rules/codex-requests.rules.ts
+var DECLINED_DECISION = {
+  "item/commandExecution/requestApproval": "decline",
+  "item/fileChange/requestApproval": "decline",
+  execCommandApproval: "denied",
+  applyPatchApproval: "denied"
+};
+function codexRequestReplyOf({ method }) {
+  const decision = DECLINED_DECISION[method];
+  if (decision) return { result: { decision } };
+  if (method === "item/permissions/requestApproval") {
+    return { result: { permissions: {}, scope: "turn" } };
+  }
+  if (method === "mcpServer/elicitation/request") {
+    return { result: { action: "decline", content: null } };
+  }
+  return { error: { code: -32601, message: `${method} is not supported here` } };
+}
+// src/services/codex-adopt.service.ts
 function record3(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
@@ -27732,6 +28328,7 @@ function absorbTurnEvent({ result, message }) {
   const window2 = usage.modelContextWindow;
   if (typeof window2 === "number" && window2 > 0) result.contextWindow = window2;
 }
+var TURN_HEARTBEAT_MS = 1e4;
 var CodexAppServer = class _CodexAppServer {
   constructor(child) {
     this.child = child;
@@ -27746,7 +28343,7 @@ var CodexAppServer = class _CodexAppServer {
     inherited
   }) {
     const env = { ...inherited, CODEX_HOME: codexHome };
-    return new _CodexAppServer(spawn("codex", ["app-server"], { env, stdio: "pipe" }));
+    return new _CodexAppServer(spawn2("codex", ["app-server"], { env, stdio: "pipe" }));
   }
   async call(method, params) {
     const id = ++this.#nextId;
@@ -27760,24 +28357,24 @@ var CodexAppServer = class _CodexAppServer {
   notify(method) {
     this.write({ method });
   }
-  /** Runs one turn and waits for it to complete, keeping its last agent message. */
-  async turn({ threadId, text }) {
+  /** Starts one turn; `done` settles when it completes, keeping its last agent message. */
+  async startTurn({ threadId, text: text2 }) {
     const result = { answer: "" };
     const done = new Promise((resolve6) => {
       const listen = (message) => {
         absorbTurnEvent({ result, message });
         if (message.method !== "turn/completed") return;
         this.#listeners.delete(listen);
-        resolve6();
+        resolve6(result);
       };
       this.#listeners.add(listen);
     });
-    await this.call("turn/start", {
+    const started = await this.call("turn/start", {
       threadId,
-      input: [{ type: "text", text, text_elements: [] }]
+      input: [{ type: "text", text: text2, text_elements: [] }]
     });
-    await done;
-    return result;
+    const turnId = record3(started.turn).id;
+    return { turnId: typeof turnId === "string" ? turnId : null, done };
   }
   stop() {
     this.child.kill("SIGTERM");
@@ -27799,18 +28396,23 @@ var CodexAppServer = class _CodexAppServer {
       return;
     }
     if (message.method !== void 0 && message.id !== void 0) {
-      this.write({ id: message.id, result: { decision: "approved" } });
+      this.write({
+        id: message.id,
+        ...codexRequestReplyOf({
+          method: typeof message.method === "string" ? message.method : ""
+        })
+      });
       return;
     }
     for (const listen of this.#listeners) listen(message);
   }
 };
 async function newestThreadId({ codexHome }) {
-  const root = join4(codexHome, "sessions");
+  const root = join5(codexHome, "sessions");
   const files = await readdir2(root, { recursive: true }).catch(() => []);
   const rollouts = files.filter((file2) => /rollout-.*\.jsonl$/.test(file2));
   const dated = await Promise.all(
-    rollouts.map(async (file2) => ({ file: file2, at: (await stat(join4(root, file2))).mtimeMs }))
+    rollouts.map(async (file2) => ({ file: file2, at: (await stat(join5(root, file2))).mtimeMs }))
   );
   const newest = dated.toSorted((a, b) => b.at - a.at)[0]?.file ?? "";
   const id = /([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/.exec(newest);
@@ -27825,13 +28427,49 @@ function promptOf({ message }) {
     formatInboxMessage({ message }).split("\n").slice(0, -1).join("\n")
   ].join("\n");
 }
+async function heartbeat({
+  client,
+  message,
+  state
+}) {
+  return client.post("/api/agents/me/turn", {
+    channelId: message.channelId,
+    threadRootId: message.threadRootId ?? message.messageId,
+    state
+  }).catch(() => void 0);
+}
+async function watchTurn({
+  context,
+  client,
+  codex,
+  threadId,
+  turn,
+  message
+}) {
+  const finished = new AbortController();
+  void turn.done.then(() => finished.abort());
+  while (!finished.signal.aborted) {
+    const beat2 = await heartbeat({ client, message, state: "working" });
+    if (beat2?.stop && turn.turnId) {
+      await codex.call("turn/interrupt", { threadId, turnId: turn.turnId }).catch(() => void 0);
+      return beat2.stoppedBy ?? "someone";
+    }
+    await context.sleep(TURN_HEARTBEAT_MS, finished.signal);
+  }
+  return void 0;
+}
 async function answer({
+  context,
   codex,
   client,
   threadId,
   message
 }) {
-  const turn = await codex.turn({ threadId, text: promptOf({ message }) });
+  const running = await codex.startTurn({ threadId, text: promptOf({ message }) });
+  const stoppedBy = await watchTurn({ context, client, codex, threadId, turn: running, message });
+  const turn = await running.done;
+  await heartbeat({ client, message, state: "idle" });
+  if (stoppedBy !== void 0) return `(stopped by ${stoppedBy})`;
   const body = turn.answer.trim() || "(no answer)";
   await client.post("/api/agents/me/replies", { messageId: message.messageId, body });
   if (turn.contextTokens !== void 0) {
@@ -27867,7 +28505,7 @@ async function adoptCodex({ context, args }) {
         waitSeconds: timeout > 0 ? timeout : Infinity
       });
       for (const message of messages) {
-        const body = await answer({ codex, client, threadId, message });
+        const body = await answer({ context, codex, client, threadId, message });
         context.out(`Answered ${message.messageId}: ${body.slice(0, 120)}
 `);
       }
@@ -27879,7 +28517,7 @@ async function adoptCodex({ context, args }) {
 }
 // src/services/feed-commands.service.ts
-import { readFile as readFile4 } from "node:fs/promises";
+import { readFile as readFile6 } from "node:fs/promises";
 import { resolve as resolve3 } from "node:path";
 // src/rules/feed-input.rules.ts
@@ -27938,7 +28576,7 @@ function feedFlagsOf({ args }) {
 }
 // src/services/feed-commands.service.ts
-var USAGE2 = `Usage:
+var USAGE3 = `Usage:
   laze feed post <title> [--channel <channel>] [--tag <tag>] [--summary <line>]
     [--body <text|@file>] [--draft <text|@file>] [--draft-header "To: ...\\nRe: ..."]
     [--link <label>=<url>]... [--action <label>=<message>]... [--to <userId>]...
@@ -27962,7 +28600,7 @@ async function bodyOf({
 }) {
   const body = { ...flags.fields };
   for (const [field, source] of Object.entries(flags.texts)) {
-    body[field] = "file" in source ? await readFile4(resolve3(context.cwd, source.file), "utf8") : source.text;
+    body[field] = "file" in source ? await readFile6(resolve3(context.cwd, source.file), "utf8") : source.text;
   }
   return body;
 }
@@ -27981,7 +28619,7 @@ function printItem({
 }
 async function feedPost({ context, args }) {
   const title = args.words.slice(2).join(" ").trim();
-  if (!title) throw new CliUsageError(USAGE2);
+  if (!title) throw new CliUsageError(USAGE3);
   const flags = flagsOf(args);
   const { client } = await signedIn({ context, args });
   const channel = flagText({ args, name: "channel" });
@@ -27998,7 +28636,7 @@ async function feedPost({ context, args }) {
 }
 async function feedUpdate({ context, args }) {
   const itemId = args.words[2];
-  if (!itemId) throw new CliUsageError(USAGE2);
+  if (!itemId) throw new CliUsageError(USAGE3);
   const flags = flagsOf(args);
   const { client } = await signedIn({ context, args });
   const body = await bodyOf({ context, flags });
@@ -28013,19 +28651,19 @@ async function feedUpdate({ context, args }) {
 }
 async function feedReply({ context, args }) {
   const itemId = args.words[2];
-  const text = args.words.slice(3).join(" ").trim();
-  if (!itemId || !text) throw new CliUsageError(USAGE2);
+  const text2 = args.words.slice(3).join(" ").trim();
+  if (!itemId || !text2) throw new CliUsageError(USAGE3);
   const { client } = await signedIn({ context, args });
   const replied = await client.post("/api/feed/items/reply", {
     itemId,
-    body: text,
+    body: text2,
     urgent: Boolean(args.flags.urgent)
   });
   printItem({ context, args, item: replied });
 }
 async function feedRead({ context, args }) {
   const itemId = args.words[2];
-  if (!itemId) throw new CliUsageError(USAGE2);
+  if (!itemId) throw new CliUsageError(USAGE3);
   const { client } = await signedIn({ context, args });
   const read = await client.post("/api/feed/items/read", { itemId });
   printItem({ context, args, item: read });
@@ -28048,14 +28686,14 @@ var FEED_COMMANDS = {
   inbox: feedInbox
 };
 async function feed({ context, args }) {
-  const name = args.words[1] ?? "";
-  const command = Object.hasOwn(FEED_COMMANDS, name) ? FEED_COMMANDS[name] : void 0;
-  if (!command) throw new CliUsageError(USAGE2);
+  const name2 = args.words[1] ?? "";
+  const command = Object.hasOwn(FEED_COMMANDS, name2) ? FEED_COMMANDS[name2] : void 0;
+  if (!command) throw new CliUsageError(USAGE3);
   await command({ context, args });
 }
 // src/services/github-commands.service.ts
-import { readFile as readFile5 } from "node:fs/promises";
+import { readFile as readFile7 } from "node:fs/promises";
