openmates 0.15.0-alpha.28 → 0.15.0-alpha.29

package/dist/{chunk-LJQTUMTN.js → chunk-LPJME5IC.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-AXNRPVLE.js";
 
 // src/client.ts
-import { createHash as createHash6, randomUUID as randomUUID5 } from "crypto";
+import { createHash as createHash7, randomBytes as randomBytes3, randomUUID as randomUUID5 } from "crypto";
 import { arch, platform as platform2, release } from "os";
 import { createInterface as createInterface2 } from "readline/promises";
 import { stdin as stdin2, stdout } from "process";
@@ -198,9 +198,9 @@ function generateSecureRecoveryKey(length = 24) {
     const chars = requiredSets[index];
     result[index] = chars.charAt(randomByte % chars.length);
   }
-  const randomBytes5 = cryptoApi.getRandomValues(new Uint8Array(length));
+  const randomBytes6 = cryptoApi.getRandomValues(new Uint8Array(length));
   for (let index = requiredSets.length; index < length; index += 1) {
-    result[index] = allChars.charAt(randomBytes5[index] % allChars.length);
+    result[index] = allChars.charAt(randomBytes6[index] % allChars.length);
   }
   for (let index = result.length - 1; index > 0; index -= 1) {
     const randomByte = cryptoApi.getRandomValues(new Uint8Array(1))[0];
@@ -699,6 +699,7 @@ import {
   rmSync,
   writeFileSync
 } from "fs";
+import { createHash as createHash3 } from "crypto";
 import { homedir as homedir2 } from "os";
 import { join } from "path";
 
@@ -975,6 +976,7 @@ function saveSession(session) {
     createdAt: session.createdAt,
     authorizerDeviceName: session.authorizerDeviceName,
     autoLogoutMinutes: session.autoLogoutMinutes,
+    activeTeamId: session.activeTeamId ?? null,
     masterKeyStorage: result.type
   };
   if (result.type === "encrypted") {
@@ -1082,26 +1084,32 @@ function buildSession(onDisk, masterKey, emailEncryptionKey) {
     userEmailSalt: onDisk.userEmailSalt,
     createdAt: onDisk.createdAt,
     authorizerDeviceName: onDisk.authorizerDeviceName,
-    autoLogoutMinutes: onDisk.autoLogoutMinutes
+    autoLogoutMinutes: onDisk.autoLogoutMinutes,
+    activeTeamId: onDisk.activeTeamId ?? null
   };
 }
 var SYNC_CACHE_FILE = "sync_cache.json";
-function saveSyncCache(cache) {
-  const filePath = join(ensureStateDir(), SYNC_CACHE_FILE);
+function syncCacheFile(teamId) {
+  if (!teamId) return SYNC_CACHE_FILE;
+  const digest = createHash3("sha256").update(teamId).digest("hex").slice(0, 32);
+  return `sync_cache.team.${digest}.json`;
+}
+function saveSyncCache(cache, teamId) {
+  const filePath = join(ensureStateDir(), syncCacheFile(teamId));
   writeJsonFile(filePath, cache);
 }
-function loadSyncCache() {
-  const filePath = join(ensureStateDir(), SYNC_CACHE_FILE);
+function loadSyncCache(teamId) {
+  const filePath = join(ensureStateDir(), syncCacheFile(teamId));
   return readJsonFile(filePath);
 }
-function clearSyncCache() {
-  const filePath = join(ensureStateDir(), SYNC_CACHE_FILE);
+function clearSyncCache(teamId) {
+  const filePath = join(ensureStateDir(), syncCacheFile(teamId));
   if (existsSync2(filePath)) {
     rmSync(filePath);
   }
 }
-function isSyncCacheFresh(maxAgeMs = 3e5) {
-  const cache = loadSyncCache();
+function isSyncCacheFresh(maxAgeMs = 3e5, teamId) {
+  const cache = loadSyncCache(teamId);
   if (!cache) return false;
   return Date.now() - cache.syncedAt < maxAgeMs;
 }
@@ -2297,7 +2305,7 @@ function escapeRegExp(s) {
 }
 
 // src/embedCreator.ts
-import { randomUUID, createHash as createHash3, randomBytes, webcrypto as webcrypto3 } from "crypto";
+import { randomUUID, createHash as createHash4, randomBytes, webcrypto as webcrypto3 } from "crypto";
 import { encode as toonEncode } from "@toon-format/toon";
 var cryptoApi3 = webcrypto3;
 var AES_GCM_IV_LENGTH3 = 12;
@@ -2351,7 +2359,7 @@ function generateEmbedKey() {
   return new Uint8Array(randomBytes(32));
 }
 function computeSHA256(content) {
-  return createHash3("sha256").update(content).digest("hex");
+  return createHash4("sha256").update(content).digest("hex");
 }
 function toonEncodeContent(data) {
   try {
@@ -2546,7 +2554,7 @@ function buildEmbedShareUrl(origin, embedId, blob) {
 }
 
 // src/connectedAccountImport.ts
-import { createHash as createHash4, randomUUID as randomUUID2, webcrypto as webcrypto5 } from "crypto";
+import { createHash as createHash5, randomUUID as randomUUID2, webcrypto as webcrypto5 } from "crypto";
 var TRANSFER_PREFIX = "OMCA1.";
 var SUPPORTED_KDF_ITERATIONS = 1e5;
 async function decryptConnectedAccountCliTransferPayload(encryptedPayload, passcode) {
@@ -2691,7 +2699,7 @@ function defaultProviderLabel(providerId) {
   return providerId === "google_calendar" ? "Google Calendar" : "Connected account";
 }
 function sha256Hex2(value) {
-  return createHash4("sha256").update(value).digest("hex");
+  return createHash5("sha256").update(value).digest("hex");
 }
 function base64UrlToBytes2(value) {
   return base64ToBytes(value.replace(/-/g, "+").replace(/_/g, "/"));
@@ -3540,7 +3548,7 @@ function stripTimer(job) {
 }
 
 // src/tasksCli.ts
-import { createHash as createHash5, createHmac, hkdfSync, randomBytes as randomBytes2, randomUUID as randomUUID4 } from "crypto";
+import { createHash as createHash6, createHmac, hkdfSync, randomBytes as randomBytes2, randomUUID as randomUUID4 } from "crypto";
 var TASK_STATUSES2 = ["backlog", "todo", "in_progress", "blocked", "done"];
 var DEFAULT_STANDALONE_PREFIX = "TASK";
 var PRIORITY_LEVELS = ["none", "low", "medium", "high", "urgent"];
@@ -3722,7 +3730,7 @@ function workflowProjectionToTask(record) {
 }
 function workflowProjectionShortId(record) {
   const stableId = record.workflow_run_id || record.task_id;
-  return `WF-${createHash5("sha256").update(stableId).digest("hex").slice(0, 6).toUpperCase()}`;
+  return `WF-${createHash6("sha256").update(stableId).digest("hex").slice(0, 6).toUpperCase()}`;
 }
 async function decryptUserTasks(records, masterKey) {
   const output = [];
@@ -3828,7 +3836,7 @@ function parseStringArray(value) {
 function deriveShortId(record) {
   const prefix = record.short_id_prefix || DEFAULT_STANDALONE_PREFIX;
   const source = record.task_id || `${record.created_at ?? ""}-${record.position ?? ""}`;
-  const digest = createHash5("sha256").update(source).digest("hex").slice(0, 4).toUpperCase();
+  const digest = createHash6("sha256").update(source).digest("hex").slice(0, 4).toUpperCase();
   return `${prefix}-${parseInt(digest, 16) % 1e4}`;
 }
 function nowSeconds() {
@@ -3968,7 +3976,8 @@ function buildTurnTokenRefsRequestPayload(params) {
   return {
     chat_id: params.chatId,
     message_id: params.messageId,
-    refs: params.refs.map((ref) => ({ ...ref }))
+    refs: params.refs.map((ref) => ({ ...ref })),
+    ...params.teamId ? { team_id: params.teamId } : {}
   };
 }
 function categoryFromMemoryKey(key) {
@@ -4752,6 +4761,189 @@ var OpenMatesClient = class _OpenMatesClient {
   hasSession() {
     return this.session !== null;
   }
+  getActiveTeamId() {
+    return this.session?.activeTeamId ?? null;
+  }
+  setActiveTeamId(teamId) {
+    const session = this.requireSession();
+    this.session = { ...session, activeTeamId: teamId };
+    saveSession(this.session);
+  }
+  resolveTeamContext(options = {}) {
+    if (options.personal) return null;
+    if (options.teamId !== void 0) return options.teamId;
+    return this.getActiveTeamId();
+  }
+  appendTeamQuery(path, options = {}) {
+    const teamId = this.resolveTeamContext(options);
+    if (!teamId) return path;
+    const separator2 = path.includes("?") ? "&" : "?";
+    return `${path}${separator2}team_id=${encodeURIComponent(teamId)}`;
+  }
+  async listTeams() {
+    this.requireSession();
+    const response = await this.http.get("/v1/teams", this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team list failed with HTTP ${response.status}`);
+    return response.data.teams ?? [];
+  }
+  async createTeam(input) {
+    this.requireSession();
+    const now = Math.floor(Date.now() / 1e3);
+    const teamKeyBytes = randomBytes3(32);
+    const payload = {
+      team_id: input.teamId ?? randomUUID5(),
+      slug: input.slug ?? void 0,
+      encrypted_name: input.encryptedName ?? await encryptWithAesGcmCombined(input.name ?? "Untitled team", teamKeyBytes),
+      encrypted_description: input.encryptedDescription ?? (input.description ? await encryptWithAesGcmCombined(input.description, teamKeyBytes) : void 0),
+      encrypted_team_key: input.encryptedTeamKey ?? await encryptBytesWithAesGcm(teamKeyBytes, this.getMasterKeyBytes()),
+      encrypted_zero_balance: input.encryptedZeroBalance ?? await encryptWithAesGcmCombined("0", teamKeyBytes),
+      created_at: input.createdAt ?? now,
+      updated_at: input.createdAt ?? now
+    };
+    const response = await this.http.post("/v1/teams", payload, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.team) throw new Error(`Team create failed with HTTP ${response.status}`);
+    return response.data.team;
+  }
+  async getTeam(teamId) {
+    this.requireSession();
+    const response = await this.http.get(`/v1/teams/${encodeURIComponent(teamId)}`, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.team) throw new Error(`Team get failed with HTTP ${response.status}`);
+    return response.data.team;
+  }
+  async updateTeam(teamId, input) {
+    this.requireSession();
+    const response = await this.http.patch(`/v1/teams/${encodeURIComponent(teamId)}`, {
+      updated_at: input.updated_at ?? Math.floor(Date.now() / 1e3),
+      ...input
+    }, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.team) throw new Error(`Team update failed with HTTP ${response.status}`);
+    return response.data.team;
+  }
+  async deleteTeam(teamId) {
+    this.requireSession();
+    const response = await this.http.delete(`/v1/teams/${encodeURIComponent(teamId)}`, void 0, this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team delete failed with HTTP ${response.status}`);
+    return { success: response.data.success === true };
+  }
