npm - broods - Versions diffs - 0.45.0 → 0.46.0 - Mend

broods 0.45.0 → 0.46.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/dist/account.d.ts +2 -6
package/dist/cli/index.js +41 -41
package/dist/index.d.ts +7 -11
package/package.json +1 -1
/package/dist/{chunk-7e3meadv.js → chunk-qdmc5crt.js} +0 -0

package/dist/account.d.ts CHANGED Viewed

@@ -812,10 +812,6 @@ interface WorkspaceStorageConfig {
     prefix?: string;
     auth?: WorkspaceStorageAuth;
 }
-/** What the API accepts: the boolean spelling of isolation is stored as its level. */
-type WorkspaceConfigInput = Omit<WorkspaceConfig, "isolation"> & {
-    isolation?: WorkspaceIsolation | boolean;
-};
 interface WorkspaceConfig {
     storage: WorkspaceStorageConfig;
     isolation?: WorkspaceIsolation;
@@ -1476,13 +1472,13 @@ declare class BroodsAccountClient {
     createWorkspace(input: {
         name: string;
         description?: string;
-        config?: WorkspaceConfigInput;
+        config?: WorkspaceConfig;
     }): Promise<AccountWorkspace>;
     getWorkspace(workspaceId: string): Promise<AccountWorkspace | null>;
     updateWorkspace(workspaceId: string, patch: {
         name?: string;
         description?: string | null;
-        config?: ConfigPatch<WorkspaceConfigInput>;
+        config?: ConfigPatch<WorkspaceConfig>;
     }): Promise<AccountWorkspace | null>;
     deleteWorkspace(workspaceId: string): Promise<boolean>;
     /** Flat listing of every file in the workspace's S3-backed filesystem. Returns [] when the workspace is gone. */

package/dist/cli/index.js CHANGED Viewed

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{G,y,_,O,T,W,K,v,f,L,h,M,E,F,Y,z,ie,w,g}from"../chunk-hdcy74kj.js";import{m,R}from"../chunk-bb3jfhv3.js";import{chmod as Os,lstat as As,mkdir as Mn,readFile as qt,readdir as xs,stat as Ps,writeFile as ve}from"node:fs/promises";import{createHash as Zt}from"node:crypto";import js from"node:module";import{basename as Is,join as Le,relative as Ts,resolve as P,sep as _s}from"node:path";import{watch as Ds}from"node:fs";import{spawn as Xt}from"node:child_process";import{tmpdir as Us}from"node:os";import{performance as Ht}from"node:perf_hooks";import{stripVTControlCharacters as Ns}from"node:util";import{fileURLToPath as bo,pathToFileURL as it}from"node:url";import{createHash as yo}from"node:crypto";import{existsSync as vo,readFileSync as ko}from"node:fs";import{mkdtemp as at,readdir as ct,readFile as So,rm as lt,writeFile as dn}from"node:fs/promises";import Zn from"node:module";import{tmpdir as dt}from"node:os";import{basename as $o,isAbsolute as Eo,join as le,relative as Se,resolve as Ge}from"node:path";import{build as Co,transformSync as ut}from"esbuild";var Vn={alibaba:{label:"Alibaba Qwen",modelPlaceholder:"qwen3-max"},anthropic:{label:"Anthropic",modelPlaceholder:"claude-sonnet-4-5-20250929"},azure:{label:"Azure OpenAI",modelPlaceholder:"gpt-4.1-mini"},baseten:{label:"Baseten",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},bedrock:{label:"Amazon Bedrock",modelPlaceholder:"anthropic.claude-sonnet-4-5-20250929-v1:0"},cerebras:{label:"Cerebras",modelPlaceholder:"llama3.1-8b"},chatgpt:{label:"ChatGPT plan",modelPlaceholder:"gpt-5.5"},cloudflare:{label:"Cloudflare Workers AI",modelPlaceholder:"@cf/meta/llama-3.3-70b-instruct-fp8-fast"},cohere:{label:"Cohere",modelPlaceholder:"command-a-03-2025"},custom:{label:"Custom OpenAI-compatible",modelPlaceholder:"gpt-oss-120b"},deepinfra:{label:"DeepInfra",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},deepseek:{label:"DeepSeek",modelPlaceholder:"deepseek-chat"},fireworks:{label:"Fireworks",modelPlaceholder:"accounts/fireworks/models/deepseek-v3"},google:{label:"Google",modelPlaceholder:"gemini-2.5-flash"},groq:{label:"Groq",modelPlaceholder:"llama-3.3-70b-versatile"},huggingface:{label:"Hugging Face",modelPlaceholder:"meta-llama/Llama-3.3-70B-Instruct"},llmgateway:{label:"LLM Gateway",modelPlaceholder:"openai/gpt-4.1-mini"},minimax:{label:"MiniMax",modelPlaceholder:"MiniMax-M2.7"},mistral:{label:"Mistral",modelPlaceholder:"mistral-large-latest"},moonshotai:{label:"Moonshot AI Kimi",modelPlaceholder:"kimi-k2.6"},ollama:{label:"Ollama",modelPlaceholder:"gpt-oss:120b"},openai:{label:"OpenAI",modelPlaceholder:"gpt-4.1-mini"},openrouter:{label:"OpenRouter",modelPlaceholder:"anthropic/claude-sonnet-4.5"},perplexity:{label:"Perplexity",modelPlaceholder:"low"},togetherai:{label:"Together.ai",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},v0:{label:"Vercel v0",modelPlaceholder:"v0-1.0-md"},vercel:{label:"Vercel AI Gateway",modelPlaceholder:"openai/gpt-4.1-mini"},vertex:{label:"Google Vertex AI",modelPlaceholder:"gemini-2.5-flash"},xai:{label:"xAI Grok",modelPlaceholder:"grok-4"},zai:{label:"Z.ai GLM",modelPlaceholder:"glm-4.7"}},Jn=Object.keys(Vn);function qn(e){return Object.hasOwn(Vn,e)}var an=["conversation","agent"];function cn(e){return an.some((n)=>n===e)}function ln(e){if(e===!0)return"conversation";return cn(e)?e:void 0}var Ae="*",Ro=`const passthrough = (input) => input;
+import{G,y,_,O,T,W,K,v,f,L,h,M,E,F,Y,z,ie,w,g}from"../chunk-hdcy74kj.js";import{m,R}from"../chunk-bb3jfhv3.js";import{chmod as Rs,lstat as Os,mkdir as Nn,readFile as Jt,readdir as As,stat as xs,writeFile as ve}from"node:fs/promises";import{createHash as qt}from"node:crypto";import Ps from"node:module";import{basename as js,join as Le,relative as Ts,resolve as P,sep as Is}from"node:path";import{watch as _s}from"node:fs";import{spawn as Zt}from"node:child_process";import{tmpdir as Ds}from"node:os";import{performance as Kt}from"node:perf_hooks";import{stripVTControlCharacters as Us}from"node:util";import{fileURLToPath as wo,pathToFileURL as st}from"node:url";import{createHash as bo}from"node:crypto";import{existsSync as yo,readFileSync as vo}from"node:fs";import{mkdtemp as it,readdir as at,readFile as ko,rm as ct,writeFile as cn}from"node:fs/promises";import qn from"node:module";import{tmpdir as lt}from"node:os";import{basename as So,isAbsolute as $o,join as le,relative as Se,resolve as Ge}from"node:path";import{build as Eo,transformSync as dt}from"esbuild";var Yn={alibaba:{label:"Alibaba Qwen",modelPlaceholder:"qwen3-max"},anthropic:{label:"Anthropic",modelPlaceholder:"claude-sonnet-4-5-20250929"},azure:{label:"Azure OpenAI",modelPlaceholder:"gpt-4.1-mini"},baseten:{label:"Baseten",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},bedrock:{label:"Amazon Bedrock",modelPlaceholder:"anthropic.claude-sonnet-4-5-20250929-v1:0"},cerebras:{label:"Cerebras",modelPlaceholder:"llama3.1-8b"},chatgpt:{label:"ChatGPT plan",modelPlaceholder:"gpt-5.5"},cloudflare:{label:"Cloudflare Workers AI",modelPlaceholder:"@cf/meta/llama-3.3-70b-instruct-fp8-fast"},cohere:{label:"Cohere",modelPlaceholder:"command-a-03-2025"},custom:{label:"Custom OpenAI-compatible",modelPlaceholder:"gpt-oss-120b"},deepinfra:{label:"DeepInfra",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},deepseek:{label:"DeepSeek",modelPlaceholder:"deepseek-chat"},fireworks:{label:"Fireworks",modelPlaceholder:"accounts/fireworks/models/deepseek-v3"},google:{label:"Google",modelPlaceholder:"gemini-2.5-flash"},groq:{label:"Groq",modelPlaceholder:"llama-3.3-70b-versatile"},huggingface:{label:"Hugging Face",modelPlaceholder:"meta-llama/Llama-3.3-70B-Instruct"},llmgateway:{label:"LLM Gateway",modelPlaceholder:"openai/gpt-4.1-mini"},minimax:{label:"MiniMax",modelPlaceholder:"MiniMax-M2.7"},mistral:{label:"Mistral",modelPlaceholder:"mistral-large-latest"},moonshotai:{label:"Moonshot AI Kimi",modelPlaceholder:"kimi-k2.6"},ollama:{label:"Ollama",modelPlaceholder:"gpt-oss:120b"},openai:{label:"OpenAI",modelPlaceholder:"gpt-4.1-mini"},openrouter:{label:"OpenRouter",modelPlaceholder:"anthropic/claude-sonnet-4.5"},perplexity:{label:"Perplexity",modelPlaceholder:"low"},togetherai:{label:"Together.ai",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},v0:{label:"Vercel v0",modelPlaceholder:"v0-1.0-md"},vercel:{label:"Vercel AI Gateway",modelPlaceholder:"openai/gpt-4.1-mini"},vertex:{label:"Google Vertex AI",modelPlaceholder:"gemini-2.5-flash"},xai:{label:"xAI Grok",modelPlaceholder:"grok-4"},zai:{label:"Z.ai GLM",modelPlaceholder:"glm-4.7"}},zn=Object.keys(Yn);function Vn(e){return Object.hasOwn(Yn,e)}var an=["conversation","agent"];function Jn(e){return an.some((n)=>n===e)}var Ae="*",Co=`const passthrough = (input) => input;
 export const defineAgent = passthrough;
 export const defineBroods = passthrough;
 export const defineCron = passthrough;
@@ -39,15 +39,15 @@ export const defineZaloChannel = passthrough;
 export const defineZaloConnection = passthrough;
 export const env = (name) => ({ __beeblastEnv: true, name });
 export default {};
-`,We=1e7,Xn=50000000,gt=1e7,Qn=20000000,et=200,Oo=new Set(["node_modules",".git"]),Ao=[/^\.env(?:\.|$)/i,/^id_(?:rsa|dsa|ecdsa|ed25519)(?:\.pub)?$/i,/\.(?:pem|key|p12|pfx)$/i],un={onStart:"agent.started",onStepFinish:"agent.step.finished",onToolCall:"tool.call.started",onToolResult:"tool.result",onFinish:"agent.finished",onApproval:"agent.approval.required",onError:"agent.failed",onSubagentFinish:"subagent.task.finished",onMessageReceived:"channel.message.received",onMessageSending:"channel.message.sending"};async function de(e={}){let n=e.cwd??process.cwd();h(n);let t=Ge(n,y);if(!vo(t))throw Error(`No ${y}/ folder in ${n}. Run \`broods dev\` to scaffold one.`);let o=await Po(t),r=await jo(o),s=await To(r,n,e.project),i=r.filter((b)=>g(b.value)).map((b)=>({exportName:b.exportName,file:b.file,resource:b.value})),a=i.map((b)=>b.resource);ot(a),Ko(a);let c=Yo(i,r),d=Vo(a);for(let b of a)Do(b);for(let b of a)Uo(b);for(let b of a)No(b);Lo(a),Bo(a),zo(i,d);let l=Ho(i),p=xo(s,e.stage??(e.useRuntimeStage===!1?void 0:v()),e.command??"dev"),u=(await Promise.all(i.map((b)=>Jo(b,t,d)))).flat().sort((b,S)=>`${b.kind}:${b.name}`.localeCompare(`${S.kind}:${S.name}`));return ot(u),{config:s,resources:a,resourceAliases:l,channels:c,manifest:{version:1,project:s.project,stage:p,resources:u}}}function pt(e){let n=new Set;for(let t of e.resources)gn(t.config,n);return[...n].sort()}function gn(e,n){if(Array.isArray(e)){for(let t of e)gn(t,n);return}if(e&&typeof e==="object"){let t=e;if(t.__beeblastEnv===!0&&typeof t.name==="string"){n.add(t.name);return}for(let o of Object.values(t))gn(o,n)}}function xo(e,n,t){if(n)return n;let o=e.stages?.[t];if(o)return o;return t==="deploy"?"production":"development"}async function Po(e){let n=[];async function t(o){let r=await ct(o,{withFileTypes:!0});for(let s of r){let i=le(o,s.name);if(s.isDirectory()){if(s.name===_||s.name==="generated")continue;await t(i)}else if(s.isFile()&&s.name.endsWith(".ts"))n.push(i)}}return await t(e),n.sort((o,r)=>Se(e,o).localeCompare(Se(e,r)))}async function jo(e){Io();let n=[];for(let t of e){let r=await import(`${it(t).href}?t=${Date.now()}`);n.push(...Object.entries(r).map(([s,i])=>({exportName:s,file:t,value:i})))}return n}var nt=!1;function Io(){if(nt)return;if(nt=!0,typeof Zn.registerHooks!=="function")return;Zn.registerHooks({load:(e,n,t)=>{let[o]=e.split("?");if(o===void 0||!o.startsWith("file:")||!o.endsWith(".ts"))return t(e,n);let r=bo(o);return{format:"module",shortCircuit:!0,source:ut(ko(r,"utf8"),{loader:"ts",format:"esm",sourcefile:r,sourcemap:"inline"}).code}}})}async function To(e,n,t){let r=e.find((i)=>ie(i.value))?.value?.config??{},s=t??process.env.BROODS_PROJECT??r.project??Sr($o(Ge(n)));if(!s.trim())throw Error("Project name is required. Pass --project <name> or set BROODS_PROJECT.");return{...r,project:s}}var tt=new Set(["agent","harness","model","provider","session","hooks","connections","tools","mcp","denyTools","sandboxes","workspaces","subagent","skills","scheduler","policies","publicAccess","allowRunOverrides"]),_o={workspace:"workspaces",skill:"skills",policy:"policies",tool:"tools",mcpServers:"mcp",channel:"connections",channels:"connections",hook:"hooks",subagents:"subagent",systemPrompt:"agent",system:"agent"};function Do(e){if(e.kind!=="agent")return;let n=e.config;for(let t of Object.keys(n)){if(tt.has(t))continue;if(t==="sandbox")throw Error(`Agent "${e.name}" config.sandbox was removed; use sandboxes, the first is the default`);let o=_o[t],r=o?` Did you mean "${o}"?`:` Allowed keys: ${[...tt].sort().join(", ")}.`;throw Error(`Agent "${e.name}" has an unknown config key "${t}".${r}`)}}function Uo(e){if(e.kind!=="workspace")return;let t=e.config.storage;if(t===void 0)return;if(!t||typeof t!=="object"||Array.isArray(t))throw Error(`Workspace "${e.name}" config.storage must be an object`);let o=t.provider;if(o===void 0||o==="s3")return;if(o==="vercel")throw Error(`Workspace "${e.name}" uses storage.provider "vercel", but Vercel Drive workspace storage is not supported yet. Use storage.provider "s3" or omit storage until Vercel Drive is wired.`);throw Error(`Workspace "${e.name}" config.storage.provider must be one of: s3`)}function No(e){if(e.kind!=="workspace")return;let n=e.config;if(n.partitioned!==void 0&&typeof n.partitioned!=="boolean"&&!cn(n.partitioned))throw Error(`Workspace "${e.name}" config.partitioned must be a boolean or one of: ${an.join(", ")}`);if(n.isolation!==void 0)throw Error(`Workspace "${e.name}" config.isolation is no longer supported; use partitioned.`)}function Lo(e){let n=new Map(e.filter((t)=>t.kind==="workspace").map((t)=>[t.name,t]));for(let t of e){if(t.kind!=="agent")continue;let o=t.config,r=o.connections;if(r!==void 0&&!Array.isArray(r))throw Error(`Agent "${t.name}" config.connections must be an array of connection definitions`);let s=Array.isArray(r)?r.filter(w):[],i=new Set;for(let l of s){let p=l.config,u=typeof p.id==="string"?p.id:void 0;if(u){if(i.has(u))throw Error(`Duplicate channel id: ${u}`);i.add(u)}if(l.partition)ft(l.partition,`Agent "${t.name}" connection "${l.type}"`);if(l.config&&typeof l.config==="object"&&(("workspaceIsolationScope"in l.config)||("workspaceScope"in l.config)))throw Error(`Agent "${t.name}" connection "${l.type}" uses workspaceScope, which is no longer supported; use partition.`)}let c=(Array.isArray(o.workspaces)?o.workspaces.map((l)=>Mo(l,n)).filter((l)=>Boolean(l)):[]).filter((l)=>ln(l.config.partitioned)==="conversation"),d=s.filter((l)=>l.partition);if(d.length>0&&c.length===0){let l=d[0];throw Error(`Agent "${t.name}" connection "${l.type}" defines partition, but no attached workspace has partitioned: true.`)}if(c.length>0){for(let l of s)if(!l.partition)throw Error(`Agent "${t.name}" attaches partitioned workspace "${c[0].name}", but connection "${l.type}" does not define partition.`)}}}function ft(e,n){if(!e)return;if(e.by==="shared"){if("alias"in e&&e.alias!==void 0)throw Error(`${n} partition.alias is only supported when partition.by is conversation`);return}if(e.by!=="conversation")throw Error(`${n} partition.by must be one of: shared, conversation`);if(typeof e.alias!=="string"||e.alias.length===0)throw Error(`${n} partition.alias is required when partition.by is conversation`);if(!/^[A-Za-z0-9._-]+$/.test(e.alias))throw Error(`${n} partition.alias must use only letters, numbers, dots, underscores, or hyphens`);if(e.alias==="."||e.alias==="..")throw Error(`${n} partition.alias must not be "." or ".."`)}function Mo(e,n){if(g(e)&&e.kind==="workspace")return e;if(typeof e==="string")return n.get(e);if(e&&typeof e==="object"&&"workspace"in e){let t=e.workspace;if(g(t)&&t.kind==="workspace")return t;if(typeof t==="string")return n.get(t)}return}function Bo(e){let n=new Map(e.filter((t)=>t.kind==="sandbox").map((t)=>[t.name,t]));for(let t of e){if(t.kind!=="agent")continue;let o=t.config,r=mt(Array.isArray(o.sandboxes)?o.sandboxes[0]:void 0,n),s=o.workspaces;if(!Array.isArray(s))continue;for(let i of s){let a=Wo(i),c=Go(i,r,n);if(!c||Fo(c))continue;throw Error(`Agent "${t.name}" workspace "${a}" uses sandbox "${c.name}" (${ht(c)}) which does not support S3 workspace mounts. Use lambda/sandbox, or daytona with options.mountAwsS3Buckets: true, or set this workspace ref to sandbox: null for read-only S3 access.`)}}}function mt(e,n){if(g(e)&&e.kind==="sandbox")return e;if(typeof e==="string")return n.get(e);return}function Go(e,n,t){if(e&&typeof e==="object"&&"sandbox"in e){let o=e.sandbox;if(o===null)return;return mt(o,t)}return n}function Wo(e){if(g(e)&&e.kind==="workspace")return e.name;if(e&&typeof e==="object"&&"workspace"in e){let n=e.workspace;if(g(n))return n.name;if(typeof n==="string")return n}return"<unknown>"}function Fo(e){let n=ht(e);if(n==="lambda"||n==="sandbox")return!0;if(n!=="daytona")return!1;let t=e.config.options;return Boolean(t&&typeof t==="object"&&!Array.isArray(t)&&t.mountAwsS3Buckets===!0)}function ht(e){return typeof e.config.provider==="string"?e.config.provider:"lambda"}function Ko(e){let n=new Set(e.filter((t)=>t.kind==="sandbox").map((t)=>t.name));for(let t of e){if(t.kind!=="agent")continue;let o=t.config.sandboxes;if(o===void 0)continue;if(!Array.isArray(o))throw Error(`Agent "${t.name}" sandboxes must be an array of sandbox resources or names`);let r=o;for(let[s,i]of r.entries()){let a=typeof i==="string"&&i.trim().length>0,c=g(i)&&i.kind==="sandbox";if(!a&&!c)throw Error(`Agent "${t.name}" sandboxes[${s}] must be a sandbox resource or a non-empty name`);if(c&&!n.has(i.name))throw Error(`Agent "${t.name}" sandboxes references sandbox "${i.name}", but that sandbox is not exported from broods/`)}}}function ot(e){let n=new Set;for(let t of e){let o=`${t.kind}:${t.name}`;if(n.has(o))throw Error(`Duplicate resource: ${o}`);n.add(o)}}function Ho(e){let n={},t=new Set;for(let{exportName:o,resource:r}of e){if(o==="default"||!pn(o))continue;let s=`${r.kind}:${o}`;if(t.has(s))throw Error(`Duplicate export alias for ${r.kind}: ${o}`);t.add(s),n[r.kind]??={},n[r.kind][r.name]=o}return n}function Yo(e,n){let t=new Map;for(let i of n){if(!w(i.value)||i.exportName==="default"||!pn(i.exportName))continue;let a=t.get(i.value);if(a&&a!==i.exportName)throw Error(`Channel is exported more than once: ${a}, ${i.exportName}`);t.set(i.value,i.exportName)}let o=new Map,r=new Set,s=[];for(let{exportName:i,resource:a}of e){if(a.kind!=="agent")continue;let c=a.config.connections;if(c===void 0)continue;if(!Array.isArray(c))throw Error(`Agent "${a.name}" config.connections must be an array of connection definitions`);let d=new Set;for(let l of c){if(!w(l))throw Error(`Agent "${a.name}" config.connections must contain connection definitions`);let p=o.get(l);if(p&&p!==a.name)throw Error(`Channel ${l.type} is already attached to agent "${p}" and cannot also attach to "${a.name}"`);if(d.has(l.type))throw Error(`Agent "${a.name}" cannot configure more than one ${l.type} channel`);o.set(l,a.name),d.add(l.type);let u=i!=="default"&&pn(i)?i:a.name,b=t.get(l)??`${u}${bt(l.type)}Channel`;if(r.has(b))throw Error(`Duplicate channel export alias: ${b}`);r.add(b),s.push({alias:b,type:l.type,id:b,agentName:a.name})}}for(let[i,a]of t)if(!o.has(i))throw Error(`Channel "${a}" must be attached to exactly one agent`);return s.sort((i,a)=>i.alias.localeCompare(a.alias))}function zo(e,n){for(let{resource:t}of e){if(t.kind!=="agent")continue;let o=t.config.connections;if(!Array.isArray(o))continue;for(let r of o){if(!w(r))continue;if(wt(r,n).length>0)continue;throw Error(`Agent "${t.name}" connection "${r.type}" reaches no rooms: declare a ${r.type} channel for it, or set allowedChannelIds: ["*"] to answer everywhere`)}}}function wt(e,n){let t=e.config.allowedChannelIds??[];if(t.includes(Ae))return[Ae];return[...new Set([...n.get(e)??[],...t])]}function Vo(e){let n=new Map;for(let t of e){if(t.kind!=="channelRecord")continue;let o=t.config;if(!w(o.connection))continue;let r=yt(t.name,o.externalId);if(r.length===0)continue;let s=n.get(o.connection)??new Set;for(let i of r)s.add(i);n.set(o.connection,s)}return n}function bt(e){return e.charAt(0).toUpperCase()+e.slice(1)}function pn(e){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(e)}async function Jo(e,n,t){let o=e.resource;if(o.kind==="agent"){let r=rr(o,n,t);return[...r.hookResource?[r.hookResource]:[],{kind:o.kind,name:o.name,...o.description?{description:o.description}:{},config:r.config}]}if(o.kind==="channelRecord"){let r=o.config,s=yt(o.name,r.externalId);return s.map((i)=>({kind:o.kind,name:s.length===1?o.name:`${o.name}-${i}`,...o.description?{description:o.description}:{},config:wr(o.name,{...r,externalId:i})}))}return[{kind:o.kind,name:o.name,...o.description?{description:o.description}:{},config:await qo(e,n)}]}function yt(e,n){if(n===void 0)return[];if(typeof n==="string")return rt(e,n),[n];if(!Array.isArray(n))throw Error(`Channel "${e}" externalId must be a string or an array`);if(n.length===0)throw Error(`Channel "${e}" externalId must not be an empty array`);let t=new Set;for(let o of n){if(typeof o!=="string"||o.length===0)throw Error(`Channel "${e}" externalId must be an array of non-empty strings`);if(t.has(o))throw Error(`Channel "${e}" externalId lists ${o} twice`);rt(e,o),t.add(o)}return n}function rt(e,n){if(n!==Ae)return;throw Error(`Channel "${e}" cannot use "${Ae}" as its id: a record matches one exact room. To answer everywhere, set allowedChannelIds: ["${Ae}"] on the connection; undeclared rooms already fall back to its agent.`)}async function qo(e,n){let t=e.resource;if(t.kind==="skill")return await ur(t.config,n);if(t.kind==="workspace"){let o={...t.config},r=ln(o.partitioned);if(delete o.partitioned,r)o.isolation=r;return Q(o)}if(t.kind==="mcp")return await gr(e,t.config,n);if(t.kind==="policy"){let o={...t.config};return o.version=o.version??1,Q(o)}if(t.kind==="cron"){let o={...t.config},r=o.agent;if(o.agentId=g(r)?r.name:r,o.name=o.name??t.name,o.status===void 0)o.status="active";if(delete o.agent,typeof o.input==="string")o.events=[{role:"user",content:[{type:"text",text:o.input}]}],delete o.input;return Q(o)}return Q(t.config)}var Zo=new Set(["apiKey","base_url","baseURL"]),Xo=new Set(["activeTools","debug","inactiveTools","permissionMode","startupTimeoutMs","type","webSearch"]),Qo=new Set(["enabled","level","subsystems"]);function er(e){if(Zo.has(e))return"";let n=e.replace(/[^a-z0-9]/gi,"").toLowerCase();if(n==="baseurl")return'"base_url" or "baseURL"';if(n==="apikey")return'"apiKey"';return""}function nr(e,n){if(n===void 0||n===null)return;if(typeof n!=="object"||Array.isArray(n))throw Error(`Agent "${e}" config.provider must be an object`);for(let[t,o]of Object.entries(n)){if(!qn(t))throw Error(`Agent "${e}" config.provider.${t} is not a supported provider (expected one of: ${Jn.join(", ")})`);if(typeof o!=="object"||o===null||Array.isArray(o))throw Error(`Agent "${e}" config.provider.${t} must be an object`);let r=o;for(let s of Object.keys(r)){let i=er(s);if(i)throw Error(`Agent "${e}" config.provider.${t} has unknown option "${s}". Did you mean ${i}?`)}if(t==="custom"&&r.base_url===void 0&&r.baseURL===void 0)throw Error(`Agent "${e}" config.provider.custom.base_url is required (use "base_url" or "baseURL")`)}}function tr(e,n){if(n===void 0||n===null)return;if(typeof n!=="object"||Array.isArray(n))throw Error(`Agent "${e}" config.harness must be an object`);let t=n;if("sandbox"in t)throw Error(`Agent "${e}" harness sandbox was removed; list it first in the agent's sandboxes`);for(let o of Object.keys(t))if(!Xo.has(o))throw Error(`Agent "${e}" config.harness has unknown option "${o}"`);if(t.type!=="claude-code"&&t.type!=="codex"&&t.type!=="deepagents"&&t.type!=="opencode"&&t.type!=="pi")throw Error(`Agent "${e}" config.harness.type must be claude-code, codex, deepagents, opencode, or pi`);if(t.permissionMode!==void 0&&t.permissionMode!=="allow-reads"&&t.permissionMode!=="allow-edits"&&t.permissionMode!=="allow-all")throw Error(`Agent "${e}" config.harness.permissionMode must be allow-reads, allow-edits, or allow-all`);if(t.type==="codex"&&t.permissionMode!==void 0&&t.permissionMode!=="allow-all")throw Error(`Agent "${e}" config.harness.permissionMode must be allow-all for codex`);if(t.startupTimeoutMs!==void 0&&(typeof t.startupTimeoutMs!=="number"||!Number.isSafeInteger(t.startupTimeoutMs)||t.startupTimeoutMs<1||t.startupTimeoutMs>600000))throw Error(`Agent "${e}" config.harness.startupTimeoutMs must be an integer from 1 to 600000`);if(t.webSearch!==void 0&&typeof t.webSearch!=="boolean")throw Error(`Agent "${e}" config.harness.webSearch must be a boolean`);if(t.type!=="codex"&&t.webSearch!==void 0)throw Error(`Agent "${e}" config.harness.webSearch is only supported by codex`);if(t.type==="pi"&&t.startupTimeoutMs!==void 0)throw Error(`Agent "${e}" config.harness.startupTimeoutMs is not supported by pi`);if(fn(e,t.activeTools,"activeTools"),fn(e,t.inactiveTools,"inactiveTools"),t.activeTools!==void 0&&t.inactiveTools!==void 0)throw Error(`Agent "${e}" config.harness must use either activeTools or inactiveTools, not both`);or(e,t.debug)}function or(e,n){if(n===void 0)return;if(typeof n!=="object"||n===null||Array.isArray(n))throw Error(`Agent "${e}" config.harness.debug must be an object`);let t=n;for(let o of Object.keys(t))if(!Qo.has(o))throw Error(`Agent "${e}" config.harness.debug has unknown option "${o}"`);if(t.enabled!==void 0&&typeof t.enabled!=="boolean")throw Error(`Agent "${e}" config.harness.debug.enabled must be a boolean`);if(t.level!==void 0&&t.level!=="error"&&t.level!=="warn"&&t.level!=="info"&&t.level!=="debug"&&t.level!=="trace")throw Error(`Agent "${e}" config.harness.debug.level must be error, warn, info, debug, or trace`);fn(e,t.subsystems,"debug.subsystems")}function fn(e,n,t){if(n!==void 0&&(!Array.isArray(n)||!n.every((o)=>typeof o==="string"&&o.trim().length>0)))throw Error(`Agent "${e}" config.harness.${t} must be an array of non-empty strings`)}function rr(e,n,t){let o={...e.config};nr(e.name,o.provider),tr(e.name,o.harness);let r=Array.isArray(o.sandboxes)?o.sandboxes.map((i)=>g(i)?i.name:i):void 0;if(r)o.sandboxes=r;r?.forEach((i,a)=>{if(r.indexOf(i)===a)return;throw Error(`Agent "${e.name}" sandboxes[${a}] "${String(i)}" is listed more than once`)});let s=sr(e.name,o.hooks);if(s)o.hooks=s.agentHooksConfig;else if(o.hooks!==void 0)o.hooks=vt(o.hooks,e.name);if(o.connections!==void 0){if(!Array.isArray(o.connections))throw Error(`Agent "${e.name}" config.connections must be an array of connection definitions`);o.channels=Object.fromEntries(o.connections.map((i)=>{if(!w(i))throw Error(`Agent "${e.name}" config.connections must contain connection definitions`);let a=`${e.name}${bt(i.type)}Channel`,c=wt(i,t);return[i.type,{id:a,...i.config,...i.partition?{partition:i.partition}:{},allowedChannelIds:c}]})),delete o.connections}if(Array.isArray(o.workspaces)){let i=o.workspaces.map((a)=>mr(a,e.name));for(let a of i){let c=r?.indexOf(a.sandbox)??-1;if(c>=1)throw Error(`Agent "${e.name}" sandboxes[${c}] "${String(a.sandbox)}" also backs workspace "${String(a.name)}"; only the first sandbox can back a workspace`)}o.workspaces=i}if(o.harness&&!r?.length)throw Error(`Agent "${e.name}" runs a harness, so it needs sandboxes; the first runs the harness`);if(o.policies!==void 0){let i=cr(o.policies,e.name);if(i)o.policies=i;else delete o.policies}return{config:Q(o),...s?.hookResource?{hookResource:s.hookResource}:{}}}function sr(e,n){if(n===void 0)return;if(!n||typeof n!=="object"||Array.isArray(n))throw Error(`Agent "${e}" config.hooks must be an object`);let t=n,o=Object.keys(un).flatMap((d)=>{let l=t[d];if(l===void 0)return[];if(typeof l!=="function")throw Error(`Agent "${e}" config.hooks.${d} must be a function`);return[{name:d,event:un[d],source:ir(l.toString())}]});if(o.length===0)return;let r=`${e}-hooks`,s=ar(e,o),i=Buffer.byteLength(s);if(i>We)throw Error(`Agent "${e}" hook bundle is too large (${i} bytes, max ${We})`);let a=o.map((d)=>d.event),c=vt(t,e);return c.code=[{hookId:r}],{agentHooksConfig:c,hookResource:{kind:"hook",name:r,description:`Inline hooks for agent ${e}`,config:{events:a,bundle:s,sha256:xe(s)}}}}function vt(e,n){if(!e||typeof e!=="object"||Array.isArray(e))throw Error(`Agent "${n}" config.hooks must be an object`);let t=Object.entries(e);for(let[r]of t){if(r==="webhooks"||r in un)continue;throw Error(`Agent "${n}" config.hooks.${r} is not supported. Use inline hook callbacks or hooks.webhooks.`)}return Object.fromEntries(t.filter(([r])=>r==="webhooks"))}function ir(e){let n=e.trim();if(/^(async\s+)?function\b/.test(n)||/^(async\s*)?\(/.test(n)||/^(async\s+)?[A-Za-z_$][\w$]*\s*=>/.test(n))return n;if(/^(async\s+)?[A-Za-z_$][\w$]*\s*\(/.test(n))return n.replace(/^(async\s+)?/,"$1function ");return n}function ar(e,n){let t=`export default {