 // src/rules/github-signature.rules.ts
 var TURN_SEPARATOR = "~";
@@ -28123,13 +28761,17 @@ function isLocalGhCall(args) {
 // src/services/github-commands.service.ts
 var REAL_GH = "/usr/bin/gh";
 var NOT_SET = "laze: agent_github_not_set: this agent has no GitHub connection. Its owner sets one on the agent's settings page or with `laze agent set-github <agent> <connection>`.";
+async function turnFileToken({ env }) {
+  if (!env.LAZE_TURN_FILE) return "";
+  return readFile7(env.LAZE_TURN_FILE, "utf8").then(
+    (text2) => text2.trim(),
+    () => ""
+  );
+}
 async function credentialOf({ env }) {
   const placeholder = (env.GH_TOKEN ?? "").split(TURN_SEPARATOR)[0] ?? "";
   if (!placeholder.startsWith("laze-ph-")) throw new CliUsageError(NOT_SET);
-  const turn = env.LAZE_TURN_FILE ? await readFile5(env.LAZE_TURN_FILE, "utf8").then(
-    (text) => text.trim(),
-    () => ""
-  ) : "";
+  const turn = env.LAZE_TURN_TOKEN?.trim() || await turnFileToken({ env });
   return turn ? `${placeholder}${TURN_SEPARATOR}${turn}` : placeholder;
 }
 function threadUrlOf({ env, workspaceId }) {
@@ -28155,7 +28797,7 @@ async function githubGh({
     args: args.rest,
     agentName: profile.name ?? "An agent",
     threadUrl: threadUrlOf({ env, workspaceId: profile.workspaceId }),
-    readBodyFile: (path) => path === "-" ? context.readStdin() : readFile5(path, "utf8")
+    readBodyFile: (path) => path === "-" ? context.readStdin() : readFile7(path, "utf8")
   });
   return context.runCommand({
     command: [REAL_GH, ...ghArgs],
@@ -28254,7 +28896,7 @@ async function setAgentGithub({
 }
 // src/services/mcp-gateway.service.ts
-import { readFile as readFile6 } from "node:fs/promises";
+import { readFile as readFile8 } from "node:fs/promises";
 import { createInterface as createInterface2 } from "node:readline";
 var TURN_HEADER = "x-laze-turn";
 function serveMcpGateway({
@@ -28268,6 +28910,7 @@ async function relayMcpLines({
   args,
   lines
 }) {
+  const pending = lines[Symbol.asyncIterator]();
   const { profile } = await signedIn({ context, args });
   const env = context.environment.inherited;
   if (!profile.agentId || !env.LAZE_TURN_FILE)
@@ -28275,10 +28918,11 @@ async function relayMcpLines({
   const github2 = env.LAZE_GITHUB_CONNECTION;
   const url2 = `${profile.url.replace(/\/+$/, "")}/api/connectors/mcp/${encodeURIComponent(profile.agentId)}${github2 ? `?github=${encodeURIComponent(github2)}` : ""}`;
   const turnFile = env.LAZE_TURN_FILE;
-  for await (const line of lines) {
+  for (let next = await pending.next(); !next.done; next = await pending.next()) {
+    const line = next.value;
     if (!line.trim()) continue;
-    const turn = await readFile6(turnFile, "utf8").then(
-      (text2) => text2.trim(),
+    const turn = await readFile8(turnFile, "utf8").then(
+      (text3) => text3.trim(),
       () => ""
     );
     const response = await context.fetcher(url2, {
@@ -28291,8 +28935,8 @@ async function relayMcpLines({
       },
       body: line
     });
-    const text = await response.text();
-    if (text.trim()) context.out(`${text.trim()}
+    const text2 = await response.text();
+    if (text2.trim()) context.out(`${text2.trim()}
 `);
   }
 }
@@ -28343,10 +28987,10 @@ function textOf2(value) {
 async function callTool({
   context,
   client,
-  name,
+  name: name2,
   input: input2
 }) {
-  switch (name) {
+  switch (name2) {
     case "whoami":
       return JSON.stringify(await client.get("/api/agents/me"));
     case "list_channels":
@@ -28376,7 +29020,7 @@ async function callTool({
       return `Replied ${posted.messageId}.`;
     }
     default:
-      throw new Error(`Unknown tool ${name}`);
+      throw new Error(`Unknown tool ${name2}`);
   }
 }
 async function answer2({
@@ -28395,13 +29039,13 @@ async function answer2({
   if (request.method === "tools/list") return { tools: TOOLS };
   if (request.method === "tools/call") {
     try {
-      const text = await callTool({
+      const text2 = await callTool({
         context,
         client,
         name: textOf2(params.name),
         input: params.arguments ?? {}
       });
-      return { content: [{ type: "text", text }] };
+      return { content: [{ type: "text", text: text2 }] };
     } catch (error62) {
       return { content: [{ type: "text", text: String(error62) }], isError: true };
     }
@@ -28422,14 +29066,14 @@ async function serveMcp({ context, args }) {
 }
 // src/services/mount-files.service.ts
-import { mkdir as mkdir4, readFile as readFile7, rm, writeFile as writeFile4 } from "node:fs/promises";
-import { dirname as dirname2, relative as relative2, resolve as resolve4 } from "node:path";
+import { mkdir as mkdir5, readFile as readFile9, rm as rm2, writeFile as writeFile5 } from "node:fs/promises";
+import { dirname as dirname3, relative as relative2, resolve as resolve4 } from "node:path";
 async function textArgument({
   context,
   value
 }) {
   if (value === "-") return context.readStdin();
-  if (value.startsWith("@")) return readFile7(resolve4(context.cwd, value.slice(1)), "utf8");
+  if (value.startsWith("@")) return readFile9(resolve4(context.cwd, value.slice(1)), "utf8");
   return value;
 }
 function turnChannel({ context, args }) {
@@ -28442,21 +29086,21 @@ async function writeMount({
   files
 }) {
   const root = resolve4(context.cwd, flagText({ args, name: "dir", fallback: ".laze" }), folder);
-  await rm(root, { recursive: true, force: true });
-  await mkdir4(root, { recursive: true });
+  await rm2(root, { recursive: true, force: true });
+  await mkdir5(root, { recursive: true });
   for (const file2 of files) {
     const target = resolve4(root, file2.path);
     const inside = relative2(root, target);
     if (!inside || inside.startsWith(".."))
       throw new Error(`Refusing to write outside ${root}: ${file2.path}`);
-    await mkdir4(dirname2(target), { recursive: true });
-    await writeFile4(target, file2.content);
+    await mkdir5(dirname3(target), { recursive: true });
+    await writeFile5(target, file2.content);
   }
   return root;
 }
 // src/services/memory-commands.service.ts
-var USAGE3 = `Usage:
+var USAGE4 = `Usage:
   laze memory get SOUL.md|AGENTS.md|MEMORY.md [--channel <channel>]
   laze memory set <file> <text|@file|-> [--channel <channel>] [--base <version>]
   laze memory append MEMORY.md <text|@file|-> [--channel <channel>]
@@ -28467,7 +29111,7 @@ MEMORY.md is the file of the turn's channel (LAZE_CHANNEL), or of --channel when
 var FILES = /* @__PURE__ */ new Set(["SOUL.md", "AGENTS.md", "MEMORY.md"]);
 function fileRef({ context, args }) {
   const file2 = args.words[2] ?? "";
-  if (!FILES.has(file2)) throw new CliUsageError(USAGE3);
+  if (!FILES.has(file2)) throw new CliUsageError(USAGE4);
   const channel = turnChannel({ context, args });
   return { file: file2, ...channel ? { channel } : {} };
 }
@@ -28495,7 +29139,7 @@ async function memoryGet({ context, args }) {
 async function memorySet({ context, args }) {
   const ref = fileRef({ context, args });
   const value = args.words.slice(3).join(" ");
-  if (!value) throw new CliUsageError(USAGE3);
+  if (!value) throw new CliUsageError(USAGE4);
   const content = await textArgument({ context, value });
   const base = args.flags.base;
   const { client } = await signedIn({ context, args });
@@ -28511,17 +29155,17 @@ async function memorySet({ context, args }) {
 async function memoryAppend({ context, args }) {
   const ref = fileRef({ context, args });
   const value = args.words.slice(3).join(" ");
-  if (!value) throw new CliUsageError(USAGE3);
-  const text = await textArgument({ context, value });
+  if (!value) throw new CliUsageError(USAGE4);
+  const text2 = await textArgument({ context, value });
   const { client } = await signedIn({ context, args });
-  const saved = await client.post("/api/memory/append", { ...ref, text });
+  const saved = await client.post("/api/memory/append", { ...ref, text: text2 });
   if (args.flags.json) return printDocument({ context, args, document: saved });
   context.out(`Saved ${saved.file} version ${saved.version}
 `);
 }
 async function memorySearch({ context, args }) {
   const query = args.words.slice(2).join(" ").trim();
-  if (!query) throw new CliUsageError(USAGE3);
+  if (!query) throw new CliUsageError(USAGE4);
   const { client } = await signedIn({ context, args });
   const hits = await client.post("/api/memory/search", { query });
   if (args.flags.json) return context.out(`${JSON.stringify(hits, null, 2)}
@@ -28552,14 +29196,14 @@ var MEMORY_COMMANDS = {
   pull: memoryPull
 };
 async function memory({ context, args }) {
-  const name = args.words[1] ?? "";
-  const command = Object.hasOwn(MEMORY_COMMANDS, name) ? MEMORY_COMMANDS[name] : void 0;
-  if (!command) throw new CliUsageError(USAGE3);
+  const name2 = args.words[1] ?? "";
+  const command = Object.hasOwn(MEMORY_COMMANDS, name2) ? MEMORY_COMMANDS[name2] : void 0;
+  if (!command) throw new CliUsageError(USAGE4);
   await command({ context, args });
 }
 // src/services/schedule-commands.service.ts
-var USAGE4 = `Usage:
+var USAGE5 = `Usage:
   laze schedule add <name> --prompt <text> (--cron "<m h dom mon dow>" | --rrule "<RRULE>" | --at <local time>)
     [--tz <IANA zone>] [--channel <channelId>] [--agent <agentId>]
   laze schedule list
@@ -28571,7 +29215,7 @@ function timingOf(args) {
   const given = [cron, rrule, at].filter(Boolean);
   if (given.length !== 1)
     throw new CliUsageError(`Give exactly one of --cron, --rrule or --at.