+  async createTeamInvite(teamId, input) {
+    this.requireSession();
+    const response = await this.http.post(`/v1/teams/${encodeURIComponent(teamId)}/invites`, {
+      invite_id: input.invite_id ?? randomUUID5(),
+      created_at: input.created_at ?? Math.floor(Date.now() / 1e3),
+      ...input
+    }, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.invite) throw new Error(`Team invite create failed with HTTP ${response.status}`);
+    return response.data.invite;
+  }
+  async acceptTeamInvite(inviteId) {
+    this.requireSession();
+    const response = await this.http.post(`/v1/teams/invites/${encodeURIComponent(inviteId)}/accept`, { accepted_at: Math.floor(Date.now() / 1e3) }, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.access_request) throw new Error(`Team invite accept failed with HTTP ${response.status}`);
+    return { access_request: response.data.access_request, status_label: response.data.status_label };
+  }
+  async declineTeamInvite(inviteId) {
+    this.requireSession();
+    const response = await this.http.post(`/v1/teams/invites/${encodeURIComponent(inviteId)}/decline`, { declined_at: Math.floor(Date.now() / 1e3) }, this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team invite decline failed with HTTP ${response.status}`);
+    return { success: response.data.success === true };
+  }
+  async listTeamAccessRequests(teamId, status) {
+    this.requireSession();
+    const query = status && status !== "all" ? `?status=${encodeURIComponent(status)}` : status === "all" ? "?status=" : "";
+    const response = await this.http.get(`/v1/teams/${encodeURIComponent(teamId)}/access-requests${query}`, this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team access requests failed with HTTP ${response.status}`);
+    return response.data.access_requests ?? [];
+  }
+  async approveTeamAccessRequest(teamId, accessRequestId, encryptedTeamKey) {
+    this.requireSession();
+    const response = await this.http.post(`/v1/teams/${encodeURIComponent(teamId)}/access-requests/${encodeURIComponent(accessRequestId)}/approve`, { encrypted_team_key: encryptedTeamKey, approved_at: Math.floor(Date.now() / 1e3) }, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.membership) throw new Error(`Team access approval failed with HTTP ${response.status}`);
+    return response.data.membership;
+  }
+  async rejectTeamAccessRequest(teamId, accessRequestId) {
+    this.requireSession();
+    const response = await this.http.post(`/v1/teams/${encodeURIComponent(teamId)}/access-requests/${encodeURIComponent(accessRequestId)}/reject`, { rejected_at: Math.floor(Date.now() / 1e3) }, this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team access rejection failed with HTTP ${response.status}`);
+    return { success: response.data.success === true };
+  }
+  async exportTeamData(teamId, input = {}) {
+    this.requireSession();
+    const response = await this.http.post(`/v1/teams/${encodeURIComponent(teamId)}/export`, {
+      export_id: input.export_id,
+      created_at: input.created_at ?? Math.floor(Date.now() / 1e3)
+    }, this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team export failed with HTTP ${response.status}`);
+    return response.data;
+  }
+  async getTeamExport(teamId, exportId) {
+    this.requireSession();
+    const response = await this.http.get(`/v1/teams/${encodeURIComponent(teamId)}/export/${encodeURIComponent(exportId)}`, this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team export download failed with HTTP ${response.status}`);
+    return response.data;
+  }
+  async importTeamData(destinationTeamId, artifact) {
+    this.requireSession();
+    const response = await this.http.post("/v1/teams/import", {
+      destination_team_id: destinationTeamId,
+      artifact,
+      imported_at: Math.floor(Date.now() / 1e3)
+    }, this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team import failed with HTTP ${response.status}`);
+    return response.data;
+  }
+  async updateTeamMemberRole(teamId, memberUserId, role) {
+    this.requireSession();
+    const response = await this.http.patch(`/v1/teams/${encodeURIComponent(teamId)}/members/${encodeURIComponent(memberUserId)}`, { role, updated_at: Math.floor(Date.now() / 1e3) }, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.membership) throw new Error(`Team member update failed with HTTP ${response.status}`);
+    return response.data.membership;
+  }
+  async removeTeamMember(teamId, memberUserId) {
+    this.requireSession();
+    const response = await this.http.post(`/v1/teams/${encodeURIComponent(teamId)}/members/${encodeURIComponent(memberUserId)}/remove`, { removed_at: Math.floor(Date.now() / 1e3) }, this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team member remove failed with HTTP ${response.status}`);
+    return { success: response.data.success === true };
+  }
+  async getTeamBilling(teamId) {
+    this.requireSession();
+    const response = await this.http.get(`/v1/teams/${encodeURIComponent(teamId)}/billing`, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.billing) throw new Error(`Team billing failed with HTTP ${response.status}`);
+    return response.data.billing;
+  }
+  async addTeamCredits(teamId, input) {
+    this.requireSession();
+    const response = await this.http.post(`/v1/teams/${encodeURIComponent(teamId)}/billing/credits`, {
+      event_id: input.event_id ?? randomUUID5(),
+      encrypted_balance: input.encrypted_balance ?? String(input.encryptedBalance ?? "0"),
+      occurred_at: input.occurred_at ?? Math.floor(Date.now() / 1e3),
+      ...input
+    }, this.getCliRequestHeaders());
+    if (!response.ok || !response.data.billing) throw new Error(`Team credit add failed with HTTP ${response.status}`);
+    return response.data.billing;
+  }
+  async listTeamUsage(teamId, memberUserId) {
+    this.requireSession();
+    const query = memberUserId ? `?member_user_id=${encodeURIComponent(memberUserId)}` : "";
+    const response = await this.http.get(`/v1/teams/${encodeURIComponent(teamId)}/billing/usage${query}`, this.getCliRequestHeaders());
+    if (!response.ok) throw new Error(`Team usage failed with HTTP ${response.status}`);
+    return response.data.usage ?? [];
+  }
+  async moveWorkspaceToTeam(workspaceType, objectId, teamId) {
+    this.requireSession();
+    const routeByType = {
+      chat: `/v1/chats/${encodeURIComponent(objectId)}/move`,
+      project: `/v1/projects/${encodeURIComponent(objectId)}/move`,
+      task: `/v1/user-tasks/${encodeURIComponent(objectId)}/move`,
+      plan: `/v1/user-plans/${encodeURIComponent(objectId)}/move`,
+      workflow: `/v1/workflows/${encodeURIComponent(objectId)}/move`
+    };
+    const response = await this.http.post(
+      routeByType[workspaceType],
+      { team_id: teamId, confirmed: true, moved_at: Math.floor(Date.now() / 1e3) },
+      this.getCliRequestHeaders()
+    );
+    if (!response.ok) throw new Error(`${workspaceType} move failed with HTTP ${response.status}`);
+    return response.data;
+  }
   async getAnonymousFreeUsageStatus() {
     const response = await this.http.get("/v1/anonymous/free-usage/status");
     if (response.status === 404) {
@@ -4910,7 +5102,7 @@ var OpenMatesClient = class _OpenMatesClient {
     if (!userId) {
       throw new Error("Could not resolve current user id for local connected-account connector.");
     }
-    const { createHash: createHash10 } = await import("crypto");
+    const { createHash: createHash11 } = await import("crypto");
     const accountId = randomUUID5();
     const masterKey = this.getMasterKeyBytes();
     const encryptLocalConnectorValue = async (value) => {
@@ -4919,9 +5111,9 @@ var OpenMatesClient = class _OpenMatesClient {
     };
     const payload = {
       id: accountId,
-      hashed_user_id: createHash10("sha256").update(userId).digest("hex"),
+      hashed_user_id: createHash11("sha256").update(userId).digest("hex"),
       encrypted_provider_type: await encryptLocalConnectorValue(input.provider_id),
-      provider_type_hash: createHash10("sha256").update(input.provider_id).digest("hex"),
+      provider_type_hash: createHash11("sha256").update(input.provider_id).digest("hex"),
       encrypted_account_label: await encryptLocalConnectorValue(input.label),
       encrypted_capabilities: await encryptLocalConnectorValue(input.capabilities),
       encrypted_app_permissions: await encryptLocalConnectorValue({
@@ -5363,7 +5555,7 @@ var OpenMatesClient = class _OpenMatesClient {
     return decryptBytesWithAesGcm(encryptedChatKey, masterKey);
   }
   getMasterWrapperEncryptedChatKey(cache, chatId) {
-    const hashedChatId = createHash6("sha256").update(chatId).digest("hex");
+    const hashedChatId = createHash7("sha256").update(chatId).digest("hex");
     const wrapper = (cache?.chatKeyWrappers ?? []).find(
       (entry) => entry.key_type === "master" && entry.hashed_chat_id === hashedChatId && typeof entry.encrypted_chat_key === "string"
     );
@@ -5398,8 +5590,8 @@ var OpenMatesClient = class _OpenMatesClient {
       mateName: category ? MATE_NAMES[category] ?? null : null
     };
   }
-  async listChats(limit = 10, page = 1) {
-    const cache = await this.ensureSynced();
+  async listChats(limit = 10, page = 1, options = {}) {
+    const cache = await this.ensureSynced(false, [], options);
     const masterKey = this.getMasterKeyBytes();
     const total = cache.chats.length;
     const offset = (page - 1) * limit;
@@ -5567,8 +5759,8 @@ var OpenMatesClient = class _OpenMatesClient {
       preview
     };
   }
-  async searchChats(query) {
-    const cache = await this.ensureSynced();
+  async searchChats(query, options = {}) {
+    const cache = await this.ensureSynced(false, [], options);
     const masterKey = this.getMasterKeyBytes();
     const normalized = query.trim().toLowerCase();
     const results = [];
@@ -5595,8 +5787,8 @@ var OpenMatesClient = class _OpenMatesClient {
    *
    * @param query Full UUID, 8-char short ID, or chat title.
