@vosjs/cli 0.84.0 → 0.86.0

package/dist/{chunk-DM7ADA77.js → chunk-ZXFO32KW.js}

@@ -10,7 +10,7 @@ import {
   reencodeStill,
   renderStill,
   videoFormat
-} from "./chunk-Q47FUCYN.js";
+} from "./chunk-2LAXJZCG.js";
 import {
   PREV_DOC_NAME,
   PasteFileRefusal,
@@ -46,47 +46,62 @@ import {
   uploadDocRefs,
   uploadManifest,
   writeJson
-} from "./chunk-M5ZBQFPG.js";
+} from "./chunk-V3RUNUNP.js";
 import {
+  ACCOUNT_ENV,
   CREDENTIALS_PATH,
+  DEFAULT_STORE,
   MEDIA_HEAD_BYTES,
   SYNC_STATE_NAME,
   UsageError,
+  accountFrom,
+  accountLabel,
+  activate,
   apiError,
   apiJson,
   bearerFor,
   clientId,
   containerMismatch,
+  credentialFlags,
   deriveSlug,
   detailLine,
+  findStored,
   formatChanges,
   hasFlag,
   hostedAssetId,
+  isActive,
+  lastCredential,
+  listStored,
   localFile,
   manifestRefs,
   mintAt,
   nameForType,
   numFlag2 as numFlag,
+  originOf,
   parseArgs2 as parseArgs,
   parseVosId,
   platformOrigin,
   prepareOutput,
   programAssets,
   promptHint,
+  readActive,
   readSyncState,
   refuseSymlink,
+  removeAll,
+  removeStored,
   requireCredential,
   resolveCredential,
   resolveMediaType,
   serverWarnings,
   sniffMediaType,
   strFlag,
+  switchTarget,
   writeCredential,
   writeFileSafe,
   writeOutput,
   writeOutputSync,
   writeSyncState
-} from "./chunk-EPSYIF2S.js";
+} from "./chunk-PZP76YJI.js";
 import {
   deadLine,
   deadWarns
@@ -149,8 +164,8 @@ function landedLines(l) {
 
 // src/plugin/run.ts
 import { mkdir as mkdir13, readFile as readFile19, rm as rm7 } from "fs/promises";
-import { existsSync as existsSync30 } from "fs";
-import { dirname as dirname12, join as join33, resolve as resolve21 } from "path";
+import { existsSync as existsSync31 } from "fs";
+import { dirname as dirname12, join as join33, resolve as resolve22 } from "path";
 import {
   END_CARD_FROM as END_CARD_FROM2,
   docOutputDuration as docOutputDuration5,
@@ -4157,6 +4172,7 @@ import {
   sameMedia,
   spanOutputExtent as spanOutputExtent3
 } from "@vosjs/studio-core";
+import { rankBeds, trackBySlug } from "@vosjs/shared/music";
 
 // src/plugin/captionFit.ts
 var CAPTION_MAX = 3;
@@ -4289,10 +4305,30 @@ function proposeTransitions(input, kind) {
   }
   return { doc, count, skipped };
 }
-function pickTrack(catalog, ask) {
+function pickBed(catalog, ask, film) {
   if (!catalog || !ask || off(ask)) return null;
   const want = ask.trim().toLowerCase();
-  return catalog.tracks.find((t) => t.slug.toLowerCase() === want) ?? catalog.tracks.find((t) => (t.mood ?? "").toLowerCase() === want) ?? null;
+  const exact = trackBySlug(catalog.tracks, want);
+  if (exact) return { track: exact, via: "slug", ranked: null, runnerUp: null };
+  if (film) {
+    const oneWord = !/\s/.test(want);
+    const ranked = rankBeds(catalog.tracks, {
+      ...film,
+      ...oneWord ? { mood: want } : { words: want }
+    }).filter((r) => r.score !== null);
+    const named = oneWord ? catalog.tracks.some(
+      (t) => (t.mood ?? "").toLowerCase() === want || (t.tags ?? []).some((x) => x.toLowerCase() === want)
+    ) : ranked.some((r) => (r.scores?.fit ?? 0) > 0);
+    if (!named || !ranked.length) return null;
+    return {
+      track: ranked[0].track,
+      via: "ranked",
+      ranked: ranked[0],
+      runnerUp: ranked[1] ?? null
+    };
+  }
+  const first = catalog.tracks.find((t) => (t.mood ?? "").toLowerCase() === want) ?? null;
+  return first ? { track: first, via: "first", ranked: null, runnerUp: null } : null;
 }
 function clickTimes(doc, range2) {
   const rated = ratedSegments4(doc);
@@ -4533,26 +4569,32 @@ function proposeMotion(input, opts) {
   const clips = (doc.audio ?? []).filter(
     (a) => a.id !== BED_ID && !a.id.startsWith(CLICK_ID_PREFIX)
   );
-  const track = pickTrack(catalog, launch.music);
-  if (track) {
+  const picked = pickBed(catalog, launch.music, opts.film);
+  if (picked) {
+    const { track } = picked;
     const hasMic = !!doc.source.micKey;
     const fadeOut = Math.min(2.5, length * 0.15);
+    const place2 = picked.ranked?.placement ?? null;
+    const start = place2 ? place2.in : 0;
+    const covers = track.duration - start >= length;
     clips.push({
       id: BED_ID,
       key: track.url,
       name: track.title,
       start: 0,
-      in: 0,
-      out: Math.min(track.duration, length),
+      in: start,
+      out: place2 ? place2.out : Math.min(track.duration, length),
       duration: track.duration,
       gain: hasMic ? 0.35 : 0.5,
-      fadeIn: 0.6,
+      fadeIn: start > 0 ? 0.8 : 0.6,
       fadeOut,
-      loop: track.duration < length,
-      loopLen: track.duration < length ? Math.round(length * 1e3) / 1e3 : void 0,
+      loop: place2 ? place2.loop : !covers,
+      loopLen: place2 ? place2.loopLen : !covers ? Math.round(length * 1e3) / 1e3 : void 0,
       duck: hasMic
     });
-    notes.push(`bed ${track.slug}`);
+    notes.push(
+      picked.via === "ranked" && picked.ranked ? `bed ${track.slug} (${picked.ranked.reasons.slice(0, 2).join(", ") || "ranked"}${picked.runnerUp ? `; runner-up ${picked.runnerUp.slug}` : ""})` : `bed ${track.slug}`
+    );
   } else if (launch.music && !off(launch.music)) {
     skipped.push(
       `music "${launch.music}" is not a catalog track or mood${catalog ? "" : " (the catalog could not be read)"}`
@@ -4829,6 +4871,7 @@ async function deliverTake(browser, dir, opts) {
 
 // src/plugin/login.ts
 import { hostname } from "os";
+var storeWith = (store) => store ?? ((key, origin, account) => writeCredential(key, origin, void 0, account));
 var LoginUnsupportedError = class extends Error {
   constructor() {
     super("this origin does not support browser login");
@@ -4905,12 +4948,14 @@ async function browserLogin(origin, r, opts) {
       continue;
     }
     if (res.status === 200 && status === "ok") {
-      const path = (opts.store ?? writeCredential)(
+      const account = accountFrom(res.body.user);
+      const path = storeWith(opts.store)(
         res.body.key,
-        origin
+        origin,
+        account
       );
       const user = typeof res.body.user === "object" && res.body.user !== null ? res.body.user.name ?? "" : "";
-      return { path, user };
+      return { path, user, account };
     }
     if (res.status === 429) {
       if (status === "key_limit" && !capNoted) {
@@ -4948,16 +4993,19 @@ async function handoffLogin(url, r, opts = {}) {
     body: { token: parsed.token, hostname: hostname().slice(0, 64) }
   });
   if (res.status === 200 && res.body.status === "ok") {
-    const path = (opts.store ?? writeCredential)(
+    const account = accountFrom(res.body.user);
+    const path = storeWith(opts.store)(
       res.body.key,
-      parsed.origin
+      parsed.origin,
+      account
     );
     const user = typeof res.body.user === "object" && res.body.user !== null ? res.body.user.name ?? "" : "";
     return {
       path,
       user,
       keyName: String(res.body.keyName ?? ""),
-      origin: parsed.origin
+      origin: parsed.origin,
+      account
     };
   }
   if (res.status === 404 && !res.body.status) {
@@ -6039,14 +6087,14 @@ function chromeTree(rows, pid) {
 }
 function readChromeTree(pid) {
   if (process.platform === "win32") return Promise.resolve(null);
-  return new Promise((resolve22) => {
+  return new Promise((resolve23) => {
     execFile2(
       "ps",
       ["-A", "-o", "pid=", "-o", "ppid=", "-o", "command="],
       { maxBuffer: 16 * 1024 * 1024, timeout: 5e3 },
       (err, stdout) => {
-        if (err) resolve22(null);
-        else resolve22(chromeTree(parseProcessTable(stdout), pid));
+        if (err) resolve23(null);
+        else resolve23(chromeTree(parseProcessTable(stdout), pid));
       }
     );
   });
@@ -6148,7 +6196,7 @@ function enterPressed() {
     } };
   const rl = createInterface({ input: process.stdin });
   const pressed = new Promise(
-    (resolve22) => rl.once("line", () => resolve22())
+    (resolve23) => rl.once("line", () => resolve23())
   );
   return { pressed, close: () => rl.close() };
 }
@@ -6321,14 +6369,14 @@ async function openSessionWindow(opts) {
   const child = spawn(exe, args, { stdio: "ignore" });
   let failed = null;
   let code = null;
-  const exited = new Promise((resolve22) => {
+  const exited = new Promise((resolve23) => {
     child.once("exit", (c) => {
       code = c;
-      resolve22();
+      resolve23();
     });
     child.once("error", (e) => {
       failed = e;
-      resolve22();
+      resolve23();
     });
   });
   try {
@@ -6776,12 +6824,13 @@ async function encodeRecording(browser, takeDir, onProgress) {
 // src/plugin/plan.ts
 import { existsSync as existsSync11 } from "fs";
 import { readFile as readFile9 } from "fs/promises";
-import { join as join11 } from "path";
+import { basename, join as join11 } from "path";
 import {
   DEFAULT_FRAME_STYLE,
   STYLE_FIELDS,
   copyLayout,
   copyStyle,
+  filmSummaryOf,
   isRejected,
   isStageClip,
   layoutOf,
@@ -7382,7 +7431,10 @@ async function planTake(dir, opts = {}) {
   withPageSound(doc, meta.media);
   let motion;
   if (opts.motion && (fresh || opts.motion.again)) {
-    const proposed = proposeMotion(doc, opts.motion);
+    const proposed = proposeMotion(doc, {
+      ...opts.motion,
+      film: filmSummaryOf(doc, { seed: basename(join11(dir)) })
+    });
     doc = proposed.doc;
     motion = {
       notes: proposed.notes,
@@ -7415,14 +7467,14 @@ import { createHash } from "crypto";
 import { existsSync as existsSync13, readFileSync as readFileSync3, readdirSync as readdirSync2 } from "fs";
 import { readFile as readFile11 } from "fs/promises";
 import { createInterface as createInterface2 } from "readline/promises";
-import { basename as basename2, join as join14 } from "path";
+import { basename as basename3, join as join14 } from "path";
 import { lowerToComposition as lowerToComposition3, migrateHostedDoc as migrateHostedDoc2 } from "@vosjs/studio-core";
 
 // src/plugin/takeScript.ts
 import { existsSync as existsSync12 } from "fs";
 import { readFile as readFile10, writeFile as writeFile6 } from "fs/promises";
 import { readFileSync as readFileSync2 } from "fs";
-import { basename, join as join12 } from "path";
+import { basename as basename2, join as join12 } from "path";
 function scriptFromText(text) {
   try {
     const v = JSON.parse(text);
@@ -7468,7 +7520,7 @@ function publicPeers(peers) {
     if (!p || typeof p !== "object") return p;
     const peer = p;
     if (typeof peer.storageState !== "string") return peer;
-    return { ...peer, storageState: basename(peer.storageState) };
+    return { ...peer, storageState: basename2(peer.storageState) };
   });
 }
 function embedScript(doc, dir) {
@@ -7572,7 +7624,7 @@ async function cmdList(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const rows = await listFolders(origin, key);
   if (r.json) {
     r.done({ folders: rows }, "");
@@ -7597,7 +7649,7 @@ async function cmdCreate(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const parentRef = strFlag(flags, "parent");
   let parentId;
   if (parentRef) {
@@ -7632,7 +7684,7 @@ async function cmdMove(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const folderId = toRef === "none" ? null : resolveFolder(await listFolders(origin, key), toRef).id;
   let failed = 0;
   const moved = [];
@@ -7692,7 +7744,7 @@ async function cmdPull(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const folder = resolveFolder(await listFolders(origin, key), ref);
   const res = await apiJson(origin, `/api/folders/${folder.id}`, { key });
   if (res.status !== 200)
@@ -7901,9 +7953,10 @@ function hostOf(origin) {
 