-${USAGE4}`);
+${USAGE5}`);
   if (cron) return { kind: "cron", cron };
   if (rrule) return { kind: "rrule", rrule };
   return { kind: "once", at };
@@ -28584,15 +29228,15 @@ function printSchedule({ context, schedule: schedule2 }) {
   );
 }
 async function scheduleAdd({ context, args }) {
-  const name = args.words.slice(2).join(" ").trim();
+  const name2 = args.words.slice(2).join(" ").trim();
   const prompt = flagText({ args, name: "prompt" });
-  if (!name || !prompt) throw new CliUsageError(USAGE4);
+  if (!name2 || !prompt) throw new CliUsageError(USAGE5);
   const timing = timingOf(args);
   const { client } = await signedIn({ context, args });
   const channelId = flagText({ args, name: "channel" });
   const agentId = flagText({ args, name: "agent" });
   const schedule2 = await client.post("/api/schedules", {
-    name,
+    name: name2,
     prompt,
     timing,
     timezone: flagText({ args, name: "tz", fallback: "UTC" }),
@@ -28613,7 +29257,7 @@ async function scheduleList({ context, args }) {
 function byId(path) {
   return async ({ context, args }) => {
     const scheduleId = args.words[2];
-    if (!scheduleId) throw new CliUsageError(USAGE4);
+    if (!scheduleId) throw new CliUsageError(USAGE5);
     const { client } = await signedIn({ context, args });
     const answer3 = await client.post(`/api/schedules/${path}`, {
       scheduleId
@@ -28627,7 +29271,7 @@ function byId(path) {
 }
 async function scheduleRuns({ context, args }) {
   const scheduleId = args.words[2];
-  if (!scheduleId) throw new CliUsageError(USAGE4);
+  if (!scheduleId) throw new CliUsageError(USAGE5);
   const { client } = await signedIn({ context, args });
   const runs = await client.post("/api/schedules/runs", { scheduleId });
   if (args.flags.json) return context.out(`${JSON.stringify(runs, null, 2)}
@@ -28648,16 +29292,16 @@ var SCHEDULE_COMMANDS = {
   runs: scheduleRuns
 };
 async function schedule({ context, args }) {
-  const name = args.words[1] ?? "";
-  const command = Object.hasOwn(SCHEDULE_COMMANDS, name) ? SCHEDULE_COMMANDS[name] : void 0;
-  if (!command) throw new CliUsageError(USAGE4);
+  const name2 = args.words[1] ?? "";
+  const command = Object.hasOwn(SCHEDULE_COMMANDS, name2) ? SCHEDULE_COMMANDS[name2] : void 0;
+  if (!command) throw new CliUsageError(USAGE5);
   await command({ context, args });
 }
 // src/services/skill-commands.service.ts
-import { readdir as readdir3, readFile as readFile8 } from "node:fs/promises";
-import { join as join5, relative as relative3, resolve as resolve5 } from "node:path";
-var USAGE5 = `Usage:
+import { readdir as readdir3, readFile as readFile10 } from "node:fs/promises";
+import { join as join6, relative as relative3, resolve as resolve5 } from "node:path";
+var USAGE6 = `Usage:
   laze skill list
   laze skill install <catalogue-id> [--as <name>]
   laze skill install --from <folder> [--as <name>]   a folder with a SKILL.md
@@ -28668,8 +29312,8 @@ async function folderFiles({ root }) {
   const files = [];
   for (const entry of entries) {
     if (!entry.isFile()) continue;
-    const full = join5(entry.parentPath, entry.name);
-    files.push({ path: relative3(root, full), content: await readFile8(full, "utf8") });
+    const full = join6(entry.parentPath, entry.name);
+    files.push({ path: relative3(root, full), content: await readFile10(full, "utf8") });
   }
   return files.toSorted((a, b) => a.path.localeCompare(b.path));
 }
@@ -28688,13 +29332,13 @@ async function skillList({ context, args }) {
 async function skillInstall({ context, args }) {
   const catalogueId = args.words[2];
   const from = flagText({ args, name: "from" });
-  if (!catalogueId === !from) throw new CliUsageError(USAGE5);
-  const name = flagText({ args, name: "as" });
+  if (!catalogueId === !from) throw new CliUsageError(USAGE6);
+  const name2 = flagText({ args, name: "as" });
   const files = from ? await folderFiles({ root: resolve5(context.cwd, from) }) : void 0;
   const { client } = await signedIn({ context, args });
   const installed = await client.post("/api/skills/install", {
     ...catalogueId ? { catalogueId } : {},
-    ...name ? { name } : {},
+    ...name2 ? { name: name2 } : {},
     ...files ? { files } : {}
   });
   if (args.flags.json) return context.out(`${JSON.stringify(installed, null, 2)}
@@ -28703,10 +29347,10 @@ async function skillInstall({ context, args }) {
 `);
 }
 async function skillShow({ context, args }) {
-  const name = args.words[2];
-  if (!name) throw new CliUsageError(USAGE5);
+  const name2 = args.words[2];
+  if (!name2) throw new CliUsageError(USAGE6);
   const { client } = await signedIn({ context, args });
-  const skill2 = await client.post("/api/skills/show", { name });
+  const skill2 = await client.post("/api/skills/show", { name: name2 });
   if (args.flags.json) return context.out(`${JSON.stringify(skill2, null, 2)}
 `);
   context.out(`${skill2.name}${skill2.installed ? "" : " (not installed)"}: ${skill2.description}
@@ -28734,18 +29378,937 @@ var SKILL_COMMANDS = {
   pull: skillPull
 };
 async function skill({ context, args }) {
-  const name = args.words[1] ?? "";
-  const command = Object.hasOwn(SKILL_COMMANDS, name) ? SKILL_COMMANDS[name] : void 0;
-  if (!command) throw new CliUsageError(USAGE5);
+  const name2 = args.words[1] ?? "";
+  const command = Object.hasOwn(SKILL_COMMANDS, name2) ? SKILL_COMMANDS[name2] : void 0;
+  if (!command) throw new CliUsageError(USAGE6);
   await command({ context, args });
 }
+// src/services/update-commands.service.ts
+import { realpath } from "node:fs/promises";
+// src/rules/cli-update.rules.ts
+var CLI_PACKAGE_LATEST = "@lazehq/cli@latest";
+var MANAGERS = [
+  { manager: "bun", pattern: /[\\/]\.?bun[\\/]/, command: ["bun", "add", "-g"] },
+  { manager: "pnpm", pattern: /[\\/]\.?pnpm[\\/]/, command: ["pnpm", "add", "-g"] },
+  { manager: "yarn", pattern: /[\\/]yarn[\\/]global[\\/]/, command: ["yarn", "global", "add"] },
+  {
+    manager: "npm",
+    pattern: /[\\/]_npx[\\/]|[\\/]node_modules[\\/]@lazehq[\\/]cli[\\/]/,
+    command: ["npm", "install", "-g"]
+  }
+];
+var NPM_PREFIX = /^(.+)[\\/]lib[\\/]node_modules[\\/]@lazehq[\\/]cli[\\/]/;
+var NPX_CACHE2 = /[\\/]_npx[\\/]/;
+function updatePlanOf({ script }) {
+  if (script === SANDBOX_CLI_PATH) return { kind: "sandbox" };
+  const found = MANAGERS.find(({ pattern }) => pattern.test(script));
+  if (!found) return { kind: "unmanaged", script };
+  const prefix = found.manager === "npm" && !NPX_CACHE2.test(script) ? NPM_PREFIX.exec(script)?.[1] : void 0;
+  return {
+    kind: "install",
+    manager: found.manager,
+    command: [...found.command, ...prefix ? ["--prefix", prefix] : [], CLI_PACKAGE_LATEST]
+  };
+}
+// src/services/update-commands.service.ts
+var BY_HAND = `npm install -g ${CLI_PACKAGE_LATEST}`;
+async function realScriptOf({ program }) {
+  const script = program.at(-1) ?? "";
+  try {
+    return await realpath(script);
+  } catch {
+    return script;
+  }
+}
+async function update({
+  context,
+  args
+}) {
+  const plan = updatePlanOf({ script: await realScriptOf({ program: context.program }) });
+  if (plan.kind === "sandbox") {
+    context.out("This laze comes with the Laze sandbox and updates with every Laze release.\n");
+    return 0;
+  }
+  if (plan.kind === "unmanaged") {
+    context.err(
+      `This laze (${plan.script}) was not installed by a package manager. Install the published one with: ${BY_HAND}
+`
+    );
+    return 1;
+  }
+  const line = plan.command.join(" ");
+  if (args.flags["dry-run"]) {
+    context.out(`laze ${cliVersionOf()}, installed with ${plan.manager}. Would run: ${line}
+`);
+    return 0;
+  }
+  context.out(`Updating laze ${cliVersionOf()} with ${plan.manager}: ${line}
+`);
+  const code = await context.runCommand({ command: plan.command, env: {} });
+  if (code !== 0) {
+    context.err(`${plan.manager} exited ${code}. Update by hand with: ${line}
+`);
+    return code;
+  }
+  context.out("Updated. `laze --version` names the new version.\n");
+  return 0;
+}
 // src/services/vault-commands.service.ts
-import { readFile as readFile9 } from "node:fs/promises";
-var USAGE6 = `Usage: laze vault run <connection> --reason "<one plain sentence>" [--wait <s>] -- <command> [args...]
+import { createHash } from "node:crypto";
+import { mkdir as mkdir6, readFile as readFile11, rm as rm3, writeFile as writeFile6 } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname as dirname4, join as join7 } from "node:path";
+// ../../modules/vault/contract/src/resolution-note.ts
+var RESOLUTION_NOTE_MAX_CHARS = 500;
+function cleanResolutionNote(text2) {
+  const oneLine = (text2 ?? "").replace(/[\r\n\u2028\u2029]+/g, " ").replace(/[\p{Cc}\p{Cf}]/gu, "").trim();
+  return Array.from(oneLine).slice(0, RESOLUTION_NOTE_MAX_CHARS).join("").trim();
+}
+var resolutionNoteSchema = external_exports.string().max(4e3).default("").transform((text2) => cleanResolutionNote(text2));
+// ../../modules/vault/contract/src/vault-devices.ts
+var base64Url = external_exports.string().regex(/^[A-Za-z0-9_-]+$/).max(16384);
+var name = external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,62}$/);
+var fieldName = external_exports.string().regex(/^[A-Z][A-Z0-9_]{0,63}$/);
+var vaultDeviceKindSchema = external_exports.enum([
+  "passkey",
+  "ios_secure_enclave",
+  "macos_secure_enclave"
+]);
+var NATIVE_DEVICE_KINDS = ["ios_secure_enclave", "macos_secure_enclave"];
+var vaultDeviceStateSchema = external_exports.enum(["pending", "active"]);
+var vaultDevicePasskeySchemaDefinition = external_exports.object({
+  credentialId: base64Url,
+  prfSalt: base64Url,
+  wrappedPrivateKey: base64Url
+});
+var vaultDeviceSchemaDefinition = external_exports.object({
+  id: external_exports.string().min(1),
+  workspaceId: external_exports.string().min(1),
+  userId: external_exports.string().min(1),
+  label: external_exports.string(),
+  kind: vaultDeviceKindSchema,
+  state: vaultDeviceStateSchema,
+  /** P-256 uncompressed point, base64url. */
+  publicKey: base64Url,
+  /** `4F2A 91C0`: the first four bytes of sha256(publicKey). */
+  fingerprint: external_exports.string(),
+  /** What the browser needs to unlock the device's key with its passkey; null for native. */
+  passkey: vaultDevicePasskeySchemaDefinition.nullable(),
+  createdAt: external_exports.iso.datetime(),
+  activatedAt: external_exports.iso.datetime().nullable()
+});
+var vaultDeviceSchema = vaultDeviceSchemaDefinition;
+var vaultDeviceEnrolmentSchemaDefinition = external_exports.object({
+  deviceId: external_exports.string(),
+  /** Signed by the vault: the WebAuthn challenge is its UTF-8 bytes. */
+  challenge: external_exports.string(),
+  /** The passkey's user handle and names. */
+  userId: external_exports.string(),
+  /** True when this person has no active device, so the new one is active at once. */
+  first: external_exports.boolean()
+});
+var vaultDeviceEnrolmentSchema = vaultDeviceEnrolmentSchemaDefinition;
+var finishVaultDeviceEnrolmentInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  deviceId: external_exports.string().min(1),
+  challenge: external_exports.string().min(1),
+  label: external_exports.string().trim().min(1).max(80),
+  publicKey: base64Url,
+  passkey: external_exports.object({
+    ...vaultDevicePasskeySchemaDefinition.shape,
+    /** The passkey's own public key, SPKI DER, ES256 only. */
+    credentialPublicKey: base64Url,
+    credentialAlgorithm: external_exports.literal(-7),
+    clientDataJSON: base64Url
+  }).optional(),
+  /** A Secure Enclave device instead of a passkey: its signing key and proof of holding it. */
+  native: external_exports.object({
+    kind: external_exports.enum(NATIVE_DEVICE_KINDS),
+    /** P-256 SPKI DER; signs approvals of later devices. */
+    signingPublicKey: base64Url,
+    /** DER ECDSA over nativeSignedMessage({ purpose: "enrol", challenge }). */