    */
-  async getChatMessages(query) {
-    const cache = await this.ensureSynced(true);
+  async getChatMessages(query, options = {}) {
+    const cache = await this.ensureSynced(true, [], options);
     const masterKey = this.getMasterKeyBytes();
     const normalized = query.trim().toLowerCase();
     let found;
@@ -5658,8 +5850,8 @@ var OpenMatesClient = class _OpenMatesClient {
       );
       let msgEmbedIds = [];
       if (clientMsgId && cache.embeds.length > 0) {
-        const { createHash: createHash10 } = await import("crypto");
-        const hashed = createHash10("sha256").update(clientMsgId).digest("hex");
+        const { createHash: createHash11 } = await import("crypto");
+        const hashed = createHash11("sha256").update(clientMsgId).digest("hex");
         msgEmbedIds = cache.embeds.filter(
           (e) => e.hashed_message_id === hashed && // Only include parent embeds (no parent_embed_id).
           // Child embeds inherit the parent's key and are loaded
@@ -5706,8 +5898,8 @@ var OpenMatesClient = class _OpenMatesClient {
       );
     }
     const embedId = String(embed.embed_id ?? embed.id ?? "");
-    const { createHash: createHash10 } = await import("crypto");
-    const hashedEmbedId = createHash10("sha256").update(embedId).digest("hex");
+    const { createHash: createHash11 } = await import("crypto");
+    const hashedEmbedId = createHash11("sha256").update(embedId).digest("hex");
     const embedKeyBytes = await this.resolveEmbedKey(
       cache,
       masterKey,
@@ -5815,7 +6007,7 @@ var OpenMatesClient = class _OpenMatesClient {
   async resolveEmbedKey(cache, masterKey, embed, embedId, hashedEmbedId, visited = /* @__PURE__ */ new Set()) {
     if (visited.has(embedId)) return null;
     visited.add(embedId);
-    const { createHash: createHash10 } = await import("crypto");
+    const { createHash: createHash11 } = await import("crypto");
     const masterKeyEntry = cache.embedKeys.find(
       (ek) => ek.hashed_embed_id === hashedEmbedId && String(ek.key_type) === "master"
     );
@@ -5832,7 +6024,7 @@ var OpenMatesClient = class _OpenMatesClient {
     if (chatKeyEntry && typeof chatKeyEntry.encrypted_embed_key === "string") {
       const hashedChatId = String(chatKeyEntry.hashed_chat_id ?? "");
       const owningChat = cache.chats.find((c) => {
-        const chatHash = createHash10("sha256").update(String(c.details.id ?? "")).digest("hex");
+        const chatHash = createHash11("sha256").update(String(c.details.id ?? "")).digest("hex");
         return chatHash === hashedChatId;
       });
       if (owningChat) {
@@ -5861,7 +6053,7 @@ var OpenMatesClient = class _OpenMatesClient {
         const parentFullId = String(
           parentEmbed2.embed_id ?? parentEmbed2.id ?? ""
         );
-        const parentHashedId = createHash10("sha256").update(parentFullId).digest("hex");
+        const parentHashedId = createHash11("sha256").update(parentFullId).digest("hex");
         const parentKey = await this.resolveEmbedKey(
           cache,
           masterKey,
@@ -5879,8 +6071,9 @@ var OpenMatesClient = class _OpenMatesClient {
    * Resolve a short chat ID (first 8 chars) or partial title to a full UUID.
    * Accepts full UUIDs unchanged. Returns undefined if no match found.
    */
-  async resolveFullChatId(idOrShort) {
-    const staleCache = loadSyncCache();
+  async resolveFullChatId(idOrShort, options = {}) {
+    const teamId = this.resolveTeamContext(options);
+    const staleCache = loadSyncCache(teamId);
     const lower = idOrShort.toLowerCase();
     if (staleCache) {
       for (const chat of staleCache.chats) {
@@ -5891,7 +6084,9 @@ var OpenMatesClient = class _OpenMatesClient {
     }
     const freshCache = await this.ensureSynced(
       /* forceRefresh */
-      true
+      true,
+      [],
+      { teamId }
     );
     for (const chat of freshCache.chats) {
       const fullId = String(chat.details.id ?? "");
@@ -5911,8 +6106,8 @@ var OpenMatesClient = class _OpenMatesClient {
    *
    * @param limit Maximum number of suggestions to return (default: 10)
    */
-  async listNewChatSuggestions(limit = 10) {
-    const cache = await this.ensureSynced();
+  async listNewChatSuggestions(limit = 10, options = {}) {
+    const cache = await this.ensureSynced(false, [], options);
     const masterKey = this.getMasterKeyBytes();
     const rawSuggestions = cache.newChatSuggestions ?? [];
     const results = [];
@@ -5942,12 +6137,13 @@ var OpenMatesClient = class _OpenMatesClient {
    *
    * Mirrors: chat_actions_store.ts / FollowUpSuggestions.svelte (web app)
    */
-  async getChatFollowUpSuggestions(chatId) {
-    const cachedMatch = loadSyncCache()?.chats.find(
+  async getChatFollowUpSuggestions(chatId, options = {}) {
+    const teamId = this.resolveTeamContext(options);
+    const cachedMatch = loadSyncCache(teamId)?.chats.find(
       (c) => String(c.details.id ?? "") === chatId || String(c.details.id ?? "").startsWith(chatId)
     );
     const refreshChatId = String(cachedMatch?.details.id ?? chatId);
-    const cache = await this.ensureSynced(true, [refreshChatId]);
+    const cache = await this.ensureSynced(true, [refreshChatId], { teamId });
     const masterKey = this.getMasterKeyBytes();
     const found = cache.chats.find(
       (c) => String(c.details.id ?? "") === chatId || String(c.details.id ?? "").startsWith(chatId)
@@ -5972,11 +6168,12 @@ var OpenMatesClient = class _OpenMatesClient {
     return [];
   }
   async sendMessage(params) {
+    const teamId = this.resolveTeamContext({ teamId: params.teamId, personal: params.personal });
     let chatId;
     if (!params.chatId) {
       chatId = randomUUID5();
     } else if (params.chatId.length < 36) {
-      const resolved = await this.resolveFullChatId(params.chatId);
+      const resolved = await this.resolveFullChatId(params.chatId, { teamId });
       if (!resolved) {
         throw new Error(
           `Chat not found for '${params.chatId}'. Use a full UUID or the first 8 characters of an existing chat ID.`
@@ -5990,7 +6187,7 @@ var OpenMatesClient = class _OpenMatesClient {
     let memoryMetadataKeys = [];
     if (!params.incognito) {
       try {
-        availableMemories = await this.listMemories();
+        availableMemories = await this.listMemories({ teamId });
         memoryMetadataKeys = [
           ...new Set(
             availableMemories.filter((memory) => memory.app_id && memory.item_type).map((memory) => `${memory.app_id}-${memory.item_type}`)
@@ -6014,14 +6211,15 @@ var OpenMatesClient = class _OpenMatesClient {
     const messageId = randomUUID5();
     const createdAt = Math.floor(Date.now() / 1e3);
     const isNewChat = !params.chatId;
-    ws.send("set_active_chat", { chat_id: chatId });
+    ws.send("set_active_chat", { chat_id: chatId, ...teamId ? { team_id: teamId } : {} });
     const connectedAccountDirectory = buildConnectedAccountDirectoryPayload(
       params.connectedAccountDirectory
     );
     const connectedAccountTokenRefs = params.connectedAccountTokenRefInputs?.length ? await this.createTurnTokenRefs({
       chatId,
       messageId,
-      refs: params.connectedAccountTokenRefInputs
+      refs: params.connectedAccountTokenRefInputs,
+      teamId
     }) : [];
     assertNoConnectedAccountSecretLeak(connectedAccountTokenRefs);
     const piiMappings = params.piiMappings ?? [];
@@ -6043,7 +6241,7 @@ var OpenMatesClient = class _OpenMatesClient {
           masterKey
         );
       } else {
-        const cache = loadSyncCache() ?? await this.ensureSynced();
+        const cache = loadSyncCache(teamId) ?? await this.ensureSynced(false, [], { teamId });
         const chat = cache.chats.find(
           (c) => String(c.details.id ?? "") === chatId || String(c.details.id ?? "").startsWith(chatId)
         );
@@ -6063,6 +6261,7 @@ var OpenMatesClient = class _OpenMatesClient {
     const clientCapabilities = explicitTasksAppSkill ? [] : ["task_update_jobs"];
     const messagePayload = {
       chat_id: chatId,
+      ...teamId ? { team_id: teamId } : {},
       client_capabilities: clientCapabilities,
       is_incognito: Boolean(params.incognito),
       message: {
@@ -6188,6 +6387,7 @@ var OpenMatesClient = class _OpenMatesClient {
       const preflightPayload = {
         protocol_version: protocolVersion,
         chat_id: chatId,
+        ...teamId ? { team_id: teamId } : {},
         turn_id: turnId,
         message_id: messageId,
         chat_key_version: chatKeyVersion,
@@ -6624,7 +6824,7 @@ var OpenMatesClient = class _OpenMatesClient {
           } catch (error) {
             if (error instanceof WebSocketProtocolError) {
               if (error.code === "version_conflict") {
-                const latestCache = await this.ensureSynced(true, [chatId]);
+                const latestCache = await this.ensureSynced(true, [chatId], { teamId });
                 const latestChat = latestCache.chats.find(
                   (chat) => String(chat.details.id ?? "") === chatId
                 );
@@ -6657,6 +6857,7 @@ var OpenMatesClient = class _OpenMatesClient {
           await this.persistPostProcessingMetadata({
             ws,
             chatId,
+            teamId,
             chatKeyBytes,
             followUpSuggestions: resp.followUpSuggestions,
             newChatSuggestions: resp.newChatSuggestions,
@@ -6673,7 +6874,7 @@ var OpenMatesClient = class _OpenMatesClient {
           });
           pendingTaskUpdateJobs = pendingTaskUpdateJobs.filter((job) => !persistedTaskJobIds.has(job.job_id));
           await persistTaskEventSystemMessages(taskEvents);
-          clearSyncCache();
+          clearSyncCache(teamId);
         }
       } finally {
         ws.close();
@@ -7099,6 +7300,7 @@ var OpenMatesClient = class _OpenMatesClient {
     if (!encryptedFollowUps && encryptedNewChatSuggestions.length === 0) return;
     await params.ws.sendAsync("update_post_processing_metadata", {
       chat_id: params.chatId,
+      ...params.teamId ? { team_id: params.teamId } : {},
       encrypted_follow_up_suggestions: encryptedFollowUps,
       encrypted_new_chat_suggestions: encryptedNewChatSuggestions,
       encrypted_chat_key: params.encryptedChatKey ?? ""
@@ -7118,10 +7320,11 @@ var OpenMatesClient = class _OpenMatesClient {
    * Mirrors the web app's sendDeleteChatImpl in chatSyncServiceSenders.ts.
