bazilion 0.17.0 → 0.18.0

package/dist/cli.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { defineCommand as defineCommand36, runCommand, showUsage } from "citty";
+import { defineCommand as defineCommand37, runCommand, showUsage } from "citty";
 
 // package.json
 var package_default = {
   name: "bazilion",
-  version: "0.17.0",
+  version: "0.18.0",
   description: "Multi-agent runtime CLI \u2014 spawn LLM agents, manage profiles/teams/skills, and run the local daemon.",
   license: "MIT",
   repository: {
@@ -188,6 +188,21 @@ function createClient(cfg) {
         input
       )
     },
+    /**
+     * Specialist verification of a captured code change (BAZ-044).
+     *
+     * Creating a request does not execute anything: the verification state machine claims and runs
+     * it, and a blocked capture comes back as a typed blocker rather than an error.
+     */
+    verifications: (teamId) => {
+      const base = `/api/teams/${encodeURIComponent(teamId)}/verifications`;
+      return {
+        list: () => request("GET", base),
+        show: (requestId) => request("GET", `${base}/${encodeURIComponent(requestId)}`),
+        create: (input) => request("POST", base, input),
+        cancel: (requestId) => request("POST", `${base}/${encodeURIComponent(requestId)}/cancel`)
+      };
+    },
     /** Read-only Git change review and bounded source snapshots (BAZ-042). */
     repositoryReview: (teamId) => {
       const base = `/api/teams/${encodeURIComponent(teamId)}/review`;
@@ -2290,6 +2305,42 @@ function invalidateRestoredCodingEvidence(db, payload, targetHome) {
      WHERE state = 'retained' AND expires_at <= ?`
   ).run(restoredAt, restoredAt);
   db.prepare("DELETE FROM source_snapshots WHERE expires_at <= ?").run(restoredAt);
+  db.prepare("DELETE FROM verification_requests WHERE expires_at <= ?").run(restoredAt);
+  db.prepare(
+    `UPDATE verification_requests SET state = 'blocked'
+     WHERE state IN ('pending', 'awaiting_approval')
+       AND NOT EXISTS (SELECT 1 FROM source_snapshots snapshot
+                       WHERE snapshot.snapshot_id = verification_requests.snapshot_id
+                         AND snapshot.team_id = verification_requests.team_id
+                         AND snapshot.expires_at > ?)`
+  ).run(restoredAt);
+  db.prepare(
+    `UPDATE verification_attempts
+     SET state = 'uncertain', finished_at = ?, lease_owner = NULL, lease_expires_at = NULL,
+         error = 'execution was interrupted by a backup restore'
+     WHERE finished_at IS NULL`
+  ).run(restoredAt);
+  const invalidated = db.prepare(
+    `SELECT DISTINCT attempt.request_id AS request_id
+       FROM verification_check_outcomes outcome
+       JOIN verification_attempts attempt ON attempt.id = outcome.attempt_id
+       WHERE outcome.state IN ('succeeded', 'failed', 'timed_out', 'cancelled')`
+  ).all();
+  db.prepare(
+    `UPDATE verification_check_outcomes
+     SET state = 'unknown', command_id = NULL, exit_code = NULL, finished_at = ?