+    signature: base64Url
+  }).optional()
+});
+var finishVaultDeviceEnrolmentInputSchema = finishVaultDeviceEnrolmentInputSchemaDefinition;
+var sealedRecipientSchema = external_exports.object({
+  deviceId: external_exports.string().min(1),
+  epk: base64Url,
+  wrappedKey: base64Url
+});
+var sealedSecretSchemaDefinition = external_exports.object({
+  blob: base64Url,
+  recipients: external_exports.array(sealedRecipientSchema).min(1).max(32)
+});
+var vaultDeviceAssertionSchemaDefinition = external_exports.object({
+  credentialId: base64Url,
+  clientDataJSON: base64Url,
+  authenticatorData: base64Url,
+  signature: base64Url
+});
+var vaultNativeAssertionSchemaDefinition = external_exports.object({
+  approverDeviceId: external_exports.string().min(1),
+  /** DER ECDSA over nativeSignedMessage({ purpose: "approve", challenge }). */
+  nativeSignature: base64Url
+});
+var approveVaultDeviceInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  deviceId: external_exports.string().min(1),
+  challenge: external_exports.string().min(1),
+  assertion: external_exports.union([vaultDeviceAssertionSchemaDefinition, vaultNativeAssertionSchemaDefinition]),
+  /** The new device's recipient for every sealed secret of the owner. */
+  recipients: external_exports.array(
+    external_exports.object({ connectionId: external_exports.string().min(1), recipient: sealedRecipientSchema })
+  )
+});
+var approveVaultDeviceInputSchema = approveVaultDeviceInputSchemaDefinition;
+var createSealedConnectionInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  name,
+  label: external_exports.string().trim().min(1).max(120),
+  sensitivity: external_exports.enum(["ask", "human_only"]).default("ask"),
+  rules: external_exports.string().max(2e3).default(""),
+  fieldNames: external_exports.array(fieldName).min(1).max(32),
+  sealed: sealedSecretSchemaDefinition,
+  /** Only a personal API key set is sealed for now; anything else is refused, not ignored. */
+  keychain: external_exports.enum(["personal", "workspace", "agent"]).default("personal"),
+  kind: external_exports.enum(["api_key_set", "oauth", "mcp"]).default("api_key_set")
+});
+var createSealedConnectionInputSchema = createSealedConnectionInputSchemaDefinition;
+var resealConnectionInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  connectionId: external_exports.string().min(1),
+  fieldNames: external_exports.array(fieldName).min(1).max(32),
+  sealed: sealedSecretSchemaDefinition
+});
+var resealConnectionInputSchema = resealConnectionInputSchemaDefinition;
+var vaultSealedMaterialSchemaDefinition = external_exports.object({
+  connectionId: external_exports.string(),
+  workspaceId: external_exports.string(),
+  ownerUserId: external_exports.string(),
+  name,
+  label: external_exports.string(),
+  fieldNames: external_exports.array(external_exports.string()),
+  blob: base64Url,
+  recipients: external_exports.array(sealedRecipientSchema)
+});
+var vaultSealedMaterialSchema = vaultSealedMaterialSchemaDefinition;
+var vaultSealedApprovalSchemaDefinition = external_exports.object({
+  requestId: external_exports.string(),
+  agentId: external_exports.string(),
+  reason: external_exports.string(),
+  command: external_exports.array(external_exports.string()),
+  /** The run's public key; the opened value is encrypted to it and nothing else. */
+  runPublicKey: base64Url,
+  material: vaultSealedMaterialSchemaDefinition
+});
+var vaultSealedApprovalSchema = vaultSealedApprovalSchemaDefinition;
+var vaultUi = uiTokens("vault");
+var VaultSealedApprovalSlot = vaultUi.component("sealedApproval");
+var VaultNavSlot = vaultUi.component("nav");
+var answerSealedApprovalInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  requestId: external_exports.string().min(1),
+  release: external_exports.object({ epk: base64Url, ciphertext: base64Url }),
+  via: external_exports.enum(["feed", "channel", "ios", "desktop", "web"]).default("web")
+});
+var answerSealedApprovalInputSchema = answerSealedApprovalInputSchemaDefinition;
+var vaultRunSealedReleaseSchemaDefinition = external_exports.object({
+  requestId: external_exports.string(),
+  epk: base64Url,
+  ciphertext: base64Url
+});
+var vaultRunSealedReleaseSchema = vaultRunSealedReleaseSchemaDefinition;
+// ../../modules/vault/contract/src/vault-paste.ts
+var connectionName = external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,62}$/);
+var fieldName2 = external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/).max(64);
+var compareVaultSecretInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  name: connectionName,
+  /** One field of the bundle; without it any field holding the value reads as `same`. */
+  field: fieldName2.optional(),
+  value: external_exports.string().min(1).max(2e4)
+});
+var compareVaultSecretInputSchema = compareVaultSecretInputSchemaDefinition;
+var vaultSecretComparisonSchemaDefinition = external_exports.object({
+  result: external_exports.enum(["absent", "same", "different"]),
+  connectionId: external_exports.string().nullable()
+});
+var vaultSecretComparisonSchema = vaultSecretComparisonSchemaDefinition;
+var replaceVaultSecretValueInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  connectionId: external_exports.string().min(1),
+  /** The field to replace; without it, the connection's only field. */
+  field: fieldName2.optional(),
+  value: external_exports.string().min(1).max(2e4)
+});
+var replaceVaultSecretValueInputSchema = replaceVaultSecretValueInputSchemaDefinition;
+// ../../modules/vault/contract/src/vault-reason.ts
+var COMMAND_STARTS = new Set(
+  "sudo laze kv aws curl wget npm pnpm yarn npx git gh kubectl helm docker terraform python python3 node bash sh zsh export cd make cargo go ssh scp psql uv pip echo cat env clickhouse-client".split(
+    " "
+  )
+);
+function checkVaultReason(reason) {
+  const text2 = (reason ?? "").trim();
+  if (text2 === "") return "missing";
+  if (text2.includes("\n") || Array.from(text2).length > 200) return "too_long";
+  const words = text2.split(/\s+/);
+  if (COMMAND_STARTS.has((words[0] ?? "").toLowerCase())) return "looks_like_command";
+  if (/(^|\s)--?[A-Za-z]/.test(text2) || /[|;&`$<>{}]/.test(text2)) return "looks_like_command";
+  if (words.length < 4) return "too_short";
+  return "ok";
+}
+var vaultReasonSchema = external_exports.string().transform((reason) => reason.trim()).superRefine((reason, context) => {
+  const problem = checkVaultReason(reason);
+  if (problem !== "ok")
+    context.addIssue({ code: "custom", message: problem, params: { problem } });
+});
+// ../../modules/vault/contract/src/vault.ts
+var vaultSensitivitySchema = external_exports.enum(["auto", "checked", "ask", "human_only"]);
+var vaultKeychainSchemaDefinition = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("personal"), ownerUserId: external_exports.string().min(1) }),
+  external_exports.object({ kind: external_exports.literal("workspace") }),
+  external_exports.object({ kind: external_exports.literal("agent"), agentId: external_exports.string().min(1) })
+]);
+var vaultKeychainSchema = vaultKeychainSchemaDefinition;
+var vaultConnectionKindSchema = external_exports.enum(["api_key_set", "oauth", "mcp"]);
+var vaultConnectionStatusSchema = external_exports.enum(["active", "needs_reconnect"]);
+var vaultFieldNameSchema = external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/).max(64);
+var vaultConnectionNameSchema = external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,62}$/);
+var vaultOAuthRevokeStyleSchema = external_exports.enum(["rfc7009", "github_grant", "slack"]);
+var vaultOAuthClientSchemaDefinition = external_exports.object({
+  tokenUrl: external_exports.url(),
+  clientId: external_exports.string().min(1),
+  clientSecret: external_exports.string().min(1).nullable().default(null),
+  authMethod: external_exports.enum(["client_secret_post", "client_secret_basic", "none", "github_app"]).default("client_secret_post"),
+  /** How the token endpoint reads its body. */
+  bodyFormat: external_exports.enum(["form", "json"]).default("form"),
+  /** Where a nested provider answer keeps the person's token, Slack's `authed_user`. */
+  tokenPath: external_exports.enum(["authed_user"]).nullable().default(null),
+  revoke: external_exports.object({ style: vaultOAuthRevokeStyleSchema, url: external_exports.url() }).nullable().default(null)
+});
+var vaultOAuthClientSchema = vaultOAuthClientSchemaDefinition;
+var vaultOAuthTokensSchemaDefinition = external_exports.object({
+  accessToken: external_exports.string().min(1),
+  refreshToken: external_exports.string().min(1).nullable().default(null),
+  /** ISO 8601; null when the provider's access tokens do not expire. */
+  expiresAt: external_exports.iso.datetime().nullable().default(null),
+  scopes: external_exports.array(external_exports.string().min(1)).default([]),
+  client: vaultOAuthClientSchema
+});
+var vaultOAuthTokensSchema = vaultOAuthTokensSchemaDefinition;
+var vaultSecretBundleSchemaDefinition = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("api_key_set"),
+    fields: external_exports.record(vaultFieldNameSchema, external_exports.string().min(1))
+  }),
+  /** A grant from a provider in the connector registry: Gmail, GitHub, Slack and the rest. */
+  external_exports.object({
+    kind: external_exports.literal("oauth"),
+    provider: external_exports.string().min(1),
+    /** Who the grant is for at the provider, shown to the owner: an address or a login. */
+    account: external_exports.string().min(1).nullable().default(null),
+    tokens: vaultOAuthTokensSchema
+  }),
+  /** A remote MCP server: the headers it takes, and its OAuth tokens when it signs people in. */
+  external_exports.object({
+    kind: external_exports.literal("mcp"),
+    serverUrl: external_exports.url(),
+    headers: external_exports.record(external_exports.string().regex(/^[A-Za-z0-9-]{1,64}$/), external_exports.string().min(1)).default({}),
+    tokens: vaultOAuthTokensSchema.nullable().default(null)
+  })
+]);
+var vaultSecretBundleSchema = vaultSecretBundleSchemaDefinition;
+var vaultConnectorDetailsSchemaDefinition = external_exports.object({
+  provider: external_exports.string().nullable(),
+  serverUrl: external_exports.string().nullable(),
+  account: external_exports.string().nullable(),
+  scopes: external_exports.array(external_exports.string()),
+  /** When the access token runs out; the vault refreshes it on the next use. */
+  expiresAt: external_exports.iso.datetime().nullable()
+});
+var vaultConnectorDetailsSchema = vaultConnectorDetailsSchemaDefinition;
+var vaultEgressTargetSchemaDefinition = external_exports.object({
+  upstream: external_exports.url(),
+  header: external_exports.string().min(1).default("Authorization"),
+  prefix: external_exports.string().default("Bearer "),
+  field: vaultFieldNameSchema,
+  /** Paths whose writes ask a person at any level, such as sending mail; `*` is one segment. */
+  askPaths: external_exports.array(external_exports.string().regex(/^\/[^?\s]*$/)).default([])
+});
+var vaultEgressTargetSchema = vaultEgressTargetSchemaDefinition;
+var VAULT_MAX_LEASE_SECONDS = 2 * 86400;
+var vaultConnectionSchemaDefinition = external_exports.object({
+  id: external_exports.string().min(1),
+  workspaceId: external_exports.string().min(1),
+  name: vaultConnectionNameSchema,
+  label: external_exports.string(),
+  kind: vaultConnectionKindSchema,
+  keychain: vaultKeychainSchema,
+  sensitivity: vaultSensitivitySchema,
+  /** Plain-language rules the judge reads: "Read only; never send mail." */
+  rules: external_exports.string(),
+  /** Who answers an ask on a workspace or agent keychain; a personal one asks its owner. */
+  approverUserIds: external_exports.array(external_exports.string().min(1)),
+  /** The longest lease an approver may give, set by an admin. */
