@tabbio-technologies/cli 1.2.8 → 1.3.1

package/dist/chunks/{chunk-QVR5KIEQ.js → chunk-KHLGZ5IV.js}

@@ -1,178 +1,54 @@
 import { createRequire as __tabbioCreateRequire } from 'node:module';
 const require = __tabbioCreateRequire(import.meta.url);
 import {
+  displayWidth,
+  padEnd,
+  safeTerminalText,
+  truncate,
+  wrapWords
+} from "./chunk-NRFVKK3S.js";
+import {
+  ApiClient,
   CliError,
   ExitCode,
+  McpSession,
+  PRODUCTION_APP_URL,
+  chooseLoginMethod,
+  clearCatalogCache,
+  combineSignals,
+  createCommandContext,
+  credentialsFromLogin,
   debug,
+  deviceLabel,
+  fingerprint,
+  hasDisplay,
+  info,
   interruptedError,
+  isCliError,
   kebabCase,
   loadConfig,
+  loadStoredCredentials,
+  loginWithBrowser,
+  loginWithEmailOtp,
   networkError,
   parseJsonResponse,
+  printJson,
   relativeTime,
+  revokeSession,
+  saveCredentials,
+  successLine,
   updateConfig,
-  usageError
-} from "./chunk-7LNC3FIV.js";
+  usageError,
+  warn,
+  writeOut
+} from "./chunk-GGJEDG3P.js";
+import {
+  activeCommandSignal
+} from "./chunk-NK5RPNSV.js";
 import {
   theme
 } from "./chunk-VHHZFMIF.js";
 
-// src/core/chat-model.ts
-import { marked } from "marked";
-
-// src/core/capabilities.ts
-var TOGGLE_MODES = ["auto", "on", "off"];
-var RESULT_MODES = ["auto", "summary", "document", "slides", "page", "image"];
-var DEFAULT_CAPABILITIES = { research: "auto", image: "auto", result: "auto" };
-var CAPABILITY_CHOICES = {
-  research: TOGGLE_MODES,
-  image: TOGGLE_MODES,
-  result: RESULT_MODES
-};
-var CAPABILITY_CHOICE_HELP = {
-  research: { auto: "Search the web when it helps", on: "Always search first", off: "Never search the web" },
-  image: { auto: "Only when you ask for one", on: "Make an image (uses image credits)", off: "Never make images" },
-  result: {
-    auto: "Let the message decide",
-    summary: "Answer in the chat",
-    document: "A document (HTML and PDF)",
-    slides: "A slide deck (PPTX)",
-    page: "A web page (HTML)",
-    image: "An image"
-  }
-};
-function isToggle(value) {
-  return typeof value === "string" && TOGGLE_MODES.includes(value);
-}
-function isResult(value) {
-  return typeof value === "string" && RESULT_MODES.includes(value);
-}
-function parseCapabilityMode(key, value) {
-  const normalized = value.trim().toLowerCase();
-  const alias = key === "result" && (normalized === "doc" || normalized === "pdf") ? "document" : key === "result" && normalized === "deck" ? "slides" : normalized;
-  if (key === "result" ? isResult(alias) : isToggle(alias)) return alias;
-  throw usageError(`--${key} must be one of ${CAPABILITY_CHOICES[key].join(", ")}; got "${value}"`);
-}
-function sanitizeCapabilities(raw) {
-  const record = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
-  return {
-    research: isToggle(record.research) ? record.research : DEFAULT_CAPABILITIES.research,
-    image: isToggle(record.image) ? record.image : DEFAULT_CAPABILITIES.image,
-    result: isResult(record.result) ? record.result : DEFAULT_CAPABILITIES.result
-  };
-}
-function loadCapabilityPrefs(profileName) {
-  try {
-    const stored = loadConfig().profiles[profileName];
-    return sanitizeCapabilities(stored?.capabilities);
-  } catch {
-    return { ...DEFAULT_CAPABILITIES };
-  }
-}
-function saveCapabilityPrefs(profileName, capabilities) {
-  updateConfig((config) => {
-    config.profiles[profileName] = { ...config.profiles[profileName], capabilities: { ...capabilities } };
-  });
-}
-function resolveCapabilities(stored, flags = {}) {
-  return {
-    research: flags.research !== void 0 ? parseCapabilityMode("research", flags.research) : stored.research,
-    image: flags.image !== void 0 ? parseCapabilityMode("image", flags.image) : stored.image,
-    result: flags.result !== void 0 ? parseCapabilityMode("result", flags.result) : stored.result
-  };
-}
-function toWireCapabilities(capabilities) {
-  return { research: capabilities.research, image: capabilities.image, artifact: capabilities.result };
-}
-function deviceTimeZone() {
-  try {
-    const zone = Intl.DateTimeFormat().resolvedOptions().timeZone;
-    return typeof zone === "string" && zone ? zone : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function capabilityRequestFields(mode, capabilities, timezone = deviceTimeZone()) {
-  return {
-    ...mode === "employer" ? {} : { capabilities: toWireCapabilities(capabilities) },
-    ...timezone ? { timezone } : {}
-  };
-}
-var REASON_TEXT = {
-  disabled: "switched off on this server",
-  not_allowlisted: "not enabled for this account yet (canary or plan tier)",
-  not_configured: "the provider is not configured on this server",
-  upgrade_required: "needs a paid plan"
-};
-function reasonText(reason) {
-  return reason && REASON_TEXT[reason] || reason || "unavailable";
-}
-function unavailableNotices(capabilities, availability) {
-  if (!availability) return [];
-  const notices = [];
-  if (capabilities.research === "on" && !availability.research.available) {
-    notices.push(`Research is unavailable: ${reasonText(availability.research.reason)}. This message runs without it.`);
-  }
-  const wantsImage = capabilities.image === "on" || capabilities.result === "image";
-  if (wantsImage && !availability.image.available) {
-    notices.push(`Images are unavailable: ${reasonText(availability.image.reason)}. Tabbio answers in the chat instead.`);
-  }
-  const wantsFile = capabilities.result === "document" || capabilities.result === "slides" || capabilities.result === "page";
-  if (wantsFile && !availability.artifacts.available) {
-    notices.push(`Documents, slides and pages are unavailable: ${reasonText(availability.artifacts.reason)}. Tabbio answers in the chat instead.`);
-  }
-  return notices;
-}
-
-// src/core/chat-model.ts
-function initialChatState(opts) {
-  return {
-    mode: opts.mode,
-    threadId: opts.threadId,
-    modelId: opts.modelId,
-    entries: [],
-    turn: null,
-    approvals: [],
-    streaming: false,
-    seq: 0,
-    capabilities: opts.capabilities ?? { ...DEFAULT_CAPABILITIES },
-    links: opts.links ?? false
-  };
-}
-var FINAL_STAGES = /* @__PURE__ */ new Set(["completed", "failed", "declined"]);
-function toolTitle(payload) {
-  const raw = payload.display?.title?.trim() || payload.name.replace(/([a-z0-9])([A-Z])/g, "$1 $2");
-  return raw.split(/\s+/).map((w, i) => i === 0 ? w.charAt(0).toUpperCase() + w.slice(1) : /^[A-Z][a-z]/.test(w) ? w.toLowerCase() : w).join(" ");
-}
-function stageOf(payload, fallback) {
-  const stage = payload.stage ?? payload.status;
-  if (stage === "completed" || stage === "failed" || stage === "declined" || stage === "running") return stage;
-  if (stage === "pending_approval" || stage === "pending" || stage === "requires_approval") return "pending_approval";
-  return fallback;
-}
-function stableBoundary(text) {
-  let tokens;
-  try {
-    tokens = marked.lexer(text, { gfm: true });
-  } catch {
-    return 0;
-  }
-  let lastContent = -1;
-  tokens.forEach((token, i) => {
-    if (token.type !== "space") lastContent = i;
-  });
-  if (lastContent <= 0) return 0;
-  const prefix = tokens.slice(0, lastContent).map((t) => t.raw).join("");
-  if (!prefix || !text.startsWith(prefix) || !prefix.endsWith("\n")) return 0;
-  return prefix.length;
-}
-function normalizeText(text) {
-  return text.replace(/\s+/g, " ").trim();
-}
-function isDestructiveTool(name) {
-  return /(delete|remove|revoke|withdraw|unpublish|send|close|reject|archive)/i.test(name);
-}
-
 // src/core/schema-flags.ts
 import { Option } from "commander";
 
@@ -545,6 +421,167 @@ function exampleInvocation(tool, schema, commandPath = tool.commandPath) {
   return parts.join(" ");
 }
 
+// src/core/chat-model.ts
+import { marked } from "marked";
+
+// src/core/capabilities.ts
+var TOGGLE_MODES = ["auto", "on", "off"];
+var RESULT_MODES = ["auto", "summary", "document", "slides", "page", "image"];
+var DEFAULT_CAPABILITIES = { research: "auto", image: "auto", result: "auto" };
+var CAPABILITY_CHOICES = {
+  research: TOGGLE_MODES,
+  image: TOGGLE_MODES,
+  result: RESULT_MODES
+};
+var CAPABILITY_CHOICE_HELP = {
+  research: { auto: "Search the web when it helps", on: "Always search first", off: "Never search the web" },
+  image: { auto: "Only when you ask for one", on: "Make an image (uses image credits)", off: "Never make images" },
+  result: {
+    auto: "Let the message decide",
+    summary: "Answer in the chat",
+    document: "A document (HTML and PDF)",
+    slides: "A slide deck (PPTX)",
+    page: "A web page (HTML)",
+    image: "An image"
+  }
+};
+function isToggle(value) {
+  return typeof value === "string" && TOGGLE_MODES.includes(value);
+}
+function isResult(value) {
+  return typeof value === "string" && RESULT_MODES.includes(value);
+}
+function parseCapabilityMode(key, value) {
+  const normalized = value.trim().toLowerCase();
+  const alias = key === "result" && (normalized === "doc" || normalized === "pdf") ? "document" : key === "result" && normalized === "deck" ? "slides" : normalized;
+  if (key === "result" ? isResult(alias) : isToggle(alias)) return alias;
+  throw usageError(`--${key} must be one of ${CAPABILITY_CHOICES[key].join(", ")}; got "${value}"`);
+}
+function sanitizeCapabilities(raw) {
+  const record = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+  return {
+    research: isToggle(record.research) ? record.research : DEFAULT_CAPABILITIES.research,
+    image: isToggle(record.image) ? record.image : DEFAULT_CAPABILITIES.image,
+    result: isResult(record.result) ? record.result : DEFAULT_CAPABILITIES.result
+  };
+}
+function loadCapabilityPrefs(profileName) {
+  try {
+    const stored = loadConfig().profiles[profileName];
+    return sanitizeCapabilities(stored?.capabilities);
+  } catch {
+    return { ...DEFAULT_CAPABILITIES };
+  }
+}
+function saveCapabilityPrefs(profileName, capabilities) {
+  updateConfig((config) => {
+    config.profiles[profileName] = { ...config.profiles[profileName], capabilities: { ...capabilities } };
+  });
+}
+function resolveCapabilities(stored, flags = {}) {
+  return {
+    research: flags.research !== void 0 ? parseCapabilityMode("research", flags.research) : stored.research,
+    image: flags.image !== void 0 ? parseCapabilityMode("image", flags.image) : stored.image,
+    result: flags.result !== void 0 ? parseCapabilityMode("result", flags.result) : stored.result
+  };
+}
+function toWireCapabilities(capabilities) {
+  return { research: capabilities.research, image: capabilities.image, artifact: capabilities.result };
+}
+function deviceTimeZone() {
+  try {
+    const zone = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    return typeof zone === "string" && zone ? zone : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function capabilityRequestFields(mode, capabilities, timezone = deviceTimeZone()) {
+  return {
+    ...mode === "employer" ? {} : { capabilities: toWireCapabilities(capabilities) },
+    ...timezone ? { timezone } : {}
+  };
+}
+var REASON_TEXT = {
+  disabled: "switched off on this server",
+  not_allowlisted: "not enabled for this account yet (canary or plan tier)",
+  not_configured: "the provider is not configured on this server",
+  upgrade_required: "needs a paid plan"
+};
+function reasonText(reason) {
+  return reason && REASON_TEXT[reason] || reason || "unavailable";
+}
+function unavailableNotices(capabilities, availability) {
+  if (!availability) return [];
+  const notices = [];
+  if (capabilities.research === "on" && !availability.research.available) {
+    notices.push(`Research is unavailable: ${reasonText(availability.research.reason)}. This message runs without it.`);
+  }
+  const wantsImage = capabilities.image === "on" || capabilities.result === "image";
+  if (wantsImage && !availability.image.available) {
+    notices.push(`Images are unavailable: ${reasonText(availability.image.reason)}. Tabbio answers in the chat instead.`);
+  }
+  const wantsFile = capabilities.result === "document" || capabilities.result === "slides" || capabilities.result === "page";
+  if (wantsFile && !availability.artifacts.available) {
+    notices.push(`Documents, slides and pages are unavailable: ${reasonText(availability.artifacts.reason)}. Tabbio answers in the chat instead.`);
