@lazehq/cli 0.1.56 → 0.1.58

package/dist/laze.mjs

@@ -2491,7 +2491,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes2, createHash: createHash3 } = __require("crypto");
+    var { randomBytes: randomBytes2, createHash: createHash4 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -3159,7 +3159,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash4("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -3440,7 +3440,7 @@ var require_stream = __commonJS({
       };
       duplex._final = function(callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open3() {
+          ws.once("open", function open4() {
             duplex._final(callback);
           });
           return;
@@ -3461,7 +3461,7 @@ var require_stream = __commonJS({
       };
       duplex._write = function(chunk, encoding, callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open3() {
+          ws.once("open", function open4() {
             duplex._write(chunk, encoding, callback);
           });
           return;
@@ -3528,7 +3528,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash3 } = __require("crypto");
+    var { createHash: createHash4 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -3835,7 +3835,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash4("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -18733,7 +18733,7 @@ var require_snapshot_utils = __commonJS({
 var require_snapshot_recorder = __commonJS({
   "../../node_modules/.pnpm/undici@8.10.0/node_modules/undici/lib/mock/snapshot-recorder.js"(exports, module) {
     "use strict";
-    var { writeFile: writeFile24, readFile: readFile43, mkdir: mkdir23 } = __require("node:fs/promises");
+    var { writeFile: writeFile24, readFile: readFile44, mkdir: mkdir23 } = __require("node:fs/promises");
     var { dirname: dirname24, resolve: resolve21 } = __require("node:path");
     var { setTimeout: setTimeout2, clearTimeout: clearTimeout2 } = __require("node:timers");
     var { InvalidArgumentError, UndiciError } = require_errors();
@@ -18950,7 +18950,7 @@ var require_snapshot_recorder = __commonJS({
           throw new InvalidArgumentError("Snapshot path is required");
         }
         try {
-          const data = await readFile43(resolve21(path), "utf8");
+          const data = await readFile44(resolve21(path), "utf8");
           const parsed = JSON.parse(data);
           if (Array.isArray(parsed)) {
             this.#snapshots.clear();
@@ -31489,6 +31489,13 @@ function findSecrets({
     (secret) => !isPlaceholderValue({ value: secret.value, kind: secret.kind })
   );
 }
+function redactDetectedSecrets({ text: text2 }) {
+  let out = text2;
+  for (const secret of matchSecrets({ text: text2 }).reverse()) {
+    out = out.slice(0, secret.start) + REDACTION_MARKER + out.slice(secret.end);
+  }
+  return out;
+}
 
 // ../../packages/secret-guard/src/detector/one-time-links.ts
 var URL_PATTERN = /https?:\/\/[^\s<>"'`)\]]+/g;
@@ -31580,6 +31587,91 @@ function secretValuesOf({
   return Object.entries(fields).filter(([name3]) => !isIdentifierField({ name: name3 })).map(([, value]) => value);
 }
 
+// ../../packages/secret-guard/src/redaction/jsonl-strings.ts
+var JSONL_STRUCTURAL_KEYS = /* @__PURE__ */ new Set([
+  "uuid",
+  "parentUuid",
+  "leafUuid",
+  "logicalParentUuid",
+  "sessionId",
+  "requestId",
+  "messageId",
+  "id",
+  "tool_use_id",
+  "call_id",
+  "type",
+  "role",
+  "timestamp",
+  "version",
+  "model",
+  "signature",
+  "cwd",
+  "gitBranch",
+  "userType",
+  "stop_reason",
+  "originator",
+  "cli_version"
+]);
+function recordSlotsOf(record4, into) {
+  for (const [key, item] of Object.entries(record4)) {
+    if (typeof item !== "string") slotsOf(item, into);
+    else if (!JSONL_STRUCTURAL_KEYS.has(key)) into.push({ holder: record4, key });
+  }
+}
+function slotsOf(value, into) {
+  if (Array.isArray(value)) {
+    value.forEach((item, index) => {
+      if (typeof item === "string") into.push({ holder: value, key: index });
+      else slotsOf(item, into);
+    });
+    return;
+  }
+  if (typeof value === "object" && value !== null) {
+    recordSlotsOf(value, into);
+  }
+}
+function read(slot) {
+  return slot.holder[slot.key] ?? "";
+}
+function write(slot, text2) {
+  slot.holder[slot.key] = text2;
+}
+function parsedLine(line) {
+  if (line.trim() === "") return { raw: true };
+  try {
+    return { raw: false, value: JSON.parse(line) };
+  } catch {
+    return { raw: true };
+  }
+}
+async function mapJsonlStrings({
+  text: text2,
+  mapAll
+}) {
+  const sources = text2.split("\n");
+  const cells = [];
+  const raw = [];
+  const slots = [];
+  sources.forEach((source, index) => {
+    const line = parsedLine(source);
+    raw.push(line.raw);
+    cells.push(line.raw ? source : line.value);
+    if (typeof cells[index] !== "string") slotsOf(cells[index], slots);
+    else if (source.trim() !== "") slots.push({ holder: cells, key: index });
+  });
+  const before = slots.map(read);
+  const after = await mapAll(before);
+  if (after.length !== before.length) throw new Error("mapAll answered a different count");
+  let changed = 0;
+  slots.forEach((slot, index) => {
+    const next = after[index] ?? "";
+    if (next !== before[index]) changed += 1;
+    write(slot, next);
+  });
+  const out = cells.map((cell, index) => raw[index] ? String(cell) : JSON.stringify(cell));
+  return { text: out.join("\n"), changed };
+}
+
 // ../../packages/secret-guard/src/redaction/redactor.ts
 var REDACTED = "****";
 var MIN_REDACTED_LENGTH = 4;
@@ -35569,7 +35661,8 @@ function cliEnvironment({
 } = {}) {
   return {
     configPath: env.LAZE_CLI_CONFIG || join(homedir(), ".laze", "config.json"),
-    // Claude Code names a subagent's commands `claude-code_<version>_agent`.
+    // `claude-code_<version>_agent` may be a subagent; from 2.1.310 the session itself too, so
+    // refuseInSubagent reads the transcripts before it refuses.
     subagent: /^claude-code_.+_agent$/.test(env.AI_AGENT ?? ""),
     profile: env.LAZE_PROFILE || void 0,
     url: env.LAZE_URL || void 0,
@@ -35656,6 +35749,17 @@ var ConfigStore = class _ConfigStore {
     await this.write({ ...config2, profiles: { ...config2.profiles, [name3]: updated } });
     return true;
   }
+  /** Marks a profile migrated; false when there is none. */
+  async markMigrated({ name: name3, migrated }) {
+    const config2 = await this.read();
+    const profile = config2.profiles[name3];
+    if (!profile) return false;
+    await this.write({
+      ...config2,
+      profiles: { ...config2.profiles, [name3]: { ...profile, migrated } }
+    });
+    return true;
+  }
   async removeProfile({ name: name3 }) {
     const config2 = await this.read();
     if (!config2.profiles[name3]) return false;
@@ -35739,7 +35843,8 @@ var SWITCHES = /* @__PURE__ */ new Set([
   "names",
   "shell",
   "self",
-  "all"
+  "all",
+  "resend"
 ]);
 function parseArgs({ argv }) {
   const words = [];
@@ -35777,7 +35882,7 @@ function flagText({
 }
 
 // src/rules/cli-version.rules.ts
-var STAMPED = "0.1.56";
+var STAMPED = "0.1.58";
 function cliVersionOf({ stamped = STAMPED } = {}) {
   return stamped.startsWith("__") ? "dev" : stamped;
 }
@@ -35789,6 +35894,14 @@ var CliUsageError = class extends Error {
     this.name = "CliUsageError";
   }
 };
+var ProfileMigratedError = class extends Error {
+  constructor(profile) {
+    super(`The agent of profile "${profile}" moved into Laze.`);
+    this.profile = profile;
+    this.name = "ProfileMigratedError";
+  }
+  profile;
+};
 
 // ../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -57706,13 +57819,13 @@ function moduleApi(name3) {
 
 // ../../packages/module/src/contract/trpc-contract.ts
 function contractBuilder(namespace, members3) {
-  const member = (name3, kind2, read3 = {}) => ({
+  const member = (name3, kind2, read4 = {}) => ({
     withInput: (input2) => {
       assertUndeclared(namespace, name3, members3);
       const cached2 = {
-        ...read3.invalidatedBy ? { invalidatedBy: read3.invalidatedBy } : {},
-        ...read3.fromProjection ? { fromProjection: read3.fromProjection } : {},
-        ...read3.revision === void 0 ? {} : { revision: read3.revision }
+        ...read4.invalidatedBy ? { invalidatedBy: read4.invalidatedBy } : {},
+        ...read4.fromProjection ? { fromProjection: read4.fromProjection } : {},
+        ...read4.revision === void 0 ? {} : { revision: read4.revision }
       };
       const declared = { ...members3, [name3]: { kind: kind2, input: input2, output: void 0, ...cached2 } };
       return {
@@ -57835,6 +57948,12 @@ var revokeApiKeyInputSchemaDefinition = external_exports.object({
   apiKeyId: external_exports.string().min(1)
 });
 var revokeApiKeyInputSchema = revokeApiKeyInputSchemaDefinition;
+var retiredKeyNoticeSchemaDefinition = external_exports.object({
+  code: external_exports.enum(["agent_migrated"]),
+  message: external_exports.string().min(1).max(1e3),
+  /** Where the holder goes instead, such as the migrated agent's chat. */
+  link: external_exports.string().max(2e3).optional()
+});
 var revokeCurrentKeyInputSchemaDefinition = external_exports.object({});
 var createApiKeyByKeyInputSchemaDefinition = external_exports.object({
   name: external_exports.string().trim().min(1).max(80),
@@ -58030,13 +58149,28 @@ var layoutBlockSchemaDefinition = external_exports.discriminatedUnion("type", [
   cardSchemaDefinition,
   external_exports.object({ type: external_exports.literal("carousel"), cards: external_exports.array(cardSchemaDefinition).max(10) })
 ]);
+var layoutChipSchemaDefinition = external_exports.object({
+  label: plain,
+  color: external_exports.string().regex(/^[a-z]{1,20}$/)
+});
 var attachmentFieldSchemaDefinition = external_exports.object({
   title: plain,
   value: markdown,
-  short: external_exports.boolean()
+  short: external_exports.boolean(),
+  chips: external_exports.array(layoutChipSchemaDefinition).max(LAYOUT_ITEMS_MAX).optional()
+});
+var layoutFileSchemaDefinition = external_exports.object({
+  name: plain,
+  path: external_exports.string().max(600).regex(/^\/api\/[^\s]*$/),
+  image: external_exports.boolean()
 });
 var layoutAttachmentSchemaDefinition = external_exports.object({
   type: external_exports.literal("attachment"),
+  /** A list item draws its fields as a table; a shared message is a quoted message. */
+  kind: external_exports.enum(["list_item", "message"]).optional(),
+  /** The line under the author or title, such as "Posted in #channel". */
+  subtitle: markdown.optional(),
+  files: external_exports.array(layoutFileSchemaDefinition).max(10).optional(),
   /** `#RRGGBB`, or null for the default grey bar. */
   color: external_exports.string().regex(/^#[0-9A-F]{6}$/).nullable(),
   pretext: markdown,
@@ -61752,6 +61886,8 @@ var vaultConfig = Config.define((c) => ({
   publicOriginAliases,
   /** A file each audit chain head is appended to as a JSON line; unset only logs the heads. */
   auditHeadFile: c.env("VAULT_AUDIT_HEAD_FILE", external_exports.string().min(1).optional()),
+  /** The progress board's alert folder for ops cards (a-content-open-fail); unset only logs. */
+  opsAlertDir: c.env("VAULT_OPS_ALERT_DIR", external_exports.string().min(1).optional()),
   /** vaultd's socket; set, the master key and data keys stay in vaultd, unset keeps them here. */
   vaultdSocket: c.env("LAZE_VAULTD_SOCKET", external_exports.string().min(1).optional()),
   /** Where the in-process key sends AWS STS calls instead of AWS; vaultd has its own flag. */
@@ -62856,6 +62992,18 @@ var claudeGatewayModelsSchemaDefinition = external_exports.object({
   haiku: external_exports.string().min(1)
 });
 var claudeGatewayModelsSchema = claudeGatewayModelsSchemaDefinition;
+var sessionImportSchemaDefinition = external_exports.object({
+  migrationId: external_exports.string().regex(/^[A-Za-z0-9_-]{1,200}$/),
+  /** `resume` writes the transcript where the harness resumes it; `seed` writes MIGRATED.md. */
+  mode: external_exports.enum(["resume", "seed"]),
+  /** The harness the transcript came from. */
+  harness: harnessKindSchema,
+  /** The harness's own session id the resume names; absent for a seed. */
+  sessionId: external_exports.string().regex(/^[A-Za-z0-9_-]{1,100}$/).optional(),
+  /** The Codex rollout's file name. */
+  fileName: external_exports.string().regex(/^[A-Za-z0-9._-]{1,200}\.jsonl$/).optional()
+});
+var sessionImportSchema = sessionImportSchemaDefinition;
 var agentSandboxSpecSchemaDefinition = external_exports.object({
   workspaceId: external_exports.string().min(1),
   agentId: external_exports.string().regex(/^[a-zA-Z0-9_-]+$/),
@@ -62884,7 +63032,9 @@ var agentSandboxSpecSchemaDefinition = external_exports.object({
   /** A personal agent's owner: their dedicated IP's route applies to this agent. */
   routeOwnerUserId: external_exports.string().min(1).optional(),
   /** Set by the runtime from the workspace's plan: egress applies the Free plan's rules. */
-  freePlan: external_exports.boolean().optional()
+  freePlan: external_exports.boolean().optional(),
+  /** A migrated agent's imported session, used when its main session first starts. */
+  sessionImport: sessionImportSchemaDefinition.optional()
 });
 var deliveredFileSchemaDefinition = external_exports.object({
   /** Relative to the agent's work folder, e.g. `attachments/<messageId>/report.pdf`. */
@@ -63072,6 +63222,8 @@ var supervisorLaunchSchemaDefinition = external_exports.object({
   cli: external_exports.object({ workspaceId: external_exports.string().min(1), agentName: external_exports.string().min(1) }).optional(),
   /** The agent's DM with its owner: its one session is tagged with it and its events carry it. */
   mainChannelId: external_exports.string().regex(/^[a-zA-Z0-9_-]+$/).optional(),
+  /** A migrated agent's imported session, fetched once when the main session first starts. */
+  sessionImport: sessionImportSchema.optional(),
   /** Set by the connector on a person's own machine: ports, paths and the local token. */
   machine: supervisorMachineSchemaDefinition.optional(),
   /** On a machine, by relay connection id: the placeholder a local caller must present. */
@@ -65208,6 +65360,124 @@ var uploadAvatarAsCallerInputSchemaDefinition = external_exports.object({
   dataBase64: external_exports.string().min(1).max(Math.ceil(AGENT_AVATAR_PICK_MAX_BYTES * 4 / 3) + 8)
 });
 
+// ../../modules/agent/contract/src/agent-migration.ts
+var workspaceIdSchema8 = external_exports.string().min(1);
+var idSchema12 = external_exports.string().min(1).max(200);
+var agentRefSchema5 = external_exports.string().trim().min(1).max(80);
+var MIGRATION_PART_MAX_BYTES = 1024 * 1024;
+var MIGRATION_PARTS_MAX = 64;
+var migrationSourceSchema = external_exports.enum(["claude-code", "codex"]);
+var migrationModeSchema = external_exports.enum(["resume", "seed"]);
+var migrationStatusSchema = external_exports.enum(["waiting", "uploading", "done", "cancelled"]);
+var migrationRemovedSchemaDefinition = external_exports.object({
+  /** Redacted on the owner's machine before the upload. */
+  local: external_exports.number().int().nonnegative(),
+  /** Values held in the workspace's vault. */
+  vault: external_exports.number().int().nonnegative(),
+  /** Key-shaped text the server's detector found. */
+  patterns: external_exports.number().int().nonnegative()
+});
+var agentMigrationSchemaDefinition = external_exports.object({
+  id: external_exports.string().min(1),
+  agentId: external_exports.string().min(1),
+  agentName: external_exports.string(),
+  source: migrationSourceSchema,
+  target: hostedHarnessSchema,
+  modelLevel: external_exports.enum(["frontier", "fast"]).nullable(),
+  mode: migrationModeSchema,
+  status: migrationStatusSchema,
+  requestedAt: external_exports.iso.datetime(),
+  updatedAt: external_exports.iso.datetime(),
+  completedAt: external_exports.iso.datetime().nullable(),
+  /** When the agent's machine last called Laze; null when it never did. */
+  machineLastSeenAt: external_exports.iso.datetime().nullable(),
+  /** The agent's DM, where the request and the notice are. */
+  channelId: external_exports.string().nullable(),
+  /** The notice's place in the DM, once done. */
+  noticeSeq: external_exports.number().int().nullable(),
+  /** Counts of what was removed, never the values; null before it is done. */
+  removed: migrationRemovedSchemaDefinition.nullable()
+});
+var agentMigrationSchema = agentMigrationSchemaDefinition;
+var migrateAgentInputSchemaDefinition = external_exports.object({
+  workspaceId: workspaceIdSchema8,
+  agentId: idSchema12,
+  harness: hostedHarnessSchema,
+  /** For Laze models; fast when not given. */
+  modelLevel: external_exports.enum(["frontier", "fast"]).optional(),
+  /** Post the request to the agent's session again while one waits. */
+  resend: external_exports.boolean().default(false)
+});
+var migrateAgentInputSchema = migrateAgentInputSchemaDefinition;
+var agentMigrationInputSchemaDefinition = external_exports.object({
+  workspaceId: workspaceIdSchema8,
+  agentId: idSchema12
+});
+var agentMigrationInputSchema = agentMigrationInputSchemaDefinition;
+var migrateAgentAsCallerInputSchemaDefinition = external_exports.object({
+  agent: agentRefSchema5,
+  /** Where it runs in Laze; its own harness when not given. */
+  harness: hostedHarnessSchema.optional(),
+  modelLevel: external_exports.enum(["frontier", "fast"]).optional(),
+  resend: external_exports.boolean().default(false)
+});
+var agentMigrationAsCallerInputSchemaDefinition = external_exports.object({ agent: agentRefSchema5 });
+var nullableMigrationSchemaDefinition = external_exports.object({
+  migration: agentMigrationSchemaDefinition.nullable()
+});
+var nullableMigrationSchema = nullableMigrationSchemaDefinition;
+var migrationIdParamsSchemaDefinition = external_exports.object({ migrationId: idSchema12 });
+var migrationPartParamsSchemaDefinition = external_exports.object({
+  migrationId: idSchema12,
+  index: external_exports.coerce.number().int().min(0).max(MIGRATION_PARTS_MAX - 1)
+});
+var migrationTicketSchemaDefinition = external_exports.object({
+  id: external_exports.string().min(1),
+  status: migrationStatusSchema,
+  source: migrationSourceSchema,
+  mode: migrationModeSchema,
+  /** The session the agent was bound to, when it was. */
+  sessionId: external_exports.string().nullable(),
+  partMaxBytes: external_exports.number().int().positive(),
+  partsMax: external_exports.number().int().positive()
+});
+var uploadMigrationPartInputSchemaDefinition = external_exports.object({
+  text: external_exports.string().max(MIGRATION_PART_MAX_BYTES)
+});
+var completeMigrationInputSchemaDefinition = external_exports.object({
+  parts: external_exports.number().int().min(1).max(MIGRATION_PARTS_MAX),
+  /** Of the joined parts' UTF-8, so the server knows it holds what was sent. */
+  sha256: external_exports.string().regex(/^[0-9a-f]{64}$/),
+  /** The transcript was longer than the cap: only its newest lines were sent. */
+  truncated: external_exports.boolean().default(false),
+  /** The harness's own session id: Claude's session or Codex's thread. */
+  sessionId: external_exports.string().regex(/^[A-Za-z0-9_-]{1,100}$/).optional(),
+  /** The transcript's file name, which Codex finds its rollout by. */
+  fileName: external_exports.string().regex(/^[A-Za-z0-9._-]{1,200}\.jsonl$/).optional(),
+  localRedactions: external_exports.number().int().nonnegative().default(0)
+});
+var completedMigrationSchemaDefinition = external_exports.object({
+  migration: agentMigrationSchemaDefinition,
+  /** The agent's chat at the notice, to open in the browser. */
+  link: external_exports.string()
+});
+var transcriptPartQuerySchemaDefinition = external_exports.object({
+  part: external_exports.coerce.number().int().min(0).max(MIGRATION_PARTS_MAX - 1).default(0)
+});
+var transcriptPartSchemaDefinition = external_exports.object({
+  index: external_exports.number().int().nonnegative(),
+  count: external_exports.number().int().positive(),
+  text: external_exports.string(),
+  mode: migrationModeSchema,
+  harness: migrationSourceSchema,
+  sessionId: external_exports.string().nullable(),
+  fileName: external_exports.string().nullable()
+});
+function migrationUploadCommandOf({ migrationId }) {
+  return `laze agent migrate upload ${migrationId}`;
+}
+var agentMigrationTrpc = defineTrpcContract("agents").mutation("migrate").withInput(migrateAgentInputSchema).withOutput(agentMigrationSchema).query("migration").withInput(agentMigrationInputSchema).withOutput(nullableMigrationSchema).mutation("cancelMigration").withInput(agentMigrationInputSchema).withOutput(agentMigrationSchema).build();
+
 // ../../modules/agent/contract/src/agent-monitors.ts
 var MONITOR_PROMPT_MAX = 4e3;
 var MONITOR_RUNS_PER_DAY_DEFAULT = 100;
@@ -65269,8 +65539,8 @@ var addedMonitorSchemaDefinition = external_exports.object({
 // ../../modules/agent/contract/src/agent-oauth.ts
 var OAUTH_CODE_TTL_SECONDS = 5 * 60;
 var REMOTE_MCP_PATH = "/mcp";
-var workspaceIdSchema8 = external_exports.string().min(1);
-var idSchema12 = external_exports.string().min(1).max(80);
+var workspaceIdSchema9 = external_exports.string().min(1);
+var idSchema13 = external_exports.string().min(1).max(80);
 var oauthAuthorizeRequestSchemaDefinition = external_exports.object({
   response_type: external_exports.string().max(40).optional(),
   client_id: external_exports.string().min(1).max(4096),
@@ -65282,7 +65552,7 @@ var oauthAuthorizeRequestSchemaDefinition = external_exports.object({
   scope: external_exports.string().max(400).optional()
 });
 var oauthRequestInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema8,
+  workspaceId: workspaceIdSchema9,
   request: oauthAuthorizeRequestSchemaDefinition
 });
 var oauthRequestInputSchema = oauthRequestInputSchemaDefinition;
@@ -65291,16 +65561,16 @@ var oauthRequestViewSchemaDefinition = external_exports.object({
   /** The host the browser returns to, such as `chatgpt.com`. */
   redirectHost: external_exports.string(),
   /** The person's connected agents of this client in the workspace, newest first. */
-  reconnectable: external_exports.array(external_exports.object({ id: idSchema12, name: external_exports.string() })),
+  reconnectable: external_exports.array(external_exports.object({ id: idSchema13, name: external_exports.string() })),
   defaultName: external_exports.string()
 });
 var oauthRequestViewSchema = oauthRequestViewSchemaDefinition;
 var approveOAuthInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema8,
+  workspaceId: workspaceIdSchema9,
   request: oauthAuthorizeRequestSchemaDefinition,
   name: external_exports.string().trim().min(1).max(80),
   /** One of the person's agents of this client to hand a new key, instead of a new agent. */
-  reconnectAgentId: idSchema12.optional()
+  reconnectAgentId: idSchema13.optional()
 });
 var approveOAuthInputSchema = approveOAuthInputSchemaDefinition;
 var oauthRedirectSchemaDefinition = external_exports.object({ redirectUrl: external_exports.string() });
@@ -65332,9 +65602,9 @@ var agentPermissionPromptSchemaDefinition = external_exports.object({
 var agentPermissionPromptSchema = agentPermissionPromptSchemaDefinition;
 
 // ../../modules/agent/contract/src/agent-transfer.ts
-var workspaceIdSchema9 = external_exports.string().min(1);
-var idSchema13 = external_exports.string().min(1).max(200);
-var agentRefSchema5 = external_exports.string().trim().min(1).max(80);
+var workspaceIdSchema10 = external_exports.string().min(1);
+var idSchema14 = external_exports.string().min(1).max(200);
+var agentRefSchema6 = external_exports.string().trim().min(1).max(80);
 var agentTransferOfferSchemaDefinition = external_exports.object({
   id: external_exports.string().min(1),
   agentId: external_exports.string().min(1),
@@ -65349,11 +65619,11 @@ var agentTransferOfferSchemaDefinition = external_exports.object({
 });
 var agentTransferOfferSchema = agentTransferOfferSchemaDefinition;
 var agentTransferInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema9,
-  agentId: idSchema13
+  workspaceId: workspaceIdSchema10,
+  agentId: idSchema14
 });
 var agentTransferInputSchema = agentTransferInputSchemaDefinition;
-var agentTransferAsCallerInputSchemaDefinition = external_exports.object({ agent: agentRefSchema5 });
+var agentTransferAsCallerInputSchemaDefinition = external_exports.object({ agent: agentRefSchema6 });
 var agentTransferOfferedPayloadSchemaDefinition = external_exports.object({
   workspaceId: external_exports.string().min(1),
   offerId: external_exports.string().min(1),
@@ -65383,24 +65653,24 @@ var agentWorkingSchemaDefinition = external_exports.object({ working: external_e
 var agentWorkingSchema = agentWorkingSchemaDefinition;
 
 // ../../modules/agent/contract/src/agent-workspace-default.ts
-var workspaceIdSchema10 = external_exports.string().min(1);
-var idSchema14 = external_exports.string().min(1).max(200);
-var agentRefSchema6 = external_exports.string().trim().min(1).max(80);
+var workspaceIdSchema11 = external_exports.string().min(1);
+var idSchema15 = external_exports.string().min(1).max(200);
+var agentRefSchema7 = external_exports.string().trim().min(1).max(80);
 var workspaceDefaultAgentSchemaDefinition = external_exports.object({
   /** Null when the workspace has none, or its pick was removed. */
-  agentId: idSchema14.nullable(),
+  agentId: idSchema15.nullable(),
   name: external_exports.string().nullable()
 });
 var workspaceDefaultAgentSchema = workspaceDefaultAgentSchemaDefinition;
 var setWorkspaceDefaultAgentInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   /** A team agent of the workspace; null clears the pick. */
-  agentId: idSchema14.nullable()
+  agentId: idSchema15.nullable()
 });
 var setWorkspaceDefaultAgentInputSchema = setWorkspaceDefaultAgentInputSchemaDefinition;
 var setWorkspaceDefaultAgentAsCallerInputSchemaDefinition = external_exports.object({
   /** The agent by id or name; null clears the pick. */
-  agent: agentRefSchema6.nullable()
+  agent: agentRefSchema7.nullable()
 });
 