+`,We=1e7,Zn=50000000,ut=1e7,Xn=20000000,Qn=200,Ro=new Set(["node_modules",".git"]),Oo=[/^\.env(?:\.|$)/i,/^id_(?:rsa|dsa|ecdsa|ed25519)(?:\.pub)?$/i,/\.(?:pem|key|p12|pfx)$/i],ln={onStart:"agent.started",onStepFinish:"agent.step.finished",onToolCall:"tool.call.started",onToolResult:"tool.result",onFinish:"agent.finished",onApproval:"agent.approval.required",onError:"agent.failed",onSubagentFinish:"subagent.task.finished",onMessageReceived:"channel.message.received",onMessageSending:"channel.message.sending"};async function de(e={}){let n=e.cwd??process.cwd();h(n);let t=Ge(n,y);if(!yo(t))throw Error(`No ${y}/ folder in ${n}. Run \`broods dev\` to scaffold one.`);let o=await xo(t),r=await Po(o),s=await To(r,n,e.project),i=r.filter((b)=>g(b.value)).map((b)=>({exportName:b.exportName,file:b.file,resource:b.value})),a=i.map((b)=>b.resource);tt(a),Fo(a);let c=Ho(i,r),d=zo(a);for(let b of a)_o(b);for(let b of a)Do(b);for(let b of a)Uo(b);No(a),Mo(a),Yo(i,d);let l=Ko(i),p=Ao(s,e.stage??(e.useRuntimeStage===!1?void 0:v()),e.command??"dev"),u=(await Promise.all(i.map((b)=>Vo(b,t,d)))).flat().sort((b,S)=>`${b.kind}:${b.name}`.localeCompare(`${S.kind}:${S.name}`));return tt(u),{config:s,resources:a,resourceAliases:l,channels:c,manifest:{version:1,project:s.project,stage:p,resources:u}}}function gt(e){let n=new Set;for(let t of e.resources)dn(t.config,n);return[...n].sort()}function dn(e,n){if(Array.isArray(e)){for(let t of e)dn(t,n);return}if(e&&typeof e==="object"){let t=e;if(t.__beeblastEnv===!0&&typeof t.name==="string"){n.add(t.name);return}for(let o of Object.values(t))dn(o,n)}}function Ao(e,n,t){if(n)return n;let o=e.stages?.[t];if(o)return o;return t==="deploy"?"production":"development"}async function xo(e){let n=[];async function t(o){let r=await at(o,{withFileTypes:!0});for(let s of r){let i=le(o,s.name);if(s.isDirectory()){if(s.name===_||s.name==="generated")continue;await t(i)}else if(s.isFile()&&s.name.endsWith(".ts"))n.push(i)}}return await t(e),n.sort((o,r)=>Se(e,o).localeCompare(Se(e,r)))}async function Po(e){jo();let n=[];for(let t of e){let r=await import(`${st(t).href}?t=${Date.now()}`);n.push(...Object.entries(r).map(([s,i])=>({exportName:s,file:t,value:i})))}return n}var et=!1;function jo(){if(et)return;if(et=!0,typeof qn.registerHooks!=="function")return;qn.registerHooks({load:(e,n,t)=>{let[o]=e.split("?");if(o===void 0||!o.startsWith("file:")||!o.endsWith(".ts"))return t(e,n);let r=wo(o);return{format:"module",shortCircuit:!0,source:dt(vo(r,"utf8"),{loader:"ts",format:"esm",sourcefile:r,sourcemap:"inline"}).code}}})}async function To(e,n,t){let r=e.find((i)=>ie(i.value))?.value?.config??{},s=t??process.env.BROODS_PROJECT??r.project??kr(So(Ge(n)));if(!s.trim())throw Error("Project name is required. Pass --project <name> or set BROODS_PROJECT.");return{...r,project:s}}var nt=new Set(["agent","harness","model","provider","session","hooks","connections","tools","mcp","denyTools","sandboxes","workspaces","subagent","skills","scheduler","policies","publicAccess","allowRunOverrides"]),Io={workspace:"workspaces",skill:"skills",policy:"policies",tool:"tools",mcpServers:"mcp",channel:"connections",channels:"connections",hook:"hooks",subagents:"subagent",systemPrompt:"agent",system:"agent"};function _o(e){if(e.kind!=="agent")return;let n=e.config;for(let t of Object.keys(n)){if(nt.has(t))continue;if(t==="sandbox")throw Error(`Agent "${e.name}" config.sandbox was removed; use sandboxes, the first is the default`);let o=Io[t],r=o?` Did you mean "${o}"?`:` Allowed keys: ${[...nt].sort().join(", ")}.`;throw Error(`Agent "${e.name}" has an unknown config key "${t}".${r}`)}}function Do(e){if(e.kind!=="workspace")return;let t=e.config.storage;if(t===void 0)return;if(!t||typeof t!=="object"||Array.isArray(t))throw Error(`Workspace "${e.name}" config.storage must be an object`);let o=t.provider;if(o===void 0||o==="s3")return;if(o==="vercel")throw Error(`Workspace "${e.name}" uses storage.provider "vercel", but Vercel Drive workspace storage is not supported yet. Use storage.provider "s3" or omit storage until Vercel Drive is wired.`);throw Error(`Workspace "${e.name}" config.storage.provider must be one of: s3`)}function Uo(e){if(e.kind!=="workspace")return;let n=e.config;if(n.partitioned!==void 0&&!Jn(n.partitioned))throw Error(`Workspace "${e.name}" config.partitioned must be one of: ${an.join(", ")}`);if(n.isolation!==void 0)throw Error(`Workspace "${e.name}" config.isolation is no longer supported; use partitioned.`)}function No(e){let n=new Map(e.filter((t)=>t.kind==="workspace").map((t)=>[t.name,t]));for(let t of e){if(t.kind!=="agent")continue;let o=t.config,r=o.connections;if(r!==void 0&&!Array.isArray(r))throw Error(`Agent "${t.name}" config.connections must be an array of connection definitions`);let s=Array.isArray(r)?r.filter(w):[],i=new Set;for(let l of s){let p=l.config,u=typeof p.id==="string"?p.id:void 0;if(u){if(i.has(u))throw Error(`Duplicate channel id: ${u}`);i.add(u)}if(l.partition)pt(l.partition,`Agent "${t.name}" connection "${l.type}"`);if(l.config&&typeof l.config==="object"&&(("workspaceIsolationScope"in l.config)||("workspaceScope"in l.config)))throw Error(`Agent "${t.name}" connection "${l.type}" uses workspaceScope, which is no longer supported; use partition.`)}let c=(Array.isArray(o.workspaces)?o.workspaces.map((l)=>Lo(l,n)).filter((l)=>Boolean(l)):[]).filter((l)=>l.config.partitioned==="conversation"),d=s.filter((l)=>l.partition);if(d.length>0&&c.length===0){let l=d[0];throw Error(`Agent "${t.name}" connection "${l.type}" defines partition, but no attached workspace has partitioned: "conversation".`)}if(c.length>0){for(let l of s)if(!l.partition)throw Error(`Agent "${t.name}" attaches partitioned workspace "${c[0].name}", but connection "${l.type}" does not define partition.`)}}}function pt(e,n){if(!e)return;if(e.by==="shared"){if("alias"in e&&e.alias!==void 0)throw Error(`${n} partition.alias is only supported when partition.by is conversation`);return}if(e.by!=="conversation")throw Error(`${n} partition.by must be one of: shared, conversation`);if(typeof e.alias!=="string"||e.alias.length===0)throw Error(`${n} partition.alias is required when partition.by is conversation`);if(!/^[A-Za-z0-9._-]+$/.test(e.alias))throw Error(`${n} partition.alias must use only letters, numbers, dots, underscores, or hyphens`);if(e.alias==="."||e.alias==="..")throw Error(`${n} partition.alias must not be "." or ".."`)}function Lo(e,n){if(g(e)&&e.kind==="workspace")return e;if(typeof e==="string")return n.get(e);if(e&&typeof e==="object"&&"workspace"in e){let t=e.workspace;if(g(t)&&t.kind==="workspace")return t;if(typeof t==="string")return n.get(t)}return}function Mo(e){let n=new Map(e.filter((t)=>t.kind==="sandbox").map((t)=>[t.name,t]));for(let t of e){if(t.kind!=="agent")continue;let o=t.config,r=ft(Array.isArray(o.sandboxes)?o.sandboxes[0]:void 0,n),s=o.workspaces;if(!Array.isArray(s))continue;for(let i of s){let a=Go(i),c=Bo(i,r,n);if(!c||Wo(c))continue;throw Error(`Agent "${t.name}" workspace "${a}" uses sandbox "${c.name}" (${mt(c)}) which does not support S3 workspace mounts. Use lambda/sandbox, or daytona with options.mountAwsS3Buckets: true, or set this workspace ref to sandbox: null for read-only S3 access.`)}}}function ft(e,n){if(g(e)&&e.kind==="sandbox")return e;if(typeof e==="string")return n.get(e);return}function Bo(e,n,t){if(e&&typeof e==="object"&&"sandbox"in e){let o=e.sandbox;if(o===null)return;return ft(o,t)}return n}function Go(e){if(g(e)&&e.kind==="workspace")return e.name;if(e&&typeof e==="object"&&"workspace"in e){let n=e.workspace;if(g(n))return n.name;if(typeof n==="string")return n}return"<unknown>"}function Wo(e){let n=mt(e);if(n==="lambda"||n==="sandbox")return!0;if(n!=="daytona")return!1;let t=e.config.options;return Boolean(t&&typeof t==="object"&&!Array.isArray(t)&&t.mountAwsS3Buckets===!0)}function mt(e){return typeof e.config.provider==="string"?e.config.provider:"lambda"}function Fo(e){let n=new Set(e.filter((t)=>t.kind==="sandbox").map((t)=>t.name));for(let t of e){if(t.kind!=="agent")continue;let o=t.config.sandboxes;if(o===void 0)continue;if(!Array.isArray(o))throw Error(`Agent "${t.name}" sandboxes must be an array of sandbox resources or names`);let r=o;for(let[s,i]of r.entries()){let a=typeof i==="string"&&i.trim().length>0,c=g(i)&&i.kind==="sandbox";if(!a&&!c)throw Error(`Agent "${t.name}" sandboxes[${s}] must be a sandbox resource or a non-empty name`);if(c&&!n.has(i.name))throw Error(`Agent "${t.name}" sandboxes references sandbox "${i.name}", but that sandbox is not exported from broods/`)}}}function tt(e){let n=new Set;for(let t of e){let o=`${t.kind}:${t.name}`;if(n.has(o))throw Error(`Duplicate resource: ${o}`);n.add(o)}}function Ko(e){let n={},t=new Set;for(let{exportName:o,resource:r}of e){if(o==="default"||!un(o))continue;let s=`${r.kind}:${o}`;if(t.has(s))throw Error(`Duplicate export alias for ${r.kind}: ${o}`);t.add(s),n[r.kind]??={},n[r.kind][r.name]=o}return n}function Ho(e,n){let t=new Map;for(let i of n){if(!w(i.value)||i.exportName==="default"||!un(i.exportName))continue;let a=t.get(i.value);if(a&&a!==i.exportName)throw Error(`Channel is exported more than once: ${a}, ${i.exportName}`);t.set(i.value,i.exportName)}let o=new Map,r=new Set,s=[];for(let{exportName:i,resource:a}of e){if(a.kind!=="agent")continue;let c=a.config.connections;if(c===void 0)continue;if(!Array.isArray(c))throw Error(`Agent "${a.name}" config.connections must be an array of connection definitions`);let d=new Set;for(let l of c){if(!w(l))throw Error(`Agent "${a.name}" config.connections must contain connection definitions`);let p=o.get(l);if(p&&p!==a.name)throw Error(`Channel ${l.type} is already attached to agent "${p}" and cannot also attach to "${a.name}"`);if(d.has(l.type))throw Error(`Agent "${a.name}" cannot configure more than one ${l.type} channel`);o.set(l,a.name),d.add(l.type);let u=i!=="default"&&un(i)?i:a.name,b=t.get(l)??`${u}${wt(l.type)}Channel`;if(r.has(b))throw Error(`Duplicate channel export alias: ${b}`);r.add(b),s.push({alias:b,type:l.type,id:b,agentName:a.name})}}for(let[i,a]of t)if(!o.has(i))throw Error(`Channel "${a}" must be attached to exactly one agent`);return s.sort((i,a)=>i.alias.localeCompare(a.alias))}function Yo(e,n){for(let{resource:t}of e){if(t.kind!=="agent")continue;let o=t.config.connections;if(!Array.isArray(o))continue;for(let r of o){if(!w(r))continue;if(ht(r,n).length>0)continue;throw Error(`Agent "${t.name}" connection "${r.type}" reaches no rooms: declare a ${r.type} channel for it, or set allowedChannelIds: ["*"] to answer everywhere`)}}}function ht(e,n){let t=e.config.allowedChannelIds??[];if(t.includes(Ae))return[Ae];return[...new Set([...n.get(e)??[],...t])]}function zo(e){let n=new Map;for(let t of e){if(t.kind!=="channelRecord")continue;let o=t.config;if(!w(o.connection))continue;let r=bt(t.name,o.externalId);if(r.length===0)continue;let s=n.get(o.connection)??new Set;for(let i of r)s.add(i);n.set(o.connection,s)}return n}function wt(e){return e.charAt(0).toUpperCase()+e.slice(1)}function un(e){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(e)}async function Vo(e,n,t){let o=e.resource;if(o.kind==="agent"){let r=or(o,n,t);return[...r.hookResource?[r.hookResource]:[],{kind:o.kind,name:o.name,...o.description?{description:o.description}:{},config:r.config}]}if(o.kind==="channelRecord"){let r=o.config,s=bt(o.name,r.externalId);return s.map((i)=>({kind:o.kind,name:s.length===1?o.name:`${o.name}-${i}`,...o.description?{description:o.description}:{},config:hr(o.name,{...r,externalId:i})}))}return[{kind:o.kind,name:o.name,...o.description?{description:o.description}:{},config:await Jo(e,n)}]}function bt(e,n){if(n===void 0)return[];if(typeof n==="string")return ot(e,n),[n];if(!Array.isArray(n))throw Error(`Channel "${e}" externalId must be a string or an array`);if(n.length===0)throw Error(`Channel "${e}" externalId must not be an empty array`);let t=new Set;for(let o of n){if(typeof o!=="string"||o.length===0)throw Error(`Channel "${e}" externalId must be an array of non-empty strings`);if(t.has(o))throw Error(`Channel "${e}" externalId lists ${o} twice`);ot(e,o),t.add(o)}return n}function ot(e,n){if(n!==Ae)return;throw Error(`Channel "${e}" cannot use "${Ae}" as its id: a record matches one exact room. To answer everywhere, set allowedChannelIds: ["${Ae}"] on the connection; undeclared rooms already fall back to its agent.`)}async function Jo(e,n){let t=e.resource;if(t.kind==="skill")return await dr(t.config,n);if(t.kind==="workspace"){let o={...t.config},r=o.partitioned;if(delete o.partitioned,r!==void 0)o.isolation=r;return Q(o)}if(t.kind==="mcp")return await ur(e,t.config,n);if(t.kind==="policy"){let o={...t.config};return o.version=o.version??1,Q(o)}if(t.kind==="cron"){let o={...t.config},r=o.agent;if(o.agentId=g(r)?r.name:r,o.name=o.name??t.name,o.status===void 0)o.status="active";if(delete o.agent,typeof o.input==="string")o.events=[{role:"user",content:[{type:"text",text:o.input}]}],delete o.input;return Q(o)}return Q(t.config)}var qo=new Set(["apiKey","base_url","baseURL"]),Zo=new Set(["activeTools","debug","inactiveTools","permissionMode","startupTimeoutMs","type","webSearch"]),Xo=new Set(["enabled","level","subsystems"]);function Qo(e){if(qo.has(e))return"";let n=e.replace(/[^a-z0-9]/gi,"").toLowerCase();if(n==="baseurl")return'"base_url" or "baseURL"';if(n==="apikey")return'"apiKey"';return""}function er(e,n){if(n===void 0||n===null)return;if(typeof n!=="object"||Array.isArray(n))throw Error(`Agent "${e}" config.provider must be an object`);for(let[t,o]of Object.entries(n)){if(!Vn(t))throw Error(`Agent "${e}" config.provider.${t} is not a supported provider (expected one of: ${zn.join(", ")})`);if(typeof o!=="object"||o===null||Array.isArray(o))throw Error(`Agent "${e}" config.provider.${t} must be an object`);let r=o;for(let s of Object.keys(r)){let i=Qo(s);if(i)throw Error(`Agent "${e}" config.provider.${t} has unknown option "${s}". Did you mean ${i}?`)}if(t==="custom"&&r.base_url===void 0&&r.baseURL===void 0)throw Error(`Agent "${e}" config.provider.custom.base_url is required (use "base_url" or "baseURL")`)}}function nr(e,n){if(n===void 0||n===null)return;if(typeof n!=="object"||Array.isArray(n))throw Error(`Agent "${e}" config.harness must be an object`);let t=n;if("sandbox"in t)throw Error(`Agent "${e}" harness sandbox was removed; list it first in the agent's sandboxes`);for(let o of Object.keys(t))if(!Zo.has(o))throw Error(`Agent "${e}" config.harness has unknown option "${o}"`);if(t.type!=="claude-code"&&t.type!=="codex"&&t.type!=="deepagents"&&t.type!=="opencode"&&t.type!=="pi")throw Error(`Agent "${e}" config.harness.type must be claude-code, codex, deepagents, opencode, or pi`);if(t.permissionMode!==void 0&&t.permissionMode!=="allow-reads"&&t.permissionMode!=="allow-edits"&&t.permissionMode!=="allow-all")throw Error(`Agent "${e}" config.harness.permissionMode must be allow-reads, allow-edits, or allow-all`);if(t.type==="codex"&&t.permissionMode!==void 0&&t.permissionMode!=="allow-all")throw Error(`Agent "${e}" config.harness.permissionMode must be allow-all for codex`);if(t.startupTimeoutMs!==void 0&&(typeof t.startupTimeoutMs!=="number"||!Number.isSafeInteger(t.startupTimeoutMs)||t.startupTimeoutMs<1||t.startupTimeoutMs>600000))throw Error(`Agent "${e}" config.harness.startupTimeoutMs must be an integer from 1 to 600000`);if(t.webSearch!==void 0&&typeof t.webSearch!=="boolean")throw Error(`Agent "${e}" config.harness.webSearch must be a boolean`);if(t.type!=="codex"&&t.webSearch!==void 0)throw Error(`Agent "${e}" config.harness.webSearch is only supported by codex`);if(t.type==="pi"&&t.startupTimeoutMs!==void 0)throw Error(`Agent "${e}" config.harness.startupTimeoutMs is not supported by pi`);if(gn(e,t.activeTools,"activeTools"),gn(e,t.inactiveTools,"inactiveTools"),t.activeTools!==void 0&&t.inactiveTools!==void 0)throw Error(`Agent "${e}" config.harness must use either activeTools or inactiveTools, not both`);tr(e,t.debug)}function tr(e,n){if(n===void 0)return;if(typeof n!=="object"||n===null||Array.isArray(n))throw Error(`Agent "${e}" config.harness.debug must be an object`);let t=n;for(let o of Object.keys(t))if(!Xo.has(o))throw Error(`Agent "${e}" config.harness.debug has unknown option "${o}"`);if(t.enabled!==void 0&&typeof t.enabled!=="boolean")throw Error(`Agent "${e}" config.harness.debug.enabled must be a boolean`);if(t.level!==void 0&&t.level!=="error"&&t.level!=="warn"&&t.level!=="info"&&t.level!=="debug"&&t.level!=="trace")throw Error(`Agent "${e}" config.harness.debug.level must be error, warn, info, debug, or trace`);gn(e,t.subsystems,"debug.subsystems")}function gn(e,n,t){if(n!==void 0&&(!Array.isArray(n)||!n.every((o)=>typeof o==="string"&&o.trim().length>0)))throw Error(`Agent "${e}" config.harness.${t} must be an array of non-empty strings`)}function or(e,n,t){let o={...e.config};er(e.name,o.provider),nr(e.name,o.harness);let r=Array.isArray(o.sandboxes)?o.sandboxes.map((i)=>g(i)?i.name:i):void 0;if(r)o.sandboxes=r;r?.forEach((i,a)=>{if(r.indexOf(i)===a)return;throw Error(`Agent "${e.name}" sandboxes[${a}] "${String(i)}" is listed more than once`)});let s=rr(e.name,o.hooks);if(s)o.hooks=s.agentHooksConfig;else if(o.hooks!==void 0)o.hooks=yt(o.hooks,e.name);if(o.connections!==void 0){if(!Array.isArray(o.connections))throw Error(`Agent "${e.name}" config.connections must be an array of connection definitions`);o.channels=Object.fromEntries(o.connections.map((i)=>{if(!w(i))throw Error(`Agent "${e.name}" config.connections must contain connection definitions`);let a=`${e.name}${wt(i.type)}Channel`,c=ht(i,t);return[i.type,{id:a,...i.config,...i.partition?{partition:i.partition}:{},allowedChannelIds:c}]})),delete o.connections}if(Array.isArray(o.workspaces)){let i=o.workspaces.map((a)=>fr(a,e.name));for(let a of i){let c=r?.indexOf(a.sandbox)??-1;if(c>=1)throw Error(`Agent "${e.name}" sandboxes[${c}] "${String(a.sandbox)}" also backs workspace "${String(a.name)}"; only the first sandbox can back a workspace`)}o.workspaces=i}if(o.harness&&!r?.length)throw Error(`Agent "${e.name}" runs a harness, so it needs sandboxes; the first runs the harness`);if(o.policies!==void 0){let i=ar(o.policies,e.name);if(i)o.policies=i;else delete o.policies}return{config:Q(o),...s?.hookResource?{hookResource:s.hookResource}:{}}}function rr(e,n){if(n===void 0)return;if(!n||typeof n!=="object"||Array.isArray(n))throw Error(`Agent "${e}" config.hooks must be an object`);let t=n,o=Object.keys(ln).flatMap((d)=>{let l=t[d];if(l===void 0)return[];if(typeof l!=="function")throw Error(`Agent "${e}" config.hooks.${d} must be a function`);return[{name:d,event:ln[d],source:sr(l.toString())}]});if(o.length===0)return;let r=`${e}-hooks`,s=ir(e,o),i=Buffer.byteLength(s);if(i>We)throw Error(`Agent "${e}" hook bundle is too large (${i} bytes, max ${We})`);let a=o.map((d)=>d.event),c=yt(t,e);return c.code=[{hookId:r}],{agentHooksConfig:c,hookResource:{kind:"hook",name:r,description:`Inline hooks for agent ${e}`,config:{events:a,bundle:s,sha256:xe(s)}}}}function yt(e,n){if(!e||typeof e!=="object"||Array.isArray(e))throw Error(`Agent "${n}" config.hooks must be an object`);let t=Object.entries(e);for(let[r]of t){if(r==="webhooks"||r in ln)continue;throw Error(`Agent "${n}" config.hooks.${r} is not supported. Use inline hook callbacks or hooks.webhooks.`)}return Object.fromEntries(t.filter(([r])=>r==="webhooks"))}function sr(e){let n=e.trim();if(/^(async\s+)?function\b/.test(n)||/^(async\s*)?\(/.test(n)||/^(async\s+)?[A-Za-z_$][\w$]*\s*=>/.test(n))return n;if(/^(async\s+)?[A-Za-z_$][\w$]*\s*\(/.test(n))return n.replace(/^(async\s+)?/,"$1function ");return n}function ir(e,n){let t=`export default {
 ${n.map((o)=>`  ${JSON.stringify(o.event)}: ${o.source},`).join(`
 `)}
 };
-`;try{return ut(t,{loader:"ts"}).code}catch(o){let r=o instanceof Error?o.message:String(o);throw Error(`Agent "${e}" inline hooks failed to transpile: ${r}`)}}function cr(e,n){if(!Array.isArray(e))throw Error(`Agent "${n}" config.policies must be an array`);let t=e.map((o)=>{if(g(o)&&o.kind==="policy")return o.name;if(typeof o==="string")return o;throw Error(`Agent "${n}" config.policies must contain definePolicy(...) resources or strings`)});return t.length>0?t:void 0}async function lr(e,n){let t=await at(le(dt(),"broods-mcp-"));try{let o=le(t,"server.mjs");await dn(o,n,"utf8");let r;try{r=await import(it(o).href)}catch(a){throw Error(`MCP server bundle ${e} failed to import: ${a instanceof Error?a.message:String(a)}`)}let s=r.default;if(!(typeof s==="function"||typeof s==="object"&&s!==null&&typeof s.fetch==="function"))throw Error(`MCP server bundle ${e} default export must be a fetch handler (createMcpHandler)`)}finally{await lt(t,{recursive:!0,force:!0})}}async function dr(e){let n=await Co({entryPoints:[e.entryPoint],bundle:!0,platform:"node",format:"esm",minify:!1,write:!1,logLevel:"silent",plugins:e.plugins??[]}).catch((t)=>{let o=vr(t)?t.errors.map((r)=>r.text).filter(Boolean).join("; "):t instanceof Error?t.message:String(t);throw Error(`${e.label} ${e.manifestPath} failed to build${o?`: ${o}`:""}`)});if(n.outputFiles.length!==1)throw Error(`${e.label} ${e.manifestPath} failed to build: expected one output file`);return n.outputFiles[0].text}async function ur(e,n){let t=hr(n,e.path,"Skill"),o=Se(n,t).split("\\").join("/"),r=await br(t);if(!r.some((s)=>s.path==="SKILL.md"))throw Error(`Skill folder ${e.path} must contain SKILL.md`);return{source:"files",path:o,files:r}}async function gr(e,n,t){let{handler:o,...r}=n,s=[o,n.url,n.sandbox].filter((l)=>l!==void 0).length;if(s>1)throw Error(`MCP server "${e.resource.name}" declares more than one of url, handler and sandbox; pick one`);if(o===void 0){if(s===0)throw Error(`MCP server "${e.resource.name}" needs url (external), handler (hosted) or sandbox (on a machine)`);return Q(r)}let i=Se(t,e.file).split("\\").join("/");yr(i,"MCP server");let a=await at(le(dt(),"broods-mcp-shim-")),c;try{let l=le(a,"mcp-handler.mjs");await dn(l,pr(e),"utf8"),await dn(le(a,"broods-stub.mjs"),Ro,"utf8"),c=await dr({entryPoint:l,label:"MCP server bundle",manifestPath:i,plugins:[fr(a)]})}finally{await lt(a,{recursive:!0,force:!0})}let d=Buffer.byteLength(c);if(d>Xn)throw Error(`MCP server bundle ${i} is too large (${d} bytes, max ${Xn})`);return await lr(i,c),{...Q(r),bundle:c,sha256:xe(c)}}function pr(e){return`import * as __exports from ${JSON.stringify(e.file)};
+`;try{return dt(t,{loader:"ts"}).code}catch(o){let r=o instanceof Error?o.message:String(o);throw Error(`Agent "${e}" inline hooks failed to transpile: ${r}`)}}function ar(e,n){if(!Array.isArray(e))throw Error(`Agent "${n}" config.policies must be an array`);let t=e.map((o)=>{if(g(o)&&o.kind==="policy")return o.name;if(typeof o==="string")return o;throw Error(`Agent "${n}" config.policies must contain definePolicy(...) resources or strings`)});return t.length>0?t:void 0}async function cr(e,n){let t=await it(le(lt(),"broods-mcp-"));try{let o=le(t,"server.mjs");await cn(o,n,"utf8");let r;try{r=await import(st(o).href)}catch(a){throw Error(`MCP server bundle ${e} failed to import: ${a instanceof Error?a.message:String(a)}`)}let s=r.default;if(!(typeof s==="function"||typeof s==="object"&&s!==null&&typeof s.fetch==="function"))throw Error(`MCP server bundle ${e} default export must be a fetch handler (createMcpHandler)`)}finally{await ct(t,{recursive:!0,force:!0})}}async function lr(e){let n=await Eo({entryPoints:[e.entryPoint],bundle:!0,platform:"node",format:"esm",minify:!1,write:!1,logLevel:"silent",plugins:e.plugins??[]}).catch((t)=>{let o=yr(t)?t.errors.map((r)=>r.text).filter(Boolean).join("; "):t instanceof Error?t.message:String(t);throw Error(`${e.label} ${e.manifestPath} failed to build${o?`: ${o}`:""}`)});if(n.outputFiles.length!==1)throw Error(`${e.label} ${e.manifestPath} failed to build: expected one output file`);return n.outputFiles[0].text}async function dr(e,n){let t=mr(n,e.path,"Skill"),o=Se(n,t).split("\\").join("/"),r=await wr(t);if(!r.some((s)=>s.path==="SKILL.md"))throw Error(`Skill folder ${e.path} must contain SKILL.md`);return{source:"files",path:o,files:r}}async function ur(e,n,t){let{handler:o,...r}=n,s=[o,n.url,n.sandbox].filter((l)=>l!==void 0).length;if(s>1)throw Error(`MCP server "${e.resource.name}" declares more than one of url, handler and sandbox; pick one`);if(o===void 0){if(s===0)throw Error(`MCP server "${e.resource.name}" needs url (external), handler (hosted) or sandbox (on a machine)`);return Q(r)}let i=Se(t,e.file).split("\\").join("/");br(i,"MCP server");let a=await it(le(lt(),"broods-mcp-shim-")),c;try{let l=le(a,"mcp-handler.mjs");await cn(l,gr(e),"utf8"),await cn(le(a,"broods-stub.mjs"),Co,"utf8"),c=await lr({entryPoint:l,label:"MCP server bundle",manifestPath:i,plugins:[pr(a)]})}finally{await ct(a,{recursive:!0,force:!0})}let d=Buffer.byteLength(c);if(d>Zn)throw Error(`MCP server bundle ${i} is too large (${d} bytes, max ${Zn})`);return await cr(i,c),{...Q(r),bundle:c,sha256:xe(c)}}function gr(e){return`import * as __exports from ${JSON.stringify(e.file)};
 const __mcp = __exports[${JSON.stringify(e.exportName)}];