+     WHERE state IN ('succeeded', 'failed', 'timed_out', 'cancelled', 'not_executed')`
+  ).run(restoredAt);
+  const reopen = db.prepare(`UPDATE verification_requests SET state = 'uncertain' WHERE id = ?`);
+  const invalidateAttempt = db.prepare(
+    `UPDATE verification_attempts
+     SET state = 'uncertain', error = 'evidence was invalidated by a backup restore'
+     WHERE request_id = ? AND state IN ('completed', 'failed')`
+  );
+  for (const row2 of invalidated) {
+    invalidateAttempt.run(row2.request_id);
+    reopen.run(row2.request_id);
+  }
   db.prepare("UPDATE workspace_writers SET state = 'recovery', recovery_mode = 'restored'").run();
   const teams = db.prepare("SELECT id FROM teams").all();
   const rebase = db.prepare("UPDATE workspace_writers SET root_path = ? WHERE team_id = ?");
@@ -2371,7 +2422,7 @@ function pauseRestoredUserQueue(database) {
 // src/backup-schema.ts
 import { createHash } from "crypto";
 var CANONICAL_MIGRATION = "0001_init";
-var CANONICAL_SCHEMA_HASH = "8454a37b1985d248bb25c6588d81b5f00506e13387600c4441ba01727d10bcaf";
+var CANONICAL_SCHEMA_HASH = "cb3811823a7dead88cce0beb08cd4066ea3143258af0f0b8ba329016465dda37";
 var CANONICAL_OBJECTS = [
   ["table", "team_coding_environments"],
   ["table", "workspace_writers"],
@@ -2384,6 +2435,16 @@ var CANONICAL_OBJECTS = [
   ["table", "source_snapshots"],
   ["index", "source_snapshots_retention"],
   ["index", "source_snapshots_team_time"],
+  ["table", "verification_requests"],
+  ["index", "verification_requests_team_time"],
+  ["index", "verification_requests_recipient_dispatch"],
+  ["index", "verification_requests_retention"],
+  ["table", "verification_checks"],
+  ["table", "verification_attempts"],
+  ["index", "verification_attempts_one_open_per_request"],
+  ["index", "verification_attempts_lease"],
+  ["table", "verification_check_outcomes"],
+  ["index", "verification_check_outcomes_command"],
   ["table", "notification_settings"],
   ["table", "notification_receipts"],
   ["index", "notification_receipts_state"],
@@ -5619,7 +5680,7 @@ var skillCommand = defineCommand25({
 // src/commands/team.ts
 import { readFileSync as readFileSync11 } from "fs";
 import { stdin as stdin2 } from "process";
-import { defineCommand as defineCommand30 } from "citty";
+import { defineCommand as defineCommand31 } from "citty";
 
 // src/commands/team-coding-log.ts
 import { defineCommand as defineCommand26 } from "citty";
@@ -6353,8 +6414,215 @@ var teamReviewCommand = defineCommand29({
   }
 });
 
+// src/commands/team-verify.ts
+import { defineCommand as defineCommand30 } from "citty";
+var slug2 = {
+  id: { type: "positional", required: true, description: "Team slug" }
+};
+var OUTCOME_GLYPH = {
+  not_executed: "not run",
+  succeeded: "ok",
+  failed: "FAIL",
+  skipped: "skipped",
+  blocked: "blocked",
+  timed_out: "timeout",
+  cancelled: "cancelled",
+  unknown: "unknown"
+};
+function latestAttempt(report) {
+  return [...report.attempts].sort((a, b) => b.attemptNumber - a.attemptNumber)[0];
+}
+function printReport(report) {
+  const { request } = report;
+  const requester = request.requester.kind === "agent" ? `agent ${request.requester.agentId}` : "operator";
+  console.log(`${request.id}  ${request.state}`);
+  console.log(
+    `  change:    snapshot ${request.snapshot.id} (base ${request.snapshot.baseOid.slice(0, 12)}${request.snapshot.complete ? "" : ", INCOMPLETE COVERAGE"})`
+  );
+  console.log(`  specialist: ${request.recipientAgentId}   requested by: ${requester}`);
+  console.log(`  environment: ${request.environment.image} (shell ${request.environment.sandbox})`);
+  console.log(
+    `  applicability: ${report.applicability.comparison === "identical" ? "unchanged since capture" : `${report.applicability.comparison} (never a pass)`}`
+  );
+  if (request.summary) console.log(`  requested: ${request.summary}`);
+  const attempt = latestAttempt(report);
+  const outcomes = new Map((attempt?.outcomes ?? []).map((outcome) => [outcome.ordinal, outcome]));
+  console.log("  checks:");
+  for (const check of report.checks) {
+    const outcome = outcomes.get(check.ordinal);
+    const state = outcome?.state ?? "not_executed";
+    const receipt = outcome?.commandId ? `  receipt ${outcome.commandId}` : outcome?.receiptUnavailable ? "  receipt no longer available" : "";
+    const exit = outcome?.exitCode === null || outcome?.exitCode === void 0 ? "" : ` exit ${outcome.exitCode}`;
+    console.log(
+      `    [${check.ordinal}] ${OUTCOME_GLYPH[state]}${exit}${receipt}  ${check.command} (${check.purpose})`
+    );
+  }
+  if (attempt?.error) console.log(`  note: ${attempt.error}`);
+  if (!attempt) console.log("  note: no attempt has run yet");
+}
+var createCmd3 = defineCommand30({
+  meta: {
+    name: "create",
+    description: "Capture a verification request against a snapshot (does not run checks)"
+  },
+  args: {
+    ...slug2,
+    agent: { type: "string", required: true, description: "Team member who will verify" },
+    snapshot: { type: "string", required: true, description: "BAZ-042 snapshot id to verify" },
+    check: {
+      type: "string",
+      required: true,
+      description: 'A check as "<command> :: <purpose> [:: <cwd>] [:: <timeoutSeconds>]". Repeat up to eight times.'