 // ../../modules/agent/contract/src/agent.ts
@@ -65408,8 +65678,8 @@ var AGENT_LINK_TTL_SECONDS = 30 * 60;
 var AGENT_JOIN_REQUEST_TTL_SECONDS = 24 * 60 * 60;
 var AGENT_ONLINE_WINDOW_SECONDS = 5 * 60;
 var INBOX_WAIT_MAX_SECONDS = 55;
-var workspaceIdSchema11 = external_exports.string().min(1);
-var idSchema15 = external_exports.string().min(1).max(80);
+var workspaceIdSchema12 = external_exports.string().min(1);
+var idSchema16 = external_exports.string().min(1).max(80);
 var agentHarnessSchema = external_exports.enum([
   "claude-code",
   "codex",
@@ -65456,27 +65726,27 @@ var agentContextSchemaDefinition = external_exports.object({
   updatedAt: external_exports.iso.datetime().nullable()
 });
 var agentHostSchemaDefinition = external_exports.object({
-  machineId: idSchema15,
+  machineId: idSchema16,
   whenOffline: external_exports.enum(["wait", "sandbox"])
 });
 var setAgentHostInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
-  agentId: idSchema15,
+  workspaceId: workspaceIdSchema12,
+  agentId: idSchema16,
   host: agentHostSchemaDefinition.nullable()
 });
 var setAgentComputerKeyInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
-  agentId: idSchema15,
+  workspaceId: workspaceIdSchema12,
+  agentId: idSchema16,
   computerKey: external_exports.string().min(1).max(200).nullable()
 });
 var agentSchemaDefinition = external_exports.object({
-  id: idSchema15,
-  workspaceId: workspaceIdSchema11,
+  id: idSchema16,
+  workspaceId: workspaceIdSchema12,
   name: external_exports.string(),
   kind: external_exports.enum(["personal", "team"]),
   hosting: agentHostingSchema,
   harness: agentHarnessSchema,
-  ownerUserId: idSchema15,
+  ownerUserId: idSchema16,
   status: external_exports.enum(["connected", "disconnected"]),
   online: external_exports.boolean(),
   lastSeenAt: external_exports.iso.datetime().nullable(),
@@ -65518,7 +65788,7 @@ var agentSchemaDefinition = external_exports.object({
 });
 var agentSchema = agentSchemaDefinition;
 var agentChannelSchemaDefinition = external_exports.object({
-  id: idSchema15,
+  id: idSchema16,
   name: external_exports.string(),
   kind: external_exports.enum(["public", "private", "dm", "group", "chat"])
 });
@@ -65533,22 +65803,22 @@ var agentNameSchema = external_exports.string().trim().min(1).max(80);
 var instructionsSchema = external_exports.string().max(2e4);
 var linkedAvatarSchema = external_exports.string().trim().max(16);
 var createAgentInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
+  workspaceId: workspaceIdSchema12,
   name: agentNameSchema,
   avatar: agentAvatarInputSchema.default(""),
   harness: hostedHarnessSchema,
   modelLevel: agentModelLevelSchema.optional(),
   kind: external_exports.enum(["personal", "team"]).default("personal"),
   instructions: instructionsSchema.default(""),
-  channelIds: external_exports.array(idSchema15).max(50).default([]),
+  channelIds: external_exports.array(idSchema16).max(50).default([]),
   /** A Claude Code or Codex agent drawing from this login pool; a team one needs a pool. */
   /** The pool's id or name. */
   loginPoolId: external_exports.string().min(1).max(200).optional()
 });
 var createAgentInputSchema = createAgentInputSchemaDefinition;
 var updateAgentInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
-  agentId: idSchema15,
+  workspaceId: workspaceIdSchema12,
+  agentId: idSchema16,
   name: agentNameSchema.optional(),
   avatar: agentAvatarInputSchema.optional(),
   modelLevel: agentModelLevelSchema.optional(),
@@ -65560,7 +65830,7 @@ var updateAgentInputSchemaDefinition = external_exports.object({
   effort: runEffortInputSchema.optional(),
   instructions: instructionsSchema.optional(),
   /** The whole set: channels left out are left. */
-  channelIds: external_exports.array(idSchema15).max(50).optional(),
+  channelIds: external_exports.array(idSchema16).max(50).optional(),
   /** Agents Laze runs only: paused, it does not wake until resumed and its messages wait. */
   paused: external_exports.boolean().optional(),
   /** Why it is paused, shown on the agents page and in the notice under held messages. */
@@ -65568,14 +65838,14 @@ var updateAgentInputSchemaDefinition = external_exports.object({
 });
 var updateAgentInputSchema = updateAgentInputSchemaDefinition;
 var saveHarnessLoginInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
+  workspaceId: workspaceIdSchema12,
   harness: harnessLoginSchema,
   secret: external_exports.string().trim().min(10).max(2e4).optional(),
   signIn: harnessSignInValueSchema.optional()
 });
 var saveHarnessLoginInputSchema = saveHarnessLoginInputSchemaDefinition;
 var removeHarnessLoginInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
+  workspaceId: workspaceIdSchema12,
   harness: harnessLoginSchema
 });
 var removeHarnessLoginInputSchema = removeHarnessLoginInputSchemaDefinition;
@@ -65587,13 +65857,13 @@ var harnessLoginsSchema = harnessLoginsSchemaDefinition;
 var lastRuntimeSchemaDefinition = external_exports.object({ harness: hostedHarnessSchema.nullable() });
 var lastRuntimeSchema = lastRuntimeSchemaDefinition;
 var mintLinkInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
+  workspaceId: workspaceIdSchema12,
   /** Left out, the agent names itself when it joins, else it takes its harness's name. */
   name: external_exports.string().trim().max(80).optional(),
   /** The channel the agent joins once linked. */
-  channelId: idSchema15.optional(),
+  channelId: idSchema16.optional(),
   /** One of the minting person's connected agents: redeeming gives it a new key instead. */
-  reconnectAgentId: idSchema15.optional()
+  reconnectAgentId: idSchema16.optional()
 });
 var mintLinkInputSchema = mintLinkInputSchemaDefinition;
 var mintedLinkSchemaDefinition = external_exports.object({
@@ -65625,7 +65895,7 @@ var redeemedLinkSchemaDefinition = external_exports.object({
   agent: agentSchemaDefinition,
   /** The agent's own `lz_` key, shown once. */
   apiKey: external_exports.string(),
-  channelId: idSchema15.nullable(),
+  channelId: idSchema16.nullable(),
   /** The owner's key that may only ask for a new agent (`laze agent request`), shown once. */
   requestKey: external_exports.string().nullable().optional()
 });
@@ -65664,12 +65934,12 @@ var joinRequestAnswerSchemaDefinition = external_exports.discriminatedUnion("sta
   })
 ]);
 var joinRequestInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
+  workspaceId: workspaceIdSchema12,
   code: external_exports.string().trim().min(1).max(20)
 });
 var joinRequestInputSchema = joinRequestInputSchemaDefinition;
 var approveJoinRequestInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
+  workspaceId: workspaceIdSchema12,
   code: external_exports.string().trim().min(1).max(20),
   /** The person may rename the agent as they approve it. */
   name: external_exports.string().trim().max(80).optional()
@@ -65690,12 +65960,12 @@ var inboxCatchUpSchemaDefinition = external_exports.object({
 });
 var inboxCatchUpSchema = inboxCatchUpSchemaDefinition;
 var inboxMessageSchemaDefinition = external_exports.object({
-  messageId: idSchema15,
-  channelId: idSchema15,
+  messageId: idSchema16,
+  channelId: idSchema16,
   channelName: external_exports.string(),
   channelKind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
-  threadRootId: idSchema15.nullable(),
-  author: external_exports.object({ kind: external_exports.enum(["person", "agent"]), id: idSchema15, name: external_exports.string() }),
+  threadRootId: idSchema16.nullable(),
+  author: external_exports.object({ kind: external_exports.enum(["person", "agent"]), id: idSchema16, name: external_exports.string() }),
   body: external_exports.string(),
   postedAt: external_exports.iso.datetime(),
   /** On the first message of each conversation in a catch up (agent-catch-up.feature). */
@@ -65715,9 +65985,9 @@ var inboxWaitingSchemaDefinition = external_exports.object({
 });
 var callerSchemaDefinition = external_exports.object({
   kind: external_exports.enum(["person", "agent"]),
-  id: idSchema15,
+  id: idSchema16,
   name: external_exports.string(),
-  workspaceId: workspaceIdSchema11,
+  workspaceId: workspaceIdSchema12,
   agent: agentSchemaDefinition.nullable(),
   /** Messages waiting in the agent's inbox, not taken yet; 0 for a person. */
   pendingCount: external_exports.number().int().min(0).optional(),
@@ -65733,7 +66003,7 @@ var agentGuideFilesSchemaDefinition = external_exports.object({
 });
 var agentChannelLevelSchema = external_exports.enum(["everything", "mentions"]);
 var callerChannelSchemaDefinition = external_exports.object({
-  id: idSchema15,
+  id: idSchema16,
   name: external_exports.string(),
   kind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
   unread: external_exports.number().int().nonnegative(),
@@ -65747,9 +66017,9 @@ var callerChannelSchemaDefinition = external_exports.object({
   isDefault: external_exports.boolean().default(false)
 });
 var setChannelLevelInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
-  agentId: idSchema15,
-  channelId: idSchema15,
+  workspaceId: workspaceIdSchema12,
+  agentId: idSchema16,
+  channelId: idSchema16,
   level: agentChannelLevelSchema
 });
 var setChannelLevelInputSchema = setChannelLevelInputSchemaDefinition;
@@ -65772,12 +66042,12 @@ var postAsCallerInputSchemaDefinition = external_exports.object({
   /** A channel's name (with or without `#`) or id. */
   channel: external_exports.string().trim().min(1).max(81),
   body: external_exports.string().trim().min(1).max(4e4),
-  threadRootId: idSchema15.optional(),
+  threadRootId: idSchema16.optional(),
   /** The messages of the agent's turn this post answers. */
-  answers: external_exports.array(idSchema15).max(200).optional()
+  answers: external_exports.array(idSchema16).max(200).optional()
 });
 var replyAsCallerInputSchemaDefinition = external_exports.object({
-  messageId: idSchema15,
+  messageId: idSchema16,
   body: external_exports.string().trim().min(1).max(4e4),
   /** Needed for a message that is not in the caller's inbox. */
   channel: external_exports.string().trim().min(1).max(81).optional(),
@@ -65786,18 +66056,18 @@ var replyAsCallerInputSchemaDefinition = external_exports.object({
   /** A thread reply also shows in the channel, as "Also send to #channel" does. */
   alsoInChannel: external_exports.boolean().optional(),
   /** The other messages of the agent's turn this reply answers. */
-  answers: external_exports.array(idSchema15).max(200).optional()
+  answers: external_exports.array(idSchema16).max(200).optional()
 });
 var postedMessageSchemaDefinition = external_exports.object({
-  messageId: idSchema15,
-  channelId: idSchema15,
-  threadRootId: idSchema15.nullable(),
+  messageId: idSchema16,
+  channelId: idSchema16,
+  threadRootId: idSchema16.nullable(),
   /** Workspace members the message mentioned who are not in the channel: it did not reach them. */
   notInChannel: external_exports.array(external_exports.object({ ...notInChannelSchema.shape, name: external_exports.string() })).default([]),
   /** Mentioned agents that are paused or out of usage: the message waits for each of them. */
   waitsFor: external_exports.array(
     external_exports.object({
-      agentId: idSchema15,
+      agentId: idSchema16,
       name: external_exports.string(),
       cause: external_exports.enum(["paused", "out_of_usage"]),
       /** When an agent out of usage gets its usage back; null while paused. */
@@ -65814,15 +66084,15 @@ var searchAsCallerInputSchemaDefinition = external_exports.object({
 });
 var callerActorNameSchema = external_exports.object({
   kind: external_exports.enum(["person", "agent"]),
-  id: idSchema15,
+  id: idSchema16,
   name: external_exports.string()
 });
 var callerSearchHitSchemaDefinition = external_exports.object({
-  messageId: idSchema15,
-  channelId: idSchema15,
+  messageId: idSchema16,
+  channelId: idSchema16,
   channelName: external_exports.string(),
   channelKind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
-  threadRootId: idSchema15.nullable(),
+  threadRootId: idSchema16.nullable(),
   seq: external_exports.number().int().positive(),
   /** `external` for a mirrored message from someone outside Laze. */
   author: external_exports.object({
@@ -65844,7 +66114,7 @@ var callerSearchResultSchemaDefinition = external_exports.object({
   /** Names for the mention tokens in the bodies. */
   mentions: external_exports.object({
     actors: external_exports.array(callerActorNameSchema),
-    channels: external_exports.array(external_exports.object({ id: idSchema15, name: external_exports.string() }))
+    channels: external_exports.array(external_exports.object({ id: idSchema16, name: external_exports.string() }))
   })
 });
 var agentActivityInputSchemaDefinition = external_exports.object({
@@ -65916,14 +66186,14 @@ var codexLoginRefreshInputSchemaDefinition = external_exports.object({
   authJson: external_exports.string().min(2).max(CODEX_LOGIN_MAX_LENGTH)
 });
 var AgentApi = moduleApi()("agent");
-var agentCoreTrpc = defineTrpcContract("agents").query("list").withInput(external_exports.object({ workspaceId: workspaceIdSchema11 })).withOutput(external_exports.array(agentListEntrySchema)).mutation("create").withInput(createAgentInputSchema).withOutput(agentSchema).mutation("update").withInput(updateAgentInputSchema).withOutput(agentSchema).mutation("remove").withInput(external_exports.object({ workspaceId: workspaceIdSchema11, agentId: idSchema15 })).withOutput(external_exports.object({ removed: external_exports.literal(true) })).mutation("transfer").withInput(transferAgentInputSchema).withOutput(agentSchema).mutation("resetSession").withInput(resetAgentSessionInputSchema).withOutput(agentSchema).query("faces").withInput(external_exports.object({ workspaceId: workspaceIdSchema11 })).withOutput(external_exports.array(agentFaceSchema)).query("presence").withInput(external_exports.object({ workspaceId: workspaceIdSchema11 })).withOutput(external_exports.array(agentPresenceSchema)).mutation("uploadAvatar").withInput(uploadAgentAvatarInputSchema).withOutput(uploadedAgentAvatarSchema).query("access").withInput(external_exports.object({ workspaceId: workspaceIdSchema11, agentId: idSchema15 })).withOutput(agentAccessSchema).query("loginActivity").withInput(external_exports.object({ workspaceId: workspaceIdSchema11, agentId: idSchema15 })).withOutput(loginActivitySchema).mutation("raiseBudget").withInput(raiseBudgetInputSchema).withOutput(external_exports.object({ limitUsd: external_exports.number() })).query("permissionPrompts").withInput(external_exports.object({ workspaceId: workspaceIdSchema11, agentId: idSchema15 })).withOutput(external_exports.array(agentPermissionPromptSchema)).mutation("share").withInput(shareAgentInputSchema).withOutput(agentAccessSchema).mutation("unshare").withInput(shareAgentInputSchema).withOutput(agentAccessSchema).query("harnessLogins").withInput(external_exports.object({ workspaceId: workspaceIdSchema11 })).withOutput(harnessLoginsSchema).mutation("saveHarnessLogin").withInput(saveHarnessLoginInputSchema).withOutput(harnessLoginsSchema).mutation("removeHarnessLogin").withInput(removeHarnessLoginInputSchema).withOutput(harnessLoginsSchema).query("listHarnessLogins").withInput(external_exports.object({ workspaceId: workspaceIdSchema11 })).withOutput(harnessLoginListSchema).mutation("addHarnessLogin").withInput(addHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("renameHarnessLogin").withInput(renameHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("deleteHarnessLogin").withInput(deleteHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("checkLoginUsage").withInput(checkLoginUsageInputSchema).withOutput(loginUsageCheckSchema).query("loginPools").withInput(external_exports.object({ workspaceId: workspaceIdSchema11 })).withOutput(loginPoolsSchema).mutation("createLoginPool").withInput(createLoginPoolInputSchema).withOutput(loginPoolsSchema).mutation("renameLoginPool").withInput(renameLoginPoolInputSchema).withOutput(loginPoolsSchema).mutation("deleteLoginPool").withInput(loginPoolRefInputSchema).withOutput(loginPoolsSchema).mutation("addPoolLogin").withInput(addPoolLoginInputSchema).withOutput(loginPoolsSchema).mutation("removePoolLogin").withInput(removePoolLoginInputSchema).withOutput(loginPoolsSchema).mutation("setPoolMember").withInput(setPoolMemberInputSchema).withOutput(loginPoolsSchema).mutation("removePoolMember").withInput(removePoolMemberInputSchema).withOutput(loginPoolsSchema).mutation("setAgentPool").withInput(setAgentPoolInputSchema).withOutput(agentSchema).mutation("openDirect").withInput(external_exports.object({ workspaceId: workspaceIdSchema11, agentId: idSchema15 })).withOutput(external_exports.object({ channelId: idSchema15 })).mutation("startConversation").withInput(startConversationInputSchema).withOutput(startedConversationSchema).query("conversations").withInput(listConversationsInputSchema).withOutput(external_exports.array(conversationSummarySchema2)).mutation("joinConversation").withInput(conversationInputSchema).withOutput(conversationSummarySchema2).mutation("renameConversation").withInput(renameConversationInputSchema).withOutput(conversationSummarySchema2).mutation("leaveConversation").withInput(conversationInputSchema).withOutput(external_exports.object({ left: external_exports.literal(true) })).mutation("deleteConversation").withInput(conversationInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).mutation("mintLink").withInput(mintLinkInputSchema).withOutput(mintedLinkSchema).query("linkRedemption").withInput(linkRedemptionInputSchema).withOutput(linkRedemptionSchema).query("oauthRequest").withInput(oauthRequestInputSchema).withOutput(oauthRequestViewSchema).mutation("oauthApprove").withInput(approveOAuthInputSchema).withOutput(oauthRedirectSchema).mutation("oauthDeny").withInput(oauthRequestInputSchema).withOutput(oauthRedirectSchema).mutation("disconnect").withInput(external_exports.object({ workspaceId: workspaceIdSchema11, agentId: idSchema15 })).withOutput(external_exports.object({ disconnected: external_exports.literal(true) })).mutation("setGithub").withInput(setAgentGithubInputSchema).withOutput(agentSchema).query("githubWatches").withInput(external_exports.object({ workspaceId: workspaceIdSchema11, agentId: idSchema15 })).withOutput(external_exports.array(agentGithubWatchSchema)).mutation("watchGithub").withInput(watchGithubInputSchema).withOutput(agentGithubWatchSchema).mutation("unwatchGithub").withInput(unwatchGithubInputSchema).withOutput(external_exports.object({ removed: external_exports.literal(true) })).build();
+var agentCoreTrpc = defineTrpcContract("agents").query("list").withInput(external_exports.object({ workspaceId: workspaceIdSchema12 })).withOutput(external_exports.array(agentListEntrySchema)).mutation("create").withInput(createAgentInputSchema).withOutput(agentSchema).mutation("update").withInput(updateAgentInputSchema).withOutput(agentSchema).mutation("remove").withInput(external_exports.object({ workspaceId: workspaceIdSchema12, agentId: idSchema16 })).withOutput(external_exports.object({ removed: external_exports.literal(true) })).mutation("transfer").withInput(transferAgentInputSchema).withOutput(agentSchema).mutation("resetSession").withInput(resetAgentSessionInputSchema).withOutput(agentSchema).query("faces").withInput(external_exports.object({ workspaceId: workspaceIdSchema12 })).withOutput(external_exports.array(agentFaceSchema)).query("presence").withInput(external_exports.object({ workspaceId: workspaceIdSchema12 })).withOutput(external_exports.array(agentPresenceSchema)).mutation("uploadAvatar").withInput(uploadAgentAvatarInputSchema).withOutput(uploadedAgentAvatarSchema).query("access").withInput(external_exports.object({ workspaceId: workspaceIdSchema12, agentId: idSchema16 })).withOutput(agentAccessSchema).query("loginActivity").withInput(external_exports.object({ workspaceId: workspaceIdSchema12, agentId: idSchema16 })).withOutput(loginActivitySchema).mutation("raiseBudget").withInput(raiseBudgetInputSchema).withOutput(external_exports.object({ limitUsd: external_exports.number() })).query("permissionPrompts").withInput(external_exports.object({ workspaceId: workspaceIdSchema12, agentId: idSchema16 })).withOutput(external_exports.array(agentPermissionPromptSchema)).mutation("share").withInput(shareAgentInputSchema).withOutput(agentAccessSchema).mutation("unshare").withInput(shareAgentInputSchema).withOutput(agentAccessSchema).query("harnessLogins").withInput(external_exports.object({ workspaceId: workspaceIdSchema12 })).withOutput(harnessLoginsSchema).mutation("saveHarnessLogin").withInput(saveHarnessLoginInputSchema).withOutput(harnessLoginsSchema).mutation("removeHarnessLogin").withInput(removeHarnessLoginInputSchema).withOutput(harnessLoginsSchema).query("listHarnessLogins").withInput(external_exports.object({ workspaceId: workspaceIdSchema12 })).withOutput(harnessLoginListSchema).mutation("addHarnessLogin").withInput(addHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("renameHarnessLogin").withInput(renameHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("deleteHarnessLogin").withInput(deleteHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("checkLoginUsage").withInput(checkLoginUsageInputSchema).withOutput(loginUsageCheckSchema).query("loginPools").withInput(external_exports.object({ workspaceId: workspaceIdSchema12 })).withOutput(loginPoolsSchema).mutation("createLoginPool").withInput(createLoginPoolInputSchema).withOutput(loginPoolsSchema).mutation("renameLoginPool").withInput(renameLoginPoolInputSchema).withOutput(loginPoolsSchema).mutation("deleteLoginPool").withInput(loginPoolRefInputSchema).withOutput(loginPoolsSchema).mutation("addPoolLogin").withInput(addPoolLoginInputSchema).withOutput(loginPoolsSchema).mutation("removePoolLogin").withInput(removePoolLoginInputSchema).withOutput(loginPoolsSchema).mutation("setPoolMember").withInput(setPoolMemberInputSchema).withOutput(loginPoolsSchema).mutation("removePoolMember").withInput(removePoolMemberInputSchema).withOutput(loginPoolsSchema).mutation("setAgentPool").withInput(setAgentPoolInputSchema).withOutput(agentSchema).mutation("openDirect").withInput(external_exports.object({ workspaceId: workspaceIdSchema12, agentId: idSchema16 })).withOutput(external_exports.object({ channelId: idSchema16 })).mutation("startConversation").withInput(startConversationInputSchema).withOutput(startedConversationSchema).query("conversations").withInput(listConversationsInputSchema).withOutput(external_exports.array(conversationSummarySchema2)).mutation("joinConversation").withInput(conversationInputSchema).withOutput(conversationSummarySchema2).mutation("renameConversation").withInput(renameConversationInputSchema).withOutput(conversationSummarySchema2).mutation("leaveConversation").withInput(conversationInputSchema).withOutput(external_exports.object({ left: external_exports.literal(true) })).mutation("deleteConversation").withInput(conversationInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).mutation("mintLink").withInput(mintLinkInputSchema).withOutput(mintedLinkSchema).query("linkRedemption").withInput(linkRedemptionInputSchema).withOutput(linkRedemptionSchema).query("oauthRequest").withInput(oauthRequestInputSchema).withOutput(oauthRequestViewSchema).mutation("oauthApprove").withInput(approveOAuthInputSchema).withOutput(oauthRedirectSchema).mutation("oauthDeny").withInput(oauthRequestInputSchema).withOutput(oauthRedirectSchema).mutation("disconnect").withInput(external_exports.object({ workspaceId: workspaceIdSchema12, agentId: idSchema16 })).withOutput(external_exports.object({ disconnected: external_exports.literal(true) })).mutation("setGithub").withInput(setAgentGithubInputSchema).withOutput(agentSchema).query("githubWatches").withInput(external_exports.object({ workspaceId: workspaceIdSchema12, agentId: idSchema16 })).withOutput(external_exports.array(agentGithubWatchSchema)).mutation("watchGithub").withInput(watchGithubInputSchema).withOutput(agentGithubWatchSchema).mutation("unwatchGithub").withInput(unwatchGithubInputSchema).withOutput(external_exports.object({ removed: external_exports.literal(true) })).build();
 var agentTurnTrpc = defineTrpcContract("agents").mutation("answerAttention").withInput(answerAttentionInputSchema).withOutput(external_exports.object({ answered: external_exports.literal(true) })).mutation("stopTurn").withInput(stopAgentTurnInputSchema).withOutput(external_exports.object({ stopped: external_exports.literal(true) })).query("mayStopTurn").withInput(stopAgentTurnInputSchema).withOutput(external_exports.object({ allowed: external_exports.boolean() })).mutation("retryTurn").withInput(retryAgentTurnInputSchema).withOutput(external_exports.object({ retried: external_exports.literal(true) })).query("retryState").withInput(retryAgentTurnInputSchema).withOutput(agentRetryStateSchema).query("liveSteps").withInput(liveStepsInputSchema).withOutput(liveStepsSchema).query("workingNow").withInput(agentWorkingInputSchema).withOutput(agentWorkingSchema).mutation("compactSession").withInput(compactAgentSessionInputSchema).withOutput(external_exports.object({ requested: external_exports.literal(true) })).mutation("catchUp").withInput(startCatchUpInputSchema).withOutput(catchUpRunSchema).mutation("catchUpAsk").withInput(askCatchUpInputSchema).withOutput(catchUpRunSchema).query("catchUpRun").withInput(catchUpRunInputSchema).withOutput(catchUpRunSchema).mutation("catchUpStop").withInput(catchUpRunInputSchema).withOutput(catchUpRunSchema).mutation("restartComputer").withInput(restartAgentComputerInputSchema).withOutput(external_exports.object({ restarted: external_exports.boolean() })).build();
-var agentChannelSettingsTrpc = defineTrpcContract("agents").query("monitors").withInput(external_exports.object({ workspaceId: workspaceIdSchema11, agentId: idSchema15 })).withOutput(external_exports.array(agentMonitorSchema)).query("channelLevel").withInput(external_exports.object({ workspaceId: workspaceIdSchema11, agentId: idSchema15, channelId: idSchema15 })).withOutput(channelLevelSchema).mutation("setChannelLevel").withInput(setChannelLevelInputSchema).withOutput(channelLevelSchema).mutation("unmuteChannel").withInput(unmuteAgentChannelInputSchema).withOutput(channelLevelSchema).mutation("cancelHeld").withInput(cancelHeldInputSchema).withOutput(cancelHeldResultSchema).build();
+var agentChannelSettingsTrpc = defineTrpcContract("agents").query("monitors").withInput(external_exports.object({ workspaceId: workspaceIdSchema12, agentId: idSchema16 })).withOutput(external_exports.array(agentMonitorSchema)).query("channelLevel").withInput(external_exports.object({ workspaceId: workspaceIdSchema12, agentId: idSchema16, channelId: idSchema16 })).withOutput(channelLevelSchema).mutation("setChannelLevel").withInput(setChannelLevelInputSchema).withOutput(channelLevelSchema).mutation("unmuteChannel").withInput(unmuteAgentChannelInputSchema).withOutput(channelLevelSchema).mutation("cancelHeld").withInput(cancelHeldInputSchema).withOutput(cancelHeldResultSchema).build();
 var agentJoinTrpc = defineTrpcContract("agents").query("joinRequest").withInput(joinRequestInputSchema).withOutput(joinRequestViewSchema).mutation("approveJoinRequest").withInput(approveJoinRequestInputSchema).withOutput(joinRequestViewSchema).mutation("denyJoinRequest").withInput(joinRequestInputSchema).withOutput(joinRequestViewSchema).build();
 var agentLoginTroubleTrpc = defineTrpcContract("agents").mutation("replaceHarnessLogin").withInput(replaceHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("startHarnessSignIn").withInput(startHarnessSignInInputSchema).withOutput(harnessSignInSchema).mutation("pollHarnessSignIn").withInput(pollHarnessSignInInputSchema).withOutput(harnessSignInPollSchema).mutation("waitForLogins").withInput(loginCardActionInputSchema).withOutput(external_exports.object({ waiting: external_exports.boolean() })).mutation("useAnotherLogin").withInput(loginCardActionInputSchema).withOutput(external_exports.object({ loginName: external_exports.string() })).build();
-var agentWorkspaceDefaultTrpc = defineTrpcContract("agents").query("workspaceDefault").withInput(external_exports.object({ workspaceId: workspaceIdSchema11 })).withOutput(workspaceDefaultAgentSchema).mutation("setWorkspaceDefault").withInput(setWorkspaceDefaultAgentInputSchema).withOutput(workspaceDefaultAgentSchema).build();
-var agentRuntimeChoiceTrpc = defineTrpcContract("agents").query("lastRuntime").withInput(external_exports.object({ workspaceId: workspaceIdSchema11 })).withOutput(lastRuntimeSchema).build();
-var agentArchiveTrpc = defineTrpcContract("agents").query("archived").withInput(external_exports.object({ workspaceId: workspaceIdSchema11 })).withOutput(external_exports.array(archivedAgentSchema)).mutation("restore").withInput(restoreAgentInputSchema).withOutput(agentSchema).mutation("copy").withInput(copyAgentInputSchema).withOutput(agentSchema).mutation("deleteArchived").withInput(restoreAgentInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).query("transferOffers").withInput(external_exports.object({ workspaceId: workspaceIdSchema11 })).withOutput(external_exports.array(agentTransferOfferSchema)).mutation("acceptTransfer").withInput(agentTransferInputSchema).withOutput(agentSchema).mutation("declineTransfer").withInput(agentTransferInputSchema).withOutput(external_exports.object({ declined: external_exports.literal(true) })).mutation("cancelTransfer").withInput(agentTransferInputSchema).withOutput(external_exports.object({ cancelled: external_exports.literal(true) })).build();
+var agentWorkspaceDefaultTrpc = defineTrpcContract("agents").query("workspaceDefault").withInput(external_exports.object({ workspaceId: workspaceIdSchema12 })).withOutput(workspaceDefaultAgentSchema).mutation("setWorkspaceDefault").withInput(setWorkspaceDefaultAgentInputSchema).withOutput(workspaceDefaultAgentSchema).build();
+var agentRuntimeChoiceTrpc = defineTrpcContract("agents").query("lastRuntime").withInput(external_exports.object({ workspaceId: workspaceIdSchema12 })).withOutput(lastRuntimeSchema).build();
+var agentArchiveTrpc = defineTrpcContract("agents").query("archived").withInput(external_exports.object({ workspaceId: workspaceIdSchema12 })).withOutput(external_exports.array(archivedAgentSchema)).mutation("restore").withInput(restoreAgentInputSchema).withOutput(agentSchema).mutation("copy").withInput(copyAgentInputSchema).withOutput(agentSchema).mutation("deleteArchived").withInput(restoreAgentInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).query("transferOffers").withInput(external_exports.object({ workspaceId: workspaceIdSchema12 })).withOutput(external_exports.array(agentTransferOfferSchema)).mutation("acceptTransfer").withInput(agentTransferInputSchema).withOutput(agentSchema).mutation("declineTransfer").withInput(agentTransferInputSchema).withOutput(external_exports.object({ declined: external_exports.literal(true) })).mutation("cancelTransfer").withInput(agentTransferInputSchema).withOutput(external_exports.object({ cancelled: external_exports.literal(true) })).build();
 var agentTrpc = joinTrpcContracts(
   "agents",
   agentCoreTrpc,
@@ -65933,7 +66203,8 @@ var agentTrpc = joinTrpcContracts(
   agentLoginTroubleTrpc,
   agentWorkspaceDefaultTrpc,
   agentRuntimeChoiceTrpc,
-  agentArchiveTrpc
+  agentArchiveTrpc,
+  agentMigrationTrpc
 );
 var agentUi = uiTokens("agent");
 var AgentNavSlot = agentUi.component("nav");
@@ -65951,6 +66222,7 @@ var AgentEditDialogSlot = agentUi.component("editDialog");
 var AgentFaceSlot = agentUi.component("face");
 var AgentAccessSlot = agentUi.component("access");
 var AgentConnectDialogSlot = agentUi.component("connectDialog");
+var AgentMigrateDialogSlot = agentUi.component("migrateDialog");
 var AgentChannelLevelSlot = agentUi.component("channelLevel");
 var AgentMuteNoticeSlot = agentUi.component("muteNotice");
 var AgentHopLimitNoticeSlot = agentUi.component("hopLimitNotice");
@@ -66062,27 +66334,27 @@ var agentKeepsFailingPayloadSchemaDefinition = external_exports.object({
 });
 
 // ../../modules/agent/contract/src/agent-caller-access.ts
-var agentRefSchema7 = external_exports.string().trim().min(1).max(80);
-var idSchema16 = external_exports.string().min(1).max(64);
-var agentAsCallerInputSchemaDefinition = external_exports.object({ agent: agentRefSchema7 });
+var agentRefSchema8 = external_exports.string().trim().min(1).max(80);
+var idSchema17 = external_exports.string().min(1).max(64);
+var agentAsCallerInputSchemaDefinition = external_exports.object({ agent: agentRefSchema8 });
 var shareAgentAsCallerInputSchemaDefinition = external_exports.object({
-  agent: agentRefSchema7,
+  agent: agentRefSchema8,
   grantee: agentGranteeSchema
 });
 var stopTurnAsCallerInputSchemaDefinition = external_exports.object({
-  agent: agentRefSchema7,
-  channelId: idSchema16
+  agent: agentRefSchema8,
+  channelId: idSchema17
 });
 var retryTurnAsCallerInputSchemaDefinition = external_exports.object({
-  agent: agentRefSchema7,
-  channelId: idSchema16,
-  messageId: idSchema16
+  agent: agentRefSchema8,
+  channelId: idSchema17,
+  messageId: idSchema17
 });
 var postTurnFailureAsCallerInputSchemaDefinition = external_exports.object({
-  channelId: idSchema16,
-  threadRootId: idSchema16.optional(),
+  channelId: idSchema17,
+  threadRootId: idSchema17.optional(),
   /** The person's message the turn was on, which Try again sends to the agent again. */
-  messageId: idSchema16,
+  messageId: idSchema17,
   /** The attempt that failed, so Try again knows once a later one is stored. */
   attempt: external_exports.number().int().min(1).optional(),
   line: external_exports.string().trim().min(1).max(1e3),
@@ -66091,7 +66363,9 @@ var postTurnFailureAsCallerInputSchemaDefinition = external_exports.object({
 var mintLinkAsCallerInputSchemaDefinition = external_exports.object({
   /** Left out, the agent that joins with the link names itself. */
   name: external_exports.string().trim().max(80).optional(),
-  channelId: idSchema16.optional()
+  channelId: idSchema17.optional(),
+  /** One of the key's person's agents by id or name: redeeming gives it a new key instead. */
+  reconnect: external_exports.string().trim().min(1).max(80).optional()
 });
 
 // ../../modules/agent/contract/src/agent-secret-sweep.ts
@@ -66201,25 +66475,25 @@ var agentScheduledRunMissedPayloadSchemaDefinition = external_exports.object({
 });
 
 // ../../modules/agent/contract/src/agent-history.ts
-var idSchema17 = external_exports.string().min(1).max(80);
+var idSchema18 = external_exports.string().min(1).max(80);
 var CALLER_HISTORY_LIMIT_MAX = 100;
 var historyAsCallerInputSchemaDefinition = external_exports.object({
   /** A channel the key's speaker is in, by id or name. */
   channel: external_exports.string().trim().min(1).max(200),
   /** Messages before this Laze message; none reads the newest page. */
-  before: idSchema17.optional(),
+  before: idSchema18.optional(),
   /** Already past the cache: no cached messages, only where the live read goes on. */
   olderThan: external_exports.iso.datetime().optional(),
   limit: external_exports.number().int().min(1).max(CALLER_HISTORY_LIMIT_MAX).default(50)
 });
 var callerHistoryMessageSchemaDefinition = external_exports.object({
-  messageId: idSchema17,
-  threadRootId: idSchema17.nullable(),
+  messageId: idSchema18,
+  threadRootId: idSchema18.nullable(),
   seq: external_exports.number().int().positive(),
   /** `external` for a mirrored message from someone outside Laze. */
   author: external_exports.object({
     kind: external_exports.enum(["person", "agent", "external"]),
-    id: idSchema17,
+    id: idSchema18,
     name: external_exports.string()
   }),
   body: external_exports.string(),
@@ -66229,7 +66503,7 @@ var callerHistoryMessageSchemaDefinition = external_exports.object({
   originKey: external_exports.string().nullable()
 });
 var callerHistorySchemaDefinition = external_exports.object({
-  channelId: idSchema17,
+  channelId: idSchema18,
   channelName: external_exports.string(),
   channelKind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
   /** The outside workspace a mirrored conversation shows, such as "Slack ACME HQ". */
@@ -66243,12 +66517,12 @@ var callerHistorySchemaDefinition = external_exports.object({
 });
 
 // ../../modules/agent/contract/src/agent-channel-admin.ts
-var idSchema18 = external_exports.string().min(1).max(80);
+var idSchema19 = external_exports.string().min(1).max(80);
 var channelRefSchema = external_exports.string().trim().min(1).max(200);
 var channelAsCallerInputSchemaDefinition = external_exports.object({ channel: channelRefSchema });
 var callerChannelMemberSchemaDefinition = external_exports.object({
   kind: external_exports.enum(["person", "agent"]),
-  id: idSchema18,
+  id: idSchema19,
   name: external_exports.string(),
   role: external_exports.enum(["admin", "member"]),
   /** Active, away or unknown for a person the speaker may see; absent for agents. */
@@ -66258,7 +66532,7 @@ var callerChannelMemberSchemaDefinition = external_exports.object({
   doNotDisturb: doNotDisturbSchema.nullable().optional()
 });
 var callerChannelDetailSchemaDefinition = external_exports.object({
-  id: idSchema18,
+  id: idSchema19,
   name: external_exports.string(),
   kind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
   topic: external_exports.string(),
@@ -66289,17 +66563,17 @@ var activityAsCallerInputSchemaDefinition = external_exports.object({
   limit: external_exports.number().int().min(1).max(100).default(50)
 });
 var callerActivityItemSchemaDefinition = external_exports.object({
-  id: idSchema18,
+  id: idSchema19,
   kind: external_exports.enum(["mention", "thread_reply", "keyword", "reaction"]),
-  channelId: idSchema18,
+  channelId: idSchema19,
   channelName: external_exports.string(),
   channelKind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
-  messageId: idSchema18,
-  threadRootId: idSchema18.nullable(),
+  messageId: idSchema19,
+  threadRootId: idSchema19.nullable(),
   /** `external` is someone outside Laze whose message a mirror brought in, named at the source. */
   actor: external_exports.object({
     kind: external_exports.enum(["person", "agent", "external"]),
-    id: idSchema18,
+    id: idSchema19,
     name: external_exports.string()
   }),
   emoji: external_exports.string().nullable(),
@@ -66316,12 +66590,12 @@ var setStatusAsCallerInputSchemaDefinition = setStatusInputSchema.omit({ workspa
 var setAwayAsCallerInputSchemaDefinition = external_exports.object({ away: external_exports.boolean() });
 