 export default __mcp?.config?.handler ?? __mcp?.handler;
-`}function fr(e){let n=le(e,"broods-stub.mjs");return{name:"broods-sdk-stub",setup:function(t){t.onResolve({filter:/^broods(\/.*)?$/},()=>({path:n}))}}}function mr(e,n){if(g(e))return{name:e.name,workspaceId:e.name};if(e&&typeof e==="object"&&"workspace"in e){let t=e.workspace,o=g(t)?t.name:t;if(typeof o!=="string")throw Error(`Agent ${n} workspace ref must be a defineWorkspace(...) resource or its name`);let r={name:o,workspaceId:o};if("sandbox"in e){let s=e.sandbox;r.sandbox=s===null?null:g(s)?s.name:s}return r}throw Error(`Agent ${n} workspaces must be defineWorkspace(...) resources or { workspace, sandbox } refs`)}function hr(e,n,t){if(n.trim().length===0)throw Error(`${t} path is required`);if(n.includes("\x00"))throw Error(`${t} path must not contain null bytes`);let o=Ge(e),r=Ge(o,n),s=Se(o,r);if(s===""||!s.startsWith("..")&&!Eo(s))return r;throw Error(`${t} path ${n} must stay inside ${y}/`)}function wr(e,n){let t={...n},o=t.connection;if(!w(o))throw Error(`Channel "${e}" config.connection must be a connection definition`);return delete t.connection,t.platform=o.type,ft(t.partition,`Channel "${e}"`),Q(t)}function Q(e){if(Array.isArray(e))return e.map((n)=>Q(n));if(g(e))return e.name;if(e&&typeof e==="object")return Object.fromEntries(Object.entries(e).map(([n,t])=>[n,Q(t)]));return e}async function br(e){let n=[],t=0;async function o(r){let s=await ct(r,{withFileTypes:!0});for(let i of s){let a=le(r,i.name),c=Se(e,a).split("\\").join("/");if(i.isDirectory()){if(st(i.name))continue;await o(a)}else if(i.isFile()){if(st(i.name)||kt(c))continue;let d=await So(a);if(d.byteLength>We)throw Error(`Skill bundle file ${c} is too large (${d.byteLength} bytes, max ${We})`);if(t+=d.byteLength,t>Qn)throw Error(`Skill bundle at ${e} is too large (${t} bytes, max ${Qn})`);if(n.length>=et)throw Error(`Skill bundle at ${e} has too many files (max ${et})`);n.push({path:c,size:d.byteLength,sha256:xe(d),contentBase64:d.toString("base64"),contentType:kr(c)})}}}return await o(e),n.sort((r,s)=>String(r.path).localeCompare(String(s.path)))}function st(e){return e.startsWith(".")||Oo.has(e)}function yr(e,n){if(kt(e))throw Error(`${n} bundle path ${e} looks like a hidden file or secret and will not be bundled`)}function vr(e){return e instanceof Error&&Array.isArray(e.errors)}function kt(e){return e.split("/").some((t)=>t.startsWith(".")||Ao.some((o)=>o.test(t)))}function xe(e){return yo("sha256").update(e).digest("hex")}function kr(e){if(e.endsWith(".md"))return"text/markdown; charset=utf-8";if(e.endsWith(".json"))return"application/json";if(e.endsWith(".js")||e.endsWith(".mjs"))return"application/javascript";if(e.endsWith(".ts"))return"text/typescript; charset=utf-8";if(e.endsWith(".txt"))return"text/plain; charset=utf-8";return"application/octet-stream"}function Sr(e){return e.replace(/^@/,"").replace(/\//g,"-").replace(/[^A-Za-z0-9_-]+/g,"-").replace(/^-+|-+$/g,"")}import{mkdir as $r,writeFile as Fe}from"node:fs/promises";import{resolve as Pe}from"node:path";async function Ke(e,n,t=process.cwd(),o={},r=null,s=[]){let i=Pe(t,y,_),a=Er(n,e);await $r(i,{recursive:!0}),await Fe(Pe(i,"ids.ts"),Or(a),"utf8"),await Fe(Pe(i,"api.ts"),Cr(e,a,o,r,s),"utf8"),await Fe(Pe(i,"resources.ts"),Ar(e),"utf8"),await Fe(Pe(i,"dataModel.ts"),Rr(),"utf8")}function Er(e,n){let t={agents:ue(n,"agent"),workspaces:ue(n,"workspace"),sandboxes:ue(n,"sandbox"),crons:ue(n,"cron"),skills:ue(n,"skill"),mcp:ue(n,"mcp"),policies:ue(n,"policy"),channelRecords:ue(n,"channelRecord")};return{agents:ge(e.agents,t.agents),workspaces:ge(e.workspaces,t.workspaces),sandboxes:ge(e.sandboxes,t.sandboxes),crons:ge(e.crons,t.crons),skills:ge(e.skills,t.skills),hooks:{},mcp:ge(e.mcp,t.mcp),policies:ge(e.policies,t.policies),channelRecords:ge(e.channelRecords,t.channelRecords)}}function ue(e,n){return new Set(e.resources.filter((t)=>t.kind===n).map((t)=>t.name))}function ge(e,n){return Object.fromEntries(Object.entries(e??{}).filter(([t])=>n.has(t)))}function Cr(e,n,t,o,r){let s=Object.keys(n.agents),i=o?`, endpointId: ${JSON.stringify(o.endpointId)}, projectSlug: ${JSON.stringify(o.projectSlug)}, stageSlug: ${JSON.stringify(o.stageSlug)}`:"",a=s.map((d)=>`    ${mn(t.agent?.[d]??d)}: { kind: "agent", name: ${JSON.stringify(d)}, id: ids.agents[${JSON.stringify(d)}], project: ${JSON.stringify(e.project)}, stage: ${JSON.stringify(e.stage)}${i} },`).join(`
-`),c=o?r.map((d)=>{let l=encodeURIComponent(o.accountId),p=o.stageKind===void 0||o.stageKind==="production"?`/v1/webhooks/${l}/${encodeURIComponent(d.type)}`:`/v1/webhooks/${l}/dev/${encodeURIComponent(o.endpointId)}/${encodeURIComponent(d.type)}`;return`    ${mn(d.alias)}: { kind: "channel", type: ${JSON.stringify(d.type)}, agentName: ${JSON.stringify(d.agentName)}, agentId: ids.agents[${JSON.stringify(d.agentName)}], accountId: ${JSON.stringify(o.accountId)}, webhookPath: ${JSON.stringify(p)} },`}).join(`
+`}function pr(e){let n=le(e,"broods-stub.mjs");return{name:"broods-sdk-stub",setup:function(t){t.onResolve({filter:/^broods(\/.*)?$/},()=>({path:n}))}}}function fr(e,n){if(g(e))return{name:e.name,workspaceId:e.name};if(e&&typeof e==="object"&&"workspace"in e){let t=e.workspace,o=g(t)?t.name:t;if(typeof o!=="string")throw Error(`Agent ${n} workspace ref must be a defineWorkspace(...) resource or its name`);let r={name:o,workspaceId:o};if("sandbox"in e){let s=e.sandbox;r.sandbox=s===null?null:g(s)?s.name:s}return r}throw Error(`Agent ${n} workspaces must be defineWorkspace(...) resources or { workspace, sandbox } refs`)}function mr(e,n,t){if(n.trim().length===0)throw Error(`${t} path is required`);if(n.includes("\x00"))throw Error(`${t} path must not contain null bytes`);let o=Ge(e),r=Ge(o,n),s=Se(o,r);if(s===""||!s.startsWith("..")&&!$o(s))return r;throw Error(`${t} path ${n} must stay inside ${y}/`)}function hr(e,n){let t={...n},o=t.connection;if(!w(o))throw Error(`Channel "${e}" config.connection must be a connection definition`);return delete t.connection,t.platform=o.type,pt(t.partition,`Channel "${e}"`),Q(t)}function Q(e){if(Array.isArray(e))return e.map((n)=>Q(n));if(g(e))return e.name;if(e&&typeof e==="object")return Object.fromEntries(Object.entries(e).map(([n,t])=>[n,Q(t)]));return e}async function wr(e){let n=[],t=0;async function o(r){let s=await at(r,{withFileTypes:!0});for(let i of s){let a=le(r,i.name),c=Se(e,a).split("\\").join("/");if(i.isDirectory()){if(rt(i.name))continue;await o(a)}else if(i.isFile()){if(rt(i.name)||vt(c))continue;let d=await ko(a);if(d.byteLength>We)throw Error(`Skill bundle file ${c} is too large (${d.byteLength} bytes, max ${We})`);if(t+=d.byteLength,t>Xn)throw Error(`Skill bundle at ${e} is too large (${t} bytes, max ${Xn})`);if(n.length>=Qn)throw Error(`Skill bundle at ${e} has too many files (max ${Qn})`);n.push({path:c,size:d.byteLength,sha256:xe(d),contentBase64:d.toString("base64"),contentType:vr(c)})}}}return await o(e),n.sort((r,s)=>String(r.path).localeCompare(String(s.path)))}function rt(e){return e.startsWith(".")||Ro.has(e)}function br(e,n){if(vt(e))throw Error(`${n} bundle path ${e} looks like a hidden file or secret and will not be bundled`)}function yr(e){return e instanceof Error&&Array.isArray(e.errors)}function vt(e){return e.split("/").some((t)=>t.startsWith(".")||Oo.some((o)=>o.test(t)))}function xe(e){return bo("sha256").update(e).digest("hex")}function vr(e){if(e.endsWith(".md"))return"text/markdown; charset=utf-8";if(e.endsWith(".json"))return"application/json";if(e.endsWith(".js")||e.endsWith(".mjs"))return"application/javascript";if(e.endsWith(".ts"))return"text/typescript; charset=utf-8";if(e.endsWith(".txt"))return"text/plain; charset=utf-8";return"application/octet-stream"}function kr(e){return e.replace(/^@/,"").replace(/\//g,"-").replace(/[^A-Za-z0-9_-]+/g,"-").replace(/^-+|-+$/g,"")}import{mkdir as Sr,writeFile as Fe}from"node:fs/promises";import{resolve as Pe}from"node:path";async function Ke(e,n,t=process.cwd(),o={},r=null,s=[]){let i=Pe(t,y,_),a=$r(n,e);await Sr(i,{recursive:!0}),await Fe(Pe(i,"ids.ts"),Rr(a),"utf8"),await Fe(Pe(i,"api.ts"),Er(e,a,o,r,s),"utf8"),await Fe(Pe(i,"resources.ts"),Or(e),"utf8"),await Fe(Pe(i,"dataModel.ts"),Cr(),"utf8")}function $r(e,n){let t={agents:ue(n,"agent"),workspaces:ue(n,"workspace"),sandboxes:ue(n,"sandbox"),crons:ue(n,"cron"),skills:ue(n,"skill"),mcp:ue(n,"mcp"),policies:ue(n,"policy"),channelRecords:ue(n,"channelRecord")};return{agents:ge(e.agents,t.agents),workspaces:ge(e.workspaces,t.workspaces),sandboxes:ge(e.sandboxes,t.sandboxes),crons:ge(e.crons,t.crons),skills:ge(e.skills,t.skills),hooks:{},mcp:ge(e.mcp,t.mcp),policies:ge(e.policies,t.policies),channelRecords:ge(e.channelRecords,t.channelRecords)}}function ue(e,n){return new Set(e.resources.filter((t)=>t.kind===n).map((t)=>t.name))}function ge(e,n){return Object.fromEntries(Object.entries(e??{}).filter(([t])=>n.has(t)))}function Er(e,n,t,o,r){let s=Object.keys(n.agents),i=o?`, endpointId: ${JSON.stringify(o.endpointId)}, projectSlug: ${JSON.stringify(o.projectSlug)}, stageSlug: ${JSON.stringify(o.stageSlug)}`:"",a=s.map((d)=>`    ${pn(t.agent?.[d]??d)}: { kind: "agent", name: ${JSON.stringify(d)}, id: ids.agents[${JSON.stringify(d)}], project: ${JSON.stringify(e.project)}, stage: ${JSON.stringify(e.stage)}${i} },`).join(`
+`),c=o?r.map((d)=>{let l=encodeURIComponent(o.accountId),p=o.stageKind===void 0||o.stageKind==="production"?`/v1/webhooks/${l}/${encodeURIComponent(d.type)}`:`/v1/webhooks/${l}/dev/${encodeURIComponent(o.endpointId)}/${encodeURIComponent(d.type)}`;return`    ${pn(d.alias)}: { kind: "channel", type: ${JSON.stringify(d.type)}, agentName: ${JSON.stringify(d.agentName)}, agentId: ids.agents[${JSON.stringify(d.agentName)}], accountId: ${JSON.stringify(o.accountId)}, webhookPath: ${JSON.stringify(p)} },`}).join(`
 `):"";return`// Generated by broods. Do not edit by hand.
 import type { ResourceApi } from "broods";
 import { ids } from "./ids";
@@ -66,9 +66,9 @@ ${c}
   skills: ${je("skills",n.skills,t.skill)},
   policies: ${je("policies",n.policies,t.policy)},
 } as const satisfies ResourceApi;
-`}function Rr(){return`// Generated by broods. Do not edit by hand.
+`}function Cr(){return`// Generated by broods. Do not edit by hand.
 export type { AgentReference, ChannelReference, AgentRunInput, AgentRunResult, ResourceApi } from "broods";
-`}function Or(e){return`// Generated by broods. Do not edit by hand.
+`}function Rr(e){return`// Generated by broods. Do not edit by hand.
 export const ids = ${JSON.stringify(e,null,2)} as const;
 export const agents = ids.agents;
 export const workspaces = ids.workspaces;
@@ -76,19 +76,19 @@ export const sandboxes = ids.sandboxes;
 export const crons = ids.crons;
 export const skills = ids.skills;
 export const policies = ids.policies;
-`}function Ar(e){return`// Generated by broods. Do not edit by hand.
+`}function Or(e){return`// Generated by broods. Do not edit by hand.
 export const manifest = ${JSON.stringify(e,null,2)} as const;
 `}function je(e,n,t){let o=Object.keys(n);if(o.length===0)return"{}";return`{
-${o.map((s)=>`    ${mn(t?.[s]??s)}: ids.${e}[${JSON.stringify(s)}],`).join(`
+${o.map((s)=>`    ${pn(t?.[s]??s)}: ids.${e}[${JSON.stringify(s)}],`).join(`
 `)}
-  }`}function mn(e){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(e)?e:JSON.stringify(e)}var xr=1,Pr=0,St=60000,$t=15000;function se(e,n){return new Promise((t)=>{if(n?.aborted)return t();let o=setTimeout(t,e);n?.addEventListener("abort",()=>{clearTimeout(o),t()},{once:!0})})}function fe(){let e=globalThis.WebSocket;if(!e)throw Error("WebSocket is not available in this environment.");return e}class D extends Error{}async function*He(e,n={}){let t=new Set,o=500,r=0,s=Date.now();while(!n.signal?.aborted){let i=!1,a="the log stream closed";try{for await(let c of jr(e,n,()=>{i=!0})){let d=`${c.ts}|${c.eventType}|${c.message}`;if(t.has(d))continue;if(t.add(d),t.size>5000)t.delete(t.values().next().value);yield c}}catch(c){if(n.signal?.aborted)return;if(a=c instanceof Error?c.message:String(c),c instanceof D||/unauthorized|invalid websocket token|scope does not match/i.test(a))throw c}if(n.signal?.aborted)return;if(i)o=500,r=0,s=Date.now();if(!n.keepReconnecting&&Date.now()-s>=St)throw Error(`Gave up reconnecting to the live logs after ${St/1000} s. Last error: ${a}`);r+=1,n.onReconnect?.(r,a),await se(o,n.signal),o=Math.min(o*2,5000)}}async function*jr(e,n,t){let{baseUrl:o,credential:r,project:s,stage:i}=e,{backfill:a=0,minLevel:c,sandboxId:d,signal:l}=n,p=n.liveOnly??a<=0;if(l?.aborted)return;let u=Ir(o,s,i),b=u,S=fe(),C=[],A=null,V=!1,re=null,me=()=>{re?.(),re=null},ce=new S(u,z(await r())),Yn=setTimeout(()=>{A=Error(`The observability gateway did not answer within ${$t/1000} s.`),V=!0,me()},$t),sn=()=>{if(clearTimeout(Yn),ce.readyState===xr||ce.readyState===Pr)ce.close(1000,"client closed");l?.removeEventListener("abort",zn)},zn=()=>{V=!0,me(),sn()};l?.addEventListener("abort",zn,{once:!0}),ce.onopen=()=>{if(l?.aborted){sn();return}let X={type:"subscribe",stream:"logs",...a>0?{backfill:a}:{},...p?{liveOnly:!0}:{},...c!==void 0?{minLevel:c}:{},...d!==void 0?{sandboxId:d}:{}};ce.send(JSON.stringify(X))},ce.onmessage=(X)=>{let he=Tr(X.data);if(!he)return;if(clearTimeout(Yn),he.type!=="error")t();switch(he.type){case"backfill":if(he.stream==="logs"){for(let wo of he.entries)C.push(wo);me()}break;case"log":C.push(he.entry),me();break;case"error":A=Error(`Observability gateway error: ${he.error}`),V=!0,me();break;case"ready":break;default:break}},ce.onerror=()=>{A=Error(`Cannot connect to the observability gateway at ${b}.`),V=!0,me()},ce.onclose=(X)=>{if(!V){if(X.code!==1000)A=Error(X.reason?`Observability WebSocket closed: ${X.reason}`:`Observability WebSocket closed with code ${X.code}.`);V=!0,me()}};try{while(!0){if(C.length>0){yield C.shift();continue}if(A)throw A;if(V)return;await new Promise((X)=>{re=X})}}finally{sn()}}function Ir(e,n,t){return`${Y(e)}/v1/projects/${encodeURIComponent(n)}/stages/${encodeURIComponent(t)}/observability/ws`}function Tr(e){if(typeof e!=="string")return null;try{let n=JSON.parse(e);return typeof n==="object"&&n!==null&&typeof n.type==="string"?n:null}catch{return null}}var _r=new Set(["bundle","bundleStorageId","contentBase64"]),Dr=new Set(["hook","mcp","skill"]),Ur=30000;class ze extends Error{}class Ve extends Error{}class N{baseUrl;token;fetchImpl;constructor(e){this.baseUrl=f(e.baseUrl),this.token=e.token,this.fetchImpl=e.fetch??fetch}async getManifest(e,n){let t=await this.request(e,n,"/manifest",{method:"GET"});if(t.status===404)return null;return await U(t,"Fetch manifest failed"),await t.json()}async putManifest(e,n,t=!1,o){let r=await this.externalizeLargeMcpBundles(e),s=await this.request(e.project,e.stage,"/manifest",{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({manifest:r,prune:n,rotateRuntimeKey:t,...o!==void 0?{revision:o}:{}})},null);return await U(s,"Sync manifest failed"),await s.json()}async externalizeLargeMcpBundles(e){if(e.resources.every((t)=>Rt(t)===null))return e;let n=await Promise.all(e.resources.map(async(t)=>{let o=Rt(t);if(o===null)return t;let{bundle:r,...s}=t.config,i=await this.uploadMcpBundle(e.project,e.stage,o);return{...t,config:{...s,bundleStorageId:i,sha256:xe(o)}}}));return{...e,resources:n}}async uploadMcpBundle(e,n,t){let o=await this.request(e,n,"/mcp-bundle-uploads",{method:"POST"});await U(o,"Mint bundle upload URL failed");let{uploadUrl:r}=await o.json();if(!r)throw Error("Mint bundle upload URL failed: response omitted uploadUrl");let s=await this.send(r,{method:"POST",headers:{"Content-Type":"application/javascript"},body:t},null);await U(s,"Bundle upload failed");let{storageId:i}=await s.json();if(!i)throw Error("Bundle upload failed: response omitted storageId");return i}async getRuntimeKey(e,n){let t=await this.request(e,n,"/runtime-key",{method:"GET"});if(t.status===404)return null;await U(t,"Fetch runtime key failed");let o=await t.json();if(!o.apiKey)throw Error("Fetch runtime key failed: response omitted apiKey");return{apiKey:o.apiKey,keyHint:o.keyHint??"",...o.endpointId?{endpointId:o.endpointId}:{},...o.projectSlug?{projectSlug:o.projectSlug}:{},...o.stageSlug?{stageSlug:o.stageSlug}:{}}}async setEnv(e,n,t,o){let r=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({value:o})});await U(r,"Set environment variable failed")}async listEnv(e,n){let t=await this.request(e,n,"/env",{method:"GET"});return await U(t,"List environment variables failed"),(await t.json()).variables??[]}async getEnv(e,n,t){let o=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"GET"});if(o.status===404)return null;return await U(o,"Read environment variable failed"),(await o.json()).value??null}async removeEnv(e,n,t){let o=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"DELETE"});await U(o,"Remove environment variable failed")}async getOnboarding(){let e=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return $e(e,"/v1/account/onboarding","broods org"),await U(e,"Fetch CLI onboarding context failed"),await e.json()}async selectOnboardingOrg(e){let n=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({orgId:e})});return await U(n,"Select CLI org failed"),await n.json()}async listStages(e){let n=await this.send(`${this.baseUrl}/v1/account/stages?project=${encodeURIComponent(e)}`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return $e(n,"/v1/account/stages","broods stage"),await U(n,"List stages failed"),(await n.json()).stages??[]}async createStage(e,n,t){let o=await this.send(`${this.baseUrl}/v1/account/stages`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({project:e,name:n,...t?{from:t}:{}})});return $e(o,"/v1/account/stages","broods stage"),await U(o,"Create stage failed"),await o.json()}async mintStageSession(e,n){let t=await this.send(`${this.baseUrl}/v1/account/stage-session`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({project:e,stage:n})});$e(t,"/v1/account/stage-session","broods logs");try{await U(t,"Open stage session failed")}catch(o){if(t.status===401||t.status===404)throw new D(o instanceof Error?o.message:String(o));throw o}return await t.json()}async listProjects(){let e=await this.send(`${this.baseUrl}/v1/account/projects`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return $e(e,"/v1/account/projects","broods project"),await U(e,"List projects failed"),(await e.json()).projects??[]}async deleteProject(e){let n=await this.send(`${this.baseUrl}/v1/account/projects?projectId=${encodeURIComponent(e)}`,{method:"DELETE",headers:{Authorization:`Bearer ${this.token}`}});if($e(n,"/v1/account/projects","broods project"),n.status===404)return null;return await U(n,"Delete project failed"),(await n.json()).deleted??null}async createOnboardingOrg(e){let n=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({createOrgName:e})});return await U(n,"Create CLI org failed"),await n.json()}async request(e,n,t,o,r){let s=`${this.baseUrl}/v1/account/projects/${encodeURIComponent(e)}/stages/${encodeURIComponent(n)}${t}`;return await this.send(s,{...o,headers:{Authorization:`Bearer ${this.token}`,...o.headers}},r)}async send(e,n,t){return await Je(e,n,{fetch:this.fetchImpl,timeoutMs:t})}}async function Je(e,n,t={}){let o=t.fetch??fetch,r=t.timeoutMs===void 0?Ur:t.timeoutMs;try{return await o(e,r===null?n:{...n,signal:AbortSignal.timeout(r)})}catch(s){throw Error(`Cannot reach ${new URL(e).origin}: ${Mr(s,r)}`,{cause:s})}}function vn(e,n){let t=new Map((n?.resources??[]).map((d)=>[`${d.kind}:${d.name}`,d])),o=new Map(e.resources.map((d)=>[`${d.kind}:${d.name}`,d])),r=[],s=[],i=[];for(let[d,l]of o){let p=t.get(d);if(!p)s.push({key:d,resource:l});else if(Ye(wn(p))!==Ye(wn(l)))r.push({operation:"update",kind:l.kind,name:l.name})}for(let[d,l]of t)if(!o.has(d))i.push({key:d,resource:l});let a=new Set,c=new Set;for(let d of s){let l=i.find((p)=>!a.has(p.key)&&Nr(d.resource.kind)&&d.resource.kind===p.resource.kind&&Ye(Ct(d.resource))===Ye(Ct(p.resource)));if(!l)continue;c.add(d.key),a.add(l.key),r.push({operation:"rename",kind:d.resource.kind,name:d.resource.name,previousName:l.resource.name})}for(let{key:d,resource:l}of s)if(!c.has(d))r.push({operation:"create",kind:l.kind,name:l.name});for(let{key:d,resource:l}of i)if(!a.has(d))r.push({operation:"delete",kind:l.kind,name:l.name});return r.sort((d,l)=>Et(d).localeCompare(Et(l)))}function Et(e){return`${{create:0,rename:1,update:2,delete:3}[e.operation]}:${e.kind}:${e.previousName??""}:${e.name}`}function Nr(e){return e==="agent"||e==="workspace"||e==="sandbox"||e==="policy"}function hn(e){if(Array.isArray(e))return e.map(hn);if(e&&typeof e==="object"){let n=e;if(n.__beeblastEnv===!0&&typeof n.name==="string")return`\${${n.name}}`;return Object.fromEntries(Object.entries(n).map(([t,o])=>[t,hn(o)]))}return e}function Ct(e){let n=wn(e),{name:t,...o}=n;return o}function wn(e){let n=hn(e);if(!Dr.has(e.kind))return n;return{...n,config:yn(n.config)}}function bn(e){if(Array.isArray(e))return e.map(bn);if(e&&typeof e==="object")return Object.fromEntries(Object.entries(e).sort(([n],[t])=>n.localeCompare(t)).map(([n,t])=>[n,bn(t)]));return e}function Ye(e){return JSON.stringify(bn(e))}function yn(e){if(Array.isArray(e))return e.map(yn);if(e&&typeof e==="object")return Object.fromEntries(Object.entries(e).flatMap(([n,t])=>{if(_r.has(n))return[];return[[n,yn(t)]]}));return e}async function U(e,n){if(e.ok)return;let t=await e.text(),{message:o=t,code:r}=Lr(t);if(r==="manifest_conflict")throw new ze(o);let s=e.status===401?"\nRun `broods login` to sign in again.":"";throw Error(`${n}: ${e.status} ${o}${s}`)}function Lr(e){let n;try{n=JSON.parse(e)}catch{return{}}let t=typeof n==="object"&&n!==null&&"error"in n?n.error:void 0;if(typeof t!=="object"||t===null)return{};return{..."message"in t&&typeof t.message==="string"?{message:t.message}:{},..."code"in t&&typeof t.code==="string"?{code:t.code}:{}}}function $e(e,n,t){if(e.status!==404)return;if((e.headers.get("Content-Type")??"").includes("application/json"))return;throw new Ve(`This broods server is older than your CLI and does not support \`${t}\` yet (no ${n} route).`)}function Mr(e,n){if(!(e instanceof Error))return String(e);if(e.name==="TimeoutError"&&n!==null)return`no answer within ${n/1000} s`;let t=e.cause;if(!(t instanceof Error))return e.message;if(t.message)return t.message;return"code"in t&&typeof t.code==="string"?t.code:e.message}function Rt(e){if(e.kind!=="mcp")return null;let n=e.config?.bundle;if(typeof n!=="string")return null;return Buffer.byteLength(n)>gt?n:null}var qe=["chatgpt"];var we={chatgpt:{label:"ChatGPT plan",description:"Run agents on model.provider chatgpt with your ChatGPT plan",authorizeUrl:"https://auth.openai.com/api/accounts/authorize",tokenUrl:"https://auth.openai.com/api/accounts/oauth/token",revokeUrl:"https://auth.openai.com/api/accounts/oauth/revoke",jwksUrl:"https://auth.openai.com/.well-known/jwks.json",issuer:"https://auth.openai.com",scopes:["openid","profile","email","offline_access","resource.invoke","chatgpt.tokens.use.direct"],resource:"https://api.openai.com/v1",requiredScope:"chatgpt.tokens.use.direct",selfHostedOnly:"ChatGPT plan usage is only available on self-hosted Broods for now. Use an OpenAI API key with the `openai` provider instead.",modelsUrl:"https://api.openai.com/v1/models",usageUrl:"https://chatgpt.com/settings/usage"}};function kn(e){return qe.some((n)=>n===e)}import{createHash as is,randomBytes as as,randomUUID as Nt}from"node:crypto";import{createServer as Vr}from"node:http";import{createHash as Jr,randomBytes as qr,randomUUID as Zr}from"node:crypto";import{spawn as Xr}from"node:child_process";import{createInterface as Te}from"node:readline/promises";import{stdin as ne,stdout as ee}from"node:process";import{Writable as Qr}from"node:stream";function Ee(e,n,t={}){let o=`${n?"*":" "} ${e}`;return n?j(o,"\x1B[1m\x1B[36m",J(t)):o}function Ot(e,n={}){let t=J(n),o=(i)=>j(i.padEnd(9),"\x1B[2m",t),r=!e.loggedIn?j("not logged in","\x1B[33m",t):e.org??j("unknown, run broods whoami","\x1B[2m",t),s=e.project??`none ${j(`(${e.projectGuess} from folder name)`,"\x1B[2m",t)}`;return[`  ${o("org")}${r}`,`  ${o("project")}${s}`,`  ${o("stage")}${It(e.stage,t)}`,`  ${o("server")}${e.server}`]}function Br(e,n={}){let t=J(n),o=Tt(e.stage),r=o==="Development",s=j("▌",r?"\x1B[32m":"\x1B[33m",t),i=t?`${r?"\x1B[42m\x1B[30m\x1B[1m":"\x1B[43m\x1B[30m\x1B[1m"} ${o} \x1B[0m`:`[${o}]`,a=t?j("dashboard","\x1B[4m",t):"dashboard",c=`${e.dashboardUrl}?project=${encodeURIComponent(e.project)}&stage=${encodeURIComponent(e.stage)}`,d=j(c,"\x1B[2m\x1B[4m",t);return[`${s} Syncing ${o}: ${j(e.project,"",t)}`,`${s} ${i} ${e.stage} (${a})`,`${s} ${j("└─","\x1B[2m",t)} ${d}`].join(`
-`)}function Gr(e,n={}){let t=J(n);return e.map((o)=>{let r=Yr(o.operation,t);if(o.operation==="rename"&&o.previousName)return`  ${r} ${o.kind}:${o.previousName} -> ${o.name}`;return`  ${r} ${o.kind}:${o.name}`})}function Wr(e,n={}){let t=J(n),o=j("▌","\x1B[32m",t),r=j("↑","\x1B[32m",t);return`${o} ${r} Synced ${e.length} env var(s) from .env.local: ${e.join(", ")}`}function Fr(e,n={}){return`${j("✖","\x1B[31m",J(n))} ${e}`}function At(e,n={}){let t=J(n),o=Math.max(...e.map(([r])=>r.length))+2;return e.map(([r,s])=>`  ${r.padEnd(o)}${j(s,"\x1B[2m",t)}`)}function Kr(e,n={}){let t=(n.now??new Date).toTimeString().slice(0,8);return`${j("✔","\x1B[32m",J(n))} ${t} Resources ready! (${zr(e)})`}function Hr(e,n={}){return`${j("✔","\x1B[32m",J(n))} ${e}`}function Sn(e,n,t={}){let o=J(t),r=t.note?`  ${j(`(${t.note})`,"\x1B[2m",o)}`:"";return`  ${j("now","\x1B[2m",o)}  ${e} → ${It(n,o)}${r}`}function Ie(e,n={}){return j(`! ${e}`,"\x1B[33m",J(n))}function xt(e){console.error(Br(e))}function Ze(e){for(let n of Gr(e))console.log(n)}function $n(e){console.error(Wr(e))}function Pt(e){console.error(Fr(e,{stream:"stderr"}))}function jt(e){console.error(Kr(e))}function H(e){console.log(Hr(e,{stream:"stdout"}))}function x(e){console.log(Ie(e,{stream:"stdout"}))}function Yr(e,n){if(e==="create")return`[${j("+","\x1B[32m",n)}]`;if(e==="rename")return`[${j("~","\x1B[33m",n)}]`;if(e==="update")return`[${j("*","\x1B[36m",n)}]`;return`[${j("-","\x1B[31m",n)}]`}function zr(e){if(e>=1000)return`${(e/1000).toFixed(2)}s`;return`${Math.max(e,0).toFixed(1)}ms`}function j(e,n,t){return t?`${n}${e}\x1B[0m`:e}function It(e,n){let t=Tt(e)==="Development";return j(e,t?"\x1B[32m":"\x1B[33m",n)}function J(e){if(e.color!==void 0)return e.color;if(Object.hasOwn(process.env,"NO_COLOR"))return!1;if(process.env.FORCE_COLOR&&process.env.FORCE_COLOR!=="0")return!0;return(e.stream==="stdout"?process.stdout:process.stderr).isTTY&&process.env.TERM!=="dumb"}function Tt(e){let n=e.trim().toLowerCase();if(n==="development")return"Development";if(n==="production")return"Production";return e.trim()}var es=180000,ns=`Timed out waiting for browser login to complete.