+  }
+  return notices;
+}
+
+// src/core/chat-model.ts
+function initialChatState(opts) {
+  return {
+    mode: opts.mode,
+    threadId: opts.threadId,
+    modelId: opts.modelId,
+    entries: [],
+    turn: null,
+    approvals: [],
+    streaming: false,
+    seq: 0,
+    capabilities: opts.capabilities ?? { ...DEFAULT_CAPABILITIES },
+    links: opts.links ?? false,
+    ...opts.appUrl ? { appUrl: opts.appUrl } : {}
+  };
+}
+var HIDDEN_TOOL_NAMES = /* @__PURE__ */ new Set(["updateWorkingMemory", "getWorkingMemory", "clearWorkingMemory"]);
+function isHiddenTool(name) {
+  return HIDDEN_TOOL_NAMES.has(name);
+}
+var FINAL_STAGES = /* @__PURE__ */ new Set(["completed", "failed", "declined"]);
+function toolTitle(payload) {
+  const raw = payload.display?.title?.trim() || payload.name.replace(/([a-z0-9])([A-Z])/g, "$1 $2");
+  return raw.split(/\s+/).map((w, i) => i === 0 ? w.charAt(0).toUpperCase() + w.slice(1) : /^[A-Z][a-z]/.test(w) ? w.toLowerCase() : w).join(" ");
+}
+function stageOf(payload, fallback) {
+  const stage = payload.stage ?? payload.status;
+  if (stage === "completed" || stage === "failed" || stage === "declined" || stage === "running") return stage;
+  if (stage === "pending_approval" || stage === "pending" || stage === "requires_approval") return "pending_approval";
+  return fallback;
+}
+function stableBoundary(text) {
+  let tokens;
+  try {
+    tokens = marked.lexer(text, { gfm: true });
+  } catch {
+    return 0;
+  }
+  let lastContent = -1;
+  tokens.forEach((token, i) => {
+    if (token.type !== "space") lastContent = i;
+  });
+  if (lastContent <= 0) return 0;
+  const prefix = tokens.slice(0, lastContent).map((t) => t.raw).join("");
+  if (!prefix || !text.startsWith(prefix) || !prefix.endsWith("\n")) return 0;
+  return prefix.length;
+}
+function normalizeText(text) {
+  return text.replace(/\s+/g, " ").trim();
+}
+function isDestructiveTool(name) {
+  return /(delete|remove|revoke|withdraw|unpublish|send|close|reject|archive)/i.test(name);
+}
+
 // src/ui/render.ts
 function isInteractiveTerminal(stdin = process.stdin, stdout = process.stdout) {
   return Boolean(stdin.isTTY && stdout.isTTY);
@@ -558,10 +595,250 @@ function assertInteractive(what = "This screen", stdin = process.stdin, stdout =
     exitCode: ExitCode.Usage
   });
 }
-async function renderScreen(what, build, opts = {}) {
-  assertInteractive(what);
-  const { mountScreen } = await import("./mount-NGUARMCL.js");
-  return mountScreen(build, opts);
+async function renderScreen(what, build, opts = {}) {
+  assertInteractive(what);
+  const { mountScreen } = await import("./mount-36JUVX3R.js");
+  return mountScreen(build, opts);
+}
+
+// src/commands/login.ts
+import open from "open";
+
+// src/core/prompt.ts
+import { createInterface } from "node:readline";
+function cancelled() {
+  return interruptedError();
+}
+function promptLine(question) {
+  return new Promise((resolve2, reject) => {
+    const rl = createInterface({ input: process.stdin, output: process.stderr, terminal: Boolean(process.stdin.isTTY) });
+    let answered = false;
+    rl.once("SIGINT", () => {
+      rl.close();
+      reject(cancelled());
+    });
+    rl.once("close", () => {
+      if (!answered) reject(usageError("No input received"));
+    });
+    rl.question(question, (answer) => {
+      answered = true;
+      rl.close();
+      resolve2(answer.trim());
+    });
+  });
+}
+function promptSecret(question) {
+  const stdin = process.stdin;
+  if (!stdin.isTTY || typeof stdin.setRawMode !== "function") return promptLine(question);
+  return new Promise((resolve2, reject) => {
+    let value = "";
+    process.stderr.write(question);
+    const wasRaw = stdin.isRaw;
+    stdin.setRawMode(true);
+    stdin.resume();
+    stdin.setEncoding("utf8");
+    const finish = (error) => {
+      stdin.off("data", onData);
+      stdin.setRawMode(wasRaw);
+      stdin.pause();
+      process.stderr.write("\n");
+      if (error) reject(error);
+      else resolve2(value.trim());
+    };
+    const onData = (chunk) => {
+      for (const char of chunk) {
+        if (char === "") return finish(cancelled());
+        if (char === "" && value === "") return finish(cancelled());
+        if (char === "\r" || char === "\n") return finish();
+        if (char === "\x7F" || char === "\b") {
+          if (value.length > 0) {
+            value = value.slice(0, -1);
+            process.stderr.write("\b \b");
+          }
+          continue;
+        }
+        if (char < " ") continue;
+        value += char;
+        process.stderr.write("\u2022");
+      }
+    };
+    stdin.on("data", onData);
+  });
+}
+async function confirm(question, opts = {}) {
+  if (opts.assumeYes) return true;
+  if (!process.stdin.isTTY) {
+    throw usageError(`${question} (needs confirmation)`, "Re-run with --yes to confirm non-interactively.");
+  }
+  const suffix = opts.defaultYes ? " [Y/n] " : " [y/N] ";
+  const answer = (await promptLine(`${question}${suffix}`)).toLowerCase();
+  if (!answer) return Boolean(opts.defaultYes);
+  return answer === "y" || answer === "yes";
+}
+
+// src/commands/login.ts
+async function readTokenFromStdin(stdin = process.stdin) {
+  if (stdin.isTTY) {
+    throw usageError("--with-token reads the token from stdin", "Pipe it in: `tabbio login --with-token < token.txt`.");
+  }
+  const chunks = [];
+  for await (const chunk of stdin) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));
+  const token = Buffer.concat(chunks).toString("utf8").trim();
+  if (!token) throw usageError("No token on stdin");
+  return token;
+}
+function persistProfileUrls(profile, sources) {
+  if (sources.apiUrl !== "flag" && sources.appUrl !== "flag") return;
+  updateConfig((config) => {
+    const current = config.profiles[profile.name] ?? {};
+    config.profiles[profile.name] = {
+      ...current,
+      ...sources.apiUrl === "flag" ? { apiUrl: profile.apiUrl } : {},
+      ...sources.appUrl === "flag" ? { appUrl: profile.appUrl } : {}
+    };
+  });
+}
+async function revokePrevious(profile, refreshToken, keep, fetchImpl) {
+  if (!refreshToken || refreshToken === keep) return;
+  await revokeSession(new ApiClient(profile, null, { persist: false, fetch: fetchImpl }), refreshToken).catch(
+    (error) => debug(`previous session not revoked: ${error.message}`)
+  );
+}
+async function saveAppSession(ctx, payload, opts = {}) {
+  const previous = loadStoredCredentials(ctx.profile.name);
+  const creds = credentialsFromLogin(ctx.profile, payload);
+  saveCredentials(creds);
+  clearCatalogCache(ctx.profile);
+  persistProfileUrls(ctx.profile, ctx.sources);
+  await revokePrevious(ctx.profile, previous?.refreshToken, payload.refreshToken, opts.fetch);
+  return creds;
+}
+async function saveTokenSession(ctx, rawToken, opts = {}) {
+  const token = rawToken.trim();
+  if (!token) throw usageError("No token entered");
+  const probe = { profile: ctx.profile.name, mcpToken: token };
+  const session = await McpSession.connect(ctx.profile, probe, opts.fetch ? { fetch: opts.fetch } : {});
+  let toolCount = 0;
+  let visibleTools = 0;
+  try {
+    const tools = await session.listTools({ refresh: true });
+    toolCount = tools.length;
+    visibleTools = tools.filter((t) => !t.hidden).length;
+  } finally {
+    await session.close();
+  }
+  const previous = loadStoredCredentials(ctx.profile.name);
+  saveCredentials(probe);
+  persistProfileUrls(ctx.profile, ctx.sources);
+  await revokePrevious(ctx.profile, previous?.refreshToken, void 0, opts.fetch);
+  return { token, toolCount, visibleTools };
+}
+function describeUser(user) {
+  if (!user) return "your account";
+  return user.name ? `${user.name} <${user.email}>` : user.email;
+}
+async function loginWithToken(ctx, rawToken) {
+  if (!rawToken.trim().startsWith("tabbio_mcp_")) {
+    warn("This is not a tabbio_mcp_ token; treating it as an OAuth access token.");
+  }
+  const { token, toolCount } = await saveTokenSession(ctx, rawToken);
+  if (ctx.globals.json) {
+    printJson({
+      profile: ctx.profile.name,
+      method: "token",
+      user: null,
+      mcp: { kind: "personal-token", token: fingerprint(token) },
+      tools: toolCount
+    });
+    return;
+  }
+  writeOut(successLine(`Token accepted \xB7 ${toolCount} tools available \xB7 profile ${ctx.profile.name}`));
+  writeOut(theme.dim("  MCP-only mode: `tabbio chat` and approving actions need `tabbio login` (browser or --email)."));
+}
+async function obtainSession(ctx, method, opts) {
+  const api = new ApiClient(ctx.profile, null, { persist: false });
+  if (method === "email") {
+    const email = opts.email?.trim() || await promptLine("Email: ");
+    info(`Sending a sign-in code to ${email}\u2026`);
+    return loginWithEmailOtp(api, {
+      email,
+      promptCode: (attempt) => promptSecret(attempt === 1 ? "Enter the 6-digit code: " : "Try the code again: "),
+      onInvalidCode: (left) => warn(`That code did not match. ${left} attempt${left === 1 ? "" : "s"} left.`)
+    });
+  }
+  const agentMode = Boolean(opts.nonInteractive);
+  if (!agentMode) info(`Connecting this computer (${deviceLabel()}) to Tabbio\u2026`);
+  const controller = new AbortController();
+  const onSigint = () => controller.abort();
+  process.once("SIGINT", onSigint);
+  try {
+    return await loginWithBrowser(api, {
+      device: deviceLabel(),
+      signal: controller.signal,
+      openUrl: async (url) => {
+        if (agentMode) return false;
+        try {
+          await open(url);
+          return true;
+        } catch {
+          return false;
+        }
+      },
+      onWaiting: (url, opened, details) => {
+        if (agentMode) {
+          printJson({ url, state: details.state, expiresAt: details.expiresAt });
+          return;
+        }
+        info(opened ? theme.dim("If your browser did not open, visit:") : "Open this URL to continue:");
+        info(`  ${theme.accent(url)}`);
+        info(theme.dim("Waiting for you to approve in the browser\u2026 (Ctrl-C to cancel)"));
+      }
+    });
+  } finally {
+    process.off("SIGINT", onSigint);
+  }
+}
+async function runLogin(opts, cmd) {
+  const ctx = createCommandContext(cmd);
+  if (opts.nonInteractive) ctx.globals.json = true;
+  const method = chooseLoginMethod({
+    browser: opts.browser,
+    email: opts.email,
+    token: opts.token,
+    withToken: opts.withToken,
+    nonInteractive: opts.nonInteractive,
+    isTTY: Boolean(process.stdin.isTTY && process.stderr.isTTY),
+    hasDisplay: hasDisplay()
+  });
+  if (method === "token") {
+    return loginWithToken(ctx, opts.withToken ? await readTokenFromStdin() : opts.token ?? "");
+  }
+  const payload = await obtainSession(ctx, method, opts);
+  const creds = await saveAppSession(ctx, payload);
+  if (ctx.globals.json) {
+    printJson({
+      profile: ctx.profile.name,
+      method,
+      apiUrl: ctx.profile.apiUrl,
+      user: creds.user ?? null,
+      mcp: { kind: "app-session" }
+    });
+    return;
+  }
+  writeOut(successLine(`Signed in as ${theme.bold(describeUser(creds.user))} \xB7 profile ${ctx.profile.name}`));
+  if (process.env.TABBIO_TOKEN) {
+    warn("TABBIO_TOKEN is set, so tool commands keep using that personal token.");
+  }
+  writeOut(theme.dim("  Next: tabbio (home) \xB7 tabbio chat \xB7 tabbio tools \xB7 tabbio status"));
+}
+function registerLoginCommand(program) {
+  program.command("login").description("Sign in (browser by default; --email for SSH/headless; --token for MCP-only)").option("--browser", "Approve this computer in your browser").option("--email <address>", "Sign in with a one-time code sent to this email").option("--token <token>", "Use a personal MCP token (tabbio_mcp_\u2026); tool commands only").option("--with-token", "Read a personal MCP token from stdin (CI)").option(
+    "--non-interactive",
+    'For agents: print {"url","state","expiresAt"} as JSON, wait for the browser approval, never prompt'
+  ).addHelpText(
+    "after",
+    "\nThe browser flow opens <app-url>/cli/connect and receives the session on 127.0.0.1.\nEnvironment: TABBIO_TOKEN / TABBIO_ACCESS_TOKEN override stored credentials (never saved)."
