@lazehq/cli 0.1.6 → 0.1.7

package/dist/laze.mjs

@@ -8493,11 +8493,12 @@ var ConfigStore = class _ConfigStore {
   async saveProfile({
     name: name2,
     profile,
-    bindDirectory
+    bindDirectory,
+    onlyThere = false
   }) {
     const config2 = await this.read();
     await this.write({
-      current: bindDirectory ? config2.current ?? name2 : name2,
+      current: bindDirectory && (onlyThere || config2.current) ? config2.current : name2,
       profiles: { ...config2.profiles, [name2]: profile },
       bindings: bindDirectory ? { ...config2.bindings, [resolve(bindDirectory)]: name2 } : config2.bindings
     });
@@ -8603,7 +8604,7 @@ function flagText({
 }
 
 // src/rules/cli-version.rules.ts
-var STAMPED = "0.1.6";
+var STAMPED = "0.1.7";
 function cliVersionOf({ stamped = STAMPED } = {}) {
   return stamped.startsWith("__") ? "dev" : stamped;
 }
@@ -31071,12 +31072,41 @@ var muteCardSchemaDefinition = external_exports.object({
   /** Who unmuted, once settled: "Ivy unmuted Scout". */
   outcome: external_exports.string().max(400).default("")
 });
+var loginCardStateSchema = external_exports.enum(["out", "signed_out", "waiting", "resolved"]);
+var loginCardLoginSchemaDefinition = external_exports.object({
+  id: idSchema4,
+  name: external_exports.string().max(120),
+  status: external_exports.enum(["ready", "limited", "signed_out"]),
+  /** "session limit", "weekly limit": the window that ran out, for people. */
+  window: external_exports.string().max(40).nullable(),
+  until: external_exports.iso.datetime().nullable()
+});
+var loginCardSchemaDefinition = external_exports.object({
+  type: external_exports.literal("login"),
+  agentId: idSchema4,
+  harness: external_exports.enum(["claude-code", "codex"]),
+  state: loginCardStateSchema,
+  /** The plain first line: "All of my Claude logins are out of usage." */
+  line: external_exports.string().min(1).max(400),
+  logins: external_exports.array(loginCardLoginSchemaDefinition).max(20),
+  /** The soonest reset, when waiting gets the agent going again; null when none is known. */
+  resumeAt: external_exports.iso.datetime().nullable(),
+  /** Another login has room now, so "Use another login" can move the agent at once. */
+  canSwitch: external_exports.boolean(),
+  /** The signed-out login "Sign in again" opens; null when none is signed out. */
+  signInLoginId: external_exports.string().nullable(),
+  /** The agent draws from a login pool: sign in and add go to the pool's settings. */
+  poolId: external_exports.string().nullable(),
+  /** What happened, once settled: "Back on Personal. Sam switched me." */
+  outcome: external_exports.string().max(400)
+});
 var messageCardSchemaDefinition = external_exports.discriminatedUnion("type", [
   attentionCardSchemaDefinition,
   connectCardSchemaDefinition,
   appCardSchemaDefinition,
   computerCardSchemaDefinition,
-  muteCardSchemaDefinition
+  muteCardSchemaDefinition,
+  loginCardSchemaDefinition
 ]);
 var messageRefSchemaDefinition = external_exports.object({
   /** `conversation` points at a conversation with the agent, by its channel. */
@@ -31188,7 +31218,7 @@ var directoryEntrySchemaDefinition = external_exports.object({
   id: idSchema4,
   name: external_exports.string(),
   email: external_exports.string().nullable(),
-  /** An agent out of usage on its login until then; null for people and agents that can work. */
+  /** An agent out of usage until then; null for people and agents that can work. */
   limitedUntil: external_exports.iso.datetime().nullable().default(null),
   /** An agent removed from the workspace, when and by whom; null while it is active. */
   removedAt: external_exports.iso.datetime().nullable().default(null),
@@ -31271,6 +31301,8 @@ var createChannelInputSchemaDefinition = external_exports.object({
   topic: external_exports.string().trim().max(250).default(""),
   /** People added beside the creator. */
   memberUserIds: external_exports.array(idSchema4).max(100).default([]),
+  /** An agent creator's name, kept on its membership so notices name it. */
+  creatorName: external_exports.string().trim().min(1).max(80).optional(),
   /** Makes it a temporary channel that archives itself then, 1 hour to 30 days ahead. */
   endsAt: external_exports.iso.datetime().optional()
 });
@@ -31372,6 +31404,11 @@ var openAgentDirectInputSchemaDefinition = external_exports.object({
     runsOutside: external_exports.boolean().optional()
   })
 });
+var agentChatMemberInputSchemaDefinition = external_exports.object({
+  ...openAgentDirectInputSchemaDefinition.shape,
+  ownerUserId: idSchema4,
+  userId: idSchema4
+});
 var historyInputSchemaDefinition = external_exports.object({
   workspaceId: workspaceIdSchema,
   channelId: idSchema4,
@@ -31719,6 +31756,12 @@ var threadsInputSchemaDefinition = external_exports.object({
 var threadsInputSchema = threadsInputSchemaDefinition;
 var threadsUnreadSchemaDefinition = external_exports.object({ unread: external_exports.number().int().nonnegative() });
 var threadsUnreadSchema = threadsUnreadSchemaDefinition;
+var workspaceUnreadSchemaDefinition = external_exports.object({
+  workspaceId: workspaceIdSchema,
+  unread: external_exports.number().int().nonnegative(),
+  mentions: external_exports.number().int().nonnegative()
+});
+var workspaceUnreadSchema = workspaceUnreadSchemaDefinition;
 var activityKindSchema = external_exports.enum(["mention", "thread_reply", "keyword", "reaction"]);
 var activityItemSchemaDefinition = external_exports.object({
   id: idSchema4,
@@ -31734,7 +31777,9 @@ var activityItemSchemaDefinition = external_exports.object({
   emoji: external_exports.string().nullable(),
   preview: external_exports.string(),
   createdAt: external_exports.iso.datetime(),
-  read: external_exports.boolean()
+  read: external_exports.boolean(),
+  /** The reader posted in the entry's thread, or in its conversation, after the entry. */
+  answered: external_exports.boolean().default(false)
 });
 var activityPageSchemaDefinition = external_exports.object({
   items: external_exports.array(activityItemSchemaDefinition),
@@ -31854,7 +31899,9 @@ var sidebarLayoutSchemaDefinition = external_exports.object({
   placements: external_exports.record(idSchema4, idSchema4),
   filters: external_exports.record(external_exports.string().min(1).max(200), sidebarFilterSchemaDefinition),
   /** Starred conversations in the order starred; they leave their usual section. */
-  starred: external_exports.array(idSchema4).max(SIDEBAR_STARRED_MAX)
+  starred: external_exports.array(idSchema4).max(SIDEBAR_STARRED_MAX),
+  /** Section keys the person folded; built-in keys or custom section ids. */
+  folded: external_exports.array(external_exports.string().min(1).max(200)).max(200).optional()
 });
 var sidebarLayoutSchema = sidebarLayoutSchemaDefinition;
 var editSidebarInputSchemaDefinition = external_exports.discriminatedUnion("op", [
@@ -31893,6 +31940,12 @@ var editSidebarInputSchemaDefinition = external_exports.discriminatedUnion("op",
     op: external_exports.literal("star"),
     channelId: idSchema4,
     starred: external_exports.boolean()
+  }),
+  external_exports.object({
+    workspaceId: workspaceIdSchema,
+    op: external_exports.literal("fold"),
+    sectionKey: external_exports.string().min(1).max(200),
+    folded: external_exports.boolean()
   })
 ]);
 var editSidebarInputSchema = editSidebarInputSchemaDefinition;
@@ -31920,7 +31973,7 @@ var readableTextInputSchemaDefinition = external_exports.object({
   bodies: external_exports.array(external_exports.string()).max(HISTORY_PAGE_MAX)
 });
 var ChatApi = moduleApi()("chat");
-var chatConversationsTrpc = defineTrpcContract("chat").query("overview").withInput(workspaceInputSchema).withOutput(chatOverviewSchema).query("browse").withInput(workspaceInputSchema).withOutput(external_exports.array(browsableChannelSchema)).mutation("createChannel").withInput(createChannelInputSchema).withOutput(conversationSchema).mutation("join").withInput(channelInputSchema).withOutput(conversationSchema).mutation("leave").withInput(channelInputSchema).withOutput(external_exports.object({ left: external_exports.literal(true) })).mutation("updateChannel").withInput(updateChannelInputSchema).withOutput(conversationSchema).mutation("archiveChannel").withInput(channelInputSchema).withOutput(conversationSchema).mutation("unarchiveChannel").withInput(channelInputSchema).withOutput(conversationSchema).mutation("addMembers").withInput(addMembersInputSchema).withOutput(conversationSchema).mutation("removeMember").withInput(removeMemberInputSchema).withOutput(conversationSchema).mutation("openDirect").withInput(openDirectInputSchema).withOutput(conversationSchema).query("conversation").withInput(channelInputSchema).withOutput(conversationSchema).build();
+var chatConversationsTrpc = defineTrpcContract("chat").query("overview").withInput(workspaceInputSchema).withOutput(chatOverviewSchema).query("unreadSummary").withInput(external_exports.object({})).withOutput(external_exports.array(workspaceUnreadSchema)).query("browse").withInput(workspaceInputSchema).withOutput(external_exports.array(browsableChannelSchema)).mutation("createChannel").withInput(createChannelInputSchema).withOutput(conversationSchema).mutation("join").withInput(channelInputSchema).withOutput(conversationSchema).mutation("leave").withInput(channelInputSchema).withOutput(external_exports.object({ left: external_exports.literal(true) })).mutation("updateChannel").withInput(updateChannelInputSchema).withOutput(conversationSchema).mutation("archiveChannel").withInput(channelInputSchema).withOutput(conversationSchema).mutation("unarchiveChannel").withInput(channelInputSchema).withOutput(conversationSchema).mutation("addMembers").withInput(addMembersInputSchema).withOutput(conversationSchema).mutation("removeMember").withInput(removeMemberInputSchema).withOutput(conversationSchema).mutation("openDirect").withInput(openDirectInputSchema).withOutput(conversationSchema).query("conversation").withInput(channelInputSchema).withOutput(conversationSchema).build();
 var chatChannelRolesTrpc = defineTrpcContract("chat").mutation("setChannelRole").withInput(setChannelRoleInputSchema).withOutput(conversationSchema).mutation("extendChannel").withInput(extendChannelInputSchema).withOutput(conversationSchema).build();
 var chatMessagesTrpc = defineTrpcContract("chat").query("history").withInput(historyInputSchema).withOutput(historyPageSchema).query("thread").withInput(messageInputSchema).withOutput(threadSchema).mutation("post").withInput(postMessageInputSchema).withOutput(messageSchema).mutation("addMentioned").withInput(addMentionedInputSchema).withOutput(messageSchema).mutation("edit").withInput(editMessageInputSchema).withOutput(messageSchema).mutation("delete").withInput(messageInputSchema).withOutput(messageSchema).mutation("remove").withInput(messageInputSchema).withOutput(messageSchema).mutation("react").withInput(reactInputSchema).withOutput(messageSchema).mutation("signalTyping").withInput(signalTypingInputSchema).withOutput(external_exports.object({ sent: external_exports.literal(true) })).mutation("markRead").withInput(markReadInputSchema).withOutput(external_exports.object({ lastReadSeq: external_exports.number().int().nonnegative() })).mutation("markUnread").withInput(markUnreadInputSchema).withOutput(external_exports.object({ lastReadSeq: external_exports.number().int().nonnegative() })).query("search").withInput(searchInputSchema).withOutput(searchResultSchema).build();
 var chatFilesTrpc = defineTrpcContract("chat").mutation("startUpload").withInput(startUploadInputSchema).withOutput(uploadTicketSchema).mutation("completeUpload").withInput(completeUploadInputSchema).withOutput(attachmentSchema).mutation("abortUpload").withInput(fileInputSchema).withOutput(external_exports.object({ aborted: external_exports.literal(true) })).query("fileLink").withInput(fileLinkInputSchema).withOutput(fileLinkSchema).query("channelFiles").withInput(channelFilesInputSchema).withOutput(channelFilesSchema).mutation("renameAttachment").withInput(renameAttachmentInputSchema).withOutput(attachmentSchema).mutation("hideUnfurl").withInput(hideUnfurlInputSchema).withOutput(messageSchema).query("unfurlImage").withInput(hideUnfurlInputSchema).withOutput(fileLinkSchema).build();
@@ -31940,6 +31993,53 @@ var chatTrpc = joinTrpcContracts(
   chatPresenceTrpc
 );
 
+// ../../modules/notification/contract/src/apns.ts
+var APNS_DEFAULT_BUNDLE_ID = "ai.langwatch.laze";
+var APNS_APPROVAL_CATEGORY = "LAZE_APPROVAL";
+var apnsEnvironmentSchema = external_exports.enum(["sandbox", "production"]);
+var apnsTokenSchema = external_exports.string().regex(/^[0-9a-fA-F]{64,200}$/, "an APNs device token is 64 to 200 hex characters").transform((token2) => token2.toLowerCase());
+var installIdSchema = external_exports.string().regex(/^[A-Za-z0-9_-]{8,128}$/, "an install id is 8 to 128 letters, digits, - or _");
+var bundleIdSchema = external_exports.string().regex(/^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)+$/, "a bundle id such as ai.langwatch.laze").max(155);
+var registerApnsDeviceInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  installId: installIdSchema,
+  token: apnsTokenSchema,
+  environment: apnsEnvironmentSchema,
+  bundleId: bundleIdSchema
+}).strict();
+var registerApnsDeviceInputSchema = registerApnsDeviceInputSchemaDefinition;
+var unregisterApnsDeviceInputSchemaDefinition = external_exports.object({ workspaceId: external_exports.string().min(1), installId: installIdSchema }).strict();
+var unregisterApnsDeviceInputSchema = unregisterApnsDeviceInputSchemaDefinition;
+var apnsDeviceSchemaDefinition = external_exports.object({
+  id: external_exports.string().min(1),
+  tenantId: external_exports.string().min(1),
+  userId: external_exports.string().min(1),
+  installId: external_exports.string().min(1),
+  token: external_exports.string().min(1),
+  environment: apnsEnvironmentSchema,
+  bundleId: external_exports.string().min(1),
+  createdAt: external_exports.date(),
+  lastSuccessAt: external_exports.date().nullable()
+}).strict();
+var apnsStatusSchemaDefinition = external_exports.object({ available: external_exports.boolean(), bundleId: external_exports.string().min(1) }).strict();
+var apnsStatusSchema = apnsStatusSchemaDefinition;
+var apnsPayloadSchemaDefinition = external_exports.object({
+  aps: external_exports.object({
+    alert: external_exports.object({ title: external_exports.string().min(1).max(120), body: external_exports.string().max(400) }).optional(),
+    badge: external_exports.number().int().nonnegative().optional(),
+    sound: external_exports.literal("default").optional(),
+    "thread-id": external_exports.string().min(1).max(200).optional(),
+    category: external_exports.literal(APNS_APPROVAL_CATEGORY).optional(),
+    "interruption-level": external_exports.enum(["active", "time-sensitive"]).optional(),
+    "content-available": external_exports.literal(1).optional()
+  }).strict(),
+  workspaceId: external_exports.string().min(1),
+  link: external_exports.string().startsWith("laze://").max(2048).optional(),
+  /** The message's place in its conversation, so a later clear can match it. */
+  seq: external_exports.number().int().nonnegative().optional(),
+  clear: external_exports.object({ threadId: external_exports.string().min(1).max(200), upToSeq: external_exports.number().int().nonnegative() }).strict().optional()
+}).strict();
+
 // ../../modules/notification/contract/src/web-push.ts
 var WEB_PUSH_TITLE_MAX = 120;
 var WEB_PUSH_BODY_MAX = 400;
@@ -32137,7 +32237,9 @@ var feedNoticeSchema = external_exports.object({
   body: external_exports.string().max(400),
   /** The feed page, opened on the item or the brief. */
   path: external_exports.string().startsWith("/").max(1024),
-  urgent: external_exports.boolean().default(false)
+  urgent: external_exports.boolean().default(false),
+  /** The feed event behind the push: each new event pushes, a retried one does not. */
+  eventId: external_exports.string().min(1).max(200).optional()
 });
 var notifyInputSchemaDefinition = external_exports.discriminatedUnion("kind", [
   messageNoticeSchema,
@@ -32187,7 +32289,7 @@ var notificationTrpc = defineTrpcContract("notification").query("settings").with
     subscription: webPushSubscriptionInputSchema,
     userAgent: external_exports.string().max(512).nullable().optional()
   })
-).withOutput(external_exports.object({ subscribed: external_exports.literal(true) })).mutation("unsubscribeWebPush").withInput(external_exports.object({ workspaceId: workspaceIdSchema2, endpoint: external_exports.string().min(1).max(2048) })).withOutput(external_exports.object({ unsubscribed: external_exports.literal(true) })).build();
+).withOutput(external_exports.object({ subscribed: external_exports.literal(true) })).mutation("unsubscribeWebPush").withInput(external_exports.object({ workspaceId: workspaceIdSchema2, endpoint: external_exports.string().min(1).max(2048) })).withOutput(external_exports.object({ unsubscribed: external_exports.literal(true) })).query("apnsStatus").withInput(workspaceInputSchema2).withOutput(apnsStatusSchema).mutation("registerApnsDevice").withInput(registerApnsDeviceInputSchema).withOutput(external_exports.object({ registered: external_exports.literal(true) })).mutation("unregisterApnsDevice").withInput(unregisterApnsDeviceInputSchema).withOutput(external_exports.object({ unregistered: external_exports.literal(true) })).build();
 
 // ../../packages/config/src/config.ts
 var ConfigLeaf = class {
@@ -32399,6 +32501,19 @@ var notificationConfig = Config.define((c) => ({
   publicBaseUrl,
   /** A dev push service accepted beside the browsers' own, such as a local stand-in. */
   webPushServiceBase: c.env("WEB_PUSH_SERVICE_BASE", external_exports.string().optional()),
+  /** The APNs auth key's id and the Apple team; with APNS_KEY_P8 they turn iPhone push on. */
+  apnsKeyId: c.env(
+    "APNS_KEY_ID",
+    external_exports.string().regex(/^[A-Z0-9]{10}$/).optional()
+  ),
+  apnsTeamId: c.env(
+    "APNS_TEAM_ID",
+    external_exports.string().regex(/^[A-Z0-9]{10}$/).optional()
+  ),
+  /** The iPhone app's bundle id, the topic of every push. */
+  apnsBundleId: c.env("APNS_BUNDLE_ID", external_exports.string().min(3).default(APNS_DEFAULT_BUNDLE_ID)),
+  /** host[:port] for both APNs environments instead of Apple's, such as a test stand-in. */
+  apnsHost: c.env("APNS_HOST", external_exports.string().min(1).optional()),
   /** A person seen this recently is around: pushes still go, the away email waits. */
   presenceWindowSeconds: c.env(
     "NOTIFICATION_PRESENCE_SECONDS",
@@ -32622,6 +32737,13 @@ var realtimePublicationSchemaDefinition = external_exports.discriminatedUnion("t
   }),
   /** The writer's own draft changed on another device or was sent; empty text means cleared. */
   external_exports.object({ type: external_exports.literal("draft_changed"), workspaceId: external_exports.string(), draft: draftSchema }),
+  /** A vault approval card was asked or settled: the approver's Approvals list reads again. */
+  external_exports.object({
+    type: external_exports.literal("vault_approval_changed"),
+    workspaceId: external_exports.string(),
+    approvalId: external_exports.string(),
+    state: external_exports.enum(["pending", "approved_once", "approved_for_agent", "denied", "expired"])
+  }),
   /** Notification's desktop publication, relayed: a native notification and the badge. */
   desktopPublicationSchema
 ]);
@@ -32709,7 +32831,12 @@ var harnessQuestionSchemaDefinition = external_exports.object({
   /** Whether a typed answer is accepted besides the options. */
   allowOther: external_exports.boolean().default(true)
 });
-var attentionClosedReasonSchema = external_exports.enum(["cancelled", "interrupted", "turn_ended"]);
+var attentionClosedReasonSchema = external_exports.enum([
+  "cancelled",
+  "interrupted",
+  "turn_ended",
+  "answered_earlier"
+]);
 var permissionDecisionSchema2 = external_exports.enum(["allowed", "skipped"]);
 var permissionSkipReasonSchema = external_exports.enum(["question", "plan", "plan_mode"]);
 var lazeAgentEventSchemaDefinition = external_exports.discriminatedUnion("type", [
@@ -33141,6 +33268,12 @@ var hostFrameSchemaDefinition = external_exports.discriminatedUnion("type", [
     channelId: external_exports.string().min(1),
     frameId: external_exports.string().min(1).optional()
   }),
+  /** Stops the running turn and retires the session; the next message starts a fresh one. */
+  external_exports.object({
+    type: external_exports.literal("reset"),
+    channelId: external_exports.string().min(1),
+    frameId: external_exports.string().min(1).optional()
+  }),
   external_exports.object({
     type: external_exports.literal("attention_answer"),
     channelId: external_exports.string().min(1),
@@ -33368,7 +33501,16 @@ var agentRuntimeConfig = Config.define((c) => ({
     positive.default(20)
   ),
   /** The progress board's alerts folder; unset, a full host is only logged. */
-  computerAlertDir: c.env("AGENT_RUNTIME_COMPUTER_ALERT_DIR", external_exports.string().min(1).optional())
+  computerAlertDir: c.env("AGENT_RUNTIME_COMPUTER_ALERT_DIR", external_exports.string().min(1).optional()),
+  /** Staff get a POST here once per capacity incident; unset, only the board alert. */
+  opsWebhookUrl: c.env("AGENT_RUNTIME_OPS_WEBHOOK_URL", external_exports.url().optional()),
+  /** How often the worker asks each host's vmd for its report. */
+  computerHostProbeSeconds: c.env(
+    "AGENT_RUNTIME_COMPUTER_HOST_PROBE_SECONDS",
+    positive.default(60)
+  ),
+  /** How long a wake waits for its computer's move before it fails with computer_moving. */
+  computerMoveWaitSeconds: c.env("AGENT_RUNTIME_COMPUTER_MOVE_WAIT_SECONDS", positive.default(600))
 }));
 
 // ../../modules/agent-runtime/contract/src/computer-guard.ts
@@ -33394,6 +33536,127 @@ var computerNoteDefinition = external_exports.object({
   text: external_exports.string().min(1).max(500)
 });
 
+// ../../modules/agent-runtime/contract/src/computer-pool.ts
+var computerHostStateSchema = external_exports.enum(["active", "cordoned", "draining"]);
+var computerHostCapacityDefinition = external_exports.object({
+  vcpus: external_exports.number().positive(),
+  memoryMb: external_exports.number().int().positive(),
+  diskGb: external_exports.number().int().positive(),
+  overcommit: external_exports.number().positive(),
+  diskOvercommit: external_exports.number().positive()
+});
+var hostIdSchema = external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,31}$/, "a host name is 1 to 32 of a-z, 0-9 and -");
+var addComputerHostInputDefinition = external_exports.object({
+  hostId: hostIdSchema,
+  vmdUrl: external_exports.string().regex(/^(unix:\/|http:\/\/)/, "vmd is unix:<socket> or http://host:port"),
+  poolAddress: external_exports.string().nullable(),
+  bridgeCidr: external_exports.string().min(1),
+  ...computerHostCapacityDefinition.shape
+});
+var computerHostViewDefinition = external_exports.object({
+  ...addComputerHostInputDefinition.shape,
+  state: computerHostStateSchema,
+  healthy: external_exports.boolean(),
+  reportedAt: external_exports.string().nullable(),
+  reservedMemoryMb: external_exports.number(),
+  reservedCpus: external_exports.number(),
+  reservedDiskGb: external_exports.number(),
+  computers: external_exports.number().int(),
+  runningMemoryMb: external_exports.number().nullable(),
+  diskFreeGb: external_exports.number().nullable()
+});
+var computerResizeOutcomeSchema = external_exports.enum(["in_place", "moving", "stored"]);
+var sizeShape = {
+  memoryMb: external_exports.number().int().positive(),
+  cpus: external_exports.number().positive(),
+  diskGb: external_exports.number().int().positive()
+};
+var computerPoolFactDefinition = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("host_registered"),
+    hostId: external_exports.string(),
+    vmdUrl: external_exports.string(),
+    ...computerHostCapacityDefinition.shape
+  }),
+  external_exports.object({
+    kind: external_exports.literal("host_state_changed"),
+    hostId: external_exports.string(),
+    state: computerHostStateSchema
+  }),
+  external_exports.object({ kind: external_exports.literal("host_health_changed"), hostId: external_exports.string(), healthy: external_exports.boolean() }),
+  external_exports.object({ kind: external_exports.literal("host_removed"), hostId: external_exports.string() }),
+  external_exports.object({
+    kind: external_exports.literal("placed"),
+    computerId: external_exports.string(),
+    workspaceId: external_exports.string(),
+    hostId: external_exports.string(),
+    reason: external_exports.enum(["new", "adopted"]),
+    ...sizeShape
+  }),
+  external_exports.object({
+    kind: external_exports.literal("unplaced"),
+    computerId: external_exports.string(),
+    workspaceId: external_exports.string(),
+    hostId: external_exports.string()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("resized"),
+    computerId: external_exports.string(),
+    workspaceId: external_exports.string(),
+    hostId: external_exports.string(),
+    ...sizeShape
+  }),
+  external_exports.object({
+    kind: external_exports.literal("move_started"),
+    moveId: external_exports.string(),
+    computerId: external_exports.string(),
+    workspaceId: external_exports.string(),
+    fromHostId: external_exports.string(),
+    toHostId: external_exports.string(),
+    ...sizeShape
+  }),
+  external_exports.object({
+    kind: external_exports.literal("moved"),
+    moveId: external_exports.string(),
+    computerId: external_exports.string(),
+    workspaceId: external_exports.string(),
+    fromHostId: external_exports.string(),
+    toHostId: external_exports.string()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("move_failed"),
+    moveId: external_exports.string(),
+    computerId: external_exports.string(),
+    workspaceId: external_exports.string(),
+    fromHostId: external_exports.string(),
+    toHostId: external_exports.string(),
+    reason: external_exports.string()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("pool_exhausted"),
+    incidentId: external_exports.string(),
+    computerId: external_exports.string(),
+    wantedMemoryMb: external_exports.number(),
+    what: external_exports.enum(["create", "wake", "resize"])
+  }),
+  external_exports.object({ kind: external_exports.literal("pool_restored"), incidentId: external_exports.string(), refusals: external_exports.number() })
+]);
+var computerPoolFactRecordDefinition = external_exports.object({
+  factId: external_exports.string().min(1),
+  /** The stream: `host:<id>`, `computer:<id>` or `incidents`. */
+  streamId: external_exports.string().min(1),
+  fact: computerPoolFactDefinition,
+  at: external_exports.iso.datetime()
+});
+var computerPoolWatchStateDefinition = external_exports.object({
+  hostId: external_exports.string().nullable(),
+  moveId: external_exports.string().nullable(),
+  computerId: external_exports.string().nullable(),
+  nextWakeAt: external_exports.number().nullable()
+});
+var computerHostProbeIntentSchemaDefinition = external_exports.object({ hostId: external_exports.string() });
+var computerMoveIntentSchemaDefinition = external_exports.object({ moveId: external_exports.string(), computerId: external_exports.string() });
+
 // ../../modules/agent/contract/src/agent-attention.ts
 var workspaceIdSchema3 = external_exports.string().min(1);
 var idSchema6 = external_exports.string().min(1).max(80);
@@ -33475,7 +33738,9 @@ var agentTurnStopRequestedPayloadSchemaDefinition = external_exports.object({
   channelId: external_exports.string().min(1),
   stopId: external_exports.string().min(1),
   stoppedByUserId: external_exports.string().min(1),
-  stoppedByName: external_exports.string().default("")
+  stoppedByName: external_exports.string().default(""),
+  /** A session reset: the turn stops and the harness starts a fresh session in the main thread. */
+  freshSession: external_exports.boolean().optional()
 });
 var agentAttentionExpiryStateSchemaDefinition = external_exports.object({
   workspaceId: external_exports.string(),
@@ -33786,6 +34051,7 @@ var vaultSealedApprovalSchemaDefinition = external_exports.object({
 var vaultSealedApprovalSchema = vaultSealedApprovalSchemaDefinition;
 var vaultUi = uiTokens("vault");
 var VaultSealedApprovalSlot = vaultUi.component("sealedApproval");
+var VaultPasskeyStepSlot = vaultUi.component("passkeyStep");
 var VaultNavSlot = vaultUi.component("nav");
 var answerSealedApprovalInputSchemaDefinition = external_exports.object({
   workspaceId: external_exports.string().min(1),
@@ -34148,7 +34414,9 @@ var openVaultTurnInputSchemaDefinition = external_exports.object({
   /** The requester's messages in this conversation, oldest first: the judge's permission. */
   requesterMessages: external_exports.array(external_exports.string()).default([]),
   /** Everyone else's messages, oldest first: context for the judge, never permission. */
-  otherMessages: external_exports.array(external_exports.object({ sender: external_exports.string().min(1), text: external_exports.string() })).default([])
+  otherMessages: external_exports.array(external_exports.object({ sender: external_exports.string().min(1), text: external_exports.string() })).default([]),
+  /** A shorter life than the deployment's turn TTL, for a token made for one command. */
+  ttlMinutes: external_exports.number().int().positive().optional()
 });
 var vaultAlwaysApprovalActionSchema = external_exports.enum([
   "send_external",
@@ -34263,7 +34531,11 @@ var vaultApprovalRequestSchemaDefinition = external_exports.object({
   answeredAt: external_exports.iso.datetime().nullable(),
   leaseExpiresAt: external_exports.iso.datetime().nullable(),
   /** What the person who answered told the agent; empty when nothing. */
-  resolutionNote: external_exports.string().default("")
+  resolutionNote: external_exports.string().default(""),
+  /** The connection's title, so an approver who cannot list it still knows what is asked. */
+  connectionTitle: external_exports.string().nullable().default(null),
+  /** The longest lease Allow for this agent offers; null offers only once and deny. */
+  maxLeaseSeconds: external_exports.number().int().positive().nullable().default(null)
 });
 var vaultApprovalRequestSchema = vaultApprovalRequestSchemaDefinition;
 var answerVaultApprovalInputSchemaDefinition = external_exports.object({
@@ -34556,7 +34828,9 @@ var vaultApprovalResolvedPayloadSchemaDefinition = external_exports.object({
   /** The display name of who answered; empty for a timeout. */
   answeredByName: external_exports.string().default(""),
   /** A deny or a timeout: until when the same action is refused without a new card. */
-  blockedUntil: external_exports.iso.datetime().nullable().default(null)
+  blockedUntil: external_exports.iso.datetime().nullable().default(null),
+  /** Who decides the card, so their open approvals lists refresh. */
+  approverUserIds: external_exports.array(external_exports.string()).readonly().default([])
 });
 