 // ../../modules/agent/contract/src/agent-scheduled.ts
-var idSchema19 = external_exports.string().min(1).max(80);
+var idSchema20 = external_exports.string().min(1).max(80);
 var channelRefSchema2 = external_exports.string().trim().min(1).max(200);
 var scheduleAsCallerInputSchemaDefinition = external_exports.object({
   channel: channelRefSchema2.optional(),
-  threadRootId: idSchema19.optional(),
-  replyTo: idSchema19.optional(),
+  threadRootId: idSchema20.optional(),
+  replyTo: idSchema20.optional(),
   body: external_exports.string().trim().min(1).max(4e4),
   sendAt: external_exports.iso.datetime({ offset: true }),
   /** A reply that also goes to the channel at its time (`--also-channel`). */
@@ -66332,9 +66606,9 @@ var scheduleAsCallerInputSchemaDefinition = external_exports.object({
 var listScheduledAsCallerInputSchemaDefinition = external_exports.object({
   channel: channelRefSchema2.optional()
 });
-var scheduledAsCallerInputSchemaDefinition = external_exports.object({ scheduledId: idSchema19 });
+var scheduledAsCallerInputSchemaDefinition = external_exports.object({ scheduledId: idSchema20 });
 var editScheduledAsCallerInputSchemaDefinition = external_exports.object({
-  scheduledId: idSchema19,
+  scheduledId: idSchema20,
   body: external_exports.string().trim().min(1).max(4e4).optional(),
   sendAt: external_exports.iso.datetime({ offset: true }).optional()
 }).refine((input2) => input2.body !== void 0 || input2.sendAt !== void 0, {
@@ -66447,6 +66721,32 @@ var inviteAsCallerInputSchemaDefinition = external_exports.object({
   email: external_exports.email().max(320),
   role: roleSchema.default("MEMBER")
 });
+var inviteManyAsCallerInputSchemaDefinition = external_exports.object({
+  emails: external_exports.array(external_exports.string().trim().min(1).max(320)).min(1).max(50),
+  /** A conversation by id or `#name`; invitees join it and land in it. */
+  to: external_exports.string().trim().min(1).max(200).optional(),
+  role: roleSchema.default("MEMBER"),
+  confirmed: external_exports.literal(true)
+});
+var callerRefusedAddressSchema = external_exports.object({
+  email: external_exports.string(),
+  reason: external_exports.enum(["invalid", "duplicate", "member"])
+});
+var callerInviteManySchemaDefinition = external_exports.object({
+  invites: external_exports.array(callerWorkspaceInviteSchemaDefinition),
+  refused: external_exports.array(callerRefusedAddressSchema),
+  /** Some invitations wait for Team (or for seats) before any email goes out. */
+  held: external_exports.boolean(),
+  /** The conversation they land in; null without `to`. */
+  channelId: external_exports.string().nullable()
+});
+var callerRequestInvitesSchemaDefinition = external_exports.object({
+  requests: external_exports.array(callerAccessRequestSchemaDefinition),
+  refused: external_exports.array(callerRefusedAddressSchema),
+  channelId: external_exports.string().nullable(),
+  /** The Owners and Admins who approve them, by name. */
+  approvers: external_exports.array(external_exports.string()).default([])
+});
 var revokeInviteAsCallerInputSchemaDefinition = external_exports.object({
   invite: external_exports.string().trim().min(1).max(320)
 });
@@ -66693,6 +66993,13 @@ var LazeApiError = class extends Error {
   /** What Laze adds to the code, such as the bound session of a `session_not_bound`. */
   meta;
 };
+var AGENT_MIGRATED = "agent_migrated";
+function migratedNoticeOf(error62) {
+  if (!(error62 instanceof LazeApiError) || error62.code !== AGENT_MIGRATED) return void 0;
+  const notice = typeof error62.meta?.notice === "string" ? error62.meta.notice : error62.message;
+  const link = typeof error62.meta?.link === "string" ? error62.meta.link : null;
+  return { notice, link };
+}
 var LazeClient = class _LazeClient {
   constructor(options) {
     this.options = options;
@@ -66701,9 +67008,16 @@ var LazeClient = class _LazeClient {
   static create({
     baseUrl,
     token: token2,
-    fetcher
+    fetcher,
+    onMigrated
   }) {
-    return new _LazeClient({ baseUrl: baseUrl.replace(/\/+$/, ""), token: token2, fetcher, headers: {} });
+    return new _LazeClient({
+      baseUrl: baseUrl.replace(/\/+$/, ""),
+      token: token2,
+      fetcher,
+      headers: {},
+      onMigrated
+    });
   }
   /** The same client, sending these headers too on every call. */
   withHeaders(headers) {
@@ -66716,6 +67030,9 @@ var LazeClient = class _LazeClient {
   post(path, body, { signal } = {}) {
     return this.send({ method: "POST", path, body, signal });
   }
+  put(path, body) {
+    return this.send({ method: "PUT", path, body });
+  }
   /** A JSON body sent as it is, answered as it came: the status and text, never thrown. */
   async forward({
     path,
@@ -66733,7 +67050,14 @@ var LazeClient = class _LazeClient {
       headers,
       body
     });
-    return { status: response.status, text: await response.text() };
+    const text2 = await response.text();
+    if (response.status === 401) await this.toldMigrated(apiErrorOf({ status: 401, text: text2 }));
+    return { status: response.status, text: text2 };
+  }
+  async toldMigrated(error62) {
+    const found = migratedNoticeOf(error62);
+    if (found && this.options.onMigrated)
+      await this.options.onMigrated(found).catch(() => void 0);
   }
   async send({
     method,
@@ -66756,10 +67080,23 @@ var LazeClient = class _LazeClient {
     });
     const text2 = await response.text();
     const parsed = text2 ? JSON.parse(text2) : void 0;
-    if (!response.ok) throw errorOf({ status: response.status, body: parsed });
+    if (!response.ok) {
+      const error62 = errorOf({ status: response.status, body: parsed });
+      await this.toldMigrated(error62);
+      throw error62;
+    }
     return parsed;
   }
 };
+function apiErrorOf({ status: status9, text: text2 }) {
+  let body;
+  try {
+    body = text2 ? JSON.parse(text2) : void 0;
+  } catch {
+    body = void 0;
+  }
+  return errorOf({ status: status9, body });
+}
 function errorOf({ status: status9, body }) {
   const record4 = typeof body === "object" && body !== null ? body : {};
   const nested = typeof record4.error === "object" && record4.error !== null ? record4.error : record4;
@@ -66773,6 +67110,16 @@ function errorOf({ status: status9, body }) {
 }
 
 // src/services/session.service.ts
+function markMigratedOn({ context, profile }) {
+  return async ({ notice, link }) => context.store.markMigrated({ name: profile, migrated: { at: context.nowMs(), link, notice } });
+}
+function quietWhenMigrated({ args }) {
+  const [first = "", second = ""] = args.words;
+  if (first === "hook") return true;
+  if (first === "inbox") return Boolean(args.flags.wait);
+  if (first === "adopt") return !args.flags.status && !args.flags.stop;
+  return first === "connect" && second === "run";
+}
 async function signedIn({
   context,
   args
@@ -66788,10 +67135,14 @@ async function signedIn({
     throw new CliUsageError(
       "Not signed in: run `laze login`, or `laze agent link --token <token>` from an agent."
     );
+  if (chosen.profile.migrated && quietWhenMigrated({ args })) {
+    throw new ProfileMigratedError(chosen.name);
+  }
   const client = LazeClient.create({
     baseUrl: chosen.profile.url,
     token: chosen.profile.token,
-    fetcher: context.fetcher
+    fetcher: context.fetcher,
+    onMigrated: markMigratedOn({ context, profile: chosen.name })
   });
   if (chosen.profile.kind === "agent") await namingFirst({ client, args });
   return { name: chosen.name, profile: chosen.profile, client };
@@ -66805,7 +67156,8 @@ var ALWAYS_FREE = [
   "logout",
   "update",
   "agent link",
-  "agent bind"
+  "agent bind",
+  "agent migrate"
 ];
 async function namingFirst({ client, args }) {
   const [first = "", second = ""] = args.words;
@@ -66923,15 +67275,21 @@ async function disconnectAgent({ context, args }) {
 async function inviteAgent({ context, args }) {
   const name3 = flagText({ args, name: "name" });
   const channelId = flagText({ args, name: "channel" });
+  const reconnect = flagText({ args, name: "reconnect" });
+  if (args.flags.reconnect === true) {
+    throw new CliUsageError("Usage: laze agent invite --reconnect <agent>");
+  }
   const { client } = await signedIn({ context, args });
   const link = await client.post("/api/agents/links", {
     ...name3 ? { name: name3 } : {},
-    ...channelId ? { channelId } : {}
+    ...channelId ? { channelId } : {},
+    ...reconnect ? { reconnect } : {}
   });
   if (args.flags.json) return context.out(`${JSON.stringify(link, null, 2)}
 `);
+  const where = reconnect ? `the session that should run ${reconnect} again` : "the agent's session";
   context.out(
-    `Paste this into the agent's session (the link works once, until ${link.expiresAt}):
+    `Paste this into ${where} (the link works once, until ${link.expiresAt}):
 
 ${link.prompt}
 `
@@ -67420,7 +67778,7 @@ var dismissSlackLinkPromptInputSchemaDefinition = external_exports.object({
 var dismissSlackLinkPromptInputSchema = dismissSlackLinkPromptInputSchemaDefinition;
 
 // ../../modules/slack/contract/src/slack-move.ts
-var workspaceIdSchema12 = external_exports.string().min(1);
+var workspaceIdSchema13 = external_exports.string().min(1);
 var teamIdSchema = external_exports.string().regex(/^[TE][A-Z0-9]{2,20}$/);
 var slackChannelIdSchema = external_exports.string().regex(/^[CG][A-Z0-9]{2,20}$/);
 var slackUserIdSchema = external_exports.string().regex(/^[UW][A-Z0-9]{2,20}$/);
@@ -67493,7 +67851,7 @@ var slackMovePreviewSchemaDefinition = external_exports.object({
 });
 var slackMovePreviewSchema = slackMovePreviewSchemaDefinition;
 var slackMoveChannelInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema12,
+  workspaceId: workspaceIdSchema13,
   teamId: teamIdSchema,
   slackChannelId: slackChannelIdSchema
 });
@@ -67508,7 +67866,7 @@ var slackMoveRequestSchemaDefinition = external_exports.object({
   farewell: external_exports.string().trim().min(1).max(SLACK_FAREWELL_MAX).optional()
 });
 var startSlackMovesInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema12,
+  workspaceId: workspaceIdSchema13,
   teamId: teamIdSchema,
   channels: external_exports.array(slackMoveRequestSchemaDefinition).min(1).max(SLACK_MOVE_BATCH_MAX)
 });
@@ -67523,7 +67881,7 @@ var startedSlackMovesSchemaDefinition = external_exports.object({
 });
 var startedSlackMovesSchema = startedSlackMovesSchemaDefinition;
 var slackMoveInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema12,
+  workspaceId: workspaceIdSchema13,
   moveId: external_exports.string().min(1).max(100)
 });
 var slackMoveInputSchema = slackMoveInputSchemaDefinition;
@@ -67597,7 +67955,7 @@ var slackExternalPeopleSchemaDefinition = external_exports.object({
 var slackExternalPeopleSchema = slackExternalPeopleSchemaDefinition;
 
 // ../../modules/slack/contract/src/slack-setup.ts
-var workspaceIdSchema13 = external_exports.string().min(1);
+var workspaceIdSchema14 = external_exports.string().min(1);
 var appKeySchema = external_exports.string().regex(/^[a-z0-9]{8,64}$/);
 var returnToSchema3 = external_exports.string().startsWith("/").max(500).optional();
 var slackAppCredentialFieldSchema = external_exports.enum([
@@ -67606,7 +67964,7 @@ var slackAppCredentialFieldSchema = external_exports.enum([
   "clientSecret",
   "signingSecret"
 ]);
-var beginSlackSetupInputSchemaDefinition = external_exports.object({ workspaceId: workspaceIdSchema13 });
+var beginSlackSetupInputSchemaDefinition = external_exports.object({ workspaceId: workspaceIdSchema14 });
 var beginSlackSetupInputSchema = beginSlackSetupInputSchemaDefinition;
 var slackSetupSchemaDefinition = external_exports.object({
   appKey: appKeySchema,
@@ -67620,7 +67978,7 @@ var slackSetupSchemaDefinition = external_exports.object({
 });
 var slackSetupSchema = slackSetupSchemaDefinition;
 var saveSlackAppCredentialsInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema13,
+  workspaceId: workspaceIdSchema14,
   appKey: appKeySchema,
   appId: external_exports.string().max(200),
   clientId: external_exports.string().max(200),
@@ -67630,7 +67988,7 @@ var saveSlackAppCredentialsInputSchemaDefinition = external_exports.object({
 });
 var saveSlackAppCredentialsInputSchema = saveSlackAppCredentialsInputSchemaDefinition;
 var installSlackAppInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema13,
+  workspaceId: workspaceIdSchema14,
   appKey: appKeySchema,
   returnTo: returnToSchema3
 });
@@ -67765,7 +68123,7 @@ var slackEventsPausedPayloadSchemaDefinition = external_exports.object({
 var SLACK_CACHE_DAYS_MAX = 30;
 var SLACK_HISTORY_PATH = "/api/slack/history";
 var SLACK_READ_BUDGET_MAX = 5e3;
-var workspaceIdSchema14 = external_exports.string().min(1);
+var workspaceIdSchema15 = external_exports.string().min(1);
 var teamIdSchema2 = external_exports.string().regex(/^[TE][A-Z0-9]{2,20}$/);
 var slackChannelIdSchema2 = external_exports.string().regex(/^[CG][A-Z0-9]{2,20}$/);
 var slackConnectionStatusSchema = external_exports.enum(["connected", "needs_reinstall"]);
@@ -67829,13 +68187,13 @@ var slackChannelViewSchemaDefinition = external_exports.object({
 });
 var slackChannelViewSchema = slackChannelViewSchemaDefinition;
 var startSlackInstallInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   /** A path in Laze to land on afterwards; defaults to the Connectors page. */
   returnTo: external_exports.string().startsWith("/").max(500).optional()
 });
 var startSlackInstallInputSchema = startSlackInstallInputSchemaDefinition;
 var startSlackLinkInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   teamId: teamIdSchema2,
   returnTo: external_exports.string().startsWith("/").max(500).optional()
 });
@@ -67843,7 +68201,7 @@ var startSlackLinkInputSchema = startSlackLinkInputSchemaDefinition;
 var startedSlackAuthorizeSchemaDefinition = external_exports.object({ authorizeUrl: external_exports.url() });
 var startedSlackAuthorizeSchema = startedSlackAuthorizeSchemaDefinition;
 var startSlackSetupInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   configToken: external_exports.string().trim().min(10).max(1e3),
   returnTo: external_exports.string().startsWith("/").max(500).optional()
 });
@@ -67862,19 +68220,19 @@ var slackEventsHeadersSchemaDefinition = external_exports.object({
 });
 var slackEventsAnswerSchemaDefinition = external_exports.object({ challenge: external_exports.string().nullable() });
 var teamInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   teamId: teamIdSchema2
 });
 var slackTeamInputSchema = teamInputSchemaDefinition;
 var setSlackMirrorInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   teamId: teamIdSchema2,
   slackChannelId: slackChannelIdSchema2,
   mirrored: external_exports.boolean()
 });
 var setSlackMirrorInputSchema = setSlackMirrorInputSchemaDefinition;
 var updateSlackConnectionInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   teamId: teamIdSchema2,
   label: external_exports.string().trim().max(80).nullable().optional(),
   cacheDays: external_exports.number().int().min(1).max(SLACK_CACHE_DAYS_MAX).optional(),
@@ -67882,17 +68240,17 @@ var updateSlackConnectionInputSchemaDefinition = external_exports.object({
 });
 var updateSlackConnectionInputSchema = updateSlackConnectionInputSchemaDefinition;
 var updateSlackAppInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   teamId: teamIdSchema2,
   configToken: external_exports.string().trim().min(10).max(1e3)
 });
 var updateSlackAppInputSchema = updateSlackAppInputSchemaDefinition;
 var slackLinkParamsSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   teamId: teamIdSchema2
 });
 var slackHistoryInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   /** The Laze conversation that mirrors the Slack channel. */
   channelId: external_exports.string().min(1),
   /** Messages before this time; the oldest message the cache shows. */
@@ -67922,7 +68280,7 @@ var slackHistoryPageSchemaDefinition = external_exports.object({
 });
 var slackHistoryPageSchema = slackHistoryPageSchemaDefinition;
 var slackFileParamsSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   /** The Laze conversation that mirrors the Slack channel. */
   channelId: external_exports.string().min(1).max(200),
   fileId: external_exports.string().regex(/^F[A-Z0-9]{2,30}$/)
@@ -67930,7 +68288,7 @@ var slackFileParamsSchemaDefinition = external_exports.object({
 var SLACK_SEARCH_QUERY_MIN = 2;
 var SLACK_SEARCH_QUERY_MAX = 200;
 var slackSearchInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   query: external_exports.string().trim().min(SLACK_SEARCH_QUERY_MIN).max(SLACK_SEARCH_QUERY_MAX)
 });
 var slackSearchInputSchema = slackSearchInputSchemaDefinition;
@@ -67978,7 +68336,7 @@ var slackSearchAnswerSchemaDefinition = external_exports.object({
 });
 var slackSearchAnswerSchema = slackSearchAnswerSchemaDefinition;
 var SlackApi = moduleApi()("slack");
-var workspaceInput3 = external_exports.object({ workspaceId: workspaceIdSchema14 });
+var workspaceInput3 = external_exports.object({ workspaceId: workspaceIdSchema15 });
 var slackTrpc = defineTrpcContract("slack").query("overview").withInput(workspaceInput3).withOutput(slackOverviewSchema).mutation("startSetup").withInput(startSlackSetupInputSchema).withOutput(startedSlackAuthorizeSchema).mutation("beginSetup").withInput(beginSlackSetupInputSchema).withOutput(slackSetupSchema).mutation("saveAppCredentials").withInput(saveSlackAppCredentialsInputSchema).withOutput(startedSlackAuthorizeSchema).mutation("installApp").withInput(installSlackAppInputSchema).withOutput(startedSlackAuthorizeSchema).mutation("startInstall").withInput(startSlackInstallInputSchema).withOutput(startedSlackAuthorizeSchema).mutation("startLink").withInput(startSlackLinkInputSchema).withOutput(startedSlackAuthorizeSchema).query("channels").withInput(slackTeamInputSchema).withOutput(external_exports.array(slackChannelViewSchema)).mutation("setMirror").withInput(setSlackMirrorInputSchema).withOutput(slackConnectionViewSchema).mutation("updateConnection").withInput(updateSlackConnectionInputSchema).withOutput(slackConnectionViewSchema).mutation("disconnect").withInput(slackTeamInputSchema).withOutput(external_exports.object({ disconnected: external_exports.literal(true) })).mutation("unlink").withInput(slackTeamInputSchema).withOutput(slackConnectionViewSchema).query("linkPrompts").withInput(workspaceInput3).withOutput(slackLinkPromptsSchema).mutation("dismissLinkPrompt").withInput(dismissSlackLinkPromptInputSchema).withOutput(slackLinkPromptsSchema).query("people").withInput(slackPeopleInputSchema).withOutput(slackPeopleSchema).query("bookmarks").withInput(slackBookmarksInputSchema).withOutput(slackBookmarksSchema).query("profiles").withInput(slackProfilesInputSchema).withOutput(slackProfilesSchema).query("linkedNames").withInput(external_exports.object({ workspaceId: external_exports.string().min(1) })).withOutput(slackLinkedNamesSchema).query("externalPeople").withInput(slackExternalPeopleInputSchema).withOutput(slackExternalPeopleSchema).mutation("openDirect").withInput(openSlackDirectInputSchema).withOutput(openedSlackDirectSchema).mutation("updateApp").withInput(updateSlackAppInputSchema).withOutput(external_exports.object({ updated: external_exports.literal(true) })).query("history").withInput(slackHistoryInputSchema).withOutput(slackHistoryPageSchema).query("search").withInput(slackSearchInputSchema).withOutput(slackSearchAnswerSchema).query("movePreview").withInput(slackMoveChannelInputSchema).withOutput(slackMovePreviewSchema).mutation("startMoves").withInput(startSlackMovesInputSchema).withOutput(startedSlackMovesSchema).mutation("cancelMove").withInput(slackMoveInputSchema).withOutput(slackMoveViewSchema).query("moves").withInput(workspaceInput3).withOutput(slackMovesSchema).query("emojiSource").withInput(workspaceInput3).withOutput(slackEmojiSourceSchema).mutation("importEmoji").withInput(workspaceInput3).withOutput(slackEmojiImportSchema).build();
 
 // ../../modules/slack/contract/src/slack-keys.ts
@@ -68050,11 +68408,6 @@ var slackMoveByKeyInputSchemaDefinition = slackMoveInputSchema.omit(noWorkspace)
 var positiveInt4 = external_exports.coerce.number().int().positive();
 var slackConfig = Config.define((c) => ({
   publicBaseUrl,
-  /**
-   * The origin Slack sends people back to after consent, when it is not `publicBaseUrl`: the
-   * origin the Slack app lists as its redirect URL during a domain move (docs/ops/domains.md).
-   */
-  oauthBaseUrl: c.env("SLACK_OAUTH_BASE_URL", external_exports.url().optional()),
   /** The Web API base; methods are `${apiUrl}/<method>`. */
   apiUrl: c.env("SLACK_API_URL", external_exports.url().default("https://slack.com/api")),
   /** Slack's install and sign-in consent page. */
@@ -68253,10 +68606,50 @@ import { mkdir as mkdir4, readFile as readFile5, rm, writeFile as writeFile4 } f
 import { dirname as dirname4, join as join5 } from "node:path";
 
 // src/services/harness-session.service.ts
-import { mkdir as mkdir3, readdir, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
-import { hostname as hostname3 } from "node:os";
+import { mkdir as mkdir3, open as open2, readdir, readFile as readFile3, stat, writeFile as writeFile3 } from "node:fs/promises";
+import { homedir as homedir2, hostname as hostname3 } from "node:os";
 import { dirname as dirname3, join as join3 } from "node:path";
 
+// src/rules/claude-subagent.rules.ts
+function lastCallAtOf({ text: text2, command }) {
+  const lines2 = text2.split("\n");
+  for (let index = lines2.length - 1; index >= 0; index -= 1) {
+    const line = lines2[index]?.trim();
+    if (!line?.startsWith("{")) continue;
+    let entry;
+    try {
+      entry = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    const at = callAtOf({ entry, command });
+    if (at !== null) return at;
+  }
+  return null;
+}
+function callAtOf({ entry, command }) {
+  const { type, timestamp, message: message2 } = entry ?? {};
+  if (type !== "assistant" || typeof timestamp !== "string") return null;
+  const content = Array.isArray(message2?.content) ? message2.content : [];
+  const runs = content.some((part) => {
+    const { type: kind2, input: input2 } = part ?? {};
+    return kind2 === "tool_use" && typeof input2?.command === "string" && command.test(input2.command);
+  });
+  if (!runs) return null;
+  try {
+    return Temporal3.Instant.from(timestamp).epochMilliseconds;
+  } catch {
+    return null;
+  }
+}
+function newestIsSubagent({
+  session,
+  subagents
+}) {
+  const newest = Math.max(...subagents.map((at) => at ?? Number.NEGATIVE_INFINITY));
+  return Number.isFinite(newest) && newest >= (session ?? Number.NEGATIVE_INFINITY);
+}
+
 // src/rules/rush-host.rules.ts
 function rushSessionOf({
   parentArgs
@@ -68545,8 +68938,63 @@ async function liveElsewhere({
   }
   return false;
 }
-function refuseInSubagent({ context, args }) {
+async function claudeTranscriptOf({
+  context,
+  sessionId
+}) {
+  const inherited = context.environment.inherited;
+  const root = join3(
+    inherited.CLAUDE_CONFIG_DIR || join3(inherited.HOME || homedir2(), ".claude"),
+    "projects"
+  );
+  const folders = await readdir(root).catch(() => []);
+  const found = await Promise.all(
+    folders.map(async (folder) => {
+      const path = join3(root, folder, `${sessionId}.jsonl`);
+      return stat(path).then(
+        (info) => info.isFile() ? [{ path, at: info.mtimeMs }] : [],
+        () => []
+      );
+    })
+  );
+  return { root, path: found.flat().toSorted((a, b) => b.at - a.at)[0]?.path };
+}
+var TAIL_BYTES = 512 * 1024;
+async function tailOf({ path }) {
+  const handle = await open2(path, "r").catch(() => void 0);
+  if (!handle) return "";
+  try {
+    const { size } = await handle.stat();
+    const length = Math.min(size, TAIL_BYTES);
+    const buffer = Buffer.alloc(length);
+    await handle.read({ buffer, position: size - length, length });
+    return buffer.toString("utf8");
+  } finally {
+    await handle.close();
+  }
+}
+async function runsInSubagent({ context, command }) {
+  const sessionId = context.environment.inherited.CLAUDE_CODE_SESSION_ID ?? "";
+  if (!sessionId) return false;
+  const { path } = await claudeTranscriptOf({ context, sessionId });
+  if (!path) return false;
+  const folder = join3(dirname3(path), sessionId, "subagents");
+  const files2 = await readdir(folder).catch(() => []);
+  const subagents = await Promise.all(
+    files2.filter((file3) => file3.endsWith(".jsonl")).map(
+      async (file3) => lastCallAtOf({ text: await tailOf({ path: join3(folder, file3) }), command })
+    )
+  );
+  const session = lastCallAtOf({ text: await tailOf({ path }), command });
+  return newestIsSubagent({ session, subagents });
+}
+async function refuseInSubagent({
+  context,
+  args,
+  command
+}) {
   if (!context.environment.subagent || flagText({ args, name: "session" })) return;
+  if (!await runsInSubagent({ context, command })) return;
   throw new CliUsageError(
     "This runs inside a Claude Code subagent, which shares its parent's session: it would take that session. Run it in the session itself, or pass --session <id>."
   );
@@ -68625,7 +69073,8 @@ async function agentProfileHere({
     args: await sessionProfileArgs({ context, args: asked, session, binds: false }),
     name: "profile"
   });
-  return name3 && config2.profiles[name3]?.kind === "agent" ? name3 : void 0;
+  const profile = name3 ? config2.profiles[name3] : void 0;
+  return name3 && profile?.kind === "agent" && !profile.migrated ? name3 : void 0;
 }
 async function projectHooksHere({ context }) {
   const directory = context.environment.inherited.CLAUDE_PROJECT_DIR || context.cwd;
@@ -68715,7 +69164,8 @@ async function preToolHook({ context, args }) {
     const client = LazeClient.create({
       baseUrl: profile.url,
       token: profile.token,
-      fetcher: (input3, init) => context.fetcher(input3, { ...init, signal: AbortSignal.timeout(PRE_TOOL_TIMEOUT_MS) })
+      fetcher: (input3, init) => context.fetcher(input3, { ...init, signal: AbortSignal.timeout(PRE_TOOL_TIMEOUT_MS) }),
+      onMigrated: markMigratedOn({ context, profile: name3 })
     });
     const state = await readState({ context, agent: name3 });
     const answer5 = await beat({ client, state, working: true });
@@ -68734,8 +69184,13 @@ async function preToolHook({ context, args }) {
       })
     );
   } catch (error62) {
-    context.err(`laze: the PreToolUse hook skipped: ${String(error62)}
-`);
+    if (error62 instanceof ProfileMigratedError) return;
+    const migrated = migratedNoticeOf(error62);
+    context.err(
+      migrated ? `${migrated.notice}
+` : `laze: the PreToolUse hook skipped: ${String(error62)}
+`
+    );
   }
 }
 
@@ -69423,23 +69878,31 @@ function rolloutEventOf({
 }
 
 // src/services/connect-delivery.service.ts
-import { mkdir as mkdir8, readFile as readFile9, rename as rename3, rm as rm2, stat as stat2, writeFile as writeFile7 } from "node:fs/promises";
-import { homedir as homedir2, hostname as hostname4 } from "node:os";
+import { mkdir as mkdir8, readFile as readFile9, rename as rename3, rm as rm2, stat as stat3, writeFile as writeFile7 } from "node:fs/promises";
+import { homedir as homedir3, hostname as hostname4 } from "node:os";
 import { dirname as dirname9, join as join11 } from "node:path";
 
 // src/services/codex-turn-watch.service.ts
-import { open as open2, readdir as readdir2 } from "node:fs/promises";
-import { join as join6 } from "node:path";
+import { open as open3, readdir as readdir2 } from "node:fs/promises";
+import { basename as basename3, join as join6 } from "node:path";
 var READ_MS = 1500;
 var KEEP_WORKING_MS = 3e4;
-async function rolloutPathOf({ delivery }) {
-  const root = join6(delivery.codexHome, "sessions");
+async function codexRolloutPathOf({
+  codexHome,
+  threadId
+}) {
+  const root = join6(codexHome, "sessions");
   const files2 = await readdir2(root, { recursive: true }).catch(() => []);
-  const file3 = files2.find((name3) => name3.endsWith(`-${delivery.threadId}.jsonl`));
+  const file3 = files2.find(
+    (name3) => basename3(name3).startsWith("rollout-") && name3.endsWith(`-${threadId}.jsonl`)
+  );
   return file3 ? join6(root, file3) : void 0;
 }
+function rolloutPathOf({ delivery }) {
+  return codexRolloutPathOf({ codexHome: delivery.codexHome, threadId: delivery.threadId });
+}
 async function readFrom({ path, offset }) {
-  const handle = await open2(path, "r");
+  const handle = await open3(path, "r");
   try {
     const { size } = await handle.stat();
     if (size <= offset) return { text: "", size };
@@ -69526,7 +69989,7 @@ import { chmod as chmod2, mkdir as mkdir5, readFile as readFile6, writeFile as w
 import { dirname as dirname5, join as join7 } from "node:path";
 
 // ../../modules/openclaw/contract/src/openclaw.ts
-var workspaceIdSchema15 = external_exports.string().min(1);
+var workspaceIdSchema16 = external_exports.string().min(1);
 var connectionIdSchema = external_exports.string().min(1).max(80);
 var openclawAgentIdSchema = external_exports.string().min(1).max(120);
 var openclawConnectionStatusSchema = external_exports.enum([
@@ -69581,14 +70044,14 @@ var openclawOverviewSchemaDefinition = external_exports.object({
 });
 var openclawOverviewSchema = openclawOverviewSchemaDefinition;
 var connectOpenclawInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema15,
+  workspaceId: workspaceIdSchema16,
   gatewayUrl: external_exports.string().trim().min(1).max(500),
   token: external_exports.string().trim().min(1).max(500),
   label: external_exports.string().trim().min(1).max(80).optional()
 });
 var connectOpenclawInputSchema = connectOpenclawInputSchemaDefinition;
 var openclawConnectionRefSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema15,
+  workspaceId: workspaceIdSchema16,
   connectionId: connectionIdSchema
 });
 var openclawConnectionRefSchema = openclawConnectionRefSchemaDefinition;
@@ -69615,7 +70078,7 @@ var openclawAgentKeySchemaDefinition = external_exports.object({
 });
 var openclawAgentKeySchema = openclawAgentKeySchemaDefinition;
 var OpenclawApi = moduleApi()("openclaw");
-var openclawTrpc = defineTrpcContract("openclaw").query("overview").withInput(external_exports.object({ workspaceId: workspaceIdSchema15 })).withOutput(openclawOverviewSchema).mutation("connect").withInput(connectOpenclawInputSchema).withOutput(openclawConnectionViewSchema).mutation("setAgent").withInput(setOpenclawAgentInputSchema).withOutput(openclawConnectionViewSchema).mutation("setFeed").withInput(setOpenclawFeedInputSchema).withOutput(openclawConnectionViewSchema).mutation("agentKey").withInput(openclawAgentRefSchema).withOutput(openclawAgentKeySchema).mutation("disconnect").withInput(openclawConnectionRefSchema).withOutput(external_exports.object({ disconnected: external_exports.literal(true) })).build();
+var openclawTrpc = defineTrpcContract("openclaw").query("overview").withInput(external_exports.object({ workspaceId: workspaceIdSchema16 })).withOutput(openclawOverviewSchema).mutation("connect").withInput(connectOpenclawInputSchema).withOutput(openclawConnectionViewSchema).mutation("setAgent").withInput(setOpenclawAgentInputSchema).withOutput(openclawConnectionViewSchema).mutation("setFeed").withInput(setOpenclawFeedInputSchema).withOutput(openclawConnectionViewSchema).mutation("agentKey").withInput(openclawAgentRefSchema).withOutput(openclawAgentKeySchema).mutation("disconnect").withInput(openclawConnectionRefSchema).withOutput(external_exports.object({ disconnected: external_exports.literal(true) })).build();
 
 // ../../modules/openclaw/contract/src/openclaw.config.ts
 var positiveInt5 = external_exports.coerce.number().int().positive();
@@ -69634,7 +70097,9 @@ var openclawConfig = Config.define((c) => ({
   /** A run that shows no progress for this long is given up and said so in the conversation. */
   runTimeoutMinutes: c.env("OPENCLAW_RUN_TIMEOUT_MINUTES", positiveInt5.default(30)),
   /** The hard limit of one run, progress or not; OpenClaw gets it as the run's `timeoutMs`. */
-  runMaxHours: c.env("OPENCLAW_RUN_MAX_HOURS", positiveInt5.default(6))
+  runMaxHours: c.env("OPENCLAW_RUN_MAX_HOURS", positiveInt5.default(6)),
+  /** Where the progress board ops card for a gateway that stopped answering is written. */
+  opsAlertDir: c.env("OPENCLAW_OPS_ALERT_DIR", external_exports.string().min(1).optional())
 }));
 