 // src/plugin/sync.ts
 function apiContext(flags) {
+  const origin = platformOrigin(flags);
   return {
-    origin: platformOrigin(flags),
-    key: requireCredential(flags.key, platformOrigin(flags))
+    origin,
+    key: requireCredential({ key: flags.key, account: flags.account, origin })
   };
 }
 async function api(ctx, path, init) {
@@ -8098,7 +8151,7 @@ async function pushTake(dir, flags, r) {
   const lowered = lowerToComposition3(docForPush);
   const config = { ...lowered.config, data: lowered.data };
   if (!state) {
-    const title = flags.title ?? `Take ${basename2(dir)} ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}`;
+    const title = flags.title ?? `Take ${basename3(dir)} ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}`;
     const slug = `${title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || "take"}-${Date.now().toString(36)}`;
     const created = await api(ctx, "/vos", {
       method: "POST",
@@ -8290,7 +8343,7 @@ async function pullTake(dir, flags, r) {
   const doc = hostedDoc;
   const localRecording = takeMediaFile(dir, "recording", RECORDING_NAME);
   if (existsSync13(localRecording)) {
-    doc.source.videoKey = basename2(localRecording);
+    doc.source.videoKey = basename3(localRecording);
   }
   await writeJson(join14(dir, "doc.json"), doc, true);
   const media = flags.media ? await pullMedia(ctx, dir, doc, r.log) : void 0;
@@ -8390,7 +8443,7 @@ async function pushTakeClaimable(dir, flags, r) {
   }
   const lowered = lowerToComposition3(docForPush);
   const config = { ...lowered.config, data: lowered.data };
-  const title = (flags.title ?? (state?.title ? `${state.title} remix` : basename2(dir))).slice(0, 200);
+  const title = (flags.title ?? (state?.title ? `${state.title} remix` : basename3(dir))).slice(0, 200);
   const body = { title, config, doc: docForPush };
   if (state?.vosId) body.remixOfId = state.vosId;
   if (flags.prompt) body.prompt = flags.prompt;
@@ -8418,7 +8471,7 @@ async function pushTakeClaimable(dir, flags, r) {
 import { existsSync as existsSync15 } from "fs";
 import { mkdir as mkdir7, readFile as readFile12 } from "fs/promises";
 import { createInterface as createInterface3 } from "readline/promises";
-import { basename as basename4, dirname as dirname2, join as join15 } from "path";
+import { basename as basename5, dirname as dirname2, join as join15 } from "path";
 import {
   CURRENT_CONFIG_VERSION,
   migrateConfig,
@@ -8427,7 +8480,7 @@ import {
 import { lowerProgramDoc, migrateHostedDoc as migrateHostedDoc3 } from "@vosjs/studio-core";
 
 // src/plugin/programFiles.ts
-import { basename as basename3, extname as extname2, relative as relative2 } from "path";
+import { basename as basename4, extname as extname2, relative as relative2 } from "path";
 import { existsSync as existsSync14, realpathSync as realpathSync2 } from "fs";
 function isLocalName(value) {
   if (/^(https?:|data:|blob:|asset:|media:)/.test(value)) return false;
@@ -8438,7 +8491,7 @@ function isLocalName(value) {
 }
 var FILE_EXT = /\.(png|jpe?g|webp|gif|avif|svg|mp4|webm|mov|mp3|m4a|ogg|wav|flac|aac|glb|gltf|woff2?|ttf|otf|hdr|exr)$/i;
 function manifestName(file, taken) {
-  const stem = basename3(file, extname2(file)).replace(/[^A-Za-z0-9_]/g, "_").replace(/^(?=[0-9])/, "_") || "file";
+  const stem = basename4(file, extname2(file)).replace(/[^A-Za-z0-9_]/g, "_").replace(/^(?=[0-9])/, "_") || "file";
   let name = stem;
   for (let n = 2; taken.has(name); n++) name = `${stem}_${n}`;
   taken.add(name);
@@ -8857,7 +8910,7 @@ async function cmdPushProgram(argv) {
         "--claimable creates a NEW claimable vos and cannot iterate (--vos). After the human claims it, iterate with their key: vos push --vos <id>"
       );
     }
-    const fallback = state?.title ? `${state.title} remix` : basename4(source).replace(/\.json$/i, "") || "vos program";
+    const fallback = state?.title ? `${state.title} remix` : basename5(source).replace(/\.json$/i, "") || "vos program";
     const title2 = (strFlag(flags, "title") ?? fallback).slice(0, 100);
     const files2 = await collectFiles(config, programDoc, dir, r);
     let uploadToken;
@@ -8913,7 +8966,7 @@ with their key: vos push ${source} --vos ${String(created2.id ?? "<id>")}`
     );
     return EXIT_OK;
   }
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   void flags.yes;
   const files = await collectFiles(config, programDoc, dir, r);
   await files.upload({ origin, key });
@@ -9031,7 +9084,7 @@ ${landedLines(landed2)}` : "")
     return EXIT_OK;
   }
   const remixOfId = pushTarget.kind === "create" ? pushTarget.remixOfId : void 0;
-  const fallbackTitle = state?.title ? `${state.title} remix` : basename4(source).replace(/\.json$/i, "") || "vos remix";
+  const fallbackTitle = state?.title ? `${state.title} remix` : basename5(source).replace(/\.json$/i, "") || "vos remix";
   const title = (strFlag(flags, "title") ?? fallbackTitle).slice(0, 100);
   const pushFolder = folderRef ? await resolvePushFolder(origin, key, folderRef) : void 0;
   const folderId = pushFolder?.id;
@@ -9128,7 +9181,7 @@ async function cmdPullProgram(argv) {
       `no base version in ${dir}/vos.json \u2014 pass --since <versionId>`
     );
   }
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const res = await apiJson(
     origin,
     `/api/vos/${vosId}/changes?since=${encodeURIComponent(since)}`,
@@ -9227,16 +9280,21 @@ async function cmdLogin(argv) {
   });
   const handoffUrl = strFlag(flags, "handoff");
   if (handoffUrl) {
+    const before = await nameActiveCredential(
+      parseHandoffUrl(handoffUrl)?.origin ?? origin
+    );
     const done = await handoffLogin(handoffUrl, r);
     r.done(
       {
         path: done.path,
         origin: done.origin,
         user: done.user,
+        account: done.account,
         keyName: done.keyName,
+        ...setAsideFacts(before, done.account),
         next_step: "the link is spent; vos push when you want the work hosted"
       },
-      `Signed in${done.user ? ` as ${done.user}` : ""} \u2014 key "${done.keyName}" stored at ${done.path} (used by every vos platform verb). The link is spent.`
+      `Signed in${signedAs(done.user, done.account)} \u2014 key "${done.keyName}" stored at ${done.path} (used by every vos platform verb). The link is spent.${setAsideLine(before, done.account)}`
     );
     return EXIT_OK;
   }
@@ -9244,13 +9302,14 @@ async function cmdLogin(argv) {
   if (explicit) return storeKey(explicit, origin, r);
   try {
     const openBrowser = process.stdout.isTTY === true && !process.env.SSH_CONNECTION && !process.env.SSH_TTY && flags.json !== true && flags["no-browser"] !== true;
-    const { path, user } = await browserLogin(origin, r, {
+    const before = await nameActiveCredential(origin);
+    const { path, user, account } = await browserLogin(origin, r, {
       label: strFlag(flags, "label"),
       openBrowser
     });
     r.done(
-      { path, origin, user },
-      `Signed in${user ? ` as ${user}` : ""} \u2014 key stored at ${path} (used by every vos platform verb)`
+      { path, origin, user, account, ...setAsideFacts(before, account) },
+      `Signed in${signedAs(user, account)} \u2014 key stored at ${path} (used by every vos platform verb).${setAsideLine(before, account)}`
     );
     return EXIT_OK;
   } catch (e) {
@@ -9268,17 +9327,57 @@ async function cmdLogin(argv) {
   return storeKey(key, origin, r);
 }
 async function storeKey(key, origin, r) {
-  const probe3 = await apiJson(origin, "/api/folders", { key });
-  if (probe3.status === 401 || probe3.status === 403) {
-    throw new Error(apiError("validate key", probe3));
+  const who = await apiJson(origin, "/api/user/whoami", { key });
+  if (who.status === 401 || who.status === 403) {
+    throw new Error(apiError("validate key", who));
+  }
+  let account = null;
+  if (who.status === 200) account = accountFrom(who.body.user);
+  else {
+    const probe3 = await apiJson(origin, "/api/folders", { key });
+    if (probe3.status === 401 || probe3.status === 403) {
+      throw new Error(apiError("validate key", probe3));
+    }
   }
-  const path = writeCredential(key, origin);
+  const before = await nameActiveCredential(origin);
+  const path = writeCredential(key, origin, void 0, account);
   r.done(
-    { path, origin },
-    `Signed in \u2014 key stored at ${path} (used by every vos platform verb)`
+    { path, origin, account, ...setAsideFacts(before, account) },
+    `Signed in${signedAs("", account)} \u2014 key stored at ${path} (used by every vos platform verb).${setAsideLine(before, account)}`
   );
   return EXIT_OK;
 }
+function signedAs(user, account) {
+  if (account) return ` as ${accountLabel(account)}`;
+  return user ? ` as ${user}` : "";
+}
+async function nameActiveCredential(origin) {
+  const active = readActive(DEFAULT_STORE);
+  if (!active || active.origin !== originOf(origin)) return active;
+  if (active.account) return active;
+  try {
+    const who = await apiJson(origin, "/api/user/whoami", { key: active.key });
+    const account = who.status === 200 ? accountFrom(who.body.user) : null;
+    if (!account) return active;
+    const named = { ...active, account };
+    activate(DEFAULT_STORE, named);
+    return named;
+  } catch {
+    return active;
+  }
+}
+function setAsideFacts(before, account) {
+  if (!before || account && before.account?.id === account.id) return {};
+  return before.account ? { setAside: before.account } : { replaced: true };
+}
+function setAsideLine(before, account) {
+  const facts = setAsideFacts(before, account);
+  if (facts.setAside)
+    return ` ${accountLabel(facts.setAside)} stays stored; vos switch ${facts.setAside.handle ?? facts.setAside.id} when you need it.`;
+  if (facts.replaced)
+    return " The credential stored before had no name on file and was replaced.";
+  return "";
+}
 function isTakeDir(target) {
   return directoryKind(target) === "take";
 }
@@ -9357,7 +9456,7 @@ async function writeProgramDoc(dir, hosted) {
 // src/plugin/asset.ts
 import { createHash as createHash2 } from "crypto";
 import { readFileSync as readFileSync4 } from "fs";
-import { basename as basename5 } from "path";
+import { basename as basename6 } from "path";
 
 // src/plugin/assetWords.ts
 function hostedFile(raw) {
@@ -9594,7 +9693,7 @@ async function cmdRename(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const res = await apiJson(origin, `/api/assets/${assetId}`, {
     method: "PATCH",
     key,
@@ -9617,12 +9716,12 @@ async function cmdPush(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const folderRef = strFlag(flags, "folder");
   const folder = folderRef ? resolveFolder(await listFolders(origin, key), folderRef) : null;
   const uploaded = [];
   for (const file of positionals) {
-    const name = basename5(file);
+    const name = basename6(file);
     const body = readFileSync4(file);
     const media = resolveMediaType({
       head: body.subarray(0, MEDIA_HEAD_BYTES),
@@ -9698,7 +9797,7 @@ async function cmdImport(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const folderRef = strFlag(flags, "folder");
   const folder = folderRef ? resolveFolder(await listFolders(origin, key), folderRef) : null;
   const refused = fetchRefusal(url);
@@ -9782,7 +9881,7 @@ async function cmdList2(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const params = new URLSearchParams({
     limit: String(Math.min(200, Math.max(1, numFlag(flags, "limit", 50))))
   });
@@ -9815,7 +9914,7 @@ async function cmdUsage(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const res = await apiJson(origin, "/api/user/usage", { key });
   if (res.status !== 200) throw new Error(apiError("read usage", res));
   const usage = res.body.usage ?? {};
@@ -9842,7 +9941,7 @@ async function cmdWhy(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const res = await apiJson(origin, `/api/assets/${assetId}`, { key });
   if (res.status !== 200) throw new Error(apiError(`read ${assetId}`, res));
   const asset = hostedFile(res.body.asset);
@@ -9937,7 +10036,7 @@ function context(flags) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   }).replace(/\/+$/, "");
-  return { origin, key: requireCredential(strFlag(flags, "key")) };
+  return { origin, key: requireCredential(credentialFlags(flags)) };
 }
 async function readTrash(ctx) {
   const res = await apiJson(ctx.origin, "/api/trash", { key: ctx.key });
@@ -10065,7 +10164,7 @@ async function cmdDelete(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   }).replace(/\/+$/, "");
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   const dir = existsSync16(target) && statSync3(target).isDirectory() ? target : null;
   const vosId = dir ? readSyncState(dir)?.vosId : parseVosId(target);
   if (!vosId)
@@ -10140,7 +10239,7 @@ function trackingCwd(vosId) {
 