 // ../../modules/vault/contract/src/vault-oauth.ts
@@ -34789,6 +35063,20 @@ var vaultConnectionSecretSetPayloadSchemaDefinition = external_exports.object({
   byUserId: external_exports.string().min(1),
   at: external_exports.iso.datetime()
 });
+var vaultPasskeyWantedPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  /** The keychain's owner, whoever saved it: the person or an agent running as them. */
+  userId: external_exports.string().min(1),
+  /** The new connection's name, such as `posthog`. */
+  connectionName: external_exports.string().min(1),
+  at: external_exports.iso.datetime()
+});
+var vaultPasskeySetUpPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  userId: external_exports.string().min(1),
+  deviceId: external_exports.string().min(1),
+  at: external_exports.iso.datetime()
+});
 
 // ../../modules/vault/contract/src/vault-reference-chip.ts
 var VaultReferenceChipSlot = uiTokens("vault").component("referenceChip");
@@ -35316,6 +35604,7 @@ var connectorTrpc = defineTrpcContract("connector").query("listProviders").withI
 ).withOutput(mcpRegistryPageSchema).query("getGithubApp").withInput(workspaceInput2).withOutput(githubAppViewSchema).mutation("startGithubInstall").withInput(startGithubInstallInputSchema).withOutput(startedGithubInstallSchema).mutation("startCardConnect").withInput(startCardConnectInputSchema).withOutput(startedCardConnectSchema).build();
 var connectorUi = uiTokens("connector");
 var ConnectorNavSlot = connectorUi.component("nav");
+var ConnectorOpenclawConnectSlot = connectorUi.component("openclawConnect");
 var ConnectorConnectCardSlot = connectorUi.component("connectCard");
 
 // ../../modules/connector/contract/src/connector.config.ts
@@ -35638,10 +35927,82 @@ var unwatchGithubAsCallerInputSchemaDefinition = external_exports.object({
 });
 var githubCallerQuerySchemaDefinition = external_exports.object({ agent: callerAgentSchema });
 
-// ../../modules/agent/contract/src/agent-logins.ts
+// ../../modules/agent/contract/src/agent-lifecycle.ts
 var workspaceIdSchema5 = external_exports.string().min(1);
-var idSchema9 = external_exports.string().min(1).max(80);
+var idSchema9 = external_exports.string().min(1).max(200);
+var agentRefSchema2 = external_exports.string().trim().min(1).max(80);
+var memberRefSchema = external_exports.string().trim().min(1).max(320);
+var transferAgentInputSchemaDefinition = external_exports.object({
+  workspaceId: workspaceIdSchema5,
+  agentId: idSchema9,
+  /** The new owner: a member's user id, email or name. */
+  to: memberRefSchema
+});
+var transferAgentInputSchema = transferAgentInputSchemaDefinition;
+var resetAgentSessionInputSchemaDefinition = external_exports.object({
+  workspaceId: workspaceIdSchema5,
+  agentId: idSchema9
+});
+var resetAgentSessionInputSchema = resetAgentSessionInputSchemaDefinition;
+var transferAgentAsCallerInputSchemaDefinition = external_exports.object({
+  agent: agentRefSchema2,
+  to: memberRefSchema
+});
+var resetAgentSessionAsCallerInputSchemaDefinition = external_exports.object({ agent: agentRefSchema2 });
+
+// ../../modules/agent/contract/src/agent-login-trouble.ts
+var loginCardActionInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  channelId: external_exports.string().min(1).max(80),
+  messageId: external_exports.string().min(1).max(80),
+  /** The thread the card sits in; null when it is at the top of the conversation. */
+  threadRootId: external_exports.string().min(1).max(80).nullable().default(null)
+});
+var loginCardActionInputSchema = loginCardActionInputSchemaDefinition;
+var resumeAfterLimitsInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  agentId: external_exports.string().min(1)
+});
 var harnessSchema = external_exports.enum(["claude-code", "codex"]);
+var agentLoginSignedOutPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  connectionId: external_exports.string().min(1),
+  loginName: external_exports.string().max(120),
+  harness: harnessSchema,
+  /** The pool the login is in; null for a person's own login. */
+  poolId: external_exports.string().nullable(),
+  poolName: external_exports.string().nullable(),
+  /** Its owner, or the pool's managers. */
+  recipientUserIds: external_exports.array(external_exports.string().min(1)),
+  at: external_exports.iso.datetime()
+});
+var agentLoginRestoredPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  connectionId: external_exports.string().min(1),
+  outcome: external_exports.enum(["signed_in", "removed"]),
+  at: external_exports.iso.datetime()
+});
+var agentStuckOnLimitsPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  agentId: external_exports.string().min(1),
+  agentName: external_exports.string().max(200),
+  harness: harnessSchema,
+  /** One wait: the soonest reset the agent resumes at. */
+  until: external_exports.iso.datetime(),
+  /** The owner and the people whose messages wait. */
+  recipientUserIds: external_exports.array(external_exports.string().min(1)),
+  at: external_exports.iso.datetime()
+});
+var agentLimitsClearedPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  agentId: external_exports.string().min(1),
+  at: external_exports.iso.datetime()
+});
+
+// ../../modules/agent/contract/src/agent-logins.ts
+var workspaceIdSchema6 = external_exports.string().min(1);
+var idSchema10 = external_exports.string().min(1).max(80);
+var harnessSchema2 = external_exports.enum(["claude-code", "codex"]);
 var loginNameSchema = external_exports.string().max(200);
 var secretSchema = external_exports.string().max(2e4);
 var loginValueShape = {
@@ -35650,8 +36011,8 @@ var loginValueShape = {
 };
 var harnessLoginEntrySchemaDefinition = external_exports.object({
   /** The vault connection id. */
-  id: idSchema9,
-  harness: harnessSchema,
+  id: idSchema10,
+  harness: harnessSchema2,
   name: external_exports.string(),
   /** `invalid` once its provider refused the token; `out_of_usage` until `limitedUntil`. */
   state: external_exports.enum(["ready", "out_of_usage", "invalid"]),
@@ -35672,39 +36033,45 @@ var harnessLoginListSchemaDefinition = external_exports.object({
 });
 var harnessLoginListSchema = harnessLoginListSchemaDefinition;
 var addHarnessLoginInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
-  harness: harnessSchema,
+  workspaceId: workspaceIdSchema6,
+  harness: harnessSchema2,
   name: loginNameSchema,
   ...loginValueShape
 });
 var addHarnessLoginInputSchema = addHarnessLoginInputSchemaDefinition;
 var renameHarnessLoginInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
-  loginId: idSchema9,
+  workspaceId: workspaceIdSchema6,
+  loginId: idSchema10,
   name: loginNameSchema
 });
 var renameHarnessLoginInputSchema = renameHarnessLoginInputSchemaDefinition;
+var replaceHarnessLoginInputSchemaDefinition = external_exports.object({
+  workspaceId: workspaceIdSchema6,
+  loginId: idSchema10,
+  secret: secretSchema
+});
+var replaceHarnessLoginInputSchema = replaceHarnessLoginInputSchemaDefinition;
 var deleteHarnessLoginInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
-  loginId: idSchema9
+  workspaceId: workspaceIdSchema6,
+  loginId: idSchema10
 });
 var deleteHarnessLoginInputSchema = deleteHarnessLoginInputSchemaDefinition;
 var loginPoolRoleSchema = external_exports.enum(["manager", "member"]);
 var loginPoolSchemaDefinition = external_exports.object({
-  id: idSchema9,
+  id: idSchema10,
   name: external_exports.string(),
   /** The reader's role; null for an admin who is not in the pool. */
   myRole: loginPoolRoleSchema.nullable(),
-  createdByUserId: idSchema9,
+  createdByUserId: idSchema10,
   createdAt: external_exports.iso.datetime(),
-  members: external_exports.array(external_exports.object({ userId: idSchema9, name: external_exports.string(), role: loginPoolRoleSchema })),
-  agents: external_exports.array(external_exports.object({ id: idSchema9, name: external_exports.string(), harness: external_exports.string() })),
+  members: external_exports.array(external_exports.object({ userId: idSchema10, name: external_exports.string(), role: loginPoolRoleSchema })),
+  agents: external_exports.array(external_exports.object({ id: idSchema10, name: external_exports.string(), harness: external_exports.string() })),
   logins: external_exports.array(
     external_exports.object({
-      id: idSchema9,
+      id: idSchema10,
       name: external_exports.string(),
-      harness: harnessSchema,
-      contributedByUserId: idSchema9,
+      harness: harnessSchema2,
+      contributedByUserId: idSchema10,
       contributedByName: external_exports.string(),
       /** Whether an agent runs on it now. */
       inUse: external_exports.boolean(),
@@ -35721,54 +36088,54 @@ var loginPoolSchemaDefinition = external_exports.object({
 var loginPoolsSchemaDefinition = external_exports.object({ pools: external_exports.array(loginPoolSchemaDefinition) });
 var loginPoolsSchema = loginPoolsSchemaDefinition;
 var createLoginPoolInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
+  workspaceId: workspaceIdSchema6,
   name: loginNameSchema
 });
 var createLoginPoolInputSchema = createLoginPoolInputSchemaDefinition;
 var renameLoginPoolInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
+  workspaceId: workspaceIdSchema6,
   poolId: external_exports.string().min(1).max(200),
   name: loginNameSchema
 });
 var renameLoginPoolInputSchema = renameLoginPoolInputSchemaDefinition;
 var loginPoolRefInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
+  workspaceId: workspaceIdSchema6,
   poolId: external_exports.string().min(1).max(200)
 });
 var loginPoolRefInputSchema = loginPoolRefInputSchemaDefinition;
 var addPoolLoginInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
+  workspaceId: workspaceIdSchema6,
   poolId: external_exports.string().min(1).max(200),
-  harness: harnessSchema,
+  harness: harnessSchema2,
   name: loginNameSchema,
   ...loginValueShape
 });
 var addPoolLoginInputSchema = addPoolLoginInputSchemaDefinition;
 var removePoolLoginInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
+  workspaceId: workspaceIdSchema6,
   poolId: external_exports.string().min(1).max(200),
-  loginId: idSchema9
+  loginId: idSchema10
 });
 var removePoolLoginInputSchema = removePoolLoginInputSchemaDefinition;
 var memberRefShape = {
-  userId: idSchema9.optional(),
+  userId: idSchema10.optional(),
   member: external_exports.string().trim().min(1).max(320).optional()
 };
 var setPoolMemberInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
+  workspaceId: workspaceIdSchema6,
   poolId: external_exports.string().min(1).max(200),
   ...memberRefShape,
   role: loginPoolRoleSchema
 });
 var setPoolMemberInputSchema = setPoolMemberInputSchemaDefinition;
 var removePoolMemberInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
+  workspaceId: workspaceIdSchema6,
   poolId: external_exports.string().min(1).max(200),
   ...memberRefShape
 });
 var removePoolMemberInputSchema = removePoolMemberInputSchemaDefinition;
 var setAgentPoolInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
+  workspaceId: workspaceIdSchema6,
   /** The agent's id or, from the CLI, its name. */
   agentId: external_exports.string().min(1).max(200),
   poolId: external_exports.string().min(1).max(200).nullable()
@@ -35777,6 +36144,11 @@ var setAgentPoolInputSchema = setAgentPoolInputSchemaDefinition;
 var addHarnessLoginAsCallerInputSchema = addHarnessLoginInputSchemaDefinition.omit({
   workspaceId: true
 });
+var replaceHarnessLoginAsCallerInputSchema = replaceHarnessLoginInputSchemaDefinition.omit(
+  {
+    workspaceId: true
+  }
+);
 var renameHarnessLoginAsCallerInputSchema = renameHarnessLoginInputSchemaDefinition.omit({
   workspaceId: true
 });
@@ -35814,7 +36186,7 @@ var removePoolMemberAsCallerInputSchema = removePoolMemberInputSchemaDefinition.
   workspaceId: true
 });
 var checkLoginUsageInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema5,
+  workspaceId: workspaceIdSchema6,
   /** A pool's id or name; without it, the caller's own logins. */
   poolId: external_exports.string().min(1).max(200).optional()
 });
@@ -35833,7 +36205,7 @@ var checkLoginUsageAsCallerInputSchema = checkLoginUsageInputSchemaDefinition.om
 var hostedHarnessSchema = external_exports.enum(["laze-models", "claude-code", "codex"]);
 var nameSchema = external_exports.string().trim().min(1).max(80);
 var descriptionSchema = external_exports.string().max(2e4);
-var agentRefSchema2 = external_exports.string().trim().min(1).max(80);
+var agentRefSchema3 = external_exports.string().trim().min(1).max(80);
 var createAgentAsCallerInputSchemaDefinition = external_exports.object({
   name: nameSchema,
   /** What the agent is for; it becomes the agent's instructions. */
@@ -35854,14 +36226,16 @@ var createdAgentSchemaDefinition = external_exports.object({
   channelId: external_exports.string()
 });
 var updateAgentAsCallerInputSchemaDefinition = external_exports.object({
-  agent: agentRefSchema2,
+  agent: agentRefSchema3,
   name: nameSchema.optional(),
   description: descriptionSchema.optional(),
   avatar: agentAvatarInputSchema.optional(),
   /** The context window of an agent Laze runs, in tokens, 100k to 1M. */
-  contextWindow: contextWindowInputSchema.optional()
+  contextWindow: contextWindowInputSchema.optional(),
+  /** Pauses or resumes an agent Laze runs. */
+  paused: external_exports.boolean().optional()
 });
-var archiveAgentAsCallerInputSchemaDefinition = external_exports.object({ agent: agentRefSchema2 });
+var archiveAgentAsCallerInputSchemaDefinition = external_exports.object({ agent: agentRefSchema3 });
 var uploadAvatarAsCallerInputSchemaDefinition = external_exports.object({
   contentType: external_exports.string().min(1).max(100),
   dataBase64: external_exports.string().min(1).max(Math.ceil(AGENT_AVATAR_PICK_MAX_BYTES * 4 / 3) + 8)
@@ -35870,8 +36244,8 @@ var uploadAvatarAsCallerInputSchemaDefinition = external_exports.object({
 // ../../modules/agent/contract/src/agent-oauth.ts
 var OAUTH_CODE_TTL_SECONDS = 5 * 60;
 var REMOTE_MCP_PATH = "/mcp";
-var workspaceIdSchema6 = external_exports.string().min(1);
-var idSchema10 = external_exports.string().min(1).max(80);
+var workspaceIdSchema7 = external_exports.string().min(1);
+var idSchema11 = external_exports.string().min(1).max(80);
 var oauthAuthorizeRequestSchemaDefinition = external_exports.object({
   response_type: external_exports.string().max(40).optional(),
   client_id: external_exports.string().min(1).max(4096),
@@ -35883,7 +36257,7 @@ var oauthAuthorizeRequestSchemaDefinition = external_exports.object({
   scope: external_exports.string().max(400).optional()
 });
 var oauthRequestInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema6,
+  workspaceId: workspaceIdSchema7,
   request: oauthAuthorizeRequestSchemaDefinition
 });
 var oauthRequestInputSchema = oauthRequestInputSchemaDefinition;
@@ -35892,16 +36266,16 @@ var oauthRequestViewSchemaDefinition = external_exports.object({
   /** The host the browser returns to, such as `chatgpt.com`. */
   redirectHost: external_exports.string(),
   /** The person's connected agents of this client in the workspace, newest first. */
-  reconnectable: external_exports.array(external_exports.object({ id: idSchema10, name: external_exports.string() })),
+  reconnectable: external_exports.array(external_exports.object({ id: idSchema11, name: external_exports.string() })),
   defaultName: external_exports.string()
 });
 var oauthRequestViewSchema = oauthRequestViewSchemaDefinition;
 var approveOAuthInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema6,
+  workspaceId: workspaceIdSchema7,
   request: oauthAuthorizeRequestSchemaDefinition,
   name: external_exports.string().trim().min(1).max(80),
   /** One of the person's agents of this client to hand a new key, instead of a new agent. */
-  reconnectAgentId: idSchema10.optional()
+  reconnectAgentId: idSchema11.optional()
 });
 var approveOAuthInputSchema = approveOAuthInputSchemaDefinition;
 var oauthRedirectSchemaDefinition = external_exports.object({ redirectUrl: external_exports.string() });
@@ -35937,8 +36311,8 @@ var AGENT_LINK_TTL_SECONDS = 30 * 60;
 var AGENT_JOIN_REQUEST_TTL_SECONDS = 24 * 60 * 60;
 var AGENT_ONLINE_WINDOW_SECONDS = 5 * 60;
 var INBOX_WAIT_MAX_SECONDS = 55;
-var workspaceIdSchema7 = external_exports.string().min(1);
-var idSchema11 = external_exports.string().min(1).max(80);
+var workspaceIdSchema8 = external_exports.string().min(1);
+var idSchema12 = external_exports.string().min(1).max(80);
 var agentHarnessSchema = external_exports.enum([
   "claude-code",
   "codex",
@@ -35968,22 +36342,22 @@ var agentContextSchemaDefinition = external_exports.object({
   updatedAt: external_exports.iso.datetime().nullable()
 });
 var agentHostSchemaDefinition = external_exports.object({
-  machineId: idSchema11,
+  machineId: idSchema12,
   whenOffline: external_exports.enum(["wait", "sandbox"])
 });
 var setAgentHostInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema7,
-  agentId: idSchema11,
+  workspaceId: workspaceIdSchema8,
+  agentId: idSchema12,
   host: agentHostSchemaDefinition.nullable()
 });
 var agentSchemaDefinition = external_exports.object({
-  id: idSchema11,
-  workspaceId: workspaceIdSchema7,
+  id: idSchema12,
+  workspaceId: workspaceIdSchema8,
   name: external_exports.string(),
   kind: external_exports.enum(["personal", "team"]),
   hosting: agentHostingSchema,
   harness: agentHarnessSchema,
-  ownerUserId: idSchema11,
+  ownerUserId: idSchema12,
   status: external_exports.enum(["connected", "disconnected"]),
   online: external_exports.boolean(),
   lastSeenAt: external_exports.iso.datetime().nullable(),
@@ -35997,8 +36371,10 @@ var agentSchemaDefinition = external_exports.object({
   contextWindow: external_exports.number().int().positive().nullable().default(null),
   /** The GitHub identity a Laze agent works as; null when it has none. */
   github: agentGithubSchema.nullable().default(null),
-  /** Out of usage on its login until this time; null when it can work. */
+  /** Out of usage (its login or its Laze models budget) until this time; null when it can work. */
   limitedUntil: external_exports.iso.datetime().nullable().default(null),
+  /** Paused by a person since this time: it does not wake until resumed; null when it runs. */
+  pausedAt: external_exports.iso.datetime().nullable().default(null),
   /** The owner's own machine the agent's turns run on; null for a Laze sandbox. */
   host: agentHostSchemaDefinition.nullable().default(null),
   /** The login pool a Claude Code or Codex agent draws from; null for its owner's own logins. */
@@ -36008,7 +36384,7 @@ var agentSchemaDefinition = external_exports.object({
 });
 var agentSchema = agentSchemaDefinition;
 var agentChannelSchemaDefinition = external_exports.object({
-  id: idSchema11,
+  id: idSchema12,
   name: external_exports.string(),
   kind: external_exports.enum(["public", "private", "dm", "group", "chat"])
 });
@@ -36023,22 +36399,22 @@ var agentNameSchema = external_exports.string().trim().min(1).max(80);
 var instructionsSchema = external_exports.string().max(2e4);
 var linkedAvatarSchema = external_exports.string().trim().max(16);
 var createAgentInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema7,
+  workspaceId: workspaceIdSchema8,
   name: agentNameSchema,
   avatar: agentAvatarInputSchema.default(""),
   harness: hostedHarnessSchema,
   modelLevel: agentModelLevelSchema.optional(),
   kind: external_exports.enum(["personal", "team"]).default("personal"),
   instructions: instructionsSchema.default(""),
-  channelIds: external_exports.array(idSchema11).max(50).default([]),
+  channelIds: external_exports.array(idSchema12).max(50).default([]),
   /** A Claude Code or Codex agent drawing from this login pool; a team one needs a pool. */
   /** The pool's id or name. */
   loginPoolId: external_exports.string().min(1).max(200).optional()
 });
 var createAgentInputSchema = createAgentInputSchemaDefinition;
 var updateAgentInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema7,
-  agentId: idSchema11,
+  workspaceId: workspaceIdSchema8,
+  agentId: idSchema12,
   name: agentNameSchema.optional(),
   avatar: agentAvatarInputSchema.optional(),
   modelLevel: agentModelLevelSchema.optional(),
@@ -36046,17 +36422,19 @@ var updateAgentInputSchemaDefinition = external_exports.object({
   contextWindow: contextWindowInputSchema.optional(),
   instructions: instructionsSchema.optional(),
   /** The whole set: channels left out are left. */
-  channelIds: external_exports.array(idSchema11).max(50).optional()
+  channelIds: external_exports.array(idSchema12).max(50).optional(),
+  /** Agents Laze runs only: paused, it does not wake until resumed and its messages wait. */
+  paused: external_exports.boolean().optional()
 });
 var updateAgentInputSchema = updateAgentInputSchemaDefinition;
 var saveHarnessLoginInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema7,
+  workspaceId: workspaceIdSchema8,
   harness: harnessLoginSchema,
   secret: external_exports.string().trim().min(10).max(2e4)
 });
 var saveHarnessLoginInputSchema = saveHarnessLoginInputSchemaDefinition;
 var removeHarnessLoginInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema7,
+  workspaceId: workspaceIdSchema8,
   harness: harnessLoginSchema
 });
 var removeHarnessLoginInputSchema = removeHarnessLoginInputSchemaDefinition;
@@ -36066,11 +36444,13 @@ var harnessLoginsSchemaDefinition = external_exports.object({
 });
 var harnessLoginsSchema = harnessLoginsSchemaDefinition;
 var mintLinkInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema7,
+  workspaceId: workspaceIdSchema8,
   /** Left out, the agent names itself when it joins, else it takes its harness's name. */
   name: external_exports.string().trim().max(80).optional(),
   /** The channel the agent joins once linked. */
-  channelId: idSchema11.optional()
+  channelId: idSchema12.optional(),
+  /** One of the minting person's connected agents: redeeming gives it a new key instead. */
+  reconnectAgentId: idSchema12.optional()
 });
 var mintLinkInputSchema = mintLinkInputSchemaDefinition;
 var mintedLinkSchemaDefinition = external_exports.object({
@@ -36099,7 +36479,7 @@ var redeemedLinkSchemaDefinition = external_exports.object({
   agent: agentSchemaDefinition,
   /** The agent's own `lz_` key, shown once. */
   apiKey: external_exports.string(),
-  channelId: idSchema11.nullable()
+  channelId: idSchema12.nullable()
 });
 var startJoinRequestInputSchemaDefinition = external_exports.object({
   /** The name the agent picks; left out, it takes its harness's name. */
@@ -36107,7 +36487,11 @@ var startJoinRequestInputSchemaDefinition = external_exports.object({
   harness: agentHarnessSchema.default("other"),
   avatar: linkedAvatarSchema.default(""),
   /** A line for the person who approves, such as what the agent is for. */
-  note: external_exports.string().trim().max(300).default("")
+  note: external_exports.string().trim().max(300).default(""),
+  /** The workspace to ask: its name, id or an invite link. Its feed shows the request. */
+  workspace: external_exports.string().trim().min(1).max(2e3).optional(),
+  /** The person to ask; left out, the workspace's owners and admins decide. */
+  forEmail: external_exports.string().trim().min(3).max(320).optional()
 });
 var startedJoinRequestSchemaDefinition = external_exports.object({
   /** The code the person checks on the approval page, such as `BCDF-GHJK`. */
@@ -36117,20 +36501,27 @@ var startedJoinRequestSchemaDefinition = external_exports.object({
   /** The page a person opens, signed in, to approve the agent once. */
   approveUrl: external_exports.string(),
   expiresAt: external_exports.iso.datetime(),
-  intervalSeconds: external_exports.number().int().positive()
+  intervalSeconds: external_exports.number().int().positive(),
+  /** The workspace whose feed shows the request; null when only the code link asks. */
+  workspaceName: external_exports.string().nullable().default(null)
 });
 var pollJoinRequestInputSchemaDefinition = external_exports.object({ requestToken: external_exports.string().min(1).max(200) });
 var joinRequestAnswerSchemaDefinition = external_exports.discriminatedUnion("status", [
   external_exports.object({ status: external_exports.literal("pending") }),
-  external_exports.object({ status: external_exports.literal("approved"), ...redeemedLinkSchemaDefinition.shape })
+  external_exports.object({
+    status: external_exports.literal("approved"),
+    ...redeemedLinkSchemaDefinition.shape,
+    /** The workspace the agent joined, for the line the CLI prints. */
+    workspaceName: external_exports.string().default("")
+  })
 ]);
 var joinRequestInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema7,
+  workspaceId: workspaceIdSchema8,
   code: external_exports.string().trim().min(1).max(20)
 });
 var joinRequestInputSchema = joinRequestInputSchemaDefinition;
 var approveJoinRequestInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema7,
+  workspaceId: workspaceIdSchema8,
   code: external_exports.string().trim().min(1).max(20),
   /** The person may rename the agent as they approve it. */
   name: external_exports.string().trim().max(80).optional()
@@ -36146,12 +36537,12 @@ var joinRequestViewSchemaDefinition = external_exports.object({
 });
 var joinRequestViewSchema = joinRequestViewSchemaDefinition;
 var inboxMessageSchemaDefinition = external_exports.object({
-  messageId: idSchema11,
-  channelId: idSchema11,
+  messageId: idSchema12,
+  channelId: idSchema12,
   channelName: external_exports.string(),
   channelKind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
-  threadRootId: idSchema11.nullable(),
-  author: external_exports.object({ kind: external_exports.enum(["person", "agent"]), id: idSchema11, name: external_exports.string() }),
+  threadRootId: idSchema12.nullable(),
+  author: external_exports.object({ kind: external_exports.enum(["person", "agent"]), id: idSchema12, name: external_exports.string() }),
   body: external_exports.string(),
   postedAt: external_exports.iso.datetime()
 });
@@ -36161,16 +36552,16 @@ var receiveInboxInputSchemaDefinition = external_exports.object({
 });
 var callerSchemaDefinition = external_exports.object({
   kind: external_exports.enum(["person", "agent"]),
-  id: idSchema11,
+  id: idSchema12,
   name: external_exports.string(),
-  workspaceId: workspaceIdSchema7,
+  workspaceId: workspaceIdSchema8,
   agent: agentSchemaDefinition.nullable(),
   /** Messages waiting in the agent's inbox, not taken yet; 0 for a person. */
   pendingCount: external_exports.number().int().min(0).optional()
 });
 var agentChannelLevelSchema = external_exports.enum(["everything", "mentions"]);
 var callerChannelSchemaDefinition = external_exports.object({
-  id: idSchema11,
+  id: idSchema12,
   name: external_exports.string(),
   kind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
   unread: external_exports.number().int().nonnegative(),
@@ -36182,9 +36573,9 @@ var callerChannelSchemaDefinition = external_exports.object({
   mute: agentChannelMuteSchema.nullable().default(null)
 });
 var setChannelLevelInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema7,
-  agentId: idSchema11,
-  channelId: idSchema11,
+  workspaceId: workspaceIdSchema8,
+  agentId: idSchema12,
+  channelId: idSchema12,
   level: agentChannelLevelSchema
 });
 var setChannelLevelInputSchema = setChannelLevelInputSchemaDefinition;
@@ -36207,12 +36598,12 @@ var postAsCallerInputSchemaDefinition = external_exports.object({
   /** A channel's name (with or without `#`) or id. */
   channel: external_exports.string().trim().min(1).max(81),
   body: external_exports.string().trim().min(1).max(4e4),
-  threadRootId: idSchema11.optional(),
+  threadRootId: idSchema12.optional(),
   /** The messages of the agent's turn this post answers. */
-  answers: external_exports.array(idSchema11).max(200).optional()
+  answers: external_exports.array(idSchema12).max(200).optional()
 });
 var replyAsCallerInputSchemaDefinition = external_exports.object({
-  messageId: idSchema11,
+  messageId: idSchema12,
   body: external_exports.string().trim().min(1).max(4e4),
   /** Needed for a message that is not in the caller's inbox. */
   channel: external_exports.string().trim().min(1).max(81).optional(),
@@ -36221,12 +36612,12 @@ var replyAsCallerInputSchemaDefinition = external_exports.object({
   /** A thread reply also shows in the channel, as "Also send to #channel" does. */
   alsoInChannel: external_exports.boolean().optional(),
   /** The other messages of the agent's turn this reply answers. */
-  answers: external_exports.array(idSchema11).max(200).optional()
+  answers: external_exports.array(idSchema12).max(200).optional()
 });
 var postedMessageSchemaDefinition = external_exports.object({
-  messageId: idSchema11,
-  channelId: idSchema11,
-  threadRootId: idSchema11.nullable(),
+  messageId: idSchema12,
+  channelId: idSchema12,
+  threadRootId: idSchema12.nullable(),
   /** Workspace members the message mentioned who are not in the channel: it did not reach them. */
   notInChannel: external_exports.array(external_exports.object({ ...notInChannelSchema.shape, name: external_exports.string() })).default([])
 });
@@ -36237,15 +36628,15 @@ var searchAsCallerInputSchemaDefinition = external_exports.object({
 });
 var callerActorNameSchema = external_exports.object({
   kind: external_exports.enum(["person", "agent"]),
-  id: idSchema11,
+  id: idSchema12,
   name: external_exports.string()
 });
 var callerSearchHitSchemaDefinition = external_exports.object({
-  messageId: idSchema11,
-  channelId: idSchema11,
+  messageId: idSchema12,
+  channelId: idSchema12,
   channelName: external_exports.string(),
   channelKind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
-  threadRootId: idSchema11.nullable(),
+  threadRootId: idSchema12.nullable(),
   seq: external_exports.number().int().positive(),
   /** `external` for a mirrored message from someone outside Laze. */
   author: external_exports.object({
@@ -36267,7 +36658,7 @@ var callerSearchResultSchemaDefinition = external_exports.object({
   /** Names for the mention tokens in the bodies. */
   mentions: external_exports.object({
     actors: external_exports.array(callerActorNameSchema),
-    channels: external_exports.array(external_exports.object({ id: idSchema11, name: external_exports.string() }))
+    channels: external_exports.array(external_exports.object({ id: idSchema12, name: external_exports.string() }))
   })
 });
 var agentActivityInputSchemaDefinition = external_exports.object({
@@ -36291,30 +36682,45 @@ var agentTurnHeartbeatInputSchemaDefinition = external_exports.object({
   channelId: external_exports.string().min(1).max(80).nullable(),
   threadRootId: external_exports.string().min(1).max(80).nullable().default(null),
   /** Shown as the agent's working line; null reports nothing and only asks about stops. */
-  state: external_exports.enum(["working", "idle"]).nullable().default(null)
+  state: external_exports.enum(["working", "idle"]).nullable().default(null),
+  /**
+   * The inbox message the turn answers. Sent with `working`, it opens the agent's turn in that
+   * conversation, which `idle` ends; the CLI takes its turn token from it.
+   */
+  messageId: external_exports.string().min(1).max(80).nullable().default(null)
 });
 var agentTurnHeartbeatSchemaDefinition = external_exports.object({
   stop: external_exports.boolean(),
   stoppedBy: external_exports.string().nullable()
 });
+var agentTurnTokenInputSchemaDefinition = external_exports.object({
+  channelId: external_exports.string().min(1).max(80).nullable().default(null)
+});
+var agentTurnTokenSchemaDefinition = external_exports.object({
+  turnToken: external_exports.string(),
+  expiresAt: external_exports.iso.datetime()
+});
 var CODEX_LOGIN_MAX_LENGTH = 64 * 1024;
 var codexLoginRefreshInputSchemaDefinition = external_exports.object({
   authJson: external_exports.string().min(2).max(CODEX_LOGIN_MAX_LENGTH)
 });
 var AgentApi = moduleApi()("agent");
-var agentCoreTrpc = defineTrpcContract("agents").query("list").withInput(external_exports.object({ workspaceId: workspaceIdSchema7 })).withOutput(external_exports.array(agentListEntrySchema)).mutation("create").withInput(createAgentInputSchema).withOutput(agentSchema).mutation("update").withInput(updateAgentInputSchema).withOutput(agentSchema).mutation("remove").withInput(external_exports.object({ workspaceId: workspaceIdSchema7, agentId: idSchema11 })).withOutput(external_exports.object({ removed: external_exports.literal(true) })).query("faces").withInput(external_exports.object({ workspaceId: workspaceIdSchema7 })).withOutput(external_exports.array(agentFaceSchema)).query("presence").withInput(external_exports.object({ workspaceId: workspaceIdSchema7 })).withOutput(external_exports.array(agentPresenceSchema)).mutation("uploadAvatar").withInput(uploadAgentAvatarInputSchema).withOutput(uploadedAgentAvatarSchema).query("access").withInput(external_exports.object({ workspaceId: workspaceIdSchema7, agentId: idSchema11 })).withOutput(agentAccessSchema).query("permissionPrompts").withInput(external_exports.object({ workspaceId: workspaceIdSchema7, agentId: idSchema11 })).withOutput(external_exports.array(agentPermissionPromptSchema)).mutation("share").withInput(shareAgentInputSchema).withOutput(agentAccessSchema).mutation("unshare").withInput(shareAgentInputSchema).withOutput(agentAccessSchema).query("harnessLogins").withInput(external_exports.object({ workspaceId: workspaceIdSchema7 })).withOutput(harnessLoginsSchema).mutation("saveHarnessLogin").withInput(saveHarnessLoginInputSchema).withOutput(harnessLoginsSchema).mutation("removeHarnessLogin").withInput(removeHarnessLoginInputSchema).withOutput(harnessLoginsSchema).query("listHarnessLogins").withInput(external_exports.object({ workspaceId: workspaceIdSchema7 })).withOutput(harnessLoginListSchema).mutation("addHarnessLogin").withInput(addHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("renameHarnessLogin").withInput(renameHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("deleteHarnessLogin").withInput(deleteHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("checkLoginUsage").withInput(checkLoginUsageInputSchema).withOutput(loginUsageCheckSchema).query("loginPools").withInput(external_exports.object({ workspaceId: workspaceIdSchema7 })).withOutput(loginPoolsSchema).mutation("createLoginPool").withInput(createLoginPoolInputSchema).withOutput(loginPoolsSchema).mutation("renameLoginPool").withInput(renameLoginPoolInputSchema).withOutput(loginPoolsSchema).mutation("deleteLoginPool").withInput(loginPoolRefInputSchema).withOutput(loginPoolsSchema).mutation("addPoolLogin").withInput(addPoolLoginInputSchema).withOutput(loginPoolsSchema).mutation("removePoolLogin").withInput(removePoolLoginInputSchema).withOutput(loginPoolsSchema).mutation("setPoolMember").withInput(setPoolMemberInputSchema).withOutput(loginPoolsSchema).mutation("removePoolMember").withInput(removePoolMemberInputSchema).withOutput(loginPoolsSchema).mutation("setAgentPool").withInput(setAgentPoolInputSchema).withOutput(agentSchema).mutation("openDirect").withInput(external_exports.object({ workspaceId: workspaceIdSchema7, agentId: idSchema11 })).withOutput(external_exports.object({ channelId: idSchema11 })).mutation("startConversation").withInput(startConversationInputSchema).withOutput(startedConversationSchema).query("conversations").withInput(listConversationsInputSchema).withOutput(external_exports.array(conversationSummarySchema2)).mutation("joinConversation").withInput(conversationInputSchema).withOutput(conversationSummarySchema2).mutation("renameConversation").withInput(renameConversationInputSchema).withOutput(conversationSummarySchema2).mutation("leaveConversation").withInput(conversationInputSchema).withOutput(external_exports.object({ left: external_exports.literal(true) })).mutation("deleteConversation").withInput(conversationInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).mutation("mintLink").withInput(mintLinkInputSchema).withOutput(mintedLinkSchema).query("oauthRequest").withInput(oauthRequestInputSchema).withOutput(oauthRequestViewSchema).mutation("oauthApprove").withInput(approveOAuthInputSchema).withOutput(oauthRedirectSchema).mutation("oauthDeny").withInput(oauthRequestInputSchema).withOutput(oauthRedirectSchema).mutation("disconnect").withInput(external_exports.object({ workspaceId: workspaceIdSchema7, agentId: idSchema11 })).withOutput(external_exports.object({ disconnected: external_exports.literal(true) })).mutation("setGithub").withInput(setAgentGithubInputSchema).withOutput(agentSchema).query("githubWatches").withInput(external_exports.object({ workspaceId: workspaceIdSchema7, agentId: idSchema11 })).withOutput(external_exports.array(agentGithubWatchSchema)).mutation("watchGithub").withInput(watchGithubInputSchema).withOutput(agentGithubWatchSchema).mutation("unwatchGithub").withInput(unwatchGithubInputSchema).withOutput(external_exports.object({ removed: external_exports.literal(true) })).mutation("answerAttention").withInput(answerAttentionInputSchema).withOutput(external_exports.object({ answered: external_exports.literal(true) })).mutation("stopTurn").withInput(stopAgentTurnInputSchema).withOutput(external_exports.object({ stopped: external_exports.literal(true) })).mutation("restartComputer").withInput(restartAgentComputerInputSchema).withOutput(external_exports.object({ restarted: external_exports.boolean() })).build();
-var agentChannelSettingsTrpc = defineTrpcContract("agents").query("channelLevel").withInput(external_exports.object({ workspaceId: workspaceIdSchema7, agentId: idSchema11, channelId: idSchema11 })).withOutput(channelLevelSchema).mutation("setChannelLevel").withInput(setChannelLevelInputSchema).withOutput(channelLevelSchema).mutation("unmuteChannel").withInput(unmuteAgentChannelInputSchema).withOutput(channelLevelSchema).build();
+var agentCoreTrpc = defineTrpcContract("agents").query("list").withInput(external_exports.object({ workspaceId: workspaceIdSchema8 })).withOutput(external_exports.array(agentListEntrySchema)).mutation("create").withInput(createAgentInputSchema).withOutput(agentSchema).mutation("update").withInput(updateAgentInputSchema).withOutput(agentSchema).mutation("remove").withInput(external_exports.object({ workspaceId: workspaceIdSchema8, agentId: idSchema12 })).withOutput(external_exports.object({ removed: external_exports.literal(true) })).mutation("transfer").withInput(transferAgentInputSchema).withOutput(agentSchema).mutation("resetSession").withInput(resetAgentSessionInputSchema).withOutput(agentSchema).query("faces").withInput(external_exports.object({ workspaceId: workspaceIdSchema8 })).withOutput(external_exports.array(agentFaceSchema)).query("presence").withInput(external_exports.object({ workspaceId: workspaceIdSchema8 })).withOutput(external_exports.array(agentPresenceSchema)).mutation("uploadAvatar").withInput(uploadAgentAvatarInputSchema).withOutput(uploadedAgentAvatarSchema).query("access").withInput(external_exports.object({ workspaceId: workspaceIdSchema8, agentId: idSchema12 })).withOutput(agentAccessSchema).query("permissionPrompts").withInput(external_exports.object({ workspaceId: workspaceIdSchema8, agentId: idSchema12 })).withOutput(external_exports.array(agentPermissionPromptSchema)).mutation("share").withInput(shareAgentInputSchema).withOutput(agentAccessSchema).mutation("unshare").withInput(shareAgentInputSchema).withOutput(agentAccessSchema).query("harnessLogins").withInput(external_exports.object({ workspaceId: workspaceIdSchema8 })).withOutput(harnessLoginsSchema).mutation("saveHarnessLogin").withInput(saveHarnessLoginInputSchema).withOutput(harnessLoginsSchema).mutation("removeHarnessLogin").withInput(removeHarnessLoginInputSchema).withOutput(harnessLoginsSchema).query("listHarnessLogins").withInput(external_exports.object({ workspaceId: workspaceIdSchema8 })).withOutput(harnessLoginListSchema).mutation("addHarnessLogin").withInput(addHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("renameHarnessLogin").withInput(renameHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("deleteHarnessLogin").withInput(deleteHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("checkLoginUsage").withInput(checkLoginUsageInputSchema).withOutput(loginUsageCheckSchema).query("loginPools").withInput(external_exports.object({ workspaceId: workspaceIdSchema8 })).withOutput(loginPoolsSchema).mutation("createLoginPool").withInput(createLoginPoolInputSchema).withOutput(loginPoolsSchema).mutation("renameLoginPool").withInput(renameLoginPoolInputSchema).withOutput(loginPoolsSchema).mutation("deleteLoginPool").withInput(loginPoolRefInputSchema).withOutput(loginPoolsSchema).mutation("addPoolLogin").withInput(addPoolLoginInputSchema).withOutput(loginPoolsSchema).mutation("removePoolLogin").withInput(removePoolLoginInputSchema).withOutput(loginPoolsSchema).mutation("setPoolMember").withInput(setPoolMemberInputSchema).withOutput(loginPoolsSchema).mutation("removePoolMember").withInput(removePoolMemberInputSchema).withOutput(loginPoolsSchema).mutation("setAgentPool").withInput(setAgentPoolInputSchema).withOutput(agentSchema).mutation("openDirect").withInput(external_exports.object({ workspaceId: workspaceIdSchema8, agentId: idSchema12 })).withOutput(external_exports.object({ channelId: idSchema12 })).mutation("startConversation").withInput(startConversationInputSchema).withOutput(startedConversationSchema).query("conversations").withInput(listConversationsInputSchema).withOutput(external_exports.array(conversationSummarySchema2)).mutation("joinConversation").withInput(conversationInputSchema).withOutput(conversationSummarySchema2).mutation("renameConversation").withInput(renameConversationInputSchema).withOutput(conversationSummarySchema2).mutation("leaveConversation").withInput(conversationInputSchema).withOutput(external_exports.object({ left: external_exports.literal(true) })).mutation("deleteConversation").withInput(conversationInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).mutation("mintLink").withInput(mintLinkInputSchema).withOutput(mintedLinkSchema).query("oauthRequest").withInput(oauthRequestInputSchema).withOutput(oauthRequestViewSchema).mutation("oauthApprove").withInput(approveOAuthInputSchema).withOutput(oauthRedirectSchema).mutation("oauthDeny").withInput(oauthRequestInputSchema).withOutput(oauthRedirectSchema).mutation("disconnect").withInput(external_exports.object({ workspaceId: workspaceIdSchema8, agentId: idSchema12 })).withOutput(external_exports.object({ disconnected: external_exports.literal(true) })).mutation("setGithub").withInput(setAgentGithubInputSchema).withOutput(agentSchema).query("githubWatches").withInput(external_exports.object({ workspaceId: workspaceIdSchema8, agentId: idSchema12 })).withOutput(external_exports.array(agentGithubWatchSchema)).mutation("watchGithub").withInput(watchGithubInputSchema).withOutput(agentGithubWatchSchema).mutation("unwatchGithub").withInput(unwatchGithubInputSchema).withOutput(external_exports.object({ removed: external_exports.literal(true) })).mutation("answerAttention").withInput(answerAttentionInputSchema).withOutput(external_exports.object({ answered: external_exports.literal(true) })).mutation("stopTurn").withInput(stopAgentTurnInputSchema).withOutput(external_exports.object({ stopped: external_exports.literal(true) })).mutation("restartComputer").withInput(restartAgentComputerInputSchema).withOutput(external_exports.object({ restarted: external_exports.boolean() })).build();
+var agentChannelSettingsTrpc = defineTrpcContract("agents").query("channelLevel").withInput(external_exports.object({ workspaceId: workspaceIdSchema8, agentId: idSchema12, channelId: idSchema12 })).withOutput(channelLevelSchema).mutation("setChannelLevel").withInput(setChannelLevelInputSchema).withOutput(channelLevelSchema).mutation("unmuteChannel").withInput(unmuteAgentChannelInputSchema).withOutput(channelLevelSchema).build();
 var agentJoinTrpc = defineTrpcContract("agents").query("joinRequest").withInput(joinRequestInputSchema).withOutput(joinRequestViewSchema).mutation("approveJoinRequest").withInput(approveJoinRequestInputSchema).withOutput(joinRequestViewSchema).mutation("denyJoinRequest").withInput(joinRequestInputSchema).withOutput(joinRequestViewSchema).build();
+var agentLoginTroubleTrpc = defineTrpcContract("agents").mutation("replaceHarnessLogin").withInput(replaceHarnessLoginInputSchema).withOutput(harnessLoginListSchema).mutation("waitForLogins").withInput(loginCardActionInputSchema).withOutput(external_exports.object({ waiting: external_exports.boolean() })).mutation("useAnotherLogin").withInput(loginCardActionInputSchema).withOutput(external_exports.object({ loginName: external_exports.string() })).build();
 var agentTrpc = joinTrpcContracts(
   "agents",
   agentCoreTrpc,
   agentChannelSettingsTrpc,
-  agentJoinTrpc
+  agentJoinTrpc,
+  agentLoginTroubleTrpc
 );
 var agentUi = uiTokens("agent");
 var AgentNavSlot = agentUi.component("nav");
 var AgentAttentionCardSlot = agentUi.component("attentionCard");
 var AgentComputerCardSlot = agentUi.component("computerCard");
+var AgentLoginCardSlot = agentUi.component("loginCard");
 var AgentStopTurnSlot = agentUi.component("stopTurn");
 var AgentCreateDialogSlot = agentUi.component("createDialog");
 var AgentEditDialogSlot = agentUi.component("editDialog");
@@ -36383,22 +36789,53 @@ var agentDeliveryWakeIntentSchemaDefinition = external_exports.object({
   agentId: external_exports.string().min(1)
 });
 