+  }`}function pn(e){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(e)?e:JSON.stringify(e)}var Ar=1,xr=0,kt=60000,St=15000;function se(e,n){return new Promise((t)=>{if(n?.aborted)return t();let o=setTimeout(t,e);n?.addEventListener("abort",()=>{clearTimeout(o),t()},{once:!0})})}function fe(){let e=globalThis.WebSocket;if(!e)throw Error("WebSocket is not available in this environment.");return e}class D extends Error{}async function*He(e,n={}){let t=new Set,o=500,r=0,s=Date.now();while(!n.signal?.aborted){let i=!1,a="the log stream closed";try{for await(let c of Pr(e,n,()=>{i=!0})){let d=`${c.ts}|${c.eventType}|${c.message}`;if(t.has(d))continue;if(t.add(d),t.size>5000)t.delete(t.values().next().value);yield c}}catch(c){if(n.signal?.aborted)return;if(a=c instanceof Error?c.message:String(c),c instanceof D||/unauthorized|invalid websocket token|scope does not match/i.test(a))throw c}if(n.signal?.aborted)return;if(i)o=500,r=0,s=Date.now();if(!n.keepReconnecting&&Date.now()-s>=kt)throw Error(`Gave up reconnecting to the live logs after ${kt/1000} s. Last error: ${a}`);r+=1,n.onReconnect?.(r,a),await se(o,n.signal),o=Math.min(o*2,5000)}}async function*Pr(e,n,t){let{baseUrl:o,credential:r,project:s,stage:i}=e,{backfill:a=0,minLevel:c,sandboxId:d,signal:l}=n,p=n.liveOnly??a<=0;if(l?.aborted)return;let u=jr(o,s,i),b=u,S=fe(),C=[],A=null,V=!1,re=null,me=()=>{re?.(),re=null},ce=new S(u,z(await r())),Kn=setTimeout(()=>{A=Error(`The observability gateway did not answer within ${St/1000} s.`),V=!0,me()},St),sn=()=>{if(clearTimeout(Kn),ce.readyState===Ar||ce.readyState===xr)ce.close(1000,"client closed");l?.removeEventListener("abort",Hn)},Hn=()=>{V=!0,me(),sn()};l?.addEventListener("abort",Hn,{once:!0}),ce.onopen=()=>{if(l?.aborted){sn();return}let X={type:"subscribe",stream:"logs",...a>0?{backfill:a}:{},...p?{liveOnly:!0}:{},...c!==void 0?{minLevel:c}:{},...d!==void 0?{sandboxId:d}:{}};ce.send(JSON.stringify(X))},ce.onmessage=(X)=>{let he=Tr(X.data);if(!he)return;if(clearTimeout(Kn),he.type!=="error")t();switch(he.type){case"backfill":if(he.stream==="logs"){for(let ho of he.entries)C.push(ho);me()}break;case"log":C.push(he.entry),me();break;case"error":A=Error(`Observability gateway error: ${he.error}`),V=!0,me();break;case"ready":break;default:break}},ce.onerror=()=>{A=Error(`Cannot connect to the observability gateway at ${b}.`),V=!0,me()},ce.onclose=(X)=>{if(!V){if(X.code!==1000)A=Error(X.reason?`Observability WebSocket closed: ${X.reason}`:`Observability WebSocket closed with code ${X.code}.`);V=!0,me()}};try{while(!0){if(C.length>0){yield C.shift();continue}if(A)throw A;if(V)return;await new Promise((X)=>{re=X})}}finally{sn()}}function jr(e,n,t){return`${Y(e)}/v1/projects/${encodeURIComponent(n)}/stages/${encodeURIComponent(t)}/observability/ws`}function Tr(e){if(typeof e!=="string")return null;try{let n=JSON.parse(e);return typeof n==="object"&&n!==null&&typeof n.type==="string"?n:null}catch{return null}}var Ir=new Set(["bundle","bundleStorageId","contentBase64"]),_r=new Set(["hook","mcp","skill"]),Dr=30000;class ze extends Error{}class Ve extends Error{}class N{baseUrl;token;fetchImpl;constructor(e){this.baseUrl=f(e.baseUrl),this.token=e.token,this.fetchImpl=e.fetch??fetch}async getManifest(e,n){let t=await this.request(e,n,"/manifest",{method:"GET"});if(t.status===404)return null;return await U(t,"Fetch manifest failed"),await t.json()}async putManifest(e,n,t=!1,o){let r=await this.externalizeLargeMcpBundles(e),s=await this.request(e.project,e.stage,"/manifest",{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({manifest:r,prune:n,rotateRuntimeKey:t,...o!==void 0?{revision:o}:{}})},null);return await U(s,"Sync manifest failed"),await s.json()}async externalizeLargeMcpBundles(e){if(e.resources.every((t)=>Ct(t)===null))return e;let n=await Promise.all(e.resources.map(async(t)=>{let o=Ct(t);if(o===null)return t;let{bundle:r,...s}=t.config,i=await this.uploadMcpBundle(e.project,e.stage,o);return{...t,config:{...s,bundleStorageId:i,sha256:xe(o)}}}));return{...e,resources:n}}async uploadMcpBundle(e,n,t){let o=await this.request(e,n,"/mcp-bundle-uploads",{method:"POST"});await U(o,"Mint bundle upload URL failed");let{uploadUrl:r}=await o.json();if(!r)throw Error("Mint bundle upload URL failed: response omitted uploadUrl");let s=await this.send(r,{method:"POST",headers:{"Content-Type":"application/javascript"},body:t},null);await U(s,"Bundle upload failed");let{storageId:i}=await s.json();if(!i)throw Error("Bundle upload failed: response omitted storageId");return i}async getRuntimeKey(e,n){let t=await this.request(e,n,"/runtime-key",{method:"GET"});if(t.status===404)return null;await U(t,"Fetch runtime key failed");let o=await t.json();if(!o.apiKey)throw Error("Fetch runtime key failed: response omitted apiKey");return{apiKey:o.apiKey,keyHint:o.keyHint??"",...o.endpointId?{endpointId:o.endpointId}:{},...o.projectSlug?{projectSlug:o.projectSlug}:{},...o.stageSlug?{stageSlug:o.stageSlug}:{}}}async setEnv(e,n,t,o){let r=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({value:o})});await U(r,"Set environment variable failed")}async listEnv(e,n){let t=await this.request(e,n,"/env",{method:"GET"});return await U(t,"List environment variables failed"),(await t.json()).variables??[]}async getEnv(e,n,t){let o=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"GET"});if(o.status===404)return null;return await U(o,"Read environment variable failed"),(await o.json()).value??null}async removeEnv(e,n,t){let o=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"DELETE"});await U(o,"Remove environment variable failed")}async getOnboarding(){let e=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return $e(e,"/v1/account/onboarding","broods org"),await U(e,"Fetch CLI onboarding context failed"),await e.json()}async selectOnboardingOrg(e){let n=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({orgId:e})});return await U(n,"Select CLI org failed"),await n.json()}async listStages(e){let n=await this.send(`${this.baseUrl}/v1/account/stages?project=${encodeURIComponent(e)}`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return $e(n,"/v1/account/stages","broods stage"),await U(n,"List stages failed"),(await n.json()).stages??[]}async createStage(e,n,t){let o=await this.send(`${this.baseUrl}/v1/account/stages`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({project:e,name:n,...t?{from:t}:{}})});return $e(o,"/v1/account/stages","broods stage"),await U(o,"Create stage failed"),await o.json()}async mintStageSession(e,n){let t=await this.send(`${this.baseUrl}/v1/account/stage-session`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({project:e,stage:n})});$e(t,"/v1/account/stage-session","broods logs");try{await U(t,"Open stage session failed")}catch(o){if(t.status===401||t.status===404)throw new D(o instanceof Error?o.message:String(o));throw o}return await t.json()}async listProjects(){let e=await this.send(`${this.baseUrl}/v1/account/projects`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return $e(e,"/v1/account/projects","broods project"),await U(e,"List projects failed"),(await e.json()).projects??[]}async deleteProject(e){let n=await this.send(`${this.baseUrl}/v1/account/projects?projectId=${encodeURIComponent(e)}`,{method:"DELETE",headers:{Authorization:`Bearer ${this.token}`}});if($e(n,"/v1/account/projects","broods project"),n.status===404)return null;return await U(n,"Delete project failed"),(await n.json()).deleted??null}async createOnboardingOrg(e){let n=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({createOrgName:e})});return await U(n,"Create CLI org failed"),await n.json()}async request(e,n,t,o,r){let s=`${this.baseUrl}/v1/account/projects/${encodeURIComponent(e)}/stages/${encodeURIComponent(n)}${t}`;return await this.send(s,{...o,headers:{Authorization:`Bearer ${this.token}`,...o.headers}},r)}async send(e,n,t){return await Je(e,n,{fetch:this.fetchImpl,timeoutMs:t})}}async function Je(e,n,t={}){let o=t.fetch??fetch,r=t.timeoutMs===void 0?Dr:t.timeoutMs;try{return await o(e,r===null?n:{...n,signal:AbortSignal.timeout(r)})}catch(s){throw Error(`Cannot reach ${new URL(e).origin}: ${Lr(s,r)}`,{cause:s})}}function bn(e,n){let t=new Map((n?.resources??[]).map((d)=>[`${d.kind}:${d.name}`,d])),o=new Map(e.resources.map((d)=>[`${d.kind}:${d.name}`,d])),r=[],s=[],i=[];for(let[d,l]of o){let p=t.get(d);if(!p)s.push({key:d,resource:l});else if(Ye(mn(p))!==Ye(mn(l)))r.push({operation:"update",kind:l.kind,name:l.name})}for(let[d,l]of t)if(!o.has(d))i.push({key:d,resource:l});let a=new Set,c=new Set;for(let d of s){let l=i.find((p)=>!a.has(p.key)&&Ur(d.resource.kind)&&d.resource.kind===p.resource.kind&&Ye(Et(d.resource))===Ye(Et(p.resource)));if(!l)continue;c.add(d.key),a.add(l.key),r.push({operation:"rename",kind:d.resource.kind,name:d.resource.name,previousName:l.resource.name})}for(let{key:d,resource:l}of s)if(!c.has(d))r.push({operation:"create",kind:l.kind,name:l.name});for(let{key:d,resource:l}of i)if(!a.has(d))r.push({operation:"delete",kind:l.kind,name:l.name});return r.sort((d,l)=>$t(d).localeCompare($t(l)))}function $t(e){return`${{create:0,rename:1,update:2,delete:3}[e.operation]}:${e.kind}:${e.previousName??""}:${e.name}`}function Ur(e){return e==="agent"||e==="workspace"||e==="sandbox"||e==="policy"}function fn(e){if(Array.isArray(e))return e.map(fn);if(e&&typeof e==="object"){let n=e;if(n.__beeblastEnv===!0&&typeof n.name==="string")return`\${${n.name}}`;return Object.fromEntries(Object.entries(n).map(([t,o])=>[t,fn(o)]))}return e}function Et(e){let n=mn(e),{name:t,...o}=n;return o}function mn(e){let n=fn(e);if(!_r.has(e.kind))return n;return{...n,config:wn(n.config)}}function hn(e){if(Array.isArray(e))return e.map(hn);if(e&&typeof e==="object")return Object.fromEntries(Object.entries(e).sort(([n],[t])=>n.localeCompare(t)).map(([n,t])=>[n,hn(t)]));return e}function Ye(e){return JSON.stringify(hn(e))}function wn(e){if(Array.isArray(e))return e.map(wn);if(e&&typeof e==="object")return Object.fromEntries(Object.entries(e).flatMap(([n,t])=>{if(Ir.has(n))return[];return[[n,wn(t)]]}));return e}async function U(e,n){if(e.ok)return;let t=await e.text(),{message:o=t,code:r}=Nr(t);if(r==="manifest_conflict")throw new ze(o);let s=e.status===401?"\nRun `broods login` to sign in again.":"";throw Error(`${n}: ${e.status} ${o}${s}`)}function Nr(e){let n;try{n=JSON.parse(e)}catch{return{}}let t=typeof n==="object"&&n!==null&&"error"in n?n.error:void 0;if(typeof t!=="object"||t===null)return{};return{..."message"in t&&typeof t.message==="string"?{message:t.message}:{},..."code"in t&&typeof t.code==="string"?{code:t.code}:{}}}function $e(e,n,t){if(e.status!==404)return;if((e.headers.get("Content-Type")??"").includes("application/json"))return;throw new Ve(`This broods server is older than your CLI and does not support \`${t}\` yet (no ${n} route).`)}function Lr(e,n){if(!(e instanceof Error))return String(e);if(e.name==="TimeoutError"&&n!==null)return`no answer within ${n/1000} s`;let t=e.cause;if(!(t instanceof Error))return e.message;if(t.message)return t.message;return"code"in t&&typeof t.code==="string"?t.code:e.message}function Ct(e){if(e.kind!=="mcp")return null;let n=e.config?.bundle;if(typeof n!=="string")return null;return Buffer.byteLength(n)>ut?n:null}var qe=["chatgpt"];var we={chatgpt:{label:"ChatGPT plan",description:"Run agents on model.provider chatgpt with your ChatGPT plan",authorizeUrl:"https://auth.openai.com/api/accounts/authorize",tokenUrl:"https://auth.openai.com/api/accounts/oauth/token",revokeUrl:"https://auth.openai.com/api/accounts/oauth/revoke",jwksUrl:"https://auth.openai.com/.well-known/jwks.json",issuer:"https://auth.openai.com",scopes:["openid","profile","email","offline_access","resource.invoke","chatgpt.tokens.use.direct"],resource:"https://api.openai.com/v1",requiredScope:"chatgpt.tokens.use.direct",selfHostedOnly:"ChatGPT plan usage is only available on self-hosted Broods for now. Use an OpenAI API key with the `openai` provider instead.",modelsUrl:"https://api.openai.com/v1/models",usageUrl:"https://chatgpt.com/settings/usage"}};function yn(e){return qe.some((n)=>n===e)}import{createHash as ss,randomBytes as is,randomUUID as Ut}from"node:crypto";import{createServer as zr}from"node:http";import{createHash as Vr,randomBytes as Jr,randomUUID as qr}from"node:crypto";import{spawn as Zr}from"node:child_process";import{createInterface as Ie}from"node:readline/promises";import{stdin as ne,stdout as ee}from"node:process";import{Writable as Xr}from"node:stream";function Ee(e,n,t={}){let o=`${n?"*":" "} ${e}`;return n?j(o,"\x1B[1m\x1B[36m",J(t)):o}function Rt(e,n={}){let t=J(n),o=(i)=>j(i.padEnd(9),"\x1B[2m",t),r=!e.loggedIn?j("not logged in","\x1B[33m",t):e.org??j("unknown, run broods whoami","\x1B[2m",t),s=e.project??`none ${j(`(${e.projectGuess} from folder name)`,"\x1B[2m",t)}`;return[`  ${o("org")}${r}`,`  ${o("project")}${s}`,`  ${o("stage")}${jt(e.stage,t)}`,`  ${o("server")}${e.server}`]}function Mr(e,n={}){let t=J(n),o=Tt(e.stage),r=o==="Development",s=j("▌",r?"\x1B[32m":"\x1B[33m",t),i=t?`${r?"\x1B[42m\x1B[30m\x1B[1m":"\x1B[43m\x1B[30m\x1B[1m"} ${o} \x1B[0m`:`[${o}]`,a=t?j("dashboard","\x1B[4m",t):"dashboard",c=`${e.dashboardUrl}?project=${encodeURIComponent(e.project)}&stage=${encodeURIComponent(e.stage)}`,d=j(c,"\x1B[2m\x1B[4m",t);return[`${s} Syncing ${o}: ${j(e.project,"",t)}`,`${s} ${i} ${e.stage} (${a})`,`${s} ${j("└─","\x1B[2m",t)} ${d}`].join(`
+`)}function Br(e,n={}){let t=J(n);return e.map((o)=>{let r=Hr(o.operation,t);if(o.operation==="rename"&&o.previousName)return`  ${r} ${o.kind}:${o.previousName} -> ${o.name}`;return`  ${r} ${o.kind}:${o.name}`})}function Gr(e,n={}){let t=J(n),o=j("▌","\x1B[32m",t),r=j("↑","\x1B[32m",t);return`${o} ${r} Synced ${e.length} env var(s) from .env.local: ${e.join(", ")}`}function Wr(e,n={}){return`${j("✖","\x1B[31m",J(n))} ${e}`}function Ot(e,n={}){let t=J(n),o=Math.max(...e.map(([r])=>r.length))+2;return e.map(([r,s])=>`  ${r.padEnd(o)}${j(s,"\x1B[2m",t)}`)}function Fr(e,n={}){let t=(n.now??new Date).toTimeString().slice(0,8);return`${j("✔","\x1B[32m",J(n))} ${t} Resources ready! (${Yr(e)})`}function Kr(e,n={}){return`${j("✔","\x1B[32m",J(n))} ${e}`}function vn(e,n,t={}){let o=J(t),r=t.note?`  ${j(`(${t.note})`,"\x1B[2m",o)}`:"";return`  ${j("now","\x1B[2m",o)}  ${e} → ${jt(n,o)}${r}`}function Te(e,n={}){return j(`! ${e}`,"\x1B[33m",J(n))}function At(e){console.error(Mr(e))}function Ze(e){for(let n of Br(e))console.log(n)}function kn(e){console.error(Gr(e))}function xt(e){console.error(Wr(e,{stream:"stderr"}))}function Pt(e){console.error(Fr(e))}function H(e){console.log(Kr(e,{stream:"stdout"}))}function x(e){console.log(Te(e,{stream:"stdout"}))}function Hr(e,n){if(e==="create")return`[${j("+","\x1B[32m",n)}]`;if(e==="rename")return`[${j("~","\x1B[33m",n)}]`;if(e==="update")return`[${j("*","\x1B[36m",n)}]`;return`[${j("-","\x1B[31m",n)}]`}function Yr(e){if(e>=1000)return`${(e/1000).toFixed(2)}s`;return`${Math.max(e,0).toFixed(1)}ms`}function j(e,n,t){return t?`${n}${e}\x1B[0m`:e}function jt(e,n){let t=Tt(e)==="Development";return j(e,t?"\x1B[32m":"\x1B[33m",n)}function J(e){if(e.color!==void 0)return e.color;if(Object.hasOwn(process.env,"NO_COLOR"))return!1;if(process.env.FORCE_COLOR&&process.env.FORCE_COLOR!=="0")return!0;return(e.stream==="stdout"?process.stdout:process.stderr).isTTY&&process.env.TERM!=="dumb"}function Tt(e){let n=e.trim().toLowerCase();if(n==="development")return"Development";if(n==="production")return"Production";return e.trim()}var Qr=180000,es=`Timed out waiting for browser login to complete.