+  maxLeaseSeconds: external_exports.number().int().positive().nullable(),
+  /** Every use asks a person: no lease is offered and none covers it. */
+  everyUseAsks: external_exports.boolean().default(false),
+  fieldNames: external_exports.array(vaultFieldNameSchema),
+  egress: vaultEgressTargetSchema.nullable(),
+  status: vaultConnectionStatusSchema,
+  /** Provider, account, scopes and expiry of an OAuth or MCP connection; null for API keys. */
+  connector: vaultConnectorDetailsSchema.nullable(),
+  /** Sealed to its owner's devices: the server cannot open it. */
+  sealed: external_exports.boolean().default(false),
+  /** False for a sealed connection no enrolled device can open any more. */
+  openable: external_exports.boolean().default(true),
+  createdByUserId: external_exports.string(),
+  /** ISO 8601 */
+  createdAt: external_exports.iso.datetime(),
+  updatedAt: external_exports.iso.datetime()
+});
+var vaultConnectionSchema = vaultConnectionSchemaDefinition;
+var createVaultConnectionInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  name: vaultConnectionNameSchema,
+  label: external_exports.string().trim().min(1).max(120),
+  keychain: vaultKeychainSchema,
+  sensitivity: vaultSensitivitySchema,
+  rules: external_exports.string().max(2e3).default(""),
+  approverUserIds: external_exports.array(external_exports.string().min(1)).default([]),
+  maxLeaseSeconds: external_exports.number().int().positive().max(VAULT_MAX_LEASE_SECONDS).nullable().default(null),
+  everyUseAsks: external_exports.boolean().default(false),
+  secret: vaultSecretBundleSchema,
+  egress: vaultEgressTargetSchema.nullable().default(null)
+});
+var createVaultConnectionInputSchema = createVaultConnectionInputSchemaDefinition;
+var updateVaultConnectionInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  connectionId: external_exports.string().min(1),
+  label: external_exports.string().trim().min(1).max(120).optional(),
+  sensitivity: vaultSensitivitySchema.optional(),
+  rules: external_exports.string().max(2e3).optional(),
+  approverUserIds: external_exports.array(external_exports.string().min(1)).optional(),
+  maxLeaseSeconds: external_exports.number().int().positive().max(VAULT_MAX_LEASE_SECONDS).nullable().optional(),
+  everyUseAsks: external_exports.boolean().optional(),
+  secret: vaultSecretBundleSchema.optional(),
+  egress: vaultEgressTargetSchema.nullable().optional()
+});
+var updateVaultConnectionInputSchema = updateVaultConnectionInputSchemaDefinition;
+var vaultGrantSubjectSchemaDefinition = external_exports.object({
+  kind: external_exports.enum(["person", "group", "channel", "agent"]),
+  id: external_exports.string().min(1)
+});
+var vaultGrantSubjectSchema = vaultGrantSubjectSchemaDefinition;
+var vaultGrantSchemaDefinition = external_exports.object({
+  id: external_exports.string().min(1),
+  connectionId: external_exports.string().min(1),
+  subject: vaultGrantSubjectSchema,
+  /** A lend: a personal connection opened to one channel's members through its owner's agent. */
+  lend: external_exports.boolean(),
+  grantedByUserId: external_exports.string(),
+  expiresAt: external_exports.iso.datetime().nullable(),
+  createdAt: external_exports.iso.datetime()
+});
+var vaultGrantSchema = vaultGrantSchemaDefinition;
+var grantVaultConnectionInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  connectionId: external_exports.string().min(1),
+  subject: vaultGrantSubjectSchema,
+  /** No end when null. */
+  durationSeconds: external_exports.number().int().positive().nullable().default(null)
+});
+var grantVaultConnectionInputSchema = grantVaultConnectionInputSchemaDefinition;
+var lendVaultConnectionInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  connectionId: external_exports.string().min(1),
+  channelId: external_exports.string().min(1),
+  durationSeconds: external_exports.number().int().positive().nullable().default(null)
+});
+var lendVaultConnectionInputSchema = lendVaultConnectionInputSchemaDefinition;
+var vaultAgentKindSchema = external_exports.enum(["personal", "team"]);
+var openVaultTurnInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  agent: external_exports.object({
+    id: external_exports.string().min(1),
+    kind: vaultAgentKindSchema,
+    ownerUserId: external_exports.string().min(1)
+  }),
+  requesterUserId: external_exports.string().min(1),
+  requesterGroupIds: external_exports.array(external_exports.string().min(1)).default([]),
+  channel: external_exports.object({ id: external_exports.string().min(1), kind: external_exports.enum(["public", "private", "dm"]) }),
+  /** False when the requester can no longer see the channel (a schedule's creator who left). */
+  requesterSeesChannel: external_exports.boolean().default(true),
+  /** The thread the agent answers in, so its approval cards show there; null for the channel. */
+  threadRootId: external_exports.string().min(1).nullable().default(null),
+  /** Where the agent runs: a Laze sandbox, or a machine that reaches Laze over the network. */
+  origin: external_exports.enum(["sandbox", "network"]).default("sandbox"),
+  /** The requester's messages in this conversation, oldest first: the judge's permission. */
+  requesterMessages: external_exports.array(external_exports.string()).default([]),
+  /** Everyone else's messages, oldest first: context for the judge, never permission. */
+  otherMessages: external_exports.array(external_exports.object({ sender: external_exports.string().min(1), text: external_exports.string() })).default([])
+});
+var vaultAlwaysApprovalActionSchema = external_exports.enum([
+  "send_external",
+  "publish_app_public",
+  "rent_compute_above_budget",
+  "create_agent_with_workspace_access",
+  "invite_people"
+]);
+var VAULT_ALWAYS_APPROVAL_ACTIONS = vaultAlwaysApprovalActionSchema.options;
+var vaultPurposeSchema = external_exports.enum(["use", "send_external"]);
+var vaultDraftPreviewSchemaDefinition = external_exports.object({
+  header: external_exports.string().max(2e3),
+  body: external_exports.string().max(2e4)
+});
+var vaultDraftPreviewSchema = vaultDraftPreviewSchemaDefinition;
+var vaultUseInputSchemaDefinition = external_exports.object({
+  turnToken: external_exports.string().min(1),
+  /** The connection's name as the agent asks for it, or its id. */
+  connection: external_exports.string().min(1),
+  purpose: vaultPurposeSchema.default("use"),
+  reason: vaultReasonSchema,
+  command: external_exports.array(external_exports.string()).default([]),
+  /** OAuth scopes this use needs; a grant without them is refused with the missing ones. */
+  requiredScopes: external_exports.array(external_exports.string().min(1)).default([]),
+  /** A floor on the connection's sensitivity, for a tool its owner marked more guarded. */
+  atLeast: vaultSensitivitySchema.optional(),
+  /** The caller knows the use only reads, such as an MCP tool marked read-only. */
+  readOnly: external_exports.boolean().default(false),
+  /** A use that would ask comes back denied with no card: a lookup made only for another card. */
+  withoutAsking: external_exports.boolean().default(false),
+  /** What a send would send, shown on its card; never stored. */
+  preview: vaultDraftPreviewSchema.optional()
+});
+var vaultRunReleaseSchemaDefinition = external_exports.discriminatedUnion("outcome", [
+  external_exports.object({
+    outcome: external_exports.literal("allow"),
+    env: external_exports.record(external_exports.string(), external_exports.string()),
+    /** A sealed connection's values, encrypted to the run's own key. */
+    sealed: vaultRunSealedReleaseSchema.optional(),
+    /** What the approver told the agent, for the run to print. */
+    message: external_exports.string().optional()
+  }),
+  external_exports.object({
+    outcome: external_exports.literal("ask"),
+    requestId: external_exports.string(),
+    message: external_exports.string()
+  }),
+  external_exports.object({ outcome: external_exports.literal("deny"), exitCode: external_exports.number().int(), message: external_exports.string() })
+]);
+var vaultEgressResolveInputSchemaDefinition = external_exports.object({
+  agentId: external_exports.string().min(1),
+  connectionId: external_exports.string().min(1),
+  method: external_exports.string().default("GET"),
+  host: external_exports.string().default(""),
+  path: external_exports.string().default("/"),
+  /** A floor the proxy sets for a guarded request, such as a git push asking before it goes. */
+  atLeast: vaultSensitivitySchema.optional(),
+  /** What the proxy knows the request is, such as "git push to github.com/acme/widgets". */
+  reason: external_exports.string().max(300).optional()
+});
+var vaultEgressResolutionSchemaDefinition = external_exports.discriminatedUnion("decision", [
+  external_exports.object({ decision: external_exports.literal("allow"), value: external_exports.string() }),
+  external_exports.object({ decision: external_exports.literal("pending"), requestId: external_exports.string() }),
+  external_exports.object({
+    decision: external_exports.literal("deny"),
+    code: external_exports.string(),
+    /** Who denied it and the note they sent the agent, for the proxy to pass on. */
+    message: external_exports.string().optional()
+  })
+]);
+var vaultEgressReleaseInputSchemaDefinition = external_exports.object({
+  agentId: external_exports.string().min(1),
+  connection: external_exports.string().min(1),
+  reason: external_exports.string(),
+  command: external_exports.array(external_exports.string()).default([]),
+  /** The run's P-256 public key, base64url; a sealed connection is released only to it. */
+  recipient: external_exports.string().max(200).optional()
+});
+var vaultEgressStatusInputSchemaDefinition = external_exports.object({
+  agentId: external_exports.string().min(1),
+  requestId: external_exports.string().min(1)
+});
+var vaultApprovalStateSchema = external_exports.enum([
+  "pending",
+  "approved_once",
+  "approved_for_agent",
+  "denied",
+  "expired"
+]);
+var vaultAnswerViaSchema = external_exports.enum(["feed", "channel", "ios", "desktop", "web"]);
+var vaultApprovalRequestSchemaDefinition = external_exports.object({
+  id: external_exports.string(),
+  workspaceId: external_exports.string(),
+  /** Null for an always-approval action that uses no connection. */
+  connectionId: external_exports.string().nullable(),
+  action: external_exports.string(),
+  agentId: external_exports.string(),
+  agentKind: vaultAgentKindSchema,
+  requesterUserId: external_exports.string(),
+  channelId: external_exports.string(),
+  reason: external_exports.string(),
+  command: external_exports.array(external_exports.string()),
+  why: external_exports.string(),
+  approverUserIds: external_exports.array(external_exports.string()),
+  state: vaultApprovalStateSchema,
+  /** How many asks joined this card. */
+  joinCount: external_exports.number().int().positive(),
+  createdAt: external_exports.iso.datetime(),
+  expiresAt: external_exports.iso.datetime(),
+  answeredByUserId: external_exports.string().nullable(),
+  answeredVia: vaultAnswerViaSchema.nullable(),
+  answeredAt: external_exports.iso.datetime().nullable(),
+  leaseExpiresAt: external_exports.iso.datetime().nullable(),
+  /** What the person who answered told the agent; empty when nothing. */
+  resolutionNote: external_exports.string().default("")
+});
+var vaultApprovalRequestSchema = vaultApprovalRequestSchemaDefinition;
+var answerVaultApprovalInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  requestId: external_exports.string().min(1),
+  answer: external_exports.enum(["approve_once", "approve_for_agent", "deny"]),
+  /** Approve for this agent only: up to the connection's admin maximum. */
+  durationSeconds: external_exports.number().int().positive().optional(),
