bazilion 0.15.0 → 0.17.0

package/dist/cli.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { defineCommand as defineCommand33, runCommand, showUsage } from "citty";
+import { defineCommand as defineCommand36, runCommand, showUsage } from "citty";
 
 // package.json
 var package_default = {
   name: "bazilion",
-  version: "0.15.0",
+  version: "0.17.0",
   description: "Multi-agent runtime CLI \u2014 spawn LLM agents, manage profiles/teams/skills, and run the local daemon.",
   license: "MIT",
   repository: {
@@ -177,6 +177,58 @@ function createClient(cfg) {
     return new Uint8Array(await res.arrayBuffer());
   }
   return {
+    codingEnvironment: {
+      show: (teamId) => request(
+        "GET",
+        `/api/teams/${encodeURIComponent(teamId)}/coding-environment`
+      ),
+      configure: (teamId, input) => request(
+        "PUT",
+        `/api/teams/${encodeURIComponent(teamId)}/coding-environment`,
+        input
+      )
+    },
+    /** Read-only Git change review and bounded source snapshots (BAZ-042). */
+    repositoryReview: (teamId) => {
+      const base = `/api/teams/${encodeURIComponent(teamId)}/review`;
+      return {
+        changes: (options = {}) => {
+          const params = new URLSearchParams();
+          if (options.base !== void 0) params.set("base", options.base);
+          if (options.patches) params.set("patches", "1");
+          const suffix = params.size ? `?${params}` : "";
+          return request("GET", `${base}${suffix}`);
+        },
+        snapshots: () => request("GET", `${base}/snapshots`),
+        snapshot: (snapshotId) => request("GET", `${base}/snapshots/${encodeURIComponent(snapshotId)}`),
+        capture: (input) => request("POST", `${base}/snapshots`, input)
+      };
+    },
+    /** Operator retained-diagnostic access for BAZ-041 receipts. */
+    codingLogs: (teamId) => {
+      const base = `/api/teams/${encodeURIComponent(teamId)}/coding-commands`;
+      const item = (commandId) => `${base}/${encodeURIComponent(commandId)}/log`;
+      return {
+        page: (commandId, options = {}) => {
+          const params = new URLSearchParams();
+          if (options.offset !== void 0) params.set("offset", String(options.offset));
+          if (options.limit !== void 0) params.set("limit", String(options.limit));
+          const suffix = params.size ? `?${params}` : "";
+          return request(
+            "GET",
+            `${item(commandId)}${suffix}`
+          );
+        },
+        search: (commandId, query) => request(
+          "GET",
+          `${item(commandId)}/search?q=${encodeURIComponent(query)}`
+        )
+      };
+    },
+    repositoryContext: (teamId, options = {}) => request(
+      "GET",
+      `/api/teams/${encodeURIComponent(teamId)}/repository-context${options.target !== void 0 ? `?target=${encodeURIComponent(options.target)}` : ""}`
+    ),
     notifications: {
       settings: () => request("GET", "/api/notifications"),
       configure: (input) => request("PUT", "/api/notifications", input),
@@ -318,12 +370,12 @@ var list = defineCommand({
     offset: { type: "string", default: "0" },
     json: { type: "boolean" }
   },
-  async run({ args }) {
-    const query = new URLSearchParams({ limit: args.limit, offset: args.offset });
+  async run({ args: args2 }) {
+    const query = new URLSearchParams({ limit: args2.limit, offset: args2.offset });
     const body = await createClient2().get(
-      `${pathFor(args.agent)}?${query}`
+      `${pathFor(args2.agent)}?${query}`
     );
-    if (args.json) return console.log(JSON.stringify(body, null, 2));
+    if (args2.json) return console.log(JSON.stringify(body, null, 2));
     if (!body.total) return console.log("(no conversations)");
     for (const line of columnize([
       ["id", "title", "active"],
@@ -340,9 +392,9 @@ var list = defineCommand({
 var show = defineCommand({
   meta: { name: "show", description: "Read retained history without selecting it" },
   args: { agent: positional, id: positional, json: { type: "boolean" } },
-  async run({ args }) {
-    const body = await createClient2().get(`${pathFor(args.agent)}/${encodeURIComponent(args.id)}`);
-    if (args.json) return console.log(JSON.stringify(body, null, 2));
+  async run({ args: args2 }) {
+    const body = await createClient2().get(`${pathFor(args2.agent)}/${encodeURIComponent(args2.id)}`);
+    if (args2.json) return console.log(JSON.stringify(body, null, 2));
     console.log(body.conversation.title);
     for (const message of body.messages) console.log(`[${message.role}] ${message.content}`);
   }
@@ -366,32 +418,32 @@ var newConversation = defineCommand({
     },
     json: { type: "boolean" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const state = await client.get(`${pathFor(args.agent)}?limit=1`);
-    const requestId = args["request-id"] ?? randomUUID();
-    const revision = args["expected-revision"] === void 0 ? state.selection.revision : Number(args["expected-revision"]);
+    const state = await client.get(`${pathFor(args2.agent)}?limit=1`);
+    const requestId = args2["request-id"] ?? randomUUID();
+    const revision = args2["expected-revision"] === void 0 ? state.selection.revision : Number(args2["expected-revision"]);
     if (!Number.isSafeInteger(revision) || revision < 0)
       throw new Error("Invalid expected revision");
-    if (args["request-id"] && (args["expected-revision"] === void 0 || args["expected-conversation"] === void 0)) {
+    if (args2["request-id"] && (args2["expected-revision"] === void 0 || args2["expected-conversation"] === void 0)) {
       throw new Error(
         "--request-id requires --expected-revision and --expected-conversation for an exact retry"
       );
     }
     const expectedSelection = {
       revision,
-      conversationId: args["expected-conversation"] === void 0 ? state.selection.conversationId : args["expected-conversation"] === "none" ? null : args["expected-conversation"]
+      conversationId: args2["expected-conversation"] === void 0 ? state.selection.conversationId : args2["expected-conversation"] === "none" ? null : args2["expected-conversation"]
     };
     console.error(
       `Create request: ${requestId}; retry with --request-id ${requestId} --expected-revision ${revision} --expected-conversation ${expectedSelection.conversationId ?? "none"} and the same title.`
     );
-    const body = await client.post(pathFor(args.agent), {
+    const body = await client.post(pathFor(args2.agent), {
       requestId,
       expectedSelection,
-      ...args.title ? { title: args.title } : {}
+      ...args2.title ? { title: args2.title } : {}
     });
     console.log(
-      args.json ? JSON.stringify(body, null, 2) : `Conversation ${body.conversation.id}: ${body.conversation.title} (active: ${body.selection.conversationId})`
+      args2.json ? JSON.stringify(body, null, 2) : `Conversation ${body.conversation.id}: ${body.conversation.title} (active: ${body.selection.conversationId})`
     );
   }
 });
@@ -401,15 +453,15 @@ var rename = defineCommand({
     description: "Rename a conversation without changing its selection or history"
   },
   args: { agent: positional, id: positional, title: positional, json: { type: "boolean" } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const path = `${pathFor(args.agent)}/${encodeURIComponent(args.id)}`;
+    const path = `${pathFor(args2.agent)}/${encodeURIComponent(args2.id)}`;
     const current = await client.get(path);
     const body = await client.patch(path, {
-      title: args.title,
+      title: args2.title,
       expectedTitleRevision: current.conversation.titleRevision
     });
-    console.log(args.json ? JSON.stringify(body, null, 2) : body.conversation.title);
+    console.log(args2.json ? JSON.stringify(body, null, 2) : body.conversation.title);
   }
 });
 var conversationCommand = defineCommand({
@@ -439,9 +491,9 @@ var notificationCommand = defineCommand2({
           description: "Comma-separated Attention kinds; defaults to current selection"
         }
       },
-      async run({ args }) {
+      async run({ args: args2 }) {
         const api = createClient2().notifications;
-        const kinds = args.kinds ? args.kinds.split(",") : (await api.settings()).settings.kinds;
+        const kinds = args2.kinds ? args2.kinds.split(",") : (await api.settings()).settings.kinds;
         output(await api.preview(kinds));
       }
     }),
@@ -464,44 +516,44 @@ var notificationCommand = defineCommand2({
         },
         "expected-revision": { type: "string" }
       },
-      async run({ args }) {
-        if (args.enable && args.disable) throw new Error("Choose --enable or --disable");
-        if (args.enable && !args["destination-id"])
+      async run({ args: args2 }) {
+        if (args2.enable && args2.disable) throw new Error("Choose --enable or --disable");
+        if (args2.enable && !args2["destination-id"])
           throw new Error("--enable requires --destination-id from notification settings");
-        if (Boolean(args["quiet-start"]) !== Boolean(args["quiet-end"]))
+        if (Boolean(args2["quiet-start"]) !== Boolean(args2["quiet-end"]))
           throw new Error("Provide both --quiet-start and --quiet-end");
-        if (args["clear-quiet-hours"] && args["quiet-start"])
+        if (args2["clear-quiet-hours"] && args2["quiet-start"])
           throw new Error("Choose a quiet window or --clear-quiet-hours");
         const api = createClient2().notifications;
         const { settings } = await api.settings();
         output(
           await api.configure({
-            expectedRevision: args["expected-revision"] === void 0 ? settings.revision : Number(args["expected-revision"]),
-            enabled: args.enable ? true : args.disable ? false : settings.enabled,
-            destinationId: args["destination-id"] ?? settings.destination?.id,
-            kinds: args.kinds ? args.kinds.split(",") : settings.kinds,
-            timezone: args.timezone ?? settings.timezone,
-            quietHours: args["clear-quiet-hours"] ? null : args["quiet-start"] && args["quiet-end"] ? { start: args["quiet-start"], end: args["quiet-end"] } : settings.quietHours,
-            includeOpenPreview: args["include-open-preview"]
+            expectedRevision: args2["expected-revision"] === void 0 ? settings.revision : Number(args2["expected-revision"]),
+            enabled: args2.enable ? true : args2.disable ? false : settings.enabled,
+            destinationId: args2["destination-id"] ?? settings.destination?.id,
+            kinds: args2.kinds ? args2.kinds.split(",") : settings.kinds,
+            timezone: args2.timezone ?? settings.timezone,
+            quietHours: args2["clear-quiet-hours"] ? null : args2["quiet-start"] && args2["quiet-end"] ? { start: args2["quiet-start"], end: args2["quiet-end"] } : settings.quietHours,
+            includeOpenPreview: args2["include-open-preview"]
           })
         );
       }
     }),
     list: defineCommand2({
       args: { cursor: { type: "string" }, limit: { type: "string" } },
-      async run({ args }) {
+      async run({ args: args2 }) {
         output(
           await createClient2().notifications.list({
-            cursor: args.cursor,
-            limit: args.limit === void 0 ? void 0 : Number(args.limit)
+            cursor: args2.cursor,
+            limit: args2.limit === void 0 ? void 0 : Number(args2.limit)
           })
         );
       }
     }),
     show: defineCommand2({
       args: { id: positional2 },
-      async run({ args }) {
-        output(await createClient2().notifications.get(args.id));
+      async run({ args: args2 }) {
+        output(await createClient2().notifications.get(args2.id));
       }
     }),
     retry: defineCommand2({
@@ -512,13 +564,13 @@ var notificationCommand = defineCommand2({
           description: "Telegram may already have received this notice"
         }
       },
-      async run({ args }) {
-        if (!args["acknowledge-possible-duplicate"])
+      async run({ args: args2 }) {
+        if (!args2["acknowledge-possible-duplicate"])
           throw new Error("Explicit retry requires --acknowledge-possible-duplicate");
         const api = createClient2().notifications;
-        const receipt = await api.get(args.id);
+        const receipt = await api.get(args2.id);
         output(
-          await api.retry(args.id, {
+          await api.retry(args2.id, {
             expectedUpdatedAt: receipt.updatedAt,
             acknowledgePossibleDuplicate: true
           })
@@ -533,17 +585,17 @@ import { randomUUID as randomUUID2 } from "crypto";
 import { defineCommand as defineCommand3 } from "citty";
 var positional3 = { type: "positional", required: true };
 var output2 = (value) => console.log(JSON.stringify(value, null, 2));
-function questionAnswer(args) {
-  const count = Number(args.choice !== void 0) + Number(args.text !== void 0) + Number(args.skip === true);
+function questionAnswer(args2) {
+  const count = Number(args2.choice !== void 0) + Number(args2.text !== void 0) + Number(args2.skip === true);
   if (count !== 1) throw new Error("Specify exactly one of --choice, --text, or --skip");
-  if (args.skip) return { kind: "skip" };
-  if (args.text !== void 0) {
-    if (!args.text.trim() || Buffer.byteLength(args.text, "utf8") > 4096)
+  if (args2.skip) return { kind: "skip" };
+  if (args2.text !== void 0) {
+    if (!args2.text.trim() || Buffer.byteLength(args2.text, "utf8") > 4096)
       throw new Error("Answer text must contain 1\u20134096 UTF-8 bytes");
-    return { kind: "text", text: args.text };
+    return { kind: "text", text: args2.text };
   }
-  if (!/^[1-4]$/.test(args.choice ?? "")) throw new Error("--choice must be a number from 1 to 4");
-  return { kind: "choice", index: Number(args.choice) - 1 };
+  if (!/^[1-4]$/.test(args2.choice ?? "")) throw new Error("--choice must be a number from 1 to 4");
+  return { kind: "choice", index: Number(args2.choice) - 1 };
 }
 var questionCommand = defineCommand3({
   meta: {
@@ -553,14 +605,14 @@ var questionCommand = defineCommand3({
   subCommands: {
     list: defineCommand3({
       args: { agent: positional3, conversation: { type: "string" } },
-      async run({ args }) {
-        output2(await createClient2().questions(args.agent).list(args.conversation));
+      async run({ args: args2 }) {
+        output2(await createClient2().questions(args2.agent).list(args2.conversation));
       }
     }),
     show: defineCommand3({
       args: { agent: positional3, id: positional3 },
-      async run({ args }) {
-        output2(await createClient2().questions(args.agent).get(args.id));
+      async run({ args: args2 }) {
+        output2(await createClient2().questions(args2.agent).get(args2.id));
       }
     }),
     answer: defineCommand3({
@@ -576,22 +628,22 @@ var questionCommand = defineCommand3({
           description: "Original conversation ID; required for retries"
         }
       },
-      async run({ args }) {
-        const answer = questionAnswer(args);
-        if (args["request-id"] && !args.conversation)
+      async run({ args: args2 }) {
+        const answer = questionAnswer(args2);
+        if (args2["request-id"] && !args2.conversation)
           throw new Error("Retry requires the original --conversation and identical answer");
-        const client = createClient2().questions(args.agent);
-        const observed = await client.get(args.id);
-        const conversationId = args.conversation ?? observed.conversationId;
+        const client = createClient2().questions(args2.agent);
+        const observed = await client.get(args2.id);
+        const conversationId = args2.conversation ?? observed.conversationId;
         if (conversationId !== observed.conversationId)
           throw new Error("Question conversation differs");
         if (answer.kind === "choice" && answer.index >= observed.question.choices.length)
           throw new Error("That choice does not exist for this question");
-        const requestId = args["request-id"] ?? randomUUID2();
+        const requestId = args2["request-id"] ?? randomUUID2();
         console.error(
           `Question request: ${requestId}; exact retry uses --request-id ${requestId} --conversation ${conversationId} and the same answer. Acceptance does not prove consumption or task completion.`
         );
-        output2(await client.answer(args.id, { requestId, conversationId, answer }));
+        output2(await client.answer(args2.id, { requestId, conversationId, answer }));
       }
     })
   }
@@ -613,14 +665,14 @@ var expected = {
 };
 var list2 = defineCommand4({
   args: { ...common, all: { type: "boolean" }, offset: { type: "string", default: "0" } },
-  async run({ args }) {
-    output3(await createClient2().queue(args.agent).list(args.all, Number(args.offset)));
+  async run({ args: args2 }) {
+    output3(await createClient2().queue(args2.agent).list(args2.all, Number(args2.offset)));
   }
 });
 var show2 = defineCommand4({
   args: entry,
-  async run({ args }) {
-    output3(await createClient2().queue(args.agent).get(args.id));
+  async run({ args: args2 }) {
+    output3(await createClient2().queue(args2.agent).get(args2.id));
   }
 });
 var enqueueArgs = {
@@ -640,27 +692,27 @@ var enqueueArgs = {
     description: "Original selection revision; required for retries"
   }
 };
-async function submit(args, replacement) {
+async function submit(args2, replacement) {
   const client = createClient2();
-  const agentId = String(args.agent);
-  if (args["request-id"] && (args["expected-conversation"] === void 0 || args["expected-selection-revision"] === void 0))
+  const agentId = String(args2.agent);
+  if (args2["request-id"] && (args2["expected-conversation"] === void 0 || args2["expected-selection-revision"] === void 0))
     throw new Error(
       "Exact retry requires --expected-conversation and --expected-selection-revision"
     );
   const observed = await client.get(
     `/api/agents/${encodeURIComponent(agentId)}/conversations?limit=1`
   );
-  const requestId = typeof args["request-id"] === "string" ? args["request-id"] : randomUUID3();
+  const requestId = typeof args2["request-id"] === "string" ? args2["request-id"] : randomUUID3();
   const expectedSelection = {
-    conversationId: args["expected-conversation"] === void 0 ? observed.selection.conversationId : args["expected-conversation"] === "none" ? null : String(args["expected-conversation"]),
-    revision: args["expected-selection-revision"] === void 0 ? observed.selection.revision : Number(args["expected-selection-revision"])
+    conversationId: args2["expected-conversation"] === void 0 ? observed.selection.conversationId : args2["expected-conversation"] === "none" ? null : String(args2["expected-conversation"]),
+    revision: args2["expected-selection-revision"] === void 0 ? observed.selection.revision : Number(args2["expected-selection-revision"])
   };
-  const paths = args.files ? JSON.parse(String(args.files)) : [];
+  const paths = args2.files ? JSON.parse(String(args2.files)) : [];
   if (!Array.isArray(paths) || paths.length > 16 || paths.some((p) => typeof p !== "string"))
     throw new Error("--files must be a JSON array of at most 16 paths");
   let bytes = 0;
-  const original = replacement && (args.files === void 0 || args.message === void 0) ? await client.queue(agentId).input(replacement.id) : void 0;
-  const attachments = args.files === void 0 && original ? original.attachments : paths.map((path) => {
+  const original = replacement && (args2.files === void 0 || args2.message === void 0) ? await client.queue(agentId).input(replacement.id) : void 0;
+  const attachments = args2.files === void 0 && original ? original.attachments : paths.map((path) => {
     const stat = statSync(path);
     bytes += stat.size;
     if (!stat.isFile() || bytes > 25 * 1024 * 1024)
@@ -686,7 +738,7 @@ async function submit(args, replacement) {
   const input = {
     requestId,
     expectedSelection,
-    message: String(args.message ?? original?.message ?? ""),
+    message: String(args2.message ?? original?.message ?? ""),
     attachments
   };
   output3(
@@ -695,36 +747,36 @@ async function submit(args, replacement) {
 }
 var add = defineCommand4({
   args: enqueueArgs,
-  async run({ args }) {
-    await submit(args);
+  async run({ args: args2 }) {
+    await submit(args2);
   }
 });
 var edit = defineCommand4({
   args: { ...enqueueArgs, id: positional4, "expected-revision": expected },
-  async run({ args }) {
-    await submit(args, { id: args.id, expectedRevision: Number(args["expected-revision"]) });
+  async run({ args: args2 }) {
+    await submit(args2, { id: args2.id, expectedRevision: Number(args2["expected-revision"]) });
   }
 });
 var remove = defineCommand4({
   args: { ...entry, "expected-revision": expected },
-  async run({ args }) {
+  async run({ args: args2 }) {
     output3(
-      await createClient2().queue(args.agent).remove(args.id, Number(args["expected-revision"]))
+      await createClient2().queue(args2.agent).remove(args2.id, Number(args2["expected-revision"]))
     );
   }
 });
 var control = (paused) => defineCommand4({
   args: { ...common, "expected-revision": expected },
-  async run({ args }) {
+  async run({ args: args2 }) {
     output3(
-      await createClient2().queue(args.agent).pause(paused, Number(args["expected-revision"]))
+      await createClient2().queue(args2.agent).pause(paused, Number(args2["expected-revision"]))
     );
   }
 });
 var stop = defineCommand4({
   args: { ...common, "expected-revision": expected },
-  async run({ args }) {
-    output3(await createClient2().queue(args.agent).stop(Number(args["expected-revision"])));
+  async run({ args: args2 }) {
+    output3(await createClient2().queue(args2.agent).stop(Number(args2["expected-revision"])));
   }
 });
 var reconcile = defineCommand4({
@@ -736,11 +788,11 @@ var reconcile = defineCommand4({
       description: "Acknowledge this input may already have acted; close without replay"
     }
   },
-  async run({ args }) {
-    if (!args.acknowledge)
+  async run({ args: args2 }) {
+    if (!args2.acknowledge)
       throw new Error("--acknowledge is required; this input may already have acted");
     output3(
-      await createClient2().queue(args.agent).reconcile(args.id, Number(args["expected-revision"]))
+      await createClient2().queue(args2.agent).reconcile(args2.id, Number(args2["expected-revision"]))
     );
   }
 });
@@ -821,6 +873,30 @@ async function promptForQuestion(item, prompt) {
   }
 }
 