+// ../../modules/agent/contract/src/agent-turn-failures.ts
+var agentTurnEndedPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  agentId: external_exports.string().min(1).max(80),
+  turnId: external_exports.string().min(1).max(200),
+  failed: external_exports.boolean(),
+  /** What the session said when the turn failed. */
+  reason: external_exports.string().max(500).optional()
+});
+var agentTurnFailuresStateSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string(),
+  failures: external_exports.number().int().nonnegative(),
+  reason: external_exports.string(),
+  /** The first failed turn of the streak, which names its card. */
+  streakId: external_exports.string()
+});
+var agentKeepsFailingIntentSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  agentId: external_exports.string().min(1),
+  reason: external_exports.string(),
+  failures: external_exports.number().int().positive(),
+  streakId: external_exports.string().min(1)
+});
+var agentKeepsFailingPayloadSchemaDefinition = external_exports.object({
+  ...agentKeepsFailingIntentSchemaDefinition.shape,
+  agentName: external_exports.string().min(1),
+  ownerUserId: external_exports.string().min(1),
+  /** The agent's DM with its owner, where its session runs. */
+  channelId: external_exports.string().min(1)
+});
+
 // ../../modules/agent/contract/src/agent-caller-access.ts
-var agentRefSchema3 = external_exports.string().trim().min(1).max(80);
-var idSchema12 = external_exports.string().min(1).max(64);
-var agentAsCallerInputSchemaDefinition = external_exports.object({ agent: agentRefSchema3 });
+var agentRefSchema4 = external_exports.string().trim().min(1).max(80);
+var idSchema13 = external_exports.string().min(1).max(64);
+var agentAsCallerInputSchemaDefinition = external_exports.object({ agent: agentRefSchema4 });
 var shareAgentAsCallerInputSchemaDefinition = external_exports.object({
-  agent: agentRefSchema3,
+  agent: agentRefSchema4,
   grantee: agentGranteeSchema
 });
 var stopTurnAsCallerInputSchemaDefinition = external_exports.object({
-  agent: agentRefSchema3,
-  channelId: idSchema12
+  agent: agentRefSchema4,
+  channelId: idSchema13
 });
 var mintLinkAsCallerInputSchemaDefinition = external_exports.object({
   /** Left out, the agent that joins with the link names itself. */
   name: external_exports.string().trim().max(80).optional(),
-  channelId: idSchema12.optional()
+  channelId: idSchema13.optional()
 });
 
 // ../../modules/agent/contract/src/agent-secret-sweep.ts
@@ -36465,25 +36902,25 @@ var agentRemovedPayloadSchemaDefinition = external_exports.object({
 });
 
 // ../../modules/agent/contract/src/agent-history.ts
-var idSchema13 = external_exports.string().min(1).max(80);
+var idSchema14 = external_exports.string().min(1).max(80);
 var CALLER_HISTORY_LIMIT_MAX = 100;
 var historyAsCallerInputSchemaDefinition = external_exports.object({
   /** A channel the key's speaker is in, by id or name. */
   channel: external_exports.string().trim().min(1).max(200),
   /** Messages before this Laze message; none reads the newest page. */
-  before: idSchema13.optional(),
+  before: idSchema14.optional(),
   /** Already past the cache: no cached messages, only where the live read goes on. */
   olderThan: external_exports.iso.datetime().optional(),
   limit: external_exports.number().int().min(1).max(CALLER_HISTORY_LIMIT_MAX).default(50)
 });
 var callerHistoryMessageSchemaDefinition = external_exports.object({
-  messageId: idSchema13,
-  threadRootId: idSchema13.nullable(),
+  messageId: idSchema14,
+  threadRootId: idSchema14.nullable(),
   seq: external_exports.number().int().positive(),
   /** `external` for a mirrored message from someone outside Laze. */
   author: external_exports.object({
     kind: external_exports.enum(["person", "agent", "external"]),
-    id: idSchema13,
+    id: idSchema14,
     name: external_exports.string()
   }),
   body: external_exports.string(),
@@ -36493,7 +36930,7 @@ var callerHistoryMessageSchemaDefinition = external_exports.object({
   originKey: external_exports.string().nullable()
 });
 var callerHistorySchemaDefinition = external_exports.object({
-  channelId: idSchema13,
+  channelId: idSchema14,
   channelName: external_exports.string(),
   channelKind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
   /** The outside workspace a mirrored conversation shows, such as "Slack ACME HQ". */
@@ -36507,12 +36944,12 @@ var callerHistorySchemaDefinition = external_exports.object({
 });
 
 // ../../modules/agent/contract/src/agent-channel-admin.ts
-var idSchema14 = external_exports.string().min(1).max(80);
+var idSchema15 = external_exports.string().min(1).max(80);
 var channelRefSchema = external_exports.string().trim().min(1).max(200);
 var channelAsCallerInputSchemaDefinition = external_exports.object({ channel: channelRefSchema });
 var callerChannelMemberSchemaDefinition = external_exports.object({
   kind: external_exports.enum(["person", "agent"]),
-  id: idSchema14,
+  id: idSchema15,
   name: external_exports.string(),
   role: external_exports.enum(["admin", "member"]),
   /** Active, away or unknown for a person the speaker may see; absent for agents. */
@@ -36522,7 +36959,7 @@ var callerChannelMemberSchemaDefinition = external_exports.object({
   doNotDisturb: doNotDisturbSchema.nullable().optional()
 });
 var callerChannelDetailSchemaDefinition = external_exports.object({
-  id: idSchema14,
+  id: idSchema15,
   name: external_exports.string(),
   kind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
   topic: external_exports.string(),
@@ -36553,14 +36990,14 @@ var activityAsCallerInputSchemaDefinition = external_exports.object({
   limit: external_exports.number().int().min(1).max(100).default(50)
 });
 var callerActivityItemSchemaDefinition = external_exports.object({
-  id: idSchema14,
+  id: idSchema15,
   kind: external_exports.enum(["mention", "thread_reply", "keyword", "reaction"]),
-  channelId: idSchema14,
+  channelId: idSchema15,
   channelName: external_exports.string(),
   channelKind: external_exports.enum(["public", "private", "dm", "group", "chat"]),
-  messageId: idSchema14,
-  threadRootId: idSchema14.nullable(),
-  actor: external_exports.object({ kind: external_exports.enum(["person", "agent"]), id: idSchema14, name: external_exports.string() }),
+  messageId: idSchema15,
+  threadRootId: idSchema15.nullable(),
+  actor: external_exports.object({ kind: external_exports.enum(["person", "agent"]), id: idSchema15, name: external_exports.string() }),
   emoji: external_exports.string().nullable(),
   preview: external_exports.string(),
   createdAt: external_exports.iso.datetime(),
@@ -36575,12 +37012,12 @@ var setStatusAsCallerInputSchemaDefinition = setStatusInputSchema.omit({ workspa
 var setAwayAsCallerInputSchemaDefinition = external_exports.object({ away: external_exports.boolean() });
 
 // ../../modules/agent/contract/src/agent-scheduled.ts
-var idSchema15 = external_exports.string().min(1).max(80);
+var idSchema16 = external_exports.string().min(1).max(80);
 var channelRefSchema2 = external_exports.string().trim().min(1).max(200);
 var scheduleAsCallerInputSchemaDefinition = external_exports.object({
   channel: channelRefSchema2.optional(),
-  threadRootId: idSchema15.optional(),
-  replyTo: idSchema15.optional(),
+  threadRootId: idSchema16.optional(),
+  replyTo: idSchema16.optional(),
   body: external_exports.string().trim().min(1).max(4e4),
   sendAt: external_exports.iso.datetime({ offset: true }),
   /** A reply that also goes to the channel at its time (`--also-channel`). */
@@ -36591,9 +37028,9 @@ var scheduleAsCallerInputSchemaDefinition = external_exports.object({
 var listScheduledAsCallerInputSchemaDefinition = external_exports.object({
   channel: channelRefSchema2.optional()
 });
-var scheduledAsCallerInputSchemaDefinition = external_exports.object({ scheduledId: idSchema15 });
+var scheduledAsCallerInputSchemaDefinition = external_exports.object({ scheduledId: idSchema16 });
 var editScheduledAsCallerInputSchemaDefinition = external_exports.object({
-  scheduledId: idSchema15,
+  scheduledId: idSchema16,
   body: external_exports.string().trim().min(1).max(4e4).optional(),
   sendAt: external_exports.iso.datetime({ offset: true }).optional()
 }).refine((input2) => input2.body !== void 0 || input2.sendAt !== void 0, {
@@ -36602,7 +37039,7 @@ var editScheduledAsCallerInputSchemaDefinition = external_exports.object({
 
 // ../../modules/agent/contract/src/agent-channel-config.ts
 var channelRefSchema3 = external_exports.string().trim().min(1).max(200);
-var memberRefSchema = external_exports.string().trim().min(1).max(200);
+var memberRefSchema2 = external_exports.string().trim().min(1).max(200);
 var updateChannelAsCallerInputSchemaDefinition = external_exports.object({
   channel: channelRefSchema3,
   name: external_exports.string().trim().min(1).max(80).optional(),
@@ -36616,14 +37053,14 @@ var updateChannelAsCallerInputSchemaDefinition = external_exports.object({
 );
 var addChannelMembersAsCallerInputSchemaDefinition = external_exports.object({
   channel: channelRefSchema3,
-  members: external_exports.array(memberRefSchema).min(1).max(100)
+  members: external_exports.array(memberRefSchema2).min(1).max(100)
 });
 var removeChannelMemberAsCallerInputSchemaDefinition = external_exports.object({
   channel: channelRefSchema3,
-  member: memberRefSchema
+  member: memberRefSchema2
 });
 var openDirectAsCallerInputSchemaDefinition = external_exports.object({
-  people: external_exports.array(memberRefSchema).min(1).max(GROUP_DM_MAX_MEMBERS - 1)
+  people: external_exports.array(memberRefSchema2).min(1).max(GROUP_DM_MAX_MEMBERS - 1)
 });
 var setNotifyAsCallerInputSchemaDefinition = external_exports.object({
   channel: channelRefSchema3,
@@ -36656,7 +37093,7 @@ var callerBrowsableChannelSchemaDefinition = external_exports.object({
 // ../../modules/agent/contract/src/agent-workspace.ts
 var CALLER_WORKSPACE_ROLES = ["OWNER", "ADMIN", "MEMBER", "GUEST"];
 var roleSchema = external_exports.enum(CALLER_WORKSPACE_ROLES);
-var memberRefSchema2 = external_exports.string().trim().min(1).max(320);
+var memberRefSchema3 = external_exports.string().trim().min(1).max(320);
 var callerMyWorkspaceSchemaDefinition = external_exports.object({
   id: external_exports.string().min(1),
   name: external_exports.string(),
@@ -36695,10 +37132,10 @@ var revokeInviteAsCallerInputSchemaDefinition = external_exports.object({
   invite: external_exports.string().trim().min(1).max(320)
 });
 var changeRoleAsCallerInputSchemaDefinition = external_exports.object({
-  member: memberRefSchema2,
+  member: memberRefSchema3,
   role: roleSchema
 });
-var removeWorkspaceMemberAsCallerInputSchemaDefinition = external_exports.object({ member: memberRefSchema2 });
+var removeWorkspaceMemberAsCallerInputSchemaDefinition = external_exports.object({ member: memberRefSchema3 });
 var decideRequestAsCallerInputSchemaDefinition = external_exports.object({
   requestId: external_exports.string().trim().min(1).max(80),
   decision: external_exports.enum(["approved", "denied"])
@@ -36844,6 +37281,25 @@ var CHAT_KEY_PATHS = {
   starred: "/api/agents/me/chat/starred"
 };
 
+// ../../modules/agent/contract/src/agent-join-events.ts
+var agentJoinRequestedPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  requestId: external_exports.string().min(1),
+  /** The code as the person reads it, such as `BCDF-GHJK`. */
+  code: external_exports.string().min(1),
+  name: external_exports.string(),
+  harness: agentHarnessSchema.catch("other"),
+  note: external_exports.string(),
+  deciderIds: external_exports.array(external_exports.string().min(1)),
+  expiresAt: external_exports.iso.datetime()
+});
+var agentJoinResolvedPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  requestId: external_exports.string().min(1),
+  state: external_exports.enum(["approved", "denied"]),
+  resolvedByUserId: external_exports.string().min(1)
+});
+
 // src/services/laze-client.service.ts
 var CLI_VERSION_HEADER = "x-laze-cli-version";
 var LazeApiError = class extends Error {
@@ -37250,7 +37706,7 @@ var dismissSlackLinkPromptInputSchemaDefinition = external_exports.object({
 var dismissSlackLinkPromptInputSchema = dismissSlackLinkPromptInputSchemaDefinition;
 
 // ../../modules/slack/contract/src/slack-move.ts
-var workspaceIdSchema8 = external_exports.string().min(1);
+var workspaceIdSchema9 = external_exports.string().min(1);
 var teamIdSchema = external_exports.string().regex(/^[TE][A-Z0-9]{2,20}$/);
 var slackChannelIdSchema = external_exports.string().regex(/^[CG][A-Z0-9]{2,20}$/);
 var slackUserIdSchema = external_exports.string().regex(/^[UW][A-Z0-9]{2,20}$/);
@@ -37323,7 +37779,7 @@ var slackMovePreviewSchemaDefinition = external_exports.object({
 });
 var slackMovePreviewSchema = slackMovePreviewSchemaDefinition;
 var slackMoveChannelInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema8,
+  workspaceId: workspaceIdSchema9,
   teamId: teamIdSchema,
   slackChannelId: slackChannelIdSchema
 });
@@ -37338,7 +37794,7 @@ var slackMoveRequestSchemaDefinition = external_exports.object({
   farewell: external_exports.string().trim().min(1).max(SLACK_FAREWELL_MAX).optional()
 });
 var startSlackMovesInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema8,
+  workspaceId: workspaceIdSchema9,
   teamId: teamIdSchema,
   channels: external_exports.array(slackMoveRequestSchemaDefinition).min(1).max(SLACK_MOVE_BATCH_MAX)
 });
@@ -37353,13 +37809,13 @@ var startedSlackMovesSchemaDefinition = external_exports.object({
 });
 var startedSlackMovesSchema = startedSlackMovesSchemaDefinition;
 var slackMoveInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema8,
+  workspaceId: workspaceIdSchema9,
   moveId: external_exports.string().min(1).max(100)
 });
 var slackMoveInputSchema = slackMoveInputSchemaDefinition;
 