 // src/plugin/buildProgram.ts
 import { readFileSync as readFileSync5, writeFileSync as writeFileSync2 } from "fs";
-import { basename as basename6, dirname as dirname3, join as join17, resolve as resolve8 } from "path";
+import { basename as basename7, dirname as dirname3, join as join17, resolve as resolve8 } from "path";
 import { pathToFileURL as pathToFileURL2 } from "url";
 import { parse } from "acorn";
 import { fullAncestor } from "acorn-walk";
@@ -10348,7 +10447,7 @@ async function cmdBuild(argv) {
     throw new UsageError(
       `${source} exports no program: \`export default { version: 2, duration, camera, createContent, createTimeline, \u2026 }\``
     );
-  const built = buildProgram(program, basename6(file), text);
+  const built = buildProgram(program, basename7(file), text);
   for (const p of built.problems) r.log(`error ${p.fn}: ${p.message}`);
   if (built.problems.length) {
     r.done(
@@ -10583,7 +10682,7 @@ import { findFontFamily as findFontFamily3 } from "@vosjs/shared";
 import { existsSync as existsSync18, readFileSync as readFileSync6, readdirSync as readdirSync3, statSync as statSync5 } from "fs";
 import { createServer as createServer2 } from "http";
 import { createRequire } from "module";
-import { basename as basename7, extname as extname3, join as join19 } from "path";
+import { basename as basename8, extname as extname3, join as join19 } from "path";
 function themeColors(sources) {
   const out = {};
   const re = /\bconst\s+([A-Za-z_$][\w$]*)\s*(?::\s*string\s*)?=\s*['"](#[0-9a-fA-F]{3,8})['"]/g;
@@ -10863,7 +10962,7 @@ async function readRemotion(dir, log) {
     const sources = sourceTexts(dir);
     const publicDir = join19(dir, "public");
     const media = tree.audio.map((a) => {
-      const name = basename7(a.src.split("?")[0]);
+      const name = basename8(a.src.split("?")[0]);
       const local = existsSync18(join19(publicDir, name)) ? `public/${name}` : a.src;
       return {
         kind: "audio",
@@ -11366,7 +11465,7 @@ async function readInventory(source, opts) {
 // src/plugin/portScaffold.ts
 import { spawnSync as spawnSync3 } from "child_process";
 import { copyFileSync, existsSync as existsSync20, mkdirSync as mkdirSync4, writeFileSync as writeFileSync4 } from "fs";
-import { basename as basename8, dirname as dirname6, join as join21, resolve as resolve11 } from "path";
+import { basename as basename9, dirname as dirname6, join as join21, resolve as resolve11 } from "path";
 import { findFontFamily as findFontFamily4, fontFaceUrl, nearestFontWeight } from "@vosjs/shared";
 
 // src/plugin/painterLib.ts
@@ -11776,7 +11875,7 @@ function planScaffold(inv, opts) {
   const copies = [];
   inv.media.filter((m) => m.kind === "audio" && m.src).forEach((m, i) => {
     const from = resolve11(opts.sourceDir, m.src);
-    const name = basename8(from);
+    const name = basename9(from);
     if (!existsSync20(from)) {
       report.push(
         `- the audio ${m.src} is not in the source folder; add it to doc.json by hand`
@@ -11929,7 +12028,7 @@ ${sceneTodos}${springHint}
 }
 function reportText(inv, r) {
   const lines = [
-    `# Port report: ${inv.source === "." && inv.root ? basename8(inv.root) : inv.source}`,
+    `# Port report: ${inv.source === "." && inv.root ? basename9(inv.root) : inv.source}`,
     "",
     `${inv.engine} piece, ${inv.width}\xD7${inv.height}${inv.fps ? ` at ${inv.fps} fps` : ""}, ${inv.duration ?? "?"} s. A program has no size of its own: render it with \`--width ${inv.width} --height ${inv.height}\`.`,
     "",
@@ -12093,11 +12192,11 @@ function scaffoldSourceDir(inv) {
 // src/plugin/recipe.ts
 import { createHash as createHash3 } from "crypto";
 import { readFileSync as readFileSync9 } from "fs";
-import { basename as basename9 } from "path";
+import { basename as basename10 } from "path";
 var BOOLEAN_FLAGS9 = /* @__PURE__ */ new Set(["json", "help"]);
 var USAGE = "vos recipe push <file.md> (--folder <folderId|slug> | --asset <assetId>)";
 function recipeFilename(file) {
-  const name = basename9(file);
+  const name = basename10(file);
   if (!/\.md$/i.test(name)) {
     throw new UsageError(`a recipe is a markdown file \u2014 ${name} is not .md`);
   }
@@ -12118,7 +12217,7 @@ async function cmdPush2(argv) {
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = requireCredential(strFlag(flags, "key"));
+  const key = requireCredential(credentialFlags(flags));
   if (assetId) {
     const res = await apiJson(origin, `/api/assets/${assetId}/file`, {
       method: "PUT",
@@ -13203,7 +13302,7 @@ async function cmdActionsScript(input, flags) {
 // src/plugin/ingest.ts
 import { existsSync as existsSync22 } from "fs";
 import { copyFile, mkdir as mkdir8, readFile as readFile13, stat as stat2 } from "fs/promises";
-import { basename as basename10, join as join23, resolve as resolve15 } from "path";
+import { basename as basename11, join as join23, resolve as resolve15 } from "path";
 
 // src/plugin/traceInflate.ts
 import { inflateRawSync } from "zlib";
@@ -13330,7 +13429,7 @@ async function copyRecording(src, dest, ext2) {
   }
 }
 async function readTraceFile(path, offsetMs) {
-  const kind = traceKindOf(basename10(path));
+  const kind = traceKindOf(basename11(path));
   if (!kind) {
     throw new UsageError(
       `${path}: not a trace the recorder reads (trace.zip, .trace, .jsonl, .json or .csv)`
@@ -13351,7 +13450,7 @@ async function readTraceFile(path, offsetMs) {
     return cursorFromPlaywrightTrace(text2, { offsetMs });
   }
   const text = await readFile13(path, "utf8");
-  return cursorFromTrace(basename10(path), text, { offsetMs });
+  return cursorFromTrace(basename11(path), text, { offsetMs });
 }
 function parseViewport(v) {
   if (!v) return null;
@@ -13382,7 +13481,7 @@ async function cmdIngest(argv) {
       "note: finished footage opens bare, so --background is not used (pass --as take for the screen-recording card and its ground)"
     );
   const backdrop = footage ? null : await takeBackdrop(flags, r);
-  r.log(`probing ${basename10(videoPath)}\u2026`);
+  r.log(`probing ${basename11(videoPath)}\u2026`);
   const probed = await probeVideoFile(videoPath);
   if (!(probed.durationMs > 0)) {
     throw new UsageError(
@@ -13431,13 +13530,13 @@ async function cmdIngest(argv) {
   const clicks = events.filter((e) => e.type === "down").length;
   const seconds = (probed.durationMs / 1e3).toFixed(1);
   const facts = `${seconds}s, ${probed.width}\xD7${probed.height} @ ${meta.fps} fps${probed.hasAudio ? ", audio" : ", no audio"}${remuxed ? "" : ", copied as is"}`;
-  const cursorLine = trace ? `${events.length} cursor events (${clicks} clicks) from ${basename10(cursorPath)}${trace.dropped ? `, ${trace.dropped} not placed` : ""}; ${plan.zoomAuto} zoom${plan.zoomAuto === 1 ? "" : "s"} planned` : "no cursor track, so nothing was planned";
+  const cursorLine = trace ? `${events.length} cursor events (${clicks} clicks) from ${basename11(cursorPath)}${trace.dropped ? `, ${trace.dropped} not placed` : ""}; ${plan.zoomAuto} zoom${plan.zoomAuto === 1 ? "" : "s"} planned` : "no cursor track, so nothing was planned";
   const opened = footage ? `opened as finished footage: no card, no browser bar, no drawn cursor, ${meta.fps > 30 ? 60 : 30} fps export (--as take for a screen recording's card)` : `opened as a screen recording: the card, its ground and the drawn cursor (--as footage to open it bare)`;
   const next = footage && !trace ? `Next: vos push ${outDir} --wait \u2014 it lands as it is; trim or add to it in the studio` : trace ? `Next: vos digest ${outDir} \u2014 look before you cut; edit doc.json; vos push ${outDir}` : `Add --cursor <trace> recorded beside the video (a Playwright trace.zip, stamped JSON records, or a t,x,y,type CSV) to plan zooms from its clicks; else place them by eye: vos frames ${outDir} --times 0,25%,50%,75%,100%, then edit doc.json`;
   r.done(
     {
       out: outDir,
-      recording: basename10(recording),
+      recording: basename11(recording),
       durationMs: probed.durationMs,
       width: probed.width,
       height: probed.height,
@@ -13446,7 +13545,7 @@ async function cmdIngest(argv) {
       hasAudio: probed.hasAudio,
       remuxed,
       cursor: trace ? {
-        file: basename10(cursorPath),
+        file: basename11(cursorPath),
         kind: trace.kind,
         events: events.length,
         clicks,
@@ -13458,7 +13557,7 @@ async function cmdIngest(argv) {
       backdrop: plan.backdrop ?? null,
       as: footage ? "footage" : "take"
     },
-    `Ingested ${basename10(videoPath)} \u2192 ${outDir}/${basename10(recording)} (${facts})
+    `Ingested ${basename11(videoPath)} \u2192 ${outDir}/${basename11(recording)} (${facts})
   ${opened}
   ${cursorLine}
   ${next}`
@@ -13470,7 +13569,7 @@ async function cmdIngest(argv) {
 import { createRequire as createRequire2 } from "module";
 import { existsSync as existsSync23 } from "fs";
 import { mkdir as mkdir9, readFile as readFile14, stat as stat3, writeFile as writeFile7 } from "fs/promises";
-import { basename as basename11, dirname as dirname8, extname as extname4, join as join24, resolve as resolve16 } from "path";
+import { basename as basename12, dirname as dirname8, extname as extname4, join as join24, resolve as resolve16 } from "path";
 import { ALL_FORMATS as ALL_FORMATS2, FilePathSource as FilePathSource2, Input as Input2 } from "mediabunny";
 