+// src/repeatable-args.ts
+function collectFlagValues(rawArgs, name) {
+  const values = [];
+  const long = `--${name}`;
+  for (let i = 0; i < rawArgs.length; i++) {
+    const arg = rawArgs[i];
+    if (arg === void 0) continue;
+    if (arg === "--") break;
+    if (arg === long) {
+      const next = rawArgs[i + 1];
+      if (next !== void 0 && next !== "--") {
+        values.push(next);
+        i++;
+      }
+      continue;
+    }
+    if (arg.startsWith(`${long}=`)) {
+      const value = arg.slice(long.length + 1);
+      if (value.length > 0) values.push(value);
+    }
+  }
+  return values;
+}
+
 // src/commands/agent.ts
 var IMAGE_MIME = {
   ".png": "image/png",
@@ -852,9 +928,6 @@ function loadFiles(paths) {
     data: readFileSync3(p).toString("base64")
   }));
 }
-function asPaths(v) {
-  return v ? Array.isArray(v) ? v : [v] : [];
-}
 var spawnCmd = defineCommand5({
   meta: { name: "spawn", description: "Spawn an agent from a profile into a team" },
   args: {
@@ -870,17 +943,17 @@ var spawnCmd = defineCommand5({
       description: "Reasoning level: off|minimal|low|medium|high|xhigh (default: medium)"
     }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const teamId = args.team ?? "default";
+    const teamId = args2.team ?? "default";
     const policy = await client.get(
       `/api/teams/${encodeURIComponent(teamId)}/policy`
     );
     const body = {
-      profileId: args.profile,
-      name: args.name,
-      model: args.model,
-      reasoningLevel: args.reasoning,
+      profileId: args2.profile,
+      name: args2.name,
+      model: args2.model,
+      reasoningLevel: args2.reasoning,
       teamId,
       teamExpectedRevision: policy.teamPolicy.revision,
       placement: "profile_defaults"
@@ -913,8 +986,8 @@ var editCmd = defineCommand5({
       description: 'Telegram topic emoji (e.g. \u{1F4DA}). Use --topic-icon "" to clear.'
     }
   },
-  async run({ args }) {
-    if (args.name === void 0 && args.model === void 0 && args.reasoning === void 0 && args.mirror === void 0 && args["topic-icon"] === void 0) {
+  async run({ args: args2 }) {
+    if (args2.name === void 0 && args2.model === void 0 && args2.reasoning === void 0 && args2.mirror === void 0 && args2["topic-icon"] === void 0) {
       console.error(
         "agent edit: specify at least one of --name, --model, --reasoning, --mirror, --topic-icon"
       );
@@ -922,22 +995,22 @@ var editCmd = defineCommand5({
     }
     const client = createClient2();
     const body = {};
-    if (args.name !== void 0) body.name = args.name;
-    if (args.model !== void 0) {
-      body.modelOverride = args.model === "" ? null : args.model;
+    if (args2.name !== void 0) body.name = args2.name;
+    if (args2.model !== void 0) {
+      body.modelOverride = args2.model === "" ? null : args2.model;
     }
-    if (args.reasoning !== void 0) body.reasoningLevel = args.reasoning;
-    if (args.mirror !== void 0) {
-      if (args.mirror !== "minimal" && args.mirror !== "verbose") {
+    if (args2.reasoning !== void 0) body.reasoningLevel = args2.reasoning;
+    if (args2.mirror !== void 0) {
+      if (args2.mirror !== "minimal" && args2.mirror !== "verbose") {
         console.error(`agent edit: --mirror must be 'minimal' or 'verbose'`);
         process.exit(2);
       }
-      body.telegramMirrorMode = args.mirror;
+      body.telegramMirrorMode = args2.mirror;
     }
-    if (args["topic-icon"] !== void 0) {
-      body.telegramIconEmoji = args["topic-icon"] === "" ? null : args["topic-icon"];
+    if (args2["topic-icon"] !== void 0) {
+      body.telegramIconEmoji = args2["topic-icon"] === "" ? null : args2["topic-icon"];
     }
-    const agent = await client.patch(`/api/agents/${args.id}`, body);
+    const agent = await client.patch(`/api/agents/${args2.id}`, body);
     console.log(`updated agent ${agent.id} (${agent.name})`);
   }
 });
@@ -947,16 +1020,16 @@ var listCmd = defineCommand5({
     all: { type: "boolean", description: "Include archived agents" },
     long: { type: "boolean", alias: "l", description: "Show profile + full UUID columns" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const q = args.all ? "?includeArchived=true" : "";
+    const q = args2.all ? "?includeArchived=true" : "";
     const list8 = await client.get(`/api/agents${q}`);
     if (list8.length === 0) {
       console.log("(no agents)");
       return;
     }
     const rows = list8.map(
-      (a) => args.long ? [a.id, a.status, a.name, a.profileId] : (
+      (a) => args2.long ? [a.id, a.status, a.name, a.profileId] : (
         // Short UUID prefix — all CLI commands accept 4+ char prefixes now.
         [a.id.slice(0, 8), a.status, a.name]
       )
@@ -969,9 +1042,9 @@ var showCmd = defineCommand5({
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const r = await client.get(`/api/agents/${args.id}`);
+    const r = await client.get(`/api/agents/${args2.id}`);
     console.log(`# ${r.agent.id}`);
     console.log(`name:    ${r.agent.name}`);
     console.log(`status:  ${r.agent.status}`);
@@ -992,10 +1065,10 @@ var archiveCmd = defineCommand5({
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.post(`/api/agents/${args.id}/archive`);
-    console.log(`archived agent ${args.id}`);
+    await client.post(`/api/agents/${args2.id}/archive`);
+    console.log(`archived agent ${args2.id}`);
   }
 });
 var unarchiveCmd = defineCommand5({
@@ -1003,10 +1076,10 @@ var unarchiveCmd = defineCommand5({
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.post(`/api/agents/${args.id}/unarchive`);
-    console.log(`unarchived agent ${args.id}`);
+    await client.post(`/api/agents/${args2.id}/unarchive`);
+    console.log(`unarchived agent ${args2.id}`);
   }
 });
 var deleteCmd = defineCommand5({
@@ -1014,16 +1087,16 @@ var deleteCmd = defineCommand5({
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const agent = await client.get(`/api/agents/${encodeURIComponent(args.id)}`);
+    const agent = await client.get(`/api/agents/${encodeURIComponent(args2.id)}`);
     const policy = await client.get(
       `/api/teams/${encodeURIComponent(agent.team.id)}/policy`
     );
     await client.del(
-      `/api/agents/${encodeURIComponent(args.id)}?expectedTeamRevision=${policy.teamPolicy.revision}`
+      `/api/agents/${encodeURIComponent(args2.id)}?expectedTeamRevision=${policy.teamPolicy.revision}`
     );
-    console.log(`deleted agent ${args.id}`);
+    console.log(`deleted agent ${args2.id}`);
   }
 });
 function bashApprovalModeForTty(inputIsTty, outputIsTty) {
@@ -1209,25 +1282,25 @@ var chatCmd = defineCommand5({
     },
     image: {
       type: "string",
-      description: "Attach an image file (png/jpg/gif/webp; repeatable). One-shot mode."
+      description: "Attach an image file (png/jpg/gif/webp; repeat the flag for more). One-shot mode."
     },
     file: {
       type: "string",
-      description: "Attach any file \u2014 the agent gets a path reference (repeatable). One-shot mode."
+      description: "Attach any file \u2014 the agent gets a path reference (repeat the flag for more). One-shot mode."
     }
   },
-  async run({ args }) {
+  async run({ args: args2, rawArgs }) {
     const client = createClient2();
-    const resolved = await client.get(`/api/agents/${args.id}`);
+    const resolved = await client.get(`/api/agents/${args2.id}`);
     const bashApprovalMode = bashApprovalModeForTty(stdin.isTTY, stdout.isTTY);
     const attachments = [
-      ...loadImages(asPaths(args.image)),
-      ...loadFiles(asPaths(args.file))
+      ...loadImages(collectFlagValues(rawArgs, "image")),
+      ...loadFiles(collectFlagValues(rawArgs, "file"))
     ];
-    if (args.message || attachments.length > 0) {
+    if (args2.message || attachments.length > 0) {
       const rl2 = bashApprovalMode === "interactive" ? createInterface({ input: stdin, output: stdout }) : null;
       try {
-        await streamTurn(client, resolved.agent.id, args.message ?? "", attachments, {
+        await streamTurn(client, resolved.agent.id, args2.message ?? "", attachments, {
           bashApprovalMode,
           ...rl2 ? {
             approvalPrompt: {
@@ -1323,16 +1396,16 @@ var chatTrimCmd = defineCommand5({
     id: { type: "positional", required: true },
     keep: { type: "string", required: true, description: "Number of leading messages to keep" }
   },
-  async run({ args }) {
-    const n = Number(args.keep);
+  async run({ args: args2 }) {
+    const n = Number(args2.keep);
     if (!Number.isFinite(n) || n < 0 || !Number.isInteger(n)) {
       throw new Error("--keep must be a non-negative integer");
     }
     const client = createClient2();
-    const head = await client.get(`/api/agents/${args.id}/sessions/head`);
+    const head = await client.get(`/api/agents/${args2.id}/sessions/head`);
     const body = { keepCount: n, expectedSelection: head.selection };
     const res = await client.post(
-      `/api/agents/${args.id}/chat/truncate`,
+      `/api/agents/${args2.id}/chat/truncate`,
       body
     );
     console.log(
@@ -1358,11 +1431,11 @@ var chatContextCmd = defineCommand5({
     },
     json: { type: "boolean", description: "Emit raw JSON instead of a human report" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const query = args.detail || args.json ? "?detail=1" : "";
-    const ctx = await client.get(`/api/agents/${args.id}/chat/context${query}`);
-    if (args.json) {
+    const query = args2.detail || args2.json ? "?detail=1" : "";
+    const ctx = await client.get(`/api/agents/${args2.id}/chat/context${query}`);
+    if (args2.json) {
       console.log(JSON.stringify(ctx, null, 2));
       return;
     }
@@ -1446,20 +1519,20 @@ var chatCompactCmd = defineCommand5({
     },
     force: { type: "boolean", description: "Skip the y/N prompt" }
   },
-  async run({ args }) {
-    if (!args.force) {
+  async run({ args: args2 }) {
+    if (!args2.force) {
       process.stdout.write(
-        `compact chat history for ${args.id}? head turns become a summary; tail is preserved. [y/N] `
+        `compact chat history for ${args2.id}? head turns become a summary; tail is preserved. [y/N] `
       );
-      const answer = await new Promise((resolve5) => {
-        process.stdin.once("data", (d) => resolve5(String(d).trim().toLowerCase()));
+      const answer = await new Promise((resolve6) => {
+        process.stdin.once("data", (d) => resolve6(String(d).trim().toLowerCase()));
       });
       if (answer !== "y" && answer !== "yes") {
         console.log("aborted");
         return;
       }
     }
-    const keepTailNum = args["keep-tail"] ? Number(args["keep-tail"]) : void 0;
+    const keepTailNum = args2["keep-tail"] ? Number(args2["keep-tail"]) : void 0;
     if (keepTailNum !== void 0 && (!Number.isFinite(keepTailNum) || keepTailNum < 0)) {
       console.error("--keep-tail must be a non-negative integer");
       process.exitCode = 1;
@@ -1467,11 +1540,11 @@ var chatCompactCmd = defineCommand5({
     }
     const body = {};
     if (keepTailNum !== void 0) body.keepTail = Math.floor(keepTailNum);
-    if (args.instructions) body.customInstructions = args.instructions;
+    if (args2.instructions) body.customInstructions = args2.instructions;
     const client = createClient2();
-    const head = await client.get(`/api/agents/${args.id}/sessions/head`);
+    const head = await client.get(`/api/agents/${args2.id}/sessions/head`);
     body.expectedSelection = head.selection;
-    const res = await client.post(`/api/agents/${args.id}/chat/compact`, body);
+    const res = await client.post(`/api/agents/${args2.id}/chat/compact`, body);
     console.log(
       `compacted: ${res.before} \u2192 ${res.after} entries (${res.summarized} summarized, ${res.keptTail} tail kept verbatim)`
     );
@@ -1493,11 +1566,11 @@ var skillAddCmd = defineCommand5({
       description: "Attach even when the static skill scan reports findings"
     }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const body = { skill: args.skill, allowFindings: args["allow-warnings"] };
+    const body = { skill: args2.skill, allowFindings: args2["allow-warnings"] };
     try {
-      await client.post(`/api/agents/${args.agent}/skills`, body);
+      await client.post(`/api/agents/${args2.agent}/skills`, body);
     } catch (err) {
       if (err instanceof ApiClientError && err.body.code === "skill_scan_blocked") {
         console.error(`error: ${err.body.error}`);
@@ -1508,7 +1581,7 @@ var skillAddCmd = defineCommand5({
       }
       throw err;
     }
-    console.log(`attached skill ${args.skill} to ${args.agent}`);
+    console.log(`attached skill ${args2.skill} to ${args2.agent}`);
   }
 });
 function printSkillFindings(findings) {
@@ -1525,10 +1598,10 @@ var skillRmCmd = defineCommand5({
     agent: { type: "positional", required: true },
     skill: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.del(`/api/agents/${args.agent}/skills/${encodeURIComponent(args.skill)}`);
-    console.log(`detached skill ${args.skill} from ${args.agent}`);
+    await client.del(`/api/agents/${args2.agent}/skills/${encodeURIComponent(args2.skill)}`);
+    console.log(`detached skill ${args2.skill} from ${args2.agent}`);
   }
 });
 var skillCmd = defineCommand5({
@@ -1544,23 +1617,23 @@ var moveCmd = defineCommand5({
     agent: { type: "positional", required: true },
     team: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const [agent, destination] = await Promise.all([
-      client.get(`/api/agents/${encodeURIComponent(args.agent)}`),
-      client.get(`/api/teams/${encodeURIComponent(args.team)}/policy`)
+      client.get(`/api/agents/${encodeURIComponent(args2.agent)}`),
+      client.get(`/api/teams/${encodeURIComponent(args2.team)}/policy`)
     ]);
     const source = await client.get(
       `/api/teams/${encodeURIComponent(agent.team.id)}/policy`
     );
     const body = {
-      teamId: args.team,
+      teamId: args2.team,
       sourceExpectedRevision: source.teamPolicy.revision,
       destinationExpectedRevision: destination.teamPolicy.revision,
       placement: "profile_defaults"
     };
-    await client.patch(`/api/agents/${args.agent}/team`, body);
-    console.log(`moved ${args.agent} to team ${args.team}`);
+    await client.patch(`/api/agents/${args2.agent}/team`, body);
+    console.log(`moved ${args2.agent} to team ${args2.team}`);
   }
 });
 var sessionHeadCmd = defineCommand5({
@@ -1572,10 +1645,10 @@ var sessionHeadCmd = defineCommand5({
     id: { type: "positional", required: true },
     json: { type: "boolean", description: "Emit raw JSON instead of a human line" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const head = await client.get(`/api/agents/${args.id}/sessions/head`);
-    if (args.json) {
+    const head = await client.get(`/api/agents/${args2.id}/sessions/head`);
+    if (args2.json) {
       console.log(JSON.stringify(head));
       return;
     }
@@ -1587,10 +1660,10 @@ var cancelCmd = defineCommand5({
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.post(`/api/agents/${args.id}/cancel`);
-    console.log(`cancelled active turn for ${args.id}`);
+    await client.post(`/api/agents/${args2.id}/cancel`);
+    console.log(`cancelled active turn for ${args2.id}`);
   }
 });
 var reviewConfigCmd = defineCommand5({
@@ -1603,24 +1676,24 @@ var reviewConfigCmd = defineCommand5({
     model: { type: "string", description: "Review model, or 'agent' to use the Agent model" },
     reasoning: { type: "string", description: "Review reasoning level" }
   },
-  async run({ args }) {
-    if (args.enable && args.disable) throw new Error("choose either --enable or --disable");
+  async run({ args: args2 }) {
+    if (args2.enable && args2.disable) throw new Error("choose either --enable or --disable");
     const client = createClient2();
     const body = {};
-    if (args.enable || args.disable) body.enabled = Boolean(args.enable);
-    if (args.every !== void 0) {
-      const value = Number(args.every);
+    if (args2.enable || args2.disable) body.enabled = Boolean(args2.enable);
+    if (args2.every !== void 0) {
+      const value = Number(args2.every);
       if (!Number.isInteger(value) || value < 1 || value > 100) {
         throw new Error("--every must be an integer from 1 to 100");
       }
       body.everyNTurns = value;
     }
-    if (args.model !== void 0) body.model = args.model === "agent" ? null : args.model;
-    if (args.reasoning !== void 0) {
-      body.reasoningLevel = args.reasoning;
+    if (args2.model !== void 0) body.model = args2.model === "agent" ? null : args2.model;
+    if (args2.reasoning !== void 0) {
+      body.reasoningLevel = args2.reasoning;
     }
     const hasChanges = Object.keys(body).length > 0;
-    const config = hasChanges ? await client.patch(`/api/agents/${args.id}/review-config`, body) : await client.get(`/api/agents/${args.id}/review-config`);
+    const config = hasChanges ? await client.patch(`/api/agents/${args2.id}/review-config`, body) : await client.get(`/api/agents/${args2.id}/review-config`);
     console.log(`review: ${config.enabled ? "enabled" : "disabled"}`);
     console.log(`cadence: every ${config.everyNTurns} successful user turns`);
     console.log(`model: ${config.model ?? "agent model"}`);
@@ -1631,9 +1704,9 @@ var reviewConfigCmd = defineCommand5({
 var reviewCmd = defineCommand5({
   meta: { name: "review", description: "Enqueue a reviewed-learning pass" },
   args: { id: { type: "positional", required: true, description: "Agent id or prefix" } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const response = await createClient2().post(
-      `/api/agents/${args.id}/reviews`
+      `/api/agents/${args2.id}/reviews`
     );
     console.log(`review ${response.review.id} ${response.review.status}`);
   }
@@ -1644,11 +1717,11 @@ var reviewsCmd = defineCommand5({
     id: { type: "positional", required: true, description: "Agent id or prefix" },
     status: { type: "string", description: "pending|running|retrying|completed|failed|cancelled" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const response = await createClient2().get(
-      `/api/agents/${args.id}/reviews`
+      `/api/agents/${args2.id}/reviews`
     );
-    const reviews = args.status ? response.reviews.filter((review) => review.status === args.status) : response.reviews;
+    const reviews = args2.status ? response.reviews.filter((review) => review.status === args2.status) : response.reviews;
     if (reviews.length === 0) return console.log("(no reviews)");
     for (const line of columnize(
       reviews.map((review) => [
@@ -1669,11 +1742,11 @@ var lessonsCmd = defineCommand5({
     id: { type: "positional", required: true, description: "Agent id or prefix" },
     status: { type: "string", description: "pending|approved|rejected|revoked" }
   },
-  async run({ args }) {
-    const status = args.status;
+  async run({ args: args2 }) {
+    const status = args2.status;
     const query = status ? `?status=${encodeURIComponent(status)}` : "";
     const response = await createClient2().get(
-      `/api/agents/${args.id}/lesson-proposals${query}`
+      `/api/agents/${args2.id}/lesson-proposals${query}`
     );
     if (response.proposals.length === 0) return console.log("(no lesson proposals)");
     for (const line of columnize(
@@ -1707,9 +1780,9 @@ function lessonDecisionCmd(decision2) {
       id: { type: "positional", required: true, description: "Proposal id or prefix" },
       yes: { type: "boolean", description: `Confirm ${decision2}` }
     },
-    async run({ args }) {
-      if (!args.yes) throw new Error(`${decision2} requires --yes`);
-      const { agent, proposal } = await locateProposal(args.id);
+    async run({ args: args2 }) {
+      if (!args2.yes) throw new Error(`${decision2} requires --yes`);
+      const { agent, proposal } = await locateProposal(args2.id);
       const response = await createClient2().post(
         `/api/agents/${agent.id}/lesson-proposals/${proposal.id}/${decision2}`,
         { version: proposal.version }
@@ -1725,14 +1798,14 @@ var lessonEditCmd = defineCommand5({
     text: { type: "string", description: "Replacement lesson text" },
     scope: { type: "string", description: "private|shared" }
   },
-  async run({ args }) {
-    if (args.text === void 0 && args.scope === void 0) {
+  async run({ args: args2 }) {
+    if (args2.text === void 0 && args2.scope === void 0) {
       throw new Error("lesson edit requires --text or --scope");
     }
-    const { agent, proposal } = await locateProposal(args.id);
+    const { agent, proposal } = await locateProposal(args2.id);
     const response = await createClient2().patch(
       `/api/agents/${agent.id}/lesson-proposals/${proposal.id}`,
-      { version: proposal.version, text: args.text, scope: args.scope }
+      { version: proposal.version, text: args2.text, scope: args2.scope }
     );
     console.log(`updated ${response.proposal.id} v${response.proposal.version}`);
   }
@@ -1781,13 +1854,13 @@ var list3 = defineCommand6({
     team: { type: "string" },
     json: { type: "boolean" }
   },
-  async run({ args }) {
-    const query = new URLSearchParams({ status: args.status, limit: "100" });
-    if (args.team) query.set("teamId", args.team);
+  async run({ args: args2 }) {
+    const query = new URLSearchParams({ status: args2.status, limit: "100" });
+    if (args2.team) query.set("teamId", args2.team);
     const body = await createClient2().get(
       `/api/approvals?${query}`
     );
-    if (args.json) return console.log(JSON.stringify(body, null, 2));
+    if (args2.json) return console.log(JSON.stringify(body, null, 2));
     if (!body.approvals.length) return console.log("(no approvals)");
     for (const line of columnize([
       ["id", "status", "path", "origin", "expires"],
@@ -1805,11 +1878,11 @@ var list3 = defineCommand6({
 var show3 = defineCommand6({
   meta: { name: "show", description: "Show one approval including payload and audit events" },
   args: { id: { type: "positional", required: true }, json: { type: "boolean" } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const item = await createClient2().get(
-      `/api/approvals/${encodeURIComponent(args.id)}`
+      `/api/approvals/${encodeURIComponent(args2.id)}`
     );
-    if (args.json) return console.log(JSON.stringify(item, null, 2));
+    if (args2.json) return console.log(JSON.stringify(item, null, 2));
     console.log(`# ${item.id}`);
     console.log(`status:    ${item.status}`);
     console.log(`attempt:   ${item.attemptKind}:${item.attemptId}`);
@@ -1834,13 +1907,13 @@ function decision(name) {
       yes: { type: "boolean", description: "Required explicit non-interactive confirmation" },
       json: { type: "boolean" }
     },
-    async run({ args }) {
-      if (!args.yes) throw new Error(`refusing ${name}: review with approval show, then pass --yes`);
+    async run({ args: args2 }) {
+      if (!args2.yes) throw new Error(`refusing ${name}: review with approval show, then pass --yes`);
       const item = await createClient2().post(
-        `/api/approvals/${encodeURIComponent(args.id)}/${name}`,
-        args.reason ? { reason: args.reason } : {}
+        `/api/approvals/${encodeURIComponent(args2.id)}/${name}`,
+        args2.reason ? { reason: args2.reason } : {}
       );
-      if (args.json) console.log(JSON.stringify(item, null, 2));
+      if (args2.json) console.log(JSON.stringify(item, null, 2));
       else console.log(`${item.id}: ${item.status}`);
     }
   });
@@ -1868,11 +1941,11 @@ var list4 = defineCommand7({
     kind: { type: "string" },
     json: { type: "boolean" }
   },
-  async run({ args }) {
-    const query = new URLSearchParams({ state: args.state, limit: "200" });
-    if (args.kind) query.set("kind", args.kind);
+  async run({ args: args2 }) {
+    const query = new URLSearchParams({ state: args2.state, limit: "200" });
+    if (args2.kind) query.set("kind", args2.kind);
     const body = await createClient2().get(`/api/attention?${query}`);
-    if (args.json) return console.log(JSON.stringify(body, null, 2));
+    if (args2.json) return console.log(JSON.stringify(body, null, 2));
     if (!body.items.length) console.log("(nothing needs attention)");
     else
       for (const line of columnize([
@@ -1893,9 +1966,9 @@ var list4 = defineCommand7({
 var summary = defineCommand7({
   meta: { name: "summary", description: "Summarize open attention items" },
   args: { json: { type: "boolean" } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const body = await createClient2().get("/api/attention/summary");
-    if (args.json) console.log(JSON.stringify(body, null, 2));
+    if (args2.json) console.log(JSON.stringify(body, null, 2));
     else
       console.log(
         `${body.openTotal} open \xB7 ${body.bySeverity.action_required} action required \xB7 ${body.bySeverity.error} errors \xB7 ${body.bySeverity.warning} warnings`
@@ -1910,11 +1983,11 @@ function mutation(name) {
       yes: { type: "boolean", description: "Required confirmation" },
       json: { type: "boolean" }
     },
-    async run({ args }) {
-      if (!args.yes) throw new Error(`refusing mutation: pass --yes to ${name}`);
-      const path = `/api/attention/${encodeURIComponent(args.key)}/${name === "acknowledge" ? "acknowledge" : "acknowledgement"}`;
+    async run({ args: args2 }) {
+      if (!args2.yes) throw new Error(`refusing mutation: pass --yes to ${name}`);
+      const path = `/api/attention/${encodeURIComponent(args2.key)}/${name === "acknowledge" ? "acknowledge" : "acknowledgement"}`;
       const body = name === "acknowledge" ? await createClient2().post(path) : await createClient2().del(path);
-      if (args.json) console.log(JSON.stringify(body, null, 2));
+      if (args2.json) console.log(JSON.stringify(body, null, 2));
       else console.log(`${body.item.key}: ${body.item.acknowledgedAt ? "acknowledged" : "open"}`);
     }
   });
@@ -1922,12 +1995,12 @@ function mutation(name) {
 var acknowledgeAll = defineCommand7({
   meta: { name: "acknowledge-all", description: "Acknowledge all open informational items" },
   args: { yes: { type: "boolean" }, json: { type: "boolean" } },
-  async run({ args }) {
-    if (!args.yes) throw new Error("refusing mutation: pass --yes to acknowledge-all");
+  async run({ args: args2 }) {
+    if (!args2.yes) throw new Error("refusing mutation: pass --yes to acknowledge-all");
     const body = await createClient2().post(
       "/api/attention/acknowledge-all"
     );
-    if (args.json) console.log(JSON.stringify(body, null, 2));
+    if (args2.json) console.log(JSON.stringify(body, null, 2));
     else console.log(`acknowledged ${body.acknowledged} informational item(s)`);
   }
 });
@@ -1979,7 +2052,7 @@ function answerCliOpenAIPrompt(prompt, input = process.stdin, output4 = process.
     );
   }
   output4.write(`${prompt.message}: `);
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     let settled = false;
     const signal = prompt.signal;
     let readingInput = true;
@@ -2000,7 +2073,7 @@ function answerCliOpenAIPrompt(prompt, input = process.stdin, output4 = process.
       if (settled) return;
       settled = true;
       cleanup();
-      resolve5(String(data).trim());
+      resolve6(String(data).trim());
     };
     const onAbort = () => {
       if (settled || !signal) return;
@@ -2049,9 +2122,9 @@ var openaiLoginCmd = defineCommand8({
       description: "Use headless device-code login instead of the localhost browser callback"
     }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const loginMethod = args["device-code"] ? "device_code" : "browser";
+    const loginMethod = args2["device-code"] ? "device_code" : "browser";
     if (loginMethod === "device_code") {
       console.log("starting OpenAI device-code sign-in...");
     } else {
@@ -2172,7 +2245,7 @@ import {
   createWriteStream,
   existsSync as existsSync2,
   fsyncSync as fsyncSync2,
-  lstatSync as lstatSync2,
+  lstatSync as lstatSync3,
   mkdirSync as mkdirSync2,
   mkdtempSync,
   openSync as openSync2,
@@ -2184,7 +2257,7 @@ import {
   writeFileSync as writeFileSync2
 } from "fs";
 import { tmpdir } from "os";
-import { basename as basename4, dirname as dirname2, isAbsolute, parse, posix, relative, resolve as resolve2 } from "path";
+import { basename as basename4, dirname as dirname2, isAbsolute, parse, posix, relative, resolve as resolve3 } from "path";
 import { DatabaseSync as DatabaseSync2, backup as sqliteBackup } from "node:sqlite";
 import { Readable } from "stream";
 import { pipeline } from "stream/promises";
@@ -2192,6 +2265,40 @@ import { Decrypter, Encrypter } from "age-encryption";
 import { defineCommand as defineCommand9 } from "citty";
 import { extract, list as list5 } from "tar";
 