+    },
+    summary: { type: "string", description: "Optional acceptance summary for the specialist" },
+    writable: {
+      type: "string",
+      description: "Declared writable output path for checks. Repeat for each path."
+    },
+    json: { type: "boolean", description: "Emit the request as JSON" }
+  },
+  async run({ args: args2 }) {
+    const raw = collectFlagValues(process.argv, "check");
+    if (raw.length === 0) {
+      console.error("at least one --check is required");
+      process.exit(1);
+    }
+    const checks = raw.map((value) => {
+      const [command, purpose, cwd, timeoutSeconds] = value.split("::").map((part) => part.trim());
+      if (!command || !purpose) {
+        console.error(`a check needs a command and a purpose: ${value}`);
+        process.exit(1);
+      }
+      const seconds = timeoutSeconds ? Number(timeoutSeconds) : 120;
+      if (!Number.isFinite(seconds) || seconds < 1 || seconds > 300) {
+        console.error(`a check timeout must be 1-300 seconds: ${value}`);
+        process.exit(1);
+      }
+      return {
+        command,
+        purpose,
+        cwd: cwd || ".",
+        timeoutMs: Math.round(seconds * 1e3)
+      };
+    });
+    const writablePaths = collectFlagValues(process.argv, "writable");
+    const client = createClient2();
+    try {
+      const response = await client.verifications(args2.id).create({
+        recipientAgentId: args2.agent,
+        snapshotId: args2.snapshot,
+        checks,
+        summary: args2.summary ?? null,
+        ...writablePaths.length > 0 ? { writablePaths } : {}
+      });
+      if ("blocked" in response) {
+        console.error(`blocked (${response.blocked.reason}): ${response.blocked.detail}`);
+        process.exit(1);
+      }
+      if (args2.json) {
+        console.log(JSON.stringify(response.request, null, 2));
+        return;
+      }
+      console.log(
+        `captured ${response.request.request.id} (state ${response.request.request.state})`
+      );
+      console.log("the specialist is admitted by the verification scheduler; nothing has run yet");
+    } catch (error) {
+      console.error(error instanceof Error ? error.message : String(error));
+      process.exit(1);
+    }
+  }
+});
+var listCmd10 = defineCommand30({
+  meta: { name: "list", description: "List verification requests for a Team" },
+  args: {
+    ...slug2,
+    json: { type: "boolean", description: "Emit JSON" }
+  },
+  async run({ args: args2 }) {
+    const client = createClient2();
+    const response = await client.verifications(args2.id).list();
+    if (args2.json) {
+      console.log(JSON.stringify(response, null, 2));
+      return;
+    }
+    if (response.requests.length === 0) {
+      console.log("no verification requests");
+      return;
+    }
+    const rows = [
+      ["ID", "STATE", "SPECIALIST", "CHANGE"],
+      ...response.requests.map((entry3) => [
+        entry3.request.id,
+        entry3.request.state,
+        entry3.request.recipientAgentId,
+        entry3.request.snapshot.id.slice(0, 12)
+      ])
+    ];
+    for (const line of columnize(rows)) console.log(line);
+    console.log("run `bazilion team verify show <slug> <id>` for a request's current applicability");
+  }
+});
+var showCmd6 = defineCommand30({
+  meta: { name: "show", description: "Show one verification request and its evidence" },
+  args: {
+    ...slug2,
+    requestId: { type: "positional", required: true, description: "Verification request id" },
+    json: { type: "boolean", description: "Emit JSON" }
+  },
+  async run({ args: args2 }) {
+    const client = createClient2();
+    try {
+      const response = await client.verifications(args2.id).show(args2.requestId);
+      if (args2.json) {
+        console.log(JSON.stringify(response, null, 2));
+        return;
+      }
+      printReport(response.request);
+    } catch (error) {
+      console.error(error instanceof Error ? error.message : String(error));
+      process.exit(1);
+    }
+  }
+});
+var cancelCmd2 = defineCommand30({