 Check the browser tab and the dashboard logs for an error. If the browser shows
 404 on /cli-auth/start, deploy the dashboard build that includes CLI auth or pass
 --dashboard-url for the environment you deployed. Other common causes are missing
-cliAuth Convex functions or no active API account (Settings -> API Access).`,_t=new Set(["--base-url","--cwd","--dashboard-url","--stage","--from","--level","--limit","--mcp","--project","--region","--sandbox","-n"]);function ts(e,n=process.platform){if(n==="darwin")return{command:"open",args:[e]};if(n==="win32")return{command:"rundll32",args:["url.dll,FileProtocolHandler",e]};return{command:"xdg-open",args:[e]}}function I(e,n){let t=_t.has(n)?`${n}=`:null;return e.some((o)=>o===n||t!==null&&o.startsWith(t))}function be(e){return typeof e==="object"&&e!==null&&!Array.isArray(e)}function k(e,n){for(let t=0;t<e.length;t+=1){let o=e[t];if(o===n)return e[t+1];if(o?.startsWith(`${n}=`))return o.slice(n.length+1)||void 0}return}function te(e){let n=[];for(let t=0;t<e.length;t+=1){let o=e[t];if(o===void 0)continue;if(_t.has(o)){t+=1;continue}if(o.startsWith("-"))continue;n.push(o)}return n}async function En(e){let n=Zr(),t=qr(32).toString("base64url"),o=Jr("sha256").update(t).digest("base64url"),{code:r,close:s}=await Rn(n,{port:rs(),fixedPort:Boolean(process.env.BROODS_LOGIN_PORT),path:"/callback",read:ss,done:"broods CLI login complete. You can close this tab."});try{let i=r.callbackUrl,a=`${f(e)}/cli-auth/start?`+new URLSearchParams({callback:i,state:n,code_challenge:o});await os(a),console.log(`Opening ${a}`),Cn(a);let c=await On(r.promise),d=await Je(`${c.baseUrl}/v1/account/auth/exchange`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({code:c.code,code_verifier:t})});if(!d.ok)throw Error(`Login exchange failed: ${d.status} ${await d.text()}`);let l=await d.json(),p={baseUrl:c.baseUrl,dashboardUrl:f(e),token:l.token,createdAt:new Date().toISOString(),...l.user?{user:l.user}:{},...l.org?{org:l.org}:{},...l.account?{account:l.account}:{}};return await W(p),p}finally{s()}}async function q(e){h();let n=T(e);if(!n){let t=process.env.BROODS_DASHBOARD_URL,o=e??process.env.BROODS_BASE_URL??(t?L(t):void 0);throw Error(o?`Not logged in to ${f(o)}. Run \`broods login\`.`:"Run `broods login` first, or set BROODS_TOKEN and BROODS_BASE_URL.")}return n}async function Xe(e){if(!ne.isTTY)return!1;let n=Te({input:ne,output:ee});try{let t=(await n.question(`${e} [y/N] `)).trim().toLowerCase();return t==="y"||t==="yes"}finally{n.close()}}async function Dt(e){ee.write(`${e}: `);let n=new Qr({write:(o,r,s)=>s()}),t=Te({input:ne,output:n,terminal:ne.isTTY===!0});try{let o=await t.question("");if(!o)throw Error(`${e} is required`);return o}finally{t.close(),ee.write(`
-`)}}async function _e(e,n,t,o){if(n.length===0)throw Error(`${e}: no options available`);if(n.length===1)return n[0];let r=o!==void 0&&o>=0&&o<n.length?o:void 0;console.log(e),n.forEach((a,c)=>{console.log(Ee(`${c+1}. ${t(a)}`,c===r))});let s=r===void 0?`Choose 1-${n.length}: `:`Choose 1-${n.length} [${r+1}]: `,i=Te({input:ne,output:ee});try{for(;;){let a=(await i.question(s)).trim();if(a===""&&r!==void 0)return n[r];let c=Number(a);if(Number.isInteger(c)&&c>=1&&c<=n.length)return n[c-1];console.log(`Enter a number from 1 to ${n.length}.`)}}finally{i.close()}}async function Ut(e,n,t,o){console.log(e),n.forEach((i,a)=>{console.log(`  ${a+1}. ${t(i)}`)});let r=n.length>0?`Choose 1-${n.length}, or `:"",s=Te({input:ne,output:ee});try{let i=(await s.question(`${r}${o.hint} [${o.defaultValue}]: `)).trim();if(i==="")return o.defaultValue;let a=Number(i);if(Number.isInteger(a)&&a>=1&&a<=n.length)return n[a-1];return i}finally{s.close()}}async function ye(e,n){if(!ne.isTTY)return n??"";let t=Te({input:ne,output:ee});try{let o=t.question(`${e}: `);if(n){if(ne.isTTY&&ee.isTTY)ee.write("\x1B[90m");if(t.write(n),ne.isTTY&&ee.isTTY)ee.write("\x1B[0m")}return(await o).trim()||n||""}finally{t.close()}}function Cn(e){let{command:n,args:t}=ts(e),o=Xr(n,t,{stdio:"ignore",detached:!0});o.on("error",(r)=>{console.error(Ie(`Could not open a browser (${r.message}). Open the URL above to continue.`,{stream:"stderr"}))}),o.unref()}function Rn(e,n){return new Promise((t,o)=>{let r=Vr((c,d)=>{let l=new URL(c.url??"/","http://127.0.0.1");if(l.pathname!==n.path||l.searchParams.get("state")!==e){d.writeHead(400).end("Invalid callback.");return}try{let p=n.read(l.searchParams);d.writeHead(200,{"Content-Type":"text/plain"}).end(n.done),s(p)}catch(p){d.writeHead(400,{"Content-Type":"text/plain"}).end(p instanceof Error?p.message:String(p)),i(p)}}),s,i,a=new Promise((c,d)=>{s=c,i=d});r.on("error",(c)=>{if(!n.fixedPort&&n.port!==0&&c.code==="EADDRINUSE"){r.listen(0,"127.0.0.1");return}o(c)}),r.listen(n.port,"127.0.0.1",()=>{let c=r.address();if(!c||typeof c==="string"){o(Error("Failed to allocate callback port"));return}t({code:{callbackUrl:`http://127.0.0.1:${c.port}${n.path}`,promise:a},close:()=>r.close()})})})}async function On(e,n=ns){let t,o=new Promise((r,s)=>{t=setTimeout(()=>s(Error(n)),es)});try{return await Promise.race([e,o])}finally{if(t)clearTimeout(t)}}async function os(e){let n=await Je(e,{method:"GET",redirect:"manual"});if(n.status===404){let t=new URL(e);throw Error(`${t.origin} has no broods login page. Check that --dashboard-url points at your broods dashboard.`)}if(n.status>=500)throw Error(`The broods login page failed: ${n.status} ${await n.text()}`)}function rs(){let e=process.env.BROODS_LOGIN_PORT;if(e){let n=Number(e);if(Number.isInteger(n)&&n>0&&n<65536)return n;throw Error("BROODS_LOGIN_PORT must be a TCP port number")}return 18987}function ss(e){let n=e.get("error");if(n)throw Error(`Login failed: ${n}`);let t=e.get("code");if(!t)throw Error("Login callback carried no code.");let o=e.get("base_url");if(!o)throw Error("Login callback did not advertise the API base URL (base_url). Deploy a dashboard build that includes the Convex-direct CLI auth flow.");return{code:t,baseUrl:f(o)}}var cs=1455,ls="/auth/callback";async function Lt(e,n,t=Cn){let o=we[n].label,r=Nt(),s=Nt(),i=as(32).toString("base64url"),{code:a,close:c}=await Rn(r,{port:cs,fixedPort:!1,path:ls,read:ds,done:`${o} is connected to broods. You can close this tab.`});try{let d=a.callbackUrl,l=await e.startConnection(n,{redirectUri:d,codeChallenge:is("sha256").update(i).digest("base64url"),state:r,nonce:s});t(l.authorizeUrl),console.log(`Opening ${l.authorizeUrl}`);let p=await On(a.promise,`Timed out waiting for the ${o} sign-in to finish in the browser.`);return await e.connect(n,{code:p.code,codeVerifier:i,redirectUri:d,nonce:s,clientId:p.clientId??l.clientId,hostId:l.hostId})}finally{c()}}function ds(e){let n=e.get("error");if(n)throw Error(`Sign-in failed: ${e.get("error_description")??n}`);let t=e.get("code");if(!t)throw Error("Sign-in callback carried no code.");return{code:t,clientId:e.get("client_id")??void 0}}import{existsSync as Bt}from"node:fs";import{mkdir as gs,readFile as ps,writeFile as fs}from"node:fs/promises";import{dirname as Gt,join as Pn,resolve as ms,sep as pe}from"node:path";import{fileURLToPath as hs}from"node:url";var De={name:"broods",version:"0.45.0",description:"CLI + TypeScript SDK for the broods agent platform.",keywords:["agents","ai","broods","cli","sdk"],homepage:"https://github.com/beeblastco/broods#readme",bugs:{url:"https://github.com/beeblastco/broods/issues"},license:"MIT",repository:{type:"git",url:"git+https://github.com/beeblastco/broods.git",directory:"packages/broods"},bin:{broods:"dist/cli/index.js"},files:["dist","README.md","LICENSE.md"],type:"module",main:"./dist/index.js",types:"./dist/index.d.ts",typesVersions:{"*":{account:["./dist/account.d.ts"]}},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./account":{types:"./dist/account.d.ts",import:"./dist/account.js"}},scripts:{build:"bun scripts/build.ts && rollup -c rollup.dts.config.mjs && rm -rf .dts-temp",check:"tsc --noEmit","pack:check":"bun run build && publint && attw --pack .",prepublishOnly:"bun run build",test:"bun test"},dependencies:{"@modelcontextprotocol/client":"^2.0.0",esbuild:"^0.28.2"},devDependencies:{"@ai-sdk/tui":"1.0.128","@arethetypeswrong/cli":"^0.18.5","@chat-adapter/discord":"^4.38.1","@chat-adapter/github":"^4.38.1","@chat-adapter/slack":"^4.38.1","@chat-adapter/telegram":"^4.38.1","@modelcontextprotocol/server":"2.0.0","@types/bun":"^1.3.14","@typescript/typescript6":"6.0.2",ai:"^7.0.127",publint:"^0.3.23",rollup:"^4.62.4","rollup-plugin-dts":"^6.5.1",typescript:"^7.0.2",zod:"^4.4.3"},peerDependencies:{ai:"^7.0.127"},engines:{node:">=22.15"}};var An=Pn(Gt(O),"update-check.json"),ws=86400000,bs="https://registry.npmjs.org/broods/latest",ys=2000,vs=[["bun.lock","bun"],["bun.lockb","bun"],["pnpm-lock.yaml","pnpm"],["yarn.lock","yarn"]];function jn(e,n){let t=xn(e),o=xn(n);for(let r=0;r<3;r+=1){let s=t[r]??0,i=o[r]??0;if(s!==i)return s>i}return!Mt(e)&&Mt(n)}async function In(e={}){let n=await Ss(),t=e.maxAgeMs??ws;if(n&&Date.now()-n.checkedAt<t)return n.latest;let o=await ks();if(o===null)return n?.latest??null;return await Es({checkedAt:Date.now(),latest:o}),o}function Ue(e){return xn(e)[0]??0}function Wt(e=ms(process.cwd()),n=hs(import.meta.url),t=De.version){let o=`${pe}node_modules${pe}`,r=n.indexOf(o),s=r===-1?null:n.slice(0,r),i=s===null?n.startsWith(`${e}${pe}`):e===s||e.startsWith(`${s}${pe}`),a=n.includes(`${pe}.bun${pe}install${pe}global${pe}`),c=s??e,d=i?$s(c):a?"bun":"npm",l=d==="npm"?"install":"add",p=d==="pnpm"&&Bt(Pn(c,"pnpm-workspace.yaml"))?["-w"]:[],u=`broods@${Ue(t)}`;return{manager:d,global:!i,command:d,cwd:i?c:e,args:i?[l,...p,u]:[l,"-g",u]}}async function ks(){try{let e=await fetch(bs,{signal:AbortSignal.timeout(ys),headers:{accept:"application/json"}});if(!e.ok)return null;let n=await e.json();return typeof n.version==="string"?n.version:null}catch{return null}}function Mt(e){return e.includes("-")}async function Ss(){try{let e=JSON.parse(await ps(An,"utf8"));if(typeof e.latest!=="string")return null;if(typeof e.checkedAt!=="number")return null;return{checkedAt:e.checkedAt,latest:e.latest}}catch{return null}}function $s(e){return vs.find(([t])=>Bt(Pn(e,t)))?.[1]??"npm"}function xn(e){let[n]=e.trim().replace(/^v/,"").split("-");return(n??"").split(".").slice(0,3).map((t)=>Number.parseInt(t,10)||0)}async function Es(e){try{await gs(Gt(An),{recursive:!0}),await fs(An,`${JSON.stringify(e)}
-`,"utf8")}catch{}}var Ft=`---
+cliAuth Convex functions or no active API account (Settings -> API Access).`,It=new Set(["--base-url","--cwd","--dashboard-url","--stage","--from","--level","--limit","--mcp","--project","--region","--sandbox","-n"]);function ns(e,n=process.platform){if(n==="darwin")return{command:"open",args:[e]};if(n==="win32")return{command:"rundll32",args:["url.dll,FileProtocolHandler",e]};return{command:"xdg-open",args:[e]}}function I(e,n){let t=It.has(n)?`${n}=`:null;return e.some((o)=>o===n||t!==null&&o.startsWith(t))}function be(e){return typeof e==="object"&&e!==null&&!Array.isArray(e)}function k(e,n){for(let t=0;t<e.length;t+=1){let o=e[t];if(o===n)return e[t+1];if(o?.startsWith(`${n}=`))return o.slice(n.length+1)||void 0}return}function te(e){let n=[];for(let t=0;t<e.length;t+=1){let o=e[t];if(o===void 0)continue;if(It.has(o)){t+=1;continue}if(o.startsWith("-"))continue;n.push(o)}return n}async function Sn(e){let n=qr(),t=Jr(32).toString("base64url"),o=Vr("sha256").update(t).digest("base64url"),{code:r,close:s}=await En(n,{port:os(),fixedPort:Boolean(process.env.BROODS_LOGIN_PORT),path:"/callback",read:rs,done:"broods CLI login complete. You can close this tab."});try{let i=r.callbackUrl,a=`${f(e)}/cli-auth/start?`+new URLSearchParams({callback:i,state:n,code_challenge:o});await ts(a),console.log(`Opening ${a}`),$n(a);let c=await Cn(r.promise),d=await Je(`${c.baseUrl}/v1/account/auth/exchange`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({code:c.code,code_verifier:t})});if(!d.ok)throw Error(`Login exchange failed: ${d.status} ${await d.text()}`);let l=await d.json(),p={baseUrl:c.baseUrl,dashboardUrl:f(e),token:l.token,createdAt:new Date().toISOString(),...l.user?{user:l.user}:{},...l.org?{org:l.org}:{},...l.account?{account:l.account}:{}};return await W(p),p}finally{s()}}async function q(e){h();let n=T(e);if(!n){let t=process.env.BROODS_DASHBOARD_URL,o=e??process.env.BROODS_BASE_URL??(t?L(t):void 0);throw Error(o?`Not logged in to ${f(o)}. Run \`broods login\`.`:"Run `broods login` first, or set BROODS_TOKEN and BROODS_BASE_URL.")}return n}async function Xe(e){if(!ne.isTTY)return!1;let n=Ie({input:ne,output:ee});try{let t=(await n.question(`${e} [y/N] `)).trim().toLowerCase();return t==="y"||t==="yes"}finally{n.close()}}async function _t(e){ee.write(`${e}: `);let n=new Xr({write:(o,r,s)=>s()}),t=Ie({input:ne,output:n,terminal:ne.isTTY===!0});try{let o=await t.question("");if(!o)throw Error(`${e} is required`);return o}finally{t.close(),ee.write(`
+`)}}async function _e(e,n,t,o){if(n.length===0)throw Error(`${e}: no options available`);if(n.length===1)return n[0];let r=o!==void 0&&o>=0&&o<n.length?o:void 0;console.log(e),n.forEach((a,c)=>{console.log(Ee(`${c+1}. ${t(a)}`,c===r))});let s=r===void 0?`Choose 1-${n.length}: `:`Choose 1-${n.length} [${r+1}]: `,i=Ie({input:ne,output:ee});try{for(;;){let a=(await i.question(s)).trim();if(a===""&&r!==void 0)return n[r];let c=Number(a);if(Number.isInteger(c)&&c>=1&&c<=n.length)return n[c-1];console.log(`Enter a number from 1 to ${n.length}.`)}}finally{i.close()}}async function Dt(e,n,t,o){console.log(e),n.forEach((i,a)=>{console.log(`  ${a+1}. ${t(i)}`)});let r=n.length>0?`Choose 1-${n.length}, or `:"",s=Ie({input:ne,output:ee});try{let i=(await s.question(`${r}${o.hint} [${o.defaultValue}]: `)).trim();if(i==="")return o.defaultValue;let a=Number(i);if(Number.isInteger(a)&&a>=1&&a<=n.length)return n[a-1];return i}finally{s.close()}}async function ye(e,n){if(!ne.isTTY)return n??"";let t=Ie({input:ne,output:ee});try{let o=t.question(`${e}: `);if(n){if(ne.isTTY&&ee.isTTY)ee.write("\x1B[90m");if(t.write(n),ne.isTTY&&ee.isTTY)ee.write("\x1B[0m")}return(await o).trim()||n||""}finally{t.close()}}function $n(e){let{command:n,args:t}=ns(e),o=Zr(n,t,{stdio:"ignore",detached:!0});o.on("error",(r)=>{console.error(Te(`Could not open a browser (${r.message}). Open the URL above to continue.`,{stream:"stderr"}))}),o.unref()}function En(e,n){return new Promise((t,o)=>{let r=zr((c,d)=>{let l=new URL(c.url??"/","http://127.0.0.1");if(l.pathname!==n.path||l.searchParams.get("state")!==e){d.writeHead(400).end("Invalid callback.");return}try{let p=n.read(l.searchParams);d.writeHead(200,{"Content-Type":"text/plain"}).end(n.done),s(p)}catch(p){d.writeHead(400,{"Content-Type":"text/plain"}).end(p instanceof Error?p.message:String(p)),i(p)}}),s,i,a=new Promise((c,d)=>{s=c,i=d});r.on("error",(c)=>{if(!n.fixedPort&&n.port!==0&&c.code==="EADDRINUSE"){r.listen(0,"127.0.0.1");return}o(c)}),r.listen(n.port,"127.0.0.1",()=>{let c=r.address();if(!c||typeof c==="string"){o(Error("Failed to allocate callback port"));return}t({code:{callbackUrl:`http://127.0.0.1:${c.port}${n.path}`,promise:a},close:()=>r.close()})})})}async function Cn(e,n=es){let t,o=new Promise((r,s)=>{t=setTimeout(()=>s(Error(n)),Qr)});try{return await Promise.race([e,o])}finally{if(t)clearTimeout(t)}}async function ts(e){let n=await Je(e,{method:"GET",redirect:"manual"});if(n.status===404){let t=new URL(e);throw Error(`${t.origin} has no broods login page. Check that --dashboard-url points at your broods dashboard.`)}if(n.status>=500)throw Error(`The broods login page failed: ${n.status} ${await n.text()}`)}function os(){let e=process.env.BROODS_LOGIN_PORT;if(e){let n=Number(e);if(Number.isInteger(n)&&n>0&&n<65536)return n;throw Error("BROODS_LOGIN_PORT must be a TCP port number")}return 18987}function rs(e){let n=e.get("error");if(n)throw Error(`Login failed: ${n}`);let t=e.get("code");if(!t)throw Error("Login callback carried no code.");let o=e.get("base_url");if(!o)throw Error("Login callback did not advertise the API base URL (base_url). Deploy a dashboard build that includes the Convex-direct CLI auth flow.");return{code:t,baseUrl:f(o)}}var as=1455,cs="/auth/callback";async function Nt(e,n,t=$n){let o=we[n].label,r=Ut(),s=Ut(),i=is(32).toString("base64url"),{code:a,close:c}=await En(r,{port:as,fixedPort:!1,path:cs,read:ls,done:`${o} is connected to broods. You can close this tab.`});try{let d=a.callbackUrl,l=await e.startConnection(n,{redirectUri:d,codeChallenge:ss("sha256").update(i).digest("base64url"),state:r,nonce:s});t(l.authorizeUrl),console.log(`Opening ${l.authorizeUrl}`);let p=await Cn(a.promise,`Timed out waiting for the ${o} sign-in to finish in the browser.`);return await e.connect(n,{code:p.code,codeVerifier:i,redirectUri:d,nonce:s,clientId:p.clientId??l.clientId,hostId:l.hostId})}finally{c()}}function ls(e){let n=e.get("error");if(n)throw Error(`Sign-in failed: ${e.get("error_description")??n}`);let t=e.get("code");if(!t)throw Error("Sign-in callback carried no code.");return{code:t,clientId:e.get("client_id")??void 0}}import{existsSync as Mt}from"node:fs";import{mkdir as us,readFile as gs,writeFile as ps}from"node:fs/promises";import{dirname as Bt,join as An,resolve as fs,sep as pe}from"node:path";import{fileURLToPath as ms}from"node:url";var De={name:"broods",version:"0.46.0",description:"CLI + TypeScript SDK for the broods agent platform.",keywords:["agents","ai","broods","cli","sdk"],homepage:"https://github.com/beeblastco/broods#readme",bugs:{url:"https://github.com/beeblastco/broods/issues"},license:"MIT",repository:{type:"git",url:"git+https://github.com/beeblastco/broods.git",directory:"packages/broods"},bin:{broods:"dist/cli/index.js"},files:["dist","README.md","LICENSE.md"],type:"module",main:"./dist/index.js",types:"./dist/index.d.ts",typesVersions:{"*":{account:["./dist/account.d.ts"]}},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./account":{types:"./dist/account.d.ts",import:"./dist/account.js"}},scripts:{build:"bun scripts/build.ts && rollup -c rollup.dts.config.mjs && rm -rf .dts-temp",check:"tsc --noEmit","pack:check":"bun run build && publint && attw --pack .",prepublishOnly:"bun run build",test:"bun test"},dependencies:{"@modelcontextprotocol/client":"^2.0.0",esbuild:"^0.28.2"},devDependencies:{"@ai-sdk/tui":"1.0.128","@arethetypeswrong/cli":"^0.18.5","@chat-adapter/discord":"^4.38.1","@chat-adapter/github":"^4.38.1","@chat-adapter/slack":"^4.38.1","@chat-adapter/telegram":"^4.38.1","@modelcontextprotocol/server":"2.0.0","@types/bun":"^1.3.14","@typescript/typescript6":"6.0.2",ai:"^7.0.127",publint:"^0.3.23",rollup:"^4.62.4","rollup-plugin-dts":"^6.5.1",typescript:"^7.0.2",zod:"^4.4.3"},peerDependencies:{ai:"^7.0.127"},engines:{node:">=22.15"}};var Rn=An(Bt(O),"update-check.json"),hs=86400000,ws="https://registry.npmjs.org/broods/latest",bs=2000,ys=[["bun.lock","bun"],["bun.lockb","bun"],["pnpm-lock.yaml","pnpm"],["yarn.lock","yarn"]];function xn(e,n){let t=On(e),o=On(n);for(let r=0;r<3;r+=1){let s=t[r]??0,i=o[r]??0;if(s!==i)return s>i}return!Lt(e)&&Lt(n)}async function Pn(e={}){let n=await ks(),t=e.maxAgeMs??hs;if(n&&Date.now()-n.checkedAt<t)return n.latest;let o=await vs();if(o===null)return n?.latest??null;return await $s({checkedAt:Date.now(),latest:o}),o}function Ue(e){return On(e)[0]??0}function Gt(e=fs(process.cwd()),n=ms(import.meta.url),t=De.version){let o=`${pe}node_modules${pe}`,r=n.indexOf(o),s=r===-1?null:n.slice(0,r),i=s===null?n.startsWith(`${e}${pe}`):e===s||e.startsWith(`${s}${pe}`),a=n.includes(`${pe}.bun${pe}install${pe}global${pe}`),c=s??e,d=i?Ss(c):a?"bun":"npm",l=d==="npm"?"install":"add",p=d==="pnpm"&&Mt(An(c,"pnpm-workspace.yaml"))?["-w"]:[],u=`broods@${Ue(t)}`;return{manager:d,global:!i,command:d,cwd:i?c:e,args:i?[l,...p,u]:[l,"-g",u]}}async function vs(){try{let e=await fetch(ws,{signal:AbortSignal.timeout(bs),headers:{accept:"application/json"}});if(!e.ok)return null;let n=await e.json();return typeof n.version==="string"?n.version:null}catch{return null}}function Lt(e){return e.includes("-")}async function ks(){try{let e=JSON.parse(await gs(Rn,"utf8"));if(typeof e.latest!=="string")return null;if(typeof e.checkedAt!=="number")return null;return{checkedAt:e.checkedAt,latest:e.latest}}catch{return null}}function Ss(e){return ys.find(([t])=>Mt(An(e,t)))?.[1]??"npm"}function On(e){let[n]=e.trim().replace(/^v/,"").split("-");return(n??"").split(".").slice(0,3).map((t)=>Number.parseInt(t,10)||0)}async function $s(e){try{await us(Bt(Rn),{recursive:!0}),await ps(Rn,`${JSON.stringify(e)}
+`,"utf8")}catch{}}var Wt=`---
 name: broods
 description: Work on a broods account alongside a developer from Claude Code or a development agent. Covers onboarding and sign-in, creating a broods project, defining and deploying agents and their resources with the CLI, and integrating a deployed agent into existing code with the SDK. Use when asked to set up broods, create or work on a broods project, create or manage agents or any account resource, or call a deployed agent from application code.
 ---
@@ -136,7 +136,7 @@ Crons, skills, sandboxes, policies, roles, channels, and hooks have no CLI verb.
 - Env values are write-only. Reference them from configs as \`\${NAME}\`. If the user pastes a secret at you, put it in the env store and use the ref.
 - Deletes are confirmed, named, and singular. Never loop a delete over a list.
 - Editing a manifest-declared resource outside the project drifts from the definition, and the next deploy silently reverts it.
-`;var Kt=`#!/usr/bin/env bash
+`;var Ft=`#!/usr/bin/env bash
 # Onboard this machine onto broods: check the CLI, check auth, and run the
 # browser login when needed. Login is a human step, so run this where the
 # user can see the browser open and finish it themselves.
@@ -171,17 +171,17 @@ elif [ "$STATUS" -ne 0 ]; then
   # Not the expected signed-out state: surface the real failure.
   exit "$STATUS"
 fi
-`;var ae=De.version,Qe=Le(".agents","skills","broods"),oe="https://dashboard.broods.app",Ls=60000,Ms=3,Ne="eu-west-1",Bs=[{region:"eu-west-1",label:"eu-west-1 (Ireland)"},{region:"us-east-1",label:"us-east-1 (US East)"},{region:"ap-southeast-1",label:"ap-southeast-1 (Singapore)"}],B=`Global options:
+`;var ae=De.version,Qe=Le(".agents","skills","broods"),oe="https://dashboard.broods.app",Ns=60000,Ls=3,Ne="eu-west-1",Ms=[{region:"eu-west-1",label:"eu-west-1 (Ireland)"},{region:"us-east-1",label:"us-east-1 (US East)"},{region:"ap-southeast-1",label:"ap-southeast-1 (Singapore)"}],B=`Global options:
   --project <name>      Project name override (default: package name or folder)
   --stage <name>        Target stage override (BROODS_STAGE otherwise)
   --base-url <url>      broods API base URL for sync/env calls (default: discovered at login)
   --dashboard-url <url> Dashboard base URL for login and deep links (default: ${oe})
-  -h, --help            Show this help`,Gs=`Commands
+  -h, --help            Show this help`,Bs=`Commands
   Develop   dev  diff  run  logs  stream
   Ship      deploy  env  stage
   Inspect   agent  whoami
   Account   login  connect  disconnect  org  project
-  Tools     init  machine  mcp  update`,Tn={stream:"stdout"},Qt={color:!1},Ws=new Set(["agent","deploy","dev","diff","env","logs","machine","run","stage","stream"]),eo={agent:`Usage: broods agent <list|get> [name]
+  Tools     init  machine  mcp  update`,jn={stream:"stdout"},Xt={color:!1},Gs=new Set(["agent","deploy","dev","diff","env","logs","machine","run","stage","stream"]),Qt={agent:`Usage: broods agent <list|get> [name]
 Subcommands:
   list                 List the agents in the current project/stage scope
@@ -372,55 +372,55 @@ project the dependency is upgraded instead. A new major is only announced.`,whoa
 Shows the login, server, org, plan, project and stage the next command uses.
-${B}`};async function Fs(){Wi();let[,,e,...n]=process.argv;switch(e){case void 0:case"--help":case"-h":console.log(_n(n,Tn));return;case"--version":case"-v":console.log(ae);return}if(Fi(e,n),eo[e]&&(I(n,"--help")||I(n,"-h"))){console.log(ke(e,n));return}switch(e){case"init":await Hs(n);return;case"login":await Ys(n);return;case"connect":await Vs(n);return;case"disconnect":await Js(n);return;case"whoami":await Xs(n);return;case"org":await ei(n);return;case"project":await ni(n);return;case"stage":await ti(n);return;case"diff":await oi(n);return;case"deploy":await ri(n);return;case"dev":await ii(n);return;case"env":await xi(n);return;case"stream":await Ii(n);return;case"logs":await Di(n);return;case"machine":await Ti(n);return;case"agent":await Ui(n);return;case"run":await Mi(n);return;case"mcp":await Ki();return;case"update":await si();return;default:throw Error(`Unknown command: ${e}
+${B}`};async function Ws(){Gi();let[,,e,...n]=process.argv;switch(e){case void 0:case"--help":case"-h":console.log(Tn(n,jn));return;case"--version":case"-v":console.log(ae);return}if(Wi(e,n),Qt[e]&&(I(n,"--help")||I(n,"-h"))){console.log(ke(e,n));return}switch(e){case"init":await Ks(n);return;case"login":await Hs(n);return;case"connect":await zs(n);return;case"disconnect":await Vs(n);return;case"whoami":await Zs(n);return;case"org":await Qs(n);return;case"project":await ei(n);return;case"stage":await ni(n);return;case"diff":await ti(n);return;case"deploy":await oi(n);return;case"dev":await si(n);return;case"env":await Ai(n);return;case"stream":await ji(n);return;case"logs":await _i(n);return;case"machine":await Ti(n);return;case"agent":await Di(n);return;case"run":await Li(n);return;case"mcp":await Fi();return;case"update":await ri();return;default:throw Error(`Unknown command: ${e}
-${_n(n,Qt)}`)}}function Z(e){return eo[e]??_n([],Qt)}function no(e){let n=h(),t=k(e,"--base-url")??n.baseUrl,o=T(t),r=f(t??o?.baseUrl??E);return{loggedIn:o!==null,org:o?.org?.name,project:k(e,"--project")??n.project,projectGuess:Oe(process.cwd()),server:r.replace(/^https?:\/\//,""),stage:k(e,"--stage")??n.stage??"development"}}function Ks(e){if(!e.loggedIn)return[["broods login","sign in through the dashboard"]];if(!e.project)return[["broods dev","create a project and sync on save"]];return[["broods dev","sync on save, tail logs"],["broods run <agent>","chat with an agent"]]}function ke(e,n){let t=Z(e);if(!Ws.has(e))return t;let o=no(n),r=o.project??o.projectGuess;if(e!=="deploy"||k(n,"--stage")!==void 0)return`${Sn(r,o.stage,Tn)}
+${Tn(n,Xt)}`)}}function Z(e){return Qt[e]??Tn([],Xt)}function eo(e){let n=h(),t=k(e,"--base-url")??n.baseUrl,o=T(t),r=f(t??o?.baseUrl??E);return{loggedIn:o!==null,org:o?.org?.name,project:k(e,"--project")??n.project,projectGuess:Oe(process.cwd()),server:r.replace(/^https?:\/\//,""),stage:k(e,"--stage")??n.stage??"development"}}function Fs(e){if(!e.loggedIn)return[["broods login","sign in through the dashboard"]];if(!e.project)return[["broods dev","create a project and sync on save"]];return[["broods dev","sync on save, tail logs"],["broods run <agent>","chat with an agent"]]}function ke(e,n){let t=Z(e);if(!Gs.has(e))return t;let o=eo(n),r=o.project??o.projectGuess;if(e!=="deploy"||k(n,"--stage")!==void 0)return`${vn(r,o.stage,jn)}
-${t}`;let s=v(),i=s&&s!=="production"?`ignores stage ${s}`:void 0;return`${Sn(r,"production",{...Tn,note:i})}
+${t}`;let s=v(),i=s&&s!=="production"?`ignores stage ${s}`:void 0;return`${vn(r,"production",{...jn,note:i})}
-${t}`}function _n(e,n){let t=no(e);return[`broods v${ae}`,"",...Ot(t,n),"","Next",...At(Ks(t),n),"",Gs,"","Usage: broods <command> [options]    -h, --help    -v, --version","Run `broods <command> --help` for a command's flags."].join(`
-`)}async function Hs(e){let n=I(e,"--force"),t=P(process.cwd(),y);await Mn(P(t,_),{recursive:!0}),await nn(P(t,"index.ts"),ho(),n),await nn(P(t,".gitignore"),`_generated
+${t}`}function Tn(e,n){let t=eo(e);return[`broods v${ae}`,"",...Rt(t,n),"","Next",...Ot(Fs(t),n),"",Bs,"","Usage: broods <command> [options]    -h, --help    -v, --version","Run `broods <command> --help` for a command's flags."].join(`
+`)}async function Ks(e){let n=I(e,"--force"),t=P(process.cwd(),y);await Nn(P(t,_),{recursive:!0}),await nn(P(t,"index.ts"),mo(),n),await nn(P(t,".gitignore"),`_generated
 .cache
-`,n),await so(n);let o=k(e,"--dashboard-url")??oe;await Kn({dashboardUrl:o,baseUrl:L(o),project:k(e,"--project")??Oe(process.cwd()),stage:k(e,"--stage")??"development",region:k(e,"--region")??Ne,force:n}),H(`Created ${y}/`)}async function Ys(e){let n=h(),t=k(e,"--dashboard-url")??n.dashboardUrl??oe,o=await En(t);await Kn({dashboardUrl:o.dashboardUrl??t,baseUrl:o.baseUrl,project:k(e,"--project"),stage:k(e,"--stage"),region:k(e,"--region"),force:!1});let r=o.user?.email||o.user?.name||o.user?.authId,s=o.org?`${o.org.name} (${o.org.slug})`:void 0,i=o.account?.username;if(H(`Logged in to ${o.dashboardUrl}`),r)console.log(`User: ${r}`);if(s)console.log(`Org: ${s}`);if(i)console.log(`Account: ${i}`);let a=k(e,"--project")??process.env.BROODS_PROJECT;if(!a)return;let c=k(e,"--stage")??v()??"development";await Zs(o.baseUrl,o.token,a,c)}function zs(e){if(!(e instanceof m))return e instanceof Error?e.message:String(e);try{return JSON.parse(e.body).error?.message??e.message}catch{return e.message}}async function Vs(e){let[n]=te(e),t=await to(e);if(n===void 0){await qs(t);return}if(!kn(n))throw Error(`Unknown connection type ${n}.
+`,n),await ro(n);let o=k(e,"--dashboard-url")??oe;await Wn({dashboardUrl:o,baseUrl:L(o),project:k(e,"--project")??Oe(process.cwd()),stage:k(e,"--stage")??"development",region:k(e,"--region")??Ne,force:n}),H(`Created ${y}/`)}async function Hs(e){let n=h(),t=k(e,"--dashboard-url")??n.dashboardUrl??oe,o=await Sn(t);await Wn({dashboardUrl:o.dashboardUrl??t,baseUrl:o.baseUrl,project:k(e,"--project"),stage:k(e,"--stage"),region:k(e,"--region"),force:!1});let r=o.user?.email||o.user?.name||o.user?.authId,s=o.org?`${o.org.name} (${o.org.slug})`:void 0,i=o.account?.username;if(H(`Logged in to ${o.dashboardUrl}`),r)console.log(`User: ${r}`);if(s)console.log(`Org: ${s}`);if(i)console.log(`Account: ${i}`);let a=k(e,"--project")??process.env.BROODS_PROJECT;if(!a)return;let c=k(e,"--stage")??v()??"development";await qs(o.baseUrl,o.token,a,c)}function Ys(e){if(!(e instanceof m))return e instanceof Error?e.message:String(e);try{return JSON.parse(e.body).error?.message??e.message}catch{return e.message}}async function zs(e){let[n]=te(e),t=await no(e);if(n===void 0){await Js(t);return}if(!yn(n))throw Error(`Unknown connection type ${n}.