+// src/backup-coding-recovery.ts
+import { lstatSync } from "fs";
+import { resolve } from "path";
+function invalidateRestoredCodingEvidence(db, payload, targetHome) {
+  const rows = db.prepare("SELECT id, receipt_json FROM coding_commands").all();
+  for (const row2 of rows) {
+    const receipt = JSON.parse(row2.receipt_json);
+    receipt.environment.inputFingerprint = null;
+    if (!receipt.finishedAt) {
+      receipt.state = "interrupted";
+      receipt.reason = "backup_restored";
+      receipt.finishedAt = Date.now();
+    }
+    db.prepare("UPDATE coding_commands SET state = ?, receipt_json = ? WHERE id = ?").run(
+      receipt.state,
+      JSON.stringify(receipt),
+      row2.id
+    );
+  }
+  const restoredAt = Date.now();
+  db.prepare(
+    `UPDATE coding_command_logs SET state = 'expired', text = NULL, byte_length = 0, retired_at = ?
+     WHERE state = 'retained' AND expires_at <= ?`
+  ).run(restoredAt, restoredAt);
+  db.prepare("DELETE FROM source_snapshots WHERE expires_at <= ?").run(restoredAt);
+  db.prepare("UPDATE workspace_writers SET state = 'recovery', recovery_mode = 'restored'").run();
+  const teams = db.prepare("SELECT id FROM teams").all();
+  const rebase = db.prepare("UPDATE workspace_writers SET root_path = ? WHERE team_id = ?");
+  for (const team of teams) {
+    if (lstatSync(resolve(payload, "teams", team.id)).isDirectory())
+      rebase.run(resolve(targetHome, "teams", team.id), team.id);
+  }
+}
+
 // src/backup-queue-recovery.ts
 import { randomUUID as randomUUID5 } from "crypto";
 import { DatabaseSync } from "node:sqlite";
@@ -2264,8 +2371,19 @@ function pauseRestoredUserQueue(database) {
 // src/backup-schema.ts
 import { createHash } from "crypto";
 var CANONICAL_MIGRATION = "0001_init";
-var CANONICAL_SCHEMA_HASH = "278a7649d6017011b97405306760af3fdd337f068693e24b18cab43421a0c723";
+var CANONICAL_SCHEMA_HASH = "8454a37b1985d248bb25c6588d81b5f00506e13387600c4441ba01727d10bcaf";
 var CANONICAL_OBJECTS = [
+  ["table", "team_coding_environments"],
+  ["table", "workspace_writers"],
+  ["table", "workspace_resources"],
+  ["table", "coding_commands"],
+  ["index", "coding_command_history"],
+  ["table", "coding_command_logs"],
+  ["index", "coding_command_logs_retention"],
+  ["index", "coding_command_logs_team_time"],
+  ["table", "source_snapshots"],
+  ["index", "source_snapshots_retention"],
+  ["index", "source_snapshots_team_time"],
   ["table", "notification_settings"],
   ["table", "notification_receipts"],
   ["index", "notification_receipts_state"],
@@ -2408,7 +2526,7 @@ import {
   fsyncSync,
   ftruncateSync,
   futimesSync,
-  lstatSync,
+  lstatSync as lstatSync2,
   mkdirSync,
   openSync,
   readFileSync as readFileSync4,
@@ -2417,12 +2535,12 @@ import {
   rmSync,
   writeSync
 } from "fs";
-import { basename as basename3, dirname, join as join2, resolve } from "path";
+import { basename as basename3, dirname, join as join2, resolve as resolve2 } from "path";
 var DAEMON_LIVENESS_FILENAME = "daemon-runtime.json";
 var STALE_AFTER_MS = 6e4;
 var PROBE_TIMEOUT_MS = 750;
 function canonicalHomeIdentity(home) {
-  const absolute = resolve(home);
+  const absolute = resolve2(home);
   try {
     return realpathSync.native(absolute);
   } catch (error) {
@@ -2472,7 +2590,7 @@ function parseRecord(raw) {
 }
 function readRecord(path) {
   try {
-    const stat = lstatSync(path);
+    const stat = lstatSync2(path);
     const raw = stat.isFile() ? readFileSync4(path, "utf8") : "";
     return { raw, stat, record: stat.isFile() ? parseRecord(raw) : null };
   } catch (error) {
@@ -2560,7 +2678,7 @@ function reclaimRecord(path, existing) {
   }
 }
 async function acquireHomeRestoreLock(home, operation = "restoring") {
-  const targetHome = resolve(home);
+  const targetHome = resolve2(home);
   mkdirSync(dirname(targetHome), { recursive: true });
   const path = daemonLivenessPath(targetHome);
   mkdirSync(dirname(path), { recursive: true });
@@ -2652,7 +2770,7 @@ async function acquireHomeRestoreLock(home, operation = "restoring") {
     closeSync(fd);
     fd = null;
     try {
-      if (sameFile(lstatSync(path), ownedStat)) rmSync(path, { force: true });
+      if (sameFile(lstatSync2(path), ownedStat)) rmSync(path, { force: true });
     } catch {
     }
     throw error;
@@ -2661,7 +2779,7 @@ async function acquireHomeRestoreLock(home, operation = "restoring") {
   let uninstallComplete = false;
   const stillOwnsPath = () => {
     try {
-      return sameFile(lstatSync(path), ownedStat);
+      return sameFile(lstatSync2(path), ownedStat);
     } catch {
       return false;
     }
@@ -2689,7 +2807,7 @@ async function acquireHomeRestoreLock(home, operation = "restoring") {
     markSwapping(recoveryPath, hadPrevious) {
       if (released || !stillOwnsPath()) throw new Error("restore ownership was lost");
       record.state = "swapping";
-      record.recoveryPath = resolve(recoveryPath);
+      record.recoveryPath = resolve2(recoveryPath);
       record.hadPrevious = hadPrevious;
       writeRecord(fd, record);
       fsyncParentDirectory(path);
@@ -2704,7 +2822,7 @@ async function acquireHomeRestoreLock(home, operation = "restoring") {
     markRecoveryRequired(recoveryPath, hadPrevious) {
       if (released || !stillOwnsPath()) throw new Error("restore ownership was lost");
       record.state = "recovery-required";
-      record.recoveryPath = resolve(recoveryPath);
+      record.recoveryPath = resolve2(recoveryPath);
       record.hadPrevious = hadPrevious;
       writeRecord(fd, record);
     },
@@ -2746,29 +2864,29 @@ var createCmd = defineCommand9({
       description: "Explicitly permit a sensitive unencrypted .tar.gz backup"
     }
   },
-  async run({ args }) {
-    if (args.recipient && args.plaintext) {
+  async run({ args: args2 }) {
+    if (args2.recipient && args2.plaintext) {
       throw new Error("--recipient and --plaintext are mutually exclusive");
     }
-    if (!args.recipient && !args.plaintext) {
+    if (!args2.recipient && !args2.plaintext) {
       throw new Error("choose --recipient <age1\u2026> for encryption or explicitly pass --plaintext");
     }
     const cfg = loadClientConfig();
     const date = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-    const defaultSuffix = args.recipient ? ".tar.gz.age" : ".tar.gz";
-    const outAbs = resolve2(args.output ?? `bazilion-backup-${date}${defaultSuffix}`);
+    const defaultSuffix = args2.recipient ? ".tar.gz.age" : ".tar.gz";
+    const outAbs = resolve3(args2.output ?? `bazilion-backup-${date}${defaultSuffix}`);
     if (existsSync2(outAbs)) throw new Error(`refusing to overwrite existing backup: ${outAbs}`);
-    const configuredHome = resolve2(resolveCliPaths().home);
+    const configuredHome = resolve3(resolveCliPaths().home);
     const outputFromHome = relative(configuredHome, outAbs);
     if (!outputFromHome || !outputFromHome.startsWith("..") && !isAbsolute(outputFromHome)) {
       throw new Error(
         `backup output must be outside BAZILION_HOME (${configuredHome}) to avoid nesting backups`
       );
     }
-    if (!args.recipient) {
+    if (!args2.recipient) {
       console.warn("warning: creating a plaintext backup containing all Bazilion credentials");
     }
-    console.log(`${args.recipient ? "encrypting" : "downloading"} backup \u2192 ${outAbs}`);
+    console.log(`${args2.recipient ? "encrypting" : "downloading"} backup \u2192 ${outAbs}`);
     const res = await fetch(`${cfg.serverUrl}/api/backup`, {
       headers: { authorization: `Bearer ${cfg.token}`, origin: cfg.serverUrl }
     });
@@ -2781,13 +2899,13 @@ var createCmd = defineCommand9({
       }
       throw new Error(`backup failed: ${err}`);
     }
-    const downloadDir = mkdtempSync(resolve2(tmpdir(), "bazilion-download-"));
-    const partial = resolve2(downloadDir, "backup.tar.gz");
+    const downloadDir = mkdtempSync(resolve3(tmpdir(), "bazilion-download-"));
+    const partial = resolve3(downloadDir, "backup.tar.gz");
     try {
-      if (args.recipient) {
+      if (args2.recipient) {
         const [encryptSource, validateSource] = res.body.tee();
         const encrypter = new Encrypter();
-        encrypter.addRecipient(args.recipient);
+        encrypter.addRecipient(args2.recipient);
         const encrypted = await encrypter.encrypt(encryptSource);
         await Promise.all([
           pipeline(
@@ -2802,12 +2920,12 @@ var createCmd = defineCommand9({
           createWriteStream(partial, { flags: "wx", mode: 384 })
         );
       }
-      if (!args.recipient) await validateArchive(partial);
+      if (!args2.recipient) await validateArchive(partial);
       try {
         renameSync2(partial, outAbs);
       } catch (error) {
         if (!(error instanceof Error) || !("code" in error) || error.code !== "EXDEV") throw error;
-        const installPartial = resolve2(
+        const installPartial = resolve3(
           dirname2(outAbs),
           `.${basename4(outAbs)}.${randomUUID7()}.installing`
         );
@@ -3047,7 +3165,7 @@ function validateEntityId(id, pattern, entity) {
   return id;
 }
 function containedChildDirectory(root, id, rowLabel) {
-  const child = resolve2(root, id);
+  const child = resolve3(root, id);
   const fromRoot = relative(root, child);
   if (!fromRoot || fromRoot.startsWith("..") || isAbsolute(fromRoot)) {
     throw new Error(`${rowLabel} directory escapes its canonical root: ${JSON.stringify(id)}`);
@@ -3056,14 +3174,14 @@ function containedChildDirectory(root, id, rowLabel) {
 }
 function requireExtractedDirectory(path, rowLabel) {
   try {
-    if (lstatSync2(path).isDirectory()) return;
+    if (lstatSync3(path).isDirectory()) return;
   } catch {
   }
   throw new Error(`${rowLabel} is missing its canonical directory in the backup`);
 }
 function requireExtractedTeamSlot(path, rowLabel) {
   try {
-    const entry3 = lstatSync2(path);
+    const entry3 = lstatSync3(path);
     if (entry3.isDirectory() || entry3.isSymbolicLink()) return;
   } catch {
   }
@@ -3083,8 +3201,8 @@ function rebaseRestoredHomeDirectories(database, payload, targetHome) {
       ["agents", agents, AGENT_ID]
     ]) {
       const collection = table;
-      const stagedRoot = resolve2(payload, collection);
-      const targetRoot = resolve2(targetHome, collection);
+      const stagedRoot = resolve3(payload, collection);
+      const targetRoot = resolve3(targetHome, collection);
       for (const row2 of rows) {
         const id = validateEntityId(row2.id, idPattern, `${table} row`);
         const rowLabel = `${table} row ${JSON.stringify(id)}`;
@@ -3097,7 +3215,7 @@ function rebaseRestoredHomeDirectories(database, payload, targetHome) {
         });
       }
     }
-    const stagedTeamsRoot = resolve2(payload, "teams");
+    const stagedTeamsRoot = resolve3(payload, "teams");
     for (const row2 of teams) {
       const id = validateEntityId(row2.id, SLUG_ID, "teams row");
       const rowLabel = `teams row ${JSON.stringify(id)}`;
@@ -3127,6 +3245,7 @@ function rebaseRestoredHomeDirectories(database, payload, targetHome) {
           );
         }
       }
+      invalidateRestoredCodingEvidence(db, payload, targetHome);
       db.exec("COMMIT");
       transactionOpen = false;
     } catch (error) {
@@ -3146,15 +3265,15 @@ function rebaseRestoredHomeDirectories(database, payload, targetHome) {
   }
 }
 function removeRebuildableQmdIndexes(payload) {
-  const teamsDir = resolve2(payload, "teams");
-  if (!existsSync2(teamsDir) || !lstatSync2(teamsDir).isDirectory()) return;
+  const teamsDir = resolve3(payload, "teams");
+  if (!existsSync2(teamsDir) || !lstatSync3(teamsDir).isDirectory()) return;
   for (const team of readdirSync(teamsDir, { withFileTypes: true })) {
     if (!team.isDirectory() || team.isSymbolicLink()) continue;
-    const memoryDir = resolve2(teamsDir, team.name, "memory");
-    if (!existsSync2(memoryDir) || !lstatSync2(memoryDir).isDirectory()) continue;
+    const memoryDir = resolve3(teamsDir, team.name, "memory");
+    if (!existsSync2(memoryDir) || !lstatSync3(memoryDir).isDirectory()) continue;
     for (const entry3 of readdirSync(memoryDir, { withFileTypes: true })) {
       if (entry3.isFile() && entry3.name.startsWith(".qmd-index.sqlite")) {
-        rmSync2(resolve2(memoryDir, entry3.name), { force: true });
+        rmSync2(resolve3(memoryDir, entry3.name), { force: true });
       }
     }
   }
@@ -3168,7 +3287,7 @@ function revokeRestoredBrowserSessions(database) {
   }
 }
 function installValidatedPayload(payload, targetHome, staging, lifecycle, operations = { rename: renameSync2 }) {
-  const previous = resolve2(staging, "previous-home");
+  const previous = resolve3(staging, "previous-home");
   const hadPrevious = existsSync2(targetHome);
   const targetParent = dirname2(targetHome);
   const syncDirectory = operations.fsyncDirectory ?? fsyncDirectory;
@@ -3299,8 +3418,8 @@ function isAgeEncrypted(path) {
   }
 }
 function readAgeIdentity(rawPath) {
-  const path = resolve2(rawPath);
-  const entry3 = lstatSync2(path);
+  const path = resolve3(rawPath);
+  const entry3 = lstatSync3(path);
   if (!entry3.isFile()) throw new Error(`age identity is not a regular file: ${path}`);
   if (process.platform !== "win32" && (entry3.mode & 63) !== 0) {
     throw new Error(`age identity must be owner-only (chmod 600): ${path}`);
@@ -3332,11 +3451,11 @@ var restoreCmd = defineCommand9({
       description: "Path to an age identity file required for encrypted backups"
     }
   },
-  async run({ args }) {
-    const file = resolve2(args.file);
+  async run({ args: args2 }) {
+    const file = resolve3(args2.file);
     if (!existsSync2(file)) throw new Error(`backup file not found: ${file}`);
-    const paths = resolveCliPaths(args.home);
-    const targetHome = resolve2(paths.home);
+    const paths = resolveCliPaths(args2.home);
+    const targetHome = resolve3(paths.home);
     if (targetHome === parse(targetHome).root) {
       throw new Error(`refusing to restore over filesystem root: ${targetHome}`);
     }
@@ -3344,7 +3463,7 @@ var restoreCmd = defineCommand9({
     mkdirSync2(targetParent, { recursive: true });
     const restoreLock = await acquireHomeRestoreLock(targetHome);
     try {
-      const targetsConfiguredHome = targetHome === resolve2(resolveCliPaths().home);
+      const targetsConfiguredHome = targetHome === resolve3(resolveCliPaths().home);
       if (targetsConfiguredHome) {
         for (const serverUrl of configuredLoopbackUrls()) {
           if (await probeServerRunning(serverUrl)) {
@@ -3355,26 +3474,26 @@ var restoreCmd = defineCommand9({
         }
       }
       if (existsSync2(targetHome)) {
-        if (!lstatSync2(targetHome).isDirectory()) {
+        if (!lstatSync3(targetHome).isDirectory()) {
           throw new Error(`${targetHome} exists and is not a directory`);
         }
         const entries = readdirSync(targetHome);
-        if (entries.length > 0 && !args.force) {
+        if (entries.length > 0 && !args2.force) {
           throw new Error(
             `${targetHome} is not empty. Pass --force to overwrite (destroys existing data).`
           );
         }
       }
-      const staging = mkdtempSync(resolve2(targetParent, ".bazilion-restore-"));
-      const stagedArchive = resolve2(staging, "backup.tar.gz");
-      const payload = resolve2(staging, "payload");
+      const staging = mkdtempSync(resolve3(targetParent, ".bazilion-restore-"));
+      const stagedArchive = resolve3(staging, "backup.tar.gz");
+      const payload = resolve3(staging, "payload");
       let preserveStaging = false;
       try {
         if (isAgeEncrypted(file)) {
-          if (!args.identity) {
+          if (!args2.identity) {
             throw new Error("encrypted backup requires --identity <owner-only age identity file>");
           }
-          const identity = readAgeIdentity(args.identity);
+          const identity = readAgeIdentity(args2.identity);
           const decrypter = new Decrypter();
           decrypter.addIdentity(identity);
           let decrypted;
@@ -3394,7 +3513,7 @@ var restoreCmd = defineCommand9({
             throw new Error("backup decryption failed: ciphertext is truncated or modified");
           }
         } else {
-          if (args.identity) {
+          if (args2.identity) {
             throw new Error("encrypted-only restore requested, but the backup is plaintext");
           }
           copyFileSync(file, stagedArchive);
@@ -3413,9 +3532,9 @@ var restoreCmd = defineCommand9({
           // payload-relative path by npm-tar.
           preservePaths: true
         });
-        const database = resolve2(payload, "bazilion.db");
-        const authFile = resolve2(payload, "auth.json");
-        if (!lstatSync2(database).isFile() || !lstatSync2(authFile).isFile()) {
+        const database = resolve3(payload, "bazilion.db");
+        const authFile = resolve3(payload, "auth.json");
+        if (!lstatSync3(database).isFile() || !lstatSync3(authFile).isFile()) {
           throw new Error("backup required files did not extract as regular files");
         }
         const authToken = validateAuthFile(authFile);
@@ -3477,8 +3596,8 @@ function encryptSecretEnvelope(value, password) {
   });
 }
 function credentialInventory(home) {
-  const authFile = resolve2(home, "auth.json");
-  const database = resolve2(home, "bazilion.db");
+  const authFile = resolve3(home, "auth.json");
+  const database = resolve3(home, "bazilion.db");
   const token = validateAuthFile(authFile);
   validateDatabase(database, token);
   const db = new DatabaseSync2(database, { readOnly: true });
@@ -3495,8 +3614,8 @@ function credentialInventory(home) {
 var inventoryCmd = defineCommand9({
   meta: { name: "inventory", description: "List credential classes captured by a backup/home" },
   args: { home: { type: "string", description: "Override BAZILION_HOME" } },
-  run({ args }) {
-    const home = resolve2(resolveCliPaths(args.home).home);
+  run({ args: args2 }) {
+    const home = resolve3(resolveCliPaths(args2.home).home);
     const inventory = credentialInventory(home);
     console.log("credential classes present (values are never shown):");
     console.log(`  bootstrap token: ${inventory.bootstrap ? "present" : "missing"}`);
@@ -3532,17 +3651,17 @@ var rotateBootstrapCmd = defineCommand9({
     home: { type: "string", description: "Override BAZILION_HOME" },
     yes: { type: "boolean", required: true, description: "Confirm token revocation and home swap" }
   },
-  async run({ args }) {
-    if (!args.yes) throw new Error("--yes is required");
-    const paths = resolveCliPaths(args.home);
-    const targetHome = resolve2(paths.home);
+  async run({ args: args2 }) {
+    if (!args2.yes) throw new Error("--yes is required");
+    const paths = resolveCliPaths(args2.home);
+    const targetHome = resolve3(paths.home);
     if (targetHome === parse(targetHome).root) {
       throw new Error(`refusing to rotate filesystem root: ${targetHome}`);
     }
     const lock = await acquireHomeRestoreLock(targetHome);
     const parent = dirname2(targetHome);
-    const staging = mkdtempSync(resolve2(parent, ".bazilion-rotate-"));
-    const payload = resolve2(staging, "payload");
+    const staging = mkdtempSync(resolve3(parent, ".bazilion-rotate-"));
+    const payload = resolve3(staging, "payload");
     let preserveStaging = false;
     try {
       for (const serverUrl of configuredLoopbackUrls()) {
@@ -3554,16 +3673,16 @@ var rotateBootstrapCmd = defineCommand9({
       if (typeof oldAuth.token !== "string" || !oldAuth.token) {
         throw new Error("auth.json is missing the bootstrap token");
       }
-      validateDatabase(resolve2(targetHome, "bazilion.db"), oldAuth.token);
+      validateDatabase(resolve3(targetHome, "bazilion.db"), oldAuth.token);
       cpSync(targetHome, payload, {
         recursive: true,
         dereference: false,
         verbatimSymlinks: true,
         preserveTimestamps: true
       });
-      const stagedDb = resolve2(payload, "bazilion.db");
+      const stagedDb = resolve3(payload, "bazilion.db");
       rmSync2(stagedDb, { force: true });
-      const sourceDb = new DatabaseSync2(resolve2(targetHome, "bazilion.db"), { readOnly: true });
+      const sourceDb = new DatabaseSync2(resolve3(targetHome, "bazilion.db"), { readOnly: true });
       try {
         await sqliteBackup(sourceDb, stagedDb);
       } finally {
@@ -3610,8 +3729,8 @@ var rotateBootstrapCmd = defineCommand9({
       } finally {
         db.close();
       }
-      const stagedAuth = resolve2(payload, "auth.json");
-      const authPartial = resolve2(payload, `.auth.json.${randomUUID7()}.installing`);
+      const stagedAuth = resolve3(payload, "auth.json");
+      const authPartial = resolve3(payload, `.auth.json.${randomUUID7()}.installing`);
       writeFileSync2(authPartial, `${JSON.stringify({ ...oldAuth, token: newToken }, null, 2)}
 `, {
         mode: 384,
@@ -3668,9 +3787,9 @@ async function walk(cmd, path, out) {
     await walk(sub, [...path, name], out);
   }
 }
-function flagsOf(args) {
+function flagsOf(args2) {
   const out = [];
-  for (const [name, def] of Object.entries(args)) {
+  for (const [name, def] of Object.entries(args2)) {
     if (def.type === "positional") continue;
     out.push(`--${name}`);
     const aliases = Array.isArray(def.alias) ? def.alias : def.alias ? [def.alias] : [];
@@ -3773,14 +3892,14 @@ function completionCommand(main2) {
         description: "bash | zsh | fish"
       }
     },
-    async run({ args }) {
+    async run({ args: args2 }) {
       const flat = [];
       await walk(main2, [], flat);
-      const shell = String(args.shell).toLowerCase();
+      const shell = String(args2.shell).toLowerCase();
       if (shell === "bash") console.log(bashScript(flat));
       else if (shell === "zsh") console.log(zshScript(flat));
       else if (shell === "fish") console.log(fishScript(flat));
-      else throw new Error(`unsupported shell: ${args.shell} (want bash | zsh | fish)`);
+      else throw new Error(`unsupported shell: ${args2.shell} (want bash | zsh | fish)`);
     }
   });
 }
@@ -3832,11 +3951,11 @@ var setCmd = defineCommand11({
       description: "New value (empty string clears the field)"
     }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const body = { value: args.value };
+    const body = { value: args2.value };
     const state = await client.put(
-      `/api/config/fields/${encodeURIComponent(args.envVar)}`,
+      `/api/config/fields/${encodeURIComponent(args2.envVar)}`,
       body
     );
     console.log(`${state.envVar} (${state.kind}): ${displayValue(state)}`);
@@ -3847,10 +3966,10 @@ var rmCmd = defineCommand11({
   args: {
     envVar: { type: "positional", required: true, description: "Env var name to clear" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.del(`/api/config/fields/${encodeURIComponent(args.envVar)}`);
-    console.log(`removed ${args.envVar}`);
+    await client.del(`/api/config/fields/${encodeURIComponent(args2.envVar)}`);
+    console.log(`removed ${args2.envVar}`);
   }
 });
 var configCommand = defineCommand11({
@@ -3897,12 +4016,12 @@ function probeHost(host) {
   return host;
 }
 function isTcpPortOpen(host, port) {
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     const socket = connect({ host: probeHost(host), port: Number(port) });
     const done = (open) => {
       socket.removeAllListeners();
       socket.destroy();
-      resolve5(open);
+      resolve6(open);
     };
     socket.setTimeout(600);
     socket.once("connect", () => done(true));
@@ -3951,8 +4070,8 @@ async function waitFor(url, label, timeoutMs = 2e4) {
 function openBrowser(url) {
   const platform = process.platform;
   const cmd = platform === "darwin" ? "open" : platform === "win32" ? "cmd" : process.env.BROWSER || "xdg-open";
-  const args = platform === "win32" ? ["/c", "start", "", url] : [url];
-  const proc = spawn(cmd, args, { detached: true, stdio: "ignore" });
+  const args2 = platform === "win32" ? ["/c", "start", "", url] : [url];
+  const proc = spawn(cmd, args2, { detached: true, stdio: "ignore" });
   proc.unref();
 }
 function spawnProcess(label, entry3, env) {
@@ -3986,11 +4105,11 @@ var dashboardCommand = defineCommand12({
       default: true
     }
   },
-  async run({ args }) {
-    const webHost = args.host ?? "127.0.0.1";
-    const webPort = args.port ?? "4322";
-    const daemonHost = args["daemon-host"] ?? "127.0.0.1";
-    const daemonPort = args["daemon-port"] ?? "4321";
+  async run({ args: args2 }) {
+    const webHost = args2.host ?? "127.0.0.1";
+    const webPort = args2.port ?? "4322";
+    const daemonHost = args2["daemon-host"] ?? "127.0.0.1";
+    const daemonPort = args2["daemon-port"] ?? "4321";
     const daemonUrl = `http://${daemonHost}:${daemonPort}`;
     const webUrl = `http://${webHost}:${webPort}`;
     const authFile = resolveCliPaths().authFile;
@@ -4060,7 +4179,7 @@ var dashboardCommand = defineCommand12({
       console.log("");
       console.log(`dashboard: ${webUrl}`);
       console.log(`token:     ${authFile}`);
-      if (args.open) openBrowser(webUrl);
+      if (args2.open) openBrowser(webUrl);
     } catch (err) {
       terminateChildren();
       throw err;
@@ -4068,13 +4187,13 @@ var dashboardCommand = defineCommand12({
     if (children.length === 0) return;
     process.on("SIGINT", terminateChildren);
     process.on("SIGTERM", terminateChildren);
-    await new Promise((resolve5) => {
+    await new Promise((resolve6) => {
       let remaining = children.length;
       for (const child of children) {
         child.on("close", (code) => {
           remaining--;
           if (!signalled && code && code !== 0) process.exitCode = code;
-          if (remaining === 0) resolve5();
+          if (remaining === 0) resolve6();
         });
       }
     });
@@ -4363,14 +4482,14 @@ var listCmd3 = defineCommand15({
     agent: { type: "positional", required: true, description: "Recipient agent id" },
     unread: { type: "boolean", description: "Only show unread messages" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const qs = args.unread ? "?unread=1" : "";
+    const qs = args2.unread ? "?unread=1" : "";
     const { messages } = await client.get(
-      `/api/agents/${args.agent}/messages${qs}`
+      `/api/agents/${args2.agent}/messages${qs}`
     );
     if (messages.length === 0) {
-      console.log(args.unread ? "(no unread messages)" : "(inbox empty)");
+      console.log(args2.unread ? "(no unread messages)" : "(inbox empty)");
       return;
     }
     for (const line of columnize(messages.map(messageRow))) console.log(line);
@@ -4381,9 +4500,9 @@ var showCmd2 = defineCommand15({
   args: {
     id: { type: "positional", required: true, description: "Message id" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const m = await client.get(`/api/messages/${args.id}`);
+    const m = await client.get(`/api/messages/${args2.id}`);
     const when = new Date(m.createdAt).toISOString();
     const read = m.readAt ? new Date(m.readAt).toISOString() : "(unread)";
     console.log(`id:        ${m.id}`);
@@ -4401,10 +4520,10 @@ var readCmd = defineCommand15({
   args: {
     id: { type: "positional", required: true, description: "Message id" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.patch(`/api/messages/${args.id}`, { read: true });
-    console.log(`marked read: ${args.id}`);
+    await client.patch(`/api/messages/${args2.id}`, { read: true });
+    console.log(`marked read: ${args2.id}`);
   }
 });
 var loopBreaksCmd = defineCommand15({
@@ -4413,11 +4532,11 @@ var loopBreaksCmd = defineCommand15({
     agent: { type: "positional", required: true, description: "Agent id" },
     limit: { type: "string", description: "Maximum events to show (default 25)" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const limit = args.limit ? `?limit=${encodeURIComponent(args.limit)}` : "";
+    const limit = args2.limit ? `?limit=${encodeURIComponent(args2.limit)}` : "";
     const { events } = await client.get(
-      `/api/agents/${args.agent}/loop-breaks${limit}`
+      `/api/agents/${args2.agent}/loop-breaks${limit}`
     );
     if (events.length === 0) {
       console.log("(no agent-message chains stopped)");
@@ -4482,7 +4601,7 @@ var loginCommand = defineCommand16({
     skipVerify: { type: "boolean", description: "Don't verify /api/auth/whoami before saving" },
     clear: { type: "boolean", description: "Remove the stored remote instead of setting one" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const paths = resolveCliPaths();
     if (!existsSync4(paths.authFile)) {
       throw new Error(
@@ -4490,7 +4609,7 @@ var loginCommand = defineCommand16({
       );
     }
     const auth = JSON.parse(readFileSync6(paths.authFile, "utf8"));
-    if (args.clear) {
+    if (args2.clear) {
       if (!auth.remote) {
         console.log("no remote stored \u2014 nothing to clear");
         return;
@@ -4501,16 +4620,16 @@ var loginCommand = defineCommand16({
       console.log("cleared stored remote; CLI will fall back to the local daemon");
       return;
     }
-    if (!args.server || !args.token) {
+    if (!args2.server || !args2.token) {
       throw new Error(
         "--server and --token are required (or pass --clear to remove the stored remote)"
       );
     }
-    const server = normalizeServer(args.server);
-    if (!args.skipVerify) {
-      await verifyToken(server, args.token);
+    const server = normalizeServer(args2.server);
+    if (!args2.skipVerify) {
+      await verifyToken(server, args2.token);
     }
-    auth.remote = { server, token: args.token };
+    auth.remote = { server, token: args2.token };
     writeFileSync3(paths.authFile, `${JSON.stringify(auth, null, 2)}
 `, { mode: 384 });
     console.log(`saved remote: ${server}`);
@@ -4542,16 +4661,16 @@ var addCmd = defineCommand17({
     token: { type: "string", description: "http/sse: bearer token (stored encrypted)" },
     disabled: { type: "boolean", description: "Create disabled" }
   },
-  async run({ args }) {
-    const transport = args.transport ?? "stdio";
+  async run({ args: args2 }) {
+    const transport = args2.transport ?? "stdio";
     const body = {
-      name: args.name,
+      name: args2.name,
       transport,
-      command: args.command ?? null,
-      args: args.args ? args.args.split(" ").filter(Boolean) : [],
-      url: args.url ?? null,
-      authToken: args.token ?? void 0,
-      enabled: !args.disabled
+      command: args2.command ?? null,
+      args: args2.args ? args2.args.split(" ").filter(Boolean) : [],
+      url: args2.url ?? null,
+      authToken: args2.token ?? void 0,
+      enabled: !args2.disabled
     };
     const client = createClient2();
     const { server } = await client.post("/api/mcp-servers", body);
@@ -4573,46 +4692,46 @@ var listCmd4 = defineCommand17({
 var showCmd3 = defineCommand17({
   meta: { name: "show", description: "Show one MCP server" },
   args: { id: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const { server } = await client.get(`/api/mcp-servers/${args.id}`);
+    const { server } = await client.get(`/api/mcp-servers/${args2.id}`);
     console.log(JSON.stringify(server, null, 2));
   }
 });
 var rmCmd2 = defineCommand17({
   meta: { name: "rm", description: "Delete an MCP server" },
   args: { id: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.del(`/api/mcp-servers/${args.id}`);
-    console.log(`removed MCP server ${args.id}`);
+    await client.del(`/api/mcp-servers/${args2.id}`);
+    console.log(`removed MCP server ${args2.id}`);
   }
 });
 var enableCmd = defineCommand17({
   meta: { name: "enable", description: "Enable an MCP server" },
   args: { id: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.patch(`/api/mcp-servers/${args.id}`, { enabled: true });
-    console.log(`enabled MCP server ${args.id}`);
+    await client.patch(`/api/mcp-servers/${args2.id}`, { enabled: true });
+    console.log(`enabled MCP server ${args2.id}`);
   }
 });
 var disableCmd = defineCommand17({
   meta: { name: "disable", description: "Disable an MCP server" },
   args: { id: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.patch(`/api/mcp-servers/${args.id}`, { enabled: false });
-    console.log(`disabled MCP server ${args.id}`);
+    await client.patch(`/api/mcp-servers/${args2.id}`, { enabled: false });
+    console.log(`disabled MCP server ${args2.id}`);
   }
 });
 var testCmd = defineCommand17({
   meta: { name: "test", description: "Connect to a server and list its tools" },
   args: { id: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const res = await client.post(
-      `/api/mcp-servers/${args.id}/test`
+      `/api/mcp-servers/${args2.id}/test`
     );
     if (!res.ok) {
       console.error(`connection failed: ${res.error}`);
@@ -4649,11 +4768,11 @@ var writeCmd = defineCommand18({
     key: { type: "positional", required: true, description: "Memory key (path under memory/)" },
     content: { type: "positional", required: true, description: "Content to write" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const entry3 = await client.put(
-      `/api/teams/${args.team}/memory/${encodeKey(args.key)}`,
-      { content: args.content }
+      `/api/teams/${args2.team}/memory/${encodeKey(args2.key)}`,
+      { content: args2.content }
     );
     console.log(`wrote ${entry3.key} (${entry3.content.length} bytes)`);
   }
@@ -4664,10 +4783,10 @@ var readCmd2 = defineCommand18({
     team: { type: "positional", required: true, description: "Team slug" },
     key: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const entry3 = await client.get(
-      `/api/teams/${args.team}/memory/${encodeKey(args.key)}`
+      `/api/teams/${args2.team}/memory/${encodeKey(args2.key)}`
     );
     console.log(entry3.content);
   }
@@ -4679,11 +4798,11 @@ var searchCmd = defineCommand18({
     query: { type: "positional", required: true },
     limit: { type: "string", description: "Max results (default 10)" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const limit = args.limit ? Number.parseInt(args.limit, 10) : 10;
-    const params = new URLSearchParams({ q: args.query, limit: String(limit) });
-    const hits = await client.get(`/api/teams/${args.team}/memory/search?${params}`);
+    const limit = args2.limit ? Number.parseInt(args2.limit, 10) : 10;
+    const params = new URLSearchParams({ q: args2.query, limit: String(limit) });
+    const hits = await client.get(`/api/teams/${args2.team}/memory/search?${params}`);
     if (hits.length === 0) {
       console.log("(no matches)");
       return;
@@ -4698,9 +4817,9 @@ var listCmd5 = defineCommand18({
   args: {
     team: { type: "positional", required: true, description: "Team slug" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const all = await client.get(`/api/teams/${args.team}/memory`);
+    const all = await client.get(`/api/teams/${args2.team}/memory`);
     if (all.length === 0) {
       console.log("(no memory entries)");
       return;
@@ -4716,10 +4835,10 @@ var rmCmd3 = defineCommand18({
     team: { type: "positional", required: true, description: "Team slug" },
     key: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.del(`/api/teams/${args.team}/memory/${encodeKey(args.key)}`);
-    console.log(`removed ${args.key}`);
+    await client.del(`/api/teams/${args2.team}/memory/${encodeKey(args2.key)}`);
+    console.log(`removed ${args2.key}`);
   }
 });
 var memoryCommand = defineCommand18({
@@ -4743,6 +4862,14 @@ import { readFileSync as readFileSync7, rmSync as rmSync3, writeFileSync as writ
 import { tmpdir as tmpdir2 } from "os";
 import { join as join4 } from "path";
 