 // ../../modules/openclaw/contract/src/openclaw.events.ts
@@ -69848,18 +70313,18 @@ var RelaySession = class {
     if (!envelope) return;
     const { line, payload } = envelope;
     if (envelope.kind === "open") return this.dial(relay2, line);
-    const open3 = this.#lines.get(line);
-    if (!open3) return;
+    const open4 = this.#lines.get(line);
+    if (!open4) return;
     if (envelope.kind === "close") {
       this.#lines.delete(line);
-      open3.socket.close(1e3);
+      open4.socket.close(1e3);
       return;
     }
     if (envelope.kind !== "text" && envelope.kind !== "binary") return;
     const frame = { data: Buffer.from(payload), binary: envelope.kind === "binary" };
-    if (open3.socket.readyState === wrapper_default.OPEN) {
-      open3.socket.send(frame.data, { binary: frame.binary });
-    } else open3.waiting.push(frame);
+    if (open4.socket.readyState === wrapper_default.OPEN) {
+      open4.socket.send(frame.data, { binary: frame.binary });
+    } else open4.waiting.push(frame);
   }
   /** Dials the gateway for a line; its frames go back to Laze as they came. */
   dial(relay2, line) {
@@ -69953,7 +70418,7 @@ var RelayLoops = class _RelayLoops {
 };
 
 // src/services/rush-listeners.service.ts
-import { readFile as readFile8, readdir as readdir3, stat } from "node:fs/promises";
+import { readFile as readFile8, readdir as readdir3, stat as stat2 } from "node:fs/promises";
 import { dirname as dirname7, join as join9 } from "node:path";
 
 // src/services/rush-host.service.ts
@@ -70021,7 +70486,7 @@ async function notesOf({ context }) {
     files2.map(async (file3) => {
       const pid = Number(file3.replace(/\.json$/, ""));
       const note = await jsonOf(join9(folder, file3));
-      const at = await stat(join9(folder, file3)).then(
+      const at = await stat2(join9(folder, file3)).then(
         (info) => info.mtimeMs,
         () => 0
       );
@@ -70035,8 +70500,9 @@ async function notesOf({ context }) {
 async function rushListenersOf({
   context
 }) {
-  const bound = Object.entries((await context.store.read()).sessions ?? {}).filter(
-    ([key]) => key.startsWith("claude-code:")
+  const config2 = await context.store.read();
+  const bound = Object.entries(config2.sessions ?? {}).filter(
+    ([key, profile]) => key.startsWith("claude-code:") && !config2.profiles[profile]?.migrated
   );
   if (bound.length === 0) return [];
   const listed = await rushListingOf({ context });
@@ -70107,11 +70573,12 @@ var CHECK_TIMEOUT_MS = 5e3;
 function clientOf({ context, profile }) {
   return context.store.read().then((config2) => {
     const entry = config2.profiles[profile];
-    if (!entry) return void 0;
+    if (!entry || entry.migrated) return void 0;
     return LazeClient.create({
       baseUrl: entry.url,
       token: entry.token,
-      fetcher: (input2, init) => context.fetcher(input2, { ...init, signal: AbortSignal.timeout(CHECK_TIMEOUT_MS) })
+      fetcher: (input2, init) => context.fetcher(input2, { ...init, signal: AbortSignal.timeout(CHECK_TIMEOUT_MS) }),
+      onMigrated: markMigratedOn({ context, profile })
     });
   });
 }
@@ -70233,7 +70700,7 @@ var CLI_CHANGED_EXIT = 75;
 async function cliStampOf({ context }) {
   const file3 = context.program.at(-1);
   if (!file3) return "";
-  return stat2(file3).then(
+  return stat3(file3).then(
     (info) => `${info.mtimeMs}:${info.size}`,
     () => ""
   );
@@ -70276,7 +70743,7 @@ async function takeRound({
   const session = {
     harness: "codex",
     sessionId: delivery.threadId,
-    folder: displayFolderOf({ folder: delivery.cwd, home: homedir2() }),
+    folder: displayFolderOf({ folder: delivery.cwd, home: homedir3() }),
     host: hostname4()
   };
   try {
@@ -70324,7 +70791,8 @@ async function serveAgent({
   const client = LazeClient.create({
     baseUrl: entry.url,
     token: entry.token,
-    fetcher: context.fetcher
+    fetcher: context.fetcher,
+    onMigrated: markMigratedOn({ context, profile })
   });
   const watch = CodexTurnWatch.create({ context, client, profile, delivery: entry.delivery });
   const ended = new AbortController();
@@ -70361,6 +70829,13 @@ async function serveRounds({
       wait = 1;
       if (delivered === 0) await context.sleep(1e3, signal);
     } catch (error62) {
+      const migrated = migratedNoticeOf(error62);
+      if (migrated) {
+        await report4(profile, "stopped: the agent moved into Laze");
+        context.err(`${profile}: ${migrated.notice}
+`);
+        return;
+      }
       if (error62 instanceof LazeApiError && error62.status === 401) {
         await report4(profile, "stopped: Laze refused the agent's key; link the session again");
         context.err(`${profile}: Laze refused the key; this agent is no longer served
@@ -70394,14 +70869,15 @@ async function syncLoops(run4) {
   const config2 = await run4.context.store.read();
   for (const [profile, current2] of run4.served) {
     const entry = config2.profiles[profile];
-    if (entry?.token === current2.token && entry.delivery?.threadId === current2.threadId) continue;
+    const same2 = entry?.token === current2.token && entry.delivery?.threadId === current2.threadId;
+    if (same2 && !entry.migrated) continue;
     current2.stop.abort();
     await current2.done;
     run4.served.delete(profile);
     setAgent(run4, profile, void 0);
   }
   const linked = Object.entries(config2.profiles).filter(
-    (pair2) => pair2[1].delivery?.harness === "codex" && pair2[1].kind === "agent"
+    (pair2) => pair2[1].delivery?.harness === "codex" && pair2[1].kind === "agent" && !pair2[1].migrated
   );
   for (const [profile, entry] of linked.filter(([name3]) => !run4.served.has(name3))) {
     const { threadId } = entry.delivery;
@@ -70901,6 +71377,13 @@ async function waitHook({ context, args }) {
   try {
     return await waitForMessages({ context, args });
   } catch (error62) {
+    if (error62 instanceof ProfileMigratedError) return 0;
+    const migrated = migratedNoticeOf(error62);
+    if (migrated) {
+      context.err(`${migrated.notice}
+`);
+      return 2;
+    }
     context.err(`laze: the background waiter stopped: ${String(error62)}
 `);
     return 0;
@@ -70918,13 +71401,13 @@ async function monitorServes({
 
 // src/services/codex-link.service.ts
 import { createReadStream } from "node:fs";
-import { readdir as readdir5, rm as rm6, stat as stat4 } from "node:fs/promises";
+import { readdir as readdir5, rm as rm6, stat as stat5 } from "node:fs/promises";
 import { join as join14, resolve as resolve3 } from "node:path";
 import { createInterface as createInterface2 } from "node:readline";
 
 // src/services/codex-adopt.service.ts
 import { spawn as spawn2 } from "node:child_process";
-import { mkdir as mkdir11, readdir as readdir4, readFile as readFile11, rm as rm5, stat as stat3, writeFile as writeFile10 } from "node:fs/promises";
+import { mkdir as mkdir11, readdir as readdir4, readFile as readFile11, rm as rm5, stat as stat4, writeFile as writeFile10 } from "node:fs/promises";
 import { dirname as dirname12, join as join13 } from "node:path";
 import { createInterface } from "node:readline";
 
@@ -71049,7 +71532,7 @@ async function newestThreadId({ codexHome }) {
   const files2 = await readdir4(root, { recursive: true }).catch(() => []);
   const rollouts = files2.filter((file3) => /rollout-.*\.jsonl$/.test(file3));
   const dated = await Promise.all(
-    rollouts.map(async (file3) => ({ file: file3, at: (await stat3(join13(root, file3))).mtimeMs }))
+    rollouts.map(async (file3) => ({ file: file3, at: (await stat4(join13(root, file3))).mtimeMs }))
   );
   const newest = dated.toSorted((a, b) => b.at - a.at)[0]?.file ?? "";
   const id2 = /([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/.exec(newest);
@@ -71178,6 +71661,10 @@ async function supervise({
     const code = await context.runCommand({ command, env: {} }).catch(() => 1);
     if (context.nowMs() - started > HEALTHY_RUN_MS) wait = 1;
     if ((await recordOf({ path }))?.pid !== context.processes.pid) break;
+    if ((await context.store.read()).profiles[profile]?.migrated) {
+      context.out("The agent moved into Laze; laze adopt codex stops here.\n");
+      break;
+    }
     context.out(`laze adopt codex exited ${code}; starting it again in ${wait}s
 `);
     await context.sleep(wait * 1e3);
@@ -71320,7 +71807,7 @@ async function newestThreadIn({
   const dated = await Promise.all(
     rollouts.map(async (file3) => ({
       path: join14(root, file3),
-      at: await stat4(join14(root, file3)).then(
+      at: await stat5(join14(root, file3)).then(
         (info) => info.mtimeMs,
         () => 0
       )
@@ -71391,7 +71878,7 @@ async function linkCodexSession({
 
 // src/services/laze-plugin.service.ts
 import { mkdir as mkdir12, readFile as readFile12, writeFile as writeFile11 } from "node:fs/promises";
-import { homedir as homedir3 } from "node:os";
+import { homedir as homedir4 } from "node:os";
 import { dirname as dirname13, join as join15 } from "node:path";
 
 // src/rules/laze-plugin.rules.ts
@@ -71599,7 +72086,7 @@ async function registerWithClaude({ context, folder }) {
 var RUN_FILES = ["hooks/hooks.json", "monitors/monitors.json"];
 async function cachedPluginOf({ context }) {
   const inherited = context.environment.inherited;
-  const home = inherited.HOME || homedir3();
+  const home = inherited.HOME || homedir4();
   const claude = inherited.CLAUDE_CONFIG_DIR || join15(home, ".claude");
   const listed = await readFile12(join15(claude, "plugins", "installed_plugins.json"), "utf8").then(
     (text2) => JSON.parse(text2),
@@ -71610,10 +72097,10 @@ async function cachedPluginOf({ context }) {
 async function refreshStaleCache({ context, folder }) {
   const cached2 = await cachedPluginOf({ context });
   if (!cached2) return true;
-  const read3 = (path) => readFile12(path, "utf8").catch(() => "");
+  const read4 = (path) => readFile12(path, "utf8").catch(() => "");
   for (const file3 of RUN_FILES) {
-    const ours = await read3(join15(folder, LAZE_PLUGIN, file3));
-    if (ours === await read3(join15(cached2, file3))) continue;
+    const ours = await read4(join15(folder, LAZE_PLUGIN, file3));
+    if (ours === await read4(join15(cached2, file3))) continue;
     const plugin2 = `${LAZE_PLUGIN}@${LAZE_PLUGIN}`;
     const script = [
       `claude plugin uninstall ${plugin2} --scope user ${QUIET}`,
@@ -71756,11 +72243,18 @@ async function pushInbox({
     while (!signal.aborted) {
       const messages = await client.post("/api/agents/me/inbox", { waitSeconds: ROUND_SECONDS3 }, { signal }).catch(async (error62) => {
         if (signal.aborted) return [];
+        const migrated = migratedNoticeOf(error62);
+        if (migrated) {
+          context.err(`${migrated.notice}
+`);
+          return void 0;
+        }
         context.err(`laze mcp: could not read the inbox: ${String(error62)}
 `);
         await context.sleep(RETRY_MS, signal);
         return [];
       });
+      if (messages === void 0) break;
       if (messages.length === 0) {
         await context.sleep(1e3, signal);
         continue;
@@ -71983,7 +72477,7 @@ function sandboxed({ context, error: error62 }) {
 async function linkAgent({ context, args }) {
   const token2 = flagText({ args, name: "token" });
   if (!token2) throw new CliUsageError("Usage: laze agent link --token <token>");
-  refuseInSubagent({ context, args });
+  await refuseInSubagent({ context, args, command: /\bagent\s+link\b/ });
   const url2 = serverUrlOf({ context, args });
   const { harness, pid } = await harnessOf2({ context, args });
   const client = LazeClient.create({ baseUrl: url2, fetcher: context.fetcher });
@@ -72105,6 +72599,11 @@ function stopContext({ context, text: text2 }) {
   const hookSpecificOutput = { hookEventName: "Stop", additionalContext: text2 };
   context.out(JSON.stringify({ hookSpecificOutput }));
 }
+function reportFailed({ context, error: error62 }) {
+  if (migratedNoticeOf(error62)) throw error62;
+  context.err(`laze: could not report context: ${String(error62)}
+`);
+}
 async function handOver({ context, args }) {
   const raw = await context.readStdin();
   const input2 = raw.trim() ? JSON.parse(raw) : {};
@@ -72115,8 +72614,7 @@ async function handOver({ context, args }) {
   const named = await sessionProfileArgs({ context, args: asked, session });
   const { client, name: agent2 } = await signedIn({ context, args: named });
   await reportTranscript({ client, input: input2 }).catch(
-    (error62) => context.err(`laze: could not report context: ${String(error62)}
-`)
+    (error62) => reportFailed({ context, error: error62 })
   );
   if (input2.stop_hook_active) return;
   if (await monitorServes({ context, profile: agent2, claudePid })) {
@@ -72188,6 +72686,9 @@ async function stopHook({ context, args }) {
   try {
     await handOver({ context, args });
   } catch (error62) {
+    if (error62 instanceof ProfileMigratedError) return;
+    const migrated = migratedNoticeOf(error62);
+    if (migrated) return stopContext({ context, text: migrated.notice });
     context.err(`laze: the Stop hook skipped: ${String(error62)}
 `);
   }
@@ -72934,6 +73435,314 @@ async function setAgentPool({
   });
 }
 
+// src/services/agent-migrate-commands.service.ts
+import { readFile as readFile16 } from "node:fs/promises";
+import { basename as basename4, join as join17 } from "node:path";
+
+// src/rules/migration-upload.rules.ts
+import { createHash as createHash2 } from "node:crypto";
+function markersIn(text2) {
+  return text2.split(REDACTION_MARKER).length - 1;
+}
+async function redactTranscript({
+  text: text2
+}) {
+  let redactions = 0;
+  const redacted = await mapJsonlStrings({
+    text: text2,
+    mapAll: async (strings) => strings.map((value) => {
+      const next = redactDetectedSecrets({ text: value });
+      redactions += Math.max(0, markersIn(next) - markersIn(value));
+      return next;
+    })
+  });
+  return { text: redacted.text, redactions };
+}
+function sha256Of({ text: text2 }) {
+  return createHash2("sha256").update(text2, "utf8").digest("hex");
+}
+var bytesOf2 = (text2) => Buffer.byteLength(text2, "utf8");
+function piecesOf({ line, maxBytes }) {
+  if (bytesOf2(line) <= maxBytes) return [line];
+  const pieces = [];
+  let current2 = "";
+  let size = 0;
+  for (const char of line) {
+    const width = bytesOf2(char);
+    if (size + width > maxBytes) {
+      pieces.push(current2);
+      current2 = "";
+      size = 0;
+    }
+    current2 += char;
+    size += width;
+  }
+  if (current2) pieces.push(current2);
+  return pieces;
+}
+function packed({ lines: lines2, maxBytes }) {
+  const parts = [];
+  let current2 = "";
+  let size = 0;
+  for (const piece of lines2.flatMap((line) => piecesOf({ line, maxBytes }))) {
+    const width = bytesOf2(piece);
+    if (size + width > maxBytes && current2) {
+      parts.push(current2);
+      current2 = "";
+      size = 0;
+    }
+    current2 += piece;
+    size += width;
+  }
+  if (current2) parts.push(current2);
+  return parts;
+}
+function transcriptPartsOf({
+  text: text2,
+  maxBytes,
+  maxParts
+}) {
+  const lines2 = text2.split(/(?<=\n)/);
+  const whole = packed({ lines: lines2, maxBytes });
+  if (whole.length <= maxParts) return { parts: whole, truncated: false };
+  let low = 1;
+  let high = lines2.length - 1;
+  while (low < high) {
+    const middle = Math.floor((low + high) / 2);
+    if (packed({ lines: lines2.slice(middle), maxBytes }).length <= maxParts) high = middle;
+    else low = middle + 1;
+  }
+  const kept = packed({ lines: lines2.slice(low), maxBytes });
+  return { parts: kept.slice(-maxParts), truncated: true };
+}
+
+// src/services/agent-migrate-commands.service.ts
+var MIGRATE_USAGE = `laze agent migrate <agent> [--to claude-code|codex|laze-models] [--level fast|frontier] [--resend]
+    move your connected Claude Code or Codex agent into Laze, as the same agent: its own session
+    uploads its conversation with secrets removed, then Laze runs it; --to picks where it runs
+    (its own harness when left out), --level the Laze models level, --resend asks its session again
+laze agent migrate status <agent> [--json]   the agent's latest migration
+laze agent migrate cancel <agent>            cancel a migration still waiting for the agent's session
+laze agent migrate upload <migrationId>      run inside the agent's own session: uploads its transcript
+`;
+var TARGETS = /* @__PURE__ */ new Set(["claude-code", "codex", "laze-models"]);
+var LEVELS3 = /* @__PURE__ */ new Set(["fast", "frontier"]);
+var HARNESS_NAMES3 = {
+  "claude-code": "Claude Code",
+  codex: "Codex",
+  "laze-models": "Laze models"
+};
+var SESSION_ID = /^[A-Za-z0-9_-]{1,100}$/;
+var FILE_NAME2 = /^[A-Za-z0-9._-]{1,200}\.jsonl$/;
+var quoted = (value) => /^[\w.@:+-]+$/.test(value) ? value : `"${value.replaceAll('"', '\\"')}"`;
+function targetOf(migration) {
+  const name3 = HARNESS_NAMES3[migration.target] ?? migration.target;
+  return migration.modelLevel ? `${name3}, ${migration.modelLevel}` : name3;
+}
+function modeLine(migration) {
+  return migration.mode === "resume" ? "Laze resumes that same session" : "Laze starts a fresh session from a summary of it";
+}
+function agentOf({ args, usage }) {
+  const agent2 = args.words[3] ?? "";
+  if (!agent2) throw new CliUsageError(usage);
+  return agent2;
+}
+async function migrate({ context, args }) {
+  const agent2 = args.words[2] ?? "";
+  const harness = flagText({ args, name: "to" });
+  const level = flagText({ args, name: "level" });
+  const known = (!harness || TARGETS.has(harness)) && (!level || LEVELS3.has(level));
+  if (!agent2 || !known) {
+    throw new CliUsageError(`Usage: ${MIGRATE_USAGE}`);
+  }
+  const { client } = await signedIn({ context, args });
+  const migration = await client.post("/api/agents/migrate", {
+    agent: agent2,
+    ...harness ? { harness } : {},
+    ...level ? { modelLevel: level } : {},
+    resend: Boolean(args.flags.resend)
+  });
+  if (args.flags.json) return context.out(`${JSON.stringify(migration, null, 2)}
+`);
+  const name3 = migration.agentName;
+  context.out(
+    [
+      `Asked ${name3} to move into Laze, to run on ${targetOf(migration)}.`,
+      `${name3}'s session uploads its conversation, secrets removed, when it reads the request in its direct messages; ${modeLine(migration)}.`,
+      ...migration.machineLastSeenAt ? [] : [`${name3}'s machine has not called Laze yet: the request waits until it is on.`],
+      `Cancel it: laze agent migrate cancel ${quoted(name3)}`,
+      `Check on it: laze agent migrate status ${quoted(name3)}`,
+      ""
+    ].join("\n")
+  );
+}
+function statusLines(migration) {
+  const removed = migration.removed;
+  return [
+    `${migration.agentName}: ${migration.status}`,
+    `From ${HARNESS_NAMES3[migration.source] ?? migration.source} to ${targetOf(migration)}`,
+    `Session: ${migration.mode === "resume" ? "resumed" : "started fresh from a summary"}`,
+    `Asked: ${migration.requestedAt}`,
+    ...migration.completedAt ? [`Done: ${migration.completedAt}`] : [],
+    ...removed ? [
+      `Secrets removed: ${removed.local} on the machine, ${removed.vault} vault values, ${removed.patterns} key-shaped texts`
+    ] : [],
+    `Machine last seen: ${migration.machineLastSeenAt ?? "never"}`
+  ];
+}
+async function migrationStatus({ context, args }) {
+  const agent2 = agentOf({ context, args, usage: "Usage: laze agent migrate status <agent>" });
+  const { client } = await signedIn({ context, args });
+  const { migration } = await client.get(
+    `/api/agents/migration?agent=${encodeURIComponent(agent2)}`
+  );
+  if (args.flags.json) return context.out(`${JSON.stringify(migration, null, 2)}
+`);
+  if (!migration) return context.out(`${agent2} has no migration.
+`);
+  context.out(`${statusLines(migration).join("\n")}
+`);
+}
+async function cancelMigration({ context, args }) {
+  const agent2 = agentOf({ context, args, usage: "Usage: laze agent migrate cancel <agent>" });
+  const { client } = await signedIn({ context, args });
+  const migration = await client.post("/api/agents/migrate/cancel", { agent: agent2 });
+  if (args.flags.json) return context.out(`${JSON.stringify(migration, null, 2)}
+`);
+  context.out(`Cancelled ${migration.agentName}'s migration; it stays connected on its machine.
+`);
+}
+async function transcriptOf({ context, ticket }) {
+  const inherited = context.environment.inherited;
+  const own2 = ticket.source === "codex" ? inherited.CODEX_THREAD_ID : inherited.CLAUDE_CODE_SESSION_ID;
+  const sessionId = own2 || ticket.sessionId || "";
+  if (!SESSION_ID.test(sessionId)) {
+    throw new CliUsageError(
+      `No ${HARNESS_NAMES3[ticket.source]} session id here: run this inside the agent's own session. Nothing was uploaded.`
+    );
+  }
+  if (ticket.source === "codex") {
+    const codexHome = context.environment.codexHome;
+    const path2 = await codexRolloutPathOf({ codexHome, threadId: sessionId });
+    return { sessionId, path: path2, where: join17(codexHome, "sessions") };
+  }
+  const { root, path } = await claudeTranscriptOf({ context, sessionId });
+  return { sessionId, path, where: root };
+}
+async function agentHere({ context, args }) {
+  const session = await currentSessionOf({ context, args });
+  const named = await sessionProfileArgs({ context, args, session, binds: false });
+  const signed2 = await signedIn({ context, args: named });
+  if (signed2.profile.kind !== "agent") {
+    throw new CliUsageError(
+      "laze agent migrate upload runs inside the agent's own session, with the agent's key."
+    );
+  }
+  return signed2;
+}
+async function uploadParts({
+  client,
+  migrationId,
+  upload
+}) {
+  const again = migrationUploadCommandOf({ migrationId: decodeURIComponent(migrationId) });
+  for (const [index, text2] of upload.parts.entries()) {
+    try {
+      await client.put(`/api/agents/me/migrations/${migrationId}/parts/${index}`, { text: text2 });
+    } catch (error62) {
+      if (migratedNoticeOf(error62)) throw error62;
+      const why = error62 instanceof Error ? error62.message : String(error62);
+      throw new CliUsageError(
+        `Part ${index + 1} of ${upload.parts.length} did not upload (${why}). Nothing moved yet: run \`${again}\` again.`
+      );
+    }
+  }
+}
+async function uploadTranscript({ context, args, client }) {
+  const migrationId = agentOf({
+    context,
+    args,
+    usage: "Usage: laze agent migrate upload <migrationId>"
+  });
+  const id2 = encodeURIComponent(migrationId);
+  const ticket = await client.get(`/api/agents/me/migrations/${id2}`);
+  if (ticket.status === "cancelled") {
+    throw new CliUsageError("This migration was cancelled; nothing was uploaded.");
+  }
+  const found = await transcriptOf({ context, ticket });
+  if (!found.path) {
+    throw new CliUsageError(
+      `The transcript of session ${found.sessionId} was not found under ${found.where}; nothing was uploaded.`
+    );
+  }
+  const raw = await readFile16(found.path, "utf8");
+  if (!raw.trim()) throw new CliUsageError(`${found.path} is empty; nothing was uploaded.`);
+  const redacted = await redactTranscript({ text: raw });
+  const { parts, truncated } = transcriptPartsOf({
+    text: redacted.text,
+    maxBytes: Math.min(ticket.partMaxBytes, MIGRATION_PART_MAX_BYTES),
+    maxParts: Math.min(ticket.partsMax, MIGRATION_PARTS_MAX)
+  });
+  const upload = { parts, truncated, redactions: redacted.redactions };
+  await uploadParts({ client, migrationId: id2, upload });
+  const fileName = basename4(found.path);
+  const completed = await client.post(
+    `/api/agents/me/migrations/${id2}/complete`,
+    {
+      parts: parts.length,
+      sha256: sha256Of({ text: parts.join("") }),
+      truncated,
+      sessionId: found.sessionId,
+      ...FILE_NAME2.test(fileName) ? { fileName } : {},
+      localRedactions: redacted.redactions
+    }
+  );
+  if (args.flags.json) context.out(`${JSON.stringify(completed, null, 2)}
+`);
+  return {
+    link: completed.link,
+    agentName: completed.migration.agentName,
+    sent: `Uploaded ${fileName} in ${parts.length} part${parts.length === 1 ? "" : "s"}${truncated ? ", only its newest lines (it was over the cap)" : ""}; ${redacted.redactions} secret${redacted.redactions === 1 ? "" : "s"} removed on this machine.`
+  };
+}
+function linkIn(text2) {
+  return /https?:\/\/[^\s)]+[^\s).,]/.exec(text2)?.[0] ?? null;
+}
+async function uploadMigration({ context, args }) {
+  const { client, name: name3, profile } = await agentHere({ context, args });
+  const moved = await uploadTranscript({ context, args, client }).catch((error62) => {
+    const migrated = migratedNoticeOf(error62);
+    if (!migrated) throw error62;
+    const link = migrated.link ?? linkIn(migrated.notice);
+    return { link: link ?? "", agentName: profile.name, sent: void 0 };
+  });
+  const notice = moved.link ? `Moved to Laze: ${moved.link}` : "Moved to Laze.";
+  await context.store.markMigrated({
+    name: name3,
+    migrated: { at: context.nowMs(), link: moved.link || null, notice }
+  });
+  if (args.flags.json) return;
+  context.out(
+    [
+      notice,
+      ...moved.sent ? [moved.sent] : [],
+      `Laze runs ${moved.agentName} from now on. Stop working in this session now: tell your person the agent continues in Laze at the link above, and answer nothing more here.`,
+      ""
+    ].join("\n")
+  );
+}
+var SUBCOMMANDS = {
+  status: migrationStatus,
+  cancel: cancelMigration,
+  upload: uploadMigration
+};
+async function agentMigrate({ context, args }) {
+  const sub = SUBCOMMANDS[args.words[2] ?? ""];
+  if (sub && args.words[3]) return sub({ context, args });
+  if (sub || !args.words[2]) throw new CliUsageError(`Usage: ${MIGRATE_USAGE}`);
+  return migrate({ context, args });
+}
+
 // src/services/agent-session-commands.service.ts
 var NO_SESSION = "Run this inside the Claude Code or Codex session the agent should listen in, or pass --session <id>.";
 var NO_AGENT = "This session and its folder have no agent: name one with `laze agent bind --profile <name>`.";
@@ -72942,7 +73751,7 @@ async function bindAgentSession({
   context,
   args
 }) {
-  refuseInSubagent({ context, args });
+  await refuseInSubagent({ context, args, command: /\bagent\s+bind\b/ });
   const session = await currentSessionOf({ context, args });
   if (!session) throw new CliUsageError(NO_SESSION);
   const key = sessionKeyOf({ session });
@@ -73088,8 +73897,8 @@ async function requestAgent({ context, args }) {
 }
 
 // src/services/app-commands.service.ts
-import { mkdir as mkdir16, readdir as readdir6, readFile as readFile17, writeFile as writeFile16 } from "node:fs/promises";
-import { dirname as dirname16, join as join19, relative as relative3, resolve as resolve6, sep as sep3 } from "node:path";
+import { mkdir as mkdir16, readdir as readdir6, readFile as readFile18, writeFile as writeFile16 } from "node:fs/promises";
+import { dirname as dirname16, join as join20, relative as relative3, resolve as resolve6, sep as sep3 } from "node:path";
 
