@sealant/mend 0.36.0-next.643 → 0.36.0-next.646

package/dist/main.js

@@ -13,14 +13,17 @@ import {
   PI_PROFILE_AGENT_PATH,
   PI_PROFILE_LOCAL_PACKAGES,
   PI_PROFILE_MAX_FILE_BYTES,
+  REPLACE_WORKSPACE_ACTION,
   WORKTREE_REMOVAL_FORCE_HINT,
   agentIsLive,
   agentMemoryNameOf,
   agentOutcome,
   agentStartingFacts,
   agentStartingLine,
+  askYesNo,
   captureLineOf,
   claudeGrantFacts,
+  confirmPlan,
   createSseParser,
   csiUKeysOf,
   cwdFacts,
@@ -29,12 +32,14 @@ import {
   gitCurrentBranch,
   gitOriginUrl,
   gitTopLevel,
+  hasPersonFacts,
   hostUserNamespacesFix,
   hostUserNamespacesOf,
   isDetachChunk,
   isPasteChunk,
   landingFactLine,
   landingFactsFromWire,
+  launcherNameOf,
   matchProjectByCwd,
   narrowCredential,
   noAnswerError,
@@ -43,16 +48,27 @@ import {
   normalizeRemoteUrl,
   parseLaunchArgs,
   pasteBytes,
+  replaceConfirmLines,
   repositoryCloneUrlIssue,
   sameGrant,
   servicesHoldOf,
   sessionDisplayName,
+  sessionWorkspaceLines,
+  sharedControlConfirm,
+  sharedControlConfirmLines,
+  sharedControlLine,
+  sharedControlQuestion,
   spoken,
   terminalReadOnlyLine,
   trackBracketedPaste,
   validatePiProfile,
-  validateSecretFilePath
-} from "./chunk-2TDRYRGO.js";
+  validateSecretFilePath,
+  workspaceLineList,
+  workspaceReadsOf,
+  workspaceRetirementLine,
+  worktreeJoinLine,
+  worktreeListsPeople
+} from "./chunk-ASHAV3UV.js";
 
 // src/main.ts
 import { spawn as spawn3, spawnSync as spawnSync6 } from "node:child_process";
@@ -1705,7 +1721,8 @@ var COMMANDS = [
     ],
     description: [
       "Sessions run on the platform, so the platform needs your provider login. It is stored under your own user and used only for your work. Nothing is shared with other users.",
-      "Claude and Codex get a login of Mend's own. Both rotate their refresh token, so two copies of one login fight and the one that refreshes second is signed out, and Mend's server refreshes on a schedule. So this logs in through the provider's own flow and your own login stays as it is: Claude in the browser, Codex with a device code, both sent and not kept here. Run it again whenever Mend says a login needs reconnecting. GitHub sends gh's token."
+      "Claude and Codex get a login of Mend's own. Both rotate their refresh token, so two copies of one login fight and the one that refreshes second is signed out, and Mend's server refreshes on a schedule. So this logs in through the provider's own flow and your own login stays as it is: Claude in the browser, Codex with a device code, both sent and not kept here. Run it again whenever Mend says a login needs reconnecting. GitHub sends gh's token.",
+      "In a per-person workspace each person's processes use their own GitHub login, in their own home: git over HTTPS to GitHub reads it through Mend's credential helper, and no GITHUB_TOKEN is set in the environment. A command that needs the token takes it for itself: GITHUB_TOKEN=$(/run/mend/bin/mend-git-credential token) <command>."
     ],
     options: [
       {
@@ -1774,6 +1791,7 @@ var COMMANDS = [
     description: [
       "mend codex, mend claude, mend opencode and mend pi are the same command with a different harness. The session runs in a workspace on the platform, in its own git worktree, and everything it does is recorded. This terminal attaches to it.",
       "The worktree's name is asked first. --name skips the ask; an existing name joins that worktree as a new session. --worktree joins only and fails if the name is unknown. A quoted prompt becomes the first message.",
+      "When another person's session is running in the worktree you join, the launch says so before the session starts: you share its workspace, everything you run runs as you, on your own logins, and either of you can read the other's files, logins included.",
       "Detach with Ctrl+] and the session keeps running. Reattach from any terminal with mend attach, or from the phone.",
       tunnelText,
       "Ctrl+V with an image on this machine's clipboard sends the image to the session and pastes its path; codex and claude read it. Needs wl-paste on Wayland, xclip on X11, nothing extra on macOS.",
@@ -1998,6 +2016,7 @@ var COMMANDS = [
     synopsis: ["[--all] [--project <p>] [--json | --json=v2]"],
     description: [
       "One line per session: harness, worktree, status, and what the review found. Live sessions by default.",
+      "Under a live session, a line each when there is something to say about its workspace: who else is live in it (Shared workspace with Anna), the waiting line while a turn waits for another person's work, and the line of a workspace that started before Mend 0.36 and waits to be replaced. The change's owner also reads how to replace it, and what would stop.",
       "The JSON is stable for integrations. --json is the v1 flat list; --json=v2 groups sessions by worktree, the same shape mend worktrees prints."
     ],
     options: [
@@ -2036,6 +2055,21 @@ var COMMANDS = [
     ],
     see: ["worktrees", "land", "stop"]
   },
+  {
+    name: "workspace replace",
+    section: "sessions",
+    summary: "replace a workspace that started before Mend 0.36",
+    synopsis: ["<session> [--yes]"],
+    description: [
+      `${REPLACE_WORKSPACE_ACTION}, from a terminal. A workspace that shares one home, as every workspace started before Mend 0.36 does, takes only its launcher's sessions and turns once its worktree runs each person as themselves, until it is replaced. Mend replaces it on its own when nothing would stop; otherwise the change's owner does, here or on the web.`,
+      "It prints what was checked, and when: Mend's records, and the processes in the workspace and its running containers once they have been checked. Then what would stop, one line each: terminal sessions (they end resumable), shells, Services started by hand, processes Mend did not start, running containers and anything that could not be checked. Mend starts the launching session's mend.toml Services again.",
+      "The replacement names what it showed you: when more would stop by the time you answer, the server refuses, nothing is stopped, and its words are printed as they are; run it again to look at the list again. An agent turn in flight is never stopped: the server refuses the same way. The workspace goes once its last save is done.",
+      "A prefix of the session id is enough. mend sessions shows which sessions wait for this."
+    ],
+    options: [{ flag: "--yes", text: "replace without asking; required without a terminal" }],
+    examples: [{ command: "mend workspace replace 3f2a", text: "" }],
+    see: ["sessions", "stop"]
+  },
   {
     name: "projects",
     section: "sessions",
@@ -2572,9 +2606,18 @@ var COMMANDS = [
     name: "session share",
     section: "organization",
     summary: "let everyone who can see a session steer it, or stop",
-    synopsis: ["<session> on|off"],
+    synopsis: ["<session> on|off [--yes]"],
     description: [
-      "The session's owner turns shared control on or off; an organization owner may turn it off. While it is on, anyone who can see the project sends turns, answers approvals and interrupts, using your provider logins and Git access. They can read the terminal; only the owner types in it, opens a shell or starts a Service. Every act is recorded with who did it. A prefix of the session id is enough."
+      "The session's owner turns shared control on or off; an organization owner may turn it off. While it is on, anyone who can see the project sends turns, answers approvals and interrupts. They can read the terminal; only the owner types in it, opens a shell or starts a Service. Every act is recorded with who did it. A prefix of the session id is enough.",
+      "Turning it on asks first, in every worktree, in the words true to it; --yes answers for a script, and is required without a terminal. Turning it off asks nothing.",
+      `In a worktree that runs each person as themselves, it asks: ${sharedControlConfirm(true).body}`,
+      `Otherwise it asks: ${sharedControlConfirm(false).body}`
+    ],
+    options: [
+      {
+        flag: "--yes",
+        text: "turn it on without asking; required without a terminal"
+      }
     ],
     examples: [{ command: "mend session share 3f2a on", text: "" }],
     see: ["sessions"]
@@ -3703,7 +3746,7 @@ var TIMEOUT_MS = 3e3;
 var MARKS = { ok: "\u2713", todo: "\u25CB", failed: "\u2717" };
 var LABEL_WIDTH = 11;
 var day = (at) => at.toISOString().slice(0, 10);
-var formatCheck = (check, paint6 = (_state, mark) => mark) => `${paint6(check.state, MARKS[check.state])} ${check.label.padEnd(LABEL_WIDTH)} ${check.detail}${check.fix === null ? "" : ` \u2192 ${check.fix}`}`;
+var formatCheck = (check, paint7 = (_state, mark) => mark) => `${paint7(check.state, MARKS[check.state])} ${check.label.padEnd(LABEL_WIDTH)} ${check.detail}${check.fix === null ? "" : ` \u2192 ${check.fix}`}`;
 var getJson = async (config, route) => {
   try {
     const response = await fetch(`${config.url}/api${route}`, {
@@ -4103,7 +4146,7 @@ var dotfilesRepositoryFacts = (repository) => [
 ].join(" \xB7 ");
 
 // src/env.ts
-var formatLoadReport = (report, paint6) => {
+var formatLoadReport = (report, paint7) => {
   const width = Math.max(
     0,
     ...report.loaded.map((entry) => entry.name.length),
@@ -4112,12 +4155,12 @@ var formatLoadReport = (report, paint6) => {
   const lines = [];
   for (const entry of report.loaded) {
     lines.push(
-      `  ${entry.name.padEnd(width)}  ${entry.lane === "secret" ? "secret" : "configuration"} ${paint6.dim(`\xB7 ${entry.action}${entry.lane === "configuration" ? " \xB7 plaintext" : ""}`)}`
+      `  ${entry.name.padEnd(width)}  ${entry.lane === "secret" ? "secret" : "configuration"} ${paint7.dim(`\xB7 ${entry.action}${entry.lane === "configuration" ? " \xB7 plaintext" : ""}`)}`
     );
   }
   for (const entry of report.rejected) {
     lines.push(
-      `  ${entry.name.padEnd(width)}  ${paint6.warn("rejected")} ${paint6.dim(`\xB7 ${entry.reason}`)}`
+      `  ${entry.name.padEnd(width)}  ${paint7.warn("rejected")} ${paint7.dim(`\xB7 ${entry.reason}`)}`
     );
   }
   return lines;
@@ -4866,7 +4909,7 @@ var contiguousIn = (efforts, scale) => {
   return from >= 0 && efforts.every((effort, index) => scale[from + index] === effort);
 };
 var effortRange = (efforts, scale) => efforts.length === 0 ? "none" : efforts.length <= 2 || !contiguousIn(efforts, scale) ? efforts.join(", ") : `${efforts[0]} \u2026 ${efforts.at(-1)}`;
-var modelCatalogLines = (catalogs, dim7 = (text) => text) => {
+var modelCatalogLines = (catalogs, dim8 = (text) => text) => {
   if (catalogs.length === 0)
     return ["no models listed \xB7 the server's harness_models table is empty"];
   const lines = [];
@@ -4874,7 +4917,7 @@ var modelCatalogLines = (catalogs, dim7 = (text) => text) => {
     if (index > 0) lines.push("");
     const efforts = effortRange(catalog.efforts, catalog.efforts);
     lines.push(
-      `${catalog.harness}  ${dim7(`effort ${efforts}${catalog.fastCapable ? " \xB7 --fast" : ""}`)}`
+      `${catalog.harness}  ${dim8(`effort ${efforts}${catalog.fastCapable ? " \xB7 --fast" : ""}`)}`
     );
     const idWidth = Math.max(...catalog.models.map((model) => model.id.length));
     for (const model of catalog.models) {
@@ -4884,10 +4927,10 @@ var modelCatalogLines = (catalogs, dim7 = (text) => text) => {
         facts.push(`effort ${effortRange(model.efforts, catalog.efforts)}`);
       }
       lines.push(
-        `  ${model.id.padEnd(idWidth)}  ${model.label}${facts.length === 0 ? "" : `  ${dim7(facts.join(" \xB7 "))}`}`
+        `  ${model.id.padEnd(idWidth)}  ${model.label}${facts.length === 0 ? "" : `  ${dim8(facts.join(" \xB7 "))}`}`
       );
     }
-    if (catalog.models.length === 0) lines.push(`  ${dim7("no models listed \xB7 the harness picks")}`);
+    if (catalog.models.length === 0) lines.push(`  ${dim8("no models listed \xB7 the harness picks")}`);
   }
   return lines;
 };
@@ -5058,10 +5101,13 @@ var folderCommand = async (api2, args) => {
       return fail4(`unknown folder command "${verb}" \xB7 mend help folder`);
   }
 };
-var sessionShareCommand = async (api2, args) => {
-  const [prefix, state] = args.filter((arg) => !arg.startsWith("--"));
+var sessionShareCommand = async (api2, args, io = {
+  interactive: process.stdin.isTTY === true && process.stdout.isTTY === true,
+  ask: askYesNo
+}) => {
+  const [prefix, state] = args.filter((arg) => !arg.startsWith("-"));
   if (prefix === void 0 || state !== "on" && state !== "off") {
-    return fail4("usage: mend session share <session> on|off");
+    return fail4("usage: mend session share <session> on|off [--yes]");
   }
   const sessions = await api2(
     "GET",
@@ -5073,10 +5119,28 @@ var sessionShareCommand = async (api2, args) => {
     return fail4(`"${prefix}" matches ${matches.length} sessions; type more of the id`);
   const [session] = matches;
   if (session === void 0) return fail4(`no live session starts with "${prefix}"`);
-  await api2("PUT", `/sessions/${session.id}/shared-control`, { enabled: state === "on" });
-  say4(
-    state === "on" ? `${green4("\u2713")} shared control on \xB7 ${session.harness} ${dim4(session.id.slice(0, 8))} \xB7 everyone who can see the project steers it on your credentials` : `${green4("\u2713")} shared control off \xB7 ${session.harness} ${dim4(session.id.slice(0, 8))}`
+  if (state === "off") {
+    await api2("PUT", `/sessions/${session.id}/shared-control`, { enabled: false });
+    say4(`${green4("\u2713")} shared control off \xB7 ${session.harness} ${dim4(session.id.slice(0, 8))}`);
+    return;
+  }
+  const plan = confirmPlan(args, io.interactive);
+  if (plan === "refuse") return fail4("non-interactive \xB7 pass --yes to turn shared control on");
+  const detail = await api2(
+    "GET",
+    `/sessions/${session.id}`
   );
+  const turnsOnSendersLogin = detail.control?.turnsOnSendersLogin === true;
+  if (plan === "ask") {
+    for (const line of sharedControlConfirmLines(turnsOnSendersLogin)) say4(line);
+    if (!await io.ask(sharedControlQuestion(turnsOnSendersLogin))) {
+      say4(dim4("shared control stays off"));
+      return;
+    }
+  }
+  await api2("PUT", `/sessions/${session.id}/shared-control`, { enabled: true });
+  say4(`${green4("\u2713")} shared control on \xB7 ${session.harness} ${dim4(session.id.slice(0, 8))}`);
+  say4(dim4(sharedControlLine(turnsOnSendersLogin)));
 };
 var renderGate = (items) => {
   const width = Math.max(...items.map((item) => item.id.length));
@@ -9689,6 +9753,65 @@ var upgradeUrl = async (input) => {
   return url;
 };
 
+// src/workspace-replace.ts
+var paint5 = (code) => (text) => process.stdout.isTTY === true ? `\x1B[${code}m${text}\x1B[0m` : text;
+var dim6 = paint5("2");
+var green6 = paint5("32");
+var say6 = (line) => process.stdout.write(`${line}
+`);
+var fail6 = (message) => {
+  process.stderr.write(`mend: ${message}
+`);
+  process.exit(1);
+};
+var WORKSPACE_REPLACE_USAGE = "usage: mend workspace replace <session> [--yes]";
+var terminalIo = () => ({
+  interactive: process.stdin.isTTY === true && process.stdout.isTTY === true,
+  ask: askYesNo
+});
+var workspaceCommand = async (api2, tryApi, args, io = terminalIo()) => {
+  const [verb, prefix] = args.filter((arg) => !arg.startsWith("-"));
+  if (verb !== "replace" || prefix === void 0) return fail6(WORKSPACE_REPLACE_USAGE);
+  const sessions = await api2("GET", "/sessions?retained=1");
+  const matches = sessions.filter((session2) => session2.id.startsWith(prefix));
+  if (matches.length > 1) {
+    return fail6(`"${prefix}" matches ${matches.length} sessions; type more of the id`);
+  }
+  const [session] = matches;
+  if (session === void 0) return fail6(`no live session starts with "${prefix}"`);
+  const retirement = await tryApi(
+    "GET",
+    `/sessions/${session.id}/workspace-retirement`
+  ).catch(() => null);
+  if (retirement !== null) {
+    const members = await tryApi(
+      "GET",
+      "/organization/members"
+    ).catch(() => []);
+    say6(
+      dim6(
+        workspaceRetirementLine(
+          retirement,
+          launcherNameOf(retirement.launcher, session.livePeople ?? [], members)
+        )
+      )
+    );
+    for (const line of replaceConfirmLines(retirement)) say6(line);
+    const plan = confirmPlan(args, io.interactive);
+    if (plan === "refuse") return fail6("non-interactive \xB7 pass --yes to replace the workspace");
+    if (plan === "ask" && !await io.ask("replace it?")) {
+      say6(dim6("nothing replaced"));
+      return;
+    }
+  }
+  await api2("POST", `/sessions/${session.id}/workspace-retirement/replace`, {
+    seen: retirement?.fingerprint ?? ""
+  });
+  say6(
+    `${green6("\u2713")} ${workspaceRetirementLine({ state: "retiring", preRelease: retirement?.preRelease ?? true, reason: null }, "")} ${dim6(`\xB7 ${session.harness} ${session.id.slice(0, 8)}`)}`
+  );
+};
+
 // src/worktree-remove.ts
 var parseWorktreesRmArgs = (args) => {
   let name = null;
@@ -9787,7 +9910,7 @@ var loadConfig = () => {
     try {
       fileConfig = JSON.parse(fs20.readFileSync(CONFIG_PATH, "utf8"));
     } catch {
-      fail6(`could not parse ${CONFIG_PATH}`);
+      fail7(`could not parse ${CONFIG_PATH}`);
     }
   }
   const configuredUrl = process.env["MEND_URL"] ?? fileConfig.url ?? null;
@@ -9798,7 +9921,7 @@ var loadConfig = () => {
     deviceId: fileConfig.deviceId ?? null
   };
 };
-var fail6 = (message) => {
+var fail7 = (message) => {
   process.stderr.write(`mend: ${message}
 `);
   process.exit(1);
@@ -9807,18 +9930,18 @@ var parseMendUrl = (value) => {
   try {
     return new URL(value);
   } catch {
-    return fail6(`"${value}" is not a valid Mend URL`);
+    return fail7(`"${value}" is not a valid Mend URL`);
   }
 };
-var paint5 = (code) => (text) => process.stdout.isTTY ? `\x1B[${code}m${text}\x1B[0m` : text;
-var dim6 = paint5("2");
-var green6 = paint5("32");
-var amber2 = paint5("33");
-var cobalt2 = paint5("34");
-var say6 = (line) => process.stdout.write(`${line}
+var paint6 = (code) => (text) => process.stdout.isTTY ? `\x1B[${code}m${text}\x1B[0m` : text;
+var dim7 = paint6("2");
+var green7 = paint6("32");
+var amber2 = paint6("33");
+var cobalt2 = paint6("34");
+var say7 = (line) => process.stdout.write(`${line}
 `);
 var detachKeyEnabled = process.env["MEND_DETACH_KEY"] !== "none";
-var detachHint = () => detachKeyEnabled ? ` \xB7 detach: ${dim6("Ctrl+]")}` : "";
+var detachHint = () => detachKeyEnabled ? ` \xB7 detach: ${dim7("Ctrl+]")}` : "";
 var herdrAgentOf = (harness) => {
   if (harness === "codex" || harness === "claude" || harness === "opencode") return harness;
   return null;
@@ -9886,6 +10009,7 @@ var request = async (config, method, route, body) => {
     }
     throw new MendRequestError("http", message, response.status);
   }
+  if (text === "") return JSON.parse("null");
   try {
     return JSON.parse(text);
   } catch {
@@ -9896,7 +10020,7 @@ var api = async (config, method, route, body) => {
   try {
     return await request(config, method, route, body);
   } catch (error) {
-    return fail6(error instanceof Error ? error.message : String(error));
+    return fail7(error instanceof Error ? error.message : String(error));
   }
 };
 var download = (config) => async (route) => {
@@ -9907,10 +10031,10 @@ var download = (config) => async (route) => {
   try {
     response = await fetch(`${config.url}/api${route}`, { headers });
   } catch (error) {
-    return fail6(noAnswerError(error, config.url, `GET ${route}`, Date.now() - started).message);
+    return fail7(noAnswerError(error, config.url, `GET ${route}`, Date.now() - started).message);
   }
   if (response.status === 401) {
-    return fail6(
+    return fail7(
       config.token === null ? `not signed in to ${config.url} \u2014 run: mend login` : `unauthorized at ${config.url} \u2014 the saved token was rejected; run: mend login`
     );
   }
@@ -9961,7 +10085,7 @@ var withSpinner = async (label, work) => {
     const seconds2 = Math.round((Date.now() - started) / 1e3);
     const text = typeof label === "string" ? label : label();
     process.stdout.write(
-      `\r\x1B[2K  ${frames[frame % frames.length]} ${text} ${dim6(`${seconds2}s`)} `
+      `\r\x1B[2K  ${frames[frame % frames.length]} ${text} ${dim7(`${seconds2}s`)} `
     );
     frame += 1;
   }, 120);
@@ -9990,7 +10114,7 @@ var followStarting = async (config, sessionId, label, start) => {
         read: () => request(config, "GET", `/sessions/${sessionId}`),
         onLine: (next) => {
           line = next === "starting" ? label : next;
-          if (process.stdout.isTTY !== true) say6(dim6(`  ${next}`));
+          if (process.stdout.isTTY !== true) say7(dim7(`  ${next}`));
         },
         sleep: sleep3,
         now: Date.now
@@ -10006,13 +10130,13 @@ var startedOrExit = (config, sessionId, outcome) => {
     case "live":
       return outcome.session;
     case "refused":
-      return fail6(outcome.message);
+      return fail7(outcome.message);
     case "settled":
-      return fail6(
+      return fail7(
         `session ${id8} \xB7 ${startingLineOf(outcome.session)} before its agent ran \xB7 ${config.url}/sessions/${sessionId}`
       );
     case "unreachable":
-      return fail6(
+      return fail7(
         `${outcome.message} \xB7 the session may still be starting \xB7 follow it: mend attach ${id8}`
       );
   }
@@ -10023,7 +10147,7 @@ var adopt = async (config, args) => {
   const name = nameFlag !== -1 && args[nameFlag + 1] !== void 0 ? String(args[nameFlag + 1]) : null;
   const authFlagIndex = args.indexOf("--auth");
   if (args.includes("--private") && args.includes("--shared")) {
-    return fail6("--private and --shared pick one visibility; pass one of them");
+    return fail7("--private and --shared pick one visibility; pass one of them");
   }
   const visibility = args.includes("--shared") ? "shared" : "private";
   const positional = args.filter(
@@ -10031,16 +10155,16 @@ var adopt = async (config, args) => {
   );
   const source = positional[0] ?? gitOriginUrl(process.cwd());
   if (source === null) {
-    return fail6(
+    return fail7(
       "No Git URL was given and this repository has no origin. Run mend adopt <git-url>."