+// ../../packages/api-types/src/git-review.ts
+var REVIEW_LIMITS = {
+  files: 1e3,
+  fileBytes: 1024 * 1024,
+  totalBytes: 16 * 1024 * 1024,
+  patchBytes: 256 * 1024
+};
+
 // ../../packages/api-types/src/index.ts
 var PROFILE_FILES = [
   "profile.json",
@@ -4808,20 +4935,20 @@ var createCmd2 = defineCommand19({
       description: "Path to TOOLS.md content (optional; omit to skip)"
     }
   },
-  async run({ args }) {
-    const skillsMode = parseSkillsMode(args["skills-mode"]);
+  async run({ args: args2 }) {
+    const skillsMode = parseSkillsMode(args2["skills-mode"]);
     const readTemplate = (path) => path ? readFileSync7(path, "utf8") : void 0;
     const body = {
-      id: args.id,
-      name: args.name,
-      defaultModel: args.model,
+      id: args2.id,
+      name: args2.name,
+      defaultModel: args2.model,
       skillsMode,
-      defaultSkills: splitCsv(args.skills),
-      soul: readTemplate(args["soul-file"]),
-      identity: readTemplate(args["identity-file"]),
-      bootstrap: args["skip-bootstrap"] ? null : readTemplate(args["bootstrap-file"]) ?? void 0,
-      agents: readTemplate(args["agents-file"]),
-      tools: readTemplate(args["tools-file"])
+      defaultSkills: splitCsv(args2.skills),
+      soul: readTemplate(args2["soul-file"]),
+      identity: readTemplate(args2["identity-file"]),
+      bootstrap: args2["skip-bootstrap"] ? null : readTemplate(args2["bootstrap-file"]) ?? void 0,
+      agents: readTemplate(args2["agents-file"]),
+      tools: readTemplate(args2["tools-file"])
     };
     const client = createClient2();
     const profile = await client.post("/api/profiles", body);
@@ -4846,9 +4973,9 @@ var showCmd4 = defineCommand19({
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const loaded = await client.get(`/api/profiles/${args.id}`);
+    const loaded = await client.get(`/api/profiles/${args2.id}`);
     console.log(`# ${loaded.profile.id}`);
     console.log(`name:           ${loaded.profile.name}`);
     console.log(`dir:            ${loaded.profile.dir}`);
@@ -4876,23 +5003,23 @@ var editCmd2 = defineCommand19({
       description: `File: ${PROFILE_FILES.join(", ")}`
     }
   },
-  async run({ args }) {
-    if (!PROFILE_FILES.includes(args.file)) {
-      throw new Error(`unsupported file: ${args.file}. Allowed: ${PROFILE_FILES.join(", ")}`);
+  async run({ args: args2 }) {
+    if (!PROFILE_FILES.includes(args2.file)) {
+      throw new Error(`unsupported file: ${args2.file}. Allowed: ${PROFILE_FILES.join(", ")}`);
     }
-    const file = args.file;
+    const file = args2.file;
     const client = createClient2();
     const { content } = await client.get(
-      `/api/profiles/${args.id}/files/${file}`
+      `/api/profiles/${args2.id}/files/${file}`
     );
-    const tmpPath = join4(tmpdir2(), `bazilion-${args.id}-${file}-${randomBytes2(4).toString("hex")}`);
+    const tmpPath = join4(tmpdir2(), `bazilion-${args2.id}-${file}-${randomBytes2(4).toString("hex")}`);
     writeFileSync4(tmpPath, content);
     try {
       const editor = process.env.EDITOR ?? process.env.VISUAL ?? "vi";
-      const code = await new Promise((resolve5, reject) => {
+      const code = await new Promise((resolve6, reject) => {
         const child = spawn2(editor, [tmpPath], { stdio: "inherit" });
         child.on("error", reject);
-        child.on("close", (c) => resolve5(c ?? 0));
+        child.on("close", (c) => resolve6(c ?? 0));
       });
       if (code !== 0) throw new Error(`editor exited with code ${code}`);
       const updated = readFileSync7(tmpPath, "utf8");
@@ -4901,7 +5028,7 @@ var editCmd2 = defineCommand19({
         return;
       }
       const body = { content: updated };
-      await client.put(`/api/profiles/${args.id}/files/${file}`, body);
+      await client.put(`/api/profiles/${args2.id}/files/${file}`, body);
       console.log(`saved ${file}`);
     } finally {
       try {
@@ -4926,14 +5053,14 @@ var updateCmd = defineCommand19({
     },
     skills: { type: "string", description: "Replacement default skills, comma-separated" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const body = {};
-    if (args.name !== void 0) body.name = args.name;
-    if (args.model !== void 0) body.defaultModel = args.model;
-    const mode = parseSkillsMode(args["skills-mode"]);
+    if (args2.name !== void 0) body.name = args2.name;
+    if (args2.model !== void 0) body.defaultModel = args2.model;
+    const mode = parseSkillsMode(args2["skills-mode"]);
     if (mode !== void 0) body.skillsMode = mode;
-    if (args.skills !== void 0) {
-      body.defaultSkills = args.skills.split(",").map((s) => s.trim()).filter(Boolean);
+    if (args2.skills !== void 0) {
+      body.defaultSkills = args2.skills.split(",").map((s) => s.trim()).filter(Boolean);
     }
     if (Object.keys(body).length === 0) {
       throw new Error(
@@ -4941,7 +5068,7 @@ var updateCmd = defineCommand19({
       );
     }
     const client = createClient2();
-    const profile = await client.patch(`/api/profiles/${args.id}`, body);
+    const profile = await client.patch(`/api/profiles/${args2.id}`, body);
     console.log(`updated profile ${profile.id}`);
   }
 });
@@ -4950,10 +5077,10 @@ var deleteCmd2 = defineCommand19({
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.del(`/api/profiles/${args.id}`);
-    console.log(`deleted profile ${args.id}`);
+    await client.del(`/api/profiles/${args2.id}`);
+    console.log(`deleted profile ${args2.id}`);
   }
 });
 var profileCommand = defineCommand19({
@@ -4978,10 +5105,10 @@ var listCmd7 = defineCommand20({
   args: {
     enabled: { type: "boolean", description: "Show only enabled providers" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const { providers } = await client.get("/api/config/providers");
-    const filtered = args.enabled ? providers.filter((p) => p.enabled) : providers;
+    const filtered = args2.enabled ? providers.filter((p) => p.enabled) : providers;
     if (filtered.length === 0) {
       console.log("(no providers to show)");
       return;
@@ -5004,12 +5131,12 @@ var modelsCmd = defineCommand20({
   args: {
     name: { type: "positional", required: true, description: "Provider name" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const { providers } = await client.get("/api/config/providers");
-    const p = providers.find((x) => x.id === args.name);
+    const p = providers.find((x) => x.id === args2.name);
     if (!p) {
-      console.error(`unknown provider: ${args.name}`);
+      console.error(`unknown provider: ${args2.name}`);
       process.exit(1);
     }
     console.log(`# ${p.id} (${p.enabled ? "enabled" : "disabled"})`);
@@ -5041,15 +5168,15 @@ var modelsSetCmd = defineCommand20({
       description: "Comma-separated model list (empty string clears the list)"
     }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const models = args.models.split(",").map((s) => s.trim()).filter(Boolean);
+    const models = args2.models.split(",").map((s) => s.trim()).filter(Boolean);
     const body = { models };
     const saved = await client.put(
-      `/api/config/providers/${encodeURIComponent(args.name)}/models`,
+      `/api/config/providers/${encodeURIComponent(args2.name)}/models`,
       body
     );
-    console.log(`saved ${saved.models.length} curated model(s) for ${args.name}`);
+    console.log(`saved ${saved.models.length} curated model(s) for ${args2.name}`);
     for (const m of saved.models) console.log(`  ${m}`);
   }
 });
@@ -5058,10 +5185,10 @@ var enableCmd2 = defineCommand20({
   args: {
     name: { type: "positional", required: true, description: "Provider id (e.g. anthropic)" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const res = await client.put(
-      `/api/config/providers/${encodeURIComponent(args.name)}/enabled`,
+      `/api/config/providers/${encodeURIComponent(args2.name)}/enabled`,
       { enabled: true }
     );
     console.log(`${res.name}: enabled`);
@@ -5075,10 +5202,10 @@ var disableCmd2 = defineCommand20({
   args: {
     name: { type: "positional", required: true, description: "Provider id" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const res = await client.put(
-      `/api/config/providers/${encodeURIComponent(args.name)}/enabled`,
+      `/api/config/providers/${encodeURIComponent(args2.name)}/enabled`,
       { enabled: false }
     );
     console.log(`${res.name}: disabled`);
@@ -5094,10 +5221,10 @@ var testCmd2 = defineCommand20({
     },
     message: { type: "string", description: 'Message text (default "say hi briefly")' }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const body = { model: args.model, message: args.message };
-    console.log(`-> ${args.model}: ${args.message ?? "say hi briefly"}`);
+    const body = { model: args2.model, message: args2.message };
+    console.log(`-> ${args2.model}: ${args2.message ?? "say hi briefly"}`);
     const res = await client.post("/api/providers/test", body);
     console.log(`<- ${res.content}`);
     if (res.usage) {
@@ -5130,12 +5257,12 @@ var list6 = defineCommand21({
     offset: { type: "string", default: "0" },
     json: { type: "boolean" }
   },
-  async run({ args }) {
-    const query = new URLSearchParams({ limit: args.limit, offset: args.offset });
-    if (args.team) query.set("teamId", args.team);
-    if (args.agent) query.set("agentId", args.agent);
+  async run({ args: args2 }) {
+    const query = new URLSearchParams({ limit: args2.limit, offset: args2.offset });
+    if (args2.team) query.set("teamId", args2.team);
+    if (args2.agent) query.set("agentId", args2.agent);
     const body = await createClient2().get(`/api/results?${query}`);
-    if (args.json) return console.log(JSON.stringify(body, null, 2));
+    if (args2.json) return console.log(JSON.stringify(body, null, 2));
     if (!body.results.length) return console.log("(no saved results)");
     for (const line of columnize([
       ["id", "filename", "bytes", "team", "agent", "created"],
@@ -5155,9 +5282,9 @@ var list6 = defineCommand21({
 var show4 = defineCommand21({
   meta: { name: "show", description: "Inspect a saved result and its provenance" },
   args: { id: idArg, json: { type: "boolean" } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const { result } = await createClient2().get(
-      `/api/results/${encodeURIComponent(args.id)}`
+      `/api/results/${encodeURIComponent(args2.id)}`
     );
     console.log(JSON.stringify(result, null, 2));
   }
@@ -5172,21 +5299,21 @@ var download = defineCommand21({
       description: "Destination path; existing files are never overwritten"
     }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const bytes = await createClient2().binary(
-      `/api/results/${encodeURIComponent(args.id)}/download`
+      `/api/results/${encodeURIComponent(args2.id)}/download`
     );
-    const fd = openSync3(args.output, "wx", 384);
+    const fd = openSync3(args2.output, "wx", 384);
     try {
       writeFileSync5(fd, bytes);
       fsyncSync3(fd);
     } catch (error) {
       closeSync3(fd);
-      unlinkSync(args.output);
+      unlinkSync(args2.output);
       throw error;
     }
     closeSync3(fd);
-    console.log(`Saved ${bytes.byteLength} bytes to ${args.output}`);
+    console.log(`Saved ${bytes.byteLength} bytes to ${args2.output}`);
   }
 });
 var rm = defineCommand21({
@@ -5195,9 +5322,9 @@ var rm = defineCommand21({
     description: "Delete saved bytes; retained history will report the result as deleted"
   },
   args: { id: idArg, yes: { type: "boolean" } },
-  async run({ args }) {
-    if (!args.yes) throw new Error("Pass --yes to permanently delete the saved file bytes");
-    await createClient2().del(`/api/results/${encodeURIComponent(args.id)}`);
+  async run({ args: args2 }) {
+    if (!args2.yes) throw new Error("Pass --yes to permanently delete the saved file bytes");
+    await createClient2().del(`/api/results/${encodeURIComponent(args2.id)}`);
     console.log("Saved file deleted; historical references retain a deletion receipt.");
   }
 });
@@ -5218,14 +5345,14 @@ var sendCommand = defineCommand22({
     to: { type: "positional", required: true, description: "Recipient agent id" },
     message: { type: "positional", required: true, description: "Message text" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const body = {
-      from: args.from,
-      payload: { text: args.message }
+      from: args2.from,
+      payload: { text: args2.message }
     };
     const result = await client.post(
-      `/api/agents/${args.to}/messages`,
+      `/api/agents/${args2.to}/messages`,
       body
     );
     if ("approvalId" in result) {
@@ -5258,17 +5385,17 @@ var serveCommand = defineCommand23({
       description: "Host (default 127.0.0.1). Put a TLS proxy in front before binding 0.0.0.0"
     }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     if (!existsSync5(daemonEntry2)) {
       throw new Error(
         `bazilion daemon not found at ${daemonEntry2}. Are you running from a development checkout?`
       );
     }
     const env = { ...process.env };
-    if (args.port) env.PORT = args.port;
-    if (args.host) env.HOST = args.host;
-    const host = args.host ?? "127.0.0.1";
-    const port = args.port ?? "4321";
+    if (args2.port) env.PORT = args2.port;
+    if (args2.host) env.HOST = args2.host;
+    const host = args2.host ?? "127.0.0.1";
+    const port = args2.port ?? "4321";
     if (host !== "127.0.0.1" && host !== "localhost" && host !== "::1") {
       console.error("");
       console.error(`\u26A0 binding to ${host} \u2014 the daemon is now reachable beyond loopback.`);
@@ -5295,17 +5422,17 @@ var serveCommand = defineCommand23({
       signalled = true;
     });
     process.on("SIGTERM", onSigterm);
-    await new Promise((resolve5, reject) => {
+    await new Promise((resolve6, reject) => {
       proc.on("error", (err) => reject(err));
       proc.on("close", (code) => {
         if (signalled) {
           process.exitCode = 0;
-          resolve5();
+          resolve6();
         } else if (code === 0 || code === null) {
-          resolve5();
+          resolve6();
         } else {
           process.exitCode = code;
-          resolve5();
+          resolve6();
         }
       });
     });
@@ -5339,9 +5466,9 @@ var listCmd8 = defineCommand24({
 var revokeCmd = defineCommand24({
   meta: { name: "revoke", description: "Revoke one browser session" },
   args: { id: { type: "positional", required: true } },
-  async run({ args }) {
-    await createClient2().del(`/api/sessions/${encodeURIComponent(args.id)}`);
-    console.log(`revoked browser session ${args.id}`);
+  async run({ args: args2 }) {
+    await createClient2().del(`/api/sessions/${encodeURIComponent(args2.id)}`);
+    console.log(`revoked browser session ${args2.id}`);
   }
 });
 var sessionCommand = defineCommand24({
@@ -5351,7 +5478,7 @@ var sessionCommand = defineCommand24({
 