+  via: vaultAnswerViaSchema,
+  /** A short reason, question or steer for the agent, sent with the answer. */
+  resolutionNote: resolutionNoteSchema
+});
+var answerVaultApprovalInputSchema = answerVaultApprovalInputSchemaDefinition;
+var requestVaultActionInputSchemaDefinition = external_exports.object({
+  turnToken: external_exports.string().min(1),
+  action: vaultAlwaysApprovalActionSchema,
+  reason: vaultReasonSchema,
+  /** The people the owning module says decide; the requester when empty. */
+  approverUserIds: external_exports.array(external_exports.string().min(1)).default([])
+});
+var vaultAuditEntrySchemaDefinition = external_exports.object({
+  id: external_exports.string(),
+  seq: external_exports.number().int().positive(),
+  at: external_exports.iso.datetime(),
+  actorKind: external_exports.enum(["user", "agent", "system"]),
+  actorId: external_exports.string().nullable(),
+  action: external_exports.string(),
+  connectionId: external_exports.string().nullable(),
+  outcome: external_exports.string(),
+  decider: external_exports.string().nullable(),
+  requesterUserId: external_exports.string().nullable(),
+  agentId: external_exports.string().nullable(),
+  channelId: external_exports.string().nullable(),
+  requestId: external_exports.string().nullable(),
+  reason: external_exports.string().nullable(),
+  detail: external_exports.record(external_exports.string(), external_exports.unknown()),
+  prevHash: external_exports.string(),
+  hash: external_exports.string()
+});
+var vaultAuditEntrySchema = vaultAuditEntrySchemaDefinition;
+var vaultAuditPageSchemaDefinition = external_exports.object({
+  entries: external_exports.array(vaultAuditEntrySchema),
+  /** The chain re-hashed: when broken, the first entry that does not follow from the last. */
+  chain: external_exports.object({ intact: external_exports.boolean(), brokenAtSeq: external_exports.number().int().nullable() })
+});
+var vaultAuditPageSchema = vaultAuditPageSchemaDefinition;
+var vaultMostAskedInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  days: external_exports.number().int().min(1).max(365).default(30)
+});
+var vaultMostAskedInputSchema = vaultMostAskedInputSchemaDefinition;
+var vaultMostAskedSchemaDefinition = external_exports.object({
+  days: external_exports.number().int().positive(),
+  since: external_exports.iso.datetime(),
+  /** Per connection, the cards that reached a person, most first; owner actions are left out. */
+  connections: external_exports.array(
+    external_exports.object({
+      connectionId: external_exports.string(),
+      cards: external_exports.number().int().nonnegative(),
+      /** Every ask that joined one of those cards. */
+      asks: external_exports.number().int().nonnegative(),
+      approved: external_exports.number().int().nonnegative(),
+      denied: external_exports.number().int().nonnegative(),
+      expired: external_exports.number().int().nonnegative(),
+      pending: external_exports.number().int().nonnegative(),
+      /** Cards by why the vault asked: `sensitivity_ask`, `judge_unsure`, `rate_limited`... */
+      why: external_exports.record(external_exports.string(), external_exports.number().int().nonnegative()),
+      /** The newest distinct reasons and commands callers gave, redacted like every audit line. */
+      samples: external_exports.array(
+        external_exports.object({
+          at: external_exports.iso.datetime(),
+          agentId: external_exports.string().nullable(),
+          reason: external_exports.string().nullable(),
+          command: external_exports.array(external_exports.string())
+        })
+      )
+    })
+  )
+});
+var vaultMostAskedSchema = vaultMostAskedSchemaDefinition;
+var vaultConnectionUseSchemaDefinition = external_exports.object({
+  at: external_exports.iso.datetime(),
+  action: external_exports.string(),
+  outcome: external_exports.string(),
+  agentId: external_exports.string().nullable(),
+  requesterUserId: external_exports.string().nullable(),
+  channelId: external_exports.string().nullable(),
+  reason: external_exports.string().nullable(),
+  /** The command or tool, as the use named it. */
+  command: external_exports.array(external_exports.string())
+});
+var vaultConnectionUseSchema = vaultConnectionUseSchemaDefinition;
+var vaultRevokeAtProviderSchema = external_exports.enum(["revoked", "failed", "not_supported"]);
+var saveGithubInstallationInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  installationId: external_exports.string().regex(/^\d{1,20}$/),
+  account: external_exports.string().min(1).max(100),
+  name: external_exports.string().min(1).max(64),
+  label: external_exports.string().min(1).max(200),
+  approverUserIds: external_exports.array(external_exports.string()).default([]),
+  /** The connection to point at this installation again, after a reinstall. */
+  connectionId: external_exports.string().optional()
+});
+var vaultJudgeStatusSchemaDefinition = external_exports.object({ configured: external_exports.boolean() });
+var vaultJudgeStatusSchema = vaultJudgeStatusSchemaDefinition;
+var vaultLimitSubjectSchema = external_exports.string().regex(/^[a-z0-9-]+(\.[a-z]+)?$/);
+var vaultLevelLimitSchemaDefinition = external_exports.object({
+  subject: vaultLimitSubjectSchema,
+  most: vaultSensitivitySchema.exclude(["auto"]),
+  updatedByUserId: external_exports.string(),
+  updatedAt: external_exports.iso.datetime()
+});
+var vaultLevelLimitSchema = vaultLevelLimitSchemaDefinition;
+var setVaultLevelLimitInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  subject: vaultLimitSubjectSchema,
+  most: vaultSensitivitySchema.exclude(["auto"]).nullable()
+});
+var setVaultLevelLimitInputSchema = setVaultLevelLimitInputSchemaDefinition;
+var VaultApi = moduleApi()("vault");
+var workspaceInput = external_exports.object({ workspaceId: external_exports.string().min(1) });
+var connectionInput = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  connectionId: external_exports.string().min(1)
+});
+var vaultTrpc = defineTrpcContract("vault").mutation("createConnection").withInput(createVaultConnectionInputSchema).withOutput(vaultConnectionSchema).query("listConnections").withInput(workspaceInput).withOutput(external_exports.array(vaultConnectionSchema)).mutation("updateConnection").withInput(updateVaultConnectionInputSchema).withOutput(vaultConnectionSchema).mutation("deleteConnection").withInput(connectionInput).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).mutation("revokeConnection").withInput(connectionInput).withOutput(external_exports.object({ atProvider: vaultRevokeAtProviderSchema })).query("listConnectionUses").withInput(
+  external_exports.object({ ...connectionInput.shape, limit: external_exports.number().int().min(1).max(200).optional() })
+).withOutput(external_exports.array(vaultConnectionUseSchema)).mutation("revealConnection").withInput(external_exports.object({ ...connectionInput.shape, reason: external_exports.string().trim().min(1).max(200) })).withOutput(external_exports.object({ fields: external_exports.record(external_exports.string(), external_exports.string()) })).mutation("grantConnection").withInput(grantVaultConnectionInputSchema).withOutput(vaultGrantSchema).mutation("lendToChannel").withInput(lendVaultConnectionInputSchema).withOutput(vaultGrantSchema).mutation("revokeGrant").withInput(external_exports.object({ workspaceId: external_exports.string().min(1), grantId: external_exports.string().min(1) })).withOutput(external_exports.object({ revoked: external_exports.literal(true) })).query("listGrants").withInput(connectionInput).withOutput(external_exports.array(vaultGrantSchema)).query("listApprovals").withInput(external_exports.object({ ...workspaceInput.shape, state: vaultApprovalStateSchema.optional() })).withOutput(external_exports.array(vaultApprovalRequestSchema)).mutation("answerApproval").withInput(answerVaultApprovalInputSchema).withOutput(vaultApprovalRequestSchema).query("listAudit").withInput(
+  external_exports.object({ ...workspaceInput.shape, limit: external_exports.number().int().min(1).max(500).optional() })
+).withOutput(vaultAuditPageSchema).query("mostAsked").withInput(vaultMostAskedInputSchema).withOutput(vaultMostAskedSchema).query("judgeStatus").withInput(workspaceInput).withOutput(vaultJudgeStatusSchema).query("listLevelLimits").withInput(workspaceInput).withOutput(external_exports.array(vaultLevelLimitSchema)).mutation("setLevelLimit").withInput(setVaultLevelLimitInputSchema).withOutput(external_exports.array(vaultLevelLimitSchema)).query("listDevices").withInput(workspaceInput).withOutput(external_exports.array(vaultDeviceSchema)).mutation("beginDeviceEnrolment").withInput(workspaceInput).withOutput(vaultDeviceEnrolmentSchema).mutation("finishDeviceEnrolment").withInput(finishVaultDeviceEnrolmentInputSchema).withOutput(vaultDeviceSchema).mutation("beginDeviceApproval").withInput(external_exports.object({ ...workspaceInput.shape, deviceId: external_exports.string().min(1) })).withOutput(external_exports.object({ challenge: external_exports.string(), sealed: external_exports.array(vaultSealedMaterialSchema) })).mutation("approveDevice").withInput(approveVaultDeviceInputSchema).withOutput(vaultDeviceSchema).mutation("removeDevice").withInput(external_exports.object({ ...workspaceInput.shape, deviceId: external_exports.string().min(1) })).withOutput(external_exports.object({ removed: external_exports.literal(true) })).mutation("createSealedConnection").withInput(createSealedConnectionInputSchema).withOutput(vaultConnectionSchema).mutation("resealConnection").withInput(resealConnectionInputSchema).withOutput(vaultConnectionSchema).mutation("openSealedConnection").withInput(external_exports.object({ ...connectionInput.shape, reason: external_exports.string().trim().min(1).max(200) })).withOutput(vaultSealedMaterialSchema).query("getSealedApproval").withInput(external_exports.object({ ...workspaceInput.shape, requestId: external_exports.string().min(1) })).withOutput(vaultSealedApprovalSchema).mutation("answerSealedApproval").withInput(answerSealedApprovalInputSchema).withOutput(vaultApprovalRequestSchema).mutation("compareSecret").withInput(compareVaultSecretInputSchema).withOutput(vaultSecretComparisonSchema).mutation("replaceSecretValue").withInput(replaceVaultSecretValueInputSchema).withOutput(vaultConnectionSchema).build();
+// ../../modules/vault/contract/src/vault.config.ts
+var positiveInt = external_exports.coerce.number().int().positive();
+var vaultConfig = Config.define((c) => ({
+  approvalTimeoutMinutes: c.env("VAULT_APPROVAL_TIMEOUT_MINUTES", positiveInt.default(720)),
+  /** How long an approve-once answer waits for the same ask to come back for it. */
+  approveOnceWindowMinutes: c.env("VAULT_APPROVE_ONCE_WINDOW_MINUTES", positiveInt.default(10)),
+  /** The lease cap when an admin set none on the connection. */
+  defaultMaxLeaseHours: c.env("VAULT_DEFAULT_MAX_LEASE_HOURS", positiveInt.default(48)),
+  turnTtlMinutes: c.env("VAULT_TURN_TTL_MINUTES", positiveInt.default(720)),
+  judgeTimeoutMs: c.env("VAULT_JUDGE_TIMEOUT_MS", positiveInt.default(2e4)),
+  /** How long one judge answer is reused for the same question. */
+  judgeCacheMinutes: c.env("VAULT_JUDGE_CACHE_MINUTES", positiveInt.default(10)),
+  /** The judge's price per input token in nano-USD, metered on the workspace's usage. */
+  judgeNanoUsdPerInputToken: c.env(
+    "VAULT_JUDGE_NANO_USD_PER_INPUT_TOKEN",
+    positiveInt.default(100)
+  ),
+  /** How long after a process starts it still accepts turn tokens signed under the previous key. */
+  previousKeyGraceMinutes: c.env(
+    "VAULT_PREVIOUS_KEY_GRACE_MINUTES",
+    external_exports.coerce.number().int().min(0).default(30)
+  ),
+  /** The origin passkeys are made on; unset accepts any localhost origin, for development. */