     );
   }
   const sourceIssue = repositoryCloneUrlIssue(source);
-  if (sourceIssue !== null) return fail6(sourceIssue);
+  if (sourceIssue !== null) return fail7(sourceIssue);
   const projectName = name ?? normalizeProjectName(path21.basename(source, ".git"));
   const auth = authFlagIndex !== -1 && args[authFlagIndex + 1] !== void 0 ? String(args[authFlagIndex + 1]) : null;
   if (auth !== null && auth !== "ambient" && auth !== "mend-key" && auth !== "bridge") {
-    return fail6(`--auth takes "ambient", "mend-key", or "bridge", not "${auth}"`);
+    return fail7(`--auth takes "ambient", "mend-key", or "bridge", not "${auth}"`);
   }
   const project2 = await api(config, "POST", "/projects", {
     name: projectName,
@@ -10048,25 +10172,25 @@ var adopt = async (config, args) => {
     visibility,
     ...auth === null ? {} : { gitAuthMode: auth }
   });
-  say6(`${green6("\u2713")} adopted \xB7 ${project2.name} \xB7 ${dim6(project2.storePath)}`);
-  say6(`${dim6("  default branch")} ${project2.defaultBranch}`);
-  say6(
-    `${dim6("  visible to")} ${visibility === "private" ? "only you" : "everyone in the organization"}`
+  say7(`${green7("\u2713")} adopted \xB7 ${project2.name} \xB7 ${dim7(project2.storePath)}`);
+  say7(`${dim7("  default branch")} ${project2.defaultBranch}`);
+  say7(
+    `${dim7("  visible to")} ${visibility === "private" ? "only you" : "everyone in the organization"}`
   );
   if (project2.gitAuthMode === "mend-key") {
-    say6(`${dim6("  git auth")} mend key ${dim6("(your Mend key signed this clone)")}`);
+    say7(`${dim7("  git auth")} mend key ${dim7("(your Mend key signed this clone)")}`);
   } else if (project2.gitAuthMode === "bridge") {
-    say6(`${dim6("  git auth")} bridge ${dim6("(signed through the connected `mend keys share`)")}`);
+    say7(`${dim7("  git auth")} bridge ${dim7("(signed through the connected `mend keys share`)")}`);
   }
-  say6(
-    `${dim6("  sessions start with:")} mend codex ${dim6("(from anywhere \u2014")} --project ${project2.name}${dim6(")")}`
+  say7(
+    `${dim7("  sessions start with:")} mend codex ${dim7("(from anywhere \u2014")} --project ${project2.name}${dim7(")")}`
   );
   const repoRoot = positional[0] === void 0 ? cwdFacts(process.cwd()).repoRoot : null;
   const memory = repoRoot === null ? null : claudeMemoryDirFor(repoRoot);
   if (memory !== null) {
     const count = scanClaudeMemory(memory).files.length;
-    say6(
-      `${dim6("  claude memory")} ${count} file${count === 1 ? "" : "s"} on this machine ${dim6("\u2192 mend memory import")}`
+    say7(
+      `${dim7("  claude memory")} ${count} file${count === 1 ? "" : "s"} on this machine ${dim7("\u2192 mend memory import")}`
     );
   }
 };
@@ -10074,30 +10198,30 @@ var findProject = async (config, explicit, adoptCwd = false) => {
   const projects = await api(config, "GET", "/projects");
   if (explicit !== null) {
     const named = projects.find((p) => p.name === explicit);
-    if (named === void 0) return fail6(`no adopted project named "${explicit}"`);
+    if (named === void 0) return fail7(`no adopted project named "${explicit}"`);
     return named;
   }
   const cwd = process.cwd();
   const project2 = matchProjectByCwd(projects, cwdFacts(cwd));
   if (project2 !== void 0) return project2;
   if (!adoptCwd) {
-    return fail6(
+    return fail7(
       `no adopted project matches ${cwd} \u2014 run "mend adopt" here first, or name one with --project`
     );
   }
   const facts = cwdFacts(cwd);
   if (facts.repoRoot === null || facts.originUrl === null) {
-    return fail6(
+    return fail7(
       `${cwd} does not match an adopted project with a Git origin \u2014 run "mend adopt <git-url>" first`
     );
   }
   const sourceIssue = repositoryCloneUrlIssue(facts.originUrl);
-  if (sourceIssue !== null) return fail6(sourceIssue);
+  if (sourceIssue !== null) return fail7(sourceIssue);
   const adopted = await api(config, "POST", "/projects", {
     name: normalizeProjectName(path21.basename(facts.repoRoot)),
     source: facts.originUrl
   });
-  say6(`${green6("\u2713")} adopted \xB7 ${adopted.name} \xB7 ${dim6(adopted.storePath)}`);
+  say7(`${green7("\u2713")} adopted \xB7 ${adopted.name} \xB7 ${dim7(adopted.storePath)}`);
   return adopted;
 };
 var resolvedBackgroundSessions = async (config, project2) => {
@@ -10124,48 +10248,96 @@ var askWorktreeName = async () => {
   const readline = await import("node:readline/promises");
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
   try {
-    const answer = (await rl.question(`  worktree name ${dim6("(enter for auto)")}: `)).trim();
+    const answer = (await rl.question(`  worktree name ${dim7("(enter for auto)")}: `)).trim();
     return answer === "" ? null : normalizeProjectName(answer);
   } finally {
     rl.close();
   }
 };
+var viewerIdOf = (config) => request(config, "GET", "/organization").then(
+  (view) => view.userId,
+  () => null
+);
+var workspaceLinesOf = async (config, sessions) => {
+  const live = sessions.filter((session) => LIVE_STATUSES.has(session.status));
+  if (!hasPersonFacts(live)) return /* @__PURE__ */ new Map();
+  const viewerRead = live.some((session) => (session.livePeople ?? []).length > 0) ? viewerIdOf(config) : Promise.resolve(null);
+  const facts = await Promise.all(
+    live.map(async (session) => {
+      const reads = workspaceReadsOf(session);
+      const [wait, retirement] = await Promise.all([
+        reads.waiting ? request(
+          config,
+          "GET",
+          `/sessions/${session.id}/waiting`
+        ).catch(() => null) : null,
+        reads.retirement ? request(
+          config,
+          "GET",
+          `/sessions/${session.id}/workspace-retirement`
+        ).catch(() => null) : null
+      ]);
+      return { session, wait, retirement };
+    })
+  );
+  const viewer = await viewerRead;
+  const members = facts.some((fact) => fact.retirement !== null) ? await request(config, "GET", "/organization/members").catch(
+    () => []
+  ) : [];
+  return new Map(
+    facts.map(({ session, wait, retirement }) => [
+      session.id,
+      workspaceLineList(
+        sessionWorkspaceLines({
+          sessionId: session.id,
+          livePeople: session.livePeople ?? [],
+          viewer,
+          wait,
+          retirement,
+          members
+        })
+      )
+    ])
+  );
+};
 var launch = async (config, harness, args) => {
   const parsed = parseLaunchArgs(args);
-  if (parsed.error !== null) return fail6(parsed.error);
+  if (parsed.error !== null) return fail7(parsed.error);
   const structured = parsed.prompt !== null || parsed.model !== null || parsed.effort !== null || parsed.ask || parsed.fast;
   if (harness === "run" && structured) {
-    return fail6(`mend run takes no prompt or harness flags \xB7 ${usageOf("run")}`);
+    return fail7(`mend run takes no prompt or harness flags \xB7 ${usageOf("run")}`);
   }
   if (harness === "run" && parsed.autoLand !== null) {
-    return fail6(
+    return fail7(
       "mend run takes no landing flags \u2014 a command has no turns to land after; land it with mend land"
     );
   }
   if (harness === "run" && (parsed.detach || parsed.foreground)) {
-    return fail6(
+    return fail7(
       "mend run takes no lifecycle flags \u2014 it tails the record; Ctrl+C stops watching, not the command"
     );
   }
   const argv = harness === "run" ? parsed.custom : HARNESS_COMMANDS[harness] ?? [];
   if (argv.length === 0) {
-    return fail6(harness === "run" ? usageOf("run") : `unknown harness ${harness}`);
+    return fail7(harness === "run" ? usageOf("run") : `unknown harness ${harness}`);
   }
   const project2 = await findProject(config, parsed.project, true);
-  say6(
-    `${green6("\u2713")} project ${project2.name} ${dim6(`\xB7 ${project2.defaultBranch}${parsed.project === null ? " \xB7 from cwd" : ""}`)}`
+  say7(
+    `${green7("\u2713")} project ${project2.name} ${dim7(`\xB7 ${project2.defaultBranch}${parsed.project === null ? " \xB7 from cwd" : ""}`)}`
   );
   let worktreeName;
+  let projectView = null;
   if (parsed.worktree !== null) {
     const detail = await api(config, "GET", `/projects/${project2.id}`);
+    projectView = detail;
     const existing = detail.worktrees ?? [];
     if (detail.worktrees === void 0) {
-      return fail6("this server predates shared worktrees \u2014 use --name instead");
+      return fail7("this server predates shared worktrees \u2014 use --name instead");
     }
     const match = existing.find((worktree) => worktree.name === parsed.worktree) ?? (existing.filter((worktree) => worktree.name.startsWith(parsed.worktree ?? "")).length === 1 ? existing.find((worktree) => worktree.name.startsWith(parsed.worktree ?? "")) : void 0);
     if (match === void 0) {
       const names = existing.map((worktree) => worktree.name).join(", ");
-      return fail6(
+      return fail7(
         `no worktree matches "${parsed.worktree}" in ${project2.name}${names === "" ? "" : ` \u2014 have: ${names}`}`
       );
     }
@@ -10174,17 +10346,19 @@ var launch = async (config, harness, args) => {
     worktreeName = harness === "run" ? parsed.name : parsed.name ?? await askWorktreeName();
   }
   if (worktreeName !== null) {
-    const detail = await api(config, "GET", `/projects/${project2.id}`).catch(
-      () => null
-    );
+    const detail = projectView ?? await api(config, "GET", `/projects/${project2.id}`).catch(() => null);
     const joined = detail?.worktrees?.find((worktree) => worktree.name === worktreeName);
     if (joined !== void 0) {
       const members = (detail?.sessions ?? []).filter(
         (candidate) => candidate.worktreeId === joined.id
       ).length;
-      say6(
-        `${green6("\u2713")} joins worktree ${joined.name} ${dim6(`\xB7 ${members} session${members === 1 ? "" : "s"} \xB7 branch ${joined.branch}`)}`
+      say7(
+        `${green7("\u2713")} joins worktree ${joined.name} ${dim7(`\xB7 ${members} session${members === 1 ? "" : "s"} \xB7 branch ${joined.branch}`)}`
       );
+      const rows = detail?.sessions ?? [];
+      const viewer = worktreeListsPeople(rows, joined.id) ? await viewerIdOf(config) : null;
+      const joinLine = worktreeJoinLine(rows, joined.id, viewer);
+      if (joinLine !== null) say7(`${amber2("\xB7")} ${joinLine}`);
     }
   }
   const lifecycle = harness === "run" ? "background" : parsed.detach ? "detach" : parsed.foreground ? "foreground" : await resolvedBackgroundSessions(config, project2) ? "background" : "foreground";
@@ -10209,14 +10383,14 @@ var launch = async (config, harness, args) => {
     ...parsed.autoLand === null ? {} : { autoLand: parsed.autoLand }
   });
   createdSessionId = session.id;
-  say6(`${green6("\u2713")} worktree ${session.worktree} ${dim6(`\xB7 branch ${session.branch}`)}`);
+  say7(`${green7("\u2713")} worktree ${session.worktree} ${dim7(`\xB7 branch ${session.branch}`)}`);
   const landing = autoLandLine(parsed.autoLand, project2);
-  if (landing !== null) say6(landing);
+  if (landing !== null) say7(landing);
   const baseWord = session.baseRef === null ? "" : `${session.baseRef} `;
-  say6(
-    `${green6("\u2713")} base ${baseWord}${dim6(session.baseSha.slice(0, 12))} \xB7 session ${dim6(session.id.slice(0, 8))}`
+  say7(
+    `${green7("\u2713")} base ${baseWord}${dim7(session.baseSha.slice(0, 12))} \xB7 session ${dim7(session.id.slice(0, 8))}`
   );
-  say6(`${cobalt2("  watch")} \xB7 ${config.url}/sessions/${session.id}`);
+  say7(`${cobalt2("  watch")} \xB7 ${config.url}/sessions/${session.id}`);
   if (harness === "run") {
     return supervisedRun(config, session, argv);
   }
@@ -10234,14 +10408,14 @@ var launch = async (config, harness, args) => {
     request(config, "POST", `/sessions/${session.id}/launch`, launchBody)
   );
   if (lifecycle === "detach") {
-    say6(`${green6("\u2713 recording")} \xB7 running detached`);
-    say6(`${cobalt2("  attach")} \xB7 mend attach ${session.id.slice(0, 8)}`);
+    say7(`${green7("\u2713 recording")} \xB7 running detached`);
+    say7(`${cobalt2("  attach")} \xB7 mend attach ${session.id.slice(0, 8)}`);
     return;
   }
-  say6(`${green6("\u2713 recording")} \xB7 workspace mounts the worktree${detachHint()}`);
+  say7(`${green7("\u2713 recording")} \xB7 workspace mounts the worktree${detachHint()}`);
   const tunnels = attachTunnels(config, parsed.noTunnel);
   await tunnels?.start(session.id);
-  say6("");
+  say7("");
   attachOwnsSignals = true;
   await attachOrExit(config, session.id, session.harness, lifecycle, tunnels);
   exitAfterSessionEnd(config, session.id);
@@ -10251,7 +10425,7 @@ var autoLandLine = (override, project2) => {
   if (override && project2.autoLand === "off") {
     return `${amber2("\xB7")} automatic landing \xB7 off for ${project2.name} \xB7 the project's setting wins over --land`;
   }
-  return `${green6("\u2713")} automatic landing \xB7 ${override ? "on" : "off"} for this session ${dim6("\xB7 from this terminal, land with mend land")}`;
+  return `${green7("\u2713")} automatic landing \xB7 ${override ? "on" : "off"} for this session ${dim7("\xB7 from this terminal, land with mend land")}`;
 };
 var ATTACH_CONNECT_TIMEOUT_MS = (() => {
   const configured = Number(process.env["MEND_ATTACH_TIMEOUT_MS"]);
@@ -10448,8 +10622,8 @@ var attachTty = async (config, sessionId, harness, from, processId, options) =>
       watching = true;
       const members = await request(config, "GET", "/organization/members").catch(() => []);
       process.stdout.write(
-        `\r\x1B[2K${dim6(watchNotice(ownerNameOf(detail?.session.ownerUserId, members)))}\r
-${dim6(`read-only \xB7 ${detachKeyEnabled ? "Ctrl+] or " : ""}Ctrl+C detaches`)}\r
+        `\r\x1B[2K${dim7(watchNotice(ownerNameOf(detail?.session.ownerUserId, members)))}\r
+${dim7(`read-only \xB7 ${detachKeyEnabled ? "Ctrl+] or " : ""}Ctrl+C detaches`)}\r
 \r
 `
       );
@@ -10522,51 +10696,51 @@ var stopSessionQuickly = async (config, sessionId) => {
 var stopAndExit = async (config, sessionId) => {
   const id8 = sessionId.slice(0, 8);
   if (await stopSessionQuickly(config, sessionId)) {
-    say6(`${green6("\u2713")} stopped \xB7 ${id8}`);
-    say6(`${cobalt2("  review")} \xB7 ${config.url}/sessions/${sessionId}`);
+    say7(`${green7("\u2713")} stopped \xB7 ${id8}`);
+    say7(`${cobalt2("  review")} \xB7 ${config.url}/sessions/${sessionId}`);
     process.exit(0);
   }
-  say6(`${amber2("could not stop")} \u2014 the session may still run \xB7 mend stop ${id8}`);
+  say7(`${amber2("could not stop")} \u2014 the session may still run \xB7 mend stop ${id8}`);
   process.exit(1);
 };
 var noAnswerLine = (config, id8) => `${amber2("no answer")} \u2014 ${config.url} did not open the terminal within ${spoken(ATTACH_CONNECT_TIMEOUT_MS)}; the session keeps running \xB7 try again: mend attach ${id8} \xB7 check the server: mend doctor`;
 var finishAttach = async (config, sessionId, outcome, mode = "background") => {
   const id8 = sessionId.slice(0, 8);
   if (outcome === "unavailable") {
-    return fail6(`tty attach unavailable: could not connect to ${config.url}`);
+    return fail7(`tty attach unavailable: could not connect to ${config.url}`);
   }
   if (outcome === "no-answer") {
-    say6("");
-    say6(noAnswerLine(config, id8));
+    say7("");
+    say7(noAnswerLine(config, id8));
     if (mode === "foreground") return stopAndExit(config, sessionId);
     process.exit(1);
   }
   if (outcome === "detached") {
-    say6("");
-    say6(`${amber2("detached")} \u2014 the session keeps running; reattach: mend attach ${id8}`);
+    say7("");
+    say7(`${amber2("detached")} \u2014 the session keeps running; reattach: mend attach ${id8}`);
     process.exit(0);
   }
   if (outcome === "interrupted") {
-    say6("");
+    say7("");
     if (mode === "foreground") return stopAndExit(config, sessionId);
-    say6(`${amber2("detached")} \u2014 the session keeps running; reattach: mend attach ${id8}`);
+    say7(`${amber2("detached")} \u2014 the session keeps running; reattach: mend attach ${id8}`);
     process.exit(0);
   }
   if (outcome === "dropped") {
-    say6("");
+    say7("");
     if (mode === "foreground") {
       let live;
       try {
         const detail = await request(config, "GET", `/sessions/${sessionId}`);
         live = agentIsLive(detail.session, detail.currentAgent);
       } catch {