-${Z("connect")}`);let o=we[n],r=await Lt(t,n).catch((s)=>{throw Error(zs(s))});if(H(`Connected ${o.label}${r.email?` as ${r.email}`:""}.`),console.log(`Agents on model.provider "${n}" now run on it.`),o.usageUrl)console.log(`Manage usage: ${o.usageUrl}`);if(!r.models?.length)return;console.log("Models (use the id as model.modelId):");for(let s of r.models)console.log(`  ${s}`)}async function to(e){h();let n=k(e,"--base-url"),t=process.env.BROODS_ACCOUNT_SECRET;if(t)return new R({accountSecret:t,...n?{baseUrl:n}:{}});let o=await q(n);return new R({accountSecret:o.token,baseUrl:n??o.baseUrl})}async function Js(e){let[n]=te(e);if(!n||!kn(n))throw Error(Z("disconnect"));if(await(await to(e)).disconnect(n)){H(`Disconnected ${we[n].label}`);return}console.log(`No ${n} connection.`)}async function qs(e){let n=await e.listConnections();if(n.length===0)console.log("No connections yet.");else console.log(`${"TYPE".padEnd(16)} ACCOUNT`);for(let t of n)console.log(`${we[t.type].label.padEnd(16)} ${t.email??t.clientId}`);console.log(`
-Connect one: broods connect <${qe.join("|")}>`)}async function Zs(e,n,t,o){try{let s=await new N({baseUrl:e,token:n}).getRuntimeKey(t,o);if(s?.apiKey)await Ce("BROODS_API_KEY",s.apiKey),H(`Wrote BROODS_API_KEY (${s.keyHint}) to .env.local`)}catch{}}async function Xs(e){let n=h(),t=on(e),o=k(e,"--dashboard-url")??n.dashboardUrl??oe,r=Boolean(k(e,"--project")??n.project);console.log(`broods v${ae}`),console.log(`Dashboard:   ${o}`),console.log(`Project:     ${r?t.project:`none (${t.project} from folder name)`}`),console.log(`Stage:       ${t.stage}`);let s;try{s=await q(k(e,"--base-url"))}catch(l){x(l instanceof Error?l.message:String(l));return}console.log(`Server:      ${s.baseUrl}`);let i=new N({baseUrl:s.baseUrl,token:s.token}),a=await i.getOnboarding(),c=a.orgs.find((l)=>l.id===a.currentOrgId);if(a.user)console.log(`User:        ${a.user.email}`);if(console.log(`Org:         ${c?Me(c):a.currentOrgId}`),a.account)console.log(`Account:     ${a.account.username} (${a.account.status})`);if(!r){x("No project set. `broods dev` picks one.");return}await Qs(i,t,c?.name);let d=a.projects.map((l)=>l.name);if(!d.includes(t.project))x(`This org has no project named ${t.project}. It has: ${d.length>0?d.join(", "):"none"}.`)}async function Qs(e,n,t){let o=process.env.BROODS_API_KEY,r=M("BROODS_API_KEY")?"your shell":".env.local",s=null,i=null;try{s=await e.getRuntimeKey(n.project,n.stage)}catch(a){i=a instanceof Error?a.message:String(a)}if(i)console.log("Runtime key: unavailable"),x(`Could not read the runtime key: ${i}`);else if(!s?.apiKey)console.log("Runtime key: none for this scope"),x(`${n.project}/${n.stage} does not exist in ${t??"this org"} yet. \`broods dev\` will create it.`);else if(!o)console.log(`Runtime key: ${s.keyHint} (not in .env.local)`),x("BROODS_API_KEY is not set locally. Run `broods dev`.");else if(o===s.apiKey)console.log(`Runtime key: ${s.keyHint} (matches this org and stage)`);else console.log(`Runtime key: ${s.keyHint} expected`),x(`BROODS_API_KEY from ${r} belongs to a different org or stage. Run \`broods stage use ${n.stage}\` to repoint it.`)}async function ei(e){let[n,t]=te(e);if(!n){console.log(ke("org",e));return}let o=n==="list"||n==="ls",r=n==="use"||n==="select";if(!o&&!r&&!(n==="create"||n==="new"))throw Error(`Unknown org subcommand: ${n}
+${Z("connect")}`);let o=we[n],r=await Nt(t,n).catch((s)=>{throw Error(Ys(s))});if(H(`Connected ${o.label}${r.email?` as ${r.email}`:""}.`),console.log(`Agents on model.provider "${n}" now run on it.`),o.usageUrl)console.log(`Manage usage: ${o.usageUrl}`);if(!r.models?.length)return;console.log("Models (use the id as model.modelId):");for(let s of r.models)console.log(`  ${s}`)}async function no(e){h();let n=k(e,"--base-url"),t=process.env.BROODS_ACCOUNT_SECRET;if(t)return new R({accountSecret:t,...n?{baseUrl:n}:{}});let o=await q(n);return new R({accountSecret:o.token,baseUrl:n??o.baseUrl})}async function Vs(e){let[n]=te(e);if(!n||!yn(n))throw Error(Z("disconnect"));if(await(await no(e)).disconnect(n)){H(`Disconnected ${we[n].label}`);return}console.log(`No ${n} connection.`)}async function Js(e){let n=await e.listConnections();if(n.length===0)console.log("No connections yet.");else console.log(`${"TYPE".padEnd(16)} ACCOUNT`);for(let t of n)console.log(`${we[t.type].label.padEnd(16)} ${t.email??t.clientId}`);console.log(`
+Connect one: broods connect <${qe.join("|")}>`)}async function qs(e,n,t,o){try{let s=await new N({baseUrl:e,token:n}).getRuntimeKey(t,o);if(s?.apiKey)await Ce("BROODS_API_KEY",s.apiKey),H(`Wrote BROODS_API_KEY (${s.keyHint}) to .env.local`)}catch{}}async function Zs(e){let n=h(),t=on(e),o=k(e,"--dashboard-url")??n.dashboardUrl??oe,r=Boolean(k(e,"--project")??n.project);console.log(`broods v${ae}`),console.log(`Dashboard:   ${o}`),console.log(`Project:     ${r?t.project:`none (${t.project} from folder name)`}`),console.log(`Stage:       ${t.stage}`);let s;try{s=await q(k(e,"--base-url"))}catch(l){x(l instanceof Error?l.message:String(l));return}console.log(`Server:      ${s.baseUrl}`);let i=new N({baseUrl:s.baseUrl,token:s.token}),a=await i.getOnboarding(),c=a.orgs.find((l)=>l.id===a.currentOrgId);if(a.user)console.log(`User:        ${a.user.email}`);if(console.log(`Org:         ${c?Me(c):a.currentOrgId}`),a.account)console.log(`Account:     ${a.account.username} (${a.account.status})`);if(!r){x("No project set. `broods dev` picks one.");return}await Xs(i,t,c?.name);let d=a.projects.map((l)=>l.name);if(!d.includes(t.project))x(`This org has no project named ${t.project}. It has: ${d.length>0?d.join(", "):"none"}.`)}async function Xs(e,n,t){let o=process.env.BROODS_API_KEY,r=M("BROODS_API_KEY")?"your shell":".env.local",s=null,i=null;try{s=await e.getRuntimeKey(n.project,n.stage)}catch(a){i=a instanceof Error?a.message:String(a)}if(i)console.log("Runtime key: unavailable"),x(`Could not read the runtime key: ${i}`);else if(!s?.apiKey)console.log("Runtime key: none for this scope"),x(`${n.project}/${n.stage} does not exist in ${t??"this org"} yet. \`broods dev\` will create it.`);else if(!o)console.log(`Runtime key: ${s.keyHint} (not in .env.local)`),x("BROODS_API_KEY is not set locally. Run `broods dev`.");else if(o===s.apiKey)console.log(`Runtime key: ${s.keyHint} (matches this org and stage)`);else console.log(`Runtime key: ${s.keyHint} expected`),x(`BROODS_API_KEY from ${r} belongs to a different org or stage. Run \`broods stage use ${n.stage}\` to repoint it.`)}async function Qs(e){let[n,t]=te(e);if(!n){console.log(ke("org",e));return}let o=n==="list"||n==="ls",r=n==="use"||n==="select";if(!o&&!r&&!(n==="create"||n==="new"))throw Error(`Unknown org subcommand: ${n}
 ${Z("org")}`);let i=h(),a=k(e,"--dashboard-url")??i.dashboardUrl??oe,c=await Be(a,k(e,"--base-url")),d=new N({baseUrl:c.baseUrl,token:c.token}),l=await d.getOnboarding();if(o){for(let u of l.orgs){let b=u.accountStatus==="active"?"":` [${u.accountStatus} account]`;console.log(Ee(`${Me(u)}${b}`,u.id===l.currentOrgId))}console.log(`
-Only orgs where you are owner or admin can be selected from the CLI.`);return}if(r){let u=l.orgs.filter((S)=>S.accountStatus==="active"),b=t?u.find((S)=>S.slug===t||S.name===t||S.id===t):await _e("Select organization",u,Me,u.findIndex((S)=>S.id===l.currentOrgId));if(!b)throw Error(`No selectable organization matches "${t}". Run \`broods org list\`.`);await Vt(d,c,await d.selectOnboardingOrg(b.id),e);return}let p=t??await ye("Organization name",Oe(process.cwd()));if(!p.trim())throw Error("Organization name is required.");await Vt(d,c,await d.createOnboardingOrg(p),e)}async function ni(e){let[n,t]=te(e);if(!n){console.log(ke("project",e));return}let o=n==="list"||n==="ls";if(!o&&!(n==="delete"||n==="rm"))throw Error(`Unknown project subcommand: ${n}
+Only orgs where you are owner or admin can be selected from the CLI.`);return}if(r){let u=l.orgs.filter((S)=>S.accountStatus==="active"),b=t?u.find((S)=>S.slug===t||S.name===t||S.id===t):await _e("Select organization",u,Me,u.findIndex((S)=>S.id===l.currentOrgId));if(!b)throw Error(`No selectable organization matches "${t}". Run \`broods org list\`.`);await zt(d,c,await d.selectOnboardingOrg(b.id),e);return}let p=t??await ye("Organization name",Oe(process.cwd()));if(!p.trim())throw Error("Organization name is required.");await zt(d,c,await d.createOnboardingOrg(p),e)}async function ei(e){let[n,t]=te(e);if(!n){console.log(ke("project",e));return}let o=n==="list"||n==="ls";if(!o&&!(n==="delete"||n==="rm"))throw Error(`Unknown project subcommand: ${n}
-${Z("project")}`);let s=h(),i=k(e,"--dashboard-url")??s.dashboardUrl??oe,a=on(e),c=await Be(i,k(e,"--base-url")),d=new N({baseUrl:c.baseUrl,token:c.token});if(o){let S=await d.listProjects();if(S.length===0){console.log("This org has no projects yet. `broods dev` creates one.");return}console.log("Projects:");for(let A of S)console.log(fi(A,a.project));let C=S.filter((A)=>A.empty);if(C.length>0)console.log(`
-${C.length} empty project(s). Delete one with \`broods project delete <name>\`.`);return}let l=t??await ye("Project to delete","");if(!l.trim())throw Error("Project name is required.");let p=await d.listProjects(),u=p.find((S)=>S.name===l||S.slug===l);if(!u)throw Error(`No project named "${l}". Existing: ${p.map((S)=>S.name).join(", ")}.`);if(!I(e,"--yes")){if(console.log(`Deleting ${u.name} removes ${Nn(u)}.`),!await Xe(`Permanently delete project ${u.name}?`)){console.log("Left it alone. Pass --yes to skip this prompt.");return}}let b=await d.deleteProject(u.id);if(!b)throw Error(`Project ${u.name} was not found.`);if(H(`Deleted project ${b.name} (${Nn(b)})`),b.name===a.project||b.slug===a.project)console.log("That was the project this directory points at. Update BROODS_PROJECT in .env.local.")}async function ti(e){let[n,t]=te(e);if(!n){console.log(ke("stage",e));return}let o=n==="list"||n==="ls",r=n==="use"||n==="select";if(!o&&!r&&!(n==="create"||n==="new"))throw Error(`Unknown stage subcommand: ${n}
+${Z("project")}`);let s=h(),i=k(e,"--dashboard-url")??s.dashboardUrl??oe,a=on(e),c=await Be(i,k(e,"--base-url")),d=new N({baseUrl:c.baseUrl,token:c.token});if(o){let S=await d.listProjects();if(S.length===0){console.log("This org has no projects yet. `broods dev` creates one.");return}console.log("Projects:");for(let A of S)console.log(pi(A,a.project));let C=S.filter((A)=>A.empty);if(C.length>0)console.log(`
+${C.length} empty project(s). Delete one with \`broods project delete <name>\`.`);return}let l=t??await ye("Project to delete","");if(!l.trim())throw Error("Project name is required.");let p=await d.listProjects(),u=p.find((S)=>S.name===l||S.slug===l);if(!u)throw Error(`No project named "${l}". Existing: ${p.map((S)=>S.name).join(", ")}.`);if(!I(e,"--yes")){if(console.log(`Deleting ${u.name} removes ${Dn(u)}.`),!await Xe(`Permanently delete project ${u.name}?`)){console.log("Left it alone. Pass --yes to skip this prompt.");return}}let b=await d.deleteProject(u.id);if(!b)throw Error(`Project ${u.name} was not found.`);if(H(`Deleted project ${b.name} (${Dn(b)})`),b.name===a.project||b.slug===a.project)console.log("That was the project this directory points at. Update BROODS_PROJECT in .env.local.")}async function ni(e){let[n,t]=te(e);if(!n){console.log(ke("stage",e));return}let o=n==="list"||n==="ls",r=n==="use"||n==="select";if(!o&&!r&&!(n==="create"||n==="new"))throw Error(`Unknown stage subcommand: ${n}
-${Z("stage")}`);let i=h(),a=k(e,"--dashboard-url")??i.dashboardUrl??oe,c=on(e),d=await Be(a,k(e,"--base-url")),l=new N({baseUrl:d.baseUrl,token:d.token});if(o){let C=await l.listStages(c.project);if(C.length===0){console.log(`${c.project} has no stages yet. \`broods dev\` creates Development.`);return}console.log(`Stages for ${c.project}:`);for(let A of C)console.log(mi(A,c.stage));return}if(r){let C=await l.listStages(c.project),A=t?C.find((re)=>Ln(re.name,t)):await _e("Select stage",C,io,C.findIndex((re)=>Ln(re.name,c.stage)));if(!A)throw Error(`${c.project} has no stage "${t}". Existing: ${C.map((re)=>re.name).join(", ")}. Create it with \`broods stage create ${t} --from ${c.stage}\`.`);let V=M("BROODS_STAGE");await Ce("BROODS_STAGE",A.name),console.log(`Stage: ${A.name} (wrote BROODS_STAGE)`),Un("BROODS_STAGE",V),await Dn(l,{project:c.project,stage:A.name});return}let p=t??await ye("Stage name","staging");if(!p.trim())throw Error("Stage name is required.");let u=k(e,"--from"),b=await l.createStage(c.project,p,u);if(H(`Created stage ${b.stage.name} in ${c.project}${b.clonedFrom?` from ${b.clonedFrom}`:""}`),b.clonedFrom)console.log(`  ${b.stage.agentCount} agent(s), ${b.stage.variableCount} env var(s) copied`);if(!I(e,"--use")){console.log(`Switch to it with \`broods stage use ${b.stage.name}\`.`);return}let S=M("BROODS_STAGE");await Ce("BROODS_STAGE",b.stage.name),console.log(`Stage: ${b.stage.name} (wrote BROODS_STAGE)`),Un("BROODS_STAGE",S),await Dn(l,{project:c.project,stage:b.stage.name})}async function oi(e){let{manifest:n,config:t}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),o=await q(k(e,"--base-url")??t.baseUrl),r=new N({baseUrl:o.baseUrl,token:o.token}),s=await r.getManifest(n.project,n.stage);Ze(vn(n,s?.manifest??null)),$i(await Bn(r,n),`${n.project}/${n.stage}`)}async function ri(e){let{manifest:n,config:t,resourceAliases:o,channels:r}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"deploy",useRuntimeStage:!1}),s=await q(k(e,"--base-url")??t.baseUrl),a=await new N({baseUrl:s.baseUrl,token:s.token}).putManifest(n,I(e,"--prune"),I(e,"--rotate-key"));await Ke(n,a.ids,process.cwd(),o,a.deployment,r),await fo(),H(`Synced ${a.manifest.resources.length} resources to ${n.project}/${n.stage}`),await oo(a.deployment),ao(r,a),ro(a)}async function oo(e){if(!e)return;if(e.apiKey){await Ce("BROODS_API_KEY",e.apiKey),H(`Wrote BROODS_API_KEY (${e.keyHint}) to .env.local`);return}}function ro(e){let n=e.warnings?.missingPolicies??[];if(n.length>0)x(`${n.length} policy ref(s) in agent config match no policy resource in this deploy. One that is not an existing policy id refuses every action at runtime: ${n.join(", ")}`);let t=e.warnings?.reservedResources??[];if(t.length>0)x(`Kept on prune, a reserved sandbox instance is still live: ${t.join(", ")}. Terminate it from the dashboard, then deploy again.`)}async function si(){let e=await In({maxAgeMs:0});if(e===null)throw Error("Could not reach the npm registry to check for a newer broods.");if(!jn(e,ae)){console.log(`broods v${ae} is already the newest release.`);return}let n=Wt(),t=Ue(ae),o=Ue(e)===t,r=o?e:`the newest ${t}.x`;if(console.log(`Updating broods ${ae} → ${r} ${n.global?"globally":"in this project"}`),console.log(`$ ${[n.command,...n.args].join(" ")}`),await new Promise((s,i)=>{let a=Xt(n.command,n.args,{cwd:n.cwd,stdio:"inherit",shell:process.platform==="win32"});a.on("error",i),a.on("exit",(c)=>{if(c===0){s();return}i(Error(`${n.command} exited with code ${c??"unknown"}`))})}),console.log(`broods ${o?e:`${t}.x`} installed.`),!o)x(`broods ${e} is a new major version. Install broods@${Ue(e)} yourself to move to it.`)}async function Yt(){let e=await In();if(e===null||!jn(e,ae))return;x(`broods ${e} is out, you are on ${ae}. Run \`broods update\`.`)}async function ii(e){if(await ci(e),I(e,"--once")){if(!process.env.BROODS_SUPPRESS_DEV_TARGET)await Jt(e),await Yt();let u=Ht.now();await ki(e),jt(Ht.now()-u);return}let n=Le(Us(),`broods-declined-${process.pid}.txt`),t={...process.env,BROODS_DECLINED_FILE:n,BROODS_SUPPRESS_DEV_TARGET:"1",BROODS_RELOAD_ENV:"1"};await Jt(e),await Yt();let o,r=!1,s=!1,i,a=async()=>{let u=await Bi();if(u===i)return;await vi(e,t),i=u},c=(u)=>console.error(u instanceof Error?u.message:String(u));await a().catch(c);let d=()=>{if(r){s=!0;return}r=!0,a().catch(c).finally(()=>{if(r=!1,s)s=!1,d()})},l=Ds(P(process.cwd(),y),{recursive:!0},(u,b)=>{if(!b||Gi(b))return;clearTimeout(o),o=setTimeout(d,150)}),p=new AbortController;ai(e,p.signal),process.on("SIGINT",()=>{p.abort(),l.close(),process.exit(0)})}async function ai(e,n){let t;try{t=await rn(e)}catch(r){console.log(`· live logs off. ${r instanceof Error?r.message:String(r)}`);return}let o=Gn(e);try{for await(let r of He(t,{backfill:0,keepReconnecting:!0,minLevel:o,signal:n,onReconnect:Wn}))console.log(Fn(r))}catch(r){if(!n.aborted)console.error(`live logs: ${r instanceof Error?r.message:String(r)}`)}}async function ci(e){await di(),await so(!1),await ui(e)}async function so(e){let n=process.cwd();if(!(await Promise.all([".agent",".agents",".claude","AGENTS.md","CLAUDE.md"].map((c)=>zt(P(n,c))))).includes(!0))return;let r=P(n,Qe);if(!e&&await zt(P(r,"SKILL.md")))return;let s=Le(Qe,"SKILL.md"),i=Le(Qe,"scripts","onboard.sh");for(let c of[s,i])if(await li(n,c)){x(`Skipped the agent skill: ${c} crosses a symlink.`);return}await Mn(P(r,"scripts"),{recursive:!0}),await ve(P(r,"SKILL.md"),Ft);let a=P(r,"scripts","onboard.sh");await ve(a,Kt),await Os(a,493),H(`Installed the broods agent skill at ${Qe}/`)}async function li(e,n){let t=e;for(let o of n.split(_s)){t=P(t,o);try{if((await As(t)).isSymbolicLink())return!0}catch{return!1}}return!1}async function zt(e){try{return await Ps(e),!0}catch{return!1}}async function di(){let e=P(process.cwd(),y);await Mn(P(e,_),{recursive:!0});let n=[];if(await Hn(e,n),n.length>0)return;await nn(P(e,"index.ts"),ho(),!1),await nn(P(e,".gitignore"),`_generated
+${Z("stage")}`);let i=h(),a=k(e,"--dashboard-url")??i.dashboardUrl??oe,c=on(e),d=await Be(a,k(e,"--base-url")),l=new N({baseUrl:d.baseUrl,token:d.token});if(o){let C=await l.listStages(c.project);if(C.length===0){console.log(`${c.project} has no stages yet. \`broods dev\` creates Development.`);return}console.log(`Stages for ${c.project}:`);for(let A of C)console.log(fi(A,c.stage));return}if(r){let C=await l.listStages(c.project),A=t?C.find((re)=>Un(re.name,t)):await _e("Select stage",C,so,C.findIndex((re)=>Un(re.name,c.stage)));if(!A)throw Error(`${c.project} has no stage "${t}". Existing: ${C.map((re)=>re.name).join(", ")}. Create it with \`broods stage create ${t} --from ${c.stage}\`.`);let V=M("BROODS_STAGE");await Ce("BROODS_STAGE",A.name),console.log(`Stage: ${A.name} (wrote BROODS_STAGE)`),_n("BROODS_STAGE",V),await In(l,{project:c.project,stage:A.name});return}let p=t??await ye("Stage name","staging");if(!p.trim())throw Error("Stage name is required.");let u=k(e,"--from"),b=await l.createStage(c.project,p,u);if(H(`Created stage ${b.stage.name} in ${c.project}${b.clonedFrom?` from ${b.clonedFrom}`:""}`),b.clonedFrom)console.log(`  ${b.stage.agentCount} agent(s), ${b.stage.variableCount} env var(s) copied`);if(!I(e,"--use")){console.log(`Switch to it with \`broods stage use ${b.stage.name}\`.`);return}let S=M("BROODS_STAGE");await Ce("BROODS_STAGE",b.stage.name),console.log(`Stage: ${b.stage.name} (wrote BROODS_STAGE)`),_n("BROODS_STAGE",S),await In(l,{project:c.project,stage:b.stage.name})}async function ti(e){let{manifest:n,config:t}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),o=await q(k(e,"--base-url")??t.baseUrl),r=new N({baseUrl:o.baseUrl,token:o.token}),s=await r.getManifest(n.project,n.stage);Ze(bn(n,s?.manifest??null)),Si(await Ln(r,n),`${n.project}/${n.stage}`)}async function oi(e){let{manifest:n,config:t,resourceAliases:o,channels:r}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"deploy",useRuntimeStage:!1}),s=await q(k(e,"--base-url")??t.baseUrl),a=await new N({baseUrl:s.baseUrl,token:s.token}).putManifest(n,I(e,"--prune"),I(e,"--rotate-key"));await Ke(n,a.ids,process.cwd(),o,a.deployment,r),await po(),H(`Synced ${a.manifest.resources.length} resources to ${n.project}/${n.stage}`),await to(a.deployment),io(r,a),oo(a)}async function to(e){if(!e)return;if(e.apiKey){await Ce("BROODS_API_KEY",e.apiKey),H(`Wrote BROODS_API_KEY (${e.keyHint}) to .env.local`);return}}function oo(e){let n=e.warnings?.missingPolicies??[];if(n.length>0)x(`${n.length} policy ref(s) in agent config match no policy resource in this deploy. One that is not an existing policy id refuses every action at runtime: ${n.join(", ")}`);let t=e.warnings?.reservedResources??[];if(t.length>0)x(`Kept on prune, a reserved sandbox instance is still live: ${t.join(", ")}. Terminate it from the dashboard, then deploy again.`)}async function ri(){let e=await Pn({maxAgeMs:0});if(e===null)throw Error("Could not reach the npm registry to check for a newer broods.");if(!xn(e,ae)){console.log(`broods v${ae} is already the newest release.`);return}let n=Gt(),t=Ue(ae),o=Ue(e)===t,r=o?e:`the newest ${t}.x`;if(console.log(`Updating broods ${ae} → ${r} ${n.global?"globally":"in this project"}`),console.log(`$ ${[n.command,...n.args].join(" ")}`),await new Promise((s,i)=>{let a=Zt(n.command,n.args,{cwd:n.cwd,stdio:"inherit",shell:process.platform==="win32"});a.on("error",i),a.on("exit",(c)=>{if(c===0){s();return}i(Error(`${n.command} exited with code ${c??"unknown"}`))})}),console.log(`broods ${o?e:`${t}.x`} installed.`),!o)x(`broods ${e} is a new major version. Install broods@${Ue(e)} yourself to move to it.`)}async function Ht(){let e=await Pn();if(e===null||!xn(e,ae))return;x(`broods ${e} is out, you are on ${ae}. Run \`broods update\`.`)}async function si(e){if(await ai(e),I(e,"--once")){if(!process.env.BROODS_SUPPRESS_DEV_TARGET)await Vt(e),await Ht();let u=Kt.now();await vi(e),Pt(Kt.now()-u);return}let n=Le(Ds(),`broods-declined-${process.pid}.txt`),t={...process.env,BROODS_DECLINED_FILE:n,BROODS_SUPPRESS_DEV_TARGET:"1",BROODS_RELOAD_ENV:"1"};await Vt(e),await Ht();let o,r=!1,s=!1,i,a=async()=>{let u=await Mi();if(u===i)return;await yi(e,t),i=u},c=(u)=>console.error(u instanceof Error?u.message:String(u));await a().catch(c);let d=()=>{if(r){s=!0;return}r=!0,a().catch(c).finally(()=>{if(r=!1,s)s=!1,d()})},l=_s(P(process.cwd(),y),{recursive:!0},(u,b)=>{if(!b||Bi(b))return;clearTimeout(o),o=setTimeout(d,150)}),p=new AbortController;ii(e,p.signal),process.on("SIGINT",()=>{p.abort(),l.close(),process.exit(0)})}async function ii(e,n){let t;try{t=await rn(e)}catch(r){console.log(`· live logs off. ${r instanceof Error?r.message:String(r)}`);return}let o=Mn(e);try{for await(let r of He(t,{backfill:0,keepReconnecting:!0,minLevel:o,signal:n,onReconnect:Bn}))console.log(Gn(r))}catch(r){if(!n.aborted)console.error(`live logs: ${r instanceof Error?r.message:String(r)}`)}}async function ai(e){await li(),await ro(!1),await di(e)}async function ro(e){let n=process.cwd();if(!(await Promise.all([".agent",".agents",".claude","AGENTS.md","CLAUDE.md"].map((c)=>Yt(P(n,c))))).includes(!0))return;let r=P(n,Qe);if(!e&&await Yt(P(r,"SKILL.md")))return;let s=Le(Qe,"SKILL.md"),i=Le(Qe,"scripts","onboard.sh");for(let c of[s,i])if(await ci(n,c)){x(`Skipped the agent skill: ${c} crosses a symlink.`);return}await Nn(P(r,"scripts"),{recursive:!0}),await ve(P(r,"SKILL.md"),Wt);let a=P(r,"scripts","onboard.sh");await ve(a,Ft),await Rs(a,493),H(`Installed the broods agent skill at ${Qe}/`)}async function ci(e,n){let t=e;for(let o of n.split(Is)){t=P(t,o);try{if((await Os(t)).isSymbolicLink())return!0}catch{return!1}}return!1}async function Yt(e){try{return await xs(e),!0}catch{return!1}}async function li(){let e=P(process.cwd(),y);await Nn(P(e,_),{recursive:!0});let n=[];if(await Fn(e,n),n.length>0)return;await nn(P(e,"index.ts"),mo(),!1),await nn(P(e,".gitignore"),`_generated
 .cache