 // ../../modules/app/contract/src/app.connections.ts
 var appFunctionNameSchema = external_exports.string().regex(/^[a-z0-9][a-z0-9_-]{0,63}$/);
@@ -73250,6 +74059,8 @@ var appSchemaDefinition = external_exports.object({
   archivedAt: external_exports.iso.datetime().nullable().optional(),
   /** The reader's role in the app; absent where the app is read without a reader. */
   role: appRoleSchema.nullable().optional(),
+  /** The agent that built it, a Builder by standing; null or absent when a person did. */
+  creatorAgentId: external_exports.string().nullable().optional(),
   createdAt: external_exports.iso.datetime(),
   updatedAt: external_exports.iso.datetime()
 });
@@ -73347,7 +74158,9 @@ var createAppInputSchemaDefinition = external_exports.object({
   slug: appSlugSchema.optional(),
   channelId: external_exports.string().min(1).optional(),
   /** Restricted unless chosen: owner, admins, shares and the conversations it is pinned to. */
-  visibility: appVisibilitySchema.default("restricted")
+  visibility: appVisibilitySchema.default("restricted"),
+  /** The agent a person hands the new app to, which becomes its creator and a Builder. */
+  creatorAgentId: external_exports.string().min(1).optional()
 });
 var createAppInputSchema = createAppInputSchemaDefinition;
 var listAppsInputSchemaDefinition = external_exports.object({
@@ -73762,15 +74575,18 @@ var appAccessRequestSchemaDefinition = external_exports.object({
   role: appRoleSchema.nullable(),
   decidedBy: appActorSchema.nullable(),
   createdAt: external_exports.iso.datetime(),
-  decidedAt: external_exports.iso.datetime().nullable()
+  decidedAt: external_exports.iso.datetime().nullable(),
+  /** `agent` for an agent's request, whose `userId` and `userName` are then the agent's. */
+  subjectType: external_exports.enum(["user", "agent"]).optional()
 });
 var appAccessRequestSchema = appAccessRequestSchemaDefinition;
 var appMemberSourceSchemaDefinition = external_exports.object({
-  kind: external_exports.enum(["owner", "admin", "direct", "channel", "workspace", "agent-owner"]),
+  /** `agent-owner` is no longer sent; older clients still read it. */
+  kind: external_exports.enum(["owner", "creator", "admin", "direct", "channel", "workspace", "agent-owner"]),
   /** The channel, for `channel`: a pin there, a share with it, or the app's own channel. */
   channelId: external_exports.string().nullable(),
   channelName: external_exports.string().nullable(),
-  /** The person an agent holds the app through, for `agent-owner`. */
+  /** Unused since agents stopped holding apps through their owner; always null. */
   ownerName: external_exports.string().nullable()
 });
 var appMemberSchemaDefinition = external_exports.object({
@@ -73794,6 +74610,31 @@ var appAccessPinSchemaDefinition = external_exports.object({
   name: external_exports.string().nullable(),
   role: appRoleSchema
 });
+var appAgentAccessPathSchemaDefinition = external_exports.object({
+  kind: external_exports.enum(["channel", "direct"]),
+  /** The channel, for `channel`. */
+  channelId: external_exports.string().nullable(),
+  channelName: external_exports.string().nullable(),
+  /** The highest role approving gives: the owner's own, or the channel's. */
+  maxRole: appRoleSchema
+});
+var appAgentAccessRequestSchemaDefinition = external_exports.object({
+  id: external_exports.string().min(1),
+  appId: external_exports.string().min(1),
+  appName: external_exports.string(),
+  agentId: external_exports.string().min(1),
+  agentName: external_exports.string().nullable(),
+  /** The agent's owner, who answers it. */
+  approverUserId: external_exports.string().min(1),
+  approverName: external_exports.string().nullable(),
+  status: external_exports.enum(["pending", "granted", "declined"]),
+  /** The role approving gave; null while pending or when declined. */
+  role: appRoleSchema.nullable(),
+  /** While pending, how approving would add the agent; once granted, how it did. */
+  path: appAgentAccessPathSchemaDefinition.nullable(),
+  createdAt: external_exports.iso.datetime(),
+  decidedAt: external_exports.iso.datetime().nullable()
+});
 var appAccessSchemaDefinition = external_exports.object({
   appId: external_exports.string().min(1),
   visibility: appVisibilitySchema,
@@ -73806,6 +74647,8 @@ var appAccessSchemaDefinition = external_exports.object({
   pins: external_exports.array(appAccessPinSchemaDefinition).default([]),
   /** Pending requests, to the app's Builders; empty for anyone else. */
   requests: external_exports.array(appAccessRequestSchemaDefinition),
+  /** Pending requests of the reader's own agents; empty for anyone else. */
+  agentRequests: external_exports.array(appAgentAccessRequestSchemaDefinition).default([]),
   /** The reader's own role. */
   role: appRoleSchema,
   /** The workspace's name, for "Everyone in <workspace>". */
@@ -73865,8 +74708,14 @@ var pendingAppAccessSchemaDefinition = external_exports.object({
   appName: external_exports.string(),
   /** The role a grant from the feed card gives. */
   memberRole: appRoleSchema,
-  /** The Builders who answer it. */
-  builderUserIds: external_exports.array(external_exports.string())
+  /** The Builders who answer it; for an agent's request, the agent's owner only. */
+  builderUserIds: external_exports.array(external_exports.string()),
+  /** Set for an agent's request: whose it is and how approving adds it. */
+  agent: external_exports.object({
+    id: external_exports.string().min(1),
+    name: external_exports.string().nullable(),
+    path: appAgentAccessPathSchemaDefinition.nullable()
+  }).nullable().optional()
 });
 var visibilityOutcomeSchemaDefinition = external_exports.object({
   app: appSchema,
@@ -74557,7 +75406,7 @@ var appCliCommands = [
     command: "laze app members",
     operation: "listMembers",
     arguments: ["[app]"],
-    summary: "Everyone who can open the app, people and agents, each with how: Owner, Shared directly, via #channel or the workspace"
+    summary: "Everyone who can open the app, people and agents, each with how: Owner, Creator, Shared directly, via #channel or the workspace"
   },
   {
     command: "laze app access",
@@ -74593,13 +75442,19 @@ var appCliCommands = [
     command: "laze app access pin-role",
     operation: "setPinRole",
     arguments: ["<channel-id>", "viewer|editor|builder"],
-    summary: "The role a conversation the app is pinned in gives its members and their agents (default builder)"
+    summary: "The role a conversation the app is pinned in gives its members, people and agents (default builder)"
   },
   {
     command: "laze app access approve",
     operation: "decideAccessRequest",
     arguments: ["<request-id>", "[viewer|editor|builder]"],
-    summary: "Let in someone who asked for access (laze app access decline <request-id> refuses)"
+    summary: "Let in someone who asked for access, or your own agent (laze app access decline <request-id> refuses)"
+  },
+  {
+    command: "laze app request",
+    operation: "requestAgentAccess",
+    arguments: ["[app]"],
+    summary: "As an agent that cannot open the app, ask your owner for access; they approve it in Laze"
   },
   {
     command: "laze app cost",
@@ -75479,16 +76334,16 @@ function print({
 async function appConnections({
   context,
   args,
-  open: open3
+  open: open4
 }) {
-  const { client, appId, name: name3 } = await open3();
+  const { client, appId, name: name3 } = await open4();
   const listed = await client.post("/api/apps/connections", { appId });
   print({ context, args, value: listed, text: connectionsText({ name: name3, listed }) });
 }
 async function appConnection({
   context,
   args,
-  open: open3
+  open: open4
 }) {
   const [, , verb, connection] = args.words;
   if (verb !== "allow" && verb !== "revoke" || !connection) {
@@ -75497,7 +76352,7 @@ async function appConnection({
     if (verb) throw new CliUsageError(USAGE2);
     return;
   }
-  const { client, appId, name: name3 } = await open3();
+  const { client, appId, name: name3 } = await open4();
   const listed = await client.post(`/api/apps/connections/${verb}`, { appId, connection }).catch((error62) => {
     if (!(error62 instanceof LazeApiError) || error62.code !== "permission_denied") throw error62;
     throw new CliUsageError(
@@ -75526,40 +76381,40 @@ function appAndWord({ args, usage }) {
   if (!word3) throw new CliUsageError(usage);
   return { app: app2, word: word3 };
 }
-var rename4 = async ({ context, args, open: open3 }) => {
+var rename4 = async ({ context, args, open: open4 }) => {
   const { app: app2, word: word3 } = appAndWord({ args, usage: "Usage: laze app rename [app] <new name>" });
-  const { client, appId, name: name3 } = await open3(app2);
+  const { client, appId, name: name3 } = await open4(app2);
   const renamed = await client.post("/api/apps/rename", { appId, name: word3 });
   print2({ context, args, value: renamed, text: `${name3} is now called ${renamed.name}.
 ` });
 };
-var archive = async ({ context, args, open: open3 }) => {
-  const { client, appId } = await open3(args.words[2]);
+var archive = async ({ context, args, open: open4 }) => {
+  const { client, appId } = await open4(args.words[2]);
   const archived = await client.post("/api/apps/archive", { appId });
   const text2 = `Archived ${archived.name}: it serves nothing and keeps its versions and data. laze app unarchive brings it back.
 `;
   print2({ context, args, value: archived, text: text2 });
 };
-var unarchive = async ({ context, args, open: open3 }) => {
-  const { client, appId } = await open3(args.words[2]);
+var unarchive = async ({ context, args, open: open4 }) => {
+  const { client, appId } = await open4(args.words[2]);
   const back = await client.post("/api/apps/unarchive", { appId });
   const text2 = `${back.name} is back at the same addresses.
 `;
   print2({ context, args, value: back, text: text2 });
 };
-var remove = async ({ context, args, open: open3 }) => {
+var remove = async ({ context, args, open: open4 }) => {
   const confirmName = flagText({ args, name: "confirm" });
   if (!confirmName) {
     throw new CliUsageError("Usage: laze app delete [app] --confirm <the app's name>");
   }
-  const { client, appId, name: name3 } = await open3(args.words[2]);
+  const { client, appId, name: name3 } = await open4(args.words[2]);
   await client.post("/api/apps/delete", { appId, confirmName });
   const text2 = `Deleted ${name3}: it stopped serving and is gone from the workspace.
 `;
   print2({ context, args, value: { deleted: appId }, text: text2 });
 };
-var revokeLease = async ({ context, args, open: open3 }) => {
-  const { client, appId, name: name3 } = await open3(args.words[2]);
+var revokeLease = async ({ context, args, open: open4 }) => {
+  const { client, appId, name: name3 } = await open4(args.words[2]);
   const app2 = await client.post("/api/apps/publish/revoke-lease", { appId });
   const text2 = `${name3}'s builder asks for an approval again before its next public publish.
 `;
@@ -75587,18 +76442,18 @@ function backupsText({ name: name3, status: status9 }) {
   return `${name3}: ${replicating} ${window2}
 ${restores.join("")}`;
 }
-var backups = async ({ context, args, open: open3 }) => {
-  const { client, appId, name: name3 } = await open3(args.words[2]);
+var backups = async ({ context, args, open: open4 }) => {
+  const { client, appId, name: name3 } = await open4(args.words[2]);
   const status9 = await client.post("/api/apps/backups", { appId });
   print2({ context, args, value: status9, text: backupsText({ name: name3, status: status9 }) });
 };
-var restore = async ({ context, args, open: open3 }) => {
+var restore = async ({ context, args, open: open4 }) => {
   const to = flagText({ args, name: "to" });
   const undo = flagText({ args, name: "undo" });
   if (Boolean(to) === Boolean(undo)) {
     throw new CliUsageError("Usage: laze app restore [app] --to <ISO time> | --undo <restore-id>");
   }
-  const { client, appId, name: name3 } = await open3(args.words[2]);
+  const { client, appId, name: name3 } = await open4(args.words[2]);
   const done = await client.post("/api/apps/backups/restore", {
     appId,
     ...to ? { to } : { undo }
@@ -75624,16 +76479,16 @@ function usersText({ name: name3, users: users2 }) {
   return `${name3}'s app users:
 ${lines2.join("")}`;
 }
-var users = async ({ context, args, open: open3 }) => {
-  const { client, appId, name: name3 } = await open3(args.words[2]);
+var users = async ({ context, args, open: open4 }) => {
+  const { client, appId, name: name3 } = await open4(args.words[2]);
   const listed = await client.post("/api/apps/users", { appId });
   print2({ context, args, value: listed, text: usersText({ name: name3, users: listed }) });
 };
 function blocking(blocked) {
-  return async ({ context, args, open: open3 }) => {
+  return async ({ context, args, open: open4 }) => {
     const verb = blocked ? "block-user" : "unblock-user";
     const { app: app2, word: word3 } = appAndWord({ args, usage: `Usage: laze app ${verb} [app] <user-id>` });
-    const { client, appId, name: name3 } = await open3(app2);
+    const { client, appId, name: name3 } = await open4(app2);
     const listed = await client.post("/api/apps/users/block", {
       appId,
       userId: word3,
@@ -75642,9 +76497,9 @@ function blocking(blocked) {
     print2({ context, args, value: listed, text: usersText({ name: name3, users: listed }) });
   };
 }
-var deleteUser = async ({ context, args, open: open3 }) => {
+var deleteUser = async ({ context, args, open: open4 }) => {
   const { app: app2, word: word3 } = appAndWord({ args, usage: "Usage: laze app delete-user [app] <user-id>" });
-  const { client, appId, name: name3 } = await open3(app2);
+  const { client, appId, name: name3 } = await open4(app2);
   const gone = await client.post("/api/apps/users/delete", { appId, userId: word3 });
   const text2 = `Deleted ${gone.userId} from ${name3} with the ${gone.removedRecords.toString()} records they owned.
 `;
@@ -75717,10 +76572,10 @@ async function appPinCommand({
   context,
   args,
   verb,
-  open: open3
+  open: open4
 }) {
   const channel = flagText({ args, name: "channel" });
-  const { client, appId, name: name3 } = await open3();
+  const { client, appId, name: name3 } = await open4();
   const role2 = verb === "pin" ? pinRoleOf(args) : void 0;
   const listed = await client.post(`/api/apps/${verb}`, {
     appId,
@@ -75756,7 +76611,7 @@ async function appPinsCommand({
 import { execFile } from "node:child_process";
 import { mkdtemp, rm as rm8, writeFile as writeFile15 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 import { promisify } from "node:util";
 var run2 = promisify(execFile);
 var MODULE_SYNTAX = /^\s*(import|export)\s/m;
@@ -75785,11 +76640,11 @@ async function scriptErrorsOf({
   const unknown2 = unknownCollectionsOf({ files: files2, collections });
   const scripts = files2.flatMap(scriptsOf);
   if (scripts.length === 0) return unknown2;
-  const dir = await mkdtemp(join17(tmpdir(), "laze-app-check-"));
+  const dir = await mkdtemp(join18(tmpdir(), "laze-app-check-"));
   try {
     const errors = await Promise.all(
       scripts.map(async (script, index) => {
-        const file3 = join17(dir, `${index}.${script.module ? "mjs" : "cjs"}`);
+        const file3 = join18(dir, `${index}.${script.module ? "mjs" : "cjs"}`);
         await writeFile15(file3, script.code);
         try {
           await run2(process.execPath, ["--check", file3]);
@@ -75807,9 +76662,9 @@ async function scriptErrorsOf({
 }
 
 // src/services/app-serve.service.ts
-import { readFile as readFile16, stat as stat5 } from "node:fs/promises";
+import { readFile as readFile17, stat as stat6 } from "node:fs/promises";
 import { createServer } from "node:http";
-import { extname as extname2, join as join18, normalize, sep as sep2 } from "node:path";
+import { extname as extname2, join as join19, normalize, sep as sep2 } from "node:path";
 var TYPES = {
   ".html": "text/html; charset=utf-8",
   ".js": "text/javascript; charset=utf-8",
@@ -75860,13 +76715,13 @@ async function staticFile({
   if (clean.startsWith("..") || hidden) {
     return json2({ response, status: 404, value: { code: "not_found", message: "Not found" } });
   }
-  const candidates = [join18(folder, clean), join18(folder, clean, "index.html")];
-  if (!extname2(clean)) candidates.push(join18(folder, "index.html"));
+  const candidates = [join19(folder, clean), join19(folder, clean, "index.html")];
+  if (!extname2(clean)) candidates.push(join19(folder, "index.html"));
   for (const target of candidates) {
-    const info = await stat5(target).catch(() => void 0);
+    const info = await stat6(target).catch(() => void 0);
     if (!info?.isFile()) continue;
     const type = TYPES[extname2(target).toLowerCase()] ?? "application/octet-stream";
-    const body = await readFile16(target);
+    const body = await readFile17(target);
     if (extname2(target) === ".html") {
       return send2({ response, status: 200, type, body: withServeThemeScript(body.toString()) });
     }
@@ -76012,26 +76867,26 @@ function print4({
   context.out(args.flags.json ? `${JSON.stringify(value, null, 2)}
 ` : text2);
 }
-async function add({ context, args, open: open3, word: word3 }) {
+async function add({ context, args, open: open4, word: word3 }) {
   const prompt = flagText({ args, name: "prompt" }).trim();
   if (!prompt) throw new CliUsageError("--prompt says what the agent does with the records");
   const body = { collection: word3, on: onOf(args), where: whereOf3(args), prompt };
-  const { client, appId, name: name3 } = await open3();
+  const { client, appId, name: name3 } = await open4();
   const trigger = await client.post("/api/apps/triggers/add", { appId, ...body });
   const text2 = `Added a trigger on ${name3}:
 ${triggerLine(trigger)}Matching changes to ${word3} records wake ${trigger.agentName} in ${trigger.channelName}.
 `;
   print4({ context, args, value: trigger, text: text2 });
 }
-async function list({ context, args, open: open3 }) {
-  const { client, appId, name: name3 } = await open3();
+async function list({ context, args, open: open4 }) {
+  const { client, appId, name: name3 } = await open4();
   const listed = await client.post("/api/apps/triggers", { appId });
   const text2 = listed.triggers.length === 0 ? `${name3} has no triggers. laze app trigger add <collection> adds one.
 ` : listed.triggers.map(triggerLine).join("");
   print4({ context, args, value: listed, text: text2 });
 }
-async function setPaused({ context, args, open: open3, word: word3, paused }) {
-  const { client, appId } = await open3();
+async function setPaused({ context, args, open: open4, word: word3, paused }) {
+  const { client, appId } = await open4();
   const trigger = await client.post("/api/apps/triggers/pause", {
     appId,
     triggerId: word3,
@@ -76039,8 +76894,8 @@ async function setPaused({ context, args, open: open3, word: word3, paused }) {
   });
   print4({ context, args, value: trigger, text: triggerLine(trigger) });
 }
-async function remove2({ context, args, open: open3, word: word3 }) {
-  const { client, appId } = await open3();
+async function remove2({ context, args, open: open4, word: word3 }) {
+  const { client, appId } = await open4();
   await client.post("/api/apps/triggers/remove", { appId, triggerId: word3 });
   print4({ context, args, value: { removed: word3 }, text: `Removed trigger ${word3}.
 ` });
@@ -76048,14 +76903,14 @@ async function remove2({ context, args, open: open3, word: word3 }) {
 async function appTrigger({
   context,
   args,
-  open: open3
+  open: open4
 }) {
   const [, , verb, word3] = args.words;
-  if (verb === "list") return list({ context, args, open: open3 });
+  if (verb === "list") return list({ context, args, open: open4 });
   const known = verb === "add" || verb === "pause" || verb === "resume" || verb === "remove";
   if (known && !word3) throw new CliUsageError(USAGE4);
   if (known && word3) {
-    const run4 = { context, args, open: open3, word: word3 };
+    const run4 = { context, args, open: open4, word: word3 };
     if (verb === "add") return add(run4);
     if (verb === "remove") return remove2(run4);
     return setPaused({ ...run4, paused: verb === "pause" });
@@ -76099,7 +76954,7 @@ async function turnTokenOf({
   const pinned = env.LAZE_TURN_TOKEN?.trim();
   if (pinned) return pinned;
   if (env.LAZE_TURN_FILE) {
-    return readFile17(env.LAZE_TURN_FILE, "utf8").then(
+    return readFile18(env.LAZE_TURN_FILE, "utf8").then(
       (text2) => text2.trim(),
       () => ""
     );
@@ -76129,7 +76984,7 @@ function folderOf({ context, word: word3 }) {
   return resolve6(context.cwd, word3 ?? ".");
 }
 async function readManifest(folder) {
-  const text2 = await readFile17(join19(folder, APP_MANIFEST_FILE), "utf8").catch(() => void 0);
+  const text2 = await readFile18(join20(folder, APP_MANIFEST_FILE), "utf8").catch(() => void 0);
   if (text2 === void 0) return void 0;
   const parsed = appManifestSchema.safeParse(JSON.parse(text2));
   if (!parsed.success) {
@@ -76164,7 +77019,7 @@ async function jsonFlag({
 }) {
   const raw = flagText({ args, name: name3 });
   if (!raw) return void 0;
-  const text2 = raw.startsWith("@") ? await readFile17(resolve6(context.cwd, raw.slice(1)), "utf8") : raw;
+  const text2 = raw.startsWith("@") ? await readFile18(resolve6(context.cwd, raw.slice(1)), "utf8") : raw;
   try {
     return JSON.parse(text2);
   } catch {
@@ -76177,7 +77032,7 @@ async function listFiles(folder) {
   while (pending2.length > 0 && found.length <= MAX_FILES) {
     const current2 = pending2.pop() ?? folder;
     for (const entry of await readdir6(current2, { withFileTypes: true })) {
-      const path = join19(current2, entry.name);
+      const path = join20(current2, entry.name);
       const rel = relative3(folder, path).split(sep3).join("/");
       if (isSkippedPath({ path: rel })) continue;
       if (entry.isDirectory()) pending2.push(path);
@@ -76221,8 +77076,8 @@ var appCreate = async ({ context, args }) => {
   await mkdir16(folder, { recursive: true });
   const files2 = template ? templateFiles({ template, name: name3 }) : {};
   for (const [path, content] of Object.entries(files2)) {
-    await mkdir16(dirname16(join19(folder, path)), { recursive: true });
-    await writeFile16(join19(folder, path), content);
+    await mkdir16(dirname16(join20(folder, path)), { recursive: true });
+    await writeFile16(join20(folder, path), content);
   }
   const manifest = {
     app: { id: app2.id, name: app2.name, slug: app2.slug },
@@ -76230,7 +77085,7 @@ var appCreate = async ({ context, args }) => {
     views: template?.views ? [...template.views] : [],
     seed: template ? { ...template.seed } : {}
   };
-  await writeFile16(join19(folder, APP_MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}
+  await writeFile16(join20(folder, APP_MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}
 `);
   print5({
     context,
@@ -76245,6 +77100,11 @@ var appList = async ({ context, args }) => {
   const client = await appClient({ context, args });
   const apps = await client.get("/api/apps");
   const lines2 = apps.map((app2) => {
+    if (app2.role === null) {
+      const owner = app2.ownerName ? `, ${app2.ownerName}'s` : "";
+      return `${app2.slug}	${app2.id}	no access${owner}: laze app request ${app2.slug} asks your owner
+`;
+    }
     const state = app2.publishedVersion ? `live (${app2.visibility})` : "not live";
     return `${app2.slug}	${app2.id}	${state}	${app2.publishedUrl}
 `;
@@ -76267,7 +77127,7 @@ var appPush = async ({ context, args }) => {
     paths.map(
       async (path) => buildFileOf({
         path: relative3(folder, path).split(sep3).join("/"),
-        bytes: await readFile17(path)
+        bytes: await readFile18(path)
       })
     )
   );
@@ -76425,7 +77285,7 @@ var appPull = async ({ context, args }) => {
     );
   }
   for (const file3 of pulled.files) {
-    const target = join19(folder, ...file3.path.split("/"));
+    const target = join20(folder, ...file3.path.split("/"));
     await mkdir16(dirname16(target), { recursive: true });
     await writeFile16(
       target,
@@ -76444,7 +77304,7 @@ var appPull = async ({ context, args }) => {
       ])
     )
   };
-  await writeFile16(join19(folder, APP_MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}
+  await writeFile16(join20(folder, APP_MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}
 `);
   const names = pulled.collections.map((collection) => collection.name);
   const where = relative3(context.cwd, folder) || ".";
@@ -76748,7 +77608,7 @@ var appImport = async ({ context, args }) => {
   const words = args.words.slice(2);
   const [named, collection, file3] = words.length >= 3 ? words : [void 0, ...words];
   if (!collection || !file3) throw new CliUsageError(USAGE5);
-  const csv = await readFile17(resolve6(context.cwd, file3), "utf8").catch(() => {
+  const csv = await readFile18(resolve6(context.cwd, file3), "utf8").catch(() => {
     throw new CliUsageError(`Cannot read ${file3}`);
   });
   const scoped = named ? { ...args, flags: { ...args.flags, app: named } } : args;
@@ -76827,6 +77687,13 @@ function subjectOf(word3) {
   }
   return { type, id: id2 };
 }
+function agentPathText(path) {
+  if (!path) return "you cannot open the app yourself, so you cannot let it in";
+  if (path.kind === "channel") {
+    return `approving adds it to ${path.channelName ?? path.channelId ?? "your channel"} as ${ROLE_NAMES[path.maxRole]}`;
+  }
+  return `approving shares the app with it as ${ROLE_NAMES[path.maxRole]} at most`;
+}
 function accessText(access) {
   const lines2 = [
     `Visibility: ${access.visibility}. Everyone it admits is ${ROLE_NAMES[access.memberRole]}.`,
@@ -76839,6 +77706,9 @@ function accessText(access) {
     ),
     ...access.requests.map(
       (request2) => `  asks for access: ${request2.userName ?? request2.userId} (${request2.id})`
+    ),
+    ...(access.agentRequests ?? []).map(
+      (request2) => `  your agent ${request2.agentName ?? request2.agentId} asks for access (${request2.id}): ${agentPathText(request2.path)}`
     )
   ];
   return `${lines2.join("\n")}
@@ -76928,6 +77798,8 @@ function sourceText(source) {
   switch (source.kind) {
     case "owner":
       return "Owner";
+    case "creator":
+      return "Creator";
     case "admin":
       return "Workspace admin";
     case "direct":
@@ -76974,6 +77846,26 @@ var appAccess = async ({ context, args }) => {
   if (!run4) throw new CliUsageError(USAGE5);
   print5({ context, args, ...await run4({ client, appId, first, second }) });
 };
+var appRequest = async ({ context, args }) => {
+  const scoped = args.words[2] ? { ...args, flags: { ...args.flags, app: args.words[2] } } : args;
+  const client = await appClient({ context, args: scoped });
+  const appId = await appIdOf({
+    client,
+    args: scoped,
+    folder: folderOf({ context, word: void 0 })
+  });
+  const request2 = await client.post("/api/apps/access/request", {
+    appId
+  });
+  const owner = request2.approverName ?? "your owner";
+  print5({
+    context,
+    args,
+    value: request2,
+    text: `Asked ${owner} for access to ${request2.appName} (${request2.id}); ${agentPathText(request2.path)}. Run laze app list to see when it opens.
+`
+  });
+};
 var appUnpublish = async ({ context, args }) => {
   const client = await appClient({ context, args });
   const appId = await appIdOf({ client, args, folder: folderOf({ context, word: void 0 }) });
@@ -76987,21 +77879,21 @@ var appUnpublish = async ({ context, args }) => {
   });
 };
 function costText({ name: name3, cost }) {
-  const money2 = (amount) => formatAppMoney({ amount, currency: cost.currency });
+  const money3 = (amount) => formatAppMoney({ amount, currency: cost.currency });
   const month = Temporal3.PlainDate.from(`${cost.month}-01`).toLocaleString("en-GB", {
     month: "long",
     year: "numeric"
   });
   const rows = cost.lines.map((line) => {
     const used = appCostQuantityText(line);
-    return `  ${APP_COST_PART_LABELS[line.part].padEnd(16)} ${money2(line.amount).padStart(12)}${used ? `  ${used}` : ""}
+    return `  ${APP_COST_PART_LABELS[line.part].padEnd(16)} ${money3(line.amount).padStart(12)}${used ? `  ${used}` : ""}
 `;
   });
   const { budget: budget2 } = cost;
-  const budgetLine = budget2.monthly === null ? "No budget. laze app budget <amount> sets one.\n" : `Budget ${money2(budget2.monthly)} a month, ${Math.round(cost.total / budget2.monthly * 100).toString()}% used.
+  const budgetLine = budget2.monthly === null ? "No budget. laze app budget <amount> sets one.\n" : `Budget ${money3(budget2.monthly)} a month, ${Math.round(cost.total / budget2.monthly * 100).toString()}% used.
 `;
   const paused = budget2.paused ? "Paused: server functions and agent work on this app stop until the budget is raised or the month ends. Pages and records keep working.\n" : "";
-  return `${name3} cost ${money2(cost.total)} so far in ${month}, at Laze list prices:
+  return `${name3} cost ${money3(cost.total)} so far in ${month}, at Laze list prices:
 ${rows.join("")}${budgetLine}${paused}`;
 }
 async function appOfWord({
@@ -77058,6 +77950,7 @@ var APP_COMMANDS = {
   unpublish: appUnpublish,
   access: appAccess,
   members: appMembers,
+  request: appRequest,
   name: appName,
   versions: appVersions,
   log: appVersions,
@@ -77256,7 +78149,13 @@ var BILLING_USAGE = `Usage:
   laze billing currency usd|eur                  bill in USD or EUR, until the first payment   (admins)
   laze billing top-up <amount>                   a Stripe link that adds prepaid credits, 10 or more   (admins)
   laze billing auto-recharge on|off [--amount <n>] [--limit <n>]   (admins)
-  laze billing referral <code>                   apply another workspace's referral code   (admins)`;
+  laze billing referral <code>                   apply another workspace's referral code   (admins)
+  laze billing details                           the company, address, billing email and tax id on invoices   (admins)
+  laze billing details set --company <name> --email <billing email> --line1 <street> --city <city>
+       --country <NL> [--postal <code>] [--line2 <text>] [--state <text>]
+       [--tax-id <NL123456789B01>|none] [--tax-type eu_vat|gb_vat|ch_vat|no_vat|us_ein|au_abn|ca_bn]   (admins)
+  laze billing cancel                            end Team at the end of the paid period   (admins)
+  laze billing keep                              keep Team after a cancellation   (admins)`;
 var printJson = (context, data) => context.out(`${JSON.stringify(data, null, 2)}
 `);
 async function plan({ context, args }) {
@@ -77293,8 +78192,14 @@ function printAccount({ context, args }, account) {
   const of = (amount) => money(amount, account.currency);
   const plan2 = account.plan === "team" ? `Team, ${of(account.seats.monthlyPrice)} a month for ${account.seats.people} people` : "Free, for one person";
   const pending2 = account.status === "pending_payment" ? " (payment pending: run laze billing checkout)" : "";
-  context.out(`Plan: ${plan2}${pending2}
+  const ending = account.cancelAtPeriodEnd && account.period ? ` (ends ${account.period.end.slice(0, 10)}: run laze billing keep to renew)` : "";
+  context.out(`Plan: ${plan2}${pending2}${ending}
+`);
+  if (account.paymentIssue) {
+    const link = account.paymentIssue.invoiceUrl ? ` ${account.paymentIssue.invoiceUrl}` : "";
+    context.out(`Payment: ${account.paymentIssue.message ?? account.paymentIssue.kind}${link}
 `);
+  }
   context.out(
     `Credits: ${of(account.credits.includedLeft)} of ${of(account.credits.included)} included left, ${of(account.credits.prepaid)} prepaid${prepaidNoteOf(account, of)}${account.credits.paused ? " (paused: top up to resume)" : ""}
 `
@@ -77323,8 +78228,9 @@ async function invoices({ context, args }) {
   if (list11.length === 0) return context.out("No invoices yet.\n");
   for (const invoice of list11) {
     const link = invoice.hostedUrl ? ` ${invoice.hostedUrl}` : "";
+    const tax = invoice.tax ? ` (tax ${money(invoice.tax, invoice.currency)})` : "";
     context.out(
-      `${invoice.createdAt.slice(0, 10)} ${invoice.number ?? "draft"} ${invoice.status} ${money(invoice.total, invoice.currency)}${link}
+      `${invoice.createdAt.slice(0, 10)} ${invoice.number ?? "draft"} ${invoice.status} ${money(invoice.total, invoice.currency)}${tax}${link}
 `
     );
   }
@@ -77387,6 +78293,73 @@ async function referral({ context, args }) {
     await client.post("/api/billing-account/referral", { code })
   );
 }
+function addressLine(address) {
+  if (!address) return "not set";
+  const town = [address.postalCode, address.city].filter(Boolean).join(" ");
+  return [address.line1, address.line2, town, address.state, address.country].filter(Boolean).join(", ");
+}
+function printDetails({ context, args }, details2) {
+  if (args.flags.json) return printJson(context, details2);
+  const taxId = details2.taxId ? `${details2.taxId.value} (${details2.taxId.type}, ${details2.taxId.status})` : "none";
+  context.out(`Company: ${details2.companyName ?? "not set"}
+`);
+  context.out(`Billing email: ${details2.email ?? "not set"}
+`);
+  context.out(`Address: ${addressLine(details2.address)}
+`);
+  context.out(`Tax id: ${taxId}
+`);
+  if (details2.taxIdRemoved) {
+    context.out(
+      `Removed: ${details2.taxIdRemoved.value}, which the EU VAT service rejected; invoices carry VAT until a valid number is set
+`
+    );
+  }
+}
+var TAX_TYPES = ["eu_vat", "gb_vat", "ch_vat", "no_vat", "us_ein", "au_abn", "ca_bn"];
+function needed({ args, name: name3 }) {
+  const value = flagText({ args, name: name3 });
+  if (!value) throw new CliUsageError(`--${name3} is needed.
+${BILLING_USAGE}`);
+  return value;
+}
+function detailsBody({ args }) {
+  const taxText = flagText({ args, name: "tax-id" });
+  const taxType = flagText({ args, name: "tax-type" }) || "eu_vat";
+  if (!TAX_TYPES.includes(taxType)) {
+    throw new CliUsageError(`--tax-type takes ${TAX_TYPES.join(", ")}.
+${BILLING_USAGE}`);
+  }
+  return {
+    companyName: needed({ args, name: "company" }),
+    email: needed({ args, name: "email" }),
+    address: {
+      line1: needed({ args, name: "line1" }),
+      line2: flagText({ args, name: "line2" }) || null,
+      city: needed({ args, name: "city" }),
+      postalCode: flagText({ args, name: "postal" }) || null,
+      state: flagText({ args, name: "state" }) || null,
+      country: needed({ args, name: "country" })
+    },
+    taxId: !taxText || taxText === "none" ? null : { type: taxType, value: taxText }
+  };
+}
+async function details({ context, args }) {
+  const action = args.words[2];
+  if (action !== void 0 && action !== "set") throw new CliUsageError(BILLING_USAGE);
+  const body = action === "set" ? detailsBody({ args }) : null;
+  const { client } = await signedIn({ context, args });
+  const answer5 = body ? await client.post("/api/billing-account/details", body) : await client.get("/api/billing-account/details");
+  printDetails({ context, args }, answer5);
+}
+async function cancel({ context, args }) {
+  const { client } = await signedIn({ context, args });
+  printAccount({ context, args }, await client.post("/api/billing-account/cancel", {}));
+}
+async function keep({ context, args }) {
+  const { client } = await signedIn({ context, args });
+  printAccount({ context, args }, await client.post("/api/billing-account/keep", {}));
+}
 var BILLING_COMMANDS = {
   account: show,
   invoices,
@@ -77395,7 +78368,10 @@ var BILLING_COMMANDS = {
   currency,
   "top-up": topUp,
   "auto-recharge": autoRecharge,
-  referral
+  referral,
+  details,
+  cancel,
+  keep
 };
 async function billing({ context, args }) {
   const name3 = args.words[1];
@@ -77407,13 +78383,13 @@ async function billing({ context, args }) {
 
 // src/services/browser-commands.service.ts
 import { randomBytes } from "node:crypto";
-import { mkdir as mkdir19, readFile as readFile19, writeFile as writeFile19 } from "node:fs/promises";
-import { dirname as dirname18, join as join22 } from "node:path";
+import { mkdir as mkdir19, readFile as readFile20, writeFile as writeFile19 } from "node:fs/promises";
+import { dirname as dirname18, join as join23 } from "node:path";
 
 // src/services/browser-tab-commands.service.ts
 import { mkdir as mkdir18, writeFile as writeFile18 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 
 // src/rules/browser-login.rules.ts
 var PASSWORD_NAME = /pass|pwd/i;
@@ -77443,10 +78419,10 @@ function loginValuesOf({
 }
 