+  ).action(async (opts, cmd) => runLogin(opts, cmd));
 }
 
 // src/ui/hooks.ts
@@ -594,7 +871,7 @@ var ISO_DATE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}/;
 function isRowList(value) {
   return Array.isArray(value) && value.length > 0 && value.every(isRecord3);
 }
-function displayWidth(text) {
+function displayWidth2(text) {
   let width = 0;
   for (const char of text) {
     const code = char.codePointAt(0) ?? 0;
@@ -605,14 +882,14 @@ function displayWidth(text) {
   }
   return width;
 }
-function truncate(text, max) {
-  if (displayWidth(text) <= max) return text;
+function truncate2(text, max) {
+  if (displayWidth2(text) <= max) return text;
   const ellipsis = theme.symbols.ellipsis;
-  const budget = Math.max(0, max - displayWidth(ellipsis));
+  const budget = Math.max(0, max - displayWidth2(ellipsis));
   let out = "";
   let width = 0;
   for (const char of text) {
-    const w = displayWidth(char);
+    const w = displayWidth2(char);
     if (width + w > budget) break;
     out += char;
     width += w;
@@ -620,7 +897,7 @@ function truncate(text, max) {
   return `${out}${ellipsis}`;
 }
 function pad(text, width, align) {
-  const fill = " ".repeat(Math.max(0, width - displayWidth(text)));
+  const fill = " ".repeat(Math.max(0, width - displayWidth2(text)));
   return align === "right" ? `${fill}${text}` : `${text}${fill}`;
 }
 function compactJson(value) {
@@ -724,10 +1001,10 @@ function formatTable(rows, opts = {}) {
   const columns = pickColumns(rows, opts.fields);
   if (columns.length === 0) return rows.map((r) => compactJson(r));
   const cells = rows.map((row) => columns.map((c) => humanCell(getPath(row, c.key), opts.now)));
-  const natural = columns.map((c, i) => Math.max(displayWidth(c.label), ...cells.map((r) => displayWidth(r[i]))));
+  const natural = columns.map((c, i) => Math.max(displayWidth2(c.label), ...cells.map((r) => displayWidth2(r[i]))));
   const widths = fitWidths(natural, opts.width);
   const line = (values, style) => values.map((v, i) => {
-    const text = pad(truncate(v, widths[i]), widths[i], columns[i].align);
+    const text = pad(truncate2(v, widths[i]), widths[i], columns[i].align);
     return style ? style(text) : text;
   }).join("  ").trimEnd();
   return [line(columns.map((c) => c.label), theme.dim), ...cells.map((r) => line(r))];
@@ -736,7 +1013,7 @@ function formatKv(value, opts = {}) {
   const keys = opts.fields?.length ? [...opts.fields] : Object.keys(value);
   const rows = keys.map((key) => [key, getPath(value, key)]).filter(([, v]) => v !== void 0);
   if (rows.length === 0) return [theme.dim("(empty)")];
-  const width = Math.max(...rows.map(([k]) => displayWidth(k)));
+  const width = Math.max(...rows.map(([k]) => displayWidth2(k)));
   const lines = [];
   for (const [key, raw] of rows) {
     const label = theme.dim(pad(key, width, "left"));
@@ -747,7 +1024,7 @@ function formatKv(value, opts = {}) {
       continue;
     }
     const text = isScalar(raw) || Array.isArray(raw) && raw.every(isScalar) ? humanCell(raw, opts.now) : compactJson(raw);
-    lines.push(`${label}  ${truncate(text, 100)}`);
+    lines.push(`${label}  ${truncate2(text, 100)}`);
   }
   return lines;
 }
@@ -784,8 +1061,8 @@ function findListWrapper(value) {
   if (arrays.length !== 1) return null;
   const [key, list] = arrays[0];
   if (list.length === 0) {
-    const counted = COUNT_KEYS.some((k) => typeof value[k] === "number");
-    return counted || Object.keys(value).length === 1 ? { key, rows: [] } : null;
+    const counted2 = COUNT_KEYS.some((k) => typeof value[k] === "number");
+    return counted2 || Object.keys(value).length === 1 ? { key, rows: [] } : null;
   }
   return list.every(isRecord3) ? { key, rows: list } : null;
 }
@@ -869,7 +1146,7 @@ function formatResultHeader(tool, meta) {
   const name = (tool.commandPath?.length ? tool.commandPath.join(" ") : tool.id).trim();
   const right = [formatDuration(meta.durationMs), meta.requestId ? `req ${shortId(meta.requestId)}` : null].filter(Boolean).join(" \xB7 ");
   const width = Math.min(meta.width ?? 80, 100);
-  const used = displayWidth(theme.symbols.success) + 1 + displayWidth(name) + 2 + displayWidth(right) + 1;
+  const used = displayWidth2(theme.symbols.success) + 1 + displayWidth2(name) + 2 + displayWidth2(right) + 1;
   const rule = theme.symbols.line.repeat(Math.max(3, width - used));
   return `${theme.success(theme.symbols.success)} ${theme.bold(name)} ${theme.accent(rule)} ${theme.dim(right)}`;
 }
@@ -946,6 +1223,7 @@ function artifactFromResult(result) {
     title: str(result.title) ?? "Untitled",
     status,
     ...typeof result.versionNumber === "number" ? { versionNumber: result.versionNumber } : {},
+    ...str(result.versionId) ? { versionId: str(result.versionId) } : {},
     ...typeof result.previewAvailable === "boolean" ? { previewAvailable: result.previewAvailable } : {},
     ...failure ? { failure } : {}
   };
@@ -1062,6 +1340,7 @@ function previewVariantFor(kind) {
 }
 
 // src/core/artifacts.ts
+import { randomUUID } from "node:crypto";
 import { createWriteStream, existsSync, renameSync, rmSync, statSync } from "node:fs";
 import { join } from "node:path";
 import { Readable } from "node:stream";
@@ -1076,8 +1355,11 @@ function listArtifacts(api, query = {}) {
   const qs = params.toString();
   return api.json(`${BASE}${qs ? `?${qs}` : ""}`);
 }
-function getArtifact(api, id) {
-  return api.json(`${BASE}/${enc(id)}`);
+function getArtifact(api, id, signal) {
+  return api.json(`${BASE}/${enc(id)}`, { signal });
+}
+function getArtifactVersion(api, id, versionId, signal) {
+  return api.json(`${BASE}/${enc(id)}/versions/${enc(versionId)}`, { signal });
 }
 function previewUrl(api, id, opts) {
   const params = new URLSearchParams({ variant: opts.variant, ...opts.theme ? { theme: opts.theme } : {}, ...opts.versionId ? { versionId: opts.versionId } : {} });
@@ -1085,7 +1367,7 @@ function previewUrl(api, id, opts) {
 }
 function downloadUrl(api, id, opts) {
   const params = new URLSearchParams({ variant: opts.variant, ...opts.versionId ? { versionId: opts.versionId } : {} });
-  return api.json(`${BASE}/${enc(id)}/download-url?${params.toString()}`);
+  return api.json(`${BASE}/${enc(id)}/download-url?${params.toString()}`, { signal: opts.signal });
 }
 function listVersions(api, id, opts = {}) {
   const params = new URLSearchParams({ ...opts.limit ? { limit: String(opts.limit) } : {}, ...opts.cursor ? { cursor: opts.cursor } : {} });
@@ -1132,7 +1414,44 @@ function resolveOutputPath(out, fileName, cwd = process.cwd()) {
 var WAIT_POLL_START_MS = 2e3;
 var WAIT_POLL_MAX_MS = 5e3;
 var DEFAULT_ARTIFACT_WAIT_MS = 5 * 6e4;
-var defaultSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var defaultSleep = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
+function assertNotCancelled(signal) {
+  if (signal?.aborted) throw interruptedError("File save cancelled");
+}
+function sleepUntilPoll(ms, sleep, signal) {
+  if (!signal) return sleep(ms);
+  assertNotCancelled(signal);
+  return new Promise((resolve2, reject) => {
+    const onAbort = () => {
+      clearTimeout(timer);
+      signal.removeEventListener("abort", onAbort);
+      reject(interruptedError("File save cancelled"));
+    };
+    let timer;
+    signal.addEventListener("abort", onAbort, { once: true });
+    if (signal.aborted) {
+      onAbort();
+      return;
+    }
+    if (sleep === defaultSleep) {
+      timer = setTimeout(() => {
+        signal.removeEventListener("abort", onAbort);
+        resolve2();
+      }, ms);
+    } else {
+      sleep(ms).then(
+        () => {
+          signal.removeEventListener("abort", onAbort);
+          resolve2();
+        },
+        (error) => {
+          signal.removeEventListener("abort", onAbort);
+          reject(error);
+        }
+      );
+    }
+  });
+}
 async function waitForArtifact(fetchStatus, opts = {}) {
   const sleep = opts.sleep ?? defaultSleep;
   const now = opts.now ?? Date.now;
@@ -1140,8 +1459,10 @@ async function waitForArtifact(fetchStatus, opts = {}) {
   let interval = WAIT_POLL_START_MS;
   let last = null;
   for (let attempt = 1; ; attempt += 1) {
+    assertNotCancelled(opts.signal);
     try {
       last = await fetchStatus();
+      assertNotCancelled(opts.signal);
       opts.onPoll?.({ status: last.status, attempt });
       if (last.status !== "pending") return { artifact: last, timedOut: false };
     } catch (error) {
@@ -1149,7 +1470,7 @@ async function waitForArtifact(fetchStatus, opts = {}) {
     }
     const remaining = deadline - now();
     if (remaining <= 0) return { artifact: last, timedOut: true };
-    await sleep(Math.min(interval, remaining));
+    await sleepUntilPoll(Math.min(interval, remaining), sleep, opts.signal);
     interval = Math.min(WAIT_POLL_MAX_MS, Math.round(interval * 1.5));
   }
 }
@@ -1180,7 +1501,7 @@ async function downloadToFile(url, dest, opts = {}) {
   }
   const totalHeader = Number(response.headers.get("content-length"));
   const total = Number.isFinite(totalHeader) && totalHeader > 0 ? totalHeader : null;
-  const temp = `${dest}.part-${process.pid}`;
+  const temp = `${dest}.part-${randomUUID()}`;
   let received = 0;
   const source = Readable.fromWeb(response.body);
   source.on("data", (chunk) => {
@@ -1188,7 +1509,8 @@ async function downloadToFile(url, dest, opts = {}) {
     opts.onProgress?.({ received, total });
   });
   try {
-    await pipeline(source, createWriteStream(temp, { mode: 420 }), { signal: opts.signal });
+    await pipeline(source, createWriteStream(temp, { flags: "wx", mode: 384 }), { signal: opts.signal });
+    assertNotCancelled(opts.signal);
     if (existsSync(dest) && !opts.force) throw new CliError({ code: "FILE_EXISTS", message: `${dest} already exists`, exitCode: ExitCode.Usage });
     renameSync(temp, dest);
   } catch (error) {
@@ -1198,6 +1520,150 @@ async function downloadToFile(url, dest, opts = {}) {
   return { path: dest, bytes: received, contentType: response.headers.get("content-type") };
 }
 
+// src/core/artifact-save.ts
+import { existsSync as existsSync2, mkdirSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { isAbsolute, join as join2, relative, resolve, sep } from "node:path";
+var CV_EXPORT_FORMATS = ["pdf", "docx", "txt", "md"];
+function artifactsDir(env = process.env, cwd = process.cwd()) {
+  const custom = env.TABBIO_ARTIFACTS_DIR?.trim();
+  return custom ? resolve(cwd, custom) : join2(cwd, "tabbio-artifacts");
+}
+function autoSaveDisabled(env = process.env) {
+  const value = env.TABBIO_NO_ARTIFACT_SAVE?.trim().toLowerCase();
+  return Boolean(value && value !== "0" && value !== "false" && value !== "no");
+}
+function ensureDir(dir) {
+  mkdirSync(dir, { recursive: true, mode: 448 });
+}
+function artifactBaseName(title, id) {
+  const slug = title.normalize("NFKC").toLowerCase().replace(/[^\p{L}\p{N}]+/gu, "-").replace(/^-+|-+$/g, "").slice(0, 60).replace(/-+$/, "") || "artifact";
+  const short = id.replace(/[^A-Za-z0-9]/g, "").slice(-6).toLowerCase();
+  return short ? `${slug}-${short}` : slug;
+}
+function uniquePath(dir, base, ext) {
+  const suffix = ext ? `.${ext}` : "";
+  let candidate = join2(dir, `${base}${suffix}`);
+  for (let n = 2; existsSync2(candidate); n += 1) candidate = join2(dir, `${base}-${n}${suffix}`);
+  return candidate;
+}
+function displayPath(path, cwd = process.cwd(), home = homedir()) {
+  const rel = relative(cwd, path);
+  if (rel && !rel.startsWith("..") && !isAbsolute(rel)) return `.${sep}${rel}`;
+  const fromHome = relative(home, path);
+  if (home && fromHome && !fromHome.startsWith("..") && !isAbsolute(fromHome)) return `~${sep}${fromHome}`;
+  return path;
+}
+function formatBytes(bytes) {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 * 1024) return `${Math.max(1, Math.round(bytes / 1024))} KB`;
+  return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+}
+var TEXT_EXTENSIONS = /* @__PURE__ */ new Set(["html", "htm", "md", "markdown", "txt", "csv", "json", "svg", "css", "js"]);
+function isTextFile(path) {
+  const ext = path.split(".").pop()?.toLowerCase() ?? "";
+  return TEXT_EXTENSIONS.has(ext);
+}
+function variantsToSave(artifact) {
+  const v = artifact.variants ?? { html: false, pdf: false, pptx: false, image: false, thumbnail: false };
+  switch (artifact.kind) {
+    case "page":
+      return ["html"];
+    case "image":
+      return ["image"];
+    case "slides":
+      return v.pptx ? ["pptx"] : [defaultVariantFor(artifact)];
+    case "document": {
+      const both = ["html", "pdf"].filter((variant) => v[variant]);