 // src/plugin/videoChecks.ts
@@ -13992,7 +14091,7 @@ async function checkVideo(browser, file, outDir) {
     void page.evaluate(decodeInPage, {
       mbCode: await mediabunnyBundle(),
       meterSrc: String(createLoudnessMeter),
-      videoUrl: `/${encodeURIComponent(basename11(file))}`,
+      videoUrl: `/${encodeURIComponent(basename12(file))}`,
       sampleFps,
       thumbW: side(facts.width),
       thumbH: side(facts.height),
@@ -14100,7 +14199,7 @@ async function cmdCheckVideo(argv) {
   const r = createReporter(flags.json === true);
   const strict = flags.strict === true;
   const outDir = resolve16(
-    strFlag(flags, "out") ?? join24(dirname8(file), `${basename11(file, extname4(file))}-check`)
+    strFlag(flags, "out") ?? join24(dirname8(file), `${basename12(file, extname4(file))}-check`)
   );
   const browser = await launchBrowser();
   try {
@@ -14118,7 +14217,7 @@ async function cmdCheckVideo(argv) {
 import { existsSync as existsSync26, readdirSync as readdirSync5, statSync as statSync7 } from "fs";
 import { copyFile as copyFile3, mkdir as mkdir11, readFile as readFile17, rm as rm4 } from "fs/promises";
 import {
-  basename as basename13,
+  basename as basename14,
   dirname as dirname9,
   isAbsolute as isAbsolute4,
   join as join27,
@@ -14149,13 +14248,15 @@ import {
   writeFile as writeFile8
 } from "fs/promises";
 import { tmpdir as tmpdir2 } from "os";
-import { basename as basename12, isAbsolute as isAbsolute3, join as join25, relative as relative4, resolve as resolve17, sep as sep3 } from "path";
+import { basename as basename13, isAbsolute as isAbsolute3, join as join25, relative as relative4, resolve as resolve17, sep as sep3 } from "path";
+import { rankBeds as rankBeds2 } from "@vosjs/shared/music";
 import {
   NORMALIZE_MAX_LUFS as NORMALIZE_MAX_LUFS2,
   NORMALIZE_MIN_LUFS as NORMALIZE_MIN_LUFS2,
   clipGain as clipGain2,
   docMediaList,
   docOutputDuration as docOutputDuration3,
+  filmSummaryOf as filmSummaryOf2,
   findStep as findStep2,
   ratedSegments as ratedSegments7,
   resolveAnchor as resolveAnchor4
@@ -14464,7 +14565,7 @@ async function measureInBrowser(path) {
   const bytes = await readFile15(path);
   if (bytes.length > BROWSER_DECODE_MAX_BYTES)
     throw new Error(
-      `${basename12(path)} is ${Math.round(bytes.length / 1048576)} MB, past the ${BROWSER_DECODE_MAX_BYTES / 1048576} MB the browser decode takes whole`
+      `${basename13(path)} is ${Math.round(bytes.length / 1048576)} MB, past the ${BROWSER_DECODE_MAX_BYTES / 1048576} MB the browser decode takes whole`
     );
   const browser = await launchBrowser();
   try {
@@ -14568,12 +14669,12 @@ async function resolveTrack(dir, ref, flags, dryRun) {
   if (existsSync24(local)) {
     const rel = relative4(resolve17(dir), local);
     const inside = !!rel && !rel.startsWith(`..${sep3}`) && rel !== ".." && !isAbsolute3(rel);
-    const key = inside ? rel.split(sep3).join("/") : `music/${basename12(local)}`;
+    const key = inside ? rel.split(sep3).join("/") : `music/${basename13(local)}`;
     if (!inside && !dryRun) {
       await mkdir10(join25(dir, "music"), { recursive: true });
       await copyFile2(local, join25(dir, key));
     }
-    return { path: local, key, name: basename12(local) };
+    return { path: local, key, name: basename13(local) };
   }
   const origin = platformOrigin({
     origin: strFlag(flags, "origin"),
@@ -14588,7 +14689,7 @@ async function resolveTrack(dir, ref, flags, dryRun) {
   const res = await fetch(track.url);
   if (!res.ok) throw new Error(`GET ${track.url} answered ${res.status}`);
   const tmp = await mkdtemp(join25(tmpdir2(), "vos-score-"));
-  const path = join25(tmp, basename12(new URL(track.url).pathname) || "track");
+  const path = join25(tmp, basename13(new URL(track.url).pathname) || "track");
   await writeFile8(path, new Uint8Array(await res.arrayBuffer()));
   return {
     path,
@@ -14598,7 +14699,7 @@ async function resolveTrack(dir, ref, flags, dryRun) {
   };
 }
 var BOOLEAN_FLAGS12 = /* @__PURE__ */ new Set(["json", "help", "dry-run"]);
-var USAGE2 = "vos score <take> --track <slug|file> [--at <step id|output seconds>] [--gain 0..1] [--normalize <lufs|off>] [--fade-in <s>] [--fade-out <s>] [--dry-run] [--json]";
+var USAGE2 = 'vos score <take> --track <slug|file|best> [--at <step id|output seconds>] [--mood <slug|tag>] [--words "\u2026"] [--gain 0..1] [--normalize <lufs|off>] [--fade-in <s>] [--fade-out <s>] [--dry-run] [--json]';
 async function cmdScore(argv) {
   const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS12);
   const dir = positionals[0];
@@ -14625,8 +14726,39 @@ async function cmdScore(argv) {
     throw new UsageError(`${dir} has no doc.json; run vos plan first`);
   const doc = take.doc;
   const atRaw = strFlag(flags, "at");
-  const at2 = atRaw !== void 0 ? resolveAt(doc, atRaw) : null;
-  const track = await resolveTrack(dir, trackRef, flags, dryRun);
+  let at2 = atRaw !== void 0 ? resolveAt(doc, atRaw) : null;
+  let chosen = trackRef;
+  if (trackRef === "best") {
+    const origin = platformOrigin({
+      origin: strFlag(flags, "origin"),
+      api: strFlag(flags, "api")
+    });
+    const catalog = await fetchMusicCatalog(origin);
+    const film2 = filmSummaryOf2(doc, {
+      seed: readSyncState(dir)?.vosId ?? basename13(resolve17(dir)),
+      ...at2 ? { payoff: at2.at } : {},
+      mood: strFlag(flags, "mood"),
+      words: strFlag(flags, "words")
+    });
+    const ranked = rankBeds2(catalog.tracks, film2).filter(
+      (x) => x.score !== null
+    );
+    const best = ranked[0];
+    if (!best)
+      throw new UsageError(
+        `no bed in the library fits this ${film2.duration.toFixed(1)}s film (every track refused); compose a score instead, or name a track with --track <slug>`
+      );
+    chosen = best.slug;
+    if (!at2 && film2.payoff !== void 0)
+      at2 = {
+        at: film2.payoff,
+        via: `the film's payoff (${film2.payoff.toFixed(2)}s)`
+      };
+    r.log(
+      `picked ${best.slug} (${best.reasons.join("; ") || "ranked first"})${ranked[1] ? `; runner-up ${ranked[1].slug}` : ""}`
+    );
+  }
+  const track = await resolveTrack(dir, chosen, flags, dryRun);
   let measured;
   try {
     r.log(`measuring ${track.name}\u2026`);
@@ -16220,7 +16352,7 @@ function joinDocs(parts, opts = {}) {
           {
             id,
             key: d.source.videoKey,
-            name: basename13(part.file.path),
+            name: basename14(part.file.path),
             start: round33(at2.start),
             in: round33(seg.in),
             out: round33(seg.out),
@@ -16465,7 +16597,7 @@ async function cmdJoin(argv) {
       const remuxed = await copyRecording(c.from, to, c.remux);
       if (!remuxed && c.remux !== "mov")
         plan.notes.push(
-          `could not read ${basename13(c.from)}'s audio in Node, so it was copied as it is; its length comes from the container`
+          `could not read ${basename14(c.from)}'s audio in Node, so it was copied as it is; its length comes from the container`
         );
     } else await copyFile3(c.from, to);
   }
@@ -16839,7 +16971,7 @@ async function cmdTakeInfo(argv) {
 // src/plugin/audio.ts
 import { mkdtemp as mkdtemp2, rm as rm5, writeFile as writeFile9 } from "fs/promises";
 import { tmpdir as tmpdir3 } from "os";
-import { basename as basename14, join as join29 } from "path";
+import { basename as basename15, join as join29 } from "path";
 import { clipGain as clipGain3 } from "@vosjs/studio-core";
 var USAGE4 = "vos audio measure <take> [--json]";
 async function fileFor(dir, key, fetchImpl) {
@@ -16852,7 +16984,7 @@ async function fileFor(dir, key, fetchImpl) {
     const res = await fetchImpl(key);
     if (!res.ok) return { skipped: `GET ${key} answered ${res.status}` };
     const tmp = await mkdtemp2(join29(tmpdir3(), "vos-audio-"));
-    const path = join29(tmp, basename14(new URL(key).pathname) || "audio");
+    const path = join29(tmp, basename15(new URL(key).pathname) || "audio");
     await writeFile9(path, new Uint8Array(await res.arrayBuffer()));
     return { path, cleanup: () => rm5(tmp, { recursive: true, force: true }) };
   }
@@ -16932,11 +17064,238 @@ async function cmdAudio(argv) {
   return failed.length ? EXIT_ERROR : EXIT_OK;
 }
 