+  meta: { name: "cancel", description: "Cancel a pending or running verification request" },
+  args: {
+    ...slug2,
+    requestId: { type: "positional", required: true, description: "Verification request id" },
+    json: { type: "boolean", description: "Emit JSON" }
+  },
+  async run({ args: args2 }) {
+    const client = createClient2();
+    try {
+      const response = await client.verifications(args2.id).cancel(args2.requestId);
+      if (args2.json) {
+        console.log(JSON.stringify(response, null, 2));
+        return;
+      }
+      console.log(`cancelled or cancelled-pending: ${response.request.request.id}`);
+      printReport(response.request);
+    } catch (error) {
+      console.error(error instanceof Error ? error.message : String(error));
+      process.exit(1);
+    }
+  }
+});
+var verifyCommand = defineCommand30({
+  meta: {
+    name: "verify",
+    description: "Specialist verification of a captured code change (BAZ-044)"
+  },
+  subCommands: {
+    create: createCmd3,
+    list: listCmd10,
+    show: showCmd6,
+    cancel: cancelCmd2
+  }
+});
+
 // src/commands/team.ts
-var addCmd2 = defineCommand30({
+var addCmd2 = defineCommand31({
   meta: {
     name: "add",
     description: "Register a team at ~/.bazilion/teams/<slug>/ (use --link to point at an existing tree)"
@@ -6378,7 +6646,7 @@ var addCmd2 = defineCommand30({
     console.log(`registered team ${g.id} at ${g.path}`);
   }
 });
-var listCmd10 = defineCommand30({
+var listCmd11 = defineCommand31({
   meta: { name: "list", description: "List teams" },
   async run() {
     const client = createClient2();
@@ -6391,7 +6659,7 @@ var listCmd10 = defineCommand30({
     for (const line of columnize(rows)) console.log(line);
   }
 });
-var rmCmd5 = defineCommand30({
+var rmCmd5 = defineCommand31({
   meta: { name: "rm", description: "Remove a team registration" },
   args: {
     id: { type: "positional", required: true }
@@ -6412,7 +6680,7 @@ async function readStdin() {
   for await (const chunk of stdin2) chunks.push(chunk);
   return Buffer.concat(chunks).toString("utf8");
 }
-var userMdShowCmd = defineCommand30({
+var userMdShowCmd = defineCommand31({
   meta: { name: "show", description: "Print the team's USER.md" },
   args: { id: { type: "positional", required: true } },
   async run({ args: args2 }) {
@@ -6422,7 +6690,7 @@ var userMdShowCmd = defineCommand30({
     if (g.userMd && !g.userMd.endsWith("\n")) process.stdout.write("\n");
   }
 });
-var userMdSetCmd = defineCommand30({
+var userMdSetCmd = defineCommand31({
   meta: {
     name: "set",
     description: "Replace the team's USER.md (from --file, --from-stdin, or inline text)"
@@ -6448,7 +6716,7 @@ var userMdSetCmd = defineCommand30({
     console.log(`updated USER.md for team ${args2.id} (${content.length} bytes)`);
   }
 });
-var userMdClearCmd = defineCommand30({
+var userMdClearCmd = defineCommand31({
   meta: { name: "clear", description: "Clear the team's USER.md to empty" },
   args: { id: { type: "positional", required: true } },
   async run({ args: args2 }) {
@@ -6458,7 +6726,7 @@ var userMdClearCmd = defineCommand30({
     console.log(`cleared USER.md for team ${args2.id}`);
   }
 });
-var userMdCmd = defineCommand30({
+var userMdCmd = defineCommand31({
   meta: { name: "user-md", description: "View or edit a team's USER.md" },
   subCommands: {
     show: userMdShowCmd,
@@ -6466,7 +6734,7 @@ var userMdCmd = defineCommand30({
     clear: userMdClearCmd
   }
 });
-var topicFormatShowCmd = defineCommand30({
+var topicFormatShowCmd = defineCommand31({
   meta: { name: "show", description: "Print the team's Telegram topic-name template" },
   args: { id: { type: "positional", required: true } },
   async run({ args: args2 }) {
@@ -6475,7 +6743,7 @@ var topicFormatShowCmd = defineCommand30({
     console.log(g.telegramTopicNameFormat ?? "(default naming)");
   }
 });
-var topicFormatSetCmd = defineCommand30({
+var topicFormatSetCmd = defineCommand31({
   meta: {
     name: "set",