 // src/commands/skill.ts
 import { existsSync as existsSync6, readFileSync as readFileSync8, statSync as statSync2 } from "fs";
-import { basename as basename5, resolve as resolve3 } from "path";
+import { basename as basename5, resolve as resolve4 } from "path";
 import { defineCommand as defineCommand25 } from "citty";
 function printFindings(findings, prefix = "  ") {
   for (const f of findings) {
@@ -5364,10 +5491,10 @@ var listCmd9 = defineCommand25({
   args: {
     agent: { type: "string", description: "Filter to skills attached to this agent" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    if (args.agent) {
-      const set = await client.get(`/api/agents/${args.agent}/skills`);
+    if (args2.agent) {
+      const set = await client.get(`/api/agents/${args2.agent}/skills`);
       if (set.resolved.length === 0 && set.missing.length === 0) {
         console.log("(no skills attached to this agent)");
         return;
@@ -5413,10 +5540,10 @@ var importCmd = defineCommand25({
     },
     force: { type: "boolean", description: "Overwrite existing skills" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const absFrom = resolve3(args.from);
-    const isLocalZip = args.from.toLowerCase().endsWith(".zip") && existsSync6(absFrom) && statSync2(absFrom).isFile();
+    const absFrom = resolve4(args2.from);
+    const isLocalZip = args2.from.toLowerCase().endsWith(".zip") && existsSync6(absFrom) && statSync2(absFrom).isFile();
     let result;
     try {
       if (isLocalZip) {
@@ -5424,12 +5551,12 @@ var importCmd = defineCommand25({
         const file = new File([bytes], basename5(absFrom), { type: "application/zip" });
         const fd = new FormData();
         fd.set("file", file);
-        if (args.force) fd.set("force", "true");
+        if (args2.force) fd.set("force", "true");
         result = await client.postMultipart("/api/skills/import", fd);
       } else {
         const body = {
-          source: args.from,
-          force: args.force
+          source: args2.from,
+          force: args2.force
         };
         result = await client.post("/api/skills/import", body);
       }
@@ -5474,10 +5601,10 @@ var rmCmd4 = defineCommand25({
   args: {
     name: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.del(`/api/skills/${encodeURIComponent(args.name)}`);
-    console.log(`removed skill ${args.name}`);
+    await client.del(`/api/skills/${encodeURIComponent(args2.name)}`);
+    console.log(`removed skill ${args2.name}`);
   }
 });
 var skillCommand = defineCommand25({
@@ -5490,13 +5617,107 @@ var skillCommand = defineCommand25({
 });
 