+// src/plugin/musicCmd.ts
+import { existsSync as existsSync27, readFileSync as readFileSync10, statSync as statSync8 } from "fs";
+import { basename as basename16, resolve as resolve20 } from "path";
+import { rankBeds as rankBeds3, trackBySlug as trackBySlug2 } from "@vosjs/shared/music";
+import { filmSummaryOf as filmSummaryOf3, musicSlugsOfDoc } from "@vosjs/studio-core";
+var BOOLEAN_FLAGS14 = /* @__PURE__ */ new Set([
+  "json",
+  "help",
+  "loops",
+  "voice",
+  "no-voice",
+  "fade-in"
+]);
+var MULTI_FLAGS3 = /* @__PURE__ */ new Set(["like"]);
+var USAGE5 = 'vos music ls [--mood <slug>] [--vocals none|chops|lead] [--loops] [--bpm <lo>-<hi>] [--min-length <s>] [--q <words>] [--json]\nvos music pick <take|config.json> [--at <step id|seconds>] [--mood <slug|tag>] [--words "\u2026"] [--voice|--no-voice] [--like <vos id|slug>]... [--top <n>] [--json]';
+var mmss = (s) => {
+  const whole = Math.round(s);
+  return `${Math.floor(whole / 60)}:${String(whole % 60).padStart(2, "0")}`;
+};
+var VOCAL_WORDS = {
+  none: "no vocals",
+  chops: "vocal chops",
+  lead: "sung lead"
+};
+function trackLine(t) {
+  const bpm = t.bpm === null || t.bpm === void 0 ? "\u2014" : `${t.bpm} bpm${t.beatConfidence === "low" ? "?" : t.beatConfidence === "confirmed" ? "" : ""}`;
+  return [
+    t.slug.padEnd(26),
+    (t.mood ?? "").padEnd(10),
+    mmss(t.duration).padStart(5),
+    bpm.padStart(10),
+    VOCAL_WORDS[t.vocals ?? "none"].padEnd(11),
+    t.loops ? "loops" : "     ",
+    t.description ? JSON.stringify(t.description) : ""
+  ].join("  ");
+}
+function bpmRange(raw) {
+  if (!raw) return null;
+  const m = /^(\d+(?:\.\d+)?)\s*-\s*(\d+(?:\.\d+)?)$/.exec(raw.trim());
+  if (m) return [Number(m[1]), Number(m[2])];
+  const one = Number(raw);
+  if (Number.isFinite(one)) return [one, Infinity];
+  throw new UsageError(`--bpm expects <lo>-<hi>, got "${raw}"`);
+}
+function filterTracks(tracks, f) {
+  const q = f.q?.toLowerCase().trim();
+  const words2 = q ? q.split(/\s+/).filter(Boolean) : [];
+  return tracks.filter((t) => {
+    if (t.removedAt) return false;
+    if (f.mood && (t.mood ?? "").toLowerCase() !== f.mood.toLowerCase()) {
+      if (!(t.tags ?? []).some((x) => x.toLowerCase() === f.mood.toLowerCase()))
+        return false;
+    }
+    if (f.vocals && (t.vocals ?? "none") !== f.vocals) return false;
+    if (f.loops && !t.loops) return false;
+    if (f.bpm) {
+      if (t.bpm === null || t.bpm === void 0) return false;
+      if (t.bpm < f.bpm[0] || t.bpm > f.bpm[1]) return false;
+    }
+    if (f.minLength !== void 0 && t.duration < f.minLength && !t.loops)
+      return false;
+    if (words2.length) {
+      const hay = [
+        t.slug,
+        t.title,
+        t.artist ?? "",
+        t.mood ?? "",
+        ...t.tags ?? [],
+        t.description ?? ""
+      ].join(" ").toLowerCase();
+      if (!words2.every((w) => hay.includes(w))) return false;
+    }
+    return true;
+  });
+}
+async function loadFilm(ref) {
+  const path = resolve20(ref);
+  if (!existsSync27(path)) throw new UsageError(`${ref}: no such take or file`);
+  if (statSync8(path).isDirectory()) {
+    const take = await loadTake(path);
+    if (!take.doc)
+      throw new UsageError(`${ref} has no doc.json; run vos plan first`);
+    const sync = readSyncState(path);
+    return { doc: take.doc, seed: sync?.vosId ?? basename16(path), dir: path };
+  }
+  let config;
+  try {
+    config = JSON.parse(readFileSync10(path, "utf8"));
+  } catch {
+    throw new UsageError(`${ref}: not a take directory or a JSON config`);
+  }
+  if (!config || typeof config !== "object" || !("version" in config))
+    throw new UsageError(`${ref}: a program's config.json carries a version`);
+  const doc = {
+    program: { config },
+    audio: [],
+    overlays: [],
+    objects: []
+  };
+  return { doc, seed: basename16(path, ".json"), dir: null };
+}
+async function likedSlugs(refs, origin) {
+  const slugs = /* @__PURE__ */ new Set();
+  const notes = [];
+  for (const ref of refs) {
+    const id = parseVosId(ref);
+    if (!id) {
+      slugs.add(ref.toLowerCase());
+      continue;
+    }
+    try {
+      const vos = await (await fetch(`${origin}/api/vos/${id}`)).json();
+      if (!vos.currentVersionId) throw new Error("no version");
+      const doc = await (await fetch(
+        `${origin}/api/vos/${id}/versions/${vos.currentVersionId}/doc`
+      )).json();
+      for (const s of musicSlugsOfDoc(doc)) slugs.add(s);
+    } catch {
+      notes.push(
+        `--like ${ref}: could not read that vos's document (is it public?)`
+      );
+    }
+  }
+  return { slugs: [...slugs], notes };
+}
+function scoreLine(take, r, film) {
+  const at2 = r.placement?.swellAt ?? film.payoff;
+  return `vos score ${take ?? "<take>"} --track ${r.slug}${at2 !== void 0 && at2 !== null ? ` --at ${at2}` : ""}`;
+}
+function pickWords(picks, all, film, take) {
+  const refused = all.filter((r) => r.score === null);
+  const head = `${film.duration.toFixed(1)}s film, ${film.cuts.length} cut${film.cuts.length === 1 ? "" : "s"}${film.payoff !== void 0 ? `, payoff at ${mmss(film.payoff)}` : ""}${film.voice ? ", a voice" : ""}${film.mood ? `, asked ${film.mood}` : ""}${film.words ? `, asked "${film.words}"` : ""}`;
+  if (!picks.length) {
+    return `${head}
+  No bed in the library fits: ${refused.length} refused (${[...new Set(refused.map((r) => r.refused))].slice(0, 3).join("; ")}). Compose a score instead (the vos-score skill), or ask with --words.`;
+  }
+  const lines = picks.map((r, i) => {
+    const t = r.track;
+    const facts = [
+      t.mood,
+      t.bpm !== null && t.bpm !== void 0 ? `${t.bpm} bpm${t.beatConfidence === "low" ? "?" : ""}` : null,
+      VOCAL_WORDS[t.vocals ?? "none"],
+      t.loops ? "loops" : null
+    ].filter(Boolean).join(", ");
+    return `  ${i + 1}. ${r.slug}  ${t.title}  ${(r.score ?? 0).toFixed(2)}  (${facts})
+     ${r.reasons.join("; ") || "fits"}
+     ${scoreLine(take, r, film)}`;
+  });
+  const tail = refused.length ? `
+  ${refused.length} refused: ${refused.slice(0, 4).map((r) => `${r.slug} (${r.refused})`).join("; ")}${refused.length > 4 ? "; \u2026" : ""}` : "";
+  return `${head}
+${lines.join("\n")}${tail}`;
+}
+async function cmdMusic(argv) {
+  const { positionals, flags, multi } = parseArgs(
+    argv,
+    BOOLEAN_FLAGS14,
+    MULTI_FLAGS3
+  );
+  const verb = positionals[0];
+  if (flags.help === true || !verb || !["ls", "pick"].includes(verb))
+    throw new UsageError(USAGE5);
+  const r = createReporter(flags.json === true);
+  const origin = platformOrigin({
+    origin: strFlag(flags, "origin"),
+    api: strFlag(flags, "api")
+  });
+  const catalog = await fetchMusicCatalog(origin);
+  if (verb === "ls") {
+    const vocals = strFlag(flags, "vocals");
+    if (vocals && !["none", "chops", "lead"].includes(vocals))
+      throw new UsageError("--vocals expects none, chops or lead");
+    const kept = filterTracks(catalog.tracks, {
+      mood: strFlag(flags, "mood"),
+      vocals,
+      loops: flags.loops === true,
+      bpm: bpmRange(strFlag(flags, "bpm")),
+      minLength: strFlag(flags, "min-length") !== void 0 ? numFlag(flags, "min-length", 0) : void 0,
+      q: strFlag(flags, "q")
+    });
+    r.done(
+      { origin, tracks: kept, total: catalog.tracks.length },
+      kept.length ? kept.map(trackLine).join("\n") : `No track matches; the library holds ${catalog.tracks.length} (GET ${origin}/api/music).`
+    );
+    return EXIT_OK;
+  }
+  const ref = positionals[1];
+  if (!ref) throw new UsageError(USAGE5);
+  const { doc, seed, dir } = await loadFilm(ref);
+  const atRaw = strFlag(flags, "at");
+  const at2 = atRaw !== void 0 ? resolveAt(doc, atRaw) : null;
+  if (flags.voice === true && flags["no-voice"] === true)
+    throw new UsageError("--voice and --no-voice together say nothing");
+  const liked = await likedSlugs(multi.like ?? [], origin);
+  const film = filmSummaryOf3(doc, {
+    seed,
+    ...at2 ? { payoff: at2.at } : {},
+    ...flags.voice === true ? { voice: true } : flags["no-voice"] === true ? { voice: false } : {},
+    mood: strFlag(flags, "mood"),
+    words: strFlag(flags, "words"),
+    like: liked.slugs,
+    fadeIn: flags["fade-in"] === true
+  });
+  const top = Math.max(1, Math.round(numFlag(flags, "top", 3)));
+  const all = rankBeds3(catalog.tracks, film);
+  const picks = all.filter((x) => x.score !== null).slice(0, top);
+  for (const n of liked.notes) r.warn(n);
+  const asked = strFlag(flags, "mood");
+  if (asked && trackBySlug2(catalog.tracks, asked))
+    r.warn(
+      `--mood ${asked} is a track's slug; to place that track, run vos score --track ${asked}`
+    );
+  r.done(
+    {
+      origin,
+      film,
+      picks: picks.map((x) => ({
+        ...x,
+        command: scoreLine(dir ? ref : null, x, film)
+      })),
+      all
+    },
+    pickWords(picks, all, film, dir ? ref : null)
+  );
+  return EXIT_OK;
+}
+
 // src/plugin/look.ts
 import { mkdir as mkdir12, mkdtemp as mkdtemp3, readFile as readFile18, rm as rm6 } from "fs/promises";
-import { existsSync as existsSync27 } from "fs";
+import { existsSync as existsSync28 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
-import { dirname as dirname10, join as join30, resolve as resolve20 } from "path";
+import { dirname as dirname10, join as join30, resolve as resolve21 } from "path";
 import { headersFor, urlSchemeProblem } from "@vosjs/render-core/record";
 function quote(value) {
   return `"${value.replace(/\s+/g, " ").replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
@@ -17455,7 +17814,7 @@ async function inspectPage(page, opts) {
     settled
   };
 }
-var USAGE5 = "vos look <url> [--session <name> | --storage-state <file>] [--viewport WxH] [--headed] [--click <selector>]... [--type <selector>=<text>]... [--wait <ms>] [--out <dir>] [--json]\n       vos look [url] --actions actions.json --until <step id> [--session <name> | --storage-state <file>] [--viewport WxH] [--headed] [--wait <ms>] [--out <dir>] [--json]";
+var USAGE6 = "vos look <url> [--session <name> | --storage-state <file>] [--viewport WxH] [--headed] [--click <selector>]... [--type <selector>=<text>]... [--wait <ms>] [--out <dir>] [--json]\n       vos look [url] --actions actions.json --until <step id> [--session <name> | --storage-state <file>] [--viewport WxH] [--headed] [--wait <ms>] [--out <dir>] [--json]";
 function untilProblem(given, steps) {
   if (given.until !== void 0 && given.actions === void 0)
     return "--until names a step of a script: pass the script with --actions actions.json";
@@ -17514,7 +17873,7 @@ async function cmdLook(argv) {
   if (early) throw new UsageError(early);
   let actions;
   if (actionsArg) {
-    actions = await loadLookActions(resolve20(actionsArg));
+    actions = await loadLookActions(resolve21(actionsArg));
     const bad = untilProblem(
       { actions: actionsArg, until: untilId, clicks: 0 },
       actions.steps
@@ -17522,21 +17881,21 @@ async function cmdLook(argv) {
     if (bad) throw new UsageError(bad);
   }
   const url = positionals[0] ?? actions?.url;
-  if (!url) throw new UsageError(USAGE5);
+  if (!url) throw new UsageError(USAGE6);
   const scheme = urlSchemeProblem(url);
   if (scheme) throw new UsageError(scheme);
   const r = createReporter(flags.json === true);
   const viewportFlag = strFlag(flags, "viewport");
   const viewport = !viewportFlag && actions?.viewport ? actions.viewport : parseViewport2(viewportFlag);
-  const outDir = resolve20(strFlag(flags, "out") ?? "look");
+  const outDir = resolve21(strFlag(flags, "out") ?? "look");
   const headed = flags.headed === true;
   const waitRaw = strFlag(flags, "wait");
   const waitMs = waitRaw === void 0 ? 0 : Number(waitRaw);
   if (!Number.isFinite(waitMs) || waitMs < 0 || waitMs > 6e4)
     throw new UsageError("--wait expects milliseconds, 0 to 60000");
   const storageRaw = strFlag(flags, "storage-state");
-  const storageState = storageRaw ? resolve20(storageRaw) : void 0;
-  if (storageState && !existsSync27(storageState))
+  const storageState = storageRaw ? resolve21(storageRaw) : void 0;
+  if (storageState && !existsSync28(storageState))
     throw new UsageError(`--storage-state: no such file: ${storageState}`);
   const sessionName = strFlag(flags, "session");
   if (sessionName) {
@@ -17546,7 +17905,7 @@ async function cmdLook(argv) {
       throw new UsageError(
         "--session and --storage-state are two doors to one page: a persistent profile cannot take a storage state. Pass one"
       );
-    if (!existsSync27(sessionDir(sessionName)))
+    if (!existsSync28(sessionDir(sessionName)))
       throw new UsageError(
         `no session "${sessionName}". Make one: vos session open <url> --name ${sessionName} (a Chrome window opens; sign in and close it)`
       );
@@ -17563,7 +17922,7 @@ async function cmdLook(argv) {
       r,
       url,
       actions,
-      actionsPath: resolve20(actionsArg),
+      actionsPath: resolve21(actionsArg),
       untilId,
       viewport,
       outDir,
@@ -17727,10 +18086,9 @@ async function lookUntil(o) {
 import { spawnSync as spawnSync4 } from "child_process";
 import {
   cpSync,
-  existsSync as existsSync29,
+  existsSync as existsSync30,
   mkdirSync as mkdirSync6,
-  readFileSync as readFileSync11,
-  rmSync as rmSync3,
+  readFileSync as readFileSync12,
   writeFileSync as writeFileSync6
 } from "fs";
 import { homedir as homedir2 } from "os";
@@ -17738,7 +18096,7 @@ import { join as join32 } from "path";
 import { chromium as chromium2 } from "playwright";
 
 // src/plugin/machine.ts
-import { existsSync as existsSync28, readFileSync as readFileSync10, readdirSync as readdirSync6, statSync as statSync8 } from "fs";
+import { existsSync as existsSync29, readFileSync as readFileSync11, readdirSync as readdirSync6, statSync as statSync9 } from "fs";
 import { dirname as dirname11, join as join31 } from "path";
 var AGENT_NAMES = [
   "claude",
@@ -17759,7 +18117,7 @@ var HOME_DIRS = {
   copilot: [".copilot"]
 };
 function detectAgents(root, opts = {}) {
-  const exists = opts.exists ?? existsSync28;
+  const exists = opts.exists ?? existsSync29;
   const out = [];
   for (const agent of AGENT_NAMES) {
     for (const rel of PROJECT_DIRS[agent]) {
@@ -17806,7 +18164,7 @@ function skillsDirFor(home) {
 function fallbackSkillsHome(root) {
   return { agent: "codex", dir: join31(root, ".agents"), scope: "project" };
 }
-function installedSkills(dir, exists = existsSync28, list = (p) => {
+function installedSkills(dir, exists = existsSync29, list = (p) => {
   try {
     return readdirSync6(p);
   } catch {
@@ -17824,7 +18182,7 @@ var RULES_BODY = `## Product videos (vosso)
 - Hand back: vos open take serves the take into the studio at vos.so, doc.json intact
 - Local by default: vos push only when asked for a link, the shelf or a cloud render
 - Deleting: vos delete moves a vos to Trash and vos restore brings it back; if you deleted by mistake, restore it and say so. Only the person can delete forever, at vos.so/app/trash
-- Credentials: VOS_API_KEY, then ~/.config/vos/credentials, then vos login; never print one
+- Credentials: VOS_API_KEY, then the account in use at ~/.config/vos/credentials (vos whoami says which; vos switch <handle> changes it), then vos login; never print one
 - Reference: https://vos.so/llms-full.txt`;
 var RULES_BLOCK = `${RULES_BEGIN}
 ${RULES_BODY}
@@ -17847,7 +18205,7 @@ ${RULES_BLOCK}
   }
   return { text, changed: text !== current };
 }
-function rulesFileFor(root, exists = existsSync28) {
+function rulesFileFor(root, exists = existsSync29) {
   const agents = join31(root, "AGENTS.md");
   if (exists(agents)) return agents;
   const claude = join31(root, "CLAUDE.md");
@@ -17904,6 +18262,18 @@ var NODE_MIN_MAJOR = 18;
 function major(version) {
   return parseInt(version.split(".")[0] ?? "0", 10);
 }
+function credentialLine(facts) {
+  const accounts = facts.accounts ?? [];
+  const active = accounts.find((a) => a.active);
+  const others = accounts.filter((a) => !a.active).map((a) => a.label);
+  if (active) {
+    return `${active.label} \u2713${others.length ? ` (also ${others.join(", ")})` : ""}`;
+  }
+  if (facts.credential) {
+    return `present \u2713${others.length ? ` (stored: ${others.join(", ")}; vos switch to use one)` : ""}`;
+  }
+  return `absent (vos login when you need hosting)${others.length ? `; stored: ${others.join(", ")}, vos switch to use one` : ""}`;
+}
 function doctorReport(facts) {
   const lines = [];
   const nodeOk = major(facts.node) >= NODE_MIN_MAJOR;
@@ -17929,9 +18299,7 @@ function doctorReport(facts) {
   } else {
     lines.push("skills      none \u2717  run: npx vos setup");
   }
-  lines.push(
-    `credential  ${facts.credential ? "present \u2713" : "absent (vos login when you need hosting)"}`
-  );
+  lines.push(`credential  ${credentialLine(facts)}`);
   if (facts.devServer) {
     const d = facts.devServer;
     lines.push(
@@ -17952,7 +18320,7 @@ function doctorReport(facts) {
 }
 function bundledSkillsVersion(dir) {
   try {
-    const v = readFileSync10(join31(dir, "VERSION"), "utf8").trim();
+    const v = readFileSync11(join31(dir, "VERSION"), "utf8").trim();
     return /^\d+\.\d+\.\d+$/.test(v) ? v : null;
   } catch {
     return null;
@@ -17962,12 +18330,12 @@ function bundledSkillsDir(from) {
   let dir = dirname11(from);
   for (let i = 0; i < 6; i++) {
     const pkg = join31(dir, "package.json");
-    if (existsSync28(pkg)) {
+    if (existsSync29(pkg)) {
       try {
-        const name = JSON.parse(readFileSync10(pkg, "utf8")).name;
+        const name = JSON.parse(readFileSync11(pkg, "utf8")).name;
         if (name === "@vosjs/cli") {
           const skills = join31(dir, "skills");
-          return existsSync28(skills) && statSync8(skills).isDirectory() ? skills : null;
+          return existsSync29(skills) && statSync9(skills).isDirectory() ? skills : null;
         }
       } catch {
       }
@@ -17980,7 +18348,7 @@ function bundledSkillsDir(from) {
 }
 