+      return both.length ? [...both] : [defaultVariantFor(artifact)];
+    }
+    default:
+      return [defaultVariantFor(artifact)];
+  }
+}
+function notReadyError(id, failed, message) {
+  return failed ? new CliError({ code: "ARTIFACT_FAILED", message: message ?? "No file was made", exitCode: ExitCode.Error }) : new CliError({
+    code: "ARTIFACT_NOT_READY",
+    message: "This file is still being created",
+    hint: `Wait for it with \`tabbio artifacts wait ${id}\`, then save it again.`,
+    exitCode: ExitCode.Error
+  });
+}
+async function saveArtifactToDisk(ctx, artifactId, opts = {}) {
+  const signal = combineSignals(activeCommandSignal, opts.signal);
+  const [artifact, version] = await Promise.all([
+    getArtifact(ctx.api, artifactId, signal),
+    opts.versionId ? getArtifactVersion(ctx.api, artifactId, opts.versionId, signal) : Promise.resolve(null)
+  ]);
+  const status = version?.status ?? artifact.status;
+  if (status !== "ready") throw notReadyError(artifactId, status === "failed", version?.error?.message ?? artifact.error?.message);
+  if (signal.aborted) throw new CliError({ code: "INTERRUPTED", message: "File save cancelled", exitCode: ExitCode.Interrupted });
+  const variants = opts.formats?.length ? [...new Set(opts.formats.map(formatToVariant))] : variantsToSave({ kind: artifact.kind, variants: version?.variants ?? artifact.variants });
+  const dir = opts.dir ? resolve(opts.dir) : artifactsDir();
+  ensureDir(dir);
+  const base = artifactBaseName(artifact.title, artifact.id || artifactId);
+  const saved = [];
+  for (const [i, variant] of variants.entries()) {
+    try {
+      const signed = await downloadUrl(ctx.api, artifactId, { variant, versionId: opts.versionId, signal });
+      const dest = uniquePath(dir, base, extensionFor(variant, signed.contentType));
+      const file = await downloadToFile(signed.url, dest, { signal });
+      saved.push({ path: file.path, bytes: file.bytes, kind: variant });
+    } catch (error) {
+      if (i === 0 || !isCliError(error) || error.code !== "ARTIFACT_NOT_READY") throw error;
+    }
+  }
+  return saved;
+}
+function isMainCv(cvId) {
+  const id = cvId?.trim().toLowerCase() ?? "";
+  return !id || id === "master" || id === "main";
+}
+function dispositionBaseName(header) {
+  if (!header) return null;
+  const star = /filename\*\s*=\s*(?:UTF-8'')?([^;]+)/i.exec(header)?.[1];
+  const plain = /filename\s*=\s*"?([^";]+)"?/i.exec(header)?.[1];
+  let name = star ?? plain;
+  if (!name) return null;
+  try {
+    name = decodeURIComponent(name.trim().replace(/^"|"$/g, ""));
+  } catch {
+    name = name.trim();
+  }
+  const base = name.split(/[\\/]/).pop()?.replace(/\.[A-Za-z0-9]{1,5}$/, "").normalize("NFKC").replace(/[^\p{L}\p{N}._-]+/gu, "-").replace(/^[-.]+|[-.]+$/g, "").slice(0, 80);
+  return base || null;
+}
+async function saveCvExportToDisk(ctx, cvId, opts = {}) {
+  const signal = combineSignals(activeCommandSignal, opts.signal);
+  const format = (opts.format ?? "pdf").trim().toLowerCase().replace(/^\./, "");
+  if (!CV_EXPORT_FORMATS.includes(format)) {
+    throw usageError(`CV exports are ${CV_EXPORT_FORMATS.join(", ")}; got "${opts.format}"`);
+  }
+  const main = isMainCv(cvId);
+  const path = main ? `/api/cv/export/${format}` : `/api/cv/${encodeURIComponent(String(cvId))}/export/${format}`;
+  const response = await ctx.api.raw(path, { method: "GET", headers: { accept: "*/*" }, timeoutMs: 18e4, signal });
+  if (!response.ok) {
+    await parseJsonResponse(response);
+    throw new CliError({ code: "EXPORT_FAILED", message: `The CV export failed (HTTP ${response.status})`, exitCode: ExitCode.Server });
+  }
+  if (signal.aborted) throw new CliError({ code: "INTERRUPTED", message: "File save cancelled", exitCode: ExitCode.Interrupted });
+  const dir = opts.dir ? resolve(opts.dir) : artifactsDir();
+  ensureDir(dir);
+  const fallback = main ? "main-cv" : artifactBaseName("cv", String(cvId));
+  const base = dispositionBaseName(response.headers.get("content-disposition")) ?? fallback;
+  const dest = uniquePath(dir, base, format);
+  const url = `${ctx.api.profile.apiUrl}${path}`;
+  const file = await downloadToFile(url, dest, { fetch: async () => response, signal });
+  return { path: file.path, bytes: file.bytes, kind: format };
+}
+async function readSavedPreview(path, maxLines = 12) {
+  const text = await readFile(path, "utf8");
+  const lines = text.replace(/\r\n?/g, "\n").split("\n");
+  if (lines.length > 1 && lines[lines.length - 1] === "") lines.pop();
+  return { lines: lines.slice(0, Math.max(0, maxLines)), total: lines.length };
+}
+
 // src/ui/hyperlink.ts
 function supportsHyperlinks(env = process.env, isTTY = Boolean(process.stdout.isTTY)) {
   const forced = env.FORCE_HYPERLINK?.trim();
@@ -1334,6 +1800,718 @@ function parseStreamEvent(data) {
   }
 }
 
+// ../../packages/utils/src/public-url.ts
+var DEFAULT_PUBLIC_SITE_URL = "https://www.tabbio.com";
+var DEFAULT_PUBLIC_DOMAIN = "tabbio.com";
+var RESERVED_PUBLIC_SUBDOMAINS = [
+  "www",
+  "app",
+  "api",
+  "server",
+  "v2",
+  "beta",
+  "beta-api",
+  "staging",
+  "admin",
+  // The partner portal is its own app on partners.tabbio.com. Reserving the
+  // label keeps it out of the handle space so no user or company can claim it
+  // and shadow the host through wildcard DNS.
+  "partners",
+  "mail",
+  "cdn",
+  "static",
+  "assets",
+  "jobs",
+  "companies",
+  "support",
+  "help",
+  // Public skill share pages (skills.tabbio.com/<skillId>); reserving both
+  // labels keeps the singular from ever resolving as a profile handle.
+  "skills",
+  "skill",
+  // The public CV Health check (cvhealth.tabbio.com, served by apps/web). The
+  // hyphenated spelling is reserved with it so neither can become a handle
+  // that reads as the first-party check.
+  "cvhealth",
+  "cv-health",
+  // apps/docs and apps/changelog run on their own hosts. Both labels were
+  // already blocked at signup by RESERVED_USERNAMES, so handle registration
+  // was never exposed - but this list is what governs host semantics, and a
+  // label that names a first-party deployment must not be handle-like here
+  // either. Keeping the two lists in agreement is what stops a subdomain from
+  // being routed as a profile.
+  "docs",
+  "changelog",
+  // The developer portal (apps/developer) runs on developer.tabbio.com. The two
+  // near-misses are reserved with it: a handle at developers.* or dev.* would
+  // read as a first-party developer surface without being one.
+  "developer",
+  "developers",
+  "dev",
+  // The developer platform (apps/platform) runs on platform.tabbio.com, and the
+  // admin console (apps/admin) on console.tabbio.com. `dashboard` is the
+  // near-miss reserved with them: a handle there would read as a first-party
+  // control surface without being one.
+  "platform",
+  "console",
+  "dashboard"
+];
+var RESERVED_PUBLIC_SUBDOMAIN_SET = new Set(
+  RESERVED_PUBLIC_SUBDOMAINS
+);
+function normalizeBaseUrl(baseUrl, fallback) {
+  const clean = typeof baseUrl === "string" && baseUrl.trim().length > 0 ? baseUrl.trim() : fallback;
+  return clean.endsWith("/") ? clean.slice(0, -1) : clean;
+}
+function getLocalPublicBaseUrl(baseUrl) {
+  const normalized = normalizeBaseUrl(baseUrl, DEFAULT_PUBLIC_SITE_URL);
+  try {
+    const parsed = new URL(
+      normalized.startsWith("http://") || normalized.startsWith("https://") ? normalized : `https://${normalized}`
+    );
+    const hostname = parsed.hostname.toLowerCase();
+    if (hostname === "localhost" || hostname.endsWith(".localhost") || hostname === "127.0.0.1" || hostname === "[::1]" || hostname === "::1") {
+      return parsed.origin;
+    }
+  } catch {
+    return null;
+  }
+  return null;
+}
+function getPublicRootDomain(value = DEFAULT_PUBLIC_DOMAIN) {
+  const clean = normalizeBaseUrl(value, DEFAULT_PUBLIC_DOMAIN).replace(/^https?:\/\//, "").split("/")[0].toLowerCase();
+  if (!clean) {
+    return DEFAULT_PUBLIC_DOMAIN;
+  }
+  try {
+    const parsed = new URL(
+      clean.includes("://") ? clean : `https://${clean}`
+    );
+    return parsed.host.toLowerCase().replace(/^www\./, "");
+  } catch {
+    return clean.replace(/^www\./, "");
+  }
+}
+function normalizePublicHandle(handle) {
+  return typeof handle === "string" ? handle.trim().replace(/^@+/, "").replace(/_/g, "-").toLowerCase() : "";
+}
+function buildPersonCvUrl(handle, domain = DEFAULT_PUBLIC_DOMAIN, locale) {
+  const normalized = normalizePublicHandle(handle);
+  const localPublicBaseUrl = getLocalPublicBaseUrl(domain);
+  const normalizedLocale = typeof locale === "string" ? locale.trim().replace(/^\/+|\/+$/g, "") : "";
+  if (localPublicBaseUrl) {
+    return `${localPublicBaseUrl}/${encodeURIComponent(normalized)}/cv`;
+  }
+  const rootDomain = getPublicRootDomain(domain);
+  const base = `https://${normalized}.${rootDomain}`;
+  return normalizedLocale ? `${base}/${encodeURIComponent(normalizedLocale)}` : base;
+}
+
+// src/core/chat-card-fields.ts
+function isRec(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function rec(value) {
+  return isRec(value) ? value : void 0;
+}
+function str2(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function num(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function listOf(result, ...keys) {
+  if (Array.isArray(result)) return result.filter(isRec);
+  const record = rec(result);
+  if (!record) return [];
+  for (const key of keys) {
+    const value = record[key];
+    if (Array.isArray(value)) return value.filter(isRec);
+  }
+  return [];
+}
+function httpUrl(value) {
+  const text = str2(value);
+  return text && !/[\u0000-\u001f\u007f-\u009f]/.test(text) && /^https?:\/\/\S+$/i.test(text) ? text : void 0;
+}
+function publicSiteUrl(appUrl) {
+  try {
+    const url = new URL(appUrl);
+    if (["localhost", "127.0.0.1", "[::1]", "::1"].includes(url.hostname)) return "http://localhost:3000";
+    const host = url.hostname.startsWith("app.") ? url.hostname.slice(4) : url.hostname;
+    return `${url.protocol}//${host}${url.port ? `:${url.port}` : ""}`;
+  } catch {
+    return "https://tabbio.com";
+  }
+}
+function companyName(job) {
+  const company = job.company;
+  return (isRec(company) ? str2(company.name) : str2(company)) ?? str2(job.companyName);
+}
+function jobLink(job, siteUrl) {
+  const source = rec(job.sourceInfo);
+  const direct = httpUrl(job.applicationUrl) ?? httpUrl(job.applyUrl) ?? httpUrl(source?.directApplyUrl) ?? httpUrl(source?.sourceUrl);
+  if (direct) return direct;
+  const slug = str2(job.publicSlug) ?? str2(job.slug);
+  if (slug) return `${siteUrl}/en/jobs/${encodeURIComponent(slug)}`;
+  return httpUrl(job.canonicalUrl);
+}
+function matchLabel(score) {
+  const value = num(score);
+  if (value === void 0 || value <= 0) return void 0;
+  return `${Math.round(value <= 1 ? value * 100 : value)}% match`;
+}
+function when(value, now) {
+  const text = typeof value === "string" ? value : value instanceof Date ? value.toISOString() : void 0;
+  if (!text) return void 0;
+  const date = new Date(text);
+  return Number.isNaN(date.getTime()) ? void 0 : relativeTime(date, now);
+}
+var DAYS = ["Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"];
+function scheduleLabel(cron) {
+  const text = str2(cron);
+  if (!text) return void 0;
+  const parts = text.split(/\s+/);
+  if (parts.length !== 5) return text;
+  const [minute, hour, dom, month, dow] = parts;
+  const time = /^\d+$/.test(minute) && /^\d+$/.test(hour) ? `${hour.padStart(2, "0")}:${minute.padStart(2, "0")}` : null;
+  if (/^\d+$/.test(minute) && hour === "*" && dom === "*" && month === "*" && dow === "*") return "hourly";
+  if (time && dom === "*" && month === "*" && dow === "*") return `daily ${time}`;
+  if (time && dom === "*" && month === "*" && /^[0-6]$/.test(dow)) return `weekly ${DAYS[Number(dow)]} ${time}`;
+  if (time && dom === "*" && month === "*" && dow === "1-5") return `weekdays ${time}`;
+  if (time && /^\d+$/.test(dom) && month === "*" && dow === "*") return `monthly on day ${dom} ${time}`;
+  return text;
+}
+function excerpt(value, max = 320) {
+  const text = str2(value);
+  if (!text) return void 0;
+  const flat = text.replace(/\s+/g, " ");
+  return flat.length > max ? `${flat.slice(0, max - 1).trimEnd()}\u2026` : flat;
+}
+function humanKey(key) {
+  const words = key.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim().toLowerCase();
+  return words.charAt(0).toUpperCase() + words.slice(1);
+}
+function scalarLabel(value) {
+  if (value === null || value === void 0) return void 0;
+  if (typeof value === "boolean") return value ? "yes" : "no";