-        say6(`${amber2("could not stop")} \u2014 the session may still run \xB7 mend stop ${id8}`);
+        say7(`${amber2("could not stop")} \u2014 the session may still run \xB7 mend stop ${id8}`);
         process.exit(1);
       }
       if (!live) return;
       return stopAndExit(config, sessionId);
     }
-    say6(`${amber2("disconnected")} \u2014 the session keeps running; reattach: mend attach ${id8}`);
+    say7(`${amber2("disconnected")} \u2014 the session keeps running; reattach: mend attach ${id8}`);
     process.exit(0);
   }
 };
@@ -10581,9 +10755,9 @@ var attachOrExit = async (config, sessionId, harness, mode = "background", tunne
 );
 var attachWithTunnels = (tunnels, work) => tunnels === null ? work() : tunnels.attached(work);
 var exitAfterSessionEnd = (config, sessionId) => {
-  say6("");
-  say6(`${green6("\u2713")} session ended`);
-  say6(`${cobalt2("  review")} \xB7 ${config.url}/sessions/${sessionId}`);
+  say7("");
+  say7(`${green7("\u2713")} session ended`);
+  say7(`${cobalt2("  review")} \xB7 ${config.url}/sessions/${sessionId}`);
   process.exit(0);
 };
 var attach = async (config, args) => {
@@ -10595,18 +10769,18 @@ var attach = async (config, args) => {
   }
   const sessions = await api(config, "GET", "/sessions");
   const match = sessions.find((s) => s.id.startsWith(prefix));
-  if (match === void 0) return fail6(`no active session matches "${prefix}"`);
+  if (match === void 0) return fail7(`no active session matches "${prefix}"`);
   return attachPicked(config, match, tunnels);
 };
 var attachPicked = async (config, session, tunnels) => {
-  say6(
-    `${green6("\u2713")} attaching to ${sessionDisplayName(session)} \xB7 ${session.harness} ${dim6(session.id.slice(0, 8))}${detachHint()}`
+  say7(
+    `${green7("\u2713")} attaching to ${sessionDisplayName(session)} \xB7 ${session.harness} ${dim7(session.id.slice(0, 8))}${detachHint()}`
   );
   if (session.status === "starting") {
     await startAndFollow(config, session.id, "starting \u2014 attaching once the agent runs\u2026", null);
   }
   await tunnels?.start(session.id);
-  say6("");
+  say7("");
   const outcome = await attachWithTunnels(
     tunnels,
     () => attachTty(config, session.id, session.harness, 0n, void 0, {
@@ -10616,14 +10790,14 @@ var attachPicked = async (config, session, tunnels) => {
   if (outcome === "unavailable") {
     const detail = await api(config, "GET", `/sessions/${session.id}`);
     if (detail.currentAgent?.kind === "agent-protocol" && agentIsLive(detail.session, detail.currentAgent)) {
-      say6(`${amber2("taking over")} from the protocol session`);
+      say7(`${amber2("taking over")} from the protocol session`);
       await startAndFollow(
         config,
         session.id,
         "reopening as a terminal \u2014 same conversation\u2026",
         request(config, "POST", `/sessions/${session.id}/handoff`, { to: "pty" })
       );
-      say6("");
+      say7("");
       await attachOrExit(config, session.id, session.harness, "background", tunnels);
       return exitAfterSessionEnd(config, session.id);
     }
@@ -10648,7 +10822,7 @@ var stopCommand = async (config, args) => {
     return;
   }
   if (!all && prefix === void 0) {
-    return fail6(usageOf("stop"));
+    return fail7(usageOf("stop"));
   }
   const [sessions, projects] = await Promise.all([
     api(config, "GET", "/sessions"),
@@ -10657,21 +10831,21 @@ var stopCommand = async (config, args) => {
   let scoped = sessions;
   if (projectName !== null) {
     const project2 = projects.find((p) => p.name === projectName);
-    if (project2 === void 0) return fail6(`no project named "${projectName}"`);
+    if (project2 === void 0) return fail7(`no project named "${projectName}"`);
     scoped = sessions.filter((s) => s.projectId === project2.id);
   }
   let targets;
   if (all) {
     targets = scoped;
     if (targets.length === 0) {
-      say6("no active sessions");
+      say7("no active sessions");
       return;
     }
   } else {
     const matches = scoped.filter((s) => s.id.startsWith(prefix ?? ""));
-    if (matches.length === 0) return fail6(`no active session matches "${prefix}"`);
+    if (matches.length === 0) return fail7(`no active session matches "${prefix}"`);
     if (matches.length > 1) {
-      return fail6(`session prefix "${prefix}" is ambiguous \u2014 use more of the id`);
+      return fail7(`session prefix "${prefix}" is ambiguous \u2014 use more of the id`);
     }
     targets = matches;
   }
@@ -10680,24 +10854,24 @@ var stopCommand = async (config, args) => {
 var stopSessions = async (config, targets, summarise) => {
   for (const session of targets) {
     await api(config, "POST", `/sessions/${session.id}/stop`);
-    say6(
-      `${green6("\u2713")} stopped \xB7 ${session.harness} \xB7 ${dim6(session.id.slice(0, 8))} \xB7 ${session.branch}`
+    say7(
+      `${green7("\u2713")} stopped \xB7 ${session.harness} \xB7 ${dim7(session.id.slice(0, 8))} \xB7 ${session.branch}`
     );
     const after = await api(config, "GET", `/sessions/${session.id}`).catch(
       () => null
     );
     const hold = after === null ? null : servicesHoldOf(after.session, after.currentAgent, after.liveServices ?? 0);
     if (hold !== null) {
-      say6(`${amber2("  " + hold)} \xB7 mend stop --services ${session.id.slice(0, 8)}`);
+      say7(`${amber2("  " + hold)} \xB7 mend stop --services ${session.id.slice(0, 8)}`);
     }
     const capture = after === null ? null : captureLineOf(after.session);
     if (capture !== null) {
-      say6(`${amber2("  " + capture)} \xB7 the workspace stops once nothing is pending`);
+      say7(`${amber2("  " + capture)} \xB7 the workspace stops once nothing is pending`);
     }
-    say6(`${cobalt2("  review")} \xB7 ${config.url}/sessions/${session.id}`);
+    say7(`${cobalt2("  review")} \xB7 ${config.url}/sessions/${session.id}`);
   }
   if (summarise) {
-    say6(`${green6("\u2713")} stopped ${targets.length} session${targets.length === 1 ? "" : "s"}`);
+    say7(`${green7("\u2713")} stopped ${targets.length} session${targets.length === 1 ? "" : "s"}`);
   }
 };
 var stopServicesOf = async (config, session) => {
@@ -10707,18 +10881,18 @@ var stopServicesOf = async (config, session) => {
     `/sessions/${session.id}/services/stop`
   );
   if (result.stopped === 0) {
-    say6(`no live services \xB7 ${session.harness} \xB7 ${dim6(session.id.slice(0, 8))}`);
+    say7(`no live services \xB7 ${session.harness} \xB7 ${dim7(session.id.slice(0, 8))}`);
     return;
   }
-  say6(
-    `${green6("\u2713")} stopped ${result.stopped} service${result.stopped === 1 ? "" : "s"} \xB7 ${session.harness} \xB7 ${dim6(session.id.slice(0, 8))} \xB7 ${session.branch}`
+  say7(
+    `${green7("\u2713")} stopped ${result.stopped} service${result.stopped === 1 ? "" : "s"} \xB7 ${session.harness} \xB7 ${dim7(session.id.slice(0, 8))} \xB7 ${session.branch}`
   );
 };
 var pickSessionInteractively = async (rows) => {
-  say6(dim6("more than one live session \u2014 pick one:"));
+  say7(dim7("more than one live session \u2014 pick one:"));
   rows.forEach((row, index) => {
-    say6(
-      `  ${index + 1}. ${row.session.harness.padEnd(8)} ${dim6(row.session.id.slice(0, 8))}  ${row.projectName}  ${dim6(row.session.branch)}  ${dim6(row.session.status)}`
+    say7(
+      `  ${index + 1}. ${row.session.harness.padEnd(8)} ${dim7(row.session.id.slice(0, 8))}  ${row.projectName}  ${dim7(row.session.branch)}  ${dim7(row.session.status)}`
     );
   });
   const readline = await import("node:readline/promises");
@@ -10726,17 +10900,17 @@ var pickSessionInteractively = async (rows) => {
   const answer = await rl.question("  session #: ");
   rl.close();
   const chosen = rows[Number(answer.trim()) - 1];
-  if (chosen === void 0) return fail6(`"${answer.trim()}" is not one of the choices`);
+  if (chosen === void 0) return fail7(`"${answer.trim()}" is not one of the choices`);
   return chosen.session;
 };
 var resolveLiveSession = async (config, prefix, command) => {
   const sessions = await api(config, "GET", "/sessions?retained=1");
   if (prefix !== void 0) {
     const matches = sessions.filter((s) => s.id.startsWith(prefix));
-    if (matches.length === 0) return fail6(`no live or retained session matches "${prefix}"`);
+    if (matches.length === 0) return fail7(`no live or retained session matches "${prefix}"`);
     const exact = matches[0];
     if (matches.length > 1 || exact === void 0) {
-      return fail6(`session prefix "${prefix}" is ambiguous \u2014 use more of the id`);
+      return fail7(`session prefix "${prefix}" is ambiguous \u2014 use more of the id`);
     }
     return exact;
   }
@@ -10745,11 +10919,11 @@ var resolveLiveSession = async (config, prefix, command) => {
   const candidates = project2 === void 0 ? sessions : sessions.filter((s) => s.projectId === project2.id);
   const only = candidates[0];
   if (only === void 0) {
-    return fail6("no live or retained session \u2014 start one with mend codex|claude|opencode|pi");
+    return fail7("no live or retained session \u2014 start one with mend codex|claude|opencode|pi");
   }
   if (candidates.length === 1) return only;
   if (process.stdin.isTTY !== true) {
-    return fail6(`several live sessions \u2014 name one: mend ${command} <session-id-prefix>`);
+    return fail7(`several live sessions \u2014 name one: mend ${command} <session-id-prefix>`);
   }
   const nameById = new Map(projects.map((p) => [p.id, p.name]));
   return pickSessionInteractively(
@@ -10762,30 +10936,30 @@ var resolveLiveSession = async (config, prefix, command) => {
 var shellCommand = async (config, args) => {
   const prefix = args.find((a) => !a.startsWith("--"));
   const session = await resolveLiveSession(config, prefix, "shell");
-  say6(
-    `${green6("\u2713")} shell in ${session.harness} session ${dim6(session.id.slice(0, 8))} \xB7 ${dim6(session.branch)}${detachHint()}`
+  say7(
+    `${green7("\u2713")} shell in ${session.harness} session ${dim7(session.id.slice(0, 8))} \xB7 ${dim7(session.branch)}${detachHint()}`
   );
   const shellProcess = await withSpinner(
     "opening a shell in the session workspace\u2026",
     api(config, "POST", `/sessions/${session.id}/shell`)
   );
-  say6("");
+  say7("");
   const outcome = await attachTty(config, session.id, "shell", 0n, shellProcess.id, {
     handleSignals: true
   });
   if (outcome === "unavailable") {
-    return fail6(`tty attach unavailable: could not connect to ${config.url}`);
+    return fail7(`tty attach unavailable: could not connect to ${config.url}`);
   }
-  say6("");
+  say7("");
   if (outcome === "no-answer") {
-    say6(noAnswerLine(config, session.id.slice(0, 8)));
+    say7(noAnswerLine(config, session.id.slice(0, 8)));
     process.exit(1);
   }
   if (outcome === "detached" || outcome === "interrupted" || outcome === "dropped") {
-    say6(`${amber2("detached")} \u2014 the shell keeps running and holds the workspace open`);
+    say7(`${amber2("detached")} \u2014 the shell keeps running and holds the workspace open`);
     process.exit(0);
   }
-  say6(`${green6("\u2713")} shell ended`);
+  say7(`${green7("\u2713")} shell ended`);
   process.exit(0);
 };
 var flattenService = (view) => {
@@ -10827,30 +11001,30 @@ var serviceUrl = (service) => service.browserUrl ?? (service.authority === null
 var printServiceAccess = (config, service, tunneling = false) => {
   const gate = "no Mend sign-in on this port \u2014 network reach is the only gate";
   if (serverIsLocal(config)) {
-    if (service.authority !== null) say6(`  ${cobalt2(serviceUrl(service))}  ${dim6(gate)}`);
+    if (service.authority !== null) say7(`  ${cobalt2(serviceUrl(service))}  ${dim7(gate)}`);
     return;
   }
   if (service.protocol === "udp") {
     if (service.authority !== null) {
-      say6(`  ${cobalt2(serviceUrl(service))} ${dim6(`on the server's network \xB7 ${gate}`)}`);
+      say7(`  ${cobalt2(serviceUrl(service))} ${dim7(`on the server's network \xB7 ${gate}`)}`);
     }
     return;
   }
   if (!tunneling) {
     const local = service.hostPort ?? service.workspacePort;
-    say6(
-      `  ${cobalt2(`mend service connect ${service.label}`)} ${dim6(`\u2192 127.0.0.1:${local} on this machine, authenticated as you`)}`
+    say7(
+      `  ${cobalt2(`mend service connect ${service.label}`)} ${dim7(`\u2192 127.0.0.1:${local} on this machine, authenticated as you`)}`
     );
   }
   if (service.authority !== null) {
-    say6(`  ${dim6(`server-side listener ${service.authority} \xB7 ${gate}`)}`);
+    say7(`  ${dim7(`server-side listener ${service.authority} \xB7 ${gate}`)}`);
   }
 };
 var printWorkspaceTtlFailure = (service) => {
   if (service.workspaceTtlRenewalError === null) return;
-  say6(amber2(`  workspace TTL renewal failed \xB7 ${service.workspaceTtlRenewalError}`));
-  say6(
-    dim6(
+  say7(amber2(`  workspace TTL renewal failed \xB7 ${service.workspaceTtlRenewalError}`));
+  say7(
+    dim7(
       `  last renewed ${service.workspaceTtlRenewedAt ?? "unknown"} \xB7 known expiry ${service.workspaceExpiresAt ?? "unknown"} \xB7 failed ${service.workspaceTtlRenewalFailedAt ?? "unknown"}`
     )
   );
@@ -10860,11 +11034,11 @@ var printServiceEndpoint = (config, service, tunneling = false) => {
   printWorkspaceTtlFailure(service);
 };
 var printService = (config, service) => {
-  const status = service.status === "reachable" ? green6(service.status) : amber2(service.status);
+  const status = service.status === "reachable" ? green7(service.status) : amber2(service.status);
   const port = `:${service.workspacePort ?? "?"}${service.protocol === "udp" ? "/udp" : ""}`;
   const statusPad = " ".repeat(Math.max(1, 12 - service.status.length));
-  say6(
-    `${(service.label ?? service.id.slice(0, 8)).padEnd(14)} ${status}${statusPad}${dim6(port.padEnd(7))} ${dim6(service.id.slice(0, 8))}`
+  say7(
+    `${(service.label ?? service.id.slice(0, 8)).padEnd(14)} ${status}${statusPad}${dim7(port.padEnd(7))} ${dim7(service.id.slice(0, 8))}`
   );
   printServiceAccess(config, service);
   printWorkspaceTtlFailure(service);
@@ -10875,21 +11049,21 @@ var serviceAdd = async (config, args) => {
   const protocol = args.includes("--udp") ? "udp" : "tcp";
   const http = args.includes("--http");
   const https = args.includes("--https");
-  if (http && https) return fail6("Choose either --http or --https, not both.");
+  if (http && https) return fail7("Choose either --http or --https, not both.");
   const browserScheme = https ? "https" : http ? "http" : null;
   if (protocol === "udp" && browserScheme !== null) {
-    return fail6("UDP Services cannot use --http or --https");
+    return fail7("UDP Services cannot use --http or --https");
   }
   const positional = args.filter(
     (a, i) => !a.startsWith("--") && (nameFlag === -1 || i !== nameFlag + 1)
   );
   const portRaw = positional.find((a) => /^\d+$/.test(a));
   if (portRaw === void 0) {
-    return fail6(usageOf("service add"));
+    return fail7(usageOf("service add"));
   }
   const port = Number(portRaw);
   if (!Number.isInteger(port) || port < 1 || port > 65535) {
-    return fail6(`"${portRaw}" is not a port`);
+    return fail7(`"${portRaw}" is not a port`);
   }
   const prefix = positional.find((a) => a !== portRaw);
   const session = await resolveLiveSession(config, prefix, "service add");
@@ -10899,52 +11073,52 @@ var serviceAdd = async (config, args) => {
     protocol,
     browserScheme
   });
-  say6(`${green6("\u2713")} Service ${service.label ?? ""} \xB7 ${service.status}`);
+  say7(`${green7("\u2713")} Service ${service.label ?? ""} \xB7 ${service.status}`);
   printServiceEndpoint(config, service);
   if (protocol === "udp") {
-    say6(dim6(`  udp \u2014 a reply is the only reachability signal; silence just relays`));
+    say7(dim7(`  udp \u2014 a reply is the only reachability signal; silence just relays`));
   } else if (service.status !== "reachable") {
-    say6(dim6(`  nothing answered on :${port} yet \u2014 the URL goes live when something listens`));
+    say7(dim7(`  nothing answered on :${port} yet \u2014 the URL goes live when something listens`));
   }
 };
 var serviceList = async (config) => {
   const services = await fetchServices(config);
   if (services.length === 0) {
-    say6(dim6("no live services \u2014 mend service add <port> adopts a listening one"));
+    say7(dim7("no live services \u2014 mend service add <port> adopts a listening one"));