 // src/services/vault-commands.service.ts
-import { createHash as createHash2 } from "node:crypto";
-import { mkdir as mkdir17, readFile as readFile18, rm as rm9, writeFile as writeFile17 } from "node:fs/promises";
+import { createHash as createHash3 } from "node:crypto";
+import { mkdir as mkdir17, readFile as readFile19, rm as rm9, writeFile as writeFile17 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { dirname as dirname17, join as join20 } from "node:path";
+import { dirname as dirname17, join as join21 } from "node:path";
 var USAGE6 = `Usage: laze vault run <connection> --reason "<one plain sentence>" [--wait <s>] -- <command> [args...]
 Runs the command with the connection's values in its environment, on a Laze agent's computer,
 on a machine it runs on, or where a connected agent runs, with its own key.
@@ -77482,7 +78458,7 @@ async function turnTokenOf2({
   if (pinned) return pinned;
   if (!turnFile) throw new CliUsageError(`${command} works only during an agent's turn`);
   try {
-    return (await readFile18(turnFile, "utf8")).trim();
+    return (await readFile19(turnFile, "utf8")).trim();
   } catch {
     throw new CliUsageError(`${command} works only during an agent's turn`);
   }
@@ -77492,12 +78468,12 @@ function runKeyPathOf({
   connection,
   profile = ""
 }) {
-  const name3 = createHash2("sha256").update(connection).digest("hex");
-  const base = turnFile ? dirname17(turnFile) : join20(tmpdir2(), "laze-vault", profile);
-  return join20(base, "vault-run-keys", `${name3}.json`);
+  const name3 = createHash3("sha256").update(connection).digest("hex");
+  const base = turnFile ? dirname17(turnFile) : join21(tmpdir2(), "laze-vault", profile);
+  return join21(base, "vault-run-keys", `${name3}.json`);
 }
 async function runKeyAt({ path }) {
-  const saved3 = await readFile18(path, "utf8").then(
+  const saved3 = await readFile19(path, "utf8").then(
     (text2) => JSON.parse(text2),
     () => void 0
   );
@@ -78007,9 +78983,9 @@ async function savedScreenshot({
   data,
   nowMs
 }) {
-  const folder = join21(tmpdir3(), "laze-browser");
+  const folder = join22(tmpdir3(), "laze-browser");
   await mkdir18(folder, { recursive: true, mode: 448 });
-  const path = join21(folder, `${tabId.replace(/[^a-zA-Z0-9_-]/g, "_")}-login-${nowMs}.jpg`);
+  const path = join22(folder, `${tabId.replace(/[^a-zA-Z0-9_-]/g, "_")}-login-${nowMs}.jpg`);
   await writeFile18(path, Buffer.from(data, "base64"), { mode: 384 });
   return path;
 }
@@ -78486,7 +79462,7 @@ async function turnTokenOf3({
   const pinned = env.LAZE_TURN_TOKEN?.trim();
   if (pinned) return pinned;
   if (env.LAZE_TURN_FILE) {
-    return readFile19(env.LAZE_TURN_FILE, "utf8").then(
+    return readFile20(env.LAZE_TURN_FILE, "utf8").then(
       (text2) => text2.trim(),
       () => ""
     );
@@ -78576,7 +79552,7 @@ async function answering({
 }
 function bridgeStatePath({ context, machine: machine2 }) {
   const safe = machine2.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return join22(dirname18(context.environment.configPath), "bridges", `${safe}.json`);
+  return join23(dirname18(context.environment.configPath), "bridges", `${safe}.json`);
 }
 async function bridgePort({
   context,
@@ -78584,7 +79560,7 @@ async function bridgePort({
   access
 }) {
   const path = bridgeStatePath({ context, machine: machine2 });
-  const live = await readFile19(path, "utf8").then(
+  const live = await readFile20(path, "utf8").then(
     (text2) => JSON.parse(text2),
     () => void 0
   );
@@ -78997,7 +79973,7 @@ async function activityRead({ context, args }) {
 
 // src/services/channel-config-commands.service.ts
 var AGENT_HINT2 = "Roles, archiving and removing others are a channel admin's change: ask one.\n";
-var LEVELS3 = ["default", "all", "mentions", "nothing", "mute", "unmute"];
+var LEVELS4 = ["default", "all", "mentions", "nothing", "mute", "unmute"];
 async function changing2({
   context,
   profile,
@@ -79183,7 +80159,7 @@ function instantOf({ until }) {
 }
 function notifyBodyOf({ args }) {
   const [, , channel, word3] = args.words;
-  const level = LEVELS3.find((candidate) => candidate === word3);
+  const level = LEVELS4.find((candidate) => candidate === word3);
   if (!channel || !level) throw new CliUsageError(NOTIFY_USAGE);
   if (level === "unmute") return { channel, muted: false };
   if (level !== "mute") return { channel, level };
@@ -79259,8 +80235,8 @@ async function channelSettings({ context, args }) {
 }
 
 // src/services/chat-actions-commands.service.ts
-import { readFile as readFile20 } from "node:fs/promises";
-import { basename as basename3, isAbsolute as isAbsolute2, relative as relative4, resolve as resolve7 } from "node:path";
+import { readFile as readFile21 } from "node:fs/promises";
+import { basename as basename5, isAbsolute as isAbsolute2, relative as relative4, resolve as resolve7 } from "node:path";
 
 // src/rules/file-types.rules.ts
 var TYPES2 = {
@@ -79355,12 +80331,12 @@ async function threadWaitReply({
   if (!messageId) throw new CliUsageError(USAGE7);
   const seconds = timeoutOf({ args });
   const { client } = await signedIn({ context, args });
-  const read3 = () => client.post(CHAT_KEY_PATHS.thread, { messageId });
-  const seen = new Set((await read3()).replies.map((reply2) => reply2.id));
+  const read4 = () => client.post(CHAT_KEY_PATHS.thread, { messageId });
+  const seen = new Set((await read4()).replies.map((reply2) => reply2.id));
   const isNew = (reply2) => reply2.author.kind === "person" && !seen.has(reply2.id);
   for (let waited = 0; waited < seconds * 1e3; waited += POLL_MS2) {
     await context.sleep(POLL_MS2);
-    const reply2 = (await read3()).replies.find(isNew);
+    const reply2 = (await read4()).replies.find(isNew);
     if (!reply2) continue;
     const line = `${reply2.seq}	${reply2.id}	person ${reply2.author.id}	${reply2.body}
 `;
@@ -79592,11 +80568,11 @@ var files = async ({ context, args, client }) => {
 };
 function uploadNameOf({ cwd, path }) {
   const inside = relative4(cwd, path);
-  return inside && !inside.startsWith("..") && !isAbsolute2(inside) ? inside : basename3(path);
+  return inside && !inside.startsWith("..") && !isAbsolute2(inside) ? inside : basename5(path);
 }
 var fileUpload = async ({ context, args, client }) => {
   const path = resolve7(context.cwd, wordAt(args, 3));
-  const bytes = new Uint8Array(await readFile20(path));
+  const bytes = new Uint8Array(await readFile21(path));
   const answer5 = await uploadFile({
     context,
     client,
@@ -79769,7 +80745,7 @@ async function chatActions({
 }
 
 // src/services/claude-monitor.service.ts
-import { readFile as readFile21, rm as rm10 } from "node:fs/promises";
+import { readFile as readFile22, rm as rm10 } from "node:fs/promises";
 var MONITOR_IDLE_MS = 3e4;
 var MONITOR_OUTRANKED_MS = 3e3;
 async function deliverOnce({
@@ -79810,6 +80786,12 @@ async function deliverOnce({
 async function monitorRound(turn) {
   const { context, session } = turn;
   return deliverOnce(turn).catch(async (error62) => {
+    const migrated = migratedNoticeOf(error62);
+    if (migrated) {
+      context.out(`${migrated.notice}
+`);
+      return false;
+    }
     const named = { ...turn.args, flags: { ...turn.args.flags, profile: turn.profile } };
     const { client } = await signedIn({ context, args: named });
     const claim3 = forSession({ client, session });
@@ -79870,7 +80852,7 @@ async function monitorSessionOf({
   const fromEnv = sessionOf({ context, harness: "claude-code", sessionId });
   if (fromEnv || !claudePid) return fromEnv;
   const path = statePathOf({ context, kind: "sessions", profile: String(claudePid) });
-  return readFile21(path, "utf8").then(
+  return readFile22(path, "utf8").then(
     (text2) => JSON.parse(text2),
     () => void 0
   );
@@ -80097,6 +81079,14 @@ var billingConfig = Config.define((c) => ({
   stripeApiBase: c.env("STRIPE_API_BASE", external_exports.url().default("https://api.stripe.com")),
   /** Team's graduated per-person price (`TEAM_PRICING`), one quantity per person. */
   teamPriceId: c.env("STRIPE_PRICE_TEAM", priceId),
+  /** Team's price before 2026-10-25 (first step of 2), kept by subscriptions started on it. */
+  legacyTeamPriceId: c.env("STRIPE_PRICE_TEAM_LEGACY", priceId),
+  /** The product every top-up and auto-recharge line names; a bare line without it. */
+  creditsProductId: c.env("STRIPE_PRODUCT_CREDITS", external_exports.string().min(1).optional()),
+  /** The customer portal configuration; Stripe's default one without it. */
+  portalConfigurationId: c.env("STRIPE_PORTAL_CONFIGURATION", external_exports.string().min(1).optional()),
+  /** Stripe Tax on checkouts, recharge invoices and subscriptions; needs Stripe Tax active. */
+  automaticTax: c.env("STRIPE_AUTOMATIC_TAX", environmentBooleanSchema.default(true)),
   /** The coupon for a referral: `REFERRAL_TERMS` off, repeating for its months. */
   referralCouponId: c.env("STRIPE_COUPON_REFERRAL", external_exports.string().min(1).optional()),
   /** List price over cost per usage category; never shown on the site. */
@@ -80120,7 +81110,9 @@ var referralRefusalSchema = external_exports.enum([
   "unknown",
   "own_code",
   "already_applied",
-  "subscribed"
+  "subscribed",
+  "same_person",
+  "same_company"
 ]);
 
 // ../../modules/billing/contract/src/billing.plans.ts
@@ -80128,6 +81120,19 @@ var currencySchema = external_exports.enum(["usd", "eur"]);
 var planSchema = external_exports.enum(["free", "team"]);
 var LEGACY_PLANS = { free: "free", team: "team", none: "free", individual: "team" };
 var storedPlanSchema = external_exports.enum(["free", "team", "none", "individual"]).transform((plan2) => LEGACY_PLANS[plan2]);
+var TEAM_PRICING = {
+  firstPeople: 3,
+  teamSizeStep: 10,
+  prices: {
+    usd: { firstPeoplePrice: 20, perPersonToStep: 10, perPersonAfterStep: 8 },
+    eur: { firstPeoplePrice: 18, perPersonToStep: 9, perPersonAfterStep: 7 }
+  }
+};
+var teamPricingRuleSchema = external_exports.enum(["first_three", "first_two"]);
+var FIRST_PEOPLE = {
+  first_three: TEAM_PRICING.firstPeople,
+  first_two: 2
+};
 var computerSizeSchema = external_exports.enum(["small", "medium", "large", "xl"]);
 var COMPUTER_MARKUP = 2;
 function computerSize(input2) {
@@ -80242,6 +81247,13 @@ var subscriptionStatusSchema = external_exports.enum([
 ]);
 var pauseReasonSchema = external_exports.enum(["credits"]);
 var spendLineDefinition = external_exports.object({ id: external_exports.string(), amount: external_exports.number() });
+var referralStateSchema = external_exports.enum(["waiting", "rewarded", "over_limit"]);
+var referralEntryDefinition = external_exports.object({
+  state: referralStateSchema,
+  referredAt: external_exports.iso.datetime(),
+  settledAt: external_exports.iso.datetime().nullable(),
+  reward: external_exports.enum(["discount", "banked", "credits"]).nullable()
+});
 var billingAccountViewDefinition = external_exports.object({
   workspaceId: external_exports.string(),
   plan: planSchema,
@@ -80258,6 +81270,8 @@ var billingAccountViewDefinition = external_exports.object({
     /** What the plan costs a month for these people; 0 on Free. */
     monthlyPrice: external_exports.number().nonnegative()
   }),
+  /** The first step Team is priced by: `first_two` for subscriptions from before 2026-10-25. */
+  pricingRule: teamPricingRuleSchema.default("first_three"),
   /** Team given free of charge by Laze staff, for this many people; null when paid or Free. */
   complimentary: external_exports.object({ seats: external_exports.number().int().positive() }).nullable().default(null),
   credits: external_exports.object({
@@ -80297,9 +81311,21 @@ var billingAccountViewDefinition = external_exports.object({
     /** The code this workspace applied, if any. */
     appliedCode: external_exports.string().nullable(),
     /** Discounts earned and not yet on a subscription. */
-    discountsPending: external_exports.number().int().nonnegative()
+    discountsPending: external_exports.number().int().nonnegative(),
+    /** Each workspace this code brought, oldest first; never who or which workspace it is. */
+    referrals: external_exports.array(referralEntryDefinition).default([]),
+    /** Rewards earned in the last 365 days, against `REFERRAL_CARD_TERMS.yearlyRewardLimit`. */
+    rewardsThisYear: external_exports.number().int().nonnegative().default(0)
   }),
-  portalAvailable: external_exports.boolean()
+  portalAvailable: external_exports.boolean(),
+  /** A Team payment that failed or waits for the buyer's bank, until an invoice is paid. */
+  paymentIssue: external_exports.object({
+    kind: external_exports.enum(["failed", "action_required"]),
+    message: external_exports.string().nullable(),
+    /** Stripe's page that pays or confirms the invoice. */
+    invoiceUrl: external_exports.string().nullable(),
+    at: external_exports.iso.datetime()
+  }).nullable().default(null)
 });
 var billingAccountViewSchema = billingAccountViewDefinition;
 var invoiceDefinition = external_exports.object({
@@ -80307,12 +81333,61 @@ var invoiceDefinition = external_exports.object({
   number: external_exports.string().nullable(),
   status: external_exports.string(),
   total: external_exports.number(),
+  /** The tax on the invoice, in the same units as `total`. */
+  tax: external_exports.number().default(0),
   currency: currencySchema,
   createdAt: external_exports.iso.datetime(),
   hostedUrl: external_exports.string().nullable(),
   pdfUrl: external_exports.string().nullable()
 });
 var billingInvoiceSchema = invoiceDefinition;
+var taxIdTypeSchema = external_exports.enum([
+  "eu_vat",
+  "gb_vat",
+  "ch_vat",
+  "no_vat",
+  "us_ein",
+  "au_abn",
+  "ca_bn"
+]);
+var billingAddressDefinition = external_exports.object({
+  line1: external_exports.string().trim().min(1).max(200),
+  line2: external_exports.string().trim().max(200).nullable().default(null),
+  city: external_exports.string().trim().min(1).max(100),
+  postalCode: external_exports.string().trim().max(20).nullable().default(null),
+  state: external_exports.string().trim().max(100).nullable().default(null),
+  /** ISO 3166-1 alpha-2, upper case. */
+  country: external_exports.string().trim().regex(/^[A-Za-z]{2}$/, "a two-letter country code").transform((code) => code.toUpperCase())
+});
+var billingDetailsDefinition = external_exports.object({
+  workspaceId: external_exports.string(),
+  companyName: external_exports.string().nullable(),
+  /** Where Stripe sends invoices and receipts. */
+  email: external_exports.string().nullable(),
+  address: billingAddressDefinition.nullable(),
+  taxId: external_exports.object({
+    type: taxIdTypeSchema,
+    value: external_exports.string(),
+    /** The EU VAT service's answer; `pending` until it gives one. */
+    status: external_exports.enum(["pending", "verified", "unverified", "unavailable"])
+  }).nullable(),
+  /** A tax id the EU VAT service rejected after it was saved, removed from the customer. */
+  taxIdRemoved: external_exports.object({ value: external_exports.string(), at: external_exports.iso.datetime() }).nullable()
+});
+var billingDetailsSchema = billingDetailsDefinition;
+var setBillingDetailsInputDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  companyName: external_exports.string().trim().min(1).max(200),
+  email: external_exports.email().max(254),
+  address: billingAddressDefinition,
+  /** Null removes the tax id. */
+  taxId: external_exports.object({ type: taxIdTypeSchema, value: external_exports.string().trim().min(2).max(40) }).nullable()
+});
+var setBillingDetailsInputSchema = setBillingDetailsInputDefinition;
+var setBillingDetailsByKeyInputDefinition = setBillingDetailsInputDefinition.omit({
+  workspaceId: true
+});
+var emptyDefinition = external_exports.object({});
 var returnPathSchema = external_exports.string().max(500).regex(/^\/(?!\/)/, "a path on this site").optional();
 var startCheckoutInputDefinition = external_exports.object({
   workspaceId: external_exports.string().min(1),
@@ -80327,6 +81402,37 @@ var openPortalInputDefinition = external_exports.object({
 var openPortalInputSchema = openPortalInputDefinition;
 var redirectDefinition = external_exports.object({ url: external_exports.string() });
 var billingRedirectSchema = redirectDefinition;
+var inviteQuoteInputDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  /** People about to be invited, beyond the members and the seats already held for invitations. */
+  adding: external_exports.number().int().min(0).max(100)
+});
+var inviteQuoteInputSchema = inviteQuoteInputDefinition;
+var inviteQuoteByKeyInputDefinition = inviteQuoteInputDefinition.omit({ workspaceId: true });
+var inviteQuoteDefinition = external_exports.object({
+  workspaceId: external_exports.string(),
+  plan: planSchema,
+  currency: currencySchema,
+  rule: teamPricingRuleSchema,
+  /** Members plus the seats held for invitations, now. */
+  people: external_exports.number().int().nonnegative(),
+  peopleAfter: external_exports.number().int().nonnegative(),
+  /** What the workspace pays a month now: 0 on Free or a complimentary Team. */
+  monthlyNow: external_exports.number().nonnegative(),
+  monthlyAfter: external_exports.number().nonnegative(),
+  perPersonAfter: external_exports.number().nonnegative(),
+  /** Seats Team's first step still includes after the invite ("1 free seat left"); 0 when none. */
+  freeSeatsLeft: external_exports.number().int().nonnegative().default(0),
+  /** Free, or a Team not paid for: inviting starts Team through Stripe Checkout. */
+  upgradeNeeded: external_exports.boolean(),
+  /** A live paid Team: the new people are added to the subscription, prorated, as they join. */
+  prorated: external_exports.boolean(),
+  /** The most people the plan holds; null when it holds everyone. */
+  seatCap: external_exports.number().int().positive().nullable(),
+  /** How many of the added people the cap leaves waiting. */
+  overCap: external_exports.number().int().nonnegative()
+});
+var inviteQuoteSchema = inviteQuoteDefinition;
 var setCurrencyInputDefinition = external_exports.object({
   workspaceId: external_exports.string().min(1),
   currency: currencySchema
@@ -80353,6 +81459,23 @@ var applyReferralInputDefinition = external_exports.object({
   code: external_exports.string().trim().min(1).max(64)
 });
 var applyReferralInputSchema = applyReferralInputDefinition;
+var referralCardDefinition = external_exports.object({
+  show: external_exports.enum(["offer", "reward", "hidden"]),
+  code: external_exports.string(),
+  url: external_exports.string(),
+  /** "50% off Team for a month". */
+  offer: external_exports.string(),
+  /** The last reward the workspace earned, for the `reward` card. */
+  rewardedAt: external_exports.iso.datetime().nullable()
+});
+var referralCardSchema = referralCardDefinition;
+var claimReferralInputDefinition = external_exports.object({ code: external_exports.string().trim().min(1).max(64) });
+var claimReferralInputSchema = claimReferralInputDefinition;
+var claimReferralOutputDefinition = external_exports.object({
+  outcome: external_exports.enum(["kept", "applied", "refused"]),
+  reason: referralRefusalSchema.nullable()
+});
+var claimReferralOutputSchema = claimReferralOutputDefinition;
 var usageCategorySchema = external_exports.enum([
   "model",
   "machine",
@@ -80390,7 +81513,7 @@ var grantCreditsInputDefinition = external_exports.object({
   reason: external_exports.string().trim().min(3).max(500)
 });
 var BillingApi = moduleApi()("billing");
-var billingTrpc = defineTrpcContract("billing").query("account").withInput(billingWorkspaceInputSchema).withOutput(billingAccountViewSchema).query("invoices").withInput(billingWorkspaceInputSchema).withOutput(external_exports.array(billingInvoiceSchema)).mutation("startCheckout").withInput(startCheckoutInputSchema).withOutput(billingRedirectSchema).mutation("openPortal").withInput(openPortalInputSchema).withOutput(billingRedirectSchema).mutation("setCurrency").withInput(setCurrencyInputSchema).withOutput(billingAccountViewSchema).mutation("topUp").withInput(topUpInputSchema).withOutput(billingRedirectSchema).mutation("setAutoRecharge").withInput(setAutoRechargeInputSchema).withOutput(billingAccountViewSchema).mutation("applyReferral").withInput(applyReferralInputSchema).withOutput(billingAccountViewSchema).build();
+var billingTrpc = defineTrpcContract("billing").query("account").withInput(billingWorkspaceInputSchema).withOutput(billingAccountViewSchema).query("invoices").withInput(billingWorkspaceInputSchema).withOutput(external_exports.array(billingInvoiceSchema)).mutation("startCheckout").withInput(startCheckoutInputSchema).withOutput(billingRedirectSchema).query("inviteQuote").withInput(inviteQuoteInputSchema).withOutput(inviteQuoteSchema).mutation("openPortal").withInput(openPortalInputSchema).withOutput(billingRedirectSchema).mutation("setCurrency").withInput(setCurrencyInputSchema).withOutput(billingAccountViewSchema).mutation("topUp").withInput(topUpInputSchema).withOutput(billingRedirectSchema).mutation("setAutoRecharge").withInput(setAutoRechargeInputSchema).withOutput(billingAccountViewSchema).mutation("applyReferral").withInput(applyReferralInputSchema).withOutput(billingAccountViewSchema).query("referralCard").withInput(billingWorkspaceInputSchema).withOutput(referralCardSchema).mutation("dismissReferralCard").withInput(billingWorkspaceInputSchema).withOutput(referralCardSchema).mutation("claimReferral").withInput(claimReferralInputSchema).withOutput(claimReferralOutputSchema).query("billingDetails").withInput(billingWorkspaceInputSchema).withOutput(billingDetailsSchema).mutation("setBillingDetails").withInput(setBillingDetailsInputSchema).withOutput(billingDetailsSchema).mutation("cancelPlan").withInput(billingWorkspaceInputSchema).withOutput(billingAccountViewSchema).mutation("keepPlan").withInput(billingWorkspaceInputSchema).withOutput(billingAccountViewSchema).build();
 var stripeWebhookHeadersDefinition = external_exports.object({
   "stripe-signature": external_exports.string().max(1e3).default("")
 });
@@ -80805,7 +81928,7 @@ var dedicatedIpKeyReleasedDefinition = external_exports.object({
 });
 
 // ../../modules/compute/contract/src/own-machine-ssh.ts
-var workspaceIdSchema16 = external_exports.string().min(1).max(64);
+var workspaceIdSchema17 = external_exports.string().min(1).max(64);
 var machineRefText = external_exports.string().min(1).max(64);
 var sshHostKeySchema = external_exports.string().regex(/^SHA256:[A-Za-z0-9+/]{43}$/);
 function sshTargetText({ target }) {
@@ -80827,7 +81950,7 @@ var machineSshDefinition = external_exports.object({
 });
 var machineSshSchema = machineSshDefinition;
 var connectSshDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema16,
+  workspaceId: workspaceIdSchema17,
   /** Checked by `checkMachineName`, so a refusal reads as a sentence. */
   name: external_exports.string().max(200),
   /** `user@host[:port]`, checked by `parseSshTarget`. */
@@ -80836,7 +81959,7 @@ var connectSshDefinition = external_exports.object({
 var connectSshMachineInputSchema = connectSshDefinition;
 var restConnectSshDefinition = connectSshDefinition.omit({ workspaceId: true });
 var trustHostKeyDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema16,
+  workspaceId: workspaceIdSchema17,
   machine: machineRefText,
   hostKey: sshHostKeySchema
 });
@@ -80844,7 +81967,7 @@ var trustHostKeyInputSchema = trustHostKeyDefinition;
 var restTrustHostKeyDefinition = trustHostKeyDefinition.omit({ workspaceId: true });
 
 // ../../modules/compute/contract/src/own-machine-whatsapp.ts
-var workspaceIdSchema17 = external_exports.string().min(1).max(64);
+var workspaceIdSchema18 = external_exports.string().min(1).max(64);
 var machineRefText2 = external_exports.string().min(1).max(64);
 var WHATSAPP_TEXT_MAX = 4096;
 var WHATSAPP_LIMIT_MAX = 200;
@@ -80881,25 +82004,25 @@ var messagesResultDefinition = external_exports.object({
 var limitSchema = external_exports.number().int().min(1).max(WHATSAPP_LIMIT_MAX);
 var chatRefSchema = external_exports.string().trim().min(1).max(200);
 var chatsInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema17,
+  workspaceId: workspaceIdSchema18,
   machine: machineRefText2,
   limit: limitSchema.optional()
 });
 var readInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema17,
+  workspaceId: workspaceIdSchema18,
   machine: machineRefText2,
   /** A chat id, a phone number or a contact or group name. */
   chat: chatRefSchema,
   limit: limitSchema.optional()
 });
 var sendInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema17,
+  workspaceId: workspaceIdSchema18,
   machine: machineRefText2,
   chat: chatRefSchema,
   text: external_exports.string().trim().min(1).max(WHATSAPP_TEXT_MAX)
 });
 var sendStatusInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema17,
+  workspaceId: workspaceIdSchema18,
   sendId: external_exports.string().min(1).max(64),
   /** Wait up to this long for the owner's answer; 0 answers at once. */
   waitSeconds: external_exports.number().int().min(0).max(WHATSAPP_STATUS_WAIT_MAX_SECONDS).default(0)
@@ -80937,7 +82060,7 @@ var whatsappPairingDefinition = external_exports.object({
 });
 var whatsappPairingSchema = whatsappPairingDefinition;
 var pairingRefDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema17,
+  workspaceId: workspaceIdSchema18,
   pairingId: external_exports.string().min(1).max(64)
 });
 var whatsappPairingRefSchema = pairingRefDefinition;
@@ -80958,7 +82081,7 @@ var COMPUTE_WHATSAPP_REST_PATHS = {
 };
 
 // ../../modules/compute/contract/src/own-machine.ts
-var workspaceIdSchema18 = external_exports.string().min(1).max(64);
+var workspaceIdSchema19 = external_exports.string().min(1).max(64);
 var machineRefText3 = external_exports.string().min(1).max(64);
 var machineBrowserDefinition = external_exports.object({
   ready: external_exports.boolean(),
@@ -80991,7 +82114,7 @@ var machineHealthDefinition = external_exports.object({
 });
 var machineHealthSchema = machineHealthDefinition;
 var connectOwnDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema18,
+  workspaceId: workspaceIdSchema19,
   /** Checked by `checkMachineName`, so a refusal reads as a sentence. */
   name: external_exports.string().max(200)
 });
@@ -80999,7 +82122,7 @@ var connectOwnMachineInputSchema = connectOwnDefinition;
 var MACHINE_EXEC_MAX_SECONDS = 240;
 var MACHINE_EXEC_OUTPUT_BYTES = 1024 * 1024;
 var execDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema18,
+  workspaceId: workspaceIdSchema19,
   machine: machineRefText3,
   command: external_exports.string().min(1).max(64 * 1024),
   timeoutSeconds: external_exports.number().int().min(1).max(MACHINE_EXEC_MAX_SECONDS).optional(),
@@ -81071,14 +82194,14 @@ function gigabytes(bytes) {
 }
 var hostWhenOfflineSchema = external_exports.enum(["wait", "sandbox"]);
 var hostAgentDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema18,
+  workspaceId: workspaceIdSchema19,
   machine: machineRefText3,
   agentId: external_exports.string().min(1).max(64),
   whenOffline: hostWhenOfflineSchema.default("wait")
 });
 var hostAgentInputSchema = hostAgentDefinition;
 var unhostAgentDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema18,
+  workspaceId: workspaceIdSchema19,
   agentId: external_exports.string().min(1).max(64)
 });
 var unhostAgentInputSchema = unhostAgentDefinition;
@@ -81097,8 +82220,8 @@ var agentHostGrantDefinition = external_exports.object({
 });
 