 // src/commands/team.ts
-import { readFileSync as readFileSync10 } from "fs";
+import { readFileSync as readFileSync11 } from "fs";
 import { stdin as stdin2 } from "process";
+import { defineCommand as defineCommand30 } from "citty";
+
+// src/commands/team-coding-log.ts
+import { defineCommand as defineCommand26 } from "citty";
+var teamCodingLogCommand = defineCommand26({
+  meta: {
+    name: "log",
+    description: "Read retained diagnostics for a shared coding command receipt"
+  },
+  args: {
+    team: { type: "positional", required: true, description: "Team slug" },
+    commandId: { type: "positional", required: true, description: "Coding command id" },
+    offset: { type: "string", description: "UTF-8 byte offset into the retained tail" },
+    limit: { type: "string", description: "Maximum bytes to read (default 64 KiB)" },
+    search: { type: "string", description: "Literal search instead of a page read" }
+  },
+  async run({ args: args2 }) {
+    const client = createClient2().codingLogs(args2.team);
+    if (args2.search !== void 0) {
+      const { view: view2, result } = await client.search(args2.commandId, args2.search);
+      if (!result) {
+        console.log(`Coding log withheld (${view2.availability}); not shared for disclosure.`);
+        return;
+      }
+      console.log(
+        `${view2.availability}${result.bounded ? " \xB7 bounded scan" : ""} \xB7 ${result.matches.length} match(es)`
+      );
+      for (const match of result.matches) {
+        console.log(`${match.line}:${match.offset}  ${match.excerpt.replace(/\n/g, "\\n")}`);
+      }
+      return;
+    }
+    const offset = args2.offset === void 0 ? void 0 : Number(args2.offset);
+    const limit = args2.limit === void 0 ? void 0 : Number(args2.limit);
+    if (offset !== void 0 && (!Number.isSafeInteger(offset) || offset < 0) || limit !== void 0 && !Number.isSafeInteger(limit)) {
+      console.error("offset and limit must be non-negative integers");
+      process.exitCode = 1;
+      return;
+    }
+    const { view, page } = await client.page(args2.commandId, {
+      ...offset !== void 0 ? { offset } : {},
+      ...limit !== void 0 ? { limit } : {}
+    });
+    if (!page) {
+      console.log(`Coding log withheld (${view.availability}); not shared for disclosure.`);
+      return;
+    }
+    console.log(
+      `${view.availability} \xB7 ${view.byteLength} retained byte(s) of ${view.observedBytes} observed` + (view.redacted ? " \xB7 redacted" : "") + ` \xB7 expires ${new Date(view.expiresAt).toISOString()}`
+    );
+    process.stdout.write(page.text);
+    if (page.hasMore)
+      console.log(
+        `
+\u2026 truncated; continue with --offset ${page.offset + Buffer.byteLength(page.text)}`
+      );
+  }
+});
+
+// src/commands/team-environment.ts
+import { readFileSync as readFileSync9 } from "fs";
 import { defineCommand as defineCommand27 } from "citty";
+var args = { id: { type: "positional", required: true, description: "Team slug" } };
+var teamEnvironmentCommand = defineCommand27({
+  meta: {
+    name: "environment",
+    description: "Optional Team runtime defaults; Agents discover and run commands during tasks"
+  },
+  subCommands: {
+    show: defineCommand27({
+      args,
+      async run({ args: args2 }) {
+        console.log(JSON.stringify(await createClient2().codingEnvironment.show(args2.id), null, 2));
+      }
+    }),
+    configure: defineCommand27({
+      args: {
+        ...args,
+        file: {
+          type: "string",
+          required: true,
+          description: "JSON {expectedRevision,config:{image,cwd,env}}"
+        }
+      },
+      async run({ args: args2 }) {
+        const input = JSON.parse(
+          readFileSync9(args2.file, "utf8")
+        );
+        console.log(
+          JSON.stringify(await createClient2().codingEnvironment.configure(args2.id, input), null, 2)
+        );
+      }
+    })
+  }
+});
 
 // src/commands/team-policy.ts
-import { readFileSync as readFileSync9 } from "fs";
-import { defineCommand as defineCommand26 } from "citty";
+import { readFileSync as readFileSync10 } from "fs";
+import { defineCommand as defineCommand28 } from "citty";
 
 // src/team-interchange.ts
 var TEAM_POLICY_INTERCHANGE_VERSION = 1;
@@ -5712,7 +5933,7 @@ function edgeDiff(before, after) {
 // src/commands/team-policy.ts
 function readJson(path) {
   try {
-    return JSON.parse(readFileSync9(path, "utf8"));
+    return JSON.parse(readFileSync10(path, "utf8"));
   } catch (error) {
     throw new Error(`invalid JSON: ${error.message}`);
   }
@@ -5744,30 +5965,30 @@ function printPolicy(detail) {
       console.log(line);
   }
 }
-var show5 = defineCommand26({
+var show5 = defineCommand28({
   meta: { name: "show", description: "Show the one effective live policy for a Team" },
   args: {
     team: { type: "positional", required: true },
     json: { type: "boolean", description: "Emit the canonical aggregate as JSON" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const detail = await createClient2().get(
-      `/api/teams/${encodeURIComponent(args.team)}/policy`
+      `/api/teams/${encodeURIComponent(args2.team)}/policy`
     );
-    if (args.json) console.log(JSON.stringify(detail, null, 2));
+    if (args2.json) console.log(JSON.stringify(detail, null, 2));
     else printPolicy(detail);
   }
 });
-var exportCommand = defineCommand26({
+var exportCommand = defineCommand28({
   meta: { name: "export", description: "Export a revisioned Team policy document" },
   args: { team: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const detail = await createClient2().get(
-      `/api/teams/${encodeURIComponent(args.team)}/policy`
+      `/api/teams/${encodeURIComponent(args2.team)}/policy`
     );
     console.log(
       JSON.stringify(
-        exportTeamPolicy(args.team, detail.teamPolicy.revision, detail.edges),
+        exportTeamPolicy(args2.team, detail.teamPolicy.revision, detail.edges),
         null,
         2
       )
@@ -5782,7 +6003,7 @@ function printEdgeDiff(current, edges) {
   for (const value of diff2.added) console.log(`  + ${value}`);
   for (const value of diff2.removed) console.log(`  - ${value}`);
 }
-var importCommand = defineCommand26({
+var importCommand = defineCommand28({
   meta: {
     name: "import",
     description: "Validate, diff, and explicitly replace a Team policy"
@@ -5805,22 +6026,22 @@ var importCommand = defineCommand26({
       description: "Second force confirmation: the freshly displayed current revision"
     }
   },
-  async run({ args }) {
-    if (args.force && !args.apply)
+  async run({ args: args2 }) {
+    if (args2.force && !args2.apply)
       throw new Error("--force requires --apply (interactive force is intentionally unsupported)");
-    const document = parseTeamPolicyDocument(readJson(args.file));
-    if (document.teamId !== args.team)
-      throw new Error(`document belongs to Team ${document.teamId}, not ${args.team}`);
+    const document = parseTeamPolicyDocument(readJson(args2.file));
+    if (document.teamId !== args2.team)
+      throw new Error(`document belongs to Team ${document.teamId}, not ${args2.team}`);
     const client = createClient2();
     const current = await client.get(
-      `/api/teams/${encodeURIComponent(args.team)}/policy`
+      `/api/teams/${encodeURIComponent(args2.team)}/policy`
     );
     printEdgeDiff(current, document.edges);
-    if (args["dry-run"]) return console.log("valid: no changes applied");
-    if (!args.apply) throw new Error("refusing mutation: review the diff, then pass --apply");
-    const supplied = args["expected-revision"] ? Number.parseInt(args["expected-revision"], 10) : document.expectedRevision;
-    const expectedRevision = args.force ? current.teamPolicy.revision : supplied;
-    if (args.force && Number.parseInt(args["confirm-current-revision"] ?? "", 10) !== current.teamPolicy.revision)
+    if (args2["dry-run"]) return console.log("valid: no changes applied");
+    if (!args2.apply) throw new Error("refusing mutation: review the diff, then pass --apply");
+    const supplied = args2["expected-revision"] ? Number.parseInt(args2["expected-revision"], 10) : document.expectedRevision;
+    const expectedRevision = args2.force ? current.teamPolicy.revision : supplied;
+    if (args2.force && Number.parseInt(args2["confirm-current-revision"] ?? "", 10) !== current.teamPolicy.revision)
       throw new Error(
         `--force requires --confirm-current-revision ${current.teamPolicy.revision} after reviewing the fresh diff`
       );
@@ -5831,24 +6052,24 @@ var importCommand = defineCommand26({
       edges: document.edges
     };
     const updated = await client.put(
-      `/api/teams/${encodeURIComponent(args.team)}/policy`,
+      `/api/teams/${encodeURIComponent(args2.team)}/policy`,
       body
     );
-    console.log(`updated Team ${args.team} policy to revision ${updated.teamPolicy.revision}`);
+    console.log(`updated Team ${args2.team} policy to revision ${updated.teamPolicy.revision}`);
   }
 });
-var diff = defineCommand26({
+var diff = defineCommand28({
   meta: { name: "diff", description: "Compare live policy with its retained baseline source" },
   args: {
     team: { type: "positional", required: true },
     json: { type: "boolean", description: "Emit canonical diff JSON" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const result = await createClient2().get(
-      `/api/teams/${encodeURIComponent(args.team)}/policy/diff`
+      `/api/teams/${encodeURIComponent(args2.team)}/policy/diff`
     );
-    if (args.json) return console.log(JSON.stringify(result, null, 2));
-    console.log(`# Team ${args.team} source diff`);
+    if (args2.json) return console.log(JSON.stringify(result, null, 2));
+    console.log(`# Team ${args2.team} source diff`);
     console.log(
       `status:   ${result.baseline ? result.sourceDiverged ? "source diverged" : "source current" : "no baseline"}`
     );
@@ -5861,7 +6082,7 @@ var diff = defineCommand26({
     );
   }
 });
-var evaluate = defineCommand26({
+var evaluate = defineCommand28({
   meta: {
     name: "evaluate",
     description: "Evaluate a communication path without sending or recording a block"
@@ -5873,18 +6094,18 @@ var evaluate = defineCommand26({
     origin: { type: "string", default: "cli-diagnostic" },
     json: { type: "boolean", description: "Emit decision JSON" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const result = await createClient2().post(
       "/api/communication/evaluate",
       {
-        source: endpoint2(args.source, args.team),
-        target: endpoint2(args.target, args.team),
-        origin: args.origin,
+        source: endpoint2(args2.source, args2.team),
+        target: endpoint2(args2.target, args2.team),
+        origin: args2.origin,
         attemptKind: "cli_evaluate",
-        attemptId: `diagnostic:${args.team}`
+        attemptId: `diagnostic:${args2.team}`
       }
     );
-    if (args.json) return console.log(JSON.stringify(result, null, 2));
+    if (args2.json) return console.log(JSON.stringify(result, null, 2));
     console.log(`${result.decision.toUpperCase()} ${result.channel}: ${result.reasonCode}`);
     console.log(result.reason);
     console.log(
@@ -5892,7 +6113,7 @@ var evaluate = defineCommand26({
     );
   }
 });
-var blocks = defineCommand26({
+var blocks = defineCommand28({
   meta: { name: "blocks", description: "List paginated durable communication denials" },
   args: {
     team: { type: "positional", required: true },
@@ -5907,23 +6128,23 @@ var blocks = defineCommand26({
     to: { type: "string", description: "Epoch milliseconds or ISO timestamp" },
     json: { type: "boolean", description: "Emit page JSON including nextCursor" }
   },
-  async run({ args }) {
-    const query = new URLSearchParams({ limit: args.limit });
+  async run({ args: args2 }) {
+    const query = new URLSearchParams({ limit: args2.limit });
     for (const [key, value] of [
-      ["cursor", args.cursor],
-      ["source", args.source],
-      ["target", args.target],
-      ["channel", args.channel],
-      ["origin", args.origin],
-      ["reasonCode", args.reason],
-      ["from", args.from],
-      ["to", args.to]
+      ["cursor", args2.cursor],
+      ["source", args2.source],
+      ["target", args2.target],
+      ["channel", args2.channel],
+      ["origin", args2.origin],
+      ["reasonCode", args2.reason],
+      ["from", args2.from],
+      ["to", args2.to]
     ])
       if (value) query.set(key, value);
     const page = await createClient2().get(
-      `/api/teams/${encodeURIComponent(args.team)}/policy/blocks?${query}`
+      `/api/teams/${encodeURIComponent(args2.team)}/policy/blocks?${query}`
     );
-    if (args.json) return console.log(JSON.stringify(page, null, 2));
+    if (args2.json) return console.log(JSON.stringify(page, null, 2));
     if (!page.blocks.length) console.log("(no blocks)");
     else
       for (const line of columnize([
@@ -5941,7 +6162,7 @@ var blocks = defineCommand26({
     if (page.nextCursor) console.log(`next cursor: ${page.nextCursor}`);
   }
 });
-var teamPolicyCommand = defineCommand26({
+var teamPolicyCommand = defineCommand28({
   meta: { name: "policy", description: "Inspect and manage the Team-owned live policy" },
   subCommands: {
     show: show5,
@@ -5953,8 +6174,187 @@ var teamPolicyCommand = defineCommand26({
   }
 });
 