+  if (typeof value === "number") return Number.isFinite(value) ? String(value) : void 0;
+  if (typeof value === "string") return value.trim() ? value.replace(/\s+/g, " ").trim() : void 0;
+  if (Array.isArray(value)) return `${value.length} ${value.length === 1 ? "item" : "items"}`;
+  if (isRec(value)) {
+    const name = str2(value.title) ?? str2(value.name) ?? str2(value.label);
+    if (name) return name;
+    const n = Object.keys(value).length;
+    return n ? `${n} ${n === 1 ? "field" : "fields"}` : void 0;
+  }
+  return void 0;
+}
+
+// src/core/chat-card-kinds.ts
+var MAX_CARD_ROWS = 8;
+function card(kind, title, rows, extra = {}) {
+  const links = rows.flatMap((row) => row.link ? [row.link] : []);
+  return { kind, title, rows, links, ...extra };
+}
+function counted(noun, shown, total) {
+  return total > shown ? `${noun} \xB7 ${shown} of ${total}` : `${noun} \xB7 ${total}`;
+}
+function jobRow(job, n, opts) {
+  const title = str2(job.title) ?? "Untitled role";
+  const url = jobLink(job, opts.siteUrl);
+  const id = str2(job.id);
+  const meta = [
+    companyName(job),
+    str2(job.location),
+    str2(job.workMode),
+    str2(job.type),
+    matchLabel(job.matchScore),
+    job.applied === true ? "applied" : void 0,
+    when(job.postedAt, opts.now),
+    url ? void 0 : "no link"
+  ].filter((part) => Boolean(part));
+  const link = url ? { n, label: title, url, ...id ? { jobId: id, jobTitle: title } : {} } : void 0;
+  return { n, title, meta, ...link ? { link } : {}, ...id ? { job: { id, title } } : {} };
+}
+function jobListCard(result, opts) {
+  const jobs = listOf(result, "jobs", "items", "savedJobs");
+  if (!jobs.length) return null;
+  const total = num(rec(result)?.total) ?? jobs.length;
+  const rows = jobs.slice(0, MAX_CARD_ROWS).map((job, i) => jobRow(rec(job.job) ?? job, i + 1, opts));
+  return card("job-list", counted("Jobs", rows.length, Math.max(total, jobs.length)), rows, {
+    hint: "/open <n> opens a job \xB7 /apply <n> prepares an application",
+    ...jobs.length > rows.length ? { more: jobs.length - rows.length } : {}
+  });
+}
+function jobDetailCard(result, opts) {
+  const job = rec(rec(result)?.job) ?? rec(result);
+  if (!job || !str2(job.title)) return null;
+  const row = jobRow(job, 1, opts);
+  const status = str2(job.status);
+  const body = excerpt(job.summary ?? job.description);
+  return card("job-detail", "Job", [
+    { ...row, meta: [...row.meta ?? [], ...status && status !== "active" ? [status] : []], ...body ? { body } : {} }
+  ], { hint: row.link ? "/open 1 opens the job \xB7 /apply 1 prepares an application" : "/apply 1 prepares an application" });
+}
+function labelRow(label, value, body) {
+  if (!value && !body) return [];
+  return [{ label, title: value ?? "", ...body ? { body } : {} }];
+}
+function applicationPreviewCard(result, opts) {
+  const r = rec(result);
+  if (!r) return null;
+  const job = rec(r.job) ?? {};
+  const title = str2(job.title) ?? "This job";
+  const existing = rec(r.existingApplication);
+  const redirect = r.redirectRequired === true;
+  const ready = r.readyToSubmit === true;
+  const url = httpUrl(r.redirectUrl) ?? httpUrl(existing?.redirectUrl) ?? httpUrl(existing?.applicationUrl) ?? jobLink(job, opts.siteUrl);
+  const id = str2(job.id);
+  const link = url ? { n: 1, label: redirect ? "Apply on the employer site" : title, url, ...id ? { jobId: id, jobTitle: title } : {} } : void 0;
+  const status = str2(existing?.status) ? `already ${str2(existing?.status)}` : ready ? "ready to submit" : redirect ? "continues on the employer site" : "needs a few details";
+  const notes = Array.isArray(r.notes) ? r.notes.filter((note) => typeof note === "string").join(" ") : str2(r.notes);
+  const rows = [
+    {
+      n: 1,
+      title,
+      meta: [companyName(job), str2(job.location)].filter((part) => Boolean(part)),
+      ...link ? { link } : {},
+      ...id ? { job: { id, title } } : {}
+    },
+    ...labelRow("Status", status),
+    ...labelRow("Ready to submit", ready ? "yes" : "no"),
+    ...labelRow("CV", str2(rec(r.cv)?.title) ?? (r.cv === null ? "none yet" : void 0)),
+    ...labelRow("Cover letter", void 0, excerpt(r.coverLetter, 480)),
+    ...labelRow("Note", excerpt(notes, 200))
+  ];
+  const hint = [
+    link ? `/open 1 ${redirect ? "applies on the employer site" : "opens the job"}` : null,
+    ready ? "reply 'submit' to send it (you approve it first)" : "/apply <n> or reply 'submit' to continue"
+  ].filter(Boolean);
+  return card("application-preview", "Application", rows, { hint: hint.join(" \xB7 ") });
+}
+function applicationConfirmCard(result, opts) {
+  const r = rec(result);
+  if (!r) return null;
+  const application = rec(r.application) ?? r;
+  const job = rec(r.job) ?? rec(application.job) ?? {};
+  const title = str2(job.title) ?? str2(application.jobTitle) ?? "Application";
+  const url = httpUrl(r.redirectUrl) ?? httpUrl(application.redirectUrl) ?? httpUrl(application.applicationUrl);
+  const outcome = str2(r.outcome)?.replace(/_/g, " ");
+  const rows = [
+    {
+      n: 1,
+      title,
+      meta: [companyName(job) ?? str2(rec(r.company)?.name), when(application.submittedAt ?? application.appliedAt, opts.now)].filter(
+        (part) => Boolean(part)
+      ),
+      ...url ? { link: { n: 1, label: title, url } } : {}
+    },
+    ...labelRow("Outcome", outcome),
+    ...labelRow("Status", str2(application.status)),
+    ...labelRow("Message", excerpt(r.message, 200))
+  ];
+  return card("application-confirm", "Application", rows, url ? { hint: "/open 1 finishes it on the employer site" } : {});
+}
+function applicationListCard(result, opts) {
+  const apps = listOf(result, "applications", "items", "history", "intents");
+  if (!apps.length) return null;
+  const rows = apps.slice(0, MAX_CARD_ROWS).map((app, i) => {
+    const job = rec(app.job) ?? {};
+    const title = str2(job.title) ?? str2(app.jobTitle) ?? str2(app.title) ?? "Application";
+    const url = httpUrl(app.redirectUrl) ?? httpUrl(app.applicationUrl) ?? jobLink(job, opts.siteUrl);
+    const meta = [
+      companyName(job) ?? str2(rec(app.company)?.name),
+      str2(app.status)?.replace(/_/g, " "),
+      when(app.updatedAt ?? app.submittedAt ?? app.appliedAt ?? app.preparedAt, opts.now)
+    ].filter((part) => Boolean(part));
+    return { n: i + 1, title, meta, ...url ? { link: { n: i + 1, label: title, url } } : {} };
+  });
+  return card("application-list", counted("Applications", rows.length, apps.length), rows, {
+    ...apps.length > rows.length ? { more: apps.length - rows.length } : {},
+    ...rows.some((row) => row.link) ? { hint: "/open <n> opens an application" } : {}
+  });
+}
+function skillListCard(result) {
+  const skills = listOf(result, "skills", "items");
+  if (!skills.length) return null;
+  const total = num(rec(result)?.total) ?? skills.length;
+  const rows = skills.slice(0, MAX_CARD_ROWS).flatMap((skill, i) => {
+    const id = str2(skill.skillId) ?? str2(skill.id);
+    if (!id) return [];
+    const command = `/${id.replace(/^\/+/, "").toLowerCase()}`;
+    const tier = str2(skill.tier);
+    const meta = [str2(skill.name), tier && tier !== "free" ? tier : void 0].filter((part) => Boolean(part));
+    const body = excerpt(skill.description, 160);
+    return [{ n: i + 1, title: command, meta, ...body ? { body, bodyLines: 1 } : {}, action: command }];
+  });
+  if (!rows.length) return null;
+  return card("skill-list", counted("Skills", rows.length, Math.max(total, skills.length)), rows, {
+    hint: "Type /<skill-id> to run a skill",
+    ...skills.length > rows.length ? { more: skills.length - rows.length } : {}
+  });
+}
+function automationMeta(item, now) {
+  const last = when(item.lastRunAt, now);
+  const lastStatus = str2(item.lastRunStatus)?.replace(/_/g, " ");
+  const next = when(item.nextRunAt, now);
+  return [
+    str2(item.status)?.replace(/_/g, " "),
+    scheduleLabel(item.cron),
+    last ? `last run ${last}${lastStatus ? ` (${lastStatus})` : ""}` : "never run",
+    next ? `next ${next}` : void 0
+  ].filter((part) => Boolean(part));
+}
+function automationListCard(result, opts, runs) {
+  const items = listOf(result, runs ? "runs" : "automations", "items");
+  if (!items.length) return null;
+  const rows = items.slice(0, MAX_CARD_ROWS).map((item, i) => {
+    if (!runs) return { n: i + 1, title: str2(item.name) ?? "Automation", meta: automationMeta(item, opts.now) };
+    const started = when(item.startTime ?? item.scheduledTime ?? item.createdAt, opts.now);
+    const meta = [str2(item.triggerType), started, excerpt(item.errorSummary, 80)].filter((part) => Boolean(part));
+    return { n: i + 1, title: (str2(item.status) ?? "run").replace(/_/g, " "), meta };
+  });
+  return card("automation-list", counted(runs ? "Runs" : "Automations", rows.length, items.length), rows, {
+    ...items.length > rows.length ? { more: items.length - rows.length } : {}
+  });
+}
+function automationDetailCard(result, opts, run) {
+  const r = rec(result);
+  if (!r) return null;
+  const automation = rec(r.automation) ?? (run ? void 0 : r);
+  const runRec = rec(r.run) ?? (run ? r : void 0);
+  const name = str2(automation?.name) ?? str2(r.name) ?? str2(rec(r.plan)?.name);
+  if (!name && !runRec) return null;
+  const rows = [
+    { title: name ?? "Automation", meta: automation ? automationMeta(automation, opts.now) : [] },
+    ...labelRow("Run", str2(runRec?.status)?.replace(/_/g, " ")),
+    ...labelRow("Started", when(runRec?.startTime ?? runRec?.createdAt, opts.now)),
+    ...labelRow("Problem", excerpt(runRec?.errorSummary ?? r.message, 200))
+  ];
+  return card(run ? "automation-run" : "automation-detail", run ? "Automation run" : "Automation", rows);
+}
+function profileSummaryCard(result) {
+  const r = rec(result);
+  if (!r) return null;
+  const p = rec(r.profile) ?? r;
+  const count = (value) => Array.isArray(value) && value.length ? String(value.length) : void 0;
+  const experiences = listOf(r, "experiences", "experience");
+  const latest = experiences[0];
+  const latestRole = latest ? [str2(latest.title), str2(latest.company)].filter(Boolean).join(" at ") : void 0;
+  const rows = [
+    { title: str2(p.name) ?? "Your profile", meta: [str2(p.headline) ?? str2(p.title), str2(p.location)].filter((x) => Boolean(x)) },
+    ...labelRow("Experience", experiences.length ? `${experiences.length} ${experiences.length === 1 ? "role" : "roles"}${latestRole ? `, latest ${latestRole}` : ""}` : void 0),
+    ...labelRow("Education", count(r.education ?? r.educations)),
+    ...labelRow("Certifications", count(r.certifications)),
+    ...labelRow("Projects", count(r.projects)),
+    ...labelRow("Email", str2(p.contactEmail) ?? str2(p.email)),
+    ...labelRow("Summary", void 0, excerpt(p.summary ?? p.about ?? p.bio, 240))
+  ];
+  let n = 0;
+  for (const key of ["website", "linkedin", "github", "behance", "dribbble"]) {
+    const url = httpUrl(p[key]);
+    if (!url) continue;
+    n += 1;
+    rows.push({ n, label: humanKey(key), title: url, link: { n, label: humanKey(key), url } });
+  }
+  return card("profile-summary", "Profile", rows, n ? { hint: "/open <n> opens a link" } : {});
+}
+function companyListCard(result) {
+  const companies = listOf(result, "companies", "items");
+  if (!companies.length) return null;
+  const rows = companies.slice(0, MAX_CARD_ROWS).map((company, i) => {
+    const title = str2(company.name) ?? "Company";
+    const url = httpUrl(company.website);
+    const meta = [str2(company.industry), str2(company.location), str2(company.employeeCount), str2(company.id)].filter(
+      (part) => Boolean(part)
+    );
+    return { n: i + 1, title, meta, ...url ? { link: { n: i + 1, label: title, url } } : {} };
+  });
+  return card("company-list", counted("Companies", rows.length, companies.length), rows, {
+    ...companies.length > rows.length ? { more: companies.length - rows.length } : {}
+  });
+}
+var GENERIC_SKIP = /* @__PURE__ */ new Set(["success", "ok", "userId", "display", "message", "decision", "featureKey"]);
+function genericCard(result, title) {
+  if (typeof result === "string") {
+    const body = excerpt(result, 480);
+    return body ? card("generic", title, [{ title: "", body }]) : null;
+  }
+  const list = Array.isArray(result) ? result.filter(isRec) : [];
+  if (list.length) {
+    const rows2 = list.slice(0, MAX_CARD_ROWS).map((item, i) => ({
+      n: i + 1,
+      title: str2(item.title) ?? str2(item.name) ?? str2(item.label) ?? str2(item.id) ?? `Item ${i + 1}`,
+      meta: [str2(item.status), str2(item.type), str2(item.id) !== str2(item.title) ? str2(item.id) : void 0].filter(