 // src/plugin/machineCmd.ts
-var BOOLEAN_FLAGS14 = /* @__PURE__ */ new Set([
+var BOOLEAN_FLAGS15 = /* @__PURE__ */ new Set([
   "json",
   "help",
   "global",
@@ -17989,6 +18357,7 @@ var BOOLEAN_FLAGS14 = /* @__PURE__ */ new Set([
   "no-rules",
   "no-browser"
 ]);
+var LOGOUT_FLAGS = /* @__PURE__ */ new Set([...BOOLEAN_FLAGS15, "all"]);
 var SKILLS_SOURCE = "vosjs/skills";
 var SKILLS_CLI_VERSION = "1.7.2";
 function skillsCatalogAt(version) {
@@ -18003,7 +18372,7 @@ function npx() {
 function bundledChromium() {
   try {
     const p = chromium2.executablePath();
-    return p && existsSync29(p) ? p : null;
+    return p && existsSync30(p) ? p : null;
   } catch {
     return null;
   }
@@ -18012,7 +18381,7 @@ function probe2() {
   return probeBrowser({
     platform: process.platform,
     env: process.env,
-    exists: existsSync29,
+    exists: existsSync30,
     bundled: bundledChromium
   });
 }
@@ -18058,12 +18427,26 @@ async function doctorFacts(opts) {
     browser: probe2(),
     ffmpeg: ffmpegVersion(),
     skills: skillsFacts(opts.homes),
-    credential: resolveCredential() !== null,
+    credential: safeResolve() !== null,
+    accounts: storedAccounts(platformOrigin()),
     ...opts.url ? { devServer: await devServerFact(opts.url) } : {}
   };
 }
+function safeResolve() {
+  try {
+    return resolveCredential();
+  } catch {
+    return null;
+  }
+}
+function storedAccounts(origin, store = DEFAULT_STORE) {
+  return listStored(store, origin).map((c) => ({
+    label: accountLabel(c.account),
+    active: isActive(c, store)
+  }));
+}
 async function cmdSetup(argv) {
-  const { flags } = parseArgs(argv, BOOLEAN_FLAGS14);
+  const { flags } = parseArgs(argv, BOOLEAN_FLAGS15);
   const r = reporterFor(flags);
   const root = process.cwd();
   const global = flags.global === true;
@@ -18165,7 +18548,7 @@ async function cmdSetup(argv) {
   let rules = null;
   if (!noRules) {
     const file = rulesFileFor(root);
-    const existing = existsSync29(file) ? readFileSync11(file, "utf8") : null;
+    const existing = existsSync30(file) ? readFileSync12(file, "utf8") : null;
     const { text, changed } = applyRulesBlock(existing);
     if (changed) writeFileSync6(file, text);
     rules = { file, changed };
@@ -18196,7 +18579,7 @@ Next: ${report.next_step}`
   return report.ok ? EXIT_OK : EXIT_NO_BROWSER;
 }
 async function cmdDoctor(argv) {
-  const { flags } = parseArgs(argv, BOOLEAN_FLAGS14);
+  const { flags } = parseArgs(argv, BOOLEAN_FLAGS15);
   const r = reporterFor(flags);
   const root = process.cwd();
   const homes = detectAgents(root, { home: homedir2(), global: true });
@@ -18215,35 +18598,48 @@ Next: ${report.next_step}`
   return report.ok ? EXIT_OK : EXIT_NO_BROWSER;
 }
 async function cmdWhoami(argv) {
-  const { flags } = parseArgs(argv, BOOLEAN_FLAGS14);
+  const { flags } = parseArgs(argv, BOOLEAN_FLAGS15);
   const r = reporterFor(flags);
   const origin = platformOrigin({
     origin: strFlag(flags, "origin"),
     api: strFlag(flags, "api")
   });
-  const key = resolveCredential(strFlag(flags, "key"));
+  const stored = storedAccounts(origin);
+  const others = stored.filter((a) => !a.active).map((a) => a.label);
+  const alsoStored = others.length ? ` Also stored: ${others.join(", ")}; vos switch <name> to use one.` : "";
+  const key = resolveCredential({
+    key: strFlag(flags, "key"),
+    account: strFlag(flags, "account"),
+    origin
+  });
   if (!key) {
     r.done(
       {
         signedIn: false,
         origin,
+        accounts: stored,
         next_step: "vos login (only needed for hosting, sharing or cloud rendering)"
       },
-      `Not signed in to ${origin}. Recording and rendering need no account; vos login when you want a link.`
+      `Not signed in to ${origin}. Recording and rendering need no account; vos login when you want a link.${alsoStored}`
     );
     return EXIT_ERROR;
   }
+  const resolved = lastCredential();
+  const via = resolved?.via ?? "stored";
+  const viaLine = via === "flag" ? " (the key passed as --key)" : via === "env" ? " (from VOS_API_KEY, which outranks the stored credential)" : via === "account-flag" ? " (--account)" : via === "account-env" ? ` (${ACCOUNT_ENV})` : "";
   const res = await apiJson(origin, "/api/user/whoami", { key });
   if (res.status === 404) {
     r.done(
       {
         signedIn: true,
         origin,
+        via,
         user: null,
         key: null,
+        accounts: stored,
         next_step: "vos push when you want the work hosted"
       },
-      `A credential is present for ${origin} (this origin cannot say whose).`
+      `A credential is present for ${origin}${viaLine} (this origin cannot say whose).${alsoStored}`
     );
     return EXIT_OK;
   }
@@ -18252,50 +18648,156 @@ async function cmdWhoami(argv) {
       {
         signedIn: false,
         origin,
+        via,
         error: apiError("whoami", res),
+        accounts: stored,
         next_step: "vos login"
       },
-      `The stored credential is refused by ${origin}: ${apiError("whoami", res)}. Run vos login.`
+      `The stored credential is refused by ${origin}${viaLine}: ${apiError("whoami", res)}. Run vos login.${alsoStored}`
     );
     return EXIT_ERROR;
   }
   if (res.status !== 200) throw new Error(apiError("whoami", res));
   const user = res.body.user;
+  const actor = res.body.actor;
   const k = res.body.key;
   const who = user?.username ? `@${user.username}` : user?.name ?? "an account";
+  const orgLine = user?.kind === "org" ? ` (an organization${actor ? `, ${actor.username ? `@${actor.username}` : actor.name ?? "you"} recorded as the person behind it` : ""})` : "";
   const keyLine = k ? `key "${k.name ?? ""}" (${k.prefix ?? "\u2026"}, ${(k.scopes ?? []).join(", ") || "no scopes"})` : "a session, not a key";
+  if (via === "stored" && resolved && !resolved.account && user?.id) {
+    const active = readActive(DEFAULT_STORE);
+    if (active && active.key === key) {
+      activate(DEFAULT_STORE, {
+        ...active,
+        account: {
+          id: user.id,
+          kind: user.kind === "org" ? "org" : "person",
+          handle: user.username ?? null
+        }
+      });
+    }
+  }
   r.done(
     {
       signedIn: true,
       origin,
+      via,
       user,
+      actor: actor ?? null,
       key: k,
+      accounts: storedAccounts(origin),
       next_step: "vos push when you want the work hosted"
     },
-    `Signed in to ${origin} as ${who}, with ${keyLine}.`
+    `Signed in to ${origin} as ${who}${orgLine}, with ${keyLine}${viaLine}.${alsoStored}`
+  );
+  return EXIT_OK;
+}
+function cmdSwitch(argv) {
+  const { flags, positionals } = parseArgs(argv, BOOLEAN_FLAGS15);
+  const r = reporterFor(flags);
+  const origin = platformOrigin({
+    origin: strFlag(flags, "origin"),
+    api: strFlag(flags, "api")
+  });
+  const store = DEFAULT_STORE;
+  const stored = listStored(store, origin);
+  const active = readActive(store);
+  const target = switchTarget(
+    stored,
+    active?.key ?? null,
+    positionals[0],
+    origin
+  );
+  if (!target.ok) throw new UsageError(target.error);
+  const to = target.to;
+  if (active && active.key === to.key) {
+    r.done(
+      {
+        origin,
+        account: to.account,
+        changed: false,
+        accounts: storedAccounts(origin, store),
+        next_step: "vos push when you want the work hosted"
+      },
+      `${accountLabel(to.account)} is already the account in use on ${origin}.`
+    );
+    return EXIT_OK;
+  }
+  activate(store, to);
+  const envKey = Boolean(process.env.VOS_API_KEY?.trim());
+  r.done(
+    {
+      origin,
+      account: to.account,
+      changed: true,
+      accounts: storedAccounts(origin, store),
+      next_step: envKey ? "unset VOS_API_KEY; it outranks the stored credential" : "vos push when you want the work hosted"
+    },
+    `Now ${accountLabel(to.account)} on ${origin}${active?.account ? ` (${accountLabel(active.account)} stays stored)` : ""}.${envKey ? " VOS_API_KEY is set in this shell and still outranks it." : ""}`
   );
   return EXIT_OK;
 }
 function cmdLogout(argv) {
-  const { flags } = parseArgs(argv, BOOLEAN_FLAGS14);
+  const { flags, positionals } = parseArgs(argv, LOGOUT_FLAGS);
   const r = reporterFor(flags);
-  const had = existsSync29(CREDENTIALS_PATH);
-  rmSync3(CREDENTIALS_PATH, { force: true });
+  const origin = platformOrigin({
+    origin: strFlag(flags, "origin"),
+    api: strFlag(flags, "api")
+  });
+  const store = DEFAULT_STORE;
   const envKey = Boolean(process.env.VOS_API_KEY?.trim());
+  const envNote = envKey ? " VOS_API_KEY is still set in this shell and still resolves." : "";
+  const envStep = envKey ? "unset VOS_API_KEY as well; it still resolves" : "vos login when you next need hosting";
+  if (flags.all === true) {
+    const { had } = removeAll(store);
+    r.done(
+      {
+        path: CREDENTIALS_PATH,
+        removed: had,
+        all: true,
+        envCredential: envKey,
+        next_step: envStep
+      },
+      (had ? "Removed every stored credential." : "Nothing was stored.") + envNote
+    );
+    return EXIT_OK;
+  }
+  const ref = positionals[0];
+  const target = ref ? findStored(store, origin, ref) : readActive(store);
+  if (!target) {
+    const have = storedAccounts(origin, store);
+    r.done(
+      {
+        path: CREDENTIALS_PATH,
+        removed: false,
+        envCredential: envKey,
+        accounts: have,
+        next_step: envStep
+      },
+      (ref ? `Nothing stored for ${ref.startsWith("@") ? ref : `@${ref}`} on ${origin}.` : `Nothing stored at ${CREDENTIALS_PATH}.`) + (have.length ? ` Stored: ${have.map((a) => a.label).join(", ")}.` : "") + envNote
+    );
+    return EXIT_OK;
+  }
+  const { wasActive } = removeStored(store, target);
+  const left = storedAccounts(origin, store);
+  const leftLine = left.length ? wasActive ? ` Still stored: ${left.map((a) => a.label).join(", ")}; vos switch <name> to use one.` : ` ${left.find((a) => a.active)?.label ?? "another account"} stays in use.` : "";
   r.done(
     {
       path: CREDENTIALS_PATH,
-      removed: had,
+      removed: true,
+      account: target.account,
+      wasActive,
       envCredential: envKey,
-      next_step: envKey ? "unset VOS_API_KEY as well; it still resolves" : "vos login when you next need hosting"
+      accounts: left,
+      next_step: left.length && wasActive ? "vos switch <name>" : envStep
     },
-    (had ? `Removed ${CREDENTIALS_PATH}.` : `Nothing stored at ${CREDENTIALS_PATH}.`) + (envKey ? " VOS_API_KEY is still set in this shell and still resolves." : "")
+    `Removed ${accountLabel(target.account)} (${target.origin}).${leftLine}${envNote}`
   );
   return EXIT_OK;
 }
 