 // ../../modules/slack/contract/src/slack-setup.ts
-var workspaceIdSchema9 = external_exports.string().min(1);
+var workspaceIdSchema10 = external_exports.string().min(1);
 var appKeySchema = external_exports.string().regex(/^[a-z0-9]{8,64}$/);
 var returnToSchema3 = external_exports.string().startsWith("/").max(500).optional();
 var slackAppCredentialFieldSchema = external_exports.enum([
@@ -37368,7 +37824,7 @@ var slackAppCredentialFieldSchema = external_exports.enum([
   "clientSecret",
   "signingSecret"
 ]);
-var beginSlackSetupInputSchemaDefinition = external_exports.object({ workspaceId: workspaceIdSchema9 });
+var beginSlackSetupInputSchemaDefinition = external_exports.object({ workspaceId: workspaceIdSchema10 });
 var beginSlackSetupInputSchema = beginSlackSetupInputSchemaDefinition;
 var slackSetupSchemaDefinition = external_exports.object({
   appKey: appKeySchema,
@@ -37382,7 +37838,7 @@ var slackSetupSchemaDefinition = external_exports.object({
 });
 var slackSetupSchema = slackSetupSchemaDefinition;
 var saveSlackAppCredentialsInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema9,
+  workspaceId: workspaceIdSchema10,
   appKey: appKeySchema,
   appId: external_exports.string().max(200),
   clientId: external_exports.string().max(200),
@@ -37392,7 +37848,7 @@ var saveSlackAppCredentialsInputSchemaDefinition = external_exports.object({
 });
 var saveSlackAppCredentialsInputSchema = saveSlackAppCredentialsInputSchemaDefinition;
 var installSlackAppInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema9,
+  workspaceId: workspaceIdSchema10,
   appKey: appKeySchema,
   returnTo: returnToSchema3
 });
@@ -37491,7 +37947,7 @@ var slackCredentialsRetiredPayloadSchemaDefinition = external_exports.object({
 var SLACK_CACHE_DAYS_MAX = 30;
 var SLACK_HISTORY_PATH = "/api/slack/history";
 var SLACK_READ_BUDGET_MAX = 5e3;
-var workspaceIdSchema10 = external_exports.string().min(1);
+var workspaceIdSchema11 = external_exports.string().min(1);
 var teamIdSchema2 = external_exports.string().regex(/^[TE][A-Z0-9]{2,20}$/);
 var slackChannelIdSchema2 = external_exports.string().regex(/^[CG][A-Z0-9]{2,20}$/);
 var slackConnectionStatusSchema = external_exports.enum(["connected", "needs_reinstall"]);
@@ -37551,13 +38007,13 @@ var slackChannelViewSchemaDefinition = external_exports.object({
 });
 var slackChannelViewSchema = slackChannelViewSchemaDefinition;
 var startSlackInstallInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   /** A path in Laze to land on afterwards; defaults to the Connectors page. */
   returnTo: external_exports.string().startsWith("/").max(500).optional()
 });
 var startSlackInstallInputSchema = startSlackInstallInputSchemaDefinition;
 var startSlackLinkInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   teamId: teamIdSchema2,
   returnTo: external_exports.string().startsWith("/").max(500).optional()
 });
@@ -37565,7 +38021,7 @@ var startSlackLinkInputSchema = startSlackLinkInputSchemaDefinition;
 var startedSlackAuthorizeSchemaDefinition = external_exports.object({ authorizeUrl: external_exports.url() });
 var startedSlackAuthorizeSchema = startedSlackAuthorizeSchemaDefinition;
 var startSlackSetupInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   configToken: external_exports.string().trim().min(10).max(1e3),
   returnTo: external_exports.string().startsWith("/").max(500).optional()
 });
@@ -37584,19 +38040,19 @@ var slackEventsHeadersSchemaDefinition = external_exports.object({
 });
 var slackEventsAnswerSchemaDefinition = external_exports.object({ challenge: external_exports.string().nullable() });
 var teamInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   teamId: teamIdSchema2
 });
 var slackTeamInputSchema = teamInputSchemaDefinition;
 var setSlackMirrorInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   teamId: teamIdSchema2,
   slackChannelId: slackChannelIdSchema2,
   mirrored: external_exports.boolean()
 });
 var setSlackMirrorInputSchema = setSlackMirrorInputSchemaDefinition;
 var updateSlackConnectionInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   teamId: teamIdSchema2,
   label: external_exports.string().trim().max(80).nullable().optional(),
   cacheDays: external_exports.number().int().min(1).max(SLACK_CACHE_DAYS_MAX).optional(),
@@ -37604,17 +38060,17 @@ var updateSlackConnectionInputSchemaDefinition = external_exports.object({
 });
 var updateSlackConnectionInputSchema = updateSlackConnectionInputSchemaDefinition;
 var updateSlackAppInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   teamId: teamIdSchema2,
   configToken: external_exports.string().trim().min(10).max(1e3)
 });
 var updateSlackAppInputSchema = updateSlackAppInputSchemaDefinition;
 var slackLinkParamsSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   teamId: teamIdSchema2
 });
 var slackHistoryInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   /** The Laze conversation that mirrors the Slack channel. */
   channelId: external_exports.string().min(1),
   /** Messages before this time; the oldest message the cache shows. */
@@ -37644,7 +38100,7 @@ var slackHistoryPageSchemaDefinition = external_exports.object({
 });
 var slackHistoryPageSchema = slackHistoryPageSchemaDefinition;
 var slackFileParamsSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   /** The Laze conversation that mirrors the Slack channel. */
   channelId: external_exports.string().min(1).max(200),
   fileId: external_exports.string().regex(/^F[A-Z0-9]{2,30}$/)
@@ -37652,7 +38108,7 @@ var slackFileParamsSchemaDefinition = external_exports.object({
 var SLACK_SEARCH_QUERY_MIN = 2;
 var SLACK_SEARCH_QUERY_MAX = 200;
 var slackSearchInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema10,
+  workspaceId: workspaceIdSchema11,
   query: external_exports.string().trim().min(SLACK_SEARCH_QUERY_MIN).max(SLACK_SEARCH_QUERY_MAX)
 });
 var slackSearchInputSchema = slackSearchInputSchemaDefinition;
@@ -37700,7 +38156,7 @@ var slackSearchAnswerSchemaDefinition = external_exports.object({
 });
 var slackSearchAnswerSchema = slackSearchAnswerSchemaDefinition;
 var SlackApi = moduleApi()("slack");
-var workspaceInput3 = external_exports.object({ workspaceId: workspaceIdSchema10 });
+var workspaceInput3 = external_exports.object({ workspaceId: workspaceIdSchema11 });
 var slackTrpc = defineTrpcContract("slack").query("overview").withInput(workspaceInput3).withOutput(slackOverviewSchema).mutation("startSetup").withInput(startSlackSetupInputSchema).withOutput(startedSlackAuthorizeSchema).mutation("beginSetup").withInput(beginSlackSetupInputSchema).withOutput(slackSetupSchema).mutation("saveAppCredentials").withInput(saveSlackAppCredentialsInputSchema).withOutput(startedSlackAuthorizeSchema).mutation("installApp").withInput(installSlackAppInputSchema).withOutput(startedSlackAuthorizeSchema).mutation("startInstall").withInput(startSlackInstallInputSchema).withOutput(startedSlackAuthorizeSchema).mutation("startLink").withInput(startSlackLinkInputSchema).withOutput(startedSlackAuthorizeSchema).query("channels").withInput(slackTeamInputSchema).withOutput(external_exports.array(slackChannelViewSchema)).mutation("setMirror").withInput(setSlackMirrorInputSchema).withOutput(slackConnectionViewSchema).mutation("updateConnection").withInput(updateSlackConnectionInputSchema).withOutput(slackConnectionViewSchema).mutation("disconnect").withInput(slackTeamInputSchema).withOutput(external_exports.object({ disconnected: external_exports.literal(true) })).mutation("unlink").withInput(slackTeamInputSchema).withOutput(slackConnectionViewSchema).query("linkPrompts").withInput(workspaceInput3).withOutput(slackLinkPromptsSchema).mutation("dismissLinkPrompt").withInput(dismissSlackLinkPromptInputSchema).withOutput(slackLinkPromptsSchema).mutation("updateApp").withInput(updateSlackAppInputSchema).withOutput(external_exports.object({ updated: external_exports.literal(true) })).query("history").withInput(slackHistoryInputSchema).withOutput(slackHistoryPageSchema).query("search").withInput(slackSearchInputSchema).withOutput(slackSearchAnswerSchema).query("movePreview").withInput(slackMoveChannelInputSchema).withOutput(slackMovePreviewSchema).mutation("startMoves").withInput(startSlackMovesInputSchema).withOutput(startedSlackMovesSchema).mutation("cancelMove").withInput(slackMoveInputSchema).withOutput(slackMoveViewSchema).query("moves").withInput(workspaceInput3).withOutput(slackMovesSchema).build();
 
 // ../../modules/slack/contract/src/slack-keys.ts
@@ -39224,14 +39680,19 @@ function mcpAddCommandOf({ context, profile }) {
   const serve = [...context.program, "mcp", "--profile", profile].map(quote).join(" ");
   return `claude mcp add --scope local ${LAZE_MCP_SERVER} -- ${serve}`;
 }
+var MCP_REGISTER_LIMIT_MS = 3e4;
 async function registerMcp({
   context,
   directory,
   profile
 }) {
   const add3 = mcpAddCommandOf({ context, profile });
-  const script = `cd ${quote(directory)} && { claude mcp remove --scope local ${LAZE_MCP_SERVER} >/dev/null 2>&1; ${add3} >/dev/null; }`;
-  const code = await context.runCommand({ command: ["sh", "-c", script], env: {} }).catch(() => 1);
+  const script = `cd ${quote(directory)} && { claude mcp remove --scope local ${LAZE_MCP_SERVER} >/dev/null 2>&1 </dev/null; ${add3} >/dev/null 2>&1 </dev/null; }`;
+  const run3 = context.runCommand({ command: ["sh", "-c", script], env: {} }).catch(() => 1);
+  const done = new AbortController();
+  const gaveUp = context.sleep(MCP_REGISTER_LIMIT_MS, done.signal).then(() => -1);
+  const code = await Promise.race([run3, gaveUp]);
+  done.abort();
   return code === 0;
 }
 function claudeStepsOf({
@@ -39425,7 +39886,7 @@ function usageOf2({
   const used = `${Math.round(usedPercent)}% used`;
   return resets ? `${used}, resets ${utcTimeOf(resets)}` : used;
 }
-var INVALID2 = "invalid: its provider refused this token, remove it and add a new one";
+var INVALID2 = "signed out: its provider refused this token, sign in again with a new one";
 var EXPIRES_SOON = "    expires within hours: run claude setup-token for a token that lasts a year";
 function formatLogins({ list: list10, nowMs }) {
   if (list10.logins.length === 0) {
@@ -39491,6 +39952,9 @@ function refusalLine({ code, message: message2 }) {
 var CREATE_USAGE = "Usage: laze agent create --name <name> [--description <text>] [--harness laze-models|claude-code|codex] [--team] [--pool <pool>] [--avatar <file>]";
 var UPDATE_USAGE = "Usage: laze agent update <agent> [--name <name>] [--description <text>] [--avatar <file>] [--context-window <tokens, such as 400k or 1M>]";
 var ARCHIVE_USAGE = "Usage: laze agent archive <agent>";
+var PAUSE_USAGE = "Usage: laze agent pause|resume <agent>";
+var TRANSFER_USAGE = "Usage: laze agent transfer <agent> <member: user id, email or name>";
+var RESET_USAGE = "Usage: laze agent reset-session <agent>";
 var HARNESSES = /* @__PURE__ */ new Set(["laze-models", "claude-code", "codex"]);
 var PICTURE_TYPES = {
   ".png": "image/png",
@@ -39641,9 +40105,53 @@ async function archiveAgent({
   context.out(`Archived ${agent2}.
 `);
 }
+async function pauseAgent({
+  context,
+  args
+}) {
+  const paused = args.words[1] === "pause";
+  const agent2 = args.words[2];
+  if (!agent2) throw new CliUsageError(PAUSE_USAGE);
+  const { client } = await signedIn({ context, args });
+  const updated = await client.post("/api/agents/update", { agent: agent2, paused });
+  if (args.flags.json) return context.out(`${JSON.stringify(updated, null, 2)}
+`);
+  context.out(
+    paused ? `Paused ${updated.name}. Its messages wait until you run laze agent resume.
+` : `Resumed ${updated.name}. It answers the messages that waited.
+`
+  );
+}
+async function transferAgent({
+  context,
+  args
+}) {
+  const [, , agent2, to] = args.words;
+  if (!agent2 || !to) throw new CliUsageError(TRANSFER_USAGE);
+  const { client } = await signedIn({ context, args });
+  const moved = await client.post("/api/agents/transfer", { agent: agent2, to });
+  if (args.flags.json) return context.out(`${JSON.stringify(moved, null, 2)}
+`);
+  context.out(`Transferred ${moved.name} to ${to}.
+`);
+}
+async function resetAgentSession({
+  context,
+  args
+}) {
+  const agent2 = args.words[2];
+  if (!agent2) throw new CliUsageError(RESET_USAGE);
+  const { client } = await signedIn({ context, args });
+  const reset = await client.post("/api/agents/reset-session", { agent: agent2 });
+  if (args.flags.json) return context.out(`${JSON.stringify(reset, null, 2)}
+`);
+  context.out(`Reset ${reset.name}'s session. Its next message starts a fresh one.
+`);
+}
 var PATHS = {
   logins: "/api/agents/logins",
   renameLogin: "/api/agents/logins/rename",
+  replaceLogin: "/api/agents/logins/replace",
   deleteLogin: "/api/agents/logins/delete",
   checkLogins: "/api/agents/logins/check",
   pools: "/api/agents/pools",
@@ -39655,7 +40163,7 @@ var PATHS = {
   removePoolMember: "/api/agents/pools/members/remove",
   setAgentPool: "/api/agents/pool"
 };
-var LOGINS_HELP = `Usage: laze agent logins list|add|rename|remove|check
+var LOGINS_HELP = `Usage: laze agent logins list|add|sign-in|rename|remove|check
 
   laze agent logins list [--json]                       your Claude and Codex logins, with usage
   laze agent logins add --harness claude-code|codex --name <name> < token
@@ -39663,6 +40171,8 @@ var LOGINS_HELP = `Usage: laze agent logins list|add|rename|remove|check
   laze agent logins add --harness claude-code|codex --name <name> --from-vault <connection>
       copies a connection already in your own keychain; the CLI never reads or prints it.
       Over MCP --from-vault is the only path: agents never pass a raw token
+  laze agent logins sign-in <login> < token          signs a signed-out login in again: a new
+      token in the same login, read from stdin only; the agents waiting on it run again
   laze agent logins rename <login> <new name>
   laze agent logins remove <login>
   laze agent logins check [--pool <pool>] [--json]      asks the providers for fresh usage, then lists
@@ -39766,6 +40276,7 @@ function printPools({ context, args }, pools, line) {
 `);
 }
 var LOGIN_ADD_USAGE = "Usage: laze agent logins add --harness claude-code|codex --name <name> (< token | --from-vault <connection>)\n";
+var LOGIN_SIGN_IN_USAGE = "Usage: laze agent logins sign-in <login> < token\n";
 var POOL_ADD_USAGE = "Usage: laze agent pools add-login <pool> --harness claude-code|codex --name <name> (< token | --from-vault <connection>)\n";
 var LOGIN_ACTIONS = {
   check: {
@@ -39814,6 +40325,22 @@ var LOGIN_ACTIONS = {
       );
     }
   },
+  "sign-in": {
+    words: 1,
+    run: async (step) => {
+      const login2 = loginNamed({ logins: await loginsOf(step.client), wanted: step.first });
+      if (SECRET_FLAGS.some((flag) => step.args.flags[flag] !== void 0)) {
+        throw new CliUsageError(LOGIN_SIGN_IN_USAGE);
+      }
+      const secret = await secretOnStdin({ context: step.context });
+      const list10 = await step.client.post(PATHS.replaceLogin, {
+        loginId: login2.id,
+        secret
+      });
+      printLogins(step, list10, `Signed in again on ${login2.name}. Its agents run on it again.
+`);
+    }
+  },
   rename: {
     words: 2,
     run: async (step) => {
@@ -40983,6 +41510,72 @@ var appTriggerFiredPayloadSchemaDefinition = external_exports.object({
   at: external_exports.iso.datetime()
 });
 
+// ../../modules/app/contract/src/app.pins.ts
+var appPinChangedPayloadSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  channelId: external_exports.string().min(1),
+  appId: external_exports.string().min(1),
+  change: external_exports.enum(["pinned", "unpinned"]),
+  changeId: external_exports.string().min(1),
+  by: appActorSchema,
+  /** True when an agent's create or publish pinned it, not a person's choice. */
+  automatic: external_exports.boolean(),
+  at: external_exports.iso.datetime()
+});
+var appPinSchemaDefinition = external_exports.object({
+  appId: external_exports.string().min(1),
+  channelId: external_exports.string().min(1),
+  /** The app's name as the tab shows it. */
+  name: external_exports.string(),
+  /** The reader's role in the app; null when they cannot open it. */
+  role: appRoleSchema.nullable(),
+  /** Whether the app serves a published version, else its draft preview. */
+  published: external_exports.boolean(),
+  pinnedBy: appActorSchema,
+  pinnedByName: external_exports.string().nullable(),
+  pinnedAt: external_exports.iso.datetime()
+});
+var appPinViewSchemaDefinition = external_exports.object({
+  activeAppId: external_exports.string().nullable(),
+  minimised: external_exports.boolean()
+});
+var channelAppPinsSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  channelId: external_exports.string().min(1),
+  /** Oldest pin first, the order the tabs show. */
+  pins: external_exports.array(appPinSchemaDefinition),
+  view: appPinViewSchemaDefinition
+});
+var channelAppPinsSchema = channelAppPinsSchemaDefinition;
+var pinAppInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  appId: external_exports.string().min(1),
+  /** The conversation, by id or by channel name with or without `#`. */
+  channel: external_exports.string().trim().min(1).max(120)
+});
+var pinAppInputSchema = pinAppInputSchemaDefinition;
+var channelPinsInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  channel: external_exports.string().trim().min(1).max(120)
+});
+var channelPinsInputSchema = channelPinsInputSchemaDefinition;
+var setPinViewInputSchemaDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  channel: external_exports.string().trim().min(1).max(120),
+  /** The tab to open next time; absent keeps the one saved. */
+  activeAppId: external_exports.string().min(1).nullable().optional(),
+  minimised: external_exports.boolean().optional()
+});
+var setPinViewInputSchema = setPinViewInputSchemaDefinition;
+var pinAppByKeyInputSchemaDefinition = external_exports.object({
+  appId: external_exports.string().min(1),
+  /** Absent in an agent's turn means the conversation the turn runs in. */
+  channel: external_exports.string().trim().min(1).max(120).optional()
+});
+var channelPinsByKeyInputSchemaDefinition = channelPinsInputSchemaDefinition.omit({
+  workspaceId: true
+});
+
 // ../../modules/app/contract/src/app.backup.ts
 var appBackupCheckFailureSchemaDefinition = external_exports.object({
   appId: external_exports.string(),
@@ -41005,7 +41598,8 @@ var appBackupCheckAlertsSchemaDefinition = external_exports.object({
 // ../../modules/app/contract/src/app.trpc.ts
 var appMainTrpc = defineTrpcContract("app").query("list").withInput(listAppsInputSchema).withOutput(external_exports.array(appSchema)).query("get").withInput(appRefSchema).withOutput(appSchema).mutation("create").withInput(createAppInputSchema).withOutput(appSchema).mutation("rename").withInput(renameAppInputSchema).withOutput(appSchema).mutation("archive").withInput(appRefSchema).withOutput(appSchema).mutation("unarchive").withInput(appRefSchema).withOutput(appSchema).mutation("delete").withInput(deleteAppInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).query("versions").withInput(appRefSchema).withOutput(external_exports.array(appVersionSchema)).mutation("revert").withInput(revertInputSchema).withOutput(appVersionSchema).mutation("publish").withInput(publishInputSchema).withOutput(publishOutcomeSchema).query("collections").withInput(siteRefSchema).withOutput(external_exports.array(collectionSchema)).query("records").withInput(listRecordsInputSchema).withOutput(recordPageSchema).mutation("writeRecord").withInput(writeRecordInputSchema).withOutput(appRecordSchema).mutation("deleteRecord").withInput(deleteRecordInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).query("views").withInput(siteRefSchema).withOutput(external_exports.array(appViewSchema)).mutation("saveView").withInput(saveViewInputSchema).withOutput(appViewSchema).mutation("deleteView").withInput(deleteViewInputSchema).withOutput(external_exports.object({ deleted: external_exports.literal(true) })).mutation("chooseCardRows").withInput(chooseCardRowsInputSchema).withOutput(appCardChoiceSchema).query("exportRecords").withInput(exportRecordsInputSchema).withOutput(recordExportSchema).mutation("importRecords").withInput(importRecordsInputSchema).withOutput(recordImportSchema).mutation("decidePublish").withInput(decidePublishInputSchema).withOutput(publishOutcomeSchema).mutation("nameVersion").withInput(nameVersionInputSchema).withOutput(appVersionSchema).mutation("makeInternal").withInput(appRefSchema).withOutput(appSchema).mutation("revokePublishLease").withInput(appRefSchema).withOutput(appSchema).mutation("signInHandoff").withInput(signInHandoffInputSchema).withOutput(signInHandoffSchema).query("functionLogs").withInput(listFunctionLogsInputSchema).withOutput(external_exports.array(appFunctionLogEntrySchema)).query("functionSettings").withInput(appWorkspaceRefSchema).withOutput(appFunctionSettingsSchema).query("access").withInput(appRefSchema).withOutput(appAccessSchema).mutation("grantAccess").withInput(grantAppAccessInputSchema).withOutput(appAccessSchema).mutation("revokeAccess").withInput(revokeAppAccessInputSchema).withOutput(appAccessSchema).mutation("setVisibility").withInput(setAppVisibilityInputSchema).withOutput(visibilityOutcomeSchema).mutation("setMemberRole").withInput(setMemberRoleInputSchema).withOutput(appAccessSchema).mutation("unpublish").withInput(appRefSchema).withOutput(appSchema).query("door").withInput(appRefSchema).withOutput(appDoorSchema).mutation("requestAccess").withInput(appRefSchema).withOutput(appDoorSchema).mutation("decideAccess").withInput(decideAppAccessInputSchema).withOutput(appAccessRequestSchema).query("users").withInput(appRefSchema).withOutput(appUsersSchema).mutation("blockUser").withInput(blockAppUserInputSchema).withOutput(appUsersSchema).mutation("deleteUser").withInput(deleteAppUserInputSchema).withOutput(deletedAppUserSchema).mutation("setFunctionsEnabled").withInput(setFunctionsEnabledInputSchema).withOutput(appFunctionSettingsSchema).query("backups").withInput(appRefSchema).withOutput(appBackupStatusSchema).mutation("restoreData").withInput(restoreAppDataInputSchema).withOutput(appRestoreSchema).query("cost").withInput(appRefSchema).withOutput(appCostSchema).mutation("setBudget").withInput(setAppBudgetInputSchema).withOutput(appCostSchema).query("triggers").withInput(appRefSchema).withOutput(appTriggersSchema).mutation("setTriggerPaused").withInput(setAppTriggerPausedInputSchema).withOutput(appTriggerSchema).mutation("removeTrigger").withInput(appTriggerRefSchema).withOutput(external_exports.object({ removed: external_exports.literal(true) })).build();
 var appConnectionsTrpc = defineTrpcContract("app").query("connections").withInput(appRefSchema).withOutput(appConnectionsSchema).mutation("allowConnection").withInput(appConnectionRefSchema).withOutput(appConnectionsSchema).mutation("revokeConnection").withInput(appConnectionRefSchema).withOutput(appConnectionsSchema).build();
-var appTrpc = joinTrpcContracts("app", appMainTrpc, appConnectionsTrpc);
+var appPinsTrpc = defineTrpcContract("app").query("pins").withInput(channelPinsInputSchema).withOutput(channelAppPinsSchema).mutation("pin").withInput(pinAppInputSchema).withOutput(channelAppPinsSchema).mutation("unpin").withInput(pinAppInputSchema).withOutput(channelAppPinsSchema).mutation("setPinView").withInput(setPinViewInputSchema).withOutput(channelAppPinsSchema).build();
+var appTrpc = joinTrpcContracts("app", appMainTrpc, appConnectionsTrpc, appPinsTrpc);
 
 // ../../modules/app/contract/src/app.rest.ts
 var byKey = { workspaceId: true };
@@ -41224,6 +41818,24 @@ var appCliCommands = [
     arguments: ["<connection>"],
     summary: "Stop the app's server functions using the connection; their next call is refused"
   },
+  {
+    command: "laze app pin",
+    operation: "pinApp",
+    arguments: ["[app]", "--channel <c>"],
+    summary: "Pin the app as a tab of a channel or chat for everyone in it, who may then open it; an app an agent creates or publishes from a conversation is pinned there on its own"
+  },
+  {
+    command: "laze app unpin",
+    operation: "unpinApp",
+    arguments: ["[app]", "--channel <c>"],
+    summary: "Take the app's tab away from the conversation; the app and its data stay"
+  },
+  {
+    command: "laze app pins",
+    operation: "listChannelPins",
+    arguments: ["<channel>"],
+    summary: "The apps pinned to a conversation, oldest first"
+  },
   {
     command: "laze app rename",
     operation: "renameApp",
@@ -41395,6 +42007,7 @@ var appUi = uiTokens("app");
 var AppNavSlot = appUi.component("nav");
 var AppPanelSlot = appUi.component("panel");
 var AppCardSlot = appUi.component("card");
+var AppPinStripSlot = appUi.component("pin-strip");
 
 // ../../modules/app/contract/src/app.config.ts
 var appConfig = Config.define((c) => ({
@@ -42181,6 +42794,66 @@ var appManageCommands = {
   "delete-user": deleteUser
 };
 
+// src/services/app-pin-commands.service.ts
+var USAGE3 = `Usage:
+  laze app pin [app] --channel <c>
+  laze app unpin [app] --channel <c>
+  laze app pins <channel>`;
+function print3({
+  context,
+  args,
+  value,
+  text: text2
+}) {
+  context.out(args.flags.json ? `${JSON.stringify(value, null, 2)}
+` : text2);
+}
+function pinsText({ channel, listed }) {
+  if (listed.pins.length === 0) {
+    return `No apps are pinned to ${channel}. laze app pin --channel ${channel} pins one.
+`;
+  }
+  const lines = listed.pins.map(
+    (pin) => `${pin.name}  ${pin.appId}  pinned by ${pin.pinnedByName ?? pin.pinnedBy.id} ${pin.pinnedAt.slice(0, 10)}
+`
+  );
+  return `Pinned to ${channel}:
+${lines.join("")}`;
+}
+async function appPinCommand({
+  context,
+  args,
+  verb,
+  open: open2
+}) {
+  const channel = flagText({ args, name: "channel" });
+  const { client, appId, name: name2 } = await open2();
+  const listed = await client.post(`/api/apps/${verb}`, {
+    appId,
+    ...channel ? { channel } : {}
+  });
+  const where = channel || "this conversation";
+  print3({
+    context,
+    args,
+    value: listed,
+    text: verb === "pin" ? `Pinned ${name2} to ${where}: everyone in it sees the tab and may open the app.
+` : `Unpinned ${name2} from ${where}. The app and its data stay.
+`
+  });
+}
+async function appPinsCommand({
+  context,
+  args,
+  signed: signed2
+}) {
+  const channel = args.words[2] ?? flagText({ args, name: "channel" });
+  if (!channel) throw new CliUsageError(USAGE3);
+  const client = await signed2();
+  const listed = await client.post("/api/apps/pins", { channel });
+  print3({ context, args, value: listed, text: pinsText({ channel, listed }) });
+}
+
 // src/services/app-script-check.service.ts
 import { execFile } from "node:child_process";
 import { mkdtemp, rm as rm4, writeFile as writeFile7 } from "node:fs/promises";
@@ -42236,7 +42909,7 @@ async function scriptErrorsOf({
 }
 
 // src/services/app-trigger-commands.service.ts
-var USAGE3 = `Usage:
+var USAGE4 = `Usage:
   laze app trigger add <collection> --on create,update,delete [--where <json>] --prompt <text>
   laze app trigger list
   laze app trigger pause|resume <trigger-id>
@@ -42272,7 +42945,7 @@ function triggerLine(trigger) {
     ${trigger.prompt}
 `;
 }
-function print3({
+function print4({
   context,
   args,
   value,
@@ -42290,14 +42963,14 @@ async function add({ context, args, open: open2, word: word2 }) {
   const text2 = `Added a trigger on ${name2}:
 ${triggerLine(trigger)}Matching changes to published ${word2} records wake ${trigger.agentName} in ${trigger.channelName}.
 `;
-  print3({ context, args, value: trigger, text: text2 });
+  print4({ context, args, value: trigger, text: text2 });
 }
 async function list({ context, args, open: open2 }) {
   const { client, appId, name: name2 } = await open2();
   const listed = await client.post("/api/apps/triggers", { appId });
   const text2 = listed.triggers.length === 0 ? `${name2} has no triggers. laze app trigger add <collection> adds one.
 ` : listed.triggers.map(triggerLine).join("");
-  print3({ context, args, value: listed, text: text2 });
+  print4({ context, args, value: listed, text: text2 });
 }
 async function setPaused({ context, args, open: open2, word: word2, paused }) {
   const { client, appId } = await open2();
@@ -42306,12 +42979,12 @@ async function setPaused({ context, args, open: open2, word: word2, paused }) {
     triggerId: word2,
     paused
   });
-  print3({ context, args, value: trigger, text: triggerLine(trigger) });
+  print4({ context, args, value: trigger, text: triggerLine(trigger) });
 }
 async function remove2({ context, args, open: open2, word: word2 }) {
   const { client, appId } = await open2();
   await client.post("/api/apps/triggers/remove", { appId, triggerId: word2 });
-  print3({ context, args, value: { removed: word2 }, text: `Removed trigger ${word2}.
+  print4({ context, args, value: { removed: word2 }, text: `Removed trigger ${word2}.
 ` });
 }
 async function appTrigger({
@@ -42322,40 +42995,66 @@ async function appTrigger({
   const [, , verb, word2] = args.words;
   if (verb === "list") return list({ context, args, open: open2 });
   const known = verb === "add" || verb === "pause" || verb === "resume" || verb === "remove";
-  if (known && !word2) throw new CliUsageError(USAGE3);
+  if (known && !word2) throw new CliUsageError(USAGE4);
   if (known && word2) {
     const run3 = { context, args, open: open2, word: word2 };
     if (verb === "add") return add(run3);
     if (verb === "remove") return remove2(run3);
     return setPaused({ ...run3, paused: verb === "pause" });
   }
-  context.out(`${USAGE3}
+  context.out(`${USAGE4}
 `);
   if (verb) throw new CliUsageError(`laze app trigger has no command ${verb}`);
 }
 
+// src/services/connected-turn.service.ts
+async function connectedTurnTokenOf({
+  client,
+  channelId
+}) {
+  try {
+    const turn = await client.post("/api/agents/me/turn-token", {
+      channelId
+    });
+    return turn.turnToken;
+  } catch (error62) {
+    if (error62 instanceof LazeApiError && (error62.code === "agent_no_open_turn" || error62.status === 404)) {
+      return "";
+    }
+    throw error62;
+  }
+}
+
 // src/services/app-commands.service.ts
-var USAGE4 = `Usage: laze app <command>. The app comes from ${APP_MANIFEST_FILE} in the folder, or --app <id|slug>.
+var USAGE5 = `Usage: laze app <command>. The app comes from ${APP_MANIFEST_FILE} in the folder, or --app <id|slug>.
 