-`,!1),H(`Created starter ${y}/`)}async function ui(e){let n=P(process.cwd(),".env.local"),t=await Re(n),o=mo(t),r=o.BROODS_STAGE;if(["BROODS_DASHBOARD_URL","BROODS_BASE_URL","BROODS_PROJECT","BROODS_REGION"].filter((S)=>o[S]===void 0).length===0&&r!==void 0)return;let i=o.BROODS_PROJECT===void 0,a=r===void 0,c=o.BROODS_REGION===void 0,d=h(),l=k(e,"--dashboard-url")??d.dashboardUrl??oe,p=k(e,"--project")??process.env.BROODS_PROJECT??Oe(process.cwd()),u=k(e,"--stage")??v()??"development",b=k(e,"--region")??process.env.BROODS_REGION??Ne;if(process.stdin.isTTY&&i){let S=await Be(l,k(e,"--base-url")),C=new N({baseUrl:S.baseUrl,token:S.token}),A=await gi(C,S),V=await hi(C,A);if(p=await yi(V,p),!p.trim())throw Error("Project name is required.")}if(process.stdin.isTTY&&a){if(u=await ye("Stage",u),!u.trim())throw Error("Stage is required.")}if(process.stdin.isTTY&&c){let S=[...Bs];b=await _e("Select service region",S,(C)=>C.label,S.findIndex((C)=>C.region===b)).then((C)=>C.region)}await Kn({dashboardUrl:l,baseUrl:d.baseUrl??L(l),project:p,stage:u,region:b,force:!1})}async function Be(e,n){try{return await q(n)}catch(t){if(!process.stdin.isTTY)throw t;return x(`${t instanceof Error?t.message:String(t)} Starting browser login.`),await En(e)}}async function gi(e,n){try{return await e.getOnboarding()}catch(t){if(!(t instanceof Ve)||!n.org)throw t;return x("This broods server cannot list your orgs yet; using the org from your login."),{currentOrgId:n.org.id,orgs:[{id:n.org.id,name:n.org.name,slug:n.org.slug,role:"admin",accountStatus:"active"}],projects:[]}}}async function Vt(e,n,t,o){let r=t.orgs.find((s)=>s.id===t.currentOrgId);if(!r)throw Error("Selected organization is not visible to this login");if(process.env.BROODS_TOKEN)x("BROODS_TOKEN is set, so the switch applies to this token only and was not stored.");else await W({...n,org:{id:r.id,name:r.name,slug:r.slug},...t.account?{account:{id:t.account.id,username:t.account.username}}:{}});console.log(`Org: ${Me(r)}`),console.log(`Projects: ${t.projects.length>0?t.projects.map((s)=>s.name).join(", "):"none yet"}`),await Dn(e,on(o))}async function Dn(e,n){let t;try{t=await e.getRuntimeKey(n.project,n.stage)}catch(r){x(`Could not read the runtime key for ${n.project}/${n.stage} (${r instanceof Error?r.message:String(r)}). BROODS_API_KEY still points at the previous scope. Run \`broods whoami\` to check it.`);return}if(!t?.apiKey){x(`${n.project}/${n.stage} is not synced here yet, so BROODS_API_KEY still points at the previous scope. Run \`broods dev\`.`);return}let o=M("BROODS_API_KEY");if(!o&&process.env.BROODS_API_KEY===t.apiKey)return;await Ce("BROODS_API_KEY",t.apiKey),H(`Wrote BROODS_API_KEY (${t.keyHint}) to .env.local`),Un("BROODS_API_KEY",o)}function Un(e,n){if(!n)return;x(`${e} is exported in your shell, which wins over .env.local. Run \`unset ${e}\` or the next broods command keeps the old value.`)}function Me(e){let n=e.role==="owner"||e.role==="admin"?e.role:"member",t=e.plan?`, ${e.plan} plan`:"";return`${e.name} (${e.slug}, ${n}${t})`}function pi(e){return e.slug===e.name?e.name:`${e.name} (${e.slug})`}function Nn(e){return e.empty?"nothing (it is already empty)":`${e.stageCount} stage(s), ${e.agentCount} agent(s), ${e.variableCount} env var(s), ${e.deploymentCount} deployment(s), ${e.fileCount} workspace file(s)`}function fi(e,n){let t=e.empty?"empty":Nn(e);return Ee(`${e.name}: ${t}`,e.name===n||e.slug===n)}function mi(e,n){return Ee(io(e),Ln(e.name,n))}function io(e){let n=e.deploymentRegion?`, ${e.deploymentRegion}`:"";return`${e.name} (${e.kind}${n}): ${e.agentCount} agent(s), ${e.variableCount} env var(s)`}function Ln(e,n){return e.trim().toLowerCase()===n.trim().toLowerCase()}function on(e){return h(),{project:k(e,"--project")??process.env.BROODS_PROJECT??Oe(process.cwd()),stage:k(e,"--stage")??v()??"development"}}async function hi(e,n){let t=n.orgs.filter((s)=>s.accountStatus==="active"),o={kind:"create",name:"New organization"},r=await _e("Select organization",[...t,o],(s)=>("kind"in s)?"Create new organization":Me(s),t.findIndex((s)=>s.id===n.currentOrgId));if("kind"in r){let s=await ye("Organization name",Oe(process.cwd()));if(!s.trim())throw Error("Organization name is required.");return await e.createOnboardingOrg(s)}return r.id===n.currentOrgId?n:await e.selectOnboardingOrg(r.id)}function wi(e,n){return e.projects.find((o)=>o.name===n||o.slug===n)?.name??n}function bi(e,n){return e.projects.find((t)=>t.name===n||t.slug===n)}async function yi(e,n){let t=wi(e,n);if(e.projects.length===0)return ye("Project name",t);for(;;){let o=await Ut("Select project",e.projects,pi,{hint:"type a new project name",defaultValue:t}),r=typeof o==="string"?o:o.name,s=bi(e,r);if(!s)return r;if(await Xe(`Continue with the existing project ${s.name}?`))return s.name}}function vi(e,n){return new Promise((t,o)=>{let r=process.argv[1]??"",s=Xt(process.execPath,[r,"dev","--once",...e],{stdio:"inherit",env:n});s.on("error",o),s.on("exit",(i,a)=>{if(i===0){t();return}o(Error(a?`Sync child exited from signal ${a}`:`Sync child exited with code ${i??"unknown"}`))})})}async function ki(e){let n=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),t=await q(k(e,"--base-url")??n.config.baseUrl),o=new N({baseUrl:t.baseUrl,token:t.token}),r=await co(o,n.manifest,await Bn(o,n.manifest));if(r.length>0)$n(r);for(let s=1;;s+=1)try{return await Si(o,n)}catch(i){if(!(i instanceof ze)||s===Ms)throw i;x("Stage changed in another session. Re-reading...")}}async function Si(e,n){let{manifest:t,resourceAliases:o,channels:r}=n,s=await e.getManifest(t.project,t.stage),i=vn(t,s?.manifest??null);Ze(i.filter((u)=>u.operation!=="delete"));let a=await e.putManifest(t,!1,!1,s===null?0:s.revision);await Ke(t,a.ids,process.cwd(),o,a.deployment,r),await fo();let c=await Ri(),d=i.filter((u)=>u.operation==="delete"),l=d.filter((u)=>!c.has(`${u.kind}:${u.name}`)),p=!1;if(l.length>0)if(x("These remote resources are no longer declared locally:"),Ze(l),await Xe(`Delete ${l.length} resource(s) from ${t.project}/${t.stage}?`))a=await e.putManifest(t,!0,!1,a.revision),await Ke(t,a.ids,process.cwd(),o,a.deployment,r),await Ai(),p=!0;else await Oi(l.map((u)=>`${u.kind}:${u.name}`));if(!p&&d.length>0){let u=d.map((b)=>`${b.kind}:${b.name}`).join(", ");x(`${d.length} undeclared resource(s) kept remotely: ${u}. Re-declare in code or run \`deploy --prune\` to remove.`)}return await oo(a.deployment),ao(r,a),ro(a),a}function ao(e,n){let t=n.deployment;if(!t||e.length===0)return;let o=new F,r=new Map;for(let i of e){if(!n.ids.agents[i.agentName])continue;let a=r.get(i.type)??[];a.push(i.alias),r.set(i.type,a)}let s=t.stageKind===void 0||t.stageKind==="production";for(let[i,a]of r){let c=s?o.accountWebhookUrl(t.accountId,i):o.stageWebhookUrl(t.accountId,t.endpointId,i);console.log(`Channel ${a.join(", ")} (${i}): ${c}${i==="pancake"?"?secret=<PANCAKE_WEBHOOK_SECRET>":""}`)}}async function Bn(e,n){let t=pt(n).filter((r)=>!r.startsWith("BROODS_"));if(t.length===0)return[];let o=new Map((await e.listEnv(n.project,n.stage)).map((r)=>[r.name,r.valueDigest]));return t.map((r)=>({name:r,state:Ei(r,o)}))}async function co(e,n,t){let o=t.filter((r)=>r.state==="unset"||r.state==="drifted").map((r)=>r.name);if(o.length===0)return[];return await Promise.all(o.map((r)=>e.setEnv(n.project,n.stage,r,process.env[r]))),o}function $i(e,n){let t=en(e,"drifted");if(t.length>0)x(`.env.local and ${n} disagree on ${t.length} variable(s): ${t.join(", ")}. Run \`broods env sync\` to push the local values.`)}function Ei(e,n){let t=process.env[e],o=n.get(e);if(t===void 0||t==="")return o===void 0?"unresolved":"stage-only";if(o===void 0)return"unset";return o===Ci(t)?"synced":"drifted"}function Ci(e){return Zt("sha256").update(e).digest("hex")}function en(e,n){return e.filter((t)=>t.state===n).map((t)=>t.name)}async function Jt(e){let n=h(),{manifest:t,config:o}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),r=await q(k(e,"--base-url")??o.baseUrl);xt({project:t.project,stage:t.stage,dashboardUrl:k(e,"--dashboard-url")??n.dashboardUrl??r.dashboardUrl??o.dashboardUrl??oe})}async function Ri(){let e=process.env.BROODS_DECLINED_FILE;if(!e)return new Set;let n=await Re(e);return new Set(n.split(/\r?\n/).map((t)=>t.trim()).filter(Boolean))}async function Oi(e){let n=process.env.BROODS_DECLINED_FILE;if(!n||e.length===0)return;await ve(n,`${e.join(`
+`,!1),H(`Created starter ${y}/`)}async function di(e){let n=P(process.cwd(),".env.local"),t=await Re(n),o=fo(t),r=o.BROODS_STAGE;if(["BROODS_DASHBOARD_URL","BROODS_BASE_URL","BROODS_PROJECT","BROODS_REGION"].filter((S)=>o[S]===void 0).length===0&&r!==void 0)return;let i=o.BROODS_PROJECT===void 0,a=r===void 0,c=o.BROODS_REGION===void 0,d=h(),l=k(e,"--dashboard-url")??d.dashboardUrl??oe,p=k(e,"--project")??process.env.BROODS_PROJECT??Oe(process.cwd()),u=k(e,"--stage")??v()??"development",b=k(e,"--region")??process.env.BROODS_REGION??Ne;if(process.stdin.isTTY&&i){let S=await Be(l,k(e,"--base-url")),C=new N({baseUrl:S.baseUrl,token:S.token}),A=await ui(C,S),V=await mi(C,A);if(p=await bi(V,p),!p.trim())throw Error("Project name is required.")}if(process.stdin.isTTY&&a){if(u=await ye("Stage",u),!u.trim())throw Error("Stage is required.")}if(process.stdin.isTTY&&c){let S=[...Ms];b=await _e("Select service region",S,(C)=>C.label,S.findIndex((C)=>C.region===b)).then((C)=>C.region)}await Wn({dashboardUrl:l,baseUrl:d.baseUrl??L(l),project:p,stage:u,region:b,force:!1})}async function Be(e,n){try{return await q(n)}catch(t){if(!process.stdin.isTTY)throw t;return x(`${t instanceof Error?t.message:String(t)} Starting browser login.`),await Sn(e)}}async function ui(e,n){try{return await e.getOnboarding()}catch(t){if(!(t instanceof Ve)||!n.org)throw t;return x("This broods server cannot list your orgs yet; using the org from your login."),{currentOrgId:n.org.id,orgs:[{id:n.org.id,name:n.org.name,slug:n.org.slug,role:"admin",accountStatus:"active"}],projects:[]}}}async function zt(e,n,t,o){let r=t.orgs.find((s)=>s.id===t.currentOrgId);if(!r)throw Error("Selected organization is not visible to this login");if(process.env.BROODS_TOKEN)x("BROODS_TOKEN is set, so the switch applies to this token only and was not stored.");else await W({...n,org:{id:r.id,name:r.name,slug:r.slug},...t.account?{account:{id:t.account.id,username:t.account.username}}:{}});console.log(`Org: ${Me(r)}`),console.log(`Projects: ${t.projects.length>0?t.projects.map((s)=>s.name).join(", "):"none yet"}`),await In(e,on(o))}async function In(e,n){let t;try{t=await e.getRuntimeKey(n.project,n.stage)}catch(r){x(`Could not read the runtime key for ${n.project}/${n.stage} (${r instanceof Error?r.message:String(r)}). BROODS_API_KEY still points at the previous scope. Run \`broods whoami\` to check it.`);return}if(!t?.apiKey){x(`${n.project}/${n.stage} is not synced here yet, so BROODS_API_KEY still points at the previous scope. Run \`broods dev\`.`);return}let o=M("BROODS_API_KEY");if(!o&&process.env.BROODS_API_KEY===t.apiKey)return;await Ce("BROODS_API_KEY",t.apiKey),H(`Wrote BROODS_API_KEY (${t.keyHint}) to .env.local`),_n("BROODS_API_KEY",o)}function _n(e,n){if(!n)return;x(`${e} is exported in your shell, which wins over .env.local. Run \`unset ${e}\` or the next broods command keeps the old value.`)}function Me(e){let n=e.role==="owner"||e.role==="admin"?e.role:"member",t=e.plan?`, ${e.plan} plan`:"";return`${e.name} (${e.slug}, ${n}${t})`}function gi(e){return e.slug===e.name?e.name:`${e.name} (${e.slug})`}function Dn(e){return e.empty?"nothing (it is already empty)":`${e.stageCount} stage(s), ${e.agentCount} agent(s), ${e.variableCount} env var(s), ${e.deploymentCount} deployment(s), ${e.fileCount} workspace file(s)`}function pi(e,n){let t=e.empty?"empty":Dn(e);return Ee(`${e.name}: ${t}`,e.name===n||e.slug===n)}function fi(e,n){return Ee(so(e),Un(e.name,n))}function so(e){let n=e.deploymentRegion?`, ${e.deploymentRegion}`:"";return`${e.name} (${e.kind}${n}): ${e.agentCount} agent(s), ${e.variableCount} env var(s)`}function Un(e,n){return e.trim().toLowerCase()===n.trim().toLowerCase()}function on(e){return h(),{project:k(e,"--project")??process.env.BROODS_PROJECT??Oe(process.cwd()),stage:k(e,"--stage")??v()??"development"}}async function mi(e,n){let t=n.orgs.filter((s)=>s.accountStatus==="active"),o={kind:"create",name:"New organization"},r=await _e("Select organization",[...t,o],(s)=>("kind"in s)?"Create new organization":Me(s),t.findIndex((s)=>s.id===n.currentOrgId));if("kind"in r){let s=await ye("Organization name",Oe(process.cwd()));if(!s.trim())throw Error("Organization name is required.");return await e.createOnboardingOrg(s)}return r.id===n.currentOrgId?n:await e.selectOnboardingOrg(r.id)}function hi(e,n){return e.projects.find((o)=>o.name===n||o.slug===n)?.name??n}function wi(e,n){return e.projects.find((t)=>t.name===n||t.slug===n)}async function bi(e,n){let t=hi(e,n);if(e.projects.length===0)return ye("Project name",t);for(;;){let o=await Dt("Select project",e.projects,gi,{hint:"type a new project name",defaultValue:t}),r=typeof o==="string"?o:o.name,s=wi(e,r);if(!s)return r;if(await Xe(`Continue with the existing project ${s.name}?`))return s.name}}function yi(e,n){return new Promise((t,o)=>{let r=process.argv[1]??"",s=Zt(process.execPath,[r,"dev","--once",...e],{stdio:"inherit",env:n});s.on("error",o),s.on("exit",(i,a)=>{if(i===0){t();return}o(Error(a?`Sync child exited from signal ${a}`:`Sync child exited with code ${i??"unknown"}`))})})}async function vi(e){let n=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),t=await q(k(e,"--base-url")??n.config.baseUrl),o=new N({baseUrl:t.baseUrl,token:t.token}),r=await ao(o,n.manifest,await Ln(o,n.manifest));if(r.length>0)kn(r);for(let s=1;;s+=1)try{return await ki(o,n)}catch(i){if(!(i instanceof ze)||s===Ls)throw i;x("Stage changed in another session. Re-reading...")}}async function ki(e,n){let{manifest:t,resourceAliases:o,channels:r}=n,s=await e.getManifest(t.project,t.stage),i=bn(t,s?.manifest??null);Ze(i.filter((u)=>u.operation!=="delete"));let a=await e.putManifest(t,!1,!1,s===null?0:s.revision);await Ke(t,a.ids,process.cwd(),o,a.deployment,r),await po();let c=await Ci(),d=i.filter((u)=>u.operation==="delete"),l=d.filter((u)=>!c.has(`${u.kind}:${u.name}`)),p=!1;if(l.length>0)if(x("These remote resources are no longer declared locally:"),Ze(l),await Xe(`Delete ${l.length} resource(s) from ${t.project}/${t.stage}?`))a=await e.putManifest(t,!0,!1,a.revision),await Ke(t,a.ids,process.cwd(),o,a.deployment,r),await Oi(),p=!0;else await Ri(l.map((u)=>`${u.kind}:${u.name}`));if(!p&&d.length>0){let u=d.map((b)=>`${b.kind}:${b.name}`).join(", ");x(`${d.length} undeclared resource(s) kept remotely: ${u}. Re-declare in code or run \`deploy --prune\` to remove.`)}return await to(a.deployment),io(r,a),oo(a),a}function io(e,n){let t=n.deployment;if(!t||e.length===0)return;let o=new F,r=new Map;for(let i of e){if(!n.ids.agents[i.agentName])continue;let a=r.get(i.type)??[];a.push(i.alias),r.set(i.type,a)}let s=t.stageKind===void 0||t.stageKind==="production";for(let[i,a]of r){let c=s?o.accountWebhookUrl(t.accountId,i):o.stageWebhookUrl(t.accountId,t.endpointId,i);console.log(`Channel ${a.join(", ")} (${i}): ${c}${i==="pancake"?"?secret=<PANCAKE_WEBHOOK_SECRET>":""}`)}}async function Ln(e,n){let t=gt(n).filter((r)=>!r.startsWith("BROODS_"));if(t.length===0)return[];let o=new Map((await e.listEnv(n.project,n.stage)).map((r)=>[r.name,r.valueDigest]));return t.map((r)=>({name:r,state:$i(r,o)}))}async function ao(e,n,t){let o=t.filter((r)=>r.state==="unset"||r.state==="drifted").map((r)=>r.name);if(o.length===0)return[];return await Promise.all(o.map((r)=>e.setEnv(n.project,n.stage,r,process.env[r]))),o}function Si(e,n){let t=en(e,"drifted");if(t.length>0)x(`.env.local and ${n} disagree on ${t.length} variable(s): ${t.join(", ")}. Run \`broods env sync\` to push the local values.`)}function $i(e,n){let t=process.env[e],o=n.get(e);if(t===void 0||t==="")return o===void 0?"unresolved":"stage-only";if(o===void 0)return"unset";return o===Ei(t)?"synced":"drifted"}function Ei(e){return qt("sha256").update(e).digest("hex")}function en(e,n){return e.filter((t)=>t.state===n).map((t)=>t.name)}async function Vt(e){let n=h(),{manifest:t,config:o}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),r=await q(k(e,"--base-url")??o.baseUrl);At({project:t.project,stage:t.stage,dashboardUrl:k(e,"--dashboard-url")??n.dashboardUrl??r.dashboardUrl??o.dashboardUrl??oe})}async function Ci(){let e=process.env.BROODS_DECLINED_FILE;if(!e)return new Set;let n=await Re(e);return new Set(n.split(/\r?\n/).map((t)=>t.trim()).filter(Boolean))}async function Ri(e){let n=process.env.BROODS_DECLINED_FILE;if(!n||e.length===0)return;await ve(n,`${e.join(`
 `)}
-`,{flag:"a"})}async function Ai(){let e=process.env.BROODS_DECLINED_FILE;if(!e)return;await ve(e,"","utf8")}async function xi(e){let[n,t]=te(e);if(!n){console.log(ke("env",e));return}let o=n==="list"||n==="ls",r=n==="rm"||n==="remove",s=n==="get",i=n==="sync",a=n==="set"||r||s;if(!o&&!i&&!a)throw Error(`Unknown env subcommand: ${n}
+`,{flag:"a"})}async function Oi(){let e=process.env.BROODS_DECLINED_FILE;if(!e)return;await ve(e,"","utf8")}async function Ai(e){let[n,t]=te(e);if(!n){console.log(ke("env",e));return}let o=n==="list"||n==="ls",r=n==="rm"||n==="remove",s=n==="get",i=n==="sync",a=n==="set"||r||s;if(!o&&!i&&!a)throw Error(`Unknown env subcommand: ${n}
 ${Z("env")}`);if(a&&!t)throw Error(`broods env ${n} needs a variable name.
-${Z("env")}`);let{manifest:c,config:d}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),l=await q(k(e,"--base-url")??d.baseUrl),p=new N({baseUrl:l.baseUrl,token:l.token}),u=`${c.project}/${c.stage}`;if(i){await Pi(p,c,u);return}if(o){let S=await p.listEnv(c.project,c.stage);if(S.length===0){console.log(`No environment variables set for ${u}.`);return}console.log(`Environment variables for ${u} (values hidden):`);for(let C of S)console.log(`  ${C.name}`);return}if(s){let S=await p.getEnv(c.project,c.stage,t);if(S===null){console.error(`${t} is not set for ${u}`),process.exitCode=1;return}console.log(S);return}if(r){await p.removeEnv(c.project,c.stage,t),H(`Removed ${t} from ${u}`);return}let b=await Dt(t);await p.setEnv(c.project,c.stage,t,b),H(`Stored ${t} for ${u}`)}async function Pi(e,n,t){let o=await Bn(e,n);if(o.length===0){console.log('No env("NAME") references in this project.');return}let r=await co(e,n,o);if(r.length>0)$n(r);let s=en(o,"synced").length;console.log(r.length>0?`${s} other referenced variable(s) already in step with ${t}.`:`${s} referenced variable(s) already in step with ${t}.`);let i=en(o,"stage-only");if(i.length>0)console.log(`${i.length} referenced variable(s) live only on ${t}: ${i.join(", ")}`);let a=en(o,"unresolved");if(a.length>0)x(`${a.length} referenced variable(s) with no value here or on ${t}: ${a.join(", ")}. Put them in .env.local, or run \`broods env set <NAME> --stage ${n.stage}\`.`)}function Gn(e){if(I(e,"--all"))return"DEBUG";let n=k(e,"--level");if(n===void 0&&I(e,"--level"))throw Error("Missing value for --level. Use DEBUG, INFO, WARN, or ERROR.");if(!n)return"WARN";let t=n.toUpperCase();if(t==="DEBUG")return"DEBUG";if(t==="INFO")return"INFO";if(t==="WARN"||t==="WARNING")return"WARN";if(t==="ERROR")return"ERROR";throw Error(`Unknown log level: ${n}. Use DEBUG, INFO, WARN, or ERROR.`)}async function ji(e){h();let n=k(e,"--project")??process.env.BROODS_PROJECT,t=k(e,"--stage")??v();if(!n)throw Error("Project name is required. Pass --project <name> or set BROODS_PROJECT in .env.local.");if(!t)throw Error("Stage name is required. Pass --stage <name> or set BROODS_STAGE in .env.local.");return{project:n,stage:t}}async function rn(e){let n=await ji(e),t=h(),o=await Be(k(e,"--dashboard-url")??t.dashboardUrl??oe,k(e,"--base-url")),r=new N({baseUrl:o.baseUrl,token:o.token}),s=await r.mintStageSession(n.project,n.stage),i=async()=>{if(s.expiresAt-Date.now()<Ls)s=await r.mintStageSession(n.project,n.stage);return s.token};return{baseUrl:process.env.BROODS_BASE_URL??process.env.BROODS_HOST??E,credential:i,project:s.projectSlug,stage:s.stageSlug}}function lo(e){return e==="WARN"?" (--all for INFO too)":""}function Wn(e,n){console.error(Ie(`Reconnecting to live logs (attempt ${e}): ${n}`,{stream:"stderr"}))}function Fn(e){let n=new Date(e.ts).toISOString().slice(11,23),t=e.level.padEnd(5),o=Ns(e.message);return`${n} ${t} ${e.eventType} ${o}`}async function Ii(e){let n=await rn(e),{project:t,stage:o}=n,r=Gn(e),s=new AbortController,i=()=>s.abort();process.on("SIGINT",i),console.log(`Streaming live logs for ${t}/${o} [${r}+]`+lo(r)+", Ctrl+C to stop");try{for await(let a of He(n,{backfill:0,minLevel:r,signal:s.signal,onReconnect:Wn}))console.log(Fn(a))}catch(a){if(!s.signal.aborted)console.error(a instanceof Error?a.message:String(a)),process.exitCode=1}finally{process.off("SIGINT",i)}}async function Ti(e){if(I(e,"--doctor")){await _i(I(e,"--request"));return}let n=te(e)[0];if(!n){console.log(ke("machine",e));return}let{runMachineDaemon:t}=await import("../chunk-7e3meadv.js"),{baseUrl:o,credential:r}=await rn(e),s=P(k(e,"--cwd")??process.cwd()),i=I(e,"--computer"),a=k(e,"--mcp"),c=I(e,"--force"),d=new AbortController,l=()=>d.abort();process.on("SIGINT",l),console.log(`Connecting ${n} to ${o} (cwd ${s}${i?", computer use on":""}), Ctrl+C to stop`);try{await t({baseUrl:o,computer:i,credential:r,cwd:s,force:c,log:(p)=>console.log(p),mcpFile:a?P(a):void 0,sandbox:n,signal:d.signal})}catch(p){console.error(p instanceof Error?p.message:String(p)),process.exitCode=1}finally{process.off("SIGINT",l)}}async function _i(e){try{let{startDesktop:n}=await import("../chunk-5tnnqapc.js"),{display:t,driver:o,permissions:r}=await n(e);o.stop();let s=(i)=>i?"granted":"missing";if(console.log(`screenshot frame   ${t.width}x${t.height} (scale ${t.scale.toFixed(2)})`),console.log(`screen recording   ${s(r.screenRecording)}`),console.log(`accessibility      ${s(r.accessibility)}`),!r.screenRecording||!r.accessibility)console.log(e?"Approve the prompts, or add this terminal under System Settings > Privacy & Security, then run again.":"Run `broods machine --doctor --request` to show the macOS prompts."),process.exitCode=1}catch(n){console.error(n instanceof Error?n.message:String(n)),process.exitCode=1}}async function Di(e){let n=await rn(e),{project:t,stage:o}=n,r=k(e,"--sandbox");if(I(e,"--sandbox")&&!G(r))throw Error("--sandbox needs the instance log id, the UUID shown in the dashboard Instances sheet.");let s=r?"DEBUG":Gn(e),i=Number(k(e,"--limit")??k(e,"-n")??100),a=I(e,"--json"),c=new AbortController,d=()=>c.abort();process.on("SIGINT",d),console.log(`Logs for ${t}/${o}`+(r?` sandbox ${r}`:"")+` [${s}+]`+lo(s)+` (backfill ${i}), Ctrl+C to stop`);try{for await(let l of He(n,{backfill:i,minLevel:s,...r?{sandboxId:r}:{},signal:c.signal,onReconnect:Wn}))if(a)console.log(JSON.stringify(l));else console.log(Fn(l))}catch(l){if(!c.signal.aborted)console.error(l instanceof Error?l.message:String(l)),process.exitCode=1}finally{process.off("SIGINT",d)}}async function Ui(e){let[n,t]=te(e);if(!n){console.log(ke("agent",e));return}if(n==="list"||n==="ls"){await Ni(e);return}if(n==="get"){await Li(t,e);return}throw Error(`Unknown agent subcommand: ${n}
+${Z("env")}`);let{manifest:c,config:d}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),l=await q(k(e,"--base-url")??d.baseUrl),p=new N({baseUrl:l.baseUrl,token:l.token}),u=`${c.project}/${c.stage}`;if(i){await xi(p,c,u);return}if(o){let S=await p.listEnv(c.project,c.stage);if(S.length===0){console.log(`No environment variables set for ${u}.`);return}console.log(`Environment variables for ${u} (values hidden):`);for(let C of S)console.log(`  ${C.name}`);return}if(s){let S=await p.getEnv(c.project,c.stage,t);if(S===null){console.error(`${t} is not set for ${u}`),process.exitCode=1;return}console.log(S);return}if(r){await p.removeEnv(c.project,c.stage,t),H(`Removed ${t} from ${u}`);return}let b=await _t(t);await p.setEnv(c.project,c.stage,t,b),H(`Stored ${t} for ${u}`)}async function xi(e,n,t){let o=await Ln(e,n);if(o.length===0){console.log('No env("NAME") references in this project.');return}let r=await ao(e,n,o);if(r.length>0)kn(r);let s=en(o,"synced").length;console.log(r.length>0?`${s} other referenced variable(s) already in step with ${t}.`:`${s} referenced variable(s) already in step with ${t}.`);let i=en(o,"stage-only");if(i.length>0)console.log(`${i.length} referenced variable(s) live only on ${t}: ${i.join(", ")}`);let a=en(o,"unresolved");if(a.length>0)x(`${a.length} referenced variable(s) with no value here or on ${t}: ${a.join(", ")}. Put them in .env.local, or run \`broods env set <NAME> --stage ${n.stage}\`.`)}function Mn(e){if(I(e,"--all"))return"DEBUG";let n=k(e,"--level");if(n===void 0&&I(e,"--level"))throw Error("Missing value for --level. Use DEBUG, INFO, WARN, or ERROR.");if(!n)return"WARN";let t=n.toUpperCase();if(t==="DEBUG")return"DEBUG";if(t==="INFO")return"INFO";if(t==="WARN"||t==="WARNING")return"WARN";if(t==="ERROR")return"ERROR";throw Error(`Unknown log level: ${n}. Use DEBUG, INFO, WARN, or ERROR.`)}async function Pi(e){h();let n=k(e,"--project")??process.env.BROODS_PROJECT,t=k(e,"--stage")??v();if(!n)throw Error("Project name is required. Pass --project <name> or set BROODS_PROJECT in .env.local.");if(!t)throw Error("Stage name is required. Pass --stage <name> or set BROODS_STAGE in .env.local.");return{project:n,stage:t}}async function rn(e){let n=await Pi(e),t=h(),o=await Be(k(e,"--dashboard-url")??t.dashboardUrl??oe,k(e,"--base-url")),r=new N({baseUrl:o.baseUrl,token:o.token}),s=await r.mintStageSession(n.project,n.stage),i=async()=>{if(s.expiresAt-Date.now()<Ns)s=await r.mintStageSession(n.project,n.stage);return s.token};return{baseUrl:process.env.BROODS_BASE_URL??process.env.BROODS_HOST??E,credential:i,project:s.projectSlug,stage:s.stageSlug}}function co(e){return e==="WARN"?" (--all for INFO too)":""}function Bn(e,n){console.error(Te(`Reconnecting to live logs (attempt ${e}): ${n}`,{stream:"stderr"}))}function Gn(e){let n=new Date(e.ts).toISOString().slice(11,23),t=e.level.padEnd(5),o=Us(e.message);return`${n} ${t} ${e.eventType} ${o}`}async function ji(e){let n=await rn(e),{project:t,stage:o}=n,r=Mn(e),s=new AbortController,i=()=>s.abort();process.on("SIGINT",i),console.log(`Streaming live logs for ${t}/${o} [${r}+]`+co(r)+", Ctrl+C to stop");try{for await(let a of He(n,{backfill:0,minLevel:r,signal:s.signal,onReconnect:Bn}))console.log(Gn(a))}catch(a){if(!s.signal.aborted)console.error(a instanceof Error?a.message:String(a)),process.exitCode=1}finally{process.off("SIGINT",i)}}async function Ti(e){if(I(e,"--doctor")){await Ii(I(e,"--request"));return}let n=te(e)[0];if(!n){console.log(ke("machine",e));return}let{runMachineDaemon:t}=await import("../chunk-qdmc5crt.js"),{baseUrl:o,credential:r}=await rn(e),s=P(k(e,"--cwd")??process.cwd()),i=I(e,"--computer"),a=k(e,"--mcp"),c=I(e,"--force"),d=new AbortController,l=()=>d.abort();process.on("SIGINT",l),console.log(`Connecting ${n} to ${o} (cwd ${s}${i?", computer use on":""}), Ctrl+C to stop`);try{await t({baseUrl:o,computer:i,credential:r,cwd:s,force:c,log:(p)=>console.log(p),mcpFile:a?P(a):void 0,sandbox:n,signal:d.signal})}catch(p){console.error(p instanceof Error?p.message:String(p)),process.exitCode=1}finally{process.off("SIGINT",l)}}async function Ii(e){try{let{startDesktop:n}=await import("../chunk-5tnnqapc.js"),{display:t,driver:o,permissions:r}=await n(e);o.stop();let s=(i)=>i?"granted":"missing";if(console.log(`screenshot frame   ${t.width}x${t.height} (scale ${t.scale.toFixed(2)})`),console.log(`screen recording   ${s(r.screenRecording)}`),console.log(`accessibility      ${s(r.accessibility)}`),!r.screenRecording||!r.accessibility)console.log(e?"Approve the prompts, or add this terminal under System Settings > Privacy & Security, then run again.":"Run `broods machine --doctor --request` to show the macOS prompts."),process.exitCode=1}catch(n){console.error(n instanceof Error?n.message:String(n)),process.exitCode=1}}async function _i(e){let n=await rn(e),{project:t,stage:o}=n,r=k(e,"--sandbox");if(I(e,"--sandbox")&&!G(r))throw Error("--sandbox needs the instance log id, the UUID shown in the dashboard Instances sheet.");let s=r?"DEBUG":Mn(e),i=Number(k(e,"--limit")??k(e,"-n")??100),a=I(e,"--json"),c=new AbortController,d=()=>c.abort();process.on("SIGINT",d),console.log(`Logs for ${t}/${o}`+(r?` sandbox ${r}`:"")+` [${s}+]`+co(s)+` (backfill ${i}), Ctrl+C to stop`);try{for await(let l of He(n,{backfill:i,minLevel:s,...r?{sandboxId:r}:{},signal:c.signal,onReconnect:Bn}))if(a)console.log(JSON.stringify(l));else console.log(Gn(l))}catch(l){if(!c.signal.aborted)console.error(l instanceof Error?l.message:String(l)),process.exitCode=1}finally{process.off("SIGINT",d)}}async function Di(e){let[n,t]=te(e);if(!n){console.log(ke("agent",e));return}if(n==="list"||n==="ls"){await Ui(e);return}if(n==="get"){await Ni(t,e);return}throw Error(`Unknown agent subcommand: ${n}
-${Z("agent")}`)}async function uo(e){let{manifest:n,config:t}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),o=await q(k(e,"--base-url")??t.baseUrl),r=await new N({baseUrl:o.baseUrl,token:o.token}).getManifest(n.project,n.stage),s=n.resources.filter((i)=>i.kind==="agent").map((i)=>({name:i.name,config:i.config??{},agentId:r?.ids.agents[i.name]}));return{manifest:n,agents:s}}async function Ni(e){let{manifest:n,agents:t}=await uo(e);if(t.length===0){console.log(`No agents declared in ${n.project}/${n.stage}.`);return}console.log(`Agents in ${n.project}/${n.stage}:`);for(let o of t){let r=go(o.config),s=o.config.publicAccess===!0?"public":"private",i=o.agentId?o.agentId:"not deployed";console.log(`  ${o.name}  [${s}]  ${r}  (${i})`)}}async function Li(e,n){if(!e)throw Error(`Missing agent name.