 // ../../modules/compute/contract/src/compute.ts
-var idSchema20 = external_exports.string().min(1).max(64);
-var workspaceIdSchema19 = external_exports.string().min(1).max(64);
+var idSchema21 = external_exports.string().min(1).max(64);
+var workspaceIdSchema20 = external_exports.string().min(1).max(64);
 var machineStateSchema = external_exports.enum([
   "starting",
   "ready",
@@ -81119,24 +82242,24 @@ var machinePriceDefinition = external_exports.object({
   asleepMonthUsd: external_exports.number()
 });
 var machineGranteeKindSchema = external_exports.enum(["member", "agent"]);
-var machineGranteeDefinition = external_exports.object({ kind: machineGranteeKindSchema, id: idSchema20 });
+var machineGranteeDefinition = external_exports.object({ kind: machineGranteeKindSchema, id: idSchema21 });
 var machineGrantDefinition = external_exports.object({
   kind: machineGranteeKindSchema,
-  id: idSchema20,
-  grantedByUserId: idSchema20,
+  id: idSchema21,
+  grantedByUserId: idSchema21,
   grantedAt: external_exports.iso.datetime()
 });
 var machineDefinition = external_exports.object({
-  id: idSchema20,
-  workspaceId: workspaceIdSchema19,
+  id: idSchema21,
+  workspaceId: workspaceIdSchema20,
   name: external_exports.string(),
   type: machineTypeSchema,
   zone: external_exports.string(),
   state: machineStateSchema,
-  ownerUserId: idSchema20,
-  requesterUserId: idSchema20,
-  renterAgentId: idSchema20.nullable(),
-  channelId: idSchema20.nullable(),
+  ownerUserId: idSchema21,
+  requesterUserId: idSchema21,
+  renterAgentId: idSchema21.nullable(),
+  channelId: idSchema21.nullable(),
   ipAddress: external_exports.string().nullable(),
   sites: external_exports.array(machineSiteDefinition),
   /** Members and agents the owner shared the machine with, beyond the owner's own agents. */
@@ -81168,7 +82291,7 @@ var machineDefinition = external_exports.object({
   /** The owner's agents set to run on this own machine. */
   hostedAgents: external_exports.array(
     external_exports.object({
-      id: idSchema20,
+      id: idSchema21,
       name: external_exports.string(),
       whenOffline: external_exports.enum(["wait", "sandbox"])
     })
@@ -81179,23 +82302,23 @@ var machineDefinition = external_exports.object({
 var machineSchema = machineDefinition;
 var computeStatusDefinition = external_exports.object({ available: external_exports.boolean() });
 var computeStatusSchema = computeStatusDefinition;
-var workspaceInputDefinition2 = external_exports.object({ workspaceId: workspaceIdSchema19 });
+var workspaceInputDefinition2 = external_exports.object({ workspaceId: workspaceIdSchema20 });
 var computeWorkspaceInputSchema = workspaceInputDefinition2;
 var machineRefDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema19,
+  workspaceId: workspaceIdSchema20,
   machine: external_exports.string().min(1).max(64)
 });
 var machineRefSchema = machineRefDefinition;
 var MACHINE_NAME_MAX = 40;
 var machineNameSchema = external_exports.string().min(2).max(MACHINE_NAME_MAX).regex(/^[a-z0-9][a-z0-9-]*$/, "lowercase letters, digits and dashes");
 var renameDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema19,
+  workspaceId: workspaceIdSchema20,
   machine: external_exports.string().min(1).max(64),
   name: external_exports.string().max(200)
 });
 var renameMachineInputSchema = renameDefinition;
 var setupBrowserDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema19,
+  workspaceId: workspaceIdSchema20,
   /** The site the person signs in to, as a host or a URL. */
   site: external_exports.string().min(1).max(500),
   name: machineNameSchema.optional(),
@@ -81204,29 +82327,29 @@ var setupBrowserDefinition = external_exports.object({
 });
 var setupBrowserInputSchema = setupBrowserDefinition;
 var grantDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema19,
+  workspaceId: workspaceIdSchema20,
   machine: external_exports.string().min(1).max(64),
   grantee: machineGranteeDefinition
 });
 var machineGrantInputSchema = grantDefinition;
 var setBudgetDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema19,
+  workspaceId: workspaceIdSchema20,
   machine: external_exports.string().min(1).max(64),
   budgetUsd: external_exports.number().min(0).max(1e4),
   period: machineBudgetPeriodSchema
 });
 var setMachineBudgetInputSchema = setBudgetDefinition;
 var openScreenDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema19,
+  workspaceId: workspaceIdSchema20,
   machine: external_exports.string().min(1).max(64),
   site: external_exports.string().min(1).max(500).optional()
 });
 var openScreenInputSchema = openScreenDefinition;
-var screenRefDefinition = external_exports.object({ workspaceId: workspaceIdSchema19, sessionId: idSchema20 });
+var screenRefDefinition = external_exports.object({ workspaceId: workspaceIdSchema20, sessionId: idSchema21 });
 var screenRefSchema = screenRefDefinition;
 var screenSessionDefinition = external_exports.object({
-  sessionId: idSchema20,
-  machineId: idSchema20,
+  sessionId: idSchema21,
+  machineId: idSchema21,
   machineName: external_exports.string(),
   site: external_exports.string().nullable(),
   expiresAt: external_exports.iso.datetime(),
@@ -81260,7 +82383,7 @@ var ownMachineSshConnectDefinition = external_exports.object({
   publicKey: external_exports.string()
 });
 var ownMachineSshConnectSchema = ownMachineSshConnectDefinition;
-var reconcileDefinition = external_exports.object({ workspaceId: workspaceIdSchema19, machineId: idSchema20 });
+var reconcileDefinition = external_exports.object({ workspaceId: workspaceIdSchema20, machineId: idSchema21 });
 var ComputeApi = moduleApi()("compute");
 var computeCoreTrpc = defineTrpcContract("compute").query("status").withInput(computeWorkspaceInputSchema).withOutput(computeStatusSchema).query("browserTabs").withInput(browserTabListInputSchema).withOutput(browserTabListSchema).query("browserTab").withInput(browserTabInputSchema).withOutput(browserTabSchema).mutation("openBrowserTab").withInput(openBrowserTabInputSchema).withOutput(browserTabSchema).mutation("browserTabScreen").withInput(browserTabInputSchema).withOutput(browserTabScreenSchema).mutation("sizeBrowserTabScreen").withInput(browserTabScreenSizeInputSchema).withOutput(browserTabScreenSizeSchema).mutation("gotoBrowserTab").withInput(browserTabGotoInputSchema).withOutput(browserTabPageSchema).mutation("doneOnBrowserTab").withInput(browserTabInputSchema).withOutput(browserTabSchema).mutation("shareBrowserTab").withInput(browserTabShareInputSchema).withOutput(browserTabSchema).mutation("closeBrowserTab").withInput(browserTabInputSchema).withOutput(external_exports.object({ closed: external_exports.literal(true) })).query("computer").withInput(computeWorkspaceInputSchema).withOutput(computerStatusSchema).mutation("setComputerSize").withInput(setComputerSizeInputSchema).withOutput(computerSizeAnswerSchema).mutation("requestComputerSize").withInput(setComputerSizeInputSchema).withOutput(computerRequestSchema).mutation("cancelComputerRequest").withInput(computerRequestRefSchema).withOutput(computerRequestSchema).mutation("restartComputer").withInput(restartComputerInputSchema).withOutput(computerRestartAnswerSchema).query("computers").withInput(computeWorkspaceInputSchema).withOutput(computerListSchema).query("dedicatedIp").withInput(computeWorkspaceInputSchema).withOutput(dedicatedIpStatusSchema).mutation("setDedicatedIp").withInput(setDedicatedIpInputSchema).withOutput(dedicatedIpAnswerSchema).mutation("turnOffDedicatedIp").withInput(computeWorkspaceInputSchema).withOutput(dedicatedIpAnswerSchema).mutation("setDedicatedIpDomains").withInput(setDedicatedIpDomainsInputSchema).withOutput(dedicatedIpAnswerSchema).query("dedicatedIps").withInput(computeWorkspaceInputSchema).withOutput(dedicatedIpListSchema).query("dedicatedIpCountries").withInput(computeWorkspaceInputSchema).withOutput(dedicatedIpCountriesSchema).query("dedicatedIpOffer").withInput(dedicatedIpOfferInputSchema).withOutput(dedicatedIpOfferSchema).query("list").withInput(computeWorkspaceInputSchema).withOutput(external_exports.array(machineSchema)).query("get").withInput(machineRefSchema).withOutput(machineSchema).mutation("setupBrowser").withInput(setupBrowserInputSchema).withOutput(machineSchema).mutation("sleep").withInput(machineRefSchema).withOutput(machineSchema).mutation("wake").withInput(machineRefSchema).withOutput(machineSchema).mutation("delete").withInput(machineRefSchema).withOutput(machineSchema).mutation("rename").withInput(renameMachineInputSchema).withOutput(machineSchema).mutation("grant").withInput(machineGrantInputSchema).withOutput(machineSchema).mutation("revokeGrant").withInput(machineGrantInputSchema).withOutput(machineSchema).mutation("setBudget").withInput(setMachineBudgetInputSchema).withOutput(machineSchema).mutation("openScreen").withInput(openScreenInputSchema).withOutput(screenSessionSchema).mutation("finishScreen").withInput(screenRefSchema).withOutput(machineSchema).mutation("connectOwn").withInput(connectOwnMachineInputSchema).withOutput(ownMachineConnectSchema).mutation("newConnectCommand").withInput(machineRefSchema).withOutput(ownMachineConnectSchema).mutation("connectSsh").withInput(connectSshMachineInputSchema).withOutput(ownMachineSshConnectSchema).mutation("trustHostKey").withInput(trustHostKeyInputSchema).withOutput(machineSchema).mutation("checkHealth").withInput(machineRefSchema).withOutput(machineSchema).mutation("hostAgent").withInput(hostAgentInputSchema).withOutput(machineSchema).mutation("unhostAgent").withInput(unhostAgentInputSchema).withOutput(external_exports.object({ agentId: external_exports.string() })).mutation("pairWhatsapp").withInput(machineRefSchema).withOutput(whatsappPairingSchema).query("whatsappPairing").withInput(whatsappPairingRefSchema).withOutput(whatsappPairingSchema).mutation("cancelWhatsappPairing").withInput(whatsappPairingRefSchema).withOutput(whatsappPairingSchema).mutation("unpairWhatsapp").withInput(machineRefSchema).withOutput(machineSchema).build();
 var computeFleetTrpc = defineTrpcContract("compute").query("myComputers").withInput(computeWorkspaceInputSchema).withOutput(myComputersSchema).mutation("createComputer").withInput(createComputerInputSchema).withOutput(computerStatusSchema).mutation("deleteComputer").withInput(deleteComputerInputSchema).withOutput(deleteComputerAnswerSchema).mutation("setComputerCreators").withInput(setComputerCreatorsInputSchema).withOutput(computerStatusSchema).mutation("setAgentComputer").withInput(setAgentComputerInputSchema).withOutput(agentComputerAnswerSchema).build();
@@ -81358,9 +82481,9 @@ function creatorsOf(args) {
   return { everyone: args.flags.everyone === true, userIds };
 }
 function lineOf3(computer2) {
-  const money2 = `${computer2.monthlyCharge} ${computer2.currency.toUpperCase()} a month`;
+  const money3 = `${computer2.monthlyCharge} ${computer2.currency.toUpperCase()} a month`;
   const agents = `${computer2.agents.length} agent(s)`;
-  return `  ${computer2.computerId}	${computer2.name}	${computer2.kind}	${computer2.size}	${money2}	${agents}	${computer2.state}`;
+  return `  ${computer2.computerId}	${computer2.name}	${computer2.kind}	${computer2.size}	${money3}	${agents}	${computer2.state}`;
 }
 async function mine({ context, args }) {
   const client = await computeClient({ context, args });
@@ -81549,7 +82672,7 @@ Message to forward: ${answer5.message}
 `
   );
 }
-async function cancel({ context, args }) {
+async function cancel2({ context, args }) {
   const requestId = args.words[2];
   if (!requestId) throw new CliUsageError(COMPUTER_USAGE);
   const client = await computeClient({ context, args });
@@ -81578,9 +82701,9 @@ async function list2({ context, args }) {
   const client = await computeClient({ context, args });
   const answer5 = await client.get(COMPUTER_REST_PATHS.all);
   if (args.flags.json) return printJson3(context, answer5);
-  const money2 = (amount) => `${amount} ${answer5.currency.toUpperCase()}`;
+  const money3 = (amount) => `${amount} ${answer5.currency.toUpperCase()}`;
   const lines2 = answer5.computers.map(
-    (one) => `  ${one.name ?? one.ownerName}	${one.size}	${money2(one.monthlyCharge)} a month	${one.agents} agent(s)	${one.state}`
+    (one) => `  ${one.name ?? one.ownerName}	${one.size}	${money3(one.monthlyCharge)} a month	${one.agents} agent(s)	${one.state}`
   );
   context.out(
     `Everyone's computers (${answer5.includedSize} included per person):
@@ -81593,7 +82716,7 @@ var COMPUTER_COMMANDS = {
   sizes,
   upgrade,
   request,
-  cancel,
+  cancel: cancel2,
   restart,
   list: list2,
   ...COMPUTER_FLEET_COMMANDS
@@ -81607,10 +82730,10 @@ async function computer({ context, args }) {
 }
 
 // src/services/connect-commands.service.ts
-import { readFile as readFile23 } from "node:fs/promises";
+import { readFile as readFile24 } from "node:fs/promises";
 
 // src/services/mcp-gateway.service.ts
-import { readFile as readFile22 } from "node:fs/promises";
+import { readFile as readFile23 } from "node:fs/promises";
 import { createInterface as createInterface3 } from "node:readline";
 var TURN_HEADER = "x-laze-turn";
 function serveMcpGateway({
@@ -81653,7 +82776,7 @@ async function relayMcpLines({
   const github3 = env.LAZE_GITHUB_CONNECTION;
   const url2 = `${profile.url.replace(/\/+$/, "")}/api/connectors/mcp/${encodeURIComponent(profile.agentId)}${github3 ? `?github=${encodeURIComponent(github3)}` : ""}`;
   const turnFile = env.LAZE_TURN_FILE;
-  const readTurn = () => readFile22(turnFile, "utf8").then(
+  const readTurn = () => readFile23(turnFile, "utf8").then(
     (text2) => text2.trim(),
     () => ""
   );
@@ -81743,7 +82866,7 @@ async function turnOf({ context }) {
   const pinned = env.LAZE_TURN_TOKEN?.trim();
   if (pinned) return pinned;
   const file3 = env.LAZE_TURN_FILE;
-  const turn = file3 ? await readFile23(file3, "utf8").then(
+  const turn = file3 ? await readFile24(file3, "utf8").then(
     (text2) => text2.trim(),
     () => ""
   ) : "";
@@ -81801,11 +82924,11 @@ async function connect({
 }
 
 // src/services/connector-commands.service.ts
-import { readFile as readFile25 } from "node:fs/promises";
+import { readFile as readFile26 } from "node:fs/promises";
 import { resolve as resolve8 } from "node:path";
 
 // src/services/vault-keychain-commands.service.ts
-import { readFile as readFile24 } from "node:fs/promises";
+import { readFile as readFile25 } from "node:fs/promises";
 
 // src/rules/vault-input.rules.ts
 function secondsOf(text2) {
@@ -82185,7 +83308,7 @@ async function secretText({ context, args }) {
     );
   }
   const file3 = flagText({ args, name: "from-file" });
-  const text2 = file3 ? await readFile24(file3, "utf8") : await context.readStdin();
+  const text2 = file3 ? await readFile25(file3, "utf8") : await context.readStdin();
   const trimmed = text2.replace(/\r?\n$/, "");
   if (!trimmed.trim()) throw new CliUsageError("No value: pipe it on stdin or use --from-file.");
   return trimmed;
@@ -82414,7 +83537,7 @@ async function keyText({ context, args }) {
     throw new CliUsageError("A key never goes in a flag: pipe it on stdin or use --from-file.");
   }
   const file3 = flagText({ args, name: "from-file" });
-  const text2 = file3 ? await readFile25(resolve8(context.cwd, file3), "utf8") : await context.readStdin();
+  const text2 = file3 ? await readFile26(resolve8(context.cwd, file3), "utf8") : await context.readStdin();
   const trimmed = text2.trim();
   if (!trimmed) throw new CliUsageError("No key: pipe it on stdin or use --from-file.");
   return trimmed;
@@ -82732,12 +83855,12 @@ async function conversationDelete({ context, args }) {
 }
 
 // src/services/discord-commands.service.ts
-import { readFile as readFile26 } from "node:fs/promises";
+import { readFile as readFile27 } from "node:fs/promises";
 import { resolve as resolve9 } from "node:path";
 
 // ../../modules/discord/contract/src/discord.ts
-var workspaceIdSchema20 = external_exports.string().min(1).max(64);
-var workspaceInput4 = external_exports.object({ workspaceId: workspaceIdSchema20 });
+var workspaceIdSchema21 = external_exports.string().min(1).max(64);
+var workspaceInput4 = external_exports.object({ workspaceId: workspaceIdSchema21 });
 var discordIdSchema = external_exports.string().regex(/^\d{5,25}$/);
 var DISCORD_PERMISSIONS = {
   ADMINISTRATOR: 1n << 3n,
@@ -82819,10 +83942,10 @@ var discordChannelViewDefinition = external_exports.object({
   url: external_exports.url()
 });
 var discordChannelViewSchema = discordChannelViewDefinition;
-var guildInputDefinition = external_exports.object({ workspaceId: workspaceIdSchema20, guildId: discordIdSchema });
+var guildInputDefinition = external_exports.object({ workspaceId: workspaceIdSchema21, guildId: discordIdSchema });
 var discordGuildInputSchema = guildInputDefinition;
 var saveDiscordAppDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema20,
+  workspaceId: workspaceIdSchema21,
   setupKey: external_exports.string().min(1).max(64),
   applicationId: external_exports.string().trim().max(40),
   clientSecret: external_exports.string().trim().max(200),
@@ -82832,7 +83955,7 @@ var saveDiscordAppInputSchema = saveDiscordAppDefinition;
 var startedAuthorizeDefinition = external_exports.object({ authorizeUrl: external_exports.url() });
 var startedDiscordAuthorizeSchema = startedAuthorizeDefinition;
 var pickDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema20,
+  workspaceId: workspaceIdSchema21,
   guildId: discordIdSchema,
   channelId: discordIdSchema,
   picked: external_exports.boolean(),
@@ -82840,7 +83963,7 @@ var pickDefinition = external_exports.object({
 });
 var discordPickInputSchema = pickDefinition;
 var updateConnectionDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema20,
+  workspaceId: workspaceIdSchema21,
   guildId: discordIdSchema,
   label: external_exports.string().trim().max(80).nullable().optional(),
   cacheDays: external_exports.number().int().min(1).max(30).optional()
@@ -82853,9 +83976,9 @@ var oauthCallbackDefinition = external_exports.object({
   permissions: external_exports.string().max(40).optional(),
   error: external_exports.string().max(200).optional()
 });
-var linkParamsDefinition = external_exports.object({ workspaceId: workspaceIdSchema20, guildId: discordIdSchema });
+var linkParamsDefinition = external_exports.object({ workspaceId: workspaceIdSchema21, guildId: discordIdSchema });
 var historyInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema20,
+  workspaceId: workspaceIdSchema21,
   /** The Laze conversation that mirrors the Discord channel. */
   channelId: external_exports.string().min(1).max(200),
   before: external_exports.iso.datetime()
@@ -82884,7 +84007,7 @@ var historyPageDefinition = external_exports.object({
 });
 var discordHistoryPageSchema = historyPageDefinition;
 var fileParamsDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema20,
+  workspaceId: workspaceIdSchema21,
   channelId: external_exports.string().min(1).max(200),
   messageId: discordIdSchema,
   attachmentId: discordIdSchema
@@ -82899,7 +84022,7 @@ var saveAppByKeyDefinition = external_exports.object({
 var pickByKeyDefinition = pickDefinition.omit({ workspaceId: true });
 var updateByKeyDefinition = updateConnectionDefinition.omit({ workspaceId: true });
 var historyByKeyDefinition = historyInputDefinition.omit({ workspaceId: true });
-var emptyDefinition = external_exports.object({});
+var emptyDefinition2 = external_exports.object({});
 var DISCORD_KEY_PATHS = {
   overview: "/api/discord/overview",
   beginSetup: "/api/discord/setup",
@@ -83054,7 +84177,7 @@ async function secretsOf({ context, args }) {
   const fromConnection = flagText({ args, name: "from-vault" });
   if (fromConnection) return { fromConnection };
   const file3 = flagText({ args, name: "from-file" });
-  const text2 = file3 ? await readFile26(resolve9(context.cwd, file3), "utf8") : await context.readStdin();
+  const text2 = file3 ? await readFile27(resolve9(context.cwd, file3), "utf8") : await context.readStdin();
   const lines2 = text2.split("\n").map((line) => line.trim()).filter(Boolean);
   if (lines2.length !== 2) {
     throw new CliUsageError(
@@ -83324,8 +84447,8 @@ var DOMAINS_USAGE = `Usage:
 var printJson5 = (context, data) => context.out(`${JSON.stringify(data, null, 2)}
 `);
 function printDomain(context, row) {
-  const join27 = row.autoJoin ? "auto-join on" : "auto-join off";
-  context.out(`${row.domain}	${join27}${row.enforced ? "	single sign-on enforced" : ""}
+  const join28 = row.autoJoin ? "auto-join on" : "auto-join off";
+  context.out(`${row.domain}	${join28}${row.enforced ? "	single sign-on enforced" : ""}
 `);
 }
 async function list4({ context, args }) {
@@ -83357,7 +84480,7 @@ async function domains({ context, args }) {
 }
 
 // src/services/emoji-commands.service.ts
-import { readFile as readFile27 } from "node:fs/promises";
+import { readFile as readFile28 } from "node:fs/promises";
 import { resolve as resolve10 } from "node:path";
 var EMOJI_USAGE = `Usage:
   laze emoji list [--json]                       the workspace's custom emoji, aliases and who added each
@@ -83398,7 +84521,7 @@ async function addEmoji({ context, args, client }) {
   const file3 = wordAt4(args, 3);
   let bytes;
   try {
-    bytes = new Uint8Array(await readFile27(resolve10(context.cwd, file3)));
+    bytes = new Uint8Array(await readFile28(resolve10(context.cwd, file3)));
   } catch {
     throw new CliUsageError(`Cannot read ${file3}.`);
   }
@@ -83464,10 +84587,10 @@ var EXTERNAL_CONNECTION_REST_PATHS = {
   block: "/api/external-connections/block",
   report: "/api/external-connections/report"
 };
-var workspaceIdSchema21 = external_exports.string().min(1).max(64);
-var idSchema21 = external_exports.string().min(1).max(64);
+var workspaceIdSchema22 = external_exports.string().min(1).max(64);
+var idSchema22 = external_exports.string().min(1).max(64);
 var iso = external_exports.iso.datetime();
-var workspaceInput5 = external_exports.object({ workspaceId: workspaceIdSchema21 });
+var workspaceInput5 = external_exports.object({ workspaceId: workspaceIdSchema22 });
 var connectionReference = external_exports.string().trim().min(1).max(120);
 var externalConnectionStateSchema = external_exports.enum(["active", "ended"]);
 var externalInviteStateSchema = external_exports.enum([
@@ -83571,10 +84694,10 @@ var rosterDefinition = external_exports.object({
   members: external_exports.array(rosterMemberDefinition)
 });
 var externalRosterSchema = rosterDefinition;
-var rosterInputDefinition = external_exports.object({ workspaceId: workspaceIdSchema21, channelId: idSchema21 });
+var rosterInputDefinition = external_exports.object({ workspaceId: workspaceIdSchema22, channelId: idSchema22 });
 var externalRosterInputSchema = rosterInputDefinition;
 var inviteInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema21,
+  workspaceId: workspaceIdSchema22,
   email: external_exports.email().max(320),
   /** The first channel to share, by id or name; it is shared once the invitation is accepted. */
   share: external_exports.string().trim().min(1).max(81).optional(),
@@ -83582,7 +84705,7 @@ var inviteInputDefinition = external_exports.object({
   company: external_exports.string().trim().min(1).max(80).optional()
 });
 var externalInviteInputSchema = inviteInputDefinition;
-var inviteRefDefinition = external_exports.object({ workspaceId: workspaceIdSchema21, inviteId: idSchema21 });
+var inviteRefDefinition = external_exports.object({ workspaceId: workspaceIdSchema22, inviteId: idSchema22 });
 var externalInviteRefSchema = inviteRefDefinition;
 var pendingShareDefinition = external_exports.object({
   channelId: external_exports.string(),
@@ -83606,8 +84729,8 @@ var pendingSharesDefinition = external_exports.object({
 var externalPendingSharesSchema = pendingSharesDefinition;
 var acceptInviteDefinition = external_exports.object({
   /** The workspace to connect: one where the person is Admin or Owner. */
-  workspaceId: workspaceIdSchema21,
-  inviteId: idSchema21,
+  workspaceId: workspaceIdSchema22,
+  inviteId: idSchema22,
   /** The emailed link's secret; without it the invitation must be addressed to the person. */
   secret: external_exports.string().trim().max(200).optional()
 });
@@ -83615,40 +84738,40 @@ var externalAcceptInviteInputSchema = acceptInviteDefinition;
 var answeredDefinition = external_exports.object({ id: external_exports.string(), state: externalInviteStateSchema });
 var externalInviteAnsweredSchema = answeredDefinition;
 var connectionInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema21,
+  workspaceId: workspaceIdSchema22,
   connection: connectionReference
 });
 var externalConnectionInputSchema = connectionInputDefinition;
 var settingsInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema21,
+  workspaceId: workspaceIdSchema22,
   connection: connectionReference,
   agentsAllowed: external_exports.boolean().optional(),
   directAllowed: external_exports.boolean().optional()
 });
 var externalSettingsInputSchema = settingsInputDefinition;
 var shareInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema21,
+  workspaceId: workspaceIdSchema22,
   connection: connectionReference,
   /** The channel as its id or name, `#` optional. */
   channel: external_exports.string().trim().min(1).max(81)
 });
 var externalShareInputSchema = shareInputDefinition;
 var acceptShareDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema21,
-  shareId: idSchema21,
+  workspaceId: workspaceIdSchema22,
+  shareId: idSchema22,
   /** Its name here; the host's name when left out. */
   name: external_exports.string().trim().min(1).max(80).optional(),
   visibility: external_exports.enum(["public", "private"]).default("public")
 });
 var externalAcceptShareInputSchema = acceptShareDefinition;
 var shareRefDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema21,
+  workspaceId: workspaceIdSchema22,
   /** The share's id, or this workspace's channel as its id or name. */
   share: external_exports.string().trim().min(1).max(81)
 });
 var externalShareRefSchema = shareRefDefinition;
 var reportInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema21,
+  workspaceId: workspaceIdSchema22,
   connection: connectionReference,
   note: external_exports.string().trim().min(1).max(2e3)
 });
@@ -83659,7 +84782,7 @@ var blockedDefinition = external_exports.object({
 });
 var externalBlockedSchema = blockedDefinition;
 var openDirectDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema21,
+  workspaceId: workspaceIdSchema22,
   /** The external person: their roster id (`laze:<id>`) or their name in a shared channel. */
   person: external_exports.string().trim().min(1).max(120),
   /** Their workspace, as a connection reference; needed only when a name is in two. */
@@ -83685,7 +84808,7 @@ var externalConnectionConfig = Config.define(() => ({ publicBaseUrl }));
 
 // ../../modules/external-connection/contract/src/external-connection.rest.ts
 var keyed = { workspaceId: true };
-var emptyDefinition2 = external_exports.object({});
+var emptyDefinition3 = external_exports.object({});
 var rosterDefinition2 = externalRosterInputSchema.omit(keyed);
 var inviteDefinition = externalInviteInputSchema.omit(keyed);
 var inviteRefDefinition2 = externalInviteRefSchema.omit(keyed);
@@ -83705,7 +84828,7 @@ var ExternalChannelBannerSlot = externalUi.component("channel-banner");
 var ExternalSharingHooksToken = externalUi.hooks("sharing");
 
 // src/services/workspace-commands.service.ts
-import { readFile as readFile28 } from "node:fs/promises";
+import { readFile as readFile29 } from "node:fs/promises";
 import { resolve as resolve11 } from "node:path";
 var ROLE_NAMES2 = {
   OWNER: "Owner",
@@ -83888,7 +85011,7 @@ var LOGO_USAGE = "Usage: laze workspace logo set <file.png|jpg|webp> | laze work
 async function readLogo({ context, file: file3 }) {
   let bytes;
   try {
-    bytes = new Uint8Array(await readFile28(resolve11(context.cwd, file3)));
+    bytes = new Uint8Array(await readFile29(resolve11(context.cwd, file3)));
   } catch {
     throw new CliUsageError(`No file to read at ${file3}.`);
   }
@@ -84204,7 +85327,7 @@ async function list6({ context, args }) {
     ...overview3.connections.flatMap(connectionLines),
     ...overview3.invites.length > 0 ? ["Invitations sent:"] : [],
     ...overview3.invites.map(
-      (invite3) => `  ${invite3.email}	${invite3.state}	expires ${utcTimeOf(invite3.expiresAt)}	${invite3.id}`
+      (invite4) => `  ${invite4.email}	${invite4.state}	expires ${utcTimeOf(invite4.expiresAt)}	${invite4.id}`
     ),
     ...overview3.blocked.map((each) => `Blocked: ${each.name}`)
   ];
@@ -84461,7 +85584,7 @@ async function external({ context, args }) {
 }
 
 // src/services/feed-commands.service.ts
-import { readFile as readFile30 } from "node:fs/promises";
+import { readFile as readFile31 } from "node:fs/promises";
 import { resolve as resolve13 } from "node:path";
 
 // ../../modules/feed/contract/src/feed.ts
@@ -84649,6 +85772,13 @@ var feedApprovalSchemaDefinition = external_exports.object({
     "vault_share"
   ]),
   requestId: external_exports.string(),
+  /** Every request an invite card answers at once, `requestId` first; absent means just it. */
+  requestIds: external_exports.array(external_exports.string()).optional(),
+  /**
+   * An invite card whose approval raises what the workspace pays (Team, more seats or a higher
+   * price): the web shows the price and runs the upgrade; iOS sends the admin to the web.
+   */
+  needsUpgrade: external_exports.boolean().optional(),
   /** The app, for an `app_publish` or `app_access` card. */
   appId: external_exports.string().nullable(),
   subject: external_exports.string(),
@@ -85086,15 +86216,15 @@ function decisionsLineOf(count5) {
 function csvCellsOf(line) {
   const cells = [];
   let cell = "";
-  let quoted = false;
+  let quoted2 = false;
   for (let at = 0; at < line.length; at += 1) {
     const char = line[at];
-    if (quoted && char === '"' && line[at + 1] === '"') {
+    if (quoted2 && char === '"' && line[at + 1] === '"') {
       cell += '"';
       at += 1;
     } else if (char === '"') {
-      quoted = !quoted;
-    } else if (char === "," && !quoted) {
+      quoted2 = !quoted2;
+    } else if (char === "," && !quoted2) {
       cells.push(cell);
       cell = "";
     } else {
@@ -85211,9 +86341,9 @@ function feedFlagsOf({ args }) {
 }
 
 // src/services/feed-files.service.ts
-import { readFile as readFile29 } from "node:fs/promises";
-import { basename as basename4, resolve as resolve12 } from "node:path";
-async function bytesOf2({
+import { readFile as readFile30 } from "node:fs/promises";
+import { basename as basename6, resolve as resolve12 } from "node:path";
+async function bytesOf3({
   context,
   source
 }) {
@@ -85228,7 +86358,7 @@ async function bytesOf2({
 async function downloaded({ context, url: url2 }) {
   const response = await context.fetcher(url2);
   if (!response.ok) throw new CliUsageError(`${url2} answered ${response.status}`);
-  const fileName = basename4(new URL(url2).pathname) || "file";
+  const fileName = basename6(new URL(url2).pathname) || "file";
   const header = (response.headers.get("content-type") ?? "").split(";")[0]?.trim();
   return {
     fileName,
@@ -85238,11 +86368,11 @@ async function downloaded({ context, url: url2 }) {
 }
 async function local({ context, path }) {
   const full = resolve12(context.cwd, path);
-  const fileName = basename4(full);
+  const fileName = basename6(full);
   return {
     fileName,
     contentType: contentTypeOf(fileName),
-    bytes: new Uint8Array(await readFile29(full))
+    bytes: new Uint8Array(await readFile30(full))
   };
 }
 async function directWith({ client, to }) {
@@ -85270,7 +86400,7 @@ async function feedAttachmentIdsOf({
     throw new CliUsageError(`An item carries at most ${FEED_ATTACHMENTS_MAX} files`);
   }
   const files2 = [];
-  for (const source of sources) files2.push(await bytesOf2({ context, source }));
+  for (const source of sources) files2.push(await bytesOf3({ context, source }));
   const target = channel || await directWith({ client, to: args.lists.to ?? [] });
   const ids = [];
   for (const file3 of files2) {
@@ -85324,10 +86454,10 @@ async function bodyOf2({
   flags: flags2
 }) {
   const body = { ...flags2.fields };
-  const read3 = (source) => "file" in source ? readFile30(resolve13(context.cwd, source.file), "utf8") : source.text;
-  for (const [field, source] of Object.entries(flags2.texts)) body[field] = await read3(source);
+  const read4 = (source) => "file" in source ? readFile31(resolve13(context.cwd, source.file), "utf8") : source.text;
+  for (const [field, source] of Object.entries(flags2.texts)) body[field] = await read4(source);
   if (flags2.rich) {
-    const text2 = await read3(flags2.rich.source);
+    const text2 = await read4(flags2.rich.source);
     try {
       body.rich = richBodyOf({ kind: flags2.rich.kind, text: text2 });
     } catch (error62) {
@@ -85406,10 +86536,10 @@ async function feedRead({ context, args }) {
   const itemId = args.words[2];
   if (!itemId) throw new CliUsageError(USAGE9);
   const { client } = await signedIn({ context, args });
-  const read3 = await client.post("/api/feed/items/read", { itemId });
-  printItem({ context, args, item: read3 });
-  if (!args.flags.json && read3.item.draft) context.out(`Draft:
-${read3.item.draft}
+  const read4 = await client.post("/api/feed/items/read", { itemId });
+  printItem({ context, args, item: read4 });
+  if (!args.flags.json && read4.item.draft) context.out(`Draft:
+${read4.item.draft}
 `);
 }
 async function feedInbox({ context, args }) {
@@ -85519,7 +86649,7 @@ async function textFlag({
 }) {
   const value = flagText({ args, name: name3 });
   if (!value.startsWith("@")) return value;
-  return readFile30(resolve13(context.cwd, value.slice(1)), "utf8");
+  return readFile31(resolve13(context.cwd, value.slice(1)), "utf8");
 }
 async function feedList({ context, args }) {
   const { client } = await signedIn({ context, args });
@@ -85642,7 +86772,7 @@ async function feed({ context, args }) {
 }
 
 // src/services/github-commands.service.ts
-import { readFile as readFile31 } from "node:fs/promises";
+import { readFile as readFile32 } from "node:fs/promises";
 
 // src/rules/github-signature.rules.ts
 var TURN_SEPARATOR = "~";
@@ -85712,7 +86842,7 @@ var REAL_GH = "/usr/bin/gh";
 var NOT_SET = "laze: agent_github_not_set: this agent has no GitHub connection. Its owner sets one on the agent's settings page or with `laze agent set-github <agent> <connection>`.";
 async function turnFileToken({ env }) {
   if (!env.LAZE_TURN_FILE) return "";
-  return readFile31(env.LAZE_TURN_FILE, "utf8").then(
+  return readFile32(env.LAZE_TURN_FILE, "utf8").then(
     (text2) => text2.trim(),
     () => ""
   );
@@ -85746,7 +86876,7 @@ async function githubGh({
     args: args.rest,
     agentName: profile.name ?? "An agent",
     threadUrl: threadUrlOf({ env, workspaceId: profile.workspaceId }),
-    readBodyFile: (path) => path === "-" ? context.readStdin() : readFile31(path, "utf8")
+    readBodyFile: (path) => path === "-" ? context.readStdin() : readFile32(path, "utf8")
   });
   return context.runCommand({
     command: [REAL_GH, ...ghArgs],
@@ -85845,7 +86975,7 @@ async function setAgentGithub({
 }
 
 // src/services/history-commands.service.ts
-import { readFile as readFile32 } from "node:fs/promises";
+import { readFile as readFile33 } from "node:fs/promises";
 
 // src/rules/history-format.rules.ts
 function timeOf2(iso2) {
@@ -85941,7 +87071,7 @@ async function turnTokenOf4({ context }) {
   const pinned = env.LAZE_TURN_TOKEN?.trim();
   if (pinned) return pinned;
   if (!env.LAZE_TURN_FILE) return "";
-  return readFile32(env.LAZE_TURN_FILE, "utf8").then(
+  return readFile33(env.LAZE_TURN_FILE, "utf8").then(
     (text2) => text2.trim(),
     () => ""
   );
@@ -85992,6 +87122,100 @@ async function history2({
   return 1;
 }
 