+// src/commands/team-review.ts
+import { defineCommand as defineCommand29 } from "citty";
+var slug = {
+  id: { type: "positional", required: true, description: "Team slug" }
+};
+function printIssues(changes) {
+  for (const issue of changes.issues) console.log(`note: ${issue.code}: ${issue.message}`);
+}
+var showCmd5 = defineCommand29({
+  meta: {
+    name: "show",
+    description: "List changes since a baseline (read-only)"
+  },
+  args: {
+    ...slug,
+    base: {
+      type: "string",
+      description: "Comparison base: branch, tag or commit id (default HEAD)"
+    },
+    patch: {
+      type: "string",
+      description: "Print the unified diff for one changed path instead of the list"
+    },
+    json: { type: "boolean", description: "Emit the complete review as JSON" }
+  },
+  async run({ args: args2 }) {
+    const client = createClient2();
+    const review = await client.repositoryReview(args2.id).changes({
+      ...args2.base ? { base: args2.base } : {},
+      patches: true
+    });
+    if (args2.json) {
+      console.log(JSON.stringify(review, null, 2));
+      return;
+    }
+    const changes = review.changes;
+    if (args2.patch) {
+      const entry3 = changes.changes.find((change) => change.path === args2.patch);
+      if (!entry3) {
+        console.error(`no change for path: ${args2.patch}`);
+        process.exit(1);
+      }
+      if (!entry3.patch) {
+        console.log(
+          `${entry3.path}: ${entry3.status}${entry3.contentOmitted ? ` (${entry3.contentOmitted})` : " (no content)"}`
+        );
+        return;
+      }
+      console.log(entry3.patch);
+      if (entry3.patchTruncated) console.log("(diff truncated at the configured patch cap)");
+      return;
+    }
+    console.log(
+      `# ${changes.identity.branch ?? `detached ${changes.identity.head ?? "unborn"}`} \xB7 base ${changes.base.requestedRef} (${changes.base.resolvedOid.slice(0, 12)})`
+    );
+    if (changes.changes.length === 0) console.log("(no changes since baseline)");
+    const rows = changes.changes.map((change) => [
+      change.status,
+      change.previousPath ? `${change.previousPath} -> ${change.path}` : change.path,
+      change.binary ? "binary" : `${change.addedLines ?? 0}+ ${change.deletedLines ?? 0}-`,
+      change.contentOmitted ?? ""
+    ]);
+    for (const line of columnize(rows)) console.log(line);
+    if (changes.truncated) console.log("note: the change list is incomplete (file limit)");
+    const withheld = changes.withheld;
+    if (withheld.excluded + withheld.untracked > 0) {
+      console.log(
+        `note: ${withheld.excluded} excluded and ${withheld.untracked} untracked path(s) withheld`
+      );
+    }
+    printIssues(changes);
+  }
+});
+var captureCmd = defineCommand29({
+  meta: {
+    name: "capture",
+    description: "Capture a bounded source snapshot for a Team (read-only)"
+  },
+  args: {
+    ...slug,
+    base: { type: "string", description: "Comparison base (default HEAD)" },
+    include: {
+      type: "string",
+      // Read from raw arguments: citty keeps only the last value of a repeated flag.
+      description: "Untracked path to include by content (repeat the flag for more)"
+    },
+    json: { type: "boolean", description: "Emit the complete snapshot as JSON" }
+  },
+  async run({ args: args2, rawArgs }) {
+    const client = createClient2();
+    const includeUntracked = collectFlagValues(rawArgs, "include");
+    if (includeUntracked.length > 1e3) {
+      console.error("team review capture: too many paths to include");
+      process.exit(1);
+    }
+    const captured = await client.repositoryReview(args2.id).capture({
+      ...args2.base ? { base: args2.base } : {},
+      ...includeUntracked.length > 0 ? { includeUntracked } : {}
+    });
+    if (args2.json) {
+      console.log(JSON.stringify(captured, null, 2));
+      return;
+    }
+    const { snapshot, reference } = captured;
+    console.log(`snapshot ${reference.id}`);
+    console.log(`  complete: ${reference.complete ? "yes" : "no (applicability is unknown)"}`);
+    console.log(`  head: ${snapshot.head ?? "(unborn)"}`);
+    console.log(
+      `  entries: ${snapshot.entries.length} \xB7 included untracked: ${snapshot.untrackedIncluded.length}`
+    );
+    if (snapshot.exclusions.length > 0) {
+      console.log(`  excluded: ${snapshot.exclusions.map((item) => item.path).join(", ")}`);
+    }
+    for (const issue of snapshot.issues) console.log(`  note: ${issue.code}: ${issue.message}`);
+  }
+});
+var snapshotsCmd = defineCommand29({
+  meta: { name: "snapshots", description: "List retained source snapshots for a Team" },
+  args: { ...slug, json: { type: "boolean", description: "Emit JSON" } },
+  async run({ args: args2 }) {
+    const client = createClient2();
+    const list8 = await client.repositoryReview(args2.id).snapshots();
+    if (args2.json) {
+      console.log(JSON.stringify(list8, null, 2));
+      return;
+    }
+    if (list8.snapshots.length === 0) {
+      console.log("(no retained snapshots)");
+      return;
+    }
+    const rows = list8.snapshots.map((snapshot) => [
+      snapshot.snapshotId.slice(0, 12),
+      snapshot.complete ? "complete" : "incomplete",
+      snapshot.capturedBy,
+      new Date(snapshot.createdAt).toISOString(),
+      `${snapshot.entryCount} entries`
+    ]);
+    for (const line of columnize(rows)) console.log(line);
+  }
+});
+var snapshotCmd = defineCommand29({
+  meta: { name: "snapshot", description: "Show one retained source snapshot" },
+  args: {
+    ...slug,
+    snapshot: { type: "positional", required: true, description: "Snapshot id" },
+    json: { type: "boolean", description: "Emit JSON" }
+  },
+  async run({ args: args2 }) {
+    const client = createClient2();
+    const { snapshot } = await client.repositoryReview(args2.id).snapshot(args2.snapshot);
+    if (args2.json) {
+      console.log(JSON.stringify(snapshot, null, 2));
+      return;
+    }
+    console.log(`snapshot ${snapshot.id} \xB7 ${snapshot.complete ? "complete" : "incomplete"}`);
+    console.log(`  head: ${snapshot.head ?? "(unborn)"} \xB7 base: ${snapshot.base.resolvedOid}`);
+    const rows = snapshot.entries.map((entry3) => [
+      entry3.layer,
+      entry3.kind,
+      entry3.path,
+      entry3.bytes === null ? "-" : `${entry3.bytes}B`,
+      entry3.digest === null ? "" : entry3.digest.slice(0, 12)
+    ]);
+    for (const line of columnize(rows)) console.log(line);
+  }
+});
+var teamReviewCommand = defineCommand29({
+  meta: {
+    name: "review",
+    description: "Read-only Git change review and bounded source snapshots"
+  },
+  subCommands: {
+    show: showCmd5,
+    capture: captureCmd,
+    snapshots: snapshotsCmd,
+    snapshot: snapshotCmd
+  }
+});
+
 // src/commands/team.ts
-var addCmd2 = defineCommand27({
+var addCmd2 = defineCommand30({
   meta: {
     name: "add",
     description: "Register a team at ~/.bazilion/teams/<slug>/ (use --link to point at an existing tree)"
@@ -5967,18 +6367,18 @@ var addCmd2 = defineCommand27({
       description: "Absolute path of an existing directory; the team slot becomes a symlink to it"
     }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const body = {
-      id: args.id,
-      ...args.name ? { name: args.name } : {},
-      ...args.link ? { link: args.link } : {}
+      id: args2.id,
+      ...args2.name ? { name: args2.name } : {},
+      ...args2.link ? { link: args2.link } : {}
     };
     const g = await client.post("/api/teams", body);
     console.log(`registered team ${g.id} at ${g.path}`);
   }
 });
-var listCmd10 = defineCommand27({
+var listCmd10 = defineCommand30({
   meta: { name: "list", description: "List teams" },
   async run() {
     const client = createClient2();
@@ -5991,20 +6391,20 @@ var listCmd10 = defineCommand27({
     for (const line of columnize(rows)) console.log(line);
   }
 });
-var rmCmd5 = defineCommand27({
+var rmCmd5 = defineCommand30({
   meta: { name: "rm", description: "Remove a team registration" },
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const policy = await client.get(
-      `/api/teams/${encodeURIComponent(args.id)}/policy`
+      `/api/teams/${encodeURIComponent(args2.id)}/policy`
     );
     await client.del(
-      `/api/teams/${encodeURIComponent(args.id)}?expectedTeamPolicyRevision=${policy.teamPolicy.revision}`
+      `/api/teams/${encodeURIComponent(args2.id)}?expectedTeamPolicyRevision=${policy.teamPolicy.revision}`
     );
-    console.log(`removed team ${args.id}`);
+    console.log(`removed team ${args2.id}`);
   }
 });
 async function readStdin() {
@@ -6012,17 +6412,17 @@ async function readStdin() {
   for await (const chunk of stdin2) chunks.push(chunk);
   return Buffer.concat(chunks).toString("utf8");
 }
-var userMdShowCmd = defineCommand27({
+var userMdShowCmd = defineCommand30({
   meta: { name: "show", description: "Print the team's USER.md" },
   args: { id: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const g = await client.get(`/api/teams/${args.id}`);
+    const g = await client.get(`/api/teams/${args2.id}`);
     process.stdout.write(g.userMd);
     if (g.userMd && !g.userMd.endsWith("\n")) process.stdout.write("\n");
   }
 });
-var userMdSetCmd = defineCommand27({
+var userMdSetCmd = defineCommand30({
   meta: {
     name: "set",
     description: "Replace the team's USER.md (from --file, --from-stdin, or inline text)"
@@ -6033,32 +6433,32 @@ var userMdSetCmd = defineCommand27({
     "from-stdin": { type: "boolean", description: "Read content from stdin" },
     text: { type: "string", description: "Inline content" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     let content;
-    if (args["from-stdin"]) content = await readStdin();
-    else if (args.file) content = readFileSync10(args.file, "utf8");
-    else if (args.text !== void 0) content = args.text;
+    if (args2["from-stdin"]) content = await readStdin();
+    else if (args2.file) content = readFileSync11(args2.file, "utf8");
+    else if (args2.text !== void 0) content = args2.text;
     else {
       console.error("team user-md set: provide --file, --from-stdin, or --text");
       process.exit(2);
     }
     const client = createClient2();
     const body = { userMd: content };
-    await client.put(`/api/teams/${args.id}/user-md`, body);
-    console.log(`updated USER.md for team ${args.id} (${content.length} bytes)`);
+    await client.put(`/api/teams/${args2.id}/user-md`, body);
+    console.log(`updated USER.md for team ${args2.id} (${content.length} bytes)`);
   }
 });
-var userMdClearCmd = defineCommand27({
+var userMdClearCmd = defineCommand30({
   meta: { name: "clear", description: "Clear the team's USER.md to empty" },
   args: { id: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const body = { userMd: "" };
-    await client.put(`/api/teams/${args.id}/user-md`, body);
-    console.log(`cleared USER.md for team ${args.id}`);
+    await client.put(`/api/teams/${args2.id}/user-md`, body);
+    console.log(`cleared USER.md for team ${args2.id}`);
   }
 });
-var userMdCmd = defineCommand27({
+var userMdCmd = defineCommand30({
   meta: { name: "user-md", description: "View or edit a team's USER.md" },
   subCommands: {
     show: userMdShowCmd,
@@ -6066,16 +6466,16 @@ var userMdCmd = defineCommand27({
     clear: userMdClearCmd
   }
 });
-var topicFormatShowCmd = defineCommand27({
+var topicFormatShowCmd = defineCommand30({
   meta: { name: "show", description: "Print the team's Telegram topic-name template" },
   args: { id: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const g = await client.get(`/api/teams/${args.id}`);
+    const g = await client.get(`/api/teams/${args2.id}`);
     console.log(g.telegramTopicNameFormat ?? "(default naming)");
   }
 });
-var topicFormatSetCmd = defineCommand27({
+var topicFormatSetCmd = defineCommand30({
   meta: {
     name: "set",
     description: "Set the topic-name template. Tokens: {agent.name} {team.name} {team.slug} (must include {agent.name})"
@@ -6088,24 +6488,24 @@ var topicFormatSetCmd = defineCommand27({
       description: 'e.g. "{team.name} / {agent.name}"'
     }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const body = { format: args.format };
-    const g = await client.put(`/api/teams/${args.id}/topic-format`, body);
-    console.log(`set topic-name template for team ${args.id}: ${g.telegramTopicNameFormat}`);
+    const body = { format: args2.format };
+    const g = await client.put(`/api/teams/${args2.id}/topic-format`, body);
+    console.log(`set topic-name template for team ${args2.id}: ${g.telegramTopicNameFormat}`);
   }
 });
-var topicFormatClearCmd = defineCommand27({
+var topicFormatClearCmd = defineCommand30({
   meta: { name: "clear", description: "Clear the template (revert to built-in naming)" },
   args: { id: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const body = { format: null };
-    await client.put(`/api/teams/${args.id}/topic-format`, body);
-    console.log(`cleared topic-name template for team ${args.id}`);
+    await client.put(`/api/teams/${args2.id}/topic-format`, body);
+    console.log(`cleared topic-name template for team ${args2.id}`);
   }
 });
-var topicFormatCmd = defineCommand27({
+var topicFormatCmd = defineCommand30({
   meta: {
     name: "topic-format",
     description: "View or edit a team's Telegram forum-topic name template"
@@ -6116,9 +6516,60 @@ var topicFormatCmd = defineCommand27({
     clear: topicFormatClearCmd
   }
 });
-var teamCommand = defineCommand27({
+var contextCmd = defineCommand30({
+  meta: {
+    name: "context",
+    description: "Inspect repository instructions, Git state and command suggestions"
+  },
+  args: {
+    id: { type: "positional", required: true, description: "Team slug" },
+    target: { type: "string", description: "Contained relative file or directory" },
+    json: { type: "boolean", description: "Print the complete captured report as JSON" }
+  },
+  async run({ args: args2 }) {
+    const report = await createClient2().repositoryContext(args2.id, { target: args2.target });
+    if (args2.json) {
+      console.log(JSON.stringify(report, null, 2));
+      return;
+    }
+    const safe2 = (value) => [...value].map(
+      (char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127 ? JSON.stringify(char).slice(1, -1) : char
+    ).join("");
+    console.log(
+      `Team ${safe2(report.teamId)} \xB7 target ${safe2(report.target)} \xB7 captured ${new Date(report.capturedAt).toISOString()}`
+    );
+    console.log(`Repository instructions: ${report.instructions.state}`);
+    for (const file of report.instructions.files)
+      console.log(
+        `  ${safe2(file.path)} (scope ${safe2(file.scope)}, precedence ${file.precedence}, SHA-256 ${file.sha256})`
+      );
+    console.log(
+      `Git: ${report.git.state}${report.git.headState ? ` \xB7 ${report.git.headState} ${safe2(report.git.branch ?? report.git.head ?? "")}` : ""}`
+    );
+    if (report.git.state === "available")
+      console.log(
+        `  staged ${report.git.staged}, unstaged ${report.git.unstaged}, untracked ${report.git.untracked}, conflicted ${report.git.conflicted}`
+      );
+    console.log(`Command suggestions: ${report.commands.state} (not executed)`);
+    for (const candidate of report.commands.candidates)
+      console.log(
+        `  ${safe2(candidate.command)} \u2014 ${safe2(candidate.source)} ${safe2(candidate.location)}, cwd ${safe2(candidate.cwd)}`
+      );
+    for (const issue of [
+      ...report.instructions.issues,
+      ...report.commands.issues,
+      ...report.git.issues
+    ])
+      console.log(`  ${issue.code}${issue.path ? `: ${safe2(issue.path)}` : ""} \u2014 ${issue.message}`);
+  }
+});
+var teamCommand = defineCommand30({
   meta: { name: "team", description: "Manage teams (collaboration contexts)" },
   subCommands: {
+    environment: teamEnvironmentCommand,
+    log: teamCodingLogCommand,
+    review: teamReviewCommand,
+    context: contextCmd,
     add: addCmd2,
     list: listCmd10,
     rm: rmCmd5,
@@ -6129,11 +6580,11 @@ var teamCommand = defineCommand27({
 });
 
 // src/commands/team-template.ts
-import { readFileSync as readFileSync11 } from "fs";
-import { defineCommand as defineCommand28 } from "citty";
+import { readFileSync as readFileSync12 } from "fs";
+import { defineCommand as defineCommand31 } from "citty";
 function jsonFile(path) {
   try {
-    return JSON.parse(readFileSync11(path, "utf8"));
+    return JSON.parse(readFileSync12(path, "utf8"));
   } catch (error) {
     throw new Error(`invalid JSON: ${error.message}`);
   }
@@ -6158,12 +6609,12 @@ function printTeam(detail) {
       console.log(line);
   }
 }
-var list7 = defineCommand28({
+var list7 = defineCommand31({
   meta: { name: "list", description: "List canonical Team templates" },
   args: { json: { type: "boolean", description: "Emit stable JSON" } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const rows = await createClient2().get("/api/team-templates");
-    if (args.json) return console.log(JSON.stringify(rows, null, 2));
+    if (args2.json) return console.log(JSON.stringify(rows, null, 2));
     if (!rows.length) return console.log("(no Team templates)");
     for (const line of columnize([
       ["id", "revision", "slots", "name"],
@@ -6172,29 +6623,29 @@ var list7 = defineCommand28({
       console.log(line);
   }
 });
-var show6 = defineCommand28({
+var show6 = defineCommand31({
   meta: { name: "show", description: "Show a canonical Team template" },
   args: {
     id: { type: "positional", required: true },
     json: { type: "boolean", description: "Emit the canonical API aggregate" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const detail = await createClient2().get(
-      `/api/team-templates/${encodeURIComponent(args.id)}`
+      `/api/team-templates/${encodeURIComponent(args2.id)}`
     );
-    if (args.json) console.log(JSON.stringify(detail, null, 2));
+    if (args2.json) console.log(JSON.stringify(detail, null, 2));
     else printTeam(detail);
   }
 });
-var exportCommand2 = defineCommand28({
+var exportCommand2 = defineCommand31({
   meta: {
     name: "export",
     description: "Export a portable versioned Team-template document to stdout"
   },
   args: { id: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const detail = await createClient2().get(
-      `/api/team-templates/${encodeURIComponent(args.id)}`
+      `/api/team-templates/${encodeURIComponent(args2.id)}`
     );
     console.log(JSON.stringify(exportTeamDocument(detail), null, 2));
   }
@@ -6226,7 +6677,7 @@ function printImportDiff(current, document) {
   for (const value of diff2.added) console.log(`  + ${value}`);
   for (const value of diff2.removed) console.log(`  - ${value}`);
 }
-var importCommand2 = defineCommand28({
+var importCommand2 = defineCommand31({
   meta: {
     name: "import",
     description: "Validate, diff, and explicitly apply a portable Team-template document"
@@ -6248,10 +6699,10 @@ var importCommand2 = defineCommand28({
       description: "Second force confirmation: the freshly displayed current revision"
     }
   },
-  async run({ args }) {
-    if (args.force && !args.apply)
+  async run({ args: args2 }) {
+    if (args2.force && !args2.apply)
       throw new Error("--force requires --apply (interactive force is intentionally unsupported)");
-    const document = parseTeamDocument(jsonFile(args.file));
+    const document = parseTeamDocument(jsonFile(args2.file));
     const client = createClient2();
     let current = null;
     try {
@@ -6262,11 +6713,11 @@ var importCommand2 = defineCommand28({
       if (!(error instanceof ApiClientError) || error.status !== 404) throw error;
     }
     printImportDiff(current, document);
-    if (args["dry-run"]) {
+    if (args2["dry-run"]) {
       console.log("valid: no changes applied");
       return;
     }
-    if (!args.apply) throw new Error("refusing mutation: review the diff, then pass --apply");
+    if (!args2.apply) throw new Error("refusing mutation: review the diff, then pass --apply");
     if (!current) {
       const body2 = teamImportBody(document);
       const created = await client.post("/api/team-templates/import", {
@@ -6288,9 +6739,9 @@ var importCommand2 = defineCommand28({
       throw new Error(
         "replacement document metadata differs; update Team name/USER.md separately before import"
       );
-    const supplied = Number.parseInt(args["expected-revision"] ?? "", 10);
-    const expectedRevision = args.force ? current.template.currentRevision : supplied;
-    if (args.force && Number.parseInt(args["confirm-current-revision"] ?? "", 10) !== current.template.currentRevision)
+    const supplied = Number.parseInt(args2["expected-revision"] ?? "", 10);
+    const expectedRevision = args2.force ? current.template.currentRevision : supplied;
+    if (args2.force && Number.parseInt(args2["confirm-current-revision"] ?? "", 10) !== current.template.currentRevision)
       throw new Error(
         `--force requires --confirm-current-revision ${current.template.currentRevision} after reviewing the fresh diff`
       );
@@ -6307,7 +6758,7 @@ var importCommand2 = defineCommand28({
     );
   }
 });
-var teamTemplateCommand = defineCommand28({
+var teamTemplateCommand = defineCommand31({
   meta: {
     name: "team-template",
     description: "Inspect and exchange canonical Team templates"
@@ -6316,8 +6767,8 @@ var teamTemplateCommand = defineCommand28({
 });
 