     return;
   }
   for (const service of services) printService(config, service);
 };
 var serviceStop = async (config, args) => {
   const needle = args.find((a) => !a.startsWith("--"));
-  if (needle === void 0) return fail6(usageOf("service stop"));
+  if (needle === void 0) return fail7(usageOf("service stop"));
   const services = await fetchServices(config);
   const matches = services.filter(
     (service) => service.label === needle || service.id.startsWith(needle)
   );
-  if (matches.length === 0) return fail6(`no live service matches "${needle}"`);
+  if (matches.length === 0) return fail7(`no live service matches "${needle}"`);
   const match = matches[0];
   if (matches.length > 1 || match === void 0) {
-    return fail6(`"${needle}" is ambiguous \u2014 use more of the id`);
+    return fail7(`"${needle}" is ambiguous \u2014 use more of the id`);
   }
   const stoppedService = await mutateService(config, "POST", `/services/${match.id}/stop`);
-  say6(`${green6("\u2713")} stopped \xB7 ${stoppedService.label ?? stoppedService.id.slice(0, 8)}`);
+  say7(`${green7("\u2713")} stopped \xB7 ${stoppedService.label ?? stoppedService.id.slice(0, 8)}`);
 };
 var findLiveService = async (config, needle) => {
   const services = await fetchServices(config);
   const matches = services.filter(
     (service) => service.label === needle || service.id.startsWith(needle)
   );
-  if (matches.length === 0) return fail6(`no live service matches "${needle}"`);
+  if (matches.length === 0) return fail7(`no live service matches "${needle}"`);
   const match = matches[0];
   if (matches.length > 1 || match === void 0) {
-    return fail6(`"${needle}" is ambiguous \u2014 use more of the id`);
+    return fail7(`"${needle}" is ambiguous \u2014 use more of the id`);
   }
   return match;
 };
 var willAutoConnect = (config, service, optOut) => !optOut && !serverIsLocal(config) && service.protocol !== "udp";
 var autoConnect = async (config, service) => {
-  say6(dim6("  remote server \u2014 tunneling the port here \xB7 Ctrl-C stops the tunnel, not the Service"));
+  say7(dim7("  remote server \u2014 tunneling the port here \xB7 Ctrl-C stops the tunnel, not the Service"));
   await tunnelServices(config, [service], null);
 };
 var serviceRun = async (config, args) => {
@@ -10953,7 +11127,7 @@ var serviceRun = async (config, args) => {
   if (dashdash === -1) {
     const positionals = args.filter((a) => !a.startsWith("--"));
     const name2 = positionals.at(-1);
-    if (name2 === void 0) return fail6(usage2);
+    if (name2 === void 0) return fail7(usage2);
     const prefix2 = positionals.length > 1 ? positionals[0] : void 0;
     const session2 = await resolveLiveSession(config, prefix2, "service run");
     const recipes = await api(
@@ -10964,7 +11138,7 @@ var serviceRun = async (config, args) => {
     const recipe = recipes.find((entry) => entry.name === name2);
     if (recipe === void 0) {
       const known = recipes.map((entry) => entry.name).join(", ");
-      return fail6(
+      return fail7(
         recipes.length === 0 ? `no mend.toml recipes in this worktree \u2014 declare [service.${name2}] first` : `no recipe named "${name2}" \u2014 declared: ${known}`
       );
     }
@@ -10975,26 +11149,26 @@ var serviceRun = async (config, args) => {
       })
     );
     const tunneling2 = willAutoConnect(config, service2, args.includes("--no-connect"));
-    say6(`${green6("\u2713")} Service ${service2.label ?? ""} \xB7 ${service2.status}`);
+    say7(`${green7("\u2713")} Service ${service2.label ?? ""} \xB7 ${service2.status}`);
     printServiceEndpoint(config, service2, tunneling2);
-    say6(dim6(`  logs: mend service logs ${service2.label ?? service2.id.slice(0, 8)}`));
+    say7(dim7(`  logs: mend service logs ${service2.label ?? service2.id.slice(0, 8)}`));
     if (tunneling2) await autoConnect(config, service2);
     return;
   }
   const argv = args.slice(dashdash + 1);
-  if (argv.length === 0) return fail6(usage2);
+  if (argv.length === 0) return fail7(usage2);
   const head = args.slice(0, dashdash);
   const portFlag = head.indexOf("--port");
   const port = portFlag === -1 ? Number.NaN : Number(head[portFlag + 1]);
-  if (!Number.isInteger(port) || port < 1 || port > 65535) return fail6(usage2);
+  if (!Number.isInteger(port) || port < 1 || port > 65535) return fail7(usage2);
   const nameFlag = head.indexOf("--name");
   const name = nameFlag !== -1 && head[nameFlag + 1] !== void 0 ? String(head[nameFlag + 1]) : null;
   const protocol = head.includes("--udp") ? "udp" : "tcp";
   const http = head.includes("--http");
   const https = head.includes("--https");
-  if (http && https) return fail6(usage2);
+  if (http && https) return fail7(usage2);
   const browserScheme = https ? "https" : http ? "http" : null;
-  if (protocol === "udp" && browserScheme !== null) return fail6(usage2);
+  if (protocol === "udp" && browserScheme !== null) return fail7(usage2);
   const prefix = head.find(
     (a, i) => !a.startsWith("--") && i !== portFlag + 1 && i !== nameFlag + 1
   );
@@ -11010,9 +11184,9 @@ var serviceRun = async (config, args) => {
     })
   );
   const tunneling = willAutoConnect(config, service, head.includes("--no-connect"));
-  say6(`${green6("\u2713")} Service ${service.label ?? ""} \xB7 ${service.status}`);
+  say7(`${green7("\u2713")} Service ${service.label ?? ""} \xB7 ${service.status}`);
   printServiceEndpoint(config, service, tunneling);
-  say6(dim6(`  logs: mend service logs ${service.label ?? service.id.slice(0, 8)}`));
+  say7(dim7(`  logs: mend service logs ${service.label ?? service.id.slice(0, 8)}`));
   if (tunneling) await autoConnect(config, service);
 };
 var serviceLogs = async (config, args) => {
@@ -11020,32 +11194,32 @@ var serviceLogs = async (config, args) => {
   const from = fromFlag === -1 ? "0" : args[fromFlag + 1];
   const needle = firstPositional(args, ["--from"]);
   if (needle === void 0 || from === void 0 || !/^(0|[1-9]\d*)$/.test(from)) {
-    return fail6(usageOf("service logs"));
+    return fail7(usageOf("service logs"));
   }
   const everything = await fetchServiceViews(config, true);
   const matches = everything.filter(
     (view2) => view2.service.name === needle || view2.service.id.startsWith(needle) || view2.attempts.some((attempt3) => attempt3.id.startsWith(needle))
   );
-  if (matches.length === 0) return fail6(`no service matches "${needle}"`);
+  if (matches.length === 0) return fail7(`no service matches "${needle}"`);
   const view = matches.find((candidate) => {
     const current = candidate.service.currentAttemptId === null ? null : candidate.attempts.find((attempt3) => attempt3.id === candidate.service.currentAttemptId);
     return current !== null && current !== void 0 && current.exitedAt === null;
   }) ?? matches[0];
-  if (view === void 0) return fail6(`no service matches "${needle}"`);
+  if (view === void 0) return fail7(`no service matches "${needle}"`);
   const currentAttempt = view.service.currentAttemptId === null ? null : view.attempts.find((candidate) => candidate.id === view.service.currentAttemptId) ?? null;
   const attempt2 = view.attempts.find((candidate) => candidate.id.startsWith(needle)) ?? currentAttempt ?? view.attempts.findLast((candidate) => candidate.sealantSessionId !== null) ?? null;
   if (attempt2?.sealantSessionId === null || attempt2 === null) {
-    return fail6(
+    return fail7(
       `"${needle}" is an adopted port \u2014 no process of Mend's, no logs. mend service run supervises.`
     );
   }
   const label = view.service.name;
-  say6(
-    dim6(
+  say7(
+    dim7(
       attempt2.exitedAt === null ? `following ${label} from sequence ${from} \u2014 Ctrl+C detaches, the Service keeps running` : `${label} \xB7 ${attempt2.status} \u2014 recorded output from sequence ${from}`
     )
   );
-  say6("");
+  say7("");
   let cursor = from;
   let telemetryReported = false;
   for (; ; ) {
@@ -11055,7 +11229,7 @@ var serviceLogs = async (config, args) => {
       `/processes/${attempt2.id}/logs?from=${encodeURIComponent(cursor)}&limit=256`
     );
     if (!telemetryReported) {
-      say6(dim6(`telemetry loss: ${page.telemetryLoss} \xB7 ${page.telemetryNote}`));
+      say7(dim7(`telemetry loss: ${page.telemetryLoss} \xB7 ${page.telemetryNote}`));
       telemetryReported = true;
     }
     for (const chunk of page.chunks) {
@@ -11067,25 +11241,25 @@ var serviceLogs = async (config, args) => {
     if (ended && !advanced) break;
     if (!advanced) await new Promise((resolve8) => setTimeout(resolve8, 250));
   }
-  say6("");
-  say6(dim6(`stream ended \xB7 next sequence ${cursor}`));
+  say7("");
+  say7(dim7(`stream ended \xB7 next sequence ${cursor}`));
 };
 var serviceRestart = async (config, args) => {
   const needle = args.find((a) => !a.startsWith("--"));
-  if (needle === void 0) return fail6(usageOf("service restart"));
+  if (needle === void 0) return fail7(usageOf("service restart"));
   const service = await findLiveService(config, needle);
   const restarted = await withSpinner(
     `restarting ${service.label ?? service.id.slice(0, 8)}\u2026`,
     mutateService(config, "POST", `/services/${service.id}/restart`)
   );
-  say6(`${green6("\u2713")} restarted \xB7 ${restarted.status}`);
+  say7(`${green7("\u2713")} restarted \xB7 ${restarted.status}`);
   printServiceEndpoint(config, restarted);
 };
 var serviceInit = async (args) => {
   const root = gitTopLevel(process.cwd()) ?? process.cwd();
   const target = path21.join(root, "mend.toml");
   if (fs20.existsSync(target)) {
-    return fail6(`${target} already exists \u2014 edit it directly (init never merges)`);
+    return fail7(`${target} already exists \u2014 edit it directly (init never merges)`);
   }
   const rootFiles = fs20.readdirSync(root);
   const proposals = [];
@@ -11127,30 +11301,30 @@ var serviceInit = async (args) => {
     }
   }
   if (proposals.length === 0) {
-    return fail6(
+    return fail7(
       "nothing to propose \u2014 no server-ish package.json script with a nameable port, no compose ports"
     );
   }
   const toml = renderMendToml(proposals);
-  say6(dim6(`proposed ${target}:`));
-  say6("");
+  say7(dim7(`proposed ${target}:`));
+  say7("");
   process.stdout.write(toml);
-  say6("");
+  say7("");
   if (!args.includes("--yes")) {
     if (process.stdin.isTTY !== true) {
-      return fail6("non-interactive \u2014 pass --yes to write the file");
+      return fail7("non-interactive \u2014 pass --yes to write the file");
     }
     const readline = await import("node:readline/promises");
     const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
     const answer = await rl.question("write it? [y/N] ");
     rl.close();
     if (answer.trim().toLowerCase() !== "y") {
-      say6(dim6("nothing written"));
+      say7(dim7("nothing written"));
       return;
     }
   }
   fs20.writeFileSync(target, toml);
-  say6(`${green6("\u2713")} wrote ${target} \u2014 commit it, then: mend service run ${proposals[0]?.name}`);
+  say7(`${green7("\u2713")} wrote ${target} \u2014 commit it, then: mend service run ${proposals[0]?.name}`);
 };
 var tunnelServices = async (config, services, portOverride) => {
   for (const service of services) {
@@ -11159,15 +11333,15 @@ var tunnelServices = async (config, services, portOverride) => {
       (socket) => pumpConnection(socket, tunnelUrlFor(config, service.id))
     );
     await listenLocal(server, port, false).catch(
-      (error) => fail6(
+      (error) => fail7(
         error.code === "EADDRINUSE" ? `127.0.0.1:${port} is already in use here \u2014 pick one with: mend service connect ${service.label} --port <n>` : error.message
       )
     );
-    say6(
-      `${green6("\u25CF")} ${service.label ?? service.id.slice(0, 8)} \u2192 127.0.0.1:${port} ${dim6(`(tunnel to ${config.url})`)}`
+    say7(
+      `${green7("\u25CF")} ${service.label ?? service.id.slice(0, 8)} \u2192 127.0.0.1:${port} ${dim7(`(tunnel to ${config.url})`)}`
     );
   }
-  say6(dim6("  connections are authenticated as you \xB7 Ctrl-C stops"));
+  say7(dim7("  connections are authenticated as you \xB7 Ctrl-C stops"));
   await new Promise(() => {
   });
 };
@@ -11177,7 +11351,7 @@ var attachTunnels = (config, optOut) => {
   let attached = false;
   const tell = (line) => {
     if (!attached) {
-      say6(line);
+      say7(line);
       return;
     }
     const rows = process.stdout.rows ?? 24;
@@ -11187,9 +11361,9 @@ var attachTunnels = (config, optOut) => {
     listServices: () => fetchServices(config),
     tunnelUrl: (serviceId) => tunnelUrlFor(config, serviceId),
     events: serverEvents(config),
-    onOpen: (tunnel) => tell(`${green6("\u25CF")} ${tunnel.line} ${dim6("\xB7 tunnel, closes on detach")}`),
+    onOpen: (tunnel) => tell(`${green7("\u25CF")} ${tunnel.line} ${dim7("\xB7 tunnel, closes on detach")}`),
     onClose: (tunnel, reason) => {
-      if (reason === "stopped") tell(dim6(`\u25CB ${tunnel.service.label} stopped \xB7 tunnel closed`));
+      if (reason === "stopped") tell(dim7(`\u25CB ${tunnel.service.label} stopped \xB7 tunnel closed`));
     },
     onError: (service, message) => tell(amber2(`${service.label} not tunneled \xB7 ${message}`))
   });
@@ -11213,18 +11387,18 @@ var serviceConnect = async (config, args) => {
   const portFlag = args.indexOf("--port");
   const portOverride = portFlag === -1 ? null : Number(args[portFlag + 1]);
   if (portOverride !== null && !Number.isInteger(portOverride)) {
-    return fail6("--port takes a port number");
+    return fail7("--port takes a port number");
   }
   const names = args.filter((a, i) => !a.startsWith("--") && i !== portFlag + 1);
   const live = (await fetchServices(config)).filter((s) => s.protocol === "tcp");
   const picked = names.length === 0 ? live : live.filter((s) => names.some((n) => s.label === n || s.id.startsWith(n)));
   if (picked.length === 0) {
-    return fail6(
+    return fail7(
       names.length === 0 ? "no live TCP services \u2014 mend service run starts one" : `no live TCP service matches "${names.join('", "')}"`
     );
   }
   if (portOverride !== null && picked.length !== 1) {
-    return fail6("--port applies to exactly one service \u2014 name it");
+    return fail7("--port applies to exactly one service \u2014 name it");
   }
   await tunnelServices(config, picked, portOverride);
 };
@@ -11265,23 +11439,23 @@ var memoryPathOf = (name) => {
 };
 var memoryImport = async (config, args) => {
   const repoRoot = cwdFacts(process.cwd()).repoRoot;
-  if (repoRoot === null) return fail6("run mend memory import inside the repository's checkout");
+  if (repoRoot === null) return fail7("run mend memory import inside the repository's checkout");
   const claudeDir = claudeMemoryDirFor(repoRoot);
   const claude = claudeDir === null ? null : scanClaudeMemory(claudeDir);
   const codex = await scanCodexMemory(repoRoot);
-  for (const note of [...claude?.notes ?? [], ...codex.notes]) say6(dim6(`  ${note}`));
+  for (const note of [...claude?.notes ?? [], ...codex.notes]) say7(dim7(`  ${note}`));
   const files = [...claude?.files ?? [], ...codex.files];
   if (files.length === 0) {
-    return fail6(`neither claude nor codex keeps memory for ${repoRoot} on this machine`);
+    return fail7(`neither claude nor codex keeps memory for ${repoRoot} on this machine`);
   }
   const project2 = await findProject(config, takeFlagValue4(args, "--project"));
   if (claude !== null && claude.files.length > 0) {
-    say6(
+    say7(
       `claude memory \xB7 ${claude.dir} \xB7 ${claude.files.length} file${claude.files.length === 1 ? "" : "s"}`
     );
   }
   if (codex.files.length > 0) {
-    say6(
+    say7(
       `codex memory \xB7 ${codex.home} \xB7 ${codex.summaries} conversation summar${codex.summaries === 1 ? "y" : "ies"} of this repository`
     );
   }
@@ -11296,12 +11470,12 @@ var memoryImport = async (config, args) => {
       source === null ? { files } : { files, source }
     )
   );
-  say6(
-    `${dryRun ? "would import" : green6("imported")} into ${project2.name} \xB7 ${importReportCounts(report)}`
+  say7(
+    `${dryRun ? "would import" : green7("imported")} into ${project2.name} \xB7 ${importReportCounts(report)}`
   );
-  for (const line of importReportLines(report)) say6(dim6(line));
-  say6(
-    dim6(