+  publicBaseUrl,
+  /** A file each audit chain head is appended to as a JSON line; unset only logs the heads. */
+  auditHeadFile: c.env("VAULT_AUDIT_HEAD_FILE", external_exports.string().min(1).optional())
+}));
+// ../../modules/vault/contract/src/vault.errors.ts
+var VaultSealMismatchError = class extends HandledError {
+  constructor() {
+    super("vault_seal_mismatch", "This sealed value does not belong to the secret it names", {
+      httpStatus: 422
+    });
+    this.name = "VaultSealMismatchError";
+  }
+};
+// ../../modules/vault/contract/src/vault.events.ts
+var vaultApprovalRequestedPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  requestId: external_exports.string().min(1),
+  connectionId: external_exports.string().nullable(),
+  connectionLabel: external_exports.string().nullable(),
+  action: external_exports.string(),
+  agentId: external_exports.string(),
+  requesterUserId: external_exports.string(),
+  channelId: external_exports.string(),
+  approverUserIds: external_exports.array(external_exports.string()),
+  reason: external_exports.string(),
+  why: external_exports.string(),
+  /** The longest lease the card may offer; null offers only once and deny. */
+  maxLeaseSeconds: external_exports.number().int().positive().nullable(),
+  expiresAt: external_exports.iso.datetime(),
+  /** The thread the agent was answering in; null when it answered in the channel. */
+  threadRootId: external_exports.string().nullable().default(null),
+  /** What the agent asked to do, as one line: a command, a request line or a tool. */
+  line: external_exports.string().default(""),
+  /** For a relay call, the host and method it goes to. */
+  host: external_exports.string().nullable().default(null),
+  method: external_exports.string().nullable().default(null),
+  /** The automatic check's plain line on a Checked use; null when none ran. Odds stay in audit. */
+  judgeLine: external_exports.string().nullable().default(null),
+  /** Sealed to the owner's devices: Allow goes through the device's passkey, deny does not. */
+  sealed: external_exports.boolean().default(false),
+  /** For a send, the message it would send, read from the provider. */
+  draft: vaultDraftPreviewSchema.nullable().default(null)
+});
+var vaultApprovalResolvedPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  requestId: external_exports.string().min(1),
+  state: external_exports.enum(["approved_once", "approved_for_agent", "denied", "expired"]),
+  answeredByUserId: external_exports.string().nullable(),
+  answeredVia: external_exports.string().nullable(),
+  leaseExpiresAt: external_exports.iso.datetime().nullable(),
+  at: external_exports.iso.datetime(),
+  /** Where the agent asked, so a note can steer its next turn there. */
+  agentId: external_exports.string().default(""),
+  channelId: external_exports.string().default(""),
+  /** What the person who answered told the agent; empty when nothing. */
+  resolutionNote: external_exports.string().default(""),
+  /** The display name of who answered; empty for a timeout. */
+  answeredByName: external_exports.string().default(""),
+  /** A deny or a timeout: until when the same action is refused without a new card. */
+  blockedUntil: external_exports.iso.datetime().nullable().default(null)
+});
+// ../../modules/vault/contract/src/vault-oauth.ts
+var tokenFieldsSchema = external_exports.object({
+  access_token: external_exports.string().min(1).optional(),
+  refresh_token: external_exports.string().min(1).optional(),
+  expires_in: external_exports.coerce.number().positive().optional(),
+  scope: external_exports.string().optional(),
+  token_type: external_exports.string().optional()
+});
+var oauthTokenResponseSchemaDefinition = external_exports.object({
+  ...tokenFieldsSchema.shape,
+  ok: external_exports.boolean().optional(),
+  error: external_exports.string().optional(),
+  error_description: external_exports.string().optional(),
+  authed_user: tokenFieldsSchema.optional()
+});
+// ../../modules/vault/contract/src/sealing.ts
+var subtle = () => globalThis.crypto.subtle;
+var IV_BYTES = 12;
+var P256 = { name: "ECDH", namedCurve: "P-256" };
+var text = new TextEncoder();
+function toBase64Url(bytes) {
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+}
+function fromBase64Url(value) {
+  const binary = atob(value.replaceAll("-", "+").replaceAll("_", "/"));
+  const bytes = new Uint8Array(binary.length);
+  for (let index = 0; index < binary.length; index += 1) bytes[index] = binary.charCodeAt(index);
+  return bytes;
+}
+var concat = (...parts) => {
+  const out = new Uint8Array(parts.reduce((sum, part) => sum + part.length, 0));
+  let offset = 0;
+  for (const part of parts) {
+    out.set(part, offset);
+    offset += part.length;
+  }
+  return out;
+};
+async function hkdfKey(input2) {
+  const base = await subtle().importKey("raw", input2.ikm, "HKDF", false, ["deriveKey"]);
+  return subtle().deriveKey(
+    { name: "HKDF", hash: "SHA-256", salt: input2.salt, info: text.encode(input2.info) },
+    base,
+    { name: "AES-GCM", length: 256 },
+    false,
+    ["encrypt", "decrypt"]
+  );
+}
+async function gcmOpen(input2) {
+  try {
+    const plain = await subtle().decrypt(
+      {
+        name: "AES-GCM",
+        iv: input2.sealed.subarray(0, IV_BYTES),
+        additionalData: text.encode(input2.aad)
+      },
+      input2.key,
+      input2.sealed.subarray(IV_BYTES)
+    );
+    return new Uint8Array(plain);
+  } catch {
+    throw new VaultSealMismatchError();
+  }
+}
+var importPublic = (raw) => subtle().importKey("raw", raw, P256, true, []);
+async function sharedSecret(input2) {
+  const bits = await subtle().deriveBits(
+    { name: "ECDH", public: await importPublic(input2.publicKey) },
+    input2.privateKey,
+    256
+  );
+  return new Uint8Array(bits);
+}
+function agreementOf(privateKey) {
+  return (publicKey) => sharedSecret({ privateKey, publicKey });
+}
+async function decryptFrom(input2) {
+  const epk = fromBase64Url(input2.epk);
+  const ikm = await input2.agree(epk);
+  const key = await hkdfKey({ ikm, salt: concat(epk, input2.publicKey), info: input2.info });
+  return gcmOpen({ key, sealed: fromBase64Url(input2.sealed), aad: input2.aad });
+}
+async function generateEcdhKeys() {
+  const pair = await subtle().generateKey(P256, true, ["deriveBits"]);
+  const raw = new Uint8Array(await subtle().exportKey("raw", pair.publicKey));
+  return { publicKey: toBase64Url(raw), privateKey: pair.privateKey };
+}
+function fieldsOf(value) {
+  if (typeof value !== "object" || value === null) throw new VaultSealMismatchError();
+  const entries = Object.entries(value);
+  if (entries.some(([, field]) => typeof field !== "string")) throw new VaultSealMismatchError();
+  return Object.fromEntries(entries);
+}
+var releaseLabel = (requestId) => `laze-vault/release/v1/${requestId}`;
+async function openRunRelease(input2) {
+  const plain = await decryptFrom({
+    agree: agreementOf(input2.runPrivateKey),
+    publicKey: fromBase64Url(input2.runPublicKey),
+    epk: input2.release.epk,
+    sealed: input2.release.ciphertext,
+    info: releaseLabel(input2.requestId),
+    aad: releaseLabel(input2.requestId)
+  });
+  return fieldsOf(JSON.parse(new TextDecoder().decode(plain)).fields);
+}
+// src/services/vault-commands.service.ts
+var USAGE7 = `Usage: laze vault run <connection> --reason "<one plain sentence>" [--wait <s>] -- <command> [args...]
 Runs the command with the connection's values in its environment, inside a Laze agent's sandbox.`;
 var POLL_MS = 3e3;
-var DEFAULT_WAIT_SECONDS = 120;
+var RESTART_WAIT_MS = 12e4;
+var RESTART_BACKOFF_MS = [1e3, 2e3, 4e3, 8e3, 1e4];
+var P2562 = { name: "ECDH", namedCurve: "P-256" };
+var ServerGoneError = class extends Error {
+};
 function proxyOf({ env }) {
   const raw = env.HTTP_PROXY ?? env.http_proxy;
   if (!raw) throw new CliUsageError("laze vault run works only inside a Laze agent's sandbox");
@@ -28757,44 +30320,152 @@ function proxyOf({ env }) {
     authorization: `Basic ${Buffer.from(`${user}:${password}`).toString("base64")}`
   };
 }
-async function turnTokenOf({
+function turnFileOf({
   env
 }) {
-  const path = env.LAZE_TURN_FILE;
-  if (!path) throw new CliUsageError("laze vault run works only during an agent's turn");
+  return env.LAZE_TURN_FILE || void 0;
+}
+async function turnTokenOf2({
+  env,
+  turnFile
+}) {
+  const pinned = env.LAZE_TURN_TOKEN?.trim();
+  if (pinned) return pinned;
+  if (!turnFile) throw new CliUsageError("laze vault run works only during an agent's turn");
   try {
-    return (await readFile9(path, "utf8")).trim();
+    return (await readFile11(turnFile, "utf8")).trim();
   } catch {
     throw new CliUsageError("laze vault run works only during an agent's turn");
   }
 }
-async function askRelease({
-  context,
-  connection,
-  reason,
-  command
+function runKeyPathOf({
+  turnFile,
+  connection
 }) {
-  const env = context.environment.inherited;
-  const proxy = proxyOf({ env });
-  const response = await context.fetcher(`${proxy.origin}/vault/release`, {
-    method: "POST",
-    headers: {
-      "content-type": "application/json",
-      "proxy-authorization": proxy.authorization,
-      "x-laze-turn": await turnTokenOf({ env })
-    },
-    body: JSON.stringify({ connection, reason, command })
+  const name2 = createHash("sha256").update(connection).digest("hex");
+  const base = turnFile ? dirname4(turnFile) : join7(tmpdir(), "laze-vault");
+  return join7(base, "vault-run-keys", `${name2}.json`);
+}
+async function runKeyAt({ path }) {
+  const saved = await readFile11(path, "utf8").then(
+    (text2) => JSON.parse(text2),
+    () => void 0
+  );
+  if (saved && typeof saved.publicKey === "string" && saved.privateKey) {
+    const privateKey = await globalThis.crypto.subtle.importKey("jwk", saved.privateKey, P2562, false, ["deriveBits"]).catch(() => void 0);
+    if (privateKey) return { privateKey, publicKey: saved.publicKey };
+  }
+  const fresh = await generateEcdhKeys();
+  const jwk = await globalThis.crypto.subtle.exportKey("jwk", fresh.privateKey);
+  await mkdir6(dirname4(path), { recursive: true, mode: 448 });
+  await writeFile6(path, JSON.stringify({ publicKey: fresh.publicKey, privateKey: jwk }), {
+    mode: 384
   });
-  const text = await response.text();
+  return fresh;
+}
+function connectionRefused(error62) {
+  const cause = error62.cause;
+  if (cause?.code === "ECONNREFUSED") return true;
+  return cause?.errors?.some((inner) => inner.code === "ECONNREFUSED") ?? false;
+}
+async function sendOnce({
+  context,
+  url: url2,
+  init
+}) {
+  let response;
+  try {
+    response = await context.fetcher(url2, init);
+  } catch (error62) {
+    const wasRefused = connectionRefused(error62);
+    if (init.method === "POST" && !wasRefused) throw error62;
+    return { restarting: wasRefused ? "connection refused" : String(error62) };
+  }
+  if (response.status !== 502 && response.status !== 503) return { response };
+  const code = codeOf(await response.clone().text());
+  const neverReached = response.status === 503 && code === "vault_not_answering";
+  if (init.method === "POST" && !neverReached) return { response };
+  return { restarting: `status ${response.status}${code ? ` ${code}` : ""}` };
+}
+async function reach(input2) {
+  const { context } = input2;
+  const started = context.nowMs();
+  for (let attempt = 0; ; attempt += 1) {
+    const sent = await sendOnce(input2);
+    if ("response" in sent) return sent.response;
+    if (context.nowMs() - started >= RESTART_WAIT_MS) {
+      throw new ServerGoneError(
+        `laze vault: the Laze server did not come back (${sent.restarting})`
+      );
+    }
+    if (attempt === 0) {
+      context.err(
+        `laze vault: the Laze server is not answering (${sent.restarting}), probably restarting; waiting up to 2 min...