    * Sends a delete_chat WebSocket message and waits for the server ack.
    */
-  async deleteChat(chatIdInput) {
+  async deleteChat(chatIdInput, options = {}) {
+    const teamId = this.resolveTeamContext(options);
     let chatId;
     if (chatIdInput.length < 36) {
-      const resolved = await this.resolveFullChatId(chatIdInput);
+      const resolved = await this.resolveFullChatId(chatIdInput, { teamId });
       if (!resolved) {
         throw new Error(
           `Chat not found for '${chatIdInput}'. Use a full UUID or the first 8 characters of an existing chat ID.`
@@ -7133,7 +7336,7 @@ var OpenMatesClient = class _OpenMatesClient {
     }
     const { ws } = await this.openWsClient();
     try {
-      ws.send("delete_chat", { chatId });
+      ws.send("delete_chat", { chatId, chat_id: chatId, ...teamId ? { team_id: teamId } : {} });
       await ws.waitForMessage(
         "chat_deleted",
         (payload) => {
@@ -7145,6 +7348,7 @@ var OpenMatesClient = class _OpenMatesClient {
     } finally {
       ws.close();
     }
+    clearSyncCache(teamId);
   }
   // -------------------------------------------------------------------------
   // Apps
@@ -7429,10 +7633,10 @@ var OpenMatesClient = class _OpenMatesClient {
   // -------------------------------------------------------------------------
   // Workflows
   // -------------------------------------------------------------------------
-  async listWorkflows() {
+  async listWorkflows(options = {}) {
     this.requireSession();
     const response = await this.http.get(
-      "/v1/workflows",
+      this.appendTeamQuery("/v1/workflows", options),
       this.getCliRequestHeaders()
     );
     if (!response.ok) {
@@ -7497,10 +7701,10 @@ var OpenMatesClient = class _OpenMatesClient {
     }
     return { workflow: createLike.data.workflow, validation: createLike.data.validation };
   }
-  async getWorkflow(workflowId) {
+  async getWorkflow(workflowId, options = {}) {
     this.requireSession();
     const response = await this.http.get(
-      `/v1/workflows/${encodeURIComponent(workflowId)}`,
+      this.appendTeamQuery(`/v1/workflows/${encodeURIComponent(workflowId)}`, options),
       this.getCliRequestHeaders()
     );
     if (!response.ok || !response.data.workflow) {
@@ -7875,6 +8079,8 @@ var OpenMatesClient = class _OpenMatesClient {
     if (filters.priority !== void 0) params.set("priority", String(filters.priority));
     const limit = filters.limit;
     if (Number.isSafeInteger(limit) && limit !== void 0 && limit > 0) params.set("limit", String(limit));
+    const teamId = this.resolveTeamContext({ teamId: filters.teamId, personal: filters.personal });
+    if (teamId) params.set("team_id", teamId);
     const query = params.toString();
     const response = await this.http.get(
       `/v1/user-tasks${query ? `?${query}` : ""}`,
@@ -7995,6 +8201,8 @@ var OpenMatesClient = class _OpenMatesClient {
     if (filters.chatId) params.set("chat_id", filters.chatId);
     if (filters.projectId) params.set("project_id", filters.projectId);
     if (filters.activeOnly !== void 0) params.set("active_only", String(filters.activeOnly));
+    const teamId = this.resolveTeamContext({ teamId: filters.teamId, personal: filters.personal });
+    if (teamId) params.set("team_id", teamId);
     const query = params.toString();
     const response = await this.http.get(
       `/v1/user-plans${query ? `?${query}` : ""}`,
@@ -8643,9 +8851,18 @@ var OpenMatesClient = class _OpenMatesClient {
    * List all memories for the current user, decrypted.
    * Fetches from the GDPR export endpoint and decrypts each entry with the master key.
    */
-  async listMemories() {
+  async sdkGetMemories(teamId) {
+    const response = await this.http.get(
+      `/v1/sdk/memories?team_id=${encodeURIComponent(teamId)}`,
+      this.getCliRequestHeaders()
+    );
+    if (!response.ok) throw new Error(`Team memory list failed with HTTP ${response.status}`);
+    return response.data.memories ?? [];
+  }
+  async listMemories(options = {}) {
     const masterKey = this.getMasterKeyBytes();
-    const data = await this.settingsGet(
+    const teamId = this.resolveTeamContext(options);
+    const data = teamId ? { data: { app_settings_memories: await this.sdkGetMemories(teamId) } } : await this.settingsGet(
       "/v1/settings/export-account-data?include_usage=false&include_invoices=false"
     );
     const rawEntries = data.data?.app_settings_memories ?? [];
@@ -8711,17 +8928,20 @@ var OpenMatesClient = class _OpenMatesClient {
       itemType: params.itemType,
       itemValue: params.itemValue,
       entryId: params.entryId,
-      itemVersion: params.currentVersion + 1
+      itemVersion: params.currentVersion + 1,
+      teamId: params.teamId,
+      personal: params.personal
     });
   }
   /**
    * Delete a memory entry. Sends `delete_app_settings_memories_entry` over
    * WebSocket. The server deletes from Directus and broadcasts to all devices.
    */
-  async deleteMemory(entryId) {
+  async deleteMemory(entryId, options = {}) {
     const { ws } = await this.openWsClient();
     try {
-      ws.send("delete_app_settings_memories_entry", { entry_id: entryId });
+      const teamId = this.resolveTeamContext(options);
+      ws.send("delete_app_settings_memories_entry", { entry_id: entryId, ...teamId ? { team_id: teamId } : {} });
       await ws.waitForMessage(
         "app_settings_memories_entry_deleted",
         (payload) => {
@@ -8774,6 +8994,7 @@ Required: ${schema.required.join(", ")}`
     }
     const entryId = params.entryId ?? randomUUID5();
     const now = Math.floor(Date.now() / 1e3);
+    const teamId = this.resolveTeamContext({ teamId: params.teamId, personal: params.personal });
     const hashedKey = hashItemKey(params.appId, params.itemType);
     const plaintextPayload = {
       ...params.itemValue,
@@ -8788,6 +9009,7 @@ Required: ${schema.required.join(", ")}`
     const { ws } = await this.openWsClient();
     try {
       ws.send("store_app_settings_memories_entry", {
+        ...teamId ? { team_id: teamId } : {},
         entry: {
           id: entryId,
           app_id: params.appId,
@@ -8797,7 +9019,8 @@ Required: ${schema.required.join(", ")}`
           encrypted_app_key: "",
           created_at: now,
           updated_at: now,
-          item_version: params.itemVersion
+          item_version: params.itemVersion,
+          ...teamId ? { team_id: teamId } : {}
         }
       });
       await ws.waitForMessage(
@@ -8927,7 +9150,7 @@ Required: ${schema.required.join(", ")}`
     const session = this.requireSession();
     const masterKey = base64ToBytes(session.masterKeyExportedB64);
     const cache = await this.ensureSynced();
-    const { createHash: createHash10 } = await import("crypto");
+    const { createHash: createHash11 } = await import("crypto");
     const embed = cache.embeds.find(
       (e) => String(e.embed_id ?? "").startsWith(embedIdOrShort) || String(e.id ?? "").startsWith(embedIdOrShort)
     );
@@ -8935,7 +9158,7 @@ Required: ${schema.required.join(", ")}`
       throw new Error(`Embed '${embedIdOrShort}' not found in local cache.`);
     }
     const embedId = String(embed.embed_id ?? embed.id ?? "");
-    const hashedEmbedId = createHash10("sha256").update(embedId).digest("hex");
+    const hashedEmbedId = createHash11("sha256").update(embedId).digest("hex");
     const embedKeyBytes = await this.resolveEmbedKey(
       cache,
       masterKey,
@@ -9043,8 +9266,8 @@ Required: ${schema.required.join(", ")}`
     if (!embed) {
       throw new Error(`Embed '${embedId}' not found in local cache. Run 'openmates chats list' to sync first.`);
     }
-    const { createHash: createHash10 } = await import("crypto");
-    const hashedEmbedId = createHash10("sha256").update(embedId).digest("hex");
+    const { createHash: createHash11 } = await import("crypto");
+    const hashedEmbedId = createHash11("sha256").update(embedId).digest("hex");
     const embedKey = await this.resolveEmbedKey(
       cache,
       masterKey,
@@ -9138,8 +9361,8 @@ Required: ${schema.required.join(", ")}`
     if (!embed) {
       throw new Error(`Embed '${embedId}' not found in local cache. Run 'openmates chats list' to sync first.`);
     }
-    const { createHash: createHash10 } = await import("crypto");
-    const hashedEmbedId = createHash10("sha256").update(embedId).digest("hex");
+    const { createHash: createHash11 } = await import("crypto");
+    const hashedEmbedId = createHash11("sha256").update(embedId).digest("hex");
     const embedKey = await this.resolveEmbedKey(
       cache,
       masterKey,
@@ -9378,13 +9601,14 @@ Required: ${schema.required.join(", ")}`
    * The sync cache stores encrypted data — decryption is always on-demand.
    * SECURITY: decrypted user content is NEVER written to disk.