+// src/rules/invite-format.rules.ts
+function money2({ amount, currency: currency2 }) {
+  return `${currency2.toUpperCase()} ${Number(amount.toFixed(2))}`;
+}
+function inviteQuoteText(quote4) {
+  const at = (amount) => money2({ amount, currency: quote4.currency });
+  const people2 = `${quote4.peopleAfter} ${quote4.peopleAfter === 1 ? "person" : "people"}`;
+  const seats = quote4.freeSeatsLeft ? ` ${quote4.freeSeatsLeft} free ${quote4.freeSeatsLeft === 1 ? "seat" : "seats"} left.` : "";
+  if (quote4.seatCap !== null && !quote4.upgradeNeeded) {
+    return `Your plan holds ${quote4.seatCap} people, at no charge.
+`;
+  }
+  const price = `${at(quote4.monthlyAfter)} a month for ${people2} (${at(quote4.perPersonAfter)} per person).${seats}`;
+  if (quote4.upgradeNeeded)
+    return `Team: ${price} This starts Team, paid through Stripe Checkout.
+`;
+  const change2 = quote4.monthlyAfter === quote4.monthlyNow ? "No change to your price." : `Was ${at(quote4.monthlyNow)}; the change is prorated as each person joins.`;
+  return `New price: ${price} ${change2}
+`;
+}
+
+// src/services/invite-commands.service.ts
+var INVITE_USAGE = "Usage: laze invite [--to <conversation>] [--role member|guest|admin|owner] [--yes] <email>...";
+var ROLES3 = {
+  owner: "OWNER",
+  admin: "ADMIN",
+  member: "MEMBER",
+  guest: "GUEST"
+};
+function inviteInput(args) {
+  const emails = args.words.slice(1);
+  const roleFlag = typeof args.flags.role === "string" ? args.flags.role.toLowerCase() : "member";
+  const role2 = ROLES3[roleFlag];
+  if (emails.length === 0 || !role2) throw new CliUsageError(INVITE_USAGE);
+  const to = typeof args.flags.to === "string" ? args.flags.to : void 0;
+  return { emails, role: role2, ...to ? { to } : {}, confirmed: true };
+}
+function refusedLines(refused) {
+  const why = { invalid: "not an email address", duplicate: "listed twice", member: "already in" };
+  return refused.map((one) => `Left out ${one.email}: ${why[one.reason]}.
+`).join("");
+}
+async function invite3({ context, args }) {
+  const input2 = inviteInput(args);
+  const { client } = await signedIn({ context, args });
+  const quote4 = await client.post("/api/billing-account/invite-quote", {
+    adding: input2.emails.length
+  });
+  if (!args.flags.yes) {
+    context.out(`${inviteQuoteText(quote4)}Nothing was sent. Run it again with --yes to send.
+`);
+    return;
+  }
+  let sent;
+  try {
+    sent = await client.post("/api/agents/me/workspace/invite-many", input2);
+  } catch (error62) {
+    if (!(error62 instanceof LazeApiError) || error62.status !== 403) throw error62;
+    const asked = await client.post(
+      "/api/agents/me/workspace/request-invites",
+      input2
+    );
+    const approvers = asked.approvers.length > 0 ? asked.approvers.join(" or ") : "an admin";
+    context.out(
+      `${refusedLines(asked.refused)}Sent ${asked.requests.length} to ${approvers} for approval. The invitations go out once approved.
+`
+    );
+    return;
+  }
+  context.out(refusedLines(sent.refused));
+  if (!quote4.upgradeNeeded) {
+    context.out(`Invited ${sent.invites.length}.${sent.held ? " Some wait for seats." : ""}
+`);
+    return;
+  }
+  const returnPath = sent.channelId ? `/workspaces/${quote4.workspaceId}?c=${encodeURIComponent(sent.channelId)}&invite=checkout` : `/workspaces/${quote4.workspaceId}?invite=checkout`;
+  try {
+    const { url: url2 } = await client.post("/api/billing-account/checkout", {
+      currency: quote4.currency,
+      returnPath
+    });
+    context.out(
+      `Saved ${sent.invites.length} invitations for Team. Open this link to upgrade; they go out once it is paid: ${url2}
+`
+    );
+  } catch (error62) {
+    if (!(error62 instanceof LazeApiError) || error62.status !== 403) throw error62;
+    context.out(
+      `Saved ${sent.invites.length} invitations for Team. An admin has to upgrade the workspace (laze billing checkout) before they go out.
+`
+    );
+  }
+}
+
 // src/services/ip-commands.service.ts
 var IP_USAGE = `Usage:
   laze ip [status] [--json]                 your dedicated IP: on or off, country, address, domains
@@ -86108,9 +87332,9 @@ async function list7({ context, args }) {
   const answer5 = await client.get(DEDICATED_IP_REST_PATHS.all);
   if (args.flags.json) return printJson7(context, answer5);
   if (answer5.ips.length === 0) return context.out("No one has a dedicated IP.\n");
-  const money2 = (amount) => `${amount} ${answer5.currency.toUpperCase()}`;
+  const money3 = (amount) => `${amount} ${answer5.currency.toUpperCase()}`;
   const lines2 = answer5.ips.map(
-    (one) => `  ${one.ownerName}	${one.country.name}	${one.state === "on" ? "on" : "being bought"}	${money2(one.monthlyPrice)} a month`
+    (one) => `  ${one.ownerName}	${one.country.name}	${one.state === "on" ? "on" : "being bought"}	${money3(one.monthlyPrice)} a month`
   );
   context.out(`Dedicated IPs:
 ${lines2.join("\n")}
@@ -86133,19 +87357,19 @@ async function ip({ context, args }) {
 }
 
 // src/services/join-commands.service.ts
-import { mkdir as mkdir20, readFile as readFile33, rename as rename6, rm as rm11, writeFile as writeFile20 } from "node:fs/promises";
-import { dirname as dirname19, join as join23 } from "node:path";
+import { mkdir as mkdir20, readFile as readFile34, rename as rename6, rm as rm11, writeFile as writeFile20 } from "node:fs/promises";
+import { dirname as dirname19, join as join24 } from "node:path";
 var DEFAULT_WAIT_SECONDS2 = 100;
 var JOIN_USAGE = "Usage: laze join [--workspace <name|id|invite link>] [--for <email>] [--name <name>] [--note <text>] [--timeout <seconds>] [--project <folder>]";
 function pendingPathOf({ context }) {
-  return join23(dirname19(context.environment.configPath), "join", "pending.json");
+  return join24(dirname19(context.environment.configPath), "join", "pending.json");
 }
 async function readPending({
   context,
   url: url2,
   args
 }) {
-  const pending2 = await readFile33(pendingPathOf({ context }), "utf8").then(
+  const pending2 = await readFile34(pendingPathOf({ context }), "utf8").then(
     (text2) => JSON.parse(text2),
     () => void 0
   );
@@ -86865,8 +88089,14 @@ function withLocalTools(answer5) {
   if (!Array.isArray(result.tools)) return answer5;
   return { ...recordOf3(answer5), result: { ...result, tools: [...TOOLS, ...result.tools] } };
 }
-function refusedLines({ message: message2, status: status9 }) {
-  const reason = status9 === 401 ? "Laze refused this key: run `laze login` or link the agent again" : `Laze answered ${status9}`;
+function refusedLines2({
+  message: message2,
+  status: status9,
+  text: text2
+}) {
+  const migrated = status9 === 401 ? migratedNoticeOf(apiErrorOf({ status: status9, text: text2 })) : void 0;
+  const refused = status9 === 401 ? "Laze refused this key: run `laze login` or link the agent again" : `Laze answered ${status9}`;
+  const reason = migrated?.notice ?? refused;
   const errors = idsOf(message2).map((id2) => ({
     jsonrpc: "2.0",
     id: id2,
@@ -86916,7 +88146,7 @@ async function answerLine({
   }
   const answer5 = await client.forward({ path: REMOTE_MCP_PATH, body: line });
   if (answer5.status < 200 || answer5.status >= 300) {
-    return refusedLines({ message: message2, status: answer5.status });
+    return refusedLines2({ message: message2, status: answer5.status, text: answer5.text });
   }
   const replied = repliedTo({ request: request2 });
   if (replied)
@@ -86979,14 +88209,14 @@ async function serveMcp({
 }
 
 // src/services/mount-files.service.ts
-import { mkdir as mkdir21, readFile as readFile34, rm as rm12, writeFile as writeFile21 } from "node:fs/promises";
+import { mkdir as mkdir21, readFile as readFile35, rm as rm12, writeFile as writeFile21 } from "node:fs/promises";
 import { dirname as dirname20, relative as relative5, resolve as resolve14 } from "node:path";
 async function textArgument({
   context,
   value
 }) {
   if (value === "-") return context.readStdin();
-  if (value.startsWith("@")) return readFile34(resolve14(context.cwd, value.slice(1)), "utf8");
+  if (value.startsWith("@")) return readFile35(resolve14(context.cwd, value.slice(1)), "utf8");
   return value;
 }
 function turnChannel({ context, args }) {
@@ -87269,7 +88499,7 @@ async function models({ context, args }) {
 
 // src/services/monitor-commands.service.ts
 var ADD_USAGE = "Usage: laze monitor add <name> --channel '#support-*' --prompt '<what to do>' [--from anyone|people|slack] [--not-from bots] [--thread roots-only] [--matches '<pattern>'] [--max-runs-per-day <n>] [--agent <name>]";
-function agentOf(args) {
+function agentOf2(args) {
   const agent2 = flagText({ args, name: "agent" });
   return agent2 ? { agent: agent2 } : {};
 }
@@ -87290,7 +88520,7 @@ async function monitorAdd({ context, args }) {
   if (maxRuns && !/^\d+$/.test(maxRuns)) throw new CliUsageError(ADD_USAGE);
   const { client } = await signedIn({ context, args });
   const added = await client.post("/api/agents/monitors", {
-    ...agentOf(args),
+    ...agentOf2(args),
     name: name3,
     channels: channels3,
     prompt,
@@ -87326,7 +88556,7 @@ function stateRun(path, verb) {
     if (!name3) throw new CliUsageError(`Usage: laze monitor ${verb} <name> [--agent <name>]`);
     const { client } = await signedIn({ context, args });
     const answer5 = await client.post(path, {
-      ...agentOf(args),
+      ...agentOf2(args),
       name: name3
     });
     if (args.flags.json) return context.out(`${JSON.stringify(answer5, null, 2)}
@@ -87665,8 +88895,8 @@ ${OPS_USAGE}`);
 }
 
 // src/services/release-watch.service.ts
-import { mkdir as mkdir22, readFile as readFile35, realpath, writeFile as writeFile22 } from "node:fs/promises";
-import { dirname as dirname21, join as join24 } from "node:path";
+import { mkdir as mkdir22, readFile as readFile36, realpath, writeFile as writeFile22 } from "node:fs/promises";
+import { dirname as dirname21, join as join25 } from "node:path";
 
 // src/rules/cli-update.rules.ts
 var CLI_PACKAGE = "@lazehq/cli";
@@ -87813,15 +89043,15 @@ async function startedUpdate({
   const plan2 = updatePlanOf({ script: await scriptOf(context) });
   if (plan2.kind !== "install") return null;
   const folder = dirname21(context.environment.configPath);
-  const stamp = join24(folder, "auto-update.json");
-  const last = await readFile35(stamp, "utf8").then((text2) => JSON.parse(text2)).catch(() => null);
+  const stamp = join25(folder, "auto-update.json");
+  const last = await readFile36(stamp, "utf8").then((text2) => JSON.parse(text2)).catch(() => null);
   const now = context.nowMs();
   if (last?.server === server && now - last.atMs < RETRY_AFTER_MS) return null;
   await mkdir22(folder, { recursive: true, mode: 448 });
   await writeFile22(stamp, JSON.stringify({ server, atMs: now }), { mode: 384 });
   context.processes.spawnDetached({
     argv: [...context.program, "update"],
-    logPath: join24(folder, "auto-update.log")
+    logPath: join25(folder, "auto-update.log")
   });
   return { manager: plan2.manager };
 }
@@ -87858,7 +89088,7 @@ function watchingRelease({
 }
 
 // src/services/rush-guard.service.ts
-import { readFile as readFile36, rm as rm13 } from "node:fs/promises";
+import { readFile as readFile37, rm as rm13 } from "node:fs/promises";
 var WATCH_MS3 = 2e3;
 var RETRY_MS2 = 3e4;
 async function guardRound(guard) {
@@ -87901,7 +89131,7 @@ async function rushWakeHook({ context, args }) {
     while (context.processes.alive(claudePid)) await context.sleep(WATCH_MS3);
     const { client, name: name3 } = await signedIn({ context, args });
     const noted = statePathOf({ context, kind: "sessions", profile: String(claudePid) });
-    const note = await readFile36(noted, "utf8").then(
+    const note = await readFile37(noted, "utf8").then(
       (text2) => JSON.parse(text2),
       () => void 0
     );
@@ -87914,6 +89144,12 @@ async function rushWakeHook({ context, args }) {
     try {
       while (context.nowMs() < deadline) {
         const done = await guardRound(guard).catch((error62) => {
+          const migrated = migratedNoticeOf(error62);
+          if (migrated) {
+            context.err(`${migrated.notice}
+`);
+            return true;
+          }
           context.err(`laze: the rush guard will try again: ${String(error62)}
 `);
           return "failed";
@@ -88070,8 +89306,8 @@ async function schedule({ context, args }) {
 }
 
 // src/services/skill-commands.service.ts
-import { readdir as readdir7, readFile as readFile37 } from "node:fs/promises";
-import { join as join25, relative as relative6, resolve as resolve16 } from "node:path";
+import { readdir as readdir7, readFile as readFile38 } from "node:fs/promises";
+import { join as join26, relative as relative6, resolve as resolve16 } from "node:path";
 var USAGE15 = `Usage:
   laze skill list [--agent <agentId>]
   laze skill install <catalogue-id> [--as <name>] [--agent <agentId>]
@@ -88092,8 +89328,8 @@ async function folderFiles({ root }) {
   const files2 = [];
   for (const entry of entries) {
     if (!entry.isFile()) continue;
-    const full = join25(entry.parentPath, entry.name);
-    files2.push({ path: relative6(root, full), content: await readFile37(full, "utf8") });
+    const full = join26(entry.parentPath, entry.name);
+    files2.push({ path: relative6(root, full), content: await readFile38(full, "utf8") });
   }
   return files2.toSorted((a, b) => a.path.localeCompare(b.path));
 }
@@ -88191,7 +89427,7 @@ async function skillUpdate({ context, args }) {
   if (!name3 || !newName && description === void 0 && !skillMdFile) {
     throw new CliUsageError(USAGE15);
   }
-  const skillMd = skillMdFile ? await readFile37(resolve16(context.cwd, skillMdFile), "utf8") : void 0;
+  const skillMd = skillMdFile ? await readFile38(resolve16(context.cwd, skillMdFile), "utf8") : void 0;
   const { client } = await signedIn({ context, args });
   const updated = await client.post("/api/skills/update", {
     name: name3,
@@ -88237,7 +89473,7 @@ async function skill({ context, args }) {
 }
 
 // src/services/slack-commands.service.ts
-import { readFile as readFile38 } from "node:fs/promises";
+import { readFile as readFile39 } from "node:fs/promises";
 import { resolve as resolve17 } from "node:path";
 var SLACK_USAGE = `Usage (a person's key; Slack stays the source, the bot joins no channel by itself):
   laze slack overview                            connected Slack workspaces, mirrors, your link
@@ -88285,7 +89521,7 @@ async function secretLines({ context, args }) {
     throw new CliUsageError("A secret never goes in a flag: pipe it on stdin or use --from-file.");
   }
   const file3 = flagText({ args, name: "from-file" });
-  const text2 = file3 ? await readFile38(resolve17(context.cwd, file3), "utf8") : await context.readStdin();
+  const text2 = file3 ? await readFile39(resolve17(context.cwd, file3), "utf8") : await context.readStdin();
   return text2.split("\n").map((line) => line.trim()).filter(Boolean);
 }
 async function secretsOf2({
@@ -88516,14 +89752,14 @@ function moveBody(args) {
   const name3 = flagText({ args, name: "name" });
   if (ids.length === 0 || name3 && ids.length > 1) throw new CliUsageError(SLACK_USAGE);
   const farewell = flagText({ args, name: "farewell" });
-  const invite3 = args.lists.invite ?? [];
+  const invite4 = args.lists.invite ?? [];
   return {
     teamId: wordAt8(args, 2),
     channels: ids.map((slackChannelId) => ({
       slackChannelId,
       ...name3 && { name: name3 },
       ...farewell && { farewell },
-      invite: invite3
+      invite: invite4
     }))
   };
 }
@@ -88589,7 +89825,7 @@ async function slack({
 }
 
 // src/services/sso-commands.service.ts
-import { readFile as readFile39 } from "node:fs/promises";
+import { readFile as readFile40 } from "node:fs/promises";
 var SSO_USAGE = `Usage:
   laze sso domains                                claimed domains and how each signs in (admins)
   laze sso claim <domain>                         the TXT record that proves the domain
@@ -88676,7 +89912,7 @@ function refuseSecretFlags({ args }) {
 }
 async function clientSecretOf({ context, args }) {
   const file3 = flagText({ args, name: "from-file" });
-  const text2 = file3 ? await readFile39(file3, "utf8") : await context.readStdin();
+  const text2 = file3 ? await readFile40(file3, "utf8") : await context.readStdin();
   const secret = text2.trim();
   if (!secret) throw new CliUsageError("No client secret: pipe it on stdin or use --from-file.");
   return secret;
@@ -88935,8 +90171,8 @@ async function releaseAgeSettingsOf({
   manager
 }) {
   const settings3 = [];
-  for (const { setting, read: read3 } of RELEASE_AGE_SETTINGS[manager] ?? []) {
-    const value = settingValueOf({ printed: await printedBy({ context, command: read3 }) ?? "" });
+  for (const { setting, read: read4 } of RELEASE_AGE_SETTINGS[manager] ?? []) {
+    const value = settingValueOf({ printed: await printedBy({ context, command: read4 }) ?? "" });
     if (value) settings3.push(`${setting}=${value}`);
   }
   return settings3;
@@ -89008,8 +90244,8 @@ async function update2({
 }
 
 // src/services/vault-env-commands.service.ts
-import { readFile as readFile40, stat as stat6 } from "node:fs/promises";
-import { dirname as dirname22, join as join26, resolve as resolve18 } from "node:path";
+import { readFile as readFile41, stat as stat7 } from "node:fs/promises";
+import { dirname as dirname22, join as join27, resolve as resolve18 } from "node:path";
 
 // src/rules/vault-manifest.rules.ts
 var VARIABLE = /^[A-Za-z_][A-Za-z0-9_]*$/;
@@ -89279,15 +90515,15 @@ async function valuesOf({
     return { exitCode: refused };
   }
   const opened = /* @__PURE__ */ new Map();
-  let keep = false;
+  let keep2 = false;
   for (const [key, release2] of settled2) {
     if (release2.outcome !== "allow") continue;
     opened.set(key, await envOf({ release: release2, run: run4 }));
-    if (leaseHolds({ release: release2, nowMs: context.nowMs() })) keep = true;
+    if (leaseHolds({ release: release2, nowMs: context.nowMs() })) keep2 = true;
     if (release2.message) context.err(`${release2.message}
 `);
   }
-  if (!keep) await rm14(keyPath, { force: true });
+  if (!keep2) await rm14(keyPath, { force: true });
   const released = /* @__PURE__ */ new Map();
   for (const entry of entries) {
     const fields = opened.get(keyOf(entry));
@@ -89340,7 +90576,7 @@ function refusedReason({
   return VAULT_EXIT_BAD_REASON;
 }
 async function isFile(path) {
-  return stat6(path).then(
+  return stat7(path).then(
     (found) => found.isFile(),
     () => false
   );
@@ -89354,7 +90590,7 @@ async function manifestPathOf({
   const environment = flagText({ args, name: "env" });
   const file3 = environment ? `.env.${environment}.vault` : ".env.vault";
   for (let dir = resolve18(context.cwd); ; dir = dirname22(dir)) {
-    if (await isFile(join26(dir, file3))) return join26(dir, file3);
+    if (await isFile(join27(dir, file3))) return join27(dir, file3);
     if (dirname22(dir) === dir) break;
   }
   throw new CliUsageError(`laze vault: no ${file3} here or in a parent folder
@@ -89365,7 +90601,7 @@ async function manifestOf({
   args
 }) {
   const file3 = await manifestPathOf({ context, args });
-  const text2 = await readFile40(file3, "utf8").catch(() => {
+  const text2 = await readFile41(file3, "utf8").catch(() => {
     throw new CliUsageError(`laze vault: cannot read ${file3}`);
   });
   return { file: file3, lines: parseManifest({ text: text2, file: file3 }) };
@@ -89596,7 +90832,7 @@ async function vaultScrub({ context, args }) {
 }
 
 // src/services/whatsapp-business-commands.service.ts
-import { readFile as readFile41 } from "node:fs/promises";
+import { readFile as readFile42 } from "node:fs/promises";
 import { resolve as resolve19 } from "node:path";
 
 // ../../modules/whatsapp-business/contract/src/whatsapp-business.prices.ts
@@ -89644,8 +90880,8 @@ var WHATSAPP_BUSINESS_REST_PATHS = {
 var WHATSAPP_BUSINESS_TEXT_MAX = 4096;
 var WHATSAPP_BUSINESS_LIMIT_MAX = 200;
 var WHATSAPP_BUSINESS_STATUS_WAIT_MAX_SECONDS = 50;
-var workspaceIdSchema22 = external_exports.string().min(1).max(64);
-var workspaceInput6 = external_exports.object({ workspaceId: workspaceIdSchema22 });
+var workspaceIdSchema23 = external_exports.string().min(1).max(64);
+var workspaceInput6 = external_exports.object({ workspaceId: workspaceIdSchema23 });
 var digits = (what) => external_exports.string().trim().regex(/^\d{5,30}$/, `${what} is the number Meta shows, digits only`);
 var appSecretSchema = external_exports.string().trim().regex(/^[a-f0-9]{32}$/i, "The app secret is 32 letters and digits from App settings > Basic");
 var accessTokenSchema = external_exports.string().trim().min(20, "The access token is the long permanent system user token").max(2e3).regex(/^\S+$/, "The access token is one line with no spaces");
@@ -89679,7 +90915,7 @@ var statusDefinition = external_exports.object({
 });
 var whatsappBusinessStatusSchema = statusDefinition;
 var connectDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema22,
+  workspaceId: workspaceIdSchema23,
   appId: digits("The app id"),
   wabaId: digits("The WhatsApp Business Account id"),
   phoneNumberId: digits("The phone number id"),
@@ -89702,7 +90938,7 @@ var webhookDefinition = external_exports.object({
 });
 var whatsappBusinessWebhookSchema = webhookDefinition;
 var settingsDefinition3 = external_exports.object({
-  workspaceId: workspaceIdSchema22,
+  workspaceId: workspaceIdSchema23,
   /** The agent that answers; null for none. Left out keeps the current one. */
   agentId: external_exports.string().min(1).max(64).nullable().optional(),
   replyMode: whatsappBusinessReplyModeSchema.optional()
@@ -89722,7 +90958,7 @@ var whatsappBusinessConversationSchema = conversationDefinition;
 var limitSchema2 = external_exports.number().int().min(1).max(WHATSAPP_BUSINESS_LIMIT_MAX);
 var contactRefSchema = external_exports.string().trim().min(1).max(64);
 var conversationsInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema22,
+  workspaceId: workspaceIdSchema23,
   limit: limitSchema2.optional()
 });
 var whatsappBusinessConversationsInputSchema = conversationsInputDefinition;
@@ -89748,7 +90984,7 @@ var messageDefinition2 = external_exports.object({
   template: external_exports.string().nullable()
 });
 var readInputDefinition2 = external_exports.object({
-  workspaceId: workspaceIdSchema22,
+  workspaceId: workspaceIdSchema23,
   contact: contactRefSchema,
   limit: limitSchema2.optional()
 });
@@ -89757,12 +90993,12 @@ var readDefinition = external_exports.object({
   messages: external_exports.array(messageDefinition2)
 });
 var sendInputDefinition2 = external_exports.object({
-  workspaceId: workspaceIdSchema22,
+  workspaceId: workspaceIdSchema23,
   to: contactRefSchema,
   text: external_exports.string().trim().min(1).max(WHATSAPP_BUSINESS_TEXT_MAX)
 });
 var sendTemplateInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema22,
+  workspaceId: workspaceIdSchema23,
   to: contactRefSchema,
   template: external_exports.string().trim().min(1).max(512),
   /** The template's language code; the only approved one when left out. */
@@ -89789,7 +91025,7 @@ function whatsappBusinessSendSettled({
   return state !== "waiting" && state !== "sending";
 }
 var sendStatusInputDefinition2 = external_exports.object({
-  workspaceId: workspaceIdSchema22,
+  workspaceId: workspaceIdSchema23,
   sendId: external_exports.string().min(1).max(64),
   waitSeconds: external_exports.number().int().min(0).max(WHATSAPP_BUSINESS_STATUS_WAIT_MAX_SECONDS).default(0)
 });
@@ -89839,7 +91075,7 @@ var restSendStatusDefinition2 = sendStatusInputDefinition2.omit({ workspaceId: t
 var restSettingsDefinition = settingsDefinition3.omit({ workspaceId: true });
 var restEmptyDefinition = external_exports.object({});
 var WhatsappBusinessApi = moduleApi()("whatsapp-business");
-var whatsappBusinessTrpc = defineTrpcContract("whatsappBusiness").query("status").withInput(workspaceInput6).withOutput(whatsappBusinessStatusSchema).mutation("connect").withInput(connectWhatsappBusinessInputSchema).withOutput(whatsappBusinessWebhookSchema).mutation("check").withInput(workspaceInput6).withOutput(whatsappBusinessStatusSchema).mutation("verifyToken").withInput(workspaceInput6).withOutput(whatsappBusinessWebhookSchema).mutation("settings").withInput(updateWhatsappBusinessSettingsInputSchema).withOutput(whatsappBusinessStatusSchema).mutation("disconnect").withInput(workspaceInput6).withOutput(whatsappBusinessStatusSchema).query("conversations").withInput(whatsappBusinessConversationsInputSchema).withOutput(external_exports.array(whatsappBusinessConversationSchema)).query("templates").withInput(workspaceInput6).withOutput(external_exports.array(whatsappBusinessTemplateSchema)).query("prices").withInput(external_exports.object({ ...pricesInputDefinition.shape, workspaceId: workspaceIdSchema22 })).withOutput(whatsappBusinessPricesSchema).build();
+var whatsappBusinessTrpc = defineTrpcContract("whatsappBusiness").query("status").withInput(workspaceInput6).withOutput(whatsappBusinessStatusSchema).mutation("connect").withInput(connectWhatsappBusinessInputSchema).withOutput(whatsappBusinessWebhookSchema).mutation("check").withInput(workspaceInput6).withOutput(whatsappBusinessStatusSchema).mutation("verifyToken").withInput(workspaceInput6).withOutput(whatsappBusinessWebhookSchema).mutation("settings").withInput(updateWhatsappBusinessSettingsInputSchema).withOutput(whatsappBusinessStatusSchema).mutation("disconnect").withInput(workspaceInput6).withOutput(whatsappBusinessStatusSchema).query("conversations").withInput(whatsappBusinessConversationsInputSchema).withOutput(external_exports.array(whatsappBusinessConversationSchema)).query("templates").withInput(workspaceInput6).withOutput(external_exports.array(whatsappBusinessTemplateSchema)).query("prices").withInput(external_exports.object({ ...pricesInputDefinition.shape, workspaceId: workspaceIdSchema23 })).withOutput(whatsappBusinessPricesSchema).build();
 
 // ../../modules/whatsapp-business/contract/src/whatsapp-business.config.ts
 var whatsappBusinessConfig = Config.define((c) => ({
@@ -90016,7 +91252,7 @@ async function secretsOf3({ context, args }) {
   const fromConnection = flagText({ args, name: "from-vault" });
   if (fromConnection) return { fromConnection };
   const file3 = flagText({ args, name: "from-file" });
-  const text2 = file3 ? await readFile41(resolve19(context.cwd, file3), "utf8") : await context.readStdin();
+  const text2 = file3 ? await readFile42(resolve19(context.cwd, file3), "utf8") : await context.readStdin();
   const lines2 = text2.split("\n").map((line) => line.trim()).filter(Boolean);
   if (lines2.length !== 2) {
     throw new CliUsageError(
@@ -90049,7 +91285,7 @@ var conversations = async ({ context, args, client }) => {
 `);
   }
 };
-var read = async ({ context, args, client }) => {
+var read2 = async ({ context, args, client }) => {
   const answer5 = await client.post(WHATSAPP_BUSINESS_REST_PATHS.read, {
     contact: wordAt9(args, 2),
     ...limitOf4(args)
@@ -90193,7 +91429,7 @@ var disconnect5 = async ({ context, args, client }) => {
 var RUNS6 = {
   status: status7,
   conversations,
-  read,
+  read: read2,
   send: send3,
   "send-template": sendTemplate,
   "send-status": sendStatus,
@@ -90268,7 +91504,7 @@ async function pairing({ context, args }) {
   });
   await report2({ context, args, pairing: answer5 });
 }
-async function cancel2({ context, args }) {
+async function cancel3({ context, args }) {
   const pairingId = wordAt10({ args, at: 2 });
   const client = await computeClient({ context, args });
   const answer5 = await client.post(COMPUTE_WHATSAPP_REST_PATHS.cancelPairing, {
@@ -90288,7 +91524,7 @@ async function unpair({ context, args }) {
   context.out(`WhatsApp is unlinked from ${answer5.name}.
 `);
 }
-var COMMANDS2 = { pair, pairing, cancel: cancel2, unpair };
+var COMMANDS2 = { pair, pairing, cancel: cancel3, unpair };
 function whatsappPairingCommand(name3) {
   return name3 && Object.hasOwn(COMMANDS2, name3) ? COMMANDS2[name3] : void 0;
 }
@@ -90342,7 +91578,7 @@ async function chats({ context, args }) {
     );
   }
 }
-async function read2({ context, args }) {
+async function read3({ context, args }) {
   const client = await computeClient({ context, args });
   const answer5 = await client.post(
     PATHS3.read,
@@ -90407,7 +91643,7 @@ async function whatsapp({
 }) {
   const command = args.words[1];
   if (command === "chats") return chats({ context, args });
-  if (command === "read") return read2({ context, args });
+  if (command === "read") return read3({ context, args });
   if (command === "send") return send4({ context, args });
   if (command === "status") return status8({ context, args });
   const linking = whatsappPairingCommand(command);
@@ -90639,6 +91875,7 @@ var HELP = `laze: work in a Laze workspace from your terminal or your agent.
   laze workspace leave                           leave this workspace
   laze workspace delete --confirm <name> | cancel-deletion   schedule its deletion, or take it back (Owners)
   laze members                                   the workspace's people, each with their role
+  laze invite [--to <conversation>] [--yes] <email>...   invite people to a chat; shows the price first
   laze members invite <email> [--role owner|admin|member|guest]   invite someone (admins)
   laze members invites | revoke-invite <email|id>   invitations waiting, or take one back (admins)
   laze members invite-link <email|id>            a fresh link for an invitation, shown once (admins)
@@ -90750,6 +91987,12 @@ var HELP = `laze: work in a Laze workspace from your terminal or your agent.
   laze agent retry <agent> --channel <id> --message <id>  Try again on its failed turn on that message
   laze agent invite [--name <name>] [--channel <id>]   a one-time link that connects a new agent;
                                                  without --name the agent picks its own
+  laze agent invite --reconnect <agent>          a link that connects one of your agents again with a new key,
+                                                 a migrated one back on its own machine
+  laze agent migrate <agent> [--to claude-code|codex|laze-models] [--level fast|frontier] [--resend]
+      move your connected agent into Laze as the same agent; its session uploads its conversation, secrets removed
+  laze agent migrate status|cancel <agent>       the latest migration, or cancel one still waiting
+  laze agent migrate upload <migrationId>        run inside the agent's own session: hands its transcript to Laze
   laze agent faces                               every agent's sloth seed or picture
   laze adopt codex [--thread <id>]               answer Laze messages in a Codex thread
   laze adopt codex --status | --stop             the background adopt that laze agent link started
@@ -90852,6 +92095,7 @@ var COMMANDS3 = {
   workspaces,
   workspace,
   members: members2,
+  invite: invite3,
   update: update2,
   "channels list": listChannels,
   "channel set": setChannelLevel,
@@ -91015,6 +92259,7 @@ var COMMANDS3 = {
   "agent retry": retryAgentTurn,
   "agent disconnect": disconnectAgent,
   "agent invite": inviteAgent,
+  "agent migrate": agentMigrate,
   "mcp gateway": serveMcpGateway,
   mcp: (input2) => serveMcp({ ...input2, runCommandLine: runCli })
 };
@@ -91058,7 +92303,8 @@ async function runCli({
     [browser, `${BROWSER_USAGE}
 `],
     [external, `${EXTERNAL_USAGE}
-`]
+`],
+    [agentMigrate, MIGRATE_USAGE]
   ]);
   if (command && args.flags.help && ownHelp.has(command)) {
     context.out(ownHelp.get(command) ?? HELP);
@@ -91072,19 +92318,26 @@ async function runCli({
     const quiet = args.words[0] === "hook";
     return await command({ context: watchingRelease({ context, quiet }), args }) ?? 0;
   } catch (error62) {
-    if (error62 instanceof CliUsageError) context.err(`${error62.message}
+    return exitCodeOf({ context, error: error62 });
+  }
+}
+function exitCodeOf({ context, error: error62 }) {
+  if (error62 instanceof ProfileMigratedError) return 0;
+  const migrated = migratedNoticeOf(error62);
+  if (migrated) context.err(`${migrated.notice}
 `);
-    else if (error62 instanceof LazeApiError) context.err(`laze: ${error62.message} (${error62.code})
+  else if (error62 instanceof CliUsageError) context.err(`${error62.message}
 `);
-    else throw error62;
-    return 1;
-  }
+  else if (error62 instanceof LazeApiError) context.err(`laze: ${error62.message} (${error62.code})
+`);
+  else throw error62;
+  return 1;
 }
 
 // src/services/processes.service.ts
 import { execFile as execFile2, spawn as spawn4 } from "node:child_process";
 import { mkdirSync, openSync } from "node:fs";
-import { readFile as readFile42, readlink } from "node:fs/promises";
+import { readFile as readFile43, readlink } from "node:fs/promises";
 import { dirname as dirname23 } from "node:path";
 import { promisify as promisify2 } from "node:util";
 var run3 = promisify2(execFile2);
@@ -91098,15 +92351,15 @@ function alive(pid) {
   }
 }
 async function argsOf(pid) {
-  const raw = await readFile42(`/proc/${pid}/cmdline`, "utf8").catch(() => void 0);
+  const raw = await readFile43(`/proc/${pid}/cmdline`, "utf8").catch(() => void 0);
   if (raw) return raw.split("\0").filter(Boolean);
   const listed = await run3("ps", ["-o", "args=", "-p", String(pid)]).catch(() => void 0);
   const line = listed?.stdout.trim();
   return line ? line.split(/\s+/) : void 0;
 }
 async function parentOf(pid) {
-  const stat7 = await readFile42(`/proc/${pid}/stat`, "utf8").catch(() => void 0);
-  const fromStat = stat7 ? Number(stat7.slice(stat7.lastIndexOf(")") + 2).split(" ")[1]) : NaN;
+  const stat8 = await readFile43(`/proc/${pid}/stat`, "utf8").catch(() => void 0);
+  const fromStat = stat8 ? Number(stat8.slice(stat8.lastIndexOf(")") + 2).split(" ")[1]) : NaN;
   if (fromStat > 0) return fromStat;
   const listed = await run3("ps", ["-o", "ppid=", "-p", String(pid)]).catch(() => void 0);
   const parent = Number(listed?.stdout.trim());