     description: "Set the topic-name template. Tokens: {agent.name} {team.name} {team.slug} (must include {agent.name})"
@@ -6495,7 +6763,7 @@ var topicFormatSetCmd = defineCommand30({
     console.log(`set topic-name template for team ${args2.id}: ${g.telegramTopicNameFormat}`);
   }
 });
-var topicFormatClearCmd = defineCommand30({
+var topicFormatClearCmd = defineCommand31({
   meta: { name: "clear", description: "Clear the template (revert to built-in naming)" },
   args: { id: { type: "positional", required: true } },
   async run({ args: args2 }) {
@@ -6505,7 +6773,7 @@ var topicFormatClearCmd = defineCommand30({
     console.log(`cleared topic-name template for team ${args2.id}`);
   }
 });
-var topicFormatCmd = defineCommand30({
+var topicFormatCmd = defineCommand31({
   meta: {
     name: "topic-format",
     description: "View or edit a team's Telegram forum-topic name template"
@@ -6516,7 +6784,7 @@ var topicFormatCmd = defineCommand30({
     clear: topicFormatClearCmd
   }
 });
-var contextCmd = defineCommand30({
+var contextCmd = defineCommand31({
   meta: {
     name: "context",
     description: "Inspect repository instructions, Git state and command suggestions"
@@ -6563,15 +6831,16 @@ var contextCmd = defineCommand30({
       console.log(`  ${issue.code}${issue.path ? `: ${safe2(issue.path)}` : ""} \u2014 ${issue.message}`);
   }
 });
-var teamCommand = defineCommand30({
+var teamCommand = defineCommand31({
   meta: { name: "team", description: "Manage teams (collaboration contexts)" },
   subCommands: {
     environment: teamEnvironmentCommand,
     log: teamCodingLogCommand,
     review: teamReviewCommand,
+    verify: verifyCommand,
     context: contextCmd,
     add: addCmd2,
-    list: listCmd10,
+    list: listCmd11,
     rm: rmCmd5,
     "user-md": userMdCmd,
     "topic-format": topicFormatCmd,
@@ -6581,7 +6850,7 @@ var teamCommand = defineCommand30({
 
 // src/commands/team-template.ts
 import { readFileSync as readFileSync12 } from "fs";
-import { defineCommand as defineCommand31 } from "citty";
+import { defineCommand as defineCommand32 } from "citty";
 function jsonFile(path) {
   try {
     return JSON.parse(readFileSync12(path, "utf8"));
@@ -6609,7 +6878,7 @@ function printTeam(detail) {
       console.log(line);
   }
 }
-var list7 = defineCommand31({
+var list7 = defineCommand32({
   meta: { name: "list", description: "List canonical Team templates" },
   args: { json: { type: "boolean", description: "Emit stable JSON" } },
   async run({ args: args2 }) {
@@ -6623,7 +6892,7 @@ var list7 = defineCommand31({
       console.log(line);
   }
 });
-var show6 = defineCommand31({
+var show6 = defineCommand32({
   meta: { name: "show", description: "Show a canonical Team template" },
   args: {
     id: { type: "positional", required: true },
@@ -6637,7 +6906,7 @@ var show6 = defineCommand31({
     else printTeam(detail);
   }
 });
-var exportCommand2 = defineCommand31({
+var exportCommand2 = defineCommand32({
   meta: {
     name: "export",
     description: "Export a portable versioned Team-template document to stdout"
@@ -6677,7 +6946,7 @@ function printImportDiff(current, document) {
   for (const value of diff2.added) console.log(`  + ${value}`);
   for (const value of diff2.removed) console.log(`  - ${value}`);
 }
-var importCommand2 = defineCommand31({
+var importCommand2 = defineCommand32({
   meta: {
     name: "import",
     description: "Validate, diff, and explicitly apply a portable Team-template document"
@@ -6758,7 +7027,7 @@ var importCommand2 = defineCommand31({
     );
   }
 });
-var teamTemplateCommand = defineCommand31({
+var teamTemplateCommand = defineCommand32({
   meta: {
     name: "team-template",
     description: "Inspect and exchange canonical Team templates"
@@ -6767,8 +7036,8 @@ var teamTemplateCommand = defineCommand31({
 });
 
 // src/commands/telegram.ts
-import { defineCommand as defineCommand32 } from "citty";
-var setCmd2 = defineCommand32({
+import { defineCommand as defineCommand33 } from "citty";
+var setCmd2 = defineCommand33({
   meta: {
     name: "set",