    */
-  async ensureSynced(forceRefresh = false, refreshChatIds = []) {
+  async ensureSynced(forceRefresh = false, refreshChatIds = [], options = {}) {
+    const teamId = this.resolveTeamContext(options);
     const refreshChatIdSet = new Set(refreshChatIds.filter(Boolean));
-    if (!forceRefresh && refreshChatIdSet.size === 0 && isSyncCacheFresh()) {
-      const cache2 = loadSyncCache();
+    if (!forceRefresh && refreshChatIdSet.size === 0 && isSyncCacheFresh(3e5, teamId)) {
+      const cache2 = loadSyncCache(teamId);
       if (cache2) return cache2;
     }
-    const existingCache = loadSyncCache();
+    const existingCache = loadSyncCache(teamId);
     const clientChatVersions = {};
     const clientChatIds = [];
     const clientEmbedIds = [];
@@ -9420,6 +9644,7 @@ Required: ${schema.required.join(", ")}`
     try {
       ws.send("phased_sync_request", {
         phase: "all",
+        ...teamId ? { team_id: teamId } : {},
         client_chat_versions: clientChatVersions,
         client_chat_ids: clientChatIds,
         client_embed_ids: clientEmbedIds
@@ -9542,9 +9767,9 @@ Required: ${schema.required.join(", ")}`
     const reconciledChats = reconcileAuthoritativeChats(chats, reconciliation);
     chats.splice(0, chats.length, ...reconciledChats);
     if (reconciliation.deleted_chat_ids?.length) {
-      const { createHash: createHash10 } = await import("crypto");
+      const { createHash: createHash11 } = await import("crypto");
       const deletedHashes = new Set(
-        reconciliation.deleted_chat_ids.map((id) => createHash10("sha256").update(id).digest("hex"))
+        reconciliation.deleted_chat_ids.map((id) => createHash11("sha256").update(id).digest("hex"))
       );
       const keptEmbeds = embeds.filter((embed) => !deletedHashes.has(String(embed.hashed_chat_id ?? "")));
       const keptKeys = embedKeys.filter((key) => !deletedHashes.has(String(key.hashed_chat_id ?? "")));
@@ -9558,7 +9783,7 @@ Required: ${schema.required.join(", ")}`
     );
     let persistedTaskJobIds = /* @__PURE__ */ new Set();
     try {
-      await this.persistPendingAIResponsesFromSync(ws, chats, pendingAIResponses);
+      await this.persistPendingAIResponsesFromSync(ws, chats, pendingAIResponses, teamId);
       persistedTaskJobIds = await this.persistPendingTaskUpdateJobs({
         ws,
         jobs: pendingTaskUpdateJobs,
@@ -9573,8 +9798,8 @@ Required: ${schema.required.join(", ")}`
       ws.close();
     }
     if (persistedTaskJobIds.size > 0) {
-      clearSyncCache();
-      return this.ensureSynced(true, refreshChatIds);
+      clearSyncCache(teamId);
+      return this.ensureSynced(true, refreshChatIds, { teamId });
     }
     const cache = {
       syncedAt: Date.now(),
@@ -9586,10 +9811,10 @@ Required: ${schema.required.join(", ")}`
       chatKeyWrappers,
       newChatSuggestions
     };
-    saveSyncCache(cache);
+    saveSyncCache(cache, teamId);
     return cache;
   }
-  async persistPendingAIResponsesFromSync(ws, chats, pendingResponses) {
+  async persistPendingAIResponsesFromSync(ws, chats, pendingResponses, teamId) {
     if (pendingResponses.length === 0) return;
     const masterKey = this.getMasterKeyBytes();
     for (const pending of pendingResponses) {
@@ -9615,7 +9840,7 @@ Required: ${schema.required.join(", ")}`
         } catch {
         }
       }
-      const chatKeyBytes = await this.resolveChatKey(loadSyncCache(), chat, masterKey);
+      const chatKeyBytes = await this.resolveChatKey(loadSyncCache(teamId), chat, masterKey);
       if (!chatKeyBytes) continue;
       const completedAt = normalizeUnixSeconds(
         pending.fired_at,
@@ -10000,6 +10225,70 @@ var APP_SKILL_METADATA = [
       "properties": {}
     }
   },
+  {
+    "app_id": "design",
+    "skill_id": "search_icons",
+    "app_namespace_ts": "design",
+    "skill_method_ts": "searchIcons",
+    "app_namespace_py": "design",
+    "skill_method_py": "search_icons",
+    "description_key": "app_skills.design.search_icons.description",
+    "description": "Search for free SVG icons for UI, product, interface, or graphic design. Use this when the user asks to find icons by name, concept, object, or action. Do not use it for brand-logo search or generated icon creation.",
+    "schema": {
+      "type": "object",
+      "properties": {
+        "requests": {
+          "type": "array",
+          "description": "Array of icon search requests backed by Iconify.",
+          "items": {
+            "type": "object",
+            "properties": {
+              "query": {
+                "type": "string",
+                "description": 'Search query, e.g. "home", "calendar", or "settings".'
+              },
+              "count": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 50,
+                "default": 24,
+                "description": "Maximum number of icon results to return."
+              },
+              "license_policy": {
+                "type": "string",
+                "enum": [
+                  "permissive",
+                  "all"
+                ],
+                "default": "permissive",
+                "description": "Filter to permissive/no-attribution licenses by default."
+              },
+              "include_prefixes": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Optional Iconify collection prefixes to include."
+              },
+              "exclude_prefixes": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Optional Iconify collection prefixes to exclude."
+              }
+            },
+            "required": [
+              "query"
+            ]
+          }
+        }
+      },
+      "required": [
+        "requests"
+      ]
+    }
+  },
   {
     "app_id": "electronics",
     "skill_id": "search_components",
@@ -13180,6 +13469,20 @@ var CodeAppSkills = class {
     return this.runSkill("code", "search_repos", input);
   }
 };
+var DesignAppSkills = class {
+  runSkill;
+  constructor(runSkill) {
+    this.runSkill = runSkill;
+  }
+  /**
+   * Search for free SVG icons for UI, product, interface, or graphic design. Use this when the user asks to find icons by name, concept, object, or action. Do not use it for brand-logo search or generated icon creation.
+   * Description key: app_skills.design.search_icons.description
+   * Skill: design/search_icons
+   */
+  async searchIcons(input) {
+    return this.runSkill("design", "search_icons", input);
+  }
+};
 var ElectronicsAppSkills = class {
   runSkill;
   constructor(runSkill) {
@@ -13673,6 +13976,7 @@ var GeneratedAppSkills = class {
     this.ai = new AiAppSkills(runSkill);
     this.books = new BooksAppSkills(runSkill);
     this.code = new CodeAppSkills(runSkill);
+    this.design = new DesignAppSkills(runSkill);
     this.electronics = new ElectronicsAppSkills(runSkill);
     this.events = new EventsAppSkills(runSkill);
     this.fitness = new FitnessAppSkills(runSkill);
@@ -13701,6 +14005,7 @@ var GeneratedAppSkills = class {
   ai;
   books;
   code;
+  design;
   electronics;
   events;
   fitness;
@@ -13729,7 +14034,7 @@ var GeneratedAppSkills = class {
 
 // src/sdk.ts
 import { decode as toonDecode } from "@toon-format/toon";
-import { createHash as createHash7, randomBytes as randomBytes3, randomUUID as randomUUID6 } from "crypto";
+import { createHash as createHash8, randomBytes as randomBytes4, randomUUID as randomUUID6 } from "crypto";
 import { chmodSync as chmodSync2, existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir4 } from "os";
 import { dirname, join as join3 } from "path";
@@ -13867,7 +14172,7 @@ var OpenMates = class {
   }
   async resolveEmbedKeyForShare(embedKeys, embedId) {
     const masterKey = await this.getMasterKey();
-    const hashedEmbedId = createHash7("sha256").update(embedId).digest("hex");
+    const hashedEmbedId = createHash8("sha256").update(embedId).digest("hex");
     return this.resolveLoadedEmbedKey(embedKeys, hashedEmbedId, masterKey, masterKey);
   }
   async decryptChatMetadata(chat, chatKeyWrappers) {
@@ -13924,7 +14229,7 @@ var OpenMates = class {
   }
   async resolveLoadedChatKey(chat, chatKeyWrappers) {
     const masterKey = await this.getMasterKey();
-    const hashedChatId = createHash7("sha256").update(chat.id).digest("hex");
+    const hashedChatId = createHash8("sha256").update(chat.id).digest("hex");
     const wrapper = (chatKeyWrappers ?? []).find(
       (entry) => entry.key_type === "master" && entry.hashed_chat_id === hashedChatId && typeof entry.encrypted_chat_key === "string"
     );
@@ -13938,7 +14243,7 @@ var OpenMates = class {
       if (!embedId) {
         return { ...embed };
       }
-      const hashedEmbedId = createHash7("sha256").update(embedId).digest("hex");
+      const hashedEmbedId = createHash8("sha256").update(embedId).digest("hex");
       const embedKey = await this.resolveLoadedEmbedKey(embedKeys, hashedEmbedId, masterKey, chatKey);
       if (!embedKey) {
         return { ...embed };
@@ -14171,7 +14476,7 @@ var OpenMatesChats = class {
       encryptedChatKey = chat.encrypted_chat_key;
       expectedMessagesV = Number(chat.messages_v ?? 0);
     } else {
-      chatKey = new Uint8Array(randomBytes3(32));
+      chatKey = new Uint8Array(randomBytes4(32));
       encryptedChatKey = await encryptBytesWithAesGcm(chatKey, masterKey);
       encryptedChatMetadata = {
         encrypted_title: await encryptWithAesGcmCombined(options.title ?? message.slice(0, 80), chatKey),
@@ -16024,7 +16329,7 @@ var OutputRedactor = class {
 import { readFileSync as readFileSync5, statSync, existsSync as existsSync6 } from "fs";
 import { basename, extname, resolve as resolve2 } from "path";
 import { homedir as homedir5 } from "os";
-import { createHash as createHash8 } from "crypto";
+import { createHash as createHash9 } from "crypto";
 var MAX_PER_FILE_SIZE = 100 * 1024 * 1024;
 var BLOCKED_EXTENSIONS = /* @__PURE__ */ new Set([
   ".pem",
@@ -16334,7 +16639,7 @@ function processCodeFile(filePath, filename, redactor) {
       line_count: lineCount
     });
     const textPreview = `${filename} (${language}, ${lineCount} lines)`;
-    const contentHash = createHash8("sha256").update(content).digest("hex");
+    const contentHash = createHash9("sha256").update(content).digest("hex");
     const embed = {
       embedId,
       embedRef,
@@ -17889,7 +18194,7 @@ function formatTs(ts) {
 
 // src/server.ts
 import { execFileSync as execFileSync2, execSync, spawn as nodeSpawn, spawnSync } from "child_process";
-import { createHash as createHash9, randomBytes as randomBytes4 } from "crypto";
+import { createHash as createHash10, randomBytes as randomBytes5 } from "crypto";
 import { chmodSync as chmodSync3, closeSync, copyFileSync, cpSync, existsSync as existsSync7, mkdirSync as mkdirSync4, mkdtempSync, openSync, readFileSync as readFileSync6, readSync, readdirSync, rmSync as rmSync3, writeFileSync as writeFileSync4 } from "fs";
 import { createInterface as createInterface3 } from "readline";
 import { createInterface as createPromptInterface } from "readline/promises";
@@ -18507,10 +18812,10 @@ function resolveTargetImageTag(flags, currentTag, packageVersion) {
   return { tag: getDefaultImageTagForVersion(packageVersion) };
 }
 function randomHex(bytes) {
-  return randomBytes4(bytes).toString("hex");
+  return randomBytes5(bytes).toString("hex");
 }
 function generateInviteCode() {
-  const digits = Array.from(randomBytes4(12), (byte) => String(byte % 10)).join("");
+  const digits = Array.from(randomBytes5(12), (byte) => String(byte % 10)).join("");
   return `${digits.slice(0, 4)}-${digits.slice(4, 8)}-${digits.slice(8, 12)}`;
 }
 function getEnvVar(content, name) {
@@ -18554,7 +18859,7 @@ function packagedCaddyTemplatePath(role) {
 }
 function fileHash(path) {
   if (!existsSync7(path)) return null;
-  return createHash9("sha256").update(readFileSync6(path)).digest("hex");
+  return createHash10("sha256").update(readFileSync6(path)).digest("hex");
 }
 async function loadSelfHostComposeTemplate(templateRef, role) {
   const templateDir = process.env.OPENMATES_SELFHOST_TEMPLATE_DIR;
@@ -18940,7 +19245,7 @@ function formatSecretPreflight(preflight) {
   return parts.join("; ");
 }
 function hashFile(path) {
-  const hash = createHash9("sha256");
+  const hash = createHash10("sha256");
   const fd = openSync(path, "r");
   const buffer = Buffer.allocUnsafe(CHECKSUM_BUFFER_BYTES);
   try {
@@ -45934,7 +46239,7 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
             text: "Web, search, and content retrieval (only when you use a web or search skill)"
           },
           description: {
-            text: "These providers are only used when you invoke a web, videos, news, or web-read skill. They see the content of what you search for or the URLs you ask to read, but no user identifier \u2014 they do not know which OpenMates user made each request."