+        (part) => Boolean(part)
+      )
+    }));
+    return card("generic", counted(title, rows2.length, list.length), rows2, list.length > rows2.length ? { more: list.length - rows2.length } : {});
+  }
+  const r = rec(result);
+  if (!r) return null;
+  const rows = Object.entries(r).filter(([key]) => !GENERIC_SKIP.has(key)).flatMap(([key, value]) => {
+    const text = scalarLabel(value);
+    return text ? [{ label: humanKey(key), title: text }] : [];
+  });
+  if (!rows.length) return null;
+  return card("generic", title, rows.slice(0, MAX_CARD_ROWS), rows.length > MAX_CARD_ROWS ? { more: rows.length - MAX_CARD_ROWS } : {});
+}
+
+// src/core/chat-card-cv.ts
+function cvListCard(result, opts) {
+  const r = rec(result);
+  const cvs = listOf(result, "cvs");
+  const main = rec(r?.mainCv);
+  if (!cvs.length && !main) return null;
+  const defaultId = str2(r?.defaultCvId) ?? str2(main?.id) ?? "master";
+  const all = [...main ? [main] : [], ...cvs];
+  const rows = all.slice(0, MAX_CARD_ROWS).map((cv, i) => {
+    const id = str2(cv.id) ?? "master";
+    const isProfile = cv === main;
+    const meta = [
+      id === defaultId ? "main" : void 0,
+      isProfile ? "profile CV" : void 0,
+      when(cv.updatedAt, opts.now) ? `updated ${when(cv.updatedAt, opts.now)}` : void 0,
+      cv.isPublic === true ? "public" : void 0,
+      id
+    ].filter((part) => Boolean(part));
+    return { n: i + 1, title: str2(cv.title) ?? "Untitled CV", meta, action: `/download ${id}` };
+  });
+  return card("cv-list", counted("CVs", rows.length, all.length), rows, {
+    hint: "/download <id> saves a PDF to ./tabbio-artifacts",
+    ...all.length > rows.length ? { more: all.length - rows.length } : {}
+  });
+}
+function cvDetailCard(result, opts) {
+  const r = rec(rec(result)?.cv) ?? rec(result);
+  if (!r) return null;
+  const id = str2(r.id) ?? str2(r.cvId);
+  const title = str2(r.displayTitle) ?? str2(r.title) ?? str2(r.targetLabel);
+  if (!id && !title) return null;
+  const target = rec(r.targetJob);
+  const meta = [
+    target ? [str2(target.title), str2(target.companyName)].filter(Boolean).join(" at ") || void 0 : void 0,
+    r.isPublic === true ? "public" : void 0,
+    when(r.updatedAt, opts.now) ? `updated ${when(r.updatedAt, opts.now)}` : void 0,
+    id
+  ].filter((part) => Boolean(part));
+  const body = excerpt(r.summary, 240);
+  return card("cv-detail", "CV", [
+    { n: 1, title: title ?? "CV", meta, ...body ? { body } : {}, ...id ? { action: `/download ${id}` } : {} }
+  ]);
+}
+function cvExportCard(result) {
+  const r = rec(result);
+  if (!r || !Array.isArray(r.formats)) return null;
+  const id = str2(r.cvId) ?? "master";
+  const formats = r.formats.filter(isRec).map((f) => {
+    const label = str2(f.label) ?? str2(f.format)?.toUpperCase() ?? "";
+    return f.locked === true ? `${label} (paid plans)` : label;
+  });
+  return card("cv-export", "CV export", [
+    {
+      n: 1,
+      title: str2(r.cvTitle) ?? "My CV",
+      meta: [r.isTailored === true ? "tailored CV" : "main CV", ...formats.filter(Boolean)],
+      action: `/download ${id}`
+    }
+  ]);
+}
+function cvShareCard(result, opts, grant) {
+  const r = rec(result);
+  if (!r) return null;
+  const url = httpUrl(grant ? r.inviteUrl : r.shareUrl) ?? httpUrl(r.shareUrl) ?? httpUrl(r.inviteUrl);
+  const title = str2(r.cvTitle) ?? "Your CV";
+  const permissions = Array.isArray(r.permissions) ? r.permissions.filter((p) => typeof p === "string") : [];
+  const expires = when(r.expiresAt, opts.now);
+  const meta = [
+    r.isTailored === true ? "tailored CV" : "main CV",
+    grant ? str2(r.granteeEmail) : void 0,
+    grant ? str2(r.role) : void 0,
+    grant ? str2(r.status) : void 0,
+    permissions.length ? permissions.join(", ") : void 0,
+    r.allowDownload === true ? "downloads allowed" : void 0,
+    grant ? void 0 : expires ? `expires ${expires}` : "no expiry"
+  ].filter((part) => Boolean(part));
+  const row = { n: 1, title, meta, ...url ? { link: { n: 1, label: grant ? "Invite link" : "Share link", url } } : {} };
+  return card("cv-share", grant ? "CV access invite" : "CV share link", [row], url ? { hint: "/open 1 opens the link" } : {});
+}
+function cvPublishCard(result, opts, published) {
+  const r = rec(result);
+  if (!r) return null;
+  const handle = str2(r.username) ?? str2(r.handle);
+  const url = published ? handle ? buildPersonCvUrl(handle, opts.siteUrl) : httpUrl(r.publicUrl) : void 0;
+  const title = str2(r.title) ?? "CV";
+  const meta = [published ? "public" : "private", str2(r.id)].filter((part) => Boolean(part));
+  const row = { n: 1, title, meta, ...url ? { link: { n: 1, label: title, url } } : {} };
+  return card("cv-publish", published ? "Published CV" : "CV unpublished", [row], url ? { hint: "/open 1 opens the public CV" } : {});
+}
+
+// src/core/chat-cards.ts
+var NO_CARD_TOOLS = /* @__PURE__ */ new Set([
+  "updateWorkingMemory",
+  "clearWorkingMemory",
+  "getWorkingMemory",
+  "tailoredCvFlow",
+  "seekerApplyFlow",
+  "autoApplyQueueFlow",
+  "catalogApplyFlow",
+  "catalogAutoApplyQueueFlow",
+  "documentIngestionFlow",
+  "employerJobPostFlow",
+  "candidateOutreachFlow",
+  "talentPipelineFlow",
+  "skillsLoad",
+  "skillPrepareRun",
+  "cvCompareWithMaster",
+  "novaPause",
+  "novaResume",
+  "exportMemory",
+  "memoryGraphGet",
+  "artifactRead"
+]);
+var KIND_BY_TOOL = {
+  jobSearch: "job-list",
+  jobRecommend: "job-list",
+  catalogJobSearch: "job-list",
+  catalogSavedJobList: "job-list",
+  jobListByCompany: "job-list",
+  jobGet: "job-detail",
+  catalogJobGet: "job-detail",
+  jobDraft: "job-detail",
+  jobUpdate: "job-detail",
+  jobPublish: "job-detail",
+  jobClose: "job-detail",
+  applicationPrepare: "application-preview",
+  catalogApplyPrepare: "application-preview",
+  applicationSubmit: "application-confirm",
+  catalogApplySubmit: "application-confirm",
+  applicationGet: "application-confirm",
+  applicationUpdateStatus: "application-confirm",
+  applicationWithdraw: "application-confirm",
+  applicationTrack: "application-list",
+  catalogApplyTrack: "application-list",
+  applicationListByJob: "application-list",
+  cvList: "cv-list",
+  cvCreate: "cv-detail",
+  cvDuplicate: "cv-detail",
+  cvTailor: "cv-detail",
+  cvUpdateSummary: "cv-detail",
+  cvGet: "cv-detail",
+  cvUpdate: "cv-detail",
+  cvUpdateOverrides: "cv-detail",
+  cvSetFitToOnePage: "cv-detail",
+  cvGetResolved: "cv-detail",
+  cvExport: "cv-export",
+  cvShareLinkCreate: "cv-share",
+  cvAccessGrantCreate: "cv-share",
+  cvPublish: "cv-publish",
+  cvUnpublish: "cv-publish",
+  skillsList: "skill-list",
+  novaList: "automation-list",
+  novaRunHistory: "automation-list",
+  novaCompile: "automation-detail",
+  novaActivate: "automation-detail",
+  novaRunNow: "automation-run",
+  profileGet: "profile-summary",
+  companyList: "company-list"
+};
+var KNOWN_CARD_TYPES = /* @__PURE__ */ new Set([
+  "job-list",
+  "job-detail",
+  "application-preview",
+  "application-confirm",
+  "application-list",
+  "cv-detail",
+  "cv-export",
+  "cv-share",
+  "cv-publish",
+  "skill-list",
+  "automation-list",
+  "automation-detail",
+  "automation-run",
+  "profile-summary",
+  "company-list"
+]);
+function kindOf(payload) {
+  const byName = KIND_BY_TOOL[payload.name];
+  if (byName) return byName;
+  if (payload.cardType === "automation-run-list") return "automation-list";
+  return payload.cardType && KNOWN_CARD_TYPES.has(payload.cardType) ? payload.cardType : "generic";
+}
+function isFailure(result) {
+  if (!isRec(result)) return false;
+  return result.ok === false || result.error === true || isRec(result.error) && typeof result.error.code === "string";
+}
+function cardTitle(payload) {
+  const raw = payload.display?.title?.trim() || payload.name.replace(/([a-z0-9])([A-Z])/g, "$1 $2");
+  const text = raw.replace(/\s+/g, " ").trim();
+  return text.charAt(0).toUpperCase() + text.slice(1).toLowerCase();
+}
+function cardFromToolResult(payload, opts) {
+  const { result } = payload;
+  if (result === void 0 || result === null) return null;
+  if (payload.stage === "failed" || payload.status === "failed" || isFailure(result)) return null;
+  if (NO_CARD_TOOLS.has(payload.name) || isResearchTool(payload) || isArtifactTool(payload)) return null;
+  if (payload.cardType === "artifact-suggestions" || payload.cardType === "site-publish") return null;
+  if (isRec(result) && result.approvalRequired === true) return null;
+  const build = { siteUrl: publicSiteUrl(opts.appUrl), now: opts.now ?? Date.now() };
+  switch (kindOf(payload)) {
+    case "job-list":
+      return jobListCard(result, build);
+    case "job-detail":
+      return jobDetailCard(result, build);
+    case "application-preview":
+      return applicationPreviewCard(result, build);
+    case "application-confirm":
+      return applicationConfirmCard(result, build);
+    case "application-list":
+      return applicationListCard(result, build);
+    case "cv-list":
+      return cvListCard(result, build);
+    case "cv-detail":
+      return isRec(result) && Array.isArray(result.cvs) ? cvListCard(result, build) : cvDetailCard(result, build);
+    case "cv-export":
+      return cvExportCard(result);
+    case "cv-share":
+      return cvShareCard(result, build, payload.name === "cvAccessGrantCreate");
+    case "cv-publish":
+      return cvPublishCard(result, build, payload.name !== "cvUnpublish");
+    case "skill-list":
+      return skillListCard(result);
+    case "automation-list":
+      return automationListCard(result, build, payload.name === "novaRunHistory" || payload.cardType === "automation-run-list");
+    case "automation-detail":
+      return automationDetailCard(result, build, false);
+    case "automation-run":
+      return automationDetailCard(result, build, true);
+    case "profile-summary":
+      return profileSummaryCard(result);
+    case "company-list":
+      return companyListCard(result);
+    default:
+      return genericCard(result, cardTitle(payload));
+  }
+}
+function latestCardLinks(cards) {
+  for (let i = cards.length - 1; i >= 0; i -= 1) {
+    const card2 = cards[i];
+    if (card2.links.length) return card2.links;
+  }
+  return [];
+}
+function findCardLink(cards, n) {
+  return latestCardLinks(cards).find((link) => link.n === n);
+}
+function findCardJob(cards, n) {
+  for (let i = cards.length - 1; i >= 0; i -= 1) {
+    const rows = cards[i].rows.filter((row) => row.job);
+    if (rows.length) return rows.find((row) => row.n === n)?.job;
+  }
+  return void 0;
+}
+
 // src/core/chat-tool-extras.ts
 function holdsArtifact(call) {
   const artifact = call.artifact;
@@ -1373,12 +2551,14 @@ function patchArtifact(artifact, action, links) {
     ...artifact,
     ...action.status ? { status: action.status } : {},
     ...action.title ? { title: action.title } : {},
+    ...action.versionId ? { versionId: action.versionId } : {},
+    ...action.versionNumber !== void 0 ? { versionNumber: action.versionNumber } : {},
     ...action.previewUrl ? { previewUrl: action.previewUrl } : {},
     ...action.failure ? { failure: action.failure } : {},
     ...action.release ? { released: true } : {}
   };
-  const linked = withLinkState(next, links && !action.release);
-  return action.previewUrl === void 0 && action.status === void 0 && artifact.status === "ready" ? { ...linked, linkPending: false } : linked;
+  const linked2 = withLinkState(next, links && !action.release);
+  return action.previewUrl === void 0 && action.status === void 0 && artifact.status === "ready" ? { ...linked2, linkPending: false } : linked2;
 }
 function lastShownArtifact(entries, artifactId) {
   for (let i = entries.length - 1; i >= 0; i -= 1) {
@@ -1389,7 +2569,114 @@ function lastShownArtifact(entries, artifactId) {
   return void 0;
 }
 
-// src/core/chat-transcript.ts
+// src/core/chat-text.ts
+var ECHO_HOLD_CHARS = 24;
+var ECHO_COLLAPSE_CHARS = 80;
+var WHOLE_REPEAT_CHARS = 16;
+function compact(raw) {
+  let text = "";
+  const index = [];
+  for (let i = 0; i < raw.length; i += 1) {
+    const ch = raw[i];
+    if (ch === " " || ch === "\n" || ch === "	" || ch === "\r" || ch === "\f" || ch === "\v" || ch === "\xA0") continue;
+    text += ch;
+    index.push(i);
+  }
+  return { text, index };
+}
+function compactKey(raw) {
+  return compact(raw).text;
+}
+function rawOffsetAfter(raw, n) {
+  if (n <= 0) return 0;
+  const { index } = compact(raw);
+  const last = index[Math.min(n, index.length) - 1];
+  return last === void 0 ? 0 : last + 1;
+}
+function lineStarts(raw) {