 ${appCliCommands.map((entry) => `  ${entry.command} ${entry.arguments.join(" ")}
       ${entry.summary}`).join("\n")}`;
 var MAX_FILES = 2e3;
-async function turnTokenOf({ context }) {
+async function turnTokenOf({
+  context,
+  args,
+  client,
+  agent: agent2
+}) {
   const env = context.environment.inherited;
   const pinned = env.LAZE_TURN_TOKEN?.trim();
   if (pinned) return pinned;
-  if (!env.LAZE_TURN_FILE) return "";
-  return readFile7(env.LAZE_TURN_FILE, "utf8").then(
-    (text2) => text2.trim(),
-    () => ""
-  );
+  if (env.LAZE_TURN_FILE) {
+    return readFile7(env.LAZE_TURN_FILE, "utf8").then(
+      (text2) => text2.trim(),
+      () => ""
+    );
+  }
+  if (!agent2) return "";
+  return connectedTurnTokenOf({ client, channelId: flagText({ args, name: "channel" }) || null });
 }
 async function appClient({
   context,
   args
 }) {
-  const { client } = await signedIn({ context, args });
-  const turn = await turnTokenOf({ context });
+  const { client, profile } = await signedIn({ context, args });
+  const turn = await turnTokenOf({ context, args, client, agent: profile.kind === "agent" });
   return turn ? client.withHeaders({ "x-laze-turn": turn }) : client;
 }
 function siteOf(args, fallback) {
@@ -42427,7 +43126,7 @@ async function listFiles(folder) {
     throw new CliUsageError(`A version holds at most ${MAX_FILES} files`);
   return found.toSorted();
 }
-function print4({
+function print5({
   context,
   args,
   value,
@@ -42438,7 +43137,7 @@ function print4({
 }
 var appCreate = async ({ context, args }) => {
   const name2 = args.words.slice(2).join(" ").trim();
-  if (!name2) throw new CliUsageError(USAGE4);
+  if (!name2) throw new CliUsageError(USAGE5);
   const templateName = flagText({ args, name: "template" });
   if (templateName && !APP_TEMPLATES.includes(templateName)) {
     throw new CliUsageError(
@@ -42471,7 +43170,7 @@ var appCreate = async ({ context, args }) => {
   };
   await writeFile8(join8(folder, APP_MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}
 `);
-  print4({
+  print5({
     context,
     args,
     value: { app: app2, folder },
@@ -42488,7 +43187,7 @@ var appList = async ({ context, args }) => {
     return `${app2.slug}	${app2.id}	${state}	${app2.publishedUrl}
 `;
   });
-  print4({ context, args, value: apps, text: lines.join("") || "No apps yet.\n" });
+  print5({ context, args, value: apps, text: lines.join("") || "No apps yet.\n" });
 };
 var appPush = async ({ context, args }) => {
   const { message: message2, words } = messageOf({ args });
@@ -42555,7 +43254,7 @@ var appPush = async ({ context, args }) => {
   if (args.flags.seed && manifest) {
     await client.post("/api/apps/seed", { appId, records: manifest.seed });
   }
-  print4({
+  print5({
     context,
     args,
     value: { version: version2, app: app2 },
@@ -42571,7 +43270,7 @@ var appPreview = async ({ context, args }) => {
     appId,
     site: siteOf(args, "draft")
   });
-  print4({ context, args, value: preview, text: `${preview.url}
+  print5({ context, args, value: preview, text: `${preview.url}
 ` });
 };
 var appPublish = async ({ context, args }) => {
@@ -42584,7 +43283,7 @@ var appPublish = async ({ context, args }) => {
     ...version2 ? { version: version2 } : {},
     ...visibility ? { visibility } : {}
   });
-  print4({ context, args, value: outcome, text: publishLine(outcome) });
+  print5({ context, args, value: outcome, text: publishLine(outcome) });
 };
 function publishLine(outcome) {
   const { request: request2 } = outcome;
@@ -42618,7 +43317,7 @@ var appVersions = async ({ context, args }) => {
   const client = await appClient({ context, args });
   const appId = await appIdOf({ client, args, folder: folderOf({ context, word: void 0 }) });
   const versions = await client.post("/api/apps/versions", { appId });
-  print4({
+  print5({
     context,
     args,
     value: versions,
@@ -42630,7 +43329,7 @@ var appVersions = async ({ context, args }) => {
 };
 var appRevert = async ({ context, args }) => {
   const prefix = messageOf({ args }).words[2];
-  if (!prefix) throw new CliUsageError(USAGE4);
+  if (!prefix) throw new CliUsageError(USAGE5);
   const client = await appClient({ context, args });
   const appId = await appIdOf({ client, args, folder: folderOf({ context, word: void 0 }) });
   const { message: message2 } = messageOf({ args });
@@ -42640,7 +43339,7 @@ var appRevert = async ({ context, args }) => {
     ...message2 ? { message: message2 } : {}
   });
   const app2 = await client.post("/api/apps/get", { appId });
-  print4({
+  print5({
     context,
     args,
     value: version2,
@@ -42654,7 +43353,7 @@ var appMakeInternal = async ({ context, args }) => {
   const client = await appClient({ context, args });
   const appId = await appIdOf({ client, args, folder: folderOf({ context, word: void 0 }) });
   const app2 = await client.post("/api/apps/make-internal", { appId });
-  print4({
+  print5({
     context,
     args,
     value: app2,
@@ -42665,7 +43364,7 @@ var appMakeInternal = async ({ context, args }) => {
 var appName = async ({ context, args }) => {
   const [, , prefix, ...rest] = args.words;
   const name2 = rest.join(" ").trim();
-  if (!prefix || !name2) throw new CliUsageError(USAGE4);
+  if (!prefix || !name2) throw new CliUsageError(USAGE5);
   const client = await appClient({ context, args });
   const appId = await appIdOf({ client, args, folder: folderOf({ context, word: void 0 }) });
   const version2 = await client.post("/api/apps/versions/name", {
@@ -42673,7 +43372,7 @@ var appName = async ({ context, args }) => {
     version: await versionOf({ client, appId, prefix }),
     name: name2
   });
-  print4({
+  print5({
     context,
     args,
     value: version2,
@@ -42685,7 +43384,7 @@ var appDiscard = async ({ context, args }) => {
   const client = await appClient({ context, args });
   const appId = await appIdOf({ client, args, folder: folderOf({ context, word: void 0 }) });
   const app2 = await client.post("/api/apps/discard", { appId });
-  print4({ context, args, value: app2, text: `The draft of ${app2.name} is no longer served.
+  print5({ context, args, value: app2, text: `The draft of ${app2.name} is no longer served.
 ` });
 };
 var appCollections = async ({ context, args }) => {
@@ -42694,14 +43393,14 @@ var appCollections = async ({ context, args }) => {
   if (args.words[2] === "define") {
     const name2 = args.words[3];
     const fields = await jsonFlag({ context, args, name: "fields" });
-    if (!name2 || !Array.isArray(fields)) throw new CliUsageError(USAGE4);
+    if (!name2 || !Array.isArray(fields)) throw new CliUsageError(USAGE5);
     const collection = await client.post("/api/apps/collections/define", {
       appId,
       site: siteOf(args, "draft"),
       name: name2,
       fields
     });
-    return print4({
+    return print5({
       context,
       args,
       value: collection,
@@ -42717,7 +43416,7 @@ var appCollections = async ({ context, args }) => {
     (collection) => `${collection.name} (v${collection.version}): ${collection.schema.fields.map((field) => `${field.name}:${field.type}${field.required ? "!" : ""}`).join(", ")}
 `
   );
-  print4({ context, args, value: collections, text: lines.join("") || "No collections yet.\n" });
+  print5({ context, args, value: collections, text: lines.join("") || "No collections yet.\n" });
 };
 var appViewRemove = async ({ context, args }) => {
   const viewId = args.words[3];
@@ -42731,7 +43430,7 @@ var appViewRemove = async ({ context, args }) => {
     site,
     viewId
   });
-  print4({ context, args, value: answer4, text: `Deleted view ${viewId} from the ${site}.
+  print5({ context, args, value: answer4, text: `Deleted view ${viewId} from the ${site}.
 ` });
 };
 var appViews = async ({ context, args }) => {
@@ -42746,7 +43445,7 @@ var appViews = async ({ context, args }) => {
     (view) => `${view.collection}	${view.name}	${view.type}${view.groupBy ? ` by ${view.groupBy}` : ""}${view.dateField ? ` on ${view.dateField}` : ""}	${view.id}
 `
   );
-  print4({ context, args, value: views, text: lines.join("") || "No views yet.\n" });
+  print5({ context, args, value: views, text: lines.join("") || "No views yet.\n" });
 };
 function cardLine({ choice }) {
   const { rows } = choice;
@@ -42781,7 +43480,7 @@ var appCard = async ({ context, args }) => {
       caption: text2("caption")
     }
   });
-  print4({ context, args, value: choice, text: cardLine({ choice }) });
+  print5({ context, args, value: choice, text: cardLine({ choice }) });
 };
 var appSeed = async ({ context, args }) => {
   const folder = folderOf({ context, word: void 0 });
@@ -42791,9 +43490,17 @@ var appSeed = async ({ context, args }) => {
   await client.post("/api/apps/seed", { appId, records });
   context.out("The draft data was emptied and the records loaded.\n");
 };
+function recordPageText({ records, site }) {
+  if (records.totalItems === 0) return `No records in the ${site} data.
+`;
+  const lines = records.items.map((record4) => JSON.stringify(record4)).join("\n");
+  return `${lines}
+(page ${records.page} of ${records.totalPages}, ${records.totalItems} records)
+`;
+}
 var appRecords = async ({ context, args }) => {
   const [, , action = "list", collection] = args.words;
-  if (!collection) throw new CliUsageError(USAGE4);
+  if (!collection) throw new CliUsageError(USAGE5);
   const client = await appClient({ context, args });
   const appId = await appIdOf({ client, args, folder: folderOf({ context, word: void 0 }) });
   const site = siteOf(args, "draft");
@@ -42810,12 +43517,12 @@ var appRecords = async ({ context, args }) => {
         ...recordId ? { recordId } : {}
       }
     );
-    return print4({ context, args, value: written.record, text: `${String(written.record.id)}
+    return print5({ context, args, value: written.record, text: `${String(written.record.id)}
 ` });
   }
   if (action === "delete") {
     const recordId = args.words[4];
-    if (!recordId) throw new CliUsageError(USAGE4);
+    if (!recordId) throw new CliUsageError(USAGE5);
     await client.post("/api/apps/records/delete", { appId, site, collection, recordId });
     return context.out(`Deleted ${recordId}
 `);
@@ -42831,18 +43538,16 @@ var appRecords = async ({ context, args }) => {
     ...filter ? { filter } : {},
     ...sort ? { sort } : {}
   });
-  print4({
+  print5({
     context,
     args,
     value: records,
-    text: `${records.items.map((record4) => JSON.stringify(record4)).join("\n")}
-(page ${records.page} of ${records.totalPages}, ${records.totalItems} records)
-`
+    text: recordPageText({ records, site })
   });
 };
 var appExport = async ({ context, args }) => {
   const collection = args.words[2];
-  if (!collection) throw new CliUsageError(USAGE4);
+  if (!collection) throw new CliUsageError(USAGE5);
   const client = await appClient({ context, args });
   const appId = await appIdOf({ client, args, folder: folderOf({ context, word: void 0 }) });
   const exported = await client.post("/api/apps/export", {
@@ -42861,7 +43566,7 @@ var appExport = async ({ context, args }) => {
 var appImport = async ({ context, args }) => {
   const words = args.words.slice(2);
   const [named, collection, file3] = words.length >= 3 ? words : [void 0, ...words];
-  if (!collection || !file3) throw new CliUsageError(USAGE4);
+  if (!collection || !file3) throw new CliUsageError(USAGE5);
   const csv = await readFile7(resolve4(context.cwd, file3), "utf8").catch(() => {
     throw new CliUsageError(`Cannot read ${file3}`);
   });
@@ -42889,7 +43594,7 @@ var appImport = async ({ context, args }) => {
   const more = result.refused.length > 20 ? `  and ${result.refused.length - 20} more
 ` : "";
   const unmapped = result.columns.filter((column) => !column.field).map((column) => column.column);
-  print4({
+  print5({
     context,
     args,
     value: result,
@@ -42921,7 +43626,7 @@ var appLogs = async ({ context, args }) => {
     errorsOnly: Boolean(args.flags.errors),
     limit: Number.isInteger(limit) && limit > 0 ? Math.min(limit, 1e3) : 50
   });
-  print4({
+  print5({
     context,
     args,
     value: entries,
@@ -42971,7 +43676,7 @@ async function decideAsk({
   decision,
   role: role2
 }) {
-  if (!requestId) throw new CliUsageError(USAGE4);
+  if (!requestId) throw new CliUsageError(USAGE5);
   const answer4 = await client.post("/api/apps/access/decide", {
     appId,
     requestId,
@@ -43024,7 +43729,7 @@ var appAccess = async ({ context, args }) => {
   const appId = await appIdOf({ client, args, folder: folderOf({ context, word: void 0 }) });
   const [, , action, first, second] = args.words;
   if (!action) {
-    print4({
+    print5({
       context,
       args,
       ...await shownAccess({ client, path: "/api/apps/access", body: { appId } })
@@ -43032,14 +43737,14 @@ var appAccess = async ({ context, args }) => {
     return;
   }
   const run3 = Object.hasOwn(ACCESS_ACTIONS, action) ? ACCESS_ACTIONS[action] : void 0;
-  if (!run3) throw new CliUsageError(USAGE4);
-  print4({ context, args, ...await run3({ client, appId, first, second }) });
+  if (!run3) throw new CliUsageError(USAGE5);
+  print5({ context, args, ...await run3({ client, appId, first, second }) });
 };
 var appUnpublish = async ({ context, args }) => {
   const client = await appClient({ context, args });
   const appId = await appIdOf({ client, args, folder: folderOf({ context, word: void 0 }) });
   const app2 = await client.post("/api/apps/unpublish", { appId });
-  print4({
+  print5({
     context,
     args,
     value: app2,
@@ -43084,19 +43789,19 @@ async function appOfWord({
 var appCost = async ({ context, args }) => {
   const { client, appId, name: name2 } = await appOfWord({ context, args, word: args.words[2] });
   const cost = await client.post("/api/apps/cost", { appId });
-  print4({ context, args, value: cost, text: costText({ name: name2, cost }) });
+  print5({ context, args, value: cost, text: costText({ name: name2, cost }) });
 };
 var appBudget = async ({ context, args }) => {
   const words = args.words.slice(2);
   const [word2, amount] = words.length >= 2 ? words : [void 0, ...words];
-  if (!amount) throw new CliUsageError(USAGE4);
+  if (!amount) throw new CliUsageError(USAGE5);
   const monthly = amount === "none" ? null : Number(amount);
   if (monthly !== null && (!Number.isFinite(monthly) || monthly < 0.01)) {
     throw new CliUsageError("The budget is an amount such as 5 or 12.50, or none");
   }
   const { client, appId, name: name2 } = await appOfWord({ context, args, word: word2 });
   const cost = await client.post("/api/apps/budget", { appId, monthly });
-  print4({ context, args, value: cost, text: costText({ name: name2, cost }) });
+  print5({ context, args, value: cost, text: costText({ name: name2, cost }) });
 };
 function managed(command) {
   return ({ context, args }) => command({
@@ -43133,6 +43838,19 @@ var APP_COMMANDS = {
   trigger: ({ context, args }) => appTrigger({ context, args, open: () => appOfWord({ context, args, word: void 0 }) }),
   connections: ({ context, args }) => appConnections({ context, args, open: () => appOfWord({ context, args, word: void 0 }) }),
   connection: ({ context, args }) => appConnection({ context, args, open: () => appOfWord({ context, args, word: void 0 }) }),
+  pin: ({ context, args }) => appPinCommand({
+    context,
+    args,
+    verb: "pin",
+    open: () => appOfWord({ context, args, word: args.words[2] })
+  }),
+  unpin: ({ context, args }) => appPinCommand({
+    context,
+    args,
+    verb: "unpin",
+    open: () => appOfWord({ context, args, word: args.words[2] })
+  }),
+  pins: ({ context, args }) => appPinsCommand({ context, args, signed: () => appClient({ context, args }) }),
   rename: managed(appManageCommands.rename),
   archive: managed(appManageCommands.archive),
   unarchive: managed(appManageCommands.unarchive),
@@ -43150,7 +43868,7 @@ async function app({ context, args }) {
   const name2 = args.words[1] ?? "";
   const command = Object.hasOwn(APP_COMMANDS, name2) ? APP_COMMANDS[name2] : void 0;
   if (!command) {
-    context.out(`${USAGE4}
+    context.out(`${USAGE5}
 `);
     if (name2) throw new CliUsageError(`laze app has no command ${name2}`);
     return;
@@ -43182,8 +43900,14 @@ async function login({ context, args }) {
   const given = flagText({ args, name: "token" });
   const token2 = given || await deviceToken({ context, url: url2, args });
   const profile = await profileOf({ context, url: url2, token: token2 });
-  await context.store.saveProfile({ name: name2, profile });
-  context.out(`Signed in to ${url2} as ${profile.name} (profile "${name2}").
+  const here = Boolean(args.flags.here);
+  await context.store.saveProfile({
+    name: name2,
+    profile,
+    ...here && { bindDirectory: context.cwd, onlyThere: true }
+  });
+  const where = here ? `, used in ${context.cwd} and below` : "";
+  context.out(`Signed in to ${url2} as ${profile.name} (profile "${name2}"${where}).
 `);
 }
 async function deviceToken({
@@ -43797,7 +44521,7 @@ var PATHS2 = {
   wake: "/api/compute/machines/wake",
   delete: "/api/compute/machines/delete"
 };
-var USAGE5 = [
+var USAGE6 = [
   "Usage: laze browser setup <site> [--name <machine>]   a machine with Chrome a person signs in on",
   "       laze browser setup <site> --on <machine>       the same on a person's own machine (laze machine list)",
   "       laze browser cdp <machine>                     a CDP address for this turn (Playwright connectOverCDP)",
@@ -43834,12 +44558,12 @@ function statusLine(machine2) {
 }
 function machineArg({ args }) {
   const machine2 = args.words[2];
-  if (!machine2) throw new CliUsageError(USAGE5);
+  if (!machine2) throw new CliUsageError(USAGE6);
   return machine2;
 }
 async function setup({ context, args }) {
   const site = args.words[2];
-  if (!site) throw new CliUsageError(USAGE5);
+  if (!site) throw new CliUsageError(USAGE6);
   const name2 = flagText({ args, name: "name" }) || void 0;
   const on = flagText({ args, name: "on" }) || void 0;
   const client = await computeClient({ context, args });
@@ -43913,7 +44637,7 @@ async function bridge({ context }) {
   const env = context.environment.inherited;
   const target = env.LAZE_CDP_TARGET;
   const expiresAt = env.LAZE_CDP_EXPIRES_AT;
-  if (!target || !expiresAt) throw new CliUsageError(USAGE5);
+  if (!target || !expiresAt) throw new CliUsageError(USAGE6);
   let until = Temporal3.Instant.from(expiresAt).epochMilliseconds;
   const running = await startCdpBridge({
     target,
@@ -43979,7 +44703,7 @@ async function browser({ context, args }) {
   if (command === "status") return status({ context, args });
   if (command === "sleep" || command === "wake" || command === "delete")
     return change({ context, args, path: PATHS2[command] });
-  throw new CliUsageError(USAGE5);
+  throw new CliUsageError(USAGE6);
 }
 
 // src/rules/channel-format.rules.ts
@@ -44106,7 +44830,7 @@ async function changing({
     await change2();
     return void 0;
   } catch (error62) {
-    const refused = error62 instanceof LazeApiError && profile.kind === "agent" && (error62.code === "agent_restricted" || error62.code === "permission_denied");
+    const refused = error62 instanceof LazeApiError && profile.kind === "agent" && ["agent_restricted", "permission_denied", "channel_admin_required"].includes(error62.code);
     if (!refused) throw error62;
     context.err(`laze: ${error62.message} (${error62.code})
 ${AGENT_HINT}`);
@@ -44250,7 +44974,7 @@ async function changing2({
     await change2();
     return void 0;
   } catch (error62) {
-    const refused = error62 instanceof LazeApiError && profile.kind === "agent" && (error62.code === "agent_restricted" || error62.code === "permission_denied");
+    const refused = error62 instanceof LazeApiError && profile.kind === "agent" && ["agent_restricted", "permission_denied", "channel_admin_required"].includes(error62.code);
     if (!refused) throw error62;
     context.err(`laze: ${error62.message} (${error62.code})
 ${AGENT_HINT2}`);
@@ -44540,7 +45264,7 @@ function numberFlag(args, name2) {
   if (!Number.isInteger(value) || value < 0) throw new CliUsageError(CHAT_ACTIONS_USAGE);
   return value;
 }
-function print5({
+function print6({
   context,
   args,
   answer: answer4,
@@ -44557,7 +45281,7 @@ var lineOf2 = (message2) => {
 var linesOf = (messages, empty) => messages.map(lineOf2).join("") || empty;
 var thread = async ({ context, args, client }) => {
   const answer4 = await client.post(CHAT_KEY_PATHS.thread, { messageId: wordAt(args, 1) });
-  print5({ context, args, answer: answer4, text: (it) => linesOf([it.root, ...it.replies], "") });
+  print6({ context, args, answer: answer4, text: (it) => linesOf([it.root, ...it.replies], "") });
 };
 var threadFollow = async ({ context, args, client }) => {
   const following = !args.flags.off;
@@ -44565,7 +45289,7 @@ var threadFollow = async ({ context, args, client }) => {
     messageId: wordAt(args, 2),
     following
   });
-  print5({
+  print6({
     context,
     args,
     answer: answer4,
@@ -44576,7 +45300,7 @@ var threadFollowing = async ({ context, args, client }) => {
   const answer4 = await client.post(CHAT_KEY_PATHS.threadFollow, {
     messageId: wordAt(args, 2)
   });
-  print5({
+  print6({
     context,
     args,
     answer: answer4,
@@ -44587,7 +45311,7 @@ var threadRead = async ({ context, args, client }) => {
   const answer4 = await client.post(CHAT_KEY_PATHS.markThreadRead, {
     messageId: wordAt(args, 2)
   });
-  print5({ context, args, answer: answer4, text: () => "Marked the thread read.\n" });
+  print6({ context, args, answer: answer4, text: () => "Marked the thread read.\n" });
 };
 var THREAD_VERBS = {
   follow: threadFollow,
@@ -44602,14 +45326,14 @@ var threadCommand = (input2) => {
 var threads = async ({ context, args, client }) => {
   if (args.words[1] === "unread") {
     const answer5 = await client.post(CHAT_KEY_PATHS.threadsUnread, {});
-    return print5({ context, args, answer: answer5, text: (it) => `${it.unread} unread
+    return print6({ context, args, answer: answer5, text: (it) => `${it.unread} unread
 ` });
   }
   const limit = numberFlag(args, "limit");
   const answer4 = await client.post(CHAT_KEY_PATHS.threads, {
     ...limit !== void 0 && { limit }
   });
-  print5({
+  print6({
     context,
     args,
     answer: answer4,
@@ -44627,21 +45351,21 @@ var MESSAGE_VERBS = {
       messageId: wordAt(args, 2),
       body
     });
-    print5({ context, args, answer: answer4, text: (it) => `Edited ${it.id}.
+    print6({ context, args, answer: answer4, text: (it) => `Edited ${it.id}.
 ` });
   },
   delete: async ({ context, args, client }) => {
     const answer4 = await client.post(CHAT_KEY_PATHS.delete, {
       messageId: wordAt(args, 2)
     });
-    print5({ context, args, answer: answer4, text: (it) => `Deleted ${it.id}.
+    print6({ context, args, answer: answer4, text: (it) => `Deleted ${it.id}.
 ` });
   },
   remove: async ({ context, args, client }) => {
     const answer4 = await client.post(CHAT_KEY_PATHS.remove, {
       messageId: wordAt(args, 2)
     });
-    print5({ context, args, answer: answer4, text: (it) => `Removed ${it.id}.
+    print6({ context, args, answer: answer4, text: (it) => `Removed ${it.id}.
 ` });
   },
   react: async ({ context, args, client }) => {
@@ -44649,7 +45373,7 @@ var MESSAGE_VERBS = {
       messageId: wordAt(args, 2),
       emoji: wordAt(args, 3)
     });
-    print5({
+    print6({
       context,
       args,
       answer: answer4,
@@ -44663,14 +45387,14 @@ var MESSAGE_VERBS = {
       messageId: wordAt(args, 2),
       pinned
     });
-    print5({ context, args, answer: answer4, text: (it) => `${pinned ? "Pinned" : "Unpinned"} ${it.id}.
+    print6({ context, args, answer: answer4, text: (it) => `${pinned ? "Pinned" : "Unpinned"} ${it.id}.
 ` });
   },
   restore: async ({ context, args, client }) => {
     const answer4 = await client.post(CHAT_KEY_PATHS.restoreScrubbed, {
       messageId: wordAt(args, 2)
     });
-    print5({ context, args, answer: answer4, text: (it) => `Restored ${it.id}.
+    print6({ context, args, answer: answer4, text: (it) => `Restored ${it.id}.
 ` });
   }
 };
@@ -44682,7 +45406,7 @@ var message = (input2) => {
 };
 var pins = async ({ context, args, client }) => {
   const answer4 = await client.post(CHAT_KEY_PATHS.pins, { channel: wordAt(args, 1) });
-  print5({ context, args, answer: answer4, text: (it) => linesOf(it.messages, "No pinned messages.\n") });
+  print6({ context, args, answer: answer4, text: (it) => linesOf(it.messages, "No pinned messages.\n") });
 };
 var channelRead = async ({ context, args, client }) => {
   const seq = numberFlag(args, "seq");
@@ -44690,7 +45414,7 @@ var channelRead = async ({ context, args, client }) => {
     channel: wordAt(args, 2),
     ...seq !== void 0 && { seq }
   });
-  print5({ context, args, answer: answer4, text: (it) => `Read up to ${it.lastReadSeq}.
+  print6({ context, args, answer: answer4, text: (it) => `Read up to ${it.lastReadSeq}.
 ` });
 };
 var channelUnread = async ({ context, args, client }) => {
@@ -44700,7 +45424,7 @@ var channelUnread = async ({ context, args, client }) => {
     channel: wordAt(args, 2),
     seq
   });
-  print5({ context, args, answer: answer4, text: (it) => `Read up to ${it.lastReadSeq}.
+  print6({ context, args, answer: answer4, text: (it) => `Read up to ${it.lastReadSeq}.
 ` });
 };
 var files = async ({ context, args, client }) => {
@@ -44711,7 +45435,7 @@ var files = async ({ context, args, client }) => {
     ...before && { before },
     ...limit !== void 0 && { limit }
   });
-  print5({
+  print6({
     context,
     args,
     answer: answer4,
@@ -44757,7 +45481,7 @@ var fileUpload = async ({ context, args, client }) => {
       attachmentId,
       parts
     });
-    print5({ context, args, answer: answer4, text: (it) => `Uploaded ${it.fileName} as ${it.id}.
+    print6({ context, args, answer: answer4, text: (it) => `Uploaded ${it.fileName} as ${it.id}.
 ` });
   } catch (cause) {
     await client.post(CHAT_KEY_PATHS.abortUpload, { attachmentId }).catch(() => void 0);
@@ -44772,7 +45496,7 @@ var FILE_VERBS = {
       ...variant && { variant },
       download: Boolean(args.flags.download)
     });
-    print5({ context, args, answer: answer4, text: (it) => `${it.url}
+    print6({ context, args, answer: answer4, text: (it) => `${it.url}
 ` });
   },
   rename: async ({ context, args, client }) => {
@@ -44782,7 +45506,7 @@ var FILE_VERBS = {
       attachmentId: wordAt(args, 2),
       fileName
     });
-    print5({ context, args, answer: answer4, text: (it) => `Renamed ${it.id} to ${it.fileName}.
+    print6({ context, args, answer: answer4, text: (it) => `Renamed ${it.id} to ${it.fileName}.
 ` });
   },
   upload: fileUpload
@@ -44798,7 +45522,7 @@ var savedStatusText = (it) => `${it.saved ? "saved" : "not saved"}${it.doneAt ?
 var SAVED_VERBS = {
   marks: async ({ context, args, client }) => {
     const answer4 = await client.post(CHAT_KEY_PATHS.savedMarks, {});
-    print5({
+    print6({
       context,
       args,
       answer: answer4,
@@ -44811,7 +45535,7 @@ var SAVED_VERBS = {
       messageId: wordAt(args, 2),
       done: !args.flags.undo
     });
-    print5({ context, args, answer: answer4, text: savedStatusText });
+    print6({ context, args, answer: answer4, text: savedStatusText });
   },
   remind: async ({ context, args, client }) => {
     const when = wordAt(args, 3);
@@ -44819,7 +45543,7 @@ var SAVED_VERBS = {
       messageId: wordAt(args, 2),
       remindAt: when === "off" ? null : when
     });
-    print5({ context, args, answer: answer4, text: savedStatusText });
+    print6({ context, args, answer: answer4, text: savedStatusText });
   }
 };
 var saved2 = async (input2) => {
@@ -44835,7 +45559,7 @@ var saved2 = async (input2) => {
     state: args.flags.done ? "done" : "open",
     ...limit !== void 0 && { limit }
   });
-  print5({
+  print6({
     context,
     args,
     answer: answer4,
@@ -44848,14 +45572,14 @@ var save = async ({ context, args, client }) => {
     messageId: wordAt(args, 1),
     saved: !args.flags.off
   });
-  print5({ context, args, answer: answer4, text: savedStatusText });
+  print6({ context, args, answer: answer4, text: savedStatusText });
 };
 var starTo = (starred) => async ({ context, args, client }) => {
   const answer4 = await client.post(CHAT_KEY_PATHS.star, {
     channel: wordAt(args, 2),
     starred
   });
-  print5({
+  print6({
     context,
     args,
     answer: answer4,
@@ -44868,7 +45592,7 @@ var STAR_VERBS = {
   remove: starTo(false),
   list: async ({ context, args, client }) => {
     const answer4 = await client.post(CHAT_KEY_PATHS.starred, {});
-    print5({
+    print6({
       context,
       args,
       answer: answer4,
@@ -45205,6 +45929,8 @@ var accountChangedDefinition = external_exports.object({
   currency: currencySchema,
   seats: external_exports.number().int().nonnegative(),
   extraSeats: external_exports.number().int().nonnegative().optional(),
+  /** People a complimentary Team holds; absent or null when the plan sets the limit. */
+  seatCap: external_exports.number().int().positive().nullable().optional(),
   at: external_exports.iso.datetime()
 });
 var usageRecordedDefinition = external_exports.object({
@@ -45254,6 +45980,8 @@ var billingAccountViewDefinition = external_exports.object({
     /** What the plan costs a month for these people; 0 on Free. */
     monthlyPrice: external_exports.number().nonnegative()
   }),
+  /** Team given free of charge by Laze staff, for this many people; null when paid or Free. */
+  complimentary: external_exports.object({ seats: external_exports.number().int().positive() }).nullable().default(null),
   credits: external_exports.object({
     /** Included this period by the plan. */
     included: external_exports.number(),
@@ -45370,6 +46098,11 @@ var setAutoRechargeByKeyInputDefinition = setAutoRechargeInputDefinition.omit({
   workspaceId: true
 });
 var applyReferralByKeyInputDefinition = applyReferralInputDefinition.omit({ workspaceId: true });
+var setComplimentaryPlanInputDefinition = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  seats: external_exports.number().int().positive().max(1e4).nullable(),
+  reason: external_exports.string().trim().min(3).max(500)
+});
 var BillingApi = moduleApi()("billing");
 var billingTrpc = defineTrpcContract("billing").query("account").withInput(billingWorkspaceInputSchema).withOutput(billingAccountViewSchema).query("invoices").withInput(billingWorkspaceInputSchema).withOutput(external_exports.array(billingInvoiceSchema)).mutation("startCheckout").withInput(startCheckoutInputSchema).withOutput(billingRedirectSchema).mutation("openPortal").withInput(openPortalInputSchema).withOutput(billingRedirectSchema).mutation("setCurrency").withInput(setCurrencyInputSchema).withOutput(billingAccountViewSchema).mutation("topUp").withInput(topUpInputSchema).withOutput(billingRedirectSchema).mutation("setAutoRecharge").withInput(setAutoRechargeInputSchema).withOutput(billingAccountViewSchema).mutation("applyReferral").withInput(applyReferralInputSchema).withOutput(billingAccountViewSchema).build();
 var stripeWebhookHeadersDefinition = external_exports.object({
@@ -45687,7 +46420,7 @@ var dedicatedIpKeyReleasedDefinition = external_exports.object({
 });
 