+            text: "These providers are only used when you invoke a web, videos, news, web-read, or design icon search skill. They see the content of what you search for, the URLs you ask to read, or the public icon identifiers you ask to preview, but no user identifier \u2014 they do not know which OpenMates user made each request."
           },
           brave: {
             heading: {
@@ -45952,6 +46257,14 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
               text: "Firecrawl powers the web read skill, scraping and extracting content from web pages you ask about. Firecrawl sees the URL you requested and the full content of the scraped page."
             }
           },
+          iconify: {
+            heading: {
+              text: "Iconify (public SVG icon search)"
+            },
+            description: {
+              text: "Iconify powers the design.search_icons skill. Iconify sees icon search queries and the icon collection/name needed to fetch SVG previews, but no OpenMates user identifier. OpenMates fetches Iconify data server-side and clients do not call Iconify directly."
+            }
+          },
           webshare: {
             heading: {
               text: "Webshare (rotating proxy)"
@@ -58078,6 +58391,10 @@ async function main() {
       printTasksHelp();
       return;
     }
+    if (command === "teams") {
+      printTeamsHelp();
+      return;
+    }
     if (command === "connected-accounts") {
       printConnectedAccountsHelp();
       return;
@@ -58200,6 +58517,10 @@ async function main() {
     await handleTasks(client, subcommand, rest, parsed.flags);
     return;
   }
+  if (command === "teams") {
+    await handleTeams(client, subcommand, rest, parsed.flags);
+    return;
+  }
   if (command === "drafts") {
     await handleDrafts(client, subcommand, rest, parsed.flags);
     return;
@@ -58469,11 +58790,12 @@ function taskScopeFromFlags(flags, masterKey) {
     projectId: typeof flags.project === "string" ? flags.project : void 0,
     planId: typeof flags.plan === "string" ? flags.plan : void 0,
     labelHashes: labelHashes(masterKey, labelFlags(flags)),
-    priority: typeof flags.priority === "string" ? normalizeTaskPriority(flags.priority) : void 0
+    priority: typeof flags.priority === "string" ? normalizeTaskPriority(flags.priority) : void 0,
+    ...teamContextFromFlags(flags)
   };
 }
 async function loadTasks(client, masterKey, scope) {
-  const records = await client.listUserTasks({ status: scope.status, chatId: scope.chatId, projectId: scope.projectId, labelHashes: scope.labelHashes, priority: scope.priority });
+  const records = await client.listUserTasks({ status: scope.status, chatId: scope.chatId, projectId: scope.projectId, labelHashes: scope.labelHashes, priority: scope.priority, teamId: scope.teamId, personal: scope.personal });
   const tasks = await decryptUserTasks(records, masterKey);
   return scope.planId ? tasks.filter((task) => task.planId === scope.planId) : tasks;
 }
@@ -58488,6 +58810,252 @@ function printTaskOutput(task, flags) {
   if (flags.json === true) printJson2({ task: taskToJson(task) });
   else console.log(renderTaskDetail(task));
 }
+async function handleTeams(client, subcommand, rest, flags) {
+  if (!subcommand || subcommand === "help" || flags.help === true) {
+    printTeamsHelp();
+    return;
+  }
+  if (subcommand === "list") {
+    const teams = await client.listTeams();
+    printTeamsOutput(teams, client.getActiveTeamId(), flags);
+    return;
+  }
+  if (subcommand === "switch") {
+    const teamId = requireTeamId(rest, flags);
+    client.setActiveTeamId(teamId);
+    if (flags.json === true) printJson2({ active_team_id: teamId, context: "team" });
+    else console.log(`Active team: ${teamId}`);
+    return;
+  }
+  if (subcommand === "personal") {
+    client.setActiveTeamId(null);
+    if (flags.json === true) printJson2({ active_team_id: null, context: "personal" });
+    else console.log("Active context: personal");
+    return;
+  }
+  if (subcommand === "show") {
+    const teamId = requireTeamId(rest, flags);
+    const team = await client.getTeam(teamId);
+    if (flags.json === true) printJson2({ team, active_team_id: client.getActiveTeamId() });
+    else printTeamRecord(team, client.getActiveTeamId());
+    return;
+  }
+  if (subcommand === "create") {
+    const name = requiredStringFlag(flags.name, "--name <name>");
+    const team = await client.createTeam({
+      name,
+      description: typeof flags.description === "string" ? flags.description : void 0,
+      slug: typeof flags.slug === "string" ? flags.slug : void 0
+    });
+    if (flags.switch === true || flags.activate === true) {
+      const teamId = team.team_id ?? team.id;
+      if (typeof teamId === "string") client.setActiveTeamId(teamId);
+    }
+    if (flags.json === true) printJson2({ team, active_team_id: client.getActiveTeamId() });
+    else printTeamRecord(team, client.getActiveTeamId());
+    return;
+  }
+  if (subcommand === "update") {
+    const teamId = requireTeamId(rest, flags);
+    const patch = {};
+    if (typeof flags.name === "string") patch.encrypted_name = flags.name;
+    if (typeof flags.description === "string") patch.encrypted_description = flags.description;
+    if (typeof flags.slug === "string") patch.slug = flags.slug;
+    if (Object.keys(patch).length === 0) throw new Error("Nothing to update. Provide --name, --description, or --slug.");
+    const team = await client.updateTeam(teamId, patch);
+    if (flags.json === true) printJson2({ team });
+    else printTeamRecord(team, client.getActiveTeamId());
+    return;
+  }
+  if (subcommand === "delete") {
+    const teamId = requireTeamId(rest, flags);
+    if (flags.yes !== true && flags.confirm !== true) throw new Error("Deleting a team requires --yes.");
+    const result = await client.deleteTeam(teamId);
+    if (client.getActiveTeamId() === teamId) client.setActiveTeamId(null);
+    if (flags.json === true) printJson2(result);
+    else console.log(`Team deleted: ${teamId}`);
+    return;
+  }
+  if (subcommand === "invite") {
+    const teamId = requireTeamId(rest, flags);
+    const input = {};
+    if (typeof flags.email === "string") input.recipient_email = flags.email;
+    if (typeof flags.user === "string") input.invitee_user_id = flags.user;
+    if (typeof flags["encrypted-recipient-hint"] === "string") input.encrypted_recipient_hint = flags["encrypted-recipient-hint"];
+    if (typeof flags["expires-at"] === "string") input.expires_at = Number.parseInt(flags["expires-at"], 10);
+    input.role = parseTeamInviteRole(flags.role);
+    const invite = await client.createTeamInvite(teamId, input);
+    if (flags.json === true) printJson2({ invite });
+    else printJson2(invite);
+    return;
+  }
+  if (subcommand === "accept-invite") {
+    const inviteId = requiredStringFlag(flags.invite ?? rest[0], "<invite-id>");
+    const result = await client.acceptTeamInvite(inviteId);
+    if (flags.json === true) printJson2(result);
+    else printJson2(result);
+    return;
+  }
+  if (subcommand === "decline-invite") {
+    const inviteId = requiredStringFlag(flags.invite ?? rest[0], "<invite-id>");
+    const result = await client.declineTeamInvite(inviteId);
+    if (flags.json === true) printJson2(result);
+    else console.log("Team invite declined.");
+    return;
+  }
+  if (subcommand === "access-requests") {
+    const teamId = requireTeamId(rest, flags);
+    const status = typeof flags.status === "string" ? flags.status : void 0;
+    const accessRequests = await client.listTeamAccessRequests(teamId, status);
+    if (flags.json === true) printJson2({ access_requests: accessRequests });
+    else printJson2(accessRequests);
+    return;
+  }
+  if (subcommand === "approve-access") {
+    const teamId = requireTeamId(rest, flags);
+    const accessRequestId = requiredStringFlag(flags.request ?? flags["access-request"] ?? rest[1], "<access-request-id>");
+    const encryptedTeamKey = requiredStringFlag(flags["encrypted-team-key"], "--encrypted-team-key <value>");
+    const membership = await client.approveTeamAccessRequest(teamId, accessRequestId, encryptedTeamKey);
+    if (flags.json === true) printJson2({ membership });
+    else printJson2(membership);
+    return;
+  }
+  if (subcommand === "reject-access") {
+    const teamId = requireTeamId(rest, flags);
+    const accessRequestId = requiredStringFlag(flags.request ?? flags["access-request"] ?? rest[1], "<access-request-id>");
+    const result = await client.rejectTeamAccessRequest(teamId, accessRequestId);
+    if (flags.json === true) printJson2(result);
+    else console.log(`Team access request rejected: ${accessRequestId}`);
+    return;
+  }
+  if (subcommand === "role") {
+    const teamId = requireTeamId(rest, flags);
+    const memberUserId = requiredStringFlag(flags.user ?? rest[1], "--user <user-id>");