+`
+      );
+    }
+    await context.sleep(RESTART_BACKOFF_MS[Math.min(attempt, RESTART_BACKOFF_MS.length - 1)] ?? 0);
+  }
+}
+function codeOf(text2) {
+  return /"code"\s*:\s*"([^"]+)"/.exec(text2)?.[1];
+}
+async function releaseOf({ response }) {
+  const text2 = await response.text();
   if (!response.ok) {
-    const code = /"code"\s*:\s*"([^"]+)"/.exec(text)?.[1] ?? `status ${response.status}`;
     return {
       outcome: "deny",
       exitCode: 1,
-      message: `laze vault: the release was refused (${code})`
+      message: `laze vault: the release was refused (${codeOf(text2) ?? `status ${response.status}`})`
     };
   }
-  return JSON.parse(text);
+  return JSON.parse(text2);
+}
+async function envOf({
+  release,
+  run
+}) {
+  if (!release.sealed) return release.env;
+  const sealed = await openRunRelease({
+    release: release.sealed,
+    runPrivateKey: run.privateKey,
+    runPublicKey: run.publicKey,
+    requestId: release.sealed.requestId
+  });
+  return { ...release.env, ...sealed };
+}
+function deadlineOf({ args, nowMs }) {
+  const wait = flagText({ args, name: "wait" }) || (args.flags.wait === true ? args.words[3] : "");
+  if (!wait) return Infinity;
+  if (!(Number(wait) >= 0)) throw new CliUsageError(`--wait takes a number of seconds
+${USAGE7}`);
+  return nowMs + Number(wait) * 1e3;
+}
+async function untilAnswered({
+  context,
+  first,
+  origin,
+  headers,
+  deadline
+}) {
+  let release = first;
+  while (release.outcome === "ask") {
+    if (context.nowMs() + POLL_MS > deadline) {
+      context.err(`${release.message}. Not approved yet; ask again later.
+`);
+      return "capped";
+    }
+    if (release === first) {
+      context.err(`${release.message}. Waiting for an answer (cards expire after 12 hours)...
+`);
+    }
+    await context.sleep(POLL_MS);
+    const url2 = `${origin}/vault/release/${encodeURIComponent(release.requestId)}`;
+    release = await releaseOf({
+      response: await reach({ context, url: url2, init: { method: "GET", headers } })
+    });
+  }
+  return release;
 }
 async function vaultRun({
   context,
@@ -28802,36 +30473,52 @@ async function vaultRun({
 }) {
   const connection = args.words[2];
   const reason = flagText({ args, name: "reason" });
-  if (!connection || args.rest.length === 0) throw new CliUsageError(USAGE6);
+  if (!connection || args.rest.length === 0) throw new CliUsageError(USAGE7);
   if (!reason) throw new CliUsageError(`Say why with --reason "<one plain sentence>"
-${USAGE6}`);
-  const waitSeconds = Number(flagText({ args, name: "wait", fallback: `${DEFAULT_WAIT_SECONDS}` }));
-  const deadline = context.nowMs() + Math.max(0, waitSeconds) * 1e3;
-  let told = false;
-  for (; ; ) {
-    const release = await askRelease({ context, connection, reason, command: args.rest });
-    if (release.outcome === "allow") {
-      return context.runCommand({ command: args.rest, env: release.env });
-    }
-    if (release.outcome === "deny") {
-      context.err(`${release.message}
-`);
-      return release.exitCode || 1;
-    }
-    if (context.nowMs() + POLL_MS > deadline) {
-      context.err(`${release.message}. Not approved yet; ask again later.
+${USAGE7}`);
+  const deadline = deadlineOf({ args, nowMs: context.nowMs() });
+  const env = context.environment.inherited;
+  const proxy = proxyOf({ env });
+  const turnFile = turnFileOf({ env });
+  const headers = {
+    "proxy-authorization": proxy.authorization,
+    "x-laze-turn": await turnTokenOf2({ env, turnFile })
+  };
+  const keyPath = runKeyPathOf({ turnFile, connection });
+  const run = await runKeyAt({ path: keyPath });
+  const body = JSON.stringify({ connection, reason, command: args.rest, recipient: run.publicKey });
+  let release;
+  try {
+    const first = await releaseOf({
+      response: await reach({
+        context,
+        url: `${proxy.origin}/vault/release`,
+        init: { method: "POST", headers: { ...headers, "content-type": "application/json" }, body }
+      })
+    });
+    release = await untilAnswered({ context, first, origin: proxy.origin, headers, deadline });
+  } catch (error62) {
+    if (!(error62 instanceof ServerGoneError)) throw error62;
+    context.err(`${error62.message}. Run the command again to keep waiting.
 `);
-      return 75;
-    }
-    if (!told) context.err(`${release.message}...
+    return 75;
+  }
+  if (release === "capped") return 75;
+  if (release.outcome === "deny") {
+    await rm3(keyPath, { force: true });
+    context.err(`${release.message}
 `);
-    told = true;
-    await context.sleep(POLL_MS);
+    return release.exitCode || 1;
   }
+  const childEnv = await envOf({ release, run });
+  await rm3(keyPath, { force: true });
+  if (release.message) context.err(`${release.message}
+`);
+  return context.runCommand({ command: args.rest, env: childEnv });
 }
 // src/services/wiki-commands.service.ts
-var USAGE7 = `Usage:
+var USAGE8 = `Usage:
   laze wiki list
   laze wiki get <path>
   laze wiki put <path> <markdown|@file|-> [--title <title>] [--channel <channel>] [--base <version>]
@@ -28848,7 +30535,7 @@ async function wikiList({ context, args }) {
 }
 async function wikiGet({ context, args }) {
   const path = args.words[2];
-  if (!path) throw new CliUsageError(USAGE7);
+  if (!path) throw new CliUsageError(USAGE8);
   const { client } = await signedIn({ context, args });
   const page = await client.post("/api/wiki/get", { path });
   if (args.flags.json) return context.out(`${JSON.stringify(page, null, 2)}
@@ -28865,7 +30552,7 @@ Linked from: ${page.backlinks.map((link) => link.path).join(", ")}
 async function wikiPut({ context, args }) {
   const path = args.words[2];
   const value = args.words.slice(3).join(" ");
-  if (!path || !value) throw new CliUsageError(USAGE7);
+  if (!path || !value) throw new CliUsageError(USAGE8);
   const body = await textArgument({ context, value });
   const title = flagText({ args, name: "title" });
   const channel = flagText({ args, name: "channel" });
@@ -28885,7 +30572,7 @@ async function wikiPut({ context, args }) {
 }
 async function wikiSearch({ context, args }) {
   const query = args.words.slice(2).join(" ").trim();
-  if (!query) throw new CliUsageError(USAGE7);
+  if (!query) throw new CliUsageError(USAGE8);
   const { client } = await signedIn({ context, args });
   const hits = await client.post("/api/wiki/search", { query });
   if (args.flags.json) return context.out(`${JSON.stringify(hits, null, 2)}
@@ -28895,9 +30582,9 @@ async function wikiSearch({ context, args }) {
 }
 var WIKI_COMMANDS = { list: wikiList, get: wikiGet, put: wikiPut, search: wikiSearch };
 async function wiki({ context, args }) {
-  const name = args.words[1] ?? "";
-  const command = Object.hasOwn(WIKI_COMMANDS, name) ? WIKI_COMMANDS[name] : void 0;
-  if (!command) throw new CliUsageError(USAGE7);
+  const name2 = args.words[1] ?? "";
+  const command = Object.hasOwn(WIKI_COMMANDS, name2) ? WIKI_COMMANDS[name2] : void 0;
+  if (!command) throw new CliUsageError(USAGE8);
   await command({ context, args });
 }
@@ -28906,6 +30593,7 @@ var HELP = `laze: work in a Laze workspace from your terminal or your agent.
   laze login [--url <server>] [--token lz_...]   sign in (opens a browser code)
   laze --version                                 the version of this CLI
+  laze update [--dry-run]                        install the latest release (npm, pnpm, bun or yarn)
   laze logout                                    forget this profile
   laze whoami                                    who this key speaks for
   laze workspaces                                your signed-in profiles
@@ -28926,6 +30614,8 @@ var HELP = `laze: work in a Laze workspace from your terminal or your agent.
   laze agent link --token <token>                connect this Claude Code or Codex session
   laze adopt codex [--thread <id>]               answer Laze messages in a Codex thread
   laze vault run <name> --reason "<why>" -- <cmd>  run a command with a vault connection (agents)
+  laze browser setup|cdp|screen|status <machine>   a machine with Chrome a person signs in on, for agents
+      Sites without an API need a person's login: offer a browser machine, never ask for a password
   laze github whoami | watch <owner/repo> | unwatch | watches   the agent's GitHub identity and watches
   laze agent set-github <agent> <connection|none> [--ask-before-push]   pick an agent's GitHub
   laze mcp                                       the same as an MCP server on stdio
@@ -28938,6 +30628,7 @@ var COMMANDS = {
   logout,
   whoami,
   workspaces,
+  update,
   "channels list": listChannels,
   channels: listChannels,
   post,
@@ -28948,6 +30639,7 @@ var COMMANDS = {
   agents: listAgents,
   "agent link": linkAgent,
   "hook stop": stopHook,
+  "hook pre-tool": preToolHook,
   adopt: adoptCodex,
   feed,
   schedule,
@@ -28956,6 +30648,7 @@ var COMMANDS = {
   skill,
   app,
   "vault run": vaultRun,
+  browser,
   github,
   "agent set-github": setAgentGithub,
   "mcp gateway": serveMcpGateway,
@@ -28993,21 +30686,27 @@ async function runCli({
 }
 // src/main.ts
-function runCommand({
+async function runCommand({
   command,
   inherited,
-  env
+  env,
+  stdout = process.stdout,
+  stderr = process.stderr
 }) {
   const [program = "", ...rest] = command;
-  return new Promise((resolve6) => {
-    const child = spawn2(program, rest, { stdio: "inherit", env: { ...inherited, ...env } });
-    child.on("error", (error62) => {
-      process.stderr.write(`laze vault: ${error62.message}
-`);
-      resolve6(127);
+  try {
+    return await runRedacted({
+      command: [program, ...rest],
+      env,
+      baseEnv: inherited,
+      stdout,
+      stderr
     });
-    child.on("exit", (code, signal) => resolve6(code ?? (signal ? 128 : 1)));
-  });
+  } catch (error62) {
+    stderr.write(`laze vault: ${error62 instanceof Error ? error62.message : String(error62)}
+`);
+    return 127;
+  }
 }
 async function readStdin() {
   if (stdin.isTTY) return "";
@@ -29015,6 +30714,20 @@ async function readStdin() {
   for await (const chunk of stdin) chunks.push(chunk);
   return Buffer.concat(chunks).toString("utf8");
 }
+function sleep(ms, signal) {
+  return new Promise((resolve6) => {
+    if (signal?.aborted) return resolve6();
+    const stop = () => {
+      clearTimeout(timer);
+      resolve6();
+    };
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", stop);
+      resolve6();
+    }, ms);
+    signal?.addEventListener("abort", stop, { once: true });
+  });
+}
 if (true) {
   const environment = cliEnvironment();
   process.exitCode = await runCli({
@@ -29025,12 +30738,15 @@ if (true) {
       program: [process.execPath, ...process.execArgv, process.argv[1] ?? ""],
       store: ConfigStore.create({ path: environment.configPath }),
       fetcher: (input2, init) => fetch(input2, init),
-      out: (text) => void process.stdout.write(text),
-      err: (text) => void process.stderr.write(text),
+      out: (text2) => void process.stdout.write(text2),
+      err: (text2) => void process.stderr.write(text2),
       readStdin,
-      sleep: (ms) => new Promise((resolve6) => setTimeout(resolve6, ms)),
+      sleep,
       nowMs: () => nowInstant().epochMilliseconds,
       runCommand: (input2) => runCommand({ ...input2, inherited: environment.inherited })
     }
   });
 }
+export {
+  runCommand
+};