 // ../../modules/compute/contract/src/own-machine-ssh.ts
-var workspaceIdSchema11 = external_exports.string().min(1).max(64);
+var workspaceIdSchema12 = external_exports.string().min(1).max(64);
 var machineRefText = external_exports.string().min(1).max(64);
 var sshHostKeySchema = external_exports.string().regex(/^SHA256:[A-Za-z0-9+/]{43}$/);
 function sshTargetText({ target }) {
@@ -45709,7 +46442,7 @@ var machineSshDefinition = external_exports.object({
 });
 var machineSshSchema = machineSshDefinition;
 var connectSshDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
+  workspaceId: workspaceIdSchema12,
   /** Checked by `checkMachineName`, so a refusal reads as a sentence. */
   name: external_exports.string().max(200),
   /** `user@host[:port]`, checked by `parseSshTarget`. */
@@ -45718,7 +46451,7 @@ var connectSshDefinition = external_exports.object({
 var connectSshMachineInputSchema = connectSshDefinition;
 var restConnectSshDefinition = connectSshDefinition.omit({ workspaceId: true });
 var trustHostKeyDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema11,
+  workspaceId: workspaceIdSchema12,
   machine: machineRefText,
   hostKey: sshHostKeySchema
 });
@@ -45726,7 +46459,7 @@ var trustHostKeyInputSchema = trustHostKeyDefinition;
 var restTrustHostKeyDefinition = trustHostKeyDefinition.omit({ workspaceId: true });
 
 // ../../modules/compute/contract/src/own-machine-whatsapp.ts
-var workspaceIdSchema12 = external_exports.string().min(1).max(64);
+var workspaceIdSchema13 = external_exports.string().min(1).max(64);
 var machineRefText2 = external_exports.string().min(1).max(64);
 var WHATSAPP_TEXT_MAX = 4096;
 var WHATSAPP_LIMIT_MAX = 200;
@@ -45763,25 +46496,25 @@ var messagesResultDefinition = external_exports.object({
 var limitSchema = external_exports.number().int().min(1).max(WHATSAPP_LIMIT_MAX);
 var chatRefSchema = external_exports.string().trim().min(1).max(200);
 var chatsInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema12,
+  workspaceId: workspaceIdSchema13,
   machine: machineRefText2,
   limit: limitSchema.optional()
 });
 var readInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema12,
+  workspaceId: workspaceIdSchema13,
   machine: machineRefText2,
   /** A chat id, a phone number or a contact or group name. */
   chat: chatRefSchema,
   limit: limitSchema.optional()
 });
 var sendInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema12,
+  workspaceId: workspaceIdSchema13,
   machine: machineRefText2,
   chat: chatRefSchema,
   text: external_exports.string().trim().min(1).max(WHATSAPP_TEXT_MAX)
 });
 var sendStatusInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema12,
+  workspaceId: workspaceIdSchema13,
   sendId: external_exports.string().min(1).max(64),
   /** Wait up to this long for the owner's answer; 0 answers at once. */
   waitSeconds: external_exports.number().int().min(0).max(WHATSAPP_STATUS_WAIT_MAX_SECONDS).default(0)
@@ -45819,7 +46552,7 @@ var whatsappPairingDefinition = external_exports.object({
 });
 var whatsappPairingSchema = whatsappPairingDefinition;
 var pairingRefDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema12,
+  workspaceId: workspaceIdSchema13,
   pairingId: external_exports.string().min(1).max(64)
 });
 var whatsappPairingRefSchema = pairingRefDefinition;
@@ -45840,7 +46573,7 @@ var COMPUTE_WHATSAPP_REST_PATHS = {
 };
 
 // ../../modules/compute/contract/src/own-machine.ts
-var workspaceIdSchema13 = external_exports.string().min(1).max(64);
+var workspaceIdSchema14 = external_exports.string().min(1).max(64);
 var machineRefText3 = external_exports.string().min(1).max(64);
 var machineBrowserDefinition = external_exports.object({
   ready: external_exports.boolean(),
@@ -45873,7 +46606,7 @@ var machineHealthDefinition = external_exports.object({
 });
 var machineHealthSchema = machineHealthDefinition;
 var connectOwnDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema13,
+  workspaceId: workspaceIdSchema14,
   /** Checked by `checkMachineName`, so a refusal reads as a sentence. */
   name: external_exports.string().max(200)
 });
@@ -45881,7 +46614,7 @@ var connectOwnMachineInputSchema = connectOwnDefinition;
 var MACHINE_EXEC_MAX_SECONDS = 240;
 var MACHINE_EXEC_OUTPUT_BYTES = 1024 * 1024;
 var execDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema13,
+  workspaceId: workspaceIdSchema14,
   machine: machineRefText3,
   command: external_exports.string().min(1).max(64 * 1024),
   timeoutSeconds: external_exports.number().int().min(1).max(MACHINE_EXEC_MAX_SECONDS).optional(),
@@ -45953,14 +46686,14 @@ function gigabytes(bytes) {
 }
 var hostWhenOfflineSchema = external_exports.enum(["wait", "sandbox"]);
 var hostAgentDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema13,
+  workspaceId: workspaceIdSchema14,
   machine: machineRefText3,
   agentId: external_exports.string().min(1).max(64),
   whenOffline: hostWhenOfflineSchema.default("wait")
 });
 var hostAgentInputSchema = hostAgentDefinition;
 var unhostAgentDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema13,
+  workspaceId: workspaceIdSchema14,
   agentId: external_exports.string().min(1).max(64)
 });
 var unhostAgentInputSchema = unhostAgentDefinition;
@@ -45979,8 +46712,8 @@ var agentHostGrantDefinition = external_exports.object({
 });
 
 // ../../modules/compute/contract/src/compute.ts
-var idSchema16 = external_exports.string().min(1).max(64);
-var workspaceIdSchema14 = external_exports.string().min(1).max(64);
+var idSchema17 = external_exports.string().min(1).max(64);
+var workspaceIdSchema15 = external_exports.string().min(1).max(64);
 var machineStateSchema = external_exports.enum([
   "starting",
   "ready",
@@ -46001,24 +46734,24 @@ var machinePriceDefinition = external_exports.object({
   asleepMonthUsd: external_exports.number()
 });
 var machineGranteeKindSchema = external_exports.enum(["member", "agent"]);
-var machineGranteeDefinition = external_exports.object({ kind: machineGranteeKindSchema, id: idSchema16 });
+var machineGranteeDefinition = external_exports.object({ kind: machineGranteeKindSchema, id: idSchema17 });
 var machineGrantDefinition = external_exports.object({
   kind: machineGranteeKindSchema,
-  id: idSchema16,
-  grantedByUserId: idSchema16,
+  id: idSchema17,
+  grantedByUserId: idSchema17,
   grantedAt: external_exports.iso.datetime()
 });
 var machineDefinition = external_exports.object({
-  id: idSchema16,
-  workspaceId: workspaceIdSchema14,
+  id: idSchema17,
+  workspaceId: workspaceIdSchema15,
   name: external_exports.string(),
   type: machineTypeSchema,
   zone: external_exports.string(),
   state: machineStateSchema,
-  ownerUserId: idSchema16,
-  requesterUserId: idSchema16,
-  renterAgentId: idSchema16.nullable(),
-  channelId: idSchema16.nullable(),
+  ownerUserId: idSchema17,
+  requesterUserId: idSchema17,
+  renterAgentId: idSchema17.nullable(),
+  channelId: idSchema17.nullable(),
   ipAddress: external_exports.string().nullable(),
   sites: external_exports.array(machineSiteDefinition),
   /** Members and agents the owner shared the machine with, beyond the owner's own agents. */
@@ -46050,7 +46783,7 @@ var machineDefinition = external_exports.object({
   /** The owner's agents set to run on this own machine. */
   hostedAgents: external_exports.array(
     external_exports.object({
-      id: idSchema16,
+      id: idSchema17,
       name: external_exports.string(),
       whenOffline: external_exports.enum(["wait", "sandbox"])
     })
@@ -46061,23 +46794,23 @@ var machineDefinition = external_exports.object({
 var machineSchema = machineDefinition;
 var computeStatusDefinition = external_exports.object({ available: external_exports.boolean() });
 var computeStatusSchema = computeStatusDefinition;
-var workspaceInputDefinition2 = external_exports.object({ workspaceId: workspaceIdSchema14 });
+var workspaceInputDefinition2 = external_exports.object({ workspaceId: workspaceIdSchema15 });
 var computeWorkspaceInputSchema = workspaceInputDefinition2;
 var machineRefDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   machine: external_exports.string().min(1).max(64)
 });
 var machineRefSchema = machineRefDefinition;
 var MACHINE_NAME_MAX = 40;
 var machineNameSchema = external_exports.string().min(2).max(MACHINE_NAME_MAX).regex(/^[a-z0-9][a-z0-9-]*$/, "lowercase letters, digits and dashes");
 var renameDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   machine: external_exports.string().min(1).max(64),
   name: external_exports.string().max(200)
 });
 var renameMachineInputSchema = renameDefinition;
 var setupBrowserDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   /** The site the person signs in to, as a host or a URL. */
   site: external_exports.string().min(1).max(500),
   name: machineNameSchema.optional(),
@@ -46086,29 +46819,29 @@ var setupBrowserDefinition = external_exports.object({
 });
 var setupBrowserInputSchema = setupBrowserDefinition;
 var grantDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   machine: external_exports.string().min(1).max(64),
   grantee: machineGranteeDefinition
 });
 var machineGrantInputSchema = grantDefinition;
 var setBudgetDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   machine: external_exports.string().min(1).max(64),
   budgetUsd: external_exports.number().min(0).max(1e4),
   period: machineBudgetPeriodSchema
 });
 var setMachineBudgetInputSchema = setBudgetDefinition;
 var openScreenDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema14,
+  workspaceId: workspaceIdSchema15,
   machine: external_exports.string().min(1).max(64),
   site: external_exports.string().min(1).max(500).optional()
 });
 var openScreenInputSchema = openScreenDefinition;
-var screenRefDefinition = external_exports.object({ workspaceId: workspaceIdSchema14, sessionId: idSchema16 });
+var screenRefDefinition = external_exports.object({ workspaceId: workspaceIdSchema15, sessionId: idSchema17 });
 var screenRefSchema = screenRefDefinition;
 var screenSessionDefinition = external_exports.object({
-  sessionId: idSchema16,
-  machineId: idSchema16,
+  sessionId: idSchema17,
+  machineId: idSchema17,
   machineName: external_exports.string(),
   site: external_exports.string().nullable(),
   expiresAt: external_exports.iso.datetime(),
@@ -46142,11 +46875,9 @@ var ownMachineSshConnectDefinition = external_exports.object({
   publicKey: external_exports.string()
 });
 var ownMachineSshConnectSchema = ownMachineSshConnectDefinition;
-var reconcileDefinition = external_exports.object({ workspaceId: workspaceIdSchema14, machineId: idSchema16 });
+var reconcileDefinition = external_exports.object({ workspaceId: workspaceIdSchema15, machineId: idSchema17 });
 var ComputeApi = moduleApi()("compute");
 var computeTrpc = defineTrpcContract("compute").query("status").withInput(computeWorkspaceInputSchema).withOutput(computeStatusSchema).query("computer").withInput(computeWorkspaceInputSchema).withOutput(computerStatusSchema).mutation("setComputerSize").withInput(setComputerSizeInputSchema).withOutput(computerSizeAnswerSchema).mutation("requestComputerSize").withInput(setComputerSizeInputSchema).withOutput(computerRequestSchema).mutation("cancelComputerRequest").withInput(computerRequestRefSchema).withOutput(computerRequestSchema).query("computers").withInput(computeWorkspaceInputSchema).withOutput(computerListSchema).query("dedicatedIp").withInput(computeWorkspaceInputSchema).withOutput(dedicatedIpStatusSchema).mutation("setDedicatedIp").withInput(setDedicatedIpInputSchema).withOutput(dedicatedIpAnswerSchema).mutation("turnOffDedicatedIp").withInput(computeWorkspaceInputSchema).withOutput(dedicatedIpAnswerSchema).mutation("setDedicatedIpDomains").withInput(setDedicatedIpDomainsInputSchema).withOutput(dedicatedIpAnswerSchema).query("dedicatedIps").withInput(computeWorkspaceInputSchema).withOutput(dedicatedIpListSchema).query("dedicatedIpCountries").withInput(computeWorkspaceInputSchema).withOutput(dedicatedIpCountriesSchema).query("dedicatedIpOffer").withInput(dedicatedIpOfferInputSchema).withOutput(dedicatedIpOfferSchema).query("list").withInput(computeWorkspaceInputSchema).withOutput(external_exports.array(machineSchema)).query("get").withInput(machineRefSchema).withOutput(machineSchema).mutation("setupBrowser").withInput(setupBrowserInputSchema).withOutput(machineSchema).mutation("sleep").withInput(machineRefSchema).withOutput(machineSchema).mutation("wake").withInput(machineRefSchema).withOutput(machineSchema).mutation("delete").withInput(machineRefSchema).withOutput(machineSchema).mutation("rename").withInput(renameMachineInputSchema).withOutput(machineSchema).mutation("grant").withInput(machineGrantInputSchema).withOutput(machineSchema).mutation("revokeGrant").withInput(machineGrantInputSchema).withOutput(machineSchema).mutation("setBudget").withInput(setMachineBudgetInputSchema).withOutput(machineSchema).mutation("openScreen").withInput(openScreenInputSchema).withOutput(screenSessionSchema).mutation("finishScreen").withInput(screenRefSchema).withOutput(machineSchema).mutation("connectOwn").withInput(connectOwnMachineInputSchema).withOutput(ownMachineConnectSchema).mutation("newConnectCommand").withInput(machineRefSchema).withOutput(ownMachineConnectSchema).mutation("connectSsh").withInput(connectSshMachineInputSchema).withOutput(ownMachineSshConnectSchema).mutation("trustHostKey").withInput(trustHostKeyInputSchema).withOutput(machineSchema).mutation("checkHealth").withInput(machineRefSchema).withOutput(machineSchema).mutation("hostAgent").withInput(hostAgentInputSchema).withOutput(machineSchema).mutation("unhostAgent").withInput(unhostAgentInputSchema).withOutput(external_exports.object({ agentId: external_exports.string() })).mutation("pairWhatsapp").withInput(machineRefSchema).withOutput(whatsappPairingSchema).query("whatsappPairing").withInput(whatsappPairingRefSchema).withOutput(whatsappPairingSchema).mutation("cancelWhatsappPairing").withInput(whatsappPairingRefSchema).withOutput(whatsappPairingSchema).mutation("unpairWhatsapp").withInput(machineRefSchema).withOutput(machineSchema).build();
-var computeUi = uiTokens("compute");
-var ComputeNavSlot = computeUi.component("nav");
 var restMachineInputDefinition = external_exports.object({ machine: external_exports.string().min(1).max(64) });
 var restRenameInputDefinition = external_exports.object({
   machine: external_exports.string().min(1).max(64),
@@ -47424,16 +48155,16 @@ function dndLine({ pausedUntil }) {
 }
 
 // src/services/dnd-commands.service.ts
-var USAGE6 = "Usage: laze dnd 30m|1h|2h|until <HH:mm|ISO time> [--tz <zone>], laze dnd off";
+var USAGE7 = "Usage: laze dnd 30m|1h|2h|until <HH:mm|ISO time> [--tz <zone>], laze dnd off";
 async function dnd({ context, args }) {
   const timeZone = flagText({ args, name: "tz" }) || Intl.DateTimeFormat().resolvedOptions().timeZone;
   let input2;
   try {
     input2 = dndInputOf({ words: args.words.slice(1), now: nowInstant(), timeZone });
   } catch {
-    throw new CliUsageError(USAGE6);
+    throw new CliUsageError(USAGE7);
   }
-  if (!input2) throw new CliUsageError(USAGE6);
+  if (!input2) throw new CliUsageError(USAGE7);
   const { client } = await signedIn({ context, args });
   const settings2 = await client.post(
     "/api/agents/me/notifications/snooze",
@@ -47544,18 +48275,22 @@ function feedFlagsOf({ args }) {
   if (brief) fields.brief = dateOf(brief);
   const briefClass = flagText({ args, name: "class" });
   if (briefClass) fields.briefClass = briefClass;
+  const autoSendOn = flagText({ args, name: "auto-send-on" });
+  if (autoSendOn) fields.autoSendOn = dateOf(autoSendOn);
   return { fields: { ...fields, ...snoozeOf(args) }, texts };
 }
 
 // src/services/feed-commands.service.ts
-var USAGE7 = `Usage:
+var USAGE8 = `Usage:
   laze feed post <title> [--channel <channel>] [--tag <tag>] [--summary <line>]
     [--body <text|@file>] [--draft <text|@file>] [--draft-header "To: ...\\nRe: ..."]
     [--link <label>=<url>]... [--action <label>=<message>]... [--to <userId>]...
     [--urgent] [--done-label <line>] [--show-at <ISO time>]
     [--snooze-for <userId>... --until <ISO time>]
     [--brief <YYYY-MM-DD> [--class money|promise|decide|nudge|risk|fyi]] [--loop <key>]
+    [--auto-send-on <YYYY-MM-DD>]
   laze feed update <id> [the post flags that change] [--title <title>]
+    [--auto-send-on <YYYY-MM-DD>|none]
     [--show-at <ISO time>|none] [--snooze-for <userId>... --until <ISO time>|none] [--reopen]
   laze feed reply <id> <text> [--urgent]
   laze feed read <id>
@@ -47592,7 +48327,9 @@ function printItem({
 }) {
   if (args.flags.json) return context.out(`${JSON.stringify(item, null, 2)}
 `);
-  const shown = item.item.showAt ? ` (shows ${item.item.showAt})` : "";
+  const shownAt = item.item.showAt ? ` (shows ${item.item.showAt})` : "";
+  const countdown = item.item.autoSendOn ? ` (auto-sends on ${item.item.autoSendOn})` : "";
+  const shown = `${shownAt}${countdown}`;
   context.out(`${item.item.id}	${item.item.tag}	${item.item.title}${shown}
 `);
   for (const message2 of item.messages) context.out(`  > ${message2}
@@ -47600,7 +48337,7 @@ function printItem({
 }
 async function feedPost({ context, args }) {
   const title = args.words.slice(2).join(" ").trim();
-  if (!title) throw new CliUsageError(USAGE7);
+  if (!title) throw new CliUsageError(USAGE8);
   const flags2 = flagsOf(args);
   const { client } = await signedIn({ context, args });
   const channel = flagText({ args, name: "channel" });
@@ -47619,7 +48356,7 @@ async function feedPost({ context, args }) {
 }
 async function feedUpdate({ context, args }) {
   const itemId = args.words[2];
-  if (!itemId) throw new CliUsageError(USAGE7);
+  if (!itemId) throw new CliUsageError(USAGE8);
   const flags2 = flagsOf(args);
   const { client } = await signedIn({ context, args });
   const body = await bodyOf2({ context, flags: flags2 });
@@ -47635,7 +48372,7 @@ async function feedUpdate({ context, args }) {
 async function feedReply({ context, args }) {
   const itemId = args.words[2];
   const text2 = args.words.slice(3).join(" ").trim();
-  if (!itemId || !text2) throw new CliUsageError(USAGE7);
+  if (!itemId || !text2) throw new CliUsageError(USAGE8);
   const { client } = await signedIn({ context, args });
   const replied = await client.post("/api/feed/items/reply", {
     itemId,
@@ -47646,7 +48383,7 @@ async function feedReply({ context, args }) {
 }
 async function feedRead({ context, args }) {
   const itemId = args.words[2];
-  if (!itemId) throw new CliUsageError(USAGE7);
+  if (!itemId) throw new CliUsageError(USAGE8);
   const { client } = await signedIn({ context, args });
   const read3 = await client.post("/api/feed/items/read", { itemId });
   printItem({ context, args, item: read3 });
@@ -47663,7 +48400,7 @@ async function feedInbox({ context, args }) {
 }
 async function feedBriefSummary({ context, args }) {
   const date5 = args.words[2];
-  if (!date5) throw new CliUsageError(USAGE7);
+  if (!date5) throw new CliUsageError(USAGE8);
   const { client } = await signedIn({ context, args });
   const pointer = await client.post("/api/feed/brief-summary", { date: date5 });
   if (args.flags.json) return context.out(`${JSON.stringify(pointer, null, 2)}
@@ -47733,7 +48470,7 @@ async function feedCount({ context, args }) {
 }
 async function feedAct({ context, args }) {
   const [itemId, actionId] = [args.words[2], args.words[3]];
-  if (!itemId || !actionId) throw new CliUsageError(USAGE7);
+  if (!itemId || !actionId) throw new CliUsageError(USAGE8);
   const draft = await textFlag({ context, args, name: "draft" });
   const { client } = await signedIn({ context, args });
   const item = await client.post("/api/feed/mine/act", {
@@ -47746,7 +48483,7 @@ async function feedAct({ context, args }) {
 async function feedComment({ context, args }) {
   const itemId = args.words[2];
   const text2 = args.words.slice(3).join(" ").trim();
-  if (!itemId || !text2) throw new CliUsageError(USAGE7);
+  if (!itemId || !text2) throw new CliUsageError(USAGE8);
   const draft = await textFlag({ context, args, name: "draft" });
   const { client } = await signedIn({ context, args });
   const item = await client.post("/api/feed/mine/comment", {
@@ -47759,7 +48496,7 @@ async function feedComment({ context, args }) {
 function moveItem(path) {
   return async ({ context, args }) => {
     const itemId = args.words[2];
-    if (!itemId) throw new CliUsageError(USAGE7);
+    if (!itemId) throw new CliUsageError(USAGE8);
     const { client } = await signedIn({ context, args });
     const item = await client.post(`/api/feed/mine/${path}`, { itemId });
     printMoved({ context, args, item });
@@ -47768,14 +48505,14 @@ function moveItem(path) {
 async function feedSnooze({ context, args }) {
   const itemId = args.words[2];
   const until = flagText({ args, name: "until" });
-  if (!itemId || !until) throw new CliUsageError(USAGE7);
+  if (!itemId || !until) throw new CliUsageError(USAGE8);
   const { client } = await signedIn({ context, args });
   const item = await client.post("/api/feed/mine/snooze", { itemId, until });
   printMoved({ context, args, item });
 }
 async function feedChannel({ context, args }) {
   const channelId = args.words[2];
-  if (!channelId) throw new CliUsageError(USAGE7);
+  if (!channelId) throw new CliUsageError(USAGE8);
   const { client } = await signedIn({ context, args });
   const items = await client.post("/api/feed/channel", { channelId });
   if (args.flags.json) return context.out(`${JSON.stringify(items, null, 2)}
@@ -47803,7 +48540,7 @@ var FEED_COMMANDS = {
 async function feed({ context, args }) {
   const name2 = args.words[1] ?? "";
   const command = Object.hasOwn(FEED_COMMANDS, name2) ? FEED_COMMANDS[name2] : void 0;
-  if (!command) throw new CliUsageError(USAGE7);
+  if (!command) throw new CliUsageError(USAGE8);
   await command({ context, args });
 }
 