+${Z("agent")}`)}async function lo(e){let{manifest:n,config:t}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),o=await q(k(e,"--base-url")??t.baseUrl),r=await new N({baseUrl:o.baseUrl,token:o.token}).getManifest(n.project,n.stage),s=n.resources.filter((i)=>i.kind==="agent").map((i)=>({name:i.name,config:i.config??{},agentId:r?.ids.agents[i.name]}));return{manifest:n,agents:s}}async function Ui(e){let{manifest:n,agents:t}=await lo(e);if(t.length===0){console.log(`No agents declared in ${n.project}/${n.stage}.`);return}console.log(`Agents in ${n.project}/${n.stage}:`);for(let o of t){let r=uo(o.config),s=o.config.publicAccess===!0?"public":"private",i=o.agentId?o.agentId:"not deployed";console.log(`  ${o.name}  [${s}]  ${r}  (${i})`)}}async function Ni(e,n){if(!e)throw Error(`Missing agent name.
-${Z("agent")}`);let{manifest:t,agents:o}=await uo(n),r=o.find((u)=>u.name===e);if(!r)throw Error(`Unknown local agent: ${e}`);let s=r.config,i=[s.sandboxes].flat().filter((u)=>typeof u==="string").map((u,b)=>b===0?`${u} (default)`:u),a=Array.isArray(s.workspaces)?s.workspaces.map((u)=>typeof u==="string"?u:u.name).filter(Boolean):[],c=be(s.tools)?Object.keys(s.tools):[],d=be(s.channels)?Object.keys(s.channels):[],l=be(s.subagent)&&Array.isArray(s.subagent.allowed)?s.subagent.allowed.map((u)=>typeof u==="string"?u:u.name).filter(Boolean):[],p=be(s.hooks)&&Array.isArray(s.hooks.webhooks)?s.hooks.webhooks.filter(be):[];if(console.log(`Agent: ${r.name}`),console.log(`  Project/Stage: ${t.project}/${t.stage}`),console.log(`  Deployed id:  ${r.agentId??"not deployed"}`),console.log(`  Public access: ${s.publicAccess===!0?"public (SSE/WebSocket enabled)":"private (secured by default)"}`),console.log(`  Model:        ${go(s)}`),console.log(`  Sandboxes:    ${i.length>0?i.join(", "):"none"}`),console.log(`  Workspaces:   ${a.length>0?a.join(", "):"none"}`),console.log(`  Tools:        ${c.length>0?c.join(", "):"none"}`),console.log(`  Subagents:    ${l.length>0?l.join(", "):"none"}`),console.log(`  Channels:     ${d.length>0?d.join(", "):"none"}`),p.length>0)console.log("  Webhooks:"),p.forEach((u,b)=>{let S=Array.isArray(u.events)&&u.events.length>0?u.events.join(", "):"all events",C=u.enabled===!1?"disabled":"enabled";console.log(`    [${b}] ${C} → ${u.url??"none"} (${S})`)})}function go(e){let n=be(e.model)?e.model:{},t=typeof n.provider==="string"?n.provider:void 0,o=typeof n.modelId==="string"?n.modelId:void 0;if(t&&o)return`${t}/${o}`;return o??t??"unconfigured model"}async function Mi(e){let[n,...t]=te(e);if(!n)throw Error(`Missing agent name.
+${Z("agent")}`);let{manifest:t,agents:o}=await lo(n),r=o.find((u)=>u.name===e);if(!r)throw Error(`Unknown local agent: ${e}`);let s=r.config,i=[s.sandboxes].flat().filter((u)=>typeof u==="string").map((u,b)=>b===0?`${u} (default)`:u),a=Array.isArray(s.workspaces)?s.workspaces.map((u)=>typeof u==="string"?u:u.name).filter(Boolean):[],c=be(s.tools)?Object.keys(s.tools):[],d=be(s.channels)?Object.keys(s.channels):[],l=be(s.subagent)&&Array.isArray(s.subagent.allowed)?s.subagent.allowed.map((u)=>typeof u==="string"?u:u.name).filter(Boolean):[],p=be(s.hooks)&&Array.isArray(s.hooks.webhooks)?s.hooks.webhooks.filter(be):[];if(console.log(`Agent: ${r.name}`),console.log(`  Project/Stage: ${t.project}/${t.stage}`),console.log(`  Deployed id:  ${r.agentId??"not deployed"}`),console.log(`  Public access: ${s.publicAccess===!0?"public (SSE/WebSocket enabled)":"private (secured by default)"}`),console.log(`  Model:        ${uo(s)}`),console.log(`  Sandboxes:    ${i.length>0?i.join(", "):"none"}`),console.log(`  Workspaces:   ${a.length>0?a.join(", "):"none"}`),console.log(`  Tools:        ${c.length>0?c.join(", "):"none"}`),console.log(`  Subagents:    ${l.length>0?l.join(", "):"none"}`),console.log(`  Channels:     ${d.length>0?d.join(", "):"none"}`),p.length>0)console.log("  Webhooks:"),p.forEach((u,b)=>{let S=Array.isArray(u.events)&&u.events.length>0?u.events.join(", "):"all events",C=u.enabled===!1?"disabled":"enabled";console.log(`    [${b}] ${C} → ${u.url??"none"} (${S})`)})}function uo(e){let n=be(e.model)?e.model:{},t=typeof n.provider==="string"?n.provider:void 0,o=typeof n.modelId==="string"?n.modelId:void 0;if(t&&o)return`${t}/${o}`;return o??t??"unconfigured model"}async function Li(e){let[n,...t]=te(e);if(!n)throw Error(`Missing agent name.
-${Z("run")}`);let o=t.join(" "),r=Boolean(process.stdin.isTTY&&process.stdout.isTTY);if(!r&&!o)throw Error("A prompt is required when output is redirected: broods run <agent> <prompt>. Run it in a terminal to chat without one.");let{manifest:s,config:i}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),a=await q(k(e,"--base-url")??i.baseUrl),c=s.resources.find((A)=>A.kind==="agent"&&A.name===n);if(!c)throw Error(`Unknown local agent: ${n}`);let l=(await new N({baseUrl:a.baseUrl,token:a.token}).getManifest(s.project,s.stage))?.ids.agents[n];if(!l)throw Error(`Agent ${n} is not synced yet. Run broods dev --once or broods deploy first.`);let p=await new N({baseUrl:a.baseUrl,token:a.token}).getRuntimeKey(s.project,s.stage).catch(()=>null);if(p?.apiKey)await Ce("BROODS_API_KEY",p.apiKey);if(c.config.publicAccess!==!0)x(`Agent "${n}" does not set publicAccess: true. The public endpoint is secured by default; if the deployed agent has not enabled it, this run will be refused.`);let u=new F({baseUrl:k(e,"--base-url")??process.env.BROODS_BASE_URL??process.env.BROODS_HOST??a.baseUrl,...p?.apiKey?{apiKey:p.apiKey}:{}}),b={kind:"agent",name:n,id:l,project:s.project,stage:s.stage,...p?.endpointId?{endpointId:p.endpointId}:{},...p?.projectSlug?{projectSlug:p.projectSlug}:{},...p?.stageSlug?{stageSlug:p.stageSlug}:{}},{runAgentTui:S,streamAgentText:C}=await import("../chunk-m7ws7kqc.js");try{if(r){await S({client:u,agent:b,...o?{prompt:o}:{}});return}await C({client:u,agent:b,prompt:o})}catch(A){if((A instanceof Error?A.message:String(A)).includes("public_access_disabled"))throw Error(`Agent "${n}" is not publicly accessible (secured by default). Set publicAccess: true in its config and redeploy, or enable Public access in the dashboard.`);throw A}}async function nn(e,n,t){try{await ve(e,n,{flag:t?"w":"wx"})}catch(o){if(o.code==="EEXIST")return;throw o}}async function po(){let e=P(process.cwd(),".gitignore"),n=await Re(e);if(n.split(/\r?\n/).some((r)=>[".env.local","/.env.local",".env*.local",".env.*",".env*"].includes(r.trim())))return;let o=n?`${n.trimEnd()}
+${Z("run")}`);let o=t.join(" "),r=Boolean(process.stdin.isTTY&&process.stdout.isTTY);if(!r&&!o)throw Error("A prompt is required when output is redirected: broods run <agent> <prompt>. Run it in a terminal to chat without one.");let{manifest:s,config:i}=await de({project:k(e,"--project"),stage:k(e,"--stage"),command:"dev"}),a=await q(k(e,"--base-url")??i.baseUrl),c=s.resources.find((A)=>A.kind==="agent"&&A.name===n);if(!c)throw Error(`Unknown local agent: ${n}`);let l=(await new N({baseUrl:a.baseUrl,token:a.token}).getManifest(s.project,s.stage))?.ids.agents[n];if(!l)throw Error(`Agent ${n} is not synced yet. Run broods dev --once or broods deploy first.`);let p=await new N({baseUrl:a.baseUrl,token:a.token}).getRuntimeKey(s.project,s.stage).catch(()=>null);if(p?.apiKey)await Ce("BROODS_API_KEY",p.apiKey);if(c.config.publicAccess!==!0)x(`Agent "${n}" does not set publicAccess: true. The public endpoint is secured by default; if the deployed agent has not enabled it, this run will be refused.`);let u=new F({baseUrl:k(e,"--base-url")??process.env.BROODS_BASE_URL??process.env.BROODS_HOST??a.baseUrl,...p?.apiKey?{apiKey:p.apiKey}:{}}),b={kind:"agent",name:n,id:l,project:s.project,stage:s.stage,...p?.endpointId?{endpointId:p.endpointId}:{},...p?.projectSlug?{projectSlug:p.projectSlug}:{},...p?.stageSlug?{stageSlug:p.stageSlug}:{}},{runAgentTui:S,streamAgentText:C}=await import("../chunk-m7ws7kqc.js");try{if(r){await S({client:u,agent:b,...o?{prompt:o}:{}});return}await C({client:u,agent:b,prompt:o})}catch(A){if((A instanceof Error?A.message:String(A)).includes("public_access_disabled"))throw Error(`Agent "${n}" is not publicly accessible (secured by default). Set publicAccess: true in its config and redeploy, or enable Public access in the dashboard.`);throw A}}async function nn(e,n,t){try{await ve(e,n,{flag:t?"w":"wx"})}catch(o){if(o.code==="EEXIST")return;throw o}}async function go(){let e=P(process.cwd(),".gitignore"),n=await Re(e);if(n.split(/\r?\n/).some((r)=>[".env.local","/.env.local",".env*.local",".env.*",".env*"].includes(r.trim())))return;let o=n?`${n.trimEnd()}
 .env*.local
 `:`.env*.local
-`;await ve(e,o,"utf8")}async function fo(){let e=P(process.cwd(),y,".gitignore"),n=await Re(e),o=["_generated",".cache"].filter((s)=>!n.split(/\r?\n/).some((i)=>i.trim()===s));if(o.length===0)return;let r=n?n.trimEnd()+`
+`;await ve(e,o,"utf8")}async function po(){let e=P(process.cwd(),y,".gitignore"),n=await Re(e),o=["_generated",".cache"].filter((s)=>!n.split(/\r?\n/).some((i)=>i.trim()===s));if(o.length===0)return;let r=n?n.trimEnd()+`
 `+o.join(`
 `)+`
 `:o.join(`
 `)+`
-`;await ve(e,r,"utf8")}async function Kn(e){let n=P(process.cwd(),".env.local"),t=await Re(n),o=mo(t),r={BROODS_DASHBOARD_URL:e.dashboardUrl,BROODS_BASE_URL:e.baseUrl,BROODS_PROJECT:e.project,BROODS_STAGE:e.stage,BROODS_REGION:e.region},s=t?t.replace(/\n?$/,`
+`;await ve(e,r,"utf8")}async function Wn(e){let n=P(process.cwd(),".env.local"),t=await Re(n),o=fo(t),r={BROODS_DASHBOARD_URL:e.dashboardUrl,BROODS_BASE_URL:e.baseUrl,BROODS_PROJECT:e.project,BROODS_STAGE:e.stage,BROODS_REGION:e.region},s=t?t.replace(/\n?$/,`
 `).split(/\n/):["# Local broods CLI settings. Tokens are stored outside the repo."],i=!1;for(let[c,d]of Object.entries(r)){if(!d)continue;if(o[c]!==void 0&&!e.force)continue;let l=s.findIndex((p)=>p.trim().startsWith(`${c}=`));if(l>=0)s[l]=`${c}=${tn(d)}`;else s.push(`${c}=${tn(d)}`);if(process.env[c]===void 0)process.env[c]=d;i=!0}if(!i&&t)return;let a=`${s.filter((c,d,l)=>!(c===""&&d===l.length-1)).join(`
 `)}
-`;await K(n,a),await po()}async function Ce(e,n){let t=P(process.cwd(),".env.local"),o=await Re(t),r=o?o.replace(/\n?$/,`
+`;await K(n,a),await go()}async function Ce(e,n){let t=P(process.cwd(),".env.local"),o=await Re(t),r=o?o.replace(/\n?$/,`
 `).split(/\n/):["# Local broods CLI settings. Tokens are stored outside the repo."],s=r.findIndex((a)=>a.trim().startsWith(`${e}=`));if(s>=0)r[s]=`${e}=${tn(n)}`;else r.push(`${e}=${tn(n)}`);process.env[e]=n;let i=`${r.filter((a,c,d)=>!(a===""&&c===d.length-1)).join(`
 `)}
-`;await K(t,i),await po()}async function Re(e){try{return await qt(e,"utf8")}catch(n){if(n.code==="ENOENT")return"";throw n}}function mo(e){let n={};for(let t of e.split(/\r?\n/)){let o=t.trim();if(!o||o.startsWith("#"))continue;let r=o.indexOf("=");if(r<=0)continue;n[o.slice(0,r).trim()]=o.slice(r+1).trim()}return n}function tn(e){return JSON.stringify(e)}function Oe(e){return Is(P(e)).replace(/^@/,"").replace(/\//g,"-").replace(/[^A-Za-z0-9_-]+/g,"-").replace(/^-+|-+$/g,"")||"broods-app"}async function Bi(){let e=P(process.cwd(),y),n=[];await Hn(e,n);let t=Zt("sha256");for(let o of n.sort())t.update(Ts(e,o)),t.update("\x00"),t.update(await qt(o)),t.update("\x00");return t.digest("hex")}async function Hn(e,n){let t=await xs(e,{withFileTypes:!0});for(let o of t){let r=Le(e,o.name);if(o.isDirectory()){if(o.name===_||o.name==="generated"||o.name===".cache")continue;await Hn(r,n);continue}if(o.isFile()&&(o.name.endsWith(".ts")||o.name.endsWith(".md")))n.push(r)}}function Gi(e){return e.split(/[\\/]/).some((n)=>n===_||n==="generated"||n===".cache")}function ho(){return`import { defineAgent, defineSandbox, env } from "broods";
+`;await K(t,i),await go()}async function Re(e){try{return await Jt(e,"utf8")}catch(n){if(n.code==="ENOENT")return"";throw n}}function fo(e){let n={};for(let t of e.split(/\r?\n/)){let o=t.trim();if(!o||o.startsWith("#"))continue;let r=o.indexOf("=");if(r<=0)continue;n[o.slice(0,r).trim()]=o.slice(r+1).trim()}return n}function tn(e){return JSON.stringify(e)}function Oe(e){return js(P(e)).replace(/^@/,"").replace(/\//g,"-").replace(/[^A-Za-z0-9_-]+/g,"-").replace(/^-+|-+$/g,"")||"broods-app"}async function Mi(){let e=P(process.cwd(),y),n=[];await Fn(e,n);let t=qt("sha256");for(let o of n.sort())t.update(Ts(e,o)),t.update("\x00"),t.update(await Jt(o)),t.update("\x00");return t.digest("hex")}async function Fn(e,n){let t=await As(e,{withFileTypes:!0});for(let o of t){let r=Le(e,o.name);if(o.isDirectory()){if(o.name===_||o.name==="generated"||o.name===".cache")continue;await Fn(r,n);continue}if(o.isFile()&&(o.name.endsWith(".ts")||o.name.endsWith(".md")))n.push(r)}}function Bi(e){return e.split(/[\\/]/).some((n)=>n===_||n==="generated"||n===".cache")}function mo(){return`import { defineAgent, defineSandbox, env } from "broods";
 // A Lambda sandbox: a fresh, ephemeral bash environment created per run.
 export const lambdaSandbox = defineSandbox({
@@ -449,4 +449,4 @@ export const myAgent = defineAgent({
   // only reachable via internal endpoints or channel webhooks.
   publicAccess: true,
 });
-`}function Wi(){if("bun"in process.versions)return;if(typeof js.registerHooks==="function")return;throw Error(`broods needs Node ${De.engines.node.replace(">=","")} or newer, or Bun. This is Node ${process.version}.`)}function Fi(e,n){if(e==="status")throw Error("status was renamed to whoami. Run `broods whoami`.");if(I(n,"--env")||k(n,"--env")!==void 0)throw Error("--env was renamed to --stage. Pass --stage <name> instead.");h();let t=process.env.BROODS_ENVIRONMENT;if(t!==void 0&&process.env.BROODS_STAGE===void 0)throw Error(`BROODS_ENVIRONMENT was renamed to BROODS_STAGE. Rename the key in .env.local (it is currently set to "${t}").`)}async function Ki(){let e=h(),[{createBroodsMcpServer:n},{serveStdio:t},o]=await Promise.all([import("../chunk-sqt7qff6.js"),import("../chunk-kjccsy1h.js"),T()]),r=o?new N({baseUrl:o.baseUrl,token:o.token}):null,s=n({allowDestructive:process.env.BROODS_MCP_ALLOW_DESTRUCTIVE==="1"&&M("BROODS_MCP_ALLOW_DESTRUCTIVE"),cli:r,scope:{project:e.project,stage:e.stage}});t(()=>s),await new Promise((i)=>{process.stdin.on("close",i)})}Fs().catch((e)=>{Pt(e instanceof Error?e.message:String(e)),process.exit(1)});export{se,fe,D};
+`}function Gi(){if("bun"in process.versions)return;if(typeof Ps.registerHooks==="function")return;throw Error(`broods needs Node ${De.engines.node.replace(">=","")} or newer, or Bun. This is Node ${process.version}.`)}function Wi(e,n){if(e==="status")throw Error("status was renamed to whoami. Run `broods whoami`.");if(I(n,"--env")||k(n,"--env")!==void 0)throw Error("--env was renamed to --stage. Pass --stage <name> instead.");h();let t=process.env.BROODS_ENVIRONMENT;if(t!==void 0&&process.env.BROODS_STAGE===void 0)throw Error(`BROODS_ENVIRONMENT was renamed to BROODS_STAGE. Rename the key in .env.local (it is currently set to "${t}").`)}async function Fi(){let e=h(),[{createBroodsMcpServer:n},{serveStdio:t},o]=await Promise.all([import("../chunk-sqt7qff6.js"),import("../chunk-kjccsy1h.js"),T()]),r=o?new N({baseUrl:o.baseUrl,token:o.token}):null,s=n({allowDestructive:process.env.BROODS_MCP_ALLOW_DESTRUCTIVE==="1"&&M("BROODS_MCP_ALLOW_DESTRUCTIVE"),cli:r,scope:{project:e.project,stage:e.stage}});t(()=>s),await new Promise((i)=>{process.stdin.on("close",i)})}Ws().catch((e)=>{xt(e instanceof Error?e.message:String(e)),process.exit(1)});export{se,fe,D};

package/dist/index.d.ts CHANGED Viewed

@@ -882,10 +882,6 @@ interface WorkspaceStorageConfig {
     prefix?: string;
     auth?: WorkspaceStorageAuth;
 }
-/** What the API accepts: the boolean spelling of isolation is stored as its level. */
-type WorkspaceConfigInput = Omit<WorkspaceConfig, "isolation"> & {
-    isolation?: WorkspaceIsolation | boolean;
-};
 interface WorkspaceConfig {
     storage: WorkspaceStorageConfig;
     isolation?: WorkspaceIsolation;
@@ -2301,13 +2297,13 @@ declare class BroodsAccountClient {
     createWorkspace(input: {
         name: string;
         description?: string;
-        config?: WorkspaceConfigInput;
+        config?: WorkspaceConfig;
     }): Promise<AccountWorkspace>;
     getWorkspace(workspaceId: string): Promise<AccountWorkspace | null>;
     updateWorkspace(workspaceId: string, patch: {
         name?: string;
         description?: string | null;
-        config?: ConfigPatch<WorkspaceConfigInput>;
+        config?: ConfigPatch<WorkspaceConfig>;
     }): Promise<AccountWorkspace | null>;
     deleteWorkspace(workspaceId: string): Promise<boolean>;
     /** Flat listing of every file in the workspace's S3-backed filesystem. Returns [] when the workspace is gone. */
@@ -3129,13 +3125,13 @@ type CronDefinitionConfig = Omit<CreateCronInput, "agentId" | "name"> & {
 type AgentResource<Name extends string = string> = ResourceDefinition<"agent", Name, AgentDefinitionConfig>;
 /**
  * Code-first workspace config. Says `partitioned` where storage says
- * `isolation`. `true` or "conversation" permits a per-conversation split that
- * a channel's `partition` performs; "agent" splits the workspace per attached
+ * `isolation`. "conversation" permits a per-conversation split that a
+ * channel's `partition` performs; "agent" splits the workspace per attached
  * agent on its own, with no partition needed.
  */
 type WorkspaceDefinitionConfig = Omit<WorkspaceConfig, "isolation"> & {
-    /** How to split this workspace: per conversation (`true`) or per agent. */
-    partitioned?: boolean | WorkspaceIsolation;
+    /** How to split this workspace: per conversation or per agent. */
+    partitioned?: WorkspaceIsolation;
 };
 type WorkspaceResource<Name extends string = string> = ResourceDefinition<"workspace", Name, WorkspaceDefinitionConfig>;
 type SandboxResource<Name extends string = string> = ResourceDefinition<"sandbox", Name, SandboxDefinitionConfig>;
@@ -3211,4 +3207,4 @@ declare function isConnectionDefinition(value: unknown): value is AnyConnectionD
 declare function isResource(value: unknown): value is AnyResource;
 export { BroodsAccountApiError, BroodsAccountClient, BroodsClient, BroodsWebSocketClient, DEFAULT_CORE_BASE_URL, IngressAcceptedError, MAX_OBSERVABILITY_BACKFILL, BroodsWebSocketClient as WebSocketClient, BroodsWebSocketClient as WebsocketClient, defineAgent, defineBroods, defineCron, defineDiscordChannel, defineDiscordConnection, defineGitHubChannel, defineGitHubConnection, defineGoogleChatChannel, defineGoogleChatConnection, defineHarness, defineInstagramChannel, defineInstagramConnection, defineLinearChannel, defineLinearConnection, defineMatrixChannel, defineMatrixConnection, defineMcp, defineMessengerChannel, defineMessengerConnection, definePancakeChannel, definePancakeConnection, definePolicy, defineSandbox, defineSkill, defineSlackChannel, defineSlackConnection, defineTeamsChannel, defineTeamsConnection, defineTelegramChannel, defineTelegramConnection, defineTwilioChannel, defineTwilioConnection, defineWhatsAppChannel, defineWhatsAppConnection, defineWorkspace, defineZaloChannel, defineZaloConnection, env, envPlaceholder, isBroodsConfig, isConnectionDefinition, isLogLevel, isObservabilityClientMessage, isResource, isRootSpanKind, isSandboxLogId, isTraceId, normalizeHttpServiceUrl, readSseStream, resolveEnvCredential, resolveRunEvents, toWebSocketBaseUrl, webSocketSubprotocols };
-export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountMcp, AccountPolicy, AccountRole, AccountSandbox, AccountWorkspace, Agent, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentContinueInput, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentGoogleChatChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentInstagramChannelConfig, AgentLinearChannelConfig, AgentMatrixChannelConfig, AgentMessengerChannelConfig, AgentPancakeChannelConfig, AgentProviderSettings, AgentReference, AgentResource, AgentRunAnswerInput, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTeamsChannelConfig, AgentTelegramChannelConfig, AgentTwilioChannelConfig, AgentWebhookHookConfig, AgentWhatsAppChannelConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyConnectionDefinition, AnyResource, AssumeRoleResult, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, AuditEvent, AuditPage, AuditPrincipalLink, AuditSink, AuditVerification, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelAgentInput, ChannelDefinitionConfig, ChannelMessageReceived, ChannelPartition, ChannelRecordConfig, ChannelReference, ChannelReplyIn, ChannelResource, ChannelType, CliManifest, CliManifestResource, ConfigPatch, Connection, ConnectionCode, ConnectionDefinition, ConnectionStart, ConnectionStartResult, ConnectionType, CreateAgentResult, CreateCronInput, CreateMcpInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, DeleteAccountResult, DiscordChannelInput, DiscordConnectionDefinition, DiscordConnectionInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelInput, GitHubConnectionDefinition, GitHubConnectionInput, GitHubMessageSource, GitHubSource, GoogleChatChannelInput, GoogleChatConnectionDefinition, GoogleChatConnectionInput, GoogleChatMessageSource, GoogleChatSource, HarnessDefinition, HarnessType, HookAgentConfig, HookContext, Id, IngressMode, IngressStatus, InstagramChannelInput, InstagramConnectionDefinition, InstagramConnectionInput, InstagramMessageSource, InstagramSource, LinearChannelInput, LinearConnectionDefinition, LinearConnectionInput, LinearMessageSource, LinearSource, LogLevel, MatrixChannelInput, MatrixConnectionDefinition, MatrixConnectionInput, MatrixMessageSource, MatrixSource, McpDefinitionConfig, McpHandler, McpOauthInput, McpResource, MessengerChannelInput, MessengerConnectionDefinition, MessengerConnectionInput, MessengerMessageSource, MessengerSource, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityFetchTraceMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelInput, PancakeConnectionDefinition, PancakeConnectionInput, PancakeMessageSource, PancakeSource, PendingQuestion, PolicyDefinitionConfig, PolicyDocument, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, QuestionAnswer, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxDefinitionOptions, SandboxExecRequest, SandboxExecResponse, SandboxLifecycleResult, SandboxProvider, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelInput, SlackConnectionDefinition, SlackConnectionInput, SlackMessageSource, SlackSource, StageDoc, StageScope, TaskWaitingOn, TeamsChannelInput, TeamsConnectionDefinition, TeamsConnectionInput, TeamsMessageSource, TeamsSource, TelegramChannelInput, TelegramConnectionDefinition, TelegramConnectionInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, TwilioChannelInput, TwilioConnectionDefinition, TwilioConnectionInput, TwilioMessageSource, TwilioSource, UpdateAgentInput, UpdateCronInput, UpdateMcpInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, WhatsAppChannelInput, WhatsAppConnectionDefinition, WhatsAppConnectionInput, WhatsAppMessageSource, WhatsAppSource, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceConfigInput, WorkspaceDefinitionConfig, WorkspaceFileEntry, WorkspaceIsolation, WorkspaceResource, ZaloChannelInput, ZaloConnectionDefinition, ZaloConnectionInput, ZaloMessageSource, ZaloSource };
+export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountMcp, AccountPolicy, AccountRole, AccountSandbox, AccountWorkspace, Agent, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentContinueInput, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentGoogleChatChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentInstagramChannelConfig, AgentLinearChannelConfig, AgentMatrixChannelConfig, AgentMessengerChannelConfig, AgentPancakeChannelConfig, AgentProviderSettings, AgentReference, AgentResource, AgentRunAnswerInput, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTeamsChannelConfig, AgentTelegramChannelConfig, AgentTwilioChannelConfig, AgentWebhookHookConfig, AgentWhatsAppChannelConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyConnectionDefinition, AnyResource, AssumeRoleResult, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, AuditEvent, AuditPage, AuditPrincipalLink, AuditSink, AuditVerification, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelAgentInput, ChannelDefinitionConfig, ChannelMessageReceived, ChannelPartition, ChannelRecordConfig, ChannelReference, ChannelReplyIn, ChannelResource, ChannelType, CliManifest, CliManifestResource, ConfigPatch, Connection, ConnectionCode, ConnectionDefinition, ConnectionStart, ConnectionStartResult, ConnectionType, CreateAgentResult, CreateCronInput, CreateMcpInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, DeleteAccountResult, DiscordChannelInput, DiscordConnectionDefinition, DiscordConnectionInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelInput, GitHubConnectionDefinition, GitHubConnectionInput, GitHubMessageSource, GitHubSource, GoogleChatChannelInput, GoogleChatConnectionDefinition, GoogleChatConnectionInput, GoogleChatMessageSource, GoogleChatSource, HarnessDefinition, HarnessType, HookAgentConfig, HookContext, Id, IngressMode, IngressStatus, InstagramChannelInput, InstagramConnectionDefinition, InstagramConnectionInput, InstagramMessageSource, InstagramSource, LinearChannelInput, LinearConnectionDefinition, LinearConnectionInput, LinearMessageSource, LinearSource, LogLevel, MatrixChannelInput, MatrixConnectionDefinition, MatrixConnectionInput, MatrixMessageSource, MatrixSource, McpDefinitionConfig, McpHandler, McpOauthInput, McpResource, MessengerChannelInput, MessengerConnectionDefinition, MessengerConnectionInput, MessengerMessageSource, MessengerSource, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityFetchTraceMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelInput, PancakeConnectionDefinition, PancakeConnectionInput, PancakeMessageSource, PancakeSource, PendingQuestion, PolicyDefinitionConfig, PolicyDocument, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, QuestionAnswer, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxDefinitionOptions, SandboxExecRequest, SandboxExecResponse, SandboxLifecycleResult, SandboxProvider, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelInput, SlackConnectionDefinition, SlackConnectionInput, SlackMessageSource, SlackSource, StageDoc, StageScope, TaskWaitingOn, TeamsChannelInput, TeamsConnectionDefinition, TeamsConnectionInput, TeamsMessageSource, TeamsSource, TelegramChannelInput, TelegramConnectionDefinition, TelegramConnectionInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, TwilioChannelInput, TwilioConnectionDefinition, TwilioConnectionInput, TwilioMessageSource, TwilioSource, UpdateAgentInput, UpdateCronInput, UpdateMcpInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, WhatsAppChannelInput, WhatsAppConnectionDefinition, WhatsAppConnectionInput, WhatsAppMessageSource, WhatsAppSource, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceDefinitionConfig, WorkspaceFileEntry, WorkspaceIsolation, WorkspaceResource, ZaloChannelInput, ZaloConnectionDefinition, ZaloConnectionInput, ZaloMessageSource, ZaloSource };

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "broods",
-  "version": "0.45.0",
+  "version": "0.46.0",
   "description": "CLI + TypeScript SDK for the broods agent platform.",
   "keywords": [
     "agents",

/package/dist/{chunk-7e3meadv.js → chunk-qdmc5crt.js} RENAMED Viewed

File without changes