     description: "Save bot token + supergroup chat ID (paired write)"
@@ -6786,7 +7055,7 @@ var setCmd2 = defineCommand32({
     console.log(`saved \xB7 token ${state.botTokenPreview} \xB7 chat ${state.chatId}`);
   }
 });
-var clearCmd = defineCommand32({
+var clearCmd = defineCommand33({
   meta: {
     name: "clear",
     description: "Remove stored bot token + chat ID"
@@ -6797,7 +7066,7 @@ var clearCmd = defineCommand32({
     console.log("cleared");
   }
 });
-var showCmd6 = defineCommand32({
+var showCmd7 = defineCommand33({
   meta: {
     name: "show",
     description: "Show what credentials are stored (token is masked)"
@@ -6818,7 +7087,7 @@ var showCmd6 = defineCommand32({
     }
   }
 });
-var reconnectCmd = defineCommand32({
+var reconnectCmd = defineCommand33({
   meta: {
     name: "reconnect",
     description: "Apply a pending supergroup chat-id migration + re-activate the bot"
@@ -6829,7 +7098,7 @@ var reconnectCmd = defineCommand32({
     console.log(`reconnected \xB7 chat ${state.chatId}`);
   }
 });
-var configCmd = defineCommand32({
+var configCmd = defineCommand33({
   meta: {
     name: "config",
     description: "Manage Telegram credentials (bot token + chat ID)"
@@ -6837,10 +7106,10 @@ var configCmd = defineCommand32({
   subCommands: {
     set: setCmd2,
     clear: clearCmd,
-    show: showCmd6
+    show: showCmd7
   }
 });
-var healthCmd = defineCommand32({
+var healthCmd = defineCommand33({
   meta: {
     name: "health",
     description: "Run the four-step preflight against the Telegram Bot API"
@@ -6879,7 +7148,7 @@ var healthCmd = defineCommand32({
     if (!allOk) process.exitCode = 1;
   }
 });
-var botStatusCmd = defineCommand32({
+var botStatusCmd = defineCommand33({
   meta: {
     name: "status",
     description: "Show polling state of the live bot"
@@ -6904,7 +7173,7 @@ var botStatusCmd = defineCommand32({
     if (!p.running) process.exitCode = 1;
   }
 });
-var botRestartCmd = defineCommand32({
+var botRestartCmd = defineCommand33({
   meta: {
     name: "restart",
     description: "Force-restart the bot (tears down + brings up from current creds)"
@@ -6915,7 +7184,7 @@ var botRestartCmd = defineCommand32({
     console.log("restart requested");
   }
 });
-var botCmd = defineCommand32({
+var botCmd = defineCommand33({
   meta: {
     name: "bot",
     description: "Inspect / control the live polling bot"
@@ -6925,7 +7194,7 @@ var botCmd = defineCommand32({
     restart: botRestartCmd
   }
 });
-var bindCmd = defineCommand32({
+var bindCmd = defineCommand33({
   meta: {
     name: "bind",
     description: "Create a Telegram topic for an agent (manual fallback for /talk)"
@@ -6943,7 +7212,7 @@ var bindCmd = defineCommand32({
     console.log(`  ${result.deepLink}`);
   }
 });
-var unbindCmd = defineCommand32({
+var unbindCmd = defineCommand33({
   meta: {
     name: "unbind",
     description: "Clear an agent's Telegram topic binding (topic stays in Telegram as orphan)"
@@ -6957,7 +7226,7 @@ var unbindCmd = defineCommand32({
     console.log(`unbound agent ${args2.agent}`);
   }
 });
-var listBindingsCmd = defineCommand32({
+var listBindingsCmd = defineCommand33({
   meta: {
     name: "list",
     description: "List agents and their Telegram topic bindings"
@@ -6985,7 +7254,7 @@ var listBindingsCmd = defineCommand32({
     }
   }
 });
-var allowCmd = defineCommand32({
+var allowCmd = defineCommand33({
   meta: { name: "allow", description: "Add a Telegram user id to the allowlist" },
   args: {
     userId: { type: "positional", required: true, description: "Numeric Telegram user id" },
@@ -7001,7 +7270,7 @@ var allowCmd = defineCommand32({
     console.log(`allowed ${u.userId} (${u.role})`);
   }
 });
-var denyCmd = defineCommand32({
+var denyCmd = defineCommand33({
   meta: { name: "deny", description: "Remove a Telegram user id from the allowlist" },
   args: { userId: { type: "positional", required: true } },
   async run({ args: args2 }) {
@@ -7010,7 +7279,7 @@ var denyCmd = defineCommand32({
     console.log(`removed ${args2.userId}`);