@@ -48302,18 +49039,21 @@ async function ip({ context, args }) {
 import { mkdir as mkdir10, readFile as readFile18, rename as rename4, rm as rm6, writeFile as writeFile11 } from "node:fs/promises";
 import { dirname as dirname10, join as join10 } from "node:path";
 var DEFAULT_WAIT_SECONDS = 100;
+var JOIN_USAGE = "Usage: laze join [--workspace <name|id|invite link>] [--for <email>] [--name <name>] [--note <text>] [--timeout <seconds>]";
 function pendingPathOf({ context }) {
   return join10(dirname10(context.environment.configPath), "join", "pending.json");
 }
 async function readPending({
   context,
-  url: url2
+  url: url2,
+  args
 }) {
   const pending = await readFile18(pendingPathOf({ context }), "utf8").then(
     (text2) => JSON.parse(text2),
     () => void 0
   );
   if (!pending || pending.url !== url2) return void 0;
+  if (args && !asksTheSame({ pending, flags: flaggedOf({ args }) })) return void 0;
   return Temporal3.Instant.from(pending.expiresAt).epochMilliseconds > context.nowMs() ? pending : void 0;
 }
 async function keepPending({ context, pending }) {
@@ -48331,51 +49071,108 @@ function waitSecondsOf2({ args }) {
   if (!raw) return DEFAULT_WAIT_SECONDS;
   const seconds = Number(raw);
   if (!Number.isFinite(seconds) || seconds < 0) {
+    throw new CliUsageError(JOIN_USAGE);
+  }
+  return seconds;
+}
+function flaggedOf({ args }) {
+  const workspace2 = flagText({ args, name: "workspace" });
+  const forEmail = flagText({ args, name: "for" });
+  return { ...workspace2 ? { workspace: workspace2 } : {}, ...forEmail ? { forEmail } : {} };
+}
+function asksTheSame({ pending, flags: flags2 }) {
+  if (!flags2.workspace && !flags2.forEmail) return true;
+  return flags2.workspace === pending.asked?.workspace && flags2.forEmail === pending.asked?.forEmail;
+}
+async function askedOf({
+  context,
+  args
+}) {
+  const flagged = flaggedOf({ args });
+  if (flagged.workspace || flagged.forEmail) return flagged;
+  if (!context.ask) return {};
+  const answer4 = (await context.ask(
+    "Which Laze workspace should approve you? Its name or an invite link (empty for a code link): "
+  )).trim();
+  return answer4 ? { workspace: answer4 } : {};
+}
+function waitingText({ pending, resumed }) {
+  const where = pending.workspaceName ? [
+    `The request waits in ${pending.workspaceName}'s feed for its approvers; it also opens at ${pending.approveUrl}`
+  ] : [
+    `Ask your person to open ${pending.approveUrl} and approve it once.`,
+    "Pass --workspace <name> next time so it shows in their feed."
+  ];
+  const first = `${resumed ? "Still waiting" : "Asked to join Laze"}: code ${pending.code}.`;
+  return [first, ...where, ""].join("\n");
+}
+async function stillOurs({ context, pending }) {
+  const kept = await readPending({ context, url: pending.url });
+  return kept?.requestToken === pending.requestToken;
+}
+async function pollOnce({
+  context,
+  client,
+  pending
+}) {
+  const answer4 = await client.post("/api/agents/join-requests/poll", {
+    requestToken: pending.requestToken
+  }).catch(async (error62) => {
+    if (!(error62 instanceof LazeApiError)) throw error62;
+    if (error62.code === "agent_join_request_claimed") return { status: "taken" };
+    if (error62.code !== "agent_join_request_invalid") throw error62;
+    await dropPending({ context });
     throw new CliUsageError(
-      "Usage: laze join [--name <name>] [--note <text>] [--timeout <seconds>]"
+      "The request was denied or ran out. Run `laze join` again for a new code."
     );
+  });
+  if (answer4.status === "taken") return { kind: "taken" };
+  if (answer4.status === "pending") return { kind: "waiting" };
+  await dropPending({ context });
+  const { status: _status, workspaceName, ...linked } = answer4;
+  return { kind: "approved", linked, workspaceName };
+}
+async function approvalOf({
+  context,
+  args,
+  client,
+  pending
+}) {
+  const deadline = context.nowMs() + waitSecondsOf2({ args }) * 1e3;
+  const polls = Math.ceil(waitSecondsOf2({ args }) / pending.intervalSeconds) + 1;
+  for (let poll = 0; poll < polls; poll += 1) {
+    if (poll > 0 && !await stillOurs({ context, pending })) return { kind: "taken" };
+    const outcome = await pollOnce({ context, client, pending });
+    if (outcome.kind !== "waiting" || context.nowMs() >= deadline) return outcome;
+    await context.sleep(pending.intervalSeconds * 1e3);
   }
-  return seconds;
+  return { kind: "waiting" };
 }
 async function joinAsAgent({ context, args }) {
   const url2 = serverUrlOf({ context, args });
   const { harness, pid } = await harnessOf2({ context, args });
   const client = LazeClient.create({ baseUrl: url2, fetcher: context.fetcher });
-  const resumed = args.flags.restart ? void 0 : await readPending({ context, url: url2 });
+  const resumed = args.flags.restart ? void 0 : await readPending({ context, url: url2, args });
+  const asked = resumed ? {} : await askedOf({ context, args });
   const pending = resumed ?? await client.post("/api/agents/join-requests", {
     harness,
+    ...asked,
     ...flagText({ args, name: "name" }) ? { name: flagText({ args, name: "name" }) } : {},
     ...flagText({ args, name: "note" }) ? { note: flagText({ args, name: "note" }) } : {}
-  }).then((started) => ({ ...started, url: url2 })).catch((error62) => sandboxed({ context, error: error62 }));
+  }).then((started) => ({ ...started, url: url2, asked })).catch((error62) => sandboxed({ context, error: error62 }));
   if (!resumed) await keepPending({ context, pending });
-  context.out(
-    [
-      `${resumed ? "Still waiting" : "Asked to join Laze"}: code ${pending.code}.`,
-      `Ask your person to open ${pending.approveUrl} and approve it once.`,
-      ""
-    ].join("\n")
-  );
-  const deadline = context.nowMs() + waitSecondsOf2({ args }) * 1e3;
-  const polls = Math.ceil(waitSecondsOf2({ args }) / pending.intervalSeconds) + 1;
-  for (let poll = 0; poll < polls; poll += 1) {
-    const answer4 = await client.post("/api/agents/join-requests/poll", {
-      requestToken: pending.requestToken
-    }).catch(async (error62) => {
-      if (error62 instanceof LazeApiError && error62.code === "agent_join_request_invalid") {
-        await dropPending({ context });
-        throw new CliUsageError(
-          "The request was denied or ran out. Run `laze join` again for a new code."
-        );
-      }
-      throw error62;
-    });
-    if (answer4.status === "approved") {
-      await dropPending({ context });
-      const { status: _status, ...linked } = answer4;
-      return settleLinked({ context, args, url: url2, harness, pid, linked });
-    }
-    if (context.nowMs() >= deadline) break;
-    await context.sleep(pending.intervalSeconds * 1e3);
+  context.out(waitingText({ pending, resumed: !!resumed }));
+  const outcome = await approvalOf({ context, args, client, pending });
+  if (outcome.kind === "taken") {
+    context.out("This request already joined in another `laze join` run. Run `laze whoami`.\n");
+    return;
+  }
+  if (outcome.kind === "approved") {
+    const { linked } = outcome;
+    const where = outcome.workspaceName || pending.workspaceName || linked.agent.workspaceId;
+    context.out(`Joined ${where} as ${linked.agent.name}.
+`);
+    return settleLinked({ context, args, url: url2, harness, pid, linked });
   }
   context.out(
     `Not approved yet. Run \`laze join\` again to keep waiting; the code works until ${pending.expiresAt}.
@@ -48584,7 +49381,7 @@ import { createHash } from "node:crypto";
 import { mkdir as mkdir11, readFile as readFile19, rm as rm7, writeFile as writeFile12 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
 import { dirname as dirname11, join as join11 } from "node:path";
-var USAGE8 = `Usage: laze vault run <connection> --reason "<one plain sentence>" [--wait <s>] -- <command> [args...]
+var USAGE9 = `Usage: laze vault run <connection> --reason "<one plain sentence>" [--wait <s>] -- <command> [args...]
 Runs the command with the connection's values in its environment, on a Laze agent's computer
 or on a machine it runs on.`;
 var POLL_MS = 3e3;
@@ -48727,7 +49524,7 @@ function deadlineOf({ args, nowMs }) {
   const wait = flagText({ args, name: "wait" }) || (args.flags.wait === true ? args.words[3] : "");
   if (!wait) return Infinity;
   if (!(Number(wait) >= 0)) throw new CliUsageError(`--wait takes a number of seconds
-${USAGE8}`);
+${USAGE9}`);
   return nowMs + Number(wait) * 1e3;
 }
 async function untilAnswered({
@@ -48809,16 +49606,16 @@ async function vaultRun({
 }) {
   const connection = args.words[2];
   const reason = flagText({ args, name: "reason" });
-  if (!connection || args.rest.length === 0) throw new CliUsageError(USAGE8);
+  if (!connection || args.rest.length === 0) throw new CliUsageError(USAGE9);
   if (!reason) throw new CliUsageError(`Say why with --reason "<one plain sentence>"
-${USAGE8}`);
+${USAGE9}`);
   const released = await vaultRelease({ context, args, connection, reason, command: args.rest });
   if ("exitCode" in released) return released.exitCode;
   return context.runCommand({ command: args.rest, env: released.env });
 }
 
 // src/services/machine-commands.service.ts
-var USAGE9 = [
+var USAGE10 = [
   "Usage: laze machine connect <name>                       the command to run on your own machine (people)",
   "       laze machine connect <name> --again              a new command for a machine you connected; the old code stops working",
   "       laze machine connect <name> --ssh <user>@<host>[:port]   a machine that cannot run the connector, over SSH (people)",
@@ -48864,7 +49661,7 @@ function listLine(machine2) {
 var EXEC_ENV_MAX = 32;
 function machineArg2({ args }) {
   const machine2 = args.words[2];
-  if (!machine2) throw new CliUsageError(USAGE9);
+  if (!machine2) throw new CliUsageError(USAGE10);
   return machine2;
 }
 async function connect2({ context, args }) {
@@ -48890,7 +49687,7 @@ async function connectSsh({
 }) {
   const ssh = flagText({ args, name: "ssh" });
   if (!ssh) throw new CliUsageError(`--ssh takes <user>@<host>[:port]
-${USAGE9}`);
+${USAGE10}`);
   const client = await computeClient({ context, args });
   const made = await client.post(COMPUTE_REST_PATHS.connectSsh, {
     name: name2,
@@ -48966,11 +49763,11 @@ async function exec({
 }) {
   const machine2 = machineArg2({ args });
   const command = commandText({ rest: args.rest });
-  if (!command.trim()) throw new CliUsageError(USAGE9);
+  if (!command.trim()) throw new CliUsageError(USAGE10);
   const timeout = flagText({ args, name: "timeout" });
   if (timeout && !(Number(timeout) >= 1))
     throw new CliUsageError(`--timeout takes a number of seconds
-${USAGE9}`);
+${USAGE10}`);
   const released = await vaultEnv({ context, args });
   if ("exitCode" in released) return released.exitCode;
   const client = await computeClient({ context, args });
@@ -48998,11 +49795,11 @@ async function vaultEnv({
   const connections = args.lists.vault ?? [];
   if (args.flags.vault === true)
     throw new CliUsageError(`--vault takes a connection name
-${USAGE9}`);
+${USAGE10}`);
   if (connections.length === 0) return {};
   const reason = flagText({ args, name: "reason" });
   if (!reason) throw new CliUsageError(`Say why with --reason "<one plain sentence>"
-${USAGE9}`);
+${USAGE10}`);
   const env = {};
   for (const connection of new Set(connections)) {
     const released = await vaultRelease({ context, args, connection, reason, command: args.rest });
@@ -49022,11 +49819,11 @@ ${USAGE9}`);
 async function host({ context, args }) {
   const machineName = args.words[2];
   const agent2 = args.words[3];
-  if (!machineName || !agent2) throw new CliUsageError(USAGE9);
+  if (!machineName || !agent2) throw new CliUsageError(USAGE10);
   const whenOffline = flagText({ args, name: "when-offline", fallback: "wait" });
   if (whenOffline !== "wait" && whenOffline !== "computer" && whenOffline !== "sandbox")
     throw new CliUsageError(`--when-offline takes wait or computer
-${USAGE9}`);
+${USAGE10}`);
   const client = await computeClient({ context, args });
   const machine2 = await client.post(COMPUTE_REST_PATHS.host, {
     machine: machineName,
@@ -49043,7 +49840,7 @@ ${USAGE9}`);
 }
 async function unhost({ context, args }) {
   const agent2 = args.words[2];
-  if (!agent2) throw new CliUsageError(USAGE9);
+  if (!agent2) throw new CliUsageError(USAGE10);
   const client = await computeClient({ context, args });
   const done = await client.post(COMPUTE_REST_PATHS.unhost, { agent: agent2 });
   if (args.flags.json) return context.out(`${JSON.stringify(done, null, 2)}
@@ -49080,7 +49877,7 @@ async function machine({ context, args }) {
   if (command === "unhost") return unhost({ context, args });
   const access = machineAccessCommand(command);
   if (access) return access({ context, args });
-  throw new CliUsageError(USAGE9);
+  throw new CliUsageError(USAGE10);
 }
 
 // src/services/mcp-server.service.ts
@@ -49352,7 +50149,7 @@ async function writeMount({
 }
 
 // src/services/memory-commands.service.ts
-var USAGE10 = `Usage:
+var USAGE11 = `Usage:
   laze memory get SOUL.md|AGENTS.md|MEMORY.md [--channel <channel>]
   laze memory set <file> <text|@file|-> [--channel <channel>] [--base <version>]
   laze memory append MEMORY.md <text|@file|-> [--channel <channel>]
@@ -49364,7 +50161,7 @@ MEMORY.md is the file of the turn's channel (LAZE_CHANNEL), or of --channel when
 var FILES = /* @__PURE__ */ new Set(["SOUL.md", "AGENTS.md", "MEMORY.md"]);
 function fileRef({ context, args }) {
   const file3 = args.words[2] ?? "";
-  if (!FILES.has(file3)) throw new CliUsageError(USAGE10);
+  if (!FILES.has(file3)) throw new CliUsageError(USAGE11);
   const channel = turnChannel({ context, args });
   return { file: file3, ...channel ? { channel } : {} };
 }
@@ -49403,7 +50200,7 @@ async function memoryHistory({ context, args }) {
 async function memorySet({ context, args }) {
   const ref = fileRef({ context, args });
   const value = args.words.slice(3).join(" ");
-  if (!value) throw new CliUsageError(USAGE10);
+  if (!value) throw new CliUsageError(USAGE11);
   const content = await textArgument({ context, value });
   const base = args.flags.base;
   const { client } = await signedIn({ context, args });
@@ -49419,7 +50216,7 @@ async function memorySet({ context, args }) {
 async function memoryAppend({ context, args }) {
   const ref = fileRef({ context, args });
   const value = args.words.slice(3).join(" ");
-  if (!value) throw new CliUsageError(USAGE10);
+  if (!value) throw new CliUsageError(USAGE11);
   const text2 = await textArgument({ context, value });
   const { client } = await signedIn({ context, args });
   const saved3 = await client.post("/api/memory/append", { ...ref, text: text2 });
@@ -49429,7 +50226,7 @@ async function memoryAppend({ context, args }) {
 }
 async function memorySearch({ context, args }) {
   const query = args.words.slice(2).join(" ").trim();
-  if (!query) throw new CliUsageError(USAGE10);
+  if (!query) throw new CliUsageError(USAGE11);
   const { client } = await signedIn({ context, args });
   const hits = await client.post("/api/memory/search", { query });
   if (args.flags.json) return context.out(`${JSON.stringify(hits, null, 2)}
@@ -49463,13 +50260,13 @@ var MEMORY_COMMANDS = {
 async function memory({ context, args }) {
   const name2 = args.words[1] ?? "";
   const command = Object.hasOwn(MEMORY_COMMANDS, name2) ? MEMORY_COMMANDS[name2] : void 0;
-  if (!command) throw new CliUsageError(USAGE10);
+  if (!command) throw new CliUsageError(USAGE11);
   await command({ context, args });
 }
 
 // src/services/models-commands.service.ts
 var WINDOWS = ["day", "week", "month"];
-var USAGE11 = `Usage:
+var USAGE12 = `Usage:
   laze models policy                             whether Laze models are on, the default budget and the cap
   laze models set-policy [on|off] [--default-day <usd|none>] [--cap-day <usd|none>] ...   (admins)
       --default-week, --default-month, --cap-week and --cap-month set the other windows
@@ -49494,7 +50291,7 @@ function limitsFrom({
     const value = text2 === "none" ? null : Number(text2);
     if (value !== null && (!Number.isFinite(value) || value < 0))
       throw new CliUsageError(`--${prefix}${window2} takes an amount in USD or none.
-${USAGE11}`);
+${USAGE12}`);
     next[window2] = value;
     changed = true;
   }
@@ -49519,12 +50316,12 @@ async function showPolicy({ context, args }) {
 }
 async function setPolicy({ context, args }) {
   const state = args.words[2];
-  if (state !== void 0 && state !== "on" && state !== "off") throw new CliUsageError(USAGE11);
+  if (state !== void 0 && state !== "on" && state !== "off") throw new CliUsageError(USAGE12);
   const { client } = await signedIn({ context, args });
   const current2 = await client.get("/api/models/policy");
   const defaultBudget = limitsFrom({ args, prefix: "default-", current: current2.defaultBudget });
   const cap = limitsFrom({ args, prefix: "cap-", current: current2.cap });
-  if (!state && !defaultBudget && !cap) throw new CliUsageError(USAGE11);
+  if (!state && !defaultBudget && !cap) throw new CliUsageError(USAGE12);
   const updated = await client.post("/api/models/policy", {
     ...state ? { lazeModels: state === "on" } : {},
     ...defaultBudget ? { defaultBudget } : {},
@@ -49565,11 +50362,11 @@ async function agentNamed({ client, name: name2 }) {
 }
 async function setBudget({ context, args }) {
   const name2 = args.words[2];
-  if (!name2) throw new CliUsageError(USAGE11);
+  if (!name2) throw new CliUsageError(USAGE12);
   const { client } = await signedIn({ context, args });
   const agent2 = await agentNamed({ client, name: name2 });
   const next = limitsFrom({ args, prefix: "", current: agent2.budget });
-  if (!next) throw new CliUsageError(USAGE11);
+  if (!next) throw new CliUsageError(USAGE12);
   const updated = await client.post("/api/models/agents/budget", {
     agentId: agent2.agentId,
     budget: next
@@ -49602,19 +50399,19 @@ var MODEL_COMMANDS = {
 async function models({ context, args }) {
   const name2 = args.words[1] ?? "policy";
   const command = Object.hasOwn(MODEL_COMMANDS, name2) ? MODEL_COMMANDS[name2] : void 0;
-  if (!command) throw new CliUsageError(USAGE11);
+  if (!command) throw new CliUsageError(USAGE12);
   await command({ context, args });
 }
 
 // src/services/notification-commands.service.ts
-var USAGE12 = `Usage:
+var USAGE13 = `Usage:
   laze notifications [show]                      your notification settings (people)
   laze notifications set [--channels all|mentions|nothing] [--keywords a,b] [--dnd on|off]
       [--dnd-from 22:00] [--dnd-to 08:00] [--tz <IANA zone>] [--push on|off] [--email on|off]
       [--email-after <minutes>]
   laze notifications snooze <minutes>|off        pause notifications for a while, or end it`;
 var onOff = (value) => value ? "on" : "off";
-function print6({ context, args, settings: settings2 }) {
+function print7({ context, args, settings: settings2 }) {
   if (args.flags.json) return context.out(`${JSON.stringify(settings2, null, 2)}
 `);
   const keywords = settings2.keywords.length ? settings2.keywords.join(", ") : "none";
@@ -49636,14 +50433,14 @@ function switchOf({ args, name: name2 }) {
   if (!text2) return void 0;
   if (text2 !== "on" && text2 !== "off")
     throw new CliUsageError(`--${name2} takes on or off.
-${USAGE12}`);
+${USAGE13}`);
   return text2 === "on";
 }
 function changesOf(args) {
   const channels2 = flagText({ args, name: "channels" });
   if (channels2 && !["all", "mentions", "nothing"].includes(channels2))
     throw new CliUsageError(`--channels takes all, mentions or nothing.
-${USAGE12}`);
+${USAGE13}`);
   const keywords = typeof args.flags.keywords === "string" ? args.flags.keywords : void 0;
   const emailAfter = flagText({ args, name: "email-after" });
   const changes = {
@@ -49661,13 +50458,13 @@ ${USAGE12}`);
 }
 async function showSettings({ context, args }) {
   const { client } = await signedIn({ context, args });
-  print6({ context, args, settings: await client.get("/api/agents/me/notifications") });
+  print7({ context, args, settings: await client.get("/api/agents/me/notifications") });
 }
 async function setSettings({ context, args }) {
   const changes = changesOf(args);
-  if (Object.keys(changes).length === 0) throw new CliUsageError(USAGE12);
+  if (Object.keys(changes).length === 0) throw new CliUsageError(USAGE13);
   const { client } = await signedIn({ context, args });
-  print6({
+  print7({
     context,
     args,
     settings: await client.post("/api/agents/me/notifications", changes)
@@ -49676,9 +50473,9 @@ async function setSettings({ context, args }) {
 async function snoozeFor({ context, args }) {
   const word2 = args.words[2];
   const minutes = word2 === "off" ? 0 : Number(word2);
-  if (!word2 || !Number.isInteger(minutes) || minutes < 0) throw new CliUsageError(USAGE12);
+  if (!word2 || !Number.isInteger(minutes) || minutes < 0) throw new CliUsageError(USAGE13);
   const { client } = await signedIn({ context, args });
-  print6({
+  print7({
     context,
     args,
     settings: await client.post("/api/agents/me/notifications/snooze", {
@@ -49694,12 +50491,12 @@ var NOTIFICATION_COMMANDS = {
 async function notifications({ context, args }) {
   const name2 = args.words[1] ?? "show";
   const command = Object.hasOwn(NOTIFICATION_COMMANDS, name2) ? NOTIFICATION_COMMANDS[name2] : void 0;
-  if (!command) throw new CliUsageError(USAGE12);
+  if (!command) throw new CliUsageError(USAGE13);
   await command({ context, args });
 }
 
 // ../../modules/openclaw/contract/src/openclaw.ts
-var workspaceIdSchema15 = external_exports.string().min(1);
+var workspaceIdSchema16 = external_exports.string().min(1);
 var connectionIdSchema = external_exports.string().min(1).max(80);
 var openclawAgentIdSchema = external_exports.string().min(1).max(120);
 var openclawConnectionStatusSchema = external_exports.enum([
@@ -49708,12 +50505,25 @@ var openclawConnectionStatusSchema = external_exports.enum([
   "unreachable",
   "refused"
 ]);
+var openclawCronViewSchemaDefinition = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  enabled: external_exports.boolean(),
+  /** When it runs, such as "cron 45 7 * * 1-5 (Europe/Amsterdam)", "every 7 days" or "once". */
+  schedule: external_exports.string(),
+  nextRunAt: external_exports.iso.datetime().nullable(),
+  lastRunAt: external_exports.iso.datetime().nullable(),
+  /** How the last run ended in OpenClaw's words, such as "ok" or "error". */
+  lastStatus: external_exports.string().nullable()
+});
 var openclawAgentViewSchemaDefinition = external_exports.object({
   openclawAgentId: external_exports.string(),
   name: external_exports.string(),
   emoji: external_exports.string(),
   enabled: external_exports.boolean(),
-  lazeAgentId: external_exports.string().nullable()
+  lazeAgentId: external_exports.string().nullable(),
+  /** Its scheduled jobs in OpenClaw; they run there and Laze shows them. */
+  crons: external_exports.array(openclawCronViewSchemaDefinition)
 });
 var openclawConnectionViewSchemaDefinition = external_exports.object({
   id: external_exports.string(),
@@ -49739,14 +50549,14 @@ var openclawOverviewSchemaDefinition = external_exports.object({
 });
 var openclawOverviewSchema = openclawOverviewSchemaDefinition;
 var connectOpenclawInputSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema15,
+  workspaceId: workspaceIdSchema16,
   gatewayUrl: external_exports.string().trim().min(1).max(500),
   token: external_exports.string().trim().min(1).max(500),
   label: external_exports.string().trim().min(1).max(80).optional()
 });
 var connectOpenclawInputSchema = connectOpenclawInputSchemaDefinition;
 var openclawConnectionRefSchemaDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema15,
+  workspaceId: workspaceIdSchema16,
   connectionId: connectionIdSchema
 });
 var openclawConnectionRefSchema = openclawConnectionRefSchemaDefinition;
@@ -49761,8 +50571,19 @@ var setOpenclawFeedInputSchemaDefinition = external_exports.object({
   enabled: external_exports.boolean()
 });
 var setOpenclawFeedInputSchema = setOpenclawFeedInputSchemaDefinition;
+var openclawAgentRefSchemaDefinition = external_exports.object({
+  ...openclawConnectionRefSchemaDefinition.shape,
+  openclawAgentId: openclawAgentIdSchema
+});
+var openclawAgentRefSchema = openclawAgentRefSchemaDefinition;
+var openclawAgentKeySchemaDefinition = external_exports.object({
+  agentId: external_exports.string(),
+  agentName: external_exports.string(),
+  token: external_exports.string()
+});
+var openclawAgentKeySchema = openclawAgentKeySchemaDefinition;
 var OpenclawApi = moduleApi()("openclaw");
-var openclawTrpc = defineTrpcContract("openclaw").query("overview").withInput(external_exports.object({ workspaceId: workspaceIdSchema15 })).withOutput(openclawOverviewSchema).mutation("connect").withInput(connectOpenclawInputSchema).withOutput(openclawConnectionViewSchema).mutation("setAgent").withInput(setOpenclawAgentInputSchema).withOutput(openclawConnectionViewSchema).mutation("setFeed").withInput(setOpenclawFeedInputSchema).withOutput(openclawConnectionViewSchema).mutation("disconnect").withInput(openclawConnectionRefSchema).withOutput(external_exports.object({ disconnected: external_exports.literal(true) })).build();
+var openclawTrpc = defineTrpcContract("openclaw").query("overview").withInput(external_exports.object({ workspaceId: workspaceIdSchema16 })).withOutput(openclawOverviewSchema).mutation("connect").withInput(connectOpenclawInputSchema).withOutput(openclawConnectionViewSchema).mutation("setAgent").withInput(setOpenclawAgentInputSchema).withOutput(openclawConnectionViewSchema).mutation("setFeed").withInput(setOpenclawFeedInputSchema).withOutput(openclawConnectionViewSchema).mutation("agentKey").withInput(openclawAgentRefSchema).withOutput(openclawAgentKeySchema).mutation("disconnect").withInput(openclawConnectionRefSchema).withOutput(external_exports.object({ disconnected: external_exports.literal(true) })).build();
 
 // ../../modules/openclaw/contract/src/openclaw.config.ts
 var positiveInt5 = external_exports.coerce.number().int().positive();
@@ -49798,6 +50619,7 @@ var OPENCLAW_KEY_PATHS = {
   connect: "/api/openclaw/connect",
   setAgent: "/api/openclaw/agent",
   setFeed: "/api/openclaw/feed",
+  agentKey: "/api/openclaw/agent-key",
   disconnect: "/api/openclaw/disconnect"
 };
 var { gatewayUrl, token, label } = connectOpenclawInputSchema.shape;
@@ -49816,6 +50638,7 @@ var setOpenclawAgentByKeyInputSchemaDefinition = setOpenclawAgentInputSchema.omi
 var setOpenclawFeedByKeyInputSchemaDefinition = setOpenclawFeedInputSchema.omit({
   workspaceId: true
 });
+var openclawAgentByKeyInputSchemaDefinition = openclawAgentRefSchema.omit({ workspaceId: true });
 
 // src/services/openclaw-commands.service.ts
 var OPENCLAW_USAGE = `Usage (a person's key; a gateway belongs to the person who connects it):
@@ -49824,6 +50647,8 @@ var OPENCLAW_USAGE = `Usage (a person's key; a gateway belongs to the person who
       --from-vault names a connection in your own keychain that holds the token; over MCP it is
       the only way, so the token never rides in the call
   laze openclaw agent <connectionId> <openclawAgentId> on|off   make one of its agents a Laze agent
+  laze openclaw agent-key <connectionId> <openclawAgentId>   a Laze CLI key for an agent that is on,
+      printed once as the login line to run on its machine; its previous key stops working
   laze openclaw feed <connectionId> on|off       bring its feed into your feed
   laze openclaw disconnect <connectionId>        remove it, its Laze agents and its credentials`;
 function wordAt4(args, index) {
@@ -49836,6 +50661,13 @@ function switchAt(args, index) {
   if (word2 !== "on" && word2 !== "off") throw new CliUsageError(OPENCLAW_USAGE);
   return word2 === "on";
 }
+function scheduleLine(cron) {
+  let next = "off";
+  if (cron.enabled) next = cron.nextRunAt ? `next ${cron.nextRunAt}` : "";
+  const last = cron.lastRunAt ? `last ${cron.lastRunAt} ${cron.lastStatus ?? ""}`.trim() : "";
+  return `    schedule	${cron.name}	${cron.schedule}	${next}	${last}
+`;
+}
 function printConnection2({
   context,
   connection
@@ -49856,6 +50688,7 @@ function printConnection2({
     const state = agent2.lazeAgentId ? `on as ${agent2.lazeAgentId}` : "off";
     context.out(`  ${agent2.openclawAgentId}	${agent2.name}	${state}
 `);
+    for (const cron of agent2.crons) context.out(scheduleLine(cron));
   }
 }
 function answer2({
@@ -49900,6 +50733,24 @@ var agent = async ({ context, args, client }) => {
   });
   answer2({ context, args, connection });
 };
+function profileNameOf(agentName) {
+  return agentName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "agent";
+}
+var agentKey = async ({ context, args, client, url: url2 }) => {
+  const key = await client.post(OPENCLAW_KEY_PATHS.agentKey, {
+    connectionId: wordAt4(args, 2),
+    openclawAgentId: wordAt4(args, 3)
+  });
+  if (args.flags.json) return context.out(`${JSON.stringify(key)}
+`);
+  context.out(
+    `A new Laze key for ${key.agentName} (${key.agentId}), shown once; its previous key stopped working.
+In the agent's own folder on its machine run:
+  npm i -g ${url2}/api/agents/cli/laze-cli.tgz
+  laze login --token ${key.token} --url ${url2} --profile ${profileNameOf(key.agentName)} --here
+`
+  );
+};
 var feed2 = async ({ context, args, client }) => {
   const connection = await client.post(OPENCLAW_KEY_PATHS.setFeed, {
     connectionId: wordAt4(args, 2),
@@ -49913,7 +50764,14 @@ var disconnect = async ({ context, args, client }) => {
   context.out(`Disconnected ${connectionId}.
 `);
 };
-var RUNS3 = { list: list8, connect: connect3, agent, feed: feed2, disconnect };
+var RUNS3 = {
+  list: list8,
+  connect: connect3,
+  agent,
+  "agent-key": agentKey,
+  feed: feed2,
+  disconnect
+};
 async function openclaw({
   context,
   args
@@ -49921,8 +50779,8 @@ async function openclaw({
   const verb = args.words[1] ?? "list";
   const run3 = Object.hasOwn(RUNS3, verb) ? RUNS3[verb] : void 0;
   if (!run3) throw new CliUsageError(OPENCLAW_USAGE);
-  const { client } = await signedIn({ context, args });
-  await run3({ context, args, client });
+  const { client, profile } = await signedIn({ context, args });
+  await run3({ context, args, client, url: profile.url });
 }
 
 // src/services/ops-commands.service.ts
@@ -50044,7 +50902,7 @@ function watchingRelease({
 }
 