 // src/plugin/run.ts
-var BOOLEAN_FLAGS15 = /* @__PURE__ */ new Set([
+var BOOLEAN_FLAGS16 = /* @__PURE__ */ new Set([
   "json",
   "help",
   "wait",
@@ -18359,8 +18861,12 @@ Take pipeline
   vos join <take> <take|file.mp4>... --out <dir> [--keep-edits|--force] [--captions] [--zooms per-beat] [--mute <file>]... [--json]
             several takes (and plain video files) as ONE take, cut in argument order: the first is the primary (its frame, cursor, export and sound), each next one a media m1, m2, \u2026 with its footage copied, its spans tagged and renamed, its layers moved to where it now starts; a file opens full-bleed and its own sound plays as an audio clip (--mute <file> leaves it out). --captions lands every step's caption anchored to its step, starting as the step begins (anchor.at "start"), each ending with its clip. --zooms per-beat keeps a beat's zoom on its steps marked "zoom": true (as vos plan --zooms per-beat). The result must pass vos validate before anything is written
             --keep-edits joins again over an edited joined take and keeps its edits: inputs are matched to their media by source file (join.json records each input's path and footage hash), a kept input keeps its id and everything on it (segments in their edited order, spans, rejections, anchored layers, its sound), the frame, export, styles and still stay, a new input is joined fresh under a new id (and only it is captioned or re-planned), a re-recorded input (changed footage at its path, or the same script at a new one) keeps its edits re-timed by its steps as vos plan --reuse does, and an input that is gone takes its edits with it, each named. A new input's segments go before the next kept input's; reordering the kept inputs regroups the segments in argument order. The first input must stay the primary. --force replaces the take instead
-  vos score <take> --track <slug|file> [--at <step id|output seconds>] [--gain 0..1] [--normalize <lufs|off>] [--fade-in <s>] [--fade-out <s>] [--dry-run] [--json]
-            the film's music as one audio clip (id score): reads the track's loudness, finds its strongest swell and offsets the track so the swell lands at --at (a step, resolved through the cut, or output seconds); without --at it starts where the track first rises above its median level. The clip carries its measured loudness and a target, --normalize (default -16 LUFS), with --gain (default 0.5) a trim on it; --normalize off plays it at --gain alone
+  vos music ls [--mood <slug>] [--vocals none|chops|lead] [--loops] [--bpm <lo>-<hi>] [--min-length <s>] [--q <words>] [--json]
+            the library as an agent reads it, one line per track: slug, genre, length, tempo (a ? on an uncertain beat), vocals, loops, the sentence a person wrote. The facts are GET /api/music's
+  vos music pick <take|config.json> [--at <step id|seconds>] [--mood <slug|tag>] [--words "\u2026"] [--voice|--no-voice] [--like <vos id|slug>]... [--top 3] [--json]
+            the beds that fit THIS film, best first, each with its reasons and the vos score line that places it: the film's length, its cuts (captions, joins, page changes, zoom marks), its payoff (--at, else the last step marked "zoom": true, else the last cut) and its voice are read from the document and every track is scored (a swell on the payoff, cuts on the beat, the asked mood or words, calm under a voice, an ending that meets the film's) after the hard rules (covers the film or loops, no quiet intro under frame one, no sung lead under a voice). --json carries every track, the refused with their reason. Ties fall to the take, so two films asking the same thing get different beds
+  vos score <take> --track <slug|file|best> [--at <step id|output seconds>] [--mood <slug|tag>] [--words "\u2026"] [--gain 0..1] [--normalize <lufs|off>] [--fade-in <s>] [--fade-out <s>] [--dry-run] [--json]
+            the film's music as one audio clip (id score): reads the track's loudness, finds its strongest swell and offsets the track so the swell lands at --at (a step, resolved through the cut, or output seconds); without --at it starts where the track first rises above its median level. --track best runs vos music pick and places its first pick, its payoff as --at unless one is given. The clip carries its measured loudness and a target, --normalize (default -16 LUFS), with --gain (default 0.5) a trim on it; --normalize off plays it at --gain alone
   vos audio measure <take> [--json]
             every audio clip's loudness (BS.1770 integrated LUFS and sample peak, the meter check-video reads a render with), written beside it in doc.json as loudness { lufs, peakDb, at, src }; a clip's normalize (a target in LUFS, -30..-6) plays it at the gain that reaches it, past 1 if need be, capped so its peak stays under -1 dBFS, and only once it is measured for its own key
   vos port inventory <page.html|project dir> [--render <their render.mp4>] [--out port] [--json]
@@ -18394,15 +18900,22 @@ This machine (no account)
             agent, a credential (present or absent, never printed), and the
             dev server when --url names one. Exit 3 when no browser
   vos whoami [--json]
-            the key's name and the account it belongs to, never the key
-  vos logout [--json]
-            remove ~/.config/vos/credentials (VOS_API_KEY still resolves)
+            the account in use (its key's name, which rung resolved it) and
+            every other account stored for the origin, never a key
+  vos switch [<handle>] [--json]
+            use another stored account (with two stored, the other one);
+            vos login once per account, approving as it, stores them all
+  vos logout [<handle>] [--all] [--json]
+            forget the account in use, a named one, or every stored
+            credential (VOS_API_KEY still resolves)
 
 Platform (vos.so) \u2014 fetch, edit, push, pull, repeat
   vos login [--key <vos_sk_\u2026>] [--handoff <url>] [--label <name>] [--no-browser]
             sign in via the browser (approve at vos.so/cli/auth; works
             headless \u2014 print the URL, a human approves, the key stores
             itself). --key skips the browser (mint at vos.so/app/api).
+            Additive: the person picks the account on the approval page,
+            and every account signed in stays stored (vos switch).
             --handoff https://vos.so/h/\u2026 exchanges the setup link a
             signed-in person's line carries for a key, once, no click
   vos fetch <vosId|watch-url> [--out dir] [--media] [--json]
@@ -18466,7 +18979,8 @@ Platform (vos.so) \u2014 fetch, edit, push, pull, repeat
             kept) or the take's doc.json. ALWAYS pull before editing pushed work.
             --media also downloads the recording (+ mic/cam sidecars) beside
             the doc and re-anchors it, so digest/frames/render run locally
-            auth: --key, VOS_API_KEY, or ~/.config/vos/credentials; keys can
+            auth: --key, --account <handle>, VOS_API_KEY, VOS_ACCOUNT, or the
+            stored account in use (~/.config/vos/credentials); keys can
             never publish (visibility stays private; humans publish on vos.so)
   vos folder list
   vos folder create <name> [--parent <folderId|slug>] [--desc <text>]
@@ -18667,9 +19181,10 @@ doc.json edits arrive intact; a human can drag every zoom span. Keeps
 serving until Ctrl-C. The studio is https://vos.so by default (VOS_ORIGIN
 moves it; --studio http://localhost:6060 for a dev server).
 