+  for (const line of importReportLines(report)) say7(dim7(line));
+  say7(
+    dim7(
       dryRun ? "--dry-run: nothing written" : "every version replaced is kept \xB7 sessions in the project receive it from the next launch"
     )
   );
@@ -11316,7 +11490,7 @@ var memoryCommand = async (config, args) => {
     const name = rest.find(
       (arg, index) => !arg.startsWith("--") && rest[index - 1] !== "--project"
     );
-    if (name === void 0) return fail6(usageOf(`memory ${verb}`));
+    if (name === void 0) return fail7(usageOf(`memory ${verb}`));
     const query = `?path=${encodeURIComponent(memoryPathOf(name))}`;
     if (verb === "rm") {
       const removed = await api(
@@ -11324,7 +11498,7 @@ var memoryCommand = async (config, args) => {
         "DELETE",
         `${base}/file${query}`
       );
-      return say6(
+      return say7(
         removed.removed ? `removed ${name} \xB7 kept as a version` : `${name}: not in memory`
       );
     }
@@ -11344,15 +11518,15 @@ var memoryCommand = async (config, args) => {
     base
   );
   if (view.files.length === 0) {
-    say6(
-      `${project2.name}: no agent memory yet ${dim6("\xB7 mend memory import brings this machine's")}`
+    say7(
+      `${project2.name}: no agent memory yet ${dim7("\xB7 mend memory import brings this machine's")}`
     );
     return;
   }
   const width = Math.max(...view.files.map((file) => file.name.length));
   for (const file of view.files) {
-    say6(
-      `${file.harness.padEnd(7)} ${file.name.padEnd(width)}  ${kilobytes(file.bytes).padStart(8)}  ${dim6(
+    say7(
+      `${file.harness.padEnd(7)} ${file.name.padEnd(width)}  ${kilobytes(file.bytes).padStart(8)}  ${dim7(
         `${file.updatedAt.slice(0, 16).replace("T", " ")} \xB7 ${file.updatedBySession === null ? "imported" : `session ${file.updatedBySession.slice(0, 8)}`}`
       )}`
     );
@@ -11362,17 +11536,17 @@ var secretsCommand = async (config, args) => {
   const [verb, ...rest] = args;
   if (verb === "add" || verb === "rm") {
     const given = rest.find((arg, index) => !arg.startsWith("--") && rest[index - 1] !== "--from");
-    if (given === void 0) return fail6(usageOf(`secrets ${verb}`));
+    if (given === void 0) return fail7(usageOf(`secrets ${verb}`));
     const resolved = secretFilePathOf(given, os13.homedir());
-    if (resolved.issue !== null) return fail6(resolved.issue);
+    if (resolved.issue !== null) return fail7(resolved.issue);
     if (verb === "rm") {
       const removed = await api(
         config,
         "DELETE",
         `/me/secret-files?path=${encodeURIComponent(resolved.path)}`
       );
-      return say6(
-        removed.removed ? `removed ~/${resolved.path} ${dim6("\xB7 sessions launched from now on do not receive it")}` : `~/${resolved.path}: not kept`
+      return say7(
+        removed.removed ? `removed ~/${resolved.path} ${dim7("\xB7 sessions launched from now on do not receive it")}` : `~/${resolved.path}: not kept`
       );
     }
     const from = takeFlagValue4(rest, "--from");
@@ -11380,31 +11554,31 @@ var secretsCommand = async (config, args) => {
     try {
       bytes = fs20.readFileSync(from ?? 0);
     } catch (error) {
-      return fail6(
+      return fail7(
         from === null ? `nothing on stdin: pass --from <file> or pipe the content in` : `${from}: ${error instanceof Error ? error.message : String(error)}`
       );
     }
     if (bytes.byteLength === 0)
-      return fail6(from === null ? "nothing on stdin" : `${from} is empty`);
+      return fail7(from === null ? "nothing on stdin" : `${from} is empty`);
     const saved = await api(config, "PUT", "/me/secret-files", secretFileUploadOf(resolved.path, bytes));
-    say6(
-      `${green6(saved.action)} ~/${saved.file.path} \xB7 ${saved.file.bytes} B ${dim6(
+    say7(
+      `${green7(saved.action)} ~/${saved.file.path} \xB7 ${saved.file.bytes} B ${dim7(
         "\xB7 sessions launched from now on receive it"
       )}`
     );
     return;
   }
-  if (verb !== void 0 && verb !== "list") return fail6(usageOf("secrets"));
+  if (verb !== void 0 && verb !== "list") return fail7(usageOf("secrets"));
   const view = await api(
     config,
     "GET",
     "/me/secret-files"
   );
   if (view.files.length === 0) {
-    say6(`no secret files ${dim6("\xB7 mend secrets add <path> --from <file> keeps one")}`);
+    say7(`no secret files ${dim7("\xB7 mend secrets add <path> --from <file> keeps one")}`);
     return;
   }
-  for (const line of secretFileLines(view.files)) say6(line);
+  for (const line of secretFileLines(view.files)) say7(line);
 };
 var isProvider = (value) => value === "claude" || value === "codex" || value === "github";
 var readIfExists = (file) => fs20.existsSync(file) ? fs20.readFileSync(file, "utf8") : null;
@@ -11458,7 +11632,7 @@ var accountsCommand = async (config) => {
   try {
     lines = await accountsLines(config);
   } catch (error) {
-    return fail6(error instanceof Error ? error.message : String(error));
+    return fail7(error instanceof Error ? error.message : String(error));
   }
   for (const line of lines) process.stdout.write(`${line}
 `);
@@ -11470,7 +11644,7 @@ var claudeGrantSecret = () => {
 var doctorBundle = (config, args) => doctorBundleCommand(args, {
   defaultDir: path21.join(mendCliHome(), "bundles"),
   now: () => /* @__PURE__ */ new Date(),
-  say: say6,
+  say: say7,
   warn: (line) => process.stderr.write(`${line}
 `),
   collectors: (tail) => bundleCollectors({
@@ -11515,24 +11689,24 @@ var claudeGrant = async () => {
   const dir = throwawayLoginDir(home, "claude-login-");
   try {
     if (grantStatus(cli, dir) === null) {
-      fail6(
+      fail7(
         "claude: could not run `claude auth status` \u2014 install Claude Code, set MEND_CLAUDE_BIN, or paste a credential: mend connect claude --from-stdin"
       );
       return null;
     }
-    say6("  Mend needs its own Claude login; it is sent to your server and not kept here");
-    say6(dim6("  your own Claude login stays as it is"));
+    say7("  Mend needs its own Claude login; it is sent to your server and not kept here");
+    say7(dim7("  your own Claude login stays as it is"));
     if (!runClaudeLogin(cli, dir)) {
-      fail6("claude: the login did not complete");
+      fail7("claude: the login did not complete");
       return null;
     }
     const status = grantStatus(cli, dir);
     if (status === null || !status.loggedIn) {
-      fail6("claude: the login completed but Claude still reports no grant in Mend's directory");
+      fail7("claude: the login completed but Claude still reports no grant in Mend's directory");
       return null;
     }
     if (status.configDirectory !== null && path21.resolve(status.configDirectory) !== path21.resolve(dir)) {
-      fail6(
+      fail7(
         `claude: this Claude read ${status.configDirectory} instead of ${dir}, so a separate grant is not possible \u2014 connect the shared one deliberately with --use-my-login`
       );
       return null;
@@ -11540,33 +11714,33 @@ var claudeGrant = async () => {
     const read = readGrant(dir);
     if (read.kind === "missing") {
       const where = read.triedService === null ? read.triedPath : `${read.triedPath} or the Keychain item ${read.triedService}`;
-      fail6(`claude: logged in, but no credential to read \u2014 looked in ${where}`);
+      fail7(`claude: logged in, but no credential to read \u2014 looked in ${where}`);
       return null;
     }
     const why = staleGrantReason(read.secret);
     if (why !== null) {
-      fail6(`claude: the new login is already ${why}`);
+      fail7(`claude: the new login is already ${why}`);
       return null;
     }
     const mine = localCredential("claude");
     if (mine !== null && sameGrant(read.secret, mine)) {
-      fail6(
+      fail7(
         "claude: that is the same grant this machine's Claude holds, so both sides would race on refresh \u2014 connect it deliberately with --use-my-login"
       );
       return null;
     }
     const personalAfter = grantStatus(cli, personal);
     if (personalBefore?.loggedIn === true && personalAfter?.loggedIn === false) {
-      say6(
+      say7(
         `  your own Claude login was signed out by this one \u2014 this account allows one grant at a time. Run \`claude auth login\` to get it back, and connect the shared grant with --use-my-login instead.`
       );
     } else if (personalAfter?.loggedIn === true) {
-      say6(dim6("  your own Claude login still works \xB7 verified"));
+      say7(dim7("  your own Claude login still works \xB7 verified"));
     }
     const kept = claudeGrantDir(home);
     if (fs20.existsSync(kept)) {
       forgetGrant(kept);
-      say6(dim6(`  removed the copy an older mend kept in ${kept} \xB7 the server refreshes the login`));
+      say7(dim7(`  removed the copy an older mend kept in ${kept} \xB7 the server refreshes the login`));
     }
     return read.secret;
   } finally {
@@ -11580,12 +11754,12 @@ var connectPi = async (config, flags) => {
     return;
   }
   const scan = scanPiProfile(takeFlagValue4(flags, "--dir") ?? piAgentDir());
-  if ("error" in scan) return fail6(scan.error);
-  for (const line of piProfileLines(scan)) say6(line);
+  if ("error" in scan) return fail7(scan.error);
+  for (const line of piProfileLines(scan)) say7(line);
   const issue = validatePiProfile(scan.files);
-  if (issue !== null) return fail6(`pi: ${issue}`);
+  if (issue !== null) return fail7(`pi: ${issue}`);
   if (flags.includes("--dry-run")) {
-    say6(dim6("  --dry-run: nothing sent"));
+    say7(dim7("  --dry-run: nothing sent"));
     return;
   }
   const saved = await withSpinner(
@@ -11606,13 +11780,13 @@ var connectCommand = async (config, args) => {
   const [providerArg, ...flags] = args;
   if (providerArg === "pi") return connectPi(config, flags);
   if (!isProvider(providerArg)) {
-    return fail6(usageOf("connect"));
+    return fail7(usageOf("connect"));
   }
   const provider = providerArg;
   if (flags.includes("--remove")) {
     const identity = await api(config, "GET", "/me/sealant");
     const account2 = identity.accounts.find((row) => row.provider === provider);
-    if (account2 === void 0) return fail6(`${provider}: nothing connected`);
+    if (account2 === void 0) return fail7(`${provider}: nothing connected`);
     await api(config, "DELETE", `/me/sealant/accounts/${account2.id}`);
     process.stdout.write(`${provider}: disconnected
 `);
@@ -11621,15 +11795,15 @@ var connectCommand = async (config, args) => {
   let secret;
   if (flags.includes("--from-stdin")) {
     secret = fs20.readFileSync(0, "utf8").trim();
-    if (secret === "") return fail6("nothing on stdin");
+    if (secret === "") return fail7("nothing on stdin");
   } else if (provider === "codex" && !flags.includes("--use-my-login")) {
     const grant = codexGrant({
       cli: codexCli(),
       personalAuthJson: readIfExists(path21.join(personalCodexHome(), "auth.json")),
-      say: say6,
+      say: say7,
       parent: mendCliHome()
     });
-    if (grant.kind === "failed") return fail6(grant.reason);
+    if (grant.kind === "failed") return fail7(grant.reason);
     secret = grant.secret;
   } else if (provider === "claude" && !flags.includes("--use-my-login")) {
     secret = await claudeGrant();
@@ -11638,11 +11812,11 @@ var connectCommand = async (config, args) => {
     secret = localCredential(provider);
     if (secret === null) {
       const where = provider === "github" ? "`gh auth login` first, or pipe a token: gh auth token | mend connect github --from-stdin" : provider === "codex" ? "`codex login` first, or: mend connect codex --from-stdin < auth.json" : "`claude auth login` first, or: mend connect claude --from-stdin";
-      return fail6(`${provider}: no credential on this machine \u2014 ${where}`);
+      return fail7(`${provider}: no credential on this machine \u2014 ${where}`);
     }
     if (provider === "claude" || provider === "codex") {
-      say6(
-        dim6(
+      say7(
+        dim7(
           "  --use-my-login: Mend and this machine will share one login, and whichever refreshes second is signed out"
         )
       );
@@ -11650,7 +11824,7 @@ var connectCommand = async (config, args) => {
   }
   const narrowed = narrowCredential(provider, secret);
   if (narrowed.kind === "narrowed" && narrowed.dropped.length > 0) {
-    say6(dim6(`  keeping ${narrowed.dropped.join(", ")} on this machine`));
+    say7(dim7(`  keeping ${narrowed.dropped.join(", ")} on this machine`));
   }
   const account = await withSpinner(
     `connecting ${provider}`,
@@ -11663,8 +11837,8 @@ var connectCommand = async (config, args) => {
 `);
   const facts = claudeGrantFacts(narrowed.secret);
   if (facts !== null) {
-    say6(
-      dim6(
+    say7(
+      dim7(
         `  access expires ${minuteOrUnknown(facts.accessExpiresAt)} \xB7 grant expires ${minuteOrUnknown(facts.refreshExpiresAt)}`
       )
     );
@@ -11690,25 +11864,25 @@ var login = async (config, args) => {
     defaultUrl: config.url,
     save: (next) => {
       saveCliConfig({ url: next.url, token: next.token, deviceId: next.deviceId });
-      say6(dim6(`  token saved to ${CONFIG_PATH} (0600)`));
+      say7(dim7(`  token saved to ${CONFIG_PATH} (0600)`));
     }
   });
 };
 var logout = async (config) => {
   if (!fs20.existsSync(CONFIG_PATH) && config.token === null) {
-    say6(dim6("nothing saved \u2014 already signed out"));
+    say7(dim7("nothing saved \u2014 already signed out"));
     return;
   }
   if (config.token !== null && config.deviceId !== null) {
     try {
       await request(config, "DELETE", `/me/devices/${config.deviceId}`);
-      say6(`${green6("\u2713")} device revoked on ${config.url}`);
+      say7(`${green7("\u2713")} device revoked on ${config.url}`);
     } catch {
-      say6(dim6("  could not revoke on the server \u2014 end it under Settings \u2192 Devices"));
+      say7(dim7("  could not revoke on the server \u2014 end it under Settings \u2192 Devices"));
     }
   }
   saveCliConfig({ ...config, token: null, deviceId: null });
-  say6(`${green6("\u2713")} signed out \xB7 ${dim6(`token removed from ${CONFIG_PATH}`)}`);
+  say7(`${green7("\u2713")} signed out \xB7 ${dim7(`token removed from ${CONFIG_PATH}`)}`);
 };
 var UNINSTALL_CHOICES = [
   { scope: "all", text: "everything \xB7 the server on this machine and this machine's Mend files" },
@@ -11720,20 +11894,20 @@ var UNINSTALL_CHOICES = [
 ];
 var askUninstallScope = async () => {
   if (process.stdin.isTTY !== true || process.stdout.isTTY !== true) {
-    return fail6(`${UNINSTALL_USAGE} \xB7 no terminal to ask on`);
+    return fail7(`${UNINSTALL_USAGE} \xB7 no terminal to ask on`);
   }
-  say6("what should go?");
-  UNINSTALL_CHOICES.forEach((choice, index) => say6(`  ${index + 1}. ${choice.text}`));
+  say7("what should go?");
+  UNINSTALL_CHOICES.forEach((choice, index) => say7(`  ${index + 1}. ${choice.text}`));
   const readline = await import("node:readline/promises");
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
   const answer = (await rl.question("  1, 2 or 3: ")).trim();
   rl.close();
   const chosen = UNINSTALL_CHOICES[Number(answer) - 1];
-  if (chosen === void 0) return fail6(`"${answer}" is not one of the choices`);
+  if (chosen === void 0) return fail7(`"${answer}" is not one of the choices`);
   return chosen.scope;
 };
 var confirmUninstall = async (word) => {
-  if (process.stdin.isTTY !== true) return fail6("non-interactive \u2014 pass --yes to remove");
+  if (process.stdin.isTTY !== true) return fail7("non-interactive \u2014 pass --yes to remove");
   const readline = await import("node:readline/promises");
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
   const answer = (await rl.question(word === "y" ? "remove? [y/N] " : `type ${word} to remove: `)).trim().toLowerCase();
@@ -11742,7 +11916,7 @@ var confirmUninstall = async (word) => {
 };
 var uninstallCommand = async (config, args) => {
   const parsed = parseUninstallArgs(args);
-  if ("error" in parsed) return fail6(parsed.error);
+  if ("error" in parsed) return fail7(parsed.error);
   const scope = parsed.scope ?? await askUninstallScope();
   const server = nodeServerRuntime();
   const runtime = {
@@ -11761,42 +11935,42 @@ var uninstallCommand = async (config, args) => {
     }
   };
   const plan = await describeUninstall(runtime, scope);