+  const starts = [];
+  for (let i = raw.indexOf("\n"); i !== -1; i = raw.indexOf("\n", i + 1)) starts.push(i + 1);
+  return starts;
+}
+function findEcho(raw, starts = []) {
+  const c = compact(raw);
+  const n = c.text.length;
+  if (n < 2 * ECHO_HOLD_CHARS) return null;
+  const candidates = /* @__PURE__ */ new Set();
+  const toCompact = (offset) => {
+    let lo = 0;
+    let hi = c.index.length;
+    while (lo < hi) {
+      const mid = lo + hi >> 1;
+      if (c.index[mid] < offset) lo = mid + 1;
+      else hi = mid;
+    }
+    return lo;
+  };
+  for (const offset of [0, ...starts, ...lineStarts(raw)]) candidates.add(toCompact(offset));
+  let best = null;
+  for (const q of [...candidates].sort((a, b) => a - b)) {
+    if (n - q < 2 * ECHO_HOLD_CHARS) continue;
+    const opening = c.text.slice(q, q + ECHO_HOLD_CHARS);
+    for (let p = c.text.indexOf(opening, q + ECHO_HOLD_CHARS); p !== -1; p = c.text.indexOf(opening, p + 1)) {
+      const tail = n - p;
+      if (tail > p - q) continue;
+      if (!c.text.startsWith(c.text.slice(p), q)) continue;
+      const echo = {
+        at: c.index[p],
+        cut: c.index[p - 1] + 1,
+        complete: tail === p - q,
+        length: tail,
+        fromStart: q === 0
+      };
+      if (!best || echo.at < best.at) best = echo;
+      break;
+    }
+  }
+  return best;
+}
+function repeatCut(raw, starts = []) {
+  const c = compact(raw);
+  const n = c.text.length;
+  if (n % 2 === 0 && n / 2 >= WHOLE_REPEAT_CHARS && c.text.slice(0, n / 2) === c.text.slice(n / 2)) {
+    return c.index[n / 2 - 1] + 1;
+  }
+  const echo = findEcho(raw, starts);
+  return echo?.complete && echo.length >= ECHO_COLLAPSE_CHARS ? echo.cut : null;
+}
+function collapseRepeat(raw, starts = []) {
+  const cut = repeatCut(raw, starts);
+  return cut === null ? raw : raw.slice(0, cut).trimEnd();
+}
+function isSnapshotHead(head, full) {
+  let rest = head;
+  while (rest) {
+    let k = 0;
+    while (k < rest.length && k < full.length && rest[k] === full[k]) k += 1;
+    if (k === 0) return false;
+    rest = rest.slice(k);
+  }
+  return true;
+}
+function planFinal(streamed, finalText) {
+  const final = collapseRepeat(finalText.trim());
+  const f = compactKey(final);
+  const s = compactKey(streamed);
+  if (!f || f === s) return { kind: "same" };
+  if (!s) return { kind: "different", text: final };
+  if (f.startsWith(s)) {
+    const rest = final.slice(rawOffsetAfter(final, s.length));
+    const r = f.slice(s.length);
+    if (!rest.trim() || r.length >= WHOLE_REPEAT_CHARS && s.endsWith(r)) return { kind: "same" };
+    return { kind: "append", text: rest };
+  }
+  if (s.startsWith(f)) return { kind: "same" };
+  if (f.endsWith(s) && isSnapshotHead(f.slice(0, f.length - s.length), s)) return { kind: "same" };
+  return { kind: "different", text: final };
+}
+
+// src/core/chat-draft.ts
+var HIDDEN_CALLS_KEPT = 20;
 function nextId(d, prefix) {
   d.state = { ...d.state, seq: d.state.seq + 1 };
   return `${prefix}-${d.state.seq}`;
@@ -1405,17 +2692,55 @@ function commitMarkdown(d, turn, text) {
   push(d, { kind: "markdown", id: nextId(d, "md"), text, gap: turn.lastKind !== "label" });
   return { ...turn, committedText: true, lastKind: "markdown" };
 }
+function commitTool(d, turn, call) {
+  const { card: card2, saved, ...row } = call;
+  push(d, { kind: "tool", id: nextId(d, "tool"), call: row, gap: turn.lastKind === "markdown" });
+  if (card2) push(d, { kind: "card", id: nextId(d, "card"), card: card2, toolCallId: call.id });
+  if (saved) push(d, { kind: "saved", id: nextId(d, "saved"), saved });
+  return { ...turn, lastKind: "tool" };
+}
+function closeOpenText(items) {
+  return items.map((item) => item.kind === "text" && !item.closed ? { ...item, closed: true } : item);
+}
+function dropTextAfter(turn, cut) {
+  let end = cut;
+  const items = turn.items.flatMap((item) => {
+    if (item.kind !== "text" || item.start === void 0) return [item];
+    const keep = Math.max(cut - item.start, item.committed);
+    if (keep >= item.text.length) return [item];
+    end = Math.max(end, item.start + keep);
+    return keep > 0 || item.committed > 0 ? [{ ...item, text: item.text.slice(0, keep) }] : [];
+  });
+  const { echoAt: _echoAt, ...rest } = turn;
+  return { ...rest, items, text: turn.text.slice(0, end) };
+}
+function hasPendingText(turn) {
+  return turn.items.some((item) => item.kind === "text" && item.text.length > item.committed);
+}
+function guardRepeat(turn) {
+  if (!hasPendingText(turn)) return turn.echoAt === void 0 ? turn : { ...turn, echoAt: void 0 };
+  const echo = findEcho(turn.text, turn.segments ?? []);
+  if (echo?.complete && echo.length >= ECHO_COLLAPSE_CHARS) return dropTextAfter(turn, echo.cut);
+  if (echo?.at === turn.echoAt) return turn;
+  return { ...turn, echoAt: echo?.at };
+}
+function committable(item, echoAt) {
+  const pending = item.text.slice(item.committed);
+  if (echoAt === void 0 || item.start === void 0) return stableBoundary(pending);
+  const limit = echoAt - item.start - item.committed;
+  if (limit <= 0) return 0;
+  return limit >= pending.length ? stableBoundary(pending) : stableBoundary(pending.slice(0, limit));
+}
 function promote(d, final, force = false) {
-  let turn = d.state.turn;
-  if (!turn) return;
+  if (!d.state.turn) return;
+  let turn = final ? d.state.turn : guardRepeat(d.state.turn);
   const items = [...turn.items];
   while (items.length > 0) {
     const item = items[0];
     if (item.kind === "tool") {
       if (!force && (!FINAL_STAGES.has(item.call.stage) && !item.call.left || holdsArtifact(item.call))) break;
       const call = item.call.artifact ? { ...item.call, artifact: { ...item.call.artifact, linkPending: false } } : item.call;
-      push(d, { kind: "tool", id: nextId(d, "tool"), call, gap: turn.lastKind === "markdown" });
-      turn = { ...turn, lastKind: "tool" };
+      turn = commitTool(d, turn, call);
       items.shift();
       continue;
     }
@@ -1425,7 +2750,7 @@ function promote(d, final, force = false) {
       items.shift();
       continue;
     }
-    const boundary = stableBoundary(pending);
+    const boundary = committable(item, turn.echoAt);
     if (boundary > 0) {
       turn = commitMarkdown(d, turn, pending.slice(0, boundary));
       items[0] = { ...item, committed: item.committed + boundary };
@@ -1435,11 +2760,52 @@ function promote(d, final, force = false) {
   turn = { ...turn, items };
   const settled = (turn.finished || force) && items.length === 0;
   if (settled && turn.sources.length) push(d, { kind: "sources", id: nextId(d, "sources"), sources: turn.sources });
+  if (settled && turn.hidden?.length) {
+    const at = d.state.entries.length;
+    const kept = [...d.state.hiddenCalls ?? [], ...turn.hidden.map((call) => ({ call, at }))].slice(-HIDDEN_CALLS_KEPT);
+    d.state = { ...d.state, hiddenCalls: kept };
+  }
   setTurn(d, settled ? null : turn);
 }
-function closeOpenText(items) {
-  return items.map((item) => item.kind === "text" && !item.closed ? { ...item, closed: true } : item);
+function finishTurn(d, payload) {
+  let turn = d.state.turn;
+  if (!turn) return;
+  const finalText = payload.text?.trim() ?? "";
+  const cut = repeatCut(turn.text, turn.segments ?? []);
+  if (cut !== null) turn = dropTextAfter(turn, cut);
+  let items = closeOpenText(turn.items);
+  let revision = null;
+  let extraNote = null;
+  if (payload.finishReason === "error") {
+    if (!turn.error && finalText) turn = { ...turn, error: finalText };
+    else if (finalText && normalizeText(finalText) !== normalizeText(turn.error ?? "")) extraNote = finalText;
+  } else if (finalText) {
+    const plan = planFinal(turn.text, finalText);
+    if (plan.kind === "append") {
+      const last = items[items.length - 1];
+      items = last?.kind === "text" ? [...items.slice(0, -1), { ...last, text: last.text + plan.text }] : [...items, { kind: "text", id: "final", text: plan.text.replace(/^\s+/, ""), committed: 0, closed: true }];
+    } else if (plan.kind === "different") {
+      if (!turn.text.trim() || !turn.committedText) {
+        items = [...items.filter((item) => item.kind !== "text"), { kind: "text", id: "final", text: plan.text, committed: 0, closed: true }];
+      } else {
+        revision = plan.text;
+      }
+    }
+  }
+  turn = { ...turn, items, finished: true, finishReason: payload.finishReason, echoAt: void 0 };
+  if (payload.threadId) d.state = { ...d.state, threadId: payload.threadId };
+  setTurn(d, turn);
+  promote(d, true);
+  if (revision) {
+    push(d, { kind: "notice", id: nextId(d, "note"), tone: "info", text: "Tabbio revised this answer:" });
+    push(d, { kind: "markdown", id: nextId(d, "md"), text: revision, gap: false });
+  }
+  if (turn.error) push(d, { kind: "notice", id: nextId(d, "note"), tone: "error", text: turn.error });
+  if (extraNote) push(d, { kind: "notice", id: nextId(d, "note"), tone: "info", text: extraNote });
+  d.state = { ...d.state, streaming: false };
 }
+
+// src/core/chat-transcript.ts
 function upsertTool(d, payload, stage, extra = {}) {
   const turn = d.state.turn;
   if (!turn) return;
@@ -1448,6 +2814,10 @@ function upsertTool(d, payload, stage, extra = {}) {
   const previous = index >= 0 ? turn.items[index].call : void 0;
   const enriched = toolExtras(payload, stage, { links: d.state.links, previous });
   extra = { ...enriched, ...extra };
+  if (final && payload.result !== void 0) {
+    const card2 = cardFromToolResult({ ...payload, stage }, { appUrl: d.state.appUrl ?? PRODUCTION_APP_URL, now: d.now });
+    if (card2) extra = { ...extra, card: card2 };
+  }
   if (enriched.sources?.length) {
     setTurn(d, { ...turn, sources: mergeSources(turn.sources, enriched.sources) });
   }
@@ -1511,34 +2881,48 @@ function applyArtifactStatus(d, action) {
   if (next.status === shown.status && next.previewUrl === shown.previewUrl) return;
   push(d, { kind: "artifact", id: nextId(d, "artifact"), artifact: next });
 }
-function finishTurn(d, payload) {
-  let turn = d.state.turn;
-  if (!turn) return;
-  const finalText = payload.text?.trim() ?? "";
-  let items = closeOpenText(turn.items);
-  let revision = null;
-  let extraNote = null;
-  if (payload.finishReason === "error") {
-    if (!turn.error && finalText) turn = { ...turn, error: finalText };
-    else if (finalText && normalizeText(finalText) !== normalizeText(turn.error ?? "")) extraNote = finalText;
-  } else if (finalText && normalizeText(finalText) !== normalizeText(turn.text)) {
-    if (!normalizeText(turn.text) || !turn.committedText) {
-      items = [...items.filter((item) => item.kind !== "text"), { kind: "text", id: "final", text: finalText, committed: 0, closed: true }];
-    } else {
-      revision = finalText;
-    }
-  }
-  turn = { ...turn, items, finished: true, finishReason: payload.finishReason };
-  if (payload.threadId) d.state = { ...d.state, threadId: payload.threadId };
-  setTurn(d, turn);
-  promote(d, true);
-  if (revision) {
-    push(d, { kind: "notice", id: nextId(d, "note"), tone: "info", text: "Tabbio revised this answer:" });
-    push(d, { kind: "markdown", id: nextId(d, "md"), text: revision, gap: false });
+function upsertHidden(d, payload, stage) {
+  const turn = d.state.turn;
+  const hidden = turn.hidden ?? [];
+  const previous = hidden.find((call2) => call2.id === payload.id);
+  const final = FINAL_STAGES.has(stage);
+  const call = {
+    ...previous ?? { id: payload.id, name: payload.name, title: toolTitle(payload), args: payload.args, startedAt: d.now },
+    stage,
+    ...Object.keys(payload.args).length ? { args: payload.args } : {},
+    ...payload.result !== void 0 ? { result: payload.result } : {},
+    ...final && previous && previous.endedAt === void 0 ? { endedAt: d.now, durationMs: Math.max(0, d.now - previous.startedAt) } : {},
+    ...final && !previous ? { endedAt: d.now } : {}
+  };
+  const next = previous ? hidden.map((c) => c.id === payload.id ? call : c) : [...hidden, call];
+  setTurn(d, { ...turn, hidden: next });
+}
+function expandLastTool(d) {
+  const entries = d.state.entries;
+  let lastUser = -1;
+  let lastTool = -1;
+  entries.forEach((entry, i) => {
+    if (entry.kind === "user") lastUser = i;
+    if (entry.kind === "tool") lastTool = i;
+  });
+  const hidden = (d.state.hiddenCalls ?? []).filter((h) => h.at > lastUser).at(-1);
+  const visible = lastTool >= 0 ? entries[lastTool] : void 0;
+  const call = visible && lastTool > lastUser ? visible.call : hidden?.call ?? visible?.call;
+  if (call) push(d, { kind: "tool-detail", id: nextId(d, "detail"), call });