 // src/commands/telegram.ts
-import { defineCommand as defineCommand29 } from "citty";
-var setCmd2 = defineCommand29({
+import { defineCommand as defineCommand32 } from "citty";
+var setCmd2 = defineCommand32({
   meta: {
     name: "set",
     description: "Save bot token + supergroup chat ID (paired write)"
@@ -6326,16 +6777,16 @@ var setCmd2 = defineCommand29({
     token: { type: "string", required: true, description: "Bot token from @BotFather" },
     chat: { type: "string", required: true, description: "Numeric supergroup chat ID" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const state = await client.put("/api/config/telegram", {
-      botToken: args.token,
-      chatId: args.chat
+      botToken: args2.token,
+      chatId: args2.chat
     });
     console.log(`saved \xB7 token ${state.botTokenPreview} \xB7 chat ${state.chatId}`);
   }
 });
-var clearCmd = defineCommand29({
+var clearCmd = defineCommand32({
   meta: {
     name: "clear",
     description: "Remove stored bot token + chat ID"
@@ -6346,7 +6797,7 @@ var clearCmd = defineCommand29({
     console.log("cleared");
   }
 });
-var showCmd5 = defineCommand29({
+var showCmd6 = defineCommand32({
   meta: {
     name: "show",
     description: "Show what credentials are stored (token is masked)"
@@ -6367,7 +6818,7 @@ var showCmd5 = defineCommand29({
     }
   }
 });
-var reconnectCmd = defineCommand29({
+var reconnectCmd = defineCommand32({
   meta: {
     name: "reconnect",
     description: "Apply a pending supergroup chat-id migration + re-activate the bot"
@@ -6378,7 +6829,7 @@ var reconnectCmd = defineCommand29({
     console.log(`reconnected \xB7 chat ${state.chatId}`);
   }
 });
-var configCmd = defineCommand29({
+var configCmd = defineCommand32({
   meta: {
     name: "config",
     description: "Manage Telegram credentials (bot token + chat ID)"
@@ -6386,10 +6837,10 @@ var configCmd = defineCommand29({
   subCommands: {
     set: setCmd2,
     clear: clearCmd,
-    show: showCmd5
+    show: showCmd6
   }
 });
-var healthCmd = defineCommand29({
+var healthCmd = defineCommand32({
   meta: {
     name: "health",
     description: "Run the four-step preflight against the Telegram Bot API"
@@ -6428,7 +6879,7 @@ var healthCmd = defineCommand29({
     if (!allOk) process.exitCode = 1;
   }
 });
-var botStatusCmd = defineCommand29({
+var botStatusCmd = defineCommand32({
   meta: {
     name: "status",
     description: "Show polling state of the live bot"
@@ -6453,7 +6904,7 @@ var botStatusCmd = defineCommand29({
     if (!p.running) process.exitCode = 1;
   }
 });
-var botRestartCmd = defineCommand29({
+var botRestartCmd = defineCommand32({
   meta: {
     name: "restart",
     description: "Force-restart the bot (tears down + brings up from current creds)"
@@ -6464,7 +6915,7 @@ var botRestartCmd = defineCommand29({
     console.log("restart requested");
   }
 });
-var botCmd = defineCommand29({
+var botCmd = defineCommand32({
   meta: {
     name: "bot",
     description: "Inspect / control the live polling bot"
@@ -6474,7 +6925,7 @@ var botCmd = defineCommand29({
     restart: botRestartCmd
   }
 });
-var bindCmd = defineCommand29({
+var bindCmd = defineCommand32({
   meta: {
     name: "bind",
     description: "Create a Telegram topic for an agent (manual fallback for /talk)"
@@ -6482,17 +6933,17 @@ var bindCmd = defineCommand29({
   args: {
     agent: { type: "positional", required: true, description: "Agent id or prefix" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const result = await client.post(
-      `/api/agents/${args.agent}/telegram/bind`
+      `/api/agents/${args2.agent}/telegram/bind`
     );
     const verb = result.created ? "created topic" : "already bound to";
     console.log(`${verb} #${result.topicId} for agent ${result.agent.name} (${result.agent.id})`);
     console.log(`  ${result.deepLink}`);
   }
 });
-var unbindCmd = defineCommand29({
+var unbindCmd = defineCommand32({
   meta: {
     name: "unbind",
     description: "Clear an agent's Telegram topic binding (topic stays in Telegram as orphan)"
@@ -6500,13 +6951,13 @@ var unbindCmd = defineCommand29({
   args: {
     agent: { type: "positional", required: true, description: "Agent id or prefix" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.del(`/api/agents/${args.agent}/telegram/binding`);
-    console.log(`unbound agent ${args.agent}`);
+    await client.del(`/api/agents/${args2.agent}/telegram/binding`);
+    console.log(`unbound agent ${args2.agent}`);
   }
 });
-var listBindingsCmd = defineCommand29({
+var listBindingsCmd = defineCommand32({
   meta: {
     name: "list",
     description: "List agents and their Telegram topic bindings"
@@ -6534,32 +6985,32 @@ var listBindingsCmd = defineCommand29({
     }
   }
 });
-var allowCmd = defineCommand29({
+var allowCmd = defineCommand32({
   meta: { name: "allow", description: "Add a Telegram user id to the allowlist" },
   args: {
     userId: { type: "positional", required: true, description: "Numeric Telegram user id" },
     label: { type: "string", description: "Optional human label" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const u = await client.post("/api/config/telegram/acl", {
-      userId: Number(args.userId),
-      label: args.label ?? null,
+      userId: Number(args2.userId),
+      label: args2.label ?? null,
       role: "member"
     });
     console.log(`allowed ${u.userId} (${u.role})`);
   }
 });
-var denyCmd = defineCommand29({
+var denyCmd = defineCommand32({
   meta: { name: "deny", description: "Remove a Telegram user id from the allowlist" },
   args: { userId: { type: "positional", required: true } },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.del(`/api/config/telegram/acl/${Number(args.userId)}`);
-    console.log(`removed ${args.userId}`);
+    await client.del(`/api/config/telegram/acl/${Number(args2.userId)}`);
+    console.log(`removed ${args2.userId}`);
   }
 });
-var allowedCmd = defineCommand29({
+var allowedCmd = defineCommand32({
   meta: { name: "allowed", description: "List allowlisted Telegram users" },
   async run() {
     const client = createClient2();
@@ -6574,7 +7025,7 @@ var allowedCmd = defineCommand29({
     }
   }
 });
-var pairingCreateCmd = defineCommand29({
+var pairingCreateCmd = defineCommand32({
   meta: { name: "create", description: "Generate a one-time Telegram owner pairing code" },
   async run() {
     const result = await createClient2().post(
@@ -6585,7 +7036,7 @@ var pairingCreateCmd = defineCommand29({
     console.log("send `/pair <code>` in the configured \u2699 bazilion service topic");
   }
 });
-var pairingStatusCmd = defineCommand29({
+var pairingStatusCmd = defineCommand32({
   meta: { name: "status", description: "Show Telegram owner pairing status" },
   async run() {
     const result = await createClient2().get("/api/config/telegram/pairing");
@@ -6596,25 +7047,25 @@ var pairingStatusCmd = defineCommand29({
       console.log(`expires: ${new Date(result.challengeExpiresAt).toISOString()}`);
   }
 });
-var pairingCancelCmd = defineCommand29({
+var pairingCancelCmd = defineCommand32({
   meta: { name: "cancel", description: "Cancel the active Telegram pairing code" },
   async run() {
     await createClient2().del("/api/config/telegram/pairing/challenge");
     console.log("pairing challenge cancelled");
   }
 });
-var pairingResetCmd = defineCommand29({
+var pairingResetCmd = defineCommand32({
   meta: { name: "reset", description: "Revoke the Telegram owner and require re-pairing" },
   args: {
     yes: { type: "boolean", description: "Confirm destructive owner reset", required: true }
   },
-  async run({ args }) {
-    if (!args.yes) throw new Error("--yes is required");
+  async run({ args: args2 }) {
+    if (!args2.yes) throw new Error("--yes is required");
     await createClient2().post("/api/config/telegram/pairing/reset", { confirm: true });
     console.log("Telegram owner reset; ingress is closed until re-paired");
   }
 });
-var pairingCmd = defineCommand29({
+var pairingCmd = defineCommand32({
   meta: { name: "pairing", description: "Manage single-owner Telegram pairing" },
   subCommands: {
     create: pairingCreateCmd,
@@ -6623,7 +7074,7 @@ var pairingCmd = defineCommand29({
     reset: pairingResetCmd
   }
 });
-var telegramCommand = defineCommand29({
+var telegramCommand = defineCommand32({
   meta: {
     name: "telegram",
     description: "Telegram integration: credentials, health, bot lifecycle, bindings, access"
@@ -6644,7 +7095,7 @@ var telegramCommand = defineCommand29({
 });
 
 // src/commands/token.ts
-import { defineCommand as defineCommand30 } from "citty";
+import { defineCommand as defineCommand33 } from "citty";
 import qrcode from "qrcode-terminal";
 function tokenRow(t) {
   const last = t.lastUsedAt ? new Date(t.lastUsedAt).toISOString() : "(never)";
@@ -6673,7 +7124,7 @@ function resolveQrServer(override) {
   }
   return url.origin;
 }
-var createCmd3 = defineCommand30({
+var createCmd3 = defineCommand33({
   meta: { name: "create", description: "Mint a new web token (shown once)" },
   args: {
     label: { type: "positional", required: true, description: "Human-readable label" },
@@ -6690,13 +7141,13 @@ var createCmd3 = defineCommand30({
       description: "Device lifetime in days (default 90, maximum 365)"
     }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const expiresInDays = args.expiresDays === void 0 ? void 0 : Number(args.expiresDays);
+    const expiresInDays = args2.expiresDays === void 0 ? void 0 : Number(args2.expiresDays);
     if (expiresInDays !== void 0 && !Number.isInteger(expiresInDays)) {
       throw new Error("--expires-days must be an integer");
     }
-    const body = { label: args.label, expiresInDays };
+    const body = { label: args2.label, expiresInDays };
     const res = await client.post("/api/tokens", body);
     console.log(`id:    ${res.meta.id}`);
     console.log(`label: ${res.meta.label}`);
@@ -6707,8 +7158,8 @@ var createCmd3 = defineCommand30({
     console.log(`token: ${res.token}`);
     console.log("");
     console.log("store the token now \u2014 it is not recoverable later.");
-    if (!args.qr) return;
-    const serverUrl = resolveQrServer(args.server);
+    if (!args2.qr) return;
+    const serverUrl = resolveQrServer(args2.server);
     const pairUrl = `bazilion://pair?server=${encodeURIComponent(serverUrl)}&token=${encodeURIComponent(res.token)}`;
     console.log("");
     console.log(`pairing URL: ${pairUrl}`);
@@ -6716,14 +7167,14 @@ var createCmd3 = defineCommand30({
     qrcode.generate(pairUrl, { small: true }, (qr) => console.log(qr));
   }
 });
-var listCmd11 = defineCommand30({
+var listCmd11 = defineCommand33({
   meta: { name: "list", description: "List web tokens" },
   args: {
     all: { type: "boolean", description: "Include revoked tokens" }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    const qs = args.all ? "?includeRevoked=1" : "";
+    const qs = args2.all ? "?includeRevoked=1" : "";
     const { tokens } = await client.get(`/api/tokens${qs}`);
     if (tokens.length === 0) {
       console.log("(no tokens)");
@@ -6732,7 +7183,7 @@ var listCmd11 = defineCommand30({
     for (const line of columnize(tokens.map(tokenRow))) console.log(line);
   }
 });
-var showLocalCmd = defineCommand30({
+var showLocalCmd = defineCommand33({
   meta: {
     name: "show-local",
     description: "Print the bootstrap web token stored in ~/.bazilion/auth.json"
@@ -6742,18 +7193,18 @@ var showLocalCmd = defineCommand30({
     console.log(readAuthFile(paths.authFile).token);
   }
 });
-var revokeCmd2 = defineCommand30({
+var revokeCmd2 = defineCommand33({
   meta: { name: "revoke", description: "Revoke a web token" },
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.del(`/api/tokens/${args.id}`);
-    console.log(`revoked token ${args.id}`);
+    await client.del(`/api/tokens/${args2.id}`);
+    console.log(`revoked token ${args2.id}`);
   }
 });
-var tokenCommand = defineCommand30({
+var tokenCommand = defineCommand33({
   meta: { name: "token", description: "Manage web tokens for API/CLI clients" },
   subCommands: {
     create: createCmd3,
@@ -6764,8 +7215,8 @@ var tokenCommand = defineCommand30({
 });
 
 // src/commands/trigger.ts
-import { defineCommand as defineCommand31 } from "citty";
-var addCmd3 = defineCommand31({
+import { defineCommand as defineCommand34 } from "citty";
+var addCmd3 = defineCommand34({
   meta: { name: "add", description: "Add an interval / cron trigger to an agent" },
   args: {
     agent: { type: "positional", required: true },
@@ -6784,23 +7235,23 @@ var addCmd3 = defineCommand31({
     },
     disabled: { type: "boolean", description: "Create in disabled state" }
   },
-  async run({ args }) {
-    if (!args.every === !args.cron) {
+  async run({ args: args2 }) {
+    if (!args2.every === !args2.cron) {
       throw new Error('specify exactly one of --every <seconds> or --cron "<expr>"');
     }
     const client = createClient2();
-    const body = args.every ? {
+    const body = args2.every ? {
       kind: "interval",
-      intervalSec: Number(args.every),
-      message: args.message,
-      enabled: !args.disabled
+      intervalSec: Number(args2.every),
+      message: args2.message,
+      enabled: !args2.disabled
     } : {
       kind: "cron",
-      cronExpr: args.cron,
-      message: args.message,
-      enabled: !args.disabled
+      cronExpr: args2.cron,
+      message: args2.message,
+      enabled: !args2.disabled
     };
-    const res = await client.post(`/api/agents/${args.agent}/triggers`, body);
+    const res = await client.post(`/api/agents/${args2.agent}/triggers`, body);
     const t = res.trigger;
     const spec = t.kind === "interval" ? `every ${t.intervalSec}s` : `cron "${t.cronExpr}"`;
     console.log(`${t.id}	${spec}	${t.enabled ? "enabled" : "disabled"}`);
@@ -6813,15 +7264,15 @@ function triggerRow(t) {
   const msgPreview = t.message.length > 60 ? `${t.message.slice(0, 60)}\u2026` : t.message;
   return [t.id, state, spec, `last: ${last}`, `"${msgPreview}"`];
 }
-var listCmd12 = defineCommand31({
+var listCmd12 = defineCommand34({
   meta: { name: "list", description: "List triggers for an agent" },
   args: {
     agent: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const { triggers } = await client.get(
-      `/api/agents/${args.agent}/triggers`
+      `/api/agents/${args2.agent}/triggers`
     );
     if (triggers.length === 0) {
       console.log("(no triggers)");
@@ -6830,55 +7281,55 @@ var listCmd12 = defineCommand31({
     for (const line of columnize(triggers.map(triggerRow))) console.log(line);
   }
 });
-var rmCmd6 = defineCommand31({
+var rmCmd6 = defineCommand34({
   meta: { name: "rm", description: "Delete a trigger" },
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
-    await client.del(`/api/triggers/${args.id}`);
-    console.log(`removed trigger ${args.id}`);
+    await client.del(`/api/triggers/${args2.id}`);
+    console.log(`removed trigger ${args2.id}`);
   }
 });
-var enableCmd3 = defineCommand31({
+var enableCmd3 = defineCommand34({
   meta: { name: "enable", description: "Enable a trigger" },
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const body = { enabled: true };
-    await client.patch(`/api/triggers/${args.id}`, body);
-    console.log(`enabled trigger ${args.id}`);
+    await client.patch(`/api/triggers/${args2.id}`, body);
+    console.log(`enabled trigger ${args2.id}`);
   }
 });
-var disableCmd3 = defineCommand31({
+var disableCmd3 = defineCommand34({
   meta: { name: "disable", description: "Disable a trigger" },
   args: {
     id: { type: "positional", required: true }
   },
-  async run({ args }) {
+  async run({ args: args2 }) {
     const client = createClient2();
     const body = { enabled: false };
-    await client.patch(`/api/triggers/${args.id}`, body);
-    console.log(`disabled trigger ${args.id}`);
+    await client.patch(`/api/triggers/${args2.id}`, body);
+    console.log(`disabled trigger ${args2.id}`);
   }
 });
-var historyCmd = defineCommand31({
+var historyCmd = defineCommand34({
   meta: { name: "history", description: "Show recent dispatches for a trigger" },
   args: {
     id: { type: "positional", required: true },
     limit: { type: "string", description: "Maximum rows (default 20)" }
   },
-  async run({ args }) {
-    const limit = args.limit ? Number(args.limit) : 20;
+  async run({ args: args2 }) {
+    const limit = args2.limit ? Number(args2.limit) : 20;
     if (!Number.isInteger(limit) || limit < 1 || limit > 100) {
       throw new Error("--limit must be an integer from 1 to 100");
     }
     const client = createClient2();
     const { dispatches } = await client.get(
-      `/api/triggers/${args.id}/dispatches?limit=${limit}`
+      `/api/triggers/${args2.id}/dispatches?limit=${limit}`
     );
     if (dispatches.length === 0) {
       console.log("(no dispatches)");
@@ -6893,7 +7344,7 @@ var historyCmd = defineCommand31({
     for (const line of columnize(rows)) console.log(line);
   }
 });
-var triggerCommand = defineCommand31({
+var triggerCommand = defineCommand34({
   meta: { name: "trigger", description: "Manage scheduled agent triggers" },
   subCommands: {
     add: addCmd3,
@@ -6906,10 +7357,10 @@ var triggerCommand = defineCommand31({
 });
 
 // src/commands/uninstall.ts
-import { existsSync as existsSync7, lstatSync as lstatSync3, readdirSync as readdirSync2, realpathSync as realpathSync2, rmSync as rmSync4 } from "fs";
+import { existsSync as existsSync7, lstatSync as lstatSync4, readdirSync as readdirSync2, realpathSync as realpathSync2, rmSync as rmSync4 } from "fs";
 import { homedir as homedir2 } from "os";
-import { isAbsolute as isAbsolute2, join as join6, parse as parse2, relative as relative2, resolve as resolve4, sep } from "path";
-import { defineCommand as defineCommand32 } from "citty";
+import { isAbsolute as isAbsolute2, join as join6, parse as parse2, relative as relative2, resolve as resolve5, sep } from "path";
+import { defineCommand as defineCommand35 } from "citty";
 function makeLineReader() {
   let buffer = "";
   let ended = false;
@@ -6919,8 +7370,8 @@ function makeLineReader() {
       const nlIdx = buffer.indexOf("\n");
       if (nlIdx === -1) {
         if (ended) {
-          const resolve5 = queue.shift();
-          resolve5?.(buffer);
+          const resolve6 = queue.shift();
+          resolve6?.(buffer);
           buffer = "";
         } else {
           return;
@@ -6928,8 +7379,8 @@ function makeLineReader() {
       } else {
         const line = buffer.slice(0, nlIdx);
         buffer = buffer.slice(nlIdx + 1);
-        const resolve5 = queue.shift();
-        resolve5?.(line);
+        const resolve6 = queue.shift();
+        resolve6?.(line);
       }
     }
   };
@@ -6942,8 +7393,8 @@ function makeLineReader() {
     ended = true;
     tryDeliver();
   });
-  return () => new Promise((resolve5) => {
-    queue.push(resolve5);
+  return () => new Promise((resolve6) => {
+    queue.push(resolve6);
     tryDeliver();
   });
 }
@@ -6954,7 +7405,7 @@ async function askYes(readLine, prompt) {
 }
 function removePath(p) {
   try {
-    lstatSync3(p);
+    lstatSync4(p);
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") return false;
     throw error;
@@ -6967,7 +7418,7 @@ function canonicalExistingPath(path) {
     return realpathSync2.native(path);
   } catch (error) {
     if (!(error instanceof Error && "code" in error && error.code === "ENOENT")) throw error;
-    return resolve4(path);
+    return resolve5(path);
   }
 }
 function containsPath(container, candidate) {
@@ -6975,7 +7426,7 @@ function containsPath(container, candidate) {
   return nested === "" || nested !== ".." && !nested.startsWith(`..${sep}`) && !isAbsolute2(nested);
 }
 function assertSafeUninstallHome(home) {
-  const target = resolve4(home);
+  const target = resolve5(home);
   const canonical = canonicalExistingPath(target);
   const userHome = canonicalExistingPath(homedir2());
   const workingDirectory = canonicalExistingPath(process.cwd());
@@ -6996,7 +7447,7 @@ function assertSafeUninstallHome(home) {
   }
   return target;
 }
-var uninstallCommand = defineCommand32({
+var uninstallCommand = defineCommand35({
   meta: {
     name: "uninstall",
     description: "Wipe bazilion state from ~/.bazilion (or BAZILION_HOME)"
@@ -7012,8 +7463,8 @@ var uninstallCommand = defineCommand32({
       description: "Also remove logs and skills (full wipe)"
     }
   },
-  async run({ args }) {
-    const paths = resolveCliPaths(args.home);
+  async run({ args: args2 }) {
+    const paths = resolveCliPaths(args2.home);
     const targetHome = assertSafeUninstallHome(paths.home);
     const dbFile = join6(targetHome, "bazilion.db");
     const profilesDir = join6(targetHome, "profiles");
@@ -7034,7 +7485,7 @@ var uninstallCommand = defineCommand32({
       }
       return;
     }
-    const homeIsSymlink = lstatSync3(targetHome).isSymbolicLink();
+    const homeIsSymlink = lstatSync4(targetHome).isSymbolicLink();
     console.log(`about to uninstall bazilion at ${targetHome}`);
     console.log("");
     const resetTargets = [
@@ -7050,9 +7501,9 @@ var uninstallCommand = defineCommand32({
       teamsDir,
       legacyGroupsDir
     ];
-    const needsPrompt = !args.yes;
+    const needsPrompt = !args2.yes;
     const readLine = needsPrompt ? makeLineReader() : null;
-    const wipeData = args.yes || await askYes(
+    const wipeData = args2.yes || await askYes(
       readLine,
       "remove DB + auth/config + agent / profile / team data?"
     );
@@ -7061,7 +7512,7 @@ var uninstallCommand = defineCommand32({
       process.stdin.pause();
       return;
     }
-    const wipeAll = args.all || (args.yes ? false : await askYes(
+    const wipeAll = args2.all || (args2.yes ? false : await askYes(
       readLine,
       `also remove logs and skills? (full wipe of ${targetHome})`
     ));
@@ -7100,7 +7551,7 @@ var uninstallCommand = defineCommand32({
 
 // src/index.ts
 var VERSION = package_default.version;
-var main = defineCommand33({
+var main = defineCommand36({
   meta: {
     name: "bazilion",
     version: VERSION,