-  say6(dim6(`mend uninstall \xB7 ${scope === "all" ? "everything" : scope}`));
-  for (const line of planLines(plan, server.configDir)) say6(`  ${line}`);
+  say7(dim7(`mend uninstall \xB7 ${scope === "all" ? "everything" : scope}`));
+  for (const line of planLines(plan, server.configDir)) say7(`  ${line}`);
   const nothing = (plan.server === null || plan.server === "none") && (plan.home === null || plan.home.cliConfig === null && plan.home.sshDirectory === null && plan.home.managedSshBlocks === 0);
   if (nothing) {
-    say6(dim6("nothing to remove"));
+    say7(dim7("nothing to remove"));
     return;
   }
   if (planDeletesData(plan)) {
-    say6("repositories, worktrees, the database and its backups are deleted with the server");
+    say7("repositories, worktrees, the database and its backups are deleted with the server");
   }
   if (!parsed.yes && !await confirmUninstall(planDeletesData(plan) ? "delete" : "y")) {
-    say6(dim6("nothing removed"));
+    say7(dim7("nothing removed"));
     return;
   }
   const outcome = await executeUninstall(runtime, plan);
-  for (const line of outcome.leftovers) say6(dim6(`  kept \xB7 ${line}`));
+  for (const line of outcome.leftovers) say7(dim7(`  kept \xB7 ${line}`));
   if (outcome.failures.length > 0) {
-    return fail6(outcome.failures.join("\n"));
+    return fail7(outcome.failures.join("\n"));
   }
-  say6(
-    `${green6("\u2713")} ${scope === "all" ? "Mend is gone from this machine" : scope === "server" ? "the server is gone from this machine" : "this machine no longer holds Mend files"}`
+  say7(
+    `${green7("\u2713")} ${scope === "all" ? "Mend is gone from this machine" : scope === "server" ? "the server is gone from this machine" : "this machine no longer holds Mend files"}`
   );
 };
 var printGitKey = (key) => {
   if (key.publicKey === null) return;
-  say6(key.publicKey);
-  if (key.fingerprint !== null) say6(dim6(`  ${key.fingerprint}`));
-  say6(dim6("  add this to your git account's SSH keys (GitHub: settings \u2192 SSH keys) so"));
-  say6(dim6("  every repository you can reach works; for one repository only, add it"));
-  say6(dim6("  as that repository's deploy key instead (grant write if sessions push)"));
+  say7(key.publicKey);
+  if (key.fingerprint !== null) say7(dim7(`  ${key.fingerprint}`));
+  say7(dim7("  add this to your git account's SSH keys (GitHub: settings \u2192 SSH keys) so"));
+  say7(dim7("  every repository you can reach works; for one repository only, add it"));
+  say7(dim7("  as that repository's deploy key instead (grant write if sessions push)"));
 };
 var keysShow = async (config) => {
   const key = await api(config, "GET", "/keys/git");
   if (!key.exists) {
-    say6(
-      `no Mend key yet ${dim6("\u2014 mend keys init generates one (ed25519, stays on the server host)")}`
+    say7(
+      `no Mend key yet ${dim7("\u2014 mend keys init generates one (ed25519, stays on the server host)")}`
     );
     return;
   }
@@ -11804,13 +11978,13 @@ var keysShow = async (config) => {
 };
 var keysInit = async (config) => {
   const key = await api(config, "POST", "/keys/git");
-  say6(`${green6("\u2713")} Mend key ready ${dim6("(private half stays on the server host)")}`);
+  say7(`${green7("\u2713")} Mend key ready ${dim7("(private half stays on the server host)")}`);
   printGitKey(key);
 };
 var keysShare = async (config) => {
   const agentSock = process.env["SSH_AUTH_SOCK"];
   if (agentSock === void 0 || agentSock === "") {
-    return fail6("SSH_AUTH_SOCK is not set \u2014 start (or plug in) your ssh-agent first");
+    return fail7("SSH_AUTH_SOCK is not set \u2014 start (or plug in) your ssh-agent first");
   }
   await shareAgent({
     url: () => socketUrl(config, "keys-bridge", { host: os13.hostname() }),
@@ -11819,26 +11993,26 @@ var keysShare = async (config) => {
     onEvent: (event) => {
       switch (event.kind) {
         case "connected":
-          say6(`${green6("\u25CF")} sharing this machine's ssh-agent with ${config.url}`);
-          say6(dim6(`  agent: ${agentSock} \xB7 signature requests print here \xB7 Ctrl-C stops sharing`));
+          say7(`${green7("\u25CF")} sharing this machine's ssh-agent with ${config.url}`);
+          say7(dim7(`  agent: ${agentSock} \xB7 signature requests print here \xB7 Ctrl-C stops sharing`));
           return;
         case "disconnected":
-          say6(
-            dim6(`not connected \u2014 retrying in ${Math.round(event.retryMs / 1e3)}s (Ctrl-C stops)`)
+          say7(
+            dim7(`not connected \u2014 retrying in ${Math.round(event.retryMs / 1e3)}s (Ctrl-C stops)`)
           );
           return;
         case "sign-requested":
-          say6(`${amber2("\u270E")} signature requested by mend ${dim6(`(${event.context})`)}`);
-          say6(dim6("  waiting \u2014 touch your key if it blinks (up to 60s)\u2026"));
+          say7(`${amber2("\u270E")} signature requested by mend ${dim7(`(${event.context})`)}`);
+          say7(dim7("  waiting \u2014 touch your key if it blinks (up to 60s)\u2026"));
           return;
         case "identities-requested":
-          say6(dim6(`  identities requested (${event.context})`));
+          say7(dim7(`  identities requested (${event.context})`));
           return;
         case "signed":
-          say6(`${green6("\u2713")} signed ${dim6(`(${event.seconds.toFixed(1)}s)`)}`);
+          say7(`${green7("\u2713")} signed ${dim7(`(${event.seconds.toFixed(1)}s)`)}`);
           return;
         case "not-signed":
-          say6(`${amber2("\u2717")} not signed \u2014 ${event.message}`);
+          say7(`${amber2("\u2717")} not signed \u2014 ${event.message}`);
           return;
       }
     }
@@ -11848,15 +12022,15 @@ var gitAuthorCommand = async (config, args) => {
   const asked = parseGitAuthorArgs(args);
   switch (asked.kind) {
     case "usage":
-      return fail6(usageOf("git-author"));
+      return fail7(usageOf("git-author"));
     case "invalid":
-      return fail6(asked.message);
+      return fail7(asked.message);
     case "show":
-      say6(gitAuthorLine(await api(config, "GET", "/me/git-author")));
+      say7(gitAuthorLine(await api(config, "GET", "/me/git-author")));
       return;
     case "clear": {
       const author = await api(config, "DELETE", "/me/git-author");
-      say6(`${green6("\u2713")} git author \xB7 ${gitAuthorLine(author)}`);
+      say7(`${green7("\u2713")} git author \xB7 ${gitAuthorLine(author)}`);
       return;
     }
     case "set": {
@@ -11864,9 +12038,9 @@ var gitAuthorCommand = async (config, args) => {
         name: asked.name,
         email: asked.email
       });
-      say6(`${green6("\u2713")} git author \xB7 ${gitAuthorLine(author)}`);
-      say6(
-        dim6("  sessions launched from now on commit as this, unless their dotfiles say otherwise")
+      say7(`${green7("\u2713")} git author \xB7 ${gitAuthorLine(author)}`);
+      say7(
+        dim7("  sessions launched from now on commit as this, unless their dotfiles say otherwise")
       );
       return;
     }
@@ -11875,19 +12049,19 @@ var gitAuthorCommand = async (config, args) => {
 var keysMode = async (config, args) => {
   const [value] = args;
   if (value !== void 0 && value !== "mend-key" && value !== "bridge") {
-    return fail6(`keys mode takes mend-key or bridge, not "${value}"`);
+    return fail7(`keys mode takes mend-key or bridge, not "${value}"`);
   }
   const access = value === void 0 ? await api(config, "GET", "/me/git-access") : await api(config, "PUT", "/me/git-access", { mode: value });
-  if (value !== void 0) say6(`${green6("\u2713")} git access \xB7 ${value}`);
+  if (value !== void 0) say7(`${green7("\u2713")} git access \xB7 ${value}`);
   if (access.mode === "mend-key") {
-    say6(`mend-key ${dim6("\u2014 your Mend key on the server signs; works whenever the server is up")}`);
+    say7(`mend-key ${dim7("\u2014 your Mend key on the server signs; works whenever the server is up")}`);
     if (access.key.exists) printGitKey(access.key);
-    else say6(dim6("  no key yet \u2014 mend keys init creates it"));
+    else say7(dim7("  no key yet \u2014 mend keys init creates it"));
     return;
   }
-  say6(`bridge ${dim6("\u2014 this machine's ssh-agent signs; only while a mend command runs here")}`);
-  say6(
-    access.bridge.connected ? `${green6("\u25CF")} signer connected \xB7 ${access.bridge.clientName ?? "unknown machine"}` : dim6("  no signer connected \u2014 mend shares the agent whenever it runs (or: mend keys share)")
+  say7(`bridge ${dim7("\u2014 this machine's ssh-agent signs; only while a mend command runs here")}`);
+  say7(
+    access.bridge.connected ? `${green7("\u25CF")} signer connected \xB7 ${access.bridge.clientName ?? "unknown machine"}` : dim7("  no signer connected \u2014 mend shares the agent whenever it runs (or: mend keys share)")
   );
 };
 var keysCommand = async (config, args) => {
@@ -11903,42 +12077,42 @@ var keysCommand = async (config, args) => {
     case void 0:
       return keysShow(config);
     default:
-      return fail6(`unknown keys command "${verb}" \xB7 mend help keys lists them`);
+      return fail7(`unknown keys command "${verb}" \xB7 mend help keys lists them`);
   }
 };
 var formatDotfileBytes = (bytes) => bytes < 1024 ? `${bytes} B` : `${(bytes / 1024).toFixed(1)} KB`;
-var repositoryLine = (repository) => repository === null ? `repo      ${dim6("none")}` : `repo      ${repository.url} ${dim6(`(${dotfilesRepositoryFacts(repository)})`)}`;
+var repositoryLine = (repository) => repository === null ? `repo      ${dim7("none")}` : `repo      ${repository.url} ${dim7(`(${dotfilesRepositoryFacts(repository)})`)}`;
 var dotfilesShow = async (config) => {
   const dotfiles = await api(config, "GET", "/dotfiles");
-  say6(repositoryLine(dotfiles.repository));
+  say7(repositoryLine(dotfiles.repository));
   if (dotfiles.snapshot === null) {
-    say6(`snapshot  ${dim6("none \u2014 sync from this machine: mend dotfiles sync --all")}`);
+    say7(`snapshot  ${dim7("none \u2014 sync from this machine: mend dotfiles sync --all")}`);
     return;
   }
   const snapshot = dotfiles.snapshot;
-  say6(
-    `snapshot  ${snapshot.files.length} file${snapshot.files.length === 1 ? "" : "s"} \xB7 from ${snapshot.source} \xB7 ${dim6(snapshot.sha.slice(0, 7))}`
+  say7(
+    `snapshot  ${snapshot.files.length} file${snapshot.files.length === 1 ? "" : "s"} \xB7 from ${snapshot.source} \xB7 ${dim7(snapshot.sha.slice(0, 7))}`
   );
   for (const file of snapshot.files) {
-    say6(`  ${file.path.padEnd(36)} ${dim6(formatDotfileBytes(file.bytes))}`);
+    say7(`  ${file.path.padEnd(36)} ${dim7(formatDotfileBytes(file.bytes))}`);
   }
 };
 var dotfilesRepo = async (config, args) => {
   const parsed = parseDotfilesRepoArgs(args);
-  if (parsed.kind === "error") return fail6(`${parsed.error}
+  if (parsed.kind === "error") return fail7(`${parsed.error}
 ${usageOf("dotfiles repo")}`);
   const repository = parsed.kind === "clear" ? null : parsed.repository;
-  if (repository !== null) say6(dim6(`cloning ${repository.url} on the server to check it\u2026`));
+  if (repository !== null) say7(dim7(`cloning ${repository.url} on the server to check it\u2026`));
   const result = await api(config, "PUT", "/dotfiles/repository", { repository });
   if (result.repository === null) {
-    say6(
-      `${green6("\u2713")} cleared the dotfiles repository ${dim6("\u2014 applies from the next session launch")}`
+    say7(
+      `${green7("\u2713")} cleared the dotfiles repository ${dim7("\u2014 applies from the next session launch")}`
     );
     return;
   }
-  say6(`${green6("\u2713")} saved \xB7 the server cloned it once to check`);
-  say6(repositoryLine(result.repository));
-  say6(dim6("applies from the next session launch"));
+  say7(`${green7("\u2713")} saved \xB7 the server cloned it once to check`);
+  say7(repositoryLine(result.repository));
+  say7(dim7("applies from the next session launch"));
 };
 var dotfilesSync = async (config, args) => {
   const all = args.includes("--all");
@@ -11947,36 +12121,36 @@ var dotfilesSync = async (config, args) => {
   if (!all && requestedPaths.length === 0) {
     const found = scanDotfileCandidates(home);
     if (found.length === 0) {
-      say6(dim6("no known config files found under ~"));
+      say7(dim7("no known config files found under ~"));
       return;
     }
     let group = "";
     for (const entry of found) {
       if (entry.group !== group) {
         group = entry.group;
-        say6(dim6(group));
+        say7(dim7(group));
       }
-      say6(`  ${entry.path.padEnd(36)} ${dim6(formatDotfileBytes(entry.bytes))}`);
+      say7(`  ${entry.path.padEnd(36)} ${dim7(formatDotfileBytes(entry.bytes))}`);
     }
-    say6("");
-    say6(
+    say7("");
+    say7(
       `sync everything with ${cobalt2("mend dotfiles sync --all")}, or pick: ${cobalt2("mend dotfiles sync .zshrc .gitconfig")}`
     );
     return;
   }
   const selected = all ? scanDotfileCandidates(home).map((entry) => entry.path) : requestedPaths;
-  if (selected.length === 0) return fail6("nothing to sync \u2014 no known config files found under ~");
+  if (selected.length === 0) return fail7("nothing to sync \u2014 no known config files found under ~");
   const read = readSyncFiles(home, selected);
-  if ("error" in read) return fail6(read.error);
+  if ("error" in read) return fail7(read.error);
   const result = await api(config, "POST", "/dotfiles/snapshot", {
     files: read.files,
     source: os13.hostname(),
     merge: false
   });
   const snapshot = result.snapshot;
-  if (snapshot === null) return fail6("the server accepted the sync but reports no snapshot");
-  say6(
-    `${green6("synced")} ${snapshot.files.length} file${snapshot.files.length === 1 ? "" : "s"} from ${os13.hostname()} \xB7 ${dim6(snapshot.sha.slice(0, 7))} ${dim6("\u2014 applies from the next session launch")}`
+  if (snapshot === null) return fail7("the server accepted the sync but reports no snapshot");
+  say7(
+    `${green7("synced")} ${snapshot.files.length} file${snapshot.files.length === 1 ? "" : "s"} from ${os13.hostname()} \xB7 ${dim7(snapshot.sha.slice(0, 7))} ${dim7("\u2014 applies from the next session launch")}`
   );
 };
 var envLoad = async (config, args) => {
@@ -11995,10 +12169,10 @@ var envLoad = async (config, args) => {
   try {
     contents = fs20.readFileSync(file, "utf8");
   } catch {
-    return fail6(`cannot read ${file} \u2014 pass a path: mend env load path/to/.env`);
+    return fail7(`cannot read ${file} \u2014 pass a path: mend env load path/to/.env`);
   }
   if (contents.trim() === "") {
-    say6(dim6(`${file} is empty`));
+    say7(dim7(`${file} is empty`));
     return;
   }
   const project2 = await findProject(config, explicitProject);
@@ -12009,30 +12183,30 @@ var envLoad = async (config, args) => {
     { contents, allSecret, secretNames }
   );
   if (report.loaded.length === 0 && report.rejected.length === 0 && report.malformedLines.length === 0) {
-    say6(dim6(`${path21.basename(file)} has no variables`));
+    say7(dim7(`${path21.basename(file)} has no variables`));
     return;
   }
-  say6(`${green6("\u2713")} loaded ${path21.basename(file)} into ${project2.name}`);
-  for (const line of formatLoadReport(report, { dim: dim6, warn: amber2 })) say6(line);
+  say7(`${green7("\u2713")} loaded ${path21.basename(file)} into ${project2.name}`);
+  for (const line of formatLoadReport(report, { dim: dim7, warn: amber2 })) say7(line);
   const plaintextUrls = report.loaded.filter(
     (entry) => entry.lane === "configuration" && /_(URL|URI|DSN)$/.test(entry.name)
   );
   if (plaintextUrls.length > 0) {
-    say6(
+    say7(
       amber2(
         `  ${plaintextUrls.map((entry) => entry.name).join(", ")} stored as plaintext configuration \u2014 if a value embeds a password, store it as a secret: mend env load --secret ${plaintextUrls.map((entry) => entry.name).join(",")}`
       )
     );
   }
   if (report.malformedLines.length > 0) {
-    say6(
+    say7(
       amber2(
         `  skipped ${report.malformedLines.length} malformed line${report.malformedLines.length === 1 ? "" : "s"}: ${report.malformedLines.join(", ")}`
       )
     );
   }
-  say6(
-    dim6(
+  say7(
+    dim7(
       `  configuration r${report.environmentRevision} \xB7 secrets r${report.secretRevision} \u2014 applies from the next workspace launch, including resume; running workspaces keep what they started with`