   }
 });
-var allowedCmd = defineCommand32({
+var allowedCmd = defineCommand33({
   meta: { name: "allowed", description: "List allowlisted Telegram users" },
   async run() {
     const client = createClient2();
@@ -7025,7 +7294,7 @@ var allowedCmd = defineCommand32({
     }
   }
 });
-var pairingCreateCmd = defineCommand32({
+var pairingCreateCmd = defineCommand33({
   meta: { name: "create", description: "Generate a one-time Telegram owner pairing code" },
   async run() {
     const result = await createClient2().post(
@@ -7036,7 +7305,7 @@ var pairingCreateCmd = defineCommand32({
     console.log("send `/pair <code>` in the configured \u2699 bazilion service topic");
   }
 });
-var pairingStatusCmd = defineCommand32({
+var pairingStatusCmd = defineCommand33({
   meta: { name: "status", description: "Show Telegram owner pairing status" },
   async run() {
     const result = await createClient2().get("/api/config/telegram/pairing");
@@ -7047,14 +7316,14 @@ var pairingStatusCmd = defineCommand32({
       console.log(`expires: ${new Date(result.challengeExpiresAt).toISOString()}`);
   }
 });
-var pairingCancelCmd = defineCommand32({
+var pairingCancelCmd = defineCommand33({
   meta: { name: "cancel", description: "Cancel the active Telegram pairing code" },
   async run() {
     await createClient2().del("/api/config/telegram/pairing/challenge");
     console.log("pairing challenge cancelled");
   }
 });
-var pairingResetCmd = defineCommand32({
+var pairingResetCmd = defineCommand33({
   meta: { name: "reset", description: "Revoke the Telegram owner and require re-pairing" },
   args: {
     yes: { type: "boolean", description: "Confirm destructive owner reset", required: true }
@@ -7065,7 +7334,7 @@ var pairingResetCmd = defineCommand32({
     console.log("Telegram owner reset; ingress is closed until re-paired");
   }
 });
-var pairingCmd = defineCommand32({
+var pairingCmd = defineCommand33({
   meta: { name: "pairing", description: "Manage single-owner Telegram pairing" },
   subCommands: {
     create: pairingCreateCmd,
@@ -7074,7 +7343,7 @@ var pairingCmd = defineCommand32({
     reset: pairingResetCmd
   }
 });
-var telegramCommand = defineCommand32({
+var telegramCommand = defineCommand33({
   meta: {
     name: "telegram",
     description: "Telegram integration: credentials, health, bot lifecycle, bindings, access"
@@ -7095,7 +7364,7 @@ var telegramCommand = defineCommand32({
 });
 
 // src/commands/token.ts
-import { defineCommand as defineCommand33 } from "citty";
+import { defineCommand as defineCommand34 } from "citty";
 import qrcode from "qrcode-terminal";
 function tokenRow(t) {
   const last = t.lastUsedAt ? new Date(t.lastUsedAt).toISOString() : "(never)";
@@ -7124,7 +7393,7 @@ function resolveQrServer(override) {
   }
   return url.origin;
 }
-var createCmd3 = defineCommand33({
+var createCmd4 = defineCommand34({
   meta: { name: "create", description: "Mint a new web token (shown once)" },
   args: {
     label: { type: "positional", required: true, description: "Human-readable label" },
@@ -7167,7 +7436,7 @@ var createCmd3 = defineCommand33({
     qrcode.generate(pairUrl, { small: true }, (qr) => console.log(qr));
   }
 });
-var listCmd11 = defineCommand33({
+var listCmd12 = defineCommand34({
   meta: { name: "list", description: "List web tokens" },
   args: {
     all: { type: "boolean", description: "Include revoked tokens" }
@@ -7183,7 +7452,7 @@ var listCmd11 = defineCommand33({
     for (const line of columnize(tokens.map(tokenRow))) console.log(line);
   }
 });
-var showLocalCmd = defineCommand33({
+var showLocalCmd = defineCommand34({
   meta: {
     name: "show-local",
     description: "Print the bootstrap web token stored in ~/.bazilion/auth.json"
@@ -7193,7 +7462,7 @@ var showLocalCmd = defineCommand33({
     console.log(readAuthFile(paths.authFile).token);
   }
 });
-var revokeCmd2 = defineCommand33({
+var revokeCmd2 = defineCommand34({
   meta: { name: "revoke", description: "Revoke a web token" },
   args: {
     id: { type: "positional", required: true }