+}
+function applyFilesSaved(d, toolCallId, saved) {
+  const turn = d.state.turn;
+  const matches = (call) => toolCallId !== void 0 && call.id === toolCallId || saved.artifactId !== void 0 && call.artifact?.id === saved.artifactId;
+  const index = turn?.items.findIndex((item) => item.kind === "tool" && matches(item.call)) ?? -1;
+  if (turn && index >= 0) {
+    const item = turn.items[index];
+    const items = [...turn.items];
+    items[index] = { ...item, call: { ...item.call, saved } };
+    setTurn(d, { ...turn, items });
+    promote(d, false);
+    return;
   }
-  if (turn.error) push(d, { kind: "notice", id: nextId(d, "note"), tone: "error", text: turn.error });
-  if (extraNote) push(d, { kind: "notice", id: nextId(d, "note"), tone: "info", text: extraNote });
-  d.state = { ...d.state, streaming: false };
+  push(d, { kind: "saved", id: nextId(d, "saved"), saved });
 }
 function applyStream(d, event) {
   const turn = d.state.turn;
@@ -1558,19 +2942,24 @@ function applyStream(d, event) {
       const current = d.state.turn;
       const items = [...current.items];
       const last = items[items.length - 1];
+      let segments = current.segments;
       if (last?.kind === "text" && !last.closed) items[items.length - 1] = { ...last, text: last.text + event.payload.text };
-      else items.push({ kind: "text", id: nextId(d, "text"), text: event.payload.text, committed: 0, closed: false });
-      setTurn(d, { ...current, items, text: current.text + event.payload.text });
+      else {
+        const start = current.text.length;
+        items.push({ kind: "text", id: nextId(d, "text"), text: event.payload.text, committed: 0, closed: false, start });
+        segments = [...segments ?? [], start];
+      }
+      setTurn(d, { ...current, items, text: current.text + event.payload.text, ...segments ? { segments } : {} });
       return;
     }
     case "tool-call":
-      upsertTool(d, event.payload, stageOf(event.payload, "running"));
-      promote(d, false);
-      return;
-    case "tool-result":
-      upsertTool(d, event.payload, stageOf(event.payload, "completed"));
+    case "tool-result": {
+      const stage = stageOf(event.payload, event.type === "tool-call" ? "running" : "completed");
+      if (isHiddenTool(event.payload.name)) upsertHidden(d, event.payload, stage);
+      else upsertTool(d, event.payload, stage);
       promote(d, false);
       return;
+    }
     case "artifact-draft":
       applyArtifactDraft(d, event.payload);
       return;
@@ -1707,11 +3096,12 @@ function reduceChat(state, action, now) {
     case "artifact-status":
       applyArtifactStatus(d, action);
       return d.state;
-    case "expand-last-tool": {
-      const last = [...d.state.entries].reverse().find((e) => e.kind === "tool");
-      if (last) push(d, { kind: "tool-detail", id: nextId(d, "detail"), call: last.call });
+    case "files-saved":
+      applyFilesSaved(d, action.toolCallId, action.saved);
+      return d.state;
+    case "expand-last-tool":
+      expandLastTool(d);
       return d.state;
-    }
     default:
       applyStream(d, action);
       return d.state;
@@ -1894,13 +3284,148 @@ function messageText(content) {
   return "";
 }
 
+// src/core/chat-save-targets.ts
+var PRODUCING_TOOLS = /* @__PURE__ */ new Set(["generateImage", "createDocument", "createPage", "updatePage", "updateDocument", "editImage"]);
+function isRecord7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function cvExportFormat(requested, formats) {
+  const open2 = (Array.isArray(formats) ? formats : []).filter(isRecord7).filter((f) => f.locked !== true && typeof f.format === "string").map((f) => String(f.format).toLowerCase());
+  const asked = typeof requested === "string" ? requested.toLowerCase() : "";
+  if (asked && open2.includes(asked)) return asked;
+  if (open2.includes("pdf")) return "pdf";
+  return open2[0] ?? null;
+}
+function cvTarget(call) {
+  if (call.name !== "cvExport" || call.stage !== "completed" || !isRecord7(call.result)) return null;
+  const format = cvExportFormat(call.args.format, call.result.formats);
+  if (!format) return null;
+  const cvId = typeof call.result.cvId === "string" && call.result.cvId ? call.result.cvId : "master";
+  const title = typeof call.result.cvTitle === "string" && call.result.cvTitle ? call.result.cvTitle : "My CV";
+  return { type: "cv", key: `cv:${call.id}:${format}`, cvId, title, format, toolCallId: call.id };
+}
+function artifactTarget(artifact, toolCallId) {
+  if (artifact.status !== "ready") return null;
+  return {
+    type: "artifact",
+    key: `artifact:${artifact.id}:${artifact.versionNumber ?? 0}`,
+    artifactId: artifact.id,
+    ...artifact.versionId ? { versionId: artifact.versionId } : {},
+    title: artifact.title,
+    kind: artifact.kind,
+    ...toolCallId ? { toolCallId } : {}
+  };
+}
+function saveTargets(state) {
+  const targets = /* @__PURE__ */ new Map();
+  const made = /* @__PURE__ */ new Set();
+  const add = (target) => {
+    if (target && !targets.has(target.key)) targets.set(target.key, target);
+  };
+  const addCall = (call) => {
+    add(cvTarget(call));
+    if (!call.artifact || !PRODUCING_TOOLS.has(call.name)) return;
+    made.add(call.artifact.id);
+    add(artifactTarget(call.artifact, call.id));
+  };
+  for (const entry of state.entries) {
+    if (entry.kind === "tool") addCall(entry.call);
+    else if (entry.kind === "artifact" && made.has(entry.artifact.id)) add(artifactTarget(entry.artifact));
+  }
+  for (const item of state.turn?.items ?? []) if (item.kind === "tool") addCall(item.call);
+  return [...targets.values()];
+}
+
+// src/ui/components/cards/card-lines.ts
+var MIN_WIDTH = 24;
+var MAX_LABEL = 16;
+function linked(text, link, links) {
+  return link && links && safeTerminalText(link.url) === link.url ? hyperlink(text, link.url) : text;
+}
+function labelRowLines(row, numberWidth, pad2, labelWidth, width, links) {
+  const label = theme.dim(padEnd(truncate(safeTerminalText(row.label ?? ""), labelWidth), labelWidth));
+  const valueWidth = Math.max(8, width - displayWidth(pad2) - labelWidth - 2);
+  const valuePad = `${pad2}${" ".repeat(labelWidth + 2)}`;
+  const lead = row.n !== void 0 && numberWidth ? `${theme.dim(String(row.n).padStart(numberWidth))}  ` : pad2;
+  const lines = [];
+  if (row.title) lines.push(`${lead}${label}  ${linked(truncate(safeTerminalText(row.title), valueWidth), row.link, links)}`);
+  const body = row.body ? wrapWords(safeTerminalText(row.body), valueWidth, row.bodyLines ?? 3) : [];
+  body.forEach((line, i) => lines.push(i === 0 && !row.title ? `${lead}${label}  ${line}` : `${valuePad}${line}`));
+  if (row.link && row.link.url !== row.title) lines.push(`${valuePad}${theme.dim(safeTerminalText(row.link.url))}`);
+  return lines;
+}
+function itemRowLines(row, numberWidth, pad2, width, links) {
+  const contentWidth = Math.max(8, width - displayWidth(pad2));
+  const number = row.n !== void 0 && numberWidth ? `${theme.dim(String(row.n).padStart(numberWidth))}  ` : pad2;
+  const url = row.link && row.link.url !== row.title ? safeTerminalText(row.link.url) : void 0;
+  const title = truncate(safeTerminalText(row.title), contentWidth);
+  const shown = linked(theme.bold(title), row.link, links);
+  const lines = [];
+  if (url && displayWidth(title) + 2 + displayWidth(url) <= contentWidth) lines.push(`${number}${shown}  ${theme.dim(url)}`);
+  else {
+    lines.push(`${number}${shown}`);
+    if (url) lines.push(`${pad2}${theme.dim(url)}`);
+  }
+  if (row.meta?.length) lines.push(`${pad2}${theme.dim(truncate(row.meta.map(safeTerminalText).join(` ${theme.symbols.middot} `), contentWidth))}`);
+  if (row.body) for (const line of wrapWords(safeTerminalText(row.body), contentWidth, row.bodyLines ?? 3)) lines.push(`${pad2}${line}`);
+  if (row.action && row.action !== row.title) lines.push(`${pad2}${theme.dim(`${theme.symbols.arrowRight} ${safeTerminalText(row.action)}`)}`);
+  return lines;
+}
+function cardLines(card2, opts) {
+  const width = Math.max(MIN_WIDTH, opts.width);
+  const numbers = card2.rows.filter((row) => row.n !== void 0).map((row) => row.n);
+  const numberWidth = numbers.length ? String(Math.max(...numbers)).length : 0;
+  const pad2 = " ".repeat(numberWidth ? numberWidth + 2 : 0);
+  const labelWidth = Math.min(MAX_LABEL, Math.max(0, ...card2.rows.filter((row) => row.label).map((row) => displayWidth(safeTerminalText(row.label ?? "")))));
+  const lines = [theme.dim(truncate(safeTerminalText(card2.title), width))];
+  for (const row of card2.rows) {
+    lines.push(...row.label ? labelRowLines(row, numberWidth, pad2, labelWidth, width, opts.links) : itemRowLines(row, numberWidth, pad2, width, opts.links));
+  }
+  if (card2.more) lines.push(`${pad2}${theme.dim(`+${card2.more} more`)}`);
+  if (card2.hint) {
+    const arrow = `${theme.symbols.arrowRight} `;
+    wrapWords(safeTerminalText(card2.hint), width - displayWidth(arrow)).forEach((line, i) => lines.push(theme.dim(`${i === 0 ? arrow : " ".repeat(displayWidth(arrow))}${line}`)));
+  }
+  return lines;
+}
+function printable(line) {
+  return line.replace(/\t/g, "  ").replace(/[\u0000-\u001f\u007f-\u009f]/g, "");
+}
+function savedLines(saved, opts) {
+  const width = Math.max(MIN_WIDTH, opts.width);
+  const retry = saved.artifactId ? `/save ${safeTerminalText(saved.artifactId)}` : saved.cvId ? `/download ${safeTerminalText(saved.cvId)}` : null;
+  if (saved.error) {
+    const what = saved.title ? `"${safeTerminalText(saved.title)}"` : safeTerminalText(saved.artifactId ?? "the file");
+    return [
+      `${theme.attention(theme.symbols.attention)} Could not save ${what}: ${safeTerminalText(saved.error)}`,
+      ...retry ? [theme.dim(`  ${theme.symbols.arrowRight} ${retry} to try again`)] : []
+    ];
+  }
+  const lines = saved.files.map(
+    (file) => `${theme.success(theme.symbols.success)} Saved ${displayPath(file.path, opts.cwd)} ${theme.dim(`(${formatBytes(file.bytes)})`)}`
+  );
+  const preview = saved.preview;
+  if (preview?.lines.length) {
+    const inner = Math.max(8, width - 4);
+    for (const line of preview.lines) lines.push(theme.dim(`  ${theme.symbols.gutter} ${truncate(printable(line), inner)}`));
+    const hidden = preview.total - preview.lines.length;
+    const hints = [
+      hidden > 0 ? `+${hidden} lines` : null,
+      saved.artifactId ? `/show ${saved.artifactId} for the full file` : null,
+      saved.artifactId ? `/open ${saved.artifactId} in the browser` : null
+    ].filter((hint) => Boolean(hint));
+    if (hints.length) lines.push(theme.dim(`  ${hints.join(` ${theme.symbols.middot} `)}`));
+  }
+  return lines;
+}
+
 export {
   setInteractiveHooks,
   getInteractiveHooks,
   canUseInteractiveUi,
   getPath,
-  displayWidth,
-  truncate,
+  displayWidth2 as displayWidth,
+  truncate2 as truncate,
   humanCell,
   pickColumns,
   formatTable,
@@ -1914,6 +3439,7 @@ export {
   formatDuration,
   printEmptyNotice,
   renderResult,
+  confirm,
   ARTIFACT_PRODUCING_TOOL_IDS,
   artifactFromResult,
   sourcesFromResult,
@@ -1937,8 +3463,29 @@ export {
   resolveOutputPath,
   waitForArtifact,
   downloadToFile,
+  CV_EXPORT_FORMATS,
+  artifactsDir,
+  autoSaveDisabled,
+  artifactBaseName,
+  uniquePath,
+  displayPath,
+  formatBytes,
+  isTextFile,
+  saveArtifactToDisk,
+  saveCvExportToDisk,
+  readSavedPreview,
   supportsHyperlinks,
   hyperlink,
+  RESERVED_GLOBAL_FLAGS,
+  shortDescription,
+  schemaToFlags,
+  schemaToOptions,
+  didYouMean,
+  parseToolInput,
+  flagsForProperties,
+  describeSchema,
+  autoFilledProperties,
+  exampleInvocation,
   DEFAULT_CAPABILITIES,
   CAPABILITY_CHOICES,
   CAPABILITY_CHOICE_HELP,
@@ -1948,8 +3495,14 @@ export {
   resolveCapabilities,
   capabilityRequestFields,
   unavailableNotices,
+  cardFromToolResult,
+  latestCardLinks,
+  findCardLink,
+  findCardJob,
   initialChatState,
   isDestructiveTool,
+  collapseRepeat,
+  planFinal,
   chatReducer,
   streamChat,
   streamChatFrames,
@@ -1959,18 +3512,17 @@ export {
   rejectApproval,
   listModels,
   messageText,
-  RESERVED_GLOBAL_FLAGS,
-  shortDescription,
-  schemaToFlags,
-  schemaToOptions,
-  didYouMean,
-  parseToolInput,
-  flagsForProperties,
-  describeSchema,
-  autoFilledProperties,
-  exampleInvocation,
+  PRODUCING_TOOLS,
+  cvExportFormat,
+  saveTargets,
+  cardLines,
+  savedLines,
   isInteractiveTerminal,
   assertInteractive,
-  renderScreen
+  renderScreen,
+  saveAppSession,
+  saveTokenSession,
+  describeUser,
+  registerLoginCommand
 };
-//# sourceMappingURL=chunk-QVR5KIEQ.js.map
+//# sourceMappingURL=chunk-KHLGZ5IV.js.map