     )
   );
@@ -12044,11 +12218,11 @@ var envShow = async (config, args) => {
     api(config, "GET", `/projects/${project2.id}/secrets`),
     api(config, "GET", `/projects/${project2.id}/cluster-bindings`)
   ]);
-  say6(
-    `${project2.name} ${dim6(`\xB7 configuration r${environment.revision} \xB7 secrets r${secrets.revision} \xB7 cluster r${cluster.revision}`)}`
+  say7(
+    `${project2.name} ${dim7(`\xB7 configuration r${environment.revision} \xB7 secrets r${secrets.revision} \xB7 cluster r${cluster.revision}`)}`
   );
   if (environment.variables.length === 0 && secrets.secrets.length === 0 && cluster.bindings.length === 0 && cluster.serviceAccount === null) {
-    say6(dim6(`  nothing stored \u2014 load a file: ${cobalt2("mend env load")}`));
+    say7(dim7(`  nothing stored \u2014 load a file: ${cobalt2("mend env load")}`));
     return;
   }
   const bindingNames = cluster.bindings.map((b) => `${b.kind}/${b.objectName}`);
@@ -12059,23 +12233,23 @@ var envShow = async (config, args) => {
     ...bindingNames.map((name) => name.length)
   );
   for (const variable of environment.variables) {
-    say6(`  ${variable.name.padEnd(width)}  configuration ${dim6("\xB7 plaintext")}`);
+    say7(`  ${variable.name.padEnd(width)}  configuration ${dim7("\xB7 plaintext")}`);
   }
   for (const secret of secrets.secrets) {
-    say6(`  ${secret.name.padEnd(width)}  secret ${dim6("\xB7 value set, never shown")}`);
+    say7(`  ${secret.name.padEnd(width)}  secret ${dim7("\xB7 value set, never shown")}`);
   }
   for (const name of bindingNames) {
-    say6(
-      `  ${name.padEnd(width)}  cluster binding ${dim6("\xB7 resolved by the platform at launch \xB7 contents unknown to Mend")}`
+    say7(
+      `  ${name.padEnd(width)}  cluster binding ${dim7("\xB7 resolved by the platform at launch \xB7 contents unknown to Mend")}`
     );
   }
   if (cluster.serviceAccount !== null) {
-    say6(
-      `  ${cluster.serviceAccount.padEnd(width)}  service account ${dim6("\xB7 workspace pod identity \xB7 allowlisted by the operator")}`
+    say7(
+      `  ${cluster.serviceAccount.padEnd(width)}  service account ${dim7("\xB7 workspace pod identity \xB7 allowlisted by the operator")}`
     );
   }
   if (!cluster.clusterCapable && (cluster.bindings.length > 0 || cluster.serviceAccount !== null)) {
-    say6(
+    say7(
       amber2(
         `  ${cluster.bindings.length} cluster binding${cluster.bindings.length === 1 ? "" : "s"}${cluster.serviceAccount === null ? "" : " \xB7 service account set"} \xB7 local runner \u2014 cluster bindings do not resolve here`
       )
@@ -12089,48 +12263,48 @@ var envCluster = async (config, args) => {
   const usage2 = usageOf("env cluster");
   const project2 = await findProject(config, explicitProject);
   const route = `/projects/${project2.id}/cluster-bindings`;
-  const appliesLine = () => say6(
-    dim6(
+  const appliesLine = () => say7(
+    dim7(
       "  applies from the next workspace launch; running workspaces keep what they started with"
     )
   );
   if (verb === "add") {
     const [kind, objectName] = rest;
     if (kind !== "secret" && kind !== "configmap" || objectName === void 0) {
-      return fail6(`env cluster add takes a kind and an object name
+      return fail7(`env cluster add takes a kind and an object name
 ${usage2}`);
     }
     const result = await api(config, "POST", route, {
       kind,
       objectName
     });
-    say6(`${green6("\u2713")} bound ${kind}/${objectName} ${dim6(`\xB7 cluster r${result.revision}`)}`);
-    say6(dim6("  resolved by the platform at launch \xB7 contents unknown to Mend"));
+    say7(`${green7("\u2713")} bound ${kind}/${objectName} ${dim7(`\xB7 cluster r${result.revision}`)}`);
+    say7(dim7("  resolved by the platform at launch \xB7 contents unknown to Mend"));
     return appliesLine();
   }
   if (verb === "remove") {
     const [ref] = rest;
     const [kind, objectName] = ref?.split("/", 2) ?? [];
     if (kind !== "secret" && kind !== "configmap" || objectName === void 0) {
-      return fail6(`env cluster remove takes <kind>/<name>, e.g. secret/app-env
+      return fail7(`env cluster remove takes <kind>/<name>, e.g. secret/app-env
 ${usage2}`);
     }
     const snapshot = await api(config, "GET", route);
     const binding = snapshot.bindings.find((b) => b.kind === kind && b.objectName === objectName);
-    if (binding === void 0) return fail6(`${kind}/${objectName} is not bound on ${project2.name}`);
+    if (binding === void 0) return fail7(`${kind}/${objectName} is not bound on ${project2.name}`);
     const result = await api(
       config,
       "DELETE",
       `${route}/${binding.id}`
     );
-    say6(`${green6("\u2713")} removed ${kind}/${objectName} ${dim6(`\xB7 cluster r${result.revision}`)}`);
+    say7(`${green7("\u2713")} removed ${kind}/${objectName} ${dim7(`\xB7 cluster r${result.revision}`)}`);
     return appliesLine();
   }
   if (verb === "sa") {
     const clear = args.includes("--clear");
     const [name] = rest;
     if (!clear && name === void 0)
-      return fail6(`env cluster sa takes a name or --clear
+      return fail7(`env cluster sa takes a name or --clear
 ${usage2}`);
     const result = await api(
       config,
@@ -12138,11 +12312,11 @@ ${usage2}`);
       `${route}/service-account`,
       { serviceAccount: clear ? null : name }
     );
-    say6(
-      result.serviceAccount === null ? `${green6("\u2713")} cleared the workspace service account ${dim6(`\xB7 cluster r${result.revision}`)}` : `${green6("\u2713")} service account ${result.serviceAccount} ${dim6(`\xB7 cluster r${result.revision}`)}`
+    say7(
+      result.serviceAccount === null ? `${green7("\u2713")} cleared the workspace service account ${dim7(`\xB7 cluster r${result.revision}`)}` : `${green7("\u2713")} service account ${result.serviceAccount} ${dim7(`\xB7 cluster r${result.revision}`)}`
     );
     if (result.serviceAccount !== null) {
-      say6(
+      say7(
         amber2(
           "  the session agent holds this role's full permissions for the whole session \u2014 bind a least-privilege role intended for untrusted code; names outside the platform allowlist fail the launch"
         )
@@ -12150,7 +12324,7 @@ ${usage2}`);
     }
     return appliesLine();
   }
-  return fail6(`unknown env cluster command "${verb ?? ""}"
+  return fail7(`unknown env cluster command "${verb ?? ""}"
 ${usage2}`);
 };
 var envCommand = async (config, args) => {
@@ -12164,7 +12338,7 @@ var envCommand = async (config, args) => {
     case void 0:
       return envShow(config, rest);
     default:
-      return fail6(`unknown env command "${verb}" \xB7 mend help env lists them`);
+      return fail7(`unknown env command "${verb}" \xB7 mend help env lists them`);
   }
 };
 var dotfilesCommand = async (config, args) => {
@@ -12178,7 +12352,7 @@ var dotfilesCommand = async (config, args) => {
     case void 0:
       return dotfilesShow(config);
     default:
-      return fail6(`unknown dotfiles command "${verb}" \xB7 mend help dotfiles lists them`);
+      return fail7(`unknown dotfiles command "${verb}" \xB7 mend help dotfiles lists them`);
   }
 };
 var skillsList = async (config, args) => {
@@ -12191,23 +12365,23 @@ var skillsList = async (config, args) => {
   );
   const library = project2 === null ? "your library" : project2.name;
   if (skills.length === 0) {
-    say6(dim6(`no skills in ${library} \u2014 push a local one: mend skills push`));
+    say7(dim7(`no skills in ${library} \u2014 push a local one: mend skills push`));
     return;
   }
   for (const skill of skills) {
-    say6(
-      `  ${skill.name.padEnd(28)} ${dim6(`${skill.fileCount} file${skill.fileCount === 1 ? "" : "s"} \xB7 ${formatDotfileBytes(skill.bytes)}`)}`
+    say7(
+      `  ${skill.name.padEnd(28)} ${dim7(`${skill.fileCount} file${skill.fileCount === 1 ? "" : "s"} \xB7 ${formatDotfileBytes(skill.bytes)}`)}`
     );
-    if (skill.description !== "") say6(`    ${dim6(skill.description)}`);
+    if (skill.description !== "") say7(`    ${dim7(skill.description)}`);
   }
 };
 var skillsPush = async (config, args) => {
   const dirFlag = takeFlagValue4(args, "--dir");
   const root = dirFlag === null ? path21.join(os13.homedir(), DEFAULT_SKILLS_DIR) : path21.resolve(dirFlag);
   const scanned = scanSkillLibrary(root);
-  if ("error" in scanned) return fail6(scanned.error);
-  for (const note of scanned.notes) say6(dim6(`  ${note.skill}: ${note.message}`));
-  if (scanned.skills.length === 0) return fail6(`no skills found under ${root}`);
+  if ("error" in scanned) return fail7(scanned.error);
+  for (const note of scanned.notes) say7(dim7(`  ${note.skill}: ${note.message}`));
+  if (scanned.skills.length === 0) return fail7(`no skills found under ${root}`);
   const forProject = args.includes("--project");
   const project2 = forProject ? await findProject(config, takeFlagValue4(args, "--project")) : null;
   const report = await api(config, "POST", "/skills/sync", {
@@ -12227,10 +12401,10 @@ var skillsPush = async (config, args) => {
     `${report.unchanged.length} unchanged`,
     ...report.removed.length > 0 ? [`${report.removed.length} removed`] : []
   ].join(" \xB7 ");
-  say6(
-    `${green6("pushed")} ${scanned.skills.length} skill${scanned.skills.length === 1 ? "" : "s"} from ${root} to ${library} \xB7 ${dim6(counts)}`
+  say7(
+    `${green7("pushed")} ${scanned.skills.length} skill${scanned.skills.length === 1 ? "" : "s"} from ${root} to ${library} \xB7 ${dim7(counts)}`
   );
-  say6(dim6("sessions receive them from the next launch"));
+  say7(dim7("sessions receive them from the next launch"));
 };
 var skillsCommand = async (config, args) => {
   const [verb, ...rest] = args;
@@ -12243,7 +12417,7 @@ var skillsCommand = async (config, args) => {
       return skillsList(config, args);
     default:
       if (verb.startsWith("--")) return skillsList(config, args);
-      return fail6(`unknown skills command "${verb}" \xB7 mend help skills lists them`);
+      return fail7(`unknown skills command "${verb}" \xB7 mend help skills lists them`);
   }
 };
 var completeCommand = async (config, args) => {
@@ -12351,7 +12525,7 @@ var completionsCommand = (args) => {
       process.stdout.write(BASH_COMPLETIONS);
       return;
     default:
-      return fail6(`${usageOf("completions")} \xB7 e.g. mend completions zsh > "$fpath[1]/_mend"`);
+      return fail7(`${usageOf("completions")} \xB7 e.g. mend completions zsh > "$fpath[1]/_mend"`);
   }
 };
 var supervisedRun = async (config, session, argv) => {
@@ -12361,15 +12535,15 @@ var supervisedRun = async (config, session, argv) => {
     "provisioning workspace \u2014 a first launch builds the harness image (can take minutes)\u2026",
     request(config, "POST", `/sessions/${session.id}/launch`, { argv })
   );
-  say6(
-    `${green6("\u2713 recording")} \xB7 run ${dim6(launched.id.slice(0, 8))} \xB7 workspace mounts the worktree`
+  say7(
+    `${green7("\u2713 recording")} \xB7 run ${dim7(launched.id.slice(0, 8))} \xB7 workspace mounts the worktree`
   );
-  say6(dim6(`  ${argv.join(" ")} \u2014 live record:`));
-  say6("");
+  say7(dim7(`  ${argv.join(" ")} \u2014 live record:`));
+  say7("");
   const headers = {};
   if (config.token !== null) headers["authorization"] = `Bearer ${config.token}`;
   const response = await fetch(`${config.url}/api/events`, { headers });
-  if (response.body === null) return fail6("event stream unavailable");
+  if (response.body === null) return fail7("event stream unavailable");
   const reader = response.body.getReader();
   const decoder = new TextDecoder();
   let buffer = "";
@@ -12391,7 +12565,7 @@ var supervisedRun = async (config, session, argv) => {
       }
       if (event.sessionId !== session.id) continue;
       if (event.type === "session-progress" && event.line !== void 0) {
-        say6(dim6(`  ${event.line}`));
+        say7(dim7(`  ${event.line}`));
       }
       if (event.type === "session") {
         const detail = await api(config, "GET", `/sessions/${session.id}`);
@@ -12401,9 +12575,9 @@ var supervisedRun = async (config, session, argv) => {
     }
   }
   await reader.cancel().catch(() => void 0);
-  say6("");
-  say6(`${green6("\u2713")} session ${settled ?? "settled"} \xB7 recorded \xB7 checkpoint taken`);
-  say6(`${cobalt2("  review")} \xB7 ${config.url}/sessions/${session.id}`);
+  say7("");
+  say7(`${green7("\u2713")} session ${settled ?? "settled"} \xB7 recorded \xB7 checkpoint taken`);
+  say7(`${cobalt2("  review")} \xB7 ${config.url}/sessions/${session.id}`);
   process.exit(settled === "failed" ? 1 : 0);
 };
 var continueSession = async (config, args) => {
@@ -12426,20 +12600,20 @@ var continueSession = async (config, args) => {
       }
     }
     if (sessionId === null || followUp === null) {
-      return fail6("no session with a pending follow-up \u2014 send one from the review first");
+      return fail7("no session with a pending follow-up \u2014 send one from the review first");
     }
   } else {
     followUp = await api(config, "GET", `/sessions/${sessionId}/follow-up`);
-    if (followUp === null) return fail6(`session ${sessionId} has no pending follow-up`);
+    if (followUp === null) return fail7(`session ${sessionId} has no pending follow-up`);
   }
   const detail = await api(config, "GET", `/sessions/${sessionId}`);
   const session = detail.session;
-  say6(`${green6("\u2713")} follow-up for session ${dim6(session.id.slice(0, 8))} \xB7 ${session.branch}`);
-  say6(dim6("  instruction:"));
-  for (const line of followUp.instruction.split("\n").slice(0, 6)) say6(dim6(`  \u2502 ${line}`));
-  if (followUp.instruction.split("\n").length > 6) say6(dim6("  \u2502 \u2026"));
+  say7(`${green7("\u2713")} follow-up for session ${dim7(session.id.slice(0, 8))} \xB7 ${session.branch}`);
+  say7(dim7("  instruction:"));
+  for (const line of followUp.instruction.split("\n").slice(0, 6)) say7(dim7(`  \u2502 ${line}`));
+  if (followUp.instruction.split("\n").length > 6) say7(dim7("  \u2502 \u2026"));
   if (followUp.reviewSliceId === null || followUp.checkpointAId === null || followUp.checkpointBId === null || followUp.diffDigest === null || followUp.idempotencyKey === null) {
-    return fail6("legacy follow-up \u2014 recreate it from a pinned Review before delivery");
+    return fail7("legacy follow-up \u2014 recreate it from a pinned Review before delivery");
   }
   const delivered = await withSpinner(
     "delivering persisted Review bundle \u2014 retries reconcile one process\u2026",
@@ -12454,16 +12628,16 @@ var continueSession = async (config, args) => {
     })
   );
   if (delivered.status === "pending") {
-    return fail6("the session is active \u2014 the follow-up remains pending");
+    return fail7("the session is active \u2014 the follow-up remains pending");
   }
   if (delivered.status === "delivery_failed") {
-    return fail6(delivered.deliveryError ?? "delivery failed before process membership finalized");
+    return fail7(delivered.deliveryError ?? "delivery failed before process membership finalized");
   }
-  say6(
-    `${green6("\u2713 recording")} \xB7 delivered to run ${delivered.deliverySealantRunId ?? "unknown"}${detachHint()}`
+  say7(
+    `${green7("\u2713 recording")} \xB7 delivered to run ${delivered.deliverySealantRunId ?? "unknown"}${detachHint()}`
   );
-  say6(`${cobalt2("  watch")} \xB7 ${config.url}/sessions/${session.id}`);
-  say6("");
+  say7(`${cobalt2("  watch")} \xB7 ${config.url}/sessions/${session.id}`);
+  say7("");
   await attachOrExit(config, session.id, session.harness);
   exitAfterSessionEnd(config, session.id);
 };
@@ -12480,19 +12654,19 @@ var resumeCommand = async (config, args) => {
   const detail = await api(config, "GET", `/projects/${project2.id}`);
   const match = prefix === void 0 ? detail.sessions.find((s) => !agentLiveIn(detail, s)) : detail.sessions.find((s) => s.id.startsWith(prefix));
   if (match === void 0) {
-    return fail6(
+    return fail7(
       prefix === void 0 ? "no settled session to resume \u2014 mend status lists sessions" : `no session matches "${prefix}"`
     );
   }
   if (agentLiveIn(detail, match)) {
-    return fail6(
+    return fail7(
       `session ${match.id.slice(0, 8)} is live \u2014 attach: mend attach ${match.id.slice(0, 8)}`
     );
   }