+    const role = parseTeamAssignableRole(flags.role);
+    const membership = await client.updateTeamMemberRole(teamId, memberUserId, role);
+    if (flags.json === true) printJson2({ membership });
+    else printJson2(membership);
+    return;
+  }
+  if (subcommand === "remove-member") {
+    const teamId = requireTeamId(rest, flags);
+    const memberUserId = requiredStringFlag(flags.user ?? rest[1], "--user <user-id>");
+    const result = await client.removeTeamMember(teamId, memberUserId);
+    if (flags.json === true) printJson2(result);
+    else console.log(`Team member removed: ${memberUserId}`);
+    return;
+  }
+  if (subcommand === "billing") {
+    const teamId = requireTeamId(rest, flags);
+    const billing = await client.getTeamBilling(teamId);
+    if (flags.json === true) printJson2({ billing });
+    else printJson2(billing);
+    return;
+  }
+  if (subcommand === "add-credits") {
+    const teamId = requireTeamId(rest, flags);
+    const credits = requiredNumberFlag(flags.credits, "--credits <amount>");
+    const billing = await client.addTeamCredits(teamId, { credits });
+    if (flags.json === true) printJson2({ billing });
+    else printJson2(billing);
+    return;
+  }
+  if (subcommand === "usage") {
+    const teamId = requireTeamId(rest, flags);
+    const usage = await client.listTeamUsage(teamId, typeof flags.user === "string" ? flags.user : void 0);
+    if (flags.json === true) printJson2({ usage });
+    else printJson2(usage);
+    return;
+  }
+  if (subcommand === "move") {
+    const teamId = requireTeamId(rest, flags);
+    const workspaceType = parseWorkspaceMoveType(flags.type ?? rest[1]);
+    const objectId = requiredStringFlag(flags.id ?? rest[2], "--id <resource-id>");
+    if (flags.yes !== true && flags.confirm !== true) throw new Error("Moving a workspace resource requires --yes.");
+    const result = await client.moveWorkspaceToTeam(workspaceType, objectId, teamId);
+    if (flags.json === true) printJson2(result);
+    else console.log(`${workspaceType} moved to team ${teamId}: ${objectId}`);
+    return;
+  }
+  if (subcommand === "export") {
+    const teamId = requireTeamId(rest, flags);
+    const output = requiredStringFlag(flags.output, "--output <path>");
+    const result = await client.exportTeamData(teamId);
+    const artifact = result.artifact && typeof result.artifact === "object" ? result.artifact : result;
+    writeFileSync7(output, `${JSON.stringify(artifact, null, 2)}
+`, { encoding: "utf-8", mode: 384 });
+    if (flags.json === true) printJson2({ ...result, output });
+    else console.log(`Team export written: ${output}`);
+    return;
+  }
+  if (subcommand === "import") {
+    const file = requiredStringFlag(flags.file ?? rest[0], "--file <path>");
+    const artifact = JSON.parse(readFileSync10(file, "utf-8"));
+    let teamId = typeof flags.team === "string" ? flags.team : typeof flags["destination-team"] === "string" ? flags["destination-team"] : void 0;
+    if (!teamId && typeof flags["new-team-name"] === "string") {
+      const team = await client.createTeam({ name: flags["new-team-name"] });
+      teamId = typeof team.team_id === "string" ? team.team_id : typeof team.id === "string" ? team.id : void 0;
+    }
+    if (!teamId) throw new Error("Team import requires --team <team-id> or --new-team-name <name>.");
+    const result = await client.importTeamData(teamId, artifact);
+    if (flags.json === true) printJson2(result);
+    else printJson2(result);
+    return;
+  }
+  throw new Error(`Unknown teams command '${subcommand}'. Run 'openmates teams --help'.`);
+}
+function requireTeamId(rest, flags) {
+  return requiredStringFlag(flags.team ?? flags["team-id"] ?? rest[0], "--team <team-id>");
+}
+function requiredStringFlag(value, label) {
+  if (typeof value !== "string" || value.trim().length === 0) throw new Error(`Missing ${label}.`);
+  return value.trim();
+}
+function requiredNumberFlag(value, label) {
+  const raw = requiredStringFlag(value, label);
+  const parsed = Number(raw);
+  if (!Number.isFinite(parsed) || parsed <= 0) throw new Error(`Invalid ${label}: ${raw}`);
+  return parsed;
+}
+function parseTeamInviteRole(value) {
+  if (value === void 0 || value === false) return "member";
+  return parseTeamAssignableRole(value);
+}
+function parseTeamAssignableRole(value) {
+  const role = requiredStringFlag(value, "--role <admin|member|viewer>");
+  if (role === "admin" || role === "member" || role === "viewer") return role;
+  throw new Error("Team role must be admin, member, or viewer.");
+}
+function parseWorkspaceMoveType(value) {
+  const type = requiredStringFlag(value, "--type <chat|project|task|plan|workflow>");
+  if (type === "chat" || type === "project" || type === "task" || type === "plan" || type === "workflow") return type;
+  throw new Error("Workspace type must be chat, project, task, plan, or workflow.");
+}
+function teamContextFromFlags(flags) {
+  if (flags.personal === true) return { personal: true };
+  if (typeof flags.team === "string") return { teamId: flags.team };
+  if (typeof flags["team-id"] === "string") return { teamId: flags["team-id"] };
+  return {};
+}
+function printTeamsOutput(teams, activeTeamId, flags) {
+  if (flags.json === true) {
+    printJson2({ teams, active_team_id: activeTeamId });
+    return;
+  }
+  if (teams.length === 0) {
+    console.log("No teams.");
+    return;
+  }
+  for (const team of teams) printTeamRecord(team, activeTeamId);
+}
+function printTeamRecord(team, activeTeamId) {
+  const teamId = typeof team.team_id === "string" ? team.team_id : typeof team.id === "string" ? team.id : "unknown";
+  const activeMarker = activeTeamId === teamId ? " *" : "";
+  console.log(`${teamId}${activeMarker}`);
+  if (typeof team.slug === "string") kv("slug", team.slug);
+  if (typeof team.role === "string") kv("role", team.role);
+  if (typeof team.status === "string") kv("status", team.status);
+}
 function taskToJson(task) {
   return {
     task_id: task.taskId,
@@ -58693,6 +59261,7 @@ async function handleChats(client, subcommand, rest, flags, redactor) {
     return;
   }
   const apiKey = resolveApiKey(flags) ?? void 0;
+  const teamContext = teamContextFromFlags(flags);
   if (rest[0] === "tasks") {
     await handleTasks(client, rest[1], rest.slice(2), { ...flags, chat: subcommand });
     return;
@@ -58700,7 +59269,7 @@ async function handleChats(client, subcommand, rest, flags, redactor) {
   if (subcommand === "list") {
     const limit = typeof flags.limit === "string" ? parseInt(flags.limit, 10) : 10;
     const page = typeof flags.page === "string" ? parseInt(flags.page, 10) : 1;
-    const result = apiKey ? await listApiKeyChats(client, apiKey, limit, page) : client.hasSession() ? await client.listChats(limit, page) : listExampleChats(limit, page);
+    const result = apiKey ? await listApiKeyChats(client, apiKey, limit, page) : client.hasSession() ? await client.listChats(limit, page, teamContext) : listExampleChats(limit, page);
     if (flags.json === true) {
       printJson2(result);
     } else {
@@ -58714,7 +59283,7 @@ async function handleChats(client, subcommand, rest, flags, redactor) {
       throw new Error(
         "Missing search query. Usage: openmates chats search <query>"
       );
-    const result = apiKey ? await searchApiKeyChats(client, apiKey, query) : client.hasSession() ? await client.searchChats(query) : searchExampleChats(query);
+    const result = apiKey ? await searchApiKeyChats(client, apiKey, query) : client.hasSession() ? await client.searchChats(query, teamContext) : searchExampleChats(query);
     if (flags.json === true) {
       printJson2(result);
     } else {
@@ -58746,6 +59315,7 @@ async function handleChats(client, subcommand, rest, flags, redactor) {
         acceptTaskProposals: flags["accept-task-proposals"] === true,
         piiDetection: flags["no-pii-detection"] !== true,
         responseTimeoutMs: parseResponseTimeoutMs(flags),
+        ...teamContext,
         anonymousLearningMode: client.hasSession() ? void 0 : parseAnonymousLearningModeFlags(flags)
       },
       redactor
@@ -58771,14 +59341,14 @@ async function handleChats(client, subcommand, rest, flags, redactor) {
         );
         process.exit(1);
       }
-      const fullId = await client.resolveFullChatId(chatId).catch(() => void 0);
+      const fullId = await client.resolveFullChatId(chatId, teamContext).catch(() => void 0);
       if (!fullId) {
         console.error(
           `Chat '${chatId}' not found. Run 'openmates chats list' to see available chats.`
         );
         process.exit(1);
       }
-      const suggestions = await client.getChatFollowUpSuggestions(fullId);
+      const suggestions = await client.getChatFollowUpSuggestions(fullId, teamContext);
       if (suggestions.length === 0) {
         console.error(
           `No follow-up suggestions stored for chat '${chatId}'.