 // src/services/schedule-commands.service.ts
-var USAGE13 = `Usage:
+var USAGE14 = `Usage:
   laze schedule add <name> --prompt <text> (--cron "<m h dom mon dow>" | --rrule "<RRULE>" | --at <local time>)
     [--tz <IANA zone>] [--channel <channelId>] [--agent <agentId>]
   laze schedule list
@@ -50058,7 +50916,7 @@ function timingOf(args) {
   const given = [cron, rrule, at].filter(Boolean);
   if (given.length !== 1)
     throw new CliUsageError(`Give exactly one of --cron, --rrule or --at.
-${USAGE13}`);
+${USAGE14}`);
   if (cron) return { kind: "cron", cron };
   if (rrule) return { kind: "rrule", rrule };
   return { kind: "once", at };
@@ -50073,7 +50931,7 @@ function printSchedule({ context, schedule: schedule2 }) {
 async function scheduleAdd({ context, args }) {
   const name2 = args.words.slice(2).join(" ").trim();
   const prompt = flagText({ args, name: "prompt" });
-  if (!name2 || !prompt) throw new CliUsageError(USAGE13);
+  if (!name2 || !prompt) throw new CliUsageError(USAGE14);
   const timing = timingOf(args);
   const { client } = await signedIn({ context, args });
   const channelId = flagText({ args, name: "channel" });
@@ -50110,7 +50968,7 @@ function changesOf2(args) {
 async function scheduleUpdate({ context, args }) {
   const scheduleId = args.words[2];
   const changes = changesOf2(args);
-  if (!scheduleId || Object.keys(changes).length === 0) throw new CliUsageError(USAGE13);
+  if (!scheduleId || Object.keys(changes).length === 0) throw new CliUsageError(USAGE14);
   const { client } = await signedIn({ context, args });
   const schedule2 = await client.post("/api/schedules/update", { scheduleId, ...changes });
   if (args.flags.json) return context.out(`${JSON.stringify(schedule2, null, 2)}
@@ -50127,7 +50985,7 @@ async function scheduleList({ context, args }) {
 function byId(path) {
   return async ({ context, args }) => {
     const scheduleId = args.words[2];
-    if (!scheduleId) throw new CliUsageError(USAGE13);
+    if (!scheduleId) throw new CliUsageError(USAGE14);
     const { client } = await signedIn({ context, args });
     const answer4 = await client.post(`/api/schedules/${path}`, {
       scheduleId
@@ -50141,7 +50999,7 @@ function byId(path) {
 }
 async function scheduleRuns({ context, args }) {
   const scheduleId = args.words[2];
-  if (!scheduleId) throw new CliUsageError(USAGE13);
+  if (!scheduleId) throw new CliUsageError(USAGE14);
   const { client } = await signedIn({ context, args });
   const runs = await client.post("/api/schedules/runs", { scheduleId });
   if (args.flags.json) return context.out(`${JSON.stringify(runs, null, 2)}
@@ -50165,14 +51023,14 @@ var SCHEDULE_COMMANDS = {
 async function schedule({ context, args }) {
   const name2 = args.words[1] ?? "";
   const command = Object.hasOwn(SCHEDULE_COMMANDS, name2) ? SCHEDULE_COMMANDS[name2] : void 0;
-  if (!command) throw new CliUsageError(USAGE13);
+  if (!command) throw new CliUsageError(USAGE14);
   await command({ context, args });
 }
 
 // src/services/skill-commands.service.ts
 import { readdir as readdir3, readFile as readFile21 } from "node:fs/promises";
 import { join as join12, relative as relative3, resolve as resolve9 } from "node:path";
-var USAGE14 = `Usage:
+var USAGE15 = `Usage:
   laze skill list [--agent <agentId>]
   laze skill install <catalogue-id> [--as <name>] [--agent <agentId>]
   laze skill install --from <folder> [--as <name>] [--agent <agentId>]   a folder with a SKILL.md
@@ -50211,7 +51069,7 @@ async function skillList({ context, args }) {
 async function skillInstall({ context, args }) {
   const catalogueId = args.words[2];
   const from = flagText({ args, name: "from" });
-  if (!catalogueId === !from) throw new CliUsageError(USAGE14);
+  if (!catalogueId === !from) throw new CliUsageError(USAGE15);
   const name2 = flagText({ args, name: "as" });
   const agent2 = flagText({ args, name: "agent" });
   const files2 = from ? await folderFiles({ root: resolve9(context.cwd, from) }) : void 0;
@@ -50229,7 +51087,7 @@ async function skillInstall({ context, args }) {
 }
 async function skillShow({ context, args }) {
   const name2 = args.words[2];
-  if (!name2) throw new CliUsageError(USAGE14);
+  if (!name2) throw new CliUsageError(USAGE15);
   const agent2 = flagText({ args, name: "agent" });
   const { client } = await signedIn({ context, args });
   const skill2 = await client.post("/api/skills/show", {
@@ -50262,7 +51120,7 @@ function agentFlag(args) {
 }
 async function skillRemove({ context, args }) {
   const name2 = args.words[2];
-  if (!name2) throw new CliUsageError(USAGE14);
+  if (!name2) throw new CliUsageError(USAGE15);
   const { client } = await signedIn({ context, args });
   const removed = await client.post("/api/skills/remove", {
     name: name2,
@@ -50279,7 +51137,7 @@ async function skillUpdate({ context, args }) {
   const description = typeof args.flags.description === "string" ? args.flags.description : void 0;
   const skillMdFile = flagText({ args, name: "skill-md" });
   if (!name2 || !newName && description === void 0 && !skillMdFile) {
-    throw new CliUsageError(USAGE14);
+    throw new CliUsageError(USAGE15);
   }
   const skillMd = skillMdFile ? await readFile21(resolve9(context.cwd, skillMdFile), "utf8") : void 0;
   const { client } = await signedIn({ context, args });
@@ -50306,7 +51164,7 @@ var SKILL_COMMANDS = {
 async function skill({ context, args }) {
   const name2 = args.words[1] ?? "";
   const command = Object.hasOwn(SKILL_COMMANDS, name2) ? SKILL_COMMANDS[name2] : void 0;
-  if (!command) throw new CliUsageError(USAGE14);
+  if (!command) throw new CliUsageError(USAGE15);
   await command({ context, args });
 }
 
@@ -50740,7 +51598,7 @@ async function enforce({ context, args }) {
   } catch (error62) {
     if (!(error62 instanceof LazeApiError) || error62.code !== "sign_in_not_tested") throw error62;
     const base = profile.url.replace(/\/+$/, "");
-    const settings2 = `${base}/workspaces/${encodeURIComponent(profile.workspaceId)}/settings/sign-in`;
+    const settings2 = `${base}/workspaces/${encodeURIComponent(profile.workspaceId)}/settings/workspace?part=sign-in`;
     context.err(
       `laze: sign in through ${domain2}'s provider once in a browser first, so enforcing cannot lock you out: ${settings2}
 `
@@ -50868,11 +51726,11 @@ function statusLine2({ presence: presence2 }) {
 }
 
 // src/services/status-commands.service.ts
-var USAGE15 = "Usage: laze status set <emoji> [text] [--for 30m|1h|4h|today|week|never] [--tz <zone>], laze status clear|away|active";
+var USAGE16 = "Usage: laze status set <emoji> [text] [--for 30m|1h|4h|today|week|never] [--tz <zone>], laze status clear|away|active";
 function clearAfterOf({ args }) {
   const wanted = flagText({ args, name: "for", fallback: "never" });
   const known = STATUS_CLEAR_AFTER.find((candidate) => candidate === wanted);
-  if (!known) throw new CliUsageError(USAGE15);
+  if (!known) throw new CliUsageError(USAGE16);
   return known;
 }
 function answer3({
@@ -50886,7 +51744,7 @@ function answer3({
 }
 async function statusSet({ context, args }) {
   const [, , emoji3, ...words] = args.words;
-  if (!emoji3) throw new CliUsageError(USAGE15);
+  if (!emoji3) throw new CliUsageError(USAGE16);
   const clearAfter = clearAfterOf({ args });
   const timeZone = flagText({ args, name: "tz" }) || Intl.DateTimeFormat().resolvedOptions().timeZone;
   const { client } = await signedIn({ context, args });
@@ -50910,7 +51768,7 @@ async function statusAway({ context, args }) {
   answer3({ context, args, presence: presence2 });
 }
 async function statusUsage() {
-  throw new CliUsageError(USAGE15);
+  throw new CliUsageError(USAGE16);
 }
 
 // src/services/update-commands.service.ts
@@ -50959,14 +51817,14 @@ async function update2({
 }
 
 // src/services/vault-save-commands.service.ts
-var USAGE16 = `Usage: laze vault save <pending> --name <name> --description "<what it is for>"
+var USAGE17 = `Usage: laze vault save <pending> --name <name> --description "<what it is for>"
 Names a key Laze held from a message you received, in the sender's vault.`;
 var KEPT_IN_LAZE = "The key never left Laze: the chat, its history and your session hold only a reference, so there is nothing to rotate. Tell the person that.";
 async function vaultSave({ context, args }) {
   const pending = args.words[2];
   const name2 = flagText({ args, name: "name" });
   const description = flagText({ args, name: "description" });
-  if (!pending || !name2 || !description) throw new CliUsageError(USAGE16);
+  if (!pending || !name2 || !description) throw new CliUsageError(USAGE17);
   const env = context.environment.inherited;
   const turn = await turnTokenOf4({
     env,
@@ -51062,8 +51920,8 @@ var WHATSAPP_BUSINESS_REST_PATHS = {
 var WHATSAPP_BUSINESS_TEXT_MAX = 4096;
 var WHATSAPP_BUSINESS_LIMIT_MAX = 200;
 var WHATSAPP_BUSINESS_STATUS_WAIT_MAX_SECONDS = 50;
-var workspaceIdSchema16 = external_exports.string().min(1).max(64);
-var workspaceInput4 = external_exports.object({ workspaceId: workspaceIdSchema16 });
+var workspaceIdSchema17 = external_exports.string().min(1).max(64);
+var workspaceInput4 = external_exports.object({ workspaceId: workspaceIdSchema17 });
 var digits = (what) => external_exports.string().trim().regex(/^\d{5,30}$/, `${what} is the number Meta shows, digits only`);
 var appSecretSchema = external_exports.string().trim().regex(/^[a-f0-9]{32}$/i, "The app secret is 32 letters and digits from App settings > Basic");
 var accessTokenSchema = external_exports.string().trim().min(20, "The access token is the long permanent system user token").max(2e3).regex(/^\S+$/, "The access token is one line with no spaces");
@@ -51097,7 +51955,7 @@ var statusDefinition = external_exports.object({
 });
 var whatsappBusinessStatusSchema = statusDefinition;
 var connectDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema16,
+  workspaceId: workspaceIdSchema17,
   appId: digits("The app id"),
   wabaId: digits("The WhatsApp Business Account id"),
   phoneNumberId: digits("The phone number id"),
@@ -51120,7 +51978,7 @@ var webhookDefinition = external_exports.object({
 });
 var whatsappBusinessWebhookSchema = webhookDefinition;
 var settingsDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema16,
+  workspaceId: workspaceIdSchema17,
   /** The agent that answers; null for none. Left out keeps the current one. */
   agentId: external_exports.string().min(1).max(64).nullable().optional(),
   replyMode: whatsappBusinessReplyModeSchema.optional()
@@ -51140,7 +51998,7 @@ var whatsappBusinessConversationSchema = conversationDefinition;
 var limitSchema2 = external_exports.number().int().min(1).max(WHATSAPP_BUSINESS_LIMIT_MAX);
 var contactRefSchema = external_exports.string().trim().min(1).max(64);
 var conversationsInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema16,
+  workspaceId: workspaceIdSchema17,
   limit: limitSchema2.optional()
 });
 var whatsappBusinessConversationsInputSchema = conversationsInputDefinition;
@@ -51166,7 +52024,7 @@ var messageDefinition = external_exports.object({
   template: external_exports.string().nullable()
 });
 var readInputDefinition2 = external_exports.object({
-  workspaceId: workspaceIdSchema16,
+  workspaceId: workspaceIdSchema17,
   contact: contactRefSchema,
   limit: limitSchema2.optional()
 });
@@ -51175,12 +52033,12 @@ var readDefinition = external_exports.object({
   messages: external_exports.array(messageDefinition)
 });
 var sendInputDefinition2 = external_exports.object({
-  workspaceId: workspaceIdSchema16,
+  workspaceId: workspaceIdSchema17,
   to: contactRefSchema,
   text: external_exports.string().trim().min(1).max(WHATSAPP_BUSINESS_TEXT_MAX)
 });
 var sendTemplateInputDefinition = external_exports.object({
-  workspaceId: workspaceIdSchema16,
+  workspaceId: workspaceIdSchema17,
   to: contactRefSchema,
   template: external_exports.string().trim().min(1).max(512),
   /** The template's language code; the only approved one when left out. */
@@ -51207,7 +52065,7 @@ function whatsappBusinessSendSettled({
   return state !== "waiting" && state !== "sending";
 }
 var sendStatusInputDefinition2 = external_exports.object({
-  workspaceId: workspaceIdSchema16,
+  workspaceId: workspaceIdSchema17,
   sendId: external_exports.string().min(1).max(64),
   waitSeconds: external_exports.number().int().min(0).max(WHATSAPP_BUSINESS_STATUS_WAIT_MAX_SECONDS).default(0)
 });
@@ -51257,7 +52115,7 @@ var restSendStatusDefinition2 = sendStatusInputDefinition2.omit({ workspaceId: t
 var restSettingsDefinition = settingsDefinition.omit({ workspaceId: true });
 var restEmptyDefinition = external_exports.object({});
 var WhatsappBusinessApi = moduleApi()("whatsapp-business");
-var whatsappBusinessTrpc = defineTrpcContract("whatsappBusiness").query("status").withInput(workspaceInput4).withOutput(whatsappBusinessStatusSchema).mutation("connect").withInput(connectWhatsappBusinessInputSchema).withOutput(whatsappBusinessWebhookSchema).mutation("check").withInput(workspaceInput4).withOutput(whatsappBusinessStatusSchema).mutation("verifyToken").withInput(workspaceInput4).withOutput(whatsappBusinessWebhookSchema).mutation("settings").withInput(updateWhatsappBusinessSettingsInputSchema).withOutput(whatsappBusinessStatusSchema).mutation("disconnect").withInput(workspaceInput4).withOutput(whatsappBusinessStatusSchema).query("conversations").withInput(whatsappBusinessConversationsInputSchema).withOutput(external_exports.array(whatsappBusinessConversationSchema)).query("templates").withInput(workspaceInput4).withOutput(external_exports.array(whatsappBusinessTemplateSchema)).query("prices").withInput(external_exports.object({ ...pricesInputDefinition.shape, workspaceId: workspaceIdSchema16 })).withOutput(whatsappBusinessPricesSchema).build();
+var whatsappBusinessTrpc = defineTrpcContract("whatsappBusiness").query("status").withInput(workspaceInput4).withOutput(whatsappBusinessStatusSchema).mutation("connect").withInput(connectWhatsappBusinessInputSchema).withOutput(whatsappBusinessWebhookSchema).mutation("check").withInput(workspaceInput4).withOutput(whatsappBusinessStatusSchema).mutation("verifyToken").withInput(workspaceInput4).withOutput(whatsappBusinessWebhookSchema).mutation("settings").withInput(updateWhatsappBusinessSettingsInputSchema).withOutput(whatsappBusinessStatusSchema).mutation("disconnect").withInput(workspaceInput4).withOutput(whatsappBusinessStatusSchema).query("conversations").withInput(whatsappBusinessConversationsInputSchema).withOutput(external_exports.array(whatsappBusinessConversationSchema)).query("templates").withInput(workspaceInput4).withOutput(external_exports.array(whatsappBusinessTemplateSchema)).query("prices").withInput(external_exports.object({ ...pricesInputDefinition.shape, workspaceId: workspaceIdSchema17 })).withOutput(whatsappBusinessPricesSchema).build();
 
 // ../../modules/whatsapp-business/contract/src/whatsapp-business.config.ts
 var whatsappBusinessConfig = Config.define((c) => ({
@@ -51721,7 +52579,7 @@ var PATHS3 = {
 var STATUS_WAIT_SECONDS2 = 50;
 var STATUS_CALLS2 = 2;
 var SETTLED = /* @__PURE__ */ new Set(["sent", "denied", "expired", "failed"]);
-var USAGE17 = [
+var USAGE18 = [
   "Usage: laze whatsapp chats <machine> [--limit <n>]          the chats on the machine, newest first",
   "       laze whatsapp read <machine> <chat> [--limit <n>]    a chat's last messages, oldest first",
   '       laze whatsapp send <machine> <chat> "<text>"         send as the owner; an agent waits for their approval',
@@ -51731,14 +52589,14 @@ var USAGE17 = [
 ].join("\n");
 function word({ args, at }) {
   const value = args.words[at];
-  if (!value) throw new CliUsageError(USAGE17);
+  if (!value) throw new CliUsageError(USAGE18);
   return value;
 }
 function limitOf5({ args }) {
   const text2 = flagText({ args, name: "limit" });
   if (!text2) return {};
   const limit = Number(text2);
-  if (!Number.isInteger(limit) || limit < 1) throw new CliUsageError(USAGE17);
+  if (!Number.isInteger(limit) || limit < 1) throw new CliUsageError(USAGE18);
   return { limit };
 }
 async function chats({ context, args }) {
@@ -51800,7 +52658,7 @@ Still waiting. Run \`laze whatsapp status ${send3.id}\` later to see the answer.
 }
 async function send2({ context, args }) {
   const text2 = args.words.slice(4).join(" ") || args.rest.join(" ");
-  if (!text2) throw new CliUsageError(USAGE17);
+  if (!text2) throw new CliUsageError(USAGE18);
   const client = await computeClient({ context, args });
   const asked = await client.post(PATHS3.send, {
     machine: word({ args, at: 2 }),
@@ -51830,11 +52688,11 @@ async function whatsapp({
   if (command === "status") return status6({ context, args });
   const linking = whatsappPairingCommand(command);
   if (linking) return linking({ context, args });
-  throw new CliUsageError(USAGE17);
+  throw new CliUsageError(USAGE18);
 }
 
 // src/services/wiki-commands.service.ts
-var USAGE18 = `Usage:
+var USAGE19 = `Usage:
   laze wiki list
   laze wiki get <path>
   laze wiki put <path> <markdown|@file|-> [--title <title>] [--channel <channel>] [--base <version>]
@@ -51854,7 +52712,7 @@ async function wikiList({ context, args }) {
 }
 async function wikiGet({ context, args }) {
   const path = args.words[2];
-  if (!path) throw new CliUsageError(USAGE18);
+  if (!path) throw new CliUsageError(USAGE19);
   const { client } = await signedIn({ context, args });
   const page = await client.post("/api/wiki/get", { path });
   if (args.flags.json) return context.out(`${JSON.stringify(page, null, 2)}
@@ -51871,7 +52729,7 @@ Linked from: ${page.backlinks.map((link) => link.path).join(", ")}
 async function wikiPut({ context, args }) {
   const path = args.words[2];
   const value = args.words.slice(3).join(" ");
-  if (!path || !value) throw new CliUsageError(USAGE18);
+  if (!path || !value) throw new CliUsageError(USAGE19);
   const body = await textArgument({ context, value });
   const title = flagText({ args, name: "title" });
   const channel = flagText({ args, name: "channel" });
@@ -51891,7 +52749,7 @@ async function wikiPut({ context, args }) {
 }
 async function wikiSearch({ context, args }) {
   const query = args.words.slice(2).join(" ").trim();
-  if (!query) throw new CliUsageError(USAGE18);
+  if (!query) throw new CliUsageError(USAGE19);
   const { client } = await signedIn({ context, args });
   const hits = await client.post("/api/wiki/search", { query });
   if (args.flags.json) return context.out(`${JSON.stringify(hits, null, 2)}
@@ -51901,7 +52759,7 @@ async function wikiSearch({ context, args }) {
 }
 async function wikiHistory({ context, args }) {
   const path = args.words[2];
-  if (!path) throw new CliUsageError(USAGE18);
+  if (!path) throw new CliUsageError(USAGE19);
   const { client } = await signedIn({ context, args });
   const revisions = await client.post("/api/wiki/history", { path });
   if (args.flags.json) return context.out(`${JSON.stringify(revisions, null, 2)}
@@ -51915,7 +52773,7 @@ async function wikiHistory({ context, args }) {
 }
 async function wikiMove({ context, args }) {
   const [, , path, to] = args.words;
-  if (!path || !to) throw new CliUsageError(USAGE18);
+  if (!path || !to) throw new CliUsageError(USAGE19);
   const { client } = await signedIn({ context, args });
   const page = await client.post("/api/wiki/move", { path, to });
   if (args.flags.json) return context.out(`${JSON.stringify(page, null, 2)}
@@ -51925,7 +52783,7 @@ async function wikiMove({ context, args }) {
 }
 async function wikiRemove({ context, args }) {
   const path = args.words[2];
-  if (!path) throw new CliUsageError(USAGE18);
+  if (!path) throw new CliUsageError(USAGE19);
   const { client } = await signedIn({ context, args });
   const removed = await client.post("/api/wiki/remove", { path });
   if (args.flags.json) return context.out(`${JSON.stringify(removed)}
@@ -51945,7 +52803,7 @@ var WIKI_COMMANDS = {
 async function wiki({ context, args }) {
   const name2 = args.words[1] ?? "";
   const command = Object.hasOwn(WIKI_COMMANDS, name2) ? WIKI_COMMANDS[name2] : void 0;
-  if (!command) throw new CliUsageError(USAGE18);
+  if (!command) throw new CliUsageError(USAGE19);
   await command({ context, args });
 }
 
@@ -52029,14 +52887,14 @@ function roleOf2(word2) {
   return CALLER_WORKSPACE_ROLES.find((role2) => role2 === upper);
 }
 var anOf = (role2) => role2 === "ADMIN" || role2 === "OWNER" ? "an" : "a";
-function print7({ context, args, answer: answer4, text: text2 }) {
+function print8({ context, args, answer: answer4, text: text2 }) {
   context.out(args.flags.json ? `${JSON.stringify(answer4, null, 2)}
 ` : text2(answer4));
 }
 async function current({ context, args }) {
   const { client } = await signedIn({ context, args });
   const answer4 = await client.get("/api/workspaces/current");
-  print7({
+  print8({
     context,
     args,
     answer: answer4,
@@ -52051,7 +52909,7 @@ ${deleting}`;
 async function mine2({ context, args }) {
   const { client } = await signedIn({ context, args });
   const answer4 = await client.post("/api/agents/me/workspace/mine", {});
-  print7({
+  print8({
     context,
     args,
     answer: answer4,
@@ -52064,7 +52922,7 @@ async function rename6({ context, args }) {
   if (!name2) throw new CliUsageError("Usage: laze workspace rename <name>");
   const { client } = await signedIn({ context, args });
   const answer4 = await client.post("/api/agents/me/workspace/rename", { name: name2 });
-  print7({ context, args, answer: answer4, text: (it) => `Renamed the workspace to ${it.name}.
+  print8({ context, args, answer: answer4, text: (it) => `Renamed the workspace to ${it.name}.
 ` });
 }
 async function create2({ context, args }) {
@@ -52072,7 +52930,7 @@ async function create2({ context, args }) {
   if (!name2) throw new CliUsageError("Usage: laze workspace create <name>");
   const { client } = await signedIn({ context, args });
   const answer4 = await client.post("/api/agents/me/workspace/create", { name: name2 });
-  print7({
+  print8({
     context,
     args,
     answer: answer4,
@@ -52083,7 +52941,7 @@ async function create2({ context, args }) {
 async function leave({ context, args }) {
   const { client } = await signedIn({ context, args });
   const answer4 = await client.post("/api/agents/me/workspace/leave", {});
-  print7({ context, args, answer: answer4, text: () => "You left the workspace.\n" });
+  print8({ context, args, answer: answer4, text: () => "You left the workspace.\n" });
 }
 async function scheduleDeletion({ context, args }) {
   const confirmName = flagText({ args, name: "confirm" });
@@ -52096,7 +52954,7 @@ async function scheduleDeletion({ context, args }) {
   const answer4 = await client.post("/api/agents/me/workspace/delete", {
     confirmName
   });
-  print7({
+  print8({
     context,
     args,
     answer: answer4,
@@ -52110,7 +52968,7 @@ async function cancelDeletion({ context, args }) {
     "/api/agents/me/workspace/cancel-deletion",
     {}
   );
-  print7({
+  print8({
     context,
     args,
     answer: answer4,
@@ -52143,7 +53001,7 @@ async function listWorkspaces({ context, args }) {
       preferred: name2
     }) ?? null
   }));
-  print7({
+  print8({
     context,
     args,
     answer: answer4,
@@ -52178,7 +53036,7 @@ async function switchTo({ context, args }) {
     );
   }
   await context.store.write({ ...config2, current: chosen });
-  print7({
+  print8({
     context,
     args,
     answer: { id: target.id, name: target.name, profile: chosen },
@@ -52217,13 +53075,13 @@ async function logo({ context, args }) {
     const body = await readLogo({ context, file: file3 });
     const { client } = await signedIn({ context, args });
     const answer4 = await client.post("/api/agents/me/workspace/logo", body);
-    return print7({ context, args, answer: answer4, text: (it) => `Set the logo of ${it.name}.
+    return print8({ context, args, answer: answer4, text: (it) => `Set the logo of ${it.name}.
 ` });
   }
   if (action === "remove") {
     const { client } = await signedIn({ context, args });
     const answer4 = await client.post("/api/agents/me/workspace/logo/remove", {});
-    return print7({
+    return print8({
       context,
       args,
       answer: answer4,
@@ -52257,7 +53115,7 @@ async function workspace({ context, args }) {
 async function list9({ context, args }) {
   const { client } = await signedIn({ context, args });
   const answer4 = await client.get("/api/workspaces/current/members");
-  print7({
+  print8({
     context,
     args,
     answer: answer4,
@@ -52276,7 +53134,7 @@ async function invite({ context, args }) {
     email: email3,
     role: role2
   });
-  print7({
+  print8({
     context,
     args,
     answer: answer4,
@@ -52288,7 +53146,7 @@ async function invite({ context, args }) {
 async function invites({ context, args }) {
   const { client } = await signedIn({ context, args });
   const answer4 = await client.post("/api/agents/me/workspace/invites", {});
-  print7({
+  print8({
     context,
     args,
     answer: answer4,
@@ -52307,7 +53165,7 @@ async function revokeInvite({ context, args }) {
     "/api/agents/me/workspace/revoke-invite",
     { invite: wanted }
   );
-  print7({ context, args, answer: answer4, text: (it) => `Revoked the invitation for ${it.email}.
+  print8({ context, args, answer: answer4, text: (it) => `Revoked the invitation for ${it.email}.
 ` });
 }
 async function role({ context, args }) {
@@ -52321,7 +53179,7 @@ async function role({ context, args }) {
     member,
     role: picked
   });
-  print7({
+  print8({
     context,
     args,
     answer: answer4,
@@ -52336,13 +53194,13 @@ async function remove4({ context, args }) {
   const answer4 = await client.post("/api/agents/me/workspace/remove", {
     member
   });
-  print7({ context, args, answer: answer4, text: (it) => `Removed ${it.name} from the workspace.
+  print8({ context, args, answer: answer4, text: (it) => `Removed ${it.name} from the workspace.
 ` });
 }
 async function requests({ context, args }) {
   const { client } = await signedIn({ context, args });
   const answer4 = await client.post("/api/agents/me/workspace/requests", {});
-  print7({
+  print8({
     context,
     args,
     answer: answer4,
@@ -52362,7 +53220,7 @@ function deciding(decision) {
       requestId,
       decision
     });
-    print7({
+    print8({
       context,
       args,
       answer: answer4,
@@ -52397,7 +53255,8 @@ async function members2({ context, args }) {
 // src/services/laze-cli.service.ts
 var HELP = `laze: work in a Laze workspace from your terminal or your agent.
 
-  laze login [--url <server>] [--token lz_...]   sign in (opens a browser code)
+  laze login [--url <server>] [--token lz_...] [--profile <name> --here]   sign in (opens a browser code);
+      --here uses the profile only in this folder and below, so agents sharing a machine keep their own
   laze --version                                 the version of this CLI
   laze update [--dry-run]                        install the latest release (npm, pnpm, bun or yarn)
   laze logout                                    revoke this profile's key and forget it
@@ -52486,13 +53345,16 @@ var HELP = `laze: work in a Laze workspace from your terminal or your agent.
   laze app create <name> --template crm ...      build an app: create, push, preview, publish, revert
   laze app                                       every laze app command, with its flags
   laze agents list | laze agents status <name>   the workspace's agents and their context
-  laze join [--name <name>] [--note <text>] [--timeout <seconds>]   ask to join as an agent: a person approves once
+  laze join [--workspace <name|link>] [--for <email>] [--name <name>]   ask to join as an agent: a person approves once in their feed
   laze agent link --token <token> [--name <name>]  connect this Claude Code or Codex session
   laze agent create --name <name> [--description <text>] [--harness laze-models|claude-code|codex] [--avatar <file>]
       make an agent for your owner (or for you): personal, opened in their direct messages
       --team makes a team agent; on Claude Code or Codex it needs --pool <pool>, a login pool to draw from
   laze agent update <agent> [--name] [--description] [--avatar] [--context-window]   change an agent your owner owns
   laze agent archive <agent>                     remove an agent your owner owns
+  laze agent pause|resume <agent>                pause an agent Laze runs, or resume it
+  laze agent transfer <agent> <member>            hand a team agent to another member (id, email or name)
+  laze agent reset-session <agent>               stop its turn; its next message starts a fresh session
   laze agent logins list|add|rename|remove|check   your Claude and Codex logins; a token is read from stdin only
   laze agent pools list|create|rename|delete|add-login|remove-login|grant|revoke   shared login pools
   laze agent set-pool <agent> <pool|none>        the pool a Claude Code or Codex agent draws its logins from
@@ -52520,7 +53382,7 @@ var HELP = `laze: work in a Laze workspace from your terminal or your agent.
   laze slack overview|link-prompts|link|unlink|channels|mirror|update|moves|move ...   Slack as yourself
       admins set Slack up too: install|setup|begin-setup|credentials|install-app|update-app|disconnect
   laze connect providers|start|search|mcp|mcp-key|github|card|card-key   connect services as yourself
-  laze openclaw list|connect|agent|feed|disconnect   your OpenClaw gateways and their agents
+  laze openclaw list|connect|agent|agent-key|feed|disconnect   your OpenClaw gateways and their agents
   laze browser setup|cdp|screen|status <machine>   a machine with Chrome a person signs in on, for agents
       Sites without an API need a person's login: offer a browser machine, never ask for a password
   laze browser setup <site> --on <machine>       the browser on a person's own machine instead, at no Laze compute cost
@@ -52673,6 +53535,7 @@ var COMMANDS3 = {
   "openclaw list": openclaw,
   "openclaw connect": openclaw,
   "openclaw agent": openclaw,
+  "openclaw agent-key": openclaw,
   "openclaw feed": openclaw,
   "openclaw disconnect": openclaw,
   "vault scrub": vaultScrub,
@@ -52689,6 +53552,10 @@ var COMMANDS3 = {
   "agent create": createAgent,
   "agent update": updateAgent,
   "agent archive": archiveAgent,
+  "agent pause": pauseAgent,
+  "agent resume": pauseAgent,
+  "agent transfer": transferAgent,
+  "agent reset-session": resetAgentSession,
   "agent logins": agentLogins,
   "agent pools": agentPools,
   "agent set-pool": setAgentPool,