-  say6(
-    `${green6("\u2713")} resuming ${match.harness} \xB7 ${dim6(match.id.slice(0, 8))}${withHarness === null ? "" : ` ${dim6("as")} ${withHarness}`}`
+  say7(
+    `${green7("\u2713")} resuming ${match.harness} \xB7 ${dim7(match.id.slice(0, 8))}${withHarness === null ? "" : ` ${dim7("as")} ${withHarness}`}`
   );
-  say6(`${cobalt2("  watch")} \xB7 ${config.url}/sessions/${match.id}`);
+  say7(`${cobalt2("  watch")} \xB7 ${config.url}/sessions/${match.id}`);
   const priorAgent = detail.annotations.find((annotation) => annotation.sessionId === match.id)?.currentAgent ?? null;
   const protocolPrior = priorAgent?.kind === "agent-protocol" && withHarness === null;
   await startAndFollow(
@@ -12503,8 +12677,8 @@ var resumeCommand = async (config, args) => {
       harness: withHarness
     })
   );
-  say6(`${green6("\u2713 recording")} \xB7 same worktree, conversation restored${detachHint()}`);
-  say6("");
+  say7(`${green7("\u2713 recording")} \xB7 same worktree, conversation restored${detachHint()}`);
+  say7("");
   await attachOrExit(config, match.id, withHarness ?? match.harness);
   exitAfterSessionEnd(config, match.id);
 };
@@ -12534,20 +12708,20 @@ var rejoinCommand = async (config, args) => {
   const matches = prefix === void 0 ? newest === void 0 ? [] : [newest] : eligible.filter((session2) => session2.id.startsWith(prefix));
   if (matches.length === 0) {
     const harnessDescription = harness === null ? "" : ` ${harness}`;
-    return fail6(
+    return fail7(
       prefix === void 0 ? `no${harnessDescription} session to rejoin in project ${project2.name}` : `no${harnessDescription} session matches "${prefix}" in project ${project2.name}`
     );
   }
   if (matches.length > 1) {
-    return fail6(`session prefix "${prefix}" is ambiguous \u2014 use more of the id`);
+    return fail7(`session prefix "${prefix}" is ambiguous \u2014 use more of the id`);
   }
   const session = matches[0];
-  if (session === void 0) return fail6("session selection failed");
+  if (session === void 0) return fail7("session selection failed");
   const alreadyLive = agentLiveIn(detail, session);
-  say6(
-    `${green6("\u2713")} rejoining ${sessionDisplayName(session)} \xB7 ${session.harness} ${dim6(session.id.slice(0, 8))} \xB7 ${alreadyLive ? "already live" : "restoring"}`
+  say7(
+    `${green7("\u2713")} rejoining ${sessionDisplayName(session)} \xB7 ${session.harness} ${dim7(session.id.slice(0, 8))} \xB7 ${alreadyLive ? "already live" : "restoring"}`
   );
-  say6(`${cobalt2("  watch")} \xB7 ${config.url}/sessions/${session.id}`);
+  say7(`${cobalt2("  watch")} \xB7 ${config.url}/sessions/${session.id}`);
   let restored = false;
   const currentAgent = detail.annotations.find((annotation) => annotation.sessionId === session.id)?.currentAgent ?? null;
   if (currentAgent?.kind === "agent-protocol") {
@@ -12565,11 +12739,11 @@ var rejoinCommand = async (config, args) => {
       "resuming \u2014 a fresh workspace restores the saved session state\u2026"
     );
   }
-  say6(
-    restored ? `${green6("\u2713 recording")} \xB7 same worktree, conversation restored${detachHint()}` : `${green6("\u2713 recording")} \xB7 attached to the live session${detachHint()}`
+  say7(
+    restored ? `${green7("\u2713 recording")} \xB7 same worktree, conversation restored${detachHint()}` : `${green7("\u2713 recording")} \xB7 attached to the live session${detachHint()}`
   );
   await tunnels?.start(session.id);
-  say6("");
+  say7("");
   let outcome = await attachWithTunnels(
     tunnels,
     () => attachTty(config, session.id, session.harness, 0n, void 0, {
@@ -12601,7 +12775,7 @@ var projectsCommand = async (config) => {
     api(config, "GET", "/sessions")
   ]);
   if (projects.length === 0) {
-    say6(dim6("no adopted projects \u2014 mend adopt brings one in"));
+    say7(dim7("no adopted projects \u2014 mend adopt brings one in"));
     return;
   }
   const liveByProject = /* @__PURE__ */ new Map();
@@ -12613,13 +12787,13 @@ var projectsCommand = async (config) => {
   const here = matchProjectByCwd(projects, cwdFacts(process.cwd()));
   for (const project2 of projects) {
     const live = liveByProject.get(project2.id) ?? 0;
-    const liveLabel = live > 0 ? green6(`${live} live`) : dim6("\u2014");
+    const liveLabel = live > 0 ? green7(`${live} live`) : dim7("\u2014");
     const marker = project2.id === here?.id ? cobalt2("\u25B8 ") : "  ";
-    say6(
-      `${marker}${project2.name.padEnd(nameWidth)}  ${dim6(project2.defaultBranch.padEnd(branchWidth))}  ${liveLabel}  ${dim6(project2.storePath)}`
+    say7(
+      `${marker}${project2.name.padEnd(nameWidth)}  ${dim7(project2.defaultBranch.padEnd(branchWidth))}  ${liveLabel}  ${dim7(project2.storePath)}`
     );
   }
-  if (here !== void 0) say6(dim6(`  \u25B8 ${here.name} is the cwd's project`));
+  if (here !== void 0) say7(dim7(`  \u25B8 ${here.name} is the cwd's project`));
 };
 var refreshCommand = async (config, args) => {
   const explicit = args.find((a) => !a.startsWith("--")) ?? takeFlagValue4(args, "--project");
@@ -12629,20 +12803,20 @@ var refreshCommand = async (config, args) => {
     "POST",
     `/projects/${project2.id}/refresh`
   );
-  say6(`${green6("\u2713")} refreshed ${project2.name} ${dim6(`\xB7 ${branches.length} branches`)}`);
+  say7(`${green7("\u2713")} refreshed ${project2.name} ${dim7(`\xB7 ${branches.length} branches`)}`);
   for (const branch of branches.slice(0, 12)) {
     const marker = branch.isDefault ? cobalt2("\u25B8 ") : "  ";
-    say6(
-      `${marker}${branch.name}  ${dim6(branch.sha.slice(0, 12))}  ${dim6(branch.committedAt.slice(0, 10))}`
+    say7(
+      `${marker}${branch.name}  ${dim7(branch.sha.slice(0, 12))}  ${dim7(branch.committedAt.slice(0, 10))}`
     );
   }
-  if (branches.length > 12) say6(dim6(`  \u2026 ${branches.length - 12} more`));
+  if (branches.length > 12) say7(dim7(`  \u2026 ${branches.length - 12} more`));
 };
 var rowHold = (row) => (
   // A workspace a stop is still saving (docs/adr/0002) reads what is left, first.
   captureLineOf(row.session) ?? (row.annotation === void 0 ? null : servicesHoldOf(row.session, row.annotation.currentAgent, row.annotation.liveServices ?? 0))
 );
-var printSessionRow = (row) => {
+var printSessionRow = (row, workspaceLines = []) => {
   const { session, annotation } = row;
   const live = ACTIVE_STATUSES.has(session.status);
   const status = session.status.padEnd(9);
@@ -12657,9 +12831,10 @@ var printSessionRow = (row) => {
     facts.push(amber2("follow-up pending"));
   const base = session.baseRef === null ? session.baseSha.slice(0, 12) : session.baseRef;
   const model = session.model === null || session.model === void 0 ? "" : ` \xB7 ${session.model}${session.effort === null || session.effort === void 0 ? "" : ` \xB7 ${session.effort}`}`;
-  say6(
-    `${session.harness.padEnd(8)}  ${dim6(session.id.slice(0, 8))}  ${live ? green6(status) : dim6(status)}  ${row.projectName}  ${dim6(`${session.branch} \xB7 base ${base}${model}`)}${facts.length > 0 ? `  ${facts.join(dim6(" \xB7 "))}` : ""}`
+  say7(
+    `${session.harness.padEnd(8)}  ${dim7(session.id.slice(0, 8))}  ${live ? green7(status) : dim7(status)}  ${row.projectName}  ${dim7(`${session.branch} \xB7 base ${base}${model}`)}${facts.length > 0 ? `  ${facts.join(dim7(" \xB7 "))}` : ""}`
   );
+  for (const line of workspaceLines) say7(`          ${dim7(line)}`);
 };
 var modelsCommand = async (config, args) => {
   const catalogs = await api(
@@ -12667,15 +12842,15 @@ var modelsCommand = async (config, args) => {
     "GET",
     "/harnesses/models"
   );
-  if (args.includes("--json")) return say6(modelCatalogJson(catalogs));
-  for (const line of modelCatalogLines(catalogs, dim6)) say6(line);
+  if (args.includes("--json")) return say7(modelCatalogJson(catalogs));
+  for (const line of modelCatalogLines(catalogs, dim7)) say7(line);
 };
 var sessionsCommand = async (config, args) => {
   const all = args.includes("--all");
   if (args.includes("--json=v2")) {
     const projectFlag2 = args.indexOf("--project");
     const projectName2 = projectFlag2 !== -1 && args[projectFlag2 + 1] !== void 0 ? String(args[projectFlag2 + 1]) : null;
-    say6(JSON.stringify(await buildWorktreesJson(config, projectName2), null, 2));
+    say7(JSON.stringify(await buildWorktreesJson(config, projectName2), null, 2));
     return;
   }
   const json2 = args.includes("--json");
@@ -12684,7 +12859,7 @@ var sessionsCommand = async (config, args) => {
   const projects = await api(config, "GET", "/projects");
   const scope = projectName === null ? projects : projects.filter((p) => p.name === projectName);
   if (projectName !== null && scope.length === 0) {
-    return fail6(`no adopted project named "${projectName}"`);
+    return fail7(`no adopted project named "${projectName}"`);
   }
   let rows;
   if (all || projectName !== null || !json2) {
@@ -12714,11 +12889,11 @@ var sessionsCommand = async (config, args) => {
   }
   if (rows.length === 0) {
     if (json2) {
-      say6(JSON.stringify({ version: 1, sessions: [] }, null, 2));
+      say7(JSON.stringify({ version: 1, sessions: [] }, null, 2));
       return;
     }
-    say6(
-      dim6(all ? "no sessions" : "no active sessions \u2014 mend sessions --all includes settled ones")
+    say7(
+      dim7(all ? "no sessions" : "no active sessions \u2014 mend sessions --all includes settled ones")
     );
     return;
   }
@@ -12760,10 +12935,14 @@ var sessionsCommand = async (config, args) => {
         }
       }))
     };
-    say6(JSON.stringify(payload, null, 2));
+    say7(JSON.stringify(payload, null, 2));
     return;
   }
-  for (const row of rows) printSessionRow(row);
+  const workspaceLines = await workspaceLinesOf(
+    config,
+    rows.map((row) => row.session)
+  );
+  for (const row of rows) printSessionRow(row, workspaceLines.get(row.session.id));
 };
 var toWorktreeJsonSession = (session) => ({
   id: session.id,
@@ -12841,8 +13020,8 @@ var worktreesCommand = async (config, args) => {
         request: (method, route, body) => request(config, method, route, body),
         listWorktrees: async (project2) => (await buildWorktreesJson(config, project2)).worktrees,
         liveStatuses: ACTIVE_STATUSES,
-        say: say6,
-        fail: fail6
+        say: say7,
+        fail: fail7
       },
       args.slice(1)
     );
@@ -12852,11 +13031,11 @@ var worktreesCommand = async (config, args) => {
   const projectName = projectFlag !== -1 && args[projectFlag + 1] !== void 0 ? String(args[projectFlag + 1]) : null;
   const payload = await buildWorktreesJson(config, projectName);
   if (json2) {
-    say6(JSON.stringify(payload, null, 2));
+    say7(JSON.stringify(payload, null, 2));
     return;
   }
   if (payload.worktrees.length === 0) {
-    say6(dim6("no worktrees yet \u2014 mend claude --name <worktree> starts one"));
+    say7(dim7("no worktrees yet \u2014 mend claude --name <worktree> starts one"));
     return;
   }
   for (const worktree of payload.worktrees) {
@@ -12864,19 +13043,19 @@ var worktreesCommand = async (config, args) => {
     const facts = [
       `${worktree.sessions.length} session${worktree.sessions.length === 1 ? "" : "s"}`
     ];
-    if (live > 0) facts.push(green6(`${live} live`));
+    if (live > 0) facts.push(green7(`${live} live`));
     if (worktree.review !== null && worktree.review.openComments > 0) {
       facts.push(amber2(`${worktree.review.openComments} open`));
     }
     const base = worktree.baseRef ?? worktree.baseSha.slice(0, 12);
-    say6(
-      `${worktree.name.padEnd(24)}  ${worktree.projectName}  ${dim6(`${worktree.branch} \xB7 base ${base}`)}  ${facts.join(dim6(" \xB7 "))}`
+    say7(
+      `${worktree.name.padEnd(24)}  ${worktree.projectName}  ${dim7(`${worktree.branch} \xB7 base ${base}`)}  ${facts.join(dim7(" \xB7 "))}`
     );
     for (const session of worktree.sessions) {
       const status = session.status.padEnd(9);
       const name = session.label ?? `session ${session.id.slice(0, 8)}`;
-      say6(
-        `  \u2514 ${session.harness.padEnd(8)}  ${dim6(session.id.slice(0, 8))}  ${ACTIVE_STATUSES.has(session.status) ? green6(status) : dim6(status)}  ${name}`
+      say7(
+        `  \u2514 ${session.harness.padEnd(8)}  ${dim7(session.id.slice(0, 8))}  ${ACTIVE_STATUSES.has(session.status) ? green7(status) : dim7(status)}  ${name}`
       );
     }
   }
@@ -12891,13 +13070,13 @@ var hasNodeFfi = () => {
 };
 var dashboard = async (config, options = {}) => {
   if (process.stdout.isTTY !== true) {
-    say6(renderIndex());
+    say7(renderIndex());
     return;
   }
   if (!hasNodeFfi()) {
     const major = Number(process.versions.node.split(".")[0]);
     if (Number.isNaN(major) || major < 26) {
-      return fail6(
+      return fail7(
         `the dashboard needs Node >= 26 (node:ffi) \u2014 this is ${process.version}; every other command still works`
       );
     }
@@ -12908,7 +13087,7 @@ var dashboard = async (config, options = {}) => {
     );
     process.exit(rerun.status ?? 0);
   }
-  const { runDashboard } = await import("./dashboard-2HF3KTTU.js");
+  const { runDashboard } = await import("./dashboard-4J2WMT3G.js");
   const agentShare = await startShareIfBridge(config);
   const tunnels = options.noTunnel === true || serverIsLocal(config) ? null : createServiceTunnels({
     listServices: () => fetchServices(config),
@@ -12956,29 +13135,29 @@ var withAgentShare = async (config, work) => {
 };
 var helpCommand = (words) => {
   if (words.length === 0) {
-    say6(renderIndex());
+    say7(renderIndex());
     return;
   }
   const doc = findCommand(words);
   if (doc !== null && (doc.name.split(" ").length > 1 || words.length === 1)) {
-    say6(renderCommand(doc));
+    say7(renderCommand(doc));
     return;
   }
   const group = renderGroup(words[0] ?? "");
   if (doc !== null) {
-    say6(renderCommand(doc));
+    say7(renderCommand(doc));
     return;
   }
   if (group !== null) {
-    say6(group);
+    say7(group);
     return;
   }
-  return fail6(`no command "${words.join(" ")}" \xB7 mend help lists them`);
+  return fail7(`no command "${words.join(" ")}" \xB7 mend help lists them`);
 };
 var manCommand = (words) => {
   const doc = words.length === 0 ? null : findCommand(words);
   if (words.length > 0 && doc === null) {
-    return fail6(`no command "${words.join(" ")}" \xB7 mend help lists them`);
+    return fail7(`no command "${words.join(" ")}" \xB7 mend help lists them`);
   }
   const version = cliVersion();
   const page = doc === null ? renderManIndex(version) : renderManPage(doc, version);
@@ -12987,7 +13166,7 @@ var manCommand = (words) => {
   const result = spawnSync6("man", ["-l", file], { stdio: "inherit" });
   fs20.rmSync(file, { force: true });
   if (result.error !== void 0 || result.status !== 0) {
-    say6(doc === null ? renderIndex() : renderCommand(doc));
+    say7(doc === null ? renderIndex() : renderCommand(doc));
   }
 };
 var main = async () => {
@@ -12999,7 +13178,7 @@ var main = async () => {
   }
   if (command === "server") {
     const result = await serverCommand(rest);
-    if (result._tag === "error") return fail6(result.message);
+    if (result._tag === "error") return fail7(result.message);
     return;
   }
   const config = loadConfig();
@@ -13059,7 +13238,13 @@ var main = async () => {
       );
     case "session":
       if (rest[0] === "share") return sessionShareCommand(boundApi(config), rest.slice(1));
-      return fail6(`unknown session command "${rest[0] ?? ""}" \xB7 mend help session share`);
+      return fail7(`unknown session command "${rest[0] ?? ""}" \xB7 mend help session share`);
+    case "workspace":
+      return workspaceCommand(
+        boundApi(config),
+        (method, route, body) => request(config, method, route, body),
+        rest
+      );
     // Hidden in the catalog: the installer renders its own QR through this.
     case "qr":
       return qrCommand(rest);
@@ -13110,10 +13295,10 @@ var main = async () => {
     case "--version":
     case "-v":
       for (const line of versionLines(cliVersion(), await fetchServerVersion(config.url)))
-        say6(line);
+        say7(line);
       return;
     default:
-      return fail6(`unknown command "${command}" \xB7 mend help lists them`);
+      return fail7(`unknown command "${command}" \xB7 mend help lists them`);
   }
 };
 await main();