@@ -58822,7 +59392,8 @@ Run 'openmates chats show ` + chatId + "' to check if suggestions have been save
         autoApproveMemories: flags["auto-approve-memories"] === true,
         acceptTaskProposals: flags["accept-task-proposals"] === true,
         piiDetection: flags["no-pii-detection"] !== true,
-        responseTimeoutMs: parseResponseTimeoutMs(flags)
+        responseTimeoutMs: parseResponseTimeoutMs(flags),
+        ...teamContext
       },
       redactor
     );
@@ -58852,7 +59423,8 @@ Run 'openmates chats show ` + chatId + "' to check if suggestions have been save
         autoApproveMemories: flags["auto-approve-memories"] === true,
         acceptTaskProposals: flags["accept-task-proposals"] === true,
         piiDetection: flags["no-pii-detection"] !== true,
-        responseTimeoutMs: parseResponseTimeoutMs(flags)
+        responseTimeoutMs: parseResponseTimeoutMs(flags),
+        ...teamContext
       },
       redactor
     );
@@ -58918,14 +59490,14 @@ Run 'openmates chats show ` + chatId + "' to check if suggestions have been save
       }
       return;
     }
-    const { chat, messages } = await client.getChatMessages(resolvedId);
+    const { chat, messages } = await client.getChatMessages(resolvedId, teamContext);
     if (flags.json === true) {
-      const followUpSuggestions = await client.getChatFollowUpSuggestions(chat.id).catch(() => []);
+      const followUpSuggestions = await client.getChatFollowUpSuggestions(chat.id, teamContext).catch(() => []);
       printJson2({ chat, messages, follow_up_suggestions: followUpSuggestions });
     } else if (flags.raw === true) {
       await printChatConversationRaw(chat, messages);
     } else {
-      const followUpSuggestions = await client.getChatFollowUpSuggestions(chat.id).catch(() => []);
+      const followUpSuggestions = await client.getChatFollowUpSuggestions(chat.id, teamContext).catch(() => []);
       await printChatConversation(client, chat, messages, followUpSuggestions);
     }
     return;
@@ -58940,7 +59512,7 @@ Run 'openmates chats show ` + chatId + "' to check if suggestions have been save
     const resolved = [];
     for (const id of chatIds) {
       try {
-        const { chat } = await client.getChatMessages(id);
+        const { chat } = await client.getChatMessages(id, teamContext);
         resolved.push({ input: id, title: chat.title ?? null });
       } catch {
         resolved.push({ input: id, title: null });
@@ -58980,7 +59552,7 @@ Run 'openmates chats show ` + chatId + "' to check if suggestions have been save
             { confirmed: true }
           );
         } else {
-          await client.deleteChat(r.input);
+          await client.deleteChat(r.input, teamContext);
         }
         const label = r.title ? `"${r.title}"` : r.input;
         process.stdout.write(`  \x1B[32m\u2713\x1B[0m Deleted ${label}
@@ -59006,7 +59578,7 @@ ${deleted}/${resolved.length} chat(s) deleted.`);
       process.exit(1);
     }
     const resolvedId = chatId.toLowerCase() === "last" ? "__last__" : chatId;
-    const { chat, messages } = await client.getChatMessages(resolvedId);
+    const { chat, messages } = await client.getChatMessages(resolvedId, teamContext);
     const outputDir = typeof flags.output === "string" ? flags.output : process.cwd();
     const useZip = flags.zip === true;
     const timestampMs = chat.updatedAt && chat.updatedAt < 1e12 ? chat.updatedAt * 1e3 : chat.updatedAt ?? Date.now();
@@ -59316,7 +59888,7 @@ ${deleted}/${resolved.length} chat(s) deleted.`);
       );
       process.exit(1);
     }
-    const result = await client.listChats(n, 1);
+    const result = await client.listChats(n, 1, teamContext);
     if (result.total === 0) {
       console.error(
         "No chats found. Run 'openmates chats list' to sync."
@@ -59537,7 +60109,7 @@ async function handleWorkflows(client, subcommand, rest, flags) {
     return;
   }
   if (subcommand === "list") {
-    const workflows = await client.listWorkflows();
+    const workflows = await client.listWorkflows(teamContextFromFlags(flags));
     if (flags.json === true) {
       printJson2(workflows);
     } else {
@@ -59681,7 +60253,7 @@ async function handleWorkflows(client, subcommand, rest, flags) {
   if (subcommand === "show") {
     const workflowId = rest[0];
     if (!workflowId) throw new Error("Missing workflow ID. Example: openmates workflows show <id>");
-    const workflow = await client.getWorkflow(workflowId);
+    const workflow = await client.getWorkflow(workflowId, teamContextFromFlags(flags));
     if (flags.json === true) {
       printJson2(workflow);
     } else {
@@ -61334,8 +61906,8 @@ async function writeSecretFile(filePath, content, force = false) {
   return filePath;
 }
 async function generateProvisioningPassword() {
-  const { randomBytes: randomBytes5 } = await import("crypto");
-  return `OM-${randomBytes5(18).toString("base64url")}-aA2#`;
+  const { randomBytes: randomBytes6 } = await import("crypto");
+  return `OM-${randomBytes6(18).toString("base64url")}-aA2#`;
 }
 function decodeBase32(input) {
   const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
@@ -62153,7 +62725,7 @@ async function handleMemories(client, rest, flags) {
   if (action === "list") {
     const appId = typeof flags["app-id"] === "string" ? flags["app-id"] : null;
     const itemType = typeof flags["item-type"] === "string" ? flags["item-type"] : null;
-    let result = await client.listMemories();
+    let result = await client.listMemories(teamContextFromFlags(flags));
     if (appId) result = result.filter((m) => m.app_id === appId);
     if (itemType) result = result.filter((m) => m.item_type === itemType);
     if (flags.json === true) {
@@ -62200,7 +62772,7 @@ Example: --data '{"name":"Python","proficiency":"advanced"}'`
       process.exit(1);
     }
     const itemValue = JSON.parse(dataRaw);
-    const result = await client.createMemory({ appId, itemType, itemValue });
+    const result = await client.createMemory({ appId, itemType, itemValue, ...teamContextFromFlags(flags) });
     if (flags.json === true) {
       printJson2(result);
     } else {
@@ -62232,7 +62804,8 @@ Example: --data '{"name":"Python","proficiency":"advanced"}'`
       appId,
       itemType,
       itemValue,
-      currentVersion
+      currentVersion,
+      ...teamContextFromFlags(flags)
     });
     if (flags.json === true) {
       printJson2(result);
@@ -62251,7 +62824,7 @@ Example: --data '{"name":"Python","proficiency":"advanced"}'`
       );
       process.exit(1);
     }
-    const result = await client.deleteMemory(entryId);
+    const result = await client.deleteMemory(entryId, teamContextFromFlags(flags));
     if (flags.json === true) {
       printJson2(result);
     } else {
@@ -62760,6 +63333,8 @@ async function sendMessageStreaming(client, params, redactor) {
   const result = await client.sendMessage({
     message: finalMessage,
     chatId: params.chatId,
+    teamId: params.teamId,
+    personal: params.personal,
     incognito: params.incognito,
     onStream,
     onSubChatEvent,
@@ -64272,6 +64847,7 @@ Commands:
   openmates whoami [--json]                  Show account info
   openmates chats [--help]                   Chat commands (list, search, show, ...)
   openmates tasks [--help]                   Task commands (list, create, board, ...)
+  openmates teams [--help]                   Team lifecycle, membership, billing, and move commands
   openmates drafts [--help]                  Encrypted draft lifecycle commands
   openmates apps [--help]                    App skill commands (list, run, ...)
   openmates workflows [--help]               Server-side workflow commands
@@ -64584,6 +65160,35 @@ Notes:
   Labels organize tasks privately. --tag, --tags, --add-tag, and --remove-tag are accepted aliases.
   Normal output decrypts task title, description, and labels locally; use --json for machine-readable plaintext fields.`);
 }
+function printTeamsHelp() {
+  console.log(`Teams commands:
+  openmates teams list [--json]
+  openmates teams switch <team-id> [--json]
+  openmates teams personal [--json]
+  openmates teams show <team-id> [--json]
+  openmates teams create --name <name> [--description <description>] [--slug <slug>] [--switch] [--json]
+  openmates teams update <team-id> [--name <encrypted-name>] [--description <encrypted-description>] [--slug <slug>] [--json]
+  openmates teams delete <team-id> --yes [--json]
+  openmates teams invite <team-id> (--email <email>|--user <user-id>) [--role admin|member|viewer] [--json]
+  openmates teams accept-invite <invite-id> [--json]
+  openmates teams decline-invite <invite-id> [--json]
+  openmates teams access-requests <team-id> [--status pending_access_approval|all] [--json]
+  openmates teams approve-access <team-id> <access-request-id> --encrypted-team-key <value> [--json]
+  openmates teams reject-access <team-id> <access-request-id> [--json]
+  openmates teams role <team-id> --user <user-id> --role admin|member|viewer [--json]
+  openmates teams remove-member <team-id> --user <user-id> [--json]
+  openmates teams billing <team-id> [--json]
+  openmates teams add-credits <team-id> --credits <amount> [--json]
+  openmates teams usage <team-id> [--user <user-id>] [--json]
+  openmates teams move <team-id> --type chat|project|task|plan|workflow --id <resource-id> --yes [--json]
+  openmates teams export <team-id> --output <path> [--json]
+  openmates teams import --file <path> (--team <team-id>|--new-team-name <name>) [--json]
+
+Context:
+  openmates teams switch <team-id> persists the active team for team-aware commands.
+  openmates teams personal clears the active team and returns commands to personal context.
+  Team V1 only supports team-wide workspace visibility.`);
+}
 function printDraftsHelp() {
   console.log(`Draft commands:
   openmates drafts create <text> [--chat <uuid>] [--preview <text>] [--json]