@@ -7204,19 +7473,19 @@ var revokeCmd2 = defineCommand33({
     console.log(`revoked token ${args2.id}`);
   }
 });
-var tokenCommand = defineCommand33({
+var tokenCommand = defineCommand34({
   meta: { name: "token", description: "Manage web tokens for API/CLI clients" },
   subCommands: {
-    create: createCmd3,
-    list: listCmd11,
+    create: createCmd4,
+    list: listCmd12,
     revoke: revokeCmd2,
     "show-local": showLocalCmd
   }
 });
 
 // src/commands/trigger.ts
-import { defineCommand as defineCommand34 } from "citty";
-var addCmd3 = defineCommand34({
+import { defineCommand as defineCommand35 } from "citty";
+var addCmd3 = defineCommand35({
   meta: { name: "add", description: "Add an interval / cron trigger to an agent" },
   args: {
     agent: { type: "positional", required: true },
@@ -7264,7 +7533,7 @@ function triggerRow(t) {
   const msgPreview = t.message.length > 60 ? `${t.message.slice(0, 60)}\u2026` : t.message;
   return [t.id, state, spec, `last: ${last}`, `"${msgPreview}"`];
 }
-var listCmd12 = defineCommand34({
+var listCmd13 = defineCommand35({
   meta: { name: "list", description: "List triggers for an agent" },
   args: {
     agent: { type: "positional", required: true }
@@ -7281,7 +7550,7 @@ var listCmd12 = defineCommand34({
     for (const line of columnize(triggers.map(triggerRow))) console.log(line);
   }
 });
-var rmCmd6 = defineCommand34({
+var rmCmd6 = defineCommand35({
   meta: { name: "rm", description: "Delete a trigger" },
   args: {
     id: { type: "positional", required: true }
@@ -7292,7 +7561,7 @@ var rmCmd6 = defineCommand34({
     console.log(`removed trigger ${args2.id}`);
   }
 });
-var enableCmd3 = defineCommand34({
+var enableCmd3 = defineCommand35({
   meta: { name: "enable", description: "Enable a trigger" },
   args: {
     id: { type: "positional", required: true }
@@ -7304,7 +7573,7 @@ var enableCmd3 = defineCommand34({
     console.log(`enabled trigger ${args2.id}`);
   }
 });
-var disableCmd3 = defineCommand34({
+var disableCmd3 = defineCommand35({
   meta: { name: "disable", description: "Disable a trigger" },
   args: {
     id: { type: "positional", required: true }
@@ -7316,7 +7585,7 @@ var disableCmd3 = defineCommand34({
     console.log(`disabled trigger ${args2.id}`);
   }
 });
-var historyCmd = defineCommand34({
+var historyCmd = defineCommand35({
   meta: { name: "history", description: "Show recent dispatches for a trigger" },
   args: {
     id: { type: "positional", required: true },
@@ -7344,11 +7613,11 @@ var historyCmd = defineCommand34({
     for (const line of columnize(rows)) console.log(line);
   }
 });
-var triggerCommand = defineCommand34({
+var triggerCommand = defineCommand35({
   meta: { name: "trigger", description: "Manage scheduled agent triggers" },
   subCommands: {
     add: addCmd3,
-    list: listCmd12,
+    list: listCmd13,
     rm: rmCmd6,
     enable: enableCmd3,
     disable: disableCmd3,
@@ -7360,7 +7629,7 @@ var triggerCommand = defineCommand34({
 import { existsSync as existsSync7, lstatSync as lstatSync4, readdirSync as readdirSync2, realpathSync as realpathSync2, rmSync as rmSync4 } from "fs";
 import { homedir as homedir2 } from "os";
 import { isAbsolute as isAbsolute2, join as join6, parse as parse2, relative as relative2, resolve as resolve5, sep } from "path";
-import { defineCommand as defineCommand35 } from "citty";
+import { defineCommand as defineCommand36 } from "citty";
 function makeLineReader() {
   let buffer = "";
   let ended = false;
@@ -7447,7 +7716,7 @@ function assertSafeUninstallHome(home) {
   }
   return target;
 }
-var uninstallCommand = defineCommand35({
+var uninstallCommand = defineCommand36({
   meta: {
     name: "uninstall",
     description: "Wipe bazilion state from ~/.bazilion (or BAZILION_HOME)"
@@ -7551,7 +7820,7 @@ var uninstallCommand = defineCommand35({
 
 // src/index.ts
 var VERSION = package_default.version;
-var main = defineCommand36({
+var main = defineCommand37({
   meta: {
     name: "bazilion",
     version: VERSION,