-push/pull \u2014 the hosted iteration loop (credentials: --key, VOS_API_KEY, or
-~/.config/vos/credentials via vos login; origin via VOS_ORIGIN, default
-https://vos.so). A take push uploads the recording ONCE (content-addressed),
+push/pull \u2014 the hosted iteration loop (credentials: --key, --account <handle>,
+VOS_API_KEY, VOS_ACCOUNT, or the account in use at ~/.config/vos/credentials
+via vos login, one sign-in per account and vos switch between them; origin
+via VOS_ORIGIN, default https://vos.so). A take push uploads the recording ONCE (content-addressed),
 lowers doc.json, and creates a private vos (first push asks; --yes for
 headless) or a new version against the base in vos.json \u2014 a stale base
 prints the human's typed changelog and exits 1 (run pull, re-apply, push
@@ -18860,8 +19375,8 @@ function takeBrowserArgs(multi) {
 function takeStorageState(flags) {
   const raw = strFlag(flags, "storage-state");
   if (!raw) return void 0;
-  const path = resolve21(raw);
-  if (!existsSync30(path))
+  const path = resolve22(raw);
+  if (!existsSync31(path))
     throw new UsageError(`--storage-state: no such file: ${path}`);
   return path;
 }
@@ -18874,7 +19389,7 @@ function takeSessionName(flags, storageState) {
     throw new UsageError(
       "--session and --storage-state are two doors to one take: a persistent profile cannot take a storage state. Pass one"
     );
-  if (!existsSync30(sessionDir(name)))
+  if (!existsSync31(sessionDir(name)))
     throw new UsageError(
       `no session "${name}". Make one: vos session open <url> --name ${name} (a Chrome window opens; sign in and close it)`
     );
@@ -18892,14 +19407,14 @@ async function inSession(name, actions, fn) {
 }
 function reRecord(outDir, flags, r) {
   const wantsReuse = flags.reuse === true;
-  if (wantsReuse && !existsSync30(join33(outDir, "doc.json")))
+  if (wantsReuse && !existsSync31(join33(outDir, "doc.json")))
     throw new UsageError(
       `--reuse: ${outDir} has no cut to keep (no doc.json); record without --reuse`
     );
   let previousCut = null;
   return {
     prepare: async () => {
-      if (existsSync30(join33(outDir, "meta.json"))) {
+      if (existsSync31(join33(outDir, "meta.json"))) {
         const { prevDoc, kept } = await prepareReRecord(outDir);
         if (prevDoc) previousCut = join33(outDir, PREV_DOC_NAME);
         r.log(
@@ -18987,7 +19502,7 @@ function wallGate(flags, r, opts) {
 async function cmdRecord(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS15,
+    BOOLEAN_FLAGS16,
     MULTI_FLAGS2
   );
   const actionsPath = strFlag(flags, "actions") ?? positionals[0];
@@ -19003,7 +19518,7 @@ async function cmdRecord(argv) {
   const scheme = urlSchemeProblem2(url);
   if (scheme) throw new UsageError(scheme);
   announceEnvNames(actions, r);
-  const outDir = resolve21(strFlag(flags, "out") ?? "take");
+  const outDir = resolve22(strFlag(flags, "out") ?? "take");
   const storageState = takeStorageState(flags);
   const sessionName = takeSessionName(flags, storageState);
   const browserArgs = takeBrowserArgs(multi);
@@ -19023,7 +19538,7 @@ async function cmdRecord(argv) {
       );
     const hostedActions = await scriptForHost(
       actions,
-      dirname12(resolve21(actionsPath))
+      dirname12(resolve22(actionsPath))
     ).catch((e) => {
       throw new UsageError(e instanceof Error ? e.message : String(e));
     });
@@ -19133,7 +19648,7 @@ async function cmdRecord(argv) {
         sessionName,
         actions,
         (context2) => recordTake(browser2, url, actions, takePaths(outDir), r.log, {
-          actionsDir: dirname12(resolve21(actionsPath)),
+          actionsDir: dirname12(resolve22(actionsPath)),
           storageState,
           headers,
           context: context2,
@@ -19199,7 +19714,7 @@ async function cmdRecord(argv) {
         ...flags["allow-wall"] === true ? ["--allow-wall"] : [],
         ...confirm.map((c) => `--confirm ${c}`),
         // A take that already has a cut keeps it on the new footage.
-        ...existsSync30(join33(outDir, "doc.json")) ? ["--reuse"] : []
+        ...existsSync31(join33(outDir, "doc.json")) ? ["--reuse"] : []
       ].join(" ");
       const nextOut = strFlag(flags, "out") ?? "take";
       const guardNote = !unconfirmed.ok ? unconfirmed.unconfirmed.length ? ` (it refuses until you add ${unconfirmed.unconfirmed.map((id) => `--confirm ${id}`).join(" ")}: ${unconfirmed.unconfirmed.length === 1 ? "that step spends" : "those steps spend"} something real)` : ` (${unconfirmed.unknown.map((c) => `--confirm ${c}`).join(", ")} names no guarded step)` : "";
@@ -19241,7 +19756,7 @@ ${lines.join("\n")}
       sessionName,
       actions,
       (context2) => recordTake(browser, url, actions, paths, r.log, {
-        actionsDir: dirname12(resolve21(actionsPath)),
+        actionsDir: dirname12(resolve22(actionsPath)),
         maxDurationSeconds,
         storageState,
         headers,
@@ -19339,7 +19854,7 @@ ${lines.join("\n")}
 async function cmdCreate2(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS15,
+    BOOLEAN_FLAGS16,
     MULTI_FLAGS2
   );
   const actionsPath = strFlag(flags, "actions");
@@ -19356,7 +19871,7 @@ async function cmdCreate2(argv) {
   const scheme = urlSchemeProblem2(url);
   if (scheme) throw new UsageError(scheme);
   announceEnvNames(actions, r);
-  const outDir = resolve21(strFlag(flags, "out") ?? "take");
+  const outDir = resolve22(strFlag(flags, "out") ?? "take");
   const format = videoFormat(strFlag(flags, "format"), positionals[0]);
   const out = positionals[0] ?? join33(outDir, `out.${format}`);
   const parallel = numFlag(flags, "parallel", 1);
@@ -19380,7 +19895,7 @@ async function cmdCreate2(argv) {
       sessionName,
       actions,
       (context2) => recordTake(browser, url, actions, paths, r.log, {
-        actionsDir: dirname12(resolve21(actionsPath)),
+        actionsDir: dirname12(resolve22(actionsPath)),
         maxDurationSeconds,
         storageState,
         headers,
@@ -19497,7 +20012,7 @@ async function cmdPlan(argvIn) {
   const argv = bareCaptionsFlag(argvIn);
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS15,
+    BOOLEAN_FLAGS16,
     /* @__PURE__ */ new Set(["with"])
   );
   const dir = positionals[0];
@@ -19512,8 +20027,8 @@ async function cmdPlan(argvIn) {
   }
   let reuse;
   if (flags.reuse === true) {
-    const from = resolve21(strFlag(flags, "from") ?? join33(dir, PREV_DOC_NAME));
-    if (!existsSync30(from)) {
+    const from = resolve22(strFlag(flags, "from") ?? join33(dir, PREV_DOC_NAME));
+    if (!existsSync31(from)) {
       throw new UsageError(
         `--reuse: ${from} does not exist \u2014 a re-record into this take writes doc.prev.json, or pass --from <doc.json>`
       );
@@ -19524,7 +20039,7 @@ async function cmdPlan(argvIn) {
     };
   }
   const style = await resolveStyleRef(flags);
-  const hasDoc = existsSync30(join33(dir, "doc.json"));
+  const hasDoc = existsSync31(join33(dir, "doc.json"));
   const backdrop = hasDoc ? null : await takeBackdrop(flags, r);
   const release = await releaseInputs(dir, flags, r, multi.with ?? []);
   const stepCaptions = strFlag(flags, "captions") === "steps";
@@ -19604,7 +20119,7 @@ async function cmdPlan(argvIn) {
     ${s.reuse.flagged.join("\n    ")}` : "") : "";
   r.done(
     {
-      take: resolve21(dir),
+      take: resolve22(dir),
       fresh: s.fresh,
       cursorKept: s.cursorKept,
       zoomAuto,
@@ -19733,7 +20248,7 @@ async function releaseInputs(dir, flags, r, withRefs = []) {
 async function cmdRender(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS15,
+    BOOLEAN_FLAGS16,
     MULTI_FLAGS2
   );
   const dir = positionals[0];
@@ -19801,7 +20316,7 @@ async function cmdRender(argv) {
 async function cmdFrames(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS15,
+    BOOLEAN_FLAGS16,
     MULTI_FLAGS2
   );
   const dir = positionals[0];
@@ -19884,7 +20399,7 @@ async function cmdFrames(argv) {
 async function cmdDeliver(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS15,
+    BOOLEAN_FLAGS16,
     MULTI_FLAGS2
   );
   const dir = positionals[0];
@@ -19984,11 +20499,11 @@ async function resolveStyleRef(flags) {
 }
 async function resolveDocRef(ref, flags, what) {
   const styleRef = ref;
-  const file = existsSync30(styleRef) ? resolve21(
+  const file = existsSync31(styleRef) ? resolve22(
     styleRef,
-    existsSync30(join33(styleRef, "doc.json")) ? "doc.json" : ""
+    existsSync31(join33(styleRef, "doc.json")) ? "doc.json" : ""
   ) : null;
-  if (file && existsSync30(file)) {
+  if (file && existsSync31(file)) {
     return {
       from: file,
       doc: migrateHostedDoc4(
@@ -20034,7 +20549,7 @@ async function officialTemplate(origin, ref) {
   }
 }
 async function cmdDigest(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS15);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS16);
   const dir = positionals[0];
   if (!dir)
     throw new UsageError(
@@ -20098,19 +20613,19 @@ async function cmdDigest(argv) {
   }
 }
 async function cmdOpen(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS15);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS16);
   const dir = positionals[0];
   if (!dir) throw new UsageError("vos open <take> [--studio <url>]");
   const r = createReporter(flags.json === true);
   const take = await loadTake(dir);
-  if (!existsSync30(take.paths.recording)) {
+  if (!existsSync31(take.paths.recording)) {
     throw new UsageError(`${dir} has no recording \u2014 re-run record`);
   }
   const studio = (strFlag(flags, "studio") ?? platformOrigin()).replace(
     /\/+$/,
     ""
   );
-  const server = await startTakeServer(resolve21(dir), {});
+  const server = await startTakeServer(resolve22(dir), {});
   const url = `${studio}/studio?take=${encodeURIComponent(server.base)}`;
   r.event({ event: "open", server: server.base, url });
   r.log(`take served at ${server.base}`);
@@ -20133,7 +20648,7 @@ async function cmdOpen(argv) {
   return EXIT_OK;
 }
 async function cmdCallout(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS15);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS16);
   const dir = positionals[0];
   const shape = positionals[1];
   if (!dir || !shape || !isCalloutShape(shape))
@@ -20232,11 +20747,11 @@ async function cmdCallout(argv) {
   return EXIT_OK;
 }
 async function cmdValidate(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS15);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS16);
   const target = positionals[0];
   if (!target) throw new UsageError("vos validate <actions.json|take>");
   const r = createReporter(flags.json === true);
-  const kitTarget = target.endsWith("kit.json") ? target : existsSync30(join33(target, "kit.json")) && !isTakeDir(target) ? join33(target, "kit.json") : null;
+  const kitTarget = target.endsWith("kit.json") ? target : existsSync31(join33(target, "kit.json")) && !isTakeDir(target) ? join33(target, "kit.json") : null;
   if (kitTarget) {
     const picture = flags.picture === true;
     const verdict = await validateKit(kitTarget, { picture });
@@ -20268,7 +20783,7 @@ async function cmdValidate(argv) {
     r.done({ valid: true, target }, `${target}: valid actions file`);
     return EXIT_OK;
   }
-  if (!isTakeDir(target) && existsSync30(join33(target, "config.json"))) {
+  if (!isTakeDir(target) && existsSync31(join33(target, "config.json"))) {
     const parsed = JSON.parse(
       await readFile19(join33(target, "config.json"), "utf8")
     );
@@ -20312,7 +20827,7 @@ async function cmdValidate(argv) {
   const problems = [];
   const warnings = [];
   const notes = [];
-  if (!existsSync30(take.paths.recording)) {
+  if (!existsSync31(take.paths.recording)) {
     problems.push("missing recording (re-run record)");
   } else {
     const mismatch = containerMismatch(
@@ -20353,7 +20868,7 @@ async function cmdValidate(argv) {
       const found = localFile(rel, target);
       if (!("refused" in found)) continue;
       problems.push(
-        existsSync30(resolve21(target, rel)) ? `doc.json: ${ref.where}: ${ref.key} ${found.refused}` : `doc.json: ${ref.where}: ${ref.key} is not a file in the take, so a render plays the film without it (put the file there, or fix the key)`
+        existsSync31(resolve22(target, rel)) ? `doc.json: ${ref.where}: ${ref.key} ${found.refused}` : `doc.json: ${ref.where}: ${ref.key} is not a file in the take, so a render plays the film without it (put the file there, or fix the key)`
       );
     }
     if (flags.picture === true && (take.doc.overlays ?? []).some((o) => o.kind === "html")) {
@@ -20422,7 +20937,7 @@ async function cmdValidate(argv) {
 async function cmdPush3(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS15,
+    BOOLEAN_FLAGS16,
     MULTI_FLAGS2
   );
   const dir = positionals[0];
@@ -20432,7 +20947,7 @@ async function cmdPush3(argv) {
     );
   const refusal = takePushRefusal({
     vos: strFlag(flags, "vos"),
-    trackedVosId: readSyncState(resolve21(dir))?.vosId ?? null,
+    trackedVosId: readSyncState(resolve22(dir))?.vosId ?? null,
     programOnly: ["slug", "tags", "base", "remix-of", "still"].filter(
       (name) => hasFlag(flags, name)
     )
@@ -20451,7 +20966,7 @@ async function cmdPush3(argv) {
         `--claimable creates a NEW claimable vos; ${iterating.map((f) => `--${f}`).join(", ")} ${iterating.length > 1 ? "apply" : "applies"} to a keyed push`
       );
     const claim = await pushTakeClaimable(
-      resolve21(dir),
+      resolve22(dir),
       {
         api: strFlag(flags, "api"),
         origin: strFlag(flags, "origin"),
@@ -20475,7 +20990,7 @@ reference and the only credential.`
   }
   const overrides = multi.override;
   const result = await pushTake(
-    resolve21(dir),
+    resolve22(dir),
     {
       key: strFlag(flags, "key"),
       api: strFlag(flags, "api"),
@@ -20499,7 +21014,7 @@ reference and the only credential.`
   }).replace(/\/+$/, "");
   const landed = flags.wait === true ? await waitForLanded({
     origin: pushedTo,
-    key: requireCredential(strFlag(flags, "key")),
+    key: requireCredential(credentialFlags(flags)),
     vosId: result.vosId,
     versionId: result.versionId ?? null,
     log: (l) => r.log(l)
@@ -20527,11 +21042,11 @@ ${landedLines(landed)}` : "")
   return EXIT_OK;
 }
 async function cmdPull2(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS15, MULTI_FLAGS2);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS16, MULTI_FLAGS2);
   const dir = positionals[0] ?? ".";
   const r = createReporter(flags.json === true);
   const result = await pullTake(
-    resolve21(dir),
+    resolve22(dir),
     {
       key: strFlag(flags, "key"),
       api: strFlag(flags, "api"),
@@ -20620,6 +21135,8 @@ async function run(argv) {
         return await cmdWhoami(rest);
       case "logout":
         return cmdLogout(rest);
+      case "switch":
+        return cmdSwitch(rest);
       case "push": {
         const target = rest.find((a) => !a.startsWith("-"));
         if (target && isTakeDir(target)) return await cmdPush3(rest);
@@ -20666,6 +21183,8 @@ async function run(argv) {
         return await cmdScore(rest);
       case "audio":
         return await cmdAudio(rest);
+      case "music":
+        return await cmdMusic(rest);
       case "look":
         return await cmdLook(rest);
       default:
@@ -20708,7 +21227,7 @@ function verdictExit(v, strict, none) {
 async function cmdSession(argv) {
   const { positionals, flags } = parseArgs(
     argv,
-    /* @__PURE__ */ new Set([...BOOLEAN_FLAGS15, "headed"])
+    /* @__PURE__ */ new Set([...BOOLEAN_FLAGS16, "headed"])
   );
   const [sub, arg] = positionals;
   const r = createReporter(flags.json === true);
@@ -20753,7 +21272,7 @@ async function cmdSession(argv) {
       if (!arg) throw new UsageError(usage);
       const bad = sessionNameVerdict(arg);
       if (bad) throw new UsageError(bad);
-      if (!existsSync30(sessionDir(arg)))
+      if (!existsSync31(sessionDir(arg)))
         throw new UsageError(`no session "${arg}" (vos session list)`);
       const summary3 = await summarizeSession(arg);
       const url = strFlag(flags, "url");
@@ -20787,7 +21306,7 @@ async function cmdSession(argv) {
       if (!arg || !scriptPath) throw new UsageError(usage);
       const bad = sessionNameVerdict(arg);
       if (bad) throw new UsageError(bad);
-      if (!existsSync30(sessionDir(arg)))
+      if (!existsSync31(sessionDir(arg)))
         throw new UsageError(`no session "${arg}" (vos session list)`);
       const url = strFlag(flags, "url");
       if (url && !/^https?:\/\//.test(url))
@@ -20880,4 +21399,4 @@ export {
   verbHelp,
   run
 };
-//# sourceMappingURL=chunk-DM7ADA77.js.map
+//# sourceMappingURL=chunk-ZXFO32KW.js.map