@lazehq/cli 0.1.35 → 0.1.36

package/dist/laze.mjs

@@ -35708,7 +35708,7 @@ function flagText({
 }
 
 // src/rules/cli-version.rules.ts
-var STAMPED = "0.1.35";
+var STAMPED = "0.1.36";
 function cliVersionOf({ stamped = STAMPED } = {}) {
   return stamped.startsWith("__") ? "dev" : stamped;
 }
@@ -57825,7 +57825,11 @@ var personPresenceSchemaDefinition = external_exports.object({
   awayByHand: external_exports.boolean(),
   status: customStatusSchemaDefinition.nullable(),
   /** Notifications paused or inside their hours; null when they hear of things now. */
-  doNotDisturb: doNotDisturbSchemaDefinition.nullable().optional()
+  doNotDisturb: doNotDisturbSchemaDefinition.nullable().optional(),
+  /** Their picture, an uploaded or Google one; null or absent without one. */
+  image: external_exports.string().nullable().optional(),
+  /** Their IANA time zone, for their local time; null or absent while Laze does not know it. */
+  timeZone: external_exports.string().nullable().optional()
 });
 var personPresenceSchema = personPresenceSchemaDefinition;
 var presenceListSchemaDefinition = external_exports.object({ people: external_exports.array(personPresenceSchemaDefinition) });
@@ -59486,6 +59490,8 @@ var notificationSettingsSchemaDefinition = external_exports.object({
   dndStart: clockSchema,
   dndEnd: clockSchema,
   timeZone: external_exports.string().min(1).max(64),
+  /** The zone follows the browser the person uses; false once they picked one. */
+  timeZoneFromDevice: external_exports.boolean().default(true),
   /** Notifications paused until then, whatever the schedule says. */
   snoozeUntil: external_exports.iso.datetime().nullable(),
   pushEnabled: external_exports.boolean(),
@@ -59623,6 +59629,7 @@ var desktopPublicationSchemaDefinition = external_exports.object({
 });
 var desktopPublicationSchema = desktopPublicationSchemaDefinition;
 var quietReasonSchema = external_exports.enum(["paused", "hours"]);
+var personTimeZoneSchemaDefinition = external_exports.object({ userId: userIdSchema, timeZone: external_exports.string() });
 var quietPersonSchemaDefinition = external_exports.object({
   userId: userIdSchema,
   reason: quietReasonSchema,
@@ -59635,7 +59642,7 @@ var NotificationApi = moduleApi()("notification");
 var workspaceInputSchema2 = external_exports.object({ workspaceId: workspaceIdSchema2 });
 var heartbeatInputSchemaDefinition = external_exports.object({
   workspaceId: workspaceIdSchema2,
-  /** The browser's IANA time zone; the digest uses it until the person sets one. */
+  /** The browser's IANA time zone; the person's zone follows it until they pick one. */
   timeZone: external_exports.string().min(1).max(64).optional()
 });
 var heartbeatInputSchema = heartbeatInputSchemaDefinition;
@@ -61688,7 +61695,9 @@ var vaultSealedApprovalSchemaDefinition = external_exports.object({
   command: external_exports.array(external_exports.string()),
   /** The run's public key; the opened value is encrypted to it and nothing else. */
   runPublicKey: base64Url,
-  material: vaultSealedMaterialSchemaDefinition
+  material: vaultSealedMaterialSchemaDefinition,
+  /** The longest Allow for this agent the card offers; null offers Allow once only. */
+  maxLeaseSeconds: external_exports.number().int().positive().nullable().optional()
 });
 var vaultSealedApprovalSchema = vaultSealedApprovalSchemaDefinition;
 var vaultUi = uiTokens("vault");
@@ -61699,13 +61708,17 @@ var answerSealedApprovalInputSchemaDefinition = external_exports.object({
   workspaceId: external_exports.string().min(1),
   requestId: external_exports.string().min(1),
   release: external_exports.object({ epk: base64Url, ciphertext: base64Url }),
-  via: external_exports.enum(["feed", "channel", "ios", "desktop", "web"]).default("web")
+  via: external_exports.enum(["feed", "channel", "ios", "desktop", "web"]).default("web"),
+  /** Allow for this agent for this long: runs with the same key reuse the release until then. */
+  durationSeconds: external_exports.number().int().positive().optional()
 });
 var answerSealedApprovalInputSchema = answerSealedApprovalInputSchemaDefinition;
 var vaultRunSealedReleaseSchemaDefinition = external_exports.object({
   requestId: external_exports.string(),
   epk: base64Url,
-  ciphertext: base64Url
+  ciphertext: base64Url,
+  /** A lease holds this release until then: the run keeps its key for the next run. */
+  leaseEndsAt: external_exports.iso.datetime().optional()
 });
 var vaultRunSealedReleaseSchema = vaultRunSealedReleaseSchemaDefinition;
 
@@ -62061,6 +62074,12 @@ var approveVaultShareInputSchemaDefinition = external_exports.object({
   reauthToken: external_exports.string().min(1)
 });
 var approveVaultShareInputSchema = approveVaultShareInputSchemaDefinition;
+var sealVaultConnectionInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  connectionId: external_exports.string().min(1),
+  reauthToken: external_exports.string().min(1)
+});
+var sealVaultConnectionInputSchema = sealVaultConnectionInputSchemaDefinition;
 var requestVaultShareInputSchemaDefinition = external_exports.object({
   turnToken: external_exports.string().min(1),
   connection: external_exports.string().min(1),
@@ -62433,7 +62452,7 @@ var vaultTrpc = defineTrpcContract("vault").mutation("createConnection").withInp
     reason: external_exports.string().trim().min(1).max(200),
     reauthToken: external_exports.string().min(1).max(200).optional()
   })
-).withOutput(external_exports.object({ fields: external_exports.record(external_exports.string(), external_exports.string()) })).mutation("beginReauth").withInput(workspaceInput).withOutput(vaultReauthChallengeSchema).mutation("confirmReauth").withInput(confirmVaultReauthInputSchema).withOutput(vaultReauthProofSchema).mutation("grantConnection").withInput(grantVaultConnectionInputSchema).withOutput(vaultGrantSchema).mutation("lendToChannel").withInput(lendVaultConnectionInputSchema).withOutput(vaultGrantSchema).mutation("revokeGrant").withInput(external_exports.object({ workspaceId: external_exports.string().min(1), grantId: external_exports.string().min(1) })).withOutput(external_exports.object({ revoked: external_exports.literal(true) })).query("listGrants").withInput(connectionInput).withOutput(external_exports.array(vaultGrantSchema)).mutation("shareConnection").withInput(shareVaultConnectionInputSchema).withOutput(vaultGrantSchema).mutation("approveShare").withInput(approveVaultShareInputSchema).withOutput(vaultGrantSchema).query("listApprovals").withInput(external_exports.object({ ...workspaceInput.shape, state: vaultApprovalStateSchema.optional() })).withOutput(external_exports.array(vaultApprovalRequestSchema)).mutation("answerApproval").withInput(answerVaultApprovalInputSchema).withOutput(vaultApprovalRequestSchema).query("listAudit").withInput(vaultAuditReadInputSchema).withOutput(vaultAuditPageSchema).query("listActivity").withInput(vaultAuditReadInputSchema).withOutput(external_exports.array(vaultAuditEntrySchema)).query("listLeases").withInput(workspaceInput).withOutput(external_exports.array(vaultLeaseSchema)).mutation("endLease").withInput(endVaultLeaseInputSchema).withOutput(external_exports.object({ ended: external_exports.literal(true) })).query("mostAsked").withInput(vaultMostAskedInputSchema).withOutput(vaultMostAskedSchema).query("judgeStatus").withInput(workspaceInput).withOutput(vaultJudgeStatusSchema).query("listLevelLimits").withInput(workspaceInput).withOutput(external_exports.array(vaultLevelLimitSchema)).mutation("setLevelLimit").withInput(setVaultLevelLimitInputSchema).withOutput(external_exports.array(vaultLevelLimitSchema)).query("listDevices").withInput(workspaceInput).withOutput(external_exports.array(vaultDeviceSchema)).mutation("beginDeviceEnrolment").withInput(workspaceInput).withOutput(vaultDeviceEnrolmentSchema).mutation("finishDeviceEnrolment").withInput(finishVaultDeviceEnrolmentInputSchema).withOutput(vaultDeviceSchema).mutation("beginDeviceApproval").withInput(external_exports.object({ ...workspaceInput.shape, deviceId: external_exports.string().min(1) })).withOutput(external_exports.object({ challenge: external_exports.string(), sealed: external_exports.array(vaultSealedMaterialSchema) })).mutation("approveDevice").withInput(approveVaultDeviceInputSchema).withOutput(vaultDeviceSchema).mutation("removeDevice").withInput(external_exports.object({ ...workspaceInput.shape, deviceId: external_exports.string().min(1) })).withOutput(external_exports.object({ removed: external_exports.literal(true) })).mutation("createSealedConnection").withInput(createSealedConnectionInputSchema).withOutput(vaultConnectionSchema).mutation("resealConnection").withInput(resealConnectionInputSchema).withOutput(vaultConnectionSchema).mutation("openSealedConnection").withInput(
+).withOutput(external_exports.object({ fields: external_exports.record(external_exports.string(), external_exports.string()) })).mutation("beginReauth").withInput(workspaceInput).withOutput(vaultReauthChallengeSchema).mutation("confirmReauth").withInput(confirmVaultReauthInputSchema).withOutput(vaultReauthProofSchema).mutation("grantConnection").withInput(grantVaultConnectionInputSchema).withOutput(vaultGrantSchema).mutation("lendToChannel").withInput(lendVaultConnectionInputSchema).withOutput(vaultGrantSchema).mutation("revokeGrant").withInput(external_exports.object({ workspaceId: external_exports.string().min(1), grantId: external_exports.string().min(1) })).withOutput(external_exports.object({ revoked: external_exports.literal(true) })).query("listGrants").withInput(connectionInput).withOutput(external_exports.array(vaultGrantSchema)).mutation("shareConnection").withInput(shareVaultConnectionInputSchema).withOutput(vaultGrantSchema).mutation("approveShare").withInput(approveVaultShareInputSchema).withOutput(vaultGrantSchema).mutation("sealConnection").withInput(sealVaultConnectionInputSchema).withOutput(vaultConnectionSchema).query("listApprovals").withInput(external_exports.object({ ...workspaceInput.shape, state: vaultApprovalStateSchema.optional() })).withOutput(external_exports.array(vaultApprovalRequestSchema)).mutation("answerApproval").withInput(answerVaultApprovalInputSchema).withOutput(vaultApprovalRequestSchema).query("listAudit").withInput(vaultAuditReadInputSchema).withOutput(vaultAuditPageSchema).query("listActivity").withInput(vaultAuditReadInputSchema).withOutput(external_exports.array(vaultAuditEntrySchema)).query("listLeases").withInput(workspaceInput).withOutput(external_exports.array(vaultLeaseSchema)).mutation("endLease").withInput(endVaultLeaseInputSchema).withOutput(external_exports.object({ ended: external_exports.literal(true) })).query("mostAsked").withInput(vaultMostAskedInputSchema).withOutput(vaultMostAskedSchema).query("judgeStatus").withInput(workspaceInput).withOutput(vaultJudgeStatusSchema).query("listLevelLimits").withInput(workspaceInput).withOutput(external_exports.array(vaultLevelLimitSchema)).mutation("setLevelLimit").withInput(setVaultLevelLimitInputSchema).withOutput(external_exports.array(vaultLevelLimitSchema)).query("listDevices").withInput(workspaceInput).withOutput(external_exports.array(vaultDeviceSchema)).mutation("beginDeviceEnrolment").withInput(workspaceInput).withOutput(vaultDeviceEnrolmentSchema).mutation("finishDeviceEnrolment").withInput(finishVaultDeviceEnrolmentInputSchema).withOutput(vaultDeviceSchema).mutation("beginDeviceApproval").withInput(external_exports.object({ ...workspaceInput.shape, deviceId: external_exports.string().min(1) })).withOutput(external_exports.object({ challenge: external_exports.string(), sealed: external_exports.array(vaultSealedMaterialSchema) })).mutation("approveDevice").withInput(approveVaultDeviceInputSchema).withOutput(vaultDeviceSchema).mutation("removeDevice").withInput(external_exports.object({ ...workspaceInput.shape, deviceId: external_exports.string().min(1) })).withOutput(external_exports.object({ removed: external_exports.literal(true) })).mutation("createSealedConnection").withInput(createSealedConnectionInputSchema).withOutput(vaultConnectionSchema).mutation("resealConnection").withInput(resealConnectionInputSchema).withOutput(vaultConnectionSchema).mutation("openSealedConnection").withInput(
   external_exports.object({
     ...connectionInput.shape,
     reason: external_exports.string().trim().min(1).max(200),
@@ -62468,7 +62487,11 @@ var vaultConfig = Config.define((c) => ({
   /** The origin passkeys are made on; unset accepts any localhost origin, for development. */
   publicBaseUrl,
   /** A file each audit chain head is appended to as a JSON line; unset only logs the heads. */
-  auditHeadFile: c.env("VAULT_AUDIT_HEAD_FILE", external_exports.string().min(1).optional())
+  auditHeadFile: c.env("VAULT_AUDIT_HEAD_FILE", external_exports.string().min(1).optional()),
+  /** vaultd's socket; set, the master key and data keys stay in vaultd, unset keeps them here. */
+  vaultdSocket: c.env("LAZE_VAULTD_SOCKET", external_exports.string().min(1).optional()),
+  /** The workspace whose admins get vault alert cards; unset only logs the alerts. */
+  alertWorkspaceId: c.env("VAULT_ALERT_WORKSPACE_ID", external_exports.string().min(1).optional())
 }));
 
 // ../../modules/vault/contract/src/vault-levels.ts
@@ -62809,6 +62832,26 @@ var vaultPasskeySetUpPayloadSchemaDefinition = external_exports.object({
   deviceId: external_exports.string().min(1),
   at: external_exports.iso.datetime()
 });
+var vaultAlertDetailSchemaDefinition = external_exports.record(
+  external_exports.string(),
+  external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean(), external_exports.null()])
+);
+var vaultAlertDetailSchema = vaultAlertDetailSchemaDefinition;
+var vaultAlertRaisedPayloadSchemaDefinition = external_exports.object({
+  /** The alert workspace, where the card lands; not the workspace the alert is about. */
+  workspaceId: external_exports.string().min(1),
+  /** One per alert: `vaultd:<seq>:<at>` from vaultd, `audit:<workspace>:<seq>` from the chain. */
+  alertId: external_exports.string().min(1),
+  /** vaultd's sequence number, the worker's cursor; null for an alert the vault raised itself. */
+  seq: external_exports.number().int().nonnegative().nullable(),
+  /** `unexpected_caller`, `decrypt_burst`, `audit_chain_broken`, `test`, or a newer kind. */
+  kind: external_exports.string().min(1),
+  subjectWorkspaceId: external_exports.string().min(1).nullable(),
+  subjectWorkspaceName: external_exports.string().min(1).nullable(),
+  detail: vaultAlertDetailSchema,
+  recipientUserIds: external_exports.array(external_exports.string().min(1)),
+  at: external_exports.iso.datetime()
+});
 
 // ../../modules/vault/contract/src/vault-reference-chip.ts
 var VaultReferenceChipSlot = uiTokens("vault").component("referenceChip");
@@ -64340,6 +64383,15 @@ var agentPermissionPromptSchemaDefinition = external_exports.object({
 });
 var agentPermissionPromptSchema = agentPermissionPromptSchemaDefinition;
 
+// ../../modules/agent/contract/src/agent-working.ts
+var agentWorkingInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  agentId: external_exports.string().min(1)
+});
+var agentWorkingInputSchema = agentWorkingInputSchemaDefinition;
+var agentWorkingSchemaDefinition = external_exports.object({ working: external_exports.boolean() });
+var agentWorkingSchema = agentWorkingSchemaDefinition;
+
 // ../../modules/agent/contract/src/agent-workspace-default.ts
 var workspaceIdSchema9 = external_exports.string().min(1);
 var idSchema13 = external_exports.string().min(1).max(200);
@@ -64820,7 +64872,7 @@ var codexLoginRefreshInputSchemaDefinition = external_exports.object({
 });
 var AgentApi = moduleApi()("agent");
 var agentCoreTrpc = defineTrpcContract("agents").query("list").withInput(external_exports.object({ workspaceId: workspaceIdSchema10 })).withOutput(external_exports.array(agentListEntrySchema)).mutation("create").withInput(createAgentInputSchema).withOutput(agentSchema).mutation("update").withInput(updateAgentInputSchema).withOutput(agentSchema).mutation("remove").withInput(external_exports.object({ workspaceId: workspaceIdSchema10, agentId: idSchema14 })).withOutput(external_exports.object({ removed: external_exports.literal(true) })).mutation("transfer").withInput(transferAgentInputSchema).withOutput(agentSchema).mutation("resetSession").withInput(resetAgentSessionInputSchema).withOutput(agentSchema).query("faces").withInput(external_exports.object({ workspaceId: workspaceIdSchema10 })).withOutput(external_exports.array(agentFaceSchema)).query("presence").withInput(external_exports.object({ workspaceId: workspaceIdSchema10 })).withOutput(external_exports.array(agentPresenceSchema)).mutation("uploadAvatar").withInput(uploadAgentAvatarInputSchema).withOutput(uploadedAgentAvatarSchema).query("access").withInput(external_exports.object({ workspaceId: workspaceIdSchema10, agentId: idSchema14 })).withOutput(agentAccessSchema).query("loginActivity").withInput(external_exports.object({ workspaceId: workspaceIdSchema10, agentId: idSchema14 })).withOutput(loginActivitySchema).mutation("raiseBudget").withInput(raiseBudgetInputSchema).withOutput(external_exports.object({ limitUsd: external_exports.number() })).query("permissionPrompts").withInput(external_exports.object({ workspaceId: workspaceIdSchema10, agentId: idSchema14 })).withOutput(external_exports.array(agentPermissionPromptSchema)).mutation("share").withInput(shareAgentInputSchema).withOutput(agentAccessSchema).mutation("unshare").withInput(shareAgentInputSchema).withOutput(agentAccessSchema).query("harnessLogins").withInput(external_exports.object({ workspaceId: workspaceIdSchema10 })).withOutput(harnessLoginsSchema).mutation("saveHarnessLogin").withInput(saveHarnessLoginInputSchema).withOutput(harnessLoginsSchema).mutation("removeHarnessLogin").withInput(removeHarnessLoginInputSchema).withOutput(harnessLoginsSchema).query("listHarnessLogins").withInput(external_exports.object({ workspaceId: workspaceIdSchema10 })).withOutput(harnessLoginListSchema).mutation("addHarnessLogin").withInput(addHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("renameHarnessLogin").withInput(renameHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("deleteHarnessLogin").withInput(deleteHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("checkLoginUsage").withInput(checkLoginUsageInputSchema).withOutput(loginUsageCheckSchema).query("loginPools").withInput(external_exports.object({ workspaceId: workspaceIdSchema10 })).withOutput(loginPoolsSchema).mutation("createLoginPool").withInput(createLoginPoolInputSchema).withOutput(loginPoolsSchema).mutation("renameLoginPool").withInput(renameLoginPoolInputSchema).withOutput(loginPoolsSchema).mutation("deleteLoginPool").withInput(loginPoolRefInputSchema).withOutput(loginPoolsSchema).mutation("addPoolLogin").withInput(addPoolLoginInputSchema).withOutput(loginPoolsSchema).mutation("removePoolLogin").withInput(removePoolLoginInputSchema).withOutput(loginPoolsSchema).mutation("setPoolMember").withInput(setPoolMemberInputSchema).withOutput(loginPoolsSchema).mutation("removePoolMember").withInput(removePoolMemberInputSchema).withOutput(loginPoolsSchema).mutation("setAgentPool").withInput(setAgentPoolInputSchema).withOutput(agentSchema).mutation("openDirect").withInput(external_exports.object({ workspaceId: workspaceIdSchema10, agentId: idSchema14 })).withOutput(external_exports.object({ channelId: idSchema14 })).mutation("startConversation").withInput(startConversationInputSchema).withOutput(startedConversationSchema).query("conversations").withInput(listConversationsInputSchema).withOutput(external_exports.array(conversationSummarySchema2)).mutation("joinConversation").withInput(conversationInputSchema).withOutput(conversationSummarySchema2).mutation("renameConversation").withInput(renameConversationInputSchema).withOutput(conversationSummarySchema2).mutation("leaveConversation").withInput(conversationInputSchema).withOutput(external_exports.object({ left: external_exports.literal(true) })).mutation("deleteConversation").withInput(conversationInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).mutation("mintLink").withInput(mintLinkInputSchema).withOutput(mintedLinkSchema).query("linkRedemption").withInput(linkRedemptionInputSchema).withOutput(linkRedemptionSchema).query("oauthRequest").withInput(oauthRequestInputSchema).withOutput(oauthRequestViewSchema).mutation("oauthApprove").withInput(approveOAuthInputSchema).withOutput(oauthRedirectSchema).mutation("oauthDeny").withInput(oauthRequestInputSchema).withOutput(oauthRedirectSchema).mutation("disconnect").withInput(external_exports.object({ workspaceId: workspaceIdSchema10, agentId: idSchema14 })).withOutput(external_exports.object({ disconnected: external_exports.literal(true) })).mutation("setGithub").withInput(setAgentGithubInputSchema).withOutput(agentSchema).query("githubWatches").withInput(external_exports.object({ workspaceId: workspaceIdSchema10, agentId: idSchema14 })).withOutput(external_exports.array(agentGithubWatchSchema)).mutation("watchGithub").withInput(watchGithubInputSchema).withOutput(agentGithubWatchSchema).mutation("unwatchGithub").withInput(unwatchGithubInputSchema).withOutput(external_exports.object({ removed: external_exports.literal(true) })).build();
-var agentTurnTrpc = defineTrpcContract("agents").mutation("answerAttention").withInput(answerAttentionInputSchema).withOutput(external_exports.object({ answered: external_exports.literal(true) })).mutation("stopTurn").withInput(stopAgentTurnInputSchema).withOutput(external_exports.object({ stopped: external_exports.literal(true) })).query("mayStopTurn").withInput(stopAgentTurnInputSchema).withOutput(external_exports.object({ allowed: external_exports.boolean() })).query("liveSteps").withInput(liveStepsInputSchema).withOutput(liveStepsSchema).query("replySteps").withInput(replyStepsInputSchema).withOutput(replyStepsSchema).mutation("compactSession").withInput(compactAgentSessionInputSchema).withOutput(external_exports.object({ requested: external_exports.literal(true) })).mutation("restartComputer").withInput(restartAgentComputerInputSchema).withOutput(external_exports.object({ restarted: external_exports.boolean() })).build();
+var agentTurnTrpc = defineTrpcContract("agents").mutation("answerAttention").withInput(answerAttentionInputSchema).withOutput(external_exports.object({ answered: external_exports.literal(true) })).mutation("stopTurn").withInput(stopAgentTurnInputSchema).withOutput(external_exports.object({ stopped: external_exports.literal(true) })).query("mayStopTurn").withInput(stopAgentTurnInputSchema).withOutput(external_exports.object({ allowed: external_exports.boolean() })).query("liveSteps").withInput(liveStepsInputSchema).withOutput(liveStepsSchema).query("workingNow").withInput(agentWorkingInputSchema).withOutput(agentWorkingSchema).query("replySteps").withInput(replyStepsInputSchema).withOutput(replyStepsSchema).mutation("compactSession").withInput(compactAgentSessionInputSchema).withOutput(external_exports.object({ requested: external_exports.literal(true) })).mutation("restartComputer").withInput(restartAgentComputerInputSchema).withOutput(external_exports.object({ restarted: external_exports.boolean() })).build();
 var agentChannelSettingsTrpc = defineTrpcContract("agents").query("monitors").withInput(external_exports.object({ workspaceId: workspaceIdSchema10, agentId: idSchema14 })).withOutput(external_exports.array(agentMonitorSchema)).query("channelLevel").withInput(external_exports.object({ workspaceId: workspaceIdSchema10, agentId: idSchema14, channelId: idSchema14 })).withOutput(channelLevelSchema).mutation("setChannelLevel").withInput(setChannelLevelInputSchema).withOutput(channelLevelSchema).mutation("unmuteChannel").withInput(unmuteAgentChannelInputSchema).withOutput(channelLevelSchema).mutation("cancelHeld").withInput(cancelHeldInputSchema).withOutput(cancelHeldResultSchema).build();
 var agentJoinTrpc = defineTrpcContract("agents").query("joinRequest").withInput(joinRequestInputSchema).withOutput(joinRequestViewSchema).mutation("approveJoinRequest").withInput(approveJoinRequestInputSchema).withOutput(joinRequestViewSchema).mutation("denyJoinRequest").withInput(joinRequestInputSchema).withOutput(joinRequestViewSchema).build();
 var agentLoginTroubleTrpc = defineTrpcContract("agents").mutation("replaceHarnessLogin").withInput(replaceHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("startHarnessSignIn").withInput(startHarnessSignInInputSchema).withOutput(harnessSignInSchema).mutation("pollHarnessSignIn").withInput(pollHarnessSignInInputSchema).withOutput(harnessSignInPollSchema).mutation("waitForLogins").withInput(loginCardActionInputSchema).withOutput(external_exports.object({ waiting: external_exports.boolean() })).mutation("useAnotherLogin").withInput(loginCardActionInputSchema).withOutput(external_exports.object({ loginName: external_exports.string() })).build();
@@ -79664,6 +79716,13 @@ async function untilAnswered({
   }
   return release2;
 }
+function leaseHolds({
+  release: release2,
+  nowMs
+}) {
+  const ends = release2.sealed?.leaseEndsAt;
+  return ends !== void 0 && Temporal3.Instant.from(ends).epochMilliseconds > nowMs;
+}
 async function vaultRelease({
   context,
   args,
@@ -79706,7 +79765,7 @@ async function vaultRelease({
     return { exitCode: release2.exitCode || 1 };
   }
   const values = await envOf({ release: release2, run: run4 });
-  await rm10(keyPath, { force: true });
+  if (!leaseHolds({ release: release2, nowMs: context.nowMs() })) await rm10(keyPath, { force: true });
   if (release2.message) context.err(`${release2.message}
 `);
   return { env: values };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazehq/cli",
-  "version": "0.1.35",
+  "version": "0.1.36",
   "description": "The Laze command line: sign in, read and post in chat, and connect your own Claude Code or Codex session as an agent.",
   "license": "UNLICENSED